# changelog

author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-19
changelog:
  - refrain from killing any lingering members of our child's process group when
    logging that the child process has exited (Jose Plans, #143289)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to /var/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Michal Novotny <minovotn@redhat.com> - kvm-83-262.el5_4
changelog:
  - Add missing kvm-fix-l1_map-buffer-overflow.patch [bz#958359]
  - Resolves: bz#958359
    (qemu-kvm segfault in tb_invalidate_phys_page_range())


author: Michal Novotny <minovotn@redhat.com> - kvm-83-262.el5_3
changelog:
  - kvm-kernel-kvm-accept-unaligned-MSR_KVM_SYSTEM_TIME-writes.patch [bz#947363]
  - Resolves: bz#947363
    (RHEL.5.8.32 guest hang when installing)


author: Michal Novotny <minovotn@redhat.com> - kvm-83-262.el5_2
changelog:
  - kvm-kernel-KVM-Fix-for-buffer-overflow-in-handling-of-MSR_KVM_S.patch [bz#917018]
  - kvm-kernel-KVM-Convert-MSR_KVM_SYSTEM_TIME-to-use-kvm_write_gue.patch [bz#917022]
  - kvm-kernel-KVM-Fix-bounds-checking-in-ioapic-indirect-register-.patch [bz#917028]
  - kvm-kernel-do-not-GP-on-unaligned-MSR_KVM_SYSTEM_TIME-write.patch [bz#bz917019]
  - Resolves: bz#917018
    (CVE-2013-1796 kernel: kvm: buffer overflow in handling of MSR_KVM_SYSTEM_TIME [rhel-5.9.z])
  - Resolves: bz#917022
    (CVE-2013-1797 kernel: kvm: after free issue with the handling of MSR_KVM_SYSTEM_TIME [rhel-5.9.z])
  - Resolves: bz#917028
    (CVE-2013-1798 kernel: kvm: out-of-bounds access in ioapic indirect register reads [rhel-5.9.z])


author: Ondrej Vasik <ovasik@redhat.com> 0.11.1-7
changelog:
  - fix #235411 - CVE-2007-2027 - elinks tries to load .po files
    from non-absolute path
  - fix #523258 - CVE-2008-7224 - entity_cache static array buffer
    overflow


author: Karel Zak <kzak@redhat.com> 0.11.0-1
changelog:
  - update to new upstream version
  - fix 0.11.0 build system (srcdir.patch)
  - regenerate patches:
       elinks-0.11.0-getaddrinfo.patch, 
       elinks-0.11.0-ssl-noegd.patch,
       elinks-0.11.0-sysname.patch,
       elinks-0.11.0-union.patch


author: Miloslav Trmac <mitr@redhat.com> - 0.10.3-2
changelog:
  - Fix checking for numeric command prefix (#152953, patch by Jonas Fonseca)
  - Fix invalid C causing assertion errors on ppc and ia64 (#156647)


author: Tim Waugh <twaugh@redhat.com> 0.4.2-6
changelog:
  - Make getaddrinfo call use AI_ADDRCONFIG.
  - Don't put so much information in the user-agent header string (bug #97273).


author: Jakub Jelinek <jakub@redhat.com> 0.3.2-1
changelog:
  - update to 0.3.2 to fix the DNS Ctrl-C segfaults
  - update URLs, the project moved
  - include man page


author: Bryn M. Reeves <bmr@redhat.com> - 1.7-9.62
changelog:
  - Always log plugin exceptions that are not raised to the interpreter
    Resolves: bz717480
  - Ensure relative symlink targets are correctly handled when copying
    Resolves: bz717962
  - Correctly handle libxml2 parser exceptions when reading cluster.conf
    Resolves: bz750573
  - Update Red Hat Certificate System plugin for current versions
    Resolves: bz627416


author: Bryn M. Reeves <bmr@redhat.com> - 1.7-9.61
changelog:
  - Make single threaded operation default and add --multithread to override
    Resolves: bz708346
  - Support multiple possible locations of VRTSexplorer script
    Resolves: bz565996
  - Collect wallaby dump and inventory information in mrggrid plugin
    Resolves: bz641020


author: Bryn M. Reeves <bmr@redhat.com> - 1.7-9.60
changelog:
  - Add ethtool pause, coalesce and ring (-a, -c, -g) options to network plugin
    Resolves: bz726421
  - Update MRG grid plugin to collect additional logs and configuration
    Resolves: bz641020


author: Bryn M. Reeves <bmr@redhat.com> - 1.7-9.59
changelog:
  - Fix collection of symlink destinations when copying directory trees
    Resolves: bz717962
  - Allow plugins to specify non-root symlinks for collected command output
    Resolves: bz716987
  - Ensure custom rsyslog destinations are captured and log size limits applied
    Resolves: bz717167


author: Bryn M. Reeves <bmr@redhat.com> - 1.7-9.58
changelog:
  - Add basic plugin for Veritas products
    Resolves: bz565996
  - Do not collect subscription manager keys in general plugin
    Resolves: bz750606
  - Fix gfs2 plugin use of callExtProg API
    Resolves: bz667783


author: Bryn M. Reeves <bmr@redhat.com> - 1.7-9.55
changelog:
  - Add basic Infiniband plugin
    Resolves: bz673246
  - Add plugin for scsi-target-utils iSCSI target
    Resolves: bz677123
  - Fix handling of TMP environment variable
    Resolves: bz733133
  - Correctly determine kernel version in cluster plugin
    Resolves: bz742567
  - Add libvirt plugin
    Resolves: bz568635
  - Add gfs2 plugin to supplement cluster data collection
    Resolves: bz667783


author: Bryn M. Reeves <bmr@redhat.com> - 1.7-9.51
changelog:
  - Add support for collecting entitlement certificates
    Resolves: bz678666
  - Collect non-standard syslog and rsyslog log files
    Resolves: bz596970
  - Fix up2dateclient path in hardware plugin
    Resolves: bz572353
  - Add plugin to collect rsyslog configuration
    Resolves: bz548616
  - Collect /etc/sysconfig/selinux in SELinux plugin
    Resolves: bz674717
  - Fix parted and dumpe2fs output on s390
    Resolves: bz645507
  - Truncate files that exceed specified size limit
    Resolves: bz636472


author: Bryn M. Reeves <bmr@redhat.com> - 1.7-9.50
changelog:
  - Update cluster plugin for group_tool and lockdump changes
    Resolves: bz584060
  - Fix satellite and proxy package detection in rhn plugin
    Resolves: bz590389
  - Add plugin to collect certificate system and pki data
    Resolves: bz635966


author: Adam Stokes <ajs at redhat dot com> - 1.7-9.49
changelog:
  - Resolves: bz499468 sos detect invalid fence domain IDs
  - Resolves: bz507672 capture dm-raid information
  - Resolves: bz521344 include dump of openais configuration
  - Resolves: bz530385 sosreport copies all files from a relative directory link, possibly
  - Resolves: bzcopying unwanted directories
  - Resolves: bz499472 sos detect and report on cluster infrastructure when domain status invalid
  - Resolves: bz502442 There is a goes-back issue for sosreport
  - Resolves: bz507674 sosreport: one or more nfs export do not have a fsid attribute set
  - Resolves: bz516551 sosreport -k general.syslogsize=15 doesn't work
  - Resolves: bz478009 To add a sosplugin to collect soundcard related information
  - Resolves: bz479111 To add a sosplugin to collect lsb_release information
  - Resolves: bz482755 list of installed rpms is in non-std. format
  - Resolves: bz485191 Sos plugin to Collect Quagga configuration files
  - Resolves: bz485559 sos-patch to include /var/spool/cron information in system.py
  - Resolves: bz495934 Need to grab cobbler stuff in sos
  - Resolves: bz497588 sosreport mangles passwords in cluster.conf, breaking XML
  - Resolves: bz512889 sosreport to capture iscsi initiator settings if present.
  - Resolves: bz514294 include multicast information
  - Resolves: bz523263 sosreport captures the contents of /tftpboot.
  - Resolves: bz453151 sosreport enhancement
  - Resolves: bz443984 SOSreport does not gather SELinux audit logs 
  - Resolves: bz530385 copying unwanted files from symlink
  - Resolves: bz557851 capture qppid information


author: Adam Stokes <ajs at redhat dot com> - 1.7-9.27
changelog:
  - Resolves: bz433040 sosreports are too large, due to /var/log/httpd
  - Resolves: bz444839 FC device state information is omitted
  - Resolves: bz450997 gdm plugin
  - Resolves: bz460140 capture "dmesg" output
  - Resolves: bz460788 can not distinguish FV guests
  - Resolves: bz461351 smartcard related details
  - Resolves: bz462824 chkconfig test in cluster plugin fails on systems with non-US locale
  - Resolves: bz469626 sar plugin
  - Resolves: bz472857 plugin to collect snmp configurations
  - Resolves: bz472858 plugin for kdump configuration
  - Resolves: bz487308 Sos plugin to collect oddjob related details
  - Resolves: bz487628 Sos plugin to collect openssl related details
  - Resolves: bz488412 Sos plugin to collect wvdial and ppp related details
  - Resolves: bz503536 sosreport fails on minimal install without bzip2 installed
  - Resolves: bz238778 Add 'lspci -t' to set of lspci commands run
  - Resolves: bz466923 [sosreport] printing.py update needed
  - Resolves: bz480786 rhn plugin for sos should change paths according to recent monitoring change
  - Resolves: bz487113 /var/log/acpid is missed in SOS
  - Resolves: bz487116 plugin to collect nscd information
  - Resolves: bz487119 Patch to collect tftp related information
  - Resolves: bz487466 Add iscsi plugin to sos.
  - Resolves: bz487470 Add ntpdata plugin for sos.
  - Resolves: bz487474 tomcat5 plugin
  - Resolves: bz487476 Auditd related information
  - Resolves: bz487477 DHCP related information
  - Resolves: bz487478 Red Hat Hardware Test Suite related information
  - Resolves: bz487480 udev related information
  - Resolves: bz487481 PXE related information
  - Resolves: bz487482 VMWare related information
  - Resolves: bz487483 process accounting related information
  - Resolves: bz487484 MySQL related information
  - Resolves: bz487485 MRG Messaging related information
  - Resolves: bz487488 MRG GRID related information
  - Resolves: bz492072 sosreport does not include /var/log/pm/suspend.log
  - Resolves: bz497840 Unused snack import
  - Resolves: bz498474 sort output of installed-rpms 
  - Resolves: bz501842 sosreport is missing batch mode
  - Resolves: bz503172 Need to know the default version of jre
  - Resolves: bz476970 [RHEL5] 'sosreport -av' crashed Oracle RAC node
  - Resolves: bz461798 include Certificate system 7.1 plugin in sosreport
  - Resolves: bz461799 Addition of Directory Server sos plugins
  - Resolves: bz464207 postfix plugin for sos name does not fit naming convention
  - Resolves: bz464208 NEW sosreport plugin for dovecot.
  - Resolves: bz466819 plugin to add netconfig configuration to sosreport
  - Resolves: bz466947 add IPA plugin to sosreport
  - Resolves: bz469365 sosreport French translation of y/n prompt is wrong
  - Resolves: bz469820 sosreport should collect the result of ethtool -i,-k,-S
  - Resolves: bz472108 Anaconda plugin
  - Resolves: bz480302 Python sys.path problem
  - Resolves: bz475190 sos modifes ldap.conf
  - Resolves: bz475991 sosreport shouldn't require user input when plug-in diagnoses (potential) error
  - Resolves: bz477042 rh-upload-core does not upload unless the quiet flag is set
  - Resolves: bz487416 sosplugin to collect the details on cron including the system and user cron jobs
  - Resolves: bz487434 A sosplugin to gather the details on logrotate such as its status, its debug information and the configuration files.
  - Resolves: bz490186 xen plugin: is_running_xenstored function issues
  - Resolves: bz497206 FEAT: Add -kvm target for s.o.s report


author: Adam Stokes <astokes at redhat dot com> - 1.7-9.11
changelog:
  - Resolves: bz459845 collect krb5.conf
  - Resolves: bz457880 include output of xm list and xm list --long
  - Resolves: bz457919 add support for openswan and ipsec-tools


author: Adam Stokes <astokes at redhat dot com> - 1.7-9.6
changelog:
  - Resolves: bz445947 sysreport.legacy reports Cannot make temp dir
  - Resolves: bz452705 Add /root/anaconda-ks-cfg to sosreport archive
  - Resolves: bz445510 Do not rely on env to execute python
  - Resolves: bz386691 Need unattended way to run sosreport


author: Adam Stokes <astokes at redhat dot com> - 1.7-9.4
changelog:
  - Resolves: bz447890 regular expression error in hardware plugin
  - Resolves: bz446868 add support for emc devices
  - Resolves: bz453797 fails to generate fdisk -l
  - Resolves: bz433183 does not collect ext3 information
  - Resolves: bz444838 systool is passed deprcated arguments
  - Resolves: bz455096 add %{INSTALLTIME:date} to rpm --qf collection


author: Navid Sheikhol-Eslami <navid at redhat dot com> - 1.7-7
changelog:
  - Resolves: bz251927 SOS errata needs to be respin to match 4.6 code base
  - added extras/rh-upload-core script from David Mair <dmair@redhat.com>


author: Navid Sheikhol-Eslami <navid at redhat dot com> - 1.7-6
changelog:
  - more language fixes
  - added arabic, italian and french
  - package prepared for release
  - included sysreport as sysreport.legacy


author: Navid Sheikhol-Eslami <navid at redhat dot com> - 1.7-5
changelog:
  - package obsoletes sysreport and creates a link pointing to sosreport
  - added some commands in cluster and process plugins
  - fixed html output (wrong links to cmds, thanks streeter)
  - process: back down sleep if D state doesn't change
  - Resolves: bz241277 Yum Plugin for sos
  - Resolves: bz247520 Spelling mistake in sosreport output
  - Resolves: bz247531 Feature: plugin to gather initial ramdisk scripts
  - Resolves: bz248252 sos to support language localization
  - Resolves: bz241282 Make SOS for RHEL 4


author: Navid Sheikhol-Eslami <navid at redhat dot com> - 1.7-4
changelog:
  - catch KeyboardInterrupt when entering sosreport name
  - added color output for increased readability
  - list was sorted twice, removing latter .sort()


author: Navid Sheikhol-Eslami <navid at redhat dot com> - 1.7-3
changelog:
  - added preliminary problem diagnosis support
  - better i18n initialization
  - better user messages
  - more progressbar fixes
  - catch and log python exceptions in report
  - use python native commands to create symlinks
  - limit concurrent running threads


author: Navid Sheikhol-Eslami <navid at redhat dot com> - 1.7-1
changelog:
  - split up command outputs in sub-directories (sos_command/plugin/command instead of sos_command/plugin.command)
  - fixed doExitCode() calling thread.wait() instead of join()
  - curses menu is disabled by default
  - multithreading is enabled by default
  - major progressbar changes (now has ETA)
  - multithreading fixes
  - plugins class descriptions shortened to fix better in --list-plugins
  - rpm -Va in plugins/rpm.py sets eta_weight to 200 (plugin 200 longer than other plugins, for ETA calculation)
  - beautified command output filenames in makeCommandFilename()


author: Navid Sheikhol-Eslami <navid at redhat dot com> - 1.7-0
changelog:
  - curses menu disabled by default (enable with -c)
  - sosreport output friendlier to the user (and similar to sysreport)
  - smarter plugin listing which also shows options and disable/enabled plugins
  - require root permissions only for actual sosreport generation
  - fix in -k where option value was treated as string instead of int
  - made progressbar wider (60 chars)
  - selinux plugin is enabled only if selinux is also enabled on the system
  - made some errors less verbose to the user
  - made sosreport not copy files pointed by symbolic links (same as sysreport, we don't need /usr/bin/X or /sbin/ifup)
  - copy links as links (cp -P)
  - added plugin get_description() that returns a short decription for the plugin
  - guess sosreport name from system's name


author: Navid Sheikhol-Eslami <navid at redhat dot com> - 1.6-1
changelog:
  - Beautified output of --list-plugins.
  - GPL licence is now included in the package.
  - added python-devel requirement for building package
  - Resolves: bz241282 fixed incompatibility with python from RHEL4


author: Steve Conklin <sconklin at redhat dot com> - 1.4-1
changelog:
  - Fixed an error in option handling
  - Forced the file generated by traceroute to not end in .com
  - Fixed a problem with manpage
  - Added optional traceroute collection to networking plugin
  - Added clalance's patch to gather iptables info.
  - Fixes to the device-mapper plugin
  - Fixed a problem with installation of man page


author: Steve Conklin <sconklin at redhat dot com> - 1.3-3
changelog:
  - including patches to fix the following:
  - Resolves: bz219745 sosreport needs a man page
  - Resolves: bz219667 sosreport does not terminate cleanly on ^C
  - Resolves: bz233375 Make SOS flag the situation when running on a fully virtu...
  - Resolves: bz234873 rhel5 sos needs to include rpm-va by default
  - Resolves: bz219669 sosreport multi-threaded option sometimes fails
  - Resolves: bz219671 RFE for sosreport - allow specification of plugins to be run
  - Resolves: bz219672 RFE - show progress while sosreport is running
  - Resolves: bz219673 Add xen information gathering to sosreport
  - Resolves: bz219675 Collect information related to the new driver update model
  - Resolves: bz219877 'Cancel' button during option selection only cancels sele...


author: Steve Conklin <sconklin at redhat dot com> - 1.1-1
changelog:
  - Tighten permissions of tmp directory so only readable by creator bz_219657
  - Don't print message 'Problem at path ...'  bz_219654
  - Removed useless message bz_219670
  - Preserve file modification times bz_219674
  - Removed unneeded message about files on copyProhibitedList bz_219712


author: John Berninger <jwb at redhat dot com> - 0.1-3
changelog:
  - Added ftp, ldap, mail, named, samba, squid SOS plugins
  - Fixed various errors in kernel and hardware plugins


author: Deepak Bhole <dbhole@redhat.com> - 1:3.0-6jpp_1fc
changelog:
  - Added conditional native compilation.
  - Disable certain ssl related tests that are known to fail with libgcj.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.0-3.rc2.1jpp
changelog:
  - Update to 2.0rc2.
  - Manual subpackage.
  - Crosslink with local J2SE javadocs.
  - Own unversioned javadoc dir symlink.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.0-3.rc1.1jpp
changelog:
  - Update to 2.0rc1.
  - Include "jakarta-"-less jar symlinks for consistency with other packages.
  - Exclude example and contrib sources from main package, they're in -demo.


author: Ville Skyttä <ville.skytta at iki.fi> 2.0-0.20020909alpha1.1jpp
changelog:
  - 2.0alpha1 snapshot 20020909.
  - Use sed instead of bash extensions when symlinking jars during build.
  - Add distribution tag.
  - Require commons-logging instead of log4j.


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.0-4jpp
changelog:
  - renamed to jakarta-commons-httpclient
  - additional sources in individual archives
  - versioned dir for javadoc
  - no dependencies for javadoc package
  - dropped j2ee package
  - adapted to new jsse package
  - section macro


author: Adam Jackson <ajax@redhat.com> 6.5.1-7.10
changelog:
  - mesa-6.5.1-nonconformant-visual.patch: Don't warn about the non-
    conformant synthetic Composite visual (#442738)


author: Kristian <krh@redhat.com> - 6.5.1-6.fc6
changelog:
  - Add -fno-strict-aliasing to compiler flags for i965 driver.
  - Add post-6.5.1-i965-fixes.patch backport of i965 fixes from mesa CVS.


author: Kristian Høgsberg <krh@redhat.com> - 6.5.1-3.fc6
changelog:
  - Bump xorg-x11-proto-devel BuildRequires to 7.1-8 so we pick up the
    latest GLX_EXT_texture_from_pixmap opcodes.


author: Kristian Høgsberg <krh@redhat.com> 6.5.1-1.fc6
changelog:
  - Bump to 6.5.1 final release.
  - Drop libGLw subpackage, it is now in Fedora Extras (#188974) and
    tweak mesa-6.5.1-build-config.patch to not build libGLw.
  - Drop mesa-6.5.1-r300-smooth-line.patch, the smooth line fallback can
    now be prevented by enabling disable_lowimpact_fallback in
    /etc/drirc.
  - Drop mesa-6.4.1-radeon-use-right-texture-format.patch, now upstream.
  - Drop mesa-6.5-drop-static-inline.patch, workaround no longer necessary.


author: Kristian Høgsberg <krh@redhat.com> - 6.5.1-0.rc2.fc6
changelog:
  - Rebase to 6.5.1 RC2.
  - Get rid of redhat-mesa-driver-install and redhat-mesa-target helper
    scripts and clean up specfile a bit.


author: Kristian Høgsberg <krh@redhat.com> - 6.5.1-0.rc1.2.fc6
changelog:
  - Drop upstreamed patches mesa-6.5-texture-from-pixmap-fixes.patch and
    mesa-6.5-tfp-fbconfig-attribs.patch and fix
    mesa-6.4.1-radeon-use-right-texture-format.patch to not break 16bpp
    transparency.


author: Kristian Høgsberg <krh@redhat.com> 6.5-26.20060818cvs.fc6
changelog:
  - Pull the vtxfmt patch into the selinux-awareness patch, handle exec
    mem heap init failure correctly by releasing mutex.


author: Adam Jackson <ajackson@redhat.com> 6.5-25.20060818cvs.fc6
changelog:
  - mesa-6.5.1-r300-smooth-line.patch: Added, fakes smooth lines with aliased
    lines on R300+ cards, makes Google Earth tolerable.
  - mesa-6.5-force-r300.patch: Resurrect.


author: Adam Jackson <ajackson@redhat.com> 6.5-24.20060818cvs.fc6
changelog:
  - mesa-6.5.1-radeon-vtxfmt-cleanup-properly.patch: Fix a segfault on context
    destruction when selinux is enabled.


author: Adam Jackson <ajackson@redhat.com> 6.5-22.20060818cvs.fc6
changelog:
  - Update to pre-6.5.1 snapshot.
  - Re-add libOSMesa{,16,32}. (#186366)
  - Add BuildReq: on libXp-devel due to openmotif header insanity.


author: Mike A. Harris <mharris@redhat.com> 6.5-20.fc6
changelog:
  - Conditionalized libGLw inclusion with new with_libGLw macro defaulting
    to 1 (enabled) for now, however since nothing in Fedora Core uses libGLw
    anymore, we will be transitioning libGLw to an external package maintained
    in Fedora Extras soon.


author: Adam Jackson <ajackson@redhat.com> 6.5-17.fc6
changelog:
  - mesa-6.5-fix-linux-indirect-build.patch: Added.
  - mesa-6.5-fix-glxinfo-link.patch: Added.
  - Build libOSMesa never instead of inconsistently; to be fixed later.
  - Updates to redhat-mesa-target:
    - Always select linux-indirect when not building for DRI
    - Enable DRI to be built on PPC64 (still disabled in the spec file though)
    - MIT licence boilerplate


author: Mike A. Harris <mharris@redhat.com> 6.5-16.fc6
changelog:
  - Remove glut-devel dependency, as nothing actually uses it that we ship.
  - Added mesa-6.5-dont-libglut-me-harder-ok-thx-bye.patch to prevent libglut
    and other libs from being linked into glxgears/glxinfo even though they
    are not actually used.  This was the final package linking to freeglut in
    Fedora Core, blocking freeglut from being moved to Extras.
  - Commented all of the virtual provides in the spec file to document clearly
    how they should be used by other developers in specifying build and runtime
    dependencies when packaging software which links to libGL, libGLU, and
    libGLw. (#200069)


author: Adam Jackson <ajackson@redhat.com> 6.5-15.fc6
changelog:
  - Attempt to add selinux awareness; check if we can map executable memory
    and fail softly if not.  Removes the need for allow_execmem from huge
    chunks of the desktop.
  - Disable the r300 gart fix for not compiling.


author: Mike A. Harris <mharris@redhat.com> 6.5-13.fc6
changelog:
  - Added mesa-6.5-fix-opt-flags-bug197640.patch as 2nd attempt to fix OPT_FLAGS
    for (#197640).
  - Ensure that redhat-mesa-driver-install creates $DRIMODULE_DESTDIR with
    mode 0755.


author: Mike A. Harris <mharris@redhat.com> 6.5-12.fc6
changelog:
  - Maybe actually, you know, apply the mesa-6.5-glx-use-tls.patch as that might
    help to you know, actually solve the problem.  Duh.
  - Use {dist} tag in Release field now.


author: Mike A. Harris <mharris@redhat.com> 6.5-11
changelog:
  - Added mesa-6.5-glx-use-tls.patch to hopefully get -DGLX_USE_TLS to really
    work this time due to broken upstream linux-dri-* configs. (#193979)
  - Pass RPM_OPT_FLAGS via OPT_FLAGS instead of via CFLAGS also for (#193979)


author: Mike A. Harris <mharris@redhat.com> 6.5-10
changelog:
  - Bump libdrm-devel dep to trigger new ExclusiveArch test with the new package.
  - Use Fedora Extras style BuildRoot tag.
  - Added "Requires(post): /sbin/ldconfig" and postun to all runtime lib packages.


author: Kristian Høgsberg <krh@redhat.com> 6.5-7
changelog:
  - Update mesa-6.5-texture-from-pixmap-fixes.patch to include new
    tokens and change tfp functions to return void.  Yes, a new mesa
    snapshot would be nice.


author: Kristian Høgsberg <krh@redhat.com> 6.5-3
changelog:
  - Add mesa-6.5-noexecstack.patch to prevent assembly files from making
    libGL.so have executable stack.


author: Kristian Høgsberg <krh@redhat.com> 6.5-1
changelog:
  - Update to mesa 6.5 snapshot.
  - Use -MG for generating deps and some files are not yet symlinked at
    make depend time.
  - Drop mesa-6.4.2-dprintf-to-debugprintf-for-bug180122.patch and
    mesa-6.4.2-xorg-server-uses-bad-datatypes-breaking-AMD64-fdo5835.patch
    as these are upstream now.
  - Drop mesa-6.4.1-texture-from-drawable.patch and add
    mesa-6.5-texture-from-pixmap-fixes.patch.
  - Update mesa-modular-dri-dir.patch to apply.
  - Widen libGLU glob.
  - Reenable r300 driver install.
  - Widen libOSMesa glob.
  - Go back to patching config/linux-dri, add mesa-6.5-build-config.patch,
    drop mesa-6.3.2-build-configuration-v4.patch.
  - Disable sis dri driver for now, only builds on x86 and x86-64.


author: Mike A. Harris <mharris@redhat.com> 6.4.2-5
changelog:
  - Disable the expeimental r300 DRI driver, as it has turned out to cause
    instability and system hangs for many users.


author: Mike A. Harris <mharris@redhat.com> 6.4.2-2
changelog:
  - Added new "glx-utils" subpackage with glxgears and glxinfo (#173510)
  - Added mesa-6.4.2-dprintf-to-debugprintf-for-bug180122.patch to workaround
    a Mesa namespace conflict with GNU_SOURCE (#180122)
  - Added mesa-6.4.2-xorg-server-uses-bad-datatypes-breaking-AMD64-fdo5835.patch
    as an attempt to fix bugs (#176976,176414,fdo#5835)
  - Enabled inclusion of the *EXPERIMENTAL UNSUPPORTED* r300 DRI driver on
    x86, x86_64, and ppc architectures, however the 2D Radeon driver will soon
    be modified to require the user to manually turn experimental DRI support
    on with Option "dri" in xorg.conf to test it out and report all X bugs that
    occur while using it directly to X.Org bugzilla.  (#179712)
  - Use "libOSMesa.so.6.4.0604*" glob in file manifest, to avoid having to
    update it each upstream release.


author: Mike A. Harris <mharris@redhat.com> 6.4.2-1
changelog:
  - Updated to Mesa 6.4.2
  - Use "libGLU.so.1.3.0604*" glob in file manifest, to avoid having to update it
    each upstream release.


author: Mike A. Harris <mharris@redhat.com> 6.4.1-5
changelog:
  - Added missing "BuildRequires: expat-devel" for bug (#178525)
  - Temporarily disabled mesa-6.4.1-texture-from-drawable.patch, as it fails
    to compile on at least ia64, and possibly other architectures.


author: Kristian Høgsberg <krh@redhat.com> 6.4.1-4
changelog:
  - Add mesa-6.4.1-texture-from-drawable.patch to implement protocol
    support for GLX_EXT_texture_from_drawable extension.


author: Mike A. Harris <mharris@redhat.com> 6.4.1-3
changelog:
  - Manually copy libGLw headers that Mesa forgets to install, to fix (#173879).
  - Added mesa-6.4.1-libGLw-enable-motif-support.patch to fix (#175251).
  - Removed "Conflicts" lines from libGL package, as they are "Obsoletes" now.
  - Do not rename swrast libGL .so version, as it is the OpenGL version.


author: Mike A. Harris <mharris@redhat.com> 6.4.1-2
changelog:
  - Rebuild to ensure libGLU gets rebuilt with new gcc with C++ compiler fixes.
  - Changed the 3 devel packages to use Obsoletes instead of Conflicts for the
    packages the files used to be present in, as this is more friendy for
    OS upgrades.
  - Added "Requires: libX11-devel" to mesa-libGL-devel package (#173712)
  - Added "Requires: libGL-devel" to mesa-libGLU-devel package (#175253)


author: Mike A. Harris <mharris@redhat.com> 6.4.1-1
changelog:
  - Updated MesaLib tarball to version 6.4.1 from Mesa project for X11R7 RC4.
  - Added pkgconfig dependency.
  - Updated "BuildRequires: libdrm-devel >= 2.0-1"
  - Added Obsoletes lines to all the subpackages to have cleaner upgrades.
  - Added mesa-6.4.1-amd64-assyntax-fix.patch to work around a build problem on
    AMD64, which is fixed in the 6.4 branch of Mesa CVS.
  - Conditionalize libOSMesa inclusion, and default to not including it for now.


author: Jeremy Katz <katzj@redhat.com> 6.4-5
changelog:
  - fix directory used for loading dri modules (#173679)
  - install dri drivers as executable so they get stripped (#173292)


author: Mike A. Harris <mharris@redhat.com> 6.4-4
changelog:
  - Wrote redhat-mesa-source-filelist-generator to dynamically generate the
    files to be included in the mesa-source subpackage, to minimize future
    maintenance.
  - Fixed detection and renaming of software mesa .so version.


author: Mike A. Harris <mharris@redhat.com> 6.4-3
changelog:
  - Hack: autodetect if libGL was given .so.1.5* and rename it to 1.2 for
    consistency on all architectures, and to avoid upgrade problems if we
    ever disable DRI on an arch and then re-enable it later.


author: Mike A. Harris <mharris@redhat.com> 6.4-2
changelog:
  - Added mesa-6.4-multilib-fix.patch to instrument and attempt to fix Mesa
    bin/installmesa script to work properly with multilib lib64 architectures.
  - Set and export LIB_DIR and INCLUDE_DIR in spec file 'install' section,
    and invoke our modified bin/installmesa directly instead of using
    "make install".
  - Remove "include/GL/uglglutshapes.h", as it uses the GLUT license, and seems
    like an extraneous file anyway.
  - Conditionalize the file manifest to include libGL.so.1.2 on DRI enabled
    builds, but use libGL.so.1.5.060400 instead on DRI disabled builds, as
    this is how upstream builds the library, although it is not clear to me
    why this difference exists yet (which was not in Xorg 6.8.2 Mesa).


author: Mike A. Harris <mharris@redhat.com> 6.4-1
changelog:
  - Updated to new upstream MesaLib-6.4
  - Updated libGLU.so.1.3.060400 entry in file manifest
  - Updated "BuildRequires: libdrm-devel >= 1.0.5" to pick up fixes for the
    unichrome driver.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-5
changelog:
  - Fix mesa-libGL-devel to depend on mesa-libGL instead of mesa-libGLU.
  - Added virtual "Provides: libGL..." entries for each subpackage as relevant.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-4
changelog:
  - Added the mesa-source subpackage, which contains part of the Mesa source
    code needed by other packages such as the X server to build stuff.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-3
changelog:
  - Added Conflicts/Obsoletes lines to all of the subpackages to make upgrades
    from previous OS releases, and piecemeal upgrades work as nicely as
    possible.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-2
changelog:
  - Wrote redhat-mesa-target script to simplify mesa build target selection.
  - Wrote redhat-mesa-driver-install to install the DRI drivers and simplify
    per-arch conditionalization, etc.


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.61.1.11.11
changelog:
  - added and applied (temporally) patch10   fixToFontSecurityFix.patch.
   - fixing regression in fonts introduced by one security patch.
  - Resolves: rhbz#950383


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.39.1.11.11
changelog:
  - added and applied (temporally) one more patch to xalan/xerces privileges
   - patch9 jaxp-backport-factoryfinder.patch
  - will be upstreamed
  - Resolves: rhbz#950383


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.59.1.11.11
changelog:
  - Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
  - removed patch 9 -  removingOfAarch64.patch.patch - fixed upstream
  - removed patch10  patchToFixMalformed8007667.patch - upstreamed
  - Resolves: rhbz#950383


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.37.1.11.10
changelog:
  - Updated to icedtea6 1.11.10
  - rewritten java-1.6.0-openjdk-java-access-bridge-security.patch
  - excluded aarch64.patch
    - by patch 8 -  removingOfAarch64.patch.patch
  - due to old patch on rhel5 added patch10  patchToFixMalformed8007667.patch
   - fixing 8007667 patch  to be valid for rhel5 patch
  - Resolves: rhbz#950383


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-22.1
changelog:
  - Fixed caching of user and group names
  - Backported RFC 4515 escaping of LDAP queries
    Resolves: rhbz#916232
    Resolves: rhbz#916220


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-21
changelog:
  - Implement a new sudoers Defaults option to restore old command exec behavior
    Resolves: rhbz#840971


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-19
changelog:
  - Changed policycoreutils dependency to a context specific dependency
    (post & postun)
    Resolves: rhbz#846694


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-18
changelog:
  - don't use a temporary file when modifying nsswitch.conf
  - fix permissions on nsswitch.conf, if needed
    Resolves: rhbz#846631


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-14.2
changelog:
  - call restorecon after modifying nsswitch.conf in the postun scriplet
  - added policycoreutils dependency
    Resolves: rhbz#818585


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-14.1
changelog:
  - fixed `sudo -i' command escaping (#806073)
  - fixed multiple sudoHost LDAP attr. handlng (#740884)
    Resolves: rhbz#740884
    Resolves: rhbz#806073


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-11
changelog:
  - backported selinux support from 1.7.4p5 (#477185, #673157)
  - fixed bug in Runas_Spec group matching (#627543)
  - disable `sudo -l' output word wrapping if the output
    is piped (#697111)
  - fixed overwriting of errno after execve failure (#673157)
  - fixed segmentation fault (#673072)
  - add a sudoers entry to the nsswitch.conf file
    on install (and delete it on uninstall) (#617061)
    Resolves: rhbz#697111
    Resolves: rhbz#673157
    Resolves: rhbz#673072
    Resolves: rhbz#627543
    Resolves: rhbz#617061
    Resolves: rhbz#477185


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-10
changelog:
  - fixed regression in the sudoers parser (#580438)
  - merged .loopsegv3 and .includedir patches into .580438 patch
  - generated new toke.c from toke.l using flex (needed by #580438)
  - added !visiblepw with comment to sudoers
  - added ChangeLog, WHATSNEW and sudoers.ldap.5*
  - removed *.pod files
  - fixed printing of entries with multiple host entries on a single line (#603819)
  - fixed audit related code in configure.in (#583683)
  - removed unused patches
  - fixed a typo in the sudoers man-page (#602022)
    Resolves: rhbz#580438
    Resolves: rhbz#583911
    Resolves: rhbz#583644
    Resolves: rhbz#603819
    Resolves: rhbz#583683
    Resolves: rhbz#602022


author: Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p1-7
changelog:
  - added patch that fixes insufficient environment sanitization issue (#598154)
    Resolves: rhbz#598382


author: Daniel Kopecek <dkopecek@redhat.com> 1.7.2p1-1
changelog:
  - rebase to 1.7.2p1
    Resolves: #469653
    Resolves: #497873
    Resolves: #500942
    Resolves: #512191
    Resolves: #519017
    Resolves: #521778
    Resolves: #521903
  - sudo-1.7.2p1-negation.patch, don't apply negation to an already
    negated Cmnd_Alias member. Backported from upstream development
    version of sudo.
    Resolves: #453045


author: Daniel Kopecek <dkopecek@redhat.com> 1.6.9p17-4
changelog:
  - audit patch rediff (one chunk failed to apply due to fuzz=0)
  - Fix for incorrect handling of groups in Runas_User (#481720)
    Resolves: #481821


author: Peter Vrabec <pvrabec@redhat.com> 1.6.9p17-1
changelog:
  - rebase 1.6.8 -> 1.6.9
  - patches from F10
  - compiled with secure path(80215)
  - patches for sudoers file provided by sudo are removed,
    because we deliver our own sudoers in sources1
  - compiled without selinux support since there was no 
    selinux support in previous release
    Resolves: #447408


author: Peter Vrabec <pvrabec@redhat.com> 1.6.8p12-11
changelog:
  - fix segfaults when using ldap on s390,
    Resolves: #305331
  - add audit support,
    Resolves: #320671


author: Karel Zak <kzak@redhat.com> 1.6.8p12-7
changelog:
  - fix #198755 - make login processes (sudo -i) initialise session keyring
    (thanks for PAM config files to David Howells)
  - add IPv6 support (patch by Milan Zazrivec)


author: Dan Walsh <dwalsh@redhat.com> 1.6.8p12-3
changelog:
  - Remove selinux patch.  It has been decided that the SELinux patch for sudo is
  - no longer necessary.  In tageted policy it had no effect.  In strict/MLS policy
  - We require the person using sudo to execute newrole before using sudo.


author: Karel Zak <kzak@redhat.com> 1.6.8p9-1
changelog:
  - new version 1.6.8p9 (resolve #161116 - CAN-2005-1993 sudo trusted user arbitrary command execution)


author: Colin Walters <walters@redhat.com> 1.6.7p5-24
changelog:
  - Enhance sesh.c to fork/exec children itself, to avoid
    having sudo reap all domains.
  - Only reinstall default signal handlers immediately before
    exec of child with SELinux patch


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.6-2
changelog:
  - remove absolute path names from the PAM configuration, ensuring that the
    right modules get used for whichever arch we're built for
  - don't try to install the FAQ, which isn't there any more


author: Dave Lehman <dlehman@redhat.com> 1.0.14-1.el5_9
changelog:
  - require bitmap-fonts
    Resolves: rhbz#433858
  - make sure translations containing format specifiers are found
    Resolves: rhbz#314341


author: Dave Lehman <dlehman@redhat.com> 1.0.13-1.el5_9
changelog:
  - handle kdump service start/stop
    Resolves: rhbz#239324
  - only suggest reboot if memory reservation altered
    Related: rhbz#239324
  - preserve unknown config options
    Resolves: rhbz#253603
  - add 'halt' default action
    Related: rhbz#253603


author: Dave Lehman <dlehman@redhat.com> 1.0.12-1.el5_9
changelog:
  - prompt user for a PAE kernel for 32-bit xen with >4G memory (Jarod Wilson)
    Resolves: rhbz#284851


author: Dave Lehman <dlehman@redhat.com> 1.0.10-1.el5_9
changelog:
  - handle ia64 bootloader correctly
    Resolves: #220231
  - align memory requirements with documented system limits
    Resolves: #228711


author: Dave Lehman <dlehman@redhat.com> 1.0.7-1.el5_9
changelog:
  - rework memory constraints for increased flexibility (#215990)
  - improve consistency WRT freezing/thawing of widgets (#215991)
  - update translations (#216596)


author: Dave Lehman <dlehman@redhat.com> 1.0.5-1.el5_9
changelog:
  - fix install make target to specify modes where needed
  - remove unnecessary %preun
  - various specfile fixes to appease rpmlint


author: Dave Lehman <dlehman@redhat.com> 1.0.4-1
changelog:
  - all location types now in combo box (no text entry for type)
  - preserve comment lines from kdump.conf instead of writing config header
  - add hicolor icon from Diana Fong


author: Dave Lehman <dlehman@redhat.com> 1.0.2-1
changelog:
  - add support for "core_collector" and "path" handlers
  - give choices of "ssh" and "nfs" instead of "net"
  - validate results of edit location dialog
  - add choice of "none" to default actions
  - remove "ifc" support since it's gone from kexec-tools
  - update kdump config file header
  - fix a couple of strings that weren't getting translated


author: Dave Lehman <dlehman@redhat.com> 1.0.1-1
changelog:
  - Fix bugs in writeDumpConfig and writeBootloaderConfig
  - Fix handling of pre-existing "ifc" and "default" directives
  - Always leave network interface checkbutton sensitive
  - Various minor fixes


author: Dave Young <dyoung@redhat.com> - 1.102pre-159
changelog:
  - Support multipath dump target, Resolves: bz587361
  - do not add same network device multiple time to "interface" file, Resolves: bz587361


author: Dave Young <dyoung@redhat.com> - 1.102pre-158
changelog:
  - document the supported fs types in kdump.conf man page, Resolves: Bug 813345
  - Add document to suggest using label and uuid, Resolves: bz716340
  - remote dumping fix for restricted shell on remote machine, Resolves: bz801496
  - Warn on non-makedumpfile core collectors for raw dump, Resolves:  Bug 832017


author: Dave Young <dyoung@redhat.com> - 1.102pre-157
changelog:
  - Handle /var partition automatically, Resolves: bz788678
  - Avoid parsing kdump.conf twice, Resolves: bz788678
  - Replace $config_val with $DUMP_TARGET in net dump, Resolves: bz788678
  - Replace $config_val with $DUMP_TARGET in raw dump, Resolves: bz788678
  - Replace $config_val and $config_opt with $DUMP_TARGET and $DUMP_FSTYPE , Resolves: bz788678
  - document crashkernel=X does not work on RHEL5, Resolves: bz732128
  - add ext* kernel modules, Resolves: bz809983
  - Always add IP address in the crash directory, Resolves: bz752930
  - Add missing default action "shell" in kexec-kdump-howto.txt, Resolves: bz770758


author: Dave Young <dyoung@redhat.com> - 1.102pre-156
changelog:
  - check raw partition before starting kdump service, resolve bug 716386.
  - unify network starting code for iscsi, resolve bug 771829.


author: Neil Horman <nhorman@redhat.com> - 1.102pre-72
changelog:
  - Picked up some more fixes for HP systems (bz 277531)
  - Initialized machdep info for dump-dmesg (bz 475414)


author: Neil Horman <nhorman@redhat.com> -1.102pre-63
changelog:
  - Update kdump initscript to offer condrestart (bz 494483)
  - Update mkdumprd to use hostnames for ssh (bz 493690)


author: Neil Horman <nhorman@redhat.com> -1.102pre-59
changelog:
  - Fixed some bad status msgs on ssh target (bz 466450)
  - Fixed ability to detect md arrays (bz 479211)


author: Neil Horman <nhorman@redhat.com> -1.102pre-58
changelog:
  - Add --noio for HP rx series boxes in spec file (bz 277531)
  - Add fix for newer EFI firmware on ia64 (bz 473730)
  - Add fix to mkdumprd for newline in ifcfg files (bz 476063)


author: Jarod Wilson <jarod@redhat.com> -1.102pre-52
changelog:
  - Abort mkdumprd if devices in fstab can't be found (bz 472575)
  - Fix IDE CD-ROM hang fix further, add hdX=noprobe for the
    non-cdrom hdX's (bz 254163)


author: Neil Horman <nhorman@redhat.com> -1.102pre-45
changelog:
  - Fixed ability to drop to shell (bz 465453)
  - Fixed typo in changelog (bz 465445)
  - Fixed ability to handle raid5 partitions (bz 465361)


author: Neil Horman <nhorman@redhat.com> -1.102pre-41
changelog:
  - Fix kdump.conf man page to correct default directive (bz 463404)
  - Fix makedumpfile to not build wrong filter bitmap (bz 462864)


author: Jarod Wilson <jarod@redhat.com> -1.102pre-39
changelog:
  - Fix failure to capture vmcore when a panic triggers while
    an IDE CD-ROM drive is busy (bz254163)


author: Neil Horman <nhorman@redhat.com> -1.102pre-33
changelog:
  - Fix mkdumprd to support options directive (bz 459686)
  - Update kdump.conf man page to clarify msh use (bz 459622)


author: Neil Horman <nhorman@redhat.com> -1.102pre-23
changelog:
  - Fixed ppc64 kexec to make a page_size section for rtas (bz 438056)
  - Added udev rules to restart kdump on mem/cpu hotplug (bz 446423)


author: Neil Horman <nhorman@redhat.com> -1.102pre-22
changelog:
  - Start here for 5.3 errata
  - Fixed mkdumprd to wait for critical bdevs (bz 446279)
  - Fixed mkdumprd to not spew ld.conf warnings (bz 438459)
  - Fixed mkdumprd to not do extra efirtc create (bz 438755)
  - Enhanced mkdumprd to display progress (bz 223892)
  - Fixed mkdumprd to handle non-default lvm names (bz 360111)
  - Fixed howto to reflect correct scp use (bz 440983)
  - Fixed mkdumprd man page (bz 444824)


author: Neil Horman <nhorman@redhat.com> -1.102pre-1
changelog:
  - Update makedumpfile to use vmcoreinfo information (bz 253852)
  - Update kexec-tools to latest testing tree from horms (bz 253852)
  - Add vmcoreinfo retrieval patch (bz 253852)
  - Update makedumpfile to 1.2.0 to use vmcoreinfo (bz 253852)
  - modify mkdumprd to call makedumpfile properly w/ vmcoreinfo (bz 253852)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-194.4
changelog:
  - Use PAE kernel for i686 xen kdump if mem > 4GB (bz 284821)
  - Warn users in firstboot if they need kernel-PAE (bz 284841)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-194.1
changelog:
  - Add support for dumping to partitions on drives attached to cciss
    and cpqarray controllers (bz 228685)
  - Minor updates to kdump initscript for xen kdump support (bz 244301)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-194
changelog:
  - Update kdump init script to look for crash kernel reservation in
    /proc/iomem so we can start up on xen kernels too (bz 250803)


author: Neil Horman <nhorman@redhat.com> - 1.101-192
changelog:
  - Update makedumpfile to version 1.1.1 (bz 248235)
  - reconcile mkdumprd options w/ man page (bz 247493)
  - Fix some doc formatting (bz 247552)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-188
changelog:
  - Fix regression in network dump setup introduced by changes to
    support adding arbitrary kernel modules (bz 223929)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-187
changelog:
  - Fix up firstboot memory reservation detection for ppc64 (bz 245980)
  - Minor formatting fix for post-script feature
  - Don't allow user to try to set up kdump on ia64 xen (not supported)
  - Nudge minimum allowed firstboot spinner values down a bit, but
    present same defaults as we always have


author: Jarod Wilson <jwilson@redhat.com> - 1.101-185
changelog:
  - Add translations for firstboot kdump module (bz 215318)
  - Update kexec-kdump-howto.txt with new options


author: Jarod Wilson <jwilson@redhat.com> - 1.101-184
changelog:
  - Add ability to specify arbitrary kernel modules that should be
    included in kdump initrd (bz 223929)
  - Add support for running a kdump post-capture script (bz 224101)
  - Fix regression with default/empty kdump.conf introduced by adding
    support for halt option


author: Jarod Wilson <jwilson@redhat.com> - 1.101-183
changelog:
  - Add halt option to default actions in kdump initrd (bz 224098)
  - Fix panic kernel load segfault regression on ppc64 (bz 245392)
  - A few minor spec consistency clean-ups


author: Neil Horman <nhorman@redhat.com> - 1.101-166
changelog:
  - Include mkdumprd man page (bz 223729)
  - Fix kdump.conf perms 
  - Fix documentation to reference other sources (bz 228861)
  - Fix mkdumprd typo (bz 224623)
  - Fix mkdumprd to use getent (bz 223247)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-164
changelog:
  - Touch kdump.conf when kernel-kdump is installed to trigger
    proper kdump initrd creation on ppc64 (bz 217908)


author: Neil Horman <nhorman@redhat.com> - 1.101-156
changelog:
  - Fixing ppc64 memory range sizing (bz 220626)
  - Adding doc content to prevent use of vfat/msdos fs as dump targets


author: Jarod Wilson <jwilson@redhat.com> - 1.101-155
changelog:
  - Fix ia64/elilo boot param updating in firstboot module (bz 220351)
  - Set min/max mem in firstboot module to zero if running on xen kernel


author: Neil Horman <nhorman@redhat.com> - 1.101-151
changelog:
  - Removing kcp directory creation from build
  - Updating ia64 phdr patch to upstream version (bz 218503)


author: Neil Horman <nhorman@redhat.com> - 1.101-147
changelog:
  - Fixed some typos in kdump.conf
  - Fixed propogate command when target .ssh dir doesn't exist (bz 219526)


author: Neil Horman <nhorman@redhat.com> - 1.101-144
changelog:
  - Update to makedumpfile-1.0.7 to fix ELF32/64 issue (bz 218325)
  - Update spec file to build makedumpfile for ppc64
  - remove strip command from specfile to get debuginfo for makedumpfile


author: Neil Horman <nhorman@redhat.com> - 1.101-141
changelog:
  - Fixed firstboot to properly disable service (bz 216430)
  - Fixed initscript to properly set elf header size (bz 217780)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-137
changelog:
  - Fix up firstboot module spinner limits (bz 217744)
  - Added check to make sure net interfaces are up
  - Added feature to allow for post link up sleep (bz 216736)


author: Neil Horman <nhorman@redhat.com> - 1.101-127
changelog:
  - Fix mkdumprd to determine net driver name in absence of modalias (bz 215060)
  - Fix mkdumprd to check exit code of dd on raw target (bz 215061)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-123
changelog:
  - Update documentation to detail setting up raw partition, dedicated
    file system, nfs and ssh dumps (bz 198841)
  - Use dedicated key for ssh dumps
  - Enable ssh dumps using non-root user on destination system
  - Rewrap kdump.conf to under 80 chars per line


author: Neil Horman <nhorman@redhat.com> - 1.101-120
changelog:
  - supress kexec messages from stderr (bz 212410)
  - fix mkdumprd to present proper name when run with --version (bz 213695)


author: Neil Horman <nhorman@redhat.com> - 1.101-116
changelog:
  - further cleanups on firstboot_kdump.py (bz 213494)
  - modify status function in kdump.init to report no support (bz 212744)


author: Neil Horman <nhorman@redhat.com> - 1.101-113
changelog:
  - Fixing failed execs to grubby + chkconfig in firstboot (bz 212734)
  - Fix startup on xen kernel to properly indicate lack of support (bz 212744)


author: Neil Horman <nhorman@redhat.com> - 1.101-107
changelog:
  - Removing old hack patch for relocatable kernels
  - Rediffing other patches to work with previous patch removed


author: Neil Horman <nhorman@redhat.com> - 1.101-100
changelog:
  - Update kdump initscript to do FAILED/OK printing to console (bz 211303)
  - remove initial rpm install initramfs build clause in initscript (bz 211350)


author: Neil Horman <nhorman@redhat.com> - 1.101-97
changelog:
  - Fix up initscript to add ability to propagate ssh keys
  - Fix up mkdumprd to indicate need to run service kdump propagate on err
  - Add proper OK/FAIL output to start/stop routines


author: Neil Horman <nhorman@redhat.com> - 1.101-94
changelog:
  - Fixing EFI bug on ia64 (bz 210472)
  - Fixed minor bug in rename_interface script to reset MASTER
  - Fixed vlan device renaming in map_interface
  - Adjusted interfaces file for ifup sensitivity to static spec


author: Neil Horman <nhorman@redhat.com> - 1.101-81
changelog:
  - update mkdumprd to detect missing debuginfo pkg (bz 209342)
  - update mkdumprd to use new mkdumpfile systam (bz 209342)
  - strip makedumpfile to make smaller initramfs
  - fix check with makedumpfile to use supported dump targets
  - write to vmcore-incomplete and move to vmcore (bz 209465)
  - remove ifc cruft from mkdumprd


author: Neil Horman <nhorman@redhat.com> - 1.101-80
changelog:
  - Update makedumpfile to version 1.0.1 with several fixes/updates
  - remove now obsolete kcp utilty from build


author: Neil Horman <nhorman@redhat.com> - 1.101-78
changelog:
  - Removed setquiet from init script (bz 209198)
  - Fixed up docs in kdump.conf (bz 209190)
  - Corrected block device creation logic (bz 209162)
  - Fixed date format (bz 209189)


author: Neil Horman <nhorman@redhat.com> - 1.101-75
changelog:
  - Update mkdumprd to support bonding from initramfs
  - Update mkdumprd to support finding root filesystems by uuid/label


author: Neil Horman <nhorman@redhat.com> - 1.101-66
changelog:
  - remove args-linux from kdump.init standard args (bz 206355)
  - fixup some kdump initscript exit codes (bz 206342)


author: Neil Horman <nhorman@redhat.com> - 1.101-63
changelog:
  - Update mkdumprd to include an /etc/passwd file
  - Update mkdumprd to unmount /mnt before trying to do rootfs mount


author: Neil Horman <nhorman@redhat.com> - 1.101-62
changelog:
  - Update kdump.init to check kdump.status on startup op
  - Update kdump.init to include maxcpus=1 on KDUMP_COMMANDLINE
  - Update kdump.init to rebuild initrd if none found 
  - Update mkdumprd to universally include /bin/cp


author: Neil Horman <nhorman@redhat.com> - 1.101-55
changelog:
  - update mkdumprd to properly handle scp and nfs dumping
  - fix typo in kcp.c
  - update docs in kdump.conf to reflect new ifc parameter


author: Jarod Wilson <jwilson@redhat.com> - 1.101-46
changelog:
  - ppc64 fixups:
    - actually build ppc64 binaries (bug 203407)
    - correct usage output
    - avoid segfault in command-line parsing
  - install kexec man page
  - use regulation Fedora BuildRoot


author: Neil Horman <nhorman@redhat.com> - 1.101-45
changelog:
  - fixed typo in mkdumprd for bz 202983
  - fixed typo in mkdumprd for bz 203053
  - clarified docs in kdump.conf with examples per bz 203015


author: Thomas Graf <tgraf@redhat.com> - 1.101-15
changelog:
  - Don't add kdump service by default, let the user manually add it to
    avoid everyone seeing a warning.


author: Thomas Graf <tgraf@redhat.com> - 1.101-10
changelog:
  - kdump7.patch
     o Remove elf32 core headers support for x86_64
     o Fix x86 prepare elf core header routine
     o Fix ppc64 kexec -p failure for gcc 4.10
     o Fix few warnings for gcc 4.10
     o Add the missing --initrd option for ppc64
     o Fix ppc64 persistent root device bug
  - Remove --elf32-core-headers from default configuration, users
    may re-add it via KEXEC_ARGS.
  - Remove obsolete KEXEC_HEADERS


author: Jeff Moyer <jmoyer@redhat.com> - 1.101-8
changelog:
  - Fix the service stop case.  It was previously unloading the wrong kernel.
  - Implement the "restart" function.
  - Add the "irqpoll" option as a default kdump kernel commandline parameter.
  - Create a default kernel command line in the sysconfig file upon rpm install.


author: Jeff Moyer <jmoyer@redhat.com> - 1.101-4
changelog:
  - Build for x86_64 as well.  Kdump support doesn't work there, but users
    should be able to use kexec.


author: Ray Strode <rstrode@redhat.com> 2.16.0-59.1
changelog:
  - Don't try to pre-create directories that are internal
    implementation details of X.
    Resolves: #997619 CVE-2013-4169


author: Ray Strode <rstrode@redhat.com> - 1:2.16.0-49
changelog:
  Resolves: #474588
  - Don't crash if defined extended input device is unplugged
    Patch by Olivier Fourdan.


author: Ray Strode <rstrode@redhat.com> - 1:2.16.0-46
changelog:
  Resolves: #215855
  - Work around issue in SECMOD_CancelWait() that was preventing
    smart card helper from exiting


author: Ray Strode <rstrode@redhat.com> - 1:2.16.0-42
changelog:
  Resolves: #223192
  - Drop even more consoles message translations that were found
    during qa testing


author: Ray Strode <rstrode@redhat.com> - 1:2.16.0-40
changelog:
  Resolves: #210827
  - Only honor cancel requests when blocking in the pam conversation
    waiting for user input (the only time it makes sense to cancel).
    Doing it at other times was causing spurious "authentication failure"
    messages.


author: Ray Strode <rstrode@redhat.com> - 1:2.16.0-38
changelog:
  Resolves: #223192
  - Drop translations of console messages in locales that the console
    doesn't support


author: Ray Strode <rstrode@redhat.com> - 1:2.16.0-35
changelog:
  Resolves: #232896
  - Remove unneccesary code that was creating spurious audit
    entries.  Patch by Tomas Mraz.
  - apply patch mentioned in last changelog entry


author: Ray Strode <rstrode@redhat.com> - 1:2.16.0-30
changelog:
  Resolves: #220370
  - add function prototypes to fix crash in language selector on
  x86-64.  Patch by Bill Nottingham.


author: Ray Strode <rstrode@redhat.com> - 1:2.16.0-24
changelog:
  Resolves: #210378
  - The patch from -23 and -23 needed a bit of work to get the
    entire screen to update.


author: Ray Strode <rstrode@redhat.com> - 1:2.16.0-16.el5
changelog:
  - have security token monitor helper process kill itself when
    the communication pipe to the main process goes away (bug
    210677).


author: Ray Strode <rstrode@redhat.com> - 1:2.16.0-15.el5
changelog:
  - desensitize entry fields until pam asks for input, so if pam
    doesn't initially ask for input (like in smart card required
    mode) the user can't type something and confuse gdm (bug 201344)


author: Karsten Hopp <karsten@redhat.com> - 1:2.15.10-2.fc6
changelog:
  - buildrequire inttools as this isn't a requirement of scrollkeeper anymore
    and thus missing from the buildroot


author: Ray Strode <rstrode@redhat.com> - 1:2.15.6-14
changelog:
  - fix face browser
    (http://bugzilla.gnome.org/show_bug.cgi?id=349640)
  - fix error message reporting
    (http://bugzilla.gnome.org/show_bug.cgi?id=349758)


author: Ray Strode <rstrode@redhat.com> - 1:2.15.6-13
changelog:
  - simply all the security token code by only using one pam stack
  - drop lame kill on token removal feature


author: Ray Strode <rstrode@redhat.com> - 1:2.15.6-12
changelog:
  - move authcookies out of home directories to prevent problems
    on nfs/afs mounted home directories (bug 178233).


author: Ray Strode <rstrode@redhat.com> - 1:2.15.6-6
changelog:
  - fix off-by-one in the process-all-ops patch that was causing
    an anoying dialog to pop up on each login


author: Ray Strode <rstrode@redhat.com> 1:2.15.5-2
changelog:
  - add patch to process all operations when more than one comes
    in really quickly
  - move default "Please enter your username" message to the
    greeter instead of the slave so that it doesn't get stacked if
    a pam module has a non default message
  - add new message for reseting the current login operation
    (like the cancel button does, but accessible via the gdm fifo)


author: Ray Strode <rstrode@redhat.com> - 1:2.13.0.9-1
changelog:
  - Update to 2.13.0.9
  - Use new %post section, written by 
    Michal Jaegermann <michal@harddata.com> (bug 183082)


author: Ray Strode <rstrode@redhat.com> - 1:2.13.0.7.0.2006.02.12-1
changelog:
  - update to cvs snapshot
  - move gdm to /etc instead of /etc/X11
  - move custom gdm.conf to sysconfdir instead of symlinking from
    datadir (bug 180364)


author: Ray Strode <rstrode@redhat.com> - 1:2.13.0.4-3
changelog:
  - migrate X server configuration for pre-modular X configurations.
    Problems reported by Dennis Gregorovic <dgregor@redhat.com>


author: Ray Strode <rstrode@redhat.com> - 1:2.8.0.4-11
changelog:
  - Don't use X session / setup files anymore.
  - Don't install early login init scripts
  - remove xsri dependency
  - don't prune language lists anymore


author: Ray Strode <rstrode@redhat.com> 1:2.8.0.4-7
changelog:
  - zero-initialize message buffer,
    bug fixed by Josh Parson (jbparsons@usdavis.edu) (bug 160603)
  - fix typo in redhat-artwork requires line


author: Ray Strode <rstrode@redhat.com> 1:2.8.0.4-5
changelog:
  - bump redhat-artwork requirement to get rid of the boot
    throbber for now, since it seems to have reappeared
    mysteriously (bug 171025)


author: Ray Strode <rstrode@redhat.com> 1:2.6.0.8-16
changelog:
  - Make sure username/password incorrect message gets displayed
    (bug 158127).
  - reread system locale before starting gdm in early login mode 
    (bug 158376).


author: Ray Strode <rstrode@redhat.com> 1:2.6.0.8-12
changelog:
  - Fix processing of non-ascii characters that got broken
    in 2.6.0.8-11, found by Miloslav Trmac <mitr@redhat.com>,
    (bug 156590).


author: Ray Strode <rstrode@redhat.com> 1:2.6.0.8-11
changelog:
  - Fix halt command (bug 156299)
  - Process all messages sent to the greeter in a read, not just
    the first


author: Ray Strode <rstrode@redhat.com> 1:2.6.0.8-9
changelog:
  - Change default standard greeter theme to clearlooks and 
    default graphical greeter theme to Bluecurve specifically.

  - Change default path values (bug 154280)


author: Ray Strode <rstrode@redhat.com> 1:2.6.0.8-7
changelog:
  - calling gdm_debug and g_strdup_printf from signal handlers are
    bad news (Spotted by Mark McLoughlin <markmc@redhat.com>).


author: Matthias Clasen <mclasen@redhat.com> 1:2.6.0.8-4
changelog:
  - Don't do early-login if firstboot is going to run
  - Make early-login work with timed and automatic logins


author: Ray Strode <rstrode@redhat.com> 1:2.6.0.8-2
changelog:
  - touch /var/lock/subsys/gdm-early-login so gdm gets killed on
    runlevel changes (bug 154414)
  - don't try to use system dpi settings for canvas text (bug 127532)
  - merge resource database from displays other than :0


author: Ray Strode <rstrode@redhat.com> 1:2.6.0.5-9
changelog:
  - Look up and use username instead of assuming that user entered 
    login is cannonical.  Patch from
    Mike Patnode <mike.patnode@centrify.com> (fixes bug 141380).


author: Mark McLoughlin <markmc@redhat.com> - 1:2.6.0.0-3
changelog:
  - Update the "use switchdesk" message to only be display when
    switchdesk-gui is installed and to not reference a non existant
    menu item (bug #121460)


author: Colin Walters <walters@redhat.com> 1:2.6.0.0-2
changelog:
  - Always put session errors in /tmp, in preparation for
    completely preventing gdm from writing to /home/


author: Warren Togami <wtogami@redhat.com> 1:2.4.4.5-8
changelog:
  - patch30 xdmcp_session counter fix from gdm-2.5.90.0 #110315
  - automake14 really needed, not automake
  - BR libcroco-devel, libcroco-devel, libattr-devel, gettext
  - conditionally BR libselinux-devel
  - explicit epoch in all deps
  - make the ja.po time format change with a sed expression rather than
    overwriting the whole file (Petersen #113995)


author: George Lebl <jirka@5z.com> 1:2.4.2.102-1
changelog:
  - updated to 2.4.2.102
  - removed outdated patches
  - Use Xsetup_0 only for :0 since that's the way it works
    for xdm
  - remove the gnome.desktop file, its going into gnome-session


author: Havoc Pennington <hp@redhat.com> 1:2.4.1.6-1
changelog:
  - update to latest bugfix version on george's advice
  - remove setlocale patch that's upstream
  - remove console setup patches that are upstream


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Run the error dialogs under /bin/sh --login, so we
    get lang.sh, and thus unicode_start running. Fixes
    the X-doesn't-start dialog showing up as random
    blinking characters.


author: Matt Wilson <msw@redhat.com> 1:2.4.1.1-3
changelog:
  - fix pam.d entry, pam_env wasn't properly patched
  - disable optimizations on x86_64 to work around gcc bug


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 2.4.1.0
  - add patch from george to ask "are you sure?" for shutdown/reboot since it's now just one click away


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 2.4.0.12
  - update new patch for no-utf8-in-cjk
  - drop patch to photo setup, now upstream
  - drop confdocs patch now upstream
  - move all the gdm.conf changes into single "rhconfig" patch
  - remove "sid-fix" patch now upstream


author: Nalin Dahyabhai <nalin@redhat.com> 2.4.0.7-14
changelog:
  - remove the directory part of module specifications from the PAM config files,
    allowing the same PAM config to work for either arch on multilib boxes


author: Havoc Pennington <hp@redhat.com>
changelog:
  - put /usr/X11R6/bin in path for now fixes #72781
  - use proper i18n algorithm for word wrap, #71937
  - remove greek text from language picker due to lack 
    of greek font
  - reorder PAM config file #72657


author: Havoc Pennington <hp@redhat.com>
changelog:
  - improve gdmsetup icon
  - remove GNOME session, we will instead put it in gnome-session
  - apply patch from george to make gdmphotosetup file selector 
    work


author: Elliot Lee <sopwith@redhat.com> 2.4.0.7-6
changelog:
  - Patches for #64902, #66486, #68483, #71308
  - post-install script changes from the gdm.spec mentioned in #70965
  - noreplace on gdm.conf for #71309


author: Havoc Pennington <hp@redhat.com>
changelog:
  - put in a patch from george to fix some setsid()/kill() confusion
    possibly fixing #72295
  - turn off UseCirclesInEntry for now, fixes #72433


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 2.4.0.7 with bugfixes George kindly did for me, 
    including mnemonics for the graphical greeter
  - use Wonderland gtk theme for the nongraphical greeter
  - remove patches that are now upstream


author: Havoc Pennington <hp@redhat.com>
changelog:
  - update rhconfig patch
  - use pam_timestamp for the config tool
  - link to a desktop file in redhat-menus
  - update .gnome2 patch, filed upstream bug
  - 2.4.0.4
  - rebuild with new gail, librsvg2


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Require redhat-artwork, make the default greeter theme Wonderland
  - Look for all configuration in .gnome2 not .gnome. This avoids problems 
    with changes in the set of session/lang.
  - Remove English from locale.alias, make most locales UTF-8
  - Call find_lang with the right name


author: Havoc Pennington <hp@redhat.com>
changelog:
  - rebuild for new libs
  - put gdm-autologin pam config file in file list, hope
    its absence wasn't deliberate
  - use desktop-file-install


author: Havoc Pennington <hp@redhat.com>
changelog:
  - clean up some format string mess, and don't
    log username to syslog, #5681
  - own some directories #50692


author: Havoc Pennington <hp@redhat.com>
changelog:
  - After, oh, 2 years or so, finally upgrade version and set
    release to 1. Remove all hacks and patches, pretty much;
    this will break a few things, will be putting them back 
    via GNOME CVS. All changes should go in 'gdm2' module in 
    CVS for now.

    This RPM enables all kinds of features that I'm going to turn
    off shortly, so don't get excited about them. ;-)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reinitialize pam credentials after calling initgroups() -- the
    credentials may be group memberships


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Apply security errata patch we released for 6.2
  - Add Gnome.session back, don't know when it disappeared or why


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Modify Default.session and Failsafe.session not to add -login option to bash
  - exec the session scripts with the user's shell with a hyphen prepended
  - doesn't seem to actually work yet with tcsh, but it doesn't seem to 
    break anything. needs a look to see why it doesn't work


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Try to fix bug 8877 by clearing the message below 
    the entry box when the prompt changes. may turn 
    out to be a bad idea.


author: Michael Fulbright <drmike@redhat.com>
changelog:
  - fix to handling ancient gdm config files with non-standard language specs
  - dont close display connection for xdmcp connections, else we die if remote
    end dies.


author: Jonathan Blandford <jrb@redhat.com>
changelog:
  - added patch from otaylor to not call gtk funcs from a signal.
  - added patch to tab when username not added.
  - added patch to center About box (and bring up only one) and ignore "~"
    and ".rpm" files.


author: Michael Fulbright <drmike@redhat.com>
changelog:
  - remove GNOME/KDE/AnotherLevel session scripts, these have been moved to
    the appropriate packages instead.
  - added patch to make option menus always active (security problem otherwise)
  - added jrb's patch to disable stars in passwd entry field


author: Michael Fulbright <drmike@redhat.com>
changelog:
  - added session files for GNOME/KDE/AnotherLevel/Default/Failsafe
  - patched gdmgreeter to not complete usernames
  - patched gdmgreeter to not safe selected session permanently
  - patched gdmgreeter to center dialog boxes


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Updated patches for 1.0.0
  - Fixed some problems in 1.0.0 with installation directories
  - moved /usr/var/gdm /var/gdm


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-2
changelog:
  - Run the cmirror init script when starting cluster nodes that use shared storage.
  - Related: bz430737


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-5
changelog:
  - Fixed bz253341 (failure to start cluster service which had been modifed for correction)
  - Resolves: bz253341


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-4
changelog:
  - Fixed bz230451 (fence_xvm.key file is not automatically created. Should have a least a default)
  - Resolves: bz230451


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-1
changelog:
  - Performance improvements.
  - Make the clustermon init script more LSB-compliant
  - Related: bz243701


author: Ryan McCabe <rmccabe@redhat.com> 0.9.2-5
changelog:
  - Version bump
  - Related: bz229027, bz230447, bz230452, bz230454, bz230457,
  - Related: bz230461, bz230469, bz228637, bz233326, bz225747,
  - Related: bz225206, bz225164, bz227758


author: Stanko Kupcevic <kupcevic@redhat.com> 0.9.2-4
changelog:
  - Do not fail on i18n machines
  - Fixed bz225747 (Create/delete cluster - then access disk on node = Generic error on host: cluster tools: cman_tool errored)
  - Fixed bz230454 (Unable to configure a virtual service)
  - Resolves: bz225747, bz230454


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-12
changelog:
  - Move modcluster from /usr/sbin to /usr/libexec
  - Implement support for Cluster Suite 5
  - Don't auto-start modclusterd after installation, do it manually


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-26.1
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-23
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-22
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4109 - double free in policy checks (#771771)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-21
changelog:
  - add known answer test for SHA2 algorithms (#740866)
  - make default private key length in certificate Makefile 2048 bits
    (can be changed with PRIVATE_KEY_BITS setting) (#745410)
  - fix incorrect return value in parse_yesno() (#726593)
  - added DigiCert CA certificates to ca-bundle (#735819)
  - added a new section about error states to README.FIPS (#628976)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-19
changelog:
  - presort list of ciphers available in SSL (#688901)
  - accept connection in s_server even if getaddrinfo() fails (#561260)
  - point to openssl dgst for list of supported digests (#608639)
  - fix handling of future TLS versions (#599112)
  - added VeriSign Class 3 Public Primary Certification Authority - G5
    and StartCom Certification Authority certs to ca-bundle (#675671, #617856)
  - upstream fixes for the CHIL engine (#622003, #671484)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-17
changelog:
  - fix CVE-2010-4180 - completely disable code for
    SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG (#659462)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-15
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-14
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-13
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-8
changelog:
  - support multiple CRLs with same subject in a store (#457134)
  - fix CVE-2009-0590 - reject incorrectly encoded ASN.1 strings (#492304)
  - seed FIPS rng directly from kernel random device
  - do not require fipscheck to build the package (#475798)
  - call pairwise key tests in FIPS mode only (#479817)
  - do not crash when parsing bad mime data (#472440)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-5
changelog:
  - implement the integrity checking inside libcrypto so OpenSSL
    can be used in FIPS mode by the fipscheck library


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-2
changelog:
  - more changes for FIPS validation (#444800)
  - correctly initialize default CA paths (#450987)
  - allow disabling zlib support through environment (#442624)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-10
changelog:
  - compile with -march=z900 on s390 for performance improvements (#250818)
  - make ssl session ID matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-9
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#250581)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309881)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321221)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to 
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-30:.1
changelog:
  - Applied patch to fix CVE-2012-5519 (privilege escalation for users
    in SystemGroup or with equivalent polkit permission).  This prevents
    HTTP PUT requests with paths under /admin/conf/ other than that for
    cupsd.conf, and also prevents such requests altering certain
    configuration directives such as PageLog and FileDevice (bug #875898).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.3.7-29
changelog:
  - The imageto* filters could crash with bad GIF files
    (CVE-2011-2896, STR #3867, STR #3914, bug #752118).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.3.7-28
changelog:
  - Web interface didn't show completed jobs for printer (STR #3436, bug #625900)
  - Serial backend didn't allow a raw job to be canceled (STR #3649, bug #625955)
  - Fixed condition in textonly filter to create temporary file
    regardless of the number of copies specified. (bug #660518)


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-25
changelog:
  - Applied patch to fix cupsd memory corruption vulnerability
    (CVE-2010-2941, STR #3648, bug #624438).
  - Fix latent privilege escalation vulnerability (CVE-2010-2431,
    STR #3510, bug #605397).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-24
changelog:
  - Try to avoid overwriting text with page labels (STR #3415,
    bug #527187).
  - Reverted patch for bug #572338 as that and related bugs need a
    solution that can guarantee no regressions.


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Applied patch to avoid endless loop in
    socket backend process (bug #605584, STR #3001).
  - Applied patch to avoid infinite loop in
    mailto notifier (bug #608392, STR #3609).
  - Fixed typo in undo-str2537 patch (bug #608016).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-22
changelog:
  - Applied patch for CVE-2010-1748 (web interface memory disclosure,
    STR #3577, bug #591983).
  - Applied patch for CVE-2010-0542 (texttops unchecked memory
    allocation failure leading to NULL pointer dereference, STR #3516,
    bug #587746).
  - Applied patch for CVE-2010-0540 (CUPS administrator web interface
    CSRF, STR #3498, bug #588805).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-21
changelog:
  - Adjust texttops output to be in natural orientation (STR #3563).
    This fixes page-label orientation when texttops is used in the
    filter chain (bug #572338).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-16
changelog:
  - Applied patch to prevent memory leak when adding/modifying printers
    (bug #540646, STR #2836).
  - Applied patch to fix CVE-2009-3553 (bug #530111, STR #3200).
  - Applied patch to fix CVE-2009-2820 (bug #529833, STR #3367, STR #3401).


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Fixed lspp.patch to avoid memory leak (bug #496008).
  - Applied patches to enable changing of quotas
    with lpadmin (bug #496082, STR #3077, STR #3078).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Use poppler pdftops wrapper filter from upstream (bug #527429).  No
    longer need ext, includeifexists, strict-aliasing,
    CVE-2009-0146,0147,0166, cert-batch3892,4781,5486,19856,19869, or
    CVE-2009-3608,3609 patches.
  - Also fixes rotation of landscape documents when printed from OS X
    (bug #447987).


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Applied patch to prevent removing of multiple file job when
    the printer is disabled and enabled again (bug #506257, STR #3226).
  - Applied patch to fix issues with CGI handling (bug #497632, STR #2781, STR #2816).
  - Applied patch to fix incorrect CGI handling (bug #460898, STR #3194)
    and use php-cgi instead of php when running PHP scripts (bug #460898, STR #2923).


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Requires tmpwatch for the cron.daily script (bug #487495).
  - Applied patch to fix POSTing to custom cgi (bug #506316, STR #3221).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-13
changelog:
  - Include NULL pointer check in ObjectStream::getObject.  Part of the
    fix for CVE-2009-3608 (bug #526637).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-10
changelog:
  - Reverted php-cgi change due to incorrectly handling of CGI output
    that is not line-based (STR #3194, bug #460898).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-9
changelog:
  - Include printer-uri IPP attribute in IPP-Get-Jobs requests in order
    to be able to operate correctly with newer versions of CUPS
    (bug #497529, STR #2996, STR #3107, STR #3117).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Applied additional patches for batch3892.pdf, batch4781.pdf,
    batch5486.pdf, batch19856.pdf, batch19869.pdf testing files from
    CERT (bug #491864).
  - Applied patches to fix CVE-2009-0163 (bug #490596),
    CVE-2009-0146 (bug #490612), CVE-2009-0147 (bug #490614),
    and CVE-2009-0166 (bug #490625).
  - Fixed SendFF option in textonly filter (bug #491190).
  - Requires krb5 library that contains correct krb5_cc_new_unique()
    function (bug #489714).
  - MIME type detection fixes (bug #479635): always set document-name in
    client library (STR #3055) and fixed handle of "or" rules (STR #3059).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't verify MD5 sum, file size, or mtime for several config files:
    cupsd.conf, client.conf, classes.conf, printers.conf, pdftops.conf,
    snmp.conf (bug #487161).
  - Fixed cupsGetNamedDest() behaviour when lpoptions file specifies a
    non-existent default printer (bug #481481, STR #3082).
  - Fixed admin URLs in CUPS web interface (bug #479809, STR #3022).
  - Fixed mailto notifier (bug #474920, STR #3011).
  - Fixed option encoding for "compression" (bug #474814, STR #2997).
  - Marked templates and translated templates as configuration files
    (bug #474769).
  - Fixed a busy-loop in the scheduler that could occur when a
    connection is closed (bug #474323).
  - Use php-cgi instead of php when running PHP scripts (bug #460898).
  - Applied patch from upstream to fix handling of "Satisfy Any" in
    cupsd.conf (bug #481303).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-8
changelog:
  - Applied patch to fix STR #2974 (bug #473905, CVE-2008-5286,
    CVE-2008-1722).
  - Applied patch to fix STR #2774 (bug #473915, CVE-2008-5184).
  - Applied patch to fix RSS subscription limiting (bug #473901,
    CVE-2008-5183).
  - Run the serial backend as root (bug #216658).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-6
changelog:
  - Applied patch to fix CVE-2008-3639 (STR #2918, bug #464722).
  - Applied patch to fix CVE-2008-3640 (STR #2919, bug #464722).
  - Applied patch to fix CVE-2008-3641 (STR #2911, bug #464722).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-2
changelog:
  - Preserve default BrowseAllow value as @LOCAL so as to avoid
    unexpected configuration file changes.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-1
changelog:
  - Preserve _cupsAdminGetServerSettings and _cupsAdminSetServerSettings
    function declarations in adminutil.h, and ship i18n.h as in 1.2.x.
  - Preserve 'do not use' comment in http_t struct definition.
  - Applied upstream patch to fix https stalls when using Firefox 3
    (bug #453610, STR #2892).
  - Compile pdftops/GlobalParams.cxx with -fno-strict-aliasing (bug #447868).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Require exactly matching libs package (bug #447867).
  - Fixed cancel man page (bug #434967).
  - Fixed permissions of classes.conf in file manifest to match those
    set in cupsd (bug #245748).
  - Fixed log file permissions (bug #218761).
  - Backported cupsGetNamedDest() support for faster look-ups when the
    destination is known, such as in 'lp -d ...' (bug #428086).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Re-based to 1.3.7.  Fixes bug #241406 (STR #2400),
    bug #249570 (STR #2228), bug #250383 (STR #2084, STR #2198),
    bug #409121, bug #430067 (STR #1969, STR #2386), bug #430076
    (STR #1985), bug #430648 (STR #2319), bug #432001,
    bug #433087 (STR #2319), bug #441439 (STR #2699), bug #441811,
    bug #446023 (STR #1261), bug #447548 (STR #2179), bug #451101,
    bug #453396.
  - No longer need initscript, locale, relro, directed-broadcast,
    str2061, str2056, str2055, get_jobs, af_unix-auth, str2264,
    if-modified-since, str2266, str2023, str2117, str2351,
    CVE-2007-0720, CVE-2007-3387, CVE-2007-4351,
    CVE-2007-4352,5492,5393, CVE-2007-4045, docinfo-crash, str2656,
    CVE-2008-0047, CVE-2008-0053, CVE-2008-1373 or CVE-2008-1722
    patches.
  - Build now requires krb5-devel and avahi-compat-libdns_sd-devel.
  - The devel sub-package now requires krb5-devel.
  - Don't run autoconf; only lspp patch required it, and
    autoconf-generated changes have now been folded into that patch.
  - Don't aclocal even when we modify m4 files -- CUPS does not use
    automake (bug #250251).
  - Don't overwrite upstream snmp.conf file.
  - Move _http_s structure into public header file to prevent build
    failures in other packages.  Ship md5.h for this as well.
  - Revert STR #2537 so that non-UTF-8 clients continue to be accepted.
  - Don't strip foomatic recommended strings from make/model names.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.18
changelog:
  - Applied patch to fix CVE-2008-0053 (HP-GL/2 input processing, bug #438117).
  - Applied patch to fix CVE-2008-1373 (GIF overflow, bug #438303).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.17
changelog:
  - Applied patch to prevent heap-based buffer overflow in CUPS helper
    program (bug #436153, CVE-2008-0047, STR #2729).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.16
changelog:
  - Prevent double-free when a browsed class has the same name as a printer
    or vice versa (bug #433767, STR #2656).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.15
changelog:
  - Fixed LSPP patch so that strings allocated with cupsdSetString() are always
    clear correctly (bug #258221).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Applied patch to fix CVE-2007-4045 (bug #356581).
  - Applied patch to fix CVE-2007-4352, CVE-2007-5392 and
    CVE-2007-5393 (bug #356581).
  - Applied patch to fix CVE-2007-4351 (STR #2561, bug #353991).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.9
changelog:
  - Fixed IPv6 address parsing (bug #241400, STR #2117).
  - Fixed a bug that caused cups-lpd not to set the correct value for
    job-originating-host-name (bug #240223, STR #2023).
  - Cleaned up initscript error handling (bug #237953).
  - Fixed cups-lpd -odocument-format=... option (bug #230073, STR #2266).
  - Fixed If-Modified-Since: handling in libcups (bug #218764, STR #2133).
  - Make the initscript use start priority 56 (bug #213828).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.8
changelog:
  - Applied fix for STR #2264 (bug #230118).
  - Added patch for UNIX domain sockets authentication (bug #230613).
  - LSPP: Updated patch for line-wrapped labels (bug #228107).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.7
changelog:
  - Don't reload CUPS after rotating the logs with logrotate, but make sure
    to use the new file in that case (bug #215024).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.6
changelog:
  - LSPP: added check_context() function for get_jobs(), get_job_attrs() and
    validate_user() (bug #229673).
  - Fixed a potential scheduler crash (bug #231522).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.2
changelog:
  - Run the serial backend as root (bug #216658).
  - Fixed LSPP SELinux check (bug #216856).
  - LSPP fix: process URI before logging it (bug #216673).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.1
changelog:
  - Reload, don't restart, when logrotating (bug #215024).
  - Fixed pdftops.conf (bug #214612).
  - LSPP patch fix (bug #213501).
  - Added filter and PPD for text-only printer (bug #213034).
  - Fixed parallel backend (bug #213023, STR #2056).
  - Added support for /dev/ttyUSB devices (bug #212580, STR #2061).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-9
changelog:
  - adminutil.c: when writing 'BrowseAllow @LOCAL', add a comment about what
    to change it to when using directed broadcasts from another subnet
    (bug #204373).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-8
changelog:
  - LSPP patch didn't get updated properly in 1:1.2.4-6.  Use the right
    patch this time (bug #208676).  LSPP re-enabled.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-10
changelog:
  - Remove 'Provides: LPRng = 3.8.15-3' (bug #148757).
  - Applied patch to fix STR #1893 (bug #201800).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-6
changelog:
  - Use replacement snmp.c from STR #1737 (bug #193093).
  - Re-enable LSPP; doesn't harm browsing after all.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.1-2
changelog:
  - 1.2.1.
  - Another STR #1705 fix (bug #192034).
  - Fixed devel package multilib conflict (bug #192664).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-7
changelog:
  - Sync to svn5568.  No longer need rpath patch.
  - Added a 'conflicts:' for kdelibs to prevent bug #192548.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-4
changelog:
  - Disable back-channel data in the usb backend (STR #1705, bug #192034).
  - Fix for 'browsing stops on reload', STR #1670 (bug #191217).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5538.
  - Added 'restartlog' to initscript, for clearing out error_log.  Useful
    for problem diagnosis.
  - Initscript no longer needs to check for printconf-backend.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5470.
  - No longer need link, CAN-2005-0064, or no-propagate-ipp-port patches.
  - Switch to upstream PIE implementation (every single binary is PIE).
  - Extend relro to all binaries.
  - Better rpath patch.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - No longer need backend, rcp, or ppdsdat patches.
  - Use configure switch for LogFilePerm default instead of patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.5.rc3.2
changelog:
  - Patch pdftops to understand 'includeifexists', and use that in the
    pdftops.conf file (bug #189809).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.8
changelog:
  - No longer need openssl-devel.
  - Build with LDAP_DEPRECATED=1, to pick up declarations of ldap_init() etc.
  - Only warn about ACLs once (STR #1532).
  - Fix imagetops filter (STR #1533).
  - Sync pstops.c with svn 5382.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.1
changelog:
  - Ship a printers.conf file, and a client.conf file.  That way, they get
    their SELinux file contexts set correctly.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b2.6
changelog:
  - Add KDE compatibility symbols _ipp_add_attr/_ipp_free_attr to ipp.h, with
    a comment saying why they shouldn't be used.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn5102.0
changelog:
  - New svn snapshot.
  - No longer need enabledisable patch.
  - Fixed double-free in scheduler/policy.c (STR #1428).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn4964.0
changelog:
  - Use -fPIE not -fpie in PIE patch.
  - Fix link patch.
  - Patch in PIE instead of using --enable-pie, since that doesn't work.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - 1.2 svn snapshot.
  - No longer need doclink, str1023, pdftops, sanity, lpstat, str1068,
    sigchld, gcc34, gcc4, slow, CAN-2004-0888, CAN-2005-2097, finddest,
    str1249, str1284, str1290, str1301, CVE-2005-3625,6,7 patches.
  - Removed autodetect-tag patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.23-18
changelog:
  - Raise IPP_MAX_VALUES to 100 (bug #164232).  STR #1284.
  - Made FindDest better behaved in some instances (bug #164232).  STR #1283.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-2
changelog:
  - Fixed cups-lpd file mode (bug #137325).
  - Convert all man pages to UTF-8 (bug #107118).  Patch from Miloslav Trmac.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc2.1
changelog:
  - Make cancel-cups(1) man page point to lp-cups(1) not lp(1) (bug #136973).
  - Use upstream patch for STR #953.
  - 1.1.22rc2.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.7
changelog:
  - Prevent filters generating incorrect PS in locales where "," is the
    decimal separator (bug #136102).  Patch from STR #970.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc2.1
changelog:
  - 1.1.21rc2.
  - No longer need state, reload-timeout or str743 patches.
  - httpnBase64 patch no longer applies; alternate method implemented
    upstream.
  - Fix single byte overread in usersys.c (spotted by Colin Walters).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-9
changelog:
  - Apply patches from CVS (authtype) to fix STR #434, STR #611, and as a
    result STR #719.  This fixes several problems including those noted in
    bug #114999.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-8
changelog:
  - If cupsd fails to start, make it exit with an appropriate code so that
    initlog notifies the user (bug #110135).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix cups/util.c:get_num_sdests() to use encryption when it is necessary
    or requested (bug #118982).
  - Use upstream patch for the HTTP/1.1 Continue bug (from STR716).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-7
changelog:
  - Fix non-conformance with HTTP/1.1, which caused failures when printing
    to a Xerox Phaser 8200 via IPP (bug #122352).
  - Make lppasswd(1) PIE.
  - Rotate logs within cupsd (instead of relying on logrotate) if we start
    to approach the filesystem file size limit (bug #123003).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-4
changelog:
  - Tracked D-BUS API changes.
  - Updated D-BUS configuration file.
  - Symlinks to avoid conflicting with bash builtins (bug #102490).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-2
changelog:
  - Try harder to find a translated page for the web interface (bug #107619).
  - Added build_as_pie conditional to spec file to facilitate debugging.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-1
changelog:
  - 1.1.20.
  - No longer need idefense, str226 patches.
  - Updated sanity patch.
  - The devel sub-package requires openssl-devel (bug #110772).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't ignore the file descriptor when ShutdownClient is called: it
    might get closed before we next try to read it (bug #107787).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-10
changelog:
  - Pass correct attributes-natural-language through even in the absence
    of translations for that language (bug #100984).
  - Show compilation command lines.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-7
changelog:
  - Add some %if %use_dbus / %endif's to make it compile without dbus
    (bug #97397).  Patch from Jos Vos.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-0.rc4.1
changelog:
  - 1.1.19rc4.  Ported initscript, idefense, ppdsdat, dbus patches.
  - No longer need error, sigchld patches.
  - Ship cupstestppd.


author: Havoc Pennington <hp@redhat.com> 1:1.1.18-4
changelog:
  - adjust dbus patch - dbus_bus_get() sends the hello for you, 
    and there were a couple of memleaks
  - buildprereq dbus 0.9
  - rebuild for new dbus
  - hope it works, I'm ssh'd in with no way to test. ;-)


author: Tim Waugh <twaugh@redhat.com> 1.1.18-1
changelog:
  - 1.1.18.
  - No longer need uninit patch.
  - Some parts of the iDefense and pdftops patches seem to have been
    picked up, but not others.


author: Tim Waugh <twaugh@redhat.com> 1.1.17-6
changelog:
  - Add epoch to internal requirements.
  - Make 'condrestart' return success exit code when daemon isn't running.


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.15-14
changelog:
  - Buildrequire pam-devel.
  - Patch default PAM config file to remove directory names from module paths,
    allowing the configuration files to work equally well on multilib systems.
  - Patch default PAM config file to use system-auth, require the file at build-
    time because that's what data/Makefile checks for.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-13
changelog:
  - Use logrotate for log rotation (bug #76791).
  - No longer need cups.desktop, since redhat-config-printer handles it.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-11
changelog:
  - Use %configure for multilib correctness.
  - Use libexec instead of lib for CUPS_SERVERBIN.
  - Ship translated man pages.
  - Remove unshipped files.
  - Fix file list permissions (bug #59021, bug #74738).
  - Fix messy initscript output (bug #65857).
  - Add 'reload' to initscript (bug #76114).


author: Tim Waugh <twaugh@redhat.com> 1.1.15-7
changelog:
  - Really add cups-lpd xinetd file (bug #63919).
  - Ship pstoraster (bug #69573).
  - Prevent fread from trying to read from beyond EOF (fixes a segfault
    with new glibc).


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-3
changelog:
  - Add a symlink /usr/share/cups/doc -> /usr/share/doc/cups-devel-1.1.15
    because some applications expect to find the cups docs in
    /usr/share/cups/doc


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-1
changelog:
  - 1.1.15-1
  - Fix up smb printing trigger (samba-client, not samba-clients)
  - Start cupsd earlier, apparently it needs to be running before samba
    starts up for smb printing to work.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-12
changelog:
  - Support SMB printing (#62407)
  - Add HTML redirections to doc files to work around users mistaking
    /usr/share/doc/cups-1.1.14 for the web frontend (#62405)


author: Bill Nottingham <notting@redhat.com> 1.1.14-7
changelog:
  - lpc man page is alternative too
  - run ldconfig in -libs %post/%postun, not main
  - remove alternatives in %preun


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-5
changelog:
  - Move cups-config to cups-devel subpackage
  - Make alternatives usage a %define to simplify builds for earlier
    releases
  - Explicitly provide things we're supplying through alternatives
    to shut up kdeutils dependencies


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-1
changelog:
  - 1.1.13
  - Add patch for koi8-{r,u} and iso8859-8 encodings (#59018)
  - Rename init scripts so we can safely "killall cupsd" from there


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.1.1 (this has some major bugfixes)
  - Fix a typo in initscript (it's $?, not ?$)
  - Fix /usr/etc vs. /etc trouble, don't insist on /usr/var (YUCK!)
  - Create the spool dir


author: Than Ngo <than@redhat.de>
changelog:
  - update to 1.1 release
  - move back to /etc/rc.d/init.d
  - fix cupsd.init to work with /etc/init.d and /etc/rc.d/init.d
  - split cups


author: Tim Powers <timp@redhat.com>
changelog:
  - started changelog 
  - fixed init.d script location
  - changed script in init.d quite a bit and made more like the rest of our
    startup scripts


author: David Knox <dknox@redhat.com> 0:5.5.23-0jpp.40
changelog:
  - Related: CVE-2013-1976 It was found during additional testing
  - that the tomcat5 init may fail to start because the user
  - shell is set to sbin/nologin. Fixed in init scrip. SU now
  - uses -s /bin/sh during startup


author: David Knox <dknox@redhat.com> 0:5.5.23-0jpp.39
changelog:
  - Resolves: CVE-2013-1976 Improper TOMCAT_LOG management in 
  - initscript. Change location of TOMCAT_LOG to /var/log so
  - only root can write to it. Touching TOMCAT_LOG is no longer 
  - required during initscript startup. Permissions and ownership
  - changed to 0755 tomcat:root for logdir


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.2-28.el5
changelog:
  - qemu: Rollback on used USB devices (rhbz#816601)
  - qemu: Don't delete USB device on failed qemuPrepareHostdevUSBDevices (rhbz#816601)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.2-26.el5
changelog:
  - Fix off-by-1 in virFileAbsPath. (rhbz#680289)
  - Fix autostart flag when loading running domains (rhbz#675319)
  - node_device: Avoid null dereference on error (rhbz#772848)
  - util: Avoid null deref on qcowXGetBackingStore (rhbz#772848)
  - docs: Improve virsh domxml-*-native command docs (rhbz#783001)
  - Clarify the purpose of domxml-from-native (rhbz#783001)
  - qemu: Add return value check (rhbz#772821)
  - storage: Avoid mishandling backing store > 2GB (rhbz#772821)
  - util: Avoid PATH_MAX-sized array (rhbz#816601)
  - qemu: Keep list of USB devices attached to domains (rhbz#816601)
  - qemu: Don't leak temporary list of USB devices (rhbz#816601)
  - usb: Create functions to search usb device accurately (rhbz#816601)
  - qemu: Call usb search function for hostdev initialization and hotplug (rhbz#816601)
  - usb: Fix crash when failing to attach a second usb device (rhbz#816601)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.2-24.el5
changelog:
  - qemuConnectMonitor: Fix a bug that would have masked SELinux failure (rhbz#747514)
  - xml: Avoid compiler warning (rhbz#747514)
  - Fixes for several memory leaks (rhbz#747514)
  - storage: Avoid memory leak (rhbz#747514)
  - Add missing error reporting when loading mac filter config for QEMU (rhbz#747514)
  - qemu: Avoid memory leaks (rhbz#747514)
  - qemu: Avoid leaking uninit data from hotplug to dumpxml (rhbz#747514)
  - qemu: Avoid leaking uninit data from hotplug to dumpxml (rhbz#747514)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.2-23.el5
changelog:
  - network: Only attempt removal of the rule allowing tftp if it was added (rhbz#676622)
  - Prevent crash from dlclose() of libvirt.so (rhbz#735127)
  - Fix order of disks and controllers (rhbz#719435)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-20.el5
changelog:
  - Support enabling or disabling the HPET for Xen domains (rhbz#703193)
  - SMBIOS support (rhbz#661365)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-19.el5
changelog:
  - xen: Plug memory leak in multiple serial ports support (rhbz#670789)
  - Manually kill gzip if restore fails before starting qemu (rhbz#681623)
  - qemu: Avoid double close on domain restore (rhbz#681623)
  - virterror: Avoid API breakage with vmware (rhbz#665075)
  - nwfilter: Resolve deadlock between VM ops and filter update (rhbz#697749)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-18.el5
changelog:
  - xen: Prevent updating device when attaching a device (rhbz#662908)
  - Add PCI sysfs reset access (rhbz#689880)
  - xencapstest: Don't fail when Xen is installed (rhbz#690459)
  - Make error reporting in libvirtd thread safe (rhbz#690733)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-17.el5
changelog:
  - Fix event-handling data race (rhbz#671569)
  - Add support for multiple serial ports into the Xen driver (rhbz#670789)
  - Add missing checks for read only connections (CVE-2011-1146)
  - Guess rhel macro based on dist macro (rhbz#665325)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-13.el5
changelog:
  - Fix warnings in text monitor events (rhbz #574017)
  - Fix host CPU counting on unusual NUMA topologies (rhbz #654540)
  - Properly escape & character in xen driver (rhbz #472437)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-9.el5
changelog:
  - Reworked audit support (rhbz #587280)
  - Fix incorrect use of private data in remote driver (rhbz #646717)
  - Fix detection of qemu's drive readonly option (rhbz #510612)
  - Fix Xen domain dump (rhbz #646755)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-8.el5
changelog:
  - Add 'current' attribute to <vcpu> element (rhbz #545118)
  - Don't build xenapi driver even if libxenserver is found (rhbz #643118)
  - Audit support (rhbz #587280)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-7.el5
changelog:
  - Fix bogus error when attaching a device to xen guest (rhbz #638472)
  - Fix device hotplug on xen (rhbz #638520)
  - Don't fail on missing D-Bus (rhbz #642650)
  - Prohibit migration of qemu guests with host devices (rhbz #573940)
  - Remove explicit dependency on qcow-create and qemu-img tools (rhbz #642026)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-6.el5
changelog:
  - Turn dynamic ownership off by default (rhbz #636477)
  - Rename libvirtd.qemu in /etc/logrotate.d back to libvirtd (rhbz #636460)
  - Start libvirt-guests late and stop it early to solve dependency on xend (rhbz #636447)
  - Fix failure when host kernel doesn't support CPU hot-plugging (rhbz #636347)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-5.el5
changelog:
  - Fix possible compiler warning in libvirt-nodedev-Fix-sysfs-paths-for-vport-operations.patch
  - Improve the error message displayed on TLS client auth failure (rhbz #556599)
  - Explicitly require new enough libselinux in runtime (rhbz #635028)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-4.el5
changelog:
  - Fix patch to disable libvirt-guests on xen
  - Fix virConnectBaselineCPU (rhbz #630616)
  - Fix comparison of two host CPUs (rhbz #630615)
  - Fail when CPU type cannot be detected from XML (rhbz #630617)
  - Fix crash on unexpected CPU XML (rhbz #630618)
  - Fix a deadlock in bi-directional p2p concurrent migration (rhbz #630614)
  - Fix multiple PCI device assignment bugs (rhbz #630620)
  - Fix confusing error in libvirt-guests (rhbz #630622)
  - Update libvirt-guests to Fedora init script standards (rhbz #630621)
  - Do not activate boot=on on devices when not using KVM (rhbz #630613)
  - Fix the ACS checking in the PCI code (rhbz #630619)
  - Skip offline CPUs in nodeinfo (rhbz #630624)
  - Fix PXE boot on virtual network (rhbz #630627)
  - Fix tunnelled migration with qemu running as qemu:qemu (rhbz #630625)
  - Fix problem with capabilities XML generation (rhbz #630626)
  - Fix static-only DHCP configuration (rhbz #597363)
  - Fix virsh attach-disk command (rhbz #609422)
  - Fix virsh create hang (rhbz #602772)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-3.el5
changelog:
  - Fix bogus free of static strings introduced by a patch for CVE-2010-2239
  - Enable nwfilter driver (rhbz #630574)
  - Enable ESX driver (rhbz #629005)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-2.el5
changelog:
  - Fix permissions of /var/lib/libvirt directory
  - Require new libselinux for SELinux security driver
  - Add man page for libvirtd (rhbz #618750)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-37.el5
changelog:
  - Explicitly set qcow2 backing store format (CVE-2010-2239)
  - Remap privileged source ports from guests behind NAT (CVE-2010-2242)
  - Eliminate memory leak in xenUnifiedDomainInfoListFree (rhbz 590073)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-34.el5
changelog:
  - Set CPU affinity across whole QEMU process (rhbz 576920)
  - Show more helpful migration errors (rhbz 568476)
  - Report NUMA and CPU info correctly with nodeinfo (rhbz 570527)
  - Allow hostname only with migrateuri (rhbz 595992)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-33.el5
changelog:
  - Conflict with kvm release older than kvm-83-142.el5 (rhbz 569372)
  - Call fsync() at the end instead of opening raw files with O_DSYNC (rhbz 563151)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-32.el5
changelog:
  - Make numa errors non-fatal (rhbz 559755)
  - Create raw storage files with O_DSYNC (rhbz 563151)
  - Increase qemu guest startup timeout to 30 seconds (rhbz 563151)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-31.el5
changelog:
  - Fix ACS with root devices (rhbz 526713)
  - Fix PCI device re-assignment (rhbz 500217)
  - Fix a race between KVM and libvirt (rhbz 500217)
  - Fix state bug in libvirtd (rhbz 500217)
  - Set machine type to "rhel5.4.0" by default (rhbz 542665)
  - Correct erroneous expression in pciDeviceDownstreamLacksACS (rhbz 526713)


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-30.el5
changelog:
  - fix crash in xenUnifiedNodeDeviceReset
  - Resolves: rhbz#555309
  - avoid spurious errors on npiv device creation
  - Resolves: rhbz#514324


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-26.el5
changelog:
  - avoid some unknown failure error reports
  - Resolves: rhbz#531729
  - avoid "error: unknown procedure" when querying older libvirt
  - Resolves: rhbz#531735
  - remove limit on number of tap devices and guest
  - Resolves: rhbz#519729
  - avoid crashes when having concurrent TLS connections
  - Resolves: rhbz#512367


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-25.el5
changelog:
  - fix python binding generator to avoid clashes in method names
  - Resolves: rhbz#510427
  - nodedev-destroy can hang libvirtd
  - Resolves: rhbz#510430
  - avoid spurious errors on npiv device creation
  - Resolves: rhbz#514324
  - node device APIs should expose the relationship between SR-IOV VFs and PFs
  - Resolves: rhbz#481748
  - implement --pool option for virsh vol-path
  - Resolves: rhbz#509306
  - cannot delete storage pool problem
  - Resolves: rhbz#496579
  - Can not hotplug vtd device to Xen guest
  - Resolves: rhbz#546671
  - Inactive KVM guest memory reporting via 'info' is strange
  - Resolves: rhbz#508266
  - command 'virsh nodedev-create' fails with out of memory error
  - Resolves: rhbz#510426
  - Command 'virsh find-storage-pool-sources' failure unknown error
  - Resolves: rhbz#509979


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-24.el5
changelog:
  - guest host present two NIC with duplicate MAC addresses, only one configured
  - Resolves: rhbz#483884
  - implement core dump API for QEMU driver
  - Resolves: rhbz#507551
  - reset a PCI function even if other unused devices/functions are reset
  - Resolves: rhbz#500213
  - avoid a crash with virsh vol-key volname
  - Resolves: rhbz#509293


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-23.el5
changelog:
  - enable bridges even without IP assigend yet
  - Resolves: rhbz#532834
  - PCI device assigned need to be reattached to host on guest shutdown
  - Resolves: rhbz#500217
  - allow PCI PM reset on multi-function devices
  - Resolves: rhbz#517460
  - support for KVM PCI device assignment hotplug
  - Resolves: rhbz#517465


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-22.el5
changelog:
  - xen driver need check for duplicate uuid
  - Resolves: rhbz#504262
  - xen credit scheduler doesn't handle cap value 65535
  - Resolves: rhbz#504914
  - domain XML dump broke with virt-xml-validate
  - Resolves: rhbz#512069
  - libvirt did not report vCPU usage properly
  - Resolves: rhbz#514082
  - virsh man page sugegsted operation were asynchronous
  - Resolves: rhbz#514532
  - add support for qemu hugepages control
  - Resolves: rhbz#518099
  - libvirt was reordering drives based on their type
  - Resolves: rhbz#521053
  - a typo in domain interface definitions could generate a segfault
  - Resolves: rhbz#523418
  - dnsmasq used to limit the number of DHCP leases to only 150
  - Resolves: rhbz#524280


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-20.el5
changelog:
  - redefining a Xen domain could reset the domain id
  - fix Xen inotify checking of /etc/xen and avoid vanishing domains
  - resolves: rhbz#508278


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-14.el5
changelog:
  - fix broken behavior on wrong pool creation
  - Resolves: rhbz#496616
  - fix hang of libvirt daemon on node device XML dump
  - Resolves: rhbz#509261


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-12.el5
changelog:
  - fix bogus WWNs when HBA kernel modules are (re)loaded
  - remove a small leak with SCSI node device conf
  - Resolves: rhbz#496925


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-11.el5
changelog:
  - NPIV didn't work due to different paths in /sys for older kernels
  - Resolves: rhbz#496925
  - the domain info API would fail due to the absence of a security model
  - Resolves: rhbz#506688


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-6.el5
changelog:
  - look for kvm binary in libexec
  - Resolves: rhbz#504046
  - Fix build support for qcow2 on x86_64 due to missing binary at build time
  - Resolves: rhbz#504119
  - Take ownership of the /usr/share/augeas subtree
  - Resolves: rhbz#481809


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-5.el5
changelog:
  - error in handling hostdev managed informations
  - Resolves: rhbz#499577
  - detaching Xen devices led to segfaults
  - Resolves: rhbz#497051


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-4.el5
changelog:
  - implement NPIV node device create and destroy
  - Resolves: rhbz#496925
  - avoid daemon crash on TLS auth errors
  - Resolves: rhbz#503178
  - forbid to set autostart on transcient networks
  - Resolves: rhbz#503481


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-3.el5
changelog:
  - Fix serious event handling bug possibly killing random domains
  - Resolves: rhbz#500158
  - XML attribute escaping fix
  - Handle recent QEmu help output
  - Hash destructors should use unref not free
  - Fix some name and uuid uniqueness checks
  - Fix save/restore/migrate for qemu >= 0.10.0
  - Fix QEmu capabilities refresh
  - Extra check in pid file access routines
  - Related: rhbz#475821


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-2.el5
changelog:
  - Fix missing ownership of /usr/share/gtk-doc/html/libvirt from spec file
  - Resolves: rhbz#481809
  - Related: rhbz#475821


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-1.el5
changelog:
  - Upstream release 0.6.3
  - various bug fixes
  - a couple of packaging fixes including #496867
  - Related: rhbz#475821


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.3-15.el5
changelog:
  - Add missing readonly checks for APIs (CVE-2008-5086)
  - Add missing buf check in proxy daemon (CVE-2009-0036)


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-9.el5
changelog:
  - man page fix
  - Resolves: rhbz#442429
  - allow to change a Disk/Nic of inactive domain
  - Resolves: rhbz#251640
  - XML string escaping in xm driver
  - Resolves: rhbz#428879


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-8.el5
changelog:
  - man page fix
  - Resolves: rhbz#442429
  - removal of extra_release macro
  - Resolves: rhbz#436803
  - allow to change a Disk/Nic of inactive domain
  - Resolves: rhbz#251640
  - fix a hash table bug
  - Resolves: rhbz#448533


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-5.el5
changelog:
  - fix network Paravirt drivers on HVM
  - clarify documentation for virsh setcpus and setmem commands
  - Resolves: rhbz#429301
  - Resolves: rhbz#429186


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-3.el5
changelog:
  - add patch to fix NUMA compatibility problem with backport to xen-3.0.3
  - re-add a RHEL specific patch for PVFB on 3.0.3
  - renamed the second disk ID patch
  - Resolves: rhbz#426324


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-2.el5
changelog:
  - add 3 patches fixing NUMA disk detach for tap devices, setting cpu
    parameter on inactive domains and an escaping bug
  - Resolves: rhbz#251641
  - Resolves: rhbz#346281


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-1.el5
changelog:
  - Update to 0.3.3
  - Avahi support
  - NUMA support
  - APIs for collecting statistics on disks and interfaces
  - API for domains migration
  - localtime clock support
  - PS/2 and USB input devices
  - Secure remote access support
  - unification of daemons
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements
  - Resolves: rhbz#223833
  - Resolves: rhbz#235851
  - Resolves: rhbz#251641
  - Resolves: rhbz#251706
  - Resolves: rhbz#253494
  - Resolves: rhbz#254051
  - Resolves: rhbz#273421
  - Resolves: rhbz#306931
  - Resolves: rhbz#328841
  - Resolves: rhbz#346281


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-9.el5
changelog:
  - patch to fix the pvfb vncdisplay port in XML dumps
  - Resolves: rhbz #254188
  - Related: rhbz #250789


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-6.el5
changelog:
  - Fix handling of PVFB configurations
  - Resolves: rhbg#250789
  - Fix config file when using virtual network
  - Resolves: rhbg#251594


author: Daniel Veillard <veillard@redhat.com> 0.2.3-1.el5
changelog:
  - Upgrade to version 0.2.3 for RHEL-5.1
  - Resolves: rhbz#243463
  - Resolves: rhbz#222704
  - Resolves: rhbz#224415
  - Resolves: rhbz#225566
  - Resolves: rhbz#225567
  - Resolves: rhbz#229176
  - Note: 0.2.3 is really supposed to work with dnsmask which is not 
    available at the moment in RHEL-5


author: Daniel Berrange <berrange@redhat.com> 0.1.8-15.el5
changelog:
  - re-do the localization patch, so that we don't have to run
    'make update-po', and thus avoid multilib conflicts
  - Resolves: rhbz#224446


author: Daniel Berrange <berrange@redhat.com> 0.1.8-14.el5
changelog:
  - further fix for parallel installation problem of -devel on i386 and x86_64
  - Resolves: rhbz#222730


author: Daniel Veillard <veillard@redhat.com> 0.1.8-8.el5
changelog:
  - fix a structure error when asking the hypervisor for vcpu info, rhbz#217743
    and rhbz#217370
  - Resolves: rhbz#217370 rhbz#217743


author: Daniel Veillard <veillard@redhat.com> 0.1.8-7.el5
changelog:
  - release python global interpreter lock when calling libvirt, rhbz#210140
  - return correct os type version for HVM guests when running as non-root, 
    rhbz#214264
  - Resolves: rhbz#210140 rhbz#214264


author: Daniel Veillard <veillard@redhat.com> 0.1.8-6.el5
changelog:
  - save the amount of current memory used when dumping XML if different from
    maximum amount, and use that when restarting the domain from the XML,
    rhbz#214354
  - when using a pygrub bootloader, strip the os informations because xend
    assumes they take precedence over bootloader, rhbz#214741
  - Resolves: rhbz#214354 rhbz#214741


author: Daniel Veillard <veillard@redhat.com> 0.1.8-5.el5
changelog:
  - patch adding a domain core dump entry point to the library, it requires
    xen >= 3_0_3-13_el5 to get the xend server side support
  - Resolves: rhbz#214913


author: Daniel Veillard <veillard@redhat.com> 0.1.8-1.el5
changelog:
  - another ia64 page size fix
  - vcpu number initialization
  - don't label crashed domains as shut off
  - fix virsh man page
  - compile fix


author: Daniel Veillard <veillard@redhat.com> 0.1.7-2
changelog:
  - fix missing page size detection code for ia64
  - fix mlock size when getting domain info list from hypervisor


author: Daniel Veillard <veillard@redhat.com> 0.1.7-1
changelog:
  - Fix bug when running against xen-3.0.3 hypercalls
  - Fix memory bug when getting vcpus info from xend


author: Daniel Veillard <veillard@redhat.com> 0.1.6-1
changelog:
  - Support for localization
  - Support for new Xen-3.0.3 cdrom and disk configuration
  - Support for setting VNC port
  - Fix bug when running against xen-3.0.2 hypercalls
  - Fix reconnection problem when talking directly to http xend


author: Daniel Veillard <veillard@redhat.com> 0.1.5-1
changelog:
  - new release
  - bug fixes
  - support for new hypervisor calls
  - early code for config files and defined domains


author: Daniel Veillard <veillard@redhat.com> 0.1.4-1
changelog:
  - vCPUs and affinity support
  - more complete XML, console and boot options
  - specific features support
  - enforced read-only connections
  - various improvements, bug fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.1-1
changelog:
  - extend and cleanup the driver infrastructure and code
  - python examples
  - extend uuid support
  - bug fixes, buffer handling cleanups
  - support for new Xen hypervisor API
  - test driver for unit testing
  - virsh --conect argument


author: Daniel Veillard <veillard@redhat.com> 0.1.0-1
changelog:
  - various fixes
  - new APIs: for Node information and Reboot
  - virsh improvements and extensions
  - documentation updates and man page
  - enhancement and fixes of the XML description format


author: Daniel Veillard <veillard@redhat.com> 0.0.6-1
changelog:
  - added error handling APIs
  - small bug fixes
  - improve python bindings
  - augment documentation and regression tests


author: Bob Peterson <rpeterso@redhat.com> 0.1.62-37
changelog:
  - After converting a GFS1 file system with gfs2_convert errors were detected with fsck.gfs2
  - Resolves: rhbz#956030


author: Abhi Das <adas@redhat.com> 0.1.62-33
changelog:
  - gfs2_grow: gfs2_grow fails on a full file system with stuffed rindex file
  - mkfs.gfs2: mkfs.gfs2 doesn't work on regular files
  - libgfs2: libgfs2 limit major/minor numbers to 255
  - gfs2_grow: gfs2_grow fails to grow a filesystem with less than 3 rgrps
  - Resolves: rhbz#711451, rhbz#720935, rhbz#714739, rhbz#730091


author: Abhi Das <adas@redhat.com> 0.1.62-30
changelog:
  - fsck.gfs2: segfault in pass1b
  - gfs2_edit savemeta doesn't save all leaf blocks for large dirs
  - Resolves: rhbz#679076 rhbz#679565


author: Abhi Das <adas@redhat.com> 0.1.62-20
changelog:
  - Fix gfs2_quota to initialize fiemap flags
  - Fix gfs2_quota to deal with boundary conditions that cause some
    quotas to not be set/listed correctly.
  - Resolves: rhbz#536902


author: Abhi Das <adas@redhat.com> 0.1.62-14
changelog:
  - Fix gfs2_quota to remove linked list and use fiemap for list operations
  - Fix gfs2_convert conversion of inodes at different metatree heights in gfs1 & gfs2
  - Fix gfs2_convert to allow restart of interrupted converts.
  - Resolves: rhbz#536902 rhbz#548585 rhbz#548588


author: Bob Peterson <rpeterso@redhat.com> 0.1.62-11
changelog:
  - Fix problems where gfs2_edit savemeta wasn't saving extended attribute sub-blocks
  - Resolves: rhbz#527770


author: Bob Peterson <rpeterso@redhat.com> 0.1.62-5
changelog:
  - Fixed a problem whereby the extended attribute count was mis-calculated.
  - Resolves: rhbz#500483 (part2)


author: Bob Peterson <rpeterso@redhat.com> 0.1.62-3
changelog:
  - Allow gfs2_edit printsavedmeta to print destination size and type
  - Make gfs2_edit -p <block> blockalloc work for gfs1 file systems
  - Allow gfs2_edit to display and print gfs1 rgrps
  - gfs2_edit: Indirect pointers missing from list when paging up and down
  - gfs2_edit: Add missing superblock fields for gfs1 file systems
  - gfs2_edit: Fix rindex read function for gfs1 file systems
  - Fixed gfs2_edit printing wrong directory entry type for gfs1
  - Resolves: rhbz#503529


author: Bob Peterson <rpeterso@redhat.com> 0.1.62-2
changelog:
  - gfs2_edit: Fixed indirect block scrolling.
  - fsck.gfs2: Message printed to stderr instead of stdout problem fixed.
  - gfs2_edit unaligned access problems fixed.
  - Fixed "fsck.gfs2: invalid option -- a" on boot when mounting gfs2 root.
  - Fixed gfs2_tool man page incorrect reference to gfs2_mount.
  - Fixed segfault in fsck.gfs2 rindex repair code.
  - Fixed problems where fsck.gfs2 needed to be run twice.
  - Added #ifdefs to allow gfs2-utils to compile on older kernels.
  - Resolves: rhbz#503485 rhbz#506682 rhbz#503530 rhbz#507596 rhbz#514939 rhbz#514018 rhbz#500483 rhbz#515370


author: Chris Feist <cfeist@redhat.com> 0.1.60-1
changelog:
  - When '/' is a gfs2 file system it is now properly mounted without an error.
  - Resolves: rhbz#507893


author: Chris Feist <cfeist@redhat.com> 0.1.58-1
changelog:
  - Fixed an issue with the gfs2_edit savemeta function not saving blocks of type
    2.
  - Resolves: rhbz#502056


author: Chris Feist <cfeist@redhat.com> 0.1.57-1
changelog:
  - A gfs filesystems metadata is now properly copied with 'gfs2_edit savemeta'
  - Resolves: rhbz#501732


author: Chris Feist <cfeist@redhat.com> 0.1.56-1
changelog:
  - gfs2_fsck now properly fixes journal sequence numbers
  - The debugfs mount point has been randomized to prevent symlink attacks
  - Resolves: rhbz#498646 rhbz#498950


author: Chris Feist <cfeist@redhat.com> 0.1.55-1
changelog:
  - gfs2_convert now properly frees blocks when removing a file with a height
    greater than 1
  - Updated man pages
  - Added options to gfs2_tool df to provide more human readable output
  - GFS2 utilities now use and provide filesystem UUID
  - gfs2_fsck now uses the proper return codes
  - gfs2_edit has been updated
  - gfs2_tool df no longer segfaults on a non-4k block size
  - gfs2_grow no longer references the '-r' option
  - gfs2_convert no longer causes filesystem corruption
  - gfs2_edit has been improved to help differentiate between zero-data and
    non-zero data from pointers
  - gfs2_edit now properly saves the per-node quota files
  - A segfault in gfs2_fsck as been fixed
  - Resolves: rhbz#474707 rhbz#477072 rhbz#480833 rhbz#242701 rhbz#474705 rhbz#483799 rhbz#485761 rhbz#486034 rhbz#490136 rhbz#483799 rhbz#496330


author: Chris Feist <cfeist@redhat.com> 0.1.51-1
changelog:
  - Device is now properly checked to verify that the device is not already
    mounted or busy.
  - gfs2_convert now properly converts file systems.
  - Resolves: rhbz#240584 rhbz#471618


author: Chris Feist <cfeist@redhat.com> 0.1.45-1
changelog:
  - Updates to /etc/mtab are skipped when it is a link to /proc/mounts.
  - Various updates to gfs2_edit.
  - mkfs.gfs2 now has an option fs size parameter.
  - gfs2_fsck now accepts UNLINKED metadata blocks.
  - Resolves: rhbz#438759 rhbz#318271 rhbz#450004 rhbz#450764 rhbz#460327


author: Chris Feist <cfeist@redhat.com> 0.1.42-1
changelog:
  - gfs2_fsck now behaves more like other filesystem fsck commands
  - gfs2_edit man page created
  - Fixed build time warnins for gfs2 userland tools
  - lock_dlm is now the default lock protocol in mkfs.gfs and mkfs.gfs2
  - Journals are now not cleared without asking the user first
  - Updates to gfs2_jadd man page
  - Extra slashes on gfs2 mount paths no longer confuse gfs2 tools
  - gfs2_tool lockdump has been implemented
  - gfs2_tool man page has been updated
  - gfs2_quota now works if the lock table is not specified
  - Additional gfs2_tool commands have now been implemented
  - gfs2_edit savemeta now saves the rindex file
  - Resolves: rhbz#240545 rhbz#247318 rhbz#251180 rhbz#311591 rhbz#291551 rhbz#291551 rhbz#334481 rhbz#345501 rhbz#349601 rhbz#354201 rhbz#352581 rhbz#336561 rhbz#364741 rhbz#352841 rhbz#369771 rhbz#382581 rhbz#402971 rhbz#325151 rhbz#426670


author: Chris Feist <cfeist@redhat.com> 0.1.41-1
changelog:
  - gfs2_fsck changes the system inodes properly now.
  - gfs2_edit savemeta now saves the rindex file.
  - Resolves: rhbz#402971 rhbz#325151


author: Chris Feist <cfeist@redhat.com> 0.1.36-1
changelog:
  - fsck now works when processing files larger than 945 MB
  - fsck now properly process the '-n' command line option
  - Resolves: rhbz#291451 rhbz#287901


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.7.0.25-2.3.10.5.el5
changelog:
  - Sync with upstream IcedTea7-forest 2.3.10 tag
  - Fixes regressions as introduced with 1.7.0.25-2.3.10.4.el5:
    rhbz#978005, rhbz#977979, rhbz#976693, IcedTeaBZ#1487.
  - Related: rhbz#973117


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.4.el5
changelog:
  - updated to newer IcedTea7-forest 2.3.10 with 8010118 fix
  - removed upstreamed patch1000 MBeanFix.patch
  - Resolves: rhbz#973117


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.2.el5
changelog:
  - added patch1000 MBeanFix.patch to fix regressions caused by security patches
  - Resolves: rhbz#973117


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.19-2.3.10.0.el5
changelog:
  - Updated to latest IcedTea7-forest 2.3.10
  - patch 107 renamed to 500 for cosmetic purposes
  - Added fix for RH857717, owned /etc/.java/ and /etc/.java/.systemPrefs
  - Resolves: rhbz#973117


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.7-7
changelog:
  - permissions of deliver and dovecot.conf from 1.0.7-5 reverted
  - password can be stored in different file readable only for root now
  - Resolves: #436287, CVE-2008-4870


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.7-5
changelog:
  - change permissions of deliver and dovecot.conf to prevent possible password exposure
  - Resolves: #436287


author: Dan Horak <dhorak@redhat.com> - 1.0.7-3
changelog:
  - fix package ownership for /etc/pki/dovecot/private (#448089)
  - update init script (#238016)
  - ask for SSL cert password during start-up (#436287)
  - fix for illegal characters in passwd (#439369)
  - Resolves: #448089, #238016, #436287, #439369


author: Tomas Janousek <tjanouse@redhat.com> - 1.0.7-2
changelog:
  - LDAP+auth cache user login mixup (CVE-2007-6598, #427575)
  - insecure mail_extra_groups option (CVE-2008-1199, #436927)


author: Tomas Janousek <tjanouse@redhat.com> - 1.0.7-1
changelog:
  - update to latest upstream, fixes a few bugs (#331441, #245249), plus two
    security vulnerabilities (CVE-2007-2231, CVE-2007-4211)
  - increased default login_process_size to 64 (#253363)


author: Petr Rockai <prockai@redhat.com> - 1.0-1.rc15
changelog:
  - update to latest upstream, fixes a few bugs, plus a security
    vulnerability (#216510, CVE-2006-5973)


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc7
changelog:
  - update to latest upstream release candidate, should fix occasional
    hangs and mbox issues... INBOX. namespace is still broken though
  - do not run over symlinked certificates in new locations on upgrade


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc2
changelog:
  - update to latest upstream release candidate
  - disable inotify for now, doesn't build -- this needs fixing though


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta8.2
changelog:
  - put back pop3_uidl_format default that got lost
    in the beta2->beta7 upgrade (would cause pop3 to not work
    at all in many situations)


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.5
changelog:
  - fix #182240 by looking in lib64 for libs first and then lib
  - fix comment #1 in #182240 by copying over the example config files
    to documentation directory


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.3
changelog:
  - change the compiled-in defaults and adjust the default's configfile
    commented-out example settings to match compiled-in defaults,
    instead of changing the defaults only in the configfile, as per #179432
  - fix #179574 by providing a default uidl_format for pop3
  - half-fix #179620 by having plaintext auth enabled by default... this
    needs more thinking (which one we really want) and documentation
    either way


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2
changelog:
  - new upstream version, hopefully fixes #173928, #163550
  - fix #168866, use install -p to install documentation


author: John Dennis <jdennis@redhat.com> - 0.99.14-1.fc4
changelog:
  - fix bug #147874, update to 0.99.14 release
    v0.99.14 2005-02-11  Timo Sirainen <tss at iki.fi>
    - Message address fields are now parsed differently, fixing some
      issues with spaces. Affects only clients which use FETCH ENVELOPE
      command.
    - Message MIME parser was somewhat broken with missing MIME boundaries
    - mbox: Don't allow X-UID headers in mails to override the UIDs we
      would otherwise set. Too large values can break some clients and
      cause other trouble.
    - passwd-file userdb wasn't working
    - PAM crashed with 64bit systems
    - non-SSL inetd startup wasn't working
    - If UID FETCH notices and skips an expunged message, don't return
      a NO reply. It's not needed and only makes clients give error
      messages.


author: John Dennis <jdennis@redhat.com> 0.99.13-3.devel
changelog:
  - fix bug #145214, force mbox_locks to fcntl only
  - fix bug #145241, remove prereq on postgres and mysql, allow rpm auto
    dependency generator to pick up client lib dependency if needed.


author: John Dennis <jdennis@redhat.com> 0.99.13-2.devel
changelog:
  - make postgres & mysql conditional build
  - remove execute bit on migration example scripts so rpm does not pull
    in additional dependences on perl and perl modules that are not present
    in dovecot proper.
  - add REDHAT-FAQ.txt to doc directory


author: John Dennis <jdennis@redhat.com> 0.99.13-1.devel
changelog:
  - bring up to date with latest upstream, 0.99.13, bug #143707
    also fix bug #14462, bad dovecot-uid macro name


author: John Dennis <jdennis@redhat.com> 0.99.11-8.devel
changelog:
  - fix bug #129539, dovecot starts too early,
    set chkconfig to 65 35 to match cyrus-imapd
  - also delete some old commented out code from SSL certificate creation


author: John Dennis <jdennis@redhat.com> 0.99.11-7.devel
changelog:
  - add UW to Dovecot migration documentation and scripts, bug #139954
    fix SSL documentation and scripts, add missing documentation, bug #139276


author: John Dennis <jdennis@redhat.com> 0.99.11-1.FC3.1
changelog:
  - bring up to latest upstream,
    comments from Timo Sirainen <tss at iki.fi> on release v0.99.11 2004-09-04  
    + 127.* and ::1 IP addresses are treated as secured with
      disable_plaintext_auth = yes
    + auth_debug setting for extra authentication debugging
    + Some documentation and error message updates
    + Create PID file in /var/run/dovecot/master.pid
    + home setting is now optional in static userdb
    + Added mail setting to static userdb
    - After APPENDing to selected mailbox Dovecot didn't always notice the
      new mail immediately which broke some clients
    - THREAD and SORT commands crashed with some mails
    - If APPENDed mail ended with CR character, Dovecot aborted the saving
    - Output streams sometimes sent data duplicated and lost part of it.
      This could have caused various strange problems, but looks like in
      practise it rarely caused real problems.


author: John Dennis <jdennis@redhat.com> 0.99.10.9-1,FC3,1
changelog:
  - bring up to date with latest upstream, fixes include:
  - LDAP support compiles now with Solaris LDAP library
  - IMAP BODY and BODYSTRUCTURE replies were wrong for MIME parts which
    didn't contain Content-Type header.
  - MySQL and PostgreSQL auth didn't reconnect if connection was lost
    to SQL server
  - Linking fixes for dovecot-auth with some systems
  - Last fix for disconnecting client when downloading mail longer than
    30 seconds actually made it never disconnect client. Now it works
    properly: disconnect when client hasn't read _any_ data for 30
    seconds.
  - MySQL compiling got broken in last release
  - More PostgreSQL reconnection fixing


author: John Dennis <jdennis@redhat.com> 0.99.10.7-1,FC3,1
changelog:
  - enable postgres and mySQL in build
  - fix configure to look for mysql in alternate locations
  - nuke configure script in tar file, recreate from configure.in using autoconf

  - bring up to latest upstream, which included:
  - Added outlook-pop3-no-nuls workaround to fix Outlook hang in mails with NULs.
  - Config file lines can now contain quoted strings ("value ")
  - If client didn't finish downloading a single mail in 30 seconds,
    Dovecot closed the connection. This was supposed to work so that
    if client hasn't read data at all in 30 seconds, it's disconnected.
  - Maildir: LIST now doesn't skip symlinks


author: John Dennis <jdennis@redhat.com> - 0.99.10.6-1
changelog:
  - bring up to date with upstream,
    recent change log comments from Timo Sirainen were:
    SHA1 password support using OpenSSL crypto library
    mail_extra_groups setting
    maildir_stat_dirs setting
    Added NAMESPACE capability and command
    Autocreate missing maildirs (instead of crashing)
    Fixed occational crash in maildir synchronization
    Fixed occational assertion crash in ioloop.c
    Fixed FreeBSD compiling issue
    Fixed issues with 64bit Solaris binary


author: Warren Togami <wtogami@redhat.com> 0.99.10.4-4
changelog:
  - default auth config that is actually usable
  - Timo Sirainen (author) suggested functionality fixes
    maildir, imap-fetch-body-section, customflags-fix


author: Jeremy Katz <katzj@redhat.com> 0.99.10-7
changelog:
  - another patch from upstream to fix returning invalid data on partial 
    BODY[part] fetches
  - patch to avoid confusion of draft/deleted in indexes


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.2
changelog:
  - 0.99.10-rc2 (includes ssl detection fix)
  - a few tweaks from fedora
    - noreplace the config file
    - configure --with-ldap to get LDAP enabled


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.1
changelog:
  - 0.99.10-rc1
  - add fix for ssl detection
  - add zlib-devel to BuildRequires
  - change pam service name to dovecot
  - include pam config


author: Jeremy Katz <katzj@redhat.com> 0.99.9.1-1
changelog:
  - update to 0.99.9.1
  - add patch from upstream to fix potential bug when fetching with 
    CR+LF linefeeds
  - tweak some things in the initscript and config file noticed by the 
    fedora folks


author: Jeremy Katz <katzj@redhat.com> 0.99.8-1
changelog:
  - 0.99.8
  - add some buildrequires
  - fixup to build with openssl 0.9.7
  - now includes a pop3 daemon (off by default)
  - clean up description and %preun
  - add dovecot user (uid/gid of 97)
  - add some buildrequires
  - move the ssl cert to /usr/share/ssl/certs
  - create a dummy ssl cert in %post
  - own /var/run/dovecot
  - make the config file a source so we get default mbox locks of fcntl


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.41.1.11.11.90
changelog:
  - updated to icedtea6-1.11.11.90.tar.gz
  - removed upstreamed patch9 jaxp-backport-factoryfinder.patch
  - removed upstreamed patch10 fixToFontSecurityFix.patch.
  - modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#973126


