# changelog

author: Chris Lumens <clumens@redhat.com> - 2.9.0-1
changelog:
  - Fix another problem updating the .po file.
  - Remove support for python-meh.  It requires gtk3.
  - Add the old anaconda GroupSelector.py to system-config-kickstart (#859928).
  - It helps to import the exceptions I want to catch (#893282).
  - Do @VERSION@ substitution on the main program, too (#866563).


author: Chris Lumens <clumens@redhat.com> - 2.8.10-1
changelog:
  - Update glade file to fix translation building. (clumens)
  - Fix various problems when packaging up translations. (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.8.9-1
changelog:
  - Put /usr/share/system-config-kickstart at the front of the path (#820748). (clumens)
  - Fix "make local" to not pack up .git/ as well. (clumens)
  - Update Makefiles to work with new translation system. (clumens)
  - BuildRequires transifex-client. (clumens)
  - Ignore po/*.po files. (clumens)
  - Remove translation files. (clumens)
  - Fix translation files so "msgfmt -c " passes and they'll upload to transifex. (clumens)
  - Add transifex configuration file. (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.8.8-1
changelog:
  - Fix an importing bug caused by the previous patch. (clumens)
  - Don't traceback when starting up outside of X (#676338). (clumens)
  - Convert spec to UTF-8. (notting)


author: Chris Lumens <clumens@redhat.com> - 2.8.7-1
changelog:
  - pykickstart raises KickstartError instead of IOError now. (clumens)
  - Clear the partition store whenever a file is loaded (#610740). (clumens)
  - Remove the key entry as well, since that command no longer exists. (clumens)
  - Remove the deprecated interactive mode. (clumens)
  - anaconda has changed all around, so fix the GroupSelector import. (clumens)
  - Fix --help argument handling (#621379). (clumens)
  - Update translation files (#617075). (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.8.6-1
changelog:
  - Don't traceback when loading the Preview dialog a second time (#593259). (clumens)
  - Don't install the icon to /usr/share/system-config-kickstart too (#594361). (clumens)
  - Update translations.


author: Chris Lumens <clumens@redhat.com> - 2.8.4-1
changelog:
  - Don't overwrite tsInfo with a new instance (#541052). (clumens)
  - Correct rpmlint errors found with the .spec file. (clumens)
  - Use OptionParser instead of the old getopt module (#553045). (clumens)


author: Chris Lumens <clumens@redhat.com> - 2.8.3-1
changelog:
  - Add ext4, make it the default (#544079).
  - Add support for authconfig --enablefingerprint (#539371).
  - Fix an import error (#530739, nelsoninva AT gmail.com).
  - Update lots of translations.


author: Chris Lumens <clumens@redhat.com> - 2.8.1-1
changelog:
  - Change the skipx blurb to make more sense (#493835).
  - Update to using python-meh for exception handling instead of rhpl.
  - Do VERSION substitution on all files.


author: Chris Lumens <clumens@redhat.com> - 2.8.0-1
changelog:
  - Allow specifying anything for a network device name, not just ethX (#508089).
  - Don't traceback when opening files with null bytes (#508092).
  - Make the OK button on some dialogs insensitive until changes happen (#493887).
  - Don't traceback if the filename entry is blank (#500409).
  - Lots more UI style/layout updates (#493842, #493857, rrakus).
  - Don't traceback if given an invalid language or timezone (#487390).
  - Update to glade3 (#495754, rrakus).
  - Add a progress window when saving or previewing files (#493879, rrakus).
  - Use the standard about/license dialog (rrakus, #493926).
  - Center dialogs on the parent (rrakus, #493823).


author: Chris Lumens <clumens@redhat.com> - 2.7.22-1
changelog:
  - Use dataList().append when adding partitions and network devices (#492100).
  - Update translation files (#490018). (clumens)
  - Lots of translation file udpates.


author: Chris Lumens <clumens@redhat.com> - 2.7.21-1
changelog:
  - Add "make bumpver" target from pykickstart.
  - Translate spaces in timezones to underscores when reading and writing (#475129).


author: Chris Lumens <clumens@redhat.com> 2.7.20-1
changelog:
  - Don't make the open dialog tiny.
  - Fix a traceback caused by methods moving out of GroupSelector.py in anaconda.
  - Don't remove the byte-compiled python files from a scriptlet.


author: Chris Lumens <clumens@redhat.com> 2.7.17-1
changelog:
  - Support --display= (#450431).
  - No longer use rhpl for translations.
  - Sort keyboard list by descriptive name, not by console map.
  - Remove most of the xconfig and monitor command support.
  - Use s-c-date's timezone list since that's what anaconda does (#445195).


author: Chris Lumens <clumens@redhat.com> 2.7.15-1
changelog:
  - Offer the same passalgo options that authconfig now does (#173867).
  - Don't traceback if saving doesn't work (#436406).
  - When the Cancel button is pressed, quit (#436406).
  - Prompt for a disk/part when RAID is selected (#432914).
  - Fix another typo in ldaploadcacert handling.
  - If the kickstart file cannot be opened, display an error (#431950).


author: Chris Lumens <clumens@redhat.com> 2.7.14-1
changelog:
  - Don't destroy the save dialog when it's closed.
  - If the key checkbutton is not active, remove the key setting (#226718).
  - Fix typo in LDAP authconfig parameter (#239817).
  - Use F1 as the help shortcut (#429959).
  - Translation updates (#429611).
  - More error handling when yum fails to init (#426447).
  - Update documentation license (#419071, kwade).


author: Chris Lumens <clumens@redhat.com> 2.7.13-1
changelog:
  - Fix a traceback when importing yum (#337161).
  - Remove obsolete translation (#332501).
  - Rework bootloader UI to make it easier to add other arches.


author: Chris Lumens <clumens@redhat.com> 2.7.12-1
changelog:
  - Rework network device dialog to not use four input boxes for each address.
  - Don't require a gateway or nameserver address (#215191).


author: Chris Lumens <clumens@redhat.com> 2.7.5-1
changelog:
  - Default to installing instead of upgrading.
  - Set a default SELinux setting when started up.
  - Don't write out remove lines for packages not available on the
    installation architecture.


author: Chris Lumens <clumens@redhat.com> 2.7.4-1
changelog:
  - Fix loading packages section (#232285).
  - Fix preview/save on upgrade (#232282).
  - Add UI for authconfig's --ldaploadcert option (#232664).


author: Chris Lumens <clumens@redhat.com> 2.7.2-1
changelog:
  - Add package-level selection and removal (#222592).
  - Add UI for the key command (#226718).
  - Fix iter handling on the partition screen for auto partitions (#225087).


author: Chris Lumens <clumens@redhat.com> 2.7.1-1
changelog:
  - Update to use new pykickstart.
  - Don't traceback if no monitor or x driver is selected.
  - Handle pykickstart exceptions by displaying an error dialog.


author: Chris Lumens <clumens@redhat.com> 2.7.0-1
changelog:
  - Use system-config-securitylevel to provide the firewall page.
  - Speed up startup and shutdown.
  - If package selection is disabled, don't forget whatever was in the
    original kickstart file (#217165).


author: Chris Lumens <clumens@redhat.com> 2.6.18-1
changelog:
  - Don't require a root password (#215190).
  - Disable package screen if yum couldn't download (#216439).


author: Chris Lumens <clumens@redhat.com> 2.6.15-1
changelog:
  - Don't need to be root to run system-config-kickstart (patch from
    Panu Matilainen <Panu.Matilainen@nokia.com>, #211998).


author: Chris Lumens <clumens@redhat.com> 2.6.14-1
changelog:
  - Use updated translations (#210728).
  - Update documentation (#210863).
  - Don't enable yum plugins.
  - Disable popup menu on the package selection screen.


author: Chris Lumens <clumens@redhat.com> 2.6.10-1
changelog:
  - Fix unencrypted root password traceback (#190487).
  - Try harder to get a base repo enabled (#190508).


author: Chris Lumens <clumens@redhat.com> 2.6.4-1
changelog:
  - Convert package selection to using pirut (#178759).
  - Partitioning screen fixes for cciss.
  - Use consolehelper.


author: Chris Lumens <clumens@redhat.com> 2.5.24-1
changelog:
  - Remove mouse and langsupport.  These two options have been removed from
    kickstart so we shouldn't be generating invalid files.
  - Fail if we read a line we don't understand instead of being silent.
  - Deal with drivers instead of cards due to kudzu changes.


author: Chris Lumens <clumens@redhat.com> - 2.5.19-1
changelog:
  - Fixed a segfault in pygtk on the partitioning screen.
  - Fixed RAID editing screen so the config values don't change if you
    repeatedly edit a RAID volume.


author: Chris Lumens <clumens@redhat.com> - 2.5.18-1
changelog:
  - Get package group lists and their translations out of the comps.xml file
    instead of reying on a built-in (and out of date) list.
  - Added an "Install Everything" button (#134679).


author: Chris Lumens <clumens@redhat.com> - 2.5.16-1
changelog:
  - Fix display in indic locale (#138310) and (#138601)
  - Monitor order (#127477)
  - Translation of RAID message (#127687)
  - Unencrypted root passwords (#134678)
  - Broken nfs line parsing (#134681)


author: Brent Fox <bfox@redhat.com> 2.5.11-2
changelog:
  - handle missing mouse line (bug #124341)
  - use N_ instead of _ in packages.py (bug #124144)
  - remove code for dead firewall widgets (bug #124342)


author: Brent Fox <bfox@redhat.com> 2.3.4-2
changelog:
  - rebuild for completeness
  - added some new system profiling code, but it's not exposed in the UI yet


author: Brent Fox <bfox@redhat.com> 2.3.4-1
changelog:
  - Handle opening existing kickstart files
  - Handle multiple ethernet interfaces
  - Don't require rootpassword on upgrades


author: Brent Fox <bfox@redhat.com> 2.3.2-16
changelog:
  - Don't write out --emulthree if No Mouse is selected
  - Fix gtk.glade.bindtextdomain so that the glade screens pull in translations


author: Tammy Fox <tfox@redhat.com> 2.3.2-2
changelog:
  - Updated list of langs
  - Reimplemented keyboard list to use list from rhpl
  - Fix for iter_next change


author: Brent Fox <bfox@redhat.com>
changelog:
  - completed the port to gtk2
  - Fixed bug 65835
  - Fixed bug 66815
  - Fixed bug 64453 (with help from menthos@menthos.com)


author: Tammy Fox <tfox@redhat.com>
changelog:
  - Added optional ftp username and password
  - Added preview menu item
  - Added bootloader --upgrade
  - Added swap --recommended
  - Added %packages -- resolvedeps and %packages --ignoredeps


author: Tammy Fox <tfox@redhat.com>
changelog:
  - added po directory
  - added grub password and initialize the disk label
  - added help manual and function to display it


author: Tammy Fox <tfox@redhat.com>
changelog:
  - added emulate three buttons and probe for mouse options
  - added preview configuration window
  - modified basic.py to use dictionaries to store combo box selections


author: Tammy Fox <tfox@redhat.com>
changelog:
  - added scrollwindow around partition information
  - made all widgets except partition scrollwindow unexpandable so that when the main window is resized only the partition list gets bigger
  - increased release number


author: Tammy Fox <tfox@redhat.com>
changelog:
  - added file dialog box
  - cleaned up code
  - renamed okButton to saveButton in ksconfig.py
  - renamed Cancel button to Exit in interface
  - added /boot to default partition list
  - added menu icon


author: Colin Walters <walters@redhat.com> - 2.28.6-8
changelog:
  - Add various missing BuildRequires, switch to pkgconfig() syntax
  - Backport upstream patch which fixes a crasher in some applications


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.6-2
changelog:
  - disable introspection in anticipation of pygobject3
  - https://bugzilla.redhat.com/show_bug.cgi?id=731851
  - pygobject2 now becomes legacy for static binding support (e.g. PyGTK)


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.6-1
changelog:
  - update to upstream 2.28.6
  - closure: avoid double free crash
  - GVariantType is a boxed struct in newer versions of glib
  - Revert back to a GVariant workaround since the fix hasn't migrated to
    Fedora's version of glib yet (workaround works in both cases)
  - closure: Check the out arg is not null.
  - Fix GC-related crash during PyGObject deallocation (remove patch from
    previous spec)


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.2-1
changelog:
  - update to upstream version 2.28.2 stable
  - fixes issue in bug - https://bugzilla.redhat.com/show_bug.cgi?id=682543


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.1-1
changelog:
  - update to upstream version 2.28.1 stable
  - fix the spec file's sources line to point to the correct ftp directory


author: John (J5) Palmieri <johnp@redhat.com> - 2.26.0-4
changelog:
  - Edit PyCapsule patch to only use PyCapsule in Python 3.x
    since this effects header files which require other modules to 
    be recompiled.  There is actually discussion upstream to undeprecate it
    for the 2.x series


author: John (J5) Palmieri <johnp@redhat.com> - 2.26.0-3
changelog:
  - add patch to work with PyCapsule since PyCObject is removed from 
    Python 3.2 which we ship in rawhide


author: John (J5) Palmieri <johnp@redhat.com> - 2.26.0-2
changelog:
  - add another py3k patch so that we compile correctly under python 3
  - fixes a couple of print syntax and a try, except syntax


author: Colin Walters <walters@verbum.org> - 2.21.4-4
changelog:
  - Update to latest upstream
  - Drop upstreamed patches
  - Require pycairo, since we have a module that uses it
  - Drop libtool overriding; was not commented and seems fine
    without
  - Drop --enable-thread, it's default now
  - Drop --enable-pygi, it's default now
  - Drop clean section, no longer needed in F-14
  - Drop python-sitearch copy&paste, no longer needed in F-14
  - Add SMP flags to make


author: Colin Walters <walters@verbum.org> - 2.21.1-6
changelog:
  - Switch to disabling pygi, remove my patch for now.  See commentary
    https://bugzilla.redhat.com/show_bug.cgi?id=569885#c38


author: - Matthew Barnes <mbarnes@redhat.com> - 2.16.0-1.fc11
changelog:
  - Update to 2.16.0
  - Remove patch for RH bug #457502 (fixed upstream).
  - Remove patch for GNOME bug #551059 and #551212 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.15.1-1.fc10
changelog:
  - Update to 2.15.1
  - Bump glib2_version to 2.16.0.
  - Remove ancient automake_version.
  - Add a pygobject2-codegen subpackage.


author: Ryan O'Hara <rohara@redhat.com> - 1.2.7-3
changelog:
  - Update spec file.
  - Add option to prevent respawn of child processes.
  - Remove duplicate command-line option code.
  - Use popt to generate usage message.
  - Fix pointer arithmetic for VRRP packets.
  - Fix comparison of primary IP address.
  - Fix loading of SSL certificate.
  - Fix typo in error message.
  - Update FSF address in GPLv2 license.
  - Remove debug message from if_get_by_ifname.


author: Matthias Saou <http://freshrpms.net/> 1.1.20-1
changelog:
  - Update to 1.1.20 (#589923).
  - Update BR conditional for RHEL6.
  - No longer include goodies/arpreset.pl, it's gone from the sources.


author: Matthias Saou <http://freshrpms.net/> 1.1.19-3
changelog:
  - Update init script to have keepalived start after the local MTA (#526512).
  - Simplify the kernel source detection, to avoid running rpm from rpmbuild.


author: Matthias Saou <http://freshrpms.net/> 1.1.14-2
changelog:
  - Include patch from Shinji Tanaka to fix conf include from inside some
    directives like vrrp_instance.


author: Matthias Saou <http://freshrpms.net/> 1.1.14-1
changelog:
  - Update to 1.1.14.
  - Remove all upstreamed patches.
  - Remove our init script and sysconfig files, use the same now provided by the
    upstream package (will need to patch for LSB stuff soonish).
  - Include new goodies/arpreset.pl in %doc.
  - Add missing scriplet requirements.


author: Matthias Saou <http://freshrpms.net/> 1.1.13-5
changelog:
  - Include types patch to fix compile on F7 (David Woodhouse).
  - Fix up file modes (main binary 700 -> 755 and config 600 -> 640).


author: Matthias Saou <http://freshrpms.net/> 1.1.13-4
changelog:
  - Add missing \n to the kernel define, for when multiple kernels are installed.
  - Pass STRIP=/bin/true to "make" in order to get a useful debuginfo package.


author: Matthias Saou <http://freshrpms.net/> 1.1.13-1
changelog:
  - Update to 1.1.13.
  - Change mode of configuration file to 0600.
  - Don't include all of "doc" since it meant re-including all man pages.
  - Don't include samples in the main configuration path, they're in %doc.
  - Include patch to add an optional label to interfaces.


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.0-4
changelog:
  - Requires: phonon-backend >= %version
  - move icons to hicolor theme and into -backend subpkgs
  - BR: libxcb-devel
  - move phonon-gstreamer.svg to sources


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.2.96-1
changelog:
  - 4.2.96
  - rebase phonon-4.2.0-pulseaudio.patch (-> phonon-4.2.96-pulseaudio.patch)
  - rebase phonon-4.2.70-xine-pulseaudio.patch
    (-> phonon-4.2.96-xine-pulseaudio.patch)


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.2.80-0.1.20081121svn887051
changelog:
  - Use subversion (4.2.80) snapshot
  - phonon-backend-xine subpkg
  - make VERBOSE=1
  - make install/fast
  - Xine backend is in phonon now, add xine-lib-devel as BR
  - BR cmake >= 2.6.0
  - forward-port xine pulseaudio patch


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.2.0-4
changelog:
  - rename -backend-gst back to -backend-gstreamer (longer name as -backend-xine)
    The GStreamer backend isn't ready to be the default, and KDE 4.1 also defaults
    to the Xine backend when both are installed.
  - fix PulseAudio not being the default in the Xine backend (4.2 regression)


author: Jiri Olsa <jolsa@redhat.com> - 0.5.11-6
changelog:
  - latrace-ppcle64-basic-audit.patch: add basic ppc64le LD_AUDIT support.
  - Add ppc64le to ExclusiveArch. (BZ#1125756)


author: Jiri Olsa <jolsa@redhat.com> - 0.5.11-5.1
changelog:
  - latrace-aarch64-basic-audit.patch: add basic aarch64 LD_AUDIT support.
  - Add aarch64 to ExclusiveArch. (BZ#1094501)


author: Bastien Nocera <bnocera@redhat.com> 1.1.5-2
changelog:
  - Disable the evolution plugin, it will be in Evo itself in 2.27.x
    See http://bugzilla.gnome.org/show_bug.cgi?id=579099


author: Matthew Barnes <mbarnes@redhat.com> - 0.8-2
changelog:
  - Update BuildRequires for evolution-data-server-devel.
  - Rebuild against evolution-data-server-1.9.1.


author: Alexander Larsson <alexl@redhat.com> - 0.4-5
changelog:
  - Build in Core
  - Move gaim plugin into main package
  - Fix up some build requirements
  - No bluetooth on s390*


author: Paul W. Frields <stickster@gmail.com> - 0.4-3
changelog:
  - Rearrange Requires and BuildRequires for subpackages
  - Include default Evolution plugin in main package


author: Debarshi Ray <rishi@fedoraproject.org> - 0.10.4-4
changelog:
  - Ensure that the new exiv2 soname is used during the build
  - Adapt to Exiv2::BasicIo API change
    Resolves: rhbz#1486570


author: Ankur Sinha <ankursinha AT fedoraproject DOT org> - 0.0.90-4
changelog:
  - changed configure portion
  - added Requires:  vala for devel
  - made the file section more precise
  - bugzilla #599097 
  - changed patch to include a default LIB setting


author: Ankur Sinha <ankursinha AT fedoraproject DOT org> - 0.0.90-2
changelog:
  - some fixes in spec
  - moved *.vapi to devel
  - removed INSTALL from doc
  - added comment to yorba ticket link
  - corrected typo in description


author: Sumit Bose <sbose@redhat.com> - 0.8.1-14
changelog:
  - Fixes for RHEL-7.9
  - Update' adcli update --add-samba-data ' info under correct section in man adcli [#1774622]
  - [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1802258]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-11
changelog:
  - Fixes and improvements for RHEL-7.8
  - Issue is that with arcfour-hmac as first encryption type in the config ... [#1683745]
  - adcli update --add-samba-data does not work as expected [#1738573]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-10
changelog:
  - adcli is failing with "Couldn't add keytab entries: FILE:/etc/krb5.keytab:
    Cannot allocate memory" [1665162]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-9
changelog:
  - Fixes for RHEL-7.7 updates
  - additional patch for [RFE] adcli join should preserve SPN added by adcli
    preset-computer [#1630187]
  - new patches for many adcli-krb5-????? directories are created /tmp [#1588596]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-8
changelog:
  - Various updates for RHEL-7.7
  - many adcli-krb5-????? directories are created /tmp [#1588596]
  - adcli exports kerberos ticket with old kvno [#1642546]
  - [RFE] Have `adcli join` work without FQDN in `hostname` output [#1595911]
  - Improve handling of service principals [#1644311]
  - [RFE] adcli command with --unix-* options doesn't update
    values in UnixAttributes Tab for user [#1337489]
  - [RFE] adcli join should preserve SPN added by adcli preset-computer [#1630187]
  - [RFE] Need an option for adcli command which will show domain join status. [#1622583]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-7
changelog:
  - use autosetup macro to simplify patch handling
  - fixed rpmlint warnings in the spec file
  - join failed if hostname is not FQDN [#1649868]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-6
changelog:
  - Couldn't set service principals on computer account [#1608212]
  - additional fix #1547014 and #1593240


author: Sumit Bose <sbose@redhat.com> - 0.8.1-5
changelog:
  - enable "Trust this computer for delegation to any service (Kerberos only)" [#1538730]
  - realm join fails with Insufficient permissions [#1542354]
  - adcli update option cannot add principals for computer object [#1545568]
  - adcli refuses to add service principals [#1547013]
  - [RFE] Support adding SPN of a different host [#1547014]
  - adcli segfaults during AD join RHEL 7.5 [#1575554]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-4
changelog:
  - adcli doesn't update kvno while joining system to AD domain (RODC) [#1471021]
  - adcli_tool_computer_delete description spelling [#1450179]
  - adcli man page should not only mention FILE type credential caches [#1423871]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-3
changelog:
  - fix crash when name is specified on the command line and detect names with
    lower case characters [#1359773]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-1
changelog:
  - Update to upstream release 0.8.1
  - Rebase adcli in RHEL-7.3 to version 0.8.0 [#1292530]
  - Support Host Keytab renewal [#1288485]
  - realmd not joining AD so ssh gssapi-with-mic works [#1061371]
  - technically wrong length checks in binary parsers  [#1027905]
  - avoid alloca in _adcli_ldap_have_in_mod [#1027889]
  - [RFE] adcli --stdin-password should be able to strip newline character from
    the input [#1134330]


author: Stef Walter <stefw@redhat.com> - 0.7.5-1
changelog:
  - Update to upstream point release 0.7.5
  - Workaround for discovery via IPv6 address [#1004442]
  - Correctly put IPv6 addresses in temporary krb5.conf


author: Stef Walter <stefw@redhat.com> - 0.7.4-1
changelog:
  - Update to upstream point release 0.7.4
  - Correctly handle truncating long host names [#1001667]
  - Try to contact all available addresses for discovery [#1004442]
  - Build fixes [#1004823]


author: Stef Walter <stefw@redhat.com> - 0.7-1
changelog:
  - Work around broken krb5 with empty passwords [#960001]
  - Fix memory corruption issue [#959999]
  - Update to 0.7, fixing various bugs


author: Stef Walter <stefw@redhat.com> - 0.5-1
changelog:
  - Update to upstream 0.5 version
  - No more libadcli, and thus no adcli-devel
  - Many new adcli commands
  - Documentation


author: Rob Crittenden <rcritten@redhat.com> - 1.0-1
changelog:
  - Change name to python-kerberos from PyKerberos
  - Change license from "Apache License" to ASL 2.0 per guidelines
  - Upstream released 1.0 which is equivalent to version 1541. Reverting
    to that.


author: Rob Crittenden <rcritten@redhat.com> - 0.1735-2
changelog:
  - Include GSS_C_DELEG_FLAG in gss_init_sec_context() so the command-line
    tools can do kerberos ticket forwarding.


author: Colin Walters <walters@redhat.com> 2:1.1.2-1
changelog:
  - Update to 1.1.2
  - Delete upstreamed libogg-1.1-64bit.patch
  - Delete upstreamed libogg-underquoted.patch


author: Matthias Clasen <mclasen@redhat.com> - 1.1.10-4
changelog:
  - Make default cursor theme inherit dmz-aa instead of Bluecurve
  - Also require the cursor theme package


author: Parag <paragn@fedoraproject.org> - 1.1.10-2
changelog:
  - Merge-Review #226066
  - Removed XFree86-libs, xorg-x11-libs as Obsoletes
  - Removed BR:pkgconfig
  - Few spec cleanups


author: Mike A. Harris <mharris@redhat.com> 1.1.6-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel"
  - Added "Requires: xorg-x11-proto-devel" to devel package, needed by xcursor.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.1.5.1-1
changelog:
  - Updated libXcursor to version 1.1.5.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Added default index.theme file to set BlueCurve as the default cursor theme
    to fix bug (#175532).


author: Mike A. Harris <mharris@redhat.com> 1.1.5-1
changelog:
  - Updated libXcursor to version 1.1.5 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2
changelog:
  - Add a few libv4l2rds patches from upstream, which bring libv4l2rds to its
    final API / ABI, so that apps build against it won't need a rebuild in the
    future


author: Hans de Goede <hdegoede@redhat.com> - 0.8.8-1
changelog:
  - New upstream release 0.8.8
  - Add patches from upstream git to improve Pixart JPEG decoding
  - Add patch from upstream git to fix building with latest kernels (rhbz#823863)


author: Hans de Goede <hdegoede@redhat.com> 0.8.2-2
changelog:
  - Change tarbal to official upstream 0.8.2 release
  - This fixes multiple Makefile issues pointed out in the review (#671883)
  - Add ir-keytable config files
  - Explicitly specify CXXFLAGS so that qv4l2 gets build with rpm_opt_flags too


author: Kamil Dudka <kdudka@redhat.com> - 5.0.2-34
changelog:
  - make the chaselinks option work again (#1729997)
  - fix off-by-one error in buffer allocation to avoid stack smashing (#1722486)


author: Kamil Dudka <kdudka@redhat.com> - 5.0.2-30
changelog:
  - fix stack-based buffer overflow in utils.c:checkmailpath() (CVE-2018-1100)
  - fix stack-based buffer overflow in gen_matches_files() (CVE-2018-1083)
  - fix stack-based buffer overflow in exec.c:hashcmd() (CVE-2018-1071)
  - avoid crash when copying empty hash table (CVE-2018-7549)
  - fix buffer overrun in xsymlinks (CVE-2017-18206)
  - fix NULL dereference in cd (CVE-2017-18205)
  - fix buffer overflow when scanning very long path for symlinks (CVE-2014-10072)
  - fix buffer overflow for very long fds in >& fd syntax (CVE-2014-10071)


author: Kamil Dudka <kdudka@redhat.com> - 5.0.2-9
changelog:
  - signal safety when updating global state in execshfunc() (#1163823)
  - make the wait built-in work for already exited processes (#1162198)
  - replace an incorrect comment in /etc/zshenv (#1164312)
  - optimize matching of multiple * in wildcards (#1130418)
  - use heap rather than stack allocation for variable length arrays (#1165118)
  - shell emulation doc addition (#1147545)
  - suppress a warning about closing an already closed file descriptor (#1131191)


author: James Antill <james@fedoraproject.org> - 5.0.2-7
changelog:
  - Remove unneeded build require on tetex.
  - Resolves: rhbz#1037828
  - Depend on hostname package instead of /bin/hostname.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 4.3.10-6
changelog:
  - Rebuild for FTBFS https://bugzilla.redhat.com/show_bug.cgi?id=631197
  - Remove deprecated PreReq, the packages aren't needed at runtime and they're
    already in Requires(post,preun,etc): lines.


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-4
changelog:
  - Add missing Requires for perl(XSLoader) and perl(ExtUtils::MakeMaker),
  - which are no longer auto-generated due to a (expected) change in rpm-build
  - Related: rhbz#1632999


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-3
changelog:
  - Fix CVE-2018-11781 - Local user code injection in the meta rule syntax
  - Fix CVE-2017-15705 - Certain unclosed tags in crafted emails allow for
  - scan timeouts and resulting denial of service
  - Resolves: rhbz#1632999


author: Petr Lautrbach <plautrba@redhat.com> 3.4.0-1
changelog:
  - update to 3.4.0
  - Apply fix for amavisd and spampd reloading after rules updates. Fixes bug #1145654


author: Petr Lautrbach <plautrba@redhat.com> 3.3.2-17
changelog:
  - document rawbody's split into chunks (#892350)
  - avoid using array of cleaned uris <fkrska@redhat.com> (#892348)


author: Kevin Fenzi <kevin@scrye.com> - 3.3.2-12
changelog:
  - Fix sa-update not detecting spamd running. Fixes bug #755644
  - Add restart=always to systemd file to work around upstream bug. Bug #812359


author: Nick Bebout <nb@fedoraproject.org> - 3.3.2-0.4.svn1071394
changelog:
  - replace @@VERSION@@ with current saversion
  - restart spampd after sa-update cronjob runs
  - update to svn1071394


author: Warren Togami <wtogami@redhat.com> - 3.3.0-0.27.rc1
changelog:
  - sa-update runs in cron automatically if spamd or amavisd is running
    If you use neither, you may force sa-update by editing /etc/sysconfig/sa-update


author: Warren Togami <wtogami@redhat.com> - 3.3.3-0.18.svn816416
changelog:
  - Enable SOUGHT ruleset in nightly sa-update http://wiki.apache.org/spamassassin/SoughtRules
    You must enable the sa-update cron job manually in /etc/cron.d/sa-update
  - Custom channels may be specified in these config files:
        /etc/mail/spamassassin/sa-update-channels.txt
        /etc/mail/spamassassin/sa-update-keys.txt


author: Warren Togami <wtogami@redhat.com> - 3.3.3-0.14.svn816416
changelog:
  - 3.3.0 svn816416 snapshot, pre-alpha3
    Upstream just fixed important bug SA#6206.  Many other bugs fixed since alpha2.


author: Warren Togami <wtogami@redhat.com> - 3.3.0-0.2.alpha1
changelog:
  - Include default rules to prevent mass confusion and complaints.
    You should really use sa-update though.  Really.
    Edit /etc/cron.d/sa-update to automate it.


author: Warren Togami <wtogami@redhat.com>
changelog:
  - Options for RHEL4
      * spamc/spamd cannot connect over IPv6 or SSL
      * sa-update is disabled
    The above functionality requires perl modules not included in RHEL4.
    You may still use them if you get those perl modules from elsewhere.
    RHEL5 ships these perl modules.


author: Warren Togami <wtogami@redhat.com> - 3.0.2-9
changelog:
  - SA#4191 uri_to_domain() is broken for urls with empty port
    SA#4232 multipart message with 0 parts -> uninitialized in m//
    SA#4121 Score for user defined rules become ignored
    SA#3944 get_envelope_from not handling received header


author: Warren Togami <wtogami@redhat.com> - 3.0-svn20040530
changelog:
  - svn snapshot 20040530
  - #124870 prevent service startup failure due to old -a option
  - #124871 more docs
  - #124872 unowned directories


author: Warren Togami <wtogami@redhat.com> - 3.0-svn20040524
changelog:
  - #123432 do not start service by default
  - #122488 remove CRLF's
  - #123706 correct license
  - svn snapshot 20040524
  - svn snapshot 20040518


author: Ville Skyttä <ville.skytta@iki.fi> - 2.63-8
changelog:
  - #122233
  - Require perl(:MODULE_COMPAT_*).
  - Use %{_mandir} and %{_initrddir}.
  - Fix License tag and include License in docs.
  - Backslashify multiline init script description.


author: Warren Togami <wtogami@redhat.com> 2.62-3
changelog:
  - Ville Skyttä's fixes from #113596 including:
  - Fix buildroot traces
  - enable openssl
  - Trailing slash to DESTDIR (bug 90202 comment 14).
  - export optflags so they're honored, affects spamc only.


author: Warren Togami <wtogami@redhat.com> 2.62-2
changelog:
  - upgrade to 2.62
  - Prereq -> Requires, former is deprecated
  - Require current version of perl
  - Remove urban myth clean test
  - TODO: Get rid of prefix


author: Tim Powers <timp@redhat.com> 2.43-6
changelog:
  - don't use rpms internal dep generator
  - buildrequire perl-Time-HiRes instead of perl(Time:HiRes) so we can satisfy build deps in the build system


author: Chip Turner <cturner@redhat.com>
changelog:
  - better control of service level, improvement in %post script.
  - (contribs from schirmer@taytron.net)


author: Theo Van Dinter <felicity@kluge.net>
changelog:
  - Updated for 2.20 release
  - made /etc/mail/spamassassin a config directory so local.cf doesn't get wiped out
  - added a patch to remove findbin stuff


author: Theo Van Dinter <felicity@kluge.net>
changelog:
  - Updates for 2.01 release
  - Fixed rc file
  - RPM now buildable as non-root
  - fixed post_service errors
  - fixed provides to include perl modules
  - use file find instead of manually specifying files


author: EL Errata <el-errata_ww@oracle.com> - 3.8-6.0.1
changelog:
  - Add ksplice plugin [Orabug: 28931307]
  - Added bug28674897.patch (Recognize Oracle Linux distribution/vendor, fix plugin discovery on OL) [Orabug: 28674897]
  - Added sos-oraclelinux-vendor-vendorurl.patch


author: Pavel Moravec <pmoravec@redhat.com> = 3.8-3
changelog:
  - [gluster] process files only from a statedump dir
    Resolves: bz1699381
  - [kernel] Don't collect trace file by default
    Resolves: bz1757662


author: Pavel Moravec <pmoravec@redhat.com> = 3.7-6
changelog:
  - [utilities] Fix high CPU usage and slow command collection
    Resolves: bz1733367
  - [sosreport,plugins] Stop plugin execution after timeout hit
    Resolves: bz1731007


author: Pavel Moravec <pmoravec@redhat.com> = 3.7-3
changelog:
  - [katello] support both locations of qpid SSL certs
    Resolves: bz1711305
  - [plugins] add vdsm plugin
    Resolves: bz1706060


author: Pavel Moravec <pmoravec@redhat.com> = 3.7-2
changelog:
  - [sos] bump release
    Resolves: bz1656812
  - [pcp] collect pmlogger without a sizelimit
    Resolves: bz1639166
  - [maas,mysql,npm,pacemaker,postgresql] fix plugopts data types
    Resolves: bz1697854
  - [foreman,satellite] increase plugin default timeouts
    Resolves: bz1697813
  - [sosreport] update sos.conf manpages
    Resolves: bz1311129
  - [openstack_instack] add ansible.log
    Resolves: bz1702802


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-12
changelog:
  - [ovirt_node] New plugin for oVirt Node
    Resolves: bz1591433
  - [podman] Add support for gathering information on podman
    Resolves: bz1646698
  - [postgresql] Do not limit dump size
    Resolves: bz1656278


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-6
changelog:
  - [archive] fix leading path creation
    Resolves: bz1624043
  - [atomic] Define valid preset for RHEL Atomic
    Resolves: bz1626159
  - [utilities] wait till AsyncReader p.poll() returns None
    Resolves: bz1623070


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-5
changelog:
  - [rhv-log-collector-analyzer] Add new plugin for RHV
    Resolves: bz1600158
  - [kubernetes|etcd] Support OpenShift 3.10 deployments
    Resolves: bz1616030


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-4
changelog:
  - [apparmor,ceph] fix typo in add_forbidden_path
    Resolves: bz1609135
  - [policies] sanitize report label
    Resolves: bz1608384
  - [policies,process] make lsof execution optional, dont call on RHOSP
    Resolves: bz1613806


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-3
changelog:
  - [sosreport] Add mechanism to encrypt final archive
    Resolves: bz1594327
  - [archive] fix stat typo
    Resolves: bz1597532
  - [rhui] Fix detection of CDS for RHUI3
    Resolves: bz1596494


author: Pavel Moravec <pmoravec@redhat.com> = 3.6-2
changelog:
  - [archive] fix add_string()/do_*_sub() regression
    Resolves: bz1474976
  - [kernel] handle case when bpftool installed but not implemented
    Resolves: bz1559756


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-8
changelog:
  - [docker] backport three container related patches
    Resolves: bz1573907
  - [ovn] add two OpenVSwitch plugins
    Resoles: bz1560845


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-7
changelog:
  - [kernel] Disable gathering /proc/timer* statistics
    Resolves: bz1566933
  - [openstack_octavia] Add new plugin
    Resolves: bz1541100
  - [ovirt-provider-ovn] A new plugin
    Resolves: bz1547544


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-5
changelog:
  - [rabbitmq] Log collection when run in containerized OSP
    Resolves: bz1525620
  - [ipa] add KRA logs and correct PKI directories
    Resolves: bz1535390
  - [opendaylight] Enable plugin by puppet-opendaylight package
    Resolves: bz1483414
  - [etcd] Do not collect private etcd keys
    Resolves: bz1539038


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-4
changelog:
  - [pcp] really apply sizelimit to logs collected
    Resolves: bz1353873
  - [opendaylight] collect more logs and puppet config
    Resolves: bz1483414
  - [plugins] allow add_cmd_output to collect binary output
    Resolves: bz1494420
  - [openstack_ironic] collect drivers, ports and much more
    Resolves: bz1517767
  - [openstack_cinder] check for api service running
    Resolves: bz1506908


author: Pavel Moravec <pmoravec@redhat.com> = 3.5-2
changelog:
  - [vdo] revise collected files
    Resolves: bz1509079
  - further updates to OSP plugins in containerized environment
    Resolves: bz1506908
  - [opendaylight] new plugin
    Resolves: bz1483414
  - collect all keystone domains
    Resolves: bz1491042
  - haproxy, etcd and docker tracebacks
    Resolves: bz1519267
  - [origin] fix typo in oc adm diagnostics
    Resolves: bz1463509
  - [postgresql] Call SCL pg_dump with proper path
    Resolves: bz1494420


author: Pavel Moravec <pmoravec@redhat.com> = 3.4-7
changelog:
  - [openstack plugins] Tripleo specific containerized services
    Resolves: bz1463635
  - [jars] Scan only /usr/{share,lib}/java by default
    Resolves: bz1482574
  - [gluster_block] Added new plugin gluster_block
    Resolves: bz1491964


author: Pavel Moravec <pmoravec@redhat.com> = 3.4-4
changelog:
  - [libvirt] fix per-process cgroup collection
    Resolves: bz1148381
  - [ceph] exclude temporary mount locations from collection
    Resolves: bz1449904
  - [policies/redhat] make missing 'filesystem' package non-fatal
    Resolves: bz1393961


author: Pavel Moravec <pmoravec@redhat.com> = 3.4-3
changelog:
  - [ceph] fix list formatting
    Resolves: bz1438269
  - [virsh] Handle properly cases when virsh commands fail
    Resolves: bz1444641
  - [openstack_*] fix issue with --verify option, extend pkglist for instack
    Resolves: bz1250346
  - [policies/redhat] accept 'oci' as a valid container type
    Resolves: bz1442078
  - [pacemaker] Collect user-defined logfile
    Resolves: bz1416535


author: Pavel Moravec <pmoravec@redhat.com> = 3.3-3
changelog:
  - [nodejs][nms]: new plugins
    Resolves: bz1368393
  - [docker]: Gather more data and expand plugin options
    Resolves: bz1351647


author: Pavel Moravec <pmoravec@redhat.com> = 3.3-2
changelog:
  - [grub2] grub2-mkconfig loads ext4 and brctl kernel
    Resolves: bz1116670
  - [ceph] skip collecting of all keyring and bindpass files
    Resolves: bz1260607
  - [omsa] add omreport storage controller
    Resolves: bz1299603
  - [atomichost] fix collection of 'docker info' output
    Resolves: bz1302146
  - [monit] fix add_copy_spec() arguments
    Resolves: bz1356945
  - [virtwho] add new plugin for virt-who agent
    Resolves: bz1353552


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-36
changelog:
  - [ceph] collect /var/lib/ceph and /var/run/ceph
    Resolves: bz1260607
  - [sosreport] prepare report in a private subdirectory
    Resolves: bz1290955


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-29
changelog:
  - [openvswitch] capture the logs, db and OVS bridges details
    Resolves: bz1242507
  - [logs] fix reference to missing 'rsyslog_conf' variable
    Resolves: bz1249705
  - [sapnw] Add check if saphostctrl is not present, dont use Set
    Resolves: bz1195608
  - [Plugin] fix handling of symlinks in non-sysroot environments
    Resolves: bz1248672


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-27
changelog:
  - [plugin] pass stderr through _collect_cmd_output
  - split dependencies of bz1185990 fix from bz1185990 patch
    Resolves: bz1185990


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-25
changelog:
  - [openstack] New Openstack Trove (DBaaS) plugin
    Resolves: bz1238349
  - [services] Add more diagnostics to applications
    Resolves: bz1195087
  - [openstack_neutron] Obscure passwords and secrets
    Resolves: bz1240666


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-23
changelog:
  - [ceph] add calamari and ragos logs and configs
    Resolves: bz1210527
  - [iprconfig] enable plugin for ppc64* architectures
    Resolves: bz1238726


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-22
changelog:
  - [general] verify --profile contains valid plugins only
    Resolves: bz1184602
  - [kernel,mpt,memory] additional kernel-related diagnostics
    Resolves: bz1194159


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-21
changelog:
  - [cluster] enable crm_report password scrubbing
    Resolves: bz1164864
  - [sosreport] fix command-line report defaults
    Resolves: bz1219720
  - [virsh] add new plugin, add listing of qemu
    Resolves: bz1195086
  - [sap*,vhostmd] new plugins for SAP
    Resolves: bz1195608


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-20
changelog:
  - [cluster] crm_report fails to run because dir already exists
    Resolves: bz1200526
  - [foreman] Skip collection of generic resources
    Resolves: bz1135317
  - [apache] Added collection of conf.modules.d dir for httpd 2.4
    Resolves: bz1183265
  - [pcp] collect /etc/pcp.conf
    Resolves: bz1183297
  - [puppet] adding new plugin for puppet
    Resolves: bz1183768
  - [block] Don't use parted human readable output
    Resolves: bz1183770
  - [general] Better handling --name and --ticket-number in
    Resolves: bz1185093
  - [networking] additional ip, firewall and traffic shaping
    Resolves: bz1194554
  - [infiniband] add opensm and infiniband-diags support
    Resolves: bz1194556
  - [plugins/rabbitmq] Added cluster_status command output
    Resolves: bz1197006
  - [networking] re-add 'ip addr' with a root symlink
    Resolves: bz1209454
  - [kimchi] add new plugin
    Resolves: bz1209840
  - [iprconfig] add plugin for IBM Power RAID adapters
    Resolves: bz1221932
  - [ovirt] Collect engine tunables and domain information.
    Resolves: bz1236101
  - [activemq] Honour all_logs and get config on RHEL
    Resolves: bz1236111
  - [cluster] Add luci to packages for standalone luci servers
    Resolves: bz1236124
  - [hpasm] hpasmcli commands hang under timeout
    Resolves: bz1214209
  - [mysql] Collect log file
    Resolves: bz1210906
  - [chrony] add chrony plugin
    Resolves: bz1165418


author: Pavel Moravec <pmoravec@redhat.com> = 3.2-17
changelog:
  - [openstack_neutron] neutron configuration and logs files not captured
    Resolves: bz1213315
  - [ovirt] remove ovirt-engine setup answer file password leak
    Resolves: bz1162788
  - [networking] network plugin fails if NetworkManager is disabled
    Resolves: bz1206633


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-12
changelog:
  - [plugin] limit path names to PC_NAME_MAX
    Resolves: bz1026962
  - [squid] collect files from /var/log/squid
    Resolves: bz1026962
  - [sosreport] log plugin exceptions to a file
    Resolves: bz1026962
  - [ctdb] fix collection of /etc/sysconfig/ctdb
    Resolves: bz1026962
  - [sosreport] fix silent exception handling
    Resolves: bz1026962


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-11
changelog:
  - [sosreport] do not make logging calls after OSError
    Resolves: bz1087977
  - [sosreport] catch OSError exceptions in SoSReport.execute()
    Resolves: bz1087977
  - [anaconda] make useradd password regex tolerant of whitespace
    Resolves: bz1112175


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-9
changelog:
  - [navicli] catch exceptions if stdin is unreadable
    Resolves: bz1166039
  - [docs] update man page for new options
    Resolves: bz1171658
  - [sosreport] make all utf-8 handling user errors=ignore
    Resolves: bz1164267


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-8
changelog:
  - [kpatch] do not attempt to collect data if kpatch is not installed
    Resolves: bz1110918
  - [archive] drop support for Zip archives
    Resolves: bz1118152


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-6
changelog:
  - [tomcat] add support for tomcat7 and default log size limits
    Resolves: bz1148375
  - [mysql] obtain database password from the environment
    Resolves: bz1126001


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-5
changelog:
  - [corosync] add postprocessing for corosync-objctl output
    Resolves: bz1087515
  - [ovirt_hosted_engine] fix exception when force-enabled
    Resolves: bz1148551


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-4
changelog:
  - [yum] call rhsm-debug with --no-subscriptions
    Resolves: bz1116349
  - [powerpc] allow PowerPC plugin to run on ppc64le
    Resolves: bz1140427
  - [package] add Obsoletes for sos-plugins-openstack
    Resolves: bz1140756


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-3
changelog:
  - [pam] add pam_tally2 and faillock support
    Resolves: bz1127631
  - [postgresql] obtain db password from the environment
    Resolves: bz1126001
  - [pcp] add Performance Co-Pilot plugin
    Resolves: bz1119833
  - [nfsserver] collect /etc/exports.d
    Resolves: bz1118921
  - [sosreport] handle --compression-type correctly
    Resolves: bz1118152
  - [anaconda] redact passwords in kickstart configurations
    Resolves: bz1112175
  - [haproxy] add new plugin
    Resolves: bz1107865
  - [keepalived] add new plugin
    Resolves: bz1105247
  - [lvm2] set locking_type=0 when calling lvm commands
    Resolves: bz1102285
  - [tuned] add new plugin
    Resolves: bz1095447
  - [cgroups] collect /etc/sysconfig/cgred
    Resolves: bz1083677
  - [plugins] ensure doc text is always displayed for plugins
    Resolves: bz1065473
  - [sosreport] fix the distribution version API call
    Resolves: bz1028111
  - [docker] add new plugin
    Resolves: bz1084990
  - [openstack_*] include broken-out openstack plugins
    Resolves: bz1140756
  - [mysql] support MariaDB
    Resolves: bz1106600
  - [openstack] do not collect /var/lib/nova
    Resolves: bz1106423
  - [grub2] collect grub.cfg on UEFI systems
    Resolves: bz1086648
  - [sosreport] handle out-of-space errors gracefully
    Resolves: bz1087977
  - [firewalld] new plugin
    Resolves: bz1100505
  - [networking] collect NetworkManager status
    Resolves: bz1100505
  - [kpatch] new plugin
    Resolves: bz1110918
  - [global] update to upstream 3.2 release
    Resolves: bz1026962


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-19
changelog:
  - Fix generation of volume names in gluster plugin
    Resolves: bz1036752
  - Add distupgrade plugin
    Resolves: bz1059760


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-18
changelog:
  - Prevent file descriptor leaks when using Popen
    Resolves: bz1051009
  - Disable zip archive creation when running rhsm-debug
    Resolves: bz1039036
  - Include volume geo-replication status in gluster plugin
    Resolves: bz1036752


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-17
changelog:
  - Fix get_option use in cluster plugin
    Resolves: bz1030553
  - Fix debug logging to file when given '-v'
    Resolves: bz1031126
  - Always treat rhevm plugin's vdsmlogs option as a string
    Resolves: bz1030617
  - Run the rhsm-debug script from yum plugin
    Resolves: bz1039036


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-16
changelog:
  - Add new plugin to collect OpenHPI configuration
    Resolves: bz1028121
  - Fix cluster plugin crm_report support
    Resolves: bz1030553
  - Fix file postprocessing in ldap plugin
    Resolves: bz1030602
  - Remove collection of anaconda-ks.cfg from general plugin
    Resolves: bz1034865


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-15
changelog:
  - Remove debug statements from logs plugin
    Resolves: bz1030042
  - Make ethernet interface detection more robust
    Resolves: bz1030824
  - Fix specifying multiple plugin options on the command line
    Resolves: bz1031124
  - Make log and message levels match previous versions
    Resolves: bz1031126
  - Log a warning message when external commands time out
    Resolves: bz1034956
  - Remove --upload command line option
    Resolves: bz1028484
  - Update sos UI text to match upstream
    Resolves: bz1034970


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-12
changelog:
  - Fix typo in yum plug-in add_forbidden_paths
    Resolves: bz829297
  - Add krb5 plug-in and drop collection of krb5.keytab
    Resolves: bz1028150


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-10
changelog:
  - Add nfs client plug-in
    Resolves: bz1028072
  - Fix traceback when sar module force-enabled
    Resolves: bz1028125


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-9
changelog:
  - Restore --build command line option
    Resolves: bz1015599
  - Collect saved vmcore-dmesg.txt files
    Resolves: bz1026959
  - Normalize temporary directory paths
    Resolves: bz829069


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-7
changelog:
  - Add domainname output to NIS plug-in
    Resolves: bz1026906
  - Collect /var/log/squid in squid plug-in
    Resolves: bz1026829
  - Collect mountstats and mountinfo in filesys plug-in
    Resolves: bz1026869
  - Add PowerPC plug-in from upstream
    Resolves: bz1025236


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-6
changelog:
  - Remove version checks in gluster plug-in
    Resolves: bz1015606
  - Check for usable temporary directory
    Resolves: bz1019517
  - Fix --alloptions command line option
    Resolves: bz1019356
  - Fix configuration fail regression
    Resolves: bz1019516


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-5
changelog:
  - Include /etc/yaboot.conf in boot plug-in
    Resolves: bz1001966
  - Fix collection of brctl output in networking plug-in
    Resolves: bz1019235
  - Verify limited set of RPM packages by default
    Resolves: bz1019863
  - Do not strip newlines from command output
    Resolves: bz1019338
  - Limit default sar data collection
    Resolves: bz1001599


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-4
changelog:
  - Do not attempt to read RPC pseudo files in networking plug-in
    Resolves: bz996992, bz996994
  - Restrict wbinfo collection to the current domain
    Resolves: bz997101
  - Add obfuscation of luci secrets to cluster plug-in
    Resolves: bz997090
  - Add XFS plug-in
    Resolves: bz997094
  - Fix policy class handling of --tmp-dir
    Resolves: bz997083
  - Do not set batch mode if stdin is not a TTY
    Resolves: bz1002943
  - Attempt to continue when reading bad input in interactive mode
    Resolves: bz1002943


author: Bryn M. Reeves <bmr@redhat.com> = 3.0-3
changelog:
  - Add crm_report support to cluster plug-in
    Resolves: bz839342
  - Fix rhel_version() usage in cluster and s390 plug-ins
    Resolves: bz916705
  - Strip trailing newline from command output
    Resolves: bz971420


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-35
changelog:
  - Report --name and --ticket values as defaults
  - Fix device-mapper command execution logging
  - Fix data collection and rename PostreSQL module to pgsql


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-33
changelog:
  - Add Red Hat Update Infrastructure module
  - Collect /proc/iomem in hardware module
  - Collect subscription-manager output in general module
  - Collect rhsm log files in general module
  - Fix exception in gluster module on non-gluster systems
  - Fix exception in psql module when dbname is not given


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-32
changelog:
  - Collect /proc/pagetypeinfo in memory module
  - Strip trailing newline from command output
  - Add sanlock module
  - Do not collect archived accounting files in psacct module
  - Call spacewalk-debug from rhn module to collect satellite data


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-31
changelog:
  - Avoid calling volume status when collecting gluster statedumps
  - Use a default report name if --name is empty
  - Quote tilde characters passed to shell in RPM module
  - Collect KDC and named configuration in ipa module
  - Sanitize hostname characters before using as report path
  - Collect /etc/multipath in device-mapper module
  - New plug-in for PostgreSQL
  - Add OpenStack module
  - Avoid deprecated sysctls in /proc/sys/net
  - Fix error logging when calling external programs
  - Use ip instead of ifconfig to generate network interface lists


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-29
changelog:
  - Collect the swift configuration directory in gluster module
  - Update IPA module and related plug-ins


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-22
changelog:
  - Correct aeolus debug invocation in CloudForms module
  - Update gluster module for gluster-3.3
  - Add additional command output to gluster module
  - Add support for collecting gluster configuration and logs


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-19
changelog:
  - Collect additional diagnostic information for realtime systems
  - Improve sanitization of RHN user and case number in report name
  - Fix verbose output and debug logging
  - Add basic support for CloudForms data collection
  - Add support for Subscription Asset Manager diagnostics


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-18
changelog:
  - Collect fence_virt.conf in cluster module
  - Fix collection of /proc/net directory tree
  - Gather output of cpufreq-info when present
  - Fix brctl showstp output when bridges contain multiple interfaces
  - Add /etc/modprobe.d to kernel module
  - Ensure relative symlink targets are correctly handled when copying
  - Fix satellite and proxy package detection in rhn plugin
  - Collect stderr output from external commands
  - Collect /proc/cgroups in the cgroups module
    Resolve: bz784874
  - Collect /proc/irq in the kernel module
  - Fix installed-rpms formatting for long package names
  - Add symbolic links for truncated log files
  - Collect non-standard syslog and rsyslog log files
  - Use correct paths for tomcat6 in RHN module
  - Obscure root password if present in anacond-ks.cfg
  - Do not accept embedded forward slashes in RHN usernames
  - Add new sunrpc module to collect rpcinfo for gluster systems


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-16
changelog:
  - Fix execution of RHN hardware.py from hardware plugin
  - Fix hardware plugin to support new lsusb path


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-15
changelog:
  - Fix brctl collection when a bridge contains no interfaces
  - Fix up2dateclient path in hardware plugin


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-11
changelog:
  - Truncate files that exceed specified size limit
  - Add support for collecting Red Hat Subscrition Manager configuration
  - Collect /etc/init on systems using upstart
  - Don't strip whitespace from output of external programs
  - Collect ipv6 neighbour table in network module
  - Collect basic cgroups configuration data


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-10
changelog:
  - Fix collection of data from LVM2 reporting tools in devicemapper plugin
  - Add /proc/vmmemctl collection to vmware plugin


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-9
changelog:
  - Collect yum repository list by default
  - Add basic Infiniband plugin
  - Add plugin for scsi-target-utils iSCSI target
  - Fix autofs plugin LC_ALL usage
  - Fix collection of lsusb and add collection of -t and -v outputs
  - Extend data collection by qpidd plugin
  - Add ethtool pause, coalesce and ring (-a, -c, -g) options to network plugin


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-6
changelog:
  - Fix collection of chkconfig output in startup.py
  - Collect /etc/dhcp in dhcp.py plugin
  - Collect dmsetup ls --tree output in devicemapper.py
  - Collect lsblk output in filesys.py


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-4
changelog:
  - Fix collection of logs and config files in sssd.py
  - Add support for collecting entitlement certificates in rhn.py


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-3
changelog:
  - Fix cluster plugin dlm lockdump for el6
  - Add sssd plugin to collect configuration and logs
  - Collect /etc/anacrontab in system plugin
  - Correct handling of redhat-release for el6


author: Adam Stokes <ajs at redhat dot com> = 1.9-1
changelog:
  - version bump 1.9
  - replaced compression utility with xz
  - strip threading/multiprocessing
  - simplified progress indicator
  - pylint update
  - put global vars in class container
  - unittests
  - simple profiling
  - make use of xgettext as pygettext is deprecated


author: Adam Stokes <ajs at redhat dot com> = 1.8-21
changelog:
  - more sanitizing options for log files
  - rhbz fixes from RHEL version merged into trunk
  - progressbar update


author: Daniel P. Berrange <berrange@redhat.com> - 0.7.0-2
changelog:
  - Fix reserved data size (rhbz #1416783)
  - Fix inverted args in tests (rhbz #1416783)	  
  - Avoid sign extension problems (rhbz #1416783)
  - Fix crash with opening via GSocketAddress (rhbz #1416783)
  - Fix crash & error reporting during connection timeout (rhbz #1441120)
  - Fix incompatibility with libvncserver websockets (rhbz #921330)


author: Daniel P. Berrange <berrange@redhat.com> - 0.7.0-1
changelog:
  - Update to 0.7.0 release (rhbz #1416783)
  - Release held keys when loosing focus (rhbz #921008)
  - Avoid warnings when disconnecting (rhbz #1126825)
  - Workaround to avoid hang connecting to SPICE guest (rhbz #921330)
  - CVE-2017-5884 - fix bounds checking for RRE, hextile and
    copyrect encodings (rhbz #1425367)
  - CVE-2017-5885 - fix color map index bounds checking (rhbz #1425367)


author: Daniel P. Berrange <berrange@redhat.com> - 0.4.2-2
changelog:
  - Fix crash in TLS shutdown code (rhbz #650601)
  - Fix crash in motion event handler (rhbz #650104)
  - Fix framebuffer update bounds checking (rhbz #655630)


author: Colin Walters <walters@verbum.org> - 0.4.1-9
changelog:
  - Rebuild to use old pygobject2-python2 API again:
    https://bugzilla.redhat.com/show_bug.cgi?id=638457


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.10-3
changelog:
  - Drop VNC connection if the server sends a update spaning outside bounds of desktop (rhbz #540810)
  - Fix gcrypt threading initialization (rhbz #537489)


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.4-2.fc9
changelog:
  - Fixed endianness conversions
  - Fix makecontext() args crash on x86_64
  - Fix protocol version negotiation


author: Daniel P. Berrange <berrange@redhat.com> - 0.1.0-4.fc8
changelog:
  - Fix mixed endian handling & BGR pixel format (rhbz #253597)
  - Clear widget areas outside of framebuffer (rhbz #253599)
  - Fix off-by-one in python demo


author: Daniel P. Berrange <berrange@redhat.com> - 0.1.0-3.fc8
changelog:
  - Tweaked post scripts
  - Removed docs from sub-packages
  - Explicitly set license to LGPLv2+
  - Remove use of macro for install rule


author: Matthias Clasen <mclasen@redhat.com> - 3.0.1-2
changelog:
  - Add a nautilus dependency back to the main package; keep the
    -nautilus subpackage for now, in case the setting we use moves
    to gsettings-desktop-schemas (#691766)


author: Christopher Aillon <caillon@redhat.com> 2.8.0-2
changelog:
  - update-desktop-database after uninstall.
  - nautilus shouldn't try to open remote files with file-roller (#133592)


author: Wim Taymans <wtaymans@redhat.com> - 1.4.5-6
changelog:
  - Fix h264 and h265 buffer size checks
  - Fix mpegts pat parsing and add more size checks
  Resolves: rhbz#1400898


author: Hans de Goede <hdegoede@}redhat.com> - 1.2.3-3
changelog:
  - Put the fluidsynth plugin in its own subpackage and make it require
    soundfont2-default (rhbz#1078925)


author: Brian Pepple <bpepple@fedoraproject.org> - 0.11.93-2
changelog:
  - Fix permission on tarball clean-up script.
  - Re-enable soundtouch-devel.
  - Add COPYING.LIB to package.
  - Use %global instead of %define.


author: Jan Grulich <jgrulich@redhat.com> - 1:0.20.0-10
changelog:
  - Add check for user UID when connecting to pipe (#1005261)
  - Add length check in stunEncodeMessage (#1005218)
  - Add sign and overflow checks (#1005219)
  - Remove hardcoded username and password (#1005216)


author: Adrian Reber <adrian@lisas.de> - 10.2+0.90-3
changelog:
  - included upstreamed patches which are changing the license
    headers to be LGPLv2+ for the library parts and GPLv2+ for the
    binaries


author: Adrian Reber <adrian@lisas.de> - 10.2+0.90-2
changelog:
  - added missing files from git: COPYING-GPL and COPYING-LGPL
  - added patch from git for missing pkgconfig requires
    and fixed FSF address


author: Daniel Veillard <veillard@redhat.com> - 0.4.9-1
changelog:
  - Change Licence to MIT and release 0.4.9
  - Fix IndexOutOfBoundsException for unknown error codes
  - Fix javadoc warnings
  - Fix typo in Domain.java


author: Daniel Veillard <veillard@redhat.com> - 0.4.8-1
changelog:
  - Add flags to StoragePoolRefresh
  - use byte[] array for secretGetValue
  - Fix for the jna parameter passing issue
  - Added domain flags and error constants for libvirt 0.9.12


author: Bryan Kearney <bkearney@redhat.com) - 0.4.7-1
changelog:
  - Only throw errors on real errors.
  - Remote non thread safe error reporting
  - BZ 600819 Incorrect scheduler parameter value passed to native API.


author: Bryan Kearney <bkearney@redhat.com> - 0.4.3-1
changelog:
  - Added libvirt API support for up to 0.7.1
  - Reduce java dependencies to 1.5
  - Improved packaging for javadocs
  - Better Free/Close handling


author: Bryan Kearney <bkearney@redhat.com> - 0.4.2-1
changelog:
  - Changed Scheduled Parameters to be a Union instead of a Struct.
  - Better Pointer mappings in the error callback


author: Paul Howarth <paul@city-fan.org> - 1:5.02-4
changelog:
  - Don't BR: perl(Test::LeakTrace) when bootstrapping
  - Don't use macros for commands
  - Don't need to remove empty directories from the buildroot
  - Drop explicit provides for perl(HTML::Tree) now that CPAN and RPM versions
    are back in sync


author: Petr Šabata <contyk@redhat.com> - 0.39-7.1
changelog:
  - Add a few more missing build-time deps
  - Correct the licence tag
  - Modernize the spec a bit
  - Package the example scripts in their directory


author: Petr Sabata <psabata@redhat.com> - 1.31-1
changelog:
  - New release, v1.31
  - Significant FTS3 changes -- might break compatibility with pre-1.30 applications using FTS3
  - New FTS3 tests patch by Paul Howarth


author: Chris Weyl <cweyl@alumni.drew.edu> 1.25-1
changelog:
  - 1.25 needed for DBIx::Class 0.08103
  - auto-update to 1.25 (by cpan-spec-update 0.01)
  - added a new br on perl(File::Spec) (version 0.82)
  - altered br on perl(Test::More) (0 => 0.42)
  - added a new br on perl(DBI) (version 1.57)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.11-4
changelog:
  - Patch to build with system sqlite 3.3.x (#183530).
  - Patch to avoid type information segv (#187873).


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 1.11-3
changelog:
  - DBD::SQLite fails to build with the current FC-5 sqlite version (3.3.3);
    see bugzilla entry #183530.
    Forcing package rebuild with the included version of sqlite (3.2.7).


author: Yaakov Selkowitz <yselkowi@redhat.com> - 17.0.0-20
changelog:
  - Switch to upstream aarch64 48bit VA patch
    This reverts the previous API/ABI break on aarch64, so dependencies
    must be rebuilt again.
  - Resolves: #1393548


author: Colin Walters <walters@redhat.com> - 17.0.0-16
changelog:
  - Add patch for aarch64 48bit VA limits
    This changes the API/ABI only on aarch64, and hence we also bump
    the soname solely on those architectures.  We do retain the same pkg-config
    file name though, so dependencies should only need a rebuild.
  - Resolves: #1324216


author: Colin Walters <walters@redhat.com> - 17.0.0-12
changelog:
  - Add patch for aarch64
  - Fix for aarch64 64k pagesize. BZ#1076181 (Mark Salter <msalter@redhat.com>)
  - Resolves: #1027067


author: Boris Ranto <branto@redhat.com> - 1:10.2.5-1
changelog:
  - New version (1:10.2.5-1)
  - Makefile: Fix dencoder build
  - Add fake fcgiapp.h for rgw
  - common: Build more files of libcommon in client
  - libradosstripper: Build libradostripper for rados as noinst


author: Boris Ranto <branto@redhat.com> - 1:0.80.5-8
changelog:
  - Revert the previous change
  - Fix bz 1118504, second attempt (yasm appears to be the package that caused this


author: Boris Ranto <branto@redhat.com> - 1:0.80.5-5
changelog:
  - Do not require xfsprogs/xfsprogs-devel for el6
  - Require gperftools-devel for non-ppc*/s390* architectures only
  - Do not require junit -- no need to build libcephfs-test.jar
  - Build without libxfs for el6
  - Build without tcmalloc for ppc*/s390* architectures
  - Location of mkcephfs must depend on a rhel release
  - Use epoch in the Requires fields [1130700]


author: Boris Ranto <branto@redhat.com> - 1:0.80.5-1
changelog:
  - Bump the Epoch, we need to keep the latest stable, not development,
    ceph version in fedora
  - Use the upstream spec file with the ceph-libs split
  - Add libs-compat subpackage [1116546]
  - use fedora in rhel 7 checks
  - obsolete libcephfs [1116614]
  - depend on redhat-lsb-core for the initscript [1108696]


author: Ken Dreyer <ken.dreyer@inktank.com> 0.72.2-1
changelog:
  - Update to latest stable upstream release
  - Use HTTPS for URLs
  - Submit Automake 1.12 patch upstream
  - Move unversioned shared libs from ceph-libs into ceph-devel


author: Michael Schwendt <mschwendt@fedoraproject.org> - 0.61.7-3
changelog:
  - let base package include all its documentation files via %doc magic,
    so for Fedora 20 Unversioned Docdirs no files are included accidentally
  - include the sample config files again (instead of just an empty docdir
    that has been added for #846735)
  - don't include librbd.so.1 also in -devel package (#1003202)
  - move one misplaced rados plugin from -devel into -libs package (#891993)
  - include missing directories in -devel and -libs packages
  - move librados-config into the -devel pkg where its manual page is, too
  - add %_isa to subpackage dependencies
  - don't use %defattr anymore
  - add V=1 to make invocation for verbose build output


author: David Nalley <david@gnsa.us> 0.37-1
changelog:
  - create /etc/ceph - bug 745462
  - upgrading to 0.37, fixing 745460, 691033
  - fixing various logrotate bugs 748930, 747101


author: Steven Pritchard <steve@kspei.com> 0.21.1-1
changelog:
  - Update to 0.21.1.
  - Sample configs moved to /usr/share/doc/ceph/.
  - Added cclass, rbd, and cclsinfo.
  - Dropped mkmonfs and rbdtool.
  - mkcephfs moved to /sbin.
  - Add libcls_rbd.so.


author: Sage Weil <sage@newdream.net> 0.19.1-5
changelog:
  - Remove java deps (no need to build hadoop by default)
  - Include all required librados helpers
  - Include fetch_config sample
  - Include rbdtool
  - Remove misc debugging, test binaries


author: Jonathan Dieter <jdieter@lesbg.com> 0.19.1-2
changelog:
  - Add missing libhadoopcephfs.so* to file list
  - Add COPYING to all subpackages
  - Fix ownership of /usr/lib[64]/ceph
  - Enhance description of fuse client


author: Roman Rakus <rrakus@redhat.com> - 1.4.3-24
changelog:
  - Fixed using valist with log option on.
    Resolves: #446844
  - user ident has home dir set to /
    Resolves: #458144


author: Adrian Havill <havill@redhat.com> - 1.4.2-8
changelog:
  - tweak setting of uid/gid for key file so systems with no prior
    ident user/group don't generate a warning (#135837)


author: Adrian Havill <havill@redhat.com> - 1.4.2-4
changelog:
  - slightly better error checking for insane cases
  - tweak of the openssl requires dependency loop (#131291)
  - as ident.key is created in %post, tweak so verify passes (#131530)
  - make the uid/gid for ident conform to the past (#135752)


author: Adrian Havill <havill@redhat.com> - 1.4.0-1
changelog:
  - revise makefile; don't over-optimize as gcc can produce bad code
  - ptr cleanup when multiquery and missing /proc/net/tcp*
  - improve create_opt (error handling, debugging, identifiers)
  - add --prefix option for matching IPv4 to IPv6


author: Adrian Havill <havill@redhat.com> - 1.3.4-1
changelog:
  - retry reading proc with pauses to reduce false negatives
  - match IPv4 addresses against IPv6 compatibility addresses


author: Adrian Havill <havill@redhat.com> - 1.3.1-1
changelog:
  - increase default connections-per-sec/max-instances for HP
  - more doc cleanup
  - remove unnecessary rootdir check for -N/--ident


author: Adrian Havill <havill@redhat.com> - 1.3.0-1
changelog:
  - add unknown-error only -e option
  - edit readme, add rfc to docdir
  - code cleanup; remove static buffers, orthagonalize id names
  - ipv6 hybrid addr zero run correction
  - extra eight bits added to random key


author: Adrian Havill <havill@redhat.com> - 1.2.7-1
changelog:
  - added Provides to satisfy HP pkg rpm dep (#121447, #111640)
  - more code cleanup; minimize --resolve dns lookups


author: Adrian Havill <havill@redhat.com> - 1.2.4-1
changelog:
  - code vet and minor changes re alan@'s comments
  - default operating mode to alias all usernames as 'nobody'
    to prevent noobies from getting their mail addr harvested
  - clean up README documentation


author: Adrian Havill <havill@redhat.com> - 1.2.3-1
changelog:
  - mark xinetd conf file as a noreplace config file
  - more robust error checking for proper rfc1413 tokens


author: Adrian Havill <havill@redhat.com> - 1.2.0-1
changelog:
  - A few tweaks in the cmdline options for orthagonality
  - minor bug fix regarding reading from stdin in some multiquery cmdline cases
  - add --resolve


author: Adrian Havill <havill@redhat.com> - 1.0.0-2
changelog:
  - Obsolete pidentd -- authd and pidentd can't/shouldn't coexist on FC/RHEL
  - license tweak to allow openssl under any condition
  - no spec url needed; package is not worthy enough.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1
changelog:
  - Bump version to  1.3.10.2-1
  - Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
  - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
  - Resolves: Bug 1762901 - cenotaph errors on modrdn operations
  - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
  - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
  - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
  - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
  - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
  - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
  - Resolves: Bug 1796558 - Memory leak in ACI using IP subject
  - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7
changelog:
  - Bump version to 1.3.10.1-7
  - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-6
changelog:
  - Bump version to 1.3.10.1-6
  - Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
  - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  - Resolves: Bug 1803052 - Memory leak in ACI using IP subject
  - Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
  - Resolves: Bug 1809160 - Entry cache contention during base search


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-5
changelog:
  - Bump version to 1.3.10.1-5
  - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-4
changelog:
  - Bump version to 1.3.10.1-4
  - Resolves: Bug 1765106 - ipa-server-install is failing with ipapython.admintool: ERROR failed to create DS instance Command


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-3
changelog:
  - Bump version to 1.3.10.1-3
  - Resolves: Bug 1756182 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
  - Resolves: Bug 1749236 - etime displayed has an order of magnitude 10 times smaller than it should be
  - Resolves: Bug 1758109 - AddressSanitizer: heap-use-after-free in import_free_job
  - Resolves: Bug 1676948 - After audit log file is rotated, DS version string is logged after each update
  - Resolves: Bug 1749595 - Extremely slow LDIF import with ldif2db


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-2
changelog:
  - Bump version to 1.3.10.1-2
  - Resolves: Bug 1748199 - EMBARGOED CVE-2019-14824 389-ds-base: 389-ds and IDM: allows authenticated unprivileged user to retrieve content of userPassword field for any user 
  - Resolves: Bug 1610234 - nsslapd-defaultnamingcontext does not change when the assigned suffix got deleted
  - Resolves: Bug 1723545 - Directory Server 10 not RFC 4511 compliant
  - Resolves: Bug 1724914 - LDAP server returning controltype in different sequence
  - Resolves: Bug 1739182 - CleanAllRUV task limit not enforced
  - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache
  - Resolves: Bug 1685059 - After running cl-dump dbdir/cldb/*ldif.done are not deleted


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-1
changelog:
  - Bump version to 1.3.10.1-1
  - Resolves: Bug 1639342 - Replace error by warning in the state machine defined in repl5_inc_run
  - Resolves: Bug 1691931 - memory leak in automember plugin
  - Resolves: Bug 1662461 - Log the actual base DN when the search fails with "invalid attribute request"
  - Resolves: Bug 1732053 - etime can contain invalid nanosecond value
  - Resolves: Bug 1546739 - consistency in the replication error codes while setting nsds5replicaid=65535


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-10
changelog:
  - Bump version to 1.3.9.1-10
  - Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-9
changelog:
  - Bump version to 1.3.9.1-9
  - Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
  - Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-8
changelog:
  - Bump version to 1.3.9.1-8
  - Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
  - Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
  - Resolves: Bug 1713361 - Update defaults.inf
  - Resolves: Bug 1708215 - maxlogsperdir accepting negative values
  - Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-7
changelog:
  - Bump version to 1.3.9.1-7
  - Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
  - Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
  - Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-6
changelog:
  - Bump version to 1.3.9.1-6
  - Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
  - Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
  - Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
  - Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-5
changelog:
  - Bump version to 1.3.9.1-5
  - Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
  - Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
  - Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
  - Resolves: Bug 1615155 - extended search fails to match entries
  - Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-4
changelog:
  - Bump version to 1.3.9.1-4
  - Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
  - Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
  - Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 & 3)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-3
changelog:
  - Bump version to 1.3.9.1-3
  - Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
  - Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
  - Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
  - Resolves: Bug 1673472 - the warning about skew time could last forever.
  - Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
  - Resolves: Bug 1482596 - referint update should discard any changes if mep update fails


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-2
changelog:
  - Bump version to 1.3.9.1-2
  - Resolves: Bug 1417340 - entry cache is not cleaned up if an operation is aborted
  - Resolves: Bug 1603140 - Export produces a non-importable ldif file
  - Resolves: Bug 1518320 - ns-slapd: crash in entrycache_add_int
  - Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
  - Resolves: Bug 1589144 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-1
changelog:
  * Bump version to 1.3.9.1-1
  - Resolves: Bug 1438144 - [RFE] Include autounmembering feature in IPA
  - Resolves: Bug 1645359 - Rebase 389-ds-base in RHEL 7.7 to 1.3.9
  - Resolves: Bug 1561769 - [RFE] revise the "transient error" message in a replication agreement's last update status
  - Resolves: Bug 1563999 - Is it possible for Directory server to reject the current password only?
  - Resolves: Bug 1597202 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
  - Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database
  - Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
  - Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck
  - Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass
  - Resolves: Bug 1643587 - default of "nsslapd-errorlog-maxlogsperdir: 1" causing huge log files
  - Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
  - Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
  - Resolves: Bug 1653163 - certmap fails when Issuer DN has comma in name
  - Resolves: Bug 1602001 - cannot add cenotaph in read only consumer
  - Resolves: Bug 1589144 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day)
  - Resolves: Bug 1600631 - In repicated topology a single-valued attribute can diverge
  - Resolves: Bug 1626375 - on-line re-initialization hangs
  - Resolves: Bug 1627846 - Contention on virtual attribute lookup
  - Resolves: Bug 1642838 - after certain failed import operation, impossible to replay an import operation
  - Resolves: Bug 1647099 - audit logs does not capture the operation where nsslapd-lookthroughlimit is modified 
  - Resolves: Bug 1648922 - during MODRDN referential integrity can fail erronously while updating large groups
  - Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy
  - Resolves: Bug 1663829 - import task should not be deleted after import finishes to be able to query the status.
  - Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements
  - Resolves: Bug 1622049 - db2bak.pl does not work with LDAPS, but ok with STARTTLS
  - Resolves: Bug 1633488 - fixup-memberof.pl -D cn=<> -w - -b <> -P LDAP fails with ldap_start_tls error
  - Resolves: Bug 1451460 - error messages during ldif2db after enabling encryption on an attribute
  - Resolves: Bug 1627512 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-18
changelog:
  - Bump version to 1.3.8.4-18
  - Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-16
changelog:
  - Bump version to 1.3.8.4-16
  - Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-13
changelog:
  - Bump version to 1.3.8.4-13
  - Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-12
changelog:
  - Bump version to 1.3.8.4-12
  - Resolves: Bug 1616412 - filter optimization fix causes regression(fix reverted)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-11
changelog:
  - Bump version to 1.3.8.4-11
  - Resolves: Bug 1614820 - Server crash through modify command with large DN


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-10
changelog:
  - Bump verison to 1.3.8.4-10
  - Resolves: Bug 1614501 - Disable nunc-stans by default
  - Resolves: Bug 1607078 - ldapsearch with server side sort crashes the ldap server


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-9
changelog:
  - Bump version to 1.3.8.4-9
  - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-8
changelog:
  - Bump version to 1.3.8.4-8
  - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-7
changelog:
  - Bump version to 1.3.8.4-7
  - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA (removed patch file all together)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-6
changelog:
  - Bump version to 1.3.8.4-6
  - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-5
changelog:
  - Bump version to 1.3.8.4-5
  - Resolves: Bug 1595766 - CVE-2018-10871 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-4
changelog:
  - Bump version to 1.3.8.4-4
  - Resolves: Bug 1597384 - Async operations can hang when the server is running nunc-stans
  - Resolves: Bug 1598186 - A search with the scope "one" returns a non-matching entry
  - Resolves: Bug 1598718 - import fails if backend name is "default" 
  - Resolves: Bug 1598478 - If a replica is created with a bindDNGroup, this group is taken into account only after bindDNGroupCheckInterval seconds
  - Resolves: Bug 1525256 - Invalid SNMP MIB for 389 DS
  - Resolves: Bug 1597518 - ds-replcheck command returns traceback errors against ldif files having garbage content when run in offline mode


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-3
changelog:
  - Bump version to 1.3.8.4-3
  - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-2
changelog:
  - Bump version to 1.3.8.4-2
  - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5.17
changelog:
  - Bump version to 1.3.7.5.17
  - Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
  - Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
  - Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-16
changelog:
  - Bump version to 1.3.7.5-16
  - Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-15
changelog:
  - Bump version to 1.3.7.5-15
  - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
  - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
  - Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-14
changelog:
  - Bump version to 1.3.7.5-14
  - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-13
changelog:
  - Bump version to 1.3.7.5-13
  - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
  - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
  - Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
  - Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
  - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-12
changelog:
  - Bump version to 1.3.7.5-12
  - Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
  - Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
  - Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
  - Resolves: Bug 1518287 - heap-use-after-free in csn_as
  - Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
  - Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
  - Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
  - Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
  - Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-11
changelog:
  - Bump version to 1.3.7.5-11
  - Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
  - Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
  - Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
  - Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-10
changelog:
  - Bump version to 1.3.7.5-10
  - Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
  - Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
  - Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
  - Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
  - Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
  - Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
  - Resolves: Bug 1498980 - heap corruption during import
  - Resolves: Bug 1511462 - scope one searches give incorrect results
  - Resolves: Bug 1514033 - opened connection are hanging, no longer poll


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-8
changelog:
  - Bump version to 1.3.7.5-8
  - Resolves: Bug 1509016 - cleanallruv task is not logging any information


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-7
changelog:
  - Bump version to 1.3.7.5-7
  - Resolves: Bug 1474100 - Use of uninitialized value in string ne at /usr/bin/logconv.pl
  - Resolves: Bug 1506425 - Improve valueset sort performance during valueset purging
  - Resolves: Bug 1505046 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV
  - Resolves: Bug 1271208 - nsds5ReplicaProtocolTimeout attribute accepts negative values


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-6
changelog:
  - Bump version to 1.3.7.5-6
  - Resolves: Bug 1488836 - directory server fails to start because maxdisksize 
  - Resolves: Bug 1474100 - Use of uninitialized value in string ne at /usr/bin/logconv.pl
  - Resolves: Bug 1447308 - Add option to show full un-ellipsized output in status-dirsrv
  - Resolves: Bug 1438526 - Server allows to set any nsds5replicaid in the existing replica entry
  - Resolves: Bug 1185774 - Missing warning for invalid replica backoff configuration


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-5
changelog:
  - Bump version to 1.3.7.5-5
  - Resolves: Bug 1476207 - Enabling instance service doesn't work 
  - Resolves: Bug 1434335 - Errors log filled with attrlist_replace - attr_replace
  - Resolves: Bug 1453155 - unable to retrieve specific cosAttribute when subtree password policy is configured
  - Resolves: Bug 1459965 - repl-monitor - matches null string many times in regex 
  - Resolves: Bug 1463204 - Adding a database entry fails if the same database was deleted after an import
  - Resolves: Bug 1469567 - Activating roles returns error 16
  - Resolves: Bug 1498773 - Installation of ipa fails with crash in topology plugin
  - Resolves: Bug 1501058 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
  - Resolves: Bug 1352121 - [RFE] allow to enable MemberOf plugin in dedicated consumer


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-2
changelog:
  - Bump version to 1.3.7.5-2
  - specfile updates: add asan support, make nunc-stans default, and general cleanup


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-16
changelog:
  - Bump version to 1.3.6.1-16
  - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
  - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
  - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
  - Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
  - Resolves: Bug 1456774 - ipa-replica server fails to upgrade


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-15
changelog:
  - Bump version to 1.3.6.1-15
  - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
  - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
  - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
  - Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
  - Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-14
changelog:
  - Bump version to 1.3.6.1-14
  - Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
  - Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
  - Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
  - Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
  - Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
  - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
  - Resolves: Bug 1451657 - -v option is not working for db2ldif.pl


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-13
changelog:
  - Bump version to 1.3.6.1-13
  - Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-11
changelog:
  - Bump version to 1.3.6.1-11
  - Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
  - Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-10
changelog:
  - Bump version to 1.3.6.1-10
  - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
  - Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
  - Resolves: Bug 1377452 - Integer overflow in performance counters
  - Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
  - Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
  - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-9
changelog:
  - Bump version to 1.3.6.1-9
  - Resolves: Bug 1442880 - setup-ds-admin.pl -u with nsslapd-localhost changed
  - Resolves: Bug 1443682 - util_info_sys_pages should be able to detect memory restrictions in a cgroup


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-8
changelog:
  - Bump version to 1.3.6.1-8
  - Resolves: Bug 1432016 - Possible deadlock while installing an ipa replica
  - Resolves: Bug 1438029 - Overflow in memberof


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-7
changelog:
  - Bump version to 1.3.6.1-7
  - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set(fix crash regression)
  - Resolves: bug 1381326 - dirsrv-snmp.service is provided by 389-ds-base instead of 389-ds-base-snmp
  - Resolves: bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-6
changelog:
  - Bump version to 1.3.6.1-6
  - Resolves: bug 1437006 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages
  - Resolves: bug 1341689 - dbmon.sh / cn=monitor] nsslapd-db-pages-in-use is increasing
  - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set
  - Resolves: bug 1397288 - typo in logconv.pl man page
  - Resolves: bug 1436994 - incorrect pathes in pkg-config files
  - Resolves: bug 1396448 - Add a hard dependency for >=selinux-policy-3.13.1-75


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-5
changelog:
  - Bump version to 1.3.6.1-5
  - Resolves: bug 1377452 - Integer overflow in counters and monitor
  - Resolves: bug 1425907 - Harden password storage scheme
  - Resolves: bug 1431207 - ns-slapd killed by SIGABRT


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-4
changelog:
  - Bump version to 1.3.6.1-4
  - Resolves: bug 1379424 - Reset-agmt-update-staus-and-total-init
  - Resolves: bug 1394000 - dbmon.sh-fails-if-you-have-nsslapd-requi.patch
  - Resolves: bug 1417344 - targetattr-wildcard-evaluation-is-incorr.patch
  - Resolves: bug 1429770 - ds-logpipe.py-crashes-for-non-existing-u.patch
  - Resolves: bug 1433697 - Fix-double-free-in-_cl5NewDBFile-error-path.patch
  - Resolves: bug 1433996 - retrocl-can-crash-server-at-shutdown.patch
  - Resolves: bug 1434967 - rpm-would-not-create-valid-pkgconfig-fi.patch
  - Resolves: bug 1417338 - To-debug-DB_DEADLOCK-condition-allow-to.patch
  - Resolves: bug 1433850 - Deleting-suffix-can-hang-server.patch


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-2
changelog:
  - Bump version to 1.3.6.1-2
  - Resolves: bug 1431877 - 389-1.3.6.1-1.el7 covscan errors
  - Resolves: bug 1432206 - content sync plugin can hang server shutdown
  - Resolves: bug 1432149 - sasl external binds fail in 1.3.6.1


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-12
changelog:
  - Release 1.3.5.10-12
  - Resolves: bug 1384785 - Replica install fails with old IPA master sometimes during replication process (DS 48992)
  - Resolves: bug 1388501 - 389-ds-base is missing runtime dependency - bind-utils (DS 48328)
  - Resolves: bug 1388581 - Replication stops working only when fips mode is set to true (DS 48909)
  - Resolves: bug 1390342 - ns-accountstatus.pl shows wrong status for accounts inactivated by Account policy plugin (DS 49014)
  - Resolves: bug 1390343 - trace args debug logging must be more restrictive (DS 49009)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-11
changelog:
  - Release 1.3.5.10-11
  - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-10
changelog:
  - Release 1.3.5.10-10
  - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957)
  - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-9
changelog:
  - Release 1.3.5.10-9
  - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950)
  - Resolves: bug 1366828 - audit on failure doesn't work if attribute nsslapd-auditlog-logging-enabled is NOT enabled (DS 48958)
  - Resolves: bug 1368520 - Crash in import_wait_for_space_in_fifo() (DS 48960)
  - Resolves: bug 1368956 - man page of ns-accountstatus.pl shows redundant entries for -p port option
  - Resolves: bug 1369537 - passwordMinAge attribute doesn't limit the minimum age of the password (DS 48967)
  - Resolves: bug 1369570 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964)
  - Resolves: bug 1369425 - ACI behaves erratically (DS 48972)
  - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957)
  - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969)
  - Resolves: bug 1371283 - Server Side Sorting crashes the server. (DS 48970)
  - Resolves: bug 1371284 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-8
changelog:
  - Release 1.3.5.10-8
  - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48954)
  - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950)
  - Resolves: bug 1366561 - ns-accountstatus.pl giving error even "No such object (32)" (DS 48956)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-7
changelog:
  - Release 1.3.5.10-7
  - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450)
  - Resolves: bug 1360976 - fixing a compiler warning


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-6
changelog:
  - Release 1.3.5.10-6
  - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48928)
  - Resolves: bug 1360447 - nsslapd-workingdir is empty when ns-slapd is started by systemd (DS 48939)
  - Resolves: bug 1360327 - remove-ds.pl deletes an instance even if wrong prefix was specified (DS 48934)
  - Resolves: bug 1349815 - DS logs have warning:ancestorid not indexed for all CS subsystems (DS 48940)
  - Resolves: bug 1329061 - 389-ds-base-1.3.4.0-29.el7_2 "hang" (DS 48882)
  - Resolves: bug 1360976 - EMBARGOED CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack
  - Resolves: bug 1361134 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password (DS 48943) 
  - Resolves: bug 1361321 - Duplicate collation entries (DS 48936)
  - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450)
  - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-5
changelog:
  - Release 1.3.5.10-5
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-4
changelog:
  - Release 1.3.5.10-4
  - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144)
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919)
  - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat
  - Resolves: bug 1354660 - flow control in replication also blocks receiving results (DS 48767)
  - Resolves: bug 1356261 - Fixup tombstone task needs to set proper flag when updating (DS 48924)
  - Resolves: bug 1355760 - ns-slapd crashes during the deletion of backend (DS 48922)
  - Resolves: bug 1353629 - DS shuts down automatically if dnaThreshold is set to 0 in a MMR setup (DS 48916)
  - Resolves: bug 1355879 - nunc-stans: ns-slapd crashes during startup with SIGILL on AMD Opteron 280 (DS 48925)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-2
changelog:
  - Release 1.3.5.10-2
  - Resolves: bug 1353714 - If a cipher is disabled do not attempt to look it up (DS 48743)
  - Resolves: bug 1353592 - Setup-ds.pl --update fails - regression (DS 48755)
  - Resolves: bug 1353544 - db2bak.pl task enters infinitive loop when bak fs is almost full (DS 48914)
  - Resolves: bug 1354374 - Upgrade to 389-ds-base >= 1.3.5.5 doesn't install 389-ds-base-snmp (DS 48918)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-1
changelog:
  - Release 1.3.5.10-1
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48905)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.9-1
changelog:
  - Release 1.3.5.9-1
  - Resolves: bug 1349571 - Improve MMR replication convergence (DS 48636)
  - Resolves: bug 1304682 - "stale" automember rule (associated to a removed group) causes discrepancies in the database (DS 48637)
  - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755)
  - Resolves: bug 1316731 - syncrepl search returning error 329; plugin sending a bad error code (DS 48904)
  - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule  (DS 48891)
  - Resolves: bug 1349577 - Values of dbcachetries/dbcachehits in cn=monitor could overflow. (DS 48899)
  - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT (DS 48898)
  - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538)
  - Resolves: bug 1350632 - ns-slapd shutdown crashes if pwdstorageschema name is from stack. (DS 48902)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.8-1
changelog:
  - Release 1.3.5.8-1
  - Resolves: bug 1290101 - proxyauth support does not work when bound as directory  manager (DS 48366)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.7-1
changelog:
  - Release 1.3.5.7-1
  - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109)
  - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449)
  - Resolves: bug 1290101 - proxyauth support does not work when bound as directory  manager (DS 48366)
  - Resolves: bug 1338872 - Wrong result code display in audit-failure log (DS 48892)
  - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538)
  - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule  (DS 48891)
  - Resolves: bug 1347407 - By default aci can be read by anonymous (DS 48354)
  - Resolves: bug 1347412 - cn=SNMP,cn=config entry can be read by anonymous (DS 48893)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.6-1
changelog:
  - Release 1.3.5.6-1
  - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982)
  - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48766, DS 48636)
  - Resolves: bug 1233926 - "matching rules" in ACI's "bind rules not fully evaluated (DS 48234)
  - Resolves: bug 1346165 - 389-ds-base-1.3.5.5-1.el7.x86_64 requires policycoreutils-py


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.5-1
changelog:
  - Release 1.3.5.5-1
  - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 48833)
  - Resolves: bug 1344414 - [RFE] adding pre/post extop ability (DS 48880)
  - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449)
  - Resolves: bug 1257568 - /usr/lib64/dirsrv/libnunc-stans.so is owned by both -libs and -devel (DS 48404)
  - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755)
  - Resolves: bug 1342609 - At startup DES to AES password conversion causes timeout in start script (DS 48862)
  - Resolves: bug 1316328 - search returns no entry when OR filter component contains non readable attribute (DS 48275)
  - Resolves: bug 1280456 - setup-ds should detect if port is already defined (DS 48336)
  - Resolves: bug 1312557 - dirsrv service fails to start when nsslapd-listenhost is configured (DS 48747)
  - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48752)
  - Resolves: bug 1340307 - Running db2index with no options breaks replication (DS 48854)
  - Resolves: bug 1337195 - Regression introduced in matching rules by DS 48746 (DS 48844)
  - Resolves: bug 1335492 - Modifier's name is not recorded in the audit log with modrdn and moddn operations (DS 48834)
  - Resolves: bug 1316741 - ldctl should support -H with ldap uris (DS 48754)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.4-1
changelog:
  - release 1.3.5.4-1
  - Resolves: bug 1334455 - db2ldif is not taking into account multiple suffixes or backends (DS 48828)
  - Resolves: bug 1241563 - The "repl-monitor" web page does not display "year" in date. (DS 48220)
  - Resolves: bug 1335618 - Server ram sanity checks work in isolation (DS 48617)
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48837)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.3-1
changelog:
  - release 1.3.5.3-1
  - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144)
  - Resolves: bug 1332533 - ns-accountstatus.pl gives error message on execution along with results. (DS 48815)
  - Resolves: bug 1332709 - password history is not updated when an admin resets the password (DS 48813)
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48822)
  - Resolves: bug 1333515 - Enable DS to offer weaker DH params in NSS  (DS 48798)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.2-1
changelog:
  - release 1.3.5.2-1
  - Resolves: bug 1270020 - Rebase 389-ds-base to 1.3.5 in RHEL-7.3 
  - Resolves: bug 1288229 - many attrlist_replace errors in connection with cleanallruv (DS 48283)
  - Resolves: bug 1315893 - License tag does not match actual license of code (DS 48757)
  - Resolves: bug 1320715 - DES to AES password conversion fails if a backend is empty (DS 48777)
  - Resolves: bug 190862  - [RFE] Default password syntax settings don't work with fine-grained policies (DS 142)
  - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 548)
  - Resolves: bug 1143066 - The dirsrv user/group should be created in rpm %pre, and ideally with fixed uid/gid (DS 48285)
  - Resolves: bug 1153758 - [RFE] Support SASL/GSSAPI when ns-slapd is behind a load-balancer (DS 48332)
  - Resolves: bug 1160902 - search, matching rules and filter error "unsupported type 0xA9" (DS 48016)
  - Resolves: bug 1186512 - High memory fragmentation observed in ns-slapd; OOM-Killer invoked (DS 48377, 48129)
  - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109)
  - Resolves: bug 1209094 - [RFE] Allow logging of rejected changes (DS 48145, 48280)
  - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144)
  - Resolves: bug 1210842 - [RFE] Add PIDFile option to systemd service file (DS 47951)
  - Resolves: bug 1223510 - [RFE] it could be nice to have nsslapd-maxbersize default to bigger than 2Mb (DS 48326)
  - Resolves: bug 1229799 - ldclt-bin killed by SIGSEGV (DS 48289)
  - Resolves: bug 1249908 - No validation check for the value for nsslapd-db-locks. (DS 48244)
  - Resolves: bug 1254887 - No man page entry for - option '-u' of dbgen.pl for adding group entries with uniquemembers (DS 48290)
  - Resolves: bug 1255557 - db2index creates index entry from deleted records (DS 48252)
  - Resolves: bug 1258610 - total update request must not be lost (DS 48255)
  - Resolves: bug 1258611 - dna plugin needs to handle binddn groups for authorization (DS 48258)
  - Resolves: bug 1259624 - [RFE] Provide a utility to detect accounts locked due to inactivity (DS 48269)
  - Resolves: bug 1259950 - Add config setting to MemberOf Plugin to add required objectclass got memberOf attribute (DS 48267)
  - Resolves: bug 1266510 - Linked Attributes plug-in - wrong behaviour when adding valid and broken links (DS 48295)
  - Resolves: bug 1266532 - Linked Attributes plug-in - won't update links after MODRDN operation (DS 48294)
  - Resolves: bug 1267750 - pagedresults - when timed out, search results could have been already freed. (DS 48299)
  - Resolves: bug 1269378 - ds-logpipe.py with wrong arguments - python exception in the output (DS 48302)
  - Resolves: bug 1271330 - nunc-stans: Attempt to release connection that is not acquired (DS 48311)
  - Resolves: bug 1272677 - nunc stans: ns-slapd killed by SIGTERM
  - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT
  - Resolves: bug 1273142 - crash in Managed Entry plugin (DS 48312)
  - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982)
  - Resolves: bug 1273550 - Deadlock between two MODs on the same entry between entry cache and backend lock (DS 47978)
  - Resolves: bug 1273555 - deadlock in mep delete post op (DS 47976)
  - Resolves: bug 1273584 - lower password history minimum to 1 (DS 48394)
  - Resolves: bug 1275763 - [RFE] add setup-ds.pl option to disable instance specific scripts (DS 47840)
  - Resolves: bug 1276072 - [RFE] Allow RHDS to be setup using a DNS CNAME alias for General.FullMachineName (DS 48328)
  - Resolves: bug 1278567 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338)
  - Resolves: bug 1278584 - Share nsslapd-threadnumber in the case nunc-stans is enabled, as well. (DS 48339)
  - Resolves: bug 1278755 - deadlock on connection mutex (DS 48341)
  - Resolves: bug 1278987 - Cannot upgrade a consumer to supplier in a multimaster environment (DS 48325)
  - Resolves: bug 1280123 - acl - regression - trailing ', (comma)' in macro matched value is not removed. (DS 48344)
  - Resolves: bug 1290111 - [RFE] Support for rfc3673 '+' to return operational attributes (DS 48363)
  - Resolves: bug 1290141 - With exhausted range, part of DNA shared configuration is deleted after server restart (DS 48362)
  - Resolves: bug 1290242 - SimplePagedResults -- in the search error case, simple paged results slot was not released. (DS 48375)
  - Resolves: bug 1290600 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same ldapmodify operation (DS 48370)
  - Resolves: bug 1295947 - 389-ds hanging after a few minutes of operation (DS 48406, revert 48338)
  - Resolves: bug 1296310 - ldclt - segmentation fault error while binding (DS 48400)
  - Resolves: bug 1299758 - CVE-2016-0741 389-ds-base: Worker threads do not detect abnormally closed connections causing DoS [rhel-7.3]
  - Resolves: bug 1301097 - logconv.pl displays negative operation speeds (DS 48446)
  - Resolves: bug 1302823 - Crash in slapi_get_object_extension (DS 48536)
  - Resolves: bug 1303641 - heap corruption at schema replication. (DS 48492)
  - Resolves: bug 1307151 - keep alive entries can break replication (DS 48445)
  - Resolves: bug 1310848 - Supplier can skip a failing update, although it should retry. (DS 47788)
  - Resolves: bug 1314557 - change severity of some messages related to "keep alive" enties (DS 48420)
  - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450)
  - Resolves: bug 1316742 - no plugin calls in tombstone purging (DS 48759)
  - Resolves: bug 1319329 - [RFE] add nsslapd-auditlog-logging-enabled: off to template-dse.ldif (DS 48145)
  - Resolves: bug 1320295 - If nsSSL3 is on, even if SSL v3 is not really enabled, a confusing message is logged. (DS 48775)
  - Resolves: bug 1326520 - db2index uses a buffer size derived from dbcachesize (DS 48383)
  - Resolves: bug 1328936 - objectclass values could be dropped on the consumer (DS 48799)
  - Resolves: bug 1287475 - [RFE] response control for password age should be sent by default by RHDS (DS 48369)
  - Resolves: bug 1331343 - Paged results search returns the blank list of entries (DS 48808)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-19
changelog:
  - release 1.3.4.0-19
  - Resolves: bug 1228823 - async simple paged results issue (DS 48299, DS 48192)
  - Resolves: bug 1266944 - ns-slapd crash during ipa-replica-manage del (DS 48298)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-18
changelog:
  - release 1.3.4.0-18
  - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266, DS 48284)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-17
changelog:
  - release 1.3.4.0-17
  - Resolves: bug 1259949 - A backport error (coverity -- unused variable 'init_retry')


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-16
changelog:
  - release 1.3.4.0-16
  - Resolves: bug 1243970 - In MMR, double free coould occur under some special condition (DS 48276, DS 48226)
  - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266)
  - Resolves: bug 1241723 - cleanallruv - fix regression with server shutdown (DS 48217)
  - Resolves: bug 1264224 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in (DS 48188)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-15
changelog:
  - release 1.3.4.0-15
  - Resolves: bug 1258996 - Complex filter in a search request doen't work as expected. (regression) (DS 48265)
  - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-14
changelog:
  - release 1.3.4.0-14
  - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228)
  - Resolves: bug 1255851 - Shell CLI fails with usage errors if an argument containing white spaces is given (DS 48254)
  - Resolves: bug 1256938 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax (DS 47757)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-12
changelog:
  - release 1.3.4.0-12
  - Resolves: bug 1252133 - replica upgrade failed in starting dirsrv service (DS 48243)
  - Resolves: bug 1254344 - Server crashes in ACL_LasFindFlush during shutdown if ACIs contain IP addresss restrictions (DS 48233)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-11
changelog:
  - release 1.3.4.0-11
  - Resolves: bug 1249784 - ipa-dnskeysyncd unhandled exception on named-pkcs11 start (DS 48249)
  - Resolves: bug 1252082 - removing chaining database links trigger valgrind read error (DS 47686)
  - Resolves: bug 1252207 - bashisms in 389-ds-base admin scripts (DS 47511)
  - Resolves: bug 1252533 - Man pages and help for remove-ds.pl doesn't display "-a" option (DS 48245)
  - Resolves: bug 1252781 - Slapd crashes reported from latest builds (DS 48250)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-9
changelog:
  - release 1.3.4.0-9
  - Resolves: bug 1240876 - verify_db.pl doesn't verify DB specified by -a option. (DS 48215)
  - Resolves: bug 1245235 - winsync lastlogon attribute not syncing between IPA & Windows 2008. (DS 48232)
  - Resolves: bug 1245519 - Deadlock with retrochangelog, memberof plugin (DS 47931)
  - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228)
  - Resolves: bug 1247811 - logconv autobind handling regression caused by 47446 (DS 48231)
  - Resolves: bug 1250177 - Investigate betxn plugins to ensure they return the correct error code (DS 47810)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-8
changelog:
  - release 1.3.4.0-8
  - Resolves: bug 1160243 - [RFE] allow logconv.pl -S/-E switches to work even when exact/same timestamps are not present in access log file (DS 47910)
  - Resolves: bug 1172037 - winsync range retrieval gets only 5000 values upon initialization (DS 48010)
  - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)
  - Resolves: bug 1243950 - When starting a replica agreement a deadlock can occur with an op updating nsuniqueid index (DS 48179)
  - Resolves: bug 1243970 -  In MMR, double free coould occur under some special condition (DS 48226)
  - Resolves: bug 1244926 - Crash while triming the retro changelog (DS 48206)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-7
changelog:
  - release 1.3.4.0-7
  - Resolves: bug 1235060 - Fix coverity issues - 07/14/2015 (DS 48203)
  - Resolves: bug 1242531 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-6
changelog:
  - release 1.3.4.0-6
  - Resolves: bug 1240845 - cleanallruv should completely clean changelog (DS 48208)
  - Resolves: bug 1095603 - Any negative LDAP error code number reported as Illegal error by ldclt. (DS 47799)
  - Resolves: bug 1168675 - Inconsistent behaviour of DS when LDAP Sync is used with an invalid cookie (DS 48013)
  - Resolves: bug 1241723 - cleanAllRUV hangs shutdown if not all of the replicas are online (DS 48217)
  - Resolves: bug 1241497 - crash in ns-slapd when deleting winSyncSubtreePair from sync agreement (DS 48216)
  - Resolves: bug 1240404 - Silent install needs to properly exit when INF file is missing (DS 48119)
  - Resolves: bug 1240406 - Remove warning suppression in 1.3.4 (DS 47878)
  - Resolves: bug 1242683 - Winsync fails when AD users have multiple spaces (two)inside the value of the rdn attribute (DS 48223)
  - Resolves: bug 1160243 - logconv.pl - validate start and end time args (DS 47910)
  - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)
  - Resolves: bug 1230996 - CI test: fixing test cases for ticket 48194 (DS 48194)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-4
changelog:
  - release 1.3.4.0-4
  - Resolves: bug 1240404 - setup-ds.pl does not log invalid --file path errors the same (DS 48119)
  - Resolves: bug 1240406 - setup -u stops after first failure (DS 47878)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-3
changelog:
  - release 1.3.4.0-3
  - Resolves: bug 1228823 - async simple paged results issue (DS 48192)
  - Resolves: bug 1237325 - reindex off-line twice could provoke index corruption (DS 48212)
  - Resolves: bug 1238790 - ldapsearch on nsslapd-maxbersize returns 0 instead of current value (DS 48214)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-2
changelog:
  - release 1.3.4.0-2
  - Resolves: bug 1235060 - Fix coverity issues 
  - Resolves: bug 1235387 - Slow replication when deleting large quantities of multi-valued attributes (DS 48195)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-1
changelog:
  - Release 1.3.4.0-1 (rebase)
  - Enable nunc-stans for x86_64.
  - Resolves: bug 1034325 - Linked attributes betxnpreoperation - transaction not aborted when linked entry does not exit (DS 47640)
  - Resolves: bug 1052755 - Retro Changelog Plugin accepts invalid value in nsslapd-changelogmaxage attribute (DS 47669)
  - Resolves: bug 1096409 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown (DS 47801)
  - Resolves: bug 1145378 - Adding an entry with an invalid password as rootDN is incorrectly rejected (DS 47900)
  - Resolves: bug 1145382 - Bad manipulation of passwordhistory (DS 47905)
  - Resolves: bug 1154147 - Uniqueness plugin: should allow to exclude some subtrees from its scope (DS 47927)
  - Resolves: bug 1171358 - Make ReplicaWaitForAsyncResults configurable (DS 47957)
  - Resolves: bug 1171663 - MODDN fails when entry doesn't have memberOf attribute and new DN is in the scope of memberOfExcludeSubtree (DS 47526)
  - Resolves: bug 1174457 - [RFE] memberOf - add option to skip nested group lookups during delete operations (DS 47963)
  - Resolves: bug 1178640 - db2bak.pl man page should be improved. (DS 48008)
  - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)
  - Resolves: bug 1180331 - Local Password Policies for Nested OU's not honoured (DS 47980)
  - Resolves: bug 1180776 - nsslapd-db-locks modify not taking into account (DS 47934)
  - Resolves: bug 1181341 - nsslapd-changelogtrim-interval and nsslapd-changelogcompactdb-interval are not validated (DS 47617)
  - Resolves: bug 1185882 - ns-activate.pl fails to activate account if it was disabled on AD (DS 48001)
  - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005)
  - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030)
  - Resolves: bug 1206309 - winsync sets AccountUserControl in AD to 544 (DS 47723)
  - Resolves: bug 1210845 - slapd crashes during Dogtag clone reinstallation (DS 47966)
  - Resolves: bug 1210850 - add an option '-u' to dbgen.pl for adding group entries with (DS 48025)
  - Resolves: bug 1210852 - aci with wildcard and macro not correctly evaluated (DS 48141)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-19
changelog:
  - release 1.3.3.1-19
  - Resolves: bug 1230996 - nsSSL3Ciphers preference not enforced server side (DS 48194)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-18
changelog:
  - release 1.3.3.1-18
  - Resolves: bug 1228823 - async simple paged results issue (DS 48146, DS 48192)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-17
changelog:
  - release 1.3.3.1-17
  - Resolves: bug 1226510 - idm/ipa 389-ds-base entry cache converges to 500 KB in dblayer_is_cachesize_sane (DS 48190)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-16
changelog:
  - release 1.3.3.1-16
  - Resolves: bug 1212894 - CVE-2015-1854 389ds-base: access control bypass with modrdn


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-14
changelog:
  - release 1.3.3.1-14
  - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030)
              Fixes spec file to make sure all the server instances are stopped before upgrade
  - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-12
changelog:
  - release 1.3.3.1-12
  - Resolves: bug 1182477 - Windows Sync accidentally cleared raw_entry (DS 47989)
  - Resolves: bug 1180325 - upgrade script fails if /etc and /var are on different file systems (DS 47991 )
  - Resolves: bug 1183655 - Schema learning mechanism, in replication, unable to extend an existing definition (DS 47988)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-11
changelog:
  - release 1.3.3.1-11
  - Resolves: bug 1080186 - During delete operation do not refresh cache entry if it is a tombstone (DS 47750)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-10
changelog:
  - release 1.3.3.1-10
  - Resolves: bug 1172731 - CVE-2014-8112 password hashing bypassed when "nsslapd-unhashed-pw-switch" is set to off 
  - Resolves: bug 1166265 - DS hangs during online total update (DS 47942)
  - Resolves: bug 1168151 - CVE-2014-8105 information disclosure through 'cn=changelog' subtree
  - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable (DS 47526)
  - Resolves: bug 1171356 - Bind DN tracking unable to write to internalModifiersName without special permissions (DS 47950)
  - Resolves: bug 1153737 - logconv.pl -- support parsing/showing/reporting different protocol versions (DS 47949)
  - Resolves: bug 1171355 - start dirsrv after chrony on RHEL7 and Fedora (DS 47947)
  - Resolves: bug 1170707 - cos_cache_build_definition_list does not stop during server shutdown (DS 47967)
  - Resolves: bug 1170708 - COS memory leak when rebuilding the cache (DS - Ticket 47969)
  - Resolves: bug 1170709 - Account lockout attributes incorrectly updated after failed SASL Bind (DS 47970)
  - Resolves: bug 1166260 - cookie_change_info returns random negative number if there was no change in a tree (DS 47960)
  - Resolves: bug 1012991 - Error log levels not displayed correctly (DS 47636)
  - Resolves: bug 1108881 - rsearch filter error on any search filter (DS 47722)
  - Resolves: bug 994690  - Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart (DS 47451)
  - Resolves: bug 1162997 - Running a plugin task can crash the server (DS 47451)
  - Resolves: bug 1166252 - RHEL7.1 ns-slapd segfault when ipa-replica-install restarts (DS 47451)
  - Resolves: bug 1172597 - Crash if setting invalid plugin config area for MemberOf Plugin (DS 47525)
  - Resolves: bug 1139882 - coverity defects found in 1.3.3.x (DS 47965)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-9
changelog:
  - release 1.3.3.1-9
  - Resolves: bug 1153737 - Disable SSL v3, by default. (DS 47928)
  - Resolves: bug 1163461 - Should not check aci syntax when deleting an aci (DS 47953)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-8
changelog:
  - release 1.3.3.1-8
  - Resolves: bug 1156607 - Crash in entry_add_present_values_wsi_multi_valued (DS 47937)
  - Resolves: bug 1153737 - Disable SSL v3, by default (DS 47928, DS 47945, DS 47948)
  - Resolves: bug 1158804 - Malformed cookie for LDAP Sync makes DS crash (DS 47939)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-6
changelog:
  - release 1.3.3.1-6
  - Resolves: bug 1151287 - dynamically added macro aci is not evaluated on the fly (DS 47922)
  - Resolves: bug 1080186 - Need to move slapi_pblock_set(pb, SLAPI_MODRDN_EXISTING_ENTRY, original_entry->ep_entry) prior to original_entry overwritten (DS 47897)
  - Resolves: bug 1150694 - Encoding of SearchResultEntry is missing tag (DS 47920)
  - Resolves: bug 1150695 - ldbm_back_modify SLAPI_PLUGIN_BE_PRE_MODIFY_FN does not return even if one of the preop plugins fails. (DS 47919)
  - Resolves: bug 1139882 - Fix remaining compiler warnings (DS 47892)
  - Resolves: bug 1150206 - result of dna_dn_is_shared_config is incorrectly used (DS 47918)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-4
changelog:
  - release 1.3.3.1-4
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing  (DS 47750)
  - Resolves: bug 1145846 - 389-ds 1.3.3.0 does not adjust cipher suite configuration on upgrade, breaks itself and pki-server (DS 47908)
  - Resolves: bug 1117979 - harden the list of ciphers available by default (phase 2) (DS 47838)
                          - provide enabled ciphers as search result (DS 47880)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-2
changelog:
  - release 1.3.3.1-2
  - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748)
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47834)
  - Resolves: bug 1139882 - coverity defects found in 1.3.3.1 (DS 47890)
  - Resolves: bug 1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (DS 47885 - deref plugin should not return references with noc access rights)
  - Resolves: bug 1117979 - harden the list of ciphers available by default (DS 47838, DS 47895)
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47889 - DS crashed during ipa-server-install on test_ava_filter)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-1
changelog:
  - release 1.3.3.1-1
  - Resolves: bug 746646 - RFE: easy way to configure which users and groups to sync with winsync
  - Resolves: bug 881372 - nsDS5BeginReplicaRefresh attribute accepts any value and it doesn't throw any error when server restarts.
  - Resolves: bug 920597 - Possible to add invalid ACI value
  - Resolves: bug 921162 - Possible to add nonexistent target to ACI
  - Resolves: bug 923799 - if nsslapd-cachememsize set to the number larger than the RAM available, should result in proper error message.
  - Resolves: bug 924937 - Attribute "dsOnlyMemberUid" not allowed when syncing nested posix groups from AD with posixWinsync
  - Resolves: bug 951754 - Self entry access ACI not working properly
  - Resolves: bug 952517 - Dirsrv instance failed to start with Segmentation fault (core dump) after modifying 7-bit check plugin
  - Resolves: bug 952682 - nsslapd-db-transaction-batch-val turns to -1
  - Resolves: bug 966443 - Plugin library path validation
  - Resolves: bug 975176 - Non-directory manager can change the individual userPassword's storage scheme
  - Resolves: bug 979465 - IPA replica's - "SASL encrypted packet length exceeds maximum allowed limit"
  - Resolves: bug 982597 - Some attributes in cn=config should not be multivalued
  - Resolves: bug 987009 - 389-ds-base - shebang with /usr/bin/env
  - Resolves: bug 994690 - RFE: Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart
  - Resolves: bug 1012991 - errorlog-level 16384 is listed as 0 in cn=config
  - Resolves: bug 1013736 - Enabling/Disabling DNA plug-in throws "ldap_modify: Server Unwilling to Perform (53)" error
  - Resolves: bug 1014380 - setup-ds.pl doesn't lookup the "root" group correctly
  - Resolves: bug 1020459 - rsa_null_sha should not be enabled by default
  - Resolves: bug 1024541 - start dirsrv after ntpd
  - Resolves: bug 1029959 - Managed Entries betxnpreoperation - transaction not aborted upon failure to create managed entry
  - Resolves: bug 1031216 - add dbmon.sh
  - Resolves: bug 1044133 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result
  - Resolves: bug 1044134 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default
  - Resolves: bug 1044135 - make connection buffer size adjustable
  - Resolves: bug 1044137 - posix winsync should support ADD user/group entries from DS to AD
  - Resolves: bug 1044138 - mep_pre_op: Unable to fetch origin entry
  - Resolves: bug 1044139 - [RFE] Support RFC 4527 Read Entry Controls
  - Resolves: bug 1044140 - Allow search to look up 'in memory RUV'
  - Resolves: bug 1044141 - MMR stress test with dna enabled causes a deadlock
  - Resolves: bug 1044142 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist
  - Resolves: bug 1044143 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change
  - Resolves: bug 1044144 - resurrected entry is not correctly indexed
  - Resolves: bug 1044146 - Add a warning message when a connection hits the max number of threads
  - Resolves: bug 1044147 - 7-bit check plugin does not work for userpassword attribute
  - Resolves: bug 1044148 - The backend name provided to bak2db is not validated
  - Resolves: bug 1044149 - Winsync should support range retrieval
  - Resolves: bug 1044150 - 7-bit checking is not necessary for userPassword
  - Resolves: bug 1044151 - With SeLinux, ports can be labelled per range. setup-ds.pl or setup-ds-admin.pl fail to detect already ranged labelled ports
  - Resolves: bug 1044152 - ChainOnUpdate: "cn=directory manager" can modify userRoot on consumer without changes being chained or replicated. Directory integrity compromised.
  - Resolves: bug 1044153 - mods optimizer
  - Resolves: bug 1044154 - multi master replication allows schema violation
  - Resolves: bug 1044156 - DS crashes with some 7-bit check plugin configurations
  - Resolves: bug 1044157 - Some updates of "passwordgraceusertime" are useless when updating "userpassword"
  - Resolves: bug 1044159 - [RFE] Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533
  - Resolves: bug 1044160 - remove-ds.pl should remove /var/lock/dirsrv
  - Resolves: bug 1044162 - enhance retro changelog
  - Resolves: bug 1044163 - updates to ruv entry are written to retro changelog
  - Resolves: bug 1044164 - Password administrators should be able to violate password policy
  - Resolves: bug 1044168 - Schema replication between DS versions may overwrite newer base schema
  - Resolves: bug 1044169 - ACIs do not allow attribute subtypes in targetattr keyword
  - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable
  - Resolves: bug 1044171 - Allow referential integrity suffixes to be configurable
  - Resolves: bug 1044172 - Plugin library path validation prevents intentional loading of out-of-tree modules
  - Resolves: bug 1044173 - make referential integrity configuration more flexible
  - Resolves: bug 1044177 - allow configuring changelog trim interval
  - Resolves: bug 1044179 - objectclass may, must lists skip rest of objectclass once first is found in sup
  - Resolves: bug 1044180 - memberOf on a user is converted to lowercase
  - Resolves: bug 1044181 - report unindexed internal searches
  - Resolves: bug 1044183 - With 1.3.04 and subtree-renaming OFF, when a user is deleted after restarting the server, the same entry can't be added
  - Resolves: bug 1044185 - dbscan on entryrdn should show all matching values
  - Resolves: bug 1044187 - logconv.pl - RFE - add on option for a minimum etime for unindexed search stats
  - Resolves: bug 1044188 - Recognize compressed log files
  - Resolves: bug 1044191 - support TLSv1.1 and TLSv1.2, if supported by NSS
  - Resolves: bug 1044193 - default nsslapd-sasl-max-buffer-size should be 2MB
  - Resolves: bug 1044194 - Complex filter in a search request doen't work as expected.
  - Resolves: bug 1044196 - Automember plug-in should treat MODRDN operations as ADD operations
  - Resolves: bug 1044198 - Replication of the schema may overwrite consumer 'attributetypes' even if consumer definition is a superset
  - Resolves: bug 1044202 - db2bak.pl issue when specifying non-default directory
  - Resolves: bug 1044203 - Allow referint plugin to use an alternate config area
  - Resolves: bug 1044205 - Allow memberOf to use an alternate config area
  - Resolves: bug 1044210 - idl switch does not work
  - Resolves: bug 1044211 - make old-idl tunable
  - Resolves: bug 1044212 - IDL-style can become mismatched during partial restoration
  - Resolves: bug 1044213 - backend performance - introduce optimization levels
  - Resolves: bug 1044215 - using transaction batchval violates durability
  - Resolves: bug 1044216 - examine replication code to reduce amount of stored state information
  - Resolves: bug 1048980 - 7-bit check plugin not checking MODRDN operation
  - Resolves: bug 1049030 - Windows Sync group issues
  - Resolves: bug 1052751 - Page control does not work if effective rights control is specified
  - Resolves: bug 1052754 - Allow nsDS5ReplicaBindDN to be a group DN
  - Resolves: bug 1057803 - logconv errors when search has invalid bind dn
  - Resolves: bug 1060032 - [RFE] Update lastLoginTime also in Account Policy plugin if account lockout is based on passwordExpirationTime.
  - Resolves: bug 1061060 - betxn: retro changelog broken after cancelled transaction
  - Resolves: bug 1061572 - improve dbgen rdn generation, output and man page.
  - Resolves: bug 1063990 - single valued attribute replicated ADD does not work
  - Resolves: bug 1064006 - Size returned by slapi_entry_size is not accurate
  - Resolves: bug 1064986 - Replication retry time attributes cannot be added
  - Resolves: bug 1067090 - Missing warning for invalid replica backoff configuration
  - Resolves: bug 1072032 - Updating nsds5ReplicaHost attribute in a replication agreement fails with error 53
  - Resolves: bug 1074306 - Under heavy stress, failure of turning a tombstone into glue makes the server hung
  - Resolves: bug 1074447 - Part of DNA shared configuration is deleted after server restart
  - Resolves: bug 1076729 - Continuous add/delete of an entry in MMR setup causes entryrdn-index conflict
  - Resolves: bug 1077884 - ldap/servers/slapd/back-ldbm/dblayer.c: possible minor problem with sscanf
  - Resolves: bug 1077897 - Memory leak with proxy auth control
  - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing
  - Resolves: bug 1082967 - attribute uniqueness plugin fails when set as a chaining component
  - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution
  - Resolves: bug 1086890 - empty modify returns LDAP_INVALID_DN_SYNTAX
  - Resolves: bug 1086902 - mem leak in do_bind when there is an error
  - Resolves: bug 1086904 - mem leak in do_search - rawbase not freed upon certain errors
  - Resolves: bug 1086908 - Performing deletes during tombstone purging results in operation errors
  - Resolves: bug 1090178 - #481 breaks possibility to reassemble memberuid list
  - Resolves: bug 1092099 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone
  - Resolves: bug 1092342 - nsslapd-ndn-cache-max-size accepts any invalid value.
  - Resolves: bug 1092648 - Negative value of nsSaslMapPriority is not reset to lowest priority
  - Resolves: bug 1097004 - Problem with deletion while replicated
  - Resolves: bug 1098654 - db2bak.pl error with changelogdb
  - Resolves: bug 1099654 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator.
  - Resolves: bug 1108405 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..."
  - Resolves: bug 1108407 - managed entry plugin fails to update managed entry pointer on modrdn operation
  - Resolves: bug 1108865 - memory leak in ldapsearch filter objectclass=*
  - Resolves: bug 1108870 - ACI warnings in error log
  - Resolves: bug 1108872 - Logconv.pl with an empty access log gives lots of errors
  - Resolves: bug 1108874 - logconv.pl memory continually grows
  - Resolves: bug 1108881 - rsearch filter error on any search filter
  - Resolves: bug 1108895 - [RFE - RHDS9] CLI report to monitor replication
  - Resolves: bug 1108902 - rhds91 389-ds-base-1.2.11.15-31.el6_5.x86_64 crash in db4 __dbc_get_pp env = 0x0 ?
  - Resolves: bug 1108909 - single valued attribute replicated ADD does not work
  - Resolves: bug 1109334 - 389 Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled.
  - Resolves: bug 1109336 - Parent numsubordinate count can be incorrectly updated if an error occurs
  - Resolves: bug 1109339 - Nested tombstones become orphaned after purge
  - Resolves: bug 1109354 - Tombstone purging can crash the server if the backend is stopped/disabled
  - Resolves: bug 1109357 - Coverity issue in 1.3.3
  - Resolves: bug 1109364 - valgrind - value mem leaks, uninit mem usage
  - Resolves: bug 1109375 - provide default syntax plugin
  - Resolves: bug 1109378 - Environment variables are not passed when DS is started via service
  - Resolves: bug 1111364 - Updating winsync one-way sync does not affect the behaviour dynamically
  - Resolves: bug 1112824 - Broken dereference control with the FreeIPA 4.0 ACIs
  - Resolves: bug 1113605 - server restart wipes out index config if there is a default index
  - Resolves: bug 1115177 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with improper macro
  - Resolves: bug 1117021 - Server deadlock if online import started while server is under load
  - Resolves: bug 1117975 - paged results control is not working in some cases when we have a subsuffix.
  - Resolves: bug 1117979 - harden the list of ciphers available by default
  - Resolves: bug 1117981 - Fix various typos in manpages & code
  - Resolves: bug 1117982 - Fix hyphens used as minus signed and other manpage mistakes
  - Resolves: bug 1118002 - server crashes deleting a replication agreement
  - Resolves: bug 1118006 - RFE - forcing passwordmustchange attribute by non-cn=directory manager
  - Resolves: bug 1118007 - [RFE] Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords
  - Resolves: bug 1118014 - Enhance ACIs to have more control over MODRDN operations
  - Resolves: bug 1118021 - Return all attributes in rootdse without explicit request
  - Resolves: bug 1118025 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  - Resolves: bug 1118032 - Schema Replication Issue
  - Resolves: bug 1118034 - 389 DS Server crashes and dies while handles paged searches from clients
  - Resolves: bug 1118043 - Failed deletion of aci: no such attribute
  - Resolves: bug 1118048 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed.
  - Resolves: bug 1118051 - Add switch to disable pre-hashed password checking
  - Resolves: bug 1118054 - Make ldbm_back_seq independently support transactions
  - Resolves: bug 1118055 - Add operations rejected by betxn plugins remain in cache
  - Resolves: bug 1118057 - online import crashes server if using verbose error logging
  - Resolves: bug 1118059 - add fixup-memberuid.pl script
  - Resolves: bug 1118060 - winsync plugin modify is broken
  - Resolves: bug 1118066 - memberof scope: allow to exclude subtrees
  - Resolves: bug 1118069 - 389-ds production segfault: __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:144
  - Resolves: bug 1118074_DELETE_FN - plugin returned error" messages
  - Resolves: bug 1118076 - ds logs many "Operation error fetching Null DN" messages
  - Resolves: bug 1118077 - Improve import logging and abort handling
  - Resolves: bug 1118079 - Multi master replication initialization incomplete after restore of one master
  - Resolves: bug 1118080 - Don't add unhashed password mod if we don't have an unhashed value
  - Resolves: bug 1118081 - Investigate betxn plugins to ensure they return the correct error code
  - Resolves: bug 1118082 - The error result text message should be obtained just prior to sending result
  - Resolves: bug 1123865 - CVE-2014-3562 389-ds-base: 389-ds: unauthenticated information disclosure [rhel-7.1]


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-26
changelog:
  - release 1.3.1.6-26
  - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution (Ticket 346)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-24
changelog:
  - release 1.3.1.6-24
  - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735); regression - sub-type length in attribute type was mistakenly subtracted.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-23
changelog:
  - Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind) (Added 0095-Ticket-47739-directory-server-is-insecurely-misinter.patch)

    Tue Mar 11 2014 Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-23
  - release 1.3.1.6-22
  - Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-22
changelog:
  - release 1.3.1.6-22
  - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-21
changelog:
  - release 1.3.1.6-21
  - Resolves: bug 918694 - Fix covscan defect FORWARD_NULL (Ticket 408)
  - Resolves: bug 918717 - Fix covscan defect COMPILER WARNINGS (Ticket 571)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-20
changelog:
  - release 1.3.1.6-20
  - Resolves: bug 1065242 - 389-ds-base, conflict occurs at yum installation if multilib_policy=all. (Ticket 47709)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-19
changelog:
  - release 1.3.1.6-19
  - Resolves: bug 1065971 - Enrolling a host into IdM/IPA always takes two attempts (Ticket 47704)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-18
changelog:
  - release 1.3.1.6-18
  - Resolves: bug 838656 - logconv.pl tool removes the access logs contents if "-M" is not correctly used (Ticket 471)
  - Resolves: bug 922538 - improve dbgen rdn generation, output (Ticket 47374)
  - Resolves: bug 970750 - flush.pl is not included in perl5 (Ticket 47374)
  - Resolves: bug 1013898 - Fix various issues with logconv.pl (Ticket 471)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-17
changelog:
  - release 1.3.1.6-17
  - Resolves: bug 853106 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (Ticket 443)
  - Resolves: bug 1049525 - Server hangs in cos_cache when adding a user entry (Ticket 47649)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-15
changelog:
  - release 1.3.1.6-15
  - Resolves: bug 918702 -  better error message when cache overflows (Ticket 342)
  - Resolves: bug 1009679 - replication stops with excessive clock skew (Ticket 47516)
  - Resolves: bug 1042855 - Unable to delete protocol timeout attribute (Ticket 47620)
  - Resolves: bug 918694 - Fix crash when disabling/enabling the setting (Ticket 408)
  - Resolves: bug 853355 - config_set_allowed_to_delete_attrs: Valgrind reports Invalid read (Ticket 47660)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-14
changelog:
  - release 1.3.1.6-14
  - Resolves: bug 853355 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs (Ticket 447) 
  - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613)
  - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribut; Fix logically dead code; Fix dereferenced NULL pointer in agmtlist_modify_callback(); Fix missing left brackete (Ticket 47620)
  - Resolves: bug 1042855 - nsds5ReplicaProtocolTimeout attribute is not validated when added to replication agreement; Config value validation improvement (Ticket 47620)
  - Resolves: bug 918717 - server does not accept 0 length LDAP Control sequence (Ticket 571)
  - Resolves: bug 1034902 - replica init/bulk import errors should be more verbose (Ticket 47606)
  - Resolves: bug 1044219 - fix memleak caused by 47347 (Ticket 47623)
  - Resolves: bug 1049522 - Crash after replica is installed; Fix cherry-pick error for 1.3.2 and 1.3.1 (Ticket 47620)
  - Resolves: bug 1049568 - changelog iteration should ignore cleaned rids when getting the minCSN (Ticket 47627)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-12
changelog:
  - release 1.3.1.6-12
  - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribute (Ticket 47620)
  - Resolves: bug 1034898 - automember plugin task memory leaks (Ticket 47592)
  - Resolves: bug 1034451 - Possible to specify invalid SASL mechanism in nsslapd-allowed-sasl-mechanisms (Ticket 47614)
  - Resolves: bug 1032318 - entries with empty objectclass attribute value can be hidden (Ticket 47591)
  - Resolves: bug 1032316 - attrcrypt fails to find unlocked key (Ticket 47596)
  - Resolves: bug 1031227 - Reduce lock scope in retro changelog plug-in (Ticket 47599)
  - Resolves: bug 1031226 - Convert ldbm_back_seq code to be transaction aware (Ticket 47598)
  - Resolves: bug 1031225 - Convert retro changelog plug-in to betxn (Ticket 47597)
  - Resolves: bug 1031223 - hard coded limit of 64 masters in agreement and changelog code (Ticket 47587)
  - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613)
  - Resolves: bug 1035824 - Automember betxnpreoperation - transaction not aborted when group entry does not exist (Ticket 47622)


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-11
changelog:
  - Resolves: bug 1024979 - CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-10
changelog:
  - release 1.3.1.6-10
  - Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep
  -     had to revert earlier change - does not work and breaks ipa


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-9
changelog:
  - release 1.3.1.6-9
  - Resolves: bug 1028440 - Winsync replica initialization and incremental updates from DS to AD fails on RHEL
  - Resolves: bug 1027502 - Replication Failures related to skipped entries due to cleaned rids
  - Resolves: bug 1027047 - Winsync plugin segfault during incremental backoff


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-8
changelog:
  - release 1.3.1.6-8
  - Resolves: bug 971111 - DNA plugin failed to fetch replication agreement 
  - Resolves: bug 1026931 - 1.2.11.29 crash when removing entries from cache


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-7
changelog:
  - Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep
  - Resolves: bug 1018914 fixup memberof task does not work: task entry not added


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-6
changelog:
  - Resolves: bug 1013900 - logconv: some stats do not work across server restarts
  -  previous patch introduced regressions
  -  fixed by c2eced0 ticket #47550 and e2a880b Ticket #47550 and 8b10f83 Ticket #47551
  - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock
  -  previous patch not complete, fixed by a11be5c Ticket 47513
  - Resolves: bug 1016749 - DS crashes when "cn=Directory Manager" is changing it's password
  -  cherry picked upstream f786600 Ticket 47329 and b67e230 Coverity Fixes
  - Resolves: bug 1015252 locale "nl" not supported by collation plugin
  - Resolves: bug 1016317 Need to update supported locales
  - Resolves: bug 1016722 memory leak in range searches


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-5
changelog:
  - Resolves: bug 1013896 - logconv.pl - Use of comma-less variable list is deprecated
  - Resolves: bug 1008256 - backend txn plugin fixup tasks should be done in a txn
  - Resolves: bug 1013738 - CLEANALLRUV doesnt run across all replicas
  - Resolves: bug 1011220 - PassSync removes User must change password flag on the Windows side
  - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock
  - Resolves: bug 1012125 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch
  - Resolves: bug 1013063 - RUV tombstone search with scope "one" doesn`t work
  - Resolves: bug 1013893 - Indexed search are logged with 'notes=U' in the access logs
  - Resolves: bug 1013894 - improve logconv.pl performance with large access logs
  - Resolves: bug 1013898 - Fix various issues with logconv.pl
  - Resolves: bug 1013897 - logconv.pl uses /var/tmp for BDB temp files
  - Resolves: bug 1013900 - logconv: some stats do not work across server restarts
  - Resolves: bug 1014354 - Coverity fixes - 12023, 12024, and 12025


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-4
changelog:
  - bump version to 1.3.1.6-4
  - Resolves Bug 1007988 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing (Ticket 47489)
  - Resolves Bug 853931 - Allow macro aci keywords to be case-insensitive (Ticket 449)
  - Resolves Bug 1006563 - automember rebuild task not working as expected (Ticket 47507)


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-3
changelog:
  - Ticket #47455 - valgrind - value mem leaks, uninit mem usage
  - Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-2
changelog:
  - bump version to 1.3.1.6-2
  - Resolves Bug 1000633 - ns-slapd crash due to bogus DN
  - Ticket #47488 - Users from AD sub OU does not sync to IPA


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-1
changelog:
  - bump version to 1.3.1.6
  - Ticket 47455 - valgrind - value mem leaks, uninit mem usage
  - fix coverity 11915 - dead code - introduced with fix for ticket 346
  - fix coverity 11895 - null deref - caused by fix to ticket 47392
  - fix compiler warning in posix winsync code for posix_group_del_memberuid_callback
  - Fix compiler warnings for Ticket 47395 and 47397
  - fix compiler warning (cherry picked from commit 904416f4631d842a105851b4a9931ae17822a107)
  - Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch
  - fix compiler warnings
  - Fix compiler warning (cherry picked from commit ec6ebc0b0f085a82041d993ab2450a3922ef5502)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.5-1
changelog:
  - bump version to 1.3.1.5
  - Ticket 47456 - delete present values should append values to deleted values
  - Ticket 47455 - valgrind - value mem leaks, uninit mem usage
  - Ticket 47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication
  - Ticket 47440 - Fix runtime errors caused by last patch.
  - Ticket 47440 - Fix compilation warnings and header files
  - Ticket 47405 - CVE-2013-2219 ACLs inoperative in some search scenarios
  - Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D
  - Ticket 47378 - fix recent compiler warnings
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47449 - deadlock after adding and deleting entries
  - Ticket 47441 - Disk Monitoring not checking filesystem with logs
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.4-1
changelog:
  - bump version to 1.3.1.4
  - Ticket 47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negat
  - Ticket 47424 - Replication problem with add-delete requests on single-valued attributes
  - Ticket 47367 - (phase 2) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
  - Ticket 47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
  - Ticket 47421 - memory leaks in set_krb5_creds
  - Ticket 346 - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute v
  - Ticket 47369  version2 - provide default syntax plugin
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47339 - RHDS denies MODRDN access if ACI list contains any DENY rule
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47428 - Memory leak in 389-ds-base 1.2.11.15
  - Ticket 47392 - ldbm errors when adding/modifying/deleting entries
  - Ticket 47385 - Disk Monitoring is not triggered as expected.
  - Ticket 47410 - changelog db deadlocks with DNA and replication


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.3-1
changelog:
  - bump version to 1.3.1.3
  - Ticket 47374 - flush.pl is not included in perl5
  - Ticket 47391 - deleting and adding userpassword fails to update the password (additional fix)
  - Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization
  - Ticket 47395 47397 - v2 correct behaviour of account policy if only stateattr is configured or no alternate attr is configured
  - Ticket 47396 - crash on modrdn of tombstone
  - Ticket 47400 - MMR stress test with dna enabled causes a deadlock
  - Ticket 47409 - allow setting db deadlock rejection policy
  - Ticket 47419 - Unhashed userpassword can accidentally get removed from mods
  - Ticket 47420 - An upgrade script 80upgradednformat.pl fails to handle a server instance name incuding '-'


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.2-1
changelog:
  - bump version to 1.3.1.2
  - Ticket 47391 - deleting and adding userpassword fails to update the password
  - Coverity Fixes (Part 7)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.1-1
changelog:
  - bump version to 1.3.1.1
  - Ticket 402 - nhashed#user#password in entry extension
  - Ticket 511 - Revision - allow turning off vattr lookup in search entry return
  - Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate
  - Ticket 47327 - error syncing group if group member user is not synced
  - Ticket 47355 - dse.ldif doesn't replicate update to nsslapd-sasl-mapping-fallback
  - Ticket 47359 - new ldap connections can block ldaps and ldapi connections
  - Ticket 47362 - ipa upgrade selinuxusermap data not replicating
  - Ticket 47375 - flush_ber error sending back start_tls response will deadlock
  - Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3)
  - Ticket 47377 - make listen backlog size configurable
  - Ticket 47378 - fix recent compiler warnings
  - Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice
  - Ticket 47385 - DS not shutting down when disk monitoring threshold is reached
  - Coverity Fixes (part 1)
  - Coverity Fixes (Part 2)
  - Coverity Fixes (Part 3)
  - Coverity Fixes (Part 4)
  - Coverity Fixes (Part 5)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.0-1
changelog:
  - bump version to 1.3.1.0
  - Ticket 332 - Command line perl scripts should attempt most secure connection type first
  - Ticket 342 - better error message when cache overflows
  - Ticket 417 - RFE - forcing passwordmustchange attribute by non-cn=directory manager
  - Ticket 419 - logconv.pl - improve memory management
  - Ticket 422 - 389-ds-base - Can't call method "getText"
  - Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts
  - Ticket 458 - RFE - Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords
  - Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used
  - Ticket 487 - Possible to add invalid attribute values to PAM PTA plugin configuration
  - Ticket 502 - setup-ds.pl script should wait if "semanage.trans.LOCK" presen
  - Ticket 505 - use lock-free access name2asi and oid2asi tables (additional)
  - Ticket 508 - lock-free access to FrontendConfig structure
  - Ticket 511 - allow turning off vattr lookup in search entry return
  - Ticket 525 - Introducing a user visible configuration variable for controlling replication retry time
  - Ticket 528 - RFE - get rid of instance specific scripts
  - Ticket 529 - dn normalization must handle multiple space characters in attributes
  - Ticket 532 - RUV is not getting updated for both Master and consumer
  - Ticket 533 - only scan for attributes to decrypt if there are encrypted attrs configured
  - Ticket 534 - RFE: Add SASL mappings fallback
  - Ticket 537 - Improvement of range search
  - Ticket 539 - logconv.pl should handle microsecond timing
  - Ticket 543 - Sorting with attributes in ldapsearch gives incorrect result
  - Ticket 545 - Segfault during initial LDIF import: str2entry_dupcheck()
  - Ticket 547 - Incorrect assumption in ndn cache
  - Ticket 550 - posix winsync will not create memberuid values if group entry become posix group in the same sync interval
  - Ticket 551 - Multivalued rootdn-days-allowed in RootDN Access Control plugin always results in access control violation
  - Ticket 552 - Adding rootdn-open-time without rootdn-close-time to RootDN Acess Control results in inconsistent configuration
  - Ticket 558 - Replication - make timeout for protocol shutdown configurable
  - Ticket 561 - disable writing unhashed#user#password to changelog
  - Ticket 563 - DSCreate.pm: Error messages cannot be used in the if expression since they could be localized.
  - Ticket 565 - turbo mode and replication - allow disable of turbo mode
  - Ticket 571 - server does not accept 0 length LDAP Control sequence
  - Ticket 574 - problems with dbcachesize disk space calculation
  - Ticket 583 - dirsrv fails to start on reboot due to /var/run/dirsrv permissions
  - Ticket 585 - Behaviours of "db2ldif -a <filename>" and "db2ldif.pl -a <filename>" are inconsistent
  - Ticket 587 - Replication error messages in the DS error logs
  - Ticket 588 - Create MAN pages for command line scripts
  - Ticket 600 - Server should return unavailableCriticalExtension when processing a badly formed critical control
  - Ticket 603 - A logic error in str2simple
  - Ticket 604 - Required attribute not checked during search operation
  - Ticket 608 - Posix Winsync plugin throws "posix_winsync_end_update_cb: failed to add task entry" error message
  - Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND
  - Ticket 612 - improve dbgen rdn generation, output
  - Ticket 613 - ldclt: add timestamp, interval, nozeropad, other improvements
  - Ticket 616 - High contention on computed attribute lock
  - Ticket 618 - Crash at shutdown while stopping replica agreements
  - Ticket 620 - Better logging of error messages for 389-ds-base
  - Ticket 621 - modify operations without values need to be written to the changelog
  - Ticket 622 - DS logging errors "libdb: BDB0171 seek: 2147483648: (262144 * 8192) + 0: No such file or directory
  - Ticket 631 - Replication: "Incremental update started" status message without consumer initialized
  - Ticket 633 - allow nsslapd-nagle to be disabled, and also tcp cork
  - Ticket 47299 - allow cmdline scripts to work with non-root user
  - Ticket 47302 - get rid of sbindir start/stop/restart slapd scripts
  - Ticket 47303 - start/stop/restart dirsrv scripts should report and error if no instances
  - Ticket 47304 - reinitialization of a master with a disabled agreement hangs
  - Ticket 47311 - segfault in db2ldif(trigger by a cleanallruv task)
  - Ticket 47312 - replace PR_GetFileInfo with PR_GetFileInfo64
  - Ticket 47315 - filter option in fixup-memberof requires more clarification
  - Ticket 47325 - Crash at shutdown on a replica aggrement
  - Ticket 47330 - changelog db extension / upgrade is obsolete
  - Ticket 47336 - logconv.pl -m not working for all stats
  - Ticket 47341 - logconv.pl -m time calculation is wrong
  - Ticket 47343 - 389-ds-base: Does not support aarch64 in f19 and rawhide
  - Ticket 47347 - Simple paged results should support async search
  - Ticket 47348 - add etimes to per second/minute stats
  - Ticket 47349 - DS instance crashes under a high load


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0.5-1
changelog:
  - bump version to 1.3.0.5
  - Ticket 47308 - unintended information exposure when anonymous access is set to rootdse
  - Ticket 628 - crash in aci evaluation
  - Ticket 627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so
  - Ticket 634 - Deadlock in DNA plug-in Ticket #576 - DNA: use event queue for config update only at the start up
  - Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC
  - Ticket 623 - cleanAllRUV task fails to cleanup config upon completion


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.0.4-1
changelog:
  - e53d691 bump version to 1.3.0.4
  - Bug 912964 - CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data
  - Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled)
  - Ticket 490 - Slow role performance when using a lot of roles
  - Ticket 590 - ns-slapd segfaults while trying to delete a tombstone entry


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0.3-1
changelog:
  - bump version to 1.3.0.3
  - Ticket #584 - Existence of an entry is not checked when its password is to be deleted
  - Ticket 562 - Crash when deleting suffix


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.3.rc3
changelog:
  - bump version to 1.3.0.rc3
  - Ticket 549 - DNA plugin no longer reports additional info when range is depleted
  - Ticket 541 - need to set plugin as off in ldif template
  - Ticket 541 - RootDN Access Control plugin is missing after upgrade


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.2.rc2
changelog:
  - bump version to 1.3.0.rc2
  - Trac Ticket #497 - Escaped character cannot be used in the substring search filter
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Trac Ticket #522 - betxn: upgrade is not implemented yet


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.1.rc1
changelog:
  - bump version to 1.3.0.rc1
  - Ticket #322 - Create DOAP description for the 389 Directory Server project
  - Trac Ticket #499 - Handling URP results is not corrrect
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Ticket 456 - improve entry cache sizing
  - Trac Ticket #531 - loading an entry from the database should use str2entry_f
  - Trac Ticket #536 - Clean up compiler warnings for 1.3
  - Trac Ticket #531 - loading an entry from the database should use str2entry_fast
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Ticket 527 - ns-slapd segfaults if it cannot rename the logs
  - Ticket 395 - RFE: 389-ds shouldn't advertise in the rootDSE that we can handle a sasl mech if we really can't
  - Ticket 216 - disable replication agreements
  - Ticket 518 - dse.ldif is 0 length after server kill or machine kill
  - Ticket 393 - Change in winSyncInterval does not take immediate effect
  - Ticket 20 - Allow automember to work on entries that have already been added
  - Coverity Fixes
  - Ticket 349 - nsViewFilter syntax issue in 389DS 1.2.5
  - Ticket 337 - improve CLEANRUV functionality
  - Fix for ticket 504
  - Ticket 394 - modify-delete userpassword
  - minor fixes for bdb 4.2/4.3 and mozldap
  - Trac Ticket #276 - Multiple threads simultaneously working on connection's private buffer causes ns-slapd to abort
  - Fix for ticket 465: cn=monitor showing stats for other db instances
  - Ticket 507 - use mutex for FrontendConfig lock instead of rwlock
  - Fix for ticket 510 Avoid creating an attribute just to determine the syntax for a type, look up the syntax directly by type
  - Coverity defect: Resource leak 13110
  - Ticket 517 - crash in DNA if no dnaMagicRegen is specified
  - Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry
  - Trac Ticket #519 - Search with a complex filter including range search is slow
  - Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error
  - Trac Ticket #311 - IP lookup failing with multiple DNS entries
  - Trac Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs
  - Trac Ticket #443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error
  - Ticket #503 - Improve AD version in winsync log message
  - Trac Ticket #190 - Un-resolvable server in replication agreement produces unclear error message
  - Coverity fixes
  - Trac Ticket #391 - Slapd crashes when deleting backends while operations are still in progress
  - Trac Ticket #448 - Possible to set invalid macros in Macro ACIs
  - Trac Ticket #498 - Cannot abaondon simple paged result search
  - Coverity defects
  - Trac Ticket #494 - slapd entered to infinite loop during new index addition
  - Fixing compiler warnings in the posix-winsync plugin
  - Coverity defects
  - Ticket 147 - Internal Password Policy usage very inefficient
  - Ticket 495 - internalModifiersname not updated by DNA plugin
  - Revert "Ticket 495 - internalModifiersname not updated by DNA plugin"
  - Ticket 495 - internalModifiersname not updated by DNA plugin
  - Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h])
  - Ticket 486 - nsslapd-enablePlugin should not be multivalued
  - Ticket 488 - Doc: DS error log messages with typo
  - Trac Ticket #451 - Allow db2ldif to be quiet
  - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes
  - Ticket #481 - expand nested posix groups
  - Trac Ticket #455 - Insufficient rights to unhashed#user#password when user deletes his password
  - Ticket #446 - anonymous limits are being applied to directory manager


author: Mark Reynolds <mareynol@redhat.com> - 1.3.0.a1-1
changelog:
  Ticket #28 	MOD operations with chained delete/add get back error 53 on backend config
  Ticket #173 	ds-logpipe.py script's man page and script help should be updated for -t option.
  Ticket #196 	RFE: Interpret IPV6 addresses for ACIs, replication, and chaining 
  Ticket #218 	RFE - Make RIP working with Replicated Entries 
  Ticket #328 	make sure all internal search filters are properly escaped 
  Ticket #329 	389-admin build fails on F-18 with new apache 	
  Ticket #344 	deadlock in replica_write_ruv
  Ticket #351 	use betxn plugins by default
  Ticket #352 	make cos, roles, views betxn aware 
  Ticket #356 	logconv.pl - RFE - track bind info
  Ticket #365 	Audit log - clear text password in user changes 
  Ticket #370 	Opening merge qualifier CoS entry using RHDS console changes the entry. 
  Ticket #372 	Setting nsslapd-listenhost or nsslapd-securelistenhost breaks ACI processing 	
  Ticket #386 	Overconsumption of memory with large cachememsize and heavy use of ldapmodify 	
  Ticket #402 	unhashedTicket #userTicket #password in entry extension 	
  Ticket #408 	Create a normalized dn cache 	
  Ticket #453 	db2index with -tattrname:type,type fails 	
  Ticket #461 	fix build problem with mozldap c sdk 	
  Ticket #462 	add test for include file mntent.h 	
  Ticket #463 	different parameters of getmntent in Solaris


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-1
changelog:
  - Trac Ticket #470 - 389 prevents from adding a posixaccount with userpassword after schema reload
  - Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang
  - Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start
  - Ticket 473 - change VERSION.sh to have console version be major.minor
  - Ticket 475 - Root DN Access Control - improve value checking for config
  - Trac Ticket #466 - entry_apply_mod - ADD: Failed to set unhashed#user#password to extension
  - Ticket 474 - Root DN Access Control - days allowed not working correctly
  - Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas
  - 0b79915 fix compiler warnings in ticket 374 code
  - Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.14-1
changelog:
  - Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement
  - Ticket 386 - large memory growth with ldapmodify(heap fragmentation)
  -  this patch doesn't fix the bug - it allows us to experiment with
  -  different values of mxfast
  - Ticket #374 - consumer can go into total update mode for no reason


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.13-1
changelog:
  - Ticket #426 - support posix schema for user and group sync
  -   1) plugin config ldif must contain pluginid, etc. during upgrade or it
  -      will fail due to schema errors
  -   2) posix winsync should have a lower precedence (25) than the default (50)
  -      so that it will be run first
  -   3) posix winsync should support the Winsync API v3 - the v2 functions are
  -      just stubs for now - but the precedence cb is active


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.12-1
changelog:
  - 8e5087a Coverity defects - 13089: Dereference after null check ldbm_back_delete
  - Trac Ticket #437 - variable dn should not be used in ldbm_back_delete
  - ba1f5b2 fix coverity resource leak in windows_plugin_add
  - e3e81db Simplify program flow: change while loops to for
  - a0d5dc0 Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0)
  - 0808f7e Simplify program flow: make adduids/moduids/deluids action blocks all similar
  - 77eb760 Simplify program flow: eliminate unnecessary continue
  - c9e9db7 Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new
  - a4ca0cc Change "return"s in modGroupMembership to "break"s to avoid leaking
  - d49035c Factorize into new isPosixGroup function
  - 3b61c03 coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free
  - 33ce2a9 fix mem leaks with parent dn log message, setting winsync windows domain
  - Ticket #440 - periodic dirsync timed event causes server to loop repeatedly
  - Ticket #355 - winsync should not delete entry that appears to be out of scope
  - Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values.
  - 487932d coverity - mbo dead code - winsync leaks, deadcode, null check, test code
  - 2734a71 CLEANALLRUV coverity fixes
  - Ticket #426 - support posix schema for user and group sync
  - Ticket #430 - server to server ssl client auth broken with latest openldap


author: Mark Reynolds <mareynol@redhat.com> - 1.2.11.11-1
changelog:
  6c0778f bumped version to 1.2.11.11
  Ticket 429 - added nsslapd-readonly to DS schema
  Ticket 403 - fix CLEANALLRUV regression from last commit
  Trac Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values


author: Mark Reynolds <mareynol@redhat.com> - 1.2.11.8-1
changelog:
  ddcf669 bump version to 1.2.11.8 for offical release
  Ticket #425 - support multiple winsync plugins
  Ticket 403 - cleanallruv coverity fixes
  Ticket 407 - memory leak in dna plugin
  Ticket 403 - CLEANALLRUV feature
  Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs
  3168f04 Coverity defects
  5ff0a02 COVERITY FIXES
  Ticket #388 - Improve replication agreement status messages
  0760116 Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns
  Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion
  Ticket #409 - Report during startup if nsslapd-cachememsize is too small
  Ticket #412 - memberof performance enhancement
  12813: Uninitialized pointer read string_values2keys
  Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  Ticket #410 - Referential integrity plug-in does not work when update interval is not zero
  Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled
  Ticket #405 - referint modrdn not working if case is different
  Ticket 399 - slapi_ldap_bind() doesn't check bind results


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.7-2
changelog:
  - Ticket 378 - unhashed#user#password visible after changing password
  -  fix func declaration from previous patch
  - Ticket 366 - Change DS to purge ticket from krb cache in case of authentication error


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.6-1
changelog:
  - Ticket #378 - audit log does not log unhashed password: enabled, by default.
  - Ticket #378 - unhashed#user#password visible after changing password
  - Ticket #365 - passwords in clear text in the audit log


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.5-1
changelog:
  - Ticket #387 - managed entry sometimes doesn't delete the managed entry
  - 5903815 improve txn test index handling
  - Ticket #360 - ldapmodify returns Operations error - fix delete caching
  - bcfa9e3 Coverity Fix for CLEANALLRUV
  - Trac Ticket #335 - transaction retries need to be cache aware
  - Ticket #389 - ADD operations not in audit log
  - 44cdc84 fix coverity issues with uninit vals, no return checking
  - Ticket 368 - Make the cleanAllRUV task one step
  - Ticket #110 - RFE limiting root DN by host, IP, time of day, day of week


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.4-1
changelog:
  - Ticket #360 - ldapmodify returns Operations error
  - Ticket #321 - krbExtraData is being null modified and replicated on each ssh login
  - Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress
  - Ticket #361: Bad DNs in ACIs can segfault ns-slapd
  - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object
  - Ticket #337 - Improve CLEANRUV task


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.2-1
changelog:
  - Ticket #351 - use betxn plugins by default
  -   revert - make no plugins betxn by default - too great a risk
  -   for deadlocks until we can test this better
  - Ticket #348 - crash in ldap_initialize with multiple threads
  -   fixes PR_Init problem in ldclt


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.1-1
changelog:
  - f227f11 Suppress alert on unavailable port with forced setup
  - Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return
  - Ticket #351 - use betxn plugins by default
  - Trac Ticket #345 - db deadlock return should not log error
  - Ticket #348 - crash in ldap_initialize with multiple threads
  - Ticket #214 - Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied
  - Ticket #207 - [RFE] enable attribute that tracks when a password was last set
  - Ticket #216 - RFE - Disable replication agreements
  - Ticket #337 - RFE - Improve CLEANRUV functionality
  - Ticket #326 - MemberOf plugin should work on all backends
  - Trac Ticket #19 - Convert entryUSN plugin to transaction aware type
  - Ticket #347 - IPA dirsvr seg-fault during system longevity test
  - Trac Ticket #310 - Avoid calling escape_string() for logged DNs
  - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object
  - Ticket #183 - passwordMaxFailure should lockout password one sooner
  - Trac Ticket #335 - transaction retries need to be cache aware
  - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - Ticket #325 - logconv.pl : use of getopts to parse command line options
  - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - 554e29d Coverity Fixes
  - Trac Ticket #46 - (additional 2) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #183 - passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions
  - Ticket #315 - small fix to libglobs
  - Ticket #315 - ns-slapd exits/crashes if /var fills up
  - Ticket #20 - Allow automember to work on entries that have already been added
  - Trac Ticket #45 - Fine Grained Password policy: if passwordHistory is on, deleting the password fails.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11-0.1.a1
changelog:
  - 453eb97 schema def must have DESC '' - close paren must be preceded by space
  - Trac Ticket #46 - (additional) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #331 - transaction errors with db 4.3 and db 4.2
  - Ticket #261 - Add Solaris i386
  - Ticket #316 and Ticket #70 - add post add/mod and AD add callback hooks
  - Ticket #324 - Sync with group attribute containing () fails
  - Ticket #319 - ldap-agent crashes on start with signal SIGSEGV
  - 77cacd9 coverity 12606 Logically dead code
  - Trac Ticket #303 - make DNA range requests work with transactions
  - Ticket #320 - allow most plugins to be betxn plugins
  - Ticket #24 - Add nsTLS1 to the DS schema
  - Ticket #271 - Slow shutdown when you have 100+ replication agreements
  - TIcket #285 - compilation fixes for '--format-security'
  - Ticket 211 - Avoid preop range requests non-DNA operations
  - Ticket #271 - replication code cleanup
  - Ticket 317 - RHDS fractional replication with excluded password policy attributes leads to wrong error messages.
  - Ticket #308 - Automembership plugin fails if data and config area mixed in the plugin configuration
  - Ticket #292 - logconv.pl reporting unindexed search with different search base than shown in access logs
  - 6f8680a coverity 12563 Read from pointer after free (fix 2)
  - e6a9b22 coverity 12563 Read from pointer after free
  - 245d494 Config changes fail because of unknown attribute "internalModifiersname"
  - Ticket #191  - Implement SO_KEEPALIVE in network calls
  - Ticket #289 - allow betxn plugin config changes
  - 93adf5f destroy the entry cache and dn cache in the dse post op delete callback
  - e2532d8 init txn thread private data for all database modes
  - Ticket #291 - cannot use & in a sasl map search filter
  - 6bf6e79 Schema Reload crash fix
  - 60b2d12 Fixing compiler warnings
  - Trac Ticket #260 - 389 DS does not support multiple paging controls on a single connection
  - Ticket #302 - use thread local storage for internalModifiersName & internalCreatorsName
  - fdcc256 Minor bug fix introcuded by commit 69c9f3bf7dd9fe2cadd5eae0ab72ce218b78820e
  - Ticket #306 - void function cannot return value
  - ticket 181 - Allow PAM passthru plug-in to have multiple config entries
  - ticket 211 - Use of uninitialized variables in ldbm_back_modify()
  - Ticket #74 - Add schema for DNA plugin (RFE)
  - Ticket #301 - implement transaction support using thread local storage
  - Ticket #211 - dnaNextValue gets incremented even if the user addition fails
  - 144af59 coverity uninit var and resource leak
  - Trac Ticket #34 - remove-ds.pl does not remove everything
  - Trac Ticket #169 - allow 389 to use db5
  - bc78101 fix compiler warning in acct policy plugin
  - Trac Ticket #84 - 389 Directory Server Unnecessary Checkpoints
  - Trac Ticket #27 - SASL/PLAIN binds do not work
  - Ticket #129 - Should only update modifyTimestamp/modifiersName on MODIFYops
  - Ticket #17 - new replication optimizations


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.4-4
changelog:
  - Ticket #46 - (revised) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #66 - 389-ds-base spec file does not have a BuildRequires on gcc-c++


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.3-1
changelog:
  - b05139b memleak in normalize_mods2bvals
  - c0eea24 memleak in mep_parse_config_entry
  - 90bc9eb handle null smods
  - Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash
  - Ticket #306 - void function cannot return value
  - ticket 304 - Fix kernel version checking in dsktune


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-1
changelog:
  - Trac Ticket #298 - crash when replicating orphaned tombstone entry
  - Ticket #281 - TLS not working with latest openldap
  - Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails
  - Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.0-1
changelog:
  - Ticket 284 - Remove unnecessary SNMP MIB files
  - Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5?
  - Ticket 175 - logconv.pl improvements


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.10.rc1
changelog:
  - ad9dd30 coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers to system resources
  - Ticket #281 - TLS not working with latest openldap
  - Ticket #280 - extensible binary filters do not work
  - Ticket #279 - filter normalization does not use matching rules
  - Trac Ticket #275 - Invalid read reported by valgrind
  - Ticket #277 - cannot set repl referrals or state
  - Ticket #278 - Schema replication update failed: Invalid syntax
  - Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through Auth plugin is enabled
  - Ticket #13 - slapd process exits when put the database on read only mode while updates are coming to the server
  - Ticket #87 - Manpages fixes
  - c493fb4 fix a couple of minor coverity issues
  - Ticket #55 - Limit of 1024 characters for nsMatchingRule
  - Trac Ticket #274 - Reindexing entryrdn fails if ancestors are also tombstoned
  - Ticket #6 - protocol error from proxied auth operation
  - Ticket #38 - nisDomain schema is incorrect
  - Ticket #273 - ruv tombstone searches don't work after reindex entryrdn
  - Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword
  - Ticket #22 - RFE: Support sendmail LDAP routing schema
  - Ticket #161 - Review and address latest Coverity issues
  - Ticket #140 - incorrect memset parameters
  - Trac Ticket 35 - Log not clear enough on schema errors
  - Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn
  - Trac Ticket #52 - FQDN set to nsslapd-listenhost makes the server start fail if IPv4-mapped-IPv6 address is given


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.8.a7
changelog:
  - fixes for systemd - remove .pid files after shutting down servers
  - Ticket #263 - add systemd include directive
  - Ticket #264 - upgrade needs better check for "server is running"


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.7.a7
changelog:
  - Ticket #262 - pid file not removed with systemd
  - Ticket #50 - server should not call a plugin after the plugin close function is called
  - Ticket #18 - Data inconsitency during replication
  - Ticket #49 - better handling for server shutdown while long running tasks are active
  - Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead
  - Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same
  - Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI
  - 6aaeb77 add a hack to disable sasl hostname canonicalization
  - Ticket 168 - minssf should not apply to rootdse
  - Ticket #177 - logconv.pl doesn't detect restarts
  - Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating
  - Ticket 75 - Unconfigure plugin opperations are being called.
  - Ticket 26 - Please support setting defaultNamingContext in the rootdse.
  - Ticket #71 - unable to delete managed entry config
  - Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock
  - Ticket #256 - debug build assertion in ACL_EvalDestroy()
  - Ticket #4 - bak2db gets stuck in infinite loop
  - Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS
  - Ticket #3: acl cache overflown problem
  - Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations
  - Ticket 2 - If node entries are tombstone'd, subordinate entries fail to get the full DN.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.6.a6
changelog:
  - Bug 755725 - 389 programs linked against openldap crash during shutdown
  - Bug 755754 - Unable to start dirsrv service using systemd
  - Bug 745259 - Incorrect entryUSN index under high load in replicated environment
  - d439e3a use slapi_hexchar2int and slapi_str_to_u8 everywhere
  - 5910551 csn_init_as_string should not use sscanf
  - b53ba00 reduce calls to csn_as_string and slapi_log_error
  - c897267 fix member variable name error in slapi_uniqueIDFormat
  - 66808e5 uniqueid formatting - use slapi_u8_to_hex instead of sprintf
  - 580a875 csn_as_string - use slapi_uN_to_hex instead of sprintf
  - Bug 751645 - crash when simple paged fails to send entry to client
  - Bug 752155 - Use restorecon after creating init script lock file


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.5.a5
changelog:
  - Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD'
  - Bug 750625 750624 750622 744946 Coverity issues
  - Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication
  - Bug 748575 - rhds81 modrn operation and 100% cpu use in replication
  - Bug 745259 - Incorrect entryUSN index under high load in replicated environment
  - f639711 Reduce the number of DN normalization
  - c06a8fa Keep unhashed password psuedo-attribute in the adding entry
  - Bug 744945 - nsslapd-counters attribute value cannot be set to "off"
  - 8d3b921 Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular
  - d316a67 Change referential integrity to be a betxnpostoperation plugin


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.4.a4
changelog:
  - Bug 741744 - part3 - MOD operations with chained delete/add get back error 53
  - 1d2f5a0 make memberof transaction aware and able to be a betxnpostoperation plug in
  - b6d3ba7 pass the plugin config entry to the plugin init function
  - 28f7bfb set the ENTRY_POST_OP for modrdn betxnpostoperation plugins
  - Bug 743966 - Compiler warnings in account usability plugin


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.a2-0.2
changelog:
  - Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations
  - Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config
  - Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.9-1
changelog:
  - Bug 735121 - simple paged search + ip/dns based ACI hangs server
  - Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code
  - Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server
  - Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.8-1
changelog:
  - Bug 732153 - subtree and user account lockout policies implemented?
  - Bug 722292 - Entries in DS are not updated properly when using WinSync API


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.7-1
changelog:
  - Bug 733103 - large targetattr list with syntax errors cause server to crash or hang
  - Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining
  - Bug 732541 - Ignore error 32 when adding automember config
  - Bug 728592 - Allow ns-slapd to start with an invalid server cert


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.6-1
changelog:
  - Bug 728510 - Run dirsync after sending updates to AD
  - Bug 729717 - Fatal error messages when syncing deletes from AD
  - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working.
  - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed again - separate tests for atomic ops and atomic bool cas


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.5-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix another coverity NULL deref in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.4-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix coverity NULL deref in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.3-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  previous patch broke build on el5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.1-2
changelog:
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed to use configure test for GCC provided 64-bit atomic functions


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.1-1
changelog:
  - Bug 663752 - Cert renewal for attrcrypt and encchangelog
  -   this was "re-fixed" due to a deadlock condition with cl2ldif task cancel
  - Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma
  - Bug 725743 - Make memberOf use PRMonitor for it's operation lock
  - Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.0-1
changelog:
  - Bug 720059 - RDN with % can cause crashes or missing entries
  - Bug 709468 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2.
  - Bug 691313 - Need TLS/SSL error messages in repl status and errors log
  - Bug 712855 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not
  - Bug 713209 - Update sudo schema
  - Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9
  - Bug 718303 - Intensive updates on masters could break the consumer's cache
  - Bug 711679 - unresponsive LDAP service when deleting vlv on replica


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9-0.2.a2
changelog:
  - 389-ds-base-1.2.9.a2
  - look for separate openldap ldif library
  - Split automember regex rules into separate entries
  - writing Inf file shows SchemaFile = ARRAY(0xhexnum)
  - add support for ldif files with changetype: add
  - Bug 716980 - winsync uses old AD entry if new one not found
  - Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9
  - bump console version to 1.2.6
  - Bug 711679 - unresponsive LDAP service when deleting vlv on replica
  - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file
  - Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package
  - Bug 663752 - Cert renewal for attrcrypt and encchangelog
  - Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute
  - Bug 711906 - ns-slapd segfaults using suffix referrals
  - Bug 707384 - only allow FIPS approved cipher suites in FIPS mode
  - Bug 710377 - Import with chain-on-update crashes ns-slapd
  - Bug 709826 - Memory leak: when extra referrals configured


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.3-1
changelog:
  - 389-ds-base-1.2.8.3
  - Bug 700145 - userpasswd not replicating
  - Bug 700557 - Linked attrs callbacks access free'd pointers after close
  - Bug 694336 - Group sync hangs Windows initial Sync
  - Bug 700215 - ldclt core dumps
  - Bug 695779 - windows sync can lose old values when a new value is added
  - Bug 697027 - 12 - minor memory leaks found by Valgrind + TET


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1
changelog:
  - 389-ds-base-1.2.8.2
  - Bug 696407 - If an entry with a mixed case RDN is turned to be
  -    a tombstone, it fails to assemble DN from entryrdn


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.0-1
changelog:
  - 389-ds-base-1.2.8.0
  - Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1
  - Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1
  - Bug 693466 - Unable to change schema online
  - Bug 693503 - matching rules do not inherit from superior attribute type
  - Bug 693455 - nsMatchingRule does not work with multiple values
  - Bug 693451 - cannot use localized matching rules
  - Bug 692331 - Segfault on index update during full replication push on 1.2.7.5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.10.rc5
changelog:
  - 389-ds-base-1.2.8.rc5
  - Bug 692469 - Replica install fails after step for "enable GSSAPI for replication"


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.9.rc4
changelog:
  - 389-ds-base-1.2.8.rc4
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv
  ice is restarted
  - 389-ds-base-1.2.8.rc3
  - Bug 690955 - Mrclone fails due to the replica generation id mismatch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.8.rc2
changelog:
  - 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2
  - Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences
  - Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format
  - Bug 681015 - RFE: allow fine grained password policy duration attributes
  -              in days, hours, minutes, as well
  - Bug 684996 - Exported tombstone cannot be imported correctly
  - Bug 683250 - slapd crashing when traffic replayed
  - Bug 668909 - Can't modify replication agreement in some cases
  - Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1
  - Bug 644784 - Memory leak in "testbind.c" plugin
  - Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.6.rc1
changelog:
  - 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1
  - Bug 518890 - setup-ds-admin.pl - improve hostname validation
  - Bug 681015 - RFE: allow fine grained password policy duration attributes in 
  -     days, hours, minutes, as well
  - Bug 514190 - setup-ds-admin.pl --debug does not log to file
  - Bug 680555 - ns-slapd segfaults if I have more than 100 DBs
  - Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically
  - Bug 674852 - crash in ldap-agent when using OpenLDAP
  - Bug 679978 - modifying attr value crashes the server, which is supposed to
  -     be indexed as substring type, but has octetstring syntax
  - Bug 676655 - winsync stops working after server restart
  - Bug 677705 - ds-logpipe.py script is failing to validate "-s" and
  -     "--serverpid" options with "-t".
  - Bug 625424 - repl-monitor.pl doesn't work in hub node


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.4.a3
changelog:
  - do not create /var/run/dirsrv - setup will create it instead
  - remove the fedora-ds initscript upgrade stuff - we do not support that anymore
  - convert the remaining lua stuff to plain old shell script


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.3.a3
changelog:
  - 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3
  - Bug 675320 - empty modify operation with repl on or lastmod off will crash server
  - Bug 675265 - preventryusn gets added to entries on a failed delete
  - Bug 677774 - added support for tmpfiles.d
  - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search
  es
  - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH
  - Bug 671199 - Don't allow other to write to rundir
  - Bug 678646 - Ignore tombstone operations in managed entry plug-in
  - Bug 676053 - export task followed by import task causes cache assertion
  - Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8
  - Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used
  - Bug 676689 - crash while adding a new user to be synced to windows
  - Bug 604881 - admin server log files have incorrect permissions/ownerships
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv
  ice is restarted
  - Bug 675853 - dirsrv crash segfault in need_new_pw()


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.2.a2
changelog:
  - 1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2
  - Bug 674430 - Improve error messages for attribute uniqueness
  - Bug 616213 - insufficient stack size for HP-UX on PA-RISC
  - Bug 615052 - intrinsics and 64-bit atomics code fails to compile
  -    on PA-RISC
  - Bug 151705 - Need to update Console Cipher Preferences with new ciphers
  - Bug 668862 - init scripts return wrong error code
  - Bug 670616 - Allow SSF to be set for local (ldapi) connections
  - Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the 
  -    log output to the text file
  - Bug 668619 - slapd stops responding
  - Bug 624547 - attrcrypt should query the given slot/token for
  -    supported ciphers
  - Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any 
  -    error message in logs


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.3-1
changelog:
  - 1.2.7.3 release - git tag 389-ds-base-1.2.7.3
  - Bug 658312 - Invalid free in Managed Entry plug-in
  - Bug 641944 - Don't normalize non-DN RDN values


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.2-1
changelog:
  - 1.2.7.2 release - git tag 389-ds-base-1.2.7.2
  - Bug 659456 - Incorrect usage of ber_printf() in winsync code
  - Bug 658309 - Process escaped characters in managed entry mappings
  - Bug 197886 - Initialize return value for UUID generation code
  - Bug 658312 - Allow mapped attribute types to be quoted
  - Bug 197886 - Avoid overflow of UUID generator


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.1-1
changelog:
  - 1.2.7.1 release - git tag 389-ds-base-1.2.7.1
  - Bug 656515 - Allow Name and Optional UID syntax for grouping attributes
  - Bug 656392 - Remove calls to ber_err_print()
  - Bug 625950 - hash nsslapd-rootpw changes in audit log


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.6.a5
changelog:
  - 1.2.7.a5 release - git tag 389-ds-base-1.2.7.a5
  - Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-ref
  erral)
  - Bug 635009 - Add one-way AD sync capability
  - Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot
  - put replication config entries in separate file
  - Bug 567282 - server can not abandon searchRequest of "simple paged results"
  - Bug 329751 - "nested" filtered roles searches candidates more than needed
  - Bug 521088 - DNA should check ACLs before getting a value from the range


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.5.a4
changelog:
  - 1.2.7.a4 release - git tag 389-ds-base-1.2.7.a4
  - Bug 647932 - multiple memberOf configuration adding memberOf where there is 
  no member
  - Bug 491733 - dbtest crashes
  - Bug 606545 - core schema should include numSubordinates
  - Bug 638773 - permissions too loose on pid and lock files
  - Bug 189985 - Improve attribute uniqueness error message
  - Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operat
  ions
  - Bug 619633 - Make attribute uniqueness obey requiredObjectClass


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.4.a3
changelog:
  - 1.2.7.a3 release - a2 was never released - this is a rebuild to pick up
  - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
  - Adding the ancestorid fix code to ##upgradednformat.pl.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.3.a3
changelog:
  - 1.2.7.a3 release - a2 was never released
  - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
  - Bug 629681 - Retro Changelog trimming does not behave as expected
  - Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif
  -              are not upgraded in the server instance schema dir


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.2.a2
changelog:
  - 1.2.7.a2 release - a1 was the OpenLDAP testday release
  - git tag 389-ds-base-1.2.7.a2
  - added openldap support on platforms that use openldap with moznss
  - for crypto (F-14 and later)
  - many bug fixes
  - Account Policy Plugin (keep track of last login, disable old accounts)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6.1-1
changelog:
  - This is the 1.2.6.1 release - git tag 389-ds-base-1.2.6.1
  - Bug 634561 - Server crushes when using Windows Sync Agreement
  - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self
  - Bug 612264 - ACI issue with (targetattr='userPassword')
  - Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager"
  - Bug 631862 - crash - delete entries not in cache + referint


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.11.rc7
changelog:
  - 1.2.6 release candidate 7
  - git tag 389-ds-base-1.2.6.rc7
  - Bug 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.10.rc6
changelog:
  - 1.2.6 release candidate 6
  - git tag 389-ds-base-1.2.6.rc6
  - Bug 617013 - repl-monitor.pl use cpu upto 90%
  - Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats
  - Bug 547503 - replication broken again, with 389 MMR replication and TCP errors
  - Bug 613833 - Allow dirsrv_t to bind to rpc ports
  - Bug 612242 - membership change on DS does not show on AD
  - Bug 617629 - Missing aliases in new schema files
  - Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears
  - Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments
  - Bug 617862 - Replication: Unable to delete tombstone errors
  - Bug 594745 - Get rid of dirsrv_lib_t label


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.9.rc3
changelog:
  - make selinux-devel explicit Require the base package in order
  - to comply with Fedora Licensing Guidelines


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.8.rc3
changelog:
  - 1.2.6 release candidate 3
  - git tag 389-ds-base-1.2.6.rc3
  - Bug 603942 - null deref in _ger_parse_control() for subjectdn
  - 609256  - Selinux: pwdhash fails if called via Admin Server CGI
  - 578296  - Attribute type entrydn needs to be added when subtree rename switch is on
  - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl
  - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
  - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
  - 606920 - anonymous resource limit - nstimelimit - also applied to "cn=directory manager"


author: Nathan Kinder <nkinder@redhat.com> - 1.2.6-0.4.a3
changelog:
  - 1.2.6.a3 release
  - add managed entries plug-in
  - many bug fixes
  - moved selinux subpackage into base package


author: Rich Megginson <rmeggins@redhat.com> - 1.2.4-1
changelog:
  - 1.2.4 release
  - resolves bug 221905 - added support for Salted MD5 (SMD5) passwords - primarily for migration
  - resolves bug 529258 - Make upgrade remove obsolete schema from 99user.ldif


author: Rich Megginson <rmeggins@redhat.com> - 1.2.3-1
changelog:
  - 1.2.3 release
  - added template-initconfig to %files
  - %posttrans now runs update to update the server instances
  - servers are shutdown, then restarted if running before install
  - scriptlets mostly use lua now to pass data among scriptlet phases


author: Rich Megginson <rmeggins@redhat.com> - 1.2.2-1
changelog:
  - backed out - added template-initconfig to %files - this change is for the next major release
  - bump version to 1.2.2
  - fix reopened 509472 db2index all does not reindex all the db backends correctly
  - fix 518520 -  pre hashed salted passwords do not work
  - see https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of
  - bugs fixed in 1.2.2


author: Rich Megginson <rmeggins@redhat.com> - 1.2.1-1
changelog:
  - change name to 389
  - change version to 1.2.1
  - added initial support for numeric string syntax
  - added initial support for syntax validation
  - added initial support for paged results including sorting


author: Rich Megginson <rmeggins@redhat.com> - 1.2.0-4
changelog:
  - final release 1.2.0
  - Resolves: bug 475338 - LOG: the intenal type of maxlogsize, maxdiskspace and minfreespace should be 64-bit integer
  - Resolves: bug 496836 - SNMP ldap-agent on Solaris: Unable to open semaphore for server: 389
  - CVS tag: FedoraDirSvr_1_2_0 FedoraDirSvr_1_2_0_20090428


author: Rich Megginson <rmeggins@redhat.com> - 1.2.0-1
changelog:
  - new release 1.2.0
  - Made devel package depend on mozldap-devel
  - only create run dir if it does not exist
  - CVS tag: FedoraDirSvr_1_2_0_RC1 FedoraDirSvr_1_2_0_RC1_20090330


author: Rich Megginson <rmeggins@redhat.com> - 1.1.2-1
changelog:
  - This is the 1.1.2 release.  The bugs fixed can be found here
  - https://bugzilla.redhat.com/showdependencytree.cgi?id=452721
  - Added winsync-plugin.h to the devel subpackage


author: Tom "spot" Callaway <tcallawa@redhat.com> - 1.1.0.1-3
changelog:
  - add patch to allow server to work with NSS 3.11.99 and later
  - do NSS_Init after fork but before detaching from console


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0.1-1
changelog:
  - Resolves bug 434403 - GCC 4.3 build fails
  - Rolled new source tarball which includes Nathan's fix for the struct ucred
  - NOTE: Change version back to 1.1.1 for next release
  - this release was pulled from CVS tag FedoraDirSvr110_gcc43


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-4
changelog:
  - This is the GA release of Fedora DS 1.1
  - Removed version numbers for BuildRequires and Requires
  - Added full URL to source tarball


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-2.0
changelog:
  - This is the beta2 release
  - new file added to package - /etc/sysconfig/dirsrv - for setting
  - daemon environment as is usual in other linux daemons


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-1.2
changelog:
  - fix build breakage due to open()
  - mock could not find BuildRequires: db4-devel >= 4.2.52
  - mock works if >= version is removed - it correctly finds db4.6


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.3.20070720
changelog:
  - Added Requires for perldap, cyrus sasl plugins
  - Removed template-migrate* files
  - Added perl module directory
  - Removed install.inf - setup-ds.pl can now easily generate one


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070320
changelog:
  - update to latest sources
  - added migrateTo11 to allow migrating instances from 1.0.x to 1.1
  - ldapi support
  - fixed pam passthru plugin ENTRY method


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070223
changelog:
  - Renamed package to fedora-ds-base, but keep names of paths/files/services the same
  - use the shortname macro (fedora-ds) for names of paths, files, and services instead
  - of name, so that way we can continue to use e.g. /etc/fedora-ds instead of /etc/fedora-ds-base
  - updated to latest sources


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070213
changelog:
  - More cleanup suggested by Dennis Gilmore
  - This is the fedora extras candidate based on cvs tag FedoraDirSvr110a1


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-8.el4.20070125
changelog:
  - added logconv.pl
  - added slapi-plugin.h to devel package
  - added explicit dirs for /var/log/fedora-ds et. al.


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-6.el4.20070125
changelog:
  - Move the plugin *.so files into the main package instead of the devel
  - package because they are loaded directly by name via dlopen


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-1.el4.cvs20070119
changelog:
  - Changed version to 1.1.0 and added Release 1.el4.cvs20070119
  - merged in changes from Fedora Extras candidate spec file


author: Dennis Gilmore <dennis@ausil.us> - 1.1-0.1.cvs20070108
changelog:
  - update to a cvs snapshot
  - fedorafy the spec 
  - create -devel subpackage
  - apply a patch to use mozldap not mozldap6
  - apply a patch to allow --prefix to work correctly


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-16
changelog:
  - Fixed the problem where the server would crash upon shutdown in dblayer
  - due to a race condition among the database housekeeping threads
  - Fix a problem with normalized absolute paths for db directories


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-15
changelog:
  - Touch all of the ldap/admin/src/scripts/*.in files so that they
  - will be newer than their corresponding script template files, so
  - that make will rebuild them.


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-9
changelog:
  - The template scripts needed to use @libdir@ instead of hardcoding
  - /usr/lib
  - Use make DESTDIR=$RPM_BUILD_ROOT install instead of % makeinstall
  - do the actual build in a "built" subdirectory, until we remove
  - the old script templates


author: Paul Howarth <paul@city-fan.org> - 2.8.0-3
changelog:
  - Fix broken POD (CPAN RT#86060)
  - Work around test suite failures with Net::DNS ≥ 0.68 (CPAN RT#78214)


author: Steven Pritchard <steve@kspei.com> 2.005-1
changelog:
  - Specfile autogenerated by cpanspec 1.71.
  - Add the "v" before version numbers to handle broken upstream packaging.
  - Remove redundant perl build dependency.
  - Drop bogus version number from Net::DNS::Resolver::Programmable dependency.
  - Drop redundant explicit dependencies.
  - BR Test::More and Test::Pod.
  - Include the spfd and spfquery scripts as %doc


author: Daniel P. Berrange <berrange@redhat.com> - 2.0.4-1
changelog:
  - Update to 2.0.4 release (rhbz #845777)
  - Fix License tag to reflect change in 2.0.0 series from BSD to ISC


author: <vondruch@redhat.com> - 1.7.8-2
changelog:
  - Update to Bundler 1.7.8.
    Resolves: rhbz#1194243
  - Use symlinks for vendored libraries.
    Resolves: rhbz#1163076


author: Vít Ondruch <vondruch@redhat.com> - 1.0.9-2
changelog:
  - More concise summary
  - Do not remove manpages, they are used internally
  - Added buildroot cleanup in clean section


author: Jozef Zigmund <jzigmund@redhat.com> - 1.0.3-2
changelog:
  - Add ruby(abi) dependency
  - Add using macro %{geminstdir} in files section
  - Add subpackage doc for doc files
  - Removed .gitignore file
  - Removed rubygem-thor from vendor folder
  - Add dependency rubygem(thor)


author: Pavel Raiskup <praiskup@redhat.com> - 1.26-33
changelog:
  - extract: deterministic archive type detection (rhbz#1437297)
  - avoid hang when extracting with --xattrs --skip-old-files (rhbz#1408168)
  - fix listing of large sparse members (rhbz#1347229)


author: Tomas Repik <trepik@redhat.com> - 2:1.26-32
changelog:
  - restore incremental backups correctly, files were not being removed (rhbz#1184697)
  - fix the behavior of tar when --directory option is used together with
    --remove-files
  - repair the ignorance of --xattrs-exclude/include options (rhbz#1341786)
  - Intorduce new option '--keep-directory-symlink'


author: Pavel Raiskup <praiskup@redhat.com> - 1.26-25
changelog:
  - the /etc/rmt seems to be the best place where to look for rmt binary (see the
    commit message in Fedora's cpio.git for more info)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-23
changelog:
  - use /usr/bin/ssh as the default remote shell binary (#969015)
  - do not verbose-print xattrs when --no-xattrs option is used
  - do not override the config.{guess,sub} twice, this is already done by the
    redhat-rpm-config package (#951442)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-21
changelog:
  - enable build for arm64 (#926610)
  - silence gcc warnings (lint fixes without risk from upstream) for RPMDiff


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-20
changelog:
  - allow extracting single volume from multi-volume archive (#919897)
  - usrmove: /bin/tar ~> /usr/bin/tar, selinux handling edit


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-19
changelog:
  - fix creating sparse pax archives containing files of effective
    size >8GB (#516309)
  - silence rpmlint (fix bad dates in changelog based on git log dates)


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-17
changelog:
  - add possibility to 'rpmbuild' without %check phase
  - make the autoreconf phase verbose
  - re-create older patches (avoid offset warnings during patching)
  - remove patches which we don't need now (xattrs - will be updated, sigpipe -
    test should work now, partial revert of *at() conversion was done because of
    incompatible xattr patch)
  - add upstream up2date xattr patch


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-16
changelog:
  - make the info documentation more visible in manpage (#903666)
  - sync tar.1 manpage with actual --help output (e.g. added --skip-old-files)
  - add the last_help2man_run file to git repo to allow more easily find changes
    in --help in future
  - make the DEFAULTS section to be more visible in man page
  - verbose 'make check' only when some fail happened (append to koji build.log)


author: Pavel Raiskup <praiskup@redhat.com> 2:1.26-13
changelog:
  - fix badly written macro for building --without-selinux
  - allow to build tar in difference CoverityScan by forcing the '.gets' patch to
    be applied even in the run without patches


author: Pavel Raiskup <praiskup@redhat.com> 2:1.26-12
changelog:
  - repair the xattr-gnulib-prepare patch to allow build tar without SELinux
    support
  - fedora-review compliance -> remove trailing white-spaces, remove macro from
    comment, remove BR of gawk;coreutils;gzip that should be covered automatically
    by minimum build environment, do not `rm -rf' buildroot at the beginning of
    install phase (needed only in EPEL), remove BuildRoot definition, remove
    defattr macro, s/define/global/
  - do not use ${VAR} syntax for bash variables, use just $VAR


author: Pavel Raiskup <praiskup@redhat.com> 2:1.26-10
changelog:
  - prepare Gnulib for new xattrs (#850291)
  - new version of RH xattrs patch (#850291)
  - enable verbose mode in testsuite to allow better debugging on error


author: Ondrej Vasik <ovasik@redhat.com> 2:1.26-7
changelog:
  - store&restore security.capability extended attributes category
    (#771927)
  - fix build failure with undefined gets


author: Pavel Raiskup <praiskup@redhat.com> 2:1.26-5
changelog:
  - fix for bad cooperation of the '-C' (change directory) and '-u' (update
    package) options (#688567)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.25-4
changelog:
  - mention that some compression options might not work if
    the external program is not available(#666755)


author: Kamil Dudka <kdudka@redhat.com> 2:1.23-6
changelog:
  - fix exclusion of long file names with --xattrs (#634866)
  - do not crash with --listed-incremental (#635318)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-17
changelog:
  - CVE-2010-0624 tar, cpio: Heap-based buffer overflow
    by expanding a specially-crafted archive (#572149)
  - realloc within check_exclusion_tags() caused invalid write
    (#570591)
  - not closing file descriptors for excluded files/dirs with
    exlude-tag... options could cause descriptor exhaustion
    (#570591)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-12
changelog:
  - do not fail with POSIX 2008 glibc futimens() (#552320)
  - temporarily disable fix for #531441, causing stack smashing
    with newer glibc(#551206)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-11
changelog:
  - fix segfault with corrupted metadata in code_ns_fraction
    (#531441)
  - commented patches and sources


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-10
changelog:
  - store xattrs for symlinks (#525992) - by Kamil Dudka
  - update tar(1) manpage (#539787)
  - fix memory leak in xheader (#518079)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-4
changelog:
  - Report record size only if the archive refers to a device
    (#487760)
  - Do not sigabrt with new gcc/glibc because of writing to
    struct members of gnutar header at once via strcpy


author: Ondrej Vasik <ovasik@redhat.com> 2:1.21-1
changelog:
  - New upstream release 1.21, removed applied patches
  - add support for -I option, fix testsuite failure


author: Ondrej Vasik <ovasik@redhat.com> 2:1.20-3
changelog:
  - Fixed wrong documentation for xattrs options (#466517)
  - fixed bug with null file terminator and change dirs
    (upstream)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.20-1
changelog:
  - new upstream release 1.20 (lzma support, few new options
    and bugfixes)
  - heavily modified xattrs patches(as tar-1.20 now uses automake
    1.10.1)


author: Radek Brich <rbrich@redhat.com> 2:1.19-3
changelog:
  - do not print getfilecon/setfilecon warnings when SELinux is disabled
    or SELinux data are not available (bz#431879)
  - fix for GCC 4.3


author: Radek Brich <rbrich@redhat.com> 2:1.19-2
changelog:
  - fix errors in man page
    * fix definition of --occurrence (bz#416661, patch by Jonathan Wakely)
    * update meaning of -l: it has changed from --one-filesystem
      to --check-links (bz#426717)
  - update license tag, tar 1.19 is GPLv3+


author: Radek Brich <rbrich@redhat.com> 2:1.17-5
changelog:
  - fix (non)detection of xattrs
  - move configure stuff from -xattrs patch to -xattrs-conf,
    so the original patch could be easily read
  - fix -xattrs patch to work with zero length files and show
    warnings when xattrs not available (fixes by James Antill)
  - possible corruption (#408621) - add warning to man page
    for now, may be actually fixed later, depending on upstream


author: Radek Brich <rbrich@redhat.com> 2:1.17-1
changelog:
  - new upstream version
  - patch for wildcards (#206841), restoring old behavior
  - patch for testsuite
  - update -xattrs patch
  - drop 13 obsolete patches


author: Peter Vrabec <pvrabec@redhat.com> 1.15.90-4
changelog:
  - fix problem with unpacking archives in a directory for which
    one has write permission but does not own (such as /tmp) (#149686)


author: Peter Vrabec <pvrabec@redhat.com> 1.15.1-12
changelog:
  - fix extracting sparse files to a filesystem like vfat,
    when ftruncate may fail to grow the size of a file.(#179507)


author: Peter Vrabec <pvrabec@redhat.com> 1.15.1-5
changelog:
  - extract sparse files even if the output fd is not seekable.(#154882)
  - (sparse_scan_file): Bugfix. offset had incorrect type.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.13.19-5
changelog:
  - Fix build with current autoconf (stricter checking on AC_DEFINE)
  - Fix segfault when tarring directories without having read permissions
    (#40802)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - fix hang on tar tvzf - <something.tar.gz, introduced by
    exit code fix (Bug #15448), Patch from Tim Waugh <twaugh@redhat.com>


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - 1.13.14
  - Update man page to know about -I / --bzip
  - Remove dependancy on rmt - tar can be used for anything local
    without it.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to tar-1.12.64013.
  - subtract (and reopen #2415) bzip2 support using -y.
  - move gtar to /bin.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - Fiddle bindir/libexecdir to get RH install correct.
  - Don't include /sbin/rmt -- use the rmt from dump.
  - Turn on nls.


author: Jakub Jelinek <jakub@redhat.com> 0.10-1
changelog:
  - when creating DW_AT_stmt_list, use DW_FORM_sec_offset for dwarf4
    and DW_FORM_data4 for dwarf[23] rather than vice versa (#919755)


author: Jakub Jelinek <jakub@redhat.com> 0.9-1
changelog:
  - fix up handling of DIE equality if more than one DIE in the same
    CU compare equal (#889283)
  - check DW_FORM_ref_addr properly during fi_multifile phase


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.4.5-34.0.2
changelog:
  - Userland headers should always appear before kernel - [Orabug: 27656836]
    (philip.copeland@oracle.com)


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-30
changelog:
  - don't ship /var/lock/ppp in rpm payload and create it in %post instead
  - fix installation of tmpfiles.d configuration
  - enable hardened build
  - fix bogus dates in changelog
  - compile all binaries with hardening flags
  - fix possible NULL pointer dereferencing


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-29
changelog:
  - make radius plugin config parser less strict
  - add creation of dip system group
  - resolves : #906913, #918296


author: Jiri Skala <jskala@redhat.com> - 2.4.5-18
changelog:
  - fixes #682381 - hardcodes eth0
  - fixes #708260 - SELinux is preventing access on the file LCK..ttyUSB3


author: Jiri Skala <jskala@redhat.com> - 2.4.5-12
changelog:
  - fixes #637513 - Missing: README.eap-tls
  - updated to latest eaptls upstream
  - fixes #637886 - EAP-TLS not working with enabled PPP Multilink Framing option


author: Jiri Skala <jskala@redhat.com> - 2.4.5-10
changelog:
  - fixes #613717 - Missing line in example script ip-up.local.add
  - removed /usr/kerberos/include from eaptls patch


author: Jiri Skala <jskala@redhat.com> - 2.4.4-14
changelog:
  - fixed #519042 - ppp package is missing URL in spec
  - fixed #524575 - ppp: no_strip patch modifies backup files created by previous patches


author: Martin Nagy <mnagy@redhat.com> 2.4.4-6
changelog:
  - call closelog earlier (#222295)
  - fix ChapMS2 (#217076)
  - moving header files to new -devel package (#203542)


author: Thomas Woerner <twoerner@redhat.com> 2.4.4-1
changelog:
  - new version 2.4.4 with lots of fixes
  - fixed reesolv.conf docs (#165072)
    Thanks to Matt Domsch for the initial patch
  - enabled CBCP (#199278)


author: Thomas Woerner <twoerner@redhat.com> 2.4.3-2
changelog:
  - dropped all executable bits in scripts directory to prevent rpm requiring
    programs used in there


author: Thomas Woerner <twoerner@redhat.com> 2.4.3-1
changelog:
  - new version 2.4.3
    - updated patches: make, lib64, dontwriteetc, fix, fix64, no_strip,
      radiusplugin
    - dropped patches: bpf, signal, pcap, pppoatm, pkgcheck


author: David Woodhouse <dwmw2@redhat.com> 2.4.2-6.2
changelog:
  - Link pppoatm plugin against libresolv.
  - Revert to linux-atm headers without the workaround for #127098


author: Thomas Woerner <twoerner@redhat.com> 2.4.2-5
changelog:
  - example scripts are using change_resolv_conf to modify /etc/resolv.conf
    (#132482)
  - require new libpcap library (>= 0.8.3-6) with a fix for inbound/outbound
    filter processing
  - not using internal libpcap structures anymore, fixes inbound/outbound
    filter processing (#128053)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add patch:
  	* Thu Jun 06 2002 Phil Knirsch <pknirsch@redhat.com>
  	- Fixed varargs problem for s390/s390x.


author: Nalin Dahyabhai <nalin@redhat.com> 2.4.1-2
changelog:
  - add buildprereq on pam-devel (#49559)
  - add patch to respond to CBCP LCP requests (#15738)
  - enable cbcp support at build-time
  - change the Copyright: tag to a License: tag


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - New version 2.3.9 required for kernel 2.3.13 and will be required
    for new initscripts.  auth patch removed; 2.3.9 does the same thing
    more readably than the previous patch.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated to ppp-2.3.3, build against glibc-2.0.6 - previous patches not
    required any more.
  - added buildroot
  - fixed the PAM support, which was really, completely broken and against any
    standards (session support is still not here... :-( )
  - we build against running kernel and pray that it will work
  - added a samples patch; updated glibc patch


author: Erik Troan <ewt@redhat.com>
changelog:
  - added a patch to use our own route.h, rather then glibc's (which has
    alignment problems on Alpha's) -- I only applied this patch on the Alpha,
    though it should be safe everywhere


author: Marek Kasik <mkasik@redhat.com> - 0.22.5-4
changelog:
  - Add back glib, cpp and qt frontends so that existing applications
  - loads correct libpoppler.so.*.
  - Resolves: #1184215


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.15-9
changelog:
  - The libudev library loaded in context to workaround cleanup problems
    Resolves: rhbz#1252833
  - Retry interrupted calls
    Resolves: rhbz#1108921


author: Parag <paragn@fedoraproject.org> - 4.0.3-9
changelog:
  - Merge-Review #226071
  - Removed XFree86-libs, xorg-x11-libs, XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - spec cleanups


author: Mike A. Harris <mharris@redhat.com> 4.0.1-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel >= 7.0-7" for "fixesproto >= 4.0"
  - Added "Requires: xorg-x11-proto-devel >= 7.0-7" for "fixesproto >= 4.0"
    to devel package, needed by xfixes.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 3.0.1.1-1
changelog:
  - Updated libXfixes to version 3.0.1.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 3.0.1-1
changelog:
  - Updated libXfixes to version 3.0.1 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.0.13-7
changelog:
  - Override config.{sub,guess} explicitly due to redhat-rpm-build-config
    behavior change on F-10+, otherwise build fails on ppc64


author: Assim Deodia<assim.deodia@gmail.com> 1.0.13-2
changelog:
  - Inclusion of pkgconfig
  - Removal of INSTALL file
  - Proper placement of Library files
  - Creating devel sub-package
  - Chaning source URL


author: Nikola Forró <nforro@redhat.com> - 12.5-13
changelog:
  - fix SIGSEGV crash in smtp_auth_var()
  - add warning message for empty from variable
    resolves: #1113611


author: Peter Schiffer <pschiffe@redhat.com> - 12.5-9
changelog:
  - related: #912785
    used -D_FILE_OFFSET_BITS=64 flag at the compile time
  - return error code when TMPDIR is set to an invalid path while sending email
  - added missing -v option to the usage message


author: Peter Schiffer <pschiffe@redhat.com> - 12.5-7
changelog:
  - cleaned .spec file
  - resolves: #805410
    fixed SIGSEGV crash in which_protocol() function
  - updated get-upstream-tarball.sh script and added it as additional source


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.3-1
changelog:
  - Place mailx to /bin/mailx, to avoid extra symlink in redhat-lsb package
  - /bin/mailx is now a base binary, another symlinked to it.


author: Dmitry Butskoy <Dmitry@Butskoy.name>
changelog:
  - add missed BR for krb5-devel
  - activate IPv6 support
  - change config to /etc/mail.rc for compatibility
  - add triggerpostun scriptlets against previous mailx and nail
    to check and merge (when possible) their user config changes
  - use proper config filename in manuals
  - use "less" instead of non-provided "pg" for nobsdcompat mode


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.3-0
changelog:
  - Change the name from "nail" to upstream's "mailx".
    Merge with the ordinary "mailx" cvs tree for Fedora 10.
    Now this stuff supersedes the old ancient mailx-8.x in Fedora.
  - Build with nss instead of openssl, for "Security Consolidation" process.


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.0-2
changelog:
  - complete "mailx to nail" changes in the manual and config files
  - drop _smp_mflags: it caused make to work incorrectly.


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.0-1
changelog:
  - upgrade to 12.0
  - change new upstream name "mailx" to the old name "nail" to avoid
    conflicts with the Core mailx package.
  - drop Source1, use package's html file instead.


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 11.25-3
changelog:
  - more spec file cleanups
  - accepted for Fedora Extra
    (review by Aurelien Bompard <gauret@free.fr>)


author: David Kubat <david.kubat@oracle.com> - 7.29.0-58.0.1
changelog:
  - Fix TFTP small blocksize heap buffer overflow (https://curl.haxx.se/docs/CVE-2019-5482.html)[CVE-2019-5482][Orabug: 30568724]
  - Security Fixes [OraBug: 28939992]
  - CVE-2016-8615 cookie injection for other servers (https://curl.haxx.se/docs/CVE-2016-8615.html)
  - CVE-2016-8616 case insensitive password comparison (https://curl.haxx.se/docs/CVE-2016-8616.html)
  - CVE-2016-8617 OOB write via unchecked multiplication (https://curl.haxx.se/docs/CVE-2016-8617.html)
  - CVE-2016-8618 double-free in curl_maprintf (https://curl.haxx.se/docs/CVE-2016-8618.html)
  - CVE-2016-8619 double-free in krb5 code (https://curl.haxx.se/docs/CVE-2016-8619.html)
  - CVE-2016-8621 curl_getdate read out of bounds (https://curl.haxx.se/docs/CVE-2016-8621.html)
  - CVE-2016-8622 URL unescape heap overflow via integer truncation (https://curl.haxx.se/docs/CVE-2016-8622.html)
  - CVE-2016-8623 Use-after-free via shared cookies (https://curl.haxx.se/docs/CVE-2016-8623.html)
  - CVE-2016-8624 invalid URL parsing with # (https://curl.haxx.se/docs/CVE-2016-8624.html)
  - Drop 1001-tftp-Alloc-maximum-blksize-and-use-default-unless-OA.patch


author: Kamil Dudka <kdudka@redhat.com> - 7.29.0-52
changelog:
  - prevent curl --rate-limit from hanging on file URLs (#1281969)
  - fix NTLM password overflow via integer overflow (CVE-2018-14618)
  - fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
  - backport options to force TLS 1.3 in curl and libcurl (#1672639)
  - prevent curl --rate-limit from crashing on https URLs (#1683292)


author: Kamil Dudka <kdudka@redhat.com> - 7.29.0-50
changelog:
  - remove dead code, detected by Coverity Analysis
  - remove unused variable, detected by GCC and Clang


author: Kamil Dudka <kdudka@redhat.com> - 7.29.0-48
changelog:
  - fix RTSP bad headers buffer over-read (CVE-2018-1000301)
  - fix FTP path trickery leads to NIL byte out of bounds write (CVE-2018-1000120)
  - fix LDAP NULL pointer dereference (CVE-2018-1000121)
  - fix RTSP RTP buffer over-read (CVE-2018-1000122)
  - http: prevent custom Authorization headers in redirects (CVE-2018-1000007)
  - doc: --tlsauthtype works only if built with TLS-SRP support (#1542256)
  - update certificates in the test-suite because they expire soon (#1572723)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-43
changelog:
  - curl --socks5-{basic,gssapi}: control socks5 auth (#1409208)
  - nss: fix a memory leak when CURLOPT_CRLFILE is used (#1427883)
  - nss: do not leak PKCS #11 slot while loading a key (#1444860)
  - nss: fix a possible use-after-free in SelectClientCert() (#1473158)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-37
changelog:
  - fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
  - handle cookies with numerical IPv6 address (#1341503)
  - make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
  - curl -E: allow to escape ':' in cert nickname (#1376062)
  - run automake in %prep to avoid patching Makefile.in files from now on


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-34
changelog:
  - acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
    (required by the fix for CVE-2016-5419)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-33
changelog:
  - fix re-using connections with wrong client cert (CVE-2016-5420)
  - fix TLS session resumption client cert bypass (CVE-2016-5419)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-28
changelog:
  - prevent NSS from incorrectly re-using a session (#1269855)
  - call PR_Cleanup() in the upstream test-suite if NSPR is used (#1243324)
  - disable unreliable upstream test-case 2032 (#1241168)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-26
changelog:
  - implement 'curl --unix-socket' and CURLOPT_UNIX_SOCKET_PATH (#1263318)
  - improve parsing of URL-encoded user name and password (#1260178)
  - prevent test46 from failing due to expired cookie (#1258834)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-24
changelog:
  - use the default min/max TLS version provided by NSS (#1170339)
  - improve handling of timeouts and blocking direction to speed up FTP (#1218272)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-23
changelog:
  - require credentials to match for NTLM re-use (CVE-2015-3143)
  - close Negotiate connections when done (CVE-2015-3148)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-21
changelog:
  - use only full matches for hosts used as IP address in cookies (CVE-2014-3613)
  - fix handling of CURLOPT_COPYPOSTFIELDS in curl_easy_duphandle (CVE-2014-3707)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-20
changelog:
  - eliminate unnecessary delay when resolving host from /etc/hosts (#1130239)
  - allow to enable/disable new AES cipher-suites (#1066065)
  - call PR_Cleanup() on curl tool exit if NSPR is used (#1071254)
  - implement non-blocking TLS handshake (#1091429)
  - fix limited connection re-use for unencrypted HTTP (#1101092)
  - disable libcurl-level downgrade to SSLv3 (#1154060)
  - include response headers added by proxy in CURLINFO_HEADER_SIZE (#1161182)
  - ignore CURLOPT_FORBID_REUSE during NTLM HTTP auth (#1166264)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-16
changelog:
  - allow to use TLS > 1.0 if built against recent NSS (#1036789)
  - use proxy name in error message when proxy is used (#1042831)
  - refresh expired cookie in test172 from upstream test-suite (#1063693)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-15
changelog:
  - allow to use ECC ciphers if NSS implements them (#1058776)
  - re-use of wrong HTTP NTLM connection in libcurl (CVE-2014-0015)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-6
changelog:
  - prevent an artificial timeout event due to stale speed-check data (#906031)
  - show proper host name on failed resolve (#957173)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-4
changelog:
  - do not ignore poll() failures other than EINTR (#919127)
  - curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag (#919127)


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-3
changelog:
  - switch SSL socket into non-blocking mode after handshake (#960765)
  - drop the hide_selinux.c hack no longer needed in %check


author: Kamil Dudka <kdudka@redhat.com> 7.28.1-2
changelog:
  - prevent NSS from crashing on client auth hook failure
  - clear session cache if a client cert from file is used
  - fix error messages for CURLE_SSL_{CACERT,CRL}_BADFILE


author: Kamil Dudka <kdudka@redhat.com> 7.27.0-3
changelog:
  - use the upstream facility to disable problematic tests
  - do not crash if MD5 fingerprint is not provided by libssh2


author: Kamil Dudka <kdudka@redhat.com> 7.25.0-2
changelog:
  - use NSS_InitContext() to initialize NSS if available (#738456)
  - provide human-readable names for NSS errors (upstream commit a60edcc6)


author: Paul Howarth <paul@city-fan.org> 7.25.0-1
changelog:
  - new upstream release (#806264)
  - fix character encoding of docs with a patch rather than just iconv
  - update debug and multilib patches
  - don't use macros for commands
  - reduce size of %prep output for readability


author: Kamil Dudka <kdudka@redhat.com> 7.21.7-3
changelog:
  - fix SIGSEGV of curl -O -J given more than one URL (#723075)
  - introduce the --delegation option of curl (#730444)
  - initialize NSS with no database if the selected database is broken (#728562)


author: Kamil Dudka <kdudka@redhat.com> 7.21.4-1
changelog:
  - new upstream release
  - avoid memory leak on SSL connection failure (upstream commit a40f58d)
  - work around valgrind bug (#678518)


author: Paul Howarth <paul@city-fan.org> 7.21.3-1
changelog:
  - update to 7.21.3:
    - added --noconfigure switch to testcurl.pl
    - added --xattr option
    - added CURLOPT_RESOLVE and --resolve
    - added CURLAUTH_ONLY
    - added version-check.pl to the examples dir
    - check for libcurl features for some command line options
    - Curl_setopt: disallow CURLOPT_USE_SSL without SSL support
    - http_chunks: remove debug output
    - URL-parsing: consider ? a divider
    - SSH: avoid using the libssh2_ prefix
    - SSH: use libssh2_session_handshake() to work on win64
    - ftp: prevent server from hanging on closed data connection when stopping
      a transfer before the end of the full transfer (ranges)
    - LDAP: detect non-binary attributes properly
    - ftp: treat server's response 421 as CURLE_OPERATION_TIMEDOUT
    - gnutls->handshake: improved timeout handling
    - security: pass the right parameter to init
    - krb5: use GSS_ERROR to check for error
    - TFTP: resend the correct data
    - configure: fix autoconf 2.68 warning: no AC_LANG_SOURCE call detected
    - GnuTLS: now detects socket errors on Windows
    - symbols-in-versions: updated en masse
    - added a couple of examples that were missing from the tarball
    - Curl_send/recv_plain: return errno on failure
    - Curl_wait_for_resolv (for c-ares): correct timeout
    - ossl_connect_common: detect connection re-use
    - configure: prevent link errors with --librtmp
    - openldap: use remote port in URL passed to ldap_init_fd()
    - url: provide dead_connection flag in Curl_handler::disconnect
    - lots of compiler warning fixes
    - ssh: fix a download resume point calculation
    - fix getinfo CURLINFO_LOCAL* for reused connections
    - multi: the returned running handles counter could turn negative
    - multi: only ever consider pipelining for connections doing HTTP(S)
  - drop upstream patches now in tarball
  - update bz650255 and disable-test1112 patches to apply against new codebase
  - add workaround for false-positive glibc-detected buffer overflow in tftpd
    test server with FORTIFY_SOURCE (similar to #515361)


author: Kamil Dudka <kdudka@redhat.com> 7.21.2-5
changelog:
  - do not send QUIT to a dead FTP control connection (#650255)
  - pull back glibc's implementation of str[n]casecmp(), #626470 appears fixed


author: Kamil Dudka <kdudka@redhat.com> 7.21.2-4
changelog:
  - prevent FTP client from hanging on unrecognized ABOR response (#649347)
  - return more appropriate error code in case FTP server session idle
    timeout has exceeded (#650255)


author: Paul Howarth <paul@city-fan.org> 7.21.1-3
changelog:
  - fix up patches so there's no need to run autotools in the rpm build
  - drop buildreq automake
  - drop dependency on automake for devel package from F-14, where
    %{_datadir}/aclocal is included in the filesystem package
  - drop dependency on pkgconfig for devel package from F-11, where
    pkgconfig dependencies are auto-generated


author: Kamil Dudka <kdudka@redhat.com> 7.21.1-2
changelog:
  - re-enable test575 on s390(x), already fixed (upstream commit d63bdba)
  - modify system headers to work around gcc bug (#617757)
  - curl -T now ignores file size of special files (#622520)
  - fix kerberos proxy authentication for https (#625676)
  - work around glibc/valgrind problem on x86_64 (#626470)


author: Kamil Dudka <kdudka@redhat.com> 7.21.0-1
changelog:
  - new upstream release, drop applied patches
  - update of %description
  - disable valgrind for certain test-cases (libssh2 problem)


author: Kamil Dudka <kdudka@redhat.com> 7.20.1-5
changelog:
  - CRL support now works again (#581926)
  - make it possible to start a testing OpenSSH server when building with SELinux
    in the enforcing mode (#521087)


author: Kamil Dudka <kdudka@redhat.com> 7.20.1-4
changelog:
  - upstream patch preventing failure of test536 with threaded DNS resolver
  - upstream patch preventing SSL handshake timeout underflow


author: Paul Howarth <paul@city-fan.org> 7.20.1-3
changelog:
  - replace Rawhide s390-sleep patch with a more targeted patch adding a
    delay after tests 513 and 514 rather than after all tests


author: Kamil Dudka <kdudka@redhat.com> 7.20.0-3
changelog:
  - throw CURLE_SSL_CERTPROBLEM in case peer rejects a certificate (#565972)
  - valgrind temporarily disabled (#574889)
  - kerberos installation prefix has been changed


author: Kamil Dudka <kdudka@redhat.com> 7.20.0-1
changelog:
  - new upstream release - added support for IMAP(S), POP3(S), SMTP(S) and RTSP
  - dropped patches applied upstream
  - dropped curl-7.16.0-privlibs.patch no longer useful
  - a new patch forcing -lrt when linking the curl tool and test-cases


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-11
changelog:
  - upstream patch adding a new option -J/--remote-header-name
  - dropped temporary workaround for #545779


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-3
changelog:
  - fix crash on doubly closed NSPR descriptor, patch contributed
    by Kevin Baughman (#534176)
  - new version of patch for broken TLS servers (#525496, #527771)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-1
changelog:
  - new upstream release, dropped applied patches
  - workaround for broken TLS servers (#525496, #527771)


author: Kamil Dudka <kdudka@redhat.com> 7.19.6-4
changelog:
  - use pkg-config to find nss and libssh2 if possible
  - better patch (not only) for SCP/SFTP polling
  - improve error message for not matching common name (#516056)


author: Kamil Dudka <kdudka@redhat.com> 7.19.6-3
changelog:
  - avoid tight loop during a sftp upload
  - http://permalink.gmane.org/gmane.comp.web.curl.library/24744


author: Kamil Dudka <kdudka@redhat.com> 7.19.6-1
changelog:
  - new upstream release, dropped applied patches
  - changed NSS code to not ignore the value of ssl.verifyhost and produce more
    verbose error messages (#516056)


author: Kamil Dudka <kdudka@redhat.com> 7.19.5-8
changelog:
  - do not pre-login to all PKCS11 slots, it causes problems with HW tokens
  - try to select client certificate automatically when not specified, thanks
    to Claes Jakobsson


author: Kamil Dudka <kdudka@redhat.com> 7.19.4-6
changelog:
  - upstream patch fixing memory leak in lib/nss.c (#453612)
  - remove redundant dependency of libcurl-devel on libssh2-devel


author: Jindrich Novy <jnovy@redhat.com> 7.19.4-2
changelog:
  - drop .easy-leak patch, causes problems in pycurl (#488791)
  - fix libcurl-devel dependencies (#488895)


author: Jindrich Novy <jnovy@redhat.com> 7.19.4-1
changelog:
  - update to 7.19.4 (fixes CVE-2009-0037)
  - fix leak in curl_easy* functions, thanks to Kamil Dudka
  - drop nss-fix patch, applied upstream


author: Jindrich Novy <jnovy@redhat.com> 7.18.1-2
changelog:
  - spec cleanup, thanks to Paul Howarth (#225671)
    - drop BR: libtool
    - convert CHANGES and README to UTF-8
    - _GNU_SOURCE in CFLAGS is no more needed
    - remove bogus rpath


author: Jindrich Novy <jnovy@redhat.com> 7.18.1-1
changelog:
  - update to curl 7.18.1 (fixes #397911)
  - add ABI docs for libcurl
  - remove --static-libs from curl-config
  - drop curl-config patch, obsoleted by @SSL_ENABLED@ autoconf
    substitution (#432667)


author: Jindrich Novy <jnovy@redhat.com> 7.17.1-3
changelog:
  - drop useless ldap library detection since curl doesn't
    dlopen()s it but links to it -> BR: openldap-devel
  - enable LDAPS support (#225671), thanks to Paul Howarth
  - BR: krb5-devel to reenable GSSAPI support
  - simplify build process
  - update description


author: Jindrich Novy <jnovy@redhat.com> 7.17.1-1
changelog:
  - update to curl 7.17.1
  - include patch to enable SSL usage in NSS when a socket is opened
    nonblocking, thanks to Rob Crittenden (rcritten@redhat.com)


author: Jindrich Novy <jnovy@redhat.com> 7.16.4-5
changelog:
  - add support for the NSS PKCS#11 pem reader so the command-line is the
    same for both OpenSSL and NSS by Rob Crittenden (rcritten@redhat.com)
  - switch to NSS again


author: Jindrich Novy <jnovy@redhat.com> 7.16.3-1
changelog:
  - update to 7.16.3
  - drop .print patch, applied upstream
  - next series of merge review fixes by Paul Howarth
  - remove aclocal stuff, no more needed
  - simplify makefile arguments
  - don't reference standard library paths in libcurl.pc
  - include docs/CONTRIBUTE


author: Jindrich Novy <jnovy@redhat.com> 7.16.2-4
changelog:
  - another series of review fixes (#225671),
    thanks to Paul Howarth
  - check version of ldap library automatically
  - don't use %makeinstall and preserve timestamps
  - drop useless patches


author: Jindrich Novy <jnovy@redhat.com> - 7.16.0-2
changelog:
  - fix BuildRoot
  - add Requires: pkgconfig for curl-devel
  - move LDFLAGS and LIBS to Libs.private in libcurl.pc.in (#213278)


author: Ivana Varekova <varekova@redhat.com> - 7.15.1-2
changelog:
  - fix multilib problem - #181290 - 
    curl-devel.i386 not installable together with curl-devel.x86-64


author: Joe Orton <jorton@redhat.com> 7.12.3-3
changelog:
  - don't pass /usr to --with-libidn to remove "-L/usr/lib" from
    'curl-config --libs' output on x86_64.


author: Adrian Havill <havill@redhat.com> 7.12.3-1
changelog:
  - Upgrade to 7.12.3, which uses poll() for FDSETSIZE limit (#134794)
  - require libidn-devel for devel subpkg (#141341)
  - remove proftpd kludge; included upstream


author: Adrian Havill <havill@redhat.com> 7.12.1-1
changelog:
  - upgrade to 7.12.1
  - enable GSSAPI auth (#129353)
  - enable I18N domain names (#134595)
  - workaround for broken ProFTPD SSL auth (#134133). Thanks to
    Aleksandar Milivojevic


author: Adrian Havill <havill@redhat.com> 7.10.6-7
changelog:
  - aclocal before libtoolize
  - move OpenLDAP license so it's present as a doc file, present in
    both the source and binary as per conditions


author: Joe Orton <jorton@redhat.com> 7.9.8-2
changelog:
  - fix `curl-config --libs` output for libdir!=/usr/lib
  - remove docs/LIBCURL from docs list; remove unpackaged libcurl.la
  - libtoolize and reconf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - include curl-config in curl-devel
  - update to 7.8 to fix memory leak and strlcat() symbol pollution from libcurl


author: Tim Powers <timp@redhat.com>
changelog:
  - update to 7.4.1 to fix bug #20337, problems with curl -c
  - not using patch anymore, it's included in the new source. Keeping
    for reference


author: Tim Powers <timp@redhat.com>
changelog:
  - changelog started
  - general cleanups, changed prefix to /usr, added manpage to files section
  - including in Powertools


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-10
changelog:
  - Reintroduced -d, --dump option and added plain report mode,
    fixed parameters and manual page
    Resolves: rhbz#1333495


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-9
changelog:
  - MSR read errors are no more fatal (by msr-check patch)
    Resolves: rhbz#1102088
  - Backported --auto-tune feature and added one-shot systemd service
    (by auto-tune patch)
    Resolves: rhbz#1143014
  - Improved handling of reporting filenames (by improve-reporting patch)
    Resolves: rhbz#1039822


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-8
changelog:
  - Fixed buffer overflow in cpufreq tunables on systems with many CPUs
    (by tunable-overflow-fix patch)
    Resolves: rhbz#1080191


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-5
changelog:
  - Fixed some possible unregistered parameters errors
    (by reg-net-param patch)
    Resolves: rhbz#1014662
  - Unlimit FDs (by unlimit-fds patch)
    Printed friendly error message if the system is running out
    of FDs (by fd-limit-err patch)
    Resolves: rhbz#1017668


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-1
changelog:
  - New version
    Resolves: rhbz#923729
  - Dropped fix-crash-on-readonly-fs, reduce-syscalls,
    gpu-wiggle-fix patches (upstreamed)
  - Dropped version-fix patch (not needed)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.2-4
changelog:
  - Reduced number of useless syscalls (reduce-syscalls patch) and
    fixed gpu wiggle (gpu-wiggle-fix patch)
    Resolves: rhbz#886185


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.1-1
changelog:
  - New version
  - Removed patches (all upstreamed): show-watts-only-if-discharging,
    valid-html-output, factor-out-powertop-init, catch-fstream-errors


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0-2
changelog:
  - Fixed segfault during calibration
    Resolves: rhbz#823502
  - Used macro optflags instead of variable RPM_OPT_FLAGS


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0-1
changelog:
  - New version
    Resolves: rhbz#821144
  - Dropped patches: unknown-readings-fix (upstreamed), compile-fix (upstreamed),
    power-supply-add-power-now-support (upstreamed),
    html-print-commands (upstreamed), add-power-supply-class-support (obsoleted),
    power-supply-units-fix (obsoleted)
  - Updated patches: show-watts-only-if-discharging patch (sent upstream),
    html-escape patch
  - Added patch: valid-html-output (sent upstream)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.98-4
changelog:
  - Backported support for power_supply class
    (add-power-supply-class-support patch)
  - Added support for POWER_NOW readings
    (power-supply-add-power-now-support patch)
    Resolves: rhbz#796068


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.13-2
changelog:
  - Fixed sigwinch handling (#644800)
  - Readded strncpy patch as strncpy is safer than strcpy
  - Print all P-states in dump mode
  - Added explicit requires for pcituils (#653560)
  - Output error in interactive mode if there is no tty (#657212)
  - Do not suggest ondemand when p4-clockmod scaling driver is used (#497167)
  - Fixed rpmlint warning about mixed tabs and spaces


author: Adam Jackson <ajax@redhat.com> 1.7-2
changelog:
  - Don't suggest disabling g-p-m.  Any additional power consumption is more
    than offset by the ability to suspend.


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.2-25
changelog:
  - Add config option log_die allowing to pass error messages to syslog
  - Add config option bind_retries allowing to change the max number
  - of attempts to find a listening port for the PASV/EPSV command
  - Resolves: rhbz#1318198


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.2-23
changelog:
  - Redefine VSFTP_COMMAND_FD to 1
  - Resolves: rhbz#1443055
  - Document the relationship of text_userdb_names and chroot_local_user
  - Resolves: rhbz#1508021
  - Document allow_writeable_chroot in the man page
  - Resolves: rhbz#1508022
  - Improve documentation of ascii_* options
  - Resolves: rhbz#1517227
  - Add new filename generation algorithm for STOU command
  - Resolves: rhbz#1479237


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.0.2-22
changelog:
  - Resolves: #1432054 - secure ftp stopped working with default TLS settings in the new vsftpd package


author: Martin Sehnoutka <msehnout@redhat.com> - 3.0.2-20
changelog:
  - Resolves: #1147551 - Missing isolate_* options, incorrect default values of
    max_clients, max_per_ip in man vsftpd.conf


author: Martin Sehnoutka <msehnout@redhat.com> - 3.0.2-15
changelog:
  - Resolves: #1147550 ssl_request_cert paragraph in the vsftpd.conf man page gets
    rendered incorrectly


author: Martin Sehnoutka <msehnout@redhat.com> - 3.0.2-13
changelog:
  - Resolves: #1148872 - The vsftpd doesn't remove failed upload when the
    delete_failed_uploads is enabled and the network cable is unplagged


author: Martin Osvald <mosvald@rehat.com> - 3.0.2-10
changelog:
  - Resolves: #1058704 - vsftpd does not support DHE cipher suites
  - Resolves: #1058712 - vsftpd does not support ECDHE cipher suites
  - Resolves: #1198259 - The vsftpd hangs in a SIGCHLD handler when the pam_exec.so is used in pam.d configuration


author: Jiri Skala <jskala@redhat.com> - 3.0.1-1
changelog:
  - update to latest upstream 3.0.1
  - fixes #851441 - Introduce new systemd-rpm macros in vsftpd spec file
  - fixes #845980 - vsftpd seccomp filter is too strict


author: Jiri Skala <jskala@redhat.com> - 2.3.4-6
changelog:
  - fixes #753365 - multiple issues with vsftpd's systemd unit
  - removes exclusivity between listen and listen_ipv6 BZ#450853
  - ls wildchars supports square brackets


author: Jiri Skala <jskala@redhat.com> - 2.1.0-3
changelog:
  - updated to latest upstream version
  - improved daemonizing - init script gets correct return code if binding fails
  - trim white spaces from option values
  - fixed #483604 - vsftpd not honouring delay_failed_login when userlist active


author: Martin Nagy <mnagy@redhat.com> - 2.1.0-0.3.pre4
changelog:
  - update to latest upstream release
  - enable ptrace sandbox again
  - don't mark vsftpd_conf_migrate.sh as a config file


author: Martin Nagy <mnagy@redhat.com> - 2.1.0-0.1.pre3
changelog:
  - update to latest upstream release
  - cleanup the spec file
  - drop patches fixed upstream:
      vsftpd-1.0.1-missingok.patch
      vsftpd-1.2.1-nonrootconf.patch
      vsftpd-2.0.1-tcp_wrappers.patch
      vsftpd-2.0.2-signal.patch
      vsftpd-2.0.3-daemonize_fds.patch
      vsftpd-2.0.5-correct_comments.patch
      vsftpd-2.0.5-pasv_dot.patch
      vsftpd-2.0.5-write_race.patch
      vsftpd-2.0.5-fix_unique.patch
      vsftpd-2.0.5-uname_size.patch
      vsftpd-2.0.5-bind_denied.patch
      vsftpd-2.0.5-pam_end.patch
      vsftpd-2.0.5-underscore_uname.patch
      vsftpd-2.0.6-listen.patch
  - join all configuration patches into one:
      vsftpd-1.1.3-rh.patch
      vsftpd-1.2.1-conffile.patch
      vsftpd-2.0.1-dir.patch
      vsftpd-2.0.1-server_args.patch
      vsftpd-2.0.3-background.patch
      vsftpd-2.0.5-default_ipv6.patch
      vsftpd-2.0.5-add_ipv6_option.patch
      vsftpd-2.0.5-man.patch


author: Martin Nagy <mnagy@redhat.com> - 2.0.6-1
changelog:
  - rebase for new upstream version
  - remove patches that were fixed in upstream: kickline, confspell, anon_umask


author: Martin Nagy <mnagy@redhat.com> - 2.0.5-21
changelog:
  - Remove uniq_rename patch.
  - Correct create/lock race condition, original patch by <mpoole@redhat.com>
    (#240550).
  - Fix bad handling of unique files (#392231).
  - Added userlist_log option.
  - Allow usernames to begin with underscore or dot (#339911).
  - Removed user_config patch.
  - Fix nonrootconf patch (#400921).
  - Increase maximum length of allowed username (#236326).
  - Fix file listing issue with wildcard (#392181).
  - Removed use_localtime patch (#243087).


author: Maros Barabas <mbarabas@redhat.com> - 2.0.5-16
changelog:
  - Merge review: - fix using %{_var}, %{_sbindir} and 
                    %{_sysconfigdir} macros for files and install
                  - fix BuildRoot
                  - dropped usermod, openssl & pam requirement


author: Maros Barabas <mbarabas@redhat.com> - 2.0.5-14
changelog:
  - remove file upload permission problem 
  - change name of patch vsfptd-2.0.3-user_config
  - Resolves #190193


author: Radek Vokal <rvokal@redhat.com> 2.0.3-10
changelog:
  - vsfptd.log as a default log file has to be rotated (#167359)
  - vsftpd does dns reverse before passing hosts to pam_access.so (#159745)


author: Radek Vokal <rvokal@redhat.com> 2.0.1-1
changelog:
  - tcp_wrapper patch updated, signal patch updated
  - upgrade to 2.0.1, fixes several bugs, RHEL and FC builds


author: Bill Nottingham <notting@redhat.com> 1.2.1-5
changelog:
  - fix all references to vsftpd.conf to be /etc/vsftpd/vsftpd.conf,
    including in the binary (#121199, #104075)


author: Karsten Hopp <karsten@redhat.de> 1.2.1-1
changelog:
  - update to 1.2.1, which fixes #89765 and lot of other issues
  - remove manpage patch, it isn't required anymore
  - clean up init script
  - don't use script to find libs to link with (lib64 issues)


author: Bill Nottingham <notting@redhat.com> 1.2.0-3
changelog:
  - tweak man page (#84584, #72798)
  - buildprereqs for pie (#99336)
  - free ride through the build system to fix (#101582)


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.1-9
changelog:
  - remove absolute paths from PAM configuration so that the right modules get
    used for whichever arch we're built for on multilib systems


author: Elliot Lee <sopwith@redhat.com> 1.0.1-8
changelog:
  - -D_FILE_OFFSET_BITS=64
  - smp make
  - remove forced optflags=-g for lack of supporting documentation


author: Bill Nottingham <notting@redhat.com> 1.0.1-5
changelog:
  - don't spit out ugly errors if anonftp isn't installed (#62987)
  - fix horribly broken userlist setup (#62321)


author: Trond Eivind Glomsrød <teg@redhat.com> 1.0.1-4
changelog:
  - s/Copyright/License/
  - add "missingok" to the logrotate script, so we don't get errors
    when nothing has happened


author: Seth Vidal <skvidal@phy.duke.edu>
changelog:
  - updated to 0.0.15
  - added entry for vsftpd.8 man page
  - added entry for vsftpd.log logrotate file
  - added TUNING file to docs list


author: Seth Vidal <skvidal@phy.duke.edu>
changelog:
  - First RPM packaging
  - Stolen items from wu-ftpd's pam setup
  - Separated rh 7 and rh 6.X's packages
  - Built for Rh6


author: Adam Tkac <atkac redhat com> 0.4-0.1.b42
changelog:
  - update to 0.4b42
  - patches merged
    - dump-selinux.patch
    - dump-dmfix.patch
    - dump-immutable.patch
    - dump-0.4b41-libtinfo.patch
    - dump-rh356121.patch
    - dump-rh493635.patch
    - dump-rh490627.patch
    - dump-rh489853.patch
  - fix NVR to conform to Fedora policies


author: Adam Tkac <atkac redhat com> 0.4b41-13
changelog:
  - display dump level correctly in all cases (#493635)
  - -A option is not valid when -P is specified, correct manual page (#490627)
  - fix typos in manual pages (#489853)


author: Jindrich Novy <jnovy@redhat.com> 0.4b41-2
changelog:
  - fix miscompares detected by restore -C caused by SELinux (#189845)
  - link properly against device-mapper and selinux libraries
  - add autoconf BuildRequires
  - use %{?dist}


author: Jindrich Novy <jnovy@redhat.com> 0.4b41-1
changelog:
  - update to 0.4b41
  - drop .fixacl patch, now applied in the new upstream release
  - link against device-mapper


author: Jindrich Novy <jnovy@redhat.com> 0.4b39-2
changelog:
  - Updated the EA patch with support for in-inode EAs, big
    inodes and fixes 'error in EA block' displayed for
    every single inode (#149299) - patch from Stelian Pop


author: Jindrich Novy <jnovy@redhat.com> 0.4b38-1
changelog:
  - Updated to dump 0.4b38 (#144840)
  - Updated the experimental dump patch.
  - Dropped the cvs patch, applied in the upstream release.


author: Mike A. Harris <mharris@redhat.com> 0.4b27-3
changelog:
  - BuildRequires readline-devel >= 4.2 for the rl_completion_matches function
  - Added dump-0.4b27-dump-atomic-read-write.patch to avoid namespace conflict
    with included kernel headers.  atomic_read is a function on s390 and as
    such, cannot be #undef'd


author: Mike A. Harris <mharris@redhat.com> 0.4b27-2
changelog:
  - Added prereq on "setup" to ensure disk group is created prior to this
    package being installed
  - Somehow the dump package changelog got hosed, and part of the spec file
    regressed.  I believe it is fixed now.


author: Mike A. Harris <mharris@redhat.com> 0.4b25-1.72.0
changelog:
  - Rebuilt 0.4b25 for erratum release.  Fixes various bugs that have been
    reported in bugzilla which are logged below.  Also fixes a bug caused by
    linking statically to a faulty system library.
  - Added Provides dump-static line


author: Mike A. Harris <mharris@redhat.com> 0.4b25-1
changelog:
  - Updated to version 0.4b25-1
  - Added homepage URL for RFE (#54601)
  - Also fixed in this release are (#21272, #52663, #56616)
  - Dropped time.h patch as it is unneeded now


author: Mike A. Harris <mharris@redhat.com> 0.4b22-7
changelog:
  - Updated BuildPreReq to e2fsprogs-devel >= 1.18, readline-devel >= 4.1 to
    explicitly state the minimum required deps and fix (#51900)


author: Trond Eivind Glomsrød <teg@redhat.com> 0.4b22-6
changelog:
  - Kill the static subpackage - the standard binaries are now static
    This removes /usb/sbin/*. The static versions are now in /sbin 
    (#53433)
  - Obsolete dump-static


author: Mike A. Harris <mharris@redhat.com> 0.4b22-2
changelog:
  - Removed release tag from buildroot dirname - messy.
  - Broke all lines over multiple lines for readability in specfile.
  - Added --enable-largefile configure flags


author: Preston Brown <pbrown@redhat.com>
changelog:
  - whoops I had dump commented out of the file list.  fixed.
  - dropped suid bits on the static binaries.
  - fix char buffer size issue (#11880)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - workaround egcs bug (#4281) that caused dump problems (#2989).
  - use sigjmp_buf, not jmp_buf (#3260).
  - invoke /etc/rmt (instead of rmt) like other unices. (#3272).
  - use glibc21 err/glob rather than the internal compatibility routines.
  - wire $(OPT) throughout Makefile's.
  - fix many printf problems, mostly lint clean.
  - merge SuSE, Debian and many OpenBSD fixes.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - restore original 6755 root.tty to dump/restore, defattr did tty->root (#684).
  - mark /etc/dumpdates as noreplace.


author: Dominik Mierzejewski <rpm[AT]greysector.net> 4.1.4-0.1.svn1184
changelog:
  - fix multilib conflict, based on a patch by Rex Dieter (rhbz#477684)
  - update to SVN r1184
  - move TODO to devel docs


author: Dominik Mierzejewski <rpm[AT]greysector.net> 4.1.1-2
changelog:
  - use upstream non-autotools buildsystem
  - build with external libdvdread for older releases
  - fix version.h
  - fix soname
  - fix lib paths on 64bit


author: Dominik Mierzejewski <rpm[AT]greysector.net> 4.1.1-1
changelog:
  - switch to new upstream
  - libdvdread comes from here now
  - apply dvdread udf-related fixes from upstream SVN


author: Dominik Mierzejewski <rpm[AT]greysector.net> 0.1.10-3.20070503
changelog:
  - update to current snapshot from new upstream
  - clean up some specfile cruft
  - disable static libs
  - drop unnecessary explicit dependency on libdvdread


author: Nikola Forró <nforro@redhat.com> - 1.2.90-7
changelog:
  - Fix CVE-2018-11212 (#1586062)
  - Fix CVE-2016-3616 (#1318509), CVE-2018-11213 (#1589091)
    and CVE-2018-11214 (#1589110)
  - Fix CVE-2018-11813 (#1591203)


author: Adam Tkac <atkac redhat com> 1.0.0-1
changelog:
  - update to 1.0.0
  - patches merged
    - libjpeg-turbo-programs.patch
    - libjpeg-turbo-nosimd.patch
  - add libjpeg provides to the main package to workaround problems with broken
    java-1.6.0-openjdk package


author: Adam Tkac <atkac redhat com> 0.0.93-6
changelog:
  - improve package description a little (#600243)
  - include example.c as %doc in the -devel subpackage


author: Michael Schwendt <mschwendt@fedoraproject.org> - 0.10.35-2
changelog:
  - Remove gtk-doc dependency from -devel-docs package and 
    own the two gtk-doc directories instead (#604365).


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.21-2
changelog:
  - Update the gstreamer requirement
  - Add a gtk2-devel BR, so that the test-colorkey program will be built


author: Jeremy Katz <katzj@redhat.com> - 0.10.20-6
changelog:
  - gst-visualize is just a test program that we don't really need to include 
    and having it means that perl gets pulled into small images (#462620)


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.19-2
changelog:
  - Add patch to avoid sync problems in the ALSA sink when a specific
    track has both playback and record flags


author: Adam Jackson <ajax@redhat.com> 0.10.17.2-3
changelog:
  - gstpb-0.10.15-cd-speed.patch: Set default CD read speed to something
    sensible. (#431178)
  - s/Fedora Core/Fedora/
  - Don't even bother building static libs.


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.14-5
changelog:
  - Add patch to avoid critical warning when getting information about
    missing codecs
  - Up liboil requirement


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.12-2
changelog:
  - Remove the patch to disable docs, install the docs by hand instead
    Add libgstpbutils to the files


author: John (J5) Palmieri <johnp@redhat.com> - 0.10.2-1
changelog:
  - Upgrade to 0.10.2
  - Require gstreamer-0.10.2
  - Add libgstcdda and libcdparanoia to the %files section


author: Thomas Vander Stichele <thomas at apestaart dot org>
changelog:
  - 0.9.7-0.gst.1
  - new release with 0.10 majorminor
  - remove sinesrc
  - replace ximage with ximagesink
  - update libs


author: Ondrej Vasik <ovasik@redhat.com> 1.74.2-2
changelog:
  - updated Makefile: do ship .svg images(#486849), xsl
    stylesheets for website, xhtml-1_1, docbook -> epub
    convertor


author: Ondrej Vasik <ovasik@redhat.com> 1.73.2-8
changelog:
  - remove entries from xmlcatalog only on removal of package
    (required because of the change with droping release
     -caused drop of catalog entries during update)


author: Ondrej Vasik <ovasik@redhat.com> 1.73.2-7
changelog:
  - change a few non-constant expressions to constant that
    could now be handled by passivetex(#366441)


author: Ondrej Vasik <ovasik@redhat.com> 1.73.2-6
changelog:
  - fixed docbook-xsl-pagesetup.patch to follow Norman Walsh's
    documentation for nonpassivetex processing(#307001)


author: Ondrej Vasik <ovasik@redhat.com> 1.73.2-5
changelog:
  - convert all html files in doc to UTF-8 in prep
    (latest rpmlint gives warnings)
  - no longer using release in style-xsl dir(#389231)


author: Tim Waugh <twaugh@redhat.com> 1.69.1-2
changelog:
  - Patches from W. Michael Petullo:
    - Fix lists blocking (bug #161371).
    - Avoid proportional-column-width for passivetex (bug #176766).


author: Tim Waugh <twaugh@redhat.com> 1.64.1-6
changelog:
  - Fix last margin-left fix (bug #113456).
  - Reduce instances of itemized/ordered lists having misalignments.


author: Tim Waugh <twaugh@redhat.com> 1.62.4-1
changelog:
  - 1.62.4.
  - No longer need hyphens patch.
  - Avoid expressions in margin-left attributes, since passivetex does not
    understand them.


author: Chris Runge <crunge@pobox.com>
changelog:
  - added extensions and additional doc
  - bin added to doc; the Perl files are for Win32 Perl and so need some
    conversion first


author: Chris Runge <crunge@pobox.com>
changelog:
  - Initial RPM (based on docbook-style-dsssl RPM)
  - note: no catalog right now (I don't know how to do it; and not sure why
    it is necessary)


author: Nils Philippsen <nils@redhat.com> - 2:2.8.10-5
changelog:
  - remove BRs contained in the minimal build environment
  - group BRs into libraries and tools
  - remove various old cruft
  - ship RPM macros for packaging plug-ins e.a. (#1063144)


author: Nils Philippsen <nils@redhat.com> - 2:2.8.4-4
changelog:
  - fix upstream commit ids
  - fix double-free crashes when selecting gradients from script-fu (#964470)
  - fix crash in unsharp-mask plug-in (#966987)
  - hardcode python interpreter in python plug-ins (#952227)
  - fix crash when selecting text with multiple colors etc. (#919795, #951815)
  - don't crash upon not applying a color profile to a grayscale image (#922622)


author: Nils Philippsen <nils@redhat.com> - 2:2.8.2-3
changelog:
  - don't trip over too much installed memory, reenable all tests
  - realign selection after "Crop to Selection" (#873212, fix by Michael
    Natterer)


author: Nils Philippsen <nils@redhat.com> - 2:2.8.0-3
changelog:
  - fix crash in fits loader (#834627)
  - fix overflow in CEL plug-in (CVE-2012-3403)
  - fix overflow in GIF loader (CVE-2012-3481)


author: Nils Philippsen <nils@redhat.com> - 2:2.8.0-0.1.RC1
changelog:
  - version 2.8.0-RC1 (release candidate):
   - Add our own GimpOperationBrightnessContrast because GEGL one is different
   - Fix some GFig rendering issues
   - Depend on Babl 0.1.10, GEGL 0.2.0 and some other new library versions
   - Bug fixes
   - Translation updates


author: Nils Philippsen <nils@redhat.com> - 2:2.7.5-1
changelog:
  - version 2.7.5 (unstable, see http://developer.gimp.org/NEWS for details)
  - add BR: atk >= 2.0.1, bzip2-devel, ghostscript-devel, zlib-devel
  - package tool presets


author: Nils Philippsen <nils@redhat.com> - 2:2.7.4-1
changelog:
  - version 2.7.4 (unstable, see http://developer.gimp.org/NEWS for details)
  - update dependency versions
  - don't suppress abrt reporting, don't redirect bug reports to upstream


author: Nils Philippsen <nils@redhat.com> - 2:2.7.3-1
changelog:
  - version 2.7.3 (unstable, see http://developer.gimp.org/NEWS for details)
    - change license to GPLv3+/LGPLv3+
    - update required versions of dependencies
    - build with cairo-pdf, jasper, require jasper-devel for building
    - build without poppler as that currently is GPLv2 only, thus incompatible
      with LGPLv3 gimp libraries (use postscript plugin for PDF import
      meanwhile), future poppler versions will be "GPLv2 or GPLv3", i.e.
      compatible again
    - clean up configure options, compiler/linker flags
    - suppress abrt bug reporting for unstable releases
    - remove all patches (obsolete, woo!)
    - add new files, remove files that are not installed any longer
  - use %global instead of %define
  - replace hal, minorver, microver, interfacever, gimp_lang_ver macros with
    gudev, lib_minor, lib_micro, lib_api_version, gettext_version macros
  - compute more version macros (ugly, but convenient)
  - use gudev from Fedora 15 on
  - use convenience macro for hardening binaries from F-16 on


author: Nils Philippsen <nils@redhat.com> - 2:2.6.11-21
changelog:
  - actually apply startup-warning patch
  - fix heap corruption and buffer overflow in file-gif-load plugin
    (CVE-2011-2896)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.11-14
changelog:
  - fix buffer overflows in sphere-designer (CVE-2010-4541),
    gfig (CVE-2010-4542), lighting (CVE-2010-4540) plugins


author: Nils Philippsen <nils@redhat.com> - 2:2.6.11-10
changelog:
  - don't use poppler/gdk_pixbuf API removed in poppler >= 0.17 (#698157)
  - remove obsolete configure options


author: Nils Philippsen <nils@redhat.com> - 2:2.6.11-1
changelog:
  - version 2.6.11

    Overview of Changes from GIMP 2.6.10 to GIMP 2.6.11
    ===================================================

    * Bugs fixed:

     631199 - Printing and Print preview broken with cairo 1.10
     572865 - Parasite handling had problems and can cause crashing
     628893 - Error with string-append and gimp-drawable-get-name
     623850 - (Paco) Recursive Gaussian Filter error
     624487 - Fix incorrect "wrap mode" documentation values in Edge plug-in
     557380 - Difference of Gaussians gives blank doc if "Invert" selected
     627009 - Image type filter doesn't include .rgba SGI files
     626020 - Console window opening on file-ps-load
     624698 - Wood 1 and Wood 2 have bad alpha value
     624275 - Image saved from google docs generates a
              'gimp-image-set-resolution' error message

    * Updated translations:

     German (de)
     Spanish (es)
     Italian (it)
     Japanese (ja)
     Romanian (ro)
     Chinese (Hong Kong) (zh_HK)
     Chinese (Taiwan) (zh_HK)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.10-1
changelog:
  - version 2.6.10

    Overview of Changes from GIMP 2.6.9 to GIMP 2.6.10
    ==================================================

    * Bugs fixed:

     613328 - TGA files saved with incorrect header yOrigin data
     623290 - Save As... does not save Windows Bitmap as default in dialog
     621363 - CMYK decompose broken
     595170 - brush - color from gradient works wrong in greyscale
     613838 - Error in gimp-hue-saturation PDB call
     622608 - GIMP crashes when clicking any scroll bar from combo boxes
     565459 - newly opened images are put into the background

    * Updated translations:

     German (de)
     Italian (it)
     Romanian (ro)
     Portuguese (pt)

  - remove obsolete combo-popup patch
  - update script-fu-ipv6 patch


author: Nils Philippsen <nils@redhat.com> - 2:2.6.9-1
changelog:
  - version 2.6.9

    Overview of Changes from GIMP 2.6.8 to GIMP 2.6.9
    =================================================

    * Bugs fixed:

     612618 - Font selection remains visible
     622234 - gimp.desktop: image/x-psd in MimeTypes twice
     622196 - Unportable test(1) construct in configure script
     620604 - Description of "histogram" procedure is slightly inaccurate
     541586 - Tool options not saved/loaded correctly?
     614153 - Importing PDF files with long titles
     600112 - blur-gauss-selective.exe crashes
     599233 - Dialog of "Save as BMP" ignores changes which are not made
              with a mous
     565001 - Text-Tool crashes when edit a 2.4.2 version xcf
     610478 - Layer preview suddenly stops getting updated
     609026 - leaks shared memory
     609056 - Exporting to Alias PIX format fails
     608188 - a few strings in Save as... > Raw image data dialog are always
              in English
     604820 - GEGL Operation "path" crashes GIMP
     603711 - Crashes when using path tool
     607242 - GIMP 2.7.0 fails to build against libpng 1.4.0
     606372 - Saving to .ppm fails on indexed colorspace
     605237 - the "Antialiasing..." message in the progress bar does not show
              translated
     604508 - gimp-layer-new-from-visible should work from updated projection

    * Updated and new translations:

     Asturian (ast)
     Basque (eu)
     Burmese (my)
     Catalan (ca)
     Chinese (Hong Kong) (zh_HK)
     Chinese (Taiwan) (zh_HK)
     German (de)
     Italian (it)
     Latvian (lv)
     Low German (nds)
     Romanian (ro)
     Simplified Chinese (zh_CN)
     Slovenian (sl)
     Ukrainian (uk)
     Valencian (ca@valencia)

  - remove obsolete gtk219, never-stack-trace-desktop, indexed-pnm patches
  - don't manually provide "gimp-libs%{?_isa}" in gimp-libs
  - don't package %{_datadir}/gtk-doc/html, but dirs beneath


author: Nils Philippsen <nils@redhat.com> - 2:2.6.8-1
changelog:
  - version 2.6.8

    Overview of Changes from GIMP 2.6.7 to GIMP 2.6.8
    =================================================

    * Bugs fixed:

     470698 - MapObject cannot modify highlight
     593848 - FG color changed to black when FG-BG Editor tab created
     594651 - layer.scale() raises RuntimeError
     594998 - Keyboard shortcuts does not work for first image when dock
              is focused
     599765 - F1 key on gimp-tool-align in menu have wrong link and it
              open gimp-tool-move
     600484 - Gimp BMP Integer Overflow Vulnerability
     600741 - "read_channel_data()" Integer Overflow Vulnerability
     601891 - gimp_image_get_selection returns None
     602761 - plug-in-grid: Parameters Horizontal/Vertical Spacing and
              Horizontal/Vertical Offset are reversed.
     603995 - PCX plugin doesn't sanitize input to avoid allocation overflows.
     603998 - PCX: Calculating amount of memory to allocate may overflow.
     604000 - SGI: sanitize input
     604001 - SGI: Calculating amount of memory to allocate may overflow.
     604002 - SGI: RLE encoded input data may write beyond allocated buffers
     604004 - SGI: allocate memory consistently
     604008 - GBR, PAT: sanitize input data
     604078 - Crash when pressing Backspace with Free Select Tool

    * Updated and new translations:

     Basque (eu)
     British English (en_GB)
     Czech (cs)
     French (fr)
     Greek (el)
     Italian (it)
     Japanese (ja)
     Norwegian Nynorsk (nn)
     Polish (pl)
     Romanian (ro)
     Russian (ru)
     Simplified Chinese (zh_CN)

  - remove obsolete bmp-hardening, psd-hardening patches


author: Nils Philippsen <nils@redhat.com> - 2:2.6.7-3
changelog:
  - avoid overflow in the BMP image file plugin (#537356)
  - avoid overflow in the PSD image file plugin (#537370)
  - update jpeg-units patch


author: Nils Philippsen <nils@redhat.com> - 2:2.6.7-1
changelog:
  - version 2.6.7

    Overview of Changes from GIMP 2.6.6 to GIMP 2.6.7
    =================================================

    * Bugs fixed:

     591017 - Tablet pan is not working as fast as it should
     577581 - Crashes when using any colors tool/function on Windows
     589667 - GIMP crashes when clicking GEGL Operation on Windows
     569833 - file-jpeg-save erroneous with small quality values
     590638 - Changing palettes from list to grid view loses "locked to dock"
              status
     589674 - "Send by Email" does not update "Filename"
     589674 - "Send by Email" does not update "Filename"
     586851 - Transparent BMP files fail to load
     589205 - help-browser uses deprecated (and sometimes broken) webkit call
     582821 - 'Sphere Designer' does not reset correctly...
     570353 - first time open of .svg file ignores the requested units
     555777 - Export to MNG animation fails
     577301 - Dithering with transparency is broken for "positioned" method
     493778 - metadata plug-in crashes on some images
     567466 - PNG comment not found if more than 1 tEXt chunks
     585665 - Exporting to PSD with a blank text layer creates a corrupt file
     586316 - Levels tool does not adjust output levels correctly if input
              levels are changed
     569661 - Import from PDF throws errors when entering resolution in
              pixels per millimetre
     567262 - Black pixels appear in "Spread" filter preview
     554658 - Path Dialog: Path preview pics not to see constantly
     167604 - gimp_gradient_get_color_at() may return out-of-bounds values
     567393 - Rectangle select tool size shrinks to 0 if size is larger than
              the image and the up or down arrow is pressed
     587543 - crash when invoking certain actions by keyboard shortcut
     563029 - Closing maximized image doesn't restore document window size
     585488 - Perspective transformation on a layer with a mask causes crash
     586008 - GIMP crashes when right-click canceling a drawing action initiated
              outside layer boundaries
     584345 - when printing, the number of copies should be reset to 1
     557061 - Alpha to Logo
     472644 - Rotate with clipping crops the whole layer
     577575 - transform tool fills underlying extracted area wrongly
     555738 - Image display is wrong after undoing canvas size
     577024 - help-browser plugin crashes when used with webkit 1.1.3
     555025 - Action GEGL box widgets weirdness

    * Updated and new translations:

     Czech (cs)
     Danish (da)
     German (de)
     Spanish (es)
     Basque (eu)
     Finnish (fi)
     Hungarian (hu)
     Italian (it)
     Gujarati (gu)
     Japanese (ja)
     Kannada (kn)
     Marathi (mr)
     Norwegian bokmål (nb)
     Oriya (or)
     Portuguese (pt)
     Romanian (ro)
     Sinhala (si)
     Swedish (sv)
     Simplified Chinese (zh_CN)
     Traditional Chinese - Hong Kong (zh_HK)
     Traditional Chinese - Taiwan (zh_TW)

  - remove obsolete gegl-babl-versions-check, help-browser-webkit patches
  - comment/explain patches


author: Nils Philippsen <nils@redhat.com> - 2:2.6.6-2
changelog:
  - minimize dialogs with single image window (#492796, backported from trunk,
    original patch by Sven Neumann)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.6-1
changelog:
  - version 2.6.6

    Overview of Changes from GIMP 2.6.5 to GIMP 2.6.6
    =================================================

    * Bugs fixed:

     571117 - lcms plug-in crashes on broken profile
     575154 - changing the help browser preference may not work
     573542 - blur plugin: bug in the first line
     572403 - gimp-2.6 crashed with SIGSEGV in IA__g_object_get()
     573695 - 1-bit white background saved as PBM becomes all black
     573488 - Small bug in Filter>Distorts>Ripple
     572156 - top left pixel position/coordinate is not 0,0 but 1,1
     472644 - Rotate with clipping crops the whole layer

    * Updated translations:

     German (de)
     Spanish (es)
     Estonian (et)
     Basque (eu)
     French (fr)
     Italian (it)
     Portuguese (pt)
     Simplified Chinese (zh_CN)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.5-4
changelog:
  - use correct fix from upstream to avoid crashes (#486122)
  - use -fno-strict-aliasing, PIC/PIE compilation flags


author: Nils Philippsen <nils@redhat.com> - 2:2.6.5-1
changelog:
  - version 2.6.5

    Overview of Changes from GIMP 2.6.4 to GIMP 2.6.5
    =================================================

    * Bugs fixed:

     571628 - Scaling image to 25% turn background from white to grey
     567840 - GIMP's GtkScaleButton conflicts with GTK's
     569043 - GEGL tool - missing Operation Settings for all sub-tools
     568890 - don't rely on GtkAction implementation details
     568909 - wrong RGB values for color names in libgimpcolor/gimprgb-parse.c
     568839 - wrong hex RGB value for the color names slategrey and slategray
     559408 - Brushes dragged to the image window look strange
     563337 - Rectangle Select Tool does not allow 1:1 fixed ratio
     568016 - Black pullout parameter of plug-in-newsprint has no effect
     562818 - First image opened in GIMP offset
     562213 - Align Tool doesn't work properly if it is the active tool
              at startup

    * Updated translations:

     Spanish (es)
     Estonian (et)
     Hindi (hi)
     Italian (it)
     Brazilian Portuguese (pt_BR)
     Romanian (ro)
     Russian (ru)
     Serbian (sr)
     Tamil (ta)
     Simplified Chinese (zh_CN)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.4-3
changelog:
  - split off gimptool into new gimp-devel-tools subpackage to avoid multilib
    conflicts (#477789)
  - require poppler-glib-devel for building from F9 on (#478691)
  - fix gimp-devel package group


author: Nils Philippsen <nils@redhat.com> - 2:2.6.4-1
changelog:
  - version 2.6.4

    Overview of Changes from GIMP 2.6.3 to GIMP 2.6.4
    =================================================
    
    * Bugs fixed:
    
     565223 - Perspective transformation jagged edges / comb effect
     563985 - jpg save dialog: "cancel" is treated like "commit"
              for settings
     564087 - Using clone tool on a layer with a part out of canvas
              causes crashes
     564593 - crash when the drawable is changed while a color tool
              is active
     564869 - GIMP crashes on selecting Tools->GEGL operation
     565138 - python-fu-foggify does not check if image is in rgb mode
     563130 - Hue selection mode does not cross the 0-360 degrees line
     563179 - Scrollbars not resized when we extend the canvas size
     562459 - PF_PALETTE: 'TypeError' when used in a plugin that is
              registered in <Image>
     562427 - Compilation with --as-needed
     562386 - PF_SLIDER and PF_SPINNER 'Step' values do not change
              consistently...
     562366 - Default image dimensions are not correctly
              transferred in the file/new dialog box
     561899 - GIMP can't save to mounted filesystem if file exists
    
    * Updated translations:
    
     Greek (el)
     Hindi (hi)
     Hungarian (hu)
     Italian (it)
     Japanese (ja)
     Korean (ko)
     Slovenian (sl)
     Swedish (sv)
     Tamil (ta)
     Simplified Chinese (zh_CN)
  - add BuildRequires: aalib-devel


author: Nils Philippsen <nils@redhat.com> - 2:2.6.3-1
changelog:
  - version 2.6.3

    Overview of Changes from GIMP 2.6.2 to GIMP 2.6.3
    =================================================

    * Bugs fixed:

     558454 - Plugin Map Color Range disappears from GIMP
     559239 - Error while loading psd-data
     560903 - Explicit zooming with e.g. '1' should handle
              zoom-focus better
     560245 - Zoom selection always centered in the Navigation tab
     559490 - Wrong lang tags for 'no'
     559292 - SOTA Chrome cannot accept different textures
     560375 - Clearing an already empty document history crashes GIMP
     559580 - Image windows need better default locations
     560283 - "Scale image..." causes distortion around edges
     559716 - Changing crop size in Crop Tool Options can make UI
              unresponsive
     558549 - Stroking a single-point path with a paint tool
              crashes GIMP
     559015 - Move tool gives bad information about px moved
     558660 - help behavior for locales without manual translation

    * Updated translations:

     Belarusian (be)
     Dutch (nl)
     German (de)
     Japanese (ja)
     Lithuanian (lt)
     Norwegian Bokmål (nb)
     Norwegian Nynorsk (nn)
     Polish (pl)
     Romanian (ro)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.2-1
changelog:
  - version 2.6.2

    Overview of Changes from GIMP 2.6.1 to GIMP 2.6.2
    =================================================

    * Bugs fixed:

     557950 - Scaling in Gimp 2.6 is much slower than in Gimp 2.4
     558215 - unit and zoom entries in Statusbar not visible
     558451 - Cannot build GIMP using Sun CC on Solaris 2.8
     558420 - projection incorrect with alpha-less layers
     556603 - Zoom region always zooms in center of image
     557870 - "Qmask" message popping up here and there
     557705 - compatibility with GEGL > 0.0.20
     556248 - Scaling gives 'jagged' edges
     556804 - Zoom drop down doesn't update
     524615 - Print not to scale
     555246 - gimp crashes when a file is opened while a preview is generating
     556741 - Alpha layer automatically added (in psd format)
     556182 - Could you please explain a few strings [I18N]
     555697 - build fails if configured with --without-libjpeg
     134956 - Curves tool doesn't save free curves

    * Updated translations:

     Czech (cs)
     Danish (da)
     Finnish (fi)
     French (fr)
     Japanese (ja)
     Polish (pl)
     Brazilian Portuguese (pt_BR)
     Swedish (sv)
     Simplified Chinese (zh_CN)
  - update xdg-open patch


author: Nils Philippsen <nils@redhat.com> - 2:2.6.1-1
changelog:
  - version 2.6.1

    Overview of Changes from GIMP 2.6.0 to GIMP 2.6.1
    =================================================

    * Bugs fixed:

     555587 - PSD file crashes PSD plug-in
     555222 - PSD Load Plugin: unsupported compression mode
     555362 - gimp-remote is not working properly
     555280 - some gif files will not be open
     554890 - JPEG Save Options Dialog does not remember
     554966 - Gimp crashes creating a new image using a template
     554785 - Compile failure on uri-backend-libcurl
     554646 - Opening Help crashes GIMP with lqr-plugin installed
     553534 - centering issues after image scaling and setting zoom
     554898 - Compile failure on uri-backend-wget.c

    * Updated translations:

     Belarusian (be)
     Catalan (ca)
     Finnish (fi)
     French (fr)
     Japanese (ja)
     Macedonian (mk)
     Punjab (pa)
     Brazilian Portuguese (pt_BR)
     Romanian (ro)
     Slovenian (sl)
     Swedish (sv)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.0-3
changelog:
  - split off help browser plugin
  - let gimp and gimp-help-browser obsolete older gimp versions to allow seamless
    upgrades


author: Nils Philippsen <nils@redhat.com> - 2:2.6.0-2
changelog:
  - move gimptool to devel subpackage
  - make gimp-plugin-mgr not require gimptool/pkg-config (#465869)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.0-1
changelog:
  - version 2.6.0
  - remove obsolete htmlview patch
  - remove obsolete distro version dependent defaults
  - don't use custom CFLAGS


author: Nils Philippsen <nils@redhat.com> - 2:2.4.7-2
changelog:
  - Merge review:
    - convert spec file to UTF-8
    - remove unneeded gimp2, gimp-beta obsoletes
    - quote macros in changelog
    - use only spaces, not tabs
    - make pyconsole.py plug-in executable (upstream bug #552601)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.7-1
changelog:
  - version 2.4.7

    Changes in GIMP 2.4.7
    =====================

    - fixed issue in GIF load plug-in (bug #535888)
    - fixed event handling in MIDI controller (bug #537960)
    - fixed handling of the 'Highlight' tool option in Crop and Rectangle
      Select tools (bug #536582)
    - various fixes to the Python bindings:
      - fixed crash with Python 2.5 on 64 bit systems (bug #540629)
      - added missing validity checks (bug #536403)
      - allow to pass None for PDB_DISPLAY
    - plugged a memory leak in gimp-text-get-extents-fontname PDB call
    - fixed potential timeout issues in org.gimp.GIMP.UI D-Bus service
    - fixed endianness issue in the ICO save plug-in (bug #529629)
    - translation fixes and updates (be, it, lt, nn, vi)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.6-1
changelog:
  - version 2.4.6

    Changes in GIMP 2.4.6
    =====================

    - fixed handling of the "antialias" tool option (bug #521069)
    - when loading a TIFF image, always set a filename on it (bug #521436)
    - fixed initial state of curve type in Curves tool (bug #523873)
    - fixed potential crash in the Dicom load plug-in
    - respect the brush mask in the Heal tool (bug #521433)
    - plugged some minor memory leaks
    - fixed a glitch in the DND code (bug #317992)
    - gimp-image-convert() must not accept palettes with > 256 colors (bug
        - fixed parameter description in the Map Object plug-in (bug #526679)
    - fixed compilation of unit tests on Mac OS X (bug #528160)
    - fixed handling of "argc-lower-val-y" PDB parameter in Curve Bend plug-in
    - fixed overlap problem in Hue-Saturation tool (bug #527085)
    - fixed asymmetry in Unsharp Mask plug-in (bug #530077)
    - don't show non-existant color profiles in the selector (bug #528958)
    - fixed issues with default aspect ratio in the Crop tool (bug #532057)
    - fixed compilation of the PDF import plug-in with libpoppler 0.8
    - fixed bug in clipboard brush code (bug #532886)
    - corrected layer mask flag in PSD save plug-in (bug #526811)
    - fixed an issue with tablets and newer X.Org releases
    - keep the JPEG save plug-in from writing an empty EXIF tag (bug #529469)
    - fixed crash in Selective Gaussion Blur plug-in (bug #529280)
    - added new translations (Belarusian, Catalan, Norwegian Nynorsk)
    - translation fixes and updates
      (ar, ca, de, el, es, fi, fr, hu, it, ko, pl, pt_BR, ro, sv)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.5-1
changelog:
  - version 2.4.5

    Changes in GIMP 2.4.5
    =====================

    - fixed a regression introduced by the brush cursor optimization
      (bug #514309)
    - fixed bug in transform tool preview (bug #340965)
    - fixed PSD export of images with layer masks
    - fixed base64 encoding routine of the Mail plug-in
    - use the correct background color when creating a new image
      (bug #514082)
    - explicitly link libgimpthumb with GLib (bug #515566)
    - improved selection of the font sample string (bug #514021)
    - unified handling of "Enter" and "Space" keysyms (bug #516544)
    - fixed bug in the Glossy script when used with a pattern (bug #517285)
    - correctly record dimensions in Exif data when saving as JPEG
      (bug #517077)
    - fixed sensitivity of plug-in menu items (bug #517683)
    - fixed potential crashes in Wind, Warp, Small Tiles and Apply Canvas
      plug-ins (bug #516369)
    - added default keyboard shortcut for "Paste As New Image"
      (Ctrl-Shift-V)
    - added default keyboard shortcut for "Copy Visible" (Ctrl-Shift-C)
    - fixed missing preview update in Curves tool (bug #518012)
    - fixed a bug in the Frosty Logo script (bug #472316)
    - fixed backward transformations using the PDB (bug #518910)
    - translation fixes and updates (de, eu, eo, fr, he, hu, it, ja, ko)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.4-1
changelog:
  - version 2.4.4

    Changes in GIMP 2.4.4
    =====================

    - fixed typo in stock icon name
    - fixed handling of PSD files with empty layer names (bug #504149)
    - merged TinyScheme bug-fixes
    - removed duplicate entry from Tango palette
    - corrected parameter range in Chip Away script (bug #506110)
    - reduced redraw priority and speed of the marching ants (bug #479875)
    - fixed out-of-bounds array access in Convolution Matrix plug-in
    - reduced rounding errors in Convolution Matrix plug-in (bug #508114)
    - fixed potential crash on missing CMYK color profile
    - fixed crash in Bumpmap plug-in when called from some scripts (bug #509608)
    - Equalize should not equalise the alpha channel (bug #510210)
    - increased the number of points the ImageMap plug-in can handle (bug #511072)
    - adjusted the priority of the projection renderer (bug #511214)
    - smooth the brush mask to get a simpler cursor boundary (bug #304798)
    - show the selection even if the image window is invisible (bug #505758)
    - allow to commit a pending rectangular selection using Enter (bug #511599)
    - fixed bug in image dirty state logic (bug #509822)
    - improved GIMPressionist preformance and reduced startup time (bug #512126)
    - fixed a crash in the Convert to Color Profile plug-in (bug #512529)
    - merged some other minor fixes from trunk
    - translation updates (de, it, lt, ru, sv, uk)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.3-1
changelog:
  - version 2.4.3

    Changes in GIMP 2.4.3
    =====================

    - avoid filename encoding problems in the WMF import plug-in (bug #499329)
    - fixed horizontal flipping of linked layers (bug #499161)
    - fixed a missing update in the Lighting plug-in UI (bug #500317)
    - fixed a potential crash in the projection code (bug #500178)
    - fixed a minor Makefile issue (bug #500826)
    - removed some pointless warnings from the JPEG and TIFF load plug-ins
    - fixed size calculation for the image size warning dialog (bug #329468)
    - fixed loading of tool options for the rectangle tools (bug #498948)
    - push/pop a context in the Fog filter
    - fixed potential crashes in the Python binding
    - corrected grid drawing with non-integer spacing (bug #502374)
    - fixed grid snapping for coordinates less than the grid offset
    - made the healing brush work properly when dragged (bug #492575)
    - update tool state when a device change happens (bug #493176)
    - improved validation of strings sent over the wire (bug #498207)
    - fixed integer check in Script-Fu (bug #498207)
    - fixed potential out-of-memory problem in Script-Fu
    - translation updates (ca, cs, de, gl, it, ko, lt, sv, uk)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.2-1
changelog:
  - version 2.4.2

    Changes in GIMP 2.4.2
    =====================

    - removed broken and useless HSV Graph script (bug #491311)
    - update the histogram when a color correction tool is cancelled (bug #493639)
    - fixed a crash with certain plug-in or script descriptions (bug #492718)
    - corrected a tooltip (bug #495564)
    - fixed a crash when GIMP is run without any modules (bug #495863)
    - fixed error handling in the TIFF plug-in
    - fixed a problem with Sample points
    - fixed a crash when merging layers in indexed image (bug #495990)
    - update the histogram when painting (bug #494049)
    - fixed another problem with merge operations on indexed images (bug #496437)
    - fixed crash in TIFF plug-in when saving indexed images (bug #497103)
    - changed defaults so that a system monitor profile is only used when the
      user explicitely enabled this feature (bug #496890)
    - fixed endless loop when running equalize on transparent areas (bug #497291)
    - fixed heap corruption in GimpColorScale widget that caused a crash in the
      Compose plug-in (bug #399484)
    - fixed use of background color in Particle Trace script (bug #498282)
    - set the image menu insensitive when there's no image opened (bug #498511)
    - translation updates (ca, et, it, lt, pt, pt_BR, sr, sv)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.1-1
changelog:
  - version 2.4.1

    Changes in GIMP 2.4.1
    =====================

    - fixed a minor display rendering problem
    - improved the workaround for broken graphics card drivers (bug #421466)
    - fixed a crash with broken scripts and plug-ins (bug #490055)
    - fixed potential syntax error in configure script (bug #490068)
    - fixed parsing of floating point numbers in Script-Fu (bug #490198)
    - fixed potential crash when converting an indexed image to RGB (bug #490048)
    - update the histogram while doing color corrections (bug #490182)
    - fixed another crash with broken plug-ins (bug #490617).
    - translation updates


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.0-1
changelog:
  - version 2.4.0
  - use xdg-open instead of htmlview on Fedora 7 and later
  - change hicolor-icon-theme requirement to be "uncolored" (without
    "(post)"/"(postun)")
  - don't let gtk-update-icon-cache fail scriptlets


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.4.0-0.rc1.1
changelog:
  - version 2.4.0-rc1
  - change license tags to GPLv2+ (main app), LGPLv2+ (libs and devel)
  - drop libXt-devel build requirement
  - build-require pygobject2-devel directly
  - don't let %postun fail
  - remove obsolete buildroot, gimphelpmissing, icontheme, gifload, gimptool
    patches
  - update htmlview patch
  - use more distinct build root
  - use %buildroot consistently
  - explicitely enable configure options
  - more versionized build requirements
  - don't rebuild autofoo files
  - reformat spec file a bit


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.17-1
changelog:
  - version 2.2.17

    Bugs fixed in GIMP 2.2.17
    =========================

    - fixed regression in PSD load plug-in (bug #456042)
    - fixed crash when loading a corrupt PSD file (bug #327444)
    - work around for Pango appending " Not-Rotated" to font names


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.16-1
changelog:
  - version 2.2.16

    Bugs fixed in GIMP 2.2.16
    =========================

    - improved input value validation in several file plug-ins (bug #453973)
    - improved handling of corrupt or invalid XCF files
    - guard against integer overflows in several file plug-ins (bug #451379)
    - fixed handling of background alpha channel in XCF files (bug #443097)
    - improved forward compatibility of the config parser
    - fixed crash when previewing some animated brushes (bug #446005)

  - remove obsolete psd-invalid-dimensions patch


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.15-1
changelog:
  - version 2.2.15

    Bugs fixed in GIMP 2.2.15
    =========================
    
    - fixed parsing of GFig files with CRLF line endings (bug #346988)
    - guard against a possible stack overflow in the Sunras loader (bug #433902)
    - fixed definition of datarootdir in gimptool-2.0 (bug #436386)
    - fixed Perspective tool crash on Mac OS X (bug #349483)
    - fixed area resizing in the Image Map plug-in (bug #439222)
    - added missing library in gimptool-2.0 --libs output
    - added new localizations: Occitan and Persian

  - remove obsolete sunras-overflow patch


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.14-1
changelog:
  - version 2.2.14
    
    Bugs fixed in GIMP 2.2.14
    =========================
    
    - avoid crashing on newer versions of the winicon format (bug #352899)
    - fixed crash in Postscript plug-in (bug #353381)
    - fixed handling of TABs in the text tool (bug #353132)
    - fixed bug in Depth Merge plug-in (bug #355219)
    - fixed bug in GimpDrawablePreview widget (bug #353639)
    - fixed bug in Line Nove script (bug #357433)
    - fixed bug in Ripple plug-in (bug #357431)
    - save locale independent files from Fractal Explorer plug-in (bug #360095)
    - fixed bug in Super Nova plug-in (bug #340073)
    - be more robust against broken XCF files (bug #357809)
    - fixed drawing issues in Image Map plug-in (bug #311621)
    - fixed smoothing option in Fractal Explorer plug-in (bug #372671)
    - load channels in the proper order when opening an XCF file (bug #378003)
    - deal with floating selections in the Burn-In Animation script (bug #384096)
    - fixed clipping in the GimpPreviewArea widget (bug #392692)
    - fixed a potential crash in gimp-remote (bug #392111)
    - work around a file-chooser problem on Windows (bug #398726)
    - fixed markup of the gimp(1) manual page (bug #401145)
    - fixed the fix for the right-to-left layout in layers dialog (bug #348347)
    - fixed PSD save plug-in on 64bit architectures (bug #335130)
    - added missing dependency in gimpui-2.0.pc file (bug #356394)
    - fixed a crash in the PSD save plug-in (bug #395385)
    - improved robustness of transform tool preview code (bug #420595)
    - improved forward compatibility of XCF loader (bug #316207)
    - don't crash in the Compressor plug-in if files can't be opened (bug #422444)
    - fixed sensitivity of input fields in the Lighting plug-in (bug #359833)

  - don't BuildRequire gimp-print/gutenprint anymore


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.13-3
changelog:
  - use gutenprint per default for current development/future distribution
    versions (Fedora >= 7, RHEL >= 6)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.12-1
changelog:
  - version 2.2.12
  - use %dist/%fedora/%redhat
  - remove obsolete gcc4, libpng patches
  - show build options in %prep
  - require gettext for building


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.11-3
changelog:
  - only use pkgconfig if needed in gimptool, require pkgconfig in devel
    subpackage (#189314, #189371)


author: Nils Philippsen <nphilipp@redhat.com> - 2:2.2.10-4
changelog:
  - use htmlview as default web browser (#183730, patch by Ben Levenson)
  - require hicolor-icon-theme (#182784, #182785)


author: Nils Philippsen <nphilipp@redhat.com> - 2.2.8
changelog:
  - version 2.2.8
  - clean up file list generation a bit
  - gimptool manpage is in section 1 not 5
  - list auto-generated .pyc and .pyo files


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - use -mmmx/sse/sse2/... only for the relevant source files so that extended
    instruction sets only get used on suitable CPUs (#157409)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - version 2.2.7, fixes bug in SSE2 assembly for Lighten Only layer mode
    (#145771) and various other bugs
  - on x86 and x86_64, use -msse and -msse2 to accomodate newer compilers


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - prevent gifload plugin from crashing when loading files with bogus frame size
    (#150677, #150678)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - clip thumbnail quality at 75 and don't barf on saving images at quality 0
    (fix patch for #145100)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - obsolete fixed gimp-perl version to be able to reintroduce it at a
    later point
  - use correct dir in source URL


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - add MimeType to desktop file
  - run update-desktop-database in %post/%postun
  - don't make stunts with -32 or -64 postfixed binaries anymore
  - require /sbin/ldconfig and /usr/bin/update-desktop-database


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - use included desktop (#126723), application-registry, mime-info and
    icon files
  - remove perl cruft (Gimp-Perl is an external package now)
  - further spec file cleaning


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - add libjpeg-devel to BuildRequires (#121236)
  - spit out slightly more informative help message if gimp-help is missing
    (#124307)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - version 2.0pre3
  - update buildroot patch
  - enable building static libs (old default)
  - have '--define'able enable_*
  - disable building of print plugin, it's in another package


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - require %{epoch}:%{version}-%{release} of base package in sub packages
  - rather use %{?smp_mflags} to actually exploit SMP build systems


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - set epoch to 1 to upgrade old gimp rpms
  - obsolete gimp2-devel, gimp-beta-devel to allow upgrade of 3rd party repo
    packages, gimp-perl to upgrade old package


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - fix binary name in desktop file ("gimp-1.3" until gimp-2.0 becomes final, to
    allow coexistence with old gimp-1.x packages)
  - system intltool buildrequires perl-XML-Parser, work around that, yay


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - build as gimp, not gimp-beta
  - remove all the beta blurbs
  - fix automake dependency
  - fix libtool usage


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - leave gtk-doc documentation in place
  - move gimptool to main package
  - own some directories previously not owned


author: Matt Wilson <msw@redhat.com>
changelog:
  - added gimp-1.2.1-locale.patch, which I've checked in to gimp CVS, to
    correctly set up the locale in plug-ins (#34214)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include embedxpm, as it depends on a non-included perl module (#=33249)
  - move gimpdoc and xcftopnm to gimp-perl, as they are dependant on the perl Gimp
    module


author: Matt Wilson <msw@redhat.com>
changelog:
  - disable aa plugin
  - moved the group back to Applications/Multimedia
  - added desktop entry back into the file list


author: Matt Wilson <msw@redhat.com>
changelog:
  - include subdirs in the help find
  - remove gimp-help-files generation
  - both gimp and gimp-perl own prefix/lib/gimp/1.1/plug-ins
  - both gimp and gimp-devel own prefix/lib/gimp/1.1/modules


author: Laine Stump <laine@redhat.com> - 0.2.8-1
changelog:
  - Rebase to netcf-0.2.8
   - resolve rhbz#1165965 - CVE-2014-8119
   - resolve rhbz#1159000
   - support multiple IPv4 addresses in interface config (redhat driver)
   - resolve rhbz#1113983
   - allow static IPv4 config simultaneous with DHCPv4 (redhat driver)
   - resolve rhbz#1170941
   - remove extra quotes from IPV6ADDR_SECONDARIES (redhat+suse drivers)
   - resolve rhbz#1090011
   - limit names of new interfaces to IFNAMSIZ characters
   - resolve rhbz#761246
   - properly parse ifcfg files with comments past column 1


author: - Laine Stump <laine@redhat.com> 0.2.6-2
changelog:
  - resolves rhbz#1138196
   - report file path and reason when aug_save fails
   - resolves rhbz#1147650
   - recognize IPADDR0/PREFIX0/NETMASK0/GATEWAY0
   - use git to apply patches to source tree


author: Laine Stump <laine@redhat.com> - 0.2.6-1
changelog:
  - resolves rhbz#1115176
   - rebase to upstream 0.2.6
   - allow interleaved elements in interface XML schema
   - allow <link> element in vlan and bond interfaces
   - report link state/speed in interface status
   - change DHCPv6 to DHCPV6C in ifcfg files
   - max vlan id is 4095, not 4096


author: Laine Stump <laine@redhat.com> - 0.2.3-8
changelog:
  - resolves rhbz 1060076
  - Transform STP value from yes/no to on/off
  - resolves rhbz 1060317
  - Require bridge-utils for netcf-libs in the specfile


author: Laine Stump <laine@redhat.com> - 0.2.3-6
changelog:
  - resolves rhbz#961184
  - wait for IFF_UP and IFF_RUNNING after calling ifup
  - resolves rhbz#1020204
  - remove extraneous quotes from BONDING_OPTS
  - resolves rhbz#1044681
  - eliminate use of uninitialized data when getting mac
  - resolves rhbz#1046594
  - support systemd based netcf transaction


author: Laine Stump <laine@redhat.com> - 0.2.3-1
changelog:
  - Rebase to netcf-0.2.3
  - eliminate calls to nl_cache_mngt_provide(), to avoid
    non-threadsafe code in libnl (and because it isn't needed
    anyway) (This non-threadsafe code could lead to a segfault)
  - portability fixes for FreeBSD
  - fix bug when a config file has two config parameters with
    identical names
  - add HACKING document
  - always bail immediately if get_augeas fails (doing otherwise
    could lead to a segfault)


author: Laine Stump <laine@redhat.com> - 0.2.2-1
changelog:
  - Rebase to netcf-0.2.2
  - specfile: require libnl3-devel for rpm builds on Fedora 18+ and
    RHEL7+. Likewise, force libnl1 for F17- and RHEL6.x-, even if
    libnl3-devel is installed.


author: Laine Stump <laine@redhat.com> - 0.2.1-1
changelog:
  - Rebase to netcf-0.2.1
  - update gnulib to fix broken build on systems with nwer glibc (which no
    longer provides gets()).
  - add ncftool manpage
  - interfaces are only "active" if both UP and RUNNING.
  - add "bundled(gnulib)" to specfile to indicate that we use a local
    copy of gnulib sources (used by Fedora/RHEL when determining the scope
    of security bugs).
  - Fix ipcalc_netmask, which was trimming off the last digit in
    character representations of full-length netmasks (all 4 octets
    having 3 chars each)
  - other minor bugfixes


author: Laine Stump <laine@redhat.com> - 0.1.9-1
changelog:
  - Rebase to netcf-0.1.9
  - always add <bridge> element to bridge, even if there is no physdev present
  - don't log error if interface isn't found in kernel during status report
  - allow building with C++
  - update gnulib


author: Laine Stump <laine@redhat.com> - 0.1.8-1
changelog:
  - Rebase to netcf-0.1.8
  - new transactional change APIs: ncf_change_(begin|commit|rollback)
  - add stdout/stderr to error text when an external program fails
  - make error reporting of failed execs more exact/correct
  - Remove unnecessary "Requires" of libxml2 and augeas from pkgconfig file
    to pulling in extra packages when building an application that uses netcf.


author: Laine Stump <laine@redhat.com> - 0.1.6-1
changelog:
  - New version
  - Remove patch n0001-src-dutil.c-add-missing-includes-for-stat.patch,
    included upstream


author: Florian La Roche <laroche@redhat.com>
changelog:
  - make sure librom1394 is linked to libraw1394 and also
    libavc1394 is linked to librom1394 (also bz 156938)


author: Colin Walters <walters@redhat.com> 0.4.1-5
changelog:
  - Rerun autotools in attempt to get package to link to -lm
  - Add patch libavc1394-0.4.1-kill-configure-insanity.patch


author: Warren Togami <wtogami@redhat.com> 0.4.1-1
changelog:
  - upgrade to 0.4.1
  - Spec cleanups
  - License -> Copyright
  - Remove INSTALL; Add News, ChangeLog
  - Applications/Multimedia -> System Environment/Libraries


author: Michal Srb <msrb@redhat.com> - 0:1.1.2-13
changelog:
  - Prevent XXE and RCE in JSTL XML tags
  - Apply correction for previous CVE-2015-0254 patch (prevent XXE in <x:transform>)
  - Resolves: CVE-2015-0254


author: Matt Wringe <mwringe at redhat.com> 0:1.1.1-6jpp
changelog:
  - Add conditional native compilation
  - Add missing BuildRequires and Requires for tomcat5-jsp-2.0-api and xalan-j2
    (from Deepak Bhole <dbhole at redhat.com>)


author: Jaroslav Kysela <jkysela@redhat.com> - 1.0.27.1-1
changelog:
  - Updated to 1.0.27.1
  - Updated alsa-info.sh to 0.4.61
  - Remove dependency on the dialog package (it is optional for alsa-info.sh)


author: Lennart Poettering <lpoetter@redhat.com> - 1.0.24.1-5
changelog:
  - When installing the Fedora service files make sure to override the
    actual service files with them instead of the symlinks to them
  - Drop StandardOutput=syslog since that is the default now and we
    don't want to needlessly override the default


author: Jaroslav Kysela <jkysela@redhat.com> 1.0.24.1-2
changelog:
  - add missing systemd files, add dependency on systemd-units
  - use own udev rule file for /lib/udev/rules.d
  - create /var/lib/alsa directory for asound.state


author: Jaroslav Kysela <jkysela@redhat.com> 1.0.23-3
changelog:
  - add requires line (bug#526492) for specific alsa-lib package
  - add requires line for dialog package (bug#561988)
  - added man page for alsaunmute (bug#526174)
  - updated alsa-info.sh script to 0.4.59


author: Jaroslav Kysela <jkysela@redhat.com> 1.0.18-2.rc3
changelog:
  - fixed /lib/alsa/init path for x86_64 (was /lib64/alsa/init)
  - added /etc/alsa/asound.state -> /etc/asound.state shift to post section
  - fix udev rules (ommited /dev/ prefix for the alsactl utility)
  - added --ignore option for alsactl (added also to upstream)


author: Jaroslav Kysela <jkysela@redhat.com> 1.0.18-1.rc3
changelog:
  - updated to 1.0.18rc3
  - updated alsa-info.sh script to 0.4.51
  - removed alsacard utility
  - removed salsa utility
  - changed alsaunmute to use 'alsactl init' now
  - updated ALSA udevd rules to use alsactl
  - moved /etc/alsa/asound.state back to /etc/asound.state


author: Matthias Saou <http://freshrpms.net/> 1.0.15-0.2.rc1
changelog:
  - Update License field.
  - Mark udev rule as config.
  - Use find_lang macro again to include translations (why was it removed?).


author: Martin Stransky <stransky@redhat.com> 1.0.15-0.1.rc1
changelog:
  - new upstream
  - moved saved volume settings to /var/lib (#293301)
  - patched alsactl for that (#255421)


author: Martin Stransky <stransky@redhat.com> 1.0.14-0.5.rc2
changelog:
  - added more funcionality to salsa (save/load sound settings),
    moved volume settings to /etc/alsa/


author: Martin Stransky <stransky@redhat.com> 1.0.14-0.4.rc2
changelog:
  - added support for large files
  - minor fix in alsaunmute
  - fixed #209239 - alsaconf: Stale language-dependent files
  - fixed #233765 - alsa-utils : unowned directories


author: Bill Nottingham <notting@redhat.com> 1.0.9-4
changelog:
  - migrate the alsa restore program to a udev rule, not a dev.d program
  - conflict with appropriate udev
  - move alsaunmute, alsacard to /bin


author: Bill Nottingham <notting@redhat.com> 1.0.8-4
changelog:
  - replace the dev.d script with a program that calls alsactl to
    restore the volume if there is a saved config, and just unmutes
    the playback channels if there isn't one (#132575)


author: Colin Walters <walters@redhat.com> 1.0.7-2
changelog:
  - New patch alsa-utils-1.0.7-alsa-launch.patch, adds the
    alsa-launch command.
  - New source file xinit-alsa-launch.sh, integrates alsa-launch
    into X startup
  - BR xorg-x11-devel


author: Thorsten Leemhuis <fedora[AT]leemhuis.info> 1.0.0-0.fdr.0.3.rc2
changelog:
  - Integrate Michael Schwendt's script alsamixer-saver; Still not quite sure if
    this script is the right way -- but mine didn't work...


author: Thorsten Leemhuis <fedora[AT]leemhuis.info> 1.0.0-0.fdr.0.2.rc2
changelog:
  - Update to 1.0.0rc2
  - added alsamixer Script -- stores settings on shutdown, does nothing on startup
  - some minor corrections in spec-file style


author: Tomas Janousek <tjanouse@redhat.com> - 7.6-50
changelog:
  - license tag update (and rebuild for BuildID, etc.)
  - include docs in the -libs subpackage, as it is the only one installed on most
    systems (and to comply with the license text)


author: Tomas Janousek <tjanouse@redhat.com> - 7.6-48
changelog:
  - dropped the hostname resolving patch
  - resolve the address given to hosts_ctl to hostname, if hostname not given
  - compare localhost and localhost.localdomain as the same
  - fixed a few compile warnings


author: Thomas Woerner <twoerner@redhat.com> 7.6-41
changelog:
  - moved devel libraries, headers and man pages into devel sub package (#193188)
  - new libs sub package for libraries
  - using BuildRequires instead of BuildPreReq


author: Nalin Dahyabhai <nalin@redhat.com> 7.6-32
changelog:
  - link libwrap.so against libnsl, on which it depends
  - add default (weak) versions of allow_severity and deny_severity to the shared
    library so that configure tests can find it correctly


author: Harald Hoyer <harald@redhat.de> 7.6-29
changelog:
  - shared library generated and added #75494
  - added security patch tcp_wrappers-7.6-sig.patch
  - compile and link with -fPIC -DPIC


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - permit hosts.{allow,deny} to be assembled from included components (#17795).
  - permit '*' and '?' wildcard matches on hostnames (#17847).


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.5-6
changelog:
  - Move libcimcClientXML.so from -devel to main package - it's needed for proper function
    Resolves: #1056407


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.1-1
changelog:
  - Update to sblim-sfcc-2.2.1
  - Fix Source field
  - Move documentation files from -devel to main package


author: Roman Rakus <rrakus@redhat.com> - 2.0.0-12
changelog:
  - Mark doc subpackage arch dependent. Docs are built depending on supported
    features, which are different across archs.
    Resolves: rhbz#987839


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0.0-7.gitd1c6db8
changelog:
  - Remove Obsoletes in the python-pillow-qt subpackage. Obsoletes isn't
    appropriate since qt support didn't exist in the previous python-pillow
    package so there's no reason to drag in python-pillow-qt when updating
    python-pillow.


author: Sandro Mani <manisandro@gmail.com> - 2.0.0-6.gitd1c6db8
changelog:
  - Update to latest git
  - python-pillow_quantization.patch now upstream
  - python-pillow_endianness.patch now upstream
  - Add subpackage for ImageQt module, with correct dependencies
  - Add PyQt4 and numpy BR (for generating docs / running tests)


author: Sandro Mani <manisandro@gmail.com> - 2.0.0-2.git2e88848
changelog:
  - Update to latest git
  - Remove python-pillow-disable-test.patch, gcc is now fixed
  - Add python-pillow_tempfile.patch to prevent a temporary file from getting packaged


author: Sandro Mani <manisandro@gmail.com> - 1.7.8-4.20130305git7866759
changelog:
  - Update to latest git snapshot
  - 0001-Cast-hash-table-values-to-unsigned-long.patch now upstream
  - Pillow-1.7.8-selftest.patch now upstream


author: Sandro Mani <manisandro@gmail.com> - 1.7.8-3.20130210gite09ff61
changelog:
  - Really remove -fno-strict-aliasing
  - Place comment on how to retreive source just above the Source0 line


author: Ray Strode <rstrode@redhat.com> 0.8-3
changelog:
  - change to new modular X dependencies
  - move configure to build instead of prep
  - use make install DESTDIR=$RPM_BUILD_ROOT instead of
    makeinstall macro


author: Kalev Lember <kalevlember@gmail.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - Drop the -Werror patch; applied upstream
  - Add glib-compile-schemas scriptlets
  - Relicensed from LGPLv2+ to GPLv2+


author: David Zeuthen <davidz@redhat.com> - 2.29.0-0.git20091202.el7
changelog:
  - Update to git snapshot that requires udisks instead of DeviceKit-disks
  - The UI has been completely revamped


author: David Zeuthen <davidz@redhat.com> - 2.28.0-1.el7
changelog:
  - Update to upstream release 2.28.0
  - Compared to previous releases, this release should whine less about SMART


author: Petr Kubat <pkubat@redhat.com> - 9.2.23-1
changelog:
  - update to 9.2.23 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-23.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.22-1
changelog:
  - update to 9.2.22 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-22.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.21-1
changelog:
  - update to 9.2.21 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-19.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.18-1
changelog:
  - update to 9.2.18 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-16.html


author: Pavel Kajaba <pkajaba@redhat.com> - 9.2.15-1
changelog:
  - update to 9.2.15 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-15.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.14-1
changelog:
  - update to 9.2.14 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-14.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.13-1
changelog:
  - update to 9.2.13 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-13.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.12-1
changelog:
  - update to 9.2.12 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-12.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.11-1
changelog:
  - update to 9.2.11 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-11.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.10-1
changelog:
  - update to 9.2.10 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-10.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-9.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-8.html
    (rhbz#1198672 rhbz#1198673)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.7-1
changelog:
  - update to 9.2.7 per release notes (#1065845)
    http://www.postgresql.org/docs/9.2/static/release-9-2-7.html


author: Jozef Mlich <jmlich@redhat.com> - 9.2.6-1
changelog:
  - Resolves #1038688
  - rebase to 9.2.6 see changes at
    http://www.postgresql.org/docs/9.2/static/release-9-2-6.html


author: Jozef Mlich <jmlich@redhat.com> - 9.2.5-2
changelog:
  - Resolves: #1019762 
  - additionally fixes rpmdiff filelist problem with
    /usr/share/doc/postgresql-9.2.5/html/bookindex.html.orig


author: Jozef Mlich <jmlich@redhat.com> - 9.2.5-1
changelog:
  - rebase postgresql to 9.2.5 #1019762 
    http://www.postgresql.org/docs/9.2/static/release-9-2-5.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-6
changelog:
  - disable aggressive loop optimizations for old codebase (#993532)
  - upgrade: stop old server in case of permissions problem (#896161)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-5
changelog:
  - %beta implies debug everywhere (also in upgrade part of build)
  - allow `rpmbuild -bi --short-circuit`
  - upgrade: setup previous (RHEL6) version as 8.14.3
  - upgrade: start old postgres with socket file in /var/run/postgresql


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-3
changelog:
  - add atomic operations support for aarch64 to preupgrade version also (#970661)
  - apply the forgotten man-page-day patch (#948933)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-2
changelog:
  - postgresql-setup: don't create whole path to server's data to make sure that
    the parent directory has correct permissions (#972425)


author: Tom Lane <tgl@redhat.com> 9.2.4-1
changelog:
  - Update to PostgreSQL 9.2.4, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-4.html
    including the fixes for CVE-2013-1899, CVE-2013-1900, CVE-2013-1901
  Resolves: #929223, #929255, #929328
  - fix build for aarch64 and ppc64p7


author: Tom Lane <tgl@redhat.com> 9.2.3-1
changelog:
  - Update to PostgreSQL 9.2.3, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-3.html
    including the fix for CVE-2013-0255
  Resolves: #908722
  - Make the package build with selinux option disabled
  Resolves: #894367
  - Include old version of pg_controldata in postgresql-upgrade subpackage
  Related: #896161


author: Tom Lane <tgl@redhat.com> 9.2.2-3
changelog:
  - Prevent creation of TCP socket during pg_upgrade regression test, so that
    concurrent RPM builds on the same machine won't fail
  Resolves: #891531
  - Make sure $PGDATA/pg_log/ gets the right SELinux label in postgresql-setup
  Resolves: #891547


author: Tom Lane <tgl@redhat.com> 9.2.2-1
changelog:
  - Update to PostgreSQL 9.2.2, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-2.html
  - Use new systemd install/uninstall trigger macros conditionally,
    so that package can still be installed on pre-F18 branches


author: Tom Lane <tgl@redhat.com> 9.2.1-1
changelog:
  - Update to PostgreSQL 9.2.1, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-1.html
    including a nasty data-loss bug
  - Adopt new systemd macros for server package install/uninstall triggers
  Resolves: #850277


author: Tom Lane <tgl@redhat.com> 9.2.0-1
changelog:
  - Update to PostgreSQL 9.2.0 (major version bump);
    in-place upgrade support now works from 9.1.x as the previous version
  - Add postgresql-plpython3 subpackage with PL/Python built against Python 3


author: Tom Lane <tgl@redhat.com> 9.1.5-1
changelog:
  - Update to PostgreSQL 9.1.5, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-5.html
    including the fixes for CVE-2012-3488, CVE-2012-3489


author: Tom Lane <tgl@redhat.com> 9.1.4-5
changelog:
  - Back-port upstream support for postmaster listening on multiple Unix sockets
  - Configure postmaster to create sockets in both /var/run/postgresql and /tmp;
    the former is now the default place for libpq to contact the postmaster.
  Resolves: #825448
  - Annotate postgresql.conf about not setting port number there
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 9.1.4-3
changelog:
  - Update code to use oom_score_adj not oom_adj, thereby suppressing
    whining in the kernel log
  - Add "legacy action" scripts to support "service postgresql initdb" and
    "service postgresql upgrade" in a now-approved fashion (requires a
    recent version of initscripts to work)
  Resolves: #800416


author: Tom Lane <tgl@redhat.com> 9.1.4-1
changelog:
  - Update to PostgreSQL 9.1.4, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-4.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #826606
  - Update previous version (embedded in postgresql-upgrade) to 9.0.8
    because fix in whole-row variable dumping could be needed for upgrades
  - Revert fix for bug #800416, per fedora-packaging discussion at
    http://lists.fedoraproject.org/pipermail/packaging/2012-April/008314.html
    "service postgresql initdb" is dead and will stay that way


author: Tom Lane <tgl@redhat.com> 9.1.3-3
changelog:
  - Fix postgresql-setup to rely on systemd to parse the unit file, instead
    of using ad-hoc code
  Resolves: #804290


author: Tom Lane <tgl@redhat.com> 9.1.3-2
changelog:
  - Fix postgresql-setup to look for unit file in /usr/lib and to ignore
    comments therein
  Resolves: #802835
  - Resurrect a now-mostly-dummy postgresql init script, so that people can
    keep on using "service postgresql initdb" if they wish
  Resolves: #800416


author: Tom Lane <tgl@redhat.com> 9.1.3-1
changelog:
  - Update to PostgreSQL 9.1.3, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-3.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #797918


author: Tom Lane <tgl@redhat.com> 9.1.2-2
changelog:
  - Make systemd unit file more user-friendly by resurrecting the old init
    script's checks for data directory presence and version match
  Resolves: #771496


author: Tom Lane <tgl@redhat.com> 9.1.2-1
changelog:
  - Update to PostgreSQL 9.1.2, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-2.html


author: Honza Horak <hhorak@redhat.com> 9.1.1-2
changelog:
  - Create a symlink of pg_regress instead of full copy;
    Don't strip symbols from regress libs
  Related: #729012


author: Tom Lane <tgl@redhat.com> 9.1.1-1
changelog:
  - Update to PostgreSQL 9.1.1, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-1.html
  - Enable build (but not test) of contrib/sepgsql
  - Clean up specfile build options so that turning options off works again


author: Tom Lane <tgl@redhat.com> 9.1.0-1
changelog:
  - Update to PostgreSQL 9.1.0 (major version bump);
    in-place upgrade support now works from 9.0.x as the previous version


author: Tom Lane <tgl@redhat.com> 9.0.4-1
changelog:
  - Update to PostgreSQL 9.0.4, for various fixes described at
    http://www.postgresql.org/docs/9.0/static/release-9-0-4.html
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines


author: Tom Lane <tgl@redhat.com> 9.0.3-2
changelog:
  - Remove filter-requires-perl-Pg.sh, which doesn't seem to be needed now that
    PyGreSQL has been split out; and our use of it isn't compatible with rpm 4.9
    anyway


author: Tom Lane <tgl@redhat.com> 9.0.3-1
changelog:
  - Update to PostgreSQL 9.0.3, for various fixes described at
    http://www.postgresql.org/docs/9.0/static/release-9-0-3.html
    including the fix for CVE-2010-4015
  Resolves: #674296


author: Tom Lane <tgl@redhat.com> 9.0.2-1
changelog:
  - Update to PostgreSQL 9.0.2 (major version bump)
  - Create infrastructure for in-place database upgrade using pg_upgrade
  Resolves: #398221


author: Tom Lane <tgl@redhat.com> 8.4.6-1
changelog:
  - Update to PostgreSQL 8.4.6, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  - Ensure we don't package any .gitignore files from the source tarball
  Related: #642210


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Related: #639371
  - Add -p "$pidfile" to initscript's status call to improve corner cases.
  Related: #561010


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 8.4.4-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #593032


author: Tom Lane <tgl@redhat.com> 8.4.3-1
changelog:
  - Update to PostgreSQL 8.4.3, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-3.html


author: Tom Lane <tgl@redhat.com> 8.4.2-5
changelog:
  - Latest version of systemtap needs the probes.o file to be built again
  Resolves: #557266
  - Provide script and instructions for building the documentation PDF


author: Tom Lane <tgl@redhat.com> 8.4.2-4
changelog:
  - Arrange for the postmaster, but not any of its child processes, to be run
    with oom_adj -17.  This compensates for the OOM killer not being smart about
    accounting for shared memory usage.


author: Tom Lane <tgl@redhat.com> 8.4.2-3
changelog:
  - Remove the postgresql-python and postgresql-tcl subpackages.  These files
    are now broken out as their own packages (PyGreSQL and tcl-pgtcl,
    respectively), to reflect the now longstanding split of upstream projects.
  Related: #452306, #452321


author: Tom Lane <tgl@redhat.com> 8.4.2-2
changelog:
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.2-1
changelog:
  - Update to PostgreSQL 8.4.2, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-2.html
    including two security issues
  Related: #546321
  Related: #547662
  - Use -N not the obsolete -n in useradd call
  Resolves: #495727
  - Clean up specfile to eliminate rpmlint gripes, mainly by removing
    no-longer-needed provisions for superseding rh-postgresql


author: Tom Lane <tgl@redhat.com> 8.4.1-1
changelog:
  - Update to PostgreSQL 8.4.1, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-1.html
    including two security issues
  Related: #522085
  Related: #522092


author: Tom "spot" Callaway <tcallawa@redhat.com> 8.4.0-2
changelog:
  - update License tag to MIT (PostgreSQL calls it "BSD", but it is MIT)
  - Note: This changes nothing from a license compatibility perspective.


author: Tom Lane <tgl@redhat.com> 8.4.0-1
changelog:
  - Update to PostgreSQL 8.4.0.  See release notes at
    http://www.postgresql.org/docs/8.4/static/release-8-4.html


author: Tom Lane <tgl@redhat.com> 8.3.7-1
changelog:
  - Update to PostgreSQL 8.3.7, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-7.html
    notably the fix for CVE-2009-0922


author: Tom Lane <tgl@redhat.com> 8.3.6-4
changelog:
  - Prevent dependent packages from needing to include sys/sdt.h
    (unintended side effect of previous patch)
  - Use -O1 on alpha, per report from Oliver Falk; -O2 tickles gcc bugs


author: Tom Lane <tgl@redhat.com> 8.3.6-1
changelog:
  - Update to PostgreSQL 8.3.6, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-6.html


author: Tom Lane <tgl@redhat.com> 8.3.5-1
changelog:
  - Update to PostgreSQL 8.3.5.
  - Improve display from init script's initdb action, per Michael Schwendt


author: Tom Lane <tgl@redhat.com> 8.3.3-2
changelog:
  - Install Pgtcl in /usr/lib/tcl$TCL_VERSION, not directly in /usr/lib.
    Needed because tcl 8.5 no longer puts /usr/lib into its package search path.
    NOTE: do not back-port this change into branches using pre-8.5 tcl, because
    /usr/lib/tcl8.4 had been a symlink to /usr/share/tcl8.4, and /usr/share
    is exactly where we must not put Pgtcl.
  Resolves: #228263


author: Tom Lane <tgl@redhat.com> 8.3.3-1
changelog:
  - Update to PostgreSQL 8.3.3.
  - Remove postgresql-prefer-ncurses.patch, no longer needed in recent
    Fedora releases because libtermcap is gone.


author: Tom Lane <tgl@redhat.com> 8.3.1-4
changelog:
  - Enable LDAP support
  Resolves: #445315
  - Use -Wl,--as-needed to suppress bogus dependencies for libraries that
    are really only needed by some of the subpackages


author: Tom Lane <tgl@redhat.com> 8.3.1-2
changelog:
  - Clean up cross-subpackage Requires: to ensure that updating any one
    subpackage brings in the matching versions of others.
  Resolves: #444271


author: Tom Lane <tgl@redhat.com> 8.3RC2-1
changelog:
  - Update to PostgreSQL 8.3RC2 (not waiting for 8.3.0 because Fedora 9 alpha
    should be 8.3-based not 8.2-based).
  - Update to pgtcl 1.6.2


author: Tom Lane <tgl@redhat.com> 8.2.6-1
changelog:
  - Update to PostgreSQL 8.2.6 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  - Make initscript and pam config files be installed unconditionally;
    seems new buildroots don't necessarily have those directories in place


author: Tom Lane <tgl@redhat.com> 8.2.4-5
changelog:
  - Use nicer solution for tzdata file substitution: upstream discussion
    concluded that hardwiring the path was better than a symlink after all.


author: Tom Lane <tgl@redhat.com> 8.2.4-4
changelog:
  - Use tzdata package's data files instead of private copy, so that
    postgresql-server need not be turned for routine timezone updates
  - Don't remove postgres user/group during RPM uninstall, per Fedora
    packaging guidelines
  - Seems we need an explicit BuildRequires on gawk now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 8.2.4-2
changelog:
  - Fix oversight in postgresql-test makefile: pg_regress isn't a shell script
    anymore.  Per upstream bug 3398.


author: Tom Lane <tgl@redhat.com> 8.2.1-2
changelog:
  - Split -pl subpackage into three new packages to reduce dependencies
    and track upstream project's packaging.


author: Tom Lane <tgl@redhat.com> 8.2.1-1
changelog:
  - Update to PostgreSQL 8.2.1
  - Update to pgtcl 1.5.3
  - Be sure we link to libncurses, not libtermcap which is disappearing in Fedora


author: Tom Lane <tgl@redhat.com> 8.2.0-1
changelog:
  - Update to PostgreSQL 8.2.0
  - Update to PyGreSQL 3.8.1
  - Fix chcon arguments in test/regress/Makefile
  Related: #201035
  - Adjust init script to not fool /etc/rc.d/rc
  Resolves: #161470
  - Change init script to not do initdb automatically, but require
    manual "service postgresql initdb" for safety.  Per upstream discussions.


author: Tom Lane <tgl@redhat.com> 8.1.4-1
changelog:
  - Update to PostgreSQL 8.1.4 (includes fixes for CVE-2006-2313, CVE-2006-2314;
    see bug #192173)
  - Update to PyGreSQL 3.8
  - Suppress noise from chcon, per bug #187744


author: Tom Lane <tgl@redhat.com> 8.1.3-1
changelog:
  - Update to PostgreSQL 8.1.3 (fixes bug #180617, CVE-2006-0553)
  - Update to jdbc driver build 405
  - Modify multilib header hack to not break non-RH arches, per bug #177564


author: Tom Lane <tgl@redhat.com> 8.1.2-1
changelog:
  - Update to PostgreSQL 8.1.2
  - Repair extraneous quote in pgtcl configure script ... odd that bash
    didn't use to spit up on this.


author: Tom Lane <tgl@redhat.com> 8.1.1-3
changelog:
  - fix pg_config.h for 64-bit and ppc platforms
  - update Makefile.regress (needs to --load-language=plpgsql)


author: Tom Lane <tgl@redhat.com> 8.1.1-1
changelog:
  - Update to PostgreSQL 8.1.1
  - Make pg_config.h architecture-independent for multilib installs;
    put the original pg_config.h into pg_config_$ARCH.h


author: Tom Lane <tgl@redhat.com> 8.1.0-1
changelog:
  - Update to PostgreSQL 8.1.0, PyGreSQL 3.7, and jdbc driver build 404
  - Fix PAM config file (must have account not only auth) (bug #167040)
  - Add BuildPrereq: libxslt-devel (bug #170141)
  - Sync with PGDG SRPM as much as feasible


author: Tom Lane <tgl@redhat.com> 8.0.4-1
changelog:
  - Update to PostgreSQL 8.0.4, PyGreSQL 3.6.2, and jdbc driver build 312
  - Adjust pgtcl link command to ensure it binds to correct libpq (bug #166665)
  - Remove obsolete Conflicts: against other python versions (bug #166754)
  - Add /etc/pam.d/postgresql (bug #167040)
  - Include contrib/xml2 in build (bug #167492)


author: Tom Lane <tgl@redhat.com> 8.0.3-1
changelog:
  - Update to PostgreSQL 8.0.3 (includes security and data-loss fixes; see
    bz#156727, CAN-2005-1409, CAN-2005-1410)
  - Update to jdbc driver build 311
  - Recreate postgres user after superseding an rh-postgresql install (bug #151911)
  - Ensure postgresql server is restarted if running during an upgrade


author: Tom Lane <tgl@redhat.com> 8.0.1-4
changelog:
  - Attach Obsoletes: declarations for rh-postgresql to subpackages (bz#144435)
  - Make Requires: and Prereq: package linkages specify release not only
    version, as per recent mailing list discussion.


author: Tom Lane <tgl@redhat.com> 8.0.1-2
changelog:
  - Repair improper error message in init script when PGVERSION doesn't match.
  - Arrange for auto update of version embedded in init script.


author: Tom Lane <tgl@redhat.com> 8.0.0-1
changelog:
  - Update to PostgreSQL 8.0.0, PyGreSQL 3.6.1, pgtcl 1.5.2,
    and jdbc driver build 309.
  - Extensive cleanout of obsolete cruft in patch set.
  - Regression tests are run during RPM build (NOTE: cannot build as root when
    this is enabled).
  - Postmaster stderr goes someplace useful, not /dev/null (bz#76503, #103767)
  - Make init script return a useful exit status (bz#80782)
  - Move docs' tutorial directory to %{_libdir}/pgsql/tutorial, since it
    includes .so files that surely do not belong under /usr/share.
  - Remove useless .sgml files from docs RPM (bz#134450)
  - Put regression tests under /usr/lib64 on 64-bit archs, since .so files
    are not architecture-independent.


author: Tom Lane <tgl@redhat.com> 7.4.6-3
changelog:
  - Update to PyGreSQL 3.6 (to fix bug #142711)
  - Adjust a few file permissions (bug #142431)
  - Assign %{_libdir}/pgsql to base package instead of -server (bug #74003)


author: Tom Lane <tgl@redhat.com> 7.4.6-1
changelog:
  - Update to PostgreSQL 7.4.6 (bugs 136947, 136949)
  - Make init script more paranoid about mkdir step of initializing a new
    database (bugs 136947, 136949)


author: Tom Lane <tgl@redhat.com> 7.4.5-4
changelog:
  - Remove contrib/oidjoins stuff from installed fileset; it's of no use
    to ordinary users and has a security issue (bugs 136300, 136301)
  - adjust chkconfig priority (bug 128852)


author: Tom Lane <tgl@redhat.com> 7.4.5-3
changelog:
  - Solve the stale lockfile problem (bugs 71295, 96981, 134090)
  - Use runuser instead of su for SELinux (bug 134588)


author: Tom Lane <tgl@redhat.com> 7.4.5-1
changelog:
  - Update to PostgreSQL 7.4.5.
  - Update JDBC jars to driver build 215.
  - Add Obsoletes: entries for rh-postgresql packages, per bug 129278.


author: Tom Lane <tgl@redhat.com> 7.4.3-3
changelog:
  - Undo ill-considered chkconfig change that causes server to start
    immediately upon install.  Mea culpa (bug 127552).


author: Tom Lane <tgl@redhat.com> 7.4.3-1
changelog:
  - Update to PostgreSQL 7.4.3.
  - Uninstalling server RPM stops postmaster first, per bug 114846.
  - Fix su commands to not assume PG user's shell is sh-like, per bug 124024.
  - Fix permissions on postgresql-python doc files, per bug 124822.
  - Minor postgresql.init improvements.


author: Tom Lane <tgl@redhat.com> 7.4.2-1
changelog:
  - Update to PostgreSQL 7.4.2; sync with community SRPM as much as possible.
  - Support PGOPTS from /etc/sysconfig/pgsql, per bug 111504.
  - Fix permissions on /etc/sysconfig/pgsql, per bug 115278.
  - SELinux patch in init file: always su </dev/null, per bug 117901.
  - Rebuilt


author: Lamar Owen <lowen@pari.edu>
changelog:
  - 7.4.1-1PGDG
  - Merge Sander Steffann's changes up to 7.4-0.5PGDG
  - Proper 7.4.1 JDBC jars this time.
  - Patch for no pl/python from Alvaro


author: David Jee <djee@redhat.com> 7.4-4
changelog:
  - Add PyGreSQL patch for deprecated column pg_type.typprtlen [Bug #111263]
  - Add headers patch which moves ecpg headers to /usr/include/ecpg
    [Bug #111195]


author: Lamar Owen <lowen@pari.edu> <lamar.owen@wgcr.org>
changelog:
  - 7.4-0.1PGDG
  - Development JDBC jars in addition to the 7.3 jars; will replace the
  - 7.3 jars once 7.4 official jars are released.
  - Changed to use the bzip2 source to save a little size.
  - Removed some commented out portions of the specfile.
  - Removed the 7.3.4 PDF docs.  Will replace with 7.4 PDF's once they
  - are ready.


author: Kaj J. Niemi <kajtzu@fi.basen.net> 7.4-0.1
changelog:
  - 7.4
  - Fixed Patch #1 (now rpm-pgsql-7.4.patch)
  - Fixed Patch #2 (now rpm-multilib-7.4.patch):
  - Patch #4 is unnecessary (upstream)
  - Fixed Patch #6 (now postgresql-7.4-src-tutorial.patch)
  - Added Patch #8 (postgresql-7.4-com_err.patch) as com_err()
    is provided by e2fsprogs and CPPFLAGS gets lost somewhere
    inside configure (bad macro?)
  - No 7.4 PDF docs available yet (Source #17)
  - PyGreSQL is separated from the upstream distribution but
    we include it as usual (Source #18)
  - Default to compiling libpq and ECPG as fully thread-safe

  - 7.4 Origin.  See previous spec files for previous history. Adapted
  - from Red Hat and PGDG's 7.3.4 RPM, directly descended from 
  - postgresql-7.3.4-2 as shipped in Fedora Core 1.


author: Daiki Ueno <dueno@redhat.com> - 2:20050219-22
changelog:
  - Drop buildroot preparation from %intall and %clean
  - Drop BuildRoot
  - Drop %defattr from %doc
  - Add comment to explain what the patch0 is for


author: Ding-Yi Chen <dchen at redhat dot com> - 2:20050219-7
changelog:
  - Fix Bug 468501 - There were file conflicts when cheeking the packages 
    to be installed in Fedora-10-beta-x86_6.


author: Bae, Sunghoon <plodder@kldp.org>
changelog:
  - removed ftpcount, ftpwho, ftpshut, proftpd man pages
    because proftpd has it 
  - changed man cache directory to /var/cache/man


author: KIM KyungHeon <tody@teoal.sarang.net>
changelog:
  - changed name of spec file
  - added some contents of spec (for relocatable)
  - modified korean description
  - fixed using 'makewhatis' command
  - fixed expression in %files tag


author: Dan Vrátil <dvratil@redhat.com> 1:0.0.71-1
changelog:
  - update to 0.0.71 - first official release
   - remove kscreen-console, it's now shipped in kscreen package


author: Dan Vrátil <dvratil@redhat.com> 0.9.0-1.20121228git
changelog:
  - Fixed versioning
   - Added instructions how to retrieve sources
   - Fixed URL
   - Removed 'rm -rf $RPM_BUILD_ROOT'


author: Peter Hutterer <peter.hutterer@redhat.com> 1.4.0-3
changelog:
  - Use global instead of define as per Packaging Guidelines.
  - Fix tab/spaces mixup.
  - Remove unused files from old keyboard driver.


author: Adam Jackson <ajax@redhat.com> 1.2.2-2
changelog:
  - kbd-1.2.2-no-sleeping-on-the-job.patch: Don't sleep(1) on VT switch.
    Makes startup faster and prettier.


author: Mike A. Harris <mharris@redhat.com> 1.0.1.3-1
changelog:
  - Updated xorg-x11-drv-keyboard to version 1.0.1.3 from X11R7.0
  - Added alpha/sparc/sparc64 to ExclusiveArch list (#176590)


author: Mike A. Harris <mharris@redhat.com> 1.0.1.2-1
changelog:
  - Updated xorg-x11-drv-keyboard to version 1.0.1.2 from X11R7 RC4
  - Removed 'x' suffix from manpage dirs to match RC4 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-0
changelog:
  - Initial spec file for keyboard input driver generated automatically
    by my xorg-driverspecgen script.


author: Kamil Dudka <kdudka@redhat.com> - 1:4.5.10-7
changelog:
  - fix specfile issues reported by the fedora-review script
  - do not use the AM_C_PROTOTYPES macro (removed in Automake 1.12)
  - do not require gets() to be declared


author: Kamil Dudka <kdudka@redhat.com> - 1:4.4.2-4
changelog:
  - make it possible to recognize an autofs filesystem by find
  - add a new find's option -xautofs to not descend directories on autofs
    filesystems


author: Miloslav Trmac <mitr@redhat.com> - 1:4.2.27-2
changelog:
  - Don't use uninitialized memory in -printf %Z (#174485)
  - Ship more documentation files
  - Clean up the spec file a bit


author: Tim Waugh <twaugh@redhat.com> 1:4.2.26-1
changelog:
  - One further arg_max fix for PPC.
  - Applied arg_max patch from upstream to fix test suite failures.
  - 4.2.26 (fixes bug #173817).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Removed "G" and "M" size qualifiers from man page, since support for
    those is not in the stable branch (bug #141987).


author: Tim Waugh <twaugh@redhat.com> 1:4.1.20-1
changelog:
  - Clarify find man page (bug #126098).
  - Apply changes by Robert Scheck <redhat@linuxnetz.de> (bug #126352):
    - Upgrade to 4.1.20 and some specfile cleanup


author: Preston Brown <pbrown@redhat.com>
changelog:
  - 4.1.5, FHS paths
  - remove mktemp,getshort patches (don't ship locate)
  - alpha, numblks patch no longer needed


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated updatedb cron script to not look for $TMPNAME.n (which was
    a relic anyway)
  - added -b parameters to all of the patches


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-14
changelog:
  - add DRBG CAVS driver and other necessary CAVS driver updates (#1172568)
  - allow ath reinitialization in FIPS mode
  - allow for auto-initialization of DRBG


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-13
changelog:
  - touch only urandom in the selftest and when /dev/random is
    unavailable for example by SELinux confinement
  - fix the RSA selftest key (p q swap)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-5
changelog:
  - add FIPS DRBG implementation
  - run the FIPS POST tests in shared library constructor
  - make it possible to run the test suite in the FIPS mode


author: Tomas Mraz <tmraz@redhat.com> 1.5.0-8
changelog:
  - fix multilib conflict in libgcrypt-config
  - fix minor memory leaks and other bugs found by Coverity scan


author: Tomas Mraz <tmraz@redhat.com> 1.4.6-3
changelog:
  - Make the FIPS-186-3 DSA implementation CAVS testable
  - add configurable source of RNG seed /etc/gcrypt/rngseed
    in the FIPS mode (#700388)


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-5
changelog:
  - use /dev/urandom for seeding in the FIPS mode
  - make the tests to pass in the FIPS mode also fixing
    the FIPS-186-3 DSA keygen


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-3
changelog:
  - drop the S390 build workaround as it is no longer needed
  - additional spec file cleanups for merge review (#226008)


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-1
changelog:
  - workaround for build on S390 (#548825)
  - spec file cleanups
  - upgrade to new minor upstream release


author: Tomas Mraz <tmraz@redhat.com> 1.4.4-1
changelog:
  - update to 1.4.4
  - do not abort when the fips mode kernel flag is inaccessible
    due to permissions (#470219)
  - hobble the library to drop the ECC support


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1
  - bump libgpgerror-devel requirement to 1.4, matching the requirement enforced
    by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-5
changelog:
  - add missing gawk buildrequirement
  - switch from explicitly specifying the /dev/random RNG to just verifying
    that the non-LGPL ones were disabled by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-4
changelog:
  - clarify license
  - force use of the linux /dev/random RNG, to avoid accidentally falling back
    to others which would affect the license of the resulting library


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-2
changelog:
  - remove file conflicts in libgcrypt-config by making the 64-bit version
    think the libraries are in /usr/lib (which is wrong, but which it also
    prunes from the suggest --libs output, so no harm done, hopefully)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.1.7
  - change license to LGPL.
  - include splint annotations patch.
  - install info pages.


author: Tim Waugh <twaugh@redhat.com> 1.73-3
changelog:
  - Conflict with docbook-utils if its custom stylesheet hasn't been
    updated to work with version 1.72 or later of this package.


author: Tim Waugh <twaugh@redhat.com> 1.64-1
changelog:
  - 1.64 (fixes #38095).
  - Fix up post/preun scripts so that we don't get duplicate entries with
    different versions on upgrade.


author: Tim Waugh <twaugh@redhat.com> 1.59-10
changelog:
  - Fix up Makefile (patch from SATO Satoru).
  - Change postun to preun.
  - Make preun conditional on remove rather than upgrade.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Change Requires(...) to PreReq at Preston's request.
  - PreReq at least openjade-1.3-12, so that its catalogs get installed.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't play so many macro games.
  - Change requirement on /usr/bin/install-catalog to sgml-common.
  - Be sure to own dsssl-stylesheets-1.59 directory.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Change group.
  - openjade not jade.
  - %{_tmppath}.
  - rm before install.
  - Change Copyright: to License:.
  - Remove Packager: line.


author: Tim Waugh <twaugh@redhat.com> 5.1-1
changelog:
  - Applied changes from Chen Lei (bug #592922):
    * Sun Aug 15 2010 Chen Lei <supercyper1@gmail.com> 5.1-1
    - 5.1.
    - Update spec to match latest guidelines w.r.t buildroot tag


author: Tim Waugh <twaugh@redhat.com> 3.1-34
changelog:
  - Moved 'make clean' to prep section and added comment about there
    being no upstream (bug #225706).


author: Tim Waugh <twaugh@redhat.com> 3.1-32
changelog:
  - Adjust license tag (bug #225706).
  - Fix missing prototype (bug #225706).
  - Install copy as symbolic links (bug #225706).


author: Tim Waugh <twaugh@redhat.com> 3.1-28
changelog:
  - Fixed build root (bug #225706).
  - Build with SMP flags (bug #225706).
  - Use dist in release tag (bug #225706).
  - Fixed macros in changelog (bug #225706).
  - Preserve timestamps when using install (bug #225706).


author: Miloslav Trmac <mitr@redhat.com> - 3.1-21
changelog:
  - Don't just delete the original file when destination and current directory
    are on different filesystems (#65548, #123069, patch by James Antill)
  - Fix return type of StripDelimiter in dos2unix-3.1-safeconv.patch (#136148)


author: Mike A. Harris <mharris@redhat.com> 3.1-20
changelog:
  - Added dos2unix-3.1-manpage-update-57507.patch to fix manpage (#57507)
  - Added dos2unix-3.1-preserve-file-modes.patch to properly preserve file
    permissions (#91331,55183,112710,132145)


author: Elliot Lee <sopwith@redhat.com> 3.1-15
changelog:
  - Remove build dependency on perl, since perl BuildRequires: dos2unix,
    and there's no good reason not to just use sed here.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix bug #57700 (segfault)
  - Add the mac2unix symlink recommended in README
  - Fix compiler warnings


author: Peter Soos <sp@osb.hu>
changelog:
  - Added Hungarian "Summary:" and "%description" 
  - Corrected the file and directory attributes to rebuild the package 
    under RedHat Linux 6.0


author: Marek Kasik <mkasik@redhat.com> - 3.22.0-1
changelog:
  - Update to 3.22.0
  - Remove/modify current patches when needed
  - Rely on file triggers
  - Resolves: #1384965


author: Felipe Borges <feborges@redhat.com> - 3.14.3-6
changelog:
  - Add minimize button to the fullscreen toolbar
  - Handle domain when looking for credentials
  - Store credentials for RDP
  - Fix RDP initialization with recent FreeRDP
  - Allow scalling of RDP sessions
  - Resolves: #1291275


author: Marek Kasik <mkasik@redhat.com> - 3.14.3-1
changelog:
  - Update to 3.14.3
  - Add translations update from translation team
  - Add translation fix from upstream
  - Remove unused patches
  - Resolves: #1174568


author: Marek Kasik <mkasik@redhat.com> - 3.8.2-9
changelog:
  - Use FreeRDP API in RDP plugin
  - Request RDP certificate verification if needed
  - Add available translations for new strings
  - Resolves: #1091765


author: Marek Kasik <mkasik@redhat.com> - 3.8.2-8
changelog:
  - Allow to customize desktop size for RDP protocol
  - Add available translations for new strings
  - Resolves: #862389


author: Christopher Aillon <caillon@redhat.com> - 3.0.0-2
changelog:
  - Kill off the remnants of GConf, this uses GSettings now.
  - Bring back ssh support (by building against vte3 instead of vte)


author: - Bastien Nocera <bnocera@redhat.com> - 0.2-1
changelog:
  - First version
  - Fix plenty of comments from Ray Strode as per review
  - Have work-around for BZ #253734


author: Jakub Martisko <jamartis@redhat.com> - 6.0-19
changelog:
  - rename patch unzip-6.0-nostrip.patch to unzip-6.0-configure.patch
  - make linking flags configurable from the specc file
  - set linking flags to use relro hardening
    Related: #1531116


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-16
changelog:
  - Added patch for build option "-Werror=format-security"
  - Added support of non-unicode non-latin charset
  - Fix print of non-ascii filenames
  - Fix troubles with symlinks for archives with many files
    Resolves: rhbz#1276746, rhbz#1286165, rhbz#1276744


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-15
changelog:
  - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
    Resolves: #1196134 #1196122 #1196126 #1196130


author: Tom Callaway <spot@fedoraproject.org> - 6.0-9
changelog:
  - Apply changes to match.c to sync with recmatch from util.c (from zip 3.0)
    This also resolves the license issue in that file.


author: Fedora Release Engineering <rel-eng@lists.fedoraproject.org>
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

  - Fix minor manpage spelling mistake
    Resolves: #675454


author: Karel Klic <kklic@redhat.com> - 6.0-2
changelog:
  - Fixed a buffer overflow (rhbz#532380, unzip-6.0-attribs-overflow.patch)
  - Generate debuginfos (rhbz#540220, unzip-6.0-nostrip.patch)


author: Karel Klic <kklic@redhat.com> - 6.0-1
changelog:
  - New upstream version
  - Compiled using `make generic_gcc` (includes asm)
  - Removed unzip542-rpmoptflags.patch, because RPM_OPT_FLAGS
    are provided using command line
  - Removed unzip-5.51-link-segv.patch, because the link file
    is not reopened in the current version
  - Removed unzip-5.51-link-segv2.patch, the bug was already fixed
    in open_outfile in 5.52
  - Removed unzip-5.52-toctou.patch (CAN-2005-2475), the vulnerability
    is fixed in the current version
  - Removed unzip-5.52-near-4GB.patch, unzip-5.52-near-4GB2.patch,
    unzip-5.52-4GB3.patch, and unzip-5.52-4GB_types.patch, because
    the current version supports large files
  - Removed unzip-5.52-long-filename.patch, the current version
    fixes the vulnerability by checking the length of command line
    arguments in unzip.c
  - Removed unzip-5.52-makefile.patch, because we no longer create
    the link manually
  - Removed unzip-5.52-open.patch, the current version uses umask.
  - Removed unzip-5.52-cve-2008-0888.patch, the current version
    fixes this vulnerability
  - Ported unzip-5.52-249057.patch to current version (unzip-6.0-close)


author: Ivana Varekova <varekova@redhat.com> 5.52-2
changelog:
  - fix bug 180078 - unzip -l causing error
  - fix CVE-2005-4667 - unzip long file name buffer overflow


author: Lon Hohberger <lhh@redhat.com> 5.50-30
changelog:
  - SECURITY Round 3: Fix up original patch (from 5.50-9) to fix
  ^V/ exploit, but still allow '-:', which the other patch (5.50-18)
  does not allow.  Never allow explicit writing to the root
  directory; force users to change there and extract it manually.


author: Lon Hohberger <lhh@redhat.com> 5.50-18
changelog:
  - SECURITY: Incorporate far cleaner patch from Ben Laurie
  <ben@algroup.co.uk> which also fixes ^V/ (quote-slash).
  Patch checks post-decode as opposed to inline as previous
  patch does.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 5.42
  - Don't strip binaries explicitly
  - build without assembly, it doesn't seem to increase performance
  - make it respect RPM_OPT_FLAGS, define _GNU_SOURCE
  - use %{_tmppath}
  - "License:" replaces "Copyright:"
  - Update URL
  - include zipgrep
  - COPYING doesn't exist anymore, include LICENSE instead


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-17
changelog:
  - Fix spurious failures of test_cookie_str_changed_mac
    Resolves: #1073950
  - Add support for IP addresses in subjectAltName
    Resolves: #1080142


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-14
changelog:
  - Don't assume that export ciphers are enabled in the test suite
    Resolves: #1048887
  - Let the kernel allocate free ports for use by the test suite
    Resolves: #1048887


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-12
changelog:
  - Fix occasional spurious failures in test_makefile_timeout_fires
    Resolves: #969077
  - Fix incorrect exception handling of SSL_CTX_new (manifesting in FIPS mode)
    Resolves: #879043
  - Add minimal SNI support, based on a patch by Sander Steffann
    <sander@steffann.nl>
    Resolves: #1038795
  - Use only ECC curves available in Fedora in the test suite
    Related: #1038813
  - Fix terminating test suite helper processes when running in Koji
    Related: #1038813
  - Run test suite in %check, don't ship it in the package.  Based on a patch by
    Matěj Cepl <mcepl@redhat.com>.
    Resolves: #1038813


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-10
changelog:
  - Replace expired certificates in the test suite
  - Fix running the test suite against recent OpenSSL versions


author: Garrett Holmstrom <gholms@fedoraproject.org> - 0.21.1-3
changelog:
  - Use the %__python macro for Python calls and locations
    Patch by Garrett Holmstrom <gholms@fedoraproject.org>


author: Miloslav Trmač <mitr@redhat.com> - 0.19.1-7
changelog:
  - Only send the selector in SSL HTTP requests.  Patch by James Bowes
    <jbowes@redhat.com>.
    Resolves: #491674


author: Miloslav Trmač <mitr@redhat.com> - 0.19.1-5
changelog:
  - Close the connection when an m2urllib2 response is closed
    Resolves: #460692
  - Work around conflicts between macros defined by gcc and swig


author: Miloslav Trmač <mitr@redhat.com> - 0.18.2-6
changelog:
  - Don't remove the User-Agent header from proxied requests
    Related: #448858
  - Update m2urllib2.py to work with Python 2.5


author: Miloslav Trmač <mitr@redhat.com> - 0.18-2
changelog:
  - Add missing Host: header to CONNECT requests (patch by Karl Grindley)
    Resolves: #239034
  - Fix License:


author: Miloslav Trmac <mitr@redhat.com> - 0.16-6
changelog:
  - Add support for SSL socket timeouts (based on a patch by James Bowes
    <jbowes@redhat.com>)
    Resolves: #219966


author: Miloslav Trmac <mitr@redhat.com> - 0.16-5
changelog:
  - Backport the urllib2 wrapper (code by James Bowes <jbowes@redhat.com>)
    Resolves: #210956
  - Add proxy support for https using CONNECT (original patch by James Bowes
    <jbowes@redhat.com>)
    Resolves: #210963


author: Miloslav Trmac <mitr@redhat.com> - 0.16-4
changelog:
  - Drop Obsoletes: openssl-python, openssl-python was last shipped in RHL 7.1
  - Fix interpreter paths in demos


author: Miloslav Trmac <mitr@redhat.com> - 0.13-3
changelog:
  - Fix invalid Python version comparisons in M2Crypto.httpslib (#156979)
  - Don't ship obsolete xmlrpclib.py.patch
  - Clean up the build process a bit


author: Nalin Dahyabhai <nalin@redhat.com> 0.09-1
changelog:
  - Update to version 0.09
  - Build using bundled copy of SWIG
  - Pick up additional CFLAGS and LDFLAGS from OpenSSL's pkgconfig data, if
    there is any
  - Handle const changes in new OpenSSL
  - Remove unnecessary ldconfig calls in post/postun


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 2.1-3
changelog:
  - Bump and rebuild for python 2.5 on devel.
  - Add BR: python-devel as it provides a header necessary for python modules
    on python 2.5.


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 2.1-2
changelog:
  - Remove pyver define as it's not needed with the automatic python(abi).
  - Stop ghosting .pyos.
  - Let automatic python compilation take care of creating pyos.
  - Rebuild for FC6.


author: Toshio Kuratomi <toshio@tiki-lounge.com> 0.99999b-2
changelog:
  - Add LICENSE File.
  - Make noarch.
  - Remove executable permissions from the modules copied to examples.


author: Toshio Kuratomi <toshio@tiki-lounge.com> 0.999-2
changelog:
  - Use python_sitelib macro to resolve build issues on x86_64.
  - %ghost *.pyo
  - Install ANSI.py, screen.py, and FSM.py into the examples.  These are intended
    to suplement pexpect eventually but they are currently much less robust and
    not installed to by default.  But they are needed by some examples.
  - Use __python macro in build/install for consistency.
  - Add --skip-build to the invocation of setup.py in install.


author: Panu Matilainen <pmatilai@welho.com> 0.999-0.fdr.1
changelog:
  - get rid of distrel munging, buildsys does that...
  - update to 0.999
  - update doc and example tarballs
  - fix build on python <> 2.2
  - use -O1 in install to generate .pyo files instead of manually creating the files
  - require python-abi = pyver to get dependencies right


author: Remi Collet <remi@fedoraproject.org> 1:1.9.4-14
changelog:
  - add explicit requires on all needed extensions (phpci)
  - fix pecl launcher (need ini to be parsed for some
    extenstions going to be build as shared, mainly simplexml)
  - add fix for new unpack format (php 5.5)


author: Remi Collet <remi@fedoraproject.org> 1:1.9.4-9
changelog:
  - move tests to /usr/share/tests/pear
  - move pkgxml to /var/lib/pear
  - remove XML_RPC
  - refresh installer


author: Remi Collet <remi@fedoraproject.org> 1:1.9.4-6
changelog:
  - fix Obsoletes version for XML_Util (#226295)
  - add link to upstream bug - please Provides LICENSE file
    https://pear.php.net/bugs/bug.php?id=19368
  - add link to upstream bug - Incorrect FSF address
    https://pear.php.net/bugs/bug.php?id=19367


author: Remi Collet <remi@fedoraproject.org> 1:1.9.4-5
changelog:
  - Update Archive_Tar to 1.3.9
  - add patch from RHEL (Joe Orton)
  - fix install-pear.php URL (with our patch for doc_dir applied)


author: Tim Jackson <rpm@timj.co.uk> 1:1.7.1-2
changelog:
  - Set cfg_dir to be %{_sysconfdir}/pear (and own it)
  - Update install-pear.php script
  - Add %pear_cfgdir and %pear_wwwdir macros


author: Remi Collet <Fedora@FamilleCollet.com> 1:1.6.2-1
changelog:
  - update to 1.6.2
  - remove patches merged upstream
  - Fix : "pear install" hangs on non default channel (#283401)


author: Joe Orton <jorton@redhat.com> 1:1.4.11-3
changelog:
  - use BuildArch not BuildArchitectures (#226925)
  - fix to use preferred BuildRoot (#226925)
  - strip more buildroot-relative paths from *.reg
  - force correct gpg path in default pear.conf


author: Joe Orton <jorton@redhat.com> 1:1.4.9-2
changelog:
  - update to 1.4.9 (thanks to Remi Collet, #183359)
  - package /usr/share/pear/.pkgxml (#190252)
  - update to XML_RPC-1.4.8
  - bundle the v3.0 LICENSE file


author: Peter Jones <pjones@redhat.com> - 36-11
changelog:
  - Fix device probing with no matching probes where HD() will work
    Resolves: rhbz#1613698
  - Detect partitiond md devices correctly
    Resolves: rhbz#1602414
    Resolves: rhbz#1613370


author: Peter Jones <pjones@redhat.com> - 36-10
changelog:
  - Work around platform ACPI PCI(e) root drivers that don't fill in the
    "driver" symlink in sysfs.
    Resolves: rhbz#1614944


author: Peter Jones <pjones@redhat.com> - 36-6
changelog:
  - Fix device path generation for block devices on nonstandard device path
    roots.
    Related: rhbz#1558937
    Resolves: rhbz#1591853


author: Peter Jones <pjones@redhat.com> - 0.10-1
changelog:
  - Update package to 0.10.
  - Fixes a build error due to different cflags in the builders vs updstream
    makefile.


author: Peter Jones <pjones@redhat.com> - 0.6-1
changelog:
  - Update package to 0.6
  - fixes to documentation from lersek
  - more validation of uefi guids
  - use .xz for archives


author: Paul P. Komkoff Jr <i@stingr.net> - 0.0.33-0.1.svn7211
changelog:
  - grab latest upstream changes and fixes, along with new version number
  - do not mess with bundled nfnetlink.h, use <linux/netfilter/nfnetlink.h>


author: Steve Grubb <sgrubb@redhat.com> 0.7.5-2
changelog:
  - resolves: #1185610 - libcap-ng: update caps table for newer kernels
  - Fix a leaked FD in upstream code


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u252-b03.
  - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u252-b01.
  - Switch to EA mode.
  - Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change
  - Remove local copies of JDK-8231991 & JDK-8234107 as replaced by upstream versions.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b08.
  - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions.
  - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-1
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b07.
  - Switch to GA mode for final release.
  - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b05.
  - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
  - Revise b05 snapshot to include JDK-8236178.
  - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
  - Resolves: rhbz#1785753


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5
changelog:
  - Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4
changelog:
  - Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve.
  - Regenerate source tarball using the updated script and add the -'4curve' suffix.
  - Resolves: rhbz#1746874


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3
changelog:
  - Mark net.properties as a config file (based on Fedora patch by James Cassell)
  - Resolves: rhbz#1710928


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b09.
  - Switch to GA mode for final release.
  - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
  - Update version logic to handle -shenandoah* tag suffix.
  - Resolves: rhbz#1737109


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b05.
  - Drop upstreamed patch JDK-8141570/PR3548.
  - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
  - Resolves: rhbz#1737109


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b01.
  - Switch to EA mode.
  - Drop JDK-8210761/RH1632174 as now upstream.
  - Resolves: rhbz#1498932


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2
changelog:
  - Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b08.
  - Adjust PR3083/RH134640 to apply after JDK-8182999
  - Resolves: rhbz#1724452


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-2
changelog:
  - Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
  - Don't perform a bootcycle build for the debug variant build.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b04.
  - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1
changelog:
  - Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately.
  - Drop unused use_shenandoah_hotspot variable.
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b03.
  - Set milestone to "ea" as this is not the final release.
  - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u.
  - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes.
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b02.
  - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100).
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b01.
  - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575.
  - Drop 8171000, 8197546 & PR3634 as applied upstream.
  - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1
changelog:
  - Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions
  - Yet another cast to resolve s390 ambiguity in call to log2_intptr
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1
changelog:
  - Update to aarch64-shenandoah-jdk8u212-b02.
  - Remove patches included upstream
    - JDK-8197429/PR3546/RH153662{2,3}
    - JDK-8184309/PR3596
    - JDK-8210647/RH1632174
    - JDK-8029661/PR3642/RH1477159
  - Re-generate patches
    - JDK-8203030
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-1
changelog:
  - Update to aarch64-shenandoah-jdk8u202-b08.
  - Remove patches included upstream
    - JDK-8211387/PR3559
    - JDK-8207057/PR3613
    - JDK-8165852/PR3468
    - JDK-8073139/PR1758/RH1191652
    - JDK-8044235
    - JDK-8172850/RH1640127
    - JDK-8209639/RH1640127
    - JDK-8131048/PR3574/RH1498936
    - JDK-8164920/PR3574/RH1498936
  - Re-generate patches
    - JDK-8210647/RH1632174
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-1
changelog:
  - Update to aarch64-shenandoah-jdk8u201-b13.
  - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream.
  - Resolves: rhbz#1693468


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-5
changelog:
  - Update patch for RH1566890.
    - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
      rh1566890-CVE_2018_3639-speculative_store_bypass.patch
    - Added dependent patch,
      rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
  - Resolves: rhbz#1693468


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-3
changelog:
  - Sync SystemTap & desktop files with upstream IcedTea release using new script
  - Resolves: rhbz#1434241


author: Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2
changelog:
  - Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
  - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1
changelog:
  - Add port of 8189170 to AArch64 which is missing from upstream 8u version.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1
changelog:
  - Update to aarch64-shenandoah-jdk8u192-b12.
  - Remove patches included upstream
    - JDK-8031668/PR2842
    - JDK-8148351/PR2842
    - JDK-6260348/PR3066
    - JDK-8061305/PR3335/RH1423421
    - JDK-8188030/PR3459/RH1484079
    - JDK-8205104/PR3539/RH1548475
    - JDK-8185723/PR3553
    - JDK-8186461/PR3557
    - JDK-8201509/PR3579
    - JDK-8075942/PR3602
    - JDK-8203182/PR3603
    - JDK-8206406/PR3610/RH1597825
    - JDK-8206425
    - JDK-8036003
    - JDK-8201495/PR2415
    - JDK-8150954/PR2866/RH1176206
  - Re-generate patches (mostly due to upstream build changes)
    - JDK-8073139/PR1758/RH1191652
    - JDK-8143245/PR3548 (due to JDK-8202600)
    - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
    - JDK-8199936/PR3533
    - JDK-8199936/PR3591
    - JDK-8207057/PR3613
    - JDK-8210761/RH1632174 (due to JDK-8207402)
    - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
    - PR3593 (due to JDK-8081202)
    - RH1566890/CVE-2018-3639 (due to JDK-8189170)
    - RH1649664 (due to JDK-8196516)
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-2
changelog:
  - Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
  - Resolves: rhbz#1498936


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b14.
  - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-1
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b13.
  - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
  - Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-15
changelog:
  - Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
  - Resolves: rhbz#1633817


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-13
changelog:
  - Add backport of JDK-8029661 which adds TLSv1.2 support to the PKCS11 provider.
  - Resolves: rhbz#1477159


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-11
changelog:
  - Renamed all patches to new convention
  -   bug1-bug2-..-bugN-XY-lowercase_comment_suffix_or_jdkpart.patch
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9
changelog:
  - Note why PR1834/RH1022017 is not suitable to go upstream in its current form.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9
changelog:
  - Fix patch organisation in the spec file:
  -   * Move ECC patches back to upstreamable section
  -   * Move system cacerts patches to upstreamable section
  -   * Merge "Local fixes" and "RPM fixes" which amount to the same thing
  -   * Move system libpng & lcms patches back to 8u upstreamable section
  -   * Make it clearer that "Non-OpenJDK fixes" is currently empty
  - Resolves: rhbz#1633817


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-8
changelog:
  - added Patch583 jdk8172850-rh1640127-01-register_allocator_crash.patch
  - added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch
  - Resolves: rhbz#1633817


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-7
changelog:
  - Add patch jdk8210425-rh1632174-03-compile_with_o2_and_ffp_contract_off_as_for_fdlibm_zero.patch:
    - Annother fix for optimization gaps (annocheck issues)
    - Zero 8u version fix was missing. Hence, only shows up on Zero arches.
  - Resolves: rhbz#1633817


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-6
changelog:
  - Add fixes for optimization gaps (annocheck issues):
    - 8210761: libjsig is being compiled without optimization
    - 8210647: libsaproc is being compiled without optimization
    - 8210416: [linux] Poor StrictMath performance due to non-optimized compilation
    - 8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization
               8u upstream and aarch64/jdk8u upstream versions.
  - Resolves: rhbz#1633817


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-5
changelog:
  - Removed patch, rh1214835.patch, since it's invalid:
    See https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2304#c3
  - Resolves: rhbz#1633817


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-4
changelog:
  - Update(s) from upstreamed patches:
    - jdk8036003-add_with_native_debug_symbols_configure_flag.patch
    - jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch =>
      jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch
      Deleted rh1176206-root.patch as thats no longer needed with
      upstream 8150954.
    - 8207057-pr3613-hotspot-assembler-debuginfo.patch =>
      jdk8207057-pr3613-no_debug_info_for_assembler_files_hotspot.patch and
      jdk8207057-pr3613-no_debug_info_for_assembler_files_root.patch. From JDK 8u
      backport.
  - Use --with-native-debug-symbols=internal which JDK-8036003 adds.
  - Remove comment for make invocation since it's no longer valid.
    --with-native-debug-symbols=internal will do everything we need.
  - Resolves: rhbz#1633817


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-3
changelog:
  - cups moved to headful package
  - enabled gtk2 in headful package (RH1598152)
  - Resolves: rhbz#1633817


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-2
changelog:
  - made rhpkg and srpm or rebuild working on fedora again
  - cosmetic changes - using macros where possible
  - fixed issues in desktop files (missing vendor, unexpandedmacros, missing information)
  - README.src renamed to README.md
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b10.
  - Drop 8146115/PR3508/RH1463098 applied upstream.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0
changelog:
  - Update to aarch64-shenandoah-jdk8u181-b16.
  - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream.
  - Resolves: rhbz#1633822


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0
changelog:
  - Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
  - Update to aarch64-shenandoah-jdk8u181-b15.
  - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
  - Move buildver to where it should be in the OpenJDK version.
  - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
  - Update pr3539-rh1548475.patch to apply after 8187045.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13
changelog:
  - Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
  - Remove 8187577/PR3578 now applied upstream.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-6.b04
changelog:
  - Add "8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage"
  - Resolves: rhbz#1463098


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-5.b04
changelog:
  - Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
  - Resolves: rhbz#1597825


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04
changelog:
  - Backport "8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails"
  - Resolves: rhbz#1568033


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04
changelog:
  - Backport "8075942, PR3602: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo"
  - Resolves: rhbz#1582032


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-3.b04
changelog:
  - Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b03
changelog:
  - Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
  - Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
  - Resolves: rhbz#1594249


author: Jiri Vanek <jvanek@redhat.com> - 11:1.8.0.172-10.b11
changelog:
  - jsa files changed to 444 to pass rpm verification
  - Fix reg-ex for filtering private libraries' provides/requires.
  - Resolves: rhbz#1573700


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11
changelog:
  - Add additional fix (PR3601) to fix -Wreturn-type failures introduced by 8061651
  - Resolves: rhbz#1573700


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11
changelog:
  - Bring in PR3519 from IcedTea 3.7.0 to fix remaining -Wreturn-type failure on AArch64.
  - Resolves: rhbz#1573700


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11
changelog:
  - Sync with IcedTea 3.8.0 patches to use -Wreturn-type.
  - Add backports of 8141570, 8143245, 8197981 & 8062808.
  - Drop pr3458-rh1540242-zero.patch which is covered by 8143245.
  - Resolves: rhbz#1573700


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-6.b11
changelog:
  - Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags.
  - Remove duplicate -fstack-protector-strong; it is provided by the RHEL cflags.
  - Resolves: rhbz#1573700


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11
changelog:
  - Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
  - Resolves: rhbz#1567204


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11
changelog:
  - Fix a number of bad bug identifiers (PR3546 should be PR3578, PR3456 should be PR3546)
  - Resolves: rhbz#1573700


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-4.b11
changelog:
  - Update Shenandoah tarball to include 2018-05-15 merge.
  - Split PR3458/RH1540242 fix into AArch64 & Zero sections, so former can be skipped on Shenandoah builds.
  - Drop PR3573 patch applied upstream.
  - Restrict 8187577 fix to non-Shenandoah builds, as it's included in the new tarball.
  - Resolves: rhbz#1573700


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-3.b11
changelog:
  - Sync with IcedTea 3.8.0.
  - Label architecture-specific fixes with architecture concerned
  - x86: S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations (-mstackrealign workaround)
  - PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
  - 8171000, PR3542, RH1402819: Robot.createScreenCapture() crashes in wayland mode
  - 8197546, PR3542, RH1402819: Fix for 8171000 breaks Solaris + Linux builds
  - 8185723, PR3553: Zero: segfaults on Power PC 32-bit
  - 8186461, PR3557: Zero's atomic_copy64() should use SPE instructions on linux-powerpcspe
  - PR3559: Use ldrexd for atomic reads on ARMv7.
  - 8187577, PR3578: JVM crash during gc doing concurrent marking
  - 8201509, PR3579: Zero: S390 31bit atomic_copy64 inline assembler is wrong
  - 8165489, PR3589: Missing G1 barrier in Unsafe_GetObjectVolatile
  - PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code
  - 8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
  - Resolves: rhbz#1573700


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-9.b12
changelog:
  - Update to aarch64-jdk8u171-b12 and aarch64-shenandoah-jdk8u171-b12.
  - Remove patch for 8200556/PR3566 as applied upstream.
  - Resolves: rhbz#1573700


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10
changelog:
  - Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-6.b10
changelog:
  - Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-4.b10
changelog:
  - Cleanup from previous commit.
  - Remove unused upstream patch 8167200.hotspotAarch64.patch.
  - Resolves: rhbz#1559766
  - Resolves: rhbz#1536623


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-3.b10
changelog:
  - Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-1.b10
changelog:
  - Bump release for RHEL 7.6 now branch is available.
  - Resolves: rhbz#1538772
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-0.b12
changelog:
  - Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
  - Remove upstreamed patches for 8181055/PR3394/RH1448880,
  -  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
  -  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
  -  8181810/PR3466/RH1498319.
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b13
changelog:
  - Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12
changelog:
  - Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
  - Resolves: rhbz#1528233


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-1.b12
changelog:
  - Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
  - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
    8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
    8175887 and 8180048 (RH1449870).(mbalao)
  - drop more of usptreamed patches 565,566,567,568
    ( 8184673-pr3475-rh1487266.patch  8191840-pr3503-rh1512647.patch  8191137-pr3503-rh1512647.patch 8190258-pr3499-tzdata2017c.patch)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16
changelog:
  - Backport 8191137 and add updates to the translations (8191840 in OpenJDK 7)
  - Resolves: rhbz#1512647


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16
changelog:
  - Update to tzdata2017c (8190258/PR3499) to resolve TCK failure due to mismatch with system version.
  - Resolves: rhbz#1508017


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16
changelog:
  - Update to aarch64-jdk8u152-b16 and aarch64-shenandoah-jdk8u152-b16.
  - Update 8145913/PR3466/RH1498309 patch following upstream addition of 8152172 (AES for PPC)
  - Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
  - Remove upstreamed patches for 8153711/PR3313/RH1284948, 8162384/PR3122/RH1358661, 8173941/PR3226,
  -    8175813/PR3394/RH1448880, 8175887/PR3415, 8146086/PR3439/RH1478402, 8180048/PR3411/RH1449870 and
  -    8164293/PR3412/RH1459641
  - Resolves: rhbz#1508017


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-5.b13
changelog:
  - Update to aarch64-jdk8u151-b13 and aarch64-shenandoah-jdk8u151-b13.
  - Drop upstreamed patch for 8075484.
  - Resolves: rhbz#1508017


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12
changelog:
  - Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
  - Resolves: rhbz#1490260


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12
changelog:
  - Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
  - Resolves: rhbz#1499207


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-2.b12
changelog:
  - repack policies adapted to new counts and paths
  - note that also c-j-c is needed to make this apply in next update
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
  - 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - Update to aarch64-jdk8u151-b12 and aarch64-shenandoah-jdk8u151-b12.
  - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
  - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028).
  - Update RH1191652 (root) and PR2842 to accomodate 8151841 (GCC 6 support).
  - Update PR2964/RH1337583 to accomodate 8171319 (keytool warning output)
  - Update RH1163501 to accomodate 8181048 (crypto refactoring)
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01
changelog:
  - Reverted completely unnecessary patch addition which broke the RPM build.
  - Resolves: rhbz#1484079


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01
changelog:
  - Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01
changelog:
  - Switch to IBM-supplied Montgomery backport and add remaining ppc64 fixes & CFF fix
  - Resolves: rhbz#1498309
  - Resolves: rhbz#1498319
  - Resolves: rhbz#1498320
  - Resolves: rhbz#1498321
  - Resolves: rhbz#1484079


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-1.b01
changelog:
  - Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
  - Exclude 8175887 from Shenandoah builds as it has been included in that repo.
  - Resolves: rhbz#1477855


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16
changelog:
  - Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
  - Revert change to remove-intree-libraries.sh following backout of 8173207
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15
changelog:
  - Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
  - Update location of OpenJDK system library source code in remove-intree-libraries.sh
  - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
  - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-12.b12
changelog:
  - Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
  - Resolves: rhbz#1466509


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-11.b12
changelog:
  - make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
  - 1183793 is missing blocker
  - Resolves: rhbz#1448880


author: Zhengyu Gu <zgu@redhat.com> - 1:1.8.0.131-10.b12
changelog:
  - Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
  - Resolves: rhbz#1448880


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-8.b12
changelog:
  - Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
  - Resolves: rhbz#1319875


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-6.b12
changelog:
  - Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix
  - Resolves: rhbz#1443417


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b11
changelog:
  - Rename SystemTap tapset tarball to avoid conflicts with previous version.
  - Resolves: rhbz#1438514


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b11
changelog:
  - Update tapset tarball to include the better error handling in PR3348
  - http://icedtea.classpath.org/hg/icedtea8/rev/14fc67a5d5a3
  - Resolves: rhbz#1438514


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11
changelog:
  - Update to aarch64-jdk8u131-b11 and aarch64-shenandoah-jdk8u131-b11.
  - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
  - Update generate_source_tarball.sh to remove patch remnants.
  - Cleanup Shenandoah tarball referencing and document how to create it.
  - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing)
  - Resolves: rhbz#1438751


