# changelog

author: - Andreas Schneider <asn@redhat.com> - 2:4.0.0-160.rc3
changelog:
  - resolves: #867893 - Move /var/log/samba to samba-common package for
                        winbind which requires it.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.0-154.rc3
changelog:
  - Update to 4.0.0rc3.
  - resolves: #805562 - Unable to share print queues.
  - resolves: #863388 - Unable to reload smbd configuration with systemctl.


author: Ville Skyttä <ville.skytta@iki.fi> - 2:3.6.6-92
changelog:
  - Call ldconfig at libwbclient and -winbind-clients post(un)install time.
  - Fix empty localization files, use %find_lang to find and %lang-mark them.
  - Escape macros in %changelog.
  - Fix source tarball URL.


author: Andreas Schneider <asn@redhat.com> - 2:3.6.5-88
changelog:
  - Move tmpfiles.d config to common package as it is needed for smbd and
    winbind.
  - Make sure tmpfiles get created after installation.


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.3-60
changelog:
  - Update to 3.5.3
  - Make sure nmb and smb initscripts return LSB compliant return codes
  - Fix winbind over ipv6


author: Simo Sorce <ssorce@redhat.com> - 3.4.2-47
changelog:
  - Spec file cleanup
  - Fix sources upstream location
  - Remove conditionals to build talloc and tdb, now they are completely indepent
    packages in Fedora
  - Add defattr() where missing
  - Turn all tabs into 4 spaces
  - Remove unused migration script
  - Split winbind-clients out of main winbind package to avoid multilib to include
    huge packages for no good reason


author: Guenther Deschner <gdeschner@redhat.com> - 3.4.0-0.41
changelog:
  - Fix Bug #6551 (vuid and tid not set in sessionsetupX and tconX)
  - Specify required talloc and tdb version for BuildRequires


author: Simo Sorce <ssorce@redhat.com> - 3.3.2-0.33
changelog:
  - Fix nmbd init script nmbd reload was causing smbd not nmbd to reload the
    configuration
  - Fix upstream bug 6224, nmbd was waiting 5+ minutes before running elections on
    startup, causing your own machine not to show up in the network for 5 minutes
    if it was the only client in that workgroup (fix committed upstream)


author: Simo Sorce <ssorce@redhat.com> - 3.3.1-0.29
changelog:
  - Make the talloc and ldb packages optionsl and disable their build within
    the samba3 package, they are now built as part of the samba4 package
    until they will both be released as independent packages.


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.0-0.25
changelog:
  - Update to 3.3.0 final
  - Add upstream fix for ldap connections to AD (Bug #6073)
  - Remove bogus perl dependencies (resolves: #473051)


author: Simo Sorce <ssorce@redhat.com> - 3.2.0-0.pre1.3
changelog:
  - Try to fix GCC 4.3 build
  - Add --with-dnsupdate flag and also make sure other flags are required just to
    be sure the features are included without relying on autodetection to be
    successful


author: Simo Sorce <ssorce@redhat.com> 3.2.0-0.pre1.fc9
changelog:
  - New major relase, minor switched from 0 to 2
  - License change, the code is now GPLv3+
  - Numerous improvements and bugfixes included
  - package libsmbsharemodes too
  - remove smbldap-tools as they are already packaged separately in Fedora
  - Fix bug 245506


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - update to 3.0.25a as it contains many fixes
  - add a fix for pam_smbpass made by Günther but committed upstream after 3.0.25a was cut.


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - fixes in the spec file
  - moved to 3.0.25rc1
  - addedd patches (merged upstream so they will be removed in 3.0.25rc2)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-12.fc7
changelog:
  - fixes in smb.conf
  - advice in smb.conf to put scripts in /var/lib/samba/scripts
  - create /var/lib/samba/scripts so that selinux can be happy
  - fix Vista problems with msdfs errors


author: Guenther Deschner <gdeschner@redhat.com> 3.0.24-11.fc7
changelog:
  - enable PAM and NSS dlopen checks during build
  - fix unresolved symbols in libnss_wins.so (bug #198230)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-10.fc7
changelog:
  - set passdb backend = tdbsam as default in smb.conf
  - remove samba-docs dependency from swat, that was a mistake
  - put back COPYING and other files in samba-common
  - put examples in samba not in samba-docs
  - leave only stuff under docs/ in samba-doc


author: Simo Sorce <ssorce@redhat.com> 3.0.24-9.fc7
changelog:
  - integrate most of merge review proposed changes (bug #226387)
  - remove libsmbclient-devel-static and simply stop shipping the
    static version of smbclient as it seem this is deprecated and
    actively discouraged


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - remove patch for bug 106483 as it introduces a new bug that prevents
    the use of a credentials file with the smbclient tar command
  - move the samba private dir from being the same as the config dir
    (/etc/samba) to /var/lib/samba/private


author: Simo Sorce <ssorce@redhat.com> 3.0.24-7.fc7
changelog:
  - make winbindd start earlier in the init process, at the same time
    ypbind is usually started as well
  - add a sepoarate init script for nmbd called nmb, we need to be able
    to restart nmbd without dropping al smbd connections unnecessarily


author: Simo Sorce <ssorce@redhat.com> 3.0.24-6.fc7
changelog:
  - do not put comments inline on smb.conf options, they may be read
    as part of the value (for example log files names)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-5.fc7
changelog:
  - actually use the correct samba.pamd file not the old samba.pamd.stack file
  - fix logifles and use upstream convention of log.* instead of our old *.log
    Winbindd creates its own log.* files anyway so we will be more consistent
  - install our own (enhanced) default smb.conf file
  - Fix pam_winbind acct_mgmt PAM result code (prevented local users from
    logging in). Fixed by Guenther.
  - move some files from samba to samba-common as they are used with winbindd
    as well


author: Simo Sorce <ssorce@redhat.com> 3.0.24-3.fc7
changelog:
  - Directories reorg, tdb files must go to /var/lib, not
    to /var/cache, add migration script in %post common
  - Split out libsmbclient, devel and doc packages
  - Remove libmsrpc.[h|so] for now as they are not really usable
  - Remove kill -HUP from rotate, samba use -HUP for other things
    noit to reopen logs


author: Simo Sorce <ssorce@redhat.com> 3.0.24-2.fc7
changelog:
  - New upstream release
  - Fix packaging issue wrt idmap modules used only by smbd
  - Addedd Vista Patchset for compatibility with Windows Vista
  - Change default of "msdfs root", it seem to cause problems with
    some applications and it has been proposed to change it for
    3.0.25 upstream


author: Jay Fenlason <fenlason@redhat.com> 3.0.23a-3
changelog:
  - Fix the -logfiles patch to close
    bz#199607 Samba compiled with wrong log path.
    bz#199206 smb.conf has incorrect log file path


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-2
changelog:
  - New upstream release.
  - Use modified filter-requires-samba.sh from packaging/RHEL/setup/
    to get rid of bogus dependency on perl(Unicode::MapUTF8)
  - Update the -logfiles and -smb.conf patches to work with 3.0.23


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-0.RC3
changelog:
  - New upstream RC release.
  - Update the -logfiles, and -passwd patches for
    3.0.23rc3
  - Include the change to smb.init from Bastien Nocera <bnocera@redhat.com>)
    to close
    bz#182560 Wrong retval for initscript when smbd is dead
  - Update this spec file to build with 3.0.23rc3
  - Remove the -install.mount.smbfs patch, since we don't install
    mount.smbfs any more.


author: Jay Fenlason <fenlason@redhat.com> 3.0.21b-2
changelog:
  - New upstream version.
  - Since the rawhide kernel has dropped support for smbfs, remove smbmount
    and smbumount.  Users should use mount.cifs instead.
  - Upgrade to 3.0.21b


author: Jay Fenlason <fenlason@redhat.com> 3.0.20b-2
changelog:
  - turn on -DLDAP_DEPRECATED to allow access to ldap functions that have
    been depricated in 2.3.11, but which don't have well-documented
    replacements (ldap_simple_bind_s(), for example).
  - Upgrade to 3.0.20b, which includes all the previous upstream patches.
  - Updated the -warnings patch for 3.0.20a.
  - Include  --with-shared-modules=idmap_ad,idmap_rid to close
    bz#156810 --with-shared-modules=idmap_ad,idmap_rid
  - Include the new samba.pamd from Tomas Mraz (tmraz@redhat.com) to close
    bz#170259 pam_stack is deprecated


author: Jay Fenlason <fenlason@redhat.com> 3.0.20-2
changelog:
  - New upstream release
    Includes five upstream patches -bug3010_v1, -groupname_enumeration_v3,
      -regcreatekey_winxp_v1, -usrmgr_groups_v1, and -winbindd_v1
    This obsoletes the -pie and -delim patches
    the -warning and -gcc4 patches are obsolete too
    The -man, -passwd, and -smbspool patches were updated to match 3.0.20pre1
    Also, the -quoting patch was implemented differently upstream
    There is now a umount.cifs executable and manpage
    We run autogen.sh as part of the build phase
    The testprns command is now gone
    libsmbclient now has a man page
  - Include -bug106483 patch to close
    bz#106483 smbclient: -N negates the provided password, despite documentation
  - Added the -warnings patch to quiet some compiler warnings.
  - Removed many obsolete patches from CVS.


author: Jay Fenlason <fenlason@redhat.com> 3.0.14a-2
changelog:
  - New upstream release.
  - the -64bit-timestamps, -clitar, -establish_trust, user_rights_v1,
    winbind_find_dc_v2 patches are now obsolete.


author: Jay Fenlason <fenlason@redhat.com> 3.0.13-2
changelog:
  - New upstream release
  - add my -quoting patch, to fix swat with strings that contain
    html meta-characters, and to use correct quote characters in
    lists, closing bz#134310
  - include the upstream winbindd_2k3sp1 patch
  - include the -smbclient patch.
  - include the -hang patch from upstream.


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-4
changelog:
  - Use the updated filter-requires-samba.sh file, so we don't accidentally
    pick up a dependency on perl(Crypt::SmbHash)


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-3
changelog:
  - add -gcc4 patch to compile with gcc 4.
  - remove the now obsolete -smbclient-kerberos.patch
  - Include four upstream patches from
    http://samba.org/~jerry/patches/post-3.0.11/
    (Slightly modified the winbind_find_dc_v2 patch to apply easily with
    rpmbuild).


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-4
changelog:
  - Update the -man patch to fix ntlm_auth.1 too.
  - Move pam_smbpass.so to the -common package, so both the 32
    and 64-bit versions will be installed on multiarch platforms.
    This closes bz#143617
  - Added new -delim patch to fix mount.cifs so it can accept
    passwords with commas in them (via environment or credentials
    file) to close bz#144198


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-2
changelog:
  - New upstream release that closes CAN-2004-1154  bz#142544
  - Include the -64bit patch from Nalin.  This closes bz#142873
  - Update the -logfiles patch to work with 3.0.10
  - Create /var/run/winbindd and make it part of the -common rpm to close
    bz#142242


author: Jay Fenlason <fenlason@redhat.com> 3.0.9-2
changelog:
  - New upstream release.  This obsoletes the -secret patch.
    Include my changetrustpw patch to make "net ads changetrustpw" stop
    aborting.  This closes #134694
  - Remove obsolete triggers for ancient samba versions.
  - Move /var/log/samba to the -common rpm.  This closes #76628
  - Remove the hack needed to get around the bad docs files in the
    3.0.8 tarball.
  - Change the comment in winbind.init to point at the correct pidfile.
    This closes #76641


author: Than Ngo <than@redhat.com> 3.0.8-4
changelog:
  - fix unresolved symbols in libsmbclient which caused applications
    such as KDE's konqueror to fail when accessing smb:// URLs. #139894


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3.1
changelog:
  - Rescue the install.mount.smbfs patch from Juanjo Villaplana
    (villapla@si.uji.es) to prevent building the srpm from trashing your
    installed /usr/bin/smbmount


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3
changelog:
  - Include the corrected docs tarball, and use it instead of the
    obsolete docs from the upstream 3.0.8 tarball.
  - Update the logfiles patch to work with the updated docs.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-2
changelog:
  - New upstream version fixes CAN-2004-0930.  This obsoletes the
    disable-sendfile, salt, signing-shortkey and fqdn patches.
  - Add my <fenlason@redhat.com> ugly non-ascii-domain patch.
  - Updated the pie patch for 3.0.8.
  - Updated the logfiles patch for 3.0.8.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.3
changelog:
  - disable the -salt patch, because it causes undefined references in
    libsmbclient that prevent gnome-vfs from building.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.2
changelog:
  - Re-enable the x_fclose patch that was accidentally disabled
    in 3.0.8-0.pre1.1.  This closes #135832
  - include Nalin's -fqdn and -salt patches.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include patch from Steven Lawrance (slawrance@yahoo.com) that modifies
    smbmnt to work with 32-bit uids.


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-4
changelog:
  - Update docs section to not carryover the docs/manpages directory
    This moved many files from /usr/share/doc/samba-3.0.7/docs/* to
    /usr/share/doc/samba-3.0.7/*
  - Modify spec file as suggested by Rex Dieter (rdieter@math.unl.edu)
    to correctly create libsmbclient.so.0 and to use %_initrddir instead
    of rolling our own.  This closes #132642
  - Add patch to default "use sendfile" to no, since sendfile appears to
    be broken
  - Add patch from Volker Lendecke <vl@samba.org> to help make
    ldapsam_compat work again.
  - Add patch from "Vince Brimhall" <vbrimhall@novell.com> for ldapsam_compat
    These two patches close bugzilla #132169


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-3
changelog:
  - Upgrade to 3.0.7, which fixes CAN-2004-0807 CAN-2004-0808
    This obsoletes the 3.0.6-schema patch.
  - Update BuildRequires line to include openldap-devel openssl-devel
    and cups-devel


author: Jay Fenlason <fenlason@redhat.com> 3.0.6-3
changelog:
  - New upstream version.
  - Include post 3.0.6 patch from "Gerald (Jerry) Carter" <jerry@samba.org>
    to fix a duplicate in the LDAP schema.
  - Include 64-bit timestamp patch from Ravikumar (rkumar@hp.com)
    to allow correct timestamp handling on 64-bit platforms and fix #126109.
  - reenable the -pie patch.  Samba is too widely used, and too vulnerable
    to potential security holes to disable an important security feature
    like -pie.  The correct fix is to have the toolchain not create broken
    executables when programs compiled -pie are stripped.
  - Remove obsolete patches.
  - Modify this spec file to put libsmbclient.{a,so} in the right place on
    x86_64 machines.


author: Jason Vas Dias <jvdias@redhat.com> 3.0.5-3
changelog:
  - Removed '-pie' patch - 3.0.5 uses -fPIC/-PIC, and the combination
  - resulted in executables getting corrupt stacks, causing smbmnt to
  - get a SIGBUS in the mount() call (bug 127420).


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-2
changelog:
  - Upgrade to 3.0.5, which is a regression from 3.0.5pre1 for a
    security fix.
  - Include the 3.0.4-backport patch from the 3E branch.  This restores
    some of the 3.0.5pre1 and 3.0.5rc1 functionality.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-0.pre1.1
changelog:
  - Backport base64_decode patche to close CAN-2004-0500
  - Backport hash patch to close CAN-2004-0686
  - use_authtok patch from Nalin Dahyabhai <nalin@redhat.com>
  - smbclient-kerberos patch from Alexander Larsson <alexl@redhat.com>
  - passwd patch uses "*" instead of "x" for "hashed" passwords for
    accounts created by winbind.  "x" means "password is in /etc/shadow" to
    brain-damaged pam_unix module.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5.0pre1.0
changelog:
  - New upstream version
  - use % { SOURCE1 } instead of a hardcoded path
  - include -winbind patch from Gerald (Jerry) Carter (jerry@samba.org)
    https://bugzilla.samba.org/show_bug.cgi?id=1315
    to make winbindd work against Windows versions that do not have
    128 bit encryption enabled.
  - Moved %{_bindir}/net to the -common package, so that folks who just
    want to use winbind, etc don't have to install -client in order to
    "net join" their domain.
  - New upstream version obsoletes the patches added in 3.0.3-5
  - Remove smbgetrc.5 man page, since we don't ship smbget.


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-5
changelog:
  - Patch to allow password changes from machines patched with
    Microsoft hotfix MS04-011.
  - Include patches for https://bugzilla.samba.org/show_bug.cgi?id=1302
    and https://bugzilla.samba.org/show_bug.cgi?id=1309


author: jay Fenlason <fenlason@redhat.com> 3.0.3-3.rc1
changelog:
  - New upstream version
  - updated spec file to make libsmbclient.so executable.  This closes
    bugzilla #121356


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-2.pre2
changelog:
  - New upstream version  
  - Updated configure line to remove --with-fhs and to explicitly set all
    the directories that --with-fhs was setting.  We were overriding most of
    them anyway.  This closes #118598


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-1.pre1
changelog:
  - New upstream version.
  - Updated -pie and -logfiles patches for 3.0.3pre1
  - add krb5-devel to buildrequires, fixes #116560
  - Add patch from Miloslav Trmac (mitr@volny.cz) to allow non-root to run
    "service smb status".  This fixes #116559


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Change all requires lines to list an explicit epoch.  Closes #102715
  - Add an explicit Epoch so that %{epoch} is defined.


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-5
changelog:
  - New upstream version: 3.0.2 final includes security fix for #114995
    (CAN-2004-0082)
  - Edit postun script for the -common package to restart winbind when
    appropriate.  Fixes bugzilla #114051.


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-3rc2
changelog:
  - add %dir entries for %{_libdir}/samba and %{_libdir}/samba/charset
  - Upgrade to new upstream version
  - build mount.cifs for the new cifs filesystem in the 2.6 kernel.


author: Felipe Alfaro Solana <felipe_alfaro@linuxmail.org> 3.0.1-1
changelog:
  - Update to 3.0.1
  - Removed testparm patch as it's already merged
  - Removed Samba.7* man pages
  - Fixed .buildroot patch
  - Fixed .pie patch
  - Added new /usr/bin/tdbdump file


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-15
changelog:
  - New 3.0.0 final release
  - merge nmbd-netbiosname and testparm patches from 3E branch
  - updated the -logfiles patch to work against 3.0.0
  - updated the pie patch
  - update the VERSION file during build
  - use make -j if avaliable
  - merge the winbindd_privileged change from 3E
  - merge the "rm /usr/lib" patch that allows Samba to build on 64-bit
    platforms despite the broken Makefile


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-3beta3
changelog:
  - Merge from 3.0.0-2beta3.3E
  - (Correct log file names (#100981).)
  - (Fix pidfile directory in samab.log)
  - (Remove obsolete samba-3.0.0beta2.tar.bz2.md5 file)
  - (Move libsmbclient to the -common package (#99449))


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-2
changelog:
  - add libsmbclient.so for gnome-vfs-extras
  - Edit specfile to specify /var/run for pid files
  - Move /tmp/.winbindd/socket to /var/run/winbindd/socket


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-1
changelog:
  - upgrade to 2.2.8a
  - remove old .md5 files
  - add "pid directory = /var/run" to the smb.conf file.  Fixes #88495
  - Patch from jra@dp.samba.org to fix a delete-on-close regression


author: Jay Fenlason <fenlason@redhat.com> 2.2.8-0
changelog:
  - Upgrade to 2.2.8
  - removed commented out patches.
  - removed old patches and .md5 files from the repository.
  - remove duplicate /sbin/chkconfig --del winbind which causes
    warnings when removing samba.
  - Fixed minor bug in smbprint that causes it to fail when called with
    more than 10 parameters: the accounting file (and spool directory
    derived from it) were being set wrong due to missing {}.  This closes
    bug #86473.
  - updated smb.conf patch, includes new defaults to close bug #84822.


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.7a-4
changelog:
  - relink libnss_wins.so with SHLD="%{__cc} -lnsl" to force libnss_wins.so to
    link with libnsl, avoiding unresolved symbol errors on functions in libnsl


author: Jay Fenlason <fenlason@redhat.com> 2.2.7a-3
changelog:
  - edited spec file to put .so files in the correct directories
    on 64-bit platforms that have 32-bit compatability issues
    (sparc64, x86_64, etc).  This fixes bugzilla #83782.
  - Added samba-2.2.7a-error.patch from twaugh.  This fixes
    bugzilla #82454.


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.5-7
changelog:
  - Enable VFS support and compile the "recycling" module (#69796)
  - more selective includes of the examples dir


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.3a-3
changelog:
  - include interfaces.o in pam_smbpass.so, which needs symbols from interfaces.o
    (patch posted to samba-list by Ilia Chipitsine)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-6
changelog:
  - Move winbind files to samba-common. Add separate initscript for
    winbind 
  - Fixes for winbind - protect global variables with mutex, use
    more secure getenv


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-5
changelog:
  - Teach smbadduser about "getent passwd" 
  - Fix more pid-file references
  - Add (conditional) winbindd startup to the initscript, configured in
    /etc/sysconfig/samba


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-3
changelog:
  - Add "--with-utmp" to configure options (#55372)
  - Include winbind, pam_smbpass.so, rpcclient and smbcacls
  - start using /var/cache/samba, we need to keep state and there is
    more than just locks involved


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include smbpasswd in samba, it's in samba-common (#51598)
  - Add a disabled "obey pam restrictions" statement - it's not
    active, as we use encrypted passwords, but if the admin turns
    encrypted passwords off the choice is available. (#31351)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Use /var/cache/samba instead of /var/lock/samba 
  - Remove "domain controller" keyword from smb.conf, it's 
    deprecated (from #13704)
  - Sync some examples with smb.conf.default
  - Fix password synchronization (#16987)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - (these changes are from the non-head version)
  - Don't include /usr/sbin/samba, it's the same as the initscript
  - unset TMPDIR, as samba can't write into a TMPDIR owned
    by root (#41193)
  - Add pidfile: lines for smbd and nmbd and a config: line
    in the initscript  (#15343)
  - don't use make -j
  - explicitly include /usr/share/samba, not just the files in it


author: Helge Deller <hdeller@redhat.de>
changelog:
  - build as 2.2.0-1 release
  - skip the documentation-directories docbook, manpages and yodldocs
  - don't include *.sgml documentation in package
  - moved codepage-directory to /usr/share/samba/codepages
  - make it compile with glibc-2.2.3-10 and kernel-headers-2.4.2-2


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to samba 2.2.0
  - moved codepages to %{_datadir}/samba/codepages
  - use all available CPUs for building rpm packages
  - use %{_xxx} defines at most places in spec-file
  - "License:" replaces "Copyright:"
  - dropped excludearch sparc
  - de-activated japanese patches 100 and 200 for now 
    (they need to be fixed and tested wth 2.2.0)
  - separated swat.desktop file from spec-file and added
    german translations
  - moved /etc/sysconfig/samba to a separate source-file
  - use htmlview instead of direct call to netscape in 
    swat.desktop-file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak the PAM code some more to try to do a setcred() after initgroups()
  - pull in all of the optflags on i386 and sparc
  - don't explicitly enable Kerberos support -- it's only used for password
    checking, and if PAM is enabled it's a no-op anyway


author: Bill Nottingham <notting@redhat.com>
changelog:
  - i18n-ize initscript
  - add a sysconfig file for daemon options (#23550)
  - clarify smbpasswd man page (#23370)
  - build with LFS support (#22388)
  - avoid extraneous pam error messages (#10666)
  - add Urban Widmark's bug fixes for smbmount (#19623)
  - fix setgid directory modes (#11911)
  - split swat into subpackage (#19706)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set a default CA certificate path in smb.conf (#19010)
  - require openssl >= 0.9.5a-20 to make sure we have a ca-bundle.crt file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix swat only_from line (#18726, others)
  - fix attempt to write outside buildroot on install (#17943)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - move initscript back
  - remove 'Using Samba' book from %doc 
  - move stuff to /etc/samba (#13708)
  - default configuration tweaks (#13704)
  - some logrotate tweaks


author: Than Ngo <than@redhat.de>
changelog:
  - add initdir macro to handle the initscript directory
  - add a new macro to handle /etc/pam.d/system-auth


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix yp_get_default_domain in autoconf
  - only link against readline for smbclient
  - fix log rotation (#9909)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - use cp rather than mv to preserve /etc/services perms (#4938 et al).
  - use mktemp to generate /etc/tmp.XXXXXX file name.
  - add prereqs on sed/mktemp/killall (need to move killall to /bin).
  - fix trigger syntax (i.e. "samba < 1.9.18p7" not "samba < samba-1.9.18p7")


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.0.5
  - fix mount.smb - smbmount options changed again.........
  - fix postun. oops.
  - update some stuff from the samba team's spec file.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add a mount.smb to make smb mounting a little easier.
  - smb filesystems apparently don't work on alpha. Oops.


author: Erik Troan <ewt@redhat.com>
changelog:
  - made the %postun script a tad less agressive; no reason to remove
    the logs or lock file (after all, if the lock file is still there,
    samba is still running)
  - the %postun and %preun should only exectute if this is the final
    removal
  - migrated %triggerpostun from Red Hat's samba package to work around
    packaging problems in some Red Hat samba releases


author: John H Terpstra <jht@samba.anu.edu.au>
changelog:
  - Many optimisations (some suggested by Manoj Kasichainula <manojk@io.com>
  - Use of chkconfig in place of individual symlinks to /etc/rc.d/init/smb
  - Compounded make line
  - Updated smb.init restart mechanism
  - Use compound mkdir -p line instead of individual calls to mkdir
  - Fixed smb.conf file path for log files
  - Fixed smb.conf file path for incoming smb print spool directory
  - Added a number of options to smb.conf file
  - Added smbadduser command (missed from all previous RPMs) - Doooh!
  - Added smbuser file and smb.conf file updates for username map


author: parag <paragn@fedoraproject.org> - 1.0.3-4
changelog:
  - Merge-Review #226080
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length AUTHORS file


author: Kristian Høgsberg <krh@redhat.com> - 1.0.2-6.fc7
changelog:
  - Also add Requires for libXext-devel for development package (#210123)
  - Add pkgconfig dependency for -devel package.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "Requires: xorg-x11-proto-devel, libX11-devel, libXt-devel" to devel
    subpackage needed by xmu.pc, xmuu.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXmu to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Added "BuildRequires: pkgconfig, libXau-devel, xorg-x11-util-macros" to
    fix build dependencies.


author: Nils Philippsen <nils@redhat.com> - 1.3.4-1
changelog:
  - don't ask libuser to create a home directory over an existing one (#908852,
    patch by Miloslav Trmač)
  - correct check if SELinux is enabled


author: Nils Philippsen <nils@redhat.com> - 1.2.112-1
changelog:
  - use pwquality if available for password strength checks (#754951)
  - require python-pwquality from F-17 on
  - print exception and have non-zero exit code if gtk can't be imported
  - clean up source (PEP8, etc.)


author: Nils Philippsen <nils@redhat.com> - 1.2.108-1
changelog:
  - pull updated translations
  - use /etc/login.defs for minimum uids/gids (#717122)
  - adapt messages for configurable minimum uids/gids


author: Nils Philippsen <nils@redhat.com> - 1.2.107-1
changelog:
  - remove obsolete selinux module (#646876)
  - search for substrings (#674047)
  - add entry icon for clearing user/group filter


author: Nils Philippsen <nils@redhat.com> - 1.2.106-1
changelog:
  - fix startup if max uid/gid is allocated
  - attempt to mkdir home directory instead of using os.access()
  - cope better with deleting auto-mounted home directories
  - restore context of home directories after creating, also use umask of 0700
    (u=rwx,go=)
  - make most password problems warnings, not errors (#656356)
  - ask if non-ASCII password should be used (#646876)
  - add forced password change on next login (#656219)
  - pick up translation updates


author: Nils Philippsen <nils@redhat.com>
changelog:
  - enforce uids, gids fitting in id_t datatype, also clamp uid, gid to permitted
    value range in UI (#616067)


author: Nils Philippsen <nils@redhat.com> - 1.2.100-1
changelog:
  - check if homedirs of new users can be created
  - prevent unlocking users with empty passwords
  - require docs in enterprise builds


author: Nils Philippsen <nils@redhat.com> - 1.2.98-1
changelog:
  - revert bad commit which overwrote Greek translations (#590890)
  - only delete user or group if really confirmed (#539251)
  - make file deletion methods more robust (#539251)


author: Nils Philippsen <nils@redhat.com>
changelog:
  - use consistent terms for adding users (#343571)
  - use strings as keys for user/group check messages
  - warn about user names with trailing dollar sign (#486906)


author: Nils Philippsen <nils@redhat.com> - 1.2.84-1
changelog:
  - use ValueError.message, not .msg to get cracklib error message (#479858)
  - pull in updated translations


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.78-1
changelog:
  - fix focus target for "Account expires" label (#439717)
  - fix French translator credits so msgfmt doesn't complain


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - update copyright terms, admit complicity in source files
  - display shadow information from LDAP directories (#185907, fix by Ed van
    Gasteren, modified)
  - use libuser defaults for home directories (#204707, fix by Miloslav Trmac)
  - use gtk.AboutDialog for about dialog (#202963)


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.71-1
changelog:
  - add release tags to changelog entries to appease rpmlint
  - remove "ExclusiveOS: Linux"
  - use xdg-open if available
  - change hicolor-icon-theme requirement to be "uncolored" (without
    "(post)"/"(postun)")
  - obsolete explicit version of redhat-config-users
  - use "%defattr(-,root,root,-)"
  - don't use %attr
  - use "%config(noreplace)"
  - use macros instead of hardcoded directories
  - don't let gtk-update-icon-cache fail scriptlets
  - remove obsolete no.po translation file (#332431)
  - use "make %{?_smp_mflags}"


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.69-1
changelog:
  - prohibit home directories which are not absolute paths or contain path
    components which are empty, ".", ".." or too long (#303971)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - fix exception syntax, catch only IndexErrors caused by group inconsistencies
    (#243217)
  - list users and/or groups found to be inconsistent (#243217)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - don't delete preferences toplevel window when closing via window manager
    (#248686)
  - barf even less on inconsistent groups (#243217)


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.60-1
changelog:
  - don't barf on inconsistent groups
  - use integers instead of strings for various user parameters (#226976, patch
    by Miloslav Trmac)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - try not to barf if encountering inconsistencies between /etc/passwd,
    /etc/group, /etc/shadow and /etc/gshadow


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - mention that we are upstream
  - use preferred buildroot
  - use Category: ... System; ... in desktop file
  - clean buildroot before installing
  - fix licensing blurb in PO files
  - require/BR python >= 2.0 instead of python2
  - recode spec file to UTF-8


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - clarify comments, add new variables in /etc/sysconfig/system-config-users
  - use new method to choose GID when creating groups as well
  - actually set new user's GID
  - remove debugging statements


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.45-1
changelog:
  - revamp uid/gid number selection to honor preferences and avoid primary
    group/created group discrepancies (#198152)
  - use disttag if available


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.40-1
changelog:
  - initialize shadow variables only if shadow passwords are used
    (#168524, #168529, patch by Josef Whiter)


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.30-1
changelog:
  - use os.lstat() to test ownership of files to be deleted
  - update the GTK+ theme icon cache on (un)install


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.27-1
changelog:
  - some sanity testing to avoid deleting system directories when deleting a user
    (#138093)
  - eventually delete mail spool (#102637) and temporary files (#126756)


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - set password and confirm password entries (in)sensitive based on whether
    account is locked or not (#131180)


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.24-1
changelog:
  - use user/group names for indexing, avoid unnecessary user/group lookups
    (#135223, original patch by Miloslav Trmac)
  - remove some debugging statements
  - updated translations


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.23-1
changelog:
  - try to fix 32bit uids/gids (#134803)
  - fix gtk.main*() related DeprecationWarnings
  - byte-compile python files in "make install"
  - updated translations


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.20-1
changelog:
  - allow UTF-8 in user's full name (#133137)
  - require new libuser version so that fix for #80624 doesn't throw exception
    (#133479)
  - admit complicity


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.18-1
changelog:
  - use F1 instead of Ctrl+H as accelerator for Help/Contents (#132163)
  - use "mkdir -p" to fix make install glitch
  - use absolute paths in *.glade to fix pygtk/pyglade subtleties


author: Nils Philippsen <nphilipp@redhat.com> - 1.2.15-1
changelog:
  - add manpage (Chris Spencer, #115316)
  - add Slovenian translation to desktop file (Roman Maurer, #131835)


author: Brent Fox <bfox@redhat.com> 1.2.7-1
changelog:
  - preserve existing group selection in userProperties.py (bug #111199)
  - handle munged config file (bug #108400)


author: Brent Fox <bfox@redhat.com> 1.2.5-1
changelog:
  - rename from redhat-config-users
  - add Obsoletes for redhat-config-users
  - make changes for Python2.3


author: Brent Fox <bfox@redhat.com> 1.1.17-1
changelog:
  - if shadow passwords are not enabled, do not show certain widgets (bug #104536)
  - don't modify password expiration data by accident (bug #88190)


author: Brent Fox <bfox@redhat.com> 1.1.16-1
changelog:
  - clarify error dialog message (bug #101607)
  - allow underscores and dashes in usernames and groupnames (bug #99115)


author: Brent Fox <bfox@redhat.com> 1.1.11-1
changelog:
  - don't create new user with an existing uid (bug #90911)
  - use the messageDialog module in groupWindow.py
  - don't create group with an existing gid (bug #90911)


author: Brent Fox <bfox@redhat.com> 1.1.9-1
changelog:
  - popup a confirmation dialog when deleting groups
  - popup a confirmation dialog when deleting users


author: Brent Fox <bfox@redhat.com> 1.1.7-1
changelog:
  - don't allow colons in username or homedir names (bug #90481)
  - check for zero length in usernames, groupnames, gecos, and homedirs


author: Brent Fox <bfox@redhat.com> 1.1.5-1
changelog:
  - don't allow root account to be locked
  - make default values for SHADOW* on user creation so we can do password aging properly later


author: Brent Fox <bfox@redhat.com> 1.1.3-3
changelog:
  - force ascii input (bug #74058)
  - make sure that groupWindow calls self.ready() after showing dialogs
  - remove sentence hacks in asciiCheck.py (bug #82015)
  - fix typo in about box (bug #82016)
  - do not create homedir if they user doesn't want to
  - only offer to delete homedirs if they actually exist  (bug #78619)
  - if the user is the only member of their group, delete the group automatically (bug #78620)


author: Brent Fox <bfox@redhat.com> 1.1.1-9
changelog:
  - handle window delete-events correctly
  - call ready() after dialog is destroyed (bug #80625)
  - if a deleted user is the only user in his primary group, offer to delete the group too (bug #78620)


author: Dan Walsh <dwalsh@redhat.com> 1.1-16
changelog:
  - Fix traceback bug, caused by unitialized variable
  - Fix traceback bug, caused by primary gid missing from /etc/group


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Attempt to minimize enumerations where possible
  - Always use defined constants for attribute names


author: Brent Fox <bfox@redhat.com>
changelog:
  - mainWindow.glade: Changed GUI per jrb's recommendations
  - mainWindow.py: added interfacing with libuser backend


author: Jonathan Blandford <jrb@redhat.com>
changelog:
  - mainWindow.glade: Cleaned up glade file a bunch.
  - mainWindow.py: modified to deal with updated glade.


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.15-1
changelog:
  - fix errors found by gcc-with-cpychecker (#800075)
  - fix building with tcl8.6 (#902561)
  - add fallback to python-config (#783627)
  - replace tabs in snack.py (#870647)
  - compile snackmodule.c with flag -fPIC (Kang Kai)
  - include new translations from transifex
  - allow newtWinMenu and newtWinEntries with no buttons or items
  - don't draw scale when not mapped
  - build with large-file support for stat64
  - remove unused variables in test code
  - update FSF address
  - remove obsolete macros
  - make some dependencies arch-specific


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.14-1
changelog:
  - fix returning strings in whiptail and whiptcl (#752818)
  - fix configure to work with multiple python versions (#737998)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.13-1
changelog:
  - add support for changing colors in individual labels, scrollbars, entries,
    textboxes and scales, add custom colorsets 
  - add support for NEWT_COLORS and NEWT_COLORS_FILE variables (#689903)
  - allow resizing of form
  - fix errors found by coverity
  - fix va_list usage (Gwenole Beauchesne)
  - fix building and installing on Mac OS X (#652479)
  - check for slang.h header, support DESTDIR variable, add --without-python
    option (Otavio Salvador)
  - add Persian, Low German translations


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.12-1
changelog:
  - fix whiptail --gauge and its description in man page (#620083)
  - remove space after \n in whiptail texts (#620083)
  - remove NLS code from snack (#599608)
  - expose more keys to python as shortcuts in dialogs (Jakob Kemi)
  - release python global-thread-lock during dialog displays (Jakob Kemi)
  - fix warnings in whiptcl.c and include Tcl_PkgProvide() call (Mikhail T.)
  - don't NULL deref when an invalid array is specified in checkboxtree
    (Arnaldo Carvalho de Melo)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.11-1
changelog:
  - fix buffer overflow in textbox when reflowing (#523955, CVE-2009-2905)
  - use full textbox width when reflowing and allow minimal width 1
  - fix writing lines longer than width in textbox
  - don't use va_list in newtvwindow more than once (#523696)
  - bind \E[Z to back-tab in built-in keymap (#468046)
  - terminate string after reading file in whiptail
  - add newtRadioSetCurrent function (Thomas Jarosch)
  - add pkgconfig support (Thomas Jarosch)
  - add Malay, Malayalam, Assamese, Gujarati, Bengali India, Kannada, Telugu
    translations
  - include tutorial in txt format
  - include debian patches
    - fix crash in textbox SetText when topLines != 0
    - don't link modules with libraries already linked with libnewt
    - add Asturian and Marathi translations


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.10-1
changelog:
  - improve --noitem description (#456305)
  - add setHeight to Textbox class
  - fix fixedheight forms
  - free keymap in newtFinished()
  - fix memory leak in textbox
  - fix valgrind error in checkboxtree
  - don't crash when running empty form
  - don't crash or hang when form has no focusable elements
  - before checkboxtree drawing return first item in GetCurrent()
  - redraw textbox in SetText()
  - add setColor description to SnackScreen docstring (Greg Swift)
  - make sure Widget isn't used directly (Greg Swift) (#452920)
  - add Serbian translations (Miloš Komarčević)
  - add Balochi translation (Mostafa Daneshvar)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.9-1
changelog:
  - handle component destruction (patch by Richard W.M. Jones)
  - fix newtWinEntry definition
  - don't use uninitialized values in newtWinMenu
  - remove workarounds for old bug in SLsmg_write_nstring
  - improve SIGWINCH handling in form
  - don't abort from whiptail gauge on SIGWINCH
  - redisplay also last line
  - update Polish translation (Piotr Drąg)
  - update URL and Source tag


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.8-1
changelog:
  - enable slang utf8 mode (#425992)
  - support --disable-nls option (patch by Natanael Copa)
  - redraw screen when using entry in euc encodings


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.7-2
changelog:
  - add back support for list of Entries in EntryWindow prompts in snack
    (#248878)
  - update license tag
  - split python module to -python subpackage (patch by Yanko Kaneti)
  - fix summary


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.7-1
changelog:
  - add support to snack for multiple selection and border in listbox
    and cursorAtEnd in entry (patch by Shawn Starr)
  - fix scrollbar positioning in listbox
  - cope with backward system time jumps (#240691)
  - free helplines and windows in newtFinished, check for overflow (#239992)
  - add release to -devel and -static requires (#238784)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.6-3
changelog:
  - fix cursor positioning when setting entry or checkbox flags
  - fix counting of items in checkboxtree
  - fix some memory leaks


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.6-1
changelog:
  - add newtSetColor() to allow changing individual colors
  - add newtPopWindowNoRefresh() (patch by Forest Bond)
  - move static library to -static subpackage, spec cleanup (#226195)
    (patch by Jason Tibbitts)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.5-1
changelog:
  - provide option to change text of buttons (#126768)
  - don't add escape key to hot keys by default (#216157)
  - fix cursor position in checkboxtree, radio button and checkbox
  - don't force monochrome terminals to output colors
  - highlight active compact button on monochrome terminals
  - update translations from debian


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.4-1
changelog:
  - fix entry corruption when reading multibyte characters
    and double width character handling
  - avoid overflow/crash in scale
  - patches from debian
    - fix crash of snack in EntryWindow when prompts is list of tuples
    - put cursor at beginning of text for better accessibility
      in button, scale and textbox
    - add topleft option to whiptail


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-9
changelog:
  - fix screen corruption when half of double width character is overwritten
    (#137957) 
  - fix double width character handling in checkboxtree and listbox


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-7
changelog:
  - fix checkboxtree positioning
  - make textbox with scrollbar focusable (#83203)
  - turn off cursor when entry terminated form (#86074)
  - handle listbox and checkboxtree focus better (#186053)
  - make default colors more friendly to 8-color terminals (#187545)


author: Petr Rockai <prockai@redhat.com> - 0.52.2-5
changelog:
  - Fix a crash in checkboxtree.c where pressing pgup/pgdown
    on a checkboxtree with less items than its height would
    cause segmentation violation. Consult BR 165347.


author: Petr Rockai <prockai@redhat.com> - 0.52.2-4
changelog:
  - Apply patch by Bill Nottingham (thanks) to improve scrollbar appearance
    (BR 174771).
  - Add -%{release} to snack's Provides: line (just in case).


author: Petr Rockai <prockai@redhat.com> - 0.52.2-3
changelog:
  - Provide: snack = %{version} instead of plain "snack", so that
    we don't block upgrades of custom "snack" packages. This should
    not break anything. (Hopefully) fixes BR 171415.


author: Petr Rockai <prockai@redhat.com> - 0.52.1-0
changelog:
  - revert bidi patch, objections by Jeremy Katz about
    anaconda breaking
  - this version still only exists as a "ghastly" upstream tarball;
    the patches are now cleaned up and will be integrated into
    rhlinux cvs unless some more breakage akin to bidi occurs
  - the if1close patch is now part of upstream tarball too


author: Petr Rockai <prockai@redhat.com>
changelog:
  - use versioned symbols, patch by Alastair McKinstry, mckinstry at
    debian dot org, thanks
  - need private wstrlen due to versioned syms, patch from debian
    package of newt
  - both of the above needed to be forward-ported


author: Matt Wilson <msw@redhat.com> 0.51.4-1
changelog:
  - fixed help line drawing in UTF-8 (#81718)
  - calculate the width of text in entries using wstrlen
  - always set component width to the new label width in newtLabelSetText
  - fixed snack.CListbox to work properly with UTF-8 (#81718)


author: Adrian Havill <havill@redhat.com> 0.51.3-1
changelog:
  - cleaned up const qualifiers in interfaces
  - added Ctrl-L screen refresh
  - fixed segfault in test.c when listbox items are selected
  - accessibility: made newt useable with monochrome terms (#60931)
  - leave the symbols in the libs (#60400)
  - fixed grammar in tutorial (#63496)
  - error checking (curcomp exists) for formEvent, newtFormGetCurrent,
    removed fifty button limit (#59027)


author: Matt Wilson <msw@redhat.com> 0.51.2-1
changelog:
  - fixed wstrlen() it was calculating wcwidth(first wide char in
    string) * strlen(str) instead of the actual width of the whole
    string
  - fixed newtRedrawHelpLine() to copy all the bytes from a multibyte
    string


author: Bill Nottingham <notting@redhat.com> 0.51.0-1
changelog:
  - changes for element width calculation for UTF-8
  - fix textwrap for UTF-8 in general
  - bump soname to avoid shared library collisions with slang


author: Joe Orton <jorton@redhat.com> 0.50.36-1
changelog:
  - add newtListboxGetItemCount() API call
  - include numeric percentage in scale widget appearace
  - add support for ESC key using NEWT_KEY_ESCAPE


author: Crutcher Dunnavant <crutcher@redhat.com> 0.50.31-1
changelog:
  - right anchor the internal Listbox of CListboxes, so that empty
  - scrollable CListboxes do not look like crape.


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - added python binding for newtListboxClear() for Listbox and CListBox
  - let ButtonBars optionally be made of CompactButtons


author: Matt Wilson <msw@redhat.com>
changelog:
  - change from using SLsmg_touch_screen to SLsmg_touch_lines to prevent
    excessive flashing due to screen clears when using touch_screen (more
    Japanese handling)


author: Matt Wilson <msw@redhat.com>
changelog:
  - redraw the screen in certain situations when LANG=ja_JP.eucJP to
    prevent corrupting kanji characters (#34362)


author: Elloit Lee <sopwith@redhat.com>
changelog:
  - Allow python scripts to watch file handles
  - Fix 64-bit warnings in snackmodule
  - Misc snack.py cleanups
  - Add NEWT_FD_EXCEPT to allow watching for fd exceptions
  - In newtExitStruct, return the first file descriptor that an event occurred on


author: Matt Wilson <msw@redhat.com>
changelog:
  - don't blow the stack if we push a help line that is longer than the
    curret number of columns
  - clip window to screen bounds so that if we get a window that is
    larger than the screen we can still redraw the windows behind it
    when we pop


author: Erik Troan <ewt@redhat.com>
changelog:
  - gave up on separate CHANGES file
  - added newtCheckboxTreeSetCurrent() and snack binding
  - don't require python2 anymore


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - bytecompile the snack python module
  - move the libnewt.so symlink to the devel package
  - include popcorn.py and peanuts.py in the devel package,
    so we have some documentation of the snack module


author: Preston Brown <pbrown@redhat.com>
changelog:
  - explicit requirement of devel subpackage on same version of main package
    so that .so file link doesn't break


author: Matt Wilson <msw@redhat.com>
changelog:
  - fixed snack callback function refcounts, as well as optional data args
  - fixed suspend callback ref counts


author: Matt Wilson <msw@redhat.com>
changelog:
  - added snack bindings for setting current listbox selection
  - added argument to set default selection in snack ListboxChoiceWindow


author: Matt Wilson <msw@redhat.com>
changelog:
  - Function to set checkbox flags.  This will go away later when I have
    a generic flag setting function and signals to comps to go insensitive.


author: Matt Wilson <msw@redhat.com>
changelog:
  - Added GPM mouse support
  - Moved to autoconf to allow compiling without GPM support
  - Changed revision to 0.40


author: Erik Troan <ewt@redhat.com>
changelog:
  - added changes from Bruce Perens
      - small cleanups
      - lets whiptail automatically resize windows
  - the order of placing a grid and adding components to a form no longer
    matters
  - added newtGridAddComponentsToForm()


author: Erik Troan <ewt@redhat.com>
changelog:
  - Cleaned up listbox
  - Added whiptail
  - Added newtButtonCompact button type and associated colors
  - Added newtTextboxGetNumLines() and newtTextboxSetHeight()


author: Jan Kaluza <jkaluza@redhat.com> - 5.4-25
changelog:
  - don't fail with error 500 when ticket is expired and Authorization header is
    provided by client (#982521)


author: Joe Orton <jorton@redhat.com> - 5.4-16
changelog:
  - hard-code use of /run/user/apache for cache dir
  - package /run/user/apache
  - move tmpfiles drop-in to /usr/lib


author: Joe Orton <jorton@redhat.com> 5.0-0.rc4.3
changelog:
  - support mutual authentication (Nalin Dahyabhai)
  - once authentication returns COMPLETE, cache name for the duration
    of the connection


author: Thomas Woerner <twoerner@redhat.com> - 1.5-4
changelog:
  - enable bash-completion again, fixes (RHBZ#495529)
  - fixed rpmlint reports missing-lsb-keyword Default-Stop (rhbz#976341)


author: Tom Callaway <spot@fedoraproject.org> - 1.4-10
changelog:
  - fix handling of ruby RI files as text files (they are binary files)
  - apply upstream fix for macro regexp


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.4-6
changelog:
  -  Patch to fix messages that contain unicode summaries
     https://bugzilla.redhat.com/show_bug.cgi?id=783912


author: Tom Callaway <spot@fedoraproject.org> - 1.3-2
changelog:
  - apply upstream fix for false error on checking ghosted man pages for 
    encoding (bz745446)
  - update config to reflect new licenses (bz741298)


author: Tom "spot" Callaway <tcallawa@redhat.com> - 1.0-3
changelog:
  - fix typo in changelog
  - % comment out item in changelog
  - simplify el4/el5 config files (thanks to Ville Skyttä)


author: Tom "spot" Callaway <tcallawa@redhat.com> - 1.0-2
changelog:
  - add support for el4-rpmlint, el5-rpmlint
  - disable no-cleaning-of-buildroot checks for Fedora
  - disable no-buildroot-tag check for Fedora
  - disable no-%clean-section check for Fedora


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0-1
changelog:
  - Update to 1.0; fixes #637956, and #639823.
  - Sync Fedora license list with Wiki revision 1.85.
  - Whitelist more expectedly setuid executables; fixes #646455.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.99-1
changelog:
  - Update to 0.99; fixes #623607, helps work around #537430.
  - Sync Fedora license list with Wiki revision 1.80.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.98-1
changelog:
  - Update to 0.98; fixes #599427 and #599516.
  - Filter out all lib*-java and lib*-python explicit-lib-dependency messages.
  - Sync Fedora license list with Wiki revision 1.75; fixes #600317.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.97-1
changelog:
  - Update to 0.97; fixes #459452, #589432.
  - Filter out explicit-lib-dep messages for libvirt(-python) (Dan Kenigsberg).
  - Sync Fedora license list with Wiki revision 1.73.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.96-1
changelog:
  - Update to 0.96; fixes #487974, #571375, #571386, #572090, #572097, #578390.
  - Sync Fedora license list with Wiki revision 1.71.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.94-1
changelog:
  - Update to 0.94; rpm >= 4.8.0 spec file check fix included upstream.
  - Sync Fedora license list with Wiki revision 1.65 (#559156).


author: Ville Skyttä <ville.skytta@iki.fi> - 0.93-1
changelog:
  - Update to 0.93; fixes #531102 and #555284.
  - Enable checks requiring network access in default config.
  - Disallow kernel module packages in default config.
  - Remove old X11R6 dirs from paths treated as system ones in default config.
  - Sync Fedora license list with Wiki revision 1.64.
  - Omit python-enchant and python-magic dependencies when built on EL.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.92-1
changelog:
  - Update to 0.92; fixes #528535, and #531102 (partially).
  - Python byte compile patch applied/superseded upstream.
  - Add <lua> to list of valid scriptlet shells.
  - Sync Fedora license list with Wiki revision 1.53.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.91-1
changelog:
  - Update to 0.91; fixes #513811, #515185, #516492, #519694, and #521630.
  - Add dependencies on gzip, bzip2, and xz.
  - Sync Fedora license list with Wiki revision 1.49.
  - Move pre-2008 %changelog entries to CHANGES.package.old.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.89-1
changelog:
  - Update to 0.89; fixes #461610, #496735, #496737 (partially), #498107,
    - Sync Fedora license list with Wiki revision 1.44.
  - Parse list of standard users and groups from the setup package's uidgid file.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.87-1
changelog:
  - 0.87; fixes #480664, #483196, #483199, #486748, #488146, #488930, #489118.
  - Sync Fedora license list with Wiki revision 1.38.
  - Configs patch included upstream.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Sync Fedora license list with Wiki revision 1.34.
  - Filter out filename-too-long-for-joliet and symlink-should-be-* warnings in
    default config.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.85-1
changelog:
  - 0.85, fixes #355861, #450011, #455371, #456843, #461421, #461423, #461434.
  - Mute some explicit-lib-dependency false positives (#458290).
  - Sync Fedora license list with Wiki revision 1.19.
  - Dist regex patch applied/superseded upstream.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.84-2
changelog:
  - 0.84, fixes #355861, #456304.
  - Sync Fedora license list with Wiki revision "16:08, 18 July 2008".
  - Rediff patches.


author: Ville Skyttä <ville.skytta@iki.fi> - 0.83-1
changelog:
  - 0.83, fixes #237204, #428096, #430206, #433783, #434694, #444441.
  - Fedora licensing patch applied upstream.
  - Move pre-2007 changelog entries to CHANGES.package.old.
  - Sync Fedora license list with Revision 0.88.


author: Richard Hughes <richard@hughsie.com> 1.0.4-1
changelog:
  - Rebase to a new upstream version to fix small security bug
  - Use %ghost in the to avoid removing databases on upgrades
  - Resolves: #1012832


author: Richard Hughes <richard@hughsie.com> 1.0.2-1
changelog:
  - New upstream version
  - Add cd_icc_save_data() so that we can easily set _ICC_PROFILE
  - Add CdIccStore to monitor directories of ICC profiles
  - Add SystemVendor and SystemModel properties to the main interface
  - Allow to specify a non-qualified path when using FindProfileByFilename
  - Allow using the key 'Filename' when using FindProfileByProperty
  - Always return the error if any sync method failed
  - Fix GObject introspection when getting lists
  - Fix GObject introspection when getting metadata


author: Richard Hughes <richard@hughsie.com> 1.0.1-1
changelog:
  - New upstream version
  - Do not unconditionally enable BPC on the color transform
  - Fix profile created time for non-UTC timezones
  - Record the gamma table in the session helper error message


author: Richard Hughes <richard@hughsie.com> 1.0.0-1
changelog:
  - New upstream version
  - Add a config option for monitors with identical EDID values
  - Allow a different input and output format in CdTransform
  - Build all installed binaries with PIE
  - Build the colord binary with full RELRO
  - Do not show a warning when using 'colormgr device-get-profile-for-qualifier'
  - Fix crash in cd-iccdump by working around an lcms2 bug
  - Fix using the color sensors on ARM hardware
  - Set the STANDARD_space metadata for the print profiles
  - Show all the translations when dumping an ICC profile


author: Richard Hughes <richard@hughsie.com> 0.1.34-1
changelog:
  - New upstream version
  - Add a ICC transform object for simple RGB conversions
  - Add a warning for RGB profiles with unlikely whitepoint values
  - Add Qt DBus annotations
  - Allow clients to call org.freedesktop.DBus.Peer
  - Correct a lot more company names when creating devices
  - Do not automatically add EDID profiles with warnings to devices
  - Increase the delay between patches in the session-helper
  - Install the bash completion support into /usr


author: Richard Hughes <richard@hughsie.com> 0.1.33-1
changelog:
  - New upstream version
  - Add some translated profile descriptions for the CMYK profiles
  - Add the FOGRA45L and FOGRA47L CMYK and eciRGBv1 profiles
  - Check the generated CCMX matrix for invalid data
  - Do not print a warning if the DBus property does not exist
  - Ensure mbstowcs() has an LC_CTYPE of 'en_US.UTF-8'
  - Always write C-locale floating point values in IT8 files
  - Initialize the value of the CCMX matrix
  - Never promote localized v2 ICC profiles to v4
  - Rename ISOnewspaper26 to IFRA26S_2004_newsprint


author: Richard Hughes <richard@hughsie.com> 0.1.32-1
changelog:
  - New upstream version
  - Add a new tool 'cd-iccdump' that can dump V4 and V2 profiles
  - Add translated descriptions to the ICC profiles


author: Richard Hughes <richard@hughsie.com> 0.1.31-1
changelog:
  - New upstream version
  - Calculate the display calibration based on the Lab and target display gamma
  - Interpolate the gamma data to the VCGT size using Akima
  - Add some more display vendor names to the display fixup table
  - Fix the argyll sensor driver when using the ColorMunki Smile
  - Fix the gamut warning to check primaries wider than CIERGB and ProPhoto
  - Move the private sensor libraries out of the pure lib space


author: Richard Hughes <richard@hughsie.com> 0.1.30-1
changelog:
  - New upstream version
  - Append -private to the driver libraries as they have no headers installed
  - Do not show duplicate profiles when icc-profiles-openicc is installed
  - Speed up the daemon loading and use less I/O at startup


author: Richard Hughes <richard@hughsie.com> 0.1.29-1
changelog:
  - New upstream version
  - Add a --verbose and --version argument to colormgr
  - Add DTP94 native sensor support
  - Allow profiles to have a 'score' which affects the standard space
  - Change the Adobe RGB description to be 'Compatible with Adobe RGB (1998)'
  - Detect profiles from adobe.com and color.org and add metadata
  - Do not auto-add profiles due to device-id metadata if they have been removed
  - Ensure profiles with MAPPING_device_id get auto-added to devices
  - Install various helper libraries for access to hardware
  - Set the additional 'OwnerCmdline' metadata on each device


author: Richard Hughes <richard@hughsie.com> 0.1.28-1
changelog:
  - New upstream version
  - Add some default GSetting schema values for the calibration helper
  - Add the sensor images as metadata on the D-Bus interface
  - Quit the session helper if the device or sensor was not found


author: Richard Hughes <richard@hughsie.com> 0.1.27-4
changelog:
  - Add BR systemd-devel so the seat tracking stuff works
  - Build with full compiler output
  - Do not build the profiles in parallel, backported from upstream
  - Limit the memory allocation to 2GiB when building profiles
  - Do not attempt to build the print profiles on ARM or PPC hardware


author: Kalev Lember <kalevlember@gmail.com> 0.1.27-2
changelog:
  - Split out libcolord to colord-libs subpackage, so that the daemon package
    doesn't get multilibbed


author: Richard Hughes <richard@hughsie.com> 0.1.27-1
changelog:
  - New upstream version
  - Add some more calibration attach images
  - Import shared-color-profiles into colord
  - Install a header with all the session helper defines


author: Richard Hughes <richard@hughsie.com> 0.1.26-1
changelog:
  - New upstream version
  - Add a session helper that can be used to calibrate the screen
  - Add some defines for the Spyder4 display colorimeter
  - Add support for reading and writing .cal files to CdIt8
  - Add the ability to 'disable' a device from a color POV
  - Create ICCv2 profiles when using cd-create-profile
  - Use enumerated error values in the client library
  - Use spotread when there is no native sensor driver


author: Richard Hughes <richard@hughsie.com> 0.1.25-1
changelog:
  - New upstream version
  - Add a create-standard-space sub-command to cd-create-profile
  - Add a profile metadata key of 'License'
  - Add a set-version command to the cd-fix-profile command line tool
  - Create linear vcgt tables when using create-x11-gamma
  - Fix GetStandardSpace so it can actually work
  - Move the named color examples to shared-color-profiles


author: Richard Hughes <richard@hughsie.com> 0.1.24-1
changelog:
  - New upstream version
  - Fix a critical warning when user tries to dump a non-icc file
  - Remove libsane support and rely only on udev for scanner information
  - Set the seat for devices created in the session and from udev


author: Richard Hughes <richard@hughsie.com> 0.1.22-1
changelog:
  - New upstream version
  - Split out colord-gtk to a new sub-project to prevent a dep loop
  - Add many generic introspection type arguments
  - Check any files in /usr/share/color/icc have the content type
  - Do not create the same object paths if two sensors are plugged in
  - Fix the udev rules entry for the i1Display3


author: Richard Hughes <richard@hughsie.com> 0.1.21-1
changelog:
  - New upstream version
  - Do not install any parts of colord-sane if --disable-sane is specified
  - Fix InstallSystemWide() by not writing a private file
  - Save the CCMX and ITx files to be compatible with argyllcms
  - The ColorHug has a new VID and PID


author: Richard Hughes <richard@hughsie.com> 0.1.20-1
changelog:
  - New upstream version
  - Add a sensor-set-options command to the colormgr tool
  - Add the concept of 'options' on each color sensor device
  - Enable gtk-doc in the default distro build


author: Richard Hughes <richard@hughsie.com> 0.1.18-1
changelog:
  - New upstream version
  - Add a Manager.CreateProfileWithFd() method for QtDBus
  - Split out the SANE support into it's own process
  - Fix a small leak when creating devices and profiles in clients
  - Fix cd-fix-profile to add and remove metadata entries
  - Install per-machine profiles in /var/lib/colord/icc


author: Richard Hughes <richard@hughsie.com> 0.1.17-1
changelog:
  - New upstream version
  - Add an LED sample type
  - Add PrivateNetwork and PrivateTmp to the systemd service file
  - Fix InstallSystemWide() when running as the colord user


author: Richard Hughes <richard@hughsie.com> 0.1.16-1
changelog:
  - New upstream version
  - Now runs as a colord user rather than as root.
  - Support more ICC metadata keys
  - Install a systemd service file
  - Support 2nd generation Huey hardware


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream version
  - This release fixes an important security bug: CVE-2011-4349.
  - Do not crash the daemon if adding the device to the db failed
  - Fix a memory leak when getting properties from a device


author: Richard Hughes <richard@hughsie.com> 0.1.13-1
changelog:
  - New upstream version
  - Ensure uid 0 can always create devices and profiles
  - Reduce the CPU load of clients when assigning profiles


author: Richard Hughes <richard@hughsie.com> 0.1.11-2
changelog:
  - Remove the sedding libtool's internals as it breaks
    generation of the GObject Introspection data.


author: Richard Hughes <richard@hughsie.com> 0.1.8-1
changelog:
  - New upstream version
  - Add a webcam device kind
  - Add a timestamp when making profiles default
  - Add support for reading and writing ICC profile metadata
  - Allow the client to pass file descriptors out of band to CreateProfile
  - Prettify the device vendor and model names
  - Split out the sensors into runtime-loadable shared objects
  - Provide some GIO async variants for the methods in CdClient
  - Ensure GPhoto2 devices get added to the device list


author: Richard Hughes <richard@hughsie.com> 0.1.7-1
changelog:
  - New upstream version.
  - Create /var/lib/colord at buildtime not runtime for SELinux
  - Ensure profiles with embedded profile checksums are parsed correctly
  - Move the colorimeter rules to be run before 70-acl.rules
  - Stop watching the client when the sensor is finalized
  - Ensure the source is destroyed when we unref CdUsb to prevent a crash
  - Only enable the volume mount tracking when searching volumes


author: Ilya Okomin <ilya.okomin@oracle.com> - 0.1.49-2.0.1
changelog:
  - Ship OL7 stig profile aligned with DISA STIG for OL7 v1r1 [Orabug: 31188462]
  - Reduce number of build threads to avoid concurrency failure [Orabug: 31188462]
  - Update rhel7 project to generate Oracle Linux 7 content [Orabug: 30601140]
  - Update rhel7 profiles to generate Oracle Linux 7 content [Orabug: 30601140]
  - Update guide source to generate Oracle Linux 7 content [Orabug: 30601140]
  - Use separate rule for each audit syscall in pci-dss [Orabug: 30601140]
  - Add ntpd and chronyd OL approved servers support [Orabug: 30601140]
  - Add UEFI boot loader rules to Oracle Linux 7 profiles [Orabug: 30601140]
  - Fix OL7 mapping in stable_profile_ids test [Orabug: 30601140]
  - Update OL7 Essential Eight profile [Orabug: 31113304]
  - Ship OL 8 content [Orabug: 31113304]


author: Watson Sato <wsato@redhat.com> - 0.1.49-2
changelog:
  - Fix remediation of dconf_gnome_login_banner_text (RHBZ#1776780)
  - Fix misleading sysctl rules description (RHBZ#1494606)
  - Update STIG FIPS approved SSHD ciphers (RHBZ#1781244)


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.46-10
changelog:
  - Added missing CCE for rule sudo_require_authentication. (RHBZ#1755192)
  - fix check and remediation for rule aide_periodic_cron_checking (RHBZ#1658036)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.46-9
changelog:
  - Fixed missing CCE for OSPP, E8 and STIG profiles. (RHBZ#1726698)
  - Added kickstart file for the Essential Eight (e8) profile. (RHBZ#1755192)


author: Matěj Týč <matyc@redhat.com> - 0.1.46-7
changelog:
  - Added support for the Essential Eight (e8) profile. (RHBZ#1755192)
  - Fixed issues with sshd rules used in the e8 profile. (RHBZ#1755192)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.46-6
changelog:
  - Updated ansible playbooks to use modules in favor of shell. (RHBZ#1726698)
  - Removed rule directory_access_var_log_audit from OSPP profile. (RHBZ#1726698)
  - Fixed ansible playbooks failing when running in --check mode. (RHBZ#1726698)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.46-5
changelog:
  - Fixed grub2_enable_fips_mode rule when installing RHEL on machines with AES-enabled processors. (RHBZ#1754532)


author: Jan Černý <jcerny@redhat.com> - 0.1.46-4
changelog:
  - Fix evaluation and remediation of audit rules in PCI-DSS profile (RHBZ#1754550)
  - Fixed mtab handling of remediation of /dev/shm/noexec (RHBZ#1754553)


author: Jan Černý <jcerny@redhat.com> - 0.1.43-12
changelog:
  - Make aide and smart card rules not applicable to containers (RHBZ#1711893)
  - Added rule dconf_db_up_to_date to ensure dconf databases are up-to-date (RHBZ#1631378)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.43-5
changelog:
  - Remove ensure_gpgcheck_repo_metadata rule from profiles (RHBZ#1703010)
  - Deduplicate CCE assigned to rules (RHBZ#1703092)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.43-4
changelog:
  - Mark SELinux rules as machine only (RHBZ#1630739)
  - Mark service disabled rules as machine only (RHBZ#1630739)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.43-3
changelog:
  - Mark rules which were not applicable for containers as machine only (RHBZ#1630739)
  - Fix content support for UBI-Minimal (RHBZ#1695213)


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.43-2
changelog:
  - Fixes for smooth Ansible playbooks run (RHBZ#1647189)
  - Fix Ansible template for file permissions (RHBZ#1686007)
  - Fix remediation of rule rpm_verify_permissions (RHBZ#1686005)
  - Fix remediation of audit rules for privileged commands (RHBZ#1687826)


author: Matěj Týč <matyc@redhat.com> - 0.1.40-11
changelog:
  - Fixes for RHBZ#1619689:
  - Added support for kernel parameters yama.ptrace_scope, kptr_restrict, dmesg_restrict and kexec_load_disabled.
  - Added support for boot parameters audit_backlog_limit=8192, slub_debug=P, page_poison=1 and vsyscall=none.
  - Added support for proper /dev/shm handling (noexec,nosuid,nodev,mode=1777)
  - Added support for checking that sendmail and abrt are not installed.
  - Introduced OSPP to the OSPP profile title.
  - Disabled linkcheck tests during the build.


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.40-8
changelog:
  - Add Bash remediation for rule grub2_audit_arguments (RHBZ#1619689)
  - Allow remediation for rule dconf_gnome_screensaver_lock_delay to fix commented settings (RHBZ#1609122)
  - Select missing audit rules for privileged commands for OSPP4.2 Profile (RHBZ#1619689)


author: Matěj Týč <matyc@redhat.com> - 0.1.40-6
changelog:
  - Applied a batch of patches that improve OSPP 4.2 profile support for RHEL7 (RHBZ#1619689)
  - Fixed the xccdf_org.ssgproject.content_rule_dconf_gnome_screensaver_lock_enabled check (RHBZ#1609122)


author: Matěj Týč <matyc@redhat.com> - 0.1.40-3
changelog:
  - Don't generate remediations for Anaconda for /dev/cdrom mount point (RHBZ#1618840)
  - Install dracut-fips when fips mode is enabled in the profile (RHBZ#1587911)


author: Matěj Týč <matyc@redhat.com> - 0.1.40-1
changelog:
  - Update to upstream release 0.1.40
  - Underlying code has been deduplicated and unified, which fixes countless subtle bugs.
  - Updated Ansible playbooks, so they don't use deprecated constructs.
  - Service disable family of rules take the corresponding socket deactivation into account if applicable in check and in remediations.


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.39-1
changelog:
  - Update to upstream release 0.1.39
  - Profile IDs simplified
  - Common Profile removed in favor of Standard Profile
  - RHEL7 STIG reference updated to V1R4
  - RHEL6 STIG reference updated to V1R18
  - New License - BSD-3 Clause
  - Several remediation fixes
  - Better content support for DISA STIG Viewer (#2418)


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.36-7
changelog:
  - Fix sshd_required unset (RHBZ#1522956)
  - Fix missing bash remediation functions include (RHBZ#1524738)
  - Fix empty columns in SRG HTML Table (RHBZ#1531105)
  - Fix reference to oudated PAM config manual (RHBZ#1447760)


author: Matěj Týč <matyc@redhat.com> - 0.1.36-5
changelog:
  - Patched not to check library ownership in libexec.
  - Patched to fix title of DISA STIG profile.
  - Patched to deprecate RhostsRSAAuthentication.
  - Patched to fix umask_for_daemons.


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.36-1
changelog:
  - Update to upstream release 0.1.36
  - Introduction of SCAP Security Guide Test Suite
  - Better alignment of RHEL6 and RHEL7 with DISA STIG
  - Remove JBoss EAP5 content due to being End-of-Life
  - New STIG Profile for JBOSS EAP 6
  - Updates in C2S Profile for RHEL 7
  - Variables can be directly tailored in Ansible roles
  - Content presents less false positives in containers
  - Changes in directory layout


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.35-1
changelog:
  - Update to upstream release 0.1.35
  - Remove Red Hat Enterprise Linux 5 content due to being End-of-Life March 31, 2017
  - Added several templates for OVAL checks
  - Many optimizations in build process
  - Different title for PCI-DSS Benchmark variants
  - Remediation roles moved to /usr/share/scap-security
  - Fix duplicated roles and guides (RHBZ#1465691)


author: Watson Sato <wsato@redhat.com> 0.1.33-1
changelog:
  - Update to upstream version 0.1.33
  - DISA RHEL7 STIG profile alignment improved
  - Introduction of remediation roles
  - RPM and DEB test packages are built by CMake with CPack
  - Lots of remediation fixes


author: Watson Sato <wsato@redhat.com> 0.1.32-1
changelog:
  - Update to upstream version 0.1.32
  - New CMake build system
  - Improved NIST 800-171 profile
  - Initial RHVH profile
  - New CPE to identify systems like machines (bare-metal and VM) and containers (image and container)
  - Template clean up in lots of remediations


author: Watson Sato <wsato@redhat.com> 0.1.30-5
changelog:
  - Fix template remediation function used by SSHD remediation
  - Reduce scope of patch that fixes SSHD remediation (RH BZ#1415152)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.30-3
changelog:
  - Correct the remediation script for 'Enable Smart Card Login' rule
    for Red Hat Enterprise Linux 7 (RH BZ#1357019)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.30-2
changelog:
  - Fix issue of two STIG profiles for Red Hat Enterprise Linux 6 benchmark
    having the identical title (RH BZ#1351541)
  - Enhance the shared OVAL check for 'Set Deny For Failed Password Attempts'
    rule and also Red Hat Enterprise Linux 7 OVAL check for 'Configure the root
    Account for Failed Password Attempts' rule to report correct system status
    WRT to these requirements also in the case the SSSD daemon is used
    (RH BZ#1344581)
  - Include currently available kickstart files and produced HTML tables for
    Red Hat Enterprise Linux 6 and 7 products into the produced RPM package
    (RH BZ#1351751)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.30-1
changelog:
  - Update to upstream's 0.1.30 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.30
    (RH BZ#1289533)
  - Drop remediation functions library since starting from 0.1.30 release
    remediation scripts are part of the benchmarks directly
  - Drop three patches that have been accepted upstream in the meantime
  - Update drop-rpm-verify-permissions-rule patch to work properly against
    0.1.30 release


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.25-3
changelog:
  - Drop "Verify and Correct File Permissions with RPM" rule from the PCI-DSS
    profile for Red Hat Enterprise Linux 7 (RH BZ#1267861)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.24-3
changelog:
  - Add remediation script for 'accounts_passwords_pam_faillock_unlock_time' rule
    for Red Hat Enterprise Linux 7 product
  - Override title and description for all existing profiles for Red Hat
    Enterprise Linux 6 product that are extending another SCAP profile
    (RHBZ#1246529)
  - Correct various issues in the included Oscap Anaconda Addon PCI-DSS profile
    kickstart file for Red Hat Enterprise Linux 7 product
  - Add remediation script for 'audit_rules_time_clock_settime' rule for
    Red Hat Enterprise Linux 7 product
  - Add remediation scripts for 'audit_rules_time_adjtimex',
    'audit_rules_time_settimeofday', and 'audit_rules_time_stime' rules for
    Red Hat Enterprise Linux 7 product
  - Tag current PCI-DSS profile for Red Hat Enterprise Linux 7 product with
    "Draft" label
  - Disable the following rules in the PCI-DSS profile for the Red Hat Enterprise
    Linux 7 product:
    * dconf_gnome_screensaver_idle_delay -- missing remediation script,
    * dconf_gnome_screensaver_idle_activation -- missing remediation script,
    * dconf_gnome_screensaver_lock_enabled -- missing remediation script,
    * audit_rules_login_events -- incorrect OVAL check (upstream issue #607),
    * audit_rules_privileged_commands -- missing remediation script, and
    * audit_rules_immutable -- missing remediation script.


author: Martin Preisler <mpreisle@redhat.com> 0.1.24-2
changelog:
  - Break-down firewalld rule description for Red Hat Enterprise Linux 7 product
    into multiple lines, prevents HTML guide UX issues


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.24-1
changelog:
  - Rebase to upstream scap-security-guide-0.1.24 version
  - Start producing the -doc subpackage to provide the HTML formatted
    documents containing security guides generated from shipped XCCDF benchmarks


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.23-1
changelog:
  - Rebase to upstream scap-security-guide-0.1.23 version
  - Update upstream tarball source URL to GitHub archive location
  - Drop the following patches that have been accepted upstream:
    * scap-security-guide-0.1.19-rhel7-include-only-rht-ccp-profile.patch
    * scap-security-guide-0.1.19-rhel7-drop-restorecond-since-in-optional.patch
    * scap-security-guide-0.1.19-update-man-page-for-rhel7-content.patch
    * scap-security-guide-0.1.19-rhel7-update-pam-XCCDF-to-use-pam_pwquality.patch
    * scap-security-guide-0.1.20-rhel7-shared-fix-limit-password-reuse-remediation.patch
    * scap-security-guide-0.1.20-rhel6-rhel7-PR#280-set-deny-prerequisite-#1.patch
    * scap-security-guide-0.1.20-rhel6-rhel7-set-deny-prerequisite-#2.patch
    * scap-security-guide-0.1.20-shared-fix-set-deny-for-failed-password-attempts-remediation.patch
    * scap-security-guide-0.1.20-rhel7-specify-exact-profile-name-when-generating-guide.patch
  - Include the datastream versions of Firefox and Java Runtime Environment (JRE) benchmarks
  - Include USGCB and DISA STIG profile kickstart files for Red Hat Enterprise Linux 6


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.19-2
changelog:
  - Fix Limit Password Reuse remediation script error
  - Fix Set Deny For Failed Password Attempts remediation script error
  - Use RHT-CCP profile name when generating HTML guide
  - Describe RHT-CCP profile in the manual page


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.19-1
changelog:
  - Include RHEL-7 content (RHT-CCP profile only)
  - Drop RHEL-7 restorecond XCCDF rule since policycoreutils-restorecond in Optional channel
  - Drop RHEL-7 cpuspeed XCCDF rule since obsoleted by cpupower from kernel-tools
  - Update manual page to be more appropriate for RHEL-7
  - Drop RHEL-6 C2S profile update patch since merged upstream


author: Shawn Wells <shawn@redhat.com> 0.1-16.rc1
changelog:
  - [bugfix] RHEL6 no_empty_passwords remediation script overwrote
    system-auth symlink. Added --follow-symlink to sed command.


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-15.rc5
changelog:
  - Point the spec's source to proper remote tarball location
  - Modify the main Makefile to use remote tarball when building RHEL/6's SRPM


author: Shawn Wells <shawn@redhat.com> 0.1-15.rc3
changelog:
  - [bugfix] Updated rsyslog_remote_loghost to scan /etc/rsyslog.conf and /etc/rsyslog.d/*
  - Numberous XCCDF->OVAL naming schema updates
  - All rules now have CCE


author: Shawn Wells <shawn@redhat.com> 0.1-14
changelog:
  - Formal RPM release
  - Inclusion of rht-ccp profile
  - OVAL unit testing patches
  - Bash remediation patches
  - Bugfixes


author: Shawn Wells <shawn@redhat.com> 0.1-8
changelog:
  - Significant copy editing to XCCDF rules per community
    feedback on the DISA RHEL/6 STIG Initial Draft


author: Shawn Wells <shawn@redhat.com> 0.1-7
changelog:
  - Corrected XCCDF content errors
  - OpenSCAP now supports CPE dictionaries, important to
    utilize --cpe-dict when scanning machines with OpenSCAP,
    e.g.:
    $ oscap xccdf eval --profile stig-server \
     --cpe-dict ssg-rhel6-cpe-dictionary.xml ssg-rhel6-xccdf.xml


author: Shawn Wells <shawn@redhat.com> 0.1-6
changelog:
  - Corrected RPM versioning, we're on 0.1 release 6 (not version 1 release 6)
  - Updated RPM includes feedback received from DoD Consensus meetings


author: John Dennis <jdennis@redhat.com> - 5.8-11
changelog:
  - add ctags-5.8-memmove.patch
    bug #284 absoluteFilename uses strcpy on overlapping strings 
    http://sourceforge.net/p/ctags/bugs/284/  
    The bug was fixed upstream on 2012-03-26 in the following commit
    http://sourceforge.net/p/ctags/code/782/
    ctags-5.8-memmove.patch simply adds the same patch as the above commit.


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-7
changelog:
  - Remove the broken fsync view, stop using the obsolete 'tracing_enabled'.
  - Better error message when run as non-root.


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-6
changelog:
  - Build both with and without GUI to allow the use on systems where Gtk
    dependency is undesirable. The latencytop package is still the full-blown build.
    latencytop-tui is the miminal build. latencytop-common has the shared files.


author: Michal Schmidt <mschmidt@redhat.com> - 0.3-4
changelog:
  - Package the translation table too and modify latencytop.c to look for it in
    the correct directory.


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-14
changelog:
  - Do not show disabled buttons in Plastik decoration theme
    Resolves: bz#1677641

  - Taskmanager: dismiss group when application is closed and there is enough space
    Resolve: bz#1698048


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-13
changelog:
  - Sanitise notification HTML
    Resolves: bz#1568853

  - Increase cpu buffer size in ksysguard
    Resolves: bz#1611762


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-10
changelog:
  - Fix grouping of tasks in taskmanager applet
    Resolves: bz#1348917
  - Fix unlocking of kscreenlocker, unlock it just once
    Resolves: bz#1333441


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-8
changelog:
  - Powerdevil: do not notify about a non existent action
    Resolves: bz#1289149
  - Plasma taskmanager: close context menu when task is closed
    Resolves: bz#1262603


author: Daniel Vrátil <dvratil@redhat.com> - 4.10.5-21
changelog:
  - Resolves: bz#1090492 - changing calendar settings does not appear in plasmoid until month changed (fixed patch)
  - Resolves: bz#1109936 - incorrect dispaly corner detection with multiple displays (fixed patch)


author: Than Ngo <than@redhat.com> - 4.10.5-20
changelog:
  - Resolves: bz#1040678 - cannot assign custom keyboard shortcut for Show Desktop Grid
  - Resolves: bz#1090492 - changing calendar settings does not appear in plasmoid until month changed
  - Resolves: bz#1109936 - incorrect dispaly corner detection with multiple displays


author: Than Ngo <than@redhat.com> - 4.10.5-3
changelog:
  - CVE-2013-4132, backport systray icons memleak fix
  - CVE-2013-4133, backport potential kcheckpass security issue


author: Martin Briza <mbriza@redhat.com> 4.10.2-9
changelog:
  - regenerated the systemd-displaymanager patch against latest upstream master
  - worked around #955374 before I fix it clean upstream


author: Rex Dieter <rdieter@fedoraproject.org> 4.10.2-5
changelog:
  - drop LD_BIND_NOW from startkde (#908380)
  - fold all startkde-related patches into redhat_startkde.patch


author: Rex Dieter <rdieter@fedoraproject.org> 4.10.1-2
changelog:
  - PowerDevil should use upower to suspend on F17 (#920874)
  - other small upstream fixes (xrandrbrightness, login1 leak, stop screensaver)


author: Rex Dieter <rdieter@fedoraproject.org> 4.10.0-6
changelog:
  - tweak fedora-plasma-cache.sh for plasma-svgelements*, Trolltech.conf too
  - enable powerdevil-login1 support on f18


author: Rex Dieter <rdieter@fedoraproject.org> 4.9.97-3
changelog:
  - hack to use org.freedesktop.login1 to handle suspend (instead of upower),
    seems to help avoid double-sleep (#859227)


author: Martin Briza <mbriza@redhat.com> 4.9.90-2
changelog:
  - Merged and cleaned the systemd shutdown and logout patches.
  - It is possible to use systemd and/or CK without defining it at compile time


author: Martin Briza <mbriza@redhat.com> - 4.9.3-3
changelog:
  - user switching dialog now doesn't list inactive (closing) sessions and more information is retrieved from logind


author: Lukáš Tinkl <ltinkl@redhat.com> 4.9.1-6
changelog:
  - update the systemd PowerDevil Policy Agent patch to match the upstream
    version (part of KDE 4.9.2)
  - update clock applets on system date/time changes


author: Rex Dieter <rdieter@fedoraproject.org> 4.9.0-2
changelog:
  - kcm_fonts should use $XDG_CONFIG_HOME/fontconfig/fonts.conf for storage settings for fontconfig > 2.10.0 (kde#304317)


author: Than Ngo <than@redhat.com> - 4.8.97-2
changelog:
  - remove obsolete stuffs in startkde, kde-4.6.x already uses QLocale
    to try obtain a default country.


author: Rex Dieter <rdieter@fedoraproject.org> 4.8.95-3
changelog:
  - Battery Monitor widget stops tracking charging state changes after suspend/resume cycle (#837345, kde#287952)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.8.80-2
changelog:
  - new showremainingtime patch, now just defaults the option to true
    (It doesn't have ugly side effects anymore with the rewritten plasmoid.)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.8.0-5
changelog:
  - kde-workspace: Requires: ConsoleKit (shutdown/restart, works around #788171)
  - kdm: Requires: ConsoleKit (works around #787855, nasty error message on login)


author: Rex Dieter <rdieter@fedoraproject.org> 4.8.0-2
changelog:
  - kcm_colors subpkg (#761184)
  - kdm-themes: Requires: kde-wallpapers unconditionally (#784389)
  - s/kdebase-runtime/kde-runtime/


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.95-3
changelog:
  - kdm overwrites ~/.Xauthority with wrong SELinux context on logout (#567914,kde#242065)
  - gcc47 fixes


author: Radek Novacek <rnovacek@redhat.com> 4.7.80-4
changelog:
  - Respin with new upstream tarball
  - Drop patch: don't use INSTALL to copy file to current binary dir


author: Radek Novacek <rnovacek@redhat.com> 4.7.80-3
changelog:
  - Fixed file listed twice
  - Remove big cursors from files (they are no longer in upstream tarball)
  - Add new files: libkwinglutils.so*, liboxygenstyleconfig.so*
    libpowerdevilconfigcommonprivate.so*, kfontinst.knsrc
  - New ksplash theme Minimalistic
  - patch: don't use INSTALL to copy file to current binary dir


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.3-12
changelog:
  - Crash in TaskManager::TaskItem::task (kde#272495)
  - Crashes When Adding Weather Widgets (Geolocation) (kde#277036)


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.1-2
changelog:
  - upstream kwin_performance patch
  - Use /etc/login.defs to define a 'system' account instead of hard-coding 500 (#732830)


author: Jaroslav Reznik <jreznik@redhat.com> 4.7.0-1
changelog:
  - 4.7.0
  - kde4workspace_version is not needed anymore
  - Provides: kde-workspace kde-wallpapers (to match new upstream tarballs)


author: Lukas Tinkl <ltinkl@redhat.com> - 4.6.2-2
changelog:
  - #694222 - Brightness controls no longer work
  - kdebug#257948 - Powerdevil can no longer control brightness
  - drop obsolete HAL backlight patch


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.6.1-7
changelog:
  - Restore lost hunks from redhat_startkde patch, fixes regressions with running
    Qt 3 binaries (Qt 3 Assistant etc.) and with the initial background color
  - Fix incorrectly rebased hunk from redhat_startkde patch, fixes regression with
    language setting


author: Rex Dieter <rdieter@fedoraproject.org> 4.6.1-2
changelog:
  - use system-kde-theme again (ie, lovelock-kde-theme on f15)
  - -Requires: system-backgrounds-kde
  - +Requires: system-plasma-desktoptheme
  - -ksplash-themes: move Default (Air+Horos) ksplash theme here


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.80-7
changelog:
  - -googlegadgets => plasma-scriptengine-googlegaddgets
  - -python-applet => plasma-scriptengine-python
  - (new) plasma-scriptengine-ruby


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.5.3-2
changelog:
  - drop classicmenu-games patch, upstream fixed the same issue differently and
    now the 2 fixes conflict (classic menu confuses Name and Description)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.5.2-5
changelog:
  - use upstream ck-shutdown patch from 4.6 trunk (instead of my old one),
    supports GDM session switching (#560511, kde#186198)
  - drop old F11- version of the ck-shutdown patch, F11 is EOL


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.2-2
changelog:
  - include better, upstream fix for: krandr: Display Settings are Lost
    on Logout (kdebug183143, rh#607180)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.4.85-2
changelog:
  - Adding "Enable networking" button to knetworkmanager (rh#598765, kde#238325)
  - drop < f12 conditionals
  - pciutils, raw1394 & qualculate BRs
  - added kcmkdm helper and policy (from kdelibs)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.4.2-3
changelog:
  - rip out bulletproof X changes (cf. kubuntu_33_kdm_bulletproof_x.diff) from
    our copy of kubuntu_34_kdm_plymouth_transition.diff
  - drop experimental novt patch, should not be needed with the working Plymouth
    integration and may have side effects (can readd it later if really needed)
  - fix icon name in plasma-konsole patch: use XDG icon instead of kappfinder one


author: Rex Dieter <rdieter@fedoraproject.org> - 4.4.2-2
changelog:
  - try to workaround "X server hogs the CPU (#577482)" by letting X
    choose vt itself
  - include (but not yet apply) kubuntu_34_kdm_plymouth_transition.diff


author: Than Ngo <than@redhat.com> - 4.4.0-4
changelog:
  - move xsession desktop files to main package
    (cannot start kde from gdm if kdm not installed)
  - Desktop locking crashes (kde#217882#16)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.90-8
changelog:
  - SELinux is preventing /sbin/setfiles "read" access on
    /var/spool/gdm/force-display-on-active-vt (deleted) (#556643)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.90-5
changelog:
  - do not link calendar dataengine with Akonadi (kde#215150, rh#552473)
  - s/plasma-engine/plasma-dataengine/


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.85-3
changelog:
  - F13+: don't Obsoletes: PolicyKit-kde, let polkit-kde obsolete it
  - F13+: explicitly require polkit-kde instead of PolicyKit-authentication-agent


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.75-0.4.svn1048496
changelog:
  - backport battery plasmoid from current pre-4.3.80 trunk for showremainingtime
  - rebase battery-plasmoid-showremainingtime patch
  - rebase brightness-keys patch for the above backport


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.1-3
changelog:
  - -python-applet: Provides: plasma-scriptengine-python
  - Requires: system-ksplash-theme (f12+,rhel6+)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.0-101
changelog:
  - inflate Release tag, avoiding possible upgrade/obsoletes pain
  - -devel: drop Provides: PolicyKit-kde-devel, bump Obsoletes


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.0-2
changelog:
  - move designer plugins to -libs, fixes
    Multilib conflicts for index.cache.bz2 (#515088)
  - tighten -libs deps, using %{?_isa}
  - %check: desktop-file-validate


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.2.95-2
changelog:
  - port and reapply rootprivs (#434824) patch (#508593)
  - fix internal version number (otherwise it mismatches with our file list)


author: Rex Dieter <rdieter@fedoraproject.org> 4.2.85-2
changelog:
  - upgrade path broken (F-11+), Obsoletes: guidance-power-manager (#502892)
  - drop < F-10 crud, have_bluez3


author: Rex Dieter <rdieter@fedoraproject.org> - 4.2.1-9
changelog:
  - kdm subpkg
  - -devel: move cmake modules here
  - Requires: kdelibs4%{?_isa} ..
  - BR: libutempter-devel (drops need for kwrited helper)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.2.0-4.1
changelog:
  - conditionalize bluetooth backport on F10+
  - F9: revert solid-bluetooth to the version from KDE 4.1.4


author: Rex Dieter <rdieter@fedoraproject.org> - 4.2.0-3
changelog:
  - Requires: PyKDE4 (for plasmascript bits)
  - solid-bluetoothTrunkTo42.diff (bug #481801), and
    +Provides: solid-bluetooth(-devel) = 4.3


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.85-5
changelog:
  - drop BR edje-devel, we need QEdje instead, which we don't have yet
  - comment out BR google-gadgets-* for now, need 0.10.4, have 0.10.3


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.80-5
changelog:
  - use python_sitearch for x86_64 systems
  - kephal seems to be disabled/removed, re-adapted file lists


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.80-3
changelog:
  - rebase kdebase-workspace-4.1.1-show-systemsettings.patch
  - new library: Kephal -> adapt file lists


author: Than Ngo <than@redhat.com> 4.1.80-2
changelog:
  - merged
  - drop kdebase-workspace-4.1.2-kdm-i18n.patch, it's included in upstream
  - drop kdebase-workspace-4.0.85-plasma-default-wallpaper.patch, it's included in upstream
  - drop kdebase-workspace-4.1.65-consolekit-kdm.patch
  - add kdebase-workspace-4.1.80-session-button.patch
  - add kdebase-workspace-4.1.2-ldap.patch


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.80-1
changelog:
  - 4.1.80
  - BR cmake >= 2.6.2
  - make install/fast
  - drop _default_patch_fuzz 2
  - rebase startkde patch
  - rebase plasma-konsole patch
  - rebase ck-shutdown patch
  - add PyKDE4-devel, python-devel and PyQt4-devel to build plasma's python
    scripting interface
  - BR google-gadgets-devel for google gadgets scriptengine
  - BR libusb-devel for Logitech USB support in KControl


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.2-10
changelog:
  - never touch PATH in startkde, prepending $QTDIR/bin is unnecessary on Fedora
    and breaks locating Qt 3 Assistant and other Qt 3 stuff (startkde gets run
    with a full path by KDM)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.2-6
changelog:
  - reenable panel-autohide-fix-flicker patch
  - backport revision 866998 to fix the CPU consumption problem (kde#172549)
  - backport panelview.cpp coordinate fixes (revisions 869882, 869925, 870041)
  - backport revision 871058 (request config sync when panel controller goes away)


author: Lukáš Tinkl <ltinkl@redhat.com> 4.1.0-5
changelog:
  - fix 457479: "Run as root" dialog of kdm system settings is shown twice
    (due to activated signal being connected to twice)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.99-5
changelog:
  - F10+: fix circular kdebase<->kdebase-workspace dependency: don't Obsolete or
    Require kdebase, as kdebase now requires kdebase-workspace, obviating the
    upgrade path hack


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.99-2
changelog:
  - backport Plasma tooltip manager from KDE 4.2 (fixes regression from 4.0)
    WARNING: Adds some new APIs from 4.2 (Plasma::popupPosition, Plasma::viewFor,
             Plasma::ToolTip*), use at your own risk, we have no control to
             guarantee that they will not change!


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.85-3
changelog:
  - rewrite and reapply plasma-default-wallpaper patch
  - (no more separate plasma-default-wallpaper-config part)
  - rediff kde#154119 patch one last time


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.72-1
changelog:
  - update to 4.0.72
  - update file list (Lorenzo Villani)
  - port plasma-konsole, ck-shutdown, rootprivs, plasma-default-wallpaper patches
  - remove NoDisplay=true in systemsettings onlyshowkde patch (still add
    OnlyShowIn=KDE), rename to show-systemsettings
  - drop upstreamed suspend patch
  - drop backported kde#155362 and menu-switch patches
  - drop rh#443610 patch, "Zoom Out" should be working in 4.1
  - disable kde#158301 patch for now (fails to apply, looks hard to port)


author: Lukáš Tinkl <ltinkl@redhat.com> 4.0.3-15
changelog:
  - workaround #434824: KDE4 System Settings - No Method To Enter Administrative Mode
  - fix #441062: packagekit tools do not show icons correctly on KDE


author: Than Ngo <than@redhat.com> 4.0.2-7
changelog:
  - apply upstream patch to fix changing wallpaper causes desktop to go white
  - apply upstream patch to check whether the to-be-embedded window has been destroyed, (bz#437058)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.0-1
changelog:
  - update to 4.0.0
  - drop upstreamed creategtkrc-gtk212 patch
  - update redhat-startkde and consolekit-kdm patches


author: Rex Dieter <rdieter[AT]fedoraproject.org> 3.97.0-3
changelog:
  - Requires: coreutils dbus-x11 xorg-x11-apps xorg-x11-utils
              xorg-x11-server-utils (used in startkde)
  - drop pam configs that were previously moved to kde-settings


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.2-2
changelog:
  - BR: dbus-devel
  - crystalsvg icons are not part of kdebase-workspace anymore
  - make sure libkdeinit_plasma.so is in normal package


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 3.96.1-3
changelog:
  - update and apply redhat-startkde patch
  - update and apply KDM ConsoleKit patch (#228111, kde#147790)
  - ConsoleKit patch also includes xdmcp fixes from Mandriva (#243560)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 3.96.1-2
changelog:
  - %doc README COPYING
  - -libs subpkg
  - -libs: Requires: kdelibs4
  - don't remove libplasma.so from %{_kde4_libdir}
  - %files: use %_datadir for dbus-1/interfaces,xsessions


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.0-7
changelog:
  - use kde.desktop from /usr/share/apps/kdm/sessions/kde.desktop
  - use %config(noreplace) for /etc/ksysguarddrc
  - Requires: kdebase, kdebase-runtime, oxygen-icon-theme
  - fix url


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.0-3
changelog:
  - own some more directories
  - add %defattr to package devel
  - some spec cleanups
  - -R: kdepimlibs-devel
  - +BR: libXpm-devel
  - +BR: glib2-devel (do we really need this?)


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.0-2
changelog:
  - BR: libXxf86misc-devel
  - BR: libXxf86misc-devel
  - BR: libXcomposite-devel
  - BR: bluez-libs-devel
  - BR: libxklavier-devel
  - BR: pam-devel
  - BR: lm_sensors-devel
  - BR: libXdamage-devel
  - BR: libXv-devel
  - BR: libXres-devel


author: Pravin Satpute <psatpute@redhat.com> - 2.4.4-1
changelog:
  - upstream release of 2.4.4
  - updated url for upstream tarball
  - added Makefile in upstream tar ball


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-12
changelog:
  - Resolves: #1183909 - programs using "PreeditType: OverTheSpot" is stalled
  - Resolves: #1191825 - gtk2's immodules.cache won't be updated in some cases


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-6
changelog:
  - Resolves: #1051389, #1051391, #1051408, #1051397, #1051398, #1051415,
                Updated ibus-HEAD.patch for upstream
  - Resolves: #1050813
    Deleted notify-python in Requires


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-1
changelog:
  - Bumped to 1.5.3
  - Deleted ibus-xx-g-s-disable-preedit.patch as EOL.
  - Deleted ibus-gjs as EOL.
  - Removed imsettings-gnome, im-chooser, libgnomekbd dependencies.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.2-4
changelog:
  - Updated ibus-HEAD.patch for upstream.
  - Added ibus-xx-1.5.2.patch until 1.5.3 will be released.
  - Added ibus-xx-ctrl-space.patch for back compatible triggers.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.2-1
changelog:
  - Bumped to 1.5.2
  - Created noarch packages for python files due to .pyc and .pyo.
  - Added man pages.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20121109-1
changelog:
  - Bumped to 1.4.99.20121109
  - Removed im-chooser, imsettings-gnome, gnome-icon-theme-symbolic
    dependencies in f18 because ibus gnome integration is done.
    Use ibus-keyboard instead of input-keyboard-symbolic.
  - Disabled ibus-gjs build because of ibus gnome integration.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120822-2
changelog:
  - Updated ibus-530711-preload-sys.patch
  - Updated ibus-541492-xkb.patch
  - Updated ibus-xx-no-use.diff
    Fixed Bug 854161 - not able to add keymap with ibus-setup


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120822-1
changelog:
  - Bumped to 1.4.99.20120822
  - Bumped to ibus-gjs 3.4.1.20120815
    Fixed Bug 845956 - ibus backward trigger key is not customized
    Fixed Bug 844580 - ibus-dconf does not load the system gvdb
  - Separated ibus-810211-no-switch-by-no-trigger.patch from ibus-HEAD.patch


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120428-2
changelog:
  - Updated ibus-HEAD.patch
  - Updated ibus-541492-xkb.patch
  - Updated ibus-xx-branding-switcher-ui.patch
    Fixed Bug 810211 - Cancel Control + space pressing Control key.
  - Updated ibus-xx-no-use.diff
    Enabled to customize trigger keys with non-modifier trigger keys.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120428-1
changelog:
  - Bumped to 1.4.99.20120428
    Fixed Bug 799571 - no IME list at the session login.
    Fixed Bug 810415 - ibus does not handle Ctrl+space with BUTTON_PRESS.
  - Bumped to ibus-gjs 3.4.1.20120428
    Fixed Bug 802052 - no modifiers trigger keys.
    Fixed Bug 803244 - IME switch Ctrl+space not working on shell text entry.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120317-1
changelog:
  - Bumped to 1.4.99.20120317
    Fixed Bug 718668 - focus move is slow with ibus-gnome3
    Fixed Bug 749497 - Enhance IME descriptions in status icon active menu
  - Bumped to ibus-gjs 3.3.90.20120317
  - Added ibus-xx-no-use.diff
    Fixed Bug 803260 - Disable non-global input method mode
  - Updated ibus-HEAD.patch
    Fixed Bug 803250 - ibus lookup window font customization
    Fixed Bug 803177 - language id on ibus-ui-gtk3 switcher
  - Update ibus-530711-preload-sys.patch
    Fixed Bug 797023 - port preload engines


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120303-3
changelog:
  - Bumped to ibus-gjs 3.3.90.20120308 to work with gnome-shell 3.3.90
  - Fixed Bug 786906 - Added ifnarch ppc ppc64 s390 s390x
  - Updated ibus-HEAD.patch
    Fixed Bug 800897 - After doing "ctrl+space", ibus tray icon freezes


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120203-3
changelog:
  - Fixed ibus-setup on C locale
  - Fixed to show no registered engines from g-c-c.
  - Enabled Alt_R keybinding on ko locales for ibus gtk only.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120203-1
changelog:
  - Updated to 1.4.99.20120203
  - Removed ibus-xx-bridge-hotkey.patch
  - Updated ibus-541492-xkb.patch to use libgnomekbd.
  - Updated ibus-xx-setup-frequent-lang.patch for 1.4.99.20120203


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-17
changelog:
  - Added ibus-771115-property-compatible.patch for f16
    Fixed Bug 771115 - IBusProperty back compatibility.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-16
changelog:
  - Enhanced ibus-gnome3 shell lookup window.
  - Updated ibus-HEAD.patch from upstream
    Fixed Bug 769135 - ibus-x11 SEGV in _process_key_event_done.
  - Updated ibus-541492-xkb.patch
    Fixed Bug 757889 - ibus-setup SEGV without active engine.
    Fixed Bug 760213 - ibus-setup saves XKB variants correctly.
    Fixed Bug 769133 - ibus-engine-xkb returns FALSE for ASCII typings.
  - Updated ibus-xx-bridge-hotkey.patch for an enhancement.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-14
changelog:
  - Enabled dconf.
  - Updated ibus-HEAD.patch
    Fixed Bug 618229 - engine setup buton on ibus-setup.
  - Removed ibus-711632-fedora-fallback-icon.patch as upstreamed.
  - Updated ibus-xx-bridge-hotkey.patch
    Removed Enable/Disable buttons on ibus-setup


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-11
changelog:
  - Updated ibus-541492-xkb.patch
    Fixed Bug 750484 - support reloading Xmodmap
  - Updated ibus-HEAD.patch
    Fixed Bug 753781 - ibus-x11 needs async for hangul ibus_commit_text.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-10
changelog:
  - Updated ibus-xx-bridge-hotkey.patch for f16
    Fixed no XKB languages from layout only. e.g. in(eng).
  - Updated ibus-541492-xkb.patch
    Fixed not to show 'eng' on GUI for in(eng).


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-9
changelog:
  - Updated ibus-HEAD.patch
    Fixed prev/next keys without global engine.
  - Updated ibus-xx-bridge-hotkey.patch for f16
    Fixed Bug 747902 - mouse and ctrl+space not working
    Fixed Bug 749770 - IME hotkey after Control + Space
  - Updated ibus-711632-fedora-fallback-icon.patch
    Fixed Bug 717831 - use old icon for desktops other than gnome


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-2
changelog:
  - Updated to 1.4.0
  - Updated ibus-gjs 3.0.2.20110928 for f15.
  - Updated ibus-gjs 3.2.0.20110928 for f16. (#740588)
  - Updated ibus-530711-preload-sys.patch
    Fixed not to show duplicated engine names in setup treeview (#740447)
  - Updated bus-gjs-xx-gnome-shell-3.1.4-build-failure.patch for f16.
  - Updated ibus-xx-bridge-hotkey.patch
    Fixed a XKB configuration without the input focus for f16 (#739165)
    Fixed not to show null strings in case of no variants (#738130)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110817-4
changelog:
  - Updated ibus-gjs 3.1.91.20110908 and 3.0.2.20110908 for gnome-shell.
    Fixed preedit active segments on gnome-shell and X11 apps.
  - Added ibus-xx-g-s-disable-preedit.patch
    Disabled preedit on gnome-shell for a workaround.
  - Updated ibus.spec
    Fixed Bug 735879 pre/postun scripts


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110817-3
changelog:
  - Fixed Bug 700472 Use a symbol icon instead of an image icon.
  - Updated ibus-HEAD.patch for upstream.
  - Removed ibus-435880-surrounding-text.patch as upstream.
  - Added ibus-711632-fedora-fallback-icon.patch
    Fixed SEGV with no icon in oxygen-gtk icon theme.
  - Added ibus-xx-bridge-hotkey.patch
    Triaged Bug 707370 SetEngine timeout
    Fixed Bug 731610 Keep IM state when text input focus changes
  - Added transitional ibus-gnome3 package.
    Fixed Bug 718110 Use a shell icon instead of pygtk2 icon.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110419-1
changelog:
  - Updated to 1.3.99.20110419
  - Added ibus-HEAD.patch
    Fixed Bug 697471 - ibus-gconf zombie when restart ibus from ibus panel.
  - Updated ibus-541492-xkb.patch
    Fixed Bug 701202 - us(dvorak) does not show up in list
    Updated ibus-1.0.pc for ibus-xkb
    Showed XKB variant descriptions only without layout descriptions.
  - Updated ibus-xx-setup-frequent-lang.patch
    Updated UI strings


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110408-1
changelog:
  - Updated to 1.3.99.20110408
    Fixed Bug 683484 - Timed out SetEngine when select an engine from panel.
    Fixed Bug 657165 - IBus for gnome-shell for Fedora 15.
  - Upstreamed ibus-657165-panel-libs.patch
  - Removed ibus-675503-gnome-shell-workaround.patch
  - Added ibus-xx-setup-frequent-lang.patch
  - Updated ibus-541492-xkb.patch
    Fixed Bug 696481 - no the variant maps without language codes
  - Added dependency of imsettings-gnome.
    Fixed Bug 696510 - need a dependency in ibus-gtk3 for imsettings-gnome


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110228-1
changelog:
  - Updated to 1.3.99.20110228
  - Integrated the part of gjs in Bug 657165 ibus for gnome-shell.
    Added ibus-657165-panel-libs.patch
    Added gnome-shell-ibus-plugins-20110304.tar.bz2
  - Fixed Bug 675503 - a regression in sync mode
    Added ibus-675503-gnome-shell-workaround.patch until gnome-shell is updated.
  - Fixed Bug 677856 - left ibus snooper when im client is switched.
  - Fixed Bug 673047 - abrt ibus_xkb_get_current_layout for non-XKB system
    Updated ibus-541492-xkb.patch


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110117-1
changelog:
  - Updated to 1.3.99.20110117
  - Fixed Bug 666427 - ibus requires dbus-x11
  - Fixed Bug 670137 - QT_IM_MODULE=xim in ibus.conf without ibus-qt


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20101202-1
changelog:
  - Updated to 1.3.99.20101202
  - Added ibus-530711-preload-sys.patch
    Fixed Bug 530711 - Reload preloaded engines by login


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.8-1
changelog:
  - Updated to 1.3.8
  - Added ibus-541492-xkb.patch
    Fixes Bug 541492 - ibus needs to support some xkb layout switching
  - Added ibus-435880-surrounding-text.patch
    Fixes Bug 435880 - ibus-gtk requires surrounding-text support
  - Added ibus-xx-workaround-gtk3.patch
    Workaround for f14 http://koji.fedoraproject.org/koji/taskinfo?taskID=2516604


author: Peng Huang <phuang@redhat.com> - 1.3.0-3
changelog:
  - Update ibus-HEAD.patch
  - Fix bug - some time panel does not show candidates.
  - Update some po files


author: Peng Huang <phuang@redhat.com> - 1.2.0.20091225-1
changelog:
  - Update to 1.2.0.20091225
  - Fix bug 513895 - new IME does not show up in ibus-setup
  - Fix bug 531857 - applet order should correspond with preferences order
  - Fix bug 532856 - should not list already added input-methods in Add selector


author: Peng Huang <phuang@redhat.com> - 1.2.0.20091204-1
changelog:
  - Update to 1.2.0.20091204
  - Fix Bug 529920 - language panel pops up on the wrong monitor
  - Fix Bug 541197 - Ibus crash


author: Peng Huang <phuang@redhat.com> - 1.2.0.20091124-1
changelog:
  - Update to 1.2.0.20091124
  - Update some translations.
  - Fix bug 538147 - [abrt] crash detected in firefox-3.5.5-1.fc12


author: Peng Huang <phuang@redhat.com> - 1.2.0.20090915-1
changelog:
  - Update to 1.2.0.20090915
  - Fix bug 521591 - check if the icon filename is a real file before trying to open it
  - Fix bug 522310 - Memory leak on show/hide
  - Fix bug 509518 - ibus-anthy should only override to jp layout for kana input


author: Peng Huang <phuang@redhat.com> - 1.2.0.20090828-1
changelog:
  - Update to 1.2.0.20090828
  - Change the icon on systray.
  - Fix segment fault in ibus_hotkey_profile_destroy
  - Fix some memory leaks.


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090612-1
changelog:
  - Update to 1.1.0.20090612
  - Fix bug 504942 - PageUp and PageDown do not work in candidate list
  - Fix bug 491040 - Implememnt mouse selection in candidate list


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090609-1
changelog:
  - Update to Update to 1.1.0.20090609
  - Fix bug 502414 - Implemented on-screen help facility
  - Fix bug 502561 - iBus should show keymap name on iBus panel
  - Fix bug 498043 - ibus Alt-grave trigger conflicts with openoffice.org
  - Implemented API for setting labels for candidates in LookupTable


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-5
changelog:
  - Update ibus-HEAD.patch.
  - Show the default input method with bold text
  - Add information text below input methods list


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-4
changelog:
  - Update ibus-HEAD.patch.
  - Fix bug 501211 - ibus-setup window should be raised if running or just stay on top/grab focus
  - Fix bug 501640 - ibus should adds new IMEs at end of engine list not beginning
  - Fix bug 501644 - [IBus] focus-out and disabled IME should hide language panel


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-2
changelog:
  - Remove requires notification-daemon
  - Fix bug 500588 - Hardcoded requirement for notification-daemon


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-1
changelog:
  - Update to 1.1.0.20090508
  - Fix bug 499533 - [Indic] ibus should allow input in KDE using all supported Indic locales
  - Fix bug 498352 - hotkey config table should list keys in same order as on main setup page
  - Fix bug 497707 - ibus French translation update


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090423-2
changelog:
  - Fix bug 498141 - new ibus install needs gtk immodules
  - Separate ibus document from ibus-devel to ibus-devel-docs


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090423-1
changelog:
  - Update to ibus-1.1.0.20090423.
  - Fix bug 497265 - [mai_IN] Maithili language name is not correct.
  - Fix bug 497279 - IBus does not works with evolution correctly.
  - Enhance authentication both in daemon & clients


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090417-1
changelog:
  - Update to ibus-1.1.0.20090417.
  - Fix bug 496199 -  cannot remove Ctrl+Space hotkey with ibus-setup


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090413-3
changelog:
  - Update ibus-HEAD.patch.
  - Fix bug 495431 -  ibus Release modifier doesn't work with Alt
  - Fix bug 494445 -  ibus-hangul missing Hangul Han/En mode
    (and Alt_R+release hotkey)
  - Update te.po


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090413-2
changelog:
  - Update ibus-HEAD.patch.
  - Change the mode of /tmp/ibus-$USER to 0700 to improve security
  - Change the mode of /tmp/ibus-$USER/socket-address to 0600 to improve security
  - Update as.po


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090407-3
changelog:
  - Update the tarball.
  - Fix bug 494511 - ibus-gtk makes gnome-terminal abort 
    when a key is pressed


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090407-1
changelog:
  - Update to ibus-1.1.0.20090407.
  - Fix bug 491042 - ibus default trigger hotkeys
  - Fix bug 492929 - ibus-hangul can cause gtk app to lockup
  - Fix bug 493701 -  (ibus) imsettings disconnect/reconnect kills gtk app
  - Fix bug 493687 -  ibus-hangul should default to vertical candidate selection
  - Fix bug 493449 -  ibus broke Alt-F2 command auto-completion


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090331-1
changelog:
  - Update to ibus-1.1.0.20090331.
  - Fix bug 492956 - screws up keyboard input in firefox
  - Fix bug 490143 - ibus issue with gnome-keyring


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090311-3
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree
  - Fix bug 491999 - up/down arrow keys broken in xchat


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090311-2
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree.
  - Fix bug 490009 - Deleting Next Engine shortcuts doesn't work
  - Fix bug 490381 - Change "Next/Previous engine" labels


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090311-1
changelog:
  - Update to ibus-1.1.0.20090311.
  - Update setup ui follow GNOME Human Interface Guidelines 2.2 (#489497).


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090225-1
changelog:
  - Update to ibus-1.1.0.20090225.
  - Fix problems in %post and %postun scripts.
  - Hide ibus & ibus preferences menu items.


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090211-10
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree.
  - Put 'Select an input method' in engine select combobox (#485861).


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090211-6
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree.
  - The new patch fixes ibus-x11 segfault (#485661).


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090211-1
changelog:
  - Add --xim argument in xinput-ibus
  - Add Obsoletes:  ibus-qt <= 1.1.0
  - Move libibus.so.* to ibus-libs to make ibus multilib.
  - Update to 1.1.0.20090211.


author: Jan Grulich <jgrulich@redhat.com> - 19-23.11
changelog:
  - Do not fail when HOME is defined as multiwords
    Resolves: bz#1786089

  - Do not fail when prelink is not installed or disabled
    Resolves: bz#1732607


author: Jan Grulich <jgrulich@redhat.com> - 19-23.9
changelog:
  - Check if we have write access to home directory before creating default folders
    Resolves: bz#1579764


author: Martin Briza <mbriza@redhat.com> 19-17.2
changelog:
  - so depending on /lib/systemd/systemd-multi-seat-x is considered a broken dependency - kdm depends on systemd instead


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 19-7
changelog:
  - port 11-fedora-kde-policy from old pkla format to new polkit-1 rules (#829881)
  - nepomukstrigirc: index translated xdg-user-dirs (dvratil, #861129)


author: Rex Dieter <rdieter@fedoraproject.org> - 19-1
changelog:
  - reset Version to match target fedora release (19)
  - kdm.pam: pam_gnome_keyring.so should be loaded after pam_systemd.so (#852723)


author: Rex Dieter <rdieter@fedoraproject.org> 4.8-15
changelog:
  - qt-settings does NOT fully quallify path to lspci in /etc/profile.d/qt-graphicssystem.{csh,sh} (#827440)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.8-4
changelog:
  - kdmrc: GreetString=Fedora 17 (Beefy Miracle)
  - kdmrc, ksplashrc, plasmarc: s/Verne/BeefyMiracle/g (for the artwork themes)
  - bump system_kde_theme_ver to 16.91


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.8-2
changelog:
  - allow org.kde.kcontrol.kcmclock.save without password for wheel again
  - Requires: polkit (instead of polkit-desktop-policy)


author: Rex Dieter <rdieter@fedoraproject.org> 4.7-13.3
changelog:
  - -ksplash: Requires: system-ksplash-theme >= 15.90
  - -plasma: Requires: system-plasma-desktoptheme >= 15.90


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.7-7
changelog:
  - ship the Plasma RPM dependency generators only on F17+
  - use xz tarball
  - don't rm Makefile, no longer in the tarball
  - set up a folder view on the desktop by default for new users (#740676)
  - kdmrc: set MinShowUID=-1 (use /etc/login.defs) instead of 500 (#717115)
  - -kdm: Requires: kdm >= 4.7.1-2 (required for MinShowUID=-1)


author: Rex Dieter <rdieter@fedoraproject.org> 4.6-10
changelog:
  - konq webbrowsing profile: start.fedoraproject.org
  - konq tabbedbrowsing : start.fedoraproject.org, fedoraproject.org/wiki/KDE


author: Rex Dieter <rdieter@fedoraproject.org> 4.6-6
changelog:
  - use lovelock-kdm-theme
  - /var/log/kdm.log is never clean up (logrotate) (#682761)
  - -kdm, move xterm dep to comps (#491251)


author: Rex Dieter <rdieter@fedoraproject.org> 4.6-4
changelog:
  - de-Laughlin-ize theming, be genericish/upstream (for now)
  - kcminputrc: theme=dmz-aa, Requires: dmz-cursor-themes (#675509)


author: Rex Dieter <rdieter@fedoraproject.org> 4.4-10
changelog:
  - move /etc/kde/kdm/backgroundrc => /var/lib/kdm/backgroundrc (#522513)
  - own /var/lib/kdm (regression, #442081)


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-17
changelog:
  - changing permissions of speech-dispatcher to 6711 (setuid and setguid)
  - relocating configuration files in case of OLPC branch.
  - excluding init script in case of OLPC branch.


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-12
changelog:
  - added BuildRequires: texinfo (for makeinfo)
  - changed permissions of Sourcex to 0644
  - incorporated modified init script by mtasaka
  - fixed a few more macros in changelog
  - modified location of Source1 and Patch0 to point to online locations


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-10
changelog:
  - removed Requires(preun) duplicates
  - applied -p option correctly to install command
  - fixed macros in changelog to prevent them from exapnding
  - fixed the init script
  - added patch to change log directory of speech-dispatcher and start only espeak


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-8
changelog:
  - converted speech-dispatcher-cs.info to UTF-8 encoding
  - removed multiple file listings of /usr/lib/python2.5/site-packages/speechd/_test.py
    and fixed its mode
  - added init script as a SOURCE instead as a patch
  - duplicate Requires have now been removed
  - Timestamping of files has now been added
  - Install script fixed
  - init script fixed


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-7
changelog:
  - changed license of base package to GPLv2+ and GPL
  - changed license of all other packages to GPLv2+
  - fixed install sequence using cleaner for loop and pushd and popd commands
  - added init script for speech-dispatcher daemon
  - added COPYING to doc in base package
  - removed comment after /sbin/ldconfig
  - resolved rpmlint errors for base package [except UTF-8 encoding error for (cs) documentation file]
  - renamed long_message to spd_long_message and run_test to spd_run_test
  - reset mode of _test.py to 0755


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-6
changelog:
  - changed BR to pulseaudio-lib-devel
  - removed dotconf BR
  - gave ownership of /%{python_sitelib}/speechd-0.3-py2.5.egg-info to python package if package is built for Fedora 9 or above


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-4
changelog:
  - Manually specyfying make install for each src directory to be installed
  - Installing python package seprately by by-passing make install


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-3
changelog:
  - Added Requires(post), Requires(preun) for -doc package
  - Changed scriptlet from postun to preun for -doc package
  - Removed Epoch
  - Moved %{_libdir}/lib*.so back to devel pacakge
  - Require dependecny on base pacakge is now set to %{version}-%{release} instead of %{version}
  - removed --prefix=/builddir/build/BUILDROOT/speech-dispatcher-0.7.1-15.el7.aarch64/%{_prefix}  against configure macro.
    -- -python subpackage does not build anymore.
  - removed python subpackag rules from SPEC file.


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-1
changelog:
  - using newest version of speech-dispatcher
  - updated %{_libdir}/libspeechd.so.2.0.4 to %{_libdir}/libspeechd.so.2.0.5
  - python packages are being generated correctly now
  - must force prefix=/builddir/build/BUILDROOT/speech-dispatcher-0.7.1-15.el7.aarch64/%{_prefix} to enable python packages to get installed correctly.
  - finding and deleting .*la files in /builddir/build/BUILDROOT/speech-dispatcher-0.7.1-15.el7.aarch64 to avoid unpackaged files error.


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.5-3
changelog:
  - added macro to prevent error from stopping build for not including *.la files
  - added epoch to the SPEC
  - conditional build seems to be working correctly the old way only??
  - unified changelogs


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.5-2
changelog:
  - Removed .la files
  - Removed doc-cs packages and merged it into doc package
  - Removed packaging of static files, and tested -without static_libs option for configure script
  - Moved symlink .so files from devel package to main package
  - Commented /sbin/ldconfig for devel package.


author: Pravin Satute <psatute AT redhat DOT com> - 2.1-1
changelog:
  - Resolves: rhbz#1284772 - Upstream new release with ttfautohint
  - Changed url to https://github.com/RedHatBrand/overpass/, https://overpassfont.org looks dead.
  - Add Light variant font.
  - Add metainfo file to show this font in gnome-software.


author: Thomas Moschny <thomas.moschny@gmx.de> - 0.3.8-2
changelog:
  - Specfile cleanups as suggested in the review.
  - Remove unneeded BR on pkgconfig.
  - Remove unneeded chrpath call.


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-32
changelog:
  - Include preauth name in trace output if possible
  - Update cert generation scripts to work on modern openssl
  - Fix per-request preauth scoping
  - Add test case for PKINIT DH renegotiation
  - Echo KDC cookies in preauth tryagain
  - Fall back to other preauth mechanisms after failures
  - Resolves: #1540130


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-29
changelog:
  - Process profile includedir in sorted order
  - Also, ignore dotfiles in included directories
  - Resolves: #1539824


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-23
changelog:
  - Fix flaws in LDAP DN checking (CVE-2018-5729, CVE-2018-5730)
  - Resolves: #1562684
  - Resolves: #1562679


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-4
changelog:
  - Backport certauth plugin and related pkinit changes
  - Note: related changes cannot be tested because RHEL does not allow
    binary git diffs
  - Resolves: #1428484


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-1
changelog:
  - Bump to krb5-1.15.1 (very small change)
  - Apply some sanity to our patches and ordering
  - Resolves: #1389073


author: Robbie Harwood <rharwood@redhat.com> - 1.15-1
changelog:
  - Rebase to 1.15-final
  - Resolves: #1389073
  - Resolves: #1367169
  - Resolves: #1389072
  - Resolves: #1366863


author: Robbie Harwood <rharwood@redhat.com> - 1.14.1-16
changelog:
  - Fix kprop/iprop handling of default realm
  - Fix t_kprop.py
  - Resolves: #1290561
  - Resolves: #1302967
  - Resolves: #1292795


author: Robbie Harwood <rharwood@redhat.com> - 1.14.1-1
changelog:
  - Rebase to new upstream version 1.14.1
  - Remove pax logic
  - Resolves: #1292153
  - Resolves: #1135427
  - Resolves: #1265509
  - Resolves: #1265510
  - Resolves: #1296241


author: Robbie Harwood <rharwood@redhat.com> 1.13.2-9
changelog:
  - Add patch and test case for "KDC does not return proper
    client principal for client referrals"
  - Resolves: #1259846


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-9
changelog:
  - Ammend patch for RedHat bug #1252454 ('testsuite complains
    "Lifetime has increased by 32436 sec while 0 sec passed!",
    while rhel5-libkrb5 passes') to handle the newly introduced
    valgrind hits.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-8
changelog:
  - Add a patch to fix RH Bug #1250154 ("[s390x, ppc64, ppc64le]:
    kadmind does not accept ACL if kadm5.acl does not end with EOL")
    The code "accidently" works on x86/AMD64 because declaring a
    variable |char| results in an |unsigned char| by default while
    most other platforms (e.g. { s390x, ppc64, ppc64le, ...})
    default to |signed char| (still have to use lint(1) to clean
    up 38 more instances of this kind of bug).


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-7
changelog:
  - Obsolete multilib versions of server packages to fix RH
    bug #1251913 ("krb5 should obsolete the multilib versions
    of krb5-server and krb5-server-ldap").
    The following packages are declared obsolete:
    - krb5-server-1.11.3-49.el7.i686
    - krb5-server-1.11.3-49.el7.ppc
    - krb5-server-1.11.3-49.el7.s390
    - krb5-server-ldap-1.11.3-49.el7.i686
    - krb5-server-ldap-1.11.3-49.el7.ppc
    - krb5-server-ldap-1.11.3-49.el7.s390


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-6
changelog:
  - Add a patch to fix RedHat bug #1252454 ('testsuite complains
    "Lifetime has increased by 32436 sec while 0 sec passed!",
    while rhel5-libkrb5 passes') so that krb5 resolves GSS creds
    if |time_rec| is requested.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-5
changelog:
  - Add a patch to fix RedHat bug #1251586 ("KDC sends multiple
    requests to ipa-otpd for the same authentication") which causes
    the KDC to send multiple retries to ipa-otpd for TCP transports
    while it should only be done for UDP.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-4
changelog:
  - the rebase to krb5 1.13.2 in vers 1.13.2-0 also fixed:
    - Redhat Bug #1247761 ("RFE: Minor krb5 spec file cleanup and sync
      with recent Fedora 22/23 changes")
    - Redhat Bug #1247751 ("krb5-config returns wrong -specs path")
    - Redhat Bug #1247608 ('Add support for multi-hop preauth mechs
      via |KDC_ERR_MORE_PREAUTH_DATA_REQUIRED| for RFC 6113 ("A
      Generalized Framework for Kerberos Pre-Authentication")')
  - Removed "krb5-1.10-kprop-mktemp.patch" and
    "krb5-1.3.4-send-pr-tempfile.patch", both are no longer used since
    the rebase to krb5 1.13.1


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-3
changelog:
  - Add patch to fix Redhat Bug #1222903 ("[SELinux] AVC denials may appear
    when kadmind starts"). The issue was caused by an unneeded |htons()|
    which triggered SELinux AVC denials due to the "random" port usage.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-2
changelog:
  - Add fix for RedHat Bug #1164304 ("Upstream unit tests loads
    the installed shared libraries instead the ones from the build")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-1
changelog:
  - the rebase to krb5 1.13.1 in vers 1.13.1-0 also fixed:
    - Bug 1144498 ("Fix the race condition in the libkrb5 replay cache")
    - Bug 1163402 ("kdb5_ldap_util view_policy does not shows ticket flags on s390x and ppc64")
    - Bug 1185770 ("Missing upstream test in krb5-1.12.2: src/tests/gssapi/t_invalid.c")
    - Bug 1204211 ("CVE-2014-5355 krb5: unauthenticated denial of service in recvauth_common() and other")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-0
changelog:
  - Update to krb5-1.13.2
    - drop patch for krb5-1.13.2-CVE_2015_2694_requires_preauth_bypass_in_PKINIT_enabled_KDC, fixed in krb5-1.13.2
    - drop patch for krb5-1.12.1-CVE_2014_5355_fix_krb5_read_message_handling, fixed in krb5-1.13.2


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-2
changelog:
  - the rebase to krb5 1.13.1 in vers 1.13.1-0 also fixed RH
    bug #1156144 ("krb5 upstream test t_kdb.py failure")


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-1
changelog:
  - fix for CVE-2015-2694 (#1218020) "requires_preauth bypass
    in PKINIT-enabled KDC".
    In MIT krb5 1.12 and later, when the KDC is configured with
    PKINIT support, an unauthenticated remote attacker can
    bypass the requires_preauth flag on a client principal and
    obtain a ciphertext encrypted in the principal's long-term
    key.  This ciphertext could be used to conduct an off-line
    dictionary attack against the user's password.


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-0
changelog:
  - Update to krb5-1.13.1
    - patch krb5-1.12-selinux-label was updated and renamed to krb5-1.13-selinux-label
    - patch krb5-1.11-dirsrv-accountlock was updated and renamed to krb5-1.13-dirsrv-accountlock
    - drop patch for krb5-1.12-pwdch-fast, fixed in krb5-1.13
    - drop patch for krb5-1.12ish-kpasswd_tcp, fixed in krb5-1.13
    - drop patch for krb5-master-rcache-internal-const, no longer needed
    - drop patch for krb5-master-rcache-acquirecred-cleanup, no longer needed
    - drop patch for krb5-master-rcache-acquirecred-source, no longer needed
    - drop patch for krb5-master-rcache-acquirecred-test, no longer needed
    - drop patch for krb5-master-move-otp-sockets, no longer needed
    - drop patch for krb5-master-mechd, no longer needed
    - drop patch for krb5-master-strdupcheck, no longer needed
    - drop patch for krb5-master-compatible-keys, no longer needed
    - drop patch for krb5-1.12-system-exts, fixed in krb5-1.13
    - drop patch for 0001-In-ksu-merge-krb5_ccache_copy-and-_restricted, no longer needed
    - drop patch for 0002-In-ksu-don-t-stat-not-on-disk-ccache-residuals, no longer needed
    - drop patch for 0003-Use-an-intermediate-memory-cache-in-ksu, no longer needed
    - drop patch for 0004-Make-ksu-respect-the-default_ccache_name-setting, no longer needed
    - drop patch for 0005-Copy-config-entries-to-the-ksu-target-ccache, no longer needed
    - drop patch for 0006-Use-more-randomness-for-ksu-secondary-cache-names, no longer needed
    - drop patch for 0007-Make-krb5_cc_new_unique-create-DIR-directories, no longer needed
    - drop patch for krb5-1.12-kpasswd-skip-address-check, fixed in krb5-1.13
    - drop patch for 0000-Refactor-cm-functions-in-sendto_kdc.c, no longer needed
    - drop patch for 0001-Simplify-sendto_kdc.c, no longer needed
    - drop patch for 0002-Add-helper-to-determine-if-a-KDC-is-the-master, no longer needed
    - drop patch for 0003-Use-k5_transport-_strategy-enums-for-k5_sendto, no longer needed
    - drop patch for 0004-Build-support-for-TLS-used-by-HTTPS-proxy-support, no longer needed
    - drop patch for 0005-Add-ASN.1-codec-for-KKDCP-s-KDC-PROXY-MESSAGE, no longer needed
    - drop patch for 0006-Dispatch-style-protocol-switching-for-transport, no longer needed
    - drop patch for 0007-HTTPS-transport-Microsoft-KKDCPP-implementation, no longer needed
    - drop patch for 0008-Load-custom-anchors-when-using-KKDCP, no longer needed
    - drop patch for 0009-Check-names-in-the-server-s-cert-when-using-KKDCP, no longer needed
    - drop patch for 0010-Add-some-longer-form-docs-for-HTTPS, no longer needed
    - drop patch for 0011-Have-k5test.py-provide-runenv-to-python-tests, no longer needed
    - drop patch for 0012-Add-a-simple-KDC-proxy-test-server, no longer needed
    - drop patch for 0013-Add-tests-for-MS-KKDCP-client-support, no longer needed
    - drop patch for krb5-1.12ish-tls-plugins, fixed in krb5-1.13.1
    - drop patch for krb5-1.12-nodelete-plugins, fixed in krb5-1.13.1
    - drop patch for krb5-1.12-ksu-untyped-default-ccache-name, fixed in krb5-1.13.1
    - drop patch for krb5-1.12-ksu-no-ccache, fixed in krb5-1.13.1
    - drop patch for krb5-ksu_not_working_with_default_principal, fixed in krb5-1.13.1
    - drop patch for CVE_2014_5353_fix_LDAP_misused_policy_name_crash, fixed in krb5-1.13.1
    - drop patch for CVE_2014_5354_support_keyless_principals_in_ldap, fixed in krb5-1.13.1
    - drop patch for kinit -C loops (MIT/krb5 bug #243), fixed in krb5-1.13.1
    - drop patch for CVEs { 2014-9421, 2014-9422, 2014-9423, 2014-5352 }, fixed in krb5-1.13.1
    - added patch krb5-1.14-Support-KDC_ERR_MORE_PREAUTH_DATA_REQUIRED
    - added patch krb5-1.12.1-CVE_2014_5355_fix_krb5_read_message_handling
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-14
changelog:
  - fix for kinit -C loops (#1184629, MIT/krb5 issue 243, "Do not
    loop on principal unknown errors").


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-13
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9423 (#1179863) "libgssrpc server applications
    leak uninitialized bytes (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-10
changelog:
  - In ksu, without the -e flag, also check .k5users (#1105489)
    When ksu was explicitly told to spawn a shell, a line in .k5users which
    listed "*" as the allowed command would cause the principal named on the
    line to be considered as a candidate for authentication.
    When ksu was not passed a command to run, which implicitly meant that
    the invoking user wanted to run the target user's login shell, knowledge
    that the principal was a valid candidate was ignored, which could cause
    a less optimal choice of the default target principal.
    This doesn't impact the authorization checks which we perform later.
    Patch by Nalin Dahyabhai <nalin@redhat.com>


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-9
changelog:
  - Undo libkadmclnt SONAME change (from 8 to 9) which originally
    happened in the krb5 1.12 rebase (#1166012) but broke
    rubygem-rkerberos (sort of ruby language bindings for
    libkadmclnt&co.) dependicies, as side effect of
    rubygem-rkerberos using private interfaces in libkadmclnt.


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-8
changelog:
  - fix the problem where the %license file has been a dangling symlink
  - ksu: pull in fix from pull #206 to avoid breakage when the
    default_ccache_name doesn't include a cache type as a prefix
  - ksu: pull in a proposed fix for pull #207 to avoid breakage when the
    invoking user doesn't already have a ccache


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-6
changelog:
  - backport patch to make the client skip checking the server's reply
    address when processing responses to password-change requests, which
    between NAT and upcoming HTTPS support, can cause us to erroneously
    report an error to the user when the server actually reported success
    (RT#7886)
  - backport support for accessing KDCs and kpasswd services via HTTPS
    proxies (marked by being specified as https URIs instead as hostnames
    or hostname-and-port), such as the one implemented in python-kdcproxy
    (RT#7929, #109919), and pick up a subsequent patch to build HTTPS
    as a plugin


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-5
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1078888)
  - define _GNU_SOURCE in files where we use EAI_NODATA, to make sure that
    it's declared (#1059730,#1084068,#1109102)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-4
changelog:
  - kpropd hasn't bothered with -S since 1.11; stop trying to use that flag
    in the systemd unit file


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-1
changelog:
  - update to 1.12.2
    - drop patch for RT#7820, fixed in 1.12.2
    - drop patch for #231147, fixed as RT#3277 in 1.12.2
    - drop patch for RT#7818, fixed in 1.12.2
    - drop patch for RT#7836, fixed in 1.12.2
    - drop patch for RT#7858, fixed in 1.12.2
    - drop patch for RT#7924, fixed in 1.12.2
    - drop patch for RT#7926, fixed in 1.12.2
    - drop patches for CVE-2014-4341/CVE-2014-4342, included in 1.12.2
    - drop patch for CVE-2014-4343, included in 1.12.2
    - drop patch for CVE-2014-4344, included in 1.12.2
    - drop patch for CVE-2014-4345, included in 1.12.2
  - replace older proposed changes for ksu with backports of the changes
    after review and merging upstream (#1015559, #1026099, #1118347)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-12
changelog:
  - gssapi: pull in proposed fix for a double free in initiators (David
    Woodhouse, CVE-2014-4343, #1117963)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-10
changelog:
  - pull in fix for denial of service by injection of malformed GSSAPI tokens
    (CVE-2014-4341, CVE-2014-4342, #1116181)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-9
changelog:
  - pull in changes from upstream which add processing of the contents of
    /etc/gss/mech.d/*.conf when loading GSS modules (#1102839)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-5
changelog:
  - spnego: pull in patch from master to restore preserving the OID of the
    mechanism the initiator requested when we have multiple OIDs for the same
    mechanism, so that we reply using the same mechanism OID and the initiator
    doesn't get confused (#1066000, RT#7858)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-4
changelog:
  - pull in patch from master to move the default directory which the KDC uses
    when computing the socket path for a local OTP daemon from the database
    directory (/var/kerberos/krb5kdc) to the newly-added run directory
    (/run/krb5kdc), in line with what we're expecting in 1.13 (RT#7859, more
    of #1040056 as #1063905)
  - add a tmpfiles.d configuration file to have /run/krb5kdc created at
    boot-time
  - own /var/run/krb5kdc


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add currently-proposed changes to teach ksu about credential cache
    collections and the default_ccache_name setting (#1015559,#1026099)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-2
changelog:
  - pull in multiple changes to allow replay caches to be added to a GSS
    credential store as "rcache"-type credentials (RT#7818/#7819/#7836,


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-1
changelog:
  - update to 1.12.1
    - drop patch for RT#7794, included now
    - drop patch for RT#7797, included now
    - drop patch for RT#7803, included now
    - drop patch for RT#7805, included now
    - drop patch for RT#7807, included now
    - drop patch for RT#7045, included now
    - drop patches for RT#7813 and RT#7815, included now
    - add patch to always retrieve the KDC time offsets from keyring caches,
      so that we don't mistakenly interpret creds as expired before their
      time when our clock is ahead of the KDC's (RT#7820, #1030607)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-11
changelog:
  - update the PIC patch for iaesx86.s to not use ELF relocations to the version
    that landed upstream (RT#7815, #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-10
changelog:
  - amend the PIC patch for iaesx86.s to also save/restore ebx in the
    functions where we modify it, because the ELF spec says we need to


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-9
changelog:
  - grab a more-commented version of the most recent patch from upstream
    master
  - make a guess at making the 32-bit AES-NI implementation sufficiently
    position-independent to not require execmod permissions for libk5crypto
    (more of #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-8
changelog:
  - add patch from Dhiru Kholia for the AES-NI implementations to allow
    libk5crypto to be properly marked as not needing an executable stack
    on arches where they're used (#1045699, and so many others)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-5
changelog:
  - pull in fix from master to make reporting of errors encountered by
    the SPNEGO mechanism work better (RT#7045, part of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update a test wrapper to properly handle things that the new libkrad does,
    and add python-pyrad as a build requirement so that we can run its tests


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-2
changelog:
  - pull in fix from master to return a NULL pointer rather than allocating
    zero bytes of memory if we read a zero-length input token (RT#7794, part of
    - pull in fix from master to ignore an empty token from an acceptor if
    we've already finished authenticating (RT#7797, part of #1043962)
  - pull in fix from master to avoid a memory leak when a mechanism's
    init_sec_context function fails (RT#7803, part of #1043962)
  - pull in fix from master to avoid a memory leak in a couple of error
    cases which could occur while obtaining acceptor credentials (RT#7805, part
    of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-beta2.0
changelog:
  - update to beta2
    - drop obsolete backports for storing KDC time offsets and expiration times
      in keyring credential caches


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-2
changelog:
  - pull in fix to store KDC time offsets in keyring credential caches (RT#7768,
    - pull in fix to set expiration times on credentials stored in keyring
    credential caches (RT#7769, #1031724)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-1
changelog:
  - update to 1.11.4
    - drop patch for RT#7650, obsoleted
    - drop patch for RT#7706, obsoleted as RT#7723
    - drop patch for CVE-2013-1418/CVE-2013-6800, included in 1.11.4


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-30
changelog:
  - check more thoroughly for errors when resolving KEYRING ccache names of type
    "persistent", which should only have a numeric UID as the next part of the
    name (#1029110)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-29
changelog:
  - incorporate upstream patch for remote crash of KDCs which serve multiple
    realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800,


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-28
changelog:
  - drop patch to add additional access() checks to ksu - they add to breakage
    when non-FILE: caches are in use (#1026099), shouldn't be resulting in any
    benefit, and clash with proposed changes to fix its cache handling


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-27
changelog:
  - add some minimal description to the top of the wrapper scripts we use
    when starting krb5kdc and kadmind to describe why they exist (tooling)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-alpha1.0
changelog:
  - initial update to alpha1
    - drop backport of persistent keyring support
    - drop backport for RT#7689
    - drop obsolete patch for fixing a use-before-init in a test program
    - drop obsolete patch teaching config.guess/config.sub about aarch64-linux
    - drop backport for RT#7598
    - drop backport for RT#7172
    - drop backport for RT#7642
    - drop backport for RT#7643
    - drop patches from master to not test GSSRPC-over-UDP and to not
      depend on the portmapper, which are areas where our build systems
      often give us trouble, too; obsolete
    - drop backports for RT#7682
    - drop backport for RT#7709
    - drop backport for RT#7590 and partial backport for RT#7680
    - drop OTP backport
    - drop backports for RT#7656 and RT#7657
  - BuildRequires: libedit-devel to prefer it
  - BuildRequires: pkgconfig, since configure uses it


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-25
changelog:
  - pull up fix for importing previously-exported credential caches in the
    gssapi library (RT# 7706, #1019420)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-24
changelog:
  - backport the callback to use the libkrb5 prompter when we can't load PEM
    files for PKINIT (RT#7590, includes part of #965721/#1016690)
  - extract the rest of the fix #965721/#1016690 from the changes for RT#7680


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-21
changelog:
  - switch to the version of persistent-keyring that was just merged to
    master (RT#7711), along with related changes to kinit (RT#7689)
  - go back to setting default_ccache_name to a KEYRING type


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-20
changelog:
  - pull up fix for not calling a kdb plugin's check-transited-path
    method before calling the library's default version, which only knows
    how to read what's in the configuration file (RT#7709, #1013664)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-19
changelog:
  - configure --without-krb5-config so that we don't pull in the old default
    ccache name when we want to stop setting a default ccache name at configure-
    time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-16
changelog:
  - back out setting default_ccache_name to the new default for now, resetting
    it to the old default while the kernel/keyutils bits get sorted (sgallagh)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-15
changelog:
  - add explicit build-time dependency on a version of keyutils that's new
    enough to include keyctl_get_persistent() (more of #991148)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - only apply the patch to autocreate /run/user/0 when we're hard-wiring the
    default ccache location to be under it; otherwise it's unnecessary


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-11
changelog:
  - don't let comments intended for one scriptlet become part of the "script"
    that gets passed to ldconfig as part of another one (Mattias Ellert, #1005675)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-10
changelog:
  - incorporate Simo's backport of his persistent-keyring changes (#991148)
  - restore build-time default DEFCCNAME on Fedora 21 and later and EL, and
    instead set default_ccache_name in the default krb5.conf's [libdefaults]
    section (#991148)
  - on releases where we expect krb5.conf to be configured with a
    default_ccache_name, add it whenever we upgrade from an older version of
    the package that wouldn't have included it in its default configuration
    file (#991148)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-9
changelog:
  - take another stab at accounting for UnversionedDocdirs for the -libs
    subpackage (spotted by ssorce)
  - switch to just the snapshot of nss_wrapper we were using, since we
    no longer need to carry anything that isn't in the cwrap.org repository
    (ssorce)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-8
changelog:
  - drop a patch we weren't not applying (build tooling)
  - wrap kadmind and kpropd in scripts which check for the presence/absence
    of files which dictate particular exit codes before exec'ing the actual
    binaries, instead of trying to use ConditionPathExists in the unit files
    to accomplish that, so that we exit with failure properly when what we
    expect isn't actually in effect on the system (#800343)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-6
changelog:
  - tweak configuration files used during tests to try to reduce the number
    of conflicts encountered when builds for multiple arches land on the same
    builder


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-4
changelog:
  - use (a bundled, for now, copy of) nss_wrapper to let us run some of the
    self-tests at build-time in more places than we could previously (#978756)
  - cover inconsistencies in whether or not there's a local caching nameserver
    that's willing to answer when the build environment doesn't have a
    resolver configuration, so that nss_wrapper's faking of the local
    hostname can be complete


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-3
changelog:
  - specify dependencies on the same arch of krb5-libs by using the %{?_isa}
    suffix, to avoid dragging 32-bit libraries onto 64-bit systems (#980155)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-2
changelog:
  - special-case /run/user/0, attempting to create it when resolving a
    directory cache below it fails due to ENOENT and we find that it doesn't
    already exist, either, before attempting to create the directory cache
    (maybe helping, maybe just making things more confusing for #961235)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-1
changelog:
  - update to 1.11.3
    - drop patch for RT#7605, fixed in this release
    - drop patch for CVE-2002-2443, fixed in this release
    - drop patch for RT#7369, fixed in this release
  - pull upstream fix for breaking t_skew.py by adding the patch for #961221


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-9
changelog:
  - don't forget to set the SELinux label when creating the directory for
    a DIR: ccache
  - pull in proposed fix for attempts to get initial creds, which end up
    following referrals, incorrectly trying to always use master KDCs if
    they talked to a master at any point (should fix RT#7650)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-8
changelog:
  - pull in patches from master to not test GSSRPC-over-UDP and to not
    depend on the portmapper, which are areas where our build systems
    often give us trouble, too


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-7
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)
  - backport fix for not being able to pass an empty password to the
    get-init-creds APIs and have them actually use it (RT#7642, #960001)
  - add backported proposed fix to use the unauthenticated server time
    as the basis for computing the requested credential expiration times,
    rather than the client's idea of the current time, which could be
    significantly incorrect (#961221)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-6
changelog:
  - pull in upstream fix to start treating a KRB5CCNAME value that begins
    with DIR:: the same as it would a DIR: value with just one ccache file
    in it (RT#7172, #965574)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-3
changelog:
  - pull the changing of the compiled-in default ccache location to
    DIR:/run/user/%{uid}/krb5cc back into F19, in line with SSSD and
    the most recent pam_krb5 build


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-1
changelog:
  - update to 1.11.2
    - drop pulled in patch for RT#7586, included in this release
    - drop pulled in patch for RT#7592, included in this release
  - pull in fix for keeping track of the message type when parsing FAST requests
    in the KDC (RT#7605, #951843) (also #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-9
changelog:
  - move the compiled-in default ccache location from the previous default of
    FILE:/tmp/krb5cc_%{uid} to DIR:/run/user/%{uid}/krb5cc (part of #949588)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-7
changelog:
  - when testing the RPC library, treat denials from the local portmapper the
    same as a portmapper-not-running situation, to allow other library tests
    to be run while building the package


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-6
changelog:
  - create and own /var/kerberos/krb5/user instead of /var/kerberos/kdc/user,
    since that's what the libraries actually look for
  - add buildrequires on nss-myhostname, in an attempt to get more of the tests
    to run properly during builds
  - pull in Simo's patch to recognize "client_keytab" as a key type which can
    be passed in to gss_acquire_cred_from() (RT#7598)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-5
changelog:
  - pull up Simo's patch to mark the correct mechanism on imported GSSAPI
    contexts (RT#7592)
  - go back to using reconf to run autoconf and autoheader (part of #925640)
  - add temporary patch to use newer config.guess/config.sub (more of #925640)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a version comparison to expect newer texlive build requirements when
    %{_rhel} > 6 rather than when it's > 7


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-2
changelog:
  - prebuild PDF docs to reduce multilib differences (internal tooling, #884065)
  - drop the kerberos-iv portreserve file, and drop the rest on systemd systems
  - escape uses of macros in comments (more of #884065)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-1
changelog:
  - update to 1.11.1
    - drop patch for noticing negative timeouts being passed to the poll()
      wrapper in the client transmit functions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11-0.alpha1.1
changelog:
  - handle releases where texlive packaging wasn't yet as complicated as it
    is in Fedora 18
  - fix an uninitialized-variable error building one of the test programs


author: Nalin Dahyabhai <nalin@redhat.com> 1.11-0.alpha1.0
changelog:
  - move the rather large pile of html and pdf docs to -workstation, so
    that just having something that links to the libraries won't drag
    them onto a system, and we avoid having to sort out hard-coded paths
    that include %{_libdir} showing up in docs in multilib packages
  - actually create %{_var}/kerberos/kdc/user, so that it can be packaged
  - correct the list of packaged man pages
  - don't dummy up required tex stylesheets, require them
  - require pdflatex and makeindex


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.11 alpha 1
    - drop backported patch for RT #7406
    - drop backported patch for RT #7407
    - drop backported patch for RT #7408
    - the new docs system generates PDFs, so stop including them as sources
    - drop backported patch to allow deltat.y to build with the usual
      warning flags and the current gcc
    - drop backported fix for disabling use of a replay cache when verifying
      initial credentials
    - drop backported fix for teaching PKINIT clients which trust the KDC's
      certificate directly to verify signed-data messages that are signed with
      the KDC's certificate, when the blobs don't include a copy of the KDC's
      certificate
    - drop backported patches to make keytab-based authentication attempts
      work better when the client tells the KDC that it supports a particular
      cipher, but doesn't have a key for it in the keytab
    - drop backported fix for avoiding spurious clock skew when a TGT is
      decrypted long after the KDC sent it to the client which decrypts it
    - move the cross-referenced HTML docs into the -libs package to avoid
      broken internal links
    - drop patches to fixup paths in man pages, shouldn't be needed any more


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-2
changelog:
  - undo rename from krb5-pkinit-openssl to krb5-pkinit on EL6
  - version the Obsoletes: on the krb5-pkinit-openssl to krb5-pkinit rename
  - reintroduce the init scripts for non-systemd releases
  - forward-port %{?_rawbuild} annotations from EL6 packaging


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-7
changelog:
  - selinux: hang on to the list of selinux contexts, freeing and reloading
    it only when the file we read it from is modified, freeing it when the
    shared library is being unloaded (#845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-6
changelog:
  - go back to not messing with library file paths on Fedora 17: it breaks
    file path dependencies in other packages, and since Fedora 17 is already
    released, breaking that is our fault


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-5
changelog:
  - add upstream patch to fix freeing an uninitialized pointer and dereferencing
    another uninitialized pointer in the KDC (MITKRB5-SA-2012-001, CVE-2012-1014
    and CVE-2012-1015, #844779 and #844777)
  - fix a thinko in whether or not we mess around with devel .so symlinks on
    systems without a separate /usr (sbose)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-3
changelog:
  - backport a fix to allow a PKINIT client to handle SignedData from a KDC
    that's signed with a certificate that isn't in the SignedData, but which
    is available as an anchor or intermediate on the client (RT#7183)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-2
changelog:
  - back out this labeling change (dwalsh):
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-1
changelog:
  - update to 1.10.2
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user
    - also package the PDF format admin, user, and install guides
    - drop some PDFs that no longer get built right
  - add a backport of Stef's patch to set the client's list of supported
    enctypes to match the types of keys that we have when we are using a
    keytab to try to get initial credentials, so that a KDC won't send us
    an AS reply that we can't encrypt (RT#2131, #748528)
  - don't shuffle around any shared libraries on releases with no-separate-/usr,
    since /usr/lib is the same place as /lib
  - add explicit buildrequires: on 'hostname', for the tests, on systems where
    it's in its own package, and require net-tools, which used to provide the
    command, everywhere


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-3
changelog:
  - have -server require /usr/share/dict/words, which we set as the default
    dict_file in kdc.conf (#817089)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-2
changelog:
  - change back dns_lookup_kdc to the default setting (Stef Walter, #805318)
  - comment out example.com examples in default krb5.conf (Stef Walter, #805320)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-1
changelog:
  - update to 1.10.1
    - drop the KDC crash fix
    - drop the KDC lookaside cache fix
    - drop the fix for kadmind RPC ACLs (CVE-2012-1012)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-5
changelog:
  - when removing -workstation, remove our files from the info index while
    the file is still there, in %preun, rather than %postun, and use the
    compressed file's name (#801035)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-2
changelog:
  - add patch to accept keytab entries with vno==0 as matches when we're
    searching for an entry with a specific name/kvno (#230382/#782211,RT#3349)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha2.2
changelog:
  - modify the deltat grammar to also tell gcc (4.7) to suppress
    "maybe-uninitialized" warnings in addition to the "uninitialized" warnings
    it's already being told to suppress (RT#7080)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.3
changelog:
  - pull in patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761317)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761317)
  - pull in patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761317)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.2
changelog:
  - apply upstream patch to fix a null pointer dereference when processing
    TGS requests (CVE-2011-1530, #753748)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.0
changelog:
  - update to 1.10 alpha 1
  - on newer releases where we can assume NSS >= 3.13, configure PKINIT to build
    using NSS
  - on newer releases where we build PKINIT using NSS, configure libk5crypto to
    build using NSS
  - rename krb5-pkinit-openssl to krb5-pkinit on newer releases where we're
    expecting to build PKINIT using NSS instead
  - during %check, run check in the library and kdc subdirectories, which
    should be able to run inside of the build system without issue


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-18
changelog:
  - apply upstream patch to fix a null pointer dereference with the LDAP kdb
    backend (CVE-2011-1527, #744125), an assertion failure with multiple kdb
    backends (CVE-2011-1528), and a null pointer dereference with multiple kdb
    backends (CVE-2011-1529) (#737711)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-17
changelog:
  - pull in patch from trunk to rename krb5int_pac_sign() to krb5_pac_sign() and
    make it public (#745533)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-16
changelog:
  - kadmin.service: fix #723723 again
  - kadmin.service,krb5kdc.service: remove optional use of $KRB5REALM in command
    lines, because systemd parsing doesn't handle alternate value shell variable
    syntax
  - kprop.service: add missing Type=forking so that systemd doesn't assume simple
  - kprop.service: expect the ACL configuration to be there, not absent
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#739853)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-12
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth (#734341)
  - pull in build-time deps for the tests


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-10
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-9
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-8
changelog:
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS
  - pull in a patch to fix losing track of the replay cache FD, from SVN by
    way of Kevin Coffman


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-7
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#723723),
    which is too fragile in cases where the database has been manually moved or
    is accessed through another kdb plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-6
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-5
changelog:
  - pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
    during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
    not to ask for an IPv6 address based on the set of configured interfaces
    (#717378, RT#6922)
  - pull a fix from SVN to use AI_ADDRCONFIG more often (RT#6923)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-4
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#715074)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-3
changelog:
  - pull a fix from SVN to get libgssrpc clients (e.g. kadmin) authenticating
    using the old protocol over IPv4 again (RT#6920)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#576093)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-1
changelog:
  - update to 1.9.1:
    - drop no-longer-needed patches for CVE-2010-4022, CVE-2011-0281,
      CVE-2011-0282, CVE-2011-0283, CVE-2011-0284, CVE-2011-0285


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696343,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't discard the error code from an error message received in response
    to a change-password request (#658871, RT#6893)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - override INSTALL_SETUID at build-time so that ksu is installed into
    the buildroot with the right permissions (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - turn off NSS as the backend for libk5crypto for now to work around its
    DES string2key not working (#679012)
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (MITKRB5-SA-2011-003, CVE-2011-0284, #674325)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - throw in a not-applied-by-default patch to try to make pkinit debugging
    into a run-time boolean option named "pkinit_debug"


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-6
changelog:
  - turn on NSS as the backend for libk5crypto, adding nss-devel as a build
    dependency when that switch is flipped


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-5
changelog:
  - krb5kdc init script: prototype some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (to flush out parts of #651466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
    in the KDC when using the LDAP kdb backend, and an uninitialized pointer
    use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, #664009,
    CVE-2011-0281, #668719, CVE-2011-0282, #668726, CVE-2011-0283, #676126)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-2
changelog:
  - pkinit: when verifying signed data, use the CMS APIs for better
    interoperability (#636985, RT#6851)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-0.beta1.0
changelog:
  - start moving to 1.9 with beta 1
    - drop patches for RT#5755, RT#6762, RT#6774, RT#6775
    - drop no-longer-needed backport patch for #539423
    - drop no-longer-needed patch for CVE-2010-1322
  - if WITH_NSS is set, built with --with-crypto-impl=nss (requires NSS 3.12.9)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-8
changelog:
  - incorporate upstream patch to fix uninitialized pointer crash in the KDC's
    authorization data handling (CVE-2010-1322, #636335)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-6
changelog:
  - pull down patches from trunk to implement k5login_authoritative and
    k5login_directory settings for krb5.conf (#539423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-4
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #629022, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #629022, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-1
changelog:
  - update to 1.8.3
    - drop backports of fixes for gss context expiration and error table
      registration/deregistration mismatch
    - drop patch for upstream #6750


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3
changelog:
  - tell krb5kdc and kadmind to create pid files, since they can
  - add logrotate configuration files for krb5kdc and kadmind (#462658)
  - fix parsing of the pidfile option in the KDC (upstream #6750)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull up fix for upstream #6745, in which the gssapi library would add the
    wrong error table but subsequently attempt to unload the right one


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: move session management calls to before we drop privileges, like
    su does (#596887), and don't skip the PAM account check for root or the
    same user (more of #540769)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-6
changelog:
  - make krb5-server-ldap also depend on the same version-release of krb5-libs,
    as the other subpackages do, if only to make it clearer than it is when we
    just do it through krb5-server
  - drop explicit linking with libtinfo for applications that use libss, now
    that readline itself links with libtinfo (as of readline-5.2-3, since
    fedora 7 or so)
  - go back to building without strict aliasing (compiler warnings in gssrpc)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-5
changelog:
  - add patch to correct GSSAPI library null pointer dereference which could be
    triggered by malformed client requests (CVE-2010-1321, #582466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-1
changelog:
  - update to 1.8.1
    - no longer need patches for #555875, #561174, #563431, RT#6661, CVE-2010-0628
  - replace buildrequires on tetex-latex with one on texlive-latex, which is
    the package that provides it now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - drop patch to suppress key expiration warnings sent from the KDC in
    the last-req field, as the KDC is expected to just be configured to either
    send them or not as a particular key approaches expiration (#556495)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-5
changelog:
  - add upstream fix for denial-of-service in SPNEGO (CVE-2010-0628, #576325)
  - kdc.conf: no more need to suggest keeping keys with v4-compatible salting


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-4
changelog:
  - remove the krb5-appl bits (the -workstation-clients and -workstation-servers
    subpackages) now that krb5-appl is its own package
  - replace our patch for #563431 (kpasswd doesn't fall back to guessing your
    principal name using your user name if you don't have a ccache) with the
    one upstream uses


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-2
changelog:
  - pull up patch to get the client libraries to correctly perform password
    changes over IPv6 (Sumit Bose, RT#6661)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-1
changelog:
  - update to 1.8
    - temporarily bundling the krb5-appl package (split upstream as of 1.8)
      until its package review is complete
    - profile.d scriptlets are now only needed by -workstation-clients
    - adjust paths in init scripts
    - drop upstreamed fix for KDC denial of service (CVE-2010-0283)
    - drop patch to check the user's password correctly using crypt(), which
      isn't a code path we hit when we're using PAM


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-6
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-4
changelog:
  - move the package changelog to the end to match the usual style (jdennis)
  - scrub out references to $RPM_SOURCE_DIR (jdennis)
  - include a symlink to the readme with the name LICENSE so that people can
    find it more easily (jdennis)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-3
changelog:
  - pull up the change to make kpasswd's behavior better match the docs
    when there's no ccache (#563431)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-1
changelog:
  - update to 1.7.1
    - don't trip AD lockout on wrong password (#542687, #554351)
    - incorporates fixes for CVE-2009-4212 and CVE-2009-3295
    - fixes gss_krb5_copy_ccache() when SPNEGO is used
  - move sim_client/sim_server, gss-client/gss-server, uuclient/uuserver to
    the devel subpackage, better lining up with the expected krb5/krb5-appl
    split in 1.8
  - drop kvno,kadmin,k5srvutil,ktutil from -workstation-servers, as it already
    depends on -workstation which also includes them


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-22
changelog:
  - use portreserve correctly -- portrelease takes the basename of the file
    whose entries should be released, so we need three files, not one


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-21
changelog:
  - suppress warnings of impending password expiration if expiration is more than
    seven days away when the KDC reports it via the last-req field, just as we
    already do when it reports expiration via the key-expiration field (#556495)
  - link with libtinfo rather than libncurses, when we can, in future RHEL


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-20
changelog:
  - krb5_get_init_creds_password: check opte->flags instead of options->flags
    when checking whether or not we get to use the prompter callback (#555875)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-19
changelog:
  - use portreserve to make sure the KDC can always bind to the kerberos-iv
    port, kpropd can always bind to the krb5_prop port, and that kadmind can
    always bind to the kerberos-adm port (#555279)
  - correct inadvertent use of macros in the changelog (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-18
changelog:
  - add upstream patch for integer underflow during AES and RC4 decryption
    (CVE-2009-4212), via Tom Yu (#545015)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-17
changelog:
  - put the conditional back for the -devel subpackage
  - back down to the earlier version of the patch for #551764; the backported
    alternate version was incomplete


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-16
changelog:
  - use %global instead of %define
  - pull up proposed patch for creating previously-not-there lock files for
    kdb databases when 'kdb5_util' is called to 'load' (#551764)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-15
changelog:
  - add upstream patch for KDC crash during referral processing (CVE-2009-3295),
    via Tom Yu (#545002)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages that live in the -libs subpackage into the regular
    %{_mandir} tree where they'll still be found if that package is the
    only one installed (#529319)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-11
changelog:
  - ksu: move account management checks to before we drop privileges, like
    su does (#540769)
  - selinux: set the user part of file creation contexts to match the current
    context instead of what we looked up
  - configure with --enable-dns-for-realm instead of --enable-dns, which isn't
    recognized any more


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-10
changelog:
  - move /etc/pam.d/ksu from krb5-workstation-servers to krb5-workstation,
    where it's actually needed (#538703)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-8
changelog:
  - specify the location of the subsystem lock when using the status() function
    in the kadmind and kpropd init scripts, so that we get the right error when
    we're dead but have a lock file - requires initscripts 8.99 (#521772)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if the init script fails to start krb5kdc/kadmind/kpropd because it's already
    running (according to status()), return 0 (part of #521772)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - simplify the man pages patch by only preprocessing the files we care about
    and moving shared configure.in logic into a shared function
  - catch the case of ftpd printing file sizes using %i, when they might be
    bigger than an int now


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-4
changelog:
  - try to merge and clean up all the large file support for ftp and rcp
    - ftpd no longer prints a negative length when sending a large file
      from a 32-bit host


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-3
changelog:
  - switch buildrequires: and requires: on e2fsprogs-devel into
    buildrequires: and requires: on libss-devel, libcom_err-devel, per
    sandeen on fedora-devel-list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a type mismatch in krb5_copy_error_message()
  - ftp: fix some odd use of strlen()
  - selinux labeling: use selabel_open() family of functions rather than
    matchpathcon(), bail on it if attempting to get the mutex lock fails


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - compile with %{?_smp_mflags} (Steve Grubb)
  - drop the bit where we munge part of the error table header, as it's not
    needed any more


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-1
changelog:
  - update to 1.7
    - no need to work around build issues with ASN1BUF_OMIT_INLINE_FUNCS
    - configure recognizes --enable/--disable-pkinit now
    - configure can take --disable-rpath now
    - no more libdes425, krb524d, krb425.info
    - kadmin/k5srvutil/ktutil are user commands now
    - new kproplog
    - FAST encrypted-challenge plugin is new
  - drop static build logic
  - drop pam_krb5-specific configuration from the default krb5.conf
  - drop only-use-v5 flags being passed to various things started by xinetd
  - put %{krb5prefix}/sbin in everyone's path, too (#504525)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-104
changelog:
  - extend PAM support to ksu: perform account and session management for the
    target user
  - pull up and merge James Leddy's changes to also set PAM_RHOST in PAM-aware
    network-facing services


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-103
changelog:
  - fix a typo in a ksu error message (Marek Mahut)
  - "rev" works the way the test suite expects now, so don't disable tests
    that use it


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-101
changelog:
  - add patches for read overflow and null pointer dereference in the
    implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
  - add patch for attempt to free uninitialized pointer in libkrb5
    (CVE-2009-0846)
  - add patch to fix length validation bug in libkrb5 (CVE-2009-0847)
  - put the krb5-user .info file into just -workstation and not also
    -workstation-clients


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-100
changelog:
  - turn off krb4 support (it won't be part of the 1.7 release, but do it now)
  - use triggeruns to properly shut down and disable krb524d when -server and
    -workstation-servers gets upgraded, because it's gone now
  - move the libraries to /%{_lib}, but leave --libdir alone so that plugins
    get installed and are searched for in the same locations (#473333)
  - clean up buildprereq/prereqs, explicit mktemp requires, and add the
    ldconfig for the -server-ldap subpackage (part of #225974)
  - escape possible macros in the changelog (part of #225974)
  - fixup summary texts (part of #225974)
  - take the execute bit off of the protocol docs (part of #225974)
  - unflag init scripts as configuration files (part of #225974)
  - make the kpropd init script treat 'reload' as 'restart' (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-19
changelog:
  - libgssapi_krb5: backport fix for some errors which can occur when
    we fail to set up the server half of a context (CVE-2009-0845)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clear fuzz out of patches, dropping a man page patch which is no longer
    necessary
  - quote %{__cc} where needed because it includes whitespace now
  - define ASN1BUF_OMIT_INLINE_FUNCS at compile-time (for now) to keep building


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-15
changelog:
  - build with -fno-strict-aliasing, which is needed because the library
    triggers these warnings
  - don't forget to label principal database lock files
  - fix the labeling patch so that it doesn't break bootstrapping


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-12
changelog:
  - stop exporting kadmin keys to a keytab file when kadmind starts -- the
    daemon's been able to use the database directly for a long long time now
  - belatedly add aes128,aes256 to the default set of supported key types


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-11
changelog:
  - libgssapi_krb5: properly export the acceptor subkey when creating a lucid
    context (Kevin Coffman, via the nfs4 mailing list)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-10
changelog:
  - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer
    when v4 compatibility is enabled on the KDC (CVE-2008-0062, CVE-2008-0063,
    - add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
    high-numbered descriptors are used (CVE-2008-0947, #433596)
  - add backport bug fix for an attempt to free non-heap memory in
    libgssapi_krb5 (CVE-2007-5901, #415321)
  - add backport bug fix for a double-free in out-of-memory situations in
    libgssapi_krb5 (CVE-2007-5971, #415351)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-9
changelog:
  - rework file labeling patch to not depend on fragile preprocessor trickery,
    in another attempt at fixing #428355 and friends


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-8
changelog:
  - ftp: add patch to fix "runique on" case when globbing fixes applied
  - stop adding a redundant but harmless call to initialize the gssapi internals


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to suppress double-processing of /etc/krb5.conf when we build
    with --sysconfdir=/etc, thereby suppressing double-logging (#231147)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove a patch, to fix problems with interfaces which are "up" but which
    have no address assigned, which conflicted with a different fix for the same
    problem in 1.5 (#200979)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated
  - in login, signal PAM when we're changing an expired password that it's an
    expired password, so that when cracklib flags a password as being weak it's
    treated as an error even if we're running as root


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-7
changelog:
  - drop netdb patch
  - kdb_ldap: add patch to treat 'nsAccountLock: true' as an indication that
    the DISALLOW_ALL_TIX flag is set on an entry, for better interop with Fedora,
    Netscape, Red Hat Directory Server (Simo Sorce)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-5
changelog:
  - enable patch for key-expiration reporting
  - enable patch to make kpasswd fall back to TCP if UDP fails (#251206)
  - enable patch to make kpasswd use the right sequence number on retransmit
  - enable patch to allow mech-specific creds delegated under spnego to be found
    when searching for creds


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-4
changelog:
  - some init script cleanups
    - drop unquoted check and silent exit for "$NETWORKING" (#426852, #242502)
    - krb524: don't barf on missing database if it looks like we're using kldap,
      same as for kadmin
    - return non-zero status for missing files which cause startup to
      fail (#242502)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-3
changelog:
  - allocate space for the nul-terminator in the local pathname when looking up
    a file context, and properly free a previous context (Jose Plans, #426085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-1
changelog:
  - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999
    and CVE-2007-4000 (the new pkinit module is built conditionally and goes
    into the -pkinit-openssl package, at least for now, to make a buildreq
    loop with openssl avoidable)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5.conf %verify(not md5 size mtime) in addition to
    %config(noreplace), like /etc/nsswitch.conf (#329811)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-9
changelog:
  - apply the fix for CVE-2007-4000 instead of the experimental patch for
    setting ok-as-delegate flags


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-7
changelog:
  - also perform PAM session and credential management when ftpd accepts a
    client using strong authentication, missed earlier
  - also label kadmind log files and files created by the db2 plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-6
changelog:
  - incorporate updated fix for CVE-2007-3999 (CVE-2007-4743)
  - fix incorrect call to "test" in the kadmin init script (#252322,#287291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-8
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to %{_var}/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include %{version}


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 10.2-15
changelog:
  - Patched configure to use config.{guess,sub} files so 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches  }" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches  }" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "aarch64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=aarch64-redhat-linux-gnu --host=aarch64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info macro can
    replace them with proper version. With this change it builds fine for AArch64
    architecture.
    Resolves: rhbz#1023783


author: Peter Jones <pjones@redhat.com> - 10.2-8
changelog:
  - Incorporate changes from Matthias Saou:
  - Include install patch, to avoid all of the ugly manual installation.
  - Cosmetic fixes (libs group, scriplets, don't mix %name with hardcode...).


author: Matthias Saou <http://freshrpms.net/> 10.2-6
changelog:
  - Fix all of the problems detected during the review which aren't acceptable
    according to the current policies and guidelines (part of #225638).
  - Don't prefix summaries with "A" nor suffix them with a dot.
  - Move .so symlink to the devel sub-package (#203620).
  - Add highest known version to the cdparanoia-III obsoletes.
  - Remove incorrect buildroot removal from %build.
  - Use acceptable %clean section.
  - Provide cdparanoia-static in the devel sub-package since the *.a is there.
  - Use single-command scriplet syntax for /sbin/ldconfig calls.
  - Escape all macros in changelog.
  - Include license file since it is present with the sources.


author: Adam Jackson <ajax@redhat.com> 10.2-3
changelog:
  - cdparanoia-10.2-endian.patch: Backport a crash fix for host/drive
    endianness mismatch. (#466659)


author: Adam Jackson <ajax@redhat.com> alpha9.8-30
changelog:
  - Add -Werror-implicit-function-declarations.
  - cdparanoia-III-alpha9.8-headers.patch: Fix the resulting errors.


author: Adam Jackson <ajax@redhat.com> alpha9.8-29
changelog:
  - cdparanoia-III-alpha9.8.scsi-setspeed.patch: Allow setting the speed of
    SCSI CD drives. (#431178)


author: Peter Jones <pjones@redhat.com> alpha9.8-23
changelog:
  - "This time, with a meaningful changelog" release.  Just like -22.
  - new SG_IO code in rawhide.  This means ripping will no longer use the 
    "cooked ioctl" mode that it has since we moved to 2.6, instead utilizing
    the real scsi-based command set to talk to most drives.  This should
    result in better error correction handling, and usage of much more
    commonly used kernel features.
  - environment variable "CDDA_TRANSPORT" added.  If you set this to "cooked",
    cdparanoia will try to use the "cooked ioctl" mode instead of SCSI/SG_IO
    based modes first, and then fall back to SG_IO.
  - It'd be good if this got some testing.  A prior version of the SG_IO code
    was known to fail on some USB drives.  This version should mitigate that
    quite a bit, but I lack the hardware to test it for sure.


author: Peter Jones <pjones@redhat.com> alpha9.8-5
changelog:
  - make a -libs package which contains the .so files
  - make the cdparanoia dependancy towards that, not -devel


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Switched spec file from the one used in Red Hat Linux 6.2, which
    also changes the name
  - gzip man page


author: Peter Jones <pjones@redhat.com>
changelog:
  - update package to provide cdparanoia-alpha9.7-2.*.rpm and 
    cdparanoia-devel-alpha9.7-2.*.rpm.  Also, URLs point at xiph.org
    like they should.


author: Peter Jones <pjones@redhat.com>
changelog:
  - updated package for alpha9.7, based on input from:
    Monty <xiphmont@xiph.org> 
    David Philippi <david@torangan.saar.de>


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.13-22
changelog:
  - revert the patch. It breaks backward compatibility for some apps. 
  - the xpath has still man page installed.
  - Resolves: rhbz#1067903


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.13-17
changelog:
  - 680418 - missing man page for xpath
  - applied debian patch, which added POD into xpath code, but also fix debian bug(#185292)


author: Jakub Martisko <jamartis@redhat.com> - 1.1.11-25
changelog:
  - add support for device names of the form /dev/srN
  - fix provided by Frantisek Kluknavsky
  - resolves:rhbz#1058446


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-18
changelog:
  - ported from cdda-paranoia to libcdio-paranoia, modified paranoia-cdda.patch
  - fixed bogus date in changelog


author: Honza Horak <hhorak@redhat.com> - 1.1.11-12
changelog:
  - Use system cdparanoia instead of old bundled version
  - Build libusal as a shared library
  - Messages from rpmlint clean-up


author: Honza Horak <hhorak@redhat.com> - 1.1.11-4
changelog:
  - Library libusal is installed in order to be used by other apps
    (Resolves: #588508)
    https://bugzilla.redhat.com/show_bug.cgi?id=588508


author: Honza Horak <hhorak@redhat.com> 1.1.11-2
changelog:
  - fixed man page missing arguments (Resolves: #647024)
    https://bugzilla.redhat.com/show_bug.cgi?id=647024
  - fixed erroneous "Unknown file type (unallocated)" warning 
    (Resolves: #174667)
    https://bugzilla.redhat.com/show_bug.cgi?id=174667


author: Roman Rakus <rrakus@redhat.com> - 1.1.9-6
changelog:
  - rename functions as they conflict with glibc
  - Don't push cdda2mp3 because we don't have any mp3 coder
    Resolves: #505918


author: Roman Rakus <rrakus@redhat.com> - 1.1.8-1
changelog:
  - Version 1.1.8 - old patches included
                  - added bzip2-devel to build requirements
  - fixed #171510 - preserve directory permissions


author: Harald Hoyer <harald@redhat.com> - 1.1.6-4
changelog:
  - play stupid tricks, to let alternatives make the links and
    rpm not removing them afterwards
  - removed bogus warning for "." and ".."


author: <jsafrane@redhat.com> - 47-14
changelog:
  - Fixed importing /etc/hosts and /etc/services, duplicate entries
    are now skipped. (#916623)
  - Added missing patches.


author: Jan Safranek <jsafrane@redhat.com> 47-2
changelog:
  - added support for Fedora DS (when it provides ldif2ldbm)
  - rediffed all patches to get rid of patch fuzz


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20
changelog:
  - Fix CVE-2018-17456: arbitrary code execution via .gitmodules
    Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19
changelog:
  - Fix httpd modules path to be independent from system architecture.
  Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
  Resolves: #1213059


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17
changelog:
  - Correctly return an error from fsck on encountering a .gitmodules symlink.
    This was broken in the debian 2.1.x backport and found by covscan.
    Fix the test to catch this.
  - Correct a typo in changelog.


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16
changelog:
  - Remove EL-5 settings and old Fedora conditionals.
    Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
    2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
  - Fix builds using '--without docs'
  - Change git-instaweb default from lighttpd(not available in rhel7) to
    apache2.
  - Add requires for git-{instaweb,gnome-keyring} to pull them, when
    installing git-all.


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15
changelog:
  - move instaweb to separate git-instaweb subpackage.
  	Resolves: #1213059
  - move gnome-keyring to a separate git-gnome-keyring subpackage.
  	Resolves: #1284081


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-14
changelog:
  - Backport fix for CVE-2018-11235
  - Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-13
changelog:
  - fall back to Basic auth if Negotiate fails
    Resolves: #1490998
  - handle request-pull when multiple tags point to the same commit
    Resolves: #1192146


author: Petr Stodulka <pstodulk@redhat.com> -1.8.3.1-9
changelog:
  - add control of GSSAPI credential delegation to enable HTTP(S)-SSO
    authentication
    Resolves: #1369173


author: Todd Zullinger <tmz@pobox.com> - 1.8.2-2
changelog:
  - Require perl(Term::ReadKey) for git add --interactive (#928328)
  - Drop DESTDIR from python instlibdir
  - Fix bogus changelog dates


author: Todd Zullinger <tmz@pobox.com> - 1.8.1.4-2
changelog:
  - Update asciidoc requirements, drop unsupported ASCIIDOC7
  - Define GNU_ROFF to force ASCII apostrophes in manpages (so copy/paste works)
  - Install tcsh completion (requires manual setup by users)
  - Clean up dist conditionals, don't pretend to support EL-4 builds
  - Use prebuilt documentation on EL-5, where asciidoc is too old
  - Respect gitexecdir variable in git-subtree install


author: Adam Tkac <atkac redhat com> - 1.8.0-1
changelog:
  - update to 1.8.0
  - include git-credential-gnome-keyring helper in git pkg
  - 0001-cvsimport-strip-all-inappropriate-tag-strings.patch was merged


author: Todd Zullinger <tmz@pobox.com> - 1.7.6.2-1
changelog:
  - Update to 1.7.6.2
  - Fixes incompatibility caused by git push --quiet fix
    http://thread.gmane.org/gmane.comp.version-control.git/180652


author: Todd Zullinger <tmz@pobox.com> - 1.7.6-4
changelog:
  - Drop git-arch on fedora >= 16, the tla package has been retired
  - Rework most spec file dist conditionals to make future changes easier


author: Adam Tkac <atkac redhat com> - 1.7.4.2-1
changelog:
  - update to 1.7.4.2
  - move man3/Git.3pm file to perl-Git subpkg (#664889)
  - add perl-DBD-SQLite dependency to git-cvs (#602410)


author: Todd Zullinger <tmz@pobox.com> - 1.7.4.1-1
changelog:
  - Update to 1.7.4.1
  - Clean up documentation settings (the defaults changed in 1.7.4)
  - Improve EL-5 compatibility, thanks to Kevin Fenzi for emacs testing


author: Todd Zullinger <tmz@pobox.com> - 1.7.1-1
changelog:
  - git-1.7.1
  - Fix conditionals for EL-6
  - Comply with Emacs add-on packaging guidelines (#573423), Jonathan Underwood
    - Place elisp source files in separate emacs-git-el package
    - Place git support files in own directory under site-lisp
    - Use Emacs packaging macros


author: Todd Zullinger <tmz@pobox.com> - 1.7.0-1
changelog:
  - git-1.7.0
  - Link imap-send with libcrypto (#565147)
  - Disable building of unused python remote helper libs


author: Todd Zullinger <tmz@pobox.com> - 1.6.6.1-1
changelog:
  - git-1.6.6.1
  - Use %{gitcoredir}/git-daemon as xinetd server option, for SELinux (#529682)
  - Make %{_var}/lib/git the default gitweb projectroot (#556299)
  - Include gitweb/INSTALL file as documentation, the gitweb README refers to it
  - Ship a short example gitweb config file (%{_sysconfdir}/gitweb.conf)
  - Remove long fixed xinetd IPv6 workaround on Fedora (#557528)
  - Install missing gitweb.js (#558740)


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.3-1
changelog:
  - git-1.6.5.3
  - Only BR perl(Error) on Fedora and RHEL >= 5
  - Use config.mak to set build options
  - Improve compatibility with EPEL
  - Replace $RPM_BUILD_ROOT with %{buildroot}
  - Fix Obsoletes for those rebuilding on EL-4


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.2-1
changelog:
  - git-1.6.5.2
  - Drop asciidoc --unsafe option, it should not be needed anymore
  - Don't use install -t/-T, they're not compatible with older coreutils
  - Don't use -perm /a+x with find, it's incompatible with older findutils


author: Todd Zullinger <tmz@pobox.com> - 1.6.3.3-1
changelog:
  - git-1.6.3.3
  - Move contributed hooks to %{_datadir}/git-core/contrib/hooks (bug 500137)
  - Fix rpmlint warnings about Summary and git-mergetool--lib missing shebang


author: Todd Zullinger <tmz@pobox.com> - 1.6.3.2-1
changelog:
  - git-1.6.3.2
  - Require emacs >= 22.2 for emacs support (bug 495312)
  - Add a .desktop file for git-gui (bug 498801)
  - Set ASCIIDOC8 and ASCIIDOC_NO_ROFF to correct documentation issues,
    the sed hack to fix bug 485161 should no longer be needed
  - Escape newline in git-daemon xinetd description (bug 502393)
  - Add xinetd to git-daemon Requires (bug 504105)
  - Organize BuildRequires/Requires, drop redundant expat Requires
  - Only build noarch subpackages on Fedora >= 10
  - Only build emacs and arch subpackages on Fedora
  - Handle curl/libcurl naming for EPEL and Fedora


author: Todd Zullinger <tmz@pobox.com> - 1.6.2.2-1
changelog:
  - git-1.6.2.2
  - Include contrib/ dir in %doc (bug 492490)
  - Don't set DOCBOOK_XSL_172, fix the '\&.ft' with sed (bug 485161)
  - Ignore Branches output from cvsps-2.2b1 (bug 490602)
  - Remove shebang from bash-completion script
  - Include README in gitweb subpackage


author: Todd Zullinger <tmz@pobox.com> - 1.6.2-1
changelog:
  - git-1.6.2
  - Include contrib/emacs/README in emacs subpackage
  - Drop upstreamed git-web--browse patch


author: Todd Zullinger <tmz@pobox.com> - 1.6.1.3-2
changelog:
  - Require perl(Authen::SASL) in git-email (bug 483062)
  - Build many of the subpackages as noarch
  - Update URL field


author: Todd Zullinger <tmz@pobox.com> 1.6.1.3-1
changelog:
  - git-1.6.1.3
  - Set htmldir so "git help -w <command>" works
  - Patch git-web--browse to not use "/sbin/start" to browse
  - Include git-daemon documentation in the git-daemon package


author: Todd Zullinger <tmz@pobox.com> 1.6.1-1
changelog:
  - Install git-* commands in %{_libexecdir}/git-core, the upstream default
  - Remove libcurl from Requires, rpm will pick this up automatically
  - Consolidate build/install options in %make_git (Roland McGrath)
  - Include DirectoryIndex in gitweb httpd-config (bug 471692)
  - Define DOCBOOK_XSL_172 to fix minor manpage issues
  - Rename %{_var}/lib/git-daemon to %{_var}/lib/git
  - Preserve timestamps on installed files
  - Quiet some rpmlint complaints
  - Use macros more consistently


author: Todd Zullinger <tmz@pobox.com> 1.6.0.6-1
changelog:
  - git-1.6.0.6
  - Fixes a local privilege escalation bug in gitweb
    (http://article.gmane.org/gmane.comp.version-control.git/103624)
  - Add gitk Requires to git-gui (bug 476308)


author: Josh Boyer <jwboyer@gmail.com> 1.6.0.3-1
changelog:
  - git-1.6.0.3
  - Drop curl requirement in favor of libcurl (bug 449388)
  - Add requires for SMTP-SSL perl module to make git-send-email work (bug 443615)


author: James Bowes <jbowes@redhat.com> 1.5.4.4-3
changelog:
  - Include the sample hooks from contrib/hooks as docs (bug 321151).
  - Install the bash completion script from contrib (bug 433255).
  - Include the html docs in the 'core' package again (bug 434271).


author: Jeremy Katz <katzj@redhat.com> - 1.5.4.1-2
changelog:
  - Add upstream patch (e62a641de17b172ffc4d3a803085c8afbfbec3d1) to have 
    gitweb rss feeds point be commitdiffs instead of commit


author: Josh Boyer <jwboyer@gmail.com> 1.5.3.6-1
changelog:
  - git-1.5.3.6
  - git-core requires perl(Error) (bug 367861)
  - git-svn requires perl(Term:ReadKey) (bug 261361)
  - git-email requires perl-Git (bug 333061)


author: Chris Wright <chrisw@redhat.com> 1.1.0-1
changelog:
  - Update to latest git-1.1.0 (drop git-email for now)
  - Now creates multiple packages:
  -        git-core, git-svn, git-cvs, git-arch, gitk


author: H. Peter Anvin <hpa@zytor.com> 0.99.9j-1
changelog:
  - Change subpackage names to git-<name> instead of git-core-<name>
  - Create empty root package which brings in all subpackages
  - Rename git-tk -> gitk


author: Chris Wright <chrisw@osdl.org> 0.99.4-4
changelog:
  - drop sh_utils, sh-utils, diffutils, mktemp, and openssl Requires
  - use RPM_OPT_FLAGS in spec file, drop patch0


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.99.4-3
changelog:
  - use dist tag to differentiate between branches
  - use rpm optflags by default (patch0)
  - own %{_datadir}/git-core/


author: Horst H. von Brand <vonbrand@inf.utfsm.cl>
changelog:
  - Redid the description
  - Cut overlong make line, loosened changelog a bit
  - I think Junio (or perhaps OSDL?) should be vendor...


author: Matt Domsch <Matt_Domsch@dell.com> - 2.22.0-1
changelog:
  - spec license change to MIT per Novell
  - remove BR: unzip, it's in the default buildroot already
  - add MIT license to spec file


author: Matt Domsch <Matt_Domsch@dell.com> - 2.19.1-1
changelog:
  - Upgraded to cimv2.19.1Experimental
  - now meets Fedora packaging guidelines too
  - added -docs subpackage


author: bwhiteley@suse.de
changelog:
  - Updated to cimv2.16Experimental (#341800)
    Remove carriage returns from MOF files.
    Fix broken comment blocks in 2.16 schema.


author: Michal Ruprich <mruprich@redhat.com> - 20180605-1
changelog:
  - Resolves: #1643472 - Add geolite2 package
  - Lowering the NVR due to the package version in el8. Higher NVR could make problems during migration from el7 to el8


author: Tim Waugh <twaugh@redhat.com> 0.2.11-9
changelog:
  - The python sub-package now requires the exactly-matching main
    package (bug #605169).
  - Fixed strict aliasing warnings (bug #605170).


author: Tim Waugh <twaugh@redhat.com> 0.2.11-6
changelog:
  - Package review fixes (bug #226031):
    - Drop prereq on ldconfig.
    - Removed trailing dot in devel package summary.
    - Fixed devel package requirement on main package.
    - Use SMP make flags.
    - Removed static libraries and la files.
    - Fixed source URL.
    - Make sure timestamps are preserved on install.
    - Ship AUTHORS and NEWS.


author: Michal Židek <mzidek@redhat.com> - 0.6.1-32
changelog:
  - Previous change in spec file broke the application of downstream only patch
  - Related: rhbz#1507607 - ding-libs: libini_config: `ini_config_augment` reports errors on match failure


author: Michal Židek <mzidek@redhat.com> - 0.6.1-31
changelog:
  - Resolves: rhbz#1507607 - ding-libs: libini_config: `ini_config_augment` reports errors on match failure


author: Michal Židek <mzidek@redhat.com> - 0.6.1-30
changelog:
  - Adopting to use Downstream Helper for bellow BZ backport
  - Related: rhbz#1507607 - ding-libs: libini_config: `ini_config_augment` reports errors on match failure


author: Michal Židek <mzidek@redhat.com> - 0.6.1-29
changelog:
  - Fix rpmdiff failure for 'Binary stripping'
  - Resolves: rhbz#1480270 - Rebase ding-libs to the latest upstream release


author: Jakub Hrozek <jhrozek@redhat.com> - 0.5.0.1-27
changelog:
  - Re-add the soname hack
  - Resolves: rhbz#1290382 - Rebase ding-libs to the latest available upstream


author: Jakub Hrozek <jhrozek@redhat.com> - 0.5.0.1-25
changelog:
  - Resolves: rhbz#1205557 - Include the latest upstream ding-libs release in 7.2
  - Port the SONAME hack


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.0.1-20
changelog:
  - Apply a patch by Dmitri Pal to strip trailing whitespace
  - Resolves: rhbz#1012434 - libiniconfig doesn't trim trailing whitespace


author: Ondrej Kos <okos@redhat.com> - 0.3.0.1-18
changelog:
  - Apply patch to stop generating doxygen timestamps
  - Apply patch to include correct libini_config file


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.0.1-15
changelog:
  - Increase the release number to -15 to allow clean upgrade path from
    0.2 since some of the components kept their version the same in 0.3


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.0.1-1
changelog:
  - New upstream release 0.3.0.1
  - https://fedorahosted.org/sssd/wiki/Releases/DingNotes-0.3.0.1
  - obsoletes patch0001


author: Jakub Hrozek <jhrozek@redhat.com> - 0.2.91-14
changelog:
  - include a patch to get rid of autoreconf warnings
  - run autoreconf before configure
  - Resolves: #925258


author: Jan Zeleny <jzeleny@redhat.com> - 0.2.91-1
changelog:
  - Rebase to 0.3.0beta1, changelog available at
    https://fedorahosted.org/sssd/wiki/Releases/DingNotes-0.2.91


author: Stephen Gallagher <sgallagh@redhat.com> - 0.1.3-7
changelog:
  - Fix off-by-one bug in path_concat()
  - Resolves: rhbz#799347 - path_utils:test_path_concat_neg fails on 64-bit big
                            endians


author: Stephen Gallagher <sgallagh@redhat.com> - 0.1.2-3
changelog:
  - New upsteam release 0.1.2
  - Fixes a serious issue with libdhash where hash_enter() would never update
  - existing entries for a key.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0.8.0-3
changelog:
  - Fix X11 even race with gtk (#589998)
  - Fix qt4 problems with creating window in the background (#589532)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7.6-3
changelog:
  - drop alternatives, use app-wrapper instead (borrowed from opensuse)
  - -qt4 experimental subpkg, -qt includes qt3 version again  (#523488)


author: Ville Skyttä <ville.skytta at iki.fi> - 0.7.2-1
changelog:
  - 0.7.2, docs patch applied upstream.
  - Switch to GTK2 in -gtk.
  - Fine tune dependencies.
  - Build with dependency tracking disabled.
  - Clean up obsolete pre-FC2 support.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:0.6.9-0.fdr.1
changelog:
  - Update to 0.6.9.
  - Smoother experience with --excludedocs.
  - Don't change alternative priorities on upgrade.


author: Naveen Kumar <nkumar@redhat.com> - 3.0-8
changelog:
  - add ur-in, ur-pk & pa-pk locale-specific overrides rule in 67-paktype-naskh-basic.conf
  - add ur-in, ur-pk & pa-pk locale-specific overrides rule in 67-paktype-naskh-basic-sa.conf
  - resolves bug #586789


author: Naveen Kumar <nkumar@redhat.com> - 3.0-4
changelog:
  - removed redundant  BuildRequires from specfile
  - removed unnecessary rm/rmdir's from specfile
  - Sane updates in docs.


author: Naveen Kumar <nkumar@redhat.com> - 3.0-3
changelog:
  - removed all cd's
  - changes w.r.t sed in prep section
  - added .conf file for PakTypeNaskhBasic.ttf
  - files section added for common
  - removed space from 67-*-sindhi.conf


author: Naveen Kumar <nkumar@redhat.com> - 3.0-2
changelog:
  - Re-packing with updated License information.
  - Changes in Spec file with new upstream source.
  - Added conf files


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 0.1.6-1
changelog:
  - update to upstream release 0.1.6
  - update modules to 0.0.4
  - update description
  - add python3-pyasn1 subpackage
  - add versioned Requires for the module subpackages
  - add %check section


author: Rob Crittenden <rcritten@redhat.com> - 0.0.7a-4
changelog:
  - Use setuptools to install the package
  - simplify the files included in the rpm so it includes the .egg-info


author: Michal Srb <msrb@redhat.com> - 1:2013.5.1-3
changelog:
  - Do not build module with unclear licensing (relames)
  - Replace %add_to_maven_depmap with %add_maven_depmap


author: Mat Booth <fedora@matbooth.co.uk> - 1:2009.1-4
changelog:
  - Really require a version of xml-commons-resolver that provides the necessary
    maven pom and depmap.


author: Mat Booth <fedora@matbooth.co.uk> - 1:2009.1-1
changelog:
  - Update to latest tagged release.
  - Drop support for GCJ ahead of time compilation.
  - Fix RHBZ #627688, RHBZ #631076
  - This project now builds with maven instead of ant.
  - The new build in this release aggregates javadocs, so now we have one javadoc
    package that obsoletes the many javadoc packages we had before.
  - Use new jar names that upstream use, provide the old names.
  - Misc other changes for guideline compliance.


author: Matt Wringe <mwringe@redhat.com> 0:1,2-0.1.20050722.3jpp.3
changelog:
  - Make package build with new gcj. Remove .class files from demo package and
    remove demo exclude from aot-compile-rpm


author: Matt Wringe <mwringe@redhat.com> 0:1.2-0.1.20050722.3jpp.2
changelog:
  - Fix unowned directories
  - Change copyright files to utf-8 format
  - Change license field to BSD (from BSD-Style)


author: Andrew Overholt <overholt@redhat.com> 0:1.2-0.1.20050722.3jpp.1
changelog:
  - Remove postun Requires on jpackage-utils
  - Set gcj_support to 1
  - Fix groups to shut up rpmlint
  - Add versions to the Provides and Obsoletes
  - Add patch to take out Class-Path in MANIFEST.MF


author: Matt Wringe <mwringe at redhat.com> - 0:1.2-0.1.20050722.3jpp.1.fc7
changelog:
  - Extract sources from a fresh CVS export of the given tag and add extra source
    required to build the package not present in the 20050722 tag anymore
  - Add a patch to remove compile time dependency on crimson
  - Add a patch to enable compression of jar files
  - Add jpackage-utils as a requires for the packages/subpackages


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Kalev Lember <kalevlember@gmail.com> - 3.4.0.1-1
changelog:
  - Update to 3.4.0.1
  - Obsolete the -capplet subpackage; the whole plugins architecture is
    removed from libgnomekbd


author: Matthias Clasen <mclasen@redhat.com> - 2.22.0-2
changelog:
  - Split the plugins capplet off into a subpackage, since we don't
    have any plugins and don't want the capplet by default


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Paul Wouters <pwouters@redhat.com> - 1.6.14-1
changelog:
  - [pulled before release]
  - Updated to 1.6.14
  - Removed merged in patch
  - Added new dependancy on ca-certificates for ldns-dane PKIX validation


author: Paul Wouters <pwouters@redhat.com> - 1.6.13-2
changelog:
  - Added reworked ldns-read-zone patch from trunk
    (adds -p for SOA padding, and -o for zeroizing timestamps/sigs)


author: Paul Wouters <pwouters@redhat.com> - 1.6.13-1
changelog:
  - Upgraded to 1.6.13, bugfix release
  - Added --disable-ecdsa as ECC is still banned
  - Removed --with-sha2 - it is always enabled and option was removed


author: Paul Wouters <paul@xelerance.com> - 1.6.11-2
changelog:
  - Updated to 1.6.11, fixes rhbz#741026 which is CVE-2011-3581
  - Python goes into sitearch, not sitelib
  - Fix source link and spelling errors in description


author: Paul Wouters <paul@xelerance.com> - 1.6.10-2
changelog:
  - Fix for losing nameserver when it drops UDP fragments in
    ldns_resolver_send_pkt [Willem Toorop <willem@NLnetLabs.nl>]
  - Added ldnsx module (to be merged into ldns soon)
    http://git.xelerance.com/cgi-bin/gitweb.cgi?p=ldnsx.git;a=summary


author: Paul Wouters <paul@xelerance.com> - 1.6.4-2
changelog:
  - Fix missing _ldns.so causing ldns-python to not work
  - Patch for installing ldns-python files
  - Patch for rpath in ldns-python
  - Don't install .a file for ldns-python


author: Paul Wouters <paul@xelerance.com> - 1.6.2-1
changelog:
  - Upgraded to 1.6.2. This fixes various bugs.
    (upstream released mostly to default with sha2 for the imminent
     signed root, but we already enabled that in our builds)


author: Paul Wouters <paul@xelerance.com> - 1.6.1-2
changelog:
  - Added openssl dependancy back in, since we get more functionality
   when using openssl. Especially in 'drill'.


author: Paul Wouters <paul@xelerance.com> - 1.6.0-3
changelog:
  - Added patch to compile with --without-ssl
  - Removed openssl dependancies
  - Recompiled with --without-ssl


author: Paul Wouters <paul@xelerance.com> - 1.5.1-4
changelog:
  - Memory management bug when generating a sha256 key, see:
    https://bugzilla.redhat.com/show_bug.cgi?id=493953


author: Paul Wouters <paul@xelerance.com> 1.2.0-11
changelog:
  - Patch for ldns-key2ds to write to stdout
  - Again remove extra set of man pages from doc
  - own /usr/include/ldns (bug 233858)


author: Paul Wouters <paul@xelerance.com> 1.2.0-10
changelog:
  - Added sha256 DS record patch to ldns-key2ds
  - Minor tweaks for proper doc/man page installation.
  - Workaround for parallel builds


author: Paul Wouters <paul@xelerance.com> 1.2.0-2
changelog:
  - Own the /usr/include/ldns directory (bug #233858)
  - Removed obsoleted patch
  - Remove files form previous libtool run accidentally packages by upstream


author: Paul Wouters <paul@xelerance.com> 1.0.1-3
changelog:
  - Fixed changelog typo in date
  - Rebuild requested for PT_GNU_HASH support from gcc
  - Did not upgrade to 1.1.0 due to compile issues on x86_64


author: Paul Wouters <paul@xelerance.com> 1.0.0-6
changelog:
  - added a make clean for 2.3.3 since .o files were left behind upstream,
    causing failure on ppc platform


author: Jeroen van Meeuwen <vanmeeuwen@kolabsys.com> - 2.4.17-1
changelog:
  - New upstream version, fixes upstream bugs:
  - reconstruct doesn't retain internaldate correctly (#3733)
  - Race condition in maibox rename (#3696)
  - DBERROR db4: Transaction not specified for a transactional database (#3715)
  - performance degradation on huge indexes in 2.4 branch (#3717)
  - typo fix in imapd.conf man page (#3729)
  - quota does not find all quotaroots if quotalegacy, fulldirhash and prefix are used and virtdomains is off (#3735)
  - Mail delivered during XFER was lost (#3737)
  - replication does not work on RENAME (#3742)
  - Failed asserting during APPEND (#3754)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.4.12-4
changelog:
  - reduce noisy logging, add option to turn on LOG_DEBUG syslog 
    messages again (thanks Philip Prindeville) (#754940)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.4.8-1
changelog:
  - cyrus-imapd updated to 2.4.8
  - fixed: cannot set unlimited quota through proxy
  - fixed: reconstruct tries to set timestamps again and again   
  - fixed: response for LIST "" user is wrong
  - fixed: THREAD command doesn't support quoted charset   
  - fixed crashes in mupdatetest and cyr_expire when using -x


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.16-6
changelog:
  - follow licensing guideline update
  - devel sub-package has to have virtual static provides (#609604)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.16-5
changelog:
  - spec cleanup
  - simplified packaging (merge -perl in -utils)
  - remove obsoleted and/or unmaintained additional sources/patches
  - remove long time not used files from the cvs/srpm
  - update additional sources/patches from their upstream


author: Tomas Janousek <tjanouse@redhat.com> - 2.3.9-8
changelog:
  - move certificate creation from -utils postinst to main package
  - rebuild with newer openssl and openldap


author: Tomas Janousek <tjanouse@redhat.com> - 2.3.9-7
changelog:
  - updated the getgrouplist patch
  - fixed a few undeclared functions (and int to pointer conversions)


author: Tomas Janousek <tjanouse@redhat.com> - 2.3.9-4.rc1
changelog:
  - update to latest upstream beta
  - temporarily dropped the rmquota+deletemailbox patch (doesn't apply)
  - fixed to compile with newer glibc
  - added the getgrouplist patch from RHEL-4, dropped groupcache patch
  - dropped the allow_auth_plain patch
  - buildrequire perl-devel


author: Tomas Janousek <tjanouse@redhat.com> - 2.3.8-3.2
changelog:
  - removed the lm_sensors-devel dependency, since it's properly required in
    net-snmp-devel
  - #248984 - cyrus-imapd.logrotate updated for rsyslog


author: Petr Rockai <prockai@redhat.com> - 2.3.7-1
changelog:
  - update to latest upstream version, fixes a fair amount of issues
  - forward-port the autocreate and rmquota patches (used latest
    upstream patches, those are for 2.3.3)


author: Petr Rockai <prockai@redhat.com> - 2.3.1-3
changelog:
  - install perl modules into vendor_perl instead of site_perl
  - change mode of perl .so files to 755 instead of 555
  - update pam configuration to use include directive instead
    of deprecated pam_stack
  - change prereq on cyrus-imapd-utils to requires


author: Petr Rockai <prockai@redhat.com> - 2.3.1-2.99.test1
changelog:
  - address bunch of rpmlint errors and warnings
  - rename perl-Cyrus to cyrus-imapd-perl to be consistent with rest
    of package (the cyrus modules are not part of cpan)
  - added provides on cyrus-nntp and cyrus-murder (the functionality
    is part of main package now)
  - removed generation of README.buildoptions
  - the two above made it possible to get rid of most build-time parameter
    guessing from environment
  - get rid of internal autoconf (iew)
  - don't strip binaries, renders -debuginfo useless...
  - remove prereq's in favour of newly added requires(...)


author: John Dennis <jdennis@redhat.com> - 2.3.1-2
changelog:
  - bring up to Simon Matter's 2.3.1-2 release
  - fix bug #173319, require cyrus-sasl-lib instead of cyrus-sasl
  - fix bug #176470, hardcoded disttag
  - add backend_sigsegv patch
  - add replication_policycheck patch


author: Simon Matter <simon.matter@invoca.ch> 2.3.1-0.18
changelog:
  - update rpm_set_permissions script
  - add snmp support as build time option, disabled by default
    because it doesn't build on older distributions


author: Simon Matter <simon.matter@invoca.ch> 2.3.1-0.13
changelog:
  - add autosievefolder patch
  - add rmquota+deletemailbox patch
  - change default path for make_md5, add md5 directory


author: Simon Matter <simon.matter@invoca.ch> 2.3.1-0.10
changelog:
  - spec file cleanup
  - add more cvt_cyrusdb_all fixes
  - fix pre/post scripts
  - fix requirements
  - add patch to set Invoca RPM config defaults
  - add sync directory used for replication
  - add autocreate patch


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-12
changelog:
  - add quickstart/stop option to init script to bypass db import/export
  - add authid_normalize patch
  - add allow_auth_plain_proxying patch
  - update gcc4 patch
  - remove useless fdatasync patch
  - add private autoconf used for build, remove autoconf dependency
  - generate correct docs including man pages
  - remove unneeded files from doc directory


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-6
changelog:
  - fix recovery problems with db4, which do not exist with db3
  - fix logic for handling ssl certs
  - remove initlog from init script


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-5
changelog:
  - add notifytest to the distribution
  - add functionality to convert all berkeley databases to skiplist
    on shutdown and convert them back as needed on startup. This should
    solve the upgrade problems with Berkeley databases.


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-4.14
changelog:
  - add gcc4 patch
  - determine and handle pki directory for openssl correctly
  - add skiplist recovery docs
  - add notify_sms patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added nolinkimapspool patch
  - fix debug_package macro, it was still being expanded,
    comments don't hide macro expansion
  - change license field to BSD, its not exact BSD, but BSD is the closest


author: John Dennis <jdennis@redhat.com> - 2.2.12-6.fc4
changelog:
  - the openssl package moved all its certs, CA, Makefile, etc. to /etc/pki
    now we are consistent with the openssl directory changes.


author: John Dennis <jdennis@redhat.com> - 2.2.12-5.fc4
changelog:
  - we finally have a common directory, /etc/pki for certs, so create
    /etc/pki/cyrus-imapd and put the ssl pem file there. The /etc/cyrus-imapd
    location will not be used, this change supercedes that.


author: John Dennis <jdennis@redhat.com> - 2.2.12-4.fc4
changelog:
  - fix bug #141479, move ssl pem file from /usr/share/ssl/certs to /etc/cyrus-imapd/cyrus-imapd.pem
  - change license field to BSD, its not exact BSD, but BSD is the closest.


author: John Dennis <jdennis@redhat.com> - 2.2.12-1.2.fc4
changelog:
  - fix debug_package macro, it was still being expanded,
    comments don't hide macro expansion
  - fix changelog chronological order
  - fix bug 118832, cyrus-imapd is modifying /etc/services


author: John Dennis <jdennis@redhat.com> - 2.2.10-11.2.fc4
changelog:
  - make _contribdir identical to Simon's,
    I had been getting burned by rpm's bizarre handling of macros in comments


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - remove special ownership and permissions from deliver
  - enable deliver-wrapper per default
  - enable OutlookExpress seenstate patch per default


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added more fixes to the autocreate patch
  - don't use %_libdir for %_cyrexecdir, it's a mess on x86_64
  - don't use %_libdir for symlinks
  - remove %_libdir pachtes
  - change pam configs to work on x86_64
  - changed default build option for IDLED to on
  - changed rpm_set_permissions to honor partitions in /etc/imapd.conf


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - removed allnumeric patch, not needed anymore
  - made groupcache a compile time option
  - rename nntp's pam service, fixes RedHat's bug #142672


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated groupcache patch
  - updated cvt_cyrusdb_all to use runuser instead of su if available
  - added upd_groupcache tool


author: John Dennis <jdennis@redhat.com> 2.2.10-3.devel
changelog:
  - fix bug #141673, dup of bug #141470
    Also make cyrus.conf noreplace in addition to imapd.conf
    Remove the verify overrides on the noreplace config files,
    we do want config file changes visible when verifying


author: John Dennis <jdennis@redhat.com> 2.2.10-1.devel
changelog:
  - update to Simon Matter's 2.2.10 RPM,
    fixes bug #139382, 
    security advisories: CAN-2004-1011 CAN-2004-1012 CAN-2004-1013 CAN-2004-1015


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - changed requirement for file >= 3.35-1 from BuildPrereq to
    Requires, fixes RedHat's bug #124991
  - added acceptinvalidfrom patch to fix RedHat's bug #137705


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - fixed symlinks for x86_64, now uses the _libdir macro
    reported by John Dennis, fixes RedHat's bug #128964
  - removed obsoletes tag, fixes RedHat's bugs #127448, #129274


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated autocreate and autosieve patches
  - made authorization a compile time option
  - added sieve-bc_eval patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated to 2.2.7
  - modified autocreate patch or 2.2.7
  - removed snmpargs patch which was needed for RedHat 6.2


author: John Dennis <jdennis@redhat.com> - 2.2.6-2,FC3,1
changelog:
  - bring up to date with Simon Matter's latest upstream rpm 2.2.6-2
  - comment out illegal tags Packager, Vendor, Distribution
    build for FC3


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated autocreate, autosieve and rmquota patches
  - fixed rmquota patch to build on gcc v3.3.x
  - added lmtp_sieve patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - don't enable cyrus-imapd per default
  - rename fetchnews to cyrfetchnews to avoid namespace conflicts with leafnode
  - replace fetchnews with cyrfetchnews in man pages
  - replace master with cyrus-master in man pages


author: Dan Walsh <dwalsh@redhat.com>
changelog:
  - change su within init script to get input from /dev/null
    this prevents hang when running in SELinux
  - don't use -fpie as default, it breaks different distributions


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - merged in most changes from Karsten Hopp's RedHat package
  - fixed permissions of files in contrib, thank you
    Edward Rudd for reporting it.
  - modified snmp patch to make it build on RedHat 6.2 again


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - switch to Simon Matter's cyrus-imapd package, which has
    some major improvements over the old Red Hat package.
    - configdirectory moved from /var/imap to /var/lib/imap
    - sasl_pwcheck_method changed to saslauthd
  - needed to delete package/vendor tags for buildsystem.
  - added USEPIE variable for linking with -fpie flag
  - removed rpath from linker arguments
  - removed email header from README.HOWTO-recover-mailboxes
  - added lib64 patch
  - use CFLAGS from specfile in imtest subdir
  - disable -pie on ppc for now


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - convert sieve scripts to UTF-8 only if sievec failed before
  - add note to the readme about limiting loggin on busy servers
  - added build time option to chose the syslog facility


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - add sendmail m4 macro, some people were looking for it
  - just one source for pam default configuration (they were all the same)
  - added /etc/pam.d/lmtp
  - added build support for RedHat Beta severn


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated autocreate patch to 0.8.1
  - removed creation of spool/config dirs, not needed anymore
  - added cyrus_sharedbackup to contrib


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - upgraded to 2.1.14
  - removed now obsolete forcedowncase patch
  - use --with-extraident to add extra version information
  - updated munge8bit patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added functionality to patch the IPv6 patch on the fly if
    autoconf > 2.13, we can now use newer autoconf again.


author: Paul Bender <pbender@qualcomm.com>
changelog:
  - fixed spec file so that autoconf 2.13 will always be used,
    since the IPv6 patch requires autoconf <= 2.13


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - update to 2.1.12
  - added logrotate entry for /var/log/auth.log
  - modified init script to use builtin daemon mode


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - removed autoconf hack, not needed anymore
  - enabled build on RedHat Beta Phoebe
  - added services entry for lmtp
  - cleanup spec file


author: Troels Arvin <troels@arvin.dk>
changelog:
  - Explicitly changed files-section to
     - use defattr for simple (root-owned 0644) files
     - explictly set root as user/group owner where
       the user/group ownership was previously indicated
       as "-"; this allows building valid packages without
       having to being root when building


author: Simon Matter <simix@datacomm.ch>
changelog:
  - remove creation of cyrus user at build time
  - added scripts from ftp://kalamazoolinux.org/pub/projects/awilliam/cyrus/


author: Simon Matter <simix@datacomm.ch>
changelog:
  - modified path in deliver-wrapper, thank you Richard L. Phipps
  - added RedHat 2.1AS support to the perlhack detection
  - added build time option to force syncronous updates on ext3


author: Simon Matter <simix@datacomm.ch>
changelog:
  - included support for different autoconf versions
  - modified the perl build and install process
  - made some .spec changes to build on RedHat 7.x and limbo


author: Simon Matter <simix@datacomm.ch>
changelog:
  - added compile time parameters to configure the package based on
    the idea from Luca Olivetti <luca@olivetti.cjb.net>
  - make deliver-wrapper a compile time option


author: Simon Matter <simix@datacomm.ch>
changelog:
  - upgraded to cyrus-imapd 2.1.3
  - removed some stuff that was cleaned up in the sources
  - added compile time options for db backends


author: Simon Matter <simix@datacomm.ch>
changelog:
  - added some %dir flags
  - removed /usr/lib/sasl/Cyrus.conf
  - added conf templates
  - build time option for usage of saslauth group


author: Simon Matter <simix@datacomm.ch>
changelog:
  - dependency of cyrus-sasl >= 1.5.24-22
  - dotstuffing patch for sendmail calls made by sieve for outgoing
    mails
  - patch for ability to force ipurge to traverse personal folders


author: Simon Matter <simix@datacomm.ch>
changelog:
  - changed default auth to pam
  - remove several %dir from %files sections
  - change from /usr/lib/cyrus -> /usr/libexec/cyrus
  - rename source files to something like cyrus...
  - added rehash tool
  - changed to hashed spool


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.1.2-2
changelog:
  - fix integer underflow in compute_hash (#302181)
  - fix SLang_set_error when called from signal handler (#297661)


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.0.7-2
changelog:
  - ignore background color of trailing spaces if terminal has bce (#217276)
  - move static library to -static subpackage
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.0.6-1
changelog:
  - update to slang-2.0.6
  - move .so.2 link to main package
  - don't package static library and utf8 link
  - remove requires for libtool and libtermcap
  - rearrange doc files (#191583)


author: Petr Raszyk <praszyk@redhat.com> - 2.0.5-5
changelog:
  - A patch by Bill Nottingham <notting@redhat.com>
    (#174761). slang-LANG.patch
    slang reads automatically sh-env-variable LANG.


author: Petr Raszyk <praszyk@redhat.com> - 1.4.9-22
changelog:
  - libslang-utf8.so should not use the symbol __libc_enable_secure 
  - (#161536). slang-nointerlibc.patch
  - Additional some comments/hints for C-Frame 121


author: Petr Rockai <prockai@redhat.com> - 1.4.9-17
changelog:
  - Patch to compile with gcc4 by Robert Scheck (#151029). (Weeird,
    probably on march 2nd the used buildroot wasn't updated with
    gcc4 yet?).


author: Adrian Havill <havill@redhat.com> 1.4.9-1
changelog:
  - big upgrade to 1.4.9
  - manually redid partially rotted utf patch for sldisply.c
  - no longer necessary to chmod the so files
  - change copyright header to license


author: Bill Nottingham <notting@redhat.com> 1.4.5-9
changelog:
  - tweak UTF-8 linedrawing patch slightly; add README describing some of
    the changes
  - fix a utee/dtee typo


author: Donnie Barnes <djb@redhat.com>
changelog:
  - upgraded to 0.99.38 (will it EVER go 1.0???)
  - all patches removed (all appear to be in this version)


author: Jiri Kucera <jkucera@redhat.com> - 2.11-6
changelog:
  - Added --fuser option support.
  - Fixed bad URL, Source0, and bogus date in spec.
    Resolves: #1330328


author: Miloslav Trmač <mitr@redhat.com> - 2.11-3
changelog:
  - Drop the cron.daily script, systemd default configuration handles the same
    places.
    Resolves: #906455


author: Miloslav Trmač <mitr@redhat.com> - 2.9.16-1
changelog:
  - Update to tmpwatch-2.9.16.
  - Exclude /tmp/hsperfdata_*.
    Resolves: #527425
  - Preserve timestamps where possible.


author: Miloslav Trmač <mitr@redhat.com> - 2.9.13-1
changelog:
  - New home page at https://fedorahosted.org/tmpwatch/ .
  - tmpwatch is now licensed under GPLv2.
  - Address issues from reviews by Adel Gadllah and Jason Tibbitts:
    - Run (make) with %{?_smp_mflags}
    - Add a comment describing the origin of the tarball to the spec file
    - Use a better BuildRoot:


author: Miloslav Trmač <mitr@redhat.com> - 2.9.12-1
changelog:
  - Fix --nosymlinks description in the man page
  - Use the maximum of atime, mtime and ctime when checking whether a file is
    obsolete
    Resolves: #373301


author: Miloslav Trmac <mitr@redhat.com> - 2.9.11-1
changelog:
  - Fix a misleading message in --test
    Resolves: 234596
  - Compress the tarball using bzip2
  - Move the cron.daily script to a separate source file


author: Miloslav Trmac <mitr@redhat.com> - 2.9.9-1
changelog:
  - Exclude aquota.group and aquota.user files
    Resolves: 206258
  - Don't require the user-specified paths to be absolute


author: Miloslav Trmac <mitr@redhat.com> - 2.9.8-1
changelog:
  - Add optional unit suffix to the "hours" (now "time") parameter (original
    patch by Alan J Rosenthal <flaps@dgp.toronto.edu>)
  - Fix some format string vs. arguments mismatches
  - Fix some rpmlint warnings


author: Miloslav Trmac <mitr@redhat.com> - 2.9.6-1
changelog:
  - Add --exclude-user (original patch by Brett Pemberton)
  - Fix too long line in /etc/cron.daily/tmpwatch


author: Miloslav Trmac <mitr@redhat.com> - 2.9.3-1
changelog:
  - Silently ignore ENOENT if somebody removes files faster than us (#154960)
  - Handle failures to exec fuser
  - Fix check for negative grace periods


author: Miloslav Trmac <mitr@redhat.com> - 2.9.1-1
changelog:
  - Add --exclude, use it to preserve X socket directories (#107069)
  - Allow multiple directory arguments with relative paths (#91097)
  - Don't manually strip the binary


author: Mike A. Harris <mharris@redhat.com> 2.9.0-1
changelog:
  - Added Solaris/HPUX support to tmpwatch via patch from Paul Gear (#71288)
  - Rebuild in rawhide as 2.9.0-1


author: Mike A. Harris <mharris@redhat.com> 2.8.3-1
changelog:
  - Added support for large files with 64bit offsets by adding to CFLAGS
    -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 bug (#56961)


author: Preston Brown <pbrown@redhat.com> 2.8-1
changelog:
  - added a "nodirs" option which inhibits removal of empty directories.
  - Integrated race condition fixes from Martin Macok (#50148)
  - do not try to remove ext3 journal files (#50522)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - Patch from enrico.scholz@informatik.tu-chemnitz.de allows concurrent 
    usage of mtime, ctime, and atime checking (#19550).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use execle() instead of system() to get the correct return code, fixes from
    Jeremy Katz <katzj@linuxpower.org>


author: Preston Brown <pbrown@redhat.com>
changelog:
  - support for CTIME from jik@kamens.brookline.ma.us
  - fixes for fuser checks from Ian Burrell <iburrell@digital-integrity.com>.
  - remove directories when empty without --all flag, to be consistent w/docs.


author: Paul Gear <paulgear@bigfoot.com>
changelog:
  - HP-UX port (including doco update)
  - Tweaked Makefile to allow installation into different base directory
  - Got rid of GETOPT_... defines which didn't do anything, so that short
    equivalents for all long options could be defined.
  - Fixed bug in message() where 'where' file handle was set but unused
  - Changed most fprintf() calls to message()


author: Preston Brown <pbrown@redhat.com>
changelog:
  - I am the new maintainer
  - fixed cleanup of directories
  - added --quiet flag
  - freshen manpage
  - nice patch from Kevin Vajk <kvajk@ricochet.net> integrated


author: Erik Troan <ewt@redhat.com>
changelog:
  - added man page to package
  - uses a buildroot and %attr
  - fixed error message generation for directories
  - fixed flag propagation


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - Install unpatched gcc.jam (#1305019).
  - Build libboost_python and libboost_python3 such that they depend on
    their respective libpython (#1302120).
    (boost-1.53.0-python-libpython_dep.patch,
    boost-1.53.0-python-abi_letters.patch)
  - Fix Boost.Python test suite so that PyImport_AppendInittab is called
    before PyInitialize, which broke the test suite with Python 3.
    (boost-1.53.0-python-test-PyImport_AppendInittab.patch)
  - Patch gcc.jam to not add bogus rpaths.


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - do not use arch-specific BuildRequires (#1268268)
  - support TLS libraries without SSLv3 (#1298227)


author: Petr Machata <pmachata@redhat.com> - 1.53.0-21
changelog:
  - Fix atomic_cas32 (thanks Jaroslav Škarvada for figuring out where
    the problem is) (boost-1.54.0-interprocess-atomic_cas32-ppc.patch)


author: Petr Machata <pmachata@redhat.com> - 1.53.0-18
changelog:
  - Turn off build flags pre-set by Boost distribution.
    (boost-1.53.0-buildflags.patch)
  - Pass RPM_OPT_FLAGS through user-config.jam.


author: Petr Machata <pmachata@redhat.com> - 1.53.0-15
changelog:
  - Fix misunderstanding of Boost.MPI about widths of some
    Boost.Serialization types.  (boost-1.53.0-mpi-version_type.patch)


author: Petr Machata <pmachata@redhat.com> - 1.53.0-13
changelog:
  - Fix compilation of Boost.Pool test cases
    (boost-1.54.0-pool-test_linking.patch)
  - Fix -Wshadow warnings in Boost.Pool
    (boost-1.54.0-pool-max_chunks_shadow.patch)
   -Wshadow warnings in Boost.Thread
    (boost-1.54.0-thread-cond_variable_shadow.patch)


author: Petr Machata <pmachata@redhat.com> - 1.53.0-8
changelog:
  - Install supporting files (images etc.) for documentation
    (courtesy Marcel Metz, bug 985593)
  - Add many patches for silencing unused local typedef warnings
    (boost-1.53.0-static_assert-unused_typedef.patch,
    boost-1.54.0-bind-static_assert.patch,
    boost-1.54.0-concept-unused_typedef.patch,
    boost-1.54.0-static_warning-unused_typedef.patch,
    boost-1.54.0-math-unused_typedef.patch,
    boost-1.54.0-math-unused_typedef-2.patch,
    boost-1.53.0-fpclassify-unused_typedef.patch,
    boost-1.54.0-math-unused_typedef-3.patch,
    boost-1.54.0-tuple-unused_typedef.patch,
    boost-1.54.0-random-unused_typedef.patch,
    boost-1.54.0-date_time-unused_typedef.patch,
    boost-1.54.0-date_time-unused_typedef-2.patch,
    boost-1.54.0-spirit-unused_typedef.patch,
    boost-1.54.0-spirit-unused_typedef-2.patch,
    boost-1.54.0-numeric-unused_typedef.patch,
    boost-1.54.0-multiprecision-unused_typedef.patch,
    boost-1.53.0-lexical_cast-unused_typedef.patch,
    boost-1.53.0-regex-unused_typedef.patch,
    boost-1.53.0-thread-unused_typedef.patch,
    boost-1.54.0-unordered-unused_typedef.patch,
    boost-1.54.0-algorithm-unused_typedef.patch,
    boost-1.53.0-graph-unused_typedef.patch,
    boost-1.54.0-locale-unused_typedef.patch,
    boost-1.54.0-property_tree-unused_typedef.patch,
    boost-1.54.0-xpressive-unused_typedef.patch,
    boost-1.54.0-mpi-unused_typedef.patch,
    boost-1.54.0-python-unused_typedef.patch)
  - Add a patch to turn off execstack in Boost.Context
    (boost-1.54.0-context-execstack.patch)
  - Fix boost::mpl::print on GCC (boost-1.54.0-mpl-print.patch)


author: Petr Machata <pmachata@redhat.com> - 1.53.0-5
changelog:
  - Split off Python 3 DSO symlink to a separate subpackage
    boost-python3-devel.  This makes it possible to install
    boost-devel separately, without Python 3 support.
  - Build with -fno-strict-aliasing


author: Petr Machata <pmachata@redhat.com> - 1.53.0-1
changelog:
  - Upstream 1.53.0 beta1
    - Drop boost-1.50.0-signals-erase.patch
    - Port boost-1.50.0-attribute.patch
    - Drop boost-1.50.0-polygon.patch
    - New sub-packages boost-atomic and boost-context


author: Petr Machata <pmachata@redhat.com> - 1.50.0-5
changelog:
  - Update %description to reflect current state of C++
    standardization.  Courtesy of Jonathan Wakely.  (#837813)


author: Petr Machata <pmachata@redhat.com> - 1.50.0-2
changelog:
  - Enable Python 3 builds.  This is still disabled in Boost MPI, which
    doesn't seem to support Python 3


author: Petr Machata <pmachata@redhat.com> - 1.50.0-1
changelog:
  - Upstream 1.50
    - boost-cmake-soname.patch drop, upstream handles soname well, and
      we haven't been doing manual numbering for several years now
    - boost-1.48.0-cmakeify-full.patch drop, not necessary for bjam
    - Rebase many patches, port others, courtesy of Denis Arnaud:
      - boost-1.48.0-exceptions.patch drop
      - boost-1.48.0-lexical_cast-incomplete.patch drop
      - boost-1.48.0-gcc47-pthreads.patch drop
      - boost-1.48.0-long-double.patch drop
      - boost-1.48.0-xtime.patch drop
      - boost-1.48.0-locale.patch drop
      - boost-1.48.0-signals-erase.patch port
      - boost-1.48.0-fix-non-utf8-files.patch port
      - boost-1.48.0-foreach.patch port
      - boost-1.48.0-attribute.patch port
      - boost-1.48.0-long-double-1.patch port
      - boost-1.48.0-polygon.patch port
      - boost-1.48.0-pool.patch port


author: Petr Machata <pmachata@redhat.com> - 1.48.0-14
changelog:
  - Don't attempt to install Python 3 portions of boost when given
    --without python3
  - glibc newly defines a macro TIME_UTC, which collides with
    boost::TIME_UTC.  We can't avoid expanding that macro, but the value
    happens to be the same as that of boost::TIME_UTC.  So drop enum
    xtime_clock_types.  Update boost to use macro TIME_UTC instead of
    the scoped enum value.  External clients will have to do the same.
  - Resolves: #824810
  - BR on hwloc-devel shouldn't be required anymore (see #814798)


author: Robert Scheck <robert@fedoraproject.org> - 1.48.0-12
changelog:
  - Included -math subpackage into umbrella package
  - Added missing /sbin/ldconfig for -math subpackage


author: Petr Machata <pmachata@redhat.com> - 1.48.0-9
changelog:
  - Only build the long double math libraries on arches that support
    long double.
  - ARM was considered unsupporting, because libc defines
    __NO_LONG_DOUBLE_MATH.  Ignore this setting, ARM has perfectly
    working long double that just happens to be only as long as double.
  - Resolves: #783660
  - Add a missing sort adaptor include to boost polygon
  - Resolves: #784654


author: Petr Machata <pmachata@redhat.com> - 1.48.0-8
changelog:
  - Add underscores around several uses of __attribute__((X)) to prevent
    interactions with user-defined macro X
  - Resolves: #781859


author: Petr Machata <pmachata@redhat.com> - 1.48.0-2
changelog:
  - Add an upstream patch for BOOST_FOREACH declaration issue #756005
  - Add a proposed patch for error in boost lexical_cast #757385


author: Denis Arnaud <denis.arnaud_fedora@m4x.org> - 1.48.0-1
changelog:
  - Upgrade to Boost-1.48.0, adding two new header-only components
    (Container and Move) and a new library (Locale).
  - Resolves: #754865
  - Added a patch with a manual page for the bjam executable.
  - Added a patch to fix the non-UTF8-encoded example source file.
  - Re-worked a little bit the example section, so as to fix the
    DOS-formatted and the ISO-8859-encoded files.


author: Petr Machata <pmachata@redhat.com> - 1.47.0-6
changelog:
  - Rebuild for libicu soname bump
  - Hack /bin back to PATH after MPI module unload
  - Resolves: #736890


author: Petr Machata <pmachata@redhat.com> - 1.47.0-4
changelog:
  - Drop BR bzip2-libs, which is brought it via bzip2-devel
  - Source->Source0
  - Drop unnecessary BuildRoot tag
  - Update License tag to include all licenses that are found in
    sources.  Python license is at the main package, not to the python
    sub-package, because python22_fixed.h is in -devel.
    - Related: #673839
  - Resolves: #225622


author: Petr Machata <pmachata@redhat.com> - 1.47.0-2
changelog:
  - Convert two throws in boost/numeric/conversion to
    boost::throw_exception to allow compilation with -fno-exception
  - Resolves: #724015


author: Denis Arnaud <denis.arnaud_fedora@m4x.org> - 1.47.0-1
changelog:
  - Upgrade to Boost-1.47.0, adding three new header-only components
    (Geometry, Phoenix, Ratio) and a new library (Chrono).


author: Petr Machata <pmachata@redhat.com> - 1.46.1-3
changelog:
  - Yet another way to pass -DBOOST_LIB_INSTALL_DIR to cmake.  Passing
    via CMAKE_CXX_FLAGS for some reason breaks when rpm re-quotes the
    expression as a result of %{optflags} expansion.
  - Related: #667294


author: Petr Machata <pmachata@redhat.com> - 1.46.0-0.3.beta1
changelog:
  - spirit.patch: Fix a problem in using boost::spirit with utf-8
    strings.  Thanks to Hicham HAOUARI for digging up the fix.


author: Petr Machata <pmachata@redhat.com> - 1.46.0-0.1.beta1
changelog:
  - Package 1.46.0-beta1
  - Reintroduce the soname patch
  - unordered-cctor.patch: Add copy constructors and assignment
    operators when using rvalue references
  - signals-erase.patch: Pass const_iterator to map::erase to avoid
    ambigous overload vs. templatized value_type ctor
  - Related: #656410


author: Rex Dieter <rdieter@fedoraproject.org> - 1.41.0-9
changelog:
  - -devel: own %{_datadir}/cmake/%{name}/
  - -devel: Requires: cmake (for %{_datadir}/cmake ownership)


author: Petr Machata <pmachata@redhat.com> - 1.41.0-6
changelog:
  - More subpackage interdependency adjustments
    - boost doesn't bring in the MPI stuff.  Instead, $MPI-devel does.
      It needs to, so that the symbolic links don't dangle.
    - boost-graph-$MPI depends on boost-$MPI so that boost-mpich2
      doesn't satisfy the SONAME dependency of boost-graph-openmpi.
  - Resolves: #559009


author: Denis Arnaud <denis.arnaud_fedora@m4x.org> - 1.41.0-2.2
changelog:
  - Further split the Boost.MPI sub-package into boost-mpi and
    boost-mpi-python
  - Changed the description of Boost.MPI according to the actual
    dependency (MPICH2 rather than OpenMPI)
  - Added a few details on the generation of the mpi.so library


author: Petr Machata <pmachata@redhat.com> - 1.41.0-2
changelog:
  - Replace a boost-math subpackage with a stub
  - Drop _cmake_lib_suffix and CMAKE_INSTALL_PREFIX magic, the rpm macro
    does that for us
  - Drop LICENSE from the umbrella package
  - Drop obsolete Obsoletes: boost-python and boost-doc <= 1.30.2


author: Benjamin Kosnik <bkoz@redhat.com> - 1.41.0-1
changelog:
  - Don't package generated debug libs, even with 
    (-DCMAKE_BUILD_TYPE=RelWithDebInfo | Release).
  - Update and include boost-cmake-soname.patch.
  - Uncomment ctest.
  - Fix up --with tests to run tests.


author: Denis Arnaud <denis.arnaud_fedora@m4x.org> - 1.40.0-1
changelog:
  - Add support for the Boost.MPI sub-package
  - Build with CMake (https://svn.boost.org/trac/boost/wiki/CMake)
  - Resolves: #529563


author: Petr Machata <pmachata@redhat.com> - 1.39.0-8
changelog:
  - Several fixes to support PySide
  - Resolves: #520087
  - GCC 4.4 name resolution fixes for GIL
  - Resolves: #526834


author: Karsten Hopp <karsten@redhat.com> 1.39.0-6
changelog:
  - bump release and rebuild as the package was linked with an old libicu
    during the mass rebuild on s390x


author: Petr Machata <pmachata@redhat.com> - 1.39.0-3
changelog:
  - Drop file list for main "boost" package, which was inadvertently left in.
  - Add thread sub-package to capture omitted boost_thread.
  - Add upstream patch to make boost_filesystem compatible with C++0x.
  - Resolves: #496188
  - Resolves: #509250


author: Benjamin Kosnik <bkoz@redhat.com> - 1.39.0-0.1
changelog:
  - Rebase to 1.39.0.
  - Add --with docs_generated.
  - #225622: Substitute optflags at prep time instead of RPM_OPT_FLAGS.


author: Petr Machata <pmachata@redhat.com> - 1.37.0-6
changelog:
  - Apply a SMP patch from Stefan Ring
  - Apply a workaround for "cannot appear in a constant-expression" in
    dynamic_bitset library.
  - Resolves: #491537


author: Petr Machata <pmachata@redhat.com> - 1.37.0-3
changelog:
  - Apply a unneccessary_iostreams patch from Caolan McNamara
  - Fix soname patch so that it applies with fuzz=0.  Use fuzz=0 option
    in spec file just like ordinary patches do.
  - Resolves: #479409


author: Petr Machata <pmachata@redhat.com> - 1.36.0-0.1.beta1
changelog:
  - Rebase to 1.36.0.beta1
    - Drop boost-regex.patch and portions of boost-gcc43.patch, port the rest
    - Automate SONAME tracking and bump SONAME to 4
    - Adjust boost-configure.patch to include threading=single,multi explicitly


author: Petr Machata <pmachata@redhat.com> - 1.34.1-13
changelog:
  - Install library doc files
  - Revamp %install phase to speed up overall build time
  - Some cleanups per merge review
  - Resolves: #437032


author: Benjamin Kosnik <bkoz@redhat.com> 1.34.1-1
changelog:
  - Update to boost_1_34_1.
  - Source via http.
  - Philipp Thomas <pth.suse.de> fix for RPM_OPT_FLAGS
  - Philipp Thomas <pth.suse.de> fix for .so sym links.
  - (#225622) Patrice Dumas review comments.


author: Benjamin Kosnik <bkoz@redhat.com> 1.33.1-11
changelog:
  - (#225622: Merge Review: boost)
    Source to http.
    BuildRoot to preferred value.
    PreReq to post/postun -p
    Clarified BSL as GPL-Compatible, Free Software License.
    Remove Obsoletes.
    Add Provides boost-python.
    Remove mkdir -p $RPM_BUILD_ROOT%{_docdir}
    Added periods for decription text.
    Fix Group field.
    Remove doc Requires boost.
    Preserve timestamps on install.
    Use %defattr(-, root, root, -)
    Added static package for .a libs.
    Install static libs with 0644 permissions.
    Use %doc for doc files.


author: Benjamin Kosnik <bkoz@redhat.com> 1.34.0-0.5
changelog:
  - Update to boost.RC_1_34_0 snapshot as of 2007-01-19.
  - Modify build procedures for boost build v2.
  - Add *-mt variants for libraries, or at least variants that use
    threads (regex and thread).


author: Benjamin Kosnik <bkoz@redhat.com> 1.33.1-10
changelog:
  - (#182414: boost: put tests in %check section) via Rex Dieter
  - Fix EVR with %{?dist} tag via Gianluca Sforna


author: Benjamin Kosnik <bkoz@redhat.com> 1.33.1-7
changelog:
  - (#205866: boost::spirit generates warnings with -Wshadow)
  - (#205863: serialization lib generates warnings)
  - (#204326: boost RPM missing dependencies)
  - (#193465: [SIGNAL/BIND] Regressions with GCC 4.1)
  - BUILD_FLAGS, add, to see actual compile line.
  - REGEX_FLAGS, add, to compile regex with ICU support.


author: Benjamin Kosnik <bkoz@redhat.com> 1.33.1-3
changelog:
  - Update to boost-1.33.1.
  - (#176485: Missing BuildRequires)
  - (#169271: /usr/lib/libboost*.so.? links missing in package)


author: Benjamin Kosnik <bkoz@redhat.com> 1.33.0-1
changelog:
  - Update to boost-1.33.0, update SONAME to 2 due to ABI changes.
  - Simplified PYTHON_VERSION by Philipp Thomas <pth@suse.de>


author: Benjamin Kosnik <bkoz@redhat.com> 1.32.0-6
changelog:
  - (#153093: boost warns that gcc 4.0.0 is an unknown compiler)
  - (#152205: development .so symbolic links should be in -devel subpackage)
  - (#154783: linker .so symbolic links missing from boost-devel package)


author: Benjamin Kosnik <bkoz@redhat.com> 1.32.0-4
changelog:
  - (#142612: Compiling Boost 1.32.0 Failed in RHEL 3.0 on Itanium2)
  - (#150069: libboost_python.so is missing)
  - (#141617: bad patch boost-base.patch)
  - (#122817: libboost_*.so symbolic links missing)
  - Re-add boost-thread.patch.
  - Change boost-base.patch to show thread tags.
  - Change boost-gcc-tools.patch to use SOTAG, compile with dllversion.
  - Add symbolic links to files.
  - Sanity check can compile with gcc-3.3.x, gcc-3.4.2, gcc-4.0.x., gcc-4.1.x.


author: Benjamin Kosnik <bkoz@redhat.com> 1.32.0-3
changelog:
  - (#122817: libboost_*.so symbolic links missing)
  - (#141574: half of the package is missing)
  - (#141617: bad patch boost-base.patch)


author: Benjamin Kosnik <bkoz@redhat.com>
changelog:
  - Remove bjam dependency. (via Graydon).
  - Fix installed library names.
  - Fix SONAMEs in shared libraries.
  - Fix installed header location.
  - Fix installed permissions.


author: Benjamin Kosnik <bkoz@redhat.com> 1.31.0-1
changelog:
  - Update to boost-1.31.0.rc2
  - (#109307:  Compile Failure with boost libraries)
  - (#104831:  Compile errors in apps using Boost.Python...)
  - Unify into boost, boost-devel rpms.
  - Simplify installation using bjam and prefix install.


author: Nalin Dahyabhai <nalin@redhat.com> 1.30.2-2
changelog:
  - require boost-devel instead of devel in subpackages which require boost-devel
  - remove stray Prefix: tag


author: Benjamin Kosnik <bkoz@redhat.com> 1.30.2-1
changelog:
  - change license to Freely distributable
  - verify installation of libboost_thread
  - more boost-devel removals
  - deal with lack of _REENTRANT on ia64/s390
  - (#99458) rpm -e fixed via explict dir additions
  - (#103293) update to 1.30.2


author: Conrad Meyer <cemeyer@uw.edu> - 2.5.0-2
changelog:
  - Remove changelog history from before 2010
  - This spec already runs autoreconf -fi during %build, but bump build for
    rhbz #926374


author: Java SIG <java-devel@lists.fedoraproject.org> - 2.4.1-10
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Conrad Meyer <konrad@tylerc.org> - 2.4.1-9
changelog:
  - Fix packaging bug, -emacs-el subpackage should depend on -emacs subpackage of
    the same version (%version), not the emacs version number...


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.3.0-6
changelog:
  - Fix java subpackage bugs #669345 and #669346
  - Use new maven plugin names
  - Use mavenpomdir macro for pom installation


author: Tim Waugh <twaugh@redhat.com> - 1.9.53-3
changelog:
  - Fixed typo in psdriver.attr that prevented PPD files from being
    scanned when generating postscriptdriver tags.


author: Tim Waugh <twaugh@redhat.com> - 1.9.53-2
changelog:
  - Moved postscriptdriver RPM tagging machinery here.  Fixed
    leading/trailing whitespace in tags as well.


author: Joe Orton <jorton@redhat.com> 0.6.14-5
changelog:
  - fix DT_RPATH in /usr/bin/idn
  - convert libidn.iconv to UTF-8 (Jon Ciesla, #226029)
  - fix BuildRoot tag (Jon Ciesla, #226029)


author: Tim Waugh <twaugh@redhat.com> 1.5.0-6
changelog:
  - Preserve timestamps on install (bug #226503).
  - Added SMP flags (bug #226503).
  - Removed Prefix: tag (bug #226503).
  - Removed bogus mkdir call (bug #226503).
  - Ship the LICENSE file (bug #226503).
  - Fixed summary (bug #226503).


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-10
changelog:
  - Avoid duplicates in solid device automounter kcm
    Resolves: bz#1084191
  - Enable automount overrides even when automatic mounting is disabled
    Resolves: bz#1084497


author: Rex Dieter <rdieter@fedoraproject.org> - 4.9.2-5
changelog:
  - -desktoptheme, -drkonqi, -kio-smb subpkgs (#855930)
  - drop hard Requires: htdig (#855930)
  - remove .spec cruft


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.3-12
changelog:
  - active-development-4.7-diff.patch
  - omit activitymanger unconditionally
  - drop dep on libkactivities


author: Rex Dieter <rdieter@fedoraproject.org> - 4.4.1-2
changelog:
  - Requires: hal-storage-addon (f14+)
  - drop <f11 Conflicts baggage
  - plasma-scriptengine-javascript-4.4-errata


author: Nils Philippsen <nils@redhat.com> - 4.3.1-3
changelog:
  - if available, use the "manpath" command in the man kioslave to determine man
    page file locations


author: Lukáš Tinkl <ltinkl@redhat.com> - 4.3.0-3
changelog:
  - fix Oxygen comboboxes' text being garbled (drawn twice); fixes kdebug:202701
  - fix Locale control module crashing when dragging languages around (kdebug:201578)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.2.0-2
changelog:
  - Files not trashed to the correct location in Dolphin/Konqueror
    (#481598, kdebug#178479)
  - omit --with-samba crud


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.80-5
changelog:
  - don't ship libkwalletbackend.so devel symlink (conflicts with kdelibs3-devel,
    and should be in a -devel package if it gets shipped)


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.80-1
changelog:
  - 4.1.80
  - Drop upstreamed patch kdebase-runtime-4.1.2-kioexec.patch
  - BR cmake >= 2.6.2
  - Use 'make install/fast'
  - Drop subpkg phonon-backend-xine and related file entries: this has to be
    part of phonon now that it moved there
  - Drop xine-lib-devel BR
  - Add libkwalletbackend to files list
  - Drop _default_patch_fuzz 2


author: Rex Dieter <rdieter@fedoraproject.org> 4.1.2-2
changelog:
  - make VERBOSE=1
  - respin against new(er) kde-filesystem
  - grow -libs, kde4 styles are unavailable for i386 applications (#456826)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.0-1.1
changelog:
  - don't remove autostart directory on F8- (does not conflict, fixes build
    failure due to nepomukserver.desktop listed in filelist but not found)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.72-1
changelog:
  - update to 4.0.72 (4.1 alpha 1)
  - drop upstreamed deinterlace-crash patch
  - drop khelpcenter patch (fixed upstream)
  - update Phonon PulseAudio patch
  - drop Fedora 7 support
  - update file list


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.2-2
changelog:
  - if building for a KDE 4 desktop, include the khelpcenter.desktop service
    description for KDE 3 here so help works in KDE 3 apps


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.1-2
changelog:
  - reenable kio_smb everywhere (including F9) now that we have a GPLv3 qt4
    (kio_smb itself is already GPLv2+)


author: Jacob Wen <jian.w.wen@oracle.com> - 20-28.0.3
changelog:
  - Use ASN1_STRING_data for openssl-1.0.2k [Orabug: 31160124]
  - build: fix make distcheck [Orabug: 31160124]
  - libkmod-signature: implement pkcs7 parsing with openssl [Orabug: 31160124]
  - signature: do not report wrong data for pkc#7 signature [Orabug: 31160124]
  - libkmod: modinfo: implement signature output [Orabug: 31160124]
  - libkmod: modinfo: implement line splitting in hex_to_str [Orabug: 31160124]
  - libkmod: modinfo: use own function for sig_key hex output [Orabug: 31160124]
  - libkmod: modinfo: fix sig_id output [Orabug: 31160124]


author: EL Errata <el-errata_ww@oracle.com> - 20-28.0.1
changelog:
  - weak-modules: add patch for [Orabug: 26672773]
  - add PKCS#7 signature support [Orabug: 27645962]
  - Reviewed-by: Alexey Petrenko <alexey.petrenko@oracle.com>


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-28
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1774925


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-26
changelog:
  - weak-modules: handle independent modules in one run
  - weak-modules: use asterisk for kernel version in sandbox
    Resolves: rhbz#1695547


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-23
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1619889.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-20
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1510058


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-18
changelog:
  - depmod: external directories support.
    Resolves: rhbz#1361857
  - BuildRequires automake autoconf libtool.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-17
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1468305
  - weak-modules: implement dry run by symlink restoration.
    Resolves: rhbz#1477073


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-12
changelog:
  - weak-modules: fix coverity introduced by latest changes
  - weak-modules: fix "permission denied" on some upgrades.
    Resolves: rhbz#1416566


author: Tony Camuso <tcamuso@redhat.com> - 20-10
changelog:
  - Rename patches so they are not specific to the build. This was
    causing problems with z-stream builds.
    Resolves: rhbz#1416498


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-10
changelog:
  - weak-modules: deprecate --delete-modules switch.
  - weak-modules: implement some pathes configuration from cmdline.
  - weak-modules: redesign to reuse depmod -aeE functionality
    (with some preparation changes).
    This is an updated version of the script which doesn't support
    multiple installation of the same out-of-tree module (stored in the
    'extra' subdirectory). But it more correctly checks dependencies
    between the modules.
    Resolves: rhbz#1367942


author: Tony Camuso <tcamuso@redhat.com> - 20-9
changelog:
  - Must be bumped to 20-9 due to changes and version bumps in the
    7.2-z stream.
    Resolves: rhbz#1320204


author: David Shea <dshea@redhat.com> - 20-6
changelog:
  - Accept '.' as part of a symbol exported by the kernel
    Resolves: rhbz#1283486
  - Check the addon modules of the new kernel for exported symbols
    Resolves: rhbz#1296465


author: David Shea <dshea@redhat.com> - 20-5
changelog:
  - Check for changes in non-module files that affect that initramfs
    Resolves: rhbz#1108166
  - Use dracut to skip early cpio archives in the initramfs
    Resolves: rhbz#1210449


author: Kay Sievers <kay@redhat.com> - 7-1
changelog:
  - update to version 7
    - fix issue with --show-depends, where built-in
      modules of the running kernel fail to include
      loadable modules of the kernel specified


author: Harald Hoyer <harald@redhat.com> 5-6
changelog:
  - add upstream patch to fix "modprobe --ignore-install --show-depends"
    otherwise dracut misses a lot of modules, which are already loaded


author: Kay Sievers <kay@redhat.com> - 5-3
changelog:
  - temporarily add fake-provides to be able to bootstrap
    the new udev which pulls the old udev into the buildroot


author: Kay Sievers <kay@redhat.com> - 5-1
changelog:
  - Update to version 5
  - replace the module-init-tools package and provide all tools
    as compatibility symlinks


author: Jon Masters <jcm@jonmasters.org> - 3-1
changelog:
  - Update to latest upstream (adds new depmod replacement utility)
  - For the moment, use the "kmod" utility to test the various functions


author: Jon Masters <jcm@jonmasters.org> - 2-3
changelog:
  - Update package incorporating fixes from initial review feedback
  - Cleaups to SPEC, rpath, documentation, library and binary locations


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.15-10.el7_3.1
changelog:
  - fix vulnerabilities allowing remote code execution (CVE-2016-8704,
    CVE-2016-8705, CVE-2016-8706)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.15-10
changelog:
  - fix binding to IPv6 address (#1298603)
  - enable SASL support (#1263696)
  - don't allow authentication with bad SASL credentials (CVE-2013-7239)


author: Joe Orton <jorton@redhat.com> - 0:1.4.15-1
changelog:
  - update to 1.4.15 (#782395)
  - switch to simple systemd service (#878198)
  - use systemd scriptlet macros (Václav Pavlín, #850204)


author: Paul Lindner <lindner@mirth.inuus.com> - 0:1.4.13-1
changelog:
  - Upgrade to memcached 1.4.13
  - http://code.google.com/p/memcached/wiki/ReleaseNotes1413
  - http://code.google.com/p/memcached/wiki/ReleaseNotes1412
  - http://code.google.com/p/memcached/wiki/ReleaseNotes1411


author: Paul Lindner <lindner@inuus.com> - 0:1.4.7-1
changelog:
  - Upgrade to memcached 1.4.7 (http://code.google.com/p/memcached/wiki/ReleaseNotes147)
  - Fix some rpmlint errors/warnings.


author: Joe Orton <jorton@redhat.com> - 0:1.4.5-2
changelog:
  - LSB compliance fixes for init script
  - don't run the test suite as root
  - ensure a constant timestamp on the sysconfig file


author: Paul Lindner <lindner@inuus.com> - 0:1.4.4-1
changelog:
  - Upgraded to upstream memcached-1.4.4 (http://code.google.com/p/memcached/wiki/ReleaseNotes144)
  - Add explicit Epoch to fix issue with broken devel dependencies (resolves 542001)


author: Paul Lindner <lindner@inuus.com> - 1.4.3-1
changelog:
  - Add explicit require on memcached for memcached-devel (resolves 537046)
  - enable-threads option no longer needed
  - Update web site address


author: root <lindner@inuus.com> - 1.2.3-2
changelog:
  - Upgrade to 1.2.3 upstream
  - Adjust make install to preserve man page timestamp
  - Conform with LSB init scripts standards, add force-reload


author: Paul Lindner <lindner@inuus.com> - 1.2.2-3
changelog:
  - Enable build-time regression tests
  - add dependency on initscripts
  - remove memcached-debug (not needed in dist)
  - above suggestions from Bernard Johnson


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1
changelog:
  - New upstream release 1.10
  - Obsolete upstreamed patches
  - Amend the multilib patch, there's no need to patch configure since we
    are running autoreconf anyways
  - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5
changelog:
  - Apply a patch by Stephen Gallagher to patch autoconf, not configure to
    allow optflags to be passed in by build environment
  - Run autoreconf before configure
  - git rm obsolete patches
  - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR


author: Jakub Hrozek <jhrozek@redhat.com> - 1.7.5-1
changelog:
  - New upstream release 1.7.5
  - Obsoletes patch #2
  - Rebase patch #1 (optflags) to match the 1.7.5 code
  - Fixed Source0 URL to point at the upstream tarball


author: Jakub Hrozek <jhrozek@redhat.com> - 1.7.3-1
changelog:
  - Upgrade to new upstream release 1.7.3 (obsoletes search/domain patch)
  - Fix conflict of -devel packages on multilib architectures (#602880)


author: Ville Skyttä <ville.skytta at iki.fi> - 1.6.0-3
changelog:
  - Patch to make upstream build system honor our CFLAGS and friends.
  - Don't bother building throwaway static libs.
  - Disable autotools dependency tracking for cleaner build logs and possible
    slight build speedup.
  - Convert docs to UTF-8.
  - Update URLs.


author: Matus Honek <mhonek@redhat.com> - 2.4.44-18
changelog:
  - MozNSS Compat. Layer: Make log messages more clear (#1543955)
  - Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-17
changelog:
  - MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
  - Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
  - MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-13
changelog:
  - MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
  - MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
  - MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-12
changelog:
  - MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
    + Warn just before use of a PIN about key file extraction


author: Matus Honek <mhonek@redhat.com> - 2.4.44-11
changelog:
  - MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
    + Fix a possible invalid dereference (covscan)


author: Matus Honek <mhonek@redhat.com> - 2.4.44-10
changelog:
  - Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
  - Fix issues in MozNSS compatibility layer (#1400578)
    + Force write file with fsync to avoid race conditions
    + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
    + Allow missing cert and key which is a valid usecase
    + Create extraction folder only in /tmp to simplify selinux rules
    + Fix Covscan issues


author: Matus Honek <mhonek@redhat.com> - 2.4.44-5
changelog:
  - fix CVE-2017-9287 openldap: Double free vulnerability in servers/slapd/back-mdb/search.c (#1458210)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-13
changelog:
  - fix: Bad log levels in check_password module
  - fix: We can't search expected entries from LDAP server
  - fix: OpenLDAP ciphersuite parsing doesn't match OpenSSL ciphers man page
    + Add TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 to list of ciphers
    + Add DH cipher string parsing option
    + Correct handling kECDH ciphers with aRSA or aECDSA


author: Matus Honek <mhonek@redhat.com> - 2.4.40-12
changelog:
  - fix: slapd crash in do_search (#1316450)
  - fix: Setting olcTLSProtocolMin does not change supported protocols (#1249093)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-10
changelog:
  - fix: slapd fails to start on boot (#1315958)
  - fix: id_query option is not available after rebasing openldap to 2.4.39 (#1311832)
  - Include sha2 module (#1292568)
  - Compile AllOp together with other overlays (#990893)
  - Missing mutex unlock in accesslog overlay (#1261003)
  - ITS#8337 fix missing olcDbChecksum config attr (#1292590)
  - ITS#8003 fix off-by-one in LDIF length (#1292619)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-8
changelog:
  - NSS does not support string ordering (#1231522)
  - implement and correct order of parsing attributes (#1231522)
  - add multi_mask and multi_strength to correctly handle sets of attributes (#1231522)
  - add new cipher suites and correct AES-GCM attributes (#1245279)
  - correct DEFAULT ciphers handling to exclude eNULL cipher suites (#1245279)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-7
changelog:
  - Merge two MozNSS cipher suite definition patches into one. (#1245279)
  - Use what NSS considers default for DEFAULT cipher string. (#1245279)
  - Remove unnecesary defaults from ciphers' definitions (#1245279)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-5
changelog:
  - enhancement: support TLS 1.1 and later (#1231522,#1160467)
  - fix: openldap ciphersuite parsing code handles masks incorrectly (#1231522)
  - fix the patch in commit da1b5c (fix: OpenLDAP crash in NSS shutdown handling) (#1231228)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-1
changelog:
  - new upstream release (#1147982)
  - fix: PIE and RELRO check (#1092562)
  - fix: slaptest doesn't convert perlModuleConfig lines (#1184585)
  - fix: OpenLDAP crash in NSS shutdown handling (#1158005)
  - fix: slapd.service may fail to start if binding to NIC ip (#1198781)
  - fix: deadlock during SSL_ForceHandshake when getting connection to replica (#1125152)
  - improve check_password (#1174723, #1196243)
  - provide an unversioned symlink to check_password.so.1.1 (#1174634)
  - add findutils to requires (#1209229)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-5
changelog:
  - add documentation reference to service file (#1087288)
  - fix: tls_reqcert try has bad behavior (#1027613)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-4
changelog:
  - support TLS 1.1 and later (#1160468)
  - fix: /etc/openldap/certs directory is empty after installation (#1064251)
  - fix: Typo in script to generate /usr/libexec/openldap/generate-server-cert.sh (#1087490)
  - fix: remove correct tmp file when generating server cert (#1103101)
  - fix: slapd.ldif olcFrontend missing important/required objectclass (#1132094)


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-4
changelog:
  - do not needlessly run ldconfig after installing openldap-devel
  - fix: LDAPI with GSSAPI does not work if SASL_NOCANON=on (#960222)
  - fix: lt_dlopen() with back_perl (#960048)


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-3
changelog:
  - fix: minor documentation fixes
  - set SASL_NOCANON to on by default (#949864)
  - remove trailing spaces


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-1
changelog:
  - new upstream release (#947235)
  - fix: slapd.service should ensure that network is up before starting (#946921)
  - fix: NSS related resource leak (#929357)


author: Jan Synáček <jsynacek@redhat.com> 2.4.34-2
changelog:
  - fix: syncrepl push DELETE operation does not recover (#920482)
  - run autoreconf every build, drop autoreconf patch (#926280)


author: Jan Synáček <jsynacek@redhat.com> 2.4.34-1
changelog:
  - enable perl backend (#820547)
  - package ppolicy-check-password (#829749)
  - add perl specific BuildRequires
  - fix bogus dates


author: Jan Vcelak <jvcelak@fedoraproject.org> 2.4.34-1
changelog:
  - new upstream release (#917603)
  - fix: slapcat segfaults if cn=config.ldif not present (#872784)
  - use systemd-rpm macros in spec file (#850247)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.33-1
changelog:
  - new upstream release:
    + slapd: ACLs, syncrepl
    + backends: locking and memory management in MDB
    + manpages: slapo-refint
  - patch update: MozNSS certificate database in SQL format cannot be used (#860317)
  - fix: slapd.service should not use /tmp (#859019)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-3
changelog:
  - fix: some TLS ciphers cannot be enabled (#852338)
  - fix: connection hangs after fallback to second server when certificate hostname verification fails (#852476)
  - fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#852786)
  - fix: MozNSS certificate database in SQL format cannot be used (#857373)
  - fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#857455)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-2
changelog:
  - enhancement: TLS, prefer private keys from authenticated slots
  - enhancement: TLS, allow certificate specification including token name
  - resolve TLS failures in replication in 389 Directory Server


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-1
changelog:
  - new upstream release
    + library: double free, SASL handling
    + tools: read SASL_NOCANON from config file
    + slapd: config index renumbering, duplicate error response
    + backends: various fixes in mdb, bdb/hdb, ldap
    + accesslog, syncprov: fix memory leaks in with replication
    + sha2: portability, thread safety, support SSHA256,384,512
    + documentation fixes


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-5
changelog:
  - fix: querying for IPv6 DNS records when IPv6 is disabled on the host (#835013)
  - fix: smbk5pwd module computes invalid LM hashes (#841560)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-4
changelog:
  - modify the package build process
    + fix autoconfig files to detect Mozilla NSS library using pkg-config
    + remove compiler flags which are not needed currently
    + build server, client and library together
    + avoid stray dependencies by using --as-needed linker flag
    + enable SLAPI interface in slapd


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-3
changelog:
  - update fix: count constraint broken when using multiple modifications (#795766)
  - fix: invalid order of TLS shutdown operations (#808464)
  - fix: TLS error messages overwriting in tlsm_verify_cert() (#810462)
  - fix: reading pin from file can make all TLS connections hang (#829317)
  - CVE-2012-2668: cipher suite selection by name can be ignored (#825875)
  - fix: slapd fails to start on reboot (#829272)
  - fix: default cipher suite is always selected (#828790)
  - fix: less influence between individual TLS contexts:
    - replication with TLS does not work (#795763)
    - possibly others


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-2
changelog:
  - fix: nss-tools package is required by the base package, not the server subpackage
  - fix: MozNSS CA certdir does not work together with PEM CA cert file (#819536)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-1
changelog:
  - new upstream release
    + library: IPv6 url detection
    + library: rebinding to failed connections
    + server: various fixes in mdb backend
    + server: various fixes in replication
    + server: various fixes in overlays and minor backends
    + documentation fixes
  - remove patches which were merged upstream


author: Jan Vcelak <jvcelak@redhat.com> 2.4.30-1
changelog:
  - new upstream release
    + server: fixes in mdb backend
    + server: fixes in manual pages
    + server: fixes in syncprov, syncrepl, and pcache
  - removed patches which were merged upstream


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-4
changelog:
  - fix: missing options in manual pages of client tools (#796232)
  - fix: SASL_NOCANON option missing in ldap.conf manual page (#732915)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-3
changelog:
  - fix: ldap_result does not succeed for sssd (#771484)
  - Jan Synáček <jsynacek@redhat.com>:
    + fix: count constraint broken when using multiple modifications (#795766)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-2
changelog:
  - fix update: provide ldif2ldbm, not ldib2ldbm (#437104)
  - Jan Synáček <jsynacek@redhat.com>:
    + unify systemctl binary paths throughout the specfile and make them usrmove compliant
    + make path to chkconfig binary usrmove compliant


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-1
changelog:
  - new upstream release
    + MozNSS fixes
    + connection handling fixes
    + server: buxfixes in mdb backend
    + server: buxfixes in overlays (syncrepl, meta, monitor, perl, sql, dds, rwm)
  - openldap-servers now provide ldib2ldbm (#437104)
  - certificates management improvements
    + create empty Mozilla NSS certificate database during installation
    + enable builtin Root CA in generated database (#789088)
    + generate server certificate using Mozilla NSS tools instead of OpenSSL tools
    + fix: correct path to check-config.sh in service file (Jan Synáček <jsynacek@redhat.com>)
  - temporarily disable certificates checking in check-config.sh script
  - fix: check-config.sh get stuck when executing command as a ldap user


author: Jan Vcelak <jvcelak@redhat.com> 2.4.28-3
changelog:
  - fix: replication (syncrepl) with TLS causes segfault (#783431)
  - fix: slapd segfaults when PEM certificate is used and key is not set (#772890)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.28-1
changelog:
  - new upstream release
    + server: support for delta-syncrepl in multi master replication
    + server: add experimental backend - MDB
    + server: dynamic configuration for passwd, perl, shell, sock, and sql backends
    + server: support passwords in APR1
    + library: support for Wahl (draft)
    + a lot of bugfixes
  - remove patches which were merged upstream
  - compile backends as modules (except BDB, HDB, and monitor)
  - reload systemd daemon after installation


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-6
changelog:
  - package cleanup:
    + hardened build: switch from LDFLAGS to RPM macros
    + remove old provides and obsoletes
    + add new slapd maintainance scripts
    + drop defattr macros, clean up permissions in specfile
    + fix rpmlint warnings: macros in comments/changelog
    + fix rpmlint warnings: non UTF-8 documentation
    + rename environment file to be more consistent (ldap -> slapd)
  - replace sysv initscript with systemd service file (#
  - new format of environment file due to switch to systemd
    (automatic conversion is performed)
  - patch OpenLDAP to skip empty command line arguments
    (arguments expansion in systemd works different than in shell)
  - CVE-2011-4079: one-byte buffer overflow in slapd (#749324)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-5
changelog:
  - rebuild: openldap does not work after libdb rebase (#743824)
  - regression fix: openldap built without tcp_wrappers (#743213)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-3
changelog:
  - fix: SSL_ForceHandshake function is not thread safe (#701678)
  - fix: allow unsetting of tls_* syncrepl options (#734187)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-2
changelog:
  - security hardening: library needs partial RELRO support added (#733071)
  - fix: NSS_Init* functions are not thread safe (#731112)
  - fix: incorrect behavior of allow/try options of VerifyCert and TLS_REQCERT (#725819)
  - fix: memleak - free the return of tlsm_find_and_verify_cert_key (#725818)
  - fix: conversion of constraint overlay settings to cn=config is incorrect (#733067)
  - fix: DDS overlay tolerance parametr doesn't function and breakes default TTL (#733069)
  - manpage fix: errors in manual page slapo-unique (#733070)
  - fix: matching wildcard hostnames in certificate Subject field does not work (#733073)
  - new feature: honor priority/weight with ldap_domain2hostlist (#733078)
  - manpage fix: wrong ldap_sync_destroy() prototype in ldap_sync(3) manpage (#717722)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.25-1
changelog:
  - rebase to new upstream release
  - change default database type from BDB to HDB
  - enable ldapi:/// interface by default
  - set cn=config management ACLs for root user, SASL external schema (#712495)
  - fix: server scriptlets require initscripts package (#716857)
  - fix: connection fails if TLS_CACERTDIR doesn't exist but TLS_REQCERT
    is set to 'never' (#716854)
  - fix: segmentation fault caused by double-free in ldapexop (#699683)
  - fix: segmentation fault of client tool when input line in LDIF file
    is splitted but indented incorrectly (#716855)
  - fix: segmentation fault of client tool when LDIF input file is not terminated
    by a new line character (#716858)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.24-2
changelog:
  - new: system resource limiting for slapd using ulimit
  - fix update: openldap can't use TLS after a fork() (#636956)
  - fix: possible null pointer dereference in NSS implementation
  - fix: openldap-servers upgrade hangs or do not upgrade the database (#664433)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-7
changelog:
  - fix: openldap can't use TLS after a fork() (#636956)
  - fix: openldap-server upgrade gets stuck when the database is damaged (#664433)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-6
changelog:
  - fix: some server certificates refused with inadequate type error (#668899)
  - fix: default encryption strength dropped in switch to using NSS (#669446)
  - systemd compatibility: add configuration file (#656647, #668223)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-5
changelog:
  - initscript: slaptest with '-u' to skip database opening (#667768)
  - removed slurpd options from sysconfig/ldap
  - fix: verification of self issued certificates (#657984)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-4
changelog:
  - Mozilla NSS - implement full non-blocking semantics
    ldapsearch -Z hangs server if starttls fails (#652822)
  - updated list of all overlays in slapd.conf (#655899)
  - fix database upgrade process (#656257)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-3
changelog:
  - add support for multiple prefixed Mozilla NSS database files in TLS_CACERTDIR
  - reject non-file keyfiles in TLS_CACERTDIR (#652315)
  - TLS_CACERTDIR precedence over TLS_CACERT (#652304)
  - accept only files in hash.0 format in TLS_CACERTDIR (#650288)
  - improve SSL/TLS trace messages (#652818)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-2
changelog:
  - fix possible infinite loop when checking permissions of TLS files (#641946)
  - removed outdated autofs.schema (#643045)
  - removed outdated README.upgrade
  - removed relics of migrationtools


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-1
changelog:
  - rebase to 2.4.23
  - embeded db4 library removed
  - removed bogus links in "SEE ALSO" in several man-pages (#624616)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.22-7
changelog:
  - Mozilla NSS - delay token auth until needed (#616552)
  - Mozilla NSS - support use of self signed CA certs as server certs (#614545)


author: Jan Vcelak <jvcelak@redhat.com> - 2.4.22-6
changelog:
  - CVE-2010-0211 openldap: modrdn processing uninitialized pointer free (#605448)
  - CVE-2010-0212 openldap: modrdn processing IA5StringNormalize NULL pointer dereference (#605452)
  - obsolete configuration file moved to /usr/share/openldap-servers (#612602)


author: Rich Megginson <rmeggins@redhat.com> - 2.4.22-3
changelog:
  - added ldif.h to the public api in the devel package
  - added -lldif to the public api
  - added HAVE_MOZNSS and other flags to use Mozilla NSS for crypto


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.22-1
changelog:
  - rebased to 2.4.22 (mostly bugfixes, added back-ldif, back-null testing support)
  - due to some possible issues pointed out in last update testing phase, I'm
    pulling back the last change (slapd can't be moved since it depends on /usr
    possibly mounted from network)


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-2
changelog:
  - fixed tls connection accepting when TLSVerifyClient = allow
  - /etc/openldap/ldap.conf removed from files owned by openldap-servers
  - minor changes in spec file to supress warnings
  - some changes in init script, so it would be possible to use it when
    using old configuration style


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-4
changelog:
  - updated smbk5pwd patch to be linked with libldap (#526500)
  - the last buffer overflow patch replaced with the one from upstream
  - added /etc/openldap/slapd.d and /etc/openldap/slapd.conf.bak
    to files owned by openldap-servers


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-2
changelog:
  - changed configuration approach. Instead od slapd.conf slapd
    is using slapd.d directory now
  - fix of some issues caused by renaming of init script
  - fix of buffer overflow issue in ldif.c pointed out by new glibc


author: Jan Zeleny <jzeleny@redhat.com> 2.4.16-1
changelog:
  - rebase of openldap to 2.4.16
  - fixed minor issue in spec file (output looking interactive
    when installing servers)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.15-3
changelog:
  - extended previous patch (#481310) to remove options cfMP
    from some client tools
  - correction of patch setugid (#494330)


author: Jan Safranek <jsafranek@redhat.com> 2.4.11-3
changelog:
  - add SLAPD_SHUTDOWN_TIMEOUT to /etc/sysconfig/ldap, allowing admins
    to set non-default slapd shutdown timeout
  - add checkpoint to default slapd.conf file (#458679)


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-4
changelog:
  - bdb upgraded to 4.6.21
  - reworked upgrade logic again to run db_upgrade when bdb version
    changes


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-3
changelog:
  - reworked the upgrade logic, slapcat/slapadd of the whole database
    is needed only if minor version changes (2.3.x -> 2.4.y)
  - do not try to save database in LDIF format, if openldap-servers package
    is  being removed (it's up to the admin to do so manually)


author: Jan Safranek <jsafranek@redhat.com> 2.4.7-4
changelog:
  - fixed rpmlint warnings and errors
    - /etc/openldap/schema/README moved to /usr/share/doc/openldap


author: Jan Safranek <jsafranek@redhat.com> 2.3.38-2
changelog:
  - skeleton /etc/sysconfig/ldap added
  - new SLAPD_LDAP option to turn off listening on ldap:/// (#292591)
  - fixed checking of SSL (#292611)
  - fixed upgrade with empty database


author: Jan Safranek <jsafranek@redhat.com> 2.3.37-2
changelog:
  - do not use specific automake and autoconf
  - do not distinguish between NPTL and non-NPTL platforms, we have NPTL
    everywhere
  - db-4.6.18 integrated
  - updated openldap-servers License: field to reference BDB license


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-6
changelog:
  - fix compat-slapcat compilation. Now it can be found in
    /usr/lib/compat-openldap/slapcat, because the tool checks argv[0]
    (#246581)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-4
changelog:
  - Fix initscript return codes (#242667)
  - Provide overlays (as modules; #246036, #245896)
  - Add available modules to config file


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-3
changelog:
  - do not create script in /tmp on startup (bz#188298)
  - add compat-slapcat to openldap-compat (bz#179378)
  - do not import ddp services with migrate_services.pl
    (bz#201183)
  - sort the hosts by adders, preventing duplicities
    in migrate*nis*.pl (bz#201540)
  - start slupd for each replicated database (bz#210155)
  - add ldconfig to devel post/postun (bz#240253)
  - include misc.schema in default slapd.conf (bz#147805)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-2
changelog:
  - slapadd during package update is now quiet (bz#224581)
  - use _localstatedir instead of var/ during build (bz#220970)
  - bind-libbind-devel removed from BuildRequires (bz#216851)
  - slaptest is now quiet during service ldap start, if
    there is no error/warning (bz#143697)
  - libldap_r.so now links with pthread (bz#198226)
  - do not strip binaries to produce correct .debuginfo packages
    (bz#152516)


author: Jay Fenlason <fenlason<redhat.com> 2.3.34-1
changelog:
  - New upstream release
  - Upgrade the scripts for migrating the database so that they might
    actually work.
  - change bind-libbind-devel to bind-devel in BuildPreReq


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.19-2
changelog:
  - Upgrade to 2.3.19, which upstream now considers stable
  - Modify the -config.patch, ldap.init, and this spec file to put the
    pid file and args file in an ldap-owned openldap subdirectory under
    /var/run.
  - Move back_sql* out of _sbindir/openldap , which requires
    hand-moving slapd and slurpd to _sbindir, and recreating symlinks
    by hand.
  - Retire openldap-2.3.11-ads.patch, which went upstream.
  - Update the ldap.init script to run slaptest as the ldap user rather
    than as root.  This solves
    bz#150172 Startup failure after database problem
  - Add to the servers post and preun scriptlets so that on preun, the
    database is slapcatted to /var/lib/ldap/upgrade.ldif and the
    database files are saved to /var/lib/ldap/rpmorig.  On post, if
    /var/lib/ldap/upgrade.ldif exists, it is slapadded.  This means that
    on upgrades from 2.3.16-2 to higher versions, the database files may
    be automatically upgraded.  Unfortunatly, because of the changes to
    the preun scriptlet, users have to do the slapcat, etc by hand when
    upgrading to 2.3.16-2.  Also note that the /var/lib/ldap/rpmorig
    files need to be removed by hand because automatically removing your
    emergency fallback files is a bad idea.
  - Upgrade internal bdb to db-4.4.20.  For a clean upgrade, this will
    require that users slapcat their databases into a temp file, move
    /var/lib/ldap someplace safe, upgrade the openldap rpms, then
    slapadd the temp file.


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-3
changelog:
  - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and
    compat-openldap- to close
    bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-2
changelog:
  - Upgrade to 2.3.11, which upstream now considers stable.
  - Switch compat-openldap to 2.2.29
  - remove references to nss_ldap_build from the spec file
  - remove references to 2.0 and 2.1 from the spec file.
  - reorganize the build() function slightly in the spec file to limit the
    number of redundant and conflicting options passedto configure.
  - Remove the attempt to hardlink ldapmodify and ldapadd together, since
    the current make install make ldapadd a symlink to ldapmodify.
  - Include the -ads patches to allow SASL binds to an Active Directory
    server to work.  Nalin <nalin@redhat.com> wrote the patch, based on my
    broken first attempt.


author: Jay Fenlason <fenlason@redhat.com> 2.2.26-2
changelog:
  - Move the slapd.pem file to /etc/pki/tls/certs
    and edit the -config patch to match to close
    bz#143393  Creates certificates + keys at an insecure/bad place
  - also use _sysconfdir instead of hard-coding /etc


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add the tls-fix-connection-test patch to close
    bz#161991 openldap password disclosure issue
  - add the hop patches to prevent infinite looping when chasing referrals.
    OpenLDAP ITS #3578


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.26-1
changelog:
  - run slaptest with the -u flag if no id2entry db files are found, because
    you can't check for read-write access to a non-existent database (#156787)
  - add _sysconfdir/openldap/cacerts, which authconfig sets as the
    TLS_CACERTDIR path in /etc/openldap/ldap.conf now
  - use a temporary wrapper script to launch slapd, in case we have arguments
    with embedded whitespace (#158111)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.26 (stable 20050429)
  - enable the lmpasswd scheme
  - print a warning if slaptest fails, slaptest -u succeeds, and one of the
    directories listed as the storage location for a given suffix in slapd.conf
    contains a readable file named __db.001 (#118678)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1
changelog:
  - update to 2.2.24 (stable 20050318)
  - export KRB5_KTNAME in the init script, in case it was set in the sysconfig
    file but not exported


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1
changelog:
  - update to 2.2.23 (stable-20050125)
  - update notes on upgrading from earlier versions
  - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1
changelog:
  - update to 2.2.20 (stable-20050103)
  - warn about unreadable krb5 keytab files containing "ldap" keys
  - warn about unreadable TLS-related files
  - own a ref to subdirectories which we create under _libdir/tls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.17 (stable-20040923) (#135188)
  - move nptl libraries into arch-specific subdirectories on x86 boxes
  - require a newer glibc which can provide nptl libpthread on i486/i586


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move slapd startup to earlier in the boot sequence (#103160)
  - update to 2.2.15 (stable-20040822)
  - change version number on compat-openldap to include the non-compat version
    from which it's compiled, otherwise would have to start 2.2.15 at release 3
    so that it upgrades correctly


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    evolution_connector_prefix)
  - provide openldap-evolution-devel = version-release in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1
changelog:
  - add compat-openldap subpackage
  - default to bdb, as upstream does, gambling that we're only going to be
    on systems with nptl now


author: Thomas Woerner <twoerner@redhat.com> 2.1.29-3
changelog:
  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2
changelog:
  - fix incorrect use of find when attempting to detect a common permissions
    error in the init script (#114866)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1
changelog:
  - change logging facility used from daemon to local4 (#112730, reversing #11047)
    BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build bundled libdb for slapd dynamically to make the package smaller,
    among other things
  - on tls-capable arches, build libdb both with and without shared posix
    mutexes, otherwise just without
  - disable posix mutexes unconditionally for db 4.0, which shouldn't need
    them for the migration cases where it's used
  - update to MigrationTools 45


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually require newer libtool, as was intended back in 2.1.22-0, noted as
    missed by Jim Richardson


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0
changelog:
  - 2.1.22 now badged stable
  - be more aggressive in what we index by default
  - use/require libtool 1.5


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_*
  - install slapcat/slapadd from 2.0.x for migration purposes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17
  - disable the shell backend, not expected to work well with threads
  - drop the kerberosSecurityObject schema, the krbName attribute it
    contains is only used if slapd is built with v2 kbind support


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8
changelog:
  - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
  - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
    1936, 2007, 2009, which were included in 2.0.26.
  - add two more patches for db 4.1.24 from sleepycat's updates page
  - use openssl pkgconfig data, if any is available


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/_libdir instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1
changelog:
  - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
    slapd databases until we move to 2.1.x)
  - use %{_smp_mflags} when running make
  - update to MigrationTools 44
  - enable dynamic module support in slapd


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2
changelog:
  - switch to an internalized Berkeley DB as the ldbm back-end  (NOTE: this breaks
    access to existing on-disk directory data)
  - add slapcat/slapadd with gdbm for migration purposes
  - remove Kerberos dependency in client libs (the direct Kerberos dependency
    is used by the server for checking {kerberos} passwords)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2
changelog:
  - temporarily disable optimizations for ia64 arches
  - specify pthreads at configure-time instead of letting configure guess


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable kbind support (deprecated, and I suspect unused)
  - configure with --with-kerberos=k5only instead of --with-kerberos=k5
  - build slapd with threads


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1
changelog:
  - update to 2.0.12 to pull in fixes for setting of default TLS options, among
    other things
  - update to migration tools 39
  - drop tls patch, which was fixed better in this release


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a build-time requirement on pam-devel
  - add a build-time requirement on a sufficiently-new libtool to link
    shared libraries to other shared libraries (which is needed in order
    for prelinking to work)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
    compliance) by name (follows from #43079, which split cyrus-sasl's
    cram-md5 and digest-md5 modules out into cyrus-sasl-md5)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move shared libraries to /lib
  - redo init script for better internationalization (#26154)
  - don't use ldaprc files in the current directory (#38402) (patch from
    hps@intermeta.de)
  - add BuildPrereq on tcp wrappers since we configure with
    --enable-wrappers (#43707)
  - don't overflow debug buffer in mail500 (#41751)
  - don't call krb5_free_creds instead of krb5_free_cred_contents any
    more (#43159)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build dummy certificate in %post, use it in default config
  - configure-time shenanigans to help a confused configure script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out pidfile patches, which interact weirdly with Linux threads
  - mark non-standard schema as such by moving them to a different directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
    a /etc/sysconfig/ldap file (#23549)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
    per mail from the ldap-nis mailing list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
    (OpenLDAP ITS #889)
  - add "-h ldaps:///" to server init when TLS is enabled, in order to support
    ldaps in addition to the regular STARTTLS (suggested by Del)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  - configure slapd to run as the non-root user "ldap" (#19370)
  - chdir() before chroot() (we don't use chroot, though) (#19369)
  - disable saving of the pid file because the parent thread which saves it and
    the child thread which listens have different pids


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add missing required attributes to conversion scripts to comply with schema
  - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
    our own OID tree to define attributes and classes migration scripts expect
  - tweak automounter migration script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - try adding the suffix first when doing online migrations
  - force ldapadd to use simple authentication in migration scripts
  - add indexing of a few attributes to the default configuration
  - add commented-out section on using TLS to default configuration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.6
  - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  - take the -s flag off of slapadd invocations in migration tools
  - add the cosine.schema to the default server config, needed by inetorgperson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add the nis.schema and inetorgperson.schema to the default server config
  - make ldapadd a hard link to ldapmodify because they're identical binaries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build a semistatic slurpd with threads, everything else without
  - disable reverse lookups, per email on OpenLDAP mailing lists
  - make sure the execute bits are set on the shared libraries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split off clients and servers to shrink down the package and remove the
    base package's dependency on Perl
  - make certain that the binaries have sane permissions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to gdbm; I'm getting off the db merry-go-round
  - tweak the init script some more
  - add instdir to @INC in migration scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak init script to return error codes properly
  - change initscripts dependency to one on /etc/init.d


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.11
  - add condrestart logic to init script
  - munge migration scripts so that you don't have to be
    /usr/share/openldap/migration to run them
  - add code to create pid files in /var/run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  - backport replacement for the ldapuser patch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.10
  - add revamped version of patch from kos@bastard.net to allow execution as
    any non-root user
  - remove test suite from %build because of weirdness in the build system


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  - fix some possible string-handling problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add -D_REENTRANT to make threaded stuff more stable, even though it looks
    like the sources define it, too
  - mark *.ph files in migration tools as config files


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.2.7
  - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  - take include files out of base package


author: Petr Machata <pmachata@redhat.com> - 0.7.91-13
changelog:
  - Fix system_call_params.exp and system_calls.exp for aarch64.
    (#1225550)
  - xfail part of trace-irelative.exp for aarch64, fix trace-clone
    for aarch64 (#1225568)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-12
changelog:
  - Add upstream fix for a bug in labeling PLT slots
    (ltrace-0.7.91-x86-plt_map.patch,
    ltrace-0.7.91-x86-unused_label.patch)
  - Add upstream fixes for tracing multi-threaded processes without -f
    (ltrace-0.7.91-multithread-no-f-1.patch,
    ltrace-0.7.91-multithread-no-f-2.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-6
changelog:
  - Fix a problem when attempting to trace a command that hasn't been
    found (ltrace-0.7.91-cant_open.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-5
changelog:
  - Fix crashing a prelinked PPC64 binary which makes PLT calls through
    slots that ltrace doesn't trace.
    (ltrace-0.7.91-breakpoint-on_install.patch,
    ltrace-0.7.91-ppc64-unprelink.patch)
  - Fix a problem in tracing across fork on PPC64
    (ltrace-0.7.91-ppc64-fork.patch)
  - Fix a couple nits in ltrace.1
    (ltrace-0.7.91-man.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-3
changelog:
  - Fix interpretation of x86_64 PLT with IRELATIVE slots.
    (ltrace-0.7.91-x86_64-irelative.patch)
  - Fix fetching of system call arguments on s390.
    (ltrace-0.7.91-s390-fetch-syscall.patch)
  - Enable tracing of IRELATIVE PLT slots on s390.
    (ltrace-0.7.91-s390-irelative.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.91-2
changelog:
  - Fix a problem in including in summary (-c) function calls that don't
    finish before exec or exit (ltrace-0.7.91-account_execl.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.2-5
changelog:
  - On s390, the highest bit in PC address is used to distinguish
    between 24-bit and 31-bit addressing modes.  Linux used to do this
    for us, but not anymore.
    (ltrace-0.7.2-s390-set_instruction_pointer.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.2-3
changelog:
  - Bring small fixes from master branch
    (ltrace-0.7.2-bits.patch; drop ltrace-0.7.2-man.patch)
  - Add a patch that implements ARM sofware singlestepping.  This mostly
    fixes test suite on ARM, though parameter passing conventions are
    still not implemented.  (ltrace-0.7.2-arm.patch)
  - Work around a new GCC warning (ltrace-0.7.2-unused-typedef.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.2-2
changelog:
  - Improve documentation: better correlation between ltrace(1) and
    --help, other minor improvements in ltrace(1).
    (ltrace-0.7.2-man.patch)


author: Petr Machata <pmachata@redhat.com> - 0.7.0-1
changelog:
  - Upstream 0.7.0
    - Drop all the patches
    - Upstream patch for missing sysdeps/linux-gnu/ppc/insn.h
      (ltrace-0.7.0-ppc-insn.h.patch)
    - Upstream patch for installing ltrace.conf.5 to man5
      (ltrace-0.7.0-man5.patch)


author: Petr Machata <pmachata@redhat.com> - 0.6.0-19
changelog:
  - Upstream patch for ia64 parameter passing
    (ltrace-0.6.0-abi-ia64.patch)
  - Upstream fix for a bug in computation of time spent in a syscall
    (ltrace-0.6.0-syscall-time.patch)
  - Upstream fix for a bug in passing struct(float,struct(float,float))
    on x86_64 (ltrace-0.6.0-x86_64-flatten.patch)
  - Upstream patch for support of -l option (ltrace-0.6.0-dash-l.patch)
  - Several more upstream patches with random cleanups.  Those were
    brought to Fedora to make porting of other patches easier.
    (ltrace-0.6.0-cleanups.patch)


author: Petr Machata <pmachata@redhat.com> - 0.6.0-16
changelog:
  - Look for __cxa_demangle in libstdc++ as well
  - Demangle test case should report it's unsupported if demangling
    support isn't compiled in (ltrace-0.6.0-demangle.patch)
  - Resolves: #827422


author: Petr Machata <pmachata@redhat.com> - 0.6.0-15
changelog:
  - Add upstream patches for parameter passing.  Apart from a couple of
    fixes, this brings in s390 support (ltrace-0.6.0-abi-s390.patch)


author: Petr Machata <pmachata@redhat.com> - 0.6.0-14
changelog:
  - Add upstream patch that improves parameter passing support (the
    upstream "revamp" branch) (ltrace-0.6.0-abi.patch)


author: Petr Machata <pmachata@redhat.com> - 0.6.0-13
changelog:
  - Check -n argument for validity (ltrace-0.6.0-dash-n.patch)
  - Resolves: #818529
  - ltrace-0.6.0-libs-fixes-1.patch
    - Fix double free when process initialization fails for some reason
    - Don't indent first level of calls


author: Petr Machata <pmachata@redhat.com> - 0.6.0-11
changelog:
  - Fix detach from sleeping process
  - Add limited support for return from tail call
  - Fix singlestep over atomic instruction sequence on PPC
  - Add extensive upstream patch that implements
    - tracing calls done from DSOs
    - better tools for filtering symbol tables
    - support for tracing PLT calls on PPC64 (not entry points read from .plt)
    - support for PPC32 old-style (BSS) PLT table
  - Drop ppc-shift patch that was superseded by the above
  - Drop demangle patch that hasn't been applied for some time now


author: Petr Machata <pmachata@redhat.com> - 0.6.0-6
changelog:
  - If we fail to attach to traced process, check whether deny_ptrace
    isn't enabled.  If yes, warn about it.
  - Resolves: #810973


author: Petr Machata <pmachata@redhat.com> - 0.6.0-5
changelog:
  - Add upstream patches for initial breakpoint insertion.  This mostly
    fixes tracing on PPC.
  - Resolves: #773050


author: Petr Machata <pmachata@redhat.com> - 0.6.0-3
changelog:
  - Add several upstream patches that fix various races in tracing
    multi-threaded processes
  - Add upstream patches for support of tracing across vfork
  - Add upstream patches for ppc: excessive shift, and fetching
    function arguments


author: Petr Machata <pmachata@redhat.com> - 0.6.0-2
changelog:
  - Add upstream patches for tracing multi-threaded processes, endian
    fixes, and a test suite fixlet


author: Petr Machata <pmachata@redhat.com> - 0.6.0-1
changelog:
  - Update to 0.6.0
    - Drop most patches
    - Port exec-stripped patch
    - Add return-string-n patch
    - Leave just the testsuite part in ia64-sigill patch


author: Petr Machata <pmachata@redhat.com> - 0.5-17.45svn
changelog:
  - Fix demangler resolution.  Libiberty is not in the default install
    anymore, and the fallback configure check for __cxa_demangle doesn't
    take into account the possibility that the symbol might be in
    libstdc++ instead.
  - Resolves: #631069 FTBFS


author: Petr Machata <pmachata@redhat.com> - 0.5-16.45svn.1
changelog:
  - When the value of undefined symbol in PPC 32-bit binary is 0, use
    PPC-specific magic to compute the PLT slots.
  - Fix a problem with tracing stripped binary after execl on
    architectures that need PLT reinitalisation breakpoint.
  - Support tracing of 31-bit binaries with 64-bit ltrace
  - Fix handling of the case where forked child is reported before
    parent's fork event
  - Patch from Supriya Kannery implements fetching 5th and further
    function arguments on s390


author: Petr Machata <pmachata@redhat.com> - 0.5-11.45svn
changelog:
  - Patch from James M. Leddy, fixes interaction of -c and -o
  - Fix compilation by using -D_LARGEFILE64_SOURCE
  - related: #447404


author: Petr Machata <pmachata@redhat.com> - 0.5-7.45svn
changelog:
  - added fork/exec patches, mostly IBM's work
  - added trace-exec tests into suite
  - added ia64 sigill patch


author: Petr Machata <pmachata@redhat.com> - 0.5-5.45svn
changelog:
  - fix plt handling on ppc32 (symval patch)
  - fix attaching to process (attach patch)
  - add fork & exec patches from IBM
  - adjust weak symbol handling (ppc32fc5 patch)


author: Petr Machata <pmachata@redhat.com> - 0.5-1.0.45svn.5
changelog:
  - adding .gnu.hash patch to support new ELF hash table section
  - adding testsuite patch to silent some bogus failures


author: Petr Machata <pmachata@redhat.com> - 0.5-1.0.45svn
changelog:
  - adding upstream (svn) version.  It contains most of patches that we
    already use, and has support for secure PLTs.


author: Petr Machata <pmachata@redhat.com> - 0.4-1.6
changelog:
  - e_entry patch: use elf's e_entry field instead of looking up _start
    symbol, which failed on stripped binaries.


author: Petr Machata <pmachata@redhat.com> - 0.4-1.4
changelog:
  - turn off opd translation on ia64, GElf already gives us function
    address.
  - turn on main-internal test, it should pass now.


author: Petr Machata <pmachata@redhat.com> - 0.4-1.2
changelog:
  - svn fix for opt_x patch
  - patches for testsuite for s390{,x}
  - turning off main-internal test. Fails on ia64, needs investigation.


author: Petr Machata <pmachata@redhat.com> - 0.4-1
changelog:
  - Upstream 0.4
  - opt_x patch: New structure for opt_x list elements, now with
    'found'.  Using it in options.c, elf.c.
  - testsuite patch: Automated testsuite for ltrace.


author: Jakub Jelinek <jakub@redhat.com> 0.3.36-2
changelog:
  - make x86_64 ltrace trace both 32-bit and 64-bit binaries (#141955,
    IT#55600)
  - fix tracing across execve
  - fix printf-style format handling on 64-bit arches


author: Jakub Jelinek <jakub@redhat.com> 0.3.32-1
changelog:
  - update to 0.3.32
    - fix dict.c assertion (#114359)
    - x86_64 support
  - rewrite elf.[ch] using libelf
  - don't rely on st_value of SHN_UNDEF symbols in binaries,
    instead walk .rel{,a}.plt and compute the addresses (#115299)
  - fix x86-64 support
  - some ltrace.conf additions
  - some format string printing fixes


author: Matt Wilson <msw@redhat.com>
changelog:
  - rebuilt for next release
  - patched Makefile.in to take a hint on mandir (patch2)
  - use %{_mandir} and %makeinstall


author: Nalin Dahyabhai <nalin@redhat.com> - 0.9.13-4
changelog:
  - only BuildRequire: prelink on the arches on which we know it runs (currently
    %{ix86}, x86_64, ppc, ppc64, s390, s390x), so that it can be built on the
    rest (#1061889)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.9.13-1
changelog:
  - treat unexpected command-line arguments as an error to avoid setting
    incorrect expectations, and warn when a check file doesn't appear to
    contain anything for us to check (#1016706)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.12-1
changelog:
  - fix regression of #512275 -- we looked for prelink, but didn't record
    its location properly (#559458)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.11-1
changelog:
  - error out when we previously skipped a check entry because the value to be
    checked is the wrong size
  - fix estimation of the expected length for truncated values


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.10-1
changelog:
  - refuse to truncate output below half the size of the hash length, or 80
    bits, whichever is higher, in case we get used in a situation where
    not doing so would make us vulnerable to CVE-2009-0217, in which an
    attacker manages to convince a party doing verification to truncate
    both the just-computed value and the value to be checked before
    comparing them, as comparing just 1 bit would make detecting forgeries
    close to impossible


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.9-1
changelog:
  - look for prelink at compile-time, and if we find it try to invoke it
    using a full pathname before trying with $PATH (#512275)
  - buildrequires: prelink so that it will be found at compile-time


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6-1
changelog:
  - fix 'make check' by using binaries built with a different path for their
    own check files
  - add a non-fips compile-time option, which we don't use


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.2-1
changelog:
  - provide a way to override the directory which will be searched for self-check
    values (part of #491719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9-2
changelog:
  - add URL to fedorahosted home page, and mention it in the man page as a means
    to report bugs and whatnot (part of #491719)
  - correct the license tag: "X11" -> "MIT" (part of #491719)
  - expand the acronym HMAC in the description (part of #491719)
  - disable the sumfile prefix (part of #491719)


author: Phil Cameron <pcameron@redhat.com> - 1.1.4-7
changelog:
  - Fixes error in patch Patch03 - this fixes 1283773 and 1539081
    1501821 - Upstream moved to https://github.com/iptraf-ng/iptraf-ng/
    1020552, 1372679 - fix missing /var/lock/iptraf-ng file
    Add BuildRequires:  gcc to spec file.
    1109768 - bad configuration logrotate


author: Phil Cameron <pcameron@redhat.com> - 1.1.4-6
changelog:
  - fix 1283773 - segfault in rate_add_rate

    Jun 17 2014 Alejandro Pérez  <aeperezt@fedoraproject.org>
    fix 1109768 bad configuration logrotate
    Mar 02 2014 Alejandro Pérez  <aeperezt@fedoraproject.org>
    fix bug 1020552 - rpm report /var/lock/ipraf-ng is missing
    added missing file iptraf-nf-tmpfiles.conf
    Dec 03 2013 Nikola Pajkovsky <npajkovs@redhat.com>
    Fedora start using -Werror=format-security and iptraf-ng had some
    parts where error compilation was trigged.
    202b2e7b27a1 Makefile: add -Werror=format-security
    Resolved: #1037133


author: Victor Toso <victortoso@redhat.com> - 0.14.0-18
changelog:
  - Fix clipboard logs on requests for targets on grab from client
    Resolves: rhbz#1594876
  - Make some clipboard logs debug instead of error
    Resolves: rhbz#1686008


author: Victor Toso <victortoso@redhat.com> - 0.14.0-17
changelog:
  - Fix 'Dependency failed for Activation socket' message
    Resolves: rhbz#1545212
  - Fix socket leak
    Resolves: rhbz#1650596


author: Victor Toso <victortoso@redhat.com> - 0.14.0-14
changelog:
  - Do not allow drag-and-drop on (gdm) login screen
    Resolves: rhbz#1328761
  - Do not allow drag-and-drop on locked screen
    Resolves: rhbz#1323623


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-11
changelog:
  - Add client to guest audio volume synchronization
    Resolves: rhbz#1264102
  - Exit with error when virtio channel device is missing
    Resolves: rhbz#1256704


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-9
changelog:
  - Don't install rsyslog config file. This can cause duplicate logging
    to syslog in rhel6->rhel7 upgrades, and is not really useful anyway
    as the same functionality can be achieved with journald
    Resolves: rhbz#1136881


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-8
changelog:
  - Fix copy and paste issues with vncclient
    Resolves: rhbz#1130218
  - Make vdagent more robust against xrandr failures
    Resolves: rhbz#1066422
  - Fix autostart of vdagent in gdm
    Resolves: rhbz#1052172


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-5
changelog:
  - Silence session agent error logging when not running in a vm (rhbz#999804)
  - Release guest clipboard ownership on client disconnect (rhbz#1003977)


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-3
changelog:
  - Advertise clipboard line-endings for copy and paste line-ending conversion
  - Build spice-vdagentd as pie + relro


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-1
changelog:
  - New upstream release 0.14.0
  - Adds support for file transfers from client to guest
  - Adds manpages for spice-vdagent and spice-vdagentd


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-2
changelog:
  - Fix setting of mode on non arbitrary resolution capable X driver
  - Fix wrong mouse coordinates on vms with multiple qxl devices


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-1
changelog:
  - New upstream release 0.12.0
  - This moves the tmpfiles.d to /usr/lib/tmpfiles.d (rhbz#840194)
  - This adds a systemd .service file (rhbz#848102)


author: Hans de Goede <hdegoede@redhat.com> - 0.10.0-1
changelog:
  - New upstream release 0.10.0
  - This supports using systemd-logind instead of console-kit (rhbz#756398)


author: Hans de Goede <hdegoede@redhat.com> 0.8.0-2
changelog:
  - Make the per session agent process automatically reconnect to the system
    spice-vdagentd when the system daemon gets restarted


author: Petr Pisar <ppisar@redhat.com> - 2.2.11-1
changelog:
  - 2.2.11 bump (#485022)
  - Remove useless patches: indent-2.2.9-cdw.patch, indent-2.2.9-explicits.patch
  - Reenable parallel build
  - Distribute upstream changelogs


author: Petr Machata <pmachata@redhat.com> 2.2.9-10
changelog:
  - Changed the placement of closing `while' of `do {} while' command
    under a -cdw option.  It's now cuddled up to the brace. (#67781)
  - Changed the indentation of cuddled `else': the brace is lined up
    under opening brace.  Let's see if people like it.  It looks less
    strange than before, but still it looks strange.


author: Petr Machata <pmachata@redhat.com> 2.2.9-9
changelog:
  - Silenting some warnings, voidifying some functions that were
    implicitly int but didn't actually return anything. (#114376)


author: Jan Horak <jhorak@redhat.com> - 6.7.8.9-15
changelog:
  - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
    rhbz#1326834, rhbz#1334188, rhbz#1269553


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 6.7.8.9-7
changelog:
  - add aarch64 as a target by using 64 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)


author: Pavel Alexeev <Pahan@Hubbitus.info> - 6.7.7.5-1
changelog:
  - Update to 6.7.7-5 version. Prepare and update in stable Fedora 16 to address security problems (f.e. bz#808159).


author: Pavel Alexeev <Pahan@Hubbitus.info> - 6.7.6.5-2
changelog:
  - Rebuild due libtiff update http://www.mail-archive.com/devel@lists.fedoraproject.org/msg42846.html


author: Pavel Alexeev <Pahan@Hubbitus.info> - 6.7.6.5-1
changelog:
  - Update to 6.7.6.5 to fix security issues: bz#807993, bz#807994, bz#807997,
  	bz#808159, bz#804591, bz#804588


author: Pavel Alexeev <Pahan@Hubbitus.info> - 6.7.5.6-1
changelog:
  - Update by request https://bugzilla.redhat.com/show_bug.cgi?id=755827#c8
  - Delete multilib patch as it should be in main sources.
  - Replace $RPM_BUILD_ROOT by %buildroot


author: Pavel Alexeev <Pahan@Hubbitus.info> - 6.6.2.1-12
changelog:
  - Add %doc LICENSE as it required new Licensing Guidelines Update
  	( https://fedoraproject.org/wiki/Packaging:LicensingGuidelines )


author: Pavel Alexeev <Pahan@Hubbitus.info> - 6.6.2.1-10
changelog:
  - New version 6.6.2-1 (BZ#579458, BZ#565940 - http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=16320)
  - Replace %define by %global


author: Pavel Alexeev <Pahan@Hubbitus.info> - 6.5.8.10-6
changelog:
  - Update to 6.5.8-10 (BZ#547806)
  - Change source tarball from .tar.lzma to .tar.xz folow to upstream.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 6.5.4.7-4
changelog:
  - Explude file Generic.ttf from -perl subpackage demos. Demos perfectly work without it, but with bundled font
    package does not pass QA (Unfortunately no bugreport there, only mail from Nicolas Mailhot)


author: Pavel Alexeev <Pahan@Hubbitus.info> - 6.5.4.7-3
changelog:
  - Update to version 6.5.4-7
  - Use lzma-compressed source tarball as sugested by Ville Skyttä (BZ#515319)


author: Hans de Goede <hdegoede@redhat.com> 6.4.9.6-2
changelog:
  - Fix undefined warning in magick-type.h (#489453)
  - Do not link PerlMagick against system ImageMagick, but against the just
    build one


author: Hans de Goede <hdegoede@redhat.com> 6.4.5.5-3
changelog:
  - Remove --without-windows-font-dir from configure args, specifying it
    makes ImageMagick search for windows fonts in the "no/" dir (rh 472244)


author: Hans de Goede <hdegoede@redhat.com> 6.4.5.5-2
changelog:
  - Enable djvu support, put the new djvu plugin into a separate -djvu
    subpackage because of deps (rh 225897)


author: Hans de Goede <hdegoede@redhat.com> 6.4.5.5-1
changelog:
  - New upstream release 6.4.5-5
  - Various specfile fixes from merge review (rh 225897)
  - Fix building with new libtool (rh 471468)


author: Hans de Goede <jwrdegoede@fedoraproject.org> 6.4.0.10-1
changelog:
  - New upstream release 6.4.0.10
  - This fixes conversion of 24 bpp windows icons (bz 440136)
  - Don't reuse GError structs, that upsets glib2 (bz 325211)
  - Use the system ltdl, not the included copy (bz 237475)
  - Fix various multilib conflicts (bz 341561)
  - Use xdg-open instead of htmlview (bz 388451)
  - Some small specfile cleanups (utf-8 stuff & others) fixing rpmlint warnings


author: Tom "spot" Callaway <tcallawa@redhat.com> 6.3.8.1-1
changelog:
  - update to 6.3.8.1
  - rebuild for new perl
  - fix license tag
  - fix rpath issues
  - add sparc64 to 64bit arch list


author: Norm Murray <nmurray@redhat.com> 6.3.5.9-1.fc8
changelog:
  - rebase to 6.3.5.9
  - fix build with missing open() arg
  - add build require of jasper-devel, remove windows font dir
  - update multilib patch


author: Matthias Clasen <mclasen@redhat.com> - 6.2.8.0-3.fc6
changelog:
  - fix several integer and buffer overflows (#202193, CVE-2006-3743)
  - fix more integer overflows (#202771, CVE-2006-4144)


author: Matthias Clasen <mclasen@redhat.com> 6.2.4.6-1
changelog:
  - Update to 6.2.4-6
  - Drop upstreamed patches
  - Disable DPS (#158984)
  - Add missing requires (#165931)


author: <mclasen@redhat.com> - 6.2.1.7-1
changelog:
  - Update to 6.2.1
  - Include multiple improvements and bugfixes
    by Rex Dieter et al (111961, 145466, 151196, 149970, 
    146518, 113951, 145449, 144977, 144570, 139298)


author: Tim Waugh <twaugh@redhat.com> 6.0.7.1-4
changelog:
  - The devel subpackage requires XFree86-devel (bug #126509).
  - Fixed build requirements (bug #120776).  From Robert Scheck.


author: Karsten Hopp <karsten@redhat.de> 5.5.6-1
changelog:
  - update
  - specfile fixes
            - verified that the upstream version fixes the following bugreports:


author: Karsten Hopp <karsten@redhat.de> 5.4.7-3
changelog:
  - fix non-cpp headers in -devel package
  - fix #62157 (wrong path for include files in ImageMagick-devel)
  - fix #63897 (use _target instead of _arch) in libtool workaround
  - fix #65860, #65780 (tiff2ps) expands images to >10 MB Postscript files.


author: Karsten Hopp <karsten@redhat.de> 5.4.7-1
changelog:
  - update
  - fix localdoc patch
  - fix %files section
  - disable nonroot patch
  - fix #62100,55950,62162,63136 (display doesn't start form gnome menu)
  - fix libtool workaround
  - moved Magick*-config into -devel package (#64249)


author: Bernhard Rosenkraenzer <bero@redhat.com> 5.4.0-1
changelog:
  - 5.4.0
  - work around build system breakage causing applications to be named
    %{_arch}-redhat-linux-foo rather than foo


author: Bernhard Rosenkraenzer <bero@redhat.com> 5.3.7-1
changelog:
  - 5.3.7
  - Fix build without previously installed ImageMagick-devel (#49816)
  - Move perl bindings to a separate package.


author: Matt Wilson <msw@redhat.com>
changelog:
  - remove hacks to move perl man pages
  - don't include the perl*/man stuff, these files go in /usr/share/man now.


author: Matt Wilson <msw@redhat.com>
changelog:
  - bootstrap rebuilt to nuke broken libbz2 deps
  - add Prefix: tag such that the FHS macros work properly


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - hacks to make it work with the new perl
  - version 4.1.0 (actually installs the sonames as 4.0.10... doh!)
  - make sure the libraries have the x bit on


author: Jan Grulich <jgrulich@redhat.com> - 1:4.8.7-8
changelog:
  - Fix QImage allocation failure in qgifhandler
    Resolves: bz#1667863

  - Fix QTgaFile CPU exhaustion
    Resolves: bz#1667879

  - Fix QBmpHandler segmentation fault on malformed BMP file
    Resolves: bz#1667862


author: Rex Dieter <rdieter@fedoraproject.org> 4.9.97-4
changelog:
  - manually specify PYTHON_LIBRARIES again, fixes regression that tries
    to load libpython<foo>.so from python<foo>-devel


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1:1.8.5-11
changelog:
  - Thanks to Ville Skyttä (bz#875343) build against libedit instead of readline
  	what simplify licensing apparently without any loss of functionality


author: Colin Walters <walters@verbum.org> - 1:1.8.5-6
changelog:
  - Include mozjs185.pc, clean up build
  - Based on work from Christopher Aillon <caillon@redhat.com>
  - Switch to using make install DESTDIR=, instead of hardcoding build rules.
  - Add DESTDIR= patch from GNOME 3.2 jhbuild
  - Make mozjs185 the canonical target for both libmozjs and libmozjs185.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1.8.5-0.hg51702867d932
changelog:
  - Build version 1.8.5 by update request - BZ#676441 from Firefox 4.0 mercurial repository.
  - Gone -DJS_C_STRINGS_ARE_UTF8
  - Add BR autoconf213, change build system to use configure.
  - Adopt patch0 (js-1.7.0-make.patch -> js-1.8.5-make.patch)
  - Adopt patch1 (js-shlib.patch -> js-1.8.5-shlib.patch)
  - Remove Patch2 (js-1.5-va_copy.patch) and Patch3 (js-ldflags.patch)
  - Add BR python, zip.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1.70-8
changelog:
  - Reformat spec with tabs.
  - By report of Thomas Sondergaard (BZ#511162) Add -DXP_UNIX=1 -DJS_THREADSAFE=1 flags and nspr requires into libjs.pc


author: Matthias Saou <http://freshrpms.net/> 1.70-1
changelog:
  - Update to 1.7.0, as 1.70 to avoid introducing an epoch for now...
  - Remove no longer provided perlconnect parts.


author: Matthias Saou <http://freshrpms.net/> 1.60-1
changelog:
  - Update to 1.60.
  - Rebuild in order to link against ncurses instead of termcap (#226773).
  - Add ncurses-devel build requirement and patch s/termcap/ncurses/ in.
  - Change mode of perl library from 555 to 755 (#224603).


author: Matthias Saou <http://freshrpms.net/> 1.5-1
changelog:
  - Update to 1.5.0 final.
  - Spec file cleanups.
  - Move docs from devel to main, since we need the license there.
  - Remove no longer needed js-perlconnect.patch.
  - Update js-1.5-va_copy.patch.
  - Include a pkgconfig file (#178993).


author: Ville Skyttä <ville.skytta at iki.fi> - 1.5-0.rc6a.2
changelog:
  - Include perlconnect.
  - Include readline support, rebuild using "--without readline" to disable.
  - Add libjs* provides for upstream compatibility.
  - Install header files in %{_includedir} instead of %{_includedir}/js.


author: David Walluck <dwalluck@redhat.com> 0:3.1-4
changelog:
  - remove Class-Path from MANIFEST.MF
  - add unversioned javadoc symlink
  - remove javadoc scriptlets
  - fix directory ownership
  - remove build requirement on dos2unix


author: Ralph Apel <r.apel@r-apel.de> - 0:3.1-3jpp
changelog:
  - Add poms and depmap frags with groupId of org.objectweb.asm !
  - Add asm-all.jar 
  - Add -javadoc Requires post and postun
  - Restore Vendor, Distribution


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-53
changelog:
  - cli: load config file at the beginning
  - ccpp: fast dumping and abrt core limit
  - conf: increase MaxCrashReportsSize to 5GiB
  - vmcore: /var/tmp/abrt is no longer a dump location
  - koops: Filter kernel oopses based on logged hostname
  - daemon: Fix double closed fd race condition
  - Related: #1618818, #1647841, #1613236, #1613182, #1655241


author: Matej Marusak <mmarusak@redhat.com> - 2.1.11-51
changelog:
  - a-a-s-p-data: fix segfault if GPGKeysDir isn't configured
  - spec: turn on --enable-native-unwinder aarch64
  - plugins: a-a-g-machine-id use dmidecode command
  - spec: use dmidecode instead of python-dmidecode
  - Related: #1566707, #1566707, #1260074, #1591141


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-49
changelog:
  - Translation updates
  - Stop creating uReports for unpackaged executables
  - koops: add detailed taint flag description for kernel oopses
  - koops: fix kernel oops and fatal MCE recognition
  - python: provide more information about Python exceptions
  - vmcore: fix replication of vmcore files
  - Related: #1271213, #1460224, #1374648, #1361116, #1228344,
  - Related: #1395285, #1214730, #1446410, #1319828, #1501718


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-46
changelog:
  - remove not implemented option AttemptHardlink in vmcore.conf
  - introduce unsafe reporting for not-reporable problems
  - rewrite skip_pfx() function to work with journal msgs
  - don't expect kernel's version '2.6.*' or '3.*.*'
  - Related: #1416586, #1257159, #1328264, #1378469


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-39
changelog:
  - python: fix check for absolute path
  - console-notifications: add timeout
  - vmcore: generate 'reason' file in all cases
  - Fix memory leaks in abrt-dbus
  - Resolves: #1250337, #1166633, #1249101, #1319704


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-36
changelog:
  - lib: prevent from creating non-root sub-dirs in dump dir
  - Save Vendor and GPG Fingerprint
  - augeas: augtool save /files/etc/abrt/plugins/oops.conf/DropNotReportableOopses
  - ccpp: add AllowedUsers and AllowedGroups feature
  - ccpp: add IgnoredPath option
  - lib: hooklib: make signal_is_fatal() public
  - vmcore: catch IOErrors and OSErrors
  - translations: update zanata configuration
  - Resolves: #1311100, #1277848, #1277849, #1175679


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-35
changelog:
  - make /var/spool/abrt owned by root
  - remove 'r' from /var/spool/abrt for other users
  - abrt-action-install-debug-info: use secure temporary directory
  - stop saving abrt's core files to /var/spool/abrt if DebugLevel < 1
  - Fixes for: CVE-2015-5273 and CVE-2015-5287
  - Resolves: #1266853


author: Richard Marko <rmarko@redhat.com> - 2.1.11-33
changelog:
  - abrt-auto-reporting documentation
  - ccpp: Use global PID
  - ccpp: correct comments mentioning TID
  - Related: #1252590, #1261036, #1223805


author: Richard Marko <rmarko@redhat.com> - 2.1.11-31
changelog:
  - Only analyze vulnerabilities when coredump present
  - Only generate core_backtrace if it's not already present.
  - Related: #1210601


author: Richard Marko <rmarko@redhat.com> - 2.1.11-29
changelog:
  - ccpp: use global TID
  - ccpp: fix comment related to 'MakeCompatCore' option in CCpp.conf
  - cli: fix testing of DBus API return codes
  - dbus-api: unify reporting of errors
  - Related: #1210601, #1252419, #1224984


author: Richard Marko <rmarko@redhat.com> - 2.1.11-28
changelog:
  - doc: fix related to conditional compilation of man page
  - spec: add dbus dependency for abrt-cli and abrt-python
  - Related: #1191572, #1245527


author: Richard Marko <rmarko@redhat.com> - 2.1.11-27
changelog:
  - abrt-merge-pstoreoops: merge files in descending order
  - abrt-auto-reporting: fix related to conditional compilation
  - Update translations
  - Related: #1233662, #1191572, #1181248


author: Richard Marko <rmarko@redhat.com> - 2.1.11-23
changelog:
  - abrt-auto-reporting fixes
  - include processor information in sosreport
  - abrt-cli uses abrt-dbus to get the detected problems
  - Related: #1191572, #1221118, #1224984


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-22
changelog:
  - do not open the build_ids file as the user abrt
  - do not unlink failed and big user core files
  - Related: #1212820, #1216974


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-20
changelog:
  - remove the old dump directories during upgrade
  - abrt-action-install-debuginfo-to-abrt-cache: sanitize arguments and umask
  - fix race conditions and directory traversal issues in abrt-dbus
  - use /var/spool/abrt instead of /var/tmp/abrt
  - make the problem directories owned by root and the group abrt
  - validate uploaded problem directories in abrt-handle-upload
  - don't override files with user core dump files
  - fix symbolic link and race condition flaws
  - Resolves: #1211971, #1212820, #1212864, #1212870
  - Resolves: #1214454, #1214612, #1216974, #1238724


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-19
changelog:
  - abrt-auto-reporting: add ureport authentication command line arguments
  - add python-augeas to the requirements
  - mark all strings for translations
  - translation updates
  - Related: #1087880, #1174833


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-15
changelog:
  - console-notifications: skip non-interactive shells
  - applet: show component instead of duphash in the notification
  - Related: #1084031, #1150169


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-14
changelog:
  - ureport: attach contact email
  - mce: separate mce analysis from Kernel oops analysis
  - console-notifications: use return instead of exit
  - Resolves: #1150389, #1150169
  - Related: #1076820


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-13
changelog:
  - Translation updates
  - localization fixes
  - applet: confirm ignoring of notifications
  - cli: batch reporting in abrt-cli
  - cli: add option remove crash dirs after reporting
  - cli: robustize abrt-console-notification.sh
  - cli: make consistent commands in abrt-cli
  - applet: chown each notified problem before reporting it
  - dbus: fixed abrt-dbus memory leaks
  - plugins: add abrt-action-generate-machine-id
  - spec: add abrt-action-generate-machine-id
  - spec: remove dependency on crash from abrt-addon-vmcore
  - spec: hook abrt-oops.conf.5
  - spec: don't use native unwinder on arm arch
  - spec: remove stray space from %description
  - spec: add missing requires for python api
  - spec: add dependency on abrt-python
  - python: support exceptions without traceback
  - spec: hook Kernel oops configuration files
  - koops: add an option controlling MCE detection
  - gdb: disable loading of auto-loaded files
  - vmcore: start the service after kdump service
  - Resolves: #1066482, #1084031, #1067545, #1084027, #1087880, #1087777
  - Resolves: #1015473, #1139001, #1076820, #1139552, #1128637, #1066501
  - Resolves: #1086642


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-11
changelog:
  - Capture all necessary logs in sosreport.tar.gz
  - do not send ureport from abrt-applet
  - do not run gdb under root
  - Resolves: #1067114, #1069278, #1069719


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-9
changelog:
  - Stop consuming 100%CPU in abrt-upload-watch
  - Turn off Autoreporting
  - Enabled GPG check
  - Resolves: #1051480, #1063317


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-7
changelog:
  - Fix-handling-of-Machine-Check-Exceptions
  - abrt-harvest-vmcore recovers from Permission denied errors
  - never stop 'notify' event
  - install abrt-python files to arch specific dir
  - Resolves: #1032077, #1032511, #1057710
  - Related: #881123


author: Jakub Filak <jfilak@redhat.com> 2.1.11-5
changelog:
  - abrt-cli requires libreport-rhel (the reporting workflows)
  - applet: don't notify missing ignored_problems file
  - abrt-cli: show a hint about creating a case in RHTS
  - abrt-cli: show a info text suggesting enabling the autoreporting
  - Related: #1044424
  - Resolves: #1054291, #1055565, #1056980


author: Jakub Filak <jfilak@redhat.com> 2.1.11-3
changelog:
  - fix a double free error in abrt-applet
  - configure Augeas to parse only required files
  - show 'Close' button in the Configuration dialogue
  - Resolves: #1050167, #1053534, #1054158


author: Jakub Filak <jfilak@redhat.com> 2.1.11-2
changelog:
  - use elfutils stack unwinder
  - collect installed RPM details in sosreport
  - Resolves: #1048210, #1052920


author: Jakub Filak <jfilak@redhat.com> 2.1.11-1
changelog:
  - Update translations
  - harvest_vmcore: replace regexp config parsing with augeas
  - introduce D-Bus Configuration Service
  - mark koopses with unsupporeted HW as not-reportable
  - bodhi: use the right exit codes
  - abrt-handle-event: don't use already freed memory
  - introduce abrt-auto-reporting utility
  - abrt-action-notify: fix couple of flaws
  - Use satyr to compute koops duphash
  - koops: tweak koops parser for s390 Call Traces
  - configui: do not use deprecated gtk3 API
  - completely remove abrt-dedup-client
  - move /etc/abrt/abrt-harvest-vmcore.conf to /etc/abrt/plugins/vmcore.conf
  - Resolves: #1027259, #1035405, #1036585, #1040892, #1044424, #1050160


author: Jakub Filak <jfilak@redhat.com> 2.1.7-1
changelog:
  - fix debuginfo installer expecting user input from a pipe - closes #696
  - add environment variable whitelist to debuginfo install wrapper - closes #692
  - add repo_pattern argument as a custom repository filter - closes #688
  - abrt-cli list: replace "@" prefix by "id " prefix
  - fix a crash in 'abrt-cli info' when short id isn't found
  - Use common string-to-sha1_hash functions. #694
  - doc: update OpenGPGCheck in a-a-save-package-data rhbz#997922
  - abrt-cli report: accept sha1 hashes of directory names. #693
  - abrt-dump-oops: emit a message if throttling for a significant period of time
  - abrt-gdb-exploitable: print current instruction
  - spec: posttrans scriptlet regenerating core_backtraces
  - abrt-handle-event: add check for missing crash thread
  - provide tmpfiles.d configuration
  - abrt-cli list: use sha1 hash as short ids instead of @N thing. rhbz#906733
  - vmcore: fail gracefully if dump_dir is not accessible
  - spec: vmcore: require kexec-tools
  - vmcore: use re.MULTILINE instead of numerical value
  - vmcore: don't fail if /etc/kdump.conf is not readable
  - abrt-cli info: add "-s SIZE" option. closes #689
  - fix noninteractive mode in debuginfo installer - rhbz#737066
  - fixed the gpg keys loading - closes #686
  - Fix type of OPT_BOOL's referenced flag variable - it must be int, not bool!
  - adds a kdump.conf parser to get the correct dump dir location, closes #640
  - xorg_event.conf: use abrt-action-list-dsos to create dso_list
  - abrt-action-list-dsos: extend it to be able to parse Xorg backtrace.
  - don't require debuginfo for vmcore analysis rhbz#768389
  - specfile: make addon-pstoreoops obsolete addon-uefioops
  - abrt-dump-oops: add -t option which slows down problem creation. rhbz#902398.
  - rename uefioops to pstoreoops rhbz#949721
  - spec: create type element for problem dirs where it doesn't exist - rhbz#958968
  - introduce abrt-upload-watch
  - fix ccpp hook to create the type element - closes #682
  - specfile: use systemd-rpm macros. rhbz#850019
  - abrt-harvest-vmcore: notify new path - #657
  - abrt-dump-oops: remove redundant g_list_length() call, make messages clearer
  - updated translation - rhbz#860555
  - updated transifex url
  - GUI config: add Close/Defaults button
  - GUI config: hide option descriptions in tool tips
  - GUI config: add Silent shortened reporting support
  - applet: silent shortened reporting
  - applet: less misleading label for Ignore button
  - abrt-handle-upload: switch from shell to python; send socket notification. #657
  - spec: add build requires for XSMP depencies
  - applet: update seen list when X Session dies
  - improved the error messages in abrt-server - closes #679
  - fix typo in abrt-config-widget.ui
  - spec: add new packages abrt-gui-libs and abrt-gui-devel
  - delete desktop file for system-config-abrt
  - expose abrt configuration GUI in public API
  - rewrite abrt-harvest-uefioops to python - closes #678
  - spec: abrt-python is no longer noarch - related #677
  - created python binding for notify_new_path - closes #677
  - spec: install applet's desktop file to system dir
  - applet: configure notification source
  - rewrite shell script for moving vmcores into python closes #676
  - abrtd: ensure that the dump location directory exists
  - a-a-ureport: generate core_backtrace only for CCpp problems
  - do not store potentially big data in /tmp
  - abrt-dbus: send new problem notify signal to socket
  - abrtd: remove "post-create" machinery. Related to #657
  - Avoid leaving stale rpmdb locks behind (rhbz#918184)
  - abrtd: improve parsing of pidfile in create_pidfile()
  - abrt-dump-{oops,xorg}: send new problem notify signal to socket
  - abrtd: disable inotify watch on DUMP_LOC
  - abrt-hook-ccpp: send "POST /creation_notification" after creating problem dir
  - Stop dying in check_free_space(); rename it to low_free_space()
  - abrt-server: make create_problem_dir() run "post-create"
  - abrt-handle-event: create DUMP_LOC/post-create.lock when running "post-create"
  - abrt-server: add support for "POST /creation_notification"
  - abrt-handle-event: free more of allocated data
  - Resolves: #880694, #895745, #906733, #949721, #953927, #960549, #961520, #967644, #990208, #993591, #993592


author: Jakub Filak <jfilak@redhat.com> 2.1.6-1
changelog:
  - replace functions deprecated in Gtk-3.10 with their substitutes
  - integrate with satyr, drop btparser
  - use absolute path in python shebang rhzb#987010
  - abrt-action-save-package-data: properly close rpm database. Closes #674.
  - abrt-action-save-package-data: fix handling of ProcessUnpackaged on scripts
  - abrt-action-save-package-data manpage: typo fix
  - change /var/spool/abrt/ to /var/tmp/abrt in doc rhbz#912750
  - Fix RPMdiff warnings about abrtd and abrt-action-install-debuginfo-to-abrt-cache
  - specfile: add dependency on abrt-libs to abrt-addon-uefioops
  - stop using the hardcoded event list, use workflows instead rhbz#866027
  - retrace-client: build correct release for Fedora Rawhide
  - spec: drop unnecessary Obsoletes and Provides
  - correct FSF address in python exception hook
  - add missing manual pages for binaries and scripts
  - fix rpmlint issues in the spec file
  - move event option XML files to /usr/share/libreport/
  - abrt-hook-ccpp: always fall back to creating user core.
  - dbus: add GetForeignProblems method
  - the system tray icon opens recently detected problem
  - add gdb python plugin which analyzes coredump for vulnerability
  - applet: stop saving configuration at exit
  - introduce system-config-abrt
  - abrt-cli status: make the output more natural
  - Fix wrong path in shell include
  - abrt-dump-xorg: save "type=xorg" along with "analyzer=xorg"
  - Update python hook to use fixed socket interface
  - abrt-server: updates/fixes for future rasdaemon needs
  - Resolves: #988165


author: Jakub Filak <jfilak@redhat.com> 2.1.5-1
changelog:
  - abrt-retrace-client requires tar closes #635
  - abrt-tui requires abrt closes #633
  - a-d-oops: obtain kernel version from the oops
  - a-a-p-ccpp-analysis: import all used attributes
  - vmcore: provide all problem elements necessary for the reporting
  - a-d-oops: add 'update' command line argument
  - a-a-g-core-backtrace: don't crash if kernel file doesn't exist
  - a-a-a-vmcore: save kernel version in 'kernel' file
  - abrt-cli: make status help message more precise
  - abrt-cli status: don't include reported problems into count
  - abrt-cli list: implement --since and --until
  - abrt-python: open dirs read-only if possible
  - dbus: ChownProblemDir method really changes the owner
  - python: disable events in collision with anaconda
  - abrt-python requires pygobject2
  - systemd units: start services only if it make sense
  - abrt-harvest-uefioops.in: test for abrtd after testing for pstore, not before
  - make abrt-uefioops.service conditional on /sys/fs/pstore being populated
  - dbus: fix SetElement failing when shrinking an item
  - spec: fix unowned directories
  - abrt-python: whole python API path in POTFILES.skip
  - abrt-python: fix dbus compatibility on RHEL6
  - abrt-python: check if gid equals current users gid
  - abrt-python: fix tests compatibility with python 2.6
  - abrt-python: pass DD_OPEN_READONLY only if available
  - abrt-python: fix deprecation warnings
  - console notification shouldn't ask confirmation - closes #652
  - Short BT deduplication false positives workaround
  - Only problems of same type can be duplicates
  - abrt-python: fix bug in problem.get
  - abrt-python: pep8 cleanup
  - koops parse: support <NMI> frame prefix
  - don't show non critical errors in console notification
  - Resolves: #958961, #974670


author: Jakub Filak <jfilak@redhat.com> 2.1.4-1
changelog:
  - build abrtd and setuided executables with full relro rhbz#812284
  - added a console notification script to profile.d closes #641
  - return the right exit code for user cancellation
  - add more examples to Problem API doc
  - updated translation Related: #951416
  - Replace "THANKYOU" with EXIT_STOP_EVENT_RUN exit code (70)
  - abrt-action-ureport: rewrite in python, improve messages
  - abrt-cli: added 'status' command
  - abrt-cli: make "report -v[vv]" export correct $ABRT_VERBOSE value
  - bodhi, retrace: support /etc/os-release
  - abrt-action-generate-core-backtrace: be a bit more verbose
  - abrt-dump-oops: add "Machine Check Exception" to the list of watched strings rhbz#812537
  - abrt-action-install-debuginfo: do not assume os.execvp never returns
  - abrtd: mark unprocessed dump directories as not-reportable
  - abrtd: update last occurrence dump dir file
  - spec: remove the commented macros rhbz#864851
  - spec: added the versioned abrt-libs requires to silence rpmdiff rhbz#881123
  - spec: create a new subpackage for the console notification #641
  - spec: add deps. required for reporting to abrt-cli pkg
  - spec: inc required version of libreport


author: Jakub Filak <jfilak@redhat.com> 2.1.3-2
changelog:
  - Require correct version of libreport
  - Add dependecies required for reporting to abrt-cli package
  - Resolves: #947651


author: Jakub Filak <jfilak@redhat.com> 2.1.3-1
changelog:
  - record runlevel
  - Integration with satyr
  - dbus: check correct errno after dump_dir_is_accessible_by_uid()
  - require libreport workflow package acc. to OS type
  - remove the abrt-gui closes #629
  - retrace-client: do not allow space in os_release_id; closes #625
  - Remove all smolt-related files and code bits
  - abrtd: recreate Dump Location directory if it is delete


author: Jakub Filak <jfilak@redhat.com> 2.1.2-2
changelog:
  - Require correct version of libreport
  - Add a patch for abrtd which ensures that the dump location always exists
  - disable shortened and auto reporting in RHEL
  - Resolves: #918040, #918041


author: Jakub Filak <jfilak@redhat.com> 2.1.2-1
changelog:
  - Improve log messages
  - Update translation
  - Introduce helpers for management of list of ignored problems
  - applet: show a confirmation notify bubble for reported problems in ShortenedReporting mode
  - applet: mark problems as ignored and don't notify ignored problems
  - applet: remove confusing "Show" button
  - applet: pass problem's id to the gui app
  - abrt-ccpp: try to read hs_err.log from crash's CWD
  - abrt-action-perform-ccpp-analysis: Complain if analyze_RetraceServer can't run. Closes 619
  - abrt-gui: change URL to point to most recent doc
  - add abrt-action-analyze-ccpp-local to ccpp-addon related to rhbz#759443
  - analyze-ccpp don't suid to abrt when run as root, related rhbz#759443
  - abrtd: prohibit DumpLocation == WatchCrashdumpArchiveDir. Closes rhbz#854668
  - abrtd: don't blame interpreter, blame the running script #609
  - a-a-ureport: don't fail on missing counter file
  - a-a-ureport: allow to send ureport more than once
  - dbus doc: install abrt-dbus documentation files to the correct places
  - dbus doc: extend the documentation of DBus API
  - dbus doc: make xml interface parseable by qtdbusxml2cpp
  - dbus: add basics to a new problem
  - abrt-harvest-vmcore: don't copy dir from var/spool if copy already exists
  - fix path in the collect_xsession_errors event
  - retrace-client: print dots instead of repeated status message
  - move abrt.pth to arch specific location rhbz#912540
  - Make forking code paths more robust.
  - add more logging to catch "stuck core-backtrace" problem; reduce gdb looping
  - Resolves: #879160, #854668, #885044, #903005, #905412, #909968, #912540


author: Jakub Filak <jfilak@redhat.com> 2.1.1-1
changelog:
  - add SETGID bit to abrt-action-install-debuginfo-to-abrt-cache
  - add abrt-desktop depency on libreport-fedora
  - abrt-dump-{oops,xorg}: limit amount of created dirs, add cooldown sleep if exceeded
  - abrt-watch-log: handle a case when child doesn't process its input
  - abrt-watch-log: fix a bug in mmap error check
  - abrt-action-analyze-xorg: fix the case with DIR != "."
  - Resolves: #908256


author: Jakub Filak <jfilak@redhat.com> 2.1.0-1
changelog:
  - pkg-config: export defaultdumplocation variable
  - configure: set default dump location to /var/tmp/abrt
  - abrtd: sanitize mode and ovner of all elements
  - updated translation
  - abrtd-inotify-flood test: expend it to check for another inotify-related bug
  - gnome-abrt is default GUI
  - applet: on requrest open gnome-abrt instead of abrt-gui
  - Make it so that g_io_channel_read_chars(channel_inotify) does not buffer data.
  - multilib fixes
  - daemon: unify accessibility check before delete with dbus
  - dbus: move dir accessibility check from abrt to libreport
  - dbus: user dd_chown instead of own impl.
  - allow default dump directory to be configured through cmd line args
  - introduce abrt-python
  - reporter-bz: post a comment to dup bug, if we found a dup. version 2.
  - replace left over magic dd modes by macro
  - synchronize default dump dir mode with libreport
  - replace all occurrences of hardcoded dump location by a variable
  - harvest-vmcore: read dump dir path from configuration
  - use lchown when chowning files over dbus
  - use lchown when chowning newly created problem directory
  - verify-that-report-edits test: fix to account for new CLI interface
  - koops: add all x86 TRAP prefixes to list of suspicious strings
  - koops: put all suspicious strings to global variable
  - applet: extend comment. No code changes
  - applet: introduce shortened reporting
  - abrt-applet: handle SIGTERM and perform nice termination
  - abrt-applet: update the seen list on every possible action
  - applet: don't notify outdated new problems
  - Add and use "report-cli" event instead of removed "report-cli -r" option
  - fixed the relro flags rhbz#812284
  - applet: unref unused GIOChannel
  - Resolves: #892230, #895742


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.20-1
changelog:
  - New version 2.0.20
  - Fix typo: usefull->useful
  - koops: generate core backtrace if missing
  - udpated po files
  - Cosmetic fixes in abrtd-inotify-flood test
  - Hook up abrtd-inotify-flood to test infrastructure
  - Add a testcase for inotify flood
  - replace 'Start Autoreport' btn by a popup dialog
  - dbus: NewProblem returns full path as problem_id
  - abrt-action-analyze-xorg: fix /usr/include/paths.h -> paths.h
  - abrtd: set inotify fd to non-blocking mode; ignore 0-sized inotify reads. Closes rhbz#873815
  - s/ABRT dump/problem directory/g
  - abrt-applet: don't leak component name
  - abrt-applet: alerts only not reported problems
  - build system: Remove leftover of abrt-action-analyze-xorg shell script
  - Rewrite abrt-action-analyze-xorg in C (partially)
  - rework abrt-gui>Help>'Report problem with ABRT'
  - abrt-action-analyze-oops: fix help text - we have no -s option
  - Help text fix - using "problem directory" consistently
  - abrt-dump-oops: add list of tainted modules to NOT_REPORTABLE string. Closes trac#821
  - a-a-p-c-a: use ask_yes_no_yesforever() fn from reportclient
  - abrt-dump-oops: save /proc/modules contents. Partially closes trac#821
  - add ureporter wrapper sending ureport only once per problem dir
  - introduce Desktop Session Autoreporting
  - add Autoreporting configuration options
  - abrt-action-analyze-xorg: robustify 'test "a" = "b"' against bugs
  - Collect ~/.xsession_errors from its new path, if it is there. Closes trac#791
  - reflect recent libreport API changes .trac#822
  - Indentation fix. No code changes.
  - minor fix to previous commit realted to .trac#541
  - don't use gtk_main* when using gtk_application .trac#890
  - minor fix to quit button
  - Make "Open problem data" open the expert mode GUI
  - Teach kernel oops hash to ignore "<IRQ>" / "<EOI>" prefixes. Closes rhbz#875852
  - introduce DeleteElement D-Bus method
  - introduce SetElement D-Bus method
  - allow only one instance of gui trac#541
  - runtests/bugzilla-comment-format: fix false positive AGAIN
  - update translations
  - a-a-p-c-a: use correct name in gettext initialization
  - Fix build system so that make rpm works again
  - runtests/bugzilla-comment-format: fix false positive
  - Improve xorg post-create. closes trac#838
  - Update po files
  - fix problem occurrence counter updating algorithm
  - abrt-dbus: immediately return an error if not-existing problem is requested
  - bugzilla-comment-format: new test
  - a-a-p-c-a: use event python API instead of abrt-handle-event
  - doc: add dbus problems service specification


author: Jakub Filak <jfilak@redhat.com> 2.0.19-1
changelog:
  - call g_type_init() only in GLib version < 2.35
  - plugins/*_event.conf: use reporter-bz -F FMTFILE as appropriate
  - repeat unchaged retrace status message only in verbose mode
  - check the correct return value of yesforever answer
  - abrt-handle-event: forward event process requests to parent
  - don't leak optional retrace path and kernel tainted string
  - enhance koops tainted flag parser
  - Use "comment" element instead of "description"
  - Resolves: #873488


author: Jakub Filak <jfilak@redhat.com> 2.0.18-1
changelog:
  - bugzilla-dupe-search: fix os_release to contain the same OS version as bug 755535
  - Do not stop reporting when GConf entry is not found. Closes rhbz#869833
  - Fix false positive caused by English language fix
  - pyhook: import inspect lazily
  - Resolves: #869833


author: Jakub Filak <jfilak@redhat.com> 2.0.17-1
changelog:
  - provide a problem item containing versions of binaries listed in Xorg backtrace
    Adresses #867694 comment 1
  - import rpm lazily
  - Resolves: #864324


author: Jakub Filak <jfilak@redhat.com> 2.0.16-1
changelog:
  - xorg_event: make post-create save dmesg, drop problems w/ binary modules
    Partially addresses: #856790
  - collect_xsession_errors should not fail if !xsession-errors
    Resolves: #866698


author: Jakub Filak <jfilak@redhat.com> 2.0.15-1
changelog:
  - add collect_* event to reporting chains for CCpp/Python/Kernel
  - core-backtrace: make sure kernel version does not contain spaces
  - core-backtrace: also include '?' flag for kerneloops
  - don't check EXECUTABLE if it isn't present in list
  - retrace-client: check whether all included files are regular
  - abrt_exception_handler.py: save 'environ' element
  - add Makefile target release-fix
  - Make it possible for developer to disable crash processing for specific apps. Closes rhbz#848786
  - s/Dump directory/Problem directory/
  - Resolves: #864014, #864331, #848786


author: Jakub Filak <jfilak@redhat.com> 2.0.14-1
changelog:
  - abrt-dump-oops: save /sys/kernel/debug/suspend_stats. Closes rhbz#787749
  - abrt-hook-ccpp: save /proc/sys/crypto/fips_enabled value if it isn't "0". Closes rhbz#747870
  - abrt-dump-oops: save /proc/sys/crypto/fips_enabled value if it isn't "0". Closes rhbz#747870
  - abrt-action-analyze-oops: fail if we end up hashing "" (empty string). Closes rhbz#862013
  - retrace-client: respect chrooted os_release in pkgcheck
  - Added oops_recursive_locking1.right to Makefile.am
  - fix koops-parser.at, remove bastardized copy of oops_recursive_locking1.test
  - add new oops example (currently fails, the fix is coming up)
  - fix oops jiffies time stamp counter removal code
  - trivia: s/dump/problem directory; fix false positive in oops-with-jiffies.right
  - testsuite: added f18 kickstart
  - open files for appned not for write rhbz#854266
  - added more info about locking - rewrote with vda's comments rhbz#859724
  - ccpp_event.conf: ignore crashes with nonzero TracerPid. Closes rhbz#812350
  - show more info when abrtd can't acquire lock on pid, related to rhbz#859724
  - abrt-hook-ccpp: save "proc_pid_status" element
  - use FILENAME_ABRT_VERSION instead of string literal
  - Fix pyhook test to reflect changes made in write_dump
  - trac#333: Add code generating dso_list to the python hook
  - spec: tui should require libreport-cli rhbz#859770
  - trac#682: emit Crash DBus signal on org.freedesktop.problems bus
  - spec: added deps on elfutils rhbz#859674
  - Resolves: #859674, #859770, #859724, #812350, #854266, #862013, #747870, #787749


author: Jakub Filak <jfilak@redhat.com> 2.0.12-1
changelog:
  - move abrtd.pid to /var/run/abrt/abrtd.pid
  - abrt-harvest-vmcore: add CopyVMcore config option to copy vmcores. Closes 448, rhbz#811733, rhbz#844679
  - update po files rhzb#800784
  - applet: fix a SEGV caused by notify_init() not being called
  - minor fix to pkg-config file
  - ignore results of setregid() and setreuid() after glibc update
  - hopefully fixed ugly applet icon rhbz#797078
  - add update of abrt server database to event chains
  - Resolves: #761431, #811733, #844679, #797078


author: Jakub Filak <jfilak@redhat.com> 2.0.11-2
changelog:
  - fix abrt-dbus crash if no element is found in GetInfo()
  - set sending-sensitive-data option to 'yes' for analyze_RetraceServer event


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.11-1
changelog:
  - new upstream release
  - Resolves: #622773, #741222, #823299, #825116, #826058, #826800, #831333, #832085, #838842


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.10-1
changelog:
  - new upstream release
  - fixed problem with empty problem directory rhzb#808131
  - fixed exception in a-a-a-core when eu-unstrip output is broken
  - Resolves: #808131, #804309


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.7-1
changelog:
  - new version
  - disabled kerneloops.org
  - abrt-ccpp hook fixes
  - catch indentation errors in python rhbz#578969
  - fixed make check
  - fixed retrace-client to work with rawhide
  - require abrtd service in other services rhbz#752014
  - fixed problems with dupes rhbz#701717
  - keep abrt services enabled when updating F15->F16
  - Resolves: 752014 749891 749603 744887 730422 665210 639068 625445 701717 752014 578969 732876 757683 753183 756146 749100


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.6-1
changelog:
  - new version
  - Resolves: #701171 #712508 #726033 #728194 #728314 #730107 #733389 #738602
  - Resolves: #741242 #749365 #700252 #734298 #736016 #738324 #748457 #692274
  - Resolves: #711986 #723219 #749891 #712602 #744887 #749603 #625445 #665210
  - Resolves: #737991 #639068 #578969 #636000 #631856


author: Nikola Pajkovsky <npajkovs@redhat.com> - 2.0.4.981-3
changelog:
  - don't file kernel bugs if "tainted: B" is set.
  - don't file bugs about BIOS bugs.
  - incorrect TAINTED description in bugs.
  - Resoves: #718097 #708534 724838


author: Jiri Moskovcak <jmoskovc@redhat.com> - 2.0.4.981-1
changelog:
  - updated translation
  - don't allow to skip the analyze step
  - don't send ~ backups
  - added hint to report only in English
  - renamed abrt-action-kerneloops -> reporter-kerneloops
  - explain option bugtracker and logger
  - gui added padding to main window
  - better message when gdb time outs
  - added support for catching vmcores
  - added version to Logger output
  - [RFE] abrt should have an easy way to include smolt-profile
  - Resolves: #694828 #694833 #704958 #735071 #731189 #739182 #704452 #734037 #606123 #631822


author: Jiri Moskovcak <jmoskovc@redhat.com> - 2.0.4-4
changelog:
  - fixed sigsegv in a-a-save-package-data rhbz#737961
  - fixed privs for /var/run/abrt rhbz#725974
  - fixed segv in free space check
  - Resolves: #737961 #725974


author: Jiri Moskovcak <jmoskovc@redhat.com> - 2.0.4-1
changelog:
  - new upstream version
  - resolves wrong provs/obsolete rhbz#723376
  - split main UI into two panes
  - debuginfo-install script asks before downloading
  - Resolves: #723376


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.2-1
changelog:
  - updated translation
  - new icons (thanks to Lapo Calamandrei)
  - changed address of retrace01 to retrace
  - fixed problem with not trusted ssl certificate #695977
  - #692713 Dialogue Box Buttons Wrong Way Around
  - #695452 abrt crashing when trying to generate backtrace
  - #698458 RFE: report separators between reports in abrt.log
  - #699098 999 futile attempts to delete excess debuginfo
  - #691881 GUI doesn't sort by last occurrence by default, and doesn't remember that sort order if you set it and restart the app
  - #698418 Can't access '/var/spool/abrt/ccpp-2011-04-18-11:53:22-2661': Permission denied
  - #698934 abrt-applet segfault on abrtd restart
  - #695450 Retrace client - show meaningful message on failure
  - #616407 RFE: Change abrt to catch TRAP signal crashes
  - #584352 running service abrtd a non-root user doesn't show error
  - retrace client: fail on servers with problematic SSL certificates (kklic@redhat.com)
  - retrace-client: Load system-wide certificates. Move NSS init/shutdown to main, as it shouldn't be run multiple times. (kklic@redhat.com)
  - abrt-cli: update manpage. Closes #243 (dvlasenk@redhat.com)
  - move abrt-handle-crashdump to abrt-cli package. No code changes (dvlasenk@redhat.com)
  - add abrt-action-print manpage. Closes #238 (dvlasenk@redhat.com)
  - add abrt-action-trim-files manpage. Closes #241 (dvlasenk@redhat.com)
  - added abrt-action-generate-backtrace manpage (dvlasenk@redhat.com)
  - add abrt-action-analyze-backtrace manpage. Closes #227 (dvlasenk@redhat.com)
  - retrace server: do not create zombie workers (mtoman@redhat.com)
  - btparser: Remove top frame with address 0x0000 (jump to NULL) during normalization to avoid incorrect backtrace ratings (rhbz#639049) (kklic@redhat.com)
  - abrt-gui: better list refreshing. Closes #251 (dvlasenk@redhat.com)
  - fix for spurious "Lock file 'DIR/.lock' is locked by process PID" message (dvlasenk@redhat.com)
  - Asciidoc manpage support; abrt-action-mailx manpage (kklic@redhat.com)
  - list-dsos: don't list the same library multiple times (jmoskovc@redhat.com)
  - call abrt-action-trim-files from abrt-action-install-debuginfo (dvlasenk@redhat.com)
  - list-dsos: added package install time trac#123 (jmoskovc@redhat.com)
  - retrace client: handle messages in HTTP body (mtoman@redhat.com)
  - retrace server: remove chroot on failure (mtoman@redhat.com)
  - spec: use versioned deps on libreport (jmoskovc@redhat.com)
  - generate abrt version from git (npajkovs@redhat.com)
  - abrt-action-trim-files needs to be suided rhbz#699098 (jmoskovc@redhat.com)
  - gui: suppress printing dumpdir access errors (bz#698418) (mlichvar@redhat.com)
  - Do not leave dump dir locked by abrt-action-generate-backtrace. (kklic@redhat.com)
  - wizard: expand explanatory text on 1st screen. Closes 201 (dvlasenk@redhat.com)
  - gui: fixed the OK and CANCEL buttons order in event config dialog (jmoskovc@redhat.com)
  - Make abrt-action-list-dsos.py take -m maps -o dsos params; and abrt-action-analyze-core.py to take -o build_ids param (dvlasenk@redhat.com)
  - abrt-action-install-debuginfo.py: don't die on some Yum exceptions. closes bz#681281 (dvlasenk@redhat.com)


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.1-1
changelog:
  - updated to 2.0.1
  - updated translation
  - allowed reporting oops to bugzilla
  - added warning when the plugin settings are wrong
  - added help text in plugins settings
  - the plugin settings dialog is translatable
  - improved dir rescanning logic in abrt-gui
  - fixed icons for child dialogs
  - retrace-client: human readable messages instead of http codes
  - save envirnment variables when app crashes
  - fixed gpg/pgp check
  - revert to the old icon


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.0-3
changelog:
  - fixed notification persistence in gnome3 (again)
  - fixed wrong group:user on /var/cache/abrt-di afte rupdate from abrt 1.x #692064
  - added mono-core to blacklist


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.0-2
changelog:
  - use %ghost on files in /var/run and /var/lock rhbz#656542
  - fixed notification persistence in gnome3
  - added analyze selector to CLI
  - refuse reporting to bz without backtrace or hash
  - use g_set_prgname to set the prgname of abrt-gui trac#180


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.1.17-1
changelog:
  - rewritten abrt-debuginfo-install script to use the yum API
  - GUI: added search box to backtrace view rhbz#612017 (jmoskovc@redhat.com)
  - fixed some gui warnings rhbz#671488 (jmoskovc@redhat.com)
  - btparser/dupechecker improvements:
    - Better handling of glibc architecture-specific functions (kklic@redhat.com)
    - support format of thread header: "Thread 8 (LWP 6357):" (kklic@redhat.com)


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.1.16-1
changelog:
  - rhtsupport: added list of attachments to comment rhbz#668875
  - rhtsupport: stop consuming non-standard header rhbz#670492
  - Resolves: #670492, #668875


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.1.15-1
changelog:
  - removed unused files (jmoskovc@redhat.com)
  - update po files (jmoskovc@redhat.com)
  - removed some unused files (jmoskovc@redhat.com)
  - pass old pattern to ccpp hook and use it (dvlasenk@redhat.com)
  - GUI: added warning when gnome-keyring can't be accessed rhbz#576866 (jmoskovc@redhat.com)
  - 666893 - Unable to make sense of XML-RPC response from server (npajkovs@redhat.com)
  - PyHook: ignore SystemExit exception rhbz#636913 (jmoskovc@redhat.com)
  - 665405 - ABRT's usage of sos does not grab /var/log/messages (npajkovs@redhat.com)
  - add a note in report if kernel is tainted (npajkovs@redhat.com)
  - KerneloopsScanner.cpp: make a room for NULL byte (npajkovs@redhat.com)
  - fix multicharacter warring (npajkovs@redhat.com)
  - open help page instead of about rhbz#666267


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.1.14-1
changelog:
  - made howto mandatory
  - fixed segv in abrt-hook-ccpp rhbz#652338
  - added warning if kernel was tainted
  - make the "install debuginfo" hint selectable rhbz#644343
  - wrap howto and comments rhbz#625237
  - wrap lines in the backtrace window rhbz#625232
  - changed '*' to '•' rhbz#625236
  - make the bt viewer not-editable rhbz#621871
  - removed unneeded patches


