# changelog

author: Doug Ledford <dledford@redhat.com> - 2.0-2
changelog:
  - Recreate lost spec file and patches from memory
  - Add dist tag to release
  - Turn off FORTIFY_SOURCE when building


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-9
changelog:
  - Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet
  - Resolves: rhbz#1552375 CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources
  - Resolves: rhbz#1552374 CVE-2018-1305 tomcat: Late application of security constraints can lead to resource exposure for unauthorised users
  - Resolves: rhbz#1590182 CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins
  - Resolves: rhbz#1608609 CVE-2018-8034 tomcat: host name verification missing in WebSocket client
  - Resolves: rhbz#1588703 Backport of Negative maxCookieCount value causes exception for Tomcat
  - Resolves: rhbz#1472950 shutdown_wait option is not working for Tomcat
  - Resolves: rhbz#1455483 Add support for characters "<" and ">" to the possible whitelist values


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-5
changelog:
  - Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts
  - Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-3
changelog:
  - Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
  - Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
  - Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision


author: Coty Sutherland <csutherl@redhat.com> 0:7.0.76-2
changelog:
  - Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
  - Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used


author: Coty Sutherland <csutherl@redhat.com> - 0:7.0.69-9
changelog:
  - Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
  - Resolves: rhbz#1368122


author: Coty Sutherland <csutherl@redhat.com> - 0:7.0.69-4
changelog:
  - Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service


author: Coty Sutherland <csutherl@redhat.com> - 0:7.0.69-2
changelog:
  - Rebase Resolves: rhbz#1311622 Getting NoSuchElementException while handling attributes with empty string value in tomcat
  - Rebase Resolves: rhbz#1320853 Add HSTS support
  - Rebase Resolves: rhbz#1293292 CVE-2014-7810 tomcat: Tomcat/JBossWeb: security manager bypass via EL expressions
  - Rebase Resolves: rhbz#1347144 CVE-2016-0706 tomcat: security manager bypass via StatusManagerServlet
  - Rebase Resolves: rhbz#1347139 CVE-2015-5346 tomcat: Session fixation
  - Rebase Resolves: rhbz#1347136 CVE-2015-5345 tomcat: directory disclosure
  - Rebase Resolves: rhbz#1347129 CVE-2015-5174 tomcat: URL Normalization issue
  - Rebase Resolves: rhbz#1347146 CVE-2016-0763 tomcat: security manager bypass via setGlobalContext()
  - Rebase Resolves: rhbz#1347142 CVE-2016-0714 tomcat: Security Manager bypass via persistence mechanisms
  - Rebase Resolves: rhbz#1347133 CVE-2015-5351 tomcat: CSRF token leak


author: Coty Sutherland <csutherl@redhat.com> - 0:7.0.69-1
changelog:
  - Resolves: rhbz#1287928 Rebase to tomcat 7.0.69
  - Resolves: rhbz#1327326 rpm -V tomcat fails on /var/log/tomcat/catalina.out
  - Resolves: rhbz#1277197 tomcat user has non-existing default shell set
  - Resolves: rhbz#1240279 The command tomcat-digest doesn't work with RHEL 7
  - Resolves: rhbz#1229476 Tomcat startup ONLY options
  - Resolves: rhbz#1133070 Need to include full implementation of tomcat-juli.jar and tomcat-juli-adapters.jar
  - Resolves: rhbz#1201409 Fix the broken tomcat-jsvc service unit
  - Resolves: rhbz#1221896 tomcat.service loads /etc/sysconfig/tomcat without shell expansion
  - Resolves: rhbz#1208402 Mark web.xml in tomcat-admin-webapps as config file


author: David Knox <dknox@redhat.com> - 0:7.0.54-1
changelog:
  - Resolves: rhbz#1141372 - Remove systemv artifacts. Add new systemd 
  - artifacts. Rebase on 7.0.54.


author: David Knox <dknox@redhat.com> - 0:7.0.42-5
changelog:
  - Related: CVE-2013-4286
  - Related: CVE-2013-4322
  - Related: CVE-2014-0050
  - revisit patches for above.


author: David Knox <dknox@redhat.com> - 0:7.0.42-3
changelog:
  - Related: CVE-2013-4286. increment build number. missed doing
  - it. 
  - Resolves: rhbz#1038183 remove BR for ant-nodeps. it's
  - no long used.


author: David Knox <dknox@redhat.com> - 0:7.0.42-2
changelog:
  - Resolves: rhbz#1056673 Invocation of useradd with shell
  - other than sbin nologin
  - Resolves: rhbz#1056677 preun systemv scriptlet unconditionally
  - stops service
  - Resolves: rhbz#1056696 init.d tomcat does not conform to RHEL7
  - systemd rules. systemv subpackage is removed.
  - Resolves: CVE-2013-4286
  - Resolves: CVE-2013-4322
  - Resolves: CVE-2014-0050
  - Built for rhel-7 RC


author: Ivan Afonichev <ivan.afonichev@gmail.com> 0:7.0.34-1
changelog:
  - Updated to 7.0.34
  - ecj >= 4.2.1 now required
  - Resolves: rhbz 889395 concat classpath correctly; chdir to $CATALINA_HOME


author: Ivan Afonichev <ivan.afonichev@gmail.com> 0:7.0.29-1
changelog:
  - Updated to 7.0.29
  - Add pidfile as tmpfile
  - Use systemd for running as unprivileged user
  - Resolves: rhbz 847751 upgrade path was broken
  - Resolves: rhbz 850343 use new systemd-rpm macros


author: Ivan Afonichev <ivan.afonichev@gmail.com> 0:7.0.28-1
changelog:
  - Updated to 7.0.28
  - Resolves: rhbz 820119 Remove bundled apache-commons-dbcp
  - Resolves: rhbz 814900 Added tomcat-coyote POM
  - Resolves: rhbz 810775 Remove systemv stuff from %post scriptlet
  - Remove redhat-lsb R


author: Ivan Afonichev <ivan.afonichev@gmail.com> 0:7.0.25-1
changelog:
  - Updated to 7.0.25
  - Removed EntityResolver patch (changes already in upstream sources)
  - Place poms and depmaps in the same package as jars
  - Added javax.servlet.descriptor to export-package of servlet-api
  - Move several chkconfig actions and reqs to systemv subpackage
  - New maven depmaps generation method
  - Add patch to support java7. (patch sent upstream).
  - Require java >= 1:1.6.0


author: Krzysztof Daniel <kdaniel@redhat.com> 0:7.0.23-5
changelog:
  - Exported javax.servlet.* packages in version 3.0 as 2.6 to make
    servlet-api compatible with Eclipse.


author: Joseph D. Wagner <joe@josephdwagner.info> 0:7.0.23-3
changelog:
  - Added support to /usr/sbin/tomcat-sysd and /usr/sbin/tomcat for
    starting tomcat with jsvc, which allows tomcat to perform some
    privileged operations (e.g. bind to a port < 1024) and then switch
    identity to a non-privileged user. Must add USE_JSVC="true" to
    /etc/tomcat/tomcat.conf or /etc/sysconfig/tomcat.


author: Ivan Afonichev <ivan.afonichev@gmail.com> 0:7.0.22-2
changelog:
  - Move tomcat-juli.jar to lib package
  - Drop %update_maven_depmap as in tomcat6
  - Provide native systemd unit file ported from tomcat6


author: Ivan Afonichev <ivan.afonichev@gmail.com> 0:7.0.14-2
changelog:
  - Fixed http source link
  - Securify some permissions
  - Added licenses for el-api and servlet-api
  - Added dependency on jpackage-utils for the javadoc subpackage


author: Ivan Afonichev <ivan.afonichev@gmail.com> 0:7.0.12-2
changelog:
  - Package now named just tomcat instead of tomcat7
  - Removed Provides:  tomcat-log4j
  - Switched to apache-commons-* names instead of jakarta-commons-* .
  - Remove the old changelog
  - BR/R java >= 1:1.6.0 , same for java-devel
  - Removed old tomcat6 crap


author: Martin Bříza <mbriza@redhat.com> - 4.0.1-1
changelog:
  - Update to upstream 4.0.1 (#808005)
  - Corrected Source0 link to .tar.gz extension as not all releases are available as .tar.bz2
  - Resolves #724817 - gawk-4.0.0 regression in '\' escape handling in gsub()
  - Resolves #820550 - gawk: getline in BEGIN skips 2 lines


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 4.0.0-1
changelog:
  - Remove gawk-3.1.8-syntax.patch, gawk-3.1.8-double-free-wstptr.patch
  - Update to upstream 4.0.0 (#717885)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.1.8-3
changelog:
  - fix syntax issues #528623, #528625
  - add byacc to BuildRequires
  - follow updated libsigsegv option in configure script


author: Stepan Kasal <skasal@redhat.com> - 3.1.6-4
changelog:
  - remove the versioned binaries even if the version is modified by the
    snapshot patch, modify the file list to check this (#476166)
  - update the snapshot patch, dropping the upstreamed
    gawk-3.1.5-test-lc_num1.patch


author: Stepan Kasal <skasal@redhat.com> - 3.1.6-1
changelog:
  - new upstream version
  - drop Patch1: gawk-3.1.3-getpgrp_void.patch, it seems to be a workaround
    for a bug in gcc that seemed to exist at Fedora Core 1 times, see #114246
  - drop patches 2-13, they have been integrated upstream


author: Stepan Kasal <skasal@redhat.com> - 3.1.5-16
changelog:
  - Add gawk-3.1.5-quote-sticky.patch
  - Resolves: #299551
  - Add gawk-3.1.5-test-lc_num1.patch, a test for that bug.
  - BuldRequire autoconf and automake, for the test patch.
  - Add coment explaining why bison is buildrequired.
  - Remove BuildRequire: flex.


author: Karel Zak <kzak@redhat.com> 3.1.5-15
changelog:
  - fix #225777 - clean up spec file according to Fedora Merge Review
    suggestions (thanks to Dan Horak and Patrice Dumas)


author: Karel Zak <kzak@redhat.com> 3.1.5-9
changelog:
  - fix numeric conversion problem (patch by Aharon Robbins)
    http://lists.gnu.org/archive/html/bug-gnu-utils/2006-07/msg00004.html


author: Karel Zak <kzak@redhat.com> 3.1.5-5
changelog:
  - fix "gawk -v BINMODE=1" (patch by Aharon Robbins)
  - fix conversion from large number to string (patch by Aharon Robbins)


author: Karel Zak <kzak@redhat.com> 3.1.5-4
changelog:
  - fix off-by-one error in assignment of sentinel value at 
    end of FIELDWIDTHS array. (patch by Aharon Robbins)


author: Karel Zak <kzak@redhat.com> 3.1.4-2
changelog:
  - add dfacache.patch for fix LC_ALL=de_DE.UTF-8 ./gawk '/^[ \t]/ { print }',
    (by Aharon Robbins), #135210, #131498
  - add flonum.patch for "improved" handling of non-numeric constants,
    second version of patch (by Aharon Robbins)
    http://lists.gnu.org/archive/html/bug-gnu-utils/2004-10/msg00046.html
  - add nextc.patch (by Andreas Schwab)
    http://lists.gnu.org/archive/html/bug-gnu-utils/2004-09/msg00093.html
  - add uplow.patch for fix the wide char handling (by Stepan Kasal)
    http://lists.gnu.org/archive/html/bug-gnu-utils/2004-10/msg00099.html


author: Elliot Lee <sopwith@redhat.com> 3.1.1-7
changelog:
  - Add gawk-3.1.1-ngroups.patch, because NGROUPS_MAX comes from 
  sys/param.h, and awk.h changes behaviour depending on whether NGROUPS_MAX 
  is defined or not. (For ppc64)


author: Trond Eivind Glomsrod <teg@redhat.com>
changelog:
  - /usr/bin/gawk can't point at gawk - infinite symlink
  - /usr/bin/awk can't point at gawk - infinite symlink


author: Lyude Paul <cpaul@redhat.com> - 1.0.0-7
changelog:
  - Initial port from Fedora to RHEL 7.3
  - Add patch for building with gcc4
  - Call autoreconf before starting build
  Resolves: rhbz#1311004


author: Luboš Uhliarik <luhliari@redhat.com> - 2.3.9-5
changelog:
  - Resolves: #1486653 - mod_fcgid cause Segmentation fault error while doing
    large file uploads over HTTPS


author: Paul Howarth <paul@city-fan.org> 2.3.9-1
changelog:
  - Update to 2.3.9
    - SECURITY: Fix possible heap buffer overwrite (CVE-2013-4365)
    - Add experimental cmake-based build system for Windows
    - Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA
      Authenticator/Authorizor/Access directives' command line argument, as
      currently documented (PR#51194)
    - Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
      assignments) (PR#51657)
    - Conform script response parsing with mod_cgid and ensure no response body
      is sent when ap_meets_conditions() determines that request conditions are
      met
    - Improve logging in access control hook functions
    - Avoid making internal sub-requests and processing Location headers when in
      FCGI_AUTHORIZER mode, as the auth hook functions already treat Location
      headers returned by scripts as an error since redirections are not
      meaningful in this mode
    - Revert fix for PR#53693, added in 2.3.8 but undocumented
    - Fix issues with a minor optimization added in 2.3.8


author: Paul Howarth <paul@city-fan.org> 2.3.7-1
changelog:
  - Update to 2.3.7
    - Introduce FcgidWin32PreventOrphans directive on Windows to use OS Job
      Control Objects to terminate all running fcgi's when the worker process
      has been abruptly terminated (PR: 51078)
    - Periodically clean out the brigades that are pulling in the request body
      for handoff to the fcgid child (PR: 51749)
    - Resolve crash during graceful restarts (PR: 50309)
    - Solve latency/congestion of resolving effective user file access rights
      when no such info is desired, for config-related filename stats (PR: 51020)
    - Fix regression in 2.3.6 that broke process controls when using
      vhost-specific configuration
    - Account for first process in class in the spawn score
  - Drop patch for CVE-2012-1181, now included in upstream release


author: Paul Howarth <paul@city-fan.org> 2.3.6-6
changelog:
  - Fix compatibility with httpd 2.4 in F-18/RHEL-7 onwards
  - Use /run rather than /var/run from F-15/RHEL-7 onwards


author: Paul Howarth <paul@city-fan.org> 2.3.6-5
changelog:
  - Fix regression in 2.3.6 that broke process controls when using vhost-specific
    configuration (upstream issue 49902, #783742, CVE-2012-1181)


author: Paul Howarth <paul@city-fan.org> 2.3.6-2
changelog:
  - Add /etc/tmpfiles.d/mod_fcgid.conf for builds on Fedora 15 onwards to
    support running with /var/run on tmpfs (#656625)


author: Paul Howarth <paul@city-fan.org> 2.3.6-1
changelog:
  - Update to 2.3.6 (see CHANGES-FCGID for full details)
    - Fix possible stack buffer overwrite (CVE-2010-3872)
    - Change the default for FcgidMaxRequestLen from 1GB to 128K; administrators
      should change this to an appropriate value based on site requirements
    - Correct a problem that resulted in FcgidMaxProcesses being ignored in some
      situations
    - Return 500 instead of segfaulting when the application returns no output
  - Don't include SELinux policy for RHEL-5 builds since RHEL >= 5.5 includes it
  - Explicitly require /bin/sed for fixconf script


author: Paul Howarth <paul@city-fan.org> 2.3.4-2
changelog:
  - Add fixes from upstream svn for a number of issues, most notably that the
    fixconf script had an error in the regexp, which resulted in a prefix of
    "FcgidFcgid" on the updated directives


author: Paul Howarth <paul@city-fan.org> 2.3.4-1
changelog:
  - Update to 2.3.4 (configuration directives changed again)
  - Add fixconf.sed script for config file directives update


author: Paul Howarth <paul@city-fan.org> 2.3.1-2.20090925svn818270
changelog:
  - Update to svn revision 818270
  - DESTDIR and header detection patches upstreamed
  - Build SELinux policy module for EL-5; support in EL-5.3 is incomplete and
    will be fixed in EL-5.5 (#519369)
  - Drop aliases httpd_sys_content_r{a,o,w}_t -> httpd_fastcgi_content_r{a,o,w}_t
    from pre-2.5 SElinux policy module as these types aren't defined there


author: Paul Howarth <paul@city-fan.org> 2.3.1-1.20090923svn817978
changelog:
  - Update to post-2.3.1 svn snapshot
  - Upstream moved to apache.org
  - License changed to ASL 2.0
  - Use FCGID-prefixed config file options (old ones deprecated)
  - Lots of documentation changes
  - Renumber sources
  - Don't defer to mod_fastcgi if both are present
  - Drop gawk buildreq
  - Add patches fixing RPM build issues (DESTDIR support, header detection)


author: Paul Howarth <paul@city-fan.org> 2.2-12
changelog:
  - Don't use /etc/httpd/run as basis of "run" directory as its DAC permissions
    are not permissive enough in F-11 onwards; instead, revert to
    /var/run/mod_fcgid and tweak default config accordingly (#502273)


author: Paul Howarth <paul@city-fan.org> 2.2-11
changelog:
  - Follow link /etc/httpd/run and make our "run" directory a subdir of wherever
    that leads (#501123)


author: Paul Howarth <paul@city-fan.org> 2.2-10
changelog:
  - EL 5.3 now has SELinux support in the main selinux-policy package so handle
    that release as per Fedora >= 8, except that the RHEL selinux-policy package
    doesn't Obsolete/Provide mod_fcgid-selinux like the Fedora version, so do
    the obsoletion here instead


author: Paul Howarth <paul@city-fan.org> 2.2-7
changelog:
  - SELinux policy module no longer built for Fedora 8 onwards as it is
    obsoleted by the main selinux-policy package
  - Conflicts for selinux-policy packages older than the releases where mod_fcgid
    policy was incorporated have been added for Fedora 8, 9, and 10 versions, to
    ensure that SELinux support will work if installed


author: Paul Howarth <paul@city-fan.org> 2.2-6
changelog:
  - SELinux policy module rewritten to merge fastcgi and system script domains
    in preparation for merge into main selinux-policy package (#462318)
  - Try to determine supported SELinux policy types by reading /etc/selinux/config


author: Paul Howarth <paul@city-fan.org> 2.2-3
changelog:
  - Update SELinux policy to fix occasional failures on restarts
    (move shared memory file into /var/run/mod_fcgid directory)


author: Paul Howarth <paul@city-fan.org> 2.1-5
changelog:
  - Update source URL to point to downloads.sf.net rather than dl.sf.net
  - Upstream released new tarball without changing version number, though the
    only change was in arch/win32/fcgid_pm_win.c, which is not used to build the
    RPM package
  - Clarify license as GPL (unspecified/any version)
  - Unexpand tabs in spec
  - Add buildreq of gawk


author: Paul Howarth <paul@city-fan.org> 2.1-3
changelog:
  - Major update of SELinux policy, supporting accessing data on NFS/CIFS shares
    and a new boolean, httpd_fastcgi_can_sendmail, to allow connections to SMTP
    servers
  - Fix for SELinux policy on Fedora 7, which didn't work due to changes in the
    permissions macros in the underlying selinux-policy package


author: Paul Howarth <paul@city-fan.org> 2.1-1
changelog:
  - Update to 2.1
  - Update documentation and patches
  - Rename some source files to reduce chances of conflicting names
  - Include SharememPath directive in conf file to avoid unfortunate upstream
    default location


author: Paul Howarth <paul@city-fan.org> 1.10-5
changelog:
  - Split off SELinux module into separate subpackage to avoid dependency on
    the selinux-policy package for the main package


author: Paul Howarth <paul@city-fan.org> 1.10-4
changelog:
  - SELinux policy packages moved from %{_datadir}/selinux/packages/POLICYNAME
    to %{_datadir}/selinux/POLICYNAME
  - hardlink identical policy module packages together to avoid duplicate files


author: Paul Howarth <paul@city-fan.org> 1.10-3
changelog:
  - Adjust buildreqs for FC6 onwards
  - Figure out where top_dir is dynamically since the /etc/httpd/build
    symlink is gone in FC6


author: Paul Howarth <paul@city-fan.org> 1.09-10
changelog:
  - SELinux policy update:
    * allow httpd to read httpd_fastcgi_content_t without having the
    | httpd_builtin_scripting boolean set
    * allow httpd_fastcgi_script_t to read /etc/resolv.conf without
    | having the httpd_can_network_connect boolean set


author: Paul Howarth <paul@city-fan.org> 1.09-8
changelog:
  - Change default context type for socket directory from var_run_t to
    httpd_fastcgi_sock_t for better separation


author: Paul Howarth <paul@city-fan.org> 1.09-7
changelog:
  - Add SELinux policy module and README.Fedora
  - Conflict with selinux-policy versions older than what we're built on


author: Paul Howarth <paul@city-fan.org> 1.09-6
changelog:
  - Instead of conflicting with mod_fastcgi, don't add the handler for .fcg etc.
    if mod_fastcgi is present


author: Paul Howarth <paul@city-fan.org> 1.09-5
changelog:
  - Use correct handler name in fcgid.conf
  - Conflict with mod_fastcgi
  - Create directory %{_localstatedir}/run/mod_fcgid for sockets


author: Christophe Fergeau <cfergeau@redhat.com> - 0.0.8-2
changelog:
  - Bump release number (no build pushed until there are more useful changes
    in there)
  - Fixed conditional to ensure vala bindings are built for Fedora >= 15
    and for RHEL > 6


author: Daniel P. Berrange <berrange@redhat.com> - 0.0.1-2
changelog:
  - Remove gjs-devel BR
  - Add missing ldconfig post/postun scripts
  - Fixed conditional to ensure python is disabled for Fedora >= 15


author: Jaroslav Kysela <jkysela@redhat.com> - 1.0.22-1
changelog:
  - Updated to 1.0.22 final
  - Fix file descriptor leak in pcm_hw plugin
  - Fix sound distortions for S24_LE - softvol plugin


author: Jaroslav Kysela <jkysela@redhat.com> - 1.0.18-1.rc3
changelog:
  - updated to 1.0.18rc3
  - moved /etc/alsa configuration files back to /usr/share/alsa
  - removed pulse default patch (moved to /etc/asound.conf)
  - added /etc/asound.conf and /etc/alsa/alsactl.conf
  - disable /dev/aload device checking (obsolete for 2.6 kernels)


author: Lennart Poettering <lpoetter@redhat.com> 1.0.15-0.3.rc3
changelog:
  - Add hook to /etc/alsa/alsa.conf so that /etc/alsa/default-pulse.conf
    is loaded when it exists. This allows us to enable the pulse plugin by
    default depending on whether it is installed or not.


author: Matthias Saou <http://freshrpms.net/> 1.0.15-0.2.rc2
changelog:
  - Update License field.
  - Use configdir instead of sysconfdir hacks (cleaner).
  - Remove redundant optflags overriding.
  - Switch to using main "version", and merge "postver" since this is the right
    way of doing things (see NamingGuidelines#NonNumericRelease).
  - Remove static library.
  - Mark all of /etc/alsa as config, but not "noreplace".
  - Remove useless rpath on 64bit archs.


author: Lennart Poettering <lpoetter@redhat.com> 1.0.14-2
changelog:
  - fixed #251307 - fix plugindir directory specification
  - fix build with newer glibc where open() is a macro


author: Martin Stransky <stransky@redhat.com> 1.0.11-2.rc2
changelog:
  - fix for #169729 - Kernel update makes snd-atiixp-modem & slmodemd fail
  - new ainit (0.7) should fix some problems with root users


author: Martin Stransky <stransky@redhat.com> 1.0.9rc2-5
changelog:
  - fix for #130593
  - new ainit (dmix/dsnoop is default only for cards which really need it)
  - fix dsnoop
  - add fix for mixer (from https://bugs.gentoo.org/attachment.cgi?id=58918)


author: Colin Walters <walters@redhat.com> 1.0.7-2
changelog:
  - New patch alsa-lib-1.0.7-asym-config.patch, sets up asym
    in the default config file and makes it easy to make it
    the default via an environment variable.  Also increases the
    default dmix buffer variables.
  - Mark /etc/alsa/alsa.conf as a config file, and use sysconfdir
    variable


author: Bill Nottingham <notting@redhat.com> 1.0.6-6
changelog:
  - fix bad assertion that trips up gstreamer (fixes GNOME bug #159647)
  - undef gets in case it's a macro (#141423)


author: Nikola Forró <nforro@redhat.com> - 2.2.0-9
changelog:
  - Fix CVE-2017-18233
    resolves: #1574865
  - Fix CVE-2017-18234
    resolves: #1656011
  - Fix CVE-2017-18236
    resolves: #1574905
  - Fix CVE-2017-18238
    resolves: #1572270
  - Fix CVE-2018-7730
    resolves: #1572631


author: Hans de Goede <hdegoede@redhat.com> - 2:3.8.2-4
changelog:
  - Fix misbehavior when started without a camera
  - Don't crash when the (last) camera gets unplugged
  - Automatically use a newly plugged camera when going from 0 to 1 cameras
  - Misc. other bugfixes


author: Hans de Goede <hdegoede@redhat.com> - 2:3.8.2-3
changelog:
  - Add a number of bug-fixes to deal better with high res cams (#873434)
  - Fix cheese-introduction.png being in both cheese and cheese-libs (#893756)
  - Put the COPYING file in the docs for cheese-libs (#893800)
  - Fix the flash when taking a photo being dark grey instead of white (#965813)
  - Fix needing to press the effects button twice to select effects after
    selecting an effect for the first time
  - Various other bug-fixes


author: Hans de Goede <hdegoede@redhat.com> - 2:3.5.5-1
changelog:
  - New upstream release 3.5.5
  - Fix cheese crashing on tvcards which report they can capture 0x0 as
    minimum resolution (rhbz#850505)


author: Hans de Goede <hdegoede@redhat.com> - 2:3.4.2-3
changelog:
  - Reduce camerabin pipeline creation time (rhbz#797188, gnome#677731)
  - Don't add 0 byte sized files to the thumb-view (rhbz#830166, gnome#677735)
  - Fix sizing of horizontal thumbnail list (rhbz#829957)
  - Optimize encoding parameters (rhbz#572169)


author: Hans de Goede <hdegoede@redhat.com> - 2:3.5.1-2
changelog:
  - Fix missing images on buttons, also fixes the "Gtk-WARNING **: Attempting to
    add a widget with type GtkImage to a GtkButton ..." warnings (gnome#677543)
  - Fix cheese crashing when started on machines with v4l2 radio or vbi devices
    (rhbz#810429, gnome#677544)


author: Alexander Larsson <alexl@redhat.com> - 1:2.91.93-3
changelog:
  - Move gsettings schema to cheese-libs, fixes control-center crash (#691667)
  - Move typelib to cheese-libs


author: Gerd Hoffmann <kraxel@redhat.com> - 0.5.2-2
changelog:
  - Fix license: It is BSD, not GPL.
  - Cleanup specfile, drop bits not needed any more with
    recent rpm versions (F13+).


author: Roland Grunberg <rgrunber@redhat.com> 0:0.5.2-1
changelog:
  - Update to 0.5.2.
  - Remove xmldb-api due to deprecation.
  - Fix ws-jaxme-ant-scripts.patch to apply cleanly.


author: Colin Walters <walters@verbum.org> - 1.31.10-2
changelog:
  - Drop custom .gir/.typelib directories; see upstream commit
    ea4d639eab307737870479b6573d5dab9fb2915a


author: Adam Williamson <awilliam@redhat.com> - 1.29.0-2
changelog:
  - build against js, not gecko (from f15 branch, but patch not needed)
  - BR cairo-devel (also from f15)


author: Petr Machata <pmachata@redhat.com> - 0.13-11
changelog:
  - Add missing last entry in long options array
    (chrpath-0.13-getopt_long.patch)
  - Update config.sub and config.guess to support aarch64
    (chrpath-0.13-aarch64.patch)


author: Ondrej Holy <oholy@redhat.com> - 1.0.2-11
changelog:
  - Use boolean types defined stdbool.h (#1404575)
  - Prevent stucked keys on focus out and unmap events (#1415069)
  - Fix crashes when copying images (#1417536)
  - Enable TLS 1.1 connections and later (#1312967)


author: Soren Sandmann <ssp@redhat.com> - 1.0.2-3
changelog:
  - Man page fixes
    - Document that multiple connections don't work (988294)
    - Document the list of plugins (988307, 988308)


author: Mads Kiilerich <mads@kiilerich.com> - 0.7.2-2
changelog:
  - 0.7.2
  - Address many comments from cwickert:
  - - cleanup of old formatting, alignment with spectemplate-lib.spec and
      cwickert spec from #616193
  - - add alsa as build requirement
  - - remove superfluous configure options and disable static libs
  - - add missing rpm groups


author: Hans de Goede <hdegoede@redhat.com> - 7.7-10
changelog:
  - fontsproto-2.1.3
  - videoproto-2.3.2
  - xextproto-7.3.0
  - xproto-7.0.26
  - Cherry pick some unreleased fixes from upstream git


author: Peter Hutterer <peter.hutterer@redhat.com> 7.6-24
changelog:
  - bigregsproto 1.1.2
  - compositeproto 0.4.2
  - damageproto 1.2.1
  - fontsproto 2.1.2
  - inputproto 2.2
  - kbproto 1.0.6
  - recordproto 1.14.2
  - scrnsaverproto 1.2.2
  - xcmiscproto 1.2.2
  - xextproto 7.2.1


author: Aristeu Rozanski <aris@redhat.com> 0.4.1-8.el7
changelog:
  - Revert patch in 0.4.1-7.el7, replaced by a better patch
  - Fix sizeof() usage on pointer [1035742]
  - Added macro to build the package with stack protector [1092558]
  - Handle failures of snprintf() [1035741]
  - Fix range checking on signed char variables [1035746]
  - Added aarch64 as architecture [1070973]
  - Start recording by default [1117366] [1117367]


author: Jan Tulak <jtulak@redhat.com> 0.4-9
changelog:
  - Fix unhandled exception for some locales set through LC_ALL (#1679591)
  - Fix ssm resize fails with python stack trace (#1654583)
  - Fix poor luks password throwing an error (#1141871)
  - Fix unable to list thinpools with the same name (#1619476)
  - Fix ssm list delay in detecting xfs growth (#1664652)
  - Fix exported lvm volumes issue
  - Send udev change events for btrfs operations and on all fs creations
  - Fix issues with partitions on loopback devices
  - Better error reporting for some situations


author: Lukas Czerner <lczerner@redhat.com> 0.4-6
changelog:
  - Fix listing of snapshots created by yum-fs-snapshot (#1094646)
  - Provide lvm thin provisioning support (#1115131)
  - Create mount point if it does not exist (#1134983)
  - Support percentage size argumetns (#1139263)
  - Fix bug when deleting inactive lv (#1142292)
  - Fix bug when listing empty dm tables (#1113584)


author: Lukas Czerner <lczerner@redhat.com> 0.4-4
changelog:
  - Suppress backtrace when a command fails (#1054349)
  - Fix ssm to recognize units in new btrfs output properly (#1052327)
  - Use correct sysfs file to get size for a partition (#1053651)
  - Fix ssm to be able add a device with signature to btrfs file system (#1053741)
  - Resognize btrfs devices from new btrfs output properly (#1052330)


author: Lukas Czerner <lczerner@redhat.com> 0.4-2
changelog:
  - Remove btrfs resize support (#986116)
  - Unmount all btrfs subvolumes when removing a filesystem
  - Fix size argument parsing for create and snapshot command
  - Fix list output for some cases
  - Add support to create encrypted volumes with crypt backend (#1012523)
  - Add dry-run option
  - Fix removing volumes with crypt backend
  - Add raid1 and raid10 support for lvm backend (#1012518)
  - Allow to check btrfs volumes (#986105)
  - Fix error handling when trying to resize btrfs subvolume (#986111)
  - Fix ssm mount command so it detects directory properly


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.1.0-5
changelog:
  - Remove epel dependencies
  - Change tpm2-tss dependency to not be tied to 1 version
  - Fix resource leak in InitSysContext
  - Clean up HashEKPublicKey
  - Add needed null checks to tpm2_getmanufec
  - clean up resource leak in tpm2_getmanufec
  - use strdup to get server address in tpm2_getmanufec
  - change preparePcrSelections_g to void
  - return on success in print_rc_tpm_error_code
  - Update release version
  resolves: rhbz#1275029 - Add tpm2.0-tools package


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-4
changelog:
  - Dependency check failed for Requires again, here to fix this
  - Update release version and changelog


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-3
changelog:
  - Change spec file permission to 644 to avoid rpmlint complain
  - Update Requires to fix dependency check error reported in Bodhi
  - Remove tpm2-tss-devel version in BuildRequires comment
  - Update release version and changelog


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-2
changelog:
  - Remove pkg_version to avoid dupliate use of version
  - Remove redundant BuildRequires for autoconf/automake/pkgconfig
  - Add comments for BuildRequires of sapi/tcti-device/tcti-socket
  - Use ExclusiveArch instead of ExcludeArch
  - Requires tpm2-tss version updated to 1.0-2
  - Updated release version and changelog


author: Carlo Wood <carlo@gnu.org>
changelog:
  - There should not be a reason anymore to include README.alias in the rpm docs.
  - Don't install as root.root in RPM_BUILD_ROOT, in order to allow to build
    rpm as non-root.
  - Bug fix
  - Added /etc/profile.d for automatic alias inclusion.


author: Carlo Wood <carlo@gnu.org>
changelog:
  - Typo in appended changelog.
  - Appended the old change log of `which-2.0.spec' to (this) changelog,
    which is generated from the CVS log of `which-2.0.spec.in'.
  - Generate which-2.spec from which-2.spec.in with automatic VERSION
    and CHANGELOG substitution.


author: Carlo Wood <carlo@gnu.org>
changelog:
  - Moved assignment of CFLAGS to the configure line, using RPM_OPT_FLAGS now.
  - Corrected Source: line to point to ftp.gnu.org.


author: Miroslav Lichvar <mlichvar@redhat.com> 283-1
changelog:
  - update to 283
  - install icon to hicolor theme and use it in desktop file (#804279)
  - use new configure options to set some resource defaults (#819588)
  - fix URL (#856957)
  - remove obsolete macros


author: Miroslav Lichvar <mlichvar@redhat.com> 242-1
changelog:
  - update to 242
  - use upstream default value for modifyFunctionKeys resource
  - remove png suffix from icon name in desktop file


author: Miroslav Lichvar <mlichvar@redhat.com> 238-1
changelog:
  - update to 238 (#479000, CVE-2008-2383)
  - set default values of allowWindowOps and allowFontOps resources to false


author: Miroslav Lichvar <mlichvar@redhat.com> 223-2
changelog:
  - make xterm binary sgid utempter (#222847)
  - fix font size changes with -fa option (#222340)
  - fix redrawing of internal border (#223027)
  - enable metaSendsEscape resource and set modifyFunctionKeys to 0 by default


author: Mike A. Harris <mharris@redhat.com> 215-2.fc6
changelog:
  - Replace BuildRequires utempter with libutempter-devel
  - Change BuildRoot tag to comply with Fedora packaging guidelines
  - Use pkg-config to autodetect the location of the system app-defaults dir
  - Add BuildRequires: pkgconfig


author: Jason Vas Dias <jvdias@redhat.com> - 213-1
changelog:
  - Upgrade to upstream version 213 (fixes bug 192627)
  - fix bug 189161 : make -r/-rv do reverseVideo with or without
    xterm*{fore,back}ground set


author: Jason Vas Dias <jvdias@redhat.com> - 209-2
changelog:
  - fix bug 182382: check for (VWindow(screen)!=0) in set_cursor_gcs
  - further fix for bug 178302: allow *vt100*cursorColor to be same as fg


author: Jason Vas Dias<jvdias@redhat.com> - 208-1
changelog:
  - Upgrade to upstream version 208
  - Allow root user to grab the console, even if /dev/console 
    not owned by root
  - restore Red Hat '*VT100*scrollBar:1' default Xresource


author: Jason Vas Dias<jvdias@redhat.com> - 207-8
changelog:
  - Fix bug 175684: compile with --enable-256-color
  - Fix bug 155538 addenda - restore '*VT100*backarrowKey:0'


author: Jason Vas Dias<jvdias@redhat.com> - 207-5
changelog:
  - fix bug 173703: remove reference to /usr/X11R6/bin/luit :
    PROJECTROOT should be /usr, not /usr/X11R6


author: Mike A. Harris <mharris@redhat.com> 200-10
changelog:
  - Updated xterm-resources-redhat.patch to add "xterm*ttyModes: erase ^?"
    resource to fix bug (#155538,160354,163812,162549)


author: Mike A. Harris <mharris@redhat.com> 200-9
changelog:
  - Updated xterm-resources-redhat.patch to remove utf8 resource which was
    added in the 200-7 build, as it was incorrectly set to 'true' instead
    of '1', and bug #138681 turned out to be a gdm bug instead of an xterm
    bug.  This fixes bug (#163568).


author: Mike A. Harris <mharris@redhat.com> 200-7
changelog:
  - Updated xterm-resources-redhat.patch to enable xterm utf8 resource by
    default, as our default OS environment is UTF-8, for bug (#138681)


author: Mike A. Harris <mharris@redhat.com> 200-6
changelog:
  - Added option to spec file to allow easy rebuilding with 256 color option
    for those who prefer this non-default behaviour (#103402)


author: Mike A. Harris <mharris@redhat.com> 200-4
changelog:
  - Added libtermcap-devel and utempter to BuildRequires
  - Changed BuildRequires from XFree86-devel to xorg-x11-devel


author: Mike A. Harris <mharris@redhat.com> 200-1
changelog:
  - Updated main tarball to xterm-200 for FC4 devel
  - Disabled xterm-179-ppc-fix-bug-101472.patch for now, to see if the problem
    occurs on ppc still or not.


author: Mike A. Harris <mharris@redhat.com> 191-1
changelog:
  - Updated main tarball to xterm-191 for FC3 devel
  - Disabled xterm-resources-redhat.patch to see what if anything breaks, as
    it no longer applies cleanly.  Hopefully we can just ship stock xterm
    resources now, although I realize that is more likely to be a pie in the
    sky fantasy once the bug reports trickle in from this change.  ;o)


author: Mike A. Harris <mharris@redhat.com> 179-3
changelog:
  - Added symlink /usr/X11R6/bin/xterm pointing to _bindir/xterm so that apps
    and scripts which invoke xterm explicitly as /usr/X11R6/bin/xterm, will
    continue to work correctly without surprises (#101994)


author: Mike A. Harris <mharris@redhat.com> 179-1
changelog:
  - Updated to upstream xterm 179
  - [SECURITY] Added xterm-can-2003-0063.patch from XFree86 4.3.0-12 package
  - Added Red Hat xterm-resources-redhat.patch from XFree86 4.3.0-12 package
  - Added "chmod -R u+w *" after source is decompressed or else patches can not
    be applied due to upstream source being read only files
  - Built xterm 179-1 in rawhide


author: Mike A. Harris <mharris@redhat.com> 177-2
changelog:
  - Build fix for lib64: _x11datadir == /usr/X11R6/lib
  - Another lib64 build fix:  xterm uses /usr/%{_lib}/X11/app-defaults when it
    should be using an arch-neutral dir {_x11datadir}/X11/app-defaults instead


author: Mike A. Harris <mharris@redhat.com> 177-1
changelog:
  - Call configure with "--enable-luit --enable-warnings --enable-wide-chars
    --with-utempter"
  - Initial build.


author: Jitka Plesnikova <jplesnik@redhat.com> - 0.04-18
changelog:
  - Update dependencies
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Remove build root cleaning, BuildRoot definition and %defattr


author: Václav Pavlín <vpavlin@redhat.com> - 0.9.33
changelog:
  - Update to latest uptsream release 0.9.33 due to
    security issues.
    Resolves: rhbz#1039393, rhbz#1039387


author: Tim Niemueller <tim@niemueller.de> - 0.9.2-3
changelog:
  - Add missing BR gnutls-devel and libgcrypt-devel
  - Added patch to fix test apps (NSS instead of GnuTLS/OpenSSL curl,
    implicit DSO linking)
  - Disable test cases for now due to false errors, reported upstream


author: Erik van Pienbroek <info@nntpgrab.nl> - 0.4.0a-1
changelog:
  - Update to version 0.4.0a
  - Drop upstreamed patch
  - Added a new patch to fix a 64bit issue
  - The -devel package now contains a pkgconfig file
  - The configure script is now run with '--enable-messages --enable-https'
  - Made the -doc subpackage noarch (F11+)


author: Erik van Pienbroek <info@nntpgrab.nl> - 0.4.0-1
changelog:
  - Update to version 0.4.0
  - This version introduces a API bump (which is required for
    supporting large files on 32bit environments)
  - The license issues we had with version 0.3.1 of this package (as
    discussed in #457924) are resolved in this version. The license
    of this package is now changed to LGPLv2+
  - Added a patch to fix two testcases on 64bit environments (upstream bug #1454)


author: Erik van Pienbroek <info@nntpgrab.nl> - 0.3.1-3
changelog:
  - Changed license to GPLv3+ and added some comments
    regarding the license issues with this package


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.5-9
changelog:
  - Install LICENSE file with javadoc package
  - Add maven POM file
  - Update to current packaging guidelines
  - Convert versioned JAR to unversioned


author: Vivek Lakshmanan <vivekl at redhat.com> 0:1.4-3jpp.1.fc7
changelog:
  - Resync with JPP
  - Use the upstream tar ball as JPP does since they clean it off jars anyway
  - Use JPackage exception compliant naming scheme
  - Remove section definition
  - Install unversioned symlink
  - Add missing ghost for unversioned link
  - Add requires on java


author: Henri Gomez <hgomez@slib.fr> 1.2-9jpp
changelog:
  - use sed instead of bash 2.x extension in link area to make spec compatible
    with distro using bash 1.1x
  - use official tarball


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.2-4mdk
changelog:
  - vendor tag
  - packager tag
  - s/Copyright/License/
  - truncated description to 72 columns in spec
  - spec cleanup
  - used versioned jar
  - used new source packaging policy


author: Guillaume Rousse <g.rousse@linux-mandrake.com> 1.2-2mdk
changelog:
  - merged with Henri Gomez <hgomez@slib.fr> specs:
  - changed name to regexp
  -  changed javadir to /usr/share/java
  -  dropped jdk & jre requirement
  -  added Jikes support
  - changed jar name to regexp.jar
  - corrected doc


author: Paul Howarth <paul@city-fan.org> 2.110-18
changelog:
  - don't build-require modules that this package provides (problem stupidly
    introduced in previous release)
  - don't need to remove empty directories from buildroot
  - drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> 2.110-17
changelog:
  - spec clean-up:
    - nobody else likes macros for commands
    - use DESTDIR rather than PERL_INSTALL_ROOT
    - add buildreqs for core perl modules, which may be dual-lived


author: Paul Howarth <paul@city-fan.org> 2.110-3
changelog:
  - use search.cpan.org download URL
  - use full paths for all commands used in build
  - assume rpm knows about %check and %{perl_vendorlib}
  - cosmetic spec file changes


author: Paul Howarth <paul@city-fan.org> - 0.06-3
changelog:
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from buildroot
  - Add commentary regarding conditionalized buildreqs


author: Paul Howarth <paul@city-fan.org> - 0.05-1
changelog:
  - Update to 0.05
    - Make Test::Taint an optional dependency; it requires XS, and requiring a
      compiler for Module::Implementation defeats its purpose (CPAN RT#74817)
  - BR: perl(Test::Requires)
  - Update patch for building with old Test::More versions


author: Paul Howarth <paul@city-fan.org> - 0.04-1
changelog:
  - Update to 0.04
    - This module no longer installs an _implementation() subroutine in callers;
      instead, you can call Module::Implementation::implementation_for($package)
      to get the implementation used for a given package
  - Update patch for building with old Test::More versions


author: Paul Howarth <paul@city-fan.org> - 0.03-3
changelog:
  - Incorporate feedback from package review (#788258)
    - Correct License tag, which should be Artistic 2.0
    - BR: perl(lib) for test suite
    - Explicitly require perl(Carp), not automatically detected


author: Bob Relyea <rrelyea@redhat.com> - 3.44.0-7
changelog:
  - Increase timeout on ssl_gtest so that slow platforms can complete when
     running on a busy system.


author: Bob Relyea <rrelyea@redhat.com> - 3.44.0-6
changelog:
  - back out out-of-bounds patch (patch for nss-softokn).
  - Fix segfault on empty or malformed ecdh keys (#1777712)


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-3
changelog:
  - Disable TLS 1.3 under FIPS mode
  - Disable RSASSA-PKCS1-v1_5 in TLS 1.3
  - Fix post-handshake auth transcript calculation if
    SSL_ENABLE_SESSION_TICKETS is set


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-2
changelog:
  - Skip sysinit gtests properly
  - Fix shell syntax error in tests/ssl/ssl.sh
  - Regenerate manual pages


author: Daiki Ueno <dueno@redhat.com> - 3.44.0-1
changelog:
  - Rebase to NSS 3.44
  - Restore fix-min-library-version-in-SSLVersionRange.patch to keep
    SSL3 supported in the code level while it is disabled by policy
  - Skip TLS 1.3 tests under FIPS mode


author: Daiki Ueno <dueno@redhat.com> - 3.43.0-7
changelog:
  - Don't override date in man-pages
  - Revert the change to use XDG basedirs (mozilla#818686)
  - Enable SSL2 compatible ClientHello by default
  - Disable SSL3 and RC4 by default


author: Bob Relyea <rrelyea@redhat.com> - 3.43.0-2
changelog:
  - Expand IPSEC usage to include ssl and email certs. Remove special
    processing of the usage based on the critical flag


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-7
changelog:
  - Backport upstream fix for CVE-2018-12384
  - Remove nss-lockcert-api-change.patch, which turned out to be a
    mistake (the symbol was not exported from libnss)


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-3
changelog:
  - Decrease the iteration count of PKCS#12 for compatibility with Windows
  - Fix deadlock when a token is re-inserted while a client process is running


author: Daiki Ueno <dueno@redhat.com> - 3.33.0-1
changelog:
  - Rebase to NSS 3.33
  - Disable TLS 1.3, temporarily disable failing gtests (Skip13Variants)
  - Temporarily disable race.patch and nss-3.16-token-init-race.patch,
    which causes a deadlock in newly added test cases
  - Remove upstreamed patches: moz-1320932.patch,
    nss-tstclnt-optspec.patch,
    nss-1334976-1336487-1345083-ca-2.14.patch, nss-alert-handler.patch,
    nss-tools-sha256-default.patch, nss-is-token-present-race.patch,
    nss-pk12util.patch, nss-ssl3gthr.patch, and nss-transcript.patch


author: Daiki Ueno <dueno@redhat.com> - 3.28.4-11
changelog:
  - Backport patch to simplify transcript calculation for CertificateVerify
  - Enable TLS 1.3 and RSA-PSS
  - Disable some upstream tests failing due to downstream ciphersuites changes


author: Daiki Ueno <dueno@redhat.com> - 3.28.4-3
changelog:
  - Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
    https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-5
changelog:
  - Switch default hash algorithm used by tools from SHA-1 to SHA-256
  - Avoid race condition in nssSlot_IsTokenPresent()
  - Enable SHA-2 and AES in pk12util
  - Disable RSA-PSS for now


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-4
changelog:
  - Utilize CKA_NSS_MOZILLA_CA_POLICY attribute, patch by Kai Engert
  - Backport changes adding SSL alert callbacks from upstream
  - Add nss-check-policy-file.patch from Fedora
  - Install policy config in /etc/pki/nss-legacy/nss-rhel7.config


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-3
changelog:
  - Make sure 32bit nss-pem always be installed with 32bit nss in
    multlib environment, patch by Kamil Dudka
  - Enable new algorithms supported by the new nss-softokn


author: Daiki Ueno <dueno@redhat.com> - 3.28.2-3
changelog:
  - Remove %nss_cycles setting, which was also mistakenly added
  - Re-enable BUILD_OPT, mistakenly disabled in the previous build
  - Prevent ABI incompatibilty of SECKEYECPublicKey
  - Disable TLS_ECDHE_{RSA,ECDSA}_WITH_AES_128_CBC_SHA256 by default
  - Enable 4 AES_256_GCM_SHA384 ciphersuites, enabled by the downstream
    patch in the previous release
  - Fix crash with tstclnt -W
  - Always enable gtests for supported features
  - Add patch to fix bash syntax error in tests/ssl.sh
  - Build with support for SSLKEYLOGFILE
  - Disable the use of RSA-PSS with SSL/TLS


author: Daiki Ueno <dueno@redhat.com> - 3.28.2-1.0
changelog:
  - Rebase to NSS 3.28.2
  - Remove NSS_ENABLE_ECC and NSS_ECC_MORE_THAN_SUITE_B setting, which
    is no-op now
  - Enable gtests when requested
  - Remove nss-646045.patch and fix-nss-test-filtering.patch, which are
    not necessary
  - Remove sslauth-no-v2.patch and
    nss-sslstress-txt-ssl3-lower-value-in-range.patch, as SSLv2 is
    already disabled in upstream
  - Remove ssl-server-min-key-sizes.patch, as we decided to support DH
    key size greater than 1023 bits
  - Remove local patches for SHA384 cipher suites (now supported in
    upstream): dhe-sha384-dss-support.patch,
    client_auth_for_sha384_prf_support.patch,
    nss-fix-client-auth-init-hashes.patch, nss-map-oid-to-hashalg.patch,
    nss-enable-384-cipher-tests.patch, nss-fix-signature-and-hash.patch,
    fix-allowed-sig-alg.patch, tests-extra.patch
  - Remove upstreamed patches: rh1238290.patch,
    fix-reuse-of-session-cache-entry.patch, flexible-certverify.patch,
    call-restartmodules-in-nssinit.patch


author: Kai Engert <kaie@redhat.com> - 3.21.0-16
changelog:
  - enable ssl_gtests (without extended master secret tests), Bug 1298692
  - call SECMOD_RestartModules in nss_Init, Bug 1317691


author: Kai Engert <kaie@redhat.com> - 3.21.0-14
changelog:
  - Support TLS 1.2 certificate_verify hashes other than PRF,
    backported fix from NSS 3.25 (upstream bug 1179338).


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-13
changelog:
  - Fix reuse of session cache entry
  - Resolves: Bug 1241172 - Certificate verification fails with multiple https urls


author: Kai Engert <kaie@redhat.com> - 3.21.0-5
changelog:
  - Merge fixes from the rhel-7.2 branch
  - Fix the SigAlgs sent in certificate_request
  - Ensure all ssl.sh tests are executed
  - Update sslauth test patch to run additional tests


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-19
changelog:
  - Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
  - Fix a mockbuild reported bad %if condition when using the __isa_bits macro instead of list of 64-bit architectures
  - Change the test to %if 0%{__isa_bits} == 64 as required for building the srpm which is noarch
  - Resolves: Bug 1289884


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-17
changelog:
  - Change the required_softokn_build_version back to -13
  - Ensure we use nss-softokn-3.16.2.3-13.el7_1


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-16
changelog:
  - Fix check for public key size of DSA certificates
  - Use size of prime P not the size of dsa.publicValue


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-14
changelog:
  - Update the required_softokn_build_version to -14
  - Add references to bugs filed upstream for new patches
  - Merge ocsp stapling and sslauth sni tests patches into one


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-13
changelog:
  - Reorder the cipher suites and enable two more by default
  - Fix some of the ssauth sni and ocsp stapling tests


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-12
changelog:
  - Support TLS > 1.0 by support while still allowing to connect to SSL3 only servers
  - Enable ECDSA cipher suites by default, a subset of the ones requested


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-9
changelog:
  - Fix checks to skip ssl2/export cipher suites tests to not skip needed tests
  - Fix libssl ssl2/export disabling patch to handle NULL cipher cases
  - Enable additional cipher suites by default


author: Kai Engert <kaie@redhat.com> - 3.19.1-5
changelog:
  - Incremental patches to fix SSL/TLS test suite execution,
    fix the earlier SHA384 patch, and inform clients to use SHA384 with
    certificate_verify if required by NSS.


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-4
changelog:
  - Add support for sha384 tls cipher suites
  - Add support for server-side hde key exchange
  - Add support for DSS+SHA256 ciphersuites


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-4
changelog:
  - Update and reeneable nss-646045.patch on account of the rebase
  - Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-3
changelog:
  - Fix shell syntax error on nss/tests/all.sh
  - Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-2
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1200898 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-5
changelog:
  - Reverse the sense of a test in patch to fix pk12util segfault
  - Resolves: Bug 1174527 - Segfault in pk12util when using -l option with certain .p12 files


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-4
changelog:
  - Fix race condition
  - Resolves: Bug 1094468 - 389-ds-base server reported crash in stan_GetCERTCertificate
  - under the replication replay failure condition


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Restore patch for certutil man page
  - supply missing options descriptions
  - Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-10
changelog:
  - Resolves: Bug 1158161 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Support TLS_FALLBACK_SCSV in tstclnt and ssltap


author: Elio Maldonado <pbrobinson@redhat.com> 3.16.2-3
changelog:
  - Generic 32/64 bit platform detection (fix ppc64le build)
  - Resolves: Bug 1125619 - nss fails to build on arch: ppc64le (missing dependencies)
  - Fix contributed by Peter Robinson <pbrobinson@redhat.com>


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-2
changelog:
  - Fix libssl and test patches that disable ssl2 support
  - Resolves: Bug 1123435
  - Replace expired PayPal test certificate with current one


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2-1
changelog:
  - Rebase to nss-3.16.2
  - Resolves: Bug 1103252 - Rebase RHEL 7.1 to at least NSS 3.16.1 (FF 31)
  - Fix test failure detection in the %check section
  - Move removal of unwanted source directories to the end of the %prep section
  - Update various patches on account of the rebase
  - Remove unused patches rendered obsolete by the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-6
changelog:
  - Disallow disabling the internal module
  - Resolves: Bug 1056036 - nss segfaults with opencryptoki module


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-5
changelog:
  - Pick up a fix from rhel-6 and fix an rpm conflict
  - Don't hold issuer cert handles in crl cache
  - Resolves: Bug 1034409 - deadlock in trust domain and object lock
  - Move nss shared db files to the main package
  - Resolves: Bug 1050163 - Same files in two packages create rpm conflict


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-4
changelog:
  - Update pem sources to latest from nss-pem upstream
  - Pick up pem module fixes verified on RHEL and applied upstream
  - Remove no loger needed pem patches on acccount on this update
  - Add comments documenting the iquote.patch 
  - Resolves: Bug 1054457 - CVE-2013-1740


author: Elio Maldonado <emaldona@redhat.com> - 3.15.4-3
changelog:
  - Remove spurious man5 wildcard entry as all manpages are listed by name
  - Resolves: Bug 1050163 - Same files in two packages create rpm conflict


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-9
changelog:
  - Rebase to nss-3.15.4
  - Resolves: Bug 1054457 - CVE-2013-1740 nss: false start PR_Recv information disclosure security issue
  - Remove no longer needed patches for manpages that were applied upstream
  - Remove no longer needed patch to disable ocsp stapling tests
  - Update iquote.patch on account of upstream changes
  - Update and rename patch to pem/rsawrapr.c on account of upstream changes
  - Use the pristine upstream sources for nss without repackaging
  - Avoid unneeded manual step which may introduce errors


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-8
changelog:
  - Fix the spec file to apply the nss ecc list patch for bug 752980
  - Resolves: Bug 752980 - Support ECDSA algorithm in the nss package via puggable ecc


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-7
changelog:
  - Move several nss-sysinit manpages tar archives to the %files
  - Resolves: Bug 1050163 - Same files in two packages create rpm conflict


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-6
changelog:
  - Fix a coverity scan compile time warning for the pem module
  - Resolves: Bug 1002271 - NSS pem module should not require unique base file names


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Improve pluggable ECC support for ECDSA
  - Resolves: Bug 752980 - [7.0 FEAT] Support ECDSA algorithm in the nss package


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1040284 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117) [rhel-7.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-10
changelog:
  - Fix path to script and remove -- from some options in nss-sysinit man page
  - Resolves: rhbz#982723 - man page of nss-sysinit worong path and other flaws


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-9
changelog:
  - Fix certutil man page options names to be consistent with help
  - Resolves: rhbz#948495 - man page scan results for nss
  - Remove incorrect count argument in status description in nss-sysinit man page
  - Resolves: rhbz#982723 - man page of nss-sysinit incorrect option descriptions


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-8
changelog:
  - Fix patch for disabling ssl2 in ssl to correctly set error code
  - Fix syntax error reported in the build.log even tough it succeeds
  - Add patch top ignore setpolicy result 
  - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites
  - Resolves: rhbz#1026677 - Attempt to run ipa-client-install fails


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-7
changelog:
  - Fix bash syntax error in patch for disabling ssl2 tests
  - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-6
changelog:
  - Fix errors in ssl disabling patches for both library and tests
  - Add s390x to the multilib_arches definition used for alt_ckbi
  - Resolves: rhbz#1001841 - Disable SSL2 and the export cipher suites


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-4
changelog:
  - Enable fips when system is in fips mode
  - Resolves: rhbz#852023 - FIPS mode detection does not work


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-2
changelog:
  - Add description of the certutil's --email option to it's manpage
  - Resolves: rhbz#Bug 948495 - Man page scan results for nss


author: Elio Maldonado <emaldona@redhat.com> - 3.15.2-1
changelog:
  - Rebase to nss-3.15.2
  - Resolves: rhbz#1012656 - pick up NSS 3.15.2 to fix CVE-2013-1739 and disable MD5 in OCSP/CRL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-4
changelog:
  - Install symlink to nss-sysinit.sh without the .sh suffix
  - Resolves: rhbz#982723 - nss-sysinit man page has wrong path for the script


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-2
changelog:
  - Update to NSS_3_15_1_RTM
  - Apply various fixes to the man pages and add new ones
  - Enable the iquote.patch to access newly introduced types
  - Add man page for pkcs11.txt configuration file and cert and key databases
  - Add missing option descriptions for {cert|cms|crl}util
  - Resolves: rhbz#948495 - Man page scan results for nss
  - Resolves: rhbz#982723 - Fix path to script in man page for nss-sysinit


author: Elio Maldonado <emaldona@redhat.com> - 3.15-5
changelog:
  - Install man pages for nss-tools and the nss-config and setup-nsssysinit scripts
  - Resolves: rhbz#606020 - nss security tools lack man pages


author: Kai Engert <kaie@redhat.com> - 3.14.3-9
changelog:
  - Configure libnssckbi.so to use the alternatives system
    in order to prepare for a drop in replacement.


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - sync up pem rsawrapr.c with softoken upstream changes for nss-3.14.3
  - Resolves: rhbz#908257 - CVE-2013-1620 nss: TLS CBC padding timing attack
  - Resolves: rhbz#896651 - PEM module trashes private keys if login fails
  - Resolves: rhbz#909775 - specfile support for AArch64
  - Resolves: rhbz#910584 - certutil -a does not produce ASCII output


author: Elio Maldonado <emaldona@redhat.com> - 3.14-12
changelog:
  - Bug 879978 - Install the nssck.api header template where mod_revocator can access it
  - Install nssck.api in /usr/includes/nss3/templates


author: Elio Maldonado <emaldona@redhat.com> - 3.14-11
changelog:
  - Bug 879978 - Install the nssck.api header template in a place where mod_revocator can access it
  - Install nssck.api in /usr/includes/nss3


author: Elio Maldonado <emaldona@redhat.com> - 3.14-9
changelog:
  - Disable bypass code at build time and return failure on attempts to enable at runtime
  - Bug 806588 - Disable SSL PKCS #11 bypass at build time


author: Elio Maldonado <emaldona@redhat.com> - 3.14-8
changelog:
  - Fix pk11wrap locking which fixes 'fedpkg new-sources' and 'fedpkg update' hangs
  - Bug 872124 - nss-3.14 breaks fedpkg new-sources
  - Fix should be considered preliminary since the patch may change upon upstream approval


author: Elio Maldonado <emaldona@redhat.com> - 3.14-7
changelog:
  - Add a dummy source file for testing /preventing fedpkg breakage
  - Helps test the fedpkg new-sources and upload commands for breakage by nss updates
  - Related to Bug 872124 - nss 3.14 breaks fedpkg new-sources


author: Elio Maldonado <emaldona@redhat.com> - 3.14-6
changelog:
  - Fix a previous unwanted merge from f18
  - Update the SS_SSL_CBC_RANDOM_IV patch to match new sources while
  - Keeping the patch disabled while we are still in rawhide and
  - State in comment that patch is needed for both stable and beta branches
  - Update .gitignore to download only the new sources


author: Elio Maldonado <emaldona@redhat.com> - 3.14-5
changelog:
  - Fix the spec file so sechash.h gets installed
  - Resolves: rhbz#871882 - missing header: sechash.h in nss 3.14


author: Elio Maldonado <emaldona@redhat.com> - 3.14-2
changelog:
  - Add secmodt.h to the headers installed by nss-devel
  - nss-devel must install secmodt.h which moved from softoken to pk11wrap with nss-3.14


author: Elio Maldonado <emaldona@redhat.com> - 3.14-0.1.rc.1
changelog:
  - Update to NSS_3_14_RC1
  - update nss-589636.patch to apply to httpdserv
  - turn off ocsp tests for now
  - remove no longer needed patches
  - remove headers shipped by nss-util


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-8
changelog:
  - Rebase pem sources to fedora-hosted upstream to pick up two fixes from rhel-6.3
  - Resolves: rhbz#847460 - Fix invalid read and free on invalid cert load
  - Resolves: rhbz#847462 - PEM module may attempt to free uninitialized pointer 
  - Remove unneeded fix gcc 4.7 c++ issue in secmodt.h that actually undoes the upstream fix


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-4
changelog:
  - Resolves: Bug 830410 - Missing Requires %{?_isa}
  - Use Requires: %{name}%{?_isa} = %{version}-%{release} on tools
  - Drop zlib requires which rpmlint reports as error E: explicit-lib-dependency zlib
  - Enable sha224 portion of powerup selftest when running test suites
  - Require nspr 4.9.1


author: Elio Maldonado <emaldona@redhat.com> - 3.13.4-2
changelog:
  - Resolves: Bug 805723 - Library needs partial RELRO support added
  - Patch coreconf/Linux.mk as done on RHEL 6.2


author: Elio Maldonado <emaldona@redhat.com> - 3.13.4-1
changelog:
  - Update to NSS_3_13_4_RTM
  - Update the nss-pem source archive to the latest version
  - Remove no longer needed patches
  - Resolves: Bug 806043 - use pem files interchangeably in a single process
  - Resolves: Bug 806051 - PEM various flaws detected by Coverity
  - Resolves: Bug 806058 - PEM pem_CreateObject leaks memory given a non-existing file name


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Pick up fixes from RHEL
  - Resolves: rhbz#800674 - Unable to contact LDAP Server during winsync
  - Resolves: rhbz#800682 - Qpid AMQP daemon fails to load after nss update
  - Resolves: rhbz#800676 - NSS workaround for freebl bug that causes openswan to drop connections


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-10
changelog:
  - Resolves: Bug 770682 - nss update breaks pidgin-sipe connectivity
  - NSS_SSL_CBC_RANDOM_IV set to 0 by default and changed to 1 on user request


author: elio maldonado <emaldona@redhat.com> - 3.13.1-9
changelog:
  - Revert to using current nss_softokn_version
  - Patch to deal with lack of sha224 is no longer needed


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-7
changelog:
  - Resolves: Bug 750376 - nss 3.13 breaks sssd TLS
  - Fix how pem is built so that nss-3.13.x works with nss-softokn-3.12.y
  - Only patch blapitest for the lack of sha224 on system freebl
  - Completed the patch to make pem link against system freebl


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-6
changelog:
  - Removed unwanted /usr/include/nss3 in front of the normal cflags include path
  - Removed unnecessary patch dealing with CERTDB_TERMINAL_RECORD, it's visible


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-5
changelog:
  - Statically link the pem module against system freebl found in buildroot
  - Disabling sha224-related powerup selftest until we update softokn
  - Disable sha224 and pss tests which nss-softokn 3.12.x doesn't support


author: Elio Maldonado Batiz <emaldona@redhat.com> - 3.13.1-4
changelog:
  - Rebuild with nss-softokn from 3.12 in the buildroot
  - Allows the pem module to statically link against 3.12.x freebl
  - Required for using nss-3.13.x with nss-softokn-3.12.y for a merge inrto rhel git repo
  - Build will be temprarily placed on buildroot override but not pushed in bodhi


author: Elio Maldonado <emaldona@redhat.com> - 3.12.11-3
changelog:
  - Fix attempt to free initilized pointer (#717338)
  - Fix leak on pem_CreateObject when given non-existing file name (#734760)
  - Fix pem_Initialize to return CKR_CANT_LOCK on multi-treaded calls (#736410)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.10-4
changelog:
  - Enable pluggable ecc support (#712556)
  - Disable the nssdb write-access-on-read-only-dir tests when user is root (#646045)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-10
changelog:
  - Fix cms headers to not use c++ reserved words (#676036)
  - Reenabling Bug 499444 patches
  - Fix to swap internal key slot on fips mode switches


author: Christopher Aillon <caillon@redhat.com> - 3.12.9-6
changelog:
  - Revert patches for 499444 as they use a C++ reserved word and
    cause compilation of Firefox to fail


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-5
changelog:
  - Fix the earlier infinite recursion patch (#499444)
  - Remove a header that now nss-softokn-freebl-devel ships


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8.99.2-1
changelog:
  - Update to NSS_3_12_9_BETA2
  - Fix libpnsspem crash when cacert dir contains other directories (#642433)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-3
changelog:
  - Replace posttrans sysinit scriptlet with a triggerpostun one (#636787)
  - Fix and cleanup the setup-nsssysinit.sh script (#636792, #636801)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Prevent disabling of nss-sysinit on package upgrade (#636787)
  - Create pkcs11.txt with correct permissions regardless of umask (#636792) 
  - Setup-nsssysinit.sh reports whether nss-sysinit is turned on or off (#636801)
  - Added provides pkcs11-devel-static to comply with packaging guidelines (#609612)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.7-2
changelog:
  - Define NSS_USE_SYSTEM_SQLITE and remove unneeded patch
  - Add comments regarding an unversioned provides which triggers rpmlint warning
  - Build requires nss-softokn-devel >= 3.12.7


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-5
changelog:
  - Update pem source tar to pick up the following bug fixes:
  - PEM - Allow collect objects to search through all objects
  - PEM - Make CopyObject return a new shallow copy
  - PEM - Fix memory leak in pem_mdCryptoOperationRSAPriv


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-3
changelog:
  - Add sed to sysinit requires as setup-nsssysinit.sh requires it (#576071)
  - Update PayPalEE test cert with unexpired one (#580207)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-1.1
changelog:
  - Using SSL_RENEGOTIATE_TRANSITIONAL as default while on transition period
  - Disabling ssl tests suites until bug 539183 is resolved


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.6
changelog:
  - Fix nsssysinit to enable apps to use system cert store, patch contributed by David Woodhouse (#546221)
  - Fix spec so sysinit requires coreutils for post install scriplet (#547067)
  - Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387)


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.5
changelog:
  - Fix nsssysinit to set the default flags on the crypto module (#545779)
  - Remove redundant header from the pem module


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1
changelog:
  - Update to 3.12.5
  - Patch to allow ssl/tls clients to interoperate with servers that require renogiation


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-13.1
changelog:
  - Require nss-softoken of same architecture as nss (#527867)
  - Merge setup-nsssysinit.sh improvements from F-12 (#527051)


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-13
changelog:
  - User no longer prompted for a password when listing keys an empty system db (#527048)
  - Fix setup-nsssysinit to handle more general formats (#527051)


author: Elio Maldonado<emaldona@redhat.com - 3.12.4-9
changelog:
  - Install blank databases and configuration file for system shared database
  - nsssysinit queries system for fips mode before relying on environment variable


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - PEM module implements memory management for internal objects - 509705
  - PEM module doesn't crash when processing malformed key files - 512019


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-2
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - No rpath-link in nss-softokn-config


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-30
changelog:
  - Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766
  - Fixed requires and buildrequires as per recommendations in spec file review


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-29
changelog:
  - Restoring patches 2 and 7 as we still compile all sources
  - Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-25
changelog:
  - Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn
  - Add a temprary hack to nss.pc.in to unblock builds


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-22
changelog:
  - Fix nss-config not to include nssutil
  - Add BuildRequires on nss-softokn and nss-util since build also runs the test suite


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-19
changelog:
  - remove patches that are now in nss-softokn and
  - remove spurious exec-permissions for nss.pc per rpmlint
  - single requires line in nss.pc.in


author: Elio Maldonado+emaldona@redhat.com - 3.12.3.99.3-11
changelog:
  - split off nss-softokn and nss-util as subpackages with their own rpms
  - first phase of splitting nss-softokn and nss-util as their own packages


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-10
changelog:
  - must install libnssutil3.since nss-util is untagged at the moment
  - preserve time stamps when installing various files


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-5
changelog:
  - updated pem module incorporates various patches
  - fix off-by-one error when computing size to reduce memory leak. (483855)
  - fix data type to work on x86_64 systems. (429175)
  - fix various memory leaks and free internal objects on module unload. (501080)
  - fix to not clone internal objects in collect_objects().  (501118)
  - fix to not bypass initialization if module arguments are omitted. (501058)
  - fix numerous gcc warnings. (500815)
  - fix to support arbitrarily long password while loading a private key. (500180) 
  - fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)


author: Kai Engert <kaie@redhat.com> - 3.12.3-7
changelog:
  - re-enable test suite
  - add patch for upstream bug 488646 and add newer paypal
    certs in order to make the test suite pass


author: Kai Engert <kaie@redhat.com> - 3.12.3-3
changelog:
  - ship .chk files instead of running shlibsign at install time
  - include .chk file in softokn-freebl subpackage
  - add patch for upstream nss bug 488350


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-3
changelog:
  - nss package should own /etc/prelink.conf.d folder, rhbz#452062
  - use upstream patch to fix test suite abort


author: Kai Engert <kengert@redhat.com> - 3.11.99.3-2
changelog:
  - Build against gcc 4.3.0, use workaround for bug 432146
  - Run the test suite after the build and abort on failures.


author: Kai Engert <kengert@redhat.com> - 3.11.7-10
changelog:
  - Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist
    our signed libraries and protect them from modification.


author: Kai Engert <kengert@redhat.com> - 3.11.7-2
changelog:
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5.
  - Use a workaround to avoid mozilla bug 51429.


author: Kai Engert <kengert@redhat.com> - 3.11.5-2
changelog:
  - Fix rhbz#230545, failure to enable FIPS mode
  - Fix rhbz#220542, make NSS more tolerant of resets when in the 
    middle of prompting for a user password.


author: Kai Engert <kengert@redhat.com> - 3.11.5-1
changelog:
  - Update to 3.11.5
  - This update fixes two security vulnerabilities with SSL 2
  - Do not use -rpath link option
  - Added several unsupported tools to tools package


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
changelog:
  - Initial import into Fedora Core, based on a CVS snapshot of
    the NSS_3_11_RTM tag
  - Fix up the pkcs11-devel subpackage to contain the proper headers
  - Build with RPM_OPT_FLAGS
  - No need to have rpath of /usr/lib in the pc file


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.10.1-9
changelog:
  - Compiled with USE_LDAP_SASL if both "ldap" and "sasl" options are enabled
    Resolves: rhbz#1733938


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.10.1-7
changelog:
  - Fixed haproxy with TLS
    Resolves: rhbz#1370455
  - Fixed documentation about canonical maps
    Resolves: rhbz#1381871
  - Fixed build with kernel-4.*
    Resolves: rhbz#1575658


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.10.0-2
changelog:
  - Fixed systemd error message regarding chroot-update, patch provided
    by John Heidemann <johnh@isi.edu>
    Resolves: rhbz#917463


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.8.7-2
changelog:
  - Introduce systemd unit file, thanks to Jóhann B. Guðmundsson <johannbg@hi.is>
    Resolves: rhbz#718793


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.7.0-2
changelog:
  - follow guidelines for alternatives (#570801)
  - move sasl config to /etc/sasl2 (#574434)
  - drop sasl v1 support
  - remove unnecessary requirements
  - use bcond macros


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.5-3
changelog:
  - fix init script LSB compliance (#528151)
  - update pflogsumm to 1.1.2
  - require Date::Calc for pflogsumm (#536678)
  - fix some rpmlint warnings


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.1-1
changelog:
  - update to 2.6.1
  - move non-config files out of /etc/postfix (#490983)
  - fix multilib conflict in postfix-files (#502211)
  - run chroot-update script in init script (#483186)
  - package examples (#251677)
  - provide all alternatives files
  - suppress postfix output in post script


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.5.6-1
changelog:
  - update to 2.5.6 (#479108)
  - rebuild /etc/aliases.db only when necessary (#327651)
  - convert doc files to UTF-8


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.5.5-2
changelog:
  - enable Large file support on 32-bit archs (#428996)
  - fix mailq(1) and newaliases(1) man pages (#429501)
  - move pflogsumm and qshape to -perl-scripts subpackage (#467529)
  - update pflogsumm to 1.1.1
  - fix large-fs patch
  - drop open_define patch
  - add -Wno-comment to CFLAGS


author: Thomas Woerner <twoerner@redhat.com> 2:2.5.1-3
changelog:
  - fixed postfix privilege problem with symlinks in the mail spool directory
    (CVE-2008-2936) (rhbz#459101)


author: Thomas Woerner <twoerner@redhat.com> 2:2.5.1-2
changelog:
  - fixed fix for enabling IPv6 support (rhbz#437024)
  - added new postfix data directory (rhbz#437042)


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.6-1
changelog:
  - new verison 2.4.6
  - added virtual server(smtp) provide (rhbz#380631)
  - enabling IPv6 support (rhbz#197105)
  - made the MYSQL and PGSQL defines overloadable as build argument


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.5-3
changelog:
  - fixed multilib conflict for makedefs.out: rename to makedefs.out-%{_arch}
    (rhbz#342941)
  - enabled mysql support


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.5-2
changelog:
  - made init script lsb conform (#243286, rhbz#247025)
  - added link to postfix sasl readme into Postfix-SASL-RedHat readme


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.3-2
changelog:
  - diabled mysql support again (rhbz#185515)
  - added support flag for PostgreSQL build (rhbz#180579)
    Ben: Thanks for the patch
  - Fixed remaining rewiew problems (rhbz#226307)


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.3-1
changelog:
  - new stable version 2.4.3
  - enabled mysql support (rhbz#185515)
  - dropped build requirements for gawk, ed and sed


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.6-1
changelog:
  - new version 2.3.6
  - limiting SASL mechanisms to plain login for sasl with saslauthd (#175259)
  - dropped usage of ed in the install stage


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.2-1
changelog:
  - new version 2.3.2 with major upstream fixes:
    - corrupted queue file after a request to modify a short message header
    - panic after spurious Milter request when a client was rejected
    - maked the Milter more tolerant for redundant "data cleanup" requests
  - applying pflogsumm-conn-delays-dsn-patch from postfix tree to pflogsumm


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.10-1
changelog:
  - new version 2.2.10
  - added option LDAP_DEPRECATED to support deprecated ldap functions for now
  - fixed build without pflogsumm support (#188470)


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.5-2.1
changelog:
  - replaced postconf and postalias call in initscript with newaliases (#156358)
  - fixed initscripts messages (#155774)
  - fixed build problems when sasl is disabled (#164773)
  - fixed pre-definition of mailbox_transport lmtp socket path (#122910)


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.0-1
changelog:
  - new version 2.2.0
  - cleanup of spec file: removed external TLS and IPV6 patches, removed 
    smtp_sasl_proto patch
  - dropped samples directory till there are good examples again (was TLS and
    IPV6)
  - v2.2.0 fixes code problems: #132798 and #137858


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-5.1
changelog:
  - fixed open relay bug in postfix ipv6 patch: new version 1.26 (#146731)
  - fixed permissions on doc directory (#147280)
  - integrated fixed fqdn patch from Joseph Dunn (#139983)


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-2.2
changelog:
  - automated postalias call in init script
  - removed postconf call from spec file: moved changes into patch


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-2
changelog:
  - switched over to system aliases file and database in /etc/ (#117661)
  - new reuires and buildrequires for setup >= 2.5.36-1


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.4-1
changelog:
  - new version 2.1.4
  - new ipv6 and tls+ipv6 patches: 1.25-pf-2.1.4
  - new pfixtls-0.8.18-2.1.3-0.9.7d patch


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.1-3.1
changelog:
  - fixed directory permissions in %doc (#125406)
  - fixed missing spool dirs (#125460)
  - fixed verify problem for aliases.db (#125461)
  - fixed bogus upgrade warning (#125628)
  - more spec file cleanup


author: John Dennis <jdennis@redhat.com> 2:2.0.18-4
changelog:
  - remove version from pflogsumm subpackage, it was resetting the
    version used in the doc directory, fixes bug 119213


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.18-1
changelog:
  - bring source up to upstream release 2.0.18
  - include pflogsumm, fixes bug #68799
  - include smtp-sink, smtp-source man pages, fixes bug #118163


author: John Dennis <jdennis@porkchop.devel.redhat.com>
changelog:
  - set sasl back to v2 for mainline, this is good for fedora and beyond,
    for RHEL3, we'll branch and set set sasl to v1 and turn off ipv6


author: John Dennis <jdennis@porkchop.devel.redhat.com>
changelog:
  - revert back to v1 of sasl because LDAP still links against v1 and we can't 
  - bump revision for build
    have two different versions of the sasl library loaded in one load image at
    the same time. How is that possible? Because the sasl libraries have different 
    names (libsasl.so & libsasl2.so) but export the same symbols :-(
    Fixes bugs 115249 and 111767


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.16-4
changelog:
  - remove mysqlclient prereq, fixes bug 101779
  - remove md5 verification override, this fixes bug 113370. Write parse-postfix-files
    script to generate explicit list of all upstream files with ownership, modes, etc.
    carefully add back in all other not upstream files, files list is hopefully
    rock solid now.


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.16-3
changelog:
  - add zlib-devel build prereq, fixes bug 112822
  - remove copy of resolve.conf into chroot jail, fixes bug 111923


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - upgrade to new 2.0.11 upstream release
  - fix authentication problems
  - rewrite SASL documentation
  - upgrade to use SASL version 2
  - Fix bugs 75439, 81913 90412, 91225, 78020, 90891, 88131


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - upgrade to release 2.0.6
  - remove chroot as this is now the preferred installation according to Wietse Venema, the postfix author


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix shell in /etc/passwd (#68373)
  - fix documentation in /etc/postfix (#65858)
  - Provides: /usr/bin/newaliases (#66746)
  - fix autorequires by changing /usr/local/bin/perl to /usr/bin/perl in a
    script in %doc (#68852), although I don't think this is necessary anymore


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed missing smtpd.conf file for SASL support and included SASL Postfix
    Red Hat HOWTO (#62505).
  - Included SASL2 support patch (#68800).


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.4-1
changelog:
  - 1.1.4
  - TLS 0.8.4
  - Move postalias run from %post to init script to work around
    anaconda being broken.


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.3-3
changelog:
  - adjust the default postfix-files config file to match the alternatives setup
    by altering the arguments passed to post-install in the %install phase
    (otherwise, it might point to sendmail's binaries, breaking it rather rudely)
  - adjust the post-install script so that it silently uses paths which have been
    modified for use with alternatives, for upgrade cases where the postfix-files
    configuration file isn't overwritten
  - don't forcefully strip files -- that's a build root policy
  - remove hard requirement on openldap, library dependencies take care of it
  - redirect %postun to /dev/null
  - don't remove the postfix user and group when the package is removed


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.3-2
changelog:
  - listen on 127.0.0.1 only by default (#60071)
  - Put config samples in %{_docdir}/%{name}-%{version} rather than
    /etc/postfix (#60072)
  - Some spec file cleanups


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.3-1
changelog:
  - 1.1.3, TLS 0.8.3
  - Fix updating
  - Don't run the statistics cron job
  - remove requirement on perl Date::Calc


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.2-1
changelog:
  - Initial Red Hat Linux packaging, based on spec file from
    Simon J Mudd <sjmudd@pobox.com>
  - Changes from that:
    - Set up chroot environment in triggers to make sure we catch glibc errata
    - Remove some hacks to support building on all sorts of distributions at
      the cost of specfile readability
    - Remove postdrop group on deletion


author: Kamil Dudka <kdudka@redhat.com> - 7.19.0-15
changelog:
  - allow to return -1 from the write callback (#857875) 
  - remove the patch for curl-config --static-libs no longer needed
  - run the tests against the just built pycurl, not the system one


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 7.18.2-1
changelog:
  - Update to 7.18.2
  - Thanks to Ville Skyttä re-enable the tests and fix a minor problem
    with the setup.py. (Bug # 45400)


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 7.18.1-1
changelog:
  - Update to 7.18.1
  - Disable tests because it's not testing the built library, it's trying to
    test an installed library.


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-38
changelog:
  - Constrain number of cycles in rescale filter
  - Compute correct coverage values for box filter
  - Resolves: #1688417


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-33
changelog:
  - Only embed mime data for gray/rgb/cmyk colorspaces
  - if image decode map is identity
  - Resolves: #1636103


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-23
changelog:
  - Check for stream before calling stream methods
  - when saving an embedded file
  - Resolves: #1651305


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-5
changelog:
  - Remove PFB headers from embedded Type1 fonts
  - before embedding them into a PostScript file.
  - Resolves: #1241488


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-4
changelog:
  - Bump sonames of all frontends so that they loads symbols
  - from correct libpoppler.so.* when the compat-poppler022
  - package is installed.
  - Resolves: #1174537


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-1
changelog:
  - Update to 0.26.5
  - Remove unused patches
  - Rereview patches from fedora
  - Modify RHEL patches so that they apply
  - Disable Qt5 explicitly
  - Resolves: #1174537


author: Marek Kasik <mkasik@redhat.com> 0.22.5-2
changelog:
  - Add poppler-0.22.5-CVE-2013-4473.patch
      (Limit length of output to pathName buffer)
  - Add poppler-0.22.5-CVE-2013-4474.patch
      (Check file pattern)
  - Resolves: #1025160


author: Marek Kasik <mkasik@redhat.com> 0.20.2-6
changelog:
  - Backport most of the changes from poppler-0.20.3 - poppler-0.20.5
  -   (those which doesn't change API or ABI and are important)
  - See poppler-0.20.3-5.patch for detailed list of included commits


author: Marek Kasik <mkasik@redhat.com> 0.18.4-3
changelog:
  - Backport of a patch which sets mask matrix before drawing an image with a mask
  - Resolves: #817378


author: Marek Kasik <mkasik@redhat.com> - 0.17.3-2
changelog:
  - Don't include pdfextract and pdfmerge in resulting packages for now
  - since they conflict with packages pdfmerge and mupdf (#740906)


author: Marek Kasik <mkasik@redhat.com> - 0.15.0-5
changelog:
  - Add poppler-0.15.0-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.15.0-CVE-2010-3703.patch
      (Properly initialize stack)
  - Add poppler-0.15.0-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639861


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-3
changelog:
  - Correct permissions of goo/GooTimer.h
  - Convert pdftohtml.1 to utf8
  - Make the pdftohtml's Provides/Obsoletes versioned


author: Adam Jackson <ajax@redhat.com> 0.8.0-3
changelog:
  - poppler-0.8.0-ocg-crash.patch: Fix a crash when no optional content
    groups are defined.
  - Mangle configure to account for the new directory for qt3 libs.
  - Fix grammar in %description.


author: EL Errata <el-errata_ww@oracle.com> - 3.0.67-4.0.1
changelog:
  - Add setroubleshoot-plugins-oracle-config.patch to use oracle url
  - Add setroubleshoot-plugins-oracle-po.patch to use oracle url for po


author: Vit Mojzis <vmojzis@redhat.com> - 3.0.67-1
changelog:
  - bind_ports: Do not use when there are no allowed_target_types (#1255627)
  - Fix summary and "if" text for AVCs with unknown target path (#1437772)
  - Update translations


author: Vit Mojzis <vmojzis@redhat.com> - 3.0.66-1
changelog:
  - Fix catchall plugin message for process2 (#1507909)
  - Correct grammatical errors (#1331780)
  - Do not split If sentences to framework and plugins (#1177347)
  - Fix typo in "lt" translation header (#1468985)
  - catchall_boolean.py - 'None' man page is None man page
  - Fix restorecon "then" text (#1332097)


author: Petr Lautrbach <plautrba@redhat.com> - 3.0.65-1
changelog:
  - Remove duplicated strings from sys_resource.py
  - Spelling fixes
  - Fix catchall plugin message for capability2
  - Stop executing restorecon plugin on specified path prefixes


author: Petr Lautrbach <plautrba@redhat.com> - 3.0.62-1
changelog:
  - Suggest my-<command>.pp modules instead of mypol.pp (#1329037)
  - Fix sshd_root.py setroubleshoot plugin to cover only /root/.ssh path as intended
  - Suggest to use ausearch instead of grep


author: Dan Walsh <dwalsh@redhat.com> - 3.0.57-1
changelog:
  - Add restorecon_source plugin, to check the source program is labeled correclty.
  - Fix restorecon.py to handle customized_files properly.
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 3.0.53-1
changelog:
  - Update Translations
  - Add sandbox_connect plugin to point out the use of alternate types with the sandbox -X command.


author: Dan Walsh <dwalsh@redhat.com> - 3.0.52-1
changelog:
  - Update Translations
  - Only translate catchall_boolean descritpions if the are not unicode to start with.


author: Dan Walsh <dwalsh@redhat.com> - 3.0.48-1
changelog:
  - Fix connect_ports and bind_ports to specify semanage command if only 1 port is available rather then to suggest user choices
  - Update translations


author: <dwalsh@redhat.com> - 3.0.47-1
changelog:
  - Update translations
  - Fix sys_resource.py to mention all types of resources
  - Fix unicode calls so catchall_booleans.py does not crash sealert


author: <dwalsh@redhat.com> - 3.0.16-1
changelog:
  - Update translations
  - Change allow_execmod plugin to only fire if target_path is lib_t
  - Ignore errors from disabled IPv6
  Resolves: #674770


author: <dwalsh@redhat.com> - 3.0.3-1
changelog:
  - Update translations
  - Fix catchall plugin to give better messages on capabilities and process avcs


author: <dwalsh@redhat.com> - 2.1.1-1
changelog:
  - Add first plugins which will launch Red Star
  - Add Thomas Liu change to allow restorecon to execute fixit button  
    *   2009-06-19 Dan Walsh <dwalsh@redhat.com>
  	- Add setenforce.py from Thomas Liu
  	- Add sys_module.py, mmap_zero.py, kernel_modules.py, selinuxpolicy.py
  	- Allow restorecon to execute fixit command


author: <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Execute catchall_boolean.py before allow_daemons_use_tty
  	- Fix chcon lines to match current policy


author: <jdennis@redhat.com> - 2.0.4-1
changelog:
  - Resolve bug #416351: setroubleshoot does not escape regex chars in suggested cmds
  	- add new template substitution $SOURCE, a friendly name, $SOURCE_PATH still exists
  	  and is the full path name of $SOURCE


author: <jdennis@redhat.com> - 2.0.1-1
changelog:
  - Resolve bug #332281: remove obsolete translation
  	- Resolve bug #426586: Renaming translation po file from sr@Latn to sr@latin


author: John Dennis <jdennis@redhat.com> - 1.10.0-1
changelog:
  - move all plugins and their translations from setroubleshoot-server
            package to this new independent package to allow easier updating
            of just the plugins


author: Stephen Warren <s-t-rhbugzilla@wwwdotorg.org> - 2002_04_11-6
changelog:
  - Rework the spec file formatting to match templates from rpmdev
  - Be explicit about file attributes, just in case


author: Stephen Warren <s-t-rhbugzilla@wwwdotorg.org> - 2002_04_11-5
changelog:
  - Updates after reading packaging guide-lines more thoroughly:
  - Make license version more explicit
  - Add generate-tarball.sh, and associated comments
  - Added BuildRequires on kernel-headers
  - Added COPYING as a doc
  - Use dollar v.s. percent macros more consitently


author: Stephen Warren <s-t-rhbugzilla@wwwdotorg.org> - 2002_04_11-4
changelog:
  - Repackage the source tarball to remove a3load.hex
  - Added instructions to spec file on how to do the above
  - Remove reference to a3load.hex from the man page too


author: Stephen Warren <s-t-rhbugzilla@wwwdotorg.org> - 2002_04_11-3
changelog:
  - Update BuildRoot per Fedora wiki
  - Fixed rpmlint complaint about not cleaning buildroot
  - Updated source patch file to match latest kernel file layout
  - Add patch to remove reference to non-shipped non-free a3load.hex firmware


author: Brian Pepple <bpepple@fedoraproject.org> - 0.11.4-1
changelog:
  - Update to 0.11.4.
  - Add BR on python-twisted, dbus-python, and pygobject2 for tests.
  - Bump min version of tp-glib.


author: Brian Pepple <bpepple@fedoraproject.org> - 0.9.3-1
changelog:
  - Update to 0.9.3.
  - Drop vcard-manager-hashtable patch.
  - Drop try-not-to-set-vcard-fields patch.
  - Drop vcard-on-login patch.
  - Drop loudmouth-devel BR.


author: David Sloboda <david.x.sloboda@oracle.com> - 195.8-1.0.1
changelog:
  - Turn off display of subscriptions menu item in GUI
  - Drop subscription-manager requirement since we do not ship it (tianyue.lan@oracle.com)


author: Martin Pitt <mpitt@redhat.com> 195.8-1
changelog:
  - webserver: Fix large requests with TLS (rhbz#1785497)
  - Machines: Avoid D-Bus introspection to libvirt-dbus, to speed up polkit
    operations (rhbz#1780400)
  - Machines: Fix CPU statistics (rhbz#1763641)


author: Martin Pitt <mpitt@redhat.com> 195.3-1
changelog:
  - subscriptions: Add support for Red Hat Insights (rhbz#1748026)
  - systemd: Warn if not connected to Insights (rhbz#1748350)


author: Martin Pitt <mpitt@redhat.com> 195.2-1
changelog:
  - firewall: Only reload firewall when adding custom services (rhbz#1725094)
  - networking: Activate a connection after clearing master/slave fields (rhbz#1729378)
  - Add Obsoletes: for ancient cockpit-shell package (rhbz#1744208)


author: Martin Pitt <mpitt@redhat.com> 190-1
changelog:
  - kdump: Add NFS and SSH dump targets rhbz#1533366
  - kdump: Fix confusing design of target selector rhbz#1536327
  - firewall: Hide already enabled items from "Add Services" dialog rhbz#1598625
  - networking: Gracefully handle when NetworkManager is  not running
    rhbz#1551615
  - web server: Mark deleted cookie as "secure", and add X-Content-Type-Options
    header rhbz#1677767
  - web server: Mark deleted cookie as "HttpOnly" rhbz#1656339
  - Fix various crashes spotted by coverity rhbz#1644209
  - Fix remotectl crash with inaccessible files rhbz#1644213
  - Fix race condition with fslist1 channels rhbz#1644223
  - Fix crash with parsing invalid bas64 headers rhbz#1663712


author: Martin Pitt <mpitt@redhat.com> 173.1-1
changelog:
  - Crash fixes spotted by coverity rhbz#1644345
  - Fix race condition with fslist channels rhbz#1644346
  - Fix remotectl crash on errors rhbz#1644348


author: Martin Pitt <mpitt@redhat.com> 173-6
changelog:
  - Fix remote unauthenticated crash with crafted URLs rhbz#1627631
  - Fix off-by-one error in flow control rhbz#1626846


author: Martin Pitt <mpitt@redhat.com> 169-3
changelog:
  - Rebase to version 169, drop all patches rhbz#1568728
  - Fix Subscriptions page hang when accessing as non-admin rhbz#1442540
  - Show an indicator on front page if updates are available rhbz#1495543
  - Properly localize "Log in" rhbz#1541454
  - Improve check for root privilege availability, to e. g. also work for FreeIPA
    admins rhbz#1574630


author: Martin Pitt <mpitt@redhat.com> 154-3
changelog:
  - Update source po for Japanese translations rhbz#1512923
  - Adjust build system to avoid build failure for the above


author: Martin Pitt <mpitt@redhat.com> 154-1
changelog:
  - Rebase to version 154, drop all patches rhbz#1470780
  - This allows ssh keys to be loaded from arbitrary directories
    rhbz#1425887


author: Dominik Perpeet <dperpeet@redhat.com> 138-3
changelog:
  - Fix issues with connections between multiple hosts
  - Fix format string type mismatch on some architectures


author: Dominik Perpeet <dperpeet@redhat.com> 137-1
changelog:
  - Update to 137 release
  - Cockpit's web server understands and properly responds to HTTP HEAD requests


author: Dominik Perpeet <dperpeet@redhat.com> 135-4
changelog:
  - The cockpit package doesn't require the dashboard anymore
  - The dashboard package conflicts with older bridge and ws versions


author: Dominik Perpeet <dperpeet@redhat.com> 135-3
changelog:
  - Update to 135 release
  - Redesigned page menu and machine switcher
  - Show /etc/motd in the "System" page
  - Allow changing the MAC address for ethernet adapters and see them for bonds
  - NetworkManager now activates slave interfaces by itself
  - Show "Locked/Unlocked" indicator for privilege escalation in the top bar
  - Privilege escalation works with sudo reauthorization
  - Use official /etc/ssh/ssh_known_hosts when connecting to remote hosts


author: Dominik Perpeet <dperpeet@redhat.com> 131-3
changelog:
  - Fix size of list heading rhbz#1422184
  - Fix button tooltips rhbz#1365372 rhbz#1412036
  - Make basic selinux functionality available without rhbz#1422181


author: Stef Walter <stefw@redhat.com> 131-1
changelog:
  - Update to 131 release
  - Support for configuring kdump kernel crash dumping
  - Support for rebasing OSTrees and configuring OSTree remotes
  - Cockpit now respects /etc/shells and prevents login when user has an invalid shell
  - Add a 'LoginTo' option in cockpit.conf to toggle ability to login to other servers
  - Validate textual input on the Networking page properly


author: Dominik Perpeet <dperpeet@redhat.com> 126-1
changelog:
  - Update to 126 release
  - Show security scan information about containers
  - During login users can choose whether password is cached and reused
  - Allow renaming of active devices in networking interface
  - More clearly indicate when checking network connectivity
  - Allow more time for rollback when making network changes rhbz#1395108
  - The remotectl command can now combine certificate and key files
  - Domain join operations can now be properly cancelled
  - Make Kerberos authentication work even if gss-proxy is in use
  - When proxied, support X-Forwarded-Proto
  - Ignore block devices with a zero size in the storage interface


author: Dominik Perpeet <dperpeet@redhat.com> 125-1
changelog:
  - Update to 125 release
  - Display OSTree signatures on Atomic Host
  - Expand logical volumes and partitions inline on their devices
  - No longer offer to format read-only block devices
  - Use stored passphrases for LUKS devices properly
  - System shutdown can be scheduled by date
  - Properly terminate user sessions on the Accounts page
  - Fix regression on login screen in older Internet Explorer browsers


author: Dominik Perpeet <dperpeet@redhat.com> 122-3
changelog:
  - Fix regression when activating virtual network interfaces rhbz#1394667
  - Support network connections that don't have an interface name rhbz#1394668
  - Fix registry console Windows IE and Edge login rhbz#1378810 rhbz#1393740
  - Fix reloading of projects and users in kubernetes rhbz#1393785
  - Only set websocket protocols if they are available rhbz#1394675


author: Dominik Perpeet <dperpeet@redhat.com> 122-1
changelog:
  - Update to 122 release
  - Cockpit can rollback network configuration that would otherwise disconnect an admin from the system
  - Unmanaged network devices are now shown
  - The list of Docker containers can be filtered and expanded inline
  - Cockpit can be a "bastion host" by using the login page to connect to an alternate system via SSH
  - Only connect to an alternate system if it has a known SSH host key
  - When connecting to other systems, each SSH connection is run in a separate process
  - Fixes bugs that prevent the "Logs" page from working in Firefox 49
  - A network proxy can be used when registering with RHEL subscriptions rhbz#1338681


author: Dominik Perpeet <dperpeet@redhat.com> 118-1
changelog:
  - Update to 118 release
  - SELinux audit failures can be diagnosed and solutions applied to the system
  - Configure storage for Docker containers and images
  - Volumes and environment variables can be configured for Docker containers
  - Support PAM conversations on the Login screen, enabling two factor authentication
  - Cockpit URLs can be proxied with a configured HTTP path prefix
  - Timer jobs in systemd can be created and configured
  - Display all managed NetworkManager devices
  - Add support for network teams
  - Prevent removal of last volume from volume group rhbz#1354421


author: Dominik Perpeet <dperpeet@redhat.com> - 0.114-2
changelog:
  - The API of cockpit-bridge and cockpit-shell is now stable, other components
    only depend on a version >= 0.114 now, not an exact match to their own version


author: Dominik Perpeet <dperpeet@redhat.com> - 0.114-1
changelog:
  - Update to 0.114 release
  - Red Hat Subscriptions can now specify activation keys and orgs rhbz#1338680
  - Network configuration of the Ethernet MTU rhbz#1339552
  - SSH Host keys are show on system page rhbz#1318414
  - Properly show SSH keys on authentication page rhbz#1336686
  - Use 'active-backup' as the default for new network bonds rhbz#1348066
  - Don't show network interfaces where NM_CONTROLLED=no is set rhbz#1330552
  - Disable tuned correctly when clearing a performance profile rhbz#1330473
  - Use CockpitLang cookie and Accept-Language for localization
  - Cockpit terminal now supports shells like fish
  - Disable the network on/off switch for unknown or unmanaged interfaces
    rhbz#1329954 rhbz#1329956
  - Show intelligent password score error messages rhbz#1330838
  - Show full string for system hardware info and operating system name rhbz#1331243
  - Ensure popup-info when creating an account remains on screen rhbz#1340749
  - Remove erroneous docker dependency rhbz#1349375


author: Dominik Perpeet <dperpeet@redhat.com> - 0.108-1
changelog:
  - Update to 0.108 release
  - Strict browser security policy for Cockpit is now enforced. This defines which code can be run in a Cockpit session and mitigates a number of browser based attacks.


author: Dominik Perpeet <dperpeet@redhat.com> - 0.103-1
changelog:
  - Update to 0.103 release
  - When Cockpit fails to connect to a host, relevant SSH command or host details are displayed to help resolve the issue
  - Docker restart policy can be configured when starting a new container
  - Display a single combined dialog for creating logical volumes
  - Don't offer a 'Computer OU' option when joining IPA domains
  - Display binary journal data correctly
  - Display IEC names (eg: MiB) for disk or file system sizes
  - Refuse to shrink logical volumes and prevent negative sizes in file system partition dialogs
  - Apply strict Content-Security-Policy on most of Cockpit to prevent a number of browser based attacks
  - Numerous other bug fixes and admin interface improvements


author: Dominik Perpeet <dperpeet@redhat.com> - 0.96-1
changelog:
  - Update to 0.96 release
  - Fix memory leaks, mostly related to DBus code
  - Compatible with docker 1.10
  - Limit concurrent authentication similar to sshd using 'MaxStartups' setting
  - Fixed up server disconnection UI
  - Navigation fixes


author: Dominik Perpeet <dperpeet@redhat.com> - 0.91-1
changelog:
  - Update to 0.91 release
  - Fix Cockpit session issues with a second machine rhbz#1277938
  - Split out docker rhbz#1297797
  - Distribute licenses of included components in the source rpm
  - Reworked TLS certificates for Cockpit
  - Remove custom SELinux policy
  - SOS report UI page
  - User interface for OSTree upgrades and rollbacks
  - Offer to activate multipathd for multipath disks


author: Stef Walter <stefw@redhat.com> - 0.77-1
changelog:
  - Work better with multipath storage
  - Deletion of kubernetes objects
  - Cleaner URLs in the bookmark bar
  - Show a warning when adding too many machines
  - Make authentication work when embedding Cockpit
  - Complete componentizing Cockpit


author: Peter <petervo@redhat.com> - 0.63-1
changelog:
  - Update to 0.63 release
  - Remove cockpit-docker for armv7hl while docker
    packages are being fixed


author: Peter <petervo@redhat.com> - 0.49-1
changelog:
  - Update to 0.49 release.
  - cockpitd was renamed to cockpit-wrapper the cockpit-daemon
    package was removed and is now installed with the
    cockpit-bridge package.


author: Stef Walter <stefw@redhat.com> - 0.27-1
changelog:
  - Update to 0.27 release
  - Don't create cockpit-*-admin groups rhbz#1145135
  - Fix user management for non-root users rhbz#1140562
  - Fix 'out of memory' error during ssh auth rhbz#1142282


author: Stef Walter <stefw@redhat.com> - 0.26-1
changelog:
  - Update to 0.26 release
  - Can see disk usage on storage page rhbz#1142459
  - Better order for lists of block devices rhbz#1142443
  - Setting container memory limit fixed rhbz#1142362
  - Can create storage volume of maximum capacity rhbz#1142259
  - Fix RAID device Bitmap enable/disable error rhbz#1142248
  - Docker page connects to right machine rhbz#1142229
  - Clear the format dialog label correctly rhbz#1142228
  - No 'Drop Privileges' item in menu for root rhbz#1142197
  - Don't flash 'Server has closed Connection on logout rhbz#1142175
  - Non-root users can manipulate user accounts rhbz#1142154
  - Fix strange error message when editing user accounts rhbz#1142154


author: Stef Walter <stefw@redhat.com> 0.18-1
changelog:
  - Update to 0.18 release
  - Add glib-networking build requirement
  - Let selinux-policy-targetted distribute selinux policy


author: Patrick Uiterwijk (LOCAL) <puiterwijk@redhat.com> - 0.2-0.3.5e1faadgit
changelog:
  - Fixed license tag
  - Updated to new FSF address upstream
  - Removing libgsystem before build
  - Now claiming specific manpages
  - Made the config files noreplace
  - Removed the test assets
  - Put the web assets in a subpackage


author: Parag Nemade <pnemade AT redhat DOT com> - 1.4.0-2
changelog:
  - Resolves:rh#1040298 - OK button should be disabled always for the default selected language
  - Resolves:rh#1040309 - Fix 'No Group named...exists' dialog produced traceback & warning messages
  - Resolves:rh#1045993 - Change language name from Oriya to Odia.


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.5-24
changelog:
  - Resolves:rh#956784 - Add Interlingua to the local-list file and include Interlingua localization to the package


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.5-19
changelog:
  - Resolves:rh#886446 - system-config-language tracebacks in TUI mode
  - Resolves:rh#892560 - system-config-language only provides english in Fedora 18
  - Resolves:rh#889956 - include language Kashmiri Arabic


author: Naveen Kumar <nkumar@redhat.com>- 1.3.5-5
changelog:
  - apply patch s-c-l-634556.patch
  - resolves bug #634556
  - modifications in s-c-l to install even conditional & default packages


author: Naveen Kumar <nkumar@redhat.com>- 1.3.5-2
changelog:
  - resolves bug #624008
  - apply patch s-c-l-624008.patch
  - adds Low-German (nds_DE) to s-c-l
  - comment a redundant line in language_backend.py


author: Naveen Kumar <nkumar@redhat.com>- 1.3.4-2
changelog:
  - apply patch scl-1.3.4-devel.patch
  - contains some enhanc. reg. force. change of lang. when dep. are not installed 
  - Resolves Bug #568688


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.0-3
changelog:
  - Add systemd unit for resourcemgr
  - Add utils subpackage
  - Add Makefile.am patch to install test programs
  - Add patch to swap out AX_PTHREAD for different check
  - Increase release version to 3
  resolves: rhbz#1275027 - Add TPM 2.0 System API (SAPI) library


author: Sun Yunying <yunying.sun@intel.com> - 1.0-2
changelog:
  - Remove global macro pkg_version to avoid duplicate of version
  - Use ExclusiveArch instead of ExcludeArch
  - Use less wildcard in %files section to be more specific
  - Add trailing slash at end of added directory in %file section
  - Remove autoconf/automake/pkgconfig(cmocka) from BuildRequires
  - Increase release version to 2


author: Si-Wei Liu <si-wei.liu@oracle.com> - 19.4-4.0.7
changelog:
  - start event reporter after logging is configured [Orabug: 31210116]
  - adjust analyze show/blame output for hotplug records [Orabug: 31210116]
  - stages should skip update_event for first boot [Orabug: 31210116]
  - stages can allow user-data to control update-events [Orabug: 31210116]
  - fix cloud-init-local race with the rhel-import-state service [Orabug: 31210116]


author: Si-Wei Liu <si-wei.liu@oracle.com> - 19.4-4.0.1
changelog:
  - Try-restart NetworkManager only if running already
  - Add Oracle Linux variant to known distros
  - Add cloud-init hotplug event handling support [Orabug: 30485135]
  - Oracle data source should configure secondary VNICs [Orabug: 30487563]
  - Add support for netfailover detection [Orabug: 30487591]
  - Avoid hotplug handling when configure_secondary_nics is disabled [Orabug: 31086905]
  - Set per-platform default NM_CONTROLLED=no for OCI [Orabug: 31086905]
  - Remove secondary VNIC config from cache for hot unplug [Orabug: 31086905]
  - Fix OL distro specific issues and dependency compatibility [Orabug: 30435672]
  - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349]
  - Make Oracle datasource detect dracut based config files [Orabug: 29956753]


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-4.el7
changelog:
  - ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
  - Resolves: bz#1772505
    ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-3.el7
changelog:
  - ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
  - Resolves: bz#1772505
    ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 19.4-2.el7
changelog:
  - ci-Removing-cloud-user-from-wheel.patch [bz#1549638]
  - ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
  - ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
  - ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
  - ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
  - Resolves: bz#1549638
    ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
  - Resolves: bz#1574338
    (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
  - Resolves: bz#1748015
    ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
  - Resolves: bz#1812170
    (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
  - Resolves: bz#1812173
    (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-6.el7
changelog:
  - ci-util-json.dumps-on-python-2.7-will-handle-UnicodeDec.patch [bz#1744526]
  - Resolves: bz#1744526
    ([cloud-init][OpenStack] cloud-init can't persist instance-data.json)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-5.el7
changelog:
  - ci-Fix-for-network-configuration-not-persisting-after-r.patch [bz#1593010]
  - Resolves: bz#1593010
    ([cloud-init][RHVM]cloud-init network configuration does not persist reboot [RHEL 7.8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-4.el7
changelog:
  - ci-Azure-Return-static-fallback-address-as-if-failed-to.patch [bz#1726701]
  - Resolves: bz#1726701
    ([Azure] [RHEL 7.8] Cloud-init fixes to support fast provisioning for Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-3.el7
changelog:
  - ci-Revert-azure-ensure-that-networkmanager-hook-script-.patch [bz#1707725]
  - Resolves: bz#1707725
    ([WALA][cloud] cloud-init dhclient-hook script has some unexpected side-effects on Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-2.el7
changelog:
  - ci-Azure-Ensure-platform-random_seed-is-always-serializ.patch [bz#1687565]
  - ci-DatasourceAzure-add-additional-logging-for-azure-dat.patch [bz#1687565]
  - ci-Azure-Changes-to-the-Hyper-V-KVP-Reporter.patch [bz#1687565]
  - ci-DataSourceAzure-Adjust-timeout-for-polling-IMDS.patch [bz#1687565]
  - ci-cc_mounts-check-if-mount-a-on-no-change-fstab-path.patch [bz#1687565]
  - Resolves: bz#1687565
    (cloud-init 18.5 rebase for fast provisioning on Azure [RHEL 7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.5-1.el7
changelog:
  - Rebase to 18.5 [bz#1687565]
  - Resolves: bz#1687565
    (cloud-init 18.5 rebase for fast provisioning on Azure [RHEL 7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-5.el7
changelog:
  - ci-include-NOZEROCONF-yes-in-etc-sysconfig-network.patch [bz#1653131]
  - Resolves: bz#1653131
    (cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-4.el7
changelog:
  - ci-azure-Filter-list-of-ssh-keys-pulled-from-fabric.patch [bz#1684040]
  - Resolves: bz#1684040
    (CVE-2019-0816 cloud-init: extra ssh keys added to authorized_keys [rhel-7.7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-3.el7
changelog:
  - ci-cloud-init-per-don-t-use-dashes-in-sem-names.patch [bz#1664876]
  - ci-Enable-cloud-init-by-default-on-vmware.patch [bz#1623281]
  - Resolves: bz#1623281
    ([ESXi][RHEL7.6]Enable cloud-init by default on VMware)
  - Resolves: bz#1664876
    (cloud-init Storage-Management Functionality Is Erasing Filesystems)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-2.el7
changelog:
  - ci-net-Wait-for-dhclient-to-daemonize-before-reading-le.patch [bz#1632967]
  - Resolves: bz#1632967
    ([Azure] cloud-init dhcp.py dhcp_discovery() race with dhclient with preprovisioned VM in Azure)


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-24
changelog:
  - Set DHCP_HOSTNAME on Azure to allow for the hostname to be
    published correctly when bouncing the network.
    Resolves: rhbz#1434109


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-23
changelog:
  - Fix a bug tha caused cloud-init to fail as a result of trying
    to rename bonds.
    Resolves: rhbz#1512247


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-18
changelog:
  - Start the cloud-init init local service after the dbus socket is created
    so that the hostnamectl command works.
    Resolves: rhbz#1450521


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-16
changelog:
  - Disable NetworkManager management of resolv.conf if nameservers
    are specified by configuration.
    Resolves: rhbz#1454491


author: Ryan McCabe <rmccabe@redhat.com> 0-7.9-13
changelog:
  - Do proper cleanup of systemd units when upgrading from versions
    0.7.9-3 through 0.7.9-8.
    Resolves: rhbz#1465730


author: Lars Kellogg-Stedman <lars@redhat.com> 0.7.9-9
changelog:
  - RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
  - azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
  - Fix ipv6 subnet detection (rhbz#1438082)


author: Lars Kellogg-Stedman <lars@redhat.com> 0.7.9-7
changelog:
  - Add missing sysconfig unit test data (rhbz#1438082)
  - Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
  - sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
  - Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
  - Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)


author: Lars Kellogg-Stedman <lars@redhat.com> 0.7.9-6
changelog:
  - add power-state-change module to cloud_final_modules (rhbz#1252477)
  - remove 'tee' command from logging configuration (rhbz#1424612)
  - limit permissions on def_log_file (rhbz#1424612)
  - Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
  - OpenStack: add 'dvs' to the list of physical link types. (rhbz#1442783)


author: Lars Kellogg-Stedman <lars@redhat.com> - 0.7.6-8
changelog:
  - make rh_subscription plugin do nothing in the absence of a valid
    configuration [RH:1295953]
  - move rh_subscription module to cloud_config stage


author: Lars Kellogg-Stedman <lars@redhat.com> - 0.7.6-3
changelog:
  - added dependency on python-jinja2 [RH:1215913]
  - added rhn_subscription plugin [RH:1227393]
  - require pyserial to support smartos data source [RH:1226187]


author: Lars Kellogg-Stedman <lars@redhat.com> - 0.7.6-2
changelog:
  - Rebased RHEL version to Fedora rawhide
  - Backported fix for https://bugs.launchpad.net/cloud-init/+bug/1246485
  - Backported fix for https://bugs.launchpad.net/cloud-init/+bug/1411829


author: Florian Müllner <fmuellner@redhat.com> - 3.28.1-7
changelog:
  - Add window-grouper extension
    Resolves: #1355845

  - Add disable-screenshield extension
    Resolves: #1643501


author: Florian Müllner <fmuellner@redhat.com> - 3.28.1-3
changelog:
  - Fix a couple of regressions from the rebase:
    - add back classic overview style
    - update dash-to-dock to a compatible version
    Related: #1569717


author: Florian Müllner <fmuellner@redhat.com> - 3.26.2-2
changelog:
  - Fix notification legibility in classic mode
    Resolves: #1507457
  - Fix stray icon shadows in classic mode
    Resolves: #1530654


author: Florian Müllner <fmuellner@redhat.com> - 3.8.4-2
changelog:
  - Backport some classic-mode improvements from 3.10 cycle:
    - context menu in window list (close, minimize, maximize)
    - use same order for favorites in applications menu as in dash


author: Mohamed El Morabity <melmorabity@fedoraproject.org> - 3.8.3-1
changelog:
  - Update to 3.8.3
  - Drop mini-extensions default-min-max and static-workspaces, no longer
    available (see https://bugzilla.gnome.org/show_bug.cgi?id=701717)


author: Mohamed El Morabity <melmorabity@fedoraproject.org> - 3.7.5.1-1
changelog:
  - Update to 3.7.5
  - Enable new launch-new-instance and window-list extensions, and add them in the
    classic-mode extension set
  - Re-add places-menu in the classic-mode extension set


author: Mohamed El Morabity <melmorabity@fedoraproject.org> - 3.7.3-1
changelog:
  - Update to 3.7.3
  - Enable new default-min-max and static-workspaces extensions
  - Provide new subpackage gnome-classic-session
  - Revamp summaries and descriptions


author: Mohamed El Morabity <melmorabity@fedoraproject.org> - 3.1.91-3.20111001gite102c0c6
changelog:
  - Update to a newer git snapshot
  - Fix GNOME Shell version to work with GS 3.2.0
  - Add Requires on GS 3.2.0 or above to gnome-shell-common


author: Michel Salim <salimma@fedoraproject.org> - 3.1.4-1
changelog:
  - Update to 3.1.4
  - Enable systemMonitor extension
  - Prepare xrandr-indicator, commenting out since it does not seem to work yet
  - Rename subpackages in line with new guidelines (# 715367)
  - Sort subpackages in alphabetical order


author: Timur Kristóf <venemo@fedoraproject.org> - 3.0.2-1.g63dd27cgit
changelog:
  - Update to a newer git snapshot
  - Fix RHBZ bug #708230
  - Enabled systemMonitor extension, but commented out since the requirements are not available


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-20
changelog:
  - fix another bogus date in changelog
  - update config.guess/config.sub for aarm64 build (#925189)
  - run autoreconf instead of autoheader


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-17
changelog:
  - fix small memory leak in copyin.c (#919454)
  - remove %defattr and install 'cpio' to real %{_bindir}
  - CovScan: add %{?_rawbuild}


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-14
changelog:
  - fix bad changelog entries
  - allow to build in Fedora Rawhide (temporarily because of #872336) (the value
    is guessed from from /usr/include/asm-generic/fcntl.h)


author: Ondrej Vasik <ovasik@redhat.com> 2.11-8
changelog:
  - drop unnecessary patches: cpio-2.9-dir_perm.patch and
    cpio-2.9-sys_umask.patch - reported by M.Castellini


author: Ondrej Vasik <ovasik@redhat.com> 2.10-6
changelog:
  - CVE-2010-0624 fix heap-based buffer overflow by expanding
    a specially-crafted archive(#572150)
  - comment patches


author: Ondrej Vasik <ovasik@redhat.com> 2.10-5
changelog:
  - remove redundant setLocale patch
  - fix segfault with nonexisting file with patternnames
    (#567022)


author: Radek Brich <rbrich@redhat.com> 2.9-7
changelog:
  - fix -dir_perm patch to restore permissions correctly even
    in passthrough mode -- revert affected code to cpio 2.8 state
    (bz#430835)


author: Radek Brich <rbrich@redhat.com> 2.9-6
changelog:
  - when extracting archive created with 'find -depth',
    restore the permissions of directories properly (bz#430835)
  - fix for GCC 4.3


author: Peter Vrabec <pvrabec@redhat.com> 2.6-13
changelog:
  - merge toAsciiError.patch with writeOutHeaderBufferOverflow.patch
  - merge largeFileGrew.patch with lfs.patch
  - fix large file support, cpio is able to store files<8GB 
    in 'old ascii' format (-H odc option)
  - adjust warnings.patch


author: Peter Vrabec <pvrabec@redhat.com> 2.6-12
changelog:
  - fix warn_if_file_changed() and set exit code to #1 when 
    cpio fails to store file > 4GB (#183224)


author: Peter Vrabec <pvrabec@redhat.com> 2.6-8
changelog:
  - fix large file support, archive >4GiB, archive members <4GiB (#160056)
  - fix race condition holes, use mode 0700 for dir creation


author: Jeff Johnson <jbj@redhat.com> 2.5-1
changelog:
  - update 2.5, restack and consolidate patches.
  - don't apply (but include for now) freebsd and #56346 patches.
  - add url (#54598).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - revert the stdout patch (#3358), restoring original GNU cpio behavior
    (#6376, #7538), the patch was dumb.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - fix infinite loop unpacking empty files with hard links (#4208).
  - stdout should contain progress information (#3358).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - Fiddle bindir/libexecdir to get RH install correct.
  - Don't include /sbin/rmt -- use the rmt from dump package.
  - Don't include /bin/mt -- use the mt from mt-st package.
  - Add prereq's


author: Remi Collet <rcollet@redhat.com> - 5.4.16-47
changelog:
  - fix stack-buffer-overflow while parsing HTTP response CVE-2018-7584
  - fix out-of-bounds read in base64_decode_xmlrpc CVE-2019-9024
  - fix reflected XSS in phar 404 page CVE-2018-5712
  - fix reflected XSS in phar 403 and 404 error pages CVE-2018-10547


author: Remi Collet <rcollet@redhat.com> - 5.4.16-44
changelog:
  - fix php should provide php(httpd) #1215429
  - fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
    default value is "yes", preserving previous behaviour
  - openssl: fix default_socket_timeout does not work with SSL #1378196


author: Remi Collet <rcollet@redhat.com> - 5.4.16-43
changelog:
  - gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
  - gd: Signed Integer Overflow gd_io.c CVE-2016-10168


author: Remi Collet <rcollet@redhat.com> - 5.4.16-41
changelog:
  - gd: fix integer overflow in _gd2GetHeader() resulting in
    heap overflow CVE-2016-5766
  - gd: fix integer overflow in gdImagePaletteToTrueColor()
    resulting in heap overflow CVE-2016-5767
  - mbstring: fix double free in _php_mb_regex_ereg_replace_exec
    CVE-2016-5768


author: Remi Collet <rcollet@redhat.com> - 5.4.16-38
changelog:
  - curl: add options to enable TLS #1291667
  - mysqli: fix segfault in mysqli_stmt::bind_result() when
    link is closed #1096800
  - fpm: fix incorrectly defined SCRIPT_NAME variable when
    using Apache #1138563
  - core: fix segfault when a zend_extension is loaded twice #1289457
  - openssl: change default_md algo from MD5 to SHA1 #1073388
  - wddx: fix segfault in php_wddx_serialize_var #1131979


author: Remi Collet <rcollet@redhat.com> - 5.4.16-35
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4025, CVE-2015-4026, #1213407
  - fileinfo: fix denial of service when processing a crafted
    file #1213442
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - soap: fix type confusion through unserialize #1222538
  - apache2handler: fix pipelined request executed in deinitialized
    interpreter under httpd 2.4 CVE-2015-3330


author: Remi Collet <rcollet@redhat.com> - 5.4.16-34
changelog:
  - fix memory corruption in fileinfo module on big endian
    machines #1082624
  - fix segfault in pdo_odbc on x86_64 #1159892
  - fix segfault in gmp allocator #1154760


author: Remi Collet <rcollet@redhat.com> - 5.4.16-33
changelog:
  - core: use after free vulnerability in unserialize()
    CVE-2014-8142 and CVE-2015-0231
  - core: fix use-after-free in unserialize CVE-2015-2787
  - core: fix NUL byte injection in file name argument of
    move_uploaded_file() CVE-2015-2348
  - date: use after free vulnerability in unserialize CVE-2015-0273
  - enchant: fix heap buffer overflow in enchant_broker_request_dict
    CVE-2014-9705
  - exif: free called on unitialized pointer CVE-2015-0232
  - fileinfo: fix out of bounds read in mconvert CVE-2014-9652
  - gd: fix buffer read overflow in gd_gif_in.c CVE-2014-9709
  - phar: use after free in phar_object.c CVE-2015-2301
  - soap: fix type confusion through unserialize


author: Remi Collet <rcollet@redhat.com> - 5.4.16-29
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Remi Collet <rcollet@redhat.com> - 5.4.16-27
changelog:
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm().
    CVE-2014-2497
  - gd: fix NUL byte injection in file names. CVE-2014-5120
  - fileinfo: fix extensive backtracking in regular expression
    (incomplete fix for CVE-2013-7345). CVE-2014-3538
  - fileinfo: fix mconvert incorrect handling of truncated
    pascal string size. CVE-2014-3478
  - fileinfo: fix cdf_read_property_info
    (incomplete fix for CVE-2012-1571). CVE-2014-3587
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - network: fix segfault in dns_get_record
    (incomplete fix for CVE-2014-4049). CVE-2014-3597


author: Remi Collet <rcollet@redhat.com> - 5.4.16-23
changelog:
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238
  - fileinfo: cdf_check_stream_offset insufficient boundary
    check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check
    CVE-2014-3480
  - fileinfo: cdf_read_short_sector insufficient boundary
    check. CVE-2014-0207
  - fileinfo: cdf_read_property_info insufficient boundary
    check. CVE-2014-3487
  - fileinfo: fix extensive backtracking CVE-2013-7345
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - core: fix heap-based buffer overflow in DNS TXT record
    parsing. CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage
    type confusion flaw. CVE-2014-3515


author: Remi Collet <rcollet@redhat.com> - 5.4.16-19
changelog:
  - fix memory leak introduce in patch for CVE-2014-1943
  - fix heap-based buffer over-read in DateInterval CVE-2013-6712


author: Remi Collet <rcollet@redhat.com> - 5.4.16-4
changelog:
  - improve mod_php, pgsql and ldap description
  - add provides php(pdo-abi) for consistency with php(api) and php(zend-abi)
  - use %__isa_bits instead of %__isa in ABI suffix


author: Remi Collet <rcollet@redhat.com> 5.4.16-1
changelog:
  - update to 5.4.16
  - switch systemd unit to Type=notify
  - patch for upstream Bug #64915 error_log ignored when daemonize=0
  - patch for upstream Bug #64949 Buffer overflow in _pdo_pgsql_error
  - patch for upstream bug #64960 Segfault in gc_zval_possible_root
  - add version to "Obsoletes"
  - own /usr/share/fpm


author: Remi Collet <rcollet@redhat.com> 5.4.13-1
changelog:
  - update to 5.4.13
  - security fix for CVE-2013-1643
  - Hardened build (links with -z now option)
  - Remove %config from /etc/rpm/macros.php


author: Remi Collet <remi@fedoraproject.org> 5.4.12-1
changelog:
  - update to 5.4.12
  - security fix for CVE-2013-1635
  - enable tokyocabinet dba handler
  - upstream patch (5.4.13) to fix dval to lval conversion
    https://bugs.php.net/64142
  - upstream patch (5.4.13) for 2 failed tests
  - fix buit-in web server on ppc64 (fdset usage)
    https://bugs.php.net/64128


author: Remi Collet <rcollet@redhat.com> 5.4.9-0.1.RC1
changelog:
  - update to 5.4.9RC1
  - improves php.conf (use FilesMatch + SetHandler)
  - improves filter (httpd module)
  - apply ldap_r patch on fedora >= 18 only


author: Remi Collet <rcollet@redhat.com> 5.4.8-6
changelog:
  - clarify Licenses
  - missing provides xmlreader and xmlwriter
  - modernize spec
  - change php embedded library soname version to 5.4


author: Remi Collet <remi@fedoraproject.org> 5.4.8-1
changelog:
  - update to 5.4.8
  - define both session.save_handler and session.save_path
  - fix possible segfault in libxml (#828526)
  - php-fpm: create apache user if needed
  - use SKIP_ONLINE_TEST during make test
  - php-devel requires pcre-devel and php-cli (instead of php)


author: Remi Collet <remi@fedoraproject.org> 5.4.7-9
changelog:
  - php-fpm: enable PrivateTmp
  - php-fpm: new systemd macros (#850268)
  - php-fpm: add upstream patch for startup issue (#846858)


author: Remi Collet <rcollet@redhat.com> 5.4.7-8
changelog:
  - systemd integration, https://bugs.php.net/63085
  - no odbc call during timeout, https://bugs.php.net/63171
  - check sqlite3_column_table_name, https://bugs.php.net/63149


author: Remi Collet <remi@fedoraproject.org> 5.4.4-1
changelog:
  - update to 5.4.4 (CVE-2012-2143, CVE-2012-2386)
  - use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d
  - use /run/php-fpm instead of /var/run/php-fpm


author: Remi Collet <remi@fedoraproject.org> 5.4.0-5
changelog:
  - fix Loadmodule with MPM event (use ZTS if not MPM worker)
  - split conf.d/php.conf + conf.modules.d/10-php.conf with httpd 2.4


author: Remi Collet <remi@fedoraproject.org> 5.4.0-0.3.RC7
changelog:
  - update to PHP 5.4.0RC7
  - provides env file for php-fpm (#784770)
  - add patch to use system libzip (thanks to spot)
  - don't provide INSTALL file


author: Remi Collet <remi@fedoraproject.org> 5.3.8-3
changelog:
  - revert is_a() to php <= 5.3.6 behavior (from upstream)
    with new option (allow_string) for new behavior


author: Remi Collet <remi@fedoraproject.org> 5.3.8-2
changelog:
  - add mysqlnd sub-package
  - drop patch4, use --libdir to use /usr/lib*/php/build
  - add patch to redirect mysql.sock (in mysqlnd)


author: Remi Collet <Fedora@famillecollet.com> 5.3.2-1
changelog:
  - PHP 5.3.2 Released!
  - remove mime_magic option (now provided by fileinfo, by emu)
  - add patch for http://bugs.php.net/50578
  - remove patch for libedit (upstream)
  - add runselftest option to allow build without test suite


author: Remi Collet <Fedora@famillecollet.com> 5.3.1-1
changelog:
  - update to 5.3.1
  - remove openssl patch (merged upstream)
  - add provides for php-pecl-json
  - add prod/devel php.ini in doc


author: Joe Orton <jorton@redhat.com> 5.3.0-2
changelog:
  - update to v5 of systzdata patch; parses zone.tab and extracts
    timezone->{country-code,long/lat,comment} mapping table


author: Remi Collet <Fedora@famillecollet.com> 5.3.0-1
changelog:
  - update to 5.3.0
  - remove ncurses, dbase, mhash extensions
  - add enchant, sqlite3, intl, phar, fileinfo extensions
  - raise sqlite version to 3.6.0 (for sqlite3, build with --enable-load-extension)
  - sync with upstream "production" php.ini


author: Joe Orton <jorton@redhat.com> 5.2.8-9
changelog:
  - add recode support, -recode subpackage (#106755)
  - add -zts subpackage with ZTS-enabled build of httpd SAPI
  - adjust php.conf to use -zts SAPI build for worker MPM


author: Joe Orton <jorton@redhat.com> 5.2.8-4
changelog:
  - move wddx to php-xml, build curl shared in -common
  - remove BR for expat-devel, bogus configure option


author: Joe Orton <jorton@redhat.com> 5.2.6-6
changelog:
  - move gd_README to php-gd
  - update to r4 of systzdata patch; introduces a default timezone
    name of "System/Localtime", which uses /etc/localtime (#469532)


author: Joe Orton <jorton@redhat.com> 5.2.6-3
changelog:
  - update to 5.2.6
  - sync default php.ini with upstream
  - drop extension_dir from default php.ini, rely on hard-coded
    default, to make php-common multilib-safe (#455091)
  - update to r3 of systzdata patch


author: Joe Orton <jorton@redhat.com> 5.2.3-3
changelog:
  - add mcrypt, mhash, tidy, mssql subpackages (Dmitry Butskoy)
  - enable dbase extension and package in -common


author: Joe Orton <jorton@redhat.com> 5.2.0-10
changelog:
  - bump default memory_limit to 32M (#220821)
  - mark config files noreplace again (#174251)
  - drop trailing dots from Summary fields
  - use standard BuildRoot
  - drop libtool15 patch (#226294)


author: Joe Orton <jorton@redhat.com> 5.2.0-9
changelog:
  - add php(api), php(zend-abi) provides (#221302)
  - package /usr/share/php and append to default include_path (#225434)


author: Joe Orton <jorton@redhat.com> 5.2.0-5
changelog:
  - build json and zip shared, in -common (Remi Collet, #215966)
  - obsolete php-json and php-pecl-zip
  - build readline extension into /usr/bin/php* (#210585)
  - change module subpackages to require php-common not php (#177821)


author: Joe Orton <jorton@redhat.com> 5.2.0-4
changelog:
  - provide php-zend-abi (#212804)
  - add /etc/rpm/macros.php exporting interface versions
  - synch with upstream recommended php.ini


author: Joe Orton <jorton@redhat.com> 5.2.0-3
changelog:
  - update to 5.2.0 (#213837)
  - php-xml provides php-domxml (#215656)
  - fix php-pdo-abi provide (#214281)


author: Joe Orton <jorton@redhat.com> 5.1.4-8
changelog:
  - Provide php-posix (#194583)
  - only provide php-pcntl from -cli subpackage
  - add missing defattr's (thanks to Matthias Saou)


author: Joe Orton <jorton@redhat.com> 5.1.4-5
changelog:
  - provide mod_php (#187891)
  - provide php-cli (#192196)
  - use correct LDAP fix (#181518)
  - define _GNU_SOURCE in php_config.h and leave it defined
  - drop (circular) dependency on php-pear


author: Joe Orton <jorton@redhat.com> 5.1.2-5
changelog:
  - provide php-api (#183227)
  - add provides for all builtin modules (Tim Jackson, #173804)
  - own %{_libdir}/php/pear for PEAR packages (per #176733)
  - add obsoletes to allow upgrade from FE4 PDO packages (#181863)


author: Joe Orton <jorton@redhat.com> 5.1.1-2
changelog:
  - update to 5.1.1
  - remove pear subpackage
  - enable pdo extensions (php-pdo subpackage)
  - remove non-standard conditional module builds
  - enable xmlreader extension


author: Joe Orton <jorton@redhat.com> 5.0.5-3
changelog:
  - update to 5.0.5
  - add fix for upstream #34435
  - devel: require autoconf, automake (#159283)
  - pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1
  - fix imagettftext et al (upstream, #161001)


author: Joe Orton <jorton@redhat.com> 5.0.4-9
changelog:
  - build simplexml_import_dom even with shared dom (#156434)
  - prevent truncation of copied files to ~2Mb (#155916)
  - install /usr/bin/php from CLI build alongside CGI
  - enable sysvmsg extension (#142988)


author: Joe Orton <jorton@redhat.com> 5.0.4-7
changelog:
  - split out dba and bcmath extensions into subpackages
  - BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)
  - pear: update to DB-1.7.6
  - enable FastCGI support in /usr/bin/php-cgi (#149596)


author: Joe Orton <jorton@redhat.com> 5.0.4-6
changelog:
  - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi,
    built with the CGI SAPI (thanks to Edward Rudd, #137704)
  - add php(1) man page for CLI
  - fix more test cases to use -n when invoking php


author: Joe Orton <jorton@redhat.com> 5.0.4-4
changelog:
  - bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP
  - snmp: disable MSHUTDOWN function to prevent error_log noise (#153988)
  - mysqli: add fix for crash on x86_64 (Georg Richter, upstream #32282)


author: Joe Orton <jorton@redhat.com> 5.0.4-1
changelog:
  - update to 5.0.4 (#153068)
  - add .phps AddType to php.conf (#152973)
  - better gcc4 fix for libxmlrpc


author: Joe Orton <jorton@redhat.com> 5.0.3-5
changelog:
  - BuildRequire mysql-devel >= 4.1
  - don't mark php.ini as noreplace to make upgrades work (#152171)
  - fix subpackage descriptions (#152628)
  - fix memset(,,0) in Zend (thanks to Dave Jones)
  - fix various compiler warnings in Zend


author: Joe Orton <jorton@redhat.com> 5.0.3-4
changelog:
  - package mysqli extension in php-mysql
  - really enable pcntl (#142903)
  - don't build with --enable-safe-mode (#148969)
  - use "Instant Client" libraries for oci8 module (Kai Bolay, #149873)


author: Joe Orton <jorton@redhat.com> 5.0.3-2
changelog:
  - install the ext/gd headers (#145891)
  - enable pcntl extension in /usr/bin/php (#142903)
  - add libmbfl array arithmetic fix (dcb314@hotmail.com, #143795)
  - add BuildRequire for recent pcre-devel (#147448)


author: Joe Orton <jorton@redhat.com> 5.0.3-1
changelog:
  - update to 5.0.3 (thanks to Robert Scheck et al, #143101)
  - enable xsl extension (#142174)
  - package both the xsl and dom extensions in php-xml
  - enable soap extension, shared (php-soap package) (#142901)
  - add patches from upstream 5.0 branch:
   * Zend_strtod.c compile fixes
   * correct php_sprintf return value usage


author: Joe Orton <jorton@redhat.com> 5.0.2-7
changelog:
  - truncate changelog at 4.3.1-1
  - merge from 4.3.x package:
   - enable mime_magic extension and Require: file (#130276)


author: Joe Orton <jorton@redhat.com> 5.0.2-5
changelog:
  - fix phpize installation for lib64 platforms
  - add fix for segfault in variable parsing introduced in 5.0.2


author: Joe Orton <jorton@redhat.com> 5.0.2-4
changelog:
  - update to 5.0.2 (#127980)
  - build against mysqlclient10-devel
  - use new RTLD_DEEPBIND to load extension modules
  - drop explicit requirement for elfutils-devel
  - use AddHandler in default conf.d/php.conf (#135664)
  - "fix" round() fudging for recent gcc on x86
  - disable sqlite pending audit of warnings and subpackage split


author: Joe Orton <jorton@redhat.com> 5.0.1-1
changelog:
  - update to 5.0.1
  - only build shared modules once
  - put dom extension in php-dom subpackage again
  - move extension modules into %{_libdir}/php/modules
  - don't use --with-regex=system, it's ignored for the apache* SAPIs


author: Tom Callaway <tcallawa@redhat.com>
changelog:
  - bump to 5.0.0
  - add patch to prevent clobbering struct re_registers from regex.h
  - remove domxml references, replaced with dom now built-in
  - fix php.ini to refer to php5 not php4


author: Ville Skyttä <ville.skytta at iki.fi> - 0.2.8.4-18
changelog:
  - Split libwmflite (WMF parser) into -lite subpackage (#432651).
  - Build with dependency tracking disabled.
  - Convert docs to UTF-8.


author: Caolan McNamara <caolanm@redhat.com> 0.2.8.4-16
changelog:
  - I wrote it and still had to check the headers to see if I had
    cut and pasted "and later" into then


author: Caolan McNamara <caolanm@redhat.com> 0.2.8.4-1
changelog:
  - get patches merged upstream
  - drop integrated libwmf-0.2.8.3-warnings.patch
  - drop integrated libwmf-0.2.8.3-noextras.patch
  - drop integrated libwmf-0.2.8.3-rh154813.patch


author: Tomas Smetana <tsmetana@redhat.com> - 2.8.0-6
changelog:
  - fix #831336: fix broken menus; patch backported from upstream SVN revision
    1375 by Manfred Spraul


author: Mike A. Harris <mharris@redhat.com> 2.4.0-3
changelog:
  - Added "Requires: libGL-devel libGLU-devel" to fix bug (#179464)
  - Change file based GL header build dep to BuildRequires: libGL-devel


author: Mike A. Harris <mharris@redhat.com> 2.4.0-1
changelog:
  - Updated to freeglut-2.4.0
  - Removed unneeded patches:
    - freeglut-2.2.0-gcc4-fix-invalid-lvalue-in-assignment-cvsps-392-393.patch
  - Use "-p /sbin/ldconfig" in post/postun scripts instead of a separate script.


author: Mike A. Harris <mharris@redhat.com> 2.2.0-16
changelog:
  - Added freeglut-2.2.0-gcc4-fix-invalid-lvalue-in-assignment-cvsps-392-393.patch
    to fix "invalid lvalue in assignment" bugs reported by gcc 4
  - Added "-Wall" to CFLAGS in specfile.


author: Mike A. Harris <mharris@redhat.com> 2.2.0-11
changelog:
  - Updated "Obsoletes: glut" to be "Obsoletes: glut <= 3.7" and
    "Obsoletes: glut-devel" to be "Obsoletes: glut-devel <= 3.7" as per
    suggestion from Matthias Saou in comment #14 of bug (#107228)


author: Mike A. Harris <mharris@redhat.com> 2.2.0-10
changelog:
  - Initial Red Hat packaging created by taking the ATrpms src.rpm package from
    http://tinyurl.com/2goog as suggested in bugzilla bug (#107228)
  - Bumped the Release field to "10" so our package is newer when people
    upgrade to it, as requested in bug (#107228)
  - Removed redundant version/release macros from top of specfile
  - Versioned buildroot directory
  - Add --enable-warnings arg to ./configure script
  - Add HTML documentation to main package
  - Made "glut" virtual provides be "glut = 3.7"
  - Do not include *.la files


author: Mike A. Harris <mharris@www.linux.org.uk> 1.3-0.20020125.2
changelog:
  - Oddly, when I build this on my workstation, it only builds static libs, but
    when I build it in the buildsystem it builds shared and static libs.  Must
    be a twilight zone thing going on.  Add shared libs to file lists.


author: Mike A. Harris <mharris@www.linux.org.uk> 1.3-0.20020125.1
changelog:
  - Added -L/usr/X11R6/%{_lib} configure script invocation and CFLAGS so lib64
    is treated properly on x86_64/ppc64/s390x architectures


author: Michal Nowak <mnowak@redhat.com> - 0.3.2-1
changelog:
  - 0.3.2
  - remove rpath (x86-64)
  - xcb_keysyms: remove xcb_lookup_t
  - Revert "keysyms: use xcb_key_lookup_t type for col paramter"
  - temporary disabled %check due to RPATH regression


author: Michal Nowak <mnowak@redhat.com> - 0.2.1-2
changelog:
  - new build deps: gperf, pkgconfig, libxcb, m4, xorg-x11-proto-devel
  - not installing *.a files anymore
  - configure with --with-pic


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.22-1
changelog:
  - Show correct disabled resource count in status display
  - Run-time option for Pacemaker Remote bind address
  - Avoid restart loop when migration is left dangling
  - Improve help for clean-up option
  - Do not overweight group colocation scores
  - Rebase on upstream 1.1.22+63d2d79
  - Resolves: rhbz#1458953
  - Resolves: rhbz#1743373
  - Resolves: rhbz#1757951
  - Resolves: rhbz#1758969
  - Resolves: rhbz#1760669
  - Resolves: rhbz#1792492


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.21-3
changelog:
  - Avoid invalid transition when guest node's host is unclean but can't be fenced
  - Resolves: rhbz#1755659


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.21-1
changelog:
  - Recover from quiesced DC disk
  - Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
  - Default serialized order constraints to symmetrical=false
  - Avoid fence loops due to incorrect Pacemaker Remote ordering
  - Default concurrent-fencing to true
  - Harden GnuTLS priorities
  - Rebase on upstream 1.1.21 final version
  - Resolves: rhbz#1596125
  - Resolves: rhbz#1625671
  - Resolves: rhbz#1672225
  - Resolves: rhbz#1704870
  - Resolves: rhbz#1710422
  - Resolves: rhbz#1727280
  - Resolves: rhbz#1731189


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-4
changelog:
  - Update security patches
  - Resolves: rhbz#1694556
  - Resolves: rhbz#1694559
  - Resolves: rhbz#1694907


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-3
changelog:
  - Support more than 64KB of fence agent output
  - Avoid unnecessary recovery of group member
  - Improve IPC clients' authentication of servers (CVE-2018-16877)
  - Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
  - Fix use-after-free with potential information disclosure (CVE-2019-3885)
  - Resolves: rhbz#1549366
  - Resolves: rhbz#1609453
  - Resolves: rhbz#1694556
  - Resolves: rhbz#1694559
  - Resolves: rhbz#1694907


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-2
changelog:
  - Assume unprivileged ACL if unable to get user information from host
  - Delay 2 seconds before re-attempting a failed node attribute write
  - SNMP alert sample script now sends all OIDs with every alert
  - Recover dependent resources correctly with asymmetric ordering
  - Rebase on upstream 1.1.20 final version
  - Resolves: rhbz#1596125
  - Resolves: rhbz#1597695
  - Resolves: rhbz#1608979
  - Resolves: rhbz#1628966
  - Resolves: rhbz#1644864


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.20-1
changelog:
  - pcs status now shows when a standby node still has active resources
  - Allow clean-up of guest nodes and bundles without unmanaging first
  - pcs status now shows pending and failed fence actions by default
  - Improve pcs status display when disconnected from cluster
  - Ensure node attributes are recorded if attrd writer is shutting down
  - Synchronize fencing history across all nodes
  - Add stonith_admin option to clear fencing history
  - Don't schedule unneeded bundle actions when connection is on different node
  - Allow use of sbd in clusters with guest nodes and bundles
  - Schedule bundle clone notifications correctly when connection is moving
  - Rebase on upstream 1.1.20-rc1 version
  - Avoid unneeded resource restarts when remote connection fails to start
  - Allow crm_resource --move to work when a previous move had a lifetime
  - Wait for all replies when refreshing a resource
  - Don't schedule clone notifications for a stopped bundle
  - Allow option to crm_resource --clear to clear only expired constraints
  - Fix result reporting when cleanup is done while an operation is in-flight
  - Resolves: rhbz#1419548
  - Resolves: rhbz#1448467
  - Resolves: rhbz#1461964
  - Resolves: rhbz#1486869
  - Resolves: rhbz#1535221
  - Resolves: rhbz#1555938
  - Resolves: rhbz#1595422
  - Resolves: rhbz#1627948
  - Resolves: rhbz#1638593
  - Resolves: rhbz#1644076
  - Resolves: rhbz#1644864
  - Resolves: rhbz#1648507
  - Resolves: rhbz#1648620
  - Resolves: rhbz#1652053
  - Resolves: rhbz#1652752
  - Resolves: rhbz#1658650
  - Resolves: rhbz#1665343


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-7
changelog:
  - Shutdown corosync locally if fenced
  - Count start failure once
  - Resolves: rhbz#1448221
  - Resolves: rhbz#1549576


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-4
changelog:
  - Fix srpm build on ppc64le systems with libservicelog-devel, OpenIPMI-devel
  - Resolves: rhbz#1478451


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-2
changelog:
  - Ensure resource agent meta-data actions can get local node name
  - Do not record pending clone notifications in CIB
  - Resolves: rhbz#1374175
  - Resolves: rhbz#1570130


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.19-1
changelog:
  - Rebase to upstream 29ac12ad21f73524f69c0580798e07cdf1fe3fa0 (1.1.19-rc1)
  - Allow crm_node to work on Pacemaker Remote nodes
  - Implement new --validate option to stonith_admin
  - Support .path, .mount, and .timer systemd unit files as resources
  - Handle INFINITY fail count correctly in crm_failcount
  - Resolves: rhbz#1374175
  - Resolves: rhbz#1434936
  - Resolves: rhbz#1562255
  - Resolves: rhbz#1590483
  - Resolves: rhbz#1591045


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-13
changelog:
  - Pull latest upstream 1.1 branch fixes
  - Resolves: rhbz#1478451
  - Resolves: rhbz#1501505
  - Resolves: rhbz#1514492
  - Resolves: rhbz#1550829
  - Resolves: rhbz#1564536
  - Resolves: rhbz#1576148
  - Resolves: rhbz#1577300


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-12
changelog:
  - Pull in latest fixes from upstream 1.1 branch
  - Build for aarch64
  - Resolves: rhbz#1422602
  - Resolves: rhbz#1463015
  - Resolves: rhbz#1469255
  - Resolves: rhbz#1519379
  - Resolves: rhbz#1543278
  - Resolves: rhbz#1545449
  - Resolves: rhbz#1550829
  - Resolves: rhbz#1561617
  - Resolves: rhbz#1562255
  - Resolves: rhbz#1565187
  - Resolves: rhbz#1568593
  - Resolves: rhbz#1570130


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-10
changelog:
  - Always trigger transition when quorum changes
  - Match clone names correctly with crm_resource --cleanup
  - Fix pcs resource --wait timeout when bundles are used
  - Observe colocation constraints correctly with bundles in master role
  - Resolves: rhbz#1464068
  - Resolves: rhbz#1508350
  - Resolves: rhbz#1519812
  - Resolves: rhbz#1527072


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-7
changelog:
  - Avoid node attribute write delay when corosync.conf has only IP addresses
  - Fix regressions in "pcs resource cleanup" behavior
  - Restore ordering of unfencing before fence device starts
  - Ensure --wait options work when bundles are in use
  - Fix possible invalid transition with bundle ordering constraints
  - Resolves: rhbz#1454960
  - Resolves: rhbz#1508350
  - Resolves: rhbz#1517796
  - Resolves: rhbz#1519812
  - Resolves: rhbz#1522822


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-6
changelog:
  - Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
  - If on-fail=ignore, migration-threshold should also be ignored
  - Resolves: rhbz#1474428
  - Resolves: rhbz#1507344


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-5
changelog:
  - Properly clean up primitive inside bundle
  - Scalability improvements
  - Resolves: rhbz#1499217
  - Resolves: rhbz#1508373


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-4
changelog:
  - Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
  - Resolves: rhbz#1381754
  - Resolves: rhbz#1474428
  - Resolves: rhbz#1499217
  - Resolves: rhbz#1508373


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-2
changelog:
  - Rebase to upstream 5cccc41c95d6288eab27d93901b650b071f976dc (1.1.18-rc2)
  - Default record-pending to true
  - Resolves: rhbz#1323546
  - Resolves: rhbz#1376556
  - Resolves: rhbz#1382364
  - Resolves: rhbz#1461976
  - Resolves: rhbz#1474428
  - Resolves: rhbz#1500509
  - Resolves: rhbz#1501903
  - Resolves: rhbz#1501924


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.18-1
changelog:
  - Rebase to upstream 1cb712c5369c98f03d42bcf8648cacd86a5f48f7 (1.1.18-rc1)
  - Resolves: rhbz#1298581
  - Resolves: rhbz#1394418
  - Resolves: rhbz#1427648
  - Resolves: rhbz#1454933
  - Resolves: rhbz#1454957
  - Resolves: rhbz#1454960
  - Resolves: rhbz#1462253
  - Resolves: rhbz#1464068
  - Resolves: rhbz#1465519
  - Resolves: rhbz#1470262
  - Resolves: rhbz#1471506
  - Resolves: rhbz#1474428
  - Resolves: rhbz#1474463
  - Resolves: rhbz#1482278
  - Resolves: rhbz#1489728
  - Resolves: rhbz#1489735


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-10
changelog:
  - Fix issues when running bundles on Pacemaker Remote nodes
  - Reap orphaned processes when running Pacemaker Remote as pid 1
  - Order remote actions after remote connection recovery
    (fixes regression in RHEL 7.3)
  - Avoid local resource manager daemon (lrmd) crash when an
    in-flight systemd operation is cancelled
  - Resolves: rhbz#1432722
  - Resolves: rhbz#1441603
  - Resolves: rhbz#1448772
  - Resolves: rhbz#1451170


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-9
changelog:
  - Allow cleanup of guest nodes when guest is unmanaged
  - Allow bundles to run on Pacemaker Remote nodes
  - Handle slow IPC clients better
  - Update crmd throttle information when CPUs are hot-plugged in
  - Order pacemaker systemd unit after resource-agents-deps target
  - Resolves: rhbz#1303742
  - Resolves: rhbz#1432722
  - Resolves: rhbz#1435067
  - Resolves: rhbz#1444728
  - Resolves: rhbz#1446669


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-7
changelog:
  - Avoid fencing old DC if it is shutting down while another node is joining
  - Improve crmd's handling of repeated fencing failures
  - Correct behavior when guest created by bundle has a node attribute
  - Show Red Hat bugzilla URL rather than upstream when generating cluster report
  - Resolves: rhbz#1430112
  - Resolves: rhbz#1432722


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-5
changelog:
  - Keep man pages compressed
  - Bugfixes for container bundles
  - Resolves: rhbz#1410886
  - Resolves: rhbz#1432722


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-4
changelog:
  - Add support for container bundles
  - Treat systemd reloading state as monitor success
  - Resolves: rhbz#1432722
  - Resolves: rhbz#1436696


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-3
changelog:
  - Avoid hang when shutting down unmanaged remote node connections
  - Get correct node name when crm_node or crm_attribute is run on remote node
  - Ignore action when configured as a stonith device parameter
  - Include recent upstream bug fixes
  - Resolves: rhbz#1388489
  - Resolves: rhbz#1410886
  - Resolves: rhbz#1417936
  - Resolves: rhbz#1421700


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-2
changelog:
  - Avoid grep crashes in crm_report when looking for system logs
  - Properly ignore version with crm_diff --no-version
  - Process guest node fencing properly
  - Ensure filename is valid before using
  - Build for ppc64le
  - Resolves: rhbz#1288261
  - Resolves: rhbz#1289662
  - Resolves: rhbz#1383462
  - Resolves: rhbz#1405635
  - Resolves: rhbz#1412309


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.16-1
changelog:
  - Rebase to upstream 94ff4df51a55cc30d01843ea11b3292bac755432 (1.1.16)
  - Resolves: rhbz#1374777
  - Resolves: rhbz#1378817
  - Resolves: rhbz#1410886


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-11
changelog:
  - Sanitize readable CIB output collected by crm_report
  - Document crm_report --sos-mode option
  - Speed up crm_report on Pacemaker Remote nodes
  - Avoid sbd fencing when upgrading pacemaker_remote package
  - Resolves: rhbz#1219188
  - Resolves: rhbz#1235434
  - Resolves: rhbz#1323544
  - Resolves: rhbz#1372009


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-10
changelog:
  - Only clear remote node operation history on startup
  - Resend a lost shutdown request
  - Correctly detect and report invalid configurations
  - Don't include manual page for resource agent that isn't included
  - Resolves: rhbz#1288929
  - Resolves: rhbz#1310486
  - Resolves: rhbz#1352039


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-8
changelog:
  - Quote timestamp-format correctly in alert_snmp.sh.sample
  - Unregister CIB callbacks correctly
  - Print resources section heading consistently in crm_mon output
  - Resolves: rhbz#773656
  - Resolves: rhbz#1361533


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-3
changelog:
  - Rebase to upstream e174ec84857e087210b9dacee3318f8203176129 (1.1.15)
  - Resolves: rhbz#1304771
    Resolves: rhbz#1303765
    Resolves: rhbz#1327469
    Resolves: rhbz#1337688
    Resolves: rhbz#1345876
    Resolves: rhbz#1346726


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-2
changelog:
  - Rebase to upstream 25920dbdbc7594fc944a963036996f724c63a8b8 (1.1.15-rc4)
  - Resolves: rhbz#1304771
    Resolves: rhbz#773656
    Resolves: rhbz#1240330
    Resolves: rhbz#1281450
    Resolves: rhbz#1286316
    Resolves: rhbz#1287315
    Resolves: rhbz#1323544


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-1
changelog:
  - Rebase to upstream 2c148ac30dfcc2cfb91dc367ed469b6f227a8abc (1.1.15-rc3+)
  - Resolves: rhbz#1304771
    Resolves: rhbz#1040685
    Resolves: rhbz#1219188
    Resolves: rhbz#1235434
    Resolves: rhbz#1268313
    Resolves: rhbz#1284069
    Resolves: rhbz#1287868
    Resolves: rhbz#1288929
    Resolves: rhbz#1312094
    Resolves: rhbz#1314157
    Resolves: rhbz#1321711
    Resolves: rhbz#1338623


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.14-11
changelog:
  - Rebase to upstream 2cccd43d6b7f2525d406251e14ef37626e29c51f (1.1.14+)
  - Resolves: rhbz#1304771
    Resolves: rhbz#1207388
    Resolves: rhbz#1240330
    Resolves: rhbz#1281450
    Resolves: rhbz#1284069
    Resolves: rhbz#1286316
    Resolves: rhbz#1287315
    Resolves: rhbz#1287868
    Resolves: rhbz#1288929
    Resolves: rhbz#1303765
  - This also updates the packaging to follow upstream more closely,
    most importantly moving some files from the pacemaker package to
    pacemaker-cli (including XML schemas, SNMP MIB, attrd_updater command,
    most ocf:pacemaker resource agents, and related man pages),
    and deploying /etc/sysconfig/crm_mon.


author: David Vossel <dvossel@redhat.com> - 1.1.12-19
changelog:
  - Imply stop on actions within containers during host fencing
  - acl correctly implement the reference acl direct

    Resolves: rhbz#1117341


author: David Vossel <dvossel@redhat.com> - 1.1.12-18
changelog:
  - clone order constraint require-all option.
  - fix memory leaks in crmd and pacemakerd

    Resolves: rhbz#1176210


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-13
changelog:
  - Update patch level to upstream a433de6
  - Ensure we wait for long running systemd stop operations to complete
    Resolves: rhbz#1165423


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-11
changelog:
  - Update patch level to upstream 7dd9022
  - Ensure all internal caches are updated when nodes are removed from the cluster
    Resolves: rhbz#1162727


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-10
changelog:
  - Update patch level to upstream 98b6688
  - Support an intelligent resource restart operation
  - Exclusive discovery implies running the resource is only possible on the listed nodes


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-9
changelog:
  - Update patch level to upstream fb94901
  - Prevent blocking by performing systemd reloads asynchronously


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-5
changelog:
  - Update patch level to upstream 031e46c
    - Prevent glib assert triggered by timers being removed from mainloop more than once 
    - Allow rsc discovery to be disabled in certain situations
    - Allow remote-nodes to be placed in maintenance mode
    - Improved sbd integration


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-32
changelog:
  - Fix: lrmd: Handle systemd reporting 'done' before a resource is actually stopped
      Resolves: rhbz#1111747


author: David Vossel <dvossel@redhat.com> - 1.1.10-31
changelog:
  - fencing: Fence using all required devices
  - fencing: Execute all required fencing devices regardless of what topology level they are at
  - fencing: default to 'off' when agent does not advertise 'reboot' in metadata
      Resolves: rhbz#1078078


author: Andrew Beekhof <abeekhof@redhat.com> 1.1.10-30
changelog:
  - crmd: Do not erase the status section for unfenced nodes
  - crmd: Correctly react to successful unfencing operations
  - crmd: Report unsuccessful unfencing operations
  - crmd: Do not overwrite existing node state when fencing completes
  - fencing: Correctly record which peer performed the fencing operation
  - fencing: Automatically switch from 'list' to 'status' to 'static-list' if those actions are not advertised in the metadata
  - fencing: Filter self-fencing at the peers to allow unfencing to work correctly
  - pengine: Automatically re-unfence a node if the fencing device definition changes
  - pengine: Fencing devices default to only requiring quorum in order to start
  - pengine: Delay unfencing until after we know the state of all resources that require unfencing
  - pengine: Ensure unfencing occurs before fencing devices are (re-)probed
  - pengine: Ensure unfencing only happens once, even if the transition is interrupted
  - pengine: Do not unfence nodes that are offline, unclean or shutting down
  - pengine: Unfencing is based on device probes, there is no need to unfence when normal resources are found active
  - logging: daemons always get a log file, unless explicitly set to configured 'none'
  - lrmd: Expose logging variables expected by OCF agents
  - crm_report: Suppress logging errors after the target directory has been compressed
  - crm_resource: Wait for the correct number of replies when cleaning up resources
      Resolves: rhbz#1078078


author: David Vossel <dvossel@redhat.com> - 1.1.10-28
changelog:
  - pengine: fixes invalid transition caused by clones with more than 10 instances
      Resolves: rhbz#1078504


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.10-27
changelog:
  - crm_resource: Prevent use-of-NULL
  - systemd: Prevent use-of-NULL when determining if an agent exists
  - Fencing: Remove shadow definition and use of variable 'progress'
      Resolves: rhbz#1070916


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-26
changelog:
  - Run automated regression tests after every build
  - Fencing: Send details of stonith_api_time() and stonith_api_kick() to syslog
  - Fencing: Pass the correct options when looking up the history by node name
  - Fencing: stonith_api_time_helper now returns when the most recent fencing operation completed
  - crm_report: Additional dlm detail if dlm_controld is running
  - crmd: Gracefully handle actions that cannot be initiated
  - pengine: Gracefully handle bad values for XML_ATTR_TRANSITION_MAGIC
      Resolves: rhbz#1070916


author: David Vossel <dvossel@redhat.com> - 1.1.10-25
changelog:
  - pengine: cl#5187 - Prevent resources in an anti-colocation from even temporarily running on a same node
      Resolves: rhbz#1069284


author: David Vossel <dvossel@redhat.com> - 1.1.10-24
changelog:
  - controld: handling startup fencing within the controld agent, not the dlm
      Resolves: rhbz#1064519
  - controld: Do not consider the dlm up until the address list is present
      Resolves: rhbz#1067536


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-23
changelog:
  - mcp: Tell systemd not to respawn us if we return 100
  - services: Detect missing agents and permission errors before forking
  - Use native DBus library for systemd support to avoid problematic use of threads
      Resolves: rhbz#720543 (aka. 1057697)


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-20
changelog:
  - Fix: tools: Fixes formatting of remote-nodes in crm_mon and crm_simulate
  - Fix: Corosync: Attempt to retrieve a peers node name if it is not already known
      Resolves: rhbz#720543


author: David Vossel <dvossel@redhat.com> - 1.1.10-19
changelog:
  - Fix: controld: Use the correct variant of dlm_controld for
    corosync-2 clusters

      Resolves: rhbz#1028627


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-17
changelog:
  Resolves: rhbz#720543

  - Fix: core: Do not enabled blackbox for cli tools
  - Fix: Command-line tools should stop after an assertion failure
  - Fix: crmd: Dont add node_state to cib, if we have not seen or fenced this node yet
  - Fix: crmd: Correctly update expected state when the previous DC shuts down
  - Fix: crmd: Cache rsc_info retrieved from lrmd and pacemaker_remoted
  - Fix: crmd: Pad internal lrmd rsc_info and metadata retrieval timeout
  - Fix: crm_attribute: Detect orphaned remote-nodes when setting attributes
  - Fix: crm_mon: Prevent use-of-NULL when ping resources do not define a host list
  - Fix: crm_report: Record the output of the collector
  - Fix: crm_report: Do not print garbage when collecting from the local node
  - Fix: crm_resource: Wait for all replies when cleaning up resources
  - Fix: fencing: Do not broadcast suicide if the on action is being executed
  - Fix: fencing: Allow fencing for node after topology entries are deleted
  - Fix: fencing: Deep copy current topology level list on remote op
  - Fix: lrmd: Correctly cancel monitor actions for lsb/systemd/service resources on cleaning up
  - Fix: pengine: Dont prevent clones from running due to dependant resources
  - Fix: pengine: Probe containers not expected to be up
  - Fix: ipc: Raise the default buffer size to 128k
  - Fix: ipc: Use the higher of the configured buffer size or the default
  - Fix: iso8601: Prevent dates from jumping backwards a day in some timezones
  - Fix: remote: Properly version the remote connection protocol
  - Fix: remote: Handle endian changes between client and server and improve forward compatibility
      Resolves: rhbz#720543


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-16
changelog:
  - Remove unsupported resource agent
  - Log: crmd: Supply arguments in the correct order
  - Fix: crm_report: Correctly redirect error message to /dev/null
  - Fix: Bug rhbz#1011618 - Consistently use 'Slave' as the role for unpromoted master/slave resources
  - Fix: pengine: Location constraints with role=Started should prevent masters from running at all
  - Fix: crm_resource: Observe --master modifier for --move
  - Provide a meaningful error if --master is used for primitives and groups
  - Fix: Fencing: Observe pcmk_host_list during automatic unfencing
      Resolves: rhbz#996576


author: David Vossel <dvossel@redhat.com> - 1.1.10-15
changelog:
  + Fix: crmd: Allow transient attributes to be set on remote-nodes.
    + Fix: pengine: Handle orphaned remote-nodes properly
    + Low: cts: Add RemoteLXC regression test.

    Resolves: rhbz#1006465
    Resolves: rhbz#1006471


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-14
changelog:
  + Fix: xml: Location constraints are allowed to specify a role
    + Bug rhbz#902407 - crm_resource: Handle --ban for master/slave resources as advertised
      Resolves: rhbz#902407


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-13
changelog:
  + Fencing: Support agents that need the host to be unfenced at startup
      Resolves: rhbz#996576
    + crm_report: Collect corosync quorum data
      Resolves: rhbz#839342


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-11
changelog:
  + Fix: systemd: Prevent glib assertion - only call g_error_free() with non-NULL arguments
    + Fix: systemd: Prevent additional assertions in g_error_free
    + Fix: logging: glib CRIT messages should not produce core files by default
    + Doc: controld: Update the description
    + Fix: pengine: Correctly account for the location preferences of things colocated with a group
    + Fix: cib: Correctly log short-form xml diffs
    + Fix: crmd: Correcty update the history cache when recurring ops change their return code
    + Log: pengine: Better indicate when a resource has failed
    + Log: crm_mon: Unmunge the output for failed operations


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-10
changelog:
  + Fix: pengine: Do not re-allocate clone instances that are blocked in the Stopped state
    + Fix: pengine: Do not allow colocation with blocked clone instances


author: Andrew Beekhof <andrew@beekhof.net> Pacemaker-1.1.10-6
changelog:
  - Update source tarball to revision: 368c726 (Pacemaker-1.1.10-rc7)
  - Changesets: 18
  - Diff:       9 files changed, 245 insertions(+), 170 deletions(-)

  - Features added since Pacemaker-1.1.10-rc7
    + crm_resource: Allow options to be set recursively

  - Changes since Pacemaker-1.1.10-rc7
    + Bug cl#5161 - crmd: Prevent memory leak in operation cache
    + cib: Correctly read back archived configurations if the primary is corrupted


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-5
changelog:
  - Streamline spec file

  - Upstream patch for:
    + cman: Only build migration tools for targets that may use them
    + cib: Ensure we set up hacluster's groups in stand-alone mode

  - Update for new upstream tarball: Pacemaker-1.1.10-rc7

    + Bug cl#5157 - Allow migration in the absence of some colocation constraints
    + Bug cl#5168 - Prevent clones from being bounced around the cluster due to location constraints
    + Bug cl#5170 - Correctly support on-fail=block for clones
    + crmd: CID#1036761 Dereference null return value
    + crmd: cl#5164 - Fixes crmd crash when using pacemaker-remote
    + crmd: Ensure operations for cleaned up resources don't block recovery
    + crmd: Prevent messages for remote crmd clients from being relayed to wrong daemons
    + crmd: Properly handle recurring monitor operations for remote-node agent
    + fencing: Correctly detect existing device entries when registering a new one
    + logging: If SIGTRAP is sent before tracing is turned on, turn it on
    + lrmd: Prevent use-of-NULL in client library
    + pengine: cl#5128 - Support maintenance mode for a single node
    + pengine: cl#5164 - Pengine segfault when calculating transition with remote-nodes.
    + pengine: Do the right thing when admins specify the internal resource instead of the clone
    + systemd: Turn off auto-respawning of systemd services when the cluster starts them


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-3
changelog:
  - Update to upstream 838e41e

    + Feature: pengine: Allow active nodes in our current membership to be fenced without quorum
    + Fix: attrd: Fixes deleted attributes during dc election
    + Fix: corosync: Fall back to uname for local nodes
    + Fix: crm_report: Find logs in compressed files
    + Fix: pengine: If fencing is unavailable or disabled, block further recovery for resources that fail to stop
    + Fix: systemd: Ensure we get shut down correctly by systemd


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-2
changelog:
  - Update for new upstream tarball: Pacemaker-1.1.10-rc4

  - Features in Pacemaker-1.1.10-rc4:
    + PE: Display a list of nodes on which stopped anonymous clones are not active instead of meaningless clone IDs
    + crm_error: Add the ability to list and print error symbols
    + crm_resource: Implement --ban for moving resources away from nodes and --clear (replaces --unmove)
    + crm_resource: Support OCF tracing when using --force-(check|start|stop)

  - Changes since Pacemaker-1.1.10-rc1

    + Bug cl#5133 - pengine: Correctly observe on-fail=block for failed demote operation
    + Bug cl#5152 - Correctly clean up fenced nodes during membership changes
    + Bug cl#5153 - Correctly display clone failcounts in crm_mon
    + Bug cl#5154 - Do not expire failures when on-fail=block is present
    + Bug pengine: cl#5155 - Block the stop of resources if any depending resource is unmanaged
    + crm_report: Correctly collect logs when 'uname -n' reports fully qualified names
    + Check for and replace non-printing characters with their octal equivalent while exporting xml text
    + Convert all exit codes to positive errno values
    + Core: Ensure the blackbox is saved on abnormal program termination
    + corosync: Detect the loss of members for which we only know the nodeid
    + corosync: Nodes that can persist in sending CPG messages must be alive afterall
    + crmd: Do not get stuck in S_POLICY_ENGINE if a node we couldn't fence returns
    + crmd: Ensure all membership operations can complete while trying to cancel a transition
    + crmd: Everyone who gets a fencing notification should mark the node as down
    + crmd: Initiate node shutdown if another node claims to have successfully fenced us
    + crm_resource: Gracefully fail when --force-* is attempted for stonith resources
    + fencing: Restore the ability to manually confirm that fencing completed
    + pengine: Correctly handle resources that recover before we operate on them
    + pengine: Ensure per-node resource parameters are used during probes
    + pengine: Implement the rest of get_timet_now() and rename to get_effective_time
    + pengine: Mark unrunnable stop actions as "blocked"
    + pengine: Re-initiate active recurring monitors that previously failed but have timed out
    + xml: Restore the ability to embed comments in the cib


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-1
changelog:
  - Update for new upstream tarball: Pacemaker-1.1.10-rc1
  - Features added since Pacemaker-1.1.8
    + Performance enhancements for supporting 16 node clusters
    + corosync: Use queues to avoid blocking when sending CPG messages
    + ipc: Compress messages that exceed the configured IPC message limit
    + ipc: Use queues to prevent slow clients from blocking the server
    + ipc: Use shared memory by default
    + lrmd: Support nagios remote monitoring
    + lrmd: Pacemaker Remote Daemon for extending pacemaker functionality outside corosync cluster.
    + pengine: Check for master/slave resources that are not OCF agents
    + pengine: Support a 'requires' resource meta-attribute for controlling whether it needs quorum, fencing or nothing
    + pengine: Support for resource containers
    + pengine: Support resources that require unfencing before start

  - Changes since Pacemaker-1.1.8
    + attrd: Correctly handle deletion of non-existant attributes
    + Bug cl#5135 - Improved detection of the active cluster type
    + Bug rhbz#913093 - Use crm_node instead of uname
    + cib: Prevent ordering changes when applying xml diffs
    + cib: Remove text nodes from cib replace operations
    + crmd: Prevent election storms caused by getrusage() values being too close
    + date/time: Bug cl#5118 - Correctly convert seconds-since-epoch to the current time
    + fencing: Attempt to provide more information that just 'generic error' for failed actions
    + fencing: Correctly record completed but previously unknown fencing operations
    + fencing: Correctly terminate when all device options have been exhausted
    + fencing: cov#739453 - String not null terminated
    + fencing: Do not merge new fencing requests with stale ones from dead nodes
    + fencing: Do not start fencing until entire device topology is found or query results timeout.
    + fencing: Do not wait for the query timeout if all replies have arrived
    + fencing: Fix passing of parameters from CMAN containing '='
    + fencing: Fix non-comparison when sorting devices by priority
    + fencing: On failure, only try a topology device once from the remote level.
    + fencing: Only try peers for non-topology based operations once
    + fencing: Retry stonith device for duration of action's timeout period.
    + ipc: Bug cl#5110 - Prevent 100% CPU usage when looking for synchronous replies
    + mcp: Re-attach to existing pacemaker components when mcp fails
    + pengine: Any location constraint for the slave role applies to all roles
    + pengine: Bug cl#5101 - Ensure stop order is preserved for partially active groups
    + pengine: Bug cl#5140 - Allow set members to be stopped when the subseqent set has require-all=false
    + pengine: Bug cl#5143 - Prevent shuffling of anonymous master/slave instances
    + pengine: Bug rhbz#880249 - Ensure orphan masters are demoted before being stopped
    + pengine: Bug rhbz#880249 - Teach the PE how to recover masters into primitives
    + pengine: cl#5025 - Automatically clear failcount for start/monitor failures after resource parameters change
    + pengine: cl#5099 - Probe operation uses the timeout value from the minimum interval monitor by default (#bnc776386)
    + pengine: cl#5111 - When clone/master child rsc has on-fail=stop, insure all children stop on failure.
    + pengine: cl#5142 - Do not delete orphaned children of an anonymous clone
    + pengine: Correctly unpack active anonymous clones
    + pengine: Ensure previous migrations are closed out before attempting another one
    + pengine: rhbz#902459 - Remove rsc node status for orphan resources
    + Replace the use of the insecure mktemp(3) with mkstemp(3)


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-4
changelog:
  - Update for new upstream tarball: 5db5f53

    + High: mcp: Re-attach to existing pacemaker components when pacemakerd fails
    + High: pengine: cl#5111 - When clone/master child rsc has on-fail=stop, insure all children stop on failure.
    + High: Replace the use of the insecure mktemp(3) with mkstemp(3)
    + High: Core: Correctly process XML diff's involving element removal
    + High: PE: Correctly unpack active anonymous clones
    + High: PE: Fix clone_zero() and clone_strip() for single character resource names
    + High: IPC: Bug cl#5110 - Prevent 100% CPU usage when looking for synchronous replies
    + High: PE: Bug cl#5101 - Ensure stop order is preserved for partially active groups
    + High: fencing: On failure, only try a topology device once from the remote level.
    + High: fencing: Retry stonith device for duration of action's timeout period.
    + High: PE: Fix memory leak on processing message (bnc#780224)
    + High: fencing: Support 'on_target' option in fencing device metadata for forcing unfence on target node
    + High: PE: Support resources that require unfencing before start
    + High: PE: Support a 'requires' resource meta-attribute for controlling whether it needs quorum, fencing or nothing
    + High: mcp: Only define HA_DEBUGLOG to avoid agent calls to ocf_log printing everything twice
    + High: fencing: Do not start fencing until entire device topology is found or query results timeout.
    + High: Cluster: Allow cman and corosync 2.0 nodes to use a name other than uname()


author: Andrew Beekhof <andrew@beekhof.net> 1.1.8-1
changelog:
  - Rebuild for upstream 1.1.8 release
  - Documentation disabled pending a functional publican/ImageMagick combination

  - Statistics:
    Changesets: 1019
    Diff:       2107 files changed, 117258 insertions(+), 73606 deletions(-)

  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/master/ChangeLog for full details

    + New IPC implementation from libqb
    + New logging implementation from libqb
    + Quieter - info, debug and trace logs are no longer sent to syslog
    + Dropped dependancy on cluster-glue
    + Config and core directories no longer located in heartbeat directories
    + Support for managing systemd services
    + Rewritten local resource management daemon
    + Version bumps for every shared library due to API cleanups
    + Removes crm shell, install/use pcs shell and GUI instead


author: Andrew Beekhof <andrew@beekhof.net> Pacemaker-1.1.7-1
changelog:
  - Update source tarball to upstream release: Pacemaker-1.1.7
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/master/ChangeLog for details


author: Andrew Beekhof <andrew@beekhof.net> 1.1.7-0.3-7742926.git
changelog:
  - New upstream tarball: 7742926
  - Additional Provides and Obsoletes directives to enable upgrading from heartbeat
  - Rebuild now that the Corosync CFG API has been removed


author: Andrew Beekhof <andrew@beekhof.net> 1.1.7-0.1-bc7c125.git
changelog:
  - New upstream tarball: bc7c125
  - Pre-release 1.1.7 build to deal with the removal of cman and support for corosync plugins
  - Add libqb as a dependancy


author: Andrew Beekhof <andrew@beekhof.net> 1.1.6-2
changelog:
  - Do not build in support for heartbeat, snmp, esmtp by default
  - Create a package for cluster unaware libraries to minimze our
    footprint on non-cluster nodes
  - Better package descriptions


author: Andrew Beekhof <andrew@beekhof.net> 1.1.6-1
changelog:
  - Upstream release of 1.1.6
  - See included ChangeLog file or http://hg.clusterlabs.org/pacemaker/1.1/file/tip/ChangeLog for details

  - Disabled eSMTP and SNMP support.  Painful to configure and rarely used.
  - Created cli sub-package for non-cluster usage


author: Andrew Beekhof <andrew@beekhof.net> 1.1.4-1
changelog:
  - Upstream release of 1.1.4
  - See included ChangeLog file or http://hg.clusterlabs.org/pacemaker/1.1/file/tip/ChangeLog for details


author: Andrew Beekhof <andrew@beekhof.net> - 1.1.3-1
changelog:
  - Upstream release of 1.1.3
    + High: crmd: Use the correct define/size for lrm resource IDs
    + High: crmd: Bug lf#2458 - Ensure stop actions always have the relevant resource attributes
    + High: crmd: Ensure we activate the DC timer if we detect an alternate DC
    + High: mcp: Correctly initialize the string containing the list of active daemons
    + High: mcp: Fix the expansion of the pid file in the init script
    + High: mcp: Tell chkconfig we need to shut down early on
    + High: PE: Bug lf#2476 - Repair on-fail=block for groups and primitive resources
    + High: PE: Do not demote resources because something that requires it can't run
    + High: PE: Rewrite the ordering constraint logic to be simplicity, clarity and maintainability
    + High: PE: Wait until stonith is available, don't fall back to shutdown for nodes requesting termination
    + High: PE: Prevent segfault by ensuring the arguments to do_calculations() are initialized
    + High: stonith: Bug lf#2461 - Prevent segfault by not looking up operations if the hashtable hasn't been initialized yet
    + High: Stonith: Bug lf#2473 - Ensure stonith operations complete within the timeout and are terminated if they run too long
    + High: stonith: Bug lf#2473 - Gracefully handle remote operations that arrive late (after we've done notifications)
    + High: stonith: Bug lf#2473 - Add the timeout at the top level where the daemon is looking for it
    + High: stonith: Bug lf#2473 - Ensure timeouts are included for fencing operations
    + High: Stonith: Use the timeout specified by the user
    + High: Tools: Bug lf#2456 - Fix assertion failure in crm_resource


author: Andrew Beekhof <andrew@beekhof.net> - 1.1.3-0.1-b3cb4f4a30ae.hg
changelog:
  - Pre-release version of 1.1.3
    + High: ais: Bug lf2401 - Improved processing when the peer crmd processes join/leave
    + High: ais: fix list of active processes sent to clients (bnc#603685)
    + High: ais: Move the code for finding uid before the fork so that the child does no logging
    + High: ais: Resolve coverity CONSTANT_EXPRESSION_RESULT defects
    + High: cib: Also free query result for xpath operations that return more than one hit
    + High: cib: Attempt to resolve memory corruption when forking a child to write the cib to disk
    + High: cib: Correctly free memory when writing out the cib to disk
    + High: cib: Fix the application of unversioned diffs
    + High: cib: Remove old developmental error logging
    + High: cib: Restructure the 'valid peer' check for deciding which instructions to ignore
    + High: Core: Bug lf#2401 - Backed out changeset 6e6980376f01
    + High: Core: Correctly unpack HA_Messages containing multiple entries with the same name
    + High: Core: crm_count_member() should only track nodes that have the full stack up
    + High: Core: New developmental logging system inspired by the kernel and a PoC from Lars Ellenberg
    + High: crmd: All nodes should see status updates, not just he DC
    + High: crmd: Allow non-DC nodes to clear failcounts too
    + High: crmd: Base DC election on process relative uptime
    + High: crmd: Bug lf#2439 - cancel_op() can also return HA_RSCBUSY
    + High: crmd: Bug lf#2439 - Handle asynchronous notification of resource deletion events
    + High: crmd: Fix assertion failure when performing async resource failures
    + High: crmd: Fix handling of async resource deletion results
    + High: crmd: Include the action for crm graph operations
    + High: crmd: Make sure the membership cache is accurate after a sucessful fencing operation
    + High: crmd: Make sure we always poke the FSA after a transition to clear any TE_HALT actions
    + High: crmd: Offer crm-level membership once the peer starts the crmd process
    + High: crmd: Only need to request quorum update for plugin based clusters
    + High: crmd: Prevent everyone from loosing DC elections by correctly initializing all relevant variables
    + High: crmd: Prevent segmentation fault
    + High: crmd: several fixes for async resource delete
    + High: mcp: Add missing headers when built without heartbeat support
    + High: mcp: New master control process for (re)spawning pacemaker daemons
    + High: PE: Avoid creating invalid ordering constraints for probes that are not needed
    + High: PE: Bug lf#1959 - Fail unmanaged resources should not prevent other services from shutting down
    + High: PE: Bug lf#2422 - Ordering dependencies on partially active groups not observed properly
    + High: PE: Bug lf#2424 - Use notify oepration definition if it exists in the configuration
    + High: PE: Bug lf#2433 - No services should be stopped until probes finish
    + High: PE: Bug lf#2453 - Enforce clone ordering in the absense of colocation constraints
    + High: PE: Correctly detect when there is a real failcount that expired and needs to be cleared
    + High: PE: Correctly handle pseudo action creation
    + High: PE: Correctly order clone startup after group/clone start
    + High: PE: Fix colocation for interleaved clones
    + High: PE: Fix colocation with partially active groups
    + High: PE: Fix potential use-after-free defect from coverity
    + High: PE: Fix previous merge
    + High: PE: Fix use-after-free in order_actions() reported by valgrind
    + High: PE: Prevent endless loop when looking for operation definitions in the configuration
    + High: Resolve coverity RESOURCE_LEAK defects
    + High: Shell: Complete the transition to using crm_attribute instead of crm_failcount and crm_standby
    + High: stonith: Advertise stonith-ng options in the metadata
    + High: stonith: Correctly parse pcmk_host_list parameters that appear on a single line
    + High: stonith: Map poweron/poweroff back to on/off expected by the stonith tool from cluster-glue
    + High: stonith: pass the configuration to the stonith program via environment variables (bnc#620781)
    + High: Support starting plugin-based Pacemaker clusters with the MCP as well
    + High: tools: crm_report - corosync.conf wont necessarily contain the text 'pacemaker' anymore
    + High: tools: crm_simulate - Resolve coverity USE_AFTER_FREE defect
    + High: Tools: Drop the 'pingd' daemon and resource agent in favor of ocf:pacemaker:ping
    + High: Tools: Fix recently introduced use-of-NULL
    + High: Tools: Fix use-after-free defect from coverity


author: Andrew Beekhof <andrew@beekhof.net> - 1.1.2-2
changelog:
  - Resolves rhbz#602239 - Added patch to documentation so that it passes validation
  - High: Core: Bug lf#2401 - Backed out changeset 6e6980376f01


author: Andrew Beekhof <andrew@beekhof.net> - 1.1.2-1
changelog:
  - Update the tarball from the upstream 1.1.2 release
    + High: ais: Bug lf#2340 - Force rogue child processes to terminate after waiting 2.5 minutes
    + High: ais: Bug lf#2359 - Default expected votes to 2 inside Corosync/OpenAIS plugin
    + High: ais: Bug lf#2359 - expected-quorum-votes not correctly updated after membership change
    + High: ais: Bug rhbz#525552 - Move non-threadsafe calls to setenv() to after the fork()
    + High: ais: Do not count votes from offline nodes and calculate current votes before sending quorum data
    + High: ais: Ensure the list of active processes sent to clients is always up-to-date
    + High: ais: Fix previous commit, actually return a result in get_process_list()
    + High: ais: Fix two more uses of getpwnam() in non-thread-safe locations
    + High: ais: Look for the correct conf variable for turning on file logging
    + High: ais: Need to find a better and thread-safe way to set core_uses_pid. Disable for now.
    + High: ais: Use the threadsafe version of getpwnam
    + High: Core: Bug lf#2414 - Prevent use-after-free reported by valgrind when doing xpath based deletions
    + High: Core: Bump the feature set due to the new failcount expiry feature
    + High: Core: Fix memory leak in replace_xml_child() reported by valgrind
    + High: Core: fix memory leaks exposed by valgrind
    + High: crmd: Bug 2401 - Improved detection of partially active peers
    + High: crmd: Bug bnc#578644 - Improve handling of cancelled operations caused by resource cleanup
    + High: crmd: Bug lf#2379 - Ensure the cluster terminates when the PE is not available
    + High: crmd: Bug lf#2414 - Prevent use-after-free of the PE connection after it dies
    + High: crmd: Bug lf#2414 - Prevent use-after-free of the stonith-ng connection
    + High: crmd: Do not allow the target_rc to be misused by resource agents
    + High: crmd: Do not ignore action timeouts based on FSA state
    + High: crmd: Ensure we dont get stuck in S_PENDING if we loose an election to someone that never talks to us again
    + High: crmd: Fix memory leaks exposed by valgrind
    + High: crmd: Remove race condition that could lead to multiple instances of a clone being active on a machine
    + High: crmd: Send erase_status_tag() calls to the local CIB when the DC is fenced, since there is no DC to accept them
    + High: crmd: Use global fencing notifications to prevent secondary fencing operations of the DC
    + High: fencing: Account for stonith_get_info() always returning a pointer to the same static buffer
    + High: PE: Allow startup probes to be disabled - their calculation is a major bottleneck for very large clusters
    + High: PE: Bug lf#2317 - Avoid needless restart of primitive depending on a clone
    + High: PE: Bug lf#2358 - Fix master-master anti-colocation
    + High: PE: Bug lf#2361 - Ensure clones observe mandatory ordering constraints if the LHS is unrunnable
    + High: PE: Bug lf#2383 - Combine failcounts for all instances of an anonymous clone on a host
    + High: PE: Bug lf#2384 - Fix intra-set colocation and ordering
    + High: PE: Bug lf#2403 - Enforce mandatory promotion (colocation) constraints
    + High: PE: Bug lf#2412 - Correctly locate clone instances by their prefix
    + High: PE: Correctly implement optional colocation between primitives and clone resources
    + High: PE: Do not be so quick to pull the trigger on nodes that are coming up
    + High: PE: Fix memory leaks exposed by valgrind
    + High: PE: Fix memory leaks reported by valgrind
    + High: PE: Repair handling of unordered groups in RHS ordering constraints
    + High: PE: Rewrite native_merge_weights() to avoid Fix use-after-free
    + High: PE: Suppress duplicate ordering constraints to achieve orders of magnitude speed increases for large clusters
    + High: Shell: add support for xml in cli
    + High: Shell: always reload status if working with the cluster (bnc#590035)
    + High: Shell: check timeouts also against the default-action-timeout property
    + High: Shell: Default to using the status section from the live CIB (bnc#592762)
    + High: Shell: edit multiple meta_attributes sets in resource management (lf#2315)
    + High: Shell: enable comments (lf#2221)
    + High: Shell: implement new cibstatus interface and commands (bnc#580492)
    + High: Shell: improve configure commit (lf#2336)
    + High: Shell: new cibstatus import command (bnc#585471)
    + High: Shell: new configure filter command
    + High: Shell: restore error reporting in options
    + High: Shell: split shell into modules
    + High: Shell: support for the utilization element (old patch for the new structure)
    + High: Shell: update previous node lookup procedure to include the id where necessary
    + High: Tools: crm_mon - fix memory leaks exposed by valgrind


author: Andrew Beekhof <andrew@beekhof.net> - 1.1.1-0.1-60b7753f7310.hg
changelog:
  - Update the tarball from upstream to version 60b7753f7310
    + First public release of the 1.1 series


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-5
changelog:
  - Include patch of changeset 66b7bfd467f3:
    Some clients such as gfs_controld want a cluster name, allow one to be specified in corosync.conf


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-4
changelog:
  - Include the fixes from CoroSync integration testing
  - Move the resource templates - they are not documentation
  - Ensure documentation is placed in a standard location
  - Exclude documentation that is included elsewhere in the package

  - Update the tarball from upstream to version ee19d8e83c2a
    + High: cib: Correctly clean up when both plaintext and tls remote ports are requested
    + High: PE: Bug bnc#515172 - Provide better defaults for lt(e) and gt(e) comparisions
    + High: PE: Bug lf#2197 - Allow master instances placemaker to be influenced by colocation constraints
    + High: PE: Make sure promote/demote pseudo actions are created correctly
    + High: PE: Prevent target-role from promoting more than master-max instances
    + High: ais: Bug lf#2199 - Prevent expected-quorum-votes from being populated with garbage
    + High: ais: Prevent deadlock - dont try to release IPC message if the connection failed
    + High: cib: For validation errors, send back the full CIB so the client can display the errors
    + High: cib: Prevent use-after-free for remote plaintext connections
    + High: crmd: Bug lf#2201 - Prevent use-of-NULL when running heartbeat
    + High: Core: Bug lf#2169 - Allow dtd/schema validation to be disabled
    + High: PE: Bug lf#2106 - Not all anonymous clone children are restarted after configuration change
    + High: PE: Bug lf#2170 - stop-all-resources option had no effect
    + High: PE: Bug lf#2171 - Prevent groups from starting if they depend on a complex resource which cannot
    + High: PE: Disable resource management if stonith-enabled=true and no stonith resources are defined
    + High: PE: Do not include master score if it would prevent allocation
    + High: ais: Avoid excessive load by checking for dead children every 1s (instead of 100ms)
    + High: ais: Bug rh#525589 - Prevent shutdown deadlocks when running on CoroSync
    + High: ais: Gracefully handle changes to the AIS nodeid
    + High: crmd: Bug bnc#527530 - Wait for the transition to complete before leaving S_TRANSITION_ENGINE
    + High: crmd: Prevent use-after-free with LOG_DEBUG_3
    + Medium: xml: Mask the "symmetrical" attribute on rsc_colocation constraints (bnc#540672)
    + Medium (bnc#520707): Tools: crm: new templates ocfs2 and clvm
    + Medium: Build: Invert the disable ais/heartbeat logic so that --without (ais|heartbeat) is available to rpmbuild
    + Medium: PE: Bug lf#2178 - Indicate unmanaged clones
    + Medium: PE: Bug lf#2180 - Include node information for all failed ops
    + Medium: PE: Bug lf#2189 - Incorrect error message when unpacking simple ordering constraint
    + Medium: PE: Correctly log resources that would like to start but cannot
    + Medium: PE: Stop ptest from logging to syslog
    + Medium: ais: Include version details in plugin name
    + Medium: crmd: Requery the resource metadata after every start operation


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-2
changelog:
  - Add versioned perl dependancy as specified by
      https://fedoraproject.org/wiki/Packaging/Perl#Packages_that_link_to_libperl
  - No longer remove RPATH data, it prevents us finding libperl.so and no other
    libraries were being hardcoded
  - Compile in support for heartbeat
  - Conditionally add heartbeat-devel and corosynclib-devel to the -devel requirements
    depending on which stacks are supported


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-1
changelog:
  - Add dependancy on resource-agents
  - Use the version of the configure macro that supplies --prefix, --libdir, etc
  - Update the tarball from upstream to version 462f1569a437 (Pacemaker 1.0.5 final)
    + High: Tools: crm_resource - Advertise --move instead of --migrate
    + Medium: Extra: New node connectivity RA that uses system ping and attrd_updater
    + Medium: crmd: Note that dc-deadtime can be used to mask the brokeness of some switches


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.5-0.4.c9120a53a6ae.hg
changelog:
  - Incorporate the feedback from the cluster-glue review
  - Realistically, the version is a 1.0.5 pre-release
  - Use the global directive instead of define for variables
  - Use the haclient/hacluster group/user instead of daemon
  - Use the _configure macro
  - Fix install dependancies


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.4-3
changelog:
  - Include an AUTHORS and license file in each package
  - Change the library package name to pacemaker-libs to be more
    Fedora compliant
  - Remove execute permissions from xml related files
  - Reference the new cluster-glue devel package name
  - Update the tarball from upstream to version c9120a53a6ae
    + High: PE: Only prevent migration if the clone dependancy is stopping/starting on the target node
    + High: PE: Bug 2160 - Dont shuffle clones due to colocation
    + High: PE: New implementation of the resource migration (not stop/start) logic
    + Medium: Tools: crm_resource - Prevent use-of-NULL by requiring a resource name for the -A and -a options
    + Medium: PE: Prevent use-of-NULL in find_first_action()
    + Low: Build: Include licensing files


author: Andrew Beekhof <andrew@beekhof.net> - 1.0.4-2
changelog:
  - Reference authors from the project AUTHORS file instead of listing in description
  - Change Source0 to reference the project's Mercurial repo
  - Cleaned up the summaries and descriptions
  - Incorporate the results of Fedora package self-review


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.3-13
changelog:
  - Implemented support for dlopen
  - Removed libtool support
  - Fixed imv and imc build issues arising from a
    previous upstream patch
  - Fixed a few coverity scan error issues


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.3-12
changelog:
  - Fixes for rhbz #985785 to fix crash issue in Filecert manager
    in platidimv.
  - Fixed crashing of attestation imv so while loading due to
    wrong static initialization order in attestation imv.
  - Fixes some coverity scan errors.
  - Fixed comilation when sysconf dir variable is not defined on a
    local system. Added some messaging outputs during compilations.
  - Fixed erroneous data type conversion issues causing wrong outputs
    and with potential for data corruption.
  - Fixes tncutil build issue from upstream commit
  - Fixes typo in assignment in platidimv from upstream commit
  - Fixes Fix typo in variable declaraction in hostscannerimv
    from upstream commit
  - Fixes imcv shared library build issue from upstream commit


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.3-8
changelog:
  - Fix build failure in fedora rawhide. It was caused due to 
    removal of CMAKE_INSTALL_LIBDIR macro from /etc/rpm/cmake.macros 
    that was present in previous fedora releases.


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.2-2
changelog:
  - Fixed broken dependencies of boost-system and boost-thread
  - Fixed some performance and implementation issues


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.2-1
changelog:
  - Initial packaging of tncfhh-0.8.2
  - Fixed cmake issues
  - Fixed xerces issues
  - Fixed memory leak and exception issue


author: Caolán McNamara <caolanm@redhat.com> - 0.4.0-8
changelog:
  - defining inline causes problems trying to build against libvisual headers, 
    e.g. libvisual-plugins


author: Charalampos Stratakis <cstratak@redhat.com> - 0.4.0-3
changelog:
  - Make firewalld to not log errors when running commands as root
  in the absence of polkitd.
  Resolves: rhbz#1393488


author: Nils Philippsen <nils@redhat.com> - 0.4.0-1
changelog:
  - version 0.4.0:
    - get rid of (ancient) PolicyKit-0.x support
    - add basic (experimental, unstable) dbus introspection support
    - learn to cope with polkitd being restarted


author: Nils Philippsen <nils@redhat.com> - 0.2.19-1
changelog:
  - allow service object methods to be called locally
  - preserve signature, docstrings, etc. of decorated methods


author: Nils Philippsen <nils@redhat.com> - 0.2.17-1
changelog:
  - fix default timeouts of None in bus objects (#716620)
  - reduce proxy method calling overhead a bit more


author: Nils Philippsen <nils@redhat.com> - 0.2.12-1
changelog:
  - use os.path.abspath instead of .realpath (#615819)
  - use tempfile.mkstemp
  - don't use hardcoded file ext separator


author: Nils Philippsen <nphilipp@redhat.com> - 0.1.6
changelog:
  - move proxy.polkit_enable to polkit.enable_proxy
  - rename polkit.NotAuthorized to NotAuthorizedException, polkit.auth_required
    to require_auth


author: Nils Philippsen <nphilipp@redhat.com> - 0.1.4
changelog:
  - implement PolicyKit convenience functions and decorators
  - rename slip.dbus.service.TimeoutObject -> slip.dbus.service.Object


author: Gris Ge <fge@redhat.com> - 1.5.0-2
changelog:
  - Fix multilib confliction of nfs-plugin by move binrary file to
    another subpackage libstoragemgmt-nfs-plugin-clibs


author: Gris Ge <fge@redhat.com> 1.4.0-1
changelog:
  - Add Python3 support.
  - New sub rpm package python3-libstoragemgmt.
  - Add support of lmiwbem.
  - Allow plugin test to be run concurrently.
  - Bug fixes:
      * Fix megaraid plugin for dell PERC.
      * Fix local disk rotation speed query on NVMe disk.
      * Fix lsmcli incorrect try-expect on local disk query.
      * Fix all the gcc compile warnings.
      * Fix the obsolete usage of AC_OUTPUT in configure.ac.
  - Library adds:
      * Query serial of local disk:
          lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
      * Query LED status of local disk:
          lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
      * Query link speed of local disk:
          lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()


author: Tony Asleson <tasleson@redhat.com> 1.2.3-3
changelog:
  - Megaraid fixes
    * https://bugzilla.redhat.com/show_bug.cgi?id=1238554
    * https://bugzilla.redhat.com/show_bug.cgi?id=1238582
    * https://bugzilla.redhat.com/show_bug.cgi?id=1238566
  - Command line exit code fix:
    * https://bugzilla.redhat.com/show_bug.cgi?id=1238737


author: Tony Asleson <tasleson@redhat.com> 1.2.3-1
changelog:
  - New upstream release
  - New sub-pacakges:
      * libstoragemgmt-megaraid-plugin
      * libstoragemgmt-hpsa-plugin
  - Add bash-completion script for lsmcli
  - Replace the hardcoded udev path with /usr/lib/udev/rules.d.
  - Mark /run/lsm and /run/lsm/ipc as %ghost folder.
  - Add 'Requires(post)' and 'Requires(postun)' to plugins in order
    to make sure plugin is installed after libstoragemgmt and removed before
    libstoragemgmt.


author: Tony Asleson <tasleson@redhat.com> - 1.0.0-4
changelog:
  - Fix rpmdiff, error for path names
    https://bugzilla.redhat.com/show_bug.cgi?id=1149368
  - Fix rpmdiff, multilib regressions
    https://bugzilla.redhat.com/show_bug.cgi?id=1149371


author: Tony Asleson <tasleson@redhat.com> - 1.0.0-3
changelog:
  - Use new systemd rpm macros
    https://bugzilla.redhat.com/show_bug.cgi?id=1149010
  - Place config file in correct tmpfiles.d directory
    https://bugzilla.redhat.com/show_bug.cgi?id=1122087


author: Tony Asleson <tasleson@redhat.com> 0.0.21-1
changelog:
  - New upstream release
  - Put plug-ins in separate sub packages
  - Don't include IBM plug-in on RHEL > 6, missing paramiko


author: Tony Asleson <tasleson@redhat.com> - 0.0.20-1
changelog:
  - New upstream release
  - Separate package for python libraries
  - Make timestamps match on version.py in library
  - Add python-paramiko requirement for IBM plug-in


author: Tony Asleson <tasleson@redhat.com> 0.0.9-1
changelog:
  - Initial checkin of lio plug-in
  - System filtering via URI (smispy)
  - Error code mapping (ontap)
  - Fixed build so same build tarball is used for all binaries


author: Tony Asleson <tasleson@redhat.com> 0.0.8-1
changelog:
  - Make building of SMI-S CPP plugin optional
  - Add pkg-config file
  - SMIS: Fix exception while retrieving Volumes
  - SMIS: Fix exception while retrieving Volumes
  - lsm: Add package imports
  - Make Smis class available in lsm python package
  - Add option to disable building C unit test
  - Make simulator classes available in lsm python package
  - Make ontap class available in lsm python package
  - Changes to support building on Fedora 17 (v2)
  - Spec. file updates from feedback from T. Callaway (spot)
  - F17 linker symbol visibility correction
  - Remove unneeded build dependencies and cleaned up some warnings
  - C Updates, client C library feature parity with python


author: Tony Asleson <tasleson@redhat.com> 0.0.7-1
changelog:
  - Bug fix for smi-s constants
  - Display formatting improvements
  - Added header option for lsmcli
  - Improved version handling for builds
  - Made terminology consistent
  - Ability to list visibility for access groups and volumes
  - Simulator plug-in fully supports all block operations
  - Added support for multiple systems with a single plug-in instance


author: Tony Asleson <tasleson@redhat.com> 0.0.6-1
changelog:
  - Documentation improvements (man & source code)
  - Support for access groups
  - Unified spec files Fedora/RHEL
  - Package version auto generate
  - Rpm target added to make
  - Bug fix for missing optional property on volume retrieval (smispy plug-in)


author: Tony Asleson <tasleson@redhat.com> 0.0.5-1
changelog:
  - Spec file clean-up improvements
  - Async. operation added to lsmcli and ability to check on job status
  - Sub volume replication support
  - Ability to check for child dependencies on VOLUMES, FS and files
  - SMI-S Bug fixes and improvements


author: Tony Asleson <tasleson@redhat.com> 0.0.3-1
changelog:
  - Changes to installer, daemon uid, gid, /var/run/lsm/*
  - NFS improvements and bug fixes
  - Python library clean up (rpmlint errors)


author: Tom "spot" Callaway <tcallawa@redhat.com> 20090205-2
changelog:
  - update fontconfig files, change priority to 64
  - don't need to own fontdir in -common, but we'll leave it in for good measure.


author: Than Ngo <than@redhat.com> - 4.10.5-2
changelog:
  - bz#970713, CVE-2013-2126, double-free flaw when handling
    damaged full-color in Foveon and sRAW files


author: Alexey Kurov <nucleo@fedoraproject.org> - 4.9.50-1
changelog:
  - libkdcraw update from digikam-3.0.0-beta2
  - enable build against lcms2
  - enable RawSpeed libraw codec


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.8-4
changelog:
  - fix to only prompt for passwords when obtaining credentials for performing
    password changes by toggling the subsequent_prompt default to off when
    called to perform a password change (#1063933)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.7-1
changelog:
  - drop some no-longer-necessary code to cede ownership of keyring ccaches
    to an unprivileged user at login-time to work better with upcoming changes
    to libkrb5's keyring ccache support (libkrb5: #991148, this one's #1005376)
  - if we don't have a ccname_template, if we're built against a libkrb5 that
    provides interfaces for reading its configuration files, try to read the
    default_ccache_name value from the [libdefaults] section before falling
    back to the default we've set at compile-time (#more of #1005376)
  - stop specifying a default ccache location at compile-time on F21 and later,
    to make our unconfigured default better line up with libkrb5's unconfigured
    default


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.6-1
changelog:
  - handle ccache creation correctly for users who are mapped to principal
    names in realms other than the default (#999604)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.5-1
changelog:
  - update to 2.4.5
    - handle non-unique ccname templates
  - switch to a non-unique default ccname template on newer releases


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.2-1
changelog:
  - update to 2.4.2
    - don't override the primary ccache selection when updating DIR: caches
    - handle the signature of trace callbacks being different between 1.10 and
      1.11


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.97-1
changelog:
  - update to 2.3.97
    - fix the order of credentials in a user ccache looking wrong
    - in the ticket manipulation helper, if we're trying to switch IDs and
      can't, if we should be able to do so, flag an error


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.14-2
changelog:
  - on Fedora 18 and later, override the default ccname template and specify that
    it be FILE:/run/user/%U/krb5cc_XXXXXX


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.14-1
changelog:
  - update to 2.3.14
    - attempt to drop to the user's privileges when reinitializing/refreshing
      credentials, which newer versions of login seem to do while they're still
      running as root (#822493)
  - on Fedora 18 and later, override the default ccname template and specify that
    it be FILE:/run/user/%u/krb5cc_XXXXXX


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.13-1
changelog:
  - update to 2.3.13
    - don't treat setcred() as session open/close in sshd (#720609, #725797)
    - don't create a new ccache when "external" is enabled, as the calling
      application's already managing one (#690832)
    - always re-read "external" creds when possible, and use an in-memory
      ccache when setting up tokens (more of #690832)
    - apply when-to-prompt-for-what logic that we use in authentication to
      the initial part of password-change (#700520)
    - fix some bashisms and explicitly note errors when we run into them
      (ticket #1, patch by Aleksander Adamowski)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-2
changelog:
  - build with %{_smp_mflags}, if set (Parag AN, part of #226225)
  - drop explicit buildroot specification and cleanup (Parag AN, part of
    - drop explicit -fPIC since libtool seems to be doing the right thing (Parag
    AN, part of #226225)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-1
changelog:
  - create creds before calling krb5_kuserok() so that they're available when
    it goes to look up the target user's home directory (#563442)
  - collapse multiple levels of debugging into a single debug level (#157107)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.10-2
changelog:
  - replace BuildPreReq: with BuildRequires: (rpmlint)
  - fix inadvertent macro use in changelog (rpmlint)
  - drop the final '.' from the package summary (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.10-1
changelog:
  - pull up changes to fine-tune the logic for selecting which key in a keytab
    to use when validating credentials


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.9-1
changelog:
  - add a "multiple_ccaches" option to allow forcing the previous behavior of
    not deleting an old ccache whenever we create a new one, but saving them
    until the call that caused us to create them is reversed, and default the
    setting to being enabled for "su", which needs it


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.8-1
changelog:
  - add a "chpw_prompt" option, to allow changing expired passwords while
    authenticating, as a workaround for applications which don't handle
    password expiration the way PAM expects them to (#509092)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.7-1
changelog:
  - when called to refresh credentials, store the new creds in the default
    ccache location if $KRB5CCNAME isn't set (#507984)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.5-1
changelog:
  - when we get asked for the user's long-term key, use a plain Password:
    prompt value rather than the library-supplied one


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - catch the case where we pass a NULL initial password into libkrb5 and
    it uses our callback to ask us for the password for the user using a
    principal name, and reject that (#502602)
  - always prompt for a password unless we were told not to (#502602,
    CVE-2009-1384)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.4-1
changelog:
  - don't request password-changing credentials with the same options that we
    use when requesting ticket granting tickets, which might run afoul of KDC
    policies


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.1-1
changelog:
  - don't bother trying to set up a temporary v4 ticket file during session open
    unless we obtained v4 creds somewhere


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.23-1
changelog:
  - when we're changing passwords, force at least one attempt to authenticate
    using the KDC, even in the pathological case where there's no previously-
    entered password and we were told not to ask for one (#400611)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.22-1
changelog:
  - make sure we don't fall out of the calling process's PAG when we check
    the .k5login (fallout from #371761)
  - make most boolean options controllable on a per-service basis


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set perms on the user's KEYRING: ccache so that the user can write to it
  - suppress an error message if a KEYRING: ccache we're about to destroy has
    already been revoked


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.20-1
changelog:
  - move temporary ccaches which aren't used for serializing from FILE: type
    into MEMORY: type
  - don't barf during credential refresh when $KRB5CCNAME isn't set


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.19-1
changelog:
  - log to AUTHPRIV facility by default
  - add a "ccname_template" option, which can be set to "KEYRING:..." to switch
    to using the kernel keyring
  - add a "preauth_options" option for setting generic preauth parameters
  - allow "keytab" locations to be specified on a per-service basis, so that
    unprivileged apps which do password-checking and which have their own
    keytabs can use their own keys to validate the KDC's response


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.17-1
changelog:
  - correct the license: tag -- this module is dual-licensed (LGPL+ or BSD)
  - fix a man page missing line
  - tactfully suggest in the man page that if your app needs the "tokens"
    flag in order to work properly, it's broken


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.16-1
changelog:
  - update to 2.2.16, also avoiding use of the helper if we're creating a ticket
    file for our own use


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.15-1
changelog:
  - update to 2.2.15, adjusting the fix for #150056 so that it doesn't run
    afoul of SELinux policy by attempting to read a ccache which was created
    for use by the user via the helper
  - build with --with-default-use-shmem=sshd --with-default-external=sshd, to
    get the expected behavior without requiring administrator intervention


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.10-0.1
changelog:
  - revert previous changes to how prompting works, and add a
    no_subsequent_prompt option to suppress libkrb5-based prompts during
    authentication, providing the PAM_AUTHTOK for all questions which
    libkrb5 asks


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.10-0
changelog:
  - rework prompting so that we stop getting stray prompts every now and then,
    and so that use_first_pass will *never* prompt for any information


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.9-1
changelog:
  - return PAM_IGNORE instead of PAM_SERVICE_ERR when we're called in
    an unsafe situation and told to refresh credentials (#197428)
  - drop from setuid to "normal" before calling our storetmp helper, so that
    it doesn't freak out except when *it* is setuid (#190159)
  - fix handling of "external" cases where the forwarded creds don't belong to
    the principal name we guessed for the user (#182239,#197660)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.8-1
changelog:
  - don't try to validate creds in a password-changing situation, because the
    attempt will always fail unless the matching key is in the keytab, which
    should never be the case for the password-changing service (#187303, rbasch)
  - if v4 has been disabled completely, go ahead and try to set 2b tokens
    because we're going to end up having to do that anyway (#182378)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.7-1
changelog:
  - add v4 credential conversion for "use_shmem" and "external" cases (though
    it should be redundant with "use_shmem") (#182239)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.6-1
changelog:
  - add a "krb4_use_as_req" option so that obtaining v4 creds kinit-style can
    be disabled completely (Hugo Meiland)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.5-1
changelog:
  - don't log debug messages that we're skipping session setup/teardown unless
    debugging is enabled (#179037)
  - try to build the module with -Bsymbolic if we can figure out how to do that


author: Nalin Dahyabhai <nalin@redhat.com> 1.57-1
changelog:
  - force -fPIC
  - add --with-moduledir, --with-krb5-libs, --with-krbafs-libs to configure
  - add per-user stashes and return values


author: Nalin Dahyabhai <nalin@redhat.com> 1.49-1
changelog:
  - set PAM_USER using the user's parsed name, converted back to a local name
  - add account management service (checks for key expiration and krb5_kuserok())
  - handle account expiration errors


author: Nalin Dahyabhai <nalin@redhat.com> 1.46-1
changelog:
  - link with libresolv to get res_search, tip from Justin McNutt, who
    built it statically
  - explicitly link with libdes425
  - handle cases where getpwnam_r fails but still sets the result pointer
  - if use_authtok is given and there is no authtok, error out


author: Nalin Dahyabhai <nalin@redhat.com> 1.43-1
changelog:
  - add minimum UID support (#52358)
  - don't link pam_krb5 with libkrbafs
  - make all options in krb5.conf available as PAM config arguments


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - note that we had to prepend the current directory to a given path in
    dlopen.c when we had to (noted by Onime Clement)


author: Nalin Dahyabhai <nalin@redhat.com> 1.42-1
changelog:
  - return PAM_NEW_AUTHTOK_REQD when attempts to get initial credentials
    fail with KRB5KDC_ERR_KEY_EXP (noted by Onime Clement)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add info about accessing the CVS repository to the README
  - parser cleanups (thanks to Dane Skow for a more complicated sample)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't set forwardable and assorted other flags when getting password-
    changing service ticket (noted, and fix supplied, by Onime Clement)
  - try __posix_getpwnam_r on Solaris before we try getpwnam_r, which may
    or may not be expecting the same number/type of arguments (noted by
    Onime Clement)
  - use krb5_aname_to_localname to convert the principal to a login name
    and set PAM_USER to the result when authenticating
  - some autoconf fixes for failure cases


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't call initialize_krb5_error_table() or initialize_ovk_error_table()
    if they're not found at compile-time (reported for RHL 6.x by Chris Riley)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - note that [pam] is still checked in addition to [appdefaults]
  - note that AFS and Kerberos IV support requires working Kerberos IV
    configuration files (i.e., kinit -4 needs to work) (doc changes
    suggested by Martin Schulz)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add max_timeout, timeout_shift, initial_timeout, and addressless options
    (patches from Simon Wilkinson)
  - fix the README to document the [appdefaults] section instead of [pam]
  - change example host and cell names in the README to use example domains


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't delete tokens unless we're also removing ticket files (report and
    patch from Sean Dilda)
  - report initialization errors better


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - treat semicolons as a comment character, like hash marks (bug reported by
    Greg Francis at Gonzaga University)
  - use the [:blank:] equivalence class to simplify the configuration file parser
  - don't mess with the real environment
  - implement mostly-complete aging support


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't fail to fixup the krb5 ccache if something goes wrong obtaining
    v4 credentials or creating a krb4 ticket file (#33262)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fixup the man page
  - log return code from k_setpag() when debugging
  - create credentials and get tokens when setcred is called for REINITIALIZE


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't twiddle ownerships until after we get AFS tokens
  - use the current time instead of the issue time when storing v4 creds, since
    we don't know the issuing host's byte order
  - depend on a PAM development header again instead of pam-devel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a separate config file parser for compatibility with settings that
    predate the appdefault API
  - use a version script under Linux to avoid polluting the global namespace
  - don't have a default for afs_cells
  - need to close the file when we succeed in fixing permissions (noted by
    jlkatz@eos.ncsu.edu)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use the appdefault API to read krb5.conf if available
  - create v4 tickets in such a way as to allow 1.2.2 to not think there's
    something fishy going on


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - only try to delete ccache files once
  - ignore extra data in v4 TGTs, but log that we got some
  - require "validate" to be true to try validating, and fail if validation fails


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix prompting when the module's first in the stack and the user does not have
    a corresponding principal in the local realm
  - properly implement TGT validation
  - change a few non-error status messages into debugging messages
  - sync the README and the various man pages up


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Seth Vidal's no_user_check flag
  - document no_user_check and skip_first_pass options in the man pages
  - rebuild against Kerberos 5 1.2 (release 15)


author: Tim Waugh <twaugh@redhat.com> 1.5.2-4
changelog:
  - Fixed build root.
  - Give IDs to nodes in the release notes source to prevent releasenotes.html
    having multilib conflicts (bug #228320).


author: Ville Skyttä <ville.skytta at iki.fi> - 1.5.2-0.1.pre1
changelog:
  - Fix build dependencies.
  - Require exact version of main package in -devel.
  - Build with dependency tracking disabled.
  - Add %{_datadir}/xml to default search path.
  - Run test suite during build.
  - Add URL tag.
  - Use %find_lang.
  - Cosmetic improvements.


author: Kalev Lember <kalevlember@gmail.com> - 1.32.1-2
changelog:
  - Move libffi to pkgconfig Requires.private, in order to
    reduce the impact when libffi soname bump lands in rawhide.


author: Colin Walters <walters@verbum.org> - 0.10.5-1
changelog:
  - New upstream release, fixes cairo.gir
    Necessary to avoid gnome-shell having a cairo-devel dependency.
  - Also add cairo-gobject-devel dependency, since we really want
    the cairo typelib to link to GObject, since anyone using
    introspection has it anyways.


author: Colin Walters <walters@verbum.org> - 0.9.3-6
changelog:
  - Strip out test libraries; they're gone in upstream git, and
    create a dependency on cairo (which requires libX11, which makes
    server operating system builders freak out).


author: Colin Walters <walters@verbum.org> - 0.6.9-3
changelog:
  - Move python library back into /usr/lib/gobject-introspection.  I put
    it there upstream for a reason, namely that apps need to avoid
    polluting the global Python site-packages with bits of their internals.
    It's not a public API.
    
    Possibly resolves bug #569885


author: Matthias Clasen <mclasen@redhat.com> - 2.22.1-1
changelog:
  - Update to 2.22.1 (filechooser crash fixes)
  - Implement authentication support for the file chooser (Tomas Bzatek)


author: Matthias Clasen <mclasen@redhat.com> - 2.15.1.cvs20060505-2
changelog:
  - Update to a cvs snapshot that supports the new GTK+ filechooser
    backend API
  - Require GTK+ 2.9.0


author: Ray Strode <rstrode@redhat.com> - 2.10.0-1
changelog:
  - Update to 2.10.0

  -* Thu Jan 27 2005 Matthias Clasen <mclasen@redhat.com> - 2.9.1-1
  - Update to 2.9.1
  - Drop upstreamed patches


author: Colin Walters <walters@redhat.com> 2.6.0-5
changelog:
  - Backport fileselector crash fix from HEAD
  - Remove unneeded calls to autotools
  - Remove BR on autotools


author: Alexander Larsson <alexl@redhat.com> 2.6.0-3
changelog:
  - Backport fixes from cvs
  -  fix fileselector crashes
  -  fix auth callback threadsafeness
  -  fix auth callback modal dialog bug


author: Tim Powers <timp@redhat.com> 2.2.0.1-5
changelog:
  - fixed requires so that we no longer require Xft and Xft-devel, but
    instead XFree86 and XFree86-devel >= 4.2.99


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 1.106.0.90 snap, glib 1.3.11
  - add explicit-versioned requires on dependency libs
  - do gconftool stuff, put schemas in file list
  - use makeinstall instead of destdir to avoid broken makefiles


author: Josef Ridky <jridky@redhat.com> - 10.79.00-4
changelog:
  - Resolves: #1523176 - add manual page for ppmtopga
  - Resolves: #1530606 - pbmtoepson command line option fix


author: Jindrich Novy <jnovy@redhat.com> 10.60.04-1
changelog:
  - update to 10.60.04
  - fixes pamtotiff, pnmmontage, pnmpsnr, pbmpscale, pgmhist,
    pampick, pamtompfont
  - fix dates in changelog


author: Jindrich Novy <jnovy@redhat.com> 10.47.12-3
changelog:
  - fix cmuwtopbm so that magic bytes test actually works
  - fix pamtojpeg2k (don't close stdout twice)
  - fix documentation for pamperspective and pbmtoepson


author: Jindrich Novy <jnovy@redhat.com> 10.47.10-3
changelog:
  - package docs in separate netpbm-doc package (#492437)
  - don't package patch backups in documentation
  - netpbm-progs package requires ghostscript


author: Jindrich Novy <jnovy@redhat.com> 10.47.10-2
changelog:
  - pgmtopbm should generate PBM, not PAM file
  - forwardport pnmmontage from 10.35 to make it work
  - fix pamstretch-gen


author: Jindrich Novy <jnovy@redhat.com> 10.47.09-3
changelog:
  - remove obsolete pgmtopbm and pnmcomp, symlink them to the new
    compatible variants
  - fix ppmfade -h, --help options
  - add missing man pages
  - link against -lz (#564649)


author: Jindrich Novy <jnovy@redhat.com> 10.47.09-1
changelog:
  - update to 10.47.09, fixes occassional crash in pamtosvg
  - fix documentation
  - fix ppmfade exit status


author: Jindrich Novy <jnovy@redhat.com> 10.47.06-1
changelog:
  - update to 10.47.06 - fixes the dumb pamtosvg mistake in 10.47.05
  - pnmmargin won't create leftovers in /tmp (#547888)


author: Jindrich Novy <jnovy@redhat.com> 10.47.05-1
changelog:
  - update to 10.47.05
  - fixes pnmtofiasco, fiascotopnm, pamtosvg, pamtouil and ppmrainbow
  - upstream fix to pamtosvg caused netpbm not to be rebuildable on
    any arch because of missing semicolon, the fix is now fixed :-/


author: Jindrich Novy <jnovy@redhat.com> 10.35.62-1
changelog:
  - update to 10.35.62
  - upstream fixes pamstereogram
  - fix options in pamperspective, pbmtoepson, ppmpat, pamaddnoise
    so that they match their man pages (#483011, #483070, #483243, #483245)
  - avoid clashes with getline() from glibc


author: Jindrich Novy <jnovy@redhat.com> 10.35.61-2
changelog:
  - remove two hunks from security patch breaking pbmclean and pbmlife (#493015)
  - fix ppmdfont and svgtopnm, thanks to Jiri Moskovcak


author: Jindrich Novy <jnovy@redhat.com> 10.35.61-1
changelog:
  - update to 10.35.61
  - upstream fixes array bound violation in pbmtog3
  - drop .pbmtog3segfault patch, we fixed this some time ago already
    and it is in upstream now
  - use saner exit status in ppmfade


author: Jindrich Novy <jnovy@redhat.com> 10.35.60-1
changelog:
  - update to 10.35.60
  - update .security patch, minor cleanup
  - fixes xwdtopnm for at least some direct color 24/32 images
  - fixes memory leak and out of memory crash in libpammap


author: Jindrich Novy <jnovy@redhat.com> 10.35.59-1
changelog:
  - update to 10.35.59
  - fixes array bound violation in ilbmtoppm
  - fixes garbage output when input in fitstopnm is little endian
    floating point FITS


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-4
changelog:
  - fix segfault in ximtoppm (#482891), the utility lacked the
    command line parsing initialization code


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-3
changelog:
  - fix cmuwmtopbm and other utilities by making endianess
    functions work correctly on 64bit systems (#476863)


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-1
changelog:
  - update to 10.35.38
  - fixes crashes in picttoppm, pbmtomrf, mrftopbm
  - fixes bugs in leaftoppm, ilbmtoppm


author: Jindrich Novy <jnovy@redhat.com> 10.35.57-3
changelog:
  - unbreak ppmshadow and ppmrainbow (#476989)
  - pnmmontage won't crash because of uninitialized memory usage


author: Jindrich Novy <jnovy@rehdat.com> 10.35.54-1
changelog:
  - update to 10.35.54
  - adds better randomization for ppmforge, pgmnoise, pgmcrater
  - fixes array bounds violation in pnm_createBlackTuple() with PBM, PGM
  - fixes crash in pnmtoddif with any PGM input


author: Jindrich Novy <jnovy@redhat.com> 10.35.51-1
changelog:
  - update to netpbm-10.35.51
  - make it actually compilable by removing duplicated function
    in pamcomp.c


author: Jindrich Novy <jnovy@rehdat.com> 10.35.49-1
changelog:
  - update to 10.35.49
  - fixes crash in pamcut when cutting a region entirely to the
    left or right of the input image, with -pad


author: Jindrich Novy <jnovy@redhat.com> 10.35.48-1
changelog:
  - update to 10.35.48
  - fixes buffer overrun in pamperspective and pngtopnm output format
  - update .security2 patch so that it applies with fuzz==0


author: Jindrich Novy <jnovy@redhat.com> 10.35.32-1
changelog:
  - remove .svn directories from tarball to reduce its size
  - update fixes rhbz#337181 and likely others


author: Jindrich Novy <jnovy@redhat.com> 10.35-8
changelog:
  - remove bogus man pages (#220112, #220113)
  - overflow2() no more conflicts with libgd.so (#216116)
  - fix BuildRoot


author: Jindrich Novy <jnovy@redhat.com> 10.35-1
changelog:
  - update to 10.35
  - drop .pnmtopng, .rgbtxt patches, fixed upstream
  - sync .xwidfix, .ppmtompeg patches
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.34-8
changelog:
  - readd pbmtols, author claims it's LGPL (#202519)
  - add .l1 suffixes to tarball names to reflect legal fixes
    in the upstream release with the same NVR


author: Jindrich Novy <jnovy@redhat.com> 10.34-6.fc6
changelog:
  - regenerate man pages so that makewhatis isn't confused (#204991)
    (upstream makeman script was broken -> now fixed)


author: Jindrich Novy <jnovy@redhat.com> 10.34-4.fc6
changelog:
  - legal fixes (#202519):
  - remove pbmtols, spottopgm, jbig and hpcd stuff from source
    and doc tarballs


author: Jindrich Novy <jnovy@redhat.com> 10.34-3.fc6
changelog:
  - pamscale won't waste all system resources by usage of uninitialized
    variables for output image resolution (#199871)
  - use %{?dist}


author: Jindrich Novy <jnovy@redhat.com> 10.34-1
changelog:
  - update to 10.34
  - drop .ppmtogif, .nstring patches
  - remove some overflow checks from .security patch, it's
    now resolved in the new upstream version
  - don't use svgalib by default (don't compile/ship ppmsvgalib)
  - don't compile svgtopam because of the libxml dependency
  - add BuildRequires libX11-devel
  - fix build on x86_64 and ppc64


author: Jindrich Novy <jnovy@redhat.com> 10.33-2
changelog:
  - fix image corruption in ppmtogif, thanks to Gilles Detillieux (#188597)
  - fix nsting.h to let pnmtopng and other utilities using seekable opening
    mode work on x86_64 (#188594)


author: Jindrich Novy <jnovy@redhat.com> 10.33-1
changelog:
  - update to 10.33
  - drop upstreamed .ppmdepth patch
  - fix segfault in ppmtompeg when encoding jpeg images (#185970)


author: Jindrich Novy <jnovy@redhat.com> 10.32-1
changelog:
  - update to 10.32
  - drop .msbmp patch, applied upstream
  - sync the rest of the patches
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.31-3
changelog:
  - fix segfault caused by usage of uninitialized variables while
    parsing cmdline arguments in pnmtopng (#179645)
  - add validity check for date/time in pnmtopng
  - fix unchecked sscanf reads


author: Jindrich Novy <jnovy@redhat.com> 10.30-1
changelog:
  - update to 10.30
  - update manpath, gcc4 patches
  - update security patch - fixed length problem in rle_addhist
  - update partly upstreamed bmptopnm, pnmtopng patches
  - drop manpath patch
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.29-1
changelog:
  - update to 10.29
  - drop upstreamed .libpm, .pnmtojpeg, .pbmtolj patches
  - update .CAN-2005-2471 patch


author: Jindrich Novy <jnovy@redhat.com> 10.28-2
changelog:
  - fix segfault in pbmtolj caused by unchecked assertions
    caused by definition of NDEBUG (#160429)
  - drop hunk from .security patch causing dual inclusion
    of string.h in pbmtolj.c


author: Jindrich Novy <jnovy@redhat.com> 10.28-1
changelog:
  - update to 10.28
  - regenerated man pages
  - sync .security, .security2, .badlink, .libpm, .gcc4 patches
  - drop upstreamed .pngtopnm, .pnmcolormap patches


author: Jindrich Novy <jnovy@redhat.com> 10.27-2
changelog:
  - fix invalid strcmp condition in bmptopnm, typo in pnmtojpeg
    (David Constanzo, #157106, #157118)
  - proper read longs and shorts in libpm.c (David Constanzo, #157110)
  - fix segfault in bmptopnm caused by freeing an uninitialized pointer


author: Jindrich Novy <jnovy@redhat.com> 10.27-1
changelog:
  - update to the new 10.27 release
  - update .security2, .security patch
  - regenerate man pages
  - remove jbig, hpcd
  - remove config_template from /usr
  - don't create symlink to pamtopnm


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-3
changelog:
  - fix overflow checking of integers with incompatible endianess
    causing problems using xwdtopnm (#147790)


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-2
changelog:
  - add .gcc4 patch to fix some missing declarations of headers,
    some pointer signedness mismatches, remove xmalloc2
  - rebuilt with gcc4


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-1
changelog:
  - update to netpbm-10.26.4, remove jbig, hpcd
  - this version fixes #149924
  - regenerate man pages (don't include man pages without binaries - #146863)


author: Jindrich Novy <jnovy@redhat.com> 10.26-1
changelog:
  - update to netpbm-10.26-1, remove jbig, hpcd
  - regenerate man pages, remove man pages for non existent binaries
  - update security patch, additional fixes
  - drop upstreamed misc patch, merge malloc patch with security patch


author: Jindrich Novy <jnovy@redhat.com> 10.25-3
changelog:
  - include man pages in troff format, thanks to Michal Jaegerman (#136959)
  - drop bmpbpp patch, fixed upstream
  - remove pcdovtoppm, ppmsvgalib, vidtoppm man pages because binaries
    for them are not present (#136471)


author: Jindrich Novy <jnovy@redhat.com> 10.25-1
changelog:
  - update to latest upstream 10.25
  - drop initvar patch
  - update security, misc patch
  - add bmpbpp patch to use only appropriate bit depths for BMP (#135675)


author: Jindrich Novy <jnovy@redhat.com> 10.23-1
changelog:
  - updated to netpbm-10.23 upsteam (and removed jbig, hpcd)
  - $TMPDIR patch removed, obsolete
  - updated gcc34 patch
  - removed nestedfunc patch, already applied in upstream version
  - updated security patch to conform to 10.23 (mostly in ppmtompeg/frame.c)


author: Phil Knirsch <pknirsch@redhat.com> 10.22-2
changelog:
  - Fixed Zero byte allocation error in bmptopnm (#123169)
  - Honour the $TMPDIR in ppmfade (#117247)
  - Fixed nested function bug (#117377)
  - Fixed several uninitialized variables (#117377)


author: Phil Knirsch <pknirsch@redhat.com> 10.22-1
changelog:
  - Update to latest upstream version 10.22 (also for docs).
  - Removed jbig and hdcp code from tarball.


author: Phil Knirsch <pknirsch@redhat.com> 10.19-4
changelog:
  - Fixed several tmp vulnerabilities in scripts and apps. Based on Debian
    security fix for netpbm-9.24.


author: Phil Knirsch <pknirsch@redhat.com> 10.19-3
changelog:
  - Included doc tarball with manpages (#114755).
  - Fixed small manpage incorrectness (#84922).
  - Fixed message from giftopnm (#114756).


author: Phil Knirsch <pknirsch@redhat.com> 9.24-3
changelog:
  - Fixed a possible gcc compiler problem for inline struct parameters (#62181).
  - Added missing .map files to progs files selection (#61625).


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to netpbm version 9.14
  - Removed pnmtotiff resize patch as it is now part of the original package
  - Removed pstopnm csh fix as it is now part of the original package
  - Removed asciitopgm memcpy fix as it is now part of the original package
  - Removed manpages patch as it is now part of the original package


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed bugzilla bug #19487 where asciitopgm dumped core on Alpha. Actually
    dumped core everywhere


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - update to 9.9
  - Due to patent infringement problems removed the jbig support from the tarball
    (pnm/jbig + Makefile changes) and created a new tarball


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 9.8
  - make sure shhopt.h is included in the -devel package (#19672)
  - rename shhopt.h to pbmshhopt.h because it's not the same as the normal
    shhopt.h that other things (like util-linux) expect


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move netpbm-progs to the Applications/Multimedia group
  - reintroduce patches from the old libgr package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make sure all man pages are included (#9328)
  - fix pstopnm bomb when xres == yres (#9329)
  - add libjpeg and libz because libtiff now needs them


author: Michael Johnson <johnsonm@redhat.com>
changelog:
  - removed old png.h header file that was causing png utils to die
  - build png in build instead of install section...


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - altered install so that the package installs now even if a previous
    version was not installed on the system


author: Donnie Barnes <djb@redhat.com>
changelog:
  - changed copyright from "distributable" to "freeware"
  - added some missing scripts that existed in netpbm
  - added some binaries that weren't getting built
  - added patch to build tiff manipulation progs (requires libtiff)


author: Donnie Barnes <djb@redhat.com>
changelog:
  - updated to 2.0.13
  - dropped libjpeg and libtiff (those should come from home sources)
  - removed glibc patch (new version appears to have it!)
  - added i686 as a valid arch type to config.guess


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.29.20140113
changelog:
  - Fall back to text mode if /dev/dri/card0 can't modeset
    Resolves: #1431141
  - Remove unnecessary post scripts that rpm -V output
    Resolves: #1266085


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.28.20140113
changelog:
  - Don't change file mode of boot.log.  Instead, remember what mode
    the admin set it to.
    Related: #916704
  - Don't unlink boot.log before opening it.
    Related: #916704


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.26.20140113
changelog:
  - Fix color of text progress bar
    Related: #1167735
  - Fix escape key during media check of live image
    Resolves: #1167735


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.25.20140113
changelog:
  - Read OS string from PRETTY_NAME instead of REDHAT_BUGZILLA_PRODUCT
    again, this time munging it to get rid of parts we want to hide.
    Related: #911553
    Resolves: #1306543


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.16.20140113
changelog:
  - Ensure graphical special gets terminal even if drm driver isn't
    boot_vga (more fixes for hyper-v)
    Related: #1097174 1244858


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.15.20140113
changelog:
  - Ship label plugin in initrd
    Resolves: #801932
  - Backport udev queue detection fix which may help missing password
    prompt on hyper-v
    Related: #1097174 1244858


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.9.20140113
changelog:
  - Ignore early fb devices
    Resolves: #1063758
    Resolves: #1064235
    Resolves: #1066641
  - Ignore udev if using lone serial console
    Resolves: #1058049
  - Fix password at start up race
    Resolves: #1070707
    Resolves: #1073145


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.3.20140113
changelog:
  - Read OS string from REDHAT_BUGZILLA_PRODUCT instead of PRETTY_NAME
    in /etc/os-release to work around a lorax bug.
    Resolves: #911553
  - Fix text splash when explicitly configured by user
    Related: #911553
    Related: #1026571


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.2014.01.10.1
changelog:
  - Update to latest snapshot
  - Fixes ask-for-password feature
    Resolves: #1043689
  - Drops bogus delay when hitting escape
    Resolves: #1049379


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.2013.12.10.1
changelog:
  - Update to latest snapshot, but revert text splash back to tribar
  - Fixes systemd unit files and lets us drop our upstreamed patches
    Resolves: #1040015
  - Uses udev for device enumeration
    Resolves: #1026571
  - Correct "charge" theme description


author: Dave Airlie <airlied@redhat.com> 0.8.6.2-1.2012.07.23
changelog:
  - fix plymouth race at bootup breaking efi/vesa handoff.
  - fix version number - its against fedora package policy to have 0.year


author: Tom Callaway <spot@fedoraproject.org> - 0.8.6.1-3
changelog:
  - fix bz704658 (thanks to Ian Pilcher for the patch), resolves issue where spinfinity theme
    never goes idle and thus, never exits to gdm


author: Ray Strode <rstrode@redhat.com> 0.8.6-1
changelog:
  - Update to 0.8.6
  - Fixes encrypted fs bug
    Resolves: #830482
  - Adds support for offline package updates


author: Ray Strode <rstrode@redhat.com> 0.8.4-0.20110809.3
changelog:
  - Change spec based on suggestion from Nicolas Chauvet <kwizart@gmail.com>
    to fix scriptlet error during livecd creation
    Resolves: #666419


author: Ray Strode <rstrode@redhat.com> 0.8.4-0.20110822.1
changelog:
  - Update to latest git snapshot
  - Reintroduce accidentally dropped spinner theme and systemd integration


author: Ray Strode <rstrode@redhat.com> 0.8.4-0.20110419.1
changelog:
  - unlock tty when reopening in case it spontaenously goes bonkers
    and we need to fix it up
    Resolves: #655538


author: Jesse Keating <jkeating@redhat.com> - 0.7.0-0.2009.03.10.3
changelog:
  - Drop the version on system-logos requires for now, causing hell with
    other -logos providers not having the same version.


author: Ray Strode <rstrode@redhat.com> 0.7.0-0.2009.03.10.1
changelog:
  - Address one more issue with password handling.  It wasn't working
    well for secondary devices when using the "details" plugin.


author: Ray Strode <rstrode@redhat.com> 0.7.0-0.2009.03.06
changelog:
  - Updated to development snapshot
  - Guess progress better on second boot of persistent live images
  - Drop upstream patches
  - swap "solar" and "spinfinity" scriptlet behavior


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.17.3
changelog:
  - don't give error about missing default.so
  - rework packaging of boot-duration to prevent .rpmnew droppings
    (bug 469752)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.14.1
changelog:
  - Generate solar background dynamically to reduce ondisk size, and
    look better at various resolutions (Charlie, bug 471227)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.12.4
changelog:
  - Move Obsoletes: plymouth-text-and-details-only to base package
    so people who had it installed don't end up solar on upgrade


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.11.2
changelog:
  - Improve solar flares (Charlie)
  - redirect tty again on --show-splash
  - ignore subsequent --hide-splash calls after the first one
  - turn off kernel printks during boot up


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.06.1
changelog:
  - Don't exit on plymouth --show-splash after sulogin
  - Properly retake console after that --show-splash


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.30.1
changelog:
  - Drop upstreamed patches
  - Patch from Charlie to update artwork
  - Patch from Charlie to make password screen match animation better
    (bug 468899)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.27.6
changelog:
  - Force raw mode for keyboard input with solar and fade-in
    (bug 468880)
  - make sure windows get closed on exit


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.24.1
changelog:
  - Add updated progress bar for solar plugin from Charlie
  - Log plymouth:debug output to boot log
  - Ignore sigpipe signals in daemon


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.23.2
changelog:
  - Bump so name of libply to hopefully force plymouth to get installed
    before kernel (or at least make plymouth-libs and plymouth get installed
    on the same side of kernel in the transaction).


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.23.1
changelog:
  - Add patch from Charlie to align progress bar to milestones during boot up
  - force tty to be sane on exit (bug 467207)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.21.2
changelog:
  - add text-and-details-only subpackage so davej can uninstall
    spinfinity, pango, cairo etc from his router.


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.21.1
changelog:
  - Minor event loop changes
  - drop upstream patches
  - Charlie Brej fix for progress bar resetting when escape gets pressed


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.17.1
changelog:
  - Clear screen in details plugin when it's done
  - Make plymouth-update-initrd a small wrapper around mkinitrd instead
    of the broken monstrosity it was before.


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.15.3
changelog:
  - Move plymouth-set-default-plugin, plymouth-update-initrd, and
    plymouth-populate-initrd to plymouth-scripts subpackage
    (the last fix didn't actually help with bug 467356)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.15.2
changelog:
  - Move plymouth-set-default-plugin to -libs (might help with bug 467356)
  - Fix up requires, provides and postun scripts


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.06.1
changelog:
  - Add "Solar" plugin from Charles Brej
  - Move things around so computers with separate /usr boot
    (hopefully this won't break things, but it probably will)
  - Make GDM show up on vt1 for all plugins


author: Jeremy Katz <katzj@redhat.com> 0.6.0-0.2008.09.25.2
changelog:
  - Remove mkinitrd requires to break the dep loop and ensure things
    get installed in the right order


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.09.25.1
changelog:
  - Add new snapshot to fold in Will Woods progress bar, and
    move ajax's splash upstream, putting the old text splash
    in a "pulser" subpackage


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.08.27.1
changelog:
  - Fix another crasher for users with encrypted disks (this time in
    the text plugin, not the client)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.08.27
changelog:
  - Update to latest snapshot
  - Add the ability to show text prompts in graphical plugin
  - Fix crasher for users with encrypted disks


author: Adam Jackson <ajax@redhat.com> 0.5.0-15.2008.08.08
changelog:
  - plymouth-0.5.0-textbar-hotness.patch: Change the text plugin to a slightly
    more traditional progress bar, to maintain the illusion of progress better
    than the eternally oscillating cylon. Note: still incomplete.


author: Ray Strode <rstrode@redhat.com> - 0.5.0-13.2008.08.07
changelog:
  - Update to new snapshot which when combined with a new mkinitrd should
    make unlocking encrypted root partitions work again


author: Ray Strode <rstrode@redhat.com> - 0.5.0-8.2008.07.31
changelog:
  - Update to snapshot to get new plymouth-populate-initrd features
  - Make removing rhgb use details plugin instead of exiting


author: Peter Jones <pjones@redhat.com> - 0.5.0-7
changelog:
  - Make it a mkinitrd requires instead of a nash requires (that will
    still pull in nash, but we need mkinitrd for newer plymouth-populate-initrd)


author: Ray Strode <rstrode@redhat.com> - 0.5.0-2
changelog:
  - Pull in spinfinity by default.  This whole "figure out
    which plugin to use" set of scripts and scriptlets
    needs work.  We need to separate distro default from
    user choice.


author: Ray Strode <rstrode@redhat.com> - 0.5.0-1
changelog:
  - Add new client "ask-for-password" command which feeds
    the user input to a program instead of standard output,
    and loops when the program returns non-zero exit status.


author: Ray Strode <rstrode@redhat.com> - 0.4.0-1
changelog:
  - Update to version 0.4.0
  - Only run if rhgb is on kernel command line
  - Make text plugin more animated


author: Ray Strode <rstrode@redhat.com> - 0.3.2-1
changelog:
  - Update to version 0.3.2
  - show gradient in spinfinity plugin
  - Drop fade out in spinfinity plugin
  - fix throbber placement
  - rename graphical.so to default.so


author: Ray Strode <rstrode@redhat.com> - 0.3.0-1
changelog:
  - Update to version 0.3.0
  - Better plugin handling
  - Better integration with mkinitrd (pending mkinitrd changes)
  - random bug fixes


author: Ray Strode <rstrode@redhat.com> - 0.2.0-1
changelog:
  - Update to version 0.2.0
  - Integrate more tightly with nash (pending nash changes)
  - ship libs for out of tree splash plugins
  - gradient support
  - random bug fixes


author: David Sloboda <david.x.sloboda@oracle.com> - 8.24.0-53.0.2
changelog:
  - Newer gcc complains about implicit declaration of prctl. Added header file to quiesce the compiler


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-53
changelog:
  RHEL 7.9 ERRATUM
  - one more fix for file ID patch to extend to offline behavior
    resolves: rhbz#1806493
  - added patch resoving race in serialization resulting in crash
    resolves: rhbz#1778841


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-52
changelog:
  RHEL 7.8 ERRATUM
  - edited patch file ID for imfile to not log useless errors
    also improved file-id behavior to adress newly found problems
    resolves: rhbz#1763746


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-49
changelog:
  RHEL 7.8 ERRATUM
  - fixed fsync patch to actually revognize the new option
    resolves: rhbz#1696686 (failedQA)


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-48
changelog:
  RHEL 7.8 ERRATUM
  - added patch resolving crash on wrong MsgProperty
    resolves: rhbz#1549706
  - added patch resolving CVE in pmaixforward module
    resolves: rhbz#1768320
  - added patch resolving CVE in pmcisconames module
    resolves: rhbz#1768323
  - added patch implementing file ID for imfile
    resolves: rhbz#1763746
  - added patch fixing omelasticsearch with ES 6.X
    resolves: rhbz#1600171


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-47
changelog:
  RHEL 7.8 ERRATUM
  - edited imfile truncation detection patch with reression fix
    resolves: rhbz#1744856


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-46
changelog:
  RHEL 7.8 ERRATUM
  - Support Intermediate Certificate Chains in rsyslog
    resolves: rhbz#1627799
  - fixed WorAroundJournalBug patch to not cause leaks
    resolves: rhbz#1744617
  - added patch fixing possible segfault in rate-limiter
    resolves: rhbz#1744682


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-44
changelog:
  RHEL 7.8 ERRATUM
  - added patch and doc-patch for new caseSensitive imUDP/TCP option
    resolves: rhbz#1309698


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-41
changelog:
  RHEL 7.8 ERRATUM
  - added patch and doc-patch with new "fsync" imjournal option
    resolves: rhbz#1696686
  - added patch resolving omelasticsearch crash on "nothing" reply
    resolves: rhbz#1684236


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-38
changelog:
  RHEL 7.7 ERRATUM
  - added patch increasing max path size preventing buffer overflow
    with too long paths
    resolves: rhbz#1656860


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-37
changelog:
  RHEL 7.7 ERRATUM
  - edited patch fixing mmkubernetes halt after pod deletition
    (covscan found an issue in previous version)
    resolves: rhbz#1622767
  - added patch stopping flooding logs with journald errors
    resolves: rhbz#1632211
  - added patch stopping flooding logs with symlink false-positives
    resolves: rhbz#1685901
  - added patch stopping memory leak when processing internal msgs
    resolves: rhbz#1666365
  - added documentation patch with info about CRI-O to mmkubernetes
    resolves: rhbz#1625935


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-36
changelog:
  RHEL 7.7 ERRATUM
  - added patch fixing mmkubernetes halt after pod deletition
    resolves: rhbz#1622767


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-35
changelog:
  RHEL 7.7 ERRATUM
  - added patch fixing memory corruption in omfwd module
    resolves: rhbz#1632659
  - added patch fixing imfile sopping monitor after rotation
    resolves: rhbz#1649250
  - added patch addressing imptcp CVE-2018-16881
    resolves: rhbz#1658288


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-33
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch with extended symlink watching
    resolves: rhbz#1531295
  - updated mmkubernetes patch to accept dots in pod name
    resolves: rhbz#1539193


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-32
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch with no log on EACCES
    resolves: rhbz#1531295
  - removed now needless build-deps


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-31
changelog:
  RHEL 7.6 ERRATUM
  - added new patch fixing ompipe dropping messages when pipe full
    resolves: rhbz#1591819
  - updated mmkubernetes patch to accept non-kubernetes containers
    resolves: rhbz#1539193
    resolves: rhbz#1609023
  - removed json-parsing patches as the bug is now fixed in liblognorm


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-30
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch with next bugfix
    resolves: rhbz#1531295
  - updated imjournal duplicates patch making slower code optional
    and added corresponding doc patch
    resolves: rhbz#1538372


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-28
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch fixing next round of regressions
    resolves: rhbz#1531295
    resolves: rhbz#1602156
  - updated mmkubernetes patch with NULL ret-check
    resolves: rhbz#1539193


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-27
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch fixing last update regressions
    resolves: rhbz#1531295
  - added patch fixing deadlock in async logging
    resolves: rhbz#1559408
  - added patch fixing NULL access in worktable create
    resolves: rhbz#1600462
  - now putting release number into configure to have it present
    in error messages


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-26
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch according to early testing
    resolves: rhbz#1531295
  - added patch fixing pid file name in manpage
    resolves: rhbz#1597264
  - updated json-parsing patch with one more bugfix
    resolves: rhbz#1565219


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-24
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch with fixes from covscan
    resolves: rhbz#1531295
  - updated mmkubernetes patch with fixes from covscan
    resolves: rhbz#1539193
  - updated imjournal duplicates patch with fixes from covscan
    resolves: rhbz#1538372
  - updated omelastic enhancement patch with fixes from covscan
    resolves: rhbz#1565214


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-23
changelog:
  RHEL 7.6 ERRATUM
  - added backport of leading $ support to json-parsing patch
    resolves: rhbz#1565219
  - The required info is already contained in rsyslog-doc package
    so there is no patch for this one
    resolves: rhbz#1553700


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-22
changelog:
  RHEL 7.6 ERRATUM
  - edited patch for top-level json parsing with bugfix
    resolves: rhbz#1565219
  - renamed doc patches and added/updated new ones for mmkubernetes
    omelasticsearch and json parsing
  - renamed patch fixing buffer overflow in parser - memcpy()
    resolves: rhbz#1582517


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-21
changelog:
  RHEL 7.6 ERRATUM
  - fixed imfile rewrite backport patch, added few more bugfixes
    resolves: rhbz#1531295
  - added also doc patch for omelastic client certs
    resolves: rhbz#1507145
  - cleaned and shortened patch for omelastic error handling
    resolves: rhbz#1565214
  - enabled patch for json top-level parsing
    resolves: rhbz#1565219
  - merged mmkubernetes patches into one and enabled the module
    resolves: rhbz#1539193
    resolves: rhbz#1589924
    resolves: rhbz#1590582


author: Noriko Hosoi <nhosoi@redhat.com> - 8.24.0-21
changelog:
  RHEL 7.6 ERRATUM
  resolves: rhbz#1582517 - Buffer overflow in memcpy() in parser.c
  resolves: rhbz#1539193 - RFE: Support for mm kubernetes plugin
  resolves: rhbz#1589924 - RFE: Several fixes for mmkubernetes
  resolves: rhbz#1590582 - mmkubernetes - use version=2 in rulebase files to avoid memory leak
  resolves: rhbz#1507145 - RFE: omelasticsearch support client cert authentication
  resolves: rhbz#1565214 - omelasticsearch needs better handling for bulk index rejections and other errors
  Disables Patch32: rsyslog-8.24.0-rhbz1531295-imfile-rewrite-with-symlink.patch
  Disables Patch34: rsyslog-8.24.0-rhbz1565219-parse-json-into-top-level-fields-in-mess.patch; It BuildRequires/Requires: libfastjson >= 0.99.4-3


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-20
changelog:
  RHEL 7.6 ERRATUM
  - added a patch backporting imfile module rewrite and 
    adding symlink support
  	resolves: rhbz#1531295


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-19
changelog:
  RHEL 7.6 ERRATUM
  - added new kafka sub-package with enabling of omkafka module
    resolves: rhbz#1482819


author: Radovan Sroka <rsroka@redhat.com> - 8.24.0-18
changelog:
  - caching the whole sockaddr structure instead of sin_addr causing memory leak
    resolves: rhbz#1512551


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-17
changelog:
  RHEL 7.6 ERRATUM
  - fixed imjournal duplicating messages on log rotation
    resolves: rhbz#1538372
  - re-enabled 32-bit arches to not break dependent packages
    resolves: rhbz#1571850


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-16
changelog:
  RHEL 7.5 ERRATUM
  - edited the patch to conform to latest upstream doc
    resolves: rhbz#1459896 (failedQA)
  - disabled 32-bit builds on all arches as they are not shipped
    anymore in RHEL7


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-15
changelog:
  RHEL 7.5 ERRATUM
  - made rsyslog-doc noarch and fixed search on doc regeneration
    resolves: rhbz#1507028


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-14
changelog:
  RHEL 7.5 ERRATUM
  - renamed patch for undocumented recover_qi script to correct bz number
    resolves: rhbz#1507028
  - added patch ensuring relp conneciton is active before closing it
    resolves: rhbz#1505103


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-13
changelog:
  RHEL 7.5 ERRATUM
  - added patch to properly resolve FQDN
    resolves: rhbz#1401456
  - added documentation patch correcting qeues default values
    resolves: rhbz#1459896
  - added patch adjusting log level of journal reloaded msg
    resolves: rhbz#1497985 
  - added patch to prevent crash with invalid set statement
    this also obsoletes patch2 (for 1188503) 
    resolves: rhbz#1462160
  - added patch with nullptr check to prevent ABRT
    resolves: rhbz#1488186


author: Radovan Sroka <rsroka@redhat.com> - 8.24.0-11
changelog:
  RHEL 7.4 ERRATUM
  - added new patch that backports num2ipv4 due to rhbz#1427821
    resolves: rhbz#1427821
  - enable pmrfc3164sd module
    resolves: rhbz#1431616


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-10
changelog:
  RHEL 7.4 ERRATUM
  - edited patches Patch19 and Patch21
    resolves: rhbz#1419228(coverity scan problems)
    resolves: rhbz#1056548(failed QA, coverity scan problems)


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-9
changelog:
  RHEL 7.4 ERRATUM
  - added autoreconf call
  - added patch to replace gethostbyname with getaddrinfo call
    resolves: rhbz#1056548(failed QA)


author: Radovan Sroka <rsroka@redhat.com> - 8.24.0-8
changelog:
  RHEL 7.4 ERRATUM
  - added dependency automake autoconf libtool due to yum-builddep
  - reenable omruleset module
    resolves: rhbz#1431615
    resolves: rhbz#1428403
    resolves: rhbz#1427821(fix regression, failed QA)
    resolves: rhbz#1432069
  - resolves: rhbz#1165236
    resolves: rhbz#1419228
    resolves: rhbz#1431616 
    resolves: rhbz#1196230(failed QA)


author: Radovan Sroka <rsroka@redhat.com> - 8.24.0-6
changelog:
  - RHEL 7.4 ERRATUM
  - rsyslog rebase to 8.24
  - added patch to prevent segfault while setting aclResolveHostname
    config options
    resolves: rhbz#1422414
  - added patch to check config variable names at startup
    resolves: rhbz#1427828
  - added patch for str2num to handle empty strings
    resolves: rhbz#1427821
  - fixed typo in added-chdir patch
    resolves: rhbz#1422789
  - added patch to log source process when beginning rate-limiting
    resolves: rhbz#1196230
  - added patch to chdir after chroot
    resolves: rhbz#1422789
  - added patch to remove "inputname" imudp module parameter 
    deprecation warnings
    resolves: rhbz#1403907
  - added patch which resolves situation when time goes backwards
    and statefile is invalid
    resolves rhbz#1088021
  - added a patch to bring back deprecated cmd-line switches and
    remove associated warnings
    resolves: rhbz#1403831
  - added documentation recover_qi.pl
    resolves: rhbz#1286707
  - add another setup for doc package
  - add --enable-generate-man-pages to configure parameters;
    the rscryutil man page isn't generated without it
    https://github.com/rsyslog/rsyslog/pull/469
  - enable mmcount, mmexternal modules
  - remove omruleset and pmrfc3164sd modules


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-15
changelog:
  - add a patch to make state file handling in imjournal more robust
    resolves: rhbz#1245194
  - add a patch to support wildcards in imfile
    resolves: rhbz#1303617


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-14
changelog:
  - add a patch to prevent loss of partial messages
    resolves: rhbz#1312459
  - add a patch to allow multiple rulesets in imrelp
    resolves: rhbz#1223566
  - add a patch to fix a race condition during shutdown
    resolves: rhbz#1295798
  - add a patch to backport the mmutf8fix plugin
    resolves: rhbz#1146237
  - add a patch to order service startup after the network
    resolves: rhbz#1263853


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-13
changelog:
  - add a patch to prevent crashes when using multiple rulesets
    resolves: rhbz#1224336
  - add a patch to keep the imjournal state file updated
    resolves: rhbz#1216957
  - add a patch to fix an undefined behavior caused by the maxMessageSize directive
    resolves: rhbz#1214257
  - add a patch to prevent crashes when using rulesets with a parser
    resolves: rhbz#1282687


author: Radovan Sroka <rsroka@redhat.com> 7.4.7-11
changelog:
  - add patch that resolves config.guess system-recognition on ppc64le architecture
    resolves: rhbz:1254511


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-10
changelog:
  - add a patch to prevent field truncation in imjournal
    resolves: rhbz#1101602
  - add a patch to enable setting a default TAG
    resolves: rhbz#1188503
  - add a patch to fix a nonfunction hostname setting in imuxsock
    resolves: rhbz#1184402


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-9
changelog:
  - update the patch fixing a race condition in directory creation
    resolves: rhbz#1202489
  - improve provided documentation
    - move documentation from all subpackages under a single directory
    - add missing images
    - remove doc files without content
    - add a patch making various corrections to the HTML documentation
    resolves: rhbz#1238713
  - add a patch to prevent division-by-zero errors
    resolves: rhbz#1078878
  - add a patch to clarify usage of the SysSock.Use option
    resolves: rhbz#1143846
  - add a patch to support arbitrary number of listeners in imuxsock
    - drop patch for rhbz#1053669 as it has been merged into this one
    resolves: rhbz#1151041


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-8
changelog:
  - modify the service file to automatically restart rsyslog on failure
    resolves: rhbz#1061322
  - add explicitly versioned dependencies on libraries which do not have
    correctly versioned sonames
    resolves: rhbz#1107839
  - make logrotate tolerate missing log files
    resolves: rhbz#1144465
  - backport the mmcount plugin
    resolves: rhbz#1151037
  - set the default service umask to 0066
    resolves: rhbz#1228192
  - add a patch to make imjournal sanitize messages as imuxsock does it
    resolves: rhbz#743890
  - add a patch to fix a bug preventing certain imuxsock directives from
    taking effect
    resolves: rhbz#1184410
  - add a patch to fix a race condition in directory creation
    resolves: rhbz#1202489


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-6
changelog:
  - disable the imklog plugin by default
    the patch for rhbz#1038136 caused duplication of kernel messages since the
    messages read by the imklog plugin were now also pulled in from journald
    resolves: #1078654


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-5
changelog:
  - move the rscryutil man page to the crypto subpackage
    resolves: #1056565
  - add a patch to prevent message loss in imjournal
    rsyslog-7.4.7-bz1038136-imjournal-message-loss.patch
    resolves: #1038136


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-3
changelog:
  - replace rsyslog-7.3.15-imuxsock-warning.patch
    with rsyslog-7.4.7-bz1053669-imuxsock-wrn.patch
    resolves: #1053669
  - add rsyslog-7.4.7-bz1052266-dont-link-libee.patch to prevent
    linking the main binary with libee
    resolves: #1052266
  - add rsyslog-7.4.7-bz1054171-omjournal-warning.patch to fix
    a condition for issuing a warning in omjournal
    resolves: #1054171
  - drop the "v5" string from the conf file as it's misleading
    resolves: #1040036


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-1
changelog:
  - rebase to 7.4.7
    add requirement on libestr >= 0.1.9
    resolves: #836485
    resolves: #1020854
    resolves: #1040036
  - drop patch 4; not needed anymore
    rsyslog-7.4.2-imuxsock-rfc3339.patch
  - install the rsyslog-recover-qi.pl tool
  - fix a typo in a package description
  - add missing defattr directives
  - add a patch to remove references to Google ads in the html docs
    rsyslog-7.4.7-bz1030044-remove-ads.patch
    Resolves: #1030043
  - add a patch to allow numeric specification of UIDs/GUIDs
    rsyslog-7.4.7-numeric-uid.patch
    resolves: #1032198
  - change the installation prefix to "/usr"
    resolves: #1032223
  - fix a bad date in the changelog
    resolves: #1043622
  - resolve a build issue with missing mysql_config by adding
    additional BuildRequires for the mysql package
  - add a patch to resolve build issue on ppc
    rsyslog-7.4.7-omelasticsearch-atomic-inst.patch


author: Tomas Heinrich <theinric@redhat.com> 7.4.2-1
changelog:
  - rebase to 7.4.2
    most importantly, this release fixes a potential vulnerability,
    see http://www.lsexperts.de/advisories/lse-2013-07-03.txt
    the impact should be low as only those using the omelasticsearch
    plugin with a specific configuration are exposed


author: Tomas Heinrich <theinric@redhat.com> 7.4.1-1
changelog:
  - rebase to 7.4.1
    this release adds code that somewhat mitigates damage in cases
    where large amounts of messages are received from systemd
    journal (see rhbz#974132)
  - regenerate patch 0
  - drop patches merged upstream: 4..8
  - add a dependency on the version of systemd which resolves the bug
    mentioned above
  - update option name in rsyslog.conf


author: Tomas Heinrich <theinric@redhat.com> 7.4.0-1
changelog:
  - rebase to 7.4.0
  - drop autoconf automake libtool from BuildRequires
  - depends on systemd >= 201 because of the sd_journal_get_events() api
  - add a patch to prevent a segfault in imjournal caused by a bug in
    systemd journal
  - add a patch to prevent an endless loop in the ratelimiter
  - add a patch to prevent another endless loop in the ratelimiter
  - add a patch to prevent a segfault in imjournal for undefined state file
  - add a patch to correctly reset state in the ratelimiter


author: Tomas Heinrich <theinric@redhat.com> 7.3.15-1.20130604git6e72fa6
changelog:
  - rebase to an upstream snapshot, effectively version 7.3.15
    plus several more changes
  - drop patches 3, 4 - merged upstream
  - add a patch to silence warnings emitted by the imuxsock module
  - drop the imkmsg plugin
  - enable compilation of additional modules
    imjournal, mmanon, omjournal, omrabbitmq
  - new subpackages: crypto, rabbitmq
  - add python-docutils and autoconf to global BuildRequires
  - drop the option for backwards compatibility from the
    sysconfig file - it is no longer supported
  - call autoreconf to prepare the snapshot for building
  - switch the local message source from imuxsock to imjournal
    the imuxsock module is left enabled so it is easy to swich back to
    it and because systemd drops a file into /etc/rsyslog.d which only
    imuxsock can parse


author: Tomas Heinrich <theinric@redhat.com> 7.3.10-1
changelog:
  - rebase to 7.3.10
  - add a patch to resolve #950088 - ratelimiter segfault, merged upstream
    rsyslog-7.3.10-ratelimit-segv.patch
  - add a patch to correct a default value, merged upstream
    rsyslog-7.3.10-correct-def-val.patch
  - drop patch 5 - fixed upstream


author: Tomas Heinrich <theinric@redhat.com> 7.2.2-1
changelog:
  - upgrade to upstream version 7.2.2
    update BuildRequires
  - remove patches merged upstream
    rsyslog-5.8.7-sysklogd-compat-1-template.patch
    rsyslog-5.8.7-sysklogd-compat-2-option.patch
    rsyslog-5.8.11-close-fd1-when-forking.patch
  - add patch from Milan Bartos <mbartos@redhat.com>
    rsyslog-7.2.1-msg_c_nonoverwrite_merge.patch
  - remove the rsyslog-sysvinit package
  - clean up BuildRequires, Requires
  - remove the 'BuildRoot' tag
  - split off a doc package
  - compile additional modules (some of them in separate packages):
    elasticsearch
    hiredis
    mmjsonparse
    mmnormalize
    mmaudit
    mmsnmptrapd
    mongodb
  - correct impossible timestamps in older changelog entries
  - correct typos, trailing spaces, etc
  - s/RPM_BUILD_ROOT/{buildroot}/
  - remove the 'clean' section
  - replace post* scriptlets with systemd macros


author: Tomas Heinrich <theinric@redhat.com> 5.8.11-1
changelog:
  - upgrade to new upstream stable version 5.8.11
  - add impstats and imptcp modules
  - include new license text files
  - consider lock file in 'status' action
  - add patch to update information on debugging in the man page
  - add patch to prevent debug output to stdout after forking
  - add patch to support ssl certificates with domain names longer than 128 chars


author: Tomas Heinrich <theinric@redhat.com> 5.8.7-1
changelog:
  - upgrade to new upstream version 5.8.7
  - change license from 'GPLv3+' to '(GPLv3+ and ASL 2.0)'
    http://blog.gerhards.net/2012/01/rsyslog-licensing-update.html
  - use a specific version for obsoleting sysklogd
  - add patches for better sysklogd compatibility (taken from upstream)


author: Tomas Heinrich <theinric@redhat.com> 5.7.9-1
changelog:
  - upgrade to new upstream version 5.7.9
  - enable compilation of several new modules,
    create new subpackages for some of them
  - integrate changes from Lennart Poettering
    to add support for systemd
    - add rsyslog-5.7.9-systemd.patch to tweak the upstream
      service file to honour configuration from /etc/sysconfig/rsyslog


author: Tomas Heinrich <theinric@redhat.com> 5.6.2-1
changelog:
  - upgrade to new upstream stable version 5.6.2
  - drop rsyslog-5.5.7-remove_include.patch; applied upstream
  - provide omsnmp module
  - use correct name for lock file (#659398)
  - enable specification of the pid file (#579411)
  - init script adjustments


author: Tomas Heinrich <theinric@redhat.com> 5.5.7-1
changelog:
  - upgrade to upstream version 5.5.7
  - update configuration and init files for the new major version
  - add several directories for storing auxiliary data
  - add ChangeLog to documentation
  - drop unlimited-select.patch; integrated upstream
  - add rsyslog-5.5.7-remove_include.patch to fix compilation


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-1
changelog:
  - upgrade to new upstream stable version 4.6.2
  - correct the default value of the OMFileFlushOnTXEnd directive


author: Tomas Heinrich <theinric@redhat.com> 4.4.2-6
changelog:
  - modify rsyslog-4.4.2-unlimited-select.patch so that
    running autoreconf is not needed
  - remove autoconf, automake, libtool from BuildRequires
  - change exec-prefix to nil


author: Tomas Heinrich <theinric@redhat.com> 4.4.2-1
changelog:
  - upgrade to new upstream stable version 4.4.2
  - add support for arbitrary number of open file descriptors


author: Peter Vrabec <pvrabec@redhat.com> 3.21.3-4
changelog:
  - use RPM_OPT_FLAGS
  - use same pid file and logrotate file as syslog-ng (#441664)
  - mark config files as noreplace (#428155)


author: Tomas Heinrich <theinric@redhat.com> 3.21.3-3
changelog:
  - fix a wrong module name in the rsyslog.conf manual page (#455086)
  - expand the rsyslog.conf manual page (#456030)


author: Peter Vrabec <pvrabec@redhat.com> 1.17.1-1
changelog:
  - upstream bug fix release
  - include html docs (#248712)
  - make "-r" option compatible with sysklogd config (248982)


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 1.02-0.2
  - rebuilt for new gcc4.1 snapshot and glibc changes
  - build with lzop 1 since lzop 2 hasn't been merged yet


author: Sean Middleditch <sean@middleditch.us> 1.1.3-2
changelog:
  - Fix Changelog dates.
  - Mix autoheader warning.
  - Added make check.
  - Build and install HTML documentation in -devel package.


author: Paul Moore <pmoore@redhat.com> - 2.2.1-1
changelog:
  - Removed '--disable-static' from the build to ensure that scmp_sys_resolver
    is self contained and resolve RPATH issues


author: Paul Moore <pmoore@redhat.com> - 1.0.0-0
changelog:
  - New upstream version
  - Remove verbose build patch as it is no longer needed
  - Enable _smp_mflags during build stage


author: Ivan Devat <idevat@redhat.com> - 0.9.169-2
changelog:
  - Keep autogenerated IDs of set constraints reasonably short
  - Use fixed version of python module subprocess (package python2-subprocess32)
  - Resolves: rhbz#1820813 rhbz#1824206


author: Ivan Devat <idevat@redhat.com> - 0.9.169-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569


author: Ondrej Mular <omular@redhat.com> - 0.9.168-4
changelog:
  - Added command 'pcs resource relations'
  - Added command 'pcs resource safe-disable'
  - Resolves: rhbz#1770975 rhbz#1770973


author: Ivan Devat <idevat@redhat.com> - 0.9.168-3
changelog:
  - More fixes for the case when PATH environment variable is not set
  - Pcsd no longer sends Server HTTP header
  - Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
  - Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174


author: Ivan Devat <idevat@redhat.com> - 0.9.168-2
changelog:
  - Do not generate custom DH key if it was not requested by setting its custom length
  - Resolves: rhbz#1760434


author: Ivan Devat <idevat@redhat.com> - 0.9.168-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829


author: Ivan Devat <idevat@redhat.com> - 0.9.167-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1649732 rhbz#1554302 rhbz#1447349 rhbz#1647640 rhbz#1594738 rhbz#1676956 rhbz#1474747 rhbz#1679534 rhbz#1642514 rhbz#1389140 rhbz#1522858 rhbz#1676944 rhbz#1638376 rhbz#1515021 rhbz#1598197


author: Ondrej Mular <omular@redhat.com> - 0.9.165-6
changelog:
  - Fix instance attributes setting for fence agents `fence_compute` and
    `fence_evacuate`
  - Resolves: rhbz#1623181


author: Ondrej Mular <omular@redhat.com> - 0.9.165-5
changelog:
  - Fixed `pcs stonith sbd watchdog test` error messages
  - Fixed avaliable watchdog devices listing
  - Resolves: rhbz#1475318


author: Ivan Devat <idevat@redhat.com> - 0.9.165-2
changelog:
  - Fixed validation for an unaccessible resource inside a bundle 
  - Fixed test of watchdog devices
  - Fixed command `pcs cluster node add-outside`
  - Fixed large key files distribution
  - Resolves: rhbz#1462248 rhbz#1475318 rhbz#1599758 rhbz#1600169


author: Ivan Devat <idevat@redhat.com> - 0.9.165-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1572886 rhbz#1581150 rhbz#1579911 rhbz#1533849 rhbz#1557252 rhbz#1568353 rhbz#1574898 rhbz#1427273 rhbz#1475318 rhbz#1476862 rhbz#1535967 rhbz#1566382 rhbz#1588667 rhbz#1590533 rhbz#1403832 rhbz#1517333 rhbz#1529508


author: Ondrej Mular <omular@redhat.com> - 0.9.162-5.el7_5.1
changelog:
  - Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
  - Fixed CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call
  - Fixed CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb
  - Resolves: rhbz#1557253


author: Ondrej Mular <omular@redhat.com> - 0.9.162-5
changelog:
  - Fixed `pcs cluster auth` in a cluster when not authenticated and using a non-default port
  - Fixed `pcs cluster auth` in a cluster when previously authenticated using a non-default port and reauthenticating using an implicit default port
  - Resolves: rhbz#1415197


author: Ivan Devat <idevat@redhat.com> - 0.9.162-3
changelog:
  - Pcs now properly exits with code 1 when an error occurs in pcs cluster node add-remote and pcs cluster node add-guest commands
  - Fixed a crash in the pcs booth sync command
  - Resolves: rhbz#1464781 rhbz#1527530


author: Ivan Devat <idevat@redhat.com> - 0.9.162-2
changelog:
  - Changed snmp agent logfile path
  - It is now possible to set the `action` option of stonith devices in GUI by using force
  - Do not crash when `--wait` is used in `pcs stonith create`
  - A warning is displayed in `pcs status` and a stonith device detail in web UI  when a stonith device has its `method` option set to `cycle`
  - Resolves: rhbz#1367808 rhbz#1421702 rhbz#1522813 rhbz#1523378


author: Ondrej Mular <omular@redhat.com> - 0.9.162-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1389943 rhbz#1389209 rhbz#1506220 rhbz#1508351 rhbz#1415197 rhbz#1506864 rhbz#1367808 rhbz#1499749


author: Ivan Devat <idevat@redhat.com> - 0.9.161-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1499749 rhbz#1415197 rhbz#1501274 rhbz#1502715 rhbz#1230919 rhbz#1503110


author: Ivan Devat <idevat@redhat.com> - 0.9.160-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1499749 rhbz#1443647 rhbz#1432283 rhbz#1421702 rhbz#1443418 rhbz#1464781 rhbz#1435697 rhbz#1441673 rhbz#1420437 rhbz#1388783 rhbz#1463327 rhbz#1418199 rhbz#1341582 rhbz#1489682 rhbz#1491631 rhbz#1213946


author: Ivan Devat <idevat@redhat.com> - 0.9.158-6
changelog:
  - It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
  - Fixed timeout when cluster setup takes long time in web UI
  - It is now mandatory to specify container type in the "resource bundle create" command
  - Resolves: rhbz#1447910 rhbz#1284404


author: Ivan Devat <idevat@redhat.com> - 0.9.158-5
changelog:
  - `pcs cluster setup` uses existing pacemaker authkey if it exists
  - `pcs resource create` shows only warning when case of remote node is detected
  - Resolves: rhbz#1459503


author: Ivan Devat <idevat@redhat.com> - 0.9.158-4
changelog:
  - Added support for enable and disable in bundles
  - New clusters are created with corosync encryption disabled by default
  - Flag `--master` is backward compatible in `pcs resource create`
  - Resolves: rhbz#1165821 rhbz#1433016 rhbz#1458153


author: Ivan Devat <idevat@redhat.com> - 0.9.158-3
changelog:
  - Added option to create not hardened cluster with the `pcs cluster setup` command using the `--no-hardened` flag
  - Added option to create not hardened cluster from web UI
  - Fixed a crash in the `pcs cluster node add-remote` command when an id conflict occurs
  - Fixed creating a new cluster from the web UI
  - `pcs cluster node add-guest` now works with the flag `--skipp-offline`
  - `pcs cluster node remove-guest` can be run again when the guest node was unreachable first time
  - Fixed "Error: Unable to read /etc/corosync/corosync.conf" when running `pcs resource create`([rhbz#1386114])
  - Binary data are stored in corosync authkey
  - Resolves: rhbz#1284404 rhbz#1373614 rhbz#1165821 rhbz#1176018 rhbz#1386114


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.158-2
changelog:
  - Fixed crash of the `pcs cluster setup` command when the `--force` flag was used
  - Fixed crash of the `pcs cluster destroy --all` command when the cluster was not running
  - Fixed crash of the `pcs config restore` command when restoring pacemaker authkey
  - Fixed "Error: unable to get cib" when adding a node to a stopped cluster
  - Resolves: rhbz#1176018


author: Ivan Devat <idevat@redhat.com> - 0.9.158-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1447702 rhbz#1176018 rhbz#1433016 rhbz#1303969 rhbz#1386114 rhbz#1386512 rhbz#1390609 rhbz#1165821 rhbz#1315992 rhbz#1373614 rhbz#1422667 rhbz#1254984


author: Ivan Devat <idevat@redhat.com> - 0.9.157-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1362493 rhbz#1315627 rhbz#1378742 rhbz#1334429 rhbz#1402374 rhbz#1389941 rhbz#1303969 rhbz#1415080 rhbz#1328882 rhbz#1434972 rhbz#1413958


author: Ivan Devat <idevat@redhat.com> - 0.9.156-1
changelog:
  - Rebased to latest upstream sources (see CHANGELOG.md)
  - Resolves: rhbz#1409821 rhbz#1404233 rhbz#1408476 rhbz#1262001 rhbz#1389443 rhbz#1389941 rhbz#1315992 rhbz#1261116 rhbz#1389501 rhbz#1404229 rhbz#1284404 rhbz#1339355 rhbz#1347335 rhbz#1344712 rhbz#1395226 rhbz#1382004 rhbz#1378107 rhbz#1398562 rhbz#1402475 rhbz#1382597 rhbz#1389453 rhbz#1390071 rhbz#1390066 rhbz#1387670 rhbz#1292858 rhbz#1396462 rhbz#1419903 rhbz#1419661


author: Ivan Devat <idevat@redhat.com> - 0.9.152-10
changelog:
  - Fixed error when stopping qdevice if is not running
  - Fixed removing qdevice from a cluster
  - Fixed documentation regarding booth
  - Fixed return code when no matching ticket constraint found during remove
  - Resolves: rhbz#1158805 rhbz#1305049


author: Ivan Devat <idevat@redhat.com> - 0.9.152-9
changelog:
  - Added warning when stopping/destroying qdevice instance which is being used
  - Fiexed removing qdevice from a cluster which uses sbd
  - Fixed re-running "pcs cluster node add" if it failed due to qdevice
  - Fixed documentation regarding booth
  - Added warning when using unknown booth ticket option
  - Added constraint ticket remove command
  - Fixed return code and message when displaying node utilization for nonexistent node
  - Fixed setting utilization attributes in web UI
  - Fixed support for node utilization on remote node
  - Fixed updating of selected group when displaying new resource dialog
  - Fixed group list when managing cluster running older pcs in web UI
  - Fixed displaying unmanaged status for resources for older pcs in web UI
  - Fixed clone/master/unclone group/ungroup buttons for older pcs in web UI
  - Fixed node standby/unstandby for older pcs in web UI
  - Resolves: rhbz#1158805 rhbz#1308514 rhbz#1305049 rhbz#1158500 rhbz#1231858


author: Ivan Devat <idevat@redhat.com> - 0.9.152-8
changelog:
  - Fixed error message in node maintenance/unmaintenance commands
  - Fixed missing line at the end of booth config
  - Fixed documentation regarding booth
  - Fixed remove multiple booth resources with "--force" flag
  - Fixed cleanup of ip resource if it fails to create booth resource
  - Added bash completion for booth
  - Fixed display full booth configuration
  - Added ability to display booth config from remote node
  - Added support for ticket options during adding booth ticket
  - Fixed adding node to cluster when booth is not installed
  - Added restart command for booth
  - Fixed check if auto_tie_breaker is required when enabling sbd
  - Improved way of displaying status of unmanaged primitive resources in web UI
  - Resolves: rhbz#1247088 rhbz#1308514 rhbz#1164402 rhbz#1264360


author: Ivan Devat <idevat@redhat.com> - 0.9.152-7
changelog:
  - Added possibility to hide inactive resources in "pcs resource show" command
  - Fixed exceptions handling when waiting for response from user in command line
  - Fixed nonexisting resource detection in pcsd
  - Fixed SBD_WATCHDOG_TIMEOUT option value validation
  - Removed possibility to change SBD_PACEMAKER
  - Fixed exception when disabling service on systemd systems
  - Added automatic auto_tie_breaker quorum option set whenever it is needed for SBD to work
  - Fixed setting sbd watchdog in config
  - Fixed error handling when upgrading cib schema
  - Improved consistency of syntax 'pcs alert recipient add' command
  - Resolves: rhbz#1298585 rhbz#1354498 rhbz#1346852 rhbz#1164402 rhbz#1315371 rhbz#1366307


author: Ivan Devat <idevat@redhat.com> - 0.9.152-6
changelog:
  - Fixed documentation regarding clufter
  - Added possibility to change order of resources in a group in web UI
  - Added support for unmanaged resources in web UI
  - Added support for booth (cluster ticket manager)
  - Resolves: rhbz#1357945 rhbz#1281391 rhbz#1264360 rhbz#1308514


author: Ivan Devat <idevat@redhat.com> - 0.9.152-5
changelog:
  - Fixed traceback when stopping pcsd shortly after start
  - Fixed removing a dead node from a cluster
  - Added support for clufter's 'dist' parameter
  - Fixed filtering by property name in "pcs property show"
  - Fixed an error in web UI when removing resources takes a long time
  - Fixed occasional missing optional arguments of resources in web UI
  - Improved help for alerts
  - Fixed recreating a remote node resource
  - Fixed exceptions when authenticating cluster nodes
  - Fixed permissions for bash completion file
  - Resolves: rhbz#1348579 rhbz#1225423 rhbz#1357945 rhbz#1302010 rhbz#1301993 rhbz#1346852 rhbz#1231858 rhbz#1315371 rhbz#1303136 rhbz#1329472 rhbz#1359154 rhbz#1349465


author: Ivan Devat <idevat@redhat.com> - 0.9.152-4
changelog:
  - Added colocation constraint support in web UI
  - Fixed displaying cluster config when cib is provided as a file
  - Removed side effect on /etc/hosts during build
  - Recipient id is used as identifier in alarms
  - Improved quorum device commands syntax
  - Fixed pcs client for running on a remote node
  - Resolves: rhbz#1281364 rhbz#1269242 rhbz#1353607 rhbz#1315371 rhbz#1158805 rhbz#1289418


author: Ivan Devat <idevat@redhat.com> - 0.9.152-3
changelog:
  - Added support for pacemaker alerts
  - Added support for qdevice/qnetd provided by corosync
  - Fixed sbd calls on python3
  - Fixed bad request when resource removal takes longer than pcs expects
  - Added support for set expected votes on a live cluster
  - Added a wrapper for holding SELinux context when pcsd is started by systemd
  - Resolves: rhbz#1315371 rhbz#1158805 rhbz#1164402 rhbz#1346852 rhbz#1327739 rhbz#1348579 rhbz#1349465


author: Ivan Devat <idevat@redhat.com> - 0.9.152-1
changelog:
  - Rebased to latest upstream sources
  - Added support for sbd configuration
  - Added support for constraint tickets in web UI
  - Added warning to pcs quorum unblock command
  - Fixes in manpage and built-in help
  - Config files marked as config
  - Resolves: rhbz#1299847 rhbz#1164402 rhbz#1305049 rhbz#1264566 rhbz#1225946 rhbz#1231858 rhbz#1328066 rhbz#1341114


author: Ivan Devat <idevat@redhat.com> - 0.9.151-1
changelog:
  - Rebased to latest upstream sources
  - Added support for utilization attributes
  - Optimized pcs status command
  - Fixes in manpage and built-in help
  - Improved resource cleanups
  - Added --wait support for cluster start and node standby commands
  - Improved resource and fence agent options in web UI
  - Added ability to put a node into maintenance mode
  - Fixed adding acl permission when targed id does not exists
  - Fixed deleting resource when referenced in acl
  - Improved pcsd launch script
  - Added automatically setting provides=unfencing meta attribute for stonith device
  - Improved Cluster Properties page in web UI
  - Fixed page update after adding group in web UI
  - Fixed deleting group (clones) when managing older cluster in web UI
  - Fixed stonith update command when fence agents fails to get metadata
  - Added support for putting Pacemaker Remote nodes into standby
  - Added support for omission stopped resources in status command
  - Added login input sanitization in web UI
  - Added config settings for SSL options and ciphers
  - Improved resource update command to inform user about missused op settings
  - Spec file fixes
  - Added support for constraint tickets from command line
  - Fixed CVE-2016-0720 pcs: Cross-Site Request Forgery in web UI
  - Fixed CVE-2016-0721 pcs: cookies are not invalidated upon logout
  - Resolves: rhbz#1299847 rhbz#1158500 rhbz#1207405 rhbz#1219581 rhbz#1225946 rhbz#1220512 rhbz#1229822 rhbz#1231858 rhbz#1247088 rhbz#1248990 rhbz#1249085 rhbz#1252050 rhbz#1262773 rhbz#1281371 rhbz#1283562 rhbz#1286664 rhbz#1287320 rhbz#1290512 rhbz#1298585 rhbz#1305786 rhbz#1315652 rhbz#1321021 rhbz#1315743 rhbz#1315357 rhbz#1305049 rhbz#1335779 rhbz#1330884


author: Chris Feist <cfeist@redhat.com> - 0.9.143-14
changelog:
  - Fixed remaining issues when managing resources/groups/etc. that were
    previously unmanaged
  - Resolves: rhbz#1268801


author: Chris Feist <cfeist@redhat.com> - 0.9.143-12
changelog:
  - Fixed issue managing resources that were clones and had the unmanaged
    meta attribute set under the clone/master
  - Resolves: rhbz#1268801


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-10
changelog:
  - Web UI fixes
  - Added more detailed warnings for 'pcs stonith confirm'
  - Resolves: rhbz#1189857 rhbz#1245264


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-9
changelog:
  - Multiple fixes in web UI (dashboard, nodes, resources, fence devices)
  - Fixed an authentication issue in web UI
  - Port parameter of fence agents is now considered optional
  - Resolves: rhbz#1158566 rhbz#1188361 rhbz#1189857


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-8
changelog:
  - Fixes in loading cluster status for web UI
  - Fixed checking user/group membership
  - Fixed a typo in an error message
  - Resolves: #rhbz1158566 #rhbz1158569 #rhbz1158571


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-7
changelog:
  - Multiple fixes in web UI
  - Fixed crash on missing nagios agents metadata
  - Check user/group membership on each request
  - Print output of crm_resource in pcs resource cleanup
  - Resolves: #rhbz1158571 #rhbz1189857 #rhbz1235022 #rhbz1257369


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-5
changelog:
  - Fixed pcsd certificates synchronization
  - Multiple fixes in web UI
  - Resolves: #rhbz1158566 #rhbz1158577 #rhbz1189857


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-3
changelog:
  - Fixed relocation of remote nodes to their optimal node
  - Fixed pcs/pcsd path detection
  - Fixed command injection vulnerability
  - Resolves: #rhbz1122818 #rhbz1253294 #rhbz1253491


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-2
changelog:
  - Fixed relocation of unique clone resources to their optimal node
  - Improved logging of node to node communication
  - Fixed 'Add resource' form in web UI
  - Fixed support for nagios agents
  - Resolves: rhbz#1122818 rhbz#1158577 rhbz#1189857 rhbz#1235022


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.143-1
changelog:
  - Added support for setting permissions for users and groups to clusters managed by web UI
  - Resources are now displayed in a tree (clone, master/slave, group, primitive) in web UI
  - Renamed 'pcs resource relocate clean' command to 'pcs resource relocate clear'
  - Improved logging of config files synchronization
  - Various fixes in Resources tab in web UI
  - Added missing dependecy on initscripts to the spec file
  - Fixed traceback when running 'pcs resource enable clvmd --wait'
  - Resolves: rhbz#1122818 rhbz#1158571 rhbz#1158577 rhbz#1182119 rhbz#1189857 rhbz#1198640 rhbz#1219574 rhbz#1243579 rhbz#1247818 rhbz#1250720


author: Chris Feist <cfeist@redhat.com> - 0.9.142-1
changelog:
  - Rebase to latest upstream sources
  - Added ability to set hostname when using IP address to create a cluster
  - Added ability to clear out tokens with pcs pcsd clear-auth
  - Added ability to use nagios agents
  - Fixed issue with orphaned resources causing GUI to fail to work properly
  - More dashboard fixes
  - Synchronize files between pcsd instances in a cluster to allow for HA pcsd
  - ACL role fixes for pcs/pcsd
  - Resolves: rhbz#118310 rhbz#1207805 rhbz#1235022 rhbz#1198222 rhbz#1158566 rhbz#1158577 rhbz#1166160


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.141-1
changelog:
  - Rebased to latest upstream packages
  - Added a command to relocate resources to their preferred host
  - Fixed the dashboard in web UI
  - Configure corosync to log to a file
  - Added warning when creating a duplicate resource operation
  - Added support for debugging resource agents
  - Do not automatically use --force when removing a resource using web UI
  - Fixed pcsd communication when one of the nodes is not authenticated
  - Updated ruby gems
  - Spec file fixes
  - Resolves: rhbz#1198265 rhbz#1122818 rhbz#1158566 rhbz#1163671 rhbz#1175400 rhbz#1185096 rhbz#1198274 rhbz#1213429 rhbz#1231987 rhbz#1232644 rhbz#1233574


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.140-1
changelog:
  - Rebased to latest upstream packages
  - Added a note to man page and help poiting to cluster properties description
  - Fixed parsing of the corosync.conf file
  - Fixed diferences between the 'pcs cluster status' and 'pcs status cluster' commands as one is documented to be an alias of the other
  - Do not remove constraints referencing a group when removing a resource from the group
  - Added dashboard showing status of clusters to web UI
  - Added node authentication dialog to web UI
  - Added synchronization of web UI configuration files across cluster nodes
  - Fixed node authentication when one of the nodes is unreachable
  - Fixed an error message in the 'pcs config restore' command if a node is not authenticated
  - Fixed parsing of 'pcs acl role create' command's parameters
  - Properly overwrite a tokens file if its contents is unparsable
  - The 'pcs config' command now displays resources defaults and operations defaults
  - Show a useful error message when attempting to add a duplicate fence level in web UI
  - Added the require-all parameter to ordering constraints listing
  - Fixed VirtualDomain resource removal when there are constraints for the resource
  - Added a warning when removing a cluster node may cause a loss of the quorum
  - Fixed an error when uncloning a non-cloned resource
  - Fixed an error when removing a resource from a cloned group
  - Fixed waiting for resource commands to finish
  - Fixed 'pcs cluster start' and similar commands when run under a non-root account
  - Fixed parsing of 'pcs constraint order set' command's parameters
  - Fixed an error when creating a resource with an id which already exists
  - Improved man page and help for the 'pcs resource move' and 'pcs resource ban' commands
  - Fixed an error when referencing a non-existing acl role in 'pcs acl' commands
  - Fixed an error when adding an invalid stonith level
  - Fixed constraints removal and node standby / unstandby using remote web UI
  - Fixed formatting of resource / fence agent description
  - Fence agent description now contains information about the agent
  - The 'pcs status --full' command now displays node attributes and migration summary
  - Clufter moved to a standalone package
  - Fixed pcsd communication when one of the nodes is not authenticated
  - Fixed a timeout value in the fence_xvm agent form
  - Fixed the 'pcs resource enable' command when working with clones and multi-state resources
  - Resolves: rhbz#1198265 rhbz#1121791 rhbz#1134426 rhbz#1158491 rhbz#1158537 rhbz#1158566 rhbz#1158569 rhbz#1158577 rhbz#1163682 rhbz#1165803 rhbz#1166160 rhbz#1170205 rhbz#1176687 rhbz#1182793 rhbz#1182986 rhbz#1183752 rhbz#1186692 rhbz#1187320 rhbz#1187571 rhbz#1188571 rhbz#1196412 rhbz#1197758 rhbz#1199073 rhbz#1201452 rhbz#1202457 rhbz#1204880 rhbz#1205653 rhbz#1206214 rhbz#1206219 rhbz#1206223 rhbz#1212904 rhbz#1213429 rhbz#1215198 rhbz#1218979


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-11
changelog:
  - Stop cluster nodes in parallel and keep cluster quorate during pacemaker
    shutdown
  - Resolves: rhbz#1180506


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-9
changelog:
  - Added acl enable and disable commands
  - Display whether acls are enabled in the 'pcs acl' output
  - Resolves: rhbz#1054491


author: Chris Feist <cfeist@redhat.cmo> 0.9.137-8
changelog:
  - Configuration of resource-discovery is now available on advanced location
    constraint rules
  - Resolves: rhbz#1054491


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-7
changelog:
  - When a role is removed in the GUI the user is now automatically deleted
    if they aren't members of another role
  - Resolves: rhbz#1054491


author: Chris Feist <cfeist@redhat.com> - 0.9.137-6
changelog:
  - Allowed configuration of resource-discovery option on location constraint
    rules
  - Resolves: rhbz#1054491


author: Chris Feist <cfeist@redhat.com> - 0.9.137-5
changelog:
  - Fixed error message when creating a user with the same name as a role
  - When a role is removed in the GUI the user is now automatically deleted
    if they aren't members of another role
  - Resolves: rhbz#1054491


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-4
changelog:
  - Fixed displaying globally-unique clones in GUI
  - Added latest version of clufter package
  - Resolves: rhbz#1170150 rhbz#1133897


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-2
changelog:
  - Improved error messages for scoped cib operations
  - Fixed waiting for resource commands to finish
  - Resolves: rhbz#1115537 rhbz#1156311


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.137-1
changelog:
  - Added support for score-attribute in location rules in GUI
  - Added ability to wait for resource commands to finish
  - Fix clufter doc files installed with executable flag
  - Resolves: rhbz#1111368 rhbz#1156311 rhbz#1073075 rhbz#1133897


author: Chris Feist <cfeist@redhat.com> - 0.9.136-1
changelog:
  - Added support for 'pcs resource restart'
  - Added ability to wait for a resource to start after creation
  - Fixed issue with backports and ruby 2.0.0p576
  - Fix for deleting a resource with a large number of options
  - Fix warning when unpacking a pcs config tarball
  - Resolves: rhbz#1111368 rhbz#1156311 rhbz#1156597


author: Chris Feist <cfeist@redhat.com> - 0.9.135-1
changelog:
  - Added new clufter package
  - Rebased to latest upstream sources
  - Constraints tables are collapsed properly
  - Resolves: rhbz#1111368 rhbz#1145560


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.131-1
changelog:
  - Rebased to latest upstream packages
  - Resolves: rhbz#1111368
  - Added python-clufter subpackage (configuration conversion tool)
  - Related:  rhbz#1133897


author: Chris Feist <cfeist@redhat.com> - 0.9.115-30
changelog:
  - Fix traceback with bad arguments to location rules
  - Fix results code when attempting to remove an order that doesn't exist


author: Chris Feist <cfeist@redhat.com> - 0.9.115-29
changelog:
  - Don't allow users to clone groups that have already been cloned
  - Fix order remove <resource> to remove resources from sets
  - Don't allow a user to force-start a group, clone or master/slave
  - When using debug-start use proper return code
  - Added cluster properties hover text
  - Fixed issue with stripping a nil value
  - HTML escape resource descriptions


author: Chris Feist <cfeist@redhat.com> - 0.9.115-28
changelog:
  - Remove leading/trailing white space in resource descriptions
  - Added tooltips for advanced cluster creation options
  - Fixed other 'Remove fence devices' button
  - When deleting a resource with pcsd use --force to prevent issues
  - Add proper tooltip for resource description info icon
  - Fix for long cluster names in menu
  - Do a better job of detecting when to send a redirect and when to notif
  - Don't silently ignore bad operation names


author: Chris Feist <cfeist@redhat.com> - 0.9.115-26
changelog:
  - Fixed dialog text when removing a fence device
  - Show tool tips for optional fence agent arguments
  - Fix bad link on resource remove sprite
  - When removing a resource or fence device, show blank info
  - Fix resource management issues when pacemaker is not running
  - If first node is down, allow other nodes to show resource/stonith forms
  - Removing all nodes, now removes cluster configuration
  - Added ability to see nodes corosync/pacemaker/pcsd startup settings
  - Added extra colspan to improve long cluster name display
  - Added ability to configure IPv6 cluster
  - Added ability to set corosync transport in GUI
  - Added ability to set advanced cluster options on creation
  - Renamed last_node_standing to last_man_standing
  - On cluster creation color unauthorized nodes in orange
  - Added proper redirect when session variable times out
  - Fixed traceback when missing authentication tokens


author: Chris Feist <cfeist@redhat.com> - 0.9.115-24
changelog:
  - Added support for meta attributes in the GUI
  - Moved pcmk_host_list/map/check to optional arguments


author: Chris Feist <cfeist@redhat.com> - 0.9.115-22
changelog:
  - Fixed selection arrow when selecting new resource on resources page
  - Fixed permissions on pcsd.service file


author: Chris Feist <cfeist@redhat.com> - 0.9.115-21
changelog:
  - Added support for resource descriptions
  - Show all nodes a resource is on for cloned resources
  - Improve visibility of dropdown menus
  - Keep last attempted login username if login fails


author: Chris Feist <cfeist@redhat.com> - 0.9.115-20
changelog:
  - Fixed issue when removing all resources or fence devices
  - Fixed duplicate id on fence device page


author: Chris Feist <cfeist@redhat.com> - 0.9.115-19
changelog:
  - Fixed issue when creating a cluster from the GUI on a node that isn't in
    the newly formed cluster
  - The GUI is now better at keeping track of nodes in the cluster


author: Chris Feist <cfeist@redhat.com> - 0.9.115-17
changelog:
  - Fixed issue with cluster properties not displaying properly when running
    pcsd on a node that was not in the cluster being managed
  - Fixed /etc/sysconfig/pcsd file for pcsd


author: Jiri Kucera <jkucera@redhat.com> - 0.3.9-9
changelog:
  - Backport ecef526 (Stop using crypt_get_error)
    Backport 23a1ff0 (Fix nonsensical error messages on missing keys)
    Fix License, URL and Source0 tags
    Resolves: #1502399, #1574988, #1593855, #1454358


author: Miloslav Trmač <mitr@redhat.com> - 0.3.4-4
changelog:
  - Tell the user if asking for the same passphrase again
    Resolves: #641111
  - Check certificate file before interacting with the user
    Resolves: #643897


author: Miloslav Trmač <mitr@redhat.com> - 0.3.4-2
changelog:
  - Clarify which block device should be passed as an argument
    Resolves: #636541
  - Recognize SSL error messages from NSS as well
    Resolves: #638732


author: Dan Walsh <dwalsh@redhat.com> - 1.0.4-1
changelog:
  - Add mount code to allow sharing of file system so hal and automount will work.
  - I have added an initscript to set the / as shared and /tmp, /var/tmp and /home/xguest as private


author: Parag Nemade <pnemade AT redhat DOT com> - 0.4.2-5
changelog:
  - Resolves:rh#1192870 - Fix langlist when installed_langpacks not available
  - Resolves:rh#1263241 - Add parser for Release_Notes packages
  - Resolves:rh#1251388 - Add parser for libreoffice langpacks


author: Bill Nottingham <notting@redhat.com> - 0.3.0-2
changelog:
  - fix groupinstall of langonly groups (#840885)
  - fix plugin type for use in yumex, elsewhere (#847502)


author: James Antill <james.antill@redhat.com> - 0.1.5-2
changelog:
  - Fix the problems where langpacks could delete the system.
  - Resolves: bug#585424
  - Register the package name, for yum history etc.


author: Jens Petersen <petersen@redhat.com> - 0.1.5-1
changelog:
  - fixes and improvements from James Antill (#571845):
    - Move print's => yum logger uses.
    - Move tsinfo ops to real install/remove ops, so deps will be solved
    - Handles erase properly.
    - Doesn't force upgrade langpacks on upgrades/downgrades/etc.
    - Doesn't try to install multiple versions of langpacks. (#569352)
    - Move from d.has_key(v) to "v in d", as py3 removes the former.


author: Jens Petersen <petersen@redhat.com> - 0.1.4-2
changelog:
  - fix source url (#536737)
  - drop python requires (#536737)
  - drop buildroot and cleaning of buildroot (#536737)
  - use global (#536737)


author: Richard W.M. Jones <rjones@redhat.com> - 0.31.3-1
changelog:
  - Rebase to upstream version 0.31.3.
  - This version includes multiple security fixes
    CVE-2017-5208, CVE-2017-5333, CVE-2017-5332, CVE-2017-6009,
    CVE-2017-6010, CVE-2017-6011
    resolves: rhbz#1430610


author: Martin Gieseking <martin.gieseking@uos.de> 0.30.0-1
changelog:
  - updated to release 0.30.0
  - dropped patch as it has been applied upstream
  - removed old buildroot stuff


author: - Martin Gieseking <martin.gieseking@uos.de> - 0.27.0-1
changelog:
  - updated to latest upstream release
  - added missing BuildRequires
  - patched wrestool/Makefile.am to fix ppc build failures


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-12.2
changelog:
  - Get rid of sparc support (we don't build it) (Jeff Moyer)
  - Implement proper support for aarch64 (Jeff Moyer)
  - Resolves: bz#1026429


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-10
changelog:
  - Un-revert the RHEL-specific changes. (Jeff Moyer)
  - Make devel sub-package depend on specific ver-rel (Jeff Moyer)
  - Resolves: bz#905462


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-8
changelog:
  - Change the source location to the new upstream on fedorahosted
  - import a new tarball from the new source


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-1
changelog:
  - Pull in upstream .109 to get ARM architecture support.
  - Remove the broken sparc patch;  it should go upstream first.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.107-2
changelog:
  - Update to the latest upstream which adds eventfd support and fixes broken
    test cases.  (Rusty Russell)


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.106-2
changelog:
  - Update to the latest sources, which contain the following change:
    Add a .proc directive for the ia64_aio_raw_syscall macro.  This sounds a lot
    like the previous entry, but that one fixed the __ia64_raw_syscall macro,
    located in syscall-ia64.h.  This macro is in raw_syscall.c, which pretty much
    only exists for ia64.  This bug prevented the package from building with
    newer version of gcc.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.103-4
changelog:
  - Build the library twice.  Once with the old SONAME and once with the new
    one.  This fixes the wrong SONAME problem by keeping a library around with
    the wrong name (libaio.so.1.0.0) and generating a new one (libaio.so.1.0.1).


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.102-1
changelog:
  - update to 102.  Fixes build errors on s390:
    - S390 asm had a bug; I forgot to update the clobber list.  Lucky for me,
      newer compilers complain about such things.
    - Also update the s390 asm to look more like the new kernel variants.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.99-1
changelog:
  - Fix compat calls.
  - make library .so.1.0.0 and make symlinks properly.
  - Fix header file for inclusion in c++ code.


author: Jeff Moyer <jmoyer@redhat.com> 0.3.97-2
changelog:
  - make srpm was using rpm to do a build.  changed that to use rpmbuild if
    it exists, and fallback to rpm if it doesn't.


author: Jeff Moyer <jmoyer@redhat.com> 0.3.97-1
changelog:
  - Use libc syscall(2) instead of rolling our own calling mechanism.  This 
    change is inspired due to a failure to build with newer gcc, since clobber 
    lists were wrong.
  - Add -fpic to the CFLAGS for all architectures.  Should address bz #109457.
  - change a #include from <linux/types.h> to <sys/types.h>.  Fixes a build
    issue on s390.


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - libaio 0.3.93 test release
  - add powerpc support from Gianni Tedesco <gianni@ecsc.co.uk>
  - add s/390 support from Arnd Bergmann <arnd@bergmann-dalldorf.de>


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - add requires initscripts >= 6.47-1 to get boot time libredhat-kernel 
    linkage correct.
  - typo fix


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - make the dummy install as /lib/libredhat-kernel.so.1.0.0 so 
    that ldconfig will link against it if no other is installed.


author: Jan Grulich <jgrulich@redhat.com> - 5.9.7-3
changelog:
  - Fix multilib issue with qtcore-config.h header file
    Resolves: bz#1534528

  - Move libQt5EglFSDeviceIntegration lib into correct subpackage
    Resolves: bz#1792680


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-8
changelog:
  - make 10-qt5-check-opengl2.sh xinit script more robust
  - enable journald support for el7+ (#1315239)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-6
changelog:
  - macros.qt5: we really only want the null-pointer-checks flag here
    and definitely no arch-specific ones


author: Rex Dieter <rdieter@fedoraproject.org> 5.6.0-0.40.rc
changelog:
  - respin QTBUG-51649 patch
  - %build: use -dbus-runtime unconditionally
  - drop (unused) build deps: atspi, dbus, networkmanager


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-0.4
changelog:
  - re-introduce bootstrap/examples macros
  - put examples-manifest.xml in -examples
  - restore -doc multilib hack (to be on the safe side, can't hurt)
  - %build: s/-optimized-qmake/-optimized-tools/


author: Helio Chissini de Castro <helio@kde.org> - 5.6.0-0.2
changelog:
  - Valgrind still needed as buildreq due recent split qdoc package, but we can get rid of
    specific arch set.
  - Added missing libproxy buildreq
  - Epel and RHEL doesn't have libinput, so a plugin need to be excluded for this distros


author: Helio Chissini de Castro <helio@kde.org> - 5.5.1-8
changelog:
  - qt5-qdoc need requires >= current version, otherwise will prevent the usage further when moved to qttools


author: Rex Dieter <rdieter@fedoraproject.org> 5.5.0-18
changelog:
  - When a screen comes back online, the windows need to be told about it (QTBUG-47041)
  - xcb: Ignore disabling of outputs in the middle of the mode switch


author: Rex Dieter <rdieter@fedoraproject.org> 5.5.0-16
changelog:
  - backport 0055-Respect-manual-set-icon-themes.patch (kde#344469)
  - conditionally use valgrind only if needed


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.5.0-14
changelog:
  - remove GDB hackery again, -12 built fine on i686, hack breaks ARM build
  - fix 10-qt5-check-opengl2.sh for multiple screens (#1245755)


author: Helio Chissini de Castro <helio@kde.org> - 5.5.0-11
changelog:
  - Add mesa-dri-drivers as recommends on gui package as reported by Kevin Kofler
  - Reference https://bugzilla.redhat.com/1249280


author: Rex Dieter <rdieter@fedoraproject.org> - 5.4.1-12
changelog:
  - backport a couple more upstream fixes
  - introduce -common noarch subpkg, should help multilib issues


author: Rex Dieter <rdieter@fedoraproject.org> - 5.4.1-3
changelog:
  - pull in handful of upstream fixes, particularly...
  - Fix a division by zero when processing malformed BMP files (QTBUG-44547, CVE-2015-0295)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.4.0-0.1.beta
changelog:
  - 5.4.0-beta
  - avoid extra -devel deps by moving *Plugin.cmake files to base pkgs
  - support bootstrap macro, to disable -doc,-examples


author: Rex Dieter <rdieter@fedoraproject.org> - 5.3.1-5
changelog:
  - drop dep on xorg-x11-xinit (own shared dirs instead)
  - fix/improve qtchooser support using alternatives (#1122316)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 5.3.1-4
changelog:
  - support the old versions of libxcb and libxkbcommon in F19 and F20
  - don't use the bundled libxkbcommon


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.2.0-4
changelog:
  - fix QTBUG-35459 (too low entityCharacterLimit=1024 for CVE-2013-4549)
  - fix QTBUG-35460 (error message for CVE-2013-4549 is misspelled)
  - reenable docs on Fedora (accidentally disabled)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.2.0-0.11.rc1
changelog:
  - needs a minimum version on sqlite build dependency (#1038617)
  - fix build when doc macro not defined


author: Rex Dieter <rdieter@fedoraproject.org> 5.2.0-0.10.rc1
changelog:
  - 5.2.0-rc1
  - revert/omit recent egl packaging changes
  - -doc install changes-5.* files here (#989149)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.2.0-0.1.alpha
changelog:
  - 5.2.0-alpha
  - -system-harfbuzz
  - rename subpkg -x11 => -gui
  - move some gui-related plugins base => -gui
  - don't use symlinks in %_qt5_bindir (more qtchooser-friendly)


author: Rex Dieter <rdieter@fedoraproject.org> 5.0.1-5
changelog:
  - -static subpkg, Requires: fontconfig-devel,glib2-devel,zlib-devel
  - -devel: Requires: pkgconfig(gl)


author: Rex Dieter <rdieter@fedoraproject.org> 5.0.1-4
changelog:
  - create/own %{_qt5_plugindir}/iconengines
  - -devel: create/own %{_qt5_archdatadir}/mkspecs/modules
  - cleanup .prl


author: Rex Dieter <rdieter@fedoraproject.org> 5.0.0-0.1.beta2
changelog:
  - %build: -accessibility
  - macros.qt5: +%_qt5_archdatadir +%_qt5_settingsdir
  - pull in a couple more configure-related upstream patches


author: Kalev Lember <kalevlember@gmail.com> - 0.5.1-1
changelog:
  - Update to 0.5.1
  - Build with libmusicbrainz4
  - Adjust the spec file for the changes in private library location
  - Remove and obsolete the -devel subpackage


author: Jonathan Dieter <jdieter@lesbg.com> - 3.6-1
changelog:
  - Update to 3.6 which, among other things, fixes a bug when applying a deltarpm
    to create a gzip-compressed rpm using full compression


author: Jonathan Dieter <jdieter@lesbg.com> - 3.6-0.13.20130520git
changelog:
  - Clearer error message when applydeltaiso fails (#825428) (Thanks, John!)
  - Add details to applydeltaiso and makedeltaiso man pages (#569499)
  - Add fragiso man page to deltaiso package (#569776)
  - Fix section for applydeltaiso (#548970)
  - Add arch-specific requires (#677060)


author: - Jonathan Dieter <jdieter@lesbg.com> - 3.6-0.6.20110223git
changelog:
  - Fix makedeltaiso so it (partially) works when compression formats change
  - Fix fix for makedeltaiso so it gets checksums right


author: - Jonathan Dieter <jdieter@lesbg.com> - 3.6-0.4.20110118git
changelog:
  - Re-enable Python 3 support, but it still won't work even though it builds
  - Remove upstreamed patches


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.5-0.3.20090913git
changelog:
  - Make building with system zlib selectable at build time.
  - Fix cfile_detect_rsync() to detect rsync even if we don't have a zlib capable
    of making rsync-friendly compressed files.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.5-0.2.20090913git
changelog:
  - Correct prerelease rlease numbering.
  - Build against the system zlib, not the bundled library.  This remedies the
    fact that the included zlib is affected by CAN-2005-1849.


author: Bill Nottingham <notting@redhat.com> - 3.5-0.git.20090831.1.3
changelog:
  - fix python bindings to:
    - call _exit(), not exit()
    - properly pythonize errors
    - not leak file descriptors


author: Jonathan Dieter <jdieter@gmail.com> - 3.5-0.git.20090729.1
changelog:
  - Explain where we get the source from
  - Split *deltaiso commands into deltaiso subpackage (#501953)


author: Jonathan Dieter <jdieter@gmail.com> - 3.5-0.git.20090727
changelog:
  - Update to current upstream git repository
  - Add upstream xz compression support
  - Drop all patches (they're now in upstream)
  - Fix spelling mistakes (#505713)
  - Fix url error (#506179)


author: Jonathan Dieter <jdieter@gmail.com> - 3.4-9
changelog:
  - Add patch that allows deltarpm to rebuild rpms from deltarpms that have
    had the rpm signature added after their creation.  The code came from
    upstream.
  - Drop nodoc patch added in 3.4-4 as most packages in repository have been
    updated since April-May 2007 and this patch was supposed to be temporary.


author: Jonathan Dieter <jdieter@gmail.com> - 3.4-4
changelog:
  - Fix prelink bug
  - Ignore verify bits on doc files as they were set incorrectly in older
    versions of rpm.  Without this patch, deltarpm will not delta doc files
    in rpm created before April-May 2007


author: Jerome Marchand <jmarchan@redhat.com> - 0.10.0-1
changelog:
  - Rebase on bcc-0.10.0
  - Fix regression of vfscount
  - Drop tools that relies on features unavailable on RHEL 7


author: Jerome Marchand <jmarchan@redhat.com> - 0.6.1-1
changelog:
  - Rebase on v0.6.1
  - Fix tcpsubnet
  - Reinstate llcstat tool
  - Remove inject tool
  - Add NSS support to sslsniff
  - Fixes miscellaneous error uncovered by covscan


author: Rafael Fonseca <rdossant@redhat.com> - 0.4.0-1
changelog:
  - Resolves #1460482 - rebase to new release
  - Resolves #1505506 - add support for LLVM 5.0
  - Resolves #1460482 - BPF module compilation issue
  - Partially address #1479990 - location of man pages
  - Enable ppc64(le) support without lua
  - Soname versioning for libbpf by ignatenkobrain


author: Karsten Hopp <karsten@redhat.com> 0.17.3-10
changelog:
  - rename icon files to tn5250.{png,xpm}
  - remove Mimetype from desktop file
  - move category to desktop file
  - use vendor fedora for desktop-file-install
  - touch files to avoid autotools run


author: Karsten Hopp <karsten@redhat.com> 0.17.3-8
changelog:
  - merge review changes (#226496):
  - move icons into hicolor subdir
  - require fedora-logos for the icons directory
  - require xterm for xt5250
  - -devel subpackage requires automake, openssl-devel, ncurses-devel, pkgconfig
  - Requires(post): /usr/bin/tic
  - Requires(preun): coreutils
  - disable static libs


author: Karsten Hopp <karsten@redhat.com> 0.17.3-7
changelog:
  - move tn5250,m4 and lib5250.so to -devel subpackage (#203639)
  - move tn5250-config, too
  - use macros


author: Karsten Hopp <karsten@redhat.de> 0.17.3-3
changelog:
  - don't check for sizeof(long), the result isn't used anywhere and
    causes problems with multilib installs


author: Karsten Hopp <karsten@redhat.de> 0.16.5-1
changelog:
  - update to 0.16.5
  - run libtoolize to fix config.sub
  - fix _libdir
  - fix Group:
  - fix URLs
  - remove obsolete patch


author: Guy Streeter <streeter@redhat.com>
changelog:
  - unset the TERMINFO env var before running tic in %post, so
    it puts the compiled files in the right place.
  - require ncurses and dialog


author: Henri Gomez <hgomez@slib.fr>
changelog:
  - 0.16.1 RPM release 2 
  - Dave McKenzie's cursor positioning fixes
  - Scott Klement fixes to lp5250d, auto-enter field handling, 
    field plus & field minus key handling , FER state key handling


author: Henri Gomez <hgomez@slib.fr>
changelog:
  - 0.16.0
  - many fixes, take a look at ChangeLog
  - compiled on Redhat 6.1 box plus updates with rpm-3.0.5


author: Henri Gomez <gomez@slib.fr>
changelog:
  - 0.15.7
  - Removed config.guess and config.sub from CVS since they should be
    provided by autogen.sh.
  - Added --enable-old-keys switch to configure to compile in the old
    keyboard handler (preparation for 0.15.7).
  - Fixed bugs with handling response code for printer sessions.
  - Added a response code/error message lookup table so that we can get
    the error message in Plain English (tm).
  - Apply patch from Mike Madore regarding IBMTRANSFORM set incorrectly
    (for printer sessions).
  - Documented `-P cmd' option in usage message, removed `-p' option to
    indicate print session as `-P cmd' is required for a working session
    anyway.
  - Fixed typo in new key-parsing code preventing PgDn from working.
  - Added code to handle Esc+Del = Ins vt100 key mapping.
  - Added stuff to XTerm resources to turn on real underlining and turn
    off silly color-instead-of-underline mode.
  - Throw away weird keys we get from ncurses4 after before first
    keypress.
  - Implemented FER (Field-Exit Required) state (not tested).
  - Use 'TERM' to determine if terminal is an xterm or xterm-5250, as it
    *works* :) (Thanks to Frank Richter for pointing out bug).
  - Apply Frank Richter's cursor-position-on-status-line patch.
  - Implement rest of keys for #defined USE_OWN_KEY_PARSING.
  - Finally object-orientized translation map stuff, but will have to be
    modified later to handle wide characters/DBCS characters/Unicode -
    however we intend to support different character sets better.
  - In Field Exit handling for signed numeric fields, don't NUL-out the last
    (sign) position of the field - this is what Field- and Field+ are for.
  - Home key when already in home position should send the Home aid code,
    even when we have a pending insert.  Also, home key should move to the
    beginning of the *first non-bypass field* not the *current field* when
    there is no pending insert (IC address).
  - Clear pending insert flag on Clear Unit or Clear Unit Alternate command.


author: Henri Gomez <gomez@slib.fr>
changelog:
  - 0.15.6
  - Reported by Phil Gregory - display is not inhibited and cursor is not in
    proper place after Write Error Code.
  - Implemented Read Immediate Alternate and Read MDT Fields Alternate commands,
    modified tn5250_session_query_reply to indicate that we now support them to
    the host.
  - Implemented TD (Transparent Data) order.  There is apparently nowhere to
    indicate this to the host. (This may have been the cause of earlier binary
    data issues).
  - Implemented MC (Move Cursor) order.  This is now indicated to the host.
  - Move remaining keyboard handling from session.c to display.c, make
    tn5250_display_waitevent NOT return keyboard events. (Might we want to
    pass along ones we don't understand?  Nah...)
  - Save/restore message line when Write Error Code is used by the host to
    inhibit display.  Also, use the correct message line (according to the
    format table header).
  - Added refresh() call to cursesterm.c.  Hopefully, this will resolve the
    80 -> 132 column switch refresh issues reported by some users.
  - Wrote a quick hack of a Perl script to insert Robodoc comment headers
    for all the functions (and manually did all the structures).  Yeah, it's
    ugly, but no-one produces a tool as good as Javadoc which works on C.
  - tn5250_dbuffer_send_data_for_fields(): A *SET* bit inhibits the transmission
    of field data, not a clear one.  Also, fine point of spec, all three aid key
    bytes must be present before the 5294 controller will obey any of them.
  - Carey Evans' suggestions for new xt5250 script portability, security
    incorporated.
  - xt5250: Now changes window title to name of host.
  - cursesterm.c: Now obeys the information returned from ENQ about what
    type of terminal, and only uses xterm resize escape when on an xterm
    again.


author: Henri Gomez <gomez@slib.fr>
changelog:
  - 0.15.5
  - Extensively modified xt5250 script to prompt for hostname if not given,
    automagically use xrdb to load the keyboard mappings.  Inspired by Henri
    (Thanks!)
  - Renamed Xdefaults to xt5250.keys, installs in $pkgdatadir, also
    installs Linux keyboard maps there.
  - Removed smacs, rmacs, and acsc from 5250.terminfo - we don't use them and
    they don't seem to work under an xterm.  Makes 'dialog' draw all sorts of
    funny looking characters.
  - If installing on Linux system, automatically 'tic 5250.terminfo' if
    tic command is found (and user is root).
  - Fixed bit-ordering issue causing beeps/screen flashes all the time
    (hopefully).
  - Happy Y2K!
  - Changed handling of Field+ and Field- in regards to number-only-type
    fields.
  - No longer ignores the function key bits in the format table header.  This
    means that we won't transmit the field data for a function key unless the
    AS/400 has requested it.
  - Rolled Tn5250Table functionality into Tn5250DBuffer, removed
    formattable.[ch] and resulting duplicate functionality in display.c
  - Apparently, the AS/400 and S/36 differ in how they send the client the
    Restore Screen data.  The AS/400 just sends the data raw, while the
    System/36 prefixes it with a X'04' X'12' (Restore Screen) opcode.  This
    is now ignored.
  - Removed portsnoop. It doesn't belong here and there's better stuff out
    there (check freshmeat.net).  nc seems to work well, and is installed on
    most distributions by default.
    formattable.[ch] and resulting duplicate functionality in display.c
  - Apparently, the AS/400 and S/36 differ in how they send the client the
    Restore Screen data.  The AS/400 just sends the data raw, while the
    System/36 prefixes it with a X'04' X'12' (Restore Screen) opcode.  This
    is now ignored.
  - Removed portsnoop. It doesn't belong here and there's better stuff out
    there (check freshmeat.net).  nc seems to work well, and is installed on
    most distributions by default.


author: Henri Gomez <gomez@slib.fr>
changelog:
  - 0.15.4
  - Rewrite of screen/format table save/restore code to generate Write to Display
    commands and orders.  This should even allow you to resume a session with
    a different emulator and have the restore screen feature still work.  This
    results in a noticable slowdown in situations where the save screen command
    is used.
  - Fixes for End key behavior.
  - Fixes for Del key behavior, other keys which weren't setting the field's
    modified flag.
  - Buffered keystrokes will now cause the display to update.
  - Some 'binary' characters now accepted as data characters.
  - CC1/CC2 bytes in Read MDT Fields/Read INput Fields commands were not being
    handled.
  - Partial work on restructuring... Auto Enter fields now work again.
  - Updates to documentation and NEWS, including information about the FAQ and
    mailing list archives.


author: Henri Gomez <gomez@slib.fr>
changelog:
  - 0.15.3
    When using --with-slang configure option, no longer cores after signon
    screen.
    When using debug:tracefile syntax, no longer cores after signon screen.
    Fixed assertion found by Sean Porterfield regarding 132-column display.
    Slight work to reduce number of screen updates, although this isn't
    finished.
    Some work on solidifying the lib API.


author: Henri Gomez <gomez@slib.fr>
changelog:
  - 0.15.2
   Field Exit and Field + are now seperate functions. '+' in numeric field
    maps to Field +.  Field + changes the sign of the number like it should.
  - Re-implemented transmitting signed fields to host.
  - Re-implemented Field -.
  - Numeric Only and Signed Number field types are handled according to spec
    now, even though the spec is really weird about how they are handled
    (The last digit's zone is changed on Numeric Only on Field -/+, but the
    sign position is changed from ' ' to '-' with Field -/+, and the zone
    shift for that one takes place at transmit.)
  - Now ignore garbage keys again.  Why are we getting two decimal 410s when
    we type the first character?  This doesn't make sense unless it's related
    to how we detect the xterm.


author: Henri Gomez <gomez@slib.fr>
changelog:
  - 0.15.1
  - 3/4ths of the restructuring to make it feasible to use lib5250 for display
    services for applications has been done.
  - Lots of cleanup - no longer has duplicate field value data, nor does it have
    many different componenets having a different perception of what the current
    field is.
  - Implemented terminal bells.  Whistles yet to come.
  - Some minor stuff.  Field Exit Required fields now require field exit, for
    example.


author: Henri Gomez <gomez@slib.fr>
changelog:
  - 0.14
  - Full FreeBSD support, see the README and other files in the freebsd/
    directory.  Special thanks to Scott Klement for this (I've put his name all
    over the ChangeLog for this -- this way, it's not _my_ fault <g>).
  - Linux-specific files moved to linux/ subdir.
  - README files updated - now more clear on how to set up X Windows support.
  - Field Minus sequence (Esc+M) added.
  - Dup key support added.
  - Small field exit bug fixed.
  - Help key/aid code implemented.
  - Fix per Carey Evans for handling right-blank fields.
  - Reset key now works even when keyboard is locked.  Possible but unlikely bug
    where reset key could cause the next keystroke to be ignored is fixed.
  - C programs which use stdin/stdout will now clear the input line properly.
  - A small fix to format table handling code with the Repeat to Address order.
    This problem may never have been observed, but hey...


author: Iain Arnell <iarnell@gmail.com> 1.008001-1
changelog:
  - update to latest upstream version
  - drop R/BR perl(ExtUtils::CBuilder) and perl(ExtUtils::ParseXS)


author: Chris Weyl <cweyl@alumni.drew.edu> 1.004004-1
changelog:
  - auto-update to 1.004004 (by cpan-spec-update 0.01)
  - added a new br on perl(ExtUtils::Install) (version 1.43)
  - added a new req on perl(CPAN) (version 1.80)
  - added a new req on perl(ExtUtils::CBuilder) (version 0)
  - added a new req on perl(ExtUtils::Install) (version 1.43)
  - added a new req on perl(ExtUtils::MakeMaker) (version 6.31)
  - added a new req on perl(ExtUtils::ParseXS) (version 0)
  - added a new req on perl(Module::Build) (version 0.28)


author: Chris Weyl <cweyl@alumni.drew.edu> 1.004000-1
changelog:
  - auto-update to 1.004000 (by cpan-spec-update 0.01)
  - altered br on perl(ExtUtils::MakeMaker) (6.31 => 6.42)


author: Ray Strode <rstrode@redhat.com> - 0.6.45-6
changelog:
  - Don't return bogus password expiration policy when
    shadow file is unavailable
    Resolves: #1530659


author: Ray Strode <rstrode@redhat.com> - 0.6.45-2
changelog:
  - Don't tread explicitly requested users as cached
    Fixes UncacheUser operation.
    Resolves: 1446620
    Related: #1432602


author: Ray Strode <rstrode@redhat.com> - 0.6.45-1
changelog:
  - Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
    Related: #1424623 #1334464


author: Ray Strode <rstrode@redhat.com> - 0.6.42-2
changelog:
  - Update to 0.6.44
    Related: #1424623
  - export password expiration policy from shadow
    Resolves: #1334464


author: Ray Strode <rstrode@redhat.com> - 0.6.35-11
changelog:
  - address minor bug in previous patch
    Related: #1220904

  - fix memory leak in log handler
    Resolves: #1292543


author: Matthias Clasen <mclasen@redhat.com> 0.6.15-2
changelog:
  - Make resetting user icons work
  - Update to 0.6.15
  - Fixes session chooser at login screen when logged into vt


author: Ray Strode <rstrode@redhat.com> 0.6.14-2
changelog:
  - Fix wtmp loading so users coming from the network are
    remembered in the user list in subsequent boots


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.8-1
changelog:
  - 1109923 - Fix module loading/configuration for Apache 2.4.
  - Document the runtime dependency on pam_authenticate_with_login_password.
  - Comment/code cleanup.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.7-1
changelog:
  - No longer call lookup_identity_hook explicitly, hook order does
    the same.
  - Silence compile warnings by specifying C99.


author: Parag <paragn@fedoraproject.org> 1.0.6-4
changelog:
  - Merge-review cleanups #226064
  - Updated summary, added Requires: pkgconfig
  - removed zero length file AUTHORS


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193423)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "BuildRequires: libXt-devel" for (#190169)


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXaw to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-2
changelog:
  - Added libXaw-0.99.2-bug-173027-libtool-sucks.patch to fix bug #173027,
    added 'autoconf' invocation prior to configure, and conditionalized it
    all with with_libtool_sucks_workaround macro.
  - Added _smp_mflags to make invocation.
  - Use *.h glob in file manifest instead of listing each header individually.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXaw to version 0.99.1 from X11R7 RC1
  - Update file manifest to find manpages in "man3x"
  - Added {_includedir}/X11/Xaw/Template.c to file manifest


author: Mike A. Harris <mharris@redhat.com> 0.99.0-5
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro
  - Fix all "BuildRequires:" deps with s/xorg-x11-//g


author: Mike A. Harris <mharris@redhat.com> 0.99.0-4
changelog:
  - Added dependency on xorg-x11-libXmu-devel to devel subpackage, as libXaw
    headers include libXmu headers directly which caused xkbutils to fail to
    build.


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.2.1-1
changelog:
  - update to 3.2.1
    - merged all patches or equivalents
    - re-merged hesinfo, so we obsolete it now
    - adds a pkgconfig configuration file for libhesiod
  - correct inconsistent changelog dates, assuming day-of-week is correct
  - add build requirement on libidn-devel
  - package the license


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-19
changelog:
  - fix the release number noted for the previous changelog entry (#225884)
  - remove unapplied "classes" patch (#225884)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-18
changelog:
  - adjust buildroot location (guidelines)
  - disable static libraries (guidelines)
  - tweak default payload attributes (guidelines)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-12
changelog:
  - call aclocal directly, because autoreconf didn't see the magic comment in
    the distributed version of aclocal.m4 which made it look like it was safe
    to generate a new one (#449550)


author: Nalin Dahyabhai <nalin@redhat.com> - 3.1.0-6
changelog:
  - run autoreconf instead of autoconf after untarring so that we get a
    config.h.in which suits the changes we make to configure.in (part of #197938)


author: Nalin Dahyabhai <nalin@redhat.com> - 3.1.0-5
changelog:
  - don't override libtool's defaults for permissions on its .la file, because
    we don't get debuginfo if the execute bit isn't set (pjones, in #190219)


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2-15
changelog:
  - actually set the soname in the shared library (ld doesn't automatically
    set the soname to the output file's name, oops)


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2-14
changelog:
  - on second thought, put the shared library back in, using a soversion of 0
    to have a chance at providing compatibility with apps linked dynamically
    on other distributions
  - make -devel depend on the same version of the main package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove the shared library patch -- different packages with shared libraries
    tend to use different sonames, so we'd run inevitably run into problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove pre and post scripts -- authconfig handles that stuff now
  - add the hesiod man page back in, as bind-devel doesn't provide it any more


author: Jeremy Katz <jlkatz@eos.ncsu.edu>
changelog:
  - use rpm macros where possible and FHS-ify
  - split into main and devel packages
  - add back requires for nscd


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog
  - moved addition of hesiod to nsswitch.conf to this package because we
    no longer use a separate libnss_hesiod.so
  - changed requires: caching-nameserver to nscd
  - added post-install script snippet to activate nscd on install


author: EL Errata <el-errata_ww@oracle.com> - 0.3.9.45-1.0.1
changelog:
  - add initial-setup-oracle.patch to change EULA location
    and bugzilla URL to http://linux.oracle.com


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.42-1
changelog:
  - Use constant+offset when turning systemd console logging on/off (#1479787) (mkolman)
    Resolves: rhbz#1479787


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.39-1
changelog:
  - Run GUI on the s390 if possible (#1378082) (mkolman)
    Resolves: rhbz#1378082
  - Make it possible to set stdout log verbosity level (mkolman)
    Related: rhbz#1378082
  - Make it possible to show window header (mkolman)
    Related: rhbz#1378082


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.35-1
changelog:
  - Change how Initial Setup reconfig mode is started (#1342536) (mkolman)
    Related: rhbz#1342536
  - Add systemd scriptlets for initial-setup-reconfigure.service (#1342536) (mkolman)
    Related: rhbz#1342536


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.34-1
changelog:
  - Suppress logging to stdout when TUI is started by s390 startup scripts (mkolman)
    Related: rhbz#1366776
  - Fix path to TUI executable in the s390 startup scripts (#1366776) (mkolman)
    Resolves: rhbz#1366776
  - Canonicalize symlinks returned by readlink (mkolman)
    Related: rhbz#1360343


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.32-1
changelog:
  - Fix reconfiguration service name (mkolman)
    Related: rhbz#1257624
  - Fix installation path for a reconfiguration related script (mkolman)
    Related: rhbz#1257624
  - Use the environs flag when setting the environment (mkolman)
    Related: rhbz#1270354
  - Some typo fixes and logging improvements (mkolman)
    Related: rhbz#1257624
  - Add a systemd service that enables Initial Setup if /.unconfigured exists (#1257624) (mkolman)
    Resolves: rhbz#1257624
  - Initialize Thread Manager as early as possible (#1249598) (mkolman)
    Related: rhbz#1249598
  - Adapt to addon execute() signature change (mkolman)
    Related: rhbz#1288636
  - Suppress an error message about missing initial-setup-graphical.unit (#1249598) (mkolman)
    Related: rhbz#1249598


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.31-1
changelog:
  - Makefile improvements (#1249598) (mkolman)
    Related: rhbz#1249598
  - Make Initial Setup startup more robust (#1249598) (mkolman)
    Resolves: rhbz#1249598
  - Move the s390 profile scripts to a subfolder (#1249598) (mkolman)
    Realeted: rhbz#1249598
  - Improve log messages for kickstart parsing error (#1249598) (mkolman)
    Related: rhbz#1249598
  - Make sure full screen is used & window header bar is hidden (#1290321) (mkolman)
    Resolves: rhbz#1290321
  - Use blank title for the Initial Setup window (#1310179) (mkolman)
    Resolves: rhbz#1310179


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.30-1
changelog:
  - Only root should be able to read the initial-setup-ks.cfg file (#1264336) (mkolman)
    Resolves: rhbz#1264336


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.28-1
changelog:
  - Run the TUI service before hvc0.service (#1209731) (mmatsuya)
    Resolves: rhbz#1209731
  - Don't create /etc/sysconfig/initial-setup on s390 (#1181209) (mkolman)
    Related: rhbz#1181209
  - Setup the locale before starting the UI (dshea)
    Resolves: rhbz#1198642


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.26-1
changelog:
  - Use systemd service status for run detection on the S390 console (#1181209) (mkolman)
    Resolves: rhbz#1181209
  - Bump the required Anaconda version (#1229747) (mkolman)
    Related: rhbz#1229747


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.25-2
changelog:
  - Don't show the EULA spoke in reconfig mode if license is already accepted (#1110439) (mkolman)
    Related: rhbz#1110439
  - Read the kickstart from previous IS run, if available (#1110439) (mkolman)
    Related: rhbz#1110439
  - Add support for externally triggered reconfig mode (#1110439) (mkolman)
    Resolves: rhbz#1110439


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.24-1
changelog:
  - Make Initial Setup compatible with rebased Anaconda (#1229747) (mkolman)
    Resolves: rhbz#1229747
  - Log the reason if GUI import fails (#1229747) (mkolman)
    Related: rhbz#1229747


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.23-1
changelog:
  - Redirect the EULA spoke help button to the Initial Setup hub help file (#1072033) (mkolman)
    Related: rhbz#1072033


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.21-1
changelog:
  - Move the firstboot(windowmanager) dependency to the GUI package (#999464) (mkolman)
    Related: rhbz#999464


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.20-1
changelog:
  - Explicitly require the main package in the GUI sub package (#1078917) (mkolman)
    Related: #1078917


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.19-1
changelog:
  - Point to the new Initial Setup wiki page (#1154656) (mkolman)
    Resolves: rhbz#1154656
  - Add syslog logging support (#1153768) (mkolman)
    resolves: rhbz#1153768


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.18-1
changelog:
  - Fix Initial Setup to correctly support the Anaconda built-in Help (#1072033) (mkolman)
    Related: rhbz#1072033


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.14-1
changelog:
  - Bump Anaconda version requirement for the GUI split (mkolman)
    Related: rhbz#999464
  - Split GUI code into a separate package (#999464) (vpodzime)
    Resolves: rhbz#999464


author: Martin Kolman <mkolman@redhat.com> - 0.3.9.12-1
changelog:
  - Set initial-setup translation domain for the hub and EULA spoke (mkolman)
    Resolves: rhbz#1040240


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.9.9-1
changelog:
  - Try to quit plymouth before running our X server instance
    Resolves: rhbz#1058329
  - Get rid of the empty debuginfo package
    Related: rhbz#1057590


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.9.6-1
changelog:
  - Ignore .po and generated files in po/ (dshea)
    Related: rhbz#1040240
  - Mark title strings in the initial-setup hub as translatable (dshea)
    Resolves: rhbz#1040240
  - Reword the EULA spokes' status messages (vpodzime)
    Resolves: rhbz#1039672
  - Cancel formatting of EULA when putting it into the text buffer (vpodzime)
    Resolves: rhbz#1039675


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.9.4-1
changelog:
  - Read licence files as utf-8 encoded (vpodzime)
    Resolves: rhbz#1023052
  - Inform user that the system may be rebooted (vpodzime)
    Resolves: rhbz#1022040


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.9.3-1
changelog:
  - Fix how spokes are collected for the I-S main hub
    Related: rhbz#1000409
  - Add TUI Eula spoke
    Related: rhbz#1000409
  - Reboot the system if EULA is not agreed
    Related: rhbz#1000409


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.9.2-1
changelog:
  - Put license view into a scrolled window (#1015005) (vpodzime)
  - Clear the default text before inserting the EULA (dshea)
    Related: rhbz#1015005


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.9.1-1
changelog:
  - Yet another serial console in ARMs (vpodzime)
    Related: rhbz#1000409
  - Fix the base mask of initial_setup gui submodules (vpodzime)
    Related: rhbz#1000409
  - Specify and use environment of the main hub (vpodzime)
    Related: rhbz#1000409
  - EULA agreement spoke (#1000409) (vpodzime)
  - Require new version of anaconda with eula command support (vpodzime)
    Related: rhbz#1000409


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.8-1
changelog:
  - Read /etc/os-release to get product title (#1000426) (vpodzime)
  - Don't let product_title() return None (vpodzime)
  - Apply the timezone and NTP configuration (#985566) (hdegoede)
  - Make handling translations easier (vpodzime)
  - Make translations work (vpodzime)
  - Prevent getty on various services killing us (#979174) (vpodzime)
  - Initialize network logging for the network spoke (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.6-1
changelog:
  - Make serial-getty wait for us as well (#970719) (vpodzime)
  - Disable the service only on successful exit (#967617) (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.3.5-1
changelog:
  - Reference the new repository in the .spec file (vpodzime)
  - Prevent systemd services from running on live images (#962196) (awilliam)
  - Don't traceback if the expected kickstart file doesn't exist (#950796) (vpodzime)


author: Martin Sivak <msivak@euryale.brq.redhat.com> - 0.3.2-1
changelog:
  - Modify the ROOT_PATH properly
  - Do not execute old ksdata (from anaconda's ks file)
  - Save the resulting configuration to /root/initial-setup-ks.cfg


author: Martin Sivak <msivak@euryale.brq.redhat.com> - 0.3.1-1
changelog:
  - Use updated Anaconda API
  - Request firstboot environment spokes
  - Initialize anaconda threading properly


author: Martin Sivak <msivak@euryale.brq.redhat.com> - 0.3-1
changelog:
  - Use updated Anaconda API
  - Fix systemd units
  - Add localization spokes to TUI
  - Write changes to disk
  - Conflict with old firstboot


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 1.1.0-5
changelog:
  - Minor tweaks to summaries and descriptions.
  - Don't own /usr/include/X11.
  - Use a regular, unversioned dep on xorg-x11-filesystem.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193421)
  - Replace "makeinstall" with "make install DESTDIR=..."


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libSM to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libSM to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Renamed package to remove "xorg-x11" from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro


author: John Dennis <jdennis@redhat.com> - 2.0.1-8
changelog:
  - add missing Obsoletes for prior python-oauthlib package,
    replaced by python2-oauthlib
    Resolves: rhbz#1401784


author: Sergio Corrreia <scorreia@redhat.com> - 2.7.1-8.1
changelog:
  - Resolves: CVE-2019-15605 http-parser: nodejs: HTTP request
                             smuggling using malformed Transfer-Encoding header


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.1-8
changelog:
  - Backport needed test fixes
  - Related: rhbz#1666024 - CVE-2018-7159 http-parser: nodejs: HTTP parser
                            allowed for spaces inside Content-Length header
                            values [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.1-7
changelog:
  - Resolves: rhbz#1666024 - CVE-2018-7159 http-parser: nodejs: HTTP parser
                             allowed for spaces inside Content-Length header
                             values [rhel-7]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.1-6
changelog:
  - Resolves: rhbz#1666381 - CVE-2018-12121 http-parser: nodejs: Denial of
                             Service with large HTTP headers [rhel-7]


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.7.1-5
changelog:
  - Bump http-parser release number to avoid people pulling EPEL package instead
    of RHEL package
    Resolves: rhbz#1479471


author: Samantha N. Bueno <sbueno[at]redhat.com> - 3.3.12ga12-1
changelog:
  - updated to 3.3.12ga12
  - fixes CVE-2012-5662 (#889373, #924228)
  - add support for aarch64 to build system (#926737)


author: Parag Nemade <paragn AT fedoraproject DOT org> - 3.3.12ga11-5
changelog:
  - Remove vendor tag from desktop file as per https://fedorahosted.org/fesco/ticket/1077
  - Cleanup spec as per recently changed packaging guidelines


author: Karsten Hopp <karsten@redhat.de> 3.3.4p7-2
changelog:
  - silence chkconfig
  - rpmlint fixes:
   - replace PreReq/BuildPrereq with Requires/BuildRequires
   - move ibm_hosts to %{_sysconfdir}
   - fix end of line encodings in docs


author: Karsten Hopp <karsten@redhat.de> 3.3.4p6-1
changelog:
  - update to patchlevel 6
  - drop obsolete segfault patch
  - build with modular X
  - build with current openssl
  - gccmakedep is gone, use makedepend wrapper instead


author: Karsten Hopp <karsten@redhat.de> 3.3.4-2
changelog:
  - spec file cleanups from Chris Ricker <kaboom@oobleck.net>
  - remove backup files from rpm patch process


author: Karsten Hopp <karsten@redhat.de> 3.3.3.b2-1
changelog:
  - update to b2, which fixes a segfault when login is done with 
    an entry in .ibm_hosts (via emulate_input)


author: Karsten Hopp <karsten@redhat.de> 3.3.2.p1-5
changelog:
  - update c3270 package to patchlevel2
  - fix buildrequires (#124280)
  - fix compiler warnings (#106312, #78479)


author: Karsten Hopp <karsten@redhat.de> 3.2.19-3
changelog:
  - update to patchlevel 4:
    Re-enable the automatic font switching when the
    x3270 window is resized


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.2.16-1
changelog:
  - 3.2.16
  - adapt patches
  - get rid of the **** pdksh requirement
  - split the tcl version into a different package, no need to require tcl for
    normal use
  - split the x11 frontend into a separate package.
    We don't necessarily have X on a machine where we want to run
    3270 sessions (e.g. s390...)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 3.2.14
  - Add c3270 (textmode x3270) in x3270-text package
  - Fix build
  - Make ibm_hosts a %config(noreplace)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-18
changelog:
  - Distinguish between none quota limits and no allocated resources in quota(1)
    tool (bug #1601109)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-14
changelog:
  - Add nfs-rquotad.service alias for backward compatibility (bug #1207239)
  - Start rpc-rquotad.service when starting nfs-server.service (bug #1207239)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-12
changelog:
  - Do not warn if rquotad RPC service is not registered (bug #1155584)
  - Query kernel for next quota on XFS or file system with hidden quota files
    (bug #1305968)
  - Add rpc-rquotad.service file which was known as nfs-rquotad.service
    in nfs-utils (bug #1207239)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-9
changelog:
  - Move /sbin/* files under /usr (bug #983179)
  - Harden executables due to rpc.rquotad and quota_nld daemons (bug #983179)
  - Document quotagrpadmins(5), quotatab(5), warnquota.conf(5), rcp.rquota(8)
    (bug #983179)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-6
changelog:
  - Add LGPLv2+ and GPLv2 to license declaration
  - Correct changelog dates
  - Package additional LDAP scripts as a documentation
  - Package XFS-specific tools


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-4
changelog:
  - Do not fiddle with quota files on XFS and GFS (bug #846296)
  - Make sure option -d at quotacheck provides at least as much information as
    option -v (SF#3602777)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-2
changelog:
  - Remove unneeded cryptographic library build-time dependencies
  - Fortify build-time configuration
  - Migrate quota_nld service from sysvinit to systemd
  - Document --print-below option in quota_nld service


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-1
changelog:
  - 4.00 bump
  - Remove unneeded LDAP linking patch
  - Prevent from stripping by configure option
  - Remove unneeded sed scripts on sources
  - Remove unneeded file removal


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.16.pre1
changelog:
  - Report quotacheck failures by return code (bug #717982)
  - Improve quotacheck error message (bug #717982)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.9.pre1
changelog:
  - Explain meaning of the second column in repquota output
  - Make RPC handle properly host names with colons (i.e. IPv6 server host name)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.6.pre1
changelog:
  - Store quota_nld PID into PID file (bug #634137)
  - Do not allow non-root to control quota_nld service (bug #634137)
  - Add quotasync tool (bug #596794)
  - Implement quotacheck for GFS2 (bug #596794)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.4.pre1
changelog:
  - Make RPC block factor dynamic (bug #667757)
  - Check whether set limits fit into the range supported by quota format
    (bug #668688)
  - Check set limits fit into the range supported by RPC transport (bug #668691)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-16
changelog:
  - Break dependecies on main package as there are none
  - Add plain text documentation to each sub-package
  - Package additional documentation into `doc' sub-package


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-15
changelog:
  - Add quota_nld deamon init script (bug #634169)
  - Sub-package quota_nld files to weak dependecies
  - Sub-package warnquota files to weak dependecies


author: Petr Pisar <ppisar@redhat.com> 1:3.17-12
changelog:
  - Prevent corruptive read/write from/to NULL address in rpc.rquotad
    (Resolves #528581, example in #532342)
  - Fix spelling in summary


author: Ondrej Vasik <ovasik@redhat.com> 1:3.17-4
changelog:
  - clarify statements about LDAP in warnquota conf
    (related to #490106)
  - fix parsing issue in warnquota.c(#490125)
  - enable rpcsetquota by default(#159292, #469753)


author: Ondrej Vasik <ovasik@redhat.com> 1:3.16-5
changelog:
  - fix rpmlint warnings - absolute symlink and not using epoch
    in version in changelog (#226353)
  - rquota headers and manpage now in devel subpackage


author: Ondrej Vasik <ovasik@redhat.com> 3.16-4
changelog:
  - fix bug in warnquota which could result in bogus hostname
    and domainname (upstream)
  - remove IMMUTABLE flag from quota file in quotacheck(upstream)


author: Ondrej Vasik <ovasik@redhat.com> 3.16-3
changelog:
  - Add support for -h option (do not show invalid option
    error) at edquota,setquota and quota (#457898)


author: Ondrej Vasik <ovasik@redhat.com> 3.16-2
changelog:
  - upstream fix of some typos, string formats + 4TB+ fix
    for repquota
  - some additional stripping removal
  - change default mode of binaries from 555 to 755
    (strip error messages in build log)


author: Ondrej Vasik <ovasik@redhat.com> 3.15-6
changelog:
  - added enable-ldapmail=try option(wonder how #133207
    got closed by FC-4 without it or warnquota.conf change)
  - dropped with-ext2direct=no option - this option is 
    invalid and original bug was fixed in 3.07


author: Ondrej Vasik <ovasik@redhat.com> 3.15-5
changelog:
  - added symbolic link for quotaoff man page(#436110)
  - don't ship xqmstats.8 man page as we don't ship those
    binaries(#436100)


author: Steve Dickson <SteveD@RedHat.com> 3.15-2
changelog:
  - More review comments:
      - BuiltPreReq to BuiltReq
      - Removed '.' From Summary
      - Added 'GPLv2+' to License Tag
      - Condensed the _sysconfdir entries in to one line


author: Philip Copeland <bryce@redhat.com> 3.06-5
changelog:
  - added --with-ext2direct=no to fix #73244
    without this users with UID's > 65535 will not
    be able to exist on a quota enabled FS


author: Philip Copeland <bryce@redhat.com> 3.06-3
changelog:
  - Bah, I'd dropped epoch from the spec file but seems
    we need this if you want to upgrade as the epoch
    number has precedence over the version/release
    numbers.


author: Philip Copeland <bryce@redhat.com> 3.06-1
changelog:
  - Ditched the 3.01-pre9 src base for 3.06
    Rebuilt without any patchs

  ============================================================


author: Preston Brown <pbrown@redhat.com>
changelog:
  - fixed bug #52075 (problem with ext2 labels)
  - backup data files off by default in quotacheck, optional backup flag added
  - fix bug where giving a bad directory or device would cause 
    quotaon/quotacheck to simulate "-a" behaviour
  - if a device name (i.e /dev/hda1) is passed, look up the corresponding mount
    point


author: Preston Brown <pbrown@redhat.com>
changelog:
  - quota 3.00 is required by recent kernel 2.4 changes
  - no warnquota included this time, not yet ported
  - quite a bit of work on quotacheck to make is backwards compatible
  - we will likely go back to "quota 2.00" as these projects merge...


author: Preston Brown <pbrown@redhat.com>
changelog:
  - 2.00 final, rolls in pretty much all our patches. :)
  - fix reporting of in use dquot entries from quotastats
  - change repquota man page to fix documentation of -v (#10330)
  - include warnquota.conf


author: Peter Hutterer <peter.hutterer@redhat.com> 0.25.0-2
changelog:
  - Don't provide xorg-x11-drv-synaptics (#1413811)
  - Don't reassign libinput to wacom touchpads, that's left to the user
  - Don't assign to wacom tablets, tablets behave differently on RHEL7.4


author: Peter Hutterer <peter.hutterer@redhat.com> 0.23.0-2
changelog:
  - Ignore LED updates for disabled devices, avoids a null-pointer dereference
    when an AccessX timeout is set


author: Peter Hutterer <peter.hutterer@redhat.com> 0.22.0-3
changelog:
  - Provide xorg-x11-drv-synaptics. The actual content is now provided by
    xorg-x11-drv-synaptics-legacy (#1394836). For details, see
    https://fedoraproject.org/wiki/Changes/RetireSynapticsDriver


author: Peter Hutterer <peter.hutterer@redhat.com> 0.2.0-1
changelog:
  - Only match on specific device types, don't match on joysticks or tablets
  - libinput 0.2.0
  - switch to new fdo host


author: Gary Benson <gbenson@redhat.com>
changelog:
  - make like all the other perl modules we ship (bind to perl version,
    use perl dependency finding scripts, build filelist automatically).
  - include documentation
  - build against perl 5.6.1


author: Marek Kasik <mkasik@redhat.com> - 0.28.0-3
changelog:
  - Check mtimes of files in /etc/dconf/db/*.d/ directories
  - when running "dconf update"
  - Resolves: #1570569


author: Marek Kasik <mkasik@redhat.com> - 0.26.0-1
changelog:
  - Update to 0.26.0
  - Remove editor subpackage
  - Return libdbus-1 library (not header or pkgconfig files)
  - Resolves: #1386841


author: Kalev Lember <kalevlember@gmail.com> - 0.15.3-1
changelog:
  - Update to 0.15.3
  - Install the HighContrast icons and update the icon cache scriptlets to take
    this into account


author: Rex Dieter <rdieter@fedoraproject.org> - 0.15.2-2
changelog:
  - -devel: drop Requires: glib2-devel, already gets pulled in via pkgconfig deps
  - -editor: add icon scriptlets
  - tighten subpkg deps via %{_isa}


author: Marek Kasik <mkasik@redhat.com> - 0.14.0-3
changelog:
  - Update License field
  - Update Source URL
  - Add link of corresponding bug for the memory leak patch


author: Richard Hughes <rhughes@redhat.com> 0.3.2-0.1.20100608
changelog:
  - Update to a git snapshot so that users do not get a segfault in every
    application using GSettings.


author: Kamil Dudka <kdudka@redhat.com> 1.8.0-2
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
  - fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
  - fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-12
changelog:
  - session: avoid printing misleading debug messages (#1503294)
  - scp: send valid commands for remote execution (#1489733)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-9
changelog:
  - curl consumes too much memory during scp download (#1080459)
  - prevent a not-connected agent from closing STDIN (#1147717)


author: Paul Howarth <paul@city-fan.org> 1.4.3-1
changelog:
  - Update to 1.4.3
    - compression: add support for zlib@openssh.com
    - sftp_read: return error if a too large package arrives
    - libssh2_hostkey_hash.3: update the description of return value
    - Fixed MSVC NMakefile
    - examples: use stderr for messages, stdout for data
    - openssl: do not leak memory when handling errors
    - improved handling of disabled MD5 algorithm in OpenSSL
    - known_hosts: Fail when parsing unknown keys in known_hosts file
    - configure: gcrypt doesn't come with pkg-config support
    - session_free: wrong variable used for keeping state
    - libssh2_userauth_publickey_fromfile_ex.3: mention publickey == NULL
    - comp_method_zlib_decomp: handle Z_BUF_ERROR when inflating
  - Drop upstreamed patches


author: Kamil Dudka <kdudka@redhat.com> 1.4.2-4
changelog:
  - examples: use stderr for messages, stdout for data (upstream commit b31e35ab)
  - Update libssh2_hostkey_hash(3) man page (upstream commit fe8f3deb)


author: Kamil Dudka <kdudka@redhat.com> 1.4.2-3
changelog:
  - Fix basic functionality of libssh2 in FIPS mode
  - Skip SELinux-related quirks on recent distros to prevent a test-suite failure


author: Paul Howarth <paul@city-fan.org> 1.4.2-1
changelog:
  - Update to 1.4.2
    - Return LIBSSH2_ERROR_SOCKET_DISCONNECT on EOF when reading banner
    - userauth.c: fread() from public key file to correctly detect any errors
    - configure.ac: add option to disable build of the example applications
    - added 'Requires.private:' line to libssh2.pc
    - SFTP: filter off incoming "zombie" responses
    - gettimeofday: no need for a replacement under cygwin
    - SSH_MSG_CHANNEL_REQUEST: default to want_reply
    - win32/libssh2_config.h: remove hardcoded #define LIBSSH2_HAVE_ZLIB


author: Paul Howarth <paul@city-fan.org> 1.4.1-1
changelog:
  - Update to 1.4.1
    - Build error with gcrypt backend
    - Always do "forced" window updates to avoid corner case stalls
    - aes: the init function fails when OpenSSL has AES support
    - transport_send: finish in-progress key exchange before sending data
    - channel_write: acknowledge transport errors
    - examples/x11.c: make sure sizeof passed to read operation is correct
    - examples/x11.c: fix suspicious sizeof usage
    - sftp_packet_add: verify the packet before accepting it
    - SFTP: preserve the original error code more
    - sftp_packet_read: adjust window size as necessary
    - Use safer snprintf rather then sprintf in several places
    - Define and use LIBSSH2_INVALID_SOCKET instead of INVALID_SOCKET
    - sftp_write: cannot return acked data *and* EAGAIN
    - sftp_read: avoid data *and* EAGAIN
    - libssh2.h: add missing prototype for libssh2_session_banner_set()
  - Drop upstream patches now included in release tarball


author: Paul Howarth <paul@city-fan.org> 1.4.0-3
changelog:
  - Don't try to use openssl's AES-CTR functions
    (http://www.libssh2.org/mail/libssh2-devel-archive-2012-03/0111.shtml)


author: Paul Howarth <paul@city-fan.org> 1.4.0-2
changelog:
  - fix libssh2 failing key re-exchange when write channel is saturated (#804156)
  - drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> 1.4.0-1
changelog:
  - update to 1.4.0
    - added libssh2_session_supported_algs()
    - added libssh2_session_banner_get()
    - added libssh2_sftp_get_channel()
    - libssh2.h: bump the default window size to 256K
    - sftp-seek: clear EOF flag
    - userauth: provide more informations if ssh pub key extraction fails
    - ssh2_exec: skip error outputs for EAGAIN
    - LIBSSH2_SFTP_PACKET_MAXLEN: increase to 80000
    - knownhost_check(): don't dereference ext if NULL is passed
    - knownhost_add: avoid dereferencing uninitialized memory on error path
    - OpenSSL EVP: fix threaded use of structs
    - _libssh2_channel_read: react on errors from receive_window_adjust
    - sftp_read: cap the read ahead maximum amount
    - _libssh2_channel_read: fix non-blocking window adjusting 
  - add upstream patch fixing undefined function reference in libgcrypt backend
  - BR: /usr/bin/man for test suite


author: Paul Howarth <paul@city-fan.org> 1.3.0-3
changelog:
  - make docs package noarch where possible
  - example includes arch-specific bits, so move to devel package
  - use patch rather than scripted iconv to fix character encoding
  - don't make assumptions about SELinux context types used for the ssh server
    in the test suite
  - skip the ssh test if /dev/tty isn't present, as in some versions of mock
  - make the %files list more explicit
  - use tabs for indentation


author: Kamil Dudka <kdudka@redhat.com> 1.2.7-1
changelog:
  - update to 1.2.7 (#632916)
  - avoid multilib conflict on libssh2-docs
  - avoid build failure in mock with SELinux in the enforcing mode (#558964)


author: Chris Weyl <cweyl@alumni.drew.edu> 1.2.4-1
changelog:
  - update to 1.2.4
  - drop old patch0
  - be more aggressive about keeping .deps from intruding into -docs


author: Hans de Goede <j.w.r.degoede@hhs.nl> 0.1.2-5
changelog:
  - Taking over as maintainer since Anvil has other priorities
  - Long long due rebuild with new gcc for FC-5, it seems this may have already
    been done, since the last rebuild was of March 16 and the Rebuild Request
    bug of March 19? Rebuilding anyway to be sure (bug 185876)
  - Fix (remove) use of rpath


author: Ville Skyttä <ville.skytta at iki.fi> - 0:0.1.2-0.fdr.1
changelog:
  - Update to 0.1.2.
  - Use "make install DESTDIR=...", disable dependency tracking.
  - Run tests during build.
  - Drop fftw-devel build dep, it's only for an optional part of the test suite.


author: Paul Howarth <paul@city-fan.org> - 20120719.001-1
changelog:
  - Update to 20120719.001:
    - Require Test::More ≥ 0.95 for subtest support
    - No code or feature changes
  - Bump Test::Manifest version requirement to 1.21
  - Bump Test::More version requirement to 0.95
  - Drop redundant buildreq perl(Test::Prereq)


author: Paul Howarth <paul@city-fan.org> - 20120719-1
changelog:
  - Update to 20120719:
    - Support using data from RangeMessage.xml, so you can use the latest data
      from ISBN without updating this module
  - Fix shellbang and permissions of make_data.pl script to placate rpmlint
  - Filter dependency on perl(LWP::Simple), required only by make_data.pl script,
    not in normal operation
  - Don't need to remove empty directories from the buildroot
  - BR: perl(Carp), perl(File::Spec::Functions) and perl(Test::Manifest) ≥ 1.14
  - BR: at least version 1.00 of perl(Test::Pod)


author: Paul Howarth <paul@city-fan.org> - 20081208-8
changelog:
  - Clean up for modern rpmbuild:
    - Drop BuildRoot specification
    - Drop %clean section
    - Don't bother cleaning buildroot in %install section
    - Make %files list more explicit
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Use %{_fixperms} macro rather than our own chmod incantation
    - Replace provides filter with version that works with rpm ≥ 4.9
  - Include tests as %doc since they're referred to by examples/README


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.42-2
changelog:
  - Add BR perl(File::Spec)
  - Replace PERL_INSTALL_ROOT with DESTDIR
  - Remove deleting empty directories
  - Remove defattr


author: Petr Pisar <ppisar@redhat.com> 1.33-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Fix dependencies
  - Requires perl(Scalar::Util) is autodetected
  - Do not provide private library
  - Remove pre-F12 BuildRoot stuff


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 2.5-9
changelog:
  - also remove include/agg_conv_gpc.h as it also carries a copy of the non-Free
    GPC license (upstream also recommends removing that file under
    http://www.antigrain.com/license/index.html#toc0005) (#559611)


author: Ville Skyttä <ville.skytta@iki.fi> - 1:1.3.3-3
changelog:
  - Run test suite during build.
  - Fix doc file permissions and duplicate doc dir ownership.
  - rpmlint warning fixes.


author: Jindrich Novy <jnovy@redhat.com> 1.3.2-2
changelog:
  - ship documentation only in -doc subpackage and only license
    in -devel (#540634) - thanks to Edward Sheldrake
  - -devel-doc subpackage requires -devel


author: Adam Jackson <ajax@redhat.com> 1.2.2-2
changelog:
  - libvorbis-1.2.2-svn16228.patch: Backport a fix from pre-1.2.3 to hopefully
    fix small sound file playback. (#505610)


author: Ondrej Holy <oholy@redhat.com> - 3.22.0-6
changelog:
  - Do not restart service after unclean exit code
  - Do not listen all if invalid interface is provided
  - Resolves: #1546043, #1580577


author: Matthias Clasen <mclasen@redhat.com> - 3.6.2-2
changelog:
  - Don't add a vendor prefix to the desktop file, that breaks
    activating the preferences from the statusicon (#827913)


author: Mark McLoughlin <markmc@redhat.com> 2.12.0-2
changelog:
  - Add patch from Alexandre Oliva <oliva@lsd.ic.unicamp.br> to fix
    more keyboard brokeness (#158713)


author: Mark McLoughlin <markmc@redhat.com> 2.10.0-4
changelog:
  - Fix various keyboarding handling issues:
     + bug #142974: caps lock not working
     + bug #140515: shift not working with some keys
     + bug #134451: over-eager key repeating


author: Mark McLoughlin <markmc@redhat.com> 2.8.0.1-1.1
changelog:
  - Don't hang with metacity's "reduced resources" mode (#134240) 
  - Improve the key repeat rate situation a good deal (#134451)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.9-8.20130126
changelog:
  - update to 20130126
  - clear scrollback buffer in clear (#815790)
  - make -base and -term subpackages noarch
  - make some dependencies arch-specific


author: Miroslav Lichvar <mlichvar@redhat.com> 5.7-5.20100116
changelog:
  - fix narrow/wide libtinfo compatibility
  - fix wattrset macro to not produce warning with current gcc (#556645)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-18.20080628
changelog:
  - update to patch 20080628
  - move mlterm and screen.* entries to -base
  - change kbs to ^? in rxvt and screen entries


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-16.20080301
changelog:
  - update to patch 20080301
  - provide libtermcap.so (#428898)
  - move all headers to /usr/include
  - move libncursesw out of /usr
  - make examples in documentation compilable (#436355)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-13.20080112
changelog:
  - update to patch 20080112
  - make -libs, -base, -term subpackages
  - obsolete termcap and libtermcap
  - update urxvt entry


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-10.20070812
changelog:
  - fix comp_hash string output
  - avoid comparing padding in cchar_t structure
  - remove gawk from buildrequires


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-6.20070303
changelog:
  - update to patch 20070303
  - use one libtinfo for both libncurses and libncursesw
  - shorten -devel description


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-4.20070210
changelog:
  - update to patch 20070210
  - generate separate terminfo library
  - move static libraries to -static subpackage
  - avoid unnecessary linking with libdl


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-2.20070120
changelog:
  - update to patch 20070120
  - don't depend on bash, drop resetall script
  - include rxvt-unicode description


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-27.20061209
changelog:
  - update to patch 20061209
  - strip large tables from shared libraries, reduce number of relocations
  - package utils linked with libncurses instead of libncursesw
  - package only wide-character headers


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-25.20060715
changelog:
  - move libncurses and some terminfo entries out of /usr
  - drop console symlink and sparc terminfo entries


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-24.20060715
changelog:
  - modify tgetstr to make screen happy (#202480)
  - use CFLAGS when linking (#199369)
  - change BuildRoot tag to comply with Fedora packaging guidelines


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-20
changelog:
  - update to patch 20060701
  - don't strip libraries, chmod +x them
  - move .so links to devel package
  - add gpm-devel to buildrequires
  - spec cleanup


author: Petr Raszyk <praszyk@redhat.com> 5.5-11
changelog:
  - According Henrik Nordstrom (hno@squid-cache.org)
    Diff between the two versions of curses.h on x86_64
    Patch ncurses-5.5-chtypeaslong2.patch
    See #178824


author: Petr Raszyk <praszyk@redhat.com> 5.4-21
changelog:
  - Clear window after: filter()+'terminal-resizing'+endwin()
    doupdate()+endwin()
    See bug #174498, patch ncurses-5.4-endwinfilter.patch


author: 5.4-19 <praszyk@redhat.com> 5.4-19
changelog:
  - Clear window after: filter()+initscr()+endwin()+refresh()
    See bug #2966, patch ncurses-5.4-filter.patch


author: Petr Rockai <prockai@redhat.com> - 5.4-17
changelog:
  - apply patch from Hans de Goede, fixing BR142659 [The
    terminfo data for kbs changed from \177 to ^H]


author: Adrian Havill <havill@redhat.com> 5.4-11
changelog:
  - add latest rollup patches and weekly patches
  - remove home/end patch, which is now included in latest
    terminfo.src and termcap.src
  - add term.sh to /etc/profile.d, reference in /etc/bashrc
  - modify term.sh to support rxvt (#122815 comment 93)


author: Adrian Havill <havill@redhat.com> 5.4-9
changelog:
  - remove terminfo try-to-please-all xterm hackery; it's now ptty
    and profile's job to point to the correct terminal. (#122815)


author: Adrian Havill <havill@redhat.com> 5.4-5
changelog:
  - remove --with-gpm from configure, as it adds a pkg
    dependency (#122336) and causes too many problems vs its benefits


author: Adrian Havill <havill@redhat.com> 5.4-3
changelog:
  - link "xterm" to "xterm-color" as temp fix for escape problem (#115448)
  - remove old zcat for PATCH1


author: Adrian Havill <havill@redhat.com> 5.3-9
changelog:
  - remove not-so safe-sprintf configure option because the code does
    not appear to be stable enough for some apps. (#103790)


author: Adrian Havill <havill@redhat.com> 5.3-7
changelog:
  - fixed the safe sprintf code that was enabled in the previous release
    by the configure parameter. (#101486)


author: Adrian Havill <havill@redhat.com> 5.3-5
changelog:
  - added latest rollup patch with widec/UTF8 centric weekly (20030517)
  - added --enable-widec to configure (#86311)
    original work done by Mr. Sam <sam@email-scan.com>
  - require sharutils (#86605)
  - add gpm, xmc support
  - add debug syms back into package
  - updated autoconf/configure patch


author: Adrian Havill <havill@redhat.com> 5.3-3
changelog:
  - remunged xterm changes from 5.2 patch for 5.3
  - updated screen entry (#82951)
  - fixed ka3, kb2 and kf0 entries (#77506)


author: Adrian Havill <havill@redhat.com> 5.3-1
changelog:
  - upgrade to 5.3 for sake of utf-8, wide chars (#77585 ...)
  - spec file summary/desc grammar (#73583)
  - add Requires: for c++ devel subpkg (#74002)
  - terminfo.src patches no longer needed
  - adjust autoconf patch


author: Bernhard Rosenkraenzer <bero@redhat.com> 5.2-26
changelog:
  - Remove duplicated files (#62752)
  - Don't strip libraries (#60398)
  - Remove cbt capability from xterm description (#61077)


author: Bernhard Rosenkraenzer <bero@redhat.com> 5.2-17
changelog:
  - Patchlevel 20020209
  - Fix zero-substitution of cf_cv_type_of_bool (#59450)
  - Fix rebuilding of configure script with autoconf 2.5x


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 5.2
  - Fix typo in man page (Bug #20205)
  - update the "screen" terminfo entries to the version supplied with
    screen 3.9.8


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - Add xterm patch from Hans de Goede <hans@highrise.nl>
  - Patch 20000108, this fixes a problem with a header file.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - revert to the old major number - because the ABI is not changed (and we
    should be handling the changes via symbol versioning anyway)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix a typo in spec
  - Add the 19991006 patch, fixing some C++ STL compatibility problems.
  - get rid of profiling and debugging versions - we need to save space...


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 5.0
  - some spec cleanups to make updating easier
  - add links *.so.5 to *.so.4 - they are fully binary compatible.
    (Why did they change the invocation number???)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - don't build the C++ demo code
  - update patch set to the current as of today (redid all the individual
    patches in a single one)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added terminfo entry for the poor guys using lat1 and/or lat-2 on their
    consoles... Enjoy linux-lat ! Thanks, Erik !


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - new patch to get xterm-color and nxterm terminfo entries
  - aliased them to rxvt, as that seems to satisfy everybody


author: Kalev Lember <kalevlember@gmail.com> - 3.14.2-2
changelog:
  - Revise the summary for consistency with the parallel installable
    glade2/glade3 packages (#882557)


author: Kalev Lember <kalevlember@gmail.com> - 3.12.0-3
changelog:
  - Update the spec file comments about licensing and simplify the License tag
  - Install the typelib in -libs subpackage


author: Kalev Lember <kalevlember@gmail.com> - 3.12.0-2
changelog:
  - Review fixes (#806093)
  - Use find_lang --with-gnome for including help files
  - Include license files also in the main package in addition to -libs


author: Kalev Lember <kalevlember@gmail.com> - 3.11.0-1
changelog:
  - Initial packaging based on Fedora glade3
  - Rename the package to glade; added obsoletes for upgrade path
  - Spec clean up for review


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - Internal refactorings to support Package::Anon stashes
  - BR: perl(base) and perl(Test::Requires) for test suite
  - Update patch for old distro compatibility
  - Explicitly run the release/author tests


author: Paul Howarth <paul@city-fan.org> - 0.25-6
changelog:
  - Drop EPEL-4 support
    - Test::LeakTrace now universally available
    - Suitably recent version of ExtUtils::MakeMaker now universally available
    - Drop %defattr, redundant since rpm 4.4
  - BR: perl(File::Temp)
  - Don't need to remove empty directories from the buildroot


author: Paul Howarth <paul@city-fan.org> - 0.25-1
changelog:
  - Update to 0.25
    - Invalid package names (for instance, Foo:Bar) are not allowed
    - Invalid stash entry names (anything containing ::) are not allowed
  - Update patches to apply cleanly


author: Paul Howarth <paul@city-fan.org> - 0.23-1
changelog:
  - Update to 0.23
    - Fix the test for scalar values, again
    - Disallow assigning globrefs to scalar glob slots (this doesn't actually
      make any sense)
  - Update patches for old ExtUtils::MakeMaker and Test::More versions
  - perl(Pod::Coverage::TrustPod) now available in EPEL-4 too
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 0.22-1
changelog:
  - Update to 0.22
    - Make the namespace cache lazy and weak, in case the stash is deleted
    - However, this doesn't work on 5.8, so disable the namespace caching
      entirely there
  - Update patches to apply cleanly


author: Paul Howarth <paul@city-fan.org> - 0.21-1
changelog:
  - Update to 0.21
    - Make the leak tests author-only, since some smokers run release tests
    - Fix some XS forward compat stuff
  - Update patches to apply cleanly


author: Paul Howarth <paul@city-fan.org> - 0.20-1
changelog:
  - Update to 0.20
    - Lower perl prereq to 5.8.1
    - Make the leak tests release-only
  - Update patches to apply cleanly
  - Drop no-Test::Requires patch, no longer needed
  - Drop buildreq perl(Test::Requires), no longer needed
  - Add patch to skip memory leak tests if we don't have Test::LeakTrace


author: Paul Howarth <paul@city-fan.org> - 0.19-1
changelog:
  - Update to 0.19 (more correct validity test for scalars)
  - Update patch for old Test::More versions


author: Jakub Martisko <jamartis@redhat.com> - 1.5-10
changelog:
  - doc change: missing grep options are now mentioned in the zgrep 
    man pages/help message
    Resolves: #1437002


author: Petr Stodulka <pstodulk@redhat.com> - 1.5-8
changelog:
  - Gzip overwrite existing files when user choose "no" on yes/no question.
    It's due to wrong dupicit declaration of yesno() function in gzip.h
    which is compiled wrong with -O2 option.
    Resolves: rhbz#1201689


author: Michal Luscon <mluscon@redhat.com> 1.5-1
changelog:
  - New upstream version
  - Removed gzip-1.3.9-stderr.patch
  - Removed gzip-1.3.10-zgreppipe.patch
  - Removed gzip-1.3.13-noemptysuffix.patch


author: Karel Klic <kklic@redhat.com> - 1.4-2
changelog:
  - Removed the dependency on less (rhbz#629580)
  - Removed the BuildRoot tag
  - Removed the %clean section


author: Karel Klic <kklic@redhat.com> - 1.4-1
changelog:
  - New upstream release
  - Use XZ upstream source archive
  - Removed cve-2010-0001 patch as it's fixed in this release
  - Removed zdiff patch as it's fixed in this release


author: Karel Klic <kklic@redhat.com> - 1.3.13-1
changelog:
  - New upstream version
  - Updated license from GPLv2 to GPLv3+
  - Removed gzip-1.3.12-futimens.patch, as it is fixed in the new version
  - Updated rsync patch to the new upstream version
  - Updated cve-2006-4337 patch to use gzip_error instead of error


author: Ivana Varekova <varekova@redhat.com> 1.3.5-8
changelog:
  - fix bug 204676 (patches by Tavis Ormandy)
    - cve-2006-4334 - null dereference problem
    - cve-2006-4335 - buffer overflow problem
    - cve-2006-4336 - buffer underflow problem
    - cve-2006-4338 - infinite loop problem
    - cve-2006-4337 - buffer overflow problem


author: Tomas Mraz <tmraz@redhat.com> 1.3.5-3
changelog:
  - don't use the asm code again as it's slower than the gcc compiled one
  - convert the .spec to UTF-8


author: Tomas Mraz <tmraz@redhat.com> 1.3.5-2
changelog:
  - upstream 1.3.5
  - dropped long ago obsolete dirinfo patch
  - escape file names in zgrep (#123012)
  - make stack in match.S nonexecutable


author: Jeff Johnson <jbj@redhat.com> 1.3.3-9
changelog:
  - enlarge window buffer to avoid accessing beyond end-of-buffer (#78413,#83095).
  - re-enable rsync ready patch.


author: Trond Eivind Glomsrød <teg@redhat.com> 1.3.0-16
changelog:
  - replace tempfile patches with improved ones solar@openwall.com
  - Add less to the dependency chain - zless needs it


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed buzilla bug #26680. Wrong skip value after mktemp patch and forced
    overwrite for output file during decompression.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add HAVE_LSTAT define, to avoid it doing weird things to symlinks
    instead of ignoring them as the docs say it should (#22045)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Build system handles stripping
  - Don't do thing the system does, like creating directories
  - use --bindir /bin
  - Added URL
  - skip unnecesarry sed step
  - Include THANKS, AUTHORS, ChangeLog, TODO


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - adopt patch from Paul Eggert to fix detection of the improper tables in
    inflate.c(huft_build)
  - the latest released version 1.2.4a, which provides documentation updates
    only. But it lets us use small revision numbers again
  - add an dirinfo entry for gzip.info so we can get rid of the ugly --entry
    args to install-info


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added /usr/bin/gzip and /usr/bin/gunzip symlinks as some programs are too
    brain dead to figure out they should be at least trying to use $PATH
  - added BuildRoot


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-14
changelog:
  - Use different and probably better approach of fixing segfaults if Tcl is
    built with stubs and Expect is used directly from C program
    Resolves: #1091060


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-13
changelog:
  - Fix segfaults if Tcl is built with stubs and Expect is used directly from C program
    (patch taken from Debian project, written by Sergei Golovan)
    Resolves: #1091060


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.49-10
changelog:
  - Use vsnprintf instead of vsprintf to avoid buffer overflow
    (it happens e.g. when running systemtap testsuite)
    Resolves: #1038931


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-4
changelog:
  - Let user know when expample script needs telnet and it is missing
    Resolves: #703702
  - Use full path to 'su' in passmass example, it's safer
  - Fix expect man page minor formatting issue


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.44.1.15-1
changelog:
  - Update to 5.44.1.15 from upstream CVS
    Resolves: #528654, Resolves: #501820
  - Remove config.sub (no longer needed), remove unused patches (few are
    upstream now, few are pointless with new version), comment patches
  - Fix unbuffer to return exit code of ubuffered program
    Resolves: #547686
  - Fix Tk initialization
    Resolves: #456738


author: Miloslav Trmac <mitr@redhat.com> - 5.43.0-7
changelog:
  - s/%{buildroot}/"$RPM_BUILD_ROOT"/g
  - s,/usr/share/man,%{_mandir},g
  - Use the Fedora-specified Buildroot:
  - Remove BuildRequires: libX11-devel
  - Don't install pkgIndex.tcl as an executable file
  - Drop the incorrect expect-5.32.2-fixcat.patch
  - Remove comments from *.h.in because they confuse config.status; this makes
    the workaround expect-5.43.0-cfg-setpgrp.patch unnecesary.


author: Miloslav Trmac <mitr@redhat.com> - 5.43.0-6
changelog:
  - Update to build with Tcl 8.5
  - Drop static libraries
  - Ship more documentation
  - Use %check for (make test), remove the conditional


author: Jens Petersen <petersen@redhat.com> - 5.43.0-2
changelog:
  - fix flushing of unbuffer script (Charles Sullivan, #143963)
    with unbuffer-child-flush-143963.patch (Don Libes)
  - make autoconf include parent dir in testsuite to avoid error
    (Robert Scheck, 150369)
  - separate the examples scripts patches from the rest


author: Jens Petersen <petersen@redhat.com>
changelog:
  - replace expect-5.32.2-setpgrp.patch by expect-5.43.0-cfg-setpgrp.patch
    to set SETPGRP_VOID correctly


author: Robert Scheck <redhat@linuxnetz.de>
changelog:
  - update to 5.43.0 (150369)
    - no longer need expect-5.39.0-64bit-82547.patch,
      expect-5.38.0-autopasswd-9917.patch
      and expect-5.42-mkpasswd-verbose-user-141454.patch
  - run aclocal and configure with current autoconf (116777)
    - buildrequire autoconf and automake instead of autoconf213


author: Jens Petersen <petersen@redhat.com> - 5.42.1-2
changelog:
  - fix "mkpasswd -v" failure when user not specified with
    expect-5.42-mkpasswd-verbose-user-141454.patch (J F Wheeler, 141454)


author: Jens Petersen <petersen@redhat.com> - 5.42.1-1
changelog:
  - update to 5.42.1 (Robert Scheck, 126536)
    - no longer need expect-5.32.2-kibitz.patch
    - update expect-5.38.0-autopasswd-9917.patch
  - drop explicit tcl and tk requires


author: Alan Cox <alan@redhat.com>
changelog:
  - Autopasswd doesnt work and isnt ever going to work with pam around
    since password setting depends on the modules in use (think "fingerprint"
    or "smartcard"..). Remove it.


author: Jens Petersen <petersen@redhat.com> - 5.39.0-95
changelog:
  - new package split out from tcltk
  - build against installed tcl and tk
  - filtered changelog for expect
  - buildrequire autoconf213 (#110583) [mvd@mylinux.com.ua]


author: Jens Petersen <petersen@redhat.com> - 8.3.5-93
changelog:
  - update expect to 5.39.0 (fixes #58317)
  - drop first hunk of 64bit patch and rename to expect-5.39.0-64bit-82547.patch
  - expect-5.32.2-weather.patch and expect-5.32.2-expectk.patch no longer needed


author: Jens Petersen <petersen@redhat.com> - 8.3.5-84
changelog:
  - drop synthetic lib provides
  - remove obsolete patches from srpm
  - update buildrequires
  - use buildroot instead of RPM_BUILD_ROOT
  - install all man pages under mandir, instead of moving some from /usr/man
  - introduce _genfilelist macro for clean single-sweep find filelist generation
    for each package
  - use perl to remove buildroot prefix from filelists


author: Jens Petersen <petersen@redhat.com> 8.3.5-76
changelog:
  - make it build on x86_64 (details below)
  - add 100 to expect patches
  - patch expect configure to get EXP_LIB_SPEC to use libdir
  - don't explicitly update config.{guess,sub} since %configure does it for us
  - added "--without check" rpmbuild option to disable running tests in future
  - generate filelists from datadir and not from mandir from now on


author: Jens Petersen <petersen@redhat.com>
changelog:
  - build without all makecfg patches for now
    - in particular use upstream versioned library name convention
  - add backward compatible lib symlinks for now
  - add unversioned symlinks for versioned bindir files
  - use make's -C option rather than jumping in and out of source dirs
    during install
  - use INSTALL_ROOT destdir-like make variable instead of makeinstall
    for all subpackages except tix and itcl


author: Jens Petersen <petersen@redhat.com>
changelog:
  - move expectk and expect-devel files out of expect into separate packages
    (#9832)
  - drop the crud compat dir symlinks in libdir
  - correct expect license
  - don't explicitly provide 64bit libs on ia64 and sparc64


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - quick hack to have a correct setpgrp() call in expect
  - fix config.guess and config.sub to newer versions


author: Adrian Havill <havill@redhat.com>
changelog:
  - re-enable glibc string and math inlines; recent gcc is a-ok.
  - optimize at -O2 instead of -O
  - rename "soname" patches related to makefile/autoconf changes


author: Adrian Havill <havill@redhat.com>
changelog:
  - used %makeinstall to brute force fix any remaining unflexible makefile dirs
  - improved randomness of expect's mkpasswd script via /dev/random (bug 9507)
  - revert --enable-threads, linux is (still) not ready (yet) (bug 49251)


author: Adrian Havill <havill@redhat.com>
changelog:
  - refresh all sources to latest stable (TODO: separate expect/expectk)
  - massage out some build stuff to patches (TODO: libtoolize hacked constants)
  - remove patches already rolled into the upstream
  - removed RPATH (bugs 45569, 46085, 46086), added SONAMEs to ELFs
  - changed shared object filenames to something less gross
  - reenable threads which seem to work now
  - fixed spawn/eof read problem with expect (bug 43310)
  - made compile-friendly for IA64


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - FHS packaging changes.
  - revert --enable-threads, linux is not ready (yet) (#11789).
  - expect: update to 5.31.7+ (#11595).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to (tcl,tk}-8.2.3, expect-5.31, and itcl-3.1.0, URL's as well.
  - use perl to drill out pre-pended RPM_BUILD_ROOT.
  - configure with --enable-threads (experimental).
  - autopasswd needs to handle password starting with hyphen (#9917).
  - handle 553 ftp status in rftp expect script (#7869).
  - remove cryptdir/decryptdir, as Linux has not crypt command (#6668).
  - correct hierarchy spelling (#7082).
  - fix "expect -d ...", format string had int printed as string (#7775).


author: Tomas Popela <tpopela@redhat.com> - 12.10.0-12
changelog:
  - Move package from EPEL 7 to RHEL 7, but leave the mono support in EPEL in
    libappindicator-sharp package.
  - Resolves: rhbz#1546657


author: Rex Dieter <rdieter@fedoraproject.org> 6:4.7.1-2
changelog:
  - monitor.py:441:get_notifications:KeyError: 'job-originating-user-name' (#739642)
  - s/hal-cups-utils/system-config-printer-udev/


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 6:4.4.2-1.1
changelog:
  - use the xz and lzma formats only if compiled in libarchive (upstream patch)
  - fix build with old libarchive w/o archive_write_set_*_lzma (upstream patch)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 6:4.4.1-2
changelog:
  - -printer-applet: add support for automatic printer driver installation
                     (Tim Waugh, #576660, F13+)
  - -printer-applet: add missing Requires: dbus-python
  - remove obsolete F10- upgrade path Requires for -printer-applet


author: Rex Dieter <rdieter@fedoraproject.org> - 6:4.3.0-2
changelog:
  - -libs subpkg reborn: Multilib conflicts for index.cache.bz2 (#515087)
  - %check: desktop-file-validate


author: Than Ngo <than@redhat.com> - 4.2.2-3
changelog:
  - drop the BR on PyKDE4, system-config-printer-libs
    it's just needed for runtime
  - fix kdeutils-printer-applet dependency
  - apply upstream patch to fix several issues in ark


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.72-1
changelog:
  - update to 4.0.72
  - Obsoletes/Provides: okteta, update file list and description for okteta
  - remove .so symlinks which should not be in a non-devel package


author: Sebastian Vahl <fedora@deadbabylon.de> 6:3.96.0-4
changelog:
  - require /sbin/ldconfig xdg-utils on %post and %postun
  - some small spec cleanups
  - +BR: kde-filesystem
  - +BR: kde4-macros(api)


author: Thomas Woerner <twoerner@redhat.com> 1.2.29-4
changelog:
  - fixed possible privilege escalation flaw via use of python pickle
    (CVE-2011-2520), replaced pickle by json (rhbz#717985) and (rhbz#722991)
  - stop D-BUS firewall mechanism on update


author: Thomas Woerner <twoerner@redhat.com> 1.2.28-1
changelog:
  - added firewalld check to prevent usage of s-c-fw if firewalld is running
  - fixed gtk_label_autowrap not to change alignments
  - fixed port of libvirt-tls (rhbz#565625)
  - fixed requirement for newt-python (was newt before)
  - return -2 for ports > 65535 in fw_functions.getPortID for better port error
    reporting
  - hide dialogs before going on (rhbz#643966)
  - updated translations: ca, de, he, hi, ja, nb, pa, pt, sk, sv, ta, uk, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.27-1
changelog:
  - updated translations: bn_IN, de, fi, fr, gu, hi, it, ja, kn, ko, ml, mr, or,
                          pt_BR, ru, ta, te, zh_CN, zh_TW


author: Thomas Woerner <twoerner@redhat.com> 1.2.26-1
changelog:
  - added libvirt services (rhbz#565625)
  - added Bakula service (rhbz#588377)
  - fixed DBUS mechanism to report complete syslog message (rhbz#604623)
  - fixed crash because of missing /etc/services file (rhbz#604726)
  - updated translations: ar, as, bn_IN, da, de, es, fi, fr, gu, he, hi, is, it,
                          ja, kn, ko, ml, mr, nl, or, pa, pl, pt, ru, ta, te, 
                          zh_CN


