# changelog

author: Laine Stump <laine@redhat.com> - 0.1.6-2
changelog:
  - make miimon/arpmon in bond definitions optional
  - Resolves: rhbz#585108
  - properly deal with initializing a 0 length /etc/sysconfig/iptables file
  - Resolves: rhbz#582905


author: Laine Stump <laine@redhat.com> - 0.1.6-4
changelog:
  - install missing sysconfig.aug file
  - Resolves: rhbz#613886
  - Don't delete the physical interface config when defining a vlan
  - Resolves: rhbz#585112


author: Laine Stump <laine@redhat.com> - 0.1.7-1
changelog:
  - rebase to netcf-0.1.7
    - Resolves: rhbz#651032
    - remove all iptables manipulation
    - Resolves: rhbz#633346
    - Resolves: rhbz#629206


author: Laine Stump <laine@redhat.com> - 0.1.8-1
changelog:
  - rebase to netcf-0.1.8
    - resolves rhbz#616060
    - show ifup output in relevant error message
    - resolves rhbz#662057
    - pkgconfig file should not list augeas, libxml or libxslt
    - resolves rhbz#681078
    - Need to input 'quit' twice to quit ncftool after an erroneous command
    - resolves rhbz#703318
    - %desc field in specfile has a typo
    - resolves rhbz#705061
    - rebase netcf for RHEL6.2
    - resolves rhbz#708476
    - RFE: transaction-oriented API for handling host interfaces


author: Laine Stump <laine@redhat.com> - 0.1.9-1
changelog:
  - rebase to netcf-0.1.9
    - resolves rhbz#616060
    - always add <bridge> element to bridge, even if there is no physdev present
    - resolves rhbz#713180
    - don't log error if interface isn't found in kernel during status report
    - resolves rhbz#713286
    - update gnulib


author: Laine Stump <laine@redhat.com> - 0.1.9-2
changelog:
  - resolves rhbz#728184
    - eliminate potential use of uninitialized index/pointer in add_bridge_info
    - resolves rhbz#736920
    - resolves rhbz#739505
    - fix missing vlan/bond/ethernet info in dumpxml --live


author: Laine Stump <laine@redhat.com> - 0.1.9-3
changelog:
  - resolves rhbz#886862
    - libnl addr and link caches are not thread-safe, leading to
      libvirtd crashes


author: Laine Stump <laine@redhat.com> - 0.1.9-4
changelog:
  - resolves rhbz#844578
    - check IFF_RUNNING before considering and interface "active"
    - resolves rhbz#848722
    - fix ipcalc_netmask


author: Laine Stump <laine@redhat.com> - 0.2.4-1
changelog:
  - rebase to netcf-0.2.4
   - resolves rhbz#851748
   - avoid use of uninitialized data when getting mac address
     resolves rhbz#1052156
   - eliminate duplicate quotes in bonding options
   - resolves rhbz#879055
   - wait for IFF_UP and IFF_RUNNING after calling ifup
   - don't require IFF_RUNNING for bridge devices
   - avoid memory leak in debian when listing interfaces
   - limit interface names to IFNAMSIZ-1 characters in length
   - support systemd for netcf-transaction


author: Laine Stump <laine@redhat.com> - 0.2.4-2
changelog:
  - resolves rhbz#1113978
   - Fix name of DHCPV6C variable in ifcfg files
   - resolves rhbz#1116314
   - Fix netmask for prefix == 32
   - apply patches to source with git rather than patch


author: Laine Stump <laine@redhat.com> - 0.2.4-3
changelog:
  - resolves rhbz#1208894
   - Remove extraneous single quotes from IPV6ADDR_SECONDARIES
   - resolves rhbz#1208897
   - Bad parsing of network-scripts/ifcfg-xxxx files
   - resolves rhbz#1165966
   - resolves CVE-2014-8119
   - augeas path expression injection via interface name


author: Peter Vrabec <pvrabec@redhat.com> - 0.19-6
changelog:
  - make initscript LSB compliant
  - show version of netlabelctl and libnetlabel in help
  - fixing return codes
    Resolves: #537053 #602577 #602291


author: Jindrich Novy <jnovy@redhat.com> 10.47.05-1
changelog:
  - update to 10.47.05
  - fixes pnmtofiasco, fiascotopnm, pamtosvg, pamtouil and ppmrainbow
  - upstream fix to pamtosvg caused netpbm not to be rebuildable on
    any arch because of missing semicolon, the fix is now fixed :-/


author: Jindrich Novy <jnovy@redhat.com> 10.47.05-5
changelog:
  - remove obsolete pgmtopbm and pnmcomp, symlink them to the new
    compatible variants
  - fix ppmfade -h, --help options
  - add missing man pages
  - pnmmargin won't create leftovers in /tmp
  - add Requires: ghostscript
  - link against -lz


author: Jindrich Novy <jnovy@redhat.com> 10.47.05-6
changelog:
  - pgmtopbm should generate PBM, not PAM file
  - forwardport pnmmontage from 10.35 to make it work
  - fix pamstretch-gen


author: Jindrich Novy <jnovy@redhat.com> 10.47.05-9
changelog:
  - fix cmuwtopbm so that magic bytes test actually works
  - fix pamtojpeg2k (don't close stdout twice)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.8-1
changelog:
  - enable slang utf8 mode (#425992)
  - support --disable-nls option (patch by Natanael Copa)
  - redraw screen when using entry in euc encodings


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.9-1
changelog:
  - handle component destruction (patch by Richard W.M. Jones)
  - fix newtWinEntry definition
  - don't use uninitialized values in newtWinMenu
  - remove workarounds for old bug in SLsmg_write_nstring
  - improve SIGWINCH handling in form
  - don't abort from whiptail gauge on SIGWINCH
  - redisplay also last line
  - update Polish translation (Piotr Drąg)
  - update URL and Source tag


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.10-1
changelog:
  - improve --noitem description (#456305)
  - add setHeight to Textbox class
  - fix fixedheight forms
  - free keymap in newtFinished()
  - fix memory leak in textbox
  - fix valgrind error in checkboxtree
  - don't crash when running empty form
  - don't crash or hang when form has no focusable elements
  - before checkboxtree drawing return first item in GetCurrent()
  - redraw textbox in SetText()
  - add setColor description to SnackScreen docstring (Greg Swift)
  - make sure Widget isn't used directly (Greg Swift) (#452920)
  - add Serbian translations (Miloš Komarčević)
  - add Balochi translation (Mostafa Daneshvar)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.11-1
changelog:
  - fix buffer overflow in textbox when reflowing (#523955, CVE-2009-2905)
  - use full textbox width when reflowing and allow minimal width 1
  - fix writing lines longer than width in textbox
  - don't use va_list in newtvwindow more than once (#523696)
  - bind \E[Z to back-tab in built-in keymap (#468046)
  - terminate string after reading file in whiptail
  - add newtRadioSetCurrent function (Thomas Jarosch)
  - add pkgconfig support (Thomas Jarosch)
  - add Malay, Malayalam, Assamese, Gujarati, Bengali India, Kannada, Telugu
    translations
  - include tutorial in txt format
  - include debian patches
    - fix crash in textbox SetText when topLines != 0
    - don't link modules with libraries already linked with libnewt
    - add Asturian and Marathi translations


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.11-3
changelog:
  - add support for changing colors in individual labels, scrollbars, entries,
    textboxes and scales, add custom colorsets (#707704)


author: Steve Dickson <steved@redhat.com> 1.2.3-71
changelog:
  - rpc.mountd: set libtirpc nonblocking mode to avoid DO (bz 1301581)
  - nfsidmap: Clean up other exit status cases (bz 1313603)
  - gssd: Fix inner-loop variable reuse (bz 1313090)
  - mount.nfs manpage: Add nfsmount.conf (bz 1302981)
  - nfs.init: Set exit code on restarts (bz 1205055)


author: Steve Dickson <steved@redhat.com> 1.2.3-73
changelog:
  - mountd: fix is_subdirectory to understand '/' (bz 1331207)
  - mount.nfs: Fix for the bug in v1.2.4 that breaks mount.nfs (bz 1208385)
  - mount.nfs: Removed supported flag from usage string (bz 1000990)
  - mountd.man: Update to change -P option as an alias for -p (bz 1037926)
  - exportfs: Deal with path's trailing "/" in unexportfs_parsed() (bz 1276538)
  - mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1352856)


author: Steve Dickson <steved@redhat.com> 1.1.5-2
changelog:
  - Updated to latest upstream release: libnfsidmap-0.24-rc1 (bz 650970)
  - Reset default values in /etc/idmap.conf (bz 650997)
  - Remove some warnings in the RPMdiff run (bz 594279)


author: Steve Dickson <steved@redhat.com> - 0.3.1-1.1
changelog:
  - Updated to latest upstream version 0.3.1 which eliminated the 
    need for the patches introduced in the previous commit.


author: Steve Dickson <steved@redhat.com> - 0.3.3-8
changelog:
  - Allow spaces in principal names (bz 1252265)
  - nfs4_setfacl.c: Fix fd leak in edit_ACL() (bz 662726)


author: Daniil Leonov <dleonov@cloudlinux.com> - 1.10.3-2-cloudlinux.els
changelog:
  - Fixed CVE-2021-23017 : Off-by-one in ngx_resolver_copy() when
  - labels are followed by a pointer to a root domain name


author: Dmitry Antipov <dantipov@cloudlinux.com> - 1.10.3-4.tuxcare.els4
changelog:
  - CVE-2021-3618: drop the connection after reaching the specified number of
    invalid protocol commmands


author: Dmitry Antipov <dantipov@cloudlinux.com> - 1.10.3-4.tuxcare.els5
changelog:
  - CVE-2022-41741: fix memory corruption in the ngx_http_mp4_module
  - CVE-2022-41742: fix memory disclosure in the ngx_http_mp4_module


author: Matthias Clasen <mclasen@redhat.com> - 0.4.1-1.20090923.3
changelog:
  - Fix issues with the multi-monitor support
  - Make screensaver check work
  - Use gvfs-open instead of gnome-open


author: John Dennis <jdennis@redhat.com> - 0.1.1-1
changelog:
  - upgrade to current upstream
  - no longer remove package config file (notify-python.pc), resolves bug #427001


author: John Dennis <jdennis@redhat.com> - 0.1.1-10
changelog:
  - spec file clean-ups reported during RHEL-6 import review
    Related: #555835
    replace define with global
    remove URL tag, there is no project URL, it had been pointing to a page with package specification
    remove unnecessary use of CFLAGS
    export PYTHON environment variable pointing to interpreter
    install COPYING AUTHORS NEWS README ChangeLog into docdir


author: Elio Maldonado <emaldona@redhat.com> - 4.9.5-3
changelog:
  - Bump the release tag so it's higher than the one for rhel-6.4.z
  - Resolves: rhbz#919180 - Rebase to nspr-4.9.5


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-1
changelog:
  - Update Version to 4.10.0 to prevent Mozilla apps update problems as
  - reported and fixed on https://bugzilla.redhat.com/show_bug.cgi?id=981166
  - Resolves: rhbz#1002643 - Rebase RHEL 6 to NSPR 4.10 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Rebase to nspr-4.10.2
  - Resolves: rhbz#1032488 - CVE-2013-5607 (MFSA 2013-103) Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-1
changelog:
  - Rebase to nspr-4.10.8
  - Resolves: Bug 1200920 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269361 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption


author: Elio Maldonado <emaldona@redhat.com> - 4.11.0-1
changelog:
  - Rebase to NSPR 4.11
  - Resolves: Bug 1297891 - Rebase RHEL 6.8 to NSPR 4.11 in preparation for Firefox 45


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-0.1.beta
changelog:
  - Rebase to NSS 3.36.0 BETA
  - Remove upstreamed nss-is-token-present-race.patch
  - Revert the upstream changes that default to sql database


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-3
changelog:
  - Use the correct tarball of NSS 3.36 release
  - Ignore EncryptDeriveTest which only works with newer nss-softokn


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-5
changelog:
  - Decrease the iteration count of PKCS#12 for compatibility with Windows
  - Fix deadlock when a token is re-inserted while a client process is running


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-9
changelog:
  - Backport upstream fix for CVE-2018-12384
  - Remove nss-lockcert-api-change.patch, which turned out to be a
    mistake (the symbol was not exported from libnss)


author: Bob Relyea <rrelyea@redhat.com> - 3.44.0-3
changelog:
  - fix problems found by qe:
  - AC13: SSL3 "disabled"
  - AC26: Chacha20 and TLS 1.3 ciphers should be prioritized
  -   SHA-384 PRF => *_256_GCM_SHA384 ciphers should be reenabled for consistency
  - AC28: nss-policy-check is missing from packages and $PATH
  - extra: apostrophes in certutil manpage got mangled


author: Aleksey Deyneko <adeyneko@cloudlinux.com> - 3.44.0-12.tuxcare.els1
changelog:
  - CVE-2021-43527: Fix memory corruption in decodeECorDsaSignature with DSA 
    signatures (and RSA-PSS)
  - Update to CKBI 2.50 from NSS 3.67
  -    Removing:
  -     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root CA"
  -     # Certificate "Sonera Class 2 Root CA"
  -     # Certificate "UTN USERFirst Email Root CA"
  -     # Certificate "Taiwan GRCA"
  -     # Certificate "Certplus Class 2 Primary CA"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "Deutsche Telekom Root CA 2"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "Trustis FPS Root CA"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "Certinomis - Root CA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
  -    Adding:
  -     # Certificate "Entrust Root Certification Authority - G4"
  -     # Certificate "Microsoft ECC Root Certificate Authority 2017"
  -     # Certificate "Microsoft RSA Root Certificate Authority 2017"
  -     # Certificate "e-Szigno Root CA 2017"
  -     # Certificate "certSIGN Root CA G2"
  -     # Certificate "Trustwave Global Certification Authority"
  -     # Certificate "Trustwave Global ECC P256 Certification Authority"
  -     # Certificate "Trustwave Global ECC P384 Certification Authority"
  -     # Certificate "NAVER Global Root Certification Authority"
  -     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
  -     # Certificate "GlobalSign Secure Mail Root R45"
  -     # Certificate "GlobalSign Secure Mail Root E45"
  -     # Certificate "GlobalSign Root R46"
  -     # Certificate "GlobalSign Root E46"
  -     # Certificate "GLOBALTRUST 2020"
  -     # Certificate "ANF Secure Server Root CA"
  -     # Certificate "Certum EC-384 CA"
  -     # Certificate "Certum Trusted Root CA"
  - revert last change. Patch was for nss-softokn
  - Fix out-of-bounds write in NSC_EncryptUpdate (#1775909)


author: Pavel Kopylov <pkopylov@cloudlinux.com> - 3.44.0-12.tuxcare.els2
changelog:
  - Update to CKBI 2.60 from NSS 3.86
  -    Removed:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "DST Root CA X3"
  -     # Certificate "EC-ACC"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "Hellenic Academic and Research Institutions RootCA 2011"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -     # Certificate "SwissSign Platinum CA - G2"
  -     # Certificate "GlobalSign ECC Root CA - R4"
  -     # Certificate "GTS Root R4"
  -     # Certificate "GTS Root R3"
  -     # Certificate "GTS Root R2"
  -     # Certificate "GTS Root R1"
  -    Added:
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"


author: Pavel Kopylov <pkopylov@cloudlinux.com> - 3.44.0-12.tuxcare.els4
changelog:
  - Update to CKBI 2.62 from NSS 3.91
  -    Added:
  -     # Certificate "BJCA Global Root CA1"
  -     # Certificate "BJCA Global Root CA2"


author: Pavel Kopylov <pkopylov@cloudlinux.com> - 3.44.0-12.tuxcare.els5
changelog:
  - Update to CKBI 2.64 from NSS 3.95
  -    Removed:
  -     # Certificate "E-Tugra Certification Authority"
  -     # Certificate "Hongkong Post Root CA 1"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G6"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "Verisign Class 1 Public Primary Certification Authority - G3"
  -     # Certificate "Verisign Class 2 Public Primary Certification Authority - G3"
  -    Added:
  -     # Certificate "Atos TrustedRoot Root CA ECC G2 2020"
  -     # Certificate "Atos TrustedRoot Root CA ECC TLS 2021"
  -     # Certificate "Atos TrustedRoot Root CA RSA G2 2020"
  -     # Certificate "Atos TrustedRoot Root CA RSA TLS 2021"
  -     # Certificate "CommScope Public Trust ECC Root-01"
  -     # Certificate "CommScope Public Trust ECC Root-02"
  -     # Certificate "CommScope Public Trust RSA Root-01"
  -     # Certificate "CommScope Public Trust RSA Root-02"
  -     # Certificate "LAWtrust Root CA2 (4096)"
  -     # Certificate "Sectigo Public Email Protection Root E46"
  -     # Certificate "Sectigo Public Email Protection Root R46"
  -     # Certificate "Sectigo Public Server Authentication Root E46"
  -     # Certificate "Sectigo Public Server Authentication Root R46"
  -     # Certificate "SSL.com Client ECC Root CA 2022"
  -     # Certificate "SSL.com Client RSA Root CA 2022"
  -     # Certificate "SSL.com TLS ECC Root CA 2022"
  -     # Certificate "SSL.com TLS RSA Root CA 2022"
  -     # Certificate "TrustAsia Global Root CA G3"
  -     # Certificate "TrustAsia Global Root CA G4"
  - Update test certificates


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-14
changelog:
  - run the config file upgrade in %posttrans to avoid problems on multilib
    (#706454)
  - convert UID to long long on all arches to catch negative values (#741362)


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-16
changelog:
  - Do not print a "Broken Pipe" error message after requesting a large group
    (#791042)
  - Fix a typo in the disconnection logic (#747281), patch by Martin Poole


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-20.1
changelog:
  - Resolves: rhbz#1192451 - nslcd does not reconnect to alternate ldap server
                             when using SSL


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-20.2
changelog:
  - Do not crash when parsing the tls_ciphers option
  - Resolves: rhbz#1184361 - segfault occurs when nslcd starts


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-20.3
changelog:
  - Use a static buffer for OpenLDAP callback structure
  - Resolves: rhbz#999472 - nslcd does not reconnect to alternate ldap server
                            when using SSL


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-21
changelog:
  - Resolves: rhbz#999472 - nslcd does not reconnect to alternate ldap server
                            when using SSL


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-24
changelog:
  - Apply two patches from upstream
  - Resolves: rhbz#1105382 - nslcd: error reading from client: Success


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-25
changelog:
  - Resolves: rhbz#917876 - [patch] Retry on zero length buffers rather than
                            declaring source unavailable


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-26
changelog:
  - Apply patches in prep
  - Resolves: rhbz#917876 - [patch] Retry on zero length buffers rather than
                            declaring source unavailable


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-27
changelog:
  - Resolves: rhbz#1240388 - nslcd fails to fetch member of group if that
                             members name has 19 or more character in its name


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-30
changelog:
  - Resolves: rhbz#1293564 - Segmentation fault during upstream make check
  - Also fix regressions in the tio.c module revealed by subsequent testing


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-31
changelog:
  - Resolves: rhbz#1293564 - fix doc to describe actual uri format
                             in nslcd.conf


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-32
changelog:
  - Don't double-close the socket
  - Resolves: rhbz#1309364 - Use-after-free in case resolving hosts or
                             networks fail


author: Bob Relyea <rrelyea@redhat.com> - 3.14.3-21
changelog:
  - Require nss-softokn-freebl of at least the same version and release
  - Resolves: Bug 1182662 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-23
changelog:
  - Pick up upstream freebl patch for CVE-2015-2730
  - Check for P == Q or P ==-Q before adding P and Q


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Fix the required nspr version to be 4.10.6
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-1
changelog:
  - Rebase to nss-util from nss 3.21
  - Resolves: Bug 1297890 - Rebase RHEL 6.8 to NSS-util 3.21 in preparation for Firefox 45


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-1
changelog:
  - Rebase to NSS 3.26.0
  - Remove upstreamed patch for CVE-2016-1950
  - Remove p-disable-md5-590364-reversed.patch for bug 1335915


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-42.el6_1
changelog:
  - turn off crypto, hash, queue, and replication support, which aren't used,
    reduces the package size, and sidesteps needing to patch anything for #347741
  - create and populate new db files, moving them in place afterward so that we
    never have a partially-built db file "live" (patch from Kelsey Cummings,
    CentOS #1987)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.1.pre1
changelog:
  - update to 2.2.3pre1, which you can still get from upstream
  - build with -fno-strict-aliasing to avoid problems triggered by strict aliasing
  - package the translations


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.3.pre1
changelog:
  - import Kees Cook's patch to fix accidental leakage of part of ./DB_CONFIG
    (#580192, CVE-2010-0826)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.3.pre1.1
changelog:
  - import patch to handle initgroups directly rather than forcing libc to
    use the enumeration interfaces, which could result in two threads calling
    initgroups() at the same time to both get a subset of the right answers
    (#718203)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.4.pre1
changelog:
  - import patch to handle initgroups directly rather than forcing libc to
    use the enumeration interfaces, which could result in two threads calling
    initgroups() at the same time to both get a subset of the right answers
    (#705466)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.4.pre1.1
changelog:
  - when the initgroups function needs to parse a group entry which contains a
    large list of users, reinitialize the buffer that we pass to the parsing
    function, which destroyed what we passed to it the previous time (#788668)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.5.pre1
changelog:
  - when the initgroups function needs to parse a group entry which contains a
    large list of users, reinitialize the buffer that we pass to the parsing
    function, which destroyed what we passed to it the previous time (#751461)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-2
changelog:
  - don't generate weak control key for resolver (CVE-2014-9293)
  - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
  - fix buffer overflows via specially-crafted packets (CVE-2014-9295)
  - don't mobilize passive association when authentication fails (CVE-2014-9296)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-3
changelog:
  - validate lengths of values in extension fields (CVE-2014-9297)
  - drop packets with spoofed source address ::1 (CVE-2014-9298)
  - add nanosecond support to SHM refclock (#1117704)
  - allow creating all SHM segments with owner-only access (#1122015)
  - allow symmetric keys up to 32 bytes again (#1053551)
  - fix calculation of root dispersion (#1045376)
  - fix crash in ntpq mreadvar command (#1165141)
  - don't step clock for leap second with -x option (#1190619)
  - don't drop packets with source port below 123 (#1171630)
  - use larger RSA exponent in ntp-keygen (#1184421)
  - refresh peers on routing updates (#1193850)
  - increase memlock limit again (#1053568)
  - warn when monitor can't be disabled due to limited restrict (#1166596)
  - improve documentation of restrict command (#1069019)
  - update logconfig documentation for patched default (#1193849)
  - don't build ntpsnmpd (#995134)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-5
changelog:
  - reject packets without MAC when authentication is enabled (CVE-2015-1798)
  - protect symmetric associations with symmetric key against DoS attack
    (CVE-2015-1799)
  - fix generation of MD5 keys with ntp-keygen on big-endian systems
    (CVE-2015-3405)
  - log when stepping clock for leap second or ignoring it with -x (#1204625)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-7
changelog:
  - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
  - allow only one step larger than panic threshold with -g (CVE-2015-5300)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-9
changelog:
  - fix crash with invalid logconfig command (CVE-2015-5194)
  - fix crash when referencing disabled statistic type (CVE-2015-5195)
  - don't hang in sntp with crafted reply (CVE-2015-5219)
  - don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
    CVE-2015-7702)
  - fix memory leak with autokey (CVE-2015-7701)
  - don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
  - don't crash in ntpq with crafted packet (CVE-2015-7852)
  - add option to set Differentiated Services Code Point (DSCP) (#1228314)
  - extend rawstats log (#1242895)
  - fix resetting of leap status (#1243034)
  - report clock state changes related to leap seconds (#1242937)
  - allow -4/-6 on restrict lines with mask (#1232146)
  - retry joining multicast groups (#1288534)
  - explain synchronised state in ntpstat man page (#1286969)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-10
changelog:
  - don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
  - fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-11
changelog:
  - don't allow spoofed packets to demobilize associations (CVE-2015-7979,
    CVE-2016-1547)
  - don't allow spoofed packet to enable symmetric interleaved mode
    (CVE-2016-1548)
  - check mode of new source in config command (CVE-2016-2518)
  - make MAC check resilient against timing attack (CVE-2016-1550)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-12
changelog:
  - don't limit rate of packets from sources (CVE-2016-7426)
  - don't change interface from received packets (CVE-2016-7429)
  - fix calculation of root distance again (CVE-2016-7433)
  - require authentication for trap commands (CVE-2016-9310)
  - fix crash when reporting peer event to trappers (CVE-2016-9311)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-12.el6_9.1
changelog:
  - fix buffer overflow in datum refclock driver (CVE-2017-6462)
  - fix crash with invalid unpeer command (CVE-2017-6463)
  - fix potential crash with invalid server command (CVE-2017-6464)


author: Nikita Ivanov <nivanov@cloudlinux.com> - 4.2.6p5-16.cloudlinux.els
changelog:
  - CVE-2020-11868: incorrect handling of packets from unauthenticated
    synchronization source with spoofed IP address leads to denial of service.


author: Petr Holasek <pholasek@redhat.com> - 2.0.7-4
changelog:
  - Symbol numa_num_possible_cpus exported (bz804827)
  - miscalculating of numa_num_configured_cpus was fixed (bz804480)


author: Anton Arapov <anton@redhat.com> - 2.0.7-7
changelog:
  - numastat.c: fix bug preventing correct static huge page quantities
  - numastat.c: update version number
  - numastat.8: remove redundant "interleave hit" description
  - numastat.8: remove extraneous leading spaces and blank lines
  - numastat.8: enhance explanation of correct placement for "-s" option
  - Resolves: rhbz#987507


author: Michal Hlavinka <mhlavink@redhat.com> - 2.4.3-1
changelog:
  - cyberpower driver was replaced by the powerpanel driver
  - general USB support has been vastly improved, including many bug
    fixes, new features and devices
  - the virtual driver has been renamed to 'clone'
  - the UPower (previously known as DeviceKit-power) rules file is now
    generated by NUT
  - a lot of new devices supported


author: Michal Hlavinka <mhlavink@redhat.com> - 2.6.3-1
changelog:
  - update to 2.6.3
  - users of the megatec and megatec_usb drivers must switch to
    blazer_ser or blazer_usb respectively
  - users of the liebertgxt2 driver are advised that the driver 
    name has changed to liebert-esp2


author: Michal Hlavinka <mhlavink@redhat.com> - 2.6.3-4
changelog:
  - fix heap-based buffer overflow due improper processing of non-printable 
    characters in random network data (CVE-2012-2944)


author: Ade Lee <alee@redhat.com> 1.0.0-14
changelog:
  - Resolves: #643546 - [RFE] Add nuxwdog to RHEL.
  - Remove old encryption scheme
  - Store passwords in kernel keyring


author: Tania Bento <tbento@redhat.com> 0:1.3.2-1jpp.1
changelog:
  - Changed %BuildRoot tag.
  - Bootstrap Buildling.
  - Should not touch buildroot in %prep.
  - Removed %Vendor tag.
  - Removed %Distribution tag.
  - Fixed %Release tag.
  - Fixed %Sourcei0 tag.
  - Added %doc to %files section.
  - Edited %doc in %files javadoc section.


author: Ralph Apel <r.apel@r-apel.de> - 0:3.1-3jpp
changelog:
  - Add poms and depmap frags with groupId of org.objectweb.asm !
  - Add asm-all.jar 
  - Add -javadoc Requires post and postun
  - Restore Vendor, Distribution


author: David Walluck <dwalluck@redhat.com> 0:3.1-4
changelog:
  - remove Class-Path from MANIFEST.MF
  - add unversioned javadoc symlink
  - remove javadoc scriptlets
  - fix directory ownership
  - remove build requirement on dos2unix


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.1-2
changelog:
  - ocaml-find-requires.sh: Calculate runtime version using ocamlrun
    -version instead of fedora-ocaml-release file.


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.1-7
changelog:
  - Remove ocaml-find-{requires,provides}.sh from this package.  These are
    now in upstream RPM 4.8 (RHBZ#545116).
  - define -> global in a few places.


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.2-5
changelog:
  - Enable execshield stack protection on ppc/ppc64 (572826)
    related: rhbz#1343082
  - Fix strict-aliasing warnings in build (990540).


author: S390x secondary arch maintainer <fedora-s390x@lists.fedoraproject.org>
changelog:
  - ExcludeArch sparc64, s390, s390x as we don't have OCaml on those archs
    (added sparc64 per request from the sparc maintainer)


author: Richard W.M. Jones <rjones@redhat.com> - 2.01.1-4
changelog:
  - Import Fedora Rawhide package.
  - Replace %define with %global.
  - Use upstream RPM 4.8 OCaml dependency generator.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4.0-2
changelog:
  - New upstream version 0.4.0.
  - Upstream build system has been rationalized, so remove all the
    hacks we were using.
  - Upstream now contains tests, run them.
  - Needs ounit in order to carry out the tests.


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.3-1
changelog:
  - New upstream release 0.3.3 (mainly small bugfixes).
  - This requires ocaml-fileutils 0.4.0 and is incompatible with
    any earlier version.
  - Fixed a number of rpmlint warnings with *.ml files in the
    non-devel package.


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.3-3.4
changelog:
  - Remove camomile dependency completely.
  - Disable tests, since they require camomile.  Also we have to patch
    out the tests in the Makefile since they run anyway (and break).


author: Nalin Dahyabhai <nalin@redhat.com> 0.29.1-1
changelog:
  - when we install the mkhomedir subpackage, if there's a running oddjobd, ask
    it to reload its configuration
  - fix missing bits from the namespace changes in configuration files
  - restart the service in %postun


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-1
changelog:
  - drop the shared library and python bindings, which so far as i can tell
    weren't being used, obsoleting them to avoid a mess on upgrades
  - move the mkhomedir helper from %{_libdir}/oddjob to %{_libexecdir}/oddjob
    to make the multilib configuration files agree (#559232)
  - use %global instead of %define


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-2
changelog:
  - backport patch to stop trying to close a stale connection to the bus,
    which used to generate a warning from libdbus, but which now causes an
    assertion failure (#634356)
  - when creating home directories, default to the UMASK setting from
    /etc/login.defs (part of #659681) and ensure the execute bit is set
    on any intermediate directories we create (the rest of #659681)
  - make sure the test helper has consistent permissions and make sure our
    self-tests verify them (#612617)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-4
changelog:
  - make the init script exit with status 2 when given an unknown command, rather
    than with status 1 (#674534)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-5
changelog:
  - signal the system message bus to reload its configuration whenever we
    drop a new configuration file in place for it during package %post (#678345)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-6
changelog:
  - stop overriding the system-wide UMASK default in our default
    oddjobd-mkhomedir.conf file (#1150607)


author: CloudLinux Packaging Team <packager@cloudlinux.com> - 3.6.6-4
changelog:
  - Fix multilib conflicts for buildopts.h autogenerated file, remove bad buildopts.patch
  - Rebuilt with ilbc


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.1.1-1
changelog:
  - New upstream release.
  - spec file updates:
    * Cleanup macro usage
    * Drop Conflict: in favour of correct Requires:
    * Whitespace cleanup


author: Ryan O'Hara <rohara@redhat.com> - 1.1.1-2
changelog:
  - Resolves: rhbz#555164
  - Resolves: rhbz#557275
  - Resolves: rhbz#557622
  - Add upstream revision 2104 - Fix saCkptDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2105 - Fix saTmrDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2106 - Fix saLckDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2107 - Fix saClmDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2108 - Fix saMsgDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2109 - Prevents iteration of a checkpoint section during synchronization.
  - Add upstream revision 2111 - Update to openais.spec.in to fix URL and File location.


changelog: - Updatet to an newer git version because of some pulseaudio fixes.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-3.3793919892e6d61e5fec3abeaaeebc3f2332be13


changelog: - Fixed broken upgrade paths.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-4.3793919892e6d61e5fec3abeaaeebc3f2332be13


changelog: - Fixed small spec verion info.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-5.3793919892e6d61e5fec3abeaaeebc3f2332be13


changelog: - Newer git version with more Pulseaudio fixes. Have fun.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-6.0ceaa01c3de75c946ff2e7591e7f69b28ec00409


changelog: - Newer git version that fix more problems with pulseaudio.
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.10.622-7.931f5875cdc4ce0ac61a5110f11e962426e53d99


changelog: - Fixed Bug 567870
author:
  Thomas Kowaliczek <linuxdonald@linuxdonald.de> - 1.11.753-2.a9e0e57797c6f4321d5776e1f29bf1e75b11e6a1


author: Dan Horák <dhorak@redhat.com> 2.4-2
changelog:
  - don't add root to pkcs11 group (#732756)
  - document implications of the pkcs11 group membership (#730903)
  - Resolves: #732756, #730903


author: Petr Lautrbach <plautrba@redhat.com> 2.4.3.1-2
changelog:
  - use correct OID in CKA_ECDSA_PARAMS attribute
  - fixed ica token's SHA update function when passing zero message size
  - Resolves: #1027606, #1131745


author: Haïkel Guémar <karlthered@gmail.com> - 2.0.0-1
changelog:
  - Updated to 2.0.0
  - Removed upstream-ed patches
  - Ugly hack (added cvconfig.h)
  - Disable %check on ppc64


author: Haïkel Guémar <karlthered@gmail.com> - 2.0.0-6
changelog:
  - use cmake build system
  - applications renamed to opencv_xxx instead of opencv-xxx
  - add devel-docs subpackage #546605
  - add OpenCVConfig.cmake
  - enable openmp build
  - enable old SWIG based python wrappers
  - opencv package is a good boy and use global instead of define


author: Karel Klic <kklic@redhat.com> - 2.0.0-7
changelog:
  - re-enable testing on CMake build system
  - fix memory corruption in the gaussian random number generator


author: Dan Horák <dhorak@redhat.com> - 2.14.1-3.1
changelog:
  - Fix support for Power Supply Serial/Part Numbers (#915336),
    patch by Michele Baldessari <michele@redhat.com>
  - Resolves: #915336


author: Dan Horák <dhorak@redhat.com> - 2.14.1-3.2
changelog:
  - add mssing sensor RDRs for the fan resource (#969003)
  - fix openhpi connection failures with redundant OAs (#969004)
  - fix segfaults when retrieving thermal info (#969005)
  - add missing thermal sensors (#969006)
  - Resolves: #969003, #969004, #969003, #969006


author: Dan Horák <dhorak@redhat.com> - 2.14.1-4
changelog:
  - Fix support for Power Supply Serial/Part Numbers (#891626),
    patch by Michele Baldessari <michele@redhat.com>
  - Resolves: #891626


author: Dan Horák <dhorak@redhat.com> - 2.14.1-5
changelog:
  - add mssing sensor RDRs for the fan resource (#924852)
  - fix openhpi connection failures with redundant OAs (#948386)
  - fix segfaults when retrieving thermal info (#953515)
  - add missing thermal sensors (#953525)
  - Resolves: #924852, #948386, #953515, #953525


author: Michal Toman <mtoman@redhat.com> - 3.4.0-1
changelog:
  - rebase to 3.4.0 - #1127907
  - remove ipv6 patch - it is a part of 3.4.0
  - fix "strmsock.cpp:558: accept failed" - #1105679


author: Tim Waugh <twaugh@redhat.com> 1.3.2-28
changelog:
  - Don't ship .so or .la files (bug #203635).
  - Added dist tag to release.
  - Fixed summary.
  - Fixed build root.
  - Removed prefix tag.


author: Rex Dieter <rdieter@fedoraproject.org> - 1.3-5
changelog:
  - libopenjpeg has undefined references (#467661)
  - openjpeg.h is installed in a directory different from upstream's default (#484887)
  - drop -O3 (#504663)
  - add %check section
  - %files: track libopenjpeg somajor (2)


author: Tom Lane <tgl@redhat.com> 1.3-7
changelog:
  - Apply two upstream fixes for crasher bugs
  Resolves: #609389
  - Fix FTBFS: ImplicitDSOLinking (see Fedora bug 564783)


author: Tom Lane <tgl@redhat.com> 1.3-8
changelog:
  - Apply patches for CVE-2009-5030, CVE-2012-3358
  Resolves: #831562
  - Include -DCMAKE_INSTALL_LIBDIR in cmake call; fixes FTBFS with recent
    versions of cmake


author: Petr Hracek <phracek@redhat.com> 1.3-10
changelog:
  - Apply patch for CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 
  Resolves: #1038985 CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052


author: Petr Hracek <phracek@redhat.com> 1.3-10
changelog:
  - Apply patch for CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 
  Resolves: #1038987 CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052


author: Nikola Forró <nforro@redhat.com> - 1.3-16
changelog:
  - Revert previous changes in patch for CVE-2016-5159
  - Fix double free in patch for CVE-2016-5139
  - Fix memory leaks and invalid read in cio_bytein
    Related: #1419775


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-7
changelog:
  - fix: regression: deadlock during SSL_ForceHandshake when getting connection to replica (#1263477)
    + apply (and modify a little) the patch from commit 1eeaeeb7


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-8
changelog:
  - fix: slapd crash in do_search (#1257543)
  - Fix: Cannot build the package after libtool rebase (#1296129)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-9
changelog:
  - fix: Bad log levels in check_password module (#1255046)
  - [rfe] add informational message about database backup when openldap is updated (#1261651)
  - fix: id_query option is not available after rebasing openldap to 2.4.39 (#1288545)
  - fix: We can't search expected entries from LDAP server (#1212283)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-10
changelog:
  - fix: update description in slapd.conf for NSS database related options (#1131094)
  - fix: check_password minPoints parameter useless (#1255063)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-11
changelog:
  - fix: OpenLDAP doesn't use sane (or default) cipher order (#1300701)
    + Add support for TLSv1.2, and SHA256 and SHA384 ciphers
    + Use what NSS considers default for DEFAULT cipher string.
    + Drop unnecessary hardcoded cipher suites' default flags
    + Update with TLSv1.2 ciphers
  - revert: check_password minPoints parameter useless (#1255063)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-13
changelog:
  - NSS: fix setting olcTLSProtocolMin (#1249092)
  - fix slapd crash in do_search (sc_writewait) (#1340861)
  - NSS: fix parsing code (#1372349)
    + refactor ciphers-related patches
    + fix cipherstring parsing
  - NSS: fix cipher suites' definitions (#1372357)
    + fix some ciphers' flags
    + add new ciphers to match the current NSS
    + add PSK and CHACHA20POLY1305 cipher strings


author: Matus Honek <mhonek@redhat.com> - 2.4.40-14
changelog:
  - NSS: use a hex number for some ciphersuite definitions (#1372357)
  - NSS: fix OpenLDAP crash in NSS shutdown handling (#1373222)
  - fix: rpm -V openldap-servers complains after a clean install (#1263220)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-15
changelog:
  - ITS#8337 fix missing olcDbChecksum config attr (#1397961)
  - ITS#8003 fix off-by-one in LDIF length (#1397949)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.2.7
  - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  - take include files out of base package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add -D_REENTRANT to make threaded stuff more stable, even though it looks
    like the sources define it, too
  - mark *.ph files in migration tools as config files


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  - fix some possible string-handling problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.10
  - add revamped version of patch from kos@bastard.net to allow execution as
    any non-root user
  - remove test suite from %build because of weirdness in the build system


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  - backport replacement for the ldapuser patch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.11
  - add condrestart logic to init script
  - munge migration scripts so that you don't have to be 
    /usr/share/openldap/migration to run them
  - add code to create pid files in /var/run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak init script to return error codes properly
  - change initscripts dependency to one on /etc/init.d


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to gdbm; I'm getting off the db merry-go-round
  - tweak the init script some more
  - add instdir to @INC in migration scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split off clients and servers to shrink down the package and remove the
    base package's dependency on Perl
  - make certain that the binaries have sane permissions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build a semistatic slurpd with threads, everything else without
  - disable reverse lookups, per email on OpenLDAP mailing lists
  - make sure the execute bits are set on the shared libraries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add the nis.schema and inetorgperson.schema to the default server config
  - make ldapadd a hard link to ldapmodify because they're identical binaries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.6
  - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  - take the -s flag off of slapadd invocations in migration tools
  - add the cosine.schema to the default server config, needed by inetorgperson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - try adding the suffix first when doing online migrations
  - force ldapadd to use simple authentication in migration scripts
  - add indexing of a few attributes to the default configuration
  - add commented-out section on using TLS to default configuration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add missing required attributes to conversion scripts to comply with schema
  - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
    our own OID tree to define attributes and classes migration scripts expect
  - tweak automounter migration script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  - configure slapd to run as the non-root user "ldap" (#19370)
  - chdir() before chroot() (we don't use chroot, though) (#19369)
  - disable saving of the pid file because the parent thread which saves it and
    the child thread which listens have different pids


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
    (OpenLDAP ITS #889)
  - add "-h ldaps:///" to server init when TLS is enabled, in order to support
    ldaps in addition to the regular STARTTLS (suggested by Del)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
    per mail from the ldap-nis mailing list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
    a /etc/sysconfig/ldap file (#23549)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out pidfile patches, which interact weirdly with Linux threads
  - mark non-standard schema as such by moving them to a different directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build dummy certificate in %post, use it in default config
  - configure-time shenanigans to help a confused configure script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move shared libraries to /lib
  - redo init script for better internationalization (#26154)
  - don't use ldaprc files in the current directory (#38402) (patch from
    hps@intermeta.de)
  - add BuildPrereq on tcp wrappers since we configure with
    --enable-wrappers (#43707)
  - don't overflow debug buffer in mail500 (#41751)
  - don't call krb5_free_creds instead of krb5_free_cred_contents any
    more (#43159)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
    compliance) by name (follows from #43079, which split cyrus-sasl's
    cram-md5 and digest-md5 modules out into cyrus-sasl-md5)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a build-time requirement on pam-devel
  - add a build-time requirement on a sufficiently-new libtool to link
    shared libraries to other shared libraries (which is needed in order
    for prelinking to work)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1
changelog:
  - update to 2.0.12 to pull in fixes for setting of default TLS options, among
    other things
  - update to migration tools 39
  - drop tls patch, which was fixed better in this release


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable kbind support (deprecated, and I suspect unused)
  - configure with --with-kerberos=k5only instead of --with-kerberos=k5
  - build slapd with threads


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2
changelog:
  - temporarily disable optimizations for ia64 arches
  - specify pthreads at configure-time instead of letting configure guess


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2
changelog:
  - switch to an internalized Berkeley DB as the ldbm back-end  (NOTE: this breaks
    access to existing on-disk directory data)
  - add slapcat/slapadd with gdbm for migration purposes
  - remove Kerberos dependency in client libs (the direct Kerberos dependency
    is used by the server for checking {kerberos} passwords)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1
changelog:
  - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
    slapd databases until we move to 2.1.x)
  - use %{_smp_mflags} when running make
  - update to MigrationTools 44
  - enable dynamic module support in slapd


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/_libdir instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
    1936, 2007, 2009, which were included in 2.0.26.
  - add two more patches for db 4.1.24 from sleepycat's updates page
  - use openssl pkgconfig data, if any is available


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8
changelog:
  - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
  - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17
  - disable the shell backend, not expected to work well with threads
  - drop the kerberosSecurityObject schema, the krbName attribute it
    contains is only used if slapd is built with v2 kbind support


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_*
  - install slapcat/slapadd from 2.0.x for migration purposes


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0
changelog:
  - 2.1.22 now badged stable
  - be more aggressive in what we index by default
  - use/require libtool 1.5


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually require newer libtool, as was intended back in 2.1.22-0, noted as
    missed by Jim Richardson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build bundled libdb for slapd dynamically to make the package smaller,
    among other things
  - on tls-capable arches, build libdb both with and without shared posix
    mutexes, otherwise just without
  - disable posix mutexes unconditionally for db 4.0, which shouldn't need
    them for the migration cases where it's used
  - update to MigrationTools 45


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1
changelog:
  - change logging facility used from daemon to local4 (#112730, reversing #11047)
    BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2
changelog:
  - fix incorrect use of find when attempting to detect a common permissions
    error in the init script (#114866)


author: Thomas Woerner <twoerner@redhat.com> 2.1.29-3
changelog:
  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1
changelog:
  - add compat-openldap subpackage
  - default to bdb, as upstream does, gambling that we're only going to be
    on systems with nptl now


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    evolution_connector_prefix)
  - provide openldap-evolution-devel = version-release in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move slapd startup to earlier in the boot sequence (#103160)
  - update to 2.2.15 (stable-20040822)
  - change version number on compat-openldap to include the non-compat version
    from which it's compiled, otherwise would have to start 2.2.15 at release 3
    so that it upgrades correctly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.17 (stable-20040923) (#135188)
  - move nptl libraries into arch-specific subdirectories on x86 boxes
  - require a newer glibc which can provide nptl libpthread on i486/i586


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1
changelog:
  - update to 2.2.20 (stable-20050103)
  - warn about unreadable krb5 keytab files containing "ldap" keys
  - warn about unreadable TLS-related files
  - own a ref to subdirectories which we create under _libdir/tls


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1
changelog:
  - update to 2.2.23 (stable-20050125)
  - update notes on upgrading from earlier versions
  - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1
changelog:
  - update to 2.2.24 (stable 20050318)
  - export KRB5_KTNAME in the init script, in case it was set in the sysconfig
    file but not exported


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.26 (stable 20050429)
  - enable the lmpasswd scheme
  - print a warning if slaptest fails, slaptest -u succeeds, and one of the
    directories listed as the storage location for a given suffix in slapd.conf
    contains a readable file named __db.001 (#118678)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.26-1
changelog:
  - run slaptest with the -u flag if no id2entry db files are found, because
    you can't check for read-write access to a non-existent database (#156787)
  - add _sysconfdir/openldap/cacerts, which authconfig sets as the
    TLS_CACERTDIR path in /etc/openldap/ldap.conf now
  - use a temporary wrapper script to launch slapd, in case we have arguments
    with embedded whitespace (#158111)


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add the tls-fix-connection-test patch to close
    bz#161991 openldap password disclosure issue
  - add the hop patches to prevent infinite looping when chasing referrals.
    OpenLDAP ITS #3578


author: Jay Fenlason <fenlason@redhat.com> 2.2.26-2
changelog:
  - Move the slapd.pem file to /etc/pki/tls/certs
    and edit the -config patch to match to close
    bz#143393  Creates certificates + keys at an insecure/bad place
  - also use _sysconfdir instead of hard-coding /etc


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-2
changelog:
  - Upgrade to 2.3.11, which upstream now considers stable.
  - Switch compat-openldap to 2.2.29
  - remove references to nss_ldap_build from the spec file
  - remove references to 2.0 and 2.1 from the spec file.
  - reorganize the build() function slightly in the spec file to limit the
    number of redundant and conflicting options passedto configure.
  - Remove the attempt to hardlink ldapmodify and ldapadd together, since
    the current make install make ldapadd a symlink to ldapmodify.
  - Include the -ads patches to allow SASL binds to an Active Directory
    server to work.  Nalin <nalin@redhat.com> wrote the patch, based on my
    broken first attempt.


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-3
changelog:
  - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and
    compat-openldap- to close
    bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'


author: Jay Fenlason <fenlason@redhat.com> 2.3.19-2
changelog:
  - Upgrade to 2.3.19, which upstream now considers stable
  - Modify the -config.patch, ldap.init, and this spec file to put the
    pid file and args file in an ldap-owned openldap subdirectory under
    /var/run.
  - Move back_sql* out of _sbindir/openldap , which requires
    hand-moving slapd and slurpd to _sbindir, and recreating symlinks
    by hand.
  - Retire openldap-2.3.11-ads.patch, which went upstream.
  - Update the ldap.init script to run slaptest as the ldap user rather
    than as root.  This solves
    bz#150172 Startup failure after database problem
  - Add to the servers post and preun scriptlets so that on preun, the
    database is slapcatted to /var/lib/ldap/upgrade.ldif and the
    database files are saved to /var/lib/ldap/rpmorig.  On post, if
    /var/lib/ldap/upgrade.ldif exists, it is slapadded.  This means that
    on upgrades from 2.3.16-2 to higher versions, the database files may
    be automatically upgraded.  Unfortunatly, because of the changes to
    the preun scriptlet, users have to do the slapcat, etc by hand when
    upgrading to 2.3.16-2.  Also note that the /var/lib/ldap/rpmorig
    files need to be removed by hand because automatically removing your
    emergency fallback files is a bad idea.
  - Upgrade internal bdb to db-4.4.20.  For a clean upgrade, this will
    require that users slapcat their databases into a temp file, move
    /var/lib/ldap someplace safe, upgrade the openldap rpms, then
    slapadd the temp file.


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Thomas Woerner <twoerner@redhat.com> 2.3.30-1.1
changelog:
  - tcp_wrappers has a new devel and libs sub package, therefore changing build
    requirement for tcp_wrappers to tcp_wrappers-devel


author: Jay Fenlason <fenlason<redhat.com> 2.3.34-1
changelog:
  - New upstream release
  - Upgrade the scripts for migrating the database so that they might
    actually work.
  - change bind-libbind-devel to bind-devel in BuildPreReq


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-2
changelog:
  - slapadd during package update is now quiet (bz#224581)
  - use _localstatedir instead of var/ during build (bz#220970)
  - bind-libbind-devel removed from BuildRequires (bz#216851)
  - slaptest is now quiet during service ldap start, if
    there is no error/warning (bz#143697)
  - libldap_r.so now links with pthread (bz#198226)
  - do not strip binaries to produce correct .debuginfo packages
    (bz#152516)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-3
changelog:
  - do not create script in /tmp on startup (bz#188298)
  - add compat-slapcat to openldap-compat (bz#179378)
  - do not import ddp services with migrate_services.pl
    (bz#201183)
  - sort the hosts by adders, preventing duplicities
    in migrate*nis*.pl (bz#201540)
  - start slupd for each replicated database (bz#210155)
  - add ldconfig to devel post/postun (bz#240253)
  - include misc.schema in default slapd.conf (bz#147805)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-4
changelog:
  - Fix initscript return codes (#242667)
  - Provide overlays (as modules; #246036, #245896)
  - Add available modules to config file


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-6
changelog:
  - fix compat-slapcat compilation. Now it can be found in 
    /usr/lib/compat-openldap/slapcat, because the tool checks argv[0]
    (#246581)


author: Jan Safranek <jsafranek@redhat.com> 2.3.37-2
changelog:
  - do not use specific automake and autoconf
  - do not distinguish between NPTL and non-NPTL platforms, we have NPTL
    everywhere
  - db-4.6.18 integrated
  - updated openldap-servers License: field to reference BDB license


author: Jan Safranek <jsafranek@redhat.com> 2.3.38-2
changelog:
  - skeleton /etc/sysconfig/ldap added
  - new SLAPD_LDAP option to turn off listening on ldap:/// (#292591)
  - fixed checking of SSL (#292611)
  - fixed upgrade with empty database


author: Jan Safranek <jsafranek@redhat.com> 2.4.7-4
changelog:
  - fixed rpmlint warnings and errors
    - /etc/openldap/schema/README moved to /usr/share/doc/openldap


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-3
changelog:
  - reworked the upgrade logic, slapcat/slapadd of the whole database
    is needed only if minor version changes (2.3.x -> 2.4.y)
  - do not try to save database in LDIF format, if openldap-servers package 
    is  being removed (it's up to the admin to do so manually)


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-4
changelog:
  - bdb upgraded to 4.6.21
  - reworked upgrade logic again to run db_upgrade when bdb version
    changes


author: Jan Safranek <jsafranek@redhat.com> 2.4.11-3
changelog:
  - add SLAPD_SHUTDOWN_TIMEOUT to /etc/sysconfig/ldap, allowing admins
    to set non-default slapd shutdown timeout
  - add checkpoint to default slapd.conf file (#458679)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.15-3
changelog:
  - extended previous patch (#481310) to remove options cfMP
    from some client tools
  - correction of patch setugid (#494330)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.16-1
changelog:
  - rebase of openldap to 2.4.16
  - fixed minor issue in spec file (output looking interactive
    when installing servers)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-2
changelog:
  - changed configuration approach. Instead od slapd.conf slapd
    is using slapd.d directory now
  - fix of some issues caused by renaming of init script
  - fix of buffer overflow issue in ldif.c pointed out by new glibc


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-4
changelog:
  - buffer overflow patch from upstream
  - added /etc/openldap/slapd.d and /etc/openldap/slapd.conf.bak
    to files owned by openldap-servers


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-1
changelog:
  - fixed tls connection accepting when TLSVerifyClient = allow
  - /etc/openldap/ldap.conf removed from files owned by openldap-servers
  - minor changes in spec file to supress warnings
  - some changes in init script, so it would be possible to use it when
    using old configuration style
  - rebased openldap to 2.4.19
  - rebased bdb to 4.8.24


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-7
changelog:
  - updated usage line in init script
  - changed return code when calling init script with bad arguments


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-9
changelog:
  - fixed broken link /usr/sbin/slapschema (#583568)
  - removed some static libraries from openldap-devel (#583575)


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-10
changelog:
  - updated overlay list in config file (#586143)
  - config dir slapd.d added to package payload (#585276)
  - init script now creates only symlink, not harldink, in /var/run (#584870)


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-12
changelog:
  - updated man pages - only slaptest can convert configuration schema
    (#584787)
  - openldap compiled with -fno-strict-aliasing (#596193)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-4
changelog:
  - rebase to 2.4.23 (Fedora 14) (#644077)
  - uses Mozilla NSS instead of OpenSSL for TLS/SSL
  - added LDIF (ldif.h) to the public API
  - removed embeded Berkeley DB
  - removed autofs schema (use up-to-date version from autofs package instead)
  - removed compat-openldap subpackage (use separate package instead)
  - fixes: ldapsearch -Z hangs server if starttls fails (#652823)
  - fixes: improve SSL/TLS log messages (#652819)
  - fixes: crash when TLS_CACERTDIR contains a subdirectory (#652817)
  - fixes: TLS_CACERTDIR takes precedence over TLS_CACERT (#652816)
  - fixes: openldap should ignore files not in the openssl c_hash format in cacertdir (#652814)
  - fixes: slapd init script gets stuck in an infinite loop (#644399)
  - fixes: Remove lastmod.la from default slapd.conf.bak (#630637)
  - fixes: Mozilla NSS - delay token auth until needed (#616558)
  - fixes: Mozilla NSS - support use of self signed CA certs as server certs (#616554)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-5
changelog:
  - initscript: slaptest with '-u' to skip database opening (#613966)
  - removed slurpd options from sysconfig/ldap
  - fix: verification of self issued certificates (#667795)
  - fix: move libraries from /usr/lib to /lib (#548475)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-7
changelog:
  - fix: some server certificates refused with inadequate type error (#669846)
  - fix: default encryption strength dropped in switch to using NSS (#669845)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-10
changelog:
  - fix: add symlinks for libraries moved in 2.4.23-5 to allow building
    packages which require these libraries in the old location (#678105)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-11
changelog:
  - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success
  - fix: CVE-2011-1025 rootpw is not verified for ndb backend
  - fix: openldap startup script ignores ulimit settings (#679356)
  - fix: add symlinks into /usr/lib*/ (#680139)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-13
changelog:
  - fix update: openldap can't use TLS after a fork() (#671553)
  - fix: possible NULL pointer dereferences in NSS non-blocking patch (#684035)
  - fix: move libldif to /lib for consistency (#548475)
  - fix: openldap-servers upgrade hangs or do not upgrade the database (#685119)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-14
changelog:
  - fix update: openldap startup script ignores ulimit settings (#679356)
  - fix update: openldap-servers upgrade hangs or do not upgrade the database (#685119)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-15
changelog:
  - fix: rpm -V fail when upgrading with openldap-devel installed (#693716)
    (remove devel *.so symlinks from /lib and leave them in /usr/lib)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-16
changelog:
  - fix: memleak in tlsm_auth_cert_handler (#717738)
  - fix: segmentation fault of client tool when LDIF input file is not terminated
    by a new line character (#698921)
  - fix: segmentation fault of client tool when input line in LDIF file
    is splitted but indented incorrectly (#701227)
  - fix: server scriptlets require initscripts package (#712358)
  - enable ldapi:/// interface by default
  - set cn=config management ACLs for root user, SASL external schema (#712494)
  - fix: ldapsearch fails if no CA certificate is available (#713525)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-17
changelog:
  - fix: strict aliasing warnings during package build (#723487)
  - add partial RELRO support for libraries (#723999)
  - fix: incorrect behavior of allow/try options of VerifyCert and TLS_REQCERT (#729095)
  - fix: memleak - free the return of tlsm_find_and_verify_cert_key (#729087)
  - fix: TLS_REQCERT=never ignored when the certificate is expired (#722959)
  - fix: matching wildcard hostnames in certificate Subject field does not work (#726984)
  - fix: OpenLDAP server segfaults when using back-sql (#727533)
  - fix: conversion of constraint overlay settings to cn=config is incorrect (#722923)
  - fix: DDS overlay tolerance parametr doesn't function and breakes default TTL (#723514)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-18
changelog:
  - fix: overlay refint option refint_nothing doesn't function correctly (#725479)
  - fix: Unwanted slash printed when installing openldap-servers (#732001)
  - manpage fix: TLS options in documentation are not valid for MozNSS (#684810)
  - fix: NSS_Init* functions are not thread safe (#731168)
  - manpage fix: errors in manual page slapo-unique (#723521) 
  - new feature: honor priority/weight with ldap_domain2hostlist (#730311)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-20
changelog:
  - new feature update: honor priority/weight with ldap_domain2hostlist (#730311)
  - fix regression: openldap built without tcp_wrappers (#742592)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-21
changelog:
  - fix: ldapsearch crashes with invalid parameters (#743781)
  - fix: replication (syncrepl) with TLS causes segfault (#783445)
  - fix: openldap server in MirrorMode sometimes fails to resync via syncrepl (#784211)
  - use portreserve to reserve LDAPS port (636/tcp+udp) (#790687)
  - fix: missing options in manual pages of client tools (#745470)
  - fix: SASL_NOCANON option missing in ldap.conf manual page (#732916)
  - fix: slapd segfaults when certificate key cannot be loaded (#796808)
  - Jan Synáček <jsynacek@redhat.com>
    + fix: overlay constraint with count option work bad with modify operation (#742163)
    + fix: Default SSL certificate bundle is not found by openldap library (#742023)
    + fix: Duplicate close() calls in OpenLDAP (#784203)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-23
changelog:
  - security fix: CVE-2012-1164: assertion failure by processing search queries
    requesting only attributes for particular entry (#813162)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-24
changelog:
  - fix update: Default SSL certificate bundle is not found by openldap library (#742023)
  - fix: memberof overlay on the frontend database causes server segfault (#730745)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-26
changelog:
  - fix: MozNSS CA cert dir does not work together with PEM CA cert file (#818844)
  - fix: memory leak: def_urlpre is not freed (#816168)
  - fix update: Default SSL certificate bundle is not found by openldap library (#742023)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-28
changelog:
  - CVE-2012-2668 (#825875)
    + cipher suite selection by name can be ignored
    + default cipher suite is always selected


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-29
changelog:
  - fix: invalid order of TLS shutdown operations (#818572)
  - fix: TLS error messages overwriting in tlsm_verify_cert() (#828787)
  - fix: reading pin from file can make all TLS connections hang (#829319)
  - fix: replication with TLS does not work (#707599)
  - fix: some TLS ciphers cannot be enabled (#852339)
  - fix: connection hangs after fallback to second server when certificate hostname verification fails (#843056)
  - fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#811468)
  - fix: MozNSS certificate database in SQL format cannot be used (#857390)
  - fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#859858)
  - fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#835012)
  - fix: modification of olcSyncrepl attribute takes server out of MirrorMode (#821848)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-1
changelog:
  - rebase to 2.4.39 (#923680)
    + drop a lot of upstreamed patches, backport the rest
    + compile in mdb
    + remove automatic slapd.conf -> slapd-config conversion


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-3
changelog:
  - add another missing patch forgotten during the rebase
  - fix: enable dynamic linking - unresolved symbols in the smbk5pwd module


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-10
changelog:
  - revert previous patch (#1172296)
  - fix: crash in ldap_domain2hostlist when processing SRV record (#1164369)
  - support TLS 1.1 and later (#1160467)
  - enhancement: add ppolicy-check-password (#1155390)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-7
changelog:
  - fix: regression: deadlock during SSL_ForceHandshake when getting connection to replica (#1267501)
    + apply (and modify a little) the patch from commit 1eeaeeb7


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1
changelog:
  - new version 2.3.2 with upstream bug fixes: #1212, #1277, #1473, #1476
  - spec file cleanup
  - make build work with libtool
  - all man pages are utf-8, no need to convert them anymore
  - enabled EditRes support with upstream fix
  - fixed parallel build
  - fixed patches for fuzz 0
    Related: rhbz#543948


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1.1
changelog:
  - fixes according to review:
  - fixed buildroot
  - removed dot from summary
  - removed dist tag from changelog
  - added source download link


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-2
changelog:
  - fixed LabelGadget draws background over border of its parent (rhbz#584300)
    (MotifZone bug #1517)
  - fixed LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-4
changelog:
  - fixed Label draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521 refixed)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-5
changelog:
  - fixed border at insertion cursor if XmNmarginWidth is set (rhbz#796014)
    (MotifZone bug #1552)
  - fixed use after free with comboboxes and XIM (rhbz#836892)
    (MotifZone bug #1559)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-7.1
changelog:
  - added lost patch for #647411: openmotif-2.3.3-motifzone_1529.patch
    (rhbz#1096754)
  - fixed missing outline in mwm while moving window (rhbz#1096749)
    (copy of rhbz#997241)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-7.1
changelog:
  - added lost patch for #647411: openmotif-2.3.3-motifzone_1529.patch
    (rhbz#1096315)
  - fixed missing outline in mwm while moving window (rhbz#1000343)
    (copy of rhbz#997241)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-8
changelog:
  - fixed Label size computed wrong within a Form (rhbz#869782) (rhbz#953938)
    (copy of rhbz#980577)
    (MotifZone bug #1612 final upstream patch with white space changes)
  - fixed segmentation violation in XmList after calling XmListDeleteAllItems 
    and clicking on a new item with left-shift left-button click (rhbz#1058644)
    (MotifZone bug #1636)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-11
changelog:
  - fixed mrm initialization error in MrmOpenHierarchyPerDisplay (#167094)
    Thanks to Arjan van de Ven for the patch.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-16
changelog:
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Upgrade to new upstream version
    This disables openib-ibcm, which is broken in 1.5.3
    This brings in esmtp and valgrind memchecker support from Fedora
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> - 1.5.3-1
changelog:
  - Conditionalize the psm and psm-devel subpackages, to keep rpmbuild
    from trying to build them on ppc
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> - 1.5.3-2
changelog:
  - Fix the rpm macros for the -psm subpackage, so we can build
    a -psm varient of mpitests
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.5.4-1
changelog:
  - Clean up provides and requires to close
    Resolves: rhbz768457
  - Remove and obsolete the -psm variants that have been folded into the main
    packages.
    Resolves: rhbz758618
  - New upstream version
    Resolves: rhbz768109
    Related: rhbz739138


author: Jay Fenlason <fenlason@redhat.com> 1.5.4-2
changelog:
  - Fix the build process by getting rid of the -build patch
    and autogen to fix
    Resolves: rhbz749115


author: Michal Schmidt <mschmidt@redhat.com> 1.10.1-1
changelog:
  - Update to 1.10.1.
  - Backport additional fixes from Fedora.
    - Fortran module install (bug #1154982)
    - Add upstream patch to fix zero size message
    Resolves: rhbz1130442, rhbz1142168


author: Michal Schmidt <mschmidt@redhat.com> 1.10.2-1
changelog:
  - Update to 1.10.2.
  - Use versioned directory and module names "openmpi-1.10",
    "openmpi-1.10-$arch".
    The unversioned names remain with openmpi-1.8 (built from compat-openmpi).
  - Related: rhbz1130442


author: Michal Schmidt <mschmidt@redhat.com> 1.10.2-2
changelog:
  - Name the binary package "openmpi-1.10". The provide name "openmpi"
    remains to openmpi-1.8 for maximum compatibility with RHEL 6.7.
  - Related: rhbz1130442


author: Michal Schmidt <mschmidt@redhat.com> 1.4.3-2
changelog:
  - Split into subpackages per OpenMPI version (compat-openmpi14,
    compat-openmpi15)
  - Add compat-openmpi18.
  - Resolves: rhbz1158864, rhbz1142157


author: Michal Schmidt <mschmidt@redhat.com> 1.4.3-5
changelog:
  - Rename compat-openmpiXY to openmpi-X.Y. Package names, directories,
    modulefiles.
  - Ship multiple openmpi versions:
    - openmpi-1.4   (compat with RHEL 6.0, 6.1)
    - openmpi-1.5.3 (compat with RHEL 6.2)
    - openmpi-1.5.4 (compat with RHEL 6.3, 6.4, 6.5)
    - openmpi-1.8   (compat with RHEL 6.6, 6.7)
  - Avoid breakage in transition from the compat-openmpi package from RHEL 6.7
    (was versioned as 1.4.3, but was in fact a chimera of 1.4.3 and 1.5.3,
     where really only 1.5.3 had any chance of working) by keeping the
    "compat-openmpi", "compat-openmpi-$arch" directory and module names
    for openmpi-1.5.3.
  - openmpi-1.8 keeps the module and directory unversioned names "openmpi",
    "openmpi-$arch" it had in RHEL 6.7.
  - Related: rhbz1158864


author: Jay Fenlason <fenlason@redhat.com> - 1.4.1-4
changelog:
  - Update to fix licencing and packaging issues:
    Use the system plpa and ltdl librarires rather than the ones in the tarball
    Remove licence incompatible files from the tarball.
  - update module.in to prepend-path		PYTHONPATH


author: Jay Fenlason <fenlason@redhat.com> - 1.4.1-4.2
changelog:
  - BuildRequire the infinipath-psm package to pull in support
    for it on x86_64.
    Related: rhbz570274


author: Jay Fenlason <fenlason@redhat.com> - 1.4.1-4.3
changelog:
  - Split the psm support packages into their own rpms to close
    Resolves: rhbz616575 openmpi does not work with non-infinipath hardware


author: Doug Ledford <dledford@redhat.com> - 1.4-3
changelog:
  - Fix pkgconfig file substitution
  - Bump version so we are later than the equivalent version from Red Hat
    Enterprise Linux


author: Jay Fenlason <fenlason@redhat.com> - 1.4.1-1
changelog:
  - New upstream version, which includes the changeset_r22324 patch.
  - Correct a typo in the Source0 line in this spec file.


author: Stef Walter <stefw@redhat.com> - 0.13.0-4
changelog:
  - Use the standard name format for p11-kit module configs
  - Put the p11-kit module config is the system location


author: Jakub Jelen <jjelen@redhat.com> - 0.17.0-6
changelog:
  - New upstream release including support for Coolkey and CAC cards
  - Allow functionality of a new Estonia ID cards (#1519751)
  - PIV: Use Cardholder name in the token label
  - Avoid infinite loop when reading CAC cards
  - Properly parse multi-byte length in SimpleTLV
  - Support CAC Alt tokens
  - Add PKCS#11 library to the NSS DB (#1421692)


author: Šimon Lukašík <slukasik@redhat.com> - 1.2.7-1
changelog:
  - upgrade to the latest upstream release (#1259037)
  - Introduced '--verbose' mode (#1287295)
  - Detailed OVAL results present in HTML report (#1140240)
  - fixed issues in scap-as-rpm tool (#1226398, #1258958)
  - introduced support for non-decimal OVAL vetsions (#1248378)
  - 'oscap oval eval --report' command (#1258958)
  - 'oscap xccdf generate --profile <custom-profile> guide' (#1139822)


author: Watson Sato <wsato@redhat.com> - 1.2.11-1
changelog:
  - Upgrade to the latest upstream release
  - NIST certified OpenSCAP (#1364207)
  - Huge speed-up of generating HTML reports and guides
  - Support remote datastream components
  - Support tailoring of external datastreams
  - New option generating OVAL results without system characteristics
  - Support for extracting Ansible playbooks
  - Enabled fetching remote resources in OVAL module
  - Support --benchmark-id when running `oscap xccdf generate guide`
  - Enabled offline scanning in many probes
  - Added and updated various CPEs
  - Fixed manual page for oscap-ssh (#1299969)


author: Martin Preisler <mpreisle@redhat.com> - 1.2.12-1
changelog:
  - Upgrade to the latest upstream release
  - improved HTML report by referencing links
  - fixed validity errors in ARF files
  - fixed CVE parsing
  - fixed injecting xccdf:check-content-ref references in ARF results
  - fixed oscap-docker incompliance reporting (#1387248)
  - fixed oscap-docker man page (#1387166)


author: Adam Goode <adam@spicenitz.org> - 3.2.5-1
changelog:
  - New upstream release
     + Support for MIRAX 1.03 files
     + openslide_read_region now works for large dimensions
     + quickhash-1 is disabled for unusual TIFFs where it is very slow


author: Adam Goode <adam@spicenitz.org> - 3.2.6-1
changelog:
  - New upstream release
     + Support for downsampled MIRAX files
     + Improved MIRAX performance and bugfixes
     + Fix for openslide_read_region with large dimensions


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.0.0-4
changelog:
  - Fix a heap-based buffer overflow vulnerability leading to
    remote code execution, CVE-2019-5544
    Resolves: #1788447


author: Doug Ledford <dledford@redhat.com> - 3.3.5-1
changelog:
  - Update to latest upstream release.  We need various defines in ib_types.h
    for the latest ibutils package to build properly, and the latest ibutils
    package is needed because we found licensing problems in the older
    tarballs during review.


author: Doug Ledford <dledford@redhat.com> - 3.3.9-1
changelog:
  - Update to latest upstream version (3.3.5 -> 3.3.9)
  - Add /etc/sysconfig/opensm for use by opensm init script
  - Enable the ability to start more than one instance of opensm for multiple
    fabric support
  - Enable the ability to start opensm with a priority other than default for
    support of backup opensm instances
  - Related: bz725016
  - Resolves: bz633392


author: Doug Ledford <dledford@redhat.com> - 3.3.12-1
changelog:
  - Generate the opensm.conf file instead of shipping a static one as a source
  - Update to latest upstream release (FDR link speed support)
  - Resolves: bz750609


author: Doug Ledford <dledford@redhat.com> - 3.3.13-1
changelog:
  - Update to latest upstream release
  - Add patch to support specifying subnet_prefix on command lien
  - Update init script to pass unique subnet_prefix's when using the GUID
    method of starting multiple instances
  - Fix up LSB init script headers
  - Resolves: bz754196


author: Doug Ledford <dledford@redhat.com> - 3.3.15-1
changelog:
  - Update to latest upstream source (adds more SRIOV support)
  - Fix init script when no config files are present
  - Related: bz756396


author: Tim Waugh <twaugh@redhat.com> 1.5.2-4
changelog:
  - Fixed build root.
  - Give IDs to nodes in the release notes source to prevent releasenotes.html
    having multilib conflicts (bug #228320).


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-113
changelog:
  - Fix segfaulting agent during removal of CAC credentials (#1253612)
  - Make  pam_namespace  usage consistent across system-wide (#1250069)
  - Add GSSAPIKexAlgorithms option for both server and client (#1253060)
  - ECDSA host key not loaded by sshd by default (fix man page) (#1218070)
  - Resolve segfault in pam_ssh_agent_auth in FIPS mode (#1278315)
  - Backport Match LocalAddress from OpenSSH 6.1 (#1211673)
  - Backport security patches from openssh-6.9 and 7.0 (#1281468)
  -  CVE-2015-5352: XSECURITY restrictions bypass under certain conditions
  -  CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices
  -  CVE-2015-6563: Privilege separation weakness related to PAM support
  -  CVE-2015-6564: Use-after-free bug related to PAM support
  -  weakness of agent locking (ssh-add -x) to password guessing (#1238238)
  - Clarify a keyword that appears in multiple matching Match blocks (#1219820)
  - Clarity of TERM variable in AcceptEnv and SendEnv options (#1285003)
  - Enhance AllowGroups documentation in man page (#1284997)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-114
changelog:
  - pam_ssh_agent_auth: Provide authorized_keys_command= feature (#1299555)
  - CVE-2016-1908: Prevent possible fallback from untrusted X11 forwarding (#1299048)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-116
changelog:
  - Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
  - Initialize devices_done variable for challenge response (#1281468)
  - Update behaviour of X11 forwarding to match upstream (#1299048)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-119
changelog:
  - Resolve sftp force permission colision with umask (#1341747)
  - Relax bits needed check to allow hmac-sha2-512 with gss-group1-sha1- (#1353359)
  - close ControlPersist background process stderr when not in debug mode (#1335539)
  - Do not add a message "The agent has no identities." in ~/.ssh/authorized_keys (#1353410)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-120
changelog:
  - Prevent infinite loop when Ctrl+Z pressed at password prompt (#1218424)
  - Remove RC4 cipher and MD5 based MAC from the default client proposal (#1373836)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-122
changelog:
  - Allow to use ibmca crypto hardware (#1397547)
  - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)


author: Daniil Leonov <dleonov@cloudlinux.com> - 5.3p1-125
changelog:
  - Fix for CVE-2016-10012: The shared memory manager used by pre-authentication
  - compression support had a bounds checks that could be elided by some optimising compilers


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.3p1-125.tuxcare.els1
changelog:
  - CVE-2016-10009: add whitelist of paths which may ssh-agent load from
    in order to prevent execution of arbitrary local pkcs#11


author: Dmitry Antipov <dantipov@cloudlinux.com> - 5.3p1-125.tuxcare.els2
changelog:
  - CVE-2016-10708: fix crash in packet handling code by moving inbound NEWKEYS
    handling to kex layer
  - CVE-2016-10012: abandon the fix due to compression mode issues


author: Dmitry Antipov <dantipov@cloudlinux.com> - 5.3p1-125.tuxcare.els3
changelog:
  - CVE-2016-10012: re-remove pre-authentication compression and potentially
    unsecure shared memory manager used by zlib
  - Move not yet valid timestamps for certs to 2030-2040 range, make sure all
    tests are passed and add %check
  unset DISPLAY
   section


author: Dmitry Antipov <dantipov@cloudlinux.com> - 5.3p1-125.tuxcare.els4
changelog:
  - CVE-2019-6109: verify character encoding in progress display to avoid
    spoofing of scp client output
  - CVE-2016-10012: updated to fix server-side protocol errors observed
    during rekeying with compression enabled


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48
changelog:
  - fix CVE-2016-0702 - side channel attack on modular exponentiation
  - fix CVE-2016-0705 - double-free in DSA private key parsing
  - fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-49
changelog:
  - fix CVE-2016-2105 - possible overflow in base64 encoding
  - fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
  - fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
  - fix CVE-2016-2108 - memory corruption in ASN.1 encoder
  - fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
  - fix CVE-2016-0799 - memory issues in BIO_printf


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-50
changelog:
  - fix CVE-2016-2177 - possible integer overflow
  - fix CVE-2016-2178 - non-constant time DSA operations
  - fix CVE-2016-2179 - further DoS issues in DTLS
  - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
  - fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
  - fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
  - fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
  - fix CVE-2016-6304 - unbound memory growth with OCSP status request
  - fix CVE-2016-6306 - certificate message OOB reads
  - mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
    112 bit effective strength
  - replace expired testing certificates


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-52
changelog:
  - deprecate and disable verification of insecure hash algorithms
  - disallow DH keys with less than 1024 bits in TLS client
  - remove support for weak and export ciphersuites
  - use correct digest when exporting keying material in TLS1.2 (#1376741)


author: Nikita Ivanov <nivanov@cloudlinux.com> 1.0.1e-62
changelog:
  - fix CVE-2021-3712 - handling ASN.1 string as NULL
    terminated leads to read buffer overrun
  - Port patches from oracle6els branch, original changelog entry:
  - Oracle bug 28730228: backport CVE-2018-0732
  - Oracle bug 28758493: backport CVE-2018-0737
  - Merge upstream patch to fix CVE-2018-0739 
  - Avoid out-of-bounds read. Fixes CVE 2017-3735. By Rich Salz
  - sha256 is used for the RSA pairwise consistency test instead of sha1


author: Pavel Mayorov <pmayorov@cloudlinux.com> 1.0.1e-63.tuxcare.els7
changelog:
  - CVE-2022-1292: c_rehash: Do not use shell to invoke openssl to prevent
    command injection
  - CVE-2022-2068: c_rehash: Fix file operations to prevent command injection


author: Pavel Mayorov <pmayorov@cloudlinux.com> 1.0.1e-63.tuxcare.els8
changelog:
  - CVE-2023-0215: Fix a UAF resulting from a bug in BIO_new_NDEF
  - CVE-2023-0286: Fix GENERAL_NAME_cmp for x400Address


author: Dmitry Antipov <dantipov@cloudlinux.com> 1.0.1e-63.tuxcare.els9
changelog:
  - CVE-2023-0464: Fix excessive resource use verifying X.509 policy constraints
  - CVE-2023-0466: Fix documentation of X509_VERIFY_PARAM_add0_policy()
  - CVE-2022-3996: Drop redundant flag setting in policy_cache_set_mapping()


author: Dmitriy Popov <dpopov@cloudlinux.com> - 1.0.1e-63.tuxcare.els10
changelog:
  - CVE-2023-2650: Restrict the size of OBJECT IDENTIFIERs that OBJ_obj2txt will
    translate
  - Update expired smime/SM2 certificates that affect tests.


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-8
changelog:
  - support multiple CRLs with same subject in a store (#457134)
  - fix CVE-2009-0590 - reject incorrectly encoded ASN.1 strings (#492304)
  - seed FIPS rng directly from kernel random device
  - do not require fipscheck to build the package (#475798)
  - call pairwise key tests in FIPS mode only (#479817)
  - do not crash when parsing bad mime data (#472440)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-13
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-14
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-15
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-20.1
changelog:
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server
  - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
  - disable SSLv2 in the generic TLS method


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-21
changelog:
  - Resolves: rhbz#975550 ikev2 md5 hash results in incorrect policy
  - Resolves: rhbz#985596 openswan does not allow SHA2 auth algorithms under FIPS mode 
  - Resolves: rhbz#881914 openswan doesn't support SHA2 certificates
  - Resolves: rhbz#954249 barf and look should not cause loading of kernel modules
  - Resolves: rhbz#954249 barf and look should not cause loading of kernel modules
  - Resolves: rhbz#960235 CVE-2013-2053: remote buffer overflow in atodn()
  - Resolves: rhbz#963833 Abort pluto on crypto failure to prevent plaintext / nonce leak
  - Resolves: rhbz#771612 ipsec barf should not grep sparse file
  - Resolves: rhbz#841325 leftmodecfgclient=no causes rekey failure [Avesh]
  - Resolves: rhbz#848132 dpdaction=restart can cause full phase1 timeout after DPD [Avesh]
  - Resolves: rhbz#880004 Backported libreswan IKE fragmentation support 
  - Resolves: rhbz#908476 Backported libreswan INITIAL-CONTACT Notify support
  - Resolves: rhbz#796683 Backported libreswan USERCOMPILE with -fno-strict-aliasing
  - Resolves: rhbz#959568 Backported libreswan nat_keepalive=yes|no (default yes) option
  - Resolves: rhbz#916743 Backported libreswan control transmission delay timing
  - Resolves: rhbz#959566 Backported libreswan ikeping compile warnings
  - Resolves: rhbz#957400 Openswan did not load aesni_intel kernel module
  - Resolves: rhbz#960171 Initial loading of CRL always fails on pluto startup [Matt Rogers]
  - Resolves: rhbz#958969 Crl signature verification failure in when input signature is stripped of all leading zeros
  - Resolves: rhbz#868986 Fix for RDN values containing a comma [Matt Rogers]
  - Resolves: rhbz#747966 Missing else keyword


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-23
changelog:
  - Resolves: rhbz#998587 underspecific build requires (of nss)
  - Resolves: rhbz#1002312 IKEv2 skeyseed calculation only succeeds because of unspecified compiler behaviour
  - Resolves: rhbz#1002633 openswan needs -fips subpackage that would provide the FIPS hmac files


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-27.3
changelog:
  - Resolves: rhbz#1089395 pluto doesn't bring up sourceip route when peer restarts
  - Resolves: rhbz#1090273 openswan breaks NAT-T draft clients
  - Resolves: rhbz#1090614 pluto cannot write to directories not owned by root


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-31
changelog:
  - Resolves: rhbz#1088656 pluto doesn't bring up sourceip route when peer restarts
  - Resolves: rhbz#1070356 openswan breaks NAT-T draft clients
  - Resolves: rhbz#1041576 (pluto cannot write to directories not owned by root)
  - Resolves: rhbz#1025687 service ipsec stop shows errors about unloading used modules
  - Resolves: rhbz#1092913 The default nss database created by ipsec can not be used
  - Resolves: rhbz#1105179 ipsec_auto --ready doesn't work properly
  - Resolves: rhbz#1002708 rightid=%fromcert does not use the ID from the offered peer certificate
  - Resolves: rhbz#908478  Openswan is sending DPD and/or NAT-T keep alive messages when the IPsec SA is active
  - Resolves: rhbz#970349  ikev2 pending SA and rekey issues
  - Resolves: rhbz#970279  ikev2=insist allows an ikev1 proposal when acting as responder
  - Resolves: rhbz#988106  strict checking of phase2alg= parameters allows mismatched policy
  - Resolves: rhbz#1019746 ipsec ikeping does not recognize --exchangenum parameter
  - Resolves: rhbz#1018327 ipsec.conf man page lacks example for AES-GCM configuration
  - Resolves: rhbz#730975  Openswan doesn't work with ike=modp1536 option
  - Resolves: rhbz#1021961 pluto abort when using SHA2_{384,512} IKE encryption algorithm
  - Resolves: rhbz#739949  Openswan net-to-net not work with unencrypted connection on specific port
  - Resolves: rhbz#993124  ikev2 delete payloads are not delivered to peer
  - Resolves: rhbz#834397  ikev2 crashes when firing up a few conns at once
  - Resolves: rhbz#1099871  Missing man-page ipsec_whack


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-32
changelog:
  - Resolves: rhbz#1092913 create nss db before startup if not there
  - Resolves: rhbz#1098473 ipsec newhostkey returns 0 even if it fails (and enforce min 2192 RSA key size)
  - Resolves: rhbz#1114683 configuring a non-standard ESP algorithm (like CAST) cause a restart of pluto
  - Resolves: rhbz#1126066 dcookie code enabled with force_busy=yes uses bad pointer causing restart


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-35
changelog:
  - Resolves: rhbz#1114683 configuring a non-standard AH / ESP algorithm [updated]
  - Resolves: rhbz#993124 ikev2 delete - work around to unbreak -fstack-protector [updated]


author: Daniel Mach <dmach@redhat.com> - 0.9.9-5
changelog:
  - Update Intel Haswell events.
  - Add support for Intel Silvermont (Avoton).
  - Add support for Intel Broadwell.
  - Add support for aarch64.
  - Update IBM power8 events.


author: William Cohen <wcohen@redhat.com> - 0.9.9-12
changelog:
  - Add support for Intel Xeon D. rhbz1231399
  - Add support for Intel Skylake Mobile/Desktop processors. rhbz1254764
  - Fix coverity warnings. rhbz1206242


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.9.3-1
changelog:
  - New upstream release
  - Fixes the folowing bugzilla.redhat.com tickets:
  - 563355 error in tuna --help output
  - 574950 cannot use cpu ranges in the tuna GUI
  - 559770 tuna backtrace when moving threads
  - 563352 tuna backtrace when no thread list is given for --priority
  - 563350 tuna backtrace when scheduler is mis-typed.


author: John Kacur <jkacur@redhat.com> - 0.10.4-4
changelog:
  - Rebuilt for rhel6.6
  - spec: Explicitly use separate patches for non-upstream changes
  - Resolves: rhbz#1029591


author: John Kacur <jkacur@redhat.com> - 0.10.4-5
changelog:
  - CLI: fix traceback where enter -p policy without prio (1035795)
  - tuna-cmd: New command line params for tuning profiles
  - Resolves: rhbz#1059685
  - Resolves: rhbz#1035795


author: John Kacur <jkacur@redhat.com> - 0.10.4-9
changelog:
  - There is still an import of tuna, but the version is unimportant
  - Readd the requires without the version release dependency.
  - Resolves: rhbz#914366


author: John Kacur <jkacur@redhat.com> - 0.12-1
changelog:
  - Update to tuna-0.12, and drop patches that are included in this update.
  - Correct a typo in the net.ipv4.ipfrag_time help string
  - Fix behavior for dot inside /proc/sys/ path
  - CLI: Do not show column headers when not outputting to a tty:
  - tuna: Fix race in is_hardirq_handler
  - tuna: Decide whether to isolate a thread based on PF_NO_SETAFFINITY
  - tuna: Make --isolate/--include operations affect /proc/irq/default_smp_affinity
  - tuna config: Fix pygtk import
  - CLI: Introduce --nohz_full/-N entity
  - Resolves: rhbz#1255727


author: John Kacur <jkacur@redhat.com> - 0.12-2
changelog:
  - A few minor fixes to the man page
  - Add a BuildRequires of the desktop-file-utils
  - print an error msg when sched_setaffinity returns EINVAL
  - specfile changes to ensure all the config files are properly installed
  - Resolves: rhbz#1291811


author: Matthew Harmsen <mharmsen@redhat.com> 1.3.0-2
changelog:
  - Bugzilla Bug #521983 -  New package for Dogtag PKI: osutil
  - Complied with Fedora JNI packaging logic


author: Matthew Harmsen <mharmsen@redhat.com> 1.3.0-3
changelog:
  - Bugzilla Bug #521983 -  New package for Dogtag PKI: osutil
  - Removed LICENSE logic from installation section
  - Take ownership of library directory


author: Matthew Harmsen <mharmsen@redhat.com> 2.0.1-1
changelog:
  - Removed version information from NSPR and NSS build/runtime requires
  - Bugzilla Bug #638377 - Generate PKI UI components which exclude
    a GUI interface
  - Bugzilla Bug #643206 - New CMake based build system for Dogtag
  - Bugzilla Bug #644056 - CS build contains warnings
  - Bugzilla Bug #667556 - Consolidate 'osutil' SVN source code with
    'osutil' GIT source code


author: Alan Pevec <apevec@redhat.com> 1.9.3-18
changelog:
  - Include usbutils and lsscsi packages rhbz#642518
  - update udev calls for new options rhbz#644341
  - clean up dependencies for libguestfs-winsupport rhbz#641494
  - Improved RHEV-H User Interface fixes rhbz#614460 rhbz#676747 rhbz#676775 rhbz#676786 rhbz#677207 rhbz#634797 rhbz#676749 rhbz#676987 rhbz#677543 rhbz#629884 rhbz#632095 rhbz#679013


author: Mike Burns <mburns@redhat.com> 1.9.3-19
changelog:
  - unblacklist utf8 locale rhbz#676105
  - support lsb_release -r rhbz#676108
  - Generalize fstype checks to any ext fs rhbz#676112
  - Fix installer issues with unmounting/mounting of logging services rhbz#680421
  - Fix firstboot menu appearing after installation rhbz#679655
  - RHEV-H UI fixes rhbz#679428 rhbz#636366


author: Mike Burns <mburns@redhat.com> 1.9.3-20
changelog:
  - Include rhevm configuration plugin rhbz#682162
  - Boot failed on cciss storage rhbz#681164
  - Re-install failed to cleanup 5.x installations rhbz#676988
  - dhcp was getting the incorrect gateway address rhbz#676775
  - serial console not operating correctly rhbz#676969
  - SSH configuration not persisted correctly rhbz#681100
  - Include uninstall functionality rhbz#632491 rhbz#626662
  - Autoinstall continues even if image installation fails rhbz#681938
  - Autoinstall intermittently fails on multipath devices rhbz#682005
  - RHEV-H UI fixes rhbz#683331 rhbz#682107 rhbz#681735 rhbz#681131 rhbz#681130 rhbz#634795 rhbz#676066 rhbz#667885 rhbz#631629


author: Mike Burns <mburns@redhat.com> 1.9.3-21
changelog:
  - Include rhevm configuration plugin rhbz#682162
  - Include plugin for RHEV-M registration  rhbz#625083 rhbz#682162
  - Include plugin for RHN registration  rhbz#676006
  - Only allow logged in user to unlock screen rhbz#675248
  - Use multipath for all devices rhbz#676255
  - Fix serial console access rhbz#676969
  - fix ovirt.log generation rhbz#681128
  - Unblock ipv6 dhcp responses rhbz#683354
  - Persist Enable Password Authentication ssh option rhbz#685102
  - Fix network page reset button rhbz#688851
  - Remove duplicate crashkernel option from commandline rhbz#685130
  - Don't allow major version upgrades through the installer rhbz#681128
  - Blank nic gateway if not a valid IP address rhbz#688849


author: Mike Burns <mburns@redhat.com> 1.9.3-22
changelog:
  - Replace shutil.copy with a system call rhbz#683864
  - Fix detection of syslinux/isolinux rhbz#689834
  - Don't allow network changes if registered to RHEVM rhbz#675874
  - fix cciss installation issues rhbz#681164
  - Update weak password warning message rhbz#682924
  - Expand ipv6 fields to 25 chars and fix validation rhbz#681146
  - Add dracut plugin for disk cleanup rhbz#688168
  - return true if ovirt_store_config succeeds rhbz#690677


author: Mike Burns <mburns@redhat.com> 1.9.3-23.2
changelog:
  - Enable vlan config processing rhbz#681168
  - Remove confirm password dialog from RHN setup rhbz#690673
  - Cleanup installation kargs rhbz#640782
  - Update crashkernel parameter rhbz#654565
  - Fix installs to /dev/mapper devices rhbz#676255
  - Fix prompt for input in dracut when cleaning old disks rhbz#692072


author: Mike Burns <mburns@redhat.com> 1.9.3-24
changelog:
  - Fix name in plymouth progress bar rhbz#676784
  - Fix ipv6 dhcp iprules entries rhbz#683354
  - Fix cciss installation errors rhbz#681164
  - Cleanup catching of failures in autoinstall rhbz#681938
  - Support storage_init=<bus> in dracut plugin rhbz#691891
  - Blacklist restorecond.desktop rhbz#679367
  - Cleanup startup errors rhbz#675868
  - Set admin password during autoinstall rhbz#681934
  - Fix hostvg_init storage disks rhbz#681164
  - Allow firstboot to run unconfined rhbz#647756
  - enable en_US.UTF-8 locale in new UI rhbz#675823


author: Mike Burns <mburns@redhat.com> 1.9.3-25
changelog:
  - Enable ESC for aborting ISO media check rhbz#683330
  - Fix ipv6 network configuration files rhbz#690792
  - Add more debug logging for installation failures rhbz#694644
  - Return true when persisting config files rhbz#690677
  - Fix parted Root partition size rhbz#690762
  - Block major version upgrades rhbz#588267
  - Fix name in grub.conf rhbz#677534
  - Fix dracut prompt during cleanup rhbz#692072


author: Mike Burns <mburns@redhat.com> 1.9.3-26.2
changelog:
  - Fix looping in storage_init parsing rhbz#691891
  - Prevent race by making /dev/disk/by-labels on install rhbz#696566
  - Manually recreate /dev/mapper entries for partitions rhbz#696566
  - Save default grub entries after successful reboot rhbz#696566
  - Wipe disk after cleaning lvm info rhbz#626662
  - Fix yum.Errors import error for RHN registration rhbz#696439
  - Fix SELinux context for /boot-kdump rhbz#654565
  - Fix kdump startup rhbz#654565
  - Fix static networking bridge configuration rhbz#696512
  - Correct certificate paths in vdsm.conf config rhbz#625083
  - autoinstall/in-place upgrade breaks serial rhbz#696566


author: Mike Burns <mburns@redhat.com> 1.9.3-27.1
changelog:
  - Remove LANG=C and LC_ALL from /etc/profile rhbz#675823
  - Move uninstall wipe of mbr to ovirt-early rhbz#626662
  - Fix encrypted swap setup and parsing rhbz#633587
  - Fix parsing for AppVG autoinstall rhbz#633583
  - Fix grub installation to usb drives rhbz#699602


author: Mike Burns <mburns@redhat.com> 1.9.3-28.1
changelog:
  - Fix encrypting of Swap2 rhbz#633587
  - Fix grub device map for various usr/devmapper types rhbz#699602


author: Stef Walter <stefw@redhat.com> - 0.18.0-1
changelog:
  - Update to new upstream stable release
  - Various logging tweaks (#928914, #928750)
  - Make the 'p11-kit extract-trust' explicitly reject
    additional arguments


author: Stef Walter <stefw@redhat.com> - 0.18.3-1
changelog:
  - Update to new upstream stable release
  - Fix intermittent firefox cert validation issues (#960230)
  - Include the manual pages in the package


author: Stef Walter <stefw@redhat.com> - 0.18.3-2
changelog:
  - Don't install libnssckbi.so alternatives in the package.
    On RHEL 6 this is done by the update-ca-trust script.


author: Stef Walter <stefw@redhat.com> - 0.18.4-1
changelog:
  - Remove alternative on package removal
  - Update to 0.18.4 with minor p11-kit command fixes
  - Fix arguments to extract-trust p11-kit command


author: Stef Walter <stefw@redhat.com> - 0.18.4-2
changelog:
  - Fix inconsistency issues when multilib packages are installed
  - Add 'p11-kit redhat-setup-trust status' command


author: Stef Walter <stefw@redhat.com> - 0.18.5-1
changelog:
  - Update to new upstream point release
  - Use freebl for hash algorithms (#983384)
  - Don't load configs in home dir when setuid or setgid (#985816)
  - Use $TMPDIR instead of $TEMP while testing (#985017)
  - Use $XDG_DATA_HOME for user pkcs11 module configuration
  - Open files and fds with O_CLOEXEC (#984986)
  - Abort initialization if critical module fails to load (#985023)
  - Don't use thread-unsafe: strerror, getpwuid (#985481)
  - Fix p11_kit_space_strlen() result when empty string (#985416)


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-7
changelog:
  + Fencing: Support agents that need the host to be unfenced at startup
      Resolves: rhbz#996850
    + Fix: crm_report: Collect corosync quorum data
      Resolves: rhbz#989292


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-8
changelog:
  + Fix: mcp: Remove LSB hints that instruct chkconfig to start pacemaker at boot time
      Resolves: rhbz#997346


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-9
changelog:
  + Fix: xml: Location constraints are allowed to specify a role
    + Bug rhbz#902407 - crm_resource: Handle --ban for master/slave resources as advertised
      Resolves: rhbz#902407


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-10
changelog:
  - Remove unsupported resource agent
      Resolves: rhbz#1005678
  - Provide a meaningful error if --master is used for primitives and groups


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-11
changelog:
  + Fix: cman: Do not start pacemaker if cman startup fails
    + Fix: Fencing: Observe pcmk_host_list during automatic unfencing
      Resolves: rhbz#996850


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-12
changelog:
  - Fix: Consistently use 'Slave' as the role for unpromoted master/slave resources
      Resolves: rhbz#1011618
  - Fix: pengine: Location constraints with role=Started should prevent masters from running at all
      Resolves: rhbz#902407
  - Fix: crm_resource: Observe --master modifier for --move
      Resolves: rhbz#902407


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.10-14
changelog:
  - Log: crmd: Supply arguments in the correct order
      Resolves: rhbz#996850
  - Fix: Invalid formatting of log message causes crash
      Resolves: rhbz#996850


author: David Vossel <dvossel@redhat.com> - 1.1.10-14.2
changelog:
  - Fix: lrmd: Correctly cancel monitor actions for lsb/systemd/service resources on cleaning up (cherry picked from commit 1c14b9d69470ff56fd814091867394cd0a1cf61d)
  - Fix: services: Fixes segfault associated with cancelling in-flight recurring operations.
      Resolves: rhbz#1052346


author: David Vossel <dvossel@redhat.com> - 1.1.10-14.3
changelog:
  - Fix: pengine: fixes invalid transition caused by clones with more than 10 instances
      Resolves: rhbz#1087754


author: David Vossel <dvossel@redhat.com> - 1.1.10-15
changelog:
  - Fix: Removes unnecessary newlines in crm_resource -O output
      Resolves: rhbz#1038155
  - Fix: lrmd: Correctly cancel monitor actions for lsb/systemd/service resources on cleaning up (cherry picked from commit 1c14b9d69470ff56fd814091867394cd0a1cf61d)
      Resolves: rhbz#1046131
  - Fix: services: Fixes segfault associated with cancelling in-flight recurring operations.
      Resolves: rhbz#1046131


author: David Vossel <dvossel@redhat.com> - 1.1.10-16
changelog:
  - Fix: pengine: fixes invalid transition caused by clones with more than 10 instances
      Resolves: rhbz#1078954


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-1
changelog:
  - Update to upstream release 1.1.12-rc3
  - The CIB has O(2) better performance and updates are applied with greater reliablity
  - Transient attributes are now recorded in a truely atomic manner
  - Supports fencing agents that need the host to be unfenced at startup
  - CIB ACLs have been reimplemented and are now enabled 
  - Various bugs squashed

  - Resolves: rhbz#1020210 rhbz#1036631 rhbz#1069279
  - Resolves: rhbz#1069795 rhbz#1071995


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.12-2
changelog:
  - Bug rhbz#1054307 - cname pattern match should be more restrictive in init script
      Resolves: rhbz#1054307


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.12-3
changelog:
  - Fix: crmd: avoid double free caused by nested hash table removal
  - Fix: ignore SIGPIPE with gnutls is in use
  - Fix: cib: cl#5222 - Prevent assert in xml_calculate_changes() on performing cib operations
      Resolves: rhbz#1071995


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.5-1
changelog:
  - Fix rpmlint warnings
  - Rebase on new upstream release 
    See included ChangeLog file or http://hg.clusterlabs.org/pacemaker/1.1/file/tip/ChangeLog for details
    + Bugs lf#2445, lf#2493, lf#2508, lf#2518, lf#2527, lf#2544, 
           lf#2545, lf#2550, lf#2551, lf#2554, lf#2558, bnc#665131
  - Resolves: rhbz#676286 - Add per device 'diag' option to pacemaker stonith action


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.5-2
changelog:
  - Fix cman integration
  - Resolves: rhbz#684838 - Correctly notify fenced of a successful fencing event 
  - Resolves: rhbz#684825 - Ensure Pacemaker uses the most recent membership/quorum information


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.5-6
changelog:
  - Update tarball to upstream version: b933cbea41b5
  - Resolves: rhbz#708797
  - Resolves: rhbz#451848
  - Resolves: rhbz#708722 
  - Resolves: rhbz#720136


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.6-1
changelog:
  - Update tarball to upstream version: a02c0f1
    See included ChangeLog file or, for full details:
      https://github.com/ClusterLabs/pacemaker/compare/a12de08...a02c0f1
  - Do not build in support for snmp, esmtp by default
  - Create a package for cluster unaware libraries to minimze our footprint 
    on non-cluster nodes
  - Better subpackage descriptions
  - Resolves: rhbz#743175


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-2
changelog:
  - Do not build on ppc and ppc64.
    Resolves: rhbz#590992
  - Rebase on new upstream release
    + High: ais: Do not count votes from offline nodes and calculate current votes before sending quorum data
    + High: ais: Ensure the list of active processes sent to clients is always up-to-date
    + High: ais: Look for the correct conf variable for turning on file logging
    + High: ais: Use the threadsafe version of getpwnam
    + High: Core: Bug lf#2414 - Prevent use-after-free reported by valgrind when doing xpath based deletions
    + High: Core: fix memory leaks exposed by valgrind
    + High: crmd: Bug 2401 - Improved detection of partially active peers
    + High: crmd: Bug lf#2379 - Ensure the cluster terminates when the PE is not available
    + High: crmd: Bug lf#2414 - Prevent use-after-free of the PE connection after it dies
    + High: crmd: Bug lf#2414 - Prevent use-after-free of the stonith-ng connection
    + High: crmd: Do not allow the target_rc to be misused by resource agents
    + High: crmd: Do not ignore action timeouts based on FSA state
    + High: crmd: Ensure we dont get stuck in S_PENDING if we loose an election to someone that never talks to us again
    + High: crmd: Fix memory leaks exposed by valgrind
    + High: crmd: Remove race condition that could lead to multiple instances of a clone being active on a machine
    + High: crmd: Send erase_status_tag() calls to the local CIB when the DC is fenced, since there is no DC to accept them
    + High: crmd: Use global fencing notifications to prevent secondary fencing operations of the DC
    + High: PE: Bug lf#2317 - Avoid needless restart of primitive depending on a clone
    + High: PE: Bug lf#2361 - Ensure clones observe mandatory ordering constraints if the LHS is unrunnable
    + High: PE: Bug lf#2383 - Combine failcounts for all instances of an anonymous clone on a host
    + High: PE: Bug lf#2384 - Fix intra-set colocation and ordering
    + High: PE: Bug lf#2403 - Enforce mandatory promotion (colocation) constraints
    + High: PE: Bug lf#2412 - Correctly locate clone instances by their prefix
    + High: PE: Don ot be so quick to pull the trigger on nodes that are coming up
    + High: PE: Fix memory leaks exposed by valgrind
    + High: PE: Repair handling of unordered groups in RHS ordering constraints
    + High: PE: Rewrite native_merge_weights() to avoid Fix use-after-free
    + High: Shell: always reload status if working with the cluster (bnc#590035)
    + High: Shell: check timeouts also against the default-action-timeout property
    + High: Shell: Default to using the status section from the live CIB (bnc#592762)
    + High: Shell: edit multiple meta_attributes sets in resource management (lf#2315)
    + High: Shell: enable comments (lf#2221)
    + High: Tools: crm_mon - fix memory leaks exposed by valgrind


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-3
changelog:
  - Resolves: rhbz#590667
  - Rebase on new upstream release
    + High: Core: Bug lf#2401 - Backed out changeset 6e6980376f01


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-5
changelog:
  - Resolves: rhbz#594296 - rpmdiff checks
    + Remove legacy scripts
    + Add missing man pages
    + Fix sub-package version requires


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-6
changelog:
  - Resolves: rhbz#610815 - add cman support
    + High: cib: Also free query result for xpath operations that return more than one hit
    + High: cib: Fix the application of unversioned diffs
    + High: Core: Correctly unpack HA_Messages containing multiple entries with the same name
    + High: Core: Resolve coverity RESOURCE_LEAK defects
    + High: crmd: All nodes should see status updates, not just he DC
    + High: crmd: Allow non-DC nodes to clear failcounts too
    + High: crmd: Base DC election on process relative uptime
    + High: crmd: Make sure the membership cache is accurate after a sucessful fencing operation
    + High: crmd: Make sure we always poke the FSA after a transition to clear any TE_HALT actions
    + High: crmd: Prevent segmentation fault
    + High: PE: Avoid creating invalid ordering constraints for probes that are not needed
    + High: PE: Bug lf#1959 - Fail unmanaged resources should not prevent other services from shutting down
    + High: PE: Bug lf#2422 - Ordering dependencies on partially active groups not observed properly
    + High: PE: Bug lf#2424 - Use notify oepration definition if it exists in the configuration
    + High: PE: Bug lf#2433 - No services should be stopped until probes finish
    + High: PE: Correctly detect when there is a real failcount that expired and needs to be cleared
    + High: PE: Correctly handle pseudo action creation
    + High: PE: Fix colocation for interleaved clones
    + High: PE: Fix colocation with partially active groups
    + High: PE: Fix potential use-after-free defect from coverity
    + High: PE: Fix use-after-free in order_actions() reported by valgrind
    + High: PE: Prevent endless loop when looking for operation definitions in the configuration
    + High: stonith: Correctly parse pcmk_host_list parameters that appear on a single line
    + High: tools: crm_simulate - Resolve coverity USE_AFTER_FREE defect


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-7
changelog:
  - Resolves: rhbz#610815 - add cman support
    + High: ais: Use service slot 10 to avoid conflicting with cman


author: Andrew Beekhof <andrew@beekhof.net> 1.1.4-1
changelog:
  - Resolves: rhbz#668466
  - Update tarball to upstream version: 3ac6ac993d6d
    + Performance improvements for larger clusters
    + Miscellaneous bug fixes


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.5-1
changelog:
  - Fix rpmlint warnings
  - Rebase on new upstream release 
    See included ChangeLog file or http://hg.clusterlabs.org/pacemaker/1.1/file/tip/ChangeLog for details
    + Bugs lf#2445, lf#2493, lf#2508, lf#2518, lf#2527, lf#2544, 
  	 lf#2545, lf#2550, lf#2551, lf#2554, lf#2558, bnc#665131
  - Resolves: rhbz#676286 - Add per device 'diag' option to pacemaker stonith action


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-12
changelog:
  - add character sequence test to pam_cracklib
  - drop unused difignore option from pam_cracklib (#811243)
  - add enforce_for_root option to pam_cracklib (#588893)
  - mention limits.d in the limits.conf(5) manpage (#723297)
  - add ability to lock out inactive accounts to pam_lastlog
  - fix require_selinux option in pam_namespace (#750601)
  - add mntopts flag for tmpfs polyinstantiation method
  - preserve authtok_type in pam_get_authtok() (#811168)
  - fix username mismatch in pam_unix remember feature (#815516)
  - relax restriction of root in pam_pwhistory
  - relax soft nproc limit for root in 90-nproc.conf


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-18
changelog:
  - pam_cracklib: improve documentation (#889233)
  - unbreak authentication if ld.so.preload is not empty
  - correct off by one error in account expiration calculation (#947011)
  - pam_console_apply: do not print error if console.perms.d is empty
  - properly handle all cases where crypt() might return NULL (#1026203)
  - pam_limits: clarify documentation of maxsyslogins limit (#1028490)
  - pam_access: call DNS resolution only when necessary and cache
    results (#1029817)
  - pam_limits: nofile applies to file descriptors not files (#1040664)
  - pam_limits: check whether the utmp login entry is valid (#1054936)
  - correct URLs in spec file (#1071770)
  - pam_userdb: correct the example in man page (#1078779)
  - pam_selinux: canonicalize username for getseuser() (#1083981)
  - pam_access: fix netgroup matching and @user@@netgroup parsing (#740233)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-22
changelog:
  - pam_tally2: added no_lockf_timeout option, do not use it
  - pam_tally2: added debug option
  - pam_tally2: do not create the log file as executable (#1186361)
  - add manpage symlink for environment(5) (#1110258)
  - pam_group: add support for Development/Debug syntax (#1114220)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-23
changelog:
  - pam_succeed_if: properly work with large uids
  - pam_unix: add no_pass_expiry option for ignoring password
    expiration in crond and sshd with public key authentication
  - pam_access: check for (group) match first (#1359303)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.9-1
changelog:
  - add a "multiple_ccaches" option to allow forcing the previous behavior of
    not deleting an old ccache whenever we create a new one, but saving them
    until the call that caused us to create them is reversed, and default the
    setting to being enabled for "su", which needs it


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.10-1
changelog:
  - pull up changes to fine-tune the logic for selecting which key in a keytab
    to use when validating credentials


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.10-2
changelog:
  - replace BuildPreReq: with BuildRequires: (rpmlint)
  - fix inadvertent macro use in changelog (rpmlint)
  - drop the final '.' from the package summary (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-1
changelog:
  - create creds before calling krb5_kuserok() so that they're available when
    it goes to look up the target user's home directory (#563442)
  - collapse multiple levels of debugging into a single debug level (#157107)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-2
changelog:
  - backport fixes to make the libdefaults verify_ap_req_nofail setting control
    what happens when we can't read keytabs, and enable TGT validation by
    default, with "novalidate" as an option which takes a list of services for
    which TGT validation shouldn't be attempted (#622938)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-6
changelog:
  - backport the change to prefer krb5_change_password() over krb5_set_password()
    again from 2.3.12 (#690583)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-7
changelog:
  - don't treat setcred() as session open/close in sshd (#720609, #725797)
  - don't create a new ccache when "external" is enabled, as the calling
    application's already managing one (#690832)
  - always re-read "external" creds when possible, and use an in-memory
    ccache when setting up tokens (more of #690832)
  - during password change, if we got creds during the first pass, don't
    ask for the authtok again (#700520)
  - allow things we do to compensate for transplanting in new self-tests to
    fail if the new tests aren't patched in (#708507)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-8
changelog:
  - in a %{_rawbuild} environment, don't run autoconf, because current
    versions will choke on an unpatched configure.ac (more of #708507)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-9
changelog:
  - refuse to supply non-password information via prompter callback when
    obtaining password-changing credentials (#700520)


author: Nalin Dahyabhai <nalin@redhat.com> 185-1
changelog:
  - split out pam_ldap as a separate source package, update URL, change
    %{version} to reflect pam_ldap's versioning rather than nss_ldap's
  - set config file to /etc/pam_ldap.conf, rootbindpw file /etc/pam_ldap.secret
  - drop %post bits that care about upgrades from RHL 7.2
  - drop %post/%postun calls to ldconfig
  - drop buildrequires on openssl-devel, krb5-devel, cyrus-sasl-devel
  - update to version 185
    - drop now-obsolete patches to the rebind callback
  - add %pre logic for the upgrading-from-a-non-split-nss_ldap case


author: Nalin Dahyabhai <nalin@redhat.com> 185-3
changelog:
  - make mentions of pam_ldap.conf and %{name}.conf more consistent (rcritten)
  - drop no-longer-used .versions file


author: Nalin Dahyabhai <nalin@redhat.com> 185-5
changelog:
  - require the pam package explicitly, so that /%{_lib}/security won't be
    an orphaned directory (part of #553857)


author: Nalin Dahyabhai <nalin@redhat.com> 185-6
changelog:
  - add a proposed patch to avoid losing password expiration warnings relayed
    via policy controls when expiration is less than a day away (based on
    patch from Masahiro Matsuya, #637190, upstream #407)


author: Nalin Dahyabhai <nalin@redhat.com> 185-9
changelog:
  - add Ross Tyler's patch to always require authentication during password
    change requests for expired passwords, so that modules which check password
    quality (pam_cracklib) will always have the old password on-hand to examine
    as well (#688747, upstream #431)


author: Nalin Dahyabhai <nalin@redhat.com> 185-10
changelog:
  - don't overwrite an explicitly-configured search base when we're using DNS
    to locate the server (#735375)


author: Nalin Dahyabhai <nalin@redhat.com> 264-8
changelog:
  - add "rtkit" and "pulse" to the list of users whom we default to ignoring
    for looking up supplemental groups (Gordon Messmer, part of #186527)


author: Packages Team <packager@cloudlinux.com> - 0.3-6
changelog:
  * Thu Jan 23 2014 Pavel Negrobov <pnegrobov@cloudlinux.com> 0.3-7
  - PAMLVE-2 fix: allow to specify multiple groups in pam_lve to exlude
  - ##


author: Andrew Merzlyakov <b25ae2@gmail.com> 0.3-6
changelog:
  * Thu Jan 23 2014 Pavel Negrobov <pnegrobov@cloudlinux.com> 0.3-7
  - PAMLVE-2 fix: allow to specify multiple groups in pam_lve to exlude


author: Anton Volkov <avolkov@cloudlinux.com>, Vladislav Fomin <vfomin@cloudlinux.com> 0.3-11
changelog:
  - PAMLVE-8: build pam_lve rpm package for CL8
  - PAMLVE-6: strange lve1 appears after attempt to create lvp
  - CAG-603: use CloudLinux Zug GmbH instead of Cloud Linux Inc
  - update EULA


changelog: - LU-3133: remove "set -e" from scriplets
author:
  Aleksey Petryankin <apetryankin@cloudlinux.com>, Alexey Lyashkov <umka@cloudlinux.com>, Anton Volkov <avolkov@cloudlinux.com> 0.4-2


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.4-2
changelog:
  - set LDFLAGS_LINUX, not LDFLAGS, so that we don't strip the module before
    the debuginfo gets pulled out (#249963)


author: Avesh Agarwal <avagarwa@redhat.com> - 1.0.5-4
changelog:
  - Patch for new configurable options(rhbz# 219201): 
    disable first upper and last digit check, passwords 
    prompts can be read from a file
  - Fixed an issue with spec file where "Release:" is not
    specified with "(?dist)". Without this, it gives problem
    when tagging across different fedora releases.


author: Avesh Agarwal <avagarwa@redhat.com> - 1.0.5-5
changelog:
  - Fixed following rpmlint errors on src rpm:
    pam_passwdqc.src: W: summary-ended-with-dot Pluggable
    password quality-control module.,
    pam_passwdqc.src:11: E: buildprereq-use pam-devel


author: Avesh Agarwal <avagarwa@redhat.com> - 1.0.5-6
changelog:
  - Added explanation of new options, disable_firstupper_lastdigit_check,
    oldpass_prompt_file, and newpass_prompt_file in the man pages
  - Fixed output messages when disable_firstupper_lastdigit_check option
    is used 
  Resolves: #219201 pam_passwdqc should be more configurable


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-11.1
changelog:
  - Silence expected errors from the console
  - make sure change log has correct dates and email
    Resolves: #654460, #586149


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-13
changelog:
  - If the ssl part is specified for ldap, default to ldaps unless
    otherwise specified in the .conf file


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-14
changelog:
  - Handle PKCS #11 modules when NSS or pam_pkcs11 only specify a partial path
  - Fix coverity issues (found in 7.0 coverity scan)


author: Akira TAGOH <tagoh@redhat.com> - 1.28.1-10
changelog:
  - Avoid the error message at %postun on upgrading to rhel7. (#1086690)
  - Use correct rpm macro for man page (#885846)


author: Denis Leroy <denis@poolshark.org> - 2.25.1.3-1
changelog:
  - Update to upstream 2.25.1.3
  - Package pangomm libdir directory with config include header
  - Fix documentation location


author: William Cohen <wcohen@redhat.com> - 5.1.1-1
changelog:
  - Rebase to 5.1.1 for:
    - rhbz726798: Support for Sandy Bridge in PAPI
    - rhbz785258: FP event on Sandy Bridge when HT enabled
    - rhbz743648: Support for access to various energy and perf registers via papi 
    - rhbz831751: Ivy Bridge: support PAPI 
    - rhbz740909: Allow parallel builds
    - rhbz785975: Correct use of apostrophes in PAPI documentation


author: Akira TAGOH <tagoh@redhat.com> - 0.6.8-6
changelog:
  - paps-cups.patch: Fix printing with -o landscape in CUPS. (#222137)
  - paps-autoconf262.patch: Fix an error on autoreconf.


author: Brian C. Lane <bcl@redhat.com> 2.1-17
changelog:
  - Disable t9020 (scsi_debug num_parts is broken)
  - Add a wait loop to t9030 when removing the partition
  - Remove size parameter from scsi_debug in t9030
    Resolves: #746098


author: Brian C. Lane <bcl@redhat.com> 2.1-18
changelog:
  - libparted: copy flags when duplicating GPT partitions
  - test for GPT partition duplicate
    Resolves: #750395
  - Use dm_udev_wait for dm operations
    Resolves: #698121
    Resolves: #751164


author: Brian C. Lane <bcl@redhat.com> 2.1-19
changelog:
  - libparted: HFS/HFS+ probe: don't let a corrupt FS evoke failed assertion
    Resolves: #797979
  - tests: exercise and document the HFS-probe bug fix
    Resolves: #797979
  - libparted: use largest_partnum in dm_reread_part_table
    Resolves: #803108
  - tests: test creating 20 device-mapper partitions
    Resolves: #803108
  - libparted: preserve the uuid on dm partitions
    Resolves: #832145
  - tests: Make sure dm UUIDs are not erased
    Resolves: #832145


author: Brian C. Lane <bcl@redhat.com> 2.1-21
changelog:
  - Raise size limit on loop devices
    Resolves: #869743
  - Remove dm device when last partition is removed
    Resolves: #851705


author: Brian C. Lane <bcl@redhat.com> 2.1-22
changelog:
  - Add PreP GUID support
    Resolves: rhbz#1054283
  - Fix busy partition detection on devices witout sequential minor device numbers
    Resolves: rhbz#1018075
  - Fix align-check in interactive mode
    Resolves: rhbz#975478


author: Brian C. Lane <bcl@redhat.com> 2.1-23
changelog:
  - Drop the warning about greater than 512-byte sector sizes being experimental
    Resolves: rhbz#929319


author: Brian C. Lane <bcl@redhat.com> 2.1-26
changelog:
  - libparted: device mapper uses 512b sectors
    Resolves: rhbz#1189328
  - tests: Add a test for device-mapper partition sizes
    Related: rhbz#1189328
  - tests: Turn on testing of other blocksizes
    Related: rhbz#1189328


author: Brian C. Lane <bcl@redhat.com> 2.1-27
changelog:
  - libparted: fix gpt end of disk handling
    Resolves: rhbz#1180683
  - tests: Add tests for gpt end of disk handling
    Related: rhbz#1180683


author: Ondrej Vasik <ovasik@redhat.com> - 1.25-6
changelog:
  - added doc files
  - used texconfig-sys rehash instead of texhash
  - dist tag, license tag, rpmlint silencing


author: Tomas Mraz <tmraz@redhat.com> 0.75-1
changelog:
  - fix disabling SELinux and audit in spec (#433284)
  - remove obsolete no.po (#332121)
  - updated translations


author: Tomas Mraz <tmraz@redhat.com> 0.77-4.2
changelog:
  - add -e option to expire the password for user
  - compile the binary with PIE and full RELRO options


author: Tim Waugh <twaugh@redhat.com> 2.6-1
changelog:
  - 2.6.  No longer need stderr, suffix, stripcr, parse, allow-spaces,
    ifdef, program_name, or posix-backup patches.


author: Tim Waugh <twaugh@redhat.com> 2.6-2
changelog:
  - Applied upstream patch to prevent incorrect filename being chosen
    when adding a new file (bug #550319).


author: Tim Waugh <twaugh@redhat.com> 0.2.31-4
changelog:
  - Versioned obsoletes/provides (bug #226234).
  - Created %check section (bug #226234).
  - Avoid %makeinstall (bug #226234).
  - Fixed defattr declaration (bug #226234).


author: Radek Brich <rbrich@redhat.com> - 3.4-2
changelog:
  - applied patch for #239000 (pax fails creation of ustar
    if an absolute name is exactly 100 characters long)


author: Ondrej Vasik <ovasik@redhat.com> - 3.4-7
changelog:
  - Merge review #226235: do ship doc files,
    do comment patches, use better buildroot and
    defaults for attributes, allow parallel builds


author: Michal Hlavinka <mhlavink@redhat.com> - 3.1.10-4
changelog:
  - close directory after processing pci.ids.d directory (#684000)
  - sysfs: do not warn on incomplete slot addresses (#1032827)


author: Dave Brolley <brolley@redhat.com> - 3.9.2-1
changelog:
  - Improve pmdarpm(1) concurrency complications (BZ 1044297)
  - Fix pmconfig(1) shell output string quoting (BZ 1085401)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.9.4-1
changelog:
  - Merged pcp-gui and pcp-doc packages into core PCP.
  - Allow for conditional libmicrohttpd builds in spec file.
  - Adopt slow-start capability in systemd PMDA (BZ 1073658)
  - Resolve pmcollectl network/disk mis-reporting (BZ 1097095)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.9.4-3
changelog:
  - Backport PCP daemon signal handling fixes (BZ 847343).
  - Resolve potential signed integer overflow (ET rpmdiff 97915).
  - Update spec to ensure tutorial files live in pcp-doc package.


author: Nathan Scott <nathans@redhat.com> - 3.10.3-1
changelog:
  - Update to latest PCP sources again (BZ 1158681).
  - Fixes bug in s390x /proc/cpuinfo parsing (BZ 1196540).
  - Added explicit PAPI 5.1.1 build dependencies (BZ 1188045).
  - Improved diagnostics for chkconfig-driven service (BZ 1131022).
  - New sub-package for pcp-import-ganglia2pcp.


author: Nathan Scott <nathans@redhat.com> - 3.10.3-2
changelog:
  - Resolve PAPI build dependency issues again (BZ 1188045).
  - Fix Avahi-related pmwebd memory corruption (BZ 1199052).
  - Resolve QA test case failures (BZ 1198031 & BZ 1198981).


author: Nathan Scott <nathans@redhat.com> - 3.10.3-3
changelog:
  - Fix postfix pmda failing to setgid to postfix user (BZ 1213724).
  - Fix postfix pmda not reporting incoming mails (BZ 1213764).
  - Consistent naming for tools related to LVM cache (BZ 1218007).


author: Lukas Berk <lberk@redhat.com> - 3.10.9-1
changelog:
  - Resolve local_sock() double free error (BZ 1258846).
  - Resolve netfilter pmda uses outdated /proc API (BZ 1221653).
  - Update to latest PCP sources (BZ 1248272).
  - Fix pmatop attribute error (BZ 1195429).
  - Fix pmwebd fails when monitoring systems with Vector (BZ 1238863).


author: Lukas Berk <lberk@redhat.com> - 3.10.9-3
changelog:
  - Correct papi version we link against (BZ 1295694)
  - Fix possible overflow with pmdaproc using local context options (BZ 1295801)
  - Dropped pcp-compat package from upstream (BZ 1294390)


author: Lukas Berk <lberk@redhat.com> - 3.10.9-4
changelog:
  - Correct interrupts parsing on s390x platforms (BZ 1297822)
  - Correct papi version we link against for 32 bit arches (BZ 1295694)


author: Lukas Berk <lberk@redhat.com> 3.10.9-6
changelog:
  - Update pmdanamed testcaes (BZ 1303005)
  - Fix possible fd leak in pmdanamed (BZ 1223311)
  - Fix issue with pmdagfs2 installation (BZ 1305939)
  - Address testcase 370 failure on non x86_64 archs (BZ 1305940)
  - Address endian issue with pmdalinux on some platforms (BZ 1298722)


author: Nathan Scott <nathans@redhat.com> 3.10.9-7
changelog:
  - Fix pmlogconf probing of base XFS metrics (BZ 1358972)
  - Resolve SIGFPE in pcp-atop with missing metrics (BZ 1373590)
  - Support pcp-iostat uninterpolated PCP archive replay (BZ 1293661)
  - Resolve several reporting issues in PostgreSQL PMDA (BZ 1304619)


author: Nathan Scott <nathans@redhat.com> 3.10.9-9
changelog:
  - Added pcp-iostat precision reporting capability (BZ 1297498)
  - Fixed a pcp-iostat argument checking stack trace (BZ 1414257)


author: Petr Pisar <ppisar@redhat.com> - 7.8-4
changelog:
  - Add license files to static subpackage (Resolves: #613690)
  - Fix typos in pcretest(1) manual page (Resolves: #676636)
  - Fix typos in pcregrep(1) manual page (Resolves: #676643)


author: Petr Pisar <ppisar@redhat.com> - 7.8-5
changelog:
  - Reintroduce RE::Init(const char*) to restore ABI with pcre-6
    (Resolves: #842000)
  - Fix spelling formfeed, runtime, whitespace in manual pages
    (Resolves: #799003)


author: Petr Pisar <ppisar@redhat.com> - 7.8-6
changelog:
  - Fix repeated forward reference needing a character (Resolves: #756105)
  - Fix caseless match if cases differ in encoding length (Resolves: #759475)


author: Petr Pisar <ppisar@redhat.com> - 7.8-7
changelog:
  - Check starting offest for pointing into a subject string
    (Resolves: #1193524)
  - Pass back detailed error when UTF-8 check fails at runtime
    (Resolves: #1193524)


author: Petr Pisar <ppisar@redhat.com> - 10.21-12
changelog:
  - Fix compiling a class with UCP and without UTF
  - Fix an out-of-bound read in pcre2test tool within POSIX mode
    (upstream bug #2008)


author: Petr Pisar <ppisar@redhat.com> - 10.21-14
changelog:
  - Handle memmory allocation failures in pcre2test tool
  - Fix CVE-2017-7186 (a crash when finding a Unicode property for a character
    with a code point greater than 0x10ffff in UTF-32 library while UTF mode is
    disabled) (upstream bug #2052)


author: Petr Pisar <ppisar@redhat.com> - 10.21-16
changelog:
  - Close serialization file in pcre2test after any error (upstream bug #2074)
  - Fix a potential NULL dereference in pcre2_callout_enumerate() if called with
    a NULL pattern pointer when Unicode support is available (upstream bug #2076)


author: Petr Pisar <ppisar@redhat.com> - 10.21-17
changelog:
  - Fix DFA match for a possessively repeated character class (upstream bug #2086)
  - Use a memory allocator from the pattern if no context is supplied to
    pcre2_match()


author: Petr Pisar <ppisar@redhat.com> - 10.21-18
changelog:
  - Fix CVE-2017-7186 in JIT mode (a crash when finding a Unicode property for
    a character with a code point greater than 0x10ffff in UTF-32 library while
    UTF mode is disabled) (bug #1434504)
  - Fix an incorrect cast in UTF validation (upstream bug #2090)


author: Petr Pisar <ppisar@redhat.com> - 10.21-19
changelog:
  - Fix DFA matching a lookbehind assertion that has a zero-length branch
    (PCRE2 oss-fuzz issue 1859)
  - Fix returned offsets from regexec() when REG_STARTEND is used with starting offset
    greater than zero (upstream bug #2128)


author: Petr Pisar <ppisar@redhat.com> - 10.21-22
changelog:
  - Fix a subject buffer overread in JIT when UTF is disabled and \X or \R has
    a greater than 1 fixed quantifier (upstream bug #2320)


author: Chris Feist <cfeist@redhat.com> - 0.9.123-3
changelog:
  - Added ability to upgrade cluster cib and we auto upgrade cib if we're running
    an acl command (except show or help)
  - Resolves: rhbz#1112727


author: Chris Feist <cfeist@redhat.com> - 0.9.123-4
changelog:
  - Fixed resource delete for clones of groups with more than one resource
  - Fixed unclone of group so all resources are removed
  - Resolves: rhbz#1107612 rhbz#1108778


author: Chris Feist <cfeist@redhat.com> - 0.9.123-6
changelog:
  - Fixed issue with sync cluster.conf & adding uid/gid across cluster on RHEL6 w/ pcsd
  - Resolves: rhbz#1102836


author: Chris Feist <cfeist@redhat.com> - 0.9.82-1
changelog:
  - Show constraint id when printing out location rules
  - Improve error messages when adding location rules with errors
  - Add ability to remove constraint rules
  - Allow move of master/slave resources if --master is present


author: Chris Feist <cfeist@redhat.com> - 0.9.87-1
changelog:
  - Allow two ordering constraints with same resources
  - Improved error messages when trying to master/clone resources
  - Updated error message when attempting to move a master/slave without
    --master


author: Chris Feist <cfeist@redhat.com> - 0.9.88-1
changelog:
  - Don't allow order/colocation constraints created for master primitives
  - Check in clones for stonith resources
  - Clarify 'constraint rule add' in man page/usage
  - Fixed minor usage issue with colocation sets


author: Chris Feist <cfeist@redhat.com> - 0.9.89-1
changelog:
  - Show location constraint role in pcs status/constraint
  - Disable resource before removing
  - Misc man/usage fixes


author: Chris Feist <cfeist@redhat.com> - 0.9.90-1
changelog:
  - Add ability to set node attributes
  - Fix issue setting meta attributes on a master when creating a resource


author: Chris Feist <cfeist@redhat.com> - 0.9.90-2.el6_5.2
changelog:
  - Fixed bug causing an issue when adding stonith level without --force
  - Added ability to create/edit/remove uidgid for corosync in cluster.conf
  - Fixed bug which wouldn't allow a user to standby nodes
  - Resolves: rhbz#1038479 rhbz#1038478 rhbz#1032161


author: Chris Feist <cfeist@redhat.com> - 0.9.90-2.el6_5.3
changelog:
  - When creating a resource using --group/--clone/--master put the group
    inside the master/clone/group before putting it into the live CIB
  - Resolves: rhbz#1099314


author: Bob Relyea <rrelyea@redhat.com> - 1.5.2-14
changelog:
  - handle different usb scheme needed to support ReinerSCT Cyberjack
    readers. Patch was supplied by customer.


author: Bob Relyea <rrelyea@redhat.com> - 1.5.2-15
changelog:
  - unlock mutex on failure
  - clean up socket files after start at init time (allows restart after
    crash or hard fail of pcscd)


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.12.el6]
changelog:
  - [scsi] beiscsi: update version (Mike Christie) [674340]
  - [scsi] be2iscsi: fix chip cleanup (Mike Christie) [674340]
  - [scsi] be2iscsi: fix boot hang due to interrupts not getting rearmed (Mike Christie) [674340]
  - [scsi] bnx2fc: fix regression due to incorrect setup of em for npiv port (Mike Christie) [700672]
  - [ppc] pseries: Use a kmem cache for DTL buffers (Steve Best) [695678]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.13.el6]
changelog:
  - [scsi] hpsa: fix lost command problem (Tomas Henzl) [700430]
  - [scsi] cciss: fix lost command problem (Tomas Henzl) [700430]
  - [scsi] ibft: fix oops during boot (Mike Christie) [698737]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.14.el6]
changelog:
  - [scsi] hpsa: fix reading a write only register causes a hang (Rob Evers) [703262]
  - [scsi] mpt2sas: remove the use of writeq, since writeq is not atomic (Tomas Henzl) [701947]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.1.1.el6]
changelog:
  - [net] dccp: handle invalid feature options length (Jiri Pirko) [703012 703013] {CVE-2011-1770}
  - [fs] cifs: check for private_data before trying to put it (Jeff Layton) [703017 702642] {CVE-2011-1771}
  - [net] can: add missing socket check in can/raw and can/bcm release (Jiri Pirko) [698482 698483] {CVE-2011-1748 CVE-2011-1598}
  - [netdrv] ixgbe: do not clear FCoE DDP error status for received ABTS (Andy Gospodarek) [704011 695966]
  - [netdrv] ixgbe: DCB remove ixgbe_fcoe_getapp routine (Andy Gospodarek) [704002 694358]
  - [fs] setup_arg_pages: diagnose excessive argument size (Oleg Nesterov) [645228 645229] {CVE-2010-3858}
  - [scsi] bfa: change tech-preview to cover all cases (Rob Evers) [704014 703251]
  - [scsi] bfa: driver version update (Rob Evers) [704282 703265]
  - [scsi] bfa: kdump fix (Rob Evers) [704282 703265]
  - [scsi] bfa: firmware download fix (Rob Evers) [704282 703265]
  - [netdrv] bna: fix memory leak during RX path cleanup (Ivan Vecera) [704000 698625]
  - [netdrv] bna: fix for clean fw re-initialization (Ivan Vecera) [704000 698625]
  - [scsi] ipr: improve interrupt service routine performance (Steve Best) [704009 696754]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.2.1.el6]
changelog:
  - [kernel] lib/vsprintf.c: add %pU to print UUID/GUIDs (Frantisek Hrbata) [704280 700299]
  - [scsi] megaraid_sas: Driver only report tape drive, JBOD and logic drives (Tomas Henzl) [704601 619422]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.5.1.el6]
changelog:
  - [kernel] cgroupfs: use init_cred when populating new cgroupfs mount (Eric Paris) [713135 700538]
  - [netdrv] ixgbe: adding FdirMode module option (Andy Gospodarek) [711550 707287]
  - [crypto] testmgr: add xts-aes-256 self-test (Jarod Wilson) [711548 706167]
  - [fs] ext3: Fix lost extented attributes for inode with ino == 11 (Eric Sandeen) [712413 662666]
  - [mm] Prevent Disk IO throughput degradation due to memory allocation stalls (Larry Woodman) [711540 679526]
  - [net] sock: adjust prot->obj_size always (Jiri Pirko) [709381 704231]
  - [fs] GFS2: resource group bitmap corruption resulting in panics and withdraws (Robert S Peterson) [711528 702057]
  - [x86] kprobes: Disable irqs during optimized callback (Jiri Olsa) [711545 699865]
  - [mm] slab, kmemleak: pass the correct pointer to kmemleak_erase() (Steve Best) [712414 698023]
  - [net] fix netns vs proto registration ordering (Wade Mealing) [702305 702306] {CVE-2011-1767 CVE-2011-1768}
  - [ppc] Fix oops if scan_dispatch_log is called too early (Steve Best) [711524 696777]
  - [virt] i8259: initialize isr_ack (Avi Kivity) [711520 670765]
  - [virt] VMX: Save and restore tr selector across mode switches (Gleb Natapov) [711535 693894]
  - [virt] VMX: update live TR selector if it changes in real mode (Gleb Natapov) [711535 693894]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.6.1.el6]
changelog:
  - [audit] ia32entry.S sign extend error codes when calling 64 bit code (Eric Paris) [713831 703935]
  - [audit] push audit success and retcode into arch ptrace.h (Eric Paris) [713831 703935]
  - [x86] intel-iommu: Flush unmaps at domain_exit (Alex Williamson) [713458 705441]
  - [x86] intel-iommu: Only unlink device domains from iommu (Alex Williamson) [713458 705441]
  - [virt] x86: Mask out unsupported CPUID features if running on xen (Igor Mammedov) [711546 703055]
  - [block] fix accounting bug on cross partition merges (Jerome Marchand) [682989 669363]
  - [net] vlan: remove multiqueue ability from vlan device (Neil Horman) [713494 703245]
  - [net] Fix netif_set_real_num_tx_queues (Neil Horman) [713492 702742]
  - [scsi] mpt2sas: move event handling of MPT2SAS_TURN_ON_FAULT_LED in process context (Tomas Henzl) [714190 701951]
  - [mm] thp: simple fix for /dev/zero THP mprotect bug (Andrea Arcangeli) [714762 690444]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-210.el6]
changelog:
  - [drm] i915: fix IVB cursor support (Adam Jackson) [741780]
  - [drm] i915: always set FDI composite sync bit (Adam Jackson) [745564]
  - [netdrv] bnx2i: Fixed the endian on TTT for NOP out transmission (Mike Christie) [745676]
  - [scsi] megaraid_sas: Add driver workaround for PERC5/1068 kdump kernel panic (Tomas Henzl) [723218]
  - [ata] AHCI: Add new Panther Point RAID DeviceID (Prarit Bhargava) [745484]
  - [scsi] isci: export phy events via ->lldd_control_phy() (David Milburn) [743654]
  - [scsi] isci: The port state should be set to stopping on the last phy (David Milburn) [743654]
  - [scsi] isci: fix decode of DONE_CRC_ERR TC completion status (David Milburn) [743654]
  - [scsi] isci: SATA/STP I/O is only returned in the normal path to libsas (David Milburn) [743654]
  - [scsi] isci: fix support for large smp requests (David Milburn) [743654]
  - [scsi] isci: fix missed unlock in apc_agent_timeout() (David Milburn) [743654]
  - [scsi] isci: fix event-get pointer increment (David Milburn) [743654]
  - [scsi] isci: add version number (David Milburn) [743654]
  - [scsi] isci: dynamic interrupt coalescing (David Milburn) [743654]
  - [scsi] isci: fix sata response handling (David Milburn) [743654]
  - [scsi] isci: Leave requests alone if already terminating (David Milburn) [743654]
  - [fs] jbd: Fix forever sleeping process in do_get_write_access() (Harshula Jayasuriya) [744979]
  - [fs] jbd2: Fix forever sleeping process in do_get_write_access() (Harshula Jayasuriya) [744979]
  - [net] ipv6: fix refcnt problem related to POSTDAD state (Weiping Pan) [709280 731608]
  - [x86] paravirt: PTE updates in k(un)map_atomic need to be synchronous, regardless of lazy_mmu mode (Igor Mammedov) [632802]
  - [s390x] qdio: 2nd stage retry on SIGA-W busy conditions (Hendrik Brueckner) [732708]
  - [s390x] kernel: NSS creation with initrd fails (Hendrik Brueckner) [730780]
  - [s390x] qeth: wrong number of output queues for HiperSockets (Hendrik Brueckner) [730701]
  - [s390x] qeth: l3 ipv6 vlan not working on shared OSA chpid (Hendrik Brueckner) [727850]
  - [x86] Intel pci: Provide option to enable 64-bit IOMMU pass through mode (George Beshers) [696420]
  - [x86] intel-iommu: Remove Host Bridge devices from identity mapping (George Beshers) [696420]
  - [x86] intel-iommu: Add domain check in domain_remove_one_dev_info (George Beshers) [696420]
  - [x86] intel-iommu: Use coherent DMA mask when requested (George Beshers) [696420]
  - [x86] intel-iommu: Dont cache iova above 32bit (George Beshers) [696420]
  - [x86] intel-iommu: Speed up processing of the identity_mapping function (George Beshers) [696420]
  - [x86] intel-iommu: Check for identity mapping candidate using system dma mask (George Beshers) [696420]
  - [scsi] tcm_fc: Fix to activate non-offload path for FCoE target (Andy Grover) [638007]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-211.el6]
changelog:
  - [scsi] libsas: fix warnings when checking sata/stp protocol (David Milburn) [695950]
  - [scsi] libsas: disable scanning lun > 0 on ata devices (David Milburn) [695950]
  - [scsi] libsas: Allow expander T-T attachments (David Milburn) [695950]
  - [usb] xhci: Make xHCI driver endian-safe (Don Zickus) [745967]
  - [infiniband] RDMA/cxgb3: Don't post zero-byte read if endpoint is going away (Neil Horman) [717379]
  - [scsi] isci: atapi support (David Milburn) [743692]
  - [x86] amd: Move BSP code to cpu_dev helper (Larry Woodman) [739456]
  - [x86] Add a BSP cpu_dev helper (Larry Woodman) [739456]
  - [x86] amd: Avoid cache aliasing penalties on AMD family 15h (Larry Woodman) [739456]
  - [net] ipv6: fix NULL dereference in udp6_ufo_fragment() (Jason Wang) [740465]
  - [netdrv] cxgb4: Updating NIC driver firmware (Neil Horman) [717806]
  - [netdrv] cxgb3: Fix NULL pointer dereference in t3_l2t_get (Neil Horman) [729737]
  - [netdrv] bnx2x: remaining fixes from upstream 3.1 (Michal Schmidt) [743917]
  - [netdrv] e1000e: fix WoL on 82578DM and 82567V3 (Andy Gospodarek) [699042]
  - [netdrv] tg3: Use netif_set_real_num_tx_queues() (Jiri Pirko) [740477]
  - [netdrv] bnx2x: critical fixes (Veaceslav Falico) [745211]
  - [netdrv] bonding: properly stop queuing work when requested (Andy Gospodarek) [736904]
  - [netdrv] tg3: negate USE_PHYLIB flag check (Jiri Pirko) [746006]
  - [x86] Add new cpu capabilities to /proc/cpuinfo (Prarit Bhargava) [745799]
  - [kabi] add missing multipath symbols for s390x (Aristeu Rozanski) [714992]
  - [perf] sched: Fix script command documentation (Jiri Olsa) [726589]
  - [pm] hibernate: Fix memory corruption related to swap (Stanislaw Gruszka) [701857]
  - [scsi] hpsa: add heartbeat sysfs host attribute (Tomas Henzl) [730027]
  - [scsi] Revert megaraid_sas: Driver only report tape drive, JBOD and logic drives (Tomas Henzl) [736667]
  - [fs] GFS2: Fix ->page_mkwrite() races (Steven Whitehouse) [725091]
  - [scsi] scsi_transport_fc: Fix deadlock during fc_remove_host (Mike Christie) [714320]
  - [kernel] workqueue: Fix workqueue deadlock during destroy_workqueue (Mike Christie) [714320]
  - [sched] Avoid expensive initial update_cfs_load() (Larry Woodman) [741569 742414]
  - [sched] Simplify update_cfs_shares parameters (Larry Woodman) [741569 742414]
  - [sched] Fix/remove redundant cfs_rq checks (Larry Woodman) [741569 742414]
  - [sched] Fix sign under-flows in wake_affine (Larry Woodman) [741569 742414]
  - [sched] Update effective_load() to use global share weights (Larry Woodman) [741569 742414]
  - [sched] Fix interactivity bug by charging unaccounted run-time on entity re-weight (Larry Woodman) [741569 742414]
  - [sched] Move periodic share updates to entity_tick() (Larry Woodman) [741569 742414]
  - [sched] Fix UP build breakage (Larry Woodman) [741569 742414]
  - [sched] Update tg->shares after cpu.shares write (Larry Woodman) [741569 742414]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-212.el6]
changelog:
  - [net] bridge: fix use after free in __br_deliver() (Amerigo Wang) [730756] {CVE-2011-2942}
  - [scsi] Update lpfc version for 8.3.5.45.4p driver release (Rob Evers) [746668]
  - [scsi] Fix crash when cfg_fcp_eq_count is zero (Rob Evers) [746668]
  - [scsi] Fix kernel crash during boot with SLI4 card installed (Rob Evers) [746668]
  - [scsi] Properly clean up EQ and CQ child lists to prevent kernel crash (Rob Evers) [746668]
  - [kabi] add missing symbols for Emulex be2net driver (Jiri Olsa) [745712]
  - [netdrv] netxen-firmware: Install the 4.0.579 firmware (Kyle McMartin) [741776]
  - [perf] symbols: Treat all memory maps without dso file as loaded (Jiri Olsa) [726582]
  - [debug] increase MAX_STACK_TRACE_ENTRIES (Kyle McMartin) [645777]
  - [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [692709] {CVE-2011-3363}
  - [tpm] Zero buffer after copying to userspace (Jiri Benc) [732633] {CVE-2011-1161 CVE-2011-1162}
  - [pci] intel-iommu: IOTLB hang workaround (Dave Airlie) [728476]
  - [drm] i915: Fix hang on Ironlake mobile GPU with VT-d (Dave Airlie) [728476]
  - [drm] i915: Remove early exit on i915_gpu_idle (Dave Airlie) [728476]
  - [drm] nv50/bios: fixup mpll programming from the init table parser (Ben Skeggs) [744992]
  - [drm] nv50/vram: fix incorrect detection of bank count on newer chipsets (Ben Skeggs) [744992]
  - [drm] radeon: fix llano output setup + memory corruption (Dave Airlie) [747292]
  - [drm] radeon caicos enablement fixes (Dave Airlie) [747291]
  - [pci] Disable SRIOV on powerpc (Prarit Bhargava) [742089]
  - [pci] Add pci=nosriov to disable SRIOV (Prarit Bhargava) [742089]
  - [x86] apic: ack all pending irqs when crashed/on kexec (Takao Indoh) [704142]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-213.el6]
changelog:
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in niu.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in myri10ge.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in igb_main.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in cxgb4_main.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in cxgb3_main.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in bnx2.c (Neil Horman) [742117]
  - [ppc] kabi: add symbol 'paca' to ppc KABI (Jiri Olsa) [737466]
  - [fs] proc: fix oops on invalid /proc/pid/maps access (Johannes Weiner) [746613] {CVE-2011-3637}
  - [nfs] fix pNFS hang and oops on umounts (Steve Dickson) [746861]
  - [scsi] qla4xxx: export address/port of connection (Mike Christie) [728156]
  - [netdrv] Fix pktgen to not oops on unsupported drivers (Neil Horman) [678794]
  - [kernel] tracing: Update the comm field in the right variable in update_max_tr (Jiri Olsa) [736955]
  - [kernel] kabi: Add missing compat_alloc_user_space symbol to kABI (Jiri Olsa) [747047]
  - [kernel] fix taskstats io infoleak (Jerome Marchand) [716848] {CVE-2011-2494}
  - [x86] ACPI, APEI, HEST: Detect duplicated hardware error source ID (Don Zickus) [737189]
  - [netdrv] Add latest cxgb3 firmware (Neil Horman) [742011]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-214.el6]
changelog:
  - [dm] table: add immutable feature (Mike Snitzer) [747438]
  - [mm] reduce overhead on paravirt functions (Larry Woodman) [743554]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-215.el6]
changelog:
  - [virt] index of virtio disk is not decremented when removed (Mark Wu) [692767]
  - [edac] i7core_edac: Initialize memory name with cpu, channel, bank (Mauro Carvalho Chehab) [712957]
  - [kernel] perf: Optimize event scheduling locking (Steve Best) [744986]
  - [drm] i915: set the right SDVO transcoder for CPT (Adam Jackson) [735122]
  - [scsi] libfc: Prevent race that causes panic during FCoE port destroy (Neil Horman) [735959]
  - [scsi] qla4xxx: Update driver version to 5.02.00-k8 (Mike Christie) [732622]
  - [scsi] qla4xxx: updated device id check for BFS (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed target discovery failed issue (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed active session re-open issue (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed device blocked issue on link up-down (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed session destroy issue on link up-down (Mike Christie) [732622]
  - [scsi] qla4xxx: Clear DDB map index on the basis of AEN (Mike Christie) [732622]
  - [scsi] qla4xxx: Free Device Database (DDB) reserved by FW (Mike Christie) [732622]
  - [scsi] qla4xxx: Fix getting BIDI CHAP for boot targets (Mike Christie) [732622]
  - [scsi] qla4xxx: Fix exporting boot targets to sysfs (Mike Christie) [732622]
  - [scsi] qla4xxx: Do not add duplicate CHAP entry in FLASH (Mike Christie) [732622]
  - [scsi] qla4xxx: Fix bidirectional CHAP (Mike Christie) [732622]
  - [scsi] qla4xxx: Add new FLT firmware region (Mike Christie) [732622]
  - [scsi] qla4xxx: Update license (Mike Christie) [732622]
  - [scsi] iscsi class: fix vlan configuration (Mike Christie) [732622]
  - [scsi] qla4xxx: fix data alignment and use nl helpers (Mike Christie) [732622]
  - [scsi] iscsi class: fix link local mispelling (Mike Christie) [732622]
  - [scsi] qla4xxx: Added Get ACB support using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Added restore factory defaults support using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: added support to update initiator iscsi port (Mike Christie) [732622]
  - [scsi] scsi_transport_iscsi: Added support to update initiator iscsi port (Mike Christie) [732622]
  - [scsi] qla4xxx: Added vendor specific sysfs attributes (Mike Christie) [732622]
  - [scsi] qla4xxx: Add read/update NVRAM support for 40xx adapters using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Add get ACB state support using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Code cleanup for read/update flash using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Added support to update mtu (Mike Christie) [732622]
  - [scsi] scsi_transport_iscsi: Added support to update mtu (Mike Christie) [732622]
  - [scsi] libfc: improve flogi retries to avoid lport stuck (Mike Christie) [745667]
  - [scsi] libfc: avoid exchanges collision during lport reset (Mike Christie) [745667]
  - [scsi] libfc: fix checking FC_TYPE_BLS (Mike Christie) [745667]
  - [scsi] libfc: revert fix deadlock bug in fc_exch_abort_locked (Mike Christie) [745667]
  - [dm] log userspace: Allow for 'log device name' response in CTR msg exchange (Jonathan E Brassow) [746254]
  - [dm] kcopyd: fix job_pool leak (Mike Snitzer) [748441]
  - [netdrv] igb: Fix for Alt MAC Address feature on 82580 and later (Andy Gospodarek) [748503]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-216.el6]
changelog:
  - [scsi] lockless queuecommand dispatch fixup (Rob Evers) [749018]
  - [scsi] iscsi class: export pid of process that created session (Mike Christie) [747696]
  - [scsi] qla4xxx: Autologin persisted target entries (Mike Christie) [747696]
  - [netdrv] iwlagn: enable 11n aggregation without checking traffic load (John Linville) [744361]
  - [s390x] qdio: EQBS retry after CCQ 96 (Hendrik Brueckner) [747578]
  - [s390x] dasd: fix UID readout for z/VM (Hendrik Brueckner) [746000]
  - [x86] PCI: irq and pci_ids patch for Intel Panther Point DeviceIDs (Prarit Bhargava) [747638]
  - [netdrv] Help 6.1 out of tree drivers cope with ABI breakage (Thomas Graf) [746570]
  - [mm] shmem: let shared anonymous be nonlinear again (Larry Woodman) [690129]
  - [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [742091] {CVE-2011-3638}
  - [ipc] mqueue: separate mqueue default value from maximum value (Motohiro Kosaki) [746606]
  - [ipc] mqueue: don't use kmalloc with KMALLOC_MAX_SIZE (Motohiro Kosaki) [746606]
  - [ipc] mqueue: revert bump up DFLT_*MAX (Motohiro Kosaki) [746606]
  - [kernel] ipc/mqueue: Up the hard limit on message queues per namespace (Doug Ledford) [746606]
  - [kernel] ipc/mqueue: update maximums for the mqueue subsystem (Doug Ledford) [746606]
  - [kernel] ipc/mqueue: enforce hard limits (Doug Ledford) [746606]
  - [kernel] ipc/mqueue: switch back to using non-max values on create (Doug Ledford) [746606 746898]
  - [kernel] ipc/mqueue: cleanup definition names and locations (Doug Ledford) [746606]
  - [kernel] Revert "Restore max mqueue message size to its previous RHEL 5 value" (Doug Ledford) [746606]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-217.el6]
changelog:
  - [fs] GFS2: rewrite fallocate code to write blocks directly (Benjamin Marzinski) [750208] {CVE-2011-4098}
  - [netdrv] bnx2x: link fixes for 57810 (Andy Gospodarek) [749421]
  - [netdrv] enic: fix accidental GRO off by default (Stefan Assmann) [749390]
  - [scsi] qla2xxx: Correct inadvertent clearing of RISC_INTR status (Chad Dupuis) [748978]
  - [debug] lockdep: double MAX_LOCKDEP_ENTRIES (Kyle McMartin) [748941]
  - [x86] Add missing KERN_DEBUG to x86 module printk (Prarit Bhargava) [747837]
  - [x86] Update module alternatives message (Prarit Bhargava) [745596]
  - [x86] UV: KABI breakage in uv_blade_info (George Beshers) [745253]
  - [net] vlan: fix panic when handling priority tagged frames (Andy Gospodarek) [714936] {CVE-2011-3593}
  - [scsi] qla4xxx: Autologin persisted target entries update (Mike Christie) [747696]
  - [mm] oom: fix integer overflow of points in oom_badness (Frantisek Hrbata) [741207] {CVE-2011-4097}


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-218.el6]
changelog:
  - [netdrv] benet: remove bogus "unlikely" on vlan check (Ivan Vecera) [736429] {CVE-2011-3347}
  - [netdrv] be2net: non-member vlan pkts not received in promiscous mode (Ivan Vecera) [736429] {CVE-2011-3347}
  - [netdrv] be2net: fix crash receiving non-member VLAN packets (Ivan Vecera) [736429] {CVE-2011-3347}
  - [mm] fix race between mremap and removing migration entry (Andrea Arcangeli) [751084]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-219.el6]
changelog:
  - [kernel] KEYS: Fix a NULL pointer deref in the user-defined key type (David Howells) [751190] {CVE-2011-4110}
  - [scsi] fc class: fix building of Fibre Channel DUP drivers in 6.2 (Mike Christie) [750268]
  - [fs] nfs: don't call __mark_inode_dirty while holding i_lock (Steve Dickson) [747391]
  - [netdrv] vxge: allow rebinding the driver with a different number of SR-IOV VFs (Michal Schmidt) [694742]
  - [netdrv] vxge: fix crash of VF when unloading PF (Michal Schmidt) [694742]
  - [ata] revert libata: remove SCSI host lock (David Milburn) [751426]
  - [crypto] ansi_cprng: enforce key != seed in fips mode (Jarod Wilson) [751198]
  - [net] mac80211: Fix reassociation processing within ESS roaming (John Linville) [750350]
  - [net] nl80211: Allow association to change channels during reassociation (John Linville) [750350]
  - [net] mac80211: let cfg80211 manage auth state (John Linville) [750350]
  - [net] cfg80211: avoid sending spurious deauth to userspace (John Linville) [750350]
  - [net] mac80211: recalculate idle later in MLME (John Linville) [750350]
  - [net] mac80211: avoid spurious deauth frames/messages (John Linville) [750350]
  - [net] cfg80211: Allow reassociation in associated state (John Linville) [750350]
  - [net] cfg80211: remove warning in deauth case (John Linville) [750350]
  - [net] netfilter: fix nf_conntrack refcount leak in l4proto->error() (Thomas Graf) [745472]
  - [scsi] qla2xxx: Remove check for null fcport from host reset handler (Chad Dupuis) [744741]
  - [scsi] qla2xxx: Perform implicit logout during rport tear-down (Chad Dupuis) [744741]
  - [scsi] Revert "qla2xxx: Remove host_lock in queuecommand function" (Chad Dupuis) [744741]
  - [drm] nv50/disp: shutdown display on suspend/hibernate (Ben Skeggs) [740857]
  - [edac] Add sb_edac driver into the Red Hat Building system (Mauro Carvalho Chehab) [647700]
  - [edac] Fix incorrect edac mode reporting in sb_edac (Mauro Carvalho Chehab) [647700]
  - [edac] Add an experimental new driver to support Sandy Bridge CPU's (Mauro Carvalho Chehab) [647700]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-220.el6]
changelog:
  - [drm] i915: fix unmap race condition introduced with VT-d fix (Dave Airlie) [750583]
  - [scsi] iscsi: revert lockless queuecommand dispatch (Rob Evers) [751426]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-269.el6]
changelog:
  - [x86] Revert: kdump: No need to disable ioapic in crash path (Don Zickus) [815785]
  - [mm] mempolicy: do_migrate_pages cleanup (Larry Woodman) [801904]
  - [mm] mempolicy: do_migrate_pages fix (Larry Woodman) [801904]
  - [ata] ahci: add another PCI ID for marvell (David Milburn) [813365]
  - [ata] ahci: recognize Marvell 88se9125 PCIe SATA 6.0 Gb/s controller (David Milburn) [813365]
  - [ata] ahci: HFLAG_YES_FBS fix legacy IDE interface (David Milburn) [813365]
  - [ata] ahci: add HFLAG_YES_FBS and apply it to 88SE9128 (David Milburn) [813365]
  - [sound] alsa: enable OSS emulation in rhel configuration (Jaroslav Kysela) [657291]
  - [sound] alsa: add probe_mask=0x101 automatically for WinFast VP200 H (Jaroslav Kysela) [805658]
  - [target] fcoe: Remove printk message from ft_dump_cmd (Neil Horman) [813678]
  - [scsi] be2iscsi: fix bh use in alloc pdu path (Mike Christie) [813550]
  - [scsi] libsas: fix sas port naming (David Milburn) [759210]
  - [scsi] libsas: fix panic when single phy is disabled on a wide port (David Milburn) [759210]
  - [scsi] isci: firmware update to latest firmware generator (David Milburn) [759210]
  - [scsi] isci: enable BCN in sci_port_add_phy() (David Milburn) [759210]
  - [scsi] isci: Changes in COMSAS timings enabling ISCI to detect buggy disc drives (David Milburn) [759210]
  - [scsi] isci: implement suspend/resume support (David Milburn) [759210]
  - [scsi] isci: kill isci_host.shost (David Milburn) [759210]
  - [scsi] isci: fix interrupt disable (David Milburn) [759210]
  - [scsi] isci: fix 'link-up' events occur after 'start-complete' (David Milburn) [759210]
  - [scsi] isci: fix controller stop (David Milburn) [759210]
  - [scsi] isci: refactor initialization for S3/S4 (David Milburn) [759210]
  - [scsi] isci: kill isci_port.domain_dev_list (David Milburn) [759210]
  - [scsi] isci: kill ->status, and ->state_lock in isci_host (David Milburn) [759210]
  - [scsi] isci: Don't filter BROADCAST CHANGE primitives (David Milburn) [759210]
  - [scsi] isci: kill sci_phy_protocol and sci_request_protocol (David Milburn) [759210]
  - [scsi] isci: kill ->is_direct_attached (David Milburn) [759210]
  - [scsi] isci: improve 'invalid state' warnings (David Milburn) [759210]
  - [scsi] libsas: suspend / resume support (David Milburn) [759210]
  - [ata] libsas: drop sata port multiplier infrastructure (David Milburn) [759210]
  - [ata] libata: export ata_port suspend/resume infrastructure for sas (David Milburn) [759210]
  - [net] bonding: 802.3ad - fix agg_device_up (Veaceslav Falico) [806081]
  - [netdrv] mlx4_core: fix race on comm channel (Jay Fenlason) [808926]
  - [scsi] libfc: cache align struct fc_fcp_pkt fields (Neil Horman) [815984]
  - [scsi] libfc: cache align fc_exch_pool (Neil Horman) [815984]
  - [scsi] fcoe: setup default initial value for DDP threshold (Neil Horman) [815984]
  - [virt] virtio_console: tell host of open ports after resume from s3/s4 (Amit Shah) [816099]
  - [scsi] st: fix memory leak with 1MB tape I/O (David Milburn) [811703]
  - [drm] i915: Don't do MTRR setup if PAT is enabled (Adam Jackson) [802539]
  - [scsi] device_handler: Add Netapp storage array to rdac array list (Rob Evers) [811364]
  - [netdrv] cnic: Fix parity error code conflict (Mike Christie) [808619]
  - [sound] alsa: Fix No sound with Conexant CX20585 / Recording fails (Jaroslav Kysela) [798923]
  - [kernel] default to clocksource unstable switching off (Prarit Bhargava) [804535]
  - [x86] Backout X86_FEATURE_ARAT checks in hpet initialization (Prarit Bhargava) [804535]
  - [kernel] clocksource: Make watchdog robust vs. interruption (Prarit Bhargava) [804535]
  - [fs] cifs: Show various mount options in /proc/mounts (Sachin Prabhu) [815751]
  - [ata] libata: make ata_print_id atomic numbering fix (David Milburn) [815861]
  - [md] raid1: Don't set 'fullsync' unnecessarily (Jonathan E Brassow) [813948]
  - [md] dm-raid: Record and handle missing devices. (Jonathan E Brassow) [809231]
  - [md] dm-raid: Set recovery flags on resume. (Jonathan E Brassow) [811669]
  - [netdrv] bnx2x: changed initial dcb configuration (Michal Schmidt) [812612]
  - [netdrv] tg3: Fix NVRAM writes on newer devices (John Feeney) [808617]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-270.el6]
changelog:
  - [netdrv] be2net: Record receive queue index in skb to aid RPS (Ivan Vecera) [818558]
  - [scsi] bnx2i: Updated version and copyright year (Mike Christie) [816376]
  - [scsi] bnx2i: Added the setting of target can_queue via target_alloc (Mike Christie) [816376]
  - [netdrv] be2net: fix calling __vlan_put_tag() after eth_type_trans() (Ivan Vecera) [815670]
  - [s390] af_iucv: detect down state of HS transport interface (Hendrik Brueckner) [815274]
  - [s390] qeth: Improve OSA Express 4 blkt defaults (Hendrik Brueckner) [808486]
  - [netdrv] ixgbe: Correct Adaptive Interrupt Moderation so that it will change values (Andy Gospodarek) [802837]
  - [mm] x86: Move do_page_fault()'s error path under unlikely() (Motohiro Kosaki) [770376]
  - [mm] x86: make pagefault killable (Motohiro Kosaki) [770376]
  - [mm] x86: Handle mm_fault_error() in kernel space (Motohiro Kosaki) [770376]
  - [mm] introduce wait_on_page_locked_killable() (Motohiro Kosaki) [770376]
  - [mm] oom_kill: remove memcg argument from oom_kill_task() (Motohiro Kosaki) [770376]
  - [mm] oom-kill: remove boost_dying_task_prio() (Motohiro Kosaki) [770376]
  - [net] rds: RDS over QLogic hardware fails to work (Jay Fenlason) [797530]
  - [net] netpoll: fix Allow netpoll_setup/cleanup recursion (Herbert Xu) [816034]
  - [netdrv] atl1c: add workaround for issue of bit INTX-disable for MSI interrupt (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: enlarge L1 response waiting timer (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove PHY polling from atl1c_change_mtu (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Disable L0S when no cable link (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: do MAC-reset when PHY link down (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: cancel task when interface closed (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: refine mac address related code (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove code of closing register writable attribution (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: clear WoL status when reset pcie (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: add PHY link event(up/down) patch (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: refine start/enable code for MAC module (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: add function atl1c_power_saving (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove PHY reset/init for link down event (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: update PHY reset related routine (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove PHY polling from atl1c_open (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: refine SERDES-clock related code (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove PHY contrl in atl1c_reset_pcie (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: refine phy-register read/write function (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove REG_PHY_STATUS (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove MDIO_REG_ADDR_MASK in atl1c_mdio_read/write (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: fix WoL(magic) issue for l2cb 1.1 (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: refine atl1c_pcie_patch (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: refine/update ASPM configuration (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: clear bit MASTER_CTRL_CLK_SEL_DIS in atl1c_pcie_patch (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: refine reg definition of REG_MASTER_CTRL (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: clear PCIE error status in atl1c_reset_pcie (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove dmar_dly_cnt and dmaw_dly_cnt (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: update right threshold for TSO (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: add module parameter for l1c_wait_until_idle (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: threshold for ASPM is changed based on chip capability (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: restore max-read-request-size in Device Conrol Register (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: using fixed TXQ configuration for l2cb and l1c (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove dmaw_block (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: correct wrong definition of REG_DMA_CTRL (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: wrong register used to stop TXQ (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove code related to rxq 1/2/3 (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: split 2 32bit registers of TPD to 4 16bit registers (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove SMB/CMB DMA related code (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove VPD register (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove HDS register (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove multiple-RX-Q code (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: update author contact info & company/driver desciption (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: stop using net_device.{base_addr, irq} (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: set ATL1C_WORK_EVENT_RESET bit correctly (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: dont use highprio tx queue (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: set addr_assign_type if random_ether_addr() used (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: ethernet dev_alloc_skb to netdev_alloc_skb (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Remove alloc_etherdev error messages (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Sweep away N/A fw_version dustbunnies from the .get_drvinfo routine (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: add skb frag size accessors (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: use DMA_x_DEVICE and dma_mapping_error with skb_frag_dma_map (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: convert to SKB paged frag API (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Remove unneeded version.h includes from drivers/net/ (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove interrupt.h inclusion from netdevice.h (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: atl1c_resume() is only used when CONFIG_PM_SLEEP is defined (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Use ethtool's ethtool_cmd_speed API (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Use full 32 bit speed range in ethtool's set_settings (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Fix work event interrupt/task races (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Fix set-but-unused variable (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: fix sparse warnings (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Do not call device_init_wakeup() in atl1c_probe() (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Add missing PCI device ID (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove private #define (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Comment typo fixes for 'descriptor' (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Do not use legacy PCI power management (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Fix hardware type check for enabling OTP CLK (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: make functions static (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Don't check for vlan group before vlan_tx_tag_present (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: avoid some skb->ip_summed initializations (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Remove double test (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: use net_device_stats from struct net_device (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Add AR8151 v2 support and change L0s/L1 routine (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Remove unnecessary returns from void function()s (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove redundant code (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: convert multiple drivers to use netdev_for_each_mc_addr, part3 (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Add support for Atheros AR8152 and AR8152 (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: use DEFINE_PCI_DEVICE_TABLE() (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: fix assorted typos all over the place (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: use pM to show MAC address (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c:add pci map direction in atl1c_buffer flags (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove exceptional & on function name (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: change atl1c_buffer struct and restructure clean atl1c_buffer procedure (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: duplicate atl1c_get_tpd (Stanislaw Gruszka) [809036]
  - [fs] epoll: clear the tfile_check_list on -ELOOP (Jason Baron) [817140]
  - [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [817137]
  - [netdrv] tg3: Fix ethtool self tests (John Feeney) [808243 809036]
  - [infiniband] mlx4: check return code and bail on error (Doug Ledford) [749059]
  - [infiniband] mlx4: use locking when walking netdev list (Doug Ledford) [749059]
  - [x86] asm: undo paravirt_patch_template kABI breakage (Rik van Riel) [813682]
  - [fs] cifs: check S_AUTOMOUNT in revalidate (Ian Kent) [786149]
  - [fs] vfs: fix LOOKUP_DIRECTORY not propagated to managed_dentry() (Ian Kent) [786149]
  - [s390x] kdump: Change default action from reipl to stop for on_restart (Hendrik Brueckner) [806152]
  - [s390x] qeth: add missing wake_up call (Hendrik Brueckner) [806151]
  - [s390x] lcs: lcs offline failure (Hendrik Brueckner) [804643]
  - [s390x] ctcmpc: use correct idal word list for ctcmpc (Hendrik Brueckner) [798641]
  - [s390x] dasd: fix fixpoint divide exception in define_extent (Hendrik Brueckner) [798002]
  - [s390x] mm: prevent memory zone interleave (Hendrik Brueckner) [797936]
  - [s390x] qeth: synchronize discipline module loading (Hendrik Brueckner) [795462]
  - [powerpc] perf: Check current->mm in read_user_stack_slow (Steve Best) [804569]
  - [powerpc] perf: Disable pagefaults during callchain stack read (Jiri Olsa) [804569]
  - [tools] selftests: mqueue mq_perf_tests checkpatch fixes (Doug Ledford) [750260]
  - [ipc] mqueue: strengthen checks on mqueue creation fix (Doug Ledford) [750260]
  - [misc] rbtree: backport rb_init_node() (Doug Ledford) [750260]
  - [tools] selftests: add mq_perf_tests (Doug Ledford) [750260]
  - [tools] selftests: add mq_open_tests (Doug Ledford) [750260]
  - [ipc] mqueue: strengthen checks on mqueue creation (Doug Ledford) [750260]
  - [ipc] mqueue: correct mq_attr_ok test (Doug Ledford) [750260]
  - [ipc] mqueue: improve performance of send/recv (Doug Ledford) [750260]
  - [watchdog] iTCO_wdt: default SMI clearing to old behaviour (Prarit Bhargava) [727875 811324]
  - [watchdog] iTCO_wdt: problems with newer hardware due to SMI clearing (Prarit Bhargava) [727875 811324]
  - [sound] alsa: fix Conexant CX20561 audio mute functionality (Jaroslav Kysela) [816569]
  - [s390] kdump: Use 4 GiB for KEXEC_AUTO_THRESHOLD (Hendrik Brueckner) [815599]
  - [net] bonding: verify for NULL when getting bridge from bond_dev->br_port (Veaceslav Falico) [816034 817145]
  - [md] dm-mpath: only try to load the scsi_dh module if the scsi_dh doesn't exist (Mike Snitzer) [788591]
  - [virt] kvm/svm: handle adjustment of negative tsc offsets (Marcelo Tosatti) [817236]
  - [netdrv] be2net: fix programming of VLAN tags for VF (Ivan Vecera) [816013]
  - [scsi] isci: End the RNC resumption wait when the RNC is destroyed. (David Milburn) [809954]
  - [scsi] isci: Fixed RNC bug that lost the suspension or resumption during destroy (David Milburn) [809954]
  - [scsi] isci: Fix RNC AWAIT_SUSPENSION->INVALIDATING transition. (David Milburn) [809954]
  - [scsi] isci: Manage the IREQ_NO_AUTO_FREE_TAG under scic_lock. (David Milburn) [809954]
  - [scsi] isci: Remove obviated host callback list. (David Milburn) [809954]
  - [scsi] isci: Check IDEV_GONE before performing abort path operations. (David Milburn) [809954]
  - [scsi] isci: Restore the ATAPI device RNC management code. (David Milburn) [809954]
  - [scsi] isci: Don't wait for an RNC suspend if it's being destroyed. (David Milburn) [809954]
  - [scsi] isci: Change the phy control and link reset interface for HW reasons. (David Milburn) [809954]
  - [scsi] isci: Added timeouts to RNC suspensions in the abort path. (David Milburn) [809954]
  - [scsi] isci: Add protocol indicator for TMF requests. (David Milburn) [809954]
  - [scsi] isci: Directly control IREQ_ABORT_PATH_ACTIVE when completing TMFs. (David Milburn) [809954]
  - [scsi] isci: Wait for RNC resumption before leaving the abort path. (David Milburn) [809954]
  - [scsi] isci: Fix RNC suspend call for SCI_RESUMING state. (David Milburn) [809954]
  - [scsi] isci: Manage tag releases differently when aborting tasks. (David Milburn) [809954]
  - [scsi] isci: Callbacks to libsas occur under scic_lock and are synchronized. (David Milburn) [809954]
  - [scsi] isci: When in the abort path, defeat other resume calls until done. (David Milburn) [809954]
  - [scsi] isci: Implement waiting for suspend in the abort path. (David Milburn) [809954]
  - [scsi] isci: Make sure all TCs are terminated and cleaned in LUN reset. (David Milburn) [809954]
  - [scsi] isci: Manage the LLHANG timer enable/disable per-device. (David Milburn) [809954]
  - [scsi] isci: Save the suspension hint for upcoming suspensions. (David Milburn) [809954]
  - [scsi] isci: Fix the terminated I/O to not call sas_task_abort(). (David Milburn) [809954]
  - [scsi] isci: Distinguish between remote device suspension cases (David Milburn) [809954]
  - [scsi] isci: Remove isci_device reqs_in_process and dev_node from isci_device. (David Milburn) [809954]
  - [scsi] isci: Only set IDEV_GONE in the device stop path. (David Milburn) [809954]
  - [scsi] isci: All pending TCs are terminated when the RNC is invalidated. (David Milburn) [809954]
  - [scsi] isci: Device access in the error path does not depend on IDEV_GONE. (David Milburn) [809954]
  - [scsi] isci: Add suspension cases for RNC INVALIDATING, POSTING states. (David Milburn) [809954]
  - [scsi] isci: Redesign device suspension, abort, cleanup. (David Milburn) [809954]
  - [scsi] isci: Escalate to I_T_Nexus_Reset when the device is gone. (David Milburn) [809954]
  - [scsi] isci: Remote device stop also suspends the RNC and terminates I/O. (David Milburn) [809954]
  - [scsi] isci: Remote device must be suspended for NCQ cleanup. (David Milburn) [809954]
  - [scsi] isci: Manage device suspensions during TC terminations. (David Milburn) [809954]
  - [scsi] isci: Terminate outstanding TCs on TX/RX RNC suspensions. (David Milburn) [809954]
  - [scsi] isci: Handle all suspending TC completions (David Milburn) [809954]
  - [scsi] isci: Fixed bug in resumption from RNC Tx/Rx suspend state. (David Milburn) [809954]
  - [scsi] isci: Manage the link layer hang detect timer for RNC suspensions. (David Milburn) [809954]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-271.el6]
changelog:
  - [scsi] qla2xxx: Update version number to 8.04.00.04.06.3-k (Chad Dupuis) [816331]
  - [scsi] qla2xxx: Properly check for current state after the fabric-login request (Chad Dupuis) [816331]
  - [scsi] qla2xxx: Proper completion to scsi-ml for scsi status task_set_full and busy (Chad Dupuis) [816331]
  - [scsi] qla2xxx: Fix reset time out as qla2xxx not ack to reset request (Chad Dupuis) [816331]
  - [scsi] qla2xxx: Block flash access from application when device is initialized for ISP82xx (Chad Dupuis) [816331]
  - [scsi] qla2xxx: Remove resetting memory during device initialization for ISP82xx (Chad Dupuis) [816331]
  - [scsi] qla2xxx: Proper detection of firmware abort error code for ISP82xx (Chad Dupuis) [816331]
  - [scsi] qla2xxx: Additional corrections for ISP83xx support (Chad Dupuis) [816331]
  - [scsi] bfa: remove tech-preview tainting (Rob Evers) [744301]
  - [input] wacom: add support for Cintiq 24HD (Aristeu Rozanski) [773052]
  - [netdrv] bna: remove tech-preview status (Ivan Vecera) [744302]
  - [net] xfrm: impement kabi work-arounds for alg_trunc_len (Jarod Wilson) [768460]
  - [net] xfrm: Add SHA384 and SHA512 HMAC authentication algorithms to XFRM (Jarod Wilson) [768460]
  - [net] xfrm: Use the user specified truncation length in ESP and AH (Jarod Wilson) [768460]
  - [net] xfrm: Store aalg in xfrm_state with a user specified truncation length (Jarod Wilson) [768460]
  - [net] xfrm: Define new XFRM netlink auth attribute with specified truncation bits (Jarod Wilson) [768460]
  - [scsi] bxn2fc: Bumped version to 1.0.11 (Mike Christie) [813065]
  - [scsi] bnx2fc: cleanup task management IO when it times out. (Mike Christie) [813065]
  - [scsi] bnx2fc: Decrememnt io ref count when abort times out (Mike Christie) [813065]
  - [scsi] bnx2fc: Allow FLOGI to be retried when receiving bad responses. (Mike Christie) [813065]
  - [netdrv] be2net: Ignore status of some ioctls during driver load (Ivan Vecera) [818561]
  - [netdrv] be2net: Fix wrong status getting returned for MCC commands (Ivan Vecera) [818561]
  - [netdrv] be2net: Fix traffic stall INTx mode (Ivan Vecera) [818561]
  - [netdrv] be2net: Fix FW download in Lancer (Ivan Vecera) [818561]
  - [netdrv] be2net: enable RSS for ipv6 pkts (Ivan Vecera) [818561]
  - [s390] af_iucv: allow shutdown for HS transport sockets (Hendrik Brueckner) [815273]
  - [infiniband] cxgb4: handle wake up waiters and add check for invalid endpoint (Steve Best) [811023]
  - [drm] radeon: deal with errors from framebuffer init path (Dave Airlie) [736376]
  - [fs] proc: restore "huge" tag for hugetlb vmas in numa_maps (Larry Woodman) [818746]
  - [fs] proc: teach /proc/$pid/numa_maps about transparent hugepages (Larry Woodman) [818746]
  - [fs] proc: break out numa_maps gather_pte_stats() checks (Larry Woodman) [818746]
  - [fs] proc: make /proc/$pid/numa_maps gather_stats() take variable page size (Larry Woodman) [818746]
  - [fs] proc: allocate storage for numa_maps statistics once (Larry Woodman) [818746]
  - [fs] proc: make struct proc_maps_private truly private (Larry Woodman) [818746]
  - [fs] proc: move show_numa_map() to fs/proc/task_mmu.c (Larry Woodman) [818746]
  - [mm] mempolicy: declare mpol_to_str() when CONFIG_TMPFS=n (Larry Woodman) [818746]
  - [mm] mempolicy: remove check_huge_range() (Larry Woodman) [818746]
  - [mm] mempolicy: make gather_stats() type-safe and remove forward declaration (Larry Woodman) [818746]
  - [mm] mempolicy: remove MPOL_MF_STATS (Larry Woodman) [818746]
  - [mm] mempolicy: use walk_page_range() instead of custom page table walking code (Larry Woodman) [818746]
  - [mm] mempolicy: export get_vma_policy() (Larry Woodman) [818746]
  - [block] mtip32xx: fix missing mtip32xx.ko in installer initrd (Shyam Iyer) [819947]
  - [input] wacom: add LED support for Cintiq 24HD (Aristeu Rozanski) [808315]
  - [input] wacom: make LED status readable through sysfs (Aristeu Rozanski) [808315]
  - [input] wacom: add LED support for Cintiq 21ux2 (Aristeu Rozanski) [808315]
  - [input] wacom: add interface to control LEDs in Wacom tablets (Aristeu Rozanski) [808315]
  - [vhost] net: fix possible NULL pointer dereference of vq->bufs (Jason Wang) [814288] {CVE-2012-2119}
  - [net] macvtap: validate zerocopy vectors before building skb (Jason Wang) [814288] {CVE-2012-2119}
  - [net] macvtap: set SKBTX_DEV_ZEROCOPY only when skb is built successfully (Jason Wang) [814288] {CVE-2012-2119}
  - [net] macvtap: put zerocopy page when fail to get all requested user pages (Jason Wang) [814288] {CVE-2012-2119}
  - [net] macvtap: fix zerocopy offset calculation when building skb (Jason Wang) [814288] {CVE-2012-2119}
  - [netdrv] be2net: Fix EEH error reset before a flash dump completes (Ivan Vecera) [818568]
  - [netdrv] be2net: cancel be_worker during EEH recovery (Ivan Vecera) [818568]
  - [net] bonding: assign slaves their own vlan_groups (Neil Horman) [804232]
  - [net] vlan: Add helper functions to manage vlans on bonds and slaves (Neil Horman) [804232]
  - [virt] kvm: Fix kvm_arch_vcpu_put() crash with vmm_exclusive=0 (Avi Kivity) [704173]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-272.el6]
changelog:
  - [md] bitmap: ensure to load bitmap when creating via sysfs (Jes Sorensen) [821329]
  - [infiniband] mlx4: fix RoCE oops (Doug Ledford) [749059]
  - [x86] setup: Add rh_check_supported() (Prarit Bhargava) [821561]
  - [mm] read_pmd_atomic: fix pmd_populate SMP race condition (Andrea Arcangeli) [820762] {CVE-2012-1179}
  - [drm] i915: add Ivy Bridge GT2 Server entries (Dave Airlie) [817926]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-273.el6]
changelog:
  - [s390] qeth: remove siga retry for HiperSockets devices (Hendrik Brueckner) [817090]
  - [scsi] lpfc: Changed version number to 8.3.5.68.5p (Rob Evers) [821515]
  - [scsi] lpfc: Fixed system crash due to not providing SCSI error-handling host reset handler (Rob Evers) [821515]
  - [scsi] lpfc: Correct handling of SLI4-port XRI resource-provisioning profile change (Rob Evers) [821515]
  - [scsi] lpfc: Fix driver crash during back-to-back ramp events. (Rob Evers) [821515]
  - [scsi] lpfc: Fixed system panic due to midlayer abort and driver complete race on SCSI cmd (Rob Evers) [821515]
  - [scsi] sd: Fix device removal NULL pointer dereference (Rob Evers) [817853]
  - [md] Add del_timer_sync to mddev_suspend, fixes a panic (Jonathan E Brassow) [818371]
  - [virt] virtio_net: invoke softirqs after __napi_schedule (Michael S. Tsirkin) [819435]
  - [virt] virtio_net: do not reschedule rx refill forever (Michael S. Tsirkin) [819435]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-274.el6]
changelog:
  - [net] sunrpc: fix loss of task->tk_status after rpc_delay call in xprt_alloc_slot (Jeff Layton) [822189]
  - [net] sunrpc: suppress page allocation warnings in xprt_alloc_slot() (Jeff Layton) [822189]
  - [net] netfilter: Fix ip_route_me_harder triggering ip_rt_bug (Jiri Benc) [812108]
  - [net] netfilter/tproxy: do not assign timewait sockets to skb->sk (Jiri Benc) [812108]
  - [usb] Don't fail USB3 probe on missing legacy PCI IRQ (Don Zickus) [812254]
  - [usb] Fix handoff when BIOS disables host PCI device (Don Zickus) [812254]
  - [usb] Remove duplicate USB 3.0 hub feature #defines (Don Zickus) [812254]
  - [usb] Set hub depth after USB3 hub reset (Don Zickus) [812254]
  - [usb] xhci: Fix encoding for HS bulk/control NAK rate (Don Zickus) [812254]
  - [usb] Fix issue with USB 3.0 devices after system resume (Don Zickus) [812254]
  - [virt] xenpv: avoid paravirt __pmd in read_pmd_atomic (Andrew Jones) [822697]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-275.el6]
changelog:
  - [net] bridge: fix broadcast flood regression (Jesper Brouer) [817157]
  - [ipc] mqueue: use correct gfp flags in msg_insert (Doug Ledford) [750260]
  - [security] fix compile error in commoncap.c (Eric Paris) [806726] {CVE-2012-2123}
  - [security] fcaps: clear the same personality flags as suid when fcaps are used (Eric Paris) [806726] {CVE-2012-2123}
  - [fs] proc: Fix vmstat crashing with trap divide error (Larry Woodman) [820507]
  - [net] rds: fix rds-ping inducing kernel panic (Jay Fenlason) [803936] {CVE-2012-2372}
  - [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [814504] {CVE-2012-2136}
  - [virt] kvm: Fix buffer overflow in kvm_set_irq() (Avi Kivity) [816155] {CVE-2012-2137}


author: Jarod Wilson <jarod@redhat.com> [2.6.32-277.el6]
changelog:
  - [scsi] be2iscsi: fix dma free size mismatch regression (Mike Christie) [824287]
  - [scsi] libsas: check dev->gone before submitting sata i/o (David Milburn) [824025]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-278.el6]
changelog:
  - [kernel] sysctl: silence warning about missing strategy for file-max at boot time (Jeff Layton) [803431]
  - [net] sunrpc: make new tcp_max_slot_table_entries sysctl use CTL_UNNUMBERED (Jeff Layton) [803431]
  - [drm] i915: set AUD_CONFIG N_value_index for DisplayPort (Dave Airlie) [747890]
  - [scsi] scsi_lib: fix scsi_io_completion's SG_IO error propagation (Mike Snitzer) [827163]
  - [fs] nfs: Fix corrupt read data after short READ from server (Sachin Prabhu) [817738]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.4.1.el6]
changelog:
  - [fs] proc: stats: Use arch_idle_time for idle and iowait times if available (Steve Best) [841579 841149]
  - [drm] i915: fix integer overflow in i915_gem_execbuffer2() (Jacob Tanenbaum) [824553 824555] {CVE-2012-2383}
  - [usb] core: change the memory limits in usbfs URB submission (Don Zickus) [841667 828271]
  - [usb] core: unify some error pathways in usbfs (Don Zickus) [841667 828271]
  - [netdrv] ixgbe: BIT_APP_UPCHG not set by ixgbe_copy_dcb_cfg() (Andy Gospodarek) [840156 814044]
  - [netdrv] ixgbe: driver fix for link flap (Andy Gospodarek) [840156 814044]
  - [net] bridge: Fix enforcement of multicast hash_max limit (Thomas Graf) [840023 832575]
  - [net] bluetooth: fix sco_conninfo infoleak (Jacob Tanenbaum) [681307 681308] {CVE-2011-1078}
  - [wireless] ipw2200: remove references to CFG80211_WEXT config option (John Linville) [841406 839311]
  - [netdrv] be2net: enable GRO by default (Ivan Vecera) [838821 837230]
  - [virt] kvm/vmx: Fix KVM_SET_SREGS with big real mode segments (Orit Wasserman) [841411 756044]
  - [fs] writeback: merge for_kupdate and !for_kupdate cases (Eric Sandeen) [832360 818172]
  - [fs] writeback: fix queue_io() ordering (Eric Sandeen) [832360 818172]
  - [fs] writeback: don't redirty tail an inode with dirty pages (Eric Sandeen) [832360 818172]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.6.1.el6]
changelog:
  - [net] ipv4: add RCU protection to inet->opt (Jiri Pirko) [844274 829109]
  - [net] tun: allow tap iface in netconsole'd bridge (Jiri Benc) [842984 838025]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.8.1.el6]
changelog:
  - [netdrv] e1000e: prevent oops when adapter is being closed and reset simultaneously (Dean Nelson) [847045 826375]
  - [net] tcp: clear hints to avoid a stale one (Andy Gospodarek) [846832 807704]
  - [md] dm-raid1: Fix mirror crash when discard request is sent and sync is in progress (Mikulas Patocka) [846839 837607]
  - [netdrv] bond_alb: don't disable softirq under bond_alb_xmit (Jiri Pirko) [846216 841987]
  - [x86] ioapic: Fix kdump race with migrating irq (Don Zickus) [812962 783322]
  - [net] rds: set correct msg_namelen (Weiping Pan) [822729 822731] {CVE-2012-3430}
  - [x86] amd_iommu: Fix SRIOV and hotplug devices (Stefan Assmann) [846838 832009]
  - [mm] hugetlb: fix resv_map leak in error path (Motohiro Kosaki) [824350 824351] {CVE-2012-2390}
  - [netdrv] dl2k: fix unfiltered netdev rio_ioctl access by users (Jacob Tanenbaum) [818824 818825] {CVE-2012-2313}
  - [drm] i915: fix integer overflow in i915_gem_do_execbuffer() (Jacob Tanenbaum) [824561 824563] {CVE-2012-2384}
  - [virt] kvm: handle last_boosted_vcpu = 0 case (Rik van Riel) [847042 827031]
  - [md] raid5: Reintroduce locking in handle_stripe() to avoid racing (Jes Sorensen) [846836 828065]
  - [kernel] timekeeping: Fix leapsecond triggered load spike issue (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] hrtimer: Provide clock_was_set_delayed() (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] ntp: Add ntp_lock to replace xtime_locking (Prarit Bhargava) [847366 840950 836803 836748]
  - [fs] proc/stat: fix whitespace damage in use arch_idle_time patch (Steve Best) [841579 841149]


author: Doug Ledford <dledford@redhat.com> - 1.2-11
changelog:
  - Upstream has updated the tarball without updating the version, so we
    grabbed the one from the OFED-1.3.2-20080728.0355 tarball
  - Resolves: bz451481


author: Doug Ledford <dledford@redhat.com> - 1.2-13.el5
changelog:
  - Update to ofed 1.4.1 final bits
  - Rebuild against non-XRC libibverbs
  - Related: bz506097, bz506258


author: Doug Ledford <dledford@redhat.com> - 1.3.0-1
changelog:
  - Update to latest upstream release (1.2.3 -> 1.3.0)
  - Strip rocee related code out of upstream update
  - Add a buildrequires on libibumad because upstream needs it now
  - Fix lack of build on i686
  - Related: bz725016
  - Resolves: bz724896


author: Doug Ledford <dledford@redhat.com> - 1.3.0-2
changelog:
  - Update to latest upstream release
  - No longer strip rocee related code out, we can compile with it now
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 2.0-1
changelog:
  - Update to latest upstream release
  - We had to drop ib_clock_test program as no equivalent exists
    in the latest release
  - Resolves: bz806183, bz806185, bz830099


author: Doug Ledford <dledford@redhat.com> - 2.0-2
changelog:
  - Fix rpmdiff detected error.  Upstream overrode our cflags so stack
    protector got turned off.
  - Related: bz806183


author: Michal Schmidt <mschmidt@redhat.com> - 3.0-2.0.16.gb2f2e82
changelog:
  - Respect distro CFLAGS, restore fortification.
  - debuginfo package had executable source files.
  - Related: bz1127235, bz1129312


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-132
changelog:
  - Resolves: #767608 - Fix memory leak when accessing non-matched named
    capturing groups
  - Resolves: #839788 - Do not crash if declared DESTROY method has not been
    defined


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-133
changelog:
  - Resolves: #698552 - Correct taintedness tests
  - Resolves: #825713 - Fix find2perl to translate ? glob properly
  - Resolves: #810469 - Upgrade IO-Compress, Compress-Raw-Bzip2, and
    Compress-Raw-Zlib to 2.021
  - Resolves: #819042 - Set default output for Pod::Man and Pod::Text
    parse_file() methods
  - Resolves: #905482 - Require glibc-devel, gdbm-devel, db4-devel by perl-devel


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-134
changelog:
  - Resolves: #973022 - Make non-option handler for Getopt::Long::GetOptions()
    compatible with XML::Simple


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-138
changelog:
  - Fix backslash interpolation in Locale::Maketext (bug #1025906)
  - Do not ignore single-letter-named packages by Module::Plugable (bug #1086215)
  - Run-require exact version of perl-libs by perl-suidperl (bug #1161170)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.10.1-143
changelog:
  - Fix typo in name of the signal PIPE in IPC::Cmd (bug #1315053)
  - Fix crash in httpd mod_perl Perl_sv_pvn_force_flags (bug #1364206)


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 5.10.1-146.tuxcare.els3
changelog:
  - CVE-2020-12723: fix a buffer overflow caused by a crafted regular expression
    because of recursive S_study_chunk calls


author: Robin Norwood <rnorwood@redhat.com> - 1.20-2
changelog:
  - Resolves: rhbz#226240
  - Incorporate changes from Steven Pritchard's package review
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - Remove check macro cruft.
  - Update build dependencies.
  - Package LICENSE.
  - BR unzip, zip for better test coverage.


author: Steven Pritchard <steve@kspei.com> 2.11-1
changelog:
  - Update to 2.11.
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to resemble cpanspec output.
  - Drop explicit perl build dependency.


author: Steven Pritchard <steve@kspei.com> 1.28-2
changelog:
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - Remove check macro cruft.
  - Remove redundant BR perl.
  - BR ExtUtils::MakeMaker, Test::More, Test::Pod, and Test::Pod::Coverage.
  - Patch t/setrlimit.t to fix bogus test failure.
  - Set OPTIMIZE when running Makefile.PL, not make.


author: Robin Norwood <rnorwood@redhat.com> 6.4-4
changelog:
  - Resolves: rhbz#247212
  - Fix broken perl_provides script - it was removing both the versioned
    and unversioned Provides: perl(Bit::Vector)


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.23-3
changelog:
  - Unconditionally BR: perl(Test::CPAN::Meta).
  - Adjust minimum perl version in META.yml (Add Class-Inspector-1.23.diff).


author: Steven Pritchard <steve@kspei.com> 1.4-1
changelog:
  - Update to 1.4.
  - Update License tag.
  - Drop our copy of the license text.
  - Improve Summary.
  - Make description match cpanspec output.
  - BR Test::More.


author: Ville Skyttä <ville.skytta@iki.fi> - 2.42-1
changelog:
  - 2.42.
  - Patch test suite to use system installed Tie::IxHash.
  - Fix some spelling errors in %description.
  - Use Source0: instead of Source:.


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.52-1
changelog:
  - 2.52 bump, specify all dependencies
  - Resolves: #658946 - Stop error reporting when config is a directory


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0.21-1
changelog:
  - Update to 0.21.
  - Corrected several changelog entries.
  - Removed an explicit perl(Convert::ASN1) provides.


author: Paul Howarth <paul@city-fan.org> 1.119-3
changelog:
  - use full paths for all commands used in build
  - use search.cpan.org download URL
  - assume rpm knows about %check and %{perl_vendorlib}
  - cosmetic spec file changes


author: Petr Pisar <ppisar@redhat.com> - 0.57-17
changelog:
  - Link to the ca-certificates ca-bundle.crt instead of shipping our own,
    outdated copy (bug #1059992)


author: Chris Weyl <cweyl@alumni.drew.edu> 1.25-1
changelog:
  - 1.25 needed for DBIx::Class 0.08103
  - auto-update to 1.25 (by cpan-spec-update 0.01)
  - added a new br on perl(File::Spec) (version 0.82)
  - altered br on perl(Test::More) (0 => 0.42)
  - added a new br on perl(DBI) (version 1.57)


author: Robin Norwood <rnorwood@redhat.com> - 1.601-1
changelog:
  - Update to latest CPAN version: 1.601
  - Fix some issues from package review:
    - patch to change #! line in script
    - make script executable
    - fix requires and buildrequires


author: Marcela Mašláňová <mmaslano@redhat.com> - 6.3-1
changelog:
  - new upstream version - noarch, because since 6.0 there were bigger
   changes like stripping this module into more of them


author: Robin Norwood <rnorwood@redhat.com> - 5.44-2
changelog:
  - Add support for KRAT and KRAST timezones
  - Include magic dist tag in release
  - Resolves: rhbz#214709
  - Related: rhbz#100786


author: Robin Norwood <rnorwood@redhat.com> - 5.44-4
changelog:
  - Apply patch to use date +%z as possible source for timezone data
  - Fix license tag
  - Add TODO and HISTORY to %doc list


author: Ed Avis <eda@waniasset.com> - 5.48-1
changelog:
  - Update to 5.48.
  - rhbz#214709 Krasnoyarsk patch now upstream.
  - Changed name to Date-Manip as now used on CPAN.


author: Petr Pisar <ppisar@redhat.com> - 6.24-1
changelog:
  - Rebase to version 6.24 (bug #672934)
  - Patch perl-Date-Manip-5.48-datez-rhbz248500.patch inlcuded in upstream
    already.
  - Move to core Perl path to comply with RHEL Developer Guide


author: Steven Pritchard <steve@kspei.com> 1:0.4302-1
changelog:
  - Update to DateTime 0.4302.
  - Update to DateTime::TimeZone 0.77.
  - Update to DateTime::Locale 0.4001.
  - BR List::MoreUtils.
  - Define IS_MAINTAINER so we run the pod tests.


author: Steven Pritchard <steve@kspei.com> 1:0.4304-1
changelog:
  - Update to DateTime 0.4304.
  - Update to DateTime::TimeZone 0.78.
  - Update to DateTime::Locale 0.41.


author: Steven Pritchard <steve@kspei.com> 1:0.4401-1
changelog:
  - Update to DateTime 0.4401.
  - Update to DateTime::Locale 0.42.
  - Update to DateTime::TimeZone 0.8301.


author: Stepan Kasal <skasal@redhat.com> - 1:0.5300-1
changelog:
  - new upstream version
  - use Build.PL as Makefile.PL no longer exists
  - use iconv to recode to utf-8, not a patch
  - update BuildRequires
  - drop Provides: perl(DateTime::TimeZoneCatalog), it is no longer there
  - use filtering macros


author: Steven Pritchard <steve@kspei.com> 1.09-1
changelog:
  - Update to 1.09.
  - Reformat to match cpanspec output.
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.


author: Ville Skyttä <ville.skytta at iki.fi> - 2.11-2
changelog:
  - Sync with latest rpmdevtools perl spec template.
  - BuildRequire perl(ExtUtils::MakeMaker).
  - Convert docs to UTF-8.


author: Steven Pritchard <steve@kspei.com> 1:0.17011-1
changelog:
  - Update to 0.17011.
  - Canonicalize Source0 URL.
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - Improve Summary.
  - Reformat to match cpanspec output.
  - Build with Module::Build.


author: Steven Pritchard <steve@kspei.com> 1.23-2
changelog:
  - Canonicalize Source0 URL.
  - Fix find option order.
  - Drop executable bit from Exception/Class.pm to avoid a rpmlint warning.


author: Steven Pritchard <steve@kspei.com> 1.24-1
changelog:
  - Update to 1.24.
  - Bump Devel::StackTrace dependency to 1.17.
  - Clean up to match current cpanspec output.
  - Improve Summary and description.
  - Build with Module::Build.
  - BR Test::Pod and Test::Pod::Coverage and define IS_MAINTAINER.


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 0.45-1
  ⌖ Fedora 10 alpha general package cleanup
  ⚖ Upstream needs to relicense fast to avoid culling


author: Robin Norwood <rnorwood@redhat.com> - 0.07b4-3
changelog:
  - Various fixes from package review:
  - Remove BR: perl
  - Use dist tag in release
  - Resolves: bz#226258


author: Tom "spot" Callaway <tcallawa@redhat.com> - 2.35-7
changelog:
  - tests work fine locally, one fails in mock, maybe needs a desktop? 
    conditionalized them, default off.


author: Stepan Kasal <skasal@redhat.com> - 2.44-1
changelog:
  - new upstream version
  - run tests always
  - do not add bdf_scripts/ to docs
  - switch off the test that fails in i686 koji


author: Steven Pritchard <steve@kspei.com> 0.24-2
changelog:
  - Update License tag.
  - Use fixperms macro instead of our own chmod incantation.
  - Source in /etc/profile.d/krb5-devel.sh to get our path right.


author: Steven Pritchard <steve@kspei.com> 0.26-1
changelog:
  - Update to 0.26.
  - Cleanup a little to more closely match cpanspec output.
  - BR ExtUtils::MakeMaker.


author: CloudLinux Packaging Team <packager@cloudlinux.com> - 0.26-5
changelog:
  - Do not source /etc/profile.d/krb5-devel.sh since krb5-devel does not
    provide it and places executables into standard PATH.


author: Petr Pisar <ppisar@redhat.com> - 0.26-6
changelog:
  - Do not source /etc/profile.d/krb5-devel.sh as krb5-devel-1.8.1-6 does not
    provide it and places executables into standard PATH (Resolves: #657274)


author: Ralf Corsepius <corsepiu@fedoraproject.org> - 0.20-6
changelog:
  - Add Hook-LexWrap-0.20-cpan-rt-38892.diff to fix
    http://rt.cpan.org/Public/Bug/Display.html?id=38892
    (Bugs shows while building rt3).


author: Paul Howarth <paul@city-fan.org> - 0.21-1
changelog:
  - Update to 0.21
  - New upstream maintainer => new source URL
  - Add buildreqs perl(Test::More) and perl(Test::Pod)
  - Update patch for CPAN RT#38892 to apply without fuzz
  - Fix argument order for find with -depth


author: Ralf Corsepius <corsepiu@fedoraproject.org> - 0.22-1
changelog:
  - Upstream update.
  - Reflect upstream having fixed CPAN RT#38892:
    Remove Hook-LexWrap-0.21-cpan-rt-38892.diff.
  - Reflect upstream having fixed permissions.


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26 (verify_hostname_of_cert matched only the prefix for the
    hostname when no wildcard was given, e.g. www.example.org matched against a
    certificate with name www.exam in it [#509819])


author: Paul Howarth <paul@city-fan.org> - 1.27-1
changelog:
  - Update to 1.27
    - various regex fixes for i18n and service names
    - fix warnings from perl -w (CPAN RT#48131)
    - improve handling of errors from Net::ssl_write_all


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30 (fix memleak when SSL handshake failed)
  - Add buildreq procps needed for memleak test


author: Robin Norwood <rnorwood@redhat.com> - 1.08-3
changelog:
  - Fix various package review issues:
  - Remove BR: perl
  - Remove "|| :" from check section
  - Add dist tag
  - Fix Source URL
  - Fix old changelog entries
  - Resolves: bz#226265


author: Paul Howarth <paul@city-fan.org> 2.110-3
changelog:
  - use search.cpan.org download URL
  - use full paths for all commands used in build
  - assume rpm knows about %check and %{perl_vendorlib}
  - cosmetic spec file changes


author: Steven Pritchard <steve@kspei.com> 0.82-1
changelog:
  - Update to 0.82.
  - Use fixperms macro instead of our own chmod incantation.
  - Fix Source0 URL.
  - BR Test::More.
  - Include LICENSE, README, and abuse/ in docs.
  - Cleanup to more closely resemble cpanspec output.


author: Tom "spot" Callaway <tcallawa@redhat.com> - 0.042-2
changelog:
  - fix license tag (technically, it was correct before, but this keeps rpmlint from
    flagging this package as a false positive)


author: Robin Norwood <rnorwood@redhat.com> - 1:0.33-3
changelog:
  - Bugzilla: 207430
  - Incorporate fixes from Jose Oliveira's patch
  - Add perl(IO::Socket::SSL) as a BuildRequires as well
  - Other cleanups from Jose


author: Robin Norwood <rnorwood@redhat.com> - 1:0.34-3
changelog:
  - Resolves: bz#226267
  - Only filter out the unversioned Provides: perl(Net::LDAP::Filter) to
    avoid breaking dependencies.


author: Petr Pisar <ppisar@redhat.com> - 1:0.40-2
changelog:
  - Do not set SSL ciphers at all by default (bug #1090966)
  - Pass actual length to syswrite() instead of default 1500 B (bug #1104069)


author: Paul Howarth <paul@city-fan.org> 5.425-1
changelog:
  - Update to 5.425
  - Add note about File::Temp requirement
  - New upstream maintainer -> updated URL for source
  - Given that this package will not build on old distributions, don't cater
    for handling old versions of MIME::QuotedPrint in %check and buildreq
    perl(MIME::Base64) >= 3.03
  - Buildreq perl(File::Path) >= 1, perl(File::Spec) >= 0.6, and
    perl(IO::Stringy) >= 2.110
  - Only include README as %doc, not README*
  - Dispense with provides filter, no longer needed


author: Paul Howarth <paul@city-fan.org> 5.426-1
changelog:
  - Update to 5.426
  - Now require File::Temp >= 0.18
  - Add POD tests, coverage disabled because of lack of coverage from upstream


author: Paul Howarth <paul@city-fan.org> 1.76-1
changelog:
  - Update to 1.76
  - Add comment text about the patch for fixing CPAN RT#20726
  - BuildRequire perl(ExtUtils::MakeMaker) rather than perl-devel


author: Paul Howarth <paul@city-fan.org> 2.02-1
changelog:
  - Update to 2.02
  - Remove buildreqs perl(Net::SMTP) and perl(Net::Domain), bundled with perl
  - Add buildreqs perl(Date::Format), perl(Date::Parse), perl(Test::More), and
    perl(Test::Pod)
  - Remove patch for CPAN RT#20726, now fixed upstream
  - Buildreq perl >= 5.8.1
  - Tweak files list to mark pod files as %doc
  - Fix character encoding for ChangeLog


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.91-3
changelog:
  - dist_file.txt wasn't packaged -> removed, it's needed only for test of build
  - Resolves: rhbz#550011


author: Steven Pritchard <steve@kspei.com> 0.81-1
changelog:
  - Update to 0.81.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.
  - BR ExtUtils::MakeMaker.


author: Chris Weyl <cweyl@alumni.drew.edu> 0.95-1
changelog:
  - auto-update to 0.95 (by cpan-spec-update 0.01)
  - add perl_default_filter (pro forma)
  - altered br on perl(ExtUtils::MakeMaker) (0 => 6.42)


author: Rich Megginson <rmeggins@redhat.com> - 1.5.2-6.2
changelog:
  - fixes for RHEL-6 pkgwrangler review
  - Makefile.PL.rpm is not an upstream source
  - Source URL was pointing to the wrong location
  - change Release so dist tag is last


author: Rich Megginson <rmeggins@redhat.com> - 1.5.3-1
changelog:
  - new version 1.5.3 with openldap support
  - Resolves: bug 610902 - Modify perl-Mozilla-LDAP to use open ldap library


author: Marcela Maslanova <mmaslano@redhat.com> - 0.63-4
changelog:
  - 437681 remove previous patch and use upstream patch, which should solve
          all problems with noisy logs.


author: Chris Weyl <cweyl@alumni.drew.edu> 2.0-5
changelog:
  - disable tests which will fail under mock
  - remove execute bits from files which shouldn't have them
  - include additional buildreq of perl(Time::Timezone)
  - also include perl(Time::Timezone) as a requires, as it provides optional
    functionality and is not picked up by the autoreq/prov scripts.


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.0-9
changelog:
  - fix license tag (technically, it was correct before, but this change prevents
    rpmlint from flagging it as bad in a false positive)


author: Paul Howarth <paul@city-fan.org> - 1.35-1
changelog:
  - update to 1.35
  - drop flag and patch for enabling/disabling external tests - patch now upstream
  - external hosts patch no longer needed as we don't do external tests
  - filter out unversioned provide for perl(Net::SSLeay)
  - use the distro openssl flags rather than guessing them


author: Paul Howarth <paul@city-fan.org> - 1.35-7
changelog:
  - update to svn trunk (rev 252), needed due to omission of MD2 functionality
    from OpenSSL 1.0.0 (CPAN RT#48916)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.03-7
changelog:
  - Fix bug 226273:
    * Add dist tag.
    * Fix rpmlint errors for %description.
    * Remove MANIFEST from package.
  - General clean up of spec file.


author: Chris Weyl <cweyl@alumni.drew.edu> 1.02-1
changelog:
  - update to 1.02
  - note license change:  perl to LGPL
  - switched over to Build.PL; misc spec file cleanups


author: Chris Weyl <cweyl@alumni.drew.edu> 0.103-1
changelog:
  - auto-update to 0.103 (by cpan-spec-update 0.01)
  - added a new br on perl(ExtUtils::MakeMaker) (version 6.42)


author: Steven Pritchard <steve@kspei.com> 1.6-1
changelog:
  - Update to 1.6.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.


author: Ralf Corsépius <rc040203@freenet.de> - 0.33-1
changelog:
  - Upstream update.
  - Conditionally BR: perl(Test::CPAN::Meta).
  - Hack testsuite to accept Test::CPAN::Meta != 0.07.


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 0.35-1
changelog:
  - Upstream update.
  - Remove BuildArch: noarch (package now is arch'ed).
  - Remove testsuite hack to accept perl(Test::CPAN::Meta) != 0.07.


author: Robin Norwood <rnorwood@redhat.com> - 1.95.1-3
changelog:
  - Apply fixes from package review:
    - Remove BR: perl
    - Use iconv to convert file to utf-8
    - Include BR: perl(Test::Pod)
    - Fix old changelog entry
  - Resolves: bz#226274


author: Chris Weyl <cweyl@alumni.drew.edu> 1.962.2-1
changelog:
  - updated for latest GA SQL::Translator
  - add default filtering
  - auto-update to 1.962.2 (by cpan-spec-update 0.01)
  - added a new br on perl(Text::Balanced) (version 0)


author: Chris Weyl <cweyl@alumni.drew.edu> 1.098-1
changelog:
  - "neaten" filtering
  - auto-update to 1.098 (by cpan-spec-update 0.01)
  - added a new br on perl(strict) (version 0)
  - added a new br on perl(Scalar::Util) (version 0)
  - added a new br on perl(File::Temp) (version 0)
  - added a new br on perl(Pod::Usage) (version 0)
  - added a new br on perl(File::Find) (version 0)
  - added a new br on perl(PPI::Token::Whitespace) (version 1.203)
  - added a new br on perl(charnames) (version 0)
  - added a new br on perl(PPI::Document::File) (version 1.203)
  - added a new br on perl(File::Spec::Unix) (version 0)
  - added a new br on perl(List::Util) (version 0)
  - added a new br on perl(lib) (version 0)
  - added a new br on perl(Getopt::Long) (version 0)
  - added a new br on perl(Exporter) (version 0)
  - added a new br on perl(Test::More) (version 0)
  - added a new br on perl(overload) (version 0)
  - added a new br on perl(base) (version 0)
  - added a new br on perl(version) (version 0)
  - added a new br on perl(Carp) (version 0)
  - added a new br on perl(warnings) (version 0)
  - added a new br on perl(PPI::Document) (version 1.203)
  - added a new br on perl(File::Basename) (version 0)
  - added a new br on perl(PPI::Token::Quote::Single) (version 1.203)
  - added a new br on perl(File::Spec) (version 0)
  - added a new br on perl(File::Path) (version 0)
  - added a new br on perl(Pod::PlainText) (version 0)
  - added a new br on perl(Pod::Select) (version 0)
  - added a new br on perl(PPI::Node) (version 1.203)
  - added a new br on perl(English) (version 0)


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.105-2
changelog:
  - remove optional BR, and switch off author tests. aspell is here only for
   author test.
  - rhbz#586154
  - Related: rhbz#543948


author: Steven Pritchard <steve@kspei.com> 0.19-1
changelog:
  - Update to 0.19.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.


author: Paul Howarth <paul@city-fan.org> - 0.20-1
changelog:
  - Update to 0.20 (test updates)
  - No README in upstream distribution
  - BR: perl(Test::More)
  - More specific files list


author: Chris Weyl <cweyl@alumni.drew.edu> 1.03-6
changelog:
  - add explict requires on perl(Readonly::XS).  perl(Readonly::XS) is available
    for all architectures fedora supports, so there's no good reason to not
    require it.
  - spec file rework


author: Chris Weyl <cweyl@alumni.drew.edu> 1.05-1
changelog:
  - update to 1.05
  - filter our provides to prevent private lib from showing up
  - drop patch1; incorporated upstream as of 1.05


author: Ondrej Vasik <ovasik@redhat.com> - 1.03ii-16.3
changelog:
  - added dist tag
  - License to GPL+
  - spec file cleanup (all things from merge review by pnemade #226278)


author: Lubomir Rintel <lkundrak@v3.sk> - 0.710.08-1
changelog:
  - New upstream release
  - Enable tests
  - Include examples in documentation
  - Don't grab in dependencies of exotic transports (for the sake
    of consistency with existing practice of Jabber transport)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 0.710.08-3
changelog:
  - Filter out perl(LWP::Protocol) Provides, which comes from a file
    not stored in Perl's search path for modules (#472359).


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.710.10-3
changelog:
  - if ENV(MOD_PERL) is defined, then standard read insted of sysread must
    be used.
  - Resolves: rhbz#748376


author: Paul Howarth <paul@city-fan.org> 1.4-3
changelog:
  - fix typo in %summary and tidy up %description
  - remove redundant dependency on perl >= 1:5.6.1
  - fix argument order for find with -depth
  - drop "|| :" from %check (only required for ancient rpmbuild versions)
  - add buildreq perl(ExtUtils::MakeMaker)


author: Steven Pritchard <steve@kspei.com> 0.1901-1
changelog:
  - Update to 0.1901.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.


author: Daniel P. Berrange <berrange@redhat.com> - 0.9.10-3
changelog:
  - Fix migration speed units (rhbz #800766)
  - Fix typed param string handling (rhbz #800734)
  - Fixed block stats ref counting


author: Daniel P. Berrange <berrange@redhat.com> - 0.10.2-1
changelog:
  - Update to 0.10.2 release (rhbz #836955)
  - Fix passing flags with schedular parameters (rhbz #848309)


author: Daniel P. Berrange <berrange@redhat.com> - 0.10.2-4
changelog:
  - Fix mistakes in POD docs (rhbz #869130)
  - Fix updating of node memory params (rhbz #865310)
  - Make flags parameters optional (rhbz #873203)


author: Daniel P. Berrange <berrange@redhat.com> - 0.10.2-5
changelog:
  - Fix module type in list_all_nwfilters (rhbz #883775)
  - Fix POD doc errors in StoragePool module (rhbz #882829)
  - Fix return value checks (rhbz #886028)


author: Daniel P. Berrange <berrange@redhat.com> - 0.10.2-6
changelog:
  - Fix handling of flags in get_vcpu_info (rhbz #905836)
  - Fix handling of get_parent with NodeDev object (rhbz #908274)


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.8-1
changelog:
  - Update to 0.2.8 release (rhbz #717887)
  - Fixes missing VIR_DOMAIN_XML_SECURE binding (rhbz #705792)


author: Robin Norwood <rnorwood@redhat.com> - 2.30-3
changelog:
  - fix various issues from package review:
  - remove extra || : from %check
  - add dist tag to release
  - remove BR: perl
  - fix tabs and spacing


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.30-10
changelog:
  - remove the last test, which lead to hang-up of test suite in mock
   Test are non standart, it was need a patch.
  - Resolves: rhbz#558919


author: Steven Pritchard <steve@kspei.com> 0.10-1
changelog:
  - Specfile autogenerated by cpanspec 1.75.
  - Enable author tests.
  - Add examples to docs.
  - BR Test::More.
  - Convert LICENSE to UTF-8.
  - Drop bogus Requires.


author: Steven Pritchard <steve@kspei.com> 0.26-1
changelog:
  - Update to 0.26.
  - Update License tag.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.
  - Drop executable bits.


author: Petr Pisar <ppisar@redhat.com> 1.01-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Add BuildRequires covered by perl package
  - Distribute examples
  - Install into perl core (i.e. do not use vendor paths)


author: Steven Pritchard <steve@kspei.com> 0.082-1
changelog:
  - Specfile autogenerated by cpanspec 1.64.
  - Fix License.
  - Drop explicit dependency on perl(Test::Tester).  (Seems to be bogus.)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0.07-1
changelog:
  - Update to 0.07.
  - Test::Builder version problem (see #205537).
  - Removed the README file (copy of the manpage).


author: Steven Pritchard <steve@kspei.com> 1.032-1
changelog:
  - Update to 1.032.
  - Use fixperms macro instead of our own chmod incantation.
  - Add LICENSE to docs.


author: Ralf Corsépius <rc040203@freenet.de> - 1.02-2
changelog:
  - Reflect license tag changes.
  - BR: perl(Test::More).
  - Remove BR: perl.
  - Add chmod -x Changes lib/Test/*pm


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11 (#477298)
  - Buildreq ExtUtils::MakeMaker, File::Spec, Test::Builder,
    Test::Builder::Tester, and Test::More (from upstream Makefile.PL)
  - Add runtime dependencies on Test::Builder and Test::Builder::Tester


author: Chris Weyl <cweyl@alumni.drew.edu> 0.21-1
changelog:
  - add perl default filter (pro forma)
  - use _fixperms incantation
  - auto-update to 0.21 (by cpan-spec-update 0.01)
  - altered br on perl(Test::Builder::Tester) (0 => 1.02)
  - altered req on perl(Test::Builder::Tester) (0 => 1.02)


author: Chris Weyl <cweyl@alumni.drew.edu> 0.72-1
changelog:
  - PERL_INSTALL_ROOT => DESTDIR, add perl_default_filter (XS module)
  - auto-update to 0.72 (by cpan-spec-update 0.01) (DBIx::Class needed a newer
    Text::CSV, which in turn can only leverage Text::CSV_XS >= 0.70)
  - added a new br on perl(ExtUtils::MakeMaker) (version 0)
  - added a new br on perl(IO::Handle) (version 0)
  - added a new br on perl(Test::Harness) (version 0)
  - added a new br on perl(Test::More) (version 0)
  - added a new br on perl(Tie::Scalar) (version 0)


author: Paul Howarth <paul@city-fan.org> - 0.85-1
changelog:
  - Update to 0.85
    - Improve date conversion in examples/csv2xls
      - New option -D allows column selection for date conversions
    - Added a note about EBCDIC data files
    - Test suite is now safe for parallel test (prove --shuffle -j6)
    - Spelling fixes
    - Real eol support for parsing streams (beyond \n, \r and \r\n)
    - Clarify doc for always_quote to not quote undef fields
    - Clarify UTF8 process for print () and combine ()
    - Fixed undefinedness of $\ in print (CPAN RT#61880)
    - Windows doesn't support STDERR redirection as used in t/80_diag
    - Internals now use warn() instead of (void)fprintf (stderr, ...)
    - The test in t/80_diag now passes on Windows
    - Better parsing for eol = \r and set as such (CPAN RT#61525)
    - Workaround for AIX cpp bug (CPAN RT#62388)
    - Version 0.77 broke MacOS exported CSV files with only \r
    - Use correct type for STRLEN (HP-UX/PA-RISC/32)
    - More code coverage
    - EOF unreliable when line-end missing at EOF
    - Implement getline_all() and getaline_hr_all()
    - Fixed another parsing issue with eol = \r (CPAN RT#61525)
    - Add is_missing ()
    - Doc overhaul
    - Fix build on OpenVMS (CPAN RT#65654)
    - Fix SetDiag () leak (CPAN RT#66453)
    - Documentation fix (CPAN RT#66905)
    - Documentation overhaul (pod links)
    - Fix spurious auto_diag warning (CPAN RT#69673)
    - Tested with 50 versions of perl, including 1.15.1
    - NAME / DISTNAME in Makefile.PL
    - More cross-checks for META data
  - Fix shellbangs in example scripts
  - Comment fixes done in %prep
  - Use macros in a consistent and approved manner


author: Steven Pritchard <steve@kspei.com> 0.35-3
changelog:
  - Improve Summary, description, and Source0 URL.
  - Fix find option ordering.
  - Don't generate license texts.


author: Chris Weyl <cweyl@alumni.drew.edu> 1.37-1
changelog:
  - add filtering
  - auto-update to 1.37 (by cpan-spec-update 0.01)
  - altered br on perl(Algorithm::Diff) (0 => 1.19)
  - added a new br on perl(Exporter) (version 0)
  - added a new br on perl(Test) (version 0)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0:1.11-0.fdr.3
changelog:
  - Better summary info (bug 1353 comment #4).
  - Canonical source URL (bug 1353 comment #4).
  - Missing requirement: TeX::Hyphen (bug 1353 comment #4).
  - Replaced /usr/bin/perl by %{__perl} (bug 1353 comment #4).
  - Corrected file permissions (bug 1353 comment #4).


author: Steven Pritchard <steve@kspei.com> 1:1.16-4
changelog:
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - BR ExtUtils::MakeMaker.
  - Remove check macro cruft.


author: Robin Norwood <rnorwood@redhat.com> - 1.35-4
changelog:
  - Fix various package review issues:
  - Remove redundant BR: perl
  - remove "|| :" from %check
  - move requires filter into spec file
  - remove tabs and fix spacing


author: Robin Norwood <rnorwood@redhat.com> - 0.81-3
changelog:
  - fix various issues from package review:
  - remove || : from %check
  - remove tabs and fix spacing
  - fix encoding for README file


author: Tom "spot" Callaway <tcallawa@redhat.com> - 0.46alpha-32
changelog:
  - fix license tag with upstream confirmation
    see: http://perl-xml.cvs.sourceforge.net/perl-xml/XML-Grove/COPYING?revision=1.2&view=markup


author: Stepan Kasal <skasal@redhat.com> - 0.46alpha-34
changelog:
  - cleaned up universe vs. tab conflict
  - added an explanation why the Version tag does not conform to the rules
  - fixed the source tarball (bz2->gz), to match the upstream exactly
  - improved BuildRoot tag


author: Stepan Kasal <skasal@redhat.com> - 0.46alpha-35
changelog:
  - re-enable check, it seems to work
  - improved the explanation of the non-standard Version tag (Patrice Dumas)
  - filter out bogus and redundant reuires (Paul Howarth)
  - move -depth to the right place on find cmd line (Paul Howarth)


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.96-6
changelog:
  - post scriptlet needs to check whether the file is installed. When it isn't,
   then it's needed call for adding PurePerl parser
   http://perl-xml.sourceforge.net/faq/#parserdetails.ini


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.96-7
changelog:
  - XML-LibXML use triggers for XML::SAX update. Deleting of settings in
   ParserDetails.ini is solved by post and preun part, which create backup.
  - Resolves: rhbz#562173


author: Jason Vas Dias <jvdias@redhat.com> - 2.14-4
changelog:
  - fix bug 191911: make test fails when default Parser is XML::SAX::PurePerl -
                    succeeds when default Parser is XML::LibXML::SAX -
                    +BuildRequires: perl(XML::LibXML) perl(XML::LibXML::Common)


author: Robin Norwood <rnorwood@redhat.com> - 2.17-1
changelog:
  - Update to latest CPAN version: 2.17
  - Add BuildRequires
  - Fix macro-in-changelog rpmlint warning
  - Fix license tag


author: Chris Weyl <cweyl@alumni.drew.edu> 1.22-8
changelog:
  - add IO::Socket::SSL as a BR/R (see BZ#455344)
  - also add Net::DNS
  - make tests run if --with network-tests
  - misc spec touchups


author: Robin Norwood <rnorwood@redhat.com> - 3.29-4
changelog:
  - Resolves: rhbz#247247
  - Remove bogus Provides: perl(XML::XPathEngine::NodeSet), and move
    Requires filter into spec file.


author: Chris Weyl <cweyl@alumni.drew.edu> 3.34-1
changelog:
  - update prov/dep filtering to current guidelines
  - auto-update to 3.34 (by cpan-spec-update 0.01)
  - added a new br on perl(ExtUtils::MakeMaker) (version 0)
  - altered br on perl(XML::Parser) (0 => 2.23)


author: Chris Weyl <cweyl@alumni.drew.edu> 1.39-1
changelog:
  - auto-update to 1.39 (by cpan-spec-update 0.01)
  - added a new br on perl(File::Spec) (version 0.80)


author: Marcela Mašláňová <mmaslano@redhat.com> 5.816-1
changelog:
  - update to 5.816
  - fix #465855 - install --aliases by default
  - use upstream patch for previous problem (see rt 38736)


author: Petr Pisar <ppisar@redhat.com> - 5.833-3
changelog:
  - Implement hostname verification that is disabled by default. You can install
    IO::Socket::SSL Perl module and set PERL_LWP_SSL_VERIFY_HOSTNAME=1
    enviroment variable (or modify your application to set ssl_opts option
    correctly) to enable the verification. See LWP::UserAgent POD for more
    details. (bug #745800)


author: Petr Pisar <ppisar@redhat.com> - 5.833-4
changelog:
  - Support HTTPS_CERT_FILE and HTTPS_KEY_FILE Net::SSL environment variables
    with IO::Socket::SSL back-end (bug #1365490)


author: Petr Pisar <ppisar@redhat.com> - 5.833-5
changelog:
  - Honor HTTPS_PROXY and https_proxy Net::SSL environment variables with
    IO::Socket::SSL back-end by default (bug #1400632)


author: Robin Norwood <rnorwood@redhat.com> - 0.08-3
changelog:
  - Fix old changelog entry
  - Fix issues from package review:
  - Remove extra BR: perl
  - Remove "|| :" from check section
  - Add dist tag to release
  - Remove extra Provides: perl(Data::Grove)
  - Clean up tabs and spacing
  - Resolves: bz#226269


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 2.1-2
changelog:
  - Remove pyver define as it's not needed with the automatic python(abi).
  - Stop ghosting .pyos.
  - Let automatic python compilation take care of creating pyos.
  - Rebuild for FC6.


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 2.1-3
changelog:
  - Bump and rebuild for python 2.5 on devel.
  - Add BR: python-devel as it provides a header necessary for python modules
    on python 2.5.


author: Than Ngo <than@redhat.com> - 4.6.2-15
changelog:
  - Resolves: bz#589165
     fix multiple flaws in webkit
     CVE-2010-0047, CVE-2010-0648, CVE-2010-0656


author: Than Ngo <than@redhat.com> - 1:4.6.2-19
changelog:
  - Resolves: rhbz#679759, missing executable bit in qt-examples binaries
  - Resolves: rhbz#716694, move macros.qt4 to -devel
  - Resolves: rhbz#680088, rpmdiff failure


author: Than Ngo <than@redhat.com> - 1:4.6.2-25
changelog:
  - Resolves: bz#847866, QTabletEvent issue with multiple wacom devices
  - Resolves: bz#678604, Wrong Cursor when widget become native on X11


author: Than Ngo <than@redhat.com> - 1:4.6.2-26
changelog:
  - Resolves: CVE-2013-0254, QSharedMemory class created shared memory segments with insecure permissions


author: Remi Collet <rcollet@redhat.com> - 5.3.3-47
changelog:
  - fix wrong warning in openssl_encrypt() for missing IV
    when IV is not required #1260315
  - fix segfault's when you try and allocate an SplFixedArray
    with size >= 9999 #1071344
  - segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
  - add options to enable TLS in curl #1255920
  - fix segfault in gc_collect_cycles #1122681


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> - 5.3.3-47.el6.cloudlinux.1
changelog:
  - Fixed bug #65481 (shutdown segfault due to serialize)
  - Fixed bug #70219 (Use after free vulnerability in session deserializer) (CVE-2015-6835)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-49
changelog:
  - fix php-soap fails to connect to HTTPS web service sporadically
    as stream_socket_enable_crypto() uses NONBLOCK #1283153


author: Daniil Leonov <dleonov@cloudlinux.com> - 5.3.3-51
changelog:
  - Fix bug #69720: Null pointer dereference in phar_get_fp_offset()
  - Fix bug #70728: Type Confusion Vulnerability in PHP_to_XMLRPC_worker()
  - Fix bug #70661: Use After Free Vulnerability in WDDX Packet Deserialization
  - Fix bug #70741: Session WDDX Packet Deserialization Type Confusion Vulnerability
  - Fix bug #71459: Integer overflow in iptcembed()
  - Fix bug #71039: exec functions ignore length but look for NULL termination
  - Fix bug #71354: Heap corruption in tar/zip/phar parser.
  - Fix bug #71391: NULL Pointer Dereference in phar_tar_setupmetadata()
  - Fix bug #71323: Output of stream_get_meta_data can be falsified by its input
  - Fix bug #71498: Out-of-Bound Read in phar_parse_zipfile()
  - Fix bug #71587: Use-After-Free / Double-Free in WDDX Deserialize
  - Fix bug #71860: Invalid memory write in phar on filename with \0 in name
  - Fix bug #71798: Integer Overflow in php_raw_url_encode
  - Fix bug #72837: integer overflow in bzdecompress caused heap corruption
  - Fix bug #72681: PHP Session Data Injection Vulnerability
  - Fix bug #72807: integer overflow in curl_escape caused heap corruption
  - Fix bug #72838: Integer overflow lead to heap corruption in sql_regcase
  - Fix bug #72697: select_colors write out-of-bounds
  - Fix bug #72730: imagegammacorrect allows arbitrary write access
  - Fix bug #72836: integer overflow in base64_decode caused heap corruption
  - Fix bug #72848: integer overflow in quoted_printable_encode caused heap corruption
  - Fix bug #72849: integer overflow in urlencode caused heap corruption
  - Fix bug #72850: integer overflow in php_uuencode caused heap corruption
  - Fix bug #72771: ftps:// wrapper is vulnerable to protocol downgrade attack
  - Fix bug #72749: wddx_deserialize allows illegal memory access
  - Fix bug #72750: wddx_deserialize null dereference
  - Fix bug #72790: wddx_deserialize null dereference with invalid xml
  - Fix bug #72799: wddx_deserialize null dereference in php_wddx_pop_element
  - Fix bug #73189: Memcpy negative size parameter php_resolve_path
  - Fix bug #73150: missing NULL check in dom_document_save_html
  - Fix bug #73284: heap overflow in php_ereg_replace function
  - Fix bug #73218: stack-buffer-overflow through &quot;ResourceBundle&quot; methods
  - Fix bug #73208: integer overflow in imap_8bit caused heap corruption
  - Fix bug #73082: string length overflow in mb_encode_* function
  - Fix bug #73174: heap overflow in php_pcre_replace_impl
  - Fix bug #73276: crash in openssl_random_pseudo_bytes function
  - Fix bug #73275: crash in openssl_encrypt function
  - Fix bug #73017: memory corruption in wordwrap function
  - Fix bug #73240: Write out of bounds at number_format
  - Fix bug #73073: CachingIterator null dereference when convert to string
  - Fix bug #73293: NULL pointer dereference in SimpleXMLElement::asXML()
  - Fix bug #73356: crash in bzcompress function
  - Fix bug #72696: imagefilltoborder stackoverflow on truecolor images
  - Fix bug #73418: Integer Overflow in &quot;_php_imap_mail&quot; leads Heap Overflow
  - Fix bug #73144: Use-after-free in ArrayObject Deserialization
  - Fix bug #73192: parse_url return wrong hostname
  - Fix bug #73331: NULL Pointer Dereference in WDDX Packet Deserialization with PDORow
  - Fix bug #73452: Segfault (Regression for #69152)
  - Fix bug #73631: Invalid read when wddx decodes empty boolean element
  - Fix bug #67587: Redirection loop on nginx with FPM
  - Fix bug #71465: PHAR doesn't know about litespeed
  - Fix bug #73737: FPE when parsing a tag format
  - Fix bug #73868: Fix DOS vulnerability in gdImageCreateFromGd2Ctx()
  - Fix bug #73869: Signed Integer Overflow gd_io.c
  - Fix bug #73773: Seg fault when loading hostile phar
  - Fix bug #70436: Use After Free Vulnerability in unserialize()
  - Fix bug #74603: PHP INI Parsing Stack Buffer Overflow Vulnerability
  - Fix bug #72535: arcfour encryption stream filter crashes php
  - Fix bug #72434: ZipArchive class Use After Free Vulnerability in PHP's
    GC algorithm and unseria
  - Fix bug #72455: Heap Overflow due to integer overflows
  - Fix bug #74782: Reflected XSS in .phar 404 page
  - Fix bug #71335: Type Confusion in WDDX Packet Deserialization
  - Fix bug #76130: Heap Buffer Overflow (READ: 1786) in exif_iif_add_value
  - Fix bug #76249: stream filter convert.iconv leads to infinite loop on
    invalid sequence
  - Fix bug #76248: Malicious LDAP-Server Response causes Crash
  - Fix bug #76129: fix for CVE-2018-5712 may not be complete
  - Fix bug #75981: stack-buffer-overflow while parsing HTTP response
  - Fix bug #74385: Locale::parseLocale() broken with some arguments
  - Fix bug #76335: &quot;link(): Bad file descriptor&quot; with non-ASCII path
  - Fix bug #76383: array_map on $GLOBALS returns IS_INDIRECT
  - Fix bug #73342: Vulnerability in php-fpm by changing stdin to non-blocking
  - Fix bug #76505: array_merge_recursive() is duplicating sub-array keys
  - Fix bug #76532: Integer overflow and excessive memory usage in mb_strimwidth
  - Fix bug #76548: pg_fetch_result did not fetch the next row
  - Fix bug #76488: Memory leak when fetching a BLOB field
  - Fix bug #76665: SQLite3Stmt::bindValue() with SQLITE3_FLOAT doesn't juggle
  - Fix bug #75402: Possible Memory Leak using PDO::CURSOR_SCROLL option
  - Fix bug #76517: --with-gettext= causes configure to misjudges there is no getcwd
  - Fix bug #72443: Installing shared extensions: cp: cannot stat 'modules/*':
    No such file or dire
  - Fix bug #68175: RegexIterator pregFlags are NULL instead of 0
  - Fix bug #55146: iconv_mime_decode_headers() skips some headers
  - Fix bug #63839: iconv_mime_decode_headers function is skipping headers
  - Fix bug #60494: iconv_mime_decode does ignore special characters
  - Fix bug #68180: iconv_mime_decode can return extra characters in a header
  - Fix bug #73457: Wrong error message when fopen FTP wrapped fails to open
    data connection
  - Fix bug #74454: Wrong exception being thrown when using ReflectionMethod
  - Fix bug #74764: Bindto IPv6 works with file_get_contents but fails with
    stream_socket_client
  - Fix bug #75273: php_zlib_inflate_filter() may not update bytes_consumed
  - Fix bug #75696: posix_getgrnam fails to print details of group
  - Fix bug #76480: Use curl_multi_wait() so that timeouts are respected
  - Fix bug #76800: foreach inconsistent if array modified during loop
  - Fix bug #76886: Can't build xmlrpc with expat
  - Fix bug #76901: method_exists on SPL iterator passthrough method corrupts memory
  - Fix bug #77242: heap out of bounds read in xmlrpc_decode()
  - Fix bug #77247: heap buffer overflow in phar_detect_phar_fname_ext
  - Fix bug #77270: imagecolormatch Out Of Bounds Write on Heap
  - Fix bug #77370: Buffer overflow on mb regex functions - fetch_token
  - Fix bug #77380: Global out of bounds read in xmlrpc base64 code
  - Fix bug #77630: rename() across the device may allow unwanted access
    during processing
  - Fix bug #77494: Disabling class causes segfault on member access
  - Fix bug #77431: openFile() silently truncates after a null byte
  - Fix bug #51068: DirectoryIterator glob:// don't support current path
    relative queries
  - Fix bug #77396: Null Pointer Dereference in phar_create_or_parse_filename
  - Fix bug #77540: Invalid Read on exif_process_SOFn
  - Fix bug #77390: feof might hang on TLS streams in case of fragmented TLS records
  - Fix bug #77586: phar_tar_writeheaders_int() buffer overflow
  - Fix bug #77546: iptcembed broken function
  - Fix bug #77563: Uninitialized read in exif_process_IFD_in_MAKERNOTE
  - Fix bug #76557: heap-buffer-overflow (READ of size 48) while reading exif data
  - Fix bug #77024: SplFileObject::__toString() may return array
  - Fix bug #77945: Segmentation fault when constructing SoapClient with WSDL_CACHE_BOTH
  - Fix bug #77697: Crash on Big_Endian platform
  - Fix bug #77943: imageantialias($image, false); does not work
  - Fix bug #77944: Wrong meta pdo_type for bigint on LLP64
  - Fix bug #76717: var_export() does not create a parsable value for PHP_INT_MIN
  - Fix bug #77921: static.php.net doesn't work anymore
  - Fix bug #77934: php-fpm kill -USR2 not working
  - Fix bug #77700: Writing truecolor images as GIF ignores interlace flag
  - Fix bug #77765: FTP stream wrapper should set the directory as executable
  - Fix bug #50020: DateInterval:createDateFromString() silently fails
  - Fix bug #77742: bcpow() implementation related to gcc compiler optimization
  - Fix bug #77967: Bypassing open_basedir restrictions via file uris
  - Fix bug #77973: Uninitialized read in gdImageCreateFromXbm
  - Fix bug #77988: heap-buffer-overflow on php_jpg_get16
  - Fix bug #78192: SegFault when reuse statement after schema has changed
  - Fix bug #77124: FTP with SSL memory leak
  - Fix bug #78256: heap-buffer-overflow on exif_process_user_comment
  - Fix bug #78222: heap-buffer-overflow on exif_scan_thumbnail
  - Fix bug #77946: Bad cURL resources returned by curl_multi_info_read()
  - Fix bug #78333: Exif crash (bus error) due to wrong alignment and invalid cast
  - Fix bug #69100: Bus error from stream_copy_to_stream (file -&gt; SSL stream)
    with invalid length
  - Fix bug #76342: file_get_contents waits twice specified timeout
  - Fix bug #76859: stream_get_line skips data if used with data-generating filter
  - Fix bug #78579: mb_decode_numericentity: args number inconsistency
  - Fix bug #78910: Heap-buffer-overflow READ in exif
  - Fix bug #78878: Buffer underflow in bc_shift_addsub
  - Fix bug #78793: Use-after-free in exif parsing under memory sanitizer
  - Fix bug #78863: DirectoryIterator class silently truncates after a null byte
  - Fix bug #79099: OOB read in php_strip_tags_ex
  - Fix bug #79082: Files added to tar with Phar::buildFromIterator have
    all-access permissions
  - Fix bug #79329: get_headers() silently truncates after a null byte
  - Fix bug #79282: Use-of-uninitialized-value in exif
  - Fix bug #61597: SimpleXMLElement doesn't include both @attributes and
    textContent in properties
  - Fix bug #74940: DateTimeZone loose comparison always true until properties
    are initialized.
  - Fix bug #79296: ZipArchive::open fails on empty file (libzip 1.6.0)
  - Fix bug #79330: shell_exec() silently truncates after a null byte
  - Fix bug #79364: When copy empty array, next key is unspecified.
  - Fix bug #79396: DateTime hour incorrect during DST jump forward using setTime
  - Fix bug #79410: system() swallows last chunk if it is exactly 4095 bytes
    without newline
  - Fix bug #79424: php_zip_glob uses gl_pathc after call to globfree
  - Fix bug #79465: OOB Read in urldecode() (CVE-2020-7067)
  - Fix bug #78221: DOMNode::normalize() doesn't remove empty text nodes
  - Fix bug #78875: Long filenames cause OOM and temp files are not cleaned
    (CVE-2019-11048)
  - Fix bug #78876: Long variables in multipart/form-data cause OOM and temp
    files are not cleaned (CVE-2019-11048)
  - Fix bug #79514: Memory leaks while including unexistent file
  - Fix bug #79528: Different object of the same xml between 7.4.5 and 7.4.4
  - Fix bug #62890: default_socket_timeout=-1 causes connection to timeout
  - Fix bug #70362: Can't copy() large 'data://' with open_basedir
  - Fix bug #73527: Invalid memory access in php_filter_strip
  - Fix bug #74267: segfault with streams and invalid data
  - Fix bug #79787: mb_strimwidth does not trim string
  - Fix bug #79877: getimagesize function silently truncates after a null byte
  - Fix bug #68447: grapheme_extract take an extra trailing character
  - Fix bug #68825: Inconsistent exception in DirectoryIterator::getLinkTarget()
  - Fix bug #74145: wddx parsing empty boolean tag leads to SIGSEGV (CVE-2017-11143)
  - Fix bug #74651: negative-size-param (-1) in memcpy in zif_openssl_seal()
    (CVE-2017-11144)
  - Fix bug #74435: Buffer over-read into uninitialized memory (CVE-2017-7890)
  - Fix bug #73093: Unserialize Exception object can lead to infinite loop
    (CVE-2016-7478)
  - Fix bug #72520: Stack-based buffer overflow vulnerability in php_stream_zip_opener
    (CVE-2016-6297)
  - Fix bug #73825: Heap out of bounds read on unserialize in finish_nested_data()
    (CVE-2016-10161)
  - Fix bug #60491: Session module is adoptive (CVE-2011-4718)
  - Fix bug #69253: ZIP Integer Overflow leads to writing past heap boundary
    (CVE-2015-2331)
  - Fix bug #69418: CVE-2006-7243 fix regressions in 5.4+ (CVE-2015-4025)
  - Fix bug #68598: pcntl_exec() should not allow null char (CVE-2015-4026)
  - Fix bug #69207: move_uploaded_file allows nulls in path (CVE-2015-2348)
  - Fix bug #69218: potential remote code execution with apache 2.4 apache2handler
    (CVE-2015-3330)
  - Fix bug #69719: Incorrect handling of paths with NULs, related to bug 69353
    (CVE-2015-4598)
  - Fix bug #69353: Missing null byte checks for paths in various PHP extensions
    (CVE-2015-3411)
  - Fix bugs #70168, #70169, #70166, #70155: Use After Free Vulnerability in
    unserialize() with
    SplObjectStorage, SplDoublyLinkedList, SPLArrayObject, SPLArrayObject (CVE-2015-6831)
  - Fix bug #70019: Files extracted from archive may be placed outside of
    destination directory (CVE-2015-6833)
  - Fix bug #70388: SOAP serialize_function_call() type confusion / RCE (CVE-2015-6836)
  - Fix bug #69782: NULL pointer dereference (CVE-2015-6837, CVE-2015-6838)
  - Fix bug #70433: Uninitialized pointer in phar_make_dirstream when zip entry
    filename is "/" (CVE-2015-7804)
  - Fix bug #69923: Buffer overflow and stack smashing error in phar_fix_filepath
    (CVE-2015-5590)
  - Fix bug #71488: Stack overflow when decompressing tar archives (CVE-2016-2554)
  - Fix bug #72061: Out-of-bounds reads in zif_grapheme_stripos with negative offset
    (CVE-2016-4541, CVE-2016-4540)
  - Fix bug #72094: Out of bounds heap read access in exif header processing
    (CVE-2016-4542)
  - Fix bug #72093: bcpowmod accepts negative scale and corrupts _one_ definition
    (CVE-2016-4537)
  - Fix bug #71331: Uninitialized pointer in phar_make_dirstream() (CVE-2016-4343)
  - Fix bug #72241: get_icu_value_internal out-of-bounds read (CVE-2016-5093)
  - Fix bug #72135: Integer Overflow in php_html_entities() (CVE-2016-5094)
  - Fix bug #72114: Integer underflow / arbitrary null write in fread/gzread
    (CVE-2016-5096)
  - Fix bug #72339: Integer Overflow in _gd2GetHeader() resulting in heap overflow
    (CVE-2016-5766)
  - Fix bug #72340: Double Free Courruption in wddx_deserialize (CVE-2016-5772)
  - Fix bug #72613: Inadequate error handling in bzread() (CVE-2016-5399)
  - Fix bug #70480: php_url_parse_ex() buffer overflow read (CVE-2016-6288)
  - Fix bug #72513: Stack-based buffer overflow vulnerability in virtual_file_ex
    (CVE-2016-6289)
  - Fix bug #72562: Use After Free in unserialize() with Unexpected Session
    Deserialization (CVE-2016-6290)
  - Fix bug #72603: Out of bound read in exif_process_IFD_in_MAKERNOTE (CVE-2016-6291)
  - Fix bug #72533: locale_accept_from_http out-of-bounds access (CVE-2016-6294)
  - Fix bug #69975: PHP segfaults when accessing nvarchar(max) defined columns
    (CVE-2015-8879)
  - Fix bug #72606: heap-buffer-overflow (write) simplestring_addn simplestring.c
    (CVE-2016-6296)
  - Fix bug #72293: Heap overflow in mysqlnd related to BIT fields (CVE-2016-7412)
  - Fix bug #72860: wddx_deserialize use-after-free (CVE-2016-7413)
  - Fix bug #72928: Out of bound when verify signature of zip phar in phar_parse_zipfile
    (CVE-2016-7414)
  - Fix bug #73007: SEH buffer overflow msgfmt_format_message (CVE-2016-7416)
  - Fix bug #73029: Missing type check when unserializing SplArray (CVE-2016-7417)
  - Fix bug #73065: Out-Of-Bounds Read in php_wddx_push_element of wddx.c (CVE-2016-7418)
  - Fix bug #73280: Stack Buffer Overflow in GD dynamicGetbuf (CVE-2016-8670)
  - Fix bug #73764: Crash while loading hostile phar archive (CVE-2016-10159)
  - Fix bug #73768: Memory corruption when loading hostile phar (CVE-2016-10160)
  - Fix bug #72627: Memory Leakage In exif_process_IFD_in_TIFF (CVE-2016-7128)
  - Fix bug #70350: ZipArchive::extractTo allows for directory traversal when
    creating directories (CVE-2014-9767)
  - Fix bug #70081: SoapClient info leak / null pointer dereference via multiple
    type confusions (CVE-2015-8835)
  - Fix bug #70121: unserialize() could lead to unexpected methods execution / NULL
    pointer deref (CVE-2015-8876)
  - Fix bug #71906: AddressSanitizer: negative-size-param (-1) in mbfl_strcut
    (CVE-2016-4073)
  - Fix bug #70014: openssl_random_pseudo_bytes() is not cryptographically secure
    (CVE-2015-8867)
  - Fix bug #77371: heap buffer overflow in mb regex functions - compile_string_node
    (CVE-2019-9023)
  - Fix bug #77381: heap buffer overflow in multibyte match_at (CVE-2019-9023)
  - Fix bug #77382: heap buffer overflow due to incorrect length in expand_case_fold_string
    (CVE-2019-9023)
  - Fix bug #77385: buffer overflow in fetch_token (CVE-2019-9023)
  - Fix bug #77394: Buffer overflow in multibyte case folding - unicode (CVE-2019-9023)
  - Fix vulnerabilities with oniguruma: CVE-2017-9226, CVE-2017-9224, CVE-2017-9227,
    CVE-2017-9228, CVE-2019-13224
  - Fix general vulneravilities: CVE-2014-9653, CVE-2015-0235, CVE-2015-3152,
    CVE-2016-3074
  - Fix bug #79699: PHP parses encoded cookie names so malicious `__Host-` cookies
    can be sent (CVE-2020-7070)
  - Fix bug #80007: Potential type confusion in unixtojd() parameter parsing


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.3.3-55.cloudlinux.els
changelog:
  - CVE-2021-21704: fix integer overflow and subsequent incorrect buffer allocation
  - CVE-2021-21705: fix incorrect url password validation
  - CVE-2021-21703: fix incorrect shared memory management, which led to priv escalation


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.3.3-55.tuxcare.els4
changelog:
  - CVE-2023-0567: crypt: Fix validation of malformed BCrypt hashes
  - CVE-2023-0568: Fix array overrun when appending slash to paths
  - CVE-2023-0662: Fix DoS vulnerability when parsing multipart request body


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.3.3-55.tuxcare.els6
changelog:
  - CVE-2023-3823: Fix external entity loading in XML without enabling by
    sanitizing libxml2 globals before parsing
  - CVE-2023-3824: Fix buffer mismanagement in phar_dir_read()


author: Dmitriy Popov <dpopov@cloudlinux.com> - 5.3.3-55.tuxcare.els7
changelog:
  - CVE-2022-31629: Add cookie integrity validation
  - CVE-2024-2756:  Move cookie integrity validation downwards


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 5.3.3-55.tuxcare.els9
changelog:
  - CVE-2024-8925: Fix data integrity violation while parsing multipart/form-data
    boundaries larger than the read buffer


author: Remi Collet <remi@remirepo.net> - 5.1.0-1
changelog:
  - update to 5.1.0 (Feb 5, 2016)
  - add new options in configuration file
  - remove README.txt, add USER-GUIDE.pdf
  - add missing LICENSE file from previous version


author: Tim Jackson <rpm@timj.co.uk> 1:1.7.1-2
changelog:
  - Set cfg_dir to be %{_sysconfdir}/pear (and own it)
  - Update install-pear.php script
  - Add %pear_cfgdir and %pear_wwwdir macros


author: Joe Orton <jorton@redhat.com> - 1:1.9.4-1
changelog:
  - update to 1.9.4 (#651897)
  - update XML_RPC to 1.5.4, Structures_Graph to 1.0.4, Archive_Tar to 1.3.7


author: Remi Collet <rcollet@redhat.com> - 1:1.9.4-5
changelog:
  - fix unexpanded RPM macro in triggerpostun #1018131
  - define date.timezone in pear/pecl commands #1040839
  - define %php_metadir macro #953810
  - fix incorrect handling of backslashes in file names #1216952


author: Joe Orton <jorton@redhat.com> - 3.0.5-1
changelog:
  - rebase to 3.0.5 (#638892, #638887)
  - fix casting in memcache_pool.c (#672363)
  - fix Release (#604559)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7.6-3
changelog:
  - drop alternatives, use app-wrapper instead (borrowed from opensuse)
  - -qt4 experimental subpkg, -qt includes qt3 version again  (#523488)


author: Miroslav Lichvar <mlichvar@redhat.com> 0.6.9-2
changelog:
  - use correct group when dropping group privileges (#221107)
  - open also files without .info suffix
  - make scriptlets safer
  - make sure readline support isn't compiled in


author: Ryan O'Hara <rohara@redhat.com> 0.8.5-13
changelog:
  - Resolves: #788541 - add option for sync daemon mcast interface
  - Resolves: #717556 - add option for sync daemon id


author: Ryan O'Hara <rohara@redhat.com> 0.8.6-1
changelog:
  - Resolves: #846035 - rebase to upstream version 0.8.6
  - Resolves: #857917 - piranha gui does not set ipvs timeout values


author: Soren Sandmann <ssp@redhat.com> - 0.26.0-1
changelog:
  - update to 0.26.0
  - patch to add missing emms instructions
  - reenable iwmmxt since configure should now detect if it can't built


author: Soren Sandmann <ssp@redhat.com> - 0.26.0-2
changelog:
  - Add experimental patch to use OpenMP
    If this causes your X server to misbehave, please file bugs.


author: Soren Sandmann <sandmann@redhat.com> 0.13.3-1
changelog:
  - Header files are called pixman.h, not qpixman.h
  - =-=-=-=-=-=-=-=-=- Import QPixman -=-=-=-=-=-=-=-=-=-=


author: Matthias Clasen <mclasen@redhat.com> - 1:0.23-6
changelog:
  - Remove a patch that is no longer necessary and causes more
    problems than it solves (#224148)
  - Include Requires.private in --print-requires (#426106)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-39
changelog:
  - Resolves #1144608 - pki-core failed to build with cmake-2.8.12.2-4.el6
  - Resolves #1037248 - pki-core FTBFS if "-Werror=format-security" flag is used
  - Resolves #1243 - Outdated selinux-policy dependency in Dogtag 9


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-40
changelog:
  - Resolves #1171848 - IPA - port 9443 (pki-core) is vulnerable to SSLv3 POODLE
    (based upon upstream changes provided by cfu and alee)


author: Jack Magne <jmagne@redhat.com> 9.0.3-42
changelog:
  - Resolves #1221900 - pki-core: cross-site scripting flaw in the dogtag administration page (port 9180, port 9444) [rhel-6.7]


author: Endi S. Dewata <edewata@redhat.com> 9.0.3-43
changelog:
  - Resolves #1225589 - unable to create rhel 7.1 replica from rhel 6 replica CA because subsystem user does not exist


author: Endi S. Dewata <edewata@redhat.com> 9.0.3-44
changelog:
  - Resolves #1256039 - Fixed missing subsystem user on external CA case.
  - Removed unused backup files (.p*) generated by the patches.


author: Ade Lee <alee@redhat.com> 9.0.3-48
changelog:
  - Resolves #1306989 - Crash seen with pki-common pkg during IPA server install
  - Resolves #1290535 - Check for incompatible Java at startup
  - Resolves #1313207 - ca.subsystem.certreq missing from CS.cfg


author: Endi S. Dewata <edewata@redhat.com> 9.0.3-52
changelog:
  - Resolves #1403943 - Replica install fails with failed to configure ca on
    "White spaces are required between publicId and systemId"


author: Endi S. Dewata <edewata@redhat.com> 9.0.3-53
changelog:
  - Resolves #1403943 - Replica install fails with failed to configure ca on
    "White spaces are required between publicId and systemId"
    (contains the additional changes required to work with the latest HTTPD)


author: Mary Ellen Foster <mefoster at gmail.com> - 5.7.11-1
changelog:
  - Move binaries into /usr/bin directly to fix multilib issues
  - Update to latest upstream release
  - Use officially-distributed PDF documentation instead of HTML
  - Unify Java patches
  - Remove strndup package; they fixed it upstream
  - Fix compilation of "maildrop" packages
  - Give the xpce documentation directory a clearer name
  - Removed the FILES section of the man page because it also caused
    multilib conflicts (and was inaccurate anyway)


author: Petr Pisar <ppisar@redhar.com> - 5.7.11-6
changelog:
  - Inhibit XPCE by macro to silent rpmlint (Resolves: #607476)
  - Define implicit attributes for jpl files (Resolves: #607476)
  - Expand tabs to spaces to silent rpmlint (Resolves: #607476)
  - Remove executable bit from jpl documentation files (Resolves: #607476)
  - Fix spelling in package descriptions (Resolves: #607476)
  - Strip debuginfo from libpl.so by setting executable bit (Resolves: #607476)
  - Change license to reflect reality (yes, Artistic1) (Resolves: #607476)
  - Disable java part on non-x86 architectures (bug #606846)


author: Caolán McNamara <caolanm@redhat.com> - 0.14.4-3
changelog:
  - Resolves: rhbz#524662 Implement new Gnome XDG Config Folders for planner
      + gnome#596171 change recently used to use new recently used backend
      + gnome#XXXXXX split config/data setting into xdg dirs


author: Caolán McNamara <caolanm@redhat.com> - 0.14.4-4
changelog:
  - Resolves: rhbz#526295 automatically go to edit mode on insert task
  - Resolves: rhbz#537854 fix zoom to fit


author: Matthew Barnes <mbarnes@redhat.com> - 0.14.4-10
changelog:
  - Resolves: rhbz#973289 rebuild against newer evolution-data-server
  - Also add planner-0.14.4-edsapi.patch from Fedora 14 package.


author: Alexey Berezhok <alexey_com@ukr.net> - 0.1-3
changelog:
  - Fixed error appears with Plesk 10.4 (Configuration error: Copy conf/config.inc.php-dist to conf/config.inc.php and edit appropriately)


author: Kir Kolyshkin <kir@openvz.org> 1.2-1
changelog:
  - Added ploop_get_dev() function
  - Added ploop_set_component_name() function
  - Fix: do not clear in-use flag in ploop_fsck()
  - ploop-fsck: add -d flag to forcefully drop "in use" image flag
  - Fixed handling blocksize for raw images
  - Added user_xattr,acl to default mount options
  - ploop_mount(): added ability to pass MS_NOATIME flag
  - ploop-balloon: add discard command to compact ploop image
  - ploop_get_info(): return old info in case statfs() failed
  - expanded2preallocated(): if fallocate not supported, use ftruncate
  - ploop_resize_image(): Check is it possible to fallocate before inflating balloon file
  - Fixed merging all snapshots
  - Some fixes in ploop tool usage
  - Some log message fixes
  - Add function, source file and line number to error messages if DEBUG is set
  - Build system fixes/improvements


author: Kir Kolyshkin <kir@openvz.org> 1.3-1
changelog:
  - New functionality
    - ploop copy is working now
    - added pcopy's send_process() and receive_process() to lib
    - ploop mount: added -c <component_name> option
    - ploop(8): added (still incomplete)
    - ploop balloon discard: add --to-free and --min-block
    - add Preallocated item to DiskDescriptor.xml
    - add add ploop_get_mnt_by_dev() to lib
  - Bug fixes
    - fixed offline snapshot creation
    - fixed race between register/unregister_ploop_dev()
    - create image: if fallocate is not supported, fail
    - ploop init, ploop mount: fix -b option value validation
    - ploop mount: fix usage, -d is optional
    - ploop info: fix usage, DiskDescriptor.xml is required
    - ploop.spec: make main package require -lib of the same version
    - fixed a few ioctl-related error messages
    - ploop_create_snapshot(): check for number of snapshots limit (127)
    - ploop.spec: do not own _libdir
    - fix SYSEXIT_PARAM value
    - tools/ploop.c: do not use ploop_err()
    - tools: fixed/improved usage for many commands
    - tools: do not forget to print newlines
    - make install: use /usr/lib64 LIBDIR for x86_64
    - ploop_create_image(): free disk descriptor if fstype is NULL
    - create_balloon_file(): fix file name in error message
    - create_balloon_file(): umount and remove temp mnt point
    - create_balloon_file(): fix error message and return code
    - parse_xml(): add Blocksize validation
  - Improvements and cleanups
    - ploop lib: add visibility=hidden for internal functions
    - tools: use parse_size() and is_xml_name() where possible
    - remove merge_top_only param of get_delta_info()
    - ploop balloon: make it accept either -m or -d or both
    - ploop convert: change -t to -f
    - tools: unify parsing -f option
    - various code and headers cleanups
    - setver.sh: add -v, -b, -i


author: Kir Kolyshkin <kir@openvz.org> 1.4-1
changelog:
  - ploop copy: fix data loss during migration (#2287)
  - ploop(8): fixed according to doc team review
  - ploop mount: tell about unsupported underlying fs
  - ploop-copy: improve usage
  - ploop-copy -s: added mode to copy to local file
  - tools/ploop.c: do not return -1 from main()
  - tools/ploop.c: fix/unify working with diskdescriptor


author: Kir Kolyshkin <kir@openvz.org> 1.5-1
changelog:
  - NOTE: this version requires vzkernel >= 2.6.32-042stab061.1
  - New functionality:
  - * switch from old /dev/ploop/ symlink-based to new kernel cookie registration
  - * snapshots: switch to schema with constant top delta uuid
  - * use /proc/vz/ploop_minor based interface to get free minor
  - * if ploop is in maintenance state, try to complete it before doing
      snapshot/resize/merge/mount/umount/copy operation
  - * ploop mount: use in-kernel I/O module autodetection
  - * ploop balloon discard: new iterative compacting support
  - * ploop balloon discard: implement --stat
  - * ploop balloon discard: implement --automount
  - * ploop balloon discard: cancellation support
  - * ploop balloon: allow DiskDescriptor.xml argument
  - * ploop umount: implement -c component_name
  - * ploop list: implement
  - * /sbin/mount.ploop: do load ploop modules
  - Bug fixes:
  - * do not crash on empty DiskDescriptor.xml (libxml2 workaround)
  - * ploop convert: fix converting from expanded to raw
  - * ploop copy: fixed check for opened fd
  - * ploop copy: do not leak opened fds
  - * ploop create: fix gpt partition creation to be 4096 aligned
  - * ploop create, resize: round up size to be cluster aligned
  - * tools: few exit code fixes
  - * multiple usage, log and error message fixes
  - Improvements:
  - * ploop mount: check that mount point is a directory
  - * ploop umount: reduce retry count from 60 to 6
  - * ploop umount: print lsof output in case of failed umount
  - * ploop create: for prealloc image, use ftruncate if fallocate not supported
  - * ploop create, resize: add check for correct block device size
  - * scripts: de-bash-ify
  - * assorted code refactoring, cleanups and nitpicks
  - Library API changes:
  - * add ploop_resolve_functions() to aid in dynamic library loading
  - * introduce optimized ploop_get_info_by_descr(), remove ploop_get_info()
  - * replace ploop_{alloc,read}_diskdescriptor() with ploop_read_disk_descr()
  - * remove ploop_getdevice()


author: Kir Kolyshkin <kir@openvz.org> 1.6-1
changelog:
  - New functionality:
  - * offline image shrink support
  - * tools: added snapshot-list functionality
  - * extend switch snapshot functionality: ploop_switch_snapshot_ex()
  - * ploop.spec: disable udev iosched config for ploop devices
  - * ploop list: added functionality to list mount points
  - Bug fixes:
  - * ploop_mount_fs(): use mount_data for first mount
  - * ploop_mount(): do not allow to use ploop on fs w/o extents
  - * ploop_{create,resize}_image(): fixed size checks and rounding
  - * ploop_create_image(): fix memory leak on error path
  - * ploop_get_info(): fix reported disk size after switching snapshot
  - * ploop_get_info(): fix when ploop device is not mounted
  - * ploop_{umount,resize}_image() and many others: do not return -1
  - Improvements:
  - * much faster resize when using resize2fs with EXT4_IOC_RESIZE_FS support
  - * ploop discard: add cancellation support
  - * ploop_resize_image(): use real blocksize
  - * parse_xml(): deny processing DiskDescriptor.xml with several <Storage>
  - * do not auto-generate dynload.h, instead check if it's uptodate
  - * create_image(): display error message for incorrect parameters case
  - * introduce/use SYSEXIT_DEV_NOT_MOUNTED and SYSEXIT_FSCK errors
  - * alloc_diskdescriptor(): log error if calloc() fails
  - * ploop.spec: require util-linux, e2fsprogs etc.
  - * ploop.spec: require libs of the proper arch


author: Kir Kolyshkin <kir@openvz.org> 1.7-1
changelog:
  - New functionality:
  -- Large ploop image format support
  --- Now image size limit is 64 TB (was 2TB)
  --- Kernel >= 042stab078 is required
  -- Move ploop_grow* functions from tools to lib
  -- ploop grow: add DiskDescriptor.xml support
  -- ploop init, ploop_create_image(): add FS blocksize parameter
  - Improvements:
  -- make_fs(): create ext4fs with lazy_itable_init
  --- 3x smaller size and 3x faster creation time for 20GB image
  -- lib/ploop.h: "unexport" some internal functions
  -- Use /proc/self/mountinfo to get mount point by device
  -- More clear errors on parsing DiskDescriptor.xml
  -- print_output(): generalize print_lsof(), improve
  -- add_delta(): print more diags if EBUSY
  -- extend_delta_array(): print errors, return SYSEXIT_*
  -- run_prg(): print error if execvp() failed
  -- lib/balloon.c: print file name in an error message
  -- Introduce and use p_memalign(), fix errno handling
  -- Improvements and fixes to ploop_grow_*() to be used from library
  -- ploop_read_disk_descr(): set *di to NULL in case of error
  -- ploop_find_dev(): always assume ploop cookie is supported
  -- resize_fs(): try harder to find resize2fs binary
  -- Makefile.inc: ability to add CFLAGS
  - Fixes:
  -- lib/lock.c: create_file(): make sure dir exists (#2493, #2597)
  -- lib/fsutils.c: use ploop_execvp, drop absolute paths to binaries (#2595)
  -- ploop_log(): fix loglevel checking for file logging
  -- ploop_snapshot_switch_param: guids are const
  -- Recreate ploopXpY devices on ploop mount
  -- ploop_find_dev(): treat ENODEV as ENOENT on /sys reads
  -- use basename() to strip device from path
  -- ploop list: check for extra arguments
  -- ploop balloon: fix -f option processing
  -- Fixed lots of memory leaks, mostly on error paths
  -- open_delta(): simplify error handling
  -- Fixes for other issues big and small, reported by Coverity


author: Kir Kolyshkin <kir@openvz.org> 1.7.1-1
changelog:
  - Fixes:
  -- default image format is V1, unless specified explicitly
  -- tmpfiles.d file added for /var/lock/ploop (#2493)
  -- fixed creating strange directories under ./ (#2623)


author: Kir Kolyshkin <kir@openvz.org> 1.8-1
changelog:
  - New functionality:
  -- convert from/to v1/v2 ploop version format (ploop convert -v)
  -- ploop_mount_fs(): add option to run fsck
  -- ploop mount: add -F to run fsck for inner fs
  -- export ploop_is_large_disk_supported()
  -- add/export ploop_get_spec()
  -- ploop fsck: rename to ploop check
  - Fixes:
  -- resize_gpt_partition(): skip if there is no partition
  -- switch snapshot: read parameters from image we are to switch to
  -- ploop create: error out if DiskDescriptor.xml exists
  -- e2fsck(): properly check e2fsck binary exit code
  -- ploop grow: check size wrt format
  -- tools/Makefile: don't strip binaries on install
  -- ploop init: fix an error message
  - Improvements:
  -- create_image(): remove useless assignment
  -- number of log messages improved/fixed
  -- tools parse_size(): print error
  -- tools/ploop: allow T suffix for blockdev size
  -- ploop_grow_delta_offline(): use delta.version
  -- tune_fs(): drop absolute path to tune2fs
  - Documentation:
  -- ploop init usage: add -v VERSION
  -- ploop --help: rm -P from ploop mount syntax
  -- ploop(8): add -v for ploop init
  -- ploop(8): add ploop resize to SYNOPSYS
  -- ploop(8): add ploop convert
  -- ploop(8): add -F for ploop mount


author: Kir Kolyshkin <kir@openvz.org> 1.9-1
changelog:
  - New functionality:
  -- libploop.so: implement SONAME and versioning
  -- Introduce ploop_get_devs() to get all mounted devices per dd.xml
  - Fixes:
  -- make_fs(): reserve max possible GDT block for online resize
  -- do_lock(): set FD_CLOEXEC explicitly on lock fd
  -- fix raw image creation (broken in ploop 1.8)
  -- return SYSEXIT_SYS on ploop_find_dev_by_uuid() failure
  -- ploop.spec: run ldconfig on install/uninstall
  - Improvements:
  -- Display mount data in error message on mount() failure
  -- dynload.h: pad the struct ploop_functions to 64 pointers
  -- gensym.sh: add code to check sizeof(struct ploop_function)
  -- etc/Makefile: ploop.conf should not be executable
  -- Makefile.inc: support Debian multiarch
  -- Makefile: add distclean target
  -- Makefile cleanups


author: Kir Kolyshkin <kir@openvz.org> 1.10-1
changelog:
  - New functionality:
  --  Added check for and repair of sparse images
  --  ploop check: long options support
  --  ploop check: add --raw, --repair-sparse
  --  ploop-check: add -b BLOCKSIZE argument
  --  ploop-check: accept DiskDescriptor.xml argument
  --  ploop umount -d: allow to specify partition device (#2788)
  --  mount.ploop: implement -v and -f options, as per mount(8)
  --  umount.ploop: add -n option (ignored)
  --  mount.ploop: add -s (ignored) and -* (reported as error)
  --  Added ploop info -s
  --  ploop init: use v2 format by default
  --  ploop init: create ext4 by default
  - Fixes:
  --  ploop_get_devs(): fix snprintf usage
  --  ploop_global_lock(): create lockdir if not exist (#2767)
  --  ploop_grow_delta_offline(): Fix uninitialized struct
  --  ploop_ioff_to_sec(): fix for v2
  --  lib/ploop.h: include sys/syscall.h (Debian #728173)
  --  umount.ploop: fixed (#2788)
  --  get_image_param(): added online (from sysfs) and offline (from image) cases
  --  make_fs(): turn off periodic fs checks (#2769)
  --  ploop_store_diskdescriptor(): check rename()
  --  ploop_store_diskdescriptor(): don't return -1
  --  resize_gpt_partition(): check fsync()
  --  ploop_balloon_change_size(): don't pass -1 to close()
  --  ploop_grow_image(): fix an error check
  --  Don't ignore chmod() failures
  --  print_output(): fix output
  --  make_fs(): fix max_online_resize type overflow
  --  do_umount(): fix diagnostic lsof verbose level
  --  plooptool_stat(): close file descriptors
  --  ploop convert -f: do not return SYSEXIT_PLOOPFMT
  --  ploop check: fix exit codes
  --  make_fs(): create ext4 fs with 128M journal
  - Improvements:
  --  Support RHEL5/e4fsutils (tune4fs, dumpe4fs) (#2812)
  --  do_lock(): open file in read/write mode (#2730)
  --  ploop_send: use ioctl_device for PLOOP_IOC_SYNC
  --  use access() not stat() where possible
  --  umount.ploop: improve mtab handling
  --  mount.ploop: use case in option parsing
  --  {mount,umount}.ploop: don't hardcore ploop path
  --  ploop-check.c: rename uppercased functions
  --  ploop snapshot-list usage: fit to 80 cols
  --  fsck: use fsck.ext4 not e2fsck (#2812)
  --  check_size(): limit max ploop size to 16T
  --  ploop_resize_image(): fail if umount failed
  --  print_output(): improve output
  --  ploop_mount(): fix/improve error message
  --  dumpe2fs(): don't hardcode path to dumpe2fs
  --  print_output(): use our own default PATH
  --  do_umount(): refactor and improve
  --  do_umount(): eliminate extra 'lsof' call on EBUSY
  --  do_umount(): don't call lsof again if not found
  --  print_output(): check return from pclose()
  --  print_output(): return exit code from command
  --  Fix some wrongly used exit codes
  --  Remove unused exit codes
  - Documentation:
  --  ploop(8): document check, balloon discard, info, list, copy commands
  --  ploop(8): describe exit codes
  --  ploop(8): better resize description
  --  ploop(8): fix ploop umount -d description
  --  ploop(8): fix ploop mount -d description
  --  ploop(8): improve convert description
  --  ploop(8): add missing OPTIONS section
  --  ploop(8): make IMAGE FORMATS a subheader
  --  ploop(8): other small fixes and improvements
  --  ploop usage: improve
  --  ploop usage: update ploop check synopsys
  --  ploop init: fix/improve usage
  --  ploop usage: fix mount/umount/resize
  - Build system:
  --  ploop.spec: require -lib of the same release
  --  ploop.spec: require lsof and findutils
  --  Makefile.inc: add -Wformat-security
  --  Makefile.inc: proper LIBDIR for Debian case
  --  Makefile.inc: add CPPFLAGS to CFLAGS
  --  Makefile.inc: prepend, not append, debug CFLAGS
  --  tools/Makefile: simplify SOURCES define
  --  setver.sh: introduce build id
  --  setver.sh: use getopt
  --  Remove stand-alone binaries: ploop-check, ploop-grow, ploop-merge, ploop-stat, ploop-copy
  --  Makefile: add Coverity generation logic


author: Kir Kolyshkin <kir@openvz.org> 1.11-1
changelog:
  - New functionality and important changes:
  -- support for 4K sector size (including GPT conversion)
  -- ploop replace
  -- temp snapshots support (ploop tsnapshot, ploop_create_temporary_snapshot())
  -- ploop copy: implement fdatasync before freeze (improves CT frozen time)
  -- New DiskDescriptor.xml read API (ploop_*_dd())
  -- Obsolete *_diskdescriptor() calls
  -- Obsolete ploop_get_base_delta_uuid()
  -- ploop_log(): implement subsecond timestamps (with verbosity >= 4)
  -- add ploop_is_mounted()
  -- ploop snapshot-list: add snapshot mode (-s)
  -- ploop check dd.xml: add -u UUID option
  -- ploop mount: remove -u base feature
  -- ploop tool: add -v option to set verbosity
  - Fixes:
  -- skip max fs size check on snapshot delta creation
  -- ploop_resize_image: resize up to end of device
  -- ploop_delete_top_delta(): fix wrt top_guid
  -- ploop_read_diskdescriptor(): fix get_basedir() len argument
  -- check_and_repair_sparse: handle EOF properly (#2897)
  -- ploop_resize_image: add missing gpt size sync
  -- ploop snapshot-merge/delete: deny snapshot deleting if mounted (#2887)
  -- grow_lower_delta(): fix a memory leak
  -- ploop check: fix -b option parsing
  -- get_partition_device_name(): fix chmod argument
  -- fix alignment on GPT partition resize
  -- fix GPT partition alignment on ploop init
  - Improvements:
  -- ploop_resize_image: enhanced inflate balloon to max size logic
  -- tools: add {} to specified UUID if necessary
  -- check_and_repair_sparse(): log filefrag output
  -- print_sys_block_ploop(): speed up
  -- ploop check: try to repair non-top deltas if they can be opened r/w
  -- e2fsck: return fsck exit code to caller
  -- make_fs(): add -i to mkfs
  -- fsync_safe(): use SYSEXIT_FSYNC
  -- Fix uuid strings size, use define
  - Documentation:
  -- ploop snapshot-list: fix and update usage
  -- ploop copy: fix usage
  -- ploop(8): document snapshot-list -s option
  -- ploop(8): document ploop replace
  - Build system:
  -- Makefile.inc: fix dpkg-architecture handling (#2877)
  -- Makefile: add ability to add local rules
  -- gensym.sh: better usage and error diag
  -- gensym.sh: add run mode


author: Kir Kolyshkin <kir@openvz.org> 1.12-1
changelog:
  - New functionality:
  -- ploop copy: implement two-way protocol
  -- ploop copy send: implement async read/send
  -- ploop copy send: add profiling
  -- delete_snapshot(): handle snapshots with multiple refs
  -- tune_fs(): use EXT4_IOC_SET_RSV_BLOCKS if available
  -- Introduce ploop_get_max_size()
  -- Introduce ploop_copy_{send,receive}, obsoleting ploop_{send,receive}
  -- Introduce ploop_create_dd()
  -- ploop info: add -d to show ploop device
  -- ploop_check(): open image RO, reopen RW later
  -- check_and_repair_sparse(): reopen image rw if needed
  - Fixes:
  -- ploop copy: fix open_mount_point err handling
  -- ploop copy: improve fd checks
  -- ploop_store_diskdescriptor: fsync DiskDescriptor.xml upon writing
  -- ploop_resize_image(): handle get_mount_dir() error
  -- ploop_resize_image: auto-mount fs
  -- do_delete_snapshot: fix wrt temp snapshot uuid
  -- ploop_switch_snapshot_ex(): don't return 0 if guid_old is bad
  -- do_delete_snapshot: deny delete top delta in case parent snapshot is temp
  -- merge_temporary_snapshots: fix infinite loop
  -- ploop_switch_snapshot_ex: fixed case with PLOOP_SNAP_SKIP_TOPDELTA_CREATE
  -- ploop_delete_snapshot: fix for temp snapshot
  -- create_snapshot: clear stale top delta inuse flag
  -- e2fsck: make it quiet


author: Kir Kolyshkin <kir@openvz.org> 1.12.1-1
changelog:
  - Fixes:
  -- ploop copy send: fix a race that could result in image corruption
  -- resize: fix resize working on an older (pre 042stab092.1) kernel
  - Improvements:
  -- ploop mount: warn if host filesystem uses data=writeback (#3030)
  -- snapshot-switch: don't show ENOENT remove error
  -- ploop_is_large_disk_supported(): check ploop module first


author: Kir Kolyshkin <kir@openvz.org> 1.12.2-1
changelog:
  - Fixes:
  -- ploop balloon discard: fix wrt 042stab10x kernel (#3156)
  -- ploop_merge_snapshot_by_guid: fix offline merge with raw base image
  -- reread_part(): repeat ioctl if EBUSY (#3081)
  - Improvements:
  -- check_mount_restrictions(): check for all images
  -- ploop check dd.xml: lock dd
  -- ploop check dd.xml: skip check if ploop is used
  -- check_deltas(): read-only check for non-top deltas


author: Kir Kolyshkin <kir@openvz.org> 1.13-1
changelog:
  - New functionality:
  -- snapshot-merge: add -n, merge to new delta ability
  -- Logging to PLOOP_LOG_FILE (if variable is defined during compilation)
  -- ploop restore-descriptor: create dd.xml by image (single image only)
  -- ploop replace: add -k, --keep-name to keep the replaced delta file name
  -- ploop replace: implement offline replace
  -- snapshot-delete: introduce specific SYSEXIT_NOSNAP error
  -- Alternative (incompatible) implementation of ploop copy (C and Python API)
  - Fixes:
  -- ploop_replace_image(): fix wrt level
  -- ploop grow: update size in DiskDescriptor.xml after growing
  -- normalize_image_name(): fix for a corner case
  -- ploop_replace_image(): always unlock dd.xml
  -- {mount,umount}.ploop: fixes for filenames with spaces, tabs etc.
  -- umount.ploop: fix mtab removal (#3164)
  -- umount.ploop: fix for file names with a semicolon
  -- scripts/mount.ploop: don't hardcode paths to modprobe and readlink
  -- ploop_umount(): don't return -1, use SYSEXIT_*
  -- ploop_merge_snapshot_by_guid(): fix error message, don't print (null)
  -- ploop tsnapshot(): fix usage
  -- grow_lower_delta(): fix a memory leak
  -- ploop_merge_snapshot_by_guid(): fix error message
  -- check_snapshot_mount(): add is_device_inuse() check
  - Improvements:
  -- print_sys_block_ploop(): print less info
  -- Remove delta_fops abstraction layer
  -- ploop merge: obsolete/disable form with DD.xml (use snapshot-merge)
  -- ploop snapshot-merge: fix/improve message about merged deltas
  -- find_level_by_delta(): rework/improve
  -- ploop_switch_snapshot(): rm non-const cast
  -- local_delta_open(): make first arg const
  -- [style] ploop_replace_image: reuse oldfile var
  -- merge_image(): document the function
  -- ploop_di_merge_image(): remove last argument
  -- Rename get_child_by_uuid() to find_child_by_guid()
  -- ploop_merge_snapshot_by_guid(): untangle MERGE_WITH_{PARENT,CHILD} mess
  -- ploop_merge_snapshot_by_guid: fix ending message
  -- Rework check_snapshot_mount()
  -- ploop_di_merge_image: fix error messages
  -- ploop_merge_snapshot_by_guid(): fix error message
  - Documentation:
  -- ploop tool: usage formatting fixes
  -- ploop(8): expand description of snapshot-merge
  -- ploop(8): describe replace -k, --keep-name option
  -- ploop(8): describe restore-descriptor command
  -- ploop(8): describe snapshot-merge -n option
  - Build system:
  -- ploop.spec: no perms for symlink
  -- Makefile.inc: add VERSION and RELEASE vars to specify package version
  -- setver.sh: modify to use VERSION/RELEASE from Makefile.inc
  -- setver.sh: add -o, --oldpackage flag


author: Kir Kolyshkin <kir@openvz.org> 1.13.2-1
changelog:
  - Fix online top delta merge/delete (#3215)
  - Fix messages and use-after-free in ploop_merge_snapshot_by_guid()
  - ploop(8): document SYSEXIT_NOSNAP
  - ploop.spec: complete 1.13 changelog


author: Ray Strode <rstrode@redhat.com> 0.8.3-16
changelog:
  - Fix up problem introduced in previous patch when kernel
    command line has no consoles
    Related: #615912


author: Ray Strode <rstrode@redhat.com> 0.8.3-18
changelog:
  - Handle underpowered video cards that force multiple monitors
    to use one controller
    Resolves: #625209
  - Fix serial console crash
  - Resolves: #631924
  - Remove plymouth-text-and-details-only obsoletes
    Resolves: #638621


author: Ray Strode <rstrode@redhat.com> 0.8.3-19
changelog:
  - Add explicit, versioned dep on core-libs subpackage to various
    parts of the spec file to silence rpmdiff
    Related: #638621


author: Ray Strode <rstrode@redhat.com> 0.8.3-21
changelog:
  - Update lock icon dimensions to match dimensions of old
    icon to silence rpmdiff
    Related: #612665


author: Ray Strode <rstrode@redhat.com> 0.8.3-27.1
changelog:
  - use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
    to work around a kernel bug leading to blocked boot.
    Resolves: #1125325


author: Ray Strode <rstrode@redhat.com> 0.8.3-28
changelog:
  - use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
    to work around a kernel bug leading to blocked boot.
    Resolves: #1120904


author: Till Maas <opensource@till.name> - 1.2.5-6
changelog:
  - filesystem subpackage contents are now provided by filesystem (Red Hat
    Bugzilla 515362) filesystem-2.4.28-1.fc12


author: Adam Jackson <ajax@redhat.com> 1.2.5-6.2
changelog:
  - Drop vbetool, should not be needed.  Video resume is supported through
    KMS or not at all. (#545808)
  - Drop radeontool, same logic.


author: Tim Waugh <twaugh@redhat.com> - 1:1.04-19
changelog:
  - Consistent use of macros.
  - Removed ancient obsoletes tag.
  - Clean buildroot in install section not prep section.
  - Make setup quiet.
  - Use noreplace for config files.


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.43
changelog:
  - Fix semanage man page to contain also noreload option
  Resolves:#1032828
  - Fix sandbox man page
  - Make setfiles more informative if bad option is given


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.46
changelog:
  - Make semanage -i working on empty file
  - Fix setfiles man page
  - Fix setfiles -r option to be working correctly
  Resolves:#1086456


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.47
changelog:
  - Fix setfiles man page
  Resolves:#1086456
  - Fix  semanage fcontext  error message when non-existing context given
  Resolves:#1122023


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-20
changelog:
  - chcat: Change the isSensitivity() detection
  Resolves: rhbz#965397
  - Move sepolgen utility from policycoreutils-gui to policycoreutils-python
  Resolves: rhbz#995778
  - audit2allow: use date time format compatible with ausearch
  Resolves: rhbz#1111999


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-21
changelog:
  - fixfiles verify: do not relabel /tmp and /var/tmp dirs
  Resolves: rhbz#1113083
  - Fix semanage -S <store> -o <output>
  Resolves: rhbz#1122850


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-23
changelog:
  - Move python scripts in /usr/share/system-config-selinux to policycoreutils-python
  Resolves: rhbz#995778


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-26
changelog:
  - restorecond: treat root as a regular user
  Resolves: rhbz#1281877
  - semanage: don't skip reserver_port_t
  Resolves: rhbz#1225806
  - semanage: check if a store exists
  Resolves: rhbz#1208801
  - fixfiles: check the SELinux status
  Resolves: rhbz#1240788


author: Petr Lautrbach <plautrba@redhat.com> 2.0.83-27
changelog:
  - sandbox: Improve comments in sysconfig file
  Resolves: rhbz#1159336
  - secon, newrole: fix inconsistence between --help and man page
  Resolves: rhbz#1278811, rhbz#1278913


author: Miloslav Trmač <mitr@redhat.com> - 0.96-6
changelog:
  - Use real --help text and error messages instead of showing a man page in
    pkaction and pkcheck.  Fix description of (pkaction --action-id) in the man 
    page.
    Resolves: #628862
  - Add support for Identity=default in .pkla files
    Resolves: #812684
  - Use a consistent order for .pkla files within a directory.  Based on a patch
    by Jared Jennings <jared.jennings.ctr@eglin.af.mil>.
    Resolves: #864613
  - Build using PIE and relro
    Resolves: #927406


author: Marek Kasik <mkasik@redhat.com> - 0.12.4-4
changelog:
  - Add poppler-0.12.4-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.12.4-CVE-2010-3703.patch
      (Properly initialize stack)
  - Add poppler-0.12.4-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639860


author: Robert Scheck <robert@fedoraproject.org> 1.12-2
changelog:
  - Move libpopt to /lib[64] (#249814)
  - Generate API documentation, added buildrequirement to doxygen


author: Robert Scheck <robert@fedoraproject.org> 1.12-3
changelog:
  - Added buildrequirement to graphviz (#249352)
  - Backported bugfixes from CVS (#102254, #135428 and #178413)


author: Robert Scheck <robert@fedoraproject.org> 1.13-1
changelog:
  - Upgrade to 1.13 (#290531, #332201, #425803)
  - Solved multilib problems at doxygen generated files (#342921)


author: Matthias Saou <http://freshrpms.net/> 19-1
changelog:
  - Update to "stable" v19_061121.
  - Switch virtual devel provide to a real sub-package.
  - Update spec to match build changes from custom Makefile to autotools.
  - Include new pkgconfig file and require pkgconfig from the devel package.
  - Add ldconfig calls now that we have a versionned shared library.
  - Rebuild against alsa-lib and jack-audio-connection-kit.
  - Build doxygen documentation and include it in the devel package.


author: Matthias Saou <http://freshrpms.net/> 19-5
changelog:
  - Update to "stable" v19_20071207.
  - Rebuild against latest jack in rawhide (#430672).
  - Backport update to F8 too (#431266).


author: Tim Waugh <twaugh@redhat.com> 0.0.4-7
changelog:
  - Fix small memory leak and move malloc() check close to call (bug #718176).
  - Requires chkconfig (bug #712362).


author: Tim Waugh <twaugh@redhat.com> 0.0.3-1
changelog:
  - 0.0.3:
    - Allow multiple services to be defined in a single configuration
      file.
    - Allow protocol specifications, e.g. ipp/udp.


author: Tim Waugh <twaugh@redhat.com> 0.0.4-1
changelog:
  - 0.0.4:
    - Fixed initscript so that it will not be reordered to start after
      rpcbind (bug #487250).


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.6-1
changelog:
  - update to 2.6.6 (#588781)
  - move sasl config to /etc/sasl2 (#574439)
  - drop sasl v1 support
  - require Date::Calc for pflogsumm (#588726)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.6.6-6.1
changelog:
  - Backported patch to use long integers for message_size_limit,
    mailbox_size_limit and virtual_mailbox_limit
    Resolves: rhbz#1263265


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.6.6-7
changelog:
  - Backported patch to use long integers for message_size_limit,
    mailbox_size_limit and virtual_mailbox_limit
    Resolves: rhbz#907387


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.6.6-8
changelog:
  - Backported support for TLS 1.1, TLS 1.2
    Resolves: rhbz#1287192
  - Preserve timestamps for configuration files
    Resolves: rhbz#1307066


author: Tom Lane <tgl@redhat.com> 8.4.12-1
changelog:
  - Update to PostgreSQL 8.4.12, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #830726


author: Tom Lane <tgl@redhat.com> 8.4.13-1
changelog:
  - Update to PostgreSQL 8.4.13, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
    including the fixes for CVE-2012-3488, CVE-2012-3489
  Resolves: #852021


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.18-1
changelog:
  - Update to PostgreSQL 8.4.18, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
    including fixes for CVE-2013-0255, CVE-2013-1900 (#1017837)


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.20-1
changelog:
  - Update to PostgreSQL 8.4.20 (#1065843) for fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-20.html


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.20-7
changelog:
  - backport PGSTARTTIMEOUT variable from latest RHSCL while reasonably
    changing wait timeout to 2 seconds by default


author: Tom Lane <tgl@redhat.com> 8.4.701-4
changelog:
  - Add patch to provide some stub functions for JDBC 4.1 compatibility
  Resolves: #816731
  - Minor modernization of specfile, eg use maven directory macros,
    remove long-obsolete minimum versions from BuildRequires


author: Tom Lane <tgl@redhat.com> 8.4.701-5
changelog:
  - Switch to noarch (non-GCJ) build so that we can BuildRequire JDK >= 1.6;
    without this we don't get a JDBC4 driver at all, let alone 4.1.
  Related: #816731


author: Tom Lane <tgl@redhat.com> 8.4.701-8
changelog:
  - Add explicit Obsoletes to get rid of old arch-specific packages,
    per discussions in bugs 821892 and 822206
  Related: #816731


author: Tom Lane <tgl@redhat.com> 08.03.0100-1
changelog:
  - Update to version 08.03.0100
  - Since it looks like upstream has decided to stick with psqlodbcw.so
    permanently, allow the library to have that name.  But continue to
    provide psqlodbc.so as a symlink.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.11-4
changelog:
  - Backported turbo detection (turbo patch, #610464)
  - Show all P-states in dump mode (dump-all-pstates patch, accepted by upstream)
  - Backported tty handling for non-interactive mode (notty patch, #628514)
  - Output error in interactive mode if there is no tty (checktty patch,
    posted upstream)
  - Fixed rpmlint warning about mixed tabs and spaces


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.11-6
changelog:
  - Improved sigwinch handling
    Resolves: rhbz#698422

    * Tue Aug 02 2011 Jaroslav Škarvada <jskarvad@redhat.com> - 1.11-5
  - Fixed sigwinch handling
    Resolves: rhbz#698422


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-3
changelog:
  - New version of unlimit-fds patch
  - Fixed error message if FDs limit is reached (by fd-limit-err patch)
    Related: rhbz#998021


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3-4
changelog:
  - Reintroduced -d dump switch and improved reporting options
    (by improve-reporting-options patch)
    Resolves: rhbz#1333439


author: Roberto Bagnara <bagnara@cs.unipr.it> 0.10.2-3
changelog:
  - The `gprolog' and `yap' packages are not available on the sparc64 and
    sparcv9 architectures: so do `ppl-gprolog', `ppl-gprolog-static' and
    `ppl-yap'.


author: Caolán McNamara <caolanm@redhat.com> - 0.10.2-10
changelog:
  - Resolves: rhbz#521588 stick pl include before Yap include to stop 
    configure-time misdetection to resolve FTBFS


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-6
changelog:
  - don't require logrotate (#922769)
  - move pppd database to /var/run/ppp to prevent SELinux AVCs (#968398)


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-7
changelog:
  - ignore unrecognised radiusclient configuration directives (#906912)
  - add missing l2tp support (#815128)


author: Michal Sekletar <msekleta@redhat.com> - 2.4.5-8
changelog:
  - prevent running into issues caused by undefined behavior (pointers of incompatible types aliasing the same object)


author: Paul Howarth <paul@city-fan.org> 1.7.1-3
changelog:
  - Change download URL from df.sf.net to downloads.sf.net
  - Expand tabs in spec
  - Clarify license as GPL version 2 or later


author: Paul Howarth <paul@city-fan.org> 1.7.2-1
changelog:
  - Update to 1.7.2
  - New script and manpage: pptpsetup
  - Add patch to remove reference to stropts.h, not shipped in F9 onwards


author: Paul Howarth <paul@city-fan.org> 1.7.2-3
changelog:
  - Add dependency on /sbin/ip
  - Disable parallel make - object files are missing dependency on config.h


author: Paul Howarth <paul@city-fan.org> 1.7.2-5
changelog:
  - Retain permissions on /etc/ppp/chap-secrets when using pptpsetup (#492090)
  - Use upstream versions of patches
  - Re-enable parallel build; Makefile dependencies now fixed
  - Use perl rather than sed to edit Makefile, for spec compatibility with
    ancient distro releases


author: Paul Howarth <paul@city-fan.org> 1.7.2-6
changelog:
  - Don't check for MPPE capability in kernel and pppd unless we're creating a
    tunnel that requires encryption
  - Don't check for MPPE capability in kernel and pppd at all because current
    Fedora releases and EL >= 5 include MPPE support out of the box (#502967)


author: Jakub Jelinek <jakub@redhat.com> 0.4.2-7
changelog:
  - BuildReq libselinux-utils (#571724)
  - handle R_390_{PC32DBL,16,PC16,PC16DBL,8} relocations in 31-bit objects
    (#552635)
  - add prelink.conf(5) man page as a link to prelink(8) (#528933)


author: Jakub Jelinek <jakub@redhat.com> 0.4.3-1
changelog:
  - add support for prelink -u -o - library
  - add DWARF4 support
  - fix up reloc{8,9}.sh for sparc64, reenable testing on sparc64


author: Jakub Jelinek <jakub@redhat.com> 0.4.3-4
changelog:
  - for prelink -u -o ... if no .gnu.prelink_undo section is
    present just pass through the original bits to the output file
    instead of saving the ELF file using libelf into a temporary
    and then copying over or renaming that to the final output file
    (#614382)


author: Jakub Jelinek <jakub@redhat.com> 0.4.4-1
changelog:
  - support copying over extended attributes (#456105)
  - handle DW_OP_GNU_implicit_pointer, fix handling of DW_OP_call_ref


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-1
changelog:
  - enable for arm (#733089)
    - adjust arm default dynamic linker
    - fix up fast PIE detection to handle PT_LOPROC ... PT_HIPROC phdrs
      before PT_PHDR
    - disable cxx{1,2}.sh test checking for conflict removal on arm
      due to EABI weirdnesses, add new cxx3.sh test that tests conflict
      removal even on arm


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-3
changelog:
  - add --layout-page-size=N option, default to --layout-page-size=32768
    on AMD Bulldozer (#739460)
  - handle 0%{?rhel} >= 7 like 0%{?fedora} >= 13


author: Jakub Jelinek <jakub@redhat.com> 0.4.6-3.1
changelog:
  - fix saving of cache if some dependencies are unprelinkable and their                                            
    dependencies bad (#788238)                                                                                      
  - fix up DWARF4 DW_AT_data_member_location handling                                                               
  - add .debug_macro support                                                                                        
  - add DWZ multifile support


author: Peter Vrabec <pvrabec@redhat.com> 3.22-17
changelog:
  - fix truncation of mailbox when running into a disk quota or a
    full partition. Patch from Solar Designer.


author: Miroslav Lichvar <mlichvar@redhat.com> 3.22-18
changelog:
  - add IPv6 support to comsat notification (#198403)
  - package man page for mailstat
  - change mail spool directory to /var/spool/mail


author: Miroslav Lichvar <mlichvar@redhat.com> 3.22-24
changelog:
  - rename getline to avoid conflict with glibc (#505977)
  - add -Wno-comments to CFLAGS
  - remove package name from summary


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-36
changelog:
  - #1201024 - [RFE] Increase sysctl -p line size limit
  - #1246573 - typo in ps man page
  - #1251101 - Fixing human readable patch (removing trailing spaces)
  - #1284076 - [RFE] Support for thread cgroups
  - #1288208 - use of /proc/self/auxv breaks ps when running as a different euid
  - #1288497 - pmap - no sums computed for RSS and Dirty column
  - Resolves: #1201024 #1246573 #1251101 #1284076 #1288208 #1288497


author: Jan Rybar <jrybar@redhat.com> - 3.2.8-43
changelog:
  - Rework of patch 91 from 3.2.8-37, stripping removed permanently, no new option
  - Resolves: rhbz#1322111


author: Kamil Dudka <kdudka@redhat.com> - 3.2.8-45.el6_9.2
changelog:
  - fix integer overflows leading to heap overflow in file2strvec()
  - Resolves: CVE-2018-1124 CVE-2018-1126


author: Kamil Dudka <kdudka@redhat.com> - 3.2.8-45.el6_9.3
changelog:
  - drop leftover assignment in fix for CVE-2018-1124 causing a severe regression
  - Resolves: CVE-2018-1124


author: Paul Howarth <paul@city-fan.org> 1.3.2c-1
changelog:
  - Update to 1.3.2c, addressing the following issues:
    - SSL/TLS renegotiation vulnerability (CVE-2009-3555, bug 3324)
    - Failed database transaction can cause mod_quotatab to loop (bug 3228)
    - Segfault in mod_wrap (bug 3332)
    - <Directory> sections can have <Limit> problems (bug 3337)
    - mod_wrap2 segfaults when a valid user retries the USER command (bug 3341)
    - mod_auth_file handles 'getgroups' request incorrectly (bug 3347)
    - Segfault caused by scrubbing zero-length portion of memory (bug 3350)
  - Drop upstreamed segfault patch


author: Paul Howarth <paul@city-fan.org> 1.3.2d-1
changelog:
  - Update to 1.3.2d, addressing the following issues: 
    - mod_tls doesn't compile with pre-0.9.7 openssl (bug 3358) 
    - Lack of PID protection in ScoreboardFile (bug 3370) 
    - Crash when retrying a failed login with mod_radius being used (bug 3372) 
    - RADIUS authentication broken on 64-bit platforms (bug 3381) 
    - SIGHUP eventually causes certain DSO modules to segfault (bug 3387)


author: Paul Howarth <paul@city-fan.org> 1.3.3-1
changelog:
  - Update to 1.3.3 (see NEWS for list of fixed bugs)
  - Update PID file location in initscript
  - Drop upstreamed patches
  - Upstream distribution now includes mod_exec, so drop unbundled source
  - New DSO modules:
    - mod_sftp
    - mod_sftp_pam
    - mod_sftp_sql
    - mod_shaper
    - mod_sql_passwd
    - mod_tls_shmcache
  - Configure script no longer appends "/proftpd" to --localstatedir option
  - New utility ftpscrub for scrubbing the scoreboard file
  - Include public key blacklist and Diffie-Hellman parameter files for mod_sftp
    in %{_sysconfdir}
  - Remove IdentLookups from config file - disabled by default now


author: Paul Howarth <paul@city-fan.org> 1.3.3a-1
changelog:
  - Update to 1.3.3a
    - Added Japanese translation
    - Many mod_sftp bugfixes
    - Fixed SSL_shutdown() errors caused by OpenSSL 0.9.8m and later
    - Fixed handling of utmp/utmpx format changes on FreeBSD


author: Paul Howarth <paul@city-fan.org> 1.3.3b-1
changelog:
  - Update to 1.3.3b
    - Fixed SFTP directory listing bug
    - Avoid corrupting utmpx databases on FreeBSD
    - Avoid null pointer dereferences during data transfers
    - Fixed "AuthAliasOnly on" anonymous login


author: Paul Howarth <paul@city-fan.org> 1.3.3c-1
changelog:
  - Update to 1.3.3c (#647965)
    - Fixed Telnet IAC stack overflow vulnerability (CVE-2010-4221)
    - Fixed directory traversal bug in mod_site_misc (CVE-2010-3867)
    - Fixed SQLite authentications using "SQLAuthType Backend"
  - New DSO module: mod_geoip


author: Paul Howarth <paul@city-fan.org> 1.3.3c-2
changelog:
  - Add /etc/tmpfiles.d/proftpd.conf for builds on Fedora 15 onwards to
    support running with /var/run on tmpfs (#656675)


author: Paul Howarth <paul@city-fan.org> 1.3.3c-3
changelog:
  - Update mod_vroot to 0.9 (improvements to alias handling)
  - Note that the previous default configuration is broken by this change; see
    the new VRootAlias line in proftpd.conf
  - Add Default-Stop LSB keyword in initscript (for runlevels 0, 1, and 6)


author: Paul Howarth <paul@city-fan.org> 1.3.3d-1
changelog:
  - Update to 1.3.3d
    - Fixed sql_prepare_where() buffer overflow (bug 3536)
    - Fixed CPU spike when handling .ftpaccess files
    - Fixed handling of SFTP uploads when compression is used


author: Paul Howarth <paul@city-fan.org> 1.3.3e-1
changelog:
  - Update to 1.3.3e, fixing a large number of bugs reported upstream:
    - Process privileges may not handled properly when --enable-autoshadow is
      used (bug 3757)
    - mod_sftp closes channel too early after scp download (bug 3544)
    - mod_sftp_pam may tell client to disable echoing erroneously (bug 3579)
    - mod_sftp behaves badly when receiving badly formed SSH messages (bug 3586,
      CVE-2011-1137)
    - Using "$shell $libtool" in prxs does not work for all shells (bug 3593)
    - WrapAllowMsg directive broken due to bug 3423 (bug 3538)
    - SocketOptions receive/send buffer size parameters no longer work (bug 3607)
    - mod_wrap2 needs to support netmask rules for IPv6 addresses (bug 3606)
    - APPE/STOU upload flags erroneously preserved across upload commands
      (bug 3612)
    - Malicious module can use sreplace() function to overflow buffer (bug 3614)
    - Exiting sessions don't seem to die properly (bug 3619)
    - mod_delay sometimes logs "unable to load DelayTable into memory" (bug 3622)
    - Plaintext command injection in FTPS support (bug 3624)
    - mod_ifsession rules using regular expressions do not work (bug 3625)
    - Truncated client name saved in ScoreboardFile (bug 3623)
    - %w variable populated with non-absolute path in SQLLog statement (bug 3627)
    - Unnecessarily verbose "warning: unable to throttle bandwidth: Interrupted
      system call" (bug 3628)
    - SSH DISCONNECT messages sent by mod_sftp even for FTP connections in some
      cases (bug 3630)
    - mod_sql should log "unrecoverable database error" at a higher priority
      (bug 3632)
    - Proftpd is eating CPU when reparsing configuration file on SIGHUP (bug 3610)
    - Incorrect generation of DSA signature for SSH sessions (bug 3634)
  - Update mod_vroot to 0.9.2
  - Fix typo in initscript
  - Nobody else likes macros for commands


author: BJ Dierkes <wdierkes@rackspace.com> - 2.3.0-6
changelog:
  - Add Group: Development/Libraries to -lite-devel package
  - BuildRequires: python-setuptools on EL5 (not python-setuptools-devel)
  - Don't build -java on EL5/EL6 (until maven2 is packaged into EPEL)
  - Add Patch3: protobuf-2.2.0-libtool.patch (on el5)
  - Don't BuildRequire automake, autoconf on el5
  - Don't run autogen.sh on EL5


author: BJ Dierkes <wdierkes@rackspace.com> - 2.3.0-7
changelog:
  - Added Patch4: protobuf-2.3.0-ez_setup.patch (don't use ez_setup
    as it tries to download setuptools)


author: Ivana Varekova <varekova@redhat.com> - 6.3.2-56
changelog:
  - fix the psacct to deal with all acct types and
    if it is possible and wanted then add the possibility
    to display the pid and ppid number


author: Jaromir Capik <jcapik@redhat.com> - 6.3.2-63.el6_3.3
changelog:
  - Resolves: rhbz#838998
  - Fixing 'sa -u' SIGSEGVs & wrong UIDs
  - Fixing the ChengeLog version typos ... 6.2.3 -> 6.3.2


author: Jaromir Capik <jcapik@redhat.com> - 6.3.2-66
changelog:
  - Resolves: rhbz#837621
  - Fixing 'sa -u' SIGSEGVs & wrong UIDs
  - Fixing the ChengeLog version typos ... 6.2.3 -> 6.3.2


author: Jaromir Capik <jcapik@redhat.com> 22.6-18
changelog:
  - Dropping the previously applied fuser patch (#787776)
  - The patch has a negative performance and reliability impact
  - Related: rhbz#787776


author: Jan Rybar <jrybar@redhat.com> - 22.6-20
changelog:
  - fuser manpage: note about handling not-owned processes moved from BUGS to RESTRICTIONS
  - Resolves: rhbz#1211743


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.7-5
changelog:
  - Patch pth-config.
    This shall fix the multiarch conflict in pth-devel (#342961).
    It must not return -I/usr/include and -L/usr/{lib,lib64} either,
    since these are default search paths already.
  - Replace the config.status CFLAGS sed expr with a patch.


author: Benjamin Otte <otte@redhat.com> - 2.6.5-2
changelog:
  - Remove make scripts, they are unneeded (use pkg-config) and break multilib
  - Add fix for strict aliasing problems
  - Fix multilib issues in generated headers
  Resolves: #rhbz605100


author: Jeff Fearn <jfearn@redhat.com> 1.2-0
changelog:
  - Fix images missing from distributed set output. BZ #532837
  - Correct image path when running clean_ids.
  - Fix typo in format description. BZ #532379
  - Add comment to clean.
  - force package to run clean to avoid stale content. BZ #538676


author: Jeff Fearn <jfearn@redhat.com> 1.3-0
changelog:
  - Fixed --version BZ #533081
  - Fixed empty params in new book cfg file. BZ #533322
  - Fixed clean_ids taking too long.
  - Added nowait option for brew.
  - Improved epub support. BZ #536706
  - Add missing rpm-build req. BZ #537970
  - Changed ol ol style. BZ #537256
  - Fix missing revision history field crash. BZ #539741
  - Fix bug in condition logic in XmlClean. BZ #540685
  - Add translation stats. BZ #540696
  - Stopped processing xml files in extras dir. BZ #540383
  - Fixed callout rendering. BZ #531686
  - Fix wrong docs for condition usage. BZ #540691
  - Remove list style from stepalternatives. BZ #511404
  - Force step::para to keep-with-next if followed by a figure.
  - Edited Conventions.xml.
  - Exclude Legal_Notice.xml from pot creation.
  - Fix nested XML breaking translations.
  - Fix syntax highlighting adding whitespace. BZ #544141
  - Better error message for Kate language mismatch.


author: Jeff Fearn <jfearn@redhat.com> 1.4-0
changelog:
  - Ignore obsolete entries in stats code. BZ #546130
  - Fix valid_lang matching on unknown languages.
  - Fix invalid tag in DTD. BZ #548629
  - Added contrib to translation tag list. BZ #550460
  - Added firstname, lastname, orgname to translation tag list. BZ #555645
  - Remove comments from translations. BZ #555647
  - Fix content in root nodes not being added to pot. BZ #554261
  - Fix mixed mode content being dropped when merging translations. BZ #549925
  - Fix ID creation in refentry. BZ #553085
  - Add gettext Requires. BZ #550461
  - Fix non-default tmp dir. BZ #551974
  - Fix validation output. BZ #556684
  - Fix tag attributes breaking translation merge. BZ #554230
  - Format XML when running create. BZ #556201
  - Switch Japanese font to ipa-gothic-fonts on Fedora.
  - Fix Japanes mono/proportional font selection.
  - Add TTC build time script. BZ #557336
  - Add check for main file before parsing.
  - Add check for OS before running FOP.


author: Jeff Fearn <jfearn@redhat.com> 1.5-0
changelog:
  - Croak if profiling would remove root node.
  - Add Archive::Zip to Build.pl
  - Fix --config and add to help text
  - Force footnotes and indexterms to be inline for translations. BZ #563056
  - Add CVS package option. RT #59132
  - Fix white space issues in abstract. BZ #559823
  - Fix translation strings not matching correctly BZ #563397
  - Fix entity with underscore. BZ #561178
  - Fix config values of zero being ignored. BZ #564405
  - Fix footnote number missing in footer. BZ #565903
  - Fix duplicate text in callouts. BZ #561618
  - Remove outdated references to catalogs parameter. BZ #565498
  - Fix white space in book name breaking creation.
  - Fix nested tag with similar name breaking translation. BZ #568201
  - Fix translated packages using source version.
  - Switch from object to iframe BZ #542524
  - More accurate word counts for translations reports.


author: Jeff Fearn <jfearn@redhat.com> 1.6.1-0
changelog:
  - Fix package_brand including unwanted files. BZ #570715
  - Fix empty lines breaking callouts. BZ #570046
  - Detect verbatim content in translatable content. BZ #571633
  - Fix missing IO::String requires properly. BZ #568950
  - Add print style sheet to XHTML. RT #60327
  - Force UTF8 on all files. BZ #570979
  - Fix comments in callout breaking build. BZ #572047
  - Fix table border display. BZ #572995


author: Jeff Fearn <jfearn@redhat.com> 1.6.2-0
changelog:
  - Fix hyphenate.verbatim running out of depth. BZ #577095
  - Fix UTF8 error in translations. BZ #576771
  - Add surname and othername to translatable tag list. BZ #578343
  - No fuzzy strings in merged XML. BZ #578337
  - Allow clean_ids to add entity reference. BZ #576462
  - Added --quiet and --nocolours. BZ #578366


author: Jeff Fearn <jfearn@redhat.com> 1.6.3-0
changelog:
  - Disable verbatim hyphenation. BZ #577068
  - Fix anchors breaking HTML. BZ #579069
  - Fix common options not in help text.
  - Fix formatting of abstract in spec. BZ #579928
  - Translate verbatim tags. BZ #580360
  - Add print_unused option. BZ #580799
  - Overwrite zero length PO files. BZ #581397
  - Fix citerefentry breaking translation. BZ #581773
  - Fix reference bug in html-single.
  - Added print_known and print_banned actions.
  - Fix typo in POD. Raphaël Hertzog <hertzog@debian.org>
  - Fix indexterm translation. BZ #582255
  - Fix non-breaking space being treated like normal white space. BZ #582649
  - Fix webkit & pdf table borders. BZ #585115
  - Make indexterm translatable. BZ #582680
  - Make keyword translatable. BZ #583224
  - Add Eclipse help target. BZ #587489
  - Convert MAX_WIDTH to a parameter max_image_width. BZ #580774
  - Add confidential text to title, first, and blank pages in PDF. BZ #588980
  - Add confidential_text parameter. BZ #588980
  - Fix article list formatting in HTML. BZ #588999
  - Fix epub validation issues. BZ #589333
  - Fix xref to term with indexterm BOOM. BZ #580751
  - Fix keyword highlight breaking callouts. BZ #590933
  - Fix right icon misaligned. BZ #590964


author: Jeff Fearn <jfearn@redhat.com> 2.0-0
changelog:
  - Add Publican::Website.
  - Add web_*_label params for web menus.
  - Add underscores to cleanset, installbrand, and printtree. BZ #581090
  - Update docs with Website content
  - Update brand license text.
  - Fix different log jar path on F14+
  - Add constraint to help_config output.
  - Fix segfault when indexterm has no leading content. BZ #592666
  - Fix inline indexterm. BZ #592823
  - Translate productname tag. BZ #592669
  - Fix formalpara missing ID. BZ #595564
  - Add dummy lang.css to avoid 404's. BZ #595799
  - Improve validation error message. BZ #593887
  - Fix qandaentry ID. BZ #593892
  - Fix Icon non-conformance. BZ #593890
  - Fix admonitions splitting across pages. BZ #596257
  - Fix HTML simple list border. BZ #599258
  - Fix formal object IDs. BZ #601363
  - Fix Revision History layout. BZ #559787 #598828 #598833
  - Remove title color from term in HTML. BZ #592822
  - Fix highlight breaking callouts. BZ #590933
  - Add support for LineColumn coords in area tag.
  - Update font requires for F12 and F13.
  - Fix clean_ids adding newline to verbatim. BZ #604465
  - Fix index missing ID. BZ #606418
  - Fix files dir being missed. BZ #609345
  - Adjust admonition layout.


author: Rüdiger Landmann <r.landmann@redhat.com> 1.8
changelog:
  - remove reference to OPL licence
  - add max_image_width for BZ#580774
  - add confidential_text for BZ#588980


author: Owen Taylor <otaylor@redhat.com> - 2.20.0-4.el6
changelog:
  - Build without gobject-introspection support, the form of support
    in 2.20 was subsequently removed upstream.
    Resolves: rhbz 555583


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.1-16.20090824bzr68
changelog:
  - Rebase to new upstream snapshot
  - Patches merged upstream
  - Fixes deprecation warnings on py2.6/py3.0
  - Remove py2.3 patch -- only needed for EPEL-4


author: Adam Jackson <ajax@redhat.com> 2.15.2-4
changelog:
  - Drop the explicit Requires: numpy as per new packaging guidelines.  If
    your app calls gtk.gdk.get_pixels_array() you need to pull numpy in
    yourself.


author: Chris Lumens <clumens@redhat.com> - 1.74.8-1
changelog:
  - Add support for reserved space in volume group. (dlehman)
  - Add --same-as-ram option for swap size specification (#744129) (vpodzime)


author: Chris Lumens <clumens@redhat.com> - 1.74.11-1
changelog:
  - Deprecated options that required a value should still accept one (jbastian).
    Resolves: rhbz#815573
  - Don't error out if volgroup --useexisting is given with no members. (clumens)
    Resolves: rhbz#823856, rhbz#837440
  - Add an argument for specifying the luks algorithm. (clumens)
    Resolves: rhbz#843174
  - bonding support: add network --bondslaves --bondopts options (rvykydal)
    Resolves: rhbz#662007
  - vlan support: add network --vlanid option. (rvykydal)
    Resolves: rhbz#668065
  - Add swap --hibernation to logvol command (vpodzime)
    Resolves: rhbz#848818


author: Chris Lumens <clumens@redhat.com> - 1.74.12-1
changelog:
  - Add cipher option for encrypted autopart. (dlehman)
  - Add support for fcoe --autovlan option (#813998) (rvykydal)
  - add unsupported_hardware command (#824963) (bcl)


author: Chris Lumens <clumens@redhat.com> - 1.74.13-1
changelog:
  - Also fix the version test for RHEL6. (clumens)
  - Fix a couple minor problems pychecker caught. (clumens)
  - Add network --ipv6gateway option (#978252) (rvykydal)
  - fix TypeError in network.py with ipv6 static addresses (#966183). (wwoods)
  - Fix a bug in logvol duplicate reporting (#924579, mhuth). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.74.14-1
changelog:
  - Add tests for incorrect command usage detection (mkolman)
  - Add class for multi-line command sequence tests (mkolman)
  - Raise an error if autopart is combined with partitioning commands (#886010) (mkolman)


author: Chris Lumens <clumens@redhat.com> - 1.74.16-1
changelog:
  - Add an option to disable even installing the core group. (clumens)
  - Add a new bootloader --disabled option. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.74.17-1
changelog:
  - Fix small issues with output formatting of the new --cdl option. (clumens)
  - Add clearpart --cdl option. (#1182624) (sbueno+anaconda)


author: Chris Lumens <clumens@redhat.com> - 1.74.18-1
changelog:
  - Add support for specifying thin pool profile (vpodzime)
    Related: rhbz#1083459
  - Add support for custom layouts using lvm thin provisioning. (dlehman)
    Related: rhbz#1083459


author: Chris Lumens <clumens@redhat.com> - 1.74.22-1
changelog:
  - Fix handling # in passwords. (clumens)
    Related: rhbz#1301267
  - Pass comments=True to shlex.split calls in the test functions. (clumens)
    Related: rhbz#1301267


author: David Cantrell <dcantrell@redhat.com> - 2.5-1
changelog:
  - Update release instructions. (dcantrell)
  - Remove old cylinder alignment test cases for _ped. (dcantrell)
  - Add tests for max partition length / start sector (hdegoede)
  - Add _pedmodule and parted functions for max partition length / start
    sector (hdegoede)
  - Remove align_to_cylinders function bindings (hdegoede)
  - Add tests for disk flag methods (hdegoede)
  - Add _pedmodule and parted functions for per disk flags (hdegoede)
  - Every tuple member requires a comma after it. (dcantrell)
  - Fill out a lot of simple _ped.Disk test cases. (dcantrell)
  - Disable DeviceDestroyTestCase for now. (dcantrell)
  - Add RequiresLabeledDevice to tests/_ped/baseclass.py. (dcantrell)
  - Attempt at fixing _ped.Device.destroy(), no dice. (dcantrell)
  - Fix UnitFormatCustomTestCase and UnitFormatTestCase. (dcantrell)
  - Fix UnitFormatCustomByteTestCase and UnitFormatByteTestCase. (dcantrell)
  - Add DeviceStrTestCase, disable DeviceDestroyTestCase. (dcantrell)
  - Add DeviceDestroyTestCase and DeviceCacheRemoveTestCase. (dcantrell)
  - Implemented ConstraintIsSolutionTestCase(). (dcantrell)
  - Implement ConstraintSolveMaxTestCase(). (dcantrell)
  - Implement ConstraintSolveNearestTestCase(). (dcantrell)
  - Correct py_ped_file_system_probe_specific() for NULL returns. (dcantrell)
  - Implement FileSystemProbeSpecificTestCase(). (dcantrell)
  - Implement FileSystemProbeTestCase(). (dcantrell)
  - Add RequiresFileSystem to tests/_ped/baseclass.py. (dcantrell)
  - Add disk alignment test cases in test_ped.py. (dcantrell)
  - Fix CHSGeometryStrTestCase(). (dcantrell)
  - Fix ConstraintDuplicateTestCase...finally. (dcantrell)
  - Put a deprecation warning in py_ped_constraint_duplicate(). (dcantrell)
  - Note that we need parted from Fedora for pyparted. (dcantrell)
  - Fix UnitGetSizeTestCase in _ped test cases for _ped.UNIT_PERCENT.
    (dcantrell)
  - Add testcase for new _ped disk get_partition_alignment method (hdegoede)


author: Hans de Goede <hdegoede@redhat.com> - 2.5-3
changelog:
  - Change python_sitearch macro to use %global as the new rpm will break
    using %define here, see:
    https://www.redhat.com/archives/fedora-devel-list/2010-January/msg00093.html


author: Hans de Goede <hdegoede@redhat.com> - 2.5-4
changelog:
  - Rebuild for new parted-2.1
  - Remove py_disk_clobber_exclude function binding, as this function was
    removed from parted-2.1


author: David Cantrell <dcantrell@redhat.com> - 3.4-2
changelog:
  - Return PED_EXCEPTION_NO for interactive yes/no exceptions, pass
    appropriate exception to caller
    Resolves: rhbz#575749


author: Matej Stuchlik <mstuchli@redhat.com> - 2.6.6-42
changelog:
  - Add an explicit RPATH to _elementtree.so pointing at the directory
  containing system expat
  Resolves: rhbz#962779


author: Robert Kuska <rkuska@redhat.com> - 2.6.6-59
changelog:
  - Let ConfigParse handle options without values
  - Add check phase to specfile, fix and skip relevant failing tests
  Resolves: rhbz#1031709


author: Matej Stuchlik <mstuchli@redhat.com> - 2.6.6-63
changelog:
  - Since -libs now provide python-ordered dict, added ordereddict
    dist-info to site-packages
  Resolves: rhbz#1199997


author: Tomas Orsava <torsava@redhat.com> - 2.6.6-65
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in httplib (upstream patch)
  Resolves: rhbz#1346355


author: Pavel Mayorov <pmayorov@cloudlinux.com> 2.6.6-70
changelog:
  - Add Oracle Linux distribution in platform.py
  - CVE-2018-20852: Prefix dot in domain for proper subdomain validation
  - CVE-2020-8492: Python allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client
  - CVE-2020-26116: http.client allows CRLF injection if the attacker controls the HTTP request method
  - CVE-2020-27619: Unsafe use of eval() on data retrieved via HTTP in the test suite


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 2.6.6-70.tuxcare.els6
changelog:
  - CVE-2021-3737: Fix HTTP client infinite line reading (DoS) after receiving a '100 Continue' HTTP response


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 2.6.6-70.tuxcare.els7
changelog:
  - CVE-2015-20170: mailcap: findmatch() function does not sanitise the second
    argument allowing to inject shell commands


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 2.6.6-70.tuxcare.els8
changelog:
  - CVE-2022-45061: Fix quadratic time idna decoding
  - fix tests to be compatible with expat 2.0.1-tuxcare.els


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 2.6.6-70.tuxcare.els9
changelog:
  - CVE-2023-24329: Prevent urllib.parse.urlparse from accepting schemes that
    don't begin with an alphabetical ASCII character


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 2.6.6-70.tuxcare.els10
changelog:
  - CVE-2023-24329: part2: Start stripping C0 control and space chars in `urlsplit`
  - Also correct the first CVE-2023-24329 patch: Fix test_attributes_bad_scheme
    to check for non-ascii symbol as first character of url


author: Pavel Kopylov <pkopylov@cloudlinux.com> - 2.6.6-70.tuxcare.els14
changelog:
  - CVE-2024-7592: fix algorithm with quadratic complexity to avoid using excess
    CPU resources while parsing the cookie value
  - CVE-2024-6232: fix regular expressions that allowed excessive
    backtracking during tarfile.TarFile header parsing and was vulnerable to ReDoS
    via specifically-crafted tar archives


author: Matthias Saou <http://freshrpms.net/> 0.5.8-1
changelog:
  - Update to 0.5.8.
  - Don't include new "misc" directory, as its location is ugly!
  - Don't include applet-coherence as it probably requires the "misc" directory.
  - Remove all reqs but python-configobj, as it seems to be the only one left.


author: Matthias Saou <http://freshrpms.net/> 0.6.2-2
changelog:
  - Re-add re-needed re-python-twisted re-quirements (#485093).
  - Require dbus for proper parent directory ownership.


author: Luke Macken <lmacken@redhat.com> - 1.3.1-2
changelog:
  - Add a patch to remove Beaker's use of hashlib on Python2.4,
    due to incompatiblities with Python's hmac module (#503772)


author: Kyle VanderBeek <kylev@kylev.com> - 1.3.1-5
changelog:
  - Add patch based on upstream hg 403ef7c82d32 for config overwriting that
    breaks Pylons unit tests


author: Garrett Holmstrom <gholms@fedoraproject.org> - 2.32.1-1
changelog:
  - Updated to 2.32.1 (RH #1126056, RH #1132348)
  - Added python3-boto (RH #1024363)
  - Added (but did not enable) unit tests (RH #1072946, RH #1072923)


author: Garrett Holmstrom <gholms@fedoraproject.org> - 2.34.0-1
changelog:
  - Updated to 2.34.0 (RH #1072925, RH #1072928, RH #1161229)
  - Made executables point to python2 (RH #1152444)
  - Enabled unit tests on Fedora (RH #1072946)


author: Garrett Holmstrom <gholms@fedoraproject.org> - 2.34.0-2
changelog:
  - Added missing python-requests and python-rsa dependencies
  - Disabled unit tests due to rawhide/F21 python regression (RH #1161166:c4)


author: Charalampos Stratakis <cstratak@redhat.com> - 1:2.34.0-5
changelog:
  - Import to RHEL 6.9
  - Use the epoch tag so the EPEL 6 package can be replaced
  Resolves: rhbz#1423029


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0.1-4
changelog:
  - Fix cheetah enough that it will pass its unittests on python-2.6.  This has
    actually been broken since py-2.5 and this fix is only a workaround.


author: Vladimir Prokofev <vprokofev@cloudlinux.com> 1.2-2.6
changelog:
  - OPCACHE-13 Home dirs detection for cPanel/DA/Plesk
  - PTCLLIB-53: Add the permission In /etc/sudoers to run /usr/bin/selectorctl


author: M Zhbankov <mzhbankov@cloudlinux.com> 1.2-2.7
changelog:
  - PTCLLIB-57: fix bug with adding entries in uid_full_map if no regular users present in system
  - PTCLLIB-44: improve detection of DirectAdmin
  - PTCLLIB-47: determine admin password for database access in Plesk correctly
  - PTCLLIB-43: Fix broken cpapi for cPanel 11.52


author: Anton Volkov <avolkov@cloudlinux.com>, Vladimir Prokofev <vprokofev@cloudlinux.com> 1.2-2.8
changelog:
  - PTCLLIB-64: Fix python syntax error while update/install lvemanager on CL5 Plesk
  - OPCACHE-13 Auto home dirs detection for cPanel/DA/Plesk (part 2)


author: Anton Volkov <avolkov@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com> 1.2-2.10
changelog:
  - PTCLLIB-70: add handling of OSError exception to reload_processes function
  - PTCLLIB-65: Fix lvemanager on DA adding !requiretty for clsudoers group


author: David Malcolm <dmalcolm@redhat.com> - 4.6.0-3
changelog:
  - fix source URL
  - use %global rather than %define
  - avoid intermediate "docs" directory in path of documentation


author: Andy Grover <agrover@redhat.com> - 1.99.1.git987b63b-3
changelog:
  - Address comments from spec review
    - drop examples/myshell from doc, it hasn't been updated for API change
    - Fully document procedure to generate source .tar.gz
    - Remove "." from summary
    - Remove commented-out spec todos and other cruft


author: Andy Grover <agrover@redhat.com> - 1:1.1-2
changelog:
  - Properly update changelog
  - Sync version with upstream, Epoch used
  - Change Source URL to intermediate github repo


author: Andy Grover <agrover@redhat.com> - 1:1.1.fb1-1
changelog:
  - New upstream source and release
  - Remove patches:
    * python-configshell-remove-epydoc-dep.patch
    * python-configshell-git-version.patch


author: David Malcolm <dmalcolm@redhat.com> - 3.0.1-2
changelog:
  - require python-setuptools at run-time (556290)
  - don't add tracer.so to the provides
  - fix License metadata
  - remove executable permissions from many files that don't need it


author: Martin Sivak <msivak at redhat dot com> - 0.0.8-1
changelog:
  - Fix the params for add and remove key routines
  - Workaround one SIGSEGV in cryptsetup and change the order of passwords in luksRemoveKey


author: Luke Macken <lmacken@redhat.com> - 3.0.1-2
changelog:
  - Only run the test suite on Fedora 11, which has Py2.6 and the multiprocessing
    module.  We can disable this once the compat module is packaged for F10 and
    below.


author: Toshio Kuratomi <a.badger@gmail.com> - 1.5-2
changelog:
  - Verify that .pth files are correct.
  - Update license tag for new guidelines.
  - Update setuptools BR for changes in rawhide.


author: David Sommerseth <davids@redhat.com> - 3.10.7-3
changelog:
  - Fixed even more .spec file issues and removed explicit mentioning
    of /usr/share/python-dmidecode/pymap.xml


author: Nima Talebi <nima@it.net.au> - 3.10.8-1
changelog:
  - New Upstream release.
  - Big-endian and little-endian approved.
  - Packaged unit-test to tarball.
  - Rewritten unit-test to be able to run as non-root user, where it will not
    try to read /dev/mem.
  - Added two dmidump data files to the unit-test.


author: Roman Rakus <rrakus@redhat.com> - 3.10.13-1
changelog:
  - Update to 3.10.13 release
    Resolves: #621567, #627901, #667363
  - Signal handler for SIGILL
    Resolves #646429


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-3
changelog:
  - add LICENSE file to payload
  - fix %description
  - don't ship .buildinfo file
  - change %define to %global
  - eliminate pybasever
  - delete unused patch (patch 4)


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.3-1
changelog:
  - Add get_flags method from the first python-ethtool contributor, yay
  - Add pifconfig command, that mimics the ifconfig tool using the
    bindings available


author: Jeff Garzik <jgarzik@redhat.com> - 0.3-5.2
changelog:
  - Import man page patch from Fedora BZ# 638475
  - Fix description spelling errors found by rpmlint.
  - Fixes BZ# 605535


author: David Malcolm <dmalcolm@redhat.com> - 0.6-1
changelog:
  - cherrypick fixes for Py_None reference leak, and for some error-handling bugs
  Resolves: rhbz#680269


author: David Malcolm <dmalcolm@redhat.com> - 0.6-2
changelog:
  - fix typo in pethtool --help
  Resolves: rhbz#692028
  - fix memory leaks
  Resolves: rhbz#698125
  - add IPv6 information to pifconfig
  Resolves: rhbz#698192
  - respect interface arguments to pifconfig
  Resolves: rhbz#714753
  - add a get_ipv4_addresses() method to ethtool.etherinfo to support devices
  with multiple IPv4 addresses
  Resolves: rhbz#759150


author: David Malcolm <dmalcolm@redhat.com> - 0.6-3
changelog:
  - update python-ethtool-0.6-add-get_ipv4_addresses-method.patch, addressing
  bug 886644, memory leaks, and a crasher when the broadcast address is NULL
  Resolves: rhbz#886644


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.6-4
changelog:
  - make get_active_devices() return IPv6-only devices, too
  Resolves: rhbz#855920
  - make pifconfig output all IPv4 addresses for all devices
  Resolves: rhbz#876211


author: Toshio Kuratomi <toshio@fedoraproject.org> 1.0.1-1
changelog:
  - Update to 1.0.1
  - Fixes issue where chained_validators were silently ignored.  (bz#454988)
    Both of our patches are fixed upstream now.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 0.5.1-1
changelog:
  - Version 0.5.1
  - http://svn.edgewall.org/repos/genshi/tags/0.5.1/
  - (Jul 9 2008, from branches/stable/0.5.x)
  - 
  -  * Fix problem with nested match templates not being applied when buffering
  -    on the outer `py:match` is disabled. Thanks to Erik Bray for reporting the
  -    problem and providing a test case!
  -  * Fix problem in `Translator` filter that would cause the translation of
  -    text nodes to fail if the translation function returned an object that was
  -    not directly a string, but rather something like an instance of the
  -    `LazyProxy` class in Babel (ticket #145).
  -  * Fix problem with match templates incorrectly being applied multiple times.
  -  * Includes from templates loaded via an absolute path now include the correct
  -    file in nested directories as long if no search path has been configured
  -    (ticket #240).
  -  * Unbuffered match templates could result in parts of the matched content
  -    being included in the output if the match template didn't actually consume
  -    it via one or more calls to the `select()` function (ticket #243).


author: Karsten Hopp <karsten@redhat.com> 1.1.6-15
changelog:
  - disable sane subpackage and sane requirements for mainframes, we don't have
    sane on s390 and s390x


author: Joel Granados <jgranado@redhat.com> - 1.1.6-17
changelog:
  - Fix the shebang issue.  See https://fedoraproject.org/wiki/Features/SystemPythonExecutablesUseSystemPython


author: Tim Lauridsen <timlau@fedoraproject.org> - 0.2.4-1
changelog:
  - Release 0.2.4:
  -   Updated to work with Python-2.6 (Python-2.4 and 2.5 are still supported)
  -   Support for files opened in unicode mode
  -   Fixed Python-3.0 compatibility warnings
  -   Minor API cleanup


author: Tim Lauridsen <timlau@fedoraproject.org> - 0.3.0-1
changelog:
  - Release 0.3.0
  -  Fix handling of continuation lines
  -  Fix DEFAULT handling
  -  Fix picking/unpickling


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.1-1
changelog:
  - Update to 2.1, which fixes a number of bugs.
    See http://jinja.pocoo.org/2/documentation/changelog#version-2-1.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.2.1-1
changelog:
  - Update to 2.2.1, mainly a bugfix release.
  - Remove patch no longer needed.
  - Remove conditional for FC-8.
  - Compilation of speedup module has to be explicitly requested now.


author: Miro Hrončok <mhroncok@redhat.com> - 2.2.1-3
changelog:
  - Require python-setuptools, otherwise jinja2.__version__ evaluates to "unknown"
  Resolves: rhbz#1121241


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0-4
changelog:
  - Import to RHEL 6.9
  - Increment the release so it will replace the respective EPEL build
  Resolves: rhbz#1422977


author: Rob Crittenden <rcritten@redhat.com> - 1.1-7
changelog:
  - Fix calculation of username string length in authenticate_gss_client_wrap
    (#1057333)
  - Fix version in setup.py so egg information is correct (#973379)


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 0.9.4-2
changelog:
  - Add hotfix for broken py-def (#220843)
  - Simplify kid and kidc to not require setuptools to run (#220844)


author: John Dennis <jdennis@redhat.com> - 1.0.90-2
changelog:
  - Resolves: bug 642414
    Update to latest upstream release (includes the following)
    - return the contents of the AP_REP message from rd_rep()
    - improved memory handling
    - removed use of KRB_PRIVATE
    - better docstrings


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.4.2-1
changelog:
  - interrupts: Add find_by_user_regex
  - process: Always set the "cmdline" array, even if empty
  - pidstats: Remove dead processes in find_by_name()
  - pidstats: Add process class to catch dict references for late parsing
  - pidstats: Move the /proc/PID/{stat,status} parsing to classes
  - pidstats: Introduce process_flags method


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.4.7-1
changelog:
  - Fix pidstat.process_flag()
  - Introduce pflags utility
  - Parse IRQ affinities for !root
  - Add PF_NO_SETAFFINITY const


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.4.9-1
changelog:
  - Adds documentations to classes, more work to do on methods
  - Fixes parsing of users in /proc/interrupts users field
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1245677


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2-0.5.beta2
changelog:
  - 2.2beta2 (2009-01-25)
  - Bugs fixed
  - 
  -    * Potential memory leak on exception handling. This was due to a
  -      problem in Cython, not lxml itself.
  -    * iter_links (and related link-rewriting functions) in lxml.html would
  -      interpret CSS like url("link") incorrectly (treating the quotation
  -      marks as part of the link).
  -    * Failing import on systems that have an io module.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2-0.6.beta3
changelog:
  - 2.2beta3 (2009-02-17)
  - Features added
  - 
  -    * XSLT.strparam() class method to wrap quoted string parameters that
  -     require escaping.
  - 
  - Bugs fixed
  - 
  -    * Memory leak in XPath evaluators.
  -    * Crash when parsing indented XML in one thread and merging it with
  -      other documents parsed in another thread.
  -    * Setting the base attribute in lxml.objectify from a unicode string
  -      failed.
  -    * Fixes following changes in Python 3.0.1.
  -    * Minor fixes for Python 3.
  - 
  - Other changes
  - 
  -    * The global error log (which is copied into the exception log) is now
  -      local to a thread, which fixes some race conditions.
  -    * More robust error handling on serialisation.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2-0.8.beta4
changelog:
  - 2.2beta4 (2009-02-27)
  - Features added
  - 
  -    * Support strings and instantiable Element classes as child arguments
  -      to the constructor of custom Element classes.
  -    * GZip compression support for serialisation to files and file-like
  -      objects.
  - 
  - Bugs fixed
  - 
  -    * Deep-copying an ElementTree copied neither its sibling PIs and
  -      comments nor its internal/external DTD subsets.
  -    * Soupparser failed on broken attributes without values.
  -    * Crash in XSLT when overwriting an already defined attribute using
  -      xsl:attribute.
  -    * Crash bug in exception handling code under Python 3. This was due to
  -      a problem in Cython, not lxml itself.
  -    * lxml.html.FormElement._name() failed for non top-level forms.
  -    * TAG special attribute in constructor of custom Element classes was
  -      evaluated incorrectly.
  - 
  - Other changes
  - 
  -    * Official support for Python 3.0.1.
  -    * Element.findtext() now returns an empty string instead of None for
  -      Elements without text content.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2-1
changelog:
  - 2.2 (2009-03-21)
  - Features added
  - 
  -    * Support for standalone flag in XML declaration through
  -      tree.docinfo.standalone and by passing standalone=True/False on
  -      serialisation.
  - 
  - Bugs fixed
  - 
  -    * Crash when parsing an XML Schema with external imports from a
  -      filename.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2.1-1
changelog:
  - 2.2.1 (2009-06-02)
  - Features added
  - 
  -    * Injecting default attributes into a document during XML Schema
  -      validation (also at parse time).
  -    * Pass huge_tree parser option to disable parser security restrictions
  -      imposed by libxml2 2.7.
  - 
  - Bugs fixed
  - 
  -    * The script for statically building libxml2 and libxslt didn't work
  -      in Py3.
  -    * XMLSchema() also passes invalid schema documents on to libxml2 for
  -      parsing (which could lead to a crash before release 2.6.24).


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2.2-1
changelog:
  - 2.2.2 (2009-06-21)
  - Features added
  - 
  -    * New helper functions strip_attributes(), strip_elements(),
  -      strip_tags() in lxml.etree to remove attributes/subtrees/tags
  -      from a subtree.
  - 
  - Bugs fixed
  - 
  -    * Namespace cleanup on subtree insertions could result in missing
  -      namespace declarations (and potentially crashes) if the element
  -      defining a namespace was deleted and the namespace was not used
  -      by the top element of the inserted subtree but only in deeper
  -      subtrees.
  -    * Raising an exception from a parser target callback didn't always
  -      terminate the parser.
  -    * Only {true, false, 1, 0} are accepted as the lexical representation
  -      for BoolElement ({True, False, T, F, t, f} not any more), restoring
  -      lxml <= 2.0 behaviour.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 2.2.3-1
changelog:
  - 2.2.3 (2009-10-30)
  - Bugs fixed
  - 
  -    * The resolve_entities option did not work in the incremental feed
  -      parser.
  -    * Looking up and deleting attributes without a namespace could hit a
  -      namespaced attribute of the same name instead.
  -    * Late errors during calls to SubElement() (e.g. attribute related
  -      ones) could leave a partially initialised element in the tree.
  -    * Modifying trees that contain parsed entity references could result
  -      in an infinite loop.
  -    * ObjectifiedElement.__setattr__ created an empty-string child element
  -      when the attribute value was rejected as a non-unicode/non-ascii
  -      string
  -    * Syntax errors in lxml.cssselect could result in misleading error
  -      messages.
  -    * Invalid syntax in CSS expressions could lead to an infinite loop in
  -      the parser of lxml.cssselect.
  -    * CSS special character escapes were not properly handled in
  -      lxml.cssselect.
  -    * CSS Unicode escapes were not properly decoded in lxml.cssselect.
  -    * Select options in HTML forms that had no explicit value attribute
  -      were not handled correctly. The HTML standard dictates that their
  -      value is defined by their text content. This is now supported by
  -      lxml.html.
  -    * XPath raised a TypeError when finding CDATA sections. This is now
  -      fully supported.
  -    * Calling help(lxml.objectify) didn't work at the prompt.
  -    * The ElementMaker in lxml.objectify no longer defines the default
  -      namespaces when annotation is disabled.
  -    * Feed parser failed to honour the 'recover' option on parse errors.
  -    * Diverting the error logging to Python's logging system was broken.


author: David Malcolm <dmalcolm@redhat.com> - 0.3.4-1
changelog:
  - rebase to 0.3.4; add requirement on python-markupsafe
  Resolves: rhbz#608155
  - add %check section, adding build-time requirements on python-nose and
  python-markupsafe


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.0-1
changelog:
  - Update to 2.0.
  - Adjusted source URL.
  - License changed to BSD only.
  - Upstream now provides a script to run markdown from the cmdline.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.0.1-3
changelog:
  - Add requirement on python-elementtree, which was a separate package
    before Python 2.5.
  - Re-add changelog entries accidentally removed earlier.


author: Chris Lumens <clumens@redhat.com> - 0.2-1
changelog:
  - Add a title to the main exception dialog so it looks right in anaconda.
  - Don't include an extra '/' in the displayed bug URL (#517515).
  - Now that there's .po files, package them.
  - Use the new exception icon (#517164).


author: Chris Lumens <clumens@redhat.com> - 0.4-1
changelog:
  - Add a default description to bug reports.
  - Handle the user pressing Escape by continuing to show the dialog.
  - Lots more translation updates.


author: Chris Lumens <clumens@redhat.com> - 0.6-1
changelog:
  - Make idSkipList work again.
  - Support dumping objects derived from Python's object.
  - Use the right method to set text on a snack.Entry (#526884).


author: Chris Lumens <clumens@redhat.com> - 0.7-1
changelog:
  - Add a test case framework.
  - Move src -> meh for ease of test case writing.
  - Another attempt at making the attrSkipList work (#532612, #532737).


author: Chris Lumens <clumens@redhat.com> - 0.8-1
changelog:
  - And add a requirement for report as well. (clumens)
  - filer.py is now completely taken over by meh. (clumens)
  - Everything from savers.py has moved into report. (clumens)
  - Remove unused UI code now that report handles all this for me. (clumens)
  - Switch ExceptionHandler to use report (#562656). (clumens)
  - Don't allow an exception when writing out an attribute stop the whole dump. (clumens)
  - Credit where credit is due. (clumens)


author: Chris Lumens <clumens@redhat.com> - 0.9-1
changelog:
  - Remove the requirement on python-bugzilla (#602794). (clumens)
  - Rename ba.po -> bs.po (#583055). (clumens)
  - Translation updates.


author: Chris Lumens <clumens@redhat.com> - 0.11-1
changelog:
  - Update the spec file URL to something valid (#670601). (clumens)
  - Don't use _D for Debug, since that's already used by the expander (#640929). (clumens)
  - Translation updates.


author: Chris Lumens <clumens@redhat.com> 0.11-2
changelog:
  - Change dependency to libreport-* (mtoman)
    Resolves: rhbz#730924
  - Add abrt-like information to bug reports (vpodzime).
    Resolves: rhbz#728871


author: Vratislav Podzimek <vpodzime@redhat.com> 0.12.1-1
changelog:
  - Adapt to new libreport API (vpodzime).
    Resolves: rhbz#769821
  - Add info about environment variables (vpodzime).
    Resolves: rhbz#788577


author: Sean Reifschneider <jafo@tummy.com> 1.36-3
changelog:
  - Changes based on feedback from Ruben Kerkhof:
  - Fixing license.
  - Removing PKG-INFO from doc.
  - Fixing summary.
  - Removing setuptools build dependency.
  - Changing permissions of memcache module to


author: Toshio Kuratomi - 1.1-11
changelog:
  - Add README file
  - Update old way of invoking setup.py
  - Fix conditionals for python-setuptools
  - Comment what myghty-importer.patch does


author: John Eckersberg <jeckersb@redhat.com> - 0.6.3-2
changelog:
  - Minor tweaks to spec file aligning with latest Fedora packaging guidelines
  - Enforce python 2.4 dependency as needed by netaddr >= 0.6.2
  - Drop BR on python-setuptool as it is not imported in setup.py
  - Drop BR on dos2unix use sed instead
  - Align description with that of delivered PKG-INFO
  - Rip out python shebangs
  - Add %check section to enable tests
  - Thanks to Gareth Armstrong <gareth.armstrong@hp.com>


author: John Eckersberg <jeckersb@redhat.com> - 0.7.1-1
changelog:
  - New upstream release 0.7.1 fixes naming conflict with 'nash' by
    renaming the netaddr shell to 'netaddr'


author: John Dennis <jdennis@redhat.com> - 0.7-1
changelog:
  - add support for symmetric encryption/decryption
    more support for digests (hashes)

    The following classes were added:
    PK11SymKey PK11Context

    The following methods and functions were added:
    get_best_wrap_mechanism          get_best_key_length
    key_gen                          derive
    get_key_length                   digest_key
    clone_context                    digest_begin
    digest_op                        cipher_op
    finalize                         digest_final
    read_hex                         hash_buf
    sec_oid_tag_str                  sec_oid_tag_name
    sec_oid_tag_from_name            key_mechanism_type_name
    key_mechanism_type_from_name     pk11_attribute_type_name
    pk11_attribute_type_from_name    get_best_slot
    get_internal_key_slot            create_context_by_sym_key
    import_sym_key                   create_digest_context
    param_from_iv                    param_from_algid
    generate_new_param               algtag_to_mechanism
    mechanism_to_algtag

    The following files were added:
    cipher_test.py digest_test.py


author: John Dennis <jdennis@redhat.com> - 0.8-1
changelog:
  - The following methods, properties  and functions were added:
    SecItem.type SecItem.len, SecItem.data
    PK11SymKey.key_data, PK11SymKey.key_length, PK11SymKey.slot
    create_context_by_sym_key
    param_from_iv
    generate_new_param
    get_iv_length
    get_block_size
    get_pad_mechanism
  - SecItem's now support indexing and slicing on their data
  - Clean up parsing and parameter validation of variable arg functions


author: John Dennis <jdennis@redhat.com> - 0.10-1
changelog:
  - Resolves: #619743, Update to latest upstream, changes include:
  - The following classes were added:
      InitParameters
      InitContext

  -The following module functions were added:
      nss.nss.nss_initialize()
      nss.nss.nss_init_context()
      nss.nss.nss_shutdown_context()
      nss.nss.nss_init_flags()

  - add nss_is_initialized()

  - Remove nss_init_nodb() when nss modules loads from previous version
    apparently this prevents subsequent calls to nss_init with a
    database to silently fail.
  - Clean up some cruft in doc/examples/verify_server.py

  - Invoke nss_init_nodb() when nss modules loads, this prevents segfaults
    in NSS if Python programmer forgot to call one of the NSS
    initialization routines.

  - Rename the classes X500Name, X500RDN, X500AVA to DN, RDN, AVA
    respectively.

  - DN and RDN objects now return a list of their contents when indexed by
    type, this is to support multi-valued items.

  - Fix bug where AVA object's string representation did not include it's
    type.

  - Enhance test/test_cert_components.py unit test to test for above
    changes.

  - Add CertificateRequest object

  - Fix incomplete read bug (due to read ahead buffer bookkeeping).
  - Remove python-nss specific httplib.py, no longer needed
    python-nss now compatible with standard library
  - Rewrite httplib_example.py to use standard library and illustrate
    ssl, non-ssl, connection class, http class usage

  - add nss.cert_usage_flags(), use it in ssl_example.py

  - Add format_lines() & format() methods to the new certificate extension objects.
  - Add printing of certificate extensions.
  - Add BasicContstraints certificate extension.
  - Fix several reference counting and memory problems discovered with valgrind.

  - fold in more ref counting patches from Miloslav Trmač <mitr@redhat.com>
    into upstream.
    Did not bump upstream version, just bumped release ver in this spec file.

  - Unicode objects now accepted as well as str objects for
    interfaces expecting a string.

  - Sockets were enhanced thusly:
      - Threads will now yield during blocking IO.
      - Socket.makefile() reimplemented
            file object methods that had been missing (readlines(), sendall(),
            and iteration) were implemented, makefile now just returns the same
            Socket object but increments an "open" ref count. Thus a Socket
            object behaves like a file object and must be closed once for each
            makefile() call before it's actually closed.
      - Sockets now support the iter protocol
      - Add Socket.readlines(), Socket.sendall()

  - The following classes were added:
      AuthKeyID
      BasicConstraints
      CRLDistributionPoint
      CRLDistributionPts
      CertificateExtension
      GeneralName
      SignedCRL
      X500AVA
      X500Name
      X500RDN

  - The following module functions were added:
      nss.nss.cert_crl_reason_from_name()
      nss.nss.cert_crl_reason_name()
      nss.nss.cert_general_name_type_from_name()
      nss.nss.cert_general_name_type_name()
      nss.nss.cert_usage_flags()
      nss.nss.decode_der_crl()
      nss.nss.der_universal_secitem_fmt_lines()
      nss.nss.import_crl()
      nss.nss.make_line_pairs()
      nss.nss.oid_dotted_decimal()
      nss.nss.oid_str()
      nss.nss.oid_tag()
      nss.nss.oid_tag_name()
      nss.nss.read_der_from_file()
      nss.nss.x509_alt_name()
      nss.nss.x509_ext_key_usage()
      nss.nss.x509_key_usage()

  - The following class methods and properties were added:
    Note: it's a method if the name is suffixed with (), a propety otherwise
      Socket.next()
      Socket.readlines()
      Socket.sendall()
      SSLSocket.next()
      SSLSocket.readlines()
      SSLSocket.sendall()
      AuthKeyID.key_id
      AuthKeyID.serial_number
      AuthKeyID.get_general_names()
      CRLDistributionPoint.issuer
      CRLDistributionPoint.get_general_names()
      CRLDistributionPoint.get_reasons()
      CertDB.find_crl_by_cert()
      CertDB.find_crl_by_name()
      Certificate.extensions
      CertificateExtension.critical
      CertificateExtension.name
      CertificateExtension.oid
      CertificateExtension.oid_tag
      CertificateExtension.value
      GeneralName.type_enum
      GeneralName.type_name
      GeneralName.type_string
      SecItem.der_to_hex()
      SecItem.get_oid_sequence()
      SecItem.to_hex()
      SignedCRL.delete_permanently()
      X500AVA.oid
      X500AVA.oid_tag
      X500AVA.value
      X500AVA.value_str
      X500Name.cert_uid
      X500Name.common_name
      X500Name.country_name
      X500Name.dc_name
      X500Name.email_address
      X500Name.locality_name
      X500Name.org_name
      X500Name.org_unit_name
      X500Name.state_name
      X500Name.add_rdn()
      X500Name.has_key()
      X500RDN.has_key()

  - The following module functions were removed:
    Note: use nss.nss.oid_tag() instead
      nss.nss.sec_oid_tag_from_name()
      nss.nss.sec_oid_tag_name()
      nss.nss.sec_oid_tag_str()

  - The following files were added:
      doc/examples/cert_dump.py
      test/test_cert_components.py

  - Apply patches from  Miloslav Trmač <mitr@redhat.com>
    for ref counting and threading support. Thanks Miloslav!

  - Review all ref counting, numerous ref counting fixes

  - Implement cyclic garbage collection support by
    adding object traversal and clear methods

  - Identify static variables, move to thread local storage


author: John Dennis <jdennis@redhat.com> - 0.10-2
changelog:
  - Related: #619743
  - split documentation out into separate doc sub-package
    and make building api documentation optional


author: John Dennis <jdennis@redhat.com> - 0.10-3
changelog:
  - Related: #619743
  - Fix all rpmlint warnings
  - doc for license, changelog etc. now in main package,
    doc subpackage now only contains api doc, examples, test, etc.
  - Filter provides for .so files
  - Remove execute permission on everything in docdir
  - Capitalize description


author: John Dennis <jdennis@redhat.com> - 0.11-1
changelog:
  - Resolves: #670951
  - Resolves: #674014

    * Better support for IPv6

    * Add AddrInfo class to support IPv6 address resolution. Supports
      iteration over it's set of NetworkAddress objects and provides
      hostname, canonical_name object properties.

    * Add PR_AI_* constants.

    * NetworkAddress constructor and NetworkAddress.set_from_string() added
      optional family parameter. This is necessary for utilizing
      PR_GetAddrInfoByName().

    * NetworkAddress initialized via a string paramter are now initalized via
      PR_GetAddrInfoByName using family.

    * Add NetworkAddress.address property to return the address sans the
      port as a string. NetworkAddress.str() includes the port. For IPv6 the
      a hex string must be enclosed in brackets if a port is appended to it,
      the bracketed hex address with appended with a port is unappropriate
      in some circumstances, hence the new address property to permit either
      the address string with a port or without a port.

    * Fix the implementation of the NetworkAddress.family property, it was
      returning bogus data due to wrong native data size.

    * HostEntry objects now support iteration and indexing of their
      NetworkAddress members.

    * Add io.addr_family_name() function to return string representation of
      PR_AF_* constants.

    * Modify example and test code to utilize AddrInfo instead of deprecated
      NetworkAddress functionality. Add address family command argument to
      ssl_example.

    * Fix pty import statement in test/setup_certs.py

      Deprecated Functionality:
      -------------------------

    * NetworkAddress initialized via a string paramter is now
      deprecated. AddrInfo should be used instead.

    * NetworkAddress.set_from_string is now deprecated. AddrInfo should be
      used instead.

    * NetworkAddress.hostentry is deprecated. It was a bad idea,
      NetworkAddress objects can support both IPv4 and IPv6, but a HostEntry
      object can only support IPv4. Plus the implementation depdended on
      being able to perform a reverse DNS lookup which is not always
      possible.

    * HostEntry.get_network_addresses() and HostEntry.get_network_address()
      are now deprecated. In addition their port parameter is now no longer
      respected. HostEntry objects now support iteration and
      indexing of their NetworkAddress and that should be used to access
      their NetworkAddress objects instead.


author: John Dennis <jdennis@redhat.com> - 0.11-2
changelog:
  - Resolves: #670951
  - Resolves: #674014
    Rebuild enabling api doc generation, it had been disabled because
    the buildroots on 6.1 contained a verion of epydoc that crashed,
    release engineering has updated epydoc in the buildroots.
    There are NO changes in the package source.


author: John Dennis <jdennis@redhat.com> - 0.11-3
changelog:
  - Resolves: #689807
    Add family parameter to Socket constructors in examples and doc.
    Mark implicit family parameter as deprecated.
    Raise exception if Socket family does not match NetworkAddress family.
    Add --server-subject to setup_certs.py (made testing IPv6 easier without DNS)


author: John Dennis <jdennis@redhat.com> - 0.13-0
changelog:
  - Resolves: #827616
  - Resolves: #642795
  - Resolves: #698663
  - Resolves: #796295

    Introduced in 0.13:

    * Fix NSS SECITEM_CompareItem bug via workaround.

    * Fix incorrect format strings in PyArg_ParseTuple* for:
      - GeneralName
      - BasicConstraints
      - cert_x509_key_usage

    * Fix bug when decoding certificate BasicConstraints extension

    * Fix hang in setup_certs.

    * For NSS >= 3.13 support CERTDB_TERMINAL_RECORD

    * You can now query for a specific certificate extension
      Certficate.get_extension()

    * The following classes were added:
      - RSAGenParams

    * The following class methods were added:
      - nss.nss.Certificate.get_extension
      - nss.nss.PK11Slot.generate_key_pair
      - nss.nss.DSAPublicKey.format
      - nss.nss.DSAPublicKey.format_lines

    * The following module functions were added:
      - nss.nss.pub_wrap_sym_key

    * The following internal utilities were added:
      - PyString_UTF8
      - SecItem_new_alloc()

    * The following class constructors were modified to accept
      intialization parameters

      - KEYPQGParams (DSA generation parameters)

    * The PublicKey formatting (i.e. format_lines) was augmented
      to format DSA keys (formerly it only recognized RSA keys).

    * Allow lables and values to be justified when printing objects

    * The following were deprecated:
      - nss.nss.make_line_pairs (replaced by nss.nss.make_line_fmt_tuples)

      Deprecated Functionality:
      -------------------------
      - make_line_pairs() has been replaced by make_line_fmt_tuples()
        because 2-valued tuples were not sufficently general. It is
        expected very few programs will have used this function, it's mostly
        used internally but provided as a support utility.

    Introduced in 0.12:

    * Major new enhancement is additon of PKCS12 support and
      AlgorithmID's.

    * setup.py build enhancements
      - Now searches for the NSS and NSPR header files rather
        than hardcoding their location. This makes building friendlier
        on other systems (i.e. debian)
      - Now takes optional command line arguments, -d or --debug
        will turn on debug options during the build.

    * Fix reference counting bug in PK11_password_callback() which
      contributed to NSS not being able to shutdown due to
      resources still in use.

    * Add UTF-8 support to ssl.config_server_session_id_cache()

    * Added unit tests for cipher, digest, client_server.

    * All unittests now run, added test/run_tests to invoke
      full test suite.

    * Fix bug in test/setup_certs.py, hardcoded full path to
      libnssckbi.so was causing failures on 64-bit systems,
      just use the libnssckbi.so basename, modutil will find
      it on the standard search path.

    * doc/examples/cert_dump.py uses new AlgorithmID class to
      dump Signature Algorithm

    * doc/examples/ssl_example.py now can cleanly shutdown NSS.

    * Exception error messages now include PR error text if available.

    * The following classes were replaced:
      - SignatureAlgorithm replaced by new class AlgorithmID

    * The following classes were added:
      - AlgorithmID
      - PKCS12DecodeItem
      - PKCS12Decoder

    * The following class methods were added:
      - PK11Slot.authenticate()
      - PK11Slot.get_disabled_reason()
      - PK11Slot.has_protected_authentication_path()
      - PK11Slot.has_root_certs()
      - PK11Slot.is_disabled()
      - PK11Slot.is_friendly()
      - PK11Slot.is_internal()
      - PK11Slot.is_logged_in()
      - PK11Slot.is_removable()
      - PK11Slot.logout()
      - PK11Slot.need_login()
      - PK11Slot.need_user_init()
      - PK11Slot.user_disable()
      - PK11Slot.user_enable()
      - PKCS12DecodeItem.format()
      - PKCS12DecodeItem.format_lines()
      - PKCS12Decoder.database_import()
      - PKCS12Decoder.format()
      - PKCS12Decoder.format_lines()

    * The following class properties were added:
      - AlgorithmID.id_oid
      - AlgorithmID.id_str
      - AlgorithmID.id_tag
      - AlgorithmID.parameters
      - PKCS12DecodeItem.certificate
      - PKCS12DecodeItem.friendly_name
      - PKCS12DecodeItem.has_key
      - PKCS12DecodeItem.shroud_algorithm_id
      - PKCS12DecodeItem.signed_cert_der
      - PKCS12DecodeItem.type
      - SignedData.data
      - SignedData.der

    * The following module functions were added:
      - nss.nss.dump_certificate_cache_info()
      - nss.nss.find_slot_by_name()
      - nss.nss.fingerprint_format_lines()
      - nss.nss.get_internal_slot()
      - nss.nss.is_fips()
      - nss.nss.need_pw_init()
      - nss.nss.nss_init_read_write()
      - nss.nss.pk11_disabled_reason_name()
      - nss.nss.pk11_disabled_reason_str()
      - nss.nss.pk11_logout_all()
      - nss.nss.pkcs12_cipher_from_name()
      - nss.nss.pkcs12_cipher_name()
      - nss.nss.pkcs12_enable_all_ciphers()
      - nss.nss.pkcs12_enable_cipher()
      - nss.nss.pkcs12_export()
      - nss.nss.pkcs12_map_cipher()
      - nss.nss.pkcs12_set_nickname_collision_callback()
      - nss.nss.pkcs12_set_preferred_cipher()
      - nss.nss.token_exists()
      - nss.ssl.config_mp_server_sid_cache()
      - nss.ssl.config_server_session_id_cache_with_opt()
      - nss.ssl.get_max_server_cache_locks()
      - nss.ssl.set_max_server_cache_locks()
      - nss.ssl.shutdown_server_session_id_cache()

    * The following constants were added:
      - nss.nss.int.PK11_DIS_COULD_NOT_INIT_TOKEN
      - nss.nss.int.PK11_DIS_NONE
      - nss.nss.int.PK11_DIS_TOKEN_NOT_PRESENT
      - nss.nss.int.PK11_DIS_TOKEN_VERIFY_FAILED
      - nss.nss.int.PK11_DIS_USER_SELECTED
      - nss.nss.int.PKCS12_DES_56
      - nss.nss.int.PKCS12_DES_EDE3_168
      - nss.nss.int.PKCS12_RC2_CBC_128
      - nss.nss.int.PKCS12_RC2_CBC_40
      - nss.nss.int.PKCS12_RC4_128
      - nss.nss.int.PKCS12_RC4_40

    * The following files were added:
      - test/run_tests
      - test/test_cipher.py (replaces cipher_test.py)
      - test/test_client_server.py
      - test/test_digest.py (replaces digest_test.py)
      - test/test_pkcs12.py

    * The following were deprecated:
      - SignatureAlgorithm


author: John Dennis <jdennis@redhat.com> - 0.13-1
changelog:
  - Resolves: #642795
    add python-nss-size_t.patch, some types involved with ssize_t were
    improperly defined causing a segfault on the s390x and ppc64 arches.


author: John Dennis <jdennis@redhat.com> - 0.16-1
changelog:
  - Resolves: #1154776  Add API call for SSL_VersionRangeSet (rebase)
  - See doc/Changelog for details concerning changes in versions
    0.14, 0.15, and 0.16 which this rebase encompasses.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.7.1-3
changelog:
  - Update to latest Python packaging guidelines.
  - Apply patch that fixes insecure use of RandomPool.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.7.5-1
changelog:
  - v1.7.5 (Ernest) 19jul09
  - -----------------------
  -  * added support for ARC4 cipher and CTR block chaining (Denis Bernard)
  -  * made transport threads daemonize, to fix python 2.6 atexit behavior
  -  * support unicode hostnames, and IP6 addresses (Maxime Ripard, Shikhar
  -    Bhushan)
  -  * various small bug fixes


author: Pavel Cahyna <pcahyna@redhat.com> - 1.7.5-3
changelog:
  - Fix a security flaw (CVE-2018-7750) in Paramiko's server mode
    (emphasis on **server** mode; this does **not** impact *client* use!)
    Backported from 1.10: https://gist.github.com/stevebeattie/0eb190004e10ba0926ad8782f89676ad
    Resolves #1557140


author: Pavel Cahyna <pcahyna@redhat.com> - 1.7.5-4
changelog:
  - Fix and enable tests (%check).
  - Backport a change which makes tests exit with nonzero status when they fail.
  - Add a fix for upstream tests for CVE-2018-7750 (broken in previous).


author: David Malcolm <dmalcolm@redhat.com> - 1.7.2-5
changelog:
  - add patch from http://trac.pythonpaste.org/pythonpaste/ticket/314 to fix SSL
  support on Python 2.6 (rhbz:588546)


author: David Malcolm <dmalcolm@redhat.com> - 1.7.4-1
changelog:
  - rebase to 1.7.4; drop SSL patch (present in that tarball)
  - fix license tag
  - add requirement on pyOpenSSL
  - specfile cleanups
  Resolves: rhbz#613191


author: Jan Pokorny <jpokorny@redhat.com> - 0.2.1-5.2
changelog:
  - Fix install_requires contains forward-incompatible
    "PEAK-Rules>=0.5a1.dev-r2562,==dev" specification
  Resolves: rhbz#1321133


author: Tom Lane <tgl@redhat.com> 2.0.13-2
changelog:
  - Fix rpmlint complaints: remove unneeded explicit Requires:, use Conflicts:
    instead of bogus Obsoletes: to indicate lack of zope subpackage


author: Tom Lane <tgl@redhat.com> 2.0.14-1.el6_2.1
changelog:
  - Update to 2.0.14 to get the last few upstream fixes in this release series,
    and to not be behind what MRG has shipped for RHEL-5
  - Fix refcount leaks in _mogrify()
  Resolves: #787164


author: Tom Lane <tgl@redhat.com> 2.0.14-1
changelog:
  - Update to 2.0.14 to get the last few upstream fixes in this release series,
    and to not be behind what MRG has shipped for RHEL-5
  - Fix refcount leaks in _mogrify()
  Resolves: #765998


author: Rob Crittenden <rcritten@redhat.com> - 0.0.7a-4
changelog:
  - Use setuptools to install the package
  - simplify the files included in the rpm so it includes the .egg-info


author: Hans de Goede <hdegoede@redhat.com> - 0.44-1
changelog:
  - Use dmraid's status instead of figuring out if a set is degraded ourselves
    (#524168)
  - Fix typo causing backtrace when doing activate deactivate 2x for dmraid 10


author: Hans de Goede <hdegoede@redhat.com> - 0.45-1
changelog:
  - Remove libbdevid-python usage and dependency (#549102)
    Resolves: #549102
  - Stop linking against zlib (unused)


author: Hans de Goede <hdegoede@redhat.com> - 0.46-1
changelog:
  - When a stripe set is missing disks it is not degraded, but broken,
    add a check for broken sets (#564305)
    Resolves: #564305
  - Various specfile fixes / cleanups


author: Kyle VanderBeek <kylev@kylev.com> - 0.9.6.2-1
changelog:
  - Update to 0.9.6.2
  - remove now-gone docs/ tree
  - Use find to get rid of OSX packaging artifacts ("._" files)


author: Rafael Schloming <rafaels@redhat.com> - 0.7.946106-12
changelog:
  - Fixes to examples for compatibility with older python versions
  - Fix for bz621998
  - Fix for bz620402


author: Rafael Schloming <rafaels@redhat.com> - 0.7.946106-15
changelog:
  - Fix for bz537481
  - Fix for bz648927
  - Fix for bz655141
  - Fix for bz655078
  - Fix for bz642686
  - Fix for bz640312
  - Fix for bz635016


author: Ted Ross <tross@redhat.com> - 0.12-2
changelog:
  - Related:rhbz#663461 - Enable new architectures
  - Remove python-qpid-qmf and ruby-qpid-qmf from ppc and s390 architectures


author: Ted Ross <tross@redhat.com> - 0.12-4
changelog:
  - Related:rhbz#681680 - QMF agents wake up several times a second
  - Related:rhbz#699499 - [RFE] qmfv2 must provide mainloop integration


author: Justin Ross <jross@redhat.com> - 0.14-1
changelog:
  - Rebase to 0.14
  - rhbz#743657 - The pure-python QMF console unnecessarily retains
    references to query results
  - rhbz#699499 - [RFE] qmfv2 must provide mainloop integration
  - rhbz#681680 - QMF agents wake up several times a second
  - rhbz#663461 - Enable new architectures
  - Remove python-qpid-qmf and ruby-qpid-qmf from ppc and s390 architectures


author: Marek Kasik <mkasik@redhat.com> - 2.3-3
changelog:
  - Add -fno-strict-aliasing to pass "Testsuite regressions" test
  - Make docs subpackage "noarch"
  - Resolves: #605103


author: Luke Macken <lmacken@redhat.com> - 1.0-0.2.rc1
changelog:
  - Update to 1.0rc1
  - Add python-elixir, python-sqlalchemy, python-coverage, python-nose,
    and python-repoze-who to the BuildRequires
  - Remove the setuptools patch


author: Matej Stuchlik <mstuchli@redhat.com> - 2.6.0-2
changelog:
  - Remove bundled directories altogether, requests are smart enough
    to import system modules, fixes a problem with updating requests
    from 2.3.0
  Resolves: rhbz#1212145


author: Charalampos Stratakis <cstratak@redhat.com> - 2.6.0-4
changelog:
  - Ensure that urllib3.connection module is imported only once so connections
    to HTTPS servers that require SNI support do not fail
  Resolves: rhbz#1382682


author: Devan Goodwin <dgoodwin@redhat.com> 0.94.10-1
changelog:
  - Related: #661863
  - Add certificate parsing library. (dgoodwin@redhat.com)
  - Fix build on F12/RHEL5 and earlier. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@redhat.com> 0.94.12-1
changelog:
  - Related: #668006
  - Remove a missed translation. (dgoodwin@redhat.com)
  - Fix logger warning messages. (dgoodwin@redhat.com)


author: Chris Duryee (beav) <cduryee@redhat.com>
changelog:
  - Add new extensions to order (jbowes@redhat.com)
  - remove shebang from certificate.py for rpmlint (jbowes@redhat.com)
  - Adding activateMachine to connection api. (jharris@redhat.com)
  - 668814: break out 404 and 500s into a different error (cduryee@redhat.com)
  - Initialized to use tito. (jbowes@redhat.com)
  - bump version (jbowes@redhat.com)


author: Adrian Likins <alikins@redhat.com> 0.95.7-1
changelog:
  - Resolves: #702403
  - 700601: Don't set the Accept-Language if we don't have a valid locale
    (alikins@redhat.com)


author: Devan Goodwin <dgoodwin@redhat.com> 0.96.5-1
changelog:
  - Fix backward compatability with old use of getPoolsList.
    (dgoodwin@redhat.com)
  - Remove one built in type issue. (bkearney@redhat.com)
  - Removed unused Bundle class (alikins@redhat.com)
  - quantity for subscription (wottop@dhcp231-152.rdu.redhat.com)
  - Add the activation key call, and remove subscription tokens
    (bkearney@redhat.com)
  - Improve the doco, referencing the candlepin site. (bkearney@redhat.com)
  - Improve the defualt values for the config (bkearney@redhat.com)
  - Fix bug with owner specification during registration. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.6-1
changelog:
  - Add support for new Katello error responses. (dgoodwin@redhat.com)
  - Log the response when there's an issue parsing error JSON.
    (dgoodwin@redhat.com)
  - Add support for registration to Katello environments. (dgoodwin@redhat.com)
  - Don't send an http body if we don't have one. (jbowes@redhat.com)
  - Add call to list environments. (dgoodwin@redhat.com)
  - Do not load CA certs if in insecure mode. (dgoodwin@redhat.com)
  - Cache supported resources after establishing connection.
    (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.7-1
changelog:
  - Logging cleanup. (dgoodwin@redhat.com)
  - Remove unused add_ssl_certs method. (dgoodwin@redhat.com)
  - Load supported resources when UEPConnection is instantiated.
    (dgoodwin@redhat.com)
  - Send package profile. (dgoodwin@redhat.com)
  - Allow testing if package profiles equal one another. (dgoodwin@redhat.com)
  - Support creating package profile from a file descriptor.
    (dgoodwin@redhat.com)
  - Allow the attributes to be None for username and password in consumer
    selction. (bkearney@redhat.com)
  - Add a Package object. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.8-1
changelog:
  - 719378: Encode whitespace in urls (bkearney@redhat.com)
  - Change package profile upload url. (dgoodwin@redhat.com)


author: James Bowes <jbowes@redhat.com> 0.96.9-1
changelog:
  - self.sanitize, and add support for quote_plus. (cduryee@redhat.com)
  - Enhance the insecure mode to not do peer checks. (bkearney@redhat.com)
  - Wrap urllib.quote in a helper method to cast int to str as needed.
    (cduryee@redhat.com)
  - 728266: Unsubscribe from subscription manager GUI is broken
    (cduryee@redhat.com)
  - Remove quantity for bind by product. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.10-1
changelog:
  - Submit a Content-Length when body of request is empty. (dgoodwin@redhat.com)
  - Support installed products when registering. (dgoodwin@redhat.com)
  - Add ability to update a consumer's installed products list.
    (dgoodwin@redhat.com)
  - Support for new bind method (cduryee@redhat.com)


author: James Bowes <jbowes@redhat.com> 0.96.11-1
changelog:
  - add future date bind (jesusr@redhat.com)
  - 735226: allow Keys to validate themselves (bkearney@redhat.com)
  - Add getVirtOnly() (cduryee@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.96.12-1
changelog:
  - Add makefile and targets for coverage and "stylish" checks
    (alikins@redhat.com)
  - Add tests for config parsing (cduryee@redhat.com)
  - 736166: move certs from subscription-manager to python-rhsm
    (cduryee@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.99.2-1
changelog:
  - 768983: When consuming a future subsciption, the repos --list should be empty
    (wpoteat@redhat.com)
  - 720360: Write *-key.pem files out with 0600 permissions. (awood@redhat.com)
  - 754425: Remove grace period logic (cduryee@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.3-1
changelog:
  - 785247: Update releasers.conf for RHEL6.3 (mstead@redhat.com)
  - Stop building for F14. (dgoodwin@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.99.4-1
changelog:
  - Add support for updating consumer service level. (dgoodwin@redhat.com)
  - Add call to list service levels for an org. (dgoodwin@redhat.com)
  - Add GoneException for deleted consumers (jbowes@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.5-1
changelog:
  - 744654: Any bad value from the config file, when converting to an int, causes
    a traceback. (bkearney@redhat.com)
  - Add support for dry-run autobind requests. (dgoodwin@redhat.com)
  - Build for Fedora 17. (dgoodwin@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.6-1
changelog:
  - Add ContentConnection to support rhsm "release" command (alikins@redhat.com)
  - Allow unsetting the consumer service level. (dgoodwin@redhat.com)


author: Michael Stead <mstead@redhat.com> 0.99.7-1
changelog:
  - 803773: quote international characters in activation keys before sending to
    server (cduryee@redhat.com)
  - PEP8 fixes. (mstead@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 0.99.12-1
changelog:
  - 822057: wrap ContentConnection port in safe_int (cduryee@redhat.com)
  - 822965: subscription-manager release does not work with proxies
    (cduryee@redhat.com)


author: ckozak <ckozak@redhat.com> 1.11.4-1
changelog:
  * Thu Apr 10 2014 Alex Wood <awood@redhat.com> 1.11.3-1
  - Specifically check for brand_name/brand_type="" (alikins@redhat.com)
  - Support new apis for guests and hypervisors (ckozak@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.11.5-1
changelog:
  - 1090350: fix time drift detection (ckozak@redhat.com)
  - 1096676: Use simplejson on RHEL 5. (dgoodwin@redhat.com)
  - 1094492: Alternate Subject needs different type that allows more characters.
    (wpoteat@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.12.1-1
changelog:
  - bump version to 1.12 (jesusr@redhat.com)
  - Add connection method to get available releases (mstead@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.12.2-1
changelog:
  - Detect when operating in container mode and load host system's config.
    (dgoodwin@redhat.com)
  - Convert doc strings to sphinx/restructuredtext (alikins@redhat.com)
  - Add setup for using sphinx for docs. (alikins@redhat.com)


author: Michael Stead <mstead@redhat.com> 1.12.3-1
changelog:
  - Add 6.6/7.1 release targets. (dgoodwin@redhat.com)
  - Add a key_path() to EntitlementCertificate (alikins@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.12.4-1
changelog:
  - Add required bz flags to tito releasers. (dgoodwin@redhat.com)
  - Remove pyqver verbose flag. (alikins@redhat.com)
  - Use tox.ini to setup pep8 for 'make stylish' (alikins@redhat.com)
  - Update pyqver setup. Set min version of 2.7. (alikins@redhat.com)
  - Add libcrypto to list of libs to link to. (bcourt@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.10-1
changelog:
  - Added core limit to entitlement object. (mstead@redhat.com)
  - Codestyle cleanup. (alikins@redhat.com)


author: Devan Goodwin <dgoodwin@rm-rf.ca> 1.8.11-1
changelog:
  - Don't attach a question mark to the request if not necessary.
    (awood@redhat.com)
  - Sanitize consumerId input. (awood@redhat.com)
  - Add more test cases for Content.arches (alikins@redhat.com)
  - add 'arches' list of arches to Content object (alikins@redhat.com)
  - Add optional consumer to getPool. (awood@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.8.12-1
changelog:
  - Update the releasers with a 6.3 (bkearney@redhat.com)
  - 967566: Enhance the ssl bindings to expose the issuer. (bkearney@redhat.com)
  - Update the dist-git releasers (bkearney@redhat.com)


author: Alex Wood <awood@redhat.com> 1.9.1-1
changelog:
  - fix config failure (ckozak@redhat.com)
  - 988476, 988085: fix default hostname, remove excess config list output
    (ckozak@redhat.com)
  - rev master to 1.9.x (alikins@redhat.com)
  - add compliance date option (ckozak@redhat.com)


author: jesus m. rodriguez <jesusr@redhat.com> 1.9.2-1
changelog:
  - remove rhel 5.9, 5.10, 6.3, 6.4 (jesusr@redhat.com)
  - Fedora 17 is at end of life. (awood@redhat.com)


author: Andy Grover <agrover@redhat.com> - 1.9.9-6
changelog:
  - Update based on review comments
    - Fully document steps to build archive
    - Remove commented-out extraneous text
    - Remove a repeat in Requires line
    - Update git-version.patch to have proper sha1
    - Change location of fabric spec files to /var/lib/target
  - Remove unused specs


author: Andy Grover <agrover@redhat.com> - 2.1.fb20-1
changelog:
  - Update to new upstream version
  - Remove patches
    * fix nodeacl-dump.patch
    * retry-target-creation.patch


author: Andy Grover <agrover@redhat.com> - 2.1.fb21-3
changelog:
  - Add patches:
      0003-Fix-dumping-of-PSCSI-storage-objects.patch
      0004-pscsi-Save-udev_path-instead-of-h-c-t-l.patch
      0005-fix-colonize.patch
      0006-Add-support-for-NodeACL-tag.patch
      0007-Fix-up-tag-save-restore.patch
  - Rename existing patches to match naming scheme


author: Rafael Schloming <rafaels@redhat.com> - 0.1.897961-1
changelog:
  - Added groups to subpackages.
  - Replaced python_sitelib with python_sitearch, use %global instead of %define, and killed unused ruby_sitelib.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 0.2-1
changelog:
  - Add get_priority_{min,max} methods
  - Add constants for SCHED_{BATCH,FIFO,OTHER,RR}
  - Implement get_priority method
  - Add pchrt utility for testing the bindings, chrt clone
  - Add ptaskset utility for testing the bindings, taskset clone


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 0.6c7-2
changelog:
  - Move pretty much everything back into runtime in order to avoid more
    brokenness than we're trying to address with these fixes.


author: David Malcolm <dmalcolm@redhat.com> - 0.6.10-1
changelog:
  - Switch over to using the "distribute" project; rebase to 0.6.10 (rhbz:570350)
  - Remove svn patch as upstream has chosen to go with an easier change for now.
  - Move easy_install back into the main package as the needed files have been
    moved from python-devel to the main python package.


author: David Malcolm <dmalcolm@redhat.com> - 0.6.10-2
changelog:
  - delete stray ".orig" file
  - change %define to %global ; use %{buildroot} rather than env var
  - move %check lower down
  - explicitly list executables


author: David Malcolm <dmalcolm@redhat.com> - 0.6.10-3
changelog:
  - cherrypick upstream patch for easy_install (ignore locally installed
  packages: patch0)
  - provide "python-distribute"
  - add README.txt and other .txt documentation files to the payload
  Resolves: rhbz#613138


author: Toshio Kuratomi <toshoi@fedoraproject.org> - 2.1.1-4
changelog:
  - Simplify the %files section to own the tests directory
  - Use the fedora documented filter functions to filter provides


author: Nils Philippsen <nils@redhat.com> - 0.2.12-1
changelog:
  - use os.path.abspath instead of .realpath (#615819)
  - use tempfile.mkstemp
  - don't use hardcoded file ext separator


author: Nils Philippsen <nils@redhat.com> - 0.2.17-1
changelog:
  - fix default timeouts of None in bus objects (#716620)
  - reduce proxy method calling overhead a bit more


author: Nils Philippsen <nils@redhat.com> - 0.2.19-1
changelog:
  - allow service object methods to be called locally
  - preserve signature, docstrings, etc. of decorated methods


author: Gareth Armstrong <gareth.armstrong@hp.com> - 0.6.5-1.hp
changelog:
  - Update to 0.6.5
  - Initial import of python-sphinx from Fedora Rawhide for use in HP CMS
  - Enforce that Sphinx requires Python 2.4 or later via an explicit BR
  - Minor tweaks to spec file
  - Move language files to %{_datadir}, idea borrowed from Debian's sphinx
    package
  - Deliver man pages for sphinx-build & sphinx-quickstart
  - Deliver rst documentation files to reST directory in doc sub-package
  - Add %check section for Python2 and add BR on python-nose


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.5-0.1.rc4
changelog:
  - Update to 0.5.0rc4 which works with the new pysqlite
  - And update test cases to work with the new pysqlite


author: jortel <jortel@redhat.com> - 0.3.5-1
changelog:
  - Adds http caching.  Default is (1) day.
  - Removed checking fc version in spec since no longer building < fc9.
  - Updated makefile to roll tarball with tar.sh.
  - Moved bare/wrapped determination to wsdl for document/literal.
  - Refactored Transport to provide better visibility into http headers.
  - Fixed Tickets: #207, #207, #209, #210, #212, #214, #215


author: jortel <jortel@redhat.com> - 0.3.6-1
changelog:
  - Change hard coded /tmp/suds to tempfile.gettempdir() and create suds/ on demand.
  - Fix return type for Any.get_attribute().
  - Update http caching to ignore file:// urls.
  - Better logging of messages when only the reply is injected.
  - Fix XInteger and XFloat types to translate returned arrays properly.
  - Fix xs:import schema with same namespace.
  - Update parser to not load external references and add Import.bind() for XMLSchema.xsd location.
  - Add schema doctor - used to patch XSDs at runtime.  (See Options.doctor)
  - Fix deprecation warnings in python 2.6.
  - Add behavior for @default defined on <element/>.
  - Change @xsi:type value to always be qualified for doc/literal.
  - Add Option.xstq option to control when @xsi:type is qualified.
  - Fixed Tickets: #64, #129, #205, #206, #217, #221, #222, #224, #225, #228, #229, #230


author: jortel <jortel@redhat.com> - 0.3.7-1
changelog:
  - Better soap header support
  - Added new transport HttpAuthenticated for active (not passive) basic authentication.
  - New options (prefixes, timeout, retxml)
  - WSDL processing enhancements.
  - Expanded builtin XSD type support.
  - Fixed <xs:iniclude/>
  - Better XML date/datetime conversion.
  - Client.clone() method added for lightweight copy of client object.
  - XSD processing fixes/enhancements.
  - Better <simpleType/> by <xs:restriction/> support.
  - Performance enhancements. 
  - Fixed tickets: #65, #232, #233, #235, #241, #242, #244, #247, #254, #254, #256, #257, #258


author: jortel <jortel@redhat.com> - 0.3.8-1
changelog:
  - Includeds Windows NTLM Transport.
  - Add missing self.messages in Client.clone().
  - Changed default behavior for WSDL PartElement to be optional.
  - Add support for services/ports defined without <address/> element in WSDL.
  - Fix sax.attribute.Element.attrib() to find by name only when ns is not specified; renamed to Element.getAttribute().
  - Update HttpTransport to pass timeout parameter to urllib2 open() methods when supported by urllib2.
  - Add null class to pass explicit NULL values for parameters and optional elements.
  - Soap encoded array (soap-enc:Array) enhancement for rpc/encoded.
    Arrays passed as python arrays - works like document/literal now.
    No more using the factory to create the Array.
    Automatically includes arrayType attribute.  Eg: soap-enc:arrayType="Array[2]".
    Reintroduced ability to pass complex (objects) using python dict instead of suds object via factory.
  - Fixed tickets: #84, #261, #262, #263, #265, #266, #278, #280, #282.


author: jortel <jortel@redhat.com> - 0.3.9-1
changelog:
  - Bumped python requires to 2.4
  - Replaced stream-based caching in the transport package with document-based caching.
  - Caches pickled Document objects instead of XML text. 2x Faster!
  - No more SAX parsing exceptions on damaged or incomplete cached files. 
  - Cached WSDL objects. Entire Definitions object including contained Schema object cached via pickle.
  - Copy of soap encoding schema packaged with suds.
  - Refactor Transports to use ProxyHandler instead of urllib2.Request.set_proxy().
  - Added WSSE enhancements <Timestamp/> and <Expires/> support. See: Timestamp token. 
  - Fixed Tickets: #256, #291, #294, #295, #296


author: jortel <jortel@redhat.com> - 0.4-1
changelog:
  - Fix spelling errors in spec description.
  - Fix source0 URL warning.
  - Updated caching to not cache intermediate wsdls.
  - Added DocumentCache which caches verified XML documents as text. User can choose.
  - Added cachingpolicy option to allow user to specify whether to cache XML documents or the WSDL object.
  - Provided for repeating values in reply for message parts consistent with way handled in nested objects.
  - Added charset=utf-8 to stock content-type http header.
  - Added <?xml version="1.0" encoding="UTF-8"?> to outgoing SOAP messages.
  - Detection of faults in successful (http=200) replies and raise WebFault. Search for <soapenv:Fault/>.
  - Add plugins facility. 
  - Fixed Tickets: #251, #313, #314, #334


author: Ricky Zhou <ricky@fedoraproject.org> - 0.3-3
changelog:
  - Change define to global.
  - Remove old >= 8 conditional.
  - Remove unnecessary BuildRequires on python-devel.


author: Luke Macken <lmacken@redhat.com> - 0.9.8-0.4.dev20090825
changelog:
  - Apply a patch from http://toscawidgets.org/trac/tw/ticket/30
    to fix problems with encoding javascript methods.


author: Luke Macken <lmacken@redhat.com> 1.2-1
changelog:
  - Latest upstream release, intended to be used with the upcoming TurboGears 1.1 version.
  - Remove python-turbojson-SAfix-r3749.patch


author: Thomas Vander Stichele <thomas at apestaart dot org>
changelog:
  - 2.4.0-2
  - add a README.fedora
  - made noarch, since it doesn't actually install any python twisted/ module
    code
  - fixed provides/obsoletes


author: Matthias Saou <http://freshrpms.net/> 8.1.0-2
changelog:
  - Update to 8.1.0.
  - Merge back changes from Paul Howarth.
  - Make sure the scriplets never return a non-zero exit status.
  - Add tkinter requirement for tkconch (#440385).


author: Matthias Saou <http://freshrpms.net/> 8.1.0-2
changelog:
  - Re-introduce the python macro for parallel installable packages.
  - Make sure the scriplet never returns a non-zero exit status.
  - Remove dropin.cache file upon package removal.
  - Merge back changes from Paul Howarth.


author: Matthias Saou <http://freshrpms.net/> 8.1.0-2
changelog:
  - Update to 8.1.0.
  - Merge back changes from Paul Howarth.
  - Make sure the scriplets never return a non-zero exit status.


author: Matthias Saou <http://freshrpms.net/> 8.2.0-1
changelog:
  - Update to 8.2.0.
  - Change back spec cosmetic details from Paul's to Thomas' preference.
  - Remove no longer installed "bookify" program.


author: Lumír Balhar <lbalhar@redhat.com> - 8.2.0-7
changelog:
  - Fix CVE-2020-10108 HTTP request smuggling when presented with two Content-Length headers
  Resolves: rhbz#1813439
  - Remove useless macros definitions


author: Matthias Saou <http://freshrpms.net/> 8.2.0-1
changelog:
  - Update to 8.2.0.
  - Change back spec cosmetic details from Paul's to Thomas' preference.
  - Remove no longer installed t-im man page.


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> 3.9.1-10
changelog:
  - Fix parsing of FTP 213 responses.
  - Resolves: bug#970262
  - Set proper errcode when raising URLGRabError.
  - Resolves: bug#1271242


author: Ralph Bean <rbean@redhat.com> - 1.5-3
changelog:
  - Renamed patches to python-urllib3-*
  - Fixed ssl check patch to use the correct cert path for Fedora.
  - Included dependency on ca-certificates
  - Cosmetic indentation changes to the .spec file.


author: Ralph Bean <rbean@redhat.com> - 1.5-4
changelog:
  - Upstream patch to fix Accept header when behind a proxy.
  - Reorganize patch numbers to more clearly distinguish them.


author: Charalampos Stratakis <cstratak@redhat.com> - 1.10.2-2
changelog:
  - Upstream patch for fixing issue of new configs not taken into account
  by the PoolManager instance
  Resolves: rhbz#1329382


author: Jiri Denemark <jdenemar@redhat.com> - 0.600.0-14
changelog:
  - setup: rebuild manpages in build phase (rhbz#832339)
  - Remove and ignore build-generated files (rhbz#832339)


author: Jiri Denemark <jdenemar@redhat.com> - 0.600.0-15
changelog:
  - build: One more fix for clean builds (rhbz#832339)
  - Update pod file from latest pod.in (rhbz#832339)


author: Martin Kletzander <mkletzan@redhat.com> - 0.600.0-16
changelog:
  - Fix changing cirrus to QXL for active VM (rhbz#980334)
  - Support incomplete .treeinfo files (rhbz#954262)
  - Don't support sparse logical volumes (rhbz#921480)
  - Fix progress bar output bug in virt-clone (rhbz#946972)
  - Add Debian Wheezy to the OS_TYPES (rhbz#958496)
  - add mageia to the list of supported distribution (rhbz#958496)
  - osdict: Add some opensuse entries (rhbz#958496)
  - osdict: Add f17 tweak some supported distros (rhbz#958496)
  - osdict: hmm actually add f17 (rhbz#958496)
  - virtinst: Add latest Ubuntu releases (rhbz#958496)
  - osdict: Add Fedora 18 (rhbz#958496)


author: Martin Kletzander <mkletzan@redhat.com> - 0.600.0-18
changelog:
  - Don't support comments in parsed parameters (rhbz#916875)
  - Fix progress bars in virt-clone once more (rhbz#946972)
  - Throw error when --host-device can't specify unique device (rhbz#861972)
  - Set is_dup to true when --host-device come with bus.addr (rhbz#861972)
  - Differentiate duplicate usb devices by bus/addr (rhbz#861972)


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.600.0-19
changelog:
  - Document correctly the feature state attribute.  (rhbz#1024700)
  - Remove qcow from the virt-image 5 manual. (rhbz#1024180)
  - Fix typo in virt-install manual. (rhbz#1024151)
  - Update the os-variant list of virt-install. (rhbz#1011290)
  - Show an error when the allocation of new lvm volume set as 0 (rhbz#1000980)
  - virt-install honours sparse=false (rhbz#873545)
  - virt-install supports macvtap (rhbz#855740)
  - virt-install creates the spicevmc channel with "--graphics spice" (rhbz#853386)
  - fix cloning of LVM volumes (rhbz#1055225)
  - Graphics display type sdl removed from virt-install manual (rhbz#886779)
  - USB Redirection device options in virt-install (rhbz#1001999)
  - Specify 'startupPolicy' during virt-install (rhbz#1017423)
  - virt-manager displays domain for PCI device (rhbz#1085499)
  - Introduce device type 'lun' (rhbz#1077232)
  - Add Virtio SCSI disk option (rhbz#1049781)


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.600.0-21
changelog:
  - Correctly check for the SPICEVMC support on RHEL (rhbz#853386)
  - Enforce non sparse logical volumes when cloning (rhbz#1055225)
  - doc: add "lun" to the Disk device type list for virt-install (rhbz#1077232)


author: Giuseppe Scrivano <gscrivan@redhat.com> - 0.600.0-25
changelog:
  - When --cpu-host is specified use cpu-mode host-model (rhbz#1167072)
  - Do not fail when using a non sparse logical volume (rhbz#1167998)
  - Fix bridge interface creation (rhbz#1172407)


author: Miloslav Trmač <mitr@redhat.com> - 0.3.1-4
changelog:
  - Clarify documentation about which block device to use as an argument
    Resolves: #636541
  - Report readable error messages instead of random characters in some cases
    Resolves: #638732
  - Make passphrase prompts interruptable, report incorrect passphrases
    Resolves: #641111
  - Ask for passphrases only after checking for easily detectable problems
    Resolves: #643897


author: Luke Macken <lmacken@redhat.com> - 0.9-3
changelog:
  - Add python-{paste,pygments,tempita,simplejson} to the BuildRequires
  - Add python-{tempita,pygments,simplejson} to the Requires


author: Jan Pokorny <jpokorny@redhat.com> - 0.10.2-2
changelog:
  - Fix immediate error in hash_identifier in case of FIPS mode
  Resolves: rhbz#746118
  Related:  rhbz#956360


author: Kyle VanderBeek <kylev@kylev.com> - 0.3.4-2
changelog:
  - Fix rpmlint warnings.
  - Add documentation to the package.
  - Fix spurious executable bit on CHANGELOG.


author: Ricky Zhou <ricky@fedoraproject.org> 0.9.2-1
changelog:
  - Upstream released new version.
  - Rename to python-webob, as mentioned in the Python package naming
    guidelines.
  - Clean up spec.
  - Add %check section.


author: Paul Howarth <paul@city-fan.org> 3.4.1-1
changelog:
  - update to 3.4.1
  - incorporate suggestions from Felix Schwarz:
    - new summary and description
    - new upstream URL (old one out of date)
    - don't package test files
    - include more documentation


author: David Nalley <david@gnsa.us> 0.7.0-2
changelog:
  - Added some verbiage regarding what WBEM is and expanding WBEM and CIM acronyms
  - Added python-twisted as a dependency


author: Patrice Dumas <pertusus@free.fr> - 0.15-5
changelog:
  - remove requires for python-abi (automatic now) and python directory
  - remove package name from summary
  - change tabs to spaces


author: Ralph Apel <r.apel at r-apel.de> 0:1.5-3jpp
changelog:
  - Add option to build without maven
  - Omit tests when building without maven
  - Add gcj_support option


author: Ralph Apel <r.apel at r-apel.de> 0:1.6.2-1jpp
changelog:
  - Upgrade to 1.6.2
  - Activate tests while building with ant
  - Make Vendor, Distribution based on macro
  - Install depmap frags, poms


author: Ralph Apel <r.apel at r-apel.de> 0:1.6.3-3jpp
changelog:
  - Add settings file
  - Fix pom marking jmock dependency as of scope test
  - Fix -jpp-depmap.xml for asm2-parent


author: Yash Mankad <ymankad@redhat.com> - 0.12.1.2-2.501.el6
changelog:
  - kvm-Revert-iotests-Use-_img_info.patch [bz#1405882]
  - kvm-Revert-block-commit-speed-is-an-optional-parameter.patch [bz#1405882]
  - kvm-Revert-iotests-Disable-086.patch [bz#1405882]
  - kvm-Revert-iotests-Fix-049-s-reference-output.patch [bz#1405882]
  - kvm-Revert-iotests-Fix-026-s-reference-output.patch [bz#1405882]
  - kvm-Revert-qcow2-Support-exact-L1-table-growth.patch [bz#1405882]
  - kvm-Revert-qcow2-Free-allocated-L2-cluster-on-error.patch [bz#1405882]
  - kvm-net-check-packet-payload-length.patch [bz#1398214]
  - Resolves: bz#1398214
    (CVE-2016-2857 qemu-kvm: Qemu: net: out of bounds read in net_checksum_calculate() [rhel-6.9])
  - Reverts: bz#1405882
    (test cases 026 030 049 086 and 095 of qemu-iotests fail for qcow2 with qemu-kvm-rhev-0.12.1.2-2.498.el6)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.502.el6
changelog:
  - kvm-cirrus_vga-fix-division-by-0-for-color-expansion-rop.patch [bz#1418231 bz#1419417]
  - kvm-cirrus_vga-fix-off-by-one-in-blit_region_is_unsafe.patch [bz#1418231 bz#1419417]
  - kvm-display-cirrus-check-vga-bits-per-pixel-bpp-value.patch [bz#1418231 bz#1419417]
  - kvm-display-cirrus-ignore-source-pitch-value-as-needed-i.patch [bz#1418231 bz#1419417]
  - kvm-cirrus-handle-negative-pitch-in-cirrus_invalidate_re.patch [bz#1418231 bz#1419417]
  - kvm-cirrus-allow-zero-source-pitch-in-pattern-fill-rops.patch [bz#1418231 bz#1419417]
  - kvm-cirrus-fix-blit-address-mask-handling.patch [bz#1418231 bz#1419417]
  - kvm-cirrus-fix-oob-access-issue-CVE-2017-2615.patch [bz#1418231 bz#1419417]
  - Resolves: bz#1418231
    (CVE-2017-2615 qemu-kvm: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.9])
  - Resolves: bz#1419417
    (CVE-2017-2615 qemu-kvm-rhev: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.9])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.503.el6
changelog:
  - kvm-cirrus-fix-patterncopy-checks.patch [bz#1420487 bz#1420489]
  - kvm-Revert-cirrus-allow-zero-source-pitch-in-pattern-fil.patch [bz#1420487 bz#1420489]
  - kvm-cirrus-add-blit_is_unsafe-call-to-cirrus_bitblt_cput.patch [bz#1420487 bz#1420489]
  - Resolves: bz#1420487
    (EMBARGOED CVE-2017-2620 qemu-kvm: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.9])
  - Resolves: bz#1420489
    (EMBARGOED CVE-2017-2620 qemu-kvm-rhev: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.9])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 0.12.1.2-2.504.el6
changelog:
  - kvm-vns-tls-don-t-use-depricated-gnutls-functions.patch [bz#1428750]
  - kvm-vnc-apply-display-size-limits.patch [bz#1430616 bz#1430617]
  - kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1443448 bz#1443450]
  - kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1443448 bz#1443450 bz#1447542 bz#1447545]
  - kvm-cirrus-avoid-write-only-variables.patch [bz#1444378 bz#1444380]
  - kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1444378 bz#1444380]
  - kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1444378 bz#1444380]
  - kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1444378 bz#1444380]
  - kvm-cirrus-fix-PUTPIXEL-macro.patch [bz#1444378 bz#1444380]
  - Resolves: bz#1428750
    (Fails to build in brew)
  - Resolves: bz#1430616
    (CVE-2017-2633 qemu-kvm: Qemu: VNC: memory corruption due to unchecked resolution limit [rhel-6.10])
  - Resolves: bz#1430617
    (CVE-2017-2633 qemu-kvm-rhev: Qemu: VNC: memory corruption due to unchecked resolution limit [rhel-6.10])
  - Resolves: bz#1443448
    (CVE-2017-7718 qemu-kvm: Qemu: display: cirrus: OOB read access issue [rhel-6.10])
  - Resolves: bz#1443450
    (CVE-2017-7718 qemu-kvm-rhev: Qemu: display: cirrus: OOB read access issue [rhel-6.10])
  - Resolves: bz#1444378
    (CVE-2017-7980 qemu-kvm: Qemu: display: cirrus: OOB r/w access issues in bitblt routines [rhel-6.10])
  - Resolves: bz#1444380
    (CVE-2017-7980 qemu-kvm-rhev: Qemu: display: cirrus: OOB r/w access issues in bitblt routines [rhel-6.10])
  - Resolves: bz#1447542
    (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-6.10])
  - Resolves: bz#1447545
    (CVE-2016-9603 qemu-kvm-rhev: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-6.10])


