# changelog

author: Milan Zazrivec <mzazrivec@redhat.com> 1.2.1-1
changelog:
  - 623137 - merge translated strings with .desktop file (mzazrivec@redhat.com)
  - update .po and .pot files for rhn-client-tools (msuchy@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.2.2-1
changelog:
  - 625778 - require newer yum-rhn-plugin
  - 554693 - networkRetries should be positive number
  - l10n: Updates to Russian (ru) translation
  - l10n: Updates to Telugu (te) translation


author: Michael Mraka <michael.mraka@redhat.com> 1.2.4-1
changelog:
  - 559797 - fixed configuration file name
  - Sort the available channels so that the listing is not random.


author: Jan Pazdziora 1.2.6-1
changelog:
  - 603028 - when checking package architecture during errata update, allow
    transition to and from noarch.


author: Miroslav Suchý <msuchy@redhat.com> 1.2.7-1
changelog:
  - 632203 - fix comment to corespond with code, decoding unicode to unicode
    produce traceback (msuchy@redhat.com)
  - l10n: Updates to Oriya (or) translation (mgiri@fedoraproject.org)
  - l10n: Updates to Russian (ru) translation (ypoyarko@fedoraproject.org)


author: Miroslav Suchý <msuchy@redhat.com> 1.2.8-1
changelog:
  - 638981 - encode smbios data before sending over xmlrpc (msuchy@redhat.com)
  - l10n: Updates to Russian (ru) translation (ypoyarko@fedoraproject.org)


author: Jan Pazdziora 1.2.11-1
changelog:
  - Update copyright years in the rest of the repo.
  - update .po and .pot files for rhn-client-tools
  - require versions which can handle cache_only (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.3.1-1
changelog:
  - 655310 - replace gethostbyname by getaddrinfo (msuchy@redhat.com)
  - 655310 - send IPv6 addresses to server (msuchy@redhat.com)
  - 481721 - _ts report epoch as int, but satelite and rhn use string, this does
    not work for comparement like pkg in [['name', 'version', 'release', 'epoch',
    'arch']..] (msuchy@redhat.com)
  - Bumping package versions for 1.3. (jpazdziora@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.3.7-1
changelog:
  - update .po and .pot files for rhn-client-tools
  - 651789 - fail if adding/removal of channels fail
  - 651792 - list all available child channels related to system
  - localize spacewalk-channel script
  - 651857 - print error if you specify --add or --remove, but you do not specify
    any channel
  - 651857 - removing forgotten lines, which makes no sense and cause TB
  - 652424 - return back useNoSSLForPackages option
  - 668809 - mention the requirement to use FQDN


author: Miroslav Suchý <msuchy@redhat.com> 1.3.9-1
changelog:
  - Revert "update .po and .pot files for rhn-client-tools"
  - Revert "removing msgctxt which rhel5 could not handle"


author: Tomas Lestach <tlestach@redhat.com> 1.3.10-1
changelog:
  - updating Copyright years for year 2011 (tlestach@redhat.com)
  - update .po and .pot files for rhn-client-tools (tlestach@redhat.com)
  - 602609 - fix DeprecationWarning when using gtk.MessageDialog()
    (mzazrivec@redhat.com)
  - 617066 - fix "Why register" dialog size (msuchy@redhat.com)
  - 667739 - use accessibility tags (msuchy@redhat.com)
  - 626752 - correct virt. type detection for RHEL-6 FV Xen guests
    (mzazrivec@redhat.com)
  - 651403 - reference to RHEL6 as actuall system (msuchy@redhat.com)
  - dead code: removal of function foobar() (msuchy@redhat.com)
  - 649233 - reset busy mouse cursor back to arrow after unexpected error
    (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.3.11-1
changelog:
  - break circular import
  - 580479 - put new submodule into package
  - W: 28: Unused import glade
  - 580479 - Graphical firstboot should offer EUS channel selection
  - 581482 - make tui consistent with gui
  - 596108 - firstboot: don't allow multiple system registrations
  - 606222 - label could not have focus


author: Miroslav Suchý <msuchy@redhat.com> 1.4.1-1
changelog:
  - fix typo
  - 671039 - add warning about subsription manager to TUI part of rhn_register
  - 671039 - add warning about subsription manager to GUI part of rhn_register
  - l10n: Updates to German (de) translation (delouw@fedoraproject.org)
  - 671041 - substitute RHN with "RHN Satellite or RHN Classic"
  - 671032 - disable rhnplugin by default and enable it only after successful
    registration
  - Bumping package versions for 1.4 (tlestach@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.3-1
changelog:
  - Revert "provide path to puplet-screenshot.png" (msuchy@redhat.com)
  - 666860 - remove glade warnings (msuchy@redhat.com)
  - provide path to puplet-screenshot.png (msuchy@redhat.com)
  - move <accessibility> in front of <signal> (msuchy@redhat.com)
  - 580479 - do not let combo box to fill available space (msuchy@redhat.com)
  - 651792 - if system is not registered, print nice error insted of TB
    (msuchy@redhat.com)
  - 651857 - fix typo in variable name (msuchy@redhat.com)
  - 671039 - do not Traceback if system was never registered (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.4.4-1
changelog:
  - 683546 - optparse isn't friendly to translations in unicode
  - update .po files
  - 679217 - mention subscription manager as alternative to rhn_register


author: Miroslav Suchý <msuchy@redhat.com> 1.4.6-1
changelog:
  - 684245 - lookup of the subscription-manager page via localized title is
    volatile, let's use its __module__ name. (jpazdziora@redhat.com)
  - 624748 - report virtual network interfaces (mzazrivec@redhat.com)


author: Simon Lukasik <slukasik@redhat.com> 1.4.12-1
changelog:
  - Move code for enabling yum-rhn-plugin to separate module
    (slukasik@redhat.com)
  - Extract method: setDebugVerbosity (slukasik@redhat.com)
  - Introduce pkgUtils as an abstraction of either debUtils or rpmUtils
    (slukasik@redhat.com)
  - Introduce Debian equivalent of rpmUtils. (slukasik@redhat.com)
  - Removing packages.verifyAll capability; it was never used.
    (slukasik@redhat.com)
  - OS information is platform dependent; introducing a platform interface.
    (slukasik@redhat.com)
  - versionOverride applies only to version; moving to getVersion
    (slukasik@redhat.com)
  - Updated unittests (slukasik@redhat.com)


author: Miroslav Suchý 1.4.13-1
changelog:
  - update copyright years (msuchy@redhat.com)
  - download spacewalk.rhn-client-tools from Transifex (msuchy@redhat.com)


author: Miroslav Suchý 1.5.1-1
changelog:
  - enhance getOSVersionAndRelease to find SUSE distributions (mc@suse.de)
  - Bumping package versions for 1.5 (msuchy@redhat.com)


author: Jan Pazdziora 1.5.2-1
changelog:
  - Revert "some usb device may not return product" (msuchy@redhat.com)
  - fix typo in key "product" vs. "PRODUCT" (msuchy@redhat.com)
  - some usb device may not return product (msuchy@redhat.com)


author: Jan Pazdziora 1.5.3-1
changelog:
  - modify spec file to build rhn-client-tools on SUSE (mc@suse.de)
  - get model id from PRODUCT key (msuchy@redhat.com)
  - <type exceptions.UnboundLocalError>: local variable usb referenced before
    assignment (msuchy@redhat.com)


author: Miroslav Suchý 1.5.8-1
changelog:
  - 683200 - u'foo'.decode('utf-8') does not work, while unicode(u'foo') works
    and is idempotent (msuchy@redhat.com)
  - 683200 - if I want url in unicode, I must us decode - remember that
    (msuchy@redhat.com)


author: Jan Pazdziora 1.5.10-1
changelog:
  - forward port translation from RHEL5 (msuchy@redhat.com)
  - Download translations from Transifex for rhn-client-tools (msuchy@redhat.com)


author: Miroslav Suchý 1.5.11-1
changelog:
  - forward port translation from RHEL5 (msuchy@redhat.com)
  - forward port translation from RHEL5 (msuchy@redhat.com)
  - add missing \n and hyperlink to zh_TW (msuchy@redhat.com)
  - add missing \n and hyperlink to zh_CN (msuchy@redhat.com)
  - fix typo in te.po (msuchy@redhat.com)


author: Miroslav Suchý 1.5.13-1
changelog:
  - forward port translation from RHEL6 (msuchy@redhat.com)
  - forward port translation from RHEL5 (msuchy@redhat.com)


author: Jan Pazdziora 1.5.16-1
changelog:
  - Merging Transifex changes for rhn-client-tools.
  - Fixing the `msgid' and `msgstr' entries do not both end with '\n' bug.
  - Download translations from Transifex for rhn-client-tools.


author: Jan Pazdziora 1.6.1-1
changelog:
  - The rhn-client-tools/doc/releases.txt is out of date, removing.
  - We only support version 5 and newer of RHEL, removing conditions for old
    versions.
  - We only support version 14 and newer of Fedora, removing conditions for old
    versions.


author: Jan Pazdziora 1.6.2-1
changelog:
  - 713548 - enable running rhn-channel on RHEL5 (tlestach@redhat.com)
  - 713548 - enable running rhn-channel against both RHN and RHN Satellite
    (tlestach@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.6.6-1
changelog:
  - 710065 - handle unicode log messages
  - 710065 - handle unicode error messages
  - merged duplicated code to NoLogError class
  - moved duplicated code to base Error class
  - 684250 - correct priority for initial registration screen


author: Jan Pazdziora 1.6.12-1
changelog:
  - 729161 - default to RHSM in firstboot registration (mzazrivec@redhat.com)
  - 729468 - firstboot dialogs polishing (mzazrivec@redhat.com)


author: Miroslav Suchý 1.6.25-1
changelog:
  - 743259 - RHEL5 now has python-ethtool 0.6 - simplify code
  - 743259 - get_ipv6_addresses does not return one item, but list
  - 745438 - up2date_config: use localhost to avoid confusion
    (mzazrivec@redhat.com)


author: Miroslav Suchý 1.6.26-1
changelog:
  - 627809 - send xen virtual block devices to rhnParent
  - Revert "729161 - default to RHSM in firstboot registration"
    (mzazrivec@redhat.com)


author: Miroslav Suchý 1.6.34-1
changelog:
  - call parent's constructor
  - 751760 - use attribute value, which our ancestor use
  - correctly assign converted unicode string
  - correctly check for unicode type


author: Miroslav Suchý 1.6.38-1
changelog:
  - define __init__, __getattribute__, __setattr__ on Debian and workaround those
    mising methods on RHEL5


author: Miroslav Suchý 1.6.39-1
changelog:
  - IPv6: first try findHostByRoute() and then try getaddrinfo()
  - IPv6: assign to hostname only if we are unable to resolve it
  - IPv6: IPv4 is most probably set up better, lets overwrite IPv6 values (if
    mismatch)
  - 743259 - take hostname of client instead of server


author: Miroslav Suchý 1.7.2-1
changelog:
  - 771167 - verify login/password just after user will file it in
  - do not print yum-rhn-plugin warning if zypp-plugin is used
  - removed dead remaining_subscriptions() (michael.mraka@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 1.7.3-1
changelog:
  - 748876 - convert paths to absolute before saving
  - 748876 - simplify ConfigFile.save() loop
  - 751893 - fix typo


author: Miroslav Suchý 1.7.4-1
changelog:
  - 746983 - in spacewalk_channel print to STDERR only error message, TB + error
    goes to log file
  - 745095 - provide virtualization info when registering via rhn_register
    (tlestach@redhat.com)


author: Jan Pazdziora 1.7.13-1
changelog:
  - Update .po and .pot files for rhn-client-tools.
  - Download translations from Transifex for rhn-client-tools.


author: Miroslav Suchý 1.8.1-1
changelog:
  - fix typo in man page
  - 772070 - classic hosted alignment is no longer needed (mzazrivec@redhat.com)
  - 772070 - firstboot gui re-design (mzazrivec@redhat.com)
  - 772070 - correct button text (mzazrivec@redhat.com)
  - 772070 - new title for "cannot contact server" dialog (mzazrivec@redhat.com)
  - 799926 - correct path to rhsm's certlib (mzazrivec@redhat.com)
  - Bumping package versions for 1.8. (jpazdziora@redhat.com)


author: Jan Pazdziora 1.8.2-1
changelog:
  - 804559 - not all msgs are CommunicationError objects (mzazrivec@redhat.com)
  - 804559 - correct string catenation (mzazrivec@redhat.com)


author: Miroslav Suchý 1.8.5-1
changelog:
  - fix files header, filese are not released under GPLv2+ but only GPLv2
  - fix files headers. our code is under gplv2 license
  - %defattr is not needed since rpm 4.4


author: Jan Pazdziora 1.8.21-1
changelog:
  - 823551 - fixing problem with firstboot
  - 823551 - gui and text changes for firstboot and rhn_register
  - 810389 - rhn_register / firstboot gui minor updates
  - 810315 - New "updates availabe" screenshot for firstboot
  - 851657 - polish registration strings
  - 855992 - make rhn-channel smart enough to use proxy if configured
  - 855883 - rhn_check: use gettext correctly when needed


author: Jan Pazdziora 1.8.25-1
changelog:
  - Update the copyright year.
  - Update .po and .pot files for rhn-client-tools.
  - New translations from Transifex for rhn-client-tools.
  - Download translations from Transifex for rhn-client-tools.


author: Michael Calmer <mc@suse.de> 1.9.2-1
changelog:
  - check if system id has changed
  - check if /etc/sysconfig/network is a file
  - no hal for openSUSE >= 11.4


author: Jan Pazdziora 1.9.3-1
changelog:
  - 876740 - updating error message for rhn_register TUI if SSL cert missing
  - 876328 - updating rhel client tools translations
  - 823551 - Download icon in "Are you sure" screen of rhn_register is incorrect


author: Jan Pazdziora 1.9.5-1
changelog:
  - 876328 - Merging the new translation work form RHEL 6.4
  - Revert "876328 - updating rhel client tools translations"


author: Jan Pazdziora 1.9.7-1
changelog:
  - 885170 - provide translations of a new error recieved from Hosted
  - 882174 - read the hostname from /etc/hostname if needed


author: Milan Zazrivec <mzazrivec@redhat.com> 1.9.8-1
changelog:
  - fix reading cpuinfo on s390x
  - try to get the FQDN as hostname
  - Revert "Update rhn_check to send abrt data to the server"
  - Updating copyright for 2012
  - Update .po and .pot files for rhn-client-tools.
  - Download translations from Transifex for rhn-client-tools.


author: Miroslav Suchý <msuchy@redhat.com> 1.10.1-1
changelog:
  - rpm macros must not be marked as config file
  - Bumping package versions for 1.9
  - Purging %changelog entries preceding Spacewalk 1.0, in active packages.


author: Stephen Herr <sherr@redhat.com> 1.10.7-1
changelog:
  - 948337 - Make client tools only pass up cpu_socket if server has capability
  - man pages branding cleanup + misc branding fixes


author: Tomas Kasparek <tkasparek@redhat.com> 1.10.8-1
changelog:
  - rebranding RHN Proxy to Red Hat Proxy in client stuff
  - rebranding RHN Satellite to Red Hat Satellite in client stuff


author: Milan Zazrivec <mzazrivec@redhat.com> 2.0.2-2
changelog:
  - Related: #1038694 - remove text from registration screen
  - Resolves: #1038694 - new error icon in gnome


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.2-7
changelog:
  - Resolves: #1262780 - alow to use existing rpcServer when creating RhnServer
    (jdobes@redhat.com)
  - Resolves: #1292036 - don't mention Spacewalk in rhn-client-tools
    (tkasparek@redhat.com)


author: Gennadii Altukhov <galt@redhat.com> 2.0.2-9
changelog:
  - Resolves: #1371871 - fix UnicodeDecodeError when running rhnreg_ks with a
    different locale than en_US (galt@redhat.com)
  - fix except to be compatible with Python 2.4 (galt@redhat.com)
  - 1260527,1409570 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.2-11
changelog:
  - Resolves: #1444764 - sgmlop module might not be available on RHEL 7
    (tkasparek@redhat.com)
  - Resolves: #1439139 - fix import error (tkasparek@redhat.com)


author: Gennadii Altukhov <grinrag@gmail.com> 2.0.2-12
changelog:
  - Resolves: #1378903 - uptime report: respect xmlrpc's integer limits994531 -
    uptime report: respect xmlrpc's integer limits (mzazrivec@redhat.com)


author: Gennadii Altukhov <grinrag@gmail.com> 2.0.2-13
changelog:
  - Related: #1378903 - uptime report: respect xmlrpc's integer limits1378903 -
    uptime report: respect xmlrpc's integer limits (grinrag@gmail.com)


author: Gennadii Altukhov <grinrag@gmail.com> 2.0.2-14
changelog:
  - Related: #1378903 - fixed BZ ID in a changelog1378903 - fixed BZ ID in a
    changelog (grinrag@gmail.com)


author: Gennadii Altukhov <galt@redhat.com> 2.0.2-15
changelog:
  - Related: #1378903 - fix keywords in a changelog1378903 - fix keywords in a
    changelog (galt@redhat.com)


author: Gennadii Altukhov <galt@redhat.com> 2.0.2-16
changelog:
  - Resolves: #1415742 - rhn-search traceback - immediateTrigger-server exists
    with certain identification1415742 - rhn-search traceback - immediateTrigger-
    server exists with certain identification (eherget@redhat.com)


author: Tomas Lestach <tlestach@redhat.com> 2.0.2-17
changelog:
  - Reverts: bz 1415742 - rhn-search traceback - immediateTrigger-server exists with certain identification" (michael.mraka@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.2-18
changelog:
  - Resolves: #1430298 - rhnreg_ks man page missing documentation for some
    options (ogajduse@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.0.2-19
changelog:
  - Related: #1494389 - detect if action has been picked up for 2nd time
    (tkasparek@redhat.com)
  - Resolves: #1494389 - revert previous reboot loop changes
    (tkasparek@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 4.9.4-1
changelog:
  - l10n: Updates to Czech (cs) translation (msuchy@fedoraproject.org)
  - cleanup - removing translation file, which does not match any language code
    (msuchy@redhat.com)
  - update po files for rhnsd (msuchy@redhat.com)
  - generate new pot file for rhnsd (msuchy@redhat.com)
  - l10n: Updates to Polish (pl) translation (raven@fedoraproject.org)


author: Tomas Lestach <tlestach@redhat.com> 4.9.8-1
changelog:
  - updating Copyright years for year 2011 (tlestach@redhat.com)
  - update .po and .pot files for rhnsd (tlestach@redhat.com)


author: Jan Pazdziora 4.9.12-1
changelog:
  - Merging Transifex changes for rhnsd.
  - New translations from Transifex for rhnsd.
  - Download translations from Transifex for rhnsd.


author: Jan Pazdziora 5.0.4-1
changelog:
  - Update .po and .pot files for rhnsd.
  - New translations from Transifex for rhnsd.
  - Download translations from Transifex for rhnsd.


author: Michael Calmer <mc@suse.de> 5.0.5-1
changelog:
  - use systemd on openSUSE >= 12.1
  - do not start rhnsd in runlevel 2 which has no network
  - no use of /var/lock/subsys/ anymore


author: Jan Pazdziora 5.0.7-1
changelog:
  - Only run chkconfig if we are in the SysV world.
  - rhnsd needs to be marked as forking.
  - When talking to systemctl, we need to say .service.


author: Michael Mraka <michael.mraka@redhat.com> 5.0.10-1
changelog:
  - let rhnsd.service be enabled after installation
  - Purging %changelog entries preceding Spacewalk 1.0, in active packages.


author: Grant Gainey 5.0.13-5
changelog:
  - Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
  - Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
    no need to break init script if they do not exist (jdobes@redhat.com)
  - Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
  - Revert changes in order to clean up tagging issues with brew
    (ggainey@redhat.com)
  - Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
    (ggainey@redhat.com)
  - Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
  - Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
    (ggainey@redhat.com)
  - Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
    no need to break init script if they do not exist (jdobes@redhat.com)
  - Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)


author: Gennadii Altukhov <galt@redhat.com> 5.0.13-6
changelog:
  - 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
  - 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.13-8
changelog:
  - Resolves: #1480306 - change permissions for rhnsd.pid (grinrag@gmail.com)
  - Resolves: #1489989 - umask(0) does not reset to default umask
    (tkasparek@redhat.com)
  - Resolves: #1475039 - close and reopen syslog when redirecting child output
    (martin.matuska@axelspringer.de)


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.13-9
changelog:
  - Related: #1499793 - revert previous reboot loop changes
    (tkasparek@redhat.com)
  - Resolves: #1499793 - Revert "1260527 RHEL7 rhnsd reload doesn't work"
    (tkasparek@redhat.com)


author: Matthias Saou <matthias@rpmforge.net> 0.5.3-3
changelog:
  - Fix category from Development/Libraries to Applications/Multimedia.
  - Use bz2 instead of gz as ftp.gnome.org has both, 300k saved in the src.rpm.
  - Fix SCHEMES vs. SCHEMAS in the post scriplet.
  - Added gstreamer-plugins-devel, libvorbis-devel, scrollkeeper and gettext deps.
  - Removed unnecessary date expansion define.
  - Updated description, including mp3 reference removal.
  - Added libid3tag and flac optional support for convenient rebuild.
  - Removed obsolete omf.make and xmldocs.make (included ones are the same now).


author: Colin Walters <walters@redhat.com> - 0.7.1-1
changelog:
  - New major version - I know we are past major version slush, but
    this should have been done two weeks ago along with the GNOME 2.6
    upload.  As upstream author as well, I believe this version is
    good enough for FC2.
  - Remove --disable-mp3
  - Remove id3, flac variables
  - Remove GStreamer major version patch
  - Fix typo in description


author: Colin Walters <walters@redhat.com> - 0.8.4-1
changelog:
  - New upstream version
  - Remove backported patches
  - Gratuitiously bump various BuildRequires versions


author: Colin Walters <walters@redhat.com> - 0.8.8-3
changelog:
  - Add Bluecurve-ized icons from Jeff Schroeder (157716)
  - Add rhythmbox-0.8.8-cell-renderer.patch to remove use of custom
    cell renderer for playback icon (no longer necessary) and
    changes the rating renderer to work with non-b&w icons


author: Colin Walters <walters@redhat.com>
changelog:
  - Add configure flags --with-bonobo --with-dbus
  - BR nautilus-cd-burner-devel
  - New upstream CVS snapshot for testing
  - Drop IDL file and ui .xml
  - Add dbus service file
  - Drop upstreamed rhythmbox-bluecurve.tar.gz
  - Drop upstreamed rhythmbox-0.8.8-cell-renderer.patch


author: Ray Strode <rstrode@redhat.com> - 0.9.3.1-3
changelog:
  - fix icon on notification bubbles (bug 183720)
  - patch from CVS to escape bubble markup, found by 
    Bill Nottingham


author: Alexander Larsson <alexl@redhat.com> - 0.9.7-7.fc7
changelog:
  - Specfile cleanups from Todd Zullinger
  - Buildrequire gnome-media-devel for gnome-media-profiles.pc
  - Remove explicit libgpod dep
  - install missing artwork image (Gnome BZ #387413)


author: - Bastien Nocera <bnocera@redhat.com> - 0.9.7-8.fc7
changelog:
  - Add patch to make the multimedia keys work with the new control-center
    way of doing things (#197540)


author: - Bastien Nocera <bnocera@redhat.com> - 0.9.7-11.fc7
changelog:
  - Require automake in the BuildRequires as well, as we need to generate
    plugins/mmkeys/Makefile.in


author: - Bastien Nocera <bnocera@redhat.com> - 0.9.8-1.fc7
changelog:
  - Update to 0.9.8, drop unneeded requirements and patches
  - Change iradio default stations location
  - Add new rhythmbox-core library


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.0-1.fc7
changelog:
  - Update to the stable branch 0.10.0, fixes a large number of crashers
  - Add patch for xdg-user-dirs support


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.0-5.fc7
changelog:
  - Set the first time flag on startup, otherwise the iRadio's initial
    playlist is never loaded (Gnoem BZ #431167)


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.2-10
changelog:
  - Add patch to avoid Rhythmbox escaping the primary text in notifications
    as per the spec (#242260)


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.2-12
changelog:
  - Update patch for #242260, tooltips weren't working
  - Add patch to fix problems importing files with spaces in them (#291571)
  - Add patch to remove iPod tracks when removed, rather than put them
    in the trash (#330101)
  - Add upstream patch to support new playlist parser in Totem, and add
    better Podcast support, as well as iTunes podcast support


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.3-6
changelog:
  - Remove stupid return that caused Podcasts never to be updated
    (see http://bugzilla.gnome.org/show_bug.cgi?id=500325)


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.4-10
changelog:
  - Add a patch to fix activating audio players with a directory instead
    of a device path (GNOME bug #519737)


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.4-13
changelog:
  - Big update of the UPNP plugin, with MediaRenderer support
  - Add patch to make the pane window bigger by default (#437066)


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.5-3
changelog:
  - Patch from upstream to fix URL encoding, as soup_encode_uri()
    doesn't encode in place anymore, should fix track submission
    with last.fm


author: Adam Jackson <ajax@redhat.com> 0.11.6-2
changelog:
  - rhythmbox-0.11.5-xfade-buffering.patch: Backport from svn to fix playback
    start when the crossfader is active.


author: - Bastien Nocera <bnocera@redhat.com> 0.11.6-r5956
changelog:
  - Update to latest trunk version, with GIO support and very many
    bug fixes
  - Remove obsoleted patches, autotools and xulrunner-devel BRs


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.6-15.r6005
changelog:
  - Update to rev 6005
  - Fixes typo in the LIRC config
  - Force GConf library location to be a URI on startup


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.6-21.r6096
changelog:
  - Add more Python deps for the UPNP plugin (#474372)
  - Require gstreamer-python-devel, as it's been split from gstreamer-python


author: - Bastien Nocera <bnocera@redhat.com> - 0.11.6-24.r6096
changelog:
  - Use the pulsesink's volume instead of our own one
  - Fix crasher when musicbrainz3 doesn't get a match for an audio CD (#481441)


author: - Bastien Nocera <bnocera@redhat.com> - 0.12.0-2
changelog:
  - Add patch to use decodebin2 instead of decodebin and fix
    playback problems with chained ogg streams (#446283)


author: Bastien Nocera <bnocera@redhat.com> 0.12.4-2
changelog:
  - Remove obsolete configure flags
  - Add libgudev BR
  - Add media-player-info requires (note, not built yet)


author: Richard Hughes <rhughes@redhat.com> - 0.12.5-2
changelog:
  - Apply a patch from upstream to inhibit gnome-session, rather than
    gnome-power-manager. This fixes a warning on rawhide.


author: Adam Williamson <awilliam@redhat.com> 0.13.2-4
changelog:
  - replace Matthias' incomplete patch for libgnome-media-profiles
    with upstream commit dae77ce5437884bec29c90d5ae303816abc18434
    (from gobject-introspection branch), rediffed (configure.ac)


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.91.0-1.git20110207
changelog:
  - Update to a 2.91.0 git snapshot
  - Disable DAAP sharing plugin, as it requires a newer libdmapsharing
  - Depend on gtk3


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.91.0-2.git20110207
changelog:
  - Re-enable DAAP sharing plugin now that we have a newer libdmapsharing
  - Add WebKitGTK 3 to build requires


author: Adam Williamson <awilliam@redhat.com> - 2.90.1-13.git20110822
changelog:
  - update to a newer git snapshot
  - adjust BRs
  	+ libgnome-media-profiles is no longer needed (not used
  	  upstream), but it implied gconf2-devel, so add that
  	+ add clutter-gst, clutter-gtk and libmx for the vis plugin
  	+ bump version of libdmapsharing required
  - package the visualizer plugin


author: Adam Williamson <awilliam@redhat.com> - 2.90.1-15.git20110829
changelog:
  - update to a newer git snapshot to fix another crasher
  - rebuild against new libpeas to make plugins work again (rh #732855)


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.90.1-17.git20110927
changelog:
  - Update to a newer git snapshot
  - Include the new Grilo-based plugin, obsoletes the UPNP and Jamendo plugins


author: Than Ngo <than@redhat.de>
changelog:
  - /etc/rc.d/init.d -> /etc/init.d
  - add condrestart directive
  - fix post/preun/postun scripts
  - prereq initscripts >= 5.20


author: Than Ngo <than@redhat.com>
changelog:
  - fixed so that pppoe script does not kill adsl connection when
    the runlevel is changed. 
  - remove excludearch ia64


author: Than Ngo <than@redhat.com>
changelog:
  - Copyright -> License
  - fix activate ethernet device problem
  - get rid of pppoe initscript, use ifup/ifdown
    to activate/shutdown xDSL connection
  - convert old pppoe config format into new format
  - remove adsl-setup, Users have to use netconf to setup xDSL connection
  - excludearch s390


author: Than Ngo <than@redhat.com> - 3.10-4
changelog:
  - add feature, save and restore all information about default routes bz#191242
  - add startup script for pppoe-server bz#507123


author: Than Ngo <than@redhat.com> - 3.11-1
changelog:
  - 3.11
  - bz#540763, add IP allocation by pppd ability to pppoe-server
  - bz#808676, add missing % symbol for triggerun


author: Steve Dickson <steved@redhat.com> 0.1.4-1
changelog:
  - Initial commit
  - Spec reviewed (bz 228894)
  - Added the Provides/Obsoletes which should
    cause rpcbind to replace portmapper


author: Steve Dickson <steved@redhat.com> 0.1.4-2
changelog:
  - Added dependency on glibc-common which allows the
    rpcinfo command to be installed in the correct place.
  - Added dependency on man-pages so the rpcinfo man 
    pages don't conflict.
  - Added the creation of /var/lib/rpcbind which will be
    used to store state files.
  - Make rpcbind run with the 'rpc' uid/gid when it exists.


author: Jeremy Katz <katzj@redhat.com> - 0.1.4-4
changelog:
  - change man-pages requires into a conflicts as we don't have to have 
    man-pages installed, but if we do, we need the newer version


author: Steve Dickson <steved@redhat.com> 0.1.4-5
changelog:
  - Added dependency on setup which contains the correct
    rpcbind /etc/service entry which in turns stops 
    rpcbind from haning when NIS is enabled. (bz 236865)


author: Steve Dickson <steved@redhat.com> 0.1.4-8
changelog:
  - Fixed typo in init script (bz 248285)
  - Added autoconf rules to turn on secure host checking
    via libwrap. Also turned on host check by default (bz 248284)
  - Changed init script to start service in runlevel 2 (bz 251568)
  - Added a couple missing Requires(pre) (bz 247134)


author: Steve Dickson <steved@redhat.com> 0.1.4-11
changelog:
  - Reworked logic in initscript so the correct exit is 
    used when networking does not exist or is set up
    incorrectly.


author: Steve Dickson <steved@redhat.com> 0.1.4-12
changelog:
  - Changed is_loopback() and check_access() see if the calling
    address is an address on a local interface, just not a loopback
    address (bz 358621).


author: Steve Dickson <steved@redhat.com> 0.1.4-13
changelog:
  - Fixed connectivity with Mac OS clients by making sure handle_reply()
    sets the correct fromlen in its recvfrom() call (bz 244492)


author: Steve Dickson <steved@redhat.com> 0.1.4-14
changelog:
  - Fixed a warning in pmap_svc.c
  - Cleaned up warmstarts so uid are longer needed, also
    changed condrestarts to use warmstarts. (bz 428496)


author: Steve Dickson <steved@redhat.com> 0.1.6-2
changelog:
  - Added usptream patches 01 thru 03 that do:
      * Introduce helpers for ipprot/netid mapping
      * Change how we decide on the netids to use for portmap
      * Simplify port live check in pmap_svc.c


author: Steve Dickson <steved@redhat.com> 0.1.6-3
changelog:
  - Fixed a typo in the rpcbind.init script that stop warm starts
    from happening with conrestarts
  - Fixed scriptlet failure (bz 462533)


author: Steve Dickson <steved@redhat.com> - 0.2.0-2
changelog:
  - Fixed pre scriptle failure during upgrades (bz 507364)
  - Corrected the usage info to match what the rpcbind man
      page says. (bz 466332)
  - Correct package issues (bz 503508)


author: Steve Dickson <steved@redhat.com> - 0.2.0-18
changelog:
  - Fixed typo causing rpcbind to run as root (bz 734598)
  - Added /etc/sysconfig/rpcbind config file (bz 861025)


author: Steve Dickson <steved@redhat.com> - 0.2.0-25
changelog:
  - Fixed some warnings in in6_fillscopeid() (bz 884165)
  - Fixed typo in rpcinfo manpage (bz 963512)
  - Removed unnecessary targets from rpcbind.service  (bz 1036791)


author: Steve Dickson <steved@redhat.com> - 0.2.0-27
changelog:
  - Add nss-altfiles to rpcbind user lookup path (bz 1171291)
  - Add support for systemd socket activation (bz 1203820)
  - Added a tmpfiles.d configuration (bz 1181779)
  - Shutdown cleanly (bz 1174653)


author: Steve Dickson <steved@redhat.com> - 0.2.0-29
changelog:
  - Change RPCBDIR to be /run since that will exist after a
    reboot and bindings wil be perserved during upgrades
    but not reboots. (bz 1240817)


author: Steve Dickson <steved@redhat.com> - 0.2.0-35
changelog:
  - Restart rpcbind.socket on restarts (bz 1303751)
  - Added localhost:111 to rpcbind socket activation (bz 1293430)
  - Soft static allocate rpc uid/gid (bz 1321279)


author: Steve Dickson <steved@redhat.com> - 0.2.0-39
changelog:
  - Added libtirpc dependency (bz 1396291)
  - Removed xlog warning (bz 1377531)
  - Removed an 'i' warning (bz 1377560)


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - adjust for rpmdb index name change
  - drop unnecessary vendor-macro patch for real
  - add ISA-dependencies among rpm subpackages
  - make lzma and sqlite deps conditional and disabled by default for now


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - rpm 4.5.90-0.git8424.1 (alpha snapshot)
  - adjust to build against Berkeley DB 4.5.20 from compat-db for now
  - add posttrans to clean up db environment mismatch after upgrade
  - forward-port devel autodeps patch


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8426.5
  - flip back to external bdb
  - fix tab vs spaces complaints from rpmlint
  - add dep for lzma and require unzip instead of zip in build (#310694)
  - add pkgconfig dependency to rpm-devel
  - drop ISA-dependencies for initial introduction
  - new snapshot from upstream for documentation fixes


author: Florian Festi <ffesti@redhat.com>
changelog:
  - 4.5.90-0.git8426.10
  - rpm-4.5.90-posttrans.patch
  - use header from rpmdb in posttrans to make anaconda happy


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8461.1
  - new snapshot from upstream
  - fixes #68290, #455972, #446202, #453364, #456708, #456103, #456321, #456913,
    - partial fix for #457360


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - add support for noarch subpackages
  - fix segfault in case of insufficient disk space detected (#460146)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - fix parsing of boolean expressions in spec (#456103)
    (unbreaks pam, jpilot and maybe other builds)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - create directory structure for rpmbuild prior to build if it doesn't exist (#455387)
  - create _topdir if it doesn't exist when installing SRPM
  - don't generate broken cpio in case of hardlink pointing on softlink,
    thanks to pixel@mandriva.com


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - add hack to support extracting gstreamer plugin provides (#438225)
  - fix another macro argument handling regression (#461180)


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to official 4.5.90 alpha tarball 
  - a big pile of misc bugfixes + translation updates
  - isa-macro generation fix for ppc (#464754)
  - avoid pulling in pile of perl dependencies for an unused script
  - handle both "invalid argument" and clear env version mismatch on posttrans


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc1 
  - fixes #465586, #466597, #465409, #216221, #466503, #466009, #463447...
  - avoid using %configure macro for now, it has unwanted side-effects on rpm


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - Make noarch sub-packages actually work
  - Fix defaultdocdir logic in installplatform to avoid hardwiring mandir


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc2
  - fixes #471820, #473167, #469355, #468319, #472507, #247374, #426672, #444661
  - enable automatic generation of pkg-config and libtool dependencies #465377


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.2
changelog:
  - change platform sharedstatedir to something more sensible (#185862)
  - add rpmdb_foo links to db utils for documentation compatibility


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.3
changelog:
  - extract mimehandler provides from .desktop files
  - preliminaries for extracting font provides (not enabled yet)
  - dont classify font metrics data as fonts
  - only run script dep extraction once per file, duh


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-1
changelog:
  - update to 4.6.0 final
  - revert libmagic looking into compressed files for now, breaks ooffice build


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-4
changelog:
  - inherit group tag from the main package (#470714)
  - ignore BuildArch tags for anyarch actions (#442105)
  - don't check package BuildRequires when doing --rmsource (#452477)
  - don't fail because of missing sources when only spec removal
    is requested (#472427)


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-5
changelog:
  - remove two offending hunks from anyarch patch causing that
    RPMTAG_BUILDARCHS isn't written to SRPMs


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-7
changelog:
  - loosen up restrictions on dependency names (#455119)
  - handle inter-dependent pkg-config files for requires too (#473814)
  - error/warn on elf binaries in noarch package in build


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-0.beta1.9
changelog:
  - fix recorded file state of otherwise skipped files (#492947)
  - compress ChangeLog, drop old CHANGES file (#492440)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-1
changelog:
  - update to 4.7.0 final (http://rpm.org/wiki/Releases/4.7.0)
  - fixes #494049, #495429
  - dont permit test-suite failure anymore


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-2
changelog:
  - file classification tweaks for text files (#494817)
    - disable libmagic text token checks, it's way too error-prone
    - consistently classify all text as such and include description


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-3
changelog:
  - couple of merge-review fixes (#226377)
    - eliminate bogus leftover rpm:rpm rpmdb ownership
    - unescaped macro in changelog
  - fix find-lang --with-kde with KDE3 (#466009)
  - switch back to default file digest algorithm


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-4
changelog:
  - split cron-job into a sub-package to avoid silly deps on core rpm (#500722)
  - rpm requires coreutils but not in %post
  - build with libcap and libacl
  - fix pgp pubkey signature tag parsing


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-5
changelog:
  - don't mess up problem altNEVR in python ts.check() (#501068)
  - fix hardlink size calculation on build (#503020)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-8
changelog:
  - updated OSGi dependency extractor (#506471)
  - fix segfault in symlink fingerprinting (#505777)
  - fix invalid memory access causing bogus file dependency errors (#506323)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-5
changelog:
  - fix duplicate dependency filtering on build (#490378)
  - permit absolute paths in file lists again (#521760)
  - use permissions 444 for all .debug files (#522194)
  - add support for optional bugurl tag (#512774)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-6
changelog:
  - use relative paths within db environment (related to #507309, #507309...)
  - remove db environment on close in chrooted operation (related to above)
  - initialize rpmlib earlier in rpm2cpio (#523260)
  - fix file dependency tag extension formatting (#523282)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-7
changelog:
  - fix build with BDB 4.8.x by removing XA "support" from BDB backend 
  - perl dep extractor heredoc parsing improvements (#524929)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-8
changelog:
  - support multiple python implementations in brp-python-bytecompile (#531117)
  - make disk space problem reporting a bit saner (#517418)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.2-2
changelog:
  - missing error exit code from signing password checking (#496754)
  - dont fail build on unrecognized data files (#532489)
  - dont try to parse subkeys and secret keys (#436812)
  - fix chmod test on selinux, breaking %{_fixperms} macro (#543035)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.1
changelog:
  - update to 4.8.0-beta1 (http://rpm.org/wiki/Releases/4.8.0)
  - rpm-build conflicts with current ocaml-runtime


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.2
changelog:
  - fix noise from python bytecompile on non-python packages (#539635)
  - make all our -devel [build]requires isa-specific
  - trim out superfluous -devel dependencies from rpm-devel


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-3
changelog:
  - fix segfault on failed url retrieval
  - fix verification error code depending on verbosity level
  - if anything in testsuite fails, dump out the log


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-8
changelog:
  - more fixes to postscript provides extractor (#562228)
  - avoid accessing unrelated mount points in disk space checking (#547548)
  - fix disk space checking with erasures present in transaction (#561160)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-11
changelog:
  - support single PPD providing driver for devices (#568351)
  - merge the psdriver patch pile into one
  - preserve empty lines in spec prep section (#573339)
  - teach python bindings about RPMTRANS_FLAG_NOCONTEXTS (related to #573111)
  - dont own localized man directories through find_lang (#569536)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-15
changelog:
  - handle non-existent dependency sets correctly in python (#593553)
  - make find-lang look in all locale dirs (#584866)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-16
changelog:
  - adjust to new pkg-config behavior wrt private dependencies (#596433)
  - rpm-build now requires pkgconfig >= 0.24


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-1
changelog:
  - update to 4.8.1 (http://rpm.org/wiki/Releases/4.8.1)
  - drop no longer needed patches
  - fix source url pointing to testing directory


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-2
changelog:
  - fix a potential getOutputFrom() error from font provide extraction
  - debug-friendlier message to aid finding other similar cases (#565223)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-5
changelog:
  - create gdb index on debuginfo generation (#617166)
  - rpm-build now requires /usr/bin/gdb-add-index for consistent index creation
  - include COPYING in -apidocs for licensing guidelines compliance


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-7
changelog:
  - bunch of spec tweaks, cleanups + corrections:
    - shorten rpm-build filelist a bit with glob use, reorder for saner grouping
    - missing isa in popt version dependency
    - only add rpmdb_foo symlinks for actually relevant db_* utils
    - drop no longer necessary file-devel dependency from rpm-devel
    - drop sqlite backend build-conditional
    - preliminaries for moving from db4 to libdb
  - use gnupg2 for signing as that's more likely to be installed by default


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.1
changelog:
  - rpm 4.9.0-beta1 (http://rpm.org/wiki/Releases/4.9.0)
    - drop no longer needed patches
    - adjust requires + buildrequires to match current needs
    - adjust rpmdb index ghosts to match the new release
    - split librpmbuild and librpmsign to a separate rpm-build-libs package
    - split rpmsign to its own package to allow signing without all the build goo
    - build-conditionalize plugins, disabled for now
    - gstreamer and printer dependency generation moving out
    - handle .so symlink dependencies with fileattrs
    - use gnupg2 for signing as that's what typically installed by default


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.3
changelog:
  - avoid division by zero in rpmdb size calculation (#671056)
  - fix secondary index iteration returing duplicate at end (#671149)
  - fix rebuilddb creating duplicate indexes for first header


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.5
changelog:
  - dont try to remove environment files if private env used (related to #671200)
  - unbreak mono dependency extraction (#673663)
  - complain instead of silent abort if cwd is not readable (#672576)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.rc1.1
changelog:
  - update to 4.9.0-rc1
  - drop upstream patches
  - nss packaging has changed, buildrequire nss-softokn-freebl-devel


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.rc1.4
changelog:
  - spec cosmetics clean up extra whitespace + group more logically
  - wipe out BDB environment at boot via tmpfiles.d


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-5
changelog:
  - verify some properties of replaced and wrong-colored files (#528383)
  - only list packages that would be generated on spec query (#693338)
  - preferred color packages should be erased last (#680261)
  - fix leaks when freeing a populated transaction set
  - take file state into account for file dependencies


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-8
changelog:
  - add dwarf-4 support to debugedit (#707677)
  - generate build-id symlinks for all filenames sharing a build-id (#641377)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-9
changelog:
  - fix crash if prep or changelog section in spec is empty (#706959)
  - fix crash on macro which undefines itself
  - fix script dependency generation with file 5.07 string changes (#712251)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.1.2-3
changelog:
  - adjust db util prefix & dependency due to #749293
  - warn but dont fail the build if STABS encountered by debugedit (#725378)


author: Kay Sievers <kay@redhat.com> - 4.9.1.2-8
changelog:
  - add temporary rpmlib patch to support filesystem transition
    https://fedoraproject.org/wiki/Features/UsrMove


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.1.2-13
changelog:
  - fix memory corruption on rpmdb size estimation (#766260)
  - fix couple of memleaks in python bindings (#782147)
  - fix regression in verify output formatting (#797964)
  - dont process spec include in false branch of if (#782970)
  - only warn on missing excluded files on build (#745629)
  - dont free up file info sets on test transactions


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11505.5
changelog:
  - add temporary fake library provides to get around deltarpm "bootstrap"
    dependency (yes its dirty)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11519.1
changelog:
  - newer git snapshot to keep patch-count down
  - fixes CVE-2012-0060, CVE-2012-0061 and CVE-2012-0815
  - fix obsoletes in installing set getting matched on provides (#810077)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11536.1
changelog:
  - newer git snapshot (#809402, #808750)
  - adjust posttrans script wrt bdb string change (#803866, #805613)


author: Panu Matilainen <pmatilai@redhat.com> - 4.10.90-0.git11989.1
changelog:
  - update to 4.11 (http://rpm.org/wiki/Releases/4.11.0) post-alpha snapshot
  - drop/adjust patches as necessary


author: Panu Matilainen <pmatilai@redhat.com> - 4.10.90-0.git11989.3
changelog:
  - package /usr/lib/rpm/macros.d directory (related to #846679)
  - fixup a bunch of old incorrect dates in spec changelog


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.0-0.beta1.2
changelog:
  - armv7hl and armv7hnl should not have -mthumb (#901901)
  - fix duplicate directory ownership between rpm and rpm-build (#894201)
  - fix regression on paths shared between a real file/dir and a ghost


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.0.1-2
changelog:
  - check for stale locks when opening write-cursors (#860500, #962750...)
  - serialize BDB environment open/close (#924417)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-1
changelog:
  - update to 4.11.1 (http://rpm.org/wiki/Releases/4.11.1)
  - drop upstreamed patches
  - fix .gnu_debuglink CRC32 after dwz, buildrequire binutils-devel (#971119)
  - ensure relocatable packages always get install-prefix(es) set (#979443)


author: Florian Festi <ffesti@redhat.com> - 4.11.1-4
changelog:
  - Clarify man page about mutually exclusive options (#969505)
  - Move translated rpmgraph man pages to devel sub package (#948861)


author: Florian Festi <ffesti@redhat.com> - 4.11.1-5
changelog:
  - Revert: Clarify man page about mutually exclusive options (#969505)
  - Revert: Move translated rpmgraph man pages to devel sub package (#948861)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-7
changelog:
  - Fix relocation regression wrt unowned directories (#1001553)
  - Fix build-time double-free wrt %caps() on wildcard file entry (#1002089)
  - Fix source URL in spec


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-8
changelog:
  - Fix segfault on empty -p <lua> scriptlet body (#1004062)
  - Add missing dependency on tar to rpm-build (#986539)


author: Florian Festi <ffesti@redhat.com> - 4.11.1-9
changelog:
  - Fix byteorder for 64 bit tags on big endian machines (#1012946)
   - Better RPMSIGTAG_SIZE vs PMSIGTAG_LONGSIZE detection (#1012595)


author: Aldy Hernandez <aldyh@redhat.com> - 4.11.1-17
changelog:
  - Import from rawhide:
    * Tue Oct 01 2013 Panu Matilainen <pmatilai@redhat.com> - 4.11.1-8
    - add support for ppc64le architecture


author: Aldy Hernandez <aldyh@redhat.com> - 4.11.1-18
changelog:
  - Import from rawhide:
    * Wed Jan 15 2013 Panu Matilainen <pmatilai@redhat.com> - 4.11.1-12
    - include ppc64le in %power64 macro (#1052930)


author: Florian Festi <ffesti@redhat.com> - 4.11.3-14
changelog:
  - Enable plugin system but disable collection plugins. Needed for
    systemd-inhibit plugin (#1160401)
  - Move systemd-inhibit plugin into its own sub packge


author: Florian Festi <ffesti@redhat.com> - 4.11.3-18
changelog:
  - Fixed failing upstream test 257 on big endian systems (#1264463)
  - Fixed problems with perl.req script (#1320214, #1275551)
  - Fixed race condition in rpm file deployment when updating an existing file
    (#1320181)
  - Move bdb warnings from stdin to stdout (#1297793)
  - Add --justdb to the erase section of the man page, too (#1310561)
  - Backport support for multi threaded xz compression (#1278924)
  - Update config.guess (#1291377)
  - Add --noplugins option (#1264031)
  - Overwrite a file if it is not marked as config any more (#1290463)
  - Add man page for systemd-inhibit plugin (#1265578)


author: Florian Festi <ffesti@redhat.com> - 4.11.3-22
changelog:
  - Move rpm-plugin-systemd-inhibit man page to that package (#1360706)
  - Fix off by one error in base64 code (#1341913)
  - Add sources to lua to prevent %autosetup failing in some cases (#1359084)
  - Fix refcounting for Python hdr objects (#1358467)
  - Perl dependecy generator: Skip blocks after variable definitions (#1378307)
  - Verify signatures properly (#1371487)
  - Export function in Python binding for yum (#1343692)


author: Florian Festi <ffesti@redhat.com> - 4.11.3-28
changelog:
  - Make sure files in /usr/src/debug are not world writable (RHBZ #1441098)
  - Increase maximal header size (RHBZ #1434656)
  - Increase buffer to be able to render Korean dates (RHBZ #1425231)
  - Add --noconfig option (RHBZ #1406611)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.3-31
changelog:
  - Backport missing infra for --noconfig option (#1406611)
  - As a side-effect, this also makes --noghost work as intended


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 4.11.3-33
changelog:
  - Repair of --noghost option implementation (#1395818)
  - Backport fix rpmSign() return value in case of failure (#1419590)
  - Backport passing _find_debuginfo_opts -g to eu-strip for executables
    (#1540653)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 4.11.3-34
changelog:
  - Adjust --noghost documentation (#1395818)
  - Provide audit events on update verification (#1555326)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 4.11.3-36
changelog:
  - Add popt-based options --setcaps and --restore (#1550745)
  - Improve hardlink handling in disk space calculation (#1491786)
  - Remove perl dependencies that are provided in the same file (#1570181)


author: Matthias Saou <http://freshrpms.net/> 1.0.45-4
changelog:
  - Added epoch to the perl dependency to work with rpm > 4.2.
  - Fixed the % escaping in the perl dep.


author: Matthias Saou <http://freshrpms.net/> 1.0.46-1
changelog:
  - Update to 1.0.46.
  - Use system libpng and zlib instead of bundled ones.
  - Added php-rrdtool sub-package for the php4 module.


author: Matthias Saou <http://freshrpms.net/> 1.0.49-4
changelog:
  - Fix for the php module patch (Joe Pruett, Dag Wieers), #156716.
  - Update source URL to new location since 1.2 is now the default stable.
  - Don't (yet) update to 1.0.50, as it introduces some changes in the perl
    modules install.


author: Jarod Wilson <jwilson@redhat.com> 1.2.13-1
changelog:
  - Update to release 1.2.13
  - Merge spec changes from dag, atrpms and mdk builds
  - Additional hacktastic contortions for lib64 & rpath messiness
  - Add missing post/postun ldconfig
  - Fix a bunch of rpmlint errors
  - Disable static libs, per FE guidelines
  - Split off docs


author: Jarod Wilson <jwilson@redhat.com> 1.2.13-2
changelog:
  - Remove explicit perl dep, version grabbing using rpm during
    rpmbuild not guaranteed to work (fails on ppc in plague),
    and auto-gen perl deps are sufficient


author: Jarod Wilson <jwilson@redhat.com> 1.2.15-3
changelog:
  - One more addition to initrrdtool patch, to fully revert
    and correct upstream changeset 839
  - Fix for no python in minimal fc4 buildroots


author: Jarod Wilson <jwilson@redhat.com> 1.3-0.3.beta3
changelog:
  - Update to rrdtool 1.3 beta3
  - Return properly from errors in RRDp.pm (Resolves: #427040)
  - Requires: dejavu-lgc-fonts (Resolves: #426935)


author: Jarod Wilson <jwilson@redhat.com> 1.3-0.15.rc1
changelog:
  - Update to rrdtool 1.3 rc1
  - Fix versioning in changelog entries, had an extra 0 in there...
  - Drop cairo and python patches, they're in 1.3 rc1
  - Add Requires: gettext and libxml2-devel for new translations


author: Jarod Wilson <jwilson@redhat.com> 1.3.2-1
changelog:
  - Update to rrdtool 1.3.2
    * fixes a data corruption bug when rrd wraps around
    * make imginfo behave the same as docs say it does
    * fixes for numerous memory leaks


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.4-2
changelog:
  - Fixed mixed tabs and spaces rpmlint warning
  - Fixed tcl-site configure option (upstream ticket #281)
  - Removed Rpath from Ruby
  - Enabled Lua bindings (#656080), thanks to Tim Niemueller


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.4.8-1
changelog:
  - New version
    Resolves: rhbz#966639
  - Updated and defuzzified patches
  - Still use lua-5.1 (fedoras < f20)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - rexec needs pam_set_item() (#60).
  - clarify protocol in rexecd.8.
  - add rexec client from contrib.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - expunge all mentions of kerberos authentication or DES encryption using
    kerberos from the man pages


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix PAM config files to always honor nologin and securetty, to use rhosts,
    and to fall back to password auth only for rlogin and rexec (#17183)
  - add references to pam_env to the PAM configs as well (#16170)
  - disable rlogin and rsh by default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - securetty is screwy because rsh doesn't allocate one and rlogin does auth
    before it has a tty, so change the hard-coded TTYs used from "tty" for all
    to "rsh" or "rlogin" or "rexec"


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed really missing BuildPrereq: libtermcap-devel (#49577)
  - Fixed security problem with rexec.pam (#49181)


author: Nalin Dahyabhai <nalin@redhat.com> 0.17-11
changelog:
  - remove directory names from PAM configuration files, allowing them to be used
    for all arches on multilib systems


author: Karel Zak <kzak@redhat.com> 0.17-25
changelog:
  - rexecd uses PAM session now (#68590)
  - fixed errno usage in rcp (#67361)
  - fixed rexec fails with "Invalid Argument" (#118630)


author: Karel Zak <kzak@redhat.com> 0.17-35
changelog:
  - added support for IPv6 (patch by Jan Pazdziora)
  - fix #198632 - add keyinit instructions to the rsh, rlogin and rexec PAM scripts
    (patch by David Howells)
  - fix #191390 - improve linefeed patch


author: Adam Tkac <atkac redhat com> 0.17-40
changelog:
  - improved -D option to rlogind - when name won't be resolved rlogind uses IP address
  - added smp_mflags to make


author: Adam Tkac <atkac redhat com> 0.17-43
changelog:
  - removed -D option from rshd and rlogind (we have -a option when
    we need force reverse DNS lookup)
  - patches netkit-rsh-0.17-nodns.patch and netkit-rsh-0.17-nohostcheck.patch
    are substituted by netkit-rsh-0.17-dns.patch


author: Adam Tkac <atkac redhat com> 0.17-50
changelog:
  - fixed typos in arg_max and audit patches (#445606)
  - use pam_rhosts, not pam_rhosts_auth (#445606)


author: Adam Tkac <atkac redhat com> 0.17-51
changelog:
  - updated ipv6 patch due rpm 4.6 (#465053)
  - make in.rshd working on kernels without audit support (#448904)


author: Adam Tkac <atkac redhat com> - 0.17-59
changelog:
  - merge review related fixes (#226379)
  - remove unused patches
    - netkit-rsh-0.16-pamfix.patch
    - netkit-rsh-0.16-jbj2.patch
    - netkit-rsh-0.16-jbj3.patch


author: Michal Sekletar <msekleta@redhat.com> - 0.17-71
changelog:
  - resolves: RHBZ #737244 #896583 #947213
  - migrate from xinetd to systemd configuration
  - close pam session correctly when client does not ask for separate error channel
  - fix pty handling which was broken by changes in /bin/login


author: Michal Sekletar <msekleta@redhat.com> - 0.17-72
changelog:
  - unit files must not be marked as config files
  - fix handling of non-native IPv6 connections via AF_INET6 socket


author: Michal Ruprich <mruprich@redhat.com> - 0.17-78
changelog:
  - Resolves: #1502657 - Copying remote file to local dir fails with "rcp: protocol screwup: expected control record"
  - Resolves: #1338037 - rsh/rlogin sessions ignore SIGPIPE due to systemd
  - Resolves: #1477207 - rlogin killed when changing run level
  - Resolves: #1503112 - rexecd Could not allocate space for cmdbuf
  - Resolves: #1505226 - have a proposed patch for rsh-0.17-76.el7_1.1


author: John A. Martin <jam@jamux.com>
changelog:
  - Built 1.6.3-2 after finding no rsync-1.6.3-1.src.rpm although there
    was an ftp://ftp.redhat.com/pub/contrib/alpha/rsync-1.6.3-1.alpha.rpm
    showing no packager nor signature but giving 
    "Source RPM: rsync-1.6.3-1.src.rpm".
  - Changes from 1.6.2-1 packaging: added '$RPM_OPT_FLAGS' to make, strip
    to '%build', removed '%prefix'.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix some signed/unsigned issues (<krahmer@suse.de>)
  - tweak ipv6 patch (#55337, <john.l.villalovos@intel.com>)
  - make xinetd file %config(noreplace)


author: Bill Nottingham <notting@redhat.com> 2.5.4-2
changelog:
  - upstream patches: fix accidental use of --whole-file, fix
    minor memory leak, and bad worst-case child kill behavior
  - make passing -e to rsync:// URLs not cause an error exit (#62489)


author: Hardy Merrill <hmerrill@redhat.com> 2.5.6-6
changelog:
  - removed patch rsync-2.5.4-maxdel.patch
  - removed patch rsync-2.4.6-segv.patch
     - current 2.5.6 properly handles (no segfault) the situation
       (rsync '[a]') that caused a need for this patch.
  - added patch rsync-2.5.6-sign.patch, which is a working
    subset of patches (that still apply) included in the original
    rsync-2.5.4-moresignage.patch


author: Hardy Merrill <hmerrill@redhat.com> 2.5.6-15
changelog:
  - add rsync-2.5.6-signal.patch to fix kernel warnings that
    appear because socket.c sets SIGCHLD to SIG_IGN and then
    calls wait.  This is in response to bug#98740.  This patch
    *has* been committed to CVS upstream and will be in
    upstream rsync-2.5.7.


author: Jay Fenlason <fenlason@redhat.com> 2.6.1-1
changelog:
  - Rsync 2.6.1 final.
  - Add a patch from Wayne Davison <wayned@samba.org> that fixes a
    use of uninitilized memory in the map_uid and map_gid functions.
  - Add another patch from Wayne Davidson that fixes the -R option.
  - Add a patch (extracted from a patch by Sami Farin
    <safari-rsync@safari.iki.fi>) to not ignore the return value
    of close().


author: Jay Fenlason <fenlason@redhat.com> 2.6.2-0
changelog:
  - New upstream version to correct the problems with 2.6.1.
    This obsoletes all the patches to 2.6.1


author: Jay Fenlason <fenlason@redhat.com> 2.6.3-0.pre1
changelog:
  - New upstream version with security fix for CAN-2004-0792
  - This obsoletes the -lastdir-corruption patch.


author: Jay Fenlason <fenlason@redhat.com> 2.6.4-3
changelog:
  - Include the -address patch from upstream, to close
    bz#154752 Unable to use --address in client mode


author: Jay Fenlason <fenlason@redhat.com> 2.6.8-2
changelog:
  - New upstream release
  - Use the upstream xattr patch instead of mine.  This closes
    bz#190208 CVE-2006-2083 rsync buffer overflow issue


author: Jay Fenlason <fenlason@redhat.com> 2.6.8-3
changelog:
  - Add my xattrs_bug patch to fix a bug where xattrs don't get sent correctly.
  - Add BuildRequires to make sure libattr-devel and libacl-devel are avaliable
  - replace --with... with --enable... so they actually work
  - Add make, autoconf and gcc to BuildRequires


author: Simo Sorce <ssorce@redhat.com> 3.0.0-0.pre8.fc9
changelog:
  - Eight prerelease
  - Add second source, now patches are in a separate file
  - Add temporary fix to the xattrs.diff patch line as, in this version
    the patch contains one extra humk already contained in acls.diff


author: Michal Luscon <mluscon@redhat.com> 3.0.9-4
changelog:
  - Fixed: #823088 - rsync loses track of files with different directory prefixes
  - Fixed: #495310 - rsync contains forked copy of zlib


author: Pavel Šimerda <psimerda@redhat.com> - 3.0.9-14
changelog:
  - Resolves: #1052814 - rsync command is terminated with SIGSEGV
  - Resolves: #1052814 - add missing patch file


author: Luboš Uhliarik <luhliari@redhat.com> - 3.0.9-17
changelog:
  - Resolves: #1082496 - socket activation for rsync doesn't work (added missing
    rsyncd@.service file)


author: Michal Ruprich - 3.1.2-4
changelog:
  - Related: #1432899 - removing dependencies on perl
  - using the bundled zlib.h(#1491582)
  - turning on upstream tests


author: Michal Ruprich <mruprich@redhat.com> - 3.1.2-10
changelog:
  - Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed


author: Peter Vrabec <pvrabec@redhat.com> 1.17.1-1
changelog:
  - upstream bug fix release
  - include html docs (#248712)
  - make "-r" option compatible with sysklogd config (248982)


author: Tomas Heinrich <theinric@redhat.com> 3.21.3-3
changelog:
  - fix a wrong module name in the rsyslog.conf manual page (#455086)
  - expand the rsyslog.conf manual page (#456030)


author: Peter Vrabec <pvrabec@redhat.com> 3.21.3-4
changelog:
  - use RPM_OPT_FLAGS
  - use same pid file and logrotate file as syslog-ng (#441664)
  - mark config files as noreplace (#428155)


author: Tomas Heinrich <theinric@redhat.com> 4.4.2-1
changelog:
  - upgrade to new upstream stable version 4.4.2
  - add support for arbitrary number of open file descriptors


author: Tomas Heinrich <theinric@redhat.com> 4.4.2-6
changelog:
  - modify rsyslog-4.4.2-unlimited-select.patch so that
    running autoreconf is not needed
  - remove autoconf, automake, libtool from BuildRequires
  - change exec-prefix to nil


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-1
changelog:
  - upgrade to new upstream stable version 4.6.2
  - correct the default value of the OMFileFlushOnTXEnd directive


author: Tomas Heinrich <theinric@redhat.com> 5.5.7-1
changelog:
  - upgrade to upstream version 5.5.7
  - update configuration and init files for the new major version
  - add several directories for storing auxiliary data
  - add ChangeLog to documentation
  - drop unlimited-select.patch; integrated upstream
  - add rsyslog-5.5.7-remove_include.patch to fix compilation


author: Tomas Heinrich <theinric@redhat.com> 5.6.2-1
changelog:
  - upgrade to new upstream stable version 5.6.2
  - drop rsyslog-5.5.7-remove_include.patch; applied upstream
  - provide omsnmp module
  - use correct name for lock file (#659398)
  - enable specification of the pid file (#579411)
  - init script adjustments


author: Tomas Heinrich <theinric@redhat.com> 5.7.9-1
changelog:
  - upgrade to new upstream version 5.7.9
  - enable compilation of several new modules,
    create new subpackages for some of them
  - integrate changes from Lennart Poettering
    to add support for systemd
    - add rsyslog-5.7.9-systemd.patch to tweak the upstream
      service file to honour configuration from /etc/sysconfig/rsyslog


author: Tomas Heinrich <theinric@redhat.com> 5.8.7-1
changelog:
  - upgrade to new upstream version 5.8.7
  - change license from 'GPLv3+' to '(GPLv3+ and ASL 2.0)'
    http://blog.gerhards.net/2012/01/rsyslog-licensing-update.html
  - use a specific version for obsoleting sysklogd
  - add patches for better sysklogd compatibility (taken from upstream)


author: Tomas Heinrich <theinric@redhat.com> 5.8.11-1
changelog:
  - upgrade to new upstream stable version 5.8.11
  - add impstats and imptcp modules
  - include new license text files
  - consider lock file in 'status' action
  - add patch to update information on debugging in the man page
  - add patch to prevent debug output to stdout after forking
  - add patch to support ssl certificates with domain names longer than 128 chars


author: Tomas Heinrich <theinric@redhat.com> 7.2.2-1
changelog:
  - upgrade to upstream version 7.2.2
    update BuildRequires
  - remove patches merged upstream
    rsyslog-5.8.7-sysklogd-compat-1-template.patch
    rsyslog-5.8.7-sysklogd-compat-2-option.patch
    rsyslog-5.8.11-close-fd1-when-forking.patch
  - add patch from Milan Bartos <mbartos@redhat.com>
    rsyslog-7.2.1-msg_c_nonoverwrite_merge.patch
  - remove the rsyslog-sysvinit package
  - clean up BuildRequires, Requires
  - remove the 'BuildRoot' tag
  - split off a doc package
  - compile additional modules (some of them in separate packages):
    elasticsearch
    hiredis
    mmjsonparse
    mmnormalize
    mmaudit
    mmsnmptrapd
    mongodb
  - correct impossible timestamps in older changelog entries
  - correct typos, trailing spaces, etc
  - s/RPM_BUILD_ROOT/{buildroot}/
  - remove the 'clean' section
  - replace post* scriptlets with systemd macros


author: Tomas Heinrich <theinric@redhat.com> 7.3.10-1
changelog:
  - rebase to 7.3.10
  - add a patch to resolve #950088 - ratelimiter segfault, merged upstream
    rsyslog-7.3.10-ratelimit-segv.patch
  - add a patch to correct a default value, merged upstream
    rsyslog-7.3.10-correct-def-val.patch
  - drop patch 5 - fixed upstream


author: Tomas Heinrich <theinric@redhat.com> 7.3.15-1.20130604git6e72fa6
changelog:
  - rebase to an upstream snapshot, effectively version 7.3.15
    plus several more changes
  - drop patches 3, 4 - merged upstream
  - add a patch to silence warnings emitted by the imuxsock module
  - drop the imkmsg plugin
  - enable compilation of additional modules
    imjournal, mmanon, omjournal, omrabbitmq
  - new subpackages: crypto, rabbitmq
  - add python-docutils and autoconf to global BuildRequires
  - drop the option for backwards compatibility from the
    sysconfig file - it is no longer supported
  - call autoreconf to prepare the snapshot for building
  - switch the local message source from imuxsock to imjournal
    the imuxsock module is left enabled so it is easy to swich back to
    it and because systemd drops a file into /etc/rsyslog.d which only
    imuxsock can parse


author: Tomas Heinrich <theinric@redhat.com> 7.4.0-1
changelog:
  - rebase to 7.4.0
  - drop autoconf automake libtool from BuildRequires
  - depends on systemd >= 201 because of the sd_journal_get_events() api
  - add a patch to prevent a segfault in imjournal caused by a bug in
    systemd journal
  - add a patch to prevent an endless loop in the ratelimiter
  - add a patch to prevent another endless loop in the ratelimiter
  - add a patch to prevent a segfault in imjournal for undefined state file
  - add a patch to correctly reset state in the ratelimiter


author: Tomas Heinrich <theinric@redhat.com> 7.4.1-1
changelog:
  - rebase to 7.4.1
    this release adds code that somewhat mitigates damage in cases
    where large amounts of messages are received from systemd
    journal (see rhbz#974132)
  - regenerate patch 0
  - drop patches merged upstream: 4..8
  - add a dependency on the version of systemd which resolves the bug
    mentioned above
  - update option name in rsyslog.conf


author: Tomas Heinrich <theinric@redhat.com> 7.4.2-1
changelog:
  - rebase to 7.4.2
    most importantly, this release fixes a potential vulnerability,
    see http://www.lsexperts.de/advisories/lse-2013-07-03.txt
    the impact should be low as only those using the omelasticsearch
    plugin with a specific configuration are exposed


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-1
changelog:
  - rebase to 7.4.7
    add requirement on libestr >= 0.1.9
    resolves: #836485
    resolves: #1020854
    resolves: #1040036
  - drop patch 4; not needed anymore
    rsyslog-7.4.2-imuxsock-rfc3339.patch
  - install the rsyslog-recover-qi.pl tool
  - fix a typo in a package description
  - add missing defattr directives
  - add a patch to remove references to Google ads in the html docs
    rsyslog-7.4.7-bz1030044-remove-ads.patch
    Resolves: #1030043
  - add a patch to allow numeric specification of UIDs/GUIDs
    rsyslog-7.4.7-numeric-uid.patch
    resolves: #1032198
  - change the installation prefix to "/usr"
    resolves: #1032223
  - fix a bad date in the changelog
    resolves: #1043622
  - resolve a build issue with missing mysql_config by adding
    additional BuildRequires for the mysql package
  - add a patch to resolve build issue on ppc
    rsyslog-7.4.7-omelasticsearch-atomic-inst.patch


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-3
changelog:
  - replace rsyslog-7.3.15-imuxsock-warning.patch
    with rsyslog-7.4.7-bz1053669-imuxsock-wrn.patch
    resolves: #1053669
  - add rsyslog-7.4.7-bz1052266-dont-link-libee.patch to prevent
    linking the main binary with libee
    resolves: #1052266
  - add rsyslog-7.4.7-bz1054171-omjournal-warning.patch to fix
    a condition for issuing a warning in omjournal
    resolves: #1054171
  - drop the "v5" string from the conf file as it's misleading
    resolves: #1040036


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-5
changelog:
  - move the rscryutil man page to the crypto subpackage
    resolves: #1056565
  - add a patch to prevent message loss in imjournal
    rsyslog-7.4.7-bz1038136-imjournal-message-loss.patch
    resolves: #1038136


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-6
changelog:
  - disable the imklog plugin by default
    the patch for rhbz#1038136 caused duplication of kernel messages since the
    messages read by the imklog plugin were now also pulled in from journald
    resolves: #1078654


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-8
changelog:
  - modify the service file to automatically restart rsyslog on failure
    resolves: rhbz#1061322
  - add explicitly versioned dependencies on libraries which do not have
    correctly versioned sonames
    resolves: rhbz#1107839
  - make logrotate tolerate missing log files
    resolves: rhbz#1144465
  - backport the mmcount plugin
    resolves: rhbz#1151037
  - set the default service umask to 0066
    resolves: rhbz#1228192
  - add a patch to make imjournal sanitize messages as imuxsock does it
    resolves: rhbz#743890
  - add a patch to fix a bug preventing certain imuxsock directives from
    taking effect
    resolves: rhbz#1184410
  - add a patch to fix a race condition in directory creation
    resolves: rhbz#1202489


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-9
changelog:
  - update the patch fixing a race condition in directory creation
    resolves: rhbz#1202489
  - improve provided documentation
    - move documentation from all subpackages under a single directory
    - add missing images
    - remove doc files without content
    - add a patch making various corrections to the HTML documentation
    resolves: rhbz#1238713
  - add a patch to prevent division-by-zero errors
    resolves: rhbz#1078878
  - add a patch to clarify usage of the SysSock.Use option
    resolves: rhbz#1143846
  - add a patch to support arbitrary number of listeners in imuxsock
    - drop patch for rhbz#1053669 as it has been merged into this one
    resolves: rhbz#1151041


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-10
changelog:
  - add a patch to prevent field truncation in imjournal
    resolves: rhbz#1101602
  - add a patch to enable setting a default TAG
    resolves: rhbz#1188503
  - add a patch to fix a nonfunction hostname setting in imuxsock
    resolves: rhbz#1184402


author: Radovan Sroka <rsroka@redhat.com> 7.4.7-11
changelog:
  - add patch that resolves config.guess system-recognition on ppc64le architecture
    resolves: rhbz:1254511


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-13
changelog:
  - add a patch to prevent crashes when using multiple rulesets
    resolves: rhbz#1224336
  - add a patch to keep the imjournal state file updated
    resolves: rhbz#1216957
  - add a patch to fix an undefined behavior caused by the maxMessageSize directive
    resolves: rhbz#1214257
  - add a patch to prevent crashes when using rulesets with a parser
    resolves: rhbz#1282687


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-14
changelog:
  - add a patch to prevent loss of partial messages
    resolves: rhbz#1312459
  - add a patch to allow multiple rulesets in imrelp
    resolves: rhbz#1223566
  - add a patch to fix a race condition during shutdown
    resolves: rhbz#1295798
  - add a patch to backport the mmutf8fix plugin
    resolves: rhbz#1146237
  - add a patch to order service startup after the network
    resolves: rhbz#1263853


author: Tomas Heinrich <theinric@redhat.com> 7.4.7-15
changelog:
  - add a patch to make state file handling in imjournal more robust
    resolves: rhbz#1245194
  - add a patch to support wildcards in imfile
    resolves: rhbz#1303617


author: Radovan Sroka <rsroka@redhat.com> - 8.24.0-6
changelog:
  - RHEL 7.4 ERRATUM
  - rsyslog rebase to 8.24
  - added patch to prevent segfault while setting aclResolveHostname
    config options
    resolves: rhbz#1422414
  - added patch to check config variable names at startup
    resolves: rhbz#1427828
  - added patch for str2num to handle empty strings
    resolves: rhbz#1427821
  - fixed typo in added-chdir patch
    resolves: rhbz#1422789
  - added patch to log source process when beginning rate-limiting
    resolves: rhbz#1196230
  - added patch to chdir after chroot
    resolves: rhbz#1422789
  - added patch to remove "inputname" imudp module parameter 
    deprecation warnings
    resolves: rhbz#1403907
  - added patch which resolves situation when time goes backwards
    and statefile is invalid
    resolves rhbz#1088021
  - added a patch to bring back deprecated cmd-line switches and
    remove associated warnings
    resolves: rhbz#1403831
  - added documentation recover_qi.pl
    resolves: rhbz#1286707
  - add another setup for doc package
  - add --enable-generate-man-pages to configure parameters;
    the rscryutil man page isn't generated without it
    https://github.com/rsyslog/rsyslog/pull/469
  - enable mmcount, mmexternal modules
  - remove omruleset and pmrfc3164sd modules


author: Radovan Sroka <rsroka@redhat.com> - 8.24.0-8
changelog:
  RHEL 7.4 ERRATUM
  - added dependency automake autoconf libtool due to yum-builddep
  - reenable omruleset module
    resolves: rhbz#1431615
    resolves: rhbz#1428403
    resolves: rhbz#1427821(fix regression, failed QA)
    resolves: rhbz#1432069
  - resolves: rhbz#1165236
    resolves: rhbz#1419228
    resolves: rhbz#1431616 
    resolves: rhbz#1196230(failed QA)


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-9
changelog:
  RHEL 7.4 ERRATUM
  - added autoreconf call
  - added patch to replace gethostbyname with getaddrinfo call
    resolves: rhbz#1056548(failed QA)


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-10
changelog:
  RHEL 7.4 ERRATUM
  - edited patches Patch19 and Patch21
    resolves: rhbz#1419228(coverity scan problems)
    resolves: rhbz#1056548(failed QA, coverity scan problems)


author: Radovan Sroka <rsroka@redhat.com> - 8.24.0-11
changelog:
  RHEL 7.4 ERRATUM
  - added new patch that backports num2ipv4 due to rhbz#1427821
    resolves: rhbz#1427821
  - enable pmrfc3164sd module
    resolves: rhbz#1431616


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-13
changelog:
  RHEL 7.5 ERRATUM
  - added patch to properly resolve FQDN
    resolves: rhbz#1401456
  - added documentation patch correcting qeues default values
    resolves: rhbz#1459896
  - added patch adjusting log level of journal reloaded msg
    resolves: rhbz#1497985 
  - added patch to prevent crash with invalid set statement
    this also obsoletes patch2 (for 1188503) 
    resolves: rhbz#1462160
  - added patch with nullptr check to prevent ABRT
    resolves: rhbz#1488186


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-14
changelog:
  RHEL 7.5 ERRATUM
  - renamed patch for undocumented recover_qi script to correct bz number
    resolves: rhbz#1507028
  - added patch ensuring relp conneciton is active before closing it
    resolves: rhbz#1505103


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-15
changelog:
  RHEL 7.5 ERRATUM
  - made rsyslog-doc noarch and fixed search on doc regeneration
    resolves: rhbz#1507028


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-16
changelog:
  RHEL 7.5 ERRATUM
  - edited the patch to conform to latest upstream doc
    resolves: rhbz#1459896 (failedQA)
  - disabled 32-bit builds on all arches as they are not shipped
    anymore in RHEL7


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-17
changelog:
  RHEL 7.6 ERRATUM
  - fixed imjournal duplicating messages on log rotation
    resolves: rhbz#1538372
  - re-enabled 32-bit arches to not break dependent packages
    resolves: rhbz#1571850


author: Radovan Sroka <rsroka@redhat.com> - 8.24.0-18
changelog:
  - caching the whole sockaddr structure instead of sin_addr causing memory leak
    resolves: rhbz#1512551


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-19
changelog:
  RHEL 7.6 ERRATUM
  - added new kafka sub-package with enabling of omkafka module
    resolves: rhbz#1482819


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-20
changelog:
  RHEL 7.6 ERRATUM
  - added a patch backporting imfile module rewrite and 
    adding symlink support
  	resolves: rhbz#1531295


author: Noriko Hosoi <nhosoi@redhat.com> - 8.24.0-21
changelog:
  RHEL 7.6 ERRATUM
  resolves: rhbz#1582517 - Buffer overflow in memcpy() in parser.c
  resolves: rhbz#1539193 - RFE: Support for mm kubernetes plugin
  resolves: rhbz#1589924 - RFE: Several fixes for mmkubernetes
  resolves: rhbz#1590582 - mmkubernetes - use version=2 in rulebase files to avoid memory leak
  resolves: rhbz#1507145 - RFE: omelasticsearch support client cert authentication
  resolves: rhbz#1565214 - omelasticsearch needs better handling for bulk index rejections and other errors
  Disables Patch32: rsyslog-8.24.0-rhbz1531295-imfile-rewrite-with-symlink.patch
  Disables Patch34: rsyslog-8.24.0-rhbz1565219-parse-json-into-top-level-fields-in-mess.patch; It BuildRequires/Requires: libfastjson >= 0.99.4-3


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-21
changelog:
  RHEL 7.6 ERRATUM
  - fixed imfile rewrite backport patch, added few more bugfixes
    resolves: rhbz#1531295
  - added also doc patch for omelastic client certs
    resolves: rhbz#1507145
  - cleaned and shortened patch for omelastic error handling
    resolves: rhbz#1565214
  - enabled patch for json top-level parsing
    resolves: rhbz#1565219
  - merged mmkubernetes patches into one and enabled the module
    resolves: rhbz#1539193
    resolves: rhbz#1589924
    resolves: rhbz#1590582


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-22
changelog:
  RHEL 7.6 ERRATUM
  - edited patch for top-level json parsing with bugfix
    resolves: rhbz#1565219
  - renamed doc patches and added/updated new ones for mmkubernetes
    omelasticsearch and json parsing
  - renamed patch fixing buffer overflow in parser - memcpy()
    resolves: rhbz#1582517


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-23
changelog:
  RHEL 7.6 ERRATUM
  - added backport of leading $ support to json-parsing patch
    resolves: rhbz#1565219
  - The required info is already contained in rsyslog-doc package
    so there is no patch for this one
    resolves: rhbz#1553700


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-24
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch with fixes from covscan
    resolves: rhbz#1531295
  - updated mmkubernetes patch with fixes from covscan
    resolves: rhbz#1539193
  - updated imjournal duplicates patch with fixes from covscan
    resolves: rhbz#1538372
  - updated omelastic enhancement patch with fixes from covscan
    resolves: rhbz#1565214


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-26
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch according to early testing
    resolves: rhbz#1531295
  - added patch fixing pid file name in manpage
    resolves: rhbz#1597264
  - updated json-parsing patch with one more bugfix
    resolves: rhbz#1565219


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-27
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch fixing last update regressions
    resolves: rhbz#1531295
  - added patch fixing deadlock in async logging
    resolves: rhbz#1559408
  - added patch fixing NULL access in worktable create
    resolves: rhbz#1600462
  - now putting release number into configure to have it present
    in error messages


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-28
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch fixing next round of regressions
    resolves: rhbz#1531295
    resolves: rhbz#1602156
  - updated mmkubernetes patch with NULL ret-check
    resolves: rhbz#1539193


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-30
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch with next bugfix
    resolves: rhbz#1531295
  - updated imjournal duplicates patch making slower code optional
    and added corresponding doc patch
    resolves: rhbz#1538372


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-31
changelog:
  RHEL 7.6 ERRATUM
  - added new patch fixing ompipe dropping messages when pipe full
    resolves: rhbz#1591819
  - updated mmkubernetes patch to accept non-kubernetes containers
    resolves: rhbz#1539193
    resolves: rhbz#1609023
  - removed json-parsing patches as the bug is now fixed in liblognorm


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-32
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch with no log on EACCES
    resolves: rhbz#1531295
  - removed now needless build-deps


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-33
changelog:
  RHEL 7.6 ERRATUM
  - updated imfile rewrite patch with extended symlink watching
    resolves: rhbz#1531295
  - updated mmkubernetes patch to accept dots in pod name
    resolves: rhbz#1539193


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-35
changelog:
  RHEL 7.7 ERRATUM
  - added patch fixing memory corruption in omfwd module
    resolves: rhbz#1632659
  - added patch fixing imfile sopping monitor after rotation
    resolves: rhbz#1649250
  - added patch addressing imptcp CVE-2018-16881
    resolves: rhbz#1658288


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-36
changelog:
  RHEL 7.7 ERRATUM
  - added patch fixing mmkubernetes halt after pod deletition
    resolves: rhbz#1622767


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-37
changelog:
  RHEL 7.7 ERRATUM
  - edited patch fixing mmkubernetes halt after pod deletition
    (covscan found an issue in previous version)
    resolves: rhbz#1622767
  - added patch stopping flooding logs with journald errors
    resolves: rhbz#1632211
  - added patch stopping flooding logs with symlink false-positives
    resolves: rhbz#1685901
  - added patch stopping memory leak when processing internal msgs
    resolves: rhbz#1666365
  - added documentation patch with info about CRI-O to mmkubernetes
    resolves: rhbz#1625935


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-38
changelog:
  RHEL 7.7 ERRATUM
  - added patch increasing max path size preventing buffer overflow
    with too long paths
    resolves: rhbz#1656860


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-41
changelog:
  RHEL 7.8 ERRATUM
  - added patch and doc-patch with new "fsync" imjournal option
    resolves: rhbz#1696686
  - added patch resolving omelasticsearch crash on "nothing" reply
    resolves: rhbz#1684236


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-44
changelog:
  RHEL 7.8 ERRATUM
  - added patch and doc-patch for new caseSensitive imUDP/TCP option
    resolves: rhbz#1309698


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-46
changelog:
  RHEL 7.8 ERRATUM
  - Support Intermediate Certificate Chains in rsyslog
    resolves: rhbz#1627799
  - fixed WorAroundJournalBug patch to not cause leaks
    resolves: rhbz#1744617
  - added patch fixing possible segfault in rate-limiter
    resolves: rhbz#1744682


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-47
changelog:
  RHEL 7.8 ERRATUM
  - edited imfile truncation detection patch with reression fix
    resolves: rhbz#1744856


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-48
changelog:
  RHEL 7.8 ERRATUM
  - added patch resolving crash on wrong MsgProperty
    resolves: rhbz#1549706
  - added patch resolving CVE in pmaixforward module
    resolves: rhbz#1768320
  - added patch resolving CVE in pmcisconames module
    resolves: rhbz#1768323
  - added patch implementing file ID for imfile
    resolves: rhbz#1763746
  - added patch fixing omelasticsearch with ES 6.X
    resolves: rhbz#1600171


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-49
changelog:
  RHEL 7.8 ERRATUM
  - fixed fsync patch to actually revognize the new option
    resolves: rhbz#1696686 (failedQA)


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-52
changelog:
  RHEL 7.8 ERRATUM
  - edited patch file ID for imfile to not log useless errors
    also improved file-id behavior to adress newly found problems
    resolves: rhbz#1763746


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-53
changelog:
  RHEL 7.9 ERRATUM
  - one more fix for file ID patch to extend to offline behavior
    resolves: rhbz#1806493
  - added patch resoving race in serialization resulting in crash
    resolves: rhbz#1778841


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-55
changelog:
  RHEL 7.9 ERRATUM
  - edited imfile file-id patch to not segfault on selinux block
    resolves: rhbz#1843992


author: Jiri Vymazal <jvymazal@redhat.com> - 8.24.0-57
changelog:
  RHEL 7.9 ERRATUM
  - added patch resolving buffer overflows in select() function
    resolves: rhbz#1858297


author: Wei Liu <alicloud-linux-os@service.aliyun.com> - 8.24.0-57.1
changelog:
  - Rebuild for Alibaba Cloud Linux
  - Save kernel messages in a special file
  - imudp: fix compiler errors (wenyang@linux.alibaba.com)


author: Toru Hoshina <hoshina@best.com>
changelog:
  - Modified SPEC in order to install libruby.a so that it should be used by
    another ruby entention.
  - 2nd release.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/12/2000 CVS).
  - Added manuals and FAQs.
  - Split into ruby, ruby-devel, ruby-tcltk, ruby-docs, irb.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/20/2000 CVS).
  - Removed ruby-list.23190.patch(included into ruby_cvs.patch).
  - Added ruby-dev.10054.patch.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/22/2000 CVS).
  - Removed ruby-dev.10054.patch(included into ruby_cvs.patch).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.6.
  - removed ruby-dev.10123.patch(included into ruby-1.4.6).
  - Added ruby_cvs.2000082901.patch(upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Updated to upstream version 1.6.1.
  - Removed ruby_cvs.2000082901.patch and added ruby_cvs.2000092718.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000092718.patch and added ruby_cvs.2000100218.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100218.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000101117.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101117.patch and added ruby_cvs.2000101901.patch
    (upgraded ruby to latest cvs version).
  - Added ruby-dev.11262.patch.
  - Added ruby-dev.11265.patch.


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101901.patch, added ruby_cvs.2000121413.patch
    (upgraded ruby to latest cvs version).
  - Removed ruby-dev.11262.patch, ruby-dev.11265.patch,
    and ruby-dev.11268.patch (included into above patch).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000121413.patch, added ruby_cvs.2000122019.patch
    (upgraded ruby to latest cvs version).
  - new package: libruby


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000122019.patch, added ruby_cvs.2000122215.patch
    (upgraded ruby to latest cvs version, 1.6.2-preview4).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Applied patch: upgraded to cvs version (2001-01-15):
    fixed minor bugs(e.g. ruby makes extention librares too large...).


author: akira yamada <akira@vinelinux.org>
changelog:
  - fixed bad group for libruby.
  - Applied patch: upgraded to cvs version (2001-02-08):
    fixed minor bugs.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.6.4-2
changelog:
  - Remove Japanese description and summaries; they belong in specspo and
    break rpm
  - Clean up specfile
  - Mark language specific files (README.jp) as such
  - bzip2 sources
  - rename the libruby package to ruby-libs for consistency
  - Exclude ia64 (doesn't build - the code doesn't seem to be 64-bit clean
    [has been excluded on alpha forever])


author: Akira TAGOH <tagoh@redhat.com> 1.6.6-1
changelog:
  - New upstream release.
  - Applied bug fix patches:
    - ruby-1.6.6-501-ruby-mode.patch: ruby-talk#30479: disables font-lock
      coloring.
    - ruby-1.6.6-100.patch: ruby-talk#30203: Ruby 1.6.6 bug and fix
                            ruby-list#33047: regex bug
                            PR#230: problem with -d in 1.6.6
  - Added ruby-mode and ruby-mode-xemacs packages.
  - Ruby works fine for ia64. so re-enable to build with ia64.
    (probably it should be worked for alpha)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-1
changelog:
  - New upstream release.
  - ruby-1.6.6-100.patch, ruby-1.6.6-501-ruby-mode.patch:
    removed. these patches no longer should be needed.
  - ruby-1.6.7-500-marshal-proc.patch: applied a fix patch.
    (ruby-dev#16178: Marshal::dump should call Proc#call.)
  - ruby-1.6.7-501-class-var.patch: applied a fix patch.
    (ruby-talk#35157: class vars broken in 1.6.7)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-2
changelog:
  - ruby-man-1.4.6-jp.tar.bz2: removed.
  - ruby-refm-rdp-1.4.7-ja-html.tar.bz2: uses it instead of.
  - ruby-1.6.7-500-marshal-proc.patch, ruby-1.6.7-501-class-var.patch:
    removed.
  - ruby-1.6.7-100.patch: applied a bug fix patch.
    (ruby-dev#16274: patch for 'wm state')
    (PR#206ja: SEGV handle EXIT)
  - ruby-1.6.7-101.patch: applied a bug fix patch.
    (ruby-list#34313: singleton should not be Marshal.dump'ed)
    (ruby-dev#16411: block local var)
  - ruby-1.6.7-102.patch: applied a bug fix patch.
    (handling multibyte chars is partially broken)
  - ruby-1.6.7-103.patch: applied a bug fix patch.
    (ruby-dev#16462: preserve reference for GC, but link should be cut)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-10
changelog:
  - moved sitedir to /usr/lib/ruby/site_ruby again according as our perl and
    python.
  - ruby-1.6.7-resolv1.patch, ruby-1.6.7-resolv2.patch: applied to fix 'Too many
    open files - "/etc/resolv.conf"' issue. (Bug#64830)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-11
changelog:
  - use %configure macro instead of configure script.
  - use the latest config.{sub,guess}.
  - get archname from rbconfig.rb for %dir
  - applied some patches from Debian:
    - 801_extmk.rb-shellwords.patch: use Shellwords
    - 801_mkmf.rb-shellwords.patch: mkmf.rb creates bad Makefile. the Makefile
      links libruby.a to the target.
    - 803_sample-fix-shbang.patch: all sample codes should be
      s|/usr/local/bin|/usr/bin|g
    - 804_parse.y-new-bison.patch: fix syntax warning.
    - 805_uri-bugfix.patch: uri.rb could not handle correctly broken mailto-uri.
  - add ExcludeArch x86_64 temporarily to fix Bug#74581. Right now ruby can't be
    built on x86_64.


author: Elliot Lee <sopwith@redhat.com> 1.6.7-13
changelog:
  - Remove ExcludeArch: x86_64
  - Fix x86_64 ruby with long2int.patch (ruby was assuming that sizeof(long)
    == sizeof(int). The patch does not fix the source of the problem, just
    makes it a non-issue.)
  - _smp_mflags


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-1
changelog:
  - New upstream release.
  - removed some patches. it's no longer needed.
    - ruby-1.6.7-100.patch
    - ruby-1.6.7-101.patch
    - ruby-1.6.7-102.patch
    - ruby-1.6.7-103.patch
    - 801_extmk.rb-shellwords.patch
    - 801_mkmf.rb-shellwords.patch
    - 804_parse.y-new-bison.patch
    - 805_uri-bugfix.patch
    - ruby-1.6.6-900_XXX_strtod.patch
    - ruby-1.6.7-sux0rs.patch
    - ruby-1.6.7-libobj.patch


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-2
changelog:
  - ruby-1.6.8-require.patch: applied to fix the search bug in require.
  - don't apply long2int patch to s390 and s390x. it doesn't work.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-7
changelog:
  - fix the gcc warnings. (#82192)
  - ruby-1.6.8-fix-x86_64.patch: correct a patch.
    NOTE: DON'T USE THIS PATCH FOR BIG ENDIAN ARCHITECTURE.
  - ruby-1.6.7-long2int.patch: removed.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-9
changelog:
  - ruby-1.6.8-castnode.patch: handling the nodes with correct cast.
    use this patch now instead of ruby-1.6.8-fix-x86_64.patch.


author: Akira TAGOH <tagoh@redhat.com> 1.8.1-1
changelog:
  - New upstream release.
  - don't use any optimization for ia64 to avoid the build failure.
  - ruby-1.8.1-ia64-stack-limit.patch: applied to fix SystemStackError when the optimization is disabled.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-9
changelog:
  - ruby-1.8.1-cgi-dos.patch: security fix [CAN-2004-0983]
  - ruby-1.8.1-cgi_session_perms.patch: security fix [CAN-2004-0755]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-1
changelog:
  - New upstream release.
  - ruby-1.8.1-ia64-stack-limit.patch: removed - it's no longer needed.
  - ruby-1.8.1-cgi_session_perms.patch: likewise.
  - ruby-1.8.1-cgi-dos.patch: likewise.
  - generated Ruby interactive documentation - senarated package.
    it's now provided as ri package. (#141806)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-7
changelog:
  - ruby-1.8.2-deadcode.patch: removed the dead code from the source. (#146108)
  - make sure that all documentation files in ruby-docs are the world-
    readable. (#147279)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-9
changelog:
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: fixed the arbitrary command execution
    on XMLRPC server. (#161096)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-1
changelog:
  - New upstream release.
  - Build-Requires xorg-x11-devel instead of XFree86-devel.
  - ruby-multilib.patch: applied for only 64-bit archs.
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: removed. it has already been in upstream.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-3
changelog:
  - fixed the wrong file list. the external library for tcl/tk was included
    in ruby-libs unexpectedly.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-4
changelog:
  - moved the documents from ruby-libs to ruby-docs, which contains the arch
    specific thing and to be multilib support. (#168826)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-0.4.preview2
changelog:
  - updates to 1.8.4-preview2.
  - renamed the packages to ruby-* (#175765)
    - irb  -> ruby-irb
    - rdoc -> ruby-rdoc
    - ri   -> ruby-ri
  - added tcl-devel and tk-devel into BuildRequires.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-1
changelog:
  - New upstream release.
    - fixed a missing return statement. (#140833)
    - fixed an use of uninitialized variable. (#144890)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-3
changelog:
  - ruby-1.8.4-no-eaccess.patch: backported from ruby CVS to avoid conflict
    between newer glibc. (#179835)


author: Akira TAGOH <tagoh@redhat.com>
changelog:
  - ruby-rubyprefix.patch: moved all arch-independent modules under /usr/lib/ruby
    and keep arch-dependent modules under /usr/lib64/ruby for 64bit archs.
    so 'rubylibdir', 'sitelibdir' and 'sitedir' in Config::CONFIG points to
    the kind of /usr/lib/ruby now. (#184199)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-6
changelog:
  - ruby-deprecated-search-path.patch: added the deprecated installation paths
    to the search path for the backward compatibility.
  - added a Provides: ruby(abi) to ruby-libs.
  - ruby-1.8.4-64bit-pack.patch: backport patch from upstream to fix unpack("l")
    not working on 64bit arch and integer overflow on template "w". (#189350)
  - updated License tag to be more comfortable, and with a pointer to get more
    details, like Python package does. (#179933)
  - clean up.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-7
changelog:
  - exclude ppc64 to make ruby-mode package. right now emacs.ppc64 isn't provided
    and buildsys became much stricter.
  - ruby-deprecated-sitelib-search-path.patch: applied to add more search path
    for backward compatiblity.
  - added byacc to BuildReq. (#194161)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-11
changelog:
  - security fixes [CVE-2006-3694]
    - ruby-1.8.4-fix-insecure-dir-operation.patch:
    - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure
      operations in the certain safe-level restrictions. (#199538)
    - ruby-1.8.4-fix-alias-safe-level.patch: fixed to not bypass the certain
      safe-level restrictions. (#199543)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-1
changelog:
  - New upstream release.
  - removed the unnecessary patches:
    - ruby-1.8.4-no-eaccess.patch
    - ruby-1.8.4-64bit-pack.patch
    - ruby-1.8.4-fix-insecure-dir-operation.patch
    - ruby-1.8.4-fix-insecure-regexp-modification.patch
    - ruby-1.8.4-fix-alias-safe-level.patch
  - build with --enable-pthread except on ppc.
  - ruby-1.8.5-hash-memory-leak.patch: backported from CVS to fix a memory leak
    on Hash. [ruby-talk:211233]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-4
changelog:
  - security fix release.
  - ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that
    causes the denial of service. (#212396)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.36-3
changelog:
  - ruby-r12567.patch: backport patch from upstream svn to get rid of
    the unnecessary declarations. (#245446)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.110-1
changelog:
  - New upstream release.
    - ruby-r12567.patch: removed.
  - ruby-1.8.6-CVE-2007-5162.patch: security fix for Net::HTTP that is
    insufficient verification of SSL certificate.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.110-2
changelog:
  - Enable pthread support for ppc too. (#201452)
  - Fix unexpected dependencies appears in ruby-libs. (#253325)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.111-1
changelog:
  - New upstream release.
  - ruby-1.8.6.111-CVE-2007-5162.patch: Update a bit with backporting the changes
     at trunk to enable the fix without any modifications on the users' scripts.
     Note that Net::HTTP#enable_post_connection_check isn't available anymore.
     If you want to disable this post-check, you should give OpenSSL::SSL::VERIFY_NONE
     to Net::HTTP#verify_mode= instead of.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.111-3
changelog:
  - Clean up the spec file.
  - Remove ruby-man-1.4.6 stuff. this is entirely the out-dated document.
    this could be replaced by ri.
  - Disable the static library building.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.114-1
changelog:
  - Security fix for CVE-2008-1145.
  - Improve a spec file. (#226381)
    - Correct License tag.
    - Fix a timestamp issue.
    - Own a arch-specific directory.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.230-1
changelog:
  - New upstream release.
  - Security fixes. (#452295)
    - CVE-2008-1891: WEBrick CGI source disclosure.
    - CVE-2008-2662: Integer overflow in rb_str_buf_append().
    - CVE-2008-2663: Integer overflow in rb_ary_store().
    - CVE-2008-2664: Unsafe use of alloca in rb_str_format().
    - CVE-2008-2725: Integer overflow in rb_ary_splice().
    - CVE-2008-2726: Integer overflow in rb_ary_splice().
  - ruby-1.8.6.111-CVE-2007-5162.patch: removed.
  - Build ruby-mode package for all archtectures.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.230-3
changelog:
  - Backported from upstream SVN to fix a segfault issue. (#452825)
  - Backported from upstream SVN to fix an integer overflow in rb_ary_fill.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.287-1
changelog:
  - New upstream release.
  - Security fixes.
    - CVE-2008-3655: Ruby does not properly restrict access to critical
                     variables and methods at various safe levels.
    - CVE-2008-3656: DoS vulnerability in WEBrick.
    - CVE-2008-3657: Lack of taintness check in dl.
    - CVE-2008-1447: DNS spoofing vulnerability in resolv.rb.
    - CVE-2008-3443: Memory allocation failure in Ruby regex engine.
  - Remove the unnecessary backported patches.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.383-4
changelog:
  - Use bison to regenerate parse.c to keep the original format of error
    messages (bug 530275 comment 4)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.383-5
changelog:
  - Change mkmf.rb to use LIBRUBYARG_SHARED so that have_library() works
    without libruby-static.a (bug 428384)
  - And move libruby-static.a to -static subpackage


author: Jeroen van Meeuwen <j.van.meeuwen@ogd.nl> - 1.8.6.388-8
changelog:
  - Backport openssl/digest functions providing digest and hexdigest functions
    directly in OpenSSL::Digest.methods
  - Make sure that Red Hat people version their changelog entries
  - This is actually release #1, but now needs to be release #7


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-2
changelog:
  - tcltk: Give up using potentially unmaintained ruby_1_8_6 branch
    and instead completely replace with ruby_1_8 branch head
    (at this time, using rev 27738)
    (seems to fix 560053, 590503)
  - Fix Japanese encoding strings under ruby-tcltk/ext/tk/sample/


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-3
changelog:
  - ruby-1.8.x-null-class-must-be-Qnil.patch (bug 530407)
  - Recreate some patches using upstream svn when available, and
    add some comments for patches


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-4
changelog:
  - Patch36 (ruby-1.8.x-RHASH_SIZE-rb_hash_lookup-def.patch)
    also backport rb_hash_lookup definition (bug 592936)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-5
changelog:
  - Retry for bug 559158, Simplify the OpenSSL::Digest class
    pull more change commits from ruby_1_8 branch


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.249-3
changelog:
  - Integrated Jim Meyering's feedback and changes in to:
  - remove trailing blanks
  - placate rpmlint
  - ruby_* definitions: do not use trailing slashes in directory names
  - _normalized_cpu: simplify definition


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-1
changelog:
  - integrate more of jmeyering's and mtaska's feedback
  - removed emacs bits that are now shipped with the emacs package
  - various patch and spec cleanup
  - rebased to ruby 1.8.7 patch 299, removed patches no longer needed:
     ruby-1.8.7-openssl-1.0.patch, ruby-1.8.7-rb_gc_guard_ptr-optimization.patch


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-2
changelog:
  - readded bits to pull tk package from upstream source branch
  - removed unecessary .tk.old dir
  - renamed macros which may cause confusion, removed unused ones


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-3
changelog:
  - updated packaged based on feedback (from mtasaka)
  - added comments to all patches / sources
  - obsoleted ruby-mode, as it's now provided by the emacs package itself
  - readded missing documentation
  - various small compatability/regression fixes


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.7.299-4
changelog:
  - Cleanup spec file
  - Make -irb, -rdoc subpackage noarch
  - Make dependencies between arch-dependent subpackages isa specific
  - Improve sample documentation gathering


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.7.302-1
changelog:
  - Update to 1.8.7.302
  - CVE-2010-0541 (bug 587731) is fixed in this version
  - Update ext/tk to the latest head


author: Mamoru Tasaka <mtasaka@fedoraproject.org> - 1.8.7.352-1
changelog:
  - Update to 1.8.7 p352
  - CVE-2011-2686 is fixed in this version (bug 722415)
  - Update ext/tk to the latest git
  - Remove duplicate path entry (bug 718695)


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-2
changelog:
  - Install RubyGems outside of Ruby directory structure.
  - RubyGems has not its own -devel subpackage.
  - Enhanced macros.ruby and macros.rubygems.
  - All tests are green now (bkabrda).


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-4
changelog:
  - Bundled gems moved into dedicated directories and subpackages.
  - Create and own RubyGems directories for binary extensions.
  - Fix build with GCC 4.7.


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-5
changelog:
  - Initial release of Ruby 1.9.3.
  - Add rubygems dependency on io-console for user interactions.
  - Gems license clarification.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.286-19
changelog:
  - Update to 1.9.3 p286
  - Don't create files when NUL-containing path name is passed
    (bug 865940, CVE-2012-4522)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.327-21
changelog:
  - Update to 1.9.3.327
  - Fix Hash-flooding DoS vulnerability on MurmurHash function
    (CVE-2012-5371)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.374-27
changelog:
  - Update to 1.9.3 p374
  - Fix provided variables in pkgconfig (bug 789532:
    Vít Ondruch <vondruch@redhat.com>)


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-0.1.r39387
changelog:
  - Upgrade to Ruby 2.0.0 (r39387).
  - Introduce %gem_install macro.
  - Build against libdb instead of libdb4 (rhbz#894022).
  - Move native extensions from exts to ruby directory.
  - Enable most of the PPC test suite.
  - Change ruby(abi) -> ruby(release).
  - Rename ruby executable to ruby-mri, to be prepared for RubyPick.
  - Add ruby(runtime_executable) virtual provide, which is later used
    by RubyPick.
  - RDoc now depends on JSON.
  - Try to make -doc subpackage noarch again, since the new RDoc should resolve
    the arch dependent issues (https://github.com/rdoc/rdoc/issues/71).
  - Enable SystemTap support.
  - Add TapSet for Ruby.
  - Split Psych into rubygem-psych subpackage.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-1
changelog:
  - Update to Ruby 2.0.0-p0.
  - Change %{ruby_extdir} to %{ruby_extdir_mri} in preparation for better
    JRuby support.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-3
changelog:
  - Avoid "method redefined;" warnings due to modified operating_system.rb.
  - Fix strange paths created during build of binary gems.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-7
changelog:
  - Macro definition moved into macros.ruby and macros.rubygems files.
  - Added filtering macros.
  - Filter automatically generated provides of private libraries (rhbz#947408).


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.195-8
changelog:
  - Update to Ruby 2.0.0-p195 (rhbz#917374).
  - Fix object taint bypassing in DL and Fiddle (CVE-2013-2065).
  - Fix build against OpenSSL with enabled ECC curves.
  - Add aarch64 support (rhbz#926463).


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-9
changelog:
  - Update to Ruby 2.0.0-p247 (rhbz#979605).
  - Fix CVE-2013-4073.
  - Fix for wrong makefiles created by mkmf (rhbz#921650).
  - Add support for ABRT autoloading.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-13
changelog:
  - Fixes multilib conlicts of .gemspec files.
  - Make symlinks for psych gem to ruby stdlib dirs (rhbz#979133).
  - Use system-wide cert.pem.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-14
changelog:
  - Add forgotten psych.rb link into rubygem-psych to fix "private method `load'
    called for Psych:Moduler" error (rhbz#979133).


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-15
changelog:
  - Fix version regex algorithmic complexity vulnerability (CVE-2013-4287).
    - Resolves: rhbz#1006429


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-16
changelog:
  - Fix version regex algorithmic complexity vulnerability (CVE for incomplete
    fix for CVE-2013-4287) (CVE-2013-4363).
    - Related: rhbz#1006429


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-17
changelog:
  - Heap overflow in floating point parsing (CVE-2013-4164).
    * ruby-2.0.0-p353-CVE-2013-4164-ignore-too-long-fraction-part.patch
    - Resolves: rhbz#1033503
  - Allow MD5 in OpenSSL tests.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-18
changelog:
  - Fix FTBFS due to expired certificate for IMAP test case.
  - Fix test_aes_gcm_wrong_tag random failures.
    - Resolves: rhbz#1048899


author: Josef Stribny <jstribny@redhat.com> - 2.0.0.353-22
changelog:
  - Fix FTBFS with new tzdata
    Resolves: rhbz#1144023
  - Fix FTBFS due to a support for RFC 5649 in OpenSSL
    Resolves: rhbz#1145692


author: Josef Stribny <jstribny@redhat.com> - 2.0.0.353-23
changelog:
  - Add missing patch for new tzdata
    Related: rhbz#1144023
  - Add missing patch for RFC 5649 in OpenSSL
    Related: rhbz#1145692


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.598-24
changelog:
  - Rebased to Ruby 2.0.0-p598.
    * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
        default-.gems.patch; subsumed
    * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
        subsumed
    * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
        -succ.patch; subsumed
    * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
    Resolves: rhbz#1071187
  - Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
    Resolves: rhbz#1164000
  - Fix for Proxy Realm feature.
    Resolves: rhbz#1122140
  - Fix off-by-one stack-based buffer overflow in the encodes() function
    (CVE-2014-4975).
    Related: rhbz#1164000


author: Pavel Valena <pvalena@redhat.com> - 2.0.0.648-26
changelog:
  - Rebase to Ruby 2.0.0-p648
    Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
    * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
        with-DESTDIR.patch; subsumed
    * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
    * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
        fails.patch; subsumed
  - Remove tests depending on europe/moscow to avoid failures due to tzdata change
    https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
  - Add checks for systemtap, abrt hook and rubygems version
  - Fix significant hash table performance slowdown on ppc64le
    Resolves: rhbz#1163032
  - Support in no_proxy for domain names with whitespaces and leading dots
    Resolves: rhbz#1300433


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-30
changelog:
  - Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
    failures with newest openssl.
    Resolves: rhbz#1416123
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Extend 'gem_' macros for pre-release version support.
    Resolves: rhbz#1397390
  - Make symlinks for json gem.
    Resolves: rhbz#1308992


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-31
changelog:
  - Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
    * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
        -vulnerability.patch
    Resolves: CVE-2017-0903
  - Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
    Resolves: CVE-2017-0899
  - Fix a DOS vulernerability in the query command (CVE-2017-0900).
    Resolves: CVE-2017-0900
  - Fix a vulnerability in the gem installer that allowed a malicious gem
      to overwrite arbitrary files (CVE-2017-0901).
    Resolves: CVE-2017-0901
  - Fix a DNS request hijacking vulnerability (CVE-2017-0902).
    * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
    Resolves: CVE-2017-0902
  - Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
    * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
    Resolves: CVE-2017-0898
  - Escape sequence injection vulnerability in the Basic
      authentication of WEBrick (CVE-2017-10784).
    * ruby-2.2.8-sanitize-any-type-of-logs.patch
    Resolves: CVE-2017-10784
  - Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
    * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
    Resolves: CVE-2017-14064
  - Command injection vulnerability in Net::FTP (CVE-2017-17405).
    * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
    Resolves: CVE-2017-17405
  - Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
    * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
    Resolves: CVE-2017-14033
  - Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
      execution(CVE-2017-17790).
    * ruby-2.5.0-Fixed-command-Injection.patch
    Resolves: CVE-2017-17790


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-32
changelog:
  - Add Psych.safe_load
    * ruby-2.1.0-there-should-be-only-one-exception.patch
    * ruby-2.1.0-Adding-Psych.safe_load.patch
    Related: CVE-2017-0903
  - Disable Tokyo TZ tests broken by recen tzdata update.
    * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
    Related: CVE-2017-0903


author: Jun Aruga <jaruga@redhat.com> - 2.0.0.648-35
changelog:
  - Kill bundled certificates.
  - Add macros to edit files lists in .gemspec
  - Fix buffer under-read in String#unpack
    Resolves: CVE-2018-8778
  - Fix HTTP response splitting in WEBrick
    Resolves: CVE-2017-17742
  - Fix DoS by large request in WEBrick
    Resolves: CVE-2018-8777
  - Fix directory traversal by poisoned NULL byte in Dir.
    Resolves: CVE-2018-8780
  - Fix file and directory creation with directory traversal.
    Resolves: CVE-2018-6914
  - Fix socket creation by poisoned NULL byte.
    Resolves: CVE-2018-8779
  - Fix: return default path with nonexistent home dir
  - Fix flags not propagated in Array#pack and String#unpack.
    Resolves: CVE-2018-16396
  - Fix strictly interpret octal fields in tar headers.
    Resolves: CVE-2018-1000075
  - Fix a security error for duplicate files in a package.
    Resolves: CVE-2018-1000076
  - Enforce URL validation on spec homepage attribute.
    Resolves: CVE-2018-1000077
  - Mitigate XSS vulnerability in homepage attribute.
    Resolves: CVE-2018-1000078
  - Prevent Path Traversal issue during gem installation.
    Resolves: CVE-2018-1000079
  - Fix unsafe Object Deserialization Vulnerability in gem owner.
    Resolves: CVE-2018-1000074
  - Refresh expired certificates.
  - Fix path traversal when writing to a symlinked basedir outside of the root
    Resolves: CVE-2018-1000073


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.648-36
changelog:
  - Introduce `Gem::UserInteraction#verbose` method as precondition to fix
    CVE-2019-8321.
    * rubygems-2.3.0-refactor-checking-really_verbose.patch
  - Fix escape sequence injection vulnerability in verbose.
  - Fix escape sequence injection vulnerability in gem owner.
    Resolves: CVE-2019-8322
  - Fix escape sequence injection vulnerability in API response handling.
    Resolves: CVE-2019-8323
  - Prohibit arbitrary code execution when installing a malicious gem.
    Resolves: CVE-2019-8324
  - Fix escape sequence injection vulnerability in errors.
    Resolves: CVE-2019-8325
    * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed bug #17065 where rusersd wrongly terminated each string with a '\0'.
  - Fixed bug #53244. Now stats for the different protocols are stored separately.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed the wrong uptime problem introduced by fixing bug #53244.
  - Fixed segfault problem on alpha (and other archs) (bug #53309).


author: Phil Knirsch <pknirsch@redhat.com> 0.17-20
changelog:
  - Fixed the sort ordering for rup -l host1 host2 host3 (#67551)
  - Don't use configure anymore, doesn't work in build environment correctly.


author: Steve Dickson <steved@redaht.com> 0.17-51
changelog:
  - Removed portmap dependency and re-worked when the user
    privilege are drop; allowing port registration with
    rpcbind. (#247985)


author: Honza Horak <hhorak@redhat.com> - 0.17-66
changelog:
  - added rpcbind ordering dependencies in service files
  - fixed systemd related mistakes in spec file


author: Honza Horak <hhorak@redhat.com> - 0.17-70
changelog:
  - Minor spec file changes
  - Use new systemd macros (Resolves: #850302)
  - Use systemd notify messages


author: Honza Horak <hhorak@redhat.com> - 0.17-77
changelog:
  - Free already alocated memory when parsing of RPC request failed
  - Require systemd instead of systemd-units
  - Remove SysV init converting


author: Petr Kubat <pkubat@redhat.com> - 0.17-81
changelog:
  - Remove execute permissions from *.service files (#1422022)
  - Fix wrong Source url (#1418690)
  - Add BSD license text (#1418686)


author: Phil Knirsch <pknirsch@redhat.com> 0.17-23
changelog:
  - Fixed long standig bug with only 42 entries per host showing up (#27643)
  - Fixed some warnings of missing prototypes.


author: Honza Horak <hhorak@redhat.com> - 0.17-37
changelog:
  - systemd unit file mod fix
    removed non-essential Requires: /sbin/chkconfig /etc/init.d
  - allow longer hostnames (bug #212076)
  - add -n option to ruptime manpage


author: John H Terpstra <jht@samba.anu.edu.au>
changelog:
  - Many optimisations (some suggested by Manoj Kasichainula <manojk@io.com>
  - Use of chkconfig in place of individual symlinks to /etc/rc.d/init/smb
  - Compounded make line
  - Updated smb.init restart mechanism
  - Use compound mkdir -p line instead of individual calls to mkdir
  - Fixed smb.conf file path for log files
  - Fixed smb.conf file path for incoming smb print spool directory
  - Added a number of options to smb.conf file
  - Added smbadduser command (missed from all previous RPMs) - Doooh!
  - Added smbuser file and smb.conf file updates for username map


author: Erik Troan <ewt@redhat.com>
changelog:
  - made the %postun script a tad less agressive; no reason to remove
    the logs or lock file (after all, if the lock file is still there,
    samba is still running)
  - the %postun and %preun should only exectute if this is the final
    removal
  - migrated %triggerpostun from Red Hat's samba package to work around
    packaging problems in some Red Hat samba releases


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add a mount.smb to make smb mounting a little easier.
  - smb filesystems apparently don't work on alpha. Oops.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.0.5
  - fix mount.smb - smbmount options changed again.........
  - fix postun. oops.
  - update some stuff from the samba team's spec file.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - use cp rather than mv to preserve /etc/services perms (#4938 et al).
  - use mktemp to generate /etc/tmp.XXXXXX file name.
  - add prereqs on sed/mktemp/killall (need to move killall to /bin).
  - fix trigger syntax (i.e. "samba < 1.9.18p7" not "samba < samba-1.9.18p7")


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix yp_get_default_domain in autoconf
  - only link against readline for smbclient
  - fix log rotation (#9909)


author: Than Ngo <than@redhat.de>
changelog:
  - add initdir macro to handle the initscript directory
  - add a new macro to handle /etc/pam.d/system-auth


author: Bill Nottingham <notting@redhat.com>
changelog:
  - move initscript back
  - remove 'Using Samba' book from %doc 
  - move stuff to /etc/samba (#13708)
  - default configuration tweaks (#13704)
  - some logrotate tweaks


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix swat only_from line (#18726, others)
  - fix attempt to write outside buildroot on install (#17943)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set a default CA certificate path in smb.conf (#19010)
  - require openssl >= 0.9.5a-20 to make sure we have a ca-bundle.crt file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - i18n-ize initscript
  - add a sysconfig file for daemon options (#23550)
  - clarify smbpasswd man page (#23370)
  - build with LFS support (#22388)
  - avoid extraneous pam error messages (#10666)
  - add Urban Widmark's bug fixes for smbmount (#19623)
  - fix setgid directory modes (#11911)
  - split swat into subpackage (#19706)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak the PAM code some more to try to do a setcred() after initgroups()
  - pull in all of the optflags on i386 and sparc
  - don't explicitly enable Kerberos support -- it's only used for password
    checking, and if PAM is enabled it's a no-op anyway


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to samba 2.2.0
  - moved codepages to %{_datadir}/samba/codepages
  - use all available CPUs for building rpm packages
  - use %{_xxx} defines at most places in spec-file
  - "License:" replaces "Copyright:"
  - dropped excludearch sparc
  - de-activated japanese patches 100 and 200 for now 
    (they need to be fixed and tested wth 2.2.0)
  - separated swat.desktop file from spec-file and added
    german translations
  - moved /etc/sysconfig/samba to a separate source-file
  - use htmlview instead of direct call to netscape in 
    swat.desktop-file


author: Helge Deller <hdeller@redhat.de>
changelog:
  - build as 2.2.0-1 release
  - skip the documentation-directories docbook, manpages and yodldocs
  - don't include *.sgml documentation in package
  - moved codepage-directory to /usr/share/samba/codepages
  - make it compile with glibc-2.2.3-10 and kernel-headers-2.4.2-2


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - (these changes are from the non-head version)
  - Don't include /usr/sbin/samba, it's the same as the initscript
  - unset TMPDIR, as samba can't write into a TMPDIR owned
    by root (#41193)
  - Add pidfile: lines for smbd and nmbd and a config: line
    in the initscript  (#15343)
  - don't use make -j
  - explicitly include /usr/share/samba, not just the files in it


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Use /var/cache/samba instead of /var/lock/samba 
  - Remove "domain controller" keyword from smb.conf, it's 
    deprecated (from #13704)
  - Sync some examples with smb.conf.default
  - Fix password synchronization (#16987)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include smbpasswd in samba, it's in samba-common (#51598)
  - Add a disabled "obey pam restrictions" statement - it's not
    active, as we use encrypted passwords, but if the admin turns
    encrypted passwords off the choice is available. (#31351)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-3
changelog:
  - Add "--with-utmp" to configure options (#55372)
  - Include winbind, pam_smbpass.so, rpcclient and smbcacls
  - start using /var/cache/samba, we need to keep state and there is
    more than just locks involved


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-5
changelog:
  - Teach smbadduser about "getent passwd" 
  - Fix more pid-file references
  - Add (conditional) winbindd startup to the initscript, configured in
    /etc/sysconfig/samba


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-6
changelog:
  - Move winbind files to samba-common. Add separate initscript for
    winbind 
  - Fixes for winbind - protect global variables with mutex, use
    more secure getenv


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.3a-3
changelog:
  - include interfaces.o in pam_smbpass.so, which needs symbols from interfaces.o
    (patch posted to samba-list by Ilia Chipitsine)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.5-7
changelog:
  - Enable VFS support and compile the "recycling" module (#69796)
  - more selective includes of the examples dir


author: Jay Fenlason <fenlason@redhat.com> 2.2.7a-3
changelog:
  - edited spec file to put .so files in the correct directories
    on 64-bit platforms that have 32-bit compatability issues
    (sparc64, x86_64, etc).  This fixes bugzilla #83782.
  - Added samba-2.2.7a-error.patch from twaugh.  This fixes
    bugzilla #82454.


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.7a-4
changelog:
  - relink libnss_wins.so with SHLD="%{__cc} -lnsl" to force libnss_wins.so to
    link with libnsl, avoiding unresolved symbol errors on functions in libnsl


author: Jay Fenlason <fenlason@redhat.com> 2.2.8-0
changelog:
  - Upgrade to 2.2.8
  - removed commented out patches.
  - removed old patches and .md5 files from the repository.
  - remove duplicate /sbin/chkconfig --del winbind which causes
    warnings when removing samba.
  - Fixed minor bug in smbprint that causes it to fail when called with
    more than 10 parameters: the accounting file (and spool directory
    derived from it) were being set wrong due to missing {}.  This closes
    bug #86473.
  - updated smb.conf patch, includes new defaults to close bug #84822.


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-1
changelog:
  - upgrade to 2.2.8a
  - remove old .md5 files
  - add "pid directory = /var/run" to the smb.conf file.  Fixes #88495
  - Patch from jra@dp.samba.org to fix a delete-on-close regression


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-2
changelog:
  - add libsmbclient.so for gnome-vfs-extras
  - Edit specfile to specify /var/run for pid files
  - Move /tmp/.winbindd/socket to /var/run/winbindd/socket


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-3beta3
changelog:
  - Merge from 3.0.0-2beta3.3E
  - (Correct log file names (#100981).)
  - (Fix pidfile directory in samab.log)
  - (Remove obsolete samba-3.0.0beta2.tar.bz2.md5 file)
  - (Move libsmbclient to the -common package (#99449))


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-15
changelog:
  - New 3.0.0 final release
  - merge nmbd-netbiosname and testparm patches from 3E branch
  - updated the -logfiles patch to work against 3.0.0
  - updated the pie patch
  - update the VERSION file during build
  - use make -j if avaliable
  - merge the winbindd_privileged change from 3E
  - merge the "rm /usr/lib" patch that allows Samba to build on 64-bit
    platforms despite the broken Makefile


author: Felipe Alfaro Solana <felipe_alfaro@linuxmail.org> 3.0.1-1
changelog:
  - Update to 3.0.1
  - Removed testparm patch as it's already merged
  - Removed Samba.7* man pages
  - Fixed .buildroot patch
  - Fixed .pie patch
  - Added new /usr/bin/tdbdump file


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-3rc2
changelog:
  - add %dir entries for %{_libdir}/samba and %{_libdir}/samba/charset
  - Upgrade to new upstream version
  - build mount.cifs for the new cifs filesystem in the 2.6 kernel.


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-5
changelog:
  - New upstream version: 3.0.2 final includes security fix for #114995
    (CAN-2004-0082)
  - Edit postun script for the -common package to restart winbind when
    appropriate.  Fixes bugzilla #114051.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Change all requires lines to list an explicit epoch.  Closes #102715
  - Add an explicit Epoch so that %{epoch} is defined.


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-1.pre1
changelog:
  - New upstream version.
  - Updated -pie and -logfiles patches for 3.0.3pre1
  - add krb5-devel to buildrequires, fixes #116560
  - Add patch from Miloslav Trmac (mitr@volny.cz) to allow non-root to run
    "service smb status".  This fixes #116559


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-2.pre2
changelog:
  - New upstream version  
  - Updated configure line to remove --with-fhs and to explicitly set all
    the directories that --with-fhs was setting.  We were overriding most of
    them anyway.  This closes #118598


author: jay Fenlason <fenlason@redhat.com> 3.0.3-3.rc1
changelog:
  - New upstream version
  - updated spec file to make libsmbclient.so executable.  This closes
    bugzilla #121356


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-5
changelog:
  - Patch to allow password changes from machines patched with
    Microsoft hotfix MS04-011.
  - Include patches for https://bugzilla.samba.org/show_bug.cgi?id=1302
    and https://bugzilla.samba.org/show_bug.cgi?id=1309


author: Jay Fenlason <fenlason@redhat.com> 3.0.5.0pre1.0
changelog:
  - New upstream version
  - use % { SOURCE1 } instead of a hardcoded path
  - include -winbind patch from Gerald (Jerry) Carter (jerry@samba.org)
    https://bugzilla.samba.org/show_bug.cgi?id=1315
    to make winbindd work against Windows versions that do not have
    128 bit encryption enabled.
  - Moved %{_bindir}/net to the -common package, so that folks who just
    want to use winbind, etc don't have to install -client in order to
    "net join" their domain.
  - New upstream version obsoletes the patches added in 3.0.3-5
  - Remove smbgetrc.5 man page, since we don't ship smbget.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-0.pre1.1
changelog:
  - Backport base64_decode patche to close CAN-2004-0500
  - Backport hash patch to close CAN-2004-0686
  - use_authtok patch from Nalin Dahyabhai <nalin@redhat.com>
  - smbclient-kerberos patch from Alexander Larsson <alexl@redhat.com>
  - passwd patch uses "*" instead of "x" for "hashed" passwords for
    accounts created by winbind.  "x" means "password is in /etc/shadow" to
    brain-damaged pam_unix module.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-2
changelog:
  - Upgrade to 3.0.5, which is a regression from 3.0.5pre1 for a
    security fix.
  - Include the 3.0.4-backport patch from the 3E branch.  This restores
    some of the 3.0.5pre1 and 3.0.5rc1 functionality.


author: Jason Vas Dias <jvdias@redhat.com> 3.0.5-3
changelog:
  - Removed '-pie' patch - 3.0.5 uses -fPIC/-PIC, and the combination
  - resulted in executables getting corrupt stacks, causing smbmnt to
  - get a SIGBUS in the mount() call (bug 127420).


author: Jay Fenlason <fenlason@redhat.com> 3.0.6-3
changelog:
  - New upstream version.
  - Include post 3.0.6 patch from "Gerald (Jerry) Carter" <jerry@samba.org>
    to fix a duplicate in the LDAP schema.
  - Include 64-bit timestamp patch from Ravikumar (rkumar@hp.com)
    to allow correct timestamp handling on 64-bit platforms and fix #126109.
  - reenable the -pie patch.  Samba is too widely used, and too vulnerable
    to potential security holes to disable an important security feature
    like -pie.  The correct fix is to have the toolchain not create broken
    executables when programs compiled -pie are stripped.
  - Remove obsolete patches.
  - Modify this spec file to put libsmbclient.{a,so} in the right place on
    x86_64 machines.


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-3
changelog:
  - Upgrade to 3.0.7, which fixes CAN-2004-0807 CAN-2004-0808
    This obsoletes the 3.0.6-schema patch.
  - Update BuildRequires line to include openldap-devel openssl-devel
    and cups-devel


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-4
changelog:
  - Update docs section to not carryover the docs/manpages directory
    This moved many files from /usr/share/doc/samba-3.0.7/docs/* to
    /usr/share/doc/samba-3.0.7/*
  - Modify spec file as suggested by Rex Dieter (rdieter@math.unl.edu)
    to correctly create libsmbclient.so.0 and to use %_initrddir instead
    of rolling our own.  This closes #132642
  - Add patch to default "use sendfile" to no, since sendfile appears to
    be broken
  - Add patch from Volker Lendecke <vl@samba.org> to help make
    ldapsam_compat work again.
  - Add patch from "Vince Brimhall" <vbrimhall@novell.com> for ldapsam_compat
    These two patches close bugzilla #132169


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include patch from Steven Lawrance (slawrance@yahoo.com) that modifies
    smbmnt to work with 32-bit uids.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.2
changelog:
  - Re-enable the x_fclose patch that was accidentally disabled
    in 3.0.8-0.pre1.1.  This closes #135832
  - include Nalin's -fqdn and -salt patches.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.3
changelog:
  - disable the -salt patch, because it causes undefined references in
    libsmbclient that prevent gnome-vfs from building.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-2
changelog:
  - New upstream version fixes CAN-2004-0930.  This obsoletes the
    disable-sendfile, salt, signing-shortkey and fqdn patches.
  - Add my <fenlason@redhat.com> ugly non-ascii-domain patch.
  - Updated the pie patch for 3.0.8.
  - Updated the logfiles patch for 3.0.8.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3
changelog:
  - Include the corrected docs tarball, and use it instead of the
    obsolete docs from the upstream 3.0.8 tarball.
  - Update the logfiles patch to work with the updated docs.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3.1
changelog:
  - Rescue the install.mount.smbfs patch from Juanjo Villaplana
    (villapla@si.uji.es) to prevent building the srpm from trashing your
    installed /usr/bin/smbmount


author: Than Ngo <than@redhat.com> 3.0.8-4
changelog:
  - fix unresolved symbols in libsmbclient which caused applications
    such as KDE's konqueror to fail when accessing smb:// URLs. #139894


author: Jay Fenlason <fenlason@redhat.com> 3.0.9-2
changelog:
  - New upstream release.  This obsoletes the -secret patch.
    Include my changetrustpw patch to make "net ads changetrustpw" stop
    aborting.  This closes #134694
  - Remove obsolete triggers for ancient samba versions.
  - Move /var/log/samba to the -common rpm.  This closes #76628
  - Remove the hack needed to get around the bad docs files in the
    3.0.8 tarball.
  - Change the comment in winbind.init to point at the correct pidfile.
    This closes #76641


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-2
changelog:
  - New upstream release that closes CAN-2004-1154  bz#142544
  - Include the -64bit patch from Nalin.  This closes bz#142873
  - Update the -logfiles patch to work with 3.0.10
  - Create /var/run/winbindd and make it part of the -common rpm to close
    bz#142242


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-4
changelog:
  - Update the -man patch to fix ntlm_auth.1 too.
  - Move pam_smbpass.so to the -common package, so both the 32
    and 64-bit versions will be installed on multiarch platforms.
    This closes bz#143617
  - Added new -delim patch to fix mount.cifs so it can accept
    passwords with commas in them (via environment or credentials
    file) to close bz#144198


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-3
changelog:
  - add -gcc4 patch to compile with gcc 4.
  - remove the now obsolete -smbclient-kerberos.patch
  - Include four upstream patches from
    http://samba.org/~jerry/patches/post-3.0.11/
    (Slightly modified the winbind_find_dc_v2 patch to apply easily with
    rpmbuild).


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-4
changelog:
  - Use the updated filter-requires-samba.sh file, so we don't accidentally
    pick up a dependency on perl(Crypt::SmbHash)


author: Jay Fenlason <fenlason@redhat.com> 3.0.13-2
changelog:
  - New upstream release
  - add my -quoting patch, to fix swat with strings that contain
    html meta-characters, and to use correct quote characters in
    lists, closing bz#134310
  - include the upstream winbindd_2k3sp1 patch
  - include the -smbclient patch.
  - include the -hang patch from upstream.


author: Jay Fenlason <fenlason@redhat.com> 3.0.14a-2
changelog:
  - New upstream release.
  - the -64bit-timestamps, -clitar, -establish_trust, user_rights_v1,
    winbind_find_dc_v2 patches are now obsolete.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20-2
changelog:
  - New upstream release
    Includes five upstream patches -bug3010_v1, -groupname_enumeration_v3,
      -regcreatekey_winxp_v1, -usrmgr_groups_v1, and -winbindd_v1
    This obsoletes the -pie and -delim patches
    the -warning and -gcc4 patches are obsolete too
    The -man, -passwd, and -smbspool patches were updated to match 3.0.20pre1
    Also, the -quoting patch was implemented differently upstream
    There is now a umount.cifs executable and manpage
    We run autogen.sh as part of the build phase
    The testprns command is now gone
    libsmbclient now has a man page
  - Include -bug106483 patch to close
    bz#106483 smbclient: -N negates the provided password, despite documentation
  - Added the -warnings patch to quiet some compiler warnings.
  - Removed many obsolete patches from CVS.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20b-2
changelog:
  - turn on -DLDAP_DEPRECATED to allow access to ldap functions that have
    been depricated in 2.3.11, but which don't have well-documented
    replacements (ldap_simple_bind_s(), for example).
  - Upgrade to 3.0.20b, which includes all the previous upstream patches.
  - Updated the -warnings patch for 3.0.20a.
  - Include  --with-shared-modules=idmap_ad,idmap_rid to close
    bz#156810 --with-shared-modules=idmap_ad,idmap_rid
  - Include the new samba.pamd from Tomas Mraz (tmraz@redhat.com) to close
    bz#170259 pam_stack is deprecated


author: Jay Fenlason <fenlason@redhat.com> 3.0.21b-2
changelog:
  - New upstream version.
  - Since the rawhide kernel has dropped support for smbfs, remove smbmount
    and smbumount.  Users should use mount.cifs instead.
  - Upgrade to 3.0.21b


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-0.RC3
changelog:
  - New upstream RC release.
  - Update the -logfiles, and -passwd patches for
    3.0.23rc3
  - Include the change to smb.init from Bastien Nocera <bnocera@redhat.com>)
    to close
    bz#182560 Wrong retval for initscript when smbd is dead
  - Update this spec file to build with 3.0.23rc3
  - Remove the -install.mount.smbfs patch, since we don't install
    mount.smbfs any more.


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-2
changelog:
  - New upstream release.
  - Use modified filter-requires-samba.sh from packaging/RHEL/setup/
    to get rid of bogus dependency on perl(Unicode::MapUTF8)
  - Update the -logfiles and -smb.conf patches to work with 3.0.23


author: Jay Fenlason <fenlason@redhat.com> 3.0.23a-3
changelog:
  - Fix the -logfiles patch to close
    bz#199607 Samba compiled with wrong log path.
    bz#199206 smb.conf has incorrect log file path


author: Simo Sorce <ssorce@redhat.com> 3.0.24-2.fc7
changelog:
  - New upstream release
  - Fix packaging issue wrt idmap modules used only by smbd
  - Addedd Vista Patchset for compatibility with Windows Vista
  - Change default of "msdfs root", it seem to cause problems with
    some applications and it has been proposed to change it for
    3.0.25 upstream


author: Simo Sorce <ssorce@redhat.com> 3.0.24-3.fc7
changelog:
  - Directories reorg, tdb files must go to /var/lib, not
    to /var/cache, add migration script in %post common
  - Split out libsmbclient, devel and doc packages
  - Remove libmsrpc.[h|so] for now as they are not really usable
  - Remove kill -HUP from rotate, samba use -HUP for other things
    noit to reopen logs


author: Simo Sorce <ssorce@redhat.com> 3.0.24-5.fc7
changelog:
  - actually use the correct samba.pamd file not the old samba.pamd.stack file
  - fix logifles and use upstream convention of log.* instead of our old *.log
    Winbindd creates its own log.* files anyway so we will be more consistent
  - install our own (enhanced) default smb.conf file
  - Fix pam_winbind acct_mgmt PAM result code (prevented local users from
    logging in). Fixed by Guenther.
  - move some files from samba to samba-common as they are used with winbindd
    as well


author: Simo Sorce <ssorce@redhat.com> 3.0.24-6.fc7
changelog:
  - do not put comments inline on smb.conf options, they may be read
    as part of the value (for example log files names)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-7.fc7
changelog:
  - make winbindd start earlier in the init process, at the same time
    ypbind is usually started as well
  - add a sepoarate init script for nmbd called nmb, we need to be able
    to restart nmbd without dropping al smbd connections unnecessarily


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - remove patch for bug 106483 as it introduces a new bug that prevents
    the use of a credentials file with the smbclient tar command
  - move the samba private dir from being the same as the config dir
    (/etc/samba) to /var/lib/samba/private


author: Simo Sorce <ssorce@redhat.com> 3.0.24-9.fc7
changelog:
  - integrate most of merge review proposed changes (bug #226387)
  - remove libsmbclient-devel-static and simply stop shipping the
    static version of smbclient as it seem this is deprecated and
    actively discouraged


author: Simo Sorce <ssorce@redhat.com> 3.0.24-10.fc7
changelog:
  - set passdb backend = tdbsam as default in smb.conf
  - remove samba-docs dependency from swat, that was a mistake
  - put back COPYING and other files in samba-common
  - put examples in samba not in samba-docs
  - leave only stuff under docs/ in samba-doc


author: Guenther Deschner <gdeschner@redhat.com> 3.0.24-11.fc7
changelog:
  - enable PAM and NSS dlopen checks during build
  - fix unresolved symbols in libnss_wins.so (bug #198230)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-12.fc7
changelog:
  - fixes in smb.conf
  - advice in smb.conf to put scripts in /var/lib/samba/scripts
  - create /var/lib/samba/scripts so that selinux can be happy
  - fix Vista problems with msdfs errors


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - fixes in the spec file
  - moved to 3.0.25rc1
  - addedd patches (merged upstream so they will be removed in 3.0.25rc2)


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - update to 3.0.25a as it contains many fixes
  - add a fix for pam_smbpass made by Günther but committed upstream after 3.0.25a was cut.


author: Simo Sorce <ssorce@redhat.com> 3.2.0-0.pre1.fc9
changelog:
  - New major relase, minor switched from 0 to 2
  - License change, the code is now GPLv3+
  - Numerous improvements and bugfixes included
  - package libsmbsharemodes too
  - remove smbldap-tools as they are already packaged separately in Fedora
  - Fix bug 245506


author: Simo Sorce <ssorce@redhat.com> - 3.2.0-0.pre1.3
changelog:
  - Try to fix GCC 4.3 build
  - Add --with-dnsupdate flag and also make sure other flags are required just to
    be sure the features are included without relying on autodetection to be
    successful


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.0-0.25
changelog:
  - Update to 3.3.0 final
  - Add upstream fix for ldap connections to AD (Bug #6073)
  - Remove bogus perl dependencies (resolves: #473051)


author: Simo Sorce <ssorce@redhat.com> - 3.3.1-0.29
changelog:
  - Make the talloc and ldb packages optionsl and disable their build within
    the samba3 package, they are now built as part of the samba4 package
    until they will both be released as independent packages.


author: Simo Sorce <ssorce@redhat.com> - 3.3.2-0.33
changelog:
  - Fix nmbd init script nmbd reload was causing smbd not nmbd to reload the
    configuration
  - Fix upstream bug 6224, nmbd was waiting 5+ minutes before running elections on
    startup, causing your own machine not to show up in the network for 5 minutes
    if it was the only client in that workgroup (fix committed upstream)


author: Guenther Deschner <gdeschner@redhat.com> - 3.4.0-0.41
changelog:
  - Fix Bug #6551 (vuid and tid not set in sessionsetupX and tconX)
  - Specify required talloc and tdb version for BuildRequires


author: Simo Sorce <ssorce@redhat.com> - 3.4.2-47
changelog:
  - Spec file cleanup
  - Fix sources upstream location
  - Remove conditionals to build talloc and tdb, now they are completely indepent
    packages in Fedora
  - Add defattr() where missing
  - Turn all tabs into 4 spaces
  - Remove unused migration script
  - Split winbind-clients out of main winbind package to avoid multilib to include
    huge packages for no good reason


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.3-60
changelog:
  - Update to 3.5.3
  - Make sure nmb and smb initscripts return LSB compliant return codes
  - Fix winbind over ipv6


author: Andreas Schneider <asn@redhat.com> - 2:3.6.5-88
changelog:
  - Move tmpfiles.d config to common package as it is needed for smbd and
    winbind.
  - Make sure tmpfiles get created after installation.


author: Ville Skyttä <ville.skytta@iki.fi> - 2:3.6.6-92
changelog:
  - Call ldconfig at libwbclient and -winbind-clients post(un)install time.
  - Fix empty localization files, use %find_lang to find and %lang-mark them.
  - Escape macros in %changelog.
  - Fix source tarball URL.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.0-154.rc3
changelog:
  - Update to 4.0.0rc3.
  - resolves: #805562 - Unable to share print queues.
  - resolves: #863388 - Unable to reload smbd configuration with systemctl.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.0-160.rc3
changelog:
  - resolves: #867893 - Move /var/log/samba to samba-common package for
                        winbind which requires it.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.2-1
changelog:
  - Update to Samba 4.0.2.
  - Fixes CVE-2013-0213.
  - Fixes CVE-2013-0214.
  - resolves: #906002
  - resolves: #905700
  - resolves: #905704
  - Fix conn->share_access which is reset between user switches.
  - resolves: #903806
  - Add missing example and make sure we don't introduce perl dependencies.
  - resolves: #639470


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.3-1
changelog:
  - Update to Samba 4.0.3.
  - resolves: #907544 - Add unowned directory /usr/lib64/samba.
  - resolves: #906517 - Fix pidl code generation with gcc 4.8.
  - resolves: #908353 - Fix passdb backend ldapsam as module.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.4-3
changelog:
  - resolves: #919405 - Fix and improve large_readx handling for broken clients.
  - resolves: #924525 - Don't use waf caching.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.5-1
changelog:
  - Update to Samba 4.0.5.
  - Add UPN enumeration to passdb internal API (bso #9779).
  - resolves: #928947 - samba-doc is obsolete now.
  - resolves: #948606 - LogRotate should be optional, and not a hard "Requires".


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.7-2
changelog:
  - resolves: #972692 - Build with PIE and full RELRO.
  - resolves: #884169 - Add explicit dependencies suggested by rpmdiff.
  - resolves: #981033 - Local user's krb5cc deleted by winbind.
  - resolves: #984331 - Fix samba-common tmpfiles configuration file in wrong
                        directory.


author: - Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.2
changelog:
  - resolves: #985985 - Fix file conflict between samba and wine.
  - resolves: #985107 - Add support for new default location for Kerberos
                        credential caches.


author: - Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.7
changelog:
  - related: #985609 - Update to Samba 4.1.0rc3.
  - resolves: #1005422 - Add support for KEYRING ccache type in pam_winbindd.


author: - Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.8
changelog:
  - related: #985609 - Update to Samba 4.1.0rc4.
  - resolves: #1014656 - Split out a samba-winbind-modules package.


author: - Andreas Schneider <asn@redhat.com> - 4.1.0-4
changelog:
  - related: #884169 - Add direct dependency to samba-libs in the
                       glusterfs package.
  - resolves: #996567 - Fix userPrincipalName composition.
  - related: #884169 - Fix memset call with zero length in in ntdb.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-4
changelog:
  - resolves: #1034048 - Fix group name substitution in template homedir.
  - resolves: #1018041 - Fix CVE-2013-4408.
  - related: #884169 - Fix several covscan warnings.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-9
changelog:
  - resolves: #1033122 - Fix dropbox regression.
  - resolves: #1040464 - Fix %G substituion for config parameters.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-12
changelog:
  - resolves: #1050886 - Fix full CPU utilization in winbindd.
  - resolves: #1051400 - Fix segfault in smbd.
  - resolves: #1051402 - Fix SMB2 server panic when a smb2 brlock times out.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-17
changelog:
  - resolves: #1067606 - Fix wbinfo with one-way trust.
  - resolves: #1069569 - Fix memory leak reading the printer list.


author: - Alexander Bokovoy <abokovoy@redhat.com> - 4.1.1-30
changelog:
  - resolves: #1083859  - Force KRB5CCNAME in Samba systemd units.
  - related: #1082598 - Fully enables systemd integration.


author: - Guenther Deschner <gdeschner@redhat.com> - 4.1.1-34
changelog:
  - resolves: #1105505 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108845 - CVE-2014-3493: DoS in smbd with unicode path names.
  - resolves: #1105574 - CVE-2014-0178: Uninitialized memory exposure.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-37
changelog:
  - resolves: #1072352 - Make pidl a noarch subpackage.
  - resolves: #1133516 - Create a samba-test-libs package.
  - resolves: #1132873 - Add support to rebuild without clustering.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-2
changelog:
  - resolves: #1138554 - Fix consuming a lot of CPU when re-reading printcap info.
  - resolves: #1134323 - Fix running Samba on little endian Power8 (ppc64le).
  - resolves: #1113064 - Fix case sensitivity options with SMB2 protocols.
  - resolves: #1088924 - Fix applying ACL masks when setting ACLs.
  - resolves: #1135723 - Fix 'force user' regression.
  - resolves: #1117770 - Fix empty full_name field with samlogon.
  - resolves: #1101210 - Fix telling systemd that nmbd is waiting for interfaces.
  - resolves: #1127931 - Fix getgroups() with idmap_ad returning non-mapped groups.
  - resolves: #1144963 - Fix idmap_ad with SFU against trusted domains.
  - resolves: #1140568 - Fix a segfault in the smbclient echo command.
  - resolves: #1089940 - Improve service principal guessing in 'net ads'.
  - resolves: #955561 - Fix overwriting of SPNs in AD during 'net ads join'.
  - resolves: #955562 - Add precreated SPNS from AD during keytab initialization.


author: - Guenther Deschner <gdeschner@redhat.com> - 4.1.12-3
changelog:
  - resolves: #878351 - Fix usage of AES keys by default.
  - resolves: #861366 - Fix KRB5 locator to use same KDC for joining and DNS update.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-9
changelog:
  - resolves: #1162552 - Fix net ads join segfault on big endian systems.
  - resolves: #1164203 - Fix net ads join segfault with existing keytab.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-11
changelog:
  - resolves: #1163748 - Fix smbclient -L fails against new Windows versions
                         over TCP.
  - resolves: #1167849 - Fix smbstatus --profile always returning EXIT_FAILURE.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-13
changelog:
  - resolves: #1172089 - Fix 'net rpc join' with schannel changes.
  - resolves: #1170883 - Fix 'net time system' segfault.


author: Andreas Schneider <asn@redhat.com> - 4.2.2-1
changelog:
  - resolves: #1196140 - Rebase Samba to version 4.2.2
  - resolves: #1186403 - Split patches to fix multiarch conflicts
  - resolves: #1167325 - Retrieve printer GUID from AD if it is not in the
                         registry
  - resolves: #1220174 - Fix issues with winbind library dependencies
  - resolves: #1211658 - Fix stale cache entries on printer rename
  - resolves: #1228809 - Fix reconnect on session exparation


author: Andreas Schneider <asn@redhat.com> - 4.2.2-2
changelog:
  - related: #1196140 - Add missing build dependency for libarchive
  - related: #1196140 - Make sure we do a hardened build


author: Andreas Schneider <asn@redhat.com> - 4.2.3-1
changelog:
  - related: #1196140 - Rebase to version 4.2.3
  - resolves: #1237036 - Fix DCERPC PDU calculation
  - resolves: #1237039 - Fix winbind request cancellation
  - resolves: #1223981 - Fix possible segfault with smbX protocol setting


author: Andreas Schneider <asn@redhat.com> - 4.2.3-2
changelog:
  - resolves: #1238194 - Fix the 'dfree command'
  - resolves: #1216062 - Document netbios name length limitation


author: Andreas Schneider <asn@redhat.com> - 4.2.3-6
changelog:
  - resolves: #1255322 - Fix 'map to guest = Bad uid' option
  - resolves: #1255326 - Fix segfault with 'mangling method = hash'


author: Andreas Schneider <asn@redhat.com> - 4.2.3-9
changelog:
  - resolves: #1273912 - Fix dependencies to samba-common
  - resolves: #1273393 - Fix user after free in smb name resolution


author: Guenther Deschner <gdeschner@redhat.com> - 4.2.3-11
changelog:
  - resolves: #1290711
  - CVE-2015-3223 Remote DoS in Samba (AD) LDAP server
  - CVE-2015-5299 Missing access control check in shadow copy code
  - CVE-2015-5252 Insufficient symlink verification in smbd
  - CVE-2015-5296 Samba client requesting encryption vulnerable to
                  downgrade attack


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.10-7
changelog:
  - Fix regressions introduced with security tightening as part of Badlock release
  - resolves: #1330199


author: Andreas Schneider <asn@redhat.com> - 4.4.4-1
changelog:
  - resolves: #1303076 - Rebase Samba to version 4.4.4
  - resolves: #1314673 - Fix CVE-2015-7560
  - resolves: #1263322 - Add '--no-dns-updates' option to 'net ads join'
  - resolves: #1264433 - Fix segfault in pam_winbind.so with invalid config
                         options
  - resolves: #1193504 - Fix smbget to retrieve files recursively
  - resolves: #1193502 - Fix smbget to use command line credentials
  - resolves: #1193493 - Fix smbget url credentials parsing
  - resolves: #1273999 - Support printing with Kerberos credentials on newer
                         CUPS versions
  - resolves: #1296821 - Define /etc/pam.d/samba as a non replaceable config
  - resolves: #1261107 - Fix memory leak because of missing talloc stackframe
  - resolves: #1333562 - Fix memory leak after smbc_free_context()
  - resolves: #1315422 - Fix regression from CVE-2015-5252
  - resolves: #1316899 - Fixed idmap_hash module issues when used with others
  - resolves: #1322691 - Fix badlock related bugs
  - Fix CVE-2015-5370
  - Fix CVE-2016-2110
  - Fix CVE-2016-2111
  - Fix CVE-2016-2112
  - Fix CVE-2016-2113
  - Fix CVE-2016-2114
  - Fix CVE-2016-2115
  - Fix CVE-2016-2118
  - resolves: #1327951 - Fix regression with anonymous connections from OS X
  - resolves: #1327845 - Fix pcap_cache_reload() with spoolssd
  - resolves: #1289640 - Fix ctdb selinux issue with read only tracking dbs
  - resolves: #1341208 - Fix enumerating groups over NSS with idmap_ad
  - resolves: #1345827 - Fix resolving trusted domain users on domain member
  - resolves: #1346334 - Fix typo in smb.conf.example
  - resolves: #1335292 - Fix site-aware 'net ads join -k'
  - resolves: #1260214 - Accept empty realm for ad domains with 'security=domain'


author: Andreas Schneider <asn@redhat.com> - 4.4.4-3
changelog:
  - related: #1260214 - Correctly warn about missing realm for ad domains
                        with 'security=domain'


author: Andreas Schneider <asn@redhat.com> - 4.4.4-4
changelog:
  - resolves: #1351655 - Fix winbind meomory leak with each cached credentials
                         login
  - resolves: #1351961 - Fix CVE-2016-2119


author: Andreas Schneider <asn@redhat.com> - 4.4.4-5
changelog:
  - resolves: #1359091 - Package /usr/lib/samba/ldb in the common-libs package
  - resolves: #1360788 - Fix multilib issue with ctdb-tests package
  - resolves: #1362385 - Fix Samba ignoring supplementary groups
  - resolves: #1364051 - Fix smbd panic with stale ctdb entries


author: Andreas Schneider <asn@redhat.com> - 4.4.4-6
changelog:
  - resolves: #1367316 - Increase required Kerbersion version number
  - resolves: #1366477 - Fix using the right krb5 ccache in libads
  - resolves: #1356501 - Fix high CPU usage with smbclient connection to
                         non-reachable IP


author: Andreas Schneider <asn@redhat.com> - 4.4.4-10
changelog:
  - resolves: #1377690 - Fix linking nss_wins with libreplace
  - resolves: #1377729 - Fix nss_wins function definitions for gethostbyname*
  - resolves: #1377307 - Fix %G substitution in AD case
  - resolves: #1377751 - Fix regression of smbclient unable to connect to
                         Apple and Azure


author: Andreas Schneider <asn@redhat.com> - 4.6.0-0.1.rc3
changelog:
  - resolves: #1391954 - Update to Samba 4.6.0rc3
  - resolves: #1271082 - Wrong groups listed when id command is called before login
  - resolves: #1327810 - Use 'printcap cache time' for the house keeping interval
  - resolves: #1356932 - Improve documentation for 'ldap ssl' in smb.conf manpage
  - resolves: #1365111 - Fix printer removal if "List in Directory" checkbox is
                         unticked and printer is not listed in AD
  - resolves: #1368439 - Fix ntlm_auth wrong password issues
  - resolves: #1397871 - Include the system krb5.conf in winbinds generated conf
  - resolves: #1397891 - Fix marsalling of spoolss SetPrinter info level 2
  - resolves: #1397895 - Add missing support APD_COPY_FROM_DIRECTORY in
                         AddPrinterDriver
  - resolves: #1403242 - Samba can not access trusted domains through transitive
                         trusts
  - resolves: #1403975 - Fix trusted domain logins
  - resolves: #1411978 - Include the system krb5.conf in winbinds generated conf
  - resolves: #1416746 - Fix division by zero error in ctdb 05.system event script


author: Andreas Schneider <asn@redhat.com> - 4.6.0-0.1.rc4
changelog:
  - related: #1391954 - Update to Samba 4.6.0rc4
  - resolves: #1420130 - samba_krb5_wrapper does not list devices when called with
                         no arguments
  - resolves: #1277999 - Change RPC port range to Windows defaults


author: Andreas Schneider <asn@redhat.com> - 4.6.0-1
changelog:
  - related: #1391954 - Update to Samba 4.6.0
  - resolves: #1401505 - Improved idmap_hash documentation
  - resolves: #1218926 - Samba ignores default_keytab_name in krb5.conf
  - resolves: #1389786 - Add 'net ads dns unregister'


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.6.0-3
changelog:
  - Ensure we set realm when updating ccache in auth/credentials
  - resolves: #1430759 - use GSSAPI gss_acquire_cred_from call for gssproxy support


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.6.0-4
changelog:
  - Export internal arcfour_crypt_blob in Python as samba.arcfour_encrypt
  - related: #1391954 - Update to Samba 4.6.0


author: Andreas Schneider <asn@redhat.com> - 4.6.0-5
changelog:
  - related: #1391954 - Fix kerberos cross-realm referrals
  - resolves: #1430755 - Fix 'net ads' keytab handling


author: Andreas Schneider <asn@redhat.com> - 4.6.2-7
changelog:
  - resolves: #1461336 - Fix smbclient username parsing
  - resolves: #1460937 - Fix username normalization with winbind


author: Andreas Schneider <asn@redhat.com> - 4.6.2-10
changelog:
  - resolves: #1480310 - Require at least krb5 version 1.15.1
  - resolves: #1482133 - Fix password changes for users via smbpasswd
  - resolves: #1452003 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                         returned errors
  - resolves: #1485390 - Do not print kerberos warning when not enforced


author: Andreas Schneider <asn@redhat.com> - 4.7.0-1
changelog:
  - resolves: #1470048 - Rebase Samba to version 4.7.0
  - resolves: #1335710 - Improve performance of smbd for a lot
                         of new client connections


author: Andreas Schneider <asn@redhat.com> - 4.7.0-3
changelog:
  - related: #1470048 - Fix dependency issues
  - resolves: #1486318 - Move /var/lib/samba/lock to common package
  - resolves: #1497162 - Fix smbcacls command line password handling


author: Andreas Schneider <asn@redhat.com> - 4.7.1-3
changelog:
  - resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                         correctly
  - resolves: #1495490 - Fix client rename over SMB2
  - resolves: #1510598 - Fix client volume cmd over SMB2


author: Andreas Schneider <asn@redhat.com> - 4.7.1-5
changelog:
  - resolves: #1505940 - Fix 'net ads keytab list'
  - resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                         faster


author: Andreas Schneider <asn@redhat.com> - 4.7.1-6
changelog:
  - resolves: #1476153 - Handle SMB echo responses more gracefully
  - resolves: #1523212 - Fix SMB2 client read-after-free issue


author: Andreas Schneider <asn@redhat.com> - 4.8.0-1
changelog:
  - resolves: #1558560 - Rebase to newer Samba version
  - resolves: #1558943 - Fix winbind requests getting stuck on a child
  - resolves: #1532618 - Fix segfault with NT1 connections in smbd


author: Andreas Schneider <asn@redhat.com> - 4.8.1-1
changelog:
  - related: #1558560 - Rebase to newer Samba version
  - resolves: #1567896 - Fix possible crash if secrets db is emtpy
  - resolves: #1570020 - Fix a crash in smbd when dfsgetinfo is called


author: Andreas Schneider <asn@redhat.com> - 4.8.1-3
changelog:
  - resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
  - resolves: #1525511 - Fix idmap_rid dependency on trusted domain list


author: Andreas Schneider <asn@redhat.com> - 4.8.3-1
changelog:
  - related: #1558560 - Rebase to Samba version 4.8.3
  - resolves: #1579398 - Add winbind localauth krb5 plugin


author: Andreas Schneider <asn@redhat.com> - 4.8.3-4
changelog:
  - resolves: #1614132 - Fix delete-on-close after smb2_find
  - resolves: #1614265 - Fix CVE-2018-1139
  - resolves: #1614269 - Fix CVE-2018-10858


author: Andreas Schneider <asn@redhat.com> - 4.9.1-1
changelog:
  - resolves: #1649434 - Update to version 4.9.1
  - resolves: #1648852 - Fix out of bound array access in ctdb
  - resolves: #1647960 - Fix segfault in the debug system with hardended build
  - resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
  - resolves: #1650452 - Add smbc_setOptionProtocols()
  - resolves: #1659513 - Fix testparm/pdbedit crash
  - resolves: #1529301 - Added new 'net ads spn' command
  - resolves: #1595277 - Fix manpage for 'net ads lookup'
  - resolves: #1600274 - Fix vfs_audit log which does not show full path names
  - resolves: #1623140 - Fix handling the 'disable netbios' option
  - resolves: #1624227 - Connect to spoolss with the correct version information
  - resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
  - resolves: #1579401 - Implement 'net ads leave --keep-account'
  - resolves: #1624227 - Fix spoolss client operations against newer Windows
                         versions
  - resolves: #1656405 - Fix looking up local system accounts


author: Andreas Schneider <asn@redhat.com> - 4.9.1-2
changelog:
  - resolves: #1674403 - Fix panic when setting 'force group' on a share with
                         an active connections
  - resolves: #1670720 - Fix installation of samba-python
  - resolves: #1669476 - Fix user lookup via UPN


author: Andreas Schneider <asn@redhat.com> - 4.9.1-3
changelog:
  - resolves: #1479451 - Fix 'net' command auth with Kerberos
  - resolves: #1686158 - Fix printing with CUPS
  - resolves: #1662408 - Fix username/password printing with CUPS


author: Andreas Schneider <asn@redhat.com> - 4.9.1-4
changelog:
  - resolves: #1690222 - Fix --max-protocol documentation of smbclient
  - resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
  - resolves: #1696524 - Fix CVE-2019-3880


author: Andreas Schneider <asn@redhat.com> - 4.10.4-0
changelog:
  - resolves: #1724991 - Update to version 4.10.4
  - resolves: #1595277 - Update manpage for 'net ads lookup'


author: Andreas Schneider <asn@redhat.com> - 4.10.4-1
changelog:
  - resolves: #1497809 - Add --resolve-uids for 'smbstatus -L'
  - resolves: #1714947 - Fix idmap_tdb2 scripts


author: Andreas Schneider <asn@redhat.com> - 4.10.4-6
changelog:
  - resolves: #1753254 - Fix trusted domain enumeration in windind caused
                         a Active Directory update


author: Isaac Boukris <iboukris@redhat.com> - 4.10.4-7
changelog:
  - resolves: #1657428 - Fix spnego downgrade
  - resolves: #1663064 - Fix net ads join in hardened environments


author: Andreas Schneider <asn@redhat.com> - 4.10.4-11
changelog:
  - resolves: #1791823 - Fix Kerberos authentication with trusted domains
  - resolves: #1781231 - Fix smbclient mkdir log spam
  - resolves: #1776333 - Fix client tools log spam about messaging


author: Andreas Schneider <asn@redhat.com> - 4.10.13-1
changelog:
  - resolves: #1785121 - Rebase to vesion 4.10.13
  - resolves: #1791208 - Fix CVE-2019-14907
  - resolves: #1737888 - Fix manual libwbclient alternative settings
  - resolves: #1634057 - Return correct stat for SMB1 with POSIX extensions


author: Andreas Schneider <asn@redhat.com> - 4.10.15-1
changelog:
  - related: #1785121 - Rebase to version 4.10.15
  - resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
  - resolves: #1801496 - Add missing ctdb directories


author: Isaac Boukris <iboukris@redhat.com> - 4.10.16-2
changelog:
  - resolves: #1828354 - add additioanl hostnames to the keytab
  - resolves: #1836427 - add dnshostname option net-ads-join


author: Andreas Schneider <asn@redhat.com> - 4.10.16-8
changelog:
  - resolves: #1878205 - Fix restarting winbind on package upgrade
  - resolves: #1892632 - Fix CVE-2020-14318
  - resolves: #1891687 - Fix CVE-2020-14323
  - resolves: #1879834 - Fix CVE-2020-1472
  - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
  - resolves: #1868917 - Fix %U substitution for 'valid users' option
  - resolves: #1853272 - Fix 'require_membership_of' documentation in
                         pam_winbind{.conf} manpage


author: Andreas Schneider <asn@redhat.com> - 4.10.16-14
changelog:
  - resolves: #1937867 - Fix possible core dump with printing support
  - resolves: #1930747 - Ensure that libwbclient has been updated before
                         restarting services


author: Andreas Schneider <asn@redhat.com> - 4.10.16-16
changelog:
  - resolves: #2019661 - Fix CVE-2016-2124
  - resolves: #2019673 - Fix CVE-2020-25717
  - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl


author: Andreas Schneider <asn@redhat.com> - 4.10.16-18
changelog:
  - resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
  - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
  - resolves: #2046148 - Fix CVE-2021-44142


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - workarounds for weird bug (all so-files had names with "s="
    - except for sparc which has just "=" and IA64 which works)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - don't include xscanimage desktop entry - it's a gimp
    plugin. Doh. (part of #17076)
  - add tetex-latex as a build requirement


author: Tim Waugh <twaugh@redhat.com> 1.0.5-0.20010530
changelog:
  - sane-backends (sane-frontends is in a separate package now).
  - 2001-05-30 CVS snapshot.
  - include.patch no longer needed.
  - sg3timeout.patch no longer needed.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-6
changelog:
  - Re-apply the original 1.0.7-4 fix (oops):
    - Make sure to load SCSI modules if not already loaded (bug #59979).


author: Tim Waugh <twaugh@redhat.com> 1.0.8-0.20020522.1
changelog:
  - Update to CVS.  Release expected before the end of the month.
  - No longer need defaultincl or argv patches.


author: Tim Waugh <twaugh@redhat.com> 1.0.11-1
changelog:
  - Shipped libtool is broken; use installed script instead.
  - Remove files not shipped.
  - Fix some /usr/lib references.
  - 1.0.11.
  - Drop sane-sparc, errorchk, hp101, security patches.
  - Update rpath, docdir patches.
  - Use %find_lang.


author: Tim Waugh <twaugh@redhat.com> 1.0.13-6
changelog:
  - Ship libusb.usermap (from sane-backends-1.0.14) and a pam_console-aware
    libusbscanner script.
  - Fix epson.conf for Epson Perfection 2400 (bug #122328).


author: Tim Waugh <twaugh@redhat.com> 1.0.15-4
changelog:
  - Attempt to be more useful in libusbscanner by waiting a maximum of 30
    seconds.
  - Add a chcon call to libusbscanner (bug #140059).  Based on contribution
    from W. Michael Petullo.


author: Tim Waugh <twaugh@redhat.com> 1.0.15-7
changelog:
  - Updated libusbscanner script from Tomas Mraz, to use pam_console_apply.
  - Requires pam >= 0.78-2 for targetted pam_console_apply.


author: Nils Philippsen <nphilipp@redhat.com> - 1.0.17-4
changelog:
  - split off generated documentation into separate subpackage to avoid conflicts
    on multilib systems


author: Nils Philippsen <nphilipp@redhat.com> - 1.0.17-5
changelog:
  - buildrequire automake, autoconf, libtool (#178596)
  - don't require /sbin/ldconfig, /bin/mktemp, /bin/grep, /bin/cat, /bin/rm


author: Nils Philippsen <nphilipp@redhat.com> 1.0.17-10
changelog:
  - add pkg-config support, re-write sane-config to use pkg-config to avoid
    multilib problems with conflicting sane-config scripts


author: Nils Philippsen <nphilipp@redhat.com> 1.0.17-13
changelog:
  - split package into sane-backends, -devel, -libs, -programs to work around
    multilib issues (#135172)


author: Nils Philippsen <nphilipp@redhat.com> - 1.0.18-1
changelog:
  - version 1.0.18
  - unify spec file between OS releases
  - update rpath patch
  - remove obsolete newmodels patch
  - use *.desc created udev rules


author: Nils Philippsen <nphilipp@redhat.com> - 1.0.18-2
changelog:
  - remove unneeded programs subpackage
  - clean up docs vs. libs pkg split, mark documentation as %doc


author: Nils Philippsen <nphilipp@redhat.com> - 1.0.18-9
changelog:
  - don't tweak device names in device configuration files anymore (obsolete)
  - let udev rules cope with SUBSYSTEM=="usb" (#244444)
  - tweak-udev-rules patch is udev-098 patch now


author: Nils Philippsen <nphilipp@redhat.com> - 1.0.19-0.1.cvs20080206
changelog:
  - cvs snapshot 20080206
  - handle access control through hal/PolicyKit instead of udev (#405211)
  - drop obsolete badcode, logical_vs_binary, epson-cx5000, multilib, usb_reset,
    udev-symlink, udev-098 patches
  - update pkgconfig patch


author: Nils Philippsen <nphilipp@redhat.com> - 1.0.19-4
changelog:
  - guard against out-of-bounds string access in fujitsu backend (#429338, patch
    by Caolan McNamara)


author: Nils Philippsen <nphilipp@redhat.com> - 1.0.19-7
changelog:
  - remove ancient sane-devel obsoletes/provides
  - remove libs/doc/gphoto2 conditionals
  - fix build root
  - add arch-specific provides/requires (#436657)


author: Nils Philippsen <nils@redhat.com> - 1.0.19-13
changelog:
  - drop acinclude patch to not unnecessarily rebuild autoconf/libtool files
    which made libtool break builds on Rawhide
  - use "make DESTDIR=... install" instead of "%makeinstall"


author: Nils Philippsen <nils@redhat.com> - 1.0.19-15
changelog:
  - let sane-backends-devel require libjpeg-devel, libtiff-devel
  - update rpath patch (no longer touch sane-config.in as that is replaced
    anyway)
  - fix pkgconfig patch, bzip2 it


author: Nils Philippsen <nils@redhat.com> - 1.0.20-1
changelog:
  - version 1.0.20
  - rebase/remove patches
  - use %_isa for arch-specific requirements
  - place HAL fdi files in the correct place (#457645)


author: Nils Philippsen <nils@redhat.com> - 1.0.21-1
changelog:
  - version 1.0.21
  - remove obsolete rpath, hal, genesys-gl841-registers patches
  - update pkgconfig, udev, man-utf8->man-encoding, epson-expression800,
    docs-utf8 patches
  - remove hal conditional
  - package man pages


author: Nils Philippsen <nils@redhat.com> - 1.0.21-3
changelog:
  - build with -fno-strict-aliasing
  - use PIC/PIE because SANE-enabled software is likely to deal with data coming
    from untrusted sources (client <-> saned via network)


author: Nils Philippsen <nils@redhat.com> - 1.0.21-4
changelog:
  - xerox_mfp: correct color mode malfunction (#614949)
  - xerox_mfp: add USB id for SCX-4500W (#614948)


author: Nils Philippsen <nils@redhat.com> - 1.0.22-1
changelog:
  - version 1.0.22
  - remove obsolete i18n, xerox-mfp-color-mode, epson2-fixes, open-macro patches
  - update pkgconfig, udev, docs-utf8, v4l, man-encoding patches
  - submit patches upstream where this is applicable, add comments
  - manually install pkg-config file


author: Nils Philippsen <nils@redhat.com> - 1.0.22-4
changelog:
  - allow installing the libraries without the drivers (#736310): split off
    drivers into -drivers-scanners, rename -libs-gphoto2 to -drivers-cameras


author: Nils Philippsen <nils@redhat.com> - 1.0.22-4
changelog:
  - multilib: always use pkg-config in sane-config (#707910)
  - add USB id for Epson Stylus SX125 (#703529)


author: Nils Philippsen <nils@redhat.com> - 1.0.22-5
changelog:
  - multilib: let -devel depend on -drivers-* on F-16 and earlier (#740992)
  - multilib: make -drivers-scanners obsolete old -libs as well


author: Peter Robinson <pbrobinson@fedoraproject.org> - 1.0.22-7
changelog:
  - libs shouldn't depends on base package. Properly fix #736310
  - base package should obsolete -docs as it provides them not -libs
  - update spec to current standard


author: Nils Philippsen <nils@redhat.com> - 1.0.22-11
changelog:
  - multilib: enable -devel quirk regardless of version until a fixed mash gets
    into production (#829268)


author: Nils Philippsen <nils@redhat.com> - 1.0.23-1
changelog:
  - version 1.0.23
  - update udev patch, remove obsolete patches
  - use %_hardened_build macro from F-16 on instead of tweaking flags manually
  - don't use the same SONAME for backend libs and main lib


author: Nils Philippsen <nils@redhat.com> - 1.0.23-7
changelog:
  - filter out backend driver provides/requires
  - update latex build dep
  - umax: initialize reader_pid early in sane_start() (#853667)
  - coolscan2/3: support multi-scan option of some devices


author: Nils Philippsen <nils@redhat.com> - 1.0.23-11
changelog:
  - move documentation into separate doc subpackage (#977653)
  - remove ancient, unneeded obsoletes and conflicts


author: Nils Philippsen <nils@redhat.com> - 1.0.23-12
changelog:
  - describe missing flag "-b" in scanimage man page
  - add short help message to saned
  - fix bogus changelog dates


author: Nils Philippsen <nils@redhat.com> - 1.0.23-18
changelog:
  - build against libusb-1.0 on Fedora >= 18 (#1003193)
  - require libusbx-devel instead of libusb1-devel which is obsolete


author: Nils Philippsen <nils@redhat.com> - 1.0.24-1
changelog:
  - version 1.0.24
  - use (hopefully stable) Alioth download URL
  - update udev patch, remove obsolete patches
  - use udev hwdb instead of huge rulesets


author: Tim Waugh <twaugh@redhat.com> 1.0.5-0.20010605
changelog:
  - CVS snapshot 2001-06-05.
  - Don't install xscanimage plug-in symlinks.  The old sane package never
    used to do this, and it looks confusing in gimp if you also have
    xsane-gimp (which is better) installed.  xscanimage works stand-alone
    anyhow.


author: Nils Philippsen <nphilipp@redhat.com> 1.0.14-3
changelog:
  - merge review (#226389):
    - add version info to obsoletes/provides
    - no config files in /usr
    - use %configure macro
  - add dist tag


author: Nils Philippsen <nils@redhat.com> 1.0.14-6
changelog:
  - don't require libieee2384-devel, libjpeg-devel but require fixed
    sane-backends-devel for building


author: Nils Philippsen <nils@redhat.com> - 1.0.14-10
changelog:
  - add missing documentation files AUTHORS, COPYING, README
  - don't distribute sane-style.rc
  - use %buildroot consistently
  - explain missing xcam.desktop file


author: Nils Philippsen <nils@redhat.com> - 1.0.14-14
changelog:
  - clean up:
    - don't BR: gimp-devel, R: sane-backends
    - get rid of buildroot, %makeinstall and %clean section
    - dont obsolete/provide "sane" (ancient)


author: Martin Milata <mmilata@redhat.com> 0.3-1
changelog:
  - New upstream version
    - Bug fixes
    - Build fixes for older systems
  - Do not require libunwind on rhel


author: Martin Milata <mmilata@redhat.com> 0.4-1
changelog:
  - New upstream version
    - Added features needed by ABRT
    - Support for uReport2
    - Major C and Python API changes
  - Patch for python-2.6 compatibility


author: Richard Marko<rmarko@redhat.com> 0.8-1
changelog:
  - New upstream version
    - Added support for json de/serialization of reports and stacktraces.
    - Library version number increased, as the interface changed since the last release


author: Jakub Filak <jfilak@redhat.com> 0.9-1
changelog:
  - New upstream version
    - Enrich koops uReport data with koops text and kernel version.
    - Improve koops modules handling.


author: Martin Milata <mmilata@redhat.com> 0.9-2
changelog:
  - Fix malformed JSON for some Java and koops reports
    - Resolves: #1035317
    - Resolves: #1036790
  - Fix memory leak in RPM handling
    - Resolves: #1016780
  - Check for unsigned overflows
    - Resolves: #1034869


author: Martin Milata <mmilata@redhat.com> 0.13-2
changelog:
  - Use elfutils unwinder
    - Resolves: #1051569
  - Disable function fingerprinting
    - Resolves: #1052402


author: Martin Milata <mmilata@redhat.com> - 0.13-5
changelog:
  - Fix minor bugs found by static analyzers
    - Resolves: #1142856
  - Return empty duphash for koopses with no reliable frames
    - Resolves: #1123262
  - Fix parsing of python SyntaxError exceptions
    - Resolves: #1142339
  - Fix parsing of ppc64 gdb stacktraces
    - Resolves: #1142338
  - Limit the depth of generated stacktrace to avoid huge reports
    - Resolves: #1142346
  - Add authentication support to uReport, needed for reporting to customer portal
    - Resolves: #1139555


author: Matej Habrnal <mhabrnal@redhat.com> - 0.13-13
changelog:
  - add support for Ruby
    - Related: #1334604
  - actualize list of normalization function in satyr
    - Related: #1332869
  - fix defects found by coverity
    - Related: #1336390


author: <kwenning@redhat.com> - 1.2.1-20
changelog:
  - tarball updated to c511b0692784a7085df4b1ae35748fb318fa79ee
    from https://github.com/Clusterlabs/sbd
    Resolves: rhbz#1324240


author: <kwenning@redhat.com> - 1.2.1-22
changelog:
  - Rebuild with shared-storage enabled
  - Package original manpage
  - Added ppc64le target
    Resolves: rhbz#1413951


author: <kwenning@redhat.com> - 1.3.0-3
changelog:
  - prevent creation of duplicate servants
  - check 2Node flag in corosync to support
    2-node-clusters with shared disk fencing
  - move disk-triggered reboot/off/crashdump
    to inquisitor to have sysrq observed by watchdog

    Resolves: rhbz#1413951


author: <kwenning@redhat.com> - 1.3.1-2
changelog:
  - rebase to upstream v1.3.1

    Resolves: rhbz#1499864
              rhbz#1468580
              rhbz#1462002


author: <kwenning@redhat.com> - 1.3.1-3
changelog:
  - mention timeout caveat with SBD_DELAY_START
    in configuration template
  - make systemd wait for sbd-start to finish
    before starting pacemaker or dlm

    Resolves: rhbz#1525981


author: <kwenning@redhat.com> - 1.3.1-7
changelog:
  - reenable sbd on upgrade so that additional
    links to make pacemaker properly depend on
    sbd are created

    Resolves: rhbz#1525981


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.0-2
changelog:
  - rebuild against pacemaker 1.20 to make sbd actually use
    the new libpengine API

    Resolves: rhbz#1661233


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.0-3
changelog:
  - finalize cmap connection if disconnected from cluster
  - make handling of cib-connection loss more robust

    Resolves: rhbz#1691484


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.0-11
changelog:
  - synchronize with rhel-8.1.0

    Resolves: rhbz#1718297
    Resolves: rhbz#1713023
    Resolves: rhbz#1732368


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.0-12
changelog:
  - rebuild with updated brew-root

    Resolves: rhbz#1718297
    Resolves: rhbz#1713023
    Resolves: rhbz#1732368


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.0-13
changelog:
  - properly increment release

    Resolves: rhbz#1718297
    Resolves: rhbz#1713023
    Resolves: rhbz#1732368


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.7-2
changelog:
  - Fix %files (to be able build -devel dependent packages)
  - Remove rpath from libraries
  - Spec file cleanup, rpmlint check


author: Praveen K Paladugu <praveen_paladugu@dell.com> - 1.6.0-1
changelog:
  - Updated to 1.6.0
  - removed the CIMOM dependencies
  - following the upstream packaging obsolete, sblim-cmpi-base-test pkg.
  - Added the patches from upstream packaging
  - fix to restart tog-pegasus properly


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.0-2
changelog:
  - Fix license, mofs registration for various CIMOMs, sblim-sfcb init script
    path in provider-register.sh, rpmlint warnings


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.5.1-11
changelog:
  - Fix mounted filesystem is shown as disabled when fstab entry uses link, UUID or LABEL
    Resolves: #921487


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.0-5
changelog:
  - Add support for arbitrary names of network devices in Linux_NetworkPortImplementsIPEndpoint
    association
    Resolves: #682386
  - Remove macros from changelog, register to sfcb


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.2.0-3
changelog:
  - Fix provider segfaults when enumerating instances of Linux_SysfsAttribute class
  - Fix provider doesn't show much sysfs entries
  - Add mofs registration for various CIMOMs


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.8.0-4.20120315cvs
changelog:
  - Use latest upstream CVS (because of rsyslog support)
  - Build against sblim-cmpi-devel and instead of tog-pegasus-devel
  - Fix rsyslog support to work with systemd


author: Tomas Bzatek <tbzatek@redhat.com> - 0.8.0-10.20120315cvs
changelog:
  - Add support for rsyslog $IncludeConfig directive (#971807)
  - Add support for filter definitions (#971807)
  - Various rsyslog compatibility fixes (#971807)


author: Roman Rakus <rrakus@redhat.com> - 2.2.7-3
changelog:
  - Fixed a typo
  - Added missing providers
  - improved providers registration
  - Fixed owning of filesystem's directories (man)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-7
changelog:
  - Fix sblim-gather is installing files under /etc/tmpfiles.d/
    Resolves: #1180992
  - Build with PIE and full RELRO
    Resolves: #1092566


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-8
changelog:
  - Fix reposd crashes with SIGFPE during calcluation of interval metric when there
    are duplicate data values in the repository
    Resolves: #1467038


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-9
changelog:
  - Use Pegasus root/interop instead of root/PG_Interop
  - Enable System Z specific providers for s390 and s390x architecture
    Resolves: #1545811


author: mrueckert@suse.de
changelog:
  - update to 0.4.2
    ind_helper.c, ind_helper.h:
    Bugs: 1203849 (side effect) made a lot of function arguments
    const in order to remove the cmpi-base warnings.
    added sblim-indication_helper-0.4.2_warnings.patch
    fixes a small warning regarding pointer size


author: <ratliff@austin.ibm.com> - 1.3.0-1
changelog:
  - updated buildrequires to require libcurl-devel rather than curl-devel
  - removed requires to allow rpm to automatically generate the requires
  - removed echo to stdout
  - removed paranoia check around cleaning BuildRoot per Fedora MUST requirements
  - changed group to supress rpmlint complaint
  - added chkconfig to enable sfcb by default when it is installed
  - added patch0 to enable 1.3.0 to build on Fedora 9


author: <ratliff@austin.ibm.com> - 1.3.2-1
changelog:
  - updated upstream version and added CFLAGS to configure to work 
  - around http://sources.redhat.com/bugzilla/show_bug.cgi?id=6545


author: <ratliff@austin.ibm.com> - 1.3.2-2
changelog:
  - updated spec file based on comments from Srini Ramanatha as below:
  - updated the Release line to add dist to be consistent with sblim-sfcc
  - updated the source URL


author: <ratliff@austin.ibm.com> - 1.3.4-3
changelog:
  - re-ordered the top so that the name comes first
  - added the la files to the package list
  - removed the smp flags from make because that causes a build break
  - updated spec file to remove schema and require the cim-schema package
  - change provides statement to cim-server as suggested by Matt Domsch
  - updated to upstream version 1.3.4 which was released Jun 15 2009


author: <ratliff@austin.ibm.com> - 1.3.4-4
changelog:
  - added build requires for flex, bison, cim-schema suggested by Sean Swehla
  - added sfcbrepos directive to post section


author: <srinivas_ramanatha@dell.com> - 1.3.4-5
changelog:
  - added the devel package to fit in all the development files 
  - Made changes to the initscript not to start the service by default


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.9-1
changelog:
  - Update to sblim-sfcb-1.3.9
  - Compile with --enable-uds, i. e. enable unix domain socket local
    connect functionality
  - Create sfcb system group (used by basic authentication with PAM)
    in pre install scriptlet
  - Fix default location where sfcbrepos is looking for schema files
    and simplify sfcbrepos command in post install sciptlet
  - Add missing soname files


author: Praveen K Paladugu <praveen_paladugu@dell.com> - 1.3.10-2
changelog:
  - Following the BZ#660072, added sfcb.service file for compliance with systemd
  - Since sfcb's PAM authentication requires, the user to be in group sfcb, 
  -    added the root user to "sfcb" group in %pre section.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.16-3
changelog:
  - Fix indCIMXmlHandler crash in IndCIMXMLHandlerInvokeMethod with Embedded Instances 
    Resolves: #957747
  - Fix sfcb creates invalid XML with embedded object inside embedded object
    Resolves: #957742


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.16-11
changelog:
  - Fix connection fails to openwsman with sfcbLocal frontend
    Resolves: #1047781
  - Fix multilib issue with man page and config file
    Resolves: #1067842


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.1-1
changelog:
  - Update to sblim-sfcc-2.2.1
  - Fix Source field
  - Move documentation files from -devel to main package


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.5-6
changelog:
  - Move libcimcClientXML.so from -devel to main package - it's needed for proper function
    Resolves: #1056407


author: Viktor Mihajlovski <mihajlov@de.ibm.com> - 1.5.1-1
changelog:
  - Upgrade to version 1.5.1 (SSL V3 enforced, default CACERT).
  - Created Fedora/RH specific spec file.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.2-7
changelog:
  - Fix wrong usage of libcurl API, which caused segfaults when wbemcli was used
    with https scheme (patch by kdudka@redhat.com)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.2-10
changelog:
  - Backport (slightly modified) configurable SSL version feature from upstream,
    update man page accordingly
    Resolves: #1239115


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.2-11
changelog:
  - Update default CA certificate file path due to recent changes in tog-pegasus
    Resolves: #1320077
  - Fix wbemcli dont accept dot (.) as password character on command line
    Resolves: #1103368
  - Fix bogus date in %changelog


author: Martin Preisler <mpreisle@redhat.com> 0.8.2-1
changelog:
  - Updated to new version
  - Added a workaround to the cmake invocation because of faulty openscap .pc file


author: Martin Preisler <mpreisle@redhat.com> 0.8.6-1
changelog:
  - Upgrade to upstream 0.8.6 version:
    https://fedorahosted.org/scap-workbench/query?milestone=0.8.6&status=closed
  - Require polkit


author: Martin Preisler <mpreisle@redhat.com> 1.1.1-1
changelog:
  - Require English fonts (bz#1134418)
  - Updated with latest upstream URLs
  - Reorganized the spec a little
  - Removed SCL related parts from the spec
  - Updated to new upstream release 1.1.1


author: Watson Sato <wsato@redhat.com> 1.1.4-1
changelog:
  - Updated to new upstream release 1.1.4 (rhbz#1404394)
  - UX improvements
  - Fixed fetch remote resources warning (rhbz#1367923)
  - Improved error message when scanning a remote machine in which openscap-scanner
    is not installed (rhbz#1368463)
  - Fixed search on disabled item (rhbz#1368493)
  - Fixed multi benchmark tailoring use case
  - Fixed a bug that caused tailored profiles to have titles duplicated (rhbz#1320197)
  - Fixed path of tailoring file in dry run output (rhbz#1368516)
  - Now Workbench doesn't allow edit of values with prohibitedChanges attribute
  - Added --version and --help command line options (rhbz#1368527)
  - Improved workflow of dry run execution (rhbz#1385549)
  - Check capabilities of oscap with propper arguments (rhbz#1368463)
  - Show number of selected rules in profile listing


author: Martin Preisler <mpreisle@redhat.com> 1.1.6-1
changelog:
  - Updated to new upstream release 1.1.6
  - Tri-state checkboxes for tailoring
  - Fixed remote host and port being cleared when scan starts
  - Fiixed formating of Profile html description in Tailoring Window
  - Fixed oscap message "Downloading ... ok" appearing as an error
  - Fixed tab order of widgets in main window
  - Load Content as the default button of the SSG integration dialog
  - New validation of the customization file name
  - Generate bash and Ansible remediation roles from profiles
  - Generate bash and Ansible remediation roles from results after scanning
  - Fixed a short integer overflow when using ssh port numbers higher than 32k
  - Fixed long loading times on OSX
  - Open tailoring file directly via command line


author: Neal Becker <ndbecker2@gmail.com> - 0.4.8-2
changelog:
  - Fix BuildRoot
  - Add BuildRequires, Requires
  - Test remove d1mach patch
  - Fix defattr
  - Add changelog
  - Removed Prefix, Vendor
  - Fix Source0


author: Jef Spaleta <jspaleta@gmail.com> - 0.5.1-4
changelog:
  - Minor adjustments to specfile for packaging guidelines.
  - Changed buildrequires fftw version 3  from fftw2


author: Jarrod Millman <millman@berkeley.edu> - 0.6.0-1
changelog:
  - update to new upstream source
  - update Summary, License, Url, and description
  - added extra dependencies
  - remove symlink since Lib has been renamed scipy


author: Orion Poplawski <orion@cora.nwra.com> - 0.9.0-1
changelog:
  - Update to 0.9.0
  - Drop all stsci sources and patches, dropped from upstream
  - Drop gcc and py27 patches fixed upstream
  - Add %check section to run tests


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.0-4
changelog:
  - Add patch to use build_dir argument in build_extension
  - Fix rpmlint warnings
  - License Updated
  - Don't build with python3


author: Tomas Tomecek <ttomecek@redhat.com> - 0.12.1-1
changelog:
  - Update to 0.12.1 - fixes CVE-2013-4251 (rhbz#997579)
  - change working directory to build directory when building ext (rhbz#916695)
  - use SHA-256 instead of md5 -- FIPS mode (rhbz#877920)
  - unbundle python-six (bug rhbz#1019642)


author: Jindrich Novy <jnovy@redhat.com> 0.1-6
changelog:
  - %stack_name: initial part of stack prefix and name of
    meta package providing scriptlets
  - %stack_prefix: stack namespacing part to be prepended to
    original non-stack package name, can be used for Provides
    namespacing as well
  - %stack_runtime: run-time package name providing scriptlets
  - %stack_require: macro to define dependency to other stacks


author: Jindrich Novy <jnovy@redhat.com> 0.1-9
changelog:
  - introduce stack enablement tracking
  - introduce "stack_enabled" helper utility to let a stack
    application figure out which stacks are actually enabled
  - disallow running stacks recursively


author: Jindrich Novy <jnovy@redhat.com> 0.1-11
changelog:
  - avoid redefinition of %_root* macros by multiple
    occurence of %stack_package
  - make the Stack root path configurable


author: Jindrich Novy <jnovy@redhat.com> 0.1-14
changelog:
  - define %_defaultdocdir to properly relocate docs into
    a stack
  - document a way how to pass command to stack via stdin


author: Jindrich Novy <jnovy@redhat.com> 20120209-1
changelog:
  - fix minor bugs (#788194)
    - clear temp files
    - handle commands from stdin properly
    - run command even if ran as "scl enable SCL command" from already
      enabled SCL


author: Jindrich Novy <jnovy@redhat.com> 20120229-1
changelog:
  - do not prepend scl_* prefix to package names
  - unify package naming to <SCL>-package-version
  - add scl --list functionality to list available SCLs


author: Jindrich Novy <jnovy@redhat.com> 20120413-1
changelog:
  - filesystem ownership by meta package
  - add man page
  - fix memory leak when parsing commands from stdin
  - use more descriptive error message if /etc/prefixes is missing


author: Jindrich Novy <jnovy@redhat.com> 20120613-1
changelog:
  - Requires: iso-codes for basic filesystem in build subpackage
  - add scl_require_package() macro to depend on a particular package
    from the collection
  - fix filesystem file list
  - tighten runtime package dependency via scl_require()
  - fix _localstatedir to point to the correct path according to redhat-rpm-config
  - thanks to Bohuslav Kabrda for feature proposals/QA/fixes


author: Jindrich Novy <jnovy@redhat.com> 20120927-1
changelog:
  - update to 20120927
  - better BUILDROOT processing
  - bash completition for scl command
  - debuginfo package now has SCL-specific provide
  - non-SCL builds are without warning in build log
  - improved help


author: Jindrich Novy <jnovy@redhat.com> 20121110-1
changelog:
  - introduce sclbuild utility
  - fix exporting of env. variables when mutiple collections are
    enabled at the same time
  - better bash completion
  - fix changelog


author: Jan Zeleny <jzeleny@redhat.com> - 20130529-2
changelog:
  - add scl_source script for intercollection dependencies (#1032444)
  - updated macros in macros.scl-filesystem (#1032451, #1032451)
  - add delimiter between collections and command (#1032460)
  - fix the name of attr macros (#1023628)


author: Jan Zeleny <jzeleny@redhat.com> - 20130529-4
changelog:
  - fixed some coverity-reported bugs (related: #1032616)
  - a note about env. variables in man page (#968954)
  - drop the /var/spool/uucp from the default fs structure (#1033674)


author: Jan Zeleny <jzeleny@redhat.com> - 20130529-6
changelog:
  Catch up with Fedora and RHEL6
  - add automatic Provides: scl-package(%scl) to all scl packages
    (except for metapackages)
  - add automatic Requires: %scl_runtime to all scl packages
    (except for metapackages)
  - the "filesystem" file renamed back to "filelist"
  - add correct dependencies to debug packages.
  - allow disabling debuginfo generation
  - remove automatic creation of debuginfo for metapackage.
  - rephrase command description in man page
  - fix system paths in __os_install_post
  - remove the sclbuild utility, as it's mostly useless
  - add the command set to register/deregister collection
  - fix missing allocation check in read_script_output()
  - drop recursive ownership of /usr/lib within SCL root
  - introduce %scl_dependency_generators macro


author: Lubos Kardos <lkardos@redhat.com - 20130529-7
changelog:
  Support for importing collections from NFS mounts
  - Add execution of register and deregister scripts during registration
    and deregistration if they exist.
  - Add capability to make collection nfs mountable using macro nfsmountable.


author: Lubos Kardos <lkardos@redhat.com - 20130529-8
changelog:
  - Modified paths of state and conf files
  - Add owning and creating of state and conf files if nfsmountable is defined
  - Add printing file names in error messages


author: Lubos Kardos <lkardos@redhat.com> - 20130529-10
changelog:
  - Allow to use vendor prefix in packages names
  - Include %nfsmountable macro into scl's rpm macros file


author: Jan Zeleny <jzeleny@redhat.com> - 20130529-13
changelog:
  - bump the version to get in sync with 7.1 branch
  - Reflect the state of %nfsmountable macro in collections' rpm macro files
  - escape all the % chars in changelog


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - got a patch from rzm@icm.edu.pl to fix bug #10353
  - which caused screen to crash when copying to a file buffer


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - Stuck an entry into the default screenrc file that forces
  - '^?' (backspace) to send '^H'.
  - Its an ugly fix for a termcap inheritance problem,
  - but it works, if anyone REALLY needs '^?' they can change it,
  - and I think we anger less people with this than the way it 
  - currently behaves. (Read: vi and emacs work now)
  - POST NOTE (Aug 15): emacs is NOT happy with ^H, BUT screen thinks
  - that this is what backspace is supposed to do, so we don't change it.


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - Patched the documentation to change the 'C-a C-\' to 'C-a \',
  - which is what is the real behaviour. this fixes bug #16103


author: Crutcher Dunnavant <crutcher@redhat.com> 3.9.9-3
changelog:
  - fixed screenrc path sed command; #50046
  - added ncurses-devel build dep; #49692
  - fix typo in specfile that broke screenrc, #49535


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 3.9.11
  - patch0/patch4 is not necessary anymore
  - do not compress man-pages/info-files in spec file
  - use configure to set telnet/screenrc instead of sed
  - add a hack to correctly install the new screenencodings
  - try to build up a better global /etc/screenrc instead of
    /etc/skel/.screenrc


author: Lon Hohberger <lhh@redhat.com> 3.9.15-6
changelog:
  - Disable system-wide read/write dir in /tmp; use user's ~/.screen
  directory for screen sessions. (#98320)


author: Lon Hohberger <lhh@redhat.com> 3.9.15-8
changelog:
  - Change screen's behavior to do the following: Attempt to use
  ~/.screen as the screen directory.  Failing that (ie, on files
  systems without Unix sockets support), try using /tmp/screen-<USER>.
  This prevents a user from creating /tmp/screens (which inherits
  the sticky bit from /tmp, preventing other users from using screen),
  as well as *tries* to be more secure.


author: Lon Hohberger <lhh@redhat.com> 4.0.1-1
changelog:
  - Import of 4.0.1 from upstream.
  - Removed screen-homedir hack introduced in 3.9.15-8.  (I
  was unable to reproduce the behavior described in #98320,
  and thus, the patch isn't necessary.)
  - Fix for buffer overflow from Timo Strainen (patch 7).
  - Fix for #111084 - we now require texinfo to build.
  - Comment out lines in screenrc causing screen to complain
  at startup.


author: Petr Rockai <prockai@redhat.com> - 4.0.2-6
changelog:
  - fix BR 136234 by carrying out the suggested change in /etc/screenrc
  - drop screen-4.0.2-logname.patch (merged into screen-4.0.2-screenrc.patch)
  - grant wish 130674 by adding a (commented out) caption statement to default
    screenrc


author: Petr Rockai <prockai@redhat.com> - 4.0.2-11
changelog:
  - change the default lockscreen shortcut to ^aX to make
    it harder to hit by accident, as per BR 157821


author: Petr Rockai <prockai@redhat.com> - 4.0.2-14
changelog:
  - put /usr/share/screen into the package (so the package owns the
    directory as well, not only the files below); fixes BR 192852


author: Petr Rockai <prockai@redhat.com> - 4.0.2-15
changelog:
  - bump MAXSTR (string buffer size) to 4k (from 256 bytes), fixes
    status line issues with window list in status line and too many
    windows (and possibly other issues with long strings)


author: Jesse Keating <jkeating@redhat.com> - 4.0.2-16
changelog:
  - Don't use %makeinstall, instead make install.
  - Change DDESTDIR to DESTDIR to do the right thing.
  - Comment out utf patch as it is no longer necessary.
  - Add dist tag
  - Change PreReq to correct Requires(pre), Requires(post), Requires(preun) 
  - Don't use RPM_SOURCE_DIR, reference the source file directly
  - Do the compiling (make) in %build, not %install
  - Don't replace /etc/screenrc if the user has modified it
  - Ditto /etc/pam.d/screen
  - Change the buildroot to follow guidelines


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-10
changelog:
  - don't set xterm function keys in default config (#151556)
  - always return 0 in scriptlet (#433882)
  - fix pty permissions
  - enable utempter support
  - link with libtinfo, don't link with libutil
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-15
changelog:
  - fix crash when resizing (#515055)
  - try to improve default config (#523647, #506256, #492729)
  - suppress install-info errors (#515999)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-16
changelog:
  - create socket directory on start with tmpfs (#652348)
  - add -4 and -6 options to man page (#650321)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.1.0-0.1.20101110git066b098
changelog:
  - update to git snapshot 20101110git066b098
  - fix potential problems for Common Criteria certification
  - apply some xterm tweaks in default config also to xterm-* (#474064)
  - change socket directory to $HOME/.screen (#667252)
  - add bcond macro to build with multiuser support
  - convert info to UTF-8


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.1.0-0.4.20110328git8cf5ef
changelog:
  - update to git snapshot 20110328git8cf5ef
  - clear scrollback buffer before locking linux terminal (#683733)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 4.1.0-0.8.20120314git3c2946
changelog:
  - rebase to latest git snapshot
  - fix a crash when switching from altscreen after window resize (#784504)


author: Petr Hracek <phracek> - 4.1.0-0.20.20120314git3c2946
changelog:
  - Multiple packages are installing files under /etc/tmpfiles.d
  - comply http://fedoraproject.org/wiki/Packaging:Guidelines#Tmpfiles.d
  - Resolves: rhbz#1121958


author: Terje Rosten <terje.rosten@ntnu.no> - 1.00-2
changelog:
  - fix license, buildroot and group
  - remove hardcoded packager tag
  - use %configure macro
  - dist tag
  - make install on single line
  - fix files section
  - remove strange use of macros (name, version and release)
  - untabify


author: Phillip Compton <pcompton[AT]proteinmedia.com> 0:0.7.3-0.fdr.1
changelog:
  - Fedorification.
  - Added path to Source0.
  - Added URL.
  - buildroot -> RPM_BUILD_ROOT.
  - BuildReq libgnomeui-devel, eel2-devel, gpgme03-devel.
  - BuildReq gettext.
  - post Req GConf2.
  - post/postun Req scrollkeeper.
  - .la/.a removal.
  - cosmetic changes.


author: Phillip Compton <pcompton[AT]proteinmedia.com> 0:0.7.3-0.fdr.2
changelog:
  - Fixed file permission on source tarball.
  - Fixed Group.
  - Removed aesthetic comments.
  - Brought more in line with current spec template.


author: Phillip Compton <pcompton[AT]proteinmedia.com> 0:0.7.3-0.fdr.3
changelog:
  - Grabbed new copy os source from upstream.
  - Fixed path on Source0, to allow direct download.
  - BuildReq desktop-file-utils.


author: Seth Vidal <skvidal at linux.duke.edu> - 0.8-2
changelog:
  - added configure patch for it to build
  - disable gedit plugins until seahorse gets fixed to work with gedit 2.13+


author: Matt Domsch <mdomsch at fedoraproject.org> 2.21.3-1
changelog:
  - upgrade to 2.21.3
  - enable avahi integration
  - rpmlint cleanups: remove rpath, unneeded .so, tag config files


author: Seth Vidal <skvidal at fedoraproject.org> 2.21.4-2
changelog:
  - drop in seahorse-agent.sh to xinit - closes bug 427466 but will mean
    that seahorse agent will start if it is installed - even on kde or xfce
    desktops :(


author: Kalev Lember <kalevlember@gmail.com> 3.1.90-1
changelog:
  - Update to 3.1.90
  - Remove and obsolete seahorse-devel
  - Switch to gsettings and obsolete the gconf schema


author: Rui Matos <rmatos@redhat.com> - 3.4.0-2
changelog:
  - Use rpm macros to define the version number
  - Do verbose builds
  - Fix %files entries to comply with ownership rules


author: Rui Matos <rmatos@redhat.com> - 3.8.0-5
changelog:
  - Fix for "seahorse-nautilus broken by glib2 regression related to
    SIGCHLD warnings"
  - Resolves: #1093123


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 4.0.7
  - use "--without-included-regex"
  - do not gzip info pages in spec file, "TODO" is not present anymore


author: Jakub Jelinek <jakub@redhat.com> 4.0.8-3
changelog:
  - if not -n, print current buffer after N command on the last line
    unless POSIXLY_CORRECT (#112952)
  - adjust XFAIL_TESTS for the improved glibc regex implementation
    (#112642)


author: Petr Machata <pmachata@redhat.com> - 4.1.5-2
changelog:
  - #185374:
    - Follow symlinks before rename (avoid symlink overwrite)
    - Add -c flag for copy instead of rename (avoid ownership change)


author: Petr Machata <pmachata@redhat.com> - 4.1.5-4
changelog:
  - remove superfluous multibyte processing in str_append for UTF-8
    encoding (thanks Paolo Bonzini, #177246)


author: Petr Machata <pmachata@redhat.com> - 4.1.5-8
changelog:
  - tidy up the specfile per rpmlint comments
  - use utf-8 and fix national characters in contributor's names


author: Jiri Moskovcak <jmoskovc@redhat.com> - 4.2.1-1
changelog:
  - new version
  - obsoletes previous patches
  - added patch to maintain backwards compatibility for scripts using -c/--copy
  - Resolves: #502934


author: Jiri Moskovcak <jmoskovc@redhat.com> 4.2.1-4
changelog:
  - added libselinux-devel to buildrequires rhbz#514182
  - fixed problem with --excludedocs rhbz#515913


author: Jan Görig <jgorig@redhat.com> 4.2.1-5
changelog:
  - fixed make check on non UTF-8 locale - upstream patch rhbz#550731
  - readded -c option (thanks Paolo Bonzini) rhbz#566455
  - removed previous -c dummy patch
  - changed license to GPLv3+


author: Martin Briza <mbriza@redhat.com> - 4.2.1-9
changelog:
  - Backported commit from upstream to fix treating "x26" as "&" character
  - Added virtual provide for gnulib according to http://fedoraproject.org/wiki/Packaging:No_Bundled_Libraries 
    Resolves: #812067 #821776


author: Martin Briza <mbriza@redhat.com> - 4.2.2-1
changelog:
  - New release
  - Dropping included patches: sed-4.2.1-data-loss.patch sed-4.2.1-fix-0x26-on-RHS.patch sed-4.2.1-makecheck.patch
  - Dropping unused patch sed-4.2.1-dummyparam.diff
  - Regenerated sed-4.2.{1,2}-copy.patch
  - Minor change to patching (creating backup files)


author: Jan Pacner <jpacner@redhat.com> - 4.2.2-5
changelog:
  - Related: #948598 (Man page scan results for sed; introduce -c argument, add
    help for -b --binary arguments, cleanup arguments & help)


author: Jakub Martisko <jamartis@redhat.com> - 4.2.2-7
changelog:
  - Fix: "in-place edits on FUSE filesystems create files with all-zero mode bits"
    Resolves: #1836317


author: Donnie Barnes <djb@redhat.com>
changelog:
  - updated to 8.8.7
  - added some spam filtration
  - combined some makefile patches
  - added BuildRoot support


author: Donnie Barnes <djb@redhat.com>
changelog:
  - made /etc/mail/deny.db a ghost
  - removed preun that used to remove deny.db (ghost handles that now)
  - NOTE: upgrading from the sendmail packages in 4.8, 4.8.1, and possibly
    4.9 (all Red Hat betas between 4.2 and 5.0) could cause problems.  You
    may need to do a makemap in /etc/mail and a newaliases after upgrading
    from those packages.  Upgrading from 4.2 or prior should be fine.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - added chkconfig support
  - various spec file cleanups
  - changed group to Networking/Daemons (from Daemons).  Sure, it runs on
    non networked systems, but who really *needs* it then?


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Allow empty QUEUE in /etc/sysconfig/sendmail for those who
    want to run sendmail in daemon mode without processing the
    queue regularly.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - provide a more sane /etc/mail/access default config file
  - use makemap to initializa the empty databases, not touch
  - added a small, but helpful /etc/mail/Makefile


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - make the redhat.mc be a separate source files. Sanitize patches that used
    to touch it.
  - install redhat.mc as /etc/sendmail.mc so that people can easily modify
    their sendmail.cf configurations.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fox the awk scripts in the postinstall
  - enable FEATURE(accept_unresolvable_domains) by default to make laptop
    users happy.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - install man pages, not groff output (#3746).
  - use dnl not '#' in m4 comment (#3749).
  - add FEATURE(mailtertable) to the config -- example file needs this (#4649).
  - use db2 not db1.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to (security release) 8.11.2
  - build also on RHL 6.x #16061
  - include smrsh man-page #17901
  - use the "-f" flag for makemap to preserve case for virtusertable
    and userdb in /etc/mail/Makefile - suggested by Harald Hoyer
  - fix /usr/doc -> usr/share/doc in docu #20611
  - wrong path in sendmail.mc #20691
  - tcp-wrapper support wasn't enabled correctly #21642
  - do not expose user "root" when masquerading like in older releases #21643
  - disable the VRFY and EXPN smtp commands #21801
  - disable queue-runs for normal users (restrictqrun privacy flag)
  - fix typo in sendmail.mc #21880, #22682
  - disable daemon mode to see what needs fixing


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - enable daemon mode again, but only listen to the loopback device
    instead of all devices.
  - do not include check.tar with old anti-spam rules


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add changes from Christopher McCrory <chrismcc@pricegrabber.com>:
  	- prepare /etc/mail/Makefile for more maps not shipped with this rpm
  	- changed sendmail.mc to include some more commented out options,
  	  so that people are directly pointed at important options
  	- add /etc/pam.d/smtp for AUTH
  	- add FEATURE(use_ct_file) and /etc/mail/trusted-users


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 8.11.3
  - add "localhost.localdomain" to the list of hostnames accepted
    for local delivery "Cw" in /etc/mail/sendmail.mc
  - add patches from Pekka Savola <pekkas@netcore.fi>
  	- Enable IPv6 at compile time, patch for glibc 2.2 from PLD
  	- Add a commented-out IPv6 daemon .mc line to sendmail.mc
  	- buildrequire: openldap-devel, cyrus-sasl-devel


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add libmilter docu
  - add support for userdb to /etc/mail/Makefile
  - use "btree" database files if a userdb is used
  - buildrequires tcp_wrappers


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - change "-q" to "-s" as option to make #57216
  - move milter lib into separate "devel" sub-package
  - add include files to devel sub-package #56064
  - fix pointer in access file to docu #54351


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - fix another path to correct docu
  - include sendmail/README in the docu
  - compile with -D_FFR_WORKAROUND_BROKEN_NAMESERVERS, but do not
    enable this at runtime
  - devel subpackage files owned by root now


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - integrate ugly logic to compile this src.rpm also on older Red Hat
    Linux releases
  - clean up spec file and patches a bit
  - add db4 support


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.2-1
changelog:
  - update to 8.12.2 (adds STARTTLS support without need for sfio)
  - don't forcibly strip binaries; let the build root handle it
  - add creation of the smmsp account (51/51) in %pre
  - enable hesiod map support
  - modify default config to use an MSP
  - comment out 'O AutoRebuildAliases' in %post, otherwise sendmail will
    fail to restart on upgrades


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - mv include files to /usr/include/libmilter/ #60795
  - do not use "-f" option to virtusertable #60196
  - ad an example smarthost entry to config file #58298


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - make sure more version information is in the cf file #54418
  - do not use "-b" flag when patching in spec file
  - require newer chkconfig version #61035
  - fix preun script #60880
  - add TMPF to access file creation #60956


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - suggestions form Stephane Lentz:
  	- add correct include statement into submit.mc (like sendmail.mc)
  	- add commented out further suggestions into submit.mc
  	- disable ident lookups


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Changed the behaviour in /etc/mail/Makefile to generate the sendmail.cf and
    submit.cf from the mc files if they changed.
  - Added a small README.redhat that descibed the new mc file behaviour and the
    split into sendmail.cf and submit.cf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove absolute path names from the PAM configuration, allowing it to be
    used by any arch on a multilib system


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add to submit.mc: define(`_MTA_HOST_', `[127.0.0.1]')
    to deliver directly to localhost IP instead of going through DNS
  - submit.mc: exchange msp and use_ct_file to better enable it
  - do not undefine UUCP_RELAY and BITNET_RELAY
  - sendmail.mc: use LOCAL_DOMAIN instead of "Cw" directly
  - sendmail.mc: add commented out MASQUERADE_AS example
  - re-enable DAEMON variable for now


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add the following changes from Adrian Havill <havill@redhat.com>
    to our default sendmail.mc file:
  	- added commented-out-by-default common AUTH/SSL examples
  	- updated m4 example and rpm reference
  	- added more comment documentation
  	- add commented out confAUTO_REBUILD example
  	- improve description about MASQUERADE_AS


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - always have a queue run interval for sm-msp-queue   #81424
  - Jos Vos suggests adding another variable for sm-client queue-run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add openssl-devel as a build-time requirement
  - preprocess the config file to add the right version of %{_lib}
  - add kerberos -I and -L flags to build configuration, needed for newer
    versions of libssl


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - sendmail-8.12.7-etrn.patch from Jos Vos <jos@xos.nl>
  - submit.mc: enable "use_ct_file" by default  #80519
  - add _FFR_MILTER_ROOT_UNSAFE  #78223


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - do not reject all numeric login names if hesiod support is
    compiled in. #80060
  - remove reference to non-existing man-pages #74552


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add a confTRUSTED_USER line into sendmail.mc, submit.mc is already ok
  - add patch from sendmail.org for cf/m4/proto.m4


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add correct db4-devel requirements for newer releases
  - completely re-do many ifdef code in the spec-file
  - fix some issues building for older RHL releases


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - call make with the target "all" #86005
  - add start/stop/restart as Makefile targets
  - add another security patch


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - mark /etc/mail/Makefile as config(noreplace) #87688
  - mark /etc/pam.d/smtp as config(noreplace) #87731


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.9-5
changelog:
  - configure to use libsasl2 instead of libsasl to avoid linking with both
    (we also link to libldap, which now uses libsasl2)
  - link with -ldb instead of -ldb-4.0 on all releases after RHL 7.3 instead
    of just 7.3 (all versions of db4-devel thereafter are expected to provide
    the right linking setup)


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.9-6
changelog:
  - move Sendmail.conf from /usr/lib/sasl to /usr/lib/sasl2 and change the
    default pwcheck method to "saslauthd"


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - run "make -C /etc/mail" (maybe generating new sendmail.cf, then newaliases
  - added $SENDMAIL_OPTARG that could be set by /etc/sysconfig/sendmail #99224


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - move debug information from sendmail into debuginfo rpm
  - on %post make sure /etc/aliases.db and /etc/mail/*.db is correctly
    owned by root
  - do not set confTRUSTED_USER to smmsp in sendmail-redhat.mc


author: Karsten Hopp <karsten@redhat.de> 8.12.10-3
changelog:
  - fix usage of RPM_OPT_FLAGS variable in spec file
  - add makecert.sh script to -doc subpackage
  - add cert paths to sendmail.mc


author: Thomas Woerner <twoerner@redhat.com> 8.12.10-6
changelog:
  - reverted to sasl1 for 3.0E: added with_sasl1
  - spec file cleanup
  - new location for statistics file (/var/log/)


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-1.2
changelog:
  - /usr/lib/sendmail is in alternatives, now
  - removed trailing / from stdir
  - fixed define for STATUS_FILE


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-2
changelog:
  - added information for saslauthd and AUTH (#113463)
  - fixed STATUS_FILE in sendmail-redhat.mc (#114302)
  - reset mta after update if mta was sendmail (#114257)
  - enabled pie for ia64 again


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-3
changelog:
  - RH3.0E version: sasl1, no pie, old_setup (provide /etc/aliases)
  - new switches for pie and old_setup


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-4.1
changelog:
  - added authinfo to possible sendmail maps: /etc/mail/Makefile (#119010)
  - fixed minor version in changelog


author: Thomas Woerner <twoerner@redhat.com> 8.13.0-1
changelog:
  - new version 8.13.0
  - made /etc/mail/Makefile complain missing sendmail-cf package (#123348)
  - fixed ownership of %{_includedir}/libmilter (#73977)
  - moved back to /usr/share/ssl/certs as certificate directory (see sendmail.mc)
  - extended sendmail.mc for spam protection


author: Thomas Woerner <twoerner@redhat.com> 8.13.0-1.1
changelog:
  - fixed init script to not complain missing sendmail-cf package (#126975)
  - better message in /etc/mail/Makefile for missing sendmail-cf package.


author: Thomas Woerner <twoerner@redhat.com> 8.13.3-1.1
changelog:
  - fixed gcc4 build: use double quotes for confOPTIMIZE to avoid m4 confusion
    with ','
  - fix for ppc: using tripple-quotes


author: Thomas Woerner <twoerner@redhat.com> 8.13.4-1
changelog:
  - new version 8.13.4
  - added requires for the sendmail base package in sendmail-cf, sendmail-devel
    and sendmail-doc
  - dropped upstream close_wait.p2 patch


author: Thomas Woerner <twoerner@redhat.com> 8.13.5-3
changelog:
  - fixed selinuxenabled path in initscript
  - fixed error handling with sigwait (#137709)
    Thanks to Jonathan Kamens for the patch
  - fixed prereq for cyrus-sasl: now using /usr/sbin/saslauthd
  - appended 'dnl' to cert tags in sendmail.mc


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-1
changelog:
  - new version 8.13.7 (#195282)
  - fixes CVE-2006-1173 (VU#146718): possible denial of service issue caused by
    malformed multipart messages (#195776)


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-3
changelog:
  - using new syntax for access database (#177566)
  - fixed failure message while shutting down sm-client (#119429)
    resolution: stop sm-client before sendmail
  - fixed method to specify persistent queue runners (#126760)
  - removed patch backup files from sendmail-cf tree (#152955)
  - fixed missing dnl on SMART_HOST define (#166680)
  - fixed wrong location of aliases and aliases.db file in aliases man page
    (#166744)
  - enabled CipherList config option for sendmail (#172352)
  - added user chowns for /etc/mail/authinfo.db and move check for cf files
    (#184341)
  - fixed Makefile of vacation (#191396)
    vacation is not included in this sendmail package
  - /var/log/mail now belongs to sendmail (#192850)


author: Florian La Roche <laroche@redhat.com>
changelog:
  - #205803 add sparc/sparc64 to -fPIE list
  - change sendmail.cf reference into sendmail-cf package name


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-1
changelog:
  - new version 8.14.1
  - spec file cleanup for merge review (rhbz#226407)
  - dropped update support for sendmail versions prior to 8.12.0
  - using pdf documentation


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-2
changelog:
  - readded chkconfig add for sendmail in post script
  - dropped mysql support (useless without further patching)
  - fixed executable permissions for /usr/sbin/makemap and /usr/sbin/smrsh
  - dropped FFR_UNSAFE_SASL, because it has no effect anymore


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-4
changelog:
  - do not remove /etc/aliases.db on package removal (rhbz#223637)
  - fixed remaining paths to certs directory in sendmail.mc file
  - added contrib scripts to the doc package (rhbz#183723)
  - added LSB header to init script (rhbz#247053)
  - added plain login information for cyrus-sasl to access file
  - fixed compile problem with glibc-2.6.90+
  - fixed reoccuring m4 include problem (now using sinclude)


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-2
changelog:
  - add NM dispatcher script (#451575)
  - print warning on service start when sendmail-cf is required (#447148)
  - replace Makefile with shell script to avoid dependency on make (#467841)
  - fix multiarch conflicts (#343161)
  - preserve timestamps on config files
  - gzip RELEASE_NOTES
  - defuzz patches
  - drop gcc2690 patch


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-9
changelog:
  - fix milter file descriptors leaks (#485426)
  - skip colon separator when parsing service name in ServiceSwitchFile
  - return with non-zero exit code when free space is below MinFreeBlocks
  - fix service stop/restart when only smclient is running
  - fix submit.cf and helpfile permissions
  - more merge review fixes (#226407)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-1
changelog:
  - new version 8.14.4 (#552078)
  - RPM attributes S, 5, T not recorded for statistics file
  - adapted patches: makemapman, dynamic, switchfile (#552078)
  - movefiles patch incorporated into aliases_dir patch
  - drop exitpanic patch (fixed upstream)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-4
changelog:
  - used noreplace for sasl config
  - used ghost instead of explicit provides
  - deffattr changed to (-,root,root,-)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-6
changelog:
  - sasl2 config moved from {_libdir}/sasl2 to {_sysconfdir}/sasl2
  - added libdb5 patch for building with libdb-5
  - rebuilt with libdb-5


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-8
changelog:
  - all 'define' changed to 'global' in spec
  - perl interpreter path fixup moved from 'install' to 'prep'


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-10
changelog:
  - added stub man pages for hoststat and purgestat
  - rmail man page added to alternatives
  - updated subpackages description
  - sendmail-cf/cf/README is not packaged - it is useless for end users
  - added comments about purpose of files and patches
  - removed redundant license tag from milter subpackage


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-11
changelog:
  - README.libmilter moved to milter subpackage
  - updated description of doc subpackage
  - README.redhat removed (not needed any more)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-18
changelog:
  - add QoS support, patch from Philip Prindeville <philipp@fedoraproject.org>
    upstream reserved option ID 0xe7 for testing of this new feature (#576643)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-21
changelog:
  - fix negative ctx_id in milter debug output (#577558)
  - fix incomplete description of the -i option in man page (#676824)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-1
changelog:
  - New version 8.14.5
  - Removed m4-ldap-routing, milter-fix-negativeid, man-i-option-fix
    patches (upstreamed)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-4
changelog:
  - Removed dots from description (there are no dots in systemd packaging
    guidelines)
  - Changed service type to forking and explicitly specified PID files
  - Fixed creation of sm-client.pid
  - Added Wants to sm-client.service and sendmail.service
  - Replaced each occurrence of /var/run by /run in config files
  - More details are available in rhbz#697636


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-6
changelog:
  - Fixed systemctl disable command in preun section
  - Replaced reload by restart, dropped ExecReload from sendmail.service
    Resolves: rhbz#719931
  - Switched to systemctl in NetworkManager dispatcher script
  - Added ExecStartPre=-/etc/mail/make to sm-client.service
  - Hardcoded daemon option (-bd) to sendmail.service, dropped the DAEMON var
  - QUEUE var in /etc/sysconfig/sendmail replaced by SENDMAIL_OPTS var
  - Added default preset (-q1h) to SENDMAIL_OPTS var


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-7
changelog:
  - Hardened build with full relro
  - Provided SysV initscript in sysvinit subpackage for backward compatibility


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-9
changelog:
  - Enabled alternatives --initscript in post section
  - Improved sysvinit subpackage - switched to noarch, added scriptlets
  - Workarounded sm-client stop on SysV to systemd migration


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.6-2
changelog:
  - Fixed milter_helo regression (milter-helo-fix patch)
    Resolves: rhbz#895552
  - Fixed bogus dates in changelog


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.7-5
changelog:
  - Explicitly enabled sm-client statistics
    Resolves: rhbz#890585
  - Enable ECDHE support
    Resolves: rhbz#1124827
  - Properly set {client_port} value on little endian machines,
    patch by Kelsey Cumminngs <kgc@corp.sonic.net>
    Resolves: rhbz#1210914
  - Added makemap and its manual page into alternatives
    Resolves: rhbz#1225891
  - Modified nm-dispatcher script to asynchronously restart sendmail and
    not block the connection activation
    Resolves: rhbz#1237070
  - Added config options allowing disablement of TLS 1.1/2
    Resolves: rhbz#1281476
  - Fixed problem with e-mails not sending from IPv6 enabled server
    to servers with MX record pointing to CNAME
    Resolves: rhbz#1294870
  - Added editmap
    Resolves: rhbz#1342393
  - Removed systemd limit for sendmail restarts to workaround failure due to
    rapid restarts caused by NetworkManager dispatcher script
    Resolves: rhbz#1395102
  - Fixed op.pdf
    Resolves: rhbz#1401070


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.7-6
changelog:
  - Use SSL_CTX_use_certificate_chain_file() to handle intermediate
    certificates passed additionally in confSERVER_CERT
    Resolves: rhbz#1596725


author: Dan Walsh <dwalsh@redhat.com> 1.1-1
changelog:
  - Update to latest code from tresys
  - Break into three separate packages for cmdline, devel and gui
  - Incorporate the tcl patch


author: Bill Nottingham <notting@redhat.com> 2.1.0-5
changelog:
  - put libraries in the right place (also puts debuginfo in the right
    package)
  - add %defattr for -devel too


author: Dan Walsh <dwalsh@redhat.com> 2.3-1
changelog:
  - Update from upstream
    * apol:
          added new MLS components tab for sensitivities, 
          levels, and categories.
          Changed users tab to support ranges and default 
          levels.
          added range transition tab for searching range
          Transition rules.
          added new tab for network context components.
          added new tab for file system context components.
    * libapol:
          added binpol support for MLS, network contexts, 
          and file system contexts.
    * seinfo:
          added command line options for MLS components.
          added command line options for network contexts
          and file system contexts.
    * sesearch:
          added command line option for searching for rules
          by conditional boolean name.
    * seaudit:
          added new column in the log view for the 'comm' 
          field found in auditd log files.
          added filters for the 'comm' field and 'message'
          field.
    * manpages:
          added manpages for all tools.


author: Chris PeBenito <cpebenito@tresys.com> 3.3.4-1
changelog:
  - Fixes gcc 4.3, glibc 2.7, tcl 8.5, and libsepol 2.0.20 issues.
  - Fix policy loading when policy on disk is higher version than the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 3.3.7-24
changelog:
  - Revert setools current patch

  - Rebuild to get latest libsepol which fixes the file_name transition problems
  - Use selinux_current_policy_path to read by default policy


author: Dan Walsh <dwalsh@redhat.com> - 0.7-1
changelog:
  - Fix setroubleshoot_dispatcher to catch all information from
     avc. Much cleaner interface and no longer uses audit2allow cruft.
  - Remove toolbar from popup window since it did nothing, and I
     think it looks better without it.
  - fix allow_execmod plugin to report better data.


author: Dan Walsh <dwalsh@redhat.com> - 0.8-1
changelog:
  - Added a bunch more plugins
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add allow_cvs_read_shadow.py, allow_ftp_use_cifs, allow_ftp_use_nfs, and allow_gssd_read_tmp.
  - Change AVC to have additional helpers for matching messages.
  - Change Plugin to work better with more than one solution.


author: Dan Walsh <dwalsh@redhat.com> - 0.15-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add generic templating mechanism to Plugin
  - Ported all plugins to use templating mechanism


author: Dan Walsh <dwalsh@redhat.com> - 0.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - modify SetFilter in server to return errors instead of
     throwing an exception. Default the filter list on each alert display.
  - minor tweaks to alert queue handling
  - fix analyze() parameter list in ftp_is_daemon.py plugin
  - sealert now responds to pending alerts more correctly, it shows
     how many pending alerts are in the queue, if you filter the pending
     alert status is updated, the next alert button will advance you
     to the next alert in the queue
  - simplify major pieces of sealert by coalescing common code
     into subroutines.
      [Dan  Walsh <dwalsh@redhat.com>]
  - Complete all boolean plugins except disable
  - Make Close button work.
  - Make setroubleshoot_dispatcher exit if it gets an avc about itself


author: Dan Walsh <dwalsh@redhat.com> - 0.17-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - clean up and rework the timestamp code in util.py so that
     time zones are handled properly, there were a number of bugs.
     Hopefully it's correct now because timezone handling is a pain.
  - change the time format in the browser so all times are displayed
     identically, the friendly time relative format was hard to compare.
  - modify the plugin 'make install' to delete all existing plugin's
     prior to installing the new ones
  - add popup menu to status icon to choose between browser and
     alert GUI (not fully connected yet). Several bug fixes related
     to changing the filter_type from a string to an int.
  - add filter selection to bottom pane, change filter_type from
     string to integer constant. Enhance how columns are handled.
     Get init_combo_box to work. Remove unused RPM and Bugzilla
     fields from bottom pane. Modify the default size of the browser
     window. Fix missing import in util.py.
  - add ability in broswer to sort on columns, initially the report
     count column and the last seen date column. The date column now
     stores a TimeStamp object instead of a string. Add new method
     to TimeStamp to return a friendly string relative to the current
     time. The date column in the browser now has a cell data function
     which invokes the friendly format method of the TimeStamp object.
  - add ability fo serialize to/from xml for classes which can
     inititialized from strings and serialized as strings (e.g. numbers,
     TimeStamps, etc.)
  - add count of how many times a signature is reported, the date
     when first and last reported, add columns for report count and
     last date count to browser.
  - checkpoint browser code, list pane and detail pane now working.
  - add initial support for browser applet, move some functions which
     kept getting reused to util.py
  - add reporting of environment to email alert (email alerts still
     need work)
      [Dan  Walsh <dwalsh@redhat.com>]
  - Fix disable_trans.py set_boolean call
  - Complete all boolean plugins except disable
  - Change interface to use audit unix domain socket


author: Dan Walsh <dwalsh@redhat.com> - 0.19-1
changelog:
  2006-08-08  Dan Walsh <dwalsh@redhat.com>
  - Fix up handling of mls ranges in context
  - Cleanup some pychecker errors

  2006-08-07  John Dennis <jdennis@redhat.com>
  - add first seen, last seen, and report count to alert detail view
  - make the seen icon work, if the alert has been displayed more
     than N seconds, mark the alert as having been seen by the user
     and update the icon is the list view
  - change the schema for the xml data; the database now has a version,
     there is a local id attached to each signature, the filter list in
     the siginfo was replaced by a list of per user data, the per user
     data now contains the filter, seen_flag. Modify all the code which
     was operating on the filter information to use the new model.
  - fix the xml serialization so that booleans can be used as a basic
     type and also so that non-string types can be used in element
     attributes (e.g. int, bool) and the serialization code will
     automatically convert between python types and strings.


author: John Dennis <jdennis@redhat.com> - 0.27-1
changelog:
  - load_plugins() now catches exceptions when a plugin won't load,
     reports the traceback in the log file, and continues with the next
     plugin. Previously a bad plugin caused the entire plugin loading
     to abort and no plugins were loaded.
  - Add "daemon_name" to automake variables, change pid file to match
  - turn off "noreplace" on config file till things settle down a bit
  - browser.py now validates data, also test for missing column data in the
     cell_data function to avoid exceptions.
  - add stub for analyzie_logfile() rpc call
  - turn off balloon notifications by default in config file,
     libnotify is just plain busted at this point :-(
  - only the setroubleshootd daemon creates it's log file
     under /var/log now, the user app's do it in /tmp, change file
     permissions on /var/log/setroubleshoot back to 0644.
  - sealert now looks up the username rather than hardcoding it to "foo"
  - CamelCase to lowercase_underscore clean up


author: John Dennis <jdennis@redhat.com> - 0.30-1
changelog:
  - fix bug 203479, missing requires of audit-libs-python
  - add support to sealert to listen on a dbus session signal to display
     the gui. This is needed for when the status icon is not visible and
     the user wants to see the UI. There is now a seperate program
     setroubleshoot_launch_gui which emits the signal.


author: Dan Walsh <dwalsh@redhat.com> - 0.32-1
changelog:
  - Add avc_syslog to syslog translated avc message
  - Fix submitbug button
      [John Dennis <jdennis@redhat.com>]
  - fix signature inflation, all data attached to a signature is now
     encapsulated in a SEFaultSignatureInfo (siginfo) class. The GUI no
     longer reaches into a signature looking for information, it looks
     in the siginfo. The Plugin class now defines the method
     get_signature() which report() calls to obtain the signature. The
     default signature provided by the Plugin class includes the
     analysisID, an AVC with just the src & target contexts, and the
     object_path. All data accesses and parameters which had been "sig
     and solution" are now done via the unified siginfo class. There is
     still a bit more work to be done on this but this represents a
     reasonble point to checkpoint the code in CVS.


author: Dan Walsh <dwalsh@redhat.com> - 0.34-1
changelog:
  - Standardize on the browser. remove alert window
      [John Dennis <jdennis@redhat.com>]
  - remove all vestiges of popup alert, now browser is the only
     UI game in town
  - restore the automatic updating of the browser window which had
     been a regression, the AlertClient class now emits signals which
     the GUI classes can connect to receive signals from the fault server,
     also fix the "mark seen" regression
  - browser.py: restore mark_seen timeout


author: John Dennis <jdennis@redhat.com> - 0.35-1
changelog:
  - add sorting on category column and seen column in browser,
     fix reference to my_draw() in print function.

  - make browser window hidden by default so it does not flash
     when it's first realized, connect to the "realize" signal to
     initially position the vpane, add signal handlers to track
     when the browser is visible, the presentation of the status
     icon now checks if the browser is visible, the status icon is
     not presented if the browser is already displayed.


author: Dan Walsh <dwalsh@redhat.com> - 0.38-1
changelog:
  [Dan  Walsh]
  - Hook up the rest of the menu bars on browser window
  - Add public_content.py plugin
      [John Dennis <jdennis@redhat.com>]
  - add delete_signatures() method to AlertClient class
  - start using the AppBar in the browser.
  - "open logfile" now connected all the way from browser menu
     to server rpc, still needs implementation, but "plumbing" is working.
  - fixes for the date/time dialog
  - remove install of setroubleshoot.glade, we now only use
     setroubleshoot_browser.glade
  - some fixed to DateTimeDialog


author: Dan Walsh <dwalsh@redhat.com> - 0.39-1
changelog:
  - Add Icon
      [John Dennis <jdennis@redhat.com>]
  - dispatcher.py: rework how audit messages injected into the
     system and processed. Much of this work was in support of log file
     scanning which should be coupled to the exact same processing code
     as audit messages arriving from the audit socket. In essence log
     file scanning synthesizes an audit message and we inject it into
     the system the same way socket messages are injected. This was
     also an excellent moment correctly handle out of order audit
     messages, something we were not able to handle previously. This
     may have been contributing to splitting what should have been a
     single alert into two or more separate alerts because we didn't
     recongize the incoming audit events as a single event. Correctly
     assembling out of order messages introduced a fair amount of extra
     complexity as we now maintain a cache of recent audit events, this
     is fully documented in dispatcher.py
  - Turn notifications back on by default.
      [Karl MacMillan <kmacmill@redhat.com>]
  - Separated out HTML rendering and made it easier to translate.


author: Dan Walsh <dwalsh@redhat.com> - 0.40-1
changelog:
  - Fix notification window problems.  Now dissappears and does not regenerate if
  it has already been seen


author: Dan Walsh <dwalsh@redhat.com> - 0.42-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add rpm information for target.
  - Add hostname and uname to signature info
  - Add display of the full AVC
  - Add display of the analysis id
  - Change html generation to be separated out and us elemmenttree
      [John Dennis <jdennis@redhat.com>]
  - add CommunicationChannel class to encapsulate data transfer
     operations, in particular to provide an object threads can lock
     during data transfer.
  - checkpoint the logfile scanning code, somewhat working


author: Dan Walsh <dwalsh@redhat.com> - 0.43-1
changelog:
  - Fix mail handling
  - fix bugs related to recording per user per signature filtering
      [John Dennis <jdennis@redhat.com>]
  - fix bugs related to recording per user per signature filtering
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add signal handling to client and server.
  - Fix minor plugin bugs.


author: Dan Walsh <dwalsh@redhat.com> - 0.46-1
changelog:
  - Add new plugins cvs_data, rsync_data, xen_image, swapfile, samba_share
      [John Dennis <jdennis@redhat.com>]
  - clear the GUI of old data before loading new data,
     fix the code used to display the filter icon in the filter column


author: Dan Walsh <dwalsh@redhat.com> - 0.48-1
changelog:
  - Sealert only notify dropped connection once
  - setroubleshoot shutdown cleanly
      [John Dennis <jdennis@redhat.com>]
  - Gui cleanups


author: Dan Walsh <dwalsh@redhat.com> - 1.0-1
changelog:
  - Release of first version
  - Fix icon
      [John Dennis <jdennis@redhat.com>]
  - Memory leak fixes
  - Substitution fixes
  - File names in hex fixes


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Speed enhancments
      [John Dennis <jdennis@redhat.com>]
  - log file parsing now approx 4 times faster
  - greatly enhance the statistics reporting capability in attempt
     to diagnose slow log file parsing performance
  - make gathering of environmenatal information optional,
     environment information is only relevant at the time the
     alert fires, not in a post processing scenario
  - clean up several places where environmental information was
     assumed and/or was always gathered, or gathered in the wrong place.


author: Dan Walsh <dwalsh@redhat.com> - 1.7-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Add command line utilities
  - logfile scanning finally seems to work connected to browser
  - Additional Information section of report now includes line
     number information (if alert was generated from logfile)
  - replace database update_callback() with notify interface, a more
     generic solution more easily shared between components
  - object implementing rpc method is now explicitly attached via
     connect_rpc_interface() instead of walking the MRO chain with
     magic exclusions. explicitly connecting is more flexible and
     robust (no getting the wrong object by mistake)
  - fix handling of return args in local rpc case
  - fix signal connections between audit and logfile
  - split databae and database_properties for audit and logfile
  - fix initial connection state
  - fix lookup_local_id


author: John Dennis <jdennis@redhat.com> - 1.8.1-1
changelog:
  - Fixes 216936, bug 215290, add 'Copy Alert' edit menu item
  - clean up menu items, add tooltips
  - fix printing so it will work with multiple alerts, force font to
     monospace 10pt, display error dialog if printing fails.
  - Fixes 216908, platform and raw audit messages were not wrapped
     to fit on page.
  - Related: 216575, update i18n po files
  - Fixes 216941, set default folder for save operation, also set
     default filename
  - Fixes 216327 add menu items "toggle hide deleted", "select none". Add model
     filter to control visibility of alerts
  - Fixes 214218, sealert with no command line
     arguments induces startup as dbus service, this had been a
     regression.
  - Fixes 216327, rework how deletes are performed in browser. Delete
     now marks each seleted siginfo with a delete flag, expunge
     permanently deletes siginfo's marked for deletion, also add undelete
     command, removed delete confirmation dialog. Modify how text
     attributes in cell renderer are computed to allow for
     strike-throughs of alerts marked for deletion.
  - multiple alerts can now be selected, add select all command,


author: John Dennis <jdennis@redhat.com> - 1.8.3-1
changelog:
  - Fixes 217961, sealert needs pygtk2-libglade
  - more i18n translations
  - Fixes 217710, date representation did not respect locale,
     at the same time remove old date formatting code, now cruft since
     we can't use it because it was specific to US English.
  - fix how selections are handled when rows are expunged.
  - add Copy to Edit menu, for copying selection from detail pane,
     unfortunately gtkhtml2 widget does not preserve line breaks between
     table rows.


author: John Dennis <jdennis@redhat.com> - 1.8.5-1
changelog:
  - fix bug, "could not convert path to a GtkTreePath" when database 
     is initially empty, caused by last_selected_row == None


author: John Dennis <jdennis@redhat.com> - 1.8.6-1
changelog:
  - Fixes 218150,
     "If view is set to "hide delete" you cannot filter new entries"
     Actually, the bug was toggle cell renderer was connected to the
     base model instead of the model attached to the view, the sort
     model, this meant the toggle was occuring on the wrong row if
     the view was sorted differently than the base model.


author: John Dennis <jdennis@redhat.com> - 1.8.11-1
changelog:
  - Fixes 216575, more translations
  - Replace delete and expunge menu labels with something more intuitive
  - add ability for browser to be restarted with identical window
     position and state
  - add pkg version and protocol version to logon handshake, test for
     compatibility between clint and server, prompt for restart
  - add non-modal restart dialog
  - add dialog to display traceback if sealert faults with an uncaught
     exception, try to limit invisible errors
  - fix return args on rpc method
  - add instance id to server


author: John Dennis <jdennis@redhat.com> - 1.8.13-1
changelog:
  - update translations

  - change SETroubleshootDatabase so it is optional if it's backed
     by a file, this fixes the problem of us littering temporary files
     when scanning logfiles which does not require persistence.

  - disable the view logfile menu item if no logfile has been opened

  - fix redundant log messages for case where there is no log file and
     the console flag is set. When there is no log file the logging
     module opens a console stream, thus the console stream produced
     by the console flag was redundant.

  - add username and password command line arguments
     rework startup logic so that all command line args are processed
     before we do any real work
   
  - rework the email preferences so that each email address can
     have a filter type associated with it.

     add a new filter_type "Ignore After First Alert" which filters
     after the first alert has been delivered

  - add UI for setting the email addresses alerts are sent to.
     Add menu item to edit email list, add email list dialog.
     Remove 'recipient' config file entry, now list is stored
     in seperate file. Add rpc to query and set the email list,
     the GUI calls this to get the current list from the server
     and set it in the server, it is the server which reads and 
     writes the file. Add 'enable' flag to each email entry.
     Modify how the server iterates over the email list when it
     receives an alert. When marking an alert as having been sent
     the username is the email address but with 'email:' prepended so
     as not to collide with non-email filtering options for the same user.


author: John Dennis <jdennis@redhat.com> - 1.8.14-1
changelog:
  - Fixes 221850
     plugin module loading was failing in python 2.5 with the message
     "SystemError: Parent module 'plugins' not loaded". This is due to a
     change in behavior between python 2.4 and 2.5, in python 2.4 the lack
     of a parent module was silently ignored. The fix is to load
     plugins.__init__ first.


author: John Dennis <jdennis@redhat.com> - 1.8.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Fixes Bug# 224343 sealert's "Aditional Info:" text should be in white box
  - Fixes Bug# 224336 sealert should have GtkRadioButtons in menu View
  - Related: bug 224351
     Rewrite parts of logging support to better support changing output
     categories, output destinations. Now -v -V verbose works in sealert.
  - Resolves bug 225161, granted AVC's incorrectly identified as a denial
  - add alert count to status bar
  - add "Help" command to Help menu, opens web browser on wiki User FAQ
      [Dan Walsh  <dwalsh@redhat.com>]
  - Make setroubleshoot.logrotate correctly


author: John Dennis <jdennis@redhat.com> - 1.9.3-1
changelog:
  - install icon in /usr/share/icons, refer to icon by name using standard API
  - Fix performance problems in setroubleshoot browser log file scanning
  - Significant rewrite of data/view management code in setroubleshoot
     browser. data and view now cleanly separated, can easily switch
     between data views while maintaining selections, view state, with
     proper update of status information in status area
  - Resolves Bug# 227806: right click context menu resets selection
  - Logfile scans now operate in independent thread, proper asynchronous
     updates of browser during scan, browser used to appear to hang
  - Resolves Bug# 224340: Rewrite Menu/Toobar/Popup to use UIManger instead of glade
  - Add toobar support
  - Implement GUI to edit email recipient list in setroubleshoot browser
  - Added user help to setroubleshoot browser
  - Related Bug# 224343: Fix setroubleshoot browser to respond to desktop theme changes
  - improve traceback error reporting in sealert
  - rewrite AboutDialog, replacing glade version
  - Resolves bug 229849  Bug# 230115, Relates bug 221850: fix uuid code to resolve
     '_uuid_generate_random' is not defined error


author: Dan Walsh <dwalsh@redhat.com> - 1.9.4-1
changelog:
  - Remove disable_trans boolean
  - Check for paths in filesystem before suggesting chcon -R 
  - Remove default to listen on local ports


author: John Dennis <jdennis@redhat.com> - 1.9.6-1
changelog:
  - add avc_auparse.py, now has option to use audit parsing library instead of
     built-in audit parsing.
  - fix bug in log file scanning and detail display update
  - Resolves Bug# 238516, python pkg directory not owned


author: John Dennis <jdennis@redhat.com> - 1.9.7-1
changelog:
  - Resolves Bug# 241739, this bug is the lead bug for several bug reports,
     all consequences of the same problem, setroubleshootd/sealert when run
     in a non latin language environment because of incompatibilities in
     i18n encoding between components.


author: John Dennis <jdennis@redhat.com> - 1.10.0-1
changelog:
  - move all plugins and their translations to independent package
  - wrap XML generation inside try/except
  - correct how access list is obtained in avc_auparse.py
  - add try/except around top level of AnalyzeThread.run so exceptions
     in the thread get reported and the analysis thread does not just die.
  - also add try/except around LogfileThread.process_logfile
  - add new function assure_file_ownership_permissions()
  - server now forces it's database file permissions/ownership to be 0600 root:root
  - rpm now forces the server's database file permissions/ownership to be 0600 root:root
  - Resolves Bug #251545: Review Request: setroubleshoot-plugins - analysis plugins for setroubleshoot
  - clean up some other rpmlint warnings in setroubleshoot.spec
  - fix missing install of setroubleshoot icon and sym link to it
  - Resolves Bug #251551, setroubleshoot shows up in in wrong desktop menu
     also run desktop-file-install in rpm install
  - add /etc/dbus-1/system.d/setroubleshootd.conf dbus configuration file
  - Resolves Bug #250979, Bug #250932 Missing dependencies
  - Restore plugins/Makefile.am which got nuked somehow
  - remove dus.dbus_bindings.bus_name_has_owner(), deprecated as of F7
  - wrap rpm transactions in try/except


author: John Dennis <jdennis@redhat.com> - 1.10.2-1
changelog:
  - remove all copied code from test_setroubleshootd, now we import
     from setroubleshoot
   
  - export ClientConnectionHandler from rpc.py as a base class.
     Derive SetroubleshootdClientConnectionHandler and
     AuditClientConnectionHandler from ClientConnectionHandler.

  - add audisp_listen as test program

  - create setroubleshoot sym link in top devel directory pointing
     to src so import setroubleshoot.foo if PYTHONPATH=topdir

  - add get_option, convert_cfg_type to config.py.in so that one
     can pass optional dict to override config file settings

  - rewrite log_init() so it's easier for other programs to use it,
     fix the import logic concering log & config

  - remove log code from test_setroubleshoot, now just does import
     from setroubleshoot.
   
  - test_setroubleshootd can now handle audit records in both text
     and binary formats, can be selected by command line arg. It can now
     either output to clients connecting on a socket or to stdout. Can
     now optionally exit after N socket client connections.

  - remove non audit record lines from test data

  - remove config_init() and log_init() from package __init__.py
     It was the wrong place to call them, now call them when the
     process initializes before the first setroubleshoot imports

  - add parse_config_setting() and set_config() to config module
  - setroubleshootd now accepts -c --config command line arg
  - test_sectroubleshoot: add err defines & program_error exception
     add is_valid() tests to assure we read a valid audit record
     log the unrecognized line if not valid, clean up socket close()

  - Relates Bug #247056, update initscript to LSB standards
     Note: LSB initscripts in Fedora is not yet a resolved issue,
     the changes implemented were to add an LSB block and support
     the new LSB try-restart and force-reload commands. However
     the new /lib/lsb/init-functions are NOT currently used as this
     is the unstable part.


author: John Dennis <jdennis@redhat.com> - 1.10.3-1
changelog:
  - modify avc_audit.py to use new audit_data.py implementation

  - can listen for audit events on either /var/run/audit_events
     in bindary protocol mode or /var/run/audisp_events in
     text protocol mode


author: John Dennis <jdennis@redhat.com> - 1.10.5-1
changelog:
  - update code for command line log file scanning to work with
     new log file scanning code introduced for the browser.

  - update Bulgarian translation (Doncho N. Gunchev (gunchev@gmail.com))

  - update Polish translation (Piotr Drąg (raven@pmail.pl))

  - Resolves bug 239893: sealert wakes up very often
     This was caused by the use of threads and pygtk's thread signal
     handling.  The only use of threads in sealert was for log file
     scanning so that the UI would remain responsive during a
     scan. Threads in sealert have now been completely
     removed. Instead the scanning work is performed in a gobject idle
     function called from the main loop. The idle function is written
     as a python generator function which allows for the function to
     perform a small amount of work, save it's execution state and
     return. The next time the idle function is called from the main
     loop it resumes execution from it's last state until it decides
     to yield control again. This way the long running scan/analysis
     can be performed in small successive units of work during the
     time the application is otherwise idle and it does not interfere
     with the rest of the GUI event processing. Everything now occurs
     in an event loop, think of it as the applications process/thread
     scheduler whose event handlers execute time slices.

  - rewrote parts of the audit input pipeline to use generators
     instead of callbacks, thus permitting the logfile scanning code
     to yield control with more granularity. Also updated
     test_setroubleshootd and audisp_listen to use the new
     generator/yield logic.

  - rewrote the dialog used for scanning log files, progress bar
     updates are now in the dialog, the scan can be terminated part
     way through, errors from the scan are reported in pop-up dialog,
     one can only dismiss the dialog with success if the scan had
     been successfully run to completion, otherwise the user is only
     left with the option to cancel.

  - Relates bug 252035  bug 247469, setroubleshootd and sealert should
     exit if SELinux is disabled.

  - add utility functions escape_html() and unescape_html()

  - fix initial sort order in browser, track sort order in browser

  - modify AVC.get_path() to only return a value if the 'path' field is
     set, formerly it also considered the fields 'name' & 'file' which were
     incorrect. get_path() now also looks to see if the string begins with a
     slash for a fully qualified path, if not it looks to see if its a 
     pseudo path such as 'pipe[12345]' or 'socket[12345]' and if so strips out
     the instance information inside the brackets and returns just the type of 
     the pseudo path. This is done because we do not want path information
     in the signature to be unique for each instance of the denial.

  - modify the TimeStamp class to hide it's internal datetime member,
     remove the cmp() method, the internal __cmp__ will be automatically invoked.

  - require selinux policy version in spec file to allow system dbus use
   
  - Resolves bug 256601: audit2allow generates incorrect syntax when comma "," in
     denied list

  - update po i18n files

  - Add support for pruning database by age and size


author: John Dennis <jdennis@redhat.com> - 1.10.7-1
changelog:
  - Fix spec file requires for opening an HTML page
     In configure.ac search for xdg-open and htmlview in priority order,
     set variable html_browser_open to the one found, in spec file require
     xdg-utils for fedora and htmlview for RHEL.

  - add "Host" column in browser
     add "Toggle Column Visibility" menu to toggle display of any column on/off

  - Resolves bug 310261: setroubleshoot notifications aren't throttled

  - add support for AUDIT_EOE, end-of-event, if AUDIT_EOE immediately
     emit cached event. Disable timeouts used to flush events if
     AUDIT_EOE has been seen.


author: <jdennis@redhat.com> - 2.0.0-1
changelog:
  - prepare for v2 test release
  - Completed most work for version 2 of setroubleshoot, prepare for test release
  - import Dan's changes from the mainline
     primarily allow_postfix_local_write_mail_spool plugin
  - escape html, fix siginfo.format_html(), siginfo.format_text()
  - add async-error signal
  - change identity to just username
  - make sure set_filter user validation works and reports error in browser
  - fix generation of line numbers and host when connected to audispd
  - add permissive notification, resolves bug 231334: Wording doesn't change for permissive mode
  - resolves bug 244345: avc path information incomplete
  - get the uid,gid when a client connects to the server
  - set_filter now verifies the filter is owned by the user,
  - resolves bug 288261: setroubleshoot lack of user authentication
  - remove filter options which weren't being used
  - change '@' in audit data hostname to '.'
  - remove restart dialog
     resolves bug 321171: sealert's dialog after update is higly confusing
  - fix rpc xml arg
  - fix handling of host value
  - tweak what fields are in signature
  - move data items which had been in 'avc' object into siginfo
  - clean up siginfo format
  - large parts of new audit data pipeline working, checkpoint
  - fix duplicate xml nodes when generating xml tree
  - audit event can now be xml serialized
  - switch from using int's for audit record types to strings
  - avoid conversion headaches and possibilty of not being
     able to convert a new unknown type
  - add logic to allow XmlSerialize to be subclassed and init_from_xml_node to be overridden
  - add support to xml serialize classes AuditEventID, AuditEvent, AuditRecord
  - use metaclass for xml class init
  - start adding xml support to audit data classes
  - Use metaclass to wrap class init
  - move xml serialization code from signature.py to xml_serialize.py
  - simplify aspect of the serialization code
  - add unstructured xml mapping, each xml element name has its content mapped to obj.name
  - modify xml serialization to be driven by xml contents
  - general clean up
  - checkpoint conversion of serialization to use metaclasses
  - clean up class/data specifications for XmlSerializable
  - add support for client rpc testing
  - add changelog entry
  - add SubProcess class to setroubleshootd in preparation to
  - run daemon as subprocess so we can gather results and
     compare them to the expected data we sent
  - rewrite all plugins to use new v2 audit data
  - add SubProcess class to setroubleshootd in preparation to 
            run daemon as subprocess so we can gather results and
            compare them to the expected data we sent
  - add new test support: add config section 'test', add boolean 'analyze' to
     config test section, add class TestPluginReportReceiver which is installed
     if test.analyze is True, it prints analysis report. In test_setroubleshootd
     send AUDIT_EOE to assure sequential event processing so analysis results
     have same ordering as events that are sent by test_setroubleshootd
  - alert signatures now include host information, alerts will be grouped by host


author: <jdennis@redhat.com> - 2.0.1-1
changelog:
  - make connection error message persist instead of timeout in browser
  - updated Brazilian Portuguese translation: Igor Pires Soares <igor@fedoraproject.org>
  - implement uid,username checks
  - rpc methods now check for authenticated state
  - fix html handling of summary string
  - add 'named' messages to status bar, make sure all messages either timeout or are named
  - fix ordering of menus, resolves bug 427418
  - add 'hide quiet' to browser view filtering, resolves bug 427421
  - tweak siginfo text formatting
  - add logon to SECommandLine so that sealert -l <local_id> works


author: <jdennis@redhat.com> - 2.0.2-1
changelog:
  - Resolve bug 428252: Problem with update/remove old version
  - Add code to validate xml database version, if file is incompatible it is not read,
     the next time the database is written it will be in the new version format.
     This means the database contents are not preserved across database version upgrades.
  - Remove postun trigger from spec file used to clear database between incompatible versions
     the new database version check during database read will handle this instead
  - bullet proof exit status in init script and rpm scriptlets
  - Resolve bug 247302: setroubleshoot's autostart .desktop file fails to start under a KDE session
  - Resolve bug 376041: Cannot check setroubleshoot service status as non-root
  - Resolve bug 332281: remove obsolete translation
  - Resolve bug 344331: No description in gnome-session-properties
  - Resolve bug 358581: missing libuser-python dependency
  - Resolve bug 426586: Renaming translation po file from sr@Latn to sr@latin
  - Resolve bug 427260: German Translation
  - enhance the sealert man page


author: <jdennis@redhat.com> - 2.0.4-1
changelog:
  - Resolve bug 430421: audit_listener_database.xml:3029: parser error in xmlParseDoc()
    rewrite the audit_msg_decode logic to beaware of specific audit fields
  - add new template substitution $SOURCE, a friendly name, $SOURCE_PATH still exists
    and is the full path name of $SOURCE, also add 'source' attribute in AVC class,
    fix how source and source_path are computed from audit's comm and exe fields
  - fix the computation of tpath to also look at the audit name field, formerly
    it had only been looking at path, fixes <Unknown> showing up for many targets
  - add exception handling around xml file writes (Alan Cox reports problem when /var is full)
  - add testing documentation
  - Resolve bug 430845: obsolete URL in setroubleshoot package description
  - Resolve bug 428960: Permissive message makes no sense.
  - init script now allows extra test options
  - show_browser() now opens and raises the window (e.g. presents) rather than just
    assuring it's realized (e.g. iconified, or hidden)
  - sealert -l message in syslog converts from html before writing to syslog
  - Resolve bug 320881: export setroubleshoot_selinux_symposium in PDF format
  - add code to verify all async rpc's have been cleared from the async rpc cache
  - add code to set a default rpc method return if the interface does not define a callbak
    (methods which did not have a callback were not returning anything and hence were no
     getting cleared from the cache)


author: John Dennis <jdennis@redhat.com> - 2.0.5-1
changelog:
  - allow sealert -l lookup to accept * wildcard
  - add a few more audit fields needing special decode handling


author: <jdennis@redhat.com> - 2.0.6-1
changelog:
  - add dialog to run a command in the background, capture it's stdout & stderr
      report it's status, kill it, and pass it a pseudo terminal for password prompts
      - separate the fix command into it's own section in formatted alerts
      - add UI for running the fix command, enable only if there is a single selection
        and the selected alert has a fix command
        - add a config parameters 'run_fix_cmd_enable' to control if fix commands
        can be run, defaults to False
        - Resolve bug 431380: prevent notify popups while setroubleshoot is open


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Update to upstream
    - 2008-10-22    <jdennis@redhat.com>
      - Fix pruning code
      - Fix time stamps


author: Dan Walsh <dwalsh@redhat.com> - 2.0.12-1
changelog:
  - Update to upstream
    - 2008-10-06  Dan Walsh <dwalsh@redhat.com>
    - remove .png from desktop files


author: Dan Walsh <dwalsh@redhat.com> - 2.1.3-1
changelog:
  - sedispatch needs to connect to dbus on avc arrival, 
    instead of startup, since the dbus daemon is not started 
    when sedispatch starts


author: Dan Walsh <dwalsh@redhat.com> - 2.2.1-1
changelog:
  - Update to upstream
    * Thomas Liu <tliu@redhat.com>
    Bug fixes to GUI, added Delete All Alerts menu item.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.9-1
changelog:
  - Update to upstream
    2009-6-25  Thomas Liu <tliu@redhat.com>
    - Added a "Copy to Clipboard" button to the browser GUI.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.11-1
changelog:
  - Update to upstream
    2009-7-01 Thomas Liu <tliu@redhat.com> 
    - Fixed browser behavior when there are no alerts
    - Fixed seapplet behavior when there are no alerts
    - Made delete all button delete alerts on server side and on local side


author: Dan Walsh <dwalsh@redhat.com> - 2.2.13-1
changelog:
  - Update to upstream
    2009-7-07 Thomas Liu <tliu@redhat.com> 
    - Fixed detail doc not clearing when deleting all alerts
    - Hid notify check when deleting all alerts.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.14-1
changelog:
  - Update to upstream
    2009-7-15 Dan Walsh <dwalsh@redhat.com> 
    - Fix handling of syscall record a1 field
    - Translate "/" to mountpoint when returned by kernel


author: Dan Walsh <dwalsh@redhat.com> - 2.2.20-1
changelog:
  -Update to upstream 
          - 2009-8-18 Thomas Liu <tliu@redhat.com>
          - Added check for new policy.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.35-1
changelog:
  - Fix translations, plurals and glade
    - Update Po
    - Fix plural form
    - Add support for Green Plugins


author: Dan Walsh <dwalsh@redhat.com> - 2.2.50-1
changelog:
  - Exit with error code if you run sealert as root and try to connect to session bus
  - Fix Crash when ino is not defined


author: Dan Walsh <dwalsh@redhat.com> - 2.2.61-1
changelog:
  - Add Gavin Romig-Koch report patch
  - Cleanup Browser window
  - Remove avc messages that are allowed or dontaudited in current poilcy


author: Dan Walsh <dwalsh@redhat.com> - 2.2.67-1
changelog:
  - Fix browser to handle ignore flag
  - Remove tpath for signature 
  - Fix audit2why handling for sealert and setroubleshoot
  - Fix sort order selection
  - Fix dontnotify handling


author: <dwalsh@redhat.com> - 3.0.7-1
changelog:
  - Apply patch from Yuri Chornoivan to fix spelling mistakes
  - Remove py files that are no longer used
  - Add details button


author: <dwalsh@redhat.com> - 3.0.11-1
changelog:
  - Better handling of tracebacks in terminal mode
  - Fix up messages on process and capability avc messages
  - Update translations


author: <dwalsh@redhat.com> - 3.0.19-1
changelog:
  - Fix man page to reflect change in gui
  - Fix sealert -fixit call to import load_plugins
  - update translations
  - Fix handling of empty tpath in gui


author: <dwalsh@redhat.com> - 3.0.30-1
changelog:
  - Change seapplet to only check for AVCs on login, if checkonlogin flag is turned on in ~/.setroubleshoot file
  - Fix list_all_alerts bug causing crash on bad type


author: <dwalsh@redhat.com> - 3.0.37-1
changelog:
  - Move serverconnection.py and FixIt commands from setroubleshoot to setroubleshoot-server
  - Remove run_cmd.py


author: <dwalsh@redhat.com> - 3.0.40-1
changelog:
  - Apply Miroslav patch that rewrites sealert option handling with using optparse. Fixing conflicting options problems.


author: Rex Dieter <rdieter@fedoraproject.org> 3.0.45-2
changelog:
  - optimize/update scriptlets
  - don't own icons/hicolor
  - drop %config tag on applications/*.desktop

  - Patch from Mgrepl to stop printable from crashing if None is passed in
  - Update to latest translations


author: Dan Walsh <dwalsh@redhat.com> - 3.1.1-1
changelog:
  - remove specific logging and move to syslog
  - Fix handling of AVC messages broken by fix for memory leaks


author: Dan Walsh <dwalsh@redhat.com> - 3.1.3-1
changelog:
  - Update to latest translations
  - Fix handling of avc messages, missing \n
  - Default to check for AVC's on login


author: Dan Walsh <dwalsh@redhat.com> - 3.1.16-1
changelog:
  - Fix sealert to handle avc's in /var/log/messages which will be numbered 1400 and 1107 rather then AVC and USER_AVC
  - Update Translations
  - Fix hostname substitution to only effect hostnames


author: Dan Walsh <dwalsh@redhat.com> - 3.2.1-1
changelog:
  - Remove sesearch from package and start using sepolicy from policycoreutils-python
  - Fix retrieval of writable types to translate attributes into the group of types available, and not return non file types.


author: Dan Walsh <dwalsh@redhat.com> - 3.2.9-1
changelog:
  - On update cp instead of rename, since there could be a situation where
  someone has ~/.config on a different file sytem then ~.  It has happened.
  - Fix --password spelling error
  - Remove --quit option from sealert
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> 3.2.24-1.1
changelog:
  - Stop sending syslog.LOG_DEBUG Messages unless loglevel is set to debug
  - Add the policy rpm string to the user comments of an already reported bug from jfilak@redhat.com
  - Remove at_console lines from policykit so cockpit can use dbus interfaces.
  - Fix handling of target paths that decode screws up
  - Provide the policy rpm in Bugzilla bug reports by jfilak@redhat.com
  - setroubleshootd is set to be run as setroubleshoot user instead of root user
  - translations updated from https://fedora.zanata.org/project/view/setroubleshoot


author: Petr Lautrbach <plautrba@redhat.com> - 3.2.25-1
changelog:
  - Extended DBUS API, see DBUS.md
  - get_alert() DBUS API extended with more parameters
  - sedispatch uses a timeout when collecting audit events (#1322771)
  - setroubleshoot: Ensure that dbus string param isn't null
  - Translations updated from https://fedora.zanata.org/project/view/setroubleshoot


author: Petr Lautrbach <plautrba@redhat.com> - 3.2.26-1
changelog:
  - get_alert() and get_all_alerts_since() DBUS APIs change to use
    number of microseconds instead of date string
  - level = debug can be set separately for sealert_log and setroubleshootd_log
  - added new directive to setroubleshootd_log - log_full_report = True|False
  - added new methods to DBUS API:
    set_filter(), get_all_alerts_ignored(), delete_alert()
  - suggest my-<command>.pp modules instead of mypol.pp
  - setroubleshoot.conf cleanup
  - bug fixes


author: Petr Lautrbach <plautrba@redhat.com> - 3.2.28-1
changelog:
  - Fix sealert message for capability2
  - Spelling fixes
  - sealert - provide a better error message when SELinux is disabled (#1420084)
  - Fix report problem summary string (#1343397)
  - Update setroubleshootd.8 (#1348140)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.29-1
changelog:
  - Fix sealert message for process2 (#1507909)
  - Remove additional "If " string from plugin messages (#1177347)
  - Fix semi-translated messages (#1332126)
  - Make labels on GtkButtons translatable
  - Set translation domain for Gtk.Builder() object to have strings correctly translated (#1370100)
  - Do not split If sentences to framework and plugins (#1177347)
  - Don't stop when the plugin directory is empty
  - Change "check_for_man" return value upon failure
  - Fix "plugin details" message content
  - Add "init_args" function to Plugin 
  - Fix sealert crash when setroubleshootd fails to start (#1405003)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.30-1
changelog:
  - Fix summary and "if" text for AVCs with unknown target path (#1437772)
  - Remove unused booleans.py file
  - src/sealert: Finish dbus communication after error (#1461486)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.30-3
changelog:
  - Check for the existence of setroubleshoot group separately (#1478118)
  - Fix AVC.__typeMatch to handle aliases properly (#1459844, #1459835, #1459875)
  - Fix allowed_target_types (#1460642, #1460648)


author: Vit Mojzis <vmojzis@redhat.com> - 3.2.30-4
changelog:
  - Catch exceptions caused by lookup_signature (#1636369, #1627908)
  - Fix translation of hex values in AVCs (#1477236)


author: Christian 'Dr. Disk' Hechelmann <drdisk@ds9.au.s.shuttle.de>
changelog:
  - added %attr's
  - added sanity check for RPM_BUILD_ROOT
  - setserial is now installed into /bin, where util-linux puts it and all
    startup scripts expect it.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - pulled into distribution
  - used setserial-2.12_CTI.tgz instead of setserial-2.12.tar.gz (former is
    all that sunsite has) - not sure what the difference is.


author: Tim Waugh <twaugh@redhat.com> 2.17-5
changelog:
  - Fix init script (bug #52862).
  - Avoid temporary file vulnerability in init script.
  - Update README: it's --add, not -add.


author: Tim Waugh <twaugh@redhat.com> 2.17-20
changelog:
  - Fixed mandir in fhs patch (bug #226411).
  - Don't run strip (bug #226411).
  - Fixed readme patch to talk about Fedora not Red Hat Linux (bug #226411).
  - Fixed build root tag (bug #226411).
  - Use SMP make flags (bug #226411).
  - Avoid %makeinstall (bug #226411).
  - Fixed summary (bug #226411).


author: Nalin Dahyabhai <nalin@redhat.com> 1.14-1
changelog:
  - use control files to find things so that the source needn't be
    revised so often
  - determine available translations at build-time (#102082)


author: Nalin Dahyabhai <nalin@redhat.com> 1.15-1
changelog:
  - prefer system-config-keyboard to kbdconfig (#122575)
  - handle tools which require command-line arguments correctly


author: Nalin Dahyabhai <nalin@redhat.com> 1.17.2-1
changelog:
  - clean up a compiler warning
  - add a new config file so that the system-config-authentication-tui
    shows up in the menu now that it's been moved


author: Nalin Dahyabhai <nalin@redhat.com> 1.17.3-1
changelog:
  - update PAM configuration to use "include" directive (#170265)
  - conflict with versions of the pam package (< 0.78) which don't
    support the "include" directive


author: Nalin Dahyabhai <nalin@redhat.com> 1.18-1
changelog:
  - fix sorting of multiple options so that precedence is determined
    correctly (#178022)
  - prefer authconfig-tui to authconfig, because if we have both, then
    authconfig is just a command-line app  (#178022)
  - actually include the README


author: Nalin Dahyabhai <nalin@redhat.com> 1.19-1
changelog:
  - fix crashers in cases when we find no configuration files (or malformed or
    useless ones) under %{_sysconfdir}/setuptool.d (#211084)


author: Nalin Dahyabhai <nalin@redhat.com> 1.19.4-1
changelog:
  - drop system-config-printer-tui from the list of things we search for as
    an option for printer configuration (#377401)


author: Phil Knirsch <pknirsch@redhat.com> 1.17-1
changelog:
  - Update to sg3-utils-1.17
  - Split package up into 3 subpackages: sg3_utils, devel and libs
  - Some minor updates to the specfile


author: Phil Knirsch <pknirsch@redhat.com> - 1.25-4
changelog:
  - Dropped really unnecessary Provides of sg_utils (#226414)
  - Use --disable-static in configure (#226414)


author: Dan Horák <dan@danny.cz> - 1.28-1
changelog:
  - update to version 1.28
  - added fixes from RHEL to rescan-scsi-bus.sh
  - added scsi-rescan symlink to the rescan-scsi-bus.sh script


author: Dan Horák <dan@danny.cz> - 1.37-5
changelog:
  - fix various man pages (#948463)
  - add man page for the rescan-scsi-bus.sh script (#948463)
  - Resolves: #948463


author: David Sommerseth <davids@redhat.com> - 1.37-7
changelog:
  - Avoid deletion of /dev/null (#1298737)
  - Fix syntax error in rescan-scsi-bus related to multipath flushing (#1255564)
  - Add upstream updates to sg_inq, sg_rdac and sg_vpd (#1170719)


author: Gris Ge <fge@redhat.com> 1.37-17
changelog:
  - Fix help documents of sg_requests, sg_senddiag and sg_write_buffer.
    (RHBZ #1359282, #1359286, #1359292)


author: Tomas Bzatek <tbzatek@redhat.com> 1:1.37-19
changelog:
  - Reorder 59-fc-wwpn-id.rules to run after 60-persistent-storage.rules (#1785303)
  - Fix the 59-fc-wwpn-id.rules syntax (#1750417)
  - Add 59-fc-wwpn-id.rules (#1684302)


author: Jan Synáček <jsynacek@redhat.com> - 1.2.0.10-9
changelog:
  - dos2unix'ed the patch
  - Call dos2unix before patching and dos2unix Makefile as well
  - Use %{_sbindir} instead of '/sbin'


author: Erik Troan <ewt@redhat.com>
changelog:
  - added patch for XOPEN oddities in glibc headers
  - check for ut_user before checking for ut_name -- this works around some
    confusion on glibc 2.1 due to the utmpx header not defining the ut_name
    compatibility stuff. I used a gross sed hack here because I couldn't make
    automake work properly on the sparc (this could be a glibc 2.0.99 problem
    though). The utuser patch works fine, but I don't apply it.
  - sleep after running autoconf


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the spec file
  - updated the patch so that new accounts created on shadowed system won't
    confuse pam_pwdb anymore ('!!' default password instead on '!')
  - fixed a bug that made useradd -G segfault
  - the check for the ut_user is now patched into configure


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - Note that /usr/sbin/mkpasswd conflicts with /usr/bin/mkpasswd;
    one of these (I think /usr/sbin/mkpasswd but other opinions are valid)
    should probably be renamed.  In any case, mkpasswd.8 from this package
    needs to be installed. (problem #823)


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - have userdel remove user private groups when it is safe to do so
  - allow -f to force user removal even when user appears busy in utmp


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - Serial: 1 because now we are using 19990827 (why the heck can't they have
    a normal version just like everybody else?!)
  - ported all patches to the new code base


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix usermod patch to check for shadow before doing any shadow-specific stuff
    and merge it into the pwlock patch


author: Matt Wilson <msw@redhat.com>
changelog:
  - use mandir for FHS
  - added patches in src/ and po/ to honor DESTDIR
  - use make install DESTDIR=$RPM_BUILD_ROOT


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change symlinked man pages to includers
  - require /usr/bin/newgrp (util-linux) so that /usr/bin/sg isn't left dangling


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Remove a fixed-size buffer that caused problems when adding a huge number
    of users to a group (>8192 bytes) (Bugs #3809, #11930)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - take LOG_CONS out of the openlog() call so that we don't litter the
    screen during text-mode upgrades


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't overwrite user dot files in useradd (#19982)
  - truncate new files when moving overwriting files with the contents of other
    files while moving directories (keeps files from looking weird later on)
  - configure using %{_prefix} as the prefix


author: Bernhard Rosenkraenzer <bero@redhat.com> 20000902-1
changelog:
  - Create an empty mailspool when creating a user so non-setuid/non-setgid
    MDAs (postfix+procmail) can deliver mail (#41811)
  - 20000902
  - adapt patches


author: Nalin Dahyabhai <nalin@redhat.com> 20000902-4
changelog:
  - use -O0 instead of -O on ia64
  - build in source directory
  - don't leave lock files on the filesystem when useradd creates a group for
    the user (#50269)
  - fix the -o option to check for duplicate UIDs instead of login names (#52187)


author: Nalin Dahyabhai <nalin@redhat.com> 20000902-12
changelog:
  - force .mo files to be regenerated with current gettext to flush out possible
    problems
  - fixup non-portable encodings in translations
  - make sv translation header non-fuzzy so that it will be included (#71281)


author: Nalin Dahyabhai <nalin@redhat.com> 20000902-13
changelog:
  - prevent libshadow from being built more than once, to keep automake happy
  - change how md5 and md5crypt are enabled, to keep autoconf happy
  - remove unpackaged files after %install


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.3-6
changelog:
  - adjust mailspool patch to complain if no group named "mail" exists, even
    though that should never happen


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.3-14
changelog:
  - lastlog: don't pass a possibly-smaller field to localtime (#109648)
  - configure: call AC_SYS_LARGEFILE to get large file support


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.3-15
changelog:
  - don't convert man pages to UTF-8 for RHEL 3, conditionalized using macro
  - fixup dangling man page references


author: Dan Walsh <dwalsh@redhat.com> 4.0.3-23
changelog:
  - Add get_enforce checks
  - Clean up patch for potential upstream submission
  - Add removemalloc patch to get it to build on 3.4


author: Adrian Havill <havill@redhat.com> 2:4.0.3-31
changelog:
  - check for non-standard legacy place for ncsd HUP (/var/run/nscd.pid) and
    then the std FHS place (/var/run/nscd.pid) (#125421)


author: Adrian Havill <havill@redhat.com> 2:4.0.3-33
changelog:
  - allow for mixed case and dots in usernames (#135401)
  - all man pages to UTF-8, not just Japanese (#133883)
  - add Polish blurb for useradd -n man page option (#82177)


author: Adrian Havill <havill@redhat.com> 2:4.0.3-35
changelog:
  - make the limit for the group name the same as the username (determined
    by the header files, rather than a constant) (#56850)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.7-4
changelog:
  - use newgrp binary
  - newgrp don't ask for password if user's default GID = group ID,
    ask for password if there is some in /etc/gshadow
    and in /etc/group is 'x' (#149997)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.7-5
changelog:
  - fix memory leak, and CPU spinning when grp_update() and
    duplicate group entries in /etc/group (#151484)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-6
changelog:
  - fix regression. Permissions on user* group* binaries
    should be 0750, because of CAPP/LSPP certification
  - fix groupdel man page


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-2
changelog:
  - improve audit logging (#211659)
  - improve "-l" option. Do not reset faillog if it's used (#213450).


author: Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-8
changelog:
  - groupmems: check username for valid character (#455603)
  - groupmems: don't segfault on nonexistent group (#456088)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-11
changelog:
  - fix license tag (#226416)
  - get rid of tabs in spec file (#226416)
  - convert HOWTO to UTF8 (#226416)


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-5
changelog:
  - newusers man page more informative
  - userdel should not need to run semanage
    Resolves: #586330 #586408


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-9
changelog:
  - fix gshadow functions from shadow utils
  - make shadow utils use gshadow functions from glibc
    Resolves: #665780


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-10
changelog:
  - do not use  gshadow functions from glibc, there is a bug
    in glibc sgetsgent(#674361)
    Resolves: #674234


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-11
changelog:
  - useradd man page (-m option)
  - create home directory on fs with noacl
  - remove faillog app (pam_tally.so is no longer shipped)
    Resolves: #523265, #622320


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.3-5
changelog:
  - userdel option to remove Linux login <-> SELinux login mapping (#639900)
  - useradd special exit value if SELinux user mapping is invalid (#639975)
  - usermod special exit value if SELinux user mapping is invalid (#639976)


author: Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-6
changelog:
  - report error to stdout when SELinux context for home directory
    cannot be determined (#973647)
  - audit the changing home directory owner (#885797)
  - do not set the default SELinux MLS range (#852676)


author: Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-8
changelog:
  - slightly more meaningful error messages if crypt() returns NULL (#988184)
  - explicit suid permissions


author: Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-14
changelog:
  - label the newly created home dir correctly (#1077809)
  - mention that chage -d 0 forces password change (#1135010)
  - improve date parsing and error detecting in chage
  - avoid full group database scanning in newgrp in most common case
  - report error if usermod asked for moving homedir and it does not exist


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-16
changelog:
  - update auditing to cover more events and fix some incorrect audit
    records - patch by Steve Grubb (#1151580)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-19
changelog:
  - documentation fixes (#1292820)
  - usermod: make password unlocking compatible with passwd (#1185425)
  - usermod: disallow ':' in raw password setting (#1292815)
  - improve the gid and uid allocation mechanism (#1279321)
  - lastlog: add options to unexpire unused accounts (#1285547)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-25
changelog:
  - prevent creating users ".." or "." or with all numeric usernames (#1373645)
  - raise limit for passwd and shadow entry length but also prevent
    writing longer entries (#1422497)
  - consider also supplementary group membership in newgrp (#1425078)


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-1
changelog:
  - rebase to current upstream release to bring newuidmap and newgidmap
  - re-allow all numeric usernames when SHADOW_ALLOW_ALL_NUMERIC_USER
    environment variable is set


author: Tomáš Mráz <tmraz@redhat.com> - 2:4.6-2
changelog:
  - ignore LOGIN_PLAIN_PROMPT variable in login.defs
  - correct wrong SUB_UID/GID_COUNT default in manual page (#1690522)


author: David Zeuthen <davidz@redhat.com> - 0.16-2
changelog:
  - Make Evince the default for application/pdf and application/postscript
  - Remove remaining references to gnome-ggv (application/x-gzpostscript and
    image/x-eps) as this is no longer in the distribution


author: Dan Williams <dcbw@redhat.com> - 0.16-3
changelog:
  - Update OpenOffice.org desktop file names. #155353
  - WordPerfect default now OOo Writer, since Abiword is in Extras


author: - Bastien Nocera <bnocera@redhat.com> - 0.22-2
changelog:
  - Don't say that webcal files are handled by evolution-2.0, it can't
  - Disable vCard mapping as well, as evolution doesn't handle it
    (See http://bugzilla.gnome.org/show_bug.cgi?id=309073)


author: - Bastien Nocera <bnocera@redhat.com> - 0.22-5
changelog:
  - Remove Totem as the default music/movie player, it will be the
    default for movies, as only it handles them, and Rhythmbox can
    handle missing plugins now


author: - Bastien Nocera <bnocera@redhat.com> - 0.23-5
changelog:
  - Make Totem the default for the mime-types it handles (#366101)
  - And make sure Rhythmbox is the second default only for the mime-types
    it handles


author: - Bastien Nocera <bnocera@redhat.com> - 0.60-3
changelog:
  - Remove Totem as handling Blu-ray and HD-DVD
  - Use brasero-ncb.desktop instead of nautilus-cd-burner for blank devices
  - Update media mime-types for Rhythmbox/Totem


author: Colin Walters <walters@verbum.org> - 0.71-3
changelog:
  - Requires(pre) on glib, since update-mime-database uses it
  - Remove /dev/null redirection, we should see future errors
    And really, RPM is dumb here - this stuff needs to go to
    log files.


author: Colin Walters <walters@verbum.org> - 0.71-4
changelog:
  - Fix previous change to be Requires(post); spotted by
    Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp>


author: Bastien Nocera <bnocera@redhat.com> 0.90-2
changelog:
  - Update list of defaults, adding new mime-types for Totem,
    as well as scheme handlers, and install defaults for
    Evolution and Firefox


author: Bastien Nocera <bnocera@redhat.com> 0.90-4
changelog:
  - Update defaults.list and update for newer desktop names,
    with help from Edward Sheldrake (#659457)


author: Bastien Nocera <bnocera@redhat.com> 0.91-3
changelog:
  - Make shotwell the default for camera roll handling
  - Make shotwell-viewer the default image viewer (for the
    image types it handles)
  - Prefer Rhythmbox to Totem for music files


author: Matthias Clasen <mclasen@redhat.com> - 1.0-2
changelog:
  - Own/%ghost files generated by update-mime-database from
    freedesktop.org.xml (patch by Ville Skyttä, #716451))


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 1.0-4
  - defaults.list: s/mozilla-firefox/firefox/ (see #736558)
  - defaults.list: s/gpk-install-file/gpk-install-local-file/
  - defaults.list: application/x-catalog=gpk-install-catalog.desktop (#770019)


author: Bastien Nocera <bnocera@redhat.com> - 1.8-3
changelog:
  + shared-mime-info-1.8-3
  - Remove triggers, they're not supported in RHEL 7.4's RPM
  Resolves: #1433916


author: Bastien Nocera <bnocera@redhat.com> - 1.8-4
changelog:
  + shared-mime-info-1.8-4
  - Fix CSV files being associated with LibreOffice Math instead
    of LibreOffice Calc
  - Resolves: #1438589


author: Donnie Barnes <djb@redhat.com>
changelog:
  - ALRIGHT!  Woo-hoo!  Erik already did the install-info stuff!
  - added BuildRoot
  - spec file cleanups


author: Petr Pisar <ppisar@redhat.com> - 4.13.3-2
changelog:
  - Fix decoding from positional argument while overriding output file
    (bug #901895)
  - Fix decoding to standard output when output file is - or /dev/stdout
    (bug #901895)


author: Peter Jones <pjones@redhat.com> - 0.3-2
changelog:
  - Require gnu-efi-3.0q for now.
  - Don't allow mmx or sse during compilation.
  - Re-organize this so all real signing happens in shim-signed instead.
  - Split out mokutil


author: Peter Jones <pjones@redhat.com> - 0.7-8
changelog:
  - Build -8 for arm as well.
    Related: rhbz#1100048
  - out-of-bounds memory read flaw in DHCPv6 packet processing
    Resolves: CVE-2014-3675
  - heap-based buffer overflow flaw in IPv6 address parsing
    Resolves: CVE-2014-3676
  - memory corruption flaw when processing Machine Owner Keys (MOKs)
    Resolves: CVE-2014-3677


author: Peter Jones <pjones@redhat.com> - 0.7-10
changelog:
  - Fix a couple more minor bugs aavmf has found in fallback.
    Related: rhbz#1190191
  - Build lib/ with the right CFLAGS
    Related: rhbz#1190191


author: Peter Jones <pjones@redhat.com> - 0.9-1
changelog:
  - Update to 0.9-1
  - Fix early call to BS->Exit()
    Resolves: rhbz#1115843
  - Implement shim on aarch64
    Resolves: rhbz#1100048
    Resolves: rhbz#1190191


author: Peter Jones <pjones@redhat.com> - 10-1
changelog:
  - Update to 10-1
  - Support ia32
    Resolves: rhbz#1310766
  - Handle various different load option implementation differences
  - TPM 1 and TPM 2 support.
  - Update to OpenSSL 1.0.2k


author: Peter Jones <pjones@redhat.com> - 11-1
changelog:
  - Update to 11-1
    Related: rhbz#1310766
  - Fix regression in PE loader
    Related: rhbz#1310766
  - Fix case where BDS invokes us wrong and we exec shim again as a result
    Related: rhbz#1310766


author: Peter Jones <pjones@redhat.com> - 15-3
changelog:
  - Fight with binutils to try to get a binary without timestamps in it.  Again.
    Related: rhbz#1649270


author: Peter Jones <pjones@redhat.com> - 15-4
changelog:
  - Fight with binutils to try to get a binary without timestamps in it.
    Again, but without breaking aarch64 this time.
    Related: rhbz#1649270


author: Peter Jones <pjones@redhat.com> - 15-5
changelog:
  - Fix a couple more things that are breaking reproducability, and thus
    breaking external review.
    Related: rhbz#1649270


author: Peter Jones <pjones@redhat.com> - 15-6
changelog:
  - Rebuild for bug fixes and new signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-7
changelog:
  - Implement Lenny's workaround.
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-8.el7
changelog:
  - Fix a load-address-dependent forever loop.
    Resolves: rhbz#1862045
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311
    Related: CVE-2020-15705
    Related: CVE-2020-15706
    Related: CVE-2020-15707


author: Adam Williamson <awilliam@redhat.com> 0.12.0-1.20111110git163bf4a114
changelog:
  - bump to current git to get vala 0.14 support for rawhide, GTK+ 3 port
  - adjust dependencies for vala, gtk, gsettings
  - adjust for gsettings port


author: Siddhesh Poyarekar <siddhesh.poyarekar@gmail.com> 0.12.0-1.20111117gitcf087489ea
changelog:
  - Bump to current git to fix build against LibRaw
  - LibRaw now has a dynamic library and shotwell is using it


author: Jindrich Novy <jnovy@redhat.com> - 0.12.3-5
changelog:
  - add patch to fix build against libgphoto2-2.5.0, thanks to Clinton Rogers
    (http://redmine.yorba.org/issues/5553)


author: Thomas Moschny <thomas.moschny@gmx.de> - 0.13.0-1
changelog:
  - Update to 0.13.0.
  - Remove patches applied upstream.
  - Add BR on json-glib.
  - Add runtime dependency on dconf.


author: David Malcolm <dmalcolm@redhat.com> - 4.10.2-2
changelog:
  - enable "with_python3" in the build
  - use py3dir throughout, as provided by python3-devel
  - name the python 3 sip binary "python3-sip"
  - fix a typo in the name of the data dir: python-3sip -> python3-sip
  - split out macros.sip into a new subpackage


author: Donnie Barnes <djb@redhat.com>
changelog:
  - upgraded to 0.99.38 (will it EVER go 1.0???)
  - all patches removed (all appear to be in this version)


author: Bill Nottingham <notting@redhat.com> 1.4.5-9
changelog:
  - tweak UTF-8 linedrawing patch slightly; add README describing some of
    the changes
  - fix a utee/dtee typo


author: Adrian Havill <havill@redhat.com> 1.4.9-1
changelog:
  - big upgrade to 1.4.9
  - manually redid partially rotted utf patch for sldisply.c
  - no longer necessary to chmod the so files
  - change copyright header to license


author: Petr Rockai <prockai@redhat.com> - 1.4.9-17
changelog:
  - Patch to compile with gcc4 by Robert Scheck (#151029). (Weeird,
    probably on march 2nd the used buildroot wasn't updated with
    gcc4 yet?).


author: Petr Raszyk <praszyk@redhat.com> - 1.4.9-22
changelog:
  - libslang-utf8.so should not use the symbol __libc_enable_secure 
  - (#161536). slang-nointerlibc.patch
  - Additional some comments/hints for C-Frame 121


author: Petr Raszyk <praszyk@redhat.com> - 2.0.5-5
changelog:
  - A patch by Bill Nottingham <notting@redhat.com>
    (#174761). slang-LANG.patch
    slang reads automatically sh-env-variable LANG.


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.0.6-1
changelog:
  - update to slang-2.0.6
  - move .so.2 link to main package
  - don't package static library and utf8 link
  - remove requires for libtool and libtermcap
  - rearrange doc files (#191583)


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.0.7-2
changelog:
  - ignore background color of trailing spaces if terminal has bce (#217276)
  - move static library to -static subpackage
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.1.2-2
changelog:
  - fix integer underflow in compute_hash (#302181)
  - fix SLang_set_error when called from signal handler (#297661)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.3-1
changelog:
  - update to 0.8.3 to also notice and reflect changes caused by internal
    add/modify/modrdn/delete operations


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.4-1
changelog:
  - update to 0.8.4 to fix:
    - problems updating references, particularly those for %referred() (#474478)
    - inability to notice internal add/modify/modrdn/delete operations (really
      this time) (#474426)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.5-2
changelog:
  - make the example nsslapd-pluginpath values the same on 32- and 64-bit
    systems, because we can depend on the directory server "knowing" which
    directory to search for the plugins


author: Nalin Dahyabhai <nalin@redhat.com> - 0.15-1
changelog:
  - fix %deref and %referred to fail rather than return a valid-but-empty
    result when they fail to evaluate (reported by Rob Crittenden)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.16-1
changelog:
  - fix NIS server startup problem when no port is explicitly configured and
    we're using portmap instead of rpcbind (#500903)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.17-3
changelog:
  - change buildreq from fedora-ds-base-devel to 389-ds-base-devel, which
    should avoid multilib conflicts from installing both arches of the new
    package (#511504)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.18-1
changelog:
  - update to 0.18
    - add a deref_rf function
    - schema-compat: don't respond to search requests for which there's no backend
    - schema-compat: add the ability to do standalone compat containers


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-1
changelog:
  - update to 0.21
    - schema-compat: don't look at standalone compat containers for a search,
      since we'll already have looked at the group container


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-2
changelog:
  - make sure we always pull in nss-devel and nspr-devel, and the right
    ldap toolkit for the Fedora or RHEL version


author: Nalin Dahyabhai <nalin@redhat.com> - 0.24-1
changelog:
  - carry our own yp.x, so that we don't get bitten if libc doesn't include
    yp client routines
  - we need rpcgen at build-time now


author: Nalin Dahyabhai <nalin@redhat.com> - 0.25-1
changelog:
  - speed up building compat entries which reference thousands of other entries
    (more of #692690)
  - 389-ds-base is apparently exclusive to x86_64 and %{ix86} on EL, so we have
    to be, too


author: Nalin Dahyabhai <nalin@redhat.com> - 0.26-1
changelog:
  - when building for 389-ds, use libpthread's read-write locks instead of
    NSPR's (part of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.27-1
changelog:
  - when building for 389-ds, use Slapi_RWLocks if they appear to be available
    (the rest of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.28-1
changelog:
  - when configured with --with-ldap=openldap, link with -lldap_r rather
    than -lldap (rmeggins, #769107)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.29-1
changelog:
  - add regmatchi/regsubi formatting functions which work like regmatch/regsub,
    but do matching in a case-insensitive manner
  - update NIS map defaults to match {CRYPT} userPassword values in a
    case-insensitive manner so that we also use {crypt} userPassword values
  - fix inconsistencies in the NIS service stemming from using not-normalized DNs
    in some places where it should have used normalized DNs


author: Nalin Dahyabhai <nalin@redhat.com> - 0.30-1
changelog:
  - skip recalculations when the attributes which changed don't factor into
    our calculations (part of #771493)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.33-1
changelog:
  - get more aggressive about skipping unnecessary calculations (most of
    the problem in #771444, though not the approach described there)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34-1
changelog:
  - do entry comparisons ourselves, albeit less throughly, to avoid the worst
    case in pathological cases (more of #771444)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.35-1
changelog:
  - add mmatch/mregmatch[i]/mregsub[i] formatting functions which work like
    match/regmatch[i]/regsub[i], but which can handle and return lists of
    zero or more results (part of #783274)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.36-1
changelog:
  - take steps to avoid making yp_first/yp_next clients loop indefinitely
    when a single LDAP entry produces multiple copies of the same NIS key
    for a given map


author: Nalin Dahyabhai <nalin@redhat.com> - 0.37-1
changelog:
  - fix a compile error on systems where LDAP_SCOPE_SUBORDINATE isn't defined
    (reported by Christian Neuhold)
  - conditionalize whether we have a build dependency on tcp_wrappers (older
    releases) or tcp_wrappers-devel (newer releases)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.39-1
changelog:
  - add a "default" function for trying to evaluate one expression, then
    another, then another... (part of #767372)
  - when creating a compat entry based on a real entry, set an entryUSN based on
    the source entry or the rootDSE (freeipa #864); the "scaffolding" entries
    won't have them


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-1
changelog:
  - treat padding values passed to the "link" function as expressions to be
    evaluated rather than simply as literal values (part of #767372)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.41-1
changelog:
  - log errors evaluating pad expressions in %link rather than continuing on
    until we hit an arithmetic exception (#810258)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a leak due to us assuming that slapi_mods_add_smod() not taking ownership
    of an smod along with its contents, when it just keeps the contents


author: Nalin Dahyabhai <nalin@redhat.com> - 0.43-1
changelog:
  - reintroduce support for directory server transactions (nhosoi, IPA#3046)
  - control transaction support at run-time, deciding when to do things based
    on the value of the nsslapd-pluginbetxn attribute in the plugin's entry
  - NIS: add default settings for shadow.byname and passwd.adjunct.byname maps


author: Nalin Dahyabhai <nalin@redhat.com> - 0.44-1
changelog:
  - add missing newline to a couple of debug log messages
  - note whether or not betxn support is compiled in as part of the
    nsslapd-pluginVersion value we report to the server
  - register callbacks in the same order in both plugins, so that
    their log messages are logged in the same order


author: Nalin Dahyabhai <nalin@redhat.com> - 0.44-2
changelog:
  - set betxn support to be disabled by default on Fedora 17 or EL 5 or older,
    which have versions of IPA < 3.0, per mkosek on freeipa-devel


author: Nalin Dahyabhai <nalin@redhat.com> - 0.46-1
changelog:
  - when checking if we can skip processing for a given change, pay attention to
    whether or not the changes cause the entry to need to be added or removed
    from a map (#912673)
  - check SLAPI_PLUGIN_OPRETURN in post-change hooks, in case the backend failed
    to update things but the server called us anyway


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.5-1
changelog:
  - merge Alexander Bokovoy's patches to
    - teach the schema compatibility plugin to optionally serve user and group
      information retrieved from libc as part of a set of compat entries
    - handle simple bind requests for those entries by calling out to PAM
    - to rewrite the DN of incoming bind requests to compat entries to point
      at the source entries, instead of returning a referral which most clients
      won't handle
  - include IPA-specific docs as docs


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.6-1
changelog:
  - only buildrequire libsss_nss_idmap-devel on releases that included SSSD
    version 1.10 or later, where it first appeared


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.7-1
changelog:
  - fix building against versions of directory server older than 1.3.0, which
    first introduced slapi_escape_filter_value()


author: Nalin Dahyabhai <nalin@redhat.com> - 0.48-1
changelog:
  - try to gracefully handle failures obtaining internal locks
  - fix locating-by-name of entries with names that require escaping
  - add self-tests for nsswitch and PAM functionality
  - make nsswitch mode properly handle user and group names with commas in them
  - handle attempts to PAM authenticate to compat groups (i.e., with failure)
  - drop the "schema-compat-origin" attribute


author: Nalin Dahyabhai <nalin@redhat.com> - 0.49-1
changelog:
  - add {nis,schema-compat}-ignore-subtree and -restrict-subtree settings,
    which should let us avoid deadlocks when tasks are modifying data in
    the backend database (#1007451)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.50-1
changelog:
  - if we get an EPIPE while registering with rpcbind, try to reconnect and
    retransmit before giving up


author: Nalin Dahyabhai <nalin@redhat.com> - 0.51-1
changelog:
  - fix another request argument memory leak in NIS server (#1040159)
  - fix miscellaneous items found by static analysis


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-1
changelog:
  - correctly reflect whether or not we're built with transaction support in
    the module's nsslapd-pluginVersion attribute
  - fix a couple of should've-used-memmove()-instead-of-memcpy() cases which
    would hit when removing maps or groups of maps (#1043546/#1043638)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-3
changelog:
  - remove ExclusiveArch if %{rhel} is 7 or higher, because 389-ds-base gets
    built for everything now (#1055711)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-5
changelog:
  - backport correction to the default settings for hosts.byname and
    hosts.byaddr NIS maps, so that their data items start with the host's
    address rather than a name (#1090948)


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-1
changelog:
  - Add support for IDM's ID views
  - Allow searching SSSD-provided users as memberUid case-insensitevly
  - Resolves: #1151436


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-2
changelog:
  - Complete ID views support to BIND operation
  - Ignore ID views outside schema-compat subtrees
  - Use 389-ds API compatible with RHEL 7.0
  - Resolves: #1151436


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-6
changelog:
  - delay sending responses from compat tree after map cache search
  - Resolves: #1273587
  - fix processing of ID views
  - Resolves: #1277576, #1265465


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-1
changelog:
  - New upstream release:
    - support updating passwords for the users from the primary tree
    - populate map cache in a separate thread to avoid blocking the DS
  - Resolves: #1292148


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-2
changelog:
  - Fix reported coverity issues
  - Make sure slapi-nis continue to work with SSSD 1.14 when default domain is defined
  - Resolves: #1292148


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-4
changelog:
  - Fixed: UPN-based search for AD users does not match an entry in slapi-nis map cache
  - Resolves: #1361123
  - Fixed: slapi-nis plugin modifies DS data
  - Resolves: #1360245


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-5
changelog:
  - Resolves: #1473572
  - Fixed: Make changes in overrides available in the compat tree at runtime
  - Resolves: #1473577
  - Fixed: slapi-nis should use requests to SSSD with ability to cancel them with a timeout


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.0-8
changelog:
  - Fixed: #1473572
  - Changes of ID overrides now force clearing of affected SSSD cache entries on IPA master
  - Related: #1473577
  - Synchronize timeout-enabled code with ipa-extdom-extop


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
changelog:
  - Upstream release 0.56.5
  - Resolves: rhbz#1820124 When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
  - Resolves: rhbz#1820122 ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED
  - Resolves: rhbz#1819018 ipa slapi-nis stack traces review request for LDAP server deadlock
  - Resolves: rhbz#1830894 Memory leak during search of idview overrides


author: Tomas Mraz <tmraz@redhat.com> 1:5.33-2
changelog:
  - Spec file cleanup by Robert Scheck <redhat@linuxnetz.de> (#170959)
  - manual release numbering
  - remove bogus patch of non-installed file
  - only non-removable drives should be added to smartd.conf
  - smartd.conf should be owned (#171498)


author: Tomas Mraz <tmraz@redhat.com> 1:5.33-3
changelog:
  - add libata disks with -d ata if the libata version
    is new enough otherwise do not add them (#145859, #174095)


author: Tomas Mraz <tmraz@redhat.com> - 1:5.33-5
changelog:
  - add default /etc/sysconfig/smartmontools file
  - ignore errors on startup (#186130)
  - test drive for SMART support before adding it to smartd.conf


author: Tomas Mraz <tmraz@redhat.com> - 1:5.36-2
changelog:
  - kudzu is deprecated, replace it with HAL (#195752)
  - moved later in the boot process so haldaemon is already running
    when drives are being detected


author: Tomas Mraz <tmraz@redhat.com> - 1:5.36-5
changelog:
  - set cloexec on device descriptor so it doesn't leak to sendmail (#214182)
  - fixed minor bug in initscript (#213683)
  - backported SATA disk detection from upstream


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-3
changelog:
  - fix #241385 - smartmontools missing dependency on mailx
  - fix #241388 - unneeded smartd-conf.py[co] installed in /usr/sbin


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-4
changelog:
  - fix #241389 - smartd-conf.py pulls in a big dependency chain, so
    build a separate config package


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-5
changelog:
  - add support for 24 disks on 3ware RAID controllers (related #252055)
  - fix #245442 - add %{arm} to smartmontools's set of build archs
  - update license tag


author: Tomas Smetana <tsmetana@redhat.com> - 1:5.37-6
changelog:
  - fix #271741 - smartd-conf.py should allow customization of parameters
  - fix #253753 - service starting by default, perhaps shouldn't
  - update initscript (related #247058 - initscript review)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:6.5-1
changelog:
  - smartmontools updated to 6.5
  - adds support for NVMe devices (#1369731)
  - minor spec cleanup (#1463148)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:7.0-1
changelog:
  - smartmontools updated to 7.0 (#1588532)
  - fixed detection of Device Statistics log with 256 sectors (#1590190)


author: Ondrej Kozina <okozina@redhat.com> - 0.1.0-1.20121026git1aaa372
changelog:
  - removed python binding since python can use dbus interface instead
  - removed btrfs-progs and LVM dependecies (#852174)
  - patch: do not build zypp plugin
  - patch: avoid abrt when 'diff' command is executed without arguments
  - patch: do not check for btrfs-progs binary
  - patch: do not allow 'create-config' command on non-thin LVM volumes (#852174)
  - edit libtool script to link with: '-Wl, --as-needed'
  - spec file polishing


author: Ondrej Kozina <okozina@redhat.com> - 0.1.2-1.20130211git676556f
changelog:
  - updated to latest upstream version
  - fixed wrong include: "auto_ptr.h" -> <memory>
  - moved diffutils dependency to client


author: Ondrej Kozina <okozina@redhat.com> - 0.1.3-1.20130418git7ca81a2
changelog:
  - updatet to latest upstream version
  - add support to compare extended attributes ('xadiff' command)
  - add support to revert modificiations in file's extended attributes
  - patch: avoid useless build dependency on libattr-devel


author: Ondrej Kozina <okozina@redhat.com> - 0.1.5-1
changelog:
  - updated to latest upstream
  - allow whitespace in ALLOW_USERS and ALLOW_GROUPS in snapper's config
  - enable new pam module
  - patch: pam module installed in proper libdir


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-3
changelog:
  - enable btrfs compare using send/receive in libbtrfs
  - patch: adapt sources to change in libtrfs API (btrfs_read_and_process_send_stream)
  - Resolves: #1055579


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-5
changelog:
  - patch: Fix failure in invoking btrfs internal comparison of subvolumes
  - patch: Remove references to missing programs from man pages
  - Resolves: #1060806, #1063844


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-6
changelog:
  - patch: Add norecovery option mounting XFS read-only snapshot
  - patch: Fix ACL modification failure with XFS filesystem
  - patch: Sync SELinux context of .snapshots subvolume (btrfs only)
  - Resolves: #1064111, #1065969, #1069312


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-7
changelog:
  - patch: fix empty-pre-post cleanup algorithm
  - patch: add conditionals for btrfs library versions
  - Resolves: #1071973 #1142954


author: Ondrej Kozina <okozina@redhat.com> - 0.1.7-9
changelog:
  - patch: fix snapperd abort while passing large data over dbus
  - patch: workaround linkage issue on s390 and ppc64le
  - Resolves: #1229353


author: Ondrej Kozina <okozina@redhat.com> - 0.2.8-1
changelog:
  - Update to snapper 0.2.8
  - patch: rule out race while mounting lvm snapshot
  - Resolves: #1250371 #1262370


author: Martin Gieseking <martin.gieseking@uos.de> 1.0.0-2
changelog:
  - replaced $CXXFLAGS with %{optflags} in %build section
  - removed empty %doc entry from %files devel


author: Martin Gieseking <martin.gieseking@uos.de> 1.0.2-1
changelog:
  - updated to release 1.0.2
  - changed License to BSD
  - dropped the patch as it has been applied upstream


author: Paul Wouters <paul@xelerance.com> 1.5.0.0-4
changelog:
  - Some filesystem defines moved from their specific (ext2)
    filesystem defines into the generic <linux/fs.h>.


author: Caolán McNamara <caolanm@redhat.com> - 1.7.1.1-5
changelog:
  - recreate autoconf to get correct includes when determining type
    sizes in order to build correctly


author: Paul Wouters <paul@xelerance.com> - 1.7.1.2-1
changelog:
  - Upgraded to 1.7.1.2
  - Link against compat-readline5 for GPLv2 license (Miroslav Lichvar)
    (bz #511310)


author: Paul Wouters <paul@xelerance.com> - 1.7.1.3-1
changelog:
  - Upgrade to 1.7.1.3
  - Includes fix for CVE-2010-2799 Stack overflow by lexical scanning of nested
    character patterns
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=620430


author: Paul Wouters <paul@nohats.ca> - 1.7.2.0-1
changelog:
  - Upgraded to 1.7.2.0 which allows tun/tap interfaces without IP address
    and introduces options openssl-compress and max-children.


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.1-1
changelog:
  - Updated to 1.7.2.1 for CVE-2012-0219, rhbz#821553, rhbz#821688
  - Remove patch merged upstream
  - Remove --disable-fips from configure


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.2-2
changelog:
  - Resolves: rhel#1017015 Use readline, not compat-readline5-devel
  - Added two patches fixing -Wformat issues
  - Enable hardened build
  - Cleanup obsolete spec file lines


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-2
changelog:
  - Change install directory to /usr/lib*/pkcs11/
  - Install pkcs11 module file
  - Use official upstream tar ball
  - Create ods user to own softhsm/token files
  - Enable migration tools (for epel6 softhsm-v1 installs)
  - Require p11-kit, nss-tools, for SoftHSM PKCS #11 Module file
  - Copy pk11install.c from coolkey package which is not built on all arches
  - Enable hardened build
  - Add upstream official source url
  - Add devel package
  - Excluding i686/ppc (make check fails and we are a leave package)
  - (thanks to Petr for jumping in for the initial build while I was too busy)


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-3
changelog:
  - Fix softhsm2-pk11install buid and post call
  - Do not use --with-objectstore-backend-db (causes issues on i686)


author: Petr Spacek <pspacek@redhat.com> - 2.0.0rc1-1
changelog:
  - Resolves: rhbz#1193892 Rebase to latest upstream version
  - i686/ppc/s390 architectures are now included in the build


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.0-3
changelog:
  - Resolves: rhbz#1507409 ObjectStore.cpp(59): Failed to enumerate object store in /var/lib/softhsm/tokens/
  - Resolves: rhbz#1540010 gnome-settings-daemon: gnome-settings-daemon killed by SIGSEGV


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1.95.0-1
changelog:
  - update to 1.95.0 (Soprano 2 beta 2)
  - new BRs clucene-core-devel, raptor-devel >= 1.4.15
  - now need redland-devel >= 1.0.6
  - add patch to find CLucene (clucene-config.h is moved in the Fedora package)
  - new Requires: pkg-config for -devel


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 2.0.3-2
changelog:
  - build apidocs and put them into an -apidocs subpackage (can be turned off)
  - BR doxygen and qt4-doc when building apidocs


author: Rex Dieter <rdieter@fedoraproject.org> - 2.2.3-2
changelog:
  - %files: drop ownership of %_datadir/dbus-1.0/interfaces (#334681)
  - %files: track shlib sonames
  - make -apidocs noarch


author: Rex Dieter <rdieter@fedoraproject.org> - 2.4.0-1
changelog:
  - soprano-2.4.0
  - %build: explictly %{_cmake_skip_rpath}, need to poke on cmake to see why 
    %{_libdir} is getting rpath'd here


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.3.1-1
changelog:
  - New upstream version 1.3.1
  - Minor specfile cleanups for livna submission.
  - Give the .so a proper version instead of 0.0.0
  - Don't use rpath in soundstretch binary


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.3.1-2
changelog:
  - Add BR: automake, because upstream uses symlinks to instead of copies of some
    needed automake files.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.3.1-4
changelog:
  - Add Requires: pkgconfig to -devel subpackage
  - Replace installed autoheader generated header file with our own version
    which contains only the nescesarry soundtouch specific defines, thus avoiding
    possible conflicts with other autoheader generated headers.


author: Per Øyvind Karlsen <peroyvind@linux-mandrake.com> 1.8-1mdk
changelog:
  - 1.8
  - drop Prefix tag
  - clean out redundant buildrequires
  - rm -rf $RPM_BUILD_ROOT at the beginning of %install, not %prep
  - use %makeinstall_std macro
  - cosmetics


author: Adrian Reber <adrian@lisas.de> - 2.3-2
changelog:
  - using a new url.lang to fix #195720
    (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=131352)


author: Leigh Scott <leigh123linux@googlemail.com> - 3.1.3-1
changelog:
  - updated to 3.1.3
  - change configure command so it finds boost_regex
  - fix source url's
  - add devel package
  - fix directory ownership
  - fix rpath on binary


author: Adrian Reber <adrian@lisas.de> - 3.1.6-1
changelog:
  - updated to 3.1.6
  - removed buildroot and clean section
  - fixed "missing c++ source language detection for .cxx extension" (#728311)
  - fixed "source-highlight : Conflicts with autoconf-archive" (#797794)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix rec manpage link - now that man pages are compressed, it should point to
    play.1.gz, not play.1


author: Bill Nottingham <notting@redhat.com> 12.17.4-1
changelog:
  - update to 12.17.4
  - ship soxmix (#102499)
  - fix soxplay to handle files with spaces (#91144)
  - use LFS (#79151)


author: Thomas Woerner <twoerner@redhat.com> 12.17.7-3
changelog:
  - fixed bad link for man/man1/rec.1.gz (#154089)
  - using /usr/include instead of kernel-devel includes


author: Jiri Moskovcak <jmoskovc@redhat.com> 13.0.0-2
changelog:
  - uses external libgsm instead of local copy
  - spec file update: added BuildRequires: gsm-devel
  - Resolves: #239955


author: Jiri Moskovcak <jmoskovc@redhat.com> - 14.0.0-1
changelog:
  - New version 14.0.0
  - Thanks to Chris Bagwell <chris at cnpbagwell dot com> for initial changes to spec file


author: Tom "spot" Callaway <tcallawa@redhat.com> 14.1.0-1
changelog:
  - fix license tag
  - update to 14.1.0
  - disabled static libs (if something really needs them, re-enable them
    in a -static subpackage)


author: Tom "spot" Callaway <tcallawa@redhat.com> 14.1.0-4.20081105cvs
changelog:
  - update to 20081105 cvs checkout (fixes many bugs, no longer creates _fmt_*.so.*)
  - move _fmt_*.so to main package so support for file formats no longer requires devel


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 14.4.1-4
changelog:
  - removed liblpc10 from source tarball due to licensing uncertainity
  - added license file to libgsm
  - fixed bogus dates in changelog


author: Jiri Kucera <jkucera@redhat.com> - 14.4.1-7
changelog:
  - Fix CVE-2017-18189
    Upstream patch: https://sourceforge.net/p/sox/code/ci/09d7388c8ad5701ed9c59d1d600ff6154b066397/
    Resolves: #1553590


author: Theo Van Dinter <felicity@kluge.net>
changelog:
  - Updates for 2.01 release
  - Fixed rc file
  - RPM now buildable as non-root
  - fixed post_service errors
  - fixed provides to include perl modules
  - use file find instead of manually specifying files


author: Theo Van Dinter <felicity@kluge.net>
changelog:
  - Updated for 2.20 release
  - made /etc/mail/spamassassin a config directory so local.cf doesn't get wiped out
  - added a patch to remove findbin stuff


author: Chip Turner <cturner@redhat.com>
changelog:
  - better control of service level, improvement in %post script.
  - (contribs from schirmer@taytron.net)


author: Tim Powers <timp@redhat.com> 2.43-6
changelog:
  - don't use rpms internal dep generator
  - buildrequire perl-Time-HiRes instead of perl(Time:HiRes) so we can satisfy build deps in the build system


author: Warren Togami <wtogami@redhat.com> 2.62-2
changelog:
  - upgrade to 2.62
  - Prereq -> Requires, former is deprecated
  - Require current version of perl
  - Remove urban myth clean test
  - TODO: Get rid of prefix


author: Warren Togami <wtogami@redhat.com> 2.62-3
changelog:
  - Ville Skyttä's fixes from #113596 including:
  - Fix buildroot traces
  - enable openssl
  - Trailing slash to DESTDIR (bug 90202 comment 14).
  - export optflags so they're honored, affects spamc only.


author: Ville Skyttä <ville.skytta@iki.fi> - 2.63-8
changelog:
  - #122233
  - Require perl(:MODULE_COMPAT_*).
  - Use %{_mandir} and %{_initrddir}.
  - Fix License tag and include License in docs.
  - Backslashify multiline init script description.


author: Warren Togami <wtogami@redhat.com> - 3.0-svn20040524
changelog:
  - #123432 do not start service by default
  - #122488 remove CRLF's
  - #123706 correct license
  - svn snapshot 20040524
  - svn snapshot 20040518


author: Warren Togami <wtogami@redhat.com> - 3.0-svn20040530
changelog:
  - svn snapshot 20040530
  - #124870 prevent service startup failure due to old -a option
  - #124871 more docs
  - #124872 unowned directories


author: Warren Togami <wtogami@redhat.com> - 3.0.2-9
changelog:
  - SA#4191 uri_to_domain() is broken for urls with empty port
    SA#4232 multipart message with 0 parts -> uninitialized in m//
    SA#4121 Score for user defined rules become ignored
    SA#3944 get_envelope_from not handling received header


author: Warren Togami <wtogami@redhat.com>
changelog:
  - Options for RHEL4
      * spamc/spamd cannot connect over IPv6 or SSL
      * sa-update is disabled
    The above functionality requires perl modules not included in RHEL4.
    You may still use them if you get those perl modules from elsewhere.
    RHEL5 ships these perl modules.


author: Warren Togami <wtogami@redhat.com> - 3.3.0-0.2.alpha1
changelog:
  - Include default rules to prevent mass confusion and complaints.
    You should really use sa-update though.  Really.
    Edit /etc/cron.d/sa-update to automate it.


author: Warren Togami <wtogami@redhat.com> - 3.3.3-0.14.svn816416
changelog:
  - 3.3.0 svn816416 snapshot, pre-alpha3
    Upstream just fixed important bug SA#6206.  Many other bugs fixed since alpha2.


author: Warren Togami <wtogami@redhat.com> - 3.3.3-0.18.svn816416
changelog:
  - Enable SOUGHT ruleset in nightly sa-update http://wiki.apache.org/spamassassin/SoughtRules
    You must enable the sa-update cron job manually in /etc/cron.d/sa-update
  - Custom channels may be specified in these config files:
        /etc/mail/spamassassin/sa-update-channels.txt
        /etc/mail/spamassassin/sa-update-keys.txt


author: Warren Togami <wtogami@redhat.com> - 3.3.0-0.27.rc1
changelog:
  - sa-update runs in cron automatically if spamd or amavisd is running
    If you use neither, you may force sa-update by editing /etc/sysconfig/sa-update


author: Nick Bebout <nb@fedoraproject.org> - 3.3.2-0.4.svn1071394
changelog:
  - replace @@VERSION@@ with current saversion
  - restart spampd after sa-update cronjob runs
  - update to svn1071394


author: Kevin Fenzi <kevin@scrye.com> - 3.3.2-12
changelog:
  - Fix sa-update not detecting spamd running. Fixes bug #755644
  - Add restart=always to systemd file to work around upstream bug. Bug #812359


author: Petr Lautrbach <plautrba@redhat.com> 3.3.2-17
changelog:
  - document rawbody's split into chunks (#892350)
  - avoid using array of cleaned uris <fkrska@redhat.com> (#892348)


author: Petr Lautrbach <plautrba@redhat.com> 3.4.0-1
changelog:
  - update to 3.4.0
  - Apply fix for amavisd and spampd reloading after rules updates. Fixes bug #1145654


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-3
changelog:
  - Fix CVE-2018-11781 - Local user code injection in the meta rule syntax
  - Fix CVE-2017-15705 - Certain unclosed tags in crafted emails allow for
  - scan timeouts and resulting denial of service
  - Resolves: rhbz#1632999


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-4
changelog:
  - Add missing Requires for perl(XSLoader) and perl(ExtUtils::MakeMaker),
  - which are no longer auto-generated due to a (expected) change in rpm-build
  - Related: rhbz#1632999


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.5-2
changelog:
  - Removed .la files
  - Removed doc-cs packages and merged it into doc package
  - Removed packaging of static files, and tested -without static_libs option for configure script
  - Moved symlink .so files from devel package to main package
  - Commented /sbin/ldconfig for devel package.


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.5-3
changelog:
  - added macro to prevent error from stopping build for not including *.la files
  - added epoch to the SPEC
  - conditional build seems to be working correctly the old way only??
  - unified changelogs


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-1
changelog:
  - using newest version of speech-dispatcher
  - updated %{_libdir}/libspeechd.so.2.0.4 to %{_libdir}/libspeechd.so.2.0.5
  - python packages are being generated correctly now
  - must force prefix=/builddir/build/BUILDROOT/speech-dispatcher-0.7.1-15.an7.x86_64/%{_prefix} to enable python packages to get installed correctly.
  - finding and deleting .*la files in /builddir/build/BUILDROOT/speech-dispatcher-0.7.1-15.an7.x86_64 to avoid unpackaged files error.


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-3
changelog:
  - Added Requires(post), Requires(preun) for -doc package
  - Changed scriptlet from postun to preun for -doc package
  - Removed Epoch
  - Moved %{_libdir}/lib*.so back to devel pacakge
  - Require dependecny on base pacakge is now set to %{version}-%{release} instead of %{version}
  - removed --prefix=/builddir/build/BUILDROOT/speech-dispatcher-0.7.1-15.an7.x86_64/%{_prefix}  against configure macro.
    -- -python subpackage does not build anymore.
  - removed python subpackag rules from SPEC file.


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-4
changelog:
  - Manually specyfying make install for each src directory to be installed
  - Installing python package seprately by by-passing make install


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-6
changelog:
  - changed BR to pulseaudio-lib-devel
  - removed dotconf BR
  - gave ownership of /%{python_sitelib}/speechd-0.3-py2.5.egg-info to python package if package is built for Fedora 9 or above


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-7
changelog:
  - changed license of base package to GPLv2+ and GPL
  - changed license of all other packages to GPLv2+
  - fixed install sequence using cleaner for loop and pushd and popd commands
  - added init script for speech-dispatcher daemon
  - added COPYING to doc in base package
  - removed comment after /sbin/ldconfig
  - resolved rpmlint errors for base package [except UTF-8 encoding error for (cs) documentation file]
  - renamed long_message to spd_long_message and run_test to spd_run_test
  - reset mode of _test.py to 0755


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-8
changelog:
  - converted speech-dispatcher-cs.info to UTF-8 encoding
  - removed multiple file listings of /usr/lib/python2.5/site-packages/speechd/_test.py
    and fixed its mode
  - added init script as a SOURCE instead as a patch
  - duplicate Requires have now been removed
  - Timestamping of files has now been added
  - Install script fixed
  - init script fixed


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-10
changelog:
  - removed Requires(preun) duplicates
  - applied -p option correctly to install command
  - fixed macros in changelog to prevent them from exapnding
  - fixed the init script
  - added patch to change log directory of speech-dispatcher and start only espeak


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-12
changelog:
  - added BuildRequires: texinfo (for makeinfo)
  - changed permissions of Sourcex to 0644
  - incorporated modified init script by mtasaka
  - fixed a few more macros in changelog
  - modified location of Source1 and Patch0 to point to online locations


author: Hemant Goyal <goyal.hemant@gmail.com> 0.6.6-17
changelog:
  - changing permissions of speech-dispatcher to 6711 (setuid and setguid)
  - relocating configuration files in case of OLPC branch.
  - excluding init script in case of OLPC branch.


author: Tomas Hoger <thoger@redhat.com> - 1.2-0.7.beta3
changelog:
  - Security update: Add mode checks to speex_packet_to_header() to protect
    applications using speex library and not having proper checks
    (CVE-2008-1686, #441239, https://trac.xiph.org/changeset/14701)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2-0.17.rc1
changelog:
  - update config.guess and config.sub for aarch64 (#926562)
  - make some dependencies arch-specific
  - remove obsolete macros


author: Gerd Hoffmann <kraxel@redhat.com> - 0.5.2-2
changelog:
  - Fix license: LGPL.
  - Cleanup specfile, drop bits not needed any more with
    recent rpm versions (F13+).
  - Use optflags as-is.
  -


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-2
changelog:
  - Various bugfixes from upstream git:
    - Make spicec work together with the Firefox XPI for RHEV-M
    - Make sure the spicec window gets properly raised when first shown


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-3
changelog:
  - Log to ~/.spicec/cegui.log rather then to CEGUI.log in the cwd, this
    fixes spicec from aborting when run in a non writable dir (#650253)


author: Hans de Goede <hdegoede@redhat.com> - 0.6.3-4
changelog:
  - Fix the info layer not showing when used through the XPI
  - Do not let the connection gui flash by when a hostname has been specified
    on the cmdline
  - Fix spice client locking up when dealing with XIM input (#654265)
  - Fix modifier keys getting stuck (#655048)
  - Fix spice client crashing when dealing with XIM ibus input (#655836)
  - Fix spice client only showing a white screen in full screen mode


author: Hans de Goede <hdegoede@redhat.com> - 0.8.0-2
changelog:
  - Fix being unable to send ctrl+alt+key when release mouse is bound to
    ctrl+alt (which can happen when used from RHEV-M)


author: Alon Levy <alevy@redhat.com>
changelog:
  - Fix mjpeg memory leak and bad behavior.
  - Add usbredir to list of channels for security purposes. (#819484)


author: Soren Sandmann <ssp@redhat.com> - 0.11.3-1
changelog:
  - Add capability patches
  - Add capability patches to the included copy of spice-protocol

      Please see the comment above Patch6 and Patch7
      regarding this situation.


author: Yonit Halperin <yhalperi@redhat.com> 0.12.4-1
changelog:
  - New upstream release 0.12.4
  - Require libjpeg-turbo-devel instead of libjpeg-devel
  - Remove "BuildRequires: spice-protocol" from spice-server
  - Add "Requires: spice-protocol" to spice-server-devel.


author: Hans de Goede <hdegoede@redhat.com> - 0.12.4-1
changelog:
  - Add patches from upstream git to fix sound-channel-free crash (rhbz#986407)
  - Add Obsoletes for dropped spice-client sub-package


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-5
changelog:
  - Fix qemu crash during migration with reboot
    Resolves: rhbz#1016795
  - Monitor whether the client is alive
    Resolves: rhbz#1016790


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-7
changelog:
  - Fix assert in mjpeg_encoder_adjust_params_to_bit_rate()
    Resolves: rhbz#1086823
  - Fix "Spice-ERROR **: reds.c:1464:reds_send_link_ack: assertion
    `link->link_mess->channel_type == SPICE_CHANNEL_MAIN' failed" assertion
    Resolves: rhbz#1058625
  - Lower a monitor-config warning to debug level
    Resolves: rhbz#1119220
  - mjpeg: Don't warn on unsupported image formats
    Resolves: rhbz#1070028


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.4-8
changelog:
  - Fix defects reported by Coverity
    Resolves: rhbz#885717
  - Validate surface bounding box sent from QXL driver
    Resolves: rhbz#1052856
  - Fix assertion sometimes happening during migration while a client is
    connected
    Resolves: rhbz#1035184
  - Fix crash when restarting VM with old client
    Resolves: rhbz#1145919


author: Fabiano Fidêncio <fidencio@redhat.com> 0.12.4-10
changelog:
  - Fix qemu segmentation fault (core dumped) when boot KVM guest with
    spice in FIPS enabled mode.
    Resolves: rhbz#1071176


author: Fabiano Fidêncio <fidencio@redhat.com> 0.12.4-11
changelog:
  - Don't assert on invalid client message
    Resolves: rhbz#1227410
  - Don't truncate large 'now' values in _spice_timer_set
    Resolves: rhbz#1227408
  - Avoid race conditions reading monitor configs from guest
    Resolves: rhbz#1239128
  - Lock the pixmap image cache for the entire fill_bits call
    Resolves: rhbz#1235443


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-16
changelog:
  - Use autosetup
    Related: CVE-2016-0749
  - Fix heap-based memory corruption within smartcard handling
    Resolves: CVE-2016-0749
  - Fix host memory access from guest with invalid primary surface parameters
    Resolves: CVE-2016-2150


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-17
changelog:
  - Fix crash when the client sends a wrong header (for example when using spice-html5)
    Resolves: rhbz#1281442
  - Fix crash when guest provides wrong address
    Resolves: rhbz#1264356
  - Fix thread-safety issue causing a crash when playing a Youtube video spanning
    multiple monitors
    Resolves: rhbz#1253375
  - Add patches reducing QEMU wake-ups
    Related: rhbz#912763, rhbz#1186146
  - Fix use-after-free after resetting a VM
    Resolves: rhbz#1281455
  - Send KeepAlive probes every 10 minutes
    Resolves: rhbz#1298590
  - Add client to guest volume synchronization
    Resolves: rhbz#1264107


author: Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-18
changelog:
  - Fix crash when connecting to VM using smartcard passthrough
    Resolves: rhbz#1340899
  - Fix hang after unredirecting a USB device
    Resolves: rhbz#1338752
  - Backport spice_qxl_set_max_monitors()
    Resolves: rhbz#1283202


author: Frediano Ziglio <fziglio@redhat.com> - 0.12.4-20
changelog:
  - Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
    messages.
    Resolves: CVE-2016-9577
  - Fix remote DoS via crafted message.
    Resolves: CVE-2016-9578


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.8-1
changelog:
  - Rebase to spice-server 0.12.8
    Resolves: rhbz#1388947
    Resolves: rhbz#1377551
    Resolves: rhbz#1283202


author: Christophe Fergeau <cfergeau@redhat.com> 0.12.8-3
changelog:
  - Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
    sent from an authenticated client
    Resolves: CVE-2017-7506


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-4
changelog:
  - Revert back to spice 0.12 behaviour where QXL guest resources for cursor
    commands are only released when the current cursor is replaced. This avoids
    a QEMU regression causing crashes during migration
    Resolves: rhbz#1567944


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-5
changelog:
  - Don't mute Record channel on client reconnection
    Resolves: rhbz#1549132
  - Allow to configure TLS protocol versions and ciphers which SPICE will use for
    TLS communications
    Resolves: rhbz#1562213
  - Enable ECDH ciphers with OpenSSL 1.0
    Resolves: rhbz#1566597


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-7
changelog:
  - Fix off-by-one error during guest-to-host memory address conversion
    Resolves: CVE-2019-3813
  - Add patch for upstream commit 48179332d9da0. This should help with corrupted
    spice-html5 displays
    Resolves: rhbz#1573739
  - Add missing minimum openssl version Requires for patch #24
    Resolves: rhbz#1627693


author: Adam Jackson <ajax@redhat.com> 0.7.39-2
changelog:
  - Rebuild to break bogus libpng dependency
  - Fix summaries for gtk3 subpackages to not talk about gtk2


author: Hans de Goede <hdegoede@redhat.com> - 0.11-4
changelog:
  - Add missing BuildRequires: usbutils, so that we get proper USB device
    descriptions in the USB device selection menu


author: Christophe Fergeau <cfergeau@redhat.com> - 0.11-5
changelog:
  - Fix build on PPC
  - Remove ExclusiveArch. While spice-gtk will build on ARM and PPC, it
    hasn't been tested on these arch, so there may be some bugs.


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.22-1
changelog:
  - Rebase to 0.22
    Resolves: rhbz#1109397
  - Fix screenshot of secondary displays
    Resolves: rhbz#1029761
  - Fix potential crash when freeing primary surface.
    Resolves: rhbz#1082555
  - Add RHEL-only SPICE_NOSCALE to disable display scaling.
    Resolves: rhbz#1067346
  - Fix connection to RHEL5 Spice server
    Resolves: rhbz#1017862
  - Fix coroutine leak
    Resolves: rhbz#1007841
  - Fix clipboard hang on clipboard loop
    Resolves: rhbz#1073364


author: Jonathon Jongsma <jjongsma@redhat.com> - 0.22-2
changelog:
  - Additional display pop out when restarting service spice-vdagentd in guest
    Resolves: rhbz#1043782
  - Coverity scan fixes
    Resolves: rhbz#885719
  - Send data message for file copy of 0 size
    Resolves: rhbz#1135104
  - add spice_channel_get_error()
    Resolves: rhbz#1116048
  - Prefix proxy lookup errors
    Resolves: rhbz#1116048


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.26-1
changelog:
  - Rebase to 0.26
    Resolves: rhbz#1214101
  - Allow to transfer multiple files at once
    Resolves: rhbz#1167829
  - Fix smartcard cannot work after restart guest
    Resolves: rhbz#1205548


author: Fabiano Fidêncio <fidencio@redhat.com> - 0.26-5
changelog:
  - Connecting to VM changes its resolution
    Resolves: rhbz#1242602
  - Cannot enable display 1 when it was disabled in previous session
    Resolves: rhbz#1247907
  - Windows needs to send complete monitors_config message to client
    Resolves: rhbz#1244878
  - High Resolution Multi-Monitor Windows Guest freeze
    Resolves: rhbz#1235442
  - Print file transfer summary to the log
    Resolves: rhbz#1140512
  - Enable proxy when requested
    Related: rhbz#1182252


author: Victor Toso <victortoso@redhat.com> - 0.26-6
changelog:
  - Implements volume-sync from guest to client
    Resolves: rhbz#1264105
  - Avoid crash in virt-manager
    Resolves: rhbz#1301863
  - Fix focus in fullscreen mode
    Resolves: rhbz#1275231
  - Add Client capability for Windows monitor_config message
    Resolves: rhbz#1248189
  - Fix error message for file transfer
    Resolves: rhbz#1265562


author: Pavel Grunt <pgrunt@redhat.com> - 0.26-7
changelog:
  - Improve message for number of usb channels in usb device widget
    Resolves: rhbz#1299931
  - Fix usbredir leak when redirecting a webcam
    Resolves: rhbz#1270363


author: Pavel Grunt <pgrunt@redhat.com> - 0.26-8
changelog:
  - Check runtime usbredir version
    Resolves: rhbz#1320827
  - Allow connection to password protected guests
    Resolves: rhbz#1320806
  - Fix runtime warnings related to shared folders and usb redirection
    Resolves: rhbz#1319405
  - Change runtime warning for empty monitor config to debug message
    Resolves: rhbz#1319405
  - Fix 16 bpp LZ image decompression
    Resolves: rhbz#1285469


author: Victor Toso <victortoso@redhat.com> - 0.31-3
changelog:
  - Fix client's crash when agent is killed
    Resolves: rhbz#1336321
  - Parse ipv6 address
    Resolves: rhbz#1335239
  - Improving parsing of Smartcard messages
    Resolves: rhbz#1338727
  - Fix hangs with "Connected to graphic server"
    Resolves: rhbz#1323092


author: Pavel Grunt <pgrunt@redhat.com> - 0.31-4
changelog:
  - Fix SASL GSSAPI (kerberos authentication)
    Resolves: rhbz#1343361
  - Allow to connect to ipv6 behind proxy
    Resolves: rhbz#1331777


author: Pavel Grunt <pgrunt@redhat.com> - 0.31-5
changelog:
  - Allow to connect to ipv6 without proxy
    Resolves: rhbz#1361478
  - Silence a critical when migrating
    Resolves: rhbz#1356162
  - Disable EPOXY / EGL usage
    Resolves: rhbz#1362460


author: Pavel Grunt <pgrunt@redhat.com> - 0.33-1
changelog:
  - Rebase to 0.33
    Resolves: rhbz#1402474
  - Rebuilt with correct hardening flags due to bug 1387475
    Resolves: rhbz#1420778
  - Fix copy paste issues
    Resolve: rhbz#1409854


author: Pavel Grunt <pgrunt@redhat.com> - 0.33-2
changelog:
  - Add missing patch for rebase
    Resolves: rhbz#1402474
  - Add obsoletes to the spec file to ease updates
    Resolves: rhbz#1432776
  - Fix black screen in virt-manager
    Resolves: rhbz#1433242
  - Make connection error message more clear
    Resolves: rhbz#1365736


author: Victor Toso <victortoso@redhat.com> - 0.33-3
changelog:
  - Avoid CRITICALs on copy-paste
    Resolves: rhbz#1440096
  - Avoid assertions on file-xfer while agent disconnects
    Related: rhbz#1440096


author: Pavel Grunt <pgrunt@redhat.com> - 0.33-4
changelog:
  - Make connection error message more clear
    Resolves: rhbz#1365736
  - Improve audio debug
    Resolves: rhbz#1436249
  - Fix wrong encoding of transferred files
    Resolves: rhbz#1440206


author: Victor Toso <victortoso@redhat.com> - 0.35-5
changelog:
  - Keepalive fix
    Resolves: rhbz#1719736
  - Fix hang on migration after password expired
    Resolves: rhbz#1761776


author: Hans de Goede <hdegoede@redhat.com> 0.8.0-2
changelog:
  - Make the per session agent process automatically reconnect to the system
    spice-vdagentd when the system daemon gets restarted


author: Hans de Goede <hdegoede@redhat.com> - 0.10.0-1
changelog:
  - New upstream release 0.10.0
  - This supports using systemd-logind instead of console-kit (rhbz#756398)


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-1
changelog:
  - New upstream release 0.12.0
  - This moves the tmpfiles.d to /usr/lib/tmpfiles.d (rhbz#840194)
  - This adds a systemd .service file (rhbz#848102)


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-2
changelog:
  - Fix setting of mode on non arbitrary resolution capable X driver
  - Fix wrong mouse coordinates on vms with multiple qxl devices


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-1
changelog:
  - New upstream release 0.14.0
  - Adds support for file transfers from client to guest
  - Adds manpages for spice-vdagent and spice-vdagentd


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-3
changelog:
  - Advertise clipboard line-endings for copy and paste line-ending conversion
  - Build spice-vdagentd as pie + relro


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-5
changelog:
  - Silence session agent error logging when not running in a vm (rhbz#999804)
  - Release guest clipboard ownership on client disconnect (rhbz#1003977)


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-8
changelog:
  - Fix copy and paste issues with vncclient
    Resolves: rhbz#1130218
  - Make vdagent more robust against xrandr failures
    Resolves: rhbz#1066422
  - Fix autostart of vdagent in gdm
    Resolves: rhbz#1052172


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-9
changelog:
  - Don't install rsyslog config file. This can cause duplicate logging
    to syslog in rhel6->rhel7 upgrades, and is not really useful anyway
    as the same functionality can be achieved with journald
    Resolves: rhbz#1136881


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-11
changelog:
  - Add client to guest audio volume synchronization
    Resolves: rhbz#1264102
  - Exit with error when virtio channel device is missing
    Resolves: rhbz#1256704


author: Victor Toso <victortoso@redhat.com> - 0.14.0-14
changelog:
  - Do not allow drag-and-drop on (gdm) login screen
    Resolves: rhbz#1328761
  - Do not allow drag-and-drop on locked screen
    Resolves: rhbz#1323623


author: Victor Toso <victortoso@redhat.com> - 0.14.0-17
changelog:
  - Fix 'Dependency failed for Activation socket' message
    Resolves: rhbz#1545212
  - Fix socket leak
    Resolves: rhbz#1650596


author: Victor Toso <victortoso@redhat.com> - 0.14.0-18
changelog:
  - Fix clipboard logs on requests for targets on grab from client
    Resolves: rhbz#1594876
  - Make some clipboard logs debug instead of error
    Resolves: rhbz#1686008


author: Christophe Fergeau <cfergeau@redhat.com> 2.8-7
changelog:
  - Adjust selinux policy to allow use of USB redirection
    Resolves: rhbz#1075173
  - Add test page to package
    Resolves: rhbz#959194


author: Paul Nasrat <pnasrat@redhat.com> - 3.3.6-1
changelog:
  - Update to 3.3.6
  - Fix typo  (#189647)
  - Enable threading fixes (#181298)
  - Conditionalize static library


author: Panu Matilainen <pmatilai@redhat.com> - 3.5.9-2
changelog:
  - Remove references to temporary registers from cache on release (#463061)
  - Enable loading of external extensions (#457433)


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.6.2-2
changelog:
  - require tcl(abi) in sqlite-tcl subpackage (#474034)
  - move tcl extensions to arch-specific location
  - enable dependency extraction on the tcl dso
  - require pkgconfig in sqlite-devel


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.12-2
changelog:
  - disable strict aliasing to work around brokenness on 3.6.12 (#494266)
  - run test-suite on build but let it fail for now


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.14-1
changelog:
  - update to 3.6.14 (http://www.sqlite.org/releaselog/3_6_14.html)
  - merge-review cosmetics (#226429)
    - drop ancient sqlite3 obsoletes
    - fix tab vs space whitespace issues
    - remove commas from summaries
  - fixup io-test fsync expectations wrt SQLITE_DISABLE_DIRSYNC


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.17-1
changelog:
  - update to 3.6.17 (http://www.sqlite.org/releaselog/3_6_17.html)
  - disable to failing tests until upstream fixes


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.18-1
changelog:
  - update to 3.6.18 (http://www.sqlite.org/releaselog/3_6_18.html)
  - drop no longer needed test-disabler patches


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.23-1
changelog:
  - update to 3.6.23 (http://www.sqlite.org/releaselog/3_6_23.html)
  - drop the lemon sprintf patch, upstream doesn't want it
  - make test-suite errors fail build finally


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.4-1
changelog:
  - update to 3.7.4 (http://www.sqlite.org/releaselog/3_7_4.html)
  - deal with upstream source naming, versioning and format changing
  - fixup wal2-test expections wrt SQLITE_DISABLE_DIRSYNC use


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.7.1-1
changelog:
  - update to 3.7.7.1 (http://www.sqlite.org/releaselog/3_7_7_1.html)
  - autoconf no longer needed for build, libdl check finally upstreamed


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.13-1
changelog:
  - update to 3.7.13 (http://www.sqlite.org/releaselog/3_7_13.html)
  - drop no longer needed savepoint relase patch


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.15-1
changelog:
  - update to 3.7.15 (http://www.sqlite.org/releaselog/3_7_15.html)
  - fix an old incorrect date in spec changelog


author: Jan Stanek <jstanek@redhat.com> - 3.7.16.2-1
changelog:
  - update to 3.7.16.2 (http://www.sqlite.org/releaselog/3_7_16_2.html)
  - add support for aarch64 (rerunning autoconf) (#926568)


author: Bruno Wolff III <bruno@wolff.to> - 4.1-0.1.20100607
changelog:
  - Rebase to 4.1 prerelease with xz wrapper
  - Provides lzma compression as an option.
  - squashfs-fix-unsquashing-v3.patch is part of the 4.1 prerelease


author: Bruno Wolff III <bruno@wolff.to> - 4.1-0.3.20100803
changelog:
  - Rebase to latest upstream
  - Prevent warning message for xattr for virtual directory
  - Fix issue with large inodes - BZ 619020


author: Bruno Wolff III <bruno@wolff.to> - 4.1-0.4.20100827
changelog:
  - Rebase to latest upstream.
  - The main reason is to pick up a fix for large xattr similar to the large inode fix. This doesn't need to get backported as 4.0 doesn't have xattr support.
  - An option was added to build without xattr support.
  - Various source cleanups have been done as well.


author: Bruno Wolff III <bruno@wolff.to> - 4.2-0.1.20101223
changelog:
  - Switch to 4.2 development snapshot to get new XZ support
  - LZMA and XZ (LZMA2) support are now different


author: Bruno Wolff III <bruno@wolff.to> - 4.2-0.2.20101231
changelog:
  - Pull latest upstream snapshot
  - Includes check for matching compression type when adding to an existing image
  - Sample cvs command now includes timezone and specifies when on the date to use for the snapshot


author: Bruno Wolff III <bruno@wolff.to> - 4.2-1
changelog:
  - 4.2 is released.
  - Bugfix for bad data causing crash.
  - Include doc files added for release.
  - Big endian patch is now upstream.
  - Buildroot tag isn't needed any more.
  - We can now specify CFLAGS on the make call.
  - Compressor options are now passed with the make call.


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.1.git0be606be
changelog:
  - Pre-release of 4.3 to get early testing
  - This update includes a bit of internal code infrastructure changes
  - There are lots of fixes to better handle bad data
  - The final release is expected sometime in December
  - Until the release only the README doc file is available


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.8.gitca6a1c90
changelog:
  - Latest pre 4.3 snapshot
  - New option to display compression options used
  - Some error message improvements


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.17.git5c6f0024
changelog:
  - Latest pre 4.3 snapshot
  - Includes fix for mksquashfs hangs
  - Switch to get pre-release updates from the stable branch at kernel.org


author: Bruno Wolff III <bruno@wolff.to> - 4.3-0.18.gitaae0aff4
changelog:
  - Latest pre 4.3 stable snapshot
  - A few minor bug fixes
  - Improvements in getting status info while running unsquashfs


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - first build against glibc
  - patched out the use of setresuid(), which is available only on kernels
    2.1.44 and later


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the init script to use reconfigure option to restart squid instead
    of shutdown/restart (both safer and quicker)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - cache & log dirs shouldn't be world readable
  - remove preun script (leave logs & cache @ uninstall)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - switch to using group squid
  - turn off icmp (insecure)
  - update to 2.2.DEVEL3
  - build FAQ docs from source


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix compliance with ftp RFCs
    (http://www.wu-ftpd.org/broken-clients.html)
  - Work around a bug in some versions of autoconf
  - BuildPrereq sgml-tools - we're using sgml2html


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix init script again (#11699)
  - add --enable-delay-pools (#11695)
  - update to STABLE3
  - update FAQ


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix path references in QUICKSTART (#15114)
  - fix initscript translations (#24086)
  - fix shutdown logic (#24234), patch from <jos@xos.nl>
  - add /etc/sysconfig/squid for daemon options & shutdown timeouts
  - three more bugfixes from the Squid people
  - update FAQ.sgml
  - build and ship auth modules (#23611)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.STABLE1 + patches
  - enable some more configure options (#24981)
  - oops, ship /etc/sysconfig/squid


author: Bill Nottingham <notting@redhat.com>
changelog:
  - 2.4.STABLE3 + patches
  - turn off HTCP at request of maintainers
  - leave SNMP enabled in the build, but disabled in the default config


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE3-0
changelog:
  - Spec file change to enable the nul storage module. bugzilla #74654
  - Upgrade to 2.5STABLE3 with current official patches.
  - Added --enable-auth="basic,ntlm": closes bugzilla #90145
  - Added --with-winbind-auth-challenge: closes bugzilla #78691
  - Added --enable-useragent-log and --enable-referer-log, closes
  - bugzilla #91884


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-1
changelog:
  - New upstream version.
  - Fix the Source: line in this spec file to point to the correct URL.
  - redo the -location patch to work with the new upstream version.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Incorporate many upstream patches
  - Include many spec file changes from D.Johnson <dj@www.uk.linux.org>


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-3
changelog:
  - Clean up the spec file to work on 64-bit platforms (use %{_libdir}
    instead of /usr/lib, etc)
  - Make the release number in the changelog section agree with reality.
  - use -fPIE rather than -fpie.  s390 fails with just -fpie


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-1
changelog:
  - New upstream version, obsoletes many patches.
  - Fix --datadir passed to configure.  Configure automatically adds /squid
    so we shouldn't.
  - Remove the problematic triggerpostun trigger, since is's broken, and FC2
    never shipped with that old version.
  - add %{?_smp_mflags} to make line.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-2
changelog:
  - Include the first 10 upstream patches
  - Add a patch for the correct location of the winbindd pipe.  This closes
    bugzilla #107561
  - Remove the change to ssl_support.c from squid-2.5.STABLE3-build patch
    This closes #117851
  - Include /etc/pam.d/squid .  This closes #113404
  - Include a patch to close #111254 (assignment in assert)
  - Change squid.init to put output messages in /var/log/squid/squid.out
    This closes #104697
  - Only useradd the squid user if it doesn't already exist, and error out
    if the useradd fails.  This closes #118718.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5STABLE5-5
changelog:
  - Merge current upstream patches.
  - Fix the -pipe patch to have the correct name of the winbind pipe.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-1
changelog:
  - New upstream version, with 32 upstream patches.
    This closes #133970, #133931, #131728, #128143, #126726

  - Change the permissions on /etc/squid/squid.conf to 640.  This closes
    bugzilla #125007


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3
changelog:
  - include patch from Ulrich Drepper <drepper@redhat.com> to stop
    problems with O_NONBLOCK.  This closes #136049


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-1
changelog:
  - new upstream version, with 3 upstream patches.
    Updated the -build and -config patches
  - Include patch from Ulrich Drepper <frepper@redhat.com> to more
    intelligently close all file descriptors.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-2
changelog:
  - Add a triggerin on samba-common to make /var/cache/samba/winbindd_privileged
    accessable so that ntlm_auth will work.  It needs to be in this rpm,
    because the Samba RPM can't assume the squid user exists.
    Note that this will only work if the Samba RPM is recent enough to create
    that directory at install time instead of at winbindd startup time.
    That should be samba-common-3.0.0-15 or later.
    This fixes bugzilla #103726
  - Clean up extra whitespace in this spec file.
  - Add additional upstream patches. (Now 18 upstream patches).
  - patch #112 closes CAN-2005-0096 and CAN-2005-0097, remote DOS security holes.
  - patch #113 closes CAN-2005-0094, a remote buffer-overflow DOS security hole.
  - patch #114 closes CAN-2005-0095, a remote DOS security hole.
  - Remove the -nonbl (replaced by #104) and -close (replaced by #111) patches, since
    they're now fixed by upstream patches.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-4
changelog:
  - Include two more upstream patches for security vulns:
    bz#146783 Correct handling of oversized reply headers
    bz#146778 CAN-2005-0211 Buffer overflow in WCCP recvfrom() call


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE8-2
changelog:
  - new upstream version with 4 upstream patches.
  - Reorganize spec file to apply upstream patches first


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-4
changelog:
  - More upstream patches, including the fixed 2GB patch.
  - include the -libbind patch, which prevents squid from using the optional
    -lbind library, even if it's installed.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-6
changelog:
  - More upstream patches, including a fix for
    bz#157456 CAN-2005-1519 DNS lookups unreliable on untrusted networks


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-1
changelog:
  - new upstream version
  - enabled fakeauth utility (#154020)
  - enabled digest authentication scheme (#155882)
  - all error pages marked as config (#127836)
  - patch for 64bit statvfs interface (#153274)
  - added httpd config file for cachemgr.cgi (#112725)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-3
changelog:
  - removed "--enable-truncate" option (#165948)
  - added "--enable-cache-digests" option (#102134)
  - added "--enable-ident-lookups" option (#161640)
  - some clean up (#165949)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE11-5
changelog:
  - fix for #171213 - CVE-2005-3258 Squid crash due to malformed FTP response
  - more fixes from upstream


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE12-2
changelog:
  - rewriten patch squid-2.5.STABLE10-64bit.patch, it works with
    "--with-large-files" option now
  - fix for #72896 - squid does not support > 1024 file descriptors,
    new "--enable-fd-config" option for it.


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE1-1
changelog:
  - new upstream + the latest CVS snapshot from 2006/07/18
  - updated fd config patch
  - enabled epoll
  - fixed release format (#197405)
  - enabled WCCPv2 support (#198642)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-2
changelog:
  - upstream fixes:
    * Accept 00:00-24:00 as a valid time specification (upstream BZ #1794)
    * aioDone() could be called twice
    * Squid reconfiguration (upstream BZ #1800)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-3
changelog:
  - added fix for #183869 - squid can abort when getting status
  - added upstream fixes:
      * Bug #1796: Assertion error HttpHeader.c:914: "str"
      * Bug #1779: Delay pools fairness, correction to first patch
      * Bug #1802: Crash on exit in certain conditions where cache.log is not writeable
      * Bug #1779: Delay pools fairness when multiple connections compete for bandwidth
      * Clarify the select/poll/kqueue/epoll configure --enable/disable options
  - reworked fd patch for STABLE4


author: Martin Bacovsky <mbacovsk@redhat.com> - 7:2.6.STABLE16-2
changelog:
  - our fd_config patch was replaced by upstream's version 
  - Source1 (FAQ.sgml) points to local source (upstream's moved to wiki)


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE2-1
changelog:
  - upgrade to latest upstream 3.0.STABLE2
  - check config file before starting (#428998)
  - whitespace unification of init script
  - some minor path changes in the QUICKSTART file
  - configure with the --with-filedescriptors=16384 option


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE5-2
changelog:
  - fix configure detection of netfilter kernel headers (#435499),
    patch by aoliva@redhat.com
  - add support for negotiate authentication (#445337)


author: Jiri Skala <jskala@redhat.com> - 7:3.0.STABLE7-2
changelog:
  - used ncsa_auth.8 from man-pages. there will be this file removed due to conflict
  - fix #458593 noisy initscript
  - fix #463129 init script tests wrong conf file
  - fix #450352 - build.patch patches only generated files


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE13-2
changelog:
  - backported logfile.cc syslog parameters patch from 3.1 (b9443.patch)
  - GCC-4.4 workaround in src/wccp2.cc


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE17-2
changelog:
  - Bug #514014, update to 3.0.STABLE17 fixing the denial of service issues
    mentioned in Squid security advisory SQUID-2009_2.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-1
changelog:
  - Upgrade to next upstream release 3.1.0.13 with many new features
    * IPv6 support
    * NTLM-passthru
    * Kerberos/Negotiate authentication scheme support
    * Localized error pages based on browser language preferences
    * Follow X-Forwarded-For capability
    * and more..


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-7
changelog:
  - Include upstream patches fixing important operational issues
  - Enable ESI support now that it does not conflict with normal operation


author: Jiri Skala <jskala@redhat.com> 7:3.1.0.14-2
changelog:
  - fixed #532930 Syntactic error in /etc/init.d/squid
  - fixed #528453 cannot initialize cache_dir with user specified config file


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.15-3
changelog:
  - fixed #551302 PROXY needs libcap. Also increases security a little.
  - merged relevant upstream bugfixes waiting for next 3.1 release


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.16-4
changelog:
  - spec file modified to be fedora packaging guidline compliant
  - little shifting lines in init script header due to rpmlint complaint
  - fixes assertion during start up


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.16-6
changelog:
  - Patch for Squid security advisory SQUID-2010:2, denial of service
    issue in HTCP processing (CVE-2010-0639)


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.1-2
changelog:
  - Update to 3.1.1 Squid bug #2827 crash with assertion failed:
    FilledChecklist.cc:90: "conn() != NULL" under high load.


author: Jiri Skala <jskala@redhat.com>
changelog:
  - fixes #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.3-2
changelog:
  - Fully fix #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled
  - Various IPv6 related issues fixed, making tcp_outgoing_address behave
    as expected and no commResetFD warnings when using tproxy setups.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.4-1
changelog:
  - Upstream 3.1.4 bugfix release, issues relating to IPv6, TPROXY, Memory
    management, follow_x_forwarded_for, and stability fixes


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.5-2
changelog:
  - Upstream 3.1.5 bugfix release
  - Upstream patch for Bug #614665: Squid crashes with  ident auth
  - Upstream patches for various memory leaks


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.9-1
changelog:
  - upgrade to squid-3.2
  - fixes #720445 - Provide native systemd unit file
  - SysV initscript moved to subpackage
  - temproary disabled eCap


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.13-2
changelog:
  - fixes #747103 - squid does not start if /var/spool/squid is empty
  - fixes #747110 - squid does not start adding "memory_pools off"


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.2.0.14-6
changelog:
  - upstream gcc-4.7 patch
  - fix for bug #772483 running out of memory, mem_node growing out of bounds


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.3-2
changelog:
  - Resolved: #854356 - squid.service use PIDFile
  - Resolved: #859393 - Improve cache_swap script
  - Resolved: #791129 - disk space warning
  - Resolved: #862252 - reload on VPN or network up/down
  - Resolved: #867531 - run test suite during build
  - Resolved: #832684 - missing after dependency nss-lookup.target
  - Removed obsolete configure options


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.9-1
changelog:
  - Update to latest upstream version 3.2.9
  - Fixed: CVE-2013-1839
  - Removed: makefile-patch (+make check)


author: Michal Luscon <mluscon@redhat.com> - 7:3.3.8-1
changelog:
  - Update to latest upstream version 3.3.8
  - Fixed: active ftp crashing
  - Fix basic auth and log daemon DB helper builds.
  - Use xz compressed tarball, fix source URLs.
  - Fix bogus dates in %changelog.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-22
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Creation of this directory was moved to service file.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-23
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Creation of this directory was moved to tmpfiles.d conf file.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-24
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Creation of /var/run/squid was also needed to be in SPEC file.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-25
changelog:
  - Related: #1102842 - squid rpm package misses /var/run/squid needed for
    smp mode. Squid needs write access to /var/run/squid.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-28
changelog:
  - Related: #1330577 - CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 squid: multiple
    issues in ESI processing


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.3.8-30
changelog:
  - Related: #1334509 - CVE-2016-4553 squid: Cache poisoning issue in
    HTTP Request handling
  - Related: #1334492 - CVE-2016-4554 CVE-2016-4555 CVE-2016-4556 
    squid: various flaws


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.10-1
changelog:
  - Resolves: #1273942 - Rebase squid to latest mature 3.5 version (3.5.10)
  - Resolves: #1322770 - CVE-2016-2569 CVE-2016-2570 CVE-2016-2571 CVE-2016-2572
    CVE-2016-3948 squid: various flaws
  - Resolves: #1254016 - IPv4 fallback is not working when connecting
    to a dualstack host with non-functional IPv6
  - Resolves: #1254018 - should BuildRequire: g++
  - Resolves: #1262456 - Squid delays on FQDNs that don't contains AAAA record
  - Resolves: #1336940 - Disable squid systemd unit start/stop timeouts
  - Resolves: #1344197 - /usr/lib/firewalld/services/squid.xml conflicts between
    attempted installs of squid-7:3.3.8-31.el7.x86_64 and
    firewalld-0.4.2-1.el7.noarch
  - Resolves: #1299972 - squid file descriptor limit hardcoded to 16384 via 
    compile option in spec file


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.10-4
changelog:
  - Resolves: #1349775 - Provide migration tools needed due to rebase
    to squid 3.5 as a separate sub-package


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.10-5
changelog:
  - Related: #1349775 - Provide migration tools needed due to rebase
    to squid 3.5 as a separate sub-package


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.20-5
changelog:
  - Resolves: #1404817 - SIGSEV in TunnelStateData::handleConnectResponse()
    during squid reconfigure and restart


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-15
changelog:
  - Resolves: #1690551 - Squid cache_peer DNS lookup failed when not all lower
    case
  - Resolves: #1680022 - squid can't display download/upload packet size for HTTPS
    sites
  - Resolves: #1717430 - Excessive memory usage when running out of descriptors
  - Resolves: #1676420 - Cache siblings return wrongly cached gateway timeouts
  - Resolves: #1729435 - CVE-2019-13345 squid: XSS via user_name or auth parameter
    in cachemgr.cgi
  - Resolves: #1582301 - CVE-2018-1000024 CVE-2018-1000027 squid: various flaws


author: Lubos Uhliarik <luhliari@redhat.com> - 7:3.5.20-15.1
changelog:
  - Resolves: #1828359 - CVE-2020-11945 squid: improper access restriction upon
    Digest Authentication nonce replay could lead to remote code execution
  - Resolves: #1828360 - CVE-2019-12519 squid: improper check for new member in
    ESIExpression::Evaluate allows for stack buffer overflow
  - Resolves: #1829772 - CVE-2019-12525 squid: parsing of header
    Proxy-Authentication leads to memory corruption


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New stable upstream version 1.2.1
  - Resolves: rhbz#595529 - spec file should eschew %define in favor of
  -                         %global
  - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart.
  - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
  -                         keyring
  - Resolves: rhbz#599724 - sssd is broken on Rawhide


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
changelog:
  - New upstream version 1.2.91 (1.3.0rc1)
  - Improved LDAP failover
  - Synchronous sysdb API (provides performance enhancements)
  - Better online reconnection detection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
changelog:
  - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
  -                           against LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
changelog:
  - Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
  -                         doesn't require it


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
changelog:
  - New upstream release 1.4.0
  - Added support for netgroups to the LDAP provider
  - Performance improvements made to group processing of RFC2307 LDAP servers
  - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
  - Build-system improvements to support Gentoo
  - Split out several libraries into the ding-libs tarball
  - Manpage reviewed and updated


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
changelog:
  - New upstream release 1.4.1
  - Add support for netgroups to the proxy provider
  - Fixes a minor bug with UIDs/GIDs >= 2^31
  - Fixes a segfault in the kerberos provider
  - Fixes a segfault in the NSS responder if a data provider crashes
  - Correctly use sdap_netgroup_search_base


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
changelog:
  - Solve a shutdown race-condition that sometimes left processes running
  - Resolves: rhbz#606887 - SSSD stops on upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  -Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Fix nested group member filter sanitization for RFC2307bis
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#677768 - name service caches names, so id command shows
  -                         recently deleted users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.2-1
changelog:
  - New upstream release 1.5.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
  - Fixes for support of FreeIPA v2
  - Fixes for failover if DNS entries change
  - Improved sss_obfuscate tool with better interactive mode
  - Fix several crash bugs
  - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
  - Delete users from the local cache if initgroups calls return 'no such user'
  - (previously only worked for getpwnam/getpwuid)
  - Use new Transifex.net translations
  - Better support for automatic TGT renewal (now survives restart)
  - Netgroup fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
  - Fixes for Active Directory when not all users and groups have POSIX attributes
  - Fixes for handling users and groups that have name aliases (aliases are ignored)
  - Fix group memberships after initgroups in the IPA provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
  - Fixes for several crash bugs
  - LDAP group lookups will no longer abort if there is a zero-length member
  - attribute
  - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-3
changelog:
  - Fix systemd conversion. Upgrades from SysV to systemd weren't properly
  - enabling the systemd service.
  - Fix a serious memory leak in the memberOf plugin
  - Fix an issue where the user's full name would sometimes be removed
  - from the cache


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-5
changelog:
  - Resolves: rhbz#697057 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server
  - Upgrades from SysV should now maintain enabled/disabled status


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
  - Fixed a serious memory leak in the memberOf plugin
  - Fixed a regression with the negative cache that caused it to be essentially
  - nonfunctional
  - Fixed an issue where the user's full name would sometimes be removed from
  - the cache
  - Fixed an issue with password changes in the kerberos provider not working
  - with kpasswd


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-1
changelog:
  - Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
  -                         cached password with predicatable filename


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-3
changelog:
  - Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
  - Make sure to properly convert to systemd if upgrading from newer
  - updates for Fedora 14


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.8-1
changelog:
  - New upstream release 1.5.8
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
  - Support for the LDAP paging control
  - Support for multiple DNS servers for name resolution
  - Fixes for several group membership bugs
  - Fixes for rare crash bugs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.9-1
changelog:
  - New upstream release 1.5.9
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
  - Support for overriding home directory, shell and primary GID locally
  - Properly honor TTL values from SRV record lookups
  - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
  - servers)
  - Properly escape IPv6 addresses in the failover code
  - Do not crash if inotify fails (e.g. resource exhaustion)
  - Don't add multiple TGT renewal callbacks (too many log messages)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.10-1
changelog:
  - New upstream release 1.5.10
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
  - Fixed a regression introduced in 1.5.9 that could result in blocking calls
  - to LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
changelog:
  - New upstream release 1.5.11
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
  - Fix a serious regression that prevented SSSD from working with ldaps:// URIs
  - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
  - address being saved to the AAAA record


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release 1.6.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
  - Add host access control support for LDAP (similar to pam_host_attr)
  - Finer-grained control on principals used with Kerberos (such as for FAST or
  - validation)
  - Added a new tool sss_cache to allow selective expiring of cached entries
  - Added support for LDAP DEREF and ASQ controls
  - Added access control features for Novell Directory Server
  - FreeIPA dynamic DNS update now checks first to see if an update is needed
  - Complete rewrite of the HBAC library
  - New libraries: libipa_hbac and libipa_hbac-python


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.1-1
changelog:
  - New upstream release 1.6.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
  - Fixes a serious issue with LDAP connections when the communication is
    dropped (e.g. VPN disconnection, waking from sleep)
  - SSSD is now less strict when dealing with users/groups with multiple names
    when a definitive primary name cannot be determined
  - The LDAP provider will no longer attempt to canonicalize by default when
    using SASL. An option to re-enable this has been provided.
  - Fixes for non-standard LDAP attribute names (e.g. those used by Active
    Directory)
  - Three HBAC regressions have been fixed.
  - Fix for an infinite loop in the deref code


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Improved handling of users and groups with multi-valued name attributes
    (aliases)
  - Performance enhancements
      Initgroups on RFC2307bis/FreeIPA
      HBAC rule processing
  - Improved process-hang detection and restarting
  - Enabled the midpoint cache refresh by default (fewer cache misses on
    commonly-used entries)
  - Cleaned up the example configuration
  - New tool to change debug level on the fly


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-4
changelog:
  - Change selinux policy requirement to Conflicts: with the old version,
    rather than Requires: the supported version.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release 1.6.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3
  - Fixes a major cache performance issue introduced in 1.6.2
  - Fixes a potential infinite-loop with certain LDAP layouts


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-4
changelog:
  - Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758425 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.4-1
changelog:
  - New upstream release 1.6.4
  - Rolls up previous patches applied to the 1.6.3 tarball
  - Fixes a rare issue causing crashes in the failover logic
  - Fixes an issue where SSSD would return the wrong PAM error code for users
    that it does not recognize.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-1
changelog:
  - New upstream release 1.7.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
  - Support for case-insensitive domains
  - Support for multiple search bases in the LDAP provider
  - Support for the native FreeIPA netgroup implementation
  - Reliability improvements to the process monitor
  - New DEBUG facility with more consistent log levels
  - New tool to change debug log levels without restarting SSSD
  - SSSD will now disconnect from LDAP server when idle
  - FreeIPA HBAC rules can choose to ignore srchost options for significant
    performance gains
  - Assorted performance improvements in the LDAP provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-3
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-5
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features - fix netgroups and sudo as well


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta1
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta2
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
  - Fix two minor manpage bugs
  - Include the IPA AutoFS provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - New upstream release 1.8.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed several memory-corruption bugs
  - Finalized the ABI for the autofs support
  - Fixed a regression in the proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - New upstream release 1.8.0
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)
  - Include the IPA AutoFS provider
  - Fixed several memory-corruption bugs
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed a regression in the proxy provider
  - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
  - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                            logged at each login
  - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-7
changelog:
  - New upstream release 1.8.1
  - Resolve issue where we could enter an infinite loop trying to connect to an
    auth server
  - Fix serious issue with complex (3+ levels) nested groups
  - Fix netgroup support for case-insensitivity and aliases
  - Fix serious issue with lookup bundling resulting in requests never
    completing
  - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
    in addition to pam_authenticate
  - Fix several regressions in the proxy provider
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-8
changelog:
  - Fix uninitialized value bug causing crashes throughout the code
  - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-9
changelog:
  - Don't duplicate libsss_autofs.so in two packages
  - Set explicit package contents instead of globbing


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.2-10
changelog:
  - New upstream release 1.8.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
  - Several fixes to case-insensitive domain functions
  - Fix for GSSAPI binds when the keytab contains unrelated principals
  - Fixed several segfaults
  - Workarounds added for LDAP servers with unreadable RootDSE
  - SSH knownhostproxy will no longer enter an infinite loop preventing login
  - The provided SYSV init script now starts SSSD earlier at startup and stops
    it later during shutdown
  - Assorted minor fixes for issues discovered by static analysis tools


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.3-11
changelog:
  - New upstream release 1.8.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
  - Numerous manpage and translation updates
  - LDAP: Handle situations where the RootDSE isn't available anonymously
  - LDAP: Fix regression for users using non-standard LDAP attributes for user
    information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-1.beta1
changelog:
  - New upstream release 1.9.0 beta 1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
  - Add native support for autofs to the IPA provider
  - Support for ID-mapping when connecting to Active Directory
  - Support for handling very large (> 1500 users) groups in Active Directory
  - Support for sub-domains (will be used for dealing with trust relationships)
  - Add a new fast in-memory cache to speed up lookups of cached data on
    repeated requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-2.beta1
changelog:
  - Fix several regressions since 1.5.x
  - Ensure that the RPM creates the /var/lib/sss/mc directory
  - Add support for Netscape password warning expiration control
  - Rebuild against libldb 1.1.6


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-5.beta2
changelog:
  - New upstream release 1.9.0 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
  - Add support for the Kerberos DIR cache for storing multiple TGTs
    automatically
  - Major performance enhancement when storing large groups in the cache
  - Major performance enhancement when performing initgroups() against Active
    Directory
  - SSSDConfig data file default locations can now be set during configure for
    easier packaging


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-7.beta2
changelog:
  - Switch unicode library from libunistring to Glib
  - Drop unnecessary explicit Requires on keyutils
  - Guarantee that versioned Requires include the correct architecture


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-8.beta3
changelog:
  - New upstream release 1.9.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
  - Add a new PAC responder for dealing with cross-realm Kerberos trusts
  - Terminate idle connections to the NSS and PAM responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-9.beta4
changelog:
  - New upstream release 1.9.0 beta 4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
  - Add a new AD provider to improve integration with Active Directory 2008 R2
    or later servers
  - SUDO integration was completely rewritten. The new implementation works
    with multiple domains and uses an improved refresh mechanism to download
    only the necessary rules
  - The IPA authentication provider now supports subdomains
  - Fixed regression for setups that were setting default_tkt_enctypes
    manually by reverting a previous workaround.


