# changelog

author: Steven Dake <sdake@redhat.com> 0.80.6-16.2
changelog:
  - Resolves: rhbz#588897
  - Resolves: rhbz#588895
  - Resolves: rhbz#588628
  - Resolves: rhbz#588627
  - Add upstream revision 2130 - Resolve problem where ring id is not saved
    and restored when recovery is interrupted.
  - Add upstream revision 2129 - Resolve problem where highly lossy networks
    will sigabort (assert) if 512 or more entries are originated in recovery.
  - Add upstream revision 2128 - Use proper typing for retransmit token storage
    area.
  - Add upstream revision 2127 - Fix stack corruption that happens because of
    invalid length in memmove operation on highly lossy networks.


author: Steven Dake <sdake@redhat.com> 0.80.6-16.1
changelog:
  - Resolves: rhbz#577887
  - Add upstream revision 2122 - Fix problem that can result in failed to receive state.


author: Steven Dake <sdake@redhat.com> 0.80.6-16
changelog:
  - Resolves: rhbz#566467
  - Add upstream revision 2121 - Fix lockup in atexit handler registered by
    print.c that occurs less then 1% of the time.  This is resolved by calling
    a special version of log_flush before calling exit, and not relying on the
    atexit handler to call pthread_cond_wait.


author: Steven Dake <sdake@redhat.com> 0.80.6-15
changelog:
  - Resolves: rhbz#560313
  - Add upstream revision 2117 - fix problem where ipc doesn't differentiate
    between full buffer and empty buffer properly resulting in cpg message
    corruption


author: Steven Dake <sdake@redhat.com> 0.80.6-14
changelog:
  - Resolves: rhbz#515590
  - Add upstream revision 2097 - Ensure IPC memory is 1mb instead of 477k.
  - actually apply patch in spec file.


author: Steven Dake <sdake@redhat.com> 0.80.6-12
changelog:
  - Resolves: rhbz#529054
  - Resolves: rhbz#525280
  - Resolves: rhbz#519159
  - Resolves: rhbz#540267
  - Resolves: rhbz#540490
  - Resolves: rhbz#544680
  - Resolves: rhbz#544682
  - Resolves: rhbz#545151
  - Resolves: rhbz#547828
  - Resolves: rhbz#525280
  - Resolves: rhbz#515159
  Add upstream revision 2079 - remove segfault from calling saClmTrackStart more then one time.
  Add upstream revision 2081 - cpg can use a variable after it is freed.
  Add upstream revision 2081 - netmask was being anded with broadcast address, not interface address resulting in invalid binding if netmask was not 255.255.255.x.
  Add upstream revision 2089 - originating many messages in recovery results in lockup.
  Add upstream revision 2090 - originating many messages in recovery results in lockup.
  Add upstream revision 2091 - recovery protocol implementation doesn't reset variable properly.
  Add upstream revision 2092 - String buffer overflow can occur if many messsages are originated during recovery.
  Add upstream revision 2094 - Remove invalid assertion in totemsrp.

  Add upstream revision 2095 - Remove stack overflow within aisexec.
  Add upstream revision 2096 - Prevent ckpt iterations from occuring during sync.


author: Steven Dake <sdake@redhat.com> 0.80.6-11
changelog:
  - Resolves: rhbz#509180
  - Resolves: rhbz#526069
  - Resolves: rhbz#474400
  - Resolves: rhbz#520164
  Add upstream revision 2039 - Remove implicit declartion in code.
  Add upstream revision 2040 - Don't segfault with ais group doesn't exist in system. 
  Add upstream revision 2043 - Properly shutdown service engines on ctrl-c.
  Add upstream revision 2044 - Resolve cpg race condition during synchronization.
  Add upstream revision 2054 - Resolve random error code returned by saCkptCheckpointOpen.


author: Steven Dake <sdake@redhat.com> 0.80.6-10
changelog:
  - Resolves: rhbz#520012
  - Add upstream revision 2053 - Ensure 9000 MTU doesn't assert totemsrp.
  - Actually apply patch during build.


author: Steven Dake <sdake@redhat.com> 0.80.6-8
changelog:
  - Resolves: rhbz#506119
  - Add upstream revision 1998 - Ensure that leaving processors in totempg have
    their assembly state reset.


author: Steven Dake <sdake@redhat.com> 0.80.6-7
changelog:
  - Resolves: rhbz#506778
  - Add upstream revision 1959 - fix leaking of shared memory objects during
    shutdown of cman.


author: Steven Dake <sdake@redhat.com> 0.80.6-2
changelog:
  - Resolves: rhbz#501561
  - Resolves: rhbz#501337
  - Resolves: rhbz#492808
  - Resolves: rhbz#497480
  - Add upstream revision 1928 - Fix race condition in cpg join/leave operations.
  - Add upstream revision 1926 - Adds feature to allow uidgid files to be added
    to /etc/ais directory to allow external users to specify uid and gids to
    access the system.
  - Add upstream revision 1925 - Adds feature to allow rolling crypto upgrades
    from openais-0.80.6-2 to corosync.
  - Add upstream revision 1924 - Adds feature to use broadcast instead of
    multicast.  To enable this feature, the broadcast: yes option should be
    specified.


author: Steven Dake <sdake@redhat.com> 0.80.6-1
changelog:
  - Resolves: rhbz#494347
  - Resolves: rhbz#494035
  - Resolves: rhbz#496985
  - Resolves: rhbz#497419
  - Resolves: rhbz#497420
  - Resolves: rhbz#499767
  - Fixes problem with cpg_init not returning security error code.
  - Fixes problem with not starting redundant ring
  - Fixes regression with cluster mirror and in general DOA openais rpm.
  - Fix problem where first message is thrown away in new configuration.
  - Fixes problem where ipc connect/disconnect in cpg service segfaults aisexec.
  - Fixes problem where openais segfaults on ppc64 platforms.


author: Steven Dake <sdake@redhat.com> 0.80.5-5
changelog:
  - Resolves: rhbz#490098
  - Resolves: rhbz#490099
  - Add upstream revision 1753 - Serialize ipc access.
  - Add upstream revision 1752 - Remove break from cpgbench.
  - Add upstream revision 1750 - Remove pass by value in the ckpt ervice.
  - Add upstream revision 1749 - Remoe extra debugging output.
  - Add upstream revision 1747 - Fix reference counting problem in ckpt service.


author: Steven Dake <sdake@redhat.com> 0.80.5-4
changelog:
  - Resolves: rhbz#487214
  - Resolves: rhbz#488095
  - Resolves: rhbz#489451
  - Add upstream revision 1743 - autogenerated node ids cause CPG not to issue synchronization of the process group information.
  - Add upstream revision 1742 - 5.2->5.3 rolling upgrades.
  - Add upstream revision 1740 - removes segfault in cpg service when ipc connection disconnects and no groups are joined to the cpg group (ipc regression).
  - Add upstream revision 1739 - removes assert in multicast operations under overload.


author: Steven Dake <sdake@redhat.com> 0.80.5-3
changelog:
  - Resolves: rhbz#474277
  - Resolves: rhbz#477243
  - Resolves: rhbz#480684
  - Resolves: rhbz#261381
  - Add upstream revision 1737-1738 cherrypicked & backported - Fix assertion in totempg usage.
  - Add upstream revision 1735 cherrypicked - Allow lib_exit_fn to be called early so that lib_init_fn can use refcounting ipc functions.
  - Add upstream revision 1734 cherrypicked - Add IPC refcounting to CPG service.


author: Steven Dake <sdake@redhat.com> 0.80.5-2
changelog:
  - Resolves: rhbz#474277
  - Resolves: rhbz#477243
  - Resolves: rhbz#480684
  - Resolves: rhbz#261381
  - openais-0.80.5.tar.gz was missing three commits that I expected were in the tarball.
  - Add upstream revision 1692 - Add to message size in totempg operation.
  - Add upstream revision 1691 - Execute proper list_init operation.
  - Add upstream revision 1690 - Execute proper list_del operation.


author: Steven Dake <sdake@redhat.com> 0.80.5-1
changelog:
  - Resolves: rhbz#474277
  - Resolves: rhbz#477243
  - Resolves: rhbz#480684
  - Resolves: rhbz#261381
  - Add upstream revision 1698 - Complete IPC rewrite.
  - Add upstream revision 1697 - BSD compatability patch.
  - Add upstream revision 1694 - BSD compatability patch.
  - Rebase to 0.80.5 to fix above Red Hat bugzilla IDs.


author: Steven Dake <sdake@redhat.com> 0.80.3-22
changelog:
  - Resolves: rhbz#471896
  - Add upstream revision 1665 - Compare local address with bindnetaddr properly.
  - Add upstream revision 1664 - Use node's full ipv4 address when generating nodeids.
  - Add upstream revision 1662 - Fix segfault when user with inappropriate access permissions accessed aisexec.


author: Steven dake <sdake@redhat.com> 0.80.3-20
changelog:
  - Resolves: rhbz#441413
  - Add upstream revision 1661 - Fix a message lost during delivery which resulted in checkpoing service segfaulting.
  - Add upstream revision 1660 - Fix commit token received_flg being incorrect in some rare circumstances.
  - Add upstream revision 1659 - Fix rare problem where checkpoint synchronizatoin database could be thrown away.
  - Add upstream revision 1655 - Allow 31 bit nodeid's which default to off.


author: Steven Dake <sdake@redhat.com> 0.80.3-19
changelog:
  - Resolves: rhbz#442102
  - Add upstream revision 1653 - Schedule ipc dispatch thread at same priority as aisexec.
  - Add upstream revision 1652 - Remove more signal flooding problems in ipc dispatch thread.
  - Add upstream revision 1651 - Remove signal flooding of the ipc dispatch thread.


author: Steven dake <sdake@redhat.com> 0.80.3-8
changelog:
  - Resolves: rhbz#444909
  - Add upstream revision 1647 - Change log level output of a logging message.
  - Add upstream revision 1646 - Add test case.
  - Add upstream revision 1645 - Remove ipc deadlock in overload conditions.
  - Add upstream revision 1644 - Make lib_exit_fn work properly.
  - Add upstream revision 1643 - Remove checkpoint expiration assertions.
  - Add upstream revision 1642 - Remove checkpoint close assertion.


author: Steven Dake <sdake@redhat.com> 0.80.3-16
changelog:
  - Resolves: rhbz#400491
  - Add upstream revision 1521 - Compile on latest glibc.
  - Add upstream revision 1524 - Fix syscall usage in keygen application.
  - Add upstream revision 1546 - Fix build for authentication on bsd platforms.
  - Add upstream revision 1548 - Fix synchronization of checkpoint global id.


author: Steven Dake <sdake@redhat.com> - 0.80.3-15
changelog:
  - Resolves: rhbz#432531
  - Add upstream revision 1514 - Remove extra log_printf.
  - Add upstream revision 1513 - Remove comparison with zero and replace with comparison with NULL in handle database code.
  - Add upstream revision 1512 - Remove early commit of synchronization data when a synchronization in progress is followed by a node leaving or joining the cluster.
  - Add upstream revision 1511 - Remove double pthread_mutex_destroy from evt service.
  - Add upstream revision 1510 - Remove double pthread_mutex_destroy from evs service.
  - Add upstream revision 1509 - Remove double pthread_mutex_destroy from cpg service.
  - Add upstream revision 1508 - Remove double pthread_mutex_destroy from clm service.
  - Add upstream revision 1507 - Remove double pthread_mutex_destroy from checkpoint service.


author: Steven Dake <sdake@redhat.com> - 0.80.3-14
changelog:
  - Resolves: rhbz#432531
  - Add upstream revision 1506 - Resolves incomplete checkpoing synchronization when totem queue is full.


author: Steven Dake <sdake@redhat.com> - 0.80.3-13
changelog:
  - Resolves: rhbz#432531
  - Add upstream revision 1504 - Fixes checkpoint synchronization issue when a new node is started.
  - Add upstream revision 1503 - backport -f foreground option.
  - Add upstream revision 1502 - Revert revision 1477 which exhibits problems with cman.
  - Add revision 1477 - This was reverted in a previous version but cherrypicked.  Now the patch has been applied and reverted in the rpm build process to match upstream.


author: Steven Dake <sdake@redhat.com> - 0.80.3-11
changelog:
  - Resolves: rhbz#429920
  - Add upstream revision 1500 - IPC locks up if a POLLERR is returned in certain circumstances.
  - Resolves: rhbz#433839
  - Add upstream revision 1501 - A mcast is delivered before a join in some circumstances.


author: Steven Dake <sdake@redhat.com> - 0.80.3-8
changelog:
  - Resolves: rhbz#249287
  - Add non-merged IPC changes for fixing operation with cluster mirror
  - Resolves: rhbz#403901
  - Add upstream revision 1498 - enhance openais_exit_error to report string instead of error code
  - Resolves: rhbz#309621
  - Add upstream revision 1497 - Follow LSB guidelines for initscript
  - Add upstream revision 1496 - Revert patch 1480 since it causes problems with cman
  - Add upstream revision 1493 - Backport of patch 1379 to remove this_ip and replace with accessor functoins for use by ipc system
  - Add upstream revision 1486 - Unlock mutex on error condition of no memory when creating handle
  - Add upstream revision 1480 - Endian fixes for the totempg code
  - Add upstream revision 1479 - Remove & when regular reference works properly.
  - Add upstream revision 1478 - Patch to set system_from properly in retransmitted messages
  - Add upstream revision 1473 - Fix pthread_equal for timer_delete operation
  - Add upstream revision 1471 - Endian convert cpg downlist messages properly
  - Add upstream revision 1469 - change initialDataSize paramter from saUint32gt to SaSizeT to match specifications


author: Steven Dake <sdake@redhat.com> - 0.80.3-5
changelog:
  - Resolves: rhbz#302341
  - Add upstream revision 1455 - Fix loss of node joins in commit state resulting in looping of membership protocol.
  - Add upstream revision 1453 - Fix assertion if component registration occurs during certain phases of instantation.
  - Add upstream revision 1450 - Fix reference counting in lcr code so that lcr_ifact_release works properly.
  - Add upstream revision 1449 - Allow missing services in synchronization to not cause a segfault.k
  - Add upstream revision 1446 - Remove inadvertant commit of changes to totemsrp which happened when security changes were patched in revision 1426.
  - Add upstream revision 1426 - Patch to log security warnings when invalid identifier is used in message header for a totem header.


author: Steven Dake <sdake@redhat.com> - 0.80.3-4
changelog:
  - Resolves: rhbz#251082
  - Add upstream revision 1423 - Fix synchronization defect resulting in segfault.
  - This is the fc6 build.


author: Steven Dake <sdake@redhat.com> - 0.80.3-2
changelog:
  - Resolves: rhbz#209862
  - Add upstream revision 1406 - Filter commit token when it is retransmitted.
  - Resolves: rhbz#249506
  - Add upstream revision 1407 - Reset consensus array on entering operational mode.
  - Resolves: rhbz#249509
  - Add upstream revision 1408 - Store the ring id information properly when it changes.
  - Resolves: rhbz#247733
  - Add upstream revision 1409 - Add subtractor to availability of message entries for the totem message queue
  - This is the rhel5 version of 0.80.3-0 with some upstream patches.


author: Steven Dake <sdake@redhat.com> - 0.80.3-1
changelog:
  - Resolves: rhbz#243119
  - Resolves: rhbz#221190
  - Resolves: rhbz#224190
  - Resolves: rhbz#233892
  - Resolves: rhbz#236549
  - New upstream version including all previous revisions.
  - This is the fc6 version of 0.80.3-1.


author: Steven Dake <sdake@redhat.com> - 0.80.3-0
changelog:
  - Resolves: rhbz#243119
  - Resolves: rhbz#221190
  - Resolves: rhbz#224190
  - Resolves: rhbz#233892
  - Resolves: rhbz#236549
  - New upstream version including all previous revisions.
  - This is the rhel5 version of 0.80.3-0.


author: Steven Dake <sdake@redhat.com> - 0.80.2-0
changelog:
  - Resolves: rhbz#211357
  - New upstream version including all prevision revisions.
  - Fixes cpg ordering problem.
  - Fixes ia64 unaligned problem.
  - This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-21
changelog:
  - Resolves: rhbz#216492
  - Add upstream revision 1319 - Increase outbound buffer size to 5000 messages.
  - Add upstream revision 1316 - Improvements on segfault logging.
  - This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-18
changelog:
  - Add upstream revision 1315 - Fix compile error in libcpg.
  - Add upstream revision 1314 - Change rundir to /var/openais.
  - Add upstream revision 1313 - Flow control fixes for the CPG service.
  - Add upstream revision 1312 - Correct usage of ERR_LIBRARY to SA_AIS_ERR_LIBRARY.
  - Add upstream revision 1311 - handle case where POLLHUP and POLLERR are not uspported by OS.
  - Add upstream revision 1309 - set default downcheck value to 1000ms.
  - Add upstream revision 1308 - Remove invalid code and warnings detected by Intel compiler.
  - This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-16
changelog:
  - Add upstream revision 1307 - Remove flow control compile warning.
  - Add upstream revision 1306 - Make clean now really makes clean.
  - Add upstream revision 1305 - Set scheduler SCHED_RR to max priority available
    in system.
  - Add upstream revision 1300 - Improve behavior of flow control of CPG service
    during configuration changes.
  - This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-14
changelog:
  - Add upstream revision 1296 - Remove compile warnings.
  - Add upstream revision 1295 - The totem membership protocol was changed to
  - Add upstream revision 1294 - modify location of ringid file to
  - Add upstream revision 1293 - flush output of debug messages on exit or segv.
    /var/run/openais and chdir here so cores are saved there.
    match specifications.
  - This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-13
changelog:
  - Add upstream revision 1286 - Fix checkpoint unlink operation under certain
    conditions.  This is the rhel5 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-12
changelog:
  - Add upstream revision 1286 - Fix checkpoint unlink operation under certain
    conditions.  This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-9
changelog:
  - Add upstream revision 1270 - Resolve IPC segfault.
  - Add upstream revision 1271 - Fix errors in ia64 alignment.
  - Add upstream revision 1275 - pthread_mutex_destroy cleanup patch.
  - Add upstream revision 1276 - Remove debug from makefile committed in revision 1275.
  - Add upstream revision 1277 - Formatting changes.
  - Add upstream revision 1278 - Patch testckpt to use proper seciton id size.
  - Add upstream revision 1279 - Call abort in sync service when processing is interrupted.
  - Add upstream revision 1282 - New generation checkpoint state machine.
  - Add upstream revision 1283 - Fix memory leaks.


author: Steven Dake <sdake@redhat.com> - 0.80.1-8
changelog:
  - Add upstream revision 1268 - Align data in totem delivery on 4 byte
    boundaries for ia64.
  - Add upstream revision 1269 - Increase default stack size for IPC connections
    on ia64.


author: Steven Dake <sdake@redhat.com> - 0.80.1-6
changelog:
  - Add upstream revision 1260 - Allocate the retransmission token in
    instance initialize instead of totemsrp_initialize.
  - Add upstream revision 1261 - cleanup the way the memb_index variable is
    handled in the commit token.
  - Add upstream revision 1262 - Set the ring sequence number according to the
    totem specifications.
  - Add upstream revision 1263 - Use the fullset variable instead of he local
    variable j to make easier code reading.
  - Add upstream revision 1264 - If the failed_list has zero entries, don't
    add it as an iovector in the join messages.
  - Add upstream revision 1265 - Only originate one regular token.


author: Steven Dake <sdake@redhat.com> - 0.80.1-5
changelog:
  - Add upstream revision 1256 - remove extra totem debug logging output.
  - Add upstream revision 1257 - fix subset operation to repair membership behavior.
  - Add upstream revision 1258 - accept commit token in proper circumstances.


author: Steven Dake <sdake@redhat.com> - 0.80.1-1.1
changelog:
  - Add upstream revision 1223 - Fix checkpoint write size of zero to
    return INVALID_PARAM error code.
  - Add upstream revision 1230 - Add missing include for assert.h.
  - Add upstream revision 1245 - Add cpgbench tool and better flow control system.
  - Move /sbin/ldconfig into regular package from devel package.


author: Steven Dake <sdake@redhat.com> - 0.80-1.2
changelog:
  - Move libraries to openais package.
  - Add cpg hash collision patch.
  - Add makefile install clm patch.


author: Steven Dake <sdake@redhat.com> - 0.76-1.8
changelog:
  - Readded ExlcusiveArch since build system builds s390 and ia64 which are
    untested.
  - Add makefile override patch which fixes build with optflags on x86_64 arch.
  - Remove -DOPENAIS_LINUX from passed CFLAGS since it now works properly with
    makefile override patch.


author: Steven Dake <sdake@redhat.com> - 0.76-1.5
changelog:
  - Changed BuildRoot tag to match convention specified in Fedora Wiki.
  - Removed /sbin/service dependency since it is pulled in from init packages.


author: Steven Dake <sdake@redhat.com> - 0.76-1.3
changelog:
  - Allocated uid 102 from setup package for user add operation.
  - Added || : to initscript stuff so initscript bugs dont cause RPM transaction
    failures as per Paul's suggestion.
  - Added /sbin/services to post requires as per Paul's suggestion.
  - Removed ldconfig from the requires post for the main package as per Paul's
    suggestion.
  - Changed post devel scriptlet action as per Paul's suggestion.


author: Steven Dake <sdake@redhat.com> - 0.76-1.2
changelog:
  - Add user account for AIS applications and authentication.
  - Move /etc/ld.so.conf/openais-*.conf to devel package since it is
    only needed there.
  - Move ldconfig to devel package.
  - Execute condrestart on upgrade


author: Steven Dake <sdake@redhat.com> - 0.76-1.1
changelog:
  - Fix unowned dirs problem.
  - Correct make with optflags work properly.
  - Move plugins from /usr/lib/openais/lcrso to /usr/libexec/lcrso.
  - Remove static archives from RPM.
  - Name shared objects in devel package as 1.0.0 instead of 1.0.


author: Paul Howarth <paul@city-fan.org> - 0.75-1.1
changelog:
  - Address rpmlint issues during package review (#192889)
  - Move docs to associated packages, don't bother with -docs subpackage
  - Make -devel package require main package
  - Fix Source: and URL: tags
  - Fix up Makefile to handle DESTDIR properly
  - Honoring %{optflags} breaks build!


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-3.7
changelog:
  - implement safe renegotiation - CVE-2009-3555 (#533125)
  - do not allow MD2 in certificate signatures by default - CVE-2009-2409
    (#510197)


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-3.5
changelog:
  - fix NUL characters in DN and SAN cert fields issue,
    make sure gnutls_x509_crt_check_hostname() fails when certificate
    has no CN or SAN CVE-2009-2730 (#516231)


author: Jeff Johnson <jbj@redhat.com> 1.0.20-1
changelog:
  - update to 1.0.20.
  - add --with-included-opencdk --with-included-libtasn1
  - add --with-included-libcfg --with-included-lzo
  - add --disable-srp-authentication.
  - do "make check" after build.


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Init script no longer throws errors on 'stop'.
  - Cmirror no longer generates errors if openais stops.
  - Mixed architecture and rolling upgrade issues have been fixed.
  - Resolves: rhbz#488102 rhbz#518665 rhbz#520915


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Local UIDs are now used to prevent more than one log created with the
    same UUID.
  - Resolves: rhbz#506843


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Fixed more issues which caused the copy percentage of a corelog mirror to
    get stuck.
  - Resolves: rhbz#474174 rhbz#491340


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Copy percentage of corelog mirror no longer gets stuck in certain cases.
  - A segfault in clogd was fixed which was caused by mirrors being suspended
    quickly after being started.
  - During a sync attempt the copy percentage will no longer hang due to the
    receipt of stale checkpoint data.
  - Resolves: rhbz#474174 rhbz#484968 rhbz#491340


author: Chris Feist <cfeist@redhat.com>
changelog:
  - More list corrpution fixes
  - Fixed bug which can cause the sync percentage to go over 100.
  - Resolves: rhbz#464550


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Fixed a checkpoint ordering issue, where a checkpoint could be populated
    with data from the wrong moment in time.
  - Fixed problem where resending requests when a server leaves would include
    requests that should have been recieved after the server had gone (so no
    resend should have been necessary).
  - Resolves: rhbz#464550


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Allow time for exiting server responses to settle out before resending
    requests
  - Various debugging enhancements
  - Resolves: rhbz#464550 rhbz#464934


author: Matthew Barnes <mbarnes@redhat.com> - 2.15.1-2
changelog:
  - Add build requirements: startup-notification-devel
                            libgnomeprintui22-devel
                            libXt-devel


author: David Malcolm <dmalcolm@redhat.com> - 2.13.2-2
changelog:
  - Patched to include DocBook mimetype in desktop file, and added preun and post
    hooks to update-desktop-database (#175880)
  - Patched to ensure that Yelp recognizes that it can handle the mimetype of the
    documentation as reported by gnomevfs (also #175880)


author: Ray Strode <rstrode@redhat.com> 2.9.3-6
changelog:
  - Disable man support
  - Disable info support
  - Don't try to install schemas during install (bug 154035)


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-23.2
changelog:
  - The server's "by client-id" and "by hardware address" hash table lists
    are now sorted according to the preference to re-allocate that lease to
    returning clients.  This should eliminate pool starvation problems
    arising when "INIT" clients were given new leases rather than presently
    active ones. (RHBZ #627572)


author: Tom Lane <tgl@redhat.com> 2:1.2.10-7.1.el5_5.3
changelog:
  - Back-port fixes for CVE-2009-2042, CVE-2010-0205, CVE-2010-1205,
    CVE-2010-2249
  Resolves: #609921


author: Tom Lane <tgl@redhat.com> 2:1.2.10-7.0.3
changelog:
  - Back-port critical fixes from libpng 1.2.22, primarily to fix CVE-2007-5269
  Resolves: #337521
  - Update License tag and some other obsolete bits in specfile


author: Matthias Clasen <mclasen@redhat.com> 2:1.2.5-7
changelog:
  - Replace the patches for individual security problems with the
    cumulative patch issued by the png developers. 
  - Build for FC1


author: Matthias Clasen <mclasen@redhat.com> - 2:1.2.5-3
changelog:
  - Reinstate and improve the transfix patch which got lost sometime ago, 
    but is still needed for CAN-2002-1363 (#125934)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - s/Copyright/License/
  - fix weird versioning system (epoch was set to "2" in the main
    package, serial to "1" in the devel package. Huh?)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Remove the workaround for Bug #20018 (from Oct 30).
    Qt 2.2.2 fixes the problem the workaround addressed.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Work around a problem causing konqueror to segfault in image preview
    mode (Bug #20018)
  - Copy SuSE 7.0's patch to handle bad chunks


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - we are Serial: 1 now because we are reverting the 1.0.2 version from 5.2
    beta to this prior one
  - install man pages; set defattr defaults


author: Matthew Barnes <mbarnes@redhat.com> - 2.14.2-6
changelog:
  - Require gecko-libs instead of firefox.
  - Add patch to make pkg-config look for mozilla-gtkmozembed even
    though we're using xulrunner.


author: John (J5) Palmieri <johnp@redhat.com> - 2.14.2-3
changelog:
  - Remove the Requires on the parent package from gtkmozembed
    so we don't pull in gnome-python2 also.  At some point we
    should look at what requires gnome-python2 and only Require it
    for those sub packages and not the parent package.


author: John (J5) Palmieri <johnp@redhat.com> - 2.13.3-1
changelog:
  - Update to 2.13.3
  - Move the gnome-python2-applet gnome-python2-gnomeprint 
    gnome-python2-gtksourceview gnome-python2-libwnck 
    gnome-python2-libgtop2 gnome-python2-nautilus-cd-burner 
    gnome-python2-metacity and gnome-python2-totem subpackages 
    to gnome-python2-desktop because gnome-python-extras was split upstream


author: John (J5) Palmieri <johnp@redhat.com> - 2.12.1-4
changelog:
  - Remove ifarch directives around mozembed since it is now built on
    ppc64. Bump release again and retag


author: David Malcolm <dmalcolm@redhat.com> - 2.12.0-1
changelog:
  - bump from 2.11.4 to 2.12.0
  - rename wnck_window_demands_attention to wnck_window_needs_attention, to track
    change made in libwnck C API in 2.11.4, #169383
  - added build requirement on gnome-media-devel, since this is needed to build
    mediaprofiles.so


author: Jeremy Katz <katzj@redhat.com> - 2.11.4-8
changelog:
  - totem subpackage shouldn't require mozilla
  - build again on s390{,x}, but don't do the -nautilus-cdburner subpackage


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-32.el5.2
changelog:
  - 537777 'Attempt to free unreferenced scalar' when running a perl 
   program with threads
  - Resolves: rhbz#629935


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-29.el5
changelog:
  - CVE-2008-5302 - use latest patch without Cwd module
  - 507378 because of our paths we need to overload old Util.so in case customer installed
   Scalar::Util from cpan. In this case we marked new Util.so as .rpmnew.
  - Related: rhbz#591167
  - Resolves: rhbz#594406


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-28.el5
changelog:
  - CVE-2008-5302 perl: File::Path rmtree race condition (CVE-2005-0448) 
    reintroduced after upstream rebase to 5.8.8-1
  - CVE-2010-1168 perl Safe: Intended restriction bypass via object references
  - CVE-2010-1447 Safe 2.26 and earlier: Intended restriction bypass via Perl 
    object references in code executed outside safe compartment
  - Related: rhbz#591167


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-25.el5
changelog:
  - 458851 remove update of module - the cleanup function was already in
    the previous version
  - 507378 update Scalar-List-Utils to latest CPAN version, 1.21, to prevent
    bug #375621
  - Resolves: rhbz#507378, rhbz#507378
  - patch lib/Net/t/hostname.t, so that it does not fail in mock


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-24.el5
changelog:
  - Fix -Darchname on the Configure line.
  - Do not pack compatibility directories: remove all the mkdirs from %install.
  - Replace perl-5.8.8-incpush.patch by perl-5.8.8-oldarch.patch.
  - Adapt the perl-5.8.8-R-switch.patch; keep it though it probably is not
    useful anymore.
  - Resolves: rhbz#489909


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-23.el5
changelog:
  - libnet.cfg was installed on x86_64 into wron directory because all libnet
    files are stored in /usr/lib/ on both architectures.
  - Resolves: rhbz#490107


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-21.el5
changelog:
  - Time::HiRes version is incompatible with glibc2.5. This is fixed
    with rebase to v1.9715.
  - Resolves: rhbz#453327


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-20.el5
changelog:
  - suidperl binaries shall be owned by the root, reinsert the %defattr
    declaration mistakenly removed at the time of bug 191416


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-19.el5
changelog:
  - fix the # of tests in backport of upstream change 32018
  - fix perl-5.8.8-perlvar-pod.patch again, update expected test results
  - fix a typo causing "make test" to be skipped
  - Related: rhbz#379791 #431041


author: Marcela Maslanova <mmaslano@redhat.com> - 4:5.8.8-17.el5
changelog:
  - some patches were forgotten, clean and actual patches move on the end
   of list
  - Resolves: rhbz#375621


author: Marcela Maslanova <mmaslano@redhat.com> - 4:5.8.8-15.el5
changelog:
  - add upstream fix for bless/overload problem (changes 31996,32018,32019,
  	32025) and perl-5.8.8-bug24254.patch. Without this patch had bless
  	poor performance.
  - Resolves: rhbz#379791


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-14.el5
changelog:
  - add two patches, which...
  - Resolves: #435505, #431041
  - remove %define threading, the non-threading variant is not supported,
    Related: 435376


author: Marcela Maslanova <mmaslano@redhat.com> - 4:5.8.8-13.el5
changelog:
  - comments are before patches patch22-28
  - turn off tests for s390x. They were succesfully run in scratch, but
  	there's some issue with network, which breaks the brew build.
  - Resolves: #375621, #429491, #438114, #379791, #454602, #217833, #449324


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-8
changelog:
  - Fix upstream perl bug #34297:
    'utf8 overload stringify bug (utf8 caching maybe)'
    upstream patch #28006 applied


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-6
changelog:
  - Fix upstream perl bug #38454:
    'rindex corrects for $[ on bytes rather than UTF-8'
    apply upstream patch #27116
  - Fix upstream perl bug 24816:
    'Magic vars seem unsure if they are purely numeric' 
    ( perl -wle 'print $? = $? ^ "3"' -> 'Argument "^C" isn't numeric' )
    apply upstream patch #27391
  - Avoid writing over the input string in the case 'F' in moreswitches.
    apply upstream patch #27426
  - Fix upstream perl bug 34925 - 'overload and rebless' -
    apply upstream patches #27509, #27512
  - Fix upstream perl bug 3038 - '$qr = qr/^a$/m; $x =~ $qr; fails'
    apply upstream patch #27604
  - apply upstream patch #27605 - 'Fix off-by-one in $0 set magic.'
  - Fix upstream perl bug 23141 - '($_) = () fails to set $_ to undef'
    apply upstream patch #27914
  - Fix upstream perl bug #38619 - 
    'Bug in lc and uc (interaction between UTF-8, substr, and lc/uc)'
    apply upstream patch #27329
  - Give users the '-R' option to disable the Red Hat
    module compatibility default search path extension (incpush.patch).


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-6
changelog:
  - Fix bug 191416: make h2ph generate correct code for cpp statements
    like: '#if defined A || defined B'
  - Fix 172396.patch for non-threaded builds


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-4
changelog:
  - Fix bug 183553 / upstream bug 38657: fix -d:Foo=bar processing
  - rebuild with new gcc-4.1.0-1, released today


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-2
changelog:
  - Rebuild again
  - Debian released 5.8.8 patches today; apply only relevant difference:
    03_fix_net_nntp : fix precedence in Net::NNTP::article 
                      from Brendan O'Dea<bod@debian.org>


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.8-0.1_RC1
changelog:
  - fix bug 178343: h2ph must include cpp "predefined macros" in _h2ph_pre.ph
  - Add perl(:MODULE_COMPAT_5.8.8) to Provides
  - Fix perlbug patch


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-8
changelog:
  - Apply upstream patches 26283 and 26284 : complete, revised fixes
    for CVE-2005-3962 and CVE-2005-3912 and 
    "Sys::Syslog security vulnerabilities" issues.
  - Fix bug 136009 / MakeMaker LD_RUN_PATH issue: 
    restore previous default Red Hat behavior of removing the MakeMaker
    generated LD_RUN_PATH setting from the link command .
    Document this removal, as it contravenes upstream default behavior, and 
    provide a USE_MM_LD_RUN_PATH MakeMaker member to enable use of the 
    MakeMaker generated LD_RUN_PATH .


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-0.8
changelog:
  - fix bug 174684 / CVE-2005-3962: sprintf integer overflow vulnerability
    backport upstream patch #26240


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-0.7
changelog:
  - fix bug 172739: upstream bug 36521 : deep recursion and segfault
    in CGI::Carp::warn with 'use diagnostics' : applied patch 25160.
  - fix CAN-2004-0976: insecure use of temp files (ala Debian)


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-0.6
changelog:
  - fix bug 171111 : define ioctl length macro IOCPARM_LEN(x)
    macro to be _IOC_SIZE(x), not 256 - upstream bug #37535 raised.
  - provide 'perl_debugging' .spec file option to enable -DDEBUGGING
    and disable stripping / debuginfo generation - default: 0


author: Warren Togami <wtogami@redhat.com> - 3:5.8.7-0.1
changelog:
  - patch12 from Marius Feraru (#165907)
    TODO: patch11, patch26 and patch27 clash and need verification
  - Build without -DDEBUGGING (#156113)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3:5.8.6-17
changelog:
  - Don't remove the core modules:
      Filter::Util::Call, Filter::Simple, and Time::HiRes.
  - Obsoletes perl-{Filter,Filter-Simple,Time-HiRes}.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3:5.8.6-16
changelog:
  - Reformatted the specfile.
  - Added the Source0 URL.
  - Dropped the MANIFEST.all file for the perl package.
  - Dropped the MANIFEST.suidperl file for the suidperl subpackage.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3:5.8.6-12
changelog:
  - New findbin-selinux patch: it now passes the FindBin.t tests
    (patch28 replaces patch23). #118877 #127023
  - Remove 5.8.2 ABI compat (#154295 comments 6 and 7).


author: Chip Turner <cturner@redhat.com> - 3:5.8.6-4
changelog:
  - add patch to put site_perl and vendor_perl before core perl dirs, to
    allow for overriding modules


author: Jose Pedro Oliveira <jpo@di.uminho.pt>
changelog:
  - Corrected the license information (missing GPL).
  - Added the URL tag.
  - Removed empty .bs files.
  - Eliminated several strip generated messages (bug 127025).
  - Corrected problems mentioned in bug 120772
    (updated Ville Skytta)


author: Colin Walters <walters@redhat.com> 3:5.8.3-17
changelog:
  - Apply patch to fix FindBin module when access to cwd is disallowed,
    should solve the MRTG/SELinux cron spam issue


author: Chip Turner <cturner@redhat.com> 3:5.8.3-6
changelog:
  - fix very broken @INC calculations with slightly less broken @INC
    calculations (not perfectly handled but the result is correct)
  - fix broken -Dsitearch declaration


author: Chip Turner <cturner@redhat.com> 3:5.8.1-90.rc2.1
changelog:
  - RC4
  - remove perl-5.8.0-fhs.patch since it is integrated now
  - remove perl-5.8.0-Safe2.09.patch, unnecessary now


author: Chip Turner <cturner@redhat.com> 3:5.8.0-89.pre%{PRELEVEL}.0
changelog:
  - bump epoch since we went from perl 5.8.1-pre to 5.8.0-pre (ie,
    changed what version perl thought of itself as)


author: Chip Turner <cturner@redhat.com>
changelog:
  - fix MANIFEST.DB_File handling for #83410; problem was unsubstituted
    /usr/lib that crept in with multilib


author: Elliot Lee <sopwith@redhat.com> 5.8.0-86
changelog:
  - Fix up multilib handling to use multilib_64_archs macro, add ppc64.
  - Patch100 probably makes sense on all archs, and ifarch'd patches are Bad(tm).


author: Chip Turner <cturner@redhat.com>
changelog:
  - version the Obsoleted on perl-NDBM_File so users can install newer
  - change the Obsoletes on NDBM_File to a Conflicts
    ones than what shipped with 7.3, yet still keep anaconda happy


author: Chip Turner <cturner@redhat.com>
changelog:
  - add rpath fix to prevent building perl from using installed system perl
  - massive re-integration of upstream patches to come to common basis (head of perl-maint branch)


author: Chip Turner <cturner@redhat.com>
changelog:
  - add numerous upstream patches to fix utf8/perlio issues
  - upgrade Storable, Safe, and Encoding to latest CPAN versions


author: Chip Turner <cturner@redhat.com>
changelog:
  - update CPAN, CGI, and DB_File versions; obsolete perl-libnet
  - libnet.cfg supplied, default to passive ftp in all cases


author: Chip Turner <cturner@redhat.com>
changelog:
  - make rpmlint happy, split out NDBM_File, clean up other spots
  - stopped doing grep -v etc in favor of custom script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - replace the deprecated MD5 with Digest::MD5 (has to be here for cleanfeed)
  - obsolete: perl-Digest-MD5
  - use syslog instead of mail to report possible attempts to break into suidperl
  - force syslog on at build-time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Owen's fix for #14779/#14863
  - specify cc=gcc; continue to let cpp sort itself out
  - switch shadow support on (#8646)
  - release 7


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable 64-bit file support
  - change name of package that Perl expects gcc to be in from "egcs" to "gcc"
  - move man pages to /usr/share via hints/linux.sh and MM_Unix.pm
  - fix problems prefixifying with empty prefixes
  - disable long doubles on sparc (they're the same as doubles anyway)
  - add an Epoch to make sure we can upgrade from perl-5.00503
  - release 2


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - do not link anymore against the system db library (and make each module
    link against it separately, so that we can have Berkeley db1 and db2 mixed
    up)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - version 5.00503
  - make the default man3 install dir be release independent
  - try to link against db1 to preserve compatibility with older databases;
    abandoned idea because perl is too broken to allow such an easy change
    (hardcoded names *everywhere* !!!)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added a patch to fix a security race
  - do not use setres[ug]id - those are not implemented on 2.0.3x kernels


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - upgraded to 5.004_04 - 5.004_01 had some nasty memory leaks.
  - fixed the spec file to be version-independent


author: Erik Troan <ewt@redhat.com>
changelog:
  - Use -Darchname=i386-linux 
  - Require csh (for glob)
  - Use RPM_ARCH during configuration and installation for arch independence


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-279.el5_5.2
changelog:
  - Allow aisexec to read and write unconfined user SysV sempaphores and shared memory segments
  Resolves: #644821


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-274
changelog:
  - Fix label for cluster ocf-shellfuncs
  - Add slapd_initrc_exec_t type
  - Fix fenced policy
  Resolves: #522158


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-273
changelog:
  - Allow samba domains to manage authentication cache
  Resolves: #507797
  - Add label for chrooted named log file
  Resolves: #562833


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-271
changelog:
  - Allow qemu to read from random number generator
  Resolves: #552763
  - Add label for /sbin/mke4fs
  Resolves: #532565
  - Add dhcpc ability to relabel net_conf_t files
  Resolves: #559355
  - Add iscsid fixes
  Resolves: #548599
  - Add new type for cups interface scripts
  Resolves: #550015


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-270
changelog:
  - Allow prelink to load and execute functions from shared libraries
  Resolves: #551664
  - Add label for /etc/xen directory
  Resolves: #554777


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-268
changelog:
  - Fix labels for postgrestgres test suite 
  Resolves: #551063
  - Fix multiple different specifications for /var/vdsm directory
  Resolves: #549492


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-267
changelog:
  - Add rgmanager fixes
  - Allow setkey to read sysadm tmp files 
  Resolves: #515687
  - Allow fsdaemon to write to SCSI generic device
  Resolves: #547387
  - Add attribute configfile and allow init script to read configfile
  Resolves: #546604


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-264
changelog:
  - Allow spamassassin to read /var/lib/spamassassin/ directory
  Resolves: #530750
  - Add rule to allow send/recv unlabeled packet to kernel.if
  Resolves: #530809
  - Add labeling for /sbin/e4fsck
  Resolves: #532565


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-263
changelog:
  - Fix strict policy to build with rgmanager policy
  - Fix policy to set the UNKNOWN=allow flag on Real Time Kernel
  Resolves: #531230


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-260
changelog:
  - Add clogd and other cluster patches from miroslav
  - Allow hplip_t to r/w cupsd_t socket
  Resolves: #483395
  - Allow ssh_keygen_t to write to /root/.ssh directory
  Resolves: #492519
  - Add Red Hat Cluster Policy
  Resolves: #503141
  Resolves: #522158
  - Allow sysadm_t to transition to setkey_t
  Resolves: #513447


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-258
changelog:
  - remove /usr/bin/env from poligygentool
  - Allow cyrus to communicate with snmp via stream socket
  Resolves: #523548


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-256
changelog:
  - Fix labeling on oracle libraries
  Resolves: #516780
  Resolves: #515491
  Resolves: #515687
  Resolves: #500400


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-254
changelog:
  - Add ipsec_match_default_spd back into userdomain
  - Allow sysadm_t to execute setkey and racoon executables
  - Dontaudit write of logwatch to etc_t
  - Allow samba as domain controller to change passwords
  Resolves: #475562


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-252
changelog:
  - Change mmap_low boolean to effect unconfined_t
  - Allow ipsec_t to read its init script
  Resolves: #511359


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-247
changelog:
  - Additional privs for privoxy, kpropd found in other dists
  - iscsi wants to look at the process state of all domains
  Resolves: #506057


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-246
changelog:
  - Allow semanage_t to transition to initrc_t in order to restart mcstrans
  Resolves: #460970
  - Additional rules for ipsec
  Resolves: #443646


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-242
changelog:
  - Allow all domains to search  bin_t and sbin_t
  - Allow qemu to write to /var/run/svirt/qemu
  Resolves: #499701


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-233
changelog:
  - Add rsync_client for Fedora Infrastructure
  - Allow spamd to exec itself when it gets a hup signal
  Resolves: #499701


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-232
changelog:
  - Allow spamd to exec itself when it gets a hup signal
  - Add Minimum policy for Ovirt to RHEL5
  Resolves: #499701


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-230
changelog:
  - Allow amanda to signal fsadm
  - Add context for /var/cache/cgit
  - Dontaudit apache leaked tcp_sockets
  - Fixes for cvs service
  -allow initrc_t and inetd_t siginh over their children
  - add privoxy_connect_any boolean
  - Allow smbd_t to signal nmbd_t
  Resolves: #498596


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-229
changelog:
  - Fix sepolgen error regression
  - Fix milter implementaion 
  - Additional rules required for update to automount
  Resolves: #497273


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-227
changelog:
  - Allow nfs to share removable devices
  - Allow ipsec additional privs for FIPS compliance
  Resolves: #497168


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-225
changelog:
  - add context for rpc.quoatad
  - Allow spamassassin to append to user_home_t for log files
    Resolves: #481387
  Resolves: #486187


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-222
changelog:
  - Allow spamc to append to user_home_t
  Resolves: #486187
  - Allow dbus to send message back to all services
  Resolves: #481628


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-217
changelog:
  - Allow saslauthd access to kerberos host rcache
  - Allow dbus to read all domains states
  Resolves: #489899


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-213
changelog:
  - Allow postfix_virtual_t to use private steam sock_file
  - Fix java shared library in IBM package
  Resolves: #486608


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-211
changelog:
  - Allow samba to edit apache files in home dir
  Resolves: #485111
  - Allow procmail to transition to spamassassin domains
  Resolves: #485107


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-208
changelog:
  - Allow samba to manage ALL files in home dir if boolean set
  - Fix typos in man pages
  Resolves: #477123


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-200
changelog:
  - Allow ldap to connect to sasl
  - avc denials during samba active directory join
  Resolves: #474852
  - samba - winbind - periodic avc denials
  Resolves: #474854
  - "Syntax error on line 1 ' [type=SQUOTE]" upgrading selinux-policy-devel
  Resolves: #474868
  - missing policy
  Resolves: #475273


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-199
changelog:
  - Allow apps that check password to write to faillog  
  audisp_remote needs to bind to audit ports
  Resolves: #474481
  - Allow xm to stream connect to virt
  Resolves: #472903


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-197
changelog:
  - Dontaudit search of /root for init daemons
  - Fixes for ricci
  - Allow xm to manage virt_image_t
  Resolves: #472903


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-188
changelog:
  - Fixes for Fedora Infrastructure
  - Make pegasus an unconfined_domain 
  - Add pki policy
  Resolves: #440151


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-182
changelog:
  - Change apache httpd_use_nfs to mean managing nfs shares
  - From Fedora Infrastructure
  Resolves: #469943


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-179
changelog:
  - Allow restorecon to read locale_t
  Resolves: #469402
  - Allow hal/pm-utils to look at /var/run/video.rom


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-164
changelog:
  - Fix labeling on dhclient-lease files
  - Allow portmap_helper to bind to rpc ports
  Resolves: #451805


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-162
changelog:
  - Allow domains to read etc_runtime for access to modified denyhosts
  - Allow dhcpc_t to list dbusd_etc_t directory
  Resolves: #459888


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-155
changelog:
  - Complete backport of logging/audit policy
  - Allow pegasus to look at kernel xen information
  Resolves: #461624


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-154
changelog:
  - Allow portmak to read kernel state 
  - Allow ricci to figure out if cluster services are running
  Resolve: #461769


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-149
changelog:
  - Fix file context to install on strict/mls policy
  - Allow hal to modify input device
  Resolves: #442623


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-142
changelog:
  - add mmap_low boolean
  - Upgrade to latest networkmanager policy
  - Add kpropd policy
  - update nscd policy
  - Update ntp policy
  - Update openvpn policy
  - Fix ppp_read_read interface
  - fix portmapper to allow it to connect to all <1024 ports
  - Fix ricci_modstorage to be able to start clvmd
  Resolves: #442028
  Resolves: #447014
  Resolves: #455784


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-138
changelog:
  - Allow pam_console to setattr on cpu_device_t
  Resolves: #447403
  - selinux-policy support for virtio block devices
  Resolves: #446229


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-134
changelog:
  - Allow kerberos daemons to create log files
  - Resolves: 442981
  - Fix label on /usr/libexec/hal_lpadmin
  Resolves: #442951


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-124
changelog:
  - Fix deletion of dovecot files in strict/mls policy Resolves 434843
  - Allow hal to setsched on kernel
  Resolves: #435197


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-117
changelog:
  - Allow mailman to signal itself
  Resolves: #430639
  - Allow iscsid to setrlimit 
  Resolves: #430669
  - Additional fix to allow setroubleshoot to talk to dbus
  Resolves: #224351


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-114
changelog:
  - Allow restorecond to read homedir sym links
  - Allow mailservers/postfix to use nfs file systems
  Resolves: #245605


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-108
changelog:
  - Allow kudzu to domtrans to unconfined_t
  - Allow audit to send mail
  - Allow mailman and postfix to interact
  Resolves: #425806:


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-107
changelog:
  - Remove badly labeled pegasus directory
  - Allow postfix to work with NFS homedirs
  - Allow iptables to connect to ldap
  - Allow apache scripts to run nice
  - Allow ntpd to use /dev/ptmx for setting the time
  - Allow automount to read /dev/random
  - Allow samba to use kerberos
  - Allow squid to access to port 2048
  - Allow amanda to talk to ldap
  - Allow yppasswd to run pwupdate
  - Allow automount to mount squashfs
  - Add new nscd permissions
  - 
  Resolves: #245605
  Resolves: #248838
  Resolves: #251841
  Resolves: #253999
  Resolves: #316011
  Resolves: #326631
  Resolves: #350511
  Resolves: #366461
  Resolves: #390771
  Resolves: #247814
  Resolves: #238347
  Resolves: #351051
  Resolves: #254199
  Resolves: #288771
  Resolves: #294671
  Resolves: #317281
  Resolves: #340311
  Resolves: #340321
  Resolves: #386481
  Resolves: #327121
  Resolves: #416541
  Resolves: #416561
  Resolves: #414891

  Resolves: 383231
  Resolves: 254197
  Resolves: 266341
  Resolves: 248835
  Resolves: 326721
  Resolves: 319791
  Resolves: 359701
  Resolves: 374431
  Resolves: 403241
  Resolves: 251712
  Resolves: 283971
  Resolves: 284361
  Resolves: 300391
  Resolves: 339651
  Resolves: 383191
  Resolves: 279261


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-106.1
changelog:
  - dontaudit consoletype talking to hotplug
  - allow hotplug to signal ifconfig
  Resolves: 328211
  Resolves: 328251


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-97
changelog:
  - Fixup clmvd to allow creation of fixed devices
  - Fixes telnet/rlogin using replay cache
  Resolves: #284831


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-89
changelog:
  - Allow postfix to read master proc info
  - Allow unix_update to talk to nsswitch
  - Allow dmidecode to search sysfs_t
  Resolves: #263141


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-88
changelog:
  - Fix relabel of /var/run dir
  - Allow snmp to read any directory
  - Allow cimserver to create pegasus_data directories
  Resolves: #213809
  - Change to context on /var/run/libvirt
  Resolves: #249069


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-84
changelog:
  - Allow dovecot read of /tmp files for kerberos
  - Fix apache policy for virtual hosting
  - Allow Xen to run on nfs
  Resolves: #253744


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-76
changelog:
  - Allow xenconsole to manage xen log files
  - add mmap_zero for new kernel
  - Fixes for RHEL5
  Resolves:#244690


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-74
changelog:
  - Fix location of ypxfr on 64 bit platforms
  - Fixes for nagios, postfix, procmail, saslauthd, arpwatch, avahi, dovecot
  Resolves: #241621


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-71
changelog:
  - Allow netlable to read etc and work with init terminals
  - Change file context to have all of policy at SystemLow
  Resolves: #239079


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-67
changelog:
  - Allow logging into the console on s390
  Resolves: #237703
  - Additional avc's caused by change in unix_update
  Resolves: #236316


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-61
changelog:
  - Fix admin_domain_template to allow custom user types
  Resolves: #237133
  -Allow lvm to create/delete generic device_t direcories/files under /dev 
  Resolves: #237128


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-52
changelog:
  - Allow netutils to read sysfs
  Resolves: #235357
  - Allow samba to work as a PDC
  Resolves: #235360
  - Allow ypserv to bind to ports 600-1024
  Resolves: #235363
  - Fix kudzu to be able to telinit
  Resolves: #225443


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-50
changelog:
  - More work to allow kudzu to setup init correctly so getty will work
  Resolves: #225443
  - Allow pegasus to execute ifconfig
  Resolves: #227485
  - Allow Aide to look at lnk_files and other fixes
  Resolves: #234885
  - querying cups jobs with sysadm_r needs override mls restrictions
  Resolves: #234889


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-49
changelog:
  - Change init_daemon_domain(netlabel_mgmt_t,netlabel_mgmt_exec_t)
  - to init_system_domain(netlabel_mgmt_t,netlabel_mgmt_exec_t)
  Resolves: #233313


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-47
changelog:
  - Allow sysadm_r to transition to netlabel_mgmt
  Resolves: #233313
  - Allow kudzu to setup init correctly so getty will work
  Resolves: #225443


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-42
changelog:
  - Dontaudit restorecon writing to cron pipes
  - Fix filespec for /dev/ub*
  - Allow ftp and telnet to use kerberos key files
  - Allow syslog to use alternate ports
  - Allow radious to look at the routing table
  - Allow pyzor to getattr on autofs


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-39
changelog:
  - Add bugzilla policy
  - Allow procmail to create tmp files so spamassisin will work
  - Some fixes for pyzor


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-36
changelog:
  - Allow xen to work properly on ia64, needs to be able to read dosfs_t
  Resolves: #217362
  - Allow mozilla, evolution and thunderbird to read dev_random.
  Resolves: FC6-227002
  - Allow spamd to connect to smtp port
  Resolves: FC6-227184
  - Fixes to make ypxfr work
  Resolves: FC6-227237
  - Allow audit fsetsid capability
  Resolves: FC6-227423
  - Allow syslog (syslog-ng) to tcp_connect to other syslog servers
  Resolves: FC6-218978


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-31
changelog:
  - Fix clvmd policy
  - Fix squid cgi script to run with correct context.
  - Maintain proper context on /etc/lvm/.cache file
  - Lots of fixes for ricci and friends
  - mount.nfs needs sys_resource
  - Change gstreamer context for only i386
  - Fix libXcomp file_context
  Resolves: #224441


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-28
changelog:
  - Allow logwatch to use ypbind
  - Allow system_crond_t to create cron_var_run_t files (prelink files)
  - dontaudit postfix-smtp reading /boot, fix file context on lmtp
  Resolves: #215722


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-27
changelog:
  - Fix senmail avc trying to read /root
  - More fixes for ssh transitions to userspace
  Resolves: #221608
  Resolves: #222548


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-26
changelog:
  - automounter needs setuid
  - prelink needs to be able to rw_dir_perms on usr_t
  - pcscd_t needs to be able to search sysfs_t
  - Lots of fixes to run sshd under xinetd
  Resolves: #219999


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-24
changelog:
  - Allow prelink when run from rpm to create tmp files
  Resolves: #221865
  - Remove file_context for exportfs
  Resolves: #221181
  - Allow spamassassin to create ~/.spamassissin
  Resolves: #203290
  - Allow netlabel packets to flow.
  Resolves: #210426


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-23
changelog:
  - Allow ssh access to the krb tickets
  - Allow sshd to change passwd
  - Stop newrole -l from working on non securetty
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-16
changelog:
  - Allow semanage to exec it self.  Label genhomedircon as semanage_exec_t
  Resolves: #219421
  - Allow sysadm_lpr_t to manage other print spool jobs
  Resolves: #220080


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-3
changelog:
  - Allow login programs to polyinstatiate homedirs
  Resolves: #216184
  - Allow quotacheck to create database files
  Resolves: #212957


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-1
changelog:
  - Dontaudit appending hal_var_lib files 
  Resolves: #217452
  Resolves: #217571
  Resolves: #217611
  Resolves: #217640
  Resolves: #217725


author: James Antill <james.antill@redhat.com> 2.4.2-6
changelog:
  - Fix policygentool specfile problem.
  - Allow apache to send signals to it's logging helpers.
  - Resolves: rhbz#212731


author: Dan Walsh <dwalsh@redhat.com> 2.3.16-9
changelog:
  - Remove bluetooth-helper transition
  - Add selinux_validate for semanage
  - Require new version of libsemanage


author: Dan Walsh <dwalsh@redhat.com> 2.3.9-4
changelog:
  - Set /usr/lib/ia32el/ia32x_loader to unconfined_execmem_exec_t for ia32 platform
  - Fix spec for /dev/adsp


author: Dan Walsh <dwalsh@redhat.com> 2.3.6-4
changelog:
  - Change allow_execstack to default to on, for RHEL5 Beta.  
    This is required because of a Java compiler problem.
    Hope to turn off for next beta


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-11
changelog:
  - Added Paul Howarth patch to only load policy packages shipped 
    with this package
  - Allow pidof from initrc to ptrace higher level domains
  - Allow firstboot to communicate with hal via dbus


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-3
changelog:
  - Allow prelink to read bin_t symlink
  - allow xfs to read random devices
  - Change gfs to support xattr


author: Dan Walsh <dwalsh@redhat.com> 2.2.32-2
changelog:
  - Add unconfined_mount_t
  - Allow privoxy to connect to httpd_cache
  - fix cups labeleing on /var/cache/cups


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-6
changelog:
  - Allow secadm_t ability to relabel all files
  - Allow ftp to search xferlog_t directories
  - Allow mysql to communicate with ldap
  - Allow rsync to bind to rsync_port_t


author: Russell Coker <rcoker@redhat.com> 2.2.29-5
changelog:
  - Fixed mailman with Postfix #183928
  - Allowed semanage to create file_context files.
  - Allowed amanda_t to access inetd_t TCP sockets and allowed amanda_recover_t
    to bind to reserved ports.  #149030
  - Don't allow devpts_t to be associated with tmp_t.
  - Allow hald_t to stat all mountpoints.
  - Added boolean samba_share_nfs to allow smbd_t full access to NFS mounts.
    - Make mount run in mount_t domain from unconfined_t to prevent mislabeling of
    /etc/mtab.
  - Changed the file_contexts to not have a regex before the first ^/[a-z]/
    whenever possible, makes restorecon slightly faster.
  - Correct the label of /etc/named.caching-nameserver.conf
  - Now label /usr/src/kernels/.+/lib(/.*)? as usr_t instead of
    /usr/src(/.*)?/lib(/.*)? - I don't think we need anything else under /usr/src
    hit by this.
  - Granted xen access to /boot, allowed mounting on xend_var_lib_t, and allowed
    xenstored_t rw access to the xen device node.


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-2
changelog:
  - Add mono dbus support
  - Lots of file_context fixes for textrel_shlib_t in FC5
  - Turn off execmem auditallow since they are filling log files


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-17
changelog:
  - MLS Fixes
  	dmidecode needs mls_file_read_up
  - add ypxfr_t
  - run init needs access to nscd
  - udev needs setuid
  - another xen log file
  - Dontaudit mount getattr proc_kcore_t


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-8
changelog:
  - Blkid changes
  - Allow udev access to usb_device_t
  - Fix post script to create targeted policy config file


author: Dan Walsh <dwalsh@redhat.com> 2.2.20-1
changelog:
  - Fix load_policy to work on MLS
  - Fix cron_rw_system_pipes for postfix_postdrop_t
  - Allow audotmount to run showmount


author: Dan Walsh <dwalsh@redhat.com> 2.2.19-2
changelog:
  - Fix swapon
  - allow httpd_sys_script_t to be entered via a shell
  - Allow httpd_sys_script_t to read eventpolfs


author: Dan Walsh <dwalsh@redhat.com> 2.2.2-1
changelog:
  - Update to upstream
  - Turn off execheap execstack for unconfined users
  - Add mono/wine policy to allow execheap and execstack for them
  - Add execheap for Xdm policy


author: Dan Walsh <dwalsh@redhat.com> 2.1.12-3
changelog:
  - Fix for procmail/spamassasin
  - Update to upstream
  - Add rules to allow rpcd to work with unlabeled_networks.


author: Dan Walsh <dwalsh@redhat.com> 2.1.6-13
changelog:
  - Add dri libs to textrel_shlib_t
  - Add system_r role for java
  - Add unconfined_exec_t for vncserver
  - Allow slapd to use kerberos


author: Dan Walsh <dwalsh@redhat.com> 2.1.3-1
changelog:
  - Turn back on execmem since we need it for java, firefox, ooffice
  - Allow gpm to stream socket to itself


author: Jeremy Katz <katzj@redhat.com> - 2.1.2-3
changelog:
  - fix requirements to be on the actual packages so that policy can get
    created properly at install time


author: Dan Walsh <dwalsh@redhat.com> 2.1.2-1
changelog:
  - Update to upstream 
  - Turn off allow_execmem and allow_execmod booleans
  - Add tcpd and automount policies


author: Dan Walsh <dwalsh@redhat.com> 2.1.1-3
changelog:
  - Add two new httpd booleans, turned off by default
  	* httpd_can_network_relay
  	* httpd_can_network_connect_db


author: Joe Orton <jorton@redhat.com> 1.2.2-2
changelog:
  - avoid linking against -lrt
  - don't print -L${libdir} in --libs output
  - don't export -lcrypt/-luuid in .la file


author: Joe Orton <jorton@redhat.com> 0.9.6-6
changelog:
  - don't override CFLAGS at build time
  - allow setting TCP_NODELAY and TCP_CORK concurrently
  - use _exit() not exit() in child if exec*() fails (upstream #30913)


author: Joe Orton <jorton@redhat.com> 0.9.6-5
changelog:
  - add from 0.9.x branch:
   * fix for apr_{uid,gid}_* error handling (r239592)
   * fix for apr_file_ write flushing (r267192)
  - add backport for use of readdir64_r (r265032, r265681, r265684)


author: Joe Orton <jorton@redhat.com> 0.9.4-22
changelog:
  - backport fixes from HEAD:
   * correct implementation of nested mutexes
   * support for POSIX semaphores on LP64 platforms


author: Joe Orton <jorton@redhat.com> 0.9.4-15
changelog:
  - add support for setuid/setgid/sticky bits (André Malo)
  - add apr_threadattr_{guardsize,stacksize}_set() (latter by Jeff Trawick)


author: Joe Orton <jorton@redhat.com> 0.9.4-14
changelog:
  - enable posixsem and process-shared pthread mutex support, but
    ensure that sysvsem remains the default mechanism


author: Joe Orton <jorton@redhat.com> 0.9.4-13
changelog:
  - entirely remove 2Gb file size limit from apr_file_copy();
    fixes "svnadmin hotcopy" on repos with >2Gb strings table
  - work around getnameinfo bugs with v4-mapped addresses
  - fix apr_time_exp_get() for dates in 2038 (Philip Martin)


author: Joe Orton <jorton@redhat.com> 0.9.4-10
changelog:
  - fix configure check for mmap of /dev/zero
  - just put -D_GNU_SOURCE in CPPFLAGS not _{BSD,SVID,XOPEN}_SOURCE


author: Joe Orton <jorton@redhat.com> 0.9.4-6
changelog:
  - define apr_off_t as int/long/... to prevent it changing
    with _FILE_OFFSET_BITS on 32-bit platforms


author: Joe Orton <jorton@redhat.com> 0.9.3-7
changelog:
  - use AI_ADDRCONFIG in getaddrinfo() support (#73350)
  - include a working libtool script rather than relying on
   /usr/bin/libtool (#97695)


author: Behdad Esfahbod <besfahbo@redhat.com> - 1.14.9-1
changelog:
  - Update to 1.14.9
  - Resolves: #216424, #216850, #211964, #213632
  - Add Thai language engine. (disabled, since there's no libthai)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-7
changelog:
  - Fix problem with pango_layout_get_attributes returning one too few items
    (Needed to fix problems mentioned in #135656, 
    http://bugzilla.gnome.org/show_bug.cgi?id=155912)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-5
changelog:
  - Fix problem in the last patch where we weren't getting the metrics from the 
    right font description (#136428, Steven Lawrance)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-4
changelog:
  - Move place where we compute fontset metrics to fix problems with line 
    height in CJK locales (#131218)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-2
changelog:
  - Add patch from CVS to fix display of U+3000 (#132203,  
    reported upstream by Suresh Chandrasekharan, Federic Zhang)


author: Owen Taylor <otaylor@redhat.com> 1.4.0-2
changelog:
  - Fix location for modules file on ppc/ppc64 (#114399)
  - Make the spec file check to avoid further mismatches


author: Owen Taylor <otaylor@redhat.com> 1.2.5-3.0
changelog:
  - Package pango-querymodules as pango-querymodules-{32,64}; look for 
    pango.modules in an architecture-specific directory.
    (Fixes #111511, Justin M. Forbes)


author: Tim Powers <timp@redhat.com> 1.2.1-3
changelog:
  - remove deps on Xft and Xft-devel since XFree86 no longer has the
    virtual prvodes. Instead, require XFree86-devel > 4.2.99


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Patch from CVS to synthesize GDEF tables for fonts
    without them, like the Kacst fonts in fonts-arabic


author: Havoc Pennington <hp@redhat.com>
changelog:
  - explicitly require pangoxft to be built, so we catch situations such
    as xft.pc moving to /usr/X11R6
  - also add /usr/X11R6/lib/pkgconfig to PKG_CONFIG_PATH as a temporary 
    hack


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fix linked list manipulation problem that was causing hang for anaconda
  - Fix warning from loading mini-fonts with context == NULL


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Remove fixed-ltmain.sh, relibtoolize; to fix relink problems without 
  - Fix bug causing hex boxes to be misrendered
    leaving RPATH (#66005)
  - For FT2 backend, supply FT_LOAD_NO_BITMAP to avoid problems with 
    fonts with embedded bitmaps (#67851)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Up FreeType version to deal with FreeType-2.0.x / 2.1.x \
    ABI changes for pango's OpenType code.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Version 0.22
  - add explicit check for required glib2 version before we do the build,
    so we don't end up with bad RPMs on --nodeps builds
  - PreReq the glib2_version version, instead of 1.3.8 hardcoded that 
    no one had updated recently


author: Tomas Mraz <tmraz@redhat.com> - 0.6.5-14.4
changelog:
  - fix non-exact policy matching (#606904)
  - make pfkey socket buffer size configurable (#607361)
  - use separate pfkey socket for sadb dumps (#590783)
  - do not delete phase 2 SAs when phase 1 delete notification is received (#599115)


author: Tomas Mraz <tmraz@redhat.com> - 0.6.5-11
changelog:
  - fix cleanup of IPSEC SAs in SADB (#231604)
  - fix segfault in timer (#378551)
  - handle new interfaces immediately (#247301)
  - eliminate debug logging overhead when log level is lower (#248567)
  - use the adminsock_path as specified on the command line (#247294)
  - link only necessary libraries (#458631)
  - make racoon PIE executable (#210023)
  - fix for DoS through various memory leaks (CVE-2008-3651 #456660,
    CVE-2008-3652 #458846)


author: Steve Grubb <sgrubb@redhat.com> - 0.6.5-8
changelog:
  - Upstream fix for Racoon DOS, informational delete must be encrypted
  - Resolves: rhbz#235388 - CVE-2007-1841 ipsec-tools racoon DoS


author: Steve Grubb <sgrubb@redhat.com> - 0.6.5-6.3
changelog:
  - Resolves: #234491 kernel sends ACQUIRES that racoon is not catching
  - Resolves: #218386 labeled ipsec does not work over loopback


author: Harald Hoyer <harald@redhat.com> - 0.6.5-4
changelog:
  - backport of important 0.6.6 fixes:
    - sets NAT-T ports to 0 if no NAT encapsulation
    - fixed memory leak


author: Dan Walsh <dwalsh@redhat.com> - 0.6.5-1
changelog:
  - Update to latest upstream version
  - Add MLS Patch to allow use of labeled networks
  - Patch provided by Joy Latten <latten@austin.ibm.com>


author: Bob Relyea <rrelyea@redhat.com> - 1.4.4-0.1
changelog:
  - Silence libpcsc-lite even when the daemon isn't running.
  - fix typo in init file which prevents the config file from being read.
  - Pick up 1.4.4


author: Ville Skyttä <ville.skytta at iki.fi> - 1.3.0-1
changelog:
  - 1.3.0, init script and reader.conf updater included upstream.
  - Split developer docs into a -doc subpackage, include API docs.
  - libmusclecard no longer included, split into separate package upstream.


author: Ville Skyttä <ville.skytta at iki.fi> - 1.2.0-13
changelog:
  - Don't ship static libraries.
  - Don't mark the init script as a config file.
  - Use rm instead of %exclude.
  - Specfile cleanups.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.2.0-10
changelog:
  - Disable dependency tracking to speed up the build.
  - Drop reader.conf patch, it's not needed any more.
  - Rename update-reader-conf to update-reader.conf for consistency with Debian,
    and improve it a bit.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.2.0-0.fdr.6
changelog:
  - Improve package summary.
  - Improvements based on suggestions from Ludovic Rousseau:
    - Don't install pcsc_demo but do include its source in -devel.
    - Sync reader.conf with current upstream CVS HEAD (better docs, less
      intrusive in USB-only setups where it's not needed).


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.2.0-0.fdr.0.2.rc3
changelog:
  - Update to 1.2.0-rc3.
  - Trivial init script improvements.
  - Enable %{_smp_mflags}.
  - Don't bother trying to enable SCF.


author: Karanbir Singh <kbsingh@centos.org> 0.12.2-12.1.el5_5.centos.4
changelog:
  -- Upstream logo removed : Fabian Arrotin <arrfab@centos.org>
  -- Added support for CentOS recognition : Fabian Arrotin <arrfab@centos.org>


author: Chris Feist <cfeist@redhat.com> 0.12.2-12.el5_5.1
changelog:
  - An issue with calling 'virsh nodelist' would cause ricci to hang for
    30 seconds during most requests resulting in timeouts to the web interface.
  - Resolves: rhbz#578954


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-7
changelog:
  - Fix bz501780 (Luci invalidates some "system hostnames" that are valid)
  - Fix bz514051 (fs resource will remount itself if any config changes are made to cluster.conf)
  - Fix bz517114 (Conga should not tag clusternodes with multicast tags)
  - Fix bz519050 (Luci does not validate passwords and incorrect characters can be used)
  - Fix bz521884 (Fix instances of #!/usr/bin/env python in luci)
  - Fix bz530129 (conga does not properly handle HA LVM types)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-6.1
changelog:
  - Fix bz519252: run the 'virsh' command with --readonly to cope with new
    virsh/xen behavior introduced in RHEL 5.4.


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-6
changelog:
  - Fix bz469965 (Adding existing fence device fails)
  - Fix bz499741 (updating qdisk partition global settings wipes out heuristics)
  - Fix bz495109 (Need xen/kvm flag for conga UI)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-5
changelog:
  - Fix bz492392 (Conga Interface for Fence Agents Requires Password even when Password Script is Specified)
  - Fix bz491903 ([RFE] add option 'nfslock' to conga)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-4
changelog:
  - Rework fix for bz483775 (Failover Domains can't be set for VMs as services of cluster suite using Conga)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-1
changelog:
  - Fix bz452704 (Unable to add existing RHEL4 clusters with RHEL5.2 Luci)
  - Fix bz467464 (adding qdisk to existing cluster fails to update cman entry in cluster.conf)
  - Fix bz460038 (Conga fs resource error when editing service)
  - Fix bz483067 (adding resource in conga doesn't work in IE)
  - Fix bz483775 (Failover Domains can't be set for VMs as services of cluster suite using Conga)
  - Fix bz450007 (cannot remove shared fence device through luci)
  - Fix bz466013 (Add luci GUI support for LPAR and vmware fencing)
  - Fix bz459160 (fenced config option to skip nodes with undefined fencing)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.1-4
changelog:
  - Fix bz459562 (charset configuration fix for luci)
  - Fix bz459469 (An unknown device type was given: "gnbd.")
  - Fix bz454933 (Add Support in Conga for Xen migration mapping)
  - Fix bz459623 (Conga error adding new node to existing cluster)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.1-1
changelog:
  - Fix bz444938 (conga fails to create proper cluster.conf entries for gfs2 filesystem type)
  - Fix bz444210 (Adding multiple fence devices at the same time causes duplicate entries)
  - Fix bz444381 (conga writes 'exportpath' instead of 'export' attribute for netfs)
  - Fix bz446907 (rpm -V luci fails)
  - Fix bz450854 (luci doesn't start because of a missing dep /usr/bin/dc)
  - Fix bz206570 (RFE: vm list from ricci)
  - Fix bz430737 (Conga should install the 'cmirror' package when clustered storage is requested)
  - Fix bz379461 (Conga doesn't have the option for modulename for drac fencing)
  - Fix bz433089 (when adding multiple nodes the order is reversed.)
  - Fix bz441581 (Don't allow both label and device for qdisk config if only one can be specified)
  - Fix bz223785 (Storage 'Display Devices by' option does not work)
  - Fix bz250439 (conga is unable to delete snapshot volumes)
  - Fix bz414551 (Sector size list is improperly sorted)
  - Fix bz429350 (RFE: GUI support for failing over a service to another node after X number of restarts)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-8
changelog:
  - Fix bz441580 (conga should install 'sg3_utils' and start service 'scsi_reserve' when scsi fencing is used)
  - Fix bz441573 ("nodename" field for fence_scsi disabled when adding a new fence device/instance)
  - Fix bz442997 (Luci inserts "hostname" instead of "ipaddr" for rsa II fencing device)
  - Fix bz442806 (luci shows wrong state for 'Monitor link' checkbox in IP resource)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-6
changelog:
  - Fix bz434586 (Resource tree does not display multiple children of a parent correctly)
  - Fix bz304931 (Rich Sybase resource agent configuration support)
  - Fix bz437398 (When Luci session times out a re-login is thought to be a logout.)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-4
changelog:
  - Fix bz429151 ([RFE] Luci: increase min password length to 6 characters)
  - Fix bz429152 ([RFE] add inactivity timeout)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-0
changelog:
  - Fixed bz230462 (RFE: Only reboot installation target machines when needed)
  - Fixed bz238655 (conga does not set the "nodename" attribute for manual fencing)
  - Fixed bz239387 (RFE: add timeouts for actions that can leave cluster unreachable)
  - Fixed bz249097 (allow a space as a valid password char)
  - Fixed bz249619 (luci "Manage Systems and Clusters" display of clusters and storage systems is cascaded)
  - Fixed bz252348 (RFE: should only have to enter a system's password once)
  - Fixed bz253223 (When deleting a node from conga, the fence device isn't deleted)
  - Fixed bz253720 ("trust" box shouldn't be an option if it is required)
  - Fixed bz253727 (RFE: graphical view should be default in partiton tables view)
  - Fixed bz253842 (luci ignores File System Resource Configuration)
  - Fixed bz253879 (RFE: drop the link/details column in the resource section table)
  - Fixed bz264161 (RFE: support setting the "__independent_subtree" attribute on cluster resources)
  - Fixed bz277661 (RFE: Better instructions on the luci login page if luci_admin not run.)
  - Fixed bz277711 (RFE: luci_admin should check that luci is running before asking for the password)
  - Fixed bz295771 (RFE: add ability to set self_fence attribute for clusterfs resources)
  - Fixed bz301411 (conga shouldn't turn on init scripts if the user turned them off)
  - Fixed bz303661 (Browser support to encompass Internet Explorer on Windows Vista and XP)
  - Fixed bz304891 (Browser support to encompass Firefox on Windows Vista and XP.)
  - Fixed bz315631 (conga doesn't handle the cluster restart operation properly)
  - Fixed bz317261 (Check for dual power fencing fails when adding new fence instances)
  - Fixed bz320411 (conga should use the node name in cluster.conf and not FQDN for fencing)
  - Fixed bz337041 (Add option to not fail-back service)
  - Fixed bz340111 (Storage redirection after probe does not work on WinXP with FF2)
  - Fixed bz379461 (Conga doesn't have the option for modulename for drac fencing)
  - Fixed bz383071 (Virtual machine configuration - add field for "migration type" xml attr = "migrate")


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-6
changelog:
  - Fixed bz253783
  - Fixed bz253914 (conga doesn't allow you to reuse nfs export and nfs client resources)
  - Fixed bz254038 (Impossible to set many valid quorum disk configurations via conga)
  - Fixed bz253994 (Cannot specify multicast address for a cluster)
  - Resolves: bz253783, bz253914, bz254038, bz253994


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-5
changelog:
  - Fixed bz249291 (delete node task fails to do all items listed in the help document)
  - Fixed bz253341 (failure to start cluster service which had been modifed for correction)
  - Related: bz253341
  - Resolves: bz249291


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-4
changelog:
  - Fixed bz230451 (fence_xvm.key file is not automatically created. Should have a least a default)
  - Fixed bz249097 (allow a space as a valid password char)
  - Fixed bz250834 (ZeroDivisionError when attempting to click an empty lvm volume group)
  - Fixed bz250443 (storage name warning utility produces a storm of warnings which can lock your browser)
  - Resolves: bz249097, bz250443, bz250834
  - Related: bz230451


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-3
changelog:
  - Fixed bz245947 (luci/Conga cluster configuration tool not initializing cluster node members)
  - Fixed bz249641 (conga is unable to do storage operations if there is an lvm snapshot present)
  - Fixed bz249342 (unknown ricci error when adding new node to cluster)
  - Fixed bz249291 (delete node task fails to do all items listed in the help document)
  - Fixed bz249091 (RFE: tell user they are about to kill all their nodes)
  - Fixed bz249066 (AttributeError when attempting to configure a fence device)
  - Fixed bz249086 (Unable to add a new fence device to cluster)
  - Fixed bz249868 (Use of failover domain not correctly shown)
  - Resolves bz245947, bz249641, bz249342, bz249291, bz249091,
  - Resolves bz249066, bz249086, bz249868
  - Related: bz249351


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-2
changelog:
  - Fixed bz245202 (Conga needs to support Internet Explorer 6.0 and later)
  - Fixed bz248317 (luci sets incorrect permissions on /usr/lib64/luci and /var/lib/luci) 
  - Resolves: bz245202 bz248317


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-1
changelog:
  - Fixed bz238655 (conga does not set the "nodename" attribute for manual fencing)
  - Fixed bz221899 (Node log displayed in partially random order)
  - Fixed bz225782 (Need more luci service information on startup - no info written to log about failed start cause)
  - Fixed bz227743 (Intermittent/recurring problem - when cluster is deleted, sometimes a node is not affected)
  - Fixed bz227682 (saslauthd[2274]: Deprecated pam_stack module called from service "ricci")
  - Fixed bz238726 (Conga provides no way to remove a dead node from a cluster)
  - Fixed bz239389 (conga cluster: make 'enable shared storage' the default)
  - Fixed bz239596
  - Fixed bz240034 (rpm verify fails on luci)
  - Fixed bz240361 (Conga storage UI front-end is too slow rendering storage)
  - Fixed bz241415 (Installation using Conga shows "error" in message during reboot cycle.)
  - Fixed bz241418 (Conga tries to configurage cluster snaps, though they are not available.)
  - Fixed bz241706 (Eliminate confusion in add fence flow)
  - Fixed bz241727 (can't set user permissions in luci)
  - Fixed bz242668 (luci init script can return non-LSB-compliant return codes)
  - Fixed bz243701 (ricci init script can exit with non-LSB-compliant return codes)
  - Fixed bz244146 (Add port number to message when ricci is not started/firewalled on cluster nodes.)
  - Fixed bz244878 (Successful login results in an infinite redirection loop with MSIE)
  - Fixed bz239388 (conga storage: default VG creation should be clustered if a cluster node)
  - Fixed bz239327 (Online User Manual needs modification)
  - Fixed bz227852 (Lack of debugging information in logs - support issue)
  - Fixed bz245025 (Conga does not accept '&amp;' character in password field for Fence configuration)
  - Fixed bz225588 (luci web app does not enforce selection of fence port)
  - Fixed bz212022 (cannot create cluster using ip addresses)
  - Fixed bz223162 (Error trying to create a new fence device for a cluster node)
  - Upgraded to the latest Plone (2.5.3)
  - Added a "reprobe storage" button that invalidates cached storage reports
    and forces a new probe.
  - Resolves: bz238655, bz221899, bz225782, bz227682, bz227743, bz239389,
  - Resolves: bz239596, bz240034, bz240361, bz241415, bz241418, bz241706,
  - Resolves: bz241727, bz242668, bz243701, bz244146, bz244878, bz238726,
  - Resolves: bz239388, bz239327, bz227852, bz245025, bz225588, bz212022


author: Ryan McCabe <rmccabe@redhat.com> 0.9.2-5
changelog:
  - Fixed bz225206 (Cluster cannot be deleted (from 'Manage Systems') - but no error results)
  - Fixed bz225164 (Conga allows creation/rename of clusters with name greater than 15 characters)
  - Fixed bz227758 (Entering bad password when creating a new cluster = UnboundLocalError: local variable 'e' referenced before assignment)
  - Resolves: bz225206, bz225164, bz227758


author: Stanko Kupcevic <kupcevic@redhat.com> 0.9.2-4
changelog:
  - Do not fail on i18n machines
  - Fixed bz225747 (Create/delete cluster - then access disk on node = Generic error on host: cluster tools: cman_tool errored)
  - Fixed bz233326 (CVE-2007-0240 Conga includes version of Zope that is vulnerable to a XSS attack)
  - Fixed bz228637 (CVE-2007-1462 security alert - passwords sent back from server as input value)
  - Fixed bz229027 (luci failover domain forms are missing/empty)
  - Fixed bz230447 (fence_xvm is incorrectly listed as "xmv" in virtual cluster)
  - Fixed bz230452 (Advanced options parameters settings don't do anything)
  - Fixed bz230454 (Unable to configure a virtual service)
  - Fixed bz230457 (kmod-gfs-xen not installed with Conga install)
  - Fixed bz230461 ('enable shared storage' option cleared whenever there is a configuration error)
  - Fixed bz230469 (Must manually edit cluster.conf on the dom0 cluster to add "<fence_xvmd/>")
  - Resolves: bz229027, bz230447, bz230452, bz230454, bz230457,
  - Resolves: bz230461, bz230469, bz228637, bz233326, bz225747


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-27
changelog:
  - Fixed bz214989 (Package download not working for Conga during cluster creation)
  - Fixed bz219522 (Restarting a cluster via luci web gui = UnboundLocalError - local variable 'e' referenced before assignment)
  - Fixed bz201394 (luci doesn't verify ricci's SSL cert against trusted list)
  - Fixed bz212021 (various luci buttons do nothing)
  - Fixed bz212448 (release blocker: turn off debug mode of server)
  - Fixed bz212445 (release blocker: prevent management page access)


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-26
changelog:
  - luci storage: fix bytes->TB conversion
  - Improved bz201394: luci doesn't verify ricci's SSL cert against trusted list (step 1 - backend)
  - Fixed bz217387 (luci - HTML error shows up in display (minor))
  - Fixed bz215031 (Cannot add a resource to a service via luci web app)
  - Fixed bz218040 (luci reports "unknown" as cluster name if cluster creation fails)
  - Fixed bz218941 (Conga/luci - cannot add node to cluster via luci web app)
  - Fixed bz219156 (Errors in performing node-specific tasks due to ricci outage not reflected in luci display)
  - Fixed bz217703 (clustered vg creation fails)
  - Resolves: bz217387, bz215031, bz218040, bz218941, bz219156, bz217703
  - Related: bz201394


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-24
changelog:
  - Fixed bz215039 (Cannot create a new resource via luci web app)
  - Fixed bz215034 (Cannot change daemon properties via luci web app)
  - Fixed bz214790 (Stop/restart cluster not working via luci web app)
  - Fixed bz213690 (luci - Reversed links in colophon (gui - minor))
  - Fixed bz213266 (Conga - modifying a cluster node's cluster membership in a subnet with other clusters results in the wrong cluster.conf)
  - Fixed bz213083 (luci - should display usernames in some logical/sorted order (usability))
  - Fixed bz212601 (luci - selecting cluster name or cluster node name indicates error in install and displays empty form)
  - Fixed bz212021 (various luci buttons do nothing)
  - Fixed bz212006 (create cluster does not show status as cluster is being created)
  - Fixed bz212584 (luci does not retrieve failed ricci queue elements)
  - Fixed bz212440 (luci persists possibly incorrect name for a system)
  - Improved bz213306 (ricci - log probing can take minutes to complete)
  - Fixed starting/stopping services
  - Fixed deleting cluster
  - Fixed deleting node
  - Fixed redirection for all async->busy wait calls
  - Storage module: properly probe cluster quorum if LVM locking
    is marked as clustered
  - Resolves: bz215039, bz215034, bz214790, bz213690, bz213266
  - Resolves: bz213083, bz212601, bz212021, bz212006, bz212584
  - Resolves: bz212440
  - Related: bz213306


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-21
changelog:
  - 211564: ricci allocates huge memory chunk, causing long swapping
  - 211345: cluster_adapters is missing import of Xenvm module
  - 211191: SELinux issues tracking bug
  - 211370: retrieving log from node fails
  - 211942: Xenvm moniker must be eradicated from UI
  - 211375: unable to reliably create a cluster
  - 211373: reboot node fails from storage tab


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-16
changelog:
  - Enable zope/plone inclusion on RHELs
  - Remove luci's dependency on ricci
  - Many improvements of cluster management interface
  - Add full GFS1/2 support; detect many other filesystems
  - Suppress msgs from init script (bz204235)
  - Upgrade zope to 2.9.4 (track Fedora Core)


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-12
changelog:
  - Don't auto-start ricci after installation, do it manually
  - Under certain circumstances, default luci password would not get reset
  - Many Luci improvements


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-11.7
changelog:
  - Move ricci-modrpm, ricci-modlog, ricci-modstorage, ricci-modservice
    from /usr/sbin to /usr/libexec


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-11
changelog:
  - Spin off clustermon.srpm (modcluster, cluster-snmp and
    cluster-cim) from conga.srpm
  - Luci: tighten down security


author: Nima Talebi <nima@it.net.au> - 3.10.8-1
changelog:
  - New Upstream release.
  - Big-endian and little-endian approved.
  - Packaged unit-test to tarball.
  - Rewritten unit-test to be able to run as non-root user, where it will not
    try to read /dev/mem.
  - Added two dmidump data files to the unit-test.


author: David Sommerseth <davids@redhat.com> - 3.10.7-3
changelog:
  - Fixed even more .spec file issues and removed explicit mentioning
    of /usr/share/python-dmidecode/pymap.xml


author: Adam Tkac <atkac redhat com> 4.1.2-14.el5_5.3
changelog:
  - vncserver script: accept <+optname> option when specified as the first one
    (#494750)
  - libvnc.so: wake up from DPMS sleep state when receive mouse/keyboard event
    (#581478)


author: Adam Tkac <atkac redhat com> 4.1.2-10.1
changelog:
  - vncserver prints error when Xvnc fails to start
  - enabled RENDER on all archs
  - initialize visuals correctly
  - remove wrong vnc-render-sigfault.patch


author: Adam Tkac <atkac redhat com> 4.1.2-10
changelog:
  - build cleanup
    - vnc-maint.patch
  - removed unused patches
    - vnc-def.patch
    - vnc-s390.patch
    - vnc-fontpath.patch
    - vnc-ppc64.patch
    - vnc-build.patch


author: Adam Tkac <atkac redhat com> 4.1.2-7.el5
changelog:
  - added xorg-x11-fonts-base + xorg-x11-xauth dependencies
  - only ppc+ppc64 has enabled render extension by default


author: Jitka Kudrnacova <jkudrnac@redhat.com> - 4.1.2-3
changelog:
  - vncviewer now supports NewFBSize pseudoencoding (#180939)
  - do not BuildRequire libdrm-devel on s390, s390x, ppc64 it is not available there


author: Jitka Kudrnacova <jkudrnac@redhat.com> 4.1.1-38
changelog:
  - fixed crash of Xnvc caused by a NULL pointer in interfaces (bug #187607)
  - This also fixes crash of Xvnc when vpnc is running (bug #187069)
  - don't build on ppc64 due to intermittent build problems


author: Jitka Kudrnacova <jkudrnac@redhat.com> 4.1.1-36
changelog:
  - with default cofiguration, /etc/init.d/vncserver start will say 
    "no displays configured" (bug #182161)


author: Jitka Kudrnacova <jkudrnac@redhat.com> 4.1.1-35
changelog:
  - Add a test for existence of index.theme before calling
    gtk-update-icon-cache in post-(un)installation script,
    bug #179704


author: Tim Waugh <twaugh@redhat.com> 4.1.1-33
changelog:
  - Use VNC-provided Xregion (bug #176435).
  - Prevent restorecon error message when not present (bug #176654).


author: Tim Waugh <twaugh@redhat.com> 4.1.1-27
changelog:
  - Fix 64-bit server (bug #174702).
  - Build requires freetype-devel.
  - Build requires libXext-devel, libXtst-devel, automake, libtool, pkgconfig,
    libfontenc-devel, xorg-x11-util-macros.


author: Tim Waugh <twaugh@redhat.com> 4.1.1-26
changelog:
  - Apply patch to allow vncviewer window reparenting (bug #174640).
  - Build again on s390/s390x (bug #174569).


author: Tim Waugh <twaugh@redhat.com> 4.1.1-24
changelog:
  - Build X extension module again.
  - Install X extension module into modules/ directory.
  - Remove xscreensaver patch, since it causes badness.


author: Tim Waugh <twaugh@redhat.com> 4.1.1-23
changelog:
  - ExcludeArch s390 s390x (see bug #174569).
  - Re-base on modular xorg-x11 (bug #173323).
  - Build requires modular X things.


author: Tim Waugh <twaugh@redhat.com> 4.1.1-16
changelog:
  - Added -nohttpd option to vncserver, based on patch from bug #161288.
  - Included -nohttpd, -nolisten tcp, and -localhost options in example
    sysconfig file (bug #165334).


author: Tim Waugh <twaugh@redhat.com> 4.1.1-15
changelog:
  - Fixed xorg-x11 build (__SSP__ gets set by -fstack-protector).
  - Fixed desktop file again (bug #63689).


author: Tim Waugh <twaugh@redhat.com> 4.1-0.1
changelog:
  - 4.1 (but still 4.0 Java viewer for the moment).
  - Removed sparc patch.
  - Fixed VNC module link line (from upstream).


author: Tim Waugh <twaugh@redhat.com> 4.0-9
changelog:
  - Don't build hw/xfree86/etc.
  - Prevent xorg-x11 build failure in rman.
  - Build requires autoconf, flex, bison.
  - Use correct PATH setting when started from initscript (bug #84167).


author: Tim Waugh <twaugh@redhat.com> 4.0-1.beta5.1
changelog:
  - 4.0beta5.
  - Removed compat, f8 and crash patches.
  - Fixed via patch now that NULL is not a valid parameter default.
  - Updated gcc34 patch.


author: Tim Waugh <twaugh@redhat.com> 4.0-0.beta4.2
changelog:
  - 4.0beta4.
  - No longer need compile, dotvnc, norender patches.
  - Don't be so picky about which architectures to build on any more.
  - Build requires XFree86-devel.


author: Tim Waugh <twaugh@redhat.com> 4.0-0.beta3.7
changelog:
  - Ship vncconfig(1) front-end.
  - In default xstartup, exec /etc/vnc/xstartup if it exists.
  - Track XFree86 package.
  - Fix compilation (bug #102547).
  - Fix vncpasswd (bug #102435).


author: Tim Waugh <twaugh@redhat.com> 4.0-0.beta3.5
changelog:
  - Make default xclients file include instructions for 'normal' desktop.
  - Server subpackage doesn't require XFree86.
  - desktop file: add StartupWMClass tag
  - init script: set USER (bug #101674).
  - init script: pause when restarting to give the server a chance to stop
    (bug #84817).
  - vncpasswd: create ~/.vnc if it doesn't already exist.


author: Tim Waugh <twaugh@redhat.com> 4.0-0.beta3.4
changelog:
  - Allow old -dontdisconnect option, and behave a bit more like Xvnc used to
    if it is given (default to no password, use RFB3.3 protocol).
  - Fixed DisconnectClients bug.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-18:.8
changelog:
  - Applied patch to fix cupsd memory corruption vulnerability
    (CVE-2010-2941, STR #3648, bug #624438).
  - Fix latent privilege escalation vulnerability (CVE-2010-2431,
    STR #3510, bug #605397).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-18:.7
changelog:
  - Reverted patch for STR #3563 as it does not fix the original problem
    and may well introduce further regressions (bug #601516).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-18:.5
changelog:
  - Adjust texttops output to be in natural orientation (STR #3563).
    This fixes page-label orientation when texttops is used in the
    filter chain (bug #601516).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-18:.2
changelog:
  - Applied patch for CVE-2010-1748 (web interface memory disclosure,
    STR #3577, bug #591983).
  - Applied patch for CVE-2010-0542 (texttops unchecked memory
    allocation failure leading to NULL pointer dereference, STR #3516,
    bug #587746).
  - Applied patch for CVE-2010-0540 (CUPS administrator web interface
    CSRF, STR #3498, bug #588805).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-16
changelog:
  - Applied patch to prevent memory leak when adding/modifying printers
    (bug #540646, STR #2836).
  - Applied patch to fix CVE-2009-3553 (bug #530111, STR #3200).
  - Applied patch to fix CVE-2009-2820 (bug #529833, STR #3367, STR #3401).


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Fixed lspp.patch to avoid memory leak (bug #496008).
  - Applied patches to enable changing of quotas
    with lpadmin (bug #496082, STR #3077, STR #3078).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Use poppler pdftops wrapper filter from upstream (bug #527429).  No
    longer need ext, includeifexists, strict-aliasing,
    CVE-2009-0146,0147,0166, cert-batch3892,4781,5486,19856,19869, or
    CVE-2009-3608,3609 patches.
  - Also fixes rotation of landscape documents when printed from OS X
    (bug #447987).


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Applied patch to prevent removing of multiple file job when
    the printer is disabled and enabled again (bug #506257, STR #3226).
  - Applied patch to fix issues with CGI handling (bug #497632, STR #2781, STR #2816).
  - Applied patch to fix incorrect CGI handling (bug #460898, STR #3194)
    and use php-cgi instead of php when running PHP scripts (bug #460898, STR #2923).


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Requires tmpwatch for the cron.daily script (bug #487495).
  - Applied patch to fix POSTing to custom cgi (bug #506316, STR #3221).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-13
changelog:
  - Include NULL pointer check in ObjectStream::getObject.  Part of the
    fix for CVE-2009-3608 (bug #526637).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-10
changelog:
  - Reverted php-cgi change due to incorrectly handling of CGI output
    that is not line-based (STR #3194, bug #460898).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-9
changelog:
  - Include printer-uri IPP attribute in IPP-Get-Jobs requests in order
    to be able to operate correctly with newer versions of CUPS
    (bug #497529, STR #2996, STR #3107, STR #3117).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Applied additional patches for batch3892.pdf, batch4781.pdf,
    batch5486.pdf, batch19856.pdf, batch19869.pdf testing files from
    CERT (bug #491864).
  - Applied patches to fix CVE-2009-0163 (bug #490596),
    CVE-2009-0146 (bug #490612), CVE-2009-0147 (bug #490614),
    and CVE-2009-0166 (bug #490625).
  - Fixed SendFF option in textonly filter (bug #491190).
  - Requires krb5 library that contains correct krb5_cc_new_unique()
    function (bug #489714).
  - MIME type detection fixes (bug #479635): always set document-name in
    client library (STR #3055) and fixed handle of "or" rules (STR #3059).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't verify MD5 sum, file size, or mtime for several config files:
    cupsd.conf, client.conf, classes.conf, printers.conf, pdftops.conf,
    snmp.conf (bug #487161).
  - Fixed cupsGetNamedDest() behaviour when lpoptions file specifies a
    non-existent default printer (bug #481481, STR #3082).
  - Fixed admin URLs in CUPS web interface (bug #479809, STR #3022).
  - Fixed mailto notifier (bug #474920, STR #3011).
  - Fixed option encoding for "compression" (bug #474814, STR #2997).
  - Marked templates and translated templates as configuration files
    (bug #474769).
  - Fixed a busy-loop in the scheduler that could occur when a
    connection is closed (bug #474323).
  - Use php-cgi instead of php when running PHP scripts (bug #460898).
  - Applied patch from upstream to fix handling of "Satisfy Any" in
    cupsd.conf (bug #481303).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-8
changelog:
  - Applied patch to fix STR #2974 (bug #473905, CVE-2008-5286,
    CVE-2008-1722).
  - Applied patch to fix STR #2774 (bug #473915, CVE-2008-5184).
  - Applied patch to fix RSS subscription limiting (bug #473901,
    CVE-2008-5183).
  - Run the serial backend as root (bug #216658).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-6
changelog:
  - Applied patch to fix CVE-2008-3639 (STR #2918, bug #464722).
  - Applied patch to fix CVE-2008-3640 (STR #2919, bug #464722).
  - Applied patch to fix CVE-2008-3641 (STR #2911, bug #464722).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-2
changelog:
  - Preserve default BrowseAllow value as @LOCAL so as to avoid
    unexpected configuration file changes.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-1
changelog:
  - Preserve _cupsAdminGetServerSettings and _cupsAdminSetServerSettings
    function declarations in adminutil.h, and ship i18n.h as in 1.2.x.
  - Preserve 'do not use' comment in http_t struct definition.
  - Applied upstream patch to fix https stalls when using Firefox 3
    (bug #453610, STR #2892).
  - Compile pdftops/GlobalParams.cxx with -fno-strict-aliasing (bug #447868).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Require exactly matching libs package (bug #447867).
  - Fixed cancel man page (bug #434967).
  - Fixed permissions of classes.conf in file manifest to match those
    set in cupsd (bug #245748).
  - Fixed log file permissions (bug #218761).
  - Backported cupsGetNamedDest() support for faster look-ups when the
    destination is known, such as in 'lp -d ...' (bug #428086).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Re-based to 1.3.7.  Fixes bug #241406 (STR #2400),
    bug #249570 (STR #2228), bug #250383 (STR #2084, STR #2198),
    bug #409121, bug #430067 (STR #1969, STR #2386), bug #430076
    (STR #1985), bug #430648 (STR #2319), bug #432001,
    bug #433087 (STR #2319), bug #441439 (STR #2699), bug #441811,
    bug #446023 (STR #1261), bug #447548 (STR #2179), bug #451101,
    bug #453396.
  - No longer need initscript, locale, relro, directed-broadcast,
    str2061, str2056, str2055, get_jobs, af_unix-auth, str2264,
    if-modified-since, str2266, str2023, str2117, str2351,
    CVE-2007-0720, CVE-2007-3387, CVE-2007-4351,
    CVE-2007-4352,5492,5393, CVE-2007-4045, docinfo-crash, str2656,
    CVE-2008-0047, CVE-2008-0053, CVE-2008-1373 or CVE-2008-1722
    patches.
  - Build now requires krb5-devel and avahi-compat-libdns_sd-devel.
  - The devel sub-package now requires krb5-devel.
  - Don't run autoconf; only lspp patch required it, and
    autoconf-generated changes have now been folded into that patch.
  - Don't aclocal even when we modify m4 files -- CUPS does not use
    automake (bug #250251).
  - Don't overwrite upstream snmp.conf file.
  - Move _http_s structure into public header file to prevent build
    failures in other packages.  Ship md5.h for this as well.
  - Revert STR #2537 so that non-UTF-8 clients continue to be accepted.
  - Don't strip foomatic recommended strings from make/model names.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.18
changelog:
  - Applied patch to fix CVE-2008-0053 (HP-GL/2 input processing, bug #438117).
  - Applied patch to fix CVE-2008-1373 (GIF overflow, bug #438303).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.17
changelog:
  - Applied patch to prevent heap-based buffer overflow in CUPS helper
    program (bug #436153, CVE-2008-0047, STR #2729).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.16
changelog:
  - Prevent double-free when a browsed class has the same name as a printer
    or vice versa (bug #433767, STR #2656).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.15
changelog:
  - Fixed LSPP patch so that strings allocated with cupsdSetString() are always
    clear correctly (bug #258221).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Applied patch to fix CVE-2007-4045 (bug #356581).
  - Applied patch to fix CVE-2007-4352, CVE-2007-5392 and
    CVE-2007-5393 (bug #356581).
  - Applied patch to fix CVE-2007-4351 (STR #2561, bug #353991).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.9
changelog:
  - Fixed IPv6 address parsing (bug #241400, STR #2117).
  - Fixed a bug that caused cups-lpd not to set the correct value for
    job-originating-host-name (bug #240223, STR #2023).
  - Cleaned up initscript error handling (bug #237953).
  - Fixed cups-lpd -odocument-format=... option (bug #230073, STR #2266).
  - Fixed If-Modified-Since: handling in libcups (bug #218764, STR #2133).
  - Make the initscript use start priority 56 (bug #213828).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.8
changelog:
  - Applied fix for STR #2264 (bug #230118).
  - Added patch for UNIX domain sockets authentication (bug #230613).
  - LSPP: Updated patch for line-wrapped labels (bug #228107).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.7
changelog:
  - Don't reload CUPS after rotating the logs with logrotate, but make sure
    to use the new file in that case (bug #215024).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.6
changelog:
  - LSPP: added check_context() function for get_jobs(), get_job_attrs() and
    validate_user() (bug #229673).
  - Fixed a potential scheduler crash (bug #231522).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.2
changelog:
  - Run the serial backend as root (bug #216658).
  - Fixed LSPP SELinux check (bug #216856).
  - LSPP fix: process URI before logging it (bug #216673).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.1
changelog:
  - Reload, don't restart, when logrotating (bug #215024).
  - Fixed pdftops.conf (bug #214612).
  - LSPP patch fix (bug #213501).
  - Added filter and PPD for text-only printer (bug #213034).
  - Fixed parallel backend (bug #213023, STR #2056).
  - Added support for /dev/ttyUSB devices (bug #212580, STR #2061).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-9
changelog:
  - adminutil.c: when writing 'BrowseAllow @LOCAL', add a comment about what
    to change it to when using directed broadcasts from another subnet
    (bug #204373).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-8
changelog:
  - LSPP patch didn't get updated properly in 1:1.2.4-6.  Use the right
    patch this time (bug #208676).  LSPP re-enabled.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-10
changelog:
  - Remove 'Provides: LPRng = 3.8.15-3' (bug #148757).
  - Applied patch to fix STR #1893 (bug #201800).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-6
changelog:
  - Use replacement snmp.c from STR #1737 (bug #193093).
  - Re-enable LSPP; doesn't harm browsing after all.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.1-2
changelog:
  - 1.2.1.
  - Another STR #1705 fix (bug #192034).
  - Fixed devel package multilib conflict (bug #192664).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-7
changelog:
  - Sync to svn5568.  No longer need rpath patch.
  - Added a 'conflicts:' for kdelibs to prevent bug #192548.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-4
changelog:
  - Disable back-channel data in the usb backend (STR #1705, bug #192034).
  - Fix for 'browsing stops on reload', STR #1670 (bug #191217).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5538.
  - Added 'restartlog' to initscript, for clearing out error_log.  Useful
    for problem diagnosis.
  - Initscript no longer needs to check for printconf-backend.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5470.
  - No longer need link, CAN-2005-0064, or no-propagate-ipp-port patches.
  - Switch to upstream PIE implementation (every single binary is PIE).
  - Extend relro to all binaries.
  - Better rpath patch.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - No longer need backend, rcp, or ppdsdat patches.
  - Use configure switch for LogFilePerm default instead of patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.5.rc3.2
changelog:
  - Patch pdftops to understand 'includeifexists', and use that in the
    pdftops.conf file (bug #189809).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.8
changelog:
  - No longer need openssl-devel.
  - Build with LDAP_DEPRECATED=1, to pick up declarations of ldap_init() etc.
  - Only warn about ACLs once (STR #1532).
  - Fix imagetops filter (STR #1533).
  - Sync pstops.c with svn 5382.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.1
changelog:
  - Ship a printers.conf file, and a client.conf file.  That way, they get
    their SELinux file contexts set correctly.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b2.6
changelog:
  - Add KDE compatibility symbols _ipp_add_attr/_ipp_free_attr to ipp.h, with
    a comment saying why they shouldn't be used.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn5102.0
changelog:
  - New svn snapshot.
  - No longer need enabledisable patch.
  - Fixed double-free in scheduler/policy.c (STR #1428).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn4964.0
changelog:
  - Use -fPIE not -fpie in PIE patch.
  - Fix link patch.
  - Patch in PIE instead of using --enable-pie, since that doesn't work.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - 1.2 svn snapshot.
  - No longer need doclink, str1023, pdftops, sanity, lpstat, str1068,
    sigchld, gcc34, gcc4, slow, CAN-2004-0888, CAN-2005-2097, finddest,
    str1249, str1284, str1290, str1301, CVE-2005-3625,6,7 patches.
  - Removed autodetect-tag patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.23-18
changelog:
  - Raise IPP_MAX_VALUES to 100 (bug #164232).  STR #1284.
  - Made FindDest better behaved in some instances (bug #164232).  STR #1283.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-2
changelog:
  - Fixed cups-lpd file mode (bug #137325).
  - Convert all man pages to UTF-8 (bug #107118).  Patch from Miloslav Trmac.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc2.1
changelog:
  - Make cancel-cups(1) man page point to lp-cups(1) not lp(1) (bug #136973).
  - Use upstream patch for STR #953.
  - 1.1.22rc2.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.7
changelog:
  - Prevent filters generating incorrect PS in locales where "," is the
    decimal separator (bug #136102).  Patch from STR #970.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc2.1
changelog:
  - 1.1.21rc2.
  - No longer need state, reload-timeout or str743 patches.
  - httpnBase64 patch no longer applies; alternate method implemented
    upstream.
  - Fix single byte overread in usersys.c (spotted by Colin Walters).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-9
changelog:
  - Apply patches from CVS (authtype) to fix STR #434, STR #611, and as a
    result STR #719.  This fixes several problems including those noted in
    bug #114999.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-8
changelog:
  - If cupsd fails to start, make it exit with an appropriate code so that
    initlog notifies the user (bug #110135).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix cups/util.c:get_num_sdests() to use encryption when it is necessary
    or requested (bug #118982).
  - Use upstream patch for the HTTP/1.1 Continue bug (from STR716).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-7
changelog:
  - Fix non-conformance with HTTP/1.1, which caused failures when printing
    to a Xerox Phaser 8200 via IPP (bug #122352).
  - Make lppasswd(1) PIE.
  - Rotate logs within cupsd (instead of relying on logrotate) if we start
    to approach the filesystem file size limit (bug #123003).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-4
changelog:
  - Tracked D-BUS API changes.
  - Updated D-BUS configuration file.
  - Symlinks to avoid conflicting with bash builtins (bug #102490).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-2
changelog:
  - Try harder to find a translated page for the web interface (bug #107619).
  - Added build_as_pie conditional to spec file to facilitate debugging.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-1
changelog:
  - 1.1.20.
  - No longer need idefense, str226 patches.
  - Updated sanity patch.
  - The devel sub-package requires openssl-devel (bug #110772).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't ignore the file descriptor when ShutdownClient is called: it
    might get closed before we next try to read it (bug #107787).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-10
changelog:
  - Pass correct attributes-natural-language through even in the absence
    of translations for that language (bug #100984).
  - Show compilation command lines.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-7
changelog:
  - Add some %if %use_dbus / %endif's to make it compile without dbus
    (bug #97397).  Patch from Jos Vos.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-0.rc4.1
changelog:
  - 1.1.19rc4.  Ported initscript, idefense, ppdsdat, dbus patches.
  - No longer need error, sigchld patches.
  - Ship cupstestppd.


author: Havoc Pennington <hp@redhat.com> 1:1.1.18-4
changelog:
  - adjust dbus patch - dbus_bus_get() sends the hello for you, 
    and there were a couple of memleaks
  - buildprereq dbus 0.9
  - rebuild for new dbus
  - hope it works, I'm ssh'd in with no way to test. ;-)


author: Tim Waugh <twaugh@redhat.com> 1.1.18-1
changelog:
  - 1.1.18.
  - No longer need uninit patch.
  - Some parts of the iDefense and pdftops patches seem to have been
    picked up, but not others.


author: Tim Waugh <twaugh@redhat.com> 1.1.17-6
changelog:
  - Add epoch to internal requirements.
  - Make 'condrestart' return success exit code when daemon isn't running.


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.15-14
changelog:
  - Buildrequire pam-devel.
  - Patch default PAM config file to remove directory names from module paths,
    allowing the configuration files to work equally well on multilib systems.
  - Patch default PAM config file to use system-auth, require the file at build-
    time because that's what data/Makefile checks for.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-13
changelog:
  - Use logrotate for log rotation (bug #76791).
  - No longer need cups.desktop, since redhat-config-printer handles it.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-11
changelog:
  - Use %configure for multilib correctness.
  - Use libexec instead of lib for CUPS_SERVERBIN.
  - Ship translated man pages.
  - Remove unshipped files.
  - Fix file list permissions (bug #59021, bug #74738).
  - Fix messy initscript output (bug #65857).
  - Add 'reload' to initscript (bug #76114).


author: Tim Waugh <twaugh@redhat.com> 1.1.15-7
changelog:
  - Really add cups-lpd xinetd file (bug #63919).
  - Ship pstoraster (bug #69573).
  - Prevent fread from trying to read from beyond EOF (fixes a segfault
    with new glibc).


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-3
changelog:
  - Add a symlink /usr/share/cups/doc -> /usr/share/doc/cups-devel-1.1.15
    because some applications expect to find the cups docs in
    /usr/share/cups/doc


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-1
changelog:
  - 1.1.15-1
  - Fix up smb printing trigger (samba-client, not samba-clients)
  - Start cupsd earlier, apparently it needs to be running before samba
    starts up for smb printing to work.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-12
changelog:
  - Support SMB printing (#62407)
  - Add HTML redirections to doc files to work around users mistaking
    /usr/share/doc/cups-1.1.14 for the web frontend (#62405)


author: Bill Nottingham <notting@redhat.com> 1.1.14-7
changelog:
  - lpc man page is alternative too
  - run ldconfig in -libs %post/%postun, not main
  - remove alternatives in %preun


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-5
changelog:
  - Move cups-config to cups-devel subpackage
  - Make alternatives usage a %define to simplify builds for earlier
    releases
  - Explicitly provide things we're supplying through alternatives
    to shut up kdeutils dependencies


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-1
changelog:
  - 1.1.13
  - Add patch for koi8-{r,u} and iso8859-8 encodings (#59018)
  - Rename init scripts so we can safely "killall cupsd" from there


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.1.1 (this has some major bugfixes)
  - Fix a typo in initscript (it's $?, not ?$)
  - Fix /usr/etc vs. /etc trouble, don't insist on /usr/var (YUCK!)
  - Create the spool dir


author: Than Ngo <than@redhat.de>
changelog:
  - update to 1.1 release
  - move back to /etc/rc.d/init.d
  - fix cupsd.init to work with /etc/init.d and /etc/rc.d/init.d
  - split cups


author: Tim Powers <timp@redhat.com>
changelog:
  - started changelog 
  - fixed init.d script location
  - changed script in init.d quite a bit and made more like the rest of our
    startup scripts


author: Cole Robinson <crobinso@redhat.com> - 0.400.3-6.el5
changelog:
  - virt-convert: allow converting to qcow2 (bz 506927)
  - Don't fail if a storage volume was manually deleted (bz 511925)
  - virt-install: Fix --prompt and --disk interaction (bz 516129)
  - Fix virt-install --wait <= 0 (bz 512931, bz 517081)
  - Fix badly formatted error message (bz 523767)
  - Better post install error handling and reporting (bz 545837, bz 498237)
  - virt-image: Hide unimplemented --prompt option (bz 503721)
  - Default to cache=none for new qemu guests (bz 512072)


author: Cole Robinson <crobinso@redhat.com> - 0.400.3-5.el5
changelog:
  - Use ac97 as only sound model for qemu driver (bz 508747)
  - Don't throw errors with unicode using locales (bz 508784)


author: Cole Robinson <crobinso@redhat.com> - 0.400.3-2.el5
changelog:
  - Fix virt-install --disk device=floppy (bz 503053)
  - Fix virt-install --disk vol= and pool= (bz 503073)
  - Make sure detected OS is in our dictionary (bz 503092)
  - Fix PCI device assignment detach/reset calls (bz 499576)
  - Restore old --location behavior for xen HVM (bz 503473)


author: Cole Robinson <crobinso@redhat.com> - 0.300.2-12.el5
changelog:
  - Don't add spurious forward slashes in urls (bz 470891)
  - Fix FTP treeinfo false positives (bz 470888)
  - Revert fix for bz 446950, push to 5.4 (bz 470176)


author: Cole Robinson <crobinso@redhat.com> - 0.300.2-10.el5
changelog:
  - Add --wait option to virt-install (bz 306871)
  - Fix fetching newer suse kernels (bz 449129)
  - Parse treeinfo files for newer fedora trees (bz 460585)
  - Keep windows media inserted for second install stage (bz 447791)
  - Build fix so we don't fail if imports aren't present.


author: Cole Robinson <crobinso@redhat.com> - 0.300.2-9.el5
changelog:
  - Add win2008 and f9 as distro options (rhbz #442702)
  - Exit with proper error code if we receive wrong cli value (rhbz #444986)
  - Remove virt-viewer from Requires, so we don't require X (rhbz #448505)
  - Catch errors during domain lookup (rhbz #288391)
  - Correctly print help messages with unicode characters (rhbz #446950)
  - Allow installing from Scientific Linux trees (rhbz #448634)
  - Add --cpuset=auto command for numa allocation (rhbz #438554)


author: Cole Robinson <crobinso@redhat.com> - 0.300.2-6.el5
changelog:
  - Add --force option to cli utils to not prompt for input.
  - Remove check for file existence in cli utils, breaks scripts.
  - (rhbz #434786)


author: Hugh O. Brock <hbrock@redhat.com> - 0.103.0-3.el5
changelog:
  - Patch to have virtinst set up the guest without auto-reboot. Useful 
  - for testing. Thanks to Jeff Burke (bz #249708)


author: Jeremy Katz <katzj@redhat.com> - 0.99.0-1.el5
changelog:
  - support upstream pvfb config syntax (danpb, #219195)
  - don't traceback on invalid memory param (gcosta, #219270)
  - let the console come back quicker to help with HVM installs (#212024)


author: Jeremy Katz <katzj@redhat.com> - 0.96.0-1
changelog:
  - improve check for if a machine is hvm capable to catch when support isn't
    allowed by the bios (#211276)
  - cleanup after nfs mount failure on pv install (#206196)
  - support for setting vcpus (#210516)


author: Jeremy Katz <katzj@redhat.com> - 0.94.0-1
changelog:
  - Fix using block device as backing (#209138)
  - Fix error handling for invalid install locations (danpb)
  - Write out vcpu config (danpb)


author: Jeremy Katz <katzj@redhat.com> - 0.93.0-1
changelog:
  - Fix hvm network xm config (danpb)
  - Enable PAE with pae hvm hosts (danpb)
  - Fix hvm block backed cds (danpb)
  - Fix handling of block devs backed by vbds (danpb)
  - Ensure we're on a xen kernel (#205889)
  - Default to vncunused


author: Jeremy Katz <katzj@redhat.com> - 0.92.0-1
changelog:
  - Fix silly loop when asking about graphics support (misa)
  - Fix passing macaddr
  - Add support so that we reboot into the guest after installation finishes


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.60
changelog:
  - Add SYSV locking in the case of a read-only filesystem.
  - Resolves: #430942
  - Do not create Xen grub boot entries for a running domU.
  - Resolves: #509568
  - Do not re-link compatible module when also removing it.
  - Resolves: #477089


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.50
changelog:
  - Update weak-modules script to use newer logic on add_modules to
  - avoid occasional creation of needless subdirectories.
  - Resolves: #484762


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.46
changelog:
  - Correct use of 'nm' to avoid unnecessary warning messages.
  - Also add a dependency on binutils and mkinitrd.
  - Resolves: #463777


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.39
changelog:
  - Make modprobe operate in nonblocking mode by default
  - Resolves: #280411.
  - Add a --delete-modules to weak-modules to avoid linking compat
  - Resolves: #432959.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.37
changelog:
  - Sort modules alphabetically.
  - Resolves: #249449.
  - Check override of modules.
  - Resolves: #253512.
  - Fix "--dry-run" option.
  - Resolves: #254141.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.34
changelog:
  - Update to fix inter-module symbol references on 64-bit platforms.
  - (fix wasn't properly in the build yesterday).
  - Resolves: #247986.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.32
changelog:
  - Update fix to pipe issue and use same logic in other place we call "head -n 1"
  - just in case it would ever also cause similarly noisy output.
  - Resolves: #249537.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.31
changelog:
  - Overhaul logic for bootpath driver handling to work with new-kernel-pkg
    grubby better in keeping with their design.
  - Resolves: #252210.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.27
changelog:
  - Make naming of Driver Update Program grub entry more friendly to RHEL users than the previous entries were.
  - Make the resultant grub entry default bootable.
  - Related: #224076.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.15
changelog:
  - Prevent modifying existing grub entries (always add them).
  - Don't ask for new entries to be default by default.
  - Resolves: #222085, #222084.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.10
changelog:
  - Modify weak-modules to handle kmod removal and the need to create
    compatible kernel module links to other compatible modules.
  - Resolves: #215272.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.9
changelog:
  - Modify weak-modules to handle module removal against multiple kABI compat.
    kernels at the same time, removing the correct module links.
  - Resolves: #216645.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.5
changelog:
  - BZ205510 fix causes BZ211519 because mkinitrd mistakenly parses the m-i-t
    output including preloading commands. Reverting this patch for now.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.3
changelog:
  - Updated to upstream with some miscellaneous fixes from contrib.
  - Rebuilt allconf patch since retabbed upstream source.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre2.1.3
changelog:
  - Updated to upstream with new module priority/override features.
  - Documentation updates and other miscellaneous fixes.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre1.4.6
changelog:
  - Don't call depmod on removing a kernel.
  - Warn rather than exit if we can't process weak-updates on new kernel
  - Handle duplicate modules by picking the latter version of the two.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added the mounting of /proc/fs/nfsd to modprobe.conf.dist
    so it gets mounted when nfsd is loaded.


author: Bill Nottingham <notting@redhat.com> 2.4.26-9
changelog:
  - add nfsv4 aliases to modprobe.conf.dist
  - clean out upstreamed aliases in modprobe.conf.dist
  - mount rpc_pipefs when sunrpc is loaded


author: Bill Nottingham <notting@redhat.com> 2.4.26-6
changelog:
  - update module-init-tools to 3.0pre10
  - fix modinfo (#116305)
  - always include /etc/modprobe.conf.dist (don't require the line in modprobe.conf)
  - ship a static modprobe.conf.dist, don't generate it at build time
  - clean up modprobe.conf.dist a little (#113772, #113768)


author: Bill Nottingham <notting@redhat.com> 2.4.26-1
changelog:
  - update to 2.4.26
  - switch around man pages; the module-init-tools man pages are now
    the default
  - add backwards compat usb aliases for the simple case
  - add some commentary to modules.conf/modprobe.conf on conversion
  - modutils-devel goes away


author: Bill Nottingham <notting@redhat.com> 2.4.25-8
changelog:
  - fix leak in module-init-tools-depmod (<arjanv@redhat.com>)
  - look in /lib/modules/`uname -r`/updates for modules


author: Bill Nottingham <notting@redhat.com> 2.4.25-2
changelog:
  - add joystick alias (#91309)
  - add alias for af_key for IPSEC
  - update module-init-tools to 0.9.12
  - ship a modprobe.conf.dist with the aliases that are built into 2.4
    modutils
  - generate a modprobe.conf if needed on install


author: Bill Nottingham <notting@redhat.com> 2.4.22-7
changelog:
  - make sure we don't use diet anywhere but x86, even if it's lying around
  - fix zlib linkage, for real
  - switch ftape alias (#7674)


author: Matt Wilson <msw@redhat.com>
changelog:
  - added a -devel subpackage that contains libraries that apps can use
    to implement insmod and rmmod


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.6
  - alias binfmt-0000 off (#9709)
  - turn off 'modules.conf is more recent than modules.dep' message (#14276,
    others)
  - return nonzero from depmod if there are errors (#40935)
  - fix manpage typo (#33123)


author: Elliot Lee <sopwith@redhat.com> 2.4.5-3
changelog:
  - Add modutils-2.4.5-stblocal.patch from Jakub. See the e-mail message
    inside the patch file for details.
  - Use smp_mflags macro


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.0
  - tweak irda aliases
  - remove vixie-cron dependency (it's not *required*)
  - add missing %build
  LANG=C
  export LANG
  unset DISPLAY
   (where did that go?)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to 2.3.9.
  - port RH patches from 2.1.121 to 2.3.9 where needed.
  - disable warning about conf.modules for now, in 7.0
    we should move to modules.conf.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - pick up ultrapenguin patches (not applied for now).
  - pre-generate keyword.c so gperf doesn't have to be present (not applied).
  - util/sys_cm.c: fix create_module syscall (signed return on sparc too)


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - Handle EM_SPARCV9, kludge to support both 32bit and 64bit kernels
    from the same package on sparc/sparc64.


author: Marek Kasik <mkasik@redhat.com> - 0.5.4-4.4.el5_5.14
changelog:
  - Add poppler-0.5.4-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.5.4-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639839


author: Warren Togami <wtogami@redhat.com> - 2.6.6-2
changelog:
  - Upstream backports:
      0e3079d15adeb12c1e57ceaf5bf037f9b71c8abd Fix AIM SSL clientLogin
      b14ee507e932a395a0e1f29298af162c8614ca0f Fix AIM clientLogin with proxy


author: Warren Togami <wtogami@redhat.com> - 2.6.6-1
changelog:
  - 2.6.6 with security and numerous minor bug fixes
    CVE-2010-0277 CVE-2010-0420 CVE-2010-0423
  - Bug #528796: Get rid of #!/usr/bin/env python


author: Warren Togami <wtogami@redhat.com> 2.6.2-2
changelog:
  - Upstream backports:
      97e003ed2bc2bafbb993693c9ae9c6d667731cc1 aim-buddy-status-grab
      37aa00d044431100d37466517568640cb082680c yahoo-buddy-idle-time
      40005b889ee276fbcd0a4e886a68d8a8cce45698 yahoo-status-change-away
      cb46b045aa6e927a3814d9053c2b1c0f08d6fa62 crash-validate-jid


author: Stu Tomlison <stu@nosnilmot.com> 2.5.8-2
changelog:
  - Backport patch from upstream to enable NSS to recognize root CA
    certificates that use MD2 & MD4 algorithms in their signature, as
    used by some MSN and XMPP servers


author: Warren Togami <wtogami@redhat.com> 2.5.2-6
changelog:
  - Automatically detect booleans to enable build features from dist tag
  - Unify RHEL4 and RHEL5 spec with Fedora to make both easier to maintain


author: Warren Togami <wtogami@redhat.com> 2.5.2-2
changelog:
  - Upstream backports:
    100: sametime-redirect-null crash
    101: NetworkManager-improvement
    102: no-password-in-dialog-if-not-remembering
    103: temporarily-remember-password-during-auto-reconnect
    104: smilie-theme-change-crash
    105: url_fetch_connect_cb-double-free crash
    106: GtkIMHtmlSmileys-remove-crash
    107: remove-dialog-from-open-dialog-list


author: Stu Tomlinson <stu@nosnilmot.com> 2.5.1-3
changelog:
  - Backport fixes from upstream:
    Add "Has You:" back to MSN tooltips
    Fix crash during removal of your own buddy icon
    Fix crash when handling self signed certificate with NSS SSL


author: Stu Tomlinson <stu@nosnilmot.com> 2.4.1-3
changelog:
  - Rebuild for new evolution-data-server
  - Clean up default prefs.xml
  - Enable nautilus integration plugin by default in prefs.xml (#242289)


author: Warren Togami <wtogami@redhat.com> - 2.2.0-2
changelog:
  - License clarification
  - Backport patches to fix memory leaks
  - Backport patches to fix proxy settings & status scores


author: Warren Togami <wtogami@redhat.com> - 2.1.0-2
changelog:
  - Upstream fix backports
    115: gmail-notification-crash #2323
    117: drag-and-drop-mouse-click-group-header #2333
    118: jabber-confirm-authentication-unencrypted-crash #2493


author: Stu Tomlinson <stu@nosnilmot.com> - 2.1.0-1
changelog:
  - 2.1.0
  - Only include translations in libpurple instead of duplicating them in
    packages that depend on libpurple anyway


author: Stu Tomlinson <stu@nosnilmot.com> - 2.0.1-4
changelog:
  - Fix purple-remote for AIM & ICQ accounts (#240589)
  - Add missing Requires to -devel packages
  - Add missing BuildRequires for libxml2-devel


author: Stu Tomlinson <stu@nosnilmot.com> - 2.0.0-1
changelog:
  - 2.0.0
  - Add scriptlets to install & uninstall GConf schemas
  - Move schema file from libpurple to Pidgin to avoid GConf
    dependencies in libpurple
  - rename gaim-fedora-prefs.xml to purple-fedora-prefs.xml


author: Stu Tomlinson <stu@nosnilmot.com>
changelog:
  - Update Gtk icon cache when installing or uninstalling (#238621)
  - Don't own all directories we put icons in


author: Warren Togami <wtogami@redhat.com> - 2.0.0-0.35.beta7devel
changelog:
  - upstream insists that we remove the Epoch
    rawhide users might need to use --oldpackage once to upgrade
  - remove mono and howl cruft


author: Stu Tomlinson <stu@nosnilmot.com> - 2:2.0.0-0.34.beta7devel
changelog:
  - Split into pidgin, finch & libpurple, along with corresponding -devel RPMs
  - Remove ldconfig for plugin directories
  - Fix non-UTF8 %changelog


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.33.beta7devel
changelog:
  - pidgin-2.0.0 snapshot prior to beta7
  - rename gaim to pidgin/purple/finch in various places of spec (not complete)
  - ExcludeArch s390, s390x.  It never did work there.
  - Include meanwhile plugin by moving to Extras


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.31.beta6
changelog:
  - Removed debian-02_gnthistory-in-gtk
    Removed debian-03_gconf-gstreamer.patch
    Upstream recommended removing these patches.
  - Add fix-buggy-fetch-url
  - Enable type_chat and type_chat_nick in default prefs.xml


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.22.beta5
changelog:
  - 2.0.0 beta5
  - Debian patches
      02_gnthistory-in-gtk
      03_gconf-gstreamer
      04_blist-memleak
      05_url-handler-xmpp
      06_jabber-registration-srv
      07_msn-custom-smiley-crash
  - SILC Account Edit Crash


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.19.beta4
changelog:
  - buildreq NetworkManager-glib-devel FC5+ (katzj)
  - #213800 debug window freeze fix
  - #212818 IRC SIGPIPE crash fix


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.17.beta4
changelog:
  - temporary workaround for gstreamer build bug in beta4
    --enable-gstreamer prevented it from working =)
    NOTE: beta4 removed libao support entirely.  Distros that lack gstreamer-0.10+
    will need to use command line sound output from now on.
  - Gadu Gadu is re-included in beta4 without requirement of external library


author: Warren Togami <wtogami@redhat.com> 2.0.0-0.3.beta3
changelog:
  - more spec cleanups
  - buildreq libXScrnSaver-devel, gettext, intltool, desktop-file-utils
  - disable mono for now due to #196877


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-9
changelog:
  - Ensure that security opt flags are used (#165795)
  - Many bug fixes from Peter Lawler (#171350)
    156: Fix Yahoo chatroom ignore on join
    157: Fix Italian yahoo profiles
    158: Strip HTML from status
    159: xmlnode cleanup
    160: Fix crash on non-terminated strings
    161: silc-close-gaim_request-window-prpl-disconnect-p1
    162: silc-close-gaim_request-window-prpl-disconnect-p2
    163: silc-close-gaim_request-window-prpl-disconnect-p3
    164: silc-close-gaim_request-window-prpl-disconnect-p4
    165: silc-close-gaim_request-window-prpl-disconnect-p5
    166: silc-close-gaim_request-window-prpl-disconnect-p6
    167: MSN data corruption fix
    168: msn-kill-convo-close-timeout-notices-p1
    169: msn-kill-convo-close-timeout-notices-p2
    170: msn-kill-convo-close-timeout-notices-p3
    171: forceful-connection_disconnect-not-wipe-password
    172: Clipboard leak and history scrolling fix
    173: smileys-logtype-p1
    174: smileys-logtype-p2
    175: Allow Italics in IRC
    176: Add more authors
    177: Update copyright
    178: Update HACKING doc
    179: Fix doc creation
    180: Fix AIM/ICQ Rate Limiting issue


author: Ray Strode <rstrode@redhat.com> - 1:1.5.0-7
changelog:
  - use upstream desktop file (except use generic name, because 
    this is our default instant messaging client)


author: Peter Jones <pjones@redhat.cm> - 1:1.5.0-4
changelog:
  - rebuild for new cairo, add -Wno-pointer-sign
  - add -Wno-pointer-sign until somebody maintaining this package makes it build
    without it.


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-2
changelog:
  - always use -z relro and FORTIFY_SOURCE opt flags for FC3+ and RHEL4+ 
    (compiler simply ignores these flags if they are unsupported)


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-1
changelog:
  - 1.5.0 security and bug fixes
    CAN-2005-2370 Gadu-Gadu memory alignment bug
    CAN-2005-2102 AIM/ICQ non-UTF-8 Filename Crash
    CAN-2005-2103 AIM/ICQ away message buffer overflow


author: Warren Togami <wtogami@redhat.com> 1:1.4.0-5
changelog:
  - FC5+ automatic -fstack-protector-all switch
  - 150: MSN buddy names with space disconnect and profile corruption
         (supercedes patch 149)
  - 151: Gadu Gadu memory alignment crash
  - 152: Rename Group Merge crash
  - 153: mailto: parse crash (util.c)
  - 154: mailto: parse crash (MSN)
  - 155: mailto: parse crash (Zephyr)


author: Warren Togami <wtogami@redhat.com> 1:1.4.0-4
changelog:
  - 149: MSN username with space disconnect fix
  - Do not own perl dir, remove empty files (#162994 jpo)


author: Warren Togami <wtogami@redhat.com> 1:1.3.1-0
changelog:
  - 1.3.1 more bug fixes
    CAN-2005-1269 CAN-2005-1934
  - enable Message Notification plugin by default


author: Warren Togami <wtogami@redhat.com> 1:1.3.0-1
changelog:
  - 1.3.0 many bug fixes and two security fixes
    long URL crash fix (#157017) CAN-2005-1261
    MSN bad messages crash fix (#157202) CAN-2005-1262


author: Warren Togami <wtogami@redhat.com> 1:1.1.4-4
changelog:
  - 144: POSIX functions became macros, build fix (#150429)
  - 145: Fix non-proxy yahoo file transfer
  - 146: Fix non-proxy yahoo buddy icons


author: Warren Togami <wtogami@redhat.com> 1:1.1.4-1
changelog:
  - 1.1.4 with MSN crash fix, g_stat() crash workaround
    CAN-2005-0208 Gaim HTML parsing DoS (another one)


author: Warren Togami <wtogami@redhat.com> 1:1.1.3-2
changelog:
  - 1.1.3 including two security fixes
    CAN-2005-0472 Client freezes when receiving certain invalid messages
    CAN-2005-0473 Client crashes when receiving specific malformed HTML


author: Warren Togami <wtogami@redhat.com> 0.82-1
changelog:
  - Update to 0.82 resolves several security issues and bugs
    CAN-2004-0500, CAN-2004-0754, CAN-2004-0784, CAN-2004-0785
    More details at http://gaim.sourceforge.net/security/


author: Warren Togami <wtogami@redhat.com> 0.81-4
changelog:
  - conditionalize features for alternate target distributions
  - remove unnecessary ExclusiveArch
  - other cleanups


author: Warren Togami <wtogami@redhat.com> 0.81-3
changelog:
  - CVS backport 133: CAN-2004-0500 MSNLP buffer overflow
                 134: Select buddy icon in new account crash
                 135: Jabber join crash
                 136: Jabber tooltip fake self crash


author: Warren Togami <wtogami@redhat.com> 0.81-1
changelog:
  - 0.81
  - krb5-devel for Zephyr
  - evolution-data-server-devel integration
    plugin disabled by default because it seems very unstable


author: Warren Togami <wtogami@redhat.com> 0.80-1
changelog:
  - update to 0.80
  - enable ExtPlacement plugin by default
  - Smiley Theme "Default" by default (bug fix)
  - Insertions -> Control-{B/I/U} by default


author: Warren Togami <wtogami@redhat.com> 0.79-2
changelog:
  - remove tray icon patch temporarily because it seems to cause more
    problems than it solves.
  - provide gaim-devel
  - CVS backport 128: Cached buddy icons fix


author: Warren Togami <wtogami@redhat.com> 0.79-1
changelog:
  - update to 0.79
  - update desktop patch
  - update header and pkgconfig locations
  - update default prefs
  - FC3 sed behavior workaround
  - temporarily disable evolution integration


author: Warren Togami <wtogami@redhat.com> 0.78-7
changelog:
  - CVS backport 125: MSN disconnect on non-fatal error fix
                 126: Paste html with img crash fix
                 127: Misplaced free fix


author: Warren Togami <wtogami@redhat.com> 0.77-7
changelog:
  - CVS backport 121: byte order badness and crashing copy & paste fix
                 122: history.so scroll to bottom in new tabs fix


author: Warren Togami <wtogami@redhat.com> 0.77-6
changelog:
  - CVS backport 118: x86-64 yahoo auth fix
                 119: Copy/paste fixes for UCS-2 encoded selection
                 120: IRC reconnect segfault fix
  - remove relnot.so plugin because it is unusable in FC
  - Default enable logging and history.so plugin
            enable autoreconnect plugin
  - Fix Gnome Default url handler


author: Warren Togami <wtogami@redhat.com> 0.77-3
changelog:
  - remove gnome-open manual, since 0.77 has "GNOME Default" as default.
  - update default prefs.xml, disable buddy icons in buddy list
  - CVS backport 114: plugin prefs saving fix
                 115: autoreconn-suppress-dialogs
                 116: fix smileys in dialogs
                 117: gtk+ 2.0 compat


author: Warren Togami <wtogami@redhat.com> 0.76-6
changelog:
  - CVS backports:
    111 Prevent Crash during password change if blank fields
    112 Prevent Crash if remote sends invalid characters
    113 Enable /etc/gaim/prefs.xml defaults for new profiles
  - Tray Icon enabled by default
  - Relabel internal version with V-R


author: Warren Togami <wtogami@redhat.com> 0.76-5
changelog:
  - CVS backports: 
    102 Fix ^F keybinding when gtkrc is set to emacs mode
    103 Add Missing File: evolution-1.5.x buildability
    104 When MSN server intermittently has problems accessing buddy list, MSN will crash with 0.76
    105, 106, 107 MSN Error reporting fixes
    108 History plugin causes unnecessary horizontal scrollbars
    109 Fix the text replace plugin 
    110 Prevent message sending while offline


author: Warren Togami <wtogami@redhat.com>
changelog:
  - CVS snapshot, generated with automake-1.7.9
  - update #4
  - update #2 but disable
  - #5 no longer needed
  - default to gnome-open #6
  - some spec cleanup


author: Christopher Blizzard <blizzard@redhat.com> 1:0.75-1.1.0
changelog:
  - Include patch that fixes a bunch of buffer-related problems, mostly
    from nectar@freebsd.org and some of my own changes.


author: Christopher Blizzard <blizzard@redhat.com> 1:0.75-0
changelog:
  - Update to 0.75.
  - Remove mem leak patch that is already included in 0.75.
  - Clean up a lot of old unused patches and old source tarballs.


author: Christopher Blizzard <blizzard@redhat.com> 0.59-7
changelog:
  - Include patch that uses htmlview instead of calling Netscape
    directly
  - Include patch that turns off the buddy ticker and changes the button
    look to the (sane) default.


author: Tim Powers <timp@redhat.com>
changelog:
  - updated to 0.11.0pre2
  - enable gnome support
  - updated ispell to aspell patch
  - cleaned up file list


author: Tim Powers <timp@redhat.com>
changelog:
  - some ideas taken from the package available at the gaim website, mainly to install the applet stuff too.


author: Tim Powers <timp@redhat.com>
changelog:
  - cleaned up spec for use with RPM 4.0 (al la _sysconfdir _datadir etc)
  - update to 0.9.17
  - yay! a man page!


author: Martin Stransky <stransky@redhat.com> 1.1.2-3
changelog:
  - Removed event patch, it blocks X events and breaks Adobe pdf plugin
  - Removed event limit in xt_event_polling_timer_callback


author: Martin Stransky <stransky@redhat.com> 1.1.2-1
changelog:
  - updated to 1.1.12
  - added librhythmbox* to ignored plugins (#467187)
  - removed debug prints (#467090)


author: Warren Togami <wtogami@redhat.com> 1.1.0-10
changelog:
  - Revert libcurl requires because it was done in an incorrect way
  - Revert patch from -7 because it made things worse


author: Martin Stransky <stransky@redhat.com> 0.9.91.5-23
changelog:
  - merged exclude patch with main tarball
  - fixed #431095 - Typo in mozilla-plugin-config verbose output


author: Martin Stransky <stransky@redhat.com> 0.9.91.4-15
changelog:
  - removed mozembeded dependency
  - excluded totem plugins from wrapping
  - xpcom support is optional now


author: Martin Stransky <stransky@redhat.com> 0.9.91.4-3
changelog:
  - updated nspluginsetup script and package install/uninstall scripts
  - added cross-compilation support
  - removed binaries stripping


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-33.el5_5.3
changelog:
  - Explicitly set qcow2 backing store format (CVE-2010-2239)
  - Remap privileged source ports from guests behind NAT (CVE-2010-2242)
  - Eliminate memory leak in xenUnifiedDomainInfoListFree (rhbz 619711)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-33.el5_5.2
changelog:
  - Fix discrepancy between xm list and virsh list (rhbz 618200)
  - Set a stable & high MAC addr for guest TAP devices on host (rhbz 617243)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-33.el5
changelog:
  - Conflict with kvm release older than kvm-83-142.el5 (rhbz 569372)
  - Call fsync() at the end instead of opening raw files with O_DSYNC (rhbz 563151)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-32.el5
changelog:
  - Make numa errors non-fatal (rhbz 559755)
  - Create raw storage files with O_DSYNC (rhbz 563151)
  - Increase qemu guest startup timeout to 30 seconds (rhbz 563151)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-31.el5
changelog:
  - Fix ACS with root devices (rhbz 526713)
  - Fix PCI device re-assignment (rhbz 500217)
  - Fix a race between KVM and libvirt (rhbz 500217)
  - Fix state bug in libvirtd (rhbz 500217)
  - Set machine type to "rhel5.4.0" by default (rhbz 542665)
  - Correct erroneous expression in pciDeviceDownstreamLacksACS (rhbz 526713)


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-30.el5
changelog:
  - fix crash in xenUnifiedNodeDeviceReset
  - Resolves: rhbz#555309
  - avoid spurious errors on npiv device creation
  - Resolves: rhbz#514324


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-26.el5
changelog:
  - avoid some unknown failure error reports
  - Resolves: rhbz#531729
  - avoid "error: unknown procedure" when querying older libvirt
  - Resolves: rhbz#531735
  - remove limit on number of tap devices and guest
  - Resolves: rhbz#519729
  - avoid crashes when having concurrent TLS connections
  - Resolves: rhbz#512367


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-25.el5
changelog:
  - fix python binding generator to avoid clashes in method names
  - Resolves: rhbz#510427
  - nodedev-destroy can hang libvirtd
  - Resolves: rhbz#510430
  - avoid spurious errors on npiv device creation
  - Resolves: rhbz#514324
  - node device APIs should expose the relationship between SR-IOV VFs and PFs
  - Resolves: rhbz#481748
  - implement --pool option for virsh vol-path
  - Resolves: rhbz#509306
  - cannot delete storage pool problem
  - Resolves: rhbz#496579
  - Can not hotplug vtd device to Xen guest
  - Resolves: rhbz#546671
  - Inactive KVM guest memory reporting via 'info' is strange
  - Resolves: rhbz#508266
  - command 'virsh nodedev-create' fails with out of memory error
  - Resolves: rhbz#510426
  - Command 'virsh find-storage-pool-sources' failure unknown error
  - Resolves: rhbz#509979


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-24.el5
changelog:
  - guest host present two NIC with duplicate MAC addresses, only one configured
  - Resolves: rhbz#483884
  - implement core dump API for QEMU driver
  - Resolves: rhbz#507551
  - reset a PCI function even if other unused devices/functions are reset
  - Resolves: rhbz#500213
  - avoid a crash with virsh vol-key volname
  - Resolves: rhbz#509293


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-23.el5
changelog:
  - enable bridges even without IP assigend yet
  - Resolves: rhbz#532834
  - PCI device assigned need to be reattached to host on guest shutdown
  - Resolves: rhbz#500217
  - allow PCI PM reset on multi-function devices
  - Resolves: rhbz#517460
  - support for KVM PCI device assignment hotplug
  - Resolves: rhbz#517465


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-22.el5
changelog:
  - xen driver need check for duplicate uuid
  - Resolves: rhbz#504262
  - xen credit scheduler doesn't handle cap value 65535
  - Resolves: rhbz#504914
  - domain XML dump broke with virt-xml-validate
  - Resolves: rhbz#512069
  - libvirt did not report vCPU usage properly
  - Resolves: rhbz#514082
  - virsh man page sugegsted operation were asynchronous
  - Resolves: rhbz#514532
  - add support for qemu hugepages control
  - Resolves: rhbz#518099
  - libvirt was reordering drives based on their type
  - Resolves: rhbz#521053
  - a typo in domain interface definitions could generate a segfault
  - Resolves: rhbz#523418
  - dnsmasq used to limit the number of DHCP leases to only 150
  - Resolves: rhbz#524280


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-20.el5
changelog:
  - redefining a Xen domain could reset the domain id
  - fix Xen inotify checking of /etc/xen and avoid vanishing domains
  - resolves: rhbz#508278


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-14.el5
changelog:
  - fix broken behavior on wrong pool creation
  - Resolves: rhbz#496616
  - fix hang of libvirt daemon on node device XML dump
  - Resolves: rhbz#509261


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-12.el5
changelog:
  - fix bogus WWNs when HBA kernel modules are (re)loaded
  - remove a small leak with SCSI node device conf
  - Resolves: rhbz#496925


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-11.el5
changelog:
  - NPIV didn't work due to different paths in /sys for older kernels
  - Resolves: rhbz#496925
  - the domain info API would fail due to the absence of a security model
  - Resolves: rhbz#506688


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-6.el5
changelog:
  - look for kvm binary in libexec
  - Resolves: rhbz#504046
  - Fix build support for qcow2 on x86_64 due to missing binary at build time
  - Resolves: rhbz#504119
  - Take ownership of the /usr/share/augeas subtree
  - Resolves: rhbz#481809


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-5.el5
changelog:
  - error in handling hostdev managed informations
  - Resolves: rhbz#499577
  - detaching Xen devices led to segfaults
  - Resolves: rhbz#497051


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-4.el5
changelog:
  - implement NPIV node device create and destroy
  - Resolves: rhbz#496925
  - avoid daemon crash on TLS auth errors
  - Resolves: rhbz#503178
  - forbid to set autostart on transcient networks
  - Resolves: rhbz#503481


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-3.el5
changelog:
  - Fix serious event handling bug possibly killing random domains
  - Resolves: rhbz#500158
  - XML attribute escaping fix
  - Handle recent QEmu help output
  - Hash destructors should use unref not free
  - Fix some name and uuid uniqueness checks
  - Fix save/restore/migrate for qemu >= 0.10.0
  - Fix QEmu capabilities refresh
  - Extra check in pid file access routines
  - Related: rhbz#475821


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-2.el5
changelog:
  - Fix missing ownership of /usr/share/gtk-doc/html/libvirt from spec file
  - Resolves: rhbz#481809
  - Related: rhbz#475821


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-1.el5
changelog:
  - Upstream release 0.6.3
  - various bug fixes
  - a couple of packaging fixes including #496867
  - Related: rhbz#475821


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.3-15.el5
changelog:
  - Add missing readonly checks for APIs (CVE-2008-5086)
  - Add missing buf check in proxy daemon (CVE-2009-0036)


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-9.el5
changelog:
  - man page fix
  - Resolves: rhbz#442429
  - allow to change a Disk/Nic of inactive domain
  - Resolves: rhbz#251640
  - XML string escaping in xm driver
  - Resolves: rhbz#428879


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-8.el5
changelog:
  - man page fix
  - Resolves: rhbz#442429
  - removal of extra_release macro
  - Resolves: rhbz#436803
  - allow to change a Disk/Nic of inactive domain
  - Resolves: rhbz#251640
  - fix a hash table bug
  - Resolves: rhbz#448533


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-5.el5
changelog:
  - fix network Paravirt drivers on HVM
  - clarify documentation for virsh setcpus and setmem commands
  - Resolves: rhbz#429301
  - Resolves: rhbz#429186


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-3.el5
changelog:
  - add patch to fix NUMA compatibility problem with backport to xen-3.0.3
  - re-add a RHEL specific patch for PVFB on 3.0.3
  - renamed the second disk ID patch
  - Resolves: rhbz#426324


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-2.el5
changelog:
  - add 3 patches fixing NUMA disk detach for tap devices, setting cpu
    parameter on inactive domains and an escaping bug
  - Resolves: rhbz#251641
  - Resolves: rhbz#346281


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-1.el5
changelog:
  - Update to 0.3.3
  - Avahi support
  - NUMA support
  - APIs for collecting statistics on disks and interfaces
  - API for domains migration
  - localtime clock support
  - PS/2 and USB input devices
  - Secure remote access support
  - unification of daemons
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements
  - Resolves: rhbz#223833
  - Resolves: rhbz#235851
  - Resolves: rhbz#251641
  - Resolves: rhbz#251706
  - Resolves: rhbz#253494
  - Resolves: rhbz#254051
  - Resolves: rhbz#273421
  - Resolves: rhbz#306931
  - Resolves: rhbz#328841
  - Resolves: rhbz#346281


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-9.el5
changelog:
  - patch to fix the pvfb vncdisplay port in XML dumps
  - Resolves: rhbz #254188
  - Related: rhbz #250789


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-6.el5
changelog:
  - Fix handling of PVFB configurations
  - Resolves: rhbg#250789
  - Fix config file when using virtual network
  - Resolves: rhbg#251594


author: Daniel Veillard <veillard@redhat.com> 0.2.3-1.el5
changelog:
  - Upgrade to version 0.2.3 for RHEL-5.1
  - Resolves: rhbz#243463
  - Resolves: rhbz#222704
  - Resolves: rhbz#224415
  - Resolves: rhbz#225566
  - Resolves: rhbz#225567
  - Resolves: rhbz#229176
  - Note: 0.2.3 is really supposed to work with dnsmask which is not 
    available at the moment in RHEL-5


author: Daniel Berrange <berrange@redhat.com> 0.1.8-15.el5
changelog:
  - re-do the localization patch, so that we don't have to run
    'make update-po', and thus avoid multilib conflicts
  - Resolves: rhbz#224446


author: Daniel Berrange <berrange@redhat.com> 0.1.8-14.el5
changelog:
  - further fix for parallel installation problem of -devel on i386 and x86_64
  - Resolves: rhbz#222730


author: Daniel Veillard <veillard@redhat.com> 0.1.8-8.el5
changelog:
  - fix a structure error when asking the hypervisor for vcpu info, rhbz#217743
    and rhbz#217370
  - Resolves: rhbz#217370 rhbz#217743


author: Daniel Veillard <veillard@redhat.com> 0.1.8-7.el5
changelog:
  - release python global interpreter lock when calling libvirt, rhbz#210140
  - return correct os type version for HVM guests when running as non-root, 
    rhbz#214264
  - Resolves: rhbz#210140 rhbz#214264


author: Daniel Veillard <veillard@redhat.com> 0.1.8-6.el5
changelog:
  - save the amount of current memory used when dumping XML if different from
    maximum amount, and use that when restarting the domain from the XML,
    rhbz#214354
  - when using a pygrub bootloader, strip the os informations because xend
    assumes they take precedence over bootloader, rhbz#214741
  - Resolves: rhbz#214354 rhbz#214741


author: Daniel Veillard <veillard@redhat.com> 0.1.8-5.el5
changelog:
  - patch adding a domain core dump entry point to the library, it requires
    xen >= 3_0_3-13_el5 to get the xend server side support
  - Resolves: rhbz#214913


author: Daniel Veillard <veillard@redhat.com> 0.1.8-1.el5
changelog:
  - another ia64 page size fix
  - vcpu number initialization
  - don't label crashed domains as shut off
  - fix virsh man page
  - compile fix


author: Daniel Veillard <veillard@redhat.com> 0.1.7-2
changelog:
  - fix missing page size detection code for ia64
  - fix mlock size when getting domain info list from hypervisor


author: Daniel Veillard <veillard@redhat.com> 0.1.7-1
changelog:
  - Fix bug when running against xen-3.0.3 hypercalls
  - Fix memory bug when getting vcpus info from xend


author: Daniel Veillard <veillard@redhat.com> 0.1.6-1
changelog:
  - Support for localization
  - Support for new Xen-3.0.3 cdrom and disk configuration
  - Support for setting VNC port
  - Fix bug when running against xen-3.0.2 hypercalls
  - Fix reconnection problem when talking directly to http xend


author: Daniel Veillard <veillard@redhat.com> 0.1.5-1
changelog:
  - new release
  - bug fixes
  - support for new hypervisor calls
  - early code for config files and defined domains


author: Daniel Veillard <veillard@redhat.com> 0.1.4-1
changelog:
  - vCPUs and affinity support
  - more complete XML, console and boot options
  - specific features support
  - enforced read-only connections
  - various improvements, bug fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.1-1
changelog:
  - extend and cleanup the driver infrastructure and code
  - python examples
  - extend uuid support
  - bug fixes, buffer handling cleanups
  - support for new Xen hypervisor API
  - test driver for unit testing
  - virsh --conect argument


author: Daniel Veillard <veillard@redhat.com> 0.1.0-1
changelog:
  - various fixes
  - new APIs: for Node information and Reboot
  - virsh improvements and extensions
  - documentation updates and man page
  - enhancement and fixes of the XML description format


author: Daniel Veillard <veillard@redhat.com> 0.0.6-1
changelog:
  - added error handling APIs
  - small bug fixes
  - improve python bindings
  - augment documentation and regression tests


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-3
changelog:
  - fixed BadDrawable error (rhbz#557453)
  - fixed MultiList not displayed properly (mzbz#1453) (rhbz#568730)
  - fixed invisible insensitive labels, buttons, icons and list entries
    (mzbz#1381) (rhbz#568730)
  - fixed XmNaccelerator do not work with CapsLock/ScrollLock/NumLock
    modifiers (mzbz#345) (rhbz#492529)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2
changelog:
  - more fixes for unreliable pasting into XmTextField (MotifZone bug #1321)
    Resolves: rhbz#405941
  - the fix for MotifZone bug #1400 is not working for remote displays


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-0
changelog:
  - rebase to 2.3.1 (CVS dist release)
    Resolves: rhbz#455736
  - fixes OpenMotif XmList problem
    Resolves: rhbz#405801
  - fixes List.c/ReplaceItem() segfaults when item selected
    Resolves: rhbz#431460
  - fixes [motifzone 1400 ] openmotif/ BadFont on multiple display application
    Resolves: rhbz#438910
  - fixes applications dump core in non-UTF8 environment
    Resolves: rhbz#453722
  - fixes lots of additional bugs: see release notes


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.5
changelog:
  - fixed SEGV error moving mouse over window related to XmToolTipGetLabel
    (MotifZone bug fix #1388)
    Resolves: rhbz#277381


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.9
changelog:
  - new CVS version 2006-02-02
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - enabled Xft, jpeg and png support
  - patch for missing xft-config
  - dropped duplicate include path in devel package


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1
changelog:
  - new 2.3.0 (beta1)
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-11
changelog:
  - fixed mrm initialization error in MrmOpenHierarchyPerDisplay (#167094)
    Thanks to Arjan van de Ven for the patch.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-9
changelog:
  - Upstream Fix: Multiscreen mode
  - Upstream Fix: Crash when restarting by a session manager (motifzone#1193)
  - Upstream Fix: Crash when duplicating a window menu containing f.circle_up
    (motifzone#1202)
  - fixed divide by zero error in ComputeVizCount() (#144420)
  - Xpmcreate: define LONG64 on 64 bit architectures (#143689)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-6
changelog:
  - fixed CAN-2004-0687 (integer overflows) and CAN-2004-0688 (stack overflows)
    in embedded Xpm library


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-5
changelog:
  - libXp now moved to xorg-x11-deprecated-libs, therefore no compatibility 
    with XFree86 packages anymore.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-3
changelog:
  - fixed popup menus fail on Tarantella/VNC (#123027)
  - fixed character not supported problem (#124960)
  - fixed data out of bounds bug (#124961)


author: Thomas Woerner <twoerner@redhat.com> 2.2.2-13
changelog:
  - fix for Xmu/EditRes conflict (bug #80777)
  - fix for wml and utf-8 (bug #80271)
  - fix for Ext18List (bug #74502)


author: Than Ngo <than@redhat.com>
changelog:
  - add 3 official motif patches 
  - add rm -rf $RPM_BUILD_ROOT in install section
  - remove some old patches which are now in official patches


author: Than Ngo <than@redhat.de>
changelog:
  - fix imake to built with gcc-2.96 (thanks Jakup)
  - put bitmaps in /usr/X11R6/include/X11/bitmaps
  - put bindings in /usr/X11R6/lib/Xm/bindings
  - add define -D_GNU_SOURCE to build Motif
  - gzip man pages
  - cleanup specfile


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.31.1.el5]
changelog:
  - [fs] nfs: set lock_context field in nfs_writepage_sync (Jeff Layton) [663381 660580]
  - [fs] nfs: remove problematic calls to nfs_clear_request (Jeff Layton) [663353 656492]
  - [fs] nfs: handle alloc failures in nfs_create_request (Jeff Layton) [663353 656492]
  - [fs] nfs: clean up nfs_create_request (Jeff Layton) [663353 656492]
  - [virt] xen: fix netback hotplug regression in xenbus fix (Laszlo Ersek) [636412 635999] {CVE-2010-3699}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.30.1.el5]
changelog:
  - [scsi] lpfc: set heartbeat timer off by default (Rob Evers) [658079 655119]
  - [misc] posix-cpu-timers: workaround for mt exec problems (Oleg Nesterov) [656265 656266] {CVE-2010-4248}
  - [fs] setup_arg_pages: diagnose excessive argument size (Oleg Nesterov) [645226 645227] {CVE-2010-3858}
  - [net] inet_diag: make sure we run audited bytecode (Jiri Pirko) [651266 651267] {CVE-2010-3880}
  - [net] limit sendto/recvfrom/iovec total length to INT_MAX (Jiri Pirko) [645871 645872] {CVE-2010-3859}
  - [bluetooth] hci_ldisc: fix missing NULL check (Jarod Wilson) [655664 655666] {CVE-2010-4242}
  - [virt] xen: add bounds req-process loop in blkback/blktap (Laszlo Ersek) [656208 654546] {CVE-2010-4247}
  - [virt] xen: don't leak dev refs on bad xenbus transitions (Laszlo Ersek) [636412 635999] {CVE-2010-3699}
  - [scsi] lpfc: fix crashes on NULL pnode dereference (Rob Evers) [658864 649489]
  - [scsi] qla2xxx: check null fcport in _queuecommands (Chad Dupuis) [657029 644863]
  - [fs] gfs2: fix race in unlinked inode deallocation (Robert S Peterson) [651811 643165]
  - [scsi] lpfc: fix a BUG_ON in lpfc_abort_handler (Rob Evers) [658378 639028]
  - [scsi] re-enable transistions from OFFLINE to RUNNING (Mike Christie) [658934 641193]
  - [scsi] scsi_dh_alua: handle transitioning state correctly (Mike Snitzer) [657028 619361]
  - [misc] add round_jiffies_up and related routines (Michal Schmidt) [658520 556476]
  - [fs] fix dcache accounting bug (Josef Bacik) [658857 596548]
  - [usb] uhci: fix oops in uhci_scan_schedule (Pete Zaitcev) [657319 516851]
  - [scsi] lpfc: fix panic in lpfc_scsi_cmd_iocb_cmpl (Rob Evers) [658379 603806]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.29.1.el5]
changelog:
  - [net] rds: fix rds_iovec page count overflow (Jiri Pirko) [647421 647422] {CVE-2010-3865}
  - [net] fix deadlock in sock_queue_rcv_skb (Danny Feng) [652536 652537] {CVE-2010-4161}
  - [net] packet: fix information leak to userland (Jiri Pirko) [649897 649898] {CVE-2010-3876}
  - [ipc] sys_semctl: fix kernel stack leakage (Danny Feng) [648721 648722] {CVE-2010-4083}
  - [misc] kernel: remove yield from stop_machine paths (Oleg Nesterov) [651818 634454]
  - [fs] dlm: reduce cond_resched during send (David Teigland) [653335 604139]
  - [fs] dlm: use TCP_NODELAY (David Teigland) [653335 604139]
  - [net] sctp: do not reset packet during sctp_packet_config (Jiri Pirko) [637866 637867] {CVE-2010-3432}
  - [net] bonding: no lock on copy/clear VLAN list on slave (Andy Gospodarek) [652561 627974]
  - [scsi] gdth: prevent integer overflow in ioc_general (Frantisek Hrbata) [651175 651176] {CVE-2010-4157}
  - [kernel] add stop_machine barrier to fix lock contention (Prarit Bhargava) [651818 634454]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.28.1.el5]
changelog:
  - [net] bnx2: Increase max rx ring size from 1K to 2K (Andy Gospodarek) [649255 640026]
  - [net] bnx2: fixup broken NAPI accounting (Andy Gospodarek) [649255 640026]
  - [pci] include DL580 G7 in bfsort whitelist (Tony Camuso) [646765 644879]
  - [sound] core: prevent heap corruption in snd_ctl_new (Jerome Marchand) [638483 638484] {CVE-2010-3442}
  - [net] ixgbe: add option to control interrupt mode (Andy Gospodarek) [643339 571495]
  - [fs] execve: fix interactivity and response to SIGKILL (Dave Anderson) [643344 629176]
  - [usb] fix test of wrong variable in create_by_name (Don Howard) [643347 594635]
  - [fs] gfs2: fix stuck in inode wait, no glocks stuck (Robert S Peterson) [651805 595397]
  - [net] gro: fix bogus gso_size on the first fraglist entry (Herbert Xu) [648938 588015]
  - [virt] xen: fix Connected state after netback dev closed (Paolo Bonzini) [643345 591548]
  - [net] tun: orphan an skb on tx (Michael S. Tsirkin) [643348 584412]


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.76.1
changelog:
  - xserver-1.1.1-mod-macro-parens.patch: Fix insufficient parentheses in
    Render and arc computation code. (#495733)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.73
changelog:
  - randr-disabled-fb.patch: Drop. (#496108)
  - xserver-1.1.1-no-randr-while-off-vt.patch: Just refuse RANDR changes while
    VT switched away, rather than try to fake them (#496108)


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.71
changelog:
  - fix randr upsizing not resizing pixmap (#515609)
  - fix bug in overlapping bugfix (#530309,#516204,#554571)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.70
changelog:
  - xserver-1.1.1-improve-mode-selection.patch: Improve mode selection when
    validation filters away all modes that exactly match aspect ratio (#507536)


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-48.63
changelog:
  - Pull in fixes for x86emu from upstream as x86emu-update.patch.  This
    adds support for RDTSC, CPUID and fixes BSF and BSR and a 64 bit
    bug.  Drop xserver-1.1.1-int10-bsf.patch (#503182).


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.60
changelog:
  - xserver-1.1.1-randr-panning-fix.patch: Install a null PointerMoved hook
    so we don't pan the second head on randrful drivers. (#477177)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.58
changelog:
  - xserver-1.1.1-hw-xfree86-modes-16.patch: Update RANDR code to 1.6ish.
  - xserver-1.1.1-randr-abi.patch: Export the RANDR symbols that the drivers
    use, and compensate for i2c/ddc/ramdac still being loadables in 1.1.


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.57
changelog:
  - xserver-1.1.1-ddc-update.patch: Update DDC code to xserver 1.6.
  - xserver-1.1.1-hw-xfree86-modes: Add RANDR setup code, equivalent to the
    old randr-source subpackage (Fedora's 1.5.3 ish)
  - drop the randr-* patches, merged into the above.


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.56
changelog:
  - Drop the -randr-source subpackage
  - Delete with_developer_utils macro and some boring/misleading comments


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.54
changelog:
  - randr-xinerama.patch - add xinerama support to the randr source code
    tree (#481067)
  - drop the randr source updates for now as the patch fails
  - fix spec file so if patches to randr source fail, build fails


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.53
changelog:
  - xserver-1.1.1-autoreconf-pedantry.patch: Fix autoreconf with new autotools
  - xserver-1.1.1-saturate-trap-walks.patch: Saturate span walks in Render,
    so we don't wrap around. (#448586)
  - xorg-x11-server-1.1.1-aiglx-happy-vt-switch.patch,
    xorg-redhat-die-ugly-pattern-die-die-die.patch: Rediff for patch fuzz.


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.52
changelog:
  - randr-source-compat.patch - backport fixes from upstream (#466987)
  - xserver-1.1.1-fb24-32-fix.patch + xserver-1.1.1-ia64-memops.patch:
  - Altix fixes to make nautilus + s-c-d work. (#468015)


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.45
changelog:
  - rebase the source code for drivers to build against and add compat patches
  - xserver-1.1.1-randr-fix.patch - set the -1 to 0 like upstream this fixes some randr1.2 compat output problems


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.44
changelog:
  - xserver-1.1.1-automouse-crash-fix.patch: Fix a rare crash when starting
    under anaconda. (#249567)


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.42
changelog:
  - cve-2008-1377.patch: Record and Security Extension Input validation
  - cve-2008-1379.patch: MIT-SHM extension Input Validation flaw
  - cve-2008-2360.patch: Render AllocateGlyph extension Integer overflows
  - cve-2008-2361.patch: Render CreateCursor extension Integer overflows
  - cve-2008-2362.patch: Render Gradient extension Integer overflows


author: Dave Airlie <airlied@redhat.com> - 1.1.1-48.37
changelog:
  - xserver-1.1.1-ia64-old-kernel-warning.patch - warn about older MCA causing
    kernels on IA64 (#432796)


author: Dave Airlie <airlied@redhat.com> - 1.1.1-48.36
changelog:
  - cve-2007-3920.patch: gnome-screensaver loses keyboard grab when running under compiz (#357111)
  - cve-2007-6429.patch: Update patch to final upstream solution (#431191)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.30
changelog:
  - Sync with zstream 1.1.1-48.26.el5_1.4:
  - cve-2007-5760.patch: XFree86-Misc Extension Invalid Array Index Vulnerability
  - cve-2007-5958.patch: Xorg / XFree86 file existence disclosure vulnerability
  - cve-2007-6427.patch: XInput Extension Memory Corruption Vulnerability
  - cve-2007-6428.patch: TOG-CUP Extension Memory Corruption Vulnerability
  - cve-2007-6429.patch: EVI and MIT-SHM Extension Integer Overflow Vulnerability


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.29
changelog:
  - Add -randr-source subpackage for source compatibility with newer drivers.
  - xserver-1.1.1-mode-bandwidth.patch: Match enums with 1.5 server.
  - randr-source-compat.patch: Fix miscellaneous drift since 1.1.


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.26
changelog:
  - xserver-1.1.1-mmap-{expansion,failure}: Revert, required kernel changes
    not included in 5.1. (#233981)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.25
changelog:
  - xserver-1.1.1-acpi-tokenising-fix.patch: Also expose the builderstring
    as an exported server symbol so external drivers can notice the bugfix.
    (#246175)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.23
changelog:
  - xserver-1.3.0-xkb-and-loathing.patch: Ignore (not just block) SIGALRM
    around calls to Popen()/Pclose().  Fixes a hang in openoffice when
    opening menus. (#210750)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.22
changelog:
  - xserver-1.1.1-vbe-panelid.patch: Add VBE core call for panel information,
    so we can better handle panels with no EDID. (#237121)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.21
changelog:
  - xserver-1.3.0-pci-bus-count.patch: Fix cases where the VGA adaptor is
    not in the first 128 devices. (#236202)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.17
changelog:
  - xserver-1.1.1-silence-warnings.patch: Reduce several harmless warning
    messages to X_DEFAULT or X_INFO. (#227386)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.15
changelog:
  - xserver-1.3.0-pci-bus-count.patch: Allocate pci_devp dynamically, to handle
    machines with more than 128 PCI devices. (#219390 and others)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.12.el5
changelog:
  - xorg-x11-server-1.1.1-vt-activate-is-a-terrible-api.patch: During server
    shutdown, be sure to wait for the VT switch to finish before actually
    terminating.  Works around a race seen in rhgb. (#219184)


author: Soren Sandmann <sandmann@redhat.com> 1.1.1-48.11.el5
changelog:
  - define-xfree86-server.patch: Define XFree86Server even on arches where
    we don't compile the Xorg DDX (ie. s390). Resolves: 219253


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.10.el5
changelog:
  - xorg-x11-server-1.1.1-glcore-visual-matching.patch: When matching GLX to
    X visuals, scan both lists. (#218395)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.7.el5
changelog:
  - xorg-x11-server-1.1.1-xkb-vidmode-switch.patch: Fix string matching on XKB
    actions to be case-insensitive again. (#218336)
  - xorg-x11-server-1.1.1-vt-activate-is-a-terrible-api.patch: Change behaviour
    to simply exit if we lose the VT switch race. (#218396)
  - Fix OS name from FC5 to RHEL5.


author: Soren Sandmann <sandmann@redhat.coM> 1.1.1-48.6.el5
changelog:
  - Disable composite when xinerama is enabled. 
  - Resolves: #213102
  - Make sure no-pseudocolor-composite.patch is applied
  - Related: #215576


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.5.el5
changelog:
  - xorg-x11-server-1.1.1-maxpixclock-option.patch: Allow the maximum pixel
    clock of a monitor to be specified in the config file. (#214869)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.4.el5
changelog:
  - xorg-x11-server-1.1.1-no-pseudocolor-composite.patch: Don't attempt to
    initialize Composite when the default visual is < 16bpp. (#215576)


author: Soren Sandmann <sandmann@redhat.com> 1.1.1-48.3.el5
changelog:
  - randr-disabled-fb.patch
    Add patch to prevent RandR from disabling (and then enabling) access to
    the framebuffer. Bug 214739.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-48.2.el5
changelog:
  - Build both x86emu and vm86 backends on x86.  Prefer x86emu when running
    in Xen dom0.  Add "Int10Backend" option to the ServerLayout section to
    allow runtime configuration.  (#213151)


author: Adam Jackson <ajackson@redhat.com> 1.1.1-48.1.el5
changelog:
  - Deliver SecurityPolicy in the Xvfb subpackage on arches without hardware
    servers (s390{,x} atm).  (#213026)


author: Soren Sandmann <sandmann@redhat.com> - 1.1.1-48.el
changelog:
  - Add xorg-x11-server-1.1.1-ia64-int10.patch to not define -DPC_ on
    ia64. Bugs 210149 and 210153.
  - Add xorg-x11-server-1.1.1-ia64-pci-chipsets.patch to probe
    ia64 specific chipsets. Bug 210150


author: Soren Sandmann <sandmann@redhat.com> - 1.1.1-45.fc6
changelog:
  - xorg-x11-server-1.1.1-graphics-expose.patch: call
    miHandleExposures() in CopyArea/CopyPlane explicitly in cw to
    generate GraphicsExposes correctly. (#209336).


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-44.fc6
changelog:
  - xorg-x11-server-1.1.1-offscreen-pixmaps.patch: Take the server lock
    before calling back into XAA to evict pixmaps (#204810).


author: Adam Jackson <ajackson@redhat.com> 1.1.1-43.fc6
changelog:
  - xorg-x11-server-1.1.1-vt-activate-is-a-terrible-api.patch: Since the
    VT_ACTIVATE/VT_WAITACTIVE pair are never guaranteed to successfully
    complete, set a 5 second timeout on the WAITACTIVE, and retry the pair
    until we win.  (#207746)
  - xorg-x11-server-1.1.0-pci-scan-fixes.patch: Partial revert to unbreak some
    (but not all) domainful machines, including Pegasos. (#207659)


author: Adam Jackson <ajackson@redhat.com> 1.1.1-41.fc6
changelog:
  - xorg-x11-server-1.1.1-vbe-filter-less.patch: Be gentler about rejecting
    VESA modes early, since xf86ValidateModes should handle them just fine.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-40.fc6
changelog:
  - xorg-x11-server-1.1.1-pclose-confusion.patch: Be sure to call Pclose()
    on pipes created with Popen(), since the additional magic done by Popen()
    relative to popen() is not undone by plain pclose().  (Third base!)
  - xorg-x11-server-1.1.1-edid-hex-dump.patch: Backport EDID hex dump code
    from git.


author: Kristian Høgsberg <krh@redhat.com> 1.1.1-39.fc6
changelog:
  - Bump xorg-x11-proto-devel BuildRequires version and add Conflict
    line for older mesa releases, so GLX_EXT_texture_from_pixmap opcodes
    match.


author: Adam Jackson <ajackson@redhat.coM> - 1.1.1-38.fc6
changelog:
  - xorg-x11-server-1.1.1-believe-monitor-rb-modes.patch: Always believe the
    monitor when it reports a reduced-blanking mode, even over VGA.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-35.fc6
changelog:
  - xorg-x11-server-1.1.1-always-mouse-thyself.patch: Fix the check to look
    for mouse/void drivers in the running layout, as opposed to the config file,
    so as not to synthesize two mouse devices.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-34.fc6
changelog:
  - xorg-x11-server-1.1.1-infer-virtual.patch: Be slightly more paranoid about
    setting line pitch, and rescan the mode list after pruning to re-validate
    the estimated virtual size.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-33.fc6
changelog:
  - Update xorg-x11-server-1.1.1-offscreen-pixmaps.patch to evict pixmap
    when GLX_EXT_texture_from_pixmap is first used.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-32.fc6
changelog:
  - Drop xorg-x11-server-1.1.0-gl-include-inferiors.patch now that
    compiz can uses the composite overlay window.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-31.fc6
changelog:
  - Update xorg-x11-server-1.1.1-offscreen-pixmaps.patch to log transitions.
  - Update xorg-x11-server-1.1.0-tfp-damage.patch to always bind to
    GL_TEXTURE_RECTANGLE_ARB target.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-30.fc6
changelog:
  - xorg-x11-server-1.1.1-pci-paranoia.patch: In xf86MatchPciInstances, fail
    gracefully if xf86PciVideoInfo is NULL (like, on Xen).


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-29.fc6
changelog:
  - Add xorg-x11-server-1.1.1-aiglx-happy-vt-switch.patch to fix VT
    switching (and suspend/resume) when using AIGLX. (#199692, fdo #7916).
  - Bump mesa source and libGL BuildRequires.
  - Update mesa-6.5.1 patch to work with 6.5.1 rc1 (slang_version_syn.h
    renamed to slang_pp_version_syn.h).


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-28.fc6
changelog:
  - xorg-x11-server-1.1.1-infer-virtual.patch: Only flag modes as preferred
    if the EDID block says to.
  - xorg-x11-server-1.1.1-mode-sort-kung-fu.patch: Enforce a sort order on
    modes during lookup: builtin before driver before userdef before other,
    and preferred modes within a class before others in that class.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-27.fc6
changelog:
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Don't set an arbitrary
    pixclock limit if the monitor didn't claim to have one.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-25.fc6
changelog:
  - xorg-x11-server-1.1.1-xvfb-composite-crash.patch: Fix Xvfb's -render flag
    to also disable the Composite extension.
  - xorg-x11-server-1.1.1-mesa-6.5.1.patch: Update build system to account for
    Mesa 6.5.1 snapshots.
  - xorg-x11-server-1.1.0-edid-mode-injection-2.patch: Add all available
    standard timings from EDID rather than just the first five.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-22.fc6
changelog:
  - xorg-x11-server-1.1.1-infer-virtual.patch: When no modes or virtual size
    are given in the config file, attempt to pick a sensible one by examining
    the EDID modes and physical geometry.  Also generally make the server
    aware of driver-provided modes.
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Redo, since the property I was
    checking for is both fairly common and fairly predictable.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-20.fc6
changelog:
  - xorg-x11-server-1.1.1-always-mouse-thyself.patch: If we lack a mouse
    device in the config, and the user hasn't asked for any void devices,
    synthesize a mouse section.  (#200347)
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Better formatting.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-19.fc6
changelog:
  - xorg-x11-server-1.1.1-builderstring.patch: Enable the builder info
    string at configure time;
  - ... and use it to print the package name and version.
  - xorg-x11-server-1.1.1-defaultdepth-24.patch: Set default depth to 24.
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Add EDID quirks list as
    an experiment; needs a better solution though.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-17.fc6
changelog:
  - Add xorg-x11-server-1.1.1-offscreen-pixmaps.patch to default
    XaaNoOffscreenPixmaps to false, for now.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-15.fc6
changelog:
  - xorg-x11-server-1.1.0-edid-mode-injection-2.patch: Allow HorizSync and
    VertRefresh to be overridden independently.


author: Kevin E Martin <kem@redhat.com> - 1.1.1-14.fc6
changelog:
  - xorg-x11-server-1.1.1-revert-xkb-change.patch: Revert change to xkb that
    broke XkbGetKeyboard().


author: Adam Jackson <ajackson@redhat.com> 1.1.1-13.fc6
changelog:
  - Comment out the 848x480 modes from the extramodes patch.  Any panel that
    wants it should be doing EDID injection by now, and it screws up
    autoconfig by _just_ fitting in the ranges for 800x600.


author: Mike A. Harris <mharris@redhat.com> 1.1.1-12.fc6
changelog:
  - Added "1920x1080" CVT modes to Red-Hat-extramodes patch for (#195272)
  - Sorted the extramodes file by X res, then Y res for ease of maintenance.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-10.fc6
changelog:
  - xorg-x11-server-1.1.1-selinux-awareness.patch: Added for new Mesa
    selinux code.
  - xorg-x11-server-1.1.1-Xdmx-render-fix-fdo7482.patch: Backport a Render
    fix for Xdmx.
  - xorg-x11-server-1.1.1-no-composite-in-xnest.patch: Disable Composite in
    Xnest, as it's known not to work.
  - Fix default font path to match the config file we used to generate.
  - Fix default module set to match the config file we used to generate.
  - Disable use of TLS GLX dispatch to match Mesa selinux nonsense.


author: Mike A. Harris <mharris@redhat.com> 1.1.1-7.fc6
changelog:
  - Only ship pcitweak manpage if we are building it (#199653)
  - Fix dist tag usage (Was {dist}, should be {?dist})
  - Added xorg-x11-server-libxf86config-dont-write-empty-sections.patch to
    prevent config file parser/writer from writing out empty sections (#198653)
  - Add dependency on xorg-x11-fonts-base to all X server subpackages (#186091)


author: Kristian Høgsberg <krh@redhat.com> 1.1.1-5.fc5.aiglx
changelog:
  - Enable composite by default.
  - Split spiffiffity patch into one patch per change:
    xorg-x11-server-1.1.0-no-move-damage.patch and
    xorg-x11-server-1.1.0-dont-backfill-bg-none.patch.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-26
changelog:
  - Add xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch to hook up the
    GLX_MESA_copy_sub_buffer extension.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-25.fc6
changelog:
  - Start using the new %{dist} tag <http://fedoraproject.org/wiki/DistTag>
    experimentally in the package Release field to help prevent problems like
    (#197266) from occuring in the future.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-24
changelog:
  - Don't (uselessly) link the server against zlib.
  - Fix the 1680x1050 modes to be the CVT timings instead of GTF.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-23
changelog:
  - Fix an open-coded check for reduced-blanking modes to only apply to analog
    connectors.
  - Reorder the EDID patches slightly.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-22
changelog:
  - Added xorg-xserver-1.1.0-setuid.diff to fix potential security issue (#196094)
  - Disable DRI on ppc64 builds.
  - Conditionalize inclusion of DRI related X server modules to with_dri builds.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-21
changelog:
  - Update xorg-x11-server-1.1.0-tfp-damage.patch to use glTexSubImage2D
    to only update the part of the texture that changed, based on damage
    regions.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-20
changelog:
  - Remove with_xnest_server conditional, and fix more BuildRequires to pull
    in libX11-devel, libXext-devel, zlib-devel, etc. for Xnest and Xephyr.
  - Remove unwanted files leftover in buildroot for s390/s390x builds.
  - Add Xserver.1x manpage to multiple subpackages, as it applies equally to
    Xorg, Xnest, Xvfb, Xephyr.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-19
changelog:
  - Add with_xnest_server conditional and disable on s390, since Xnest
    fails to build on there (Xlib doesn't get added to the link line).
  - Add -f to removal of xorgconfig and others which may or may not be built.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-18
changelog:
  - Add xorg-x11-server-1.1.0-convolution-filter-fix.patch and
    xorg-x11-server-1.1.0-tfp-damage.patch backported to make compiz go
    faster and make compiz shadows work.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-17
changelog:
  - Disable filling in monitor gamma info from EDID momentarily, since drivers
    will use that field to set the card's gamma ramp.
  - Backport some stuff from git: cw crash fix, faster pci scanning, some
    log message cleanup.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-16
changelog:
  - Enable spec support for s390, s390x, alpha, sparc, and sparc64 architectures.
  - Add with_hw_servers conditional to disable hardware servers on s390/s390x.
  - Add with_dmx_server to disable DMX on s390/s390x.
  - Added "release" number to "BuildRequires: freetype-devel >= 2.1.9-1" for
    dependency futureproofing.
  - Force "--disable-dri" on s390/s390x, to attempt to work around ./configure
    failure to find libdrm, which should not be needed on s390 builds anyway.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-15
changelog:
  - Add loader infrastructure for publishing PCI ID lists in the drivers, and
    autodetecting drivers based on that.  Currently unused since no drivers
    publish such a list yet.
  - Fix mouse autoconfig to use /dev/input/mice instead of /dev/mouse.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-14
changelog:
  - Change selection atom to _COMPIZ_GL_INCLUDE_INFERIORS in
    xorg-x11-server-1.1.0-gl-include-inferiors.patch.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-7
changelog:
  - Change "BuildRequires: freetype-devel >= 2.1.10" to 2.1.9, as Xorg 7.0
    contains 2.1.9 in "extras" and 7.1 does not appear to have a requirement on
    a newer freetype.
  - Janitorial cleanups for spec file changelog consistency.
  - Call aclocal before automake, otherwise automake >= 1.9.6 is required in
    order to rebuild the package.
  - Build 1.1.0-4, 1.1.0-5, and 1.1.0-6 appear to have failed in brew but nobody
    fixed them.  It appears automake 1.9 breaks the build.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-4
changelog:
  - Hack the kdrive makefile to only attempt to build Xephyr, avoids linking
    sixteen extra servers just to delete them.
  - Move cvt to the default install set, same as gtf.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-3
changelog:
  - Drop the libxf86config -fPIC patch, just build the whole thing with
    --with-pic instead.  Add void and evdev to the required driver list for
    upcoming autoconfig magic.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-2
changelog:
  - Add "Requires: xorg-x11-proto-devel >= 7.1-1" to sdk for numerous (52) bug
    reports of drivers failing to build with mock.


author: Mike A. Harris <mharris@redhat.com> 1.0.99.903-2
changelog:
  - Disable dependency on xorg-x11-drivers package, for OLPC.  (#191781)
  - Add "BuildRequires: freetype-devel >= 2.1.10" for bug (#192021)


author: Adam Jackson <ajackson@redhat.com> 1.0.99.902-1
changelog:
  - Update to 7.1RC2 plus fix for CVE 2006-1526.  Disable the fastpathing
    patch for fdo bug #4320 since that should be covered in the generic
    Render code now.


author: Kristian Høgsberg <krh@redhat.com> 1.0.99.2-1
changelog:
  - Update to 1.0.99.2 snapshot and go back to using mesa-source package.
  - Drop xorg-server-1.0.99-composite-visibility.patch.
  - Drop xorg-server-1.0.1-backtrace.patch.
  - Drop xorg-server-0.99.3-rgb.txt-dix-config-fix.patch.
  - Add xorg-server-1.0.99.2-spiffiffity.patch.


author: Soren Sandmann <sandmann@redhat.com> 1.0.99.1-2
changelog:
  - Add xorg-server-1.0.99-composite-visibility.patch to get rid of flashing
    titlebars in compositing metacity.


author: Mike A. Harris <mharris@redhat.com>
changelog:
  - Added xorg-server-1.0.1-backtrace.patch which enables the Xorg server's
    built in backtrace support by default, as it was inadvertently disabled in
    7.0.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-6
changelog:
  - Added xorg-x11-server-1.0.1-Red-Hat-extramodes.patch which is a merger of
    XFree86-4.2.99.2-redhat-custom-modelines.patch and
    xorg-x11-6.8.2-laptop-modes.patch from FC4 for (#180301)
  - Install a copy of the vesamodes and extramodes files which contain the list
    of video modes that are built into the X server, so that the "rhpxl" package
    does not have to carry around an out of sync copy for itself. (#180301)


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added xorg-x11-server-1.0.1-composite-fastpath-fdo4320.patch with changes
    suggested by ajax to fix (fdo#4320).
  - Cosmetic cleanups to satiate the banshees.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added xorg-x11-server-1.0.1-fbpict-fix-rounding.patch from CVS HEAD.
  - Added xorg-x11-server-1.0.1-SEGV-on-null-interface.patch which prevents a
    SEGV on null interfaces (#174279,178986)


author: Mike A. Harris <mharris@redhat.com> 1.0.0-2
changelog:
  - Added xserver-1.0.0-parser-add-missing-headers-to-sdk.patch to provide the
    necessary libxf86config.a headers to be able to use the library. (#173084)


author: Mike A. Harris <mharris@redhat.com> 1.0.0-1
changelog:
  - Updated to xserver 1.0.0 from X11R7 RC4
  - Removed the following patches, which are now integrated upstream:
    - xorg-server-0.99.3-rgb.txt-dix-config-fix.patch,
    - xorg-server-0.99.3-fbmmx-fix-for-non-SSE-cpu.patch
  - Changed manNx directories to manN to match upstream defaults.
  - Added libxf86config.a to sdk subpackage.
  - Updated build dependency of "mesa-libGL-devel >= 6.4.1-1"
  - Added "BuildRequires: xorg-x11-font-utils >= 1.0.0-1" to be able to query
    the fontdir from fontutil.pc which is implemented currently by a custom
    patch.
  - Enable xtrap, xcsecurity, xevie, and lbx on all builds, not just DRI builds.
  - Fix sdk installation path, so that drivers can find the files again.
  - Update file manifest, to deal with X server modules that have moved to
    a subdir, etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-9
changelog:
  - Added "Requires: xorg-x11-drivers >= 0.99.2-4" as a dependency of the Xorg
    subpackage, to ensure that anaconda installs all of the drivers during OS
    installs and upgrades, as requested by Jeremy Katz.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-8
changelog:
  - Added xorg-server-0.99.3-rgb.txt-dix-config-fix.patch which fixes the
    --with-rgb-path option to actually *work*.
  - Updated libdrm dep to 1.0.5


author: Mike A. Harris <mharris@redhat.com> 0.99.2-7
changelog:
  - Update xorg-x11-server-utils dep to 0.99.2-5 to ensure rgb.txt is installed
    in correct location - _datadir/X11/rgb
  - Added --with-rgb-path configure option to specify _datadir/X11/rgb so the
    X server finds the rgb.txt database properly, for bugs (#173453, 173435,
    173428, 173483, 173734, 173737, 173594)
  - Added xorg-server-0.99.3-fbmmx-fix-for-non-SSE-cpu.patch to prevent SSE/MMX
    code from being activated on non-capable VIA CPU. (#173384,fdo#5093)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-6
changelog:
  - Add the missing rpm pre script from monolithic xorg-x11 packaging,
    clean it up a bit, reorder it for slight performance gain.
  - Add some perl magic to pre script to remove RgbPath from xorg.conf,
    in order to fix bug (#173036, 173435, 173453, 173428)
  - Add more perl magic to pre script to update ModulePath to the new
    location if it is specified in xorg.conf.
  - Added xorg-x11-server-0.99.3-init-origins-fix.patch ported from monolithic
    xorg-x11 package to fix Xinerama bug.
  - Added xorg-redhat-die-ugly-pattern-die-die-die.patch to kill the ugly grey
    stipple once again for bug (#173423).
  - Added "BuildRequires: libdrm-devel" for DRI enabled builds.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-4
changelog:
  - Added temporary "BuildRequires: libXfont-devel >= 0.99.2-3" and
    "Requires: libXfont-devel >= 0.99.2-3" to ensure early-testers of
    pre-rawhide modular X have installed the work around for (#172997).
  - Added implementation specific "Requires: xkbdata" to Xorg subpackage, as
    we want to ensure the xkb data files are present, but allow us the option
    of easily switching implementations to "xkeyboard-config" at a future
    date, if we decide to go that route.
  - Re-enable _smp_mflags during build.
  - Added "Requires: xorg-x11-drv-vesa" to Xorg subpackage (#173060)


author: Jeremy Katz <katzj@redhat.com> 0.99.3-2
changelog:
  - add some deps to the Xorg subpackage for base fonts, keyboard and mouse 
    drivers, and rgb.txt that the server really wont work without


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Update to xorg-server-0.99.3 from X11R7 RC2.
  - Add xorg-server.m4 to sdk subpackage, and "X" symlink to Xorg subpackage.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-2
changelog:
  - Added versioning to Xorg virtual Provide, to allow config tools and driver
    packages to have version based requires.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Update to xorg-server-0.99.2 from X11R7 RC1.
  - Add "BuildRequires: xorg-x11-util-macros >= 0.99.1".
  - Add "BuildRequires: mesa-source >= 6.4-4" for DRI builds.
  - Added dmx related utilities to Xdmx subpackage.
  - Individually list each X server module in file manifest.
  - Hack man1 manpages to be installed into man1x.
  - Add the following ./configure options --disable-dependency-tracking,
    --enable-composite, --enable-xtrap, --enable-xcsecurity, --enable-xevie,
    --enable-lbx, --enable-dri, --with-mesa-source, --with-module-dir,
    --with-os-name, --with-os-vendor, --with-xkb-output, --disable-xorgcfg
  - Added getconfig, scanpci et al to Xorg subpackage
  - Added inb, inl, inw, ioport, outboutl, outw, pcitweak utils to Xorg package
    conditionally, defaulting to "off".  These utilities are potentially
    dangerous and can physically damage hardware and/or destroy data, so are
    not shipped by default.
  - Added "BuildRequires: libdmx-devel" for dmx utilities
  - Added "BuildRequires: libXres-devel" for Xres examples
  - Added {_libdir}/xserver/SecurityPolicy to Xorg subpackage for XSECURITY


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2.cvs20050830.2
changelog:
  - Fix license tag to be "MIT/X11"
  - Change Xdmx subpackage to Obsolete xorg-x11-Xdmx instead of xorg-x11-Xnest


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2.cvs20050830.1
changelog:
  - Update BuildRequires for new library package naming (libX...)
  - Use Fedora Extras style BuildRoot tag
  - Invoke make with _smp_mflags to take advantage of SMP systems


author: Kristian Hogsberg <krh@redhat.com> 0.99.1-2.cvs20050830
changelog:
  - Go back to %spec -n, use new cvs snapshot that supports overriding
    moduledir during make install, use %makeinstall.
  - Drop %{moduledir}/multimedia globs.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2.cvs20050825.0
changelog:
  - Added build dependency on xorg-x11-libfontenc-devel, as the build fails
    half way through without it, even though upstream dependencies do not
    specify it as required.


author: Steve Dickson <steved@redhat.com> 1.0.9-42
changelog:
  - mountd: Check host alias with netgroups (bz 478952)
  - exportfs: fixed typo in man page (bz 474848)
  - nfs.init: NFS server reboot results in "Stale NFS file handle" (bz 474449) 
  - nfslock.init: options not correctly parsed (bz 459591)
  - mount.nfs: mounts fail with read-only /etc (bz 450646)
  - nfslock.init: lockd not using settings in sysconfig/nfs (bz 434795)
  - tcpwrappers: updated code to correctly use api  (bz 494878)
  - nhfsstone: added v3 and v4 support (bz 465933)
  - mount.nfs: add support for lookupcache= option (bz 489335).


author: Steve Dickson <steved@redhat.com> 1.0.9-40
changelog:
  - Fixed arguments to the hosts_ctl() call in the good_client() 
    routine used in the tcpwrapper support. (bz 440120)


author: Steve Dickson <steved@redhat.com> 1.0.9-39
changelog:
  - Fixed typo in nfs initscript that caused rpc.rquotad daemons
    to be started but not stoppped (bz 470483)


author: Steve Dickson <steved@redhat.com> 1.0.9-38
changelog:
  - The fix to bz 438418 introduced a regression that caused
    mount.nfs to exit with zero on failed mounts. (bz 465966)


author: Steve Dickson <steved@redhat.com> 1.0.9-37
changelog:
  - Added the warning.patch to fix some warning which were
    flaged by rpmdiff during the errata phasea (Errata 2009:8187)

  - Re-enabled tcp wrappers. (bz 440120)


author: Steve Dickson <steved@redhat.com> 1.0.9-36
changelog:
  - Incorrect exit codes from nfs init script (bz 431891)
  - Incorrect a typo in nfsstat --mounted arg (bz 433741)
  - Fixed statd callbacks with the -n arg (bz 451057)
  - Do not display zero stats with nfsstat (bz 437242)
  - Pre-load nfsd when args to rpc.nfsd are given (bz 441983)
  - Increase the number simultaneous krb5 mounts (bz 432879)
  - Have rpc.gssd use file ownership vs uid on cred file (bz 433751)


author: Steve Dickson <steved@redhat.com> 1.0.9-33
changelog:
  - In both rpcgssd and rpcsvcgssd initscrips move the 
    SECURE_NFS check back to be a global check. This
    stops false failures from happen when the services
    are stopped when they are not configured to start (bz 435267)


author: Steve Dickson <steved@redhat.com> 1.0.9-30
changelog:
  - Added in a number of bug fixes (esp in crossmnt code) that were 
    exposed during the secinfo testing. (bz 315401)


author: Steve Dickson <steved@redhat.com> 1.0.9-29
changelog:
  - Added SECINFO support (bz 315401)
  - Reworked init scripts so service will be able to
    stop when some of the checks fail. (bz 295911)


author: Steve Dickson <steved@redhat.com> 1.0.9-27
changelog:
  - Fixed nfs initscript to fail with rpc.mound fails (bz 250622) 
  - Fixed typo in rpc.mountd man page (bz 248543)
  - Turn on 'nohide' automatically for all refer exports (bz 313561)


author: Jeff Layton <jlayton@redhat.com> 1.0.9-26
changelog:
  - Add new mountd mode for handling many netgroups (bz 250609)
  - Change nfs init script to not reset lockd ports on stop (bz 313671)
  - Change nfslock script to use sysctls to set lockd ports (bz 313671)


author: Steve Dickson <steved@redhat.com> 1.0.9-23
changelog:
  - Changed rpcidmapd and rpcgssd stop priority levels so
    those daemons would be stoppped after autofs (bz 245376)
  - Updated some out-of-date man pages (bz 233903)
  - Stoppped mount.nfs from wasting reserve ports (bz 246254)


author: Steve Dickson <steved@redhat.com> 1.0.9-22
changelog:
  - Reworked returns values of the init scripts (bz 243703)
  - Reworked rpc init scripts so they are not dependent
    loading modules. (bz 241015).


author: Steve Dickson <steved@redhat.com> 1.0.9-19
changelog:
  - Make sure the condrestarts exit with a zero value (bz 240352)
  - Added -o nordirplus mount option to disable READDIRPLUS (bz 240357)
  - Stopped /etc/sysconfig/nfs from being overwritten on updates (bz 234543)


author: Steve Dickson <steved@redhat.com> 1.0.9-18
changelog:
  - Fix mount.nfs4 to display correct error message (bz 227212)
  - Fix mount.nfs so mtab is updated (bz 227988)
  - Eliminate timeout on nfsd shutdowns (bz 222001)
  - Eliminate memory leak in mountd (bz 239536)
  - Make sure statd uses correct uid/gid by chowning
    the /var/lib/nfs/statd with the rpcuser id. (bz 235216)
  - Correct some sanity checking in rpc.nfsd. (bz 220887)
  - Fixed mount.nfs mtab lock (bz 227985)
  - Have mountd hold open etab file to force inode number to change (bz 236823)
  - Create a /etc/sysconfig/nfs with all the possible init script
    variables (bz 234543)
  - Changed nfs initscript to exit with correct value (bz 221874)
  - Added userlevel support for v4 relocation support (bz 223053)


author: Steve Dickson <steved@redhat.com> 1.0.9-14
changelog:
  - Doing a connect on UDP sockets causes the linux network
    stack to reject UDP patches from multi-home server with
    nic on the same subnet. (bz 208244)


author: Karel Zak <kzak@redhat.com> 1.0.9-7
changelog:
  - Added support for the mount -s (sloppy) option (#205038)
  - Added nfs.5 man page from util-linux
  - Added info about [u]mount.nfs to the package description


author: <SteveD@RedHat.com> 1.0.9-6
changelog:
  - Removed the compiling of getiversion and getkversion since
    UTS_RELEASE is no longer defined and these binary are
    not installed.


author: <SteveD@RedHat.com> 1.0.9-5
changelog:
  - Changed gssd daemons to cache things in memory
    instead of /tmp which makes selinux much happier.
    (bz 203078)


author: <SteveD@RedHat.com> 1.0.9-2
changelog:
  - Enabled the creating of mount.nfs and umount.nfs binaries
  - Added mount option fixes suggested by upstream.
  - Fix lazy umounts (bz 169299)
  - Added -o fsc mount option.


author: <SteveD@RedHat.com> 1.0.8-3
changelog:
  - Split the controlling of nfs version, ports, and protocol 
    into two different patches
  - Fixed and added debugging statements to rpc.mountd.
  - Fixed -p arg to work with priviledged ports (bz 156655)
  - Changed nfslock initscript to set LOCKD_TCPPORT and
    LOCKD_UDPPORT (bz 162133)
  - Added MOUNTD_NFS_V1 variable to version 1 of the
    mount protocol can be turned off. (bz 175729)
  - Fixed gssd to handel mixed case characters in
    the domainname. (bz 186069)


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-4.FC5
changelog:
  - Added new libnfsidmap call, nfs4_set_debug(), to rpc.idmapd
    which turns on debugging in the libarary.


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-3.FC5
changelog:
  - Added innetgr patch that changes configure scripts to 
    check for the innetgr function. (bz 177899)


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-1.FC5
changelog:
  - Updated to 1.0.8-rc2 release
  - Broke out libgssapi into its own rpm
  - Move librpcsecgss and libnfsidmap in the new nfs-utils-lib rpm
  - Removed libevent code; Required to be installed.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-19
changelog:
  - Updated to latest code in SourceForge CVS
  - Updated to latest CITI patches (1.0.7-4)
  - Fix bug in nfsdreopen by compiling in server defaults


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-18
changelog:
  - Updated libnfsidmap to 0.11
  - Updated libgssapi to 0.5
  - Made sure the gss daemons and new libs are
    all using the same include files.
  - Removed code from the tree that is no longer used.
  - Add ctlbits patch that introduced the -N -T and -U
    command line flags to rpc.nfsd.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-17
changelog:
  - Updated to latest nfs-utils code in upstream CVS tree
  - Updated libevent from 1.0b to 1.1a
  - Added libgssapi-0.4 and librpcsecgss-0.6 libs from CITI


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-16
changelog:
  - Reworked the nfslock init script so if lockd is running
    it will be killed which is what the HA community needs. (bz 162446)
  - Stopped rpcidmapd.init from doing extra echoing when
    condstart-ed.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-12
changelog:
  - Changed useradd to use new -l flag (bz149407)
  - 64bit fix in gssd code (bz 163139)
  - updated broken dependencies
  - updated rquotad to compile with latest
    quota version.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-4
changelog:
  - Fixed a compile error on x86_64 machines in the gss code.
  - Updated the statd-notify-hostname.patch to eliminate 
    a segmentation fault in rpc.statd when an network 
    interface was down. (bz 151828)


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-3
changelog:
  - Changed xlog to use LOG_INFO instead of LOG_DEBUG
    so debug messages will appear w/out any config
    changes to syslog.conf.
  - Reworked how /etc/exports is setup (bz 151389)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added support to rpcgssd.init and rpcsvcgssd.init scripts
    to insmod security modules.
  - Changed the nfs.init script to bring rpc.svcgssd up and down,
    since rpc.svcgssd is only needed with the NFS server is running.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Fix problem in idmapd that was causing "xdr error 10008"
    errors (bz 142813)
  - make sure the correct hostname is used in the SM_NOTIFY
    message that is sent from a rebooted server which has 
    multiple network interfaces. (bz 139101)

  - Changed nfslock to send lockd a -KILL signal
    when coming down. (bz 125257)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Replaced a memcopy with explicit assignments
    in getquotainfo() of rquotad to fix potential overflow
    that can occur on 64bit machines. (bz 138068)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added "$RQUOTAD_PORT" variable to nfs.init which
    allows the rpc.rquotad to use a predefined port
    (bz# 124676)


author: <SteveD@RedHat.com
changelog:
  - Incorporate some clean up code from Ulrich Drepper (bz# 134025)
  - Fixed the chkconfig number in the rpcgssd, rpcidmapd, and 
    rpcsvcgssd initscrpts (bz# 132284)


author: <SteveD@RedHat.com>
changelog:
  - Make sure the uid/gid of nfsnobody is the
    correct value for all archs (bz# 123900)
  - Fixed some security issues found by SGI (bz# 133556)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Major clean up. 
  - Removed all unused/old patches
  - Rename and condensed a number of patches
  - Updated to CITI's nfs-utils-1.0.6-13 patches


author: <SteveD@RedHat.com>
changelog:
  - nfslock stop is now done on package removals
  - Eliminate 3 syslog messages that are logged for
    successful events.


author: <SteveD@RedHat.com>
changelog:
  - Fixed syntax error in nfs initscripts when
    NETWORKING is not defined
  - Removed sync warning on readonly exports.
  - Changed run levels in rpc initscripts.
  - Replaced modinfo with lsmod when checking
    for loaded modules.


author: <SteveD@RedHat.com>
changelog:
  - Removed the auto option from MOUNTD_NFS_V2 and
    MOUNTD_NFS_V3 variables. Since v2 and v3 are on
    by default, there only needs to be away of 
    turning them off.


author: <SteveD@RedHat.com>
changelog:
  - Changed the permission on idmapd.conf to 644
  - Added mydaemon code to svcgssd
  - Updated the add_gssd.patch from upstream


author: <SteveD@RedHat.com>
changelog:
  - Created a pipe between the parent and child so 
    the parent process can report the correct exit
    status to the init scripts
  - Added SIGHUP processing to rpc.idmapd and the 
    rpcidmapd init script.


author: <SteveD@RedHat.com>
changelog:
  - Made the nfs4 daemons initscripts work better when 
    sunrpc is not a module
  - added more checks to see if modules are being used.


author: <SteveD@RedHat.com>
changelog:
  - Added the shutting down of the rpc v4 daemons.
  - Updated the Red Hat only patch with some init script changes.


author: <SteveD@RedHat.com>
changelog:
  - Added the addition and deletion of rpc_pipefs to /etc/fstab
  - Added the addition and deletion of module aliases to /etc/modules.conf


author: <SteveD@RedHat.com>
changelog:
  - Removed gssd tarball and old nfsv4 patch.
  - Added new nfsv4 patches that include both the
     gssd and idmapd daemons
  - Added redhat-only v4 patch that reduces the
     static librpc.a to only contain gss rpc related
     routines (I would rather have gssd use the glibc 
     rpc routines)
  -Changed the gssd svcgssd init scripts to only
     start up if SECURE_NFS is set to 'yes' in
     /etc/sysconfig/nfs


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added the setting of lockd ports via sysclt interface
  - Removed queue setting code since its no longer needed


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - "service nfs restart" should start services even if currently 
  -   not running (#59469)
  - bump version to 0.3.3-4


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - don't install any rquota pages in _mandir: (#39707, #44119)
  - don't try to manipulate rpc.rquotad in init scripts 
  -   unless said program actually exists: (#43340)


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - Fix incorrect file specifications in statd manpage.
  - Require gawk 'cause it's used in nfslock init script.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - switch to nfs-utils as the base tree
  - fix the statfs patch for the new code base
  - single package that obsoletes everything we had before (if I am to keep
    some traces of my sanity with me...)


author: Trond Eivind Glomsrød <teg@redhat.com> 1.0.2-1
changelog:
  - 1.0.2
  - Total overhaul of build precedure
  - Add many small helper programs added to 1.0.2
  - drop old patches


author: Trond Eivind Glomsrød <teg@redhat.com> 1.0.1-5
changelog:
  - Don't segfault when infile is a directory and "-f" is used (#56623)
  - Automake is evil. Add workaround


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - FHS packaging to build on solaris2.5.1.
  - remove config.cache from autoconf patch.
  - sparc: use %configure, but not the m4 macros.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - autoconfed and libtoolized package 
  - fixed Copyright (it's BSD, not GPL)
  - dumped bzless (less works fine with bz2-files)
  - rewrote build and install parts
  - separated main package and devel package


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - force compilation with egcs to avoid gcc optimization bug (thank God 
    we haven't been beaten by it)


author: Tom Lane <tgl@redhat.com> 3.8.2-7.el5.3
changelog:
  - Fix some more LZW decoding vulnerabilities (CVE-2009-2285)
  Resolves: #507725
  - Update upstream URL


author: Tom Lane <tgl@redhat.com> 3.8.2-7.el5.1
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Resolves: #458812
  - Remove sgi2tiff.1 and tiffsv.1, since they are for programs we don't ship
  Resolves: #460120


author: Jindrich Novy <jnovy@redhat.com> - 3.8.2-6
changelog:
  - fix CVE-2006-2193, tiff2pdf buffer overflow (#194362)
  - fix typo in man page for tiffset (#186297)
  - use %{?dist}


author: Matthias Clasen <mclasen@redhat.com>
changelog:
  - Fix several vulnerabilities (CVE-2006-3460 CVE-2006-3461
    CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)


author: Matthias Saou <http://freshrpms.net/> 3.7.4-2
changelog:
  - Remove useless explicit dependencies.
  - Minor spec file cleanups.
  - Move make check to %check.
  - Add _smp_mflags.


author: Matthias Clasen <mclasen@redhat.com> - 3.7.1-3
changelog:
  - Drop the largefile patch again
  - Fix a problem with the handling of alpha channels
  - Fix an integer overflow in tiffdump (#143576)


author: Phil Knirsch <phil@redhat.de>
changelog:
  - Fixed ia64 problem with tiffinfo. Was general 64 bit arch problem where s390x
    and ia64 were missing (#52129).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages from devel package to the regular one
  - integrate Frank Warmerdam's fixed .fax handling code (keep until next release
    of libtiff)
  - fix fax2ps breakage (bug #8345)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - enable zip and jpeg codecs
  - change defattr in normal package to 0755
  - add defattr to -devel package


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-35.4
changelog:
  - import Kees Cook's patch to fix accidental leakage of part of ./DB_CONFIG
    (#580542, CVE-2010-0826)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-35.2
changelog:
  - when setting file contexts for creation of new files, only fail outright
    if we were in enforcing mode and the file needed to be given a specific
    label (#368281)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-35
changelog:
  - add missing 'ed' builddep
  - set LDFLAGS and CPPFLAGS so that our local copy of DB is more likely to be
    found by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-33
changelog:
  - update to db 4.3.28
  - correct a use of uninitialized memory in the bundled libdb (Arjan van de Ven)
  - obsolete the compat package, which is useless because current glibc wouldn't
    use it anyway


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set errno to ENOENT by default so that we don't leave stale errno values
    around in error cases (#152467)
  - clear the entire key DBT before handing it to a get() function


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-30
changelog:
  - update to DB 4.3 (#140094)
  - add sample getent-based makefile as a doc file
  - pass S_IFREG to matchpathcon() to properly match contexts which are earmarked
    for only files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-28
changelog:
  - set _filter_GLIBC_PRIVATE instead of overriding findrequires, so that file
    colors get marked correctly (originally #128436)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-27
changelog:
  - only provide a -compat subpackage on platforms where glibc provides
    compat NSS modules (%{ix86})
  - make -compat depend on the same version of the non-compat package


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-24
changelog:
  - disable use of RPM's internal dependency generator, which was preventing
    the filtering out of glibc private dependencies (#112849)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-18
changelog:
  - disable various language bindings when building the bundled DB library
  - remove unpackaged files from the buildroot in %install
  - don't install the compat version on arches where if we don't need one


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-8
changelog:
  - build using a bundled Berkeley DB with a unique name to avoid possible symbol
    collisions with binaries using different versions (mix multiple versions of
    any shared library in a single process, observe as wackiness ensues)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-36.el5_5.3
changelog:
  - add upstream patch to fix a few use-after-free bugs, including one in
    kadmind (CVE-2010-0629, #578185)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-36.el5_5.2
changelog:
  - pull changes to libkrb5 to properly handle and chase "off-path" referrals
    back from 1.7 (#574387)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-36.el5_5.1
changelog:
  - add candidate patch to correct KDC integer overflows which could be
    triggered by malformed RC4 and AES ciphertexts (CVE-2009-4212, #546347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-33.el5_5
changelog:
  - kdb5_util: when renaming a database, if the new name's associated lock
    files don't exist, go ahead and create them (#442879)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: perform PAM account and session management for the target user;
    authentication is still performed as before (#477033)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix typo in ksu's reporting of errors getting credentials (#462890)
  - kadmind.init: stop setting up a keytab, as kadmind's been able to use
    the database directly for a while now (#473151)
  - pull up patch to set PAM_RHOST (James Leddy, #479071)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-31.el5_5.2
changelog:
  - add fix for potential buffer read overrun in the SPNEGO GSSAPI mechanism
    (#490636, CVE-2009-0844)
  - add fix for NULL pointer dereference when handling certain error cases
    in the SPNEGO GSSAPI mechanism (#490636, CVE-2009-0845)
  - add fix for attempt to free uninitialized pointer in the ASN.1 decoder
    (#491036, CVE-2009-0846)
  - add fix for bug in length validation in the ASN.1 decoder (CVE-2009-0847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-32.el5_5
changelog:
  - add patch to also report an error in rcp if close() returns an error,
    which could indicate an out-of-space error on an NFS filesystem (Tomas
    Smetana, #461902)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-31.el5_5
changelog:
  - add a backported patch which adds a check on credentials obtained from
    a foreign realm to make sure that they're of an acceptable type, and
    if not, retry to the request to get one of the right type (Sadique Puthen,


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-30.el5_5
changelog:
  - backport fix from 1.6.3 to register file-based ccaches created with
    the krb5_cc_new_unique() function with the global list, so that we
    don't crash when we go to close the ccache (#468729)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-29.el5_5
changelog:
  - backport fix from 1.6.3 to abort a sequential scan of a keytab if the
    handle to the keytab has become invalidated during the scan (via Vince
    Worthington, #460911)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-28.el5_5
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)
  - telnet: remove the proviso in the man page which says that the "z" command
    only works in csh, as this is only true on systems where other shells don't
    implement job control (#433947)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - avoid double-logging by not parsing /etc/krb5.conf twice (#434858)
  - ftp: fix to not incorrectly reuse target filenames during mget when case-
    mapping is enabled (#442716)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-25.el5_5
changelog:
  - add preliminary patch to fix use of uninitialized pointer / double-free in
    KDC (CVE-2008-0062,CVE-2008-0063) (#432620, #432621)
  - add backported patch to fix use-after-free in libgssapi_krb5 (CVE-2007-5901)
    (#415321)
  - add backported patch to fix double-free in libgssapi_krb5 (CVE-2007-5971)
    (#415351)
  - add preliminary patch to fix incorrect handling of high-numbered descriptors
    in the RPC library (CVE-2008-0947) (#433596)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-24
changelog:
  - kdb_ldap: add patch to recognize "nsAccountLock: TRUE" as indicating that
    an entry should have the DISALLOW_ALL_TIX flag set (read only), for better
    interop with Fedora, Netscape, Red Hat Directory Server (Simo Sorce, #431784)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-23
changelog:
  - backport changes from 1.6.3 which allow callers of the the sendto-kdc
    functions to override the failover behavior on a per-response basis, and
    default to failing over on service-unavailable errors (#230384)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-22
changelog:
  - add patch to fall back to TCP kpasswd servers for kdc-unreachable,
    can't-resolve-server, and response-too-big errors (#392631)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-21
changelog:
  - add conditional logic to allow building only the krb5-server-ldap subpackage
    (#427790)
  - use the right sequence numbers when generating password-set/change requests
    for kpasswd servers after the first one (#427789)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-20
changelog:
  - allocate space for the relative path including the nul-terminator (Jose
    Plans, #426085)
  - fix a couple of spots where a file context wouldn't be freed


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-19
changelog:
  - backport from 1.6.3 to initialize a library-allocated get_init_creds_opt
    structure the same way we would one which was allocated by the calling
    application, to restore kinit's traditional behavior of doing a password
    change right when it detects an expired password (#413051)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-18
changelog:
  - fix syntax error in kadmin init script (#373011,#381011)
  - turn off content/size/date verification on krb5.conf (#329771)
  - fix storage of delegated krb5 credentials when they've been wrapped up in
    spnego (#319351)
  - return a delegated credential handle even if the application didn't pass a
    location to store the flags which would be used to indicate that credentials
    were delegated (#314651)
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated (#309951)
  - signal PAM when we're changing an expired password that it's an expired
    password, so that when cracklib flags a password as being weak it's treated
    as an error even if we're running as root (#308131)
  - set the key expiration time in an AS-REP using the sooner of the client's
    entry's key expiration time and the entry's expiration time, instead of
    just the entry's expiration time (#250257)
  - in ftp, don't lose track of a client socket when a server-side error
    causes a download to fail (#248618)
  - in ftp, fix runique when mget is used (#247633)
  - add the snippet documenting the kdc_tcp_ports option to kdc.conf's man
    page, using text taken from the administrator's guide (#282191)
  - in kpasswd, when reading the client's principal name from the ccache fails
    for any reason, fall back to the user's name (#248631)
  - init script cleanups (Michal Marciniszyn, #242500)
  - tweak the telnet man page to refer to the telnet rlogin escape character
    as such instead of rereferring to it simly as the escape character or the
    telnet escape character (#247741)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-17
changelog:
  - ftpd: also do PAM session and credential management when ftp clients use
    strong authentication (#286291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-14
changelog:
  - make krb5-workstation depend on the PAM configuration file used by login.krb5
  - fix omission of kadmin log file when labeling (#253558)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-13
changelog:
  - add preliminary patch to fix buffer overflow in rpcsec_gss implementation
    in libgssrpc (#250973, CVE-2007-3999) and write through uninitialized
    pointer in kadmind (#250976, CVE-2007-4000)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-11
changelog:
  - login: change to the user's home directory after dropping privileges,
    not before (#248050)
  - turn off the ldap features


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-10
changelog:
  - add a patch to allow applications to try to use a key with kvno=0, if
    found, in place of the "right" version for a request (Luke Howard, #230379)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-9
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798) (#239073)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-19
changelog:
  - refrain from killing any lingering members of our child's process group when
    logging that the child process has exited (Jose Plans, #143289)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to /var/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.7.2-1
changelog:
  - Update to upstream version 2.7.2
    Resolves: #474458
  - Enable out-of-process providers
    Resolves: #455109
  - Add README.RedHat.SSL
    Resolves: #479038


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.7.1-2
changelog:
  - Check status of both lock files and merge init script patches to one
  - Fix local-or-remote-auth patch and enhance PAM security settings
    Resolves: #471371


author: Vitezslav Crhonek <vcrhonek@redhat.com> 2:2.7.1-1
changelog:
  - Upgrade to upstream version 2.7.1
    Resolves: #453952
  - Fix setElementAt() doesn't copy value of CMPI_char parameter
    Resolves: #454589
  - Support CMPI MI factories that return errors
    Resolves: #454590
  - Fix HTTP 401 responses lack Content-Length headers
    Resolves: #454591
  - Remove debug dirs
    Resolves: #440371
  - Include SNMP Indication Handler
    Resolves: #452930
  - Setup the InterOp namespace correctly
    Resolves: #447673
  - Fix wrong return code from init script
    Resolves: #326281
  - Add cimsub to package
    Resolves: #447823


author: Vitezslav Crhonek <vcrhonek@redhat.com> 2:2.7.0-1
changelog:
  - Upgrade to upstream version 2.7.0
    Resolves: #427498
  - Fix OpenPegasus SRPM fails to build Test RPM
    Resolves: #252462
  - Mark files in /var/lib/Pegasus as noverify in spec file
    Resolves: #250186


author: Nalin Dahyabhai <nalin@redhat.com> 2:2.5.2-5
changelog:
  - revise multilib -devel patch so that the sample config.mak is identical
    everywhere, removing a last lingering file conflict (#222171)


author: Jay Fenlason <fenlason@redhat.com> 2:2.5.2-4
changelog:
  - Revert the alternatives stuff, and add the -multilib patch to
    correctly close 
    bz#192754 multilib -devel conflicts for tog-pegasus
    This should also close
    bz#208949: Aborted /usr/sbin/repupgrade 2>>/var/lib/Pegasus/log/install.log


author: Nalin Dahyabhai <nalin@redhat.com> - 2:2.5.2-3
changelog:
  - change requires: tog-pegasus to prereq: tog-pegasus so that the pegasus
    user and group will exist when we go to lay down files for tog-pegasus-devel
    (#218305)
  - prereq the current version of openssl so that the right versions of
    libssl and libcrypto will be available in %post (possible for #208949)


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.4.1-10
changelog:
  - More upstream 2.5.2_APPROVED bug fixes:
    o 4629: Pegasus freezes when it is unable to send out completely, the results of a request
    o 5073: Class Names on Reference, ReferenceNames, Assoc, AssocNames returned lower case
    o 5090: cimserver crash on a request after attempting to unload idle CMPI providers
    o 5180: OperationAggregate deleted in _enqueueResponse while member mutex held


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-8
changelog:
  - Fix bug 192754: remove multilib conflicts
  - More upstream 2.5.2_APPROVED bug fixes:
    o 5119: memory leak in CMPI implementation
    o 5115: fix SetConfig_EnvVar comments


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-6
changelog:
  - Apply upstream patches for latest 2.5.2_APPROVED bugs:
    o 5046: cimprovider timeout needs to be increased
    o 5047: cimmof timeout needs to be increased
    o 5048: Invalid Pointer in CIMOperationRequestEncoder code
    o 5049: Unnecessary dependency on experimental headers
    o 5051: Improved handling of OOP indication provide module failures
    o 5053: reserveCapacity method may cause size overflow
    o 5059: XMLWriter does not escape '>' in strings
    o 5072: Potential race condition with OOP response chunks
    o 5083: CIMRequestMessage buildResponse() should be const
  - Fix bug 193121: restore world read access to libraries


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-4
changelog:
  - fix bug 190432: %exclude /usr/lib/debug from RPM
  - fix upstream OpenPegasus '2.5.2_APPROVED' bugs, applying upstream patches:
    o 4955 : Bogus Description property for OperatingSystem provider
    o 4956 : reserveCapacity method may cause size overflow on invalid input
    o 4968 : CMPI provider up-calls cause failure with out-of-process
    o 4978 : snmpDeliverTrap_netsnmp::_createSession function is not thread safe
    o 4983 : Memory leak in OOP indication generation
    o 4984 : Forked process hangs in system call
    o 4986 : Adding automated test for snmpIndication Handler
    (  http://cvs.opengroup.org/bugzilla/show_bug.cgi?id=? )
  - apply upstream update to 'pegasus-2.5.1-warnings.patch'


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-2
changelog:
  - Apply patches for the two '2.5.2_APPROVED' upstream bugzillas 
    4934(4943) and 4945 :
    (http://cvs.opengroup.org/bugzilla/buglist.cgi?bug_id=4943%2C4945)
  - Fix the PATH_MAX and MAXHOSTNAMELEN issues (again)


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5-6
changelog:
  - restore SSLv23_method SSL support now that bug 173399 is fixed
  - rebuild for new gcc, glibc, glibc-kernheaders
  - PAMBasicAuthenticatorUnix.cpp includes no longer include syslog.h: add
  - /usr/bin/install now decides to fail if chown fails - set $INSTALL_USER, $INSTALL_GROUP


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5-3
changelog:
  - Rebuild for new openssl dependencies
  - Enable CMPI support for sblim-cmpi-base with ENABLE_CQL=true


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5-2
changelog:
  - Add /usr/lib/cmpi alternate providerLibDir for sblim-cmpi-base Fedora Extras pkg
  - Fix bug 171124: use numeric ids for pegasus user/group
  - guidelines: do not remove pegasus user/group in %postun.


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5-1
changelog:
  - Implemented new 'make install' target.
  - Re-wrote tog-pegasus.spec file from scratch.
  - Ported BZ 167986 authentication code and BZ 167164 + BZ 167165 fixes from RHEL-4


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.14-17.2
changelog:
  - Fix tcsh obeys printexitvalue for back-ticks
    Resolves: #640252
  - Remove extra fork when tcsh processes backquotes
    Resolves: #640251


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.14-17
changelog:
  - Revert "selector out of range" patch
    Resolves: #495642
  - Fix printing of multi-byte character
    Resolves: #502474
  - Fix tcsh %j prompt formatting sequence overrides all other formatting
    Resolves: #461836
  - Fix various globbing problems
    Resolves: #529425, #529703


author: Vitezslav Crhonek <vcrhonek@rehat.com> - 6.14-14
changelog:
  - Fix $name[selector] doesn't fail when selector is out of range
    Resolves: #435398
  - Fix description of builtin command 'set' in tcsh manpage
    Resolves: #430459
  - Fix strings which begin with '0' are not recognized as octal numbers
    Resolves: #438109
  - Fix tcsh scripts with multiple case statement with end keywords
    break with error
    Resolves: #436956
  - Fix calculation order of operators description in tcsh manpage
    Resolves: #442536
  - Fix memoryuse description in tcsh manpage
    Resolves: #437095
  - Change config_f.h to use system malloc()
    Resolves: #443643


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.14-13
changelog:
  - Fix UTF-8 Japanese character is garbled in tcsh script in
    a certain situation
    Resolves: #453785


author: Miloslav Trmac <mitr@redhat.com> - 6.14-7
changelog:
  - Fix a crash when reading scripts with multibyte characters (#183267)
  - Block SIGINT while waiting for children (#177366)


author: Miloslav Trmac <mitr@redhat.com> - 6.13-12
changelog:
  - Don't ship the HTML documentation (generated from the man page, contains
    also a copy of the man page)


author: Miloslav Trmac <mitr@redhat.com> - 6.13-7
changelog:
  - Define $HOSTTYPE and $MACHTYPE for ppc64 and s390 (#115531),
    I hope that finally covers all architectures.


author: Miloslav Trmac <mitr@redhat.com> - 6.13-6
changelog:
  - Define $HOSTTYPE and $MACHTYPE also on IA-64 and s390x (#115531)
  - Don't close sockets to avoid file descriptor conflits with nss_ldap (#112453)


author: Miloslav Trmac <mitr@redhat.com> - 6.13-5
changelog:
  - Fix HTML documentation generation, second attempt (#60664)
  - Set dspmbyte using nl_langinfo(CODESET) if possible, should cover all
    cases where lang.csh was correctly setting dspmbyte (#89549)


author: Miloslav Trmac <mitr@redhat.com> - 6.13-2
changelog:
  - Make comparisons for ranges in bracket expressions symmetric (#59493)
  - Run perl2html with LC_ALL=C to workaround what seems to be a perl bug
    (#60664)
  - Define $HOSTTYPE and $MACHTYPE on x86_64 (#115531)
  - Fix setting of O_LARGEFILE (#122558)


author: Miloslav Trmac <mitr@redhat.com> - 6.13-1
changelog:
  - Update to tcsh-6.13.00
  - Fix charset headers in some of the translations
  - Convert translated messages to LC_CTYPE locale
  - Fix automatic dspmbyte setting


author: Adrian Havill <havill@redhat.com>
changelog:
  - use <time.h> instead of <sys/time.h> for pickier lib (#25935)
  - allow arguments for login shells (#19926)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - patch for using PATH_MAX instead of some silly internal #defines for
    variables that handle filenames.


author: David Knox <dknox@redhat.com> 0:5.5.23-0jpp.8
changelog:
  - Patches backported from RHEL-5 tomcat5-5.5.23-0jpp.10.el5
  - Updated init script for LSB compliance, catalina.log permissions
  - Resolves: CVE-2009-2693, CVE-2009-2902, CVE-2010-2227
  - CVE_2010-0781


author: Fernando Nasser <fnasser@redhat.com> 0:5.5.23-0jpp.7.2
changelog:
  - Actually add the patch files this time
    Resolves: rhbz#427779
    Resolves: rhbz#504758
    Resolves: rhbz#503980
    Resolves: rhbz#504162


author: Fernando Nasser <fnasser@redhat.com> 0:5.5.23-0jpp.7.2
changelog:
  From  David Knox <dknox@redhat.com>:
  - add patch for CVE-2007-5333
    Resolves: rhbz#427779
  - add patch for CVE-2008-5515
    Resolves: rhbz#504758
  - add patch for CVE-2009-0033
  - add patch for CVE-2009-0580
    Resolves: rhbz#503980
  - add patch for CVE-2009-0783
    Resolves: rhbz#504162


author: David Walluck <dwalluck@redhat.com> 0:5.5.23-0jpp.7.1
changelog:
  - add patch for CVE-2008-1232
    Resolves: rhbz#457727
  - add patch for CVE-2008-1947
    Resolves: rhbz#449916
  - add patch for CVE-2008-2370
    Resolves: rhbz#458634
  - add patch for CVE-2008-2938
    Resolves: rhbz#456214


author: Fernando Nasser <fnasser@redhat.com> - 0:5.5.23-0jpp.5
changelog:
  From jean-frederic clere <jclere@redhat.com>:
  - Patch for CVE-2007-3382 and CVE-2007-3385
    Resolves: rhbz#254156


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:5.5.23-0jpp.3
changelog:
  - Remove erroneous rebuild-gcj-db for javadoc subpackage
  - Add fixes for CVE-2007-2449 and CVE-2007-2450
  - Resolves: bug 244846, bug 244817


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:5.5.23-0jpp.2
changelog:
  - Rebuild
  - Add catalina.out to the rpm and set explicit permissions; tomcat ownership
  - Resolves: bug 237088


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:5.5.23-0jpp.1
changelog:
  - Resolves: bug 237088 
  - Merge 0:5.5.17-8jpp.2 with sources/patches from 5.5.23
  - Build against jakarta-commons-modeler 1.1 with MODELER-15 patch


author: Fernando Nasser <fnasser@redhat.com> 0:5.5.17-3jpp_2fc
changelog:
  - Re-enable ppc64 and s390x
  - Disable JSP pre-compilation on ppc64 and x390x (FIXME)
  - Bootstrap mode (with apisonly) build


author: Fernando Nasser <fnasser@redhat.com> 0:5.5.17-3jpp_1fc
changelog:
  - Full build
  - Do not build on ppc64 and s390x
  - Fix servlet-api.jar path
  - Add version to catalina .so
  From Ralph Apel <rapel@redhat.com>:
  - Re-add patch to add rt.jar
  - Add mx4j JMX API and struts to classpath


author: Fernando Nasser <fnasser@redhat.com> 0:5.5.17-3jpp_0fc
changelog:
  - Upgrade
  - Use any JTA for now
  - Try and remove exclude for sample.war
  - Bootstrap build with apisonly


author: Ralph Apel <r.apel@r-apel.de> 0:5.5.17-3jpp
changelog:
  - Create option --with apisonly to build just tomcat5-servlet-2.4-api,
    tomcat5-jsp-2.0-api and its -javadoc subpackages
  - Create option --without ecj to build even when eclipse-ecj not available
  - Drop several unnecessary export CLASSPATH=


author: Fernando Nasser <fnasser@redhat.com> 0:5.5.17-2jpp
changelog:
  - Requires on post things that are linked to at post
    Merge changes from downstream:
  - Fix line breaks in the tomcat5 init script
  - Split preun section among main package and the two new subpackages
  - Move catalina-ant*.jar to the server-lib subpackage to avoid circular
    dependency with the main package
  - Remove leading zero from alternative priorities
  - Rebuild with new classpath-mail as javamail alternative
  - Update versions of dependencies and move them to library subpackages
  - Use only jta from geronimo-specs


author: Ralph Apel <r.apel@r-apel.de> 0:5.5.16-3jpp
changelog:
  - Drop jdtCompilerAdapter from build-jar-repository
  - Use ant-trax in static webapp build
  - Duplicate admin-webapps jars in _javadir and make them world readable
  - Direct install of common-lib and server-lib to _javadir and symlink for TC5


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 0:5.5.15-1jpp_5fc
changelog:
  - Require java-gcj-compat for post and postun sections of
    servlet-2.4-api, jsp-2.0-api-javadoc and
    server-lib sub-packages, since these three packages call
    /usr/bin/rebuild-gcj-db in their post and/or postun sections.


author: Fernando Nasser <fnasser@redhat.com> 0:5.5.12-1jpp
changelog:
  - Place jsp in its own subpackage
  - Fix alternative links to jsp and servlet
  - Fix alternative priorities to jsp and servlet
  - Create library subpackages: common-lib and server-lib
    From Vadim Nasardinov <vadimn@redhat.com> 0:5.5.12-1jpp
  - Upgrade to 5.5.12
    From Deepak Bhole <dbhole@redhat.com>
  - Fix init script so it works with SELinux


author: Fernando Nasser <fnasser@redhat.com> 0:5.5.9-1jpp
changelog:
  - Merge for upgrade
  - Change the user to tomcat from tomcat4
  - Relax permissions on appdir directory so jonas package can build
  - Remove spurious links to log4j.jar from common and server/lib
  - Remove spurious dependency on tyrex (only needed for tomcat4)
  - Make sure the main package installs first so user tomcat is created
  - Reinstate ssl code changes so that tomcat can be built with other SDKs
    and not only with Sun's or BEA's.


author: Jason Corley 0:5.5.4-12jpp
changelog:
  - Update the servletapi and servletapi-javadoc subpackages to the way proposed
    by Gary Benson (based on work by Ralph Apel) in the 5.0.30 RPMs


author: Jason Corley 0:5.5.4-10jpp
changelog:
  - Incorporate Fernando Nasser's javaxssl patch from the tomcat 5.0.28 RPM
  - Replace find ... -exec's with find | xargs


author: Jason Corley 0:5.5.4-9jpp
changelog:
  - First attempt at the whole servletapi issue
  - Replace jmxri references with mx4j
  - Build with JDK 1.4 and require a 1.4 JDK to run
  - Remove cruft
  - Clearly lost track of some stuff between changelog entries ;-)


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.27-2jpp
changelog:
  - Oops, don't require mx4j 2.0.1. 1.1.1 or later should be enough.
    jmxri won't work anymore since tc5 needs mx4j-tools.


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.27-1jpp
changelog:
  - Update to 5.0.27 (stable)
  - Don't remove tomcat4 user/group on uninstall see the mailing list
    for discussion
  - build w/ xml-apis.jar instead of xmlParserAPIs.jar (release notes 5.0.27)
  - Require junit 3.8.1 or newer (release notes 5.0.26)
  - Require jakarta-commons-dbcp 1.2.1 or newer (release notes 5.0.27)
  - Require jakarta-commons-logging 1.0.4 or newer (release notes 5.0.27)
  - Require jakarta-commons-pool 1.1 or newer (release notes 5.0.27)


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.24-1jpp
changelog:
  - Update to 5.0.24
  - Require xerces-j2 2.6.2 (release notes 5.0.21), also require ant < 1.6
    as tomcat5 doesn't seem to build cleanly with 1.6 yet.


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.19-2jpp
changelog:
  - Set JAVA_ENDORSED_DIRS by default in tomcat5.conf, it is otherwise empty
    Suggestion from Aleksander Adamowski <aleksander.adamowski@altkom.pl>


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.18-1jpp
changelog:
  - Update to 5.0.18
  - Build catalina before connectors
  - Hack connectors build
  - Require xerces-j2 2.6.0 (release notes 5.0.17)


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.16-4jpp
changelog:
  - Create TC4 user and group separately, lets TC5 work out of the box
    on Trustix (Patch from Iain Arnell)


author: Kaj J. Niemi <kajtzu@fi.basen.net> - 0:5.0.16-3jpp
changelog:
  - servletapi5 is required
  - move confdir/Catalina from admin-webapps to main package
    (otherwise we end up requiring tomcat5-admin-webapps for struts-webapps)


author: Kaj J. Niemi <kajtzu@fi.basen.net> - 0:5.0.16-2jpp
changelog:
  - Fix conflict with tomcat4 catalina-ant.jar in %_javadir by renaming it
    catalina-ant5.jar for now.


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.16-0.9.1
changelog:
  - Struts should be 1.1 or later according to the release notes
  - The /admin webapp works now as well
  - manager.xml needs to be group writeable, otherwise tomcat complains


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.16-0.6
changelog:
  - Require xerces-j2 instead of just jaxp_parser_impl
  - Require jpackage commons-logging instead of internal version


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.16-0.beta.4
changelog:
  - Place jspapi, jmxri, commons-el in common/lib as mentioned in the
    upstream RELEASE-NOTES.txt. This makes jsps actually work.


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.16-0.beta.3
changelog:
  - Separated jakarta-commons-el from tomcat
  - Require servletapi5 and jakata-commons-el
  - Added Patch #4 (tomcat5-5.0.16-cluster-pathelement.patch) which fixes
    build failure when servlet-api is renamed something else than the default
  - Added Patch #5 (tomcat5-5.0.16-skip-build-on-install.patch) which corrects
    servletapi/jspapi related build snafu on install. They're already built so
    it's OK to skip.


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:5.0.16-0.beta.1
changelog:
  - 5.0.16
  - jakarta-commons-el included here instead of somewhere else for now,
    packaging unfinished
  - Patch #3 removes dependency to jsvc.tar.gz which doesn't seem to be anywhere


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-36.el5_5.4
changelog:
  - add candidate patch to correct KDC null pointer dereference which
    could be triggered by malformed client requests (CVE-2010-1321, #583703)


author: Peter Vrabec <pvrabec@redhat.com> - 2.0.8-3
changelog:
  - fix Requires(postun), postun -> preun
  - compile with $RPM_OPT_FLAGS
  - remove Requires(hint) dirmngr, not available in RHEL
  - remove kde-filesystem requires, not available in RHEL


author: Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.5-2
changelog:
  - gnupg-2.0.5
  - gpg-agent not restarted after kde session crash/killed (#196327)
  - BR: libassuan-devel > 1.0.2, libksba-devel > 1.0.2


author: Rex Dieter <rexdieter[AT]users.sf.net> 1.9.19-8
changelog:
  - include gpg-agent-(startup|shutdown) scripts (#136533)
  - BR: libksba-devel >= 1.9.12 
  - %check: be permissive about failures (for now)


author: Ville Skyttä <ville.skytta at iki.fi> - 1.9.17-1
changelog:
  - 1.9.17, signal info patch applied upstream (#162264).
  - Patch to fix lvalue build error with gcc4 (upstream #485).
  - Patch scdaemon and pcsc-wrapper to load the versioned (non-devel)
    pcsc-lite lib by default.


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 1.9.16-1
changelog:
  - Merge changes from Rex's 1.9.16-1 (Thu Apr 21):
  -   opensc support unconditional
  -   remove hard-coded .gz from %post/%postun
  -   add %check section
  -   add pth patch
  - Put back patch modified from 1.9.15-4 to make tests verbose
    and change signal.c to describe received signals better.


author: David Malcolm <dmalcolm@redhat.com> - 2.4.3-27.el5_5.1
changelog:
  - Backport fix for leaking filedescriptors in subprocess error-handling path
  from Python 2.6
  - Resolves: rhbz#609017
  - Backport usage of "poll" within the subprocess module to 2.4.3
  - Resolves: rhbz#609020


author: James Antill <james.antill@redhat.com> - 2.4.3-27.el5
changelog:
  - Add workaround for subprocess import with threads
  - Resolves: 499095
  - Resolves: rhbz#499097
  - Resolves: rhbz#498979


author: James Antill <james.antill@redhat.com> - 2.4.3-24.el5_3.4
changelog:
  - Fix all of the low priority security bugs:
  - Resolves: 486351
  - Multiple integer overflows in python core
  - Resolves: 455008
  - PyString_FromStringAndSize does not check for negative size values
  - Resolves: 443810
  - Multiple integer overflows discovered by Google
  - Resolves: 455013
  - Multiple buffer overflows in unicode processing
  - Resolves: 454990
  - Potential integer underflow and overflow in the PyOS_vsnprintf C API function
  - Resolves: 455018
  - imageop module multiple integer overflows
  - Resolves: 469656
  - stringobject, unicodeobject integer overflows
  - Resolves: 470915
  - integer signedness error in the zlib extension module
  - Resolves: 442005
  - off-by-one locale.strxfrm() (possible memory disclosure)
  - Resolves: 235093
  - imageop module heap corruption
  - Resolves: 295971


author: James Antill <james.antill@redhat.com> - 2.4.3-24
changelog:
  - Remove unapproved socket constants and xmlrpclib fixes.
  - Resolves: rhbz#444088
  - Resolves: rhbz#460694


author: James Antill <james.antill@redhat.com> - 2.4.3-23
changelog:
  - Fix gettext problem
  - Resolves: rhbz#444088
  - Add socketmodule constants (bug #436560)
  - Fix xmlrpclib marchal problem (python bug #1739842)
  - Fix fd leak in urllib2
  - Resolves: rhbz#460694


author: Mihai Ibanescu <misa@redhat.com> - 2.4.3-15
changelog:
  - Fixed bug #201434 (distutils.sysconfig is confused by the change to make
    python-devel multilib friendly)


author: Mihai Ibanescu <misa@redhat.com> - 2.4.3-6
changelog:
  - Fixed bug #192592 (too aggressive assertion fails) - SF#1257960
  - Fixed bug #167468 (Doc/tools not included) - added in the python-tools package


author: Peter Jones <pjones@redhat.com> 2.4.1-12
changelog:
  - Fixed bug #169159 (check for argc>0 and argv[0] == NULL, not just
      argv[0][0]='\0')
    Reworked the patch from -8 a bit more.


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-10
changelog:
  - Fixed bug #169159 (don't let python core dump if no arguments are passed in)
    Reworked the patch from -8 a bit more.


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-7
changelog:
  - Fixed bug #169046 (realpath is unsafe); thanks to 
    Peter Jones <pjones@redhat.com> and Arjan van de Ven <arjanv@redhat.com> for
    diagnosing and the patch.


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-2
changelog:
  - Fixed bug #143667 (python should own /usr/lib/python* on 64-bit systems, for
    noarch packages)
  - Fixed bug #143419 (BuildRequires db4 is not versioned)


author: Mihai Ibanescu <misa@redhat.com> 2.4-6
changelog:
  - building the docs from a different source rpm, to decouple bootstrapping
    python from having tetex installed


author: Jeff Johnson <jbj@jbj.org> 2.4-2
changelog:
  - db-4.3.21 returns DB_BUFFER_SMALL rather than ENOMEM (#141994).
  - add Provide: python(abi) = 2.4
  - include msgfmt/pygettext *.pyc and *.pyo from brp-python-bytecompile.


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-10
changelog:
  - Fixed bug #77418 (Demo dir not packaged)
  - More tweaking on #19347 (Moved Tools/ under /usr/lib/python2.3/Tools)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-8
changelog:
  - Fixed bug #129769: Makefile in new python conflicts with older version found
    in old python-devel
  - Reorganized the spec file to get rid of the aspython2 define; __python_ver
    is more powerful.


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-7
changelog:
  - Including html documentation for non-i386 arches
  - Fixed #125362 (python-doc html files have japanese character encoding)
  - Fixed #128923 (missing dependency between python and python-devel)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-6
changelog:
  - Fixed #128030 (help() not printing anything)
  - Fixed #125472 (distutils.sysconfig.get_python_lib() not returning the right
    path on 64-bit systems)
  - Fixed #127357 (building python as a shared library)
  - Fixed  #19347 (including the contents of Tools/scripts/ in python-tools)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-3
changelog:
  - Added an optik.py that provides the same interface from optparse for
    backward compatibility; obsoleting python-optik


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-1
changelog:
  - Updated to 2.3.4-1 with Robert Scheck's help (bug #124764)
  - Added BuildRequires: tix-devel (bug #124918)


author: Mihai Ibanescu <misa@redhat.com> 2.3.3-6
changelog:
  - Correct fix for #122304 from upstream:
    http://sourceforge.net/tracker/?func=detail&atid=105470&aid=931848&group_id=5470


author: Mihai Ibanescu <misa@redhat.com> 2.3.3-4
changelog:
  - Fix for bug #122304 : splitting the domain name fails on 64-bit arches
  - Fix for bug #120879 : including Makefile into the main package

  - Requires XFree86-devel instead of -libs (see bug #118442)


author: Mihai Ibanescu <misa@redhat.com> 2.3-0.2
changelog:
  - Building python 2.3
  - Added more BuildRequires
  - Updated the startup files for modulator and pynche; idle installs its own
    now.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-25
changelog:
  - Fixed bug #84886: pydoc dies when run w/o arguments
  - Fixed bug #84205: add python shm module back (used to be shipped with 1.5.2)
  - Fixed bug #84966: path in byte-compiled code still wrong


author: Jeremy Katz <katzj@redhat.com> 2.2.2-23
changelog:
  - ftp uri's should be able to specify being rooted at the root instead of 
    where you login via ftp (#84692)


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-22
changelog:
  - Using newer Japanese codecs (1.4.9). Thanks to 
    Peter Bowen <pzb@datastacks.com> for pointing this out.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-13
changelog:
  - Attempt to look both in /usr/lib64 and /usr/lib/python2.2/site-packages/:
    some work on python-2.2.2-lib64.patch


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-11.7.3
changelog:
  - Fixed bug #82544: Errata removes most tools
  - Fixed bug #82435: Python 2.2.2 errata breaks redhat-config-users
  - Removed .lib64 and - files that get installed after we fix the multilib
    .py files.


author: Jeremy Katz <katzj@redhat.com> 2.2.2-8
changelog:
  - urllib2 didn't support non-anonymous ftp.  add support based on how 
    urllib did it (#80676, #78168)


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-7
changelog:
  - Fix bug #79647 (Rebuild of SRPM fails if python isn't installed)
  - Added a bunch of missing BuildRequires found while fixing the
    above-mentioned bug


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.7.3
  - Recompiled for 7.3 (to fix the -lcrypt bug)
  - Fix for the spurious error message at the end of the build (build-requires
    gets confused by executable files starting with """"): make the tests
    non-executable.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-5
  - Fixed configuration patch to add -lcrypt when compiling cryptmodule.c

  2.2.2-4
  - Spec file change from Matt Wilson <msw@redhat.com> to disable linking 
    with the C++ compiler.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.*
  - Merged patch from Karsten Hopp <karsten@redhat.de> from 2.2.1-17hammer to
    use %{_libdir}
  - Added XFree86-libs as BuildRequires (because of tkinter)
  - Fixed duplicate listing of plat-linux2
  - Fixed exclusion of lib-dynload/japanese
  - Added lib64 patch for the japanese codecs
  - Use setup magic instead of using tar directly on JapaneseCodecs


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-2
  - Fix #76912 (python-tools contains idle, which uses tkinter, but there is no
    requirement of tkinter from python-tools).
  - Fix #74013 (rpm is missing the /usr/lib/python2.2/test directory)


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - builds as python2 require a different libdb
  - changed the buildroot name of python to match python2 builds


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-16
changelog:
  - the same, but in builddirs - this will remove them from the 
    docs package, which doesn't look in the buildroot for files.


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-8
changelog:
  - Make files in /usr/bin install side by side with python 1.5 when
  - Drop explicit requirement of db4
    built as python2


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-5
changelog:
  - disable ndbm support, which is db2 in disguise (really interesting things
    can happen when you mix db2 and db4 in a single application)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.11c1
changelog:
  - 2.2 RC 1
  - Don't include the _tkinter module in the main package - it's 
    already in the tkiter packace
  - Turn off the mpzmodule, something broke in the buildroot


author: Matt Wilson <msw@redhat.com> 2.2-0.9b2
changelog:
  - changed DESTDIR to point to / so that distutils will install dynload
    modules properly in the installroot


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.4a4
changelog:
  - 2.2a4
  - Enable UCS4 support
  - Enable IPv6
  - Provide distutils
  - Include msgfmt.py and pygettext.py


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix the "requires" clause, it lacked a space causing problems
  - use %{_tmppath}
  - don't define name, version etc
  - add the available patches from the Python home page


author: Matt Wilson <msw@redhat.com>
changelog:
  - modify all files to use "python2.0" as the intrepter
  - don't build the Expat bindings
  - build against db1


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - updated for 2.0c1
  - build audioop, imageop, and rgbimg extension modules
  - include xml.parsers subpackage
  - add test.xml.out to files list


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - Version 2 of 2.0b1
  - Make the package relocatable.  Thanks to Suchandra Thapa.
  - Exclude Tkinter from main RPM.  If it is in a separate RPM, it is
    easier to track Tk releases.


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-105.el5_5.4
changelog:
  - Add HLT instruction emulation to VMXAssist (rhbz 593230)
  - Support the assignment of the VF of Intel 82599 10GbE Controller (rhbz 599018)
  - Use PCIe FLR for VF of Intel 82599 10GbE Controller (rhbz 599018)


author: Ray Strode <rstrode@redhat.com> - 2.16.0-14.el5
changelog:
  - prefer smart card drivers found in system secmod db over the
    hardcoded /usr/lib/pkcs11/libcoolkeypk11.so


author: Ray Strode <rstrode@redhat.com> - 2.16.0-12.el5
changelog:
  - have security token monitor helper process kill itself when 
    the communication pipe to the main process goes away (bug
    210677).


author: Ray Strode <rstrode@redhat.com> - 2.16.0-11.el5
changelog:
  - report token events from helper process using token name instead
    of slot id and slot series number, since slot id and slot series
    number are relative to each process (bug 208018)


author: Ray Strode <rstrode@redhat.com> - 2.16.0-9.el5
changelog:
  - handle PAM messages in a separate thread so that when a pam
    module blocks, the cancel button still works (bug 206322)
  - set cursor to busy while waiting on pam module (bug 202276)
  - hide prompt label/entry/unlock button until pam asks the
    user for input (bug 202276)
  - dont assume first pam message will be "Password:" 
    (bug 201858, 202278)


author: Ray Strode <rstrode@redhat.com> - 2.15.4-6
changelog:
  - don't listen for smart card events unless session was
    initiated after smart card authentication.
  - update lock dialog UI in between individual pam messages


author: Ray Strode <rstrode@redhat.com> - 2.15.4-3
changelog:
  - only lock screen if screen locking is enabled and the token
    pulled out is a login token (requires uncommited changes to 
    pam_pkcs11).


author: Ray Strode <rstrode@redhat.com> - 2.13.5-4
changelog:
  - throttle cpu usage in floaters screensaver to allow things
    like background compiles to be faster (bug 178496).


author: Ray Strode <rstrode@redhat.com> - 0.0.23-1
changelog:
  - Update to 0.0.23
  - remove floaters screensaver engine patch (it's upstreamed)
  - keep fedora branded parts


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.16
changelog:
  - 570893 Fix bnx2x uip panic due to the packet index in the VLAN field of the
  BD does not match the packet index expected by the firmware when the index crosses a BD page.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.13
changelog:
  - 517380 Update Broadcom iSCSI userspace components.
  - 504666 When using iscsi ifaces with different initiator names only the default name is used for discovery.
  - 514926 iSCSI does not reconnect after ifdown and ifup.
  - 511271 Do not run chkconfig on net scripts on startup.
  - 531748 Fix typo in iscsiadm session print out where REOPEN was mispelled
  as REPOEN.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.11
changelog:
  - 514926 Sync brcm uio to 0.4.8 to fix ifdown reconnection handling
  - 520508 Fix login/connect timeout due to MAC addr mishandling.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.8
changelog:
  - 508782 fix iscsid/iscsistart segfault due to bad conn context cast
  - Fix bnx2i login when iface uses only the hwaddress.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.7
changelog:
  - 505958 load bnx2i and cxgb3i drivers
  - 481807 Fix ownership of /etc/iscsi dir
  - Fix leak in iscsid when setting iscsi wq thread nice/priority.
  - 442418 Add Broadcom bnx2i userspace support.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.2
changelog:
  - 249049 create debug rpms by removing -s from the install command
  - 499565 Install libfwparam.a and headers for anaconda


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.18
changelog:
  - 476752 Must install list.h (install as iscsi_list.h) because fw_context.h
  is bringing it in. Also revert ibft name changes because anaconda is using
  them instead of the fw_context.h functions.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.17
changelog:
  - 472562 (additional fixup to patch) only use logout time2wait for
  relogins when response code is 2 or 3.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.9
changelog:
  - Related to 445721 - Install fw helpers as lib so first stage of
  installer can easily use it. This is a temp lib, and is not a stable
  interface. For now, just for install, we are adding this library.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.8
changelog:
  - Related to 445721 - when using intel nics some network values are
  not set, so iscsiadm would fail instead of just printing what we got.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.5
changelog:
  - 438092 Print ibft net info (waiting on ppc support from IBM).
  - 437195 Use CHAP values from sysfs during resync, incase they were from ibft.
  - 437195 Update README to reflect that users should set node.startup


author: Mike Christie <mchristie@redhat.com> - 6.2.0.865-0.7
changelog:
  - 250140 Document how to set timers when using multipath or iscsi root.
  - 249053 Document iscsid and iscsiadm debug argument.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.865-0.2
changelog:
  - 244987 old tools used to make the root db dir for apps and anaconda relied
  on that. This is a regression from 227554.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.865-0.1
changelog:
  - Bring in fixes that got merged in git but did not make the 865 release and
  code that partners need to test due to lack of hw limitations.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.865-0.0
changelog:
  - Rebase to upstream to bring in bug and security fixes.
  - 243727 CVE-2007-3099 CVE-2007-3100
  - 227554 Support only passing in a target with iscsiadm commands.
  - 227698 ipv6 fixups


author: Mike Christie <mchristie@redhat.com> - 6.2.0.742-0.6
changelog:
  -  Patch for 218841 was not getting applied because 'BZ' in the patch
  caused rpm to try and bunzip it instead of apply it.
  - 227815 update docs to make it more clear what is node mode.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.742-0.5
changelog:
  - BZ 218791 - We get a network hang when the firewall is started
  - and to allow iscsi root boot to work we start iscsid early.
  - This breaks up iscsi.init into iscsidevs.init (start iscsi targets)
  - and iscsid.init (start iscsi daemon). Users should be using
  - iscsiadm for management instead of the rc script, but we add some compat
  - code to make it a little easier.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.730-0.0
changelog:
  - BZ 212263 - load iser
  - Rebase to upstream open-iscsi-2.0-730 to bring in fixes we were
  - managing but are now upstream and bring in fixes I had done upstream
  - for other partner/distro testing.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.695-0.7
changelog:
  - BZ 210470 update man pages for file moves
  - Fix targetname strcmp
  - read default config before doing discovery


author: Mike Christie <mchristie@redhat.com> - 6.2.0.695-0.6
changelog:
  - BZ 209523 make sure the network is not going to get shutdown so
  iscsi devices (include iscsi root and dm/md over iscsi) get syncd.
  - BZ 209415 have package create iscsi var dirs


author: Mike Christie <mchristie@redhat.com> - 6.2.0.695-0.2
changelog:
  - BZ 208050 - change default initiator name to reflect redhat
  - Move pid from /etc/iscsi to /var/run/iscsid.pid


author: Mike Christie <mchristie@redhat.com> - 6.2.0.695-0.1
changelog:
  - Add compat with FC kernel so iscsid will pass startup checks and run.
  - Fix bug when using hw iscsi and software iscsi and iscsid is restarted.
  - Fix session matching bug when hw and software iscsi is both running


author: Mike Christie <mchristie@redhat.com> - 6.1.1.685
changelog:
  - Rebase to upstream to bring in many bug fixes and rm db.
  - iscsi uses /etc/iscsi instead of just etc now


author: Mike Christie <mchristie@redhat.com> - 6.1.1.645
changelog:
  - update to upstream 1.1.645
  - Note DB and interface changed so you must update kernel, tools and DB


author: Mike Christie <mchristi@redhat.com> - 6.0.5.595-2
changelog:
  - add PatM's statics.c file. This is needed for boot since 
    there is no getpwuid static available at that time.


author: Jeremy Katz <katzj@redhat.com> - 6.0.5.595-1
changelog:
  - ensure that we respect %{optflags}
  - cleaned up initscript to make use of standard functions, return right 
    values and start by default
  - build iscsistart as a static binary for use in initrds


author: Mike Christie <mchristi@redhat.com>
changelog:
  - rebase package to svn rev 595 to fix several bugs
    NOTE!!!!!!!! This is not compatible with the older open-iscsi modules
    and tools. You must upgrade.


author: Mike Christie <mchristi@redhat.com>
changelog:
  - update package to open-iscsi svn rev 571
    NOTE!!!!!!!! This is not compatible with the older open-iscsi modules
    and tools. You must upgrade.


author: Mike Christie <mchristi@redhat.com>
changelog:
  - From Andy Henson <andy@zexia.co.uk>:
    Autogenerate /etc/initiatorname.iscsi during install if not already present
  - Remove code to autogenerate /etc/initiatorname.iscsi from initscript
  - From dan.y.roche@gmail.com:
    add touch and rm lock code
  - update README
  - update default iscsid.conf. "cnx" was not supported. The correct
    id was "conn".


author: Mike Christie <mchristi@redhat.com>
changelog:
  - rebase package to bring in ppc64 unsigned long vs unsigned
    long long fix and iscsadm return value fix. Also drop rdma patch
    becuase it is now upstream.


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    %{evolution_connector_prefix} (/usr/lib64/evolution-openldap)
  - provide openldap-evolution-devel = %{version}-%{release} in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/lib64 instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.7
changelog:
  - fix CVE-2010-4180 - completely disable code for
    SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG (#659462)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.5
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.4
changelog:
  - do not disable SSLv2 in the renegotiation patch - SSLv2 does
    not support renegotiation
  - allow unsafe renegotiation on clients with SSL_OP_LEGACY_SERVER_CONNECT


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.2
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.1
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-8
changelog:
  - support multiple CRLs with same subject in a store (#457134)
  - fix CVE-2009-0590 - reject incorrectly encoded ASN.1 strings (#492304)
  - seed FIPS rng directly from kernel random device
  - do not require fipscheck to build the package (#475798)
  - call pairwise key tests in FIPS mode only (#479817)
  - do not crash when parsing bad mime data (#472440)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-5
changelog:
  - implement the integrity checking inside libcrypto so OpenSSL
    can be used in FIPS mode by the fipscheck library


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-2
changelog:
  - more changes for FIPS validation (#444800)
  - correctly initialize default CA paths (#450987)
  - allow disabling zlib support through environment (#442624)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-10
changelog:
  - compile with -march=z900 on s390 for performance improvements (#250818)
  - make ssl session ID matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-9
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#250581)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309881)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321221)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to 
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Jan F. Chadima <jchadima@redhat.com> - 4.3p2-38
changelog:
  - set better buffer length in latency patch (#508914)
  - close error file descriptor before running external subsystem (#530358)
  - prevent initscript from hanging when generates the keys (#531738)


author: Jan F. Chadima <jchadima@redhat.com> - 4.3p2-33
changelog:
  - fix scp hangup on exit (#454812)
  - call integrity checks only on binaries which are part of the OpenSSH FIPS
    modules


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-32
changelog:
  - log if FIPS mode is initialized (#492363)
  - check the integrity of the binaries in the FIPS mode (#467268)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-28
changelog:
  - use OpenSSL RNG directly (needed for FIPS-140-2 compliance)
  - when in FIPS mode do not try to use algorithms which are not allowed (#447936)
  - improve transfer speed on high latency connections (#227722)
  - more correct 'service sshd status' reporting (#430877)
  - add logging support to the sftp server (#452619)
  - small scp manual page improvement (#433381)


author: Dennis Gregorovic <dgregor@redhat.com> - 4.3p2-26.el5_2.1
changelog:
  - CVE-2007-4752 - Prevent ssh(1) from using a trusted X11 cookie if creation of an
    untrusted cookie fails (#280361)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-21
changelog:
  - fix an information leak in Kerberos password authentication (CVE-2006-5052)
    (#234638)
  - correctly setup context when empty level requested (#234951)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-13
changelog:
  - improved pam_session patch so it doesn't regress, the patch is necessary
    for the pam_session_close to be called correctly as uid 0 (#167488)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10.1
changelog:
  - CVE-2006-5794 - properly detect failed key verify in monitor (#214642)
  - kill all ssh sessions when stop is called in halt or reboot runlevel (#213008)
  - remove -TERM option from killproc so we don't race on sshd restart (#213490)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10
changelog:
  - improve gssapi-no-spnego patch (#208102)
  - CVE-2006-4924 - prevent DoS on deattack detector (#207957)
  - CVE-2006-5051 - don't call cleanups from signal handler (#208459)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-9
changelog:
  - don't report duplicate syslog messages, use correct local time (#189158)
  - don't allow spnego as gssapi mechanism (from upstream)
  - fixed memleaks found by Coverity (from upstream)
  - allow ip options except source routing (#202856) (patch by HP)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-8
changelog:
  - drop the pam-session patch from the previous build (#201341)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
changelog:
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
changelog:
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-3
changelog:
  - enable the subprocess in chroot to send messages to system log
  - sshd should prevent login if audit call fails


author: Tomas Mraz <tmraz@redhat.com> - 4.3p1-2
changelog:
  - fixed another place where syslog was called in signal handler
  - pass locale environment variables to server, accept them there (#179851)


author: Tomas Mraz <tmraz@redhat.com> - 4.2p1-9
changelog:
  - drop x11-ssh-askpass from the package
  - drop old build_6x ifs from spec file
  - improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
    characters to person looking at the display
  - less hackish fix for the __USE_GNU problem


author: Nalin Dahyabhai <nalin@redhat.com> - 4.2p1-8
changelog:
  - work around missing gccmakedep by wrapping makedepend in a local script
  - remove now-obsolete build dependency on "xauth"


author: Warren Togami <wtogami@redhat.com> - 4.2p1-7
changelog:
  - xorg-x11-devel -> libXt-devel
  - rebuild for new xauth location so X forwarding works
  - buildreq audit-libs-devel
  - buildreq automake for aclocal
  - buildreq imake for xmkmf
  -  -D_GNU_SOURCE in flags in order to get it to build
     Ugly hack to workaround openssh defining __USE_GNU which is
     not allowed and causes problems according to Ulrich Drepper
     fix this the correct way after FC5test1


author: Tomas Mraz <tmraz@redhat.com> 4.2p1-2
changelog:
  - use include instead of pam_stack in pam config
  - use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
  - upstream patch for displaying authentication errors


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-5
changelog:
  - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
  - install ssh-copy-id from contrib (#88707)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-4
changelog:
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - don't use X11 port which can't be bound on all IP families (#163732)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-3
changelog:
  - fix small regression caused by the nologin patch (#161956)
  - fix race in getpeername error checking (mindrot #1054)


author: Tomas Mraz <tmraz@redhat.com> 4.0p1-2
changelog:
  - fixed Local/RemoteForward in ssh_config.5 manpage
  - fix fatal when Local/RemoteForward is used and scp run (#153258)
  - don't leak user validity when using krb5 authentication


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-11
changelog:
  - don't call syslog in signal handler
  - allow password authentication when copying from remote
    to remote machine (#103364)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-10
changelog:
  - enable trusted forwarding by default if X11 forwarding is 
    required by user (#137685 and duplicates)
  - disable protocol 1 support by default in sshd server config (#88329)
  - keep the gnome-askpass dialog above others (#69131)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - change permissions on pam.d/sshd to 0644 (#64697)
  - patch initscript so it doesn't kill opened sessions if
    the sshd daemon isn't running anymore (#67624)


author: Nalin Dahyabhai <nalin@redhat.com> 3.9p1-8
changelog:
  - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
    to enable display of a vendor patch level during version exchange (#120285)
  - configure with --disable-strip to build useful debuginfo subpackages


author: Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
changelog:
  - request gssapi-with-mic by default but not delegation (flag day for anyone
    who used previous gssapi patches)
  - no longer request x11 forwarding by default


author: Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
changelog:
  * Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
  - Built RHLE3 U2 update package.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - additional fix for apparently-never-happens double-free in buffer_free()
  - extend fix for #103998 to cover SSH1


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-11
changelog:
  - apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
  - skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-6
changelog:
  - modify patch which clears the supplemental group list at startup to only
    complain if setgroups() fails if sshd has euid == 0
  - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-6
changelog:
  - move scp to the -clients subpackage, because it directly depends on ssh
    which is also in -clients (#84329)


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-2
changelog:
  - patch PAM configuration to use relative path names for the modules, allowing
    us to not worry about which arch the modules are built for on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-2
changelog:
  - rework the close-on-exit docs
  - include configuration file man pages
  - make use of nologin as the privsep shell optional


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-1
changelog:
  - update to 3.3p1
  - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
  - disable gtk2 askpass
  - require pam-devel by filename rather than by package for erratum
  - include patch from Solar Designer to work around anonymous mmap failures


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-4
changelog:
  - drop buildreq on db1-devel
  - require pam-devel by package name
  - require autoconf instead of autoconf253 again


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-3
changelog:
  - pull patch from CVS to avoid printing error messages when some of the
    default keys aren't available when running ssh-add
  - refresh to current revisions of Simon's patches


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2gss
changelog:
  - reintroduce Simon's gssapi patches
  - add buildprereq for autoconf253, which is needed to regenerate configure
    after applying the gssapi patches
  - refresh to the latest version of Markus's patch to build properly with
    older versions of OpenSSL


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
changelog:
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x


author: Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
changelog:
  - update to SNAP-20020220 for testing purposes (you've been warned, if there's
    anything to be warned about, gss patches won't apply, I don't mind)


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
changelog:
  - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support


author: Nalin Dahyabhai <nalin@redhat.com> 3.0p1-1
changelog:
  - merge some of Damien Miller <djm@mindrot.org> changes from the upstream
    3.0p1 spec file and init script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.0p1
  - update to x11-ssh-askpass 1.2.4.1
  - change build dependency on a file from pam-devel to the pam-devel package
  - replace primes with moduli


author: Nalin Dahyabhai <nalin@redhat.com> 2.9p2-7
changelog:
  - fix scp's server's reporting of file sizes, and build with the proper
    preprocessor define to get large-file capable open(), stat(), etc.
    (sftp has been doing this correctly all along) (#51827)
  - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
  - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
  - mark profile.d scriptlets as config files (#42337)
  - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
  - change a couple of log() statements to debug() statements (#50751)
  - pull cvs patch to add -t flag to sshd (#28611)
  - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull cvs patch to add session initialization to no-pty sessions
  - pull cvs patch to not cut off challengeresponse auth needlessly
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed (#49263)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change Copyright: BSD to License: BSD
  - add Markus Friedl's unverified patch for the cookie file deletion problem
    so that we can verify it
  - drop patch to check if xauth is present (was folded into cookie patch)
  - don't apply gssapi patches for the errata candidate
  - clear supplemental groups list at startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix an error parsing the new default sshd_config
  - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
    dealing with comments right


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
    to be removed before the next beta cycle because it's a big departure
    from the upstream version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish marking strings in the init script for translation
  - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
    at startup (change merged from openssh.com init script, originally by
    Pekka Savola)
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove explicit openssl requirement, fixes builddistro issue
  - make initscript stop() function wait until sshd really dead to avoid 
    races in condrestart


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - mention that challengereponse supports PAM, so disabling password doesn't
    limit users to pubkey and rsa auth (#34378)
  - bypass the daemon() function in the init script and call initlog directly,
    because daemon() won't start a daemon it detects is already running (like
    open connections)
  - require the version of openssl we had when we were built


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make do_pam_setcred() smart enough to know when to establish creds and
    when to reinitialize them
  - add in a couple of other fixes from Damien for inclusion in the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p2
  - call setcred() again after initgroups, because the "creds" could actually
    be group memberships


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
  - don't enable challenge-response by default until we find a way to not
    have too many userauth requests (we may make up to six pubkey and up to
    three password attempts as it is)
  - remove build dependency on rsh to match openssh.com's packages more closely


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Revert the patch to move pam_open_session.
  - Init script and spec file changes from Pekka Savola. (#28750)
  - Patch sftp to recognize '-o protocol' arguments. (#29540)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Chuck the closing patch.
  - Add a trigger to add host keys for protocol 2 to the config file, now that
    configuration file syntax requires us to specify it with HostKey if we
    specify any other HostKey values, which we do.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Redo patch to move pam_open_session after the server setuid()s to the user.
  - Rework the nopam patch to use be picked up by autoconf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.1p1.
  - Add init script mods from Pekka Savola.
  - Tweak the init script to match the CVS contrib script more closely.
  - Redo patch to ssh-add to try to adding both identity and id_dsa to also try
    adding id_rsa.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.0p1.
  - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
  - Resync with parts of Damien Miller's openssh.spec from CVS, including
    update of x11 askpass to 1.2.0.
  - Only require openssl (don't prereq) because we generate keys in the init
    script now.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't open a PAM session until we've forked and become the user (#25690).
  - Apply Andrew Bartlett's patch for letting pam_authenticate() know which
    host the user is attempting a login from.
  - Resync with parts of Damien Miller's openssh.spec from CVS.
  - Don't expose KbdInt responses in debug messages (from CVS).
  - Detect and handle errors in rsa_{public,private}_decrypt (from CVS).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - More gettextizing.
  - Close all files after going into daemon mode (needs more testing).
  - Extract patch from CVS to handle auth banners (in the client).
  - Extract patch from CVS to handle compat weirdness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
    succeeded, to allow public-key authentication after a failure with "none"
    authentication.  (#21268)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to x11-askpass 1.1.1. (#21301)
  - Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge multiple PAM text messages into subsequent prompts when possible when
    doing keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Disable the built-in MD5 password support.  We're using PAM.
  - Take a crack at doing keyboard-interactive authentication with PAM, and
    enable use of it in the default client configuration so that the client
    will try it when the server disallows password authentication.
  - Build with debugging flags.  Build root policies strip all binaries anyway.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add the primes file from the latest snapshot to the main package (#20884).
  - Add the dev package to the prereq list (#19984).
  - Remove the default path and mimic login's behavior in the server itself.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Resync with conditional options in Damien Miller's .spec file for an errata.
  - Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to OpenSSH 2.3.0p1.
  - Update to x11-askpass 1.1.0.
  - Enable keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
    build PAM authentication in.
  - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
  - Clean out no-longer-used patches.
  - Patch ssh-add to try to add both identity and id_dsa, and to error only
    when neither exists.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update x11-askpass to 1.0.2. (#17835)
  - Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
    always find them in the right place. (#17909)
  - Set the default path to be the same as the one supplied by /bin/login, but
    add /usr/X11R6/bin. (#17909)
  - Try to handle obsoletion of ssh-server more cleanly.  Package names
    are different, but init script name isn't. (#17865)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 20000823 snapshot.
  - Change subpackage requirements from %{version} to %{version}-%{release}
  - Back out the pipe patch.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 2.1.1p4, which includes fixes for config file parsing problems.
  - Move the init script back.
  - Add Damien's quick fix for wackiness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Move condrestart to server postun.
  - Move key generation to init script.
  - Actually use the right patch for moving the key generation to the init script.
  - Clean up the init script a bit.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Patch to build with neither RSA nor RSAref.
  - Miscellaneous FHS-compliance tweaks.
  - Fix for possibly-compressed man pages.


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-36.el5_5.6
changelog:
  - incorporate candidate patch for checksum acceptance issues from
    MITKRB5-SA-2010-007 (CVE-2010-1323, #652307)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-36.el5_5.5
changelog:
  - ksu: perform PAM account and session management before dropping privileges
    to those of the target user (#602967, #615261)


author: David Knox <dknox@redhat.com> 0:5.5.23-0jpp.11
changelog:
  - Resolves: rhbz#623813 - NullPointerException on startup
  - Resolves: rhbz#623465 - Crash on startup using Catalina/localhost/context.xml
  - Still has startup issues (http404) on first request. The second request will
  - return http200


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-6.2
changelog:
  - fix insecure dropping of priviledges in pam_xauth
    and pam_mail - CVE-2010-3316 (#637898), CVE-2010-3435 (#641335)
  - fix insecure executing of scripts with user supplied environment
    variables in pam_namespace - CVE-2010-3853 (#643043)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-5
changelog:
  - add group audio to sound devices when no console user owns them (#244688)
  - resolve pam access origin entry only when it makes sense (#459057)
  - silence the strict-aliasing warnings (#462647)
  - pam_keyinit: save old uid so we can revert to it (#466411)
  - pam_filter: make it use pty subsystem (#473970)
  - add pam_faildelay module to be able to set the failure delay (#476217)
  - pam_tty_audit: fix double free when open_only option is used (#476833)
  - allow root to change users passwords when helper is needed (#476904)
  - make package's requires more correct (#497570)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-4
changelog:
  - add pam_tty_audit module (#244352)
  - pam_cracklib: additional optional checks for password quality (#438994)
  - pam_lastlog: display failed login attempts if requested (#438990)
  - pam_unix: do not check new passwords through cracklib (#448860)
  - pam_unix: clear PAM_AUTHTOK item if new password is bad (#443872)
  - comment in the limits.conf manpage that rss limit is ignored (#459624)
  - allow larger entries in pammodutil_get functions (#445355)
  - pam_tally: do not leak fds in tally_check (#457024)
  - pam_loginuid: use correct format when printing uid type (#460263)
  - pam_rhosts_auth: correct test for IP address (#461917)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.27
changelog:
  - support sha256 and sha512 password hashes (#427389)
  - fixed in operator of pam_succeed_if module (#295151)
  - fixed audit option of pam_tally and pam_tally2 (#328281)
  - do not free putenved pointer in pam_xauth (#402391)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.26
changelog:
  - removed realtime default limits (#240123) from the package as
    it caused regression on machines with nonexistent realtime group


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.25
changelog:
  - added and improved translations (#219124)
  - adjusted the default limits for realtime users (#240123)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.23
changelog:
  - pam_unix: truncated MD5 passwords in shadow shouldn't match (#219258)
  - pam_limits: add limits.d support (#232700)
  - pam_limits, pam_time, pam_access: add auditing of failed logins (#232993)
  - pam_namespace: expand $HOME even when appended with text (#237163)
    original patch by Ted X. Toth
  - add some default limits for users in realtime group (#240123)
  - CVE-2007-3102 - prevent audit log injection through user name (#243204)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.21
changelog:
  - pam_namespace: better document behavior on failure (#237249)
  - pam_unix: split out passwd change to a new helper binary (#236316)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.18
changelog:
  - pam_console: always decrement use count (#233581)
  - pam_namespace: fix parsing config file with unknown users (#234513)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.17
changelog:
  - pam_namespace: unmount poly dir for override users (#229689)
  - pam_namespace: use raw context for poly dir name (#227345)
  - pam_namespace: truncate long poly dir name (append hash) (#230120)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.14
changelog:
  - properly include /var/log/faillog and tallylog as ghosts
    and create them in post script (#209646)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.7
changelog:
  - No shortcut on Password: in ja locale (#218271)
  - Revert to old euid and not ruid when setting euid in pam_keyinit (#219486)
  - Fix no answer to select_context question (#213812)
  - Rename selinux-namespace patch to namespace-level


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.4
changelog:
  - move setgid before setuid in pam_keyinit (#212329)
  - make username check in pam_unix consistent with useradd (#212153)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.1
changelog:
  - preserve effective uid in namespace.init script (LSPP for newrole)
  - include /var/log/faillog and tallylog to filelist (#209646)
  - add ids to .xml docs so the generated html is always the same (#210569)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-2
changelog:
  - silence pam_succeed_if in default system-auth (#205067)
  - round the pam_timestamp_check sleep up to wake up at the start of the
    wallclock second (#205068)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-1
changelog:
  - upgrade to new upstream version, as there are mostly bugfixes except
    improved documentation
  - add support for session and password service for pam_access and
    pam_succeed_if
  - system-auth: skip session pam_unix for crond service


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-7
changelog:
  - revoke keyrings properly when pam_keyinit called as root (#201048)
  - pam_succeed_if should return PAM_USER_UNKNOWN when getpwnam fails (#197748)


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-6
changelog:
  - revoke keyrings properly when pam_keyinit called more than once (#201048)
    patch by David Howells


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-3
changelog:
  - don't report error in pam_selinux for nonexistent tty (#188722)
  - add pam_keyinit to the default system-auth file (#198623)


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-1
changelog:
  - updated to a new upstream release
  - added service as value to be matched and list matching to
    pam_succeed_if
  - namespace.init was missing from EXTRA_DIST


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-5
changelog:
  - updated pam_namespace with latest patch by Janak Desai
  - merged pam_namespace patches
  - added buildrequires libtool
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-3
changelog:
  - use md5 implementation from pam_unix in pam_namespace
  - pam_namespace should call setexeccon only when selinux is enabled


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-2
changelog:
  - pam_console_apply shouldn't access /var when called with -r (#191401)
  - actually apply the large-uid patch
  - don't build hmactest in pam_timestamp so openssl-devel is not required
  - add missing buildrequires (#191915)


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-1
changelog:
  - upgrade to new upstream version
  - make pam_console_apply not dependent on glib
  - support large uids in pam_tally, pam_tally2


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-5
changelog:
  - the namespace instance init script is now in /etc/security (#190148)
  - pam_namespace: added missing braces (#190026)
  - pam_tally(2): never call fclose twice on the same FILE (from upstream)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-4
changelog:
  - fixed console device class for irda (#189966)
  - make pam_console_apply fail gracefully when a class is missing


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-3
changelog:
  - added pam_namespace module written by Janak Desai (per-user /tmp
  support)
  - new pam-redhat modules version


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-2
changelog:
  - added try_first_pass option to pam_cracklib
  - use try_first_pass for pam_unix and pam_cracklib in
    system-auth (#182350)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-1
changelog:
  - new upstream version
  - updated db4 to 4.3.29
  - added module pam_tally2 with auditing support
  - added manual pages for system-auth and config-util (#179584)


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-2
changelog:
  - fix dangling symlinks in -devel (#175929)
  - link libaudit only where necessary
  - actually compile in audit support


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-1
changelog:
  - support netgroup matching in pam_succeed_if
  - upgrade to new release
  - drop pam_pwdb as it was obsolete long ago
  - we don't build static libraries anymore


author: Tomas Mraz <tmraz@redhat.com> 0.80-13
changelog:
  - fixed CAN-2005-2977 unix_chkpwd should skip user verification only if
    run as root (#168181)
  - link pam_loginuid to libaudit
  - support no tty in pam_access (#170467)
  - updated audit patch (by Steve Grubb)
  - the previous pam_selinux change was not applied properly
  - pam_xauth: look for the xauth binary in multiple directories (#171164)


author: Tomas Mraz <tmraz@redhat.com> 0.80-9
changelog:
  - don't include ps and pdf docs (#168823)
  - new common config file for configuration utilities
  - remove glib2 dependency (#166979)


author: Tomas Mraz <tmraz@redhat.com> 0.80-8
changelog:
  - process limit values other than RLIMIT_NICE correctly (#168790)
  - pam_unix: always honor nis flag on password change (by Aaron Hope)


author: Tomas Mraz <tmraz@redhat.com> 0.80-2
changelog:
  - fixed module tests so the pam doesn't require itself to build (#163502)
  - added buildprereq for building the documentation (#163503)
  - relaxed permissions of binaries (u+w)


author: Tomas Mraz <tmraz@redhat.com> 0.80-1
changelog:
  - upgrade to new upstream sources
  - removed obsolete patches
  - pam_selinux module shouldn't fail on broken configs unless
    policy is set to enforcing (Dan Walsh)


author: Tomas Mraz <tmraz@redhat.com> 0.79-10
changelog:
  - add the Requires dependency on audit-libs (#159885)
  - pam_loginuid shouldn't report error when /proc/self/loginuid
    is missing (#159974)


author: Tomas Mraz <tmraz@redhat.com> 0.79-9
changelog:
  - update the pam audit patch to support newest audit library,
    audit also pam_setcred calls (Steve Grubb)
  - don't use the audit_fd as global static variable
  - don't unset the XAUTHORITY when target user is root


author: Tomas Mraz <tmraz@redhat.com> 0.79-7
changelog:
  - pam_xauth: unset the XAUTHORITY variable on error, fix
    potential memory leaks
  - modify path to IDE floppy devices in console.perms (#155560)


author: Tomas Mraz <tmraz@redhat.com> 0.79-5
changelog:
  - added auditing patch by Steve Grubb
  - added cleanup patches for bugs found by Steve Grubb
  - don't clear the shadow option of pam_unix if nis option used


author: Tomas Mraz <tmraz@redhat.com> 0.79-3
changelog:
  - make pam_unix LSB 2.0 compliant even when SELinux enabled
  - #88127 - change both local and NIS passwords to keep them in sync,
    also fix a regression in passwd functionality on NIS master server


author: Tomas Mraz <tmraz@redhat.com> 0.78-9
changelog:
  - fix wrong logging in pam_console handlers
  - add executing ainit handler for alsa sound dmix
  - #147879, #112777 - change permissions for dri devices


author: Tomas Mraz <tmraz@redhat.com> 0.78-8
changelog:
  - remove ownership and permissions handling from pam_console call
    pam_console_apply as a handler instead


author: Tomas Mraz <tmraz@redhat.com> 0.78-6
changelog:
  - add functionality for running handler executables from pam_console
    when console lock was obtained/lost
  - removed patches merged to pam-redhat


author: Tomas Mraz <tmraz@redhat.com> 0.78-5
changelog:
  - echo why tests failed when rebuilding
  - fixed some warnings and errors in pam_console for gcc4 build
  - improved parsing pam_console config file


author: Tomas Mraz <tmraz@redhat.com> 0.78-1
changelog:
  - update to Linux-PAM-0.78
  - #140451 parse passwd entries correctly and test for failure
  - #137802 allow using pam_console for authentication


author: Tomas Mraz <tmraz@redhat.com> 0.77-66
changelog:
  - #77646 log failures when renaming the files when changing password
  - Log failure on missing /etc/security/opasswd when remember option is present


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - #87628 pam_timestamp remembers authorization after logout
  - #116956 fixed memory leaks in pam_stack


author: Tomas Mraz <tmraz@redhat.com> 0.77-63
changelog:
  - Fix checking of group Development/Debug syntax in pam_limits
  - Drop fencepost patch as it was already fixed 
    by upstream change from 0.75 to 0.77
  - Fix brokenshadow patch


author: Tomas Mraz <tmraz@redhat.com> 0.77-61
changelog:
  - #129328 pam_env shouldn't abort on missing /etc/environment
  - #126985 pam_stack should always copy the conversation function 
  - #127524 add /etc/security/opasswd to files


author: Tomas Mraz <tmraz@redhat.com> 0.77-56
changelog:
  - #75454 fixed locking when changing password
  - #127054 
  - #125653 removed unnecessary getgrouplist call
  - #124979 added quiet option to pam_succeed_if


author: Dan Walsh <dwalsh@redhat.com> 0.77-19.sel
changelog:
  - Change unix_chkpwd to handle unix_passwd and unix_acct
  - This eliminates the need for pam modules to have read/write access to /etc/shadow.


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-15
changelog:
  - don't install _pam_aconf.h -- apps don't use it, other PAM headers which
    are installed don't use it, and its contents may be different for arches
    on a multilib system
  - check for linkage problems in modules at %install-time (kill #107093 dead)
  - add buildprereq on flex (#101563)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_pwdb.so link with libnsl again so that it loads (#107093)
  - remove now-bogus buildprereq on db4-devel (we use a bundled copy for
    pam_userdb to avoid symbol collisions with other db libraries in apps)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_succeed_if: fix thinko in argument parsing which would walk past the
    end of the argument list


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-0
changelog:
  - update to 0.77 upstream release
    - pam_limits: limits now affect root as well
    - pam_nologin: returns PAM_IGNORE instead of PAM_SUCCESS unless "successok"
      is given as an argument
    - pam_userdb: correctly return PAM_AUTH_ERR instead of PAM_USER_UNKNOWN when
      invoked with the "key_only" argument and the database has an entry of the
      form "user-<wrongpassword>"
  - use a bundled libdb for pam_userdb.so because the system copy uses threads,
    and demand-loading a shared library which uses threads into an application
    which doesn't is a Very Bad Idea


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-49
changelog:
  - modify calls to getlogin() to check the directory of the current TTY before
    searching for an entry in the utmp/utmpx file (#98020, #98826, CAN-2003-0388)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-46
changelog:
  - pam_xauth: reintroduce ACL support, per the original white paper
  - pam_xauth: default root's export ACL to none instead of everyone


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-45
changelog:
  - create /lib/security, even if it isn't /%{_lib}/security, because we
    can't locate /lib/security/$ISA without it (noted by Arnd Bergmann)
  - clear out the duplicate docs directory created during %install


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-44
changelog:
  - fix syntax errors in pam_console's yacc parser which newer bison chokes on
  - forcibly set FAKEROOT at make install time


author: Elliot Lee <sopwith@redhat.com> 0.75-42
changelog:
  - Since cracklib-dicts location will not be correctly detected without 
    that package being installed, add buildreq for cracklib-dicts.
  - Add patch57: makes configure use $LIBNAME when searching for cracklib 
    dicts, and error out if not found.


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-40
changelog:
  - pam_timestamp_check: check that stdio descriptors are open before we're
    invoked
  - add missing chroot.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-36
changelog:
  - pam_timestamp: chown intermediate directories when creating them
  - pam_timestamp_check: add -d flag to poll


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-31
changelog:
  - libpam_misc: fix possible infinite loop in misc_conv (#62195)
  - pam_xauth: fix cases where DISPLAY is "localhost:screen" and the xauth
    key is actually stored using the system's hostname (#61524)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-20
changelog:
  - pam_stack: fix some memory leaks (reported by Fernando Trias)
  - pam_chroot: integrate Owl patch to report the more common causes of failures


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-19
changelog:
  - fix a bug in the getpwnam_r wrapper which sometimes resulted in false
    positives for non-existent users


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-16
changelog:
  - pam_xauth: always return PAM_SUCCESS or PAM_SESSION_ERR instead of PAM_IGNORE,
    matching the previous behavior (libpam treats PAM_IGNORE from a single module
    in a stack as a session error, leading to false error messages if we just
    return PAM_IGNORE for all cases)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-15
changelog:
  - reorder patches so that the reentrancy patch is applied last -- we never
    came to a consensus on how to guard against the bugs in calling applications
    which this sort of change addresses, and having them last allows for dropping
    in a better strategy for addressing this later on


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_rhosts: allow "+hostname" as a synonym for "hostname" to jive better
    with the hosts.equiv(5) man page
  - use the automake install-sh instead of the autoconf install-sh, which
    disappeared somewhere between 2.50 and now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_tally: don't try to read past the end of faillog -- it probably contains
    garbage, which if written into the file later on will confuse /usr/bin/faillog


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: don't just return if the user is root -- we'll want to set the
    priority (it could be negative to elevate root's sessions)
  - pam_issue: fix off-by-one error allocating space for the prompt string


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_mkhomedir: recurse into subdirectories properly
  - pam_mkhomedir: handle symlinks
  - pam_mkhomedir: skip over special items in the skeleton directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add cracklib as a buildprereq
  - pam_wheel: don't ignore out if the user is attempting to switch to a
    unprivileged user (this lets pam_wheel do its thing when users attempt
    to get to system accounts or accounts of other unprivileged users)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: close a possible DoS due to use of dotlock-style locking in
    world-writable directories by relocating the temporary file to the target
    user's home directory
  - general: include headers local to this tree using relative paths so that
    system headers for PAM won't be pulled in, in case include paths don't
    take care of it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: rewrite to skip refcounting and just use a temporary file
    created using mkstemp() in /tmp


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_userdb: fix the key_only flag so that the null-terminator of the
    user-password string isn't expected to be part of the key in the db file,
    matching the behavior of db_load 3.2.9


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_unix: use crypt() instead of bigcrypt() when salted field is less than
    the critical size which lets us know it was generated with bigcrypt()
  - use a wrapper to handle ERANGE errors when calling get....._r functions:
    defining PAM_GETPWNAM_R and such (for getpwnam, getpwuid, getgrnam,
    getgrgid, and getspnam) before including _pam_macros.h will cause them
    to be implemented as static functions, similar to how defining PAM_SM_xxx
    is used to control whether or not PAM declares prototypes for certain
    functions


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-12
changelog:
  - noreplace configuration files in /etc/security
  - pam_console: update pam_console_apply and man pages to reflect
    /var/lock -> /var/run move


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modules: use getpwnam_r and friends instead of non-reentrant versions
  - pam_console: clear generated .c and .h files in "clean" makefile target


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_stack: perform deep copy of conversation structures
  - include the static libpam in the -devel subpackage (#52321)
  - move development .so and .a files to %{_libdir}
  - pam_unix: don't barf on empty passwords (#51846)
  - pam_unix: redo compatibility with "hash,age" data wrt bigcrypt (#42394)
  - console.perms: add usb camera, scanner, and rio devices (#15528)
  - pam_cracklib: initialize all options properly (#49613)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-10
changelog:
  - pam_xauth: fix errors due to uninitialized data structure (fix from Tse Huong
    Choo)
  - pam_xauth: random cleanups
  - pam_console: use /var/run/console instead of /var/lock/console at install-time
  - pam_unix: fix preserving of permissions on files which are manipulated


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: use /var/run/console instead of /var/lock/console for lock files
  - pam_issue: read the right number of bytes from the file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: don't error out if the group has no members, but is the user's
    primary GID (reported by David Vos)
  - pam_unix: preserve permissions on files which are manipulated (#43706)
  - pam_securetty: check if the user is the superuser before checking the tty,
    thereby allowing regular users access to services which don't set the
    PAM_TTY item (#39247)
  - pam_access: define NIS and link with libnsl (#36864)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: fix logic bug when changing permissions on single
    file and/or lists of files
  - pam_console: return the proper error code (reported and patches
    for both from Frederic Crozat)
  - change deprecated Copyright: tag in .spec file to License:


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: change js* to js[0-9]*
  - include pam_aconf.h in more modules (patches from Harald Welte)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: add apm_bios to the list of devices the console owner can use
  - console.perms: add beep to the list of sound devices


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_access: compare IP addresses with the terminating ".", as documented
    (patch from Carlo Marcelo Arenas Belon, I think) (#16505)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge up to 0.75
  - pam_unix: temporarily ignore SIGCHLD while running the helper
  - pam_pwdb: temporarily ignore SIGCHLD while running the helper
  - pam_dispatch: default to uncached behavior if the cached chain is empty


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove /dev/dri from console.perms -- XFree86 munges it, so it's outside of
    our control (reminder from Daryll Strauss)
  - add /dev/3dfx to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: make 'trust' and 'deny' work together correctly
  - pam_wheel: also check the user's primary gid
  - pam_group: also initialize groups when called with PAM_REINITIALIZE_CRED


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: error out on undefined classes in pam_console config file
  - console.perms: actually change the permissions on the new device classes
  - pam_console: add an fstab= argument, and -f and -c flags to pam_console_apply
  - pam_console: use g_log instead of g_critical when bailing out
  - console.perms: logins on /dev/vc/* are also console logins, from Douglas
    Gilbert via Tim Waugh


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add pam_console_apply
  - /dev/pilot's usually a serial port (or a USB serial port), so revert its
    group to 'uucp' instead of 'tty' in console.perms
  - change pam_console's behavior wrt directories -- directories which are
    mount points according to /etc/fstab are taken to be synonymous with
    their device special nodes, and directories which are not mount points
    are ignored


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - own /etc/security
  - be more descriptive when logging messages from pam_limits
  - pam_listfile: remove some debugging code (#28346)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: change the documented default config file to reflect the defaults
  - pam_limits: you should be able to log in a total of maxlogins times, not
    (maxlogins - 1)
  - handle group limits on maxlogins correctly (#25690)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually time out when attempting to lckpwdf() (#25889)
  - include time.h in pam_issue (#25923)
  - update the default system-auth to the one generated by authconfig 4.1.1
  - handle getpw??? and getgr??? failures more gracefully (#26115)
  - get rid of some extraneous {set,end}{pw,gr}ent() calls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge to 0.74
  - make console.perms match perms set by MAKEDEV, and add some devfs device names
  - add 'sed' to the buildprereq list (#24666)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix handling of "nis" when changing passwords by adding the checks for the
    data source to the password-updating module in pam_unix
  - add the original copyright for pam_access (fix from Michael Gerdts)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix similar() function in pam_cracklib (#14740)
  - fix example in access.conf (#21467)
  - add conditional compilation for building for 6.2 (for pam_userdb)
  - tweak post to not use USESHADOW any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add RLIMIT_LOCKS to pam_limits (patch from Jes Sorensen) (#20542)
  - link pam_userdb to Berkeley DB 2.x to match 6.2's setup correctly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak pre script to be called in all upgrade cases
  - get pam_unix to only care about the significant pieces of passwords it checks
  - add /usr/include/db1/db.h as a build prereq to pull in the right include
    files, no matter whether they're in glibc-devel or db1-devel
  - pam_userdb.c: include db1/db.h instead of db.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch from Dmitry V. Levin to have pam_stack propagate the PAM fail_delay
  - roll back the README for pam_xauth to actually be the right one
  - tweak pam_stack to use the parent's service name when calling the substack


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify the files list to make sure #16456 stays fixed
  - make pam_stack track PAM_AUTHTOK and PAM_OLDAUTHTOK items
  - add pam_chroot module
  - self-hosting fixes from the -devel split
  - update generated docs in the tree


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix problems when looking for headers in /usr/include (#17236)
  - clean up a couple of compile warnings


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - give users /dev/cdrom* instead of /dev/cdrom in console.perms (#16768)
  - add nvidia control files to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move pam_filter modules to /lib/security/pam_filter (#16111)
  - add pam_tally's application to allow counts to be reset (#16456)
  - move README files to the txts subdirectory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a broken_shadow option to pam_unix
  - add all module README files to the documentation list (#16456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - need to make pam_console's checking a little stronger
  - only pass data up from pam_stack if the parent didn't already define it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_console's extra checks disableable
  - simplify extra check to just check if the device owner is root
  - add a debug log when pam_stack comes across a NULL item
  - have pam_stack hand items up to the parent from the child


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix installation of pam_xauth man pages (#12417)
  - forcibly strip helpers (#12430)
  - try to make pam_console a little more discriminating


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - symlink libpam.so to libpam.so.0.99.6.2, and likewise for libpam_misc
  - reverse order of checks in _unix_getpwnam for pam_unix


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add account management wrappers for pam_listfile, pam_nologin, pam_securetty,
    pam_shells, and pam_wheel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add system-auth control file
  - let gethostname() call in pam_access.c be implicitly declared to avoid
    conflicting types if unistd.c declares it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add new pam_stack module.
  - Install pwdb_chkpwd and unix_chkpwd as the current user for non-root builds


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Add a patch to accept 'pts/N' in /etc/securetty as a match for tty '5'
    (which is what other pieces of the system think it is). Fixes bug #7641.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.72
  - fix pam_unix password-changing bug
  - fix pam_unix's cracklib support
  - change package URL


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - many bug fixes in pam_xauth
  - pam_console can now handle broken applications that do not set
    the PAM_TTY item.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fixed glob/regexp confusion in pam_console, added kbd and fixed fb devices
  - added pam_xauth module


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - changed /dev/cdrom default user permissions back to 0600 in console.perms
    because some cdrom players open O_RDWR.


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-8
changelog:
  - fix possible crash when 64-bit counters in ipSystemStatsTable get
    bigger than 2^32 (#514703)
  - fix memory leak in ipNetToPhysicalTable (#515650)
  - fix periodical memory leaks in various MIBs (#518633)
  - create MIB indexes in /var/lib/net-snmp to fix SELinux alerts in applications
    (#523249)
  - fix multilib issues in net-snmp and net-snmp-devel packages (#521820)
  - allow snmpusm to create views with OIDs larger than 255 (#527364)
  - plug memory leak in processing of GETNEXT request on last item in
    mteEventSetTable (#515650)
  - suppress showing of "truncating unsigned value to 32 bits" message in Net-SNMP
    utilities (#528164)
  - fix endless loop in ipDefaultRouterTable when there are more default routes
    with the same destination (#504742)
  - suppress logging of "truncating integer value > 32 bits" in IP-MIB and TCP-MIB
    when the counters overflow 32 bits (#507528)
  - fix responding to broadcast requests (#521175)
  - fix ipNetToPhysicalTable and ipNetToMediaTable with network interfaces with
    long HW address (like InfiniBand) (#543499)
  - fix IP address size in ipCidrRouteTable on 64 bit platforms (#547698)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-6
changelog:
  - fix command line options related to logging (#477768)
  - don't spam log with 'diskio.c: don't know how to handle X request'
    (#474093)
  - add ipAddressSpinLock OID (#479609)
  - fix reloading of trapsink and trap2sink entries on SIGHUP (#468147)
  - fix reporting of IF-MIB::ifSpeed of 10GB/s interfaces (#464061)
  - backport skipNFSInHostResources option (#461631)
  - implement ipNetToPhysicalLastUpdated OID (#477092)
  - implement RMON-MIB::etherStatsJabbers (#468832)
  - fix memory leak in SCTP-MIB (#497280)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-1
changelog:
  - rebase to net-snmp-5.3.2.2 (#454977)
  - introduce new "dontLogTCPWrappersConnects" config file option
    to reduce logging of incomming connections (#448664)
  - introduce new "v1trapaddress" config file option
    which allows setting agent address inside SNMPv1 traps (#426355)
  - correctly recover when admin starts snmpd or snmptrapd with
    wrong port specifier (#449351)
  - update snmpd.conf man page to emphasize necessity of explicit port
    specification in 'trapsess' option (#436452)
  - net-snmp.rpm requires now the same version and release of net-snmp-libs
    (#434746)
  - 32-bit ifTable counters are now updated (#438151)
  - fix hrProcessorLoad OID (#431439)
  - fix documentation of 'exec' statement - it does not cache results
    (#431519)
  - fix inetNetToMediaTable processing, some entries could be missing
    when ipv6 kernel module is removed (#450076)
  - fix memory leak on UDP transport creation (#454294)
  - add SCTP-MIB implementation (#435110)
  - fix a filedescriptor leak in hrSWRunTable (#458009)
  - allow 16bit ifIndex (#458937)
  - move /etc/snmp/snmpd.options to /etc/sysconfig and add snmptrapd.options
    file (#459054)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-25
changelog:
  - fix buffer overflow in perl module (CVE-2008-2292) (#449898)
  - fix SNMPv3 authentication checks (unknown CVE) (#449898)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-23
changelog:
  - add ipIfStatsTable to build
  - make ipv6ScopeZoneIndexTable loading quiet (#433446)
  - make ipAddressPrefixTable loading quiet (#253399 related)
  - fix inetToMediaTable to recover from error when ipv6 kernel module is 
    not present (#431977)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-20
changelog:
  - fix snmpwalk / bulkwalk on TCP scalars (#248342)
  - fix bulkwalk security flaw (#366631)
  - interface names can be longer than 8 characters (#357121)
  - aliased interfaces have correct netmask and broadcast addresses
    (#357121)
  - fix icmpStatsTable (#256041)
  - fix race condition when reading /proc/*/cmdline (#311261)
  - fix hostname logging of snmptrapd (#270941)
  - fix race condition when reading process status (#252216)
  - fix TCP support (#251332)
  - fix reading of agentsecname and iquerysecname from config file
    (#338981, #311761)
  - fix disk statistics of mount points with spaces (#348681)
  - store temporary files to /var/run/snmpd to prevent
    users to modify them and to make selinux happy (#401211)
  - print more meaningful message when interface changes its ifIndex
    (#396141)
  - fix hrDeviceStatus and hrDeviceErrors missing during walk
    (#419511)
  - correctly cut values to 32bits in UCD-DISKIO-MIB, preventing
    "truncating integer value > 32 bits" to appear (#386821)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-15
changelog:
  - fix sending SNMPv1 traps on v2 connections (#236933)
  - fix ugly error messages when more interfaces share one IP addr.
    (#223236)
  - build with rpm-devel to support HOST-RESOURCES-MIB::hrSWInstalled
    (#232870)
  - store pid in /var/run/snmpd.pid (240470)
  - fix wrong sprintf in path generation (#240609)
  - fix too verbose snmpassert (#239083)
  - fix perl bulkwalk (#238145)
  - extend ipv6 support of some MIBs (#242483)


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Joe Orton <jorton@redhat.com> - 5.1.6-27.1
changelog:
  - add security fixes for CVE-2010-1917, CVE-2010-3065, CVE-2010-2531,
    CVE-2010-1128, CVE-2010-0397 (#626735)


author: Joe Orton <jorton@redhat.com> - 5.1.6-25.1.el5
changelog:
  - increase default memory_limit to 128M; mark php.ini noreplace (#517604)
  - php_stream_filter_api.h: fix trailing comma in enum (#530824)
  - soap: fix empty tag for NULL variables (#511175)
  - soap: fix refcounting bug in SoapClient::__setSoapHeaders (#505355)
  - soap: fix partial request with minOccurs=0 in XSD (#500383)
  - don't link odbc.so directly against -lodbcsql (#483690)
  - fix possible integer overflow in substr_compare (#469807)
  - fix possible integer overflow in substr_count (#470971)
  - fix move_uploaded_file to respect the umask (#498031)
  - mbstring: fix possible crash in mb_detect_encoding() (#486651)
  - add experimental ZTS build (#484058)


author: Joe Orton <jorton@redhat.com> - 5.1.6-25.el5
changelog:
  - add build fix for mysqli, pdo_mysql on some biarch systems (#491050)
  - add security fixes for CVE-2009-2687, CVE-2009-3291, CVE-2009-3292,
    CVE-2009-3546 CVE-2009-4017 (#541598)
  - add security fixes for CVE-2008-3658, CVE-2008-5624, CVE-2008-3660,
    CVE-2008-5498, CVE-2008-5557, CVE-2008-5814 (#487370)


author: Joe Orton <jorton@redhat.com> 5.1.6-22.el5
changelog:
  - fix possible crash in metaphone() (#446183)
  - imap: link in AUTH=PLAIN authenticator (#447983)
  - Zend: fix class name case in error messages (#446180)
  - move gd_README from -common to -gd (#443812)
  - pdo: fix possible crash in error path (#429693)
  - add security fixes for CVE-2007-5898, CVE-2007-4782, CVE-2007-5899,
    CVE-2008-2051, CVE-2008-2107, CVE-2008-2108 (#445924)
  - date: fix handling of relative days in strtotime (#444419)
  - date: fix test suite failure with current tzdata (#454863)
  - Zend: fix behaviour of constructors during destructors (#456313)
  - pdo_mysql: detect stale db connections (#450880)


author: Joe Orton <jorton@redhat.com> 5.1.6-16.el5
changelog:
  - add dbase extension in -common (#161639)
  - add /usr/share/php to builtin include_path (#238455)
  - ext/ldap: enable ldap_sasl_bind (#336221)
  - ext/libxml: reset stream context (#298031)


author: Joe Orton <jorton@redhat.com> 5.1.6-13.el5
changelog:
  - add security fixes for CVE-2007-2756, CVE-2007-2872, 
    CVE-2007-3799, CVE-2007-3996, CVE-2007-3998, CVE-2007-4658,
    CVE-2007-4670 (#278411)


author: Joe Orton <jorton@redhat.com> 5.1.6-12.el5
changelog:
  - add security fix for CVE-2007-1864, SOAP redirect handling issue,
    FTP CRLF injection issue (#235016)


author: Joe Orton <jorton@redhat.com> 5.1.6-9.el5
changelog:
  - add security fix for CVE-2007-1583 (#235016)
  - add security fixes for CVE-2007-0455, CVE-2007-1001 (#235036)


author: Joe Orton <jorton@redhat.com> 5.1.6-6.el5
changelog:
  - add security fixes for: CVE-2007-0906, CVE-2007-0907, 
    CVE-2007-0908, CVE-2007-0909, CVE-2007-0910, CVE-2007-0988 (#229013)


author: Joe Orton <jorton@redhat.com> 5.1.6-4.el5
changelog:
  - php-xml provides php-domxml (#215656)
  - fix php-pdo-abi provide (#214281)
  - provide php-zend-abi (#212804)
  - don't Obsolete mod_php
  - fix PDO sqlite TEXT extraction truncate-by-one (#217033)
  - package php{ize,-config} man pages in -devel (#199382)
  - change module subpackages to require php-common not php (#177821)
  - add security fix for CVE-2006-5465 (#216114)


author: Joe Orton <jorton@redhat.com> 5.1.4-8
changelog:
  - Provide php-posix (#194583)
  - only provide php-pcntl from -cli subpackage
  - add missing defattr's (thanks to Matthias Saou)


author: Joe Orton <jorton@redhat.com> 5.1.4-5
changelog:
  - provide mod_php (#187891)
  - provide php-cli (#192196)
  - use correct LDAP fix (#181518)
  - define _GNU_SOURCE in php_config.h and leave it defined
  - drop (circular) dependency on php-pear


author: Joe Orton <jorton@redhat.com> 5.1.2-5
changelog:
  - provide php-api (#183227)
  - add provides for all builtin modules (Tim Jackson, #173804)
  - own %{_libdir}/php/pear for PEAR packages (per #176733)
  - add obsoletes to allow upgrade from FE4 PDO packages (#181863)


author: Joe Orton <jorton@redhat.com> 5.1.1-2
changelog:
  - update to 5.1.1
  - remove pear subpackage
  - enable pdo extensions (php-pdo subpackage)
  - remove non-standard conditional module builds
  - enable xmlreader extension


author: Joe Orton <jorton@redhat.com> 5.0.5-3
changelog:
  - update to 5.0.5
  - add fix for upstream #34435
  - devel: require autoconf, automake (#159283)
  - pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1
  - fix imagettftext et al (upstream, #161001)


author: Joe Orton <jorton@redhat.com> 5.0.4-9
changelog:
  - build simplexml_import_dom even with shared dom (#156434)
  - prevent truncation of copied files to ~2Mb (#155916)
  - install /usr/bin/php from CLI build alongside CGI
  - enable sysvmsg extension (#142988)


author: Joe Orton <jorton@redhat.com> 5.0.4-7
changelog:
  - split out dba and bcmath extensions into subpackages
  - BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)
  - pear: update to DB-1.7.6
  - enable FastCGI support in /usr/bin/php-cgi (#149596)


author: Joe Orton <jorton@redhat.com> 5.0.4-6
changelog:
  - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi,
    built with the CGI SAPI (thanks to Edward Rudd, #137704)
  - add php(1) man page for CLI
  - fix more test cases to use -n when invoking php


author: Joe Orton <jorton@redhat.com> 5.0.4-4
changelog:
  - bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP
  - snmp: disable MSHUTDOWN function to prevent error_log noise (#153988)
  - mysqli: add fix for crash on x86_64 (Georg Richter, upstream #32282)


author: Joe Orton <jorton@redhat.com> 5.0.4-1
changelog:
  - update to 5.0.4 (#153068)
  - add .phps AddType to php.conf (#152973)
  - better gcc4 fix for libxmlrpc


author: Joe Orton <jorton@redhat.com> 5.0.3-5
changelog:
  - BuildRequire mysql-devel >= 4.1
  - don't mark php.ini as noreplace to make upgrades work (#152171)
  - fix subpackage descriptions (#152628)
  - fix memset(,,0) in Zend (thanks to Dave Jones)
  - fix various compiler warnings in Zend


author: Joe Orton <jorton@redhat.com> 5.0.3-4
changelog:
  - package mysqli extension in php-mysql
  - really enable pcntl (#142903)
  - don't build with --enable-safe-mode (#148969)
  - use "Instant Client" libraries for oci8 module (Kai Bolay, #149873)


author: Joe Orton <jorton@redhat.com> 5.0.3-2
changelog:
  - install the ext/gd headers (#145891)
  - enable pcntl extension in /usr/bin/php (#142903)
  - add libmbfl array arithmetic fix (dcb314@hotmail.com, #143795)
  - add BuildRequire for recent pcre-devel (#147448)


author: Joe Orton <jorton@redhat.com> 5.0.3-1
changelog:
  - update to 5.0.3 (thanks to Robert Scheck et al, #143101)
  - enable xsl extension (#142174)
  - package both the xsl and dom extensions in php-xml
  - enable soap extension, shared (php-soap package) (#142901)
  - add patches from upstream 5.0 branch:
   * Zend_strtod.c compile fixes
   * correct php_sprintf return value usage


author: Joe Orton <jorton@redhat.com> 5.0.2-7
changelog:
  - truncate changelog at 4.3.1-1
  - merge from 4.3.x package:
   - enable mime_magic extension and Require: file (#130276)


author: Joe Orton <jorton@redhat.com> 5.0.2-5
changelog:
  - fix phpize installation for lib64 platforms
  - add fix for segfault in variable parsing introduced in 5.0.2


author: Joe Orton <jorton@redhat.com> 5.0.2-4
changelog:
  - update to 5.0.2 (#127980)
  - build against mysqlclient10-devel
  - use new RTLD_DEEPBIND to load extension modules
  - drop explicit requirement for elfutils-devel
  - use AddHandler in default conf.d/php.conf (#135664)
  - "fix" round() fudging for recent gcc on x86
  - disable sqlite pending audit of warnings and subpackage split


author: Joe Orton <jorton@redhat.com> 5.0.1-1
changelog:
  - update to 5.0.1
  - only build shared modules once
  - put dom extension in php-dom subpackage again
  - move extension modules into %{_libdir}/php/modules
  - don't use --with-regex=system, it's ignored for the apache* SAPIs


author: Tom Callaway <tcallawa@redhat.com>
changelog:
  - bump to 5.0.0
  - add patch to prevent clobbering struct re_registers from regex.h
  - remove domxml references, replaced with dom now built-in
  - fix php.ini to refer to php5 not php4


author: Joe Orton <jorton@redhat.com> 4.3.7-3
changelog:
  - add gmp_powm fix (Oskari Saarenmaa, #124318)
  - split mbstring, ncurses, gd, openssl extns into subpackages
  - fix memory leak in apache2handler; use ap_r{write,flush}
    rather than brigade interfaces


author: Joe Orton <jorton@redhat.com> 4.3.6-6
changelog:
  - buildrequire smtpdaemon (#124430)
  - try switching to system libgd again (prevent symbol conflicts
    when e.g. mod_perl loads the system libgd library.)


author: Joe Orton <jorton@redhat.com> 4.3.4-7
changelog:
  - gd fix for build with recent Freetype2 (from upstream)
  - remove easter egg (Oden Eriksson, Mandrake)


author: Joe Orton <jorton@redhat.com> 4.3.4-6
changelog:
  - php-pear requires php
  - also remove extension=imap from php.ini in upgrade trigger
  - merge from Taroon: allow upgrade from Stronghold 4.0


author: Joe Orton <jorton@redhat.com> 4.3.4-5
changelog:
  - add defattr for php-pear subpackage
  - restore defaults: output_buffering=Off, register_argc_argv=On
  - add trigger to handle php.ini upgrades smoothly (#112470)


author: Joe Orton <jorton@redhat.com> 4.3.4-4
changelog:
  - conditionalize support for imap extension for the time being
  - switch /etc/php.ini to use php.ini-recommended (but leave
    variables_order as EGPCS) (#97765)
  - set session.path to /var/lib/php/session by default (#89975)
  - own /var/lib/php{,/session} and have apache own the latter
  - split off php-pear subpackage (#83771)


author: Joe Orton <jorton@redhat.com> 4.3.4-2
changelog:
  - rebuild for new libxslt (#110658) 
  - use --with-{mssql,oci8} for enabling extensions (#110482)
  - fix rebuild issues (Jan Visser, #110274)
  - remove hard-coded LIBS
  - conditional support for mhash (Aleksander Adamowski, #111251)


author: Joe Orton <jorton@redhat.com> 4.3.3-6
changelog:
  - use bundled libgd (#107407)
  - remove manual: up-to-date manual sources are no longer DFSG-free;
    it's too big; it's on the web anyway; #91292, #105804, #107384


author: Joe Orton <jorton@redhat.com> 4.3.3-3
changelog:
  - split domxml extension into php-domxml subpackage
  - enable xslt and xml support in domxml extension (#106042)
  - fix httpd-devel build requirement (#104341)
  - enable recode extension (#106755)
  - add workaround for #103982


author: Joe Orton <jorton@redhat.com> 4.3.2-2
changelog:
  - update the -tests and -lib64 patches
  - fixes for db4 detection
  - require aspell-devel >= 0.50.0 for pspell compatibility


author: Joe Orton <jorton@redhat.com> 4.3.1-3
changelog:
  - link odbc module correctly
  - patch so that php -n doesn't scan inidir
  - run tests using php -n, avoid loading system modules


author: Harald Hoyer <harald@redhat.com> 8.45.30-2
changelog:
  - fix raw path in initscript (#472891)
  - remove deprecation comments (#472891)
  - Resolves: rhbz#472891


author: Phil Knirsch <pknirsch@redhat.com> 8.45.29-3
changelog:
  - Final fixes for IP address validation (#464268)
  - Added required 54-cu3088-fix.rules udev rules file (#475721)
  - Resolves: #464268,#475721


author: Harald Hoyer <harald@redhat.com> 8.45.28-1
changelog:
  - fixed "Determine reboot/halt via existing INIT_HALT environment variable. (#475006)
  - Resolves: rhbz#475006


author: Harald Hoyer <harald@redhat.com> 8.45.26-1
changelog:
  - add md activation before lvm/device-mapper in netfs (#480627)
  - fixed SUBCHANNEL grep for s390
  - Move the bridge member handling later in the ifdown sequence (#463325, Sean E. Millichamp <sean@bruenor.org>)
  - Allow changing of VLAN type even if the module is already loaded. (#495053, <pietro@bertera.it>)
  - add gfs2 to rc.sysinit mount (#494963)
  - support ETHTOOL_OPTS on bridge devices (#493255, <bbaetz@acm.org>)
  - Add vlan support for s390 HSI interfaces. (#490584)
  - Don't re-init an existing device, it causes errors. (#484411, <jpayne@redhat.com>)
  - Remove arp_ip_target on ifdown for bonding devices. (#483711)
  - Don't unmount the nfsd filesystem when unmounting nfs client mounts. (#481794, <sprabhu@redhat.com>)
  - Bring up ipsec interfaces last. (#481733)
  - Break deadlock by explicitly handling alias for CTC and IUCV (#475721)
  - Determine reboot/halt via existing INIT_HALT environment variable. (#475006)
  - Add some docs on BONDING_OPTS. (#472480)
  - Don't say that we're shutting off crypto if we aren't actually doing it. (#471944)
  - remove empty bridges (#463325)
  - Add a address check capability for IPv4 and IPv6 addresses. (#464268)
  - fail if HWADDR specified in ifcfg is not present in the system (#487718)
  - fix ifdown of vlan iface which is a bridge member (#481557)
  - add proper return codes for /etc/init.d/network (#481002)
  - fixed brigde setup (bug #463014)
  - Add an option for consoletype to always return 0. (#453798, <notting@redhat.com>)
  - Use the pidfile before running pidof in status(). (#440658)
  - Allow passing of arguments to dhcp6c (#437949, <pekkas@netcore.fi>)
  - Remove /.suspended as well on boot (#270861)
  - Allow use of either ESP only or AH only (#251494, <stijn.tintel@x-tend.be>)
  - Resolves: rhbz#251494,rhbz#270861,rhbz#437949,rhbz#440658,rhbz#453798,
              rhbz#463014,rhbz#463325,rhbz#464268,rhbz#471944,rhbz#472480,
              rhbz#475006,rhbz#475721,rhbz#475770,rhbz#480627,rhbz#481002,
              rhbz#481557,rhbz#481733,rhbz#481794,rhbz#483711,rhbz#484411,
              rhbz#487718,rhbz#490584,rhbz#493255,rhbz#494963,rhbz#495053


author: Harald Hoyer <harald@redhat.com> 8.45.22-1
changelog:
  - refined SUBCHANNEL grep statement (bug #459044)
  - blkid has a -l option to pick a single device. Use it. (#470027)
  - don't mkswap on halt (#469823)
  - fixed bonding arp_ip_target handling (#467954) (Darcy Sherwood)
  - Resolves: rhbz#459044, rhbz#470027, rhbz#469823, rhbz#467954


author: Harald Hoyer <harald@redhat.com> 8.45.20-1
changelog:
  - changes to init scripts to better support stateless (#433702, <ahecox@redhat.com>)
  - call logger with full path (#447928, Mihai Vintila)
  - add a udevsettle before mounting _netdev devices (#452866, <bmr@redhat.com>)
  - reduce device initialization overhead for ccw devices (#437110, Glen Johnson)
  - Resolves: rhbz#433702 rhbz#452866 rhbz#447928 rhbz#437110


author: Bill Nottingham <notting@redhat.com> 8.45.19.EL-1
changelog:
  - also skip network shutdown if there is a '_rnetdev' root device (part of #435358, <pjones@redhat.com>)


author: Bill Nottingham <notting@redhat.com>, Harald Hoyer <harald@redhat.com> 8.45.18.EL-1
changelog:
  - IKE_DHGROUP is now an option for IPsec configuration files, which allows
  to set the dh group used during PHASE 1 of IPsec SA (#251506)
  - arp_ip_target can now be used with a comma seperated IP list in BONDING_OPTS (#288151)
  - genhostid now generates only 32 bit hostids on 64 bit systems (#306811)
  - the check for the need of remounting the root file system read-writable
  is now refined (#334171)
  - quoted SUBCHANNELS and HWADDR options in network configuration files are
  now handled properly (#351291)
  - support for resuming from an encrypted swap has been added (#360071)
  - rc.sysinit now executes the proper configuration tools, if /.unconfigured
  is present (#426372)
  - Resolves: rhbz#251506 rhbz#288151 rhbz#306811 rhbz#334171 rhbz#351291 rhbz#360071 rhbz#426372


author: Bill Nottingham <notting@redhat.com> 8.45.16.EL-1
changelog:
  - init.d/network: add support for VLAN_PLUS_VID_NO_PAD vlans (#229285)
  - network-functions: fix logic error in install_bonding_driver (#229643)
  - add init script for netconsole (#223742)
  - ifup-eth: set 'primary' later for bonding devices (#236897, <agospoda@redhat.com>)
  - init.d/halt: don't shut down the network in kexec (#223932, <mchristi@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.45.10.EL-1
changelog:
  - add a step to rename any temporarily renamed devices (#208740, #204803, #214817)
  - rc.sysinit: fix reversed dmraid test (#216490)
  - translation updates (#216097)
  - don't automatically reload modules on module reomvals (#211474)
  - don't unmount network file systems (#217625)


author: Bill Nottingham <notting@redhat.com> 8.45.7.EL-1
changelog:
  - fix gdm in CJKI (#209579, #213196)
  - rename_device: correctly ignore backup interface files
  - mount tmpfs with -n (#213132)


author: Bill Nottingham <notting@redhat.com> 8.45.5.EL-1
changelog:
  - fix handling of undisplayable locales on the console some more (#209579, #212438)
  - use SUBCHANNEL as the primary identifier for s390 networking (#204803)


author: Bill Nottingham <notting@redhat.com> 8.45.4.EL-1
changelog:
  - don't set CJKI as the language on virtual consoles (#209579)
  - use dmraid.static in rc.sysinit (#211297)
  - use sysfs interface for bonding, so multiple bonds work again (#202443, <agospoda@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.45.3.EL-1
changelog:
  - remove early-login code
  - Handle "nodmraid" and "nompath" command line options (#209377, <pjones@redhat.com>)
  - translation updates: da, fi, zh_CN, ja, ml, ms
  - restorecon on moved dhclient lease file (#209853)
  - set different limits for shmmax, etc. based on arch (#184820)


author: Bill Nottingham <notting@redhat.com> 8.45-1
changelog:
  - lang.csh/lang.sh - do *not* stty iutf8; too much chaos with SIGTTOU
    (reverts: #186961; fixes #209469)
  - translation updates: ms


author: Bill Nottingham <notting@redhat.com> 8.44-1
changelog:
  - separate tmpfs-usage for state from readonly-root
  - set keymap correctly in non-utf8 locale (#167363)
  - setsysfont: run unicode_stop if in non-unicode locale
  - lang.csh/lang.sh: set iutf8 if appropriate (#186961)
  - lang.csh/lang.sh: handle non-utf8 locales correctly (#200100)
  - rc.sysinit: redirect stderr from setsysfont (#209204, indirectly)
  - rwtab: fix iscsi file location (#208864)
  - translation updates: el, da, as, or
  - fix stateless updates (#206331, <law@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.43-1
changelog:
  - move ccwgroup initialization to a udev rule (should fix #199139,
    - init.d/functions: don't write to gdmfifo
  - remove unused-since-RHL-7 consolechars code, update docs (#206106)
  - stateless updates (#206331, <law@redhat.com>)
  - translation updates (el, ms, hr, sl)


author: Bill Nottingham <notting@redhat.com> 8.42-1
changelog:
  - run rc.sysinit, /etc/rc in monitor mode (part of #184340)
  - use a better check for 'native' services (#190989, #110761, adapted
    from <matthias@rpmforge.net>)


author: Bill Nottingham <notting@redhat.com> 8.41-1
changelog:
  - fix network ipv6 hang (#207137, others)
  - rc.sysinit: change blkid.tab path to /etc/blkid/blkid.tab
  - rename_device: reset DEVPATH also when renaming (#206884, <phil@fifi.org>)
  - sysconfig.txt: clarify onboot/onparent usage


author: Bill Nottingham <notting@redhat.com> 8.40-1
changelog:
  - translation updates
  - rename_device: use '__tmpXXXX' instead of 'devXXXX' as a temporary device
    name to avoid any realistic namespace clashes
  - rc.sysinit: set default affinity if specified on commandline (#203359)
  - always pass path to '.' (#206035)
  - run setsysfont, loadkeys always when /dev/tty{0,1} exist (#150769)
  - allow going to a shell when system is shut down cleanly (from <dwalsh@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.39-1
changelog:
  - translation updates
  - Handle partitions on multipath/dmraid better (<pjones@redhat.com>)
  - make /dev/mapper/control ourselves (<pjones@redhat.com>)
  - init.d/network: simplify 'status' call
  - fix actual 169.254 networks (#203591)
  - rc.sysinit: don't run vgscan (#191879)
  - init.d/halt: don't umount /dev/root<foo> (<oblin@mandriva.com>)
  - rc.sysinit: catch more dmraid errors (#200683)
  - support 'tmp' option in /etc/crypttab (#201382, <mitr@redhat.com>,
    <lv@lekv.de>)
  - IPv6 updates (<pb@bieringer.de>, includes a fix for #143452)


author: Bill Nottingham <notting@redhat.com> 8.38-1
changelog:
  - translation updates
  - bring down bonding slaves on ifdown (#199706)
  - support LINKDELAY for dhcp (#191137)
  - netfs: run multipath on netdev devices (#180977)
  - halt: use /proc/mounts instead of /etc/mtab (#198426, <mitr@redhat.com>)
  - rc.sysinit: fix getkey race (#191453, <mitr@redhat.com>)
  - spec cleanups (#188614, <kloczek@rudy.mif.pg.gda.pl>)
  - support aliases on vlan (#193133, <mitr@redhat.com>)
  - clean up ifcfg file handling (<mitr@redhat.com>, <michal@harddata.com>)
  - GRE and IPIP tunnel support (#168990, <mitr@redhat.com>,
    <razvan.vilt@linux360.ro>, <aaron.hope@unh.edu>, <sean@enertronllc.com>)
  - rc.sysinit: don't format encrypted swap always (#127378)
  - don't try to add routes to alias devices (#199825, #195656)


author: Bill Nottingham <notting@redhat.com> 8.36-1
changelog:
  - rework automatic swapon - only run if AUTOSWAP=yes, and fix errors
    (#198695, #196179, #196208)
  - redo single so it starts last in runlevel 1, and doesn't kill/start
    services itself
  - add configurable delay for killproc() (#198429, <jorton@redhat.com>)
  - fix loop in rename_device (#199242, <markmc@redhat.com>)
  - rc.sysinit: stateless updates (#197972, <law@redhat.com>)
  - support for copying dhcp leases from initramfs (#198601, <markmc@redhat.com>)
  - readonly-root: SELinux works now in the kernel, allow it
  - init.d/network: don't bring down network if root is on a network device
  - init.d/halt: don't use -i to halt; causes problems with iscsi
  - add support for routing rule-$device (#132252, <mitr@redhat.com>)
  - fix rhgb output (#192604, <tonynelson@georgeanelson.com>)
  - fix crypttab options for LUKS (#197656, <mitr@redhat.com>)
  - ipsec: various fixes & new features (#150682, #168972, <mitr@redhat.com>, <alex@milivojevic.org>)
  - ipsec: add check for IKE_METHOD (#197576, <john_smyth@mail.ru>)
  - rename_device: ignore alias devices, fix race (#186355)
  - ifup/ifdown: don't mark as %config
  - rwtab: some additions/cleanup


author: Bill Nottingham <notting@redhat.com> 8.35-1
changelog:
  - readonly root enhancments (modified from <law@redhat.com>, #193164)
  - encrypted swap, non-root filesystem support (#127378, <mitr@redhat.com, <redhat@flyn.org>)
  - clarify killproc usage (#193711, <mitr@redhat.com>)
  - document BRIDGE= (#192576, <mitr@redhat.com>)
  - rc.sysinit: allow for sulogin instead of automatic relabeling (<dwalsh@rehdat.com>)


author: Bill Nottingham <notting@redhat.com> 8.34-1
changelog:
  - link glib2 dynamically now that it's in /lib, conflict with older
    versions
  - handle cups specially when cleaning /var (#189168)
  - remove ifdown-aliases (<mitr@redhat.com>)
  - ifup-ipsec: fix key handling when only one of AH or ESP is used
    (#166257, <mituc@iasi.rdsnet.ro>)
  - IPv6 updates, including RFC 3041 support (<pb@bieringer.de>)
  - routing fixes, add METRIC support for default routes (#124045, <mitr@redhat.com>)
  - fix handling of mount points with white space (#186713, <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.33-1
changelog:
  - support for readonly root
  - rc.sysinit: remove call to zfcpconf.sh - that should be udev rules
  - ifup*: add NETWORKDELAY and LINKDELAY (#176851, <mitr@redhat.com>)
  - rc.sysinit: remove obsolete initrd code (<pjones@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.32-1
changelog:
  - netfs: fix redirect (#187505)
  - rc.sysinit add forcequotacheck (#168118, <mitr@redhat.com>)
  - functions/pidof: various fixes (#182623, others <mitr@redhat.com>)
  - add support for DHCP on bridges (#125259, <mitr@redhat.com>,
    anders@kaseorg.com>)
  - rc.sysinit: use pidof, not killall (#185429, <pjones@redhat.com>)
  - ppp fixes (#129195, #163950, #92023, <mitr@redhat.com>, <avi@argo.co.il>)
  - ifup/ifdown: unset $WINDOW (#174336, <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.30-1
changelog:
  - hotplug: don't cause modules to be reloaded on ifdown/rmmod (#179809)
  - fix endless loops in ifup/ifdown (#177792, #182466)
  - fix enabling of enforcing SELinux mode after relabel (#181893)
  - remove debugging code from ifup-bnep
  - add /proc, /sys mounting back to rc.sysinit
    Note: booting without an initrd is deprecated
  - translation updates


author: Bill Nottingham <notting@redhat.com> 8.28-1
changelog:
  - kill nash-hotplug before starting udev (<pjones@redhat.com>)
  - silence warnings on /dev/pts remount (<pjones@redhat.com>)
  - more translation updates


author: Bill Nottingham <notting@redhat.com> 8.27-1
changelog:
  - translation updates
  - lang.sh: revert fix for #176832, it's broken
  - ifup-aliases fixes (<pjones@redhat.com>,<mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.26-1
changelog:
  - revert "rc.sysinit: don't mount usbfs, libusb no longer uses it" change
  - add some ugly hacks to make sure net hotplug doesn't run after unclean
    shutdown (#177795)
  - don't mount /sys and /proc in rc.sysinit - the initrd already does
    (<pjones@redhat.com>)
  - halt: try to unmount tmpfs filesystems before swapoff (#174000,
    <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.22-1
changelog:
  - remove references to /usr/X11R6/bin (#177938)
  - rc.sysinit: fix SELinux message formatting (#178532)
  - rc.sysinit: clean cvs as well (#178539, <ville.skytta@iki.fi>)
  - init.d/halt: move halt.local so that it runs before /  is remounted r/o (#179314)
  - rc.sysinit: don't activate already active dmraids (<pjones@redhat.com>)
  - rc.sysinit: don't mount usbfs, libusb no longer uses it
  - init.d/functions: Add -p to status() (#134363, <mitr@redhat.com>)
  - init.d/functions: Separate /var/run/*.pid handling and pidof calls
    to private functions (#63440, <mitr@redhat.com>)
  - init.d/functions: update for current LSB, including -p pidfile
    (#99325, #134363, <mitr@redhat.com>, <tobias.burnus@physik.fu-berlin.de>)
  - getkey: various cleanups, add man page (#54481, <mitr@redhat.com>)
  - lang.sh: don't always call consoletype (<laroche@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.21-1
changelog:
  - move handling of network hotplug events here, add appropriate udev
    rules, obsolete hotplug
  - get rid of some path lookups (#178321, <mclasen@redhat.com>)
  - get hwaddrs from sysfs as opposed to ip | sed
  - translation updates
  - lang.sh: don't run unicode_start for subshells (#176832)
  - halt: ignore sysfs but not /sys<otherstuff> (#177612, <bnocera@redhat.com>)
  - add service(8) man page (#44857) <mitr@redhat.com>


author: Bill Nottingham <notting@redhat.com> 8.19-1
changelog:
  - Require syslog, for alternate implementations thereof (#172885)
  - Fix fsck invocation for weeding out netdev devices (#175803)


author: Bill Nottingham <notting@redhat.com> 8.17-1
changelog:
  - make sure corefile limiting works for user processes as well
    (#166511, <ville.skytta@iki.fi>)
  - ifup-routes: handle no EOF in the route file (#156972)
  - rc.sysinit: tweak mesage (#156972)
  - ifdown-eth: clean up error message (#135167)
  - rc.sysinit: call kpartx on multipath devices (#160227)
  - ifup-eth: move wireless options before bridge options (#122801)
  - ifup-wireless: silence error (#90601)
  - init.d/functions: change translated string (#54682)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - kmodule: don't probe for uninteresting devices. speeds things up
  - network-functions: deal with broken networks better (#168947)
  - rc.sysinit: automatically reboot if labels are really out of date
    (<dwalsh@redhat.com>)
  - network-functions: throw out nameif error messages
  - rc.sysinit: use multipath.static (#168321)
  - rc.sysinit: use ignorelocking (#168195)


author: Bill Nottingham <notting@redhat.com> 8.12-1
changelog:
  - ifup-eth: fix interface renaming (#158774)
  - rc.sysinit: use modprobe, not insmod (#159120, <tmus@tmus.dk>)
  - remove workaround for the fonts-not-initialized-on-secondary-consoles
    problem (fixed in 2.6.12-rc4 and later)
  - setsysfont: correctly bracket systfontacm (#159706)
  - rc.sysinit: always use udevsend, even if no modules (#160987)
  - ifdown-aliases: add 'cd' to the proper dir (#161170)
  - add diskdump restore support (<tuchida@redhat.com>),
    conflict with appropriate diskdumputils
  - rc.sysinit: dmraid/multipath support
    - remove LVM1 support
  - init.d/functions: handle odd quoting in args (#161316, <stransky@redhat.com>)
  - ifup-wireless: set rate in quotes (#163123)
  - handle lvm & fsck for network block devices (#148764,
    <alewis@redhat.com>)
  - initlog: fix invalid free calls,  (#165033), (#163973,<dwalsh@redhat.com>)
  - sysconfig.txt: remove hdparm docs, since the code isn't there (#162962)
  - updated translations: ms, ja, ko, et, zh_CN, zh_TW, sr, ar


author: Bill Nottingham <notting@redhat.com> 8.11-1
changelog:
  - fix mis-bringup of interfaces due to accidentally matched HWADDR
    (a.k.a. ONBOOT=no not working) (#153669, #157252)
  - support automatic relabeling later if rebooted w/o SELinux
    (<dwalsh@redhat.com>)
  - rc.sysinit: fix fixfiles invocation (#157182)
  - btmp should be 0600 (#156900)
  - translation updates: fr, bg, ru, mk, pa, es


author: Bill Nottingham <notting@redhat.com> 8.09-1
changelog:
  - rc.sysinit: clean up screen sockets (#155969)
  - functions: use pidof -c in various functions
  - ifup-ppp: fix static routes with ppp demand dialing (#20142,
    <ohrn+redhat@chalmers.se>)
  - add btmp support (#155537)
  - don't send dhcp hostname (revert of fix for #149667)
  - more early-login modifications (<mclasen@redhat.com>)
  - functions: fix echo (#155270)


author: Bill Nottingham <notting@redhat.com> 8.08-1
changelog:
  - update translation base
  - automatically send hostname for DHCP if it's available and not
    overridden (#149667)
  - load user-defined module scripts from /etc/sysconfig/modules at
    boot (#123927)
  - halt: reverse sort the mount list, avoiding errors
    (#147254, <jamesodhunt@hotmail.com>)
  - ifup-wireless: add SECURITYMODE (#145407)
  - network-functions: don't error out if hotplug doesn't exist (#140008)
  - ifup: always return errors on trying to bring up nonexistent devices (#131461)
  - ifup: fix error message (#143674)
  - rc.sysinit: add a autorelabel boot target (#154496)
  - prefdm: if something else is specified as $DISPLAYMANAGER, try that (#147304)
  - remove support for the old firewall type
  - network: optimize some (#138557, <drepper@redhat.com>)
  - prefdm: fix prefdm arg handling (#154312, <khc@pm.waw.pl>)
  - gdm early-login support (adapted from <rstrode@redhat.com>)
  - ifup-routes: make sure commented lines are handled correctly (#154353,
    - some sysconfig.txt updates (<link@pobox.com>, <jvdias@redhat.com>)
  - rc.sysinit: fix restorecon invocation (#153100)
  - initlog: free some of the more egregious memory leaks (#85935)
  - initlog: fix potential memory overread (#153685, <in-redhat@baka.org>)
  - remove some conflicts, %post scripts, etc. that were only relelvant
    for upgrades from pre-7.0
  - other minor fixes, see ChangeLog


author: Bill Nottingham <notting@redhat.com> 8.06-1
changelog:
  - handle alternate VLAN naming schemes (#115001, <kas@informatics.muni.cz>)
  - ifup-ipsec: handle non-ascii keys (#150552)
  - add proper ipsec route (#146169, #140654)
  - add a restorecon for /tmp to rc.sysinit
  - document ONHOTPLUG in sysconfig.txt
  - fix mistranslation (#151120)
  - don't return 1 for stopping a process if it isn't running at all
  - don't explicitly set fwd polices for ipsec traffic. Let setkey
    handle it.


author: Bill Nottingham <notting@redhat.com> 8.05-1
changelog:
  - ipv6 cleanups (<pb@bieringer.de>)
  - rc.sysinit: fix rngd check (#130350)
    ... then turn it off entirely
  - rc.sysinit: get rid of duplicate date printout (#149795)
  - ifdown: handle being called on down devices better
  - handle saved resolv.conf on all device types
  - fix network-functions cleanup
  - netfs: fix _netdev unmounting (#147610, <alewis@redhat.com>)
  - dhcp release cleanups (<jvdias@redhat.com>)
  - ifup-bnep: bluetooth update <dwmw2@infradead.org>
  - more ipsec stuff (#147001, <ckjohnson@gwi.net>)


author: Bill Nottingham <notting@redhat.com> 8.04-1
changelog:
  - split out ifup/ifdown general case to ifup/ifdown-eth;
    add ifup/ifdown-bnep (<dwmw2@redhat.com>)
  - ifup-ipsec: add fwd policies (#145507)
  - fix multiple scsi_hostadapter loads (#145432)
  - enable syncookies in sysctl.conf (#145201)


author: Bill Nottingham <notting@redhat.com> 8.03-1
changelog:
  - use udevsend to handle hotplug events (requires recent udev)
  - remove pump, dhcpcd support
  - fix ONxxx (#136531, <cww@redhat.com>)
  - fix various fgreps to not catch commented lines (#136531, expanded
    from <cww@redhat.com>)
  - set ETHTOOL_OPTS on addressless devices (#144682, <mpoole@redhat.com>)
  - kill dhcp client even if BOOTOPROTO is now static (#127726, others)
  - replace the use of route/ifconfig with ip in IPv6 code, remove support
    for ipv6calc (<pb@bierenger.de>, <pekkas@netcore.fi>)
  - fix quoting in daemon() (#144634)
  - make sysctl be silent (#144483)


author: Bill Nottingham <notting@redhat.com> 8.02-1
changelog:
  - remove initlog, minilogd
  - add a flag to kmodule for use with kudzu's socket mode, use it
  - change setting of IPv6 default route (#142308, <pb@bieringer.de>)
  - netfs: don't unmount NFS root FS (#142169)


author: Bill Nottingham <notting@redhat.com> 7.98-1
changelog:
  - various kmodule speedups
  - rc.d/init.d/netfs: don't mount GFS (#140281)
  - fix various minilogd bogosities (#106338)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix check_link_down to still check negotiation if link is
    listed as "up" on entering (#110164, <dbaron@dbaron.org>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - take an axe to rc.sysinit:
    - remove delay on unclean startup
    - remove hdparm code
    - remove LVM1 code
    - remove old raidtab code in favor of mdadm
    - remove support for old isapnp tools
    - move all block device mangling before fsck. run fsck *once*, not twice
    - some more LC_ALL=C stuff


author: Florian La Roche <laroche@redhat.com>
changelog:
  - /etc/rc.d/rc: use "LC_ALL=C grep" for small speedup
  - /etc/rc.d/rc.sysinit:
  	- do not read udev.conf, this seems to be all in the start_udev script
  	- fix detection of "nomodules" kernel command line option
  	- read /proc/cmdline earlier and convert rhgb to use that, too
  	- load_module(): change redirection to /dev/null
  	- some checks for RHGB_STARTED="" looked strange
  - /etc/sysconfig/network-scripts/ifup-ppp:
  	- remove a call to basename with shell builtins
  - /etc/sysconfig/network-scripts/network-functions:
  	- remove some calls to basename/sed with shell builtins


author: Bill Nottingham <notting@redhat.com> 7.93.2-1
changelog:
  - fix prefdm fallback to installed display managers (#137274)
  - fix incorrect rhgb temporary path (#137391)


author: Bill Nottingham <notting@redhat.com> 7.91-1
changelog:
  - rc.d/rc.sysinit: remove devlabel call
  - mdadm support, now that raidtools is gone (#126636, #88785)
  - call ipv6to4 scripts in /etc/ppp/(ip-up|ip-down) (#124390, <dwmw2@redhat.com>)
  - cleanup a couple of nits that could affect bug #134754
  - make sure we return to rhgb after fsck (#133966, #112839, #134449)
  - automatically reboot when fsck calls for it, instead of requiring
    manual intervention (#117641 and duplicates)
  - ifup-wireless: fix key for open vs. restricted (#135235, <dax@gurulabs.com>)
  - translation updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - use runuser instead of su; require it
  - init.d/halt: use right file name for random seed (#134432)


author: Bill Nottingham <notting@redhat.com> - 7.86-1
changelog:
  - use /etc/hotplug/blacklist to blacklist modules in hardware init (#132719)
  - filter indic locales on the console (#134198)


author: Bill Nottingham <notting@redhat.com> - 7.85-1
changelog:
  - ifup, network-functions: fix worked-by-accident shell quoting
  - lang.csh: remove setting of dspmbyte (#89549, <mitr@redhat.com>)
  - SELinux fixes
  - clean up prefdm
  - init.d/functions: export LC_MESSAGES (#133786)
  - allow daemon to coredump if requested (#130175)
  - network-functions: be more liberal in what we accept for link types (#90602, #127984)
  - fix overzealousness with -range aliases (#65415)
  - rc.sysinit: use s-c-keyboard, not kbdconfig (#133929)
  - fix checkpid logic, clean up potential errors (#134030)
  - translation updates


author: Bill Nottingham <notting@redhat.com> - 7.82-1
changelog:
  - fix handling of nonexistent devices (#132839)
  - rhgb enhancements (<veillard@redhat.com>, #132665)
  - initscripts.spec: require nash (#132513)
  - translation updates


author: Dan Walsh <dwalshg@redhat.com> - 7.78-2
changelog:
  - fix setting SELinux contexts on udev-created-in-initrd devices
  - Let restorecon check if selinux is enabled.


author: Bill Nottingham <notting@redhat.com> - 7.77-1
changelog:
  - mount usbfs (#131347)
  - start any automatic raid devices
  - remove triggers for ancient releases, bulletproof remaining ones (#131356)


author: Jason Vas Dias <jvdias@redhat.com> 7.73-1
changelog:
  - Add support for running the DHCPv6 client to ifup 
  - (new DHCPV6C=yes/no ifcfg-${IF} variable) + update sysconfig.txt


author: Bill Nottingham <notting@redhat.com> 7.70-1
changelog:
  - autoload hardware modules on startup
  - minor fsck cleanup (#115028, <leonard-rh-bugzilla@den.ottolander.nl>)
  - ifup: support STP bridging (#123324)
  - rc.sysinit: do a SELinux relabel if forced
  - rc.sysinit: remove devfs compat and the remaining 2.4 compat
  - ifup-wireless: support multiple keys (#127957)
  - fix firmware loading (#129155, <bnocera@redhat.com>)


author: Jason Vas Dias <jvdias@redhat.com> 7.67-1
changelog:
  - fix change_resolv_conf: if pre-existing /etc/resolv.conf
  - non-existent or empty, replace with new file contents.


author: Jason Vas Dias <jvdias@redhat.com> 7.66-1
changelog:
  - Allow users to use generic /etc/dhclient.conf if per-device
  - /etc/dhclient-${DEVICE}.conf is non-existent or empty


author: Bill Nottingham <notting@redhat.com> 7.62-1
changelog:
  - fix up resolv.conf munging (#129921)
  - use rngd if available
  - run start_udev if necessary (#120605)
  - readonly root updates (#129893, <markmc@redhat.com>)
  - ifup-wireless: quote key (#129930)
  - remove rawdevices (#130048)
  - handle binfmt_misc in rc.sysinit for the case where it's built in (#129954)
  - remove mkkerneldoth
  - don't remove linguas in lang.* (part of #9733)
  - fix nfs unmounting (#129765)
  - fix URL (#129433)


