# changelog

author: Owen Taylor <otaylor@redhat.com> - 2.16.0-16
changelog:
  - Add patch to apply new_windows_always_on_top to windows that
    are raised or activated but denied focus as well.
    Resolves: bug 582769
  - Add patch to exclude the current application from the effect of
    no_focus_windows preference
    Resolves: bug 591944


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - add faxrunqd man page (problem #850)
  - add missing pbm2g3 (and man page); remove unnecessary "rm -f pbmtog3"
  - delete redundant ( cd tools; make ... )


author: Jos Vos <jos@xos.nl>
changelog:
  - Use a patch for creating policy.h using policy.h-dist.
  - Add viewfax subpackage (X11 fax viewing program).
  - Add logrotate config files for mgetty and sendfax log files.
  - Properly define ECHO in Makefile for use with bash.
  - Add optional use of dialin.config (for modems supporting this).
  - Change default notification address to "root" (was "faxadmin").
  - Change log file names according to better defaults.
  - Change default notify program to /etc/mgetty+sendfax/new_fax (was
    /usr/local/bin/new_fax).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Overhaul for FHS fixes.
  - Stop removing logs in postun.
  - Stop stripping everything.
  - ia64 fixes.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - forcibly strip binaries (#12431)
  - change dependency on libgr-progs (which is gone) to netgr-progs (#10819)
  - change dependency on giftoppm to giftopnm (#8088)
  - attempt to plug some potential security problems (#11874)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make sure all scripts quote variables where possible (#17179)
  - make sure all scripts use mktemp for generating temporary files


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out quoting patch
  - change Copyright: distributable to License: GPL
  - add URL
  - remove logging changes from excl patch, based on input from Gert
  - rework ia64 patch, break out gets/fgets change based on input from Gert


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.1.25
  - ditch the elsa patch in favor of the current vgetty patch
  - don't need to strip binaries, buildroot policies do that
  - add docs to the voice subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change the default group in the vgetty configuration file from phone to uucp,
    which matches the settings for faxes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.1.26
  - add logrotate.vm and logrotate.vgetty (note from Heiner Kordewiner)
  - add voice/{Announce,Changelog,Readme} to documentation set


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.28-3
changelog:
  - rotate the mgetty and vgetty logs by default, specifying them with
    wildcards in the logrotate configs (#62159)


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.28-7
changelog:
  - rotate mgetty.log.unknown and mgetty.log.callback (#68049)
  - don't logrotate already-rotated logs (#68422)


author: Jason Vas Dias <jvdias@redhat.com> 1.1.31-2
changelog:
  - Fixed bug: 115261 - let faxspool work if acroread isn't installed
  - or gs can't understand its level3 output .


author: Jason Vas Dias <jvdias@redhat.com> 1.1.33-3_FC5
changelog:
  - fix bug 162174: prevent uninterruptable hang on exit() when
                    direct line disconnected (kernel bug 164002)
  		  do tcflush(1,TCOFLUSH) before exit() in sig_goodbye()
  	  	  block signals before entering syslog()
    workaround build system 'buffer overflow checks' bug:
                    use memcpy instead of sprintf in record.c, line 53


author: Nalin Dahyabhai <nalin@redhat.com> - 1.1.33-9
changelog:
  - add /usr/sbin/useradd as a prereq for the -sendfax subpackage, because
    we call it during the -sendfax %pre scriptlet (#203266)


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 0.9.7.1-4
changelog:
  - Fix big-endian memory leaks in haval.c
  - Patch is sufficient to pass test-suite on ppc. Fixes #226987.


author: Dave Jones <davej@redhat.com>
changelog:
  - Only enable microcode_ctl service if the CPU is capable.
  - Prevent microcode_ctl getting restarted multiple times on initlevel change (#141581)
  - Make restart/reload work properly
  - Do nothing if not started by root.


author: Dave Jones <davej@redhat.com>
changelog:
  - Create/remove the /dev/cpu/microcode dev node as needed.
  - Use correct path again for the microcode.dat.
  - Remove some no longer needed tests in the init script.


author: Dave Jones <davej@redhat.com>
changelog:
  - Drop the node creation/deletion change from previous release.
    It'll cause grief with selinux, and was a hack to get around
    a udev shortcoming that should be fixed properly.


author: Jon Masters <jcm@redhat.com>
changelog:
  - Update to microcode 1.15 for real this time (now kernel patch is in and we
    - both RH and Intel - think this should be ok to go now).
  - Resolves: #214807, #209455.


author: Jarod Wilson <jwilson@redhat.com>
changelog:
  - Spec cleanup and macro standardization.
  - Update microcode data file to 20080131 revision.
  - Resolves: #431566.


author: Anton Arapov <anton@redhat.com>
changelog:
  - Fix memory leak (Kamil Dudka )
  - Update microcode data file to 20110428 revision.
  - Resolves: #690414, #713653


author: Anton Arapov <anton@redhat.com>
changelog:
  - Fix the paths to microcode (Petr Holasek )
  - Update microcode data file to 20111110 revision.
  - Resolves: #760323


author: Mike A. Harris <mharris@redhat.com>
changelog:
  - Fixed format string vuln in usage of do_log()  (bug #35613)
  - Fixed misc other format string abuse with werror().
  - Changed main tarball to bzip2 compression
  - Corrected Buildroot to use _tmppath


author: Mike A. Harris <mharris@redhat.com> 1.83.1-8
changelog:
  - Changed minicom to disable SGID/SUID operation completely as it was
    never designed to be secure, and likely never will be. (#35613)
  - Updated the format string patch I made to fix more format string abuses.
  - Added Czeck cs_CZ locale translations.


author: Mike A. Harris <mharris@redhat.com> 1.83.1-12
changelog:
  - Added minicom-1.83.1-disable-message.patch to disable warning message and
    delay when running minicom as root since root-only is the only supported
    method of running minicom now due to security issues.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - rebuild against unzigged lockdev-1.0.0-11 (#51577).
  - add BuildPrereq: on lockdev-devel, not /usr/include/baudboy.h.


author: Mike A. Harris <mharris@redhat.com> 2.00.0-1
changelog:
  - Updated to version 2.00.0-0, which now uses GNU autoconf for everything,
    to ease portability and internationalization issues.  Hold on for the
    ride, as there's bound to be some bumps on the way.  ;o)  On the up side,
    the packaging is likely to be MUCH more maintainable in the future, which
    is very nice to see.
  - Disabled most patches as they are either included now, not needed, or
    it has yet to be determined.


author: Mike A. Harris <mharris@redhat.com> 2.00.0-9
changelog:
  - Added find_lang macro andlang files to package, also avoiding 
    _unpackaged_files_terminate_build
  - Added with_desktop_menu_entry macro to disable minicom.desktop by default


author: Adrian Havill <havill@redhat.com> 2.00.0-14
changelog:
  - removed static buffers that limit multi-file zmodem functionality (#98654)
  - removed assertions from above patch, massage out conflicts with rh patch


author: Adrian Havill <havill@redhat.com> 2.00.0-17
changelog:
  - fix error handling for the case when you attempt to "goto" a dir
    that doesn't exist. (#103902)
  - updated URL in spec file


author: Trond Eivind Glomsrød <teg@redhat.com> 1.1.3-24
changelog:
  - Add example.c and minigzip.c to the doc files, as
    they are listed as examples in the README (#52574)


author: Jakub Jelinek <jakub@redhat.com> 1.1.4-2
changelog:
  - remove glibc patch, it is no longer needed (zlib uses gcc -shared
    as it should)
  - run tests and only build the package if they succeed


author: Jeff Johnson <jbj@jbj.org> 1.2.0.7-2
changelog:
  - fix: gzeof not set when reading compressed file (#106424).
  - fix: revert zlib.h include constants for now (#106291).


author: Ivana Hutarova Varekova <varekova@redhat.com> 1.2.3-4
changelog:
  - Resolves: #678352
    /lib/libcrypto needs /usr/lib/libz
  - Resolves: #622779
    zlib has fence-post error in adler32_combine


author: Erik Troan <ewt@redhat.com>
changelog:
  - wasn't including nfs, isofs, or fat modules properly
  - mkinitrd args weren't passed right due to a typo


author: Erik Troan <ewt@redhat.com>
changelog:
  - switched to use syslinux rather then lilo
  - requires dosfstools
  - put version in only one place, mkbootdisk


author: Matt Wilson <msw@redhat.com>
changelog:
  - changed Summary:, it's no longer a bad copy and paste job from the
    mkinitrd spec file (MF #50193)


author: Erik Troan <ewt@redhat.com>
changelog:
  - if --kernelargs isn't specified and grubby is available use it to get
    the arguments to use; this only works with mkinitrd (grubby) >= 3.4.3
    (8591)
  - fixed some typos in man page (11297)
  - use cp -p rather then cp -a (as we want to follow symlinks) (13480)
  - create image files if appropriate (53818)
  - compact option removed (syslinux doesn't use it anyway) (58989)


author: Jeremy Katz <katzj@redhat.com> 1.5.0-1
changelog:
  - use copy instead of mkinitrd to get the initrd
  - don't get default kernel args if grubby can't figure out the default kernel
  - exit with an exit status of 1 if things fail


author: Jeremy Katz <katzj@redhat.com> 1.5.1-1
changelog:
  - apply mikem's patch so that we handle loop devices better (#84351)
  - switch to making a loopback img and then dd'ing that to the floppy (#84351)
  - man page updates (#77262)


author: Miloslav Trmač <mitr@redhat.com> - 0.15-1.el5.1
changelog:
  - Don't stat() paths to all excluded filesystems when encountering a mount point
    Resolves: #237120


author: Johnny Hughes <johnny@centos.org> 2.0.3-1.centos4
changelog:
  - Updated to upstream release 2.0.3
    See this link: http://marc.theaimsgroup.com/?l=horde-announce&m=113433279228172&w=2


author: Johnny Hughes <johnny@centos.org> 2.1.c4
changelog:
  - administratative changes only ... no new RPMS produced or version changes
  - modified config files from config to config(noreplace)
  - removed an extra . in the file name
  - these changes will be pushed with the next upstream upgrade


author: Seth Vidal <skvidal@phy.duke.edu>
changelog:
  - mock 0.3 - security release
  - mock-helper allowed execution of arbitrary commands by member of mock
    group


author: Clark Williams <williams@redhat.com> - 0.6.9-1
changelog:
  - applied Eric Work's patch to fix defaults vs. command line option problem
    (BZ 215168)
  - use /etc/mock/defaults.cfg if --configdir specified and no defaults found
    in the specified configdir
    (BZ 209407)
  - applied Jesse Keatings patch for arch specifi config files
    (BZ 213516)


author: Clark Williams <williams@redhat.com> - 0.6.11-1
changelog:
  - added error() calls to print command output on failed commands
  - added installdeps command for long-term chroot management


author: Paul Nasrat <pauln@truemesh.com> 0.09-2jpp
changelog:
  - Broken up into subpackages
  - Patch to build jdk-jar (commited upstream)
  - Patch to build httpclient (discussed with upstream)


author: Joe Orton <jorton@redhat.com> 5.0-0.rc4.3
changelog:
  - support mutual authentication (Nalin Dahyabhai)
  - once authentication returns COMPLETE, cache name for the duration
    of the connection


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.11 from 30 August, fixing problems detailed at
    http://cert.uni-stuttgart.de/advisories/apache_auth.php


author: Gary Benson <gbenson@redhat.com> 1.11-9
changelog:
  - tweak examples in auth_mysql.conf to use fewer MySQLisms and to
    neither assume the existence of nor trample all over the 'test'
    database.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.8-1
changelog:
  - update to 0.9.8, fixing problems detailed at
    http://cert.uni-stuttgart.de/advisories/apache_auth.php


author: Gary Benson <gbenson@redhat.com> 0.9.12-6
changelog:
  - port to httpd-2.0
  - add the config file
  - put the manual in with the Apache manual
  - license is Apache Software License


author: Joe Orton <jorton@redhat.com> 2.0.1-5
changelog:
  - merge from Taroon:
   * don't re-use database connections (#115496)
   * make functions static
   * downgrade "not configured" log message from warning to debug


author: Jeff Johnson <jbj@redhat.com> 0.15-3687.0
changelog:
  - first build from adapted spec file, only client and libraries for now.
  - internal apr/apr-utils/neon until incompatibilities sort themselves out.
  - avoid libdir issues on x86_64 for the moment.


author: Joe Orton <jorton@redhat.com> 0.22.2-1
changelog:
  - update to 0.22.2; add mod_dav_svn subpackage
  - include Python bindings
  - neon: force use of expat, enable SSL
  - drop check for specific apr version added in -3


author: Jeff Johnson <jbj@redhat.com> 0.22.2-2
changelog:
  - use external neon-0.23.9-2 (i.e. with neon-config), drop internal neon.
  - use db-4.1.25, not db-4.0.14.
  - do "make check" (but ignore failure for now).
  - s390x knows not of httpd >= 2.0.45.


author: Joe Orton <jorton@redhat.com> 1.0.0-2
changelog:
  - add fix for lack of apr_dir_read ordering guarantee (Philip Martin)
  - enable compression in ra_dav by default (Tobias Ringström)


author: Joe Orton <jorton@redhat.com> 1.0.2-2
changelog:
  - add perl MODULE_COMPAT requirement for -perl subpackage
  - move perl man pages into -perl subpackage
  - clean up -perl installation and dependencies (Ville Skyttä, #123045)


author: Joe Orton <jorton@redhat.com> 1.1.3-7
changelog:
  - restore swig bindings support (from upstream via Max Bowsher, #141343)
  - tweak SELinux commentary in default subversion.conf


author: Joe Orton <jorton@redhat.com> 1.1.3-8
changelog:
  - further swig bindings fix (upstream via Max Bowsher, #151798)
  - fix perl File::Path dependency in filter-requires.sh


author: Joe Orton <jorton@redhat.com> 1.2.0-3
changelog:
  - update to 1.2.1
  - fix BuildRequires for ruby and apr-util (#163126)
  - drop static library archives


author: Joe Orton <jorton@redhat.com> 1.2.3-3
changelog:
  - update to 1.2.3
  - update to psvn.el r16070 from Stefan Reichoer
  - merge subversion.conf changes from RHEL4
  - merge filter-requires.sh changes from FC4 updates


author: Joe Orton <jorton@redhat.com> 1.3.2-2
changelog:
  - update to 1.3.2
  - fix Ruby sitelibdir (Garrick Staples, #191611)
  - own /etc/subversion (#189071)
  - update to psvn.el r19857


author: Joe Orton <jorton@redhat.com> - 1.6.11-8
changelog:
  - add security fixes for CVE-2011-1752, CVE-2011-1783 (#709219)
  - add fix for svnadmin hotcopy (#669535)
  - add security fix for CVE-2011-0715 (#681172)
  - add security fixes for CVE-2010-4644, CVE-2010-4539 (#672677)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-1
changelog:
  - Rebase to upstream mod_nss 1.0.8 (#588858)
  - Use remote hostname set by mod_proxy to compare to CN in peer cert (#591901)
  - Patch to add configuration options for new NSS negotiation API (#574187)
  - Set minimum version of nss to 3.12.6 to pick up renegotiation fix
  - Add (pre) for Requires on httpd so we can be sure the user and group are
    already available
  - Use _sysconfdir macro instead of /etc
  - Remove unused variable and perl substitution for gencert. gencert used to
    have separate variables for NSS & NSPR libraries, that is gone now so this
    variable and substitution aren't needed.
  - Added comments to patch to identify what they do
  - The location of libnssckbi.so moved from /lib[64] to /usr/lib[64] (#558545)
  - Don't generate output when the default NSS database is generated (#538859)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-2
changelog:
  - Don't call PK11_ListCerts for every server (#635324)
  - Fix hang when handling large POST under some conditions (#634685)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-5
changelog:
  - Bugzilla Bug #692868 - https (with mod_nss) fails with reverse proxy when
    using with mod_proxy
  - Bugzilla Bug #677698 - Lack of interlock between nss processes to pcache
    causes httpd failure
  - Bugzilla Bug #714255 - overrunning array when executing nss_pcache


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-6
changelog:
  - Bugzilla Bug #749401 - https://server.testrelm/ipa/xml: Bad Request
    intermittent errors
  - Bugzilla Bug #749402 - may be possible to spoof mod_nss FakeBasicAuth
  - Bugzilla Bug #749405 - mod_nss fails debug assertion
  - Bugzilla Bug #749406 - Add 'libnssckbi.so' runtime dependency . .


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-7
changelog:
  - Fix 'Bugzilla Bug #749405 - mod_nss fails debug assertion' by removing
    'mod_nss-no_shutdown_if_not_init.patch' and applying
    'mod_nss-no_shutdown_if_not_init_2.patch' instead
  - The 'mod_nss-no_shutdown_if_not_init_2.patch' patch also fixes
    Bugzilla Bug #784548 - File descriptor leak after "service httpd reload"
    or httpd doesn't reload


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-8
changelog:
  - Resolves: CVE-2013-4566
  - Bugzilla Bug #989724 - mod_nss does not respect `NSSVerifyClient` in
    Directory [rhel-5.10.z]


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added a patch to compile it as a shared object for the apache/ssl (and
    future revisions of apache)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - disabled stacked_handlers.  They still seem busted!
  - minor updates so no conflicts with either apache / secureweb
  - fixed bug building on multiple architectures


author: Preston Brown <pbrown@redhat.com>
changelog:
  - experimental patch from Doug MacEachern <dougm@pobox.com> to fix segfault
  - rebuilt against apache 1.3.6


author: Preston Brown <pbrown@redhat.com>
changelog:
  - added -fPIC to correct functionality on SPARC
  - upgrade to 1.21, removed build cruft from old buggy mod_perl days
  - added extra documentation that was missing


author: Preston Brown <pbrown@redhat.com>
changelog:
  - incorporate fixes from Markus Pilzecker <mp@rhein-neckar.netsurf.de>:
  - Prefix: /usr
  - find apxs binary and package directories automatically


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fixed the postun script to check for upgrades. doh
  - add triggerpostun to fix older versions of the package


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - rebuild with perl 5.6.0
  - add perlver macro to spec file to make handling of other perl versions easier


author: Nalin Dahyabhai <nalin@redhat.com> 1.26-2
changelog:
  - turn off large file support, which makes mod_perl think that server request
    structures are the wrong size (heads-up from Doug MacEachern and Chip Turner)


author: Gary Benson <gbenson@redhat.com> 1.99_09-8
changelog:
  - add an Apache::Status example to /etc/httpd/conf.d/perl.conf.
  - kill any stale test servers before building.


author: Gary Benson <gbenson@redhat.com>
changelog:
  - implement locking around test suite to avoid breakage when two
    architectures are built simultaneously on the same machine.
  - make the stale-server killer wait until the server is truly dead,
    and move it into the lock.


author: Gary Benson <gbenson@redhat.com> 1.99_09-9
changelog:
  - Apache::Status requires Apache::compat (#103891).
  - add dependency on gdbm-devel (#103889).
  - avoid strip failures on non-root builds (#103889).


author: Chip Turner <cturner@redhat.com> 1.99_11-1
changelog:
  - upgrade to 1.99_11
  - remove aprinc patch, no longer necessary
  - remove hash fix, no longer necessary


author: Gary Benson <gbenson@redhat.com> 3.0.0-1.20020527
changelog:
  - upgrade to latest CVS and change paths for httpd-2.0
  - make it build with 2.0.36
  - add the config file.


author: Gary Benson <gbenson@redhat.com> 3.0.0-8
changelog:
  - add built manual to snapshot tarball and install it (#69361)
  - add some examples to /etc/httpd/conf.d/python.conf (#71316)


author: Joe Orton <jorton@redhat.com> 3.1.4-3
changelog:
  - rebuild for httpd 2.2
  - build with -fno-strict-aliasing
  - don't use deprecated APR_STATUS_IS_SUCCESS() macro


author: Rob Crittenden <rcritten@redhat.com> 1.0.2-4
changelog:
  - The nss package changed the location of the NSS shared libraries to /lib from
    /usr/lib. Static libraries remained in /usr/lib. They then updated their
    devel package to put symlinks back from /lib to /usr. Respin to pick that up.
    BZ 434395.


author: Rob Crittenden <rcritten@redhat.com> - 1.0.3-4
changelog:
  - Updated mod_revocator-kill patch. The ownership of the semaphore used to
    control access to crlhelper was not always changed to the Apache user
    (#648546)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.3-5
changelog:
  - Fix shutting down Apache if CRLUpdateCritical is on and a CRL
    is not available at startup (#654378)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-6
changelog:
  - Bugzilla Bug #737556 - CRLS are not downloaded when mod_revocator module
    is loaded successfully. And no error was thrown in httpd error_log
  - Add 'autoreconf -fvi' to build section


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-7
changelog:
  - Bugzilla Bug #716355 - mod_revocator does not shut down httpd server if
    expired CRL is fetched
  - Bugzilla Bug #716361 - mod_revocator does not bring down httpd server if
    CRLUpdate fails


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-9
changelog:
  - Bugzilla Bug #716874 - httpd (32 bit) failed to start if mod_revocator
    (32 bit) is installed on ppc64


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - Handle EM_SPARCV9, kludge to support both 32bit and 64bit kernels
    from the same package on sparc/sparc64.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - pick up ultrapenguin patches (not applied for now).
  - pre-generate keyword.c so gperf doesn't have to be present (not applied).
  - util/sys_cm.c: fix create_module syscall (signed return on sparc too)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to 2.3.9.
  - port RH patches from 2.1.121 to 2.3.9 where needed.
  - disable warning about conf.modules for now, in 7.0
    we should move to modules.conf.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.0
  - tweak irda aliases
  - remove vixie-cron dependency (it's not *required*)
  - add missing %build
  LANG=C
  export LANG
  unset DISPLAY
   (where did that go?)


author: Elliot Lee <sopwith@redhat.com> 2.4.5-3
changelog:
  - Add modutils-2.4.5-stblocal.patch from Jakub. See the e-mail message
    inside the patch file for details.
  - Use smp_mflags macro


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.6
  - alias binfmt-0000 off (#9709)
  - turn off 'modules.conf is more recent than modules.dep' message (#14276,
    others)
  - return nonzero from depmod if there are errors (#40935)
  - fix manpage typo (#33123)


author: Matt Wilson <msw@redhat.com>
changelog:
  - added a -devel subpackage that contains libraries that apps can use
    to implement insmod and rmmod


author: Bill Nottingham <notting@redhat.com> 2.4.22-7
changelog:
  - make sure we don't use diet anywhere but x86, even if it's lying around
  - fix zlib linkage, for real
  - switch ftape alias (#7674)


author: Bill Nottingham <notting@redhat.com> 2.4.25-2
changelog:
  - add joystick alias (#91309)
  - add alias for af_key for IPSEC
  - update module-init-tools to 0.9.12
  - ship a modprobe.conf.dist with the aliases that are built into 2.4
    modutils
  - generate a modprobe.conf if needed on install


author: Bill Nottingham <notting@redhat.com> 2.4.25-8
changelog:
  - fix leak in module-init-tools-depmod (<arjanv@redhat.com>)
  - look in /lib/modules/`uname -r`/updates for modules


author: Bill Nottingham <notting@redhat.com> 2.4.26-1
changelog:
  - update to 2.4.26
  - switch around man pages; the module-init-tools man pages are now
    the default
  - add backwards compat usb aliases for the simple case
  - add some commentary to modules.conf/modprobe.conf on conversion
  - modutils-devel goes away


author: Bill Nottingham <notting@redhat.com> 2.4.26-6
changelog:
  - update module-init-tools to 3.0pre10
  - fix modinfo (#116305)
  - always include /etc/modprobe.conf.dist (don't require the line in modprobe.conf)
  - ship a static modprobe.conf.dist, don't generate it at build time
  - clean up modprobe.conf.dist a little (#113772, #113768)


author: Bill Nottingham <notting@redhat.com> 2.4.26-9
changelog:
  - add nfsv4 aliases to modprobe.conf.dist
  - clean out upstreamed aliases in modprobe.conf.dist
  - mount rpc_pipefs when sunrpc is loaded


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added the mounting of /proc/fs/nfsd to modprobe.conf.dist
    so it gets mounted when nfsd is loaded.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre1.4.6
changelog:
  - Don't call depmod on removing a kernel.
  - Warn rather than exit if we can't process weak-updates on new kernel
  - Handle duplicate modules by picking the latter version of the two.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre2.1.3
changelog:
  - Updated to upstream with new module priority/override features.
  - Documentation updates and other miscellaneous fixes.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.3
changelog:
  - Updated to upstream with some miscellaneous fixes from contrib.
  - Rebuilt allconf patch since retabbed upstream source.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.5
changelog:
  - BZ205510 fix causes BZ211519 because mkinitrd mistakenly parses the m-i-t
    output including preloading commands. Reverting this patch for now.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.9
changelog:
  - Modify weak-modules to handle module removal against multiple kABI compat.
    kernels at the same time, removing the correct module links.
  - Resolves: #216645.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.10
changelog:
  - Modify weak-modules to handle kmod removal and the need to create
    compatible kernel module links to other compatible modules.
  - Resolves: #215272.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.15
changelog:
  - Prevent modifying existing grub entries (always add them).
  - Don't ask for new entries to be default by default.
  - Resolves: #222085, #222084.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.27
changelog:
  - Make naming of Driver Update Program grub entry more friendly to RHEL users than the previous entries were.
  - Make the resultant grub entry default bootable.
  - Related: #224076.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.31
changelog:
  - Overhaul logic for bootpath driver handling to work with new-kernel-pkg
    grubby better in keeping with their design.
  - Resolves: #252210.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.32
changelog:
  - Update fix to pipe issue and use same logic in other place we call "head -n 1"
  - just in case it would ever also cause similarly noisy output.
  - Resolves: #249537.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.34
changelog:
  - Update to fix inter-module symbol references on 64-bit platforms.
  - (fix wasn't properly in the build yesterday).
  - Resolves: #247986.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.37
changelog:
  - Sort modules alphabetically.
  - Resolves: #249449.
  - Check override of modules.
  - Resolves: #253512.
  - Fix "--dry-run" option.
  - Resolves: #254141.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.39
changelog:
  - Make modprobe operate in nonblocking mode by default
  - Resolves: #280411.
  - Add a --delete-modules to weak-modules to avoid linking compat
  - Resolves: #432959.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.46
changelog:
  - Correct use of 'nm' to avoid unnecessary warning messages.
  - Also add a dependency on binutils and mkinitrd.
  - Resolves: #463777


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.50
changelog:
  - Update weak-modules script to use newer logic on add_modules to
  - avoid occasional creation of needless subdirectories.
  - Resolves: #484762


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.60
changelog:
  - Add SYSV locking in the case of a read-only filesystem.
  - Resolves: #430942
  - Do not create Xen grub boot entries for a running domU.
  - Resolves: #509568
  - Do not re-link compatible module when also removing it.
  - Resolves: #477089


author: Richard Megginson <richm@stanforalumni.org> - 5.17-3
changelog:
  - make more Fedora Core friendly - move each requires and buildrequires to a separate line
  - remove --with-nss since svrcore implies it; fix some macro errors; macro-ize nspr and nss names
  - fix directory attrs in devel package


author: Axel Thimm <Axel.Thimm@ATrpms.net> - 6.0.0-2
changelog:
  - Rename to mozldap.
  - move configure step to %build section.
  - clean up excessive use of %defines, make more Fedora like.
  - fix mismatching soname issue.
  - generic specfile cosmetics.


author: Rich Megginson <richm@stanfordalumni.org> - 6.0.2-1
changelog:
  - Fixed exports file generation for Solaris and Windows - no effect on linux
  - bumped version to 6.0.2


author: Rich Megginson <rmeggins@redhat.com> - 6.0.4-1
changelog:
  - bump version to 6.0.4 - this version has some memory leak
  - fixes for SASL related code, fixes for control handling with
  - referral chasing, and packaging improvements
  - use -p when installing include files to preserve timestamps


author: Rich Megginson <rmeggins@redhat.com> - 6.0.5-2
changelog:
  - Resolves: Bug 753014 - el5 el4 mozldap-tools - anonymous bind ldapsearch segfault on smart referrals


author: Bill Nottingham <notting@redhat.com>
changelog:
  - Hm. 2.5.1pre hasn't been touched in two years. I guess that's 'stable'.
  - add a bugfix patch from debian.


author: Tim Waugh <twaugh@redhat.com> 2.5.2-2
changelog:
  - s/Copyright:/License:/.
  - Don't explicitly strip binaries (bug #62564).
  - Fix -H option (bug #57105).


author: Jitka Kudrnacova <jkudrnac@redhat.com> 2.5.4-6
changelog:
  - Fixed page scaling (bug #173276) and modified the manpage
    (the bug was mentioned in the manpage)


author: Doug Ledford <dledford@redhat.com> - 2.0-2
changelog:
  - Recreate lost spec file and patches from memory
  - Add dist tag to release
  - Turn off FORTIFY_SOURCE when building


author: Doug Ledford <dledford@redhat.com> - 3.0-1
changelog:
  - Update to latest upstream version
  - Compile three times against the three mpi stacks and make three packages
  - Resolves: bz451474


author: Arne Coucheron <arneco@online.no>
changelog:
  [2.5.3-1]
  - using %{name} and %{version} macros
  - using %defattr macro in filelist
  - using install -d in various places instead of cp
  - added -q parameter to %setup
  - removed older changelogs


author: Henri Gomez <gomez@slib.fr>
changelog:
  [2.6.4]
  - removed mrtg-squid (specific OIDS)
  - cfgmaker and indexmaker now /usr/bin
  - libgd must be >= 1.3


author: Ian Macdonald <ianmacd@xs4all.nl>
changelog:
  [2.7.4-1]
  - changed Perl module installation to be version independent
  - changed libgd dependency to gd
  - changed URL
  - strip binaries
  - include contrib directory as documentation


author: Henri Gomez <gomez@slib.fr>
changelog:
  [2.7.4-2]
  - set perl path for contribs
  - set SNMP's perl to /usr/lib/perl5/site_perl (clean for RH5.x and RH6.0)


author: Henri Gomez <gomez@slib.fr>
changelog:
  [2.7.5]
  - removed gd-devel requires, RH5.x use libgd-devel and RH6 gd-devel.
  - removed CR from perl files in contrib.
  - added cfgmaker_ip in binaries.
  - rework modules install/de-install for RH5.x/6.0 compat


author: Henri Gomez <gomez@slib.fr>
changelog:
  [2.8.4]
  - mrtg could use now png instead of gif via gd1.6.1
    but since gd1.6.1 remove all gif reference it could
    break your dependencies, so we don't use it for now.


author: Henri Gomez <gomez@slib.fr>
changelog:
  [2.8.8]
  - important release since rrd support is added
    It came from Rainer Bawidamann work. If you have rrdtool RPM
    installed, just add UseRRDTool: Yes in your config files.
  - added latest patch for mrtg-rrd.
  - to convert your mrtg logs to rrd format, use log2rrd.pl
    you can found on rrdtool package.


author: Henri Gomez <hgomez@slib.fr>
changelog:
  [2.9.2]
  - clean up spec file for 2.9 release
    (no .gif, cfgmaker_ip removed)
  - mrtg 2.9 look for .pm in /usr/lib/mrtg2, so no more need
    to relocate .pm at post time.
  - mrtg config (mrtg.cfg) goes now in /etc/mrtg/
  - added manual to rpm
  - spec file adapted to RH 7.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set LIBS=-lfreetype and LDFLAGS="-lgd -lpng -lfreetype -lm" to link the gd
    support with freetype, which it needs
  - remove Packager: tag (was Packager: Tim Verhoeven <dj@sin.khk.be>)


author: Nalin Dahyabhai <nalin@redhat.com> 2.9.17-1
changelog:
  - update to 2.9.17
  - use FHS macros
  - install the .gif files as well
  - copyright: distributable -> license: GPL


author: Nalin Dahyabhai <nalin@redhat.com> 2.9.17-13
changelog:
  - move crontab data to /etc/cron.d
  - add trigger to remove crontab data from /etc/crontab on removal of
    older versions


author: Nalin Dahyabhai <nalin@redhat.com> 2.9.28-4
changelog:
  - disable use of RPM's internal dependency generator so that we can filter out
    requirements of the contrib scripts included in the docs directory


author: Miloslav Trmac <mitr@redhat.com> - 2.10.15-1
changelog:
  - Update to 2.10.15
  - Use a more generic URL
  - Don't link rateup statically
  - Move threshold and log files to /var/lib/mrtg, lock files to /var/lock/mrtg


author: Jindrich Novy <jnovy@redhat.com> 2.10.15-2
changelog:
  - remove bogus characters from man pages to prevent
    man displaying the page is in wrong encoding (#139341)


author: Miloslav Trmac <mitr@redhat.com> - 2.11.0-1
changelog:
  - Update to mrtg-2.11.0
  - Don't install HTML documentation to /var/www/mrtg
  - Clean up %install a bit


author: Miloslav Trmac <mitr@redhat.com> - 2.12.1-1
changelog:
  - Update to mrtg-2.12.1
  - Remove unnecessary BuildRequires, Requires
  - Don't link rateup to libpng and libz


author: Miloslav Trmac <mitr@redhat.com> - 2.12.2-2
changelog:
  - Add LANG and LC_ALL definition to cron script for easier copying to command
    line (#167530)
  - Don't ship MANIFEST and a very obsolete version of 14all.cgi
  - Fix rewriting of perl paths to /usr/bin/perl in contrib scripts
  - Make contrib scripts unexecutable to avoid unnecessary rpm dependencies;
    remove unnecessary entries from filter-requires-mrtg.sh


author: Andrea Borgia <borgia@cs.unibo.it>
changelog:
  - updated to version 0.5
  - removed the touch to force the build: no binaries are included!
  - added to the docs: README.stinit, stinit.def.examples
  - made buildroot capable


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - patch to make the texi sources compile
  - fix the spec file group and description
  - fixed floppy drive sizes


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - get rid of mtools.texi as a doc file (we have the info file)
  - fix config file so mtools work (#9264)
  - fix references to the config file to be /etc/mtools.conf


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Apply the author's current patches, fixes among other things
    ZIP drive support and doesn't crash when trying to access a BSD disk


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.30-1]
  - Build gtk version against gtk+-1.2.0
  - v0.30
  - Fixed a typo in the changelog (NEWS) entry for 0.27. :-)
  - added use of "MTR_OPTIONS" environment variable for defaults.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.31-1]
  - v0.31
  - Fixed a few documentation issues. -- Matt
  -  Changed the autoconf stuff to find the resolver library on
       Solaris. -- REW
  -  Cleaned up the autoconf.in file a bit. -- Matt.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.33-1]
  - v0.33
  - Fixed the Linux glibc resolver problems.
  - Fixed the off-by-one problem with -c option.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.34-1]
  - v0.34
  - Added Matt's nifty "use the icmp unreachables to do the timing" patch.
  - Added Steve Kann's pause/resume patch.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.35-1]
  - v0.35
  - Added Craig Milo Rogers pause/resume for GTK patch.
  - Added Craig Milo Rogers cleanup of "reset". (restart at the beginning)
  - Net_open used to send a first packet. After that the display-driver
    got a chance to distort the timing by taking its time to initialize.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.37-1]
  - v0.37
  - Added Bill Bogstad's "show the local host & time" patch. 
  - Added R. Sparks' show-last-ping patch, submitted by Philip Kizer.

  - v0.36
  - Added Craigs change-the-interval-on-the-fly patch.
  - Added Moritz Barsnick's "do something sensible if host not found" 
    patch.
  - Some cleanup of both Craigs and Moritz' patches.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  - renamed mtr-gtk to xmtr
  - added symlink from /usr/bin/mtr to /usr/sbin/mtr

    [mtr-0.40-1]
  - Fixed some problems with HPUX and SunOS.
  - Included Olav Kvittem's patch to do packetsize option.
  - Made the timekeeping in micro seconds.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.41-1]
  - Added afr's patch to allow disabeling of gtk without Robn's hack. 
  - Made report mode report the newly added extra resolution.


author: Nalin Dahyabhai <nalin@redhat.com> 0.49-9
changelog:
  - Remove absolute paths from the PAM configuration, ensuring that the modules
    for the right arch get used on multilib systems.
  - Remove Icon:.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Added IPv6 patch from ftp://ftp.kame.net/pub/kame/misc/mtr-054-*
  - Enabled IPv6 in mtr.
  - Included fix from Robert Scheck to make GTK optional in configure.


author: Phil Knirsch <pknirsch@redhat.com> 0.54-7
changelog:
  - Fixed broken behaviour with resolver SERVFAIL results (#125392)
  - Added ncurses-devel libtermcap-devel as BuildPreReq (#124553)
  - Added gtk+ Requires for mtr-gtk package (#121705)


author: Phil Knirsch <pknirsch@redhat.com> 2:0.54-9
changelog:
  - Add CVE patch for security reasons (#129386)
  - Add patch to fix broken --address option (#132628)
  - Add patch to fix broken reverse DNS lookups for ipv6 (#134532)


author: Phil Knirsch <pknirsch@redhat.com> 2:0.69-4
changelog:
  - Made the output, especially for reports much more readable (#147865)
  - Fixed --address option (#162029)


author: Kenneth Porter <shiva@well.com>
changelog:
  - 1.2.6
  - Fixed 'eepos' stuff to use | rather than || (whoops!)
  - Accept a 4-byte element descriptor for the robot arm for certain older
  - autochangers.


author: Jindrich Novy <jnovy@redhat.com> 1.2.18-5
changelog:
  - dead code elimination
  - updated spec link to recent source
  - removed spec link to obsolete URL
  - rebuilt


author: Jindrich Novy <jnovy@redhat.com> 1.2.18-8
changelog:
  - fix type confusion in SCSI_writet(), SCSI_readt(), slow_memcopy()
    and slow_bzero()
  - rebuilt with gcc4


author: Dan Horák <dhorak@redhat.com> - 1.2.18-9
changelog:
  - fixed segfault when scsitape is run with an unknown command-line option (#513984)
  - Resolves: #513984


author: Bill Nottingham <notting@redhat.com>
changelog:
  - get correct manual path the Right Way(tm)
  - make it so it uses default colors even if COLORFGBG isn't set


author: Nalin Dahyabhai <nalin@redhat.com> 5:1.4.1-10
changelog:
  - expect the server to prompt for additional auth data if we have some to
    send (#129961, upstream #1845)
  - use "pop" as the service name instead of "pop-3" when using SASL for POP,
    per rfc1734


author: Bill Nottingham <notting@redhat.com> 5:1.4.2.1-1
changelog:
  - update to 1.4.2.1 (#141007, <moritz@barsnick.net>)
  - include a /etc/Muttrc.local for site config (#123109)
  - add <f2> as a additional help key for terminals that use <f1> internally
    (#139277)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.4.2.2-1
changelog:
  - update to 1.4.2.2
  - fix directories in manual.txt (#162207)
  - drop bcc patch (#197408)
  - don't package flea


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.4.2.2-3.el5
changelog:
  - fix POP authentication with latest cyrus-sasl (#213271)
  - fix insecure temp file creation on NFS (#213274, CVE-2006-5297)


author: Honza Horak <hhorak@redhat.com> 5:1.4.2.2-6.el5
changelog:
  - fix overflow in gecos field handling (#241652, CVE-2007-2683)
    patch mutt-gecos.patch hasn't been committed into RHEL-5 branch 
    while fixing in RHEL-5.0.z, adding now


author: Pavel Shamis <pasha@mellanox.co.il>
changelog:
  - the %build
  LANG=C
  export LANG
  unset DISPLAY
   macro was removed,workaround for SUSE issue - %build
  LANG=C
  export LANG
  unset DISPLAY
   removes $RPM_BUILD_ROOT
  - added "-libcommon" for SuSe10


author: Doug Ledford <dledford@redhat.com> - 1.1.0-0.2931.1
changelog:
  - Rearrange the position of the svn tag in the n-v-r so z stream updates
    won't be so ugly should they ever be needed


author: Doug Ledford <dledford@redhat.com> - 1.1.0-0.2931.2
changelog:
  - Incorporate fixups to Requires(post) and Requires(preun) from openmpi
  - Fix up post/preun scripts to work like the scripts from openmpi11
  - Resolves: bz465448


author: Doug Ledford <dledford@redhat.com> - 1.1.0-0.3355.1.el5
changelog:
  - Update to final ofed 1.4.1 bits
  - Compile against non-XRC libibverbs
  - Related: bz506258, bz506097


author: Doug Ledford <dledford@redhat.com> - 1.0.3-2
changelog:
  - Make scriptlets match mvapich
  - Include a Requires(post) and Requires(preun) so installs work properly
  - Resolves: bz465448


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.1-2jpp
changelog:
  - bzipped additional sources
  - section macro
  - ant already requires jaxp_parser
  - fixed source perms
  - fixed compilation with jsse and javamail
  - buildrequires jsse >= 1.0.2-6jpp
  - buildrequires javamail >= 1.2-5jpp


author: Henri Gomez <hgomez@users.sourceforge.net> 1.1-3jpp
changelog:
  - added missing xsl/jython resources in mx4j-tools.jar
  - correct the build.xml to have correct contents for mx4.jar and mx4j-tools.jar


author: Ralph Apel <r.apel at r-apel.de> 0:2.0.1-2jpp
changelog:
  - Require xml-commons (jpackage), not xml-common (linux)
  - Activate jython- and jetty-related classes
  - Activate unit tests, therefore BuildReq xmlunit
  - Include compliance test, therefore BuildReq jmx, jmxremote
  - Define essential runtime requires
  - Use security manager and relaxed policy


author: Gary Benson <gbenson@redhat.com> 0:2.1.0-1jpp_2fc
changelog:
  - Install mx4j.jar as the jmxri.jar alternative instead of
    mx4j-jmx.jar.  From Anthony Green <green@redhat.com>.


author: Fernando Nasser <fnasser@redhat.com> 0:2.1.0-1jpp
changelog:
  - Upgrade to 2.1.0
  - Do not build caucho part because of version incompatibilities
    From Andrew Overholt <overholt@redhat.com>
  - add coreutils BuildRequires


author: Gary Benson <gbenson@redhat.com> 0:3.0.1-1jpp_1fc
changelog:
  - Upgrade to 3.0.1-1jpp.
  - Add missing build dependency on ant-junit.
  - Build stuff that requires axis and xdoclet now that we ship them.
  - Pick up CORBA and javax.rmi classes from jacorb and jonathan-rmi.


author: Gary Benson <gbenson@redhat.com> 0:3.0.1-1jpp_4fc
changelog:
  - Build on ia64, ppc64, s390 and s390x.
  - Remove explicit references to jacorb and jonathan-rmi.
  - Switch to aot-compile-rpm (also BC-compiles tools).


author: Fernando Nasser <fnasser@redhat.com> 0:3.0.1-3jpp
changelog:
  - Remove dependencies on non-free JXM packages by building MX4J's own
  - Add (re-add?) "java.naming.corba.orb" patch, needed by JOnAS


author: Fernando Nasser <fnasser@redhat.com> 0:3.0.1-4jpp
changelog:
  - Remove duplicate macros
  - Use unversioned burlap and hessian
  - Don't use jetty4 as it is not yet available on JPP 1.7
  - Re-add Epoch to the versions required
  - Split patch for removal of poa
  - Add AOT bits


author: Fernando Nasser <fnasser@redhat.com> 0:3.0.1-4jpp_1fc
changelog:
  - Merge with upstream
  - Do not use jython as it is not available on FC6
  - Do not use jetty4 as it is not available on FC6
  - Do not run tests as xmlunit not available on FC6 (FIXME)
    so do not BR junit as well


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.1 for LinuX/OS 1.7.0
  - Initial version.
  - Some ideas borrowed from Red Hat Powertools 6.1, although this spec
    file is a full rewrite from scratch.


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.2 for LinuX/OS 1.7.1
  - Add post(un)install scripts for updating ld.so.conf (client subpackage).


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.32 release XOS.1 for LinuX/OS 1.8.0
  - Upgrade from version 3.22.27 to 3.22.32.
  - Do "make install" instead of "make install-strip", because "install -s"
    now appears to fail on various scripts.  Afterwards, strip manually.
  - Reorganize subpackages, according to common Red Hat packages: the client
    program and shared library become the base package and the server and
    some accompanying files are now in a separate server package.  The
    server package implicitly requires the base package (shared library),
    but we have added a manual require tag anyway (because of the shared
    config file, and more).
  - Rename the mysql-benchmark subpackage to mysql-bench.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - update to 3.23.20
  - use %configure, %makeinstall, %{_tmppath}, %{_mandir},
    %{_infodir}, /etc/init.d
  - remove the bench package
  - change some of the descriptions a little bit
  - fix the init script
  - some compile fixes
  - specify mysql user
  - use mysql uid 27 (postgresql is 26)
  - don't build on ia64


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 3.23.21
  - remove file from /etc/sysconfig
  - Fix initscript a bit - initialization of databases doesn't
    work yet
  - specify the correct licenses
  - include a /etc/my.conf (empty, FTTB)
  - add conditional restart to spec file


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - try the new compiler again
  - build the SQL daemon statically
  - add compile time support for complex charsets
  - enable assembler
  - more cleanups in initscript


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - don't build the SQL daemon statically (glibc problems)
  - fix the logrotate script - only flush log if mysql
    is running
  - change the reloading procedure 
  - remove icon - glint is obsolete a long time ago


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - don't run ldconfig -n, it doesn't update ld.so.cache
    (#16034)
  - include some missing binaries
  - use safe_mysqld to start the server (request from
    mysql developers)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - rename config file to /etc/my.cnf, which is what
    mysqld wants... doh. (#17432)
  - include a changed safe_mysqld, so the pid file option
    works. 
  - make mysql dir world readable to they can access the 
    mysql socket. (#17432)
  - 3.23.24


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 3.23.26, which among other fixes now uses mkstemp()
    instead of tempnam().
  - revert changes made yesterday, the problem is now
    isolated


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - check for negative niceness values, and negate it
    if present (#17899)
  - redefine optflags on IA32 FTTB


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - bzipped source
  - changed from 85 to 78 in startup, so it starts before
    apache (which can use modules requiring mysql)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 3.23.30
  - do an explicit chmod on /var/lib/mysql in post, to avoid 
    any problems with broken permissons. There is a report
    of rm not changing this on its own (#22989)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add the log file to the rpm database, and make it 0640
    (#24116)
  - as above in logrotate script
  - changes to the init sequence - put most of the data
    in /etc/my.cnf instead of hardcoding in the init script
  - use /var/run/mysqld/mysqld.pid instead of 
    /var/run/mysqld/pid
  - use standard safe_mysqld
  - shut down cleaner


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - gettextize
  - move the items in Requires(post): to Requires: in preparation
    for an errata for 7.0 when 3.23.31 is released
  - 3.23.31


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Make it obsolete our 6.2 PowerTools packages
  - 3.23.36 bugfix release - fixes some security issues
    which didn't apply to our standard configuration
  - Make "make test" part of the build process, except on IA64
    (it fails there)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Reenable test, but don't run them for s390, s390x or ia64
  - Make /etc/my.cnf config(noplace). Same for /etc/logrotate.d/mysqld


author: Trond Eivind Glomsrød <teg@redhat.com> 3.23.41-1
changelog:
  - 3.23.41 bugfix release
  - disable innodb, to avoid the broken updates
  - Use "mysqladmin flush_logs" instead of kill -HUP in logrotate 
    script (#51711)


author: Trond Eivind Glomsrød <teg@redhat.com> 3.23.46-1
changelog:
  - 3.23.46
  - use -fno-rtti and -fno-exceptions, and set CXX to increase stability. 
    Recommended by mysql developers.


author: Trond Eivind Glomsrød <teg@redhat.com> 3.23.47-4
changelog:
  - Use kill, not mysqladmin, to flush logs and shut down. Thus, 
    an admin password can be set with no problems.
  - Remove reload from init script


author: Trond Eivind Glomsrød <teg@redhat.com> 3.23.49-3
changelog:
  - Add the various .cnf examples as doc files to mysql-server (#60349)
  - Don't include manual.ps, it's just 200 bytes with a URL inside (#60349)
  - Don't include random files in /usr/share/mysql (#60349)
  - langify (#60349)


author: Trond Eivind Glomsrød <teg@redhat.com> 3.23.52-2
changelog:
  - Add --enable-local-infile to configure - a new option
    which doesn't default to the old behaviour (#72885)


author: Patrick Macdonald <patrickm@redhat.com> 3.23.57-1
changelog:
  - revert to prior version of MySQL due to license incompatibilities 
    with packages that link against the client.  The MySQL folks are
    looking into the issue.


author: Tom Lane <tgl@redhat.com> 3.23.58-8
changelog:
  - repair logfile attributes in %files, per bug #102190
  - repair quoting problem in mysqlhotcopy, per bug #112693
  - repair missing flush in mysql_setpermission, per bug #113960
  - repair broken error message printf, per bug #115165
  - delete mysql user during uninstall, per bug #117017
  - rebuilt


author: Tom Lane <tgl@redhat.com> 3.23.58-11
changelog:
  - fix low-priority security issues CAN-2004-0388, CAN-2004-0381, CAN-2004-0457
    (bugs #119442, 125991, 130347, 130348)
  - fix bug with dropping databases under recent kernels (bug #124352)


author: Tom Lane <tgl@redhat.com> 3.23.58-12
changelog:
  - fix multilib problem with mysqlbug and mysql_config
  - adjust chkconfig priority per bug #128852
  - remove bogus quoting per bug #129409 (MySQL 4.0 has done likewise)
  - add sleep to mysql.init restart(); may or may not fix bug #133993


author: Tom Lane <tgl@redhat.com> 3.23.58-13
changelog:
  - fix security issues CAN-2004-0835, CAN-2004-0836, CAN-2004-0837
    (bugs #135372, 135375, 135387)
  - fix privilege escalation on GRANT ALL ON `Foo\_Bar` (CAN-2004-0957)


author: Tom Lane <tgl@redhat.com> 4.1.7-4
changelog:
  - Turn off old_passwords in default /etc/my.cnf file, for better compatibility
    with mysql 3.x clients (per suggestion from Joe Orton).


author: Tom Lane <tgl@redhat.com> 4.1.7-6
changelog:
  - Fix init script to not need a valid username for startup check (bz#142328)
  - Fix init script to honor settings appearing in /etc/my.cnf (bz#76051)
  - Enable SSL (bz#142032)


author: Tom Lane <tgl@redhat.com> 4.1.10-2
changelog:
  - Need -fno-strict-aliasing in at least one place, probably more.
  - Work around some C spec violations in mysql.


author: Tom Lane <tgl@redhat.com> 4.1.10a-1
changelog:
  - Update to MySQL 4.1.10a to fix security vulnerabilities (bz#150868,
    for CAN-2005-0711, and bz#150871 for CAN-2005-0709, CAN-2005-0710).


author: Tom Lane <tgl@redhat.com> 4.1.11-1
changelog:
  - Update to MySQL 4.1.11 to fix bz#152911 as well as other issues
  - Move perl-DBI, perl-DBD-MySQL dependencies to server package (bz#154123)
  - Override configure thread library test to suppress HAVE_LINUXTHREADS check
  - Fix BDB failure on s390x (bz#143537)
  - At last we can enable "make test" on all arches


author: Tom Lane <tgl@redhat.com> 4.1.11-2
changelog:
  - Avoid dependency on <asm/atomic.h>, cause it won't build anymore on ia64.
    This is probably a cleaner solution for bz#143537, too.


author: Tom Lane <tgl@redhat.com> 4.1.11-3
changelog:
  - Enable openssl tests during build, per bz#155850
  - Might as well turn on --disable-dependency-tracking


author: Tom Lane <tgl@redhat.com> 4.1.12-1
changelog:
  - Update to MySQL 4.1.12 (includes a fix for bz#158688, bz#158689)
  - Extend mysql-test-ssl.patch to solve rpl_openssl test failure (bz#155850)
  - Update mysql-lock-ssl.patch to match the upstream committed version
  - Add --with-isam to re-enable the old ISAM table type, per bz#159262
  - Add dependency on openssl-devel per bz#159569
  - Remove manual.txt, as upstream decided not to ship it anymore;
    it was redundant with the mysql.info file anyway.


author: Tom Lane <tgl@redhat.com> 4.1.12-2
changelog:
  - Fix buffer overflow newly exposed in isam code; it's the same issue
    previously found in myisam, and not very exciting, but I'm tired of
    seeing build warnings.


author: Tom Lane <tgl@redhat.com> 5.0.16-1
changelog:
  - Update to MySQL 5.0.16
  - Add EXCEPTIONS-CLIENT license info to the shipped documentation
  - Make my_config.h architecture-independent for multilib installs;
    put the original my_config.h into my_config_$ARCH.h
  - Add -fwrapv to CFLAGS so that gcc 4.1 doesn't break it


author: Tom Lane <tgl@redhat.com> 5.0.18-4
changelog:
  - Modify multilib header hack to not break non-RH arches, per bug #181335
  - Remove logrotate script, per bug #180639.
  - Add a new mysql-test RPM to carry the regression test files;
    hack up test scripts as needed to make them run in /usr/share/mysql-test.


author: Tom Lane <tgl@redhat.com> 5.0.22-1
changelog:
  - Update to MySQL 5.0.22 (fixes CVE-2006-2753)
  - Install temporary workaround for gcc bug on s390x (bz #193912)


author: Tom Lane <tgl@redhat.com> 5.0.22-2
changelog:
  - Work around brew's tendency not to clean up failed builds completely,
    by adding code in mysql-testing.patch to kill leftover mysql daemons.


author: Tom Lane <tgl@redhat.com> 5.0.45-1
changelog:
  - Update to MySQL 5.0.45
  Resolves: #256501, #240813, #246309, #254012
  Resolves: #280811, #316451, #349121, #367131
  - Synchronize with current Fedora package, which is pretty well tested by now;
    see past bzs 245770, 241912, 233771, 221085, 223713, 203910, 193559, 199368


author: Tom Lane <tgl@redhat.com> 5.0.45-7
changelog:
  - Adjust thread stack requests to allow for platform-specific guard page size;
    necessary to prevent stack overrun on PPC with RHEL5's 64K page size.
  Resolves: #435391
  - Remove calendar-dependent queries from "view" test; necessary to get
    regression tests to pass after 2007.


author: Tom Lane <tgl@redhat.com> 5.0.77-1
changelog:
  - Update to MySQL 5.0.77, for numerous fixes described at
    http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-77.html
    including low-priority security issues CVE-2008-2079, CVE-2008-3963
  Resolves: #448487, #448534, #452824, #453156, #455619, #456875
  Resolves: #457218, #462534, #470036, #476896, #479615
  - Improve mysql.init to pass configured datadir to mysql_install_db,
    and to force user=mysql for both mysql_install_db and mysqld_safe.
  Resolves: #450178
  - Fix mysql.init to wait correctly when socket is not in default place
  Resolves: #435494


author: Tom Lane <tgl@redhat.com> 5.0.77-3
changelog:
  - Add fix for CVE-2009-2446 (format string vulnerability in COM_CREATE_DB and
    COM_DROP_DB processing)
  Resolves: #512200


author: Tom Lane <tgl@redhat.com> 5.0.77-5
changelog:
  - Add fixes for CVE-2009-4019, CVE-2009-4028, CVE-2009-4030
  Resolves: #556506
  - Use non-expired certificates for SSL testing (upstream bug 50702)
  - Emit explicit error message if user tries to build RPM as root
  - Add comment suggesting disabling symbolic links in /etc/my.cnf


author: Tom Lane <tgl@redhat.com> 5.0.77-7
changelog:
  - Add fixes for CVE-2010-3677, CVE-2010-3680, CVE-2010-3681, CVE-2010-3682,
    CVE-2010-3833, CVE-2010-3835, CVE-2010-3836, CVE-2010-3837, CVE-2010-3838,
    CVE-2010-3839, CVE-2010-3840
  Resolves: #645643
  - Backpatch strmov fix so that code can be tested on more recent platforms


author: Tom Lane <tgl@redhat.com> 5.0.95-1
changelog:
  - Update to 5.0.95, to get the last upstream bugfixes in this release series
    including numerous CVEs announced in January 2012
  Resolves: #787141


author: Tom Lane <tgl@redhat.com> 5.0.95-2
changelog:
  - Support rotation of mysqld log (though this is not enabled by default)
  Resolves: #647223
  - Fix crash with EXPLAIN and prepared statements
  Resolves: #654000
  - Adopt init script updates from the last Fedora init script (F-15)
  Resolves: #703476
  - Re-enable profiling feature, unintentionally disabled in 5.0.95-1
  Resolves: #806365


author: Honza Horak <hhorak@redhat.com> 1-3
changelog:
  - Fix Environment variables definition
  - Build separately on all arches
  - Require mysql-server from the collection as main package
    since we focus only on the server part


author: Tom Lane <tgl@redhat.com> 5.0.27-1
changelog:
  - Update to MySQL 5.0.27 (see CVE-2006-4031, CVE-2006-4226, CVE-2006-4227)
  Resolves: #202247, #202675, #203427, #203428, #203432, #203434, #208641
  - Fix init script to return status 1 on server start timeout
  Resolves: #203910
  - Move mysqldumpslow from base package to mysql-server
  Resolves: #193559
  - Adjust link options for BDB module
  Resolves: #199368


author: Tom Lane <tgl@redhat.com> 5.0.33-1
changelog:
  - Update to MySQL 5.0.33
  - Install band-aid fix for "view" regression test designed to fail after 2006
  - Don't chmod -R the entire database directory tree on every startup
  Related: #221085
  - Fix unsafe use of install-info
  Resolves: #223713
  - Cope with new automake in F7
  Resolves: #224171


author: Tom Lane <tgl@redhat.com> 5.0.37-1
changelog:
  - Update to MySQL 5.0.37
  Resolves: #231838
  - Put client library into a separate mysql-libs RPM to reduce dependencies
  Resolves: #205630


author: Tom Lane <tgl@redhat.com> 5.0.37-2
changelog:
  - Use a less hacky method of getting default values in initscript
  Related: #233771, #194596
  - Improve packaging of mysql-libs per suggestions from Remi Collet
  Resolves: #233731
  - Update default /etc/my.cnf ([mysql.server] has been bogus for a long time)


author: Tom Lane <tgl@redhat.com> 5.0.45-1
changelog:
  - Update to MySQL 5.0.45
  Resolves: #246535
  - Move mysql_config's man page to base package
  Resolves: #245770
  - move my_print_defaults to base RPM, for consistency with Stacks packaging
  - mysql user is no longer deleted at RPM uninstall
  Resolves: #241912


author: Tom Lane <tgl@redhat.com> 5.0.45-2
changelog:
  - Update License tag to match code.
  - Work around recent Fedora change that makes "open" a macro name.


author: Tom Lane <tgl@redhat.com> 5.0.45-4
changelog:
  - Seems we need explicit BuildRequires on gawk and procps now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 5.0.45-7
changelog:
  - Unbelievable ... upstream still thinks that it's a good idea to have a
    regression test that is guaranteed to begin failing come January 1.
  - ... and it seems we need to raise STACK_MIN_SIZE again too.


author: Tom Lane <tgl@redhat.com> 5.0.45-9
changelog:
  - Fix the stack overflow problem encountered in January.  It seems the real
  issue is that the buildfarm machines were moved to RHEL5, which uses 64K not
  4K pages on PPC, and because RHEL5 takes the guard area out of the requested
  thread stack size we no longer had enough headroom.
  Related: #435337


author: Dennis Gilmore <dennis@ausil.us> 5.0.45-10
changelog:
  - add sparc64 to 64 bit arches for test suite checking
  - add sparc, sparcv9 and sparc64 to multilib handling


author: Tom Lane <tgl@redhat.com> 5.0.45-11
changelog:
  - Fix mysql-stack-guard patch to work correctly on IA64
  - Fix mysql.init to wait correctly when socket is not in default place
  Related: #435494


author: Tom Lane <tgl@redhat.com> 5.0.51a-2
changelog:
  - Enable ndbcluster support
  Resolves: #163758
  - Suppress odd crash messages during package build, caused by trying to
    build dbug manual (which we don't install anyway) with dbug disabled
  Resolves: #437053
  - Improve mysql.init to pass configured datadir to mysql_install_db,
    and to force user=mysql for both mysql_install_db and mysqld_safe.
  Related: #450178


author: Tom Lane <tgl@redhat.com> 5.0.67-1
changelog:
  - Update to mysql version 5.0.67
  - Move mysql_config's man page to base package, again (apparently I synced
    that change the wrong way while importing specfile changes for ndbcluster)


author: Tom Lane <tgl@redhat.com> 5.0.67-2
changelog:
  - Build the "embedded server" library, and package it in a new sub-RPM
    mysql-embedded, along with mysql-embedded-devel for devel support files.
  Resolves: #149829


author: Tom Lane <tgl@redhat.com> 5.1.30-1
changelog:
  - Update to MySQL 5.1.30.  Note that this includes an ABI break for
    libmysqlclient (it's now got .so major version 16).
  - This also updates mysql for new openssl build


author: Tom Lane <tgl@redhat.com> 5.1.30-2
changelog:
  - hm, apparently --with-innodb and --with-ndbcluster are still needed
    even though no longer documented ...


author: Tom Lane <tgl@redhat.com> 5.1.33-1
changelog:
  - Update to MySQL 5.1.33.
  - Disable use of pthread_setschedparam; doesn't work the way code expects.
  Related: #477624


author: Tom Lane <tgl@redhat.com> 5.1.34-1
changelog:
  - Update to MySQL 5.1.34, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-34.html
  - Increase startup timeout per bug #472222


author: Tom Lane <tgl@redhat.com> 5.1.35-1
changelog:
  - Update to MySQL 5.1.35, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-35.html
  - Ensure that /var/lib/mysql is created with the right SELinux context
  Resolves: #502966


author: Tom Lane <tgl@redhat.com> 5.1.36-1
changelog:
  - Update to MySQL 5.1.36, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-36.html


author: Tom Lane <tgl@redhat.com> 5.1.37-1
changelog:
  - Update to MySQL 5.1.37, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-37.html


author: Tom Lane <tgl@redhat.com> 5.1.37-2
changelog:
  - Add a couple of patches to improve the probability of the regression tests
    completing in koji builds


author: Tom Lane <tgl@redhat.com> 5.1.37-4
changelog:
  - Remove one misguided patch; turns out I was chasing a glibc bug
  - Temporarily disable "main.mysql" test; there's something broken there too,
    but we need to get mysql built in rawhide for dependency reasons


author: Tom Lane <tgl@redhat.com> 5.1.37-5
changelog:
  - Work around unportable assumptions about stpcpy(); re-enable main.mysql test
  - Clean up some obsolete parameters to the configure script


author: Tom Lane <tgl@redhat.com> 5.1.39-1
changelog:
  - Update to MySQL 5.1.39, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-39.html


author: Tom Lane <tgl@redhat.com> 5.1.39-3
changelog:
  - Work around two different compiler bugs on sparc, one by backing off
    optimization from -O2 to -O1, and the other with a klugy patch
  Related: #529298, #529299
  - Clean up bogosity in multilib stub header support: ia64 should not be
    listed (it's not multilib), sparc and sparc64 should be


author: Tom Lane <tgl@redhat.com> 5.1.40-1
changelog:
  - Update to MySQL 5.1.40, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-40.html
  - Do not force the --log-error setting in mysqld init script
  Resolves: #533736


author: Tom Lane <tgl@redhat.com> 5.1.41-1
changelog:
  - Update to MySQL 5.1.41, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html
    including fixes for CVE-2009-4019
  Resolves: #549327
  - Don't set old_passwords=1; we aren't being bug-compatible with 3.23 anymore
  Resolves: #540735


author: Tom Lane <tgl@redhat.com> 5.1.42-4
changelog:
  - Sync with current Fedora build, including:
  - Update to MySQL 5.1.42, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-42.html
  - Disable symbolic links by default in /etc/my.cnf
  Resolves: #553653
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines
  - Disable building the innodb plugin; it tickles assorted gcc bugs and
    doesn't seem entirely ready for prime time anyway.
  Resolves: #553632
  - Start mysqld_safe with --basedir=/usr, to avoid unwanted SELinux messages
    (see 547485)
  - Stop waiting during "service mysqld start" if mysqld_safe exits
  Resolves: #544095


author: Tom Lane <tgl@redhat.com> 5.1.42-7
changelog:
  - Add backported patch for CVE-2008-7247 (upstream bug 39277)
  Resolves: #549329
  - Use non-expired certificates for SSL testing (upstream bug 50702)


author: Tom Lane <tgl@redhat.com> 5.1.43-2
changelog:
  - Update to MySQL 5.1.43, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html
  Resolves: #565554
  - Remove mysql-cluster, which is no longer supported by upstream in this
    source distribution.  If we want it we'll need a separate SRPM for it.
  Resolves: #565210


author: Tom Lane <tgl@redhat.com> 5.1.44-2
changelog:
  - Update to MySQL 5.1.44, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-44.html
  Resolves: #565554
  - Remove mysql.info, which is not freely redistributable
  Related: #560181
  - Revert broken upstream fix for their bug 45058
  Related: #566547
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Resolves: #557711
  Resolves: #562749


author: Tom Lane <tgl@redhat.com> 5.1.47-1
changelog:
  - Update to MySQL 5.1.47, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-45.html
    including fixes for CVE-2010-1621, CVE-2010-1626,
    CVE-2010-1848, CVE-2010-1849, CVE-2010-1850
  Resolves: #590598
  - Create mysql group explicitly in pre-server script, to ensure correct GID


author: Tom Lane <tgl@redhat.com> 5.1.47-2
changelog:
  - Add back "partition" storage engine
  Resolves: #598585
  - Fix broken "federated" storage engine plugin
  Resolves: #587170
  - Read all certificates in SSL certificate files, to support chained certs
  Resolves: #598656


author: Tom Lane <tgl@redhat.com> 5.1.47-3
changelog:
  - Add -p "$mypidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #596008


author: Tom Lane <tgl@redhat.com> 5.1.47-4
changelog:
  - Add backported patch for CVE-2010-2008 (upstream bug 53804)
  Resolves: #614215
  - Add BuildRequires perl(Time::HiRes) ... seems to no longer be installed
    by just pulling in perl.


author: Tom Lane <tgl@redhat.com> 5.1.52-1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
    including numerous small security issues
  Resolves: #652554
  - Sync with current Fedora package; this includes:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig


author: Tom Lane <tgl@redhat.com> 5.1.61-1
changelog:
  - Update to 5.1.61, for assorted upstream bugfixes including
    numerous CVEs announced in January 2012
  Resolves: #787192


author: Tom Lane <tgl@redhat.com> 5.1.66-1
changelog:
  - Update to 5.1.66, for assorted upstream bugfixes including
    CVEs announced in July and October 2012
  Resolves: #871814


author: Tom Lane <tgl@redhat.com> 5.1.67-1
changelog:
  - Update to 5.1.67, for assorted upstream bugfixes including
    CVEs announced in January 2013
  Resolves: #901381


author: Honza Horak <hhorak@redhat.com> 5.1.67-4
changelog:
  - Fix checking scl environment in the init script
  - Fix checking daemon process status
  - Fix log file path in logrotate script


author: Honza Horak <hhorak@redhat.com> 5.1.67-6
changelog:
  - Spec file fixes found in Package Review #950050
  - Use log file prefixed by scl name and located in /var/log


author: Honza Horak <hhorak@redhat.com> 5.1.69-1
changelog:
  - Update to 5.1.69
  - Do not set SSL option SSL_OP_NO_COMPRESSION that does not
    exist in openssl-0.9.8


author: Honza Horak <hhorak@redhat.com> 5.1.69-2
changelog:
  - Fix reporting of service starting
    Related: #958098
  - Include mysqlhotcopy script
  - Use correct service name in the init script
  - Test suite sanity fixes


author: Honza Horak <hhorak@redhat.com> 5.1.69-6
changelog:
  - Restore SELinux context after installing -server package
  - Sub-package -test should require -libs
  - Added BuildRequire: scl-utils-build for any case


author: Honza Horak <hhorak@redhat.com> 5.1.70-1
changelog:
  - Update to MySQL 5.1.70, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-70.html
    Resolves: #986138


author: Honza Horak <hhorak@redhat.com> 1-4
changelog:
  - create service-environment file to hold information about all collections,
    that should be enabled when service is starting
  - fixed environment variable name
  - rename spec file-name to correspond with package name


author: Honza Horak <hhorak@redhat.com> 1-7
changelog:
  - Don't require policycoreutils-python in RHEL-5 or older
  - Require mysql-server from the collection as main package
  - Build separately on all arches
  - Fix Environment variables definition


author: Honza Horak <hhorak@redhat.com> 1-10
changelog:
  - Handle context of the init script
  - Change context on whole root directory (libselinux is fixed now #953947)
  - Add better descriptions for packages
  - Create SELinux context rules also for RHEL-5


author: Tom Lane <tgl@redhat.com> 5.1.41-1
changelog:
  - Update to MySQL 5.1.41, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html
    including fixes for CVE-2009-4019
  Related: #540906
  - Don't set old_passwords=1; we aren't being bug-compatible with 3.23 anymore
  Resolves: #540735


author: Tom Lane <tgl@redhat.com> 5.1.42-1
changelog:
  - Update to MySQL 5.1.42, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-42.html
  - Start mysqld_safe with --basedir=/usr, to avoid unwanted SELinux messages
  Resolves: #547485


author: Tom Lane <tgl@redhat.com> 5.1.42-2
changelog:
  - Disable building the innodb plugin; it tickles assorted gcc bugs and
    doesn't seem entirely ready for prime time anyway.


author: Tom Lane <tgl@redhat.com> 5.1.42-3
changelog:
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines


author: Tom Lane <tgl@redhat.com> 5.1.42-7
changelog:
  - Add backported patch for CVE-2008-7247 (upstream bug 39277)
  Related: #543619
  - Use non-expired certificates for SSL testing (upstream bug 50702)


author: Tom Lane <tgl@redhat.com> 5.1.43-1
changelog:
  - Update to MySQL 5.1.43, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html


author: Tom Lane <tgl@redhat.com> 5.1.43-2
changelog:
  - Remove mysql-cluster, which is no longer supported by upstream in this
    source distribution.  If we want it we'll need a separate SRPM for it.


author: Tom Lane <tgl@redhat.com> 5.1.44-1
changelog:
  - Update to MySQL 5.1.44, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-44.html
  - Remove mysql.info, which is not freely redistributable
  Resolves: #560181
  - Revert broken upstream fix for their bug 45058
  Resolves: #566547


author: Tom Lane <tgl@redhat.com> 5.1.44-2
changelog:
  - Add "Obsoletes: mysql-cluster" to fix upgrade-in-place from F-12
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Related: #557711
  Related: #562749


author: Tom Lane <tgl@redhat.com> 5.1.45-1
changelog:
  - Update to MySQL 5.1.45, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-45.html


author: Tom Lane <tgl@redhat.com> 5.1.45-2
changelog:
  - Fix multiple problems described in upstream bug 52019, because regression
    tests fail on PPC if we don't.


author: Tom Lane <tgl@redhat.com> 5.1.46-1
changelog:
  - Update to MySQL 5.1.46, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html


author: Tom Lane <tgl@redhat.com> 5.1.47-1
changelog:
  - Update to MySQL 5.1.47, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
    including fixes for CVE-2010-1848, CVE-2010-1849, CVE-2010-1850
  Resolves: #592862
  Resolves: #583717
  - Create mysql group explicitly in pre-server script, to ensure correct GID
  Related: #594155


author: Tom Lane <tgl@redhat.com> 5.1.47-2
changelog:
  - Add back "partition" storage engine
  Resolves: #597390
  - Fix broken "federated" storage engine plugin
  Related: #587170
  - Read all certificates in SSL certificate files, to support chained certs
  Related: #598656


author: Tom Lane <tgl@redhat.com> 5.1.48-1
changelog:
  - Update to MySQL 5.1.48, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-48.html
    including a fix for CVE-2010-2008
  Related: #614214


author: Tom Lane <tgl@redhat.com> 5.1.48-2
changelog:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig
  Related: #609734


author: Tom Lane <tgl@redhat.com> 5.1.50-1
changelog:
  - Update to MySQL 5.1.50, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-50.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html


author: Tom Lane <tgl@redhat.com> 5.1.50-2
changelog:
  - Include my_compiler.h in distribution, per upstream bug #55846.
    Otherwise PHP, for example, won't build.


author: Tom Lane <tgl@redhat.com> 5.1.51-1
changelog:
  - Update to MySQL 5.1.51, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html


author: Tom Lane <tgl@redhat.com> 5.1.52-1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
  Resolves: #646569


author: Tom Lane <tgl@redhat.com> 5.5.8-1
changelog:
  - Update to MySQL 5.5.8 (major version bump).  Note this includes removal
    of libmysqlclient_r.so.
  - Add a linker version script to hide libmysqlclient functions that aren't
    part of the documented API.


author: Tom Lane <tgl@redhat.com> 5.5.8-3
changelog:
  - my_print_help, load_defaults, free_defaults, and handle_options all turn
    out to be documented/recommended in Paul DuBois' MySQL book, so we'd better
    consider them part of the de-facto API.
  Resolves: #666728


author: Tom Lane <tgl@redhat.com> 5.5.8-6
changelog:
  - Remove no-longer-needed special switches in CXXFLAGS, per yesterday's
    discussion in fedora-devel about -fexceptions.
  - Rebuild needed anyway to check compatibility with latest systemtap.


author: Tom Lane <tgl@redhat.com> 5.5.8-8
changelog:
  - PPC64 floating-point differences are not masked by -ffloat-store after all,
    so let's just disable gis regression test till upstream makes it less picky
  Resolves: #674253
  - Add __perllib_requires setting to make rpm 4.9 do what we need


author: Tom Lane <tgl@redhat.com> 5.5.8-9
changelog:
  - Support s390/s390x in performance schema's cycle-counting functions
    (needed to make regression tests pass on these platforms)


author: Tom Lane <tgl@redhat.com> 5.5.9-1
changelog:
  - Update to MySQL 5.5.9, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-9.html
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines


author: Tom Lane <tgl@redhat.com> 5.5.10-1
changelog:
  - Update to MySQL 5.5.10, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-10.html
    Note that this includes a rather belated soname version bump for
    libmysqlclient.so, from .16 to .18
  - Add tmpfiles.d config file so that /var/run/mysqld is recreated at boot
    (only needed in Fedora 15 and later)
  Resolves: #658938


author: Tom Lane <tgl@redhat.com> 5.5.10-2
changelog:
  - Add my_make_scrambled_password to the list of symbols exported by
    libmysqlclient.so.  Needed at least by pure-ftpd.


author: Tom Lane <tgl@redhat.com> 5.5.10-3
changelog:
  - Add LSB init block to initscript, to ensure sane ordering at system boot
  Resolves: #703214
  - Improve initscript start action to notice when mysqladmin is failing
    because of configuration problems
  Related: #703476
  - Remove exclusion of "gis" regression test, since upstream bug 59908
    is fixed (for some value of "fixed") as of 5.5.10.


author: Tom Lane <tgl@redhat.com> 5.5.12-1
changelog:
  - Update to MySQL 5.5.12, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-12.html


author: Tom Lane <tgl@redhat.com> 5.5.13-1
changelog:
  - Update to MySQL 5.5.13, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-13.html


author: Tom Lane <tgl@redhat.com> 5.5.14-1
changelog:
  - Update to MySQL 5.5.14, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-14.html


author: Tom Lane <tgl@redhat.com> 5.5.14-2
changelog:
  - Remove make_scrambled_password and make_scrambled_password_323 from mysql.h,
    since we're not allowing clients to call those functions anyway
  Related: #690346


author: Tom Lane <tgl@redhat.com> 5.5.15-2
changelog:
  - Update to MySQL 5.5.15, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-15.html


author: Tom Lane <tgl@redhat.com> 5.5.16-2
changelog:
  - Update to MySQL 5.5.16, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-16.html


author: Honza Horak <hhorak@redhat.com> 5.5.16-4
changelog:
  - Don't assume all ethernet devices are named ethX
  Resolves: #682365
  - Exclude user definition from my.cnf, user is defined in mysqld.service now
  Resolves: #661265


author: Tom Lane <tgl@redhat.com> 5.5.17-1
changelog:
  - Update to MySQL 5.5.17, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-17.html
  - Get rid of version-number assumption in sysv-to-systemd conversion trigger


author: Tom Lane <tgl@redhat.com> 5.5.18-1
changelog:
  - Update to MySQL 5.5.18, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-18.html


author: Tom Lane <tgl@redhat.com> 5.5.19-1
changelog:
  - Update to MySQL 5.5.19, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-19.html


author: Tom Lane <tgl@redhat.com> 5.5.20-1
changelog:
  - Update to MySQL 5.5.20, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-20.html
    as well as security fixes described at
    http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
  Resolves: #783828
  - Re-include the mysqld logrotate script, now that it's not so bogus
  Resolves: #547007


author: Tom Lane <tgl@redhat.com> 5.5.20-2
changelog:
  - Revise our test-disabling method to make it possible to disable tests on a
    platform-specific basis, and also to get rid of mysql-disable-test.patch,
    which broke in just about every upstream update (Honza Horak)
  - Disable cycle-counter-dependent regression tests on ARM, since there is
    not currently any support for that in Fedora ARM kernels
  Resolves: #773116
  - Add some comments to mysqld.service documenting how to customize it
  Resolves: #785243


author: Tom Lane <tgl@redhat.com> 5.5.21-1
changelog:
  - Update to MySQL 5.5.21, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-21.html
  - Hack openssl regression test to still work with rawhide's openssl
  - Fix assorted failures in post-install regression tests (mysql-test RPM)
  Resolves: #789530


author: Honza Horak <hhorak@redhat.com> 5.5.21-2
changelog:
  - Fix ssl-related tests to specify expected cipher explicitly
  Related: #789600
  - Fix several strcpy calls to check destination size


author: Honza Horak <hhorak@redhat.com> 5.5.21-3
changelog:
  - Revise mysql_plugin test patch so it moves plugin files to
    a temporary directory (better solution to #789530)


author: Tom Lane <tgl@redhat.com> 5.5.22-1
changelog:
  - Update to MySQL 5.5.22, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-22.html
  - Turn on PrivateTmp in service file
  Resolves: #782513
  - Comment out the contents of /etc/logrotate.d/mysqld, so that manual
    action is needed to enable log rotation.  Given the multiple ways in
    which the rotation script can fail, it seems imprudent to try to make
    it run by default.
  Resolves: #799735


author: Tom Lane <tgl@redhat.com> 5.5.23-1
changelog:
  - Update to MySQL 5.5.23, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-23.html


author: Tom Lane <tgl@redhat.com> 5.5.24-1
changelog:
  - Update to MySQL 5.5.24, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-24.html
    including the fix for CVE-2012-2122
  Resolves: #830680
  - Tweak logrotate script to put the right permissions on mysqld.log
  - Minor specfile fixes for recent packaging guidelines changes


author: Tom Lane <tgl@redhat.com> 5.5.25a-1
changelog:
  - Update to MySQL 5.5.25a, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-25a.html
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-25.html
  - Don't use systemd's Restart feature; rely on mysqld_safe instead
  Resolves: #832029


author: Tom Lane <tgl@redhat.com> 5.5.27-1
changelog:
  - Update to MySQL 5.5.27, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-27.html


author: Tom Lane <tgl@redhat.com> 5.5.28-1
changelog:
  - Update to MySQL 5.5.28, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-28.html
  - Clean up partially-created database files when mysql_install_db fails
  Related: #835131
  - Honor user and group settings from service file in mysqld-prepare-db-dir
  Resolves: #840431
  - Export THR_KEY_mysys as a workaround for inadequate threading support
  Resolves: #846602
  - Adopt new systemd macros for server package install/uninstall triggers
  Resolves: #850222
  - Use --no-defaults when invoking mysqladmin to wait for the server to start
  Related: #855704


author: Honza Horak <hhorak@redhat.com> 5.5.28-2
changelog:
  - Re-enable SCLs after /sbin/service clears environment variables
  - Have socket file the same path as core mysql
  - Do not use systemd macros


author: Honza Horak <hhorak@redhat.com> 5.5.28-3
changelog:
  - Use a config file for specifying SCLS enabled when starting service
  - Changed way how patches are enhanced with SCL values
  - Fixed scl scripts path replacement
  - Create /var/lib/mysql for socket file
  - Use scl-service wrapper to fix systemd start issues


author: Honza Horak <hhorak@redhat.com> 5.5.28-5
changelog:
  - Add patch for CVE-2012-5611
  Resolves: #883642
  - Widen DH key length from 512 to 1024 bits to meet minimum requirements
    of FIPS 140-2
  Related: #877124
  - Use --no-backup-if-mismatch to prevent including backup files


author: Honza Horak <hhorak@redhat.com> 5.5.29-1
changelog:
  - Update to MySQL 5.5.29, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-29.html
  - Fix inaccurate default for socket location in mysqld-wait-ready
  Resolves: #890535


author: Honza Horak <hhorak@redhat.com> 5.5.30-1
changelog:
  - Update to MySQL 5.5.30, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-30.html


author: Honza Horak <hhorak@redhat.com> 5.5.30-6
changelog:
  - Spec file fixes found in Package Review #950053
  - Use log file prefixed by scl name and located in /var/log


author: Honza Horak <hhorak@redhat.com> 5.5.31-1
changelog:
  - Update to MySQL 5.5.31, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-31.html
  - Turn on hardened build


author: Honza Horak <hhorak@redhat.com> 5.5.31-2
changelog:
  - Fix building with relro and PIE
  - Don't use SSL_OP_NO_COMPRESSION since it doesn't exist in openssl-0.9.8


author: Honza Horak <hhorak@redhat.com> 5.5.31-4
changelog:
  - Fix reporting of service starting
    Resolves: #958098
  - Include mysqlhotcopy utility and -devel sub-package for building
    daemon plugins


author: Honza Horak <hhorak@redhat.com> 5.5.31-10
changelog:
  - Fix service status for unprivileged user
    Resolves: #975117
  - Add README.mysql-devel to document how -devel package should be used
    Resolves: #975119


author: Honza Horak <hhorak@redhat.com> 5.5.32-1
changelog:
  - Update to MySQL 5.5.32, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-32.html
    Resolves: #975113
  - Use man pages from 5.5.30 due to license change
    Resolves: #975785
  - Fix issues found by Coverity
    Resolves: #975904


author: Honza Horak <hhorak@redhat.com> 5.5.32-2
changelog:
  - Fix text in mysql-readme-devel for RHEL-5
    Resolves: #975119
  - Fix misleading error message when uninstalling built-in plugins
    Resolves: #985402
  - Do not use pie linker flags, they don't work in RHEL-5
    Resolves: #985418


author: Honza Horak <hhorak@redhat.com> 5.5.36-1
changelog:
  - Update to MySQL 5.5.36, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
    Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
    CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
    Resolves: #1055875


author: Honza Horak <hhorak@redhat.com> - 5.5.37-1
changelog:
  - Update to MySQL 5.5.37, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089202


author: Johnny Hughes <johnny@centos.org> 2.0.4-1.centos4
changelog:
  - upgrade to upstream version 2.0.4
    see this link: http://marc.theaimsgroup.com/?l=horde-announce&m=113433205826731&w=2


author: Johnny Hughes <johnny@centos.org> 2.1.1.c4
changelog:
  - rolled in upstream changes to version 2.1.1
  - modified all config files from config to config(noreplace)


author: Trond Eivind Glomsrød <teg@redhat.com> 0.98.32-1
changelog:
  - 0.98.32
  - Various doc files have changed names/been removed/added
  - New download location (after the license change, it's at sourceforge)
  - The new version is LGPL
  - Only build on x86 (#65255)


author: Jindrich Novy <jnovy@redhat.com> 0.98.39-1
changelog:
  - update to 0.98.39
  - add BuildRequires ghostscript, texinfo to doc subpackage (#110584)
  - generate also PDF documentation for nasm (#88431)
  - new release fixes CAN-2004-1287 (#143052)


author: Gregory Leblanc <gleblanc@grego1.cu-portland.edu>
changelog:
  - Added BuildRequires lines
  - Changed Source to point to ftp.gnome.org instead of just the tarball name
  - Moved %description sections closer to their %package sections
  - Moved %changelog to the end, where so that it's not in the way
  - Changed configure and make install options to allow moving of
    libraries, includes, binaries more easily
  - Removed hard-coded paths (don't define %prefix or %docdir)
  - replace %{prefix}/bin with %{_bindir}
  - replace %{prefix}/share with %{_datadir}
  - replace %{prefix}/lib with %{_libdir}
  - replace %{prefix}/include with %{_includedir}


author: Havoc Pennington <hp@redhat.com>
changelog:
  - move to a CVS snapshot of nautilus for now
    (Darin is my hero for having distcheck work out of CVS)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 1.0.4, removes eazel services icon and wizard page
  - Eazel logo is still in startup wizard for now, needs fixing


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Change default background and rubberband color.
  - Use the sidebar tabs from the default theme
  - BuildDepend on fam-devel, depend on fam
  - Disable the eazel update pages in the first-time druid.
  - Remove the eazel logo from the first-time druid


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Make the fam dependency a real runtime dependency
  - by linking to libfam (nautilus-1.0.4-fam-lib.patch)
  - Cleaned up specfile.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - update to my latest 'cvs diff -u' (adds default 
    Start Here link, displays .directory name in sidebar)
  - include /etc/X11/* links (starthere, sysconfig, serverconfig)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - move first time druid patch into my "CVS outstanding" patch
  - try to really remove Help/Feedback
  - try to really fix Help/Community Support
  - try again to get Start Here in the Go menu
  - try again to get Start Here on the desktop
  - don't show file sizes for .desktop files


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add BuildRequires (#49539, 49537)
  - Fix %post, %postun (#49720)
  - Background efficiency improvements and hacks


author: Havoc Pennington <hp@redhat.com>
changelog:
  - sync new tarball from our CVS branch, 
    fixes some drag-and-drop, changes URI scheme names,
    etc.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Fix crash-on-startup showstopper
  - Fix can't-find-images bug (this one was only showing up
    when built with debug symbols, since it was an uninitialized memory
    read)


author: Alexander Larsson <alexl@redhat.com> 1.0.4-21
changelog:
  - Remove the "don't run as root" warning.
  - Remove eazel from bookmarks
  - langified (again? did someone change it?)


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Sync our CVS version; fixes some MUSTFIX
    (the one about drawing background on startup, 
     properly translate desktop files, etc.)


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Changed starthere .desktop files to be links instead
  - of spawning a new nautilus. This makes start-here:
  - much faster.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fix problem with missing desktop starthere.desktop file
  - New snapshot from our branch, fixes:
    - On upgrade, icons migrated from GNOME desktop are not properly lined up
      (#51436)
    - icons dropped on the desktop don't end up where dropped. (#51441)
    - Nautilus shouldn't have fam monitor read-only windows. This
      keeps CDROMS from being unmounted until you close all

      nautilus windows pointing to them. (#51442)
    - Warnings about 'cannot statfs...' when moving items to trash.
  - Use separate start-here.desktop for panel, since the one used
    for the root window only works from Nautilus.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - make start here icon work again
  - kill some warning spew, #51661
  - cache getpwnam() results to speed things up a bit


author: Havoc Pennington <hp@redhat.com>
changelog:
  - make Programs icon into a link, to match the other .desktop files
  - own various directories #51164
  - web page titles in Japanese, #51709
  - tree defaults to only directories #51850


author: Havoc Pennington <hp@redhat.com>
changelog:
  - fix bug causing 32000 stats or so in large directories, 
    should speed things up somewhat
  - fix #52104 via gruesome kdesktop-detection hack and setting
    window type hint on our desktop window
  - fix so Start Here icon displays in sidebar
  - don't load non-local .desktop files


author: Havoc Pennington <hp@redhat.com>
changelog:
  - I screwed up the build yesterday, so it didn't actually contain the
    fixes mentioned. This build should contain them.


author: Christopher Blizzard <blizzard@redhat.com>
changelog:
  - require Mozilla 0.9.7
  - Add patch that puts mozilla profile startup before embedding is initialized


author: Havoc Pennington <hp@redhat.com>
changelog:
  - drop Milan-specific features, including png10 and ac25 patches
  - copy in 1.0.5 help component to avoid large risky patch
  - remove .la files
  - drop mozilla from ia64 again
  - remove oaf file from nautilus-mozilla that was also in the base 
    package


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Relibtoolize to fix relink problems for solib components
  - Add LANG=en_US to %makeinstall as well
  - Back out previous change, force locale to en_US to prevent UTF-8 problems
  - Add workaround for intltool-merge bug on ia64


author: Havoc Pennington <hp@redhat.com>
changelog:
  - ignore the "add_to_session" preference as it only broke stuff
  - pad the left margin a bit to cope with poor word wrapping


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add a simple patch so that redhat-config-packages can disable 
    the new window behavior for mounted CDs behavior.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - require newer redhat-artwork, -menus, eel2, gnome-vfs2 to avoid
    bogus bug reports
  - add hack for HTML mime type handling in a web browser, not 
    nautilus


author: Havoc Pennington <hp@redhat.com>
changelog:
  - put button press mask in triple-click patch, maybe it will work
  - remove html-hack patch as it does nothing useful


author: Alexander Larsson <alexl@redhat.com> 2.1.5-2
changelog:
  - Add cdburn patch.
  - Remove nautilus-1.1.19-starthere-hang-hackaround.patch
  - Require nautilus-cd-burner


author: Havoc Pennington <hp@redhat.com>
changelog:
  - perl-munge the icon names in a couple desktop files
    to find redhat-network-server.png and redhat-file-manager.png.
    Upstream icon names here were weird and seem broken.


author: Alexander Larsson <alexl@redhat.com> 2.2.0.2-1
changelog:
  - Update to 2.2.0.2, fixes bg crasher
  - parallelize build
  - Added patch from cvs that fixes password hang w/ smb


author: Alexander Larsson <alexl@redhat.com> 2.2.1-2
changelog:
  - Add a patch to fix the forkbomb-under-kde bug (#81520)
  - Add a patch to fix thumbnail memory leak
  - require libXft.so.2 instead of Xft, since that changed in the XFree86 package


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Update to the latest bugfixes from cvs.
  - Fixes #84291 for nautilus, context menu duplication and some other small bugs.


author: Alexander Larsson <alexl@redhat.com> 2.3.9-1
changelog:
  - update
  - Add patch to ignore kde desktop links
  - Re-enable kdesktop detection hack.
    kde doesn't seem to support the manager selection yet


author: Mike A. Harrisn <mharris@redhat.com> 2.5.91-2
changelog:
  - Changed BuildRequires: XFree86-libs >= 4.2.99 to BuildRequires: XFree86-devel
  - Fixed BuildRoot to use _tmppath instead of /var/tmp


author: Alexander Larsson <alexl@redhat.com> - 2.8.1-2
changelog:
  - Fix open with menu on mime mismatch
  - Create desktop links ending with .desktop (#125104)
  - Remove old cruft from specfile


author: Alexander Larsson <alexl@redhat.com> - 2.8.1-3
changelog:
  - Slightly less bad error dialog when there is no handler for a file.
    Not ideal, but this change doesn't change any strings.


author: David Zeuthen <davidz@redhat.com> 2.10.0-3
changelog:
  - Include patches for desktop background memory saving (GNOME bug #169347)
  - Obsoletes: nautilus-media (#153223)


author: Matthias Clasen <mclasen@redhat.com> - 2.16.0-7
changelog:
  - Fix scripts according to the packaging guidelines
  - Require GConf2 for the scripts
  - Require pkgconfig for the -devel package


author: Alexander Larsson <alexl@redhat.com> - 2.8.1-1
changelog:
  - update to 2.8.1
  - Add fixes patch to fix some small details
  - Add asserts patch to not assert if mmc profiling fails (#132479, #132645)
  - Add patch that makes n-c-b use hal to get media type
  - Enable hal support


author: Paul W. Frields <stickster@gmail.com> - 0.4-3
changelog:
  - Rearrange Requires and BuildRequires for subpackages
  - Include default Evolution plugin in main package


author: Alexander Larsson <alexl@redhat.com> - 0.4-5
changelog:
  - Build in Core
  - Move gaim plugin into main package
  - Fix up some build requirements
  - No bluetooth on s390*


author: Bastien Nocera <bnocera@redhat.com> 1.0.1-5
changelog:
  - Require libgnome in the glade file, so that the GNOME
    stock icons can be used
  Related: rhbz#250403


author: Bastien Nocera <bnocera@redhat.com> 1.0.1-6
changelog:
  - Using the libgnomeui stock icons requires to link against
    libgnomeui and init our app as a GNOME app, which we don't
    want to do. Use the evolution icon instead
  Related: rhbz#250403


author: Bill Nottingham <notting@redhat.com> 1.10-15
changelog:
  - don't strip binaries
  - fix parsing of some services (#52874) (<eedmoba@eede.ericsson.se>)
  - fix man page (#63544)


author: Radek Vokal <rvokal@redhat.com> - 1.84-7
changelog:
  - add dist tag
  - add '-C' option and behaviour for sending CRLFs as line-ending (#203931) <koszorus@reidea.hu>


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - change category to Applications/File, to match
    gzip and bzip2 
  - rename the spec file to ncompress.spec
  - add ppc to the bigendian arch list


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Make it support large files (structs, stats, opens and of course:
    _don't use signed longs for file size before and after compression_.)
    This should fix #39470


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - new patch to get xterm-color and nxterm terminfo entries
  - aliased them to rxvt, as that seems to satisfy everybody


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added terminfo entry for the poor guys using lat1 and/or lat-2 on their
    consoles... Enjoy linux-lat ! Thanks, Erik !


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - don't build the C++ demo code
  - update patch set to the current as of today (redid all the individual
    patches in a single one)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 5.0
  - some spec cleanups to make updating easier
  - add links *.so.5 to *.so.4 - they are fully binary compatible.
    (Why did they change the invocation number???)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix a typo in spec
  - Add the 19991006 patch, fixing some C++ STL compatibility problems.
  - get rid of profiling and debugging versions - we need to save space...


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - revert to the old major number - because the ABI is not changed (and we
    should be handling the changes via symbol versioning anyway)


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - Add xterm patch from Hans de Goede <hans@highrise.nl>
  - Patch 20000108, this fixes a problem with a header file.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 5.2
  - Fix typo in man page (Bug #20205)
  - update the "screen" terminfo entries to the version supplied with
    screen 3.9.8


author: Bernhard Rosenkraenzer <bero@redhat.com> 5.2-17
changelog:
  - Patchlevel 20020209
  - Fix zero-substitution of cf_cv_type_of_bool (#59450)
  - Fix rebuilding of configure script with autoconf 2.5x


author: Bernhard Rosenkraenzer <bero@redhat.com> 5.2-26
changelog:
  - Remove duplicated files (#62752)
  - Don't strip libraries (#60398)
  - Remove cbt capability from xterm description (#61077)


author: Adrian Havill <havill@redhat.com> 5.3-1
changelog:
  - upgrade to 5.3 for sake of utf-8, wide chars (#77585 ...)
  - spec file summary/desc grammar (#73583)
  - add Requires: for c++ devel subpkg (#74002)
  - terminfo.src patches no longer needed
  - adjust autoconf patch


author: Adrian Havill <havill@redhat.com> 5.3-3
changelog:
  - remunged xterm changes from 5.2 patch for 5.3
  - updated screen entry (#82951)
  - fixed ka3, kb2 and kf0 entries (#77506)


author: Adrian Havill <havill@redhat.com> 5.3-5
changelog:
  - added latest rollup patch with widec/UTF8 centric weekly (20030517)
  - added --enable-widec to configure (#86311)
    original work done by Mr. Sam <sam@email-scan.com>
  - require sharutils (#86605)
  - add gpm, xmc support
  - add debug syms back into package
  - updated autoconf/configure patch


author: Adrian Havill <havill@redhat.com> 5.3-7
changelog:
  - fixed the safe sprintf code that was enabled in the previous release
    by the configure parameter. (#101486)


author: Adrian Havill <havill@redhat.com> 5.3-9
changelog:
  - remove not-so safe-sprintf configure option because the code does
    not appear to be stable enough for some apps. (#103790)


author: Adrian Havill <havill@redhat.com> 5.4-3
changelog:
  - link "xterm" to "xterm-color" as temp fix for escape problem (#115448)
  - remove old zcat for PATCH1


author: Adrian Havill <havill@redhat.com> 5.4-5
changelog:
  - remove --with-gpm from configure, as it adds a pkg
    dependency (#122336) and causes too many problems vs its benefits


author: Adrian Havill <havill@redhat.com> 5.4-9
changelog:
  - remove terminfo try-to-please-all xterm hackery; it's now ptty
    and profile's job to point to the correct terminal. (#122815)


author: Adrian Havill <havill@redhat.com> 5.4-11
changelog:
  - add latest rollup patches and weekly patches
  - remove home/end patch, which is now included in latest
    terminfo.src and termcap.src
  - add term.sh to /etc/profile.d, reference in /etc/bashrc
  - modify term.sh to support rxvt (#122815 comment 93)


author: Petr Rockai <prockai@redhat.com> - 5.4-17
changelog:
  - apply patch from Hans de Goede, fixing BR142659 [The
    terminfo data for kbs changed from \177 to ^H]


author: 5.4-19 <praszyk@redhat.com> 5.4-19
changelog:
  - Clear window after: filter()+initscr()+endwin()+refresh()
    See bug #2966, patch ncurses-5.4-filter.patch


author: Petr Raszyk <praszyk@redhat.com> 5.4-21
changelog:
  - Clear window after: filter()+'terminal-resizing'+endwin()
    doupdate()+endwin()
    See bug #174498, patch ncurses-5.4-endwinfilter.patch


author: Petr Raszyk <praszyk@redhat.com> 5.5-11
changelog:
  - According Henrik Nordstrom (hno@squid-cache.org)
    Diff between the two versions of curses.h on x86_64
    Patch ncurses-5.5-chtypeaslong2.patch
    See #178824


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-20
changelog:
  - update to patch 20060701
  - don't strip libraries, chmod +x them
  - move .so links to devel package
  - add gpm-devel to buildrequires
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-24.20060715
changelog:
  - modify tgetstr to make screen happy (#202480)
  - use CFLAGS when linking (#199369)
  - change BuildRoot tag to comply with Fedora packaging guidelines


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix crash while printing (#45149)
    I still think removing the package would be the better fix, though.


author: Tim Waugh <twaugh@redhat.com> 5.3-6
changelog:
  - Add ugly hack to work around openmotif's lack of UTF-8 support (bug #75189).
  - Back-port 5.4RC2 fix for uninitialized variable (bug #110898).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't explicitly require openmotif, since rpm does library dependencies
    automatically.
  - Binary package doesn't require desktop-file-install.


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - added nedit icon to be present in menus #131601
  - updated spec to put it to the right place
  - icon made by Joor Loohuis (joor@users.sourceforge.net)
  - the icon processed by Peter Vrabec (pvrabec@usu.cz)


author: Jindrich Novy <jnovy@redhat.com> 5.5-5
changelog:
  - update nedit file locations to new xorg standards (#167208, #170937)
  - rename nc to nedit-client to avoid conflict with netcat and
    modify its manpage to reflect this
  - fix License to GPL


author: Jindrich Novy <jnovy@redhat.com> 5.5-11
changelog:
  - explicitly depend on lesstif to avoid nedit crashes
    (binary lesstif/openmotif incompatibilities) (#221535)
  - fix buildroot


author: Jeff Johnson <jbj@redhat.com> 0.23.9-2
changelog:
  - force expat, include neon-config, for subversion build.
  - do "make check" (but ignore failure for now)


author: Joe Orton <jorton@redhat.com> 0.24.4-3
changelog:
  - use BuildRequires not BuildPrereq, drop autoconf, libtool;
    -devel requires {openssl,zlib}-devel (#116744)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-15
changelog:
  - fix sending SNMPv1 traps on v2 connections (#236933)
  - fix ugly error messages when more interfaces share one IP addr.
    (#223236)
  - build with rpm-devel to support HOST-RESOURCES-MIB::hrSWInstalled
    (#232870)
  - store pid in /var/run/snmpd.pid (240470)
  - fix wrong sprintf in path generation (#240609)
  - fix too verbose snmpassert (#239083)
  - fix perl bulkwalk (#238145)
  - extend ipv6 support of some MIBs (#242483)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-20
changelog:
  - fix snmpwalk / bulkwalk on TCP scalars (#248342)
  - fix bulkwalk security flaw (#366631)
  - interface names can be longer than 8 characters (#357121)
  - aliased interfaces have correct netmask and broadcast addresses
    (#357121)
  - fix icmpStatsTable (#256041)
  - fix race condition when reading /proc/*/cmdline (#311261)
  - fix hostname logging of snmptrapd (#270941)
  - fix race condition when reading process status (#252216)
  - fix TCP support (#251332)
  - fix reading of agentsecname and iquerysecname from config file
    (#338981, #311761)
  - fix disk statistics of mount points with spaces (#348681)
  - store temporary files to /var/run/snmpd to prevent
    users to modify them and to make selinux happy (#401211)
  - print more meaningful message when interface changes its ifIndex
    (#396141)
  - fix hrDeviceStatus and hrDeviceErrors missing during walk
    (#419511)
  - correctly cut values to 32bits in UCD-DISKIO-MIB, preventing
    "truncating integer value > 32 bits" to appear (#386821)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-23
changelog:
  - add ipIfStatsTable to build
  - make ipv6ScopeZoneIndexTable loading quiet (#433446)
  - make ipAddressPrefixTable loading quiet (#253399 related)
  - fix inetToMediaTable to recover from error when ipv6 kernel module is 
    not present (#431977)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-25
changelog:
  - fix buffer overflow in perl module (CVE-2008-2292) (#449898)
  - fix SNMPv3 authentication checks (unknown CVE) (#449898)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-1
changelog:
  - rebase to net-snmp-5.3.2.2 (#454977)
  - introduce new "dontLogTCPWrappersConnects" config file option
    to reduce logging of incomming connections (#448664)
  - introduce new "v1trapaddress" config file option
    which allows setting agent address inside SNMPv1 traps (#426355)
  - correctly recover when admin starts snmpd or snmptrapd with
    wrong port specifier (#449351)
  - update snmpd.conf man page to emphasize necessity of explicit port
    specification in 'trapsess' option (#436452)
  - net-snmp.rpm requires now the same version and release of net-snmp-libs
    (#434746)
  - 32-bit ifTable counters are now updated (#438151)
  - fix hrProcessorLoad OID (#431439)
  - fix documentation of 'exec' statement - it does not cache results
    (#431519)
  - fix inetNetToMediaTable processing, some entries could be missing
    when ipv6 kernel module is removed (#450076)
  - fix memory leak on UDP transport creation (#454294)
  - add SCTP-MIB implementation (#435110)
  - fix a filedescriptor leak in hrSWRunTable (#458009)
  - allow 16bit ifIndex (#458937)
  - move /etc/snmp/snmpd.options to /etc/sysconfig and add snmptrapd.options
    file (#459054)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-6
changelog:
  - fix command line options related to logging (#477768)
  - don't spam log with 'diskio.c: don't know how to handle X request'
    (#474093)
  - add ipAddressSpinLock OID (#479609)
  - fix reloading of trapsink and trap2sink entries on SIGHUP (#468147)
  - fix reporting of IF-MIB::ifSpeed of 10GB/s interfaces (#464061)
  - backport skipNFSInHostResources option (#461631)
  - implement ipNetToPhysicalLastUpdated OID (#477092)
  - implement RMON-MIB::etherStatsJabbers (#468832)
  - fix memory leak in SCTP-MIB (#497280)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-8
changelog:
  - fix possible crash when 64-bit counters in ipSystemStatsTable get
    bigger than 2^32 (#514703)
  - fix memory leak in ipNetToPhysicalTable (#515650)
  - fix periodical memory leaks in various MIBs (#518633)
  - create MIB indexes in /var/lib/net-snmp to fix SELinux alerts in applications
    (#523249)
  - fix multilib issues in net-snmp and net-snmp-devel packages (#521820)
  - allow snmpusm to create views with OIDs larger than 255 (#527364)
  - plug memory leak in processing of GETNEXT request on last item in
    mteEventSetTable (#515650)
  - suppress showing of "truncating unsigned value to 32 bits" message in Net-SNMP
    utilities (#528164)
  - fix endless loop in ipDefaultRouterTable when there are more default routes
    with the same destination (#504742)
  - suppress logging of "truncating integer value > 32 bits" in IP-MIB and TCP-MIB
    when the counters overflow 32 bits (#507528)
  - fix responding to broadcast requests (#521175)
  - fix ipNetToPhysicalTable and ipNetToMediaTable with network interfaces with
    long HW address (like InfiniBand) (#543499)
  - fix IP address size in ipCidrRouteTable on 64 bit platforms (#547698)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-10
changelog:
  - fixed SNMP GET returning noCreation error instead of unknown OID
    error in ifTable (#587785)
  - fixed rare race condition when reading RPM database (#557758)
  - fixed output of snmptranslate tool when displaying ranges of UNSIGNED
    type (#645303)
  - fixed value of IP-MIB::ipv6InterfaceForwarding (#645317)
  - fixed exit code of SNMP utilities when parsing of command line arguments
    fails (#574035)
  - reworked hrFSTable and hrStorageTable, now the devices keep stable indexes
    across device remounts (#595322)
  - fixed documentation of '-D[token]' option (#613584)
  - fixed value of IP-MIB::ReasmReqds counter (#584807)
  - the logrotate configuration file does not restart full snmpd service now
    (#584769)
  - UCD-SNMP-MIB::dskTable was enhanced with 64 bit statistics of disk usage,
    available and free space (#664523)
  - fixed man page of 'snmpnetstat' - '-Cp' must be used instead of '-CP'
    (#556842)
  - fixed linkUp/DownTraps to contain ifIndex, ifAdminStatus,
    and ifOperStatus as described in the man page (#583807)
  - fixed IF-MIB::ifSpeed of interfaces, that are down (#561882)
  - fixed responding to requests on a multihost machine (#600319)
  - fixed the automated test suite running with udp6 and tcp6 transports
    (#587617)
  - fixed hrStorageTable on big-endian systems (#659354)
  - fixed errors reported by configure script during package recompilation
    (#591416)
  - fixed UDP-MIB::udpTable indexes on big-endian systems (#556824)
  - fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
    which could result in some entries missing in the table (#630905)
  - fixed snmpd spamming log 'error on subcontainer '' insert (-1)' (#554956)
  - fixed snmpd spamming log 'looks like a 64bit wrap, but prev!=new' (#653780)
  - fixed snmptrapd leaking memory when processing traps in embedded perl
    (#676955)
  - fixed ipv6IfTable - new interfaces were not added there (#680347)
  - fixed rare race condition in hrSWRunTable (#683142)
  - fixed proxying of out-of-tree GETNEXT requests (#663863)
  - added 'realStorageUnits' config file option to support large (>16 TB) storage
    devices in hrStorageTable (#654384)
  - fix file descriptor leak in RMON-MIB (#561875)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-12
changelog:
  - fixed UCD-SNMP::memory showing zero memory statistics, caused by reworked
    memory indexing in hrFSTable patch (#702626)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-13
changelog:
  - fixed xfs filesystem support in hrStorageTable broken by fix
    for bug #654384
  - fixed BER parsing of incoming packets - silently discard the invalid ones
    according to RFC (#704443)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-14
changelog:
  - fixed hrSWRunPath of kernel threads (regression caused by bugfix for
    - fixed bind filesystem support in hrStorageTable broken by fix
    for bug #654384


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-15
changelog:
  - removed 'error finding row index in _ifXTable_container_row_restore'
    error message (#736264)
  - fixed a crash when DisMan Event MIB was used simultaneously with AgentX
    extensions (#725966)
  - fixed references to OBJECT-GROUP between MIB files (#716470)
  - disabled 'rpm -V' checking content of /usr/share/snmp/mibs/.index file,
    it is generated dynamically (#714976)
  - fixed crash when getting out-of-memory in inetNetToMediaTable (#706916)
  - fixed slow (re-)loads of TCP-MIB::tcpConnectionTable (#698562)
  - fixed HOST-RESOURCES-MIB::hrStorageUsed with realStorageUnits disabled
    (#741789)
  - fixed vxfs filesystem support in hrStorageTable (#744112)
  - fixed snmpd sigsegv when embedded perl script registers one handler
    twice (#743167)
  - fixed AgentX subagent sigsegv when reconnecting to AgentX master
    (#748390)
  - fixed reporting of UCD-SNMP-MIB::dskPercentNode missing in previous
    release (#725339)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-16
changelog:
  - fixed snmpd showing wrong UCD-SNMP-MIB::ssCpuIdle after 30 days of uptime
    on 32-bit platforms (#663789)
  - fixed parsing of OID argument of 'smuxpeer' configuration option (#751235)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-18
changelog:
  - added support of ocfs2, tmpfs and reiserfs in hrStorageTable
    (#754652, #755958, #822061)
  - updated documentation of '-c' option of snmptrapd (#760001)
  - fixed endless loop after truncating 64bit int (#783892)
  - fixed snmpd exiting shortly after startup due to incoming signal (#799699)
  - fixed decoding of COUNTER64 values from AgentX (#803585)
  - fixed engineID of outgoing traps if 'trapsess -e <engineID>' is used in
    snmpd.conf (#805689)
  - fixed CVE-2012-2141, an array index error in the extension table (#815813)
  - fixed snmpd showing "failed to run mteTrigger query" when 'monitor'
    config option is used (#830042)
  - added support for port numbers in 'clientaddr' configuration option
    (#828691)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-19
changelog:
  - fixed support for port numbers in 'clientaddr' configuration option
    (#840861, #845974)
  - added support of cvfs filesystem hrStorageTable (#846391)
  - removed various error log messages when IPv6 is disabled (#845155)
  - removed various error log messages related to counte64 expansions
    (#846905)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-20
changelog:
  - fixed error message when the address specified by clientaddr option
    is wrong or cannot be bound (#840861)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-20.1
changelog:
  - Fixed CVE-2012-6151: snmpd crashing when AgentX subagent disconnects in
    the middle of request processing (#1073224)
  - Fixed CVE-2014-2285: snmptrapd crash when using a trap with empty community
    string (#1073224)


author: Paul Moore <paul.moore@hp.com> 0.14-1
changelog:
  - Bumped version number.
  - Changes related to including the version number in the path name.
  - Changed the netlabelctl perms from 0750 to 0755.
  - Removed the patch. (included in the base with edits)
  - Updated the description.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - updated to 2.0.13
  - dropped libjpeg and libtiff (those should come from home sources)
  - removed glibc patch (new version appears to have it!)
  - added i686 as a valid arch type to config.guess


author: Donnie Barnes <djb@redhat.com>
changelog:
  - changed copyright from "distributable" to "freeware"
  - added some missing scripts that existed in netpbm
  - added some binaries that weren't getting built
  - added patch to build tiff manipulation progs (requires libtiff)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - altered install so that the package installs now even if a previous
    version was not installed on the system


author: Michael Johnson <johnsonm@redhat.com>
changelog:
  - removed old png.h header file that was causing png utils to die
  - build png in build instead of install section...


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make sure all man pages are included (#9328)
  - fix pstopnm bomb when xres == yres (#9329)
  - add libjpeg and libz because libtiff now needs them


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move netpbm-progs to the Applications/Multimedia group
  - reintroduce patches from the old libgr package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 9.8
  - make sure shhopt.h is included in the -devel package (#19672)
  - rename shhopt.h to pbmshhopt.h because it's not the same as the normal
    shhopt.h that other things (like util-linux) expect


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - update to 9.9
  - Due to patent infringement problems removed the jbig support from the tarball
    (pnm/jbig + Makefile changes) and created a new tarball


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed bugzilla bug #19487 where asciitopgm dumped core on Alpha. Actually
    dumped core everywhere


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to netpbm version 9.14
  - Removed pnmtotiff resize patch as it is now part of the original package
  - Removed pstopnm csh fix as it is now part of the original package
  - Removed asciitopgm memcpy fix as it is now part of the original package
  - Removed manpages patch as it is now part of the original package


author: Phil Knirsch <pknirsch@redhat.com> 9.24-3
changelog:
  - Fixed a possible gcc compiler problem for inline struct parameters (#62181).
  - Added missing .map files to progs files selection (#61625).


author: Phil Knirsch <pknirsch@redhat.com> 10.19-3
changelog:
  - Included doc tarball with manpages (#114755).
  - Fixed small manpage incorrectness (#84922).
  - Fixed message from giftopnm (#114756).


author: Phil Knirsch <pknirsch@redhat.com> 10.19-4
changelog:
  - Fixed several tmp vulnerabilities in scripts and apps. Based on Debian
    security fix for netpbm-9.24.


author: Phil Knirsch <pknirsch@redhat.com> 10.22-1
changelog:
  - Update to latest upstream version 10.22 (also for docs).
  - Removed jbig and hdcp code from tarball.


author: Phil Knirsch <pknirsch@redhat.com> 10.22-2
changelog:
  - Fixed Zero byte allocation error in bmptopnm (#123169)
  - Honour the $TMPDIR in ppmfade (#117247)
  - Fixed nested function bug (#117377)
  - Fixed several uninitialized variables (#117377)


author: Jindrich Novy <jnovy@redhat.com> 10.23-1
changelog:
  - updated to netpbm-10.23 upsteam (and removed jbig, hpcd)
  - $TMPDIR patch removed, obsolete
  - updated gcc34 patch
  - removed nestedfunc patch, already applied in upstream version
  - updated security patch to conform to 10.23 (mostly in ppmtompeg/frame.c)


author: Jindrich Novy <jnovy@redhat.com> 10.25-1
changelog:
  - update to latest upstream 10.25
  - drop initvar patch
  - update security, misc patch
  - add bmpbpp patch to use only appropriate bit depths for BMP (#135675)


author: Jindrich Novy <jnovy@redhat.com> 10.25-3
changelog:
  - include man pages in troff format, thanks to Michal Jaegerman (#136959)
  - drop bmpbpp patch, fixed upstream
  - remove pcdovtoppm, ppmsvgalib, vidtoppm man pages because binaries
    for them are not present (#136471)


author: Jindrich Novy <jnovy@redhat.com> 10.26-1
changelog:
  - update to netpbm-10.26-1, remove jbig, hpcd
  - regenerate man pages, remove man pages for non existent binaries
  - update security patch, additional fixes
  - drop upstreamed misc patch, merge malloc patch with security patch


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-1
changelog:
  - update to netpbm-10.26.4, remove jbig, hpcd
  - this version fixes #149924
  - regenerate man pages (don't include man pages without binaries - #146863)


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-2
changelog:
  - add .gcc4 patch to fix some missing declarations of headers,
    some pointer signedness mismatches, remove xmalloc2
  - rebuilt with gcc4


author: Jindrich Novy <jnovy@redhat.com> 10.26.4-3
changelog:
  - fix overflow checking of integers with incompatible endianess
    causing problems using xwdtopnm (#147790)


author: Jindrich Novy <jnovy@redhat.com> 10.27-1
changelog:
  - update to the new 10.27 release
  - update .security2, .security patch
  - regenerate man pages
  - remove jbig, hpcd
  - remove config_template from /usr
  - don't create symlink to pamtopnm


author: Jindrich Novy <jnovy@redhat.com> 10.27-2
changelog:
  - fix invalid strcmp condition in bmptopnm, typo in pnmtojpeg
    (David Constanzo, #157106, #157118)
  - proper read longs and shorts in libpm.c (David Constanzo, #157110)
  - fix segfault in bmptopnm caused by freeing an uninitialized pointer


author: Jindrich Novy <jnovy@redhat.com> 10.28-1
changelog:
  - update to 10.28
  - regenerated man pages
  - sync .security, .security2, .badlink, .libpm, .gcc4 patches
  - drop upstreamed .pngtopnm, .pnmcolormap patches


author: Jindrich Novy <jnovy@redhat.com> 10.28-2
changelog:
  - fix segfault in pbmtolj caused by unchecked assertions
    caused by definition of NDEBUG (#160429)
  - drop hunk from .security patch causing dual inclusion
    of string.h in pbmtolj.c


author: Jindrich Novy <jnovy@redhat.com> 10.29-1
changelog:
  - update to 10.29
  - drop upstreamed .libpm, .pnmtojpeg, .pbmtolj patches
  - update .CAN-2005-2471 patch


author: Jindrich Novy <jnovy@redhat.com> 10.30-1
changelog:
  - update to 10.30
  - update manpath, gcc4 patches
  - update security patch - fixed length problem in rle_addhist
  - update partly upstreamed bmptopnm, pnmtopng patches
  - drop manpath patch
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.31-3
changelog:
  - fix segfault caused by usage of uninitialized variables while
    parsing cmdline arguments in pnmtopng (#179645)
  - add validity check for date/time in pnmtopng
  - fix unchecked sscanf reads


author: Jindrich Novy <jnovy@redhat.com> 10.32-1
changelog:
  - update to 10.32
  - drop .msbmp patch, applied upstream
  - sync the rest of the patches
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.33-1
changelog:
  - update to 10.33
  - drop upstreamed .ppmdepth patch
  - fix segfault in ppmtompeg when encoding jpeg images (#185970)


author: Jindrich Novy <jnovy@redhat.com> 10.33-2
changelog:
  - fix image corruption in ppmtogif, thanks to Gilles Detillieux (#188597)
  - fix nsting.h to let pnmtopng and other utilities using seekable opening
    mode work on x86_64 (#188594)


author: Jindrich Novy <jnovy@redhat.com> 10.34-1
changelog:
  - update to 10.34
  - drop .ppmtogif, .nstring patches
  - remove some overflow checks from .security patch, it's
    now resolved in the new upstream version
  - don't use svgalib by default (don't compile/ship ppmsvgalib)
  - don't compile svgtopam because of the libxml dependency
  - add BuildRequires libX11-devel
  - fix build on x86_64 and ppc64


author: Jindrich Novy <jnovy@redhat.com> 10.34-3.fc6
changelog:
  - pamscale won't waste all system resources by usage of uninitialized
    variables for output image resolution (#199871)
  - use %{?dist}


author: Jindrich Novy <jnovy@redhat.com> 10.34-4.fc6
changelog:
  - legal fixes (#202519):
  - remove pbmtols, spottopgm, jbig and hpcd stuff from source
    and doc tarballs


author: Jindrich Novy <jnovy@redhat.com> 10.34-6.fc6
changelog:
  - regenerate man pages so that makewhatis isn't confused (#204991)
    (upstream makeman script was broken -> now fixed)


author: Jindrich Novy <jnovy@redhat.com> 10.34-8
changelog:
  - readd pbmtols, author claims it's LGPL (#202519)
  - add .l1 suffixes to tarball names to reflect legal fixes
    in the upstream release with the same NVR


author: Jindrich Novy <jnovy@redhat.com> 10.35-1
changelog:
  - update to 10.35
  - drop .pnmtopng, .rgbtxt patches, fixed upstream
  - sync .xwidfix, .ppmtompeg patches
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-7.el5
changelog:
  - rebase to 10.35.58 (#479017)
  - fix ppmfade, ppmrainbow
  - fix doublefree corruption and couple of memleaks in pnmtofiasco
  - fix cmuwmtopbm and other utilities by making endianess
    functions work correctly on 64bit systems (#476863)
  - fix ppmdfont and ppmddumpfont and svgtopam (thanks to Jiri Moskovcak)
  - add BR: ghostscript
  - use correct macro arguments (#246707)
  - fix segfault in ximtoppm (#482867)
  - fix options in pamperspective, pbmtoepson, ppmpat, pamaddnoise,
    cameratopam, fiascotopnm so that they match their man pages
    (#483011, #483070, #483243, #483245, #482829, #482839)
  Resolves: #246707, #479017, #476864, #476867, #483011, #483070
  Resolves: #483243, #483245, #482867, #482829, #482839


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-9.el5
changelog:
  - fix pnmtofiasco failures on ppc and s390x (#509366)
  - fix typos in pamperspective man pages (#510501)
  - fix pgmtopbm (#510759)
  - fix buffer overlow in xpmtoppm (#567597)
  - fix endianess issue with xwdtopnm (#574362)


author: Erik Troan <ewt@redhat.com>
changelog:
  - Cleaned up listbox
  - Added whiptail
  - Added newtButtonCompact button type and associated colors
  - Added newtTextboxGetNumLines() and newtTextboxSetHeight()


author: Erik Troan <ewt@redhat.com>
changelog:
  - added changes from Bruce Perens
      - small cleanups
      - lets whiptail automatically resize windows
  - the order of placing a grid and adding components to a form no longer
    matters
  - added newtGridAddComponentsToForm()


author: Matt Wilson <msw@redhat.com>
changelog:
  - Added GPM mouse support
  - Moved to autoconf to allow compiling without GPM support
  - Changed revision to 0.40


author: Matt Wilson <msw@redhat.com>
changelog:
  - Function to set checkbox flags.  This will go away later when I have
    a generic flag setting function and signals to comps to go insensitive.


author: Matt Wilson <msw@redhat.com>
changelog:
  - added snack bindings for setting current listbox selection
  - added argument to set default selection in snack ListboxChoiceWindow


author: Matt Wilson <msw@redhat.com>
changelog:
  - fixed snack callback function refcounts, as well as optional data args
  - fixed suspend callback ref counts


author: Preston Brown <pbrown@redhat.com>
changelog:
  - explicit requirement of devel subpackage on same version of main package
    so that .so file link doesn't break


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - bytecompile the snack python module
  - move the libnewt.so symlink to the devel package
  - include popcorn.py and peanuts.py in the devel package,
    so we have some documentation of the snack module


author: Erik Troan <ewt@redhat.com>
changelog:
  - gave up on separate CHANGES file
  - added newtCheckboxTreeSetCurrent() and snack binding
  - don't require python2 anymore


author: Matt Wilson <msw@redhat.com>
changelog:
  - don't blow the stack if we push a help line that is longer than the
    curret number of columns
  - clip window to screen bounds so that if we get a window that is
    larger than the screen we can still redraw the windows behind it
    when we pop


author: Elloit Lee <sopwith@redhat.com>
changelog:
  - Allow python scripts to watch file handles
  - Fix 64-bit warnings in snackmodule
  - Misc snack.py cleanups
  - Add NEWT_FD_EXCEPT to allow watching for fd exceptions
  - In newtExitStruct, return the first file descriptor that an event occurred on


author: Matt Wilson <msw@redhat.com>
changelog:
  - redraw the screen in certain situations when LANG=ja_JP.eucJP to
    prevent corrupting kanji characters (#34362)


author: Matt Wilson <msw@redhat.com>
changelog:
  - change from using SLsmg_touch_screen to SLsmg_touch_lines to prevent
    excessive flashing due to screen clears when using touch_screen (more
    Japanese handling)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - added python binding for newtListboxClear() for Listbox and CListBox
  - let ButtonBars optionally be made of CompactButtons


author: Crutcher Dunnavant <crutcher@redhat.com> 0.50.31-1
changelog:
  - right anchor the internal Listbox of CListboxes, so that empty
  - scrollable CListboxes do not look like crape.


author: Joe Orton <jorton@redhat.com> 0.50.36-1
changelog:
  - add newtListboxGetItemCount() API call
  - include numeric percentage in scale widget appearace
  - add support for ESC key using NEWT_KEY_ESCAPE


author: Bill Nottingham <notting@redhat.com> 0.51.0-1
changelog:
  - changes for element width calculation for UTF-8
  - fix textwrap for UTF-8 in general
  - bump soname to avoid shared library collisions with slang


author: Matt Wilson <msw@redhat.com> 0.51.2-1
changelog:
  - fixed wstrlen() it was calculating wcwidth(first wide char in
    string) * strlen(str) instead of the actual width of the whole
    string
  - fixed newtRedrawHelpLine() to copy all the bytes from a multibyte
    string


author: Adrian Havill <havill@redhat.com> 0.51.3-1
changelog:
  - cleaned up const qualifiers in interfaces
  - added Ctrl-L screen refresh
  - fixed segfault in test.c when listbox items are selected
  - accessibility: made newt useable with monochrome terms (#60931)
  - leave the symbols in the libs (#60400)
  - fixed grammar in tutorial (#63496)
  - error checking (curcomp exists) for formEvent, newtFormGetCurrent,
    removed fifty button limit (#59027)


author: Matt Wilson <msw@redhat.com> 0.51.4-1
changelog:
  - fixed help line drawing in UTF-8 (#81718)
  - calculate the width of text in entries using wstrlen
  - always set component width to the new label width in newtLabelSetText
  - fixed snack.CListbox to work properly with UTF-8 (#81718)


author: Petr Rockai <prockai@redhat.com>
changelog:
  - use versioned symbols, patch by Alastair McKinstry, mckinstry at
    debian dot org, thanks
  - need private wstrlen due to versioned syms, patch from debian
    package of newt
  - both of the above needed to be forward-ported


author: Petr Rockai <prockai@redhat.com> - 0.52.1-0
changelog:
  - revert bidi patch, objections by Jeremy Katz about
    anaconda breaking
  - this version still only exists as a "ghastly" upstream tarball;
    the patches are now cleaned up and will be integrated into
    rhlinux cvs unless some more breakage akin to bidi occurs
  - the if1close patch is now part of upstream tarball too


author: Petr Rockai <prockai@redhat.com> - 0.52.2-3
changelog:
  - Provide: snack = 0.52.2 instead of plain "snack", so that
    we don't block upgrades of custom "snack" packages. This should
    not break anything. (Hopefully) fixes BR 171415.


author: Petr Rockai <prockai@redhat.com> - 0.52.2-4
changelog:
  - Apply patch by Bill Nottingham (thanks) to improve scrollbar appearance
    (BR 174771).
  - Add -%{release} to snack's Provides: line (just in case).


author: Petr Rockai <prockai@redhat.com> - 0.52.2-5
changelog:
  - Fix a crash in checkboxtree.c where pressing pgup/pgdown
    on a checkboxtree with less items than its height would
    cause segmentation violation. Consult BR 165347.


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-7
changelog:
  - fix checkboxtree positioning
  - make textbox with scrollbar focusable (#83203)
  - turn off cursor when entry terminated form (#86074)
  - handle listbox and checkboxtree focus better (#186053)
  - make default colors more friendly to 8-color terminals (#187545)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-9
changelog:
  - fix screen corruption when half of double width character is overwritten
    (#137957) 
  - fix double width character handling in checkboxtree and listbox


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-15.el5
changelog:
  - fix typos in whiptail usage message (#456307)
  - include whiptail man page (#456307)
  - improve --noitem description (#456305)
  - bind \E[Z to back-tab in built-in keymap (#468046)
  - include tutorial in txt format


author: Gary Benson <gbenson@redhat.com>
changelog:
  - make like all the other perl modules we ship (bind to perl version,
    use perl dependency finding scripts, build filelist automatically).
  - include documentation
  - build against perl 5.6.1


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - switch to nfs-utils as the base tree
  - fix the statfs patch for the new code base
  - single package that obsoletes everything we had before (if I am to keep
    some traces of my sanity with me...)


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - Fix incorrect file specifications in statd manpage.
  - Require gawk 'cause it's used in nfslock init script.


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - don't install any rquota pages in _mandir: (#39707, #44119)
  - don't try to manipulate rpc.rquotad in init scripts 
  -   unless said program actually exists: (#43340)


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - "service nfs restart" should start services even if currently 
  -   not running (#59469)
  - bump version to 0.3.3-4


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added the setting of lockd ports via sysclt interface
  - Removed queue setting code since its no longer needed


author: <SteveD@RedHat.com>
changelog:
  - Removed gssd tarball and old nfsv4 patch.
  - Added new nfsv4 patches that include both the
     gssd and idmapd daemons
  - Added redhat-only v4 patch that reduces the
     static librpc.a to only contain gss rpc related
     routines (I would rather have gssd use the glibc 
     rpc routines)
  -Changed the gssd svcgssd init scripts to only
     start up if SECURE_NFS is set to 'yes' in
     /etc/sysconfig/nfs


author: <SteveD@RedHat.com>
changelog:
  - Added the addition and deletion of rpc_pipefs to /etc/fstab
  - Added the addition and deletion of module aliases to /etc/modules.conf


author: <SteveD@RedHat.com>
changelog:
  - Added the shutting down of the rpc v4 daemons.
  - Updated the Red Hat only patch with some init script changes.


author: <SteveD@RedHat.com>
changelog:
  - Made the nfs4 daemons initscripts work better when 
    sunrpc is not a module
  - added more checks to see if modules are being used.


author: <SteveD@RedHat.com>
changelog:
  - Created a pipe between the parent and child so 
    the parent process can report the correct exit
    status to the init scripts
  - Added SIGHUP processing to rpc.idmapd and the 
    rpcidmapd init script.


author: <SteveD@RedHat.com>
changelog:
  - Changed the permission on idmapd.conf to 644
  - Added mydaemon code to svcgssd
  - Updated the add_gssd.patch from upstream


author: <SteveD@RedHat.com>
changelog:
  - Removed the auto option from MOUNTD_NFS_V2 and
    MOUNTD_NFS_V3 variables. Since v2 and v3 are on
    by default, there only needs to be away of 
    turning them off.


author: <SteveD@RedHat.com>
changelog:
  - Fixed syntax error in nfs initscripts when
    NETWORKING is not defined
  - Removed sync warning on readonly exports.
  - Changed run levels in rpc initscripts.
  - Replaced modinfo with lsmod when checking
    for loaded modules.


author: <SteveD@RedHat.com>
changelog:
  - nfslock stop is now done on package removals
  - Eliminate 3 syslog messages that are logged for
    successful events.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Major clean up. 
  - Removed all unused/old patches
  - Rename and condensed a number of patches
  - Updated to CITI's nfs-utils-1.0.6-13 patches


author: <SteveD@RedHat.com>
changelog:
  - Make sure the uid/gid of nfsnobody is the
    correct value for all archs (bz# 123900)
  - Fixed some security issues found by SGI (bz# 133556)


author: <SteveD@RedHat.com
changelog:
  - Incorporate some clean up code from Ulrich Drepper (bz# 134025)
  - Fixed the chkconfig number in the rpcgssd, rpcidmapd, and 
    rpcsvcgssd initscrpts (bz# 132284)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added "$RQUOTAD_PORT" variable to nfs.init which
    allows the rpc.rquotad to use a predefined port
    (bz# 124676)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Replaced a memcopy with explicit assignments
    in getquotainfo() of rquotad to fix potential overflow
    that can occur on 64bit machines. (bz 138068)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Fix problem in idmapd that was causing "xdr error 10008"
    errors (bz 142813)
  - make sure the correct hostname is used in the SM_NOTIFY
    message that is sent from a rebooted server which has 
    multiple network interfaces. (bz 139101)

  - Changed nfslock to send lockd a -KILL signal
    when coming down. (bz 125257)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added support to rpcgssd.init and rpcsvcgssd.init scripts
    to insmod security modules.
  - Changed the nfs.init script to bring rpc.svcgssd up and down,
    since rpc.svcgssd is only needed with the NFS server is running.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-3
changelog:
  - Changed xlog to use LOG_INFO instead of LOG_DEBUG
    so debug messages will appear w/out any config
    changes to syslog.conf.
  - Reworked how /etc/exports is setup (bz 151389)


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-4
changelog:
  - Fixed a compile error on x86_64 machines in the gss code.
  - Updated the statd-notify-hostname.patch to eliminate 
    a segmentation fault in rpc.statd when an network 
    interface was down. (bz 151828)


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-12
changelog:
  - Changed useradd to use new -l flag (bz149407)
  - 64bit fix in gssd code (bz 163139)
  - updated broken dependencies
  - updated rquotad to compile with latest
    quota version.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-16
changelog:
  - Reworked the nfslock init script so if lockd is running
    it will be killed which is what the HA community needs. (bz 162446)
  - Stopped rpcidmapd.init from doing extra echoing when
    condstart-ed.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-17
changelog:
  - Updated to latest nfs-utils code in upstream CVS tree
  - Updated libevent from 1.0b to 1.1a
  - Added libgssapi-0.4 and librpcsecgss-0.6 libs from CITI


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-18
changelog:
  - Updated libnfsidmap to 0.11
  - Updated libgssapi to 0.5
  - Made sure the gss daemons and new libs are
    all using the same include files.
  - Removed code from the tree that is no longer used.
  - Add ctlbits patch that introduced the -N -T and -U
    command line flags to rpc.nfsd.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-19
changelog:
  - Updated to latest code in SourceForge CVS
  - Updated to latest CITI patches (1.0.7-4)
  - Fix bug in nfsdreopen by compiling in server defaults


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-1.FC5
changelog:
  - Updated to 1.0.8-rc2 release
  - Broke out libgssapi into its own rpm
  - Move librpcsecgss and libnfsidmap in the new nfs-utils-lib rpm
  - Removed libevent code; Required to be installed.


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-3.FC5
changelog:
  - Added innetgr patch that changes configure scripts to 
    check for the innetgr function. (bz 177899)


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-4.FC5
changelog:
  - Added new libnfsidmap call, nfs4_set_debug(), to rpc.idmapd
    which turns on debugging in the libarary.


author: <SteveD@RedHat.com> 1.0.8-3
changelog:
  - Split the controlling of nfs version, ports, and protocol 
    into two different patches
  - Fixed and added debugging statements to rpc.mountd.
  - Fixed -p arg to work with priviledged ports (bz 156655)
  - Changed nfslock initscript to set LOCKD_TCPPORT and
    LOCKD_UDPPORT (bz 162133)
  - Added MOUNTD_NFS_V1 variable to version 1 of the
    mount protocol can be turned off. (bz 175729)
  - Fixed gssd to handel mixed case characters in
    the domainname. (bz 186069)


author: <SteveD@RedHat.com> 1.0.9-2
changelog:
  - Enabled the creating of mount.nfs and umount.nfs binaries
  - Added mount option fixes suggested by upstream.
  - Fix lazy umounts (bz 169299)
  - Added -o fsc mount option.


author: <SteveD@RedHat.com> 1.0.9-5
changelog:
  - Changed gssd daemons to cache things in memory
    instead of /tmp which makes selinux much happier.
    (bz 203078)


author: <SteveD@RedHat.com> 1.0.9-6
changelog:
  - Removed the compiling of getiversion and getkversion since
    UTS_RELEASE is no longer defined and these binary are
    not installed.


author: Karel Zak <kzak@redhat.com> 1.0.9-7
changelog:
  - Added support for the mount -s (sloppy) option (#205038)
  - Added nfs.5 man page from util-linux
  - Added info about [u]mount.nfs to the package description


author: Steve Dickson <steved@redhat.com> 1.0.9-14
changelog:
  - Doing a connect on UDP sockets causes the linux network
    stack to reject UDP patches from multi-home server with
    nic on the same subnet. (bz 208244)


author: Steve Dickson <steved@redhat.com> 1.0.9-18
changelog:
  - Fix mount.nfs4 to display correct error message (bz 227212)
  - Fix mount.nfs so mtab is updated (bz 227988)
  - Eliminate timeout on nfsd shutdowns (bz 222001)
  - Eliminate memory leak in mountd (bz 239536)
  - Make sure statd uses correct uid/gid by chowning
    the /var/lib/nfs/statd with the rpcuser id. (bz 235216)
  - Correct some sanity checking in rpc.nfsd. (bz 220887)
  - Fixed mount.nfs mtab lock (bz 227985)
  - Have mountd hold open etab file to force inode number to change (bz 236823)
  - Create a /etc/sysconfig/nfs with all the possible init script
    variables (bz 234543)
  - Changed nfs initscript to exit with correct value (bz 221874)
  - Added userlevel support for v4 relocation support (bz 223053)


author: Steve Dickson <steved@redhat.com> 1.0.9-19
changelog:
  - Make sure the condrestarts exit with a zero value (bz 240352)
  - Added -o nordirplus mount option to disable READDIRPLUS (bz 240357)
  - Stopped /etc/sysconfig/nfs from being overwritten on updates (bz 234543)


author: Steve Dickson <steved@redhat.com> 1.0.9-22
changelog:
  - Reworked returns values of the init scripts (bz 243703)
  - Reworked rpc init scripts so they are not dependent
    loading modules. (bz 241015).


author: Steve Dickson <steved@redhat.com> 1.0.9-23
changelog:
  - Changed rpcidmapd and rpcgssd stop priority levels so
    those daemons would be stoppped after autofs (bz 245376)
  - Updated some out-of-date man pages (bz 233903)
  - Stoppped mount.nfs from wasting reserve ports (bz 246254)


author: Jeff Layton <jlayton@redhat.com> 1.0.9-26
changelog:
  - Add new mountd mode for handling many netgroups (bz 250609)
  - Change nfs init script to not reset lockd ports on stop (bz 313671)
  - Change nfslock script to use sysctls to set lockd ports (bz 313671)


author: Steve Dickson <steved@redhat.com> 1.0.9-27
changelog:
  - Fixed nfs initscript to fail with rpc.mound fails (bz 250622) 
  - Fixed typo in rpc.mountd man page (bz 248543)
  - Turn on 'nohide' automatically for all refer exports (bz 313561)


author: Steve Dickson <steved@redhat.com> 1.0.9-29
changelog:
  - Added SECINFO support (bz 315401)
  - Reworked init scripts so service will be able to
    stop when some of the checks fail. (bz 295911)


author: Steve Dickson <steved@redhat.com> 1.0.9-30
changelog:
  - Added in a number of bug fixes (esp in crossmnt code) that were 
    exposed during the secinfo testing. (bz 315401)


author: Steve Dickson <steved@redhat.com> 1.0.9-33
changelog:
  - In both rpcgssd and rpcsvcgssd initscrips move the 
    SECURE_NFS check back to be a global check. This
    stops false failures from happen when the services
    are stopped when they are not configured to start (bz 435267)


author: Steve Dickson <steved@redhat.com> 1.0.9-36
changelog:
  - Incorrect exit codes from nfs init script (bz 431891)
  - Incorrect a typo in nfsstat --mounted arg (bz 433741)
  - Fixed statd callbacks with the -n arg (bz 451057)
  - Do not display zero stats with nfsstat (bz 437242)
  - Pre-load nfsd when args to rpc.nfsd are given (bz 441983)
  - Increase the number simultaneous krb5 mounts (bz 432879)
  - Have rpc.gssd use file ownership vs uid on cred file (bz 433751)


author: Steve Dickson <steved@redhat.com> 1.0.9-37
changelog:
  - Added the warning.patch to fix some warning which were
    flaged by rpmdiff during the errata phasea (Errata 2009:8187)

  - Re-enabled tcp wrappers. (bz 440120)


author: Steve Dickson <steved@redhat.com> 1.0.9-38
changelog:
  - The fix to bz 438418 introduced a regression that caused
    mount.nfs to exit with zero on failed mounts. (bz 465966)


author: Steve Dickson <steved@redhat.com> 1.0.9-39
changelog:
  - Fixed typo in nfs initscript that caused rpc.rquotad daemons
    to be started but not stoppped (bz 470483)


author: Steve Dickson <steved@redhat.com> 1.0.9-40
changelog:
  - Fixed arguments to the hosts_ctl() call in the good_client() 
    routine used in the tcpwrapper support. (bz 440120)


author: Steve Dickson <steved@redhat.com> 1.0.9-42
changelog:
  - mountd: Check host alias with netgroups (bz 478952)
  - exportfs: fixed typo in man page (bz 474848)
  - nfs.init: NFS server reboot results in "Stale NFS file handle" (bz 474449) 
  - nfslock.init: options not correctly parsed (bz 459591)
  - mount.nfs: mounts fail with read-only /etc (bz 450646)
  - nfslock.init: lockd not using settings in sysconfig/nfs (bz 434795)
  - tcpwrappers: updated code to correctly use api  (bz 494878)
  - nhfsstone: added v3 and v4 support (bz 465933)
  - mount.nfs: add support for lookupcache= option (bz 489335).


author: Steve Dickson <steved@redhat.com> 1.0.9-50
changelog:
  - Reverted the removal of idmapd.conf and its manpage
    since bz 502707 was not make the RHEL5.6 release


author: Steve Dickson <steved@redhat.com> 1.0.9-51
changelog:
  - Fixed verification on runtime configuration file (bz 471401)
  - Ensured all init script are LSB compliant (bz 485905)
  - Added static user mapping to idmapd.conf (bz 502707)


author: Steve Dickson <steved@redhat.com> 1.0.9-52
changelog:
  - Fixed retry= to handle lack of reserved port situation (bz 240790)
  - Stopped rpc.statd is running as root (bz 495066)
  - Fixed rpc.gssd ccachedir option (bz 498134)
  - Make sure the uid/gid of nfsnobody is the
    correct value for all archs (bz 511876)
  - Fixed nfsstat's mislabled output (bz 617669)
  - Add support for lookupcache= option in nfsv4 (bz 511312)
  - Fixed UDP only mounts (bz 513466)
  - Fixed mounts when mount v1 is not supported (bz 595675)
  - Added sane timeout to svcgssd (bz 507341)


author: Steve Dickson <steved@redhat.com> 1.0.9-55
changelog:
  - mount: fixed the -o retry option to retry the given amount (bz 736677)
  - manpage: removed the -o fsc option (bz 715523)
  - nfsstat: show v4 mounts with -m flag (bz 712438)
  - mount: allow insecure ports with mounts (bz 513094)
  - gss: turned off excessive syslogs (bz 593097)
  - mountd: allow v2 and v3 to be disabled (bz 529588)
  - specfile: make sure nfsnobodys gid changes when it exists (bz 729603)
  - initfiles: initscripts improvements (bz 710020)


author: Steve Dickson <steved@redhat.com> 1.0.9-56
changelog:
  - Removed sim crash support (bz 600497)
  - initfiles: more initscripts improvements (bz 710020)
  - mount: Don't wait for TCP to timeout twice  (bz 736677)


author: Steve Dickson <steved@redhat.com> 1.0.9-58
changelog:
  - gss: turned off more excessive syslogs (bz 593097)
  - initfiles: more initscripts improvements (bz 710020)
  - specfile: correct typo when nfsnobodys gid already exists (bz 729603)


author: Steve Dickson <steved@redhat.com> 1.0.9-59
changelog:
  - gss: turned of even more excessive syslogs (bz 593097)
  - mount.nfs: Ignored the SIGXFSZ when handling RLIMIT_FSIZE changes (bz 697979)


author: Steve Dickson <steved@redhat.com> 1.0.9-60
changelog:
  - Updated idmapd.conf and idmapd.conf.man to reflect the 
    static user name mapping (502707)
  - Fixed an umount regression introduced by bz 513094 (bz 781931)


author: Steve Dickson <steved@redhat.com> 1.0.9-61
changelog:
  - Added a time out arugment to gssd (bz 507341)
  - Added mount.nfs4 and umount.nfs4 man pages (bz 760019)
  - Removed gss_clnt_send_err and gss_destroy_creds (bz 760019)
  - Remove typo in in nfslock.init (bz 803667)
  - UDP mounts need to fall back to TCP mounts on timeouts (bz 769098)
  - Avoid etab corruption by sync-ing up calls to exportfs (bz 800365)
  - Fixed regression caused by bz 595675 (bz 745730) 
  - Added resvport/noresvport to nfs man page (bz 772170)


author: Steve Dickson <steved@redhat.com> 1.0.9-64
changelog:
  - Fixed umounts when MOUNTD_NFS_V2=no (bz 804681)
  - Fixed typo in nfs init script (bz 819373)
  - Fixed rpc.idmapd warning with v4 mounts (bz 708253)
  - Fixed rpc.gssd warning with v4 mounts (bz 769744)
  - Make sure statd's backup dir has correct permissions (bz 782455)


author: Harshula Jayasuriya <harshula@redhat.com> 1.0.9.68
changelog:
  - Need to use /var/lock/subsys/nfs not /var/lock/subsys/nfsd.
    Use "status -l nfs nfsd" for status check. The "-l" option
    was introduced in initscripts >= 8.45.43. (bz 873307)


author: Steve Dickson <steved@redhat.com> 1.0.9-70
changelog:
  - Have showmount try the highest mount version first (bz 947552)
  - Switch the mount version umount tries first (bz 947552)


author: Steve Dickson <steved@redhat.com> - 0.3.0-1
changelog:
  - Updated to latest upstream version 0.3.0
  - Fixed minor issues in spec file from the package review


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.3.0-1.1
changelog:
  - lose the BR for autotools
  - Patch in support for destdir
  - use %configure macro, make DESTDIR= install
  - add sparc to -fPIE (trivial, but correct)
  - destdir revealed missing/poorly created symlink, patch fixes it, add nfs4_editfacl to files
  - LDFLAGS passed to configure/exported were being blindly overwritten, patch fixes


author: Steve Dickson <steved@redhat.com> - 0.3.1-1.1
changelog:
  - Updated to latest upstream version 0.3.1 which eliminated the 
    need for the patches introduced in the previous commit.


author: Akira TAGOH <tagoh@redhat.com> 2.03-1
changelog:
  - New upstream release.
  - converted Japanese nkf.1 to UTF-8. (#105762)
  - nkf-1.92-glibc2290.diff: removed.


author: Tim Powers <timp@redhat.com>
changelog:
  - based on origional spec file from
  	http://www.insecure.org/nmap/index.html#download
  - general cleanups, removed lots of commenrts since it madethe spec hard to
  	read
  - changed group to Applications/System
  - quiet setup
  - no need to create dirs in the install section, "make
  	prefix=$RPM_BUILD_ROOT&{prefix} install" does this.
  - using defined %{prefix}, %{version} etc. for easier/quicker maint.
  - added docs
  - gzip man pages
  - strip after files have been installed into buildroot
  - created separate package for the frontend so that Gtk+ isn't needed for the
  	CLI nmap 
  - not using -f in files section anymore, no need for it since there aren't that
  	many files/dirs
  - added desktop entry for gnome


author: Tim Powers <timp@redhat.com>
changelog:
  - updated to 2.53
  - using applnk now
  - use %configure, and %{_prefix} where possible
  - removed redundant defines at top of spec file


author: Tim Powers <timp@redhat.com>
changelog:
  - fixed man pages so that they are in an FHS compliant location
  - use %makeinstall
  - use predefined RPM macros wherever possible


author: Tim Powers <timp@redhat.com>
changelog:
  - update to nmap-2.54BETA7 to possibly fix bug #20199
  - use the desktop file provided by the package instead of using my own
  - patches in previous version are depreciated. Included in SRPM for
    reference only


author: Harald Hoyer <harald@redhat.com> - 2:3.81-4
changelog:
  - removed references how to scan microsoft.com (bz #164962)
  - finally got rid of gtk+-devel dependency


author: Karsten Hopp <karsten@redhat.de> 4.03-1
changelog:
  - update to 4.03, this fixes #184286
  - remove duplicate menu entry in 'Internet' (#183056)
  - fix possible tmpdir race condition during build (#158996)


author: Christopher Aillon <caillon@redhat.com> - 0.3.1-4
changelog:
  - Provide desktop-notification-daemon, since libnotify requires a
    notification deamon, but not this specific one.  Other notification
    daemons can exist on the system so long as they meet the provides
    (and the API of course).


author: Christopher Aillon <caillon@redhat.com> - 0.3.1-6
changelog:
  - Add patch to determine whether a compositing manager is running
    when drawing a new notification bubble, as long as the CM grabs
    the appropriate XSelection.


author: John (J5) Palmieri <johnp@redhat.com> - 0.3.1-9
changelog:
  - Add patch to fix struct handling in the dbus glib binding for dbus 0.61
    so image data works again


author: Luke Macken <lmacken@redhat.com> - 0.1.0-3
changelog:
  - Add notify-python-0.1.0-attach_to_status_icon.patch to allow the attaching
    notifications to status icons.


author: Martin Stransky <stransky@redhat.com> 0.9.91.4-3
changelog:
  - updated nspluginsetup script and package install/uninstall scripts
  - added cross-compilation support
  - removed binaries stripping


author: Martin Stransky <stransky@redhat.com> 0.9.91.4-15
changelog:
  - removed mozembeded dependency
  - excluded totem plugins from wrapping
  - xpcom support is optional now


author: Martin Stransky <stransky@redhat.com> 0.9.91.5-23
changelog:
  - merged exclude patch with main tarball
  - fixed #431095 - Typo in mozilla-plugin-config verbose output


author: Warren Togami <wtogami@redhat.com> 1.1.0-10
changelog:
  - Revert libcurl requires because it was done in an incorrect way
  - Revert patch from -7 because it made things worse


author: Martin Stransky <stransky@redhat.com> 1.1.2-1
changelog:
  - updated to 1.1.12
  - added librhythmbox* to ignored plugins (#467187)
  - removed debug prints (#467090)


author: Martin Stransky <stransky@redhat.com> 1.1.2-3
changelog:
  - Removed event patch, it blocks X events and breaks Adobe pdf plugin
  - Removed event limit in xt_event_polling_timer_callback


author: Christopher Aillon <caillon@redhat.com> 4.6-4
changelog:
  - Use the NSPR version numbering scheme reported by NSPR,
    which unfortunately is not exactly the same as the real
    version (4.6 != 4.6.0 according to RPM and pkgconfig).


author: Christopher Aillon <caillon@redhat.com>
changelog:
  - Stop shipping static libraries; NSS and dependencies no longer
    require static libraries to build.


author: Kai Engert <kengert@redhat.com> 4.6.1-2
changelog:
  - Do not use -ansi when compiling, because of a compilation
    problem with latest glibc and anonymous unions.
    See also bugzilla.mozilla.org # 322427.


author: Elio Maldonado Batiz <emaldona@redhat.com> - 4.8.9-1
changelog:
  - Resolves: Bug 772945 - [RFE] Async update nspr to make firefox 10 LTS rebase possible
  - Update to 4.8.9


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-2
changelog:
  - Resolves: rhbz#831654 - revert unwanted changes to nspr.pc
  - Change -L@libdir@/nspr4 to -L@libdir@ in the patch


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-3
changelog:
  - Resolves: rhbz#831654 - restore top section of nspr-config-pc.patch
  - Needed to prevent multilib regressions


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-4
changelog:
  - Resolves: rhbz#831654 - Pick up fixes from the rhel-5.8 branch
  - Regenerated nspr-config-pc.patch passes the the rpmdiff tests


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Retagging to fix an inconsitency in the release tags
  - Resolves: rhbz#1002641 - Rebase RHEL 5 to NSPR 4.10 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-1
changelog:
  - Update to nspr-4.10.2
  - Resolves: rhbz#1032468 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-2
changelog:
  - Remove an unused patch
  - Resolves: rhbz#1032468 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-1
changelog:
  - Rebase to nspr-4.10.8
  - Resolves: Bug 1200921 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269359 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption [rhel-5.11.z]


author: Elio Maldonado <emaldona@redhat.com> - 4.11.0-0.1
changelog:
  - Rebase to NSPR 4.11
  - Resolves: Bug 1297943 - Rebase RHEL 5.11.z to NSPR 4.11 in preparation for Firefox 45


author: Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
changelog:
  - Initial import into Fedora Core, based on a CVS snapshot of
    the NSS_3_11_RTM tag
  - Fix up the pkcs11-devel subpackage to contain the proper headers
  - Build with RPM_OPT_FLAGS
  - No need to have rpath of /usr/lib in the pc file


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Bob Relyea <rrelyea@redhat.com> - 3.11.4-5
changelog:
  - handle the case where a smartcard is reset between the time the nss
    prompts for the password and the user enters it.


author: Kai Engert <kengert@redhat.com> - 3.11.5-3
changelog:
  - Prevent .chk files from being modified by prelink and rpm building
    by generating chk files at install time and setting immutable
    filesystem attribute (230546, 231367).


author: Kai Engert <kengert@redhat.com> - 3.11.5-4
changelog:
  - Apply upstream patch for mozilla.org bug 51429 in order to
    fix an issue with smartcard login (rhbz#212077).


author: Kai Engert <kengert@redhat.com> - 3.11.7-1.1
changelog:
  - Fix rhbz#212077, use a workaround to avoid Mozilla.org bug 51429
  - Remove link time dependency on libsoftokn3
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-1
changelog:
  - Update to NSS_3_12_RC4
  - Enable loading of external ECC modules
  - Include upstream fix for a deadlock in the certutil tool, bug 447431


author: Kai Engert <kengert@redhat.com> - 3.12.2.0-3
changelog:
  - Update to NSS_3_12_2_WITH_CKBI_1_73_RTM
  - Add dependency to pkgconfig to devel package (bug456849)


author: Elio Maldonado Batiz <emaldona@redhat.com> - 3.12.10-9
changelog:
  - Resolves: Bug 713373 - File descriptor leak after service httpd reload
  - Don't initialize nss if already initialized or if there are no dbs


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-1
changelog:
  - Update to NSS_3_13_5_RTM
  - Resolves: rhbz#830304 - Update RHEL 5.x to NSS 3.13.5 and NSPR 4.9.1 for Mozilla 10.0.6


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-3
changelog:
  - Resolves: rhbz#830304 - Fix multilib and scriptlet problems
  - Fix %post and %postun lines per packaging guildelines
  - Add %{?_isa} to tools Requires: per packaging guidelines
  - Fix explicit-lib-dependency zlib error reported by rpmlint


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-4
changelog:
  - Related: rhbz#830304 - Fix the changes to the %post line
  - Having multiple commands requires that /sbin/lconfig be the beginning of the scriptlet


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-5
changelog:
  - Related: rhbz#830304 - Fix ia64 / i386 multilib nss install failure
  - Remove no longer needed %pre and %preun scriplets meant for nss updates from RHEL-5.0


author: Robert Relyea <rrelyea@redhat.com> - 3.13.5-7
changelog:
  - Resolves: rhbz#820684
  - Enable certutil handle user supplied flags for PKCS #11 attributes.
  - This will enable certutil to generate keys in fussy hardware tokens.


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-8
changelog:
  - Resolves: rhbz#820684
  - Fix last entry in attrFlagsArray to be {NAME_SIZE(unextractable), PK11_ATTR_UNEXTRACTABLE}


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#918948 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado - 3.14.3-2
changelog:
  - Restore the freebl-softoken source tar ball updated to 3.14.3
  - Renumbering of some sources for clarity
  - Resolves: rhbz#918948 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado - 3.14.3-3
changelog:
  - Update to NSS_3_14_3_RTM
  - Rework the rebase to preserve needed idiosynchracies
  - Ensure we install frebl/softoken from the extra build tree
  - Don't include freebl static library or its private headers
  - Add patch to deal with system sqlite not being recent enough
  - Don't install nss-sysinit nor sharedb
  - Resolves: rhbz#918948 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Fix rpmdiff test reported failures and remove other unwanted changes
  - Resolves: rhbz#918948 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-7
changelog:
  - Define -DNO_FORK_CHECK when compiling softoken for ABI compatibility
  - Resolves: rhbz#918948 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-8
changelog:
  - Enable ECC support limited to suite b
  - Export NSS_ENABLE_ECC=1 in the %check section to properly test ecc
  - Resolves: rhbz#960241 - Enable ECC in nss and freebl


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-9
changelog:
  - Apply upstream fixes for ecc enabling and aes gcm
  - Rename two macros EC_MIN_KEY_BITS and EC_MAX_KEY_BITS per upstream
  - Apply several upstream AES GCM fixes
  - Resolves: rhbz#960241 - Enable ECC in nss and freebl
  - Resolves: rhbz#918948 - [RFE][RHEL5]


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-11
changelog:
  - Restore 'export NO_FORK_CHECK=1' required for binary compatibility on RHEL-5
  - Remove an unused patch
  - Resolves: rhbz#918948 - [RFE][RHEL5] Rebase to nss-3.14.3


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-12
changelog:
  - Resolves: rhbz#983766 - nssutil_ReadSecmodDB leaks memory
  - Add patch to get rid of sporadic blapitest core dumps


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-13
changelog:
  - Roll back to 79c87e69caa7454cbcf5f8161a628c538ff3cab3
  - Peviously added patch hasn't solved the sporadic core dumps
  - Related: rhbz#983766 - nssutil_ReadSecmodDB leaks memory


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-14
changelog:
  - Resolves: rhbz#987131 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-16
changelog:
  - Add disable_hw_gcm.patch and in the spec file export NSS_DISABLE_HW_GCM=1
  - Disable HW GCM on RHEL-5 as the older kernel lacks support for it
  - Related: rhbz#987131


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-16
changelog:
  - Adjust the patches to complete the syncup with upstrean nss
  - Use NSS_DISABLE_HW_GCM on the patch as we do on the spec file
  - Ensure softoken/freebl code is the same on nss side as on the softoken side
  - Related: rhbz#987131


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-1
changelog:
  - Rebase to nss-3.15.1
  - Resolves: rhbz#1002642 - Rebase RHEL 5 to NSS 3.15.1 (for FF 24.x)
  - Resolves: rhbz#1015864 - [Regression] NSS no longer trusts MD5 certificates
  - Split %check section tests in two: freebl/softoken and rest of nss tests
  - Adjust various patches and spec file steps on account of the rebase
  - Add various patches and remove obsoleted ones on account of the rebase
  - Renumber patches so freeb/softoken ones match the corresponding ones in rhel-6 nss-softokn


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-1
changelog:
  - Update to nss-3.15.3
  - Resolves: rhbz#1032468 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Remove unused patch and retag for update to nss-3.15.3
  - Resolves: rhbz#1032468 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Pick up corrections made in the rhel-10.Z branch, remove an unused patch
  - Resolves: rhbz#1032468 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1042684 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-5
changelog:
  - Improve shell code for error detection on %check section
  - Resolves: Bug 1035281 - Suboptimal shell code in nss.spec


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-1
changelog:
  - Rebase to nss-3.16.1 for FF31
  - Resolves: Bug 1110860 - Rebase nss in RHEL 5.11 to NSS 3.16.1, required for FF 31


author: Kai Engert <kaie@redhat.com> - 3.16.1-4
changelog:
  - Adjust softokn patch to be compatible with legacy softokn API.
  - Resolves: Bug 1145430 - CVE-2014-1568


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-2
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-3
changelog:
  - Fix shell syntax error on nss/tests/all.sh
  - Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-4
changelog:
  - Update and reeneable nss-646045.patch on account of the rebase
  - Enable additional ssl test cycles and document why some aren't enabled
  - Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-5
changelog:
  - Copy PayPalICA.cert and PayPalRootCA.cert to nss/tests/libpkix/certs
  - Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]


author: Kai Engert <kaie@redhat.com> - 3.18.0-6
changelog:
  - On RHEL 6.x keep the TLS version defaults unchanged.
  - Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-7
changelog:
  - Pick up upstream patch from nss-3.19.1
  - Resolves: Bug 1236954 - CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)
  - Resolves: Bug 1236967 - CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-1
changelog:
  - Rebase nss to 3.19.1
  - Pick up upstream fix for client auth. regression caused by 3.19.1
  - Revert upstream change to minimum key sizes
  - Remove patches that rendered obsolote by the rebase
  - Update existing patches on account of the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-1
changelog:
  - Rebase to nss 3.21
  - Resolves: Bug 1297944 - Rebase RHEL 5.11.z to NSS 3.21 in preparation for Firefox 45


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-8
changelog:
  - build using a bundled Berkeley DB with a unique name to avoid possible symbol
    collisions with binaries using different versions (mix multiple versions of
    any shared library in a single process, observe as wackiness ensues)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-18
changelog:
  - disable various language bindings when building the bundled DB library
  - remove unpackaged files from the buildroot in %install
  - don't install the compat version on arches where if we don't need one


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-24
changelog:
  - disable use of RPM's internal dependency generator, which was preventing
    the filtering out of glibc private dependencies (#112849)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-27
changelog:
  - only provide a -compat subpackage on platforms where glibc provides
    compat NSS modules (%{ix86})
  - make -compat depend on the same version of the non-compat package


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-28
changelog:
  - set _filter_GLIBC_PRIVATE instead of overriding findrequires, so that file
    colors get marked correctly (originally #128436)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-30
changelog:
  - update to DB 4.3 (#140094)
  - add sample getent-based makefile as a doc file
  - pass S_IFREG to matchpathcon() to properly match contexts which are earmarked
    for only files


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set errno to ENOENT by default so that we don't leave stale errno values
    around in error cases (#152467)
  - clear the entire key DBT before handing it to a get() function


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-33
changelog:
  - update to db 4.3.28
  - correct a use of uninitialized memory in the bundled libdb (Arjan van de Ven)
  - obsolete the compat package, which is useless because current glibc wouldn't
    use it anyway


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-35
changelog:
  - add missing 'ed' builddep
  - set LDFLAGS and CPPFLAGS so that our local copy of DB is more likely to be
    found by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-35.2
changelog:
  - when setting file contexts for creation of new files, only fail outright
    if we were in enforcing mode and the file needed to be given a specific
    label (#368281)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-36
changelog:
  - import Kees Cook's patch to fix accidental leakage of part of ./DB_CONFIG
    (#580543, CVE-2010-0826)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - use the ldap.conf file as an external source
  - don't forcibly build the support for version 3
  - imported the default spec file from the tarball and fixed it up for RH 6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to pam_ldap 67 to fix a bug in template user code
  - convert symlink in /usr/lib to a relative one (#16132)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 122
  - link statically with libsasl, require the first devel package that supplied it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - BuildPrereq gdbm-devel
  - pass RPM_OPT_FLAGS as CFLAGS to %configure
  - if protocol version is 2, explicitly set protocol version to 3 before trying
    to start TLS
  - add STARTTLS support to nss_ldap
  - work around a build-time problem on ia64


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - version the NSS module so that it works properly with programs which have
    been linked statically to a different version of an LDAP library, like
    Netscape Communicator


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 138, which folds in our patch for initgroups
  - change the default search base in ldap.conf to dc=example,dc=com


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 149, minor fixes for compile glitches
  - update to pam_ldap 105, minor fixes (as above) and handles shadow expiration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make nss_ldap fail when attempting to startup TLS fails, because that's what
    we do when LDAPS doesn't work (and what pam_ldap does already)
  - add DNS autoconfiguration to pam_ldap


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 163, fixing the timeout problem
  - update to pam_ldap 120
  - add gdbm-devel as a buildprereq, because we list it in $LIBS (#48999)
  - add db3-devel as a buildprereq (#48999)
  - add pam-devel as a buildprereq (#48999)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 164, fixing the timeout problem correctly
  - update to pam_ldap 122, fixing escaping of user name in filters


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 172, fixing schema mapping code
  - update to pam_ldap 124, incorporating TLS default option and doc fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - link statically with libldap again, because libldap is linked with other
    shared libraries now (keeping us from having files in /usr open when we
    go to shut the system down)


author: Nalin Dahyabhai <nalin@redhat.com> 173-1
changelog:
  - update to nss_ldap 173, which includes doc updates
  - update to pam_ldap 133, which simplifies the dnsconfig patch quite a bit


author: Nalin Dahyabhai <nalin@redhat.com> 184-1
changelog:
  - update to pam_ldap 138
  - enable rfc2307bis schema support
  - version the pam_ldap module
  - add the proper soname to the nss_ldap module and remove the symlink
  - add a trigger to run ldconfig again when an upgrade removes the symlink,
    which used to be in this package (doh!)
  - fix the symlink from %{_libdir} to the module (for linking directly to it)


author: Nalin Dahyabhai <nalin@redhat.com> 188-0.6
changelog:
  - rebuild for RHL 6.2
  - change dependency on pam-devel to /usr/include/security/pam_modules.h
  - drop build deps on cyrus-sasl-devel and openldap >= 2.x
  - modify pam_ldap versions file so that binutils from RHL 6.2 can parse it
  - update to nss_ldap 188
  - update to pam_ldap 144


author: Nalin Dahyabhai <nalin@redhat.com> 202-1
changelog:
  - update to nss_ldap 202, pam_ldap 153
  - update DB from 4.0.14 to 4.1.24.NC
  - try to address multilib path changes


author: Nalin Dahyabhai <nalin@redhat.com> 202-2
changelog:
  - apply DB patches from sleepycat.com
  - correctly point nss_ldap at the bundled DB library
  - create /%{_lib} instead of /lib to install into


author: Nalin Dahyabhai <nalin@redhat.com> 202-4
changelog:
  - rework static link order to account for libssl requiring libkrb5
  - force assembly locking on %ix86 systems
  - link with libz, which libssl also requires


author: Nalin Dahyabhai <nalin@redhat.com> 207-1
changelog:
  - update to build with newer OpenLDAP
  - add README.TLS to remind people that in order for TLS support to be usable,
    the server's certificate has to pass validation checks made by the client


author: Nalin Dahyabhai <nalin@redhat.com> 207-3
changelog:
  - link dynamically with libcom_err if it isn't in /usr/kerberos/lib64 (which
    we assume means that it's in /lib64)


author: Nalin Dahyabhai <nalin@redhat.com> 207-5
changelog:
  - fix objectclass and attribute mapping, which failed due to uninitialized
    fields in mapping index structures, fixed upstream in 210 (#110547)


author: Nalin Dahyabhai <nalin@redhat.com> 212-1
changelog:
  - update to 212, pam_ldap 167
  - link nss_ldap with libgssapi_krb5, the static libsasl2 includes the gssapi
    mech, at least for now, and we pick up its unresolved symbols at link-time
  - fix out-of-bounds error at initialization-time (part of #101269)
  - include pam_ldap's authorization schema files for slapd as a doc file


author: Nalin Dahyabhai <nalin@redhat.com> 226-1
changelog:
  - update to nss_ldap 226, pam_ldap 176
  - rework pam_ldap dns autoconfig patch
  - require automake instead of automake15, because autoreconf uses the current
    version (#129877)


author: Nalin Dahyabhai <nalin@redhat.com> 226-3
changelog:
  - fix misleading doc comment in /etc/ldap.conf -- the checkpeer setting follows
    libldap's default, which is dependent on the version of OpenLDAP which which
    this package is linked (part of #143622)


author: Nalin Dahyabhai <nalin@redhat.com> 227-1
changelog:
  - update to version 227
  - force nss_ldap to mimic pam_ldap's behavior when the tls_checkpeer setting is
    unconfigured in ldap.conf


author: Nalin Dahyabhai <nalin@redhat.com> 232-2
changelog:
  - prefer using libraries in /usr/lib64/nss_ldap-openldap if we find any
  - use ldap_start_tls in preference to ldap_start_tls_s, if found, so that
    we can time out if the server has gone catatonic


author: Nalin Dahyabhai <nalin@redhat.com> 234-3
changelog:
  - fix type mismatch bug in patch for using non-blocking start_tls in
    preference to the blocking version when it's available (#156582)


author: Nalin Dahyabhai <nalin@redhat.com> 234-4
changelog:
  - override glibc version detection so that mismatches between the versions of
    32- and 64-bit glibc don't result in our %install installing the module
    with a different name than the 'make install' target uses


author: Nalin Dahyabhai <nalin@redhat.com> 234-5
changelog:
  - update to pam_ldap 180 to get fix for vulnerability from parsing password
    policy controls which don't contain error numbers (#166164, CAN-2005-2497)


author: Nalin Dahyabhai <nalin@redhat.com> 239-1
changelog:
  - update to nss_ldap 239
  - provide a libnss_ldap.so link for directly linking with nss_ldap, as glibc
    does for the modules it provides


author: Nalin Dahyabhai <nalin@redhat.com> 245-1
changelog:
  - update to nss_ldap 245
  - add patch from upcoming 246 release to change the placeholder used when
    userPassword is unreadable from "x" to "*" (upstream #240)


author: Nalin Dahyabhai <nalin@redhat.com> - 248-2
changelog:
  - set "nss_initgroups_ignoreusers root,ldap" in the default configuration
    file, so that nss_ldap will assume that there are no supplemental groups
    for this user to be found in the directory server (#180657)


author: Nalin Dahyabhai <nalin@redhat.com> - 250-5
changelog:
  - adjust nss_ldap's makefile rule to more correctly deduce the right soversion
    for nsswitch modules (#191927)


author: Nalin Dahyabhai <nalin@redhat.com> - 251-2
changelog:
  - configure with --enable-configurable-krb5-ccname-gssapi instead of
    --enable-configurable-krb5-ccname, the latter of which doesn't actually
    do anything (Howard Wilkinson)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-1
changelog:
  - update to 253
    - closes a crasher when glibc's initgroups backend passes in a zero-length,
      NULL buffer to start
    - includes lookup_nssldap updates for autofs


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - resize the supplemental GID array when it gets too large and an array size
    limit isn't set (Gavin Romig-Koch, #246541)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-4
changelog:
  - add dbus,radvd,tomcat,radiusd,news,mailman to the default list of
    nss_initgroups_ignoreusers (#243753)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-6
changelog:
  - suppress password-expired errors encountered during referral chases during
    modify requests (#335661)
  - interpret server-supplied policy controls when chasing referrals, so that
    we don't give up when following a referral for a password change after
    reset (#335661)
  - don't attempt to change the password using ldap_modify if the password
    change mode is "exop_send_old" (we already didn't for "exop") (#364501)
  - don't drop the supplied password if the directory server indicates that
    the password needs to be changed because it's just been reset: we may need
    it to chase a referral later (#335661)
  - correctly detect libresolv and build a URI using discovered settings, so that
    server discovery can work again (#254172)
  - honor the "port" setting again by correctly detecting when a URI doesn't
    already specify one (#326351)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-7
changelog:
  - add keyutils-libs-devel and libselinux-devel as a buildrequires: in order to
    static link with newer Kerberos (#427370)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-11
changelog:
  - backport changes to group parsing from version 254 to fix heap corruption
    when parsing nested groups (#444031)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-13
changelog:
  - block SIGPIPE in the atfork handler, so that it doesn't trip up when
    attempting to drop a connection to the server (#448014)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-15
changelog:
  - build nss_ldap with --enable-paged-results (#444185)
  - add patch to make netgroup enumeration fail due to lack of entries in
    setnetgrent(), rather than in getnetgrent(), to match how other mechanisms
    work (Jose Plans, #445972)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-18
changelog:
  - turn the default for paged results back off (#486321)
  - pull in fix for leaking descriptors from version 255 (#428837)
  - replace our proposed patch for being stricter about malformed entries with
    the version upstream went with, and start applying it (#457258)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-19
changelog:
  - don't close a oneshot connection while we're in the middle of answering a
    specific query (#488857)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-22
changelog:
  - add patch to not assume we got a result for our start_tls request within the
    bind timelimit (Jatin Nansi, #499302)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-23
changelog:
  - unblock SIGPIPE while closing the connection in the child's part of
    atfork(), so that it can get delivered before we reset the signal
    handler (#454315)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-24
changelog:
  - update build dependency on openldap to 2.3.43-7 to get fixes for referral
    chasing (#510522) which affected nss_ldap (#472920)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-25
changelog:
  - avoid deadlock when one of our lookups recurses into our own host resolution
    routine, which would otherwise cause a deadlock or a crash (#448883)
  - provisionally add an "nss_check_case" option which, when enabled, will
    ignore entries for which the result didn't case-exact match the query,
    regardless of the comparison performed by the directory (#508621,#518911)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-26
changelog:
  - pull in fix for upstream #313, which returns a clean error when we've
    failed to parse our configuration correctly, in this case due either to a
    larger-than-handled nss_initgroups_ignoreusers setting (#584157) or the
    lack of any servers being configured (#538498)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-27
changelog:
  - pull in backported fix for upstream #378, which returns NETDB_INTERNAL in
    h_errno in cases when nss_ldap's run out of space in the supplied buffer and
    libc provided us with an h_errno variable to set for it to also check
    (Jason Luo, #468807)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-30
changelog:
  - report the remaining life of soon-to-be-expired passwords with granularity
    in hours, if possible (Masahiro Matsuya, #537358)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-31
changelog:
  - add testing patch to postpone the connection drop in a newly-forked child
    until we're first called (#474181)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-32
changelog:
  - add revised testing patch to postpone the connection drop in a newly-forked
    child until we're first called (#474181)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-34
changelog:
  - link nss_ldap and pam_ldap with -z nodelete so that memory allocated by
    library dependencies which is lost at unload doesn't leak, for the sake
    of applications which call PAM for authentication many times over (Mark
    Goodwin, #511238)
  - fix some memory leaks in pam_ldap (upstream #326,#333, part of #511238)
  - fix an uninitialized variable error (Mark Goodwin, part of #511238)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-35
changelog:
  - don't unconditionaly set up a new LDAP structure every time we try to read
    someone's supplemental groups list, regardless of whether or not we did so
    previously, and clean the connection up completely if we fail to get a
    response or parse it (#654650, from upstream #418 and #392 via Olivier
    Fourdan)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-36
changelog:
  - tweak patch for postponing the connection drop in a newly-forked child until
    we're first called so that it doesn't try to close sockets which we just
    assumed were our own (more of #474181)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-37
changelog:
  - add proposed patch for upstream #421: sometimes errno gets reset before we
    return control to libc (#661630)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-38
changelog:
  - add a build-time requirement on a sufficiently-new openssl-devel to ensure
    that we get SHA-2 hashes when we're using TLS, because we still static-link
    the nss_ldap module (#683349)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-40
changelog:
  - return any non-success errors in setnetgrent(), not just netgroup-not-found
    errors (#664609, more of #445972)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-41
changelog:
  - backport fixes for upstream #350 (parsing results when the connection is
    gone) and #351 (double-free of message chain) (#684889)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-42
changelog:
  - add Ross Tyler's patch to always require authentication during password
    change requests for expired passwords, so that modules which check password
    quality (pam_cracklib) will always have the old password on-hand to examine
    as well (#667758)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-43
changelog:
  - incorporate Martin Poole's patch to handle larger-than-previously-expected
    configuration files (#705841)


author: Jakub Hrozek <jhrozek@redhat.com> - 253-45
changelog:
  - fix a regression caused by patch #39 - SRV records processing
    would crash if there was no basedn set (#705841)


author: Jakub Hrozek <jhrozek@redhat.com> - 253-46
changelog:
  - Require openldap libs with a fix for #609722 - libldap ignores a directory
    of CA certificates if any of them can't be read (#593242)
  - when closing a context, clean it up so that we won't try to issue an abandon
    when we go to use it again for something else (#696707)


author: Jakub Hrozek <jhrozek@redhat.com> - 253-50
changelog:
  - Free ldap_result when search does not return anything (#835555)
  - Use contents of ldap.secret even if it does not contain a newline (#797410)


author: Jakub Hrozek <jhrozek@redhat.com> - 253-52
changelog:
  - Add a patch by Gino LV. Ledesma to catch leaking sockets
  - Resolves: rhbz#772273 - (slow) socket leak in nss_ldap


author: Jakub Hrozek <jhrozek@redhat.com> - 253-52.1
changelog:
  - Use TLS_X_CALLBACK to terminate idle SSL connections after ldc_timeout
    seconds
  - Resolves: rhbz#1035945: nss_ldap does not reconnect to alternate ldap
                            server when using SSL


author: Jakub Hrozek <jhrozek@redhat.com> - 253-52.2
changelog:
  - Only set the TLS_X_CALLBACK if timeout is > 0
  - Related: rhbz#1035945: nss_ldap does not reconnect to alternate ldap
                            server when using SSL


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - comment out default values for keys, warn about starting with -A (#19316).
  - take out -A from ntpd startup as well.
  - update to 4.0.99k.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - allow comments in %{_sysconfdir}/ntp/step-tickers file (#28786).
  - need patch0 (glibc patch) on ia64 too


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - require/buildprereq libcap/libcap-devel
  - use 'ntp' user, tune the pre/post scripts, %files
  - add $OPTIONS to the init script


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Add the remote root exploit patch (based on ntp-hackers).
  - Enhance droproot patch (more documentation, etc.) <Jarno.Huuskonen@uku.fi>
  - Tweak the droproot patch to include sys/prctl.h, not linux/prctl.h
  (implicit declarations)
  - Remote groupdel commands, shouldn't be needed.
  - Removed -Wcast-qual and -Wconversion due to excessive warnings (hackish).
  - Make ntp compilable with both glibc 2.1 and 2.2.x (very dirty hack)
  - Add %{_sysconfdir}/sysconfig/ntpd which drops root privs by default


author: Harald Hoyer <harald@redhat.de>
changelog:
  - new snapshot
  - removed typos and security patch (already there)
  - commented multicastclient in config file


author: Harald Hoyer <harald@redhat.de> 4.1.0-1
changelog:
  - wow, how stupid can a man be ;).. fixed #50698 
  - updated to 4.1.0 (changes are small and in non-critical regions)


author: Harald Hoyer <harald@redhat.de> 4.1.0b-4
changelog:
  - created drift with dummy value #58294
  - grep for timeservers in ntp.conf also for ntpdate #57837
  - check return value of ntpdate #58836


author: Harald Hoyer <harald@redhat.de> 4.1.1b-1
changelog:
  - updated to version 4.1.1b
  - improved initscript - use ntpdate on -x
  - improved initscript - open firewall only for timeservers
  - ntp-4.1.1a-adjtime.patch removed (already in source)
  - ntp-4.1.1a-mfp.patch removed (already in source)
  - ntp-4.0.99j-vsnprintf.patch removed (already in source)


author: Harald Hoyer <harald@redhat.com> - 4.2.0.a.20040617-4
changelog:
  - removed firewall hole punching from the initscript; rely on iptables
    ESTABLISHED,RELATED or manual firewall configuration


author: Jindrich Novy <jnovy@redhat.com> 4.2.0.a.20050816-1
changelog:
  - update to the latest stable 4.2.0.a.20050816
  - drop upstreamed .gcc4, .vsnprintf patches
  - remove obsolete .autofoo patch
  - make patch numbering less chaotic
  - don't package backup for .droproot patch


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-2
changelog:
  - Fix fails on upgrade, if ntpd is disabled (#166773)
  - A cosmetic patch. There are some comments and braces '{' '}' added.
  - One unprintable character was converted to octal-form .
  - It can be removed anytime (conversion of the cvs-projets for C-Frame 121,
  - (auto-debug, auto-trace for cfr-printnet server).


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-3
changelog:
  - A similar patch as ntp-4.0.99j-vsnprintf.patch in FEDORA CORE 4
  - (current patch is ntp-stable-4.2.0a-20050816-vsnprintf.patch)


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-10
changelog:
  - ntpd does not submit his local clock (if there is no peer).
    ntpdate->ntpd #163862 , Patch13: ntp-stable-4.2.0a-20050816-loconly.patch


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-11
changelog:
  - update man pages (#153195, #162856)
  - drop C-Frame-121, vsnprintf, minusTi and loconly patch
  - prevent segfault when loopback interface is not configured (#159056)
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-12
changelog:
  - fix initscript:
    - replace -U with -u in getopts (#187003)
    - don't pass group to ntpdate -U argument and ignore -i in options (#142926)
    - set ntpconf for -c
    - remove -p 8 from ntpdate arguments
    - don't call ntpdate when step-tickers doesn't contain anything useful
      and -x isn't in options
  - fix default keyfile for ntpdate (#183196)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-14
changelog:
  - modify ntp.conf, change default restrict, remove broadcastdelay,
    use fedora.pool.ntp.org (#189667)
  - don't install drift file
  - remove unsupported options from ntptrace manpage (#137717)
  - fix default paths in manpages for ntp-keygen and ntpdate


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2-3
changelog:
  - fix manycast support in ntpdate (#194329)
  - reply to manycast requests with null refid
  - enable mlockall (#195617)
  - correct threshold value in ntpdate manpage


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-6.el5
changelog:
  - fix broadcast client to accept broadcasts on 255.255.255.255 (#226958)
  - compile with crypto support on 64bit architectures (#239580)
  - add ncurses-devel to buildrequires (#239580)
  - exit with nonzero code if ntpd -q did not set clock (#240134)
  - fix return codes in init script (#240118)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-8.el5
changelog:
  - avoid use of uninitialized floating-point values in clock_select (#250838)
  - generate man pages from html source, include config man pages (#307271)
  - add note about paths and exit codes to ntpd man page (#242925, #246568)
  - add section about exit codes to ntpd man page (#319591)
  - always return 0 in scriptlets


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-9.el5
changelog:
  - fix selecting multicast interface (#444106)
  - disable kernel discipline when -x option is used (#431729)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-11.el5
changelog:
  - fix buffer overflow when parsing Autokey association message 
    (#500784, CVE-2009-1252)
  - fix buffer overflow in ntpq (#500784, CVE-2009-0159)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-13.el5
changelog:
  - don't crash with more than 512 local addresses (#661934)
  - add -I option (#528799)
  - fix -L option to not require argument (#460434)
  - move ntpd and ntpdate to /sbin and start earlier on boot (#470945, #689636)
  - increase memlock limit (#575874)
  - ignore tentative addresses (#489835)
  - print synchronization distance instead of dispersion in ntpstat (#679034)
  - fix typos in ntpq and ntp-keygen man pages (#664524, #664525)
  - clarify ntpd -q description (#591838)
  - don't verify ntp.conf (#481151)
  - replace Prereq tag


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-15.el5
changelog:
  - revert init script priority (#470945, #689636)
  - drop tentative patch (#489835)
  - move restorecon call to %posttrans


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-18.el5
changelog:
  - don't generate weak control key for resolver (CVE-2014-9293)
  - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
  - fix buffer overflows via specially-crafted packets (CVE-2014-9295)


author: Rick Stout <zipsonic[AT]gmail.com> - 1.4.0-4
changelog:
  - updated nx-X11, nxproxy, nxcomp, nxagent and nxdesktop
  - released to address X11 security concerns.


author: Rick Stout <zipsonic[AT]gmail.com> - 1.4.9.3-0
changelog:
  - reworked package for update to 1.5.0 devel snapshot 3 (1.4.9.3)
  - Commented out Xtranssock patch in NX.diff (doesn't seem to be necessary)


author: Rick Stout <zipsonic[AT]gmail.com> - 1.5.0-2
changelog:
  - updated nxagent to ver .90
  - added patches from SuSE to update some compiler warnings and buffer overflows


author: Rick Stout <zipsonic[AT]gmail.com> - 1.5.0-7.FC5
changelog:
  - added a section to %post that links /usr/X11R6/lib/X11 to /usr/share/X11
    which is needed for nxagent to function properly


author: Rick Stout <zipsonic[AT]gmail.com> - 1.5.0-9
changelog:
  - added Dist tag
  - fixed macro/variable inconsistencies
  - added requires: post and postun for policycoreutils


author: Rick Stout <zipsonic[AT]gmail.com> - 1.5.0-10
changelog:
  - added Source11 to filter find-provides from showing libraries that should not
    be provided to the system. BZ#194652


author: Rick Stout <zipsonic[AT]gmail.com> - 2.0.0-4
changelog:
  - upped release for rebuild request
  - removed link in post for /usr/X11R6/lib/X11 as it is now
    handled in freenx
  - updated to maintenance release 2
  - added nxssh component for future qtnx client


author: Johnny Hughes <johnny@centos.org> - 2.1.0-1.c4
changelog:
  - modified build requires and requires to work with CentOS-4
  - changed /usr//usr/lib64/libXp.so* /usr/X11R6/lib64/libXp.so*
    in the specfile due to different X locations.
  - added back changes to copy nxpasswd and nxviewer from X11R6 to
    /usr/bin


author: Johnny Hughes <johnny@centos.org> - 2.1.0-2.c4
changelog:
  - rolled in upstream updates to nxcomp-2.1.0-5.tar.gz and 
    nxscripts-2.1.0-4.tar.gz (First Maintenance Release of NX 2.1.0
    Server Packages).


author: Johnny Hughes <johnny@centos.org> - 2.1.0-3.c4
changelog:
  - rolled in upstream updates to nxagent-2.1.0-13, nxviewer-2.1.0-8,
    nxdesktop-2.1.0-8 (Second Maintenance Release of NX 2.1.0 Server Packages)


author: Johnny Hughes <johnny@centos.org> - 2.1.0-4.el4.centos4
changelog:
  - rolled in upstream updates to nxcomp-2.1.0-6, nxcompext-2.1.0-4,
    nxagent-2.1.0-17, and nxviewer-2.1.0-11. (Third Maintenance Release of
    NX 2.1.0 Server Packages)


author: Johnny Hughes <johnny@centos.org> - 2.1.0-5.el4.centos4
changelog:
  - rolled in upstream updates to nxproxy-2.1.0-3, nxcomp-2.1.0-7, 
    nxcompext-2.1.0-5, nx-X11-2.1.0-3, nxagent-2.1.0-18, nxviewer-2.1.0-12,
    nxdesktop-2.1.0-10, nxscripts-2.1.0-5, nxssh-2.1.0-2 ( Fourth Maintenance
    Release of NX 2.1.0 Server Packages)


author: Johnny Hughes <johnny@centos.org> - 2.1.0-5.el5.centos
changelog:
  - rolled in upstream updates to nxcomp-2.1.0-8, nxagent-2.1.0-20 
    (Fifth Maintenance Release of NX 2.1.0 Server Packages)
  - Modified code to detect CentOS-4 or CentOS-5 and to provide the proper
    requires and buildrequires for both.


author: Johnny Hughes <johnny@centos.org> - 3.0.0-3.el5.centos
changelog:
  - rolled in upstream updates to nxwin-3.0.0-10 and nxagent-3.0.0-77
    (First Maintenance Release of the NX 3.0.0 Server Manager Packages)
  - added --without-zlib-version-check to the configure statement for nxssh


author: Johnny Hughes <johnny@centos.org> - 3.0.0-4
changelog:
  - rolled in upstream updates to nxagent-3.0.0-88, nxcomp-3.0.0-48,
    nxssh-3.0.0-21.tar.gz, and nx-X11-3.0.0-37.tar.gz.
    (Fourth Maintenance Release of the NX 3.0.0)


author: Johnny Hughes <johnny@centos.org> - 3.1.0-5
changelog:
  - upgraded to version 3.1.0 code
  - included updates through (Second Maintenance Release of the NX 3.1.0 Node
    Packages)
  - modified nxfind-provides.sh and nxfind-provides-64.sh to work for 64bit and 32bit libs
  - added nxcl client library
  - added nxlaunch and qtnx cleints for centos-5 only (nxlaunch currently not stable so not built)


author: Johnny Hughes <johnny@centos.org> - 3.2.0-7
changelog:
  - included upstream upgrades through (First Maintenance Release of the NX
    3.2.0 Server and Node Packages) which updated the folowing sources
    nxagent-3.2.0-5.tar.gz, nxcomp-3.2.0-7.tar.gz, nxcompshad-3.2.0-3.tar.gz


author: Akemi Yagi <toracat@centos.org> - 3.4.0-4
changelog:
  - updated the following sources
    nxagent-3.4.0-5.tar.gz, nxauth-3.4.0-3.tar.gz, nxcomp-3.4.0-7.tar.gz
    nxcompshad-3.4.0-3.tar.gz, nxesd-3.4.0-2.tar.gz, nxssh-3.4.0-2.tar.gz
    nxwin-3.4.0-5.tar.gz, nx-X11-3.4.0-3.tar.gz


author: Akemi Yagi <toracat@centos.org> - 3.4.0-6
changelog:
  - added CentOS-6
  - added Requires xorg-x11-fonts-misc if CentOS-6
  - updated the following source
    nx-X11-3.4.0-4.tar.gz
    nxagent-3.4.0-11


author: Akemi Yagi <toracat@centos.org> - 3.5.0-1
changelog:
  - upgraded to the nx 3.5.0 code
    nxagent-3.5.0-7.tar.gz, nxauth-3.5.0-1.tar.gz, nxcomp-3.5.0-2.tar.gz
    nxcompext-3.5.0-1.tar.gz, nxcompshad-3.5.0-2.tar.gz, nxproxy-3.5.0-1.tar.gz
    nxscripts-3.5.0-1.tar.gz, nxssh-3.5.0-2.tar.gz, nxwin-3.5.0-2.tar.gz
    nx-X11-3.5.0-2.tar.gz


author: Nalin Dahyabhai <nalin@redhat.com> 0.20-1
changelog:
  - update to 0.20
  - break shared libraries and modules for PAM and python into a subpackage
    for better behavior on multilib boxes
  - if we're not building a sample subpackage, include the sample files in
    the right locations as %doc files


author: Nalin Dahyabhai <nalin@redhat.com> 0.21-3
changelog:
  - prefer BuildRequires: to BuildPrereq (#176452)
  - require /sbin/service at uninstall-time, because we use it (#176452)
  - be more specific about when we require /sbin/chkconfig (#176452)


author: Nalin Dahyabhai <nalin@redhat.com> 0.22-1
changelog:
  - fix some path mismatches in the sample configuration files
  - don't try to set a reconnect timeout until after we've connected


author: Nalin Dahyabhai <nalin@redhat.com> 0.23-1
changelog:
  - fix compilation against older versions of D-BUS if the
    GetConnectionSELinuxSecurityContext method turns out to be available


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-1
changelog:
  - update to 0.24, fixing some build errors against D-BUS 0.30-0.33
  - require xmlto, because the generated HTML differs depending on whether
    or not we know how to enforce ACLs which include SELinux context info
  - build with DocBook 4.3


author: Nalin Dahyabhai <nalin@redhat.com> 0.25-1
changelog:
  - update to 0.25:
    - add introspection for parents of objects specified in the configuration
    - oddjobd can reload its configuration now
    - add -u (umask) and -s (skeldir) flags to the mkhomedir helper


author: Nalin Dahyabhai <nalin@redhat.com> 0.26-1
changelog:
  - update to 0.26-1:
    - don't get confused when ACL entries for introspection show up in the
      configuration before we add the handlers for them
    - export $ODDJOB_CALLING_USER to helpers


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-1
changelog:
  - update to 0.27-1:
    - don't attempt to subscribe to all possible messages -- the message bus
      will already route to us messages addressed to us, and if we try for
      more than that we may run afoul of SELinux policy, generating spewage
  - add a build dependency on pkgconfig, for the sake of FC3
  - update docs and comments because D-BUS is now called D-Bus


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-8
changelog:
  - backport change to block SIGPIPE in oddjobd, so that if a helper exits
    early, we get a write error rather than catastrophe (#246681)
  - oddjob_mkhomedir: spew an error message if the umask can't be parsed into
    a number properly (#246681)
  - pam_oddjob_mkhomedir.8: note that the module doesn't take arguments


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-10
changelog:
  - backport changes to prevent the configuration files from conflicting on
    multilib systems (#476255)


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-11
changelog:
  - backport changes to not bother asking about SELinux contexts when we're
    not going to be using that information (#510457)


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-12
changelog:
  - backport patch to stop trying to close a stale connection to the bus,
    which used to generate a warning from libdbus, but which now causes an
    assertion failure (#628683)


author: Phil Knirsch <pknirsch@redhat.com> 2.1.3-4
changelog:
  - Fixed some smaller build problems.
  - Included and fixed new initscript for pkcs11 startup.
  - Fixed filelist.


author: Phil Knirsch <pknirsch@redhat.com> 2.1.3-8
changelog:
  - Included updated initscript from IBM (#112542).
  - Changed permission of /etc/init.d/pkcsslotd to be executable (#112542).


author: Phil Knirsch <pknirsch@redhat.com> 2.1.5-6.10
changelog:
  - Fixed quite a few warnings and actual errors (#143768)
  - Fixed the initscript for failed startups (#154495)


author: Phil Knirsch <pknirsch@redhat.com> - 2.2.4-5.el5
changelog:
  - Added the other archs according to #184631
  - Split out the devel parts of openCryptoki in a devel subpackage (#184631)


author: Phil Knirsch <pknirsch@redhat.com> - 2.2.4-12.el5
changelog:
  - Moved the .so lib to the devel package (#219242)
  - Added proper multilib requirements for devel package (#219242)


author: Phil Knirsch <pknirsch@redhat.com> 2.2.4-17.el5
changelog:
  - Added the CCA STDLL for s390(x) arch (#253059)
  - Fixed a file descriptor leak for spin locks (#371021)


author: Phil Knirsch <pknirsch@redhat.com> 2.2.4-22.el5
changelog:
  - Fixed memcmp problem for pkcsconf validation of PINs (#415931)
  - Fixed double free problem in key store (#435462)


author: Dan Horák <dhorak@redhat.com> 2.2.4-23.el5
changelog:
  - fixed CKR_TEMPLATE_INCOMPLETE exception on an unwrap of an AES key (#538879)
  - fixed MAC computing during offload of MAC-hashing to CPACF using PKCS11 (#539168)
  - Resolves: #538879, #539168


author: Paul Howarth <paul@city-fan.org> - 0.75-1.1
changelog:
  - Address rpmlint issues during package review (#192889)
  - Move docs to associated packages, don't bother with -docs subpackage
  - Make -devel package require main package
  - Fix Source: and URL: tags
  - Fix up Makefile to handle DESTDIR properly
  - Honoring %{optflags} breaks build!


author: Steven Dake <sdake@redhat.com> - 0.76-1.1
changelog:
  - Fix unowned dirs problem.
  - Correct make with optflags work properly.
  - Move plugins from /usr/lib/openais/lcrso to /usr/libexec/lcrso.
  - Remove static archives from RPM.
  - Name shared objects in devel package as 1.0.0 instead of 1.0.


author: Steven Dake <sdake@redhat.com> - 0.76-1.2
changelog:
  - Add user account for AIS applications and authentication.
  - Move /etc/ld.so.conf/openais-*.conf to devel package since it is
    only needed there.
  - Move ldconfig to devel package.
  - Execute condrestart on upgrade


author: Steven Dake <sdake@redhat.com> - 0.76-1.3
changelog:
  - Allocated uid 102 from setup package for user add operation.
  - Added || : to initscript stuff so initscript bugs dont cause RPM transaction
    failures as per Paul's suggestion.
  - Added /sbin/services to post requires as per Paul's suggestion.
  - Removed ldconfig from the requires post for the main package as per Paul's
    suggestion.
  - Changed post devel scriptlet action as per Paul's suggestion.


author: Steven Dake <sdake@redhat.com> - 0.76-1.5
changelog:
  - Changed BuildRoot tag to match convention specified in Fedora Wiki.
  - Removed /sbin/service dependency since it is pulled in from init packages.


author: Steven Dake <sdake@redhat.com> - 0.76-1.8
changelog:
  - Readded ExlcusiveArch since build system builds s390 and ia64 which are
    untested.
  - Add makefile override patch which fixes build with optflags on x86_64 arch.
  - Remove -DOPENAIS_LINUX from passed CFLAGS since it now works properly with
    makefile override patch.


author: Steven Dake <sdake@redhat.com> - 0.80-1.2
changelog:
  - Move libraries to openais package.
  - Add cpg hash collision patch.
  - Add makefile install clm patch.


author: Steven Dake <sdake@redhat.com> - 0.80.1-1.1
changelog:
  - Add upstream revision 1223 - Fix checkpoint write size of zero to
    return INVALID_PARAM error code.
  - Add upstream revision 1230 - Add missing include for assert.h.
  - Add upstream revision 1245 - Add cpgbench tool and better flow control system.
  - Move /sbin/ldconfig into regular package from devel package.


author: Steven Dake <sdake@redhat.com> - 0.80.1-5
changelog:
  - Add upstream revision 1256 - remove extra totem debug logging output.
  - Add upstream revision 1257 - fix subset operation to repair membership behavior.
  - Add upstream revision 1258 - accept commit token in proper circumstances.


author: Steven Dake <sdake@redhat.com> - 0.80.1-6
changelog:
  - Add upstream revision 1260 - Allocate the retransmission token in
    instance initialize instead of totemsrp_initialize.
  - Add upstream revision 1261 - cleanup the way the memb_index variable is
    handled in the commit token.
  - Add upstream revision 1262 - Set the ring sequence number according to the
    totem specifications.
  - Add upstream revision 1263 - Use the fullset variable instead of he local
    variable j to make easier code reading.
  - Add upstream revision 1264 - If the failed_list has zero entries, don't
    add it as an iovector in the join messages.
  - Add upstream revision 1265 - Only originate one regular token.


author: Steven Dake <sdake@redhat.com> - 0.80.1-8
changelog:
  - Add upstream revision 1268 - Align data in totem delivery on 4 byte
    boundaries for ia64.
  - Add upstream revision 1269 - Increase default stack size for IPC connections
    on ia64.


author: Steven Dake <sdake@redhat.com> - 0.80.1-9
changelog:
  - Add upstream revision 1270 - Resolve IPC segfault.
  - Add upstream revision 1271 - Fix errors in ia64 alignment.
  - Add upstream revision 1275 - pthread_mutex_destroy cleanup patch.
  - Add upstream revision 1276 - Remove debug from makefile committed in revision 1275.
  - Add upstream revision 1277 - Formatting changes.
  - Add upstream revision 1278 - Patch testckpt to use proper seciton id size.
  - Add upstream revision 1279 - Call abort in sync service when processing is interrupted.
  - Add upstream revision 1282 - New generation checkpoint state machine.
  - Add upstream revision 1283 - Fix memory leaks.


author: Steven Dake <sdake@redhat.com> - 0.80.1-12
changelog:
  - Add upstream revision 1286 - Fix checkpoint unlink operation under certain
    conditions.  This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-13
changelog:
  - Add upstream revision 1286 - Fix checkpoint unlink operation under certain
    conditions.  This is the rhel5 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-14
changelog:
  - Add upstream revision 1296 - Remove compile warnings.
  - Add upstream revision 1295 - The totem membership protocol was changed to
  - Add upstream revision 1294 - modify location of ringid file to
  - Add upstream revision 1293 - flush output of debug messages on exit or segv.
    /var/run/openais and chdir here so cores are saved there.
    match specifications.
  - This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-16
changelog:
  - Add upstream revision 1307 - Remove flow control compile warning.
  - Add upstream revision 1306 - Make clean now really makes clean.
  - Add upstream revision 1305 - Set scheduler SCHED_RR to max priority available
    in system.
  - Add upstream revision 1300 - Improve behavior of flow control of CPG service
    during configuration changes.
  - This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-18
changelog:
  - Add upstream revision 1315 - Fix compile error in libcpg.
  - Add upstream revision 1314 - Change rundir to /var/openais.
  - Add upstream revision 1313 - Flow control fixes for the CPG service.
  - Add upstream revision 1312 - Correct usage of ERR_LIBRARY to SA_AIS_ERR_LIBRARY.
  - Add upstream revision 1311 - handle case where POLLHUP and POLLERR are not uspported by OS.
  - Add upstream revision 1309 - set default downcheck value to 1000ms.
  - Add upstream revision 1308 - Remove invalid code and warnings detected by Intel compiler.
  - This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-21
changelog:
  - Resolves: rhbz#216492
  - Add upstream revision 1319 - Increase outbound buffer size to 5000 messages.
  - Add upstream revision 1316 - Improvements on segfault logging.
  - This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.2-0
changelog:
  - Resolves: rhbz#211357
  - New upstream version including all prevision revisions.
  - Fixes cpg ordering problem.
  - Fixes ia64 unaligned problem.
  - This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.3-0
changelog:
  - Resolves: rhbz#243119
  - Resolves: rhbz#221190
  - Resolves: rhbz#224190
  - Resolves: rhbz#233892
  - Resolves: rhbz#236549
  - New upstream version including all previous revisions.
  - This is the rhel5 version of 0.80.3-0.


author: Steven Dake <sdake@redhat.com> - 0.80.3-1
changelog:
  - Resolves: rhbz#243119
  - Resolves: rhbz#221190
  - Resolves: rhbz#224190
  - Resolves: rhbz#233892
  - Resolves: rhbz#236549
  - New upstream version including all previous revisions.
  - This is the fc6 version of 0.80.3-1.


author: Steven Dake <sdake@redhat.com> - 0.80.3-2
changelog:
  - Resolves: rhbz#209862
  - Add upstream revision 1406 - Filter commit token when it is retransmitted.
  - Resolves: rhbz#249506
  - Add upstream revision 1407 - Reset consensus array on entering operational mode.
  - Resolves: rhbz#249509
  - Add upstream revision 1408 - Store the ring id information properly when it changes.
  - Resolves: rhbz#247733
  - Add upstream revision 1409 - Add subtractor to availability of message entries for the totem message queue
  - This is the rhel5 version of 0.80.3-0 with some upstream patches.


author: Steven Dake <sdake@redhat.com> - 0.80.3-4
changelog:
  - Resolves: rhbz#251082
  - Add upstream revision 1423 - Fix synchronization defect resulting in segfault.
  - This is the fc6 build.


author: Steven Dake <sdake@redhat.com> - 0.80.3-5
changelog:
  - Resolves: rhbz#302341
  - Add upstream revision 1455 - Fix loss of node joins in commit state resulting in looping of membership protocol.
  - Add upstream revision 1453 - Fix assertion if component registration occurs during certain phases of instantation.
  - Add upstream revision 1450 - Fix reference counting in lcr code so that lcr_ifact_release works properly.
  - Add upstream revision 1449 - Allow missing services in synchronization to not cause a segfault.k
  - Add upstream revision 1446 - Remove inadvertant commit of changes to totemsrp which happened when security changes were patched in revision 1426.
  - Add upstream revision 1426 - Patch to log security warnings when invalid identifier is used in message header for a totem header.


author: Steven Dake <sdake@redhat.com> - 0.80.3-8
changelog:
  - Resolves: rhbz#249287
  - Add non-merged IPC changes for fixing operation with cluster mirror
  - Resolves: rhbz#403901
  - Add upstream revision 1498 - enhance openais_exit_error to report string instead of error code
  - Resolves: rhbz#309621
  - Add upstream revision 1497 - Follow LSB guidelines for initscript
  - Add upstream revision 1496 - Revert patch 1480 since it causes problems with cman
  - Add upstream revision 1493 - Backport of patch 1379 to remove this_ip and replace with accessor functoins for use by ipc system
  - Add upstream revision 1486 - Unlock mutex on error condition of no memory when creating handle
  - Add upstream revision 1480 - Endian fixes for the totempg code
  - Add upstream revision 1479 - Remove & when regular reference works properly.
  - Add upstream revision 1478 - Patch to set system_from properly in retransmitted messages
  - Add upstream revision 1473 - Fix pthread_equal for timer_delete operation
  - Add upstream revision 1471 - Endian convert cpg downlist messages properly
  - Add upstream revision 1469 - change initialDataSize paramter from saUint32gt to SaSizeT to match specifications


author: Steven Dake <sdake@redhat.com> - 0.80.3-11
changelog:
  - Resolves: rhbz#429920
  - Add upstream revision 1500 - IPC locks up if a POLLERR is returned in certain circumstances.
  - Resolves: rhbz#433839
  - Add upstream revision 1501 - A mcast is delivered before a join in some circumstances.


author: Steven Dake <sdake@redhat.com> - 0.80.3-13
changelog:
  - Resolves: rhbz#432531
  - Add upstream revision 1504 - Fixes checkpoint synchronization issue when a new node is started.
  - Add upstream revision 1503 - backport -f foreground option.
  - Add upstream revision 1502 - Revert revision 1477 which exhibits problems with cman.
  - Add revision 1477 - This was reverted in a previous version but cherrypicked.  Now the patch has been applied and reverted in the rpm build process to match upstream.


author: Steven Dake <sdake@redhat.com> - 0.80.3-14
changelog:
  - Resolves: rhbz#432531
  - Add upstream revision 1506 - Resolves incomplete checkpoing synchronization when totem queue is full.


author: Steven Dake <sdake@redhat.com> - 0.80.3-15
changelog:
  - Resolves: rhbz#432531
  - Add upstream revision 1514 - Remove extra log_printf.
  - Add upstream revision 1513 - Remove comparison with zero and replace with comparison with NULL in handle database code.
  - Add upstream revision 1512 - Remove early commit of synchronization data when a synchronization in progress is followed by a node leaving or joining the cluster.
  - Add upstream revision 1511 - Remove double pthread_mutex_destroy from evt service.
  - Add upstream revision 1510 - Remove double pthread_mutex_destroy from evs service.
  - Add upstream revision 1509 - Remove double pthread_mutex_destroy from cpg service.
  - Add upstream revision 1508 - Remove double pthread_mutex_destroy from clm service.
  - Add upstream revision 1507 - Remove double pthread_mutex_destroy from checkpoint service.


author: Steven Dake <sdake@redhat.com> 0.80.3-16
changelog:
  - Resolves: rhbz#400491
  - Add upstream revision 1521 - Compile on latest glibc.
  - Add upstream revision 1524 - Fix syscall usage in keygen application.
  - Add upstream revision 1546 - Fix build for authentication on bsd platforms.
  - Add upstream revision 1548 - Fix synchronization of checkpoint global id.


author: Steven dake <sdake@redhat.com> 0.80.3-8
changelog:
  - Resolves: rhbz#444909
  - Add upstream revision 1647 - Change log level output of a logging message.
  - Add upstream revision 1646 - Add test case.
  - Add upstream revision 1645 - Remove ipc deadlock in overload conditions.
  - Add upstream revision 1644 - Make lib_exit_fn work properly.
  - Add upstream revision 1643 - Remove checkpoint expiration assertions.
  - Add upstream revision 1642 - Remove checkpoint close assertion.


author: Steven Dake <sdake@redhat.com> 0.80.3-19
changelog:
  - Resolves: rhbz#442102
  - Add upstream revision 1653 - Schedule ipc dispatch thread at same priority as aisexec.
  - Add upstream revision 1652 - Remove more signal flooding problems in ipc dispatch thread.
  - Add upstream revision 1651 - Remove signal flooding of the ipc dispatch thread.


author: Steven dake <sdake@redhat.com> 0.80.3-20
changelog:
  - Resolves: rhbz#441413
  - Add upstream revision 1661 - Fix a message lost during delivery which resulted in checkpoing service segfaulting.
  - Add upstream revision 1660 - Fix commit token received_flg being incorrect in some rare circumstances.
  - Add upstream revision 1659 - Fix rare problem where checkpoint synchronizatoin database could be thrown away.
  - Add upstream revision 1655 - Allow 31 bit nodeid's which default to off.


author: Steven Dake <sdake@redhat.com> 0.80.3-22
changelog:
  - Resolves: rhbz#471896
  - Add upstream revision 1665 - Compare local address with bindnetaddr properly.
  - Add upstream revision 1664 - Use node's full ipv4 address when generating nodeids.
  - Add upstream revision 1662 - Fix segfault when user with inappropriate access permissions accessed aisexec.


author: Steven Dake <sdake@redhat.com> 0.80.5-1
changelog:
  - Resolves: rhbz#474277
  - Resolves: rhbz#477243
  - Resolves: rhbz#480684
  - Resolves: rhbz#261381
  - Add upstream revision 1698 - Complete IPC rewrite.
  - Add upstream revision 1697 - BSD compatability patch.
  - Add upstream revision 1694 - BSD compatability patch.
  - Rebase to 0.80.5 to fix above Red Hat bugzilla IDs.


author: Steven Dake <sdake@redhat.com> 0.80.5-2
changelog:
  - Resolves: rhbz#474277
  - Resolves: rhbz#477243
  - Resolves: rhbz#480684
  - Resolves: rhbz#261381
  - openais-0.80.5.tar.gz was missing three commits that I expected were in the tarball.
  - Add upstream revision 1692 - Add to message size in totempg operation.
  - Add upstream revision 1691 - Execute proper list_init operation.
  - Add upstream revision 1690 - Execute proper list_del operation.


author: Steven Dake <sdake@redhat.com> 0.80.5-3
changelog:
  - Resolves: rhbz#474277
  - Resolves: rhbz#477243
  - Resolves: rhbz#480684
  - Resolves: rhbz#261381
  - Add upstream revision 1737-1738 cherrypicked & backported - Fix assertion in totempg usage.
  - Add upstream revision 1735 cherrypicked - Allow lib_exit_fn to be called early so that lib_init_fn can use refcounting ipc functions.
  - Add upstream revision 1734 cherrypicked - Add IPC refcounting to CPG service.


author: Steven Dake <sdake@redhat.com> 0.80.5-4
changelog:
  - Resolves: rhbz#487214
  - Resolves: rhbz#488095
  - Resolves: rhbz#489451
  - Add upstream revision 1743 - autogenerated node ids cause CPG not to issue synchronization of the process group information.
  - Add upstream revision 1742 - 5.2->5.3 rolling upgrades.
  - Add upstream revision 1740 - removes segfault in cpg service when ipc connection disconnects and no groups are joined to the cpg group (ipc regression).
  - Add upstream revision 1739 - removes assert in multicast operations under overload.


author: Steven Dake <sdake@redhat.com> 0.80.5-5
changelog:
  - Resolves: rhbz#490098
  - Resolves: rhbz#490099
  - Add upstream revision 1753 - Serialize ipc access.
  - Add upstream revision 1752 - Remove break from cpgbench.
  - Add upstream revision 1750 - Remove pass by value in the ckpt ervice.
  - Add upstream revision 1749 - Remoe extra debugging output.
  - Add upstream revision 1747 - Fix reference counting problem in ckpt service.


author: Steven Dake <sdake@redhat.com> 0.80.6-1
changelog:
  - Resolves: rhbz#494347
  - Resolves: rhbz#494035
  - Resolves: rhbz#496985
  - Resolves: rhbz#497419
  - Resolves: rhbz#497420
  - Resolves: rhbz#499767
  - Fixes problem with cpg_init not returning security error code.
  - Fixes problem with not starting redundant ring
  - Fixes regression with cluster mirror and in general DOA openais rpm.
  - Fix problem where first message is thrown away in new configuration.
  - Fixes problem where ipc connect/disconnect in cpg service segfaults aisexec.
  - Fixes problem where openais segfaults on ppc64 platforms.


author: Steven Dake <sdake@redhat.com> 0.80.6-2
changelog:
  - Resolves: rhbz#501561
  - Resolves: rhbz#501337
  - Resolves: rhbz#492808
  - Resolves: rhbz#497480
  - Add upstream revision 1928 - Fix race condition in cpg join/leave operations.
  - Add upstream revision 1926 - Adds feature to allow uidgid files to be added
    to /etc/ais directory to allow external users to specify uid and gids to
    access the system.
  - Add upstream revision 1925 - Adds feature to allow rolling crypto upgrades
    from openais-0.80.6-2 to corosync.
  - Add upstream revision 1924 - Adds feature to use broadcast instead of
    multicast.  To enable this feature, the broadcast: yes option should be
    specified.


author: Steven Dake <sdake@redhat.com> 0.80.6-7
changelog:
  - Resolves: rhbz#506778
  - Add upstream revision 1959 - fix leaking of shared memory objects during
    shutdown of cman.


author: Steven Dake <sdake@redhat.com> 0.80.6-8
changelog:
  - Resolves: rhbz#506119
  - Add upstream revision 1998 - Ensure that leaving processors in totempg have
    their assembly state reset.


author: Steven Dake <sdake@redhat.com> 0.80.6-10
changelog:
  - Resolves: rhbz#520012
  - Add upstream revision 2053 - Ensure 9000 MTU doesn't assert totemsrp.
  - Actually apply patch during build.


author: Steven Dake <sdake@redhat.com> 0.80.6-11
changelog:
  - Resolves: rhbz#509180
  - Resolves: rhbz#526069
  - Resolves: rhbz#474400
  - Resolves: rhbz#520164
  Add upstream revision 2039 - Remove implicit declartion in code.
  Add upstream revision 2040 - Don't segfault with ais group doesn't exist in system. 
  Add upstream revision 2043 - Properly shutdown service engines on ctrl-c.
  Add upstream revision 2044 - Resolve cpg race condition during synchronization.
  Add upstream revision 2054 - Resolve random error code returned by saCkptCheckpointOpen.


author: Steven Dake <sdake@redhat.com> 0.80.6-12
changelog:
  - Resolves: rhbz#529054
  - Resolves: rhbz#525280
  - Resolves: rhbz#519159
  - Resolves: rhbz#540267
  - Resolves: rhbz#540490
  - Resolves: rhbz#544680
  - Resolves: rhbz#544682
  - Resolves: rhbz#545151
  - Resolves: rhbz#547828
  - Resolves: rhbz#525280
  - Resolves: rhbz#515159
  Add upstream revision 2079 - remove segfault from calling saClmTrackStart more then one time.
  Add upstream revision 2081 - cpg can use a variable after it is freed.
  Add upstream revision 2081 - netmask was being anded with broadcast address, not interface address resulting in invalid binding if netmask was not 255.255.255.x.
  Add upstream revision 2089 - originating many messages in recovery results in lockup.
  Add upstream revision 2090 - originating many messages in recovery results in lockup.
  Add upstream revision 2091 - recovery protocol implementation doesn't reset variable properly.
  Add upstream revision 2092 - String buffer overflow can occur if many messsages are originated during recovery.
  Add upstream revision 2094 - Remove invalid assertion in totemsrp.

  Add upstream revision 2095 - Remove stack overflow within aisexec.
  Add upstream revision 2096 - Prevent ckpt iterations from occuring during sync.


author: Steven Dake <sdake@redhat.com> 0.80.6-14
changelog:
  - Resolves: rhbz#515590
  - Add upstream revision 2097 - Ensure IPC memory is 1mb instead of 477k.
  - actually apply patch in spec file.


author: Steven Dake <sdake@redhat.com> 0.80.6-15
changelog:
  - Resolves: rhbz#560313
  - Add upstream revision 2117 - fix problem where ipc doesn't differentiate
    between full buffer and empty buffer properly resulting in cpg message
    corruption


author: Steven Dake <sdake@redhat.com> 0.80.6-16
changelog:
  - Resolves: rhbz#566467
  - Add upstream revision 2121 - Fix lockup in atexit handler registered by
    print.c that occurs less then 1% of the time.  This is resolved by calling
    a special version of log_flush before calling exit, and not relying on the
    atexit handler to call pthread_cond_wait.


author: Steven Dake <sdake@redhat.com> 0.80.6-17
changelog:
  - Resolves: rhbz#533383
  - Add upstream revision 2122 - Fix retransmission problem that results in
    failure to receive condition.


author: Steven Dake <sdake@redhat.com> 0.80.6-18
changelog:
  - Resolves: rhbz#586519
  - Resolves: rhbz#588500
  - Resolves: rhbz#588494
  - Resolves: rhbz#588489
  - Add upstream revision 2130 - Resolve problem where ring id is not saved
    and restored when recovery is interrupted.
  - Add upstream revision 2129 - Resolve problem where highly lossy networks
    will sigabort (assert) if 512 or more entries are originated in recovery.
  - Add upstream revision 2128 - Use proper typing for retransmit token storage
    area.
  - Add upstream revision 2127 - Fix stack corruption that happens because of
    invalid length in memmove operation on highly lossy networks.


author: Steven Dake <sdake@redhat.com> 0.80.6-19
changelog:
  - Resolves: rhbz#598689
  - Resolves: rhbz#594480
  - Add upstream revision 2145 - Resolve problems with failed to receive logic
  - Add upstream revision 2144 - don't reset last_aru when token is retransmitted


author: Steven Dake <sdake@redhat.com> 0.80.6-20
changelog:
  - Resolves: rhbz#579081
  - Resolves: rhbz#596359
  - Add upstream revision 2143 - Avoid problem where library users block forever
    when server fails.
  - Add upstream revision 2146 - Fix problem where dispatch returning -1 in
    library functions results in segfaults.


author: Steven Dake <sdake@redhat.com> 0.80.6-21
changelog:
  - Resolves: rhbz#599654
  - Add upstream revision 2147 - Fix problem where CPG_REASON_LEAVE is sent instead of CPG_REASON_PROCDOWN.


author: Steven Dake <sdake@redhat.com> 0.80.6-22
changelog:
  - Resolves: rhbz#611129
  - Resolves: rhbz#606028
  - Add upstream revision 2148 - Fix membership algorithm failure which can result
    in singleton rings forming in rare circumstances.
  - Add upstream revision 2149 - support compatibility with corosync.


author: Steven Dake <sdake@redhat.com> 0.80.6-23
changelog:
  - Resolves: rhbz#614222
  - Add upstream revision 2150 - don't reset token timer on each received
    retransmitted token


author: Steven Dake <sdake@redhat.com> 0.80.6-25
changelog:
  - Resolves: rhbz#619570
  - Add upstream revision 2151 - resolve problem where out of order messages
    can result in token loss in very rare circumstances.


author: Angus Salkeld <asalkeld@redhat.com> 0.80.6-27
changelog:
  - Resolves: rhbz#619536
  - Add upstream revision 2153 - make openais more resilient to
    delayed multicast packets.


author: Steven Dake <sdake@redhat.com> 0.80.6-28
changelog:
  - Resolves: rhbz#568650
  - Resolves: rhbz#625947
  - Add upstream revision 2160 - first part of remove stale pid members from confchg.
  - Add upstream revision 2161 - second part of remove stale pid members from confchg.
  - Add upstream revision 2159 - prevent non-null terminated strings in checkpoint names or section from triggering stack protector


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-29
changelog:
  - Resolves: rhbz#561546
  - Resolves: rhbz#611434
  - Resolves: rhbz#623176
  - Resolves: rhbz#645299
  - Add upstream revision 2162 - speed up the case where a lot of nodes leave at the same time.
  - Add upstream revision 2165 - fix abort when token is lost in RECOVERY state.
  - Add upstream revision 2166 - resolve abort during simulatenous stopping of atleast 4 nodes.
  - Add upstream revision 2167 - totemsrp: Remove recv_flush code.
  - Add upstream revision 2168 - totemsrp: Only restore old ring id information one time.
  - Add upstream revision 2169 - totemsrp: free messages originated in recovery rather then rely on messages_free.
  - Add upstream revision 2170 - return error if there is no space for semaphore.
  - Add upstream revision 2171 - IPC: handle maximum use of file descriptors gracefully.


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-30
changelog:
  - Resolves: rhbz#675206
  - Add upstream revision 2172 - don't assert when ring id file is less then 8 bytes.


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-31
changelog:
  - Resolves: rhbz#703162
  - Resolves: rhbz#718773
  - Add upstream revision 2173 - Add missing man pages for binaries
  - Add upstream revision 2177 - Revert "totemsrp: Remove recv_flush code"


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-32
changelog:
  - Resolves: rhbz#708335
  - Resolves: rhbz#726142
  - Resolves: rhbz#729081
  - Resolves: rhbz#734865
  - Add upstream revision 2174 - Fix coredump when rolling upgrade to Corosync 1.3
  - Add upstream revision 2178 - Fix problem where openais will segfault if there are gaps in recovery queue
  - Add upstream revision 2179 - whitetank ipc: handle EINTR in msg_send
  - Add upstream revision 2180 - whitetank ipc: Don't deadlock in ipc_disconnect
  - Add upstream revision 2181 - Ignore memb_join messages during flush operations


author: Steven Dake <sdake@redhat.com> 0.80.6-33
changelog:
  - Resolves: rhbz#738468
  - Add upstream revision 2182 - replace gettimeofday with monotonic clock_gettime


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-34
changelog:
  - Resolves: rhbz#729081
  - Resolves: rhbz#737100

  - Add upstream revision 2183 - Deliver all messages from my_high_seq_recieved to the last gap
  - Add upstream revision 2184 - evt: Put correct handle in lib_evt_event_subscribe


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-36
changelog:
  - Resolves: rhbz#752952

  - Add upstream revision 2186 - Call freeaddrinfo in totemip to remove memleak


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-37
changelog:
  - Resolves: rhbz#671575
  - Resolves: rhbz#794837
  - Resolves: rhbz#806901

  - Add upstream revision 2187 - Handle syslog stack overflow
  - Add upstream revision 2188 - totemconfig: Change default FAIL_TO_RECV_CONST
  - Add upstream revision 2189 - Don't check range value in update_aru


author: Phil Knirsch <pknirsch@redhat.com> 1.9.1-1
changelog:
  - Added proper BuildRequires
  - Drop ia64 for first build, something fishy with the compiler and warning.


author: Phil Knirsch <pknirsch@redhat.com> 1.9.2-2
changelog:
  - Fixed overflow in plugins/sysfs/sysfs2hpi.c
  - Fixed rebuild problem with latest net-snmp
  - Removed is_simulator patch, not needed anymore


author: Phil Knirsch <pknirsch@redhat.com> 2.0.3-1
changelog:
  - Moved the pkgconfig files to the devel package (#152507)
  - Update to openhpi-2.0.3
  - Had to manually disable ipmi support for now until openhpi builds correctly
    against it again
  - Dropped net-snmp-config patch, not needed anymore


author: Phil Knirsch <pknirsch@redhat.com> 2.0.3-4
changelog:
  - Added the openhpi config file
  - Added missing /var/lib/openhpi dir with proper rights
  - Added a few missing BuildPreReqs


author: Phil Knirsch <pknirsch@redhat.com> - 2.4.1-5
changelog:
  - Had to disable sysfs support due to new libsysfs and incompatible API.
  - Added missing ncurses-devel buildrequires


author: Dan Horak <dhorak@redhat.com> - 2.14.0-1
changelog:
  - update to 2.14.0 (#474176)
  - run the included test suite during build process
  - add missing initscript scriptlets
  - Resolves: #474176


author: Dan Horak <dhorak@redhat.com> - 2.14.0-4
changelog:
  - add Requires for scriptlets
  - update the subagent's initscript to RHEL/Fedora standards
  - Related: #474176


author: Doug Ledford <dledford@redhat.com> 1.0-3
changelog:
  - Gut and rewrite large portions of spec file to make FHS compliant
  - Use default rpmmacros to control file locations
  - Use spec file to control software build, not an external script
  - Make the spec file build what you want by default, not when passed options
  - Make spec file multilib compliant
  - Don't build kernel modules here, the kernel has what it needs
  - Rename packages slightly (no more kernel-ib, this is replaced by openib,
    make a few of the other packages have openib- prepended before their
    name in order to make the connection more noticeable)
  - Update to work with libsysfs >= 2.0.0
  - Many more changes that I forgot


author: Doug Ledford <dledford@redhat.com> 1.0-6
changelog:
  - Skip 1.0-5 to make RHEL5 and FC6 trees match more closely
  - Update udev rules file for later udev version
  - Fix the location of the default osm.log file
  - Remove two modules from the openibd startup script that aren't shipped
    with the RHEL5 kernel


author: Doug Ledford <dledford@redhat.com> 1.0-7
changelog:
  - Use the action function in the openibd init script
  - Properly load hardware modules if not loaded already on startup
  - Make the output of the status command in the openibd init script more
    useful
  - Correct load/unload order of modules in openibd init script
  - Several other cleanups in the openibd init script


author: Doug Ledford <dledford@redhat.com> 1.0-8
changelog:
  - Rename dat.conf to dat32.conf and dat64.conf so that multilib works properly
  - Patch dat libs to look for the right conf file depending on arch of lib


author: Doug Ledford <dledford@redhat.com> 1.0-10
changelog:
  - Add a logrotate file for /var/log/osm.log to opensm
  - Fix a %post/%postun script problem with dapl


author: Doug Ledford <dledford@redhat.com> 1.1-0.pre1.2
changelog:
  - Bump version numbers on all the packages to allow for updates
    from previous installations
  - Remove arpingib, it's not needed
  - Add ipoibha init script
  - Rename ipoibha.pl ipoibha for ease of use in init script
  - Drop hpage patch set from ./configure invocation


author: Doug Ledford <dledford@redhat.com> 1.1-0.pre1.3
changelog:
  - The bug fix to make the udev rules file correct for udev 095 got lost,
    readd it.
  - Updates from the old OFED 1.0 code didn't grab all the RPMs because I
    forgot to update the libmthca{,-devel} versions so that the reset
    release number wouldn't cause it to match as older instead of newer.


author: Doug Ledford <dledford@redhat.com> 1.1-2
changelog:
  - Remove a dead patch from the src rpm and rebuild
  - Move the ipoibha tools to /usr/sbin instead of /sbin.  Since they
    require perl to run, and perl resides in /usr, it's safe for them
    to be there instead of /sbin


author: Doug Ledford <dledford@redhat.com> 1.1-3
changelog:
  - Make openib, opensm, and ipoibtools Require(post): chkconfig (182845,182846)
  - Make ipoibha script have an interpreter tag
  - Fix the ipoibha script so it uses arping instead of arpingib and
    passes a functional set of arguments
  - Make ipoibha script require an IP broadcast address on the interface
    we are serving in ha mode
  - Make rdma_ping print rdma_ping instead of rping in it's usage output
  - Make rdma_ping only print the usage info once (213171)
  - Update openibd init script to work whether ipath driver is in one module
    or two (212401)


author: Doug Ledford <dledford@redhat.com> 1.1-4
changelog:
  - Change all the scriptlets to be multiline so that they don't cause problems
    on ppc arch
  - Related: #213848, #222227


author: Doug Ledford <dledford@redhat.com> 1.1-5
changelog:
  - Fix an unterminated if statement in the ipoibha init script
  - Disable the ipoibtools package since arping is not yet modified to
    support ipoib interfaces and so the package is guaranteed not to work
  - Resolves: #227396


author: Doug Ledford <dledford@redhat.com> 1.2-1
changelog:
  - Update to final OFED 1.2 release
  - Fix init scripts to be standards compliant
  - Related: bz229298, bz182202, bz225581, bz243126


author: Doug Ledford <dledford@redhat.com> - 1.2-5
changelog:
  - Further tweaking of init scripts to make them LSB compliant
  - Bump number to keep this package up to date with the rhel5 openib package


author: Doug Ledford <dledford@redhat.com> - 1.3-1
changelog:
  - Gut the spec, gut the contents, leave only the base package to hold the
    initscripts and configs.  Everything else has been moved into individual
    packages.
  - Related: bz428197


author: Doug Ledford <dledford@redhat.com> - 1.3-2
changelog:
  - Update the openibd init script to work with all hardware
  - Add fixup-mtrr.awk script to solve problems with ipath performance when
    memory type range registers don't allow creation of write-combining
    regions due to lazy BIOS programmers
  - Resolves: bz230035, bz437326, bz438776, bz439080, bz439082


author: Doug Ledford <dledford@redhat.com> - 1.3-3
changelog:
  - Make the fixup-mtrr.awk script return a value that can be used in the
    init script to determine if we should reload the ib_ipath module


author: Doug Ledford <dledford@redhat.com> - 1.3.2-0.el5.20080728.0355.0
changelog:
  - Make the init script not start the OFED stack by default
  - Add the ifup-ib file so we can support connected mode on ipoib
  - Remove various sleeps in the start/stop process that are no longer necessary
    now that the kernel properly tears down its resources
  - Resolves: bz451452


author: Doug Ledford <dledford@redhat.com> - 1.3.2-0.el5.20080728.0355.3
changelog:
  - Update the openibd init script to match the one from Fedora (much cleaner
    and easier to verify it is correct to all the standards)


author: Doug Ledford <dledford@redhat.com> - 1.3.2-0.20080728.0355.el5.2
changelog:
  - Fix the openibd init script issue caused by using udevtrigger/udevsettle from
    the Fedora init script (the RHEL udev isn't new enough to safely use this
    method)
  - Resolves: bz465148


author: Jay Fenlason <fenlason@redhat.com> 1.4.1-6.el5
changelog:
  - Patch ifup-ib to close
    Resolves: bz596823 syntax error in /etc/sysconfig/network-scripts/ifup-ib


author: Doug Ledford <dledford@redhat.com> - 1.5.4.1-1.el5
changelog:
  - Update ifup-ib from rhel6 rdma package
  - Add ifdown-ib from rhel6 rdma package
  - Update openibd init script from rdma init script from rhel6 package
  - Related: bz771441
  - Resolves: bz846162, bz846574, bz846200


author: Doug Ledford <dledford@redhat.com> - 1.5.4.1-4.el5
changelog:
  - Include minor fix to ifup-ib to prevent errors when the ib interface
    is a slave
  - Resolves: bz575608


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Conflict with stylesheets (new-trials location changes).
  - /usr/lib/sgml -> /usr/share/sgml/%{name}-%{version}.
  - Remove %post and %postun.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - apply patch from Fritz Elfert <felfert@to.com>
  	- removed explicit stripping
  	- Added autoconf macro for correctly recognizing if size_t
  	  is unsigned int


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't conflict with stylesheets; require sgml-common >= 0.5 instead.
  - Revert autoconf change, as it's still broken.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - Apply original autoconf patch to s390 s390x only. This patch can
    be deleted once s390* uses a current compiler.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Avoid creating bogus TeX output for section headings containing
    special characters (#bug 31525).


author: Tim Waugh <twaugh@redhat.com> 1.3-21
changelog:
  - Enable HTTP support.  Now a DocBook XML document can be processed by
    either xsltproc or openjade.


author: Tim Waugh <twaugh@redhat.com> 1.3.1-1
changelog:
  - 1.3.1.
  - Patches no longer needed: decl, strdup, foo, size_t, 31525, indev,
    ligature, twosidestartonright.
  - Updated lt patch.


author: Terje Bless <link@pobox.com> 1.3.2-17
changelog:
  - Split opensp out into its own package.
  - BuildRequire OpenSP-devel, Require OpenSP.
  - Drop openjade-1.3.1-manpage.patch (it patches opensp, not openjade, and is
    obsolete with external opensp).


author: Ville Skyttä <ville.skytta at iki.fi> - 1.3.2-18
changelog:
  - Really BuildRequire opensp-devel.
  - Clean up unneeded build dependencies and configure options.
  - Drop dependency on docbook-dtds.
  - Fix %post(un) syntax and catalog installation.


author: Tim Waugh <twaugh@redhat.com> 1.3.2-20
changelog:
  - Use --enable-splibdir to prevent ambiguity.
  - Move 'install-catalog --remove' to %preun section (bug #60409).


author: Than Ngo <than@redhat.de>
changelog:
  - fix imake to built with gcc-2.96 (thanks Jakup)
  - put bitmaps in /usr/X11R6/include/X11/bitmaps
  - put bindings in /usr/X11R6/lib/Xm/bindings
  - add define -D_GNU_SOURCE to build Motif
  - gzip man pages
  - cleanup specfile


author: Than Ngo <than@redhat.com>
changelog:
  - add 3 official motif patches 
  - add rm -rf $RPM_BUILD_ROOT in install section
  - remove some old patches which are now in official patches


author: Thomas Woerner <twoerner@redhat.com> 2.2.2-13
changelog:
  - fix for Xmu/EditRes conflict (bug #80777)
  - fix for wml and utf-8 (bug #80271)
  - fix for Ext18List (bug #74502)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-3
changelog:
  - fixed popup menus fail on Tarantella/VNC (#123027)
  - fixed character not supported problem (#124960)
  - fixed data out of bounds bug (#124961)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-5
changelog:
  - libXp now moved to xorg-x11-deprecated-libs, therefore no compatibility 
    with XFree86 packages anymore.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-6
changelog:
  - fixed CAN-2004-0687 (integer overflows) and CAN-2004-0688 (stack overflows)
    in embedded Xpm library


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-9
changelog:
  - Upstream Fix: Multiscreen mode
  - Upstream Fix: Crash when restarting by a session manager (motifzone#1193)
  - Upstream Fix: Crash when duplicating a window menu containing f.circle_up
    (motifzone#1202)
  - fixed divide by zero error in ComputeVizCount() (#144420)
  - Xpmcreate: define LONG64 on 64 bit architectures (#143689)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-11
changelog:
  - fixed mrm initialization error in MrmOpenHierarchyPerDisplay (#167094)
    Thanks to Arjan van de Ven for the patch.


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1
changelog:
  - new 2.3.0 (beta1)
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - enabled Xft, jpeg and png support
  - patch for missing xft-config
  - dropped duplicate include path in devel package


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.9
changelog:
  - new CVS version 2006-02-02
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.5
changelog:
  - fixed SEGV error moving mouse over window related to XmToolTipGetLabel
    (MotifZone bug fix #1388)
    Resolves: rhbz#277381


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-0
changelog:
  - rebase to 2.3.1 (CVS dist release)
    Resolves: rhbz#455736
  - fixes OpenMotif XmList problem
    Resolves: rhbz#405801
  - fixes List.c/ReplaceItem() segfaults when item selected
    Resolves: rhbz#431460
  - fixes [motifzone 1400 ] openmotif/ BadFont on multiple display application
    Resolves: rhbz#438910
  - fixes applications dump core in non-UTF8 environment
    Resolves: rhbz#453722
  - fixes lots of additional bugs: see release notes


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2
changelog:
  - more fixes for unreliable pasting into XmTextField (MotifZone bug #1321)
    Resolves: rhbz#405941
  - the fix for MotifZone bug #1400 is not working for remote displays


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-3
changelog:
  - fixed BadDrawable error (rhbz#557453)
  - fixed MultiList not displayed properly (mzbz#1453) (rhbz#568730)
  - fixed invisible insensitive labels, buttons, icons and list entries
    (mzbz#1381) (rhbz#568730)
  - fixed XmNaccelerator do not work with CapsLock/ScrollLock/NumLock
    modifiers (mzbz#345) (rhbz#492529)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-6
changelog:
  - fixed Label size computed wrong within a Form (rhbz#583977)
  - fixed LabelGadget draws background over border of its parent (rhbz#584287)
    and LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1517 and #1521)
  - fixed memory leaks from OpenMotif 2.3.3 (rhbz#644824)
    (MotifZone bug #1388 refixed and #1502)
  - fixed invisible XFT text for insensitive labels (rhbz#684210)
    (missing parts of MotifZone bug #1381)
  - fixed im_widget double-free issue (rhbz#695650)
    (MotifZone bug #1534)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-7
changelog:
  - fixed strings in LabelGadget are not displayed (rhbz#867792)
  - fixed Performance issue: XmListSetPos() is very very slow (rhbz#864409)
    (MotifZone bug #1536)
  - fixed frame size too large (rhbz#880914) (related to MotifZone bug #1299)
  - fixed handling of of keys in numpad section if numlock is disabled
    using the upstream fix (rhbz#818655) (MotifZone bug #1300)
  - added NumLockMask to esm_mask Modifiers to fix keypad key lookup after 
    enabling or disabling NumLock (1300_additional)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-16
changelog:
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Orion Poplawski <orion@cora.nwra.com> - 1.0.1-2
changelog:
  - Use configure options to install includes and libraries
  - Add ld.so.conf.d file to find libraries
  - Add -fPIC for x86_64


author: Doug Ledford <dledford@redhat.com> - 1.1-2
changelog:
  - Various lint cleanups
  - Switch to using the standard alternatives mechanism instead of a home
    grown one


author: Doug Ledford <dledford@redhat.com> - 1.1-3
changelog:
  - Don't ghost the mpi.conf file as that means it will get removed when
    you remove 1 out of a number of alternatives based packages
  - Put the .mod file in -devel


author: Doug Ledford <dledford@redhat.com> - 1.1-4
changelog:
  - Make sure the post/preun scripts only add/remove alternatives on initial
    install and final removal, otherwise don't touch.


author: Doug Ledford <dledford@redhat.com> - 1.1-6
changelog:
  - Bump rev to match fc6 rev
  - Fixup some issue with alternatives support
  - Split the 32bit and 64bit libs ld.so.conf.d files into two files so
    multilib or single lib installs both work properly
  - Put libs into their own package
  - Add symlinks to /usr/share/openmpi/bin64 so that opal_wrapper-%{mode}
    can be called even if it isn't the currently selected default method in
    the alternatives setup (opal_wrapper needs to be called by mpicc, mpic++,
    etc. in order to determine compile mode from argv[0]).


author: Doug Ledford <dledford@redhat.com> - 1.1.1-7
changelog:
  - Bump version to be at least as high as the RHEL4U5 openmpi
  - Integrate fixes made in RHEL4 openmpi into RHEL5 (fix a multilib conflict
    for the openmpi.module file by moving from _datadir to _libdir, make sure
    all sed replacements have the g flag so they replace all instances of
    the marker per line, not just the first, and add a %defattr tag to the
    files section of the -libs package to avoid install errors about
    brewbuilder not being a user or group)
  - Resolves: bz229298


author: Doug Ledford <dledford@redhat.com> - 1.2.3-1
changelog:
  - Update to latest upstream version
  - Compile against updated openib libraries
  - Add udapl as a transport mechanism
  - Fix file ownership on -libs package
  - Take a swing at solving the multi-install compatibility issues
  - Resolves: bz229298, bz245818


author: Doug Ledford <dledford@redhat.com> - 1.2.5-3
changelog:
  - Openmpi had the same bug as lam in regards to alternatives link management.
    Fix the bug by protecting the uninstall scriptlets from running unless we
    are doing an actual erase of the package.


author: Doug Ledford <dledford@redhat.com> - 1.2.5-4
changelog:
  - Update to use mpi-selector for mpi package runtime priority selection
  - Use mpi-selector change to fix bz433841 for real this time
  - Related: bz428199


author: Doug Ledford <dledford@redhat.com> - 1.2.7-1
changelog:
  - Update to latest upstream version
  - Make the mandir be {mpidir}/man so that we don't need to futz with the
    manpath at all, man will automatically find our man pages for us
  - buildrequire compat-dapl-devel so we find dapl and build a dapl transport
  - Seriously rework the scriptlets to avoid the issue that was release noted
    with openmpi-1.2.5
  - Resolves: bz447436, bz448388, bz455885, bz451469


author: Doug Ledford <dledford@redhat.com> - 1.2.7-6
changelog:
  - Minor fix ups to the Requires(preun) and Requires(post)
  - Add a Provides mpi to base package
  - Resolves: bz465447


author: Doug Ledford <dledford@redhat.com> - 1.3.1-1
changelog:
  - Update to ofed 1.4.1-rc3 version
  - Improve the multi compiler support in the spec file
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 1.3.2-1.el5
changelog:
  - Update to 1.3.2...this should be the last binary incompatible update
  - Build against non-XRC libibverbs
  - Enable valgrind annotations
  - Related: bz506258, bz504284


author: Jay Fenlason <fenlason@redhat.com> - 1.3.2-3.el5
changelog:
  - Add librdmacm librdmacm-devel to build-requires so that rdmacm support
    gets compiled in, so it works withiWARP devices.
  - Resolves: bz515565
  - Add openmpi-bz515567.patch from Steve Wise (swise@opengridcomputing.com)
    to add support for the latest Chelsio devices.
  - Resolves: bz515567


author: Doug Ledford <dledford@redhat.com> - 1.4-1
changelog:
  - Update to latest upstream version
  - Drop no longer needed patch
  - Add libibcm support so users can choose either librdmacm or libibcm for
    connection management
  - Related: bz518218


author: Doug Ledford <dledford@redhat.com> - 1.4-3
changelog:
  - Don't build against dapl as the udapl btl transport causes copious warnings
    that we don't care about (bz479941) and if no hardware is ever found,
    instead of gracefully moving on to the next available btl method it very
    ungracefully bails out of the program entirely (bz543453).
  - Related: bz479941, bz543453


author: Caolan McNamara <caolanm@redhat.com> 1:1.9.77-1
changelog:
  - drop integrated ooo#40937# doublefree patch
  - drop redundant gcj awt without display patch
  - drop redundant missingapp patch
  - seperate pyuno package with all the goodies from pyunofixes1 and systempython2


author: Caolan McNamara <caolanm@redhat.com> 1:1.9.80-1
changelog:
  - bump to latest release
  - drop integrated rpath workspace
  - slideshow gcc internal error worked around elsewhere
  - drop integrated ppc visibility patch
  - drop integrated pyunofixes1 workspace
  - add ooo#43297# chart2 build fix


author: Caolan McNamara <caolanm@redhat.com> 1:1.9.81-1
changelog:
  - bump to 1.9.81
  - drop integrated openoffice.org-1.9.77.ooo42152.gnomevfs.patch
  - with --with-system-stdlibs
  	rm -f $RPM_BUILD_ROOT//usr/lib64/program/libgcc_s.so.*
  	rm -f $RPM_BUILD_ROOT//usr/lib64/program/libstdc++.so.*
    becomes redundant
  - --with-system-icu & --with-system-db3 no longer in --with-system-libs
  - sc needs another file in exceptions because of system-boost
  - drop integrated ooo#43297#


author: Caolan McNamara <caolanm@redhat.com> 1:1.9.82-1
changelog:
  - bump to 1.9.82
  - drop integrated openoffice.org-1.9.75.ooo42251.copyright.patch
  - drop integrated workspace-systempython2.patch
  - drop integrated openoffice.org-1.9.77.ooo41026.unxlngi6.patch
  - drop integrated openoffice.org-1.9.77.ooo42457.ppclink.patch
  - add openoffice.org-1.9.82.NONE.noznow.patch no -z now under ppc


author: Caolan McNamara <caolanm@redhat.com> 1:1.9.83-1
changelog:
  - bump to 1.9.83
  - drop integrated workspace.gcj2
  - add Requires for libwpd which is now pulled in from the system
  - add openoffice.org-1.9.83.ooo43995.wptypedetect.patch
  - add openoffice.org-1.9.83.ooo44377.icunotusingfpic.patch because icudata isn't being compiled with -fpic


author: Caolan McNamara <caolanm@redhat.com> 1:1.9.84-1
changelog:
  - bump to 1.9.84
  - describe what language is in which langpack, drop some unsupported ones
  - ppc should build hsqldb now
  - disable qadevOOo for now until gcj3 workspace is fully integrated
  - gcc20465 breaks ooo build


author: Caolan McNamara <caolanm@redhat.com> 1:1.9.85-1
changelog:
  - bump to latest version
  - add the contrib non-core dictionaries, and allow them to be split up 
    between the languagepacks
  - use gcj-dbtool during build


author: Caolan McNamara <caolanm@redhat.com> 1:1.9.87-1
changelog:
  - bump to latest version
  - rh#151356# stick to 2.0 pathname to keep user settings during pre-release cycle
  - drop integrated workspace-gcj3.patch
  - drop integrated openoffice.org-1.9.83.ooo44377.icunotusingfpic.patch
  - add openoffice.org-1.9.87.gccXXXXX.bean.patch to temporariy work around spurious gcj symbol
  - drop unnecessary openoffice.org-1.9.82.NONE.qadevOOogcj.patch
  - merge patches that skip boring modules
  - scboost issue now part of gccfour workspace
  - openoffice.org-1.9.87.NONE.wizards.broken.patch wizards build with gcj, but don't register
  - reshuffle direct install to a simple warn not error on missing files, and hijack PKGFORMAT to
    transport direct install flags
  - libxmlsec name changed
  - java-filter subpackage like upstream now that they build with gcj
  - backport openoffice.org-1.9.87.ooo43538.sfx2.patch for rh#151594#
  - add requires on appropiate fonts for some langpacks


author: Caolan McNamara <caolanm@redhat.com> 1:1.9.88-1
changelog:
  - bump to 1.9.88
  - submit openoffice.org-1.9.84.ooo45725.lingucomponent.contribdict.patch upstream
  - drop integrated openoffice.org-1.9.87.ooo43538.sfx2.patch
  - openoffice.org-1.9.87.oooXXXXX.fragments.patch build problem of some kind
  - add a check for non -fpic libs
  - allow switching spec to build with gcc3 and gcj4, kudos Fridrich Strba
  - jump to hsqldb 1.8.0RC9 in advance of 1.9.89 to fix our hsqldb issues


author: Caolan McNamara <caolanm@redhat.com> 1:1.9.88-5
changelog:
  - new wzi.res
  - ooo#46217# allow fallback to en_US from other english, i.e. en_IE, en_GB etc
  - replace openoffice.org-1.9.87.NONE.wizards.broken.patch with
    openoffice.org-1.9.88.rh150650.gcjneedstoresolveallrequirements.patch
    as a workaround to get the wizards registered
  - give parallel building a go with 
          openoffice.org-1.9.89.ooo46228.parallel.solenv.patch
          openoffice.org-1.9.89.ooo46316.parallel.vcl.patch
          openoffice.org-1.9.89.ooo46389.parallel.framework.patch
  	openoffice.org-1.9.89.ooo35627.parallel.cppumaker.patch
  	openoffice.org-1.9.89.oooXXXXX.parallel.sysui.patch


author: Caolan McNamara <caolanm@redhat.com> 1:1.9.89-1
changelog:
  - bump to 1.9.89
  - drop integrated openoffice.org-1.9.83.ooo43995.wptypedetect.patch
  - drop hsqldb backport from 1.9.89 now
  - add more parallel build patches as we go along


author: Caolan McNamara <caolanm@redhat.com> 1:1.9.89-2
changelog:
  - package the wizard jars (doh!)
  - fix the fpic icudata issue properly
  - enthused by parallized build success try parallized build.pl as well as dmake
  - some problems during langpack creation -> maxprocess issues ?
  - damn ppc gives illegal instruction on sysui mandrake menus which it didn't
    in the last build. I couldn't be bothered wasting my time figuring out why


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.89-4
changelog:
  - rh#153129# Requires won't work for x86_64
  - rh#152269# Reported problems with nfs file locking
  - add openoffice.org-1.9.89.oooXXXXX.upstreamhatesthefp.officecfg.patch
  - drop redundant patches


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.91-1
changelog:
  - bump to latest version
  - have to reverse move to db4 because of rh#153231#
  - drop integrated workspace-systemmozilla
  - drop integrated workspace-gccfour
  - add backport of spurious sleep prototype removal
  - add our font fallbacks
  - stl stuff integrated now
  - happy birthday to me
  - add openoffice.org-1.9.90.ooo46585.sunmiscisnotstandard.filter.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.92-1
changelog:
  - bump to next version
  - drop integrated workspace-gcj4.patch
  - drop openoffice.org-1.9.80.ooo43466.wmclass.patch 
    g_set_application() name called multiple times
  - drop integrated openoffice.org-1.9.91.ooo46603.boost.sd.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.92-2
changelog:
  - add some indic translations, but leave disabled for now
  - push ooo#46388# sot fix
  - drop perl-Archive-Zip buildtime copy


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.93-1
changelog:
  - bump to next version
  - drop integrated openoffice.org-1.9.85.ooo45146.mandrakelicence.patch
  - try doing without reverting the db4 change
  - add openoffice.org-1.9.92.ooo47641.pptmimetype.patch
  - Fix GTK combo box button sizes (dcbw)


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.95-1
changelog:
  - bump to next version
  - drop integrated openoffice.org-1.9.89.oooXXXXX.systemjpeg.tools.patch
  - drop integrated openoffice.org-1.9.89.ooo46998.changeppclinkflags.solenv.patch
  - drop integrated openoffice.org-1.9.91.ooo46539.sleep.vcl.patch
  - drop integrated openoffice.org-1.9.91.ooo46388.unsigned.sot.patch
  - pointless to ship partial translated kn_IN without fonts which can
    even display them
  - backport workspace.mhu06 to bring back the gnome filedialog that got whacked
  - add openoffice.org-1.9.95.dbXXXXX.configureerror.berkleydb.patch to
    try and move to db4 with latest gcc4, but gcc 4.0.0-1 is still broken wrt to db4
    so back to db3 again


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.96-1
changelog:
  - bump to next version
  - drop unnecessary openoffice.org-1.9.74.ArchiveZip.patch
  - drop integrated openoffice.org-1.9.82.ooo45628.noznow.patch
  - drop integrated openoffice.org-1.9.92.ooo47641.pptmimetype.patch
  - package new files


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.97-1
changelog:
  - bump to next version
  - rh#156039# problems with the autoprovides apparently
  - drop integrated openoffice.org-1.9.89.ooo46228.parallel.solenv.patch
  - drop integrated openoffice.org-1.9.89.ooo46316.parallel.vcl.patch
  - rh#156064# namespace .desktop files
  - rh#156066# shorten menu entry name with
    openoffice.org-1.9.97.ooo48256.nolongname.sysui.patch
  - drop integrated openoffice.org-1.9.89.ooo46389.parallel.framework.patch
  - drop integrated openoffice.org-1.9.89.ooo46481.parallel.svx.patch
  - rh#156065# use alternative gnome icons
  - add export SAL_ENABLE_FILE_LOCKING=1 for concurrent cppumakers collision
  experimentation
  - add openoffice.org-1.9.97.ooo48362.checkzipresult.sc.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.98-1
changelog:
  - bump to next version
  - drop integrated workspace.mhu06.patch
  - a better idea for the rh#156039# provides problem along the valgrind.spec
    pattern
  - add openoffice.org-1.9.97.rh156067.noversionedicons.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.99-1
changelog:
  - add openoffice.org-1.9.97.ooo48600.rtfparseerror.svx.patch
  - drop openoffice.org-1.9.95.gcc21233.noquotesonjavaver.patch as of
    gcc 4.0.0-2


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.99-2
changelog:
  - add openoffice.org-1.9.99.gcc19870.gcjaccessproblem.filter.patch for gcj bug workaround
  - add openoffice.org-1.9.97.ooo48610.searchalltemplates.wizards.patch
  - help documentation for cs and et has landed
  - add openoffice.org-1.9.99.gcc19870.gcjaccessproblem.wizards.patch
     -> wizards work!


author: Dan Williams <dcbw@redhat.com> - 1:1.9.103-1
changelog:
  - m103 now builds 'hr' language
  - add openoffice.org-1.9.101.ooo48816.instsetoo_native.systempython.patch
  - add openoffice.org-1.9.103.oooXXXXX.installation.disable-epm.fix.patch
  - drop integrated openoffice.org-1.9.97.ooo48362.checkzipresult.sc.patch
  - updated to m103
  - updated Gujarati translation


author: Dan Williams <dcbw@redhat.com> - 1:1.9.104-1
changelog:
  - update to m104
  - drop integrated openoffice.org-1.9.88.rh150650.gcjneedstoresolveallrequirements.patch
      (#rh150650)


author: Dan Williams <dcbw@redhat.com> - 1:1.9.104-2
changelog:
  - Add -IN glyph fallbacks for Hindi, Gujarati, Bengali, Punjabi, and Tamil
      (penoffice.org-1.9.104.oooXXXXX.indic-font-fallbacks.patch)
  - Add Croatian 'hr' langpack
  - Package libportaudio and libsndfile libraries in -core package
  - drop workspace-db4.patch and workspace-db4-2.patch since it appears we can use
      db4 with gcc again
  - add openoffice.org-1.9.104-gcjawt.patch to deal with gcj AWT library change
      to libgcjawt.so
  - add openoffice.org-1.9.104-berkeleydb-jni-casting-misuse.patch to fix grievous
      misuse of C casting in berkeleydb's JNI glue


author: Dan Williams <dcbw@redhat.com> - 1:1.9.104-3
changelog:
  - Remove openoffice.org-1.9.104.oooXXXXX.indic-font-fallbacks.patch
  - Add openoffice.org-1.9.104-use-fontconfig-everywhere.patch, which
      uses Fontconfig for all font substituion and glyph fallback


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.106-1
changelog:
  - bump to latest version
  - drop gcc#20629# workaround
  - add openoffice.org-1.9.106.ooo50107.briges.noexecstack.patch
  - add workspace.gcc4fwdecl.patch to workaround new gcc pickiness
  - add openoffice.org-1.9.106.ooo45298.psprint.pspfontcache.patch
  - upstream openoffice.org-1.9.104-gcjawt.patch as part of gcj5
  - add GSI_ru.sdf for rh#158539#
  - add workspace-fpicker4.patch
  - add openoffice.org-1.9.106.ooo44627.sal.brokencondition.patch to
    fix rh#158489#


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.108-1
changelog:
  - bump to latest version
  - add workspace.vcl39.patch for rh#156176#
  - drop integrated openoffice.org-1.9.106.ooo50107.briges.noexecstack.patch
  - drop integrated openoffice.org-1.9.106.ooo45298.psprint.pspfontcache.patch
  - drop integrated workspace.gcj5.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.108-2
changelog:
  - add openoffice.org-1.9.108.ooo30133.lingucomponent.ukrainean.patch
  - rh#158923# korean not identified as CJK font by userinstall module
  - add openoffice.org-1.9.108.oooXXXXX.solenv.nostipwithsimpleinstall.patch
    to fix rh#157254# useless debuginfo rpm
  - shrink buildtime space requirements


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.108-3
changelog:
  - rh#159930# use us english thesaurus for australia as well
  - add openoffice.org-1.9.108.ooo47323.binfilter.stupiddetect.patch for
    rh#159851#/ooo#47323#


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.109-1
changelog:
  - rh#158943# Require some fonts
  - bump to next version
  - drop integrated ooo46528.stillnotpic.icu.patch
  - drop integrated ooo48816.instsetoo_native.systempython.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.109-2
changelog:
  - rh#159169# crash due to dodgy casting when save to legacy impress format
  - ooo#50571#/rh#157813# add workspace.gslpatches2.patch to fix bizarre 
    lohit combining characters rendering bug


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.109-3
changelog:
  - add openoffice.org-1.9.108.oooXXXXX.pyuno.pushrpath.patch
  - rejig build to use current splashscreen
  - readd openoffice.org-1.9.88.NONE.gcc3gcj4.patch
  - add openoffice.org-1.9.108.ooo9290.goodies.epstoepdf.patch for rh#142535#


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.109-4
changelog:
  - add Bengali langpack
  - make a stable /usr/lib/openoffice.org2.0 dir
  - make openoffice.org-1.9.108.ooo9290.goodies.epstoepdf.patch paranoid
  - enable failure on rpmbuild test for executable stack
  - drop integrated openoffice.org-1.9.89.ooo46912.setjmpoutsidenamespace.binfilter.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.109-5
changelog:
  - drop unnecessary openoffice.org-1.9.103.oooXXXXX.installation.disable-epm.fix.patch
  - add simple crash report output, not that there are any crashs you understand


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.110-1
changelog:
  - bump to next version
  - drop integrated workspace.gcc4fwdecl.patch
  - need a openoffice.org-1.9.110.oooXXXXX.psprintfriend.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.111-1
changelog:
  - bump to next version
  - drop integrated openoffice.org-1.9.87.ooo50575.fragments.patch
  - add openoffice.org-1.9.111.ooo51091.exportgcjsymbolname.jvmaccess.patch
    to export differently named symbols under gcj
  - try to workaround hsqldb problems with itself and with gcj


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.112-1
changelog:
  - bump to next version
  - add openoffice.org-1.9.112.ooo50875.gtkslowunderkde.vcl.patch for rh#157158#


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.112-2
changelog:
  - wrong userdir
  - allow fallbacks for translations with partial support file coverage
  - rh#160301# tweak fontconfig patch to ignore opensymbol/starsymbol


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.113-1
changelog:
  - bump to new version
  - translations merged, drop translation sources
  - hsqldb bumped to version with working build.xml, drop sources
  - add patch to work around notorious gcc19870 for hsqldb
  - indic font fallbacks now in upstream
  - openoffice.org-1.9.92.oooXXXXX.addindic.patch integrated


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.114-2
changelog:
  - further split langpacks
  - modify test for $ORIGIN rpaths
  - rh#161886# 
      + openoffice.org-1.9.114.oooXXXXX.rpath.patch
      + openoffice.org-1.9.114.rh161886.rpath.desktop.patch
  - add openoffice.org-1.9.114.ooo50745.cruxcrash.vcl.patch for rh#160293#
  - add openoffice.org-1.9.114.ooo51637.solenv.pyuno.patch to workaround
    multiple pyuno registering failures
  - add openoffice.org-1.9.114.ooo51638.mailmerge.patch to provide email
    support for maill merge
  - add openoffice.org-1.9.114.oooXXXXX.nostlport.patch and not build
    stlport


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.115-1
changelog:
  - bump to next version
  - add openoffice.org-1.9.115.ooo51673.printing.checkerror.patch
  - rpath of ORIGIN complete, enable failure on regression
  - drop integrated openoffice.org-1.9.114.ooo50745.cruxcrash.vcl.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.115-2
changelog:
  - add openoffice.org-1.9.115.oooXXXXX.audio.withoutnas.patch
    and disable worthless nas/portaudio/sndfile stuff
  - add openoffice.org-1.9.115.oooXXXXX.xsltproc.evenwithjava.patch
    and see if we can build faster with xsltproc


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.116-1
changelog:
  - bump to new version, Hamburg burning the midnight oil apparently
  - add openoffice.org-1.9.115.ooo51755.scp2.parallel.patch
  - drop integrated openoffice.org-1.9.111.ooo51091.exportgcjsymbolname.jvmaccess.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.116-3
changelog:
  - enable evo addressbook in addressbook wizard
  - rh#162875# extra leading / from file picker
  - update fpicker stuff
  - add workspace.impress63.patch for rh#162158#
  - add openoffice.org-1.9.116.rh162935.gccXXXXX.weirdcrash.patch as a temporary
    workaround until I figure out just what the hell is wrong


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.117-1
changelog:
  - bump to next version and drop the integrated (finally) fpicker patch
  - back to using stlport for now because I'm dubious
  - rh#162984# fallbacks from en_AU to en_GB for wizards
  - rh#160783# set a targetname for font when it's found
  - add openoffice.org-1.9.117.rh163147.thorndale.fontconfig.patch
  - add openoffice.org-1.9.117.ooo51912.nullpointer.wizards.patch for
    rh#161173#


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.117-2
changelog:
  - add openoffice.org-1.9.117.ooo52023.evoadb2.nognuconst.patch to
    fix evoab2
  - add openoffice.org-1.9.117.ooo52048.inhalt.sw.patch as minor .doc
    export regression fix for rh#158252#
  - split email mailmerge stuff into a subpackage to avoid python
    dependancy on writer


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.118-1
changelog:
  - add experiemental rh150643.fontconfigalwayssystemfont.vcl.patch
  - drop integrated workspace.impress63.patch
  - drop integrated workspace.mh19104.patch
  - rh#163554# due to #i41296# missing FormWizard stuff


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.119-1
changelog:
  - experiment with security flags
  - drop integrated cmcfixes11.workspace
  - drop integrated openoffice.org-1.9.113.ooo51385.bridges.stack.patch
  - drop integrated openoffice.org-1.9.118.ooo52061.recursive.animations.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.120-3
changelog:
  - add openoffice.org-1.9.120.rh158977.execshield.bridges.patch
  - workaround gcj accessor problem on a global basis


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.121-2
changelog:
  - rh#127576# add libgnomeprintui 
  - make database front end into pseudo subpackage
  - replace patches with combined workspace.gslpatches4
  - add rh#156677# menu changes


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.121-3
changelog:
  - add rh#164310# pipe giveup
  - add openoffice.org-1.9.121.ooo52542.emptyrtfframes.sw.patch for rh#161313#


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.122-3
changelog:
  - ooo#52626# sessionmanagement and vclplug problem
  - ooo#52786# czech 8bit msword doc import problem
  - disable internal hsqldb 1.80.1 and use the rawhide system one now
    that it has been bumped to that version


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.122-4
changelog:
  - session management and workspace restore corrections
  - add openoffice.org-1.9.112.oooXXXXX.exception.package.patch for rh#165197#


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.123-1
changelog:
  - use system beanshell
  - drop integrated workspace.cmcfixes12
  - drop integrated ooo51736.xsltproc.evenwithjava.patch
  - drop integrated ooo51745.cpputools.patch
  - drop integrated ooo51755.scp2.parallel.patch
  - drop integrated ooo51774.rsc.parallel.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.123-3
changelog:
  - recombine into workspace.cmcfixes14.patch
  - use configimport rather than patches for customization


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.124-2
changelog:
  - experiment with jakub's suggestion for prelink based optimization
    intermediate library and binaries


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.125-1
changelog:
  - beta2
  - drop integrated workspace.cmcfixes14.patch
  - drop integrated ooo46585.sunmiscisnotstandard.filter.patch
  - drop integrated ooo30133.lingucomponent.ukrainean.patch
  - drop integrated ooo53026.selinux-pipegiveup.desktop.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.125-2
changelog:
  - rh#166432# add README to he_IL dictionary
  - rh#166290# print range not properly available in gnomeprintui
  - flr moves inhalt patch into javafilter workspace


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.125-3
changelog:
  - use only underlying toolkit startup notification
  - use proper nfslock fix
  - workspace.cmcfixes15.patch, no MathMLDTD or msfontextract foo
  - openoffice.org-1.9.125.oooXXXXX.bulletexport.vcl.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.125-4
changelog:
  - add workspace.cmcfixes16.patch for export dialog problem
  - rh#166812# crash on keyboard customization save


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.127-1
changelog:
  - bump to next version
  - ooo#53956# thai dictionary
  - remove unslightly warning from gnomeprint
  - replace sablot with libxslt i.e. help application
  - add workspace.impress57.patch for rh#167130#
  - add plausible .ooo54040.savecrash.svtools.patch fix for rh#167178#
  - drop integrated workspace.cmcfixes15.patch
  - drop integrated workspace.cmcfixes16.patch
  - split and upstream font additions
  - add openoffice.org-1.9.127.gcc23691.slideshow.patch boost workaround


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.128-1
changelog:
  - next version
  - SISSL is retired, now LGPL only
  - swap workspace.cmcfixes17.patch for .rhXXXXXX.noexpandfpicker.desktop.patch
    as upstream agrees on rh default for fpicker
  - drop integrated openoffice.org-1.9.114.oooXXXXX.nostlport.patch
  - more translated help documentation
  - new langpack
  - add mutexhang patch for rh#166950#


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.128-2
changelog:
  - busted translation
  - force gcj as java solution, that's the only JVM I want to support
  - openoffice.org-1.9.112.ooo51724.gcc21020.testtools.patch fixed in gcc
  - make a different stab at fixing klipper related embedded object hang 
    for rh#166950#


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.130-1
changelog:
  - next version
  - drop integrated .ooo53699.unzipunused.postprocess.patch
  - add openoffice.org-1.9.130.ooo54692.fasterhelpcontent2.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:1.9.130-2
changelog:
  - add openoffice.org-1.9.130.ooo54959.negativeindent.sw.patch
  - add openoffice.org-1.9.130.ooo54708.sc.patch
  - workaround for gcc#22132# for rh#168537#
  - alternative parallel cppumaker problem fix
  - build against system db4 
        -> java api is different, fix that
  - build against system xalan
        -> that's as small as OOo gets until gcc#19664# get fixed
        or someone figures out how to use system rhino
  - add workspace.cmcfixes19.patch
  - remove dictooo wizards menus which aren't actually available


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.0-3.1
changelog:
  - release candidate 3
  - alias en_US thesasurus for other en varients
  - can crash on empty thesasurus rh#170091#/ooo#55603#
  - drop thesaruses not in new format


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.0-3.7
changelog:
  - rh#171918# wrong LDAP stuff gets launched from wizard
  - upstream patches as cmcfixes20
  - rh#171844# make another stab at the klipper problem
  - ooo#57107# updated hindi translation
  - rh#171692# be less of a gcj bigot
  - rh#172149# need more stuff in the classpath for macro creating


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.0-3.8
changelog:
  - ooo#53397# SEGV signal installation needs to be extended to include 
    custom application launcher names
  - reenable faster helpcontent2 building


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.1-0.138.1
changelog:
  - drop integrated openoffice.org-1.9.74.ooo41875.mktemp.patch
  - drop integrated openoffice.org-1.9.89.ooo35627.parallel.cppumaker.patch
  - drop integrated openoffice.org-1.9.97.ooo48610.searchalltemplates.wizards.patch
  - drop integrated openoffice.org-1.9.106.ooo50172.icu.tamilvowelslikepango.patch
  - drop integrated workspace.vcl39.patch
  	- CACHE_MAGIC of rh2 changed back to default 2. No broken caches of "2" 
          should exist to cause ambiguity
  - drop integrated openoffice.org-1.9.108.ooo48814.solenv.nostripwithsimpleinstall.patch
  - drop integrated openoffice.org-1.9.122.ooo52626.workspacerestore.vcl.patch
  - drop integrated workspace.impress57.patch
  - drop integrated workspace.gslpatches6.patch
  - drop integrated workspace.emblock1.patch
  - drop integrated workspace.cmcfixes18.patch
  - drop integrated workspace.cmcfixes19.patch
  - add workspace.systemlibxmlfix.patch
  - additional hungarian help


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.1-0.139.1
changelog:
  - drop integrated openoffice.org-1.9.108.ooo47323.binfilter.stupiddetect.patch
  - openoffice.org-1.9.97.ooo48600.rtfparseerror.svx.patch -> javapatch
  - drop integrated openoffice.org-1.9.112.ooo53025.exception.package.patch
  - gcc#22132# fixed
  	+ drop openoffice.org-1.9.84.ooo44843.sdcasting.patch
  	+ drop openoffice.org-1.9.84.ooo44846.svxcasting.patch
  	+ drop openoffice.org-1.9.84.ooo45162.svxcasting2.patch
  - workaround deprecated openldap api usage
  - add industrial set of icons


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.1-0.140.1
changelog:
  - drop integrated workspace.oooemailmerge.patch
  - drop integrated workspace.javapatch.patch
  - drop integrated workspace.systemlibxmlfix.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.1-0.142.2
changelog:
  - rh#174147# openoffice.org-2.0.1.oooXXXXX.vcl.missingglyph.patch
  - rh#174148# openoffice.org-2.0.1.ooo58606.sw.pre-edit.patch
  - openoffice.org-1.9.87.warnnoterroronmissing.patch not going to be upstreamed


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.1-143.3
changelog:
  - default to evo2 as address book
  - add workspace.sb41.patch for gcc 4.1 support
  - add libgcj.so.7 to jvm providing jvmfwk lib list (workspace.cmcfixes23)


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.1-144.1
changelog:
  - openoffice.org-2.0.1.rh175242.connectivity.mozab.patch, provide mozilla
    address backend despite http://bugzilla.mozilla.org/show_bug.cgi?id=135137


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.1-145.2
changelog:
  - gcc 4.1 rebuild
  - disable workspace.jaxpapi.patch for now
  - disable fasterhelpcontent2.patch for now
  - rh#175272# openoffice.org-2.0.1.ooo59129.vcl.readonlyentry.patch
  - gcc#25389# File(new URI("file:./")) regression


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.1.1-1
changelog:
  - gcc#25199# fixed, drop bitfield patch
  - gcc#25389# fixed, drop jurt.nullpointer.patch
  - gcc#25426# identified, crash with jaxpapi patch
  - addressbooks
  	a) evo1 addressbook removed, as only evo2 required
  	b) mozilla addressbook removed, utterly useless
  	c) evo2 ldap addressbook added to give some sort of ldap access
  	d) patch wizard UI to show available addressbook backends
  - add openoffice.org-2.0.1.oooXXXXX.config_office.nss.patch
  - upstream cocks up their numbering


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.1.1-3
changelog:
  - gcc#25426# fixed
      + reenabled workspace.jaxpapi.patch
      + reenabled fasterhelpcontent2.patch
  - add openoffice.org-2.0.1-ooo59675.sysui.rtfmimetype.patch for rh#176259#
  - gcc#19870# still busted, accesser hack returns


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.1.1-5
changelog:
  - spinbutton factory needs to be uneditable as well as combobox
  - add openoffice.org-2.0.1-ooo19976.framework.nofocussteal.patch for jrb


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.1.1-9
changelog:
  - add openoffice.org-2.0.2.ooo61178.ucb.neon25.patch for neon 0.25.X
  - missing %defattr(-,root,root)
  - rh#179256# if java fails (i.e. was configured to use libgcj.so.6) reconfigure
    to pick up libgcj.so.7
  - rh#177205# add some templates, including a fedora themed presentation


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.2-5.1
changelog:
  - hunspell replaces myspell
  - Catalan help documentation available
  - add sestatus details to crash_reporter
  - nl_NL dictionaries upstreamed
  - hu_HU dictionaries upstreamed
  - workspace.epspreview.patch integrated
  - workspace.dbwizardpp1.patch integrated
  - workspace.cmcfixes20.patch integrated
  - workspace.cmcfixes21.patch integrated
  - workspace.cmcfixes22.patch integrated
  - workspace.cmcfixes23.patch integrated
  - workspace.gcc41.patch integrated
  - workspace.sb41.patch integrated
  - workspace.systemagg.patch integrated
  - workspace.hro02.patch integrated
  - openoffice.org-1.9.96.ooo35641.noxfonts.vcl.patch integrated
  - openoffice.org-2.0.1.ooo58618.sfx2.interactionhandler.patch integrated
  - openoffice.org-2.0.1.ooo58798.parallel.patch integrated
  - openoffice.org-2.0.1.ooo59537.config_office.nss.patch integrated
  - openoffice.org-2.0.1.ooo59666.vcl.animatedtheme.patch integrated
  - openoffice.org-1.9.125.ooo54040.savecrash.svtools.patch integrated
  - openoffice.org-2.0.1.ooo61098.vcl.readonlyentry.patch integrated
  - openoffice.org-2.0.2.ooo61178.ucb.neon25.patch integrated
  - drop openoffice.org-1.9.125.ooo54586.nfslock.sal.patch
  - drop openoffice.org-1.9.112.ooo50857.gtkslowunderkde.vcl.patch
  - drop openoffice.org-1.9.88.NONE.gcc3gcj4.patch
  - drop empty sandbox.jar
  - deliver link flag syntax changed
  - new workspace.jaxpapi.patch
  - replace fasterhelpcontent2.patch with workspace.targetedaot.patch
  - replace ooo52974.systemhsqldbbeanshell.patch and oooXXXXX.systemxalan.patch 
    with workspace.systemjava.patch
  - rh#178670# drop PROT_EXEC
  - add openoffice.org-2.0.2-ooo61841.vcl.honourfontconfigoverrides.patch for rh#179692#
  - add openoffice.org-2.0.2.ooo62030.solenv._version.patch
  - rh#181876# update workspace.atkbridge.patch
  - update and split evo patches to match upstream segmentation
  - ooo#62318# mozab not available with system mozilla


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.2-5.4
changelog:
  - ooo#59997# replacement opens___.ttf updated
  - drop integrated openoffice.org-2.0.0.ooo56651.sw.rtfcrash.patch
  - drop integrated openoffice.org-1.9.114.ooo51718.rpath.patch
  - add openoffice.org-2.0.2.ooo63155.sfx2.badscript.patch for rh#185390#
  - rh#181900# rename Bengali langpack
  - drop pagein swappiness foo
  - drop nearly 9 megs of afms and ppds


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.2-5.5
changelog:
  - rh#186515# Keep draw and math launchers for mimetypes
  - rh#186215#/ooo#63583# accessibility crasher in impress


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.2-5.9
changelog:
  - rh#187939# not detecting changes to CUPS printers during execution
  - rh#188467# set printer font-handling defaults
  - ooo#59997# opensymbol font metrics changed
  - rh#161530# new South African locales exist in glibc now


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.2-5.10
changelog:
  - ooo#64463# don't require Xaw for the use mozilla plugins (e.g flash)
    in OOo feature
  - ooo#64508#/rh#189061# honour fontconfig hinting settings


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.2-5.12
changelog:
  - ooo#64743# continuing my epic battle with CJK and Indic glyph
    fallback (rh#189760#)
  - ooo#64726# "untranslate" bengali keyboard shortcuts (rh#189760#)


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.3-0.168.1
changelog:
  - 2.0.3 preview builds
  - enable cairo canvas
  - disable useless ldap backend
  - drop integrated workspace.jaxpapi.patch
  - drop integrated workspace.evo2fixes.patch
  - drop integrated workspace.dmake43p01.patch
  - drop integrated workspace.systemjava
  - drop integrated workspace.atkbridge.patch
  - drop integrated openoffice.org-2.0.1-ooo59675.sysui.rtfmimetype.patch
  - drop integrated openoffice.org-2.0.2.ooo34909.dbaccess.patch
  - drop integrated openoffice.org-2.0.2.ooo61875.sd.compile.patch
  - drop integrated openoffice.org-2.0.2-ooo61841.vcl.honourfontconfigoverrides.patch
  - drop integrated openoffice.org-2.0.2.ooo62030.solenv._version.patch
  - drop integrated openoffice.org-2.0.2.oooXXXXX.config_office.noppds.patch
  - drop integrated openoffice.org-2.0.2.ooo63155.sfx2.badscript.patch
  - drop integrated openoffice.org-1.9.120.ooo52428.execshield.bridges.patch
  - drop integrated openoffice.org-1.9.130.ooo54959.negativeindent.sw.patch
  - drop integrated openoffice.org-2.0.2.ooo64743.vcl.adjustonlevel1.patch
  - drop some integrated dictionary components
  - add workspace.bfsixtyfour.patch
  - add openoffice.org-2.0.3.gccXXXXX.svtools.R_X86_64_PC32.patch workaround
  - add openoffice.org-2.0.3.ooo65052.bridges.makeasmpic.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.3-0.169.1
changelog:
  - add openoffice.org-2.0.3.ooo65304.sn.vcl.patch for rh#191155#
  - add openoffice.org-2.0.3.ooo65308.notespaste.sd.patch for rh#191333#
  - drop integrated openoffice.org-2.0.3.ooo65052.bridges.makeasmpic.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.3-0.169.2
changelog:
  - ta_IN translations integrated
  - add openoffice.org-2.0.3.ooo65327.builddep.writerperfect.patch
  - add openoffice.org-2.0.3.ooo65330.samba.fpicker.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.3-0.169.4
changelog:
  - ooo#65361# remove gengal.rdb
  - ooo#61767# remove oo_product.bmp
  - add workspace.vcl59.patch
      + openoffice.org-2.0.3.ooo65304.sn.vcl.patch merged into vcl59
  - add openoffice.org-2.0.3.oooXXXXX.atkbroken.vcl.patch for rh#191621#
      + upstream atk version check doesn't seen to work


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.3-0.169.5
changelog:
  - rh#191689# re-add openoffice.org-2.0.3.oooXXXXX.selinux.bridges.patch 
    the upstreamed replacement alloc/mprotect pattern still leaves writable 
    executable mem


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.3-1.2
changelog:
  - 2.0.3 RC1
  - rh#191689# well fine so!, anonymous EXEC mapping is verboten altogether,
    reimplement three UNO bridges arch with the double file mmap pattern
  - add openoffice.org-2.0.3.oooXXXXX.vcl.removemenukey.patch for rh#192172#


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.3-3.1
changelog:
  - 2.0.3 RC3
  - rh#191650# add openoffice.org-2.0.2.oooXXXXX.vcl.honourcairofont.patch
  - rh#192588# don't use the cairo canvas by default


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.3-3.2
changelog:
  - enable lockdown functionality, fix crash on ESC on right click submenus
  - re-enable "Reverse" on print dialog, it's a cups option


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.3-5.3
changelog:
  - rh#185806# update croatian dictionaries, and add spanish, norwegian thesaruses
  (thesari?) etc
  - rh#193918# add openoffice.org.2.0.3.ooo66067.embeddedobj.crash.patch
  - rh#193776# add openoffice.org.2.0.3.ooo66018.linguistic.vorcrash.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.3-6.1
changelog:
  - next milestone
  - drop hack and use new gtk_print_unix_dialog_set_manual_capabilities api instead
  - readjust printing stuff for new "print to file" mechanism


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.3-7.1
changelog:
  - next milestone
  - track down vor and sdw crashes to some gcc problem with static initializers, 
  	failed to be able to find a standalone testcase though :-( => workaround
  - add workspace.sixtyfour06.patch for x86_64 stability


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.3-7.4
changelog:
  - final 2.0.3 version
  - rh#196123# add openoffice.org-2.0.3.ooo66851.i18npool.x86_64.patch
  - add openoffice.org.2.0.3-ooo66018.cppuhelper.dangerousvisibility.patch as visibility(?)
    workaround
  - add openoffice.org-2.0.3.rhXXXXXXvcl.annoyingbeeps.patch to *SHUT UP* the
    damn needy msgboxes before I loose control and go kill something cute and fluffy
  - from the gtk print dialog, when printing to pdf, pick some defaults and just do
    it, don't use the pdf options dialog.


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.3-7.5
changelog:
  - add openoffice.org.2.0.3.ooo66510.shell.recentlyused.patch
  - add openoffice.org-2.0.3.rh187919.gtkunderkde.patch
  - add openoffice.org-2.0.3.ooo67186.sw.eventisULONG.patch
  - add ooobuild.VBAObjects.patch for VBA macro support
  - fix use of freetype headers for new freetype
  - rebuild for new tasty linker hash/new compiler
      + add openoffice.org.2.0.3.gcc28370.statics.patch to workaround gcc28370
  	-> drop with 4.1.1-8
      + add openoffice.org.2.0.3.gccXXXXX.anonymousexternc.patch for namespace { extern "C" ... }
      + add openoffice.org-2.0.3.oooXXXXX.all.ODR.anonymousmembers.patch to 
          workaround strict gcc ODR anon namespace handling
      + what gcc "visibility" means has changed significantly, futile to update OOo to work with 
        it anymore, most unfortunate :-(
      + add openoffice.org-2.0.3.oooXXXXX.sal.importvisibilityasexported.patch to import
      visibility the same as exported anyway


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.3-7.6
changelog:
  - rh#199535# presentation templates duplicated in zh-CN
  - rh#199664# -> openoffice.org-2.0.3.ooo67644.sw.spacing.patch, dialog spacing
  - rh#199659# -> openoffice.org-2.0.3.ooo67656.vcl.tabdialogsminimize.patch
  - rh#199665# -> openoffice.org-2.0.3.ooo67658.sfx2.reloadcrash.patch
  - rh#199894# -> openoffice.org-2.0.3.ooo67716.svx.overflow.patch
  - rh#199870# ->openoffice.org-2.0.3.gccXXXXX.basegfx.crash.patch
  - rh#199907# -> openoffice.org-2.0.3.ooo67740.xmlhelp.doublefree.patch
  - rh#200059# -> openoffice.org-2.0.3.ooo67337.sfx2.dontshowbuttons.patch
  - rh#200055# -> openoffice.org-2.0.3.ooo67750.sfx2.dontexpandtitle.patch
  - drop openoffice.org.2.0.3-gcc28409.anonymousexternc.patch
  - drop openoffice.org-2.0.3.gccXXXXX.svtools.R_X86_64_PC32.patch
  - add openoffice.org-2.0.3.oooXXXXX.jvmfwk.futureproof.patch to preempt new libjvm for gcj
  - see if we can drop openoffice.org-2.0.3.gccXXXXX.svtools.R_X86_64_PC32.patch
  - reenable visibility support
  - add openoffice.org-2.0.3.rh200118.filter.xalanbroken.patch to work around the new
    xalan problem


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.3-7.7
changelog:
  - rh#200207# -> openoffice.org-2.0.3.ooo67779.svx.toolbarcrash.patch
  - rh#200194# -> openoffice.org-2.0.3.ooo67793.sw.stickymenu.patch
  - rh#199056# -> openoffice.org-2.0.3.ooo67829.dtrans.64bitpaste.patch
  - rh#200042# -> openoffice.org-2.0.3.ooo65081.sw.layout.patch
  - rh#200193# -> openoffice.org-2.0.3.ooo67781.sc.reloadhiddenrows.patch
  - rh#200369# help build glitch
  - drop openoffice.org-2.0.3.oooXXXXX.all.ODR.anonymousmembers.patch
  - drop openoffice.org-2.0.3.oooXXXXX.sal.importvisibilityasexported.patch
  - require dejavu-lgc-fonts, Greek coverage problems begone
  - rh#200512# South African translations
  - move to firefox-devel instead of mozilla-devel, --with-firefox
  	+ add workspace.configure18.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.3-7.8
changelog:
  - add openoffice.org-1.9.129.ooo54603.fontconfig.part2.patch
  - rh#200703# -> openoffice.org-2.0.3.ooo67976.svx.macroscrash.patch
  - rh#200874# -> openoffice.org-2.0.3.ooo68018.svx.classpathdialog.patch
  - rh#200728# ->
  	+ openoffice.org-2.0.3.ooo68047.vcl.zwj, don't drop zero width joiner
  	+ openoffice.org-2.0.3.ooo68048.vcl.imsurroundtext, a bizarre, but
  	perfectly functional input method surrounding text implementation
  	based on the ATK bridge
  - rh#200805# replace ooo58663 missing glyph patch -> workspace.icuupgrade
  - rh#201143# more Indian langpacks
  - rh#201305# digital signature compile flags mismatch
  - 2.0.4+ accepted
  	+ ooo#66510# recentlyused fix -> workspace.kendy10
  	+ ooo#66067# embeddedobj crash -> workspace.fwk40
  	+ ooo#65519# samba printing ->> workspace.fwk40
  	+ ooo#59997# defaultbullets -> workspace.opensymbol01
  	+ ooo#65081# switch layout -> workspace.os84
  	+ ooo#65308# notes paste -> workspace.impress96
  	+ ooo#19976# nofocussteal -> workspace.inplaceobjects
  	+ ooo#65318# agg24 -> workspace.thbpp4.patch
  	+ ooo#65767# menu key -> workspace.vcl60.patch
  	+ ooo#66851# x86_64 i18npool ->> workspace.sixtyfour06
  	+ ooo#67656# tabdialogs minimize -> workspace.vcl63
  	+ ooo#67750# dont expand title -> workspace.pb17
  	+ ooo#67750# dont expand title ->> workspace.pb17


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-1.1
changelog:
  - rh#201447# -> openoffice.org-2.0.3.ooo68339.vcl.maskingtoomanybytes.patch
  - rh#201305# -> openoffice.org-1.9.115.ooo51931.fixxmlsec.patch
  - add openoffice.org-2.0.3.ooo68383.evo28support.patch for new evo
  - clear font customization as fontconfig now has it's defaults the way we need
  - clear gengal rdb removal, ooo#65361# fixed
  - drop integrated workspace.targetedaot
  - drop integrated workspace.bfsixtyfour
  - drop integrated workspace.thbpp4
  - drop integrated workspace.vcl59
  - drop integrated workspace.vcl60
  - drop integrated workspace.fwk40
  - drop integrated workspace.sixtyfour06
  - drop integrated workspace.kendy10
  - drop integrated workspace.impress96
  - drop integrated workspace.gcjsix
  - drop integrated workspace.vcl63
  - drop integrated workspace.os84
  - drop integrated workspace.configure18
  - drop integrated ooo65327.builddep.writerperfect.patch
  - drop integrated ooo67337.sfx2.dontshowbuttons.patch
  - add openoffice.org-2.0.4.ooo68665.x86_64gcj.jvm.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-2.1
changelog:
  - fix openoffice.org-2.0.4.ooo68369.dtrans.crash.patch
  - fix openoffice.org-2.0.4.ooo68805.sw.ww8size.patch
  - fix openoffice.org-2.0.4.ooo68822.sw.recursiveim.patch
  - fix potential out of bounds in xmlhelp
  - drop openoffice.org-2.0.3.oooXXXXX.atkbroken.vcl.patch, fixed in gnome now
  - rh#203497# -> openoffice.org-2.0.4.ooo68851.framework.disablemenuifempty.patch
  - rh#203439# -> openoffice.org-2.0.4.oooXXXXX.vcl.x86_64.impressatk.patch
  - rh#203063# -> openoffice.org-1.9.129.ooo54603.fontconfig.part3.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-2.2
changelog:
  - rh#203063# Glyph replacement work when single run has multiple fonts
  - rh#204173# Crash on Glyph replacement when single run has single glyph
    for multiple character positions


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-3.1
changelog:
  - add workspace.cairofixes02.patch for some cairocanvas fixing
  - add openoffice.org-2.0.4.ooo69325.cairocanvas.slowfills.patch to
    fix the real real slow cairo canvas on my laptop
  - rh#203872# -> openoffice.org-2.0.4.ooo69051.vcl.singlekeypress.patch
  - add pseudoworkspace.valgrind1.patch with various valgrinded leaks


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-4.1
changelog:
  - ooo#69585# x86_64 svtools database crasher
  - fix rh#206264# 16bit .ppt load crash
  - ooo#69653# 64bitscaling chart2 display fix


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-4.2
changelog:
  - add openoffice.org-2.0.4.gccXXXXX.svtools.fsstorage.patch to work
    around fsstorage crash apparently triggered by gcc -Os change


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.1
changelog:
  - add openoffice.org-2.0.4.ooo69780.goodies.hugetile.patch for rh#207226#
  - add openoffice.org-2.0.4.ooo69530.sd.crash.patch for stupid crash in
    impress wizard
  - rh#206615# supporting trailing ZWJ in fallback blocks
  - rh#207856# .ppt import line spacing fix ooo#69841#
  - rh#206177# cancelling slideshow transistion crash ooo#69236#
  - add openoffice.org-2.0.4.ooo69905.sd.casting.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.3
changelog:
  - add openoffice.org-2.0.4.ooo69992.vcl.im_yield.patch for rh#208537#
  - add workspace.cmcfixes28.patch for rh#208966#
  - add openoffice.org-2.0.4.ooo70064.sc.crashonalignment.patch for rh#208888#


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.1
changelog:
  - add openoffice.org-2.0.4.ooo70361.vcl.atkfilechooser.patch for rh#210440#
  - add openoffice.org-2.0.4.ooo70388.vcl.setprgname.patch for rh#210441#


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.2
changelog:
  - add openoffice.org-2.0.4.ooo70601.sd.sal_uInt32_aslong.patch
  - Resolves: rhbz#210435 openoffice.org-2.0.4.ooo69620.vcl.atkcombo.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.3
changelog:
  - Resolves: rhbz#211949 replace openoffice.org-2.0.4.ooo70388.vcl.setprgname.patch with 
    openoffice.org-2.0.4.ooo70779.vcl.setprgname.patch
  - Resolves: rhbz#211969 add openoffice.org-2.0.4.ooo70782.secondaryfpicker.atk.patch
  - Resolves: rhbz#212009 add workspace.fwk53.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.4
changelog:
  - Resolves: rhbz#213203 openoffice.org.2.0.4.oooXXXXX.i18npool.extendgrapheme.patch
  - Resolves: (partial) rhbz#213371 openoffice.org.2.0.4.oooXXXXX.i18npool.extendgrapheme.patch
  - Resolves: rhbz#212814 openoffice.org-2.0.4.ooo71076.dtrans.64bitdragdrop.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.7
changelog:
  - Resolves: rhbz#215694 add openoffice.org-2.0.4.ooo71562.svx.64bitcrash.patch
  - Resolves: rhbz#215582 add openoffice.org-2.0.4.ooo71570.psprint.noonecopy.patch
  - Resolves: rhbz#215511 can't print brochure on landscape mode
  - Resolves: rhbz#215699 print current page
  - Resolves: rhbz#216089 zoom affecting cjk substitution
  - Resolves: rhbz#216347 openoffice.org-2.1.0.ooo71815.bridges.x86_64.patch
  - due to gcc4.1.1-36.el5 need to add openoffice.org-2.0.4.ooo71039.svx.purevirtual.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.8
changelog:
  - Resolves: rhbz#217047 
    replace openoffice.org-2.0.4.ooo.vcl.im_yield.patch with 
    openoffice.org-2.0.4.ooo69992.sw.syncbackspace.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.9
changelog:
  - Resolves: rhbz#217321 openoffice.org-2.1.0.ooo72014.officecfg.malayammenu.patch
  - Resolves: rhbz#217361 wrong libjvm on ppc32/ppc64 multiarch installed libgcj's
  - Resolves: rhbz#217490 don't add underline to preedit if not necessary
  - Resolves: rhbz#217521 extend grapheme cluster on ranges \u0c01-\u0c03 \u0c41-\u0c44


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.12
changelog:
  - Resolves: rhbz#218253 openoffice.org-2.1.0.oooXXXXX.vcl.filterzwatrender.patch
  - Resolves: rhbz#217348 openoffice.org-2.1.0.ooo70042.wmfoverflow.svtools.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.14
changelog:
  - Resolves: rhbz#216094 openoffice.org-2.1.0.ooo72349.svx.scriptrange.patch
  - Resolves: rhbz#216094 openoffice.org-2.1.0.ooo72350.svx.showsizes.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.17
changelog:
  - Resolves: rhbz#216094 patches not applied
  - Resolves: rhbz#216089 if there is no font at all to handle something


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.19
changelog:
  - Resolves: rhbz#226967 starcalc overflow
  - Resolves: rhbz#222779 openoffice.org-2.2.0.ooo73863.vcl.imcommit.patch
  - Resolves: rhbz#222423 openoffice.org-2.1.0.ooo73485.vcl.filterzwatrender.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.21
changelog:
  - Resolves: rhbz#222800 utf-8 hyperlink export
  - Resolves: rhbz#222817 sorting glyphs causes spacing mismatch
  - Resolves: rhbz#226737 combining character cursor positioning
  - Resolves: rhbz#228254 crash if print a document as .pdf and then print as .ps
  - Resolves: rhbz#234421 printing current spreadsheet prints all sheets
  - Resolves: rhbz#233964 pa_IN column delete translation incorrect
  - Resolves: rhbz#222681 implement vba LIKE keyword
  - Resolves: rhbz#223190 make a final fallback to a font with a notdef glyph


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.22
changelog:
  - Resolves: rhbz#228629 or_IN print dialog translation incorrect
  - Resolves: rhbz#237649 crash on undo in impress


author: Caolan McNamara <caolanm@redhat.com> - 1:2.3.0-6.7
changelog:
  - Resolves: rhbz#442535 allow arbitrary sheet names
  - Resolves: rhbz#363301 allow canvas to function without XRender
  - Resolves: rhbz#441128 a11y crash in impress
  - Resolves: rhbz#450842 crash on insert file with passworded file
  - Resolves: rhbz#442537 don't let vertical cells overflow
  - Resolves: rhbz#206400 backport margin notes implementation


author: David Tardon <dtardon@redhat.com> - 1:2.3.0-6.8
changelog:
  - CVE-2008-3282 numeric truncation error in OOo memory allocator
  - Resolves: rhbz#458065 Handle memory allocation exceptions in bitmap handling code
  - Resolves: rhbz#439050 Calc--Differing behavior in opening some
    hyperlink protocols


author: David Tardon <dtardon@redhat.com> - 1:2.3.0-6.9
changelog:
  - CVE-2008-2237 OpenOffice.org WMF integer overflow
  - Resolves: rhbz#462645 integer overflow in WMF parser


author: Caolán McNamara <caolanm@redhat.com> - 1:2.3.0-6.11
changelog:
  - Resolves: rhbz#461984 Cannot use -headless with wrapper scripts
  - Resolves: rhbz#469302 add openoffice.org-3.0.0.ooo88446.ucb.rename.patch
  - Resolves: rhbz#469330 Euro Converter type detection
  - Resolves: rhbz#470210 Failed to save refresh property of native format
  - Resolves: rhbz#469990 Crash in numbering during html import
  - Resolves: rhbz#456845 Fix GdkPixbuf warning on launch of math
  - Resolves: rhbz#462055 Better rtf export encodings for CJK text
  - Resolves: rhbz#469321 Import newer format .odbs
  - Resolves: rhbz#469615 Allow .met files to be opened from command-line
  - Resolves: rhbz#480829 Writer layout crash in certain tables
  - Resolves: rhbz#476959 Better .doc TOC export
  - Resolves: rhbz#476221 Retain use mods to psprint.conf
  - Resolves: rhbz#480369 Don't keep print dialog around after closed
  - Resolves: rhbz#469630 Don't have a non-functional next button in formula wizard
  - Resolves: rhbz#469145 The whole paragraph words cut are displayed at "Undo" line


author: David Tardon <dtardon@redhat.com> - 1:2.3.0-6.12
changelog:
  - Resolves: rhbz#519167 openoffice.org various flaws
  - CVE-2009-0200, CVE-2009-0201
  - Resolves: rhbz#529751 openoffice.org various flaws
  - CVE-2009-2950 GIF file parsing heap overflow
  - CVE-2009-2949 integer overflow in XPM processing


author: David Tardon <dtardon@redhat.com> - 1:3.1.1-19.9
changelog:
  - Resolves: rhbz#642185 openoffice.org various flaws
  - CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
    descriptions and OXT extension files
  - CVE-2010-3451 Array index error by insecure parsing of broken rtf
    tables
  - CVE-2010-3452 Integer signedness error (crash) by processing certain
    RTF tags
  - CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
    with WW8 list styles with specially-crafted count of list levels
  - CVE-2010-3454 Array index error by scanning document typography
    information of certain *.doc files
  - CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.10
changelog:
  - Resolves: rhbz#642185 openoffice.org various flaws
  - CVE-2010-4253 heap based buffer overflow in PPT import
  - CVE-2010-4643 heap based buffer overflow when parsing TGA files


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.10.2
changelog:
  - Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
    overflows in JPEG, PNG and BMP reader implementations


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.10.3
changelog:
  - Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
    processing invalid Escher graphics records length in the Powerpoint
    documents


author: Šimon Lukašík <slukasik@redhat.com> - 1.0.0-2
changelog:
  - dlopen libopenscap_sce.so.{current-age} explicitly
    That allows for SCE to work without openscap-engine-sce-devel


author: Doug Ledford <dledford@redhat.com>
changelog:
  - Split the libs out from the programs in case anyone needs 32bit libs
    on 64bit arches
  - Add an init script to start the subnet manager, defaults to off, must
    be enabled on at least one machine in the subnet.


author: Doug Ledford <dledford@redhat.com> - 3.2.2-3
changelog:
  - Fix a botched port of the Fedora opensmd init script that failed to replace
    all instances of /etc/rdma with /etc/ofed
  - Resolves: bz465150


author: Doug Ledford <dledford@redhat.com> - 3.2.6-1.el5
changelog:
  - Update to ofed 1.4.1-rc3 version
  - Remove dead patch
  - Update conf file format to version 3 format
  - Update init script for conf file usage change
  - Update logrotat file for log file name change
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 3.2.6-2.el5
changelog:
  - Fix an incorrect use of #elif that makes later gcc versions give an error
  - Fix compile flags to include -fno-strict-aliasing that is also needed on
    later gcc versions


author: Doug Ledford <dledford@redhat.com> - 3.3.3-1.el5
changelog:
  - Update to latest upstream version
  - Own the var/cache/opensm directory
  - don't include the bare .so file in the libs package, put it in devel
  - Related: bz518218


author: Ville Skyttä <ville.skytta at iki.fi> - 1.5.2-0.1.pre1
changelog:
  - Fix build dependencies.
  - Require exact version of main package in -devel.
  - Build with dependency tracking disabled.
  - Add %{_datadir}/xml to default search path.
  - Run test suite during build.
  - Add URL tag.
  - Use %find_lang.
  - Cosmetic improvements.


author: Tim Waugh <twaugh@redhat.com> 1.5.2-4
changelog:
  - Give IDs to nodes in the release notes source to prevent releasenotes.html
    having multilib conflicts (bug #210570).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Patch to build with neither RSA nor RSAref.
  - Miscellaneous FHS-compliance tweaks.
  - Fix for possibly-compressed man pages.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Move condrestart to server postun.
  - Move key generation to init script.
  - Actually use the right patch for moving the key generation to the init script.
  - Clean up the init script a bit.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 2.1.1p4, which includes fixes for config file parsing problems.
  - Move the init script back.
  - Add Damien's quick fix for wackiness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 20000823 snapshot.
  - Change subpackage requirements from %{version} to %{version}-%{release}
  - Back out the pipe patch.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update x11-askpass to 1.0.2. (#17835)
  - Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
    always find them in the right place. (#17909)
  - Set the default path to be the same as the one supplied by /bin/login, but
    add /usr/X11R6/bin. (#17909)
  - Try to handle obsoletion of ssh-server more cleanly.  Package names
    are different, but init script name isn't. (#17865)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
    build PAM authentication in.
  - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
  - Clean out no-longer-used patches.
  - Patch ssh-add to try to add both identity and id_dsa, and to error only
    when neither exists.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to OpenSSH 2.3.0p1.
  - Update to x11-askpass 1.1.0.
  - Enable keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Resync with conditional options in Damien Miller's .spec file for an errata.
  - Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add the primes file from the latest snapshot to the main package (#20884).
  - Add the dev package to the prereq list (#19984).
  - Remove the default path and mimic login's behavior in the server itself.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Disable the built-in MD5 password support.  We're using PAM.
  - Take a crack at doing keyboard-interactive authentication with PAM, and
    enable use of it in the default client configuration so that the client
    will try it when the server disallows password authentication.
  - Build with debugging flags.  Build root policies strip all binaries anyway.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge multiple PAM text messages into subsequent prompts when possible when
    doing keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to x11-askpass 1.1.1. (#21301)
  - Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
    succeeded, to allow public-key authentication after a failure with "none"
    authentication.  (#21268)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - More gettextizing.
  - Close all files after going into daemon mode (needs more testing).
  - Extract patch from CVS to handle auth banners (in the client).
  - Extract patch from CVS to handle compat weirdness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't open a PAM session until we've forked and become the user (#25690).
  - Apply Andrew Bartlett's patch for letting pam_authenticate() know which
    host the user is attempting a login from.
  - Resync with parts of Damien Miller's openssh.spec from CVS.
  - Don't expose KbdInt responses in debug messages (from CVS).
  - Detect and handle errors in rsa_{public,private}_decrypt (from CVS).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.0p1.
  - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
  - Resync with parts of Damien Miller's openssh.spec from CVS, including
    update of x11 askpass to 1.2.0.
  - Only require openssl (don't prereq) because we generate keys in the init
    script now.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.1p1.
  - Add init script mods from Pekka Savola.
  - Tweak the init script to match the CVS contrib script more closely.
  - Redo patch to ssh-add to try to adding both identity and id_dsa to also try
    adding id_rsa.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Redo patch to move pam_open_session after the server setuid()s to the user.
  - Rework the nopam patch to use be picked up by autoconf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Chuck the closing patch.
  - Add a trigger to add host keys for protocol 2 to the config file, now that
    configuration file syntax requires us to specify it with HostKey if we
    specify any other HostKey values, which we do.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Revert the patch to move pam_open_session.
  - Init script and spec file changes from Pekka Savola. (#28750)
  - Patch sftp to recognize '-o protocol' arguments. (#29540)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
  - don't enable challenge-response by default until we find a way to not
    have too many userauth requests (we may make up to six pubkey and up to
    three password attempts as it is)
  - remove build dependency on rsh to match openssh.com's packages more closely


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p2
  - call setcred() again after initgroups, because the "creds" could actually
    be group memberships


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make do_pam_setcred() smart enough to know when to establish creds and
    when to reinitialize them
  - add in a couple of other fixes from Damien for inclusion in the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - mention that challengereponse supports PAM, so disabling password doesn't
    limit users to pubkey and rsa auth (#34378)
  - bypass the daemon() function in the init script and call initlog directly,
    because daemon() won't start a daemon it detects is already running (like
    open connections)
  - require the version of openssl we had when we were built


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove explicit openssl requirement, fixes builddistro issue
  - make initscript stop() function wait until sshd really dead to avoid 
    races in condrestart


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish marking strings in the init script for translation
  - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
    at startup (change merged from openssh.com init script, originally by
    Pekka Savola)
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
    to be removed before the next beta cycle because it's a big departure
    from the upstream version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix an error parsing the new default sshd_config
  - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
    dealing with comments right


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change Copyright: BSD to License: BSD
  - add Markus Friedl's unverified patch for the cookie file deletion problem
    so that we can verify it
  - drop patch to check if xauth is present (was folded into cookie patch)
  - don't apply gssapi patches for the errata candidate
  - clear supplemental groups list at startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull cvs patch to add session initialization to no-pty sessions
  - pull cvs patch to not cut off challengeresponse auth needlessly
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed (#49263)


author: Nalin Dahyabhai <nalin@redhat.com> 2.9p2-7
changelog:
  - fix scp's server's reporting of file sizes, and build with the proper
    preprocessor define to get large-file capable open(), stat(), etc.
    (sftp has been doing this correctly all along) (#51827)
  - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
  - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
  - mark profile.d scriptlets as config files (#42337)
  - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
  - change a couple of log() statements to debug() statements (#50751)
  - pull cvs patch to add -t flag to sshd (#28611)
  - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.0p1
  - update to x11-ssh-askpass 1.2.4.1
  - change build dependency on a file from pam-devel to the pam-devel package
  - replace primes with moduli


author: Nalin Dahyabhai <nalin@redhat.com> 3.0p1-1
changelog:
  - merge some of Damien Miller <djm@mindrot.org> changes from the upstream
    3.0p1 spec file and init script


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
changelog:
  - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support


author: Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
changelog:
  - update to SNAP-20020220 for testing purposes (you've been warned, if there's
    anything to be warned about, gss patches won't apply, I don't mind)


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
changelog:
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2gss
changelog:
  - reintroduce Simon's gssapi patches
  - add buildprereq for autoconf253, which is needed to regenerate configure
    after applying the gssapi patches
  - refresh to the latest version of Markus's patch to build properly with
    older versions of OpenSSL


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-3
changelog:
  - pull patch from CVS to avoid printing error messages when some of the
    default keys aren't available when running ssh-add
  - refresh to current revisions of Simon's patches


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-4
changelog:
  - drop buildreq on db1-devel
  - require pam-devel by package name
  - require autoconf instead of autoconf253 again


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-1
changelog:
  - update to 3.3p1
  - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
  - disable gtk2 askpass
  - require pam-devel by filename rather than by package for erratum
  - include patch from Solar Designer to work around anonymous mmap failures


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-2
changelog:
  - rework the close-on-exit docs
  - include configuration file man pages
  - make use of nologin as the privsep shell optional


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-2
changelog:
  - patch PAM configuration to use relative path names for the modules, allowing
    us to not worry about which arch the modules are built for on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-6
changelog:
  - move scp to the -clients subpackage, because it directly depends on ssh
    which is also in -clients (#84329)


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-6
changelog:
  - modify patch which clears the supplemental group list at startup to only
    complain if setgroups() fails if sshd has euid == 0
  - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-11
changelog:
  - apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
  - skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - additional fix for apparently-never-happens double-free in buffer_free()
  - extend fix for #103998 to cover SSH1


author: Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
changelog:
  * Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
  - Built RHLE3 U2 update package.


author: Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
changelog:
  - request gssapi-with-mic by default but not delegation (flag day for anyone
    who used previous gssapi patches)
  - no longer request x11 forwarding by default


author: Nalin Dahyabhai <nalin@redhat.com> 3.9p1-8
changelog:
  - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
    to enable display of a vendor patch level during version exchange (#120285)
  - configure with --disable-strip to build useful debuginfo subpackages


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - change permissions on pam.d/sshd to 0644 (#64697)
  - patch initscript so it doesn't kill opened sessions if
    the sshd daemon isn't running anymore (#67624)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-10
changelog:
  - enable trusted forwarding by default if X11 forwarding is 
    required by user (#137685 and duplicates)
  - disable protocol 1 support by default in sshd server config (#88329)
  - keep the gnome-askpass dialog above others (#69131)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-11
changelog:
  - don't call syslog in signal handler
  - allow password authentication when copying from remote
    to remote machine (#103364)


author: Tomas Mraz <tmraz@redhat.com> 4.0p1-2
changelog:
  - fixed Local/RemoteForward in ssh_config.5 manpage
  - fix fatal when Local/RemoteForward is used and scp run (#153258)
  - don't leak user validity when using krb5 authentication


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-3
changelog:
  - fix small regression caused by the nologin patch (#161956)
  - fix race in getpeername error checking (mindrot #1054)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-4
changelog:
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - don't use X11 port which can't be bound on all IP families (#163732)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-5
changelog:
  - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
  - install ssh-copy-id from contrib (#88707)


author: Tomas Mraz <tmraz@redhat.com> 4.2p1-2
changelog:
  - use include instead of pam_stack in pam config
  - use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
  - upstream patch for displaying authentication errors


author: Warren Togami <wtogami@redhat.com> - 4.2p1-7
changelog:
  - xorg-x11-devel -> libXt-devel
  - rebuild for new xauth location so X forwarding works
  - buildreq audit-libs-devel
  - buildreq automake for aclocal
  - buildreq imake for xmkmf
  -  -D_GNU_SOURCE in flags in order to get it to build
     Ugly hack to workaround openssh defining __USE_GNU which is
     not allowed and causes problems according to Ulrich Drepper
     fix this the correct way after FC5test1


author: Nalin Dahyabhai <nalin@redhat.com> - 4.2p1-8
changelog:
  - work around missing gccmakedep by wrapping makedepend in a local script
  - remove now-obsolete build dependency on "xauth"


author: Tomas Mraz <tmraz@redhat.com> - 4.2p1-9
changelog:
  - drop x11-ssh-askpass from the package
  - drop old build_6x ifs from spec file
  - improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
    characters to person looking at the display
  - less hackish fix for the __USE_GNU problem


author: Tomas Mraz <tmraz@redhat.com> - 4.3p1-2
changelog:
  - fixed another place where syslog was called in signal handler
  - pass locale environment variables to server, accept them there (#179851)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-3
changelog:
  - enable the subprocess in chroot to send messages to system log
  - sshd should prevent login if audit call fails


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
changelog:
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
changelog:
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-8
changelog:
  - drop the pam-session patch from the previous build (#201341)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-9
changelog:
  - don't report duplicate syslog messages, use correct local time (#189158)
  - don't allow spnego as gssapi mechanism (from upstream)
  - fixed memleaks found by Coverity (from upstream)
  - allow ip options except source routing (#202856) (patch by HP)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10
changelog:
  - improve gssapi-no-spnego patch (#208102)
  - CVE-2006-4924 - prevent DoS on deattack detector (#207957)
  - CVE-2006-5051 - don't call cleanups from signal handler (#208459)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10.1
changelog:
  - CVE-2006-5794 - properly detect failed key verify in monitor (#214642)
  - kill all ssh sessions when stop is called in halt or reboot runlevel (#213008)
  - remove -TERM option from killproc so we don't race on sshd restart (#213490)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-13
changelog:
  - improved pam_session patch so it doesn't regress, the patch is necessary
    for the pam_session_close to be called correctly as uid 0 (#167488)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-21
changelog:
  - fix an information leak in Kerberos password authentication (CVE-2006-5052)
    (#234638)
  - correctly setup context when empty level requested (#234951)


author: Dennis Gregorovic <dgregor@redhat.com> - 4.3p2-26.el5_2.1
changelog:
  - CVE-2007-4752 - Prevent ssh(1) from using a trusted X11 cookie if creation of an
    untrusted cookie fails (#280361)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-28
changelog:
  - use OpenSSL RNG directly (needed for FIPS-140-2 compliance)
  - when in FIPS mode do not try to use algorithms which are not allowed (#447936)
  - improve transfer speed on high latency connections (#227722)
  - more correct 'service sshd status' reporting (#430877)
  - add logging support to the sftp server (#452619)
  - small scp manual page improvement (#433381)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-32
changelog:
  - log if FIPS mode is initialized (#492363)
  - check the integrity of the binaries in the FIPS mode (#467268)


author: Jan F. Chadima <jchadima@redhat.com> - 4.3p2-33
changelog:
  - fix scp hangup on exit (#454812)
  - call integrity checks only on binaries which are part of the OpenSSH FIPS
    modules


author: Jan F. Chadima <jchadima@redhat.com> - 4.3p2-38
changelog:
  - set better buffer length in latency patch (#508914)
  - close error file descriptor before running external subsystem (#530358)
  - prevent initscript from hanging when generates the keys (#531738)


author: Jan F. Chadima <jchadima@redhat.com> - 4.3p2-78
changelog:
  - set cloexec on accept socket (#642935)
  - add umask to sftp (#720598)
  - enable lastolg for big uids (#706315)


author: Jan F. Chadima <jchadima@redhat.com> - 4.3p2-79
changelog:
  - add LANGUAGE to the sent/accepted evvironment (#710229)
  - ssh-copy-id copies now id_rsa.pub by default (#731930)
  - repairs man pages (#731925)


author: Petr Lautrbach <plautrba@redhat.com> 4.3p2-81
changelog:
  - make ssh(1)'s ConnectTimeout option apply to both the TCP connection and
    SSH banner exchange (#750725)


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to 
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-9
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#250581)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309881)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321221)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-10
changelog:
  - compile with -march=z900 on s390 for performance improvements (#250818)
  - make ssl session ID matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-2
changelog:
  - more changes for FIPS validation (#444800)
  - correctly initialize default CA paths (#450987)
  - allow disabling zlib support through environment (#442624)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-5
changelog:
  - implement the integrity checking inside libcrypto so OpenSSL
    can be used in FIPS mode by the fipscheck library


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-8
changelog:
  - support multiple CRLs with same subject in a store (#457134)
  - fix CVE-2009-0590 - reject incorrectly encoded ASN.1 strings (#492304)
  - seed FIPS rng directly from kernel random device
  - do not require fipscheck to build the package (#475798)
  - call pairwise key tests in FIPS mode only (#479817)
  - do not crash when parsing bad mime data (#472440)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-13
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-14
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-15
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-17
changelog:
  - fix CVE-2010-4180 - completely disable code for
    SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG (#659462)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-19
changelog:
  - presort list of ciphers available in SSL (#688901)
  - accept connection in s_server even if getaddrinfo() fails (#561260)
  - point to openssl dgst for list of supported digests (#608639)
  - fix handling of future TLS versions (#599112)
  - added VeriSign Class 3 Public Primary Certification Authority - G5
    and StartCom Certification Authority certs to ca-bundle (#675671, #617856)
  - upstream fixes for the CHIL engine (#622003, #671484)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-21
changelog:
  - add known answer test for SHA2 algorithms (#740866)
  - make default private key length in certificate Makefile 2048 bits
    (can be changed with PRIVATE_KEY_BITS setting) (#745410)
  - fix incorrect return value in parse_yesno() (#726593)
  - added DigiCert CA certificates to ca-bundle (#735819)
  - added a new section about error states to README.FIPS (#628976)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-22
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4109 - double free in policy checks (#771771)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-23
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-27
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-30
changelog:
  - fix CVE-2014-0221 - recursion in DTLS code leading to DoS
  - fix CVE-2014-3505 - doublefree in DTLS packet processing
  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  - fix CVE-2014-3508 - fix OID handling to avoid information leak
  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-33
changelog:
  - fix CVE-2014-8275 (without introduction of CVE-2015-0286) - various
    certificate fingerprint issues
  - fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
    ciphersuites and on server
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0292 - integer underflow in base64 decoder
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: Kai Engert <kaie@redhat.com> 0.9.8e-34
changelog:
  - Rebase ca-bundle.crt to the upstream version 2.4 with legacy
    modifications. For compatibility reasons, several CA certificates with
    RSA sizes of 1024 bits are still included.
  - Add a patch to the source RPM that documents the changes from the
    upstream version.


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-35
changelog:
  - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
  - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
  - fix CVE-2015-4000 - prevent the logjam attack on client - restrict
    the DH key size to at least 768 bits (limit will be increased in future)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-38
changelog:
  - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
  - disable SSLv2 in the generic TLS method (can be reenabled
    by setting environment variable OPENSSL_ENABLE_SSL2)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-3
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-4
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - more fixes for constant time/memory access for DSA signature algorithm
  - updated ICA engine patch


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-6
changelog:
  - fix a few rpmlint warnings
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - make libica build in brew


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-7
changelog:
  - fixed sha1 on 2gb boundary (patch from upstream) (#189492)
  - enable compilation of updated assembler code on IA64 (#180091)
  - correct verification of CA certs in SSL (#201005)


author: Bill Nottingham <notting@redhat.com> - 2.1.4-6
changelog:
  - don't run by default
  - don't create/chmod directories in %post, just include them with the
    right perms
  - fix debuginfo
  - fix docs


author: Harald Hoyer <harald@redhat.com> - 2.1.5-1
changelog:
  - added selinux patch from Daniel Walsh
  - initscript now uses translated strings
  - version 2.1.5 with minor fixes


author: Harald Hoyer <harald@redhat.com> - 2.3.0-1
changelog:
  - version 2.3.0
  - reimported specfile
  - PIEd openswan
  - cleaned up initial config files and added include directives
    for easy config drop in


author: Harald Hoyer <harald@redhat.com> - 2.3.1-3
changelog:
  - added openswan-2.3.1-nat_t_aggr.patch
  - added openswan-2.3.1-iproute2.patch
  - added openswan-2.3.1-cisco.patch
  - NAT-T/XAUTH/AGGR-MODE is now possible with a Cisco VPN 3000


author: Harald Hoyer <harald@redhat.com> - 2.4.4-1.1
changelog:
  - version 2.4.4
  - fixes NISCC Vulnerability Advisory 273756/NISCC/ISAKMP
  - fixes NISCC Advisory 3756/NISCC/ISAKMP


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-3
changelog:
  - Removed _smp_mflags macro from from the spec file build section
  - Added BuildRequires for xmlto
  - Changed License from GPL to GPL+
  - removed klips ifdefs from spec file
  - Added patch to move example configs to doc dir
  - Added a patch to make the link to init script relative, 
    for chroot environments


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-4
changelog:
  - Removed use of xmlto and the BuildRequires
  - moved scripts from /usr/lib to /usr/libexec
  - removed man3 pages for libopenswan functions (we don't deliver)


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-6
changelog:
  - Moved everything else out of /usr/lib
  - Added tmraz's patch to remove extra slashes in makefile
  - Removed macros from changelog entries


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-8
changelog:
  Related: rhbz#235224
  - rpmdiff spotted these:
  - Cleaned out unused man page
  - patch error in barf script


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-9
changelog:
  - cleanup some init problems
  Resolves: rhbz#430149 openswan init script errors
  Resolves: rhbz#430150 openswan emits spurious warnings


author: Steve Conklin <sconklin@redhat.com> - 2.6.05-1
changelog:
  - Latest upstream
  - remove selinux test and message from verify script
  - forgot the following bz earlier
  Resolves: rhbz#253052 Request for IPSec IKEv2


author: Steve Conklin <sconklin@redhat.com> - 2.6.09-1
changelog:
  Resolves: rhbz#432315
  Resolves: rhbz#432805
  Resolves: rhbz#432821
  - Moved to latest upstream
  - removed init script patch and will use upstream
  - Added protostack=netkey to ipsec.conf
  - New patch to include definition of HOST_NAME_MAX


author: Steve Grubb <sgrubb@redhat.com> - 2.6.11-1
changelog:
  - new upstream release
  Resolves: #438826 openswan IKEv2 hangs between intel and ppc64 machines
  Resolves: #439985 opeswan IKEv2 responder fails when encr=aes and dh=modp1024


author: Steve Grubb <sgrubb@redhat.com> - 2.6.12-1
changelog:
  - new upstream release
  Resolves: #432821 left/rightsourceip tags not working
  Resolves: #439985 opeswan IKEv2 responder fails when encr=aes and dh=modp1024
  Resolves: #441588 openswan IKEv2 crashes when interoperating with racoon2
  Resolves: #442333 AVC denials on start of openswan host-to-host tunnel


author: Steve Grubb <sgrubb@redhat.com> - 2.6.14rc7-1
changelog:
  - new upstream release
  Resolves: #439771 openswan and strongswan fail to interoperate with IKEv2
  Resolves: #441383 openswan should negotiate CCM algorithm
  Resolves: #442955 openswan doesn't accept null esp auth alg
  Resolves: #442956 openswan logging segfault when phase2alg=null
  Resolves: #444166 openswan IKEv2 crashes when interoperating with racoon2


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-1
changelog:
  - Upstream release
  - Major patches for support of NSS and fipscheck libraries
  Resolves: #444801 FIPS-140-2: Meet certification requirements for pluto
  Resolves: #469763 FIPS-140: Add integrity checking
  Resolves: #438998 Openswan's 'cannot route...' problem
  Resolves: #449725 Openswan seg fault using manual keying.
  Resolves: #463931 /etc/ipsec.conf includes /etc/ipsec.d/*.conf which is missing
  Resolves: #466861 avc: denied { write } for pid=2193 comm="ip" path="/var/run/pluto/ipsec_setup.out"
  Resolves: #487708 Misleading package description


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-2
changelog:
  - Revised patch to support fips integrity check functionality
  Resolves: #469763 FIPS-140: Add integrity checking


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-4
changelog:
  - Added support for using PSK with NSS (rhbz 507844)
  - Fixed several warnings and undid unnecessary comments
  - Updated README.nss with an example configuration
  - Fixed Openswan ASN.1 parser vulnerability (CVE-2009-2185)
  Resolves: CVE-2009-2185
  Resolves: #507844


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-6
changelog:
  - Addresses bzs 524189 and 524191
  - Addresses key zeroization
  - Updates package description 
  Resolves: #524191


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-9
changelog:
  - Missed some changes in spec file, and because of that, changes
    for the bz 584987 did not get enabled. Rechecking correct spec
    file.
  Resolves: #584987


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Hack to get correct syscall for ia64.
  - Hack to get get timer interupt data.
  - Fix doc/Makefile.am.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Syscall value for x86_64.
  - Update manpage and documentation.
  - Revise utils/* to deprecate old.
  - Include CPU_P4_HT2 in op_help.c
  - Revise how CPU_TIMER_INT handled.
  - Apply cookie patch for all archs.
  - Correct autogen.sh location.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - turn on build for ppc64
  - change order op_visualise searches lib directories.
  - revise oprofile-0.4-deprecate patch.
  - utils/oprofile kernel range check, --save, and do_dump corrections.
  - update gui to use "--separate=library".


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Use /proc/ksym for module information.
  - Correct separate debuginfo handling.
  - Configure with --enable-abi.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - check min event counts.
  - revised op_to_source output to avoid changing line count.
  - p4event events revised.
  - hammer events revised.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - put in s390.
  - Fix includes for asserts.
  - Make sure elinks is available for html to txt conversion.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Eliminate AUTOMAKE and ACLOCAL definitions.
  - Correct QTDIR and add oprof_start to file manifests.


author: Will Cohen <wcohen@redhat.com> - 0.9.2-6
changelog:
  - Correct backtrace documentation. Resolves: rhbz#214793.
  - Correct race condition. Resolves: rhbz#220116.


author: Will Cohen <wcohen@redhat.com> - 0.9.3-7
changelog:
  - Rebase on 0.9.3 release. Resoves: rhbz #253109, 
  - Add Greyhound family 0x10 support to oprofile. Resolves: rhbz #232956
  - Cell support for oProfile. Resolves: rhbz #226085
  - 970MP must be treated as a different target. Resolves: rhbz#232041
  - Default POWER6 oprofile event incorrect. Resolves: rhbz #238132
  - typo in opreport man page. Resolves: rhbz #222481
  - Oprofile cant demangle 64bit c++ symbols. Resolves: rhbz #244399
  - OProfile on DD3.0 or later POWER5+ fails. Resolves: rhbz #244717
  - LoP Toolchain, OProfile XML output. Resolves: rhbz #253106
  - Add support for POWER5+ revision 3.0 an.... Resolves: rhbz #253410


author: Will Cohen <wcohen@redhat.com> - 0.9.4-7
changelog:
  - Rebase on 0.9.4 release to provide java support. Resolves: rhbz #474666
  - Correct handling of --verbose. Resolves: rhbz #454969


author: Will Cohen <wcohen@redhat.com> - 0.9.4-12
changelog:
  - Resolves: rhbz518480 Correct daemonization of oprofiled on ia64.
  - Resolves: rhbz450642 Handle possible null sym table.


author: Will Cohen <wcohen@redhat.com> - 0.9.4-14
changelog:
  - Resolves: rhbz498619 Oprofile: Add support for Nehalem-EP processors.
  - Resolves: rhbz527679 Rebuild with fixed version of binutils.


author: Will Cohen <wcohen@redhat.com> - 0.9.4-19
changelog:
  - Resolves: rhbz643476 Oprofile: Add support for Intel Westmere.
  - Resolves: rhbz713667 Oprofile: Add support for Intel Sandy Bridge.


author: Kevin Fenzi <kevin@tummy.com> - 4.2.0-2
changelog:
  - Fixed to use %find_lang
  - Removed generic INSTALL from %doc
  - Added BuildRequires for xfce-mcs-manager-devel


author: John (J5) Palmieri <johnp@redhat.com> - 1.0.0-2
changelog:
  - Add requirements on gnome-mag and newer version of control-center
  - remove .desktop file and make control-center start and configure orca


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - changed /dev/cdrom default user permissions back to 0600 in console.perms
    because some cdrom players open O_RDWR.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fixed glob/regexp confusion in pam_console, added kbd and fixed fb devices
  - added pam_xauth module


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - many bug fixes in pam_xauth
  - pam_console can now handle broken applications that do not set
    the PAM_TTY item.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.72
  - fix pam_unix password-changing bug
  - fix pam_unix's cracklib support
  - change package URL


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Add a patch to accept 'pts/N' in /etc/securetty as a match for tty '5'
    (which is what other pieces of the system think it is). Fixes bug #7641.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add new pam_stack module.
  - Install pwdb_chkpwd and unix_chkpwd as the current user for non-root builds


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add system-auth control file
  - let gethostname() call in pam_access.c be implicitly declared to avoid
    conflicting types if unistd.c declares it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add account management wrappers for pam_listfile, pam_nologin, pam_securetty,
    pam_shells, and pam_wheel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - symlink libpam.so to libpam.so.0.99.6.2, and likewise for libpam_misc
  - reverse order of checks in _unix_getpwnam for pam_unix


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix installation of pam_xauth man pages (#12417)
  - forcibly strip helpers (#12430)
  - try to make pam_console a little more discriminating


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_console's extra checks disableable
  - simplify extra check to just check if the device owner is root
  - add a debug log when pam_stack comes across a NULL item
  - have pam_stack hand items up to the parent from the child


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - need to make pam_console's checking a little stronger
  - only pass data up from pam_stack if the parent didn't already define it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a broken_shadow option to pam_unix
  - add all module README files to the documentation list (#16456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move pam_filter modules to /lib/security/pam_filter (#16111)
  - add pam_tally's application to allow counts to be reset (#16456)
  - move README files to the txts subdirectory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - give users /dev/cdrom* instead of /dev/cdrom in console.perms (#16768)
  - add nvidia control files to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix problems when looking for headers in /usr/include (#17236)
  - clean up a couple of compile warnings


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify the files list to make sure #16456 stays fixed
  - make pam_stack track PAM_AUTHTOK and PAM_OLDAUTHTOK items
  - add pam_chroot module
  - self-hosting fixes from the -devel split
  - update generated docs in the tree


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch from Dmitry V. Levin to have pam_stack propagate the PAM fail_delay
  - roll back the README for pam_xauth to actually be the right one
  - tweak pam_stack to use the parent's service name when calling the substack


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak pre script to be called in all upgrade cases
  - get pam_unix to only care about the significant pieces of passwords it checks
  - add /usr/include/db1/db.h as a build prereq to pull in the right include
    files, no matter whether they're in glibc-devel or db1-devel
  - pam_userdb.c: include db1/db.h instead of db.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add RLIMIT_LOCKS to pam_limits (patch from Jes Sorensen) (#20542)
  - link pam_userdb to Berkeley DB 2.x to match 6.2's setup correctly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix similar() function in pam_cracklib (#14740)
  - fix example in access.conf (#21467)
  - add conditional compilation for building for 6.2 (for pam_userdb)
  - tweak post to not use USESHADOW any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix handling of "nis" when changing passwords by adding the checks for the
    data source to the password-updating module in pam_unix
  - add the original copyright for pam_access (fix from Michael Gerdts)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge to 0.74
  - make console.perms match perms set by MAKEDEV, and add some devfs device names
  - add 'sed' to the buildprereq list (#24666)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually time out when attempting to lckpwdf() (#25889)
  - include time.h in pam_issue (#25923)
  - update the default system-auth to the one generated by authconfig 4.1.1
  - handle getpw??? and getgr??? failures more gracefully (#26115)
  - get rid of some extraneous {set,end}{pw,gr}ent() calls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: change the documented default config file to reflect the defaults
  - pam_limits: you should be able to log in a total of maxlogins times, not
    (maxlogins - 1)
  - handle group limits on maxlogins correctly (#25690)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - own /etc/security
  - be more descriptive when logging messages from pam_limits
  - pam_listfile: remove some debugging code (#28346)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add pam_console_apply
  - /dev/pilot's usually a serial port (or a USB serial port), so revert its
    group to 'uucp' instead of 'tty' in console.perms
  - change pam_console's behavior wrt directories -- directories which are
    mount points according to /etc/fstab are taken to be synonymous with
    their device special nodes, and directories which are not mount points
    are ignored


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: error out on undefined classes in pam_console config file
  - console.perms: actually change the permissions on the new device classes
  - pam_console: add an fstab= argument, and -f and -c flags to pam_console_apply
  - pam_console: use g_log instead of g_critical when bailing out
  - console.perms: logins on /dev/vc/* are also console logins, from Douglas
    Gilbert via Tim Waugh


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: make 'trust' and 'deny' work together correctly
  - pam_wheel: also check the user's primary gid
  - pam_group: also initialize groups when called with PAM_REINITIALIZE_CRED


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove /dev/dri from console.perms -- XFree86 munges it, so it's outside of
    our control (reminder from Daryll Strauss)
  - add /dev/3dfx to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge up to 0.75
  - pam_unix: temporarily ignore SIGCHLD while running the helper
  - pam_pwdb: temporarily ignore SIGCHLD while running the helper
  - pam_dispatch: default to uncached behavior if the cached chain is empty


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_access: compare IP addresses with the terminating ".", as documented
    (patch from Carlo Marcelo Arenas Belon, I think) (#16505)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: add apm_bios to the list of devices the console owner can use
  - console.perms: add beep to the list of sound devices


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: change js* to js[0-9]*
  - include pam_aconf.h in more modules (patches from Harald Welte)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: fix logic bug when changing permissions on single
    file and/or lists of files
  - pam_console: return the proper error code (reported and patches
    for both from Frederic Crozat)
  - change deprecated Copyright: tag in .spec file to License:


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: don't error out if the group has no members, but is the user's
    primary GID (reported by David Vos)
  - pam_unix: preserve permissions on files which are manipulated (#43706)
  - pam_securetty: check if the user is the superuser before checking the tty,
    thereby allowing regular users access to services which don't set the
    PAM_TTY item (#39247)
  - pam_access: define NIS and link with libnsl (#36864)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: use /var/run/console instead of /var/lock/console for lock files
  - pam_issue: read the right number of bytes from the file


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-10
changelog:
  - pam_xauth: fix errors due to uninitialized data structure (fix from Tse Huong
    Choo)
  - pam_xauth: random cleanups
  - pam_console: use /var/run/console instead of /var/lock/console at install-time
  - pam_unix: fix preserving of permissions on files which are manipulated


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_stack: perform deep copy of conversation structures
  - include the static libpam in the -devel subpackage (#52321)
  - move development .so and .a files to %{_libdir}
  - pam_unix: don't barf on empty passwords (#51846)
  - pam_unix: redo compatibility with "hash,age" data wrt bigcrypt (#42394)
  - console.perms: add usb camera, scanner, and rio devices (#15528)
  - pam_cracklib: initialize all options properly (#49613)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modules: use getpwnam_r and friends instead of non-reentrant versions
  - pam_console: clear generated .c and .h files in "clean" makefile target


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-12
changelog:
  - noreplace configuration files in /etc/security
  - pam_console: update pam_console_apply and man pages to reflect
    /var/lock -> /var/run move


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_unix: use crypt() instead of bigcrypt() when salted field is less than
    the critical size which lets us know it was generated with bigcrypt()
  - use a wrapper to handle ERANGE errors when calling get....._r functions:
    defining PAM_GETPWNAM_R and such (for getpwnam, getpwuid, getgrnam,
    getgrgid, and getspnam) before including _pam_macros.h will cause them
    to be implemented as static functions, similar to how defining PAM_SM_xxx
    is used to control whether or not PAM declares prototypes for certain
    functions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_userdb: fix the key_only flag so that the null-terminator of the
    user-password string isn't expected to be part of the key in the db file,
    matching the behavior of db_load 3.2.9


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: rewrite to skip refcounting and just use a temporary file
    created using mkstemp() in /tmp


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: close a possible DoS due to use of dotlock-style locking in
    world-writable directories by relocating the temporary file to the target
    user's home directory
  - general: include headers local to this tree using relative paths so that
    system headers for PAM won't be pulled in, in case include paths don't
    take care of it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add cracklib as a buildprereq
  - pam_wheel: don't ignore out if the user is attempting to switch to a
    unprivileged user (this lets pam_wheel do its thing when users attempt
    to get to system accounts or accounts of other unprivileged users)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_mkhomedir: recurse into subdirectories properly
  - pam_mkhomedir: handle symlinks
  - pam_mkhomedir: skip over special items in the skeleton directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: don't just return if the user is root -- we'll want to set the
    priority (it could be negative to elevate root's sessions)
  - pam_issue: fix off-by-one error allocating space for the prompt string


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_tally: don't try to read past the end of faillog -- it probably contains
    garbage, which if written into the file later on will confuse /usr/bin/faillog


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_rhosts: allow "+hostname" as a synonym for "hostname" to jive better
    with the hosts.equiv(5) man page
  - use the automake install-sh instead of the autoconf install-sh, which
    disappeared somewhere between 2.50 and now


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-15
changelog:
  - reorder patches so that the reentrancy patch is applied last -- we never
    came to a consensus on how to guard against the bugs in calling applications
    which this sort of change addresses, and having them last allows for dropping
    in a better strategy for addressing this later on


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-16
changelog:
  - pam_xauth: always return PAM_SUCCESS or PAM_SESSION_ERR instead of PAM_IGNORE,
    matching the previous behavior (libpam treats PAM_IGNORE from a single module
    in a stack as a session error, leading to false error messages if we just
    return PAM_IGNORE for all cases)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-19
changelog:
  - fix a bug in the getpwnam_r wrapper which sometimes resulted in false
    positives for non-existent users


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-20
changelog:
  - pam_stack: fix some memory leaks (reported by Fernando Trias)
  - pam_chroot: integrate Owl patch to report the more common causes of failures


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-31
changelog:
  - libpam_misc: fix possible infinite loop in misc_conv (#62195)
  - pam_xauth: fix cases where DISPLAY is "localhost:screen" and the xauth
    key is actually stored using the system's hostname (#61524)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-36
changelog:
  - pam_timestamp: chown intermediate directories when creating them
  - pam_timestamp_check: add -d flag to poll


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-40
changelog:
  - pam_timestamp_check: check that stdio descriptors are open before we're
    invoked
  - add missing chroot.conf


author: Elliot Lee <sopwith@redhat.com> 0.75-42
changelog:
  - Since cracklib-dicts location will not be correctly detected without 
    that package being installed, add buildreq for cracklib-dicts.
  - Add patch57: makes configure use $LIBNAME when searching for cracklib 
    dicts, and error out if not found.


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-44
changelog:
  - fix syntax errors in pam_console's yacc parser which newer bison chokes on
  - forcibly set FAKEROOT at make install time


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-45
changelog:
  - create /lib/security, even if it isn't /%{_lib}/security, because we
    can't locate /lib/security/$ISA without it (noted by Arnd Bergmann)
  - clear out the duplicate docs directory created during %install


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-46
changelog:
  - pam_xauth: reintroduce ACL support, per the original white paper
  - pam_xauth: default root's export ACL to none instead of everyone


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-49
changelog:
  - modify calls to getlogin() to check the directory of the current TTY before
    searching for an entry in the utmp/utmpx file (#98020, #98826, CAN-2003-0388)


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-0
changelog:
  - update to 0.77 upstream release
    - pam_limits: limits now affect root as well
    - pam_nologin: returns PAM_IGNORE instead of PAM_SUCCESS unless "successok"
      is given as an argument
    - pam_userdb: correctly return PAM_AUTH_ERR instead of PAM_USER_UNKNOWN when
      invoked with the "key_only" argument and the database has an entry of the
      form "user-<wrongpassword>"
  - use a bundled libdb for pam_userdb.so because the system copy uses threads,
    and demand-loading a shared library which uses threads into an application
    which doesn't is a Very Bad Idea


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_succeed_if: fix thinko in argument parsing which would walk past the
    end of the argument list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_pwdb.so link with libnsl again so that it loads (#107093)
  - remove now-bogus buildprereq on db4-devel (we use a bundled copy for
    pam_userdb to avoid symbol collisions with other db libraries in apps)


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-15
changelog:
  - don't install _pam_aconf.h -- apps don't use it, other PAM headers which
    are installed don't use it, and its contents may be different for arches
    on a multilib system
  - check for linkage problems in modules at %install-time (kill #107093 dead)
  - add buildprereq on flex (#101563)


author: Dan Walsh <dwalsh@redhat.com> 0.77-19.sel
changelog:
  - Change unix_chkpwd to handle unix_passwd and unix_acct
  - This eliminates the need for pam modules to have read/write access to /etc/shadow.


author: Tomas Mraz <tmraz@redhat.com> 0.77-56
changelog:
  - #75454 fixed locking when changing password
  - #127054 
  - #125653 removed unnecessary getgrouplist call
  - #124979 added quiet option to pam_succeed_if


author: Tomas Mraz <tmraz@redhat.com> 0.77-61
changelog:
  - #129328 pam_env shouldn't abort on missing /etc/environment
  - #126985 pam_stack should always copy the conversation function 
  - #127524 add /etc/security/opasswd to files


author: Tomas Mraz <tmraz@redhat.com> 0.77-63
changelog:
  - Fix checking of group Development/Debug syntax in pam_limits
  - Drop fencepost patch as it was already fixed 
    by upstream change from 0.75 to 0.77
  - Fix brokenshadow patch


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - #87628 pam_timestamp remembers authorization after logout
  - #116956 fixed memory leaks in pam_stack


author: Tomas Mraz <tmraz@redhat.com> 0.77-66
changelog:
  - #77646 log failures when renaming the files when changing password
  - Log failure on missing /etc/security/opasswd when remember option is present


author: Tomas Mraz <tmraz@redhat.com> 0.78-1
changelog:
  - update to Linux-PAM-0.78
  - #140451 parse passwd entries correctly and test for failure
  - #137802 allow using pam_console for authentication


author: Tomas Mraz <tmraz@redhat.com> 0.78-5
changelog:
  - echo why tests failed when rebuilding
  - fixed some warnings and errors in pam_console for gcc4 build
  - improved parsing pam_console config file


author: Tomas Mraz <tmraz@redhat.com> 0.78-6
changelog:
  - add functionality for running handler executables from pam_console
    when console lock was obtained/lost
  - removed patches merged to pam-redhat


author: Tomas Mraz <tmraz@redhat.com> 0.78-8
changelog:
  - remove ownership and permissions handling from pam_console call
    pam_console_apply as a handler instead


author: Tomas Mraz <tmraz@redhat.com> 0.78-9
changelog:
  - fix wrong logging in pam_console handlers
  - add executing ainit handler for alsa sound dmix
  - #147879, #112777 - change permissions for dri devices


author: Tomas Mraz <tmraz@redhat.com> 0.79-3
changelog:
  - make pam_unix LSB 2.0 compliant even when SELinux enabled
  - #88127 - change both local and NIS passwords to keep them in sync,
    also fix a regression in passwd functionality on NIS master server


author: Tomas Mraz <tmraz@redhat.com> 0.79-5
changelog:
  - added auditing patch by Steve Grubb
  - added cleanup patches for bugs found by Steve Grubb
  - don't clear the shadow option of pam_unix if nis option used


author: Tomas Mraz <tmraz@redhat.com> 0.79-7
changelog:
  - pam_xauth: unset the XAUTHORITY variable on error, fix
    potential memory leaks
  - modify path to IDE floppy devices in console.perms (#155560)


author: Tomas Mraz <tmraz@redhat.com> 0.79-9
changelog:
  - update the pam audit patch to support newest audit library,
    audit also pam_setcred calls (Steve Grubb)
  - don't use the audit_fd as global static variable
  - don't unset the XAUTHORITY when target user is root


author: Tomas Mraz <tmraz@redhat.com> 0.79-10
changelog:
  - add the Requires dependency on audit-libs (#159885)
  - pam_loginuid shouldn't report error when /proc/self/loginuid
    is missing (#159974)


author: Tomas Mraz <tmraz@redhat.com> 0.80-1
changelog:
  - upgrade to new upstream sources
  - removed obsolete patches
  - pam_selinux module shouldn't fail on broken configs unless
    policy is set to enforcing (Dan Walsh)


author: Tomas Mraz <tmraz@redhat.com> 0.80-2
changelog:
  - fixed module tests so the pam doesn't require itself to build (#163502)
  - added buildprereq for building the documentation (#163503)
  - relaxed permissions of binaries (u+w)


author: Tomas Mraz <tmraz@redhat.com> 0.80-8
changelog:
  - process limit values other than RLIMIT_NICE correctly (#168790)
  - pam_unix: always honor nis flag on password change (by Aaron Hope)


author: Tomas Mraz <tmraz@redhat.com> 0.80-9
changelog:
  - don't include ps and pdf docs (#168823)
  - new common config file for configuration utilities
  - remove glib2 dependency (#166979)


author: Tomas Mraz <tmraz@redhat.com> 0.80-13
changelog:
  - fixed CAN-2005-2977 unix_chkpwd should skip user verification only if
    run as root (#168181)
  - link pam_loginuid to libaudit
  - support no tty in pam_access (#170467)
  - updated audit patch (by Steve Grubb)
  - the previous pam_selinux change was not applied properly
  - pam_xauth: look for the xauth binary in multiple directories (#171164)


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-1
changelog:
  - support netgroup matching in pam_succeed_if
  - upgrade to new release
  - drop pam_pwdb as it was obsolete long ago
  - we don't build static libraries anymore


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-2
changelog:
  - fix dangling symlinks in -devel (#175929)
  - link libaudit only where necessary
  - actually compile in audit support


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-1
changelog:
  - new upstream version
  - updated db4 to 4.3.29
  - added module pam_tally2 with auditing support
  - added manual pages for system-auth and config-util (#179584)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-2
changelog:
  - added try_first_pass option to pam_cracklib
  - use try_first_pass for pam_unix and pam_cracklib in
    system-auth (#182350)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-3
changelog:
  - added pam_namespace module written by Janak Desai (per-user /tmp
  support)
  - new pam-redhat modules version


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-4
changelog:
  - fixed console device class for irda (#189966)
  - make pam_console_apply fail gracefully when a class is missing


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-5
changelog:
  - the namespace instance init script is now in /etc/security (#190148)
  - pam_namespace: added missing braces (#190026)
  - pam_tally(2): never call fclose twice on the same FILE (from upstream)


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-1
changelog:
  - upgrade to new upstream version
  - make pam_console_apply not dependent on glib
  - support large uids in pam_tally, pam_tally2


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-2
changelog:
  - pam_console_apply shouldn't access /var when called with -r (#191401)
  - actually apply the large-uid patch
  - don't build hmactest in pam_timestamp so openssl-devel is not required
  - add missing buildrequires (#191915)


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-3
changelog:
  - use md5 implementation from pam_unix in pam_namespace
  - pam_namespace should call setexeccon only when selinux is enabled


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-5
changelog:
  - updated pam_namespace with latest patch by Janak Desai
  - merged pam_namespace patches
  - added buildrequires libtool
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-1
changelog:
  - updated to a new upstream release
  - added service as value to be matched and list matching to
    pam_succeed_if
  - namespace.init was missing from EXTRA_DIST


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-3
changelog:
  - don't report error in pam_selinux for nonexistent tty (#188722)
  - add pam_keyinit to the default system-auth file (#198623)


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-6
changelog:
  - revoke keyrings properly when pam_keyinit called more than once (#201048)
    patch by David Howells


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-7
changelog:
  - revoke keyrings properly when pam_keyinit called as root (#201048)
  - pam_succeed_if should return PAM_USER_UNKNOWN when getpwnam fails (#197748)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-1
changelog:
  - upgrade to new upstream version, as there are mostly bugfixes except
    improved documentation
  - add support for session and password service for pam_access and
    pam_succeed_if
  - system-auth: skip session pam_unix for crond service


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-2
changelog:
  - silence pam_succeed_if in default system-auth (#205067)
  - round the pam_timestamp_check sleep up to wake up at the start of the
    wallclock second (#205068)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.1
changelog:
  - preserve effective uid in namespace.init script (LSPP for newrole)
  - include /var/log/faillog and tallylog to filelist (#209646)
  - add ids to .xml docs so the generated html is always the same (#210569)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.4
changelog:
  - move setgid before setuid in pam_keyinit (#212329)
  - make username check in pam_unix consistent with useradd (#212153)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.7
changelog:
  - No shortcut on Password: in ja locale (#218271)
  - Revert to old euid and not ruid when setting euid in pam_keyinit (#219486)
  - Fix no answer to select_context question (#213812)
  - Rename selinux-namespace patch to namespace-level


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.14
changelog:
  - properly include /var/log/faillog and tallylog as ghosts
    and create them in post script (#209646)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.17
changelog:
  - pam_namespace: unmount poly dir for override users (#229689)
  - pam_namespace: use raw context for poly dir name (#227345)
  - pam_namespace: truncate long poly dir name (append hash) (#230120)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.18
changelog:
  - pam_console: always decrement use count (#233581)
  - pam_namespace: fix parsing config file with unknown users (#234513)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.21
changelog:
  - pam_namespace: better document behavior on failure (#237249)
  - pam_unix: split out passwd change to a new helper binary (#236316)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.23
changelog:
  - pam_unix: truncated MD5 passwords in shadow shouldn't match (#219258)
  - pam_limits: add limits.d support (#232700)
  - pam_limits, pam_time, pam_access: add auditing of failed logins (#232993)
  - pam_namespace: expand $HOME even when appended with text (#237163)
    original patch by Ted X. Toth
  - add some default limits for users in realtime group (#240123)
  - CVE-2007-3102 - prevent audit log injection through user name (#243204)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.25
changelog:
  - added and improved translations (#219124)
  - adjusted the default limits for realtime users (#240123)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.26
changelog:
  - removed realtime default limits (#240123) from the package as
    it caused regression on machines with nonexistent realtime group


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.27
changelog:
  - support sha256 and sha512 password hashes (#427389)
  - fixed in operator of pam_succeed_if module (#295151)
  - fixed audit option of pam_tally and pam_tally2 (#328281)
  - do not free putenved pointer in pam_xauth (#402391)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-4
changelog:
  - add pam_tty_audit module (#244352)
  - pam_cracklib: additional optional checks for password quality (#438994)
  - pam_lastlog: display failed login attempts if requested (#438990)
  - pam_unix: do not check new passwords through cracklib (#448860)
  - pam_unix: clear PAM_AUTHTOK item if new password is bad (#443872)
  - comment in the limits.conf manpage that rss limit is ignored (#459624)
  - allow larger entries in pammodutil_get functions (#445355)
  - pam_tally: do not leak fds in tally_check (#457024)
  - pam_loginuid: use correct format when printing uid type (#460263)
  - pam_rhosts_auth: correct test for IP address (#461917)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-5
changelog:
  - add group audio to sound devices when no console user owns them (#244688)
  - resolve pam access origin entry only when it makes sense (#459057)
  - silence the strict-aliasing warnings (#462647)
  - pam_keyinit: save old uid so we can revert to it (#466411)
  - pam_filter: make it use pty subsystem (#473970)
  - add pam_faildelay module to be able to set the failure delay (#476217)
  - pam_tty_audit: fix double free when open_only option is used (#476833)
  - allow root to change users passwords when helper is needed (#476904)
  - make package's requires more correct (#497570)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-8
changelog:
  - fix insecure dropping of priviledges in pam_xauth
    and pam_mail - CVE-2010-3316 (#637898), CVE-2010-3435 (#641335)
  - fix insecure executing of scripts with user supplied environment
    variables in pam_namespace - CVE-2010-3853 (#643043)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-9
changelog:
  - distinguish groups and users with the () syntax in pam_access
    if nodefgroup option is specified
  - do not truncate /var/log/faillog and /var/log/tallylog on upgrade
  - remove superfluous plurals in .po files


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-10
changelog:
  - optimize pam_listfile to use pam_modutil_user_in_group_nam_nam() (#551312)
  - export environment variables in pam_exec (#554518)
  - fix user name matching in pam_unix remember feature (#768087)
  - added pam_cracklib options maxclassrepeat and gecos_check
  - pam_pwhistory now always saves the old password even for root


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-12
changelog:
  - better keep also the regular environment variables for backwards
    compatibility with old pam_exec scripts


author: Tomas Mraz <tmraz@redhat.com> - 3-1
changelog:
  - new upstream version
  - added patch (slightly modified) by W. Michael Petullo to support
    operation from non-root accounts (#151914)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Seth Vidal's no_user_check flag
  - document no_user_check and skip_first_pass options in the man pages
  - rebuild against Kerberos 5 1.2 (release 15)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix prompting when the module's first in the stack and the user does not have
    a corresponding principal in the local realm
  - properly implement TGT validation
  - change a few non-error status messages into debugging messages
  - sync the README and the various man pages up


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - only try to delete ccache files once
  - ignore extra data in v4 TGTs, but log that we got some
  - require "validate" to be true to try validating, and fail if validation fails


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use the appdefault API to read krb5.conf if available
  - create v4 tickets in such a way as to allow 1.2.2 to not think there's
    something fishy going on


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a separate config file parser for compatibility with settings that
    predate the appdefault API
  - use a version script under Linux to avoid polluting the global namespace
  - don't have a default for afs_cells
  - need to close the file when we succeed in fixing permissions (noted by
    jlkatz@eos.ncsu.edu)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't twiddle ownerships until after we get AFS tokens
  - use the current time instead of the issue time when storing v4 creds, since
    we don't know the issuing host's byte order
  - depend on a PAM development header again instead of pam-devel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fixup the man page
  - log return code from k_setpag() when debugging
  - create credentials and get tokens when setcred is called for REINITIALIZE


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't fail to fixup the krb5 ccache if something goes wrong obtaining
    v4 credentials or creating a krb4 ticket file (#33262)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - treat semicolons as a comment character, like hash marks (bug reported by
    Greg Francis at Gonzaga University)
  - use the [:blank:] equivalence class to simplify the configuration file parser
  - don't mess with the real environment
  - implement mostly-complete aging support


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't delete tokens unless we're also removing ticket files (report and
    patch from Sean Dilda)
  - report initialization errors better


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add max_timeout, timeout_shift, initial_timeout, and addressless options
    (patches from Simon Wilkinson)
  - fix the README to document the [appdefaults] section instead of [pam]
  - change example host and cell names in the README to use example domains


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - note that [pam] is still checked in addition to [appdefaults]
  - note that AFS and Kerberos IV support requires working Kerberos IV
    configuration files (i.e., kinit -4 needs to work) (doc changes
    suggested by Martin Schulz)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't call initialize_krb5_error_table() or initialize_ovk_error_table()
    if they're not found at compile-time (reported for RHL 6.x by Chris Riley)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't set forwardable and assorted other flags when getting password-
    changing service ticket (noted, and fix supplied, by Onime Clement)
  - try __posix_getpwnam_r on Solaris before we try getpwnam_r, which may
    or may not be expecting the same number/type of arguments (noted by
    Onime Clement)
  - use krb5_aname_to_localname to convert the principal to a login name
    and set PAM_USER to the result when authenticating
  - some autoconf fixes for failure cases


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add info about accessing the CVS repository to the README
  - parser cleanups (thanks to Dane Skow for a more complicated sample)


author: Nalin Dahyabhai <nalin@redhat.com> 1.42-1
changelog:
  - return PAM_NEW_AUTHTOK_REQD when attempts to get initial credentials
    fail with KRB5KDC_ERR_KEY_EXP (noted by Onime Clement)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - note that we had to prepend the current directory to a given path in
    dlopen.c when we had to (noted by Onime Clement)


author: Nalin Dahyabhai <nalin@redhat.com> 1.43-1
changelog:
  - add minimum UID support (#52358)
  - don't link pam_krb5 with libkrbafs
  - make all options in krb5.conf available as PAM config arguments


author: Nalin Dahyabhai <nalin@redhat.com> 1.46-1
changelog:
  - link with libresolv to get res_search, tip from Justin McNutt, who
    built it statically
  - explicitly link with libdes425
  - handle cases where getpwnam_r fails but still sets the result pointer
  - if use_authtok is given and there is no authtok, error out


author: Nalin Dahyabhai <nalin@redhat.com> 1.49-1
changelog:
  - set PAM_USER using the user's parsed name, converted back to a local name
  - add account management service (checks for key expiration and krb5_kuserok())
  - handle account expiration errors


author: Nalin Dahyabhai <nalin@redhat.com> 1.57-1
changelog:
  - force -fPIC
  - add --with-moduledir, --with-krb5-libs, --with-krbafs-libs to configure
  - add per-user stashes and return values


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.5-1
changelog:
  - don't log debug messages that we're skipping session setup/teardown unless
    debugging is enabled (#179037)
  - try to build the module with -Bsymbolic if we can figure out how to do that


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.6-1
changelog:
  - add a "krb4_use_as_req" option so that obtaining v4 creds kinit-style can
    be disabled completely (Hugo Meiland)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.7-1
changelog:
  - add v4 credential conversion for "use_shmem" and "external" cases (though
    it should be redundant with "use_shmem") (#182239)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.8-1
changelog:
  - don't try to validate creds in a password-changing situation, because the
    attempt will always fail unless the matching key is in the keytab, which
    should never be the case for the password-changing service (#187303, rbasch)
  - if v4 has been disabled completely, go ahead and try to set 2b tokens
    because we're going to end up having to do that anyway (#182378)


