# changelog

author: Dogtag Team <pki-devel@redhat.com> 10.3.3-16
changelog:
  - Separate original patches into RHEL and RHCS portions
  - ## RHEL 7.3.z Batch Update 2
  - Bugzilla Bug #1404176 - logging properties and man pages (edewata)
  - Bugzilla Bug #1405328 - TPS throws "err=6" when attempting to format and
    enroll G&D Cards (jmagne)
  - ## RHCS 9.1.z Batch Update 2
  - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and
    enroll G&D Cards (jmagne)
  - Bugzilla Bug #1404900 - RHCS logging properties (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-17
changelog:
  - ## RHCS 9.1.z Batch Update 3
  - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS
    tokendb shows different certificate status (cfu)
  - ## RHEL 7.3.z Batch Update 3
  - Bugzilla Bug #1417063 - ECDSA Certificates Generated by Certificate System
    8.1 fail NIST validation test with parameter field. (cfu)
  - Bugzilla Bug #1417064 - Unable to search certificate requests using the
    latest request ID (edewata)
  - Bugzilla Bug #1417065 - CA Certificate Issuance Date displayed on CA website
    incorrect (alee)
  - Bugzilla Bug #1417066 - update to 7.3 IPA with otpd bugfixes, tomcat will
    not finish start, hangs (ftweedal)
  - Bugzilla Bug #1417067 - pki-tomcat for 10+ minutes before generating cert
    (edewata)
  - Bugzilla Bug #1417190 - Problem with default AJP hostname in IPv6
    environment. (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.3.3-18
changelog:
  - ## RHEL 7.3.z Batch Update 4
  - Bugzilla Bug #1429492 - Add profile component that copies CN to SAN
    (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.4.0-1
changelog:
  - Require "jss >= 4.4.0-1" as a build and runtime requirement
  - Require "tomcatjss >= 7.2.1-1" as a build and runtime requirement
  - ############################################################################
  - Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
  - Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
    pki-console to 10.4.x
  - ############################################################################
  - # RHEL 7.4:
  - ############################################################################
  - Bugzilla Bug #1222557 - ECDSA Certificates Generated by Certificate System
    8.1 fail NIST validation test with parameter field. (cfu)
  - Bugzilla Bug #1238684 - Generting Symmetric key fails with key-generate
    when --usages verify (vakwetu)
  - Bugzilla Bug #1246635 - user-cert-add --serial CLI request to secure port
    with remote CA shows authentication failure (edewata)
  - Bugzilla Bug #1249400 - CA EE: Submit caUserCert request without uid does
    not show proper error message (vakwetu)
  - Bugzilla Bug #1305993 - Add profile component that copies CN to SAN
    (ftweedal)
  - Bugzilla Bug #1316653 - pki ca-cert-request-submit fails presumably because
    of missing authentication even if it should not require any (edewata)
  - Bugzilla Bug #1325071 - add options to enable/disable cert or crl
    publishing. (vakwetu)
  - Bugzilla Bug #1330800 - Failed to start pki-tomcatd Service
    ("ipa-cacert-manage renew" failed?) (edewata)
  - Bugzilla Bug #1368410 - Misleading Logging for HSM (edewata)
  - Bugzilla Bug #1372052 - Unable to search certificate requests using the
    latest request ID (edewata)
  - Bugzilla Bug #1375347 - Typo in comment line of
    UserPwdDirAuthentication.java (edewata)
  - Bugzilla Bug #1376226 - IPA replica-prepare failed with error
    "Profile caIPAserviceCert Not Found" (ftweedal)
  - Bugzilla Bug #1376488 - pkispawn fails as it is not able to find openssl as
    a dependency package (mharmsen)
  - Bugzilla Bug #1378275 - two-step externally-signed CA installation fails due
    to missing AuthorityID (ftweedal)
  - Bugzilla Bug #1378277 - Spurious host authority entries created (ftweedal)
  - Bugzilla Bug #1378527 - Miscellaneous Minor Changes (edewata)
  - Bugzilla Bug #1381084 - KRA installation failed against externally-signed CA
    with partial certificate chain (edewata)
  - Bugzilla Bug #1382066 - Problems with FIPS mode (edewata)
  - Bugzilla Bug #1386371 - Remove xenroll.dll from pki-core (mharmsen)
  - Bugzilla Bug #1386424 - Fix packaging duplicates of classes in multiple jar
    files (edewata)
  - Bugzilla Bug #1391737 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI (RHEL 7) (edewata)
  - Bugzilla Bug #1392068 - [RFE] add express archivals and retrievals from KRA
    (vakwetu)
  - Bugzilla Bug #1395817 - Unable to install subordinate CA with HSM in FIPS
    mode (edewata)
  - Bugzilla Bug #1397200 - pkispawn does not change default ecc key size from
    nistp256 when nistp384 is specified in spawn config (jmagne)
  - Bugzilla Bug #1399862 - Dogtag 10.3.9 Man Pages (edewata)
  - Bugzilla Bug #1404881 - TPS throws "err=6" when attempting to format and
    enroll G&D Cards (jmagne)
  - Bugzilla Bug #1405654 - Token memory not wiped after key deletion (RHEL)
    (jmagne)
  - Bugzilla Bug #1409946 - Request ID undefined for CA signing certificate
    (vakwetu)
  - Bugzilla Bug #1409949 - CA Certificate Issuance Date displayed on CA website
    incorrect (vakwetu)
  - Bugzilla Bug #1410650 - [RFE] Add SCP03 support (RHEL) (jmagne)
  - Bugzilla Bug #1411428 - Unable to create a CA clone in FIPS (edewata)
  - Bugzilla Bug #1412211 - Unable to set up KRA in FIPS (edewata)
  - Bugzilla Bug #1412681 - update to 7.3 IPA with otpd bugfixes, tomcat will
    not finish start, hangs (ftweedal)
  - Bugzilla Bug #1413132 - pki-tomcat for 10+ minutes before generating cert
    (edewata)
  - Bugzilla Bug #1413136 - Problem with default AJP hostname in IPv6
    environment. (edewata)
  - ############################################################################
  - # RHCS 9.2:
  - ############################################################################
  - Bugzilla Bug #1248553 - TPS Enrollment always goes to "ca1 (cfu)
  - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)
  - Bugzilla Bug #1274096 - [BUG] Add ability to disallow TPS to enroll a single
    user on multiple tokens. (jmagne)
  - Bugzilla Bug #1379379 - Unable to read an encrypted email using renewed
    tokens (jmagne)
  - Bugzilla Bug #1379749 - Automatic recovery of encryption cert is not working
    when a token is physically damaged and a temporary token is issued (jmagne)
  - Bugzilla Bug #1381375 - Cert/Key recovery is successful when the cert serial
    number and key id on the ldap user mismatches (cfu)
  - Bugzilla Bug #1381635 - Token format with external reg fails when
    op.format.externalRegAddToToken.revokeCert=true (cfu)
  - Bugzilla Bug #1382762 - PIN_RESET policy is not giving expected results when
    set on a token (jmagne)
  - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is
    not reflected in the TPS Web UI (RHCS 9) (edewata)
  - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS
    tokendb shows different certificate status (cfu)
  - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and
    enroll G&D Cards (RHCS) (jmagne)
  - Bugzilla Bug #1404900 - Dogtag 10.3.9 logging properties (edewata)
  - Bugzilla Bug #1405655 - Token memory not wiped after key deletion (RHCS)
    (jmagne)
  - ############################################################################


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-1
changelog:
  - Require "nss >= 3.28.3" as a build and runtime requirement
  - Require "jss >= 4.4.0-4" as a build and runtime requirement
  - Require "tomcatjss >= 7.2.1-3" as a build and runtime requirement
  - dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
    failure (edewata)
  - ############################################################################
  - Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
  - Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
    pki-console to 10.4.x
  - ############################################################################
  - # RHEL 7.4:
  - ############################################################################
  - ############################################################################
  - # RHCS 9.2:
  - ############################################################################
  - ############################################################################
  - # Common Criteria
  - ############################################################################
  - Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
    implementation (cfu)
  - Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
    cert requests (cfu)
  - Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
    (edewata)
  - Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
    protection cert mechanism (cfu)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-2
changelog:
  - ############################################################################
  - # RHEL 7.4:
  - ############################################################################
  - Bugzilla Bug #1282504 - Installing pki-server in container reports
    scriptlet failed, exit status 1 (jpazdziora)
  - Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
    enabled system (edewata)
  - Bugzilla Bug #1410650 - [RFE] Add SCP03 support
    for sc 7 g & d cards (RHEL) (jmagne)
  - Bugzilla Bug #1437591 - cli authentication using expired cert throws an
    exception (edewata)
  - Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
    request (edewata)
  - ############################################################################
  - # RHCS 9.2:
  - ############################################################################
  - Bugzilla Bug #1274086 - [RFE] Add SCP03 support
    for sc 7 g & d cards (RHCS) (jmagne)
  - ############################################################################
  - # Common Criteria
  - ############################################################################
  - Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
    (edewata)
  - Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
  - Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
    implementation (cfu)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-3
changelog:
  - ############################################################################
  - # RHEL 7.4:
  - ############################################################################
  - Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
    conjuction with FreeIPA (ftweedal)
  - Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
    startTime parameter is not working as expected. (jmagne)
  - Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
    certificate requests (cfu)
  - Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
  - Bugzilla Bug #1445088 - profile modification cannot remove existing config
    parameters (ftweedal)
  - Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
    (RHEL) (alee)
  - Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
    pki CLI terminates SSL connection (edewata)
  - Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
  - ############################################################################
  - # RHCS 9.2:
  - ############################################################################
  - Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
    (RHCS) (alee)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-4
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
    HSM is used. (alee)
  - Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
  - Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
    error (cfu)
  - Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
    the KRA (ftweedal)
  - Bugzilla Bug #1448204 - pkispawn of clone install fails with
    InvalidBERException (ftweedal)
  - Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
    thales hsm (alee)
  - Updated "jss" build and runtime requirements (mharmsen)
  - ##########################################################################
  - # RHCS 9.2:
  - ##########################################################################
  - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-5
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
    non-signing cert requests (cfu)
  - Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
    CMC with identity proof (cfu)
  - Bugzilla Bug #1447144 - CA brought down during separate KRA instance
    creation (mharmsen)
  - Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
    defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
  - Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
  - Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
  - Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
    ConnectorServlet. (edewata)
  - Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
  - Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
    audit event. (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-7
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
    using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
  - Bugzilla Bug #1445519 - CA Server installation with HSM fails
    (jmagne)
  - Bugzilla Bug #1452617 - Unable to create IPA Sub CA
    (ftweedal)
  - Bugzilla Bug #1454471 - Enabling all subsystems on startup
    (edewata)
  - Bugzilla Bug #1455617 - Key recovery on token fails because
    key record is not marked encrypted (alee)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-8
changelog:
  - Require "selinux-policy-targeted >= 3.13.1-159" as a runtime requirement
  - Require "tomcatjss >= 7.2.1-4" as a build and runtime requirement
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
    enabled system (edewata)
  - Bugzilla Bug #1447144 - CA brought down during separate KRA instance
    creation (edewata)
  - Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
    ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
  - Bugzilla Bug #1454450 - SubCA installation failure with 2 step
    installation in fips enabled mode (edewata)
  - Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
    is asking for password when already provided (edewata)
  - Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
  - Bugzilla Bug #1458043 - Key recovery using externalReg fails
    with java null pointer exception on KRA (alee)
  - Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
    (edewata)
  - Bugzilla Bug #1458429 - client-cert-import --ca-cert should
    import CA cert with trust bits "CT,C,C" (edewata)
  - ##########################################################################
  - # RHCS 9.2:
  - ##########################################################################
  - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-9
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
    using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
  - Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
    non-signing certificate requests (cfu)
  - Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
     revocation non-signing cert requests (cfu)
  - Bugzilla Bug #1458047 - change the way aes clients refer to
    aes keysets (alee)
  - Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
    (alee)
  - Bugzilla Bug #1460028 - In keywrap mode, key recovery on
    KRA with HSM causes KRA to crash (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-10
changelog:
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - Bugzilla Bug #1458043 - Key recovery on token fails with
    invalid public key error on KRA (alee)
  - Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
    authentication cert against CMC signer (cfu)
  - Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
    deleting the any of the subsystem certs from it (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-11
changelog:
  - # Resolves: rhbz #1469432
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - # Bugzilla Bug #1469432 - CMC plugin default change
  - # Resolves CVE-2017-7537
  - # Fixes BZ #1470948


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-12
changelog:
  - # Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - # Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
        - # Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
      - # Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
      - # Bugzilla Bug #1463350 - Access banner validation (edewata)
    - # Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
        - # Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
    - # Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
      - # Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
      - # Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
      - # Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-13
changelog:
  - Resolves: rhbz #1463350
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - # Bugzilla Bug #1463350 - Access banner validation (edewata)


author: Dogtag Team <pki-devel@redhat.com> 10.4.1-14
changelog:
  - #Require "jss >= 4.4.0-8" as a build and runtime requirement
  - ##########################################################################
  - # RHEL 7.4:
  - ##########################################################################
  - # Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
  - # Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
    - # Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
    - # Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
    - # Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
    - # Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
    - # dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
    - ##########################################################################
  - # RHCS 9.2:
  - ##########################################################################
  - # Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
  - # Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
    - # Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin


author: Dogtag Team <pki-devel@redhat.com> 10.5.0-1
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    (RHEL)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - #Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-5
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    (RHEL)
  - Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
    (jmagne)
  - Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
    setup with CMC signed certificates (cfu)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-6
changelog:
  - Updated jss, nuxwdog, and openssl dependencies
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    (RHEL)
  - Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
    few cases (ftweedal)
  - Bugzilla Bug #1428021 - CC: shared token storage and retrieval
    mechanism (cfu)
  - Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
    would cause error (cfu)
  - Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
     (alee)
  - Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
    pkispawn (alee)
  - Bugzilla Bug #1520526 - p12 admin certificate is missing when
    certificate is signed Externally (edewata)
  - Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
     instance (alee)
  - Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
    missing nextupdate field (ftweedal)
  - Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
  - Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
    in several different files after installation completes (alee)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-7
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
    set (RHEL) (edewata)
  - Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
    audit event logging at startup (jmagne)
  - Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
    (alee)
  - Bugzilla Bug #1525306 - CC: missing CMC request and response record
    (cfu)
  - Bugzilla Bug #1532933 - Installing subsystems with external CMC
    certificates in HSM environment shows import error (edewata)
  - Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
    (edewata)
  - Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
    permitted in fips mode (mharmsen)
  - Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
    outcomes. (edewata)
  - Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
    SharedToken scenario's (cfu)
  - Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
    revRequest.issuer (cfu)
  - Bugzilla Bug #1541853 - ProfileService: config values with
    backslashes have backslashes removed (ftweedal)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
    - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
    - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-8
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    - Bugzilla Bug #1542210 - pki console configurations that involves ldap
    passwords leave the plain text password in debug logs (jmagne)
  - Bugzilla Bug #1543242 - Regression in lightweight CA key replication
    (ftweedal)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-9
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
    - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
    set (RHEL) (edewata)
  - Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
  - Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
    and FIPS (edewata)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
    - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-10
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1550581 - CMCAuth throws
    org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
    temporary database [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
    and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
  - Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
    [rhel-7.5.z] (cheimes, mharmsen)
  - Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
    in a certifcate [rhel-7.5.z] (ftweedal)
  - Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
    standard conformance [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
    by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
  - Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
    CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
    StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
  - Bugzilla Bug #1558919 - Not able to generate certificate request
    with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1560233 - libtps does not directly depend on libz


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-11
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
    standard conformance [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
    CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1560233 - libtps does not directly depend on libz


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-12
changelog:
  - Updated "jss" build and runtime requirements (mharmsen)
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
    CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1572548 - IPA install with external-CA is failing when
    FIPS mode enabled. [rhel-7.5.z] (edewata)
  - Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
    [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1575521 - subsystem -> subsystem SSL handshake issue
    with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
    improvement [rhel-7.5.z] (jmagne)
  - Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
    pkispawn configuration step [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
    input class_id [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
    9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,


author: Dogtag Team <pki-devel@redhat.com> 10.5.1-13
changelog:
  - ##########################################################################
  - # RHEL 7.5:
  - ##########################################################################
  - Bugzilla Bug #1553068 - Using a Netmask produces an odd
    entry in a certifcate [rhel-7.5.z] (ftweedal)
  - Bugzilla Bug #1585945 - CMC CRMF requests result in
    InvalidKeyFormatException when signing algorithm is ECC
    [rhel-7.5.z] (cfu)
  - Bugzilla Bug #1587826 - ExternalCA: Installation failed during
    csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
  - Bugzilla Bug #1588944 - Cert validation for installation with
    external CA cert [rhel-7.5.z] (edewata)
  - Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
    option to do no key archival (cfu)
  - Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
    ACL configuration in AAclAuthz.java reverses rules that allow
    and deny access [rhel-7.5.z] (ftweedal, cfu)
  - ##########################################################################
  - # RHCS 9.3:
  - ##########################################################################
  - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-1
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1538311 - Using a Netmask produces an odd
    entry in a certifcate (ftweedal)
  - Bugzilla Bug #1544843 - ExternalCA: Installation failed during
    csr generation with ecc (rrelyea, gkapoor)
  - Bugzilla Bug #1557569 - Re-base pki-core from 10.5.1 to latest
    upstream 10.5.x (RHEL) (mharmsen)
  - Bugzilla Bug #1580394 - CMC CRMF requests result in
    InvalidKeyFormatException when signing algorithm is ECC (cfu)
  - Bugzilla Bug #1580527 - CVE-2018-1080 pki-core: Mishandled
    ACL configuration in AAclAuthz.java reverses rules that allow
    and deny access (ftweedal, cfu)
  - Bugzilla Bug #1585866 - CRMFPopClient tool - should allow
    option to do no key archival (cfu)
  - Bugzilla Bug #1588655 - Cert validation for installation with
    external CA cert (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-2
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1471935 - X500Name.directoryStringEncodingOrder overridden
    by CSR encoding (cfu)
  - Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a
    certificate (ftweedal)
  - Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
    SharedToken scenario's (cfu)
  - Bugzilla Bug #1550742 - Address ECC profile overrides (cfu)
  - Bugzilla Bug #1562841 - servlet profileSubmitCMCSimple throws NPE (cfu)
  - Bugzilla Bug #1572432 - AuditVerify failure due to line breaks (cfu)
  - Bugzilla Bug #1592961 - Need proper default subjectDN for CMC request
    authenticated through SharedToken (cfu)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-4
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1548203 - pki console configurations that involves ldap
    passwords leave the plain text password in signed audit logs (cfu)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1494591 - keyGen fails when only Identity


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-5
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0
    with latest version (abokovoy)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-6
changelog:
  - Updated nuxwdog dependencies
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #673182 - ECC keys not supported for signing
    audit logs (cfu)
  - Bugzilla Bug #1593805 - Better understanding of
    NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu)
  - Bugzilla Bug #1601071 - Certificate generation happens with
    partial attributes in CMCRequest file (cfu)
  - Bugzilla Bug #1601569 - CC: Enable all config audit events
    (cfu)
  - Bugzilla Bug #1608375 - CMC Revocations throws exception
    with same reqIssuer & certissuer (cfu)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-7
changelog:
  - Require "tomcatjss >= 7.2.1-8" as a build and runtime requirement
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1632116 - CC: missing audit event for CS acting as
    TLS client [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1632120 - Unsupported RSA_ ciphers should be
    removed from the default ciphers list [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1632615 - Permit certain SHA384 FIPS ciphers to be
    enabled by default for RSA and ECC . . . [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1632616 - X500Name.directoryStringEncodingOrder
    overridden by CSR encoding (coverity changes) [rhel-7.6.z] (mharmsen)
  - Bugzilla Bug #1633104 - CMC: add config to allow non-clientAuth
    [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1636490 - Installation of CA using an existing CA fails
    [rhel-7.6.z] (edewata)
  - Bugzilla Bug #1643878 - pki cli command for RHCS doesn't prompt for
    a password [rhel-7.6.z] (edewata)
  - Bugzilla Bug #1643879 - CC: Identify version/release of pki-ca, pki-kra,
    pki-ocsp, pki-tks, and pki-tps remotely [RHEL] [rhel-7.6.z] (cfu, jmagne)
  - Bugzilla Bug #1643880 - PKI subsystem process is not shutdown when
    there is no space on the disk to write logs [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-8
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1645262 - pkidestroy may not remove all files [rhel-7.6.z]
    (dmoluguw)
  - Bugzilla Bug #1645263 - Auth plugins leave passwords in the access
    log and audit log using REST [rhel-7.6.z] (dmoluguw)
  - Bugzilla Bug #1645429 - pkispawn fails due to name collision with
    /var/log/pki/<instance> [rhel-7.6.z] (dmoluguw)
  - Bugzilla Bug #1655951 - CC: tools supporting CMC requests output
    keyID needs to be captured in file [rhel-7.6.z] (cfu)
  - Bugzilla Bug #1656297 - Unable to install with admin-generated keys
    [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-9
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification
    if enableOCSP is true [rhel-7.6.z] (jmagne)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-10
changelog:
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout
    configuration [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,
    - # Added Batch Update Information to Product Version (mharmsen)


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-11
changelog:
  - Updated jss dependencies
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1671245 - CC: unable to verify cert before import
    [rhel-7.6.z] (ascheel)
  - Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
    [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)


author: Dogtag Team <pki-devel@redhat.com> 10.5.9-13
changelog:
  - Updated jss dependencies
  - ##########################################################################
  - # RHEL 7.6:
  - ##########################################################################
  - Bugzilla Bug #1671245 - CC: unable to verify cert before import
    [rhel-7.6.z] [manpage] (ascheel)
  - Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL)
    [rhel-7.6.z] (edewata)
  - ##########################################################################
  - # RHCS 9.4:
  - ##########################################################################
  - # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)


author: Dogtag Team <pki-devel@redhat.com> 10.5.16-1
changelog:
  - Updated jss dependencies
  - ##########################################################################
  - # RHEL 7.7:
  - ##########################################################################
  - Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) 
  - ##########################################################################
  - # RHCS 9.5:
  - ##########################################################################
  - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.16-2
changelog:
  - ##########################################################################
  - # RHEL 7.7:
  - ##########################################################################
  - Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing
    Certificate Request [ftweedal]
  - ##########################################################################
  - # RHCS 9.5:
  - ##########################################################################
  - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.16-3
changelog:
  - ##########################################################################
  - # RHEL 7.7:
  - ##########################################################################
  - Bugzilla Bug #1638379 - PKI startup initialization process should not
    depend on LDAP operational attributes [ftweedal]
  - ##########################################################################
  - # RHCS 9.5:
  - ##########################################################################
  - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.17-1
changelog:
  - Updated jss, nuxwdog, and tomcatjss dependencies
  - ##########################################################################
  - # RHEL 7.8:
  - ##########################################################################
  - Bugzilla Bug #1733586 - Rebase pki-core from 10.5.16 to 10.5.17 (RHEL)
  - ##########################################################################
  - # RHCS 9.6:
  - ##########################################################################
  - # Bugzilla Bug #1718418 - Update RHCS version of CA, KRA, OCSP, and TKS so
    - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.17-2
changelog:
  - ##########################################################################
  - # RHEL 7.8:
  - ##########################################################################
  - Bugzilla Bug #1523330 - CC: missing audit event for CS acting as TLS
    client (cfu)
  - Bugzilla Bug #1597727 - CA - Unable to change a certificate’s revocation
    reason from superceded to key_compromised (rhcs-maint)
  - ##########################################################################
  - # RHCS 9.6:
  - ##########################################################################
  - # Bugzilla Bug #1470410 - TPS doesn't update revocation status when
    - # Bugzilla Bug #1470433 - Add supported transitions to TPS (rhcs-maint)
  - # Bugzilla Bug #1585722 - TMS - PKISocketFactory – Modify Logging to Allow
    - # Bugzilla Bug #1642577 - TPS – Revoked Encryption Certificates Marked as


author: Dogtag Team <pki-devel@redhat.com> 10.5.17-3
changelog:
  - ##########################################################################
  - # RHEL 7.8:
  - ##########################################################################
  - Bugzilla Bug #1445479 - KRATool does not support netkeyKeyRecovery
    attribute (dmoluguw)
  - Bugzilla Bug #1534013 - Attempting to add new keys using a PUT KEY APDU
    to a token that is loaded only with the default/factory keys (Key Version
    Number 0xFF) returns an APDU with error code 0x6A88. (jmagne)
  - Bugzilla Bug #1709585 - PKI (test support) for PKCS#11 standard
    AES KeyWrap for HSM support (cfu, ftweedal)
  - Bugzilla Bug #1748766 - number range depletion when multiple clones
    created from same master (ftweedal)
  - ##########################################################################
  - # RHCS 9.6:
  - ##########################################################################
  - # Bugzilla Bug #1520258 - TPS token search fails to find entries , LDAP filter
    - # Bugzilla Bug #1535671 - RFE to have the users be able to use the


author: Dogtag Team <pki-devel@redhat.com> 10.5.17-5
changelog:
  - ##########################################################################
  - # RHEL 7.8:
  - ##########################################################################
  - Bugzilla Bug #1523330 - CC: missing audit event for CS acting as TLS client
    (cfu)
  - ##########################################################################
  - # RHCS 9.6:
  - ##########################################################################
  - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.17-6
changelog:
  - ##########################################################################
  - # RHEL 7.8:
  - ##########################################################################
  - Bugzilla Bug #1723008 - ECC Key recovery failure with
    CKR_TEMPLATE_INCONSISTENT (cfu)
  - Bugzilla Bug #1774282 - pki-server-nuxwdog template has pid file name with
    non-breakable space char encoded instead of 0x20 space char (ascheel)
  - ##########################################################################
  - # RHCS 9.6:
  - ##########################################################################
  - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.18-1
changelog:
  - Updated jss dependencies
  - ##########################################################################
  - # RHEL 7.9:
  - ##########################################################################
  - Bugzilla Bug #1774174 - Rebase pki-core from 10.5.17 to 10.5.18 (RHEL)
  - ##########################################################################
  - # RHCS 9.7:
  - ##########################################################################
  - # Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
    - # Bugzilla Bug #1774181 - Update RHCS version of CA, KRA, OCSP, and TKS so


author: Dogtag Team <pki-devel@redhat.com> 10.5.18-3
changelog:
  - Updated jss dependencies
  - ##########################################################################
  - # RHEL 7.9:
  - ##########################################################################
  - Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
  - Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
  - ##########################################################################
  - # RHCS 9.7:
  - ##########################################################################
  - # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)


author: Dogtag Team <pki-devel@redhat.com> 10.5.18-4
changelog:
  - ##########################################################################
  - # RHEL 7.9:
  - ##########################################################################
  - Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
    additional support and touch-up (cfu)
  - ##########################################################################
  - # RHCS 9.7:
  - ##########################################################################
  - # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new


author: Dogtag Team <pki-devel@redhat.com> 10.5.18-6
changelog:
  - Patch for CMC Credential Error, RSA PSS typo, and new profile
    for directory-authentication-based Server-Side keygen
  - ##########################################################################
  - # RHEL 7.9:
  - ##########################################################################
  - Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
  - Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
  - ##########################################################################
  - # RHCS 9.7:
  - ##########################################################################
  - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and


author: Dogtag Team <pki-devel@redhat.com> 10.5.18-7
changelog:
  - Patch for CMCResponse tool
  - Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)


author: Ray Strode <rstrode@redhat.com> - 0.2.0-1
changelog:
  - Update to version 0.2.0
  - Integrate more tightly with nash (pending nash changes)
  - ship libs for out of tree splash plugins
  - gradient support
  - random bug fixes


author: Ray Strode <rstrode@redhat.com> - 0.3.0-1
changelog:
  - Update to version 0.3.0
  - Better plugin handling
  - Better integration with mkinitrd (pending mkinitrd changes)
  - random bug fixes


author: Ray Strode <rstrode@redhat.com> - 0.3.2-1
changelog:
  - Update to version 0.3.2
  - show gradient in spinfinity plugin
  - Drop fade out in spinfinity plugin
  - fix throbber placement
  - rename graphical.so to default.so


author: Ray Strode <rstrode@redhat.com> - 0.4.0-1
changelog:
  - Update to version 0.4.0
  - Only run if rhgb is on kernel command line
  - Make text plugin more animated


author: Ray Strode <rstrode@redhat.com> - 0.5.0-1
changelog:
  - Add new client "ask-for-password" command which feeds
    the user input to a program instead of standard output,
    and loops when the program returns non-zero exit status.


author: Ray Strode <rstrode@redhat.com> - 0.5.0-2
changelog:
  - Pull in spinfinity by default.  This whole "figure out
    which plugin to use" set of scripts and scriptlets
    needs work.  We need to separate distro default from
    user choice.


author: Peter Jones <pjones@redhat.com> - 0.5.0-7
changelog:
  - Make it a mkinitrd requires instead of a nash requires (that will
    still pull in nash, but we need mkinitrd for newer plymouth-populate-initrd)


author: Ray Strode <rstrode@redhat.com> - 0.5.0-8.2008.07.31
changelog:
  - Update to snapshot to get new plymouth-populate-initrd features
  - Make removing rhgb use details plugin instead of exiting


author: Ray Strode <rstrode@redhat.com> - 0.5.0-13.2008.08.07
changelog:
  - Update to new snapshot which when combined with a new mkinitrd should
    make unlocking encrypted root partitions work again


author: Adam Jackson <ajax@redhat.com> 0.5.0-15.2008.08.08
changelog:
  - plymouth-0.5.0-textbar-hotness.patch: Change the text plugin to a slightly
    more traditional progress bar, to maintain the illusion of progress better
    than the eternally oscillating cylon. Note: still incomplete.


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.08.27
changelog:
  - Update to latest snapshot
  - Add the ability to show text prompts in graphical plugin
  - Fix crasher for users with encrypted disks


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.08.27.1
changelog:
  - Fix another crasher for users with encrypted disks (this time in
    the text plugin, not the client)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.09.25.1
changelog:
  - Add new snapshot to fold in Will Woods progress bar, and
    move ajax's splash upstream, putting the old text splash
    in a "pulser" subpackage


author: Jeremy Katz <katzj@redhat.com> 0.6.0-0.2008.09.25.2
changelog:
  - Remove mkinitrd requires to break the dep loop and ensure things
    get installed in the right order


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.06.1
changelog:
  - Add "Solar" plugin from Charles Brej
  - Move things around so computers with separate /usr boot
    (hopefully this won't break things, but it probably will)
  - Make GDM show up on vt1 for all plugins


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.15.2
changelog:
  - Move plymouth-set-default-plugin to -libs (might help with bug 467356)
  - Fix up requires, provides and postun scripts


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.15.3
changelog:
  - Move plymouth-set-default-plugin, plymouth-update-initrd, and
    plymouth-populate-initrd to plymouth-scripts subpackage
    (the last fix didn't actually help with bug 467356)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.17.1
changelog:
  - Clear screen in details plugin when it's done
  - Make plymouth-update-initrd a small wrapper around mkinitrd instead
    of the broken monstrosity it was before.


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.21.1
changelog:
  - Minor event loop changes
  - drop upstream patches
  - Charlie Brej fix for progress bar resetting when escape gets pressed


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.21.2
changelog:
  - add text-and-details-only subpackage so davej can uninstall
    spinfinity, pango, cairo etc from his router.


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.23.1
changelog:
  - Add patch from Charlie to align progress bar to milestones during boot up
  - force tty to be sane on exit (bug 467207)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.23.2
changelog:
  - Bump so name of libply to hopefully force plymouth to get installed
    before kernel (or at least make plymouth-libs and plymouth get installed
    on the same side of kernel in the transaction).


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.24.1
changelog:
  - Add updated progress bar for solar plugin from Charlie
  - Log plymouth:debug output to boot log
  - Ignore sigpipe signals in daemon


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.27.6
changelog:
  - Force raw mode for keyboard input with solar and fade-in
    (bug 468880)
  - make sure windows get closed on exit


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.10.30.1
changelog:
  - Drop upstreamed patches
  - Patch from Charlie to update artwork
  - Patch from Charlie to make password screen match animation better
    (bug 468899)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.06.1
changelog:
  - Don't exit on plymouth --show-splash after sulogin
  - Properly retake console after that --show-splash


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.11.2
changelog:
  - Improve solar flares (Charlie)
  - redirect tty again on --show-splash
  - ignore subsequent --hide-splash calls after the first one
  - turn off kernel printks during boot up


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.12.4
changelog:
  - Move Obsoletes: plymouth-text-and-details-only to base package
    so people who had it installed don't end up solar on upgrade


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.14.1
changelog:
  - Generate solar background dynamically to reduce ondisk size, and
    look better at various resolutions (Charlie, bug 471227)


author: Ray Strode <rstrode@redhat.com> 0.6.0-0.2008.11.17.3
changelog:
  - don't give error about missing default.so
  - rework packaging of boot-duration to prevent .rpmnew droppings
    (bug 469752)


author: Ray Strode <rstrode@redhat.com> 0.7.0-0.2009.03.06
changelog:
  - Updated to development snapshot
  - Guess progress better on second boot of persistent live images
  - Drop upstream patches
  - swap "solar" and "spinfinity" scriptlet behavior


author: Ray Strode <rstrode@redhat.com> 0.7.0-0.2009.03.10.1
changelog:
  - Address one more issue with password handling.  It wasn't working
    well for secondary devices when using the "details" plugin.


author: Jesse Keating <jkeating@redhat.com> - 0.7.0-0.2009.03.10.3
changelog:
  - Drop the version on system-logos requires for now, causing hell with
    other -logos providers not having the same version.


author: Ray Strode <rstrode@redhat.com> 0.8.4-0.20110419.1
changelog:
  - unlock tty when reopening in case it spontaenously goes bonkers
    and we need to fix it up
    Resolves: #655538


author: Ray Strode <rstrode@redhat.com> 0.8.4-0.20110822.1
changelog:
  - Update to latest git snapshot
  - Reintroduce accidentally dropped spinner theme and systemd integration


author: Ray Strode <rstrode@redhat.com> 0.8.4-0.20110809.3
changelog:
  - Change spec based on suggestion from Nicolas Chauvet <kwizart@gmail.com>
    to fix scriptlet error during livecd creation
    Resolves: #666419


author: Ray Strode <rstrode@redhat.com> 0.8.6-1
changelog:
  - Update to 0.8.6
  - Fixes encrypted fs bug
    Resolves: #830482
  - Adds support for offline package updates


author: Tom Callaway <spot@fedoraproject.org> - 0.8.6.1-3
changelog:
  - fix bz704658 (thanks to Ian Pilcher for the patch), resolves issue where spinfinity theme
    never goes idle and thus, never exits to gdm


author: Dave Airlie <airlied@redhat.com> 0.8.6.2-1.2012.07.23
changelog:
  - fix plymouth race at bootup breaking efi/vesa handoff.
  - fix version number - its against fedora package policy to have 0.year


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.2013.12.10.1
changelog:
  - Update to latest snapshot, but revert text splash back to tribar
  - Fixes systemd unit files and lets us drop our upstreamed patches
    Resolves: #1040015
  - Uses udev for device enumeration
    Resolves: #1026571
  - Correct "charge" theme description


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.2014.01.10.1
changelog:
  - Update to latest snapshot
  - Fixes ask-for-password feature
    Resolves: #1043689
  - Drops bogus delay when hitting escape
    Resolves: #1049379


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.3.20140113
changelog:
  - Read OS string from REDHAT_BUGZILLA_PRODUCT instead of PRETTY_NAME
    in /etc/os-release to work around a lorax bug.
    Resolves: #911553
  - Fix text splash when explicitly configured by user
    Related: #911553
    Related: #1026571


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.9.20140113
changelog:
  - Ignore early fb devices
    Resolves: #1063758
    Resolves: #1064235
    Resolves: #1066641
  - Ignore udev if using lone serial console
    Resolves: #1058049
  - Fix password at start up race
    Resolves: #1070707
    Resolves: #1073145


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.15.20140113
changelog:
  - Ship label plugin in initrd
    Resolves: #801932
  - Backport udev queue detection fix which may help missing password
    prompt on hyper-v
    Related: #1097174 1244858


author: Ray Strode <rstrode@redhat.com> 0.8.9-0.16.20140113
changelog:
  - Ensure graphical special gets terminal even if drm driver isn't
    boot_vga (more fixes for hyper-v)
    Related: #1097174 1244858


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.25.20140113
changelog:
  - Read OS string from PRETTY_NAME instead of REDHAT_BUGZILLA_PRODUCT
    again, this time munging it to get rid of parts we want to hide.
    Related: #911553
    Resolves: #1306543


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.26.20140113
changelog:
  - Fix color of text progress bar
    Related: #1167735
  - Fix escape key during media check of live image
    Resolves: #1167735


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.28.20140113
changelog:
  - Don't change file mode of boot.log.  Instead, remember what mode
    the admin set it to.
    Related: #916704
  - Don't unlink boot.log before opening it.
    Related: #916704


author: Ray Strode <rstrode@redhat.com> - 0.8.9-0.29.20140113
changelog:
  - Fall back to text mode if /dev/dri/card0 can't modeset
    Resolves: #1431141
  - Remove unnecessary post scripts that rpm -V output
    Resolves: #1266085


author: Jeremy Katz <katzj@redhat.com> - 0.09-1
changelog:
  - Remove button module on suspend
  - Set default kernel in grub to current one when hibernating 
    so that resume works


author: Phil Knirsch <pknirsch@redhat.com> - 0.10-1
changelog:
  - Added missing pciutils-devel BuildRequires (#182566) 
  - Fixed missing vbestata save/restore calls for video suspend/resume (#182167, 
    - Renamed hook scripts to allow local pre and post inserts (#179421)
  - Added support for blinking led lights on Thinkpad Laptops during suspend
    (#179420)
  - Added pm-powersave script for powersaving via HAL (#169054)
  - Added symlinks for pm-shutdown and pm-restart (#165953)


author: Jeremy Katz <katzj@redhat.com> - 0.11-1
changelog:
  - fix display on resume with nvidia graphics
  - add infrastructure to tell what pm-util is running; don't resume 
    video on return from hibernate as the BIOS has already re-initialized it


author: Phil Knirsch <pknirsch@redhat.com> - 0.13-1
changelog:
  - Revert last changes for ATI graphics chips as they seem to cause more
    problems than they solved.


author: Peter Jones <pjones@redhat.com> - 0.16-1
changelog:
  - rework the difference between hibernate and suspend; get rid of PM_MODE
  - add 00clear script
  - move default_resume_kernel from "functions" to 01grub's hibernate section


author: Peter Jones <pjones@redhat.com> - 0.17-1
changelog:
  - add more helper functions
  - rework things that were forking an extra subshell
  - fix the suspend lock
  - work around bluetooth/usb suspend wackiness


author: Peter Jones <pjones@redhat.com> - 0.19-1
changelog:
  - update from CVS
  - move pam and consolehelper stuff here.
  - move video hooks here since HAL isn't ready


author: Jeremy Katz <katzj@redhat.com> - 0.19-3
changelog:
  - doing the vbestate save/restore on intel video with the modesetting 
    intel xorg driver is broken.  so don't do it.


author: Peter Jones <pjones@redhat.com> - 0.19.1-1
changelog:
  - Hopefully fix Centrino ThinkPad suspend+resume
  - Hopefully fix Intel Mac Mini/MacBook suspend+resume


author: Peter Jones <pjones@redhat.com> - 0.19.1-3
changelog:
  - Disable bluetooth suspend/reusme hook by default; the kernel modules seem
    to support this correctly these days.


author: Phil Knirsch <pknirsch@redhat.com> - 0.19.1-4
changelog:
  - Start/stop correct services in 10NetworkManager hook (#215253)
  - Fixed check for /sys/power/disk and /sys/power/state (#214407)
  - Added proper error messages in case /sys/power/disk or /sys/power/state are
    missing (#215386)
  - Removed service calls and module load/unload for bluetooth hook (#213387)
  - Added hook file to restore the sysfont after resume (#215391)
  - Added the possibility to disable hibernate and suspend completely via the
    config file (#216459)
  - Symlinked the config file to /etc/sysconfig/power-management (#216459)
  - Fixed pm-powersave permission check bug (#222819)
  - Small specfile cleanups


author: Phil Knirsch <pknirsch@redhat.com> - 0.99.3-6
changelog:
  - Fixed missing builds for vbetool and radeontool for some archs (#241469)
  - Fixed typo in functions where wrong variable was used (#241633)


author: Adam Jackson <ajax@redhat.com> 0.99.3-11
changelog:
  - Install (not just build) vbetool and radeontool on x86_64 too
  - Explicitly list files under %_sbindir, so they don't drop away again
  - Light spec cleanups


author: Till Maas <opensource till name> - 0.99.3-12
changelog:
  - Adjust %files to own /etc/pm/ and /usr/lib/pm-utils/ (#233906)
  - remove (C|CXX|F)FLAGS definitions, they are already in %configure
  - remove Core in Summary tag
  - add URL for pm-utils
  - add %{?arm} to ExclusiveArch (#245463)
  - remove vbetool and require it (it is a separate package now)
  - remove radeontool and require it (it is a separate package now)
  - Update License Tag
  - cleanup buildrequires
  - clear %setup


author: Peter Jones <pjones@redhat.com> - 0.99.4-1
changelog:
  - Merge new upstream
  - remove pm/power.d/laptop-tools
  - add --quirk-reset-brightness (needed for the Fujitsu Lifebook S7110)


author: Till Maas <opensource till name> - 0.99.4-3
changelog:
  - remove unused patch (vidhooks)
  - add patch to keep logfile (RH #237840 (f7), #238068 (devel)), 
    to keep selinux context
  - simplify spec
  - restore selinux context of logfile in %post 
  - use rpmmacros more often


author: Till Maas <opensource till name> - 0.99.4-10
changelog:
  - enhance hd-apm-restore and add a config file
  - fix source-definition for hd-apm-restore
  - add hook suffix for hook script


author: Till Maas <opensource till name> - 0.99.4-12
changelog:
  - remove ExclusiveArch, because it contains all supported archs
    (in case an arch schould be excluded, please use ExcludeArch)
  - improve readability of usermode setup
  - remove pm-restart pm-shutdown from usermode setup, because
    there are no such binaries
  - list more files in %files explicit to make it obvious when
    there are changes in the distributed package
  - add .conf suffix to oldconfig files


author: Till Maas <opensource till name> - 0.99.4-14
changelog:
  - add pm-utils-bugreport-info.sh script to collect information for bugreports
  - require Hal (RH #428452)


author: Till Maas <opensource till name> - 1.1.0-5
changelog:
  - remove double %dir %{_libdir}/pm-utils
  - update pm-utils-99hd-apm-restore to work with current pm-utils release
    Red Hat Bugzilla: #442294
  - move config file for hd apm restore away from config.d, which is only used
    for pm-utils internal config anymore
  - own /var/run/pm-utils/ and create storage/locks subdirs (may be
    needed for selinux)
  - make sure an empty logfile is created after install (touch -a ...)
  - sort %files
  - make Source0: an URL
  - remove Conflicts: bluez utils, all supported Fedora releases ship
    already a newer version
  - remove unused BR: hal-devel, dbus-devel, pkgconfig, docbook-utils


author: Richard Hughes <rhughes@redhat.com> - 1.1.0-8
changelog:
  - Rip out all the consolehelper and PAM stuff - users are not meant to be
    running these tools directly and it's a massive change from upstream.


author: Till Maas <opensource@till.name> - 1.1.2.2-2
changelog:
  - %pre and %post scriptlets should not be needed anymore, old
    config files should be already moved in every supported release
    and the selinux context for the logfile should be restored by
    rpm
  - remove pcitulils BR, it was needed for vbetool, which is in a
    separate package now
  - substitute %{__rm} macros for uniform macro usage


author: Richard Hughes <rhughes@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0
  - The core hook-running machinery will now abort running hooks of one fails,
    and the front-end scripts will return a failure error code if hook-running
    was aborted.


author: Richard Hughes <rhughes@redhat.com> - 1.2.2.1-1
changelog:
  - Update to 1.2.2.1
  - Supports automatically pulling quirks from HAL and has the ability to save
    the last working set of quirks to an .fdi file.


author: Richard Hughes <rhughes@redhat.com> - 1.2.4-1
changelog:
  - Update to 1.2.4
  - Fixes a glitch in module unloading
  - Numerous small usability and debugging improvements


author: Richard Hughes <rhughes@redhat.com> - 1.2.5-1
changelog:
  - New upstream version
  - If running on a system that is using KMS, we will refuse to handle any video
    quirks passed to us by HAL, and we will not chvt to an empty console.
  - Fix a longstanding bug in tuning scheduler powersaving knobs on SMT systems.


author: Till Maas <opensource@till.name> - 1.2.5-6
changelog:
  - filesystem subpackage contents are now provided by filesystem (Red Hat
    Bugzilla 515362) filesystem-2.4.28-1.fc12


author: Richard Hughes <rhughes@redhat.com> - 1.2.6-1
changelog:
  - New upstream version
  - Make KMS detection more accurate for several KMS drivers
  - Fix several typos on the documentation.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.1-1
changelog:
  - New version
  - Dropped pm-utils-99hd-apm-restore hook, similar functionality provided by
    harddrive script


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.1-3
changelog:
  - Used append instead of write for init_logfile (#660329)
  - Fixed and ghosted /var/run/pm-utils (#656668)
  - Added postun script to clean state storage
  - Updated pm-utils-bugreport-info.sh, it requires root privileges for
    correct function, moved to sbin


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.1-12
changelog:
  - Added support for grub2 in 01grub hook (grub2 patch)
  - Fixed hooks exit code logging (hook-exit-code-log patch)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.1-13
changelog:
  - Fixed line spacing in logs to be easier to read (log-line-spacing-fix patch)
    Resolves: rhbz#750755


author: - Gerd Hoffmann <kraxel@redhat.com> - 1.6.10-3.fc9
changelog:
  - remove all unneeded (zlib/libpng copy) header files.
  - fix Source: URL.
  - get cflags and libs from pkg-config.


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - Upgrade to 1.04, editied the pbm2ppa patch to add <string.h>
  - to pbmtpg.c, which uses strmp, edited the redhat patch to
  - apply cleanly.


author: Tim Waugh <twaugh@redhat.com> - 1:1.04-19
changelog:
  - Consistent use of macros.
  - Removed ancient obsoletes tag.
  - Clean buildroot in install section not prep section.
  - Make setup quiet.
  - Use noreplace for config files.


author: Dan Walsh <dwalsh@redhat.com> 1.9-9
changelog:
  - Change restorecon to not follow symlinks.  It is too difficult and confusing
  - to figure out the file context for the file pointed to by a symlink.


author: Colin Walters <walters@redhat.com> 1.10-3
changelog:
  - Add patch to fall back to authenticating via uid if
    the current user's SELinux user identity is the default
    identity
  - Add BuildRequires pam-devel


author: Dan Walsh <dwalsh@redhat.com> 1.13.3-1
changelog:
  - Update latest from NSA
  - Add -o option to setfiles to save output of any files with incorrect context.


author: Dan Walsh <dwalsh@redhat.com> 1.14.1-2
changelog:
  - Fix fixfiles.cron to not run on non SELinux boxes
  - Fix several problems in fixfiles and fixfiles.cron


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Update with NSA
  	* Added -l option to setfiles to log changes via syslog.
  	* Merged -e option to setfiles to exclude directories.
  	* Merged -R option to restorecon for recursive descent.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-1
changelog:
  - Update to latest from NSA
  	* Changed restorecon to ignore ENOENT errors from matchpathcon.
  	* Merged nonls patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-4
changelog:
  - Fix fixfiles handling of rpm
  - Fix restorecon to not warn on symlinks unless -v -v
  - Fix output of verbose to show old context as well as new context


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles and restorecon patches from Dan Walsh.
  	* Don't display change if only user part changed.


author: Dan Walsh <dwalsh@redhat.com> 1.20.1-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles rewrite from Dan Walsh.
  	* Merged restorecon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.21.1-3
changelog:
  - Don't change user componant if it is all that changed unless forced.
  - Change fixfiles to concatinate file_context.local for setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.21.3-1
changelog:
  - Upgrade to latest from NSA
  	* Fixed restorecon to not treat errors from is_context_customizable()
  	  as a customizable context.
  	* Merged setfiles/restorecon patch to not reset user field unless
  	  -F option is specified from Dan Walsh.
  	* Merged open_init_pty helper for run_init from Manoj Srivastava.
  	* Merged audit2allow and genhomedircon man pages from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged newrole -l support from Darrel Goeddel (TCS).
  - Fix genhomedircon STARTING_UID


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-3
changelog:
  - Fix fixfiles patch
  - Upgrade to latest from NSA
  	* Prevent overflow of spec array in setfiles.
  - Add diff comparason between file_contexts to fixfiles
  - Allow restorecon to give an warning on file not found instead of exiting


author: Dan Walsh <dwalsh@redhat.com> 1.21.9-1
changelog:
  - More cleanup of sed patch
  - Upgrade to latest from NSA
  	* Merged updated fixfiles script from Dan Walsh.
  	* Merged updated man page for fixfiles from Dan Walsh and re-added unzipped.
  	* Reverted fixfiles patch for file_contexts.local;
  	  obsoleted by setfiles rewrite.
  	* Merged error handling patch for restorecon from Dan Walsh.
  	* Merged semi raw mode for open_init_pty helper from Manoj Srivastava.
  	* Rewrote setfiles to use matchpathcon and the new interfaces
  	  exported by libselinux (>= 1.21.5).


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - More cleanup of fixfiles sed patch
  - Upgrade to latest from NSA
  	* Merged patch for open_init_pty from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.12-1
changelog:
  - More cleanup of fixfiles sed patch
  	* Merged further patches for restorecon/setfiles -e and fixfiles -C.


author: Dan Walsh <dwalsh@redhat.com> 1.21.13-1
changelog:
  - Update from NSA
  	* Merged further change to fixfiles -C from Dan Walsh.
  	* Merged updated fixfiles script from Dan Walsh.
  - Fix error handling of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.21.17-1
changelog:
  - Update to latest from NSA
  	* Merged new genhomedircon script from Dan Walsh.
  	* Changed load_policy to call sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-1
changelog:
  - Update to latest from NSA
  	* Changed load_policy to fall back to the original policy upon
  	  an error from sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-2
changelog:
  - Apply Uli patch
  	* The Makefiles should use the -Wall option even if compiled in beehive
  	* Add -W, too
  	* use -Werror when used outside of beehive.  This could also be used unconditionally
  	* setfiles/setfiles.c: fix resulting warning
  	* restorecon/restorecon.c: Likewise
  	* run_init/open_init_pty.c: argc hasn't been checked, the program would crash if
  called without parameters.  ignore the return value of nice properly.
  	* run_init: don't link with -ldl lutil
  	* load_policy: that's the bad bug.  pointer to unsigned int is passed, size_t is
  written to.  fails on 64-bit archs
  	* sestatus: signed vs unsigned problem
  	* newrole: don't link with -ldl


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update to released version from NSA
  	* Merged rewrite of genhomedircon by Eric Paris.
  	* Changed fixfiles to relabel jfs since it now supports security xattrs
  	  (as of 2.6.11).  Removed reiserfs until 2.6.12 is released with
  	  fixed support for reiserfs and selinux.


author: Dan Walsh <dwalsh@redhat.com> 1.23.2-1
changelog:
  - Update to version from NSA
  	* Changed setfiles -c to call set_matchpathcon_flags(3) to
  	  turn off processing of .homedirs and .local.


author: Dan Walsh <dwalsh@redhat.com> 1.23.3-1
changelog:
  - Update to version from NSA
  	* Merged context validation patch for genhomedircon from Eric Paris.
  - Fix verbose output of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update to version from NSA
  	* Merged load_policy is_selinux_enabled patch from Dan Walsh.
  	* Merged restorecon verbose output patch from Dan Walsh.
  	* Merged setfiles altroot patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.23.5-1
changelog:
  - Update to match NSA
  	* Reverted load_policy is_selinux_enabled patch from Dan Walsh.
  	  Otherwise, an initial policy load cannot be performed using
  	  load_policy, e.g. for anaconda.


author: Dan Walsh <dwalsh@redhat.com> 1.23.6-1
changelog:
  - Update to match NSA
  	* Fixed signed/unsigned pointer bug in load_policy.
  	* Reverted context validation patch for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.23.7-1
changelog:
  - Change -f flag in fixfiles to remove stuff from /tmp
  - Change -F flag to pass -F flag  to restorecon/fixfiles.  (IE Force relabel).


author: Dan Walsh <dwalsh@redhat.com> 1.23.9-1
changelog:
  - Update to match NSA
  	* Updated audit2why for sepol_ prefixes on Flask types to
  	  avoid namespace collision with libselinux, and to
  	  include <selinux/selinux.h> now.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update to match NSA
  	* Extended audit2why to incorporate booleans and local user
  	  settings when analyzing audit messages.


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update to match NSA
  	* Merged fixfiles and newrole patch from Dan Walsh.
  	* Merged audit2why man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.25.5-1
changelog:
  - Update to match NSA
  	* Merged patch to move module read/write code from libsemanage
  	  to libsepol from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update to match NSA
  	* Merged fixes for semodule_link and sestatus from Serge Hallyn (IBM).
  	  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.25.9-1
changelog:
  - Update to match NSA
  	* Changed setfiles -c to translate the context to raw format
  	prior to calling libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.27.1-1
changelog:
  - Update to match NSA
  	* Merged error shadowing bug fix for restorecon from Dan Walsh.
  	* Merged setfiles usage/man page update for -r option from Dan Walsh.
  	* Merged fixfiles -C patch to ignore :s0 addition on update
  	  to a MCS/MLS policy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.2-1
changelog:
  - Update to match NSA
  	* Merged run_init open_init_pty bug fix from Manoj Srivastava
  	  (unblock SIGCHLD).  Bug reported by Erich Schubert.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to match NSA
  	* Merged patch to update semodule to the new libsemanage API
  	and improve the user interface from Karl MacMillan (Tresys).
  	* Modified semodule for the create/connect API split.


author: Dan Walsh <dwalsh@redhat.com> 1.27.5-1
changelog:
  - Update to match NSA
  	* Fixed warnings in load_policy.
  	* Rewrote load_policy to use the new selinux_mkload_policy()
  	interface provided by libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to match NSA
  	* Updated for changes to libsepol.
  	Changed semodule and semodule_package to use the shared libsepol.
  	Disabled build of semodule_link and semodule_expand for now.
  	Updated audit2why for relocated policydb internal headers,
  	still needs to be converted to a shared lib interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to match NSA
  	* Updated semodule_link and semodule_expand to use shared libsepol.
  	Fixed audit2why to call policydb_init prior to policydb_read (still
  	uses the static libsepol).


author: Dan Walsh <dwalsh@redhat.com> 1.27.11-1
changelog:
  - Update to match NSA
  	* Updated semodule_expand to use get interfaces for hidden sepol_module_package type.
  	* Merged newrole and run_init pam config patches from Dan Walsh (Red Hat).
  	* Merged fixfiles patch from Dan Walsh (Red Hat).
  	* Updated semodule for removal of semanage_strerror.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to match NSA
  	* Merged non-PAM Makefile support for newrole and run_init from Timothy Wood.


author: Dan Walsh <dwalsh@redhat.com> 1.27.18-1
changelog:
  - Update to match NSA
  	* Cleaned up usage and error messages and releasing of memory by
  	semodule utilities.
  	* Corrected error reporting by semodule.
  	* Updated semodule_expand for change to sepol interface.
  	* Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to match NSA
  	* Merged semodule support for reload, noreload, and store options
  	  from Joshua Brindle.
  	* Merged semodule_package rewrite from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to match NSA
  	* Merged setsebool patch from Ivan Gyurdiev.
  	  This moves setsebool from libselinux/utils to policycoreutils,
  	  and rewrites it to use libsemanage for permanent boolean changes.


author: Dan Walsh <dwalsh@redhat.com> 1.27.23-1
changelog:
  - Update to match NSA
  	* Changed setfiles for the context canonicalization support.
  	* Changed setsebool to call semanage_is_managed() interface
  	  and fall back to security_set_boolean_list() if policy is
  	  not managed.
  	* Merged setsebool memory leak fix from Ivan Gyurdiev.
  	* Merged setsebool patch to call semanage_set_reload_bools()
  	  interface from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.26-1
changelog:
  * Added -B (--build) option to semodule to force a rebuild.
  	* Reverted setsebool patch to call semanage_set_reload_bools().
  	* Changed setsebool to disable policy reload and to call
  	  security_set_boolean_list to update the runtime booleans.
  	* Changed setfiles -c to use new flag to set_matchpathcon_flags()
  	  to disable context translation by matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-2
changelog:
  - Update to match NSA
  	* Merged genhomedircon rewrite from Dan Walsh.
  - Rewrite audit2allow to python


author: Dan Walsh <dwalsh@redhat.com> 1.27.29-1
changelog:
  - Update to match NSA
  	* Merged audit2allow python script from Dan Walsh.
  	  (old script moved to audit2allow.perl, will be removed later).
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged semodule quieting patch from Dan Walsh
  	  (inverts default, use -v to restore original behavior).


author: Dan Walsh <dwalsh@redhat.com> 1.27.30-1
changelog:
  - Update to match NSA
  	* Merged sestatus, audit2allow, and semanage patch from Dan Walsh.
  	* Fixed semodule -v option.


author: Dan Walsh <dwalsh@redhat.com> 1.27.31-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to always use user_r for the role in the
  	  managed case since user_get_defrole is broken.
  - Add te file capabilities to audit2allow
  - Add man pages for semodule


author: Dan Walsh <dwalsh@redhat.com> 1.27.33-1
changelog:
  - Update to match NSA
  	* Merged audit2allow --tefile and --fcfile support from Dan Walsh.
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged semodule* man pages from Dan Walsh, and edited them.
  	* Changed setfiles to set the MATCHPATHCON_VALIDATE flag to
  	  retain validation/canonicalization of contexts during init.


author: Dan Walsh <dwalsh@redhat.com> 1.27.35-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon bug fix from Dan Walsh.
  	* Revised semodule* man pages to refer to checkmodule and
  	  to include example sections.


author: Dan Walsh <dwalsh@redhat.com> 1.27.36-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to warn on use of ROLE in homedir_template
  	  if using managed policy, as libsemanage does not yet support it.


author: Dan Walsh <dwalsh@redhat.com> 1.29.1-1
changelog:
  - Update to match NSA
  	* Merged fix for audit2allow long option list from Dan Walsh.
  	* Merged -r option for restorecon (alias for -R) from Dan Walsh.
  	* Merged chcat script and man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Fix genhomedircon to work in installer
  - Update to match NSA
  	* Merged patch for chcat script from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Update to match NSA
  	* Merged semanage getpwnam bug fix from Serge Hallyn (IBM).
  	* Merged patch series from Ivan Gyurdiev.
  	  This includes patches to:
  	  - cleanup setsebool
  	  - update setsebool to apply active booleans through libsemanage
  	  - update semodule to use the new semanage_set_rebuild() interface
  	  - fix various bugs in semanage
  	* Merged patch from Dan Walsh (Red Hat).
  	  This includes fixes for restorecon, chcat, fixfiles, genhomedircon,
  	  and semanage.


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon and semanage patch from Dan Walsh.
  	* Changed semodule error reporting to include argv[0].


author: Dan Walsh <dwalsh@redhat.com> 1.29.7-1
changelog:
  - Update to match NSA
  	* Merged newrole cleanup patch from Steve Grubb.
  	* Merged setfiles/restorecon performance patch from Russell Coker.
  	* Merged genhomedircon and semanage patches from Dan Walsh.
  	* Merged remove add_local/set_local patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.8-1
changelog:
  - Update to match NSA
  	* Merged semanage fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat, genhomedircon, and semanage diffs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.11-1
changelog:
  - Added translation support to semanage
  - Update from upstream
  	* Modified newrole and run_init to use the loginuid when
  	  supported to obtain the Linux user identity to re-authenticate,
  	  and to fall back to real uid.  Dropped the use of the SELinux
  	  user identity, as Linux users are now mapped to SELinux users
  	  via seusers and the SELinux user identity space is separate.
  	* Merged semanage bug fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat.8 and genhomedircon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.15-1
changelog:
  - Update from upstream
  	* Merged newrole audit patch from Steve Grubb.
  	* Merged seuser -> seuser local rename patch from Ivan Gyurdiev.
  	* Merged semanage and semodule access check patches from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.17-1
changelog:
  - Update from upstream
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged seusers.system patch from Ivan Gyurdiev.
  	* Merged improve port/fcontext API patch from Ivan Gyurdiev.
  	* Merged genhomedircon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.20-1
changelog:
  - Update from upstream
  	* Merged seuser/user_extra support patch to semodule_package
  	  from Joshua Brindle.
  	* Merged getopt type fix for semodule_link/expand and sestatus
  	  from Chris PeBenito.
  - Fix genhomedircon output


author: Dan Walsh <dwalsh@redhat.com> 1.29.23-1
changelog:
  - Update from upstream
  	* Merged newrole -V/--version support from Glauber de Oliveira Costa.
  	* Merged genhomedircon prefix patch from Dan Walsh.
  	* Merged optionals in base patch from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.26-1
changelog:
  - Update from upstream
  	* Merged semanage bug fix patch from Ivan Gyurdiev.
  	* Merged improve bindings patch from Ivan Gyurdiev.
  	* Merged semanage usage patch from Ivan Gyurdiev.
  	* Merged use PyList patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.30.1-1
changelog:
  - Make audit2allow translate dontaudit as well as allow rules
  - Update from upstream
  	* Merged semanage labeling prefix patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.30.4-1
changelog:
  - Update from upstream
  	* Merged audit2allow fixes for refpolicy from Dan Walsh.
  	* Merged fixfiles patch from Dan Walsh.
  	* Merged restorecond daemon from Dan Walsh.
  	* Merged semanage non-MLS fixes from Chris PeBenito.
  	* Merged semanage and semodule man page examples from Thomas Bleher.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Add /etc/samba/secrets.tdb to restorecond.conf
  - Update from upstream
  	* Merged semanage prefix support from Russell Coker.
  	* Added a test to setfiles to check that the spec file is
  	  a regular file.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - Update to upstream
  	* Merged fix warnings patch from Karl MacMillan.
  	* Merged patch from Dan Walsh.
  	  This includes audit2allow changes for analysis plugins,
  	  internationalization support for several additional programs
  	  and added po files, some fixes for semanage, and several cleanups.
  	  It also adds a new secon utility.


author: Dan Walsh <dwalsh@redhat.com> 1.30.9-1
changelog:
  - Update to upstream
  	* Fixed audit2allow and po Makefiles for DESTDIR= builds.
  	* Merged .po file patch from Dan Walsh.
  	* Merged bug fix for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Update to upstream
  	* Merged patch with updates to audit2allow, secon, genhomedircon,
  	  and semanage from Dan Walsh.


author: James Antill <jantill@redhat.com> 1.30.10-2
changelog:
  - secon fixes for --self-exec etc.
  - secon change from level => sensitivity, add clearance.
  - Add mass relabel AUDIT patch, but disable it until kernel problem solved.


author: Dan Walsh <dwalsh@redhat.com> 1.30.11-1
changelog:
  - Update to upstream
  	* Merged more translations from Dan Walsh.
  	* Merged patch to relocate setfiles to /sbin for early relabel
  	  when /usr might not be mounted from Dan Walsh.
  	* Merged semanage/seobject patch to preserve fcontext ordering in list.
  	* Merged secon patch from James Antill.


author: Dan Walsh <dwalsh@redhat.com> 1.30.14-1
changelog:
  - Update to upstream
  	* Merged fix for setsebool error path from Serge Hallyn.
  	* Merged patch from Dan Walsh with:
  	*    Updated po files.
  	*    Fixes for genhomedircon and seobject.
  	*    Audit message for mass relabel by setfiles.


author: Dan Walsh <dwalsh@redhat.com> 1.30.17-1
changelog:
  - Update to upstream
  	* Lindent.
  	* Merged patch from Dan Walsh with:
  	  * -p option (progress) for setfiles and restorecon.
  	  * disable context translation for setfiles and restorecon.
  	  * on/off values for setsebool.
  	* Merged setfiles and semodule_link fixes from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.30.22-1
changelog:
  - Update to upstream
  	* Merged restorecond size_t fix from Joshua Brindle.
  	* Merged secon keycreate patch from Michael LeMay.
  	* Merged restorecond fixes from Dan Walsh.
  	  Merged updated po files from Dan Walsh.
  	* Merged python gettext patch from Stephen Bennett.
  	* Merged semodule_deps from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.30.25-1
changelog:
  - Update to upstream
  	* Merged patch from Dan Walsh with:
  		* audit2allow: process MAC_POLICY_LOAD events
  		* newrole: run shell with - prefix to start a login shell
  		* po: po file updates
  		* restorecond: bail if SELinux not enabled
  		* fixfiles: omit -q
  		* genhomedircon:  fix exit code if non-root
  		* semodule_deps:  install man page
  	* Merged secon Makefile fix from Joshua Brindle.
  	* Merged netfilter contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.30.26-1
changelog:
  - Update to upstream
  	* Merged semanage local file contexts patch from Chris PeBenito.
  - Fix fixfiles log creation
  - More translations


author: Dan Walsh <dwalsh@redhat.com> 1.30.27-4
changelog:
  - Add -i qualified to restorecon to tell it to ignore files that do not exist
  - Fixfiles also modified for this change


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-1
changelog:
  - Security fixes to run python in a more locked down manner
  - More Translations
  - Update to upstream
  	* Merged fix for restorecon // handling from Erich Schubert.
  	* Merged translations update and fixfiles fix from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-6
changelog:
  - Change setfiles and restorecon to use stderr except for -o flag
  - Also -o flag will now output files


author: Dan Walsh <dwalsh@redhat.com> 1.30.30-1
changelog:
  - Update to upstream
  	* Merged newrole auditing of failures due to user actions from
  	  Michael Thompson.


author: Dan Walsh <dwalsh@redhat.com> 1.32-1
changelog:
  - Add newrole audit patch from sgrubb
  - Update to upstream
  	* Merged audit2allow -l fix from Yuichi Nakamura.
  	* Merged restorecon -i and -o - support from Karl MacMillan.
  	* Merged semanage/seobject fix from Dan Walsh.
  	* Merged fixfiles -R and verify changes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.4-1
changelog:
  - Upstream accepted my patches
  	* Merged setsebool patch from Karl MacMillan.
  	  This fixes a bug reported by Yuichi Nakamura with
  	  always setting booleans persistently on an unmanaged system.


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-1
changelog:
  - Update to upstream
  	* Patch from Dan Walsh to add an pam_acct_msg call to run_init
  	* Patch from Dan Walsh to fix error code returns in newrole
  	* Patch from Dan Walsh to remove verbose flag from semanage man page
  	* Patch from Dan Walsh to make audit2allow use refpolicy Makefile
  	  in /usr/share/selinux/<SELINUXTYPE>


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-5
changelog:
  - Update po files
  - Fix newrole to open stdout and stderr rdrw so more will work on MLS machines
  Resolves: #216920


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-6
changelog:
  - Fix audit2allow generating reference policy
  - Fix semanage to manage user roles properly
  Resolves: #220071


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-7
changelog:
  - add exists switch to semanage to tell it not to check for existance of Linux user
  Resolves: #219421


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-9
changelog:
  - Fix fixfiles script to use tty command correctly.  If this command fails, it
  should set the LOGFILE to /dev/null
  Resolves: #220879


author: Dan Walsh <dwalsh@redhat.com> 1.33.8-1
changelog:
  - Update to upstream
  	* Merged patches from Dan Walsh to:
  	  - omit the optional name from audit2allow
  	  - use the installed python version in the Makefiles
  	  - re-open the tty with O_RDWR in newrole


author: Dan Walsh <dwalsh@redhat.com> 1.33.10-1
changelog:
  - Update to upstream
  	* Merged patch to correctly handle a failure during semanage handle
  	  creation from Karl MacMillan.
  	* Merged patch to fix seobject role modification from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.11-1
changelog:
  - Update to upstream
  	* Merged fixfiles and seobject fixes from Dan Walsh.
  	* Merged semodule support for list of modules after -i from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-1
changelog:
  - Want to update to match api
  - Update to upstream
  	* Merged newrole securetty check from Dan Walsh.
  	* Merged semodule patch to generalize list support from Karl MacMillan.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> 1.33.14-1
changelog:
  * Merged newrole man page patch from Michael Thompson.
  	* Merged patch to fix python unicode problem from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.15-1
changelog:
  - Update to upstream
  	* Merged unicode-to-string fix for seobject audit from Dan Walsh.
  	* Merged man page updates to make "apropos selinux" work from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.34.1-1
changelog:
  - Fix system-config-selinux ports view
  - Update to upstream
  	* Fixed newrole non-pam build.
  	* Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> 2.0.0-1
changelog:
  - Update to upstream
  	* Merged new audit2allow from Karl MacMillan.
  	  This audit2allow depends on the new sepolgen python module.
  	  Note that you must run the sepolgen-ifgen tool to generate
  	  the data needed by audit2allow to generate refpolicy.
  	* Fixed newrole non-pam build.
  - Fix Changelog and spelling error in man page


author: Dan Walsh <dwalsh@redhat.com> 2.0.1-1
changelog:
  - Update to upstream
  	* Merged small fix to correct include of errcodes.h in semodule_deps from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.2-1
changelog:
  - Update to upstream
  	* Merged seobject exception handler fix from Caleb Case.
  	* Merged setfiles memory leak patch from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.3-1
changelog:
  - Update to upstream
  	* Merged translations update from Dan Walsh.
  	* Merged chcat fixes from Dan Walsh.
  	* Merged man page fixes from Dan Walsh.
  	* Merged seobject prefix validity checking from Dan Walsh.
  	* Merged Makefile and refparser.py patch from Dan Walsh.
  	  Fixes PYTHONLIBDIR definition and error handling on interface files.


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-1
changelog:
  - Update to upstream
    - policycoreutils
  	* Merged newrole O_NONBLOCK fix from Linda Knippers.
  	* Merged sepolgen and audit2allow patches to leave generated files
  	  in the current directory from Karl MacMillan.
  	* Merged restorecond memory leak fix from Steve Grubb.
    -sepolgen
  	* Merged patch to leave generated files (e.g. local.te) in current directory from Karl MacMillan.
  	* Merged patch to make run-tests.py use unittest.main from Karl MacMillan.
  	* Merged patch to update PLY from Karl MacMillan.
  	* Merged patch to update the sepolgen parser to handle the latest reference policy from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-3
changelog:
  - Update to upstream
    -sepolgen
  	* Merged support for enabling parser debugging from Karl MacMillan.
  - Add sgrupp cleanup of restorcon init script


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-1
changelog:
  - Update to upstream
  	* Merged restorecond init script LSB compliance patch from Steve Grubb.
    -sepolgen
  	* Merged better matching for refpolicy style from Karl MacMillan
  	* Merged support for extracting interface paramaters from interface calls from Karl MacMillan
  	* Merged support for parsing USER_AVC audit messages from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-5
changelog:
  - Change location of audit2allow and sepol-ifgen to sbin
  - Updated version of sepolgen
  	* Merged patch to move the sepolgen runtime data from /usr/share to /var/lib to facilitate a read-only /usr from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-6
changelog:
  - Updated version of sepolgen
  	* Merged patch to discard self from types when generating requires from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-8
changelog:
  - system-config-selinux should be able to run on a disabled system,
  - at least enough to get it enabled.


author: Dan Walsh <dwalsh@redhat.com> 2.0.8-1
changelog:
  - Updated version of sepolgen
  	* Merged updates to sepolgen-ifgen from Karl MacMillan.
  	* Merged updates to sepolgen parser and tools from Karl MacMillan.
  	  This includes improved debugging support, handling of interface
  	  calls with list parameters, support for role transition rules,
  	  updated range transition rule support, and looser matching.


author: Dan Walsh <dwalsh@redhat.com> 2.0.9-1
changelog:
  - Updated version of sepolgen
  	* Merged seobject setransRecords patch to return the first alias from Xavier Toth.


author: Dan Walsh <dwalsh@redhat.com> 2.0.10-1
changelog:
  - Updated version of policycoreutils
  	* Merged chcat, fixfiles, genhomedircon, restorecond, and restorecon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.13-1
changelog:
  - Updated version of policycoreutils
  	* Merged setsebool patch to only use libsemanage for persistent boolean changes from Stephen Smalley.
  	* Merged genhomedircon patch to use the __default__ setting from Dan Walsh.
  	* Dropped -b option from load_policy in preparation for always preserving booleans across reloads in the kernel.


author: Dan Walsh <dwalsh@redhat.com> 2.0.15-1
changelog:
  - Updated version of policycoreutils
  	* Merged po file updates from Dan Walsh.
  - Fix semanage to be able to modify prefix in user record


author: Dan Walsh <dwalsh@redhat.com> 2.0.16-1
changelog:
  - Updated version of policycoreutils
  	* Merged support for modifying the prefix via semanage from Dan Walsh.
  - Fixed genhomedircon to find homedirs correctly.


author: Dan Walsh <dwalsh@redhat.com> 2.0.20-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged setfiles -c usage fix from Dan Walsh.
  	* Merged restorecon fix from Yuichi Nakamura.
  	* Dropped -lsepol where no longer needed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.22-13
changelog:
  - Speed up genhomedircon by an order of magnitude by compiling regex
  - Allow semanage fcontext -a -t <<none>> /path to work


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-1
changelog:
  - Update semodule man page
  	* Fix genhomedircon searching for USER from Todd Miller
  	* Install run_init with mode 0755 from Dan Walsh.
  	* Fix chcat from Dan Walsh.
  	* Fix fixfiles pattern expansion and error reporting from Dan Walsh.
  	* Optimize genhomedircon to compile regexes once from Dan Walsh.
  	* Fix semanage gettext call from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-13
changelog:
  - Upgrade version of sepolgen from NSA
  	* Expand the sepolgen parser to parse all current refpolicy modules from Karl MacMillan.
  	* Suppress generation of rules for non-denials from Karl MacMillan (take 3).


author: Dan Walsh <dwalsh@redhat.com> 2.0.28-1
changelog:
  - Update to upstream
  	* Update semodule man page for -D from Dan Walsh.
  	* Add boolean, locallist, deleteall, and store support to semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.29-1
changelog:
  - Update to upstream
  	* Add genhomedircon script to invoke semodule -Bn from Dan Walsh.
  - Add deleteall for ports and fcontext


author: Dan Walsh <dwalsh@redhat.com> 2.0.31-1
changelog:
  - Remove no.po
  - Update to upstream
  	* Fix semodule option handling from Dan Walsh.
  	* Add deleteall support for ports and fcontexts in semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-1
changelog:
  - Upgrade from NSA
  	* Drop verbose output on fixfiles -C from Dan Walsh.
  	* Fix argument handling in fixfiles from Dan Walsh.
  	* Enhance boolean support in semanage, including using the .xml description when available, from Dan Walsh.
  - Fix handling of final screen in polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-4
changelog:
  - Fix sepolgen to be able to parse Fedora 9 policy
        Handle ifelse statements
        Handle refpolicywarn inside of define
        Add init.if and inetd.if into parse
        Add parse_file to syntax error message


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-1
changelog:
  - Update to upstream
  	* Update Makefile to not build restorecond if
  	  /usr/include/sys/inotify.h is not present


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-2
changelog:
  - Make sepolgen set error exit code when partial failure
  - audit2why now checks booleans for avc diagnosis


author: Dan Walsh <dwalsh@redhat.com> 2.0.35-1
changelog:
  - Update to upstream
  	* Merged support for non-interactive newrole command invocation from Tim Reed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.36-1
changelog:
  - Update to upstream
  	* Merged update to chcat, fixfiles, and semanage scripts from Dan Walsh.
  	* Merged sepolgen fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Update to upstream
    * Merged audit2allow cleanups and boolean descriptions from Dan Walsh.
    * Merged setfiles -0 support by Benny Amorsen via Dan Walsh.
    * Merged fixfiles fixes and support for ext4 and gfs2 from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.39-1
changelog:
  - Don't initialize audit2allow for audit2why call.  Use default
  - Update to upstream
  	* Merged fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.41-1
changelog:
  - Update to upstream
  	* Merged audit2why fix and semanage boolean --on/--off/-1/-0 support from Dan Walsh.
  	* Merged a second fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.42-1
changelog:
  - Update to upstream
  	* Make semodule_expand use sepol_set_expand_consume_base to reduce
  	  peak memory usage.


author: Dan Walsh <dwalsh@redhat.com> 2.0.43-1
changelog:
  - Update to upstream
  	* Merged fix fixfiles option processing from Vaclav Ovsik.
  - Added existing users, staff and user_t users to polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.46-1
changelog:
  - Update to upstream
  	* Update audit2allow to report dontaudit cases from Dan Walsh.
  	* Fix semanage port to use --proto from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-1
changelog:
  - Make restorecond not start by default
  - Fix polgengui to allow defining of confined roles.
  - Add patches from Lubomir Rintel <lkundrak@v3.sk>
    * Add necessary runtime dependencies on setools-console for -gui
    * separate stderr when run seinfo commands
  - Update to upstream
    * Update semanage man page for booleans from Dan Walsh.
    * Add further error checking to seobject.py for setting booleans.


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-2
changelog:
  - Add rm -rf /tmp/gconfd-* /tmp/pulse-* /tmp/orbit-* to fixfiles restore
  - So that mislabeled files will get removed on full relabel


author: Dan Walsh <dwalsh@redhat.com> 2.0.49-1
changelog:
  - Update to upstream
  	* Remove security_check_context calls for prefix validation from semanage.
  	* Change setfiles and restorecon to not relabel if the file already has the correct context value even if -F/force is specified.


author: Dan Walsh <dwalsh@redhat.com> 2.0.52-2
changelog:
  - Add lockdown wizard
  - Allow semanage booleans to take an input file an process lots of booleans at once.


author: Dan Walsh <dwalsh@redhat.com> 2.0.53-1
changelog:
  - Update to upstream
  	* Change setfiles to validate all file_contexts files when using -c from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.54-1
changelog:
  - Update to upstream
  	* Add support for boolean files and group support for seusers from Dan Walsh.
  	* Ensure that setfiles -p output is newline terminated from Russell Coker.


author: Dan Walsh <dwalsh@redhat.com> 2.0.56-1
changelog:
  - Fix semanage help display
  - Update to upstream
  	* fixfiles will now remove all files in /tmp and will check for
  	  unlabeled_t in /tmp and /var/tmp from Dan Walsh.
  	* add glob support to restorecond from Dan Walsh.
  	* allow semanage to handle multi-line commands in a single transaction
  	  from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.58-1
changelog:
  - Update to upstream
  	* Allow local file context entries to override policy entries in
  	semanage from Dan Walsh.
  	* Newrole error message corrections from Dan Walsh.
  	* Add exception to audit2why call in audit2allow from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-1
changelog:
  - Update to upstream
  	* chcat: cut categories at arbitrary point (25) from Dan Walsh
  	* semodule: use new interfaces in libsemanage for compressed files
  	  from Dan Walsh
  	* audit2allow: string changes for usage


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-3
changelog:
  - Add Domains Page to system-config-selinux
  - Add ability to create dbus confined applications to polgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.62-1
changelog:
  - Update to upstream
  	* Add btrfs to fixfiles from Dan Walsh.
  	* Remove restorecond error for matching globs with multiple hard links
  	and fix some error messages from Dan Walsh.
  	* Make removing a non-existant module a warning rather than an error
  	  from Dan Walsh.
  	* Man page fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.63-1
changelog:
  - Update to upstream
  	* Fix transaction checking from Dan Walsh.
  	* Make fixfiles -R (for rpm) recursive.
  	* Make semanage permissive clean up after itself from Dan Walsh.
  	* add /root/.ssh/* to restorecond.conf


author: Dan Walsh <dwalsh@redhat.com> 2.0.64-1
changelog:
  - Update to upstream
  	* Keep setfiles from spamming console from Dan Walsh.
  	* Fix chcat's category expansion for users from Dan Walsh.
  - Update po files
  - Fix sepolgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.68-1
changelog:
  - Fix location of man pages
  - Update to upstream
  	* Modify setfiles to exclude mounts without seclabel option in
  	/proc/mounts on kernels >= 2.6.30 from Thomas Liu.
  	* Re-enable disable_dontaudit rules upon semodule -B from Christopher
  	Pardy and Dan Walsh.
  	* setfiles converted to fts from Thomas Liu.


author: Dan Walsh <dwalsh@redhat.com> 2.0.70-1
changelog:
  - Update to upstream
  	* Modify restorecon to only call realpath() on user-supplied pathnames
  	from Stephen Smalley.
  	* Fix typo in fixfiles that prevented it from relabeling btrfs
  	  filesystems from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.71-1
changelog:
  - Fix chcat to report error on non existing file
  - Update to upstream
  	* Modify setfiles/restorecon checking of exclude paths.  Only check
  	user-supplied exclude paths (not automatically generated ones based on
  	lack of seclabel support), don't require them to be directories, and
  	ignore permission denied errors on them (it is ok to exclude a path to
  	which the caller lacks permission).


author: Ville Skyttä <ville.skytta@iki.fi> - 2.0.71-9
changelog:
  - Don't try to remove restorecond after last erase (done already in %preun).
  - Ensure scriptlets exit with status 0.
  - Fix %post and %pr


author: Dan Walsh <dwalsh@redhat.com> 2.0.73-1
changelog:
  - Update to upstream
  	* Add semanage dontaudit to turn off dontaudits from Dan Walsh.
  	* Fix semanage to set correct mode for setrans file from Dan Walsh.
  	* Fix malformed dictionary in portRecord from Dan Walsh.
  	* Restore symlink handling support to restorecon based on a patch by
  	Martin Orr.  This fixes the restorecon /dev/stdin performed by Debian
  	udev scripts that was broken by policycoreutils 2.0.70.


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-1
changelog:
  - Update to upstream
  	* Change semodule upgrade behavior to install even if the module
  	  is not present from Dan Walsh.
  	* Make setfiles label if selinux is disabled and a seclabel aware
  	  kernel is running from Caleb Case.
  	* Clarify forkpty() error message in run_init from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-8
changelog:
  - Add check to sandbox to verify save changes - Chris Pardy
  - Fix memory leak in restorecond - Steve Grubb


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-14
changelog:
  - Allow semanage -i and semanage -o to generate customization files.
  - semanage -o will generate a customization file that semanage -i can read and set a machines to the same selinux configuration


author: Dan Walsh <dwalsh@redhat.com> 2.0.76-1
changelog:
  - Update to upstream
  	* Remove setrans management from semanage, as it does not work
  	  from Dan Walsh.
  	* Move load_policy from /usr/sbin to /sbin from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.77-1
changelog:
  - Update to upstream
  	* Fixed bug preventing semanage node -a from working
  	  from Chad Sellers
  	* Fixed bug preventing semanage fcontext -l from working
  	  from Chad Sellers
  - Change semanage to use unicode


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-1
changelog:
  - Update to upstream
  	* Remove non-working OUTFILE from fixfiles from Dan Walsh.
  	* Additional exception handling in chcat from Dan Walsh.

  	* fix sepolgen to read a "type 1403" msg as a policy load by Stephen
  	  Smalley <sds@tycho.nsa.gov>
  	* Add support for Xen ocontexts from Paul Nuzzi.


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-14
changelog:
  - Add session capability to sandbox
  - sandbox -SX -H ~/.homedir -t unconfined_t -l s0:c15 /etc/gdm/Xsession


author: Dan Walsh <dwalsh@redhat.com> 2.0.81-4
changelog:
  - Update to upstream - sepolgen
  	* Add since-last-boot option to audit2allow from Dan Walsh.
  	* Fix sepolgen output to match what Chris expects for upstream
  	  refpolicy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-7
changelog:
  - Fix crash when args are empty
  Resolves: #582542
  - Fix semange to exit on bad options
  - Fix semanage dontaudit man page section
  Resolves: #582533


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-13
changelog:
  - Make semanage boolean work on disabled machines and during livecd xguest
  - Fix homedir and tmpdir handling in sandbox
  Resolves: #587263


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-17
changelog:
  - Fix policy tool to have correct name in menus
  - Fix seunshare to handle /tmp being in ~/home
  - Fix saving of altered files
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-23
changelog:
  - Fix seunshare translations
  - Fix seunshare to work on all arches
  - Fix icon for system-config-selinux
  Resolves: #595276


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-27
changelog:
  - Move genhomedircon.8 to same package as genhomedircon
  - Fix sandbox to pass unit test
  Resolves: #595796


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-17
changelog:
  - Apply patch to restorecond from Chris Adams, which will cause restorecond
  - to watch first user that logs in.


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-20
changelog:
  - Tighten down seunshare to create /tmp dir with sticky bit and MS_NODEV | MS_NOSUID | MS_NOEXEC;
  - Remove setsid on seunshare so ^c on sandbox will cause apps to exit
  - Add dbus-launch --exit-with-session so all processes launched within the sandbox exit with the sandbox
  - Clean up error handling so error will get sent back to sandbox tool


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-32
changelog:
  - Remove setuid flag and replace with file capabilities
  - Fix sandbox handling of files with spaces in them


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-33
changelog:
  - Move /etc/pam.d/newrole in to polcicycoreutils-newrole
  - Additional capability checking in sepolgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-3
changelog:
  - Polgengui raises the wrong type of exception.  #471078
  - Change semanage to not allow it to semanage module -D
  - Change setsebool to suggest run as root on failure


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-10
changelog:
  - Cleaup selinux-polgengui to be a little more modern, fix comments and use selected name
  - Cleanup chcat man page


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-13
changelog:
  - Rewrite seunshare to make sure /tmp is mounted stickybit owned by root
  - Only allow names in polgengui that contain letters and numbers
  - Fix up node handling in semanage command
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-16
changelog:
  - Require python-IPy for policycoreutils-python package
  - Fixes for sepologen
    - Usage statement needs -n name
    - Names with _ are being prevented
    - dbus apps should get _chat interface


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-18
changelog:
  - put back in old handling of -T in sandbox command
  - Put back setsid in seunshare
  - Fix rsync to maintain times


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-20
changelog:
  - Change sepolgen-ifgen to search all available policy files
  - Exit in restorecond if it can not find a UID in the passwd database


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-21
changelog:
  - change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_*
  - This will allow default sandboxes to work on NFS homedirs without allowing
    access to homedir data


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-23
changelog:
  - Fix sepolgen to generate network polcy using generic_if and genric_node versus all_if and all_node


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-6
changelog:
  - Apply patches from Christoph A.
    * fix sandbox title
    * stop xephyr from li
  - Also ignore errors on sandbox include of directory missing files


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-10
changelog:
  - Allow semodule to pick alternate root for selinux files
  - Add ~/.config/* to restorcond_user.conf, so restorecond will watch for mislabeled files in this directory.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-16
changelog:
  - Add -C option to sandbox and seunshare to maintain capabilities, otherwise
  the bounding set will be dropped.
  - Change --cgroups short name -c rather then -C for consistancy
  - Fix memory and fd leaks in seunshare


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-17
changelog:
  - Add -k qualifier to seunshare to have it attempt to kill all processes with
  the matching MCS label.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-18
changelog:
  - Change seunshare to send kill signals to the childs session.
  - Also add signal handler to catch sigint, so if user enters ctrl-C sandbox will shutdown.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  2.1.4 2011-08-17
  	* run_init: clarification of the usage in the
  	* semanage: fix usage header around booleans
  	* semanage: remove useless empty lines
  	* semanage: update man page with new examples
  	* semanage: update usage text
  	* semanage: introduce file context equivalencies
  	* semanage: enable and disable modules
  	* semanage: output all local modifications
  	* semanage: introduce extraction of local configuration
  	* semanage: cleanup error on invalid operation
  	* semanage: handle being called with no arguments
  	* semanage: return sooner to save CPU time
  	* semanage: surround getopt with try/except
  	* semanage: use define/raise instead of lots of
  	* semanage: some options are only valid for
  	* semanage: introduce better deleteall support
  	* semanage: do not allow spaces in file
  	* semanage: distinguish between builtin and local permissive
  	* semanage: centralized ip node handling
  	* setfiles: make the restore function exclude() non-static
  	* setfiles: use glob to handle ~ and
  	* fixfiles: do not hard code types
  	* fixfiles: stop trying to be smart about
  	* fixfiles: use new kernel seclabel option
  	* fixfiles: pipe everything to cat before sending
  	* fixfiles: introduce /etc/selinux/fixfiles_exclude_dirs
  	* semodule: support for alternative root paths

  2.1.3 2011-08-03
  	* semanage: fix indention
  	* semodule_package: fix man page typo
  	* semodule_expand: update man page with -a
  	* semanage: handle os errors
  	* semanage: fix traceback with bad options
  	* semanage: show usage on -h or --help
  	* semanage: introduce more deleteall options
  	* semanage: verify ports < 65536
  	* transaction into semanageRecords
  	* make get_handle a method of semanageRecords
  	* remove a needless blank line
  	* make process_one error if not initialized correctly
  	* fixfiles: correct usage for r_opts.rootpath
  	* put -p in help for restorecon and
  	* fixfiles: do not try to only label
  	* fixfiles clean up /var/run and /var/lib/debug
  	* fixfiles delete tmp sockets and pipes rather
  	* fixfile use find -delete instead of pipe
  	* chcat man page typo
  	* add man page for genhomedircon
  	* setfiles fix typo
  	* setsebool should inform users they need to
  	* setsebool typos
  	* open_init_tty man page typos
  	* Don't add user site directory to sys.path
  	* newrole retain CAP_SETPCAP

  2.1.2 2011-08-02
  	* seunshare: define _GNU_SOURCE earlier
  	* make ignore_enoent do something
  	* restorecond: first user logged in is not noticed
  	* Repo: update .gitignore

  2.1.1 2011-08-01
  	* Man page updates
  	* restorecon fix for bad inotify assumptions

  2.1.0 2011-07-27
  	* Release, minor version bump


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  -Update to upstream
     * policycoreutils
  	* setfiles: Fix process_glob to handle error situations
  	* sandbox: Allow seunshare to run as root
  	* sandbox: trap sigterm to make sure sandbox
  	* sandbox: pass DPI from the desktop
  	* sandbox: seunshare: introduce helper spawn_command
  	* sandbox: seunshare: introduce new filesystem helpers
  	* sandbox: add -C option to not drop
  	* sandbox: split seunshare caps dropping
  	* sandbox: use dbus-launch
  	* sandbox: numerous simple updates to sandbox
  	* sandbox: do not require selinux context
  	* sandbox: Makefile: new man pages
  	* sandbox: rename dir to srcdir
  	* sandbox: allow users specify sandbox window size
  	* sandbox: check for paths up front
  	* sandbox: use defined values for paths rather
  	* sandbox: move seunshare globals to the top
  	* sandbox: whitespace fix
  	* semodule_package: Add semodule_unpackage executable
  	* setfiles: get rid of some stupid globals
  	* setfiles: move exclude_non_seclabel_mounts to a generic location
     * sepolgen
  	* refparser: include open among valid permissions
  	* refparser: add support for filename_trans rules


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-4
changelog:
  - Maintain the LANG environment Variable into the sandbox
  - Change restorecon/setfiles to only change type part of the context unless
    -f qualifier is given


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
      policycoreutils-2.1.6
  	* sepolgen-ifgen: new attr-helper does something
  	* audit2allow: use alternate policy file
  	* audit2allow: sepolgen-ifgen use the attr helper
  	* setfiles: switch from stat to stat64
  	* setfiles: Fix potential crash using dereferenced ftsent
  	* setfiles: do not wrap * output at 80 characters
  	* sandbox: add -Wall and -Werror to makefile
  	* sandbox: add sandbox cgroup support
  	* sandbox: rewrite /tmp handling
  	* sandbox: do not bind mount so much
  	* sandbox: add level based kill option
  	* sandbox: cntrl-c should kill entire process control group
  	* Create a new preserve_tunables flag in sepol_handle_t.
  	* semanage: show running and disk setting for booleans
  	* semanage: Dont print heading if no items selected
  	* sepolgen: audit2allow is mistakakenly not allowing valid module names
  	* semanage: Catch RuntimeErrors, that can be generated when SELinux is disabled
  	* More files to ignore
  	* tree: default make target to all not install
  	* sandbox: do not load unused generic init functions
      sepolgen-1.1.2
  	* src: sepolgen: add attribute storing infrastructure
  	* Change perm-map and add open to try to get better results on
  	* look for booleans that might solve problems
  	* sepolgen: audit2allow is mistakakenly not allowing valid module names
  	* tree: default make target to all not install


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-5
changelog:
  - A couple of minor coverity fixes for a potential leaked file descriptor
  - An an unchecked return code.
  - Add ~/.local/share/* to restorecond_user watches


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Upgrade to policycoreutils upstream
  	* sandbox: Maintain the LANG environment into the sandbox
  	* audit2allow: use audit2why internally
  	* fixfiles: label /root but not /var/lib/BackupPC
  	* semanage: update local boolean settings is dealing with localstore
  	* semanage: missing modify=True
  	* semanage: set modified correctly
  	* restorecond: make restorecond dbuss-able
  	* restorecon: Always check return code on asprintf
  	* restorecond: make restorecond -u exit when terminal closes
  	* sandbox: introduce package name and language stuff
  	* semodule_package: remove semodule_unpackage on clean
  	* fix sandbox Makefile to support DESTDIR
  	* semanage: Add -o description to the semanage man page
  	* make use of the new realpath_not_final function
  	* setfiles: close /proc/mounts file when finished
  	* semodule: Document semodule -p in man page
  	* setfiles: fix use before initialized
  	* restorecond: Add .local/share as a directory to watch
  - Upgrade to sepolgen upstream
  	* Ignore permissive qualifier if found in an interface
  	* Return name field in avc data


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-4
changelog:
  - sandbox init script should always return 0
  - sandbox command needs to check range of categories and report error if not big enough


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-6
changelog:
  - Add listing of distribution equivalence class from semanage fcontext -l
  - Add checking to semanage fcontext -a to guarantee a file specification will not be masked by an equivalence


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-7
changelog:
  - Fix dpi handling in sandbox
  - Make sure semanage fcontext -l -C prints if only local equiv have changed


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Upgrade to upstream
  	* sandbox: move sandbox.conf.5 to just sandbox.5
  	* po: Makefile use -p to preserve times to allow multilib simultatious installs
  	* of po files
  	* sandbox: Allow user to specify the DPI value for X in a sandbox
  	* sandbox: make sure the domain launching sandbox has at least 100 categories
  	* sandbox: do not try forever to find available category set
  	* sandbox: only complain if sandbox unable to launch
  	* sandbox: init script run twice is still successful
  	* semanage: print local and dristo equiv rules
  	* semanage: check file equivalence rules for conflict
  	* semanage: Make sure semanage fcontext -l -C prints even if local keys
  	* are not defined
  	* semanage: change src,dst to target,substitute for equivalency
  	* sestatus: Updated sestatus and man pages.
  	* Added SELinux config file man page.
  	* add clean target to man Makefile


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  -Update to upstream
  - sepolgen
  	* better analysis of why things broke
  - policycoreutils
  	* Remove excess whitespace
  	* sandbox: Add back in . functions to sandbox.init script
  	* Fix Makefile to match other policycoreutils Makefiles
  	* semanage: drop unused translation getopt


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
changelog:
  - Fix the handling of namespaces in seunshare/sandbox.
  - Currently mounting of directories within sandbox is propogating to the
  - parent namesspace.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-11
changelog:
  - restorecond fixes:
    Stop using depracated g_io interfaces
    Exit with non zero exit code if wrong options given
    Add -h option


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-17
changelog:
  - Change semanage to produce proper audit records for Common Criteria
  - Cleanup packaging for usrmove


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-22
changelog:
  - Change to use new selinux_binary_policy_path()
  - Add systemd_passwd_agent_exec($1), and systemd_read_fifo_file_passwd_run($1) to templates for _admin interface


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream
    - policycoreutils
  	* sandbox: do not propogate inside mounts outside
  	* sandbox: Removing sandbox init script, should no longer be necessary
  	* restorecond: Stop using deprecated interfaces for g_io
  	* semanage: proper auditting of user changes for LSPP
  	* semanage: audit message to show what record(s) and item(s) have chaged
  	* scripts: Update Makefiles to handle /usrmove
  	* mcstrans: Version should have been bumped on last check in
  	* seunshare: Only drop caps not the Bounding Set from seunshare
  	* Add bash-completion scripts for setsebool and semanage
  	* newrole: Use correct capng calls in newrole
  	* Fix infinite loop with inotify on 2.6.31 kernels
  	* fix ftbfs with hardening flags
  	* Only run setfiles if we found read-write filesystems to run it on
  	* update .po files
  	* remove empty po files
  	* do not fail to install if unable to make load_policy lnk file

     - sepolgen
  	* Fix dead links to www.nsa.gov/selinux
  	* audit.py Dont crash if empty data is passed to sepolgen
  	* do not use md5 when calculating hash signatures
  	* fix detection of policy loads


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-6
changelog:
  - Rebuild to get latest libsepol which fixes the file_name transition problems
  - Update translations
  - Fix calls to close fd for restorecond


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-12
changelog:
  - Add -N qualifier to semanage, setsebool and semodule to allow you to update
  - policy without reloading it into the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-15
changelog:
  - Allow stream sock_files to be stored in /tmp and etc_rw_t directories by sepolgen
  - Trigger on selinux-policy needs to change to selinux-policy-devel
  - Update translations
  - Fix semanage dontaudit off/on exception


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream
    - policycoreutils
  	* restorecond: wrong options should exit with non-zero error code
  	* restorecond: Add -h option to get usage command
  	* resorecond: user: fix fd leak
  	* mcstrans: add -f to run in foreground
  	* semanage: fix man page range and level defaults
  	* semanage: bash completion for modules should include -a,-m, -d
  	* semanage: manpage update for -e
  	* semanage: dontaudit off should work
  	* semanage: locallist option does not take an argument
  	* sepolgen: Make use of setools optional within sepolgen
     - sepolgen
  	* Make use of setools optional within sepolgen
  	* We need to support files that have a + in them


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-4
changelog:
  - Fix restorecon to generate a better percentage of completion on restorecon -R /.
  - Have audit2allow look at the constaint violation and tell the user whether it
  - is because of user,role or level


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-6
changelog:
  - Change polgen to generate dbus apps as optional so they can compile on minimal policy system, patch from Miroslav Grepl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream
  	* genhomedircon: manual page improvements
  	* setfiles/restorecon minor improvements
  	* run_init: If open_init_pty is not available then just use exec
  	* newrole: do not drop capabilities when newrole is run as
  	* restorecon: only update type by default
  	* scripts: Don't syslog setfiles changes on a fixfiles restore
  	* setfiles: do not syslog if no changes
  	* Disable user restorecond by default
  	* Make restorecon return 0 when a file has changed context
  	* setfiles: Fix process_glob error handling
  	* semanage: allow enable/disable under -m
  	* add .tx to gitignore
  	* translations: commit translations from Fedora community
  	* po: silence build process
  	* gui: Checking in policy to support polgengui and sepolgen.
  	* gui: polgen: search for systemd subpackage when generating policy
  	* gui: for exploring booleans
  	* gui: system-config-selinux gui
  	* Add Makefiles to support new gui code
  	* gui: remove lockdown wizard
  	* return equivalency records in fcontext customized
  	* semanage: option to not load new policy into kernel after
  	* sandbox: manpage update to describe standard types
  	* setsebool: -N should not reload policy on changes
  	* semodule: Add -N qualifier to no reload kernel policy
  	* gui: polgen: sort selinux types of user controls
  	* gui: polgen: follow symlinks and get the real path to
  	* gui: Fix missing error function
  	* setfiles: return errors when bad paths are given
  	* fixfiles: tell restorecon to ignore missing paths
  	* setsebool: error when setting multiple options
  	* semanage: use boolean subs.
  	* sandbox: Make sure Xephyr never listens on tcp ports
  	* sepolgen: return and output constraint violation information
  	* semanage: skip comments while reading external configuration files
  	* restorecond: relabel all mount runtime files in the restorecond example
  	* genhomedircon: dynamically create genhomedircon
  	* Allow returning of bastard matches
  	* sepolgen: return and output constraint violation information
  	* audit2allow: one role/type pair per line


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-3
changelog:
  - Allow fixfiles to specify -v, so they can get verbosity rather then progress.
  - Fix load_file Makefile to use SBINDIR rather then real OS.
  - Fix man pages in setfiles and restorecon to reflect what happens when you relabel the entire OS.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-7
changelog:
  - Fix manpage generation, missing import
  - Add equiv_dict to get samba booleans into smbd_selinux
  - Add proper translations for booleans and remove selinux.tbl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-8
changelog:
  - Fix typo in preunstall line for restorecond
  - Add mgrepl patch to consolidate file context generated by sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-9
changelog:
  - Fix semanage to verify that types are appropriate for commands.
    * Patch initiated by mgrepl
    * Fixes problem of specifying non file_types for fcontext, or not port_types for semanage port


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-10
changelog:
  - Update sepolicy generate with patch to create spec file and man page.
  - Patch initiated by Miroslav Grepl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-12
changelog:
  - Add missing spec.py from templates directory needed for sepolicy generate
  - Add /var/tmp as collection point for sandbox apps.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-14
changelog:
  - Add role_allow to sepolicy.search python bindings, this allows us to remove last requirement for setools-cmdline in gui tools.
  - Fix man page generator.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-16
changelog:
  - Add Miroslav Grepl patch to generate html man pages
  - Update Translations
  - Add option to sandbox to shred files before deleting


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-19
changelog:
  - Change sepolicy python bindings to have python pick policy file, fixes weird memory problems in sepolicy network


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-24
changelog:
  - Fix manpage to generate proper man pages for alternate policy,
  basically allow me to build RHEL6 man pages on a Fedora 18 box, as long as
  I pull the policy, policy.xml and file_contexts and file_contexts.homedir


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-25
changelog:
  - Remove run_init, no longer needed with systemd.
  - Fix sepolicy generate to not include subdirs in generated fcontext file.  (mgrepl patch)


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-26
changelog:
  - Fix semanage booleans -l, move more boolean_dict handling into sepolicy
  - Update translations
  - Fixup sepolicy generate to discover /var/log, /var/run and /var/lib directories if they match the name
  - Fix kill function call should indicate signal_perms not kill capability
  - Error out cleanly in system-config-selinux, if it can not contact XServer


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-27
changelog:
  - Only report restorecon warning for missing default label, if not running
  recusively
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-37
changelog:
  - Move sepogen python bindings back into policycoreutils-python out of -devel, since sepolicy is using the


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-41
changelog:
  - Add --path as a parameter to sepolicy generate
  - Print warning message if program does not exists when generating policy, and do not attempt to run nm command
  - Fix sepolicy generate -T to not take an argument, and supress the help message
  - Since this is really just a testing tool


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-44
changelog:
  - Additional fixes for disabled SELinux Box
  - system-config-selinux no longer relies on lokkit for /etc/selinux/config


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-45
changelog:
  - Apply patch from Miroslav to display proper range description in man pages g
  - Should print warning on missing default label when run in recusive mode iff
  - Remove extra -R description, and fix recursive description


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-46
changelog:
  - sepolicy transition was blowing up. Also cleanup output when only source is specified.
  - sepolicy generate should allow policy modules names that include - or _


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-50
changelog:
  - Update translations
  - update sepolicy manpage to generate fcontext equivalence data and to list
  default file context paths.
  - Add ability to generate policy for confined admins and domains like puppet.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-51
changelog:
  - Update translations
  - Fix sepolicy booleans to handle autogenerated booleans descriptions
  - Cleanups of sepolicy manpage
  - Fix crash on git_shell man page generation


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-52
changelog:
  - Update to latest patches from eparis/Upstream
  -    secon: add support for setrans color information in prompt output
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-53
changelog:
  - Update with Miroslav patch to handle role attributes
  - Update Translations
  - import sepolicy will only throw exception on missing policy iff selinux is enabled


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-55
changelog:
  - Update Translations
  - Fix handling of semanage generate --cgi -n MODULE PATHTO/CGI
  -   This fixes the spec file and script file getting wrong names for modules and types.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-56
changelog:
  -  Additional changes for bash completsion and generate man page to match the w
  -  Add newtype as a new qualifier to sepolicy generate.  This new mechanism wil
  -  a policy write to generate types after the initial policy has been written a
  -  will autogenerate all of the interfaces.
  -  I also added a -w options to allow policy writers from the command line to s
  -  the writable directories of files.
  -
  -  Modify network.py to include interface definitions for newly created port type
  -  Standardize of te_types just like all of the other templates.

  -  Change permissive domains creation to raise exception if sepolgen is not ins
  -  get_te_results no longer needs or uses the opts parameter.
  -  The compliler was complaining so I just removed the option.
  -  Start returning analysis data for audit2allow


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-57
changelog:
  - Update to latest patches from eparis/Upstream
  - fixfiles onboot will write any flags handed to it to /.autorelabel.
  -   * Patch sent to initscripts to have fedora-autorelabel pass flags back to fixfiles restore
  -   * This should allow fixfiles -F onboot, to force a hard relabel.
  - Add -p to show progress on full relabel.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-58
changelog:
  - Reorginize sepolicy so all get_all functions are in main module
  - Add -B capability to fixfiles onboot and fixfiles restore, basically searches for all files created since the last boot.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-1
changelog:
  - Update to upstream
  	* setfiles: estimate percent progress
  	* load_policy: make link at the destination directory
  	* Rebuild polgen.glade with glade-3
  	* sepolicy: new command to unite small utilities
  	* sepolicy: Update Makefiles and po files
  	* sandbox: use sepolicy to look for sandbox_t
  	* gui: switch to use sepolicy
  	* gui: sepolgen: use sepolicy to generate
  	* semanage: use sepolicy for boolean dictionary
  	* add po file configuration information
  	* po: stop running update-po on all
  	* semanage: seobject verify policy types before allowing you to assign them.
  	* gui: Start using Popen, instead of os.spawnl
  	* sandbox: Copy /var/tmp to /tmp as they are the same inside
  	* qualifier to shred content
  	* semanage: Fix handling of boolean_sub names when using the -F flag
  	* semanage: man: roles instead of role
  	* gui: system-config-selinux: Catch no DISPLAY= error
  	* setfiles: print error if no default label found
  	* semanage: list logins file entries in semanage login -l
  	* semanage: good error message is sepolgen python module missing
  	* gui: system-config-selinux: do not use lokkit
  	* secon: add support for setrans color information in prompt output
  	* restorecond: remove /etc/mtab from default list
  	* gui: If you are not able to read enforcemode set it to False
  	* genhomedircon: regenerate genhomedircon more often
  	* restorecond: Add /etc/udpatedb.conf to restorecond.conf
  	* genhomedircon generation to allow spec file to pass in SEMODULE_PATH
  	* fixfiles: relabel only after specific date
  	* po: update translations
  	* sandbox: seunshare: do not reassign realloc value
  	* seunshare: do checking on setfsuid
  	* sestatus: rewrite to shut up coverity


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-4
changelog:
  - Revert some changes which are causing the wrong policy version file to be created
  - Switch sandbox to start using openbox rather then matchbox
  - Make sepolgen a symlink to sepolicy
  - update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-6
changelog:
  - Fix newrole to retain cap_audit_write when compiled with namespace, also
  do not drop capabilities when run as root.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-7
changelog:
  - Add --root/-r flag to sepolicy manpage,
  - This allows us to generate man pages on the fly in the selinux-policy build


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-8
changelog:
  - Sepolixy should not throw an exception on an SELinux disabled machine
  - Switch from using console app to using pkexec, so we will work better
  with policykit.
  - Add missing import to fix system-config-selinux startup
  - Add comment to pamd files about pam_rootok.so
  - Fix sepolicy generate to not comment out the first line


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-10
changelog:
  - Fix sepolicy to be able to work on an SELinux disabled system.
  - Needed to be able to build man pages in selinux-policy package


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-12
changelog:
  - Do not load interface file by default when sepolicy is called, mov get_all_methods to the sepolicy package


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.1.14-13
changelog:
  - remove vendor tag from desktop file. https://fedorahosted.org/fpc/ticket/247
  - clean up spec to follow current guidelines


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-14
changelog:
  - Allow users with symlinked homedirs to work. call realpath on homedir
  - Fix sepolicy reorganization of helper functions.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-20
changelog:
  - Mention creation of permissive domains in sepolicy generate man page
  - Change sepolicy manpage to use shortname with an "_" to stop accidently grabbing unrelated types for a domain.
  - Fix audit2allow to show better information on constraint violations.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-21
changelog:
  - sepolicy generate should look for booleans that effect equivalence names, and add them to the man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-22
changelog:
  - Fix newrole to not drop capabilities from the bounding set.
  - Stop dropping capabilities from its children.
  - Add better error messages.
  - Change location of bash_completion files to /usr/share/bash-completion/compl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-23
changelog:
  - sepolicy manpage:
  -   use nroff instead of man2html
  -   Remove checking for name of person who created the man page
  - audit2allow
  -   Fix output to show the level that is different.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-26
changelog:
  - Can not unshare IPC in sandbox, since it blows up Xephyr
  - Remove bogus error message sandbox about reseting setfsuid


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-28
changelog:
  - Fix audit2allow output to better align analysys with the allow rules
  - Apply Miroslav Grepl patch to clean up sepolicy generate usage
  - Apply Miroslav Grepl patch to fixupt handing of admin_user generation
  - Update Tranlslations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-30
changelog:
  - Add buildrequires for OpenBox to prevent me from accidently building into RHEL7
  - Add support for returning alias data to sepolicy.info python bindings


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-31
changelog:
  - Add post install scripts for gui to make sure Icon Cache is refreshed.
  - Fix grammar issue in secon man page
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-32
changelog:
  - Move sepolicy to policycoreutils-devel pacage, since most of it is used for devel
  - Apply Miroslav Grepl Patches for sepolicy
  -- Fix generate mutually groups option handling
  -- EUSER is used for existing policy
  -- customize options can be used together with admin_domain option
  -- Fix manpage.py to generate correct man pages for SELinux users
  -- Fix policy *.te file generated by customize+writepaths options
  -- Fix install script for confined_admin option


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-34
changelog:
  - Update translations
  - Add patch inspired by Miroslav Grepl to add extended information for sepolicy interface command.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-35
changelog:
  - Update translations
  - Add patch by Miroslav Grepl to add compile test for sepolicy interface command.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-37
changelog:
  - Fix exceptionion hanling in audit2allow -o
  - Generate Man pages for everydomain, not just ones with exec_t entrypoints
  - sepolicy comunicate should return ValueError not TypeError
  - Trim header line in sepolicy manpage to use less space
  - Add missing options to restorecon man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-38
changelog:
  - No longer run sepolgen-ifgen at install time.
  - Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed.
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-39
changelog:
  - Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed, first time
  - Add  Sven Vermeulen  patches to cleanup man pages


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-40
changelog:
  - Only require selinux-policy-devel for policycoreutils-devel, this will shrink the size of the livecd.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-42
changelog:
  - Add support for Xephyr -resizable, so sandbox can now resize window
  - Add support for compressed policy.xml
  - Miroslav Grepl patch to allow sepolicy interface on individual interface fil
  - Also add capability to test interfaces for correctness.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-44
changelog:
  - Fix sepolicy-generate man page to clear up options/policy type
  - Add Miroslav Grepl to not generate man page when doing
    sepolicy generate --customize
  - Add support for executing semanage user within spec file
  - Fix generation of confined admin domains, to handle booleans properly.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-46
changelog:
  - Fix the name of the spec file generated in the build script
  - Add mgrepl patch to support argparse for semanage command parsing


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-48
changelog:
  - Fix audit2allow -o to open file for append
  - Fix the name of the spec file generated in the build script


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-50
changelog:
  - Fix sepolicy generate --confined_admin to generate tunables
  - Add new interface to generate entrypoints for use with new gui


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-56
changelog:
  - Fix semanage export/import commands
  - Fix semange module command
  - Remove --version option from sandbox


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-57
changelog:
  - Remove requires for systemd-sysv
  - Move systemd-units require to restorecond section
  - Update Tranlasions
  - More sepolicy interfaces for gui
  - Cleanup man pages for sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-63
changelog:
  - Update sepolicy gui.
  - Error out of you call sepolicy gui without policycoreutils-gui package installed
  - Fix semanage login -d command
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-65
changelog:
  - Do not generate shell script or spec file for sepolicy generate --newtype
  - Update translations
  - Fix sepolicy generate --admin_user man page again
  - Fix setsebool to print less verbose error messages by default, add -V for ve


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-68
changelog:
  - Fix bugs introduced by previous patch.  semanage port
  - Update Translations
  - Add test suite for sepolicy command lines


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-75
changelog:
  - Update sepolicy gui code, cleanups and add file transition tab
  - Fix semanage fcontext -a --ftype code to work.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-79
changelog:
  - Add Miroslav Grepl setsebool patch to give better error message on bad boolean names
  - Additional help screens for sepolicy gui


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-80
changelog:
  - Random fixes for sepolicy gui
    * Do not prompt for password until you make a change
    * Add user mappings and selinux users page
    * lots of code cleanup

  - Verify homedir is owned by user before mounting over it with seunshare
  - Fix fixfiles to handle Relabel properly
  - Fix semanage fcontext -e / command to allow "/"


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-82
changelog:
  - Improvements to sepolicy gui
    - Add more help information
    - Cleanup code
    - Add deny_ptrace on lockdown screen
    - Make unconfined/permissivedomains lockdown work
    - Add more support for file equivalency


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-85
changelog:
  - Fixes for fixfiles
    * exclude_from_dirs should apply to all types of restorecon calls
    * fixfiles check now works
    * exit with the correct status

  - semanage no longer import selinux


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-86
changelog:
  - sepolicy gui
    - mgrepl added delete screens for users and login
    - Fix lots of bugs.
  - Update Translations.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-88
changelog:
  - Cleanup errors found by pychecker
  - Apply patch from Michal Trunecka to allow restorecon to handle {} in globs
  Resolves: #1018913


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-89
changelog:
  - Update to latest sepolicy tool chain.
  - Document semodule -P
  - Verify input to semanage permissive -a is a valid domain.
  - Assigning login user with semanage login, range should default to user record


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
  	* Properly build the swig exception file from Laurent Bigonville.
  	* Fix man pages from Laurent Bigonville.
  	* Support overriding PATH and INITDIR in Makefile from Laurent Bigonville.
  	* Fix LDFLAGS usage from Laurent Bigonville.
  	* Fix init_policy warning from Laurent Bigonville.
  	* Fix semanage logging from Laurent Bigonville.
  	* Open newrole stdin as read/write from Sven Vermeulen.
  	* Fix sepolicy transition from Sven Vermeulen.
  	* Support overriding CFLAGS from Simon Ruderich.
  	* Create correct man directory for run_init from Russell Coker.
  	* restorecon GLOB_BRACE change from Michal Trunecka.
  	* Extend audit2why to report additional constraint information.
  	* Catch IOError errors within audit2allow from Dan Walsh.
  	* semanage export/import fixes from Dan Walsh.
  	* Improve setfiles progress reporting from Dan Walsh.
  	* Document setfiles -o option in usage from Dan Walsh.
  	* Change setfiles to always return -1 on failure from Dan Walsh.
  	* Improve setsebool error r eporting from Dan Walsh.
  	* Major overhaul of gui from Dan Walsh.
  	* Fix sepolicy handling of non-MLS policy from Dan Walsh.
  	* Support returning type aliases from Dan Walsh.
  	* Add sepolicy tests from Dan Walsh.
  	* Add org.selinux.config.policy from Dan Walsh.
  	* Improve range and user input checking by semanage from Dan Walsh.
  	* Prevent source or target arguments that end with / for substitutions from Dan Walsh.
  	* Allow use of <<none>> for semanage fcontext from Dan Walsh.
          * Report customized user levels from Dan Walsh.
  	* Support deleteall for restoring disabled modules from Dan Walsh.
  	* Improve semanage error reporting from Dan Walsh.
  	* Only list disabled modules for module locallist from Dan Walsh.
  	* Fix logging from Dan Walsh.
  	* Define new constants for file type character codes from Dan Walsh.
  	* Improve bash completions from Dan Walsh.
  	* Convert semanage to argparse from Dan Walsh (originally by Dave Quigley).
  	* Add semanage tests from Dan Walsh.
  	* Split semanage man pages from Dan Walsh.
  	* Move bash completion scripts from Dan Walsh.
  	* Replace genhomedircon script with a link to semodule from Dan Walsh.
  	* Fix fixfiles from Dan Walsh.
  	* Add support for systemd service for restorecon from Dan Walsh.
  	* Spelling corrections from Dan Walsh.
  	* Improve sandbox support for home dir symlinks and file caps from Dan Walsh.
  	* Switch sandbox to openbox window manager from Dan Walsh.
  	* Coalesce audit2why and audit2allow from Dan Walsh.
  	* Change audit2allow to append to output file from Dan Walsh.
  	* Update translations from Dan Walsh.
  	* Change audit2why to use selinux_current_policy_path from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.2-2
changelog:
  - Shift around some of the files to more appropriate packages.
          * semodule_* packages are required for devel.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-1
changelog:
  Resolves: #1002529
  Resolves: #924105
  Resolves: #918140
  Resolves: #1028096

  - Speed up startup time of sepolicy gui
  - Clean up ports screen to only show enabled ports.
  - Update to upstream 
  	* Remove import policycoreutils.default_encoding_utf8 from semanage from Dan Walsh.
  	* Make yum/extract_rpms optional for sepolicy generate from Dan Walsh.
  	* Add test suite for audit2allow and sepolgen-ifgen from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.3-1
changelog:
  - Update to upstream 
  	* Apply polkit check on all dbus interfaces and restrict to active user from Dan Walsh.
  	* Fix typo in sepolicy gui dbus.relabel_on_boot call from Dan Walsh.
  - Apply Miroslav Grepl patch to fix TEMPLATETYPE_domtrans description in sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-1
changelog:
  - Update to upstream 
  	* Revert automatic setting of serange and seuser in seobject; was breaking non-MLS systems.
  - Add patches for sepolicy gui from mgrepl to
    Fix advanced_item_button_push() to allow to select an application in advanced search menu
    Fix previously_modified_initialize() to show modified changes properly for all selections


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-5
changelog:
  - Fix semanage man page description of import command
  - Fix policy kit file to allow changing to permissive mode


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-6
changelog:
  - Fix sepolicy gui selection for advanced screen
  - Update Translations
  - Move requires checkpolicy requirement into policycoreutils-python
  Resolves: #1043489


author: Dan Walsh <dwalsh@redhat.com> - 2.2.5-1
changelog:
  - Fix Mass Rebuild problems
  - Update to upstream 
  	* Ignore selevel/serange if MLS is disabled from Sven Vermeulen.
  Resolves: #1043489


author: Dan Walsh <dwalsh@redhat.com> - 2.2.5-3
changelog:
  - Add Miroslav patch to
  - Fix previously_modified_initialize() to show modified changes properly for all selections
  Resolves: #1049977


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.5-5
changelog:
  - Remove default s0 range from semanage-login command. It is handled in seobject.py.
  Resolves:#1028106


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.5-12
changelog:
  - Make selinux-policy build working also on another architectures related to sepolicy-manpage generate
  Resolves:#1103292


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.5-13
changelog:
  - If the user attempts to restorecon the label of a file that does not exist, do not report this as an error
  Resolves:#1082956
  - Make fixfiles_exclude_dirs working if there is a substituion for the given directory
  Resolves:#1082676
  - Add ability to list the actual active modules
  Resolves:#1075023
  - Update XDG_RUNTIME_DIR directory
  Resolves:#1112811
  - Fix semanage man page to talk about  semanage-* (8) man pages.
  Resolves:#1084390


author: Petr Lautrbach <plautrba@redhat.com> 2.2.5-16
changelog:
  - semanage: Use OrderedDict for list of fcontexts
  Resolves: rhbz#1206769
  - fixfiles: Cover file_context.XXX.homedir
  Resolves: rhbz#1186640


author: Petr Lautrbach <plautrba@redhat.com> 2.2.5-17
changelog:
  - Fix handling of Forking daemon, to allow systemd to handle it better
  Resolves: rhbz#1186648
  - Fix typo in semanage args for minimum policy store
  Resolves: rhbz#1208797
  - Allow to define sock file in /etc directory
  Resolves: rhbz#1188360


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - sepolgen: Add support for TYPEBOUNDS statement in INTERFACE policy
    files (#1319338)
  - Add documentation for MCS separated domains
  - Move svirt man page out of libvirt into its own


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Update sandbox types in sandbox manual
  - Fix typos in semanage manpages
  - Fix the documentation of -l,--list for semodule
  - Minor fix in a French translation
  - Fix the extract example in semodule.8
  - Update sandbox.8 man page
  - Remove typos from chcat --help
  - Fix multiple spelling errors
  - hll/pp: Warn if module name different than output filename


author: Petr Lautrbach <plautrba@redhat.com> 2.5-6.2
changelog:
  - open_init_pty: Do not error on EINTR
  - Fix [-s STORE] typos in semanage
  - Don't use subprocess.getstatusoutput() in Python 2 code


author: Petr Lautrbach <plautrba@redhat.com> 2.5-7
changelog:
  - fixfiles: Pass -n to restorecon for fixfiles check
  - sepolicy: Check get_rpm_nvr_list() return value
  - Don't use subprocess.getstatusoutput() in Python 2 code
  - semanage: Add auditing of changes in records
  - Remove unused 'q' from semodule getopt string


author: Petr Lautrbach <plautrba@redhat.com> 2.5-8
changelog:
  - audit2allow: tests should use local copy not system
  - audit2allow: remove audit2why so that it gets symlinked
  - semanage: fix man page and help message for import option
  - semanage: fix error message for fcontext -m
  - semanage: Fix semanage fcontext -D
  - semanage: Correct fcontext auditing
  - semanage: Default serange to "s0" for port modify
  - semanage: Use socket.getprotobyname for protocol
  - semanage: fix modify action in node and interface


author: Petr Lautrbach <plautrba@redhat.com> 2.5-9
changelog:
  - sandbox: create a new session for sandboxed processes - CVE-2016-7545
  - sandbox: do not try to setup directories without -X or -M


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-13
changelog:
  - hll/pp: Fix pp crash when processing base module (#1350806)
  - sepolicy: fix obtaining domain name in HTMLManPages (#1174744)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-14
changelog:
  - Fix export of fcontext socket entries (#1435100)
  - Fix checks whether a module name is passed to semanage-module (#1420527)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-15
changelog:
  - sepolicy: Do not fail when file_contexts.{homedirs,local} are not present (#1395778)
  - fixfiles - use quotes around "$FILEPATH" (#1241946)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-16
changelog:
  - Strip non-printable characters when parsing audit messages (#1406328)
  - Install seobject python module into arch specific path (#1061049)
  - restorecond: Decrease loglevel of termination message (#1422121)
  - semodule_package: do not fail with an empty fc file (#1390535)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-18
changelog:
  - semanage: Enable listing file_contexts.homedirs
  - semanage: Fix manpage author for ibpkey and ibendport pages.
  - semanage: Update man pages for infiniband
  - semanage: Update semanage to allow runtime labeling of ibendports
  - semanage: Update semanage to allow runtime labeling of Infiniband Pkeys
  - semanage: Improve semanage-port man page
  - fixfiles: do not dereference link files in tmp


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-20
changelog:
  - setfiles: Mention customizable types in restorecon man page (#1260238)
  - sepolicy: do not fail when file_contexts.local or .subs do not exist (#1512590)
  - semanage: Fix export of ibendport entries (#1471809)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-22
changelog:
  - semanage: Fix fcontext help message (#1499259)
  - semanage: Improve semanage-user.8 man page (#1079946)
  - semodule: Improve man page (#1337192)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-23
changelog:
  - Update translation files and remove empty ones (#1375915)
  - sepolicy: Fix sepolicy manpage (#1509383)
  - semanage/seobject: Fix moduleRecords.modify() (#1408331)
  - semodule: Improve man page and unify it with --help (#1320565)
  - setfiles: Improve description of -d switch (#1271327)
  - sepolgen: Try to translate SELinux contexts to raw (#1356149)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-24
changelog:
  - Stop rejecting SCTP and DCCP in sepolicy.info
  - semanage: Replace bare except with specific one (#1598444)
  - semanage: Fix logger class definition (#1598444)
  - semanage: Stop rejecting aliases in semanage commands (#1544793)
  - sepolicy: Stop rejecting aliases in sepolicy commands (#1600009)
  - semanage: Stop logging loginRecords changes (#1294663)
  - Use file_contexts.local in fixfiles restore (#1559808)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-30
changelog:
  - semanage/seobject: Fix listing boolean values (#1391605)
  - sepolicy: Make policy files sorting more robust
  - semanage: Fix setting alternative policy store (#1558033)
  - semanage: Load a store policy and set the store SELinux policy root
  - sepolicy: Add sepolicy.load_store_policy(store)
  - semanage: import sepolicy only when it's needed
  - semanage: move valid_types initialisations to class constructors
  - semanage/seobject: Fix indentation issues
  - scripts/fixfiles: Do not fail on file_contexts.local (#1647714)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-31
changelog:
  - semanage: Start exporting "ibendport" and "ibpkey" entries (#1657196)
  - semanage: Do not show "None" levels when using a non-MLS policy (#1400482)
  - semanage: Include MCS/MLS range when exporting local customizations (#1400482)


author: David Zeuthen <davidz@redhat.com> - 0.94-3
changelog:
  - Add desktop_admin_r and desktop_user_r groups along with a first cut
    of default authorizations for users in these groups.


author: David Zeuthen <davidz@redhat.com> - 0.94-4
changelog:
  - Add some patches from git master
  - Sort pkaction(1) output
  - Bug 23867 – UnixProcess vs. SystemBusName aliasing


author: David Zeuthen <davidz@redhat.com> - 0.95-0.git20090913
changelog:
  - Update to git snapshot
  - Drop upstreamed patches
  - Turn on GObject introspection
  - Don't delete desktop_admin_r and desktop_user_r groups when
    uninstalling polkit-desktop-policy


author: David Zeuthen <davidz@redhat.com> - 0.95-0.git20090913.1
changelog:
  - Add bugfix for polkit_unix_process_new_full() (thanks Bastien Nocera)
  - Obsolete old PolicyKit packages


author: David Zeuthen <davidz@redhat.com> - 0.97-1
changelog:
  - Update to 0.97. This release contains a port from EggDBus to the
    GDBus code available in recent GLib releases.


author: David Zeuthen <davidz@redhat.com> - 0.97-3
changelog:
  - Add a patch to make pkcheck(1) work the way libvirtd uses it (#623257)
  - Require GLib >= 2.25.12 instead of 2.25.11
  - Ensure polkit-gnome packages earlier than 0.97 are not used with
    these packages


author: David Zeuthen <davidz@redhat.com> - 0.101-2
changelog:
  - Nuke desktop_admin_r and desktop_user_r groups - just use the
    wheel group instead (#688363)
  - Update the set of configuration directives that gives users
    in the wheel group extra privileges


author: David Zeuthen <davidz@redhat.com> 0.102-2.an7
changelog:
  - Add patch to neuter the annoying systemd behavior where stdout/stderr
    is sent to the system logs


author: David Zeuthen <davidz@redhat.com> 0.103-1.an7
changelog:
  - Update to upstream release 0.103
  - Drop upstreamed patch
  - Drop Fedora-specific policy, it is now upstream (fdo #41008)


author: David Zeuthen <davidz@redhat.com> 0.104-1.an7
changelog:
  - Update to upstream release 0.104
  - Force usage of systemd (instead of ConsoleKit) for session tracking


author: David Zeuthen <davidz@redhat.com> 0.105-1.an7
changelog:
  - Update to upstream release 0.105
  - Nuke patches that are now upstream
  - Change 'PolicyKit' to 'polkit' in summary and descriptions


author: David Zeuthen <davidz@redhat.com> 0.106-1.an7
changelog:
  - Update to upstream release 0.106
  - Authorizations are no longer controlled by .pkla files - from now
    on, use the new .rules files described in the polkit(8) man page


author: David Zeuthen <davidz@redhat.com> 0.108-1.an7
changelog:
  - Update to upstream release 0.108
  - Drop upstreamed patches
  - This release dynamically loads the JavaScript interpreter and can
    cope with it not being available. In this case, polkit authorization
    rules are not processed and the defaults for an action - as defined
    in its .policy file - are used for authorization decisions.
  - Add new meta-package, polkit-js-engine, that pulls in the required
    JavaScript bits to make polkit authorization rules work. The default
    install - not the minimal install - should include this package


author: David Zeuthen <davidz@redhat.com> 0.108-3.an7
changelog:
  - Attempt to open the correct libmozjs185 library, otherwise polkit
    authz rules will not work unless js-devel is installed (fdo #57146)


author: Miloslav Trmač <mitr@redhat.com> - 0.110-4
changelog:
  - Make the JavaScript engine mandatory.  The polkit-js-engine package has been
    removed, main polkit package Provides:polkit-js-engine for compatibility.
  - Add Requires: polkit-pkla-compat
    Resolves: #908808


author: Miloslav Trmač <mitr@redhat.com> - 0.110-4
changelog:
  - Shut up rpmlint about Summary:
  - Build with V=1
  - Use %{_unitdir} instead of hard-coding the path
  - Use the new systemd macros, primarily to run (systemctl daemon-reload)
    Resolves: #857382


author: Miloslav Trmač <mitr@redhat.com> - 0.111-1
changelog:
  - Update to polkit-0.111
    Resolves: #917888
  - Use SpiderMonkey from mozjs17 instead of js
  - Ship the signature in the srpm
  - Try to preserve timestamps in (make install)


author: Miloslav Trmač <mitr@redhat.com> - 0.112-2
changelog:
  - Workaround pam_systemd setting broken XDG_RUNTIME_DIR
    Resolves: #1033774
  - Always use mozjs-17.0 even if js-devel is installed


author: Miloslav Trmač <mitr@redhat.com> - 0.112-12
changelog:
  - Fix a memory leak in PolkitPermission.
    Patch by Rui Matos <tiagomatos@gmail.com>
    Resolves: #1433915


author: Rex Dieter <rdieter@fedoraproject.org> 0.99.0-3
changelog:
  - patch to bring polkit auth dialog to front
  - patch restart polkit-kde on crash 
  - patch to remove unimplimented 'remember authorization' checkbox


author: Miloslav Trmač <mitr@redhat.com> - 0.1-2
changelog:
  - Add a comment above License about SRPM-only licenses
  - Reword Summary: to avoid a rpmlint warning
  - Move INSTALL= to the %install section


author: Radek Novacek <rnovacek@redhat.com> 0.96.1-2
changelog:
  - Fixed deprecation warning with polkit-0.98
  - Fixed typo in url
  - Null checking patch (might be fix for #637064)


author: Rex Dieter <rdieter@fedoraproject.org> 0.99.0-3
changelog:
  - upstream crash patch (kde#258916,#684625)
  - pull a couple more upstream patches
  - -devel: drop Req: polkit-devel


author: Adam Jackson <ajax@redhat.com> 0.8.0-3
changelog:
  - poppler-0.8.0-ocg-crash.patch: Fix a crash when no optional content
    groups are defined.
  - Mangle configure to account for the new directory for qt3 libs.
  - Fix grammar in %description.


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-3
changelog:
  - Correct permissions of goo/GooTimer.h
  - Convert pdftohtml.1 to utf8
  - Make the pdftohtml's Provides/Obsoletes versioned


author: Marek Kasik <mkasik@redhat.com> - 0.15.0-5
changelog:
  - Add poppler-0.15.0-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.15.0-CVE-2010-3703.patch
      (Properly initialize stack)
  - Add poppler-0.15.0-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639861


author: Marek Kasik <mkasik@redhat.com> - 0.17.3-2
changelog:
  - Don't include pdfextract and pdfmerge in resulting packages for now
  - since they conflict with packages pdfmerge and mupdf (#740906)


author: Marek Kasik <mkasik@redhat.com> 0.18.4-3
changelog:
  - Backport of a patch which sets mask matrix before drawing an image with a mask
  - Resolves: #817378


author: Marek Kasik <mkasik@redhat.com> 0.20.2-6
changelog:
  - Backport most of the changes from poppler-0.20.3 - poppler-0.20.5
  -   (those which doesn't change API or ABI and are important)
  - See poppler-0.20.3-5.patch for detailed list of included commits


author: Marek Kasik <mkasik@redhat.com> 0.22.5-2
changelog:
  - Add poppler-0.22.5-CVE-2013-4473.patch
      (Limit length of output to pathName buffer)
  - Add poppler-0.22.5-CVE-2013-4474.patch
      (Check file pattern)
  - Resolves: #1025160


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-1
changelog:
  - Update to 0.26.5
  - Remove unused patches
  - Rereview patches from fedora
  - Modify RHEL patches so that they apply
  - Disable Qt5 explicitly
  - Resolves: #1174537


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-4
changelog:
  - Bump sonames of all frontends so that they loads symbols
  - from correct libpoppler.so.* when the compat-poppler022
  - package is installed.
  - Resolves: #1174537


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-5
changelog:
  - Remove PFB headers from embedded Type1 fonts
  - before embedding them into a PostScript file.
  - Resolves: #1241488


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-23
changelog:
  - Check for stream before calling stream methods
  - when saving an embedded file
  - Resolves: #1651305


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-33
changelog:
  - Only embed mime data for gray/rgb/cmyk colorspaces
  - if image decode map is identity
  - Resolves: #1636103


author: Marek Kasik <mkasik@redhat.com> - 0.26.5-38
changelog:
  - Constrain number of cycles in rescale filter
  - Compute correct coverage values for box filter
  - Resolves: #1688417


author: Robert Scheck <robert@fedoraproject.org> 1.12-2
changelog:
  - Move libpopt to /lib[64] (#249814)
  - Generate API documentation, added buildrequirement to doxygen


author: Robert Scheck <robert@fedoraproject.org> 1.12-3
changelog:
  - Added buildrequirement to graphviz (#249352)
  - Backported bugfixes from CVS (#102254, #135428 and #178413)


author: Robert Scheck <robert@fedoraproject.org> 1.13-1
changelog:
  - Upgrade to 1.13 (#290531, #332201, #425803)
  - Solved multilib problems at doxygen generated files (#342921)


author: Panu Matilainen <pmatilai@redhat.com> - 1.13-12
changelog:
  - Hack poptBadOption() to return something semi-meaningful on exec alias
    failures (#697435, #710267)
  - Run internal test-suite on build, minimal as it might be


author: Tim Waugh <twaugh@redhat.com> 0.0.1-1
changelog:
  - Default permissions for directories.
  - Initscript should not be marked config.
  - Fixed license tag.
  - Better buildroot tag.


author: Tim Waugh <twaugh@redhat.com> 0.0.1-2
changelog:
  - More consistent use of macros.
  - Build requires xmlto.
  - Don't use %makeinstall.
  - No need to run make check.


author: Tim Waugh <twaugh@redhat.com> 0.0.3-1
changelog:
  - 0.0.3:
    - Allow multiple services to be defined in a single configuration
      file.
    - Allow protocol specifications, e.g. ipp/udp.


author: Tim Waugh <twaugh@redhat.com> 0.0.4-1
changelog:
  - 0.0.4:
    - Fixed initscript so that it will not be reordered to start after
      rpcbind (bug #487250).


author: Tim Waugh <twaugh@redhat.com> - 0.0.5-8
changelog:
  - Avoid a race during start-up if there are no configured ports (bug #1034139).
  - Moved tmpfiles configuration file to correct location.
  - Don't use %ghost in manifest for state directory, in order to make
    sure it is ready to use after installation.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.2-1
changelog:
  - Initial Red Hat Linux packaging, based on spec file from
    Simon J Mudd <sjmudd@pobox.com>
  - Changes from that:
    - Set up chroot environment in triggers to make sure we catch glibc errata
    - Remove some hacks to support building on all sorts of distributions at
      the cost of specfile readability
    - Remove postdrop group on deletion


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.3-1
changelog:
  - 1.1.3, TLS 0.8.3
  - Fix updating
  - Don't run the statistics cron job
  - remove requirement on perl Date::Calc


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.3-2
changelog:
  - listen on 127.0.0.1 only by default (#60071)
  - Put config samples in %{_docdir}/%{name}-%{version} rather than
    /etc/postfix (#60072)
  - Some spec file cleanups


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.3-3
changelog:
  - adjust the default postfix-files config file to match the alternatives setup
    by altering the arguments passed to post-install in the %install phase
    (otherwise, it might point to sendmail's binaries, breaking it rather rudely)
  - adjust the post-install script so that it silently uses paths which have been
    modified for use with alternatives, for upgrade cases where the postfix-files
    configuration file isn't overwritten
  - don't forcefully strip files -- that's a build root policy
  - remove hard requirement on openldap, library dependencies take care of it
  - redirect %postun to /dev/null
  - don't remove the postfix user and group when the package is removed


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.4-1
changelog:
  - 1.1.4
  - TLS 0.8.4
  - Move postalias run from %post to init script to work around
    anaconda being broken.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed missing smtpd.conf file for SASL support and included SASL Postfix
    Red Hat HOWTO (#62505).
  - Included SASL2 support patch (#68800).


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix shell in /etc/passwd (#68373)
  - fix documentation in /etc/postfix (#65858)
  - Provides: /usr/bin/newaliases (#66746)
  - fix autorequires by changing /usr/local/bin/perl to /usr/bin/perl in a
    script in %doc (#68852), although I don't think this is necessary anymore


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - upgrade to release 2.0.6
  - remove chroot as this is now the preferred installation according to Wietse Venema, the postfix author


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - upgrade to new 2.0.11 upstream release
  - fix authentication problems
  - rewrite SASL documentation
  - upgrade to use SASL version 2
  - Fix bugs 75439, 81913 90412, 91225, 78020, 90891, 88131


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.16-3
changelog:
  - add zlib-devel build prereq, fixes bug 112822
  - remove copy of resolve.conf into chroot jail, fixes bug 111923


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.16-4
changelog:
  - remove mysqlclient prereq, fixes bug 101779
  - remove md5 verification override, this fixes bug 113370. Write parse-postfix-files
    script to generate explicit list of all upstream files with ownership, modes, etc.
    carefully add back in all other not upstream files, files list is hopefully
    rock solid now.


author: John Dennis <jdennis@porkchop.devel.redhat.com>
changelog:
  - revert back to v1 of sasl because LDAP still links against v1 and we can't 
  - bump revision for build
    have two different versions of the sasl library loaded in one load image at
    the same time. How is that possible? Because the sasl libraries have different 
    names (libsasl.so & libsasl2.so) but export the same symbols :-(
    Fixes bugs 115249 and 111767


author: John Dennis <jdennis@porkchop.devel.redhat.com>
changelog:
  - set sasl back to v2 for mainline, this is good for fedora and beyond,
    for RHEL3, we'll branch and set set sasl to v1 and turn off ipv6


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.18-1
changelog:
  - bring source up to upstream release 2.0.18
  - include pflogsumm, fixes bug #68799
  - include smtp-sink, smtp-source man pages, fixes bug #118163


author: John Dennis <jdennis@redhat.com> 2:2.0.18-4
changelog:
  - remove version from pflogsumm subpackage, it was resetting the
    version used in the doc directory, fixes bug 119213


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.1-3.1
changelog:
  - fixed directory permissions in %doc (#125406)
  - fixed missing spool dirs (#125460)
  - fixed verify problem for aliases.db (#125461)
  - fixed bogus upgrade warning (#125628)
  - more spec file cleanup


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.4-1
changelog:
  - new version 2.1.4
  - new ipv6 and tls+ipv6 patches: 1.25-pf-2.1.4
  - new pfixtls-0.8.18-2.1.3-0.9.7d patch


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-2
changelog:
  - switched over to system aliases file and database in /etc/ (#117661)
  - new reuires and buildrequires for setup >= 2.5.36-1


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-2.2
changelog:
  - automated postalias call in init script
  - removed postconf call from spec file: moved changes into patch


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-5.1
changelog:
  - fixed open relay bug in postfix ipv6 patch: new version 1.26 (#146731)
  - fixed permissions on doc directory (#147280)
  - integrated fixed fqdn patch from Joseph Dunn (#139983)


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.0-1
changelog:
  - new version 2.2.0
  - cleanup of spec file: removed external TLS and IPV6 patches, removed 
    smtp_sasl_proto patch
  - dropped samples directory till there are good examples again (was TLS and
    IPV6)
  - v2.2.0 fixes code problems: #132798 and #137858


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.5-2.1
changelog:
  - replaced postconf and postalias call in initscript with newaliases (#156358)
  - fixed initscripts messages (#155774)
  - fixed build problems when sasl is disabled (#164773)
  - fixed pre-definition of mailbox_transport lmtp socket path (#122910)


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.10-1
changelog:
  - new version 2.2.10
  - added option LDAP_DEPRECATED to support deprecated ldap functions for now
  - fixed build without pflogsumm support (#188470)


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.2-1
changelog:
  - new version 2.3.2 with major upstream fixes:
    - corrupted queue file after a request to modify a short message header
    - panic after spurious Milter request when a client was rejected
    - maked the Milter more tolerant for redundant "data cleanup" requests
  - applying pflogsumm-conn-delays-dsn-patch from postfix tree to pflogsumm


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.6-1
changelog:
  - new version 2.3.6
  - limiting SASL mechanisms to plain login for sasl with saslauthd (#175259)
  - dropped usage of ed in the install stage


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.3-1
changelog:
  - new stable version 2.4.3
  - enabled mysql support (rhbz#185515)
  - dropped build requirements for gawk, ed and sed


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.3-2
changelog:
  - diabled mysql support again (rhbz#185515)
  - added support flag for PostgreSQL build (rhbz#180579)
    Ben: Thanks for the patch
  - Fixed remaining rewiew problems (rhbz#226307)


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.5-2
changelog:
  - made init script lsb conform (#243286, rhbz#247025)
  - added link to postfix sasl readme into Postfix-SASL-RedHat readme


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.5-3
changelog:
  - fixed multilib conflict for makedefs.out: rename to makedefs.out-%{_arch}
    (rhbz#342941)
  - enabled mysql support


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.6-1
changelog:
  - new verison 2.4.6
  - added virtual server(smtp) provide (rhbz#380631)
  - enabling IPv6 support (rhbz#197105)
  - made the MYSQL and PGSQL defines overloadable as build argument


author: Thomas Woerner <twoerner@redhat.com> 2:2.5.1-2
changelog:
  - fixed fix for enabling IPv6 support (rhbz#437024)
  - added new postfix data directory (rhbz#437042)


author: Thomas Woerner <twoerner@redhat.com> 2:2.5.1-3
changelog:
  - fixed postfix privilege problem with symlinks in the mail spool directory
    (CVE-2008-2936) (rhbz#459101)


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.5.5-2
changelog:
  - enable Large file support on 32-bit archs (#428996)
  - fix mailq(1) and newaliases(1) man pages (#429501)
  - move pflogsumm and qshape to -perl-scripts subpackage (#467529)
  - update pflogsumm to 1.1.1
  - fix large-fs patch
  - drop open_define patch
  - add -Wno-comment to CFLAGS


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.5.6-1
changelog:
  - update to 2.5.6 (#479108)
  - rebuild /etc/aliases.db only when necessary (#327651)
  - convert doc files to UTF-8


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.1-1
changelog:
  - update to 2.6.1
  - move non-config files out of /etc/postfix (#490983)
  - fix multilib conflict in postfix-files (#502211)
  - run chroot-update script in init script (#483186)
  - package examples (#251677)
  - provide all alternatives files
  - suppress postfix output in post script


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.5-3
changelog:
  - fix init script LSB compliance (#528151)
  - update pflogsumm to 1.1.2
  - require Date::Calc for pflogsumm (#536678)
  - fix some rpmlint warnings


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.7.0-2
changelog:
  - follow guidelines for alternatives (#570801)
  - move sasl config to /etc/sasl2 (#574434)
  - drop sasl v1 support
  - remove unnecessary requirements
  - use bcond macros


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.8.7-2
changelog:
  - Introduce systemd unit file, thanks to Jóhann B. Guðmundsson <johannbg@hi.is>
    Resolves: rhbz#718793


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.10.0-2
changelog:
  - Fixed systemd error message regarding chroot-update, patch provided
    by John Heidemann <johnh@isi.edu>
    Resolves: rhbz#917463


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.10.1-7
changelog:
  - Fixed haproxy with TLS
    Resolves: rhbz#1370455
  - Fixed documentation about canonical maps
    Resolves: rhbz#1381871
  - Fixed build with kernel-4.*
    Resolves: rhbz#1575658


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.10.1-9
changelog:
  - Compiled with USE_LDAP_SASL if both "ldap" and "sasl" options are enabled
    Resolves: rhbz#1733938


author: Kaj J. Niemi <kajtzu@fi.basen.net> 7.4-0.1
changelog:
  - 7.4
  - Fixed Patch #1 (now rpm-pgsql-7.4.patch)
  - Fixed Patch #2 (now rpm-multilib-7.4.patch):
  - Patch #4 is unnecessary (upstream)
  - Fixed Patch #6 (now postgresql-7.4-src-tutorial.patch)
  - Added Patch #8 (postgresql-7.4-com_err.patch) as com_err()
    is provided by e2fsprogs and CPPFLAGS gets lost somewhere
    inside configure (bad macro?)
  - No 7.4 PDF docs available yet (Source #17)
  - PyGreSQL is separated from the upstream distribution but
    we include it as usual (Source #18)
  - Default to compiling libpq and ECPG as fully thread-safe

  - 7.4 Origin.  See previous spec files for previous history. Adapted
  - from Red Hat and PGDG's 7.3.4 RPM, directly descended from 
  - postgresql-7.3.4-2 as shipped in Fedora Core 1.


author: Lamar Owen <lowen@pari.edu> <lamar.owen@wgcr.org>
changelog:
  - 7.4-0.1PGDG
  - Development JDBC jars in addition to the 7.3 jars; will replace the
  - 7.3 jars once 7.4 official jars are released.
  - Changed to use the bzip2 source to save a little size.
  - Removed some commented out portions of the specfile.
  - Removed the 7.3.4 PDF docs.  Will replace with 7.4 PDF's once they
  - are ready.


author: David Jee <djee@redhat.com> 7.4-4
changelog:
  - Add PyGreSQL patch for deprecated column pg_type.typprtlen [Bug #111263]
  - Add headers patch which moves ecpg headers to /usr/include/ecpg
    [Bug #111195]


author: Lamar Owen <lowen@pari.edu>
changelog:
  - 7.4.1-1PGDG
  - Merge Sander Steffann's changes up to 7.4-0.5PGDG
  - Proper 7.4.1 JDBC jars this time.
  - Patch for no pl/python from Alvaro


author: Tom Lane <tgl@redhat.com> 7.4.2-1
changelog:
  - Update to PostgreSQL 7.4.2; sync with community SRPM as much as possible.
  - Support PGOPTS from /etc/sysconfig/pgsql, per bug 111504.
  - Fix permissions on /etc/sysconfig/pgsql, per bug 115278.
  - SELinux patch in init file: always su </dev/null, per bug 117901.
  - Rebuilt


author: Tom Lane <tgl@redhat.com> 7.4.3-1
changelog:
  - Update to PostgreSQL 7.4.3.
  - Uninstalling server RPM stops postmaster first, per bug 114846.
  - Fix su commands to not assume PG user's shell is sh-like, per bug 124024.
  - Fix permissions on postgresql-python doc files, per bug 124822.
  - Minor postgresql.init improvements.


author: Tom Lane <tgl@redhat.com> 7.4.3-3
changelog:
  - Undo ill-considered chkconfig change that causes server to start
    immediately upon install.  Mea culpa (bug 127552).


author: Tom Lane <tgl@redhat.com> 7.4.5-1
changelog:
  - Update to PostgreSQL 7.4.5.
  - Update JDBC jars to driver build 215.
  - Add Obsoletes: entries for rh-postgresql packages, per bug 129278.


author: Tom Lane <tgl@redhat.com> 7.4.5-3
changelog:
  - Solve the stale lockfile problem (bugs 71295, 96981, 134090)
  - Use runuser instead of su for SELinux (bug 134588)


author: Tom Lane <tgl@redhat.com> 7.4.5-4
changelog:
  - Remove contrib/oidjoins stuff from installed fileset; it's of no use
    to ordinary users and has a security issue (bugs 136300, 136301)
  - adjust chkconfig priority (bug 128852)


author: Tom Lane <tgl@redhat.com> 7.4.6-1
changelog:
  - Update to PostgreSQL 7.4.6 (bugs 136947, 136949)
  - Make init script more paranoid about mkdir step of initializing a new
    database (bugs 136947, 136949)


author: Tom Lane <tgl@redhat.com> 7.4.6-3
changelog:
  - Update to PyGreSQL 3.6 (to fix bug #142711)
  - Adjust a few file permissions (bug #142431)
  - Assign %{_libdir}/pgsql to base package instead of -server (bug #74003)


author: Tom Lane <tgl@redhat.com> 8.0.0-1
changelog:
  - Update to PostgreSQL 8.0.0, PyGreSQL 3.6.1, pgtcl 1.5.2,
    and jdbc driver build 309.
  - Extensive cleanout of obsolete cruft in patch set.
  - Regression tests are run during RPM build (NOTE: cannot build as root when
    this is enabled).
  - Postmaster stderr goes someplace useful, not /dev/null (bz#76503, #103767)
  - Make init script return a useful exit status (bz#80782)
  - Move docs' tutorial directory to %{_libdir}/pgsql/tutorial, since it
    includes .so files that surely do not belong under /usr/share.
  - Remove useless .sgml files from docs RPM (bz#134450)
  - Put regression tests under /usr/lib64 on 64-bit archs, since .so files
    are not architecture-independent.


author: Tom Lane <tgl@redhat.com> 8.0.1-2
changelog:
  - Repair improper error message in init script when PGVERSION doesn't match.
  - Arrange for auto update of version embedded in init script.


author: Tom Lane <tgl@redhat.com> 8.0.1-4
changelog:
  - Attach Obsoletes: declarations for rh-postgresql to subpackages (bz#144435)
  - Make Requires: and Prereq: package linkages specify release not only
    version, as per recent mailing list discussion.


author: Tom Lane <tgl@redhat.com> 8.0.3-1
changelog:
  - Update to PostgreSQL 8.0.3 (includes security and data-loss fixes; see
    bz#156727, CAN-2005-1409, CAN-2005-1410)
  - Update to jdbc driver build 311
  - Recreate postgres user after superseding an rh-postgresql install (bug #151911)
  - Ensure postgresql server is restarted if running during an upgrade


author: Tom Lane <tgl@redhat.com> 8.0.4-1
changelog:
  - Update to PostgreSQL 8.0.4, PyGreSQL 3.6.2, and jdbc driver build 312
  - Adjust pgtcl link command to ensure it binds to correct libpq (bug #166665)
  - Remove obsolete Conflicts: against other python versions (bug #166754)
  - Add /etc/pam.d/postgresql (bug #167040)
  - Include contrib/xml2 in build (bug #167492)


author: Tom Lane <tgl@redhat.com> 8.1.0-1
changelog:
  - Update to PostgreSQL 8.1.0, PyGreSQL 3.7, and jdbc driver build 404
  - Fix PAM config file (must have account not only auth) (bug #167040)
  - Add BuildPrereq: libxslt-devel (bug #170141)
  - Sync with PGDG SRPM as much as feasible


author: Tom Lane <tgl@redhat.com> 8.1.1-1
changelog:
  - Update to PostgreSQL 8.1.1
  - Make pg_config.h architecture-independent for multilib installs;
    put the original pg_config.h into pg_config_$ARCH.h


author: Tom Lane <tgl@redhat.com> 8.1.1-3
changelog:
  - fix pg_config.h for 64-bit and ppc platforms
  - update Makefile.regress (needs to --load-language=plpgsql)


author: Tom Lane <tgl@redhat.com> 8.1.2-1
changelog:
  - Update to PostgreSQL 8.1.2
  - Repair extraneous quote in pgtcl configure script ... odd that bash
    didn't use to spit up on this.


author: Tom Lane <tgl@redhat.com> 8.1.3-1
changelog:
  - Update to PostgreSQL 8.1.3 (fixes bug #180617, CVE-2006-0553)
  - Update to jdbc driver build 405
  - Modify multilib header hack to not break non-RH arches, per bug #177564


author: Tom Lane <tgl@redhat.com> 8.1.4-1
changelog:
  - Update to PostgreSQL 8.1.4 (includes fixes for CVE-2006-2313, CVE-2006-2314;
    see bug #192173)
  - Update to PyGreSQL 3.8
  - Suppress noise from chcon, per bug #187744


author: Tom Lane <tgl@redhat.com> 8.2.0-1
changelog:
  - Update to PostgreSQL 8.2.0
  - Update to PyGreSQL 3.8.1
  - Fix chcon arguments in test/regress/Makefile
  Related: #201035
  - Adjust init script to not fool /etc/rc.d/rc
  Resolves: #161470
  - Change init script to not do initdb automatically, but require
    manual "service postgresql initdb" for safety.  Per upstream discussions.


author: Tom Lane <tgl@redhat.com> 8.2.1-1
changelog:
  - Update to PostgreSQL 8.2.1
  - Update to pgtcl 1.5.3
  - Be sure we link to libncurses, not libtermcap which is disappearing in Fedora


author: Tom Lane <tgl@redhat.com> 8.2.1-2
changelog:
  - Split -pl subpackage into three new packages to reduce dependencies
    and track upstream project's packaging.


author: Tom Lane <tgl@redhat.com> 8.2.4-2
changelog:
  - Fix oversight in postgresql-test makefile: pg_regress isn't a shell script
    anymore.  Per upstream bug 3398.


author: Tom Lane <tgl@redhat.com> 8.2.4-4
changelog:
  - Use tzdata package's data files instead of private copy, so that
    postgresql-server need not be turned for routine timezone updates
  - Don't remove postgres user/group during RPM uninstall, per Fedora
    packaging guidelines
  - Seems we need an explicit BuildRequires on gawk now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 8.2.4-5
changelog:
  - Use nicer solution for tzdata file substitution: upstream discussion
    concluded that hardwiring the path was better than a symlink after all.


author: Tom Lane <tgl@redhat.com> 8.2.6-1
changelog:
  - Update to PostgreSQL 8.2.6 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  - Make initscript and pam config files be installed unconditionally;
    seems new buildroots don't necessarily have those directories in place


author: Tom Lane <tgl@redhat.com> 8.3RC2-1
changelog:
  - Update to PostgreSQL 8.3RC2 (not waiting for 8.3.0 because Fedora 9 alpha
    should be 8.3-based not 8.2-based).
  - Update to pgtcl 1.6.2


author: Tom Lane <tgl@redhat.com> 8.3.1-2
changelog:
  - Clean up cross-subpackage Requires: to ensure that updating any one
    subpackage brings in the matching versions of others.
  Resolves: #444271


author: Tom Lane <tgl@redhat.com> 8.3.1-4
changelog:
  - Enable LDAP support
  Resolves: #445315
  - Use -Wl,--as-needed to suppress bogus dependencies for libraries that
    are really only needed by some of the subpackages


author: Tom Lane <tgl@redhat.com> 8.3.3-1
changelog:
  - Update to PostgreSQL 8.3.3.
  - Remove postgresql-prefer-ncurses.patch, no longer needed in recent
    Fedora releases because libtermcap is gone.


author: Tom Lane <tgl@redhat.com> 8.3.3-2
changelog:
  - Install Pgtcl in /usr/lib/tcl$TCL_VERSION, not directly in /usr/lib.
    Needed because tcl 8.5 no longer puts /usr/lib into its package search path.
    NOTE: do not back-port this change into branches using pre-8.5 tcl, because
    /usr/lib/tcl8.4 had been a symlink to /usr/share/tcl8.4, and /usr/share
    is exactly where we must not put Pgtcl.
  Resolves: #228263


author: Tom Lane <tgl@redhat.com> 8.3.5-1
changelog:
  - Update to PostgreSQL 8.3.5.
  - Improve display from init script's initdb action, per Michael Schwendt


author: Tom Lane <tgl@redhat.com> 8.3.6-1
changelog:
  - Update to PostgreSQL 8.3.6, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-6.html


author: Tom Lane <tgl@redhat.com> 8.3.6-4
changelog:
  - Prevent dependent packages from needing to include sys/sdt.h
    (unintended side effect of previous patch)
  - Use -O1 on alpha, per report from Oliver Falk; -O2 tickles gcc bugs


author: Tom Lane <tgl@redhat.com> 8.3.7-1
changelog:
  - Update to PostgreSQL 8.3.7, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-7.html
    notably the fix for CVE-2009-0922


author: Tom Lane <tgl@redhat.com> 8.4.0-1
changelog:
  - Update to PostgreSQL 8.4.0.  See release notes at
    http://www.postgresql.org/docs/8.4/static/release-8-4.html


author: Tom "spot" Callaway <tcallawa@redhat.com> 8.4.0-2
changelog:
  - update License tag to MIT (PostgreSQL calls it "BSD", but it is MIT)
  - Note: This changes nothing from a license compatibility perspective.


author: Tom Lane <tgl@redhat.com> 8.4.1-1
changelog:
  - Update to PostgreSQL 8.4.1, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-1.html
    including two security issues
  Related: #522085
  Related: #522092


author: Tom Lane <tgl@redhat.com> 8.4.2-1
changelog:
  - Update to PostgreSQL 8.4.2, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-2.html
    including two security issues
  Related: #546321
  Related: #547662
  - Use -N not the obsolete -n in useradd call
  Resolves: #495727
  - Clean up specfile to eliminate rpmlint gripes, mainly by removing
    no-longer-needed provisions for superseding rh-postgresql


author: Tom Lane <tgl@redhat.com> 8.4.2-2
changelog:
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.2-3
changelog:
  - Remove the postgresql-python and postgresql-tcl subpackages.  These files
    are now broken out as their own packages (PyGreSQL and tcl-pgtcl,
    respectively), to reflect the now longstanding split of upstream projects.
  Related: #452306, #452321


author: Tom Lane <tgl@redhat.com> 8.4.2-4
changelog:
  - Arrange for the postmaster, but not any of its child processes, to be run
    with oom_adj -17.  This compensates for the OOM killer not being smart about
    accounting for shared memory usage.


author: Tom Lane <tgl@redhat.com> 8.4.2-5
changelog:
  - Latest version of systemtap needs the probes.o file to be built again
  Resolves: #557266
  - Provide script and instructions for building the documentation PDF


author: Tom Lane <tgl@redhat.com> 8.4.3-1
changelog:
  - Update to PostgreSQL 8.4.3, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-3.html


author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #593032


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 8.4.4-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Related: #639371
  - Add -p "$pidfile" to initscript's status call to improve corner cases.
  Related: #561010


author: Tom Lane <tgl@redhat.com> 8.4.6-1
changelog:
  - Update to PostgreSQL 8.4.6, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  - Ensure we don't package any .gitignore files from the source tarball
  Related: #642210


author: Tom Lane <tgl@redhat.com> 9.0.2-1
changelog:
  - Update to PostgreSQL 9.0.2 (major version bump)
  - Create infrastructure for in-place database upgrade using pg_upgrade
  Resolves: #398221


author: Tom Lane <tgl@redhat.com> 9.0.3-1
changelog:
  - Update to PostgreSQL 9.0.3, for various fixes described at
    http://www.postgresql.org/docs/9.0/static/release-9-0-3.html
    including the fix for CVE-2010-4015
  Resolves: #674296


author: Tom Lane <tgl@redhat.com> 9.0.3-2
changelog:
  - Remove filter-requires-perl-Pg.sh, which doesn't seem to be needed now that
    PyGreSQL has been split out; and our use of it isn't compatible with rpm 4.9
    anyway


author: Tom Lane <tgl@redhat.com> 9.0.4-1
changelog:
  - Update to PostgreSQL 9.0.4, for various fixes described at
    http://www.postgresql.org/docs/9.0/static/release-9-0-4.html
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines


author: Tom Lane <tgl@redhat.com> 9.1.0-1
changelog:
  - Update to PostgreSQL 9.1.0 (major version bump);
    in-place upgrade support now works from 9.0.x as the previous version


author: Tom Lane <tgl@redhat.com> 9.1.1-1
changelog:
  - Update to PostgreSQL 9.1.1, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-1.html
  - Enable build (but not test) of contrib/sepgsql
  - Clean up specfile build options so that turning options off works again


author: Honza Horak <hhorak@redhat.com> 9.1.1-2
changelog:
  - Create a symlink of pg_regress instead of full copy;
    Don't strip symbols from regress libs
  Related: #729012


author: Tom Lane <tgl@redhat.com> 9.1.2-1
changelog:
  - Update to PostgreSQL 9.1.2, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-2.html


author: Tom Lane <tgl@redhat.com> 9.1.2-2
changelog:
  - Make systemd unit file more user-friendly by resurrecting the old init
    script's checks for data directory presence and version match
  Resolves: #771496


author: Tom Lane <tgl@redhat.com> 9.1.3-1
changelog:
  - Update to PostgreSQL 9.1.3, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-3.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #797918


author: Tom Lane <tgl@redhat.com> 9.1.3-2
changelog:
  - Fix postgresql-setup to look for unit file in /usr/lib and to ignore
    comments therein
  Resolves: #802835
  - Resurrect a now-mostly-dummy postgresql init script, so that people can
    keep on using "service postgresql initdb" if they wish
  Resolves: #800416


author: Tom Lane <tgl@redhat.com> 9.1.3-3
changelog:
  - Fix postgresql-setup to rely on systemd to parse the unit file, instead
    of using ad-hoc code
  Resolves: #804290


author: Tom Lane <tgl@redhat.com> 9.1.4-1
changelog:
  - Update to PostgreSQL 9.1.4, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-4.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #826606
  - Update previous version (embedded in postgresql-upgrade) to 9.0.8
    because fix in whole-row variable dumping could be needed for upgrades
  - Revert fix for bug #800416, per fedora-packaging discussion at
    http://lists.fedoraproject.org/pipermail/packaging/2012-April/008314.html
    "service postgresql initdb" is dead and will stay that way


author: Tom Lane <tgl@redhat.com> 9.1.4-3
changelog:
  - Update code to use oom_score_adj not oom_adj, thereby suppressing
    whining in the kernel log
  - Add "legacy action" scripts to support "service postgresql initdb" and
    "service postgresql upgrade" in a now-approved fashion (requires a
    recent version of initscripts to work)
  Resolves: #800416


author: Tom Lane <tgl@redhat.com> 9.1.4-5
changelog:
  - Back-port upstream support for postmaster listening on multiple Unix sockets
  - Configure postmaster to create sockets in both /var/run/postgresql and /tmp;
    the former is now the default place for libpq to contact the postmaster.
  Resolves: #825448
  - Annotate postgresql.conf about not setting port number there
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 9.1.5-1
changelog:
  - Update to PostgreSQL 9.1.5, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-5.html
    including the fixes for CVE-2012-3488, CVE-2012-3489


author: Tom Lane <tgl@redhat.com> 9.2.0-1
changelog:
  - Update to PostgreSQL 9.2.0 (major version bump);
    in-place upgrade support now works from 9.1.x as the previous version
  - Add postgresql-plpython3 subpackage with PL/Python built against Python 3


author: Tom Lane <tgl@redhat.com> 9.2.1-1
changelog:
  - Update to PostgreSQL 9.2.1, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-1.html
    including a nasty data-loss bug
  - Adopt new systemd macros for server package install/uninstall triggers
  Resolves: #850277


author: Tom Lane <tgl@redhat.com> 9.2.2-1
changelog:
  - Update to PostgreSQL 9.2.2, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-2.html
  - Use new systemd install/uninstall trigger macros conditionally,
    so that package can still be installed on pre-F18 branches


author: Tom Lane <tgl@redhat.com> 9.2.2-3
changelog:
  - Prevent creation of TCP socket during pg_upgrade regression test, so that
    concurrent RPM builds on the same machine won't fail
  Resolves: #891531
  - Make sure $PGDATA/pg_log/ gets the right SELinux label in postgresql-setup
  Resolves: #891547


author: Tom Lane <tgl@redhat.com> 9.2.3-1
changelog:
  - Update to PostgreSQL 9.2.3, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-3.html
    including the fix for CVE-2013-0255
  Resolves: #908722
  - Make the package build with selinux option disabled
  Resolves: #894367
  - Include old version of pg_controldata in postgresql-upgrade subpackage
  Related: #896161


author: Tom Lane <tgl@redhat.com> 9.2.4-1
changelog:
  - Update to PostgreSQL 9.2.4, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-4.html
    including the fixes for CVE-2013-1899, CVE-2013-1900, CVE-2013-1901
  Resolves: #929223, #929255, #929328
  - fix build for aarch64 and ppc64p7


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-2
changelog:
  - postgresql-setup: don't create whole path to server's data to make sure that
    the parent directory has correct permissions (#972425)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-3
changelog:
  - add atomic operations support for aarch64 to preupgrade version also (#970661)
  - apply the forgotten man-page-day patch (#948933)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-5
changelog:
  - %beta implies debug everywhere (also in upgrade part of build)
  - allow `rpmbuild -bi --short-circuit`
  - upgrade: setup previous (RHEL6) version as 8.14.3
  - upgrade: start old postgres with socket file in /var/run/postgresql


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-6
changelog:
  - disable aggressive loop optimizations for old codebase (#993532)
  - upgrade: stop old server in case of permissions problem (#896161)


author: Jozef Mlich <jmlich@redhat.com> - 9.2.5-1
changelog:
  - rebase postgresql to 9.2.5 #1019762 
    http://www.postgresql.org/docs/9.2/static/release-9-2-5.html


author: Jozef Mlich <jmlich@redhat.com> - 9.2.5-2
changelog:
  - Resolves: #1019762 
  - additionally fixes rpmdiff filelist problem with
    /usr/share/doc/postgresql-9.2.5/html/bookindex.html.orig


author: Jozef Mlich <jmlich@redhat.com> - 9.2.6-1
changelog:
  - Resolves #1038688
  - rebase to 9.2.6 see changes at
    http://www.postgresql.org/docs/9.2/static/release-9-2-6.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.7-1
changelog:
  - update to 9.2.7 per release notes (#1065845)
    http://www.postgresql.org/docs/9.2/static/release-9-2-7.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.10-1
changelog:
  - update to 9.2.10 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-10.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-9.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-8.html
    (rhbz#1198672 rhbz#1198673)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.11-1
changelog:
  - update to 9.2.11 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-11.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.12-1
changelog:
  - update to 9.2.12 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-12.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.13-1
changelog:
  - update to 9.2.13 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-13.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.14-1
changelog:
  - update to 9.2.14 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-14.html


author: Pavel Kajaba <pkajaba@redhat.com> - 9.2.15-1
changelog:
  - update to 9.2.15 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-15.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.18-1
changelog:
  - update to 9.2.18 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-16.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.21-1
changelog:
  - update to 9.2.21 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-19.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.22-1
changelog:
  - update to 9.2.22 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-22.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.23-1
changelog:
  - update to 9.2.23 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-23.html


author: Tom Lane <tgl@redhat.com> 08.01.0200-1
changelog:
  - Update to version 08.01.0200.
  - Upstream now calls the library psqlodbcw.so ... add a symlink to avoid
    breaking existing odbc configuration files.


author: Tom Lane <tgl@redhat.com> 08.01.0200-2
changelog:
  - Change library name back to psqlodbc.so, because it appears that upstream
    will revert to that name in next release; no point in thrashing the name.
  - Include documentation files unaccountably omitted before (bug #184158)


author: Tom Lane <tgl@redhat.com> 08.03.0100-1
changelog:
  - Update to version 08.03.0100
  - Since it looks like upstream has decided to stick with psqlodbcw.so
    permanently, allow the library to have that name.  But continue to
    provide psqlodbc.so as a symlink.


author: Tom Lane <tgl@redhat.com> 09.01.0200-1
changelog:
  - Update to version 09.01.0200
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Adam Jackson <ajax@redhat.com> 1.7-2
changelog:
  - Don't suggest disabling g-p-m.  Any additional power consumption is more
    than offset by the ability to suspend.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.13-2
changelog:
  - Fixed sigwinch handling (#644800)
  - Readded strncpy patch as strncpy is safer than strcpy
  - Print all P-states in dump mode
  - Added explicit requires for pcituils (#653560)
  - Output error in interactive mode if there is no tty (#657212)
  - Do not suggest ondemand when p4-clockmod scaling driver is used (#497167)
  - Fixed rpmlint warning about mixed tabs and spaces


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.98-4
changelog:
  - Backported support for power_supply class
    (add-power-supply-class-support patch)
  - Added support for POWER_NOW readings
    (power-supply-add-power-now-support patch)
    Resolves: rhbz#796068


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0-1
changelog:
  - New version
    Resolves: rhbz#821144
  - Dropped patches: unknown-readings-fix (upstreamed), compile-fix (upstreamed),
    power-supply-add-power-now-support (upstreamed),
    html-print-commands (upstreamed), add-power-supply-class-support (obsoleted),
    power-supply-units-fix (obsoleted)
  - Updated patches: show-watts-only-if-discharging patch (sent upstream),
    html-escape patch
  - Added patch: valid-html-output (sent upstream)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0-2
changelog:
  - Fixed segfault during calibration
    Resolves: rhbz#823502
  - Used macro optflags instead of variable RPM_OPT_FLAGS


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.1-1
changelog:
  - New version
  - Removed patches (all upstreamed): show-watts-only-if-discharging,
    valid-html-output, factor-out-powertop-init, catch-fstream-errors


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.2-4
changelog:
  - Reduced number of useless syscalls (reduce-syscalls patch) and
    fixed gpu wiggle (gpu-wiggle-fix patch)
    Resolves: rhbz#886185


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-1
changelog:
  - New version
    Resolves: rhbz#923729
  - Dropped fix-crash-on-readonly-fs, reduce-syscalls,
    gpu-wiggle-fix patches (upstreamed)
  - Dropped version-fix patch (not needed)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-5
changelog:
  - Fixed some possible unregistered parameters errors
    (by reg-net-param patch)
    Resolves: rhbz#1014662
  - Unlimit FDs (by unlimit-fds patch)
    Printed friendly error message if the system is running out
    of FDs (by fd-limit-err patch)
    Resolves: rhbz#1017668


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-8
changelog:
  - Fixed buffer overflow in cpufreq tunables on systems with many CPUs
    (by tunable-overflow-fix patch)
    Resolves: rhbz#1080191


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-9
changelog:
  - MSR read errors are no more fatal (by msr-check patch)
    Resolves: rhbz#1102088
  - Backported --auto-tune feature and added one-shot systemd service
    (by auto-tune patch)
    Resolves: rhbz#1143014
  - Improved handling of reporting filenames (by improve-reporting patch)
    Resolves: rhbz#1039822


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-10
changelog:
  - Reintroduced -d, --dump option and added plain report mode,
    fixed parameters and manual page
    Resolves: rhbz#1333495


author: Erik Troan <ewt@redhat.com>
changelog:
  - added a patch to use our own route.h, rather then glibc's (which has
    alignment problems on Alpha's) -- I only applied this patch on the Alpha,
    though it should be safe everywhere


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated to ppp-2.3.3, build against glibc-2.0.6 - previous patches not
    required any more.
  - added buildroot
  - fixed the PAM support, which was really, completely broken and against any
    standards (session support is still not here... :-( )
  - we build against running kernel and pray that it will work
  - added a samples patch; updated glibc patch


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - New version 2.3.9 required for kernel 2.3.13 and will be required
    for new initscripts.  auth patch removed; 2.3.9 does the same thing
    more readably than the previous patch.


author: Nalin Dahyabhai <nalin@redhat.com> 2.4.1-2
changelog:
  - add buildprereq on pam-devel (#49559)
  - add patch to respond to CBCP LCP requests (#15738)
  - enable cbcp support at build-time
  - change the Copyright: tag to a License: tag


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add patch:
  	* Thu Jun 06 2002 Phil Knirsch <pknirsch@redhat.com>
  	- Fixed varargs problem for s390/s390x.


author: Thomas Woerner <twoerner@redhat.com> 2.4.2-5
changelog:
  - example scripts are using change_resolv_conf to modify /etc/resolv.conf
    (#132482)
  - require new libpcap library (>= 0.8.3-6) with a fix for inbound/outbound
    filter processing
  - not using internal libpcap structures anymore, fixes inbound/outbound
    filter processing (#128053)


author: David Woodhouse <dwmw2@redhat.com> 2.4.2-6.2
changelog:
  - Link pppoatm plugin against libresolv.
  - Revert to linux-atm headers without the workaround for #127098


author: Thomas Woerner <twoerner@redhat.com> 2.4.3-1
changelog:
  - new version 2.4.3
    - updated patches: make, lib64, dontwriteetc, fix, fix64, no_strip,
      radiusplugin
    - dropped patches: bpf, signal, pcap, pppoatm, pkgcheck


author: Thomas Woerner <twoerner@redhat.com> 2.4.3-2
changelog:
  - dropped all executable bits in scripts directory to prevent rpm requiring
    programs used in there


author: Thomas Woerner <twoerner@redhat.com> 2.4.4-1
changelog:
  - new version 2.4.4 with lots of fixes
  - fixed reesolv.conf docs (#165072)
    Thanks to Matt Domsch for the initial patch
  - enabled CBCP (#199278)


author: Martin Nagy <mnagy@redhat.com> 2.4.4-6
changelog:
  - call closelog earlier (#222295)
  - fix ChapMS2 (#217076)
  - moving header files to new -devel package (#203542)


author: Jiri Skala <jskala@redhat.com> - 2.4.4-14
changelog:
  - fixed #519042 - ppp package is missing URL in spec
  - fixed #524575 - ppp: no_strip patch modifies backup files created by previous patches


author: Jiri Skala <jskala@redhat.com> - 2.4.5-10
changelog:
  - fixes #613717 - Missing line in example script ip-up.local.add
  - removed /usr/kerberos/include from eaptls patch


author: Jiri Skala <jskala@redhat.com> - 2.4.5-12
changelog:
  - fixes #637513 - Missing: README.eap-tls
  - updated to latest eaptls upstream
  - fixes #637886 - EAP-TLS not working with enabled PPP Multilink Framing option


author: Jiri Skala <jskala@redhat.com> - 2.4.5-18
changelog:
  - fixes #682381 - hardcodes eth0
  - fixes #708260 - SELinux is preventing access on the file LCK..ttyUSB3


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-29
changelog:
  - make radius plugin config parser less strict
  - add creation of dip system group
  - resolves : #906913, #918296


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-30
changelog:
  - don't ship /var/lock/ppp in rpm payload and create it in %post instead
  - fix installation of tmpfiles.d configuration
  - enable hardened build
  - fix bogus dates in changelog
  - compile all binaries with hardening flags
  - fix possible NULL pointer dereferencing


author: Miroslav Lichvar <mlichvar@redhat.com> 0-0.7.20120407git0deb9c
changelog:
  - update to 20120407git0deb9c
  - move timepps.h to sys (#852950)
  - include license files in devel subpackage
  - remove obsolete macros


author: Paul Howarth <paul@city-fan.org> 1.6.0-2
changelog:
  - Weed out documentation useful only to developers
  - Add dist tag
  - Use full URL for SOURCE0
  - Fix permissions on %{_sbindir}/pptp


author: Paul Howarth <paul@city-fan.org> 1.7.0-1
changelog:
  - new upstream version 1.7.0
  - remove patch, included upstream
  - edit Makefile to prevent attempted chown in %install
  - remove redundant %attr tag in %files
  - honour $RPM_OPT_FLAGS
  - ensure directories have correct permissions


author: Paul Howarth <paul@city-fan.org> 1.7.1-1
changelog:
  - new upstream version 1.7.1 (fixes #166394)
  - include new document PROTOCOL-SECURITY
  - cosmetic change: replace variables with macros


author: Paul Howarth <paul@city-fan.org> 1.7.1-3
changelog:
  - Change download URL from df.sf.net to downloads.sf.net
  - Expand tabs in spec
  - Clarify license as GPL version 2 or later


author: Paul Howarth <paul@city-fan.org> 1.7.2-1
changelog:
  - Update to 1.7.2
  - New script and manpage: pptpsetup
  - Add patch to remove reference to stropts.h, not shipped in F9 onwards


author: Paul Howarth <paul@city-fan.org> 1.7.2-3
changelog:
  - Add dependency on /sbin/ip
  - Disable parallel make - object files are missing dependency on config.h


author: Paul Howarth <paul@city-fan.org> 1.7.2-5
changelog:
  - Retain permissions on /etc/ppp/chap-secrets when using pptpsetup (#492090)
  - Use upstream versions of patches
  - Re-enable parallel build; Makefile dependencies now fixed
  - Use perl rather than sed to edit Makefile, for spec compatibility with
    ancient distro releases


author: Paul Howarth <paul@city-fan.org> 1.7.2-6
changelog:
  - Don't check for MPPE capability in kernel and pppd unless we're creating a
    tunnel that requires encryption
  - Don't check for MPPE capability in kernel and pppd at all because current
    Fedora releases and EL >= 5 include MPPE support out of the box (#502967)


author: Paul Howarth <paul@city-fan.org> 1.7.2-9
changelog:
  - Add some fixes from CVS:
    - Fix waitpid usage
    - Move free of connection struct out of main loop
    - Avoid using connection struct after it is freed


author: Paul Howarth <paul@city-fan.org> 1.7.2-10
changelog:
  - Add /etc/tmpfiles.d/pptp.conf to create /var/run/pptp at boot time for
    systems with /var/run on tmpfs (#656672)


author: Paul Howarth <paul@city-fan.org> 1.7.2-11
changelog:
  - Require systemd-units for ownership of /etc/tmpfiles.d directory
  - Fix Call-Disconnect-Notify operation


author: Paul Howarth <paul@city-fan.org> 1.7.2-13
changelog:
  - Patch to fix broken Call-Disconnect-Notify code accepted upstream
  - Add upstream patch to support setting SO_MARK for the PPTP TCP control
    connection as well as on the GRE packets
  - Add upstream patch to implement the --nohostroute option
  - Nobody else likes macros for commands


author: Paul Howarth <paul@city-fan.org> 1.7.2-13.1
changelog:
  - Drop compiler optimization level to -O0 as per upstream in attempt to
    resolve occasional segfault in pptpcm (#749455)
  - Add patch to fix highly-parallel build (e.g. -j16)


author: Paul Howarth <paul@city-fan.org> 1.7.2-13.2
changelog:
  - Add patch to fix highly-parallel build (e.g. -j16)
  - Add additional compiler warning flags to highlight questionable code
  - Add patch to fix comparisons between signed and unsigned integers
  - Add patch to fix const usage
  - Add patch to fix missing field initializers
  - Add patch to suppress warnings about possibly unused variables
  - Add patch to fix declarations that are not prototypes
  - Add patch to fix warnings about nested externs
  - Add patch to fix dubious typecasts that violate strict-aliasing rules
  - Update the FSF address references and GPLv2 license text
  - Use default optimization level (-O2) again


author: Paul Howarth <paul@city-fan.org> 1.7.2-14
changelog:
  - Build with warning-fix patches to address occasional segfaults (#749455)
  - Patches have all now been merged upstream


author: Paul Howarth <paul@city-fan.org> 1.7.2-17
changelog:
  - Add note in options.pptp about MPPE not being available in FIPS mode
    (#845112)
  - Add note in options.pptp about PPTP with MSCHAP-V2 being insecure


author: Jakub Jelinek <jakub@redhat.com> 0.1.1-1
changelog:
  - relocate stabs and dwarf-2 debugging formats
  - support both --all and incremental prelinking
  - handle hardlinks
  - limit to libraries in /etc/prelink.conf directories or
    directories from command line


author: Jakub Jelinek <jakub@redhat.com> 0.1.2-1
changelog:
  - bail out early if ELF object does not have sh_offsets
    monotonically increasing
  - disallow prelinking if there are conflicts against read-only
    segments in shared libraries (ie. non-pic shared libraries
    - this is better than bailing out for all non-pic shared libraries)
  - add some C++ specific optimizations to reduce number of conflicts,
    more to come


author: Jakub Jelinek <jakub@redhat.com> 0.1.3-1
changelog:
  - fix layout.c
  - create .gnu.prelink_undo section, --undo and --verify modes will use that
  - some more C++ specific optimizations


author: Jakub Jelinek <jakub@redhat.com> 0.1.3-2
changelog:
  - use the new DT_GNU_CONFLICT/DT_GNU_LIBLIST/SHT_GNU_LIBLIST constants
  - unlink *.#prelink# files if necessary


author: Jakub Jelinek <jakub@redhat.com> 0.1.3-3
changelog:
  - don't use .gnu.reloc section, use .rel.dyn or .rela.dyn instead
  - put RELATIVE relocs first, not last, so that DT_REL{,A}COUNT
    works
  - put in updated glibc patch
  - no need for special binutils patch - all is done in the -z combreloc
    patchset


author: Jakub Jelinek <jakub@redhat.com> 0.1.3-4
changelog:
  - brown paper bag time: when determining if conversion from REL to RELA
    is needed, check all non-PLT rel sections, including last.
    This caused prelinking to fail with -z combreloc compiled libraries.


author: Jakub Jelinek <jakub@redhat.com> 0.1.3-5
changelog:
  - fix sorting of .rel*.dyn sections, so that all RELATIVE relocs really
    come first
  - when DT_RELCOUNT already exists and conversion REL->RELA is done,
    convert it into DT_RELACOUNT
  - set conflict lookupent and conflictent to 0 for undefineds
  - don't bother with DT_REL*COUNT for apps, they cannot have any RELATIVE
    relocs


author: Jakub Jelinek <jakub@redhat.com> 0.1.3-7
changelog:
  - fix layout code so that -R works
  - on IA-32, when there are no R_386_PC32 relocs and no R_386_32 relocs
    with non-zero addend (= memory content), don't convert REL->RELA,
    only switch R_386_32 relocs to R_386_GLOB_DAT
  - support creating a new PT_LOAD segment if necessary, if SHT_NOBITS
    sections are small, instead of adding new PT_LOAD segment just add file
    backing to those NOBITS sections
  - added testsuite
  - new supported architectures (Alpha including .mdebug section support,
    Sparc, Sparc 64-bit, X86_64 (the last one untested)), beginning of PPC
    support


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-1
changelog:
  - added --undo and --verify mode
  - new architectures s390, s390x, arm, sh
  - handle binaries/shared libraries with non-allocated sections
    without monotonically increasing sh_offsets
  - handle .sbss and .sdynbss
  - fixed a bug in 64-bit LE/BE read routines
  - removed .rel{,a}.dyn reloc conversion/sorting, it was duplicating
    ld's -z combreloc and complicated lots of things
  - fixed STB_LOCAL/STT_SECTION symbol adjusting
  - use mkstemp for temporary files, allow --verify for binaries/libs
    on read-only filesystems
  - added DWARF-2 .debug_ranges adjustement, special case GCC's
    "set base to 0 and make things absolute instead of relative" trick
  - allow arches to override default layout mechanism (for ppc)
  - added some new tests, test --undo and --verify modes in the testsuite
  - alpha: adjust what R_ALPHA_GLOB_DAT points to too
  - i386: apply _32 and _PC32 REL relocs, as apply_rel can be called
    for C++ optimizations before REL->RELA conversion
  - ppc: layout strategy to satisfy ppc lib location preferences
  - sparc64: handle R_SPARC_DISP64
  - x86-64: adjust what R_X86_64_RELATIVE points to too
  - link prelink statically, esp. because of --verify mode
  - run make check during build process


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-7
changelog:
  - when growing allocated shared lib sections (for REL->RELA
    conversion), make sure !PF_W and PF_W segments don't end up
    on the same page
  - when finding space for sections in an executable, make sure
    it is not included in between two reloc sections
  - for non-zero SHN_ABS symbols on 32-bit arches mask high
    32-bits of st_value (libelf 0.8.x is strict here)


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-8
changelog:
  - avoid putting garbage into executable's .gnu.liblist sh_link
    if we did not have to grow .dynstr
  - don't segfault on bogus sh_link and sh_info values (#72705)


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-9
changelog:
  - enable on ppc and x86_64
  - fix ppc far PLT slot prelink
  - support --undo on ppc
  - for bug-compatibility with some unnamed OS changed R_SPARC_RELATIVE
    --undo
  - tiny steps towards TLS support on IA-32, more will come


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-11
changelog:
  - make it work with elfutils instead of libelf 0.[78]
  - update to newer auto*/libtool
  - some more steps towards TLS support, at least --reloc-only should work


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-13
changelog:
  - use ELF_F_PERMISSIVE if defined
  - be permissive even when doing --reloc-only
  - fix up .plt section sh_entsize on Alpha


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-18
changelog:
  - fix section indices in .symtab if non-alloced sections weren't
    originally monotonically increasing
  - s390, s390x and Alpha TLS support


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-20
changelog:
  - ppc TLS
  - some ppc64 work
  - avoid using trampolines for nested functions
  - fix typo in prelink man page (#89247)


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-22
changelog:
  - don't adjust DT_REL{,A} if it is 0
  - allow prelinking of libraries with no dependencies
  - fix handling of libraries with no lazy relocs, no normal relocs or no
    relocs at all
  - some new tests
  - fix SH (Daniel Jacobowitz)


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-23
changelog:
  - when updating dynamic tags for executable after section reshuffling,
    check section type as well, so that 0 sized sections don't get the
    tags attached instead of the proper ones
  - when an address space conflict is found between libraries for the same
    executable during layouting, check properly for all remaining conflicts
    as well


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-24
changelog:
  - optimize out conflicts in G++ 3+ virtual tables if they are just
    because some method has been called from a binary and thus there
    is a .plt slot in the binary. This change not only kills lots of conflicts
    on some KDE programs, but also should speed up runtime (not just startup
    time), since the hop through .plt is bypassed
  - added new C++ test
  - fix a bug in ppc64 fixup .plt code


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-25
changelog:
  - exec-shield support
  - with -R, don't randomize just base address from which all libs
    are layed out, but also slightly randomize order of libraries
    in the layout queue
  - add check-harder and check-cycle makefile goals in testsuite/,
    use it during rpm building


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-26
changelog:
  - don't segfault in C++ optimizations if a conflict from undefined
    to defined value is seen
  - some more ppc64 work


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-27
changelog:
  - add --quick mode
  - new test for --quick mode and also reprelinking of binary against
    upgraded shared library which needs more conflicts


author: Jakub Jelinek <jakub@redhat.com> 0.2.0-28
changelog:
  - finish and enable ppc64
  - fix ppc BR{,N}TAKEN reloc handling
  - fix up sh_offset values of zero-sized or SHT_NOBITS section
    if ld messed them up
  - issue error about bogus library dependency chains instead of
    segfaulting (plus testcases for it)


author: Jakub Jelinek <jakub@redhat.com> 0.2.1-1
changelog:
  - make sure binaries prelinked for the second and later time without
    unprelinking in between verify correctly
  - make sure DT_CHECKSUM computation is the same for newly prelinked
    and second or later time prelinked libraries
  - dwarf2 abbrev hash bugfix
  - don't allow prelinking libraries outside directories specified
    in config file or on the command line
  - several new tests for reprelinking
  - pack non-alloced sections and section header table tightly after the
    last alloced section


author: Jakub Jelinek <jakub@redhat.com> 0.2.1-2
changelog:
  - fix a thinko in the library path checking code
  - change R_386_GLOB_DAT into R_386_32 in .gnu.conflict, similarly
    R_X86_64_GLOB_DAT and R_X86_64_64
  - fix a bug in find_free_space which caused
    "section file offsets not monotonically increasing" errors on some
    IA-32 binaries
  - add --md5 and --sha options
  - use mmap during --verify if possible
  - add */lib64 directories to prelink.conf


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-1
changelog:
  - run prelink from cron automatically, add /etc/sysconfig/prelink
    to configure it
  - update manual page


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-2
changelog:
  - avoid assertion failures when changing PROGBITS .bss back into
    NOBITS .bss (#101813)
  - add 2 new tests for it


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-3
changelog:
  - fix DT_CHECKSUM computation - do STT_LOCAL symbol frobbing and .mdebug
    updates write_dso would do also before checksum computation (#89953)


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-5
changelog:
  - fix prelink segfault on -z nocombreloc libraries (#103404)
  - run one make check round with -Wl,-z,nocombreloc to test handling
    of nocombreloc binaries and libraries


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-7
changelog:
  - don't rely on malloc/calloc/realloc with size 0 returning a unique pointer
  - fix testsuite, so that it works even if installed glibc/libstdc++
    is already prelinked


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-8
changelog:
  - use /var/lib/misc/prelink.full instead of /var/run/prelink.full for last
    full prelink timestamp (#106721)
  - warn about UPX compressed binaries or libraries/binaries without section
    headers (neither can be prelinked obviously)


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-11
changelog:
  - fix adjustement of DT_VALRNGLO .. DT_VALRNGHI and
    DT_ADDRRNGLO .. DT_ADDRRNGHI dynamic tags when relocating shared
    libraries
  - never adjust p_vaddr/p_paddr/p_offset of PT_GNU_STACK segment
  - allow shell wildcards in /etc/prelink.conf
  - fix REL->RELA conversion of shared libraries if .rel.dyn
    or .rel.plt are last sections in readonly PT_LOAD segment
  - force full reprelinking on prelink upgrades (well, first time
    the cron job is run after the upgrade)
  - require coreutils, findutils, util-linux, gawk and grep


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-12
changelog:
  - added execstack tool
  - added -o option, to be used together with -u
  - free temp_filename in close_dso


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-15
changelog:
  - blacklist support
  - use FTW_ACTIONRETVAL if available to avoid even stating of
    files in blacklisted directory trees
  - SELinux support


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-18
changelog:
  - allow R_*_JU?MP_SLOT relocs to point also into .got.plt
    sections on IA32/AMD64/ARM/s390/s390x/SH


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-19
changelog:
  - refuse to prelink objects whose dependencies as reported by
    ldd don't include all dependencies transitively (this can
    happen when using RPATH and a shared library with the same
    SONAME exists both in that RPATH and either another RPATH
    or standard library directories)
  - add testcase for this
  - rework .dynsym/.symtab STT_SECTION translation, so that it works
    with binutils which put only sections not generated by the linker
    into .dynsym for shared libraries
  - fix make check, so that it is not confused by 2.6.x kernel
    VDSOs


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-20
changelog:
  - clearify message about unlisted dependencies
  - don't do SELinux context copying if is_selinux_enabled () < 0


author: Jakub Jelinek <jakub@redhat.com> 0.3.0-21
changelog:
  - fix prelink abort in certain cases where a new PT_LOAD segment
    needs to be added (seen on AMD64)


author: Jakub Jelinek <jakub@redhat.com> 0.3.1-1
changelog:
  - add prelink documentation (PDF format)
  - fix assertion failures on PPC (.sdynbss related, #115925)
  - fix prelink --help (#115202)
  - avoid free on uninitialized variable in one error path (#117332)
  - s/i386/%{ix86}/ to make mharris happy


author: Jakub Jelinek <jakub@redhat.com> 0.3.1-2
changelog:
  - unlink temporary files if renaming to the destination or setting of
    security context failed (#118251)
  - fix bi-architecture prelinking (#118226)
  - if prelink called from the cron script fails, note the exit status
    into /var/log/prelink.log


author: Jakub Jelinek <jakub@redhat.com> 0.3.2-1
changelog:
  - fix cxx.c:68: find_cxx_sym: Assertive `n < ndeps' failed problem
    on 32-bit architectures (#118522)
  - build prelink.cache into temporary file and atomically rename over
    (#121109)


author: Jakub Jelinek <jakub@redhat.com> 0.3.2-2
changelog:
  - add 2 new TLS testcases (one that fails e.g. with glibc < 2.3.3-28
    on IA-32)
  - SPARC TLS support


author: Jakub Jelinek <jakub@redhat.com> 0.3.2-6
changelog:
  - change sed separator in testsuite scripts from | to , if \|
    is present in regexps, as that invokes undefined behaviour
    which changed between GNU sed 4.0.9 and 4.1


author: Jakub Jelinek <jakub@redhat.com> 0.3.2-10
changelog:
  - support for non-absolute blacklist glob patterns (e.g. -b *.la)
  - cache information about non-prelinkable files (non-ELF, statically linked,
    too small .dynamic, DT_TEXTREL with conflicts against it; #132056)
  - other speedups for prelink -aq
  - for --verify, make sure only read-only fd's are opened for the
    unprelinked temporary file, otherwise a kernel might ETXTBUSY on it
    (#133317)
  - change warning message if some object's dependencies can't be found
  - add buildrequires libselinux-devel and use %{_tmppath} instead
    of /var/tmp in Buildroot (#132879)


author: Jakub Jelinek <jakub@redhat.com> 0.3.3-1
changelog:
  - if layout code needs to re-prelink some library, make sure
    all libraries that depend on it are re-prelinked too (#140081)
  - add several more checks before deciding it is ok to prelink a binary
    (even if another bug like #140081 was in, these checks should hopefully
    catch it and refuse to (re-)prelink the binary)
  - added new PRELINK_NONRPM_CHECK_INTERVAL variable to /etc/prelink,
    defaulting to 7 days.  Prelink nightly job will not do anything
    if that interval has not elapsed since last prelinking and
    and the rpm database has not been modified since that prelinking.
    This is useful if you rely on rpm/up2date/yum/apt-rpm for library
    and binary updates.  If you combine it with other means (installs
    from source, tarballs etc.), you probably want to
    set PRELINK_NONRPM_CHECK_INTERVAL=0.
  - update prelink man page (#126468)


author: Jakub Jelinek <jakub@redhat.com> 0.3.4-1
changelog:
  - fix prelink -uo when linked against libselinux (#146637)
    and when the -o argument filename is on a different filesystem
    than the object that needs undoing


author: Jakub Jelinek <jakub@redhat.com> 0.3.5-1
changelog:
  - support for ppc32 -msecure-plt libraries and binaries
  - don't crash if d_tag is invalid (#155605)
  - rebuilt against robustified libelf (CAN-2005-1704)
  - fix handling of libraries and binaries given on command
    line without any / characters in the filename


author: Jakub Jelinek <jakub@redhat.com> 0.3.6-1
changelog:
  - remove kernel requires - installed kernel doesn't imply running
    kernel anyway and in FC5 kernels older than 2.4.20 can't be used
    anyway, as LinuxThreads are no longer included
  - don't relocate stabs N_{B,D,}SLINE (reported by Ashley Pittman)


author: Jakub Jelinek <jakub@redhat.com> 0.3.6-3
changelog:
  - rebuilt again, disable -Wl,-z,nocopyreloc tests on x86_64,
    nocopyreloc really doesn't work on this platform (#180552)


author: Jakub Jelinek <jakub@redhat.com> 0.3.7-1
changelog:
  - in -q mode, recheck the canonicalized filename to avoid
    overwriting symlinks with regular files (#145983, #188062)
  - allow prelinking of binaries with .tbss section


author: Jakub Jelinek <jakub@redhat.com> 0.3.8-1
changelog:
  - fix -q mode canonicalization fix, speed up filename canonicalization
    by caching canonicalization for directories (#145983, #188062)
  - remove bogus e_shoff assertion check (#194016)
  - move prelink log file to /var/log/prelink/prelink.log (#194473)
  - increase x86-64 maxpagesize to 2MB


author: Jakub Jelinek <jakub@redhat.com> 0.3.9-1
changelog:
  - DT_GNU_HASH support
  - handle N_BNSYM and N_ENSYM stabs (#198203)
  - handle upgrades from prelink with smaller maxpagesize to prelink
    with larger maxpagesize (#196941)


author: Jakub Jelinek <jakub@redhat.com> 0.3.9-4
changelog:
  - fix adjusting of .debug_ranges if end of range is at the end of some
    section and there is padding before the following one


author: Jakub Jelinek <jakub@redhat.com> 0.3.10-1
changelog:
  - MIPS support (Richard Sandiford)
  - don't leave temporary files behind on prelink --verify failures (#199251)


author: Jakub Jelinek <jakub@redhat.com> 0.4.0-1
changelog:
  - add support for -c /etc/prelink.conf.d/*.conf in prelink.conf (#244452)
  - remove no longer existent directories from default prelink.conf (#248694)
  - reenabled prelink C++ optimizations which have not triggered any longer
    since _ZT[IV]* moved into .data.rel.ro section from .data
  - fixed performance issues in C++ optimizations, especially on GCJ
    CNI programs (#314051)
  - other performance improvements, prelink -avmR after prelink -ua now
    takes roughly 3m4s real time instead of 20m27s before
  - don't run TEXTREL tests if SELinux is enforcing (#245928)


author: Jakub Jelinek <jakub@redhat.com> 0.4.1-1
changelog:
  - add support for STT_GNU_IFUNC on i?86/x86_64 and R_{386,X86_64}_IRELATIVE
  - add support for DWARF3/DWARF4 features generated newly by recent
    gccs
  - temporarily link prelink against -lpthread to workaround -lselinux
    issue


author: Jakub Jelinek <jakub@redhat.com> 0.4.2-7
changelog:
  - BuildReq libselinux-utils (#571724)
  - handle R_390_{PC32DBL,16,PC16,PC16DBL,8} relocations in 31-bit objects
    (#552635)
  - add prelink.conf(5) man page as a link to prelink(8) (#528933)


author: Jakub Jelinek <jakub@redhat.com> 0.4.3-1
changelog:
  - add support for prelink -u -o - library
  - add DWARF4 support
  - fix up reloc{8,9}.sh for sparc64, reenable testing on sparc64


author: Jakub Jelinek <jakub@redhat.com> 0.4.3-4
changelog:
  - for prelink -u -o ... if no .gnu.prelink_undo section is
    present just pass through the original bits to the output file
    instead of saving the ELF file using libelf into a temporary
    and then copying over or renaming that to the final output file
    (#614382)


author: Jakub Jelinek <jakub@redhat.com> 0.4.4-1
changelog:
  - support copying over extended attributes (#456105)
  - handle DW_OP_GNU_implicit_pointer, fix handling of DW_OP_call_ref


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-1
changelog:
  - enable for arm (#733089)
    - adjust arm default dynamic linker
    - fix up fast PIE detection to handle PT_LOPROC ... PT_HIPROC phdrs
      before PT_PHDR
    - disable cxx{1,2}.sh test checking for conflict removal on arm
      due to EABI weirdnesses, add new cxx3.sh test that tests conflict
      removal even on arm


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-3
changelog:
  - add --layout-page-size=N option, default to --layout-page-size=32768
    on AMD Bulldozer (#739460)
  - handle 0%{?rhel} >= 7 like 0%{?fedora} >= 13


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-6
changelog:
  - fix up DWARF4 DW_AT_data_member_location handling
  - add .debug_macro support
  - add DWZ multifile support


author: Jakub Jelinek <jakub@redhat.com> 0.5.0-3
changelog:
  - fix R_390_IRELATIVE handling on s390/s390x (#973259, #1010392, #1010398)
  - change cron.daily/prelink permissions to rwxr-x--- (#1012538)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Change to "License: GPL or artistic" from "Copyright: distributable"
  - Fix man page (#35825)
  - 3.15.1
  - redo config patch


author: Trond Eivind Glomsrød <teg@redhat.com> 3.22-4
changelog:
  - Add Telsa Gwynne's procmailrc as a doc file - it's
    excellently commented, and is a great example


author: Peter Vrabec <pvrabec@redhat.com> 3.22-17
changelog:
  - fix truncation of mailbox when running into a disk quota or a
    full partition. Patch from Solar Designer.


author: Miroslav Lichvar <mlichvar@redhat.com> 3.22-18
changelog:
  - add IPv6 support to comsat notification (#198403)
  - package man page for mailstat
  - change mail spool directory to /var/spool/mail


author: Miroslav Lichvar <mlichvar@redhat.com> 3.22-24
changelog:
  - rename getline to avoid conflict with glibc (#505977)
  - add -Wno-comments to CFLAGS
  - remove package name from summary


author: Jaromir Capik <jcapik@redhat.com> - 3.3.2-2
changelog:
  - Fixing requires in the devel subpackage (missing (x86-64) macro)
  - License statement clarification (upstream patch referrenced in the spec header)


author: Jaromir Capik <jcapik@redhat.com> - 3.3.4-2
changelog:
  - fixing the following regressions:
  -   negative ETIME field in ps (#871819)
  -   procps states a bug is hit when receiving a signal (#871824)
  -   allow core file generation by ps command (#871825)


author: Jaromir Capik <jcapik@redhat.com> - 3.3.6-1
changelog:
  - Update to 3.3.6
  - Changing URL/Source from gitorious to recently created sourceforge page
  - Replacing autogen.sh with autoreconf


author: Jaromir Capik <jcapik@redhat.com> - 3.3.8-7
changelog:
  - Disabling screen content restoration when exiting 'top' (#977561)
  - Enabling SIGWINCH flood prevention


author: Jaromir Capik <jcapik@redhat.com> - 3.3.8-11
changelog:
  - Support for libselinux (#975459)
  - Support for systemd (#994457)
  - Support for 'Shmem' in free (#993271)


author: Jaromir Capik <jcapik@redhat.com> - 3.3.9-5
changelog:
  - Support for timestamps & wide diskstat (#1053428, #1025833)
  - Fixing fd leak in watch
  - Fixing format-security build issues
  - Skipping trailing zeros in read_unvectored (#1057600)
  - Resolves: rhbz#1053428, Related: rhbz#1025833


author: Jaromir Capik <jcapik@redhat.com> - 3.3.10-1
changelog:
  - Upgrading to 3.3.10
  - top.1: physical memory - has used / is using (#1119263)
  - Include man pages for openproc, readproc and readproctab (#1119260)
  - ps -p cycles over all PIDs instead of just one (#1060715)
  - Remove explicit dependency on systemd-libs package (#1113206)
  - Allow longer usernames to display in ps output (#1112734)
  - w doesn't display FROM by default (#1078310)
  - Return value of pgrep is incorrect (#1116309)
  - Should shared memory be accounted in cached in free output? (#1070736)
  - Resolves: rhbz#1119263 rhbz#1119260 rhbz#1060715 rhbz#1113206
  - Resolves: rhbz#1112734 rhbz#1078310 rhbz#1116309 rhbz#1070736


author: Jaromir Capik <jcapik@redhat.com> - 3.3.10-2
changelog:
  - Replacing RC tarball with final 3.3.10 release
  - Related: rhbz#1119263 rhbz#1119260 rhbz#1060715 rhbz#1113206
  - Related: rhbz#1112734 rhbz#1078310 rhbz#1116309 rhbz#1070736


author: Jaromir Capik <jcapik@redhat.com> - 3.3.10-3
changelog:
  - Disabling translated man pages due to conflicts with man-pages-*
  - Removing /etc/sysctl.d (quietly stolen by systemd)
  - Related: rhbz#1119263 rhbz#1119260 rhbz#1060715 rhbz#1113206
  - Related: rhbz#1112734 rhbz#1078310 rhbz#1116309 rhbz#1070736


author: Jan Rybar <jrybar@redhat.com> - 3.3.10-7
changelog:
  - Fixing sysinfo - devices with length exceeding 15 chars are not displayed in vmstat -d
  - Resolves: #1169349


author: Jan Rybar <jrybar@redhat.com> - 3.3.10-9
changelog:
  - Fixes showing same cgroups for threads under process by adding format option
  - Resolves: rhbz#1284087


author: Jan Rybar <jrybar@redhat.com> - 3.3.10-10
changelog:
  - Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
  - Resolves: rhbz#1169349


author: Jan Rybar <jrybar@redhat.com> - 3.3.10-28
changelog:
  - pgrep: uid/gid conversion overflow
  - vmstat: manpage line about I/O blocked procs unclear
  - Resolves: rhbz#1624514, rhbz#1796043


author: Adrian Reber <areber@redhat.com> - 1.0.2-1
changelog:
  - new upstream release
  - split off protoc-c into protobuf-c-compiler to reduce runtime
    dependencies of the main package


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 2.3.0-6
changelog:
  - Fix java subpackage bugs #669345 and #669346
  - Use new maven plugin names
  - Use mavenpomdir macro for pom installation


author: Conrad Meyer <konrad@tylerc.org> - 2.4.1-9
changelog:
  - Fix packaging bug, -emacs-el subpackage should depend on -emacs subpackage of
    the same version (%version), not the emacs version number...


author: Conrad Meyer <cemeyer@uw.edu> - 2.5.0-2
changelog:
  - Remove changelog history from before 2010
  - This spec already runs autoreconf -fi during %build, but bump build for
    rhbz #926374


author: Mike A. Harris <mharris@redhat.com> 6.3.2-7
changelog:
  - Change spec tag Copyright -> License
  - change logrotate to rotate daily, and keep 1 month (31 days) of data


author: Mike A. Harris <mharris@redhat.com> 6.3.2-9
changelog:
  - Fixed bug (#53307) psacct is enabled by default, and the log files
    are huge, and will fill the disk up very quickly.  logrotate will
    now compress them daily.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-11
changelog:
  - Conditionalized acct-6.3.2-config.patch to only be applied for RHL 7.x
    builds, as it breaks FHS compliance by putting files in nonstandard
    locations.  Also fixed up other places in specfile for FHS 2.2.
  - Added acct-6.3.2-I-HATE-GNU-AUTOCONK.patch because I hate GNU autoconk
    really really badly.
    
  - Bumped to -11 to avoid buildsystem stupidness


author: Mike A. Harris <mharris@redhat.com> 6.3.2-13
changelog:
  - Removed Build_7x flag, added FHS_compliant flag, reworked specfile to use new
    flag, and fixed bug (#60716)


author: Mike A. Harris <mharris@redhat.com> 6.3.2-15
changelog:
  - Added new feature - psacct initscript now controls process accounting so
    that it is not just forced on if installed as was the previous behaviour
  - Modified the initscripts package to not force psacct on anymore and made
    the new psacct-6.3.2-15 conflict with previous initscripts packages.
  - Fixed logrotate config to set perms/owner of new log files, and closed
    bug (#54165)


author: Mike A. Harris <mharris@redhat.com> 6.3.2-17
changelog:
  - Removed the files usracct and savacct, which are not used by psacct
    utilities at all, but by the sa program.  Our sa uses files in a different
    location, and so these files are unused and unnecessary.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-19
changelog:
  - Made initscript touch/chmod accounting file if it is not present during
    startup, to ensure accounting works properly when enabled.


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Take the time to make sure things get through on all archs, by simply
    running it through the build system.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-23
changelog:
  - Fixed chkconfig issue in rpm scripts (#61191)
  - Excludearch ia64, not taking the time to debug/troubleshoot random
    buildsystem failure due to higher priorities.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-24
changelog:
  - Fixed initscript reload/restart by creating start/stop functions and
    making everything use them (#72261)


author: Mike A. Harris <mharris@redhat.com> 6.3.2-25
changelog:
  - Added with_last conditional to disable /usr/bin/last because ours is in
    the SysVInit package.  This fixes unpackaged files terminate build prob.


author: Charles Bennett <ccb@redhat.com> 6.3.2-33.fc4
changelog:
  - rhbz 133077: logrotate fixed to continue accounting during rotate
  - rhbz 141802: lastcomm was not handling all forms of --strict-match
  - rhbz 141971: rpm -e no longer leaves /var/lock/subsys/psacct
  - rhbz 43294: sa will never report any io because the kernel doesn't
     provide it.  Tweaked to ignore ac_io in acct.h
  - integrate lastcomm hz patch from RH support


author: Ivana Hutarova Varekova <varekova@redhat.com> - 6.5.1-2
changelog:
  - fix initscript (accton parameters changed)
  - fix lastcomm setings (#550229 - confusion about accounting file 
    location)


author: Ivana Hutarova Varekova <varekova@redhat.com> - 6.5.1-5
changelog:
  - Fix the logrotate script and split its template to a separate file.
    (Michal Schmidt patch, thanks)


author: Ivana Hutarova Varekova <varekova@redhat.com> - 6.5.4-4
changelog:
  - Resolves: #575975
    Build psacct with --enable-linux-multiformat
  - remove obsolete change
  - fix sa problem with hzval variable


author: Jan Görig <jgorig@redhat.com> - 6.5.5-1
changelog:
  - upgrade to new upstream release
  - remove obsolete patches
  - remove FHS_compliant condition
  - remove obsolete conflicts with initscripts
  - info installation fix
  - modified man-pages patch
  - spec fixes


author: Jaromir Capik <jcapik@redhat.com> - 6.5.5-8
changelog:
  - #759321 - psacct logrotate script references init.d service
  - #735300 - Enabling psacct causes daily cron spam


author: Bernhard Rosenkraenzer <bero@redhat.com> 20.1-2
changelog:
  - Add BuildRequires (#49562)
  - s/Copyright/License/
  - Fix license (it's actually dual-licensed BSD/GPL, not just "distributable")


author: Bernhard Rosenkraenzer <bero@redhat.com> 20.2-1
changelog:
  - 20.2
  - Add patch from bug report #56186; the problem is not reproducable,
    but the patch can't hurt.


author: Bernhard Rosenkraenzer <bero@redhat.com> 20.2-4
changelog:
  - Autogenerate the signal list from _includedir/bits/signum.h
    to make sure it works on all arches and doesn't break again.


author: Mike A. Harris <mharris@redhat.com> 21.2-2
changelog:
  - Updated to new upstream version 21.2
  - Updated Source: URL to sourceforge's current ftp area
  - Fixes fuser largefile bug (#66340)
  - Disable prep time sh %{SOURCE1} >src/signames.h as the 21.2 release
    fixes this already now.


author: Mike A. Harris <mharris@redhat.com> 21.3-1
changelog:
  - Updated to new upstream version 21.3
  - Removed dead script gensig.sh
  - Disabled psmisc-21.2-gcc33.patch as it is included in 21.3


author: Mike A. Harris <mharris@redhat.com> 21.4-1
changelog:
  - Updated to new upstream version 21.4
  - Ported SELinux patch forward as psmisc-21.4-redhat-selinux-psmisc.patch,
    but disabled SELINUX support temporarily until other build problems are
    resolved
  - Remove MKINSTALLDIRS-./mkinstalldirs from "make install" as that causes the
    build to fail when "./" changes.  If this option is ever added back, make
    it relative to $RPM_BUILD_DIR instead of ./ so that things do not break
  - Added pstree.x11 to file list after rpm reported it present in buildroot but
    not packaged


author: Karel Zak <kzak@redhat.com> 21.5-1
changelog:
  - Updated to new upstream version 21.5
  - Ported SELinux patch forward as psmisc-21.5-selinux.patch
  - Added psmisc-21.5-term.patch that fix termcap.h and term.h conflicts


author: Karel Zak <kzak@redhat.com> 21.6-1
changelog:
  - sync with upstream release 21.6
  - cleanup selinux patch
  - fix #165167 - buffer overflow detected in fuser


author: Karel Zak <kzak@redhat.com> 22.1.03072006cvs-1
changelog:
  - update to new upstream CVS version 
  - enable new fuser version
  - fix fuser return code 
  - fix #183897 - "pstree -a" call results in segmentation fault


author: Tomas Smetana <tsmetana@redhat.com> 22.6-5
changelog:
  - fix configure.ac to include all the required headers for peekfd
  - remove kernel-headers again -- not needed in rawhide


author: Jan Görig <jgorig@redhat.com> 22.13-1
changelog:
  - updated to new upstream version
  - removed unused patch
  - peekfd should work on all architectures now
  - spec cleanups


author: Richard W.M. Jones <rjones@redhat.com> 22.20-1
changelog:
  - Update to 22.20.
    Contains a fix for: http://sourceforge.net/p/psmisc/bugs/53/
  - Fix src/pstree.c when SELinux is available.


author: Jaromir Capik <jcapik@redhat.com> - 22.20-6
changelog:
  - Fixing null pointer dereference introduced with namespaces
  - Fixing bogus dates in the changelog
  - Related: rhbz#980514


author: Jan Rybar <jrybar@redhat.com> 22.20-13
changelog:
  - fuser manpage: note about invisible other PIDs moved to RESTRICTIONS section
  - Resolves: rhbz#1400126


author: Tomasz Kłoczko <kloczek@rudy.mif.pg.gda.pl>
changelog:
  - new version:
      Patchlevel 17 had some minor bugfixes and improvements
      - Trailer information now put before %EOF comments if no %Trailer
      - psselect can now add blank pages.
      - Piped input works in Linux
      - spec file rewrited for using Buildroot,
      - man pages gziped.


author: Timo Karjalainen <timok@iki.fi>
changelog:
  - Reverted back to un-gzipped man-pages (Redhat style)
  - Added patch to compile everything cleanly
  - Some minor changes to specfile


author: Tim Powers <timp@redhat.com>
changelog:
  - man pages in /usr/share/man (FHS compliant location)
  - grabbed spec from contrib
  - initial build for Powertools


author: Jiri Popelka <jpopelka@redhat.com> - 1.17-40
changelog:
  - fix dist tag and URL
  - put psutils-copyright.patch among sources as it's used only in
    psutils-remove-copyrighted-files
  - no need to define BuildRoot and clean it in %clean and %install anymore
  - %defattr no longer needed in %files


author: Michael Schwendt <mschwendt@fedoraproject.org> - 0:2.0.3-1
changelog:
  - Update to 2.0.3, minor and common spec adjustments + LGPL, %check,
    use URLs for official GNU companion sites.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.6-2
changelog:
  - Insert -g into CFLAGS after configure script removes it.
  - Disable configure check for obsolete sigstack(), which segfaults.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.7-5
changelog:
  - Patch pth-config.
    This shall fix the multiarch conflict in pth-devel (#342961).
    It must not return -I/usr/include and -L/usr/{lib,lib64} either,
    since these are default search paths already.
  - Replace the config.status CFLAGS sed expr with a patch.


author: Chris Tyler <chris@tylers.info> - 2.0.7-12
changelog:
  - Removed FORTIFY_SOURCE for %{arm} archs per Ajay Ramaswamy <ajayr@krithika.net>
  - See https://bugzilla.redhat.com/show_bug.cgi?id=750243


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.7-19
changelog:
  - Build with -D_FILE_OFFSET_BITS=64 to get stat64 in pth_high.c
  - Guard the ARM CFLAGS sed substitution.


author: Peter Robinson <pbrobinson@fedoraproject.org> - 2.8.3-4
changelog:
  - Add initial upstream patch to deal with Network interfaces with names other than eth - RHBZ 682388


author: Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.10.2-4
changelog:
  * Sat Aug 25 2012 Peter Robinson <pbrobinson@fedoraproject.org> - 2.10.7-1
  - New 2.10.7 stable release


author: Pierre Ossman <drzeus@drzeus.cx> 0.8.1-1
changelog:
  - Update to 0.8.1
  - Split into more packages
  - Remove the modules' static libs as those shouldn't be used (they shouldn't
    even be installed)


author: Pierre Ossman <drzeus@drzeus.cx> 0.9.3-1
changelog:
  - Update to 0.9.3
  - GLib 1.2 bindings dropped.
  - Howl compat dropped as Avahi is supported natively.
  - Added fix for pc files on x86_64.


author: Pierre Ossman <drzeus@drzeus.cx> 0.9.5-3
changelog:
  - Add esound-compat subpackage that allows PulseAudio to be a drop-in
    replacement for esd (based on patch by Matthias Clasen).
  - Backport patch allows startup to continue even when the users'
    config cannot be read.


author: Pierre Ossman <drzeus@drzeus.cx> 0.9.5-4
changelog:
  - Add patch to handle ALSA changing the frame size (bug 230211).
  - Add patch for suspended ALSA devices (bug 228205).


author: Lennart Poettering <lpoetter@redhat.com> 0.9.7-0.2.svn20070812
changelog:
  - Update snapshot, contains 64 bit build fixes, and disables module-x11-xsmp by
    default to avoid deadlock when PA is started from gnome-session


author: Lennart Poettering <lpoetter@redhat.com> 0.9.7-0.3.svn20070812
changelog:
  - Depend on tcp_wrappers-devel instead of tcp_wrappers, to make sure we
    actually get the headers installed.


author: Lennart Poettering <lpoetter@redhat.com> 0.9.7-0.9.svn20070904
changelog:
  - Update SVN snapshot
  - ship libflashsupport in our package
  - drop pulseaudio-devel since libpulsecore is not linked statically


author: Lennart Poettering <lpoetter@redhat.com> 0.9.7-0.12.svn20070925
changelog:
  - New SVN snapshot
  - Split off libflashsupport again
  - Rename "-lib" packages to "-libs", like all other packages do it.
  - Provide esound


author: Lennart Poettering <lpoetter@redhat.com> 0.9.7-0.16.svn20071017
changelog:
  - Another SVN snapshot, fixing another round of bugs (#330541)
  - Split libpulscore into a seperate package to work around multilib limitation (#335011)


author: Lubomir Kundrak <lkundrak@redhat.com> 0.9.8-4.1
changelog:
  - Actually add content to pulseaudio-0.9.8-create-dot-pulse.patch
  - Make the Source0 tag point to URL instead of a local file
  - Drop the nochown patch; it's not applied at all and no longer needed


author: Lubomir Kundrak <lkundrak@redhat.com> 0.9.8-8
changelog:
  - Fix multilib issue (#228383)
  - Prevent dumping core if exiting sooner that ltdl initializaion (#427962)


author: Adam Jackson <ajax@redhat.com> 0.9.8-11
changelog:
  - pulseaudio-0.9.8-disable-realtime.patch: Don't ask PolicyKit for increased
    scheduling mojo for now.  It's not clear that it's a win; and if it is,
    the policy should just be fixed to always allow it.


author: Rex Dieter <rdieter@fedoraproject.org> 1.1-2
changelog:
  - -libs: Obsoletes: pulseaudio-libs-zeroconf
  - use versioned Obsoletes/Provides
  - tighten subpkg deps via %_isa
  - remove autoconf/libtool hackery


author: Wim Taymans <wtaymans@redhat.com> - 6.0-4
changelog:
  - Add more Requires to avoid testing multiple versions
  - enable hardened build
  - Fix missing %endif
  - Resolves: #1174548


author: Rex Dieter <rdieter@fedoraproject.org> - 6.0-7
changelog:
  - better autostart.patch, handle case were autospawn is disabled
    (or otherwise doesn't work, like for root user)
  - Resolves: #1269104


author: Wim Taymans <wtaymans@redhat.com> - 10.0-4
changelog:
  - Add support for usb audio in the Dell dock TB16
  - Add patches to improve default sinks
  - Resolves: #1457385


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - Building 0.5.1rc1 with version number 0.5.0.91 (this should also fix the big
    error of pushing 0.5pre previously, since it breaks rpm's version comparison
    algorithm).
  - We use %{__python}. Too bad I can't pass --define's to distutils.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - Fix for bug 73967: site-packages/OpenSSL not owned by this package
  - Adding hacks around the lack of latex2html on ia64


author: Mihai Ibanescu <misa@redhat.com> 0.5.1-12
changelog:
  - lynx no longer supported, using elinks instead (patch from
    Michael Redinger <michael.redinger@uibk.ac.at>, bug #101947 )


author: Paul Howarth <paul@city-fan.org> - 0.6-1.p24.9
changelog:
  - add missing buildreq latex2html, needed to build HTML docs
  - rewrite to be more in line with Fedora python spec template and use
    %{python_sitearch} rather than a script-generated %files list
  - package is not relocatable - drop Prefix: tag
  - buildreq perl not necessary
  - fix permissions for files going into debuginfo package


author: Tomáš Mráz <tmraz@redhat.com> - 0.13-6
changelog:
  - Check for error returns which cause segfaults in FIPS mode
  - Fix missing error check and leak found by gcc-with-cpychecker (#800086)


author: Tomáš Mráz <tmraz@redhat.com> - 0.13.1-1
changelog:
  - new upstream release fixing a security issue with string
    formatting subjectAltName of a certificate


author: Tomáš Mráz <tmraz@redhat.com> - 0.13.1-4
changelog:
  - fix various testsuite failures
  - fix exception propagation from private key passphrase callback (#1227505)
  - add optional digest parameter to CRL.export method (#1523772)


author: Matthew Barnes <mbarnes@redhat.com> - 2.15.1-1.fc10
changelog:
  - Update to 2.15.1
  - Bump glib2_version to 2.16.0.
  - Remove ancient automake_version.
  - Add a pygobject2-codegen subpackage.


author: - Matthew Barnes <mbarnes@redhat.com> - 2.16.0-1.fc11
changelog:
  - Update to 2.16.0
  - Remove patch for RH bug #457502 (fixed upstream).
  - Remove patch for GNOME bug #551059 and #551212 (fixed upstream).


author: Colin Walters <walters@verbum.org> - 2.21.1-6
changelog:
  - Switch to disabling pygi, remove my patch for now.  See commentary
    https://bugzilla.redhat.com/show_bug.cgi?id=569885#c38


author: Colin Walters <walters@verbum.org> - 2.21.4-4
changelog:
  - Update to latest upstream
  - Drop upstreamed patches
  - Require pycairo, since we have a module that uses it
  - Drop libtool overriding; was not commented and seems fine
    without
  - Drop --enable-thread, it's default now
  - Drop --enable-pygi, it's default now
  - Drop clean section, no longer needed in F-14
  - Drop python-sitearch copy&paste, no longer needed in F-14
  - Add SMP flags to make


author: John (J5) Palmieri <johnp@redhat.com> - 2.26.0-2
changelog:
  - add another py3k patch so that we compile correctly under python 3
  - fixes a couple of print syntax and a try, except syntax


author: John (J5) Palmieri <johnp@redhat.com> - 2.26.0-3
changelog:
  - add patch to work with PyCapsule since PyCObject is removed from 
    Python 3.2 which we ship in rawhide


author: John (J5) Palmieri <johnp@redhat.com> - 2.26.0-4
changelog:
  - Edit PyCapsule patch to only use PyCapsule in Python 3.x
    since this effects header files which require other modules to 
    be recompiled.  There is actually discussion upstream to undeprecate it
    for the 2.x series


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.1-1
changelog:
  - update to upstream version 2.28.1 stable
  - fix the spec file's sources line to point to the correct ftp directory


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.2-1
changelog:
  - update to upstream version 2.28.2 stable
  - fixes issue in bug - https://bugzilla.redhat.com/show_bug.cgi?id=682543


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.6-1
changelog:
  - update to upstream 2.28.6
  - closure: avoid double free crash
  - GVariantType is a boxed struct in newer versions of glib
  - Revert back to a GVariant workaround since the fix hasn't migrated to
    Fedora's version of glib yet (workaround works in both cases)
  - closure: Check the out arg is not null.
  - Fix GC-related crash during PyGObject deallocation (remove patch from
    previous spec)


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.6-2
changelog:
  - disable introspection in anticipation of pygobject3
  - https://bugzilla.redhat.com/show_bug.cgi?id=731851
  - pygobject2 now becomes legacy for static binding support (e.g. PyGTK)


author: Colin Walters <walters@redhat.com> - 2.28.6-8
changelog:
  - Add various missing BuildRequires, switch to pkgconfig() syntax
  - Backport upstream patch which fixes a crasher in some applications


author: John (J5) Palmieri <johnp@redhat.com> - 2.90.2-2
changelog:
  - fix up issues uncovered during package review
  - disable docs because they still reference the static bindings 
    and upstream is working on new documentation


author: Kalev Lember <kalevlember@gmail.com> - 3.7.1-2
changelog:
  - Remove lib64 rpaths (#817701)
  - Move code examples to the -devel subpackage and fix the multilib
    conflict (#831434)


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 0.1-3
changelog:
  - Add a patch to work under Python 2.3.
  - Stop shipping the tests as they are useless to the end user.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.1-16.20090824bzr68
changelog:
  - Rebase to new upstream snapshot
  - Patches merged upstream
  - Fixes deprecation warnings on py2.6/py3.0
  - Remove py2.3 patch -- only needed for EPEL-4


author: Miloslav Trmač <mitr@redhat.com> - 0.1-19.20090824bzr68
changelog:
  - Filter out bogus Provides: _gpgme.so
  - Drop no longer required references to BuildRoot:
  - s/%define/%global/g


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.2-1
changelog:
  - Update for new upstream release.  Doesn't add any new code, just switches
    from a snapshot to a release and bumps version


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.3-1
changelog:
  - New upstream release
  - Build a python3 subpackage
  - Run the test suite even though we ignore the output


author: Miloslav Trmač <mitr@redhat.com> - 0.3-5
changelog:
  - Disable -fstrict-aliasing (see http://www.python.org/dev/peps/pep-3123/ for
    rationale)
  - Don't ship .pyc files from the test suite in %doc, to avoid multilib
    conflicts


author: Matt Wilson <msw@redhat.com>
changelog:
  - fixed typo in devel filelist
  - added macro that tests to see if we have libglade2, make the
    filelist a condition of that
  - changed name to 'pygtk2' to avoid name conflict with pygtk


author: Matt Wilson <msw@redhat.com> 1.99.16-1
changelog:
  - added a compatibility function for gtk.gdk.gc_new() so we won't have
    to fix all our code quite yet


author: Mark McLoughlin <markmc@redhat.com> - 2.5.3-2
changelog:
  - Backport fix for gnome #154779 - python signal handlers weren't
    getting executed while gobject.MainLoop was running


author: John (J5) Palmieri <johnp@redhat.com> - 2.7.3-3
changelog:
  - Add a BuildRequires on python-numeric so that Numeric
    python support is added
  - Add a Requires on python-numeric as well


author: Matthew Barnes <mbarnes@redhat.com> - 2.10.3-1.fc7
changelog:
  - Update to 2.10.3
  - Spec file cleanups.
  - Define a python_sitelib macro for files under site_packages.


author: Matthew Barnes <mbarnes@redhat.com> - 2.12.1-1.fc9
changelog:
  - Update to 2.12.1
  - Remove patch for RH bug #217430 (fixed upstream).
  - Remove patch for GNOME bug #479012 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.13.0-2.fc10
changelog:
  - Restore pycairo and pygobject2 requirements, with a note to myself
    to stop screwing around with them (RH bug #460105).


author: Adam Jackson <ajax@redhat.com> 2.15.2-4
changelog:
  - Drop the explicit Requires: numpy as per new packaging guidelines.  If
    your app calls gtk.gdk.get_pixels_array() you need to pull numpy in
    yourself.


author: Rex Dieter <rdieter@fedoraproject.org> 4.9.97-4
changelog:
  - manually specify PYTHON_LIBRARIES again, fixes regression that tries
    to load libpython<foo>.so from python<foo>-devel


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - Initial build split out into separate source from the parted package.
  - Don't build on ppc64 right now due to parted build problems (#118183)


author: Jeremy Katz <katzj@redhat.com> - 1.6.8-1
changelog:
  - update for new parted ABI
    - device -> heads, sectors, cylinders now refer to the bios geometry
  - require parted >= 1.6.12


author: David Cantrell <dcantrell@redhat.com> - 1.8.0-1
changelog:
  - Bump version to 1.8.0 and require parted >= 1.8.0
  - Remove python-abi Requires line since rpm handles that automatically


author: David Cantrell <dcantrell@redhat.com> - 1.8.1-1
changelog:
  - Determine Python version to use in %build so the source RPM is more
    easily moved between distribution releases.


author: Chris Lumens <clumens@redhat.com> - 2.1.2-1
changelog:
  - Upgrade to pyparted-2.1.2:
        PED_DEVICE_DM is always defined in libparted these days.
        Handle parted exceptions arising from ped_device_get (#495433).


author: David Cantrell <dcantrell@redhat.com> - 2.2-1
changelog:
  - Upgrade to pyparted-2.2:
        Fixes PedDisk2_ped_Disk() and avoids losing disk label data
        in the conversion process (#526999)


author: David Cantrell <dcantrell@redhat.com> - 2.3-1
changelog:
  - Upgrade to pyparted-2.3:
        Remove root user requirement in _ped
        Add testcases for new _ped device methods
        Add python wrapper for new PedDisk partition alignment info function
        Add support for new PedDisk parition alignment info function
        Add python wrappers for new PedDevice alignment info functions
        Add support for new PedDevice alignment info functions
        Fix a whole pile of test cases.
        Remove ped_disk_commit_to_dev() call from py_ped_disk_new_fresh()
        Fix error in Constraint __str__ method
        Make _ped_Device2PedDevice properly set / throw exceptions
        Fixup various errorhandling issues in pydisk.c
        Add missing _ped_Device2PedDevice() retval checks
        Use libparted commit() for parted.disk.Disk.commit() (hdegoede).
  - BR parted-devel >= 1.9.0-20


author: David Cantrell <dcantrell@redhat.com> - 2.4-1
changelog:
  - Upgrade to pyparted-2.4:
        Use PedDevice length instead of DIY (#532023) (hdegoede)
        Use sectorSize not physicalSectorSize for size calculations (hdegoede)


author: David Cantrell <dcantrell@redhat.com> - 2.5-1
changelog:
  - Update release instructions. (dcantrell)
  - Remove old cylinder alignment test cases for _ped. (dcantrell)
  - Add tests for max partition length / start sector (hdegoede)
  - Add _pedmodule and parted functions for max partition length / start
    sector (hdegoede)
  - Remove align_to_cylinders function bindings (hdegoede)
  - Add tests for disk flag methods (hdegoede)
  - Add _pedmodule and parted functions for per disk flags (hdegoede)
  - Every tuple member requires a comma after it. (dcantrell)
  - Fill out a lot of simple _ped.Disk test cases. (dcantrell)
  - Disable DeviceDestroyTestCase for now. (dcantrell)
  - Add RequiresLabeledDevice to tests/_ped/baseclass.py. (dcantrell)
  - Attempt at fixing _ped.Device.destroy(), no dice. (dcantrell)
  - Fix UnitFormatCustomTestCase and UnitFormatTestCase. (dcantrell)
  - Fix UnitFormatCustomByteTestCase and UnitFormatByteTestCase. (dcantrell)
  - Add DeviceStrTestCase, disable DeviceDestroyTestCase. (dcantrell)
  - Add DeviceDestroyTestCase and DeviceCacheRemoveTestCase. (dcantrell)
  - Implemented ConstraintIsSolutionTestCase(). (dcantrell)
  - Implement ConstraintSolveMaxTestCase(). (dcantrell)
  - Implement ConstraintSolveNearestTestCase(). (dcantrell)
  - Correct py_ped_file_system_probe_specific() for NULL returns. (dcantrell)
  - Implement FileSystemProbeSpecificTestCase(). (dcantrell)
  - Implement FileSystemProbeTestCase(). (dcantrell)
  - Add RequiresFileSystem to tests/_ped/baseclass.py. (dcantrell)
  - Add disk alignment test cases in test_ped.py. (dcantrell)
  - Fix CHSGeometryStrTestCase(). (dcantrell)
  - Fix ConstraintDuplicateTestCase...finally. (dcantrell)
  - Put a deprecation warning in py_ped_constraint_duplicate(). (dcantrell)
  - Note that we need parted from Fedora for pyparted. (dcantrell)
  - Fix UnitGetSizeTestCase in _ped test cases for _ped.UNIT_PERCENT.
    (dcantrell)
  - Add testcase for new _ped disk get_partition_alignment method (hdegoede)


author: Hans de Goede <hdegoede@redhat.com> - 2.5-4
changelog:
  - Rebuild for new parted-2.1
  - Remove py_disk_clobber_exclude function binding, as this function was
    removed from parted-2.1


author: David Cantrell <dcantrell@redhat.com> - 3.5-1
changelog:
  - Drop dependency on python-decorator module. (dcantrell)
  - Differentiate the "Could not commit" messages. (jgranado)
  - Import _ped.DiskLabelException into parted namespace (cjwatson)
  - Return PED_EXCEPTION_NO for yes/no interactive exceptions. (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.9-9
changelog:
  - Disable python-coverage tests on s390x
    Related: rhbz#1057626
  - Fix python-coverage tests (some disabled that are not working)
    Resolves: rhbz#1057626


author: David Cantrell <dcantrell@redhat.com> - 1:3.9-14
changelog:
  - Update URLs to point to github.com since that's where upstream lives
    these days
    Resolves: rhbz#1502389


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.5.3-2
changelog:
  - Patch from upstream for traceback when people use this with python2 and
    python3 in the same directory


author: Matej Cepl <mcepl@redhat.com> - 0.6.1-2
changelog:
  - Fix requires, for reasons why other development files were not
    eliminated see https://github.com/pyca/cryptography/issues/1463.


author: Nathaniel McCallum <npmccallum@redhat.com> - 0.7.2-1
changelog:
  - New upstream release. BSD is now an optional license.
  - Fix test running on python3
  - Add upstream patch to fix test paths


author: Christian Heimes <cheimes@redhat.com> - 1.7.2-1
changelog:
  - Update to 1.7.2
  - Disable pytest.deprecated_call() tests
  - Remove versioned pytest
  - Add build requirements pytz


author: Christian Heimes <cheimes@redhat.com> - 1.7.2-2
changelog:
  - Ignore errors on OpenSSL's error stack when initializing, fixes RHBZ#1402235
  - Add depenency on python-setuptools, fixes RHBZ#1459947
  - Fix parsing of long OIDs, fixes RHBZ#1455755


author: Tim Waugh <twaugh@redhat.com> - 1.9.53-2
changelog:
  - Moved postscriptdriver RPM tagging machinery here.  Fixed
    leading/trailing whitespace in tags as well.


author: Tim Waugh <twaugh@redhat.com> - 1.9.53-3
changelog:
  - Fixed typo in psdriver.attr that prevented PPD files from being
    scanned when generating postscriptdriver tags.


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - Version 2 of 2.0b1
  - Make the package relocatable.  Thanks to Suchandra Thapa.
  - Exclude Tkinter from main RPM.  If it is in a separate RPM, it is
    easier to track Tk releases.


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - updated for 2.0c1
  - build audioop, imageop, and rgbimg extension modules
  - include xml.parsers subpackage
  - add test.xml.out to files list


author: Matt Wilson <msw@redhat.com>
changelog:
  - modify all files to use "python2.0" as the intrepter
  - don't build the Expat bindings
  - build against db1


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix the "requires" clause, it lacked a space causing problems
  - use %{_tmppath}
  - don't define name, version etc
  - add the available patches from the Python home page


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.4a4
changelog:
  - 2.2a4
  - Enable UCS4 support
  - Enable IPv6
  - Provide distutils
  - Include msgfmt.py and pygettext.py


author: Matt Wilson <msw@redhat.com> 2.2-0.9b2
changelog:
  - changed DESTDIR to point to / so that distutils will install dynload
    modules properly in the installroot


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.11c1
changelog:
  - 2.2 RC 1
  - Don't include the _tkinter module in the main package - it's 
    already in the tkiter packace
  - Turn off the mpzmodule, something broke in the buildroot


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-5
changelog:
  - disable ndbm support, which is db2 in disguise (really interesting things
    can happen when you mix db2 and db4 in a single application)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-8
changelog:
  - Make files in /usr/bin install side by side with python 1.5 when
  - Drop explicit requirement of db4
    built as python2


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-16
changelog:
  - the same, but in builddirs - this will remove them from the 
    docs package, which doesn't look in the buildroot for files.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - builds as python2 require a different libdb
  - changed the buildroot name of python to match python2 builds


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-2
  - Fix #76912 (python-tools contains idle, which uses tkinter, but there is no
    requirement of tkinter from python-tools).
  - Fix #74013 (rpm is missing the /usr/lib/python2.2/test directory)


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.*
  - Merged patch from Karsten Hopp <karsten@redhat.de> from 2.2.1-17hammer to
    use %{_libdir}
  - Added XFree86-libs as BuildRequires (because of tkinter)
  - Fixed duplicate listing of plat-linux2
  - Fixed exclusion of lib-dynload/japanese
  - Added lib64 patch for the japanese codecs
  - Use setup magic instead of using tar directly on JapaneseCodecs


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-5
  - Fixed configuration patch to add -lcrypt when compiling cryptmodule.c

  2.2.2-4
  - Spec file change from Matt Wilson <msw@redhat.com> to disable linking 
    with the C++ compiler.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.7.3
  - Recompiled for 7.3 (to fix the -lcrypt bug)
  - Fix for the spurious error message at the end of the build (build-requires
    gets confused by executable files starting with """"): make the tests
    non-executable.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-7
changelog:
  - Fix bug #79647 (Rebuild of SRPM fails if python isn't installed)
  - Added a bunch of missing BuildRequires found while fixing the
    above-mentioned bug


author: Jeremy Katz <katzj@redhat.com> 2.2.2-8
changelog:
  - urllib2 didn't support non-anonymous ftp.  add support based on how 
    urllib did it (#80676, #78168)


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-11.7.3
changelog:
  - Fixed bug #82544: Errata removes most tools
  - Fixed bug #82435: Python 2.2.2 errata breaks redhat-config-users
  - Removed .lib64 and - files that get installed after we fix the multilib
    .py files.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-13
changelog:
  - Attempt to look both in /usr/lib64 and /usr/lib/python2.2/site-packages/:
    some work on python-2.2.2-lib64.patch


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-22
changelog:
  - Using newer Japanese codecs (1.4.9). Thanks to 
    Peter Bowen <pzb@datastacks.com> for pointing this out.


author: Jeremy Katz <katzj@redhat.com> 2.2.2-23
changelog:
  - ftp uri's should be able to specify being rooted at the root instead of 
    where you login via ftp (#84692)


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-25
changelog:
  - Fixed bug #84886: pydoc dies when run w/o arguments
  - Fixed bug #84205: add python shm module back (used to be shipped with 1.5.2)
  - Fixed bug #84966: path in byte-compiled code still wrong


author: Mihai Ibanescu <misa@redhat.com> 2.3-0.2
changelog:
  - Building python 2.3
  - Added more BuildRequires
  - Updated the startup files for modulator and pynche; idle installs its own
    now.


author: Mihai Ibanescu <misa@redhat.com> 2.3.3-4
changelog:
  - Fix for bug #122304 : splitting the domain name fails on 64-bit arches
  - Fix for bug #120879 : including Makefile into the main package

  - Requires XFree86-devel instead of -libs (see bug #118442)


author: Mihai Ibanescu <misa@redhat.com> 2.3.3-6
changelog:
  - Correct fix for #122304 from upstream:
    http://sourceforge.net/tracker/?func=detail&atid=105470&aid=931848&group_id=5470


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-1
changelog:
  - Updated to 2.3.4-1 with Robert Scheck's help (bug #124764)
  - Added BuildRequires: tix-devel (bug #124918)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-3
changelog:
  - Added an optik.py that provides the same interface from optparse for
    backward compatibility; obsoleting python-optik


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-6
changelog:
  - Fixed #128030 (help() not printing anything)
  - Fixed #125472 (distutils.sysconfig.get_python_lib() not returning the right
    path on 64-bit systems)
  - Fixed #127357 (building python as a shared library)
  - Fixed  #19347 (including the contents of Tools/scripts/ in python-tools)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-7
changelog:
  - Including html documentation for non-i386 arches
  - Fixed #125362 (python-doc html files have japanese character encoding)
  - Fixed #128923 (missing dependency between python and python-devel)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-8
changelog:
  - Fixed bug #129769: Makefile in new python conflicts with older version found
    in old python-devel
  - Reorganized the spec file to get rid of the aspython2 define; __python_ver
    is more powerful.


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-10
changelog:
  - Fixed bug #77418 (Demo dir not packaged)
  - More tweaking on #19347 (Moved Tools/ under /usr/lib/python2.3/Tools)


author: Jeff Johnson <jbj@jbj.org> 2.4-2
changelog:
  - db-4.3.21 returns DB_BUFFER_SMALL rather than ENOMEM (#141994).
  - add Provide: python(abi) = 2.4
  - include msgfmt/pygettext *.pyc and *.pyo from brp-python-bytecompile.


author: Mihai Ibanescu <misa@redhat.com> 2.4-6
changelog:
  - building the docs from a different source rpm, to decouple bootstrapping
    python from having tetex installed


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-2
changelog:
  - Fixed bug #143667 (python should own /usr/lib/python* on 64-bit systems, for
    noarch packages)
  - Fixed bug #143419 (BuildRequires db4 is not versioned)


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-7
changelog:
  - Fixed bug #169046 (realpath is unsafe); thanks to 
    Peter Jones <pjones@redhat.com> and Arjan van de Ven <arjanv@redhat.com> for
    diagnosing and the patch.


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-10
changelog:
  - Fixed bug #169159 (don't let python core dump if no arguments are passed in)
    Reworked the patch from -8 a bit more.


author: Peter Jones <pjones@redhat.com> 2.4.1-12
changelog:
  - Fixed bug #169159 (check for argc>0 and argv[0] == NULL, not just
      argv[0][0]='\0')
    Reworked the patch from -8 a bit more.


author: Mihai Ibanescu <misa@redhat.com> - 2.4.3-6
changelog:
  - Fixed bug #192592 (too aggressive assertion fails) - SF#1257960
  - Fixed bug #167468 (Doc/tools not included) - added in the python-tools package


author: Mihai Ibanescu <misa@redhat.com> - 2.4.99.c1
changelog:
  - Updated to 2.5c1. Merged fixes from FC6 too:
  - Fixed bug #199373 (on some platforms CFLAGS is needed when linking)
  - Fixed bug #198971 (case conversion not locale safe in logging library)
  - Verified bug #201434 (distutils.sysconfig is confused by the change to make
    python-devel multilib friendly) is fixed upstream


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - fix _md5 and _sha modules (Robert Sheck)
  - no longer provide optik compat; it's been a couple of years now
  - no longer provide the old shm module; if this is still needed, let's 
    build it separately
  - no longer provide japanese codecs; should be a separate package


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - support db 4.5
  - obsolete python-elementtree; since it requires some code tweaks, don't 
    provide it
  - obsolete old python-sqlite; provide the version that's actually included


author: Jeremy Katz <katzj@redhat.com> - 2.5.3-3
changelog:
  - fix atexit traceback with failed syslog logger (#218214)
  - split libpython into python-libs subpackage for multilib apps 
    embedding python interpreters


author: Jeremy Katz <katzj@redhat.com> - 2.5.3-8
changelog:
  - fix extensions to use shared libpython (#219564)
  - all 64bit platforms need the regex fix (#122304)


author: Jeremy Katz <katzj@redhat.com> - 2.5.1-4
changelog:
  - fix _elementtree.so build (#245703)
  - ensure that extension modules we expect are actually built rather than 
    having them silently fall out of the package


author: James Antill <jantill@redhat.com> - 2.5.1-13
changelog:
  - Add tix buildprereq
  - Add tkinter patch
  - Resolves: #281751
  - Fix ctypes loading of libraries, add requires on binutils
  - Resolves: #307221
  - Possible fix for CVE-2007-4965 possible exploitable integer overflow
  - Resolves: #295971


author: James Antill <jantill@redhat.com> - 2.5.1-15
changelog:
  - Do codec lowercase in C Locale.
  - Resolves: 207134 191096
  - Fix stupid namespacing in pysqlite, minimal upgrade to 2.3.3 pysqlite
  - Resolves: 263221


author: James Antill <jantill@redhat.com> - 2.5.1-16
changelog:
  - Fix pyconfig.h comment typo.
  - Add back test_support.py and the __init__.py file.
  - Resolves: rhbz#387401


author: James Antill <jantill@redhat.com> - 2.5.1-18
changelog:
  - Create a python-test sub-module, over 3MB of stuff noone wants.
  - Don't remove egginfo files, try this see what happens ... may revert.
  - Resolves: rhbz#414711


author: James Antill <jantill@redhat.com> - 2.5.1-20
changelog:
  - Add valgrind support files, as doc, to python-devel
  - Relates: rhbz#418621
  - Add new API from 2.6, set_wakeup_fd ... use at own risk, presumably won't
  - change but I have no control to guarantee that.
  - Resolves: rhbz#427794
  - Add gdbinit support file, as doc, to python-devel


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-2
changelog:
  - "Makefile" and the config-32/64.h file are needed by distutils/sysconfig.py
  _init_posix(), so we include them in the core package, along with their parent
  directories (bug 531901)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-3
changelog:
  - fixup the build when __python_ver is set (Zach Sadecki; bug 533989); use
  pybasever in the files section


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-4
changelog:
  - automatically disable arena allocator when run under valgrind (upstream
  issue 2422; patch 52)
  - add patch from Josh Boyer containing diff against upstream PyBSDDB to make
  the bsddb module compile against db-4.8 (patch 53, #544275); bump the necessary
  version of db4-devel to 4.8
  - patch setup.py so that it searches for db-4.8, and enable debug output for
  said search; make Setup.dist use db-4.8 (patch 54)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-5
changelog:
  - replace usage of %define with %global
  - use the %{_isa} macro to ensure that the python-devel dependency on python
  is for the correct multilib arch (#555943)
  - delete bundled copy of libffi to make sure we use the system one
  - replace references to /usr with %{_prefix}; replace references to
  /usr/include with %{_includedir}


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-6
changelog:
  - patch Makefile.pre.in to avoid building static library (patch111, bug 556092)
  - split up the "configure" invocation flags onto individual lines


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-9
changelog:
  - change python-2.6.2-config.patch to remove our downstream change to curses
  configuration in Modules/Setup.dist, so that the curses modules are built using
  setup.py with the downstream default (linking against libncursesw.so, rather
  than libncurses.so), rather than within the Makefile; add a test to %install
  to verify the dso files that the curses module is linked against the correct
  DSO (bug 539917; changes _cursesmodule.so -> _curses.so)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-10
changelog:
  - introduce macros for 3 directories, replacing expanded references throughout:
  %{pylibdir}, %{dynload_dir}, %{site_packages}
  - explicitly list all lib-dynload files, rather than dynamically gathering the
  payload into a temporary text file, so that we can be sure what we are
  shipping; remove now-redundant testing for presence of certain .so files
  - remove embedded copy of zlib from source tree before building


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-11
changelog:
  - update python-2.6.2-config.patch to remove downstream customization of build
  of pyexpat and elementtree modules
  - add patch adapted from upstream (patch 3) to add support for building against
  system expat; add --with-system-expat to "configure" invocation
  - remove embedded copy of expat from source tree during "prep"


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-12
changelog:
  - Address some of the issues identified in package review (bug 226342):
    - update libs requirement on base package to use %{name} for consistency's
  sake
    - convert from backticks to $() syntax throughout
    - wrap value of LD_LIBRARY_PATH in quotes
    - convert "/usr/bin/find" requirement to "findutils"
    - remove trailing periods from summaries of -devel and -tools subpackages
    - fix spelling mistake in description of -test subpackage
    - convert usage of $$RPM_BUILD_ROOT to %{buildroot} throughout, for
  stylistic consistency
    - supply dirmode arguments to defattr directives


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-15
changelog:
  - work around bug 562906 by supplying a fixed version of pythondeps.sh
  - set %{_python_bytecompile_errors_terminate_build} to 0 to prevent the broken
  test files from killing the build on buildroots where python is installed


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-16
changelog:
  - move the -gdb.py file from %{_libdir}/INSTSONAME-gdb.py to
  %{_prefix}/lib/debug/%{_libdir}/INSTSONAME.debug-gdb.py to avoid noise from
  ldconfig (bug 562980), and which should also ensure it becomes part of the
  debuginfo subpackage, rather than the libs subpackage
  - introduce %{py_SOVERSION} and %{py_INSTSONAME} to reflect the upstream
  configure script, and to avoid fragile scripts that try to figure this out
  dynamically (e.g. for the -gdb.py change)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-17
changelog:
  - add systemtap static probes (wcohen; patch 55; rh bug #545179)
  - update some comments in specfile relating to gdb work
  - manually byte-compile the gdb.py file with the freshly-built python to ensure
  that .pyx and .pyo files make it into the debuginfo manifest if they are later
  byte-compiled after find-debuginfo.sh is run


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-18
changelog:
  - add a systemtap tapset defining "python.function.entry" and
  "python.function.return" to make it easy to use the static probepoint within
  Python; add an example of using the tapset to the docs


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-19
changelog:
  - revise the systemtap patch (patch 55:python-2.6.4-dtrace.patch) to the
  new version by mjw in attachment 390110 of rhbz:545179, as this should
  eliminate the performance penalty for the case where the probes aren't in
  use, and eliminate all architecture-specific code (rhbz:563541; except on
  sparc)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-20
changelog:
  - avoid having the "test" subdirectory and the files within it that are in the
  core subpackage also be owned by the test subpackage (rhbz:467588)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-22
changelog:
  - add pyfuntop.stp; allow systemtap support to be disabled
  - remove trailing period from tkinter summary
  - don't own /usr/bin/python-config if you're not the main python


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-23
changelog:
  - fixup distutils/unixccompiler.py to remove standard library path from
  rpath (patch 17)
  - delete DOS batch files


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-1
changelog:
  - update to 2.6.5: http://www.python.org/download/releases/2.6.5/
  - replace our patch to compile against db4.8 with a patch from
  upstream (patch 53, from r78974); update patch 54 since part of it is now in
  that upstream patch
  - update patch 110 so that it still applies in the face of upstream r78380


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-4
changelog:
  - update python-gdb.py from v3 to v4 (fixing infinite recursion on reference
  cycles and tracebacks on bytes 0x80-0xff in strings, adding handlers for sets
  and exceptions)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-6
changelog:
  - move the "bdist_wininst" command's template .exe files from the core package
  to the devel subpackage, to save space (rhbz:525469)
  - fix stray doublelisting of config directory wildcard in devel subpackage


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-9
changelog:
  - build and install two different configurations of Python: debug and standard,
  packaging the debug build in a new "python-debug" subpackage (patch 112)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-10
changelog:
  - add configure-time support for COUNT_ALLOCS and CALL_PROFILE debug options
  (patch 113); enable them and the WITH_TSC option within the debug build


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-13
changelog:
  - ensure that the compiler is invoked with "-fwrapv" (rhbz#594819)
  - CVE-2010-1634: fix various integer overflow checks in the audioop
  module (patch 116)
  - CVE-2010-2089: further checks within the audioop module (patch 117)
  - CVE-2008-5983: the new PySys_SetArgvEx entry point from r81399 (patch 118)


author: Dan Horák <dan[at]danny.cz> - 2.6.5-14
changelog:
  - reading the timestamp counter is available only on some arches (see Python/ceval.c)
  - disable --with-valgrind on s390(x) arches


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-16
changelog:
  - Fix an incompatibility between pyexpat and the system expat-2.0.1 that led to
  a segfault running test_pyexpat.py (patch 119; upstream issue 9054)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-17
changelog:
  - Stop python bailing out with an assertion failure when UnicodeDecodeErrors
  occur on very large buffers (patch 120, upstream issue 9058)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-0.1.rc1
changelog:
  - 2.7rc1:
    - rework patches to apply against 2.7 (which among other changes has had a
  whitespace cleanup of the .c code): .rhconfig (patch0), .binutils-no-dep
  (patch10), .ascii-tolower (patch11), .socketmodule (patch13), .socketmodule2
  (patch14), .systemtap (patch55), .lib64 (patch102), .selinux (patch110),
  .no-static-lib (patch111), .debug-build (patch112), .statvfs-f-flag-constants
  (patch114), ..CVE-2010-2089 (patch117)
    - drop upstream patches: .expat (patch3), .brprpm (patch51), .valgrind
  (patch52), .db48 (patch53), .CVE-2010-1634 (patch 116), .CVE-2008-5983 (patch
  118)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-0.1.rc2
changelog:
  - 2.7rc2
  - revert r79310 (patch 121)
  - remove modulator: upstream removed it in r78338
  - rename mathmodule(_d).so to math(_d).so in manifests (appears to be changed
  by r76861)
  - _bytesio(_d).so and _filesio(_d).so were consolidated into _io(_d).so in
  r73394 (upstream issue 6215)
  - use the gdb hooks from the upstream tarball, rather than keeping our own
  copy. The upstream version has some whitespace changes, a new write_repr for
  unicode objects, and various bulletproofings for being run on older gdbs


author: David Malcolm <dmalcolm@redhat.com> - 2.7-1
changelog:
  - 2.7 final; drop alphatag
  - drop patch 117 (upstream), patch 120 (upstreamed)
  - fix the commented-out __python_ver from 26 to 27


author: David Malcolm <dmalcolm@redhat.com> - 2.7-2
changelog:
  - add machinery for regenerating the "configure" script in the face of
  mismatching autoconf versions (patch 300)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-4
changelog:
  - fix reference to pyconfig.h in sysconfig that led to failure on startup if
  python-devel was not installed


author: David Malcolm <dmalcolm@redhat.com> - 2.7-5
changelog:
  - disable systemtap for now (dtrace is failing on startup due to the bug
  mentioned in 2.7-4)
  - provide relative path to python binary when running pathfix.py
  - fix parallel make (patch 122)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-6
changelog:
  - re-enable systemtap
  - cherrypick upstream patch to 2to3 for "from itertools import *"
  traceback (patch 123)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-8
changelog:
  - add %check section
  - update lib64 patch (patch 102) to fix expected output in test_site.py on
  64-bit systems
  - patch test_commands.py to work with SELinux (patch 124)
  - patch the debug build's usage of COUNT_ALLOCS to be less verbose (patch 125)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-9
changelog:
  - move most of the payload of the core package to the libs subpackage, given
  that the libs aren't meaningfully usable without the standard libraries


author: David Malcolm <dmalcolm@redhat.com> - 2.7.1-1
changelog:
  - 2.7.1, reworking patch 0 (config), patch 102 (lib64); drop upstream
  patch 56 (cfgparse), patch 110 (ctypes/SELinux/noexecmem), patch 119 (expat
  compat), patch 123 (2to3 on "from itertools import *")
  - fix test_abc's test_cache_leak in the debug build (patch 128)
  - drop _weakref.so from manifest (_weakref became a core module in r84230)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.1-4
changelog:
  - for now, drop "obsoletes" of python-argparse, since it interracts badly with
  multilib (rhbz#667984)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-1
changelog:
  - 2.7.2; drop upstreamed patches: patch 122 (parallel make fix), patch 124
  (test_commands and SELinux), patch 130 (ppc preprocessor macro in debug
  build); patch 131 (decimal in Turkish locale); regenerate the autotool
  intermediates patch (patch 300)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-3
changelog:
  - reorganize test exclusions (test_openpty and test_pty seem to be failing on
  every arch, not just the explicitly-listed ones)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-7
changelog:
  - re-enable and fix the --with-tsc option on ppc64, and rework it on 32-bit
  ppc to avoid aliasing violations (patch 129; rhbz#698726)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-10
changelog:
  - rewrite of "check", introducing downstream-only hooks for skipping specific
  cases in an rpmbuild (patch 132), and fixing/skipping failing tests in a more
  fine-grained manner than before (patches 104, 133-142)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-11
changelog:
  - rename and renumber patches for consistency with python3.spec (55, 111, 113,
  114, 125, 131, 129 to 143)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-14
changelog:
  - support OpenSSL FIPS mode in _hashlib and hashlib; don't build the _md5 and
  _sha* modules, relying on _hashlib in hashlib, and thus within md5 etc
  (rhbz#563986; patch 146)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-1
changelog:
  - 2.7.3: refresh patch 102 (lib64); drop upstream patches 11 (ascii-to-lower),
  115 (pydoc robustness), 145 (linux2), 148 (gdbm magic values), 151 (deadlock
  in fork); refresh patch 112 (debug build); revise patch 127
  (test_structmember); fix test_gdb (patch 153); refresh patch 137 (distutils
  tests); add python2.pc to python-devel; regenerate the autotool intermediates
  patch (patch 300)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-4
changelog:
  - avoid allocating thunks in ctypes unless absolutely necessary, to avoid
  generating SELinux denials on "import ctypes" and "import uuid" when embedding
  Python within httpd (patch 155; rhbz#814391)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-8
changelog:
  - update uid/gid handling to avoid int overflows seen with uid/gid
  values >= 2^31 on 32-bit architectures (patch 157; rhbz#697470)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.3-11
changelog:
  - fix memory leak in module _hashlib (patch 158, rhbz#836285)
  - fix db4 include path for libdb4 package (f18 and above) (patch 159)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-17
changelog:
  - remove "_default_patch_fuzz" directive to avoid patches being silently
  misapplied (refresh patch 1, patch 101, patch 102, patch 111, patch 121,
  patch 158; rename patch 1, patch 101, patch 121; apply patch 54 before the
  lib64 patches to avoid fuzz problems caused by the conditional application
  of the lib64 patches)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-19
changelog:
  - bulletproof the gdb debugging hooks against a failure seen in ARM builds
  (patch 166; rhbz#912025)
  - re-enable make check on ARM (rhbz#912025)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-22
changelog:
  - fix a problem with distutils.sysconfig when CFLAGS is defined in the
  environment (patch 168; rhbz#849994)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-23
changelog:
  - use SHA-256 rather than implicitly using MD5 within the challenge handling
  in multiprocessing.connection (patch 169; rhbz#879695)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-25
changelog:
  - in debug builds, try to print repr() when a C-level assert fails in the
  garbage collector (typically indicating a reference-counting error somewhere
  else e.g in an extension module) (patch 170; rhbz#850013)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-27
changelog:
  - port _multiprocessing.Connection.poll() to use the "poll" syscall, rather
  than "select", allowing large numbers of subprocesses (patch 172;
  rhbz#849992)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-34
changelog:
  - restrict scope of workaround for cmpi-bindings issue to avoid breaking
  in-tree running of test_sys and test_subprocess (rhbz#817554)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.4-1
changelog:
  - Updated to Python 2.7.4.
  - Refreshed patches: 0 (config), 7 (sqlite encoding), 16 (rpath in config),
  55 (systemtap), 111 (no static lib), 112 (debug build), 113 (more
  configuration flags), 130 (add extension to python config), 134 (fix
  COUNT_ALLOCS in test_sys), 146 (haslib FIPS), 147 (add debug malloc stats),
  153 (fix gdb test noise), 157 (uid, gid overflow - fixed upstream, just
  keeping few more downstream tests), 165 (crypt module salt backport),
  175 (fix configure Wformat), 5000 (regenerated autotooling patch)
  - Dropped patches: 101 (lib64 regex; merged upstream), 171 (exception on
  missing /dev/urandom; merged upstream), 172 (poll for multiprocessing socket
  connection; merged upstream)


author: Kalev Lember <kalevlember@gmail.com> - 2.7.4-2
changelog:
  - Build with libdb 5.3 instead of libdb4
  - Refreshed patches: 0 (config), 102 (lib64)
  - Dropped patches: 54 (db4 version), 159 (db4 include path adjustment)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.5-1
changelog:
  - Updated to Python 2.7.5.
  - Refreshed patches: 0 (config), 102 (lib64), 121 (add Modules to build path),
  153 (gdb test noise)
  - Dropped patches: 126, 127 (big endian issues, both fixed upstream),
  175 (configure -Wformat, fixed upstream)
  - Synced patch numbers with python3.spec.


author: Matej Stuchlik <mstuchli@redhat.com> - 2.7.5-2
changelog:
  - Pulled patch fixing build with libffi containing multilib wrapper for ffi.h
      from Fedora (rhbz#979696)


author: Matej Stuchlik <mstuchli@redhat.com> - 2.7.5-23
changelog:
  - Fixed CVE-2013-1753, CVE-2013-1752, CVE-2014-4616, CVE-2014-4650, CVE-2014-7185
  Resolves: rhbz#1206574


author: Robert Kuska <rkuska@redhat.com> - 2.7.5-32
changelog:
  - Backport SSLSocket.version function
  - Temporary disable test_gdb on ppc64le rhbz#1260558
  Resolves: rhbz#1259421


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-38
changelog:
  - Fix hashlib algorithms breaking by initializing OpenSSL_add_all_digests
  function in _hashlib library
  Resolves: rhbz#1295459


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-39
changelog:
  - Removal of the '$Date$' placeholder on the python(1) man page footer,
  which does not expand during build
  Resolves: rhbz#1268310


author: Tomas Orsava <torsava@redhat.com> - 2.7.5-45
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in httplib (upstream patch)
  Resolves: rhbz#1346357


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-46
changelog:
  - Drop patch 221 that backported sslwrap function since it was introducing regressions
  - Refactor patch 227
  Resolves: rhbz#1331425


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-47
changelog:
  - Fix for CVE-2016-5636: possible integer overflow and heap corruption in zipimporter.get_data()
  Resolves: rhbz#1356364


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-49
changelog:
  - Fix ssl module's parsing of GEN_RID subject alternative name fields in X.509 certs
  Resolves: rhbz#1364444


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-52
changelog:
  - Workaround Python's threading library issue with non returning wait, for signals with timeout
  Resolves: rhbz#1368076


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-57
changelog:
  - Fix implicit declaration warnings of functions added by patches 147 and 265
  Resolves: rhbz#1441237


author: Petr Viktorin <pviktori@redhat.com> - 2.7.5-63
changelog:
  - Make it more likely for the system allocator to release free()d memory arenas
  Resolves: rhbz#1468410


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-65
changelog:
  - Fix hanging of all threads when trying to access an inaccessible NFS server.
  Resolves: rhbz#1520068


author: Tomas Orsava <torsava@redhat.com> - 2.7.5-68
changelog:
  - Add Conflicts tag with old virtualenv versions due to new behaviour of
    httplib (patch 295)
  Resolves: rhbz#1483438


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-71
changelog:
  - Limit the number of CPU cores when building the package on power architectures
  Resolves: rhbz#1568974


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-72
changelog:
  - Fix CVE-2018-1060 and CVE-2018-1061
  Resolves: rhbz#1563454 and rhbz#1549192
  - Provide python2-libs from the python-libs subpackage
  Resolves: rhbz#1557460


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-74
changelog:
  - Fix OSERROR 17 due to _multiprocessing/semaphore.c assuming
    a one-to-one Pid -> process mapping
  Resolves: rhbz#1579432


author: Tomas Orsava <torsava@redhat.com> - 2.7.5-79
changelog:
  - Moved the macros.python/2 files into their own packages python/2-rpm-macros
  Resolves: rhbz#1679221


author: Victor Stinner <vstinner@redhat.com> - 2.7.5-80
changelog:
  - Security fix for CVE-2019-5010: crash on parsing a specially crafted X509 certificate
    (resolves: rhbz#1666788)


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-84
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1704362 and rhbz#1703530


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.5-90
changelog:
  - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
  Resolves: rhbz#1856481


author: David Sommerseth <davids@redhat.com> - 3.10.7-3
changelog:
  - Fixed even more .spec file issues and removed explicit mentioning
    of /usr/share/python-dmidecode/pymap.xml


author: Nima Talebi <nima@it.net.au> - 3.10.8-1
changelog:
  - New Upstream release.
  - Big-endian and little-endian approved.
  - Packaged unit-test to tarball.
  - Rewritten unit-test to be able to run as non-root user, where it will not
    try to read /dev/mem.
  - Added two dmidump data files to the unit-test.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.3-1
changelog:
  - Add get_flags method from the first python-ethtool contributor, yay
  - Add pifconfig command, that mimics the ifconfig tool using the
    bindings available


author: David Sommerseth <davids@redhat.com> - 0.4-1
changelog:
  - David Sommerseth is now taking over the maintenance of python-ethtool
  - New URLs for upstream source code
  - Added new API: ethtool.get_interfaces_info() - returns list of etherinfo objects
  - Added support retrieving for IPv6 address, using etherinfo::get_ipv6_addresses()


author: David Sommerseth <dazo@users.sourceforge.net> - 0.6-1
changelog:
  - Don't segfault if we don't receive any address from rtnl_link_get_addr()
  - Remove errornous file from MANIFEST
  - Added ethtool.version string constant
  - Avoid duplicating IPv6 address information
  - import sys module in setup.py (Miroslav Suchy)


author: David Sommerseth <davids@redhat.com> - 0.7-1
changelog:
  - Fixed several memory leaks (commit aa2c20e697af, abc7f912f66d)
  - Improved error checking towards NULL values(commit 4e928d62a8e3)
  - Fixed typo in pethtool --help (commit 710766dc722)
  - Only open a NETLINK connection when needed (commit 508ffffbb3c)
  - Added man page for pifconfig and pethtool (commit 9f0d17aa532, rhbz#638475)
  - Force NETLINK socket to close on fork() using FD_CLOEXEC (commit 1680cbeb40e)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.8-2
changelog:
  - Fixed reporting of more IPv4 addresses per interface
  Resolves: rhbz#1027685
  - Make get_active_devices() return IPv6-only devices, too
  Resolves: rhbz#1027678


author: Rob Crittenden <rcritten@redhat.com> - 0.1735-2
changelog:
  - Include GSS_C_DELEG_FLAG in gss_init_sec_context() so the command-line
    tools can do kerberos ticket forwarding.


author: Rob Crittenden <rcritten@redhat.com> - 1.0-1
changelog:
  - Change name to python-kerberos from PyKerberos
  - Change license from "Apache License" to ASL 2.0 per guidelines
  - Upstream released 1.0 which is equivalent to version 1541. Reverting
    to that.


author: Mike Bonnet <mikeb@redhat.com>
changelog:
  - fix typo in error definition
  - change the return value of recvauth() from ac to (ac, princ), where princ is the principal sent by sendauth()
  - rename the package and reorganize the BuildRequires, to be more Extras-friendly


author: Mike Bonnet <mikeb@redhat.com> - 1.0.12-2
changelog:
  - configure.in: parse version number out of spec file
  - add URL tag
  - add LGPL text
  - remove Requires: krb5-libs, let rpm pick up library dependencies
  - bump revision


author: Mike Bonnet <mikeb@redhat.com> - 1.0.90-1
changelog:
  - return the contents of the AP_REP message from rd_rep()
  - improved memory handling
  - removed use of KRB_PRIVATE


author: Ville Skyttä <ville.skytta at iki.fi> 0:2.0.0-0.fdr.0.pre16.3
changelog:
  - Stricter python version requirements.
  - BuildRequire openssl-devel.
  - Explicitly build *.pyo, install them as %ghost.
  - Own more installed dirs.
  - Remove $RPM_BUILD_ROOT at start of %install.


author: Matthew Barnes <mbarnes@redhat.com> - 2.2.0-1
changelog:
  - Update to 2.2.0
  - Update python-ldap-2.0.6-rpath.patch and rename it to
    python-ldap-2.2.0-dirs.patch.


author: Matthew Barnes <mbarnes@redhat.com> - 0:2.4.15-2
changelog:
  - Add syncrepl_refreshdone() method to SyncreplConsumer class.
    Need by FreeIPA, subsequently accepted upstream.
  - Resolves: rhbz#1122495


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.1.2-1
changelog:
  - 2.1.2 (2008-09-05)
  - Features added
  -
  -    * lxml.etree now tries to find the absolute path name of files when
  -      parsing from a file-like object. This helps custom resolvers when
  -      resolving relative URLs, as lixbml2 can prepend them with the path of
  -      the source document.
  -
  - Bugs fixed
  -
  -    * Memory problem when passing documents between threads.
  -    * Target parser did not honour the recover option and raised an exception
  -      instead of calling .close() on the target.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.1.3-1
changelog:
  - 2.1.3 (2008-11-17)
  - Bugs fixed
  -
  -    * Ref-count leaks when lxml enters a try-except statement while an
  -      outside exception lives in sys.exc_*(). This was due to a problem
  -      in Cython, not lxml itself.
  -    * Parser Unicode decoding errors could get swallowed by other
  -      exceptions.
  -    * Name/import errors in some Python modules.
  -    * Internal DTD subsets that did not specify a system or public ID
  -      were not serialised and did not appear in the docinfo property
  -      of ElementTrees.
  -    * Fix a pre-Py3k warning when parsing from a gzip file in Py2.6.
  -    * Test suite fixes for libxml2 2.7.
  -    * Resolver.resolve_string() did not work for non-ASCII byte strings.
  -    * Resolver.resolve_file() was broken.
  -    * Overriding the parser encoding didn't work for many encodings.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2-0.1.alpha1
changelog:
  - 2.2alpha1 (2008-11-23)
  - Features added
  -
  -    * Support for XSLT result tree fragments in XPath/XSLT extension
  -      functions.
  -    * QName objects have new properties namespace and localname.
  -    * New options for exclusive C14N and C14N without comments.
  -    * Instantiating a custom Element classes creates a new Element.
  -
  - Bugs fixed
  -
  -    * XSLT didn't inherit the parse options of the input document.
  -    * 0-bytes could slip through the API when used inside of Unicode
  -      strings.
  -    * With lxml.html.clean.autolink, links with balanced parenthesis, that
  -      end in a parenthesis, will be linked in their entirety (typical with
  -      Wikipedia links).


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2-0.4.beta1
changelog:
  - 2.2beta1 (2008-12-12)
  - Features added
  -
  -    * Allow lxml.html.diff.htmldiff to accept Element objects,
  -      not just HTML strings.
  -
  - Bugs fixed
  -
  -    * Crash when using an XPath evaluator in multiple threads.
  -    * Fixed missing whitespace before Link:... in lxml.html.diff.
  -
  - Other changes
  -
  -    * Export lxml.html.parse.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2-0.5.beta2
changelog:
  - 2.2beta2 (2009-01-25)
  - Bugs fixed
  -
  -    * Potential memory leak on exception handling. This was due to a
  -      problem in Cython, not lxml itself.
  -    * iter_links (and related link-rewriting functions) in lxml.html would
  -      interpret CSS like url("link") incorrectly (treating the quotation
  -      marks as part of the link).
  -    * Failing import on systems that have an io module.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2-0.6.beta3
changelog:
  - 2.2beta3 (2009-02-17)
  - Features added
  -
  -    * XSLT.strparam() class method to wrap quoted string parameters that
  -     require escaping.
  -
  - Bugs fixed
  -
  -    * Memory leak in XPath evaluators.
  -    * Crash when parsing indented XML in one thread and merging it with
  -      other documents parsed in another thread.
  -    * Setting the base attribute in lxml.objectify from a unicode string
  -      failed.
  -    * Fixes following changes in Python 3.0.1.
  -    * Minor fixes for Python 3.
  -
  - Other changes
  -
  -    * The global error log (which is copied into the exception log) is now
  -      local to a thread, which fixes some race conditions.
  -    * More robust error handling on serialisation.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2-0.8.beta4
changelog:
  - 2.2beta4 (2009-02-27)
  - Features added
  -
  -    * Support strings and instantiable Element classes as child arguments
  -      to the constructor of custom Element classes.
  -    * GZip compression support for serialisation to files and file-like
  -      objects.
  -
  - Bugs fixed
  -
  -    * Deep-copying an ElementTree copied neither its sibling PIs and
  -      comments nor its internal/external DTD subsets.
  -    * Soupparser failed on broken attributes without values.
  -    * Crash in XSLT when overwriting an already defined attribute using
  -      xsl:attribute.
  -    * Crash bug in exception handling code under Python 3. This was due to
  -      a problem in Cython, not lxml itself.
  -    * lxml.html.FormElement._name() failed for non top-level forms.
  -    * TAG special attribute in constructor of custom Element classes was
  -      evaluated incorrectly.
  -
  - Other changes
  -
  -    * Official support for Python 3.0.1.
  -    * Element.findtext() now returns an empty string instead of None for
  -      Elements without text content.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2-1
changelog:
  - 2.2 (2009-03-21)
  - Features added
  -
  -    * Support for standalone flag in XML declaration through
  -      tree.docinfo.standalone and by passing standalone=True/False on
  -      serialisation.
  -
  - Bugs fixed
  -
  -    * Crash when parsing an XML Schema with external imports from a
  -      filename.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2.1-1
changelog:
  - 2.2.1 (2009-06-02)
  - Features added
  -
  -    * Injecting default attributes into a document during XML Schema
  -      validation (also at parse time).
  -    * Pass huge_tree parser option to disable parser security restrictions
  -      imposed by libxml2 2.7.
  -
  - Bugs fixed
  -
  -    * The script for statically building libxml2 and libxslt didn't work
  -      in Py3.
  -    * XMLSchema() also passes invalid schema documents on to libxml2 for
  -      parsing (which could lead to a crash before release 2.6.24).


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2.2-1
changelog:
  - 2.2.2 (2009-06-21)
  - Features added
  -
  -    * New helper functions strip_attributes(), strip_elements(),
  -      strip_tags() in lxml.etree to remove attributes/subtrees/tags
  -      from a subtree.
  -
  - Bugs fixed
  -
  -    * Namespace cleanup on subtree insertions could result in missing
  -      namespace declarations (and potentially crashes) if the element
  -      defining a namespace was deleted and the namespace was not used
  -      by the top element of the inserted subtree but only in deeper
  -      subtrees.
  -    * Raising an exception from a parser target callback didn't always
  -      terminate the parser.
  -    * Only {true, false, 1, 0} are accepted as the lexical representation
  -      for BoolElement ({True, False, T, F, t, f} not any more), restoring
  -      lxml <= 2.0 behaviour.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2.3-1
changelog:
  - 2.2.3 (2009-10-30)
  - Bugs fixed
  -
  -    * The resolve_entities option did not work in the incremental feed
  -      parser.
  -    * Looking up and deleting attributes without a namespace could hit a
  -      namespaced attribute of the same name instead.
  -    * Late errors during calls to SubElement() (e.g. attribute related
  -      ones) could leave a partially initialised element in the tree.
  -    * Modifying trees that contain parsed entity references could result
  -      in an infinite loop.
  -    * ObjectifiedElement.__setattr__ created an empty-string child element
  -      when the attribute value was rejected as a non-unicode/non-ascii
  -      string
  -    * Syntax errors in lxml.cssselect could result in misleading error
  -      messages.
  -    * Invalid syntax in CSS expressions could lead to an infinite loop in
  -      the parser of lxml.cssselect.
  -    * CSS special character escapes were not properly handled in
  -      lxml.cssselect.
  -    * CSS Unicode escapes were not properly decoded in lxml.cssselect.
  -    * Select options in HTML forms that had no explicit value attribute
  -      were not handled correctly. The HTML standard dictates that their
  -      value is defined by their text content. This is now supported by
  -      lxml.html.
  -    * XPath raised a TypeError when finding CDATA sections. This is now
  -      fully supported.
  -    * Calling help(lxml.objectify) didn't work at the prompt.
  -    * The ElementMaker in lxml.objectify no longer defines the default
  -      namespaces when annotation is disabled.
  -    * Feed parser failed to honour the 'recover' option on parse errors.
  -    * Diverting the error logging to Python's logging system was broken.


author: Thomas Spura <tomspur@fedoraproject.org> - 2.2.4-2
changelog:
  - update to current python3 guidelines
  - be more explicit in %files
  - use %global and not %define
  - create docs subpackage
  - add stripping 3-byte Byte Order Marker from src/lxml/tests/test_errors.py
    to get 2to3 to work (dmalcolm)
  - fixes FTBFS (#564674)


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2.5-1
changelog:
  - 2.2.5 (2010-02-28)
  -
  - Features added
  -
  -    * Support for running XSLT extension elements on the input root node
  -      (e.g. in a template matching on "/").
  -
  - Bugs fixed
  -
  -    * Crash in XPath evaluation when reading smart strings from a document
  -      other than the original context document.
  -    * Support recent versions of html5lib by not requiring its XHTMLParser
  -      in htmlparser.py anymore.
  -    * Manually instantiating the custom element classes in lxml.objectify
  -      could crash.
  -    * Invalid XML text characters were not rejected by the API when they
  -      appeared in unicode strings directly after non-ASCII characters.
  -    * lxml.html.open_http_urllib() did not work in Python 3.
  -    * The functions strip_tags() and strip_elements() in lxml.etree did
  -      not remove all occurrences of a tag in all cases.
  -    * Crash in XSLT extension elements when the XSLT context node is not
  -      an element.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2.6-1
changelog:
  - 2.2.6 (2010-03-02)
  -
  - Bugs fixed
  -
  -    * Fixed several Python 3 regressions by building with Cython 0.11.3.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2.7-1
changelog:
  - 2.2.7 (2010-07-24)
  - Bugs fixed
  -
  -     * Crash in XSLT when generating text-only result documents with a stylesheet created in a different thread.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2.7-3
changelog:
  - Don't byte-compile files during install because setup.py doesn't
    properly byte compile for Python version 3.2


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2.8-1
changelog:
  - 2.2.8 (2010-09-02)
  - Bugs fixed
  -
  -     * Crash in newer libxml2 versions when moving elements between
  -       documents that had attributes on replaced XInclude nodes.
  -     * Import fix for urljoin in Python 3.1+.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.3-1
changelog:
  - 2.3 (2011-02-06)
  - ================
  -
  - Features added
  - --------------
  -
  - * When looking for children, ``lxml.objectify`` takes '{}tag' as
  -   meaning an empty namespace, as opposed to the parent namespace.
  -
  - Bugs fixed
  - ----------
  -
  - * When finished reading from a file-like object, the parser
  -   immediately calls its ``.close()`` method.
  -
  - * When finished parsing, ``iterparse()`` immediately closes the input
  -   file.
  -
  - * Work-around for libxml2 bug that can leave the HTML parser in a
  -   non-functional state after parsing a severly broken document (fixed
  -   in libxml2 2.7.8).
  -
  - * ``marque`` tag in HTML cleanup code is correctly named ``marquee``.
  -
  - Other changes
  - --------------
  -
  - * Some public functions in the Cython-level C-API have more explicit
  -   return types.
  -
  - 2.3beta1 (2010-09-06)
  - =====================
  -
  - Features added
  - --------------
  -
  - Bugs fixed
  - ----------
  -
  - * Crash in newer libxml2 versions when moving elements between
  -   documents that had attributes on replaced XInclude nodes.
  -
  - * ``XMLID()`` function was missing the optional ``parser`` and
  -   ``base_url`` parameters.
  -
  - * Searching for wildcard tags in ``iterparse()`` was broken in Py3.
  -
  - * ``lxml.html.open_in_browser()`` didn't work in Python 3 due to the
  -   use of os.tempnam.  It now takes an optional 'encoding' parameter.
  -
  - Other changes
  - --------------
  -
  - 2.3alpha2 (2010-07-24)
  - ======================
  -
  - Features added
  - --------------
  -
  - Bugs fixed
  - ----------
  -
  - * Crash in XSLT when generating text-only result documents with a
  -   stylesheet created in a different thread.
  -
  - Other changes
  - --------------
  -
  - * ``repr()`` of Element objects shows the hex ID with leading 0x
  -   (following ElementTree 1.3).
  -
  - 2.3alpha1 (2010-06-19)
  - ======================
  -
  - Features added
  - --------------
  -
  - * Keyword argument ``namespaces`` in ``lxml.cssselect.CSSSelector()``
  -   to pass a prefix-to-namespace mapping for the selector.
  -
  - * New function ``lxml.etree.register_namespace(prefix, uri)`` that
  -   globally registers a namespace prefix for a namespace that newly
  -   created Elements in that namespace will use automatically.  Follows
  -   ElementTree 1.3.
  -
  - * Support 'unicode' string name as encoding parameter in
  -   ``tostring()``, following ElementTree 1.3.
  -
  - * Support 'c14n' serialisation method in ``ElementTree.write()`` and
  -   ``tostring()``, following ElementTree 1.3.
  -
  - * The ElementPath expression syntax (``el.find*()``) was extended to
  -   match the upcoming ElementTree 1.3 that will ship in the standard
  -   library of Python 3.2/2.7.  This includes extended support for
  -   predicates as well as namespace prefixes (as known from XPath).
  -
  - * During regular XPath evaluation, various ESXLT functions are
  -   available within their namespace when using libxslt 1.1.26 or later.
  -
  - * Support passing a readily configured logger instance into
  -   ``PyErrorLog``, instead of a logger name.
  -
  - * On serialisation, the new ``doctype`` parameter can be used to
  -   override the DOCTYPE (internal subset) of the document.
  -
  - * New parameter ``output_parent`` to ``XSLTExtension.apply_templates()``
  -   to append the resulting content directly to an output element.
  -
  - * ``XSLTExtension.process_children()`` to process the content of the
  -   XSLT extension element itself.
  -
  - * ISO-Schematron support based on the de-facto Schematron reference
  -   'skeleton implementation'.
  -
  - * XSLT objects now take XPath object as ``__call__`` stylesheet
  -   parameters.
  -
  - * Enable path caching in ElementPath (``el.find*()``) to avoid parsing
  -   overhead.
  -
  - * Setting the value of a namespaced attribute always uses a prefixed
  -   namespace instead of the default namespace even if both declare the
  -   same namespace URI.  This avoids serialisation problems when an
  -   attribute from a default namespace is set on an element from a
  -   different namespace.
  -
  - * XSLT extension elements: support for XSLT context nodes other than
  -   elements: document root, comments, processing instructions.
  -
  - * Support for strings (in addition to Elements) in node-sets returned
  -   by extension functions.
  -
  - * Forms that lack an ``action`` attribute default to the base URL of
  -   the document on submit.
  -
  - * XPath attribute result strings have an ``attrname`` property.
  -
  - * Namespace URIs get validated against RFC 3986 at the API level
  -   (required by the XML namespace specification).
  -
  - * Target parsers show their target object in the ``.target`` property
  -   (compatible with ElementTree).
  -
  - Bugs fixed
  - ----------
  -
  - * API is hardened against invalid proxy instances to prevent crashes
  -   due to incorrectly instantiated Element instances.
  -
  - * Prevent crash when instantiating ``CommentBase`` and friends.
  -
  - * Export ElementTree compatible XML parser class as
  -   ``XMLTreeBuilder``, as it is called in ET 1.2.
  -
  - * ObjectifiedDataElements in lxml.objectify were not hashable.  They
  -   now use the hash value of the underlying Python value (string,
  -   number, etc.) to which they compare equal.
  -
  - * Parsing broken fragments in lxml.html could fail if the fragment
  -   contained an orphaned closing '</div>' tag.
  -
  - * Using XSLT extension elements around the root of the output document
  -   crashed.
  -
  - * ``lxml.cssselect`` did not distinguish between ``x[attr="val"]`` and
  -   ``x [attr="val"]`` (with a space).  The latter now matches the
  -   attribute independent of the element.
  -
  - * Rewriting multiple links inside of HTML text content could end up
  -   replacing unrelated content as replacements could impact the
  -   reported position of subsequent matches.  Modifications are now
  -   simplified by letting the ``iterlinks()`` generator in ``lxml.html``
  -   return links in reversed order if they appear inside the same text
  -   node.  Thus, replacements and link-internal modifications no longer
  -   change the position of links reported afterwards.
  -
  - * The ``.value`` attribute of ``textarea`` elements in lxml.html did
  -   not represent the complete raw value (including child tags etc.). It
  -   now serialises the complete content on read and replaces the
  -   complete content by a string on write.
  -
  - * Target parser didn't call ``.close()`` on the target object if
  -   parsing failed.  Now it is guaranteed that ``.close()`` will be
  -   called after parsing, regardless of the outcome.
  -
  - Other changes
  - -------------
  -
  - * Official support for Python 3.1.2 and later.
  -
  - * Static MS Windows builds can now download their dependencies
  -   themselves.
  -
  - * ``Element.attrib`` no longer uses a cyclic reference back to its
  -   Element object.  It therefore no longer requires the garbage
  -   collector to clean up.
  -
  - * Static builds include libiconv, in addition to libxml2 and libxslt.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.3.1-1
changelog:
  - Features added
  - --------------
  -
  - * New option kill_tags in lxml.html.clean to remove specific
  -   tags and their content (i.e. their whole subtree).
  -
  - * pi.get() and pi.attrib on processing instructions to parse
  -   pseudo-attributes from the text content of processing instructions.
  -
  - * lxml.get_include() returns a list of include paths that can be
  -   used to compile external C code against lxml.etree.  This is
  -   specifically required for statically linked lxml builds when code
  -   needs to compile against the exact same header file versions as lxml
  -   itself.
  -
  - * Resolver.resolve_file() takes an additional option
  -   close_file that configures if the file(-like) object will be
  -   closed after reading or not.  By default, the file will be closed,
  -   as the user is not expected to keep a reference to it.
  -
  - Bugs fixed
  - ----------
  -
  - * HTML cleaning didn't remove 'data:' links.
  -
  - * The html5lib parser integration now uses the 'official'
  -   implementation in html5lib itself, which makes it work with newer
  -   releases of the library.
  -
  - * In lxml.sax, endElementNS() could incorrectly reject a plain
  -   tag name when the corresponding start event inferred the same plain
  -   tag name to be in the default namespace.
  -
  - * When an open file-like object is passed into parse() or
  -   iterparse(), the parser will no longer close it after use.  This
  -   reverts a change in lxml 2.3 where all files would be closed.  It is
  -   the users responsibility to properly close the file(-like) object,
  -   also in error cases.
  -
  - * Assertion error in lxml.html.cleaner when discarding top-level elements.
  -
  - * In lxml.cssselect, use the xpath 'A//B' (short for
  -   'A/descendant-or-self::node()/B') instead of 'A/descendant::B' for the
  -   css descendant selector ('A B'). This makes a few edge cases to be
  -   consistent with the selector behavior in WebKit and Firefox, and makes
  -   more css expressions valid location paths (for use in xsl:template
  -   match).
  -
  - * In lxml.html, non-selected <option> tags no longer show up in the
  -   collected form values.
  -
  - * Adding/removing <option> values to/from a multiple select form
  -   field properly selects them and unselects them.
  -
  - Other changes
  - --------------
  -
  - * Static builds can specify the download directory with the
  -   --download-dir option.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.3.2-1
changelog:
  - 2.3.2 (2011-11-11)
  - Features added
  -
  -   * lxml.objectify.deannotate() has a new boolean option
  -     cleanup_namespaces to remove the objectify namespace declarations
  -     (and generally clean up the namespace declarations) after removing
  -     the type annotations.
  -   * lxml.objectify gained its own SubElement() function as a copy of
  -     etree.SubElement to avoid an otherwise redundant import of
  -     lxml.etree on the user side.
  -
  - Bugs fixed
  -
  -    * Fixed the "descendant" bug in cssselect a second time (after a first
  -      fix in lxml 2.3.1). The previous change resulted in a serious
  -      performance regression for the XPath based evaluation of the
  -      translated expression. Note that this breaks the usage of some
  -      of the generated XPath expressions as XSLT location paths that
  -      previously worked in 2.3.1.
  -    * Fixed parsing of some selectors in cssselect. Whitespace after
  -      combinators ">", "+" and "~" is now correctly ignored. Previously
  -      it was parsed as a descendant combinator. For example, "div> .foo"
  -      was parsed the same as "div>* .foo" instead of "div>.foo". Patch by
  -      Simon Sapin.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.3.3-1
changelog:
  - 2.3.3 (2012-01-04)
  - Features added
  -
  -  * lxml.html.tostring() gained new serialisation options with_tail and
  -    doctype.
  -
  - Bugs fixed
  -
  -  * Fixed a crash when using iterparse() for HTML parsing and requesting
  -    start events.
  -  * Fixed parsing of more selectors in cssselect. Whitespace before pseudo-
  -    elements and pseudo-classes is significant as it is a descendant
  -    combinator. "E :pseudo" should parse the same as "E *:pseudo", not
  -    "E:pseudo". Patch by Simon Sapin.
  -  * lxml.html.diff no longer raises an exception when hitting 'img' tags
  -    without 'src' attribute.


author: Jeffrey Ollie <jeff@ocjtech.us> - 2.3.4-1
changelog:
  - Bugs fixed
  -
  -  * Crash when building an nsmap (Element property) with empty namespace
  -    URIs.
  -  * Crash due to race condition when errors (or user messages) occur during
  -    threaded XSLT processing (or compilation).
  -  * XSLT stylesheet compilation could ignore compilation errors.


author: Jeffrey Ollie <jeff@ocjtech.us> - 2.3.5-1
changelog:
  - Bugs fixed
  -
  -  * Crash when merging text nodes in element.remove().
  -  * Crash in sax/target parser when reporting empty doctype.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.0-1
changelog:
  - 3.0 (2012-10-08)
  - ================
  -
  - Features added
  - --------------
  -
  - Bugs fixed
  - ----------
  -
  - * End-of-file handling was incorrect in iterparse() when reading from
  -   a low-level C file stream and failed in libxml2 2.9.0 due to its
  -   improved consistency checks.
  -
  - Other changes
  - -------------
  -
  - * The build no longer uses Cython by default unless the generated C files
  -   are missing.  To use Cython, pass the option "--with-cython".  To ignore
  -   the fatal build error when Cython is required but not available (e.g. to
  -   run special setup.py commands that do not actually run a build), pass
  -   "--without-cython".
  -
  -
  - 3.0beta1 (2012-09-26)
  - =====================
  -
  - Features added
  - --------------
  -
  - * Python level access to (optional) libxml2 memory debugging features
  -   to simplify debugging of memory leaks etc.
  -
  - Bugs fixed
  - ----------
  -
  - * Fix a memory leak in XPath by switching to Cython 0.17.1.
  -
  - * Some tests were adapted to work with PyPy.
  -
  - Other changes
  - -------------
  -
  - * The code was adapted to work with the upcoming libxml2 2.9.0 release.
  -
  -
  - 3.0alpha2 (2012-08-23)
  - ======================
  -
  - Features added
  - --------------
  -
  - * The .iter() method of elements now accepts tag arguments like "{*}name"
  -   to search for elements with a given local name in any namespace.  With
  -   this addition, all combinations of wildcards now work as expected:
  -   "{ns}name", "{}name", "{*}name", "{ns}*", "{}*" and "{*}*".  Note that
  -   "name" is equivalent to "{}name", but "*" is "{*}*".  The same change
  -   applies to the .getiterator(), .itersiblings(), .iterancestors(),
  -   .iterdescendants(), .iterchildren() and .itertext() methods,  the
  -   strip_attributes(), strip_elements() and strip_tags() functions as well
  -   as the iterparse() function.
  -
  - * C14N allows specifying the inclusive prefixes to be promoted to
  -   top-level during exclusive serialisation.
  -
  - Bugs fixed
  - ----------
  -
  - * Passing long Unicode strings into the feed() parser interface failed to
  -   read the entire string.
  -
  - Other changes
  - -------------
  -
  -
  - 3.0alpha1 (2012-07-31)
  - ======================
  -
  - Features added
  - --------------
  -
  - * Initial support for building in PyPy (through cpyext).
  -
  - * DTD objects gained an API that allows read access to their
  -   declarations.
  -
  - * xpathgrep.py gained support for parsing line-by-line (e.g.
  -   from grep output) and for surrounding the output with a new root
  -   tag.
  -
  - * E-factory in lxml.builder accepts subtypes of known data
  -   types (such as string subtypes) when building elements around them.
  -
  - * Tree iteration and iterparse() with a selective tag
  -   argument supports passing a set of tags.  Tree nodes will be
  -   returned by the iterators if they match any of the tags.
  -
  - Bugs fixed
  - ----------
  -
  - * The .find*() methods in lxml.objectify no longer use XPath
  -   internally, which makes them faster in many cases (especially when
  -   short circuiting after a single or couple of elements) and fixes
  -   some behavioural differences compared to lxml.etree.  Note that
  -   this means that they no longer support arbitrary XPath expressions
  -   but only the subset that the ElementPath language supports.
  -   The previous implementation was also redundant with the normal
  -   XPath support, which can be used as a replacement.
  -
  - * el.find('*') could accidentally return a comment or processing
  -   instruction that happened to be in the wrong spot.  (Same for the
  -   other .find*() methods.)
  -
  - * The error logging is less intrusive and avoids a global setup where
  -   possible.
  -
  - * Fixed undefined names in html5lib parser.
  -
  - * xpathgrep.py did not work in Python 3.
  -
  - * Element.attrib.update() did not accept an attrib of
  -   another Element as parameter.
  -
  - * For subtypes of ElementBase that make the .text or .tail
  -   properties immutable (as in objectify, for example), inserting text
  -   when creating Elements through the E-Factory feature of the class
  -   constructor would fail with an exception, stating that the text
  -   cannot be modified.
  -
  - Other changes
  - --------------
  -
  - * The code base was overhauled to properly use 'const' where the API
  -   of libxml2 and libxslt requests it.  This also has an impact on the
  -   public C-API of lxml itself, as defined in etreepublic.pxd, as
  -   well as the provided declarations in the lxml/includes/ directory.
  -   Code that uses these declarations may have to be adapted.  On the
  -   plus side, this fixes several C compiler warnings, also for user
  -   code, thus making it easier to spot real problems again.
  -
  - * The functionality of "lxml.cssselect" was moved into a separate PyPI
  -   package called "cssselect".  To continue using it, you must install
  -   that package separately.  The "lxml.cssselect" module is still
  -   available and provides the same interface, provided the "cssselect"
  -   package can be imported at runtime.
  -
  - * Element attributes passed in as an attrib dict or as keyword
  -   arguments are now sorted by (namespaced) name before being created
  -   to make their order predictable for serialisation and iteration.
  -   Note that adding or deleting attributes afterwards does not take
  -   that order into account, i.e. setting a new attribute appends it
  -   after the existing ones.
  -
  - * Several classes that are for internal use only were removed
  -   from the lxml.etree module dict:
  -   _InputDocument, _ResolverRegistry, _ResolverContext, _BaseContext,
  -   _ExsltRegExp, _IterparseContext, _TempStore, _ExceptionContext,
  -   __ContentOnlyElement, _AttribIterator, _NamespaceRegistry,
  -   _ClassNamespaceRegistry, _FunctionNamespaceRegistry,
  -   _XPathFunctionNamespaceRegistry, _ParserDictionaryContext,
  -   _FileReaderContext, _ParserContext, _PythonSaxParserTarget,
  -   _TargetParserContext, _ReadOnlyProxy, _ReadOnlyPIProxy,
  -   _ReadOnlyEntityProxy, _ReadOnlyElementProxy, _OpaqueNodeWrapper,
  -   _OpaqueDocumentWrapper, _ModifyContentOnlyProxy,
  -   _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy,
  -   _AppendOnlyElementProxy, _SaxParserContext, _FilelikeWriter,
  -   _ParserSchemaValidationContext, _XPathContext,
  -   _XSLTResolverContext, _XSLTContext, _XSLTQuotedStringParam
  -
  - * Several internal classes can no longer be inherited from:
  -   _InputDocument, _ResolverRegistry, _ExsltRegExp, _ElementUnicodeResult,
  -   _IterparseContext, _TempStore, _AttribIterator, _ClassNamespaceRegistry,
  -   _XPathFunctionNamespaceRegistry, _ParserDictionaryContext,
  -   _FileReaderContext, _PythonSaxParserTarget, _TargetParserContext,
  -   _ReadOnlyPIProxy, _ReadOnlyEntityProxy, _OpaqueDocumentWrapper,
  -   _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy,
  -   _AppendOnlyElementProxy, _FilelikeWriter, _ParserSchemaValidationContext,
  -   _XPathContext, _XSLTResolverContext, _XSLTContext,
  -   _XSLTQuotedStringParam, _XSLTResultTree, _XSLTProcessingInstruction


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.0.1-1
changelog:
  - 3.0.1 (2012-10-14)
  - Bugs fixed
  -
  -  * LP#1065924: Element proxies could disappear during garbage collection
  -    in PyPy without proper cleanup.
  -  * GH#71: Failure to work with libxml2 2.6.x.
  -  * LP#1065139: static MacOS-X build failed in Py3.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.1.0-1
changelog:
  - 3.1.0 (2013-02-10)
  - ==================
  -
  - Features added
  - --------------
  -
  - * GH#89: lxml.html.clean allows overriding the set of attributes that it
  -   considers 'safe'.  Patch by Francis Devereux.
  -
  - Bugs fixed
  - ----------
  -
  - * LP#1104370: ``copy.copy(el.attrib)`` raised an exception.  It now returns
  -   a copy of the attributes as a plain Python dict.
  -
  - * GH#95: When used with namespace prefixes, the  ``el.find*()`` methods
  -   always used the first namespace mapping that was provided for each
  -   path expression instead of using the one that was actually passed
  -   in for the current run.
  -
  - * LP#1092521, GH#91: Fix undefined C symbol in Python runtimes compiled
  -   without threading support.  Patch by Ulrich Seidl.
  -
  - Other changes
  - -------------
  -
  -
  - 3.1beta1 (2012-12-21)
  - =====================
  -
  - Features added
  - --------------
  -
  - * New build-time option ``--with-unicode-strings`` for Python 2 that
  -   makes the API always return Unicode strings for names and text
  -   instead of byte strings for plain ASCII content.
  -
  - * New incremental XML file writing API ``etree.xmlfile()``.
  -
  - * E factory in lxml.objectify is callable to simplify the creation of
  -   tags with non-identifier names without having to resort to getattr().
  -
  - Bugs fixed
  - ----------
  -
  - * When starting from a non-namespaced element in lxml.objectify, searching
  -   for a child without explicitly specifying a namespace incorrectly found
  -   namespaced elements with the requested local name, instead of restricting
  -   the search to non-namespaced children.
  -
  - * GH#85: Deprecation warnings were fixed for Python 3.x.
  -
  - * GH#33: lxml.html.fromstring() failed to accept bytes input in Py3.
  -
  - * LP#1080792: Static build of libxml2 2.9.0 failed due to missing file.
  -
  - Other changes
  - -------------
  -
  - * The externally useless class ``_ObjectifyElementMakerCaller`` was
  -   removed from the module API of lxml.objectify.
  -
  - * LP#1075622: lxml.builder is faster for adding text to elements with
  -   many children.  Patch by Anders Hammarquist.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.2.0-1
changelog:
  - 3.2.0 (2013-04-28)
  - ==================
  -
  - Features added
  - --------------
  -
  - Bugs fixed
  - ----------
  -
  - * LP#690319: Leading whitespace could change the behaviour of the string
  -   parsing functions in ``lxml.html``.
  -
  - * LP#599318: The string parsing functions in ``lxml.html`` are more robust
  -   in the face of uncommon HTML content like framesets or missing body tags.
  -   Patch by Stefan Seelmann.
  -
  - * LP#712941: I/O errors while trying to access files with paths that
  -   contain non-ASCII characters could raise ``UnicodeDecodeError`` instead
  -   of properly reporting the ``IOError``.
  -
  - * LP#673205: Parsing from in-memory strings disabled network access in the
  -   default parser and made subsequent attempts to parse from a URL fail.
  -
  - * LP#971754: lxml.html.clean appends 'nofollow' to 'rel' attributes instead
  -   of overwriting the current value.
  -
  - * LP#715687: lxml.html.clean no longer discards scripts that are explicitly
  -   allowed by the user provided whitelist.  Patch by Christine Koppelt.
  -
  - 3.1.2 (2013-04-12)
  - ==================
  -
  - Bugs fixed
  - ----------
  -
  - * LP#1136509: Passing attributes through the namespace-unaware API of
  -   the sax bridge (i.e. the ``handler.startElement()`` method) failed
  -   with a ``TypeError``.  Patch by Mike Bayer.
  -
  - * LP#1123074: Fix serialisation error in XSLT output when converting
  -   the result tree to a Unicode string.
  -
  - * GH#105: Replace illegal usage of ``xmlBufLength()`` in libxml2 2.9.0
  -   by properly exported API function ``xmlBufUse()``.
  -
  - 3.1.1 (2013-03-29)
  - ==================
  -
  - Features added
  - --------------
  -
  - Bugs fixed
  - ----------
  -
  - * LP#1160386: Write access to ``lxml.html.FormElement.fields`` raised
  -   an AttributeError in Py3.
  -
  - * Illegal memory access during cleanup in incremental xmlfile writer.
  -
  - Other changes
  - -------------
  -
  - * The externally useless class ``lxml.etree._BaseParser`` was removed
  -   from the module dict.


author: Jeffrey Ollie <jeff@ocjtech.us> - 3.2.1-1
changelog:
  - 3.2.1 (2013-05-11)
  - ==================
  -
  - Features added
  - --------------
  -
  - * The methods ``apply_templates()`` and ``process_children()`` of XSLT
  -   extension elements have gained two new boolean options ``elements_only``
  -   and ``remove_blank_text`` that discard either all strings or
  -   whitespace-only strings from the result list.
  -
  - Bugs fixed
  - ----------
  -
  - * When moving Elements to another tree, the namespace cleanup mechanism
  -   no longer drops namespace prefixes from attributes for which it finds
  -   a default namespace declaration, to prevent them from appearing as
  -   unnamespaced attributes after serialisation.
  -
  - * Returning non-type objects from a custom class lookup method could lead
  -   to a crash.
  -
  - * Instantiating and using subtypes of Comments and ProcessingInstructions
  -   crashed.


author: Orion Poplawski <orion@cora.nwra.com> 0.82-2
changelog:
  - Rename to python-matplotlib
  - Remove unneeded Requires: python
  - Add private directories to %files


author: Orion Poplawski <orion@cora.nwra.com> 0.82-4
changelog:
  - BuildRequires: pytz, python-dateutil - use upstream
  - Don't use INSTALLED_FILES, list dirs
  - Fix execute permissions


author: Orion Poplawski <orion@cora.nwra.com> 0.87-1
changelog:
  - Update to 0.87
  - Add BR numpy and python-numarray
  - Add patch to keep Numeric as the default numerix package
  - Add BR tkinter and tk-devel for TkInter backend
  - Make separate package for Tk backend


author: Orion Poplawski <orion@cora.nwra.com> 0.87.7-1
changelog:
  - Update to 0.87.7 and fix up the defaults to use numpy
  - Force build of tkagg backend without X server
  - Use src.rpm from Jef Spaleta, closes bug 216578


author: Orion Poplawski <orion@cora.nwra.com> 0.87.7-2
changelog:
  - Force build of gtk/gtkagg backends in mock (bug #218153)
  - Change Requires from python-numeric to numpy (bug #218154)


author: Jef Spaleta <jspaleta[AT]fedoraproject org> - 0.91.2-1
changelog:
  - New upstream version
  - Adding Fedora specific setup.cfg from included template
  - removed numarry and numerics build requirements


author: Thomas Spura <tomspur@fedoraproject.org> - 1.0.1-1
changelog:
  - update to new bugfix version (#678489)
  - set file attributes in tk subpackage
  - filter private *.so


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1.0.1-2
changelog:
  - Build and package HTML documentation in -doc sub-package
  - Move examples to -doc sub-package
  - Make examples non-executable


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1.0.1-3
changelog:
  - Add conditional for optionally building doc sub-package
  - Add flag to build low res images for documentation
  - Add matplotlib-1.0.1-plot_directive.patch to fix build of low res images
  - Remove unused patches


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1.0.1-5
changelog:
  - Add default attr to doc sub-package file list
  - No longer designate -doc subpackage as noarch
  - Add arch specific Requires for tk, wx and doc sub-packages


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1.0.1-7
changelog:
  - Remove a debugging echo statement from the spec file
  - Fix some line endings and permissions in -doc sub-package


author: Orion Poplawski <orion@cora.nwra.com> - 1.0.1-12
changelog:
  - Add Requires dvipng (Bug 684836)
  - Build against system agg (Bug 612807)
  - Use system pyparsing (Bug 702160)


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 1.1.0-1
changelog:
  - Update to version 1.1.0.
  - Do not regenerate upstream tarball but remove problematic file in %prep.
  - Remove non longer applicable/required patch0.
  - Rediff/rename -noagg patch.
  - Remove propagate-timezone-info-in-plot_date-xaxis_da patch already applied.
  - Remove tkinter patch now with critical code in a try block.
  - Remove png 1.5 patch as upstream is now png 1.5 aware.
  - Update file list.


author: Jerry James <loganjerry@gmail.com> - 1.1.1-1
changelog:
  - Update to version 1.1.1.
  - Remove obsolete spec file elements
  - Fix sourceforge URLs
  - Allow sample data to have a different version number than the sources
  - Don't bother removing problematic file since we remove entire agg24 directory
  - Fix building with pygtk in the absence of an X server
  - Don't install license text for bundled software that we don't bundle


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 1.2.0-1
changelog:
  - Update to version 1.2.0
  - Revert to regenerate tarball with generate-tarball.sh (#837156)
  - Assume update to 1.2.0 is for recent releases
  - Remove %defattr
  - Remove %clean
  - Use simpler approach to build html documentation
  - Do not use custom/outdated setup.cfg
  - Put one BuildRequires per line
  - Enable python3 support
  - Cleanup spec as wx backend is no longer supported
  - Use default agg backend
  - Fix bogus dates in changelog by assuming only week day was wrong


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 1.2.0-2
changelog:
  - Build python3 only on f19 or newer (#837156)
  - Build requires python3-six if building python3 support (#837156)


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 1.2.0-5
changelog:
  - Reinstantiate wx backend for python2.x.
  - Run setup.py under xvfb-run to detect and default to gtk backend (#883502)
  - Split qt4 backend subpackage and add proper requires for it.
  - Correct wrong regex in tcl libdir patch.


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 1.2.0-8
changelog:
  - Update fontconfig patch to apply issue found by upstream
  - Update fontconfig patch to apply issue with missing afm fonts (#896182)


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 1.2.0-10
changelog:
  - Use stix fonts avoid problems with missing cm fonts (#908717)
  - Correct type mismatch in python3 font_manager (#912843, #928326)


author: John Dennis <jdennis@redhat.com> - 0.1-1
changelog:
  - clean up ssl_example.py, fix arg list in get_cert_nicknames,
     make certdir cmd line arg consistent with other NSS tools
  - update httplib.py to support client auth, add httplib_example.py which illustrates it's use
  - fix some documentation
  - fix some type usage which were unsafe on 64-bit


author: John Dennis <jdennis@redhat.com> - 0.2-1
changelog:
  - Convert licensing to MPL tri-license
  - apply patch from bug #472805, (Miloslav Trmač)
    Don't allow closing a socket twice, that causes crashes.
    New function nss.io.Socket.new_socket_pair()
    New function nss.io.Socket.poll()
    New function nss.io.Socket.import_tcp_socket()
    New method nss.nss.Certificate.get_subject_common_name()
    New function nss.nss.generate_random()
    Fix return value creation in SSLSocket.get_security_status
    New function nss.ssl.SSLSocket.import_tcp_socket()


author: John Dennis <jdennis@redhat.com> - 0.3-1
changelog:
  - installed source code in Mozilla CVS repository
    update URL tag to point to CVS repositoy
    (not yet a valid URL, still have to coordinate with Mozilla)
    minor tweak to src directory layout


author: John Dennis <jdennis@redhat.com> - 0.4-1
changelog:
  - add binding for NSS_NoDB_Init(), bug #509002
    move nss_init and nss_shutdown from ssl module to nss module


author: John Dennis <jdennis@redhat.com> - 0.5-1
changelog:
  - restore ssl.nss_init and ssl.nss_shutdown but make them deprecated
    add __version__ string to nss module


author: John Dennis <jdennis@redhat.com> - 0.7-1
changelog:
  - add support for symmetric encryption/decryption
    more support for digests (hashes)

    The following classes were added:
    PK11SymKey PK11Context

    The following methods and functions were added:
    get_best_wrap_mechanism          get_best_key_length
    key_gen                          derive
    get_key_length                   digest_key
    clone_context                    digest_begin
    digest_op                        cipher_op
    finalize                         digest_final
    read_hex                         hash_buf
    sec_oid_tag_str                  sec_oid_tag_name
    sec_oid_tag_from_name            key_mechanism_type_name
    key_mechanism_type_from_name     pk11_attribute_type_name
    pk11_attribute_type_from_name    get_best_slot
    get_internal_key_slot            create_context_by_sym_key
    import_sym_key                   create_digest_context
    param_from_iv                    param_from_algid
    generate_new_param               algtag_to_mechanism
    mechanism_to_algtag

    The following files were added:
    cipher_test.py digest_test.py


author: John Dennis <jdennis@redhat.com> - 0.8-1
changelog:
  - The following methods, properties  and functions were added:
    SecItem.type SecItem.len, SecItem.data
    PK11SymKey.key_data, PK11SymKey.key_length, PK11SymKey.slot
    create_context_by_sym_key
    param_from_iv
    generate_new_param
    get_iv_length
    get_block_size
    get_pad_mechanism
  - SecItem's now support indexing and slicing on their data
  - Clean up parsing and parameter validation of variable arg functions


author: John Dennis <jdennis@redhat.com> - 0.9-1
changelog:
  - Unicode objects now accepted as well as str objects for
    interfaces expecting a string.

  - Sockets were enhanced thusly:
      - Threads will now yield during blocking IO.
      - Socket.makefile() reimplemented
            file object methods that had been missing (readlines(), sendall(),
            and iteration) were implemented, makefile now just returns the same
            Socket object but increments an "open" ref count. Thus a Socket
            object behaves like a file object and must be closed once for each
            makefile() call before it's actually closed.
      - Sockets now support the iter protocol
      - Add Socket.readlines(), Socket.sendall()

  - The following classes were added:
      AuthKeyID
      BasicConstraints
      CRLDistributionPoint
      CRLDistributionPts
      CertificateExtension
      GeneralName
      SignedCRL
      X500AVA
      X500Name
      X500RDN

  - The following module functions were added:
      nss.nss.cert_crl_reason_from_name()
      nss.nss.cert_crl_reason_name()
      nss.nss.cert_general_name_type_from_name()
      nss.nss.cert_general_name_type_name()
      nss.nss.cert_usage_flags()
      nss.nss.decode_der_crl()
      nss.nss.der_universal_secitem_fmt_lines()
      nss.nss.import_crl()
      nss.nss.make_line_pairs()
      nss.nss.oid_dotted_decimal()
      nss.nss.oid_str()
      nss.nss.oid_tag()
      nss.nss.oid_tag_name()
      nss.nss.read_der_from_file()
      nss.nss.x509_alt_name()
      nss.nss.x509_ext_key_usage()
      nss.nss.x509_key_usage()

  - The following class methods and properties were added:
    Note: it's a method if the name is suffixed with (), a propety otherwise
      Socket.next()
      Socket.readlines()
      Socket.sendall()
      SSLSocket.next()
      SSLSocket.readlines()
      SSLSocket.sendall()
      AuthKeyID.key_id
      AuthKeyID.serial_number
      AuthKeyID.get_general_names()
      CRLDistributionPoint.issuer
      CRLDistributionPoint.get_general_names()
      CRLDistributionPoint.get_reasons()
      CertDB.find_crl_by_cert()
      CertDB.find_crl_by_name()
      Certificate.extensions
      CertificateExtension.critical
      CertificateExtension.name
      CertificateExtension.oid
      CertificateExtension.oid_tag
      CertificateExtension.value
      GeneralName.type_enum
      GeneralName.type_name
      GeneralName.type_string
      SecItem.der_to_hex()
      SecItem.get_oid_sequence()
      SecItem.to_hex()
      SignedCRL.delete_permanently()
      X500AVA.oid
      X500AVA.oid_tag
      X500AVA.value
      X500AVA.value_str
      X500Name.cert_uid
      X500Name.common_name
      X500Name.country_name
      X500Name.dc_name
      X500Name.email_address
      X500Name.locality_name
      X500Name.org_name
      X500Name.org_unit_name
      X500Name.state_name
      X500Name.add_rdn()
      X500Name.has_key()
      X500RDN.has_key()

  - The following module functions were removed:
    Note: use nss.nss.oid_tag() instead
      nss.nss.sec_oid_tag_from_name()
      nss.nss.sec_oid_tag_name()
      nss.nss.sec_oid_tag_str()

  - The following files were added:
      doc/examples/cert_dump.py
      test/test_cert_components.py

  - Apply patches from  Miloslav Trmač <mitr@redhat.com>
    for ref counting and threading support. Thanks Miloslav!

  - Review all ref counting, numerous ref counting fixes

  - Implement cyclic garbage collection support by
    adding object traversal and clear methods

  - Identify static variables, move to thread local storage


author: John Dennis <jdennis@redhat.com> - 0.9-2
changelog:
  - fold in more ref counting patches from Miloslav Trmač <mitr@redhat.com>
    into upstream.
    Did not bump upstream version, just bumped release ver in this spec file.


author: John Dennis <jdennis@redhat.com> - 0.9-3
changelog:
  - Add format_lines() & format() methods to the new certificate extension objects.
  - Add printing of certificate extensions.
  - Add BasicContstraints certificate extension.
  - Fix several reference counting and memory problems discovered with valgrind.


author: John Dennis <jdennis@redhat.com> - 0.9-5
changelog:
  - Fix incomplete read bug (due to read ahead buffer bookkeeping).
  - Remove python-nss specific httplib.py, no longer needed
    python-nss now compatible with standard library
  - Rewrite httplib_example.py to use standard library and illustrate
    ssl, non-ssl, connection class, http class usage


author: John Dennis <jdennis@redhat.com> - 0.9-6
changelog:
  - Invoke nss_init_nodb() when nss modules loads, this prevents segfaults
    in NSS if Python programmer forgot to call one of the NSS
    initialization routines.

  - Rename the classes X500Name, X500RDN, X500AVA to DN, RDN, AVA
    respectively.

  - DN and RDN objects now return a list of their contents when indexed by
    type, this is to support multi-valued items.

  - Fix bug where AVA object's string representation did not include it's
    type.

  - Enhance test/test_cert_components.py unit test to test for above
    changes.

  - Add CertificateRequest object


author: John Dennis <jdennis@redhat.com> - 0.9-7
changelog:
  - Remove nss_init_nodb() when nss modules loads from previous version
    apparently this prevents subsequent calls to nss_init with a
    database to silently fail.
  - Clean up some cruft in doc/examples/verify_server.py


author: John Dennis <jdennis@redhat.com> - 0.10-1
changelog:
  - The following classes were added:
      InitParameters
      InitContext

  -The following module functions were added:
      nss.nss.nss_initialize()
      nss.nss.nss_init_context()
      nss.nss.nss_shutdown_context()
      nss.nss.nss_init_flags()


author: John Dennis <jdennis@redhat.com> - 0.10-2
changelog:
  - split documentation out into separate doc sub-package
    and make building api documentation optional


author: John Dennis <jdennis@redhat.com> - 0.10-3
changelog:
  - Fix all rpmlint warnings
  - doc for license, changelog etc. now in main package,
    doc subpackage now only contains api doc, examples, test, etc.
  - Filter provides for .so files
  - Remove execute permission on everything in docdir
  - Capitalize description


author: John Dennis <jdennis@redhat.com> - 0.11-1
changelog:
  * Better support for IPv6

    * Add AddrInfo class to support IPv6 address resolution. Supports
      iteration over it's set of NetworkAddress objects and provides
      hostname, canonical_name object properties.

    * Add PR_AI_* constants.

    * NetworkAddress constructor and NetworkAddress.set_from_string() added
      optional family parameter. This is necessary for utilizing
      PR_GetAddrInfoByName().

    * NetworkAddress initialized via a string paramter are now initalized via
      PR_GetAddrInfoByName using family.

    * Add NetworkAddress.address property to return the address sans the
      port as a string. NetworkAddress.str() includes the port. For IPv6 the
      a hex string must be enclosed in brackets if a port is appended to it,
      the bracketed hex address with appended with a port is unappropriate
      in some circumstances, hence the new address property to permit either
      the address string with a port or without a port.

    * Fix the implementation of the NetworkAddress.family property, it was
      returning bogus data due to wrong native data size.

    * HostEntry objects now support iteration and indexing of their
      NetworkAddress members.

    * Add io.addr_family_name() function to return string representation of
      PR_AF_* constants.

    * Modify example and test code to utilize AddrInfo instead of deprecated
      NetworkAddress functionality. Add address family command argument to
      ssl_example.

    * Fix pty import statement in test/setup_certs.py

      Deprecated Functionality:
      -------------------------

    * NetworkAddress initialized via a string paramter is now
      deprecated. AddrInfo should be used instead.

    * NetworkAddress.set_from_string is now deprecated. AddrInfo should be
      used instead.

    * NetworkAddress.hostentry is deprecated. It was a bad idea,
      NetworkAddress objects can support both IPv4 and IPv6, but a HostEntry
      object can only support IPv4. Plus the implementation depdended on
      being able to perform a reverse DNS lookup which is not always
      possible.

    * HostEntry.get_network_addresses() and HostEntry.get_network_address()
      are now deprecated. In addition their port parameter is now no longer
      respected. HostEntry objects now support iteration and
      indexing of their NetworkAddress and that should be used to access
      their NetworkAddress objects instead.


author: John Dennis <jdennis@redhat.com> - 0.11-2
changelog:
  - Resolves: #689059
    Add family parameter to Socket constructors in examples and doc.
    Mark implicit family parameter as deprecated.
    Raise exception if Socket family does not match NetworkAddress family.
    Add --server-subject to setup_certs.py (made testing IPv6 easier without DNS)


author: John Dennis <jdennis@redhat.com> - 0.12-1
changelog:
  * Major new enhancement is additon of PKCS12 support and
      AlgorithmID's.

    * setup.py build enhancements
      - Now searches for the NSS and NSPR header files rather
        than hardcoding their location. This makes building friendlier
        on other systems (i.e. debian)
      - Now takes optional command line arguments, -d or --debug
        will turn on debug options during the build.

    * Fix reference counting bug in PK11_password_callback() which
      contributed to NSS not being able to shutdown due to
      resources still in use.

    * Add UTF-8 support to ssl.config_server_session_id_cache()

    * Added unit tests for cipher, digest, client_server.

    * All unittests now run, added test/run_tests to invoke
      full test suite.

    * Fix bug in test/setup_certs.py, hardcoded full path to
      libnssckbi.so was causing failures on 64-bit systems,
      just use the libnssckbi.so basename, modutil will find
      it on the standard search path.

    * doc/examples/cert_dump.py uses new AlgorithmID class to
      dump Signature Algorithm

    * doc/examples/ssl_example.py now can cleanly shutdown NSS.

    * Exception error messages now include PR error text if available.

    * The following classes were replaced:
      - SignatureAlgorithm replaced by new class AlgorithmID

    * The following classes were added:
      - AlgorithmID
      - PKCS12DecodeItem
      - PKCS12Decoder

    * The following class methods were added:
      - PK11Slot.authenticate()
      - PK11Slot.get_disabled_reason()
      - PK11Slot.has_protected_authentication_path()
      - PK11Slot.has_root_certs()
      - PK11Slot.is_disabled()
      - PK11Slot.is_friendly()
      - PK11Slot.is_internal()
      - PK11Slot.is_logged_in()
      - PK11Slot.is_removable()
      - PK11Slot.logout()
      - PK11Slot.need_login()
      - PK11Slot.need_user_init()
      - PK11Slot.user_disable()
      - PK11Slot.user_enable()
      - PKCS12DecodeItem.format()
      - PKCS12DecodeItem.format_lines()
      - PKCS12Decoder.database_import()
      - PKCS12Decoder.format()
      - PKCS12Decoder.format_lines()

    * The following class properties were added:
      - AlgorithmID.id_oid
      - AlgorithmID.id_str
      - AlgorithmID.id_tag
      - AlgorithmID.parameters
      - PKCS12DecodeItem.certificate
      - PKCS12DecodeItem.friendly_name
      - PKCS12DecodeItem.has_key
      - PKCS12DecodeItem.shroud_algorithm_id
      - PKCS12DecodeItem.signed_cert_der
      - PKCS12DecodeItem.type
      - SignedData.data
      - SignedData.der

    * The following module functions were added:
      - nss.nss.dump_certificate_cache_info()
      - nss.nss.find_slot_by_name()
      - nss.nss.fingerprint_format_lines()
      - nss.nss.get_internal_slot()
      - nss.nss.is_fips()
      - nss.nss.need_pw_init()
      - nss.nss.nss_init_read_write()
      - nss.nss.pk11_disabled_reason_name()
      - nss.nss.pk11_disabled_reason_str()
      - nss.nss.pk11_logout_all()
      - nss.nss.pkcs12_cipher_from_name()
      - nss.nss.pkcs12_cipher_name()
      - nss.nss.pkcs12_enable_all_ciphers()
      - nss.nss.pkcs12_enable_cipher()
      - nss.nss.pkcs12_export()
      - nss.nss.pkcs12_map_cipher()
      - nss.nss.pkcs12_set_nickname_collision_callback()
      - nss.nss.pkcs12_set_preferred_cipher()
      - nss.nss.token_exists()
      - nss.ssl.config_mp_server_sid_cache()
      - nss.ssl.config_server_session_id_cache_with_opt()
      - nss.ssl.get_max_server_cache_locks()
      - nss.ssl.set_max_server_cache_locks()
      - nss.ssl.shutdown_server_session_id_cache()

    * The following constants were added:
      - nss.nss.int.PK11_DIS_COULD_NOT_INIT_TOKEN
      - nss.nss.int.PK11_DIS_NONE
      - nss.nss.int.PK11_DIS_TOKEN_NOT_PRESENT
      - nss.nss.int.PK11_DIS_TOKEN_VERIFY_FAILED
      - nss.nss.int.PK11_DIS_USER_SELECTED
      - nss.nss.int.PKCS12_DES_56
      - nss.nss.int.PKCS12_DES_EDE3_168
      - nss.nss.int.PKCS12_RC2_CBC_128
      - nss.nss.int.PKCS12_RC2_CBC_40
      - nss.nss.int.PKCS12_RC4_128
      - nss.nss.int.PKCS12_RC4_40

    * The following files were added:
      - test/run_tests
      - test/test_cipher.py (replaces cipher_test.py)
      - test/test_client_server.py
      - test/test_digest.py (replaces digest_test.py)
      - test/test_pkcs12.py

    * The following were deprecated:
      - SignatureAlgorithm


author: John Dennis <jdennis@redhat.com> - 0.12-2
changelog:
  - add patch python-nss-0.12-rsapssparams.patch to fix build problem
    which appears only with nss 3.13 and later.


author: John Dennis <jdennis@redhat.com> - 0.13-0
changelog:
  - Update to version 0.13
    Introduced in 0.13:

    * Fix NSS SECITEM_CompareItem bug via workaround.

    * Fix incorrect format strings in PyArg_ParseTuple* for:
      - GeneralName
      - BasicConstraints
      - cert_x509_key_usage

    * Fix bug when decoding certificate BasicConstraints extension

    * Fix hang in setup_certs.

    * For NSS >= 3.13 support CERTDB_TERMINAL_RECORD

    * You can now query for a specific certificate extension
      Certficate.get_extension()

    * The following classes were added:
      - RSAGenParams

    * The following class methods were added:
      - nss.nss.Certificate.get_extension
      - nss.nss.PK11Slot.generate_key_pair
      - nss.nss.DSAPublicKey.format
      - nss.nss.DSAPublicKey.format_lines

    * The following module functions were added:
      - nss.nss.pub_wrap_sym_key

    * The following internal utilities were added:
      - PyString_UTF8
      - SecItem_new_alloc()

    * The following class constructors were modified to accept
      intialization parameters

      - KEYPQGParams (DSA generation parameters)

    * The PublicKey formatting (i.e. format_lines) was augmented
      to format DSA keys (formerly it only recognized RSA keys).

    * Allow lables and values to be justified when printing objects

    * The following were deprecated:
      - nss.nss.make_line_pairs (replaced by nss.nss.make_line_fmt_tuples)

      Deprecated Functionality:
      -------------------------
      - make_line_pairs() has been replaced by make_line_fmt_tuples()
        because 2-valued tuples were not sufficently general. It is
        expected very few programs will have used this function, it's mostly
        used internally but provided as a support utility.


author: John Dennis <jdennis@redhat.com> - 0.14-1
changelog:
  External Changes:
    -----------------

    The primary enhancements in this version is support of certifcate
    validation, OCSP support, and support for the certificate "Authority
    Information Access" extension.

    Enhanced certifcate validation including CA certs can be done via
    Certificate.verify() or Certificate.is_ca_cert(). When cert
    validation fails you can now obtain diagnostic information as to why
    the cert failed to validate. This is encapsulated in the
    CertVerifyLog class which is a iterable collection of
    CertVerifyLogNode objects. Most people will probablby just print the
    string representation of the returned CertVerifyLog object. Cert
    validation logging is handled by the Certificate.verify() method.
    Support has also been added for the various key usage and cert type
    entities which feature prominently during cert validation.


    * Certificate() constructor signature changed from

      Certificate(data=None, der_is_signed=True)

      to

      Certificate(data, certdb=cert_get_default_certdb(), perm=False, nickname=None)

      This change was necessary because all certs should be added to the
      NSS temporary database when they are loaded, but earlier code
      failed to to that. It's is not likely that an previous code was
      failing to pass initialization data or the der_is_signed flag so
      this change should be backwards compatible.

    * Fix bug #922247, PKCS12Decoder.database_import() method. Importing into
      a NSS database would sometimes fail or segfault.

    * Error codes and descriptions were updated from upstream NSPR & NSS.

    * The password callback did not allow for breaking out of a password
      prompting loop, now if None is returned from the password callback
      the password prompting is terminated.

    * nss.nss_shutdown_context now called from InitContext destructor,
      this assures the context is shutdown even if the programmer forgot
      to. It's still best to explicitly shut it down, this is just
      failsafe.

    * Support was added for shutdown callbacks.

    * The following classes were added:
      - nss.CertVerifyLogNode
      - nss.CertVerifyLog
      - error.CertVerifyError (exception)
      - nss.AuthorityInfoAccess
      - nss.AuthorityInfoAccesses


    * The following class methods were added:
      - nss.Certificate.is_ca_cert
      - nss.Certificate.verify
      - nss.Certificate.verify_with_log
      - nss.Certificate.get_cert_chain
      - nss.Certificate.check_ocsp_status
      - nss.PK11Slot.list_certs
      - nss.CertVerifyLogNode.format_lines
      - nss.CertVerifyLog.format_lines
      - nss.CRLDistributionPts.format_lines

    * The following class properties were added:
      - nss.CertVerifyLogNode.certificate
      - nss.CertVerifyLogNode.error
      - nss.CertVerifyLogNode.depth
      - nss.CertVerifyLog.count

    * The following module functions were added:
      - nss.x509_cert_type
      - nss.key_usage_flags
      - nss.list_certs
      - nss.find_certs_from_email_addr
      - nss.find_certs_from_nickname
      - nss.nss_get_version
      - nss.nss_version_check
      - nss.set_shutdown_callback
      - nss.get_use_pkix_for_validation
      - nss.set_use_pkix_for_validation
      - nss.enable_ocsp_checking
      - nss.disable_ocsp_checking
      - nss.set_ocsp_cache_settings
      - nss.set_ocsp_failure_mode
      - nss.set_ocsp_timeout
      - nss.clear_ocsp_cache
      - nss.set_ocsp_default_responder
      - nss.enable_ocsp_default_responder
      - nss.disable_ocsp_default_responder

    * The following files were added:
        src/py_traceback.h
        doc/examples/verify_cert.py
        test/test_misc.py

    * The following constants were added:
      - nss.KU_DIGITAL_SIGNATURE
      - nss.KU_NON_REPUDIATION
      - nss.KU_KEY_ENCIPHERMENT
      - nss.KU_DATA_ENCIPHERMENT
      - nss.KU_KEY_AGREEMENT
      - nss.KU_KEY_CERT_SIGN
      - nss.KU_CRL_SIGN
      - nss.KU_ENCIPHER_ONLY
      - nss.KU_ALL
      - nss.KU_DIGITAL_SIGNATURE_OR_NON_REPUDIATION
      - nss.KU_KEY_AGREEMENT_OR_ENCIPHERMENT
      - nss.KU_NS_GOVT_APPROVED
      - nss.PK11CertListUnique
      - nss.PK11CertListUser
      - nss.PK11CertListRootUnique
      - nss.PK11CertListCA
      - nss.PK11CertListCAUnique
      - nss.PK11CertListUserUnique
      - nss.PK11CertListAll
      - nss.certUsageSSLClient
      - nss.certUsageSSLServer
      - nss.certUsageSSLServerWithStepUp
      - nss.certUsageSSLCA
      - nss.certUsageEmailSigner
      - nss.certUsageEmailRecipient
      - nss.certUsageObjectSigner
      - nss.certUsageUserCertImport
      - nss.certUsageVerifyCA
      - nss.certUsageProtectedObjectSigner
      - nss.certUsageStatusResponder
      - nss.certUsageAnyCA
      - nss.ocspMode_FailureIsVerificationFailure
      - nss.ocspMode_FailureIsNotAVerificationFailure

    * cert_dump.py extended to print NS_CERT_TYPE_EXTENSION

    * cert_usage_flags, nss_init_flags now support optional repr_kind parameter

    Internal Changes:
    -----------------

    * Reimplement exception handling
      - NSPRError is now derived from StandardException instead of
        EnvironmentError. It was never correct to derive from
        EnvironmentError but was difficult to implement a new subclassed
        exception with it's own attributes, using EnvironmentError had
        been expedient.

      - NSPRError now derived from StandardException, provides:
        * errno (numeric error code)
        * strerror (error description associated with error code)
        * error_message (optional detailed message)
        * error_code (alias for errno)
        * error_desc (alias for strerror)

      - CertVerifyError derived from NSPRError, extends with:
        * usages (bitmask of returned usages)
        * log (CertVerifyLog object)

    * Expose error lookup to sibling modules

    * Use macros for bitmask_to_list functions to reduce code
      duplication and centralize logic.

    * Add repr_kind parameter to cert_trust_flags_str()

    * Add support for repr_kind AsEnumName to bitstring table lookup.

    * Add cert_type_bitstr_to_tuple() lookup function

    * Add PRTimeConvert(), used to convert Python time values
      to PRTime, centralizes conversion logic, reduces duplication

    * Add UTF8OrNoneConvert to better handle unicode parameters which
      are optional.

    * Add Certificate_summary_format_lines() utility to generate
      concise certificate identification info for output.

    * Certificate_new_from_CERTCertificate now takes add_reference parameter
      to properly reference count certs, should fix shutdown busy problems.

    * Add print_traceback(), print_cert() debugging support.


author: John Dennis <jdennis@redhat.com> - 0.14.0-2
changelog:
  - resolves: bug#1002589
  - resolves: bug#1003979

  - Rewrite setup_certs.py. No longer behaves like an expect script
    which was fragile. By default now creates a sql style database.
  - By default all examples & tests use new sql format for NSS database
  - db-name is now used instead of dbdir to provide distinction between
    the database directory and it's scheme (e.g. 'sql:')
  - all examples and tests now default db-name to 'sql:pki'
  - replaced legacy getopt & optparse command line argument handling
    with modern argparse.


author: John Dennis <jdennis@redhat.com> - 0.14.0-3
changelog:
  - resolves: bug#1003979
  - In coordination with QE with regards to bz 1019934 it was requested
    the unittest patches be enhanced with a more robust version of
    test_pkcs12, no actual bug, just better testing.


author: John Dennis <jdennis@redhat.com> - 0.15.0-1
changelog:
  - resolves: bug#1109769 rebase to 0.15.0
  - includes fixes for 1087031 and 1060314
    See doc/Changelog for details


author: John Dennis <jdennis@redhat.com> - 0.16.0-1
changelog:
  - resolves: bug#1155703 - Add API call for SSL_VersionRangeSet (rebase)
    rebased to 0.16.0
  - The primary enhancements in this version is adding support for the
    setting trust attributes on a Certificate, the SSL version range API,
    information on the SSL cipher suites and information on the SSL connection.

    * The following module functions were added:

      - ssl.get_ssl_version_from_major_minor
      - ssl.get_default_ssl_version_range
      - ssl.get_supported_ssl_version_range
      - ssl.set_default_ssl_version_range
      - ssl.ssl_library_version_from_name
      - ssl.ssl_library_version_name
      - ssl.get_cipher_suite_info
      - ssl.ssl_cipher_suite_name
      - ssl.ssl_cipher_suite_from_name

    * The following deprecated module functions were removed:

      - ssl.nssinit
      - ssl.nss_ini
      - ssl.nss_shutdown

    * The following classes were added:

      - SSLCipherSuiteInfo
      - SSLChannelInfo

    * The following class methods were added:

      - Certificate.trust_flags
      - Certificate.set_trust_attributes

      - SSLSocket.set_ssl_version_range
      - SSLSocket.get_ssl_version_range
      - SSLSocket.get_ssl_channel_info
      - SSLSocket.get_negotiated_host
      - SSLSocket.connection_info_format_lines
      - SSLSocket.connection_info_format
      - SSLSocket.connection_info_str
  	
      - SSLCipherSuiteInfo.format_lines
      - SSLCipherSuiteInfo.format

      - SSLChannelInfo.format_lines
      - SSLChannelInfo.format

    * The following class properties were added:

      - Certificate.ssl_trust_flags
      - Certificate.email_trust_flags
      - Certificate.signing_trust_flags

      - SSLCipherSuiteInfo.cipher_suite
      - SSLCipherSuiteInfo.cipher_suite_name
      - SSLCipherSuiteInfo.auth_algorithm
      - SSLCipherSuiteInfo.auth_algorithm_name
      - SSLCipherSuiteInfo.kea_type
      - SSLCipherSuiteInfo.kea_type_name
      - SSLCipherSuiteInfo.symmetric_cipher
      - SSLCipherSuiteInfo.symmetric_cipher_name
      - SSLCipherSuiteInfo.symmetric_key_bits
      - SSLCipherSuiteInfo.symmetric_key_space
      - SSLCipherSuiteInfo.effective_key_bits
      - SSLCipherSuiteInfo.mac_algorithm
      - SSLCipherSuiteInfo.mac_algorithm_name
      - SSLCipherSuiteInfo.mac_bits
      - SSLCipherSuiteInfo.is_fips
      - SSLCipherSuiteInfo.is_exportable
      - SSLCipherSuiteInfo.is_nonstandard

      - SSLChannelInfo.protocol_version
      - SSLChannelInfo.protocol_version_str
      - SSLChannelInfo.protocol_version_enum
      - SSLChannelInfo.major_protocol_version
      - SSLChannelInfo.minor_protocol_version
      - SSLChannelInfo.cipher_suite
      - SSLChannelInfo.auth_key_bits
      - SSLChannelInfo.kea_key_bits
      - SSLChannelInfo.creation_time
      - SSLChannelInfo.creation_time_utc
      - SSLChannelInfo.last_access_time
      - SSLChannelInfo.last_access_time_utc
      - SSLChannelInfo.expiration_time
      - SSLChannelInfo.expiration_time_utc
      - SSLChannelInfo.compression_method
      - SSLChannelInfo.compression_method_name
      - SSLChannelInfo.session_id

    * The following files were added:

      - doc/examples/cert_trust.py
      - doc/examples/ssl_version_range.py

    * The following constants were added:
      - nss.CERTDB_TERMINAL_RECORD
      - nss.CERTDB_VALID_PEER
      - nss.CERTDB_TRUSTED
      - nss.CERTDB_SEND_WARN
      - nss.CERTDB_VALID_CA
      - nss.CERTDB_TRUSTED_CA
      - nss.CERTDB_NS_TRUSTED_CA
      - nss.CERTDB_USER
      - nss.CERTDB_TRUSTED_CLIENT_CA
      - nss.CERTDB_GOVT_APPROVED_CA
      - ssl.SRTP_AES128_CM_HMAC_SHA1_32
      - ssl.SRTP_AES128_CM_HMAC_SHA1_80
      - ssl.SRTP_NULL_HMAC_SHA1_32
      - ssl.SRTP_NULL_HMAC_SHA1_80
      - ssl.SSL_CK_DES_192_EDE3_CBC_WITH_MD5
      - ssl.SSL_CK_DES_64_CBC_WITH_MD5
      - ssl.SSL_CK_IDEA_128_CBC_WITH_MD5
      - ssl.SSL_CK_RC2_128_CBC_EXPORT40_WITH_MD5
      - ssl.SSL_CK_RC2_128_CBC_WITH_MD5
      - ssl.SSL_CK_RC4_128_EXPORT40_WITH_MD5
      - ssl.SSL_CK_RC4_128_WITH_MD5
      - ssl.SSL_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA
      - ssl.SSL_FORTEZZA_DMS_WITH_NULL_SHA
      - ssl.SSL_FORTEZZA_DMS_WITH_RC4_128_SHA
      - ssl.SSL_RSA_OLDFIPS_WITH_3DES_EDE_CBC_SHA
      - ssl.SSL_RSA_OLDFIPS_WITH_DES_CBC_SHA
      - ssl.TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
      - ssl.TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA
      - ssl.TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
      - ssl.TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_DHE_DSS_WITH_DES_CBC_SHA
      - ssl.TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
      - ssl.TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
      - ssl.TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
      - ssl.TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
      - ssl.TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
      - ssl.TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_DHE_RSA_WITH_DES_CBC_SHA
      - ssl.TLS_DH_ANON_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_DH_ANON_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA
      - ssl.TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA
      - ssl.TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_DH_DSS_WITH_DES_CBC_SHA
      - ssl.TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA
      - ssl.TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA
      - ssl.TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_DH_RSA_WITH_DES_CBC_SHA
      - ssl.TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA
      - ssl.TLS_DH_anon_EXPORT_WITH_RC4_40_MD5
      - ssl.TLS_DH_anon_WITH_3DES_EDE_CBC_SHA
      - ssl.TLS_DH_anon_WITH_AES_128_CBC_SHA
      - ssl.TLS_DH_anon_WITH_AES_256_CBC_SHA
      - ssl.TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_DH_anon_WITH_DES_CBC_SHA
      - ssl.TLS_DH_anon_WITH_RC4_128_MD5
      - ssl.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
      - ssl.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
      - ssl.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
      - ssl.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
      - ssl.TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
      - ssl.TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
      - ssl.TLS_EMPTY_RENEGOTIATION_INFO_SCSV
      - ssl.TLS_FALLBACK_SCSV
      - ssl.TLS_NULL_WITH_NULL_NULL
      - ssl.TLS_RSA_EXPORT_WITH_DES40_CBC_SHA
      - ssl.TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5
      - ssl.TLS_RSA_EXPORT_WITH_RC4_40_MD5
      - ssl.TLS_RSA_WITH_3DES_EDE_CBC_SHA
      - ssl.TLS_RSA_WITH_AES_128_CBC_SHA256
      - ssl.TLS_RSA_WITH_AES_128_GCM_SHA256
      - ssl.TLS_RSA_WITH_AES_256_CBC_SHA256
      - ssl.TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
      - ssl.TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
      - ssl.TLS_RSA_WITH_DES_CBC_SHA
      - ssl.TLS_RSA_WITH_IDEA_CBC_SHA
      - ssl.TLS_RSA_WITH_NULL_MD5
      - ssl.TLS_RSA_WITH_NULL_SHA
      - ssl.TLS_RSA_WITH_NULL_SHA256
      - ssl.TLS_RSA_WITH_RC4_128_MD5
      - ssl.TLS_RSA_WITH_RC4_128_SHA
      - ssl.TLS_RSA_WITH_SEED_CBC_SHA
      - ssl.SSL_VARIANT_DATAGRAM
      - ssl.SSL_VARIANT_STREAM
      - ssl.SSL_LIBRARY_VERSION_2
      - ssl.SSL_LIBRARY_VERSION_3_0
      - ssl.SSL_LIBRARY_VERSION_TLS_1_0
      - ssl.SSL_LIBRARY_VERSION_TLS_1_1
      - ssl.SSL_LIBRARY_VERSION_TLS_1_2
      - ssl.SSL_LIBRARY_VERSION_TLS_1_3
      - ssl.ssl2
      - ssl.ssl3
      - ssl.tls1.0
      - ssl.tls1.1
      - ssl.tls1.2
      - ssl.tls1.3

     * The following methods were missing thread locks, this has been fixed.

       - nss.nss_initialize
       - nss.nss_init_context
       - nss.nss_shutdown_context


author: John Dennis <jdennis@redhat.com> - 0.16.0-3
changelog:
  - Resolves: #1225212
    Reads from file like objects actually only worked for file objects
  - Resolves: #1179573
    python-nss-doc package is missing the run_tests script
  - Resolves: #1194349
    test_pkcs12.py does not works in FIPS mode


author: Sandro Mani <manisandro@gmail.com> - 1.7.8-3.20130210gite09ff61
changelog:
  - Really remove -fno-strict-aliasing
  - Place comment on how to retreive source just above the Source0 line


author: Sandro Mani <manisandro@gmail.com> - 1.7.8-4.20130305git7866759
changelog:
  - Update to latest git snapshot
  - 0001-Cast-hash-table-values-to-unsigned-long.patch now upstream
  - Pillow-1.7.8-selftest.patch now upstream


author: Sandro Mani <manisandro@gmail.com> - 2.0.0-2.git2e88848
changelog:
  - Update to latest git
  - Remove python-pillow-disable-test.patch, gcc is now fixed
  - Add python-pillow_tempfile.patch to prevent a temporary file from getting packaged


author: Sandro Mani <manisandro@gmail.com> - 2.0.0-6.gitd1c6db8
changelog:
  - Update to latest git
  - python-pillow_quantization.patch now upstream
  - python-pillow_endianness.patch now upstream
  - Add subpackage for ImageQt module, with correct dependencies
  - Add PyQt4 and numpy BR (for generating docs / running tests)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0.0-7.gitd1c6db8
changelog:
  - Remove Obsoletes in the python-pillow-qt subpackage. Obsoletes isn't
    appropriate since qt support didn't exist in the previous python-pillow
    package so there's no reason to drag in python-pillow-qt when updating
    python-pillow.


author: Roman Rakus <rrakus@redhat.com> - 2.0.0-12
changelog:
  - Mark doc subpackage arch dependent. Docs are built depending on supported
    features, which are different across archs.
    Resolves: rhbz#987839


author: - Devrim GUNDUZ <devrim@commandprompt.com> 2.0.2-3
changelog:
  - Removed python dependency, per bugzilla review. (#199784)
  - Changed doc package group, per bugzilla review. (#199784)
  - Replaced dos2unix with sed, per guidelines and bugzilla review (#199784)
  - Fix changelog dates


author: - Devrim GUNDUZ <devrim@commandprompt.com> 2.0.3-2
changelog:
  - Fixed 64 bit builds
  - Fixed license
  - Added Zope subpackage
  - Fixed typo in doc description
  - Added macro for zope subpackage dir


author: - Devrim GUNDUZ <devrim@commandprompt.com> 2.0.3-3
changelog:
  - Fixed zope package dependencies and macro definition, per bugzilla review (#199784)
  - Fixed zope package directory ownership, per bugzilla review (#199784)
  - Fixed cp usage for zope subpackage, per bugzilla review (#199784)


author: Tom Lane <tgl@redhat.com> 2.0.13-2
changelog:
  - Fix rpmlint complaints: remove unneeded explicit Requires:, use Conflicts:
    instead of bogus Obsoletes: to indicate lack of zope subpackage


author: Devrim GUNDUZ <devrim@gunduz.org> - 2.2.1-1
changelog:
  - Update to 2.2.1
  - Improve description for 2.2 features.
  - Changelog for 2.2.0 is: 
     http://initd.org/pub/software/psycopg/ChangeLog-2.2


author: Devrim Gündüz <devrim@gunduz.org> 2.5-1
changelog:
  - Update to 2.5, per changes described at:
    http://www.psycopg.org/psycopg/articles/2013/04/07/psycopg-25-released/


author: Peter Jones <pjones@redhat.com> - 0.5-1
changelog:
  - make it possible to easily build dm maps from dmraid tables
  - support for partition table scanning


author: Peter Jones <pjones@redhat.com> - 0.8-1
changelog:
  - prevent getRaidSets() from returning devices with missing members
  - add "make flat_install" to make installing in RHupdates easier ;)


author: Peter Jones <pjones@redhat.com> - 0.11-1
changelog:
  - never trust dmraid on sync vs nosync; right now, always transform the
    table to "default" (no argument), which is to sync only when necessary,
    whatever that means.  Seems to lock up less often.


author: Peter Jones <pjones@redhat.com> - 0.12-1
changelog:
  - split __init__.py into separate files according to function
  - disable "nosync" hack for now
  - fix a refcounting bug in pydmraid_raidset_get_dm_table()
  - add block.RaidDev.__cmp__()
  - fix some type errors gcc can't check for when using pyblock_potoll
  - be a little pickier about types for mode, devices, and sizes.
  - add make rules for debugging
  - fix "_init__" typo
  - always use local import paths, and be much more strict about namespaces
  - always make a new dm.device in BlockDev.From*()
  - better defaults in BlockDev.create()
  - add setter for block.dmraid.raidset.name, and rework RaidSet.set_name()
  - rework RaidDev.get_bdev()
  - rework "prefix" for RaidSet and RaidDev
  - add getter for block.dmraid.raidset.map
  - change arg order on block.dm.map.__init__() since there's no way to pass
    keyword args through the "abstract" interface.
  - use self.name not self.rs.name in the RaidSet, and make changing the name
    work.
  - make pydm_map_compare() compare names _last_, so we can compare a map
    that's been renamed with its earlier instantiations correctly.
  - mark a device as degraded if there's any descrepancy at all between
    the number of members we find vs what we expect


author: Peter Jones <pjones@redhat.com> - 0.14-1
changelog:
  - remove member partitions when we activate, rebuild them when we deactivate
  - add another "count_devices(ctx->lc, NATIVE)" in discover_raiddevs.  it
    seems to help...


author: Peter Jones <pjones@redhat.com> - 0.17-1
changelog:
  - make multipath support more robust
  - fix leaky file descriptor on volumes without partition tables


author: Peter Jones <pjones@redhat.com> - 0.19-1
changelog:
  - Make RaidSet deactivation work like MultiPath deactivation.  Fixes a
    traceback when removing partition maps.


author: Peter Jones <pjones@redhat.com> - 0.22-1
changelog:
  - Fix partition removal when we've changed the partition table out from
    under a RaidSet or MultiPath.


author: Peter Jones <pjones@redhat.com> - 0.24-1
changelog:
  - add block.load() to load specific bdevid probes instead of always
    doing loadAll() (#208423)
  - make block.getMPaths() return a sorted list (#208337, #208431)


author: Peter Jones <pjones@redhat.com> - 0.25-1
changelog:
  - fix refcounting of map names and partition building for new maps (#210412)
  - fix naming so device names on a single controller are in LUN order


author: Jeremy Katz <katzj@redhat.com> - 0.27-1
changelog:
  - fix build for other python versions, build against python 2.5
  - fix for Py_ssize_t changes in python 2.5


author: Hans de Goede <hdegoede@redhat.com> - 0.33-1
changelog:
  - Allow use as non root (for pychecker)
  - Forward port: "ERROR: only one argument allowed for this option"
    workaround from RHEL-5 (#468649, #474399)


author: Hans de Goede <hdegoede@redhat.com> - 0.34-1
changelog:
  - Add functions that relate dm nodes and dm names (jgranados)
  - Make dmraid devices recursive (fixes dmraid 10 / 01) (jgranados)
  - When importing dm from C-code import it as block.dm, this fixes pyblock
    not working with python 2.6 (hansg)


author: Joel Granados <jgranado@redhat.com> - 0.35-1
changelog:
  - Make pyblock compatible with new pyparted (jgranado).
  - Stop confusing raiddevs and raidsets (hansg).
  - pyparted now trhows an IOException when it does not recognize the part (hansg).
  - Fix traceback when activating already active dmraid set (hansg).
  - Refactor and make functional the getDmDeps and getDmTarget functions (dlehman).
  - Implement compare function for dm-tables (jgranado).


author: Hans de Goede <hdegoede@redhat.com> - 0.37-1
changelog:
  - Handle dmraid dm table's with multiple rows / targets properly, this fixes
    dmraid jbod configurations (hansg)
  - Various small cleanups and bugfixes (hansg)


author: Hans de Goede <hdegoede@redhat.com> - 0.38-1
changelog:
  - Add additional functionality for the anaconda storage rewrite (jgranados)
  - Do not Py_DECREF imported dm module reference (hansg)
  - Only install our own dm_log handler while doing dm stuff (hansg)


author: Joel Granados <jgranado@redhat.com> - 0.41-1
changelog:
  - Make build/tagging easier (jgranados).
  - Do not try to find and activate partitions on raid subsets (hansg).


author: Hans de Goede <hdegoede@redhat.com> - 0.42-1
changelog:
  - Create assertion function to return PyErrors (jgranados)
  - Do a thorough search for the Raid Sets (jgranados)
  - RaidSet.level is broken atm (hansg)


author: Hans de Goede <hdegoede@redhat.com> - 0.44-1
changelog:
  - Use dmraid's status instead of figuring out if a set is degraded ourselves
    (#524168)
  - Fix typo causing backtrace when doing activate deactivate 2x for dmraid 10


author: Hans de Goede <hdegoede@redhat.com> - 0.45-2
changelog:
  - Change python_sitelib macro to use %global as the new rpm will break
    using %define here, see:
    https://www.redhat.com/archives/fedora-devel-list/2010-January/msg00093.html
  - And rename python_sitelib macro to python_sitearch, as that is what it is
    in our case
  - Mark our documentation files as %doc


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 7.18.1-1
changelog:
  - Update to 7.18.1
  - Disable tests because it's not testing the built library, it's trying to
    test an installed library.


