# changelog

author: Tom Lane <tgl@redhat.com> 5.1.52-1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
    including numerous small security issues
  Resolves: #652554
  - Sync with current Fedora package; this includes:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig


author: Tom Lane <tgl@redhat.com> 5.1.47-4
changelog:
  - Add backported patch for CVE-2010-2008 (upstream bug 53804)
  Resolves: #614215
  - Add BuildRequires perl(Time::HiRes) ... seems to no longer be installed
    by just pulling in perl.


author: Tom Lane <tgl@redhat.com> 5.1.47-3
changelog:
  - Add -p "$mypidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #596008


author: Tom Lane <tgl@redhat.com> 5.1.47-2
changelog:
  - Add back "partition" storage engine
  Resolves: #598585
  - Fix broken "federated" storage engine plugin
  Resolves: #587170
  - Read all certificates in SSL certificate files, to support chained certs
  Resolves: #598656


author: Tom Lane <tgl@redhat.com> 5.1.47-1
changelog:
  - Update to MySQL 5.1.47, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-45.html
    including fixes for CVE-2010-1621, CVE-2010-1626,
    CVE-2010-1848, CVE-2010-1849, CVE-2010-1850
  Resolves: #590598
  - Create mysql group explicitly in pre-server script, to ensure correct GID


author: Tom Lane <tgl@redhat.com> 5.1.44-2
changelog:
  - Update to MySQL 5.1.44, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-44.html
  Resolves: #565554
  - Remove mysql.info, which is not freely redistributable
  Related: #560181
  - Revert broken upstream fix for their bug 45058
  Related: #566547
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Resolves: #557711
  Resolves: #562749


author: Tom Lane <tgl@redhat.com> 5.1.43-2
changelog:
  - Update to MySQL 5.1.43, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html
  Resolves: #565554
  - Remove mysql-cluster, which is no longer supported by upstream in this
    source distribution.  If we want it we'll need a separate SRPM for it.
  Resolves: #565210


author: Tom Lane <tgl@redhat.com> 5.1.42-7
changelog:
  - Add backported patch for CVE-2008-7247 (upstream bug 39277)
  Resolves: #549329
  - Use non-expired certificates for SSL testing (upstream bug 50702)


author: Tom Lane <tgl@redhat.com> 5.1.42-4
changelog:
  - Sync with current Fedora build, including:
  - Update to MySQL 5.1.42, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-42.html
  - Disable symbolic links by default in /etc/my.cnf
  Resolves: #553653
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines
  - Disable building the innodb plugin; it tickles assorted gcc bugs and
    doesn't seem entirely ready for prime time anyway.
  Resolves: #553632
  - Start mysqld_safe with --basedir=/usr, to avoid unwanted SELinux messages
    (see 547485)
  - Stop waiting during "service mysqld start" if mysqld_safe exits
  Resolves: #544095


author: Tom Lane <tgl@redhat.com> 5.1.41-1
changelog:
  - Update to MySQL 5.1.41, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html
    including fixes for CVE-2009-4019
  Resolves: #549327
  - Don't set old_passwords=1; we aren't being bug-compatible with 3.23 anymore
  Resolves: #540735


author: Tom Lane <tgl@redhat.com> 5.1.40-1
changelog:
  - Update to MySQL 5.1.40, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-40.html
  - Do not force the --log-error setting in mysqld init script
  Resolves: #533736


author: Tom Lane <tgl@redhat.com> 5.1.39-3
changelog:
  - Work around two different compiler bugs on sparc, one by backing off
    optimization from -O2 to -O1, and the other with a klugy patch
  Related: #529298, #529299
  - Clean up bogosity in multilib stub header support: ia64 should not be
    listed (it's not multilib), sparc and sparc64 should be


author: Tom Lane <tgl@redhat.com> 5.1.39-1
changelog:
  - Update to MySQL 5.1.39, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-39.html


author: Tom Lane <tgl@redhat.com> 5.1.37-5
changelog:
  - Work around unportable assumptions about stpcpy(); re-enable main.mysql test
  - Clean up some obsolete parameters to the configure script


author: Tom Lane <tgl@redhat.com> 5.1.37-4
changelog:
  - Remove one misguided patch; turns out I was chasing a glibc bug
  - Temporarily disable "main.mysql" test; there's something broken there too,
    but we need to get mysql built in rawhide for dependency reasons


author: Tom Lane <tgl@redhat.com> 5.1.37-2
changelog:
  - Add a couple of patches to improve the probability of the regression tests
    completing in koji builds


author: Tom Lane <tgl@redhat.com> 5.1.37-1
changelog:
  - Update to MySQL 5.1.37, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-37.html


author: Tom Lane <tgl@redhat.com> 5.1.36-1
changelog:
  - Update to MySQL 5.1.36, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-36.html


author: Tom Lane <tgl@redhat.com> 5.1.35-1
changelog:
  - Update to MySQL 5.1.35, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-35.html
  - Ensure that /var/lib/mysql is created with the right SELinux context
  Resolves: #502966


author: Tom Lane <tgl@redhat.com> 5.1.34-1
changelog:
  - Update to MySQL 5.1.34, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-34.html
  - Increase startup timeout per bug #472222


author: Tom Lane <tgl@redhat.com> 5.1.33-1
changelog:
  - Update to MySQL 5.1.33.
  - Disable use of pthread_setschedparam; doesn't work the way code expects.
  Related: #477624


author: Tom Lane <tgl@redhat.com> 5.1.30-2
changelog:
  - hm, apparently --with-innodb and --with-ndbcluster are still needed
    even though no longer documented ...


author: Tom Lane <tgl@redhat.com> 5.1.30-1
changelog:
  - Update to MySQL 5.1.30.  Note that this includes an ABI break for
    libmysqlclient (it's now got .so major version 16).
  - This also updates mysql for new openssl build


author: Tom Lane <tgl@redhat.com> 5.0.67-2
changelog:
  - Build the "embedded server" library, and package it in a new sub-RPM
    mysql-embedded, along with mysql-embedded-devel for devel support files.
  Resolves: #149829


author: Tom Lane <tgl@redhat.com> 5.0.67-1
changelog:
  - Update to mysql version 5.0.67
  - Move mysql_config's man page to base package, again (apparently I synced
    that change the wrong way while importing specfile changes for ndbcluster)


author: Tom Lane <tgl@redhat.com> 5.0.51a-2
changelog:
  - Enable ndbcluster support
  Resolves: #163758
  - Suppress odd crash messages during package build, caused by trying to
    build dbug manual (which we don't install anyway) with dbug disabled
  Resolves: #437053
  - Improve mysql.init to pass configured datadir to mysql_install_db,
    and to force user=mysql for both mysql_install_db and mysqld_safe.
  Related: #450178


author: Tom Lane <tgl@redhat.com> 5.0.45-11
changelog:
  - Fix mysql-stack-guard patch to work correctly on IA64
  - Fix mysql.init to wait correctly when socket is not in default place
  Related: #435494


author: Dennis Gilmore <dennis@ausil.us> 5.0.45-10
changelog:
  - add sparc64 to 64 bit arches for test suite checking
  - add sparc, sparcv9 and sparc64 to multilib handling


author: Tom Lane <tgl@redhat.com> 5.0.45-9
changelog:
  - Fix the stack overflow problem encountered in January.  It seems the real
  issue is that the buildfarm machines were moved to RHEL5, which uses 64K not
  4K pages on PPC, and because RHEL5 takes the guard area out of the requested
  thread stack size we no longer had enough headroom.
  Related: #435337


author: Tom Lane <tgl@redhat.com> 5.0.45-7
changelog:
  - Unbelievable ... upstream still thinks that it's a good idea to have a
    regression test that is guaranteed to begin failing come January 1.
  - ... and it seems we need to raise STACK_MIN_SIZE again too.


author: Tom Lane <tgl@redhat.com> 5.0.45-4
changelog:
  - Seems we need explicit BuildRequires on gawk and procps now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 5.0.45-2
changelog:
  - Update License tag to match code.
  - Work around recent Fedora change that makes "open" a macro name.


author: Tom Lane <tgl@redhat.com> 5.0.45-1
changelog:
  - Update to MySQL 5.0.45
  Resolves: #246535
  - Move mysql_config's man page to base package
  Resolves: #245770
  - move my_print_defaults to base RPM, for consistency with Stacks packaging
  - mysql user is no longer deleted at RPM uninstall
  Resolves: #241912


author: Tom Lane <tgl@redhat.com> 5.0.37-2
changelog:
  - Use a less hacky method of getting default values in initscript
  Related: #233771, #194596
  - Improve packaging of mysql-libs per suggestions from Remi Collet
  Resolves: #233731
  - Update default /etc/my.cnf ([mysql.server] has been bogus for a long time)


author: Tom Lane <tgl@redhat.com> 5.0.37-1
changelog:
  - Update to MySQL 5.0.37
  Resolves: #231838
  - Put client library into a separate mysql-libs RPM to reduce dependencies
  Resolves: #205630


author: Tom Lane <tgl@redhat.com> 5.0.33-1
changelog:
  - Update to MySQL 5.0.33
  - Install band-aid fix for "view" regression test designed to fail after 2006
  - Don't chmod -R the entire database directory tree on every startup
  Related: #221085
  - Fix unsafe use of install-info
  Resolves: #223713
  - Cope with new automake in F7
  Resolves: #224171


author: Tom Lane <tgl@redhat.com> 5.0.27-1
changelog:
  - Update to MySQL 5.0.27 (see CVE-2006-4031, CVE-2006-4226, CVE-2006-4227)
  Resolves: #202247, #202675, #203427, #203428, #203432, #203434, #208641
  - Fix init script to return status 1 on server start timeout
  Resolves: #203910
  - Move mysqldumpslow from base package to mysql-server
  Resolves: #193559
  - Adjust link options for BDB module
  Resolves: #199368


author: Tom Lane <tgl@redhat.com> 5.0.22-2
changelog:
  - Work around brew's tendency not to clean up failed builds completely,
    by adding code in mysql-testing.patch to kill leftover mysql daemons.


author: Tom Lane <tgl@redhat.com> 5.0.22-1
changelog:
  - Update to MySQL 5.0.22 (fixes CVE-2006-2753)
  - Install temporary workaround for gcc bug on s390x (bz #193912)


author: Tom Lane <tgl@redhat.com> 5.0.18-4
changelog:
  - Modify multilib header hack to not break non-RH arches, per bug #181335
  - Remove logrotate script, per bug #180639.
  - Add a new mysql-test RPM to carry the regression test files;
    hack up test scripts as needed to make them run in /usr/share/mysql-test.


author: Tom Lane <tgl@redhat.com> 5.0.16-1
changelog:
  - Update to MySQL 5.0.16
  - Add EXCEPTIONS-CLIENT license info to the shipped documentation
  - Make my_config.h architecture-independent for multilib installs;
    put the original my_config.h into my_config_$ARCH.h
  - Add -fwrapv to CFLAGS so that gcc 4.1 doesn't break it


author: Tom Lane <tgl@redhat.com> 4.1.12-2
changelog:
  - Fix buffer overflow newly exposed in isam code; it's the same issue
    previously found in myisam, and not very exciting, but I'm tired of
    seeing build warnings.


author: Tom Lane <tgl@redhat.com> 4.1.12-1
changelog:
  - Update to MySQL 4.1.12 (includes a fix for bz#158688, bz#158689)
  - Extend mysql-test-ssl.patch to solve rpl_openssl test failure (bz#155850)
  - Update mysql-lock-ssl.patch to match the upstream committed version
  - Add --with-isam to re-enable the old ISAM table type, per bz#159262
  - Add dependency on openssl-devel per bz#159569
  - Remove manual.txt, as upstream decided not to ship it anymore;
    it was redundant with the mysql.info file anyway.


author: Tom Lane <tgl@redhat.com> 4.1.11-3
changelog:
  - Enable openssl tests during build, per bz#155850
  - Might as well turn on --disable-dependency-tracking


author: Tom Lane <tgl@redhat.com> 4.1.11-2
changelog:
  - Avoid dependency on <asm/atomic.h>, cause it won't build anymore on ia64.
    This is probably a cleaner solution for bz#143537, too.


author: Tom Lane <tgl@redhat.com> 4.1.11-1
changelog:
  - Update to MySQL 4.1.11 to fix bz#152911 as well as other issues
  - Move perl-DBI, perl-DBD-MySQL dependencies to server package (bz#154123)
  - Override configure thread library test to suppress HAVE_LINUXTHREADS check
  - Fix BDB failure on s390x (bz#143537)
  - At last we can enable "make test" on all arches


author: Tom Lane <tgl@redhat.com> 4.1.10a-1
changelog:
  - Update to MySQL 4.1.10a to fix security vulnerabilities (bz#150868,
    for CAN-2005-0711, and bz#150871 for CAN-2005-0709, CAN-2005-0710).


author: Tom Lane <tgl@redhat.com> 4.1.10-2
changelog:
  - Need -fno-strict-aliasing in at least one place, probably more.
  - Work around some C spec violations in mysql.


author: Tom Lane <tgl@redhat.com> 4.1.7-6
changelog:
  - Fix init script to not need a valid username for startup check (bz#142328)
  - Fix init script to honor settings appearing in /etc/my.cnf (bz#76051)
  - Enable SSL (bz#142032)


author: Tom Lane <tgl@redhat.com> 4.1.7-4
changelog:
  - Turn off old_passwords in default /etc/my.cnf file, for better compatibility
    with mysql 3.x clients (per suggestion from Joe Orton).


author: Tom Lane <tgl@redhat.com> 3.23.58-13
changelog:
  - fix security issues CAN-2004-0835, CAN-2004-0836, CAN-2004-0837
    (bugs #135372, 135375, 135387)
  - fix privilege escalation on GRANT ALL ON `Foo\_Bar` (CAN-2004-0957)


author: Tom Lane <tgl@redhat.com> 3.23.58-12
changelog:
  - fix multilib problem with mysqlbug and mysql_config
  - adjust chkconfig priority per bug #128852
  - remove bogus quoting per bug #129409 (MySQL 4.0 has done likewise)
  - add sleep to mysql.init restart(); may or may not fix bug #133993


author: Tom Lane <tgl@redhat.com> 3.23.58-11
changelog:
  - fix low-priority security issues CAN-2004-0388, CAN-2004-0381, CAN-2004-0457
    (bugs #119442, 125991, 130347, 130348)
  - fix bug with dropping databases under recent kernels (bug #124352)


author: Tom Lane <tgl@redhat.com> 3.23.58-8
changelog:
  - repair logfile attributes in %files, per bug #102190
  - repair quoting problem in mysqlhotcopy, per bug #112693
  - repair missing flush in mysql_setpermission, per bug #113960
  - repair broken error message printf, per bug #115165
  - delete mysql user during uninstall, per bug #117017
  - rebuilt


author: Patrick Macdonald <patrickm@redhat.com> 3.23.57-1
changelog:
  - revert to prior version of MySQL due to license incompatibilities 
    with packages that link against the client.  The MySQL folks are
    looking into the issue.


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.52-2
changelog:
  - Add --enable-local-infile to configure - a new option
    which doesn't default to the old behaviour (#72885)


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.49-3
changelog:
  - Add the various .cnf examples as doc files to mysql-server (#60349)
  - Don't include manual.ps, it's just 200 bytes with a URL inside (#60349)
  - Don't include random files in /usr/share/mysql (#60349)
  - langify (#60349)


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.47-4
changelog:
  - Use kill, not mysqladmin, to flush logs and shut down. Thus, 
    an admin password can be set with no problems.
  - Remove reload from init script


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.46-1
changelog:
  - 3.23.46
  - use -fno-rtti and -fno-exceptions, and set CXX to increase stability. 
    Recommended by mysql developers.


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.41-1
changelog:
  - 3.23.41 bugfix release
  - disable innodb, to avoid the broken updates
  - Use "mysqladmin flush_logs" instead of kill -HUP in logrotate 
    script (#51711)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - Reenable test, but don't run them for s390, s390x or ia64
  - Make /etc/my.cnf config(noplace). Same for /etc/logrotate.d/mysqld


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - Make it obsolete our 6.2 PowerTools packages
  - 3.23.36 bugfix release - fixes some security issues
    which didn't apply to our standard configuration
  - Make "make test" part of the build process, except on IA64
    (it fails there)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - gettextize
  - move the items in Requires(post): to Requires: in preparation
    for an errata for 7.0 when 3.23.31 is released
  - 3.23.31


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - add the log file to the rpm database, and make it 0640
    (#24116)
  - as above in logrotate script
  - changes to the init sequence - put most of the data
    in /etc/my.cnf instead of hardcoding in the init script
  - use /var/run/mysqld/mysqld.pid instead of 
    /var/run/mysqld/pid
  - use standard safe_mysqld
  - shut down cleaner


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.30
  - do an explicit chmod on /var/lib/mysql in post, to avoid 
    any problems with broken permissons. There is a report
    of rm not changing this on its own (#22989)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - bzipped source
  - changed from 85 to 78 in startup, so it starts before
    apache (which can use modules requiring mysql)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - check for negative niceness values, and negate it
    if present (#17899)
  - redefine optflags on IA32 FTTB


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.26, which among other fixes now uses mkstemp()
    instead of tempnam().
  - revert changes made yesterday, the problem is now
    isolated


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - rename config file to /etc/my.cnf, which is what
    mysqld wants... doh. (#17432)
  - include a changed safe_mysqld, so the pid file option
    works. 
  - make mysql dir world readable to they can access the 
    mysql socket. (#17432)
  - 3.23.24


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - don't run ldconfig -n, it doesn't update ld.so.cache
    (#16034)
  - include some missing binaries
  - use safe_mysqld to start the server (request from
    mysql developers)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - don't build the SQL daemon statically (glibc problems)
  - fix the logrotate script - only flush log if mysql
    is running
  - change the reloading procedure 
  - remove icon - glint is obsolete a long time ago


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - try the new compiler again
  - build the SQL daemon statically
  - add compile time support for complex charsets
  - enable assembler
  - more cleanups in initscript


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.21
  - remove file from /etc/sysconfig
  - Fix initscript a bit - initialization of databases doesn't
    work yet
  - specify the correct licenses
  - include a /etc/my.conf (empty, FTTB)
  - add conditional restart to spec file


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - update to 3.23.20
  - use %configure, %makeinstall, %{_tmppath}, %{_mandir},
    %{_infodir}, /etc/init.d
  - remove the bench package
  - change some of the descriptions a little bit
  - fix the init script
  - some compile fixes
  - specify mysql user
  - use mysql uid 27 (postgresql is 26)
  - don't build on ia64


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.32 release XOS.1 for LinuX/OS 1.8.0
  - Upgrade from version 3.22.27 to 3.22.32.
  - Do "make install" instead of "make install-strip", because "install -s"
    now appears to fail on various scripts.  Afterwards, strip manually.
  - Reorganize subpackages, according to common Red Hat packages: the client
    program and shared library become the base package and the server and
    some accompanying files are now in a separate server package.  The
    server package implicitly requires the base package (shared library),
    but we have added a manual require tag anyway (because of the shared
    config file, and more).
  - Rename the mysql-benchmark subpackage to mysql-bench.


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.2 for LinuX/OS 1.7.1
  - Add post(un)install scripts for updating ld.so.conf (client subpackage).


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.1 for LinuX/OS 1.7.0
  - Initial version.
  - Some ideas borrowed from Red Hat Powertools 6.1, although this spec
    file is a full rewrite from scratch.


author: Tom Lane <tgl@redhat.com> 8.1-1
changelog:
  - Update pg_filedump to version 8.1, to support PostgreSQL 8.1.
  - Change version numbering so that major version matches corresponding
    PostgreSQL version.


author: Tom Lane <tgl@redhat.com> 4.0-1
changelog:
  - Update pg_filedump to version 4.0, to support PostgreSQL 8.0.
  - Keep pg_crc.c on hand as a plain source file instead of a patch.
    Easier to compare to main PG sources that way.


author: Tom Lane <tgl@redhat.com>
changelog:
  - Update to version 3.0.
  - Increment Buildrequires to >= PostgreSQL 7.4
  - Rebuild for Fedora Core 2.


author: Henri Gomez <hgomez@slib.fr> 1.2-9jpp
changelog:
  - use sed instead of bash 2.x extension in link area to make spec compatible
    with distro using bash 1.1x
  - use official tarball


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.2-4mdk
changelog:
  - vendor tag
  - packager tag
  - s/Copyright/License/
  - truncated description to 72 columns in spec
  - spec cleanup
  - used versioned jar
  - used new source packaging policy


author: Guillaume Rousse <g.rousse@linux-mandrake.com> 1.2-2mdk
changelog:
  - merged with Henri Gomez <hgomez@slib.fr> specs:
  - changed name to regexp
  -  changed javadir to /usr/share/java
  -  dropped jdk & jre requirement
  -  added Jikes support
  - changed jar name to regexp.jar
  - corrected doc


author: Jon Masters <jcm@redhat.com> - 8.0.45-28
changelog:
  - Remove dependency on /lib/firmware in Driver Update packages. Those who
    need to ship firmware files should use an override filelist instead.
  - Resolves: #252188.


author: Jon Masters <jcm@redhat.com> - 8.0.45-26
changelog:
  - Fix kernel_module_package -v/-r macros.
  - Resolves: #252188.
  - Fix handling of zero sized JAR files.
  - Resolves: #269481.


author: Jon Masters <jcm@redhat.com> - 8.0.45-24
changelog:
  - Fix use of TMPDIR to JTMPDIR in order to avoid conflict with mktemp use.
  - Resolves: #244899.
  - Set PKG_CONFIG_PATH in %__pre_build.
  - Resolves: #251922.


author: Elliot Lee <sopwith@redhat.com> 8.0.33-1
changelog:
  - Change -D to -Wp,-D to make java happy
  - Add -D_FORTIFY_SOURCE=2 to global cflags (as per Jakub & Arjan's request)


author: Jens Petersen <petersen@redhat.com> - 8.0.26-1
changelog:
  - preserve the vendor field when VENDOR not set
  - put VENDOR in the final i386-libc line, not the tentative one


author: Jens Petersen <petersen@redhat.com> - 8.0.25-1
changelog:
  - update config.{guess,sub} to 2003-06-17
  - define VENDOR to be redhat only when /etc/redhat-release present
    [suggested by jbj]
  - put VENDOR in vendor field in our config.guess file for
    ia64, ppc, ppc64, s390, s390x, x86_64 and elf32-i386 Linux
  - drop the --host, --build, --target and --program-prefix configure options
    from %configure, since this causes far too many problems


author: Jens Petersen <petersen@redhat.com> - 8.0.22-2
changelog:
  - add config.guess and config.sub (2003-02-22) with s390 patch on config.sub
  - make %configure use them


author: Phil Knirsch <pknirsch@redhat.com> 8.0.3-2
changelog:
  - Added fix for outdated config.[sub|guess] files in 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i386 -mtune=generic -fasynchronous-unwind-tables}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i386 -mtune=generic -fasynchronous-unwind-tables}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i386 -mtune=generic -fasynchronous-unwind-tables}" ; export FFLAGS ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
             [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /bin/rm -f $i && /bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=i686-redhat-linux-gnu --host=i686-redhat-linux-gnu \
  	--target=noarch-redhat-linux-gnu \
  	--program-prefix= \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/usr/com \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info section


author: Alexander Larsson <alexl@redhat.com> 8.0.1
changelog:
  - Add debug package support to 
      
      
      
      /usr/lib/rpm/redhat/brp-compress 
      /usr/lib/rpm/redhat/brp-strip /usr/bin/strip 
      /usr/lib/rpm/redhat/brp-strip-static-archive /usr/bin/strip 
      /usr/lib/rpm/redhat/brp-strip-comment-note /usr/bin/strip /usr/bin/objdump 
      /usr/lib/rpm/brp-python-bytecompile 
      /usr/lib/rpm/redhat/brp-java-repack-jars


author: Jens Petersen <petersen@redhat.com> 7.3.92-4
changelog:
  - fix %configure targeting for autoconf-2.5x (#58468)
  - include ~/.rpmmacros in macrofiles file path again


author: Jindrich Novy <jnovy@redhat.com> 5.5-11
changelog:
  - explicitly depend on lesstif to avoid nedit crashes
    (binary lesstif/openmotif incompatibilities) (#221535)
  - fix buildroot


author: Jindrich Novy <jnovy@redhat.com> 5.5-5
changelog:
  - update nedit file locations to new xorg standards (#167208, #170937)
  - rename nc to nedit-client to avoid conflict with netcat and
    modify its manpage to reflect this
  - fix License to GPL


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - added nedit icon to be present in menus #131601
  - updated spec to put it to the right place
  - icon made by Joor Loohuis (joor@users.sourceforge.net)
  - the icon processed by Peter Vrabec (pvrabec@usu.cz)


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't explicitly require openmotif, since rpm does library dependencies
    automatically.
  - Binary package doesn't require desktop-file-install.


author: Tim Waugh <twaugh@redhat.com> 5.3-6
changelog:
  - Add ugly hack to work around openmotif's lack of UTF-8 support (bug #75189).
  - Back-port 5.4RC2 fix for uninitialized variable (bug #110898).


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix crash while printing (#45149)
    I still think removing the package would be the better fix, though.


author: Troy Dawson <dawson@fnal.gov> - 5.SL
changelog:
  - Fixed startup bug for real this time.
  - Added check for cell
  - Added check so user can say if they want it to start on boot or not


author: David Malcolm <dmalcolm@redhat.com> - 5.0.4-1
changelog:
  - Split the evolution desktop file into four separate ones: one per component.
    Force people to update evolution, to avoid it using a stale symlink. 
    (#170799).


author: Ray Strode <rstrode@redhat.com> 3.8.0-1
changelog:
  - don't include kde legacy stuff anymore, since
    kde uses it's own applications menu file now and it 
    breaks gnome (bug 153125)


author: Than Ngo <than@redhat.com> 3.7.1-7
changelog:
  - add mssing kwrite/kate/kedit, kcontrol center, System setting
    in menu #147121, #12218, #1221811, #143937
  - get rid of capplets from preferences.menu, #149233
  - fix icon entry in desktop file #143336


author: Dan Williams <dcbw@redhat.com> 3.7-5
changelog:
  - #rh137520# Add "application/x-ole-storage" to Calc, Impress, and Writer
  	desktop files, so Evolution can associate these with OOo


author: <dcbw@redhat.com> - 3.7-2
changelog:
  - Gratuitous version bump from upstream
  - #rh74651# no mimetype entries for microsoft offic
  - #rh136731# wordperfect files (.wpd) should be associated with openoffice


author: Ray Strode <rstrode@redhat.com> 1.8-1
changelog:
  - release 1.8, remove AC_PROG_LIBTOOL from configure.in
  - release 1.7, remove gnome-control-center.desktop


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 0.23 with new translations, KDE MIME fixes, openoffice Exec= fixes
  - don't munge en_US text, broke docs. Back to just "Web Browser"


author: Hao Liu <hliu@redhat.com> 3.2-1
changelog:
  - Port forward to LSB 3.2
  - Remove symlink for mailx if user is upgrading from the redhat-lsb of older version 
  - Since F10 put mailx under /usr/bin, change the corresponding requires


author: Hao Liu <hliu@redhat.com> - 3.1-22
changelog:
  - Remove 2 requires which provided by redhat-lsb
  - Add comments explaining why hard-coded path is kept
  - Resolve some hard-coded path problems
  - Add comments explaining why importing '-static' option while compiling redhat_lsb_trigger
  - Replace /usr/lib64/lsb with /usr/lib/lsb
  - Replace /lib64/* with /lib64/*so*
  - Replace /lib/lsb with /lib/lsb*


author: Lawrence Lim <llim@redhat.com> - 3.1-16
changelog:
  - update spec file in accordance to feedback provided through merge review - merge-review.patch - #226363


author: Lawrence Lim <llim@redhat.com> - 3.1-15.f8
changelog:
  - Resolved: #239842 - /lib/lsb/init-functions shall use aliases but not functions
  - forward port the patch from 3.1-12.3.EL which fix #217566, #233530, #240916


author: Lawrence Lim <llim@redhat.com> - 3.1-12.3.EL
changelog:
  - Resolves: #217566 - rewrite /lib/lsb/init-functions file needs to define the commands as true shell functions rather than aliases.
  - Resolves: #233530 - LSB pidofproc misspelled as pidofprof.
  - Resolves: #240916 - "log_warning_message" replaced with "log_warning_msg" per the LSB 3.1 spec


author: Lawrence Lim <llim@redhat.com> - 3.1-10.2
changelog:
  - for some strange reason, ld-lsb-x86-64.so need to be ld-lsb-x86-64.so.3 (LSB3.0) rather than ld-lsb-x86-64.so.3.1 (LSB3.1)


author: Lawrence Lim <llim@redhat.com> - 3.1-10.1
changelog:
  - generate spec file on RHEL5-Alpha system
  - fix vsw4 test suite setup by creating symlink for X11 SecurityPolicy and XFontPath


author: Lawrence Lim <llim@redhat.com> - 3.0-10
changelog:
  - Rewrite most part of the mkredhat-lsb to obtain information directly via specdb 
    rather than sniffing through sgml
  - remove redundent script and bump up tarball version


author: Leon Ho <llch@redhat.com> 3.0-7.EL
changelog:
  - Fixed multilib problem on lsb_release not to read /etc/lsb-release and solely
    depends on /etc/lsb-release.d/ (Advised by LSB committee)
  - Removed /etc/lsb-release (Advised by LSB committee)


author: Leon Ho <llch@redhat.com> 3.0-6.EL
changelog:
  - Made the /etc/lsb-release useful (RH#154605)
  - Added redhat_lsb_trigger to fix RH#160585 (Jakub Jelinek)
  - Fixed AMD64 base libraries requirement parsing (RH#154605)


author: Leon Ho <llch@redhat.com> 1.3-9
changelog:
  - Sync what we have changed on the branches
    Wed Nov 24 2004 Harald Hoyer <harald@redhat.com>
    - added post section to recreate the softlink in emul mode (bug 140739)
    Mon Nov 15 2004 Phil Knirsch <pknirsch@redhat.com>
    Tiny correction of bug in new triggers


author: Hao Liu <hliu@redhat.com> - 3.1-22
changelog:
  - Remove 2 requires which provided by redhat-lsb
  - Add comments explaining why hard-coded path is kept
  - Resolve some hard-coded path problems
  - Add comments explaining why importing '-static' option while compiling redhat_lsb_trigger
  - Replace /usr/lib/lsb with /usr/lib/lsb
  - Replace /lib/* with /lib/*so*
  - Replace /lib/lsb with /lib/lsb*


author: Jindrich Novy <jnovy@redhat.com> 5.1-1
changelog:
  - update to readline-5.1
  - apply new proposed upstream patches for 5.1 (001-004)
  - drop "read -e" patch, applied upstream


author: Matt Wilson <msw@redhat.com> 4.2a-2
changelog:
  - removed the manual symlinking of .so, readline handles this by itself
  - call only %makeinstall, not %makeinstall install install-shared as
    this makes bogus .old files in the buildroot


author: Bernhard Rosenkraenzer <bero@redhat.com> 4.2-3
changelog:
  - Don't use readline's internal re-implementation of strpbrk on systems
    that have strpbrk - the system implementation is faster and better maintained.


author: Bernhard Rosenkraenzer <bero@redhat.com> 4.2-2
changelog:
  - Make sure headers can be included from C++ applications (#51131)
    (Patch based on Debian's with the bugs removed ;) )


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change the paths listed for the header files in the man page to reflect
    the location changes from previous versions (#35073)
  - note that "on" is acceptable instead of "On" in the man page (#21327)


author: Karel Zak <kzak@redhat.com> 1:1.3-4
changelog:
  - fix #207631 - clean up package build system and use tarball instead
                  separated source files


author: Dave Jones <davej@redhat.com>
changelog:
  - Integrated changes from Ville Skytta (#164872)
    - Fix inverted logic in readahead_early also.
    - readahead_early looks useful in more runlevels than just 5.
    - Sync versioned gcc, firefox and openoffice.org dirs with FC4 updates.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - new readahead.c from Ziga Mahkovec <ziga.mahkovec@klika.si>
    - optimizes read access for more throughput
  - regenerate file lists (#128444)
  - fix lack of newlines (#146744)
  - fix lists so that they are architecture-neutral
  - move check for > 384MB into the init scripts, not the %post


author: Phil Knirsch <pknirsch@redhat.com> 6.1.5-31
changelog:
  - Fixed wrong SvR4 system detection on Linux (#110426).
  - Fixed unitialized use of struct (#111189).
  - Make rsh work correctly with password authentification and ssh (#111778).


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Finished LFS support for rdist on 32bit archs (#79580).
  - Lots of code cleanup.
  - Switched from mktemp to mkstemp usage.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Added my 4.3BSD port of the v1 protocol rdist code and provide a oldrdist
    binary (#55761 and several others).
  - Fixed a small manpage problem (#55489)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.4.0-2
changelog:
  - Use the %configure macro (rdesktop now has a real configure file).
  - Patch rdesktop-optflags.patch no longer needed.
  - Add several missing doc files.


author: David Zeuthen <davidz@redhat.com> 1.4.0-1
changelog:
  - New upstream version; drop some patches that is now upstream
  - Require xorg-x11-devel instead of XFree86-devel for building


author: Warren Togami <wtogami@redhat.com> 1.3.0-3
changelog:
  - upgrade to 1.3.0
  - improve summary
  - BuildPrereq -> BuildRequires, the former is deprecated
  - Remove doc files that no longer exist
  - Add missing XFree86-devel
  - There was no -1 or -2.  Nothing to see here.  Move along.


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Make a 1.2 release, update to it. In the future, please commit changes
  to CVS and make a new release, instead of adding patches to the rpm
  package.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.1.4-6
changelog:
  - Borrow parts from patch in Debian's 1.1.4-3 to fix issues in bug 1038 as
    well as a bunch of others.
  - Bring up to date with current fedora.us Python spec template recommendations.
  - Fix -devel directory permissions.


author: Juha Ylitalo <jylitalo@iki.fi> - 0:1.1.4-0.fdr.5
changelog:
  - added -devel package (thanks to patch from pmatilai@welho.com)
  - FC1 requires dependency to tcl-devel and tk-devel package


author: Juha Ylitalo <jylitalo@iki.fi> - 0:1.1.4-0.fdr.4
changelog:
  - bumped release
  - implemented changes from Ville, which basically means that:
  - setup macro now users "-q" option
  - libpng dropped from buildrequirements
  - run test suite after build


author: Juha Ylitalo <jylitalo@iki.fi> - 0:1.1.4-0.fdr.3
changelog:
  - fixed source0 to point into effbot.org instead of pythonware.com
  - changed references from python2 to python, since python in RH9 is
    python 2.2.
  - removed percent signs from changelog.


author: Juha Ylitalo <jylitalo@iki.fi> - 0:1.1.4-0.fdr.2
changelog:
  - added XFree86-devel and tkinter into buildrequires.
  - removed version info from buildrequires
  - removed unnecessary stuff from requires.


author: Juha Ylitalo <jylitalo@iki.fi> - 0:1.1.3-0.fdr.5
changelog:
  - added python2-devel into buildrequires.
  - added versionm variable into setup macro instead of hard coded
    version number.


author: Juha Ylitalo <jylitalo@iki.fi> - 0:1.1.3-0.fdr.3
changelog:
  - changed buildroot macro back to $RP_BUILD_ROOT
  - ./configure to configure macro
  - Group to Development/Languages
  - Added Epoch values to versioned Requires and BuildRequires
  - added README and CHANGES-113 into doc


author: Juha Ylitalo <jylitalo@iki.fi> - 1.1.3-1
changelog:
  - updated to 1.1.3
  - switched from python 1.5.2 to python 2.2
  - other modifications to make it build at minimal effort


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - remove '-g %{RADVD_GID}' when creating the user, which may be problematic
    if the user didn't exist before.


author: Bernhard Rosenkraenzer <bero@redhat.com> 0.7.1-1
changelog:
  - 0.7.1 (bugfix release, #61023), fixes:
    - Check that forwarding is enabled when starting radvd
      (helps avoid odd problems) 
    - Check configuration file permissions (note: in setuid operation, must not
      be writable by the user.group) 
    - Cleanups and enhancements for radvdump
    - Ensure NULL-termination with strncpy even with overlong strings
      (non-criticals, but better safe than sorry) 
    - Update config.{guess,sub} to cope with some newer architectures 
    - Minor fixes and cleanups


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - License unfortunately is BSD *with* advertising clause, so to be pedantic,
    change License: to 'BSD-style'.


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - update to 0.62pl1.  Bye bye patches!
  - Require: initscripts (should really be with a version providing IPv6)
  - clean up the init script, make condrestart work properly
  - Use a static /etc/rc.d/init.d; init.d/radvd required it anyway.


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - add patch to chroot (doesn't work well yet, as /proc is used directly)
  - clean up droproot patch, drop the rights earlier; require user-writable
  pidfile directory
  - set up the pidfile directory at compile time.


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - add select/kill signals patch from Nathan Lutchansky <lutchann@litech.org>.
  - add address syntax checked fix from Marko Myllynen <myllynen@lut.fi>.
  - add patch to check the pid file before fork.
  - add support for OPTIONS sourced from /etc/sysconfig/radvd, provide a nice
  default one.
  - add/delete radvd user, change the pidfile to /var/run/radvd/radvd.pid.
  - fix initscript NETWORKING_IPV6 check.


author: Tim Powers <timp@redhat.com>
changelog:
  - applied patch supplied by Pekka Savola in #30508
  - made changes to initscript as per Pekka's suggestions


author: Tim Powers <timp@redhat.com>
changelog:
  - use %configure and %makeinstall, just glob the manpages, cleans
    things up
  - fixed initscript so that it can be internationalized in the future


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Create a single package(source) for glibc21 and glibc22 (automatic
  Requires can handle this just fine).
  - use %{_mandir} and friends
  - add more flesh to %doc
  - streamline %config file %attrs
  - streamline init.d file a bit:
     * add a default chkconfig: (default to disable for security etc. reasons; 
       also, the default config isn't generic enough..)
     * add reload/condrestart
     * minor tweaks
     * missing: localization support (initscripts-5.60)
  - use %initdir macro


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-9
changelog:
  - add scl_source script for intercollection dependencies (#1040858)
  - updated macros in macros.scl-filesystem (#1040859, #1040860)
  - add delimiter between collections and command (#1040861)


author: Jan Zeleny <jzeleny@redhat.com> - 20120927-5
changelog:
  - allow overriding values in macro scl_package (#957176)
  - delete redundant argument from check_asprintf (#956707)


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.6-4
changelog:
  - Remove chcon calls, problem worked around in the SELinux policy, thanks Dan
  Related: rhbz #460630
  - Forcibly enable tag writing support
  Related: rhbz #460643


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.6-3
changelog:
  - Enable missing plugins hooks in gstreamer
  - Remove gstreamer-python dependency
  Related: rhbz #459790
  - Fix icons
  Related: rhbz #458837
  - Remove Mozilla plugin from the build, if it so happens to have been
    built
  - Fix totem-pl-parser backport, update rhythmbox backport
  Related: rhbz #458832
  - Fix SELinux errors
  Related: rhbz #458834 #458836


author: Alexander Larsson <alexl@redhat.com> - 0.9.5-8.el5
changelog:
  - Disable any handling of mimetypes since we don't do command line args (#217450)
  - Require libgpod 0.4.0 update (#216654)


author: Alexander Larsson <alexl@redhat.com> - 0.9.5-7.el5
changelog:
  - Fix file monitoring
  - Remove fix-keybinding patch in favour of control-center patch
  - Resolves: #216068


author: Ray Strode <rstrode@redhat.com> - 0.9.3.1-3
changelog:
  - fix icon on notification bubbles (bug 183720)
  - patch from CVS to escape bubble markup, found by 
    Bill Nottingham


author: Colin Walters <walters@redhat.com>
changelog:
  - Add configure flags --with-bonobo --with-dbus
  - BR nautilus-cd-burner-devel
  - New upstream CVS snapshot for testing
  - Drop IDL file and ui .xml
  - Add dbus service file
  - Drop upstreamed rhythmbox-bluecurve.tar.gz
  - Drop upstreamed rhythmbox-0.8.8-cell-renderer.patch


author: Colin Walters <walters@redhat.com> - 0.8.8-3
changelog:
  - Add Bluecurve-ized icons from Jeff Schroeder (157716)
  - Add rhythmbox-0.8.8-cell-renderer.patch to remove use of custom
    cell renderer for playback icon (no longer necessary) and
    changes the rating renderer to work with non-b&w icons


author: Colin Walters <walters@redhat.com> - 0.8.4-1
changelog:
  - New upstream version
  - Remove backported patches
  - Gratuitiously bump various BuildRequires versions


author: Colin Walters <walters@redhat.com> - 0.7.1-1
changelog:
  - New major version - I know we are past major version slush, but
    this should have been done two weeks ago along with the GNOME 2.6
    upload.  As upstream author as well, I believe this version is
    good enough for FC2.
  - Remove --disable-mp3
  - Remove id3, flac variables
  - Remove GStreamer major version patch
  - Fix typo in description


author: Matthias Saou <matthias@rpmforge.net> 0.5.3-3
changelog:
  - Fix category from Development/Libraries to Applications/Multimedia.
  - Use bz2 instead of gz as ftp.gnome.org has both, 300k saved in the src.rpm.
  - Fix SCHEMES vs. SCHEMAS in the post scriplet.
  - Added gstreamer-plugins-devel, libvorbis-devel, scrollkeeper and gettext deps.
  - Removed unnecessary date expansion define.
  - Updated description, including mp3 reference removal.
  - Added libid3tag and flac optional support for convenient rebuild.
  - Removed obsolete omf.make and xmldocs.make (included ones are the same now).


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.23-5
changelog:
  - resolves: #1112151 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1112151 - CVE-2014-3493: DoS in smbd with unicode path names.


author: - Andreas Schneider <asn@redhat.com> - 3.6.23-3
changelog:
  - resolves: #1100658 - Allocate the server_info on the correct context.
  - resolves: #1101922 - Add config variables to set spoolss os version.


author: - Andreas Schneider <asn@redhat.com> - 3.6.22-2
changelog:
  - related: #976637 - More cleanup for 'force user' with 'security = ads'.
  - resolves: #1069571 - Fix memory leak reading printer list.
  - resolves: #1067608 - Fix wbinfo -i with one-way trusts.


author: - Andreas Schneider <asn@redhat.com> - 3.6.22-0.1
changelog:
  - resolves: #1035006 - Rebase Samba to 3.6.22.
  - resolves: #1034161 - Do not build Samba with fam support:
  - resolves: #1033773 - Fix AD group lookups with non-utf8 locale settings.
  - resolves: #1026796 - Fix connect to samba share from Mac Finder.
  - resolves: #996656 - Fix printing failing in function cups_job_submit.
  - resolves: #991528 - Fix Windows 8 Roaming profiles.
  - resolves: #989894 - Fix net ads join segmentation fault.
  - resolves: #981369 - Fix winbind which does not update information in cache
                        about a group from a trusted domain even after the
                        information has expired.
  - resolves: #1040475 - Fix group expansion in service path.
  - resolves: #1050889 - Fix 100% CPU utilization in winbindd when trying to
                         free memory in winbindd_reinit_after_fork.
  - resolves: #1063694 - Fix %G substitution in 'template homedir'.
  - resolves: #1037273 - Add timeout option to smbclient.
  - resolves: #976637 - Fix 'force user' with 'security = ads'.


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.136
changelog:
  - resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                        an EA list


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.135
changelog:
  - Fix PIDL parsing with newer versions of gcc.
  - Fix dereferencing a unique pointer in the WKSSVC server.
  - resolves: #982484


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.134
changelog:
  - Check for system libtevent and require version 0.9.18.
  - Use tevent epoll backend in winbind.
  - resolves: #869295


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.130
changelog:
  - Fix netlogon failover for LogonSamLogon.
  - resolves: #862872
  - Fix write operations as guest with security = share
  - resolves: #905071
  - Disable building cifs idmap and acl binaries.
  - resolves: #873692
  - Change chkconfig order to start winbind before netfs.
  - resolves: #948614
  - Fix cache issue when resoliving groups without domain name.
  - resolves: #948923
  - Fix pam_winbind upn to username conversion if you have different seperator.
  - resolves: #949611
  - Fix the username map optimization.
  - resolves: #917564
  - Fix leaking sockets of smb dc connection.
  - resolves: #883861
  - Fix 'net ads keytab add' not respecting the case.
  - resolves: #955680
  - Fix 'map untrusted to domain' with NTLMv2.
  - resolves: #947999


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.128
changelog:
  - Fix loading the imap hash module.
  - resolves: #863192
  - Fix raw printing support.
  - related: #855312


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.125
changelog:
  - Handle error if invalid ports have been specified gracefully.
  - resolves: #845761
  - Fix printing regression with builtin forms.
  - resolves: #860965


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.123
changelog:
  - Fix rap printing access to spoolss (smbclient print queue access).
  - resolves: #855312
  - Fix mount.cifs return codes.
  - resolves: #856168


author: Simo Sorce <ssorce@redhat.com> 3.5.4-0.84
changelog:
  - Security Release, fixes CVE-2011-2694, CVE-2011-2522, CVE-2011-1678,
    CVE-2011-2724
  - resolves: #722556


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.4-0.74
changelog:
  - Fix lsa lookupsids calls over ncacn_ip_tcp that caused getent passwd queries
    to fail
  - resolves: #679066


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.4-0.63
changelog:
  - Make sure samba3x provides samba and also versions the conflicts
  - resolves: #582756
  - resolves: #609578


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.5-0.43
changelog:
  - Security Release, fixes CVE-2009-1888, CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906
  - resolves: #526663


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.5-0.42
changelog:
  - Add appropriate licensing information to samba3-common, libsmbclient, libtalloc,
    libtdb and tdb-tools
  - resolves: #520652


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.5-0.40
changelog:
  - Fix password expiry calculation in pam_winbind
  - Remove popt dependency from mount/umount.cifs
  - Fix libsmbclient packaging
  - resolves: #506932


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.4-0.34
changelog:
  - Add new package samba3x
  - Fix various Requires and Provides tags in order to meet conflict and update
    requirements
  - resolves: #454460


author: Than Ngo <than@redhat.com> - 1:3.3.6-24.el5
changelog:
  - Resolves: #277021, Qt UTF8 improper character expansion, CVE-2007-0242
  - Resolves: #269161, Qt off by one buffer overflow, CVE-2007-4137


author: Than Ngo <than@redhat.com> 1:3.3.6-16.el5
changelog:
  - fix #214371, bn_IN font rendering, incorrect rendering of two special symbols
    when used after certain consonant conjuncts


author: Than Ngo <than@redhat.com> 1:3.3.6-16.el5
changelog:
  - fix #213718, Missing help file in Qt3 assistant
  - fix #189012, qt settings should be readable for other
  - fix #214570, regression of #209972


author: Than Ngo <than@redhat.com> 1:3.3.6-14.el5
changelog:
  - fix #209097, ml_IN font rendering
  - fix #209970, pa font rendering
  - fix #209098, or_IN font rendering 
  - fix #209972, as_IN font rendering
  - fix #209975, bn_IN font rendering
  - fix #211259, te_IN font rendering
  - fix #211436, as_IN font rendering
    thanks Sachin Tawniya, LingNing Zhang for the fixes


author: Than Ngo <than@redhat.com> 1:3.3.6-11
changelog:
  - apply upstream patches, fix arabic fonts issue, and
    problems with missing minimum size when richtext
    labels are used


author: Than Ngo <than@redhat.com> 1:3.3.6-7
changelog:
  - fix utf8 issue in changelog
  - fix #195410, don't strip binaries/libraries
  - fix #156572, keyReleaseEvent issue


author: Than Ngo <than@redhat.com> 1:3.3.6-1
changelog:
  - update to 3.3.6
  - adapt qt-x11-immodule-unified-qt3.3.5-20060318 to qt-3.3.6
  - remove set of fixes for the immodule patch, included in qt-x11-immodule-unified-qt3.3.5-20060318
  - remove 0051-qtoolbar_77047.patch, qt-x11-free-3.3.4-assistant_de.patch,
    qt-x11-free-3.3.5-warning.patch, included in new upstream


author: Than Ngo <than@redhat.com> 1:3.3.5-6
changelog:
  - update qt-x11-immodule-unified-qt3.3.5-20051018.diff
  - remove unneeded qt-x11-immodule-unified-qt3.3.5-20051012-build.patch


author: Than Ngo <than@redhat.com> 1:3.3.5-5
changelog:
  - update qt-x11-immodule-unified-qt3.3.5-20051012
  - disable some debug messages
  - apply patch to fix build problem with the new immodule patch


author: Than Ngo <than@redhat.com> 1:3.3.4-15
changelog:
  - add better fix for #156977, thanks to trolltech
  - apply patch to fix keyReleaseEvent problem #156572


author: Than Ngo <than@redhat.com> 1:3.3.4-5
changelog:
  - fix application crash when input methode not available (bug #140658)
  - remove .moc/.obj
  - add qt-copy patch to fix KDE #80072


author: Than Ngo <than@redhat.com> 1:3.3.4-2
changelog:
  - remove useless doc files #143949
  - fix build problem if installman is disable #146311
  - add missing html/examples/tutorial symlinks


author: Than Ngo <than@redhat.com> 1:3.3.4-1
changelog:
  - update to 3.3.4
  - adapt many patches to qt-3.3.4
  - drop qt-x11-free-3.3.0-freetype, qt-x11-free-3.3.3-qmake, qt-x11-free-3.3.1-lib64
    qt-x11-free-3.3.3-qimage, which are included in new upstream


author: Than Ngo <than@redhat.com> 1:3.3.3-9
changelog:
  - remove unused patch
  - set XIMInputStyle=On The Spot
  - require xorg-x11-devel instead XFree86-devel


author: Than Ngo <than@redhat.com> 1:3.3.2-8
changelog:
  - add fontconfig fix for qfontdatabase, #123868
  - fix some buildrequires problem, #125289
  - fix dangling symlink, #125351
  - get rid of backup files


author: Than Ngo <than@redhat.com> 1:3.3.2-5
changelog:
  - add missing qembed tool #124052, #124052
  - get rid of unused trigger
  - add qt.conf in ld.so.conf.d -> don't change ld.so.conf #124080


author: Than Ngo <than@redhat.com> 3.3.1-1
changelog:
  - add cvs backport
  - fix lib64 issue, #121052
  - fix CJK font display, bug #121017, #120542, thanks to Leon Ho
  - compress tutorial/examples


author: Than Ngo <than@redhat.com> 3.3.1-0.6
changelog:
  - add 0034-qclipboard_recursion_fix.patch from CVS, #118368
  - add better qt-x11-free-3.3.1-fontdatabase.patch


author: Than Ngo <than@redhat.com> 3.3.0-0.3
changelog:
  - enable IPv6 support
  - use dlopen, instead of linking with OpenGL libraries directly
  - don't install backup files


author: Than Ngo <than@redhat.com> 1:3.2.3-0.2
changelog:
  - Added missing prl files, (report from trolltech)
  - Fixed description
  - include requires XFree86-devel on qt-devel


author: Than Ngo <than@redhat.com> 1:3.2.2-0.2
changelog:
  - add font alias patch file, thanks to Leon Ho
  - clean up monospace.patch from Leon Ho
  - remove some unneeded patch files


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - Change qmlined.h to not include an attic header that is also not shipped
    with Red Hat Linux. This also fixes building unixODBC, that includes this
    header (apparently also without needing it).


author: Than Ngo <than@redhat.com> 3.1.1-3
changelog:
  - add monospace patch file from Leon Ho (bug #79949)
  - add small patch file from Sysoltsev Slawa (bug #79731)


author: Than Ngo <than@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0
  - adjust some patch files for 3.1.0
  - clean up specfile
  - remove some Xft2 patch files, which are now in 3.1.0
  - add qwidget_x11.cpp.diff from Trolltech
  - install qt in %{_libdir}/qt-3.1 (bug #77706)
  - don't use rpath
  - enable large file support
  - use system Xinerama
  - remove unneeded cups patch file
  - fix to build against new XFree86


author: Than Ngo <than@redhat.com> 3.0.5-19
changelog:
  - examples misconfigured (bug #76083)
  - don't include pkg-config (bug #74621)
  - fix build problem with new XFree86


author: Than Ngo <than@redhat.com> 3.0.5-17
changelog:
  - Fixed rpath issue (bug #69692, #69575)
  - Removed dlopen patch
  - Added monospace alias patch from Leon Ho (bug #72811)
  - Added man pages


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.5-14
changelog:
  - Don't link to libstdc++, it isn't used
  - Work around s390 compiler bug (fpic/fPIC coexistance)
  - Do away with the "Feature Bluecurve already defined" warning message
  - Remove qmake cache files from the package


author: Than Ngo <than@redhat.com> 3.0.5-13
changelog:
  - Added fix to use VT100 graphic characters (bug #71364)
  - Added fontdatabase fix from llch@redhat.com (bug #68353)


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.5-11
changelog:
  - Move qtconfig from qt-devel to qt, it's generally useful
  - Use -fno-use-cxa-atexit
  - Some tweaks to allow building Qt/Embedded with the same spec file
  - Apply the GB18030 patch even if xft2 isn't set


author: Than Ngo <than@redhat.com> 3.0.4-10
changelog:
  - add missing Buildprequires desktop-file-utils
  - add patches for GB18030 (llch@redhat.com) bug #68430


author: Jakub Jelinek <jakub@redhat.com> 3.0.4-8
changelog:
  - compile libXinerama.a with -fpic in Qt until XFree86 is fixed
  - make %xft2 work even if old Xft headers aren't installed


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.4-6
changelog:
  - Re-enable Xft2 now that fontconfig is fixed
  - Require a version of fontconfig that works
  - Use -fPIC rather than -fpic on alpha


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.3-10
changelog:
  - Tweaks to allow parallel installations of Qt 3.x (gcc 2.96) and Qt 3.x
    (gcc 3.1)
  - Fix up debug spewage at Qt designer startup


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.3-8
changelog:
  - Get rid of non-threaded version, dlopen()'ing threaded code
    (like plugins) from non-threaded code is dangerous
  - Add some fixes from qt-copy, fixing the ksplash crash some people
    have noticed on a first login
  - Add translation fixes from CVS
  - Patch example .pro files to build outside the Qt source tree (#63023)
  - Fix various bugs


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.3-0.cvs20020314.1
changelog:
  - Update to 3.0.3-pre, required for KDE3
  - force -fPIC usage
  - Remove conflict with qt2 < 2.3.2-1, the new qt2 2.3.1 is fixed and qt 2.3.2
    is broken
  - Ship the qmake config files (so qmake works for building any 3rd party stuff,
    e.g. aethera)


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.2-0.cvs20020114.1
changelog:
  - Build styles directly into the main library for now, there's too much broken
    code out there depending on this ATM.


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.1-2
changelog:
  - Fix up settings search path
  - Add default qtrc allowing to use KDE 3.x Qt plugins
  - Make sure QLibrary uses RTLD_GLOBAL when dlopen()ing libraries


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.1-0.cvs20011210.1
changelog:
  - Update to current (needed by KDE 3.x)
  - Rebuild with current libstdc++
  - Temporarily disable building on alpha
  - Fix build with PostgreSQL 7.2


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-4
changelog:
  - Give designer, uic, moc, etc. their real names - the qt2 versions
    have been renamed in qt2-2.3.2-1.
    Conflict with qt2 < 2.3.2-1.


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-3
changelog:
  - Add symlink /usr/lib/qt-3.0.0 -> /usr/lib/qt3 and set QTDIR to the
    symlink, allowing to update to 3.0.1 without breaking rpath'ed binaries


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-1
changelog:
  - 3.0.0 final
  - fix some minor specfile bugs
  - Modularize some more (image format plugins)
  - Build codecs


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.beta4.1
changelog:
  - beta4
  - build the Motif style directly into Qt rather than as a plugin - Qt should
    always have at least one style...
  - replace the designer3 symlink with a shell script that sets QTDIR correctly
    before launching designer
  - Add desktop file for designer


author: Tim Powers <timp@redhat.com> 3.0.0-0.beta3.4
changelog:
  - explicitly include qm2ts, qmake, qtconfig in the devel package file list to avoid dangling symlinks


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add another ugly workaround for build system problems, this should finally
    get rid of the dangling symlinks


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.beta1.2
changelog:
  - Fix up QSQL Postgres classes for Postgres 7.1.x
  - Fix various bugs:
    - QtMultilineEdit and QtTableView should actually compile
    - Link libqsqlpsql with libpq
    - Don't link the base library with libmysqlclient, linking the MySQL
      module with it is sufficient
  - Add missing const qualifier
  - move the SQL drivers to separate packages to avoid dependencies
  - build and install designer plugins - converting glade files to Qt is fun. ;)
  - handle RPM_OPT_FLAGS


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.3.0-5
changelog:
  - Make sure uic and designer use the libqui from the source tree, not
    a previously installed one.
    Linking uic-x11 against libqui-embedded is definitely not a feature. ;)
  - The qclipboard fix is needed for qt-x11 only, don't apply it if we're
    building qt-embedded


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Don't segfault when running Qt/Embedded applications as root
  - Improve the Qt/Embedded sparc patch so we don't need the specfile hacks
    anymore
  - Fix a bug in QPrintDialog (causing KDE Bug #18608)


author: Than Ngo <than@redhat.com>
changelog:
  - call ldconfig for updating (Bug #19687)
  - added patch from Trolltech, thanks to Rainer <rms@trolltech.com>


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add missing msg2qm, msgmerge, qconfig tools (Bug #18997), introduced
    by broken Makefiles in base
  - fix up %install so it works both with old-style and new-style fileutils
    (fileutils <= 4.0z don't know about -L)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - fix -devel
  - update to the new version of 2.2.1 on trolltech.com; the initial tarball
    contained broken docs


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move Qt designer to a different source RPM to get rid of a
    circular dependency (kdelibs2->qt, qt->kdelibs2)
  - Enable MNG support
  - Don't compile (just include) examples and tutorials
  - move the static libraries to a separate package (qt-static).
    They're HUGE, and most people won't ever need them.
  - clean up spec file
  - fix up dependencies (-devel requires base, -static requires devel,
    Xt requires base)
  - add BuildRequires line


author: Than Ngo <than@redhat.com>
changelog:
  - update release 2.2.0
  - changed copyright to GPL
  - added missing static libraries
  - made symbolic link for designer to load the help files correct
  - made designer and designer-kde2 as sub packages
  - added missing templates for designer
  - remove jakub patch, since the release 2.2.0 already 
    contains this patch.
  - fixed qt again to compile with gcc-2.96
  - use make -j for building


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - move man pages to a more reasonable place (this fixes Bug #14126)
  - exclude ia64 for now (compiler problems!!!)


author: Harald Hoyer <harald@redhat.de>
changelog:
  - made patch smaller and binary compatible when recompiled with 6.2
  - modified connect and moc to cope with the new g++ class layout


author: Bernhard Rosenkr�zer <bero@redhat.com>
changelog:
  - beta1
  - get rid of qt-ImageIO, the functionality is now in the main Qt library
  - remove qt-Network, the functionality is now in the main Qt library
  - add changes-2.1.0 to %doc


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - new snapshot
  - -GL requires libGL.so.1 instead of Mesa (might as well be glxMesa
    or some commercial OpenGL)
  - -GL BuildPrereqs /usr/X11R6/include/GL/gl.h instead of Mesa-devel
    (might as well be glxMesa or some commercial OpenGL)


author: Bernhard Rosenkraenzer <bero@redhat.de>
changelog:
  - current CVS snapshot
  - fix compilation with gcc 2.95.x
  - use install -c rather than just install to make BSD install happy


author: Preston Brown <pbrown@redhat.com>
changelog:
  - substitution in tutorial and examples so that dependencies are correct and
    they can be successfully rebuilt.
  - switched to completely using QTDIR.  trying to coexist with links into
    /usr/{include,lib} and still compile with qt 1.x is very hard for
    configure scripts to cope with.


author: Jaroslav Reznik <jreznik@redhat.com> - 4.2.1-1.1
changelog:
  - Resolves: #737815, qt/harfbuzz buffer overflow, CVE-2011-3193
  - Resolves: #234633, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242


author: Joel Granados <jgranado@redhat.com> - 0.26-4
changelog:
  - Correct the way that raidsets are discivered (hansg).
    Related: rhbz:#475386
  - Fix raid10 (jgranado).
    Related: rhbz:#475386


author: Peter Jones <pjones@redhat.com> - 0.25-1
changelog:
  - fix refcounting of map names and partition building for new maps (#210412)
  - fix naming so device names on a single controller are in LUN order


author: Peter Jones <pjones@redhat.com> - 0.24-1
changelog:
  - add block.load() to load specific bdevid probes instead of always
    doing loadAll() (#208423)
  - make block.getMPaths() return a sorted list (#208337, #208431)


author: Peter Jones <pjones@redhat.com> - 0.22-1
changelog:
  - Fix partition removal when we've changed the partition table out from
    under a RaidSet or MultiPath.


author: Peter Jones <pjones@redhat.com> - 0.19-1
changelog:
  - Make RaidSet deactivation work like MultiPath deactivation.  Fixes a
    traceback when removing partition maps.


author: Peter Jones <pjones@redhat.com> - 0.17-1
changelog:
  - make multipath support more robust
  - fix leaky file descriptor on volumes without partition tables


author: Peter Jones <pjones@redhat.com> - 0.14-1
changelog:
  - remove member partitions when we activate, rebuild them when we deactivate
  - add another "count_devices(ctx->lc, NATIVE)" in discover_raiddevs.  it
    seems to help...


author: Peter Jones <pjones@redhat.com> - 0.12-1
changelog:
  - split __init__.py into separate files according to function
  - disable "nosync" hack for now
  - fix a refcounting bug in pydmraid_raidset_get_dm_table()
  - add block.RaidDev.__cmp__()
  - fix some type errors gcc can't check for when using pyblock_potoll
  - be a little pickier about types for mode, devices, and sizes.
  - add make rules for debugging
  - fix "_init__" typo
  - always use local import paths, and be much more strict about namespaces
  - always make a new dm.device in BlockDev.From*()
  - better defaults in BlockDev.create()
  - add setter for block.dmraid.raidset.name, and rework RaidSet.set_name()
  - rework RaidDev.get_bdev()
  - rework "prefix" for RaidSet and RaidDev
  - add getter for block.dmraid.raidset.map
  - change arg order on block.dm.map.__init__() since there's no way to pass
    keyword args through the "abstract" interface.
  - use self.name not self.rs.name in the RaidSet, and make changing the name
    work.
  - make pydm_map_compare() compare names _last_, so we can compare a map
    that's been renamed with its earlier instantiations correctly.
  - mark a device as degraded if there's any descrepancy at all between
    the number of members we find vs what we expect


author: Peter Jones <pjones@redhat.com> - 0.11-1
changelog:
  - never trust dmraid on sync vs nosync; right now, always transform the
    table to "default" (no argument), which is to sync only when necessary,
    whatever that means.  Seems to lock up less often.


author: Peter Jones <pjones@redhat.com> - 0.8-1
changelog:
  - prevent getRaidSets() from returning devices with missing members
  - add "make flat_install" to make installing in RHupdates easier ;)


author: Peter Jones <pjones@redhat.com> - 0.5-1
changelog:
  - make it possible to easily build dm maps from dmraid tables
  - support for partition table scanning


author: Miloslav Trmac <mitr@redhat.com> - 0.8.4-0.cvs20041111.1
changelog:
  - Update to current CVS snapshot, Python 2.4b2 requires unreleased PyXML-0.8.4
  - Backport xml.sax.saxutils fix from Python 2.4b2


author: Trond Eivind Glomsrød <teg@redhat.com> 0.7.1-6
changelog:
  - Reenable expat. While most code works, some specify expat directly
    and fails. Fix #72698, but there is still broken code there (it just 
    goes on to other errors)


author: Trond Eivind Glomsrød <teg@redhat.com> 0.7.1-5
changelog:
  - Disable expat support. Other parsers are included. Broken here, 
    broken in 0.8.0. This fixes #72698


author: Mike A. Harris <mharris@redhat.com> 0.3.27-2.fc6
changelog:
  - Remove dependency on xorg-x11-server-sdk, and replace it with correct dep
    on "libxf86config-devel >= 1.1.1-7", and rebuild in order to pick up
    necessary fixes in the static library.
  - Use Fedora Extras style BuildRoot tag.
  - Use {?dist} tag in Release


author: Jeremy Katz <katzj@redhat.com> - 0.3.20-1
changelog:
  - the X server compiles in the path for rgb.txt, so don't explicitly list 
    (fixes for the path move with modular X)
  - get rid of no longer needed %preun
  - modular X buildrequires changes


author: Mike A. Harris <mharris@redhat.com> - 0.3.18-1
changelog:
  - Do not write out XkbRules line to config file, as it is unnecessary hard
    coding the rules file, which has a built in default which should always
    work. (#120858)


author: Brent Fox <bfox@redhat.com> 0.3.15-1
changelog:
  - remove the setupMice() function createTemplate() 
  - because the 2.6 kernel puts both PS/2 and USB mice on the same device


author: Brent Fox <bfox@redhat.com> 0.3.10-1
changelog:
  - add a BuildRequires for python-devel
  - add an options attribute to the server layout section (for Xinerama)


author: Michael Fulbright <msf@redhat.com> 0.3.4-1
changelog:
  - remove code in xf86config.py:createTemplate() that inserted a Display
    section.  We want user to supply this and it shouldnt be in template.


author: James Antill <jantill@redhat.com> - 3.1.0-6
changelog:
  - Fix user and password quoting in URLs
  - Resolves: rhbz#576651
  - Fix serial line progress output
  - Resolves: rhbz#500912


author: James Antill <jantill@redhat.com> - 3.1.0-4
changelog:
  - Import fixes from Fedora, and UI progress tweaks
  - FTP byterange with specified port
  - reget with HTTP servers that don't support Range
  - Dynamic resizing progress, with totals and visible end state
  - Resolves: rhbz#435156
  - Resolves: rhbz#444085
  - Fedora-Bug: 404211
  - Fedora-Bug: 419241
  - Fedora-Bug: 437197


author: Paul Nasrat <pnasrat@redhat.com> - 1.1.7-1
changelog:
  - Upgrade to latest upstream 1.1.x series
  - sqlite_prepare fix now upstream
  - Update url information


author: Matthew Barnes <mbarnes@redhat.com> - 2.2.0-1
changelog:
  - Update to 2.2.0
  - Update python-ldap-2.0.6-rpath.patch and rename it to
    python-ldap-2.2.0-dirs.patch.


author: Ville Skyttä <ville.skytta at iki.fi> 0:2.0.0-0.fdr.0.pre16.3
changelog:
  - Stricter python version requirements.
  - BuildRequire openssl-devel.
  - Explicitly build *.pyo, install them as %ghost.
  - Own more installed dirs.
  - Remove $RPM_BUILD_ROOT at start of %install.


author: Tomas Bzatek <tbzatek@redhat.com> - 1.18-beta1.1.el5_3.1
changelog:
  - Rebase to upstream 1.18beta1
  - CVE-2009-0581 LittleCms memory leak
  - CVE-2009-0723 LittleCms integer overflow
  - CVE-2009-0733 LittleCms lack of upper-bounds check on sizes
  - Resolves: #487513


author: Tomas Bzatek <tbzatek@redhat.com> - 1.15-1.2.2.el5_2.1
changelog:
  - Fix insufficient input validation in ReadEmbeddedTextTag
  - Fix unsigned -> signed integer cast issue in cmsAllocGamma
  - Resolves: #473469


author: Phillip Compton <pcompton[AT]proteinmedia.com> - 0:1.11-0.fdr.2
changelog:
  - Renamed to lcms to match upstream.
  - Provides: littlecms.
  - Fixed doc attributes.
  - Excluding empty dir %{_libdir}/python2.2/


author: Konstantin Ryabitsev <icon@linux.duke.edu> - 1.2.6-2
changelog:
  - Use python_sitelib
  - Own the elementtree dir in site-packages
  - BuildRequire python-devel
  - Do not namely require expat
  - Do not use INSTALLED_FILES (safer)
  - Use ghosting for .pyo


author: Zack Cerza <zcerza@redhat.com> - 0.5.4-1
changelog:
  - Remove all Requires
  - Add package versions to this changelog
  - Add new description
  - Use official Fedora Extras BuildRoot
  - Change the group to Development/Languages


author: John (J5) Palmieri <johnp@redhat.com> - 0.9.3.1-2
changelog:
  - Remove lib64 hack since this is a noarch package  
  - use python_sitelib script for determining where to install to


author: Jeremy Katz <katzj@redhat.com> - 0.9.3-0
changelog:
  - update to 0.9.3
  - add patch to fix generated code to build with gcc4
  - require python-abi and python-devel instead of conflicting with 
    newer python-devel


author: John (J5) Palmieri <johnp@redhat.com> - 0:0.9-3
changelog:
  - Added Pyrex-0.9-split-base-types.patch which fixes 
    long unsigned int bug showing up in dbus python binding
    builds for the x86_64 arch
  - Added regex hack to spec to work around a bug in python's
    distutils which would install files into /usr/lib instead of
    /usr/lib64 on 64 bit archs


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 0:0.9-0.fdr.3
changelog:
  - My mistake: rpm automatically removes %ghost files, no need to script
    it manually.
  - python distutils --record=FILE option doesn't record directories so include
    the site-packages/[directories] manually


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 0:0.9-0.fdr.2
changelog:
  - Merge changes from Michel Alexandre Salim <salimma[AT]users.sf.net>
    + Require build system's python version because directories are named
      pythonX.Y
    + Create *.pyo files and %ghost them (Privleged user with python optimize
      turned on may generate them, but they aren't needed for operation.
    + Do not include the Mac Pyrex compiler stuff
    + Change license to Public Domain
  - Script to remove any %ghost files on package removal
  - Patch around an incompatible change between python 2.2 and python 2.3's
    definition of LONG_LONG being renamed to PY_LONG_LONG


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - remove bogus requirement on python-%{pythonver}, there's no such
    thing as a python-1.5 package and we actually use version 1.5.2
    Than: I take this VERY seriously... "It compiles, therefore it
    works!" is a registered trademark of myself. ;)
  - some fixes to spec file
  - update URL


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 0.10.1
  - Qt 1.45
  - handle RPM_OPT_FLAGS
  - fix download URL
  - -devel and -examples require base package


author: Peter Jones <pjones@redhat.com> - 1.8.1-4
changelog:
  - Flush devices from parted's device cache, or else they become stail when
    devices are renamed (removes destroy() call).
  - Resolves: #219965


author: David Cantrell <dcantrell@redhat.com> - 1.8.1-2
changelog:
  - Add parted.PedDevice.destroy() call to ped_device_destroy() in libparted.
    Needed to remove cached devices from the device list so future get()
    calls return correct info.
  - Related: rhbz#218861


author: David Cantrell <dcantrell@redhat.com> - 1.8.1-1
changelog:
  - Rebuild for GNU parted-1.8.1
  - Determine Python version to use in %build so the source RPM is more
    easily moved between distribution releases.
  - Resolves: rhbz#218087


author: David Cantrell <dcantrell@redhat.com> - 1.8.0-1
changelog:
  - Bump version to 1.8.0 and require parted >= 1.8.0
  - Remove python-abi Requires line since rpm handles that automatically


author: Jeremy Katz <katzj@redhat.com> - 1.6.8-1
changelog:
  - update for new parted ABI
    - device -> heads, sectors, cylinders now refer to the bios geometry
  - require parted >= 1.6.12


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - Initial build split out into separate source from the parted package.
  - Don't build on ppc64 right now due to parted build problems (#118183)


author: Tomas Mraz - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: Mihai Ibanescu <misa@redhat.com> 0.5.1-12
changelog:
  - lynx no longer supported, using elinks instead (patch from
    Michael Redinger <michael.redinger@uibk.ac.at>, bug #101947 )


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - Fix for bug 73967: site-packages/OpenSSL not owned by this package
  - Adding hacks around the lack of latex2html on ia64


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - Building 0.5.1rc1 with version number 0.5.0.91 (this should also fix the big
    error of pushing 0.5pre previously, since it breaks rpm's version comparison
    algorithm).
  - We use %{__python}. Too bad I can't pass --define's to distutils.


author: Chris Lumens <clumens@redhat.com> 0.43.9-1
changelog:
  - Add "firewall --no-ssh" option (#681944).
  - Don't overwrite the excluded group list after every %packages line (#577334).


author: Chris Lumens <clumens@redhat.com> 0.43.8-1
changelog:
  - Support -@group-name syntax for removing previously included groups (#555311).
  - Set a default value for iscsi --port (#547678).


author: Chris Lumens <clumens@redhat.com> 0.43.3-1
changelog:
  - Add encrypted attributes to __init__ methods (#461160).
  - Add --bootproto=query back in, which got reverted by the encryption patch.
  - Add iscsi --reverse-username and --reverse-password (pjones, #432819).


author: Chris Lumens <clumens@redhat.com> 0.43.2-1
changelog:
  - Support creation of encrypted block devices in RHEL5 (#449830, dlehman).
  - Note if block device is encrypted in anaconda-ks.cfg, do not include
    passphrase (dlehman).
  - Correct dhcpclass parameter (#248912).
  - Fix writing out --interpreter for script headers (#222877).
  - Add support for the --only-use argument to RHEL5 (#318351, rvykydal)


author: Chris Lumens <clumens@redhat.com> 0.31-1
changelog:
  - Handle nfs --opts (katzj).
  - RAID devices should be integers instead of strings (#176537).
  - Add initial support for iscsi (katzj).


author: Chris Lumens <clumens@redhat.com> 0.30-2
changelog:
  - Add BuildRequires to fix building under mock (#194156,  Joost Soeterbroek
    <fedora AT soeterbroek.com>).


author: Chris Lumens <clumens@redhat.com> 0.30-1
changelog:
  - Change order of LVM-related writing functions (#193073).
  - Require urlgrabber.
  - Return a more useful error message on unknown commands.
  - Fix logvol writing typo.
  - Make ksvalidator validate from a URL in addition to a file.
  - Don't write out an empty packages section (#192851).


author: Chris Lumens <clumens@redhat.com> 0.26-1
changelog:
  - Ignore spaces before group names (#188095).
  - Added some translations.
  - Add options for repo command.
  - Reorder %packages section output.
  - Output %packages header options.
  - Initialize RAID and volume group members to empty lists.


author: Chris Lumens <clumens@redhat.com> 0.24-1
changelog:
  - Don't write out a blank xconfig line.
  - Reorder output handlers to group like commands together.
  - Mark strings for translation.


author: Chris Lumens <clumens@redhat.com> 0.21-1
changelog:
  - Provide an option to not traceback on missing include files (#181760).
  - Update programming documentation.


author: Chris Lumens <clumens@redhat.com> 0.18-1
changelog:
  - Fix some errors pychecker caught.
  - Allow exceptions to not be fatal so ksvalidator can spot more errors in
    a single pass (#179894).


author: Chris Lumens <clumens@redhat.com> 0.13-1
changelog:
  - Recognize the --eject parameter to shutdown/halt.
  - Store the exact post-installation action in ksdata.


author: Chris Lumens <clumens@redhat.com> 0.8-1
changelog:
  - Default to SELINUX_ENFORCING.
  - Default partition sizes to None for anaconda (#172378).
  - Don't call shlex.split on anything inside a script (#172313).


author: Chris Lumens <clumens@redhat.com> 0.7-1
changelog:
  - Fix clearpart --all.
  - vnc command does not require --connect option (#172192).
  - network --onboot does not take any option.
  - Remove extra spaces from firewall --ports and --trust.
  - Write out network --<service> options.


author: Chris Lumens <clumens@redhat.com> 0.3-1
changelog:
  - Add a deprecated attribute to options.
  - Add --card option back to xconfig and mark as deprecated.
  - Throw a deprecation warning on mouse and langsupport commands.
  - Rename Writer to KickstartWriter for consistency.
  - Collapse scripts into a single list and add an attribute on Script to
    differentiate.


author: Chris Lumens <clumens@redhat.com> 0.2-1
changelog:
  - Rename module to pykickstart to avoid conflicts in anaconda.
  - Rename data classes for consistency.
  - Add default bytesPerInode settings.


author: Matthew Barnes <mbarnes@redhat.com> - 2.10.1-12.el5
changelog:
  - Revise patch for RH bug #237077 to correct a reference counting error.
    Reported separately as RH bug #430347.


author: Matthew Barnes <mbarnes@redhat.com> - 2.10.1-10.el5
changelog:
  - Require not just pygtk2 = (version) but (version)-(release) in the
    subpackages (RH bug #311571).


author: Matthew Barnes <mbarnes@redhat.com> - 2.10.1-5.el5
changelog:
  - Spec file cleanups to match Fedora.
  - Define a python_sitelib macro for files under site_packages (bug #211806).


author: John (J5) Palmieri <johnp@redhat.com> - 2.7.3-3
changelog:
  - Add a BuildRequires on python-numeric so that Numeric
    python support is added
  - Add a Requires on python-numeric as well


author: Mark McLoughlin <markmc@redhat.com> - 2.5.3-2
changelog:
  - Backport fix for gnome #154779 - python signal handlers weren't
    getting executed while gobject.MainLoop was running


author: Matt Wilson <msw@redhat.com> 1.99.16-1
changelog:
  - added a compatibility function for gtk.gdk.gc_new() so we won't have
    to fix all our code quite yet


author: Matt Wilson <msw@redhat.com>
changelog:
  - fixed typo in devel filelist
  - added macro that tests to see if we have libglade2, make the
    filelist a condition of that
  - changed name to 'pygtk2' to avoid name conflict with pygtk


author: Daniel Reed <djr@redhat.com> 1.6.5-4
changelog:
  - comment out call to autoconf, use 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic}" ; export FFLAGS ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
             [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /bin/rm -f $i && /bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu \
  	--target=x86_64-redhat-linux-gnu \
  	--program-prefix= \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/usr/com \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info instead of ./configure


author: Jakub Jelinek <jakub@redhat.com> 0.4.0-2.el5
changelog:
  - add support for -c /etc/prelink.conf.d/*.conf in prelink.conf (#249889)
  - remove no longer existent directories from default prelink.conf (#248694)
  - reenabled prelink C++ optimizations which have not triggered any longer
    since _ZT[IV]* moved into .data.rel.ro section from .data
  - fixed performance issues in C++ optimizations, especially on GCJ
    CNI programs (#314051)
  - other performance improvements, prelink -avmR after prelink -ua now
    takes roughly 3m4s real time instead of 20m27s before
  - don't run TEXTREL tests if SELinux is enforcing (#245928)
  - don't leave temporary files behind on prelink --verify failures (#199251)
  - fix adjusting of .debug_ranges if end of range is at the end of some
    section and there is padding before the following one


author: Jakub Jelinek <jakub@redhat.com> 0.3.9-2.1
changelog:
  - blacklist libfreebl3.so and libsoftokn3.so, as nss does some
    FIPS mandated braindamaged integrity checking of these two libraries
    (#245775)


author: Jakub Jelinek <jakub@redhat.com> 0.3.9-1
changelog:
  - DT_GNU_HASH support
  - handle N_BNSYM and N_ENSYM stabs (#198203)
  - handle upgrades from prelink with smaller maxpagesize to prelink
    with larger maxpagesize (#196941)


author: Jakub Jelinek <jakub@redhat.com> 0.3.8-1
changelog:
  - fix -q mode canonicalization fix, speed up filename canonicalization
    by caching canonicalization for directories (#145983, #188062)
  - remove bogus e_shoff assertion check (#194016)
  - move prelink log file to /var/log/prelink/prelink.log (#194473)
  - increase x86-64 maxpagesize to 2MB


author: Jakub Jelinek <jakub@redhat.com> 0.3.7-1
changelog:
  - in -q mode, recheck the canonicalized filename to avoid
    overwriting symlinks with regular files (#145983, #188062)
  - allow prelinking of binaries with .tbss section


author: Jakub Jelinek <jakub@redhat.com> 0.3.6-3
changelog:
  - rebuilt again, disable -Wl,-z,nocopyreloc tests on x86_64,
    nocopyreloc really doesn't work on this platform (#180552)


author: Jakub Jelinek <jakub@redhat.com> 0.3.6-1
changelog:
  - remove kernel requires - installed kernel doesn't imply running
    kernel anyway and in FC5 kernels older than 2.4.20 can't be used
    anyway, as LinuxThreads are no longer included
  - don't relocate stabs N_{B,D,}SLINE (reported by Ashley Pittman)


author: Jakub Jelinek <jakub@redhat.com> 0.3.5-1
changelog:
  - support for ppc32 -msecure-plt libraries and binaries
  - don't crash if d_tag is invalid (#155605)
  - rebuilt against robustified libelf (CAN-2005-1704)
  - fix handling of libraries and binaries given on command
    line without any / characters in the filename


author: Jakub Jelinek <jakub@redhat.com> 0.3.4-1
changelog:
  - fix prelink -uo when linked against libselinux (#146637)
    and when the -o argument filename is on a different filesystem
    than the object that needs undoing


author: Jakub Jelinek <jakub@redhat.com> 0.3.3-1
changelog:
  - if layout code needs to re-prelink some library, make sure
    all libraries that depend on it are re-prelinked too (#140081)
  - add several more checks before deciding it is ok to prelink a binary
    (even if another bug like #140081 was in, these checks should hopefully
    catch it and refuse to (re-)prelink the binary)
  - added new PRELINK_NONRPM_CHECK_INTERVAL variable to /etc/prelink,
    defaulting to 7 days.  Prelink nightly job will not do anything
    if that interval has not elapsed since last prelinking and
    and the rpm database has not been modified since that prelinking.
    This is useful if you rely on rpm/up2date/yum/apt-rpm for library
    and binary updates.  If you combine it with other means (installs
    from source, tarballs etc.), you probably want to
    set PRELINK_NONRPM_CHECK_INTERVAL=0.
  - update prelink man page (#126468)


author: Jakub Jelinek <jakub@redhat.com> 0.3.2-10
changelog:
  - support for non-absolute blacklist glob patterns (e.g. -b *.la)
  - cache information about non-prelinkable files (non-ELF, statically linked,
    too small .dynamic, DT_TEXTREL with conflicts against it; #132056)
  - other speedups for prelink -aq
  - for --verify, make sure only read-only fd's are opened for the
    unprelinked temporary file, otherwise a kernel might ETXTBUSY on it
    (#133317)
  - change warning message if some object's dependencies can't be found
  - add buildrequires libselinux-devel and use %{_tmppath} instead
    of /var/tmp in Buildroot (#132879)


author: Jakub Jelinek <jakub@redhat.com> 0.3.2-6
changelog:
  - change sed separator in testsuite scripts from | to , if \|
    is present in regexps, as that invokes undefined behaviour
    which changed between GNU sed 4.0.9 and 4.1


author: Jakub Jelinek <jakub@redhat.com> 0.3.2-2
changelog:
  - add 2 new TLS testcases (one that fails e.g. with glibc < 2.3.3-28
    on IA-32)
  - SPARC TLS support


author: Jakub Jelinek <jakub@redhat.com> 0.3.2-1
changelog:
  - fix cxx.c:68: find_cxx_sym: Assertive `n < ndeps' failed problem
    on 32-bit architectures (#118522)
  - build prelink.cache into temporary file and atomically rename over
    (#121109)


author: Jakub Jelinek <jakub@redhat.com> 0.3.1-2
changelog:
  - unlink temporary files if renaming to the destination or setting of
    security context failed (#118251)
  - fix bi-architecture prelinking (#118226)
  - if prelink called from the cron script fails, note the exit status
    into /var/log/prelink.log


author: Jakub Jelinek <jakub@redhat.com> 0.3.1-1
changelog:
  - add prelink documentation (PDF format)
  - fix assertion failures on PPC (.sdynbss related, #115925)
  - fix prelink --help (#115202)
  - avoid free on uninitialized variable in one error path (#117332)
  - s/i386/%{ix86}/ to make mharris happy


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-21
changelog:
  - fix prelink abort in certain cases where a new PT_LOAD segment
    needs to be added (seen on AMD64)


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-20
changelog:
  - clearify message about unlisted dependencies
  - don't do SELinux context copying if is_selinux_enabled () < 0


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-19
changelog:
  - refuse to prelink objects whose dependencies as reported by
    ldd don't include all dependencies transitively (this can
    happen when using RPATH and a shared library with the same
    SONAME exists both in that RPATH and either another RPATH
    or standard library directories)
  - add testcase for this
  - rework .dynsym/.symtab STT_SECTION translation, so that it works
    with binutils which put only sections not generated by the linker
    into .dynsym for shared libraries
  - fix make check, so that it is not confused by 2.6.x kernel
    VDSOs


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-18
changelog:
  - allow R_*_JU?MP_SLOT relocs to point also into .got.plt
    sections on IA32/AMD64/ARM/s390/s390x/SH


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-15
changelog:
  - blacklist support
  - use FTW_ACTIONRETVAL if available to avoid even stating of
    files in blacklisted directory trees
  - SELinux support


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-12
changelog:
  - added execstack tool
  - added -o option, to be used together with -u
  - free temp_filename in close_dso


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-11
changelog:
  - fix adjustement of DT_VALRNGLO .. DT_VALRNGHI and
    DT_ADDRRNGLO .. DT_ADDRRNGHI dynamic tags when relocating shared
    libraries
  - never adjust p_vaddr/p_paddr/p_offset of PT_GNU_STACK segment
  - allow shell wildcards in /etc/prelink.conf
  - fix REL->RELA conversion of shared libraries if .rel.dyn
    or .rel.plt are last sections in readonly PT_LOAD segment
  - force full reprelinking on prelink upgrades (well, first time
    the cron job is run after the upgrade)
  - require coreutils, findutils, util-linux, gawk and grep


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-8
changelog:
  - use /var/lib/misc/prelink.full instead of /var/run/prelink.full for last
    full prelink timestamp (#106721)
  - warn about UPX compressed binaries or libraries/binaries without section
    headers (neither can be prelinked obviously)


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-7
changelog:
  - don't rely on malloc/calloc/realloc with size 0 returning a unique pointer
  - fix testsuite, so that it works even if installed glibc/libstdc++
    is already prelinked


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-5
changelog:
  - fix prelink segfault on -z nocombreloc libraries (#103404)
  - run one make check round with -Wl,-z,nocombreloc to test handling
    of nocombreloc binaries and libraries


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-3
changelog:
  - fix DT_CHECKSUM computation - do STT_LOCAL symbol frobbing and .mdebug
    updates write_dso would do also before checksum computation (#89953)


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-2
changelog:
  - avoid assertion failures when changing PROGBITS .bss back into
    NOBITS .bss (#101813)
  - add 2 new tests for it


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-1
changelog:
  - run prelink from cron automatically, add /etc/sysconfig/prelink
    to configure it
  - update manual page


author: Jakub Jelinek <jakub@redhat.com> 0.2.1-2
changelog:
  - fix a thinko in the library path checking code
  - change R_386_GLOB_DAT into R_386_32 in .gnu.conflict, similarly
    R_X86_64_GLOB_DAT and R_X86_64_64
  - fix a bug in find_free_space which caused
    "section file offsets not monotonically increasing" errors on some
    IA-32 binaries
  - add --md5 and --sha options
  - use mmap during --verify if possible
  - add */lib64 directories to prelink.conf


author: Jakub Jelinek <jakub@redhat.com> 0.2.1-1
changelog:
  - make sure binaries prelinked for the second and later time without
    unprelinking in between verify correctly
  - make sure DT_CHECKSUM computation is the same for newly prelinked
    and second or later time prelinked libraries
  - dwarf2 abbrev hash bugfix
  - don't allow prelinking libraries outside directories specified
    in config file or on the command line
  - several new tests for reprelinking
  - pack non-alloced sections and section header table tightly after the
    last alloced section


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-28
changelog:
  - finish and enable ppc64
  - fix ppc BR{,N}TAKEN reloc handling
  - fix up sh_offset values of zero-sized or SHT_NOBITS section
    if ld messed them up
  - issue error about bogus library dependency chains instead of
    segfaulting (plus testcases for it)


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-27
changelog:
  - add --quick mode
  - new test for --quick mode and also reprelinking of binary against
    upgraded shared library which needs more conflicts


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-26
changelog:
  - don't segfault in C++ optimizations if a conflict from undefined
    to defined value is seen
  - some more ppc64 work


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-25
changelog:
  - exec-shield support
  - with -R, don't randomize just base address from which all libs
    are layed out, but also slightly randomize order of libraries
    in the layout queue
  - add check-harder and check-cycle makefile goals in testsuite/,
    use it during rpm building


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-24
changelog:
  - optimize out conflicts in G++ 3+ virtual tables if they are just
    because some method has been called from a binary and thus there
    is a .plt slot in the binary. This change not only kills lots of conflicts
    on some KDE programs, but also should speed up runtime (not just startup
    time), since the hop through .plt is bypassed
  - added new C++ test
  - fix a bug in ppc64 fixup .plt code


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-23
changelog:
  - when updating dynamic tags for executable after section reshuffling,
    check section type as well, so that 0 sized sections don't get the
    tags attached instead of the proper ones
  - when an address space conflict is found between libraries for the same
    executable during layouting, check properly for all remaining conflicts
    as well


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-22
changelog:
  - don't adjust DT_REL{,A} if it is 0
  - allow prelinking of libraries with no dependencies
  - fix handling of libraries with no lazy relocs, no normal relocs or no
    relocs at all
  - some new tests
  - fix SH (Daniel Jacobowitz)


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-20
changelog:
  - ppc TLS
  - some ppc64 work
  - avoid using trampolines for nested functions
  - fix typo in prelink man page (#89247)


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-18
changelog:
  - fix section indices in .symtab if non-alloced sections weren't
    originally monotonically increasing
  - s390, s390x and Alpha TLS support


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-13
changelog:
  - use ELF_F_PERMISSIVE if defined
  - be permissive even when doing --reloc-only
  - fix up .plt section sh_entsize on Alpha


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-11
changelog:
  - make it work with elfutils instead of libelf 0.[78]
  - update to newer auto*/libtool
  - some more steps towards TLS support, at least --reloc-only should work


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-9
changelog:
  - enable on ppc and x86_64
  - fix ppc far PLT slot prelink
  - support --undo on ppc
  - for bug-compatibility with some unnamed OS changed R_SPARC_RELATIVE
    --undo
  - tiny steps towards TLS support on IA-32, more will come


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-8
changelog:
  - avoid putting garbage into executable's .gnu.liblist sh_link
    if we did not have to grow .dynstr
  - don't segfault on bogus sh_link and sh_info values (#72705)


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-7
changelog:
  - when growing allocated shared lib sections (for REL->RELA
    conversion), make sure !PF_W and PF_W segments don't end up
    on the same page
  - when finding space for sections in an executable, make sure
    it is not included in between two reloc sections
  - for non-zero SHN_ABS symbols on 32-bit arches mask high
    32-bits of st_value (libelf 0.8.x is strict here)


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-1
changelog:
  - added --undo and --verify mode
  - new architectures s390, s390x, arm, sh
  - handle binaries/shared libraries with non-allocated sections
    without monotonically increasing sh_offsets
  - handle .sbss and .sdynbss
  - fixed a bug in 64-bit LE/BE read routines
  - removed .rel{,a}.dyn reloc conversion/sorting, it was duplicating
    ld's -z combreloc and complicated lots of things
  - fixed STB_LOCAL/STT_SECTION symbol adjusting
  - use mkstemp for temporary files, allow --verify for binaries/libs
    on read-only filesystems
  - added DWARF-2 .debug_ranges adjustement, special case GCC's
    "set base to 0 and make things absolute instead of relative" trick
  - allow arches to override default layout mechanism (for ppc)
  - added some new tests, test --undo and --verify modes in the testsuite
  - alpha: adjust what R_ALPHA_GLOB_DAT points to too
  - i386: apply _32 and _PC32 REL relocs, as apply_rel can be called
    for C++ optimizations before REL->RELA conversion
  - ppc: layout strategy to satisfy ppc lib location preferences
  - sparc64: handle R_SPARC_DISP64
  - x86-64: adjust what R_X86_64_RELATIVE points to too
  - link prelink statically, esp. because of --verify mode
  - run make check during build process


author: Jakub Jelinek <jakub@redhat.com> 0.1.3-7
changelog:
  - fix layout code so that -R works
  - on IA-32, when there are no R_386_PC32 relocs and no R_386_32 relocs
    with non-zero addend (= memory content), don't convert REL->RELA,
    only switch R_386_32 relocs to R_386_GLOB_DAT
  - support creating a new PT_LOAD segment if necessary, if SHT_NOBITS
    sections are small, instead of adding new PT_LOAD segment just add file
    backing to those NOBITS sections
  - added testsuite
  - new supported architectures (Alpha including .mdebug section support,
    Sparc, Sparc 64-bit, X86_64 (the last one untested)), beginning of PPC
    support


author: Jakub Jelinek <jakub@redhat.com> 0.1.3-5
changelog:
  - fix sorting of .rel*.dyn sections, so that all RELATIVE relocs really
    come first
  - when DT_RELCOUNT already exists and conversion REL->RELA is done,
    convert it into DT_RELACOUNT
  - set conflict lookupent and conflictent to 0 for undefineds
  - don't bother with DT_REL*COUNT for apps, they cannot have any RELATIVE
    relocs


author: Jakub Jelinek <jakub@redhat.com> 0.1.3-4
changelog:
  - brown paper bag time: when determining if conversion from REL to RELA
    is needed, check all non-PLT rel sections, including last.
    This caused prelinking to fail with -z combreloc compiled libraries.


author: Jakub Jelinek <jakub@redhat.com> 0.1.3-3
changelog:
  - don't use .gnu.reloc section, use .rel.dyn or .rela.dyn instead
  - put RELATIVE relocs first, not last, so that DT_REL{,A}COUNT
    works
  - put in updated glibc patch
  - no need for special binutils patch - all is done in the -z combreloc
    patchset


author: Jakub Jelinek <jakub@redhat.com> 0.1.3-2
changelog:
  - use the new DT_GNU_CONFLICT/DT_GNU_LIBLIST/SHT_GNU_LIBLIST constants
  - unlink *.#prelink# files if necessary


author: Jakub Jelinek <jakub@redhat.com> 0.1.3-1
changelog:
  - fix layout.c
  - create .gnu.prelink_undo section, --undo and --verify modes will use that
  - some more C++ specific optimizations


author: Jakub Jelinek <jakub@redhat.com> 0.1.2-1
changelog:
  - bail out early if ELF object does not have sh_offsets
    monotonically increasing
  - disallow prelinking if there are conflicts against read-only
    segments in shared libraries (ie. non-pic shared libraries
    - this is better than bailing out for all non-pic shared libraries)
  - add some C++ specific optimizations to reduce number of conflicts,
    more to come


author: Jakub Jelinek <jakub@redhat.com> 0.1.1-1
changelog:
  - relocate stabs and dwarf-2 debugging formats
  - support both --all and incremental prelinking
  - handle hardlinks
  - limit to libraries in /etc/prelink.conf directories or
    directories from command line


author: Jason Vas Dias<jvdias@redhat.com> 3.4.5-4
changelog:
  - fix bug 158303: x86_64 build needs -fPIC
  - fix bug 155785: PVM_ARCH should be LINUX on i386, not LINUXI386
                    add LINUXPPC64 arch to pvmgetarch


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add patch:
  	* Fri May 24 2002 Phil Knirsch <pknirsch@redhat.com> 3.4.4-2b
  	- Updated patch for mainframe.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add README.RedHat for setup instructions - some
    enviroment variables need to be set for pvm to work


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - use /var/run/pvm3 for state files (#16217) for a long
    and healthy life, uninterrupted by tmpwatch


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fixed a problem with the PVM man page 
  - gzip the man pages
  - should now be able to compile with several tcl/tk versions 
    without problems


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - fixed the useradd failure mode when user already exists
  - finally, the init script seems to behave nicely as user pvm


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - added env. variable to make pvmd background when started
  - fixed init script killproc errors
  - moved to 3.4.3 proper


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - added sparc64 identifier to pvmgetarch
  - configured pvmd within the init script to run as user pvm


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - added sysV init script
  - added a shell wrapper in /usr/bin for the pvm shell
  - moved up to 3.4.2pl4


author: Tim Powers <timp@redhat.com>
changelog:
  - update to 3.4.1
  - comment out the patches in prep section, will test, if it works then it
    stays commented


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added a patch for the SIGCLD -> SIGCHLD rename
  - fixed the incredibly stupid spec file to have a much shorter %files list


author: Tim Powers <timp@redhat.com>
changelog:
  - man pages in /usr/share/man (FHS compliant location)
  - grabbed spec from contrib
  - initial build for Powertools


author: Timo Karjalainen <timok@iki.fi>
changelog:
  - Reverted back to un-gzipped man-pages (Redhat style)
  - Added patch to compile everything cleanly
  - Some minor changes to specfile


author: Tomasz K³oczko <kloczek@rudy.mif.pg.gda.pl>
changelog:
  - new version:
      Patchlevel 17 had some minor bugfixes and improvements
      - Trailer information now put before %EOF comments if no %Trailer
      - psselect can now add blank pages.
      - Piped input works in Linux
      - spec file rewrited for using Buildroot,
      - man pages gziped.


author: Roland McGrath <roland@redhat.com> 1.2-3
changelog:
  - updated linuxthreads support for newer linuxthreads internals (#107305)
  - avoid buffer overflow in symbol printing (#109642)


author: Tim Waugh <twaugh@redhat.com> 1.2.2-1
changelog:
  - s/Copyright/License/.
  - 1.2.2.
  - Apply multibyte patch so that DTD preparsing works with DocBook 4.0 up.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - don't try to touch the site-start.el file
  - use %{_tmppath}
  - don't %define %version above the "Version: " part
    of the header


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - PATH hack to protect "make install" from install-info
  - %doc path fixed
  - protect postun from uninstall
  - Moved $V outside of '' so that it gets interpolated


author: Ivana Varekova <varekova@redhat.com> - 6.3.2-44
changelog:
  - Resolves: #291531
    fix log file permission
  - Resolves: #232163
    service psacct status returns the right value
  - Resolves: #447028
    Logrotate of psacct will restart accounting even if 
    the service was stopped


author: Charles Bennett <ccb@redhat.com> 6.3.2-33.fc4
changelog:
  - rhbz 133077: logrotate fixed to continue accounting during rotate
  - rhbz 141802: lastcomm was not handling all forms of --strict-match
  - rhbz 141971: rpm -e no longer leaves /var/lock/subsys/psacct
  - rhbz 43294: sa will never report any io because the kernel doesn't
     provide it.  Tweaked to ignore ac_io in acct.h
  - integrate lastcomm hz patch from RH support


author: Mike A. Harris <mharris@redhat.com> 6.3.2-25
changelog:
  - Added with_last conditional to disable /usr/bin/last because ours is in
    the SysVInit package.  This fixes unpackaged files terminate build prob.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-24
changelog:
  - Fixed initscript reload/restart by creating start/stop functions and
    making everything use them (#72261)


author: Mike A. Harris <mharris@redhat.com> 6.3.2-23
changelog:
  - Fixed chkconfig issue in rpm scripts (#61191)
  - Excludearch ia64, not taking the time to debug/troubleshoot random
    buildsystem failure due to higher priorities.


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Take the time to make sure things get through on all archs, by simply
    running it through the build system.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-19
changelog:
  - Made initscript touch/chmod accounting file if it is not present during
    startup, to ensure accounting works properly when enabled.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-17
changelog:
  - Removed the files usracct and savacct, which are not used by psacct
    utilities at all, but by the sa program.  Our sa uses files in a different
    location, and so these files are unused and unnecessary.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-15
changelog:
  - Added new feature - psacct initscript now controls process accounting so
    that it is not just forced on if installed as was the previous behaviour
  - Modified the initscripts package to not force psacct on anymore and made
    the new psacct-6.3.2-15 conflict with previous initscripts packages.
  - Fixed logrotate config to set perms/owner of new log files, and closed
    bug (#54165)


author: Mike A. Harris <mharris@redhat.com> 6.3.2-13
changelog:
  - Removed Build_7x flag, added FHS_compliant flag, reworked specfile to use new
    flag, and fixed bug (#60716)


author: Mike A. Harris <mharris@redhat.com> 6.3.2-11
changelog:
  - Conditionalized acct-6.3.2-config.patch to only be applied for RHL 7.x
    builds, as it breaks FHS compliance by putting files in nonstandard
    locations.  Also fixed up other places in specfile for FHS 2.2.
  - Added acct-6.3.2-I-HATE-GNU-AUTOCONK.patch because I hate GNU autoconk
    really really badly.
    
  - Bumped to -11 to avoid buildsystem stupidness


author: Mike A. Harris <mharris@redhat.com> 6.3.2-9
changelog:
  - Fixed bug (#53307) psacct is enabled by default, and the log files
    are huge, and will fill the disk up very quickly.  logrotate will
    now compress them daily.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-7
changelog:
  - Change spec tag Copyright -> License
  - change logrotate to rotate daily, and keep 1 month (31 days) of data


author: Mike A. Harris <mharris@redhat.com> 18-11
changelog:
  - Added procinfo-18-mharris-use-sysconf.patch to use sysconf for determining
    the number of processors online, as this is more portable between different
    CPU architectures than relying on particular /proc file entry contents and
    formatting.  We ship on 7 architectures (x86, ia64, AMD64, ppc, ppc64, s390,
    s390x), and the current code only handled x86, alpha, sparc.  sysconf will
    work on all processors.  Better fix for (#9497)


author: Mike A. Harris <mharris@redhat.com> 18-7
changelog:
  - Removed TODO from doc list as the file isn't present any longer
  - Checked upstream URL, still no package version update.


author: Mike A. Harris <mharris@redhat.com> 18-6
changelog:
  - All-arch rebuild
  - Updated to use {_bindir} et al.
  - Fixed Buildroot: line in specfile to be sensible


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - fix up lsdev (Bug #10295 and a couple of unreported bugs) 
  - fix up calculation of uptime milliseconds (introduced by gcc acting
    differently from previous releases, t/100*100 != t*100/100)
    (Bug #20741)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix uptime calculation (Bug #18673)
    This problem was introduced by gcc acting differently from previous
    releases (t * 100 / HZ --> overflow; t / HZ * 100 ok).


author: Peter Vrabec <pvrabec@redhat.com> 3.22-17
changelog:
  - fix truncation of mailbox when running into a disk quota or a
    full partition. Patch from Solar Designer.


author: Trond Eivind Glomsrød <teg@redhat.com> 3.22-4
changelog:
  - Add Telsa Gwynne's procmailrc as a doc file - it's
    excellently commented, and is a great example


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Change to "License: GPL or artistic" from "Copyright: distributable"
  - Fix man page (#35825)
  - 3.15.1
  - redo config patch


author: Karsten Hopp <karsten@redhat.de> 3.0.3-9
changelog:
  - fix invalid javascript created by quote unaware match in default.filter
    Anduin Withers (#126366)


author: Rodrigo Barbosa <rodrigob@tisbrasil.com.br>
changelog:
  + privoxy-2.9.15-7
  - Changing sed expression that removed CR from the end of the lines. This
    new one removes any control caracter, and should work with older versions
    of sed


author: Rodrigo Barbosa <rodrigob@tisbrasil.com.br>
changelog:
  + privoxy-2.9.15-4
  - Fixing issues created by specfile sync between branches
    - Correcting the release number (WARNING)
    - Reintroducing text file conversion (dos -> unix)
    - Reconverting hardcoded directories to macros
    - Refixing ownership of privoxy files (now using multiple defattr
      definitions)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix several .spec file issues to shut up rpmlint
    - non-standard-dir-perm /var/log/privoxy 0744
    - invalid-vendor Privoxy.Org (This is ok for binaries compiled by privoxy
      members, but not for packages from Red Hat)
    - non-standard-group Networking/Utilities
    - logrotate and init scripts should be noreplace


author: Hal Burgiss <hal@foobox.net>
changelog:
  + privoxy-2.9.15-1
  - Add another template and alphabetize these for easier tracking.
  - Add doc/images directory.


author: Rodrigo Barbosa <rodrigob@tisbrasil.com.br>
changelog:
  + privoxy-2.9.15-1
  - Version bump
  - Adding noreplace for %{privoxyconf}/config
  - Included a method to verify if the versions declared on the specfile and
    configure.in match. Interrupt the build if they don't.


author: Rodrigo Barbosa <rodrigob@tisbrasil.com.br>
changelog:
  + privoxy-2.9.14-2
  - Removed the redhat hack that prevented the user and group from
    being dealocated. That was a misundestanding of my part regarding
    redhat policy.


author: Rodrigo Barbosa <rodrigob@tisbrasil.com.br>
changelog:
  + privoxy-2.9.14-1
  - Changes to fixate the uid and gid values as (both) 73. This is a 
    value we hope to standarize for all distributions. RedHat already
    uses it, and Conectiva should start as soon as I find where the heck
    I left my cluebat :-)
  - Only remove the user and group on uninstall if this is not redhat, once
    redhat likes to have the values allocated even if the package is not 
    installed


author: Hal Burgiss <hal@foobox.net>
changelog:
  + privoxy-2.9.13-4
  - Add templates/cgi-style.css, faq.txt, p_web.css, LICENSE
  - Remove templates/blocked-compact.
  - Add more docbook stuff to Builderquires.


author: Rodrigo Barbosa <rodrigob@suespammers.org>
changelog:
  + privoxy-2.9.13-2
  - Fixed the init files entries. Now we use %ghost
  - improved username (and groupname) handling on the %pre section. By improved
    I mean: we do it by brute force now. Much easier to maintain. Yeah, you
    got it right. No more Mr. Nice Guy.
  - Removed the userdel call on %post. No need, once it's complety handled on
    the %pre section


author: Hal Burgiss <hal@foobox.net>
changelog:
  + junkbusterng-2.9.13-1
  - Fixed build problems re: name conflicts with man page and logrotate.
  - Commented out rc?d/* configs for time being, which are causing a build 
  - failure. /etc/junkbuster is now /etc/privoxy. Stefan did other name 
  - changes. Fixed typo ';' should be ':' causing 'rpm -e' to fail.


author: Rodrigo Barbosa <rodrigob@tisbrasil.com.br>
changelog:
  + junkbusterng-2.9.13-1
  - References to the expression ijb where changed where possible
  - New package name: junkbusterng (all in lower case, acording to
    the LSB recomendation)
  - Version changed to: 2.9.13
  - Release: 1
  - Added: junkbuster to obsoletes and conflicts (Not sure this is
    right. If it obsoletes, why conflict ? Have to check it later)
  - Summary changed: Stefan, please check and aprove it
  - Changes description to use the new name
  - Sed string was NOT changed. Have to wait to the manpage to
    change first
  - Keeping the user junkbuster for now. It will require some aditional
    changes on the script (scheduled for the next specfile release)
  - Added post entry to move the old logfile to the new log directory
  - Removing "chkconfig --add" entry (not good to have it automaticaly
    added to the startup list).
  - Added preun section to stop the service with the old name, as well
    as remove it from the startup list
  - Removed the chkconfig --del entry from the conditional block on
    the preun scriptlet (now handled on the %files section)


author: Rodrigo Barbosa <rodrigob@tisbrasil.com.br>
changelog:
  + junkbuster-2.9.11-6
  - Changed the routined that handle the junkbust and junkbuster users on
    %pre and %post to work in a smoother manner
  - %files now uses hardcoded usernames, to avoid problems with package
    name changes in the future


author: Rodrigo Barbosa <rodrigob@tisbrasil.com.br>
changelog:
  + junkbuster-2.9.11-5
  - Added "make redhat-dok" to the build process
  - Added docbook-utils to BuildRequires


author: Rodrigo Barbosa <rodrigob@tisbrasil.com.br>
changelog:
  + junkbuster-2.9.11-4
  - Changing man section in the manpage from 1 to 8
  - We now require packages, not files, to avoid issues with apt


author: Rodrigo Barbosa <rodrigob@tisbrasil.com.br>
changelog:
  + junkbuster-2.9.11-2
  - General specfile fixup, using the best recomended practices, including:
  	- Adding -q to %setup
  	- Using macros whereever possible
  	- Not using wildchars on %files section
  	- Doubling the percentage char on changelog and comments, to
  	  avoid rpm expanding them


author: Hal Burgiss <hal@foobox.net>
changelog:
  - Removed UID 73. Included user-manual and developer-manual in docs.
    Include other actions files. Default shell is now /bin/false.
    Userdel user=junkbust. ChangeLog was not zipped. Removed 
    RPM_OPT_FLAGS kludge.


author: Hal Burgiss <hal@foobox.net>
changelog:
  - Change of $RPM_OPT_FLAGS handling. Added new HTML doc files.
  - Changed owner of /etc/junkbuster to shut up PAM/xauth log noise.


author: Hal Burgiss <hal@foobox.net>
changelog:
  - Added $RPM_OPT_FLAGS support, renaming of old logfile, and 
  - made sure no default shell exists for user junkbust.


author: Stefan Waldherr <stefan@waldherr.org>
changelog:
  - CLF Logging patch by davep@cyw.uklinux.net
  - Hal DeVore <haldevore@earthling.net> fix akamaitech in blocklist


author: Stefan Waldherr <stefan@waldherr.org>
changelog:
  - Steve Kemp skx@tardis.ed.ac.uk's javascript popup patch.
  - Markus Breitenbach breitenb@rbg.informatik.tu-darmstadt.de supplied
    numerous fixes and enhancements for Steve's patch.
  - adamlock@netscape.com (Adam Lock) in the windows version:
    - Taskbar activity spinner always spins even when logging is
    turned off (which is the default) - people who don't
    like the spinner can turn it off from a menu option.
    - Taskbar popup menu has a options submenu - people can now
    open the settings files for cookies, blockers etc.
    without opening the JB window.
    - Logging functionality works again
    - Buffer overflow is fixed - new code uses a bigger buffer
    and snprintf so it shouldn't overflow anymore.
  - Fixed userid swa, group learning problem while installing.
    root must build RPM.
  - Added patch by Benjamin Low <ben@snrc.uow.edu.au> that prevents JB to
    core dump when there is no log file.
  - Tweaked SuSE startup with the help of mohataj@gmx.net and Doc.B@gmx.de.
  - Fixed man page to include imagefile and popupfile.
  - Sanity check for the statistics function added.
  - "Patrick D'Cruze" <pdcruze@orac.iinet.net.au>: It seems Microsoft
   are transitioning Hotmail from FreeBSD/Apache to Windows 2000/IIS.
   With IIS/5, it appears to omit the trailing \r\n from http header
   only messages.  eg, when I visit http://www.hotmail.com, IIS/5
   responds with a HTTP 302 redirect header.  However, this header
   message is missing the trailing \r\n.  IIS/5 then closes the
   connection.  Junkbuster, unfortunately, discards the header becomes
   it thinks it is incomplete - and it is.  MS have transmitted an
   incomplete header!
  - Added bug reports and patch submission forms in the docs.


author: Stefan Waldherr <stefan@waldherr.org>
changelog:
  Andrew <anw@tirana.freewire.co.uk> extended the JB:
         Display of statistics of the total number of requests and the number
         of requests filtered by junkbuster, also the percentage of requests
         filtered. Suppression of the listing of files on the proxy-args page.
         All stuff optional and configurable.


author: Stefan Waldherr <stefan@waldherr.org>
changelog:
  Jan Willamowius (jan@janhh.shnet.org) fixed a bug in the 
         code which prevented the JB from handling URLs of the form
         user:password@www.foo.com. Fixed.


author: Stefan Waldherr <stefan@waldherr.org>
changelog:
  Blank images are no longer cached, thanks to a hint from Markus 
          Breitenbach <breitenb@rbg.informatik.tu-darmstadt.de>. The user 
          agent is NO longer set by the Junkbuster. Sadly, many sites depend 
          on the correct browser version nowadays. Incorporated many 
  	suggestions from Jan "Yenya" Kasprzak <kas@fi.muni.cz> for the
          spec file. Fixed logging problem and since runlevel 2 does not 
          use networking, I replaced /etc/rc.d/rc2.d/S84junkbuster with
          /etc/rc.d/rc2.d/K09junkbuster thanks to Shaw Walker 
          <walker@netgate.net>. You should now be able to build this RPM as 
          a non-root user (mathias@weidner.sem.lipsia.de).


author: Stefan Waldherr <stefan@waldherr.org>
changelog:
  %{_localstatedir}/log/junkbuster set to nobody. Added /etc/junkbuster/imagelist
  	to allow more sophisticated matching of blocked images. Logrotate
  	logfile. Added files for auto-updating the blocklist et al.


author: Stefan Waldherr <stefan@waldherr.org>
changelog:
  Configure blank version via config file. No separate blank
  	version anymore. Added Roland's <roland@spinnaker.rhein.de>
  	patch to show a logo instead of a blank area. Added a suggestion
  	from Alex <alex@cocoa.demon.co.uk>: %{_localstatedir}/lock/subsys/junkbuster.
  	More regexps in the blocklist. Prepared the forwardfile for
  	squid. Extended image regexp with help from gabriel 
  	<somlo@CS.ColoState.EDU>.


author: Stefan Waldherr <stefan@waldherr.org>
changelog:
  All RPMs now identify themselves in the show-proxy-args page.
  	Released Windoze version. Run junkbuster as nobody instead of
  	root.


author: Stefan Waldherr <stefan@waldherr.org>
changelog:
  Newest version. First release (hence the little version number
  	mixture -- 2.0.2-0 instead of 2.0-7). This version tightens 
  	security over 2.0.1; some multi-user sites will need to change 
  	the listen-address in the configuration file. The blank version of
          the Internet Junkbuster has a more sophisticated way of replacing
  	images. All RPMs identify themselves in the show-proxy-args page.


author: Stefan Waldherr <stefan@waldherr.org>
changelog:
  Modified the blocking feature, so that only GIFs and JPEGs are
  	blocked and replaced but not HTML pages. Thanks to 
  	"Gerd Flender" <plgerd@informatik.uni-siegen.de> for this nice
  	idea. Added numerous stuff to the blocklist. Keep patches in
          seperate files and no longer in diffs (easier to maintain).


author: Stefan Waldherr <swa@cs.cmu.edu>
changelog:
  Moved config files to /etc/junkbuster directory, moved man page,
  	added BuildRoot directive (Thanks to Alexey Nogin <ayn2@cornell.edu>)
          Made new version junkbuster-raw (which is only a stripped version of 
          the junkuster rpm, i.e. without my blocklist, etc.)


author: (2.0-1)
changelog:
  Uhm, not that much. Just a new junkbuster version that
  	fixes a couple of bugs ... and of course a bigger 
  	blocklist with the unique Now-less-ads-than-ever(SM)
  	feature.
  	Oh, one thing: I changed the default user agent to Linux -- no 
  	need anymore to support Apple.


author: (2.0-0)
changelog:
  Now-less-ads-than-ever (SM)
  	compiled with gcc instead of cc
  	compiled with -O3, thus it should be a little faster
  	show-proxy-args now works
  	/etc/junkbuster.init wasn't necessary


author: (1.4)
changelog:
  some more config files were put into /etc
  	The junkbuster-blank rpm returns a 1x1 pixel image, that gets 
  	displayed by Netscape instead of the blocked image.
  	Read http://www.waldherr.org/junkbuster/ for
  	further info.


author: (1.3)
changelog:
  The program has been moved to /usr/sbin (from /usr/local/bin)
  	Init- and stopscripts (/etc/rc.d/rc*) have been added so
  	that the junkbuster starts automatically during bootup.
  	The /etc/blocklist file is much more sophisticated. Theoretically
  	one should e.g. browse all major US and German newspapers without
  	seeing one annoying ad.
  	junkbuster.init was modified. It now starts junkbuster with an
  	additional "-r @" flag.


author: Jiri Skala <jskala@redhat.com> 2.4.4-2.el5
changelog:
  - Resolves: #440613 corrected format of release line in spec file
  - Resolves: #443914 conflict with syslog on pppoe-server
  - Resolves: #241753 undesired files in the package
  - Resolves: #251456 pppoe-server error


author: Thomas Woerner <twoerner@redhat.com> 2.4.4-1
changelog:
  - new version 2.4.4 with lots of fixes
  - fixed reesolv.conf docs (#165072)
    Thanks to Matt Domsch for the initial patch 
  - enabled CBCP (#199278)


author: Thomas Woerner <twoerner@redhat.com> 2.4.3-2
changelog:
  - dropped all executable bits in scripts directory to prevent rpm requiring
    programs used in there


author: Thomas Woerner <twoerner@redhat.com> 2.4.3-1
changelog:
  - new version 2.4.3
    - updated patches: make, lib64, dontwriteetc, fix, fix64, no_strip,
      radiusplugin
    - dropped patches: bpf, signal, pcap, pppoatm, pkgcheck


author: David Woodhouse <dwmw2@redhat.com> 2.4.2-6.2
changelog:
  - Link pppoatm plugin against libresolv.
  - Revert to linux-atm headers without the workaround for #127098


author: Thomas Woerner <twoerner@redhat.com> 2.4.2-5
changelog:
  - example scripts are using change_resolv_conf to modify /etc/resolv.conf
    (#132482)
  - require new libpcap library (>= 0.8.3-6) with a fix for inbound/outbound
    filter processing
  - not using internal libpcap structures anymore, fixes inbound/outbound
    filter processing (#128053)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add patch:
  	* Thu Jun 06 2002 Phil Knirsch <pknirsch@redhat.com>
  	- Fixed varargs problem for s390/s390x.


author: Nalin Dahyabhai <nalin@redhat.com> 2.4.1-2
changelog:
  - add buildprereq on pam-devel (#49559)
  - add patch to respond to CBCP LCP requests (#15738)
  - enable cbcp support at build-time
  - change the Copyright: tag to a License: tag


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - New version 2.3.9 required for kernel 2.3.13 and will be required
    for new initscripts.  auth patch removed; 2.3.9 does the same thing
    more readably than the previous patch.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated to ppp-2.3.3, build against glibc-2.0.6 - previous patches not
    required any more.
  - added buildroot
  - fixed the PAM support, which was really, completely broken and against any
    standards (session support is still not here... :-( )
  - we build against running kernel and pray that it will work
  - added a samples patch; updated glibc patch


author: Erik Troan <ewt@redhat.com>
changelog:
  - added a patch to use our own route.h, rather then glibc's (which has 
    alignment problems on Alpha's) -- I only applied this patch on the Alpha,
    though it should be safe everywhere


author: Tom Lane <tgl@redhat.com> 08.01.0200-2
changelog:
  - Change library name back to psqlodbc.so, because it appears that upstream
    will revert to that name in next release; no point in thrashing the name.
  - Include documentation files unaccountably omitted before (bug #184158)


author: Tom Lane <tgl@redhat.com> 08.01.0200-1
changelog:
  - Update to version 08.01.0200.
  - Upstream now calls the library psqlodbcw.so ... add a symlink to avoid
    breaking existing odbc configuration files.


author: Tom Lane <tgl@redhat.com> 8.1.405-1jpp
changelog:
  - Split postgresql-jdbc into its own SRPM (at last).
  - Build it from source.  Add support for gcj compilation.


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-31
changelog:
  - Fix regression introduced by CVE-2013-4073
    https://bugs.ruby-lang.org/issues/8575
    * ruby-2.0.0-p255-Fix-SSL-client-connection-crash-for-SAN-marked-critical.patch
    - Related: rhbz#979297


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-30
changelog:
  - hostname check bypassing vulnerability in SSL client.
    * ruby-1.8.7-p374-CVE-2013-4073-fix-hostname-verification.patch
    - Resolves: rhbz#979297


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-29
changelog:
  - Fix regression introduced by fix for entity expansion DOS vulnerability
    in REXML (https://bugs.ruby-lang.org/issues/7961)
    * ruby-2.0.0-add-missing-rexml-require.patch
  - Related: rhbz#915377


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-28
changelog:
  - Addresses entity expansion DoS vulnerability in REXML.
    * ruby-2.0.0-entity-expansion-DoS-vulnerability-in-REXML.patch
  - Resolves: rhbz#915377


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-27
changelog:
  - unintentional file creation caused by inserting an illegal NUL character
    * ruby-1.8.6-CVE-2012-4522-io.c-pipe_open-command-name-should-not-contain-null-.patch
    - Related: rhbz#867750


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-26
changelog:
  - $SAFE escaping vulnerability about Exception#to_s / NameError#to_s
    * ruby-1.8.7-p371-CVE-2012-4481.patch
    - Resolves: rhbz#867750
  - unintentional file creation caused by inserting an illegal NUL character
    * ruby-1.8.6-CVE-2012-4522-io.c-rb_open_file-should-check-NUL-in-path.patch
    - Resolves: rhbz#867750


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-25
changelog:
  - Resolve buffer overflow causing gem installation issues.
    * ruby-1.8.7-syck-avoid-buffer-overflow.patch
    - Resolves: rhbz#834381


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-24
changelog:
  - Properly initialize the random number generator when forking new process
    * ruby-1.8.7-CVE-2011-3009.patch
    - Related: rhbz#768830


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-22
changelog:
  - Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
    attacks (oCERT-2011-003)"
    * ruby-1.8.7-CVE-2011-4815.patch
    - Resolves: rhbz#768830
  - Patch cleanup.


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-21
changelog:
  - ruby recurses indefinitely when cwd is broken and path empty.
    * ruby-1.8.6-fix-indefinitely-recurse.patch
    - Resolves: rhbz#435631
  - REXML does not correctly normalize '&'.
    * ruby-1.8.6-fix-rexml-normalize.patch
    - Resolves: rhbz#577351
  - require 'rdoc/usage' raises an Exception because of a missing require.
    * ruby-1.8.5-lib-rdoc-ri-ri_options.rb-prevent-NameError.patch
    - Resolves rhbz#445399


author: Vít Ondruch <vondruch@redhat.com> - 1.8.5-20
changelog:
  - Address CVE-2011-1004 "Symlink race condition by removing directory trees in
    fileutils module"
    * ruby-1.8.7-CVE-2011-1004.patch
  - Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
    * ruby-1.8.7-CVE-2011-1005.patch
  - Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
    * ruby-1.8.7-CVE-2011-0188.patch
  - Address CVE-CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
    * ruby-1.8.7-CVE-2010-0541.patch
  - Address CVE-CVE-2009-4492 "ruby WEBrick log escape sequence"
    * ruby-1.8.6-CVE-2009-4492.patch
  - Resolves: rhbz#709958


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-17
changelog:
  - security fixes. (#505088)
  - CVE-2007-1558: APOP password disclosure vulnerability.
  - CVE-2009-0642: Incorrect checks for validity of X.509 certificates.
  - CVE-2009-1904: DoS vulnerability in BigDecimal.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-16
changelog:
  - CVE-2008-4310: real fix for CVE-2008-3656. original patch named as fix for
                   CVE-2008-3656 actually fixed different issue (CVE-2008-1145),
                   hence we are providing correct patch and renaming original
                   patch to refer to proper CVE.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-15
changelog:
  - security fixes. (#461591)
  - CVE-2008-3655: multiple insufficient safe mode restrictions.
  - CVE-2008-1145: WEBrick DoS vulnerability (CPU consumption).
  - CVE-2008-3657: missing "taintness" checks in dl module.
  - CVE-2008-3905: use of predictable source port and transaction id in DNS
                   requests done by resolv.rb module.
  - CVE-2008-3443: Memory allocation failure in Ruby regex engine
                   (remotely exploitable DoS).
  - CVE-2008-3790: DoS vulnerability in the REXML module.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-12
changelog:
  - security fixes. (#451929)
  - CVE-2008-2662: Integer overflow in rb_str_buf_append().
  - CVE-2008-2663: Integer overflow in rb_ary_store().
  - CVE-2008-2664: Unsafe use of alloca in rb_str_format().
  - CVE-2008-2725: Integer overflow in rb_ary_splice().
  - CVE-2008-2726: Integer overflow in rb_ary_splice().


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-6
changelog:
  - security fix [CVE-2007-5162]
  - ruby-1.8.5-CVE-2007-5162.patch: patch for Net::HTTP that is insufficient
    verification of SSL certificate. (#320341)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-5
changelog:
  - security fix release.
  - ruby-1.8.5-cgi-CVE-2006-6303.patch: fix a infinite loop with certain HTTP
    request. (#218290)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-4
changelog:
  - security fix release.
  - ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that
    causes the denial of service. (#212396)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-1
changelog:
  - New upstream release.
  - removed the unnecessary patches:
    - ruby-1.8.4-no-eaccess.patch
    - ruby-1.8.4-64bit-pack.patch
    - ruby-1.8.4-fix-insecure-dir-operation.patch
    - ruby-1.8.4-fix-insecure-regexp-modification.patch
    - ruby-1.8.4-fix-alias-safe-level.patch
  - build with --enable-pthread except on ppc.
  - ruby-1.8.5-hash-memory-leak.patch: backported from CVS to fix a memory leak
    on Hash. [ruby-talk:211233]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-11
changelog:
  - security fixes [CVE-2006-3694]
    - ruby-1.8.4-fix-insecure-dir-operation.patch:
    - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure
      operations in the certain safe-level restrictions. (#199538)
    - ruby-1.8.4-fix-alias-safe-level.patch: fixed to not bypass the certain
      safe-level restrictions. (#199543)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-7
changelog:
  - exclude ppc64 to make ruby-mode package. right now emacs.ppc64 isn't provided
    and buildsys became much stricter.
  - ruby-deprecated-sitelib-search-path.patch: applied to add more search path
    for backward compatiblity.
  - added byacc to BuildReq. (#194161)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-6
changelog:
  - ruby-deprecated-search-path.patch: added the deprecated installation paths
    to the search path for the backward compatibility.
  - added a Provides: ruby(abi) to ruby-libs.
  - ruby-1.8.4-64bit-pack.patch: backport patch from upstream to fix unpack("l")
    not working on 64bit arch and integer overflow on template "w". (#189350)
  - updated License tag to be more comfortable, and with a pointer to get more
    details, like Python package does. (#179933)
  - clean up.


author: Akira TAGOH <tagoh@redhat.com>
changelog:
  - ruby-rubyprefix.patch: moved all arch-independent modules under /usr/lib/ruby
    and keep arch-dependent modules under /usr/lib64/ruby for 64bit archs.
    so 'rubylibdir', 'sitelibdir' and 'sitedir' in Config::CONFIG points to
    the kind of /usr/lib/ruby now. (#184199)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-3
changelog:
  - ruby-1.8.4-no-eaccess.patch: backported from ruby CVS to avoid conflict
    between newer glibc. (#179835)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-1
changelog:
  - New upstream release.
    - fixed a missing return statement. (#140833)
    - fixed an use of uninitialized variable. (#144890)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-0.4.preview2
changelog:
  - updates to 1.8.4-preview2.
  - renamed the packages to ruby-* (#175765)
    - irb  -> ruby-irb
    - rdoc -> ruby-rdoc
    - ri   -> ruby-ri
  - added tcl-devel and tk-devel into BuildRequires.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-4
changelog:
  - moved the documents from ruby-libs to ruby-docs, which contains the arch
    specific thing and to be multilib support. (#168826)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-3
changelog:
  - fixed the wrong file list. the external library for tcl/tk was included
    in ruby-libs unexpectedly.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-1
changelog:
  - New upstream release.
  - Build-Requires xorg-x11-devel instead of XFree86-devel.
  - ruby-multilib.patch: applied for only 64-bit archs.
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: removed. it has already been in upstream.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-9
changelog:
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: fixed the arbitrary command execution
    on XMLRPC server. (#161096)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-7
changelog:
  - ruby-1.8.2-deadcode.patch: removed the dead code from the source. (#146108)
  - make sure that all documentation files in ruby-docs are the world-
    readable. (#147279)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-1
changelog:
  - New upstream release.
  - ruby-1.8.1-ia64-stack-limit.patch: removed - it's no longer needed.
  - ruby-1.8.1-cgi_session_perms.patch: likewise.
  - ruby-1.8.1-cgi-dos.patch: likewise.
  - generated Ruby interactive documentation - senarated package.
    it's now provided as ri package. (#141806)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-9
changelog:
  - ruby-1.8.1-cgi-dos.patch: security fix [CAN-2004-0983]
  - ruby-1.8.1-cgi_session_perms.patch: security fix [CAN-2004-0755]


author: Akira TAGOH <tagoh@redhat.com> 1.8.1-1
changelog:
  - New upstream release.
  - don't use any optimization for ia64 to avoid the build failure.
  - ruby-1.8.1-ia64-stack-limit.patch: applied to fix SystemStackError when the optimization is disabled.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-9
changelog:
  - ruby-1.6.8-castnode.patch: handling the nodes with correct cast.
    use this patch now instead of ruby-1.6.8-fix-x86_64.patch.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-7
changelog:
  - fix the gcc warnings. (#82192)
  - ruby-1.6.8-fix-x86_64.patch: correct a patch.
    NOTE: DON'T USE THIS PATCH FOR BIG ENDIAN ARCHITECTURE.
  - ruby-1.6.7-long2int.patch: removed.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-2
changelog:
  - ruby-1.6.8-require.patch: applied to fix the search bug in require.
  - don't apply long2int patch to s390 and s390x. it doesn't work.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-1
changelog:
  - New upstream release.
  - removed some patches. it's no longer needed.
    - ruby-1.6.7-100.patch
    - ruby-1.6.7-101.patch
    - ruby-1.6.7-102.patch
    - ruby-1.6.7-103.patch
    - 801_extmk.rb-shellwords.patch
    - 801_mkmf.rb-shellwords.patch
    - 804_parse.y-new-bison.patch
    - 805_uri-bugfix.patch
    - ruby-1.6.6-900_XXX_strtod.patch
    - ruby-1.6.7-sux0rs.patch
    - ruby-1.6.7-libobj.patch


author: Elliot Lee <sopwith@redhat.com> 1.6.7-13
changelog:
  - Remove ExcludeArch: x86_64
  - Fix x86_64 ruby with long2int.patch (ruby was assuming that sizeof(long) 
    == sizeof(int). The patch does not fix the source of the problem, just 
    makes it a non-issue.)
  - _smp_mflags


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-11
changelog:
  - use %configure macro instead of configure script.
  - use the latest config.{sub,guess}.
  - get archname from rbconfig.rb for %dir
  - applied some patches from Debian:
    - 801_extmk.rb-shellwords.patch: use Shellwords
    - 801_mkmf.rb-shellwords.patch: mkmf.rb creates bad Makefile. the Makefile
      links libruby.a to the target.
    - 803_sample-fix-shbang.patch: all sample codes should be
      s|/usr/local/bin|/usr/bin|g
    - 804_parse.y-new-bison.patch: fix syntax warning.
    - 805_uri-bugfix.patch: uri.rb could not handle correctly broken mailto-uri.
  - add ExcludeArch x86_64 temporarily to fix Bug#74581. Right now ruby can't be
    built on x86_64.


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-10
changelog:
  - moved sitedir to /usr/lib/ruby/site_ruby again according as our perl and
    python.
  - ruby-1.6.7-resolv1.patch, ruby-1.6.7-resolv2.patch: applied to fix 'Too many
    open files - "/etc/resolv.conf"' issue. (Bug#64830)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-2
changelog:
  - ruby-man-1.4.6-jp.tar.bz2: removed.
  - ruby-refm-rdp-1.4.7-ja-html.tar.bz2: uses it instead of.
  - ruby-1.6.7-500-marshal-proc.patch, ruby-1.6.7-501-class-var.patch:
    removed.
  - ruby-1.6.7-100.patch: applied a bug fix patch.
    (ruby-dev#16274: patch for 'wm state')
    (PR#206ja: SEGV handle EXIT) 
  - ruby-1.6.7-101.patch: applied a bug fix patch.
    (ruby-list#34313: singleton should not be Marshal.dump'ed)
    (ruby-dev#16411: block local var)
  - ruby-1.6.7-102.patch: applied a bug fix patch.
    (handling multibyte chars is partially broken)
  - ruby-1.6.7-103.patch: applied a bug fix patch.
    (ruby-dev#16462: preserve reference for GC, but link should be cut)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-1
changelog:
  - New upstream release.
  - ruby-1.6.6-100.patch, ruby-1.6.6-501-ruby-mode.patch:
    removed. these patches no longer should be needed.
  - ruby-1.6.7-500-marshal-proc.patch: applied a fix patch.
    (ruby-dev#16178: Marshal::dump should call Proc#call.)
  - ruby-1.6.7-501-class-var.patch: applied a fix patch.
    (ruby-talk#35157: class vars broken in 1.6.7)


author: Akira TAGOH <tagoh@redhat.com> 1.6.6-1
changelog:
  - New upstream release.
  - Applied bug fix patches:
    - ruby-1.6.6-501-ruby-mode.patch: ruby-talk#30479: disables font-lock
      coloring.
    - ruby-1.6.6-100.patch: ruby-talk#30203: Ruby 1.6.6 bug and fix
                            ruby-list#33047: regex bug
                            PR#230: problem with -d in 1.6.6
  - Added ruby-mode and ruby-mode-xemacs packages.
  - Ruby works fine for ia64. so re-enable to build with ia64.
    (probably it should be worked for alpha)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.6.4-2
changelog:
  - Remove Japanese description and summaries; they belong in specspo and
    break rpm
  - Clean up specfile
  - Mark language specific files (README.jp) as such
  - bzip2 sources
  - rename the libruby package to ruby-libs for consistency
  - Exclude ia64 (doesn't build - the code doesn't seem to be 64-bit clean
    [has been excluded on alpha forever])


author: akira yamada <akira@vinelinux.org>
changelog:
  - fixed bad group for libruby.
  - Applied patch: upgraded to cvs version (2001-02-08):
    fixed minor bugs.


author: akira yamada <akira@vinelinux.org>
changelog:
  - Applied patch: upgraded to cvs version (2001-01-15):
    fixed minor bugs(e.g. ruby makes extention librares too large...).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000122019.patch, added ruby_cvs.2000122215.patch
    (upgraded ruby to latest cvs version, 1.6.2-preview4).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000121413.patch, added ruby_cvs.2000122019.patch
    (upgraded ruby to latest cvs version).
  - new package: libruby


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101901.patch, added ruby_cvs.2000121413.patch
    (upgraded ruby to latest cvs version).
  - Removed ruby-dev.11262.patch, ruby-dev.11265.patch, 
    and ruby-dev.11268.patch (included into above patch).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101117.patch and added ruby_cvs.2000101901.patch
    (upgraded ruby to latest cvs version).
  - Added ruby-dev.11262.patch.
  - Added ruby-dev.11265.patch.


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000101117.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100218.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000092718.patch and added ruby_cvs.2000100218.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Updated to upstream version 1.6.1.
  - Removed ruby_cvs.2000082901.patch and added ruby_cvs.2000092718.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.6.
  - removed ruby-dev.10123.patch(included into ruby-1.4.6).
  - Added ruby_cvs.2000082901.patch(upgraded ruby to latest cvs version).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/22/2000 CVS).
  - Removed ruby-dev.10054.patch(included into ruby_cvs.patch).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/20/2000 CVS).
  - Removed ruby-list.23190.patch(included into ruby_cvs.patch).
  - Added ruby-dev.10054.patch.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/12/2000 CVS).
  - Added manuals and FAQs.
  - Split into ruby, ruby-devel, ruby-tcltk, ruby-docs, irb.


author: Toru Hoshina <hoshina@best.com>
changelog:
  - Modified SPEC in order to install libruby.a so that it should be used by
    another ruby entention.
  - 2nd release.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - do not check with "id" if running as root (/usr/bin/id)
  - link statically against -lwrap (from /usr/lib)


author: Daniel J Walsh <dwalsh@redhat.com> 4.0-50
changelog:
  - Change spec file to stop building auxilliary files
  - Fix Makefile to build correctly on x86-64
  - Fix strerror.c to build correctly on x86-64


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix manpage (#13218)
  - gettextize 
  - exit if /etc/sysconfig/network doesn't exist
    and make sure it works when networking is off (#23757)


author: Philipp Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed a build warning for daemon.c (missing <stdlib.h> include)
  - Portmap now running under user rpc if possible (#12427)


author: Than Ngo <than@redhat.de>
changelog:
  - /etc/rc.d/init.d -> /etc/init.d
  - condrestart in %postun
  - fix initscript
  - add requires initscript
  - remove links from packaging


author: Erik Troan <ewt@redhat.com>
changelog:
  - added restart, status commands to init script
  - added chkconfig support
  - uses a buildroot and %attr tags


author: Marek Kasik <mkasik@redhat.com> - 0.5.4-18
changelog:
  - Add support for decryption of AES encrypted streams
  - Patch backported by Olivier Fourdan
  - Resolves: #637124


author: Marek Kasik <mkasik@redhat.com> - 0.5.4-14
changelog:
  - Add poppler-0.5.4-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.5.4-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639840


author: Marek Kasik <mkasik@redhat.com> - 0.5.4-12
changelog:
  - Add poppler-0.5.4-current-stream.patch
  - Use customized getPos() function for JBIG2Stream
  - Resolves: #525311


author: Marek Kasik <mkasik@redhat.com> - 0.5.4-11
changelog:
  - Fixes various flaws addressed in bugs #526637, #526893 and #526915
    which were tracked in #527404.
  - Resolves: #527404


author: Marek Kasik <mkasik@redhat.com> - 0.5.4-10
changelog:
  - Add poppler-0.5.4-JBIG2-segment-reading.patch to
    fix reading of arithmetically encoded JBIG2 images with
    unknown length.
  - Resolves: #501716


author: Marek Kasik <mkasik@redhat.com> - 0.5.4-9
changelog:
  - Add CVE-2009-0146.CVE-2009-0147.CVE-2009-0166.mem.patch to
    fix allocation of memory.
  - Resolves: #490708


author: Kristian Høgsberg <krh@redhat.com> - 0.5.4-6
changelog:
  - Add patches for CVE-2007-4352, CVE-2007-5392, and CVE-2007-5393 (#356681)
    and CVE-2007-3387 (#248212).


author: Kristian Høgsberg <krh@redhat.com> 0.5.4-4
changelog:
  - Add patch from Shawn Huang <phuang@redhat.com> to fix selection
    rendering across different fonts (#212142).


author: Miroslav Grepl <mgrepl@redhat.com> 1.33.12-14.10
changelog:
  - Add support for ext4 to /sbin/fixfiles 
  Resolves:#723950
  - Fix handling the first login to make restorecond working correctly
  Resolves:#623708
  - Fix genhomedircon' to not create duplicate SELinux context template entries
  Resolves:#805022


author: Miroslav Grepl <mgrepl@redhat.com> 1.33.12-14.7
changelog:
  - Remove semanage translation functionality
  Resolves: #460970
  - Fix semanage port add/delete problems
  Resolves: #505521
  - Fix instances of #!/usr/bin/env python in policycoreutils-gui
  Resolves: #521298
  - Fix semanage command does not support -node option
  Resolves: #527487


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-14.4
changelog:
  - Add semodule -DB support
  Resolves: #493115
  - Add ~/www ~/web to restorecond.conf
  Resolves: #458687
  - Fix sort order for portsPage
  Resolves: #468170
  - Allow <<none>> in homedir 
  Resolves: #354361


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-14.2
changelog:
  - Fix chcat throwing error messages while changing context  
  - stop genhomedircon creating duplicate entries
  Resolves: #433429


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-14.1
changelog:
  - Allow <<none>> to exist in homedir/genhomedircon handling it properly
  Resolves: #354361
  - Ignore granted messages with audit2allow
  Resolves: #441402
  - Fix semanage fcontext to quote regex
  Resolves: #435140
  - Fix chcat throwing error messages while changing context  
  Resolves: #220813
  - Make semanage understand -S option
  Resolves: #316011
  - genhomedircon matches misc in /home path


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-13
changelog:
  - Add support for selecting a store in semanage
  Resolves: #316011
  - Handle bad options on semodule command line
  - Add newrole support for alternate pam configurations
  Resolves: #336171


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-8
changelog:
  - Fix gui componants
  - Fix genhomedircon to use __default__ to get default user and prefix
  Resolves: #237324


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-7
changelog:
  - Fix service httpd status to return correct code
  Resolves: #232164
  - Update Linda Knippers patch for newrole on serial console
  Resolves: #228102


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-1
changelog:
  - Want to update to match api
  - Update to upstream
  	* Merged newrole securetty check from Dan Walsh.
  	* Merged semodule patch to generalize list support from Karl MacMillan.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> 1.33.11-1
changelog:
  - Update to upstream
  	* Merged fixfiles and seobject fixes from Dan Walsh.
  	* Merged semodule support for list of modules after -i from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.33.10-1
changelog:
  - Update to upstream
  	* Merged patch to correctly handle a failure during semanage handle
  	  creation from Karl MacMillan.
  	* Merged patch to fix seobject role modification from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.8-1
changelog:
  - Update to upstream
  	* Merged patches from Dan Walsh to:
  	  - omit the optional name from audit2allow
  	  - use the installed python version in the Makefiles
  	  - re-open the tty with O_RDWR in newrole


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-9
changelog:
  - Fix fixfiles script to use tty command correctly.  If this command fails, it 
  should set the LOGFILE to /dev/null
  Resolves: #220879


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-7
changelog:
  - add exists switch to semanage to tell it not to check for existance of Linux user
  Resolves: #219421


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-6
changelog:
  - Fix audit2allow generating reference policy
  - Fix semanage to manage user roles properly 
  Resolves: #220071


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-5
changelog:
  - Update po files
  - Fix newrole to open stdout and stderr rdrw so more will work on MLS machines
  Resolves: #216920


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-1
changelog:
  - Update to upstream
  	* Patch from Dan Walsh to add an pam_acct_msg call to run_init
  	* Patch from Dan Walsh to fix error code returns in newrole
  	* Patch from Dan Walsh to remove verbose flag from semanage man page
  	* Patch from Dan Walsh to make audit2allow use refpolicy Makefile
  	  in /usr/share/selinux/<SELINUXTYPE>


author: Dan Walsh <dwalsh@redhat.com> 1.33.4-1
changelog:
  - Upstream accepted my patches
  	* Merged setsebool patch from Karl MacMillan. 
  	  This fixes a bug reported by Yuichi Nakamura with
  	  always setting booleans persistently on an unmanaged system.


author: Dan Walsh <dwalsh@redhat.com> 1.32-1
changelog:
  - Add newrole audit patch from sgrubb
  - Update to upstream
  	* Merged audit2allow -l fix from Yuichi Nakamura.
  	* Merged restorecon -i and -o - support from Karl MacMillan.
  	* Merged semanage/seobject fix from Dan Walsh.
  	* Merged fixfiles -R and verify changes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.30-1
changelog:
  - Update to upstream
  	* Merged newrole auditing of failures due to user actions from
  	  Michael Thompson.


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-6
changelog:
  - Change setfiles and restorecon to use stderr except for -o flag
  - Also -o flag will now output files


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-1
changelog:
  - Security fixes to run python in a more locked down manner
  - More Translations
  - Update to upstream
  	* Merged fix for restorecon // handling from Erich Schubert.
  	* Merged translations update and fixfiles fix from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.27-4
changelog:
  - Add -i qualified to restorecon to tell it to ignore files that do not exist
  - Fixfiles also modified for this change


author: Dan Walsh <dwalsh@redhat.com> 1.30.26-1
changelog:
  - Update to upstream
  	* Merged semanage local file contexts patch from Chris PeBenito.
  - Fix fixfiles log creation
  - More translations


author: Dan Walsh <dwalsh@redhat.com> 1.30.25-1
changelog:
  - Update to upstream
  	* Merged patch from Dan Walsh with:
  	  * audit2allow: process MAC_POLICY_LOAD events
  	  * newrole:  run shell with - prefix to start a login shell
  	  * po:  po file updates
  	  * restorecond:  bail if SELinux not enabled
  	  * fixfiles: omit -q 
  	  * genhomedircon:  fix exit code if non-root
  	  * semodule_deps:  install man page
  	* Merged secon Makefile fix from Joshua Brindle.
  	* Merged netfilter contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.30.22-1
changelog:
  - Update to upstream
  	* Merged restorecond size_t fix from Joshua Brindle.
  	* Merged secon keycreate patch from Michael LeMay.
  	* Merged restorecond fixes from Dan Walsh.
  	  Merged updated po files from Dan Walsh.
  	* Merged python gettext patch from Stephen Bennett.
  	* Merged semodule_deps from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.30.17-1
changelog:
  - Update to upstream
  	* Lindent.
  	* Merged patch from Dan Walsh with:
  	  * -p option (progress) for setfiles and restorecon.
  	  * disable context translation for setfiles and restorecon.
  	  * on/off values for setsebool.
  	* Merged setfiles and semodule_link fixes from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.30.14-1
changelog:
  - Update to upstream
  	* Merged fix for setsebool error path from Serge Hallyn.
  	* Merged patch from Dan Walsh with:
  	*    Updated po files.
  	*    Fixes for genhomedircon and seobject.
  	*    Audit message for mass relabel by setfiles.


author: Dan Walsh <dwalsh@redhat.com> 1.30.11-1
changelog:
  - Update to upstream
  	* Merged more translations from Dan Walsh.
  	* Merged patch to relocate setfiles to /sbin for early relabel
  	  when /usr might not be mounted from Dan Walsh.
  	* Merged semanage/seobject patch to preserve fcontext ordering in list.
  	* Merged secon patch from James Antill.


author: James Antill <jantill@redhat.com> 1.30.10-2
changelog:
  - secon fixes for --self-exec etc.
  - secon change from level => sensitivity, add clearance.
  - Add mass relabel AUDIT patch, but disable it until kernel problem solved.


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Update to upstream
  	* Merged patch with updates to audit2allow, secon, genhomedircon,
  	  and semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.9-1
changelog:
  - Update to upstream
  	* Fixed audit2allow and po Makefiles for DESTDIR= builds.
  	* Merged .po file patch from Dan Walsh.
  	* Merged bug fix for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - Update to upstream
  	* Merged fix warnings patch from Karl MacMillan.
  	* Merged patch from Dan Walsh.
  	  This includes audit2allow changes for analysis plugins,
  	  internationalization support for several additional programs 
  	  and added po files, some fixes for semanage, and several cleanups.
  	  It also adds a new secon utility.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Add /etc/samba/secrets.tdb to restorecond.conf
  - Update from upstream
  	* Merged semanage prefix support from Russell Coker.
  	* Added a test to setfiles to check that the spec file is
  	  a regular file.


author: Dan Walsh <dwalsh@redhat.com> 1.30.4-1
changelog:
  - Update from upstream
  	* Merged audit2allow fixes for refpolicy from Dan Walsh.
  	* Merged fixfiles patch from Dan Walsh.
  	* Merged restorecond daemon from Dan Walsh.
  	* Merged semanage non-MLS fixes from Chris PeBenito.
  	* Merged semanage and semodule man page examples from Thomas Bleher.


author: Dan Walsh <dwalsh@redhat.com> 1.30.1-1
changelog:
  - Make audit2allow translate dontaudit as well as allow rules
  - Update from upstream
  	* Merged semanage labeling prefix patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.26-1
changelog:
  - Update from upstream
  	* Merged semanage bug fix patch from Ivan Gyurdiev.
  	* Merged improve bindings patch from Ivan Gyurdiev.
  	* Merged semanage usage patch from Ivan Gyurdiev.
  	* Merged use PyList patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.23-1
changelog:
  - Update from upstream
  	* Merged newrole -V/--version support from Glauber de Oliveira Costa.
  	* Merged genhomedircon prefix patch from Dan Walsh.
  	* Merged optionals in base patch from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.20-1
changelog:
  - Update from upstream
  	* Merged seuser/user_extra support patch to semodule_package 
  	  from Joshua Brindle.
  	* Merged getopt type fix for semodule_link/expand and sestatus
  	  from Chris PeBenito.
  - Fix genhomedircon output


author: Dan Walsh <dwalsh@redhat.com> 1.29.17-1
changelog:
  - Update from upstream
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged seusers.system patch from Ivan Gyurdiev.
  	* Merged improve port/fcontext API patch from Ivan Gyurdiev.
  	* Merged genhomedircon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.15-1
changelog:
  - Update from upstream
  	* Merged newrole audit patch from Steve Grubb.
  	* Merged seuser -> seuser local rename patch from Ivan Gyurdiev.
  	* Merged semanage and semodule access check patches from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.11-1
changelog:
  - Added translation support to semanage
  - Update from upstream
  	* Modified newrole and run_init to use the loginuid when
  	  supported to obtain the Linux user identity to re-authenticate,
  	  and to fall back to real uid.  Dropped the use of the SELinux
  	  user identity, as Linux users are now mapped to SELinux users
  	  via seusers and the SELinux user identity space is separate.
  	* Merged semanage bug fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat.8 and genhomedircon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.8-1
changelog:
  - Update to match NSA
  	* Merged semanage fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat, genhomedircon, and semanage diffs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.7-1
changelog:
  - Update to match NSA
  	* Merged newrole cleanup patch from Steve Grubb.
  	* Merged setfiles/restorecon performance patch from Russell Coker.
  	* Merged genhomedircon and semanage patches from Dan Walsh.
  	* Merged remove add_local/set_local patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon and semanage patch from Dan Walsh.
  	* Changed semodule error reporting to include argv[0].


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Update to match NSA
  	* Merged semanage getpwnam bug fix from Serge Hallyn (IBM).
  	* Merged patch series from Ivan Gyurdiev.
  	  This includes patches to:
  	  - cleanup setsebool
  	  - update setsebool to apply active booleans through libsemanage
  	  - update semodule to use the new semanage_set_rebuild() interface
  	  - fix various bugs in semanage
  	* Merged patch from Dan Walsh (Red Hat).
  	  This includes fixes for restorecon, chcat, fixfiles, genhomedircon,
  	  and semanage.


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Fix genhomedircon to work in installer
  - Update to match NSA
  	* Merged patch for chcat script from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.1-1
changelog:
  - Update to match NSA
  	* Merged fix for audit2allow long option list from Dan Walsh.
  	* Merged -r option for restorecon (alias for -R) from Dan Walsh.
  	* Merged chcat script and man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.36-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to warn on use of ROLE in homedir_template
  	  if using managed policy, as libsemanage does not yet support it.


author: Dan Walsh <dwalsh@redhat.com> 1.27.35-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon bug fix from Dan Walsh.
  	* Revised semodule* man pages to refer to checkmodule and
  	  to include example sections.


author: Dan Walsh <dwalsh@redhat.com> 1.27.33-1
changelog:
  - Update to match NSA
  	* Merged audit2allow --tefile and --fcfile support from Dan Walsh.
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged semodule* man pages from Dan Walsh, and edited them.
  	* Changed setfiles to set the MATCHPATHCON_VALIDATE flag to
  	  retain validation/canonicalization of contexts during init.


author: Dan Walsh <dwalsh@redhat.com> 1.27.31-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to always use user_r for the role in the
  	  managed case since user_get_defrole is broken.
  - Add te file capabilities to audit2allow
  - Add man pages for semodule


author: Dan Walsh <dwalsh@redhat.com> 1.27.30-1
changelog:
  - Update to match NSA
  	* Merged sestatus, audit2allow, and semanage patch from Dan Walsh.
  	* Fixed semodule -v option.


author: Dan Walsh <dwalsh@redhat.com> 1.27.29-1
changelog:
  - Update to match NSA
  	* Merged audit2allow python script from Dan Walsh.
  	  (old script moved to audit2allow.perl, will be removed later).
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged semodule quieting patch from Dan Walsh
  	  (inverts default, use -v to restore original behavior).


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-2
changelog:
  - Update to match NSA
  	* Merged genhomedircon rewrite from Dan Walsh.
  - Rewrite audit2allow to python


author: Dan Walsh <dwalsh@redhat.com> 1.27.26-1
changelog:
  * Added -B (--build) option to semodule to force a rebuild.
  	* Reverted setsebool patch to call semanage_set_reload_bools().
  	* Changed setsebool to disable policy reload and to call
  	  security_set_boolean_list to update the runtime booleans.
  	* Changed setfiles -c to use new flag to set_matchpathcon_flags()
  	  to disable context translation by matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.27.23-1
changelog:
  - Update to match NSA
  	* Changed setfiles for the context canonicalization support.
  	* Changed setsebool to call semanage_is_managed() interface
  	  and fall back to security_set_boolean_list() if policy is
  	  not managed.
  	* Merged setsebool memory leak fix from Ivan Gyurdiev.
  	* Merged setsebool patch to call semanage_set_reload_bools()
  	  interface from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to match NSA
  	* Merged setsebool patch from Ivan Gyurdiev.
  	  This moves setsebool from libselinux/utils to policycoreutils,
  	  and rewrites it to use libsemanage for permanent boolean changes.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to match NSA
  	* Merged semodule support for reload, noreload, and store options
  	  from Joshua Brindle.
  	* Merged semodule_package rewrite from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.18-1
changelog:
  - Update to match NSA
  	* Cleaned up usage and error messages and releasing of memory by
     	  semodule_* utilities.
  	* Corrected error reporting by semodule.
  	* Updated semodule_expand for change to sepol interface.
  	* Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to match NSA
  	* Merged non-PAM Makefile support for newrole and run_init from Timothy Wood.


author: Dan Walsh <dwalsh@redhat.com> 1.27.11-1
changelog:
  - Update to match NSA
  	* Updated semodule_expand to use get interfaces for hidden sepol_module_package type.
  	* Merged newrole and run_init pam config patches from Dan Walsh (Red Hat).
  	* Merged fixfiles patch from Dan Walsh (Red Hat).
  	* Updated semodule for removal of semanage_strerror.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to match NSA
  	* Updated semodule_link and semodule_expand to use shared libsepol.
  	Fixed audit2why to call policydb_init prior to policydb_read (still
  	uses the static libsepol).


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to match NSA
  	* Updated for changes to libsepol. 
  	Changed semodule and semodule_package to use the shared libsepol.
  	Disabled build of semodule_link and semodule_expand for now.
  	Updated audit2why for relocated policydb internal headers,
  	still needs to be converted to a shared lib interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.5-1
changelog:
  - Update to match NSA
  	* Fixed warnings in load_policy.
  	* Rewrote load_policy to use the new selinux_mkload_policy()
  	interface provided by libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to match NSA
  	* Merged patch to update semodule to the new libsemanage API
  	and improve the user interface from Karl MacMillan (Tresys).
  	* Modified semodule for the create/connect API split.


author: Dan Walsh <dwalsh@redhat.com> 1.27.2-1
changelog:
  - Update to match NSA
  	* Merged run_init open_init_pty bug fix from Manoj Srivastava
  	  (unblock SIGCHLD).  Bug reported by Erich Schubert.


author: Dan Walsh <dwalsh@redhat.com> 1.27.1-1
changelog:
  - Update to match NSA
  	* Merged error shadowing bug fix for restorecon from Dan Walsh.
  	* Merged setfiles usage/man page update for -r option from Dan Walsh.
  	* Merged fixfiles -C patch to ignore :s0 addition on update
  	  to a MCS/MLS policy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.25.9-1
changelog:
  - Update to match NSA
  	* Changed setfiles -c to translate the context to raw format
  	prior to calling libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update to match NSA
  	* Merged fixes for semodule_link and sestatus from Serge Hallyn (IBM).
  	  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.25.5-1
changelog:
  - Update to match NSA
  	* Merged patch to move module read/write code from libsemanage
  	  to libsepol from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update to match NSA
  	* Merged fixfiles and newrole patch from Dan Walsh.
  	* Merged audit2why man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update to match NSA
  	* Extended audit2why to incorporate booleans and local user 
  	  settings when analyzing audit messages.


author: Dan Walsh <dwalsh@redhat.com> 1.23.9-1
changelog:
  - Update to match NSA
  	* Updated audit2why for sepol_ prefixes on Flask types to
  	  avoid namespace collision with libselinux, and to 
  	  include <selinux/selinux.h> now.


author: Dan Walsh <dwalsh@redhat.com> 1.23.7-1
changelog:
  - Change -f flag in fixfiles to remove stuff from /tmp
  - Change -F flag to pass -F flag  to restorecon/fixfiles.  (IE Force relabel).


author: Dan Walsh <dwalsh@redhat.com> 1.23.6-1
changelog:
  - Update to match NSA
  	* Fixed signed/unsigned pointer bug in load_policy.
  	* Reverted context validation patch for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.23.5-1
changelog:
  - Update to match NSA
  	* Reverted load_policy is_selinux_enabled patch from Dan Walsh.
  	  Otherwise, an initial policy load cannot be performed using
  	  load_policy, e.g. for anaconda.


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update to version from NSA
  	* Merged load_policy is_selinux_enabled patch from Dan Walsh.
  	* Merged restorecon verbose output patch from Dan Walsh.
  	* Merged setfiles altroot patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.23.3-1
changelog:
  - Update to version from NSA
          * Merged context validation patch for genhomedircon from Eric Paris.
  - Fix verbose output of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.23.2-1
changelog:
  - Update to version from NSA
  	* Changed setfiles -c to call set_matchpathcon_flags(3) to
  	  turn off processing of .homedirs and .local.


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update to released version from NSA
  	* Merged rewrite of genhomedircon by Eric Paris.
  	* Changed fixfiles to relabel jfs since it now supports security xattrs
  	  (as of 2.6.11).  Removed reiserfs until 2.6.12 is released with 
  	  fixed support for reiserfs and selinux.


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-2
changelog:
  - Apply Uli patch
  	* The Makefiles should use the -Wall option even if compiled in beehive
  	* Add -W, too
  	* use -Werror when used outside of beehive.  This could also be used unconditionally
  	* setfiles/setfiles.c: fix resulting warning
  	* restorecon/restorecon.c: Likewise
  	* run_init/open_init_pty.c: argc hasn't been checked, the program would crash if
  called without parameters.  ignore the return value of nice properly.
  	* run_init: don't link with -ldl lutil
  	* load_policy: that's the bad bug.  pointer to unsigned int is passed, size_t is
  written to.  fails on 64-bit archs
  	* sestatus: signed vs unsigned problem
  	* newrole: don't link with -ldl


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-1
changelog:
  - Update to latest from NSA
  	* Changed load_policy to fall back to the original policy upon
  	  an error from sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.17-1
changelog:
  - Update to latest from NSA
  	* Merged new genhomedircon script from Dan Walsh.
  	* Changed load_policy to call sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.13-1
changelog:
  - Update from NSA
  	* Merged further change to fixfiles -C from Dan Walsh.
  	* Merged updated fixfiles script from Dan Walsh.
  - Fix error handling of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.21.12-1
changelog:
  - More cleanup of fixfiles sed patch
  	* Merged further patches for restorecon/setfiles -e and fixfiles -C.


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - More cleanup of fixfiles sed patch
  - Upgrade to latest from NSA
  	* Merged patch for open_init_pty from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.9-1
changelog:
  - More cleanup of sed patch
  - Upgrade to latest from NSA
  	* Merged updated fixfiles script from Dan Walsh.
  	* Merged updated man page for fixfiles from Dan Walsh and re-added unzipped.
  	* Reverted fixfiles patch for file_contexts.local; 
  	  obsoleted by setfiles rewrite.
  	* Merged error handling patch for restorecon from Dan Walsh.
  	* Merged semi raw mode for open_init_pty helper from Manoj Srivastava.
  	* Rewrote setfiles to use matchpathcon and the new interfaces
  	  exported by libselinux (>= 1.21.5).


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-3
changelog:
  - Fix fixfiles patch
  - Upgrade to latest from NSA
  	* Prevent overflow of spec array in setfiles.
  - Add diff comparason between file_contexts to fixfiles
  - Allow restorecon to give an warning on file not found instead of exiting


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged newrole -l support from Darrel Goeddel (TCS).
  - Fix genhomedircon STARTING_UID


author: Dan Walsh <dwalsh@redhat.com> 1.21.3-1
changelog:
  - Upgrade to latest from NSA
  	* Fixed restorecon to not treat errors from is_context_customizable()
  	  as a customizable context.
  	* Merged setfiles/restorecon patch to not reset user field unless
  	  -F option is specified from Dan Walsh.
  	* Merged open_init_pty helper for run_init from Manoj Srivastava.
  	* Merged audit2allow and genhomedircon man pages from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.1-3
changelog:
  - Don't change user componant if it is all that changed unless forced.
  - Change fixfiles to concatinate file_context.local for setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.20.1-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles rewrite from Dan Walsh.
  	* Merged restorecon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles and restorecon patches from Dan Walsh.
  	* Don't display change if only user part changed.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-4
changelog:
  - Fix fixfiles handling of rpm
  - Fix restorecon to not warn on symlinks unless -v -v 
  - Fix output of verbose to show old context as well as new context


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-1
changelog:
  - Update to latest from NSA
  	* Changed restorecon to ignore ENOENT errors from matchpathcon.
  	* Merged nonls patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Update with NSA
  	* Added -l option to setfiles to log changes via syslog.
  	* Merged -e option to setfiles to exclude directories.
  	* Merged -R option to restorecon for recursive descent.


author: Dan Walsh <dwalsh@redhat.com> 1.14.1-2
changelog:
  - Fix fixfiles.cron to not run on non SELinux boxes
  - Fix several problems in fixfiles and fixfiles.cron


author: Dan Walsh <dwalsh@redhat.com> 1.13.3-1
changelog:
  - Update latest from NSA
  - Add -o option to setfiles to save output of any files with incorrect context.


author: Colin Walters <walters@redhat.com> 1.10-3
changelog:
  - Add patch to fall back to authenticating via uid if
    the current user's SELinux user identity is the default
    identity
  - Add BuildRequires pam-devel


author: Dan Walsh <dwalsh@redhat.com> 1.9-9
changelog:
  - Change restorecon to not follow symlinks.  It is too difficult and confusing
  - to figure out the file context for the file pointed to by a symlink.


author: Caolan McNamara <caolanm@redhat.com> - 0.13-5
changelog:
  - courtesy Stuart Clark <sclark@tpg.com.au> bug fix for: 
    Gantt bar height doesn't match treeview row height
    from bugzilla http://bugzilla.gnome.org/show_bug.cgi?id=128983
  - rh#191808# Extra BuildRequires, and fix eds enabling patch


author: Dan Williams <dcbw@redhat.com> 0.12-5
changelog:
  - Add BuildReq scrollkeeper again (#124184, #111145)
  - Add Requires shared-mime-info for update-mime-database
  - Fix up planner's .desktop file (#132566)


author: Dan Williams <dcbw@redhat.com> 0.12-1
changelog:
  - Update to 0.12
  - Sync specfile with Imendio specfile
  - Add BuildRequires: scrollkeeper (RH #124184)
  - Add obsoletes: libmrproject-devel


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.6-1
changelog:
  - correctly initialize NSS after the KDC detaches from the terminal, so that
    we can still read the on-disk database with NSS 3.12
  - fix new wire-incompatibilities with some implementations by making the
    version number of signed-data items configurable (fallout from #242109)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-1
changelog:
  - add configurable client-side certificate matching
  - add more configurable KDC acceptance criteria
  - fix wire-incompatibilities with some newer implementations (#242109)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix encoding/interpreting of e_data, encoding of DH parameters, error
    reporting for revoked certificates


author: Nalin Dahyabhai <nalin@redhat.com> 0.3.5-1
changelog:
  - fix inclusion of the signer certifying chain now that we're careful to
    destroy certificates when we're finished with them (#223552)


author: Nalin Dahyabhai <nalin@redhat.com> 0.3.4-1
changelog:
  - fix validation of signer certificates when the entire certifying chain isn't
    already known to us, but intermediate links are provided in signed-data
    (#223552)


author: Nalin Dahyabhai <nalin@redhat.com> 0.3.3-1
changelog:
  - update preauth plugin support patch to base off of 1.5.1-1.6 diff
  - unref/free certificates, keys, contexts, and slots once we're finished
    using them (#221936)


author: Nalin Dahyabhai <nalin@redhat.com> 0.3.1-1_pal18998
changelog:
  - implement a "mappings_file" option a la Heimdal's, so that we don't have
    to have the principal name encoded in the certificate's subjectAltName
    extension in order to accept it for a particular Kerberos identity (#212867)


author: Nalin Dahyabhai <nalin@redhat.com> 0.3.0-1_pal18998
changelog:
  - fix protocol implementation errors which caused interop problems with Heimdal
  - update preauth plugin support backport to 1.6 branch, revision 18998


author: Nalin Dahyabhai <nalin@redhat.com> 0.2.0-1_pal18750
changelog:
  - implement DH-based key agreement
  - disable OCSP by default on the client-side (#209244)
  - update to changes for newer support backport


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - suppress /usr/lib64 (instead of /usr/lib) from LIBS by default on multilib
    arches where the default is to use lib64


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-3
changelog:
  - Added "Requires: xorg-x11-proto-devel >= 7.0-1" to devel package (#173713)
  - Added "libX11-devel" to devel package (#176078)


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXext to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXext to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated to libXext-0.99.1 from the X11R7 RC1 release.
  - Added manpages that were absent in X11R7 RC0, and updated the file lists
    to find them in section "man3x".


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro


author: Mike A. Harris <mharris@redhat.com> 0.6.8-11
changelog:
  - Work around an idiotic bug in rpm (#118780) by using multiple Requires
    lines instead of the Requires(foo,bar) syntax that rpm documentation
    states is valid.  This fixes reported pinfo kickstart issue (#155700)


author: Mike A. Harris <mharris@redhat.com> 0.6.8-9
changelog:
  - Replaced pinfo-0.6.0-mkstemp.patch with updated pinfo-0.6.8-mkstemp.patch
    to fix an additional insecure tempnam() usage detected by our buildsystem


author: Mike A. Harris <mharris@redhat.com> 0.6.8-8
changelog:
  - Added pinfo-0.6.8.memcorruption.patch and pinfo-0.6.8.memleak.patch by
    Sami Farin to fix a couple pinfo bugs reported in (#138770)


author: Mike A. Harris <mharris@redhat.com> 0.6.4-9
changelog:
  - Now how ironic is *this* one?...  The info documentation on pinfo has been
    missing from our packages.  Mass rebuild tests caught this.  Fixed now.
  - Added post/preun scripts for updating info dir db with install-info


author: Than Ngo <than@redhat.com> 2:0.11.8-15
changelog:
  - fix pilot-xfer crash on missing device node #186779, #175334
  - don't include unnecessary man page #185147


author: Than Ngo <than@redhat.com> 0.11.8-6
changelog:
  - add fix to avoid an out-of bounds array access
  - add buildprereq on readline-devel, libpng-devel, bug #111119
  - add patch to fix segfault in Net Library, bug #125878


author: Tim Powers <timp@redhat.com> 0.11.0-3
changelog:
  - add %{_libdir}/libpisock++.so and %{_libdir}/libpisock++.so.* to
    the file lists to fix the broken deps


author: Jason Vas Dias <jvdias@redhat.com> - 2.14-4
changelog:
  - fix bug 191911: make test fails when default Parser is XML::SAX::PurePerl -
                    succeeds when default Parser is XML::LibXML::SAX -
  	          +BuildRequires: perl(XML::LibXML) perl(XML::LibXML::Common)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:2.12-0.fdr.2
changelog:
  - missing $RPM_OPT_FLAGS in the %build
  LANG=C
  export LANG
  unset DISPLAY
   section.
  - optional test module as build requirement perl(Tie::IxHash).


author: Ville Skyttä <ville.skytta at iki.fi> - 1.58-1
changelog:
  - #121168
  - Update to 1.58.
  - Require perl(:MODULE_COMPAT_*).
  - Handle ParserDetails.ini parser registration.
  - BuildRequires libxml2-devel.
  - Own installed directories.


author: Ville Skyttä <ville.skytta at iki.fi> - 0.46alpha-29
changelog:
  - Rewrite specfile using fedora-rpmdevtools' spec template, fixes #176889.
  - Fix License, include docs.


author: Jose Pedro Oliveira <jpo@di.uminho.pt> - 1.48-4
changelog:
  - (#154762)
  - License information: GPL or Artistic
  - Removed the Time::HiRes building requirement (see Changes)
  - Removed the empty .bs file
  - Corrected file permissions


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - build for main distribution
  - use %{_tmppath}
  - change name of specfile
  - don't use a find script to generate file lists
  - general cleanup
  - add descriptive summary and description


author: Petr Pisar <ppisar@redhat.com> - 4:5.8.8-42
changelog:
  - Fix perl segfaults with custom signal handle (Resolves: rhbz#991854)
  - Reorder AnyDBM_File back-end preference (Resolves: rhbz#1018721)
  - Fix backslash interpolation in Locale::Maketext (Resolves: rhbz#1029016)
  - Enable year 2038 for Time::Local on 64-bit platforms (Resolves: rhbz#1057047)


author: Petr Pisar <ppisar@redhat.com> - 4:5.8.8-40
changelog:
  - Fix CVE-2012-5195 heap buffer overrun at repeatcpy (Resolves: rhbz#915691)
  - Fix CVE-2012-5526 newline injection due to improper CRLF escaping in
    Set-Cookie and P3P headers (Resolves: rhbz#915691)
  - Fix CVE-2012-6329 possible arbitrary code execution via Locale::Maketext
    (Resolves: rhbz#915691)
  - Fix CVE-2013-1667 DoS in rehashing code (Resolves: rhbz#915691)


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-37.el5
changelog:
  - 527275 remove h2ph patch, which didn't work
  - 702389 change rebase of CGI into upstream patch
  - 593752 NDBM_File needs change in Configure to be able find ndbm.h
  - Related: rhbz#702389, rhbz#593752


author: Petr Pisar <ppisar@redhat.com> - 4:5.8.8-35.el5
changelog:
  - Define number of tests in ext/threads/t/libc.t (Related: rhbz#676050)
  - Redirect CGI::Cookie->bake test output to error output not to pollute TAP
    protocol (Related: rhbz#702389)
  - Reenable tests for s390x and ia64 (Related: rhbz#675863)


author: Petr Pisar <ppisar@redhat.com> - 4:5.8.8-34.el5
changelog:
  - Avoid double free of nested loop variable (RT#70660). Back-ported from
    perl-5.10.1. Reverts code of perl-5.8.8-bug24254.patch as it provides better
    solution. (Resolves: rhbz#625746)


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-33.el5
changelog:
  - enlarge length of string in PAD_MAX from 999999999 to U32_MAX
    RT#83364
  - 675863 was accidentaly fixed by update of threads
  - Resolves: rhbz#676547, rhbz#675863


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-33.el5
changelog:
  - re-add NDBM_File support. It was removed in specfile for historical reason.
  - CVE-2010-2761 CVE-2010-4410 fixed by update of CGI to 3.54
  - h2ph produces invalide code
  - Resolves: rhbz#593752, rhbz#702389, rhbz#590644, rhbz#527275


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-33.el5
changelog:
  - newCONTSUB() wasn't thread-safe ([perl #45053]) which lead to crashes of
    string evaluation.
    Patch based on blead 401667e9af6ec282136e4e49614eb18614c5654b
  - update of module threads to 1.71 was also needed
  - Resolves: rhbz#676050


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-33.el5
changelog:
  - update to Unicode 5.1.0 (latest in maint-5.8 branch) lib/unicore/*
    c498a6a0f6c30ec6fd57d25f6fb84f7bdd793e77
  - update Unicode::UCD to 0.25, feature general_categories from Unicode 5.1.0
    was implemented in this release
    e7fbb7a80efd27bfde1ba3c6465ddb9f9357feb3
  - added tests related to strings into: op/pat.t, t/uni/class.t
  - Resolves: rhbz#621542


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-32.el5
changelog:
  - change release number according to Zstream, apply in Ystream missing
    security patches below. They were already shipped in Zstream.
  - CVE-2008-5302 perl: File::Path rmtree race condition (CVE-2005-0448) 
    reintroduced after upstream rebase to 5.8.8-1
  - CVE-2010-1168 perl Safe: Intended restriction bypass via object references
  - CVE-2010-1447 Safe 2.26 and earlier: Intended restriction bypass via Perl 
    object references in code executed outside safe compartment
  - Related: rhbz#548249


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-29.el5
changelog:
  - 548249 Perl threads leak memory when detached
  - 523827 CGI.pm popup_menu if optgroup, $selected is not properly escaped
  - Resolves: rhbz#548249, rhbz#523827


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-28.el5
changelog:
  - 537777 'Attempt to free unreferenced scalar' when running a perl 
   program with threads
  - Resolves: rhbz#537777


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-25.el5
changelog:
  - 458851 remove update of module - the cleanup function was already in
    the previous version
  - 507378 update Scalar-List-Utils to latest CPAN version, 1.21, to prevent
    bug #375621
  - Resolves: rhbz#507378, rhbz#507378
  - patch lib/Net/t/hostname.t, so that it does not fail in mock


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-24.el5
changelog:
  - Fix -Darchname on the Configure line.
  - Do not pack compatibility directories: remove all the mkdirs from %install.
  - Replace perl-5.8.8-incpush.patch by perl-5.8.8-oldarch.patch.
  - Adapt the perl-5.8.8-R-switch.patch; keep it though it probably is not
    useful anymore.
  - Resolves: rhbz#489909


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-23.el5
changelog:
  - libnet.cfg was installed on x86_64 into wron directory because all libnet
    files are stored in /usr/lib/ on both architectures.
  - Resolves: rhbz#490107


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-21.el5
changelog:
  - Time::HiRes version is incompatible with glibc2.5. This is fixed
    with rebase to v1.9715.
  - Resolves: rhbz#453327


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-20.el5
changelog:
  - suidperl binaries shall be owned by the root, reinsert the %defattr
    declaration mistakenly removed at the time of bug 191416


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-19.el5
changelog:
  - fix the # of tests in backport of upstream change 32018
  - fix perl-5.8.8-perlvar-pod.patch again, update expected test results
  - fix a typo causing "make test" to be skipped
  - Related: rhbz#379791 #431041


author: Marcela Maslanova <mmaslano@redhat.com> - 4:5.8.8-17.el5
changelog:
  - some patches were forgotten, clean and actual patches move on the end
   of list
  - Resolves: rhbz#375621


author: Marcela Maslanova <mmaslano@redhat.com> - 4:5.8.8-15.el5
changelog:
  - add upstream fix for bless/overload problem (changes 31996,32018,32019,
  	32025) and perl-5.8.8-bug24254.patch. Without this patch had bless
  	poor performance.
  - Resolves: rhbz#379791


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-14.el5
changelog:
  - add two patches, which...
  - Resolves: #435505, #431041
  - remove %define threading, the non-threading variant is not supported,
    Related: 435376


author: Marcela Maslanova <mmaslano@redhat.com> - 4:5.8.8-13.el5
changelog:
  - comments are before patches patch22-28
  - turn off tests for s390x. They were succesfully run in scratch, but
  	there's some issue with network, which breaks the brew build.
  - Resolves: #375621, #429491, #438114, #379791, #454602, #217833, #449324


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-8
changelog:
  - Fix upstream perl bug #34297:
    'utf8 overload stringify bug (utf8 caching maybe)'
    upstream patch #28006 applied


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-6
changelog:
  - Fix upstream perl bug #38454:
    'rindex corrects for $[ on bytes rather than UTF-8'
    apply upstream patch #27116
  - Fix upstream perl bug 24816:
    'Magic vars seem unsure if they are purely numeric' 
    ( perl -wle 'print $? = $? ^ "3"' -> 'Argument "^C" isn't numeric' )
    apply upstream patch #27391
  - Avoid writing over the input string in the case 'F' in moreswitches.
    apply upstream patch #27426
  - Fix upstream perl bug 34925 - 'overload and rebless' -
    apply upstream patches #27509, #27512
  - Fix upstream perl bug 3038 - '$qr = qr/^a$/m; $x =~ $qr; fails'
    apply upstream patch #27604
  - apply upstream patch #27605 - 'Fix off-by-one in $0 set magic.'
  - Fix upstream perl bug 23141 - '($_) = () fails to set $_ to undef'
    apply upstream patch #27914
  - Fix upstream perl bug #38619 - 
    'Bug in lc and uc (interaction between UTF-8, substr, and lc/uc)'
    apply upstream patch #27329
  - Give users the '-R' option to disable the Red Hat
    module compatibility default search path extension (incpush.patch).


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-6
changelog:
  - Fix bug 191416: make h2ph generate correct code for cpp statements
    like: '#if defined A || defined B'
  - Fix 172396.patch for non-threaded builds


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-4
changelog:
  - Fix bug 183553 / upstream bug 38657: fix -d:Foo=bar processing
  - rebuild with new gcc-4.1.0-1, released today


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-2
changelog:
  - Rebuild again
  - Debian released 5.8.8 patches today; apply only relevant difference:
    03_fix_net_nntp : fix precedence in Net::NNTP::article 
                      from Brendan O'Dea<bod@debian.org>


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.8-0.1_RC1
changelog:
  - fix bug 178343: h2ph must include cpp "predefined macros" in _h2ph_pre.ph
  - Add perl(:MODULE_COMPAT_5.8.8) to Provides
  - Fix perlbug patch


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-8
changelog:
  - Apply upstream patches 26283 and 26284 : complete, revised fixes
    for CVE-2005-3962 and CVE-2005-3912 and 
    "Sys::Syslog security vulnerabilities" issues.
  - Fix bug 136009 / MakeMaker LD_RUN_PATH issue: 
    restore previous default Red Hat behavior of removing the MakeMaker
    generated LD_RUN_PATH setting from the link command .
    Document this removal, as it contravenes upstream default behavior, and 
    provide a USE_MM_LD_RUN_PATH MakeMaker member to enable use of the 
    MakeMaker generated LD_RUN_PATH .


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-0.8
changelog:
  - fix bug 174684 / CVE-2005-3962: sprintf integer overflow vulnerability
    backport upstream patch #26240


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-0.7
changelog:
  - fix bug 172739: upstream bug 36521 : deep recursion and segfault
    in CGI::Carp::warn with 'use diagnostics' : applied patch 25160.
  - fix CAN-2004-0976: insecure use of temp files (ala Debian)


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-0.6
changelog:
  - fix bug 171111 : define ioctl length macro IOCPARM_LEN(x)
    macro to be _IOC_SIZE(x), not 256 - upstream bug #37535 raised.
  - provide 'perl_debugging' .spec file option to enable -DDEBUGGING
    and disable stripping / debuginfo generation - default: 0


author: Warren Togami <wtogami@redhat.com> - 3:5.8.7-0.1
changelog:
  - patch12 from Marius Feraru (#165907)
    TODO: patch11, patch26 and patch27 clash and need verification
  - Build without -DDEBUGGING (#156113)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3:5.8.6-17
changelog:
  - Don't remove the core modules:
      Filter::Util::Call, Filter::Simple, and Time::HiRes.
  - Obsoletes perl-{Filter,Filter-Simple,Time-HiRes}.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3:5.8.6-16
changelog:
  - Reformatted the specfile.
  - Added the Source0 URL.
  - Dropped the MANIFEST.all file for the perl package.
  - Dropped the MANIFEST.suidperl file for the suidperl subpackage.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3:5.8.6-12
changelog:
  - New findbin-selinux patch: it now passes the FindBin.t tests
    (patch28 replaces patch23). #118877 #127023
  - Remove 5.8.2 ABI compat (#154295 comments 6 and 7).


author: Chip Turner <cturner@redhat.com> - 3:5.8.6-4
changelog:
  - add patch to put site_perl and vendor_perl before core perl dirs, to
    allow for overriding modules


author: Jose Pedro Oliveira <jpo@di.uminho.pt>
changelog:
  - Corrected the license information (missing GPL).
  - Added the URL tag.
  - Removed empty .bs files.
  - Eliminated several strip generated messages (bug 127025).
  - Corrected problems mentioned in bug 120772
    (updated Ville Skytta)


author: Colin Walters <walters@redhat.com> 3:5.8.3-17
changelog:
  - Apply patch to fix FindBin module when access to cwd is disallowed,
    should solve the MRTG/SELinux cron spam issue


author: Chip Turner <cturner@redhat.com> 3:5.8.3-6
changelog:
  - fix very broken @INC calculations with slightly less broken @INC
    calculations (not perfectly handled but the result is correct)
  - fix broken -Dsitearch declaration


author: Chip Turner <cturner@redhat.com> 3:5.8.1-90.rc2.1
changelog:
  - RC4
  - remove perl-5.8.0-fhs.patch since it is integrated now
  - remove perl-5.8.0-Safe2.09.patch, unnecessary now


author: Chip Turner <cturner@redhat.com> 3:5.8.0-89.pre%{PRELEVEL}.0
changelog:
  - bump epoch since we went from perl 5.8.1-pre to 5.8.0-pre (ie,
    changed what version perl thought of itself as)


author: Chip Turner <cturner@redhat.com>
changelog:
  - fix MANIFEST.DB_File handling for #83410; problem was unsubstituted
    /usr/lib64 that crept in with multilib


author: Elliot Lee <sopwith@redhat.com> 5.8.0-86
changelog:
  - Fix up multilib handling to use multilib_64_archs macro, add ppc64.
  - Patch100 probably makes sense on all archs, and ifarch'd patches are Bad(tm).


author: Chip Turner <cturner@redhat.com>
changelog:
  - version the Obsoleted on perl-NDBM_File so users can install newer
  - change the Obsoletes on NDBM_File to a Conflicts
    ones than what shipped with 7.3, yet still keep anaconda happy


author: Chip Turner <cturner@redhat.com>
changelog:
  - add rpath fix to prevent building perl from using installed system perl
  - massive re-integration of upstream patches to come to common basis (head of perl-maint branch)


author: Chip Turner <cturner@redhat.com>
changelog:
  - add numerous upstream patches to fix utf8/perlio issues
  - upgrade Storable, Safe, and Encoding to latest CPAN versions


author: Chip Turner <cturner@redhat.com>
changelog:
  - update CPAN, CGI, and DB_File versions; obsolete perl-libnet
  - libnet.cfg supplied, default to passive ftp in all cases


author: Chip Turner <cturner@redhat.com>
changelog:
  - make rpmlint happy, split out NDBM_File, clean up other spots
  - stopped doing grep -v etc in favor of custom script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - replace the deprecated MD5 with Digest::MD5 (has to be here for cleanfeed)
  - obsolete: perl-Digest-MD5
  - use syslog instead of mail to report possible attempts to break into suidperl
  - force syslog on at build-time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Owen's fix for #14779/#14863
  - specify cc=gcc; continue to let cpp sort itself out
  - switch shadow support on (#8646)
  - release 7


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable 64-bit file support
  - change name of package that Perl expects gcc to be in from "egcs" to "gcc"
  - move man pages to /usr/share via hints/linux.sh and MM_Unix.pm
  - fix problems prefixifying with empty prefixes
  - disable long doubles on sparc (they're the same as doubles anyway)
  - add an Epoch to make sure we can upgrade from perl-5.00503
  - release 2


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - do not link anymore against the system db library (and make each module
    link against it separately, so that we can have Berkeley db1 and db2 mixed
    up)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - version 5.00503
  - make the default man3 install dir be release independent
  - try to link against db1 to preserve compatibility with older databases;
    abandoned idea because perl is too broken to allow such an easy change
    (hardcoded names *everywhere* !!!)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added a patch to fix a security race
  - do not use setres[ug]id - those are not implemented on 2.0.3x kernels


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - upgraded to 5.004_04 - 5.004_01 had some nasty memory leaks.
  - fixed the spec file to be version-independent


author: Erik Troan <ewt@redhat.com>
changelog:
  - Use -Darchname=i386-linux 
  - Require csh (for glob)
  - Use RPM_ARCH during configuration and installation for arch independence


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:1.03-0.fdr.1
changelog:
  - Update to 1.03.
  - Relocation of debug*.list files during the tests in order to avoid problems
    with Module::Signature (files not listed in MANIFEST).


author: Akira TAGOH <tagoh@redhat.com> 2.03-1
changelog:
  - New upstream release.
  - converted Japanese nkf.1 to UTF-8. (#105762)
  - nkf-1.92-glibc2290.diff: removed.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.30-2
changelog:
  - CVE-2005-0106: patch from Mandriva
    http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:023


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.26-0.fdr.1
changelog:
  - Update to unofficial 1.26 from Peter Behroozi, adds get1_session(),
    enables session caching with IO::Socket::SSL (bug 1859, bug 1860).
  - Bring outdated test14 up to date (bug 1859, test suite still not enabled).


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.25-0.fdr.4
changelog:
  - Rename to perl-Net-SSLeay, provide perl-Net_SSLeay for compatibility
    with the rest of the world.


author: Ville Skyttä <ville.skytta at iki.fi> - 1.22-2
changelog:
  - 1.22, include test case for rt.cpan.org #7528 patch.
  - Patch to mute stdout noise from ip_reverse().


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.20-0.fdr.6
changelog:
  - BuildRequire perl >= 1:5.6.1-34.99.6 for support for vendor installdirs.
  - Use pure_install to avoid perllocal.pod workarounds.


author: Robin Norwood <rnorwood@redhat.com> 0.59-2
changelog:
  - Resolves: rhbz#245620
  - Backport patch to fix dn_expand looping issue
  - Backport patch to randomize ID field


author: Ville Skyttä <ville.skytta at iki.fi> - 0.49-2
changelog:
  - Explicitly disable tests requiring network access at build time.
  - Exclude Win32 and Cygwin specific modules.
  - More specfile cleanups.
  - Honor $RPM_OPT_FLAGS.


author: Jason Vas Dias <jvdias@redhat.com> - 3.10-1
changelog:
  - fix bug 176720: upgrade to 3.10
  - make .spec file conform to fedora-rpmdevtools spectemplate-perl.spec


author: Christian Belisle <cbelisle@mandrakesoft.com> 3.18-3mdk
changelog:
  - Fixed distribution tag.
  - Updated Requires.
  - Added an option to 
    /usr/bin/make \
  	prefix=/var/tmp/perl-HTML-Parser-buildroot/usr \
  	exec_prefix=/var/tmp/perl-HTML-Parser-buildroot/usr \
  	bindir=/var/tmp/perl-HTML-Parser-buildroot/usr/bin \
  	sbindir=/var/tmp/perl-HTML-Parser-buildroot/usr/sbin \
  	sysconfdir=/var/tmp/perl-HTML-Parser-buildroot/etc \
  	datadir=/var/tmp/perl-HTML-Parser-buildroot/usr/share \
  	includedir=/var/tmp/perl-HTML-Parser-buildroot/usr/include \
  	libdir=/var/tmp/perl-HTML-Parser-buildroot/usr/lib64 \
  	libexecdir=/var/tmp/perl-HTML-Parser-buildroot/usr/libexec \
  	localstatedir=/var/tmp/perl-HTML-Parser-buildroot/var \
  	sharedstatedir=/var/tmp/perl-HTML-Parser-buildroot/usr/com \
  	mandir=/var/tmp/perl-HTML-Parser-buildroot/usr/share/man \
  	infodir=/var/tmp/perl-HTML-Parser-buildroot/usr/share/info \
    install.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 1.01 bugfix release ("bytea" coredumped with values outside 0...127)
  - Add perl-DBI and perl to BuildRequires (they were just in Requires: previously)


author: Chip Turner <cturner@redhat.com>
changelog:
  - turn ssl on and allow Makefile.PL to yse mysql_config to find proper link flags
  - update to 2.1021


author: Harald Hoyer <harald@redhat.com> 2.2.3-5
changelog:
  - added modified patch from Michael E. Brown @ Dell, to also 
    read all /usr/share/hwdata/pci.ids.d/*.ids files (rhbz#195327)
  - Resolves: rhbz#195327


author: Jeremy Katz <katzj@redhat.com> 2.1.11-2
changelog:
  - build a diet libpci_loader.a on i386
  - always assume pread exists, it does with diet and all vaguely recent glibc


author: Elliot Lee <sopwith@redhat.com> 2.1.10-5
changelog:
  - Add patch4 for ppc64. The basic rule seems to be that on any platform
  where it is possible to be running a 64-bit kernel, we need to always 
  print out 64-bit addresses.


author: Ville Skyttä <ville.skytta at iki.fi> 0.51-8
changelog:
  - Own more installed dirs (#73908).
  - Enable rpmbuild's internal dependency generator, drop unneeded dependencies.
  - Require perl(:MODULE_COMPAT_*).
  - Run tests in the %check section.
  - Fix License, Source0, URL, and Group tags.


author: Behdad Esfahbod <besfahbo@redhat.com> - 1.14.9-1
changelog:
  - Update to 1.14.9
  - Resolves: #216424, #216850, #211964, #213632
  - Add Thai language engine. (disabled, since there's no libthai)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-7
changelog:
  - Fix problem with pango_layout_get_attributes returning one too few items
    (Needed to fix problems mentioned in #135656, 
    http://bugzilla.gnome.org/show_bug.cgi?id=155912)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-5
changelog:
  - Fix problem in the last patch where we weren't getting the metrics from the 
    right font description (#136428, Steven Lawrance)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-4
changelog:
  - Move place where we compute fontset metrics to fix problems with line 
    height in CJK locales (#131218)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-2
changelog:
  - Add patch from CVS to fix display of U+3000 (#132203,  
    reported upstream by Suresh Chandrasekharan, Federic Zhang)


author: Owen Taylor <otaylor@redhat.com> 1.4.0-2
changelog:
  - Fix location for modules file on ppc/ppc64 (#114399)
  - Make the spec file check to avoid further mismatches


author: Owen Taylor <otaylor@redhat.com> 1.2.5-3.0
changelog:
  - Package pango-querymodules as pango-querymodules-{32,64}; look for 
    pango.modules in an architecture-specific directory.
    (Fixes #111511, Justin M. Forbes)


author: Tim Powers <timp@redhat.com> 1.2.1-3
changelog:
  - remove deps on Xft and Xft-devel since XFree86 no longer has the
    virtual prvodes. Instead, require XFree86-devel > 4.2.99


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Patch from CVS to synthesize GDEF tables for fonts
    without them, like the Kacst fonts in fonts-arabic


author: Havoc Pennington <hp@redhat.com>
changelog:
  - explicitly require pangoxft to be built, so we catch situations such
    as xft.pc moving to /usr/X11R6
  - also add /usr/X11R6/lib/pkgconfig to PKG_CONFIG_PATH as a temporary 
    hack


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fix linked list manipulation problem that was causing hang for anaconda
  - Fix warning from loading mini-fonts with context == NULL


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Remove fixed-ltmain.sh, relibtoolize; to fix relink problems without 
  - Fix bug causing hex boxes to be misrendered
    leaving RPATH (#66005)
  - For FT2 backend, supply FT_LOAD_NO_BITMAP to avoid problems with 
    fonts with embedded bitmaps (#67851)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Up FreeType version to deal with FreeType-2.0.x / 2.1.x \
    ABI changes for pango's OpenType code.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Version 0.22
  - add explicit check for required glib2 version before we do the build,
    so we don't end up with bad RPMs on --nodeps builds
  - PreReq the glib2_version version, instead of 1.3.8 hardcoded that 
    no one had updated recently


author: Bob Relyea <rrelyea@redhat.com> - 1.4.4-0.1
changelog:
  - Silence libpcsc-lite even when the daemon isn't running.
  - fix typo in init file which prevents the config file from being read.
  - Pick up 1.4.4


author: Ville Skyttä <ville.skytta at iki.fi> - 1.3.0-1
changelog:
  - 1.3.0, init script and reader.conf updater included upstream.
  - Split developer docs into a -doc subpackage, include API docs.
  - libmusclecard no longer included, split into separate package upstream.


author: Ville Skyttä <ville.skytta at iki.fi> - 1.2.0-13
changelog:
  - Don't ship static libraries.
  - Don't mark the init script as a config file.
  - Use rm instead of %exclude.
  - Specfile cleanups.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.2.0-10
changelog:
  - Disable dependency tracking to speed up the build.
  - Drop reader.conf patch, it's not needed any more.
  - Rename update-reader-conf to update-reader.conf for consistency with Debian,
    and improve it a bit.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.2.0-0.fdr.6
changelog:
  - Improve package summary.
  - Improvements based on suggestions from Ludovic Rousseau:
    - Don't install pcsc_demo but do include its source in -devel.
    - Sync reader.conf with current upstream CVS HEAD (better docs, less
      intrusive in USB-only setups where it's not needed).


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.2.0-0.fdr.0.2.rc3
changelog:
  - Update to 1.2.0-rc3.
  - Trivial init script improvements.
  - Enable %{_smp_mflags}.
  - Don't bother trying to enable SCF.


author: Bill Nottingham <notting@redhat.com> 006-2
changelog:
  - udev patch - right idea, awful execution. fix that (#163311)
  - add requirement for 2.6.13-rc1, basically


author: Stepan Kasal <skasal@redhat.com> - 6.6-5
changelog:
  - Fix the names of the pacthes added in pcre-6.6-3:
    mv pcre-6.4-posix.diff pcre-6.6-CVE-2006-7225.patch
    mv pcre-6.4-fix1.patch pcre-6.6-CVE-2006-7226.patch
  - Update pcre-6.6-CVE-2007-1659.patch
  - Update pcre-6.6-CVE-2007-1660.patch
  - Add pcre-6.6-CVE-2006-7230.patch
  - Resolves: #380541


author: Stepan Kasal <skasal@redhat.com> - 6.6-3
changelog:
  - Improve the fix for CVE-2006-7224 by updating
    pcre-6.6-CVE-2006-7224.patch and adding pcre-6.4-fix1.patch
    and pcre-6.4-posix.diff
  - Related: #373451


author: Ondrej Vasik <ovasik@redhat.com> - 3.4-2
changelog:
  - pax no longer fails to create ustar format archive if
    an absolute name is exactly 100 characters long (#239001)


author: Matt Wilson <msw@redhat.com>
changelog:
  - pull PAX source tarball from the SuSE package (which is based off
    this one yet claims copyright on the spec file)


author: Tim Waugh <twaugh@redhat.com> 1.6-2
changelog:
  - New archive from Sebastian.
  - Run fmtutil in %post and %postun.
  - Require new xmltex.
  - Fix body-start().


author: PLD Team <pld-list@pld.org.pl>
changelog:
  All persons listed below can be reached at <cvs_login>@pld.org.pl

  $Log: passivetex.spec,v $
  Revision 1.8  2001/08/21 10:12:42  wrobell
  - ver. 1.6
  - stb

  Revision 1.7  2001/03/27 16:55:44  wiget
  Requires xmltex

  Revision 1.6  2001/03/27 16:53:29  wiget
  changed Source URL, updated to 1.5 version, more files in package; now passivetex is more powerfull and work ;-)

  Revision 1.5  2001/01/27 03:25:36  kloczek
  - added tetex to Prerq,
  - simplified %post, %postun.

  Revision 1.4  2001/01/27 00:08:39  klakier
  - added URL

  Revision 1.3  2001/01/27 00:07:47  klakier
  - added URL

  Revision 1.2  2001/01/24 12:41:17  klakier
  - small fixes

  Revision 1.1  2001/01/24 12:31:43  klakier
  - initial


author: Tomas Mraz <tmraz@redhat.com> 0.73-2
changelog:
  - generate a correct debuginfo package on build (#500615)
  - correct errors in the manual page (#545668)
  - display correct status and return correct exit code on
    status display (#578534)


author: Tomas Mraz <tmraz@redhat.com> 0.72-1
changelog:
  - merged audit patch to upstream cvs
  - improved passwd -S output (#170344)
  - make passwd -d work with stripped down proc (#196851)
  - corrected link to pam docs (#193084)
  - spec file cleanups


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - applied cleanup patch from Steve Grubb #120060
  - fixed man page #115380
  - added libselinux-devel to BuildPrereq #123750, #119416


author: Jindrich Novy <jnovy@redhat.com> 0.68-10
changelog:
  - moved to 0.68-10 to fix problem with RHEL4-Alpha4 #129548
  - updated GNU build scripts and file structure to recent style


author: Nalin Dahyabhai <nalin@redhat.com> 0.67-4
changelog:
  - modify default PAM configuration file to not specify directories, so that
    the same configuration can be used for all arches on multilib systems
  - fix BuildPrereq on glib-devel to specify glib2-devel instead
  - remove unpackaged files in %install phase


author: Nalin Dahyabhai <nalin@redhat.com> 0.64.1-8
changelog:
  - man page fix (-r is the opposite of -l, not --stdin, which precedes it)
    from Felipe Gustavo de Almeida


author: Nalin Dahyabhai <nalin@redhat.com> 0.64.1-7
changelog:
  - fix unguarded printf() (noted by Chris Evans)
  - add missing build dependency on pwdb and pam-devel (#49550)


author: Akira TAGOH <tagoh@redhat.com>
changelog:
  - Backport a patch to fix PostScript breakage following the non-monetary
    numeric format from current locale. (#231971)


author: Akira TAGOH <tagoh@redhat.com> - 0.6.6-16
changelog:
  - paps-0.6.6-exitcode.patch: exit immediately with proper exit code
    when unrecoverable error occurs. (#208592)


author: Akira TAGOH <tagoh@redhat.com> - 0.6.6-10
changelog:
  - paps-0.6.6-cpilpi.patch: add --cpi and --lpi option to support the characters
    per inch and the lines per inch.
  - paps-cups.patch: add cpi and lpi support.


author: Tim Waugh <twaugh@redhat.com> - 0.6.6-9
changelog:
  - Fixed font-option patch.
  - Adjusted CUPS patch: CUPS invokes the filter with the destination
    printer name in argv[0], not the binary name.
  - CUPS filter lives in CUPS_SERVERBIN, which is /usr/lib/cups on all
    architectures -- not %{_libdir}/cups.


author: Akira TAGOH <tagoh@redhat.com> - 0.6.6-8
changelog:
  - use dist tag.
  - paps-cups.patch: applied to work paps as CUPS filter.
  - paps-0.6.6-encoding.patch: null-terminates the output.


author: Akira TAGOH <tagoh@redhat.com> - 0.6.6-5
changelog:
  - paps-typo-font-scale.patch: backported from CVS.
  - paps-0.6.6-font-option.patch: integrated --font-family and --font-scale
    options to --font.
  - paps-0.6.6-lcctype.patch: follow LC_CTYPE to determine the default language.


author: Akira TAGOH <tagoh@redhat.com> - 0.6.6-2
changelog:
  - paps-0.6.6-encoding.patch: support --encoding option to be able to convert
    the input file to UTF-8.
  - paps-0.6.6-segfault.patch: fixed a possible segfault issue when reading is
    failed.


author: Akira TAGOH <tagoh@redhat.com> - 0.6.5-1
changelog:
  - New upstream release.
    - paps-0.6.3-fix-pagesize.patch: removed. it has been merged in upstream.
    - paps-0.6.3-goption.patch: removed. it has been merged in upstream.
    - paps-0.6.3-header.patch: removed. it has been merged in upstream.
  - paps-makefile.patch: rework to be applied.


author: Akira TAGOH <tagoh@redhat.com> - 0.6.3-4
changelog:
  - paps-0.6.3-formfeed.patch: applied to deal with the formfeed mark properly.
  - paps-0.6.3-goption.patch: rewritten option parser using GOption. and segfault
    gone as well. (#187205)
  - paps-0.6.3-header.patch: applied to support the output of the page header.


author: Akira TAGOH <tagoh@redhat.com> - 0.6.2-1
changelog:
  - New upstream release.
    - the bitmap font is now ignored. (#176206)
  - paps-0.6.2-fix-bufferoverflow.patch: applied to fix the buffer overflow.


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.7-7
changelog:
  - remove a stray quote from configure.in that was causing a syntax error
    and breaking recompiles (upstream #1422089)


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.6-6
changelog:
  - rebuild
  - install into /%{_lib}/security instead of /lib/security, so that we put the
    module in the right place on multilib systems


author: Tomas Mraz <tmraz@redhat.com> - 3-1
changelog:
  - new upstream version
  - added patch (slightly modified) by W. Michael Petullo to support
    operation from non-root accounts (#151914)


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-26
changelog:
  - only ignore first argument (argv[0]) when parsing the argument list 
    from our tools, not our pam_module.


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-21
changelog:
  - update password supported patch.
  - fix bug where the user and smart card prompt was coming up in login after
    the username had been entered.
  - use pam_ignore for the case where we always want to drop to the other
    pam_modules.
  - add environment variables for the certificate used to authenticate.


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-20
changelog:
  - Use pam_syslog rather than syslog (patch by Tmraz).
  - Signal to the user that change password is not supported by pam_pkcs11.


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-19
changelog:
  - Fix problem where pin was not being passed in the pam password variable
    correctly. Needed for Kerberos PKInit


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-17
changelog:
  - restrict reauthentication to the token used in the inital login.
  - don't require reauthentication apps to log into a token if the user
    didn't initally log into the token.
  - handle the case where we have more than one token.


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-15
changelog:
  - add l10n support
  - correct mapper order.
  - login should allow SSL Client Auth certs rather than restricting to Email
    Signing certs.


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-13
changelog:
  - Fix the default mapping order.
  - Make ocsp support controlled by a config entry.
  - Fix login crash
  - revert to explicit paths until we can fix 'login' and 'authconfig'


author: Ray Strode <rstrode@redhat.com> 0.5.3-7
changelog:
  - add new wait_for_card option that stalls auth process
    until a card is inserted
  - if the user is reauthenticating (already logged in, but
    say unlocking the screen) then only treat the token the
    user logged in with as a valid authentication token
  - clean up "smart card" word.  Before we had a mix of 
    "smartcard", "Smart Card", "SmartCard", and "smart card" 
    i think.
  - only say "Please insert your smart card." instead of
    "Please insert your Smart Card or enter username" if 
    username based login isn't allowed.


author: Robert Relyea <rrelyea at redhat.com> 0.5.3-6
changelog:
  - Include the login token in the environment
  - Conditionally turn on OCSP
  - Treat uninitialized tokens as not present.


author: Juan Antonio Martinez <jonsito at teleline.es 0:0.5.2-0
changelog:
  - Updated to 0.5.2 release
  - Changed /etc/pkcs11 for /etc/pam_pkcs11
  - Changed /usr/share/pkcs11_login for /usr/share/pam_pkcs11
  - Next item is change package name to pam_pkcs11


author: Juan Antonio Martinez <jonsito at teleline.es 0:0.5-1
changelog:
  - upgrade to 0.5beta1 version
  - BuildRequires now complains compilation of html manual from xml file


author: Solar Designer <solar@owl.openwall.com> 0.7.5-owl1
changelog:
  - Assume invocation by root only if both the UID is 0 and the PAM service
    name is "passwd"; this should solve changing expired passwords on Solaris
    and HP-UX and make "enforce=users" safe.
  - Produce proper English explanations for a wider variety of settings.
  - Moved the "-c" out of CFLAGS, renamed FAKEROOT to DESTDIR.


author: Solar Designer <solar@owl.openwall.com> 0.7.4-owl1
changelog:
  - Documented that "enforce=users" may not always work for services other
    than the passwd command.
  - Applied a patch to PLATFORMS from Mike Gerdts of GE Medical Systems
    to reflect how Solaris 8 patch 108993-18 (or 108994-18 on x86) changes
    Solaris 8's PAM implementation to look like Solaris 9.


author: Solar Designer <solar@owl.openwall.com>
changelog:
  - Build with Sun's C compiler cleanly, from Kevin Steves.
  - Use install -c as that actually makes a difference on at least HP-UX
    (otherwise install would possibly move files and not change the owner).


author: Solar Designer <solar@owl.openwall.com>
changelog:
  - Have the same pam_passwdqc binary work for both trusted and non-trusted
    HP-UX, from Kevin Steves.


author: Solar Designer <solar@owl.openwall.com>
changelog:
  - Use bigcrypt() on HP-UX whenever necessary, from Kevin Steves of Atomic
    Gears LLC.
  - Moved the old password checking into a separate function.


author: Solar Designer <solar@owl.openwall.com>
changelog:
  - Applied minor corrections to the man page and at the same time eliminated
    unneeded/unimportant differences between it and the README.


author: Solar Designer <solar@owl.openwall.com>
changelog:
  - 0.5: preliminary OpenPAM (FreeBSD-current) support in the code and related
  code cleanups (thanks to Dag-Erling Smorgrav).


author: Solar Designer <solar@owl.openwall.com>
changelog:
  - Updated to 0.4:
  - Added "ask_oldauthtok" and "check_oldauthtok" as needed for stacking with
  the Solaris pam_unix;
  - Permit for stacking of more than one instance of this module (no statics).


author: Peter Vrabec <pvrabec@redhat.com> 5.8.12-2
changelog:
  - prepare package for dual component situation in RHEL5
  - rename to rsyslog5
  - conflicts with rsyslog
    Resolves: #820396


author: Tomas Heinrich <theinric@redhat.com> 5.8.12-1
changelog:
  - rebase from rsyslog-3.22.1-7 to rsyslog-5.8.12
    fixing: #769599, #820396, #823778, #831539
  - add several directories for storing auxiliary data
  - drop unneeded patches


author: Tim Waugh <twaugh@redhat.com> 1.5.2-4
changelog:
  - Give IDs to nodes in the release notes source to prevent releasenotes.html
    having multilib conflicts (bug #210570).


author: Ville Skyttä <ville.skytta at iki.fi> - 1.5.2-0.1.pre1
changelog:
  - Fix build dependencies.
  - Require exact version of main package in -devel.
  - Build with dependency tracking disabled.
  - Add %{_datadir}/xml to default search path.
  - Run test suite during build.
  - Add URL tag.
  - Use %find_lang.
  - Cosmetic improvements.


author: John (J5) Palmieri <johnp@redhat.com> - 1.0.0-2
changelog:
  - Add requirements on gnome-mag and newer version of control-center
  - remove .desktop file and make control-center start and configure orca


author: Mark McLoughlin <markmc@redhat.com> 2.12.1-3
changelog:
  - Add patch to set the size of the IO thread stack to 256k in
    order to mitigate the apparent 10M jump in GNOME processes
    memory usage (#157297)


author: Mark McLoughlin <markmc@redhat.com> 2.10.0-4
changelog:
  - Backport alignment fix for 64 bit from 0.10.3 - fixes Nautilus crashing
    on startup (#126181). Thanks to Lamont R. Peterson <lamont@gurulabs.com>


author: Havoc Pennington <hp@redhat.com>
changelog:
  - build system somehow built against libglib-1.3.so.11
    even though pkg-config found 1.3.12? wtf?
    trying again


author: Havoc Pennington <hp@redhat.com>
changelog:
  - renaming more things
  - remove smp flags, doesn't work atm
  - fix .pc file, trying to get bonobo-activation to build


author: Pablo Saratxaga <srtxg@chanae.alphanet.ch>
changelog:
  - improved %files section, and added use of %{prefix} and install-info
    (well,... no. The info file has not dir info inside, commented out)


author: Will Cohen <wcohen@redhat.com> - 0.9.4-19
changelog:
  - Resolves: rhbz643476 Oprofile: Add support for Intel Westmere.
  - Resolves: rhbz713667 Oprofile: Add support for Intel Sandy Bridge.


author: Will Cohen <wcohen@redhat.com> - 0.9.4-14
changelog:
  - Resolves: rhbz498619 Oprofile: Add support for Nehalem-EP processors.
  - Resolves: rhbz527679 Rebuild with fixed version of binutils.


author: Will Cohen <wcohen@redhat.com> - 0.9.4-12
changelog:
  - Resolves: rhbz518480 Correct daemonization of oprofiled on ia64.
  - Resolves: rhbz450642 Handle possible null sym table.


author: Will Cohen <wcohen@redhat.com> - 0.9.4-7
changelog:
  - Rebase on 0.9.4 release to provide java support. Resolves: rhbz #474666
  - Correct handling of --verbose. Resolves: rhbz #454969


author: Will Cohen <wcohen@redhat.com> - 0.9.3-7
changelog:
  - Rebase on 0.9.3 release. Resoves: rhbz #253109, 
  - Add Greyhound family 0x10 support to oprofile. Resolves: rhbz #232956
  - Cell support for oProfile. Resolves: rhbz #226085
  - 970MP must be treated as a different target. Resolves: rhbz#232041
  - Default POWER6 oprofile event incorrect. Resolves: rhbz #238132
  - typo in opreport man page. Resolves: rhbz #222481
  - Oprofile cant demangle 64bit c++ symbols. Resolves: rhbz #244399
  - OProfile on DD3.0 or later POWER5+ fails. Resolves: rhbz #244717
  - LoP Toolchain, OProfile XML output. Resolves: rhbz #253106
  - Add support for POWER5+ revision 3.0 an.... Resolves: rhbz #253410


author: Will Cohen <wcohen@redhat.com> - 0.9.2-6
changelog:
  - Correct backtrace documentation. Resolves: rhbz#214793.
  - Correct race condition. Resolves: rhbz#220116.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Eliminate AUTOMAKE and ACLOCAL definitions.
  - Correct QTDIR and add oprof_start to file manifests.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - put in s390.
  - Fix includes for asserts.
  - Make sure elinks is available for html to txt conversion.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - check min event counts.
  - revised op_to_source output to avoid changing line count.
  - p4event events revised.
  - hammer events revised.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Use /proc/ksym for module information.
  - Correct separate debuginfo handling.
  - Configure with --enable-abi.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - turn on build for ppc64
  - change order op_visualise searches lib directories.
  - revise oprofile-0.4-deprecate patch.
  - utils/oprofile kernel range check, --save, and do_dump corrections.
  - update gui to use "--separate=library".


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Syscall value for x86_64.
  - Update manpage and documentation.
  - Revise utils/* to deprecate old.
  - Include CPU_P4_HT2 in op_help.c
  - Revise how CPU_TIMER_INT handled.
  - Apply cookie patch for all archs.
  - Correct autogen.sh location.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Hack to get correct syscall for ia64.
  - Hack to get get timer interupt data.
  - Fix doc/Makefile.am.


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-27.4
changelog:
  - fix CVE-2014-0221 - recursion in DTLS code leading to DoS
  - fix CVE-2014-3505 - doublefree in DTLS packet processing
  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  - fix CVE-2014-3508 - fix OID handling to avoid information leak
  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-27
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-23
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-22
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4109 - double free in policy checks (#771771)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-21
changelog:
  - add known answer test for SHA2 algorithms (#740866)
  - make default private key length in certificate Makefile 2048 bits
    (can be changed with PRIVATE_KEY_BITS setting) (#745410)
  - fix incorrect return value in parse_yesno() (#726593)
  - added DigiCert CA certificates to ca-bundle (#735819)
  - added a new section about error states to README.FIPS (#628976)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-19
changelog:
  - presort list of ciphers available in SSL (#688901)
  - accept connection in s_server even if getaddrinfo() fails (#561260)
  - point to openssl dgst for list of supported digests (#608639)
  - fix handling of future TLS versions (#599112)
  - added VeriSign Class 3 Public Primary Certification Authority - G5
    and StartCom Certification Authority certs to ca-bundle (#675671, #617856)
  - upstream fixes for the CHIL engine (#622003, #671484)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-17
changelog:
  - fix CVE-2010-4180 - completely disable code for
    SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG (#659462)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-15
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-14
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-13
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-8
changelog:
  - support multiple CRLs with same subject in a store (#457134)
  - fix CVE-2009-0590 - reject incorrectly encoded ASN.1 strings (#492304)
  - seed FIPS rng directly from kernel random device
  - do not require fipscheck to build the package (#475798)
  - call pairwise key tests in FIPS mode only (#479817)
  - do not crash when parsing bad mime data (#472440)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-5
changelog:
  - implement the integrity checking inside libcrypto so OpenSSL
    can be used in FIPS mode by the fipscheck library


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-2
changelog:
  - more changes for FIPS validation (#444800)
  - correctly initialize default CA paths (#450987)
  - allow disabling zlib support through environment (#442624)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-10
changelog:
  - compile with -march=z900 on s390 for performance improvements (#250818)
  - make ssl session ID matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-9
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#250581)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309881)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321221)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to 
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Petr Lautrbach <plautrba@redhat.com> 4.3p2-81
changelog:
  - make ssh(1)'s ConnectTimeout option apply to both the TCP connection and
    SSH banner exchange (#750725)


author: Jan F. Chadima <jchadima@redhat.com> - 4.3p2-79
changelog:
  - add LANGUAGE to the sent/accepted evvironment (#710229)
  - ssh-copy-id copies now id_rsa.pub by default (#731930)
  - repairs man pages (#731925)


author: Jan F. Chadima <jchadima@redhat.com> - 4.3p2-78
changelog:
  - set cloexec on accept socket (#642935)
  - add umask to sftp (#720598)
  - enable lastolg for big uids (#706315)


author: Jan F. Chadima <jchadima@redhat.com> - 4.3p2-38
changelog:
  - set better buffer length in latency patch (#508914)
  - close error file descriptor before running external subsystem (#530358)
  - prevent initscript from hanging when generates the keys (#531738)


author: Jan F. Chadima <jchadima@redhat.com> - 4.3p2-33
changelog:
  - fix scp hangup on exit (#454812)
  - call integrity checks only on binaries which are part of the OpenSSH FIPS
    modules


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-32
changelog:
  - log if FIPS mode is initialized (#492363)
  - check the integrity of the binaries in the FIPS mode (#467268)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-28
changelog:
  - use OpenSSL RNG directly (needed for FIPS-140-2 compliance)
  - when in FIPS mode do not try to use algorithms which are not allowed (#447936)
  - improve transfer speed on high latency connections (#227722)
  - more correct 'service sshd status' reporting (#430877)
  - add logging support to the sftp server (#452619)
  - small scp manual page improvement (#433381)


author: Dennis Gregorovic <dgregor@redhat.com> - 4.3p2-26.el5_2.1
changelog:
  - CVE-2007-4752 - Prevent ssh(1) from using a trusted X11 cookie if creation of an
    untrusted cookie fails (#280361)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-21
changelog:
  - fix an information leak in Kerberos password authentication (CVE-2006-5052)
    (#234638)
  - correctly setup context when empty level requested (#234951)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-13
changelog:
  - improved pam_session patch so it doesn't regress, the patch is necessary
    for the pam_session_close to be called correctly as uid 0 (#167488)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10.1
changelog:
  - CVE-2006-5794 - properly detect failed key verify in monitor (#214642)
  - kill all ssh sessions when stop is called in halt or reboot runlevel (#213008)
  - remove -TERM option from killproc so we don't race on sshd restart (#213490)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10
changelog:
  - improve gssapi-no-spnego patch (#208102)
  - CVE-2006-4924 - prevent DoS on deattack detector (#207957)
  - CVE-2006-5051 - don't call cleanups from signal handler (#208459)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-9
changelog:
  - don't report duplicate syslog messages, use correct local time (#189158)
  - don't allow spnego as gssapi mechanism (from upstream)
  - fixed memleaks found by Coverity (from upstream)
  - allow ip options except source routing (#202856) (patch by HP)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-8
changelog:
  - drop the pam-session patch from the previous build (#201341)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
changelog:
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
changelog:
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-3
changelog:
  - enable the subprocess in chroot to send messages to system log
  - sshd should prevent login if audit call fails


author: Tomas Mraz <tmraz@redhat.com> - 4.3p1-2
changelog:
  - fixed another place where syslog was called in signal handler
  - pass locale environment variables to server, accept them there (#179851)


author: Tomas Mraz <tmraz@redhat.com> - 4.2p1-9
changelog:
  - drop x11-ssh-askpass from the package
  - drop old build_6x ifs from spec file
  - improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
    characters to person looking at the display
  - less hackish fix for the __USE_GNU problem


author: Nalin Dahyabhai <nalin@redhat.com> - 4.2p1-8
changelog:
  - work around missing gccmakedep by wrapping makedepend in a local script
  - remove now-obsolete build dependency on "xauth"


author: Warren Togami <wtogami@redhat.com> - 4.2p1-7
changelog:
  - xorg-x11-devel -> libXt-devel
  - rebuild for new xauth location so X forwarding works
  - buildreq audit-libs-devel
  - buildreq automake for aclocal
  - buildreq imake for xmkmf
  -  -D_GNU_SOURCE in flags in order to get it to build
     Ugly hack to workaround openssh defining __USE_GNU which is
     not allowed and causes problems according to Ulrich Drepper
     fix this the correct way after FC5test1


author: Tomas Mraz <tmraz@redhat.com> 4.2p1-2
changelog:
  - use include instead of pam_stack in pam config
  - use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
  - upstream patch for displaying authentication errors


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-5
changelog:
  - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
  - install ssh-copy-id from contrib (#88707)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-4
changelog:
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - don't use X11 port which can't be bound on all IP families (#163732)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-3
changelog:
  - fix small regression caused by the nologin patch (#161956)
  - fix race in getpeername error checking (mindrot #1054)


author: Tomas Mraz <tmraz@redhat.com> 4.0p1-2
changelog:
  - fixed Local/RemoteForward in ssh_config.5 manpage
  - fix fatal when Local/RemoteForward is used and scp run (#153258)
  - don't leak user validity when using krb5 authentication


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-11
changelog:
  - don't call syslog in signal handler
  - allow password authentication when copying from remote
    to remote machine (#103364)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-10
changelog:
  - enable trusted forwarding by default if X11 forwarding is 
    required by user (#137685 and duplicates)
  - disable protocol 1 support by default in sshd server config (#88329)
  - keep the gnome-askpass dialog above others (#69131)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - change permissions on pam.d/sshd to 0644 (#64697)
  - patch initscript so it doesn't kill opened sessions if
    the sshd daemon isn't running anymore (#67624)


author: Nalin Dahyabhai <nalin@redhat.com> 3.9p1-8
changelog:
  - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
    to enable display of a vendor patch level during version exchange (#120285)
  - configure with --disable-strip to build useful debuginfo subpackages


author: Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
changelog:
  - request gssapi-with-mic by default but not delegation (flag day for anyone
    who used previous gssapi patches)
  - no longer request x11 forwarding by default


author: Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
changelog:
  * Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
  - Built RHLE3 U2 update package.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - additional fix for apparently-never-happens double-free in buffer_free()
  - extend fix for #103998 to cover SSH1


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-11
changelog:
  - apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
  - skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-6
changelog:
  - modify patch which clears the supplemental group list at startup to only
    complain if setgroups() fails if sshd has euid == 0
  - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-6
changelog:
  - move scp to the -clients subpackage, because it directly depends on ssh
    which is also in -clients (#84329)


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-2
changelog:
  - patch PAM configuration to use relative path names for the modules, allowing
    us to not worry about which arch the modules are built for on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-2
changelog:
  - rework the close-on-exit docs
  - include configuration file man pages
  - make use of nologin as the privsep shell optional


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-1
changelog:
  - update to 3.3p1
  - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
  - disable gtk2 askpass
  - require pam-devel by filename rather than by package for erratum
  - include patch from Solar Designer to work around anonymous mmap failures


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-4
changelog:
  - drop buildreq on db1-devel
  - require pam-devel by package name
  - require autoconf instead of autoconf253 again


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-3
changelog:
  - pull patch from CVS to avoid printing error messages when some of the
    default keys aren't available when running ssh-add
  - refresh to current revisions of Simon's patches


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2gss
changelog:
  - reintroduce Simon's gssapi patches
  - add buildprereq for autoconf253, which is needed to regenerate configure
    after applying the gssapi patches
  - refresh to the latest version of Markus's patch to build properly with
    older versions of OpenSSL


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
changelog:
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x


author: Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
changelog:
  - update to SNAP-20020220 for testing purposes (you've been warned, if there's
    anything to be warned about, gss patches won't apply, I don't mind)


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
changelog:
  - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support


author: Nalin Dahyabhai <nalin@redhat.com> 3.0p1-1
changelog:
  - merge some of Damien Miller <djm@mindrot.org> changes from the upstream
    3.0p1 spec file and init script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.0p1
  - update to x11-ssh-askpass 1.2.4.1
  - change build dependency on a file from pam-devel to the pam-devel package
  - replace primes with moduli


author: Nalin Dahyabhai <nalin@redhat.com> 2.9p2-7
changelog:
  - fix scp's server's reporting of file sizes, and build with the proper
    preprocessor define to get large-file capable open(), stat(), etc.
    (sftp has been doing this correctly all along) (#51827)
  - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
  - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
  - mark profile.d scriptlets as config files (#42337)
  - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
  - change a couple of log() statements to debug() statements (#50751)
  - pull cvs patch to add -t flag to sshd (#28611)
  - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull cvs patch to add session initialization to no-pty sessions
  - pull cvs patch to not cut off challengeresponse auth needlessly
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed (#49263)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change Copyright: BSD to License: BSD
  - add Markus Friedl's unverified patch for the cookie file deletion problem
    so that we can verify it
  - drop patch to check if xauth is present (was folded into cookie patch)
  - don't apply gssapi patches for the errata candidate
  - clear supplemental groups list at startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix an error parsing the new default sshd_config
  - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
    dealing with comments right


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
    to be removed before the next beta cycle because it's a big departure
    from the upstream version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish marking strings in the init script for translation
  - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
    at startup (change merged from openssh.com init script, originally by
    Pekka Savola)
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove explicit openssl requirement, fixes builddistro issue
  - make initscript stop() function wait until sshd really dead to avoid 
    races in condrestart


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - mention that challengereponse supports PAM, so disabling password doesn't
    limit users to pubkey and rsa auth (#34378)
  - bypass the daemon() function in the init script and call initlog directly,
    because daemon() won't start a daemon it detects is already running (like
    open connections)
  - require the version of openssl we had when we were built


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make do_pam_setcred() smart enough to know when to establish creds and
    when to reinitialize them
  - add in a couple of other fixes from Damien for inclusion in the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p2
  - call setcred() again after initgroups, because the "creds" could actually
    be group memberships


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
  - don't enable challenge-response by default until we find a way to not
    have too many userauth requests (we may make up to six pubkey and up to
    three password attempts as it is)
  - remove build dependency on rsh to match openssh.com's packages more closely


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Revert the patch to move pam_open_session.
  - Init script and spec file changes from Pekka Savola. (#28750)
  - Patch sftp to recognize '-o protocol' arguments. (#29540)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Chuck the closing patch.
  - Add a trigger to add host keys for protocol 2 to the config file, now that
    configuration file syntax requires us to specify it with HostKey if we
    specify any other HostKey values, which we do.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Redo patch to move pam_open_session after the server setuid()s to the user.
  - Rework the nopam patch to use be picked up by autoconf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.1p1.
  - Add init script mods from Pekka Savola.
  - Tweak the init script to match the CVS contrib script more closely.
  - Redo patch to ssh-add to try to adding both identity and id_dsa to also try
    adding id_rsa.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.0p1.
  - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
  - Resync with parts of Damien Miller's openssh.spec from CVS, including
    update of x11 askpass to 1.2.0.
  - Only require openssl (don't prereq) because we generate keys in the init
    script now.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't open a PAM session until we've forked and become the user (#25690).
  - Apply Andrew Bartlett's patch for letting pam_authenticate() know which
    host the user is attempting a login from.
  - Resync with parts of Damien Miller's openssh.spec from CVS.
  - Don't expose KbdInt responses in debug messages (from CVS).
  - Detect and handle errors in rsa_{public,private}_decrypt (from CVS).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - More gettextizing.
  - Close all files after going into daemon mode (needs more testing).
  - Extract patch from CVS to handle auth banners (in the client).
  - Extract patch from CVS to handle compat weirdness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
    succeeded, to allow public-key authentication after a failure with "none"
    authentication.  (#21268)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to x11-askpass 1.1.1. (#21301)
  - Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge multiple PAM text messages into subsequent prompts when possible when
    doing keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Disable the built-in MD5 password support.  We're using PAM.
  - Take a crack at doing keyboard-interactive authentication with PAM, and
    enable use of it in the default client configuration so that the client
    will try it when the server disallows password authentication.
  - Build with debugging flags.  Build root policies strip all binaries anyway.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add the primes file from the latest snapshot to the main package (#20884).
  - Add the dev package to the prereq list (#19984).
  - Remove the default path and mimic login's behavior in the server itself.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Resync with conditional options in Damien Miller's .spec file for an errata.
  - Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to OpenSSH 2.3.0p1.
  - Update to x11-askpass 1.1.0.
  - Enable keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
    build PAM authentication in.
  - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
  - Clean out no-longer-used patches.
  - Patch ssh-add to try to add both identity and id_dsa, and to error only
    when neither exists.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update x11-askpass to 1.0.2. (#17835)
  - Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
    always find them in the right place. (#17909)
  - Set the default path to be the same as the one supplied by /bin/login, but
    add /usr/X11R6/bin. (#17909)
  - Try to handle obsoletion of ssh-server more cleanly.  Package names
    are different, but init script name isn't. (#17865)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 20000823 snapshot.
  - Change subpackage requirements from %{version} to %{version}-%{release}
  - Back out the pipe patch.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 2.1.1p4, which includes fixes for config file parsing problems.
  - Move the init script back.
  - Add Damien's quick fix for wackiness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Move condrestart to server postun.
  - Move key generation to init script.
  - Actually use the right patch for moving the key generation to the init script.
  - Clean up the init script a bit.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Patch to build with neither RSA nor RSAref.
  - Miscellaneous FHS-compliance tweaks.
  - Fix for possibly-compressed man pages.


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-7
changelog:
  - fixed sha1 on 2gb boundary (patch from upstream) (#189492)
  - enable compilation of updated assembler code on IA64 (#180091)
  - correct verification of CA certs in SSL (#201005)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-6
changelog:
  - fix a few rpmlint warnings
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - make libica build in brew


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-4
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - more fixes for constant time/memory access for DSA signature algorithm
  - updated ICA engine patch


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-3
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)


author: Yuval Kashtan <ykashtan@redhat.com> - 1.0-5.el5
changelog:
  - add i386, for qspice-xpi, to fix #552566: log4cpp is not built for i386 
  - resolve: #502679: multilib conflict in log4cpp-1.0-3.el5


author: Yuval Kashtan <ykashtan@redhat.com> - 1.0-4.el5
changelog:
  - limit rpm to x86_64, because it is used only by qspice, to fix #513407: "stack smashing detected" error on ia64 
  Workaround: #513407


author: Yuval Kashtan <ykashtan@redhat.com> - 1.0-3.el5
changelog:
  - fix log4cpp needs rebuild to increase version number to be greater than version used in RHEVH branch (#502047)
  Resolves: #502047


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-7
changelog:
  - fixed strings in LabelGadget are not displayed (rhbz#867792)
  - fixed Performance issue: XmListSetPos() is very very slow (rhbz#864409)
    (MotifZone bug #1536)
  - fixed frame size too large (rhbz#880914) (related to MotifZone bug #1299)
  - fixed handling of of keys in numpad section if numlock is disabled
    using the upstream fix (rhbz#818655) (MotifZone bug #1300)
  - added NumLockMask to esm_mask Modifiers to fix keypad key lookup after 
    enabling or disabling NumLock (1300_additional)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-6
changelog:
  - fixed Label size computed wrong within a Form (rhbz#583977)
  - fixed LabelGadget draws background over border of its parent (rhbz#584287)
    and LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1517 and #1521)
  - fixed memory leaks from OpenMotif 2.3.3 (rhbz#644824)
    (MotifZone bug #1388 refixed and #1502)
  - fixed invisible XFT text for insensitive labels (rhbz#684210)
    (missing parts of MotifZone bug #1381)
  - fixed im_widget double-free issue (rhbz#695650)
    (MotifZone bug #1534)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-3
changelog:
  - fixed BadDrawable error (rhbz#557453)
  - fixed MultiList not displayed properly (mzbz#1453) (rhbz#568730)
  - fixed invisible insensitive labels, buttons, icons and list entries
    (mzbz#1381) (rhbz#568730)
  - fixed XmNaccelerator do not work with CapsLock/ScrollLock/NumLock
    modifiers (mzbz#345) (rhbz#492529)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2
changelog:
  - more fixes for unreliable pasting into XmTextField (MotifZone bug #1321)
    Resolves: rhbz#405941
  - the fix for MotifZone bug #1400 is not working for remote displays


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-0
changelog:
  - rebase to 2.3.1 (CVS dist release)
    Resolves: rhbz#455736
  - fixes OpenMotif XmList problem
    Resolves: rhbz#405801
  - fixes List.c/ReplaceItem() segfaults when item selected
    Resolves: rhbz#431460
  - fixes [motifzone 1400 ] openmotif/ BadFont on multiple display application
    Resolves: rhbz#438910
  - fixes applications dump core in non-UTF8 environment
    Resolves: rhbz#453722
  - fixes lots of additional bugs: see release notes


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.5
changelog:
  - fixed SEGV error moving mouse over window related to XmToolTipGetLabel
    (MotifZone bug fix #1388)
    Resolves: rhbz#277381


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.9
changelog:
  - new CVS version 2006-02-02
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - enabled Xft, jpeg and png support
  - patch for missing xft-config
  - dropped duplicate include path in devel package


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1
changelog:
  - new 2.3.0 (beta1)
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-11
changelog:
  - fixed mrm initialization error in MrmOpenHierarchyPerDisplay (#167094)
    Thanks to Arjan van de Ven for the patch.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-9
changelog:
  - Upstream Fix: Multiscreen mode
  - Upstream Fix: Crash when restarting by a session manager (motifzone#1193)
  - Upstream Fix: Crash when duplicating a window menu containing f.circle_up
    (motifzone#1202)
  - fixed divide by zero error in ComputeVizCount() (#144420)
  - Xpmcreate: define LONG64 on 64 bit architectures (#143689)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-6
changelog:
  - fixed CAN-2004-0687 (integer overflows) and CAN-2004-0688 (stack overflows)
    in embedded Xpm library


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-5
changelog:
  - libXp now moved to xorg-x11-deprecated-libs, therefore no compatibility 
    with XFree86 packages anymore.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-3
changelog:
  - fixed popup menus fail on Tarantella/VNC (#123027)
  - fixed character not supported problem (#124960)
  - fixed data out of bounds bug (#124961)


author: Thomas Woerner <twoerner@redhat.com> 2.2.2-13
changelog:
  - fix for Xmu/EditRes conflict (bug #80777)
  - fix for wml and utf-8 (bug #80271)
  - fix for Ext18List (bug #74502)


author: Than Ngo <than@redhat.com>
changelog:
  - add 3 official motif patches 
  - add rm -rf $RPM_BUILD_ROOT in install section
  - remove some old patches which are now in official patches


author: Than Ngo <than@redhat.de>
changelog:
  - fix imake to built with gcc-2.96 (thanks Jakup)
  - put bitmaps in /usr/X11R6/include/X11/bitmaps
  - put bindings in /usr/X11R6/lib/Xm/bindings
  - add define -D_GNU_SOURCE to build Motif
  - gzip man pages
  - cleanup specfile


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-16
changelog:
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Jan Vcelak <jvcelak@redhat.com> 2.3.43-23
changelog:
  - new feature update: honor priority/weight with ldap_domain2hostlist (#733435)
  - fix: initscript marked as %config incorrectly (#738768)


author: Jan Vcelak <jvcelak@redhat.com> 2.3.43-20
changelog:
  - fix: OpenLDAP packages lack debug data (#684630)
  - doc: Document preferred use of TLS_CACERT instead of TLS_CACERTDIR to specify Certificate Authorities (#699652)
  - fix: libldap ignores a directory of CA certificates if any of them can't be read (#609722)
  - fix: Migration: migrate_all_offline.sh can't handle duplicate entries (#563148)
  - fix: Init script is working wrong if database recovery is needed (#604092)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-13
changelog:
  - fixed segfault issues in modrdn (#606375)
  - added patch handling null char in TLS to compat package
    (#606375, patch backported by Jan Vcelak <jvcelak@redhat.com>)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-6
changelog:
  - fixed possible double free() in rwm overlay (#495628)
  - updated slapd man page and slapcat usage string (#468206)
  - updated default config for slapd - deleted syncprov module (#466937)
  - fixed migration tools autofs generated format (#460331)
  - fixed migration tools numbers detection in /etc/shadow (#113857)
  - fixed migration tools base ldif (#104585)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-5
changelog:
  - implementation of limit adjustment before starting slapd (#527313)
  - init script no longer executes script in /tmp (#483356)
  - slapd not starting with ldap:/// every time (#481003)
  - delay between TERM and KILL when shutting down slapd (#452064)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-4
changelog:
  - fixed compat libs linking (#503734)
  - activated lightweight dispatcher feature (#507276)
  - detection of timeout after failed result (#495701)


author: Jan Safranek <jsafranek@redhat.com> 2.3.43-1
changelog:
  - rebase to openldap-2.3.43 (#454994)
  - apply latest db-4 patches (#454857)
  - package openldap overlays, including smbk5pwd (#329441 #248549 #370411
    - check for TLS_CACERT file permissions in /etc/init.d/ldap (#356401)
  - rework the database upgrade logic, it should dump/restore the BDB
    database only when really needed (#436046)
  - introduce NETWORK_TIMEOUT in ldap.conf file to configure timeout of
    connect() operation (#459132)
  - allow to set SLURPD_KRB5CCNAME in /etc/sysconfig/ldap to set KRB5CCNAME
    of the slurpd process (#428638)


author: Jan Safranek <jsafranek@redhat.com> 2.3.27-6
changelog:
  - Include sals patch to close #230395
  - Include manual bind timeout patch to close #230388
  - Include patch to allow write access to ldap socket to close #237417
  - Fix the upgrade logic so database is not deleted on upgrade (#240834)
  - Fix the memory leak on ACL rules (#241636)
  - Fix initscript return codes (#242665)


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-5
changelog:
  - Include the -getdn patch to close
    bz#214768: CVE-2006-5779 Specially crafted authcid makes OpenLDAP fail an assertion
    Resolves: rhbz#214768


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.19-2
changelog:
  - Upgrade to 2.3.19, which upstream now considers stable
  - Modify the -config.patch, ldap.init, and this spec file to put the
    pid file and args file in an ldap-owned openldap subdirectory under
    /var/run.
  - Move back_sql* out of /usr/sbin/openldap , which requires
    hand-moving slapd and slurpd to _sbindir, and recreating symlinks
    by hand.
  - Retire openldap-2.3.11-ads.patch, which went upstream.
  - Update the ldap.init script to run slaptest as the ldap user rather
    than as root.  This solves
    bz#150172 Startup failure after database problem
  - Add to the servers post and preun scriptlets so that on preun, the
    database is slapcatted to /var/lib/ldap/upgrade.ldif and the
    database files are saved to /var/lib/ldap/rpmorig.  On post, if
    /var/lib/ldap/upgrade.ldif exists, it is slapadded.  This means that
    on upgrades from 2.3.16-2 to higher versions, the database files may
    be automatically upgraded.  Unfortunatly, because of the changes to
    the preun scriptlet, users have to do the slapcat, etc by hand when
    upgrading to 2.3.16-2.  Also note that the /var/lib/ldap/rpmorig
    files need to be removed by hand because automatically removing your
    emergency fallback files is a bad idea.
  - Upgrade internal bdb to db-4.4.20.  For a clean upgrade, this will
    require that users slapcat their databases into a temp file, move
    /var/lib/ldap someplace safe, upgrade the openldap rpms, then
    slapadd the temp file.


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-3
changelog:
  - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and
    compat-openldap- to close
    bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-2
changelog:
  - Upgrade to 2.3.11, which upstream now considers stable.
  - Switch compat-openldap to 2.2.29
  - remove references to nss_ldap_build from the spec file
  - remove references to 2.0 and 2.1 from the spec file.
  - reorganize the build() function slightly in the spec file to limit the
    number of redundant and conflicting options passedto configure.
  - Remove the attempt to hardlink ldapmodify and ldapadd together, since
    the current make install make ldapadd a symlink to ldapmodify.
  - Include the -ads patches to allow SASL binds to an Active Directory
    server to work.  Nalin <nalin@redhat.com> wrote the patch, based on my
    broken first attempt.


author: Jay Fenlason <fenlason@redhat.com> 2.2.26-2
changelog:
  - Move the slapd.pem file to /etc/pki/tls/certs
    and edit the -config patch to match to close
    bz#143393  Creates certificates + keys at an insecure/bad place
  - also use _sysconfdir instead of hard-coding /etc


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add the tls-fix-connection-test patch to close
    bz#161991 openldap password disclosure issue
  - add the hop patches to prevent infinite looping when chasing referrals.
    OpenLDAP ITS #3578


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.26-1
changelog:
  - run slaptest with the -u flag if no id2entry db files are found, because
    you can't check for read-write access to a non-existent database (#156787)
  - add /etc/openldap/cacerts, which authconfig sets as the
    TLS_CACERTDIR path in /etc/openldap/ldap.conf now
  - use a temporary wrapper script to launch slapd, in case we have arguments
    with embedded whitespace (#158111)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.26 (stable 20050429)
  - enable the lmpasswd scheme
  - print a warning if slaptest fails, slaptest -u succeeds, and one of the
    directories listed as the storage location for a given suffix in slapd.conf
    contains a readable file named __db.001 (#118678)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1
changelog:
  - update to 2.2.24 (stable 20050318)
  - export KRB5_KTNAME in the init script, in case it was set in the sysconfig
    file but not exported


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1
changelog:
  - update to 2.2.23 (stable-20050125)
  - update notes on upgrading from earlier versions
  - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1
changelog:
  - update to 2.2.20 (stable-20050103)
  - warn about unreadable krb5 keytab files containing "ldap" keys
  - warn about unreadable TLS-related files
  - own a ref to subdirectories which we create under %{_libdir}/tls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.17 (stable-20040923) (#135188)
  - move nptl libraries into arch-specific subdirectories on %{ix86} boxes
  - require a newer glibc which can provide nptl libpthread on i486/i586


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move slapd startup to earlier in the boot sequence (#103160)
  - update to 2.2.15 (stable-20040822)
  - change version number on compat-openldap to include the non-compat version
    from which it's compiled, otherwise would have to start 2.2.15 at release 3
    so that it upgrades correctly


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    %{evolution_connector_prefix} (/usr/lib64/evolution-openldap)
  - provide openldap-evolution-devel = %{version}-%{release} in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1
changelog:
  - add compat-openldap subpackage
  - default to bdb, as upstream does, gambling that we're only going to be
    on systems with nptl now


author: Thomas Woerner <twoerner@redhat.com> 2.1.29-3
changelog:
  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2
changelog:
  - fix incorrect use of find when attempting to detect a common permissions
    error in the init script (#114866)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1
changelog:
  - change logging facility used from daemon to local4 (#112730, reversing #11047)
    BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build bundled libdb for slapd dynamically to make the package smaller,
    among other things
  - on tls-capable arches, build libdb both with and without shared posix
    mutexes, otherwise just without
  - disable posix mutexes unconditionally for db 4.0, which shouldn't need
    them for the migration cases where it's used
  - update to MigrationTools 45


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually require newer libtool, as was intended back in 2.1.22-0, noted as
    missed by Jim Richardson


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0
changelog:
  - 2.1.22 now badged stable
  - be more aggressive in what we index by default
  - use/require libtool 1.5


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_*
  - install slapcat/slapadd from 2.0.x for migration purposes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17
  - disable the shell backend, not expected to work well with threads
  - drop the kerberosSecurityObject schema, the krbName attribute it
    contains is only used if slapd is built with v2 kbind support


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8
changelog:
  - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
  - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
    1936, 2007, 2009, which were included in 2.0.26.
  - add two more patches for db 4.1.24 from sleepycat's updates page
  - use openssl pkgconfig data, if any is available


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/lib64 instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1
changelog:
  - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
    slapd databases until we move to 2.1.x)
  - use %{_smp_mflags} when running make
  - update to MigrationTools 44
  - enable dynamic module support in slapd


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2
changelog:
  - switch to an internalized Berkeley DB as the ldbm back-end  (NOTE: this breaks
    access to existing on-disk directory data)
  - add slapcat/slapadd with gdbm for migration purposes
  - remove Kerberos dependency in client libs (the direct Kerberos dependency
    is used by the server for checking {kerberos} passwords)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2
changelog:
  - temporarily disable optimizations for ia64 arches
  - specify pthreads at configure-time instead of letting configure guess


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable kbind support (deprecated, and I suspect unused)
  - configure with --with-kerberos=k5only instead of --with-kerberos=k5
  - build slapd with threads


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1
changelog:
  - update to 2.0.12 to pull in fixes for setting of default TLS options, among
    other things
  - update to migration tools 39
  - drop tls patch, which was fixed better in this release


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a build-time requirement on pam-devel
  - add a build-time requirement on a sufficiently-new libtool to link
    shared libraries to other shared libraries (which is needed in order
    for prelinking to work)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
    compliance) by name (follows from #43079, which split cyrus-sasl's
    cram-md5 and digest-md5 modules out into cyrus-sasl-md5)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move shared libraries to /lib
  - redo init script for better internationalization (#26154)
  - don't use ldaprc files in the current directory (#38402) (patch from
    hps@intermeta.de)
  - add BuildPrereq on tcp wrappers since we configure with
    --enable-wrappers (#43707)
  - don't overflow debug buffer in mail500 (#41751)
  - don't call krb5_free_creds instead of krb5_free_cred_contents any
    more (#43159)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build dummy certificate in %post, use it in default config
  - configure-time shenanigans to help a confused configure script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out pidfile patches, which interact weirdly with Linux threads
  - mark non-standard schema as such by moving them to a different directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
    a /etc/sysconfig/ldap file (#23549)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
    per mail from the ldap-nis mailing list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
    (OpenLDAP ITS #889)
  - add "-h ldaps:///" to server init when TLS is enabled, in order to support
    ldaps in addition to the regular STARTTLS (suggested by Del)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  - configure slapd to run as the non-root user "ldap" (#19370)
  - chdir() before chroot() (we don't use chroot, though) (#19369)
  - disable saving of the pid file because the parent thread which saves it and
    the child thread which listens have different pids


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add missing required attributes to conversion scripts to comply with schema
  - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
    our own OID tree to define attributes and classes migration scripts expect
  - tweak automounter migration script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - try adding the suffix first when doing online migrations
  - force ldapadd to use simple authentication in migration scripts
  - add indexing of a few attributes to the default configuration
  - add commented-out section on using TLS to default configuration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.6
  - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  - take the -s flag off of slapadd invocations in migration tools
  - add the cosine.schema to the default server config, needed by inetorgperson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add the nis.schema and inetorgperson.schema to the default server config
  - make ldapadd a hard link to ldapmodify because they're identical binaries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build a semistatic slurpd with threads, everything else without
  - disable reverse lookups, per email on OpenLDAP mailing lists
  - make sure the execute bits are set on the shared libraries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split off clients and servers to shrink down the package and remove the
    base package's dependency on Perl
  - make certain that the binaries have sane permissions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to gdbm; I'm getting off the db merry-go-round
  - tweak the init script some more
  - add instdir to @INC in migration scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak init script to return error codes properly
  - change initscripts dependency to one on /etc/init.d


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.11
  - add condrestart logic to init script
  - munge migration scripts so that you don't have to be 
    /usr/share/openldap/migration to run them
  - add code to create pid files in /var/run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  - backport replacement for the ldapuser patch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.10
  - add revamped version of patch from kos@bastard.net to allow execution as
    any non-root user
  - remove test suite from %build because of weirdness in the build system


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  - fix some possible string-handling problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add -D_REENTRANT to make threaded stuff more stable, even though it looks
    like the sources define it, too
  - mark *.ph files in migration tools as config files


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.2.7
  - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  - take include files out of base package


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    %{evolution_connector_prefix} (/usr/lib/evolution-openldap)
  - provide openldap-evolution-devel = %{version}-%{release} in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/lib instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Tim Waugh <twaugh@redhat.com> 1.3.2-20
changelog:
  - Use --enable-splibdir to prevent ambiguity.
  - Move 'install-catalog --remove' to %preun section (bug #60409).


author: Ville Skyttä <ville.skytta at iki.fi> - 1.3.2-18
changelog:
  - Really BuildRequire opensp-devel.
  - Clean up unneeded build dependencies and configure options.
  - Drop dependency on docbook-dtds.
  - Fix %post(un) syntax and catalog installation.


author: Terje Bless <link@pobox.com> 1.3.2-17
changelog:
  - Split opensp out into its own package.
  - BuildRequire OpenSP-devel, Require OpenSP.
  - Drop openjade-1.3.1-manpage.patch (it patches opensp, not openjade, and is
    obsolete with external opensp).


author: Tim Waugh <twaugh@redhat.com> 1.3.1-1
changelog:
  - 1.3.1.
  - Patches no longer needed: decl, strdup, foo, size_t, 31525, indev,
    ligature, twosidestartonright.
  - Updated lt patch.


author: Tim Waugh <twaugh@redhat.com> 1.3-21
changelog:
  - Enable HTTP support.  Now a DocBook XML document can be processed by
    either xsltproc or openjade.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Avoid creating bogus TeX output for section headings containing
    special characters (#bug 31525).


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - Apply original autoconf patch to s390 s390x only. This patch can
    be deleted once s390* uses a current compiler.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't conflict with stylesheets; require sgml-common >= 0.5 instead.
  - Revert autoconf change, as it's still broken.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - apply patch from Fritz Elfert <felfert@to.com>
  	- removed explicit stripping
  	- Added autoconf macro for correctly recognizing if size_t
  	  is unsigned int


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Conflict with stylesheets (new-trials location changes).
  - /usr/lib/sgml -> /usr/share/sgml/%{name}-%{version}.
  - Remove %post and %postun.


author: Stephen Herr <sherr@redhat.com> 0.4.20.1-8
changelog:
  - Resolves: #751294 - make yum plugin correctly raise errors to yum
  - Resolves: #919432 - rhn-client-tools should correctly conflict with old virt-
    host versions


author: Stephen Herr <sherr@redhat.com> 0.4.20.1-4
changelog:
  - Resolves: #949617 - Client tools able to pass up socket info
  - Resolves: #949645 - Make timeout of yum-rhn-plugin calls through rhn-client-
    tools configurable


author: Stephen Herr <sherr@redhat.com> 0.4.20-87
changelog:
  - Resolves: #886342 - Do not throw stacktrace if SSL cert does not verify
  - Resolves: #873531 - Correctly handle an account disabled error message
  - Resolves: #882933 - Correct forgotten password link


author: Stephen Herr <sherr@redhat.com> 0.4.20-78
changelog:
  - Resolves: #827076 - Correctly parse multi-line lists
  - Resolves: #771749 - Traceback when adding nonexistent channel
  - Resolves: #761489 - rhnreg_ks exits with 1 when libvirtd not running
  - Resolves: #798181 - error message mentions Subscription Manager
  - Resolves: #781336 - rhn-register GUI doesn't check for bad password


author: Tomas Lestach <tlestach@redhat.com> 0.4.20-68
changelog:
  - Related: #706148 - fix setting uri
  - Related: #706148 - introduce and utilize config.getServerlURL method
  - Related: #729467 - firstboot dialogs polishing
  - Related: #729467 - fix link with a regular text


author: Miroslav Suchý <msuchy@redhat.com> 0.4.20-62
changelog:
  - Resolves: #595837 - write error message instead of traceback
  - Resolves: #706148 - set _uri, when connecting to a different server
  - Resolves: #729467 - TUI: polish registration messages
  - Resolves: #729163 - default to RHSM in firstboot registration


author: Michael Mraka <michael.mraka@redhat.com> 0.4.20-57
changelog:
  - Resolves: #681132 - inherit SSLCertificateVerifyFailedError from RepoError
  - Resolves: #711829 - return back useNoSSLForPackages option
  - Resolves: #567901 - fix input of user name


author: Miroslav Suchý <msuchy@redhat.com> 0.4.20-52
changelog:
  - Related: #651790 - fix indentation
  - Related: #651858 - when system is not registred, write nice error instead of
    traceback


author: Miroslav Suchý <msuchy@redhat.com> 0.4.20-48
changelog:
  - Resolves: #688627 - add .desktop file
  - Resolves: #651790 - fail if adding/removal of channels fail
  - Resolves: #651858 - print error if you specify --add or --remove, but you do
    not specify any channel
  - Resolves: #651778 - add man page for rhn-channel as alias for
    spacewalk-channel
  - Resolves: #665013 - do not send None for ipaddr in IPv6 only system
  - Resolves: #641029 - if username and password is not given on command line,
    script will prompt for it
  - Resolves: #624748 - report virtual network interfaces


author: Miroslav Suchy
changelog:
  - Resolves: #675220 - disable rhnplugin by default and enable it only
    after successful registration
  - Resolves: #675217 - warn if you are already subscribed using
    subscription manager
  - Resolves: #675218 - substitute RHN with "RHN Satellite or RHN Classic"


author: Michael Mraka <michael.mraka@redhat.com> 0.4.20-40
changelog:
  - Resolves: #603028 - when checking package architecture during errata update, allow
    transition to and from noarch.
  - Resolves: #621135 - report resonable cpuinfo in s390(x)
  - Resolves: #595679 - cancel busy cursor after ValidationError
  - Resolves: #584780 - move the firstboot _gui.* files to rhn-setup-gnome
  - Resolves: #584779 - fixed man pages


author: Miroslav Suchý <msuchy@redhat.com> 0.4.20-36
changelog:
  - Resolves: #618250 - encode latin-1 characters to unicode and
    do not allow control characters in xmlrpc communication
  - Resolves: #586738 - set properly acl for
    /var/spool/up2date/loginAuth.pkl
  - do not fail if file exist and add loginAuth.pkl to build root
    to brew will not get mad


author: Milan Zazrivec <mzazrivec@redhat.com> 0.4.20-33
changelog:
  - Resolves: #566479, include new Red Hat CA certificate
  - Related: #495680 - send 3 more dmi keys to rhnparent


author: Miroslav Suchý <msuchy@redhat.com> 0.4.20-15
changelog:
  - Related: #495680 - if hal or messagebus is not accessible log the
    error and proceed with rest of the registration


author: Milan Zazrivec <mzazrivec@redhat.com> 0.4.20-13
changelog:
  - Resolves: #495680, #521281, #511273, #526450, #216808, #527412, #530659
  - Resolves: #494679, #517945, #489901, #516207, #503146, #513660


author: Pradeep Kilambi <pkilambi@redhat.com> 0.4.20-2
changelog:
  - Resolves: #204449 #227638 #445881 #454005 #466718 #479706
  - Resolves: #491258 #494928 #250312 #464827 #467139 #476797
  - Resolves: #476894 #487754


author: Pradeep Kilambi <pkilambi@redhat.com> 0.4.19-2
changelog:
  - Resolves: #231902 #241209 #249127 #249425 #253596
  - Resolves: #385321 #405671 #429334 #430155 #430156
  - Resolves: #432426 #433097 #434550 #439383 #442923
  - Resolves: #442930 #450597 #451775 #452829 #457953  #460685


author: Pradeep Kilambi <pkilambi@redhat.com> - 0.4.17-1
changelog:
  - Resolves: #211127, #212539, #213587, #216225, #216951, #216959
  - Resolves: #219814, #221912, #228240, #231041, #249426, #253031
  - Resolves: #315421, #364171, #364181, #364191, #372771, #426851


author: James Slagle <jslagle@redhat.com> - 0.4.16-1
changelog:
  - Resolves: #212300, #212407, #217857, #218860, #224633, #227399
  - Resolves: #228028, #229785, #229951, #232567, #233067, #234238
  - Resolves: #234880, #236925, #237300


author: James Bowes <jbowes@redhat.com> - 0.4.12-1
changelog:
  - Add missing translations.
  - Related: #211568
  - Fix 'rhn_register dies when calling activateHardwareInfo' (jesusr)
  - Resolves: #227408


author: James Bowes <jbowes@redhat.com> - 0.4.10-1
changelog:
  - Updated code to use more robust UUID/virt_type discovery mechanisms, which
    allows us to workaround BZ 225203. (pvetere)
  - Resolves: #225203


author: James Bowes <jbowes@redhat.com> - 0.4.8-1
changelog:
  - Add messages for virt entitlements
  - Client side support for sending uuid and virt type during registration
  - Look for orgs and INs even on satellite
  - Catch InvalidRegNumException for hardware numbers
  - Resolves: #223322, #223860, #223295, #223307, #223359


author: James Bowes <jbowes@redhat.com> - 0.4.4-1
changelog:
  - Update translations.
  - Make sure translations are used in all parts of the gui and tui
  - Related: #211568


author: James Bowes <jbowes@redhat.com> - 0.3.3-1
changelog:
  - Fixes for #213089, #213958, #214691, #215085, #414414, #213134, #214882 
  - Fixes for #214844, #214523, #214609
  - Include new manual pages and AUTHORS file.


author: Shannon Hughes <shughes@redhat.com> - 0.3.0-1
changelog:
  - up2date/rhn_register support for hicolor theme
  - Fix for #212666
  - Fixes for #213133, #213090, #212020


author: James Bowes <jbowes@redhat.com> - 0.2.8-1
changelog:
  - New and updated translations.
  - Fixes for #211480, #211568, #212618, #212539, #211415, #210948, #211389
  - Fixes for #212052, #212453, #211382, #212599


author: Peter Vetere <pvetere@redhat.com> - 0.2.6-1
changelog:
  - Update to 0.2.6
  - Fixed rhnreg_ks call to registerSystem.  Used "token" arg instead of 
    "activationKey."


author: James Bowes <jbowes@redhat.com> - 0.2.4-1
changelog:
  - Update to 0.2.4
  - Fixes for #212001, #211876, #211132, #211376, #211374, #211359, #211231,
    and #211186


author: James Bowes <jbowes@redhat.com> - 0.0.6-1
changelog:
  - new rhn-profile-sync command for syncing package, hardware,
    and virtualization profiles with rhn.


author: James Bowes <jbowes@redhat.com> - 0.0.5-1
changelog:
  - Remove unneeded imports and circular imports.

   Tue May 23 2006 Pete Vetere <pvetere@redhat.com> - 0.0.4-1
  - Add support for sending virtualization info to RHN


author: James Bowes <jbowes@redhat.com> - 4.4.69-3
changelog:
  - fix for #87837, inaccurate error message when missing '-f' for kernel updates
  - fix for #125049, misleading usage message: "Please specify either -l, -u, ...
  - fix for #126528, up2date +get source fails if no source available
  - fix for #168312, up2date config file is not ignored in rpm -V
  - fix for #171057, CRM# 696030 repomd error after up2date
  - fix for #171643, repomd error after up2date
  - fix for #s 179896, 179898  rpm verify fails due to config files in .spec not marked ...


author: Bret McMillan <bretm@redhat.com> 4.4.69-1
changelog:
  - fix for #178498, #176123 -- make --channel limit the channel universes for various operations
  - fix for #162106, RHN 'sync packages to system' installing i386 glibc on i686
  - fix for #175593, up2date --whatprovides doesn't handle compat arch provides


author: Adrian Likins <alikins@redhat.com> 4.4.67-3
changelog:
  - fix for #179110 - up2date fails to update xerces-j
  - more fixed for #176195 "up2date-nox --configure changes current value of numeric attribute to Yes/No if 1/0 is selected"


author: Bret McMillan <bretm@redhat.com> 4.4.65-3
changelog:
  - fix for #176195 "up2date-nox --configure changes current value of numeric attribute to Yes/No if 1/0 is selected"


author: Adrian Likins <alikins@redhat.com> 4.4.63-4
changelog:
  - rest of fix for #169880 up2date --arch updates primary arch if package is out of date instead of arch specified.
  - even better fix for #178261 "Invalid function call attempted" when installing a RHN proxy


author: Bret McMillan <bretm@redhat.com> 4.4.60-4
changelog:
  - rebuild with fixes for:
  - fix #169293 -- up2date unable to download very large rpms
  - fix #177784 -- up2date gives error if select-all is checked
  - fix #177786 -- up2date unselects all pakcages if select-all is checked and user selects 'back'


author: Adrian Likins <alikins@redhat.com> 4.4.54
changelog:
  - revert orig fix for #165024 - "invalid function call" error on proxy installs
  - add new bug fix for #165204
  - revert "fix" for #169882, #159955 - up2date man page does not describe --undo option.
  - add --unfo to man page fixing #169882, #159955


author: Adrian Likins <alikins@redhat.com> 4.4.52
changelog:
  - fix #165024 - "invalid function call" error on proxy installs
  - fix #169881, #167732 -  'up2date --configure' always saves changes if useNetwork is false on startup


author: Adrian Likins <alikins@redhat.com> 4.4.51
changelog:
  - fix #169882, #159955 - up2date man page does not describe --undo option.
    (remove deprecated undo option)
  - fix #170065, #166034 - up2date "forward" button disabled if packages selected via spacebar.
  - fix #157087, #170055 - up2date --configure fails when failover serverURL is configured.


author: Adrian Likins <alikins@redhat.com> 4.4.50-4
changelog:
  - new up2date.pot, synced up
  - fix uncommitted changes that were causing string 
    translations not to show up
  - more translations updates for #160608


author: Adrian Likins <alikins@redhat.com> 4.4.19
changelog:
  - fix #155583 - don't allow kernel-smp.x86_64 to be installed on ia32e
  - fix #157070 - make yum/apt repos support proxies
  - fix #148952 - patch from Jack Neely <jjneely@pams.ncsu.edu)


author: Adrian Likins <alikins@redhat.com> 4.4.19
changelog:
  - fix #150418 – rhel-4 client machine capabilities not recognized sometimes
  - fix #145554 – rhn_register fails if proxy username begins at '0'
  - fix #154137 up2date does not always send the arch


author: Adrian Likins <alikins@redhat.com> 4.4.15
changelog:
  - fix #149444 up2date --dry-run --upgrade-to-release changes registered base channel
  - fix #151328 (tracback when registering with *'s in password)
  - added some general uncaught exception catching
  - truncate rpm changelog (see up2date.spec.changelog)
  - update translations


author: Jason Connor <jconnor@redhat.com> 4.4.14
changelog:
  - fix #135121 - uncommented rpmmd registration, fixed api
  - fix #149281 - added check for failed read


author: Jan Pokorny <jpokorny@redhat.com> - 0.12.2-79
changelog:
  - luci: drop unsuccessful monkey patch application wrt. Plone 20121106 advisory
    Related: rhbz#956861


author: Jan Pokorny <jpokorny@redhat.com> - 0.12.2-78
changelog:
  - luci: reflect startup_wait parameter added in postgres-8 RA
    Resolves: rhbz#1065263
  - luci: Multiple information leak flaws in various luci site extensions
    Resolves: rhbz#1076148


author: Jan Pokorny <jpokorny@redhat.com> - 0.12.2-72
changelog:
  - luci: fix mishandling of distro release string
    Resolves: rhbz#1072075
  - luci: fix initscript does not check return values correctly
    Resolves: rhbz#970288
  - ricci: fix end-use modules do not handle stdin polling correctly
    Resolves: rhbz#1076711


author: Ryan McCabe <rmccabe@redhat.com> - 0.12.2-68
changelog:
  - luci: Fix for uncaught exception caused by deep recursion
    Resolves: rhbz#872645
  - luci: Don't chkconfig system services on when starting
    Resolves: rhbz#887170
  - luci: Additional fix for rhbz#514679
    Resolves: rhbz#514679


author: Jan Pokorny <rmccabe@redhat.com> - 0.12.2-67
changelog:
  - luci: copyright info not displayed properly with non-English locale
    Resolves: rhbz#514679
  - luci: templates batch cleanup: rel links, "forgotten password" feature, consistent titles
    Resolves: rhbz#853018


author: Jan Pokorny <jpokorny@redhat.com> 0.12.2-64
changelog:
  - Improvements for bz786372 (Better protect luci's authentication cookie)
  - Improvements for bz607179 (Improper handling of session timeouts)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-60
changelog:
  - Improvements for bz832185 (Luci cannot configure the "identity_file" attribute for fence_ilo_mp)
  - Improvements for bz822633 (Add luci support for nfsrestart)


author: Jan Pokorny <jpokorny@redhat.com> 0.12.2-59
changelog:
  - Fix bz835649 (luci uninstall will leave /var/lib/luci/var/pts and /usr/lib*/luci/zope/var/pts behind)


author: Jan Pokorny <jpokorny@redhat.com> 0.12.2-53
changelog:
  - Fix bz786372 (Better protect luci's authentication cookie)
  - Fix bz607179 (Improper handling of session timeouts)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-52
changelog:
  - Fix bz822633 (Add luci support for nfsrestart)
  - Fix bz832181 (fence_apc_snmp is missing from luci)
  - Fix bz832183 (Luci is missing configuration of ssl for fence_ilo)
  - Fix bz832185 (Luci cannot configure the "identity_file" attribute for fence_ilo_mp)


author: Jan Pokorny <jpokorny@redhat.com> 0.12.2-51
changelog:
  - Fix bz711494 (CVE-2011-1948 plone: reflected XSS vulnerability)
  - Fix bz771920 (CVE-2011-4924 Zope: Incomplete upstream patch for CVE-2010-1104/bz577019)


author: Jan Pokorny <jpokorny@redhat.com> 0.12.2-42
changelog:
  - Fix bz755935 (luci_admin man page is misleading)
  - Fix bz755941 (luci_admin restore is not consistent)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-35
changelog:
  - Fix bz739600 (conga allows erroneous characters in resource)
  - Fix bz734562 (Improve Luci's resource name validation)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-34
changelog:
  - Fix bz709478 (Ricci fails to detect if host if virtual machine capable)
  - Fix bz723000 (Modifying an existing shared resource will not update the reference in the cluster.conf)
  - Fix bz723188 (Luci does not allow to modify __max_restarts and __restart_expire_time for independent subtrees, only for non-critical resources)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-26
changelog:
  - Fix bz679866 (Add the ability to configure the "self_fence" attribute for the LVM resource)
  - Fix bz690936 (RFE: fence_cisco_ucs needs to support sub-organizations)
  - Fix bz643996 (luci_admin doesn't operate correctly if external zope3 packages are installed)
  - Fix bz640329 (fields in Luci are too short)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-24
changelog:
  - Fix bz493662 (RFE: Separate the Oracle 10g Failover Instance in Conga to two resources called "Oracle Instance" and "Oracle Listener")


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-19
changelog:
  - Fix bz602362 (ricci and luci_admin do not have man pages)
  - Fix bz636554 (Support ext4 and xfs file systems in conga for file system agents)
  - Fix bz637216 (Add luci support for fence_ifmib fencing agent)
  - Fix bz579859 (Add luci support for Cisco UCS fencing agent)
  - Fix bz637259 (RFE: Critical/Non-Critical services & resources luci support)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-18
changelog:
  - Fix bz626817 (Add luci support for Cisco MDS fencing agent)
  - Fix bz628102 (Add luci support for iLO MP fencing agent)
  - Fix bz525802 (Add support for configuring broadcast)
  - Modify fix for bz606509 (luci requires wrongly requires users to fill interval / minimum score / votes fields for qdisk configuration)
  - Modify fix for bz501780 (Luci invalidates some "system hostnames" that are valid)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-16
changelog:
  - Fix bz513004 (Conga does not remember SAP database type in IE6/8 from shared resource)
  - Fix bz533246 (Conga does not write "auth" or "password" when creating IPMI LAN fence device)
  - Fix bz555862 (Luci does not have an option to delete failover domain)
  - Fix bz577913 (Fence_drac5 will not popluate the luci interface correctly when adding fence device to node)
  - Fix bz582348 (Remove the "interface" field from the multicast configuration dialog)
  - Fix bz584633 (Add support for power_wait)
  - Fix bz587399 (Clarification on "type" when configuring oracledb resources)
  - Fix bz590143 (chkconfig on cman and rgmanager by default when adding a cluster node via conga)
  - Fix bz590311 (luci vmware fencing gui and fence_vmware script parameter conflict)
  - Fix bz603114 (Can't create KVM guest resources without a path to the XML file)
  - Fix bz606509 (luci requires wrongly requires users to fill interval / minimum score / votes fields for qdisk configuration)
  - Fix bz612300 (conga will fail to start a new node that is added via luci)


author: Chris Feist <cfeist@redhat.com> 0.12.2-14
changelog:
  - An issue with calling 'virsh nodelist' would cause ricci to hang for
    30 seconds during most requests resulting in timeouts to the web interface.
  - Resolves: rhbz#564490


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-7
changelog:
  - Fix bz501780 (Luci invalidates some "system hostnames" that are valid)
  - Fix bz514051 (fs resource will remount itself if any config changes are made to cluster.conf)
  - Fix bz517114 (Conga should not tag clusternodes with multicast tags)
  - Fix bz519050 (Luci does not validate passwords and incorrect characters can be used)
  - Fix bz521884 (Fix instances of #!/usr/bin/env python in luci)
  - Fix bz530129 (conga does not properly handle HA LVM types)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-6.1
changelog:
  - Fix bz519252: run the 'virsh' command with --readonly to cope with new
    virsh/xen behavior introduced in RHEL 5.4.


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-6
changelog:
  - Fix bz469965 (Adding existing fence device fails)
  - Fix bz499741 (updating qdisk partition global settings wipes out heuristics)
  - Fix bz495109 (Need xen/kvm flag for conga UI)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-5
changelog:
  - Fix bz492392 (Conga Interface for Fence Agents Requires Password even when Password Script is Specified)
  - Fix bz491903 ([RFE] add option 'nfslock' to conga)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-4
changelog:
  - Rework fix for bz483775 (Failover Domains can't be set for VMs as services of cluster suite using Conga)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-1
changelog:
  - Fix bz452704 (Unable to add existing RHEL4 clusters with RHEL5.2 Luci)
  - Fix bz467464 (adding qdisk to existing cluster fails to update cman entry in cluster.conf)
  - Fix bz460038 (Conga fs resource error when editing service)
  - Fix bz483067 (adding resource in conga doesn't work in IE)
  - Fix bz483775 (Failover Domains can't be set for VMs as services of cluster suite using Conga)
  - Fix bz450007 (cannot remove shared fence device through luci)
  - Fix bz466013 (Add luci GUI support for LPAR and vmware fencing)
  - Fix bz459160 (fenced config option to skip nodes with undefined fencing)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.1-4
changelog:
  - Fix bz459562 (charset configuration fix for luci)
  - Fix bz459469 (An unknown device type was given: "gnbd.")
  - Fix bz454933 (Add Support in Conga for Xen migration mapping)
  - Fix bz459623 (Conga error adding new node to existing cluster)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.1-1
changelog:
  - Fix bz444938 (conga fails to create proper cluster.conf entries for gfs2 filesystem type)
  - Fix bz444210 (Adding multiple fence devices at the same time causes duplicate entries)
  - Fix bz444381 (conga writes 'exportpath' instead of 'export' attribute for netfs)
  - Fix bz446907 (rpm -V luci fails)
  - Fix bz450854 (luci doesn't start because of a missing dep /usr/bin/dc)
  - Fix bz206570 (RFE: vm list from ricci)
  - Fix bz430737 (Conga should install the 'cmirror' package when clustered storage is requested)
  - Fix bz379461 (Conga doesn't have the option for modulename for drac fencing)
  - Fix bz433089 (when adding multiple nodes the order is reversed.)
  - Fix bz441581 (Don't allow both label and device for qdisk config if only one can be specified)
  - Fix bz223785 (Storage 'Display Devices by' option does not work)
  - Fix bz250439 (conga is unable to delete snapshot volumes)
  - Fix bz414551 (Sector size list is improperly sorted)
  - Fix bz429350 (RFE: GUI support for failing over a service to another node after X number of restarts)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-8
changelog:
  - Fix bz441580 (conga should install 'sg3_utils' and start service 'scsi_reserve' when scsi fencing is used)
  - Fix bz441573 ("nodename" field for fence_scsi disabled when adding a new fence device/instance)
  - Fix bz442997 (Luci inserts "hostname" instead of "ipaddr" for rsa II fencing device)
  - Fix bz442806 (luci shows wrong state for 'Monitor link' checkbox in IP resource)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-6
changelog:
  - Fix bz434586 (Resource tree does not display multiple children of a parent correctly)
  - Fix bz304931 (Rich Sybase resource agent configuration support)
  - Fix bz437398 (When Luci session times out a re-login is thought to be a logout.)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-4
changelog:
  - Fix bz429151 ([RFE] Luci: increase min password length to 6 characters)
  - Fix bz429152 ([RFE] add inactivity timeout)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-0
changelog:
  - Fixed bz230462 (RFE: Only reboot installation target machines when needed)
  - Fixed bz238655 (conga does not set the "nodename" attribute for manual fencing)
  - Fixed bz239387 (RFE: add timeouts for actions that can leave cluster unreachable)
  - Fixed bz249097 (allow a space as a valid password char)
  - Fixed bz249619 (luci "Manage Systems and Clusters" display of clusters and storage systems is cascaded)
  - Fixed bz252348 (RFE: should only have to enter a system's password once)
  - Fixed bz253223 (When deleting a node from conga, the fence device isn't deleted)
  - Fixed bz253720 ("trust" box shouldn't be an option if it is required)
  - Fixed bz253727 (RFE: graphical view should be default in partiton tables view)
  - Fixed bz253842 (luci ignores File System Resource Configuration)
  - Fixed bz253879 (RFE: drop the link/details column in the resource section table)
  - Fixed bz264161 (RFE: support setting the "__independent_subtree" attribute on cluster resources)
  - Fixed bz277661 (RFE: Better instructions on the luci login page if luci_admin not run.)
  - Fixed bz277711 (RFE: luci_admin should check that luci is running before asking for the password)
  - Fixed bz295771 (RFE: add ability to set self_fence attribute for clusterfs resources)
  - Fixed bz301411 (conga shouldn't turn on init scripts if the user turned them off)
  - Fixed bz303661 (Browser support to encompass Internet Explorer on Windows Vista and XP)
  - Fixed bz304891 (Browser support to encompass Firefox on Windows Vista and XP.)
  - Fixed bz315631 (conga doesn't handle the cluster restart operation properly)
  - Fixed bz317261 (Check for dual power fencing fails when adding new fence instances)
  - Fixed bz320411 (conga should use the node name in cluster.conf and not FQDN for fencing)
  - Fixed bz337041 (Add option to not fail-back service)
  - Fixed bz340111 (Storage redirection after probe does not work on WinXP with FF2)
  - Fixed bz379461 (Conga doesn't have the option for modulename for drac fencing)
  - Fixed bz383071 (Virtual machine configuration - add field for "migration type" xml attr = "migrate")


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-6
changelog:
  - Fixed bz253783
  - Fixed bz253914 (conga doesn't allow you to reuse nfs export and nfs client resources)
  - Fixed bz254038 (Impossible to set many valid quorum disk configurations via conga)
  - Fixed bz253994 (Cannot specify multicast address for a cluster)
  - Resolves: bz253783, bz253914, bz254038, bz253994


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-5
changelog:
  - Fixed bz249291 (delete node task fails to do all items listed in the help document)
  - Fixed bz253341 (failure to start cluster service which had been modifed for correction)
  - Related: bz253341
  - Resolves: bz249291


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-4
changelog:
  - Fixed bz230451 (fence_xvm.key file is not automatically created. Should have a least a default)
  - Fixed bz249097 (allow a space as a valid password char)
  - Fixed bz250834 (ZeroDivisionError when attempting to click an empty lvm volume group)
  - Fixed bz250443 (storage name warning utility produces a storm of warnings which can lock your browser)
  - Resolves: bz249097, bz250443, bz250834
  - Related: bz230451


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-3
changelog:
  - Fixed bz245947 (luci/Conga cluster configuration tool not initializing cluster node members)
  - Fixed bz249641 (conga is unable to do storage operations if there is an lvm snapshot present)
  - Fixed bz249342 (unknown ricci error when adding new node to cluster)
  - Fixed bz249291 (delete node task fails to do all items listed in the help document)
  - Fixed bz249091 (RFE: tell user they are about to kill all their nodes)
  - Fixed bz249066 (AttributeError when attempting to configure a fence device)
  - Fixed bz249086 (Unable to add a new fence device to cluster)
  - Fixed bz249868 (Use of failover domain not correctly shown)
  - Resolves bz245947, bz249641, bz249342, bz249291, bz249091,
  - Resolves bz249066, bz249086, bz249868
  - Related: bz249351


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-2
changelog:
  - Fixed bz245202 (Conga needs to support Internet Explorer 6.0 and later)
  - Fixed bz248317 (luci sets incorrect permissions on /usr/lib64/luci and /var/lib/luci)
  - Resolves: bz245202 bz248317


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-1
changelog:
  - Fixed bz238655 (conga does not set the "nodename" attribute for manual fencing)
  - Fixed bz221899 (Node log displayed in partially random order)
  - Fixed bz225782 (Need more luci service information on startup - no info written to log about failed start cause)
  - Fixed bz227743 (Intermittent/recurring problem - when cluster is deleted, sometimes a node is not affected)
  - Fixed bz227682 (saslauthd[2274]: Deprecated pam_stack module called from service "ricci")
  - Fixed bz238726 (Conga provides no way to remove a dead node from a cluster)
  - Fixed bz239389 (conga cluster: make 'enable shared storage' the default)
  - Fixed bz239596
  - Fixed bz240034 (rpm verify fails on luci)
  - Fixed bz240361 (Conga storage UI front-end is too slow rendering storage)
  - Fixed bz241415 (Installation using Conga shows "error" in message during reboot cycle.)
  - Fixed bz241418 (Conga tries to configurage cluster snaps, though they are not available.)
  - Fixed bz241706 (Eliminate confusion in add fence flow)
  - Fixed bz241727 (can't set user permissions in luci)
  - Fixed bz242668 (luci init script can return non-LSB-compliant return codes)
  - Fixed bz243701 (ricci init script can exit with non-LSB-compliant return codes)
  - Fixed bz244146 (Add port number to message when ricci is not started/firewalled on cluster nodes.)
  - Fixed bz244878 (Successful login results in an infinite redirection loop with MSIE)
  - Fixed bz239388 (conga storage: default VG creation should be clustered if a cluster node)
  - Fixed bz239327 (Online User Manual needs modification)
  - Fixed bz227852 (Lack of debugging information in logs - support issue)
  - Fixed bz245025 (Conga does not accept '&amp;' character in password field for Fence configuration)
  - Fixed bz225588 (luci web app does not enforce selection of fence port)
  - Fixed bz212022 (cannot create cluster using ip addresses)
  - Fixed bz223162 (Error trying to create a new fence device for a cluster node)
  - Upgraded to the latest Plone (2.5.3)
  - Added a "reprobe storage" button that invalidates cached storage reports
    and forces a new probe.
  - Resolves: bz238655, bz221899, bz225782, bz227682, bz227743, bz239389,
  - Resolves: bz239596, bz240034, bz240361, bz241415, bz241418, bz241706,
  - Resolves: bz241727, bz242668, bz243701, bz244146, bz244878, bz238726,
  - Resolves: bz239388, bz239327, bz227852, bz245025, bz225588, bz212022


author: Ryan McCabe <rmccabe@redhat.com> 0.9.2-5
changelog:
  - Fixed bz225206 (Cluster cannot be deleted (from 'Manage Systems') - but no error results)
  - Fixed bz225164 (Conga allows creation/rename of clusters with name greater than 15 characters)
  - Fixed bz227758 (Entering bad password when creating a new cluster = UnboundLocalError: local variable 'e' referenced before assignment)
  - Resolves: bz225206, bz225164, bz227758


author: Stanko Kupcevic <kupcevic@redhat.com> 0.9.2-4
changelog:
  - Do not fail on i18n machines
  - Fixed bz225747 (Create/delete cluster - then access disk on node = Generic error on host: cluster tools: cman_tool errored)
  - Fixed bz233326 (CVE-2007-0240 Conga includes version of Zope that is vulnerable to a XSS attack)
  - Fixed bz228637 (CVE-2007-1462 security alert - passwords sent back from server as input value)
  - Fixed bz229027 (luci failover domain forms are missing/empty)
  - Fixed bz230447 (fence_xvm is incorrectly listed as "xmv" in virtual cluster)
  - Fixed bz230452 (Advanced options parameters settings don't do anything)
  - Fixed bz230454 (Unable to configure a virtual service)
  - Fixed bz230457 (kmod-gfs-xen not installed with Conga install)
  - Fixed bz230461 ('enable shared storage' option cleared whenever there is a configuration error)
  - Fixed bz230469 (Must manually edit cluster.conf on the dom0 cluster to add "<fence_xvmd/>")
  - Resolves: bz229027, bz230447, bz230452, bz230454, bz230457,
  - Resolves: bz230461, bz230469, bz228637, bz233326, bz225747


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-27
changelog:
  - Fixed bz214989 (Package download not working for Conga during cluster creation)
  - Fixed bz219522 (Restarting a cluster via luci web gui = UnboundLocalError - local variable 'e' referenced before assignment)
  - Fixed bz201394 (luci doesn't verify ricci's SSL cert against trusted list)
  - Fixed bz212021 (various luci buttons do nothing)
  - Fixed bz212448 (release blocker: turn off debug mode of server)
  - Fixed bz212445 (release blocker: prevent management page access)


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-26
changelog:
  - luci storage: fix bytes->TB conversion
  - Improved bz201394: luci doesn't verify ricci's SSL cert against trusted list (step 1 - backend)
  - Fixed bz217387 (luci - HTML error shows up in display (minor))
  - Fixed bz215031 (Cannot add a resource to a service via luci web app)
  - Fixed bz218040 (luci reports "unknown" as cluster name if cluster creation fails)
  - Fixed bz218941 (Conga/luci - cannot add node to cluster via luci web app)
  - Fixed bz219156 (Errors in performing node-specific tasks due to ricci outage not reflected in luci display)
  - Fixed bz217703 (clustered vg creation fails)
  - Resolves: bz217387, bz215031, bz218040, bz218941, bz219156, bz217703
  - Related: bz201394


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-24
changelog:
  - Fixed bz215039 (Cannot create a new resource via luci web app)
  - Fixed bz215034 (Cannot change daemon properties via luci web app)
  - Fixed bz214790 (Stop/restart cluster not working via luci web app)
  - Fixed bz213690 (luci - Reversed links in colophon (gui - minor))
  - Fixed bz213266 (Conga - modifying a cluster node's cluster membership in a subnet with other clusters results in the wrong cluster.conf)
  - Fixed bz213083 (luci - should display usernames in some logical/sorted order (usability))
  - Fixed bz212601 (luci - selecting cluster name or cluster node name indicates error in install and displays empty form)
  - Fixed bz212021 (various luci buttons do nothing)
  - Fixed bz212006 (create cluster does not show status as cluster is being created)
  - Fixed bz212584 (luci does not retrieve failed ricci queue elements)
  - Fixed bz212440 (luci persists possibly incorrect name for a system)
  - Improved bz213306 (ricci - log probing can take minutes to complete)
  - Fixed starting/stopping services
  - Fixed deleting cluster
  - Fixed deleting node
  - Fixed redirection for all async->busy wait calls
  - Storage module: properly probe cluster quorum if LVM locking
    is marked as clustered
  - Resolves: bz215039, bz215034, bz214790, bz213690, bz213266
  - Resolves: bz213083, bz212601, bz212021, bz212006, bz212584
  - Resolves: bz212440
  - Related: bz213306


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-21
changelog:
  - 211564: ricci allocates huge memory chunk, causing long swapping
  - 211345: cluster_adapters is missing import of Xenvm module
  - 211191: SELinux issues tracking bug
  - 211370: retrieving log from node fails
  - 211942: Xenvm moniker must be eradicated from UI
  - 211375: unable to reliably create a cluster
  - 211373: reboot node fails from storage tab


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-16
changelog:
  - Enable zope/plone inclusion on RHELs
  - Remove luci's dependency on ricci
  - Many improvements of cluster management interface
  - Add full GFS1/2 support; detect many other filesystems
  - Suppress msgs from init script (bz204235)
  - Upgrade zope to 2.9.4 (track Fedora Core)


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-12
changelog:
  - Don't auto-start ricci after installation, do it manually
  - Under certain circumstances, default luci password would not get reset
  - Many Luci improvements


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-11.7
changelog:
  - Move ricci-modrpm, ricci-modlog, ricci-modstorage, ricci-modservice
    from /usr/sbin to /usr/libexec


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-11
changelog:
  - Spin off clustermon.srpm (modcluster, cluster-snmp and
    cluster-cim) from conga.srpm
  - Luci: tighten down security


author: Tomas Mraz <tmraz@redhat.com> 2.1.22-5
changelog:
  - install the shared version of pluginviewer and other tools (#473197)
  - remove potentially patented srp plugin which was not built
    anyway (#368421)
  - include crypt.h for missing prototype (#433583)
  - implement reload as conditional restart in the init script (#448154)
  - set the LDAP_OPT_TIMEOUT in the ldap plugin (#475726)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-12
changelog:
  - add conditionalized build dependency on openldap-devel (#191855)
  - patch md5global.h to be the same on all architectures


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-11
changelog:
  - add unapplied patch which makes the DIGEST-MD5 plugin omit the realm
    argument when the environment has $CYRUS_SASL_DIGEST_MD5_OMIT_REALM set to a
    non-zero value, for testing purposes
  - add missing buildrequires on zlib-devel (#190113)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-9
changelog:
  - use --as-needed to avoid linking dbconverter-2 with SQL libraries, which
    it doesn't use because it manipulates files directly (#173321)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-8
changelog:
  - rebuild with new OpenLDAP, overriding the version checks to assume that
    2.3.11 is acceptable
  - remove a lingering patch for 1.x which we no longer use


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-4
changelog:
  - move the ldapdb auxprop support into a subpackage (#167300)
    (note: the ldap password check support in saslauthd doesn't use auxprop)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-2
changelog:
  - move the ANONYMOUS mech plugin to the -lib subpackage so that multilib
    systems can use it without installing the main package
  - build the static libraries without sql auxprop support


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-1
changelog:
  - update to 2.1.21
  - turn off compilation of libsasl v1 (finally)
  - explicitly disable sqlite to avoid the build warning
  - change the default mechanism which is set for saslauthd from "shadow" to
    "pam" (#159194)
  - split the shared library up from saslauthd so that multilib systems don't
    have to pull in every dependency of saslauthd for the compat arch (#166749)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.19-1
changelog:
  - rebuild (the 2.1.19 changelog for fixing a buffer overflow referred to a CVS
    revision between 2.1.18 and 2.1.19)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a saslauthd_version option to libsasl's saslauthd client and teach it to
    do the right thing
  - enable the saslauthd client code in libsasl version 1 (it's still going away!)
  - add saslauthd1-checkpass/saslauthd2-checkpass for testing the above change


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17, forcing the gssapi plugin to be shared now, as before
  - use a bundled libdb (#112215)
  - build static-with-all-plugins and normal-shared libsasl versions
  - add sasl2-{shared,static}-mechlist for very basic sanity checking
  - make inclusion of sasl1 stuffs conditional, because it's so going away


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.15-6
changelog:
  - use /dev/urandom instead of /dev/random for SASL2 (docs indicate that this is
    safe if you aren't using OTP or SRP, and we build neither); SASL1 appears to
    use it to seed the libc RNG only (#103378)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.15-5
changelog:
  - install saslauthd's mdoc page instead of the pre-formatted man page, which
    would get formatted again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - include testsaslauthd
  - note in the README that the saslauthd protocol is different for v1 and v2,
    so v1's clients can't talk to the v2 server


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - consider either des_cbc_encrypt or DES_cbc_encrypt to be sufficient when
    searching for a DES implementation in libcrypto
  - pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.7-3
changelog:
  - rebuild, overriding sasldir when running make so that on multilib systems
    applications will be able to load modules for the right arch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.0, which is designed to be installed in parallel with cyrus sasl
    1.x, so fork the package and rename it to cyrus-sasl2
  - add the sasldb auxprop plugin to the main package
  - add disabled-by-default saslauthd init script
  - move the .la files for plugins into their respective packages -- they're
    needed by the library


author: Nalin Dahyabhai <nalin@redhat.com> 1.5.24-21
changelog:
  - include sample programs in the -devel subpackage, prefixing their names
    with "sasl-" to reduce future potential naming conflicts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add gdbm-devel as a build dependency (#44990)
  - split off CRAM-MD5 and DIGEST-MD5 into a subpackage of their own (#43079,
    and dialogs with David L. Parsley)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split out the PLAIN and LOGIN mechanisms into their own package (this allows
    an administrator to disable them by simply removing the package)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move .so files for modules to their respective packages -- they're not -devel
    links meant for use by ld anyway


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - force use of gdbm for database files to avoid DB migration weirdness
  - enable login mechanism
  - disable gssapi until it can coexist peacefully with non-gssapi setups
  - actually do a make in the build section (#15410)


author: Mads Kiilerich <mads@kiilerich.com>
changelog:
  - updated to sasl 1.5.11
  - configure --disable-krb4 --without-rc4 --disable-cram 
    because of missing libraries and pine having cram as default...
  - handle changing libsasl.so versions


author: Jarrod Millman <millman@berkeley.edu> - 0.6.0-1
changelog:
  - update to new upstream source
  - update Summary, License, Url, and description
  - added extra dependencies
  - remove symlink since Lib has been renamed scipy


author: Jef Spaleta <jspaleta@gmail.com> - 0.5.1-4
changelog:
  - Minor adjustments to specfile for packaging guidelines. 
  - Changed buildrequires fftw version 3  from fftw2


author: Neal Becker <ndbecker2@gmail.com> - 0.4.8-2
changelog:
  - Fix BuildRoot
  - Add BuildRequires, Requires
  - Test remove d1mach patch
  - Fix defattr
  - Add changelog
  - Removed Prefix, Vendor
  - Fix Source0


author: Kamil Dudka <kdudka@redhat.com> 7.15.5-14
changelog:
  - fix stack smashing in the FTP implementation (#652557)
  - fix proxy kerberos authentication (#657396)
  - update running_handles counter properly in curl_multi_remove_handle (#688871)


author: Kamil Dudka <kdudka@redhat.com> - 7.15.5-8
changelog:
  - mention lack of IPv6, FTPS and LDAP support while using a socks proxy
    (#473128)
  - avoid tight loop if an upload connection is broken (#479967)
  - add options --ftp-account and --ftp-alternative-to-user to program help
    (#517084)
  - fix crash when reusing connection after negotiate-auth (#517199)
  - support for CRL loading from a PEM file (#532069)


author: Ivana Varekova <varekova@redhat.com> - 7.15.1-2
changelog:
  - fix multilib problem - #181290 - 
    curl-devel.i386 not installable together with curl-devel.x86-64


author: Joe Orton <jorton@redhat.com> 7.12.3-3
changelog:
  - don't pass /usr to --with-libidn to remove "-L/usr/lib" from
    'curl-config --libs' output on x86_64.


author: Adrian Havill <havill@redhat.com> 7.12.3-1
changelog:
  - Upgrade to 7.12.3, which uses poll() for FDSETSIZE limit (#134794)
  - require libidn-devel for devel subpkg (#141341)
  - remove proftpd kludge; included upstream


author: Adrian Havill <havill@redhat.com> 7.12.1-1
changelog:
  - upgrade to 7.12.1
  - enable GSSAPI auth (#129353)
  - enable I18N domain names (#134595)
  - workaround for broken ProFTPD SSL auth (#134133). Thanks to
    Aleksandar Milivojevic


author: Adrian Havill <havill@redhat.com> 7.10.6-7
changelog:
  - aclocal before libtoolize
  - move OpenLDAP license so it's present as a doc file, present in
    both the source and binary as per conditions


author: Joe Orton <jorton@redhat.com> 7.9.8-2
changelog:
  - fix `curl-config --libs` output for libdir!=/usr/lib
  - remove docs/LIBCURL from docs list; remove unpackaged libcurl.la
  - libtoolize and reconf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - include curl-config in curl-devel
  - update to 7.8 to fix memory leak and strlcat() symbol pollution from libcurl


author: Tim Powers <timp@redhat.com>
changelog:
  - update to 7.4.1 to fix bug #20337, problems with curl -c
  - not using patch anymore, it's included in the new source. Keeping
    for reference


author: Tim Powers <timp@redhat.com>
changelog:
  - changelog started
  - general cleanups, changed prefix to /usr, added manpage to files section
  - including in Powertools


author: Tomas Lestach <tlestach@redhat.com> 4.7.0-10
changelog:
  - Related: #502234 - rhnsd reload doesn't work on RHEL5
  - Related: #524886 - Remove hard coded paths in /etc/init.d/rhnsd


author: Tomas Lestach <tlestach@redhat.com> 4.7.0-6
changelog:
  - Resolves: #502234 - rhnsd reload doesn't work on RHEL5
  - Resolves: #524886 - Remove hard coded paths in /etc/init.d/rhnsd


author: Dan Horak <dhorak@redhat.com> - 2.14.0-4
changelog:
  - add Requires for scriptlets
  - update the subagent's initscript to RHEL/Fedora standards
  - Related: #474176


author: Dan Horak <dhorak@redhat.com> - 2.14.0-1
changelog:
  - update to 2.14.0 (#474176)
  - run the included test suite during build process
  - add missing initscript scriptlets
  - Resolves: #474176


author: Phil Knirsch <pknirsch@redhat.com> - 2.4.1-5
changelog:
  - Had to disable sysfs support due to new libsysfs and incompatible API.
  - Added missing ncurses-devel buildrequires


author: Phil Knirsch <pknirsch@redhat.com> 2.0.3-4
changelog:
  - Added the openhpi config file
  - Added missing /var/lib/openhpi dir with proper rights
  - Added a few missing BuildPreReqs


author: Phil Knirsch <pknirsch@redhat.com> 2.0.3-1
changelog:
  - Moved the pkgconfig files to the devel package (#152507)
  - Update to openhpi-2.0.3
  - Had to manually disable ipmi support for now until openhpi builds correctly
    against it again
  - Dropped net-snmp-config patch, not needed anymore


author: Phil Knirsch <pknirsch@redhat.com> 1.9.2-2
changelog:
  - Fixed overflow in plugins/sysfs/sysfs2hpi.c
  - Fixed rebuild problem with latest net-snmp
  - Removed is_simulator patch, not needed anymore


author: Phil Knirsch <pknirsch@redhat.com> 1.9.1-1
changelog:
  - Added proper BuildRequires
  - Drop ia64 for first build, something fishy with the compiler and warning.


author: Dan Horák <dhorak@redhat.com> 2.2.4-23.el5
changelog:
  - fixed CKR_TEMPLATE_INCOMPLETE exception on an unwrap of an AES key (#538879)
  - fixed MAC computing during offload of MAC-hashing to CPACF using PKCS11 (#539168)
  - Resolves: #538879, #539168


author: Phil Knirsch <pknirsch@redhat.com> 2.2.4-22.el5
changelog:
  - Fixed memcmp problem for pkcsconf validation of PINs (#415931)
  - Fixed double free problem in key store (#435462)


author: Phil Knirsch <pknirsch@redhat.com> 2.2.4-17.el5
changelog:
  - Added the CCA STDLL for s390(x) arch (#253059)
  - Fixed a file descriptor leak for spin locks (#371021)


author: Phil Knirsch <pknirsch@redhat.com> - 2.2.4-12.el5
changelog:
  - Moved the .so lib to the devel package (#219242)
  - Added proper multilib requirements for devel package (#219242)


author: Phil Knirsch <pknirsch@redhat.com> - 2.2.4-5.el5
changelog:
  - Added the other archs according to #184631
  - Split out the devel parts of openCryptoki in a devel subpackage (#184631)


author: Phil Knirsch <pknirsch@redhat.com> 2.1.5-6.10
changelog:
  - Fixed quite a few warnings and actual errors (#143768)
  - Fixed the initscript for failed startups (#154495)


author: Phil Knirsch <pknirsch@redhat.com> 2.1.3-8
changelog:
  - Included updated initscript from IBM (#112542).
  - Changed permission of /etc/init.d/pkcsslotd to be executable (#112542).


author: Phil Knirsch <pknirsch@redhat.com> 2.1.3-4
changelog:
  - Fixed some smaller build problems.
  - Included and fixed new initscript for pkcs11 startup.
  - Fixed filelist.


author: Stephen Herr <sherr@redhat.com> 2.5.22.1-3
changelog:
  - Resolves: #951590 - updateing bug numbers in changelog to make buildsystem
    happyStephen Herr <sherr@redhat.com>


author: Stephen Herr <sherr@redhat.com> 2.5.22.1-2
changelog:
  - Related: #951590 - new rhnlib conflicts with old spacewalk-backend
  - Related: #951590 - rhnlib update made necessary by error in rhncfg
  - Related: #951590 - Make timeout of yum-rhn-plugin calls through rhn-client-
    tools configurable
  - Resolves: #951590 - make Proxy timeouts configurable


author: Miroslav Suchý <msuchy@redhat.com> 2.5.22-6
changelog:
  - Resolves: #684813 - create idn_ascii_to_pune() and idn_pune_to_unicode(),
    which will take care about corner cases of encodings.idna


author: Jan Pazdziora 2.5.22-5
changelog:
  - Resolves: #583020 - need to initialize self.send_handler for the class Server as well.
  - Resolves: #583980 - replace fcntl.O_NDELAY with os.O_NDELAY, for newer Pythons.


author: Miroslav Suchý <msuchy@redhat.com> 2.5.22-4
changelog:
  - Resolves: #618250 - encode latin-1 characters to unicode and
    do not allow control characters in xmlrpc communication


author: Miroslav Suchý <msuchy@redhat.com> 2.5.15-1
changelog:
  - aamt is not Null in most cases, move it more to right
  - replace len() with ==
  - count length of buffer only once in loop


author: jesus m. rodriguez <jesusr@redhat.com> 2.5.12-1
changelog:
  - merging additional spec changes and minor edits from svn (pkilambi@redhat.com)
  - 499860 Ability to define location for the temporary transport file
    descriptors, uses /tmp by default (pkilambi@redhat.com)
  - use tempfile to create transport objects instead of an ugly loop (pkilambi@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 2.5.11-1
changelog:
  - fixing the rpc version checks (pkilambi@redhat.com)
  - 492638, 489921, 484245 - Adding redirect support to rhnlib for rhel-5 clients
    (pkilambi@redhat.com)


author: Mihai Ibanescu <misa@redhat.com> 2.0-1
changelog:
  - Fixed #165481 (setting socket timeouts causes uncaught SSL exceptions)
  - Fixed #143833 (memory leak in SSL, caused by the cert verification callback)
  - Finally incorporated patch from bug #135660 (basic HTTP authentication)


author: Mihai Ibanescu <misa@redhat.com> 1.8-6
changelog:
  - Fixed #128008 (internal _httplib, used with python 1.5.2, missed a
    HTTPResponse._read_chunked)
  - Fixed a typo


author: Mihai Ibanescu <misa@redhat.com> 1.8-4
changelog:
  - The previous fix in SSL.read uncovered a nastier bug in httplib:
    http://python.org/sf/988120
    Fixed it in our HTTPResponse subclass


author: Mihai Ibanescu <misa@redhat.com> 1.8-3
changelog:
  - Fixed bug in SSL.SSLSocket.read() (blocking when less data is in a pipe that
    has not closed yet).


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - Fixed bug #84803 (use OP_DONT_INSERT_EMPTY_FRAGMENTS to avoid breaking
    non-standard SSL implementations)


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - Use load_verify_locations instead of the SSL store functions, bug with
    multiple certs in the same file


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - Fixed #69518 (up2date seems to never properly reauthenticate after a auth
     timeout)
  - Fixed the typo introduced when fixing the above bug :-)
  - Completely deprecating rhnHTTPlib: swallowed reportError


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - Fixed some proxy-related bugs.
  - Fixed #68911 (and some other bugs that were related to this one).


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-12
changelog:
  - backport patch to stop trying to close a stale connection to the bus,
    which used to generate a warning from libdbus, but which now causes an
    assertion failure (#628683)


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-11
changelog:
  - backport changes to not bother asking about SELinux contexts when we're
    not going to be using that information (#510457)


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-10
changelog:
  - backport changes to prevent the configuration files from conflicting on
    multilib systems (#476255)


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-8
changelog:
  - backport change to block SIGPIPE in oddjobd, so that if a helper exits
    early, we get a write error rather than catastrophe (#246681)
  - oddjob_mkhomedir: spew an error message if the umask can't be parsed into
    a number properly (#246681)
  - pam_oddjob_mkhomedir.8: note that the module doesn't take arguments


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-1
changelog:
  - update to 0.27-1:
    - don't attempt to subscribe to all possible messages -- the message bus
      will already route to us messages addressed to us, and if we try for
      more than that we may run afoul of SELinux policy, generating spewage
  - add a build dependency on pkgconfig, for the sake of FC3
  - update docs and comments because D-BUS is now called D-Bus


author: Nalin Dahyabhai <nalin@redhat.com> 0.26-1
changelog:
  - update to 0.26-1:
    - don't get confused when ACL entries for introspection show up in the
      configuration before we add the handlers for them
    - export $ODDJOB_CALLING_USER to helpers


author: Nalin Dahyabhai <nalin@redhat.com> 0.25-1
changelog:
  - update to 0.25:
    - add introspection for parents of objects specified in the configuration
    - oddjobd can reload its configuration now
    - add -u (umask) and -s (skeldir) flags to the mkhomedir helper


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-1
changelog:
  - update to 0.24, fixing some build errors against D-BUS 0.30-0.33
  - require xmlto, because the generated HTML differs depending on whether
    or not we know how to enforce ACLs which include SELinux context info
  - build with DocBook 4.3


author: Nalin Dahyabhai <nalin@redhat.com> 0.23-1
changelog:
  - fix compilation against older versions of D-BUS if the
    GetConnectionSELinuxSecurityContext method turns out to be available


author: Nalin Dahyabhai <nalin@redhat.com> 0.22-1
changelog:
  - fix some path mismatches in the sample configuration files
  - don't try to set a reconnect timeout until after we've connected


author: Nalin Dahyabhai <nalin@redhat.com> 0.21-3
changelog:
  - prefer BuildRequires: to BuildPrereq (#176452)
  - require /sbin/service at uninstall-time, because we use it (#176452)
  - be more specific about when we require /sbin/chkconfig (#176452)


author: Nalin Dahyabhai <nalin@redhat.com> 0.20-1
changelog:
  - update to 0.20
  - break shared libraries and modules for PAM and python into a subpackage
    for better behavior on multilib boxes
  - if we're not building a sample subpackage, include the sample files in
    the right locations as %doc files


author: Bill Nottingham <notting@redhat.com> 1.3.30.2-2
changelog:
  - alternatives: fix removal of manual links (#525051, <dtardon@redhat.com>)
  - ntsysv man page tweak (#516599)
  - add resetpriorities to the chkconfig man page (#501225)
  - Fix runlevel list in man page (#466740)
  - alternatives: clarify error messages with more context (#441443)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - for LSB scripts, use any chkconfig: priorities as a basis,
    instead of 50/50 (#172599)
  - fix LSB script dependency setting when no chkconfig: line
    is present (#161870, <jean-francois.larvoire@hp.com>)
  - fix LSB script dependency setting when one of Required-Stop
    or Required-Start: is missing (#168457)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix segfault on directories in /etc/xinetd.d (#166385)
  - don't needlessly rewrite xinetd files (#81008)


author: Bill Nottingham <notting@redhat.com> 1.3.14-1
changelog:
  - resize reasonably with larger screens (#74156)
  - don't error out completely on bad symlink (#74324)
  - use ngettext (#106176)
  - error out on invalid start/stop values (#109858)
  - some man page updates
  - fix return code of chkconfig for xinetd services (#63123)
  - sort chkconfig --list display (#61576, <shishz@alum.rpi.edu>)


author: Dan Walsh <dwalsh@redhat.com> 1.3.8-2
changelog:
  - Fix readXinetdServiceInfo to return error on not regular files
  - Fix chkconfig to not write messages if readXinetdServiceInfo gets an error


author: Bill Nottingham <notting@redhat.com> 1.3.4-1
changelog:
  - don't apply the dependency logic to things that already have
    start/stop priorities
  - fix silly display bug in --config


author: Bill Nottingham <notting@redhat.com>
changelog:
  - alternatives: handle initscripts too; --initscript command-line option
  - chkconfig/ntsysv (and serviceconf, indirectly): services with
     *no* links in /etc/rc*.d are no longer displayed with --list, or
     available for configuration except via chkconfig command-line options
  - alternatives: fix trying to enable disable a null service


author: Bill Nottingham <notting@redhat.com>
changelog:
  - actually, put the alternatives stuff back in /usr/sbin
  - ship /etc/alternatives dir
  - random alternatives fixes


author: Matt Wilson <msw@redhat.com>
changelog:
  - changed Prereq: initscripts >= 5.18 to Conflicts: initscripts < 5.18
  - fixed sumary and description where a global string replace nuked them


author: Matt Wilson <msw@redhat.com>
changelog:
  - added support for a "hide: true" tag in initscripts that will make
    services not appear in ntsysv when run with the "--hide" flag


author: Arnaldo Carvalho de Melo <acme@conectiva.com.br>
changelog:
  - added pt_BR translations
  - added more translatable strings
  - support for i18n init.d scripts description


author: Ryan McCabe <rmccabe@redhat.com> - 2.0.52-51
changelog:
  - rgmanager: Fix for clustat crash when using an invalid
    Resolves: rhbz#853083
  - rgmanager: vm.sh: Allow "timeout" to be specified for Xen
    Resolves: rhbz#924694
  - rgmanager: lvm.sh: Prevent shell expansion when calling
    Resolves: rhbz#1020279
  - postgres-8.sh: Add "startup_wait" attribute
    Resolves: rhbz#1035023
  - rgmanager: postgres-8.sh: Shutdown postgres with SIGINT
    Resolves: rhbz#1035034


author: Ryan McCabe <rmccabe@redhat.com> - 2.0.52-46
changelog:
  - rgmanager: Fix improper use of xmlCleanupParser()
    rgmanager: Fix potential unlocked memory access
    rgmanager: Fix for double pthread_mutex_unlock() calls
    rgmanager: Don't destroy locked mutexes
    rgmanager: Fix unlikely NULL ptr deref
    Resolves: rhbz#968322


author: Ryan McCabe <rmccabe@redhat.com> - 2.0.52-43
changelog:
  - Med: Don't preserve SELinux context when copying files to /var/lib/nfs/sm
    Resolves: rhbz#907898
  - HA LVM should only remove missing PVs on stop when they belong to mirrors
    Resolves: rhbz#962376


author: Ryan McCabe <rmccabe@redhat.com> - 2.0.52-39
changelog:
  - rgmanager: Update status after resource recovery
    Resolves: rhbz#879029
  - rgmanager: Clean up comments in ASEHAagent.sh
    Resolves: rhbz#841142
  - rgmanager: Install man pages with mode 0644
    Resolves: rhbz#883860
  - rgmanager: Don't duplicate configuration change events
    Related: rhbz#889098


author: Ryan McCabe <rmccabe@redhat.com> - 2.0.52-32
changelog:
  - Bring HA LVM inline with upstream to collect the fixes
    Resolves: rhbz#693855 rhbz#756180
  - rgmanager: Fix orainstance.sh error checking
    Resolves: rhbz#723819
  - rgmanager: Don't exit uncleanly when cman asks us to shut down.
    Resolves: rhbz#769730
  - Fix 773372: Any change to lvm.conf causes HA LVM to
    Resolves: rhbz#773372
  - rgmanager: Don't immediately stop services that have started sucessfully
    rgmanager: Fix return code when relocation fails and svc is running on original node
    Resolves: rhbz#789366
  - rgmanager: Fix for unmount of full filesystems
    Resolves: rhbz#819595
  - rgmanager: Fix for services stuck in recovery
    Resolves: rhbz#834459


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-28
changelog:
  - Fix for rhbz769731 - HA LVM failure to remove tag thwarts service relocation
    Resolves: rhbz#769731


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-26
changelog:
  - rgmanager: Add extra service status call
    rgmanager: Avoid duplicate restart of service
    rgmanager: Fix call to service_status()
    rgmanager: Fix tiny memory leak in sl_service_status
    rgmanager: Fix dependency issue related to ordering
    Resolves: rhbz#743214


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-23
changelog:
  - resource-agents: nfsclient: fix wildcard status checks
    Resolves: rhbz#700103
  - rgmanager: Mark services on dead nodes as stopped
    rgmanager: Send events on service stop & preserve frozen flag
    Resolves: rhbz#722230
  - resource-agents: Handle TREX and Webdispatcher in SAPInstance
    Resolves: rhbz#746992


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-22
changelog:
  - rgmanager: Fix ASEHAagent to allow for multiple ASEHA resources on one machine.
    rgmanager: Fix ASEHAagent to make server_name unique
    Resolves: rhbz#690265
  - rgmanager: Resolve rare deadlock
    Resolves: rhbz#713243
  - rgmanager: Add -F to clusvcadm man page
    Resolves: rhbz#715052
  - rgmanager: Fix dependency restart bug
    rgmanager: Fix dependency restart bug in CP mode
    Resolves: rhbz#743442
  - resource-agents: orainstance.sh: Fix temporary variables
    Resolves: rhbz#744283


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-21
changelog:
  - rgmanager: Fix bad passing of SFL_FAILURE up
    (fix_bad_passing_of_sfl_failure_up.patch)
    Resolves: rhbz#711521


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-20
changelog:
  - resource-agents: Improve LD_LIBRARY_PATH handling by SAP*
    (resource_agents_improve_ld_library_path_handling_by_sap*.patch)
    Resolves: rhbz#710637


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-19
changelog:
  - Fix changelog format
  - rgmanager: Fix reference count handling
    (fix_reference_count_handling.patch)
    Resolves: rhbz#692771


author: Marek Grac <mgrac@redhat.com> - 2.0.52-18
changelog:
  - resource-agents: postgres-8 resource agent does not detect a failed
    start of postgres server 
    (postgres-8-Fix_pid_files.patch)
    Resolves: rhbz#663827


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-16
changelog:
  - rgmanager: Allow non-root clustat
    (allow_non_root_clustat.patch)
    Resolves: rhbz#510300
  - rgmanager: Initial commit of central proc + migration support
    (central_proc_+_migration_support.patch)
    Resolves: rhbz#525271
  - rgmanager: Make clufindhostname -i predictable
    (make_clufindhostname_i_predictable.patch)
    Resolves: rhbz#592613
  - resource-agents: Trim trailing slash for nfs clients
    (trim_trailing_slash_for_nfs_clients.patch)
    Resolves: rhbz#592624
  - rgmanager: Update last_owner on failover
    (update_last_owner_on_failover.patch)
    Resolves: rhbz#610483
  - rgmanager: Pause during exit if we stopped services
    (pause_during_exit_if_we_stopped_services.patch)
    Resolves: rhbz#619468
  - rgmanager: Fix quotaoff handling
    (fix_quotaoff_handling.patch)
    Resolves: rhbz#637678
  - resource-agents: Try force-unmount before fuser for netfs.sh
    (try_force_unmount_before_fuser_for_netfs_sh.patch)
    Resolves: rhbz#678494
  - rgmanager: Improve rgmanager's exclusive prioritization handling
    (improve_rgmanager_s_exclusive_prioritization_handling.patch)
    Resolves: rhbz#680256


author: Marek Grac <mgrac@redhat.com> - 2.0.52-15
changelog:
  - resource-agents: postgres-8 resource agent does not detect a failed
    start of postgres server 
    (postgres-8-Do-not-send-TERM-signal-when-killing-post.patch)
    (postgres-8-Improve-testing-if-postgres-started-succe.patch)
    Resolves: rhbz#663827


author: Marek Grac <mgrac@redhat.com> - 2.0.52-14
changelog:
  - resource-agents: Fix problems when generating XML configuration file
    (rgmanager-Fix-problems-in-generated-XML-config-file.patch)
    Resolves: rhbz#637802


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-13
changelog:
  - resource-agents: Use literal quotes for tr calls
    (resource_agents_use_literal_quotes_for_tr_calls.patch)
    Resolves: rhbz#637154


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-12
changelog:
  - resource-agents: Use shutdown immediate in oracledb.sh
    (use_shutdown_immediate_in_oracledb_sh.patch)
    Resolves: rhbz#633992
  - rgmanager: Add path to rhev-check.sh
    (add_path_to_rhev_check_sh.patch)
    Resolves: rhbz#634225
  - rgmanager: Make clustat report correct version
    (make_clustat_report_correct_version.patch)
    Resolves: rhbz#654160


author: Marek Grac <mgrac@redhat.com> - 2.0.52-11
changelog:
  - resource-agents: Listen line in generated httpd.conf incorrect
    (resource-agents-Remove-netmask-from-IP-address-when.patch)
    Resolves: rhbz#675739
  - resource-agents: Disable updates to static routes by RHCS IP tooling
    (resource-agents-Add-option-disable_rdisc-to-ip.sh.patch)
    Resolves: rhbz#620700


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-10.1
changelog:
  - rgmanager: Fix nofailback when service is in 'starting' state
    (fix_nofailback_when_service_is_in_starting_state.patch)
    Resolves: rhbz#669440


author: Marek Grac <mgrac@redhat.com> - 2.0.52-10
changelog:
  - resource-agents: Problem with whitespace in mysql resource name
    (resource_agents_fix_whitespace_in_names.patch)
    Resolves: rhbz#632704


author: Lon Hohberger <lhh@redhat.com> - Version: 2.0.52-9
changelog:
  - resource-agents: Fix migrateuriopt setting
    (resource_agents_fix_migrateuriopt_setting.patch)
    Resolves: rhbz#659477


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-8
changelog:
  - rgmanager: Do hard shut down if CMAN dies
    (do_hard_shut_down_if_cman_dies.patch)
    rgmanager: Work around lockspace release hang
    (work_around_lockspace_release_hang.patch)
    Resolves: rhbz#639961
  - rgmanager: Fix CIFS mount handling in netfs.sh
    (fix_cifs_mount_handling_in_netfs_sh.patch)
    Resolves: rhbz#640676


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-7
changelog:
  - rgmanager: Add multi-instance Oracle database agents
    (add_multi_instance_oracle_database_agents.patch)
    Resolves: rhbz#629208


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.18
changelog:
  - rgmanager: tomcat-5 can't start properly
    (tomcat_5_can_t_start_properly.patch)
    Resolves: rhbz#591003


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.17
changelog:
  - halvm: lvm agent incorrectly reports vg is in volume_list
    (lvm_agent_incorrectly_reports_vg_is_in_volume_list.patch)
    Resolves: rhbz#506587
  - rgmanager: Add non-critical flag to resources
    (rgmanager_add_non_critical_flag_to_resources.patch)
    rgmanager: Add non-critical base behavior
    (rgmanager_add_non_critical_base_behavior.patch)
    rgmanager: Header cleanup
    (rgmanager_header_cleanup.patch)
    rgmanager: Use rg_strings.c for flags
    (rgmanager_use_rg_strings_c_for_flags.patch)
    rgmanager: Present all flags in clustat output
    (rgmanager_present_all_flags_in_clustat_output.patch)
    rgmanager: Mark non-critical resources disabled
    (rgmanager_mark_non_critical_resources_disabled.patch)
    rgmanager: Add convalesce operation
    (rgmanager_add_convalesce_operation.patch)
    rgmanager: Allow restart,disable recovery policy
    (rgmanager_allow_restart,disable_recovery_policy.patch)
    rgmanager: Fix handling of independent subtrees
    (rgmanager_fix_handling_of_independent_subtrees.patch)
    rgmanager: Do not fail service if non-critical resources fail to stop
    (rgmanager_do_not_fail_service_if_non_critical_resources_fail_to_stop.patch)
    rgmanager: Support convalesce w/ central_processing
    (rgmanager_support_convalesce_w_central_processing.patch)
    rgmanager: Add -c option to man page & clusvcadm -h
    (rgmanager_add_c_option_to_man_page_clusvcadm_h.patch)
    rgmanager: Add independent subtree restart thresholds
    (rgmanager_add_independent_subtree_restart_thresholds.patch)
    rgmanager: clean up independent subtree restart handling
    (rgmanager_clean_up_independent_subtree_restart_handling.patch)
    rgmanager: Fix corner case in critical/non-critical handling
    (rgmanager_fix_corner_case_in_critical_non_critical_handling.patch)
    Resolves: rhbz#605733
  - resource-agents: Support ext4 in fs.sh
    (support_ext4_in_fs_sh.patch)
    Resolves: rhbz#636550


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.16
changelog:
  - rgmanager: Retry when config is out of sync
    (retry_when_config_is_out_of_sync.patch)
    Resolves: rhbz#568126


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.15
changelog:
  - rgmanager: Honor restricted FDs during migrations
    (honor_restricted_fds_during_migrations.patch)
    Resolves: rhbz#592380
  - rgmanager: Fix clustat return code
    (fix_clustat_return_code.patch)
    Resolves: rhbz#620730


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.13
changelog:
  - resource-agents: Fix samba netbios name
    (fix_samba_netbios_name.patch)
    Resolves: rhbz#531098
  - resource-agents: Fix vxfs support
    (fix_vxfs_support.patch)
    Resolves: rhbz#531843
  - rgmanager: Allow exit while waiting for cman
    (allow_exit_while_waiting_for_cman.patch)
    Resolves: rhbz#545229
  - rgmanager: Document failover domains
    (document_failover_domains.patch)
    Resolves: rhbz#557562
  - resource-agents: SAPDatabase: remove $TEMPFILE
    (sapdatabase_remove_tempfile.patch)
    Resolves: rhbz#565363
  - rgmanager: Kill processes correctly w/ force_unmount
    (kill_processes_correctly_w_force_unmount.patch)
    Resolves: rhbz#573705
  - HA LVM: Use CLVM with local machine kernel targets
    (use_clvm_with_local_machine_kernel_targets_bz_585229.patch)
    Resolves: rhbz#585229 rhbz#509368 rhbz#583769 rhbz#572311
  - resource-agents: Remove nfs service temp directories
    (remove_nfs_service_temp_directories.patch)
    Resolves: rhbz#595455
  - resource-agents: Fix migration mapping behavior w/ virsh
    (fix_migration_mapping_behavior_w_virsh.patch)
    Resolves: rhbz#596016


author: Marek Grac <mgrac@redhat.com> - 2.0.52-6.11
changelog:
  - postgres-8 will fail to stop gracefully if there are active
    clients connected
  - Resource agent for psql does not work correctly with netmask
  - Resolves: rhbz#587735 rhbz#614456


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.10
changelog:
  - Fix start timeout if status_program takes a long time
  - Use sysrq-b to reboot to work around a failed reboot() syscall
  - Resolves: rhbz#583788 rhbz#608397


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.2
changelog:
  - Add status_program attribute to vm.sh
  - Make status check tolerances user configurable and timing work
    correctly
  - Resolves: rhbz#583788


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-5
changelog:
  - Make relocate-to-offline host consistent with other relocation
    behaviors
  - Add isAlive error reporting for file system agents
  - Resolves: rhbz#562237 rhbz#536157


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.33
changelog:
  - Make VF timeouts scale with totem token timeout
  - Revert requires: line for installation in virtual machines.
  - Resolves: rhbz#548133 rhbz#547752


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.31
changelog:
  - Fix fs.sh bind mount handling
  - Add missing requires: line for libvirt 0.6.3
  - Resolves: rhbz#526286 rhbz#547752


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.27
changelog:
  - Add debugging information to dumps generated by rgmanager
  - Fix migration failure handling
  - Resolves: rhbz#512052 rhbz#499835


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.21
changelog:
  - Fix problem in ip.sh where it was not honoring monitor_link
    during startup
  - Resolves: rhbz#532756


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.15
changelog:
  - Fix problem causing rgmanager to stick after a node dies
    and rejoins, blocking configuration updates and other events
  - Resolves: rhbz#527777


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.14
changelog:
  - Fix problem causing service to get stuck in 'recovering' state
    when using central_processing
  - Resolves: rhbz#530409


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.1
changelog:
  - Fix issue causing unmounting of cluster file systems while in 
  use during a configuration change.
  - Resolves: rhbz#506094


author: Chris Feist <cfeist@redhat.com> - 2.0.52-1
changelog:
  - When vm.sh does a status check and gets 'no state' it is now treated as a
    running state.
  - Resolves: rhb#514044


author: Chris Feist <cfeist@redhat.com> - 2.0.51-1
changelog:
  - In some cases virtual machines will be restarted after a successful migration
    when the cluster configuration is updated.
  - Resolves: rhbz#505340


author: Chris Feist <cfeist@redhat.com> - 2.0.50-1
changelog:
  - Extra checks from the oracle agents have been removed.
  - Several fixes to prevent DOS attacks through insecure use of /tmp/ files have
    been implemented.
  - vm.sh now uses libvirt
  - Users can now define an explicit service processing order when
    central_processing is enabled
  - Resolves: rhbz#470917 rhbz#412911 rhbz#468691 rhbz#492828


author: Chris Feist <cfeist@redhat.com> - 2.0.49-1
changelog:
  - Rgmanger now checks to see if it has been killed by the OOM killer and if
    so, reboots the node.
  - Resolves: rhbz#488072


author: Chris Feist <cfeist@redhat.com> - 2.0.48-1
changelog:
  - clulog now accepts '-' as the first character in messages.
  - If expire_time is 0 max_restarts is no longer ignored.
  - SAP scripts have been updated.
  - Empty PID files no longer cause resource start failures.
  - Recovery policy of type restart now works properly when using a resource
    based on ra-skelet.sh
  - startup_wait option has been added to the mysql resource agent.
  - samba.sh now kills the pid listed in the proper pid file.
  - Handling of '-F' has been improved to fix issues with rgmanager crashing if
    no members of a restricted failover domain are online and rgmanager failing
    to correctly restart service is they fail on the first node.
  - Enabled ability to prioritize services.
  - It is now possible to cap the number of simultaneious status checks to
    prevent load spikes.
  - Enabling a frozen service no longer fails and leaves the service in a failed
    state.
  - Forking and cloning during status checks has been optimized to reduce load
    spikes.
  - rg_test no longers hangs when running against a cluster due to the removal
    of an 8MB memory cap.
  - Resolves: rhbz#471431 rhbz#475826 rhbz#474444 rhbz#449394 rhbz#481058 rhbz#483093 rhbz#486711 rhbz#486717 rhbz#482858 rhbz#487598 rhbz#488714 rhbz#250718 rhbz#490455


author: Chris Feist <cfeist@redhat.com> - 2.0.46-1
changelog:
  - postgres-8.sh now uses 'su' instead of 'sudo' allowing the resource agent to
    run in the background.
  - Resolves: rhbz#462910


author: Chris Feist <cfeist@redhat.com> - 2.0.42-1
changelog:
  - rgmanager can now resolve hostnames to IP addresses and back when checking
    NFS clients.
  - Caching has been added in services to increase performance with a large
    number of individual mounters.
  - Resolves: rhbz#455324


author: Chris Feist <cfeist@redhat.com> - 2.0.40-1
changelog:
  - Parameter added for mapping cluster node name to xen migration
    target hostname.
  - Add support for service freeze/unfreeze.
  - rgmanager now detects restricted failover domain crashes.
  - Fix bugs when using rgmanager with IPv6.
  - rgmanager now waits for fence domain join to complete on startup.
  - clusvcadm man page fixes.
  - Resolves: rhbz#453429 rhbz#448046 rhbz#435466 rhbz#459582 rhbz#460032 rhbz#459754


author: Chris Feist <cfeist@redhat.com> - 2.0.39-1
changelog:
  - rgmanager no longer erroneously removes the wrong address when the IP
    address matches the broadcast address of the interface.
  - rgmanager now properly checks pbond links (used with Xen).
  - Resources with names that include spaces are now properly handled.
  - HA LVM now works properly on ia64 architectures.
  - Symlinks in mount points no longer cause failures.
  - rgmanager now properly sets the close on exec bit for its sockets (fixes
    SELinux issues)
  - Non-ethernet bonding slaves now work properly.
  - The LVM script now provides sufficient parameter descriptions.
  - Machines can now fence themselves if they cannot deactivate their logical
    volumes.
  - The LVM script no longer removes tags from all VGs.
  - Resolves: rhbz#453000 rhbz#451654 rhbz#445662 rhbz#446260 rhbz#441582 rhbz#433313 rhbz#331661 rhbz#443660 rhbz#431713 rhbz#242798 rhbz#438816


author: Chris Feist <cfeist@redhat.com> - 2.0.38-1
changelog:
  - Leaving out the VG name paramater to 'vgchange --deltag' no longer
    causes the tag to be removed from all VGs.
  - Resolves: rhbz#438816


author: Chris Feist <cfeist@redhat.com> - 2.0.37-1
changelog:
  - A bug was fixed which caused incorrect return codes during service stop
    operations.
  - Resolves: rhbz#432998


author: Chris Feist <cfeist@redhat.com> - 2.0.34-1
changelog:
  - Extraneous errors in during HA lvm operations have been fixed
  - Oracle 10g Release 2 resource agent is now included
  - Resolves: rhbz#428346 rhbz#349571


author: Chris Feist <cfeist@redhat.com> - 2.0.33-1
changelog:
  - Samba shares may now be mounted from the netfs resource agent
  - clulog now honors rgmanager log levels
  - Fixed a crash on restart bug
  - Default migration policy is now live (from paused)
  - Restart counters have been implemented
  - Stopping a service using a shared GFS resource no longer umounts GFS if
    other services are using it
  - HA LVM now allows multiple LVs/VGs as long as they move together
  - Resolves: rhbz#289501 rhbz#303981 rhbz#345871 rhbz#247139 rhbz#254111 rhbz#427378 rhbz#428448


author: Chris Feist <cfeist@redhat.com> - 2.0.32-1
changelog:
  - Mounting samba shares are now supported.
  - clulog now honors cluster configuration specification of log levels in
    all cases.
  - clusvcadm man page has been updated
  - Default virtual machine migration is now live (-l)
  - It is now possible to fail over a service have a specified number of restarts
  - rgmanager no longer umounts shared gfs partitions when it is used by other
    services
  - Resolves: rhbz#250681 rhbz#289501 rhbz#303981 rhbz#324151 rhbz#345871 rhbz#400211 rhbz#254111


author: Chris Feist <cfeist@redhat.com> - 2.0.31-1
changelog:
  - Failed resources and their dependencies are restarted instead of the whole
    service
  - Resolves: rhbz#229650


author: Chris Feist <cfeist@redhat.com> - 2.0.29-1
changelog:
  - Virtual machines are no longer restarted when adding as a managed service
  - Made rgmanager compatible with new libdlm
  - Fixed an error which would cause a node to shutdown if you shutdown while
    processing a relocation request
  - A deadlock was fixed when doing lots of service relocations
  - Resolves: rhbz#248727 rhbz#249758 rhbz#247291 rhbz#249314


author: Doug Ledford <dledford@redhat.com> - 2.0.4-2
changelog:
  - Add a modprobe conf file to automatically load rds_tcp and rds_rdma when
    we load the base rds module
  - Resolves: bz643113


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-35.4
changelog:
  - import Kees Cook's patch to fix accidental leakage of part of ./DB_CONFIG
    (#580542, CVE-2010-0826)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-35.2
changelog:
  - when setting file contexts for creation of new files, only fail outright
    if we were in enforcing mode and the file needed to be given a specific
    label (#368281)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-35
changelog:
  - add missing 'ed' builddep
  - set LDFLAGS and CPPFLAGS so that our local copy of DB is more likely to be
    found by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-33
changelog:
  - update to db 4.3.28
  - correct a use of uninitialized memory in the bundled libdb (Arjan van de Ven)
  - obsolete the compat package, which is useless because current glibc wouldn't
    use it anyway


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set errno to ENOENT by default so that we don't leave stale errno values
    around in error cases (#152467)
  - clear the entire key DBT before handing it to a get() function


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-30
changelog:
  - update to DB 4.3 (#140094)
  - add sample getent-based makefile as a doc file
  - pass S_IFREG to matchpathcon() to properly match contexts which are earmarked
    for only files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-28
changelog:
  - set _filter_GLIBC_PRIVATE instead of overriding findrequires, so that file
    colors get marked correctly (originally #128436)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-27
changelog:
  - only provide a -compat subpackage on platforms where glibc provides
    compat NSS modules (%{ix86})
  - make -compat depend on the same version of the non-compat package


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-24
changelog:
  - disable use of RPM's internal dependency generator, which was preventing
    the filtering out of glibc private dependencies (#112849)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-18
changelog:
  - disable various language bindings when building the bundled DB library
  - remove unpackaged files from the buildroot in %install
  - don't install the compat version on arches where if we don't need one


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-8
changelog:
  - build using a bundled Berkeley DB with a unique name to avoid possible symbol
    collisions with binaries using different versions (mix multiple versions of
    any shared library in a single process, observe as wackiness ensues)


author: Petr Pisar <ppisar@redhat.com> - 1:3.13-6
changelog:
  - Do not use real domains in warnquota example (Resolves: #680429)
  - Use /proc/mounts for mountpoint scanning (Resolves: #689822)
  - Use rq_bsize to convert quotas transferred by RPC (bug #667360)
  - Make RPC block factor dynamic (bug #667360)


author: Petr Pisar <ppisar@redhat.com> - 1:3.13-4
changelog:
  - Fix quotactl(2) manual to refer struct dqblk and dqinfo instead of if_dqblk
    and if_dqblk (Resolves: #656827)


author: Petr Pisar <ppisar@redhat.com> - 1:3.13-2
changelog:
  - Enable LDAP support (Resolves: #447780, #459494)
  - Enable remote quota support (Resolves: #469753)
  - Fix rpc manual chapter inconsistency in rquotad(8) page (Resolves: #474836)
  - Add ext4 file system support (Resolves: #500231)
  - Add quotaoff(8) symlink to quotaon(8) manual (Resolves: #574804)
  - Show grace period even if hard limit has been reached (Resolves: #589472)
  - warnquota(8) manual should constrain only to local FS (Resolves: #589523)
  - Remove xqmstats(8) manual as we do not provide the executable
    (Resolves: #589578)
  - Add rpc.rquotad(8) symlink to rquotad(8) manual (Resolves: #595729)


author: Ondrej Vasik <ovasik@redhat.com> 1:3.13-1.2.4
changelog:
  - comment out examples in sample quotatab(bz #435995)
  - Used #include <sys/quota.h> instead of <linux/quota.h> in
    quotactl manpage(bz #431978)
  - always resolve numeric usernames(bz #234558)


author: Philip Copeland <bryce@redhat.com> 3.06-5
changelog:
  - added --with-ext2direct=no to fix #73244
    without this users with UID's > 65535 will not
    be able to exist on a quota enabled FS


author: Philip Copeland <bryce@redhat.com> 3.06-3
changelog:
  - Bah, I'd dropped epoch from the spec file but seems
    we need this if you want to upgrade as the epoch
    number has precedence over the version/release
    numbers.


author: Philip Copeland <bryce@redhat.com> 3.06-1
changelog:
  - Ditched the 3.01-pre9 src base for 3.06
    Rebuilt without any patchs

  ============================================================


author: Preston Brown <pbrown@redhat.com>
changelog:
  - fixed bug #52075 (problem with ext2 labels)
  - backup data files off by default in quotacheck, optional backup flag added
  - fix bug where giving a bad directory or device would cause 
    quotaon/quotacheck to simulate "-a" behaviour
  - if a device name (i.e /dev/hda1) is passed, look up the corresponding mount
    point


author: Preston Brown <pbrown@redhat.com>
changelog:
  - quota 3.00 is required by recent kernel 2.4 changes
  - no warnquota included this time, not yet ported
  - quite a bit of work on quotacheck to make is backwards compatible
  - we will likely go back to "quota 2.00" as these projects merge...


author: Preston Brown <pbrown@redhat.com>
changelog:
  - 2.00 final, rolls in pretty much all our patches. :)
  - fix reporting of in use dquot entries from quotastats
  - change repquota man page to fix documentation of -v (#10330)
  - include warnquota.conf


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.20-1
changelog:
  - Update to PostgreSQL 8.4.20 (#1065839) for fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-20.html


author: Jozef Mlich <jmlich@redhat.com> - 8.4.18-1
changelog:
  - Update to PostgreSQL 8.4.18, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
    including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)


author: Tom Lane <tgl@redhat.com> 8.4.13-1
changelog:
  - Update to PostgreSQL 8.4.13, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
    including the fixes for CVE-2012-3488, CVE-2012-3489
  Resolves: #852019


author: Tom Lane <tgl@redhat.com> 8.4.12-1
changelog:
  - Update to PostgreSQL 8.4.12, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #830724


author: Tom Lane <tgl@redhat.com> 8.4.11-1
changelog:
  - Update to PostgreSQL 8.4.11, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #812078


author: Tom Lane <tgl@redhat.com> 8.4.9-1
changelog:
  - Update to PostgreSQL 8.4.9, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
    including the fix for CVE-2011-2483
  Resolves: #740740


author: Tom Lane <tgl@redhat.com> 8.4.7-1
changelog:
  - Update to PostgreSQL 8.4.7, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
    including the fix for CVE-2010-4015
  Resolves: #672637
  - Ensure we don't package any .gitignore files from the source tarball


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Resolves: #639934


author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #586061


author: Tom Lane <tgl@redhat.com> 8.4.2-3
changelog:
  - Add % release unintentionally omitted from Provides
  - Adjust BuildRequires back to RHEL-5 environment
  - Don't run autoconf on the main package: we don't currently need to,
    and the RHEL5 version is too old for some of the macros used here
  - Revert patch for bug 228263, since that only works with tcl >= 8.5
  Related: #489479


author: Adam Tkac <atkac redhat com> - 0.98.6-10
changelog:
  - fix CVE-2011-3323
  - fix CVE-2011-3324
  - fix CVE-2011-3325
  - fix CVE-2011-3326
  - fix CVE-2011-3327
  - fix CVE-2012-0249


author: Adam Tkac <atkac redhat com> - 0.98.6-9
changelog:
  - build with -fno-strict-aliasing
  - use QCONFDIR variable in initscripts correctly (#716324)
  - locate pid files correctly (#508800)


author: Martin Bacovsky <mbacovsk@redhat.com> - 0.98.6-4
changelog:
  - resolves: #240482: CVE-2007-1995 Quagga bgpd DoS
  - resolves: #228100: LTC31032-FEAT: 200579: Source routing updates through quagga
  - resolves: #243143: Wrong init script


author: Jay Fenlason <fenlason@redhat.com> 0:0.98.6-2
changelog:
  - Upgrade to new upstream version, closing security problems:
    bz#191081 CVE-2006-2223 Quagga RIPd information disclosure
    bz#191085 CVE-2006-2224 Quagga RIPd route injection


author: Jay Fenlason <fenlason@redhat.com> 0.98.5-3
changelog:
  - add the -pie patch, to make -fPIE compiling actually work on all platforms.
  - Include -pam patch to close
    bz#170256 ? pam_stack is deprecated
  - Change ucd-snmp to net-snmp to close
    bz#164333 ? quagga 0.98.4-2 requires now obsolete package ucd-snmp-devel
  - also fix duplicate line mentioned in bz#164333


author: Jay Fenlason <fenlason@redhat.com> 0.98.2-2
changelog:
  - New upstream version, inclues my -gcc4 patch, and a patch from
    Vladimir Ivanov <wawa@yandex-team.ru>


author: Jay Fenlason <fenlason@redhat.com> 0.98.0-2
changelog:
  - New upstream version.  This fixes bz#143796
  - --with-rtadv needs to be --enable-rtadv according to configure.
    (but it was enabled by default, so this is a cosmetic change only)
    Change /etc/logrotate.d/* to /etc/logrotate.d/quagga in this spec file.
  - Modify this spec file to move the .so files to the base package
    and close bz#140894
  - Modify this spec file to separate out /usr/include/quagga/ospfd
    from .../*.h and /usr/include/quagga/ospfapi from .../*.h
    Rpmbuild probably shouldn't allow %dir of a plain file.


author: Tim Waugh <twaugh@redhat.com> 0.97.3-3
changelog:
  - Rebuilt for new readline.
  - Don't explicitly require readline.  The correct dependency is automatically
    picked up by linking against it.


author: Jay Fenlason <fenlason@redhat.com> 0.96.5-0
changelog:
  - New upstream version
  - Change includedir
  - Change the pre scriptlet to fail if the useradd command fails.
  - Remove obsolete patches from this .spec file and renumber the two
    remaining ones.


author: Jay Fenlason <fenlason@redhat.com> 0.96.3-1
changelog:
  - Patch a remote DoS attack (#107140)
  - New upstream version
  - Removed the .libcap patch, which was applied upstream
  - Renamed the vty group from quaggavty to quaggavt because quaggavty is
    too long for NIS.
  - Patch the spec file to fix #106857: /etc/quagga/zebra.conf is created with
    the wrong owner.
  - Removed the "med" part of the 0.96.1-warnings patch for . . .
  - Add a new warnings patch with a fix for #106315.  This also updates
    the "med" part of the previous warnings patch.


author: Jay Fenlason <fenlason@redhat.com> 0.96.2-5
changelog:
  - merge sysconfig patch from 3E branch.  This patch is from Kaj J. Niemi
    (kajtzu@basen.net), and puts Quagga configuration options in
    /etc/sysconfig/quagga, and defaults Quagga to listening on 127.0.0.1 only.
    This closes #104376
  - Use /sbin/nologin for the shell of the quagga user.  This closes #103320
  - Update the quagga-0.96.1-warnings.patch patch to kill a couple more
    warnings.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Remove the directory part of paths for PAM modules in quagga.pam, allowing
    libpam to search its default directory (needed if a 64-bit libpam needs to
    look in /lib64/security instead of /lib/security).


author: Jay Fenlason <fenlason@redhat.com> 0.96.1-3
changelog:
  - Merge from quagga-3E-branch, with a fix for #102673 and a couple
    more compiler warnings quashed.


author: Jay Fenlason <fenlason@redhat.com> 0.96-1
changelog:
  - added a patch (libwrap) to allow the generated Makefiles for zebra/
    and lib/ to work on AMD64 systems.  For some reason make there does
    not like a dependency on -lcap
  - added a patch (warnings) to shut up warnings about an undefined
    structure type in some function prototypes and quiet down all the
    warnings about assert(ptr) on x86_64.
  - Modified the upstream quagga-0.96/readhat/quagga.spec to work as an
    official Red Hat package (remove user and group creation and changes
    to services)
  - Trimmed changelog.  See the upstream .spec file for previous
    changelog entries.


author: Luke Macken <lmacken@redhat.com> - 0.1.0-3
changelog:
  - Add notify-python-0.1.0-attach_to_status_icon.patch to allow the attaching
    notifications to status icons.


author: John (J5) Palmieri <johnp@redhat.com> - 0.3.1-9
changelog:
  - Add patch to fix struct handling in the dbus glib binding for dbus 0.61
    so image data works again


author: Christopher Aillon <caillon@redhat.com> - 0.3.1-6
changelog:
  - Add patch to determine whether a compositing manager is running
    when drawing a new notification bubble, as long as the CM grabs
    the appropriate XSelection.


author: Christopher Aillon <caillon@redhat.com> - 0.3.1-4
changelog:
  - Provide desktop-notification-daemon, since libnotify requires a
    notification deamon, but not this specific one.  Other notification
    daemons can exist on the system so long as they meet the provides
    (and the API of course).


author: Karsten Hopp <karsten@redhat.de> 4.03-1
changelog:
  - update to 4.03, this fixes #184286
  - remove duplicate menu entry in 'Internet' (#183056)
  - fix possible tmpdir race condition during build (#158996)


author: Harald Hoyer <harald@redhat.com> - 2:3.81-4
changelog:
  - removed references how to scan microsoft.com (bz #164962)
  - finally got rid of gtk+-devel dependency


author: Tim Powers <timp@redhat.com>
changelog:
  - update to nmap-2.54BETA7 to possibly fix bug #20199
  - use the desktop file provided by the package instead of using my own
  - patches in previous version are depreciated. Included in SRPM for
    reference only


author: Tim Powers <timp@redhat.com>
changelog:
  - fixed man pages so that they are in an FHS compliant location
  - use %makeinstall
  - use predefined RPM macros wherever possible


author: Tim Powers <timp@redhat.com>
changelog:
  - updated to 2.53
  - using applnk now
  - use %configure, and %{_prefix} where possible
  - removed redundant defines at top of spec file


author: Tim Powers <timp@redhat.com>
changelog:
  - based on origional spec file from
  	http://www.insecure.org/nmap/index.html#download
  - general cleanups, removed lots of commenrts since it madethe spec hard to
  	read
  - changed group to Applications/System
  - quiet setup
  - no need to create dirs in the install section, "make
  	prefix=$RPM_BUILD_ROOT&{prefix} install" does this.
  - using defined %{prefix}, %{version} etc. for easier/quicker maint.
  - added docs
  - gzip man pages
  - strip after files have been installed into buildroot
  - created separate package for the frontend so that Gtk+ isn't needed for the
  	CLI nmap 
  - not using -f in files section anymore, no need for it since there aren't that
  	many files/dirs
  - added desktop entry for gnome


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-15.el5
changelog:
  - fix typos in whiptail usage message (#456307)
  - include whiptail man page (#456307)
  - improve --noitem description (#456305)
  - bind \E[Z to back-tab in built-in keymap (#468046)
  - include tutorial in txt format


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-9
changelog:
  - fix screen corruption when half of double width character is overwritten
    (#137957) 
  - fix double width character handling in checkboxtree and listbox


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-7
changelog:
  - fix checkboxtree positioning
  - make textbox with scrollbar focusable (#83203)
  - turn off cursor when entry terminated form (#86074)
  - handle listbox and checkboxtree focus better (#186053)
  - make default colors more friendly to 8-color terminals (#187545)


author: Petr Rockai <prockai@redhat.com> - 0.52.2-5
changelog:
  - Fix a crash in checkboxtree.c where pressing pgup/pgdown
    on a checkboxtree with less items than its height would
    cause segmentation violation. Consult BR 165347.


author: Petr Rockai <prockai@redhat.com> - 0.52.2-4
changelog:
  - Apply patch by Bill Nottingham (thanks) to improve scrollbar appearance
    (BR 174771).
  - Add -%{release} to snack's Provides: line (just in case).


author: Petr Rockai <prockai@redhat.com> - 0.52.2-3
changelog:
  - Provide: snack = 0.52.2 instead of plain "snack", so that
    we don't block upgrades of custom "snack" packages. This should
    not break anything. (Hopefully) fixes BR 171415.


author: Petr Rockai <prockai@redhat.com> - 0.52.1-0
changelog:
  - revert bidi patch, objections by Jeremy Katz about
    anaconda breaking
  - this version still only exists as a "ghastly" upstream tarball;
    the patches are now cleaned up and will be integrated into
    rhlinux cvs unless some more breakage akin to bidi occurs
  - the if1close patch is now part of upstream tarball too


author: Petr Rockai <prockai@redhat.com>
changelog:
  - use versioned symbols, patch by Alastair McKinstry, mckinstry at
    debian dot org, thanks
  - need private wstrlen due to versioned syms, patch from debian
    package of newt
  - both of the above needed to be forward-ported


author: Matt Wilson <msw@redhat.com> 0.51.4-1
changelog:
  - fixed help line drawing in UTF-8 (#81718)
  - calculate the width of text in entries using wstrlen
  - always set component width to the new label width in newtLabelSetText
  - fixed snack.CListbox to work properly with UTF-8 (#81718)


author: Adrian Havill <havill@redhat.com> 0.51.3-1
changelog:
  - cleaned up const qualifiers in interfaces
  - added Ctrl-L screen refresh
  - fixed segfault in test.c when listbox items are selected
  - accessibility: made newt useable with monochrome terms (#60931)
  - leave the symbols in the libs (#60400)
  - fixed grammar in tutorial (#63496)
  - error checking (curcomp exists) for formEvent, newtFormGetCurrent,
    removed fifty button limit (#59027)


author: Matt Wilson <msw@redhat.com> 0.51.2-1
changelog:
  - fixed wstrlen() it was calculating wcwidth(first wide char in
    string) * strlen(str) instead of the actual width of the whole
    string
  - fixed newtRedrawHelpLine() to copy all the bytes from a multibyte
    string


author: Bill Nottingham <notting@redhat.com> 0.51.0-1
changelog:
  - changes for element width calculation for UTF-8
  - fix textwrap for UTF-8 in general
  - bump soname to avoid shared library collisions with slang


author: Joe Orton <jorton@redhat.com> 0.50.36-1
changelog:
  - add newtListboxGetItemCount() API call
  - include numeric percentage in scale widget appearace
  - add support for ESC key using NEWT_KEY_ESCAPE


author: Crutcher Dunnavant <crutcher@redhat.com> 0.50.31-1
changelog:
  - right anchor the internal Listbox of CListboxes, so that empty
  - scrollable CListboxes do not look like crape.


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - added python binding for newtListboxClear() for Listbox and CListBox
  - let ButtonBars optionally be made of CompactButtons


author: Matt Wilson <msw@redhat.com>
changelog:
  - change from using SLsmg_touch_screen to SLsmg_touch_lines to prevent
    excessive flashing due to screen clears when using touch_screen (more
    Japanese handling)


author: Matt Wilson <msw@redhat.com>
changelog:
  - redraw the screen in certain situations when LANG=ja_JP.eucJP to
    prevent corrupting kanji characters (#34362)


author: Elloit Lee <sopwith@redhat.com>
changelog:
  - Allow python scripts to watch file handles
  - Fix 64-bit warnings in snackmodule
  - Misc snack.py cleanups
  - Add NEWT_FD_EXCEPT to allow watching for fd exceptions
  - In newtExitStruct, return the first file descriptor that an event occurred on


author: Matt Wilson <msw@redhat.com>
changelog:
  - don't blow the stack if we push a help line that is longer than the
    curret number of columns
  - clip window to screen bounds so that if we get a window that is
    larger than the screen we can still redraw the windows behind it
    when we pop


author: Erik Troan <ewt@redhat.com>
changelog:
  - gave up on separate CHANGES file
  - added newtCheckboxTreeSetCurrent() and snack binding
  - don't require python2 anymore


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - bytecompile the snack python module
  - move the libnewt.so symlink to the devel package
  - include popcorn.py and peanuts.py in the devel package,
    so we have some documentation of the snack module


author: Preston Brown <pbrown@redhat.com>
changelog:
  - explicit requirement of devel subpackage on same version of main package
    so that .so file link doesn't break


author: Matt Wilson <msw@redhat.com>
changelog:
  - fixed snack callback function refcounts, as well as optional data args
  - fixed suspend callback ref counts


author: Matt Wilson <msw@redhat.com>
changelog:
  - added snack bindings for setting current listbox selection
  - added argument to set default selection in snack ListboxChoiceWindow


author: Matt Wilson <msw@redhat.com>
changelog:
  - Function to set checkbox flags.  This will go away later when I have
    a generic flag setting function and signals to comps to go insensitive.


author: Matt Wilson <msw@redhat.com>
changelog:
  - Added GPM mouse support
  - Moved to autoconf to allow compiling without GPM support
  - Changed revision to 0.40


author: Erik Troan <ewt@redhat.com>
changelog:
  - added changes from Bruce Perens
      - small cleanups
      - lets whiptail automatically resize windows
  - the order of placing a grid and adding components to a form no longer
    matters
  - added newtGridAddComponentsToForm()


author: Erik Troan <ewt@redhat.com>
changelog:
  - Cleaned up listbox
  - Added whiptail
  - Added newtButtonCompact button type and associated colors
  - Added newtTextboxGetNumLines() and newtTextboxSetHeight()


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-83
changelog:
  - make net-tools actually build after dist-git conversion
  - correct 'netstat --sctp -n' output (#982179)
  - 'netstat --sctp -n' was crashing on bad input (#982638)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-82
changelog:
  - hostname -s returns short host name even if the host name doesn't resolve (#319981)
  - mii-tool now checks only generic MII registers defined in <linux/mii.h> (#531980)
  - fixed statistics.c to use unsigned long long (instead of int)
    to handle 64 bit integers (#622734)
  - prevent 'netstat -nr -A inet6' from smashing stack
    when /proc/net/ipv6_route is broken (#668047)
  - Improve route(8) man page saying that 'route mss' actually sets MTU (#699698)
  - patch netstat to separate basename of -p only if it is absolute path in order
    to make argv[0]="sshd pty/0" display as sshd, and not as /0 (#707427)
  - plipconfig man page and usage output fixes (#707460)
  - improved netstat_stop_trim.patch to not truncate IPV6 UDP sockets (#732983)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-79
changelog:
  - fixed warning: Interface eth0 still in ALLMULTI mode (#477876)
  - fixed german man page for arp (#322901)
  - fixed tcp timers info in netstat (#466845)
  - fixed ifconfig's man page (#453918)
  - fixed buffers lengths in statistics.c (#493314)


author: Radek Vokál <rvokal@redhat.com> - 1.60-76
changelog:
  - make sctp quiet on systems without sctp and also add description to netstat.8
  - fixed arp unaligned access error
  - netplugd init script fixed
  - Resolves: #242916, #220438, #229232


author: Radek Vokal <rvokal@redhat.com> 1.60-57
changelog:
  - add note to hostname man page about gethostbyname() (#166581)
  - don't ship any rarp man page (#170537)


author: Radek Vokal <rvokal@redhat.com> 1.60-52
changelog:
  - don't show "duplicate line" warning (#143933)
  - netstat has new statistcs (#133032)
  - /etc/neplug is owned by net-tools (#130621)


author: Radek Vokal <rvokal@redhat.com> 1.60-50
changelog:
  - added mii-diag tool
  - added newer ether-wake
  - remove useless -i option from ifconfig
  - stop trimming interface names (#152457)


author: Radek Vokal <rvokal@redhat.com> 1.60-48
changelog:
  - behaviour of netstat -i option changed (#115987)
  - netstat -i shows all interface, -I<Iface> only one


author: Radek Vokal <rvokal@redhat.com> 1.60-44
changelog:
  - net-plug-1.2.9 - no changes, upstream included Red Hat patches
  - ether-wake-1.08 - few changes in implementation (#145718)


author: Radek Vokal <rvokal@redhat.com> 1.60-43
changelog:
  - don't report statistics for virtual devices (#143981) <kzak@redhat.com>
  - fixing translation headers - content type format
  - kill bitkeeper warning messages


author: Radek Vokal <rvokal@redhat.com> 1.60-40
changelog:
  - mii-tool(8) fixed, labeled as obsolete, added info (#138687)
  - netstat crashing on i64 fixed (#138804) Patch by <Andreas.Hirstius@cern.ch>


author: Radek Vokal <rvokal@redhat.com> 1.60-39
changelog:
  - IBM patch for netstat -s returning negative values on 64bit arch (#144064)
  - broadcast calulated if only netmask provided (#60509)


author: Radek Vokal <rvokal@redhat.com> 1.60-38
changelog:
  - fixed fail to assign the specified netmask before adress is assigned
  - patch by Malita, Florin <florin.malita@glenayre.com>


author: Phil Knirsch <pknirsch@redhat.com> 1.60-27
changelog:
  - Fixed compiler warning/error in netplug.
  - Updated to netplug-1.2.6 for security update and fixes.


author: Phil Knirsch <pknirsch@redhat.com> 1.60-19
changelog:
  - Fixed trailing blank bug in hostname output (#101263).
  - Remove -O2 fir alpha (#78955).
  - Updated netstat statistic output, was still broken.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Added inet6-lookup patch from John van Krieken (#84108).
  - Fixed outdated link in ifconfig manpage (#91287).


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed incorrect address display for ipx (#46434).
  - Fixed wrongly installed manpage dirs (#50664).


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - fix nstrcmp() to be correct in the case where there are many devices 
    of the same type, eg, "eth10" > "eth1"  (#61436)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.57.
  - MTU (and other) option(s) not parsed correctly (#9215).
  - allow more granularity iwth --numeric (#9129).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.50.
  - added slattach/plipconfig/ipmaddr/iptunnel commands.
  - enabled translated man pages.


author: Doug Ledford <dledford@redhat.com> - 0.4.6-3.el5
changelog:
  - Fix a mismatch between what qperf things AF_RDS is and what the kernel
    thinks it is
  - Resolves: bz845820


author: Doug Ledford <dledford@redhat.com> - 0.0.1-9
changelog:
  - Upstream has updated the tarball with updating the version.  Grab the
    0.0.1 tarball from the ofed 1.4-beta1 release.
  - Resolves: bz451482


author: Michael Hideo Smith mhideo@redhat.com 5.2-11
changelog:
  - Resolves: #232215
  - Changing from XML to HTML Single with floating Table of Contents and viewable by browser


author: Karel Klíč <kklic@redhat.com> - 21.4-22
changelog:
  - Added -fno-strict-aliasing to the compiler flags to avoid
    "dereferencing type-punned pointer will break strict-aliasing rules"
    warnings


author: Karel Klíč <kklic@redhat.com> - 21.4-21
changelog:
  - %{?dist} instead of .el5 on the "Release:" line
    Resolves: rhbz#440624
  - emacs and emacs-nox packages provide emacs(bin)
    Resolves: rhbz#466580
  - fix emacs build on x86_64 (rhbz#245180)


author: Chip Coldwell <coldwell@redhat.com> - 21.4-19
changelog:
  - change desktop category from Development to Utility
  - BuildRequires: sendmail (yes, it really does) Resolves: bz232688
  - Resolves: bz248182


author: Jens Petersen <petersen@redhat.com> - 21.4-14
changelog:
  - bring back setarch for i386 with -R option in spec file and drop
    emacs-21-personality-linux32-101818.patch since it no longer seems
    sufficient with recent kernels (Sam Peterson, #174736)
  - buildrequire giflib-devel instead of libungif-devel


author: Jens Petersen <petersen@redhat.com>
changelog:
  - avoid backup for fix-x-vs-no-x-diffs.dpatch (Ian Collier, #183503)
  - remove the old ccmode info manual (#182084)


author: Jens Petersen <petersen@redhat.com> - 21.4-13
changelog:
  - buildrequire libXaw-devel for menus and scrollbar
  - pass -R to setarch to disable address randomization during dumping
    (Sam Peterson, #174736)
  - install cc-mode.info correctly (Sam Peterson, #182084)
  - fix sort-columns not to use deprecated non-posix sort key syntax
    with sort-columns-posix-key-182282.patch (Richard Ryniker, #182282)
  - use system-name function not variable when setting frame-title-format in
    /etc/skel/.emacs for XEmacs users hitting .emacs


author: Jens Petersen <petersen@redhat.com> - 21.4-12
changelog:
  - add mule-cmd.el-X11-locale.alias-173781.patch to correct location of X11
    locale.alias file (Paul Dickson, #173781)
  - fix autoload of php-mode in php-mode-init.el (Christopher Beland, #179484)


author: Jens Petersen <petersen@redhat.com> - 21.4-11
changelog:
  - avoid building with -fstack-protector on i386 to prevent crashing
    (Jonathan Kamens, #174730)
  - require xorg-x11-fonts-ISO8859-1-75dpi instead of xorg-x11-fonts-75dpi
    for modular X (#174614)


author: Jens Petersen <petersen@redhat.com> - 21.4-9
changelog:
  - fix keyboard-coding-system on console for utf-8 (Dawid Gajownik, #173855)
  - update etags to latest cvs (Hideki Iwamoto, #173023)
    - replace etags-14.21-17.11-diff.patch with etags-update-to-cvs.patch
  - update smtpmail.el to latest cvs version for better authentication support
    with smtpmail-cvs-update.patch (Alberto Brizio, #167804)


author: Jens Petersen <petersen@redhat.com>
changelog:
  - fix name of aspell-es dictionary (#147964)
    - update emacs-21.3-lisp-textmodes-ispell-languages.patch


author: Jens Petersen <petersen@redhat.com> - 21.4-7
changelog:
  - update rpm-spec-mode.el to cvs revision 1.17 (Ville Skyttä)
    - fixes expansion of %{?dist}
  - replace emacs-21.4-setarch_for_loadup-101818.patch with backport
    emacs-21-personality-linux32-101818.patch from cvs (Jan Djärv)
    which also turns off address randomization during dumping (Masatake Yamato)
    - no longer need to pass SETARCH to make on i386 (#160814)
  - move ownership of /usr/share/emacs/ and /usr/share/emacs/21.4/
    from emacs to emacs-el and emacs-leim subpackages
  - don't build tramp html and dvi documentation
  - drop src/config.in part of bzero-and-have-stdlib.dpatch to avoid
    compiler warnings


author: Jens Petersen <petersen@redhat.com> - 21.4-6
changelog:
  - merge in changes from emacs22.spec conditionally
    - define emacs21 rpm macro switch to control major version and use it
  - update tramp to 2.0.49


