# changelog

author: Peter Lemenkov <lemenkov@gmail.com> - 0.7.9-5
changelog:
  - Fixed FTBFS in Rawhide / Fedora 19 (see rhbz #914398)
  - Added provides(gnulib) (see rhbz #821785)
  - Added accidentally removed pspp docs (see rhbz #822610)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 0.5.1-3
changelog:
  - Rebuild against mingw-gnutls 3.1
  - Added BR: mingw32-libgcrypt mingw64-libgcrypt
  - Added BR: perl-podlators (for pod2man)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.5.0-7
changelog:
  - Ported to the mingw-w64 based packaging guidelines (rhbz #814997)
  - Workaround out-of-tree build issue already fixed upstream


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 0.5.0-6
changelog:
  - Renamed the source package to mingw-gtk-vnc (RHBZ #800881)
  - Use mingw macros without leading underscore


author: Erik van Pienbroek <epienbro@fedoraproejct.org> - 0.5.0-4
changelog:
  - Enable debuginfo subpackage
  - Dropped unneeded RPM tags
  - Dropped .la files
  - Dropped the %{?fedora} >= 15 conditionals


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.8-2
changelog:
  - Needs mingw32-filesystem with the pkg-config library path fix.
  - Added optional BRs suggested by auto-buildrequires.
  - Include the license file.


author: Jindrich Novy <novyjindrich@gmail.com> - 2012-20-20130321
changelog:
  - bring chkweb back to life
  - fix context script (#924918)
  - prefer scripts installed from sources than from CTAN
  - BR: ghostscript-devel because of dvisvgm (#924662)


author: Jindrich Novy <jnovy@redhat.com> 2012-17-20130310
changelog:
  - run updmap-sys --syncwithtrees posttrans (#915086)
  - don't conflict with other packages (#913678)
  - obsolete tex-cm-lgc (#907728)
  - obsolete tex-kerkis (#907726)
  - fix clashes with xmltex (#877690)
  - use fedora latexmk instead of texlive latexmk (#914689)
  - fix broken symlinks in /usr/bin (#910952)
  - fmtutil doesn't print jadetex errors any more (#875266)
  - fix post scriptlets


author: Jindrich Novy <jnovy@redhat.com> 2012-15-20130131
changelog:
  - enlarge tex(latex) dependency set, introduce tex(latex-base) (#904147)
  - fix post-scriptlets (#875257)
  - ship macros.texlive (#885762)
  - depend directly on texlive-kpathsea-lib
  - disable rpath


author: Jindrich Novy <jnovy@redhat.com> 2012-12-20130102
changelog:
  - fix dependencies and upgrade path (#892054, #891709)
  - do not ship windows and other unneeded files


author: Jindrich Novy <jnovy@redhat.com> 2012-11-20130102
changelog:
  - sync with CTAN
  - added new buildrequires
  - don't use texlive's psutils
  - don't obsolete latexmk (#868996)


author: Jindrich Novy <jnovy@redhat.com> 2012-10-20121205
changelog:
  - sync with CTAN
  - compile also C++ sources with -fno-strict-aliasing
  - ship adhocfilelist
  - fix changelog dates


author: Jindrich Novy <jnovy@redhat.com> 2012-9-20121120
changelog:
  - obsolete metapost-metauml (#573863)
  - update BR perl-MD5 to perl(Digest::MD5) - required for updmap
  - remove redundant posttrans executions in texlive-base (#865650)
  - own ls-R in texmf-local directory


author: Jindrich Novy <jnovy@redhat.com> 2012-8-20121115
changelog:
  - prevent sed from being verbose in install log when uninstalling
  - be sure the old /usr/share/texmf tree is indexed and searched by
  kpathsea (#876710)
  - drop patch to fix build for dvisvgm, it is now applied upstream
  - fix dependencies in texlive and texlive-base subpackages (#875364)


author: Jindrich Novy <jnovy@redhat.com> 2012-5-20121024
changelog:
  - don't conflict with latexmk (#868996)
  - unify versioning for both binary and noarch subpackages
  - remove lcdf-typetools hack for s390(x)


author: Jindrich Novy <jnovy@redhat.com> 2012-3-20121024
changelog:
  - sync with upstream - fixes problem lcdf-typetools tests
  - disable largefile support to fix pdflatex on 32bit arches (#872231)
  - put compatibility TEXMF tree reference into texm-local instead
  symlinking it to /usr/share/texmf directly


author: Jindrich Novy <jnovy@redhat.com> 2012-3-20121019
changelog:
  - sync with upstream sources
  - make /usr/share/texmf visible to kpathsea, make texmf-local
  pointing to it (#867656, #864875)
  - fix versioning of binary packages


author: Jindrich Novy <jnovy@redhat.com> 2012-3-20120926
changelog:
  - obsolete chktex (#864211)
  - make config.ps a config file (#441171)
  - fix post/postun scriptlet dependencies
  - all subpackages now have %dist tag


author: Jindrich Novy <jnovy@redhat.com> 2012-2-20120926
changelog:
  - drop relase subpackage (no more needed as TL is now in Fedora)
  - fix -doc dependencies
  - remove (not-built) asymtote from source tarball
  - undefined catalogue version defaults to 0
  - perform automatic license audit
  - include also packages not part of any scheme
  - don't strip binaries so that we can generate debuginfo (#863635)
  - clean up depsolver


author: Jindrich Novy <jnovy@redhat.com> 2011-0.1.20110227
changelog:
  - fix upgrade path with old TL2007 xetex, context or dvips installed
  - fix package generation bug that caused some package might be missing
  from the repository
  (http://www.linux.cz/pipermail/texlive/2011-February/000086.html)
  - fix upstream source URLs


author: Jindrich Novy <jnovy@redhat.com> 2011-0.1.20110120
changelog:
  - bump release to 2011 (we are using the 2011/dev SVN version)
  - add more file virtual provides (TFM, TTF, TTC, PFA, PFB, PCF, OTF,
  TEX, CNF, CFG, DEF, DAT, LDF, FD, ENC, MAP, VF, VPL, CLO, BUG, BUG2)


author: Jindrich Novy <jnovy@redhat.com> 2010-13.20101112
changelog:
  - temporarily disable dvi2tty because of failing test suite
  - package /etc/texmf and point texmf-config there


author: Jindrich Novy <jnovy@redhat.com> 2010-11.20101007
changelog:
  - sync with the latest TL2010 sources
  - don't make redundant copies of binaries, symlink them
  - fix symlinks to perl utilities


author: Jindrich Novy <jnovy@redhat.com> 2010-9.20100814
changelog:
  - fix file attributes and rpmlint warnings
  - define libdir when calling configure
  - rebuild against new poppler


author: Jindrich Novy <jnovy@redhat.com> 2010-8.20100715
changelog:
  - move all the licenses and base directory hierarchy to texlive-base
  noarch subpackage
  - add automatic licensing code


author: Jindrich Novy <jnovy@redhat.com> 2010-7.20100531
changelog:
  - switch to "tlpretest" source tree
  - add lua and ruby dependencies to packages requiring them
  - generate global package database "texlive.tlpdb" directly from
  tlpobj files shipped with each package


author: Jindrich Novy <jnovy@redhat.com> 2009-3.20100326
changelog:
  - declare fmutil.cnf, updmap.cfg, context.cnf and texmf.cnf as config files
  so that they don't get overwritten with texlive-kpathsea update
  - move man and info pages to the main packages, not -doc


author: Jindrich Novy <jnovy@redhat.com> 2009-2
changelog:
  - install man and info pages into proper locations visible
  by man and info
  - update scriptlets
  - remove xindy bits


author: Jindrich Novy <jnovy@redhat.com> 2009-0.11
changelog:
  - fix generation of packages that ships only documentation
  - fix versioning of packages without version but with revision
  - fix heuristics for gathering .sty files dependencies
  - include packages under GFSL license
  - make files in old texmf tree from previous installs visible
  - do not obsolete old kpathsea, try to coexist
  - remove dvipdfm, dvipdfmx,depend of Fedora ones


author: Jindrich Novy <jnovy@redhat.com> 2009-0.3
changelog:
  - require system psutils and t1utils and don't build the TL ones
  - correctly obsolete old kpathsea
  - binaries now have -bin postfix
  - support for Fedora fonts


author: Jindrich Novy <jnovy@redhat.com> 2009-0.2
changelog:
  - add tetex-* virtual provides
  - fix unversioned requires
  - filter out unwanted libs and utilities from source


author: Jindrich Novy <jnovy@redhat.com> 2008-0.2
changelog:
  - update to today's svn sources of binaries from upstream
  - fix directory -> symlink conversion
  - add ly1 (#488651)


author: Jindrich Novy <jnovy@redhat.com> 2008-0.1
changelog:
  - initial packaging for TeX Live 2008
  - wrote tl2rpm.c to autogenerate packages and post scriptlets
  from TeX Live metadata
  - fix kpathsea default search path


author: Gerard Ryan <galileo@fedoraproject.org> - 4.0.0-1
changelog:
  - Update to upstream 4.0.0.Final
  - Add script create-tarball.sh to create source tarball from Git.
  - Update locations for symlinked jars and POM macros.
  - Remove unnecessary pom macros.


author: Gerard Ryan <galileo@fedoraproject.org> - 4.0.0-0.2
changelog:
  - Update to tag jbosstools-4.0.0.Alpha2.
  - Add subpackage runtime, necessary for 'as' subpackage.
  - Shorten summary line.
  - Rebase patches 14, 15, 16, 21, 23; append -4.0.0 to patch name.
  - Remove patches 13, 20.
  - Remove dependency on jbossxb.


author: Gerard Ryan <galileo@fedoraproject.org> - 3.3.1-3
changelog:
  - Make build process more efficient & remove -Dmaven.test.skip option.
  - Use pom macros, and remove patches that are no longer necessary.
  - Add tests module to tarball.
  - Add apache-commons-codec as BR.


author: Gerard Ryan <galileo@fedoraproject.org> - 3.3.1-2
changelog:
  - Fix license field and install license files.
  - Use a clean tarball to reduce srpm size.
  - Use spaces consistently; add some necessary comments.


author: Remi Collet <rcollet@redhat.com> 5.4.13-1
changelog:
  - update to 5.4.13
  - security fix for CVE-2013-1643
  - Hardened build (links with -z now option)
  - Remove %config from %{_sysconfdir}/rpm/macros.*
    (https://fedorahosted.org/fpc/ticket/259).


author: Remi Collet <remi@fedoraproject.org> 5.4.12-1
changelog:
  - update to 5.4.12
  - security fix for CVE-2013-1635
  - enable tokyocabinet dba handler
  - upstream patch (5.4.13) to fix dval to lval conversion
    https://bugs.php.net/64142
  - upstream patch (5.4.13) for 2 failed tests
  - fix buit-in web server on ppc64 (fdset usage)
    https://bugs.php.net/64128


author: Remi Collet <rcollet@redhat.com> 5.4.9-0.1.RC1
changelog:
  - update to 5.4.9RC1
  - improves php.conf (use FilesMatch + SetHandler)
  - improves filter (httpd module)
  - apply ldap_r patch on fedora >= 18 only


author: Remi Collet <rcollet@redhat.com> 5.4.8-6
changelog:
  - clarify Licenses
  - missing provides xmlreader and xmlwriter
  - modernize spec
  - change php embedded library soname version to 5.4


author: Remi Collet <remi@fedoraproject.org> 5.4.8-1
changelog:
  - update to 5.4.8
  - define both session.save_handler and session.save_path
  - fix possible segfault in libxml (#828526)
  - php-fpm: create apache user if needed
  - use SKIP_ONLINE_TEST during make test
  - php-devel requires pcre-devel and php-cli (instead of php)


author: Remi Collet <remi@fedoraproject.org> 5.4.7-9
changelog:
  - php-fpm: enable PrivateTmp
  - php-fpm: new systemd macros (#850268)
  - php-fpm: add upstream patch for startup issue (#846858)


author: Remi Collet <rcollet@redhat.com> 5.4.7-8
changelog:
  - systemd integration, https://bugs.php.net/63085
  - no odbc call during timeout, https://bugs.php.net/63171
  - check sqlite3_column_table_name, https://bugs.php.net/63149


author: Remi Collet <remi@fedoraproject.org> 5.4.4-1
changelog:
  - update to 5.4.4 (CVE-2012-2143, CVE-2012-2386)
  - use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d
  - use /run/php-fpm instead of /var/run/php-fpm


author: Remi Collet <remi@fedoraproject.org> 5.4.0-5
changelog:
  - fix Loadmodule with MPM event (use ZTS if not MPM worker)
  - split conf.d/php.conf + conf.modules.d/10-php.conf with httpd 2.4


author: Remi Collet <remi@fedoraproject.org> 5.4.0-0.3.RC7
changelog:
  - update to PHP 5.4.0RC7
  - provides env file for php-fpm (#784770)
  - add patch to use system libzip (thanks to spot)
  - don't provide INSTALL file


author: Remi Collet <remi@fedoraproject.org> 5.3.8-3
changelog:
  - revert is_a() to php <= 5.3.6 behavior (from upstream)
    with new option (allow_string) for new behavior


author: Remi Collet <remi@fedoraproject.org> 5.3.8-2
changelog:
  - add mysqlnd sub-package
  - drop patch4, use --libdir to use /usr/lib*/php/build
  - add patch to redirect mysql.sock (in mysqlnd)


author: Remi Collet <Fedora@famillecollet.com> 5.3.2-1
changelog:
  - PHP 5.3.2 Released!
  - remove mime_magic option (now provided by fileinfo, by emu)
  - add patch for http://bugs.php.net/50578
  - remove patch for libedit (upstream)
  - add runselftest option to allow build without test suite


author: Remi Collet <Fedora@famillecollet.com> 5.3.1-1
changelog:
  - update to 5.3.1
  - remove openssl patch (merged upstream)
  - add provides for php-pecl-json
  - add prod/devel php.ini in doc


author: Joe Orton <jorton@redhat.com> 5.3.0-2
changelog:
  - update to v5 of systzdata patch; parses zone.tab and extracts
    timezone->{country-code,long/lat,comment} mapping table


author: Remi Collet <Fedora@famillecollet.com> 5.3.0-1
changelog:
  - update to 5.3.0
  - remove ncurses, dbase, mhash extensions
  - add enchant, sqlite3, intl, phar, fileinfo extensions
  - raise sqlite version to 3.6.0 (for sqlite3, build with --enable-load-extension)
  - sync with upstream "production" php.ini


author: Joe Orton <jorton@redhat.com> 5.2.8-9
changelog:
  - add recode support, -recode subpackage (#106755)
  - add -zts subpackage with ZTS-enabled build of httpd SAPI
  - adjust php.conf to use -zts SAPI build for worker MPM


author: Joe Orton <jorton@redhat.com> 5.2.8-4
changelog:
  - move wddx to php-xml, build curl shared in -common
  - remove BR for expat-devel, bogus configure option


author: Joe Orton <jorton@redhat.com> 5.2.6-6
changelog:
  - move gd_README to php-gd
  - update to r4 of systzdata patch; introduces a default timezone
    name of "System/Localtime", which uses /etc/localtime (#469532)


author: Joe Orton <jorton@redhat.com> 5.2.6-3
changelog:
  - update to 5.2.6
  - sync default php.ini with upstream
  - drop extension_dir from default php.ini, rely on hard-coded
    default, to make php-common multilib-safe (#455091)
  - update to r3 of systzdata patch


author: Joe Orton <jorton@redhat.com> 5.2.3-3
changelog:
  - add mcrypt, mhash, tidy, mssql subpackages (Dmitry Butskoy)
  - enable dbase extension and package in -common


author: Joe Orton <jorton@redhat.com> 5.2.0-10
changelog:
  - bump default memory_limit to 32M (#220821)
  - mark config files noreplace again (#174251)
  - drop trailing dots from Summary fields
  - use standard BuildRoot
  - drop libtool15 patch (#226294)


author: Joe Orton <jorton@redhat.com> 5.2.0-9
changelog:
  - add php(api), php(zend-abi) provides (#221302)
  - package /usr/share/php and append to default include_path (#225434)


author: Joe Orton <jorton@redhat.com> 5.2.0-5
changelog:
  - build json and zip shared, in -common (Remi Collet, #215966)
  - obsolete php-json and php-pecl-zip
  - build readline extension into /usr/bin/php* (#210585)
  - change module subpackages to require php-common not php (#177821)


author: Joe Orton <jorton@redhat.com> 5.2.0-4
changelog:
  - provide php-zend-abi (#212804)
  - add /etc/rpm/macros.php exporting interface versions
  - synch with upstream recommended php.ini


author: Joe Orton <jorton@redhat.com> 5.2.0-3
changelog:
  - update to 5.2.0 (#213837)
  - php-xml provides php-domxml (#215656)
  - fix php-pdo-abi provide (#214281)


author: Joe Orton <jorton@redhat.com> 5.1.4-8
changelog:
  - Provide php-posix (#194583)
  - only provide php-pcntl from -cli subpackage
  - add missing defattr's (thanks to Matthias Saou)


author: Joe Orton <jorton@redhat.com> 5.1.4-5
changelog:
  - provide mod_php (#187891)
  - provide php-cli (#192196)
  - use correct LDAP fix (#181518)
  - define _GNU_SOURCE in php_config.h and leave it defined
  - drop (circular) dependency on php-pear


author: Joe Orton <jorton@redhat.com> 5.1.2-5
changelog:
  - provide php-api (#183227)
  - add provides for all builtin modules (Tim Jackson, #173804)
  - own %{_libdir}/php/pear for PEAR packages (per #176733)
  - add obsoletes to allow upgrade from FE4 PDO packages (#181863)


author: Joe Orton <jorton@redhat.com> 5.1.1-2
changelog:
  - update to 5.1.1
  - remove pear subpackage
  - enable pdo extensions (php-pdo subpackage)
  - remove non-standard conditional module builds
  - enable xmlreader extension


author: Joe Orton <jorton@redhat.com> 5.0.5-3
changelog:
  - update to 5.0.5
  - add fix for upstream #34435
  - devel: require autoconf, automake (#159283)
  - pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1
  - fix imagettftext et al (upstream, #161001)


author: Joe Orton <jorton@redhat.com> 5.0.4-9
changelog:
  - build simplexml_import_dom even with shared dom (#156434)
  - prevent truncation of copied files to ~2Mb (#155916)
  - install /usr/bin/php from CLI build alongside CGI
  - enable sysvmsg extension (#142988)


author: Joe Orton <jorton@redhat.com> 5.0.4-7
changelog:
  - split out dba and bcmath extensions into subpackages
  - BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)
  - pear: update to DB-1.7.6
  - enable FastCGI support in /usr/bin/php-cgi (#149596)


author: Joe Orton <jorton@redhat.com> 5.0.4-6
changelog:
  - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi,
    built with the CGI SAPI (thanks to Edward Rudd, #137704)
  - add php(1) man page for CLI
  - fix more test cases to use -n when invoking php


author: Joe Orton <jorton@redhat.com> 5.0.4-4
changelog:
  - bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP
  - snmp: disable MSHUTDOWN function to prevent error_log noise (#153988)
  - mysqli: add fix for crash on x86_64 (Georg Richter, upstream #32282)


author: Joe Orton <jorton@redhat.com> 5.0.4-1
changelog:
  - update to 5.0.4 (#153068)
  - add .phps AddType to php.conf (#152973)
  - better gcc4 fix for libxmlrpc


author: Joe Orton <jorton@redhat.com> 5.0.3-5
changelog:
  - BuildRequire mysql-devel >= 4.1
  - don't mark php.ini as noreplace to make upgrades work (#152171)
  - fix subpackage descriptions (#152628)
  - fix memset(,,0) in Zend (thanks to Dave Jones)
  - fix various compiler warnings in Zend


author: Joe Orton <jorton@redhat.com> 5.0.3-4
changelog:
  - package mysqli extension in php-mysql
  - really enable pcntl (#142903)
  - don't build with --enable-safe-mode (#148969)
  - use "Instant Client" libraries for oci8 module (Kai Bolay, #149873)


author: Joe Orton <jorton@redhat.com> 5.0.3-2
changelog:
  - install the ext/gd headers (#145891)
  - enable pcntl extension in /usr/bin/php (#142903)
  - add libmbfl array arithmetic fix (dcb314@hotmail.com, #143795)
  - add BuildRequire for recent pcre-devel (#147448)


author: Joe Orton <jorton@redhat.com> 5.0.3-1
changelog:
  - update to 5.0.3 (thanks to Robert Scheck et al, #143101)
  - enable xsl extension (#142174)
  - package both the xsl and dom extensions in php-xml
  - enable soap extension, shared (php-soap package) (#142901)
  - add patches from upstream 5.0 branch:
   * Zend_strtod.c compile fixes
   * correct php_sprintf return value usage


author: Joe Orton <jorton@redhat.com> 5.0.2-7
changelog:
  - truncate changelog at 4.3.1-1
  - merge from 4.3.x package:
   - enable mime_magic extension and Require: file (#130276)


author: Joe Orton <jorton@redhat.com> 5.0.2-5
changelog:
  - fix phpize installation for lib64 platforms
  - add fix for segfault in variable parsing introduced in 5.0.2


author: Joe Orton <jorton@redhat.com> 5.0.2-4
changelog:
  - update to 5.0.2 (#127980)
  - build against mysqlclient10-devel
  - use new RTLD_DEEPBIND to load extension modules
  - drop explicit requirement for elfutils-devel
  - use AddHandler in default conf.d/php.conf (#135664)
  - "fix" round() fudging for recent gcc on x86
  - disable sqlite pending audit of warnings and subpackage split


author: Joe Orton <jorton@redhat.com> 5.0.1-1
changelog:
  - update to 5.0.1
  - only build shared modules once
  - put dom extension in php-dom subpackage again
  - move extension modules into %{_libdir}/php/modules
  - don't use --with-regex=system, it's ignored for the apache* SAPIs


author: Tom Callaway <tcallawa@redhat.com>
changelog:
  - bump to 5.0.0
  - add patch to prevent clobbering struct re_registers from regex.h
  - remove domxml references, replaced with dom now built-in
  - fix php.ini to refer to php5 not php4


author: Mamoru Tasaka <mtasaka@fedoraproject.org> - 1.10.2-1
changelog:
  - 1.10.2
  - Make dependency for pkg-config be development only again
  - Change the license tag to "GPLv2 or Ruby"
  - Remove defattr


author: Allisson Azevedo <allisson@gmail.com> 1.4.1-2
changelog:
  - Changed license for Ruby License/GPL
  - Add ruby-devel for devel requires
  - Changed main group for System Environment/Libraries
  - Changed install for keep timestamps


author: Mohamed El Morabity <melmorabity@fedoraproject.org> - 3.1.91-3.20111001gite102c0c6
changelog:
  - Update to a newer git snapshot
  - Fix GNOME Shell version to work with GS 3.2.0
  - Add Requires on GS 3.2.0 or above to gnome-shell-common


author: Michel Salim <salimma@fedoraproject.org> - 3.1.4-1
changelog:
  - Update to 3.1.4
  - Enable systemMonitor extension
  - Prepare xrandr-indicator, commenting out since it does not seem to work yet
  - Rename subpackages in line with new guidelines (# 715367)
  - Sort subpackages in alphabetical order


author: Timur Kristóf <venemo@fedoraproject.org> - 3.0.2-1.g63dd27cgit
changelog:
  - Update to a newer git snapshot
  - Fix RHBZ bug #708230
  - Enabled systemMonitor extension, but commented out since the requirements are not available


author: Rex Dieter <rdieter@fedoraproject.org> 4.10.2-5
changelog:
  - drop LD_BIND_NOW from startkde (#908380)
  - fold all startkde-related patches into redhat_startkde.patch


author: Rex Dieter <rdieter@fedoraproject.org> 4.10.1-2
changelog:
  - PowerDevil should use upower to suspend on F17 (#920874)
  - other small upstream fixes (xrandrbrightness, login1 leak, stop screensaver)


author: Rex Dieter <rdieter@fedoraproject.org> 4.10.0-6
changelog:
  - tweak fedora-plasma-cache.sh for plasma-svgelements*, Trolltech.conf too
  - enable powerdevil-login1 support on f18


author: Rex Dieter <rdieter@fedoraproject.org> 4.9.97-3
changelog:
  - hack to use org.freedesktop.login1 to handle suspend (instead of upower),
    seems to help avoid double-sleep (#859227)


author: Martin Briza <mbriza@redhat.com> 4.9.90-2
changelog:
  - Merged and cleaned the systemd shutdown and logout patches.
  - It is possible to use systemd and/or CK without defining it at compile time


author: Martin Briza <mbriza@redhat.com> - 4.9.3-3
changelog:
  - user switching dialog now doesn't list inactive (closing) sessions and more information is retrieved from logind


author: Lukáš Tinkl <ltinkl@redhat.com> 4.9.1-6
changelog:
  - update the systemd PowerDevil Policy Agent patch to match the upstream
    version (part of KDE 4.9.2)
  - update clock applets on system date/time changes


author: Rex Dieter <rdieter@fedoraproject.org> 4.9.0-2
changelog:
  - kcm_fonts should use $XDG_CONFIG_HOME/fontconfig/fonts.conf for storage settings for fontconfig > 2.10.0 (kde#304317)


author: Than Ngo <than@redhat.com> - 4.8.97-2
changelog:
  - remove obsolete stuffs in startkde, kde-4.6.x already uses QLocale
    to try obtain a default country.


author: Rex Dieter <rdieter@fedoraproject.org> 4.8.95-3
changelog:
  - Battery Monitor widget stops tracking charging state changes after suspend/resume cycle (#837345, kde#287952)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.8.80-2
changelog:
  - new showremainingtime patch, now just defaults the option to true
    (It doesn't have ugly side effects anymore with the rewritten plasmoid.)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.8.0-5
changelog:
  - kde-workspace: Requires: ConsoleKit (shutdown/restart, works around #788171)
  - kdm: Requires: ConsoleKit (works around #787855, nasty error message on login)


author: Rex Dieter <rdieter@fedoraproject.org> 4.8.0-2
changelog:
  - kcm_colors subpkg (#761184)
  - kdm-themes: Requires: kde-wallpapers unconditionally (#784389)
  - s/kdebase-runtime/kde-runtime/


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.95-3
changelog:
  - kdm overwrites ~/.Xauthority with wrong SELinux context on logout (#567914,kde#242065)
  - gcc47 fixes


author: Radek Novacek <rnovacek@redhat.com> 4.7.80-4
changelog:
  - Respin with new upstream tarball
  - Drop patch: don't use INSTALL to copy file to current binary dir


author: Radek Novacek <rnovacek@redhat.com> 4.7.80-3
changelog:
  - Fixed file listed twice
  - Remove big cursors from files (they are no longer in upstream tarball)
  - Add new files: libkwinglutils.so*, liboxygenstyleconfig.so*
    libpowerdevilconfigcommonprivate.so*, kfontinst.knsrc
  - New ksplash theme Minimalistic
  - patch: don't use INSTALL to copy file to current binary dir


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.3-12
changelog:
  - Crash in TaskManager::TaskItem::task (kde#272495)
  - Crashes When Adding Weather Widgets (Geolocation) (kde#277036)


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.1-2
changelog:
  - upstream kwin_performance patch
  - Use /etc/login.defs to define a 'system' account instead of hard-coding 500 (#732830)


author: Jaroslav Reznik <jreznik@redhat.com> 4.7.0-1
changelog:
  - 4.7.0
  - kde4workspace_version is not needed anymore
  - Provides: kde-workspace kde-wallpapers (to match new upstream tarballs)


author: Lukas Tinkl <ltinkl@redhat.com> - 4.6.2-2
changelog:
  - #694222 - Brightness controls no longer work
  - kdebug#257948 - Powerdevil can no longer control brightness
  - drop obsolete HAL backlight patch


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.6.1-7
changelog:
  - Restore lost hunks from redhat_startkde patch, fixes regressions with running
    Qt 3 binaries (Qt 3 Assistant etc.) and with the initial background color
  - Fix incorrectly rebased hunk from redhat_startkde patch, fixes regression with
    language setting


author: Rex Dieter <rdieter@fedoraproject.org> 4.6.1-2
changelog:
  - use system-kde-theme again (ie, lovelock-kde-theme on f15)
  - -Requires: system-backgrounds-kde
  - +Requires: system-plasma-desktoptheme 
  - -ksplash-themes: move Default (Air+Horos) ksplash theme here


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.80-7
changelog:
  - -googlegadgets => plasma-scriptengine-googlegaddgets
  - -python-applet => plasma-scriptengine-python
  - (new) plasma-scriptengine-ruby


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.5.3-2
changelog:
  - drop classicmenu-games patch, upstream fixed the same issue differently and
    now the 2 fixes conflict (classic menu confuses Name and Description)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.5.2-5
changelog:
  - use upstream ck-shutdown patch from 4.6 trunk (instead of my old one),
    supports GDM session switching (#560511, kde#186198)
  - drop old F11- version of the ck-shutdown patch, F11 is EOL


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.2-2
changelog:
  - include better, upstream fix for: krandr: Display Settings are Lost
    on Logout (kdebug183143, rh#607180)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.4.85-2
changelog:
  - Adding "Enable networking" button to knetworkmanager (rh#598765, kde#238325)
  - drop < f12 conditionals
  - pciutils, raw1394 & qualculate BRs
  - added kcmkdm helper and policy (from kdelibs)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.4.2-3
changelog:
  - rip out bulletproof X changes (cf. kubuntu_33_kdm_bulletproof_x.diff) from
    our copy of kubuntu_34_kdm_plymouth_transition.diff
  - drop experimental novt patch, should not be needed with the working Plymouth
    integration and may have side effects (can readd it later if really needed)
  - fix icon name in plasma-konsole patch: use XDG icon instead of kappfinder one


author: Rex Dieter <rdieter@fedoraproject.org> - 4.4.2-2
changelog:
  - try to workaround "X server hogs the CPU (#577482)" by letting X
    choose vt itself
  - include (but not yet apply) kubuntu_34_kdm_plymouth_transition.diff


author: Than Ngo <than@redhat.com> - 4.4.0-4
changelog:
  - move xsession desktop files to main package
    (cannot start kde from gdm if kdm not installed)
  - Desktop locking crashes (kde#217882#16)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.90-8
changelog:
  - SELinux is preventing /sbin/setfiles "read" access on
    /var/spool/gdm/force-display-on-active-vt (deleted) (#556643)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.90-5
changelog:
  - do not link calendar dataengine with Akonadi (kde#215150, rh#552473)
  - s/plasma-engine/plasma-dataengine/


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.85-3
changelog:
  - F13+: don't Obsoletes: PolicyKit-kde, let polkit-kde obsolete it
  - F13+: explicitly require polkit-kde instead of PolicyKit-authentication-agent


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.75-0.4.svn1048496
changelog:
  - backport battery plasmoid from current pre-4.3.80 trunk for showremainingtime
  - rebase battery-plasmoid-showremainingtime patch
  - rebase brightness-keys patch for the above backport


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.1-3
changelog:
  - -python-applet: Provides: plasma-scriptengine-python
  - Requires: system-ksplash-theme (f12+,rhel6+)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.0-101
changelog:
  - inflate Release tag, avoiding possible upgrade/obsoletes pain 
  - -devel: drop Provides: PolicyKit-kde-devel, bump Obsoletes


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.0-2
changelog:
  - move designer plugins to -libs, fixes
    Multilib conflicts for index.cache.bz2 (#515088)
  - tighten -libs deps, using %{?_isa}
  - %check: desktop-file-validate


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.2.95-2
changelog:
  - port and reapply rootprivs (#434824) patch (#508593)
  - fix internal version number (otherwise it mismatches with our file list)


author: Rex Dieter <rdieter@fedoraproject.org> 4.2.85-2
changelog:
  - upgrade path broken (F-11+), Obsoletes: guidance-power-manager (#502892)
  - drop < F-10 crud, have_bluez3


author: Rex Dieter <rdieter@fedoraproject.org> - 4.2.1-9
changelog:
  - kdm subpkg
  - -devel: move cmake modules here
  - Requires: kdelibs4%{?_isa} ..
  - BR: libutempter-devel (drops need for kwrited helper)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.2.0-4.1
changelog:
  - conditionalize bluetooth backport on F10+
  - F9: revert solid-bluetooth to the version from KDE 4.1.4


author: Rex Dieter <rdieter@fedoraproject.org> - 4.2.0-3
changelog:
  - Requires: PyKDE4 (for plasmascript bits)
  - solid-bluetoothTrunkTo42.diff (bug #481801), and 
    +Provides: solid-bluetooth(-devel) = 4.3


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.85-5
changelog:
  - drop BR edje-devel, we need QEdje instead, which we don't have yet
  - comment out BR google-gadgets-* for now, need 0.10.4, have 0.10.3


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.80-5
changelog:
  - use python_sitearch for x86_64 systems
  - kephal seems to be disabled/removed, re-adapted file lists


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.80-3
changelog:
  - rebase kdebase-workspace-4.1.1-show-systemsettings.patch
  - new library: Kephal -> adapt file lists


author: Than Ngo <than@redhat.com> 4.1.80-2
changelog:
  - merged
  - drop kdebase-workspace-4.1.2-kdm-i18n.patch, it's included in upstream
  - drop kdebase-workspace-4.0.85-plasma-default-wallpaper.patch, it's included in upstream
  - drop kdebase-workspace-4.1.65-consolekit-kdm.patch
  - add kdebase-workspace-4.1.80-session-button.patch
  - add kdebase-workspace-4.1.2-ldap.patch


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.80-1
changelog:
  - 4.1.80
  - BR cmake >= 2.6.2
  - make install/fast
  - drop _default_patch_fuzz 2
  - rebase startkde patch
  - rebase plasma-konsole patch
  - rebase ck-shutdown patch
  - add PyKDE4-devel, python-devel and PyQt4-devel to build plasma's python
    scripting interface
  - BR google-gadgets-devel for google gadgets scriptengine
  - BR libusb-devel for Logitech USB support in KControl


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.2-10
changelog:
  - never touch PATH in startkde, prepending $QTDIR/bin is unnecessary on Fedora
    and breaks locating Qt 3 Assistant and other Qt 3 stuff (startkde gets run
    with a full path by KDM)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.2-6
changelog:
  - reenable panel-autohide-fix-flicker patch
  - backport revision 866998 to fix the CPU consumption problem (kde#172549)
  - backport panelview.cpp coordinate fixes (revisions 869882, 869925, 870041)
  - backport revision 871058 (request config sync when panel controller goes away)


author: Lukáš Tinkl <ltinkl@redhat.com> 4.1.0-5
changelog:
  - fix 457479: "Run as root" dialog of kdm system settings is shown twice
    (due to activated signal being connected to twice)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.99-5
changelog:
  - F10+: fix circular kdebase<->kdebase-workspace dependency: don't Obsolete or
    Require kdebase, as kdebase now requires kdebase-workspace, obviating the
    upgrade path hack


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.99-2
changelog:
  - backport Plasma tooltip manager from KDE 4.2 (fixes regression from 4.0)
    WARNING: Adds some new APIs from 4.2 (Plasma::popupPosition, Plasma::viewFor,
             Plasma::ToolTip*), use at your own risk, we have no control to
             guarantee that they will not change!


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.85-3
changelog:
  - rewrite and reapply plasma-default-wallpaper patch
  - (no more separate plasma-default-wallpaper-config part)
  - rediff kde#154119 patch one last time


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.72-1
changelog:
  - update to 4.0.72
  - update file list (Lorenzo Villani)
  - port plasma-konsole, ck-shutdown, rootprivs, plasma-default-wallpaper patches
  - remove NoDisplay=true in systemsettings onlyshowkde patch (still add
    OnlyShowIn=KDE), rename to show-systemsettings
  - drop upstreamed suspend patch
  - drop backported kde#155362 and menu-switch patches
  - drop rh#443610 patch, "Zoom Out" should be working in 4.1
  - disable kde#158301 patch for now (fails to apply, looks hard to port)


author: Lukáš Tinkl <ltinkl@redhat.com> 4.0.3-15
changelog:
  - workaround #434824: KDE4 System Settings - No Method To Enter Administrative Mode
  - fix #441062: packagekit tools do not show icons correctly on KDE


author: Than Ngo <than@redhat.com> 4.0.2-7
changelog:
  - apply upstream patch to fix changing wallpaper causes desktop to go white
  - apply upstream patch to check whether the to-be-embedded window has been destroyed, (bz#437058)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.0-1
changelog:
  - update to 4.0.0
  - drop upstreamed creategtkrc-gtk212 patch
  - update redhat-startkde and consolekit-kdm patches


author: Rex Dieter <rdieter[AT]fedoraproject.org> 3.97.0-3
changelog:
  - Requires: coreutils dbus-x11 xorg-x11-apps xorg-x11-utils
              xorg-x11-server-utils (used in startkde)
  - drop pam configs that were previously moved to kde-settings


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.2-2
changelog:
  - BR: dbus-devel
  - crystalsvg icons are not part of kdebase-workspace anymore
  - make sure libkdeinit_plasma.so is in normal package


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 3.96.1-3
changelog:
  - update and apply redhat-startkde patch
  - update and apply KDM ConsoleKit patch (#228111, kde#147790)
  - ConsoleKit patch also includes xdmcp fixes from Mandriva (#243560)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 3.96.1-2
changelog:
  - %doc README COPYING
  - -libs subpkg
  - -libs: Requires: kdelibs4
  - don't remove libplasma.so from %{_kde4_libdir}
  - %files: use %_datadir for dbus-1/interfaces,xsessions


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.0-7
changelog:
  - use kde.desktop from /usr/share/apps/kdm/sessions/kde.desktop
  - use %config(noreplace) for /etc/ksysguarddrc
  - Requires: kdebase, kdebase-runtime, oxygen-icon-theme
  - fix url


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.0-3
changelog:
  - own some more directories
  - add %defattr to package devel
  - some spec cleanups
  - -R: kdepimlibs-devel
  - +BR: libXpm-devel
  - +BR: glib2-devel (do we really need this?)


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.0-2
changelog:
  - BR: libXxf86misc-devel
  - BR: libXxf86misc-devel
  - BR: libXcomposite-devel
  - BR: bluez-libs-devel
  - BR: libxklavier-devel
  - BR: pam-devel
  - BR: lm_sensors-devel
  - BR: libXdamage-devel
  - BR: libXv-devel
  - BR: libXres-devel


author: Alexandru Gagniuc <mr.nuke.me@gmail.com> - 0.1.1-2
changelog:
  - Add comment explaining chioce of license
  - Removed  _missing_build_ids_terminate_build undef
  - Add comment explaining doxygen warnings


author: Jonas Courteau <rpms@courteau.org> - 1.1.4-1
changelog:
  - Repackaged for fc17
  - New upstream version
  - Patch to fix broken spec (fixed in upstream commit fe5cd0116)


author: Milan Crha <mcrha@redhat.com> - 3.6.4-1
changelog:
  - Update to 3.6.4
  - Remove patch for Red Hat bug #475117 (fixed upstream)
  - Remove patch for Red Hat bug #903469 (fixed upstream)


author: Milan Crha <mcrha@redhat.com> - 3.6.3-2
changelog:
  - Add patch for Red Hat bug #475117 (Reply in multipart/digest)
  - Add patch for Red Hat bug #903469 (Formatting of text/* parts)


author: Milan Crha <mcrha@redhat.com> - 3.6.3-1
changelog:
  - Update to 3.6.3
  - Remove patch for Red Hat bug #875109 (fixed upstream)
  - Remove patch for Red Hat bug #877562 (fixed upstream)
  - Correct help-context patch test path (Red Hat bug #901341)


author: Milan Crha <mcrha@redhat.com> - 3.5.90-1
changelog:
  - Update to 3.5.90
  - Remove patches for BGO #678408 and #681321 (fixed upstream)
  - Add itstool and yelp-tools into BuildRequires


author: Matthew Barnes <mbarnes@redhat.com> - 3.3.4-2
changelog:
  - Keep all GSettings schema files in the main evolution package, even the
    ones for the Bogofilter and Spamassassin subpackages, since we just have
    one .convert file and missing schemas makes gsettings-data-convert crash.


author: Milan Crha <mcrha@redhat.com> - 3.1.2-1
changelog:
  - Update to 3.1.2
  - Add patch by Philip Withnall to build against libgdata-0.9.0
  - Add patch to enable GLib deprecated stuff (due to G_CONST_RETURN deprecation)


author: Milan Crha <mcrha@redhat.com> - 3.1.1-3
changelog:
  - Keep libevolution-mail-settings.so* from the previous change,
    it is still used by other parts of evolution.


author: Matthew Barnes <mbarnes@redhat.com> - 2.91.91-3
changelog:
  - Remove some unnecessary BuildRequires:
    gtkimageview-devel: No release available for gtk3.
    libgnomecanvas-devel: Evolution bundles its own libgnomecanvas now.


author: Matthew Barnes <mbarnes@redhat.com> - 2.91.91-2
changelog:
  - Split off an evolution-NetworkManager subpackage containing the NM
    integration module.  Users that choose to bypass NetworkManager can
    uninstall this subpackage so Evolution doesn't insist it's offline.


author: Matthew Barnes <mbarnes@redhat.com> - 2.31.6-1.fc14
changelog:
  - Update to 2.31.6
  - Drop dbus-glib requirement.
  - Bump glib2 requirement to 2.25.12.
  - Roll back evo_base_version to 2.32.
  - Add clutter-gtk requirement (for express mode).
  - Remove gtk-compat macro patch (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.31.2-2.fc14
changelog:
  - Evolution Express supercedes Anjal.
  - No need to undefine GNOME_DISABLE_DEPRECATED.
  - Remove nntp_support flag; that got moved to E-D-S ages ago.
  - Remove exchange_support flag; it's all in evolution-exchange now.


author: Matthew Barnes <mbarnes@redhat.com> - 2.31.1-2.fc14
changelog:
  - Require yelp in evolution-help (RH bug #589555).
  - Add patch for RH bug #589555 (hide Help->Contents if evolution-help
    is not installed).


author: Milan Crha <mcrha@redhat.com> - 2.29.6-1.fc13
changelog:
  - Update to 2.29.6
  - Remove patch for Gnome bug #606874 (fixed upstream).
  - Add rarian-compat to BuildRequires for Scrollkeeper.


author: Matthew Barnes <mbarnes@redhat.com> - 2.29.4-2.fc13
changelog:
  - Update Scrollkeeper and Icon Cache scriptlets to conform to guidelines.
    (see: http://fedoraproject.org/wiki/Packaging:ScriptletSnippets)


author: Matthew Barnes <mbarnes@redhat.com> - 2.29.1-1.fc13
changelog:
  - Update to 2.29.1
  - Bump evo_major to 2.30.
  - Drop Bonobo + ORBit dependency (yay!).
  - Remove option to use OpenSSL instead of NSS.
  - Uninstall GConf schemas during %pre and %preun.


author: Milan Crha <mcrha@redhat.com> - 2.27.5-1.fc12
changelog:
  - Update to 2.27.5
  - Remove pst import plugin patch (fixed upstream).
  - Remove work around deprecation of g_mount_unmount (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.27.3-5.fc11
changelog:
  - Add an evolution-pst subpackage for the PST importer plugin.
  - Disabled until libpst settles on an API.


author: Matthew Barnes <mbarnes@redhat.com> - 2.27.3-4.fc12
changelog:
  - Add BR for libpst-devel and libytnef-devel (RH bug #493049).
  - Add patch to build pst-import plugin against current libpst.
  - libpst's API broke again so disable the BR's for now.
  - Specify the gettext package when calling intltool-update.


author: Matthew Barnes <mbarnes@redhat.com> - 2.27.2-1.fc12
changelog:
  - Update to 2.27.2
  - Patch broken libevolution-mail-shared library.
  - Remove strict_build_settings since the settings are used upstream now.


author: Matthew Barnes <mbarnes@redhat.com> - 2.27.1-1.fc12
changelog:
  - Update to 2.27.1
  - Bump evo_major to 2.28.
  - Temporarily disable EDS_DISABLE_DEPRECATED due to GNOME bug #569652.


author: Matthew Barnes <mbarnes@redhat.com> - 2.25.90-2.fc11
changelog:
  - Update BuildRoot, License, Source and URL tags.
  - Require gnome-common so we don't have to patch it out.


author: Matthew Barnes <mbarnes@redhat.com> - 2.25.5-1.fc11
changelog:
  - Update to 2.25.5
  - Ditch eds_version and use our own version.  This will keep evolution
    and evolution-data-server versions in lockstep from now on.


author: Matthew Barnes <mbarnes@redhat.com> - 2.25.3.1-1.fc11
changelog:
  - Update to 2.25.3.1
  - New BR: libgweather-devel
  - Remove patch for GNOME bug #552583 (fixed upstream).
  - Bump the gtkhtml and gtk2 minimum versions.


author: Matthew Barnes <mbarnes@redhat.com> - 2.24.0-2.fc10
changelog:
  - Strip unneeded translations from .mo files (RH bug #463887).
  - Split Perl-based utilities into a "perl" subpackage (RH bug #462345).


author: Matthew Barnes <mbarnes@redhat.com> - 2.23.2-1.fc10
changelog:
  - Update to 2.23.2
  - Remove enchant-devel requirement.
  - Remove patch for RH bug #437208 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.23.1-1.fc10
changelog:
  - Update to 2.23.1
  - Bump evo_major to 2.22.
  - Bump eds_version to 2.23.1.
  - Bump glib2_version to 2.16.0.
  - Bump gtkhtml_version to 3.19.1.
  - Add gvfs requirement.
  - Drop gnomevfs2 requirement.
  - Remove patch for RH bug #164957 (obsolete).


author: Matthew Barnes <mbarnes@redhat.com> - 2.22.0-3.fc9
changelog:
  - Explicit require evolution-data-server since its shared object names
    still can't be trusted (RH bug #426511).


author: Matthew Barnes <mbarnes@redhat.com> - 2.21.91-1.fc9
changelog:
  - Update to 2.21.91
  - Bump eds_version to 2.21.91.
  - Remove patch for GNOME bug #240073 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.21.90-4.fc9
changelog:
  - Remove some obsolete configure options:
    --enable-file-chooser, --enable-file-locking, --enable-dot-locking
  - Remove gnome-doc-utils work-around for GNOME bug #427939 (fixed upstream).
  - Remove patch for RH bug #215478 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.21.90-1.fc9
changelog:
  - Update to 2.21.90
  - Update build requirements.
  - Remove patch for GNOME #363695 (obsolete/problematic).
  - Remove patch for GNOME #509741 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.21.5-1.fc9
changelog:
  - Update to 2.21.5
  - The backup-restore plugin is stable again.
  - Remove patch for RH bug #154360 (fixed upstream).
  - Remove patch for RH bug #166231 (obsolete, possibly fixed upstream).
  - Remove patch for RH bug #178295 (fixed upstream).
  - Remove patch for GNOME bug #362638 (fixed upstream).
  - Remove patch for GNOME bug #504030 (fixed upstream).
  - Remove patch for GNOME bug #507311 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.21.4-2.fc9
changelog:
  - Add patch for GNOME bug #507311 (send Bug Buddy reports to the new
    BugBuddyBugs Bugzilla component).


author: Matthew Barnes <mbarnes@redhat.com> - 2.21.3-4.fc9
changelog:
  - Split junk filtering plugins into evolution-bogofilter and
    evolution-spamassassin subpackages, each of which requires the
    necessary backend packages.  (RH bug #377381)


author: Matthew Barnes <mbarnes@redhat.com> - 2.21.3-1.fc9
changelog:
  - Update to 2.21.3
  - Remove patch for RH bug #215467 (fixed upstream).
  - Remove patch for GNOME bug #499920 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.21.1-2.fc9
changelog:
  - Attempt to split the gnome-pilot stuff into a separate
    evolution-conduits subpackage (RH bug #178155).


author: Matthew Barnes <mbarnes@redhat.com> - 2.21.1-1.fc9
changelog:
  - Update to 2.21.1
  - Remove redundant requirements.
  - Bump EDS requirement to 2.21.1.
  - Bump gtkhtml requirement to 3.17.1.
  - Backup/restore plugin got moved from standard to experimental.
  - Revert the per-component menu items (RH bug #222105, #241462, #293771).
  - Show the switcher buttons by default (RH bug #186403).
  - Alter the desktop file Name and Comment.
  - Disable patch for GNOME bug #376991 for now.  It may be contributing
    to password prompting problems as described in RH bug #296671.
  - Remove patch for GNOME bug #417999 (fixed upstream).
  - Remove patch for GNOME bug #476040 (fixed upstream).
  - Remove patch for GNOME bug #477045 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.11.91-3.fc8
changelog:
  - Revise patch for GNOME bug #362638 to fix GNOME bug #357175
    (Evolution fails to close after IMAP alert has been displayed).


author: Milan Crha <mcrha@redhat.com> - 2.11.91-1.fc8
changelog:
  - Update to 2.11.91
  - Removed patch for RH bug #157400 / GNOME bug #303877 (fixed upstream).
  - Removed patch for RH bug #157505 / GNOME bug #303878 (fixed upstream).
  - Removed patch for RH bug #161885 / GNOME bug #309166 (fixed upstream).
  - Removed patch for RH bug #202751 / GNOME bug #355766 (fixed upstream).
  - Removed patch for RH bug #218898 / GNOME bug #385414 (fixed upstream).
  - Removed patch for RH bug #253348 / GNOME bug #467883 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.11.90-3.fc8
changelog:
  - Revise patch for GNOME bug #417999 to fix GNOME bug #447591
    (Automatic Contacts combo boxes don't work).


author: Matthew Barnes <mbarnes@redhat.com> - 2.11.3-1.fc8
changelog:
  - Update to 2.11.3
  - Evolution no longer has versioned file names.
  - Remove patch for RH bug #202289 (fixed upstream).
  - Remove patch for RH bug #235878 (fixed upstream).
  - Remove patch for RH bug #238155 (fixed upstream).
  - Remove patch for RH bug #240147 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.11.2-1.fc8
changelog:
  - Update to 2.11.2
  - Bump evo_major to 2.12.
  - Bump eds_version to 1.11.0.
  - Update files with new plugins and icons.
  - Remove patch for RH bug #190359 (fixed upstream).
  - Remove patch for RH bug #218801 (fixed upstream).
  - Remove patch for RH bug #234315 (fixed upstream).
  - Remove patch for RH bug #236399 (fixed upstream).
  - Remove patch for RH bug #236860 (fixed upstream).
  - Remove patch for RH bug #238551 (fixed upstream).
  - Remove patch for GNOME bug #373837 (fixed upstream).
  - Remove patch for GNOME bug #373116 (fixed upstream).
  - Remove patch for GNOME bug #418971 (fixed upstream).
  - Remove patch for GNOME bug #419469 (fixed upstream).
  - Remove patch for GNOME bug #419524 (fixed upstream).
  - Remove evolution-2.6.0-prototypes.patch (obsolete).


author: Matthew Barnes <mbarnes@redhat.com> - 2.10.1-17.fc7
changelog:
  - Revise patch for GNOME bug #362638 to fix RH bug #237206
    (certificate prompt causes crash, again).


author: Matthew Barnes <mbarnes@redhat.com> - 2.10.1-9.fc7
changelog:
  - Revise some patches so that we don't have to run autoreconf.
  - Remove patch for GNOME bug #427939 (use a different work-around).


author: Matthew Barnes <mbarnes@redhat.com> - 2.10.1-2.fc7
changelog:
  - Revise patch for GNOME bug #362638 to fix RH bug #235096
    (crash when displaying a mail server message to user).


author: Matthew Barnes <mbarnes@redhat.com> - 2.10.1-1.fc7
changelog:
  - Update to 2.10.1
  - Fix buggy gnome-doc-utils.make (GNOME bug #427939).
  - Remove patch for CVE-2007-1002 (fixed upstream).
  - Remove patch for RH bug #231767 (fixed upstream).
  - Remove patch for RH bug #235056 (fixed upstream).
  - Remove patch for GNOME bug #352713 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.10.0-9.fc7
changelog:
  - Require libxml2-devel in evolution-devel package (RH bug #235056).
  - Add libxml-2.0 requirement to evolution-plugin-2.10.pc.


author: Matthew Barnes <mbarnes@redhat.com> - 2.10.0-8.fc7
changelog:
  - Revise patch for GNOME bug #419524 to fix RH bug #235082
    (crash in initial account setup wizard).


author: Matthew Barnes <mbarnes@redhat.com> - 2.10.0-5.fc7
changelog:
  - CVE-2007-1002 (Shared memo categories format string vulnerability)
  - Add -Wdeclaration-after-statement to strict build settings.


author: Matthew Barnes <mbarnes@redhat.com> - 2.10.0-3.fc7
changelog:
  - Add flag to disable deprecated Camel symbols.
  - Add patch for GNOME bug #419469 (refactor shell/main.c).
  - Add patch for GNOME bug #419524 (use GLib's i18n macros).
  - Add patch for GNOME bug #418971 (drop support for GLib < 2.8).


author: Matthew Barnes <mbarnes@redhat.com> - 2.9.92-1.fc7
changelog:
  - Update to 2.9.92.
  - Require gtkhtml3 >= 3.13.92.
  - Add missing libgnomeprintui22 requirements.
  - Remove patch for GNOME bug #350253 (fixed upstream).
  - Remove patch for GNOME bug #356177 (fixed upstream).
  - Remove patch for GNOME bug #360946 (fixed upstream).
  - Remove evolution-2.5.4-move-autosave-file.patch (fixed upstream).
  - Add minimum version to intltool requirement (currently >= 0.35.5).


author: Matthew Barnes <mbarnes@redhat.com> - 2.9.91-1.fc7
changelog:
  - Update to 2.9.91
  - Require gtkhtml3 >= 3.13.6.
  - Add files for new imap-features plugin.
  - Add flag to disable deprecated Pango symbols.
  - Remove patch for GNOME bug #357216 (fixed upstream).
  - Remove patch for GNOME bug #359979 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.9.5-4.fc7
changelog:
  - Compile with the -fno-strict-aliasing flag, which will hopefully improve
    reliability until the illegal type-punning is fixed (RH bug #224552).


author: Matthew Barnes <mbarnes@redhat.com> - 2.9.5-3.fc7
changelog:
  - Revise evolution-2.7.1-no-gnome-common.patch so that we no longer
    have to run autoconf before building.
  - Revise evolution-2.5.4-fix-conduit-dir.patch so that we no longer
    have to run automake before building.


author: Matthew Barnes <mbarnes@redhat.com> - 2.9.5-1.fc7
changelog:
  - Update to 2.9.5
  - Remove pilot-link-0.12 patch (fixed upstream).
  - Remove patch for RH bug #215466 and #218589 (fixed upstream).
  - Remove patch for RH bug #215695 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.9.4-1.fc7
changelog:
  - Update to 2.9.4
  - Bump eds_version to 1.9.4 due to soname changes.
  - Remove patch for GNOME bug #382431 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.9.3-1.fc7
changelog:
  - Update to 2.9.3
  - Configure with scrollkeeper disabled.
  - Disable automake portability checking.
  - Ship our own icons from gnome-icon-theme.
  - BuildRequires: gnome-doc-utils >= 0.8.0
  - Add patch for RH bug #215478 (Maildir and MH accounts).
  - Add patch for RH bug #215695 (crashes w/o mail accounts).
  - Add patch for RH bug #216537 (viewing attachments).
  - Add patch for RH bug #218801 (count unread messages first).
  - Add patch for GNOME bug #350253 (ship our own icons).
  - Add patch for GNOME bug #382431 (implicit function declaration).
  - Revise patch for GNOME bug #360946 (improved "about" dialog).
  - Remove patch for GNOME bug #357970 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.9.2-3.fc7
changelog:
  - Add patch to port evolution conduits to pilot-link 0.12.
  - Add patch for RH bug #215466 (optional meeting participants).
  - Add patch for GNOME bug #373837 (use GtkFontButton).
  - Remove patch for GNOME bug #343331 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.9.2-1.fc7
changelog:
  - Update to 2.9.2
  - Remove patch for Gnome.org bug #360240 (fixed upstream).
  - Remove patch for Gnome.org bug #360619 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.9.1-3.fc7
changelog:
  - Add patch for RH bug #176400 (reset calendar IM context).
  - Add patch for RH bug #182247 (calendar input glitch).


author: Matthew Barnes <mbarnes@redhat.com> - 2.9.1-2.fc7
changelog:
  - Add patch for Gnome.org bug #356177 (deprecate EMutex).
  - Add patch for Gnome.org bug #363695 (deprecate EStrv/EPoolv).
  - Disable patch for RH bug #202751 (unwanted side-effects).


author: Matthew Barnes <mbarnes@redhat.com> - 2.9.1-1.fc7
changelog:
  - Update to 2.9.1
  - Bump eds_version to 1.9.1, evo_major to 2.10.
  - Remove patch for Gnome.org bug #359236 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.8.1-1.fc7
changelog:
  - Update to 2.8.1
  - Use stricter build settings.
  - Make .desktop symlinks absolute (RH bug #209322).
  - Add patch for RH bug #202751 (printing of indic languages).
  - Add patch for Gnome.org bug #357970 (deprecated GLib / GDK symbols).
  - Add patch for Gnome.org bug #359236 (search state crash).
  - Add patch for Gnome.org bug #360240 ("unused variable" warnings).
  - Add patch for Gnome.org bug #360619 ("incompatible pointer type" warnings).
  - Add patch for Gnome.org bug #360946 (improved "about" dialog).
  - Add patch for Gnome.org bug #362638 (deprecate EThread).
  - Update patch for RH bug #211058 (partially fixed upstream).
  - Remove patch for RH bug #201307 (fixed upstream).
  - Remove patch for RH bug #205576 (fixed upstream).
  - Remove patch for Gnome.org bug #351332 (fixed upstream).
  - Remove patch for Gnome.org bug #352450 (fixed upstream).
  - Remove patch for Gnome.org bug #353472 (fixed upstream).
  - Remove patch for Gnome.org bug #356811 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.8.0-1.fc6
changelog:
  - Update to 2.8.0
  - Remove patch for RH bug #197868 (fixed upstream).
  - Remove patch for RH bug #201541 (fixed upstream).
  - Remove patch for RH bug #201831 (fixed upstream).
  - Remove patch for RH bug #202383 (fixed upstream).
  - Remove patch for RH bug #203036 (fixed upstream).
  - Remove patch for Gnome.org bug #352248 (fixed upstream).
  - Remove patch for Gnome.org bug #352423 (fixed upstream).
  - Update patch for Gnome.org bug #351332 (partially fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.7.92-3.fc6
changelog:
  - Replace my patch for RH bug #202383 with a better one from upstream.
  - Add patch for Gnome.org bug #352423.


author: Matthew Barnes <mbarnes@redhat.com> - 2.7.92-1.fc6
changelog:
  - Update to 2.7.92
  - Remove patch for RH bug #197834 (fixed upstream).
  - Update patch for Gnome.org bug #351332 (partially fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.7.91-1
changelog:
  - Update to 2.7.91
  - Update patch for RH bug #197834 for use with bug-buddy 2.15.90.
  - Require bug-buddy >= 2.15.90.


author: Matthew Barnes <mbarnes@redhat.com> - 2.7.4-5
changelog:
  - Remove patch for RH bug #167157, as it fixed it the wrong way.
  - The real fix for #167157 is in evolution-data-server-1.7.4-5.
  - No longer packaging unused patches.


author: Matthew Barnes <mbarnes@redhat.com> - 2.7.4-3
changelog:
  - Clean up spec file, renumber patches.
  - Add BuildRequires for dbus-glib-devel.
  - Rebuild to pick up new D-Bus.


author: Matthew Barnes <mbarnes@redhat.com> - 2.7.4-1
changelog:
  - Update to 2.7.4
  - Remove evo-calendar-print-with-pango-7.patch (fixed upstream).
  - Remove patch for Gnome.org bug #345677 (fixed upstream).
  - Remove patch for RH bug #175596 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> 2.7.2.1-3
changelog:
  - Port evolution-2.7.1-notification-cleanups.patch to new libnotify API.
  - Require libnotify >= 0.4.


author: Matthew Barnes <mbarnes@redhat.com> - 2.7.2.1-2
changelog:
  - Require specific versions of GNU Autotools packages for building.
  - Add evolution-2.7.2-preedit-gnome.bz-264485.patch (Mayank Jain).
  - Various spec file cleanups.
  - Pick up new libnotify.


author: Matthew Barnes <mbarnes@redhat.com> - 2.7.2.1-1
changelog:
  - Update to 2.7.2.1
  - Remove nss/nspr hunk from evolution-2.7.1-no-gnome-common.patch
    (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.7.1-1
changelog:
  - Update to 2.7.1
  - Bump evo_major from 2.6 to 2.8
  - Upstream evolution.desktop renamed evolution-%{evo_major}.desktop.
  - Upstream evolution.keys renamed evolution-%{evo_major}.keys.
  - Upstream evolution.mime renamed evolution-%{evo_major}.mime.
  - Update line numbers in evolution-2.5.2-no-gnome-common.patch and
    evolution-2.5.5.1-notification-cleanups.patch and rename them to
    version 2.7.1.


author: Caolan McNamara <caolanm@redhat.com> - 2.6.0-2
changelog:
  - rebuild against reverted pilot-link
  - disable evolution-2.5.4-fix-conduits.patch for reversion to pilot-link 0.11.8


author: David Malcolm <dmalcolm@redhat.com> - 2.5.91-1
changelog:
  - 2.5.91
  - updated patch 101 to track upstream changes to calendar printing code
  - remove uptreamed patch 807 (NM multiple initialization assertion)
  - readded the mail-to-task plugin XML UI file
  - bump e-d-s req to 1.5.91


author: David Malcolm <dmalcolm@redhat.com> - 2.5.90-1
changelog:
  - 2.5.90
  - trimmed patches 805 and 808, as parts of these got merged upstream
  - trimmed and regenerated patch 806 to track upstream
  - removed the mail-to-task plugin XML UI file


author: David Malcolm <dmalcolm@redhat.com> - 2.5.5.1-1
changelog:
  - 2.5.5.1
  - update patch 106 to track upstream, renaming from 
    evolution-2.2.2-commit-enter-on-calendar.patch to 
    evolution-2.5.5.1-commit-enter-on-calendar.patch
  - update patch 805 to track upstream
  - added patch to fix some newly missing declarations (patch 808)
  - replace evolution-2.5.4-port-to-new-libnotify-api.patch with 
    evolution-2.5.5.1-notification-cleanups.patch, since much of this was 
    duplicated by another patch that landed upstream; removing the actions code 
    as it was crashing deep inside DBus (patch 806, #177666)
  - explicitly list various files to reduce reliance on globbing; organized the
    files into logical groups; comment them
  - added -Wno-sign-compare to CFLAGS
  - enabled parallel make
  - introduced require_function_declarations macro to make 
    -Werror-implicit-function-declaration flag optional; turn it off for now
  - include the new CalDAV and mail-attachments-import plugins in the file list;
    add an XML UI file for the mail-to-task plugin. 
  - use "sed -i -e" rather than "sed -ie" to avoid getting severe bonobo files


author: David Malcolm <dmalcolm@redhat.com> - 2.5.4-4
changelog:
  - ported alarm notification code to the new libnotify API (patch 806, #177546)
  - added libnotify_support macro
  - added explicit notify-daemon requirement as a workaround for bug #177535


author: David Malcolm <dmalcolm@redhat.com> - 2.5.4-3
changelog:
  - updated patch 800 to include patch for memo conduit (untested at this stage);
    renaming from evolution-2.5.2-fix-conduits.patch to 
    evolution-2.5.4-fix-conduits.patch; extended patch 802 to handle the memo 
    conduit; renaming from evolution-2.2.2-fix-conduit-dir.patch to 
    evolution-2.5.4-fix-conduit-dir.patch; re-enable conduits in build (#175160)
  - switch the build-time dep for the audio-inline plugin from gstreamer-devel to
    gstreamer08-devel to better reflect the test in the tarball's configure.in


author: David Malcolm <dmalcolm@redhat.com> - 2.5.4-2
changelog:
  - added optional build-time requirement on NetworkManager-glib-devel
  - update patch 805 to cover a missing declaration in Network Manager support


author: David Malcolm <dmalcolm@redhat.com> - 2.5.4-1
changelog:
  - 2.5.4
  - update patch 107 to track underlying code changes; rename from
    evolution-2.2.2-move-autosave-file.patch to
    evolution-2.5.4-move-autosave-file.patch
  - added patch to fix more missing declarations (patch 805)
  - added files for publish-calendar plugin


author: David Malcolm <dmalcolm@redhat.com> - 2.5.3-1
changelog:
  - 2.5.3
  - Updated patch 106 (evolution-2.2.2-commit-enter-on-calendar.patch) so that it
    still applies cleanly


author: Christopher Aillon <caillon@redhat.com> 2.5.2-2
changelog:
  - Require nspr and nss instead of mozilla-nspr and mozilla-nss
  - Update no-gnome-common patch to work with standalone nss package


author: David Malcolm <dmalcolm@redhat.com> - 2.5.2-1
changelog:
  - 2.5.2
  - bump gtkhtml requirement from 3.7.6 to 3.9.2
  - bump eds requirement from 1.4.1.1 to 1.5.2
  - bump evo_major from 2.4 to 2.6
  - updated patch 107
  - updated patch 108
  - updated patch 800, replacing 
    rh-161817-attach-116019-conduit_pilot_link_updates.diff with 
    evolution-2.5.2-fix-conduits.patch.  Not yet complete.
  - disable pilot support for now (see #175160)
  - added hula plugin to list of packaged plugins
  - generalize gconf schema packaging to support changing evo_major


author: David Malcolm <dmalcolm@redhat.com> - 2.4.2-2
changelog:
  - force regeneration of the intltool files to prevent a problem where the 
    tarball copy of intltool-merge.in was out of sync with the intltool.m4 in the
    latest shipped copy of intltool, which resulted in a broken intltool-merge 
    script when the tree was reautotooled.  (appears that the tarball was built 
    with a CVS copy of intltool where @EXPANDED_LIBDIR@ had been renamed to
    @INTLTOOL_LIBDIR@, but our aclocal/intltool.m4 doesn't yet reflect that 
    change)


author: David Malcolm <dmalcolm@redhat.com> - 2.4.2-1
changelog:
  - 2.4.2
  - explicitly list the plugins that are packaged (#166234)
  - added build-time requirement on gstreamer-devel to cope with audio-inline
    plugin


author: David Malcolm <dmalcolm@redhat.com> - 2.4.1-7
changelog:
  - Added a patch (110) to hide the component switcher buttons by default on new
    windows (#170799) by patching the GConf schema.
  - Made list of installed schemas explicit.
  - Own the plugins subdirectory


author: David Malcolm <dmalcolm@redhat.com> - 2.4.1-6
changelog:
  - use 4 separate .desktop files from the redhat-menus package, rather than the
    current single one; bump the redhat-menus requirement accordingly (from 1.13
    to 5.0.4); introduce a macro for this requirement.


author: David Malcolm <dmalcolm@redhat.com> - 2.4.1-5
changelog:
  - fix removal of upstream .desktop file (broke on upgrade to Evolution 2.2, and
    continued to be broken with 2.3/2.4) (#103826, again)


author: David Malcolm <dmalcolm@redhat.com> - 2.4.1-3
changelog:
  - added patch (804: evolution-2.4.1-fix-missing-declarations.patch) to fix
    missing declaration (thanks to Peter Robinson)


author: David Malcolm <dmalcolm@redhat.com> - 2.4.1-1
changelog:
  - 2.4.1
  - regenerate patch 101 to handle conflict in 
    calendar/gui.print.c: print_week_day_event introduced by fix to upstream bug
    244981 (end date added while printing in the week view); bump patch name from
    version 5 to version 6
  - removed patch 804 (conduits-multi-day-crash); this is now in upstream tarball


author: David Malcolm <dmalcolm@redhat.com> - 2.4.0-1
changelog:
  - 2.4.0
  - Removed patch to fix implicit function declarations (patch 110, added in 
    2.3.8-1) as this is now upstream.


author: David Malcolm <dmalcolm@redhat.com> - 2.3.8-2
changelog:
  - Move -Werror-implicit-function-declaration from configuration to the make
    stage, to avoid breaking configuration tests.


author: David Malcolm <dmalcolm@redhat.com> - 2.3.8-1
changelog:
  - 2.3.8
  - add -Werror-implicit-function-declaration to CFLAGS and a patch to fix the 
    problems arising (patch 110)


author: David Malcolm <dmalcolm@redhat.com> - 2.3.7-3
changelog:
  - Introduce macro for gnome-pilot dependency, bumping from 2.0.6 to 2.0.13
  - Add obsoletion of libgal2/libgal2-devel (dependency was removed in 2.3.6-1);
    based on the last EVR of the libgal2 package in CVS, 2:2.5.3-2


author: David Malcolm <dmalcolm@redhat.com> - 2.3.7-1
changelog:
  - 2.3.7
  - Bump evolution-data-server requirement from 1.3.6 to 1.3.7
  - Bump gtkhtml3 requirement from 3.6.2 to 3.7.6


author: David Malcolm <dmalcolm@redhat.com> - 2.3.6.1-4
changelog:
  - Added patch to show correct mimetype for OpenOffice.org files when guessing 
    type for attachments with mimetype "application/octet-stream" (#164957)


author: David Malcolm <dmalcolm@redhat.com> 2.3.6.1-2
changelog:
  - Fixed version numbers in GConf schema files (#164622); added 
    apps-evolution-mail-prompts-checkdefault-2.4.schemas


author: David Malcolm <dmalcolm@redhat.com> - 2.3.6-1
changelog:
  - 2.3.6
  - Bump evolution-data-server requirement to 1.3.6 (needed for 
    CAL_STATIC_CAPABILITY_HAS_UNACCEPTED_MEETING)
  - Removed libgal2[-devel] dependencies; the code has been moved into the 
    evolution tarball


author: David Malcolm <dmalcolm@redhat.com> - 2.3.5.1-1
changelog:
  - 2.3.5.1
  - Update evo_major from 2.2 to 2.4
  - Updated evo-calendar-print-with-pango- patch from version 4 to 5
  - Removed Patch105: evolution-2.2.2-fix-new-mail-notify.patch as configure.in
    in this branch tests for existance for dbus-glib-1, rather than max-version.
  - Removed Patch801: gb-309138-attach-48417-fix-evo-conduit-memleaks.patch as
    this is now in upstream tarball.
  - Removed evolution-calendar-importers and evolution-addressbook-importers
    directories.
  - Updated evolution-2.2.2-no-gnome-common.patch to include a patch to rename
    mozilla-nspr to nspr


author: David Malcolm <dmalcolm@redhat.com> - 2.2.2-11.fc5
changelog:
  - Remove GNOME_COMPILE_WARNINGS from configure.in (since gnome-common might not be available when we rerun the autotools; patch 803)


author: David Malcolm <dmalcolm@redhat.com> - 2.2.2-10.fc5
changelog:
  - Moved .conduit files to libdir/gnome-pilot/conduits, rather than beneath datadir, to match gnome-pilot (patch 802)


author: David Malcolm <dmalcolm@redhat.com> - 2.2.2-9.fc5
changelog:
  - Replaced patch to port conduits to pilot-link-0.12 with Mark G Adams's version of same (#161817)
  - Added Mark G Adams's memory leak fix (patch 801)


author: David Malcolm <dmalcolm@redhat.com> - 2.2.2-4
changelog:
  - Removed explicit mozilla_build_version; instead use pkg-config to determine 
  the path to the NSS/NSPR headers.
  - Use a macro to express requirement on pilot-link (was 1:0.11.4, now 0.12; 
  patches depend on this)
  - Re-enabled the new-mail-notify plugin (my patch to handle differing DBus 
  versions is in the upstream tarball; but configure.in disables the plugin for 
  dbus versions > 0.23; patched configure.in to allow arbitrary DBus versions, 
  and run autoconf at the start of the build) (#156328)


author: David Malcolm <dmalcolm@redhat.com> - 2.2.2-1
changelog:
  - 2.2.2
  - updated evo-calendar-print-with-pango-4.patch to handle upstream change to print_comp_item
  - removed patch for XB73912; now in upstream tarball
  - removed patch to new-mail-notify; generalised fix to cope with various DBus API versions is now upstream
  - removed patch for XB73844; now in upstream tarball
  - Update requirements:
    - gtkhtml3 from 3.6.1 to 3.6.2
    - libgal2 from 2.4.1 to 2.4.2
    - eds from 1.2.1 to 1.2.2


author: David Malcolm <dmalcolm@redhat.com> - 2.2.1-1
changelog:
  - 2.2.1
  - Updated requirements:
    * gtkhtml3 from 3.6.0 to 3.6.1
    * libgal2 from 2.4.0 to 2.4.1
    * eds from 1.2.0 to 1.2.1
  - Added rum-time requirement on gnome-vfs2; updated version requirement from 2.0 to 2.4
  - The new-mail-notify plugin will not be built for now since the upstream configure test now checks for dbus-glib-1 version <= 0.23.4 (to minimise problems caused by the API change)


author: David Malcolm <dmalcolm@redhat.com> - 2.2.0-10
changelog:
  - disabled pilot-link support for now so that we have an evolution package; more patching is needed to get this to work with pilot-link-0.12


author: David Malcolm <dmalcolm@redhat.com> - 2.2.0-5
changelog:
  - Added patch for changes to DBus API in version 0.31 (#150671)
  - Removed explicit run-time spec-file requirement on mozilla.
    The Mozilla NSS API/ABI stabilised by version 1.7.3
    The libraries are always located in the libdir
    However, the headers are in /usr/include/mozilla-%{mozilla_build_version}
    and so they move each time the mozilla version changes.
    So we no longer have an explicit mozilla run-time requirement in the specfile; 
    a requirement on the appropriate NSS and NSPR .so files is automagically generated on build.
    We have an explicit, exact build-time version, so that we can find the headers (without
    invoking an RPM query from the spec file; to do so is considered bad practice)
  - Introduced mozilla_build_version, to replace mozilla_version


author: David Malcolm <dmalcolm@redhat.com> - 2.2.0-3
changelog:
  - added patch from upstream for bug XB-73192, fixing missing "Mark as Read/Unread" context menu items


author: David Malcolm <dmalcolm@redhat.com> - 2.2.0-1
changelog:
  - 2.2.0
  - Removed patch for GCC 4 fix as this is now in upstream tarball
  - Updated requirements:
    * gtkhtml3 from 3.5.7 to 3.6.0
    * libgal2 from 2.3.5 to 2.4.0
    * eds from 1.1.6 to 1.2.0


author: David Malcolm <dmalcolm@redhat.com> - 2.1.6-1
changelog:
  - Update from upstream unstable 2.1.6 to 2.1.6
  - Added patches to fix calendar and addressbook printing for non-Roman scripts (#138075)
  - Added explicit requirement on libgnomeprint22 >= 2.8.0
  - Added BuildRequires: gtk-doc
  - Updated requirements:
    * gtkhtml3 from 3.5.6 to 3.5.7
    * libgal2 from 2.3.4 to 2.3.5
    * eds from 1.1.5 to 1.1.6


author: David Malcolm <dmalcolm@redhat.com> - 2.1.5-1
changelog:
  - Update from upstream unstable 2.1.4 to 2.1.5
  - Updated requirements:
    * gtkhtml3 from 3.5.4 to 3.5.6
    * libgal2 from 2.3.3 to 2.3.4
    * eds from 1.1.4.1 to 1.1.5
  - Removed explicit packaging of weather icons as these are now below DATADIR/evolution/2.2 rather than DATADIR/evolution-2.2


author: David Malcolm <dmalcolm@redhat.com> - 2.1.4-1
changelog:
  - Update from upstream stable 2.0.3 to unstable 2.1.4
  - Updated evo_major from 2.0 to 2.2
  - Removed camel packaging as this has been moved to evolution-data-server for Evolution 2.2
  - Added plugins to the packaged files
  - Added weather icons to the packaged files
  - Updated requirements:
    * gtkhtml3 from 3.3.2 to 3.5.4
    * libgal2 from 2.2.4 to 2.3.3
    * eds from 1.0.3 to 1.1.4.1
    * libsoup from 2.2.0 to 2.2.2
  - Added built-time requirement on atk-devel
  - Enable all plugins for now
  - Added requirement on dbus (for the new-mail-notify plugin)
  - Enable gtk-doc
  - Updated GConf schema name suffixes from 2.0 to 2.2


author: David Malcolm <dmalcolm@redhat.com> - 2.0.3-1
changelog:
  - Update from upstream 2.0.2 to 2.0.3 with these bug fixes:
   * Addressbook
     XB67656 - almost the same email address are considrered identical (Siva)
     XB69079 - Data repeated after save with bad date format (Siva)
     XB66854 - Some strings are missed to translation (Rodney)

   * Calendar 	
     XB47529 - Date in reminder window appears in UTF-8 in non-UTF-8 locale (Rodney)
     XB68707 - Events ending at 12:00 AM show as ending at 12:00 pm (JP)
     XB67403 - wrong alarm time displayed (Rodrigo)
     XB68077 - appointment dialog re-size (Rodrigo)
     - leak fixes (Chen)
     - sensitize menu items in list view properly (JP)
     - redraw display when 24hr time setting changes (JP)

   * Mail
     XB69533 - Unable to subscribe to the alt hierarchy (Michael)
     XB69776 - Signed Mail with attachments displays everything with multipart/boundaries stuff (Michael)
     XB69615 - delete certificate after viewing smime message (Michael)
     XB69109 - EHLO or HELO with ip addresses does not conform rfc 821  (Michael)
     XB69982 - During Newsgroup list refresh, it crashes (Michael) 
     XB69446 - Mail shown as attachment if some headers are upper case (S. Caglar Onur) 
     XB68556 - NNTP with SSL won't work, even with stunnel (Michael) 
     XB69145 - toplevel message/rfc822 parts are broken for IMAP (Michael)
     XB69241 - base64 attachement holding PGP block (Jeff)
     XB67895 - nntp support not asking for password (Michael)
     XB67898 - Use of symbolic port-names is not guaranteed to work everywhere (Michael)
     XB69851 - remember password check doesn't stick (Michael)
     XB69623 - Moving a message from an IMAP INBOX to an IMAP folder caused crash (Radek)
     XB69339 - postscript and some other attachments not visable (Michael)
     XB69579 - vFoldersXBUNMATCHED generates errors (Michael)
     XB68958 - current message forgotten in vfolders (Michael)
     XB68974 - Wizard doesn't store smtp auth settings (Michael)
     XB67496 - html email not rendered in preview pane (Michael)
     XB67014 - Checking supported auth types doesn't work with new SSL certificate (Michael)
     XB68006 - Evo crashed after viewing previously-sent email and copying URL from it (Michael)
     XB68787 - Crash when migrating 1.4 data to 2.0.2 (Michael)
     XB67622 - SMTP auth usernames containing % character fail (Jeff)
     - fix pthread_key_delete args (Julio M. Merino Vidal)
  - Removed patch for "Unmatched" vfolder properties dialog (#141458) as this is now in upstream tarball (XB69579 above)
  - Update dependency on e-d-s from 1.0.2 to 1.0.3
  - Update dependency on libgal2 from 2.2.3 to 2.2.4


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-2
changelog:
  - Fix for #132050 (no entry for Evolution in the menus): use the new redhat-evolution.desktop file provided by redhat-menus-1.13


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-1
changelog:
  - Update from 2.0.1 to 2.0.2
  - Updated dependency on e-d-s from 1.0.1 to 1.0.2
  - Updated dependency on libgal2 from 2.2.2 to 2.2.3
  - Updated dependency on gtkhtml3 from 3.3.0 to 3.3.2
  - ppc's mozilla dependency is now in line with the other architectures at 1.7.3


author: David Malcolm <dmalcolm@redhat.com> - 2.0.1-3
changelog:
  - Fix for #135135, updating the fix for #103826 that removes the evolution.desktop file in "Office"; the file to delete had been renamed to evolution-2.0.desktop
  - Added requirement on redhat-menus, since this supplies the target of our .desktop symlink


author: David Malcolm <dmalcolm@redhat.com> - 2.0.1-2
changelog:
  - update mozilla dependency from 1.7.2 to 1.7.3, apart from on ppc (and on s390 and s390x, which remain at 1.6, and on ppc64 where it isn't available at all)


author: David Malcolm <dmalcolm@redhat.com> - 2.0.1-1
changelog:
  - Update from 2.0.0 to 2.0.1
  - Updated dependency on e-d-s from 1.0.0 to 1.0.1
  - Updated dependency on libgal2 from 2.2.0 to 2.2.2


author: David Malcolm <dmalcolm@redhat.com> - 2.0.0-1
changelog:
  - Update from 1.5.94.1 to 2.0.0
  - Change source FTP location from 1.5 to 2.0
  - Updated dependency on e-d-s from 0.0.99 to 1.0.0
  - Documentation has now moved from 1.5 to 2.0


author: David Malcolm <dmalcolm@redhat.com> - 1.5.94.1-1
changelog:
  - updated tarball from 1.5.93 to 1.5.94.1
  - the BASE_VERSION in the configure.in script has finally been updated from 1.5 to 2.0 (affects OAFIIDs, install dirs, binary names etc); updated evo_major and various other parts of the spec-file to reflect this; however documentation is still 1.5 in upstream tarball
  - updated dependency on libgal2 from 2:2.1.14 to 2:2.2.0
  - updated dependency on libsoup from 2.1.13 to 2.2.0
  - updated dependency on e-d-s from 0.0.98 to 0.0.99


author: David Malcolm <dmalcolm@redhat.com> - 1.5.93-2
changelog:
  - updated gnome-icon-theme requirement from 1.2.0 to 1.3.6 to fix problem with missing stock icons (bz #130142)


author: David Malcolm <dmalcolm@redhat.com> - 1.5.93-1
changelog:
  - updated tarball from 1.5.92.2 to 1.5.93
  - removed filechooser patch - this is now in the upstream tarball, with a test at configuration time; it was autodetected and enabled in my test build; I've explicitly enabled it to be certain.
  - updated dependency on libgal2 from 2:2.1.13 to 2:2.1.14
  - updated dependency on libsoup from 2.1.12 to 2.1.13
  - updated dependency on e-d-s from 0.0.97 to 0.0.98


author: David Malcolm <dmalcolm@redhat.com> - 1.5.92.1-1
changelog:
  - updated tarball from 1.5.91 to 1.5.92.1
  - added a dependency on gnome-icon-theme
  - updated dependency on libgal2 from 2:2.1.11 to 2:2.1.13
  - updated dependency on gtkhtml3 from 3.1.17 to 3.3.0
  - updated dependency on libsoup from 2.1.11 to 2.1.12
  - updated dependency on e-d-s from 0.0.95 to 0.0.97


author: Jeremy Katz <katzj@redhat.com> - 1.5.90-5
changelog:
  - use mozilla 1.7 on platforms where it's available
  - check to make sure the appropriate mozilla headers exist if using
    mozilla nss for ssl or fail the build


author: David Malcolm <dmalcolm@redhat.com> - 1.5.7-3
changelog:
  - Added GtkFileChooser patch based on work by Carlos Garnacho Parro (http://lists.ximian.com/archives/public/evolution-patches/2004-March/004867.html); added requirement for GTK 2.4


author: Jeremy Katz <katzj@redhat.com> 1.4.5-6
changelog:
  - Make imap command length shorter to avoid choking some imap servers 
    (notably cyrus-imap).
  - Make wombat session managed so that we don't hit weird bonobo activation
    things.  This adds a dependency on $DISPLAY for wombat.  (#106826)


author: Jeremy Katz <katzj@redhat.com> 1.4.5-5
changelog:
  - use AI_ADDRCONFIG to avoid returning IPv6 addresses on hosts without 
    IPv6 support
  - add patch from upstream with reply-to-list shortcut (Ctrl-l)


author: Jeremy Katz <katzj@redhat.com> 1.4.5-3
changelog:
  - Pull in some patches from upstream CVS
    * Avoid division by zero with POP (X#41610)
    * Don't mangle headers (X#33545)
    * Prefix IPV6 numeric hosts properly (X#46006, #105028)
    * Use proper function for IPV6 reverse lookups (X#46006)
    * Allow timezone offset to be up to 14 hours (X#49357)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - add patch from upstream CVS to fix SMTP syntax problems (#106630) 
  - really remove duplicate menu entry (#103826)


author: Jeremy Katz <katzj@redhat.com> 1.4.4-5
changelog:
  - patch from upstream to fix display of some mails in 
    different charsets (#102899)
  - add requires on newer version of ORBit2 (#103386)
  - add patch from upstream (extracted by George Karabin) to use gnome-vfs 
    mime icon lookup where available (#102553)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - update to 1.3
  - don't build with pilot support for now
  - don't redhat-ify the summary prefs for now


author: Jeremy Katz <katzj@redhat.com> 1.2.2-5
changelog:
  - security patches from upstream
    - sanity check UUEncoding header before decoding (CAN-2003-0128)
    - don't decode doubly UUEncoded content (CAN-2003-0129)
    - don't use a bonobo component to display things without registered 
      handlers (CAN-2003-0130)


author: Jeremy Katz <katzj@redhat.com> 1.2.2-3
changelog:
  - memleak patch had some bits that weren't supposed to be there.  update 
    to newer from upstream.
  - fix directory checking in proxy patch


author: Jeremy Katz <katzj@redhat.com> 1.2.2-2
changelog:
  - add missing build dep (#84388)
  - add patch from upstream for evolution-mail memleak
  - add patch from upstream to use the gnome2 proxy settings by default


author: Jeremy Katz <katzj@redhat.com> 1.2.0-6
changelog:
  - require a newer soup, the old one Has Bugs (tm)
  - excludearch x86_64; getting a R_X86_64_32S relocation in libical 
    although everything appears to be built with -fPIC correctly


author: Jeremy Katz <katzj@redhat.com> 1.2.0-4
changelog:
  - add upstream patch to handle LDAPv3 better
  - add upstream patch to fix shell memory leaks
  - add upstream patch to fix ldap scope selection
  - build with openssl instead of mozilla-nss since it's available on 
    more platforms
  - build on all arches


author: Jeremy Katz <katzj@redhat.com> 1.2.0-2
changelog:
  - macro-ify the mozilla version to make it easier to build against 
    newer mozillas with headers in new locations
  - buildrequire pilot-link-devel (#78077)
  - drop uneeded ldapv3 patch (toshok says 1.2 already handles this)
  - drop unneeded patch for ordering of the libdb checks
  - add fejj's patch to always subscribe to the inbox from evolution-patches


author: Jeremy Katz <katzj@redhat.com> 1.0.8-3
changelog:
  - remove static and libtool archives for importers and camel-providers (#68222)
  - do desktop-file-install magic 
  - remove dead sites from summary list (#64522)
  - support openldap protocol version 3 based off of Nalin's autofs changes


author: Jeremy Katz <katzj@redhat.com> 1.0.3-6
changelog:
  - add patch to fix spool unread counts (#64198)
  - build with the fix for the crasher mail sent to 
    evolution-list (ximian #24140)


author: Jeremy Katz <katzj@redhat.com> 1.0.3-4
changelog:
  - include fejj(at)ximian.com's patch to fix the EINPROGRESS error with ssl 
    since it's been committed to the branch and fixes the problem for me
  - include patch from tagoh(at)redhat.com to change the default charset 
    for Japanese to ISO-2022-JP (#63214)


author: Jeremy Katz <katzj@redhat.com> 1.0.3-3
changelog:
  - minor tweaks to the redhatify patch
  - make accepting appointments sent to mailing lists work
  - use the RFC specified LDAP attribs for freebusy and calendarURI 
    in addressbook
  - fix a crash in the startup wizard


author: Jeremy Katz <katzj@redhat.com> 1.0.2-3
changelog:
  - mozilla 0.9.9 has nspr and nss subpackages, hooray!  rip out the static 
    libnss linkage and just link against what is provided dynamically
  - kill the -devel subpackage since it's of questionable use
  - explicitly require mozilla-nss and mozilla-nspr packages to make it easier
    to resolve the requirements


author: Jeremy Katz <katzj@redhat.com> 1.0.1-1
changelog:
  - update to 1.0.1
  - patch for autoconf 2.52 accepted upstream
  - include man page
  - use --with-sub-version=" (%{version}-%{release})"


author: Jeremy Katz <katzj@redhat.com> 1.0-2
changelog:
  - really disable news
  - add patch from Jens Petersen <juhp@redhat.com> to hopefully get 
    builds working with autoconf 2.52
  - conditionalize static libnss stuff so that it can go away when we
    have a mozilla with shared libnss


author: Jeremy Katz <katzj@redhat.com> 1.0-1.7.2
changelog:
  - add patches off of branch for:
    * do not show up as Preview Release in version string
    * have next/previous work with multiple selected messages
  - build without pilot support


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - let's build with an included copy of libnss now since OpenSSL is support
    is disabled on the 1.0 branch
  - build with --enable-dot-locking=no
  - excludearch ia64 again now that we need libnspr


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - build with gnome-pilot and krb5 support
  - conditionalize ldap, pilot and krb5 support
  - clean up buildrequires some


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - we can build on ia64 since we're using openssl instead of nspr
  - disable non-functional nntp support 
  - 0.99.2 (rc2)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - add explicit requires on current bonobo, oaf, and GConf to help people
    help themselves
  - s/Copyright/License/


author: pingou <pingou@pingoured.fr> 1.6.8-2
changelog:
  - Remove Require post and postun
  - Change the URL and source0 to a more stable form
  - Fix BR to tex(latex)


author: pingou <pingou@pingoured.fr> 1.2.0-2
changelog:
  - Update the file section to package doc
  - Update the Requires and BR to take into account R version


author: pingou <pingou@pingoured.fr> 1.1.55-1
changelog:
  - New release from bioconductor 2.4 which includes the change in
   the description file for the license used
  - Update the license to its correct format


author: pingou <pingou -AT- pingoured.fr> 1.0.14-3
changelog:
  - The main package owns the directory
  - Remove pkgconfig as R for the devel package
  - Define becomes global


author: Jens Petersen <petersen@redhat.com> - 3.2-1
changelog:
  - update to 3.2
  - update R600 patches to Tom Stellard's git tree
  - llvm-fix-ghc.patch is upstream
  - llvm-3.1-docs-pod-markup-fixes.patch no longer needed
  - add llvm-3.2-clang-driver-secondary-arch-triplets.patch (#803433)
  - build with gcc/g++ even if clang is installed
  - llvm-config.1 manpage is no longer


author: Jens Petersen <petersen@redhat.com> - 3.1-16
changelog:
  - bring back configuration for gcc arch include dir (Yury Zaytsev, #893817)
    which was dropped in 3.0-0.1.rc3
  - BR gcc and gcc-c++ with gcc_version


author: Michel Alexandre Salim <michel@hermione.localdomain> - 3.0-11
changelog:
  - Replace overly-broad dependency on gcc-c++ with gcc and libstdc++-devel
  - Pin clang's dependency on libstdc++-devel to the version used for building
  - Standardize on bcond for conditional build options
  - Remove /lib from search path, everything is now in /usr/lib*


author: Karsten Hopp <karsten@redhat.com> 3.0-9
changelog:
  - undefine PPC on ppc as a temporary workaround for 
    http://llvm.org/bugs/show_bug.cgi?id=10969 and 
    RHBZ#769803


author: Michel Salim <salimma@fedoraproject.org> - 3.0-6
changelog:
  - Make subpackage dependencies arch-specific
  - Make LLVM test failures non-fatal on ARM architectures as well (# 770208)
  - Save LLVM test log on platforms where it fails


author: Michel Salim <salimma@fedoraproject.org> - 3.0-5
changelog:
  - Clang test suite yields unexpected failures with GCC 4.7.0. Make
    this non-fatal and save the results
  - Multilib fix for harcoded ld search path in ./configure script


author: Michel Salim <salimma@fedoraproject.org> - 2.9-3
changelog:
  - Disable LLVM test suite on ppc64 architecture  (# 728604)
  - Disable clang test suite on ppc* architectures (-)


author: Michel Salim <salimma@fedoraproject.org> - 2.9-1
changelog:
  - Update to 2.9
  - Depend on libffi to allow the LLVM interpreter to call external functions
  - Build with RTTI enabled, needed by e.g. Rubinius (# 722714)
  - Fix multilib installation (# 699416)
  - Fix incorrect platform-specific include path on i686


author: Michel Salim <salimma@fedoraproject.org> - 2.9-0.2.rc1
changelog:
  - Split shared libraries into separate subpackage
  - Don't include test logs; breaks multilib (# 666195)
  - clang++: also search for platform-specific include files (# 680644)


author: Michel Salim <salimma@fedoraproject.org> - 2.7-9
changelog:
  - Dynamically determine C++ include path at compile time (# 630474)
  - Remove unneeded BuildRoot field and clean section


author: Michel Salim <salimma@fedoraproject.org> - 2.7-2
changelog:
  - Exclude llm-gcc manpages
  - Turn on apidoc generation
  - Build with srcdir=objdir, otherwise clang doxygen build fails


author: Michel Salim <salimma@fedoraproject.org> - 2.6-0.4.pre1
changelog:
  - Don't adjust clang include dir; files there are noarch (bz#521893)
  - Enable clang unit tests
  - clang and clang-analyzer renamed; no longer depend on llvm at runtime


author: Michel Salim <salimma@fedoraproject.org> - 2.5-6
changelog:
  - Disable assertions (needed by OpenGTL, bz#521261)
  - Align spec file with upstream build instructions
  - Enable unit tests


author: Remi Collet <remi@fedoraproject.org> - 3.6.6-1
changelog:
  - update to 3.6.6
  - move _samples in doc
  - don't package _source
  - move php library to /usr/share/php
  - fix httpd configuration (grant access) #894567


author: Nicolas Chauvet <kwizart@gmail.com> - 0.9.3-5
changelog:
  - Fix registration error rhbz#882743
  - Fix missing symbol rhbz#885402 - patch from qais.yousef@imgtec.com
  - Fix paralle build - patch from qais.yousef@imgtec.com
  - Fix segfault - patch from qais.yousef@imgtec.com


author: Nicolas Chauvet <kwizart@gmail.com> - 0.9.3-2
changelog:
  - Fix build with -Werror - patch from Niels de Vos
  - Convert nodoc fix to a patch
  - Add BR doxygen
  - Enable make check and create a -test subpackage


author: Marc-Andre Lureau
changelog:
  - copy&pasted some good practices from some other .spec.in
  - changed components directory
  - remove unnecessary plugins .la and .a files
  - untested


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.0-0.rc14.3
changelog:
  - Confirmed with upstream that *.so files are no longer required.
  - Re-enable move of python libs to python library dir.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.0-0.rc12.3
changelog:
  - New upstream version 1.0.0-rc12.
  - Rebuild for OCaml 4.00.0.
  - Remove buildroot, defattr, clean for modern RPM.
  - Includes bundled extlib.  Disable this by adding BR ocaml-extlib-devel.
  - Remove bytecode binary (spatch.byte).
  - Fix check rule so it sets COCCINELLE_HOME.
  - NB: TEST DISABLED.  UNLIKELY THAT SPATCH FUNCTIONS CORRECTLY.
    + Disable _libdir/*.so stripping.  Why is it not installed?
    + Disable Python stuff.  Why is it not installed?


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.0-0.rc8.3
changelog:
  - Update to 1.0.0-rc8.
  - Rebuild for OCaml 3.12.1.
  - Use Fedora ocaml-sexplib, ocaml-pcre instead of forked embedded one.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.0-0.rc4.2
changelog:
  - Update to 1.0.0-rc4.
  - Requires ocaml-findlib (RHBZ#725415).
  - Non-upstream patch to remove use of a couple of functions from the
    forked ocaml sexpr project, so we can use the Fedora one instead.
    See: http://lists.diku.dk/pipermail/cocci/2011-January/001439.html
  - Include a new manpage in section 3.


author: Richard W.M. Jones <rjones@redhat.com> - 0.2.5-0.rc1.1
changelog:
  - New upstream version 0.2.5-rc1.
  - Remove upstream patch for Python 2.7.
  - Rebuild for OCaml 3.12.0.


author: Richard W.M. Jones <rjones@redhat.com> - 0.1.10-1
changelog:
  - New upstream version 0.1.10.
  - Removed patch, since fix to CVE-2009-1753 (RHBZ#502174) is now upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 0.1.8-4
changelog:
  - New upstream version 0.1.8.
  - Include patch from Debian to fix CVE-2009-1753 (RHBZ#502174).
  - Segfaults on PPC64, so added to ExcludeArch.


author: S390x secondary arch maintainer <fedora-s390x@lists.fedoraproject.org>
changelog:
  - ExcludeArch sparc64, s390, s390x as we don't have OCaml on those archs
    (added sparc64 per request from the sparc maintainer)


author: Richard W.M. Jones <rjones@redhat.com> - 0.1.4-8
changelog:
  - Remove useless Makefiles from python/coccilib.
  - License is GPLv2 (not GPLv2+).
  - Include documentation and demos in subpackages.
  - Move python library to a more sensible path.
  - Add a check section.


author: Richard W.M. Jones <rjones@redhat.com> - 0.1.4-6
changelog:
  - Install the shared library in _libdir.
  - Install the native code version if we have the optimizing compiler.


author: Caolán McNamara <caolanm@redhat.com> 1.14.8-2
changelog:
  - Resolves: rhbz#458353 gsf-office-thumbnailer doesn't work without ImageMagick's convert.
    Move that into the gnome subpackage


author: Warren Togami <wtogami@redhat.com> 1.8.2-3
changelog:
  - BR libtool libxml2-devel gnome-vfs2-devel bzip2-devel
  - -devel req glib2-devel libxml2-devel gnome-vfs2-devel


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.7.95-2
changelog:
  - Obsolete Serbian (not part of 4.7.95)
  - upstream patch to fix sv build (regenerate kwrite docbooks)
  - upstream patch to fix es install (install only the files that exist)


author: Jaroslav Reznik <jreznik@redhat.com> 4.6.0-1
changelog:
  - 4.6.0
  - obsolete Esperanto, Frisian and Malayalam (not a part of 4.6.0)
  - Maithili is available again


author: Than Ngo <than@redhat.com> - 4.4.0-1
changelog:
  - 4.4.0
  - Obsoletes: kde-l10n-Bengali-India (not part of 4.4.0)
  - Obsoletes: kde-l10n-Chhattisgarhi (not part of 4.4.0)
  - Obsoletes: kde-l10n-Marathi (not part of 4.4.0)
  - Obsoletes: kde-l10n-Thai (not part of 4.4.0)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.90-2
changelog:
  - skip translations of kcm_proxy docs, several don't build (at least ca, da, es)
  - skip Danish translation of gwenview docs which doesn't build (rev 1065269)
  - skip Estonian translation of kturtle docs which doesn't build (rev 1065298)
  - make the skipping magic also work for sr@latin


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.3-2
changelog:
  - build documentation (#441537)
  - mark Norvegian Bokmal translations with %lang(nb) rather than %lang(no)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.1-2
changelog:
  - fix Danish not to include the data files for all languages
  - include ktuberling sounds in the respective languages
  - include kvtml (kanagram) translations in Czech


author: Tim Powers <timp@redhat.com>3.0.0-5
changelog:
  - remove the following kde-i18n packages: Azerbaijani, Maltese,
    Esperanto, Tamil, Latvian, Xhosa, Lithuanian, Thai, and Bulgarian


author: Than Ngo <than@redhat.com> 3.0.0-0.cvs20020306.1
changelog:
  - update
  - enable Catalan i18n
  - use zh_TW and zh_CN instead zh_TW.Big5 and zh_CN.GB2312 (bug #60759)
  - get rid of Buildrequires arts-devel


author: Jeffrey Ollie <jeff@ocjtech.us> - 11.2.2-1:
changelog:
  - The Asterisk Development Team has announced security releases for Certified
  - Asterisk 1.8.15 and Asterisk 1.8, 10, and 11. The available security releases
  - are released as versions 1.8.15-cert2, 1.8.20.2, 10.12.2, 10.12.2-digiumphones,
  - and 11.2.2.
  -
  - These releases are available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - The release of these versions resolve the following issues:
  -
  - * A possible buffer overflow during H.264 format negotiation. The format
  -   attribute resource for H.264 video performs an unsafe read against a media
  -   attribute when parsing the SDP.
  -
  -   This vulnerability only affected Asterisk 11.
  -
  - * A denial of service exists in Asterisk's HTTP server. AST-2012-014, fixed
  -   in January of this year, contained a fix for Asterisk's HTTP server for a
  -   remotely-triggered crash. While the fix prevented the crash from being
  -   triggered, a denial of service vector still exists with that solution if an
  -   attacker sends one or more HTTP POST requests with very large Content-Length
  -   values.
  -
  -   This vulnerability affects Certified Asterisk 1.8.15, Asterisk 1.8, 10, and 11
  -
  - * A potential username disclosure exists in the SIP channel driver. When
  -   authenticating a SIP request with alwaysauthreject enabled, allowguest
  -   disabled, and autocreatepeer disabled, Asterisk discloses whether a user
  -   exists for INVITE, SUBSCRIBE, and REGISTER transactions in multiple ways.
  -
  -   This vulnerability affects Certified Asterisk 1.8.15, Asterisk 1.8, 10, and 11
  -
  - These issues and their resolutions are described in the security advisories.
  -
  - For more information about the details of these vulnerabilities, please read
  - security advisories AST-2013-001, AST-2013-002, and AST-2013-003, which were
  - released at the same time as this announcement.
  -
  - For a full list of changes in the current releases, please see the ChangeLogs:
  -
  - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.15-cert2
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.20.2
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.12.2
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.12.2-digiumphones
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.2.2
  -
  - The security advisories are available at:
  -
  -  * http://downloads.asterisk.org/pub/security/AST-2013-001.pdf
  -  * http://downloads.asterisk.org/pub/security/AST-2013-002.pdf
  -  * http://downloads.asterisk.org/pub/security/AST-2013-003.pdf


author: Jeffrey Ollie <jeff@ocjtech.us> - 11.2.1-1:
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 11.2.1.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 11.2.1 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following are the issues resolved in this release:
  -
  - * --- Fix astcanary startup problem due to wrong pid value from before
  -       daemon call
  -   (Closes issue ASTERISK-20947. Reported by Jakob Hirsch)
  -
  - * --- Update init.d scripts to handle stderr; readd splash screen for
  -       remote consoles
  -   (Closes issue ASTERISK-20945. Reported by Warren Selby)
  -
  - * --- Reset RTP timestamp; sequence number on SSRC change
  -   (Closes issue ASTERISK-20906. Reported by Eelco Brolman)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.2.1


author: Jeffrey Ollie <jeff@ocjtech.us> - 11.2.0-1:
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 11.2.0.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 11.2.0 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release:
  -
  - * --- app_meetme: Fix channels lingering when hung up under certain
  -       conditions
  -   (Closes issue ASTERISK-20486. Reported by Michael Cargile)
  -
  - * --- Fix stuck DTMF when bridge is broken.
  -   (Closes issue ASTERISK-20492. Reported by Jeremiah Gowdy)
  -
  - * --- Add missing support for "who hung up" to chan_motif.
  -   (Closes issue ASTERISK-20671. Reported by Matt Jordan)
  -
  - * --- Remove a fixed size limitation for producing SDP and change how
  -       ICE support is disabled by default.
  -   (Closes issue ASTERISK-20643. Reported by coopvr)
  -
  - * --- Fix chan_sip websocket payload handling
  -   (Closes issue ASTERISK-20745. Reported by Iñaki Baz Castillo)
  -
  - * --- Fix pjproject compilation in certain circumstances
  -   (Closes issue ASTERISK-20681. Reported by Dinesh Ramjuttun)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.2.0


author: Jeffrey Ollie <jeff@ocjtech.us> - 11.1.2-1:
changelog:
  - The Asterisk Development Team has announced a security release for Asterisk 11,
  - Asterisk 11.1.2. This release addresses the security vulnerabilities reported in
  - AST-2012-014 and AST-2012-015, and replaces the previous version of Asterisk 11
  - released for these security vulnerabilities. The prior release left open a
  - vulnerability in res_xmpp that exists only in Asterisk 11; as such, other
  - versions of Asterisk were resolved correctly by the previous releases.
  -
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - The release of these versions resolve the following two issues:
  -
  - * Stack overflows that occur in some portions of Asterisk that manage a TCP
  -   connection. In SIP, this is exploitable via a remote unauthenticated session;
  -   in XMPP and HTTP connections, this is exploitable via remote authenticated
  -   sessions. The vulnerabilities in SIP and HTTP were corrected in a prior
  -   release of Asterisk; the vulnerability in XMPP is resolved in this release.
  -
  - * A denial of service vulnerability through exploitation of the device state
  -   cache. Anonymous calls had the capability to create devices in Asterisk that
  -   would never be disposed of. Handling the cachability of device states
  -   aggregated via XMPP is handled in this release.
  -
  - These issues and their resolutions are described in the security advisories.
  -
  - For more information about the details of these vulnerabilities, please read
  - security advisories AST-2012-014 and AST-2012-015.
  -
  - For a full list of changes in the current release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.1.2
  -
  - The security advisories are available at:
  -
  -  * http://downloads.asterisk.org/pub/security/AST-2012-014.pdf
  -  * http://downloads.asterisk.org/pub/security/AST-2012-015.pdf
  -
  - Thank you for your continued support of Asterisk - and we apologize for having
  - to do this twice!


author: Jeffrey Ollie <jeff@ocjtech.us> - 11.1.1-1:
changelog:
  - The Asterisk Development Team has announced security releases for Certified
  - Asterisk 1.8.11 and Asterisk 1.8, 10, and 11. The available security releases
  - are released as versions 1.8.11-cert10, 1.8.19.1, 10.11.1, 10.11.1-digiumphones,
  - and 11.1.1.
  -
  - These releases are available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - The release of these versions resolve the following two issues:
  -
  - * Stack overflows that occur in some portions of Asterisk that manage a TCP
  -   connection. In SIP, this is exploitable via a remote unauthenticated session;
  -   in XMPP and HTTP connections, this is exploitable via remote authenticated
  -   sessions.
  -
  - * A denial of service vulnerability through exploitation of the device state
  -   cache. Anonymous calls had the capability to create devices in Asterisk that
  -   would never be disposed of.
  -
  - These issues and their resolutions are described in the security advisories.
  -
  - For more information about the details of these vulnerabilities, please read
  - security advisories AST-2012-014 and AST-2012-015, which were released at the
  - same time as this announcement.
  -
  - For a full list of changes in the current releases, please see the ChangeLogs:
  -
  - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.11-cert10
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.19.1
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.11.1
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.11.1-digiumphones
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.1.1
  -
  - The security advisories are available at:
  -
  -  * http://downloads.asterisk.org/pub/security/AST-2012-014.pdf
  -  * http://downloads.asterisk.org/pub/security/AST-2012-015.pdf


author: Jeffrey Ollie <jeff@ocjtech.us> - 11.1.0-1:
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 11.1.0.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 11.1.0 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release:
  -
  - * --- Fix execution of 'i' extension due to uninitialized variable.
  -   (Closes issue ASTERISK-20455. Reported by Richard Miller)
  -
  - * --- Prevent resetting of NATted realtime peer address on reload.
  -   (Closes issue ASTERISK-18203. Reported by daren ferreira)
  -
  - * --- Fix ConfBridge crash if no timing module loaded.
  -   (Closes issue ASTERISK-19448. Reported by feyfre)
  -
  - * --- Fix the Park 'r' option when a channel parks itself.
  -   (Closes issue ASTERISK-19382. Reported by James Stocks)
  -
  - * --- Fix an issue where outgoing calls would fail to establish audio
  -       due to ICE negotiation failures.
  -   (Closes issue ASTERISK-20554. Reported by mmichelson)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.1.0


author: Jeffrey Ollie <jeff@ocjtech.us> - 11.0.2-1:
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 11.0.2.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 11.0.2 resolves an issue reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is the issue resolved in this release:
  -
  - * --- chan_local: Fix local_pvt ref leak in local_devicestate().
  -   (Closes issue ASTERISK-20769. Reported by rmudgett)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.0.2


author: Jeffrey Ollie <jeff@ocjtech.us> - 11.0.1-1
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 11.0.1.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 11.0.1 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following are the issues resolved in this release:
  -
  - * --- chan_sip: Fix a bug causing SIP reloads to remove all entries
  -       from the registry
  -   (Closes issue ASTERISK-20611. Reported by Alisher)
  -
  - * --- confbridge: Fix a bug which made conferences not record with
  -       AMI/CLI commands
  -   (Closes issue ASTERISK-20601. Reported by Vilius)
  -
  - * --- Fix an issue with res_http_websocket where the chan_sip
  -       WebSocket handler could not be registered.
  -   (Closes issue ASTERISK-20631. Reported by danjenkins)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.0.1


author: Jeffrey Ollie <jeff@ocjtech.us> - 11.0.0-1:
changelog:
  - The Asterisk Development Team is pleased to announce the release of
  - Asterisk 11.0.0.  This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - Asterisk 11 is the next major release series of Asterisk.  It is a Long Term
  - Support (LTS) release, similar to Asterisk 1.8.  For more information about
  - support time lines for Asterisk releases, see the Asterisk versions page:
  - https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions
  -
  - For important information regarding upgrading to Asterisk 11, please see the
  - Asterisk wiki:
  -
  - https://wiki.asterisk.org/wiki/display/AST/Upgrading+to+Asterisk+11
  -
  - A short list of new features includes:
  -
  - * A new channel driver named chan_motif has been added which provides support
  -   for Google Talk and Jingle in a single channel driver.  This new channel
  -   driver includes support for both audio and video, RFC2833 DTMF, all codecs
  -   supported by Asterisk, hold, unhold, and ringing notification. It is also
  -   compliant with the current Jingle specification, current Google Jingle
  -   specification, and the original Google Talk protocol.
  -
  - * Support for the WebSocket transport for chan_sip.
  -
  - * SIP peers can now be configured to support negotiation of ICE candidates.
  -
  - * The app_page application now no longer depends on DAHDI or app_meetme. It
  -   has been re-architected to use app_confbridge internally.
  -
  - * Hangup handlers can be attached to channels using the CHANNEL() function.
  -   Hangup handlers will run when the channel is hung up similar to the h
  -   extension; however, unlike an h extension, a hangup handler is associated with
  -   the actual channel and will execute anytime that channel is hung up,
  -   regardless of where it is in the dialplan.
  -
  - * Added pre-dial handlers for the Dial and Follow-Me applications.  Pre-dial
  -   allows you to execute a dialplan subroutine on a channel before a call is
  -   placed but after the application performing a dial action is invoked. This
  -   means that the handlers are executed after the creation of the callee
  -   channels, but before any actions have been taken to actually dial the callee
  -   channels.
  -
  - * Log messages can now be easily associated with a certain call by looking at
  -   a new unique identifier, "Call Id".  Call ids are attached to log messages for
  -   just about any case where it can be determined that the message is related
  -   to a particular call.
  -
  - * Introduced Named ACLs as a new way to define Access Control Lists (ACLs) in
  -   Asterisk. Unlike traditional ACLs defined in specific module configuration
  -   files, Named ACLs can be shared across multiple modules.
  -
  - * The Hangup Cause family of functions and dialplan applications allow for
  -   inspection of the hangup cause codes for each channel involved in a call.
  -   This allows a dialplan writer to determine, for each channel, who hung up and
  -   for what reason(s).
  -
  - * Two new functions have been added: FEATURE() and FEATUREMAP(). FEATURE()
  -   lets you set some of the configuration options from the general section
  -   of features.conf on a per-channel basis. FEATUREMAP() lets you customize
  -   the key sequence used to activate built-in features, such as blindxfer,
  -   and automon.
  -
  - * Support for DTLS-SRTP in chan_sip.
  -
  - * Support for named pickupgroups/callgroups, allowing any number of pickupgroups
  -   and callgroups to be defined for several channel drivers.
  -
  - * IPv6 Support for AMI, AGI, ExternalIVR, and the SIP Security Event Framework.
  -
  - More information about the new features can be found on the Asterisk wiki:
  -
  - https://wiki.asterisk.org/wiki/display/AST/Asterisk+11+Documentation
  -
  - A full list of all new features can also be found in the CHANGES file.
  -
  - http://svnview.digium.com/svn/asterisk/branches/11/CHANGES
  -
  - For a full list of changes in the current release, please see the ChangeLog.
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.0.0


author: Jeffrey Ollie <jeff@ocjtech.us> - 11.0.0-0.7.rc2:
changelog:
  - The Asterisk Development Team has announced the second release candidate of
  - Asterisk 11.0.0. This release candidate is available for immediate
  - download at http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 11.0.0-rc2 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following are the issues resolved in this release candidate:
  -
  - * --- Fix an issue where outgoing calls would fail to establish audio
  -       due to ICE negotiation failures.
  -   (Closes issue ASTERISK-20554. Reported by mmichelson)
  -
  - * --- Ensure Asterisk fails TCP/TLS SIP calls when certificate
  -       checking fails
  -   (Closes issue ASTERISK-20559. Reported by kmoore)
  -
  - * --- Don't make chan_sip export global symbols.
  -   (Closes issue ASTERISK-20545. Reported by kmoore)
  -
  - For a full list of changes in this release candidate, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-11.0.0-rc2


author: Jeffrey Ollie <jeff@ocjtech.us> - 11.0.0-0.6.rc1
changelog:
  - The Asterisk Development Team is pleased to announce the first release candidate
  - of Asterisk 11.0.0.  This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - All interested users of Asterisk are encouraged to participate in the
  - Asterisk 11 testing process.  Please report any issues found to the issue
  - tracker, https://issues.asterisk.org/jira.  It is also very useful to see
  - successful test reports.  Please post those to the asterisk-dev mailing list.
  - All Asterisk users are invited to participate in the #asterisk-testing channel
  - on IRC to work together in testing the many parts of Asterisk.
  -
  - Asterisk 11 is the next major release series of Asterisk.  It will be a Long
  - Term Support (LTS) release, similar to Asterisk 1.8.  For more information about
  - support time lines for Asterisk releases, see the Asterisk versions page:
  - https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions
  -
  - For important information regarding upgrading to Asterisk 11, please see the
  - Asterisk wiki:
  -
  - https://wiki.asterisk.org/wiki/display/AST/Upgrading+to+Asterisk+11
  -
  - A short list of new features includes:
  -
  - * A new channel driver named chan_motif has been added which provides support
  -   for Google Talk and Jingle in a single channel driver.  This new channel
  -   driver includes support for both audio and video, RFC2833 DTMF, all codecs
  -   supported by Asterisk, hold, unhold, and ringing notification. It is also
  -   compliant with the current Jingle specification, current Google Jingle
  -   specification, and the original Google Talk protocol.
  -
  - * Support for the WebSocket transport for chan_sip.
  -
  - * SIP peers can now be configured to support negotiation of ICE candidates.
  -
  - * The app_page application now no longer depends on DAHDI or app_meetme. It
  -   has been re-architected to use app_confbridge internally.
  -
  - * Hangup handlers can be attached to channels using the CHANNEL() function.
  -   Hangup handlers will run when the channel is hung up similar to the h
  -   extension; however, unlike an h extension, a hangup handler is associated with
  -   the actual channel and will execute anytime that channel is hung up,
  -   regardless of where it is in the dialplan.
  -
  - * Added pre-dial handlers for the Dial and Follow-Me applications.  Pre-dial
  -   allows you to execute a dialplan subroutine on a channel before a call is
  -   placed but after the application performing a dial action is invoked. This
  -   means that the handlers are executed after the creation of the callee
  -   channels, but before any actions have been taken to actually dial the callee
  -   channels.
  -
  - * Log messages can now be easily associated with a certain call by looking at
  -   a new unique identifier, "Call Id".  Call ids are attached to log messages for
  -   just about any case where it can be determined that the message is related
  -   to a particular call.
  -
  - * Introduced Named ACLs as a new way to define Access Control Lists (ACLs) in
  -   Asterisk. Unlike traditional ACLs defined in specific module configuration
  -   files, Named ACLs can be shared across multiple modules.
  -
  - * The Hangup Cause family of functions and dialplan applications allow for
  -   inspection of the hangup cause codes for each channel involved in a call.
  -   This allows a dialplan writer to determine, for each channel, who hung up and
  -   for what reason(s).
  -
  - * Two new functions have been added: FEATURE() and FEATUREMAP(). FEATURE()
  -   lets you set some of the configuration options from the general section
  -   of features.conf on a per-channel basis. FEATUREMAP() lets you customize
  -   the key sequence used to activate built-in features, such as blindxfer,
  -   and automon.
  -
  - * Support for DTLS-SRTP in chan_sip.
  -
  - * Support for named pickupgroups/callgroups, allowing any number of pickupgroups
  -   and callgroups to be defined for several channel drivers.
  -
  - * IPv6 Support for AMI, AGI, ExternalIVR, and the SIP Security Event Framework.
  -
  - More information about the new features can be found on the Asterisk wiki:
  -
  - https://wiki.asterisk.org/wiki/display/AST/Asterisk+11+Documentation
  -
  - A full list of all new features can also be found in the CHANGES file.
  -
  - http://svnview.digium.com/svn/asterisk/branches/11/CHANGES
  -
  - For a full list of changes in the current release, please see the ChangeLog.
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.0.0-rc1


author: Jeffrey Ollie <jeff@ocjtech.us> - 11.0.0-0.4.beta2
changelog:
  - The Asterisk Development Team is pleased to announce the second beta release of
  - Asterisk 11.0.0.  This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - All interested users of Asterisk are encouraged to participate in the
  - Asterisk 11 testing process.  Please report any issues found to the issue
  - tracker, https://issues.asterisk.org/jira.  It is also very useful to see
  - successful test reports.  Please post those to the asterisk-dev mailing list.
  - All Asterisk users are invited to participate in the #asterisk-testing channel
  - on IRC to work together in testing the many parts of Asterisk.
  -
  - Asterisk 11 is the next major release series of Asterisk.  It will be a Long
  - Term Support (LTS) release, similar to Asterisk 1.8.  For more information about
  - support time lines for Asterisk releases, see the Asterisk versions page:
  - https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions
  -
  - For important information regarding upgrading to Asterisk 11, please see the
  - Asterisk wiki:
  -
  - https://wiki.asterisk.org/wiki/display/AST/Upgrading+to+Asterisk+11
  -
  - A short list of new features includes:
  -
  - * A new channel driver named chan_motif has been added which provides support
  -   for Google Talk and Jingle in a single channel driver.  This new channel
  -   driver includes support for both audio and video, RFC2833 DTMF, all codecs
  -   supported by Asterisk, hold, unhold, and ringing notification. It is also
  -   compliant with the current Jingle specification, current Google Jingle
  -   specification, and the original Google Talk protocol.
  -
  - * Support for the WebSocket transport for chan_sip.
  -
  - * SIP peers can now be configured to support negotiation of ICE candidates.
  -
  - * The app_page application now no longer depends on DAHDI or app_meetme. It
  -   has been re-architected to use app_confbridge internally.
  -
  - * Hangup handlers can be attached to channels using the CHANNEL() function.
  -   Hangup handlers will run when the channel is hung up similar to the h
  -   extension; however, unlike an h extension, a hangup handler is associated with
  -   the actual channel and will execute anytime that channel is hung up,
  -   regardless of where it is in the dialplan.
  -
  - * Added pre-dial handlers for the Dial and Follow-Me applications.  Pre-dial
  -   allows you to execute a dialplan subroutine on a channel before a call is
  -   placed but after the application performing a dial action is invoked. This
  -   means that the handlers are executed after the creation of the callee
  -   channels, but before any actions have been taken to actually dial the callee
  -   channels.
  -
  - * Log messages can now be easily associated with a certain call by looking at
  -   a new unique identifier, "Call Id".  Call ids are attached to log messages for
  -   just about any case where it can be determined that the message is related
  -   to a particular call.
  -
  - * Introduced Named ACLs as a new way to define Access Control Lists (ACLs) in
  -   Asterisk. Unlike traditional ACLs defined in specific module configuration
  -   files, Named ACLs can be shared across multiple modules.
  -
  - * The Hangup Cause family of functions and dialplan applications allow for
  -   inspection of the hangup cause codes for each channel involved in a call.
  -   This allows a dialplan writer to determine, for each channel, who hung up and
  -   for what reason(s).
  -
  - * Two new functions have been added: FEATURE() and FEATUREMAP(). FEATURE()
  -   lets you set some of the configuration options from the general section
  -   of features.conf on a per-channel basis. FEATUREMAP() lets you customize
  -   the key sequence used to activate built-in features, such as blindxfer,
  -   and automon.
  -
  - * Support for DTLS-SRTP in chan_sip.
  -
  - * Support for named pickupgroups/callgroups, allowing any number of pickupgroups
  -   and callgroups to be defined for several channel drivers.
  -
  - * IPv6 Support for AMI, AGI, ExternalIVR, and the SIP Security Event Framework.
  -
  - More information about the new features can be found on the Asterisk wiki:
  -
  - https://wiki.asterisk.org/wiki/display/AST/Asterisk+11+Documentation
  -
  - A full list of all new features can also be found in the CHANGES file.
  -
  - http://svnview.digium.com/svn/asterisk/branches/11/CHANGES
  -
  - For a full list of changes in the current release, please see the ChangeLog.
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.0.0-beta2


author: Jeffrey Ollie <jeff@ocjtech.us> - 10.8.0-1
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 10.8.0.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 10.8.0 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release:
  -
  - * --- AST-2012-012: Resolve AMI User Unauthorized Shell Access through
  -       ExternalIVR
  -   (Closes issue ASTERISK-20132. Reported by Zubair Ashraf of IBM X-Force Research)
  -
  - * --- AST-2012-013: Resolve ACL rules being ignored during calls by
  -       some IAX2 peers
  -   (Closes issue ASTERISK-20186. Reported by Alan Frisch)
  -
  - * --- Handle extremely out of order RFC 2833 DTMF
  -   (Closes issue ASTERISK-18404. Reported by Stephane Chazelas)
  -
  - * --- Resolve severe memory leak in CEL logging modules.
  -   (Closes issue AST-916. Reported by Thomas Arimont)
  -
  - * --- Only re-create an SRTP session when needed
  -   (Issue ASTERISK-20194. Reported by Nicolo Mazzon)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.8.0


author: Jeffrey Ollie <jeff@ocjtech.us> - 10.7.1-1
changelog:
  - The Asterisk Development Team has announced security releases for Certified
  - Asterisk 1.8.11 and Asterisk 1.8 and 10. The available security releases are
  - released as versions 1.8.11-cert7, 1.8.15.1, 10.7.1, and 10.7.1-digiumphones.
  -
  - These releases are available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - The release of Asterisk 1.8.11-cert7, 1.8.15.1, 10.7.1, and 10.7.1-digiumphones
  - resolve the following two issues:
  -
  - * A permission escalation vulnerability in Asterisk Manager Interface.  This
  -   would potentially allow remote authenticated users the ability to execute
  -   commands on the system shell with the privileges of the user running the
  -   Asterisk application.  Please note that the README-SERIOUSLY.bestpractices.txt
  -   file delivered with Asterisk has been updated due to this and other related
  -   vulnerabilities fixed in previous versions of Asterisk.
  -
  - * When an IAX2 call is made using the credentials of a peer defined in a
  -   dynamic Asterisk Realtime Architecture (ARA) backend, the ACL rules for that
  -   peer are not applied to the call attempt. This allows for a remote attacker
  -   who is aware of a peer's credentials to bypass the ACL rules set for that
  -   peer.
  -
  - These issues and their resolutions are described in the security advisories.
  -
  - For more information about the details of these vulnerabilities, please read
  - security advisories AST-2012-012 and AST-2012-013, which were released at the
  - same time as this announcement.
  -
  - For a full list of changes in the current releases, please see the ChangeLogs:
  -
  - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.11-cert7
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.15.1
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.7.1
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.7.1-digiumphones
  -
  - The security advisories are available at:
  -
  -  * http://downloads.asterisk.org/pub/security/AST-2012-012.pdf
  -  * http://downloads.asterisk.org/pub/security/AST-2012-013.pdf


author: Jeffrey Ollie <jeff@ocjtech.us> - 10.7.0-1
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 10.7.0.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 10.7.0 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release:
  -
  - * --- Fix deadlock potential with ast_set_hangupsource() calls.
  -   (Closes issue ASTERISK-19801. Reported by Alec Davis)
  -
  - * --- Fix request routing issue when outboundproxy is used.
  -   (Closes issue ASTERISK-20008. Reported by Marcus Hunger)
  -
  - * --- Set the Caller ID "tag" on peers even if remote party
  -       information is present.
  -   (Closes issue ASTERISK-19859. Reported by Thomas Arimont)
  -
  - * --- Fix NULL pointer segfault in ast_sockaddr_parse()
  -   (Closes issue ASTERISK-20006. Reported by Michael L. Young)
  -
  - * --- Do not perform install on existing directories
  -   (Closes issue ASTERISK-19492. Reported by Karl Fife)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.7.0


author: Jeffrey Ollie <jeff@ocjtech.us> - 10.6.1-1
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 10.6.1.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 10.6.1 resolves an issue reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is the issue resolved in this release:
  -
  - * --- Remove a superfluous and dangerous freeing of an SSL_CTX.
  -   (Closes issue ASTERISK-20074. Reported by Trevor Helmsley)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.6.1


author: Jeffrey Ollie <jeff@ocjtech.us> - 10.6.0-1
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 10.6.0.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 10.6.0 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release:
  -
  - * --- format_mp3: Fix a possible crash in mp3_read().
  -   (Closes issue ASTERISK-19761. Reported by Chris Maciejewsk)
  -
  - * --- Fix local channel chains optimizing themselves out of a call.
  -   (Closes issue ASTERISK-16711. Reported by Alec Davis)
  -
  - * --- Re-add LastMsgsSent value for SIP peers
  -   (Closes issue ASTERISK-17866. Reported by Steve Davies)
  -
  - * --- Prevent sip_pvt refleak when an ast_channel outlasts its
  -       corresponding sip_pvt.
  -   (Closes issue ASTERISK-19425. Reported by David Cunningham)
  -
  - * --- Send more accurate identification information in dialog-info SIP
  -       NOTIFYs.
  -   (Closes issue ASTERISK-16735. Reported by Maciej Krajewski)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.6.0


author: Jeffrey Ollie <jeff@ocjtech.us> - 11.0.0-0.2.beta1
changelog:
  - The Asterisk Development Team is pleased to announce the first beta release of
  - Asterisk 11.0.0.  This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - All interested users of Asterisk are encouraged to participate in the
  - Asterisk 11 testing process.  Please report any issues found to the issue
  - tracker, https://issues.asterisk.org/jira.  It is also very useful to see
  - successful test reports.  Please post those to the asterisk-dev mailing list.
  - All Asterisk users are invited to participate in the #asterisk-testing channel
  - on IRC to work together in testing the many parts of Asterisk.
  -
  - Asterisk 11 is the next major release series of Asterisk.  It will be a Long
  - Term Support (LTS) release, similar to Asterisk 1.8.  For more information about
  - support time lines for Asterisk releases, see the Asterisk versions page:
  - https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions
  -
  - For important information regarding upgrading to Asterisk 11, please see the
  - Asterisk wiki:
  -
  - https://wiki.asterisk.org/wiki/display/AST/Upgrading+to+Asterisk+11
  -
  - A short list of new features includes:
  -
  - * A new channel driver named chan_motif has been added which provides support
  -   for Google Talk and Jingle in a single channel driver.  This new channel
  -   driver includes support for both audio and video, RFC2833 DTMF, all codecs
  -   supported by Asterisk, hold, unhold, and ringing notification. It is also
  -   compliant with the current Jingle specification, current Google Jingle
  -   specification, and the original Google Talk protocol.
  -
  - * Support for the WebSocket transport for chan_sip.
  -
  - * SIP peers can now be configured to support negotiation of ICE candidates.
  -
  - * The app_page application now no longer depends on DAHDI or app_meetme. It
  -   has been re-architected to use app_confbridge internally.
  -
  - * Hangup handlers can be attached to channels using the CHANNEL() function.
  -   Hangup handlers will run when the channel is hung up similar to the h
  -   extension; however, unlike an h extension, a hangup handler is associated with
  -   the actual channel and will execute anytime that channel is hung up,
  -   regardless of where it is in the dialplan.
  -
  - * Added pre-dial handlers for the Dial and Follow-Me applications.  Pre-dial
  -   allows you to execute a dialplan subroutine on a channel before a call is
  -   placed but after the application performing a dial action is invoked. This
  -   means that the handlers are executed after the creation of the caller/callee
  -   channels, but before any actions have been taken to actually dial the callee
  -   channels.
  -
  - * Log messages can now be easily associated with a certain call by looking at
  -   a new unique identifier, "Call Id".  Call ids are attached to log messages for
  -   just about any case where it can be determined that the message is related
  -   to a particular call.
  -
  - * Introduced Named ACLs as a new way to define Access Control Lists (ACLs) in
  -   Asterisk. Unlike traditional ACLs defined in specific module configuration
  -   files, Named ACLs can be shared across multiple modules.
  -
  - * The Hangup Cause family of functions and dialplan applications allow for
  -   inspection of the hangup cause codes for each channel involved in a call.
  -   This allows a dialplan writer to determine, for each channel, who hung up and
  -   for what reason(s).
  -
  - * Two new functions have been added: FEATURE() and FEATUREMAP(). FEATURE()
  -   lets you set some of the configuration options from the general section
  -   of features.conf on a per-channel basis. FEATUREMAP() lets you customize
  -   the key sequence used to activate built-in features, such as blindxfer,
  -   and automon.
  -
  - * Support for named pickupgroups/callgroups, allowing any number of pickupgroups
  -   and callgroups to be defined for several channel drivers.
  -
  - * IPv6 Support for AMI, AGI, ExternalIVR, and the SIP Security Event Framework.
  -
  - More information about the new features can be found on the Asterisk wiki:
  -
  - https://wiki.asterisk.org/wiki/display/AST/Asterisk+11+Documentation
  -
  - A full list of all new features can also be found in the CHANGES file.
  -
  - http://svnview.digium.com/svn/asterisk/branches/11/CHANGES
  -
  - For a full list of changes in the current release, please see the ChangeLog.
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.0.0-beta1


author: Jeffrey Ollie <jeff@ocjtech.us> - 10.5.2-1:
changelog:
  - The Asterisk Development Team has announced security releases for Certified
  - Asterisk 1.8.11 and Asterisk 1.8 and 10. The available security releases are
  - released as versions 1.8.11-cert4, 1.8.13.1, 10.5.2, and 10.5.2-digiumphones.
  -
  - These releases are available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - The release of Asterisk 1.8.11-cert4, 1.8.13.1, 10.5.2, and 10.5.2-digiumphones
  - resolve the following two issues:
  -
  - * If Asterisk sends a re-invite and an endpoint responds to the re-invite with
  -   a provisional response but never sends a final response, then the SIP dialog
  -   structure is never freed and the RTP ports for the call are never released. If
  -   an attacker has the ability to place a call, they could create a denial of
  -   service by using all available RTP ports.
  -
  - * If a single voicemail account is manipulated by two parties simultaneously,
  -   a condition can occur where memory is freed twice causing a crash.
  -
  - These issues and their resolution are described in the security advisories.
  -
  - For more information about the details of these vulnerabilities, please read
  - security advisories AST-2012-010 and AST-2012-011, which were released at the
  - same time as this announcement.
  -
  - For a full list of changes in the current releases, please see the ChangeLogs:
  -
  - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.11-cert4
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.13.1
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.5.2
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.5.2-digiumphones
  -
  - The security advisories are available at:
  -
  -  * http://downloads.asterisk.org/pub/security/AST-2012-010.pdf
  -  * http://downloads.asterisk.org/pub/security/AST-2012-011.pdf


author: Jeffrey Ollie <jeff@ocjtech.us> - 10.5.1-1
changelog:
  - The Asterisk Development Team has announced a security release for Asterisk 10.
  - This security release is released as version 10.5.1.
  -
  - The release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - The release of Asterisk 10.5.1 resolves the following issue:
  -
  - * A remotely exploitable crash vulnerability was found in the Skinny (SCCP)
  -  Channel driver. When an SCCP client sends an Off Hook message, followed by
  -  a Key Pad Button Message, a structure that was previously set to NULL is
  -  dereferenced.  This allows remote authenticated connections the ability to
  -  cause a crash in the server, denying services to legitimate users.
  -
  - This issue and its resolution is described in the security advisory.
  -
  - For more information about the details of this vulnerability, please read
  - security advisory AST-2012-009, which was released at the same time as this
  - announcement.
  -
  - For a full list of changes in the current releases, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.5.1
  -
  - The security advisory is available at:
  -
  -  * http://downloads.asterisk.org/pub/security/AST-2012-009.pdf


author: Jeffrey Ollie <jeff@ocjtech.us> - 10.5.0-1
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 10.5.0.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 10.5.0 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release:
  -
  - * --- Turn off warning message when bind address is set to any.
  -  (Closes issue ASTERISK-19456. Reported by Michael L. Young)
  -
  - * --- Prevent overflow in calculation in ast_tvdiff_ms on 32-bit
  -      machines
  -  (Closes issue ASTERISK-19727. Reported by Ben Klang)
  -
  - * --- Make DAHDISendCallreroutingFacility wait 5 seconds for a reply
  -      before disconnecting the call.
  -  (Closes issue ASTERISK-19708. Reported by mehdi Shirazi)
  -
  - * --- Fix recalled party B feature flags for a failed DTMF atxfer.
  -  (Closes issue ASTERISK-19383. Reported by lgfsantos)
  -
  - * --- Fix DTMF atxfer running h exten after the wrong bridge ends.
  -  (Closes issue ASTERISK-19717. Reported by Mario)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.5.0


author: Jeffrey Ollie <jeff@ocjtech.us> - 10.4.2-1
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 10.4.2.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 10.4.2 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following are the issues resolved in this release:
  -
  - * --- Resolve crash in subscribing for MWI notifications
  -  (Closes issue ASTERISK-19827. Reported by B. R)
  -
  - * --- Fix crash in ConfBridge when user announcement is played for
  -      more than 2 users
  -  (Closes issue ASTERISK-19899. Reported by Florian Gilcher)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.4.2


author: Jeffrey Ollie <jeff@ocjtech.us> - 10.4.1-1
changelog:
  - The Asterisk Development Team has announced security releases for Certified
  - Asterisk 1.8.11 and Asterisk 1.8 and 10. The available security releases are
  - released as versions 1.8.11-cert2, 1.8.12.1, and 10.4.1.
  -
  - These releases are available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - The release of Asterisk 1.8.11-cert2, 1.8.12.1, and 10.4.1 resolve the following
  - two issues:
  -
  - * A remotely exploitable crash vulnerability exists in the IAX2 channel
  -  driver if an established call is placed on hold without a suggested music
  -  class. Asterisk will attempt to use an invalid pointer to the music
  -  on hold class name, potentially causing a crash.
  -
  - * A remotely exploitable crash vulnerability was found in the Skinny (SCCP)
  -  Channel driver. When an SCCP client closes its connection to the server,
  -  a pointer in a structure is set to NULL.  If the client was not in the
  -  on-hook state at the time the connection was closed, this pointer is later
  -  dereferenced. This allows remote authenticated connections the ability to
  -  cause a crash in the server, denying services to legitimate users.
  -
  - These issues and their resolution are described in the security advisories.
  -
  - For more information about the details of these vulnerabilities, please read
  - security advisories AST-2012-007 and AST-2012-008, which were released at the
  - same time as this announcement.
  -
  - For a full list of changes in the current releases, please see the ChangeLogs:
  -
  - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.11-cert2
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.12.1
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.4.1
  -
  - The security advisories are available at:
  -
  -  * http://downloads.asterisk.org/pub/security/AST-2012-007.pdf
  -  * http://downloads.asterisk.org/pub/security/AST-2012-008.pdf


author: Jeffrey Ollie <jeff@ocjtech.us> - 10.4.0-1
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 10.4.0.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 10.4.0 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following are the issues resolved in this release:
  -
  - * --- Prevent chanspy from binding to zombie channels
  -  (Closes issue ASTERISK-19493. Reported by lvl)
  -
  - * --- Fix Dial m and r options and forked calls generating warnings
  -      for voice frames.
  -  (Closes issue ASTERISK-16901. Reported by Chris Gentle)
  -
  - * --- Remove ISDN hold restriction for non-bridged calls.
  -  (Closes issue ASTERISK-19388. Reported by Birger Harzenetter)
  -
  - * --- Fix copying of CDR(accountcode) to local channels.
  -  (Closes issue ASTERISK-19384. Reported by jamicque)
  -
  - * --- Ensure Asterisk acknowledges ACKs to 4xx on Replaces errors
  -  (Closes issue ASTERISK-19303. Reported by Jon Tsiros)
  -
  - * --- Eliminate double close of file descriptor in manager.c
  -  (Closes issue ASTERISK-18453. Reported by Jaco Kroon)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.4.0


author: Jeffrey Ollie <jeff@ocjtech.us> - 10.3.1-1
changelog:
  - The Asterisk Development Team has announced security releases for Asterisk 1.6.2,
  - 1.8, and 10. The available security releases are released as versions 1.6.2.24,
  - 1.8.11.1, and 10.3.1.
  -
  - These releases are available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - The release of Asterisk 1.6.2.24, 1.8.11.1, and 10.3.1 resolve the following two
  - issues:
  -
  -  * A permission escalation vulnerability in Asterisk Manager Interface.  This
  -   would potentially allow remote authenticated users the ability to execute
  -   commands on the system shell with the privileges of the user running the
  -   Asterisk application.
  -
  -  * A heap overflow vulnerability in the Skinny Channel driver.  The keypad
  -   button message event failed to check the length of a fixed length buffer
  -   before appending a received digit to the end of that buffer.  A remote
  -   authenticated user could send sufficient keypad button message events that the
  -   buffer would be overrun.
  -
  - In addition, the release of Asterisk 1.8.11.1 and 10.3.1 resolve the following
  - issue:
  -
  -  * A remote crash vulnerability in the SIP channel driver when processing UPDATE
  -   requests.  If a SIP UPDATE request was received indicating a connected line
  -   update after a channel was terminated but before the final destruction of the
  -   associated SIP dialog, Asterisk would attempt a connected line update on a
  -   non-existing channel, causing a crash.
  -
  - These issues and their resolution are described in the security advisories.
  -
  - For more information about the details of these vulnerabilities, please read
  - security advisories AST-2012-004, AST-2012-005, and AST-2012-006, which were
  - released at the same time as this announcement.
  -
  - For a full list of changes in the current releases, please see the ChangeLogs:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.24
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.11.1
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.3.1
  -
  - The security advisories are available at:
  -
  -  * http://downloads.asterisk.org/pub/security/AST-2012-004.pdf
  -  * http://downloads.asterisk.org/pub/security/AST-2012-005.pdf
  -  * http://downloads.asterisk.org/pub/security/AST-2012-006.pdf


author: Russell Bryant <russell@russellbryant.net> - 10.2.1-1
changelog:
  - Update to 10.2.1 from upstream.
  - Fix remote stack overflow in app_milliwatt.
  - Fix remote stack overflow, including possible code injection, in HTTP digest
    authentication handling.
  - Disable asterisk-corosync package, as it doesn't build right now.
  - Resolves: rhbz#804045, rhbz#804038, rhbz#804042


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 10.1.2-2
changelog:
  - * Add patch extracted from upstream to build with Corosync since
  -   OpenAIS is no longer available.
  - * Add PrivateTmp=true to systemd service file (#782478)
  - * Add some macros to make it easier to build with fewer dependencies
  -   (with corresponding less functionality) (#787389)
  - * Add isa macros in a few places plus a few other changes to make it
  -   easier to cross-compile. (#787779)


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 10.1.2-1
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 10.1.2. This
  - release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - The release of Asterisk 10.1.2 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following are the issues resolved in this release:
  -
  - * --- Fix SIP INFO DTMF handling for non-numeric codes ---
  -  (Closes issue ASTERISK-19290. Reported by: Ira Emus)
  -
  - * --- Fix crash in ParkAndAnnounce ---
  -  (Closes issue ASTERISK-19311. Reported-by: tootai)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.1.2


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 10.1.1-1
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 10.1.1. This
  - release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - The release of Asterisk 10.1.1 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release:
  -
  - * --- Fixes deadlocks occuring in chan_agent ---
  -  (Closes issue ASTERISK-19285. Reported by: Alex Villacis Lasso)
  -
  - * --- Ensure entering T.38 passthrough does not cause an infinite loop ---
  -  (Closes issue ASTERISK-18951. Reported-by: Kristijan Vrban)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.1.1


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 10.1.0-1
changelog:
  - The Asterisk Development Team is pleased to announce the release of
  - Asterisk 10.1.0. This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - The release of Asterisk 10.1.0 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release:
  -
  - * AST-2012-001: prevent crash when an SDP offer
  -  is received with an encrypted video stream when support for video
  -  is disabled and res_srtp is loaded.  (closes issue ASTERISK-19202)
  -  Reported by: Catalin Sanda
  -
  - * Allow playback of formats that don't support seeking.  ast_streamfile
  -  previously did unconditional seeking on files that broke playback of
  -  formats that don't support that functionality.  This patch avoids the
  -  seek that was causing the problem.
  -  (closes issue ASTERISK-18994) Patched by: Timo Teras
  -
  - * Add pjmedia probation concepts to res_rtp_asterisk's learning mode.  In
  -  order to better handle RTP sources with strictrtp enabled (which is the
  -  default setting in 10) using the learning mode to figure out new sources
  -  when they change is handled by checking for a number of consecutive (by
  -  sequence number) packets received to an rtp struct based on a new
  -  configurable value called 'probation'.  Also, during learning mode instead
  -  of liberally accepting all packets received, we now reject packets until a
  -  clear source has been determined.
  -
  - * Handle AST_CONTROL_UPDATE_RTP_PEER frames in local bridge loop.  Failing
  -  to handle AST_CONTROL_UPDATE_RTP_PEER frames in the local bridge loop
  -  causes the loop to exit prematurely. This causes a variety of negative side
  -  effects, depending on when the loop exits. This patch handles the frame by
  -  essentially swallowing the frame in the local loop, as the current channel
  -  drivers expect the RTP bridge to handle the frame, and, in the case of the
  -  local bridge loop, no additional action is necessary.
  -  (closes issue ASTERISK-19095) Reported by: Stefan Schmidt Tested
  -  by: Matt Jordan
  -
  - * Fix timing source dependency issues with MOH.  Prior to this patch,
  -  res_musiconhold existed at the same module priority level as the timing
  -  sources that it depends on.  This would cause a problem when music on
  -  hold was reloaded, as the timing source could be changed after
  -  res_musiconhold was processed. This patch adds a new module priority
  -  level, AST_MODPRI_TIMING, that the various timing modules are now loaded
  -  at. This now occurs before loading other resource modules, such
  -  that the timing source is guaranteed to be set prior to resolving
  -  the timing source dependencies.
  -  (closes issue ASTERISK-17474) Reporter: Luke H Tested by: Luke H,
  -  Vladimir Mikhelson, zzsurf, Wes Van Tlghem, elguero, Thomas Arimont
  -  Patched by elguero
  -
  - * Fix RTP reference leak.  If a blind transfer were initiated using a
  -  REFER without a prior reINVITE to place the call on hold, AND if Asterisk
  -  were sending RTCP reports, then there was a reference leak for the
  -  RTP instance of the transferrer.
  -  (closes issue ASTERISK-19192) Reported by: Tyuta Vitali
  -
  - * Fix blind transfers from failing if an 'h' extension
  -  is present.  This prevents the 'h' extension from being run on the
  -  transferee channel when it is transferred via a native transfer
  -  mechanism such as SIP REFER.  (closes issue ASTERISK-19173) Reported
  -  by: Ross Beer Tested by: Kristjan Vrban Patches: ASTERISK-19173 by
  -  Mark Michelson (license 5049)
  -
  - * Restore call progress code for analog ports. Extracting sig_analog
  -  from chan_dahdi lost call progress detection functionality.  Fix
  -  analog ports from considering a call answered immediately after
  -  dialing has completed if the callprogress option is enabled.
  -  (closes issue ASTERISK-18841)
  -  Reported by: Richard Miller Patched by Richard Miller
  -
  - * Fix regression that 'rtp/rtcp set debup ip' only works when a port
  -  was also specified.
  -  (closes issue ASTERISK-18693) Reported by: Davide Dal Reviewed by:
  -  Walter Doekes
  -
  - For a full list of changes in this release candidate, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.1.0


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 10.0.0-1
changelog:
  - The Asterisk Development Team is proud to announce the release of
  - Asterisk 10.0.0. This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - Asterisk 10 is the next major release series of Asterisk. It will be a
  - Standard support release, similar to Asterisk 1.6.2. For more information about
  - support time lines for Asterisk releases, see the Asterisk versions page:
  -
  -  https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions
  -
  - With the release of the Asterisk 10 branch, the preceding '1.' has been removed
  - from the version number per the blog post available at
  -
  -
  - http://blogs.digium.com/2011/07/21/the-evolution-of-asterisk-or-how-we-arrived-at-asterisk-10/
  -
  - The release of Asterisk 10 would not have been possible without the support and
  - contributions of the community.
  -
  - You can find an overview of the work involved with the 10.0.0 release in the
  - summary:
  -
  - http://svn.asterisk.org/svn/asterisk/tags/10.0.0/asterisk-10.0.0-summary.txt
  -
  - A short list of available features includes:
  -
  - * T.38 gateway functionality has been added to res_fax.
  - * Protocol independent out-of-call messaging support. Text messages not
  -  associated with an active call can now be routed through the Asterisk
  -  dialplan. SIP and XMPP are supported so far.
  - * New highly optimized and customizable ConfBridge application capable of mixing
  -  audio at sample rates ranging from 8kHz-192kHz
  - * Addition of video_mode option in confbridge.conf to provide basic video
  -  conferencing in the ConfBridge() dialplan application.
  - * Support for defining hints has been added to pbx_lua.
  - * Replacement of Berkeley DB with SQLite for the Asterisk Database (AstDB).
  - * Much, much more!
  -
  - A full list of new features can be found in the CHANGES file.
  -
  -  http://svn.asterisk.org/svn/asterisk/branches/10/CHANGES
  -
  - Also, when upgrading a system between major versions, it is imperative that you
  - read and understand the contents of the UPGRADE.txt file, which is located at:
  -
  -  http://svn.asterisk.org/svn/asterisk/branches/10/UPGRADE.txt


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 10.0.0-0.7.rc3
changelog:
  - The Asterisk Development Team has announced the third release candidate of
  - Asterisk 10.0.0. This release candidate is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - The release of Asterisk 10.0.0-rc3 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release candidate:
  -
  - * Add ASTSBINDIR to the list of configurable paths
  -
  -  This patch also makes astdb2sqlite3 and astcanary use the configured
  -  directory instead of relying on $PATH.
  -
  - * Don't crash on INFO automon request with no channel
  -
  -  AST-2011-014. When automon was enabled in features.conf, it was possible
  -  to crash Asterisk by sending an INFO request if no channel had been
  -  created yet.
  -
  - * Fixed crash from orphaned MWI subscriptions in chan_sip
  -
  -  This patch resolves the issue where MWI subscriptions are orphaned
  -  by subsequent SIP SUBSCRIBE messages.
  -
  - * Fix a change in behavior in 'database show' from 1.8.
  -
  -  In 1.8 and previous versions, one could use any fullword portion of
  -  the key name, including the full key, to obtain the record. Until this
  -  patch, this did not work for the full key.
  -
  - * Default to nat=yes; warn when nat in general and peer differ
  -
  -  AST-2011-013.  It is possible to enumerate SIP usernames when the general and
  -  user/peer nat settings differ in whether to respond to the port a request is
  -  sent from or the port listed for responses in the Via header. In 1.4 and
  -  1.6.2, this would mean if one setting was nat=yes or nat=route and the other
  -  was either nat=no or nat=never. In 1.8 and 10, this would mean when one
  -  was nat=force_rport and the other was nat=no.
  -
  -  In order to address this problem, it was decided to switch the default
  -  behavior to nat=yes/force_rport as it is the most commonly used option
  -  and to strongly discourage setting nat per-peer/user when at all
  -  possible.
  -
  - * Fixed SendMessage stripping extension from To: header in SIP MESSAGE
  -
  -  When using the MessageSend application to send a SIP MESSAGE to a
  -  non-peer, chan_sip stripped off the extension and failed to add it back
  -  to the sip_pvt structure before transmitting. This patch adds the full
  -  URI passed in from the message core to the sip_pvt structure.
  -
  - For a full list of changes in this release candidate, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.0.0-rc3


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 10.0.0-0.6.rc2
changelog:
  - The Asterisk Development Team has announced the second release candidate of
  - Asterisk 10.0.0. This release candidate is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - The release of Asterisk 10.0.0-rc2 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release candidate:
  -
  - * Ensure that a null vmexten does not cause a segfault
  -
  - * Fix issue with ConfBridge participants hanging up during DTMF feature
  -  menu usage getting stuck in conference forever
  -  (closes issue ASTERISK-18829)
  -  Reported by: zvision
  -
  - * Fix app_macro.c MODULEINFO section termination
  -  (closes issue ASTERISK-18848)
  -  Reported by: Tony Mountifield
  -
  - For a full list of changes in this release candidate, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-10.0.0-rc2


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 10.0.0-0.5.rc1
changelog:
  - The Asterisk Development Team is pleased to announce the first release candidate
  - of Asterisk 10.0.0. This release candidate is available for immediate download
  - at http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - All Asterisk users are encouraged to participate in the Asterisk 10 testing
  - process. Please report any issues found to the issue tracker,
  - https://issues.asterisk.org/jira. It is also very useful to see successful test
  - reports. Please post those to the asterisk-dev mailing list.
  -
  - All Asterisk users are invited to participate in the #asterisk-testing
  - channel on IRC to work together in testing the many parts of Asterisk.
  -
  - Asterisk 10 is the next major release series of Asterisk. It will be a
  - Standard support release, similar to Asterisk 1.6.2. For more
  - information about support time lines for Asterisk releases, see the Asterisk
  - versions page: https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions
  -
  - A short list of features includes:
  -
  - * T.38 gateway functionality has been added to res_fax.
  - * Protocol independent out-of-call messaging support. Text messages not
  -  associated with an active call can now be routed through the Asterisk
  -  dialplan. SIP and XMPP are supported so far.
  - * New highly optimized and customizable ConfBridge application capable of mixing
  -  audio at sample rates ranging from 8kHz-192kHz
  -  (More information available at
  -   https://wiki.asterisk.org/wiki/display/AST/ConfBridge+10 )
  - * Addition of video_mode option in confbridge.conf to provide basic video
  -  conferencing in the ConfBridge() dialplan application.
  - * Support for defining hints has been added to pbx_lua.
  - * Replacement of Berkeley DB with SQLite for the Asterisk Database (AstDB).
  - * Much, much more!
  -
  - A full list of new features can be found in the CHANGES file.
  -
  - http://svnview.digium.com/svn/asterisk/branches/10/CHANGES
  -
  - For a full list of changes in the current release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.0.0-rc1


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 10.0.0-0.2.beta2
changelog:
  - The Asterisk Development Team is pleased to announce the second beta release of
  - Asterisk 10.0.0. This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - With the release of the Asterisk 10 branch, the preceding '1.' has been removed
  - from the version number per the blog post available at
  - http://blogs.digium.com/2011/07/21/the-evolution-of-asterisk-or-how-we-arrived-at-asterisk-10/
  -
  - All interested users of Asterisk are encouraged to participate in the
  - Asterisk 10 testing process. Please report any issues found to the issue
  - tracker, https://issues.asterisk.org/jira. It is also very useful to see
  - successful test reports. Please post those to the asterisk-dev mailing list.
  -
  - All Asterisk users are invited to participate in the #asterisk-testing
  - channel on IRC to work together in testing the many parts of Asterisk.
  -
  - Asterisk 10 is the next major release series of Asterisk. It will be a
  - Standard support release, similar to Asterisk 1.6.2. For more
  - information about support time lines for Asterisk releases, see the Asterisk
  - versions page: https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions
  -
  - A short list of features includes:
  -
  - * T.38 gateway functionality has been added to res_fax.
  -
  - * Protocol independent out-of-call messaging support. Text messages not
  -  associated with an active call can now be routed through the Asterisk
  -  dialplan. SIP and XMPP are supported so far.
  -
  - * New highly optimized and customizable ConfBridge application capable of mixing
  -  audio at sample rates ranging from 8kHz-192kHz
  -
  - * Addition of video_mode option in confbridge.conf to provide basic video
  -  conferencing in the ConfBridge() dialplan application.
  -
  - * Support for defining hints has been added to pbx_lua.
  -
  - * Replacement of Berkeley DB with SQLite for the Asterisk Database (AstDB).
  -
  - * Much, much more!
  -
  - A full list of new features can be found in the CHANGES file.
  -
  - http://svnview.digium.com/svn/asterisk/branches/10/CHANGES
  -
  - For a full list of changes in the current release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.0.0-beta2


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 10.0.0-0.1.beta1
changelog:
  -
  - The Asterisk Development Team is pleased to announce the first beta release of
  - Asterisk 10.0.0-beta1. This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - With the release of the Asterisk 10 branch, the preceding '1.' has been removed
  - from the version number per the blog post available at
  - http://blogs.digium.com/2011/07/21/the-evolution-of-asterisk-or-how-we-arrived-at-asterisk-10/
  -
  - All interested users of Asterisk are encouraged to participate in the
  - Asterisk 10 testing process. Please report any issues found to the issue
  - tracker, https://issues.asterisk.org/jira. It is also very useful to see
  - successful test reports. Please post those to the asterisk-dev mailing list.
  -
  - All Asterisk users are invited to participate in the #asterisk-testing
  - channel on IRC to work together in testing the many parts of Asterisk.
  - Additionally users can make use of the RPM and DEB packages now being built for
  - all Asterisk releases. More information available at
  - https://wiki.asterisk.org/wiki/display/AST/Asterisk+Packages
  -
  - Asterisk 10 is the next major release series of Asterisk. It will be a
  - Standard support release, similar to Asterisk 1.6.2. For more
  - information about support time lines for Asterisk releases, see the Asterisk
  - versions page: https://wiki.asterisk.org/wiki/display/AST/Asterisk+Versions
  -
  - A short list of included features includes:
  -
  - * T.38 gateway functionality has been added to res_fax.
  - * Protocol independent out-of-call messaging support.  Text messages not
  -  associated with an active call can now be routed through the Asterisk
  -  dialplan.  SIP and XMPP are supported so far.
  - * New highly optimized and customizable ConfBridge application capable of mixing
  -  audio at sample rates ranging from 8kHz-192kHz
  - * Addition of video_mode option in confbridge.conf to provide basic video
  -  conferencing in the ConfBridge() dialplan application.
  - * Support for defining hints has been added to pbx_lua.
  - * Replacement of Berkeley DB with SQLite for the Asterisk Database (AstDB).
  - * Much, much more!
  -
  - A full list of new features can be found in the CHANGES file.
  -
  - http://svn.digium.com/view/asterisk/branches/10/CHANGES?view=checkout
  -
  - For a full list of changes in the current release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.0.0-beta1


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.5.0-1
changelog:
  - The Asterisk Development Team announces the release of Asterisk 1.8.5.0. This
  - release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - The release of Asterisk 1.8.5.0 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release:
  -
  - * Fix Deadlock with attended transfer of SIP call
  -  (Closes issue #18837. Reported, patched by alecdavis. Tested by Irontec, ZX81,
  -  cmaj)
  -
  - * Fixes thread blocking issue in the sip TCP/TLS implementation.
  -  (Closes issue #18497. Reported by vois. Patched by dvossel. Tested by vois,
  -  rossbeer, kowalma, Freddi_Fonet)
  -
  - * Be more tolerant of what URI we accept for call completion PUBLISH requests.
  -  (Closes issue #18946. Reported by GeorgeKonopacki. Patched by mmichelson)
  -
  - * Fix a nasty chanspy bug which was causing a channel leak every time a spied on
  -  channel made a call.
  -  (Closes issue #18742. Reported by jkister. Tested by jcovert, jrose)
  -
  - * This patch fixes a bug with MeetMe behavior where the 'P' option for always
  -  prompting for a pin is ignored for the first caller.
  -  (Closes issue #18070. Reported by mav3rick. Patched by bbryant)
  -
  - * Fix issue where Asterisk does not hangup a channel after endpoint hangs up. If
  -  the call that the dialplan started an AGI script for is hungup while the AGI
  -  script is in the middle of a command then the AGI script is not notified of
  -  the hangup.
  -  (Closes issue #17954, #18492. Reported by mn3250, devmod. Patched by rmudgett)
  -
  - * Resolve issue where leaving a voicemail, the MWI message is never sent. The
  -  same thing happens when checking a voicemail and marking it as read.
  -  (Closes issue ASTERISK-18002. Reported by Leif Madsen. Resolved by Richard
  -  Mudgett)
  -
  - * Resolve issue where wait for leader with Music On Hold allows crosstalk
  -  between participants. Parenthesis in the wrong position. Regression from issue
  -  #14365 when expanding conference flags to use 64 bits.
  -  (Closes issue #18418. Reported by MrHanMan. Patched by rmudgett)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.5.0


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.5-0.1.rc1
changelog:
  - The Asterisk Development Team has announced the first release candidate of
  - Asterisk 1.8.5. This release candidate is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - The release of Asterisk 1.8.5-rc1 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release candidate:
  -
  - * Fix Deadlock with attended transfer of SIP call
  -  (Closes issue #18837. Reported, patched by alecdavis. Tested by Irontec, ZX81,
  -   cmaj)
  -
  - * Fixes thread blocking issue in the sip TCP/TLS implementation.
  -  (Closes issue #18497. Reported by vois. Patched by dvossel. Tested by vois,
  -   rossbeer, kowalma, Freddi_Fonet)
  -
  - * Be more tolerant of what URI we accept for call completion PUBLISH requests.
  -  (Closes issue #18946. Reported by GeorgeKonopacki. Patched by mmichelson)
  -
  - * Fix a nasty chanspy bug which was causing a channel leak every time a spied on
  -  channel made a call.
  -  (Closes issue #18742. Reported by jkister. Tested by jcovert, jrose)
  -
  - * This patch fixes a bug with MeetMe behavior where the 'P' option for always
  -  prompting for a pin is ignored for the first caller.
  -  (Closes issue #18070. Reported by mav3rick. Patched by bbryant)
  -
  - * Fix issue where Asterisk does not hangup a channel after endpoint hangs up. If
  -  the call that the dialplan started an AGI script for is hungup while the AGI
  -  script is in the middle of a command then the AGI script is not notified of
  -  the hangup.
  -  (Closes issue #17954, #18492. Reported by mn3250, devmod. Patched by rmudgett)
  -
  - * Resolve issue where leaving a voicemail, the MWI message is never sent. The
  -  same thing happens when checking a voicemail and marking it as read.
  -  (Closes issue ASTERISK-18002. Reported by Leif Madsen. Resolved by Richard
  -   Mudgett)
  -
  - * Resolve issue where wait for leader with Music On Hold allows crosstalk
  -  between participants. Parenthesis in the wrong position. Regression from issue
  -  #14365 when expanding conference flags to use 64 bits.
  -  (Closes issue #18418. Reported by MrHanMan. Patched by rmudgett)
  -
  - * Fix timerfd locking issue.
  -  (Closes ASTERISK-17867, ASTERISK-17415. Patched by kobaz)
  -
  - For a full list of changes in this release candidate, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.5-rc1


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.4.4-1
changelog:
  - The Asterisk Development Team has announced the release of Asterisk
  - versions 1.4.41.2, 1.6.2.18.2, and 1.8.4.4, which are security
  - releases.
  -
  - These releases are available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - The release of Asterisk 1.4.41.2, 1.6.2.18.2, and 1.8.4.4 resolves the
  - following issue:
  -
  - AST-2011-011: Asterisk may respond differently to SIP requests from an
  - invalid SIP user than it does to a user configured on the system, even
  - when the alwaysauthreject option is set in the configuration. This can
  - leak information about what SIP users are valid on the Asterisk
  - system.
  -
  - For more information about the details of this vulnerability, please
  - read the security advisory AST-2011-011, which was released at the
  - same time as this announcement.
  -
  - For a full list of changes in the current releases, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.41.2
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.18.2
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.4.4
  -
  - Security advisory AST-2011-011 is available at:
  -
  - http://downloads.asterisk.org/pub/security/AST-2011-011.pdf


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.4.3-2
changelog:
  - Move /var/run/asterisk to /run/asterisk
  - Add comments to systemd service file on how to mimic safe_asterisk functionality
  - Build more of the optional binaries
  - Install the tmpfiles.d configuration on Fedora 15


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.4.3-1
changelog:
  - The Asterisk Development Team has announced the release of Asterisk versions
  - 1.4.41.1, 1.6.2.18.1, and 1.8.4.3, which are security releases.
  -
  - These releases are available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - The release of Asterisk 1.4.41.1, 1.6.2.18, and 1.8.4.3 resolves several issues
  - as outlined below:
  -
  - * AST-2011-008: If a remote user sends a SIP packet containing a null,
  -  Asterisk assumes available data extends past the null to the
  -  end of the packet when the buffer is actually truncated when
  -  copied.  This causes SIP header parsing to modify data past
  -  the end of the buffer altering unrelated memory structures.
  -  This vulnerability does not affect TCP/TLS connections.
  -  -- Resolved in 1.6.2.18.1 and 1.8.4.3
  -
  - * AST-2011-009: A remote user sending a SIP packet containing a Contact header
  -  with a missing left angle bracket (<) causes Asterisk to
  -  access a null pointer.
  -  -- Resolved in 1.8.4.3
  -
  - * AST-2011-010: A memory address was inadvertently transmitted over the
  -  network via IAX2 via an option control frame and the remote party would try
  -  to access it.
  -  -- Resolved in 1.4.41.1, 1.6.2.18.1, and 1.8.4.3
  -
  - The issues and resolutions are described in the AST-2011-008, AST-2011-009, and
  - AST-2011-010 security advisories.
  -
  - For more information about the details of these vulnerabilities, please read
  - the security advisories AST-2011-008, AST-2011-009, and AST-2011-010, which were
  - released at the same time as this announcement.
  -
  - For a full list of changes in the current releases, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.41.1
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.18.1
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.4.3
  -
  - Security advisories AST-2011-008, AST-2011-009, and AST-2011-010 are available
  - at:
  -
  - http://downloads.asterisk.org/pub/security/AST-2011-008.pdf
  - http://downloads.asterisk.org/pub/security/AST-2011-009.pdf
  - http://downloads.asterisk.org/pub/security/AST-2011-010.pdf


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.4.2-1:
changelog:
  -
  - The Asterisk Development Team has announced the release of Asterisk
  - version 1.8.4.2, which is a security release for Asterisk 1.8.
  -
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - The release of Asterisk 1.8.4.2 resolves an issue with SIP URI
  - parsing which can lead to a remotely exploitable crash:
  -
  -    Remote Crash Vulnerability in SIP channel driver (AST-2011-007)
  -
  - The issue and resolution is described in the AST-2011-007 security
  - advisory.
  -
  - For more information about the details of this vulnerability, please
  - read the security advisory AST-2011-007, which was released at the
  - same time as this announcement.
  -
  - For a full list of changes in the current release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.4.2
  -
  - Security advisory AST-2011-007 is available at:
  -
  - http://downloads.asterisk.org/pub/security/AST-2011-007.pdf
  -
  - The Asterisk Development Team has announced the release of Asterisk 1.8.4.1.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - The release of Asterisk 1.8.4.1 resolves several issues reported by the
  - community. Without your help this release would not have been possible.
  - Thank you!
  -
  - Below is a list of issues resolved in this release:
  -
  -  * Fix our compliance with RFC 3261 section 18.2.2. (aka Cisco phone fix)
  -   (Closes issue #18951. Reported by jmls. Patched by wdoekes)
  -
  -  * Resolve a change in IPv6 header parsing due to the Cisco phone fix issue.
  -   This issue was found and reported by the Asterisk test suite.
  -   (Closes issue #18951. Patched by mnicholson)
  -
  -  * Resolve potential crash when using SIP TLS support.
  -   (Closes issue #19192. Reported by stknob. Patched by Chainsaw. Tested by
  -    vois, Chainsaw)
  -
  -  * Improve reliability when using SIP TLS.
  -   (Closes issue #19182. Reported by st. Patched by mnicholson)
  -
  -
  - For a full list of changes in this release candidate, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.4.1

  - The Asterisk Development Team has announced the release of Asterisk 1.8.4. This
  - release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - The release of Asterisk 1.8.4 resolves several issues reported by the community.
  - Without your help this release would not have been possible. Thank you!
  -
  - Below is a sample of the issues resolved in this release:
  -
  -  * Use SSLv23_client_method instead of old SSLv2 only.
  -   (Closes issue #19095, #19138. Reported, patched by tzafrir. Tested by russell
  -   and chazzam.
  -
  -  * Resolve crash in ast_mutex_init()
  -   (Patched by twilson)
  -
  -  * Resolution of several DTMF based attended transfer issues.
  -   (Closes issue #17999, #17096, #18395, #17273. Reported by iskatel, gelo,
  -   shihchuan, grecco. Patched by rmudgett)
  -
  -   NOTE: Be sure to read the ChangeLog for more information about these changes.
  -
  -  * Resolve deadlocks related to device states in chan_sip
  -   (Closes issue #18310. Reported, patched by one47. Patched by jpeeler)
  -
  -  * Resolve an issue with the Asterisk manager interface leaking memory when
  -   disabled.
  -   (Reported internally by kmorgan. Patched by russellb)
  -
  -  * Support greetingsfolder as documented in voicemail.conf.sample.
  -   (Closes issue #17870. Reported by edhorton. Patched by seanbright)
  -
  -  * Fix channel redirect out of MeetMe() and other issues with channel softhangup
  -   (Closes issue #18585. Reported by oej. Tested by oej, wedhorn, russellb.
  -   Patched by russellb)
  -
  -  * Fix voicemail sequencing for file based storage.
  -   (Closes issue #18498, #18486. Reported by JJCinAZ, bluefox. Patched by
  -   jpeeler)
  -
  -  * Set hangup cause in local_hangup so the proper return code of 486 instead of
  -   503 when using Local channels when the far sides returns a busy. Also affects
  -   CCSS in Asterisk 1.8+.
  -   (Patched by twilson)
  -
  -  * Fix issues with verbose messages not being output to the console.
  -   (Closes issue #18580. Reported by pabelanger. Patched by qwell)
  -
  -  * Fix Deadlock with attended transfer of SIP call
  -   (Closes issue #18837. Reported, patched by alecdavis. Tested by
  -   alecdavid, Irontec, ZX81, cmaj)
  -
  - Includes changes per AST-2011-005 and AST-2011-006
  - For a full list of changes in this release candidate, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.4
  -
  - Information about the security releases are available at:
  -
  - http://downloads.asterisk.org/pub/security/AST-2011-005.pdf
  - http://downloads.asterisk.org/pub/security/AST-2011-006.pdf


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.3.3-1
changelog:
  - The Asterisk Development Team has announced security releases for Asterisk
  - branches 1.4, 1.6.1, 1.6.2, and 1.8. The available security releases are
  - released as versions 1.4.40.1, 1.6.1.25, 1.6.2.17.3, and 1.8.3.3.
  -
  - These releases are available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - The releases of Asterisk 1.4.40.1, 1.6.1.25, 1.6.2.17.3, and 1.8.3.3 resolve two
  - issues:
  -
  - * File Descriptor Resource Exhaustion (AST-2011-005)
  - * Asterisk Manager User Shell Access (AST-2011-006)
  -
  - The issues and resolutions are described in the AST-2011-005 and AST-2011-006
  - security advisories.
  -
  - For more information about the details of these vulnerabilities, please read the
  - security advisories AST-2011-005 and AST-2011-006, which were released at the
  - same time as this announcement.
  -
  - For a full list of changes in the current releases, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.40.1
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.1.25
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.17.3
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.3.3
  -
  - Security advisory AST-2011-005 and AST-2011-006 are available at:
  -
  - http://downloads.asterisk.org/pub/security/AST-2011-005.pdf
  - http://downloads.asterisk.org/pub/security/AST-2011-006.pdf


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.3.2-1
changelog:
  - The Asterisk Development Team has announced security releases for Asterisk
  - branches 1.6.1, 1.6.2, and 1.8. The available security releases are
  - released as versions 1.6.1.24, 1.6.2.17.2, and 1.8.3.2.
  -
  - These releases are available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - ** This is a re-release of Asterisk 1.6.1.23, 1.6.2.17.1 and 1.8.3.1 which
  -   contained a bug which caused duplicate manager entries (issue #18987).
  -
  - The releases of Asterisk 1.6.1.24, 1.6.2.17.2, and 1.8.3.2 resolve two issues:
  -
  -  * Resource exhaustion in Asterisk Manager Interface (AST-2011-003)
  -  * Remote crash vulnerability in TCP/TLS server (AST-2011-004)
  -
  - The issues and resolutions are described in the AST-2011-003 and AST-2011-004
  - security advisories.
  -
  - For more information about the details of these vulnerabilities, please read the
  - security advisories AST-2011-003 and AST-2011-004, which were released at the
  - same time as this announcement.
  -
  - For a full list of changes in the current releases, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.1.24
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.17.2
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.3.2
  -
  - Security advisory AST-2011-003 and AST-2011-004 are available at:
  -
  - http://downloads.asterisk.org/pub/security/AST-2011-003.pdf
  - http://downloads.asterisk.org/pub/security/AST-2011-004.pdf


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.3.1-1
changelog:
  - The Asterisk Development Team has announced security releases for Asterisk
  - branches 1.6.1, 1.6.2, and 1.8. The available security releases are
  - released as versions 1.6.1.23, 1.6.2.17.1, and 1.8.3.1.
  -
  - These releases are available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - The releases of Asterisk 1.6.1.23, 1.6.2.17.1, and 1.8.3.1 resolve two issues:
  -
  -  * Resource exhaustion in Asterisk Manager Interface (AST-2011-003)
  -  * Remote crash vulnerability in TCP/TLS server (AST-2011-004)
  -
  - The issues and resolutions are described in the AST-2011-003 and AST-2011-004
  - security advisories.
  -
  - For more information about the details of these vulnerabilities, please read the
  - security advisories AST-2011-003 and AST-2011-004, which were released at the
  - same time as this announcement.
  -
  - For a full list of changes in the current releases, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.1.23
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.17.1
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.3.1
  -
  - Security advisory AST-2011-003 and AST-2011-004 are available at:
  -
  - http://downloads.asterisk.org/pub/security/AST-2011-003.pdf
  - http://downloads.asterisk.org/pub/security/AST-2011-004.pdf


author: <jeff@ocjtech.us> - 1.8.3-1
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 1.8.3. This
  - release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - The release of Asterisk 1.8.3 resolves several issues reported by the community
  - and would have not been possible without your participation. Thank you!
  -
  - The following is a sample of the issues resolved in this release:
  -
  - * Resolve duplicated data in the AstDB when using DIALGROUP()
  -  (Closes issue #18091. Reported by bunny. Patched by tilghman)
  -
  - * Ensure the ipaddr field in realtime is large enough to handle IPv6 addresses.
  -  (Closes issue #18464. Reported, patched by IgorG)
  -
  - * Reworking parsing of mwi => lines to resolve a segfault. Also add a set of
  -  unit tests for the function that does the parsing.
  -  (Closes issue #18350. Reported by gbour. Patched by Marquis)
  -
  - * When using cdr_pgsql the billsec field was not populated correctly on
  -  unanswered calls.
  -  (Closes issue #18406. Reported by joscas. Patched by tilghman)
  -
  - * Resolve memory leak in iCalendar and Exchange calendaring modules.
  -  (Closes issue #18521. Reported, patched by pitel. Tested by cervajs)
  -
  - * This version of Asterisk includes the new Compiler Flags option
  -  BETTER_BACKTRACES which uses libbfd to search for better symbol information
  -  within both the Asterisk binary, as well as loaded modules, to assist when
  -  using inline backtraces to track down problems.
  -  (Patched by tilghman)
  -
  - * Resolve issue where no Music On Hold may be triggered when using
  -  res_timing_dahdi.
  -  (Closes issues #18262. Reported by francesco_r. Patched by cjacobson. Tested
  -  by francesco_r, rfrantik, one47)
  -
  - * Resolve a memory leak when the Asterisk Manager Interface is disabled.
  -  (Reported internally by kmorgan. Patched by russellb)
  -
  - * Reimplemented fax session reservation to reverse the ABI breakage introduced
  -  in r297486.
  -  (Reported internally. Patched by mnicholson)
  -
  - * Fix regression that changed behavior of queues when ringing a queue member.
  -  (Closes issue #18747, #18733. Reported by vrban. Patched by qwell.)
  -
  - * Resolve deadlock involving REFER.
  -  (Closes issue #18403. Reported, tested by jthurman. Patched by jpeeler.)
  -
  - Additionally, this release has the changes related to security bulletin
  - AST-2011-002 which can be found at
  - http://downloads.asterisk.org/pub/security/AST-2011-002.pdf
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.3


author: <jeff@ocjtech.us> - 1.8.3-0.7.rc3
changelog:
  -
  - The Asterisk Development Team has announced the third release candidate of
  - Asterisk 1.8.3. This release candidate is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - The release of Asterisk 1.8.3-rc3 resolves the following issues in addition to
  - those included in 1.8.3-rc1 and 1.8.3-rc2:
  -
  - *  Fix regression that changed behavior of queues when ringing a queue member.
  -   (Closes issue #18747, #18733. Reported by vrban. Patched by qwell.)
  -
  - * Resolve deadlock involving REFER.
  -  (Closes issue #18403. Reported, tested by jthurman. Patched by jpeeler.)
  -
  - For a full list of changes in this release candidate, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.3-rc3


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.3-0.2.rc2
changelog:
  The Asterisk Development Team has announced the second release candidate of
  Asterisk 1.8.3. This release candidate is available for immediate download at
  http://downloads.asterisk.org/pub/telephony/asterisk/

  The release of Asterisk 1.8.3-rc2 resolves the following issues in addition to
  those included in 1.8.3-rc1:

   * Resolve issue where no Music On Hold may be triggered when using
    res_timing_dahdi.
    (Closes issues #18262. Reported by francesco_r. Patched by cjacobson. Tested
     by francesco_r, rfrantik, one47)

   * Resolve a memory leak when the Asterisk Manager Interface is disabled.
    (Reported internally by kmorgan. Patched by russellb)

   * Reimplemented fax session reservation to reverse the ABI breakage introduced
    in r297486.
    (Reported internally. Patched by mnicholson)

  For a full list of changes in this release candidate, please see the ChangeLog:

  http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.3-rc2


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.3-0.1.rc1
changelog:
  -
  - The Asterisk Development Team has announced the first release candidate of
  - Asterisk 1.8.3. This release candidate is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - The release of Asterisk 1.8.3-rc1 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release candidate:
  -
  -  * Resolve duplicated data in the AstDB when using DIALGROUP()
  -   (Closes issue #18091. Reported by bunny. Patched by tilghman)
  -
  -  * Ensure the ipaddr field in realtime is large enough to handle IPv6 addresses.
  -   (Closes issue #18464. Reported, patched by IgorG)
  -
  -  * Reworking parsing of mwi => lines to resolve a segfault. Also add a set of
  -   unit tests for the function that does the parsing.
  -   (Closes issue #18350. Reported by gbour. Patched by Marquis)
  -
  -  * When using cdr_pgsql the billsec field was not populated correctly on
  -   unanswered calls.
  -   (Closes issue #18406. Reported by joscas. Patched by tilghman)
  -
  -  * Resolve memory leak in iCalendar and Exchange calendaring modules.
  -   (Closes issue #18521. Reported, patched by pitel. Tested by cervajs)
  -
  -  * This version of Asterisk includes the new Compiler Flags option
  -   BETTER_BACKTRACES which uses libbfd to search for better symbol information
  -   within both the Asterisk binary, as well as loaded modules, to assist when
  -   using inline backtraces to track down problems.
  -   (Patched by tilghman)


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.2.3-1
changelog:
  -
  - The Asterisk Development Team has announced the release of Asterisk 1.8.2.3.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - The release of Asterisk 1.8.2.3 resolves the following issue:
  -
  -  * Reimplemented fax session reservation to reverse the ABI breakage introduced
  -   in r297486.
  -   (Reported by Jeremy Kister on the asterisk-users mailing list. Patched by
  -   mnicholson)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.2.3


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.2.2-1
changelog:
  -
  - The Asterisk Development Team has announced a release for the security issue
  - described in AST-2011-001.
  -
  - Due to a failed merge, Asterisk 1.8.2.1 which should have included the security
  - fix did not. Asterisk 1.8.2.2 contains the the changes which should have been
  - included in Asterisk 1.8.2.1.
  -
  - This releases is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - The releases of Asterisk 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.2,
  - 1.8.1.2, and 1.8.2.2 resolve an issue when forming an outgoing SIP request while
  - in pedantic mode, which can cause a stack buffer to be made to overflow if
  - supplied with carefully crafted caller ID information. The issue and resolution
  - are described in the AST-2011-001 security advisory.
  -
  - For more information about the details of this vulnerability, please read the
  - security advisory AST-2011-001, which was released at the same time as this
  - announcement.
  -
  - For a full list of changes in the current release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.2.2
  -
  - Security advisory AST-2011-001 is available at:
  -
  - http://downloads.asterisk.org/pub/security/AST-2011-001.pdf


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.2.1-1
changelog:
  -
  - The Asterisk Development Team has announced security releases for the following
  - versions of Asterisk:
  -
  - * 1.4.38.1
  - * 1.4.39.1
  - * 1.6.1.21
  - * 1.6.2.15.1
  - * 1.6.2.16.1
  - * 1.8.1.2
  - * 1.8.2.1
  -
  - These releases are available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - The releases of Asterisk 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.2,
  - 1.8.1.2, and 1.8.2.1 resolve an issue when forming an outgoing SIP request while
  - in pedantic mode, which can cause a stack buffer to be made to overflow if
  - supplied with carefully crafted caller ID information. The issue and resolution
  - are described in the AST-2011-001 security advisory.
  -
  - For more information about the details of this vulnerability, please read the
  - security advisory AST-2011-001, which was released at the same time as this
  - announcement.
  -
  - For a full list of changes in the current releases, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.38.1
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.4.39.1
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.1.21
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.15.1
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.6.2.16.1
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.1.2
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.2.1
  -
  - Security advisory AST-2011-001 is available at:
  -
  - http://downloads.asterisk.org/pub/security/AST-2011-001.pdf


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.2-1
changelog:
  -
  - The Asterisk Development Team has announced the release of Asterisk 1.8.2. This
  - release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - The release of Asterisk 1.8.2 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release:
  -
  - * 'sip notify clear-mwi' needs terminating CRLF.
  -  (Closes issue #18275. Reported, patched by klaus3000)
  -
  - * Patch for deadlock from ordering issue between channel/queue locks in
  -  app_queue (set_queue_variables).
  -  (Closes issue #18031. Reported by rain. Patched by bbryant)
  -
  - * Fix cache of device state changes for multiple servers.
  -  (Closes issue #18284, #18280. Reported, tested by klaus3000. Patched, tested
  -  by russellb)
  -
  - * Resolve issue where channel redirect function (CLI or AMI) hangs up the call
  -  instead of redirecting the call.
  -  (Closes issue #18171. Reported by: SantaFox)
  -  (Closes issue #18185. Reported by: kwemheuer)
  -  (Closes issue #18211. Reported by: zahir_koradia)
  -  (Closes issue #18230. Reported by: vmarrone)
  -  (Closes issue #18299. Reported by: mbrevda)
  -  (Closes issue #18322. Reported by: nerbos)
  -
  - * Fix reloading of peer when a user is requested. Prevent peer reloading from
  -  causing multiple MWI subscriptions to be created when using realtime.
  -  (Closes issue #18342. Reported, patched by nivek.)
  -
  - * Fix XMPP PubSub-based distributed device state. Initialize pubsubflags to 0
  -  so res_jabber doesn't think there is already an XMPP connection sending
  -  device state. Also clean up CLI commands a bit.
  -  (Closes issue #18272. Reported by klaus3000. Patched by Marquis42)
  -
  - * Don't crash after Set(CDR(userfield)=...) in ast_bridge_call. Instead of
  -  setting peer->cdr = NULL, set it to not post.
  -  (Closes issue #18415. Reported by macbrody. Patched, tested by jsolares)
  -
  - * Fixes issue with outbound google voice calls not working. Thanks to az1234
  -  and nevermind_quack for their input in helping debug the issue.
  -  (Closes issue #18412. Reported by nevermind_quack. Patched by dvossel)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.2


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.1.1-1
changelog:
  -
  - The Asterisk Development Team has announced the release of Asterisk 1.8.1.1.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - The release of Asterisk 1.8.1.1 resolves two issues reported by the community
  - since the release of Asterisk 1.8.1.
  -
  -  * Don't crash after Set(CDR(userfield)=...) in ast_bridge_call. Instead of
  -   setting peer->cdr = NULL, set it to not post.
  -   (Closes issue #18415. Reported by macbrody. Patched, tested by jsolares)
  -
  -  * Fixes issue with outbound google voice calls not working. Thanks to az1234
  -   and nevermind_quack for their input in helping debug the issue.
  -   (Closes issue #18412. Reported by nevermind_quack. Patched by dvossel)
  -
  - For a full list of changes in this release candidate, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.1.1


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.1-1
changelog:
  -
  - The Asterisk Development Team has announced the release of Asterisk 1.8.1. This
  - release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - The release of Asterisk 1.8.1 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release:
  -
  - * Fix issue when using directmedia. Asterisk needs to limit the codecs offered
  -   to just the ones that both sides recognize, otherwise they may end up sending
  -   audio that the other side doesn't understand.
  -   (Closes issue #17403. Reported, patched by one47. Tested by one47, falves11)
  -
  - * Resolve issue where Party A in an analog 3-way call would continue to hear
  -   ringback after party C answers.
  -   (Patched by rmudgett)
  -
  - * Fix playback failure when using IAX with the timerfd module.
  -   (Closes issue #18110. Reported, tested by tpanton. Patched by jpeeler)
  -
  - * Fix problem with qualify option packets for realtime peers never stopping.
  -   The option packets not only never stopped, but if a realtime peer was not in
  -   the peer list multiple options dialogs could accumulate over time.
  -   (Closes issue #16382. Reported by lftsy. Tested by zerohalo. Patched by
  -   jpeeler)
  -
  - * Fix issue where it is possible to crash Asterisk by feeding the curl engine
  -   invalid data.
  -   (Closes issue #18161. Reported by wdoekes. Patched by tilghman)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.1


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.0-1
changelog:
  - The Asterisk Development Team is proud to announce the release of Asterisk
  - 1.8.0. This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - Asterisk 1.8 is the next major release series of Asterisk. It will be a Long
  - Term Support (LTS) release, similar to Asterisk 1.4. For more information about
  - support time lines for Asterisk releases, see the Asterisk versions page.
  -
  - http://www.asterisk.org/asterisk-versions
  -
  - The release of Asterisk 1.8.0 would not have been possible without the support
  - and contributions of the community. Since Asterisk 1.6.2, we've had over 500
  - reporters, more than 300 testers and greater than 200 developers contributed to
  - this release.
  -
  - You can find a summary of the work involved with the 1.8.0 release in the
  - sumary:
  -
  - http://svn.asterisk.org/svn/asterisk/tags/1.8.0/asterisk-1.8.0-summary.txt
  -
  - A short list of available features includes:
  -
  -     * Secure RTP
  -     * IPv6 Support in the SIP channel driver
  -     * Connected Party Identification Support
  -     * Calendaring Integration
  -     * A new call logging system, Channel Event Logging (CEL)
  -     * Distributed Device State using Jabber/XMPP PubSub
  -     * Call Completion Supplementary Services support
  -     * Advice of Charge support
  -     * Much, much more!
  -
  - A full list of new features can be found in the CHANGES file.
  -
  - http://svn.digium.com/view/asterisk/branches/1.8/CHANGES?view=markup
  -
  - For a full list of changes in the current release candidate, please see the
  - ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.0
  -
  - Thank you for your continued support of Asterisk!


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.0-0.8.rc5:
changelog:
  -
  - The release of Asterisk 1.8.0-rc5 was triggered by some last minute platform
  - compatibility IPv6 changes. In addition, the availability of the English sound
  - prompts with Australian accents has been added.
  -
  - A full list of new features can be found in the CHANGES file.
  -
  - http://svn.digium.com/view/asterisk/branches/1.8/CHANGES?view=markup
  -
  - For a full list of changes in the current release candidate, please see the
  - ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.0-rc5
  -
  - This release candidate contains fixes since the last release candidate as
  - reported by the community. A sampling of the changes in this release candidate
  - include:
  -
  -  * Additional fixups in chan_gtalk that allow outbound calls to both Google
  -    Talk and Google Voice recipients. Adds new chan_gtalk enhancements externip
  -    and stunaddr.
  -    (Closes issue #13971. Patched by dvossel)
  -
  -  * Resolve manager crash issue.
  -    (Closes issue #17994. Reported by vrban. Patchd by dvossel)
  -
  -  * Documentation updates for sample configuration files.
  -    (Closes issues #18107, #18101. Reported, patched by lathama, lmadsen)
  -
  -  * Resolve issue where faxdetect would only detect the first fax call in
  -    chan_dahdi.
  -    (Closes issue #18116. Reported by seandarcy. Patched by rmudgett)
  -
  -  * Resolve issue where a channel that is setup and torn down *very* quickly may
  -    not have the right call disposition or ${DIALSTATUS}.
  -    (Closes issue #16946. Reported by davidw. Review
  -     https://reviewboard.asterisk.org/r/740/)
  -
  -  * Set TCLASS field of IPv6 header when SIP QoS options are set.
  -    (Closes issue #18099. Reported by jamesnet. Patched by dvossel)
  -
  -  * Resolve issue where Asterisk could crash on shutdown when using SRTP.
  -    (Closes issue #18085. Reported by st. Patched by twilson)
  -
  -  * Fix issue where peers host port would be lost on a SIP reload.
  -    (Closes issue #18135. Reported, tested by lmadsen. Patched by dvossel)
  -
  - A short list of available features includes:
  -
  -   * Secure RTP
  -   * IPv6 Support in the SIP channel driver
  -   * Connected Party Identification Support
  -   * Calendaring Integration
  -   * A new call logging system, Channel Event Logging (CEL)
  -   * Distributed Device State using Jabber/XMPP PubSub
  -   * Call Completion Supplementary Services support
  -   * Advice of Charge support
  -   * Much, much more!
  -
  - A full list of new features can be found in the CHANGES file.
  -
  - http://svn.digium.com/view/asterisk/branches/1.8/CHANGES?view=markup
  -
  - For a full list of changes in the current release candidate, please see the
  - ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.0-rc4


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.0-0.7.rc3
changelog:
  - This release candidate contains fixes since the release candidate as reported by
  - the community. A sampling of the changes in this release candidate include:
  -
  -  * Still build chan_sip even if res_crypto cannot be built (use, but not depend)
  -    (Reported by a user on the mailing list. Patched by tilghman)
  -
  -  * Get notifications for call files only when a file is closed, not when created
  -    (Closes issue #17924. Reported by mkeuter. Patched by abeldeck)
  -
  -  * Fixes to chan_gtalk to allow outbound DTMF support to work correctly. Gtalk
  -    expects the DTMF to arrive on the RTP stream and not via jingle DTMF
  -    signalling.
  -    (Patched by dvossel. Tested by malcolmd)
  -
  -  * Fixes to allow chan_gtalk to communicate with the Gmail web client.
  -    (Patched by phsultan and dvossel)
  -
  -  * Fix to GET DATA to allow audio to be streamed via an AGI.
  -    (Closes issue #18001. Reported by jamicque. Patched by tilghman)
  -
  -  * Resolve dnsmgr memory corruption in chan_iax2.
  -    (Closes issue #17902. Reported by afried. Patched by russell, dvossel)
  -
  - A short list of available features includes:
  -
  -  * Secure RTP
  -  * IPv6 Support in the SIP channel driver
  -  * Connected Party Identification Support
  -  * Calendaring Integration
  -  * A new call logging system, Channel Event Logging (CEL)
  -  * Distributed Device State using Jabber/XMPP PubSub
  -  * Call Completion Supplementary Services support
  -  * Advice of Charge support
  -  * Much, much more!
  -
  - A full list of new features can be found in the CHANGES file.
  -
  - http://svn.digium.com/view/asterisk/branches/1.8/CHANGES?view=checkout
  -
  - For a full list of changes in the current release candidate, please see the
  - ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.0-rc3


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.0-0.6.rc2
changelog:
  - This release candidate contains fixes since the last beta release as reported by
  - the community. A sampling of the changes in this release candidate include:
  -
  -  * Add slin16 support for format_wav (new wav16 file extension)
  -    (Closes issue #15029. Reported, patched by andrew. Tested by Qwell)
  -
  -  * Fixes a bug in manager.c where the default configuration values weren't reset
  -    when the manager configuration was reloaded.
  -    (Closes issue #17917. Reported by lmadsen. Patched by bbryant)
  -
  -  * Various fixes for the calendar modules.
  -    (Patched by Jan Kalab.
  -     Reviewboard: https://reviewboard.asterisk.org/r/880/
  -     Closes issue #17877. Review: https://reviewboard.asterisk.org/r/916/
  -     Closes issue #17776. Review: https://reviewboard.asterisk.org/r/921/)
  -
  -  * Add CHANNEL(checkhangup) to check whether a channel is in the process of
  -    being hung up.
  -    (Closes issue #17652. Reported, patched by kobaz)
  -
  -  * Fix a bug with MeetMe where after announcing the amount of time left in a
  -    conference, if music on hold was playing, it doesn't restart.
  -    (Closes issue #17408, Reported, patched by sysreq)
  -
  -  * Fix interoperability problems with session timer behavior in Asterisk.
  -    (Closes issue #17005. Reported by alexcarey. Patched by dvossel)
  -
  -  * Rate limit calls to fsync() to 1 per second after astdb updates. Astdb was
  -    determined to be one of the most significant bottlenecks in SIP registration
  -    processing. This patch improved the speed of an astdb load test by 50000%
  -    (yes, Fifty-Thousand Percent). On this particular load test setup, this
  -    doubled the number of SIP registrations the server could handle.
  -    (Review: https://reviewboard.asterisk.org/r/825/)
  -
  -  * Don't clear the username from a realtime database when a registration
  -    expires. Non-realtime chan_sip does not clear the username from memory when a
  -    registration expiries so realtime probably shouldn't either.
  -    (Closes issue #17551. Reported, patched by: ricardolandim. Patched by
  -     mnicholson)
  -
  -  * Don't hang up a call on an SRTP unprotect failure. Also make it more obvious
  -    when there is an issue en/decrypting.
  -    (Closes issue #17563. Reported by Alexcr. Patched by sfritsch. Tested by
  -     twilson)
  -
  -  * Many more issues. This is a significant upgrade over Asterisk 1.8.0 beta 5!
  -
  - A short list of available features includes:
  -
  -  * Secure RTP
  -  * IPv6 Support in the SIP channel driver
  -  * Connected Party Identification Support
  -  * Calendaring Integration
  -  * A new call logging system, Channel Event Logging (CEL)
  -  * Distributed Device State using Jabber/XMPP PubSub
  -  * Call Completion Supplementary Services support
  -  * Advice of Charge support
  -  * Much, much more!
  -
  - A full list of new features can be found in the CHANGES file.
  -
  - http://svn.digium.com/view/asterisk/branches/1.8/CHANGES?view=checkout
  -
  - For a full list of changes in the current release candidate, please see the
  - ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.0-rc2


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.0-0.5.beta5
changelog:
  - This release contains fixes since the last beta release as reported by the
  - community. A sampling of the changes in this release include:
  -
  -  * Fix issue where TOS is no longer set on RTP packets.
  -    (Closes issue #17890. Reported, patched by elguero)
  -
  -  * Change pedantic default value in chan_sip from 'no' to 'yes'
  -
  -  * Asterisk now dynamically builds the "Supported" header depending on what is
  -    enabled/disabled in sip.conf. Session timers used to always be advertised as
  -    being supported even when they were disabled in the configuration.
  -    (Related to issue #17005. Patched by dvossel)
  -
  -  * Convert MOH to use generic timers.
  -    (Closes issue #17726. Reported by lmadsen. Patched by tilghman)
  -
  -  * Fix SRTP for changing SSRC and multiple a=crypto SDP lines. Adding code to
  -    Asterisk that changed the SSRC during bridges and masquerades broke SRTP
  -    functionality. Also broken was handling the situation where an incoming
  -    INVITE had more than one crypto offer.
  -    (Closes issue #17563. Reported by Alexcr. Patched by twilson)
  -
  - Asterisk 1.8 contains many new features over previous releases of Asterisk.
  - A short list of included features includes:
  -
  -     * Secure RTP
  -     * IPv6 Support in the SIP Channel
  -     * Connected Party Identification Support
  -     * Calendaring Integration
  -     * A new call logging system, Channel Event Logging (CEL)
  -     * Distributed Device State using Jabber/XMPP PubSub
  -     * Call Completion Supplementary Services support
  -     * Advice of Charge support
  -     * Much, much more!
  -
  - A full list of new features can be found in the CHANGES file.
  -
  - http://svn.digium.com/view/asterisk/branches/1.8/CHANGES?view=checkout
  -
  - For a full list of changes in the current release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.0-beta5


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.0-0.4.beta4
changelog:
  - This release contains fixes since the last beta release as reported by the
  - community. A sampling of the changes in this release include:
  -
  -  * Fix parsing of IPv6 address literals in outboundproxy
  -    (Closes issue #17757. Reported by oej. Patched by sperreault)
  -
  -  * Change the default value for alwaysauthreject in sip.conf to "yes".
  -    (Closes issue #17756. Reported by oej)
  -
  -  * Remove current STUN support from chan_sip.c. This change removes the current
  -    broken/useless STUN support from chan_sip.
  -    (Closes issue #17622. Reported by philipp2.
  -     Review: https://reviewboard.asterisk.org/r/855/)
  -
  -  * PRI CCSS may use a stale dial string for the recall dial string. If an
  -    outgoing call negotiates a different B channel than initially requested, the
  -    saved original dial string was not transferred to the new B channel. CCSS
  -    uses that dial string to generate the recall dial string.
  -    (Patched by rmudgett)
  -
  -  * Split _all_ arguments before parsing them. This fixes multicast RTP paging
  -    using linksys mode.
  -    (Patched by russellb)
  -
  -  * Expand cel_custom.conf.sample. Include the usage of CSV_QUOTE() to ensure
  -    data has valid CSV formatting. Also list the special CEL variables that are
  -    available for use in the mapping. There are also several other CEL fixes in
  -    this release.
  -    (Patched by russellb)
  -
  - Asterisk 1.8 contains many new features over previous releases of Asterisk.
  - A short list of included features includes:
  -
  -     * Secure RTP
  -     * IPv6 Support in the SIP Channel
  -     * Connected Party Identification Support
  -     * Calendaring Integration
  -     * A new call logging system, Channel Event Logging (CEL)
  -     * Distributed Device State using Jabber/XMPP PubSub
  -     * Call Completion Supplementary Services support
  -     * Advice of Charge support
  -     * Much, much more!
  -
  - A full list of new features can be found in the CHANGES file.
  -
  - http://svn.digium.com/view/asterisk/branches/1.8/CHANGES?view=checkout
  -
  - For a full list of changes in the current release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.0-beta4


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.0-0.3.beta3
changelog:
  -
  - This release contains fixes since the last beta release as reported by the
  - community. A sampling of the changes in this release include:
  -
  -  * Fix a regression where HTTP would always be enabled regardless of setting.
  -    (Closes issue #17708. Reported, patched by pabelanger)
  -
  -  * ACL errors displayed on screen when using dynamic_exclude_static in sip.conf
  -    (Closes issue #17717. Reported by Dennis DeDonatis. Patched by mmichelson)
  -
  -  * Support "channels" in addition to "channel" in chan_dahdi.conf.
  -    (https://reviewboard.asterisk.org/r/804)
  -
  -  * Fix parsing error in sip_sipredirect(). The code was written in a way that
  -    did a bad job of parsing the port out of a URI. Specifically, it would do
  -    badly when dealing with an IPv6 address.
  -    (Closes issue #17661. Reported by oej. Patched by mmichelson)
  -
  -  * Fix inband DTMF detection on outgoing ISDN calls.
  -    (Patched by russellb and rmudgett)
  -
  -  * Fixes issue with translator frame not getting freed. This issue prevented
  -    g729 licenses from being freed up.
  -    (Closes issue #17630. Reported by manvirr. Patched by dvossel)
  -
  -  * Fixed IPv6-related SIP parsing bugs and updated documention.
  -    (Reported by oej. Patched by sperreault)
  -
  -  * Add new, self-contained feature FIELDNUM(). Returns a 1-based index into a
  -    list of a specified item. Matches up with FIELDQTY() and CUT().
  -    (Closes #17713. Reported, patched by gareth. Tested by tilghman)
  -
  - Asterisk 1.8 contains many new features over previous releases of Asterisk.
  - A short list of included features includes:
  -
  -     * Secure RTP
  -     * IPv6 Support
  -     * Connected Party Identification Support
  -     * Calendaring Integration
  -     * A new call logging system, Channel Event Logging (CEL)
  -     * Distributed Device State using Jabber/XMPP PubSub
  -     * Call Completion Supplementary Services support
  -     * Advice of Charge support
  -     * Much, much more!
  -
  - A full list of new features can be found in the CHANGES file.
  -
  - http://svn.digium.com/view/asterisk/branches/1.8/CHANGES?view=checkout
  -
  - For a full list of changes in the current release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.0-beta3


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.0-0.1.beta2
changelog:
  - Update to 1.8.0-beta2
  - Disable building chan_misdn until compilation errors are figured out (https://issues.asterisk.org/view.php?id=14333)
  - Start stripping tarballs again because Digium added MP3 code :(


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.2.10-1
changelog:
  -
  - The following are a few of the issues resolved by community developers:
  -
  -  * Allow users to specify a port for DUNDI peers.
  -    (Closes issue #17056. Reported, patched by klaus3000)
  -
  -  * Decrease the module ref count in sip_hangup when SIP_DEFER_BYE_ON_TRANSFER is
  -    set.
  -    (Closes issue #16815. Reported, patched by rain)
  -
  -  * If there is realtime configuration, it does not get re-read on reload unless
  -    the config file also changes.
  -    (Closes issue #16982. Reported, patched by dmitri)
  -
  -  * Send AgentComplete manager event for attended transfers.
  -    (Closes issue #16819. Reported, patched by elbriga)
  -
  -  * Correct manager variable 'EventList' case.
  -    (Closes issue #17520. Reported, patched by kobaz)
  -
  - In addition, changes to res_timing_pthread that should make it more stable have
  - also been implemented.
  -
  - For a full list of changes in the current release, please see the
  - ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.6.2.10


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.2.7-1
changelog:
  -  * Fix building CDR and CEL SQLite3 modules.
  -    (Closes issue #17017. Reported by alephlg. Patched by seanbright)
  -
  -  * Resolve crash in SLAtrunk when the specified trunk doesn't exist.
  -    (Reported in #asterisk-dev by philipp64. Patched by seanbright)
  -
  -  * Include an extra newline after "Aliased CLI command" to get back the prompt.
  -    (Issue #16978. Reported by jw-asterisk. Tested, patched by seanbright)
  -
  -  * Prevent segfault if bad magic number is encountered.
  -    (Issue #17037. Reported, patched by alecdavis)
  -
  -  * Update code to reflect that handle_speechset has 4 arguments.
  -    (Closes issue #17093. Reported, patched by gpatri. Tested by pabelanger,
  -     mmichelson)
  -
  -  * Resolve a deadlock in chan_local.
  -    (Closes issue #16840. Reported, patched by bzing2, russell. Tested by bzing2)


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.2.6-1
changelog:
  - Update to final 1.6.2.6
  -
  - The following are a few of the issues resolved by community developers:
  -
  -  * Make sure to clear red alarm after polarity reversal.
  -    (Closes issue #14163. Reported, patched by jedi98. Tested by mattbrown,
  -     Chainsaw, mikeeccleston)
  -
  -  * Fix problem with duplicate TXREQ packets in chan_iax2
  -    (Closes issue #16904. Reported, patched by rain. Tested by rain, dvossel)
  -
  -  * Fix crash in app_voicemail related to message counting.
  -    (Closes issue #16921. Reported, tested by whardier. Patched by seanbright)
  -
  -  * Overlap receiving: Automatically send CALL PROCEEDING when dialplan starts
  -    (Reported, Patched, and Tested by alecdavis)
  -
  -  * For T.38 reINVITEs treat a 606 the same as a 488.
  -    (Closes issue #16792. Reported, patched by vrban)
  -
  -  * Fix ConfBridge crash when no timing module is loaded.
  -    (Closes issue #16471. Reported, tested by kjotte. Patched, tested by junky)
  -
  - For a full list of changes in this releases, please see the ChangeLog:
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.6.2.6


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.2.5-1
changelog:
  - Update to 1.6.2.5
  -
  -         * AST-2010-002: Invalid parsing of ACL rules can compromise security


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.2.4-1
changelog:
  - Update to 1.6.2.4
  -
  -        * AST-2010-002: This security release is intended to raise awareness
  -          of how it is possible to insert malicious strings into dialplans,
  -          and to advise developers to read the best practices documents so
  -          that they may easily avoid these dangers.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.2.2-1
changelog:
  - Update to 1.6.2.2
  -
  -	* AST-2010-001: An attacker attempting to negotiate T.38 over SIP can
  -	  remotely crash Asterisk by modifying the FaxMaxDatagram field of
  -	  the SDP to contain either a negative or exceptionally large value.
  -	  The same crash occurs when the FaxMaxDatagram field is omitted from
  -	  the SDP as well.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.2.1-1
changelog:
  - Update to 1.6.2.1 final:
  -
  - * CLI 'queue show' formatting fix.
  -   (Closes issue #16078. Reported by RoadKill. Tested by dvossel. Patched by
  -    ppyy.)
  -
  - * Fix misreverting from 177158.
  -   (Closes issue #15725. Reported, Tested by shanermn. Patched by dimas.)
  -
  - * Fixes subscriptions being lost after 'module reload'.
  -   (Closes issue #16093. Reported by jlaroff. Patched by dvossel.)
  -
  - * app_queue segfaults if realtime field uniqueid is NULL
  -  (Closes issue #16385. Reported, Tested, Patched by haakon.)
  -
  - * Fix to Monitor which previously assumed the file to write to did not contain
  -   pathing.
  -   (Closes issue #16377, #16376. Reported by bcnit. Patched by dant.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.2.0-0.8.rc3
changelog:
  - Add an AST_EXTRA_ARGS option to the init script
  - have the init script to cd to /var/spool/asterisk to prevent annoying message


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.2.0-0.7.rc3
changelog:
  - Compile against gmime 2.2 instead of gmime 2.4 because the patch to convert the API calls from 2.2 to 2.4 caused crashes.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.2.0-0.2.rc2
changelog:
  - Package internal help.
  - Fix up some more paths in the configs so that everything ends up where we want them.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.2.0-0.1.rc2
changelog:
  - Update to 1.6.2.0-rc2
  - We no longer need to strip the tarball as it no longer includes non-free items.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.1.6-1
changelog:
  - Update to 1.6.1.6
  - Drop patches that are too troublesome to maintain anymore or have been integrated upstream.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.1-0.23.rc1
changelog:
  - Rebuild to pick up new AIS and ODBC deps.
  - Update script that strips out bad content from tarball to do the
    download and to check the GPG signature.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.1-0.21.rc1
changelog:
  - Update to 1.6.1-rc1
  - Add backport of conference bridging that is slated for 1.6.2
  - Add patches to conference bridging that implement CLI apps


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.0-0.14.beta9
changelog:
  - Update to 1.6.0-beta9.
  - Update patches so that they apply cleanly.
  - Temporarily disable app_conference patch as it doesn't compile
  - config/scripts/postgres_cdr.sql has been merged into realtime_pgsql.sql
  - Re-add the asterisk-strip.sh script as a source file.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.0-0.12.beta7.1
changelog:
  - Return to stripped tarballs since there's more non-free content in
    the Asterisk tarballs than I thought.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.0-0.11.beta7.1
changelog:
  - Update to 1.6.0-beta7.1
  - Update patches
  - Back out some changes that were made because beta7 was tagged from
    the wrong branch.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.0-0.10.beta7
changelog:
  - Update to 1.6.0-beta7
  - The Asterisk tarball no longer contains the iLBC code, so we can
    directly use the upstream tarball without having to modify it.
  - Get rid of the asterisk-strip.sh script since it's no longer needed.
  - Diable build of codec_ilbc and format_ilbc (these do not contain any
    legally suspect code so they can be included in the tarball but it's
    pointless building them).
  - Update chan_mobile patch to fix API breakages.
  - Add a patch to chan_usbradio to fix API breakages.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.0-0.8.beta6
changelog:
  - Update patches.
  - Add patch to compile against external libedit rather than using the
    in-tree version.
  - Add -Werror-implicit-function-declaration to optflags.
  - Get rid of hashtest and hashtest2 binaries that link to unfortified
    versions of *printf functions.  They are compiled with -O0 which
    somehow pulls in the wrong versions.  These programs aren't
    necessary to the operation of the package anyway.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.6.0-0.6.beta6
changelog:
  - Update to 1.6.0-beta6 to fix some security issues.
  -
  - AST-2008-002 details two buffer overflows that were discovered in
  - RTP codec payload type handling.
  -  * http://downloads.digium.com/pub/security/AST-2008-002.pdf
  -  * All users of SIP in Asterisk 1.4 and 1.6 are affected.
  -
  - AST-2008-003 details a vulnerability which allows an attacker to
  - bypass SIP authentication and to make a call into the context
  - specified in the general section of sip.conf.
  -  * http://downloads.digium.com/pub/security/AST-2008-003.pdf
  -  * All users of SIP in Asterisk 1.0, 1.2, 1.4, or 1.6 are affected.
  -
  - AST-2008-004 Logging messages displayed using the ast_verbose
  - logging API call are not displayed as a character string, they are
  - displayed as a format string.
  -  * http://downloads.digium.com/pub/security/AST-2008-004.pdf
  -
  - AST-2008-005 details a problem in the way manager IDs are caculated.
  -  * http://downloads.digium.com/pub/security/AST-2008-005.pdf


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.4.18-1
changelog:
  - Update to 1.4.18.
  - Use -march=i486 on i386 builds for atomic operations (GCC 4.3
    compatibility).
  - Use "logger reload" instead of "logger rotate" in logrotate file
    (#432197).
  - Don't explicitly specify a group in in the init script to prevent
    Zaptel breakage (#426629).
  - Split app_ices out to a separate package so that the ices package
    can be required.
  - pbx_kdeconsole has been dropped, don't specifically exclude it from
    the build anymore.
  - Update app_conference patch.
  - Drop upstreamed libcap patch.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.4.16-2
changelog:
  - Add patch to bring source up to version 1.4.16.1 which will be
    released shortly to fix some crasher bugs introduced by 1.4.16.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.4.13-6
changelog:
  - Don't build cdr_sqlite because sqlite2 has been orphaned.
  - Rebase local patches to latest upstream SVN
  - Update app_conference patch to latest from upstream SVN
  - Apply post-1.4.13 patches from upstream SVN


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.4.9-5
changelog:
  - Update patches so we don't need to run auto* tools, because autoconf
    2.60 is required and FC-6 and RHEL5 only have autoconf 2.59.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.4.9-2
changelog:
  - Use plain useradd/groupadd rather than the fedora-usermgmt
  - Clean up requirements
  - Clean up build requirements by moving them to package sections


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.4.5-10
changelog:
  - Build the IMAP and ODBC storage options of voicemail and split
    voicemail out into subpackages.
  - Apply patch so that the system UW IMAP libray can be linked against.
  - Patch modules.conf.sample so that alternal voicemail modules don't
    get loaded simultaneously.
  - Link against system GSM library rather than internal copy.
  - Patch the Makefile so that it doesn't add redundant/wrong compiler
    options.
  - Force building with the standard RPM optimization flags.
  - Install the Asterisk MIB in a location that net-snmp can find it.
  - Only package docs in the main package that are relevant and that
    haven't been packaged by a subpackage.
  - Other minor cleanups.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.4.0-5.beta3
changelog:
  - Don't package IAXy firmware because of license
  - Don't build app_rpt
  - Don't BR lm_sensors on PPC
  - Better way to prevent download/installation of sound archives
  - Redo tarball to eliminate non-free items


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.4.0-3.beta3
changelog:
  - *Really* update to beta3
  - chan_jingle has been taken out of 1.4
  - Move misplaced binaries to where they should be


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.2.7.1-6
changelog:
  - Zaptel subpackage shouldn't obsolete the sqlite subpackage.
  - Remove mISDN until build issues can be figured out.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.2.7.1-4
changelog:
  - Update chan_bluetooth patch with some additional information as to
    it's source and comment out more in the configuration file.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.2.6-3
changelog:
  - Fix detection of libpri on 64 bit arches (taken from Matthias Saou's rpmforge package)
  - Change sqlite subpackage name to sqlite2 (there are sqlite3 modules in development).


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.2.5-1
changelog:
  - Update to 1.2.5.
  - Removed upstreamed MOH patch.
  - Add full urls to the app_(r|t)xfax.c sources.
  - Update spandsp patch.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.2.3-4
changelog:
  - Took some tricks from Asterisk packages by Roy-Magne Mo.
  -   Enable gtk console module.
  -   BR gtk+-devel.
  -   Add logrotate script.
  -   BR sqlite2-devel and new sqlite subpackage.
  -   BR doxygen and graphviz for building duxygen documentation. (But don't build it yet.)


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.2.3-3
changelog:
  - Completely eliminate the "asterisk" user from the spec file.
  - Move more config files to subpackages.
  - Consolidate two patches that patch the init script.
  - BR curl-devel
  - BR alsa-lib-devel
  - alsa, curl, oss subpackages


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.2.3-2
changelog:
  - Do not run as user "asterisk" as that prevents setting of IP TOS (which is bad for quality of service).
  - Add patch for setting TOS separately for SIP and RTP packets.


author: Dominic Hopf <dmaphy@fedoraproject.org> - 1.22-1
changelog:
  - New upstream release: Geany-Plugins 1.22
  - this release deprecates the geanygdb plugin
  - pretty-print has been renamed to pretty-printer
  - new plugins: geanyminiscript and geniuspaste


author: Dominic Hopf <dmaphy@fedoraproject.org> - 0.21-1
changelog:
  - New upstream release: Geany-Plugins 0.21
  - 0.21 adds seven new plugins: debugger, geanymacro, geanynumberedbookmarks,
    geanypg, gproject, tableconvert, xmlsnippets


author: Dominic Hopf <dmaphy@fedoraproject.org> - 0.20-1
changelog:
  - New upstream release: Geany-Plugins 0.20
  - remove unnecessary patches since the got applied upstream
  - 0.20 brings two new plugins: updatechecker and webhelper
  - order the plugins alphabetically (inspired by the output of ls)


author: Dominic Hopf <dmaphy@fedoraproject.org> - 0.19-4
changelog:
  - remove Requires: geany >= %{req_geany_ver} from plugins, since Geany is
    required by geany-plugins-common, and any plugin requires the common
    package
  - add missing dependency for ctpl-libs to geanygendoc plugin


author: Dominic Hopf <dmaphy@fedoraproject.org> - 0.19-3
changelog:
  - enable or rather add geanygendoc to the specfile
  - remove zero-length documentation files
  - fix various spelling errors


author: Dominic Hopf <dmaphy@fedoraproject.org> - 0.19-2
changelog:
  - correct license to GPLv3+
  - fix build of pretty print plugin
  - be more particular with BuildRequires


author: Dominic Hopf <dmaphy@fedoraproject.org> - 0.19-1
changelog:
  - New upstream release: Geany-Plugins 0.19
  - redordered plugins according to Geany's plugin manager dialog
  - added new plugins: codenav, treebrowser, geanyextrasel, geanyinsertnum and
    pretty print


author: Dominic Hopf <dmaphy@fedoraproject.org> 0.17.1-3
changelog:
  - remove Requires: geany from the main package
  - change Group to Development/Tools
  - add release to the geanyvc Provides
  - entirely remove %files stanza for the main package


author: Dominic Hopf <dmaphy@fedoraproject.org> 0.17.1-2
changelog:
  - fix the required geany version also in the subpackages
  - remove the requires to sub-packages to avoid building the metapackage since
    all geany plugins also can be installed by something like
    'yum install geany-plugins-*'
  - fix the requires of geany-plugins-common to include the release


author: Dominic Hopf <dmaphy@fedoraproject.org> 0.17-5
changelog:
  - add Requires for metapackage
  - rename subpackages back to geany-plugins-* instead of geany-plugin-*


author: Dominic Hopf <dmaphy@fedoraproject.org> 0.17-4
changelog:
  - readd the geany_plug_docdir global to fix the versioned directory issue for
    documentation files
  - replace geany-plugins with %{name} to be more consistent with macro usage
  - remove zero-length documentation files
  - fix the changelog
  - remove static *.la-files
  - split up packages


author: Alex Lancaster <alexlan[AT]fedoraproject org> - 12.09-1
changelog:
  - Update to upstream 12.09 (#808707)
  - Add BuildRequires for individual tex packages (e.g. parskip)
    for build of PDF docs for texlive 2012 (only in f18+)


author: Alex Lancaster <alexlan[AT]fedoraproject org> - 5.14-1
changelog:
  - Update to upstream 5.14 (#654727)
  - Drop XEmacs patch, workaround has now been implemented upstream.


author: Alex Lancaster <alexlan[AT]fedoraproject org> - 5.11-2
changelog:
  - Add patch to use ".r$" as regex in start start (workaround for problems
    with XEmacs misidentify Perl scripts as R scripts #631707)


author: Alex Lancaster <alexlan[AT]fedoraproject org> - 5.3.10-1
changelog:
  - Update to latest upstream (5.3.10)
  - Add BR: texinfo-tex
  - Fix paths to installation of documentation


author: <alexlan@fedoraproject.org> - 5.3.6-2
changelog:
  - Moved all non-code related files in etc/ to documentation directory
  - Make sure all doc files are UTF-8
  - Fix post, preun scriptlets and add Requires for installing info
    files


author: David Nalley <david@gnsa.us> 0.37-1
changelog:
  - create /etc/ceph - bug 745462
  - upgrading to 0.37, fixing 745460, 691033
  - fixing various logrotate bugs 748930, 747101


author: Steven Pritchard <steve@kspei.com> 0.21.1-1
changelog:
  - Update to 0.21.1.
  - Sample configs moved to /usr/share/doc/ceph/.
  - Added cclass, rbd, and cclsinfo.
  - Dropped mkmonfs and rbdtool.
  - mkcephfs moved to /sbin.
  - Add libcls_rbd.so.


author: Sage Weil <sage@newdream.net> 0.19.1-5
changelog:
  - Remove java deps (no need to build hadoop by default)
  - Include all required librados helpers
  - Include fetch_config sample
  - Include rbdtool
  - Remove misc debugging, test binaries


author: Jonathan Dieter <jdieter@lesbg.com> 0.19.1-2
changelog:
  - Add missing libhadoopcephfs.so* to file list
  - Add COPYING to all subpackages
  - Fix ownership of /usr/lib[64]/ceph
  - Enhance description of fuse client


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.1.1-3
changelog:
  - Moved the obsoletes/provides to the right location
  - Bundle the licence and other %doc's
  - Fixed a small rpmlint warning


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.1.1-1
changelog:
  - Update to 1.1.1
  - Temporary made the package compliant to the old guidelines as the new
    mingw-w64 based toolchain isn't approved for inclusion in Fedora yet


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.0.1-1
changelog:
  - Initial release (based on mingw32-libjpeg)
  - Dropped the BR: mingw32-dlfcn
  - Obsoletes/provides mingw32-libjpeg and mingw32-libjpeg-static
  - Disable SIMD support for now because libtool doesn't recognize nasm


author: Remi Collet <remi@fedoraproject.org> - 0.83.3.1-1
changelog:
  - version 0.83.3 released (bugfix + security)
    https://forge.indepnet.net/projects/glpi/versions/771
  - new dependency on htmLawed


author: Remi Collet <remi@fedoraproject.org> - 0.83.1-1
changelog:
  - version 0.83.1 released
    0.83.1 https://forge.indepnet.net/projects/glpi/versions/696
    0.83   https://forge.indepnet.net/projects/glpi/versions/538
  - adapt config for httpd 2.4


author: Remi Collet <remi@fedoraproject.org> - 0.80.6-1
changelog:
  - version 0.80.6 released (bugfix)
    https://forge.indepnet.net/projects/glpi/versions/657
  - add patch for https://forge.indepnet.net/issues/3299


author: Remi Collet <remi@fedoraproject.org> - 0.80.5-1
changelog:
  - version 0.80.5 released (bugfix)
    0.80.5 https://forge.indepnet.net/projects/glpi/versions/643
    0.80.4 https://forge.indepnet.net/projects/glpi/versions/632
    0.80.3 https://forge.indepnet.net/projects/glpi/versions/621
    0.80.2 https://forge.indepnet.net/projects/glpi/versions/605
    0.80.1 https://forge.indepnet.net/projects/glpi/versions/575
    0.80   https://forge.indepnet.net/projects/glpi/versions/466
  - increase cron run frequency (3 tasks each 3 minutes)


author: Remi Collet <Fedora@FamilleCollet.com> - 0.71.1-1
changelog:
  - update to 0.71.1 bugfix
  - use system cron
  - increase memory_limit / max_execution_time for upgrade


author: Andy Grover <agrover@redhat.com> - 2.0rc1.fb18-1
changelog:
  - New upstream release
  - Add python-ethtool requires
  - Update Source0 to use Github tar-from-tag instead of Downloads


author: Andy Grover <agrover@redhat.com> - 2.0rc1.fb5-2
changelog:
  - Update After= in service file to wait for localfs and network
  - Improve description in service file


author: Andy Grover <agrover@redhat.com> - 2.0rc1.fb2-1
changelog:
  - New upstream source and release
  - Remove patches:
    * targetcli-git-version.patch
    * 0001-Remove-ads-from-cli-welcome-msg.-Mention-help-is-ava.patch
    * 0002-bundle-lio-utils.patch
    * 0003-Hack.-dump-scripts-aren-t-in-PATH-anymore-so-call-th.patch
    * 0004-ignore-errors-from-failure-to-set-device-attributes.patch
    * 0005-fix-spec_root-path.patch
    * 0006-add-docs.patch
    * 0007-all-start.patch


author: Orion Poplawski <orion@cora.nwra.com> - 6.0.5-1
changelog:
  - Update to PTP 6.0.5, photran 8.0.5
  - Remove rdt.remotetools feature beause we are unable to build
    remotejars
  - Hande tycho versions automatically


author: Java SIG <java-devel@lists.fedoraproject.org> - 6.0.3-3
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Orion Poplawski <orion@cora.nwra.com> - 6.0.3-1
changelog:
  - Update to PTP 6.0.3, photran 8.0.3
  - Use maven/tycho for building, major rework of spec
  - Add patch remove ant-trax dependency, fix maven jdk tools.jar dep
  - Drop overrides patch
  - Move pldt and rdt-sync into the main package
  - Add fortran meta sub-package to bring in Fortran support
  - Drop cdt-compilers, rdt-sdk, and rdt-xlc-sdk sub-packages


author: Orion Poplawski <orion@cora.nwra.com> - 5.0.4-1
changelog:
  - Update to PTP 5.0.4, photran 7.0.4
  - Add pldt-fortran and rm-contrib sub-packages
  - Update makesource.sh/spec/finddeps.sh to use git archive
  - Unpack cdtdb-4.0.3-eclipse.jar from tar archive
  - Remove orbitDeps usage, not needed
  - Remove license feature hack, not needed
  - Drop defattr, BuildRoot, clean
  - Actually build master package


author: Orion Poplawski <orion@cora.nwra.com> - 5.0.1-1
changelog:
  - Update to PTP 5.0.1, photran 7.0.1
  - Bump CDT and PDE requirement
  - Work around issue with pdebuild shared license feature
  - Add BR on ws-jaxme, add jaxmeapi and xml-commons-apis to orbitDeps
  - Add patch to remove unneeded dependencies
  - Add BR on eclipse-jgit
  - Add sdk and photran components to ptp-master
  - Add rdt-sync, rdt-sync-fortran, and sdk sub-packages
  - Fixup some requires
  - Improve the finddeps.sh utility script


author: Richard W.M. Jones <rjones@redhat.com> - 0.4.4-2
changelog:
  - New upstream version 0.4.4.
  - Clean up the spec file.
  - Fix homepage and download URLs.
  - Don't use configure macro.  Upstream are using some sort of non-autoconf
    brokenness.
  - Rename text files as *.txt.  There is no 'api' directory any more.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4.0-2
changelog:
  - New upstream version 0.4.0.
  - Upstream build system has been rationalized, so remove all the
    hacks we were using.
  - Upstream now contains tests, run them.
  - Needs ounit in order to carry out the tests.


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.0-3
changelog:
  - Fixed grammar in the description section.
  - License is LGPLv2 with exceptions
  - Include license file with both RPMs.
  - Include other documentation only in the -devel RPM.


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-7
changelog:
  - Make group warning message more official
  - Define charset in e-mails sent by warnquota (SF#3571589)
  - Do not fiddle with quota files on XFS and GFS (bug #846296)
  - Make sure option -d at quotacheck provides at least as much information as
    option -v (SF#3602777)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-2
changelog:
  - Remove unneeded cryptographic library build-time dependencies
  - Fortify build-time configuration
  - Migrate quota_nld service from sysvinit to systemd
  - Document --print-below option in quota_nld service


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-1
changelog:
  - 4.00 bump
  - Remove unneeded LDAP linking patch
  - Prevent from stripping by configure option
  - Remove unneeded sed scripts on sources
  - Remove unneeded file removal


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.16.pre1
changelog:
  - Report quotacheck failures by return code (bug #717982)
  - Improve quotacheck error message (bug #717982)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.9.pre1
changelog:
  - Explain meaning of the second column in repquota output
  - Make RPC handle properly host names with colons (i.e. IPv6 server host name)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.6.pre1
changelog:
  - Store quota_nld PID into PID file (bug #634137)
  - Do not allow non-root to control quota_nld service (bug #634137)
  - Add quotasync tool (bug #596794)
  - Implement quotacheck for GFS2 (bug #596794)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.4.pre1
changelog:
  - Make RPC block factor dynamic (bug #667757)
  - Check whether set limits fit into the range supported by quota format
    (bug #668688)
  - Check set limits fit into the range supported by RPC transport (bug #668691)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-16
changelog:
  - Break dependecies on main package as there are none
  - Add plain text documentation to each sub-package
  - Package additional documentation into `doc' sub-package


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-15
changelog:
  - Add quota_nld deamon init script (bug #634169)
  - Sub-package quota_nld files to weak dependecies
  - Sub-package warnquota files to weak dependecies


author: Petr Pisar <ppisar@redhat.com> 1:3.17-12
changelog:
  - Prevent corruptive read/write from/to NULL address in rpc.rquotad
    (Resolves #528581, example in #532342)
  - Fix spelling in summary


author: Ondrej Vasik <ovasik@redhat.com> 1:3.17-4
changelog:
  - clarify statements about LDAP in warnquota conf
    (related to #490106)
  - fix parsing issue in warnquota.c(#490125)
  - enable rpcsetquota by default(#159292, #469753)


author: Ondrej Vasik <ovasik@redhat.com> 1:3.16-5
changelog:
  - fix rpmlint warnings - absolute symlink and not using epoch
    in version in changelog (#226353)
  - rquota headers and manpage now in devel subpackage


author: Ondrej Vasik <ovasik@redhat.com> 3.16-4
changelog:
  - fix bug in warnquota which could result in bogus hostname
    and domainname (upstream)
  - remove IMMUTABLE flag from quota file in quotacheck(upstream)


author: Ondrej Vasik <ovasik@redhat.com> 3.16-3
changelog:
  - Add support for -h option (do not show invalid option
    error) at edquota,setquota and quota (#457898)


author: Ondrej Vasik <ovasik@redhat.com> 3.16-2
changelog:
  - upstream fix of some typos, string formats + 4TB+ fix
    for repquota
  - some additional stripping removal
  - change default mode of binaries from 555 to 755
    (strip error messages in build log)


author: Ondrej Vasik <ovasik@redhat.com> 3.15-6
changelog:
  - added enable-ldapmail=try option(wonder how #133207
    got closed by FC-4 without it or warnquota.conf change)
  - dropped with-ext2direct=no option - this option is 
    invalid and original bug was fixed in 3.07


author: Ondrej Vasik <ovasik@redhat.com> 3.15-5
changelog:
  - added symbolic link for quotaoff man page(#436110)
  - don't ship xqmstats.8 man page as we don't ship those
    binaries(#436100)


author: Steve Dickson <SteveD@RedHat.com> 3.15-2
changelog:
  - More review comments:
      - BuiltPreReq to BuiltReq
      - Removed '.' From Summary
      - Added 'GPLv2+' to License Tag
      - Condensed the _sysconfdir entries in to one line


author: Thomas Woerner <twoerner@redhat.com> 1:3.13-1.3
changelog:
  - tcp_wrappers has a new devel and libs sub package, therefore changing build
    requirement for tcp_wrappers to tcp_wrappers-devel


author: Philip Copeland <bryce@redhat.com> 3.06-5
changelog:
  - added --with-ext2direct=no to fix #73244
    without this users with UID's > 65535 will not
    be able to exist on a quota enabled FS


author: Philip Copeland <bryce@redhat.com> 3.06-3
changelog:
  - Bah, I'd dropped epoch from the spec file but seems
    we need this if you want to upgrade as the epoch
    number has precedence over the version/release
    numbers.


author: Philip Copeland <bryce@redhat.com> 3.06-1
changelog:
  - Ditched the 3.01-pre9 src base for 3.06
    Rebuilt without any patchs

  ============================================================


author: Preston Brown <pbrown@redhat.com>
changelog:
  - fixed bug #52075 (problem with ext2 labels)
  - backup data files off by default in quotacheck, optional backup flag added
  - fix bug where giving a bad directory or device would cause 
    quotaon/quotacheck to simulate "-a" behaviour
  - if a device name (i.e /dev/hda1) is passed, look up the corresponding mount
    point


author: Preston Brown <pbrown@redhat.com>
changelog:
  - quota 3.00 is required by recent kernel 2.4 changes
  - no warnquota included this time, not yet ported
  - quite a bit of work on quotacheck to make is backwards compatible
  - we will likely go back to "quota 2.00" as these projects merge...


author: Preston Brown <pbrown@redhat.com>
changelog:
  - 2.00 final, rolls in pretty much all our patches. :)
  - fix reporting of in use dquot entries from quotastats
  - change repquota man page to fix documentation of -v (#10330)
  - include warnquota.conf


author: Colin Walters <walters@verbum.org> - 2.34.0-2
changelog:
  - Use install -p to preserve timestamps on .py files
  - Rename systemtap tapsets with architecture-specific prefix
  - Pull upstream patch to avoid conflict on /usr/bin/gdbus-codegen
  - Split gtk-doc off into -doc package to avoid multilib conflicts
  - Resolves: #718404


author: Lennart Poettering <lpoetter@redhat.com> - 2.33.12-2
changelog:
  - Drop explicit dependency on eject, as it is included in util-linux now, which is available in the base set


author: Colin Walters <walters@verbum.org> - 2.28.3-2
changelog:
  - Rebuild to hopefully pick up new systemtap mark ABI
    The current version doesn't seem to be triggering the stock
    marks; a local rebuild of the RPM does, so let's do a rebuild
    here.


author: Colin Walters <walters@verbum.org> - 2.25.13-2
changelog:
  - Add patch from mjw to enable systemtap
    For background, see: https://bugzilla.gnome.org/show_bug.cgi?id=606044


author: Colin Walters <walters@verbum.org> - 2.25.10-3
changelog:
  - Revert rpath change; Fedora's libtool is supposed to not generate
    them for system paths.
  - Add changes to spec file to support being built from snapshot as
    well as "make dist"-ball.  This includes BuildRequires and autogen.sh
    handling, and gtk-doc enabling if we're bootstrapping.


author: Colin Walters <walters@verbum.org> - 2.25.9-3
changelog:
  - Only strip rpath at install time, not before build.  Neutering
    libtool sabotages gtk-doc, since it needs those rpaths to run
    an in-tree binary.


author: Richard Hughes <rhughes@redhat.com> - 2.25.9-2
changelog:
  - Backport a patch from git master to avoid a segfault when doing the
    schema file check for several GNOME projects.


author: Matthias Clasen <mclasen@redhat.com> - 2.25.3-1
changelog:
  - Update to 2.25.3
  - Move schema compiler to the main package, since it is
    needed by other rpm's %post at runtime
  - Split up man pages to go along with their binaries


author: Alexander Larsson <alexl@redhat.com> - 2.18.2-2
changelog:
  - Don't return generic fallback icons for files,
    as this means custom mimetypes don't work (from svn)


author: Dan Williams <dcbw@redhat.com> - 2.16.3-3
changelog:
  - Revert upstream changes to g_static_mutex_get_mutex_impl_shortcut that broke
      users of GMutex and GStaticMutex (bgo#316221)


author: Matthias Clasen <mclasen@redhat.com> - 2.12.9-3
changelog:
  - More package review feedback:
   * install /etc/profile.d snipplets as 644
   * explain Conflict with libgnomeui
   * remove stale Conflict with glib-devel


author: Matthias Clasen <mclasen@redhat.com> - 2.12.9-2
changelog:
  - Incorporate package review feedback:
   * drop an obsolete Provides:
   * add a -static subpackage
   * explain %check ppc exception
   * align summaries


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add static libraries to build (#78685, Bernd Kischnick)
  - Bump-and-rebuild for new redhat-rpm-config


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Make -devel package require main package (#45388)
  - Fix description and summary
  - Configure with --disable-gtk-doc


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add some portability fixes needed at least on s390
  - copy config.{guess,sub} instead of calling libtoolize


author: Havoc Pennington <hp@redhat.com>
changelog:
  - try a new glib tarball with Makefile changes to work around
    libtool linking to installed .la files
  - make -devel require pkgconfig


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Remove glib-config.1 manpage from build since
    it conflicts with glib-devel. When we go to
    glib glib1.2 setup, we should add it back


author: Petr Pisar <ppisar@redhat.com> - 6.02-1
changelog:
  - 6.02 bump
  - HTTPS support unbundled by upstream to break depency cycle in CPAN utilities.
    Install or depend on perl(LWP::Protocol::https) explicitly, if you need
    HTTPS support.


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 5.837-2
changelog:
  - Add missing ':' to filter_from_requires perl(HTTP::GHTTP).
  - filter_from_provides /perl(HTTP::Headers)$/d instead of /perl(HTTP::Headers)/d.


author: Marcela Mašláňová <mmaslano@redhat.com> 5.816-1
changelog:
  - update to 5.816
  - fix #465855 - install --aliases by default
  - use upstream patch for previous problem (see rt 38736)


author: Robin Norwood <rnorwood@redhat.com> - 5.808-4
changelog:
  - Fix various issues from package review:
  - Fix tabs and spacing
  - Remove unneeded BR: perl
  - convert non-utf-8 files to utf-8
  - Resolves: bz#226268


author: Robin Norwood <rnorwood@redhat.com> - 5.808-1
changelog:
  - Update to latest CPAN version
  - Re-enable tests.  We'll see if they work now
  - Move Requires filter into spec file
  - Add Provides filter for unnecessary unversioned provides


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.1-4
changelog:
  - Unbundle cssmin.js from the sources
  - Throw an error when --yui-compress is passed at the lessc command line
  - Convert assorted %prep actions into patches


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.1-1
changelog:
  - Update to the 1.3.1 release
  - Fix versioning bugs, get the tarball from a cleaner, tagged location


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-243
changelog:
  - Remove bundled Carp, ExtUtils-Manifest, parent, Test-Simple,
    Version-Requirements, threads (bug #957931)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.3-242
changelog:
  - Correct dependencies of perl-HTTP-Tiny
  - Correct perl-Digest-MD5 dependencies
  - Filter provides from *.pl files (bug #924938)
  - Sub-package Sys-Syslog (bug #950057)
  - Fix leaking tied hashes (bug #859910)
  - Fix dead lock in PerlIO after fork from thread (bug #947444)
  - Add proper conflicts to perl-Sys-Syslog


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.1-232
changelog:
  - perl-PathTools uses Carp
  - Do not leak with attribute on my variable (bug #858966)
  - Allow operator after numeric keyword argument (bug #859328)
  - Extend stack in File::Glob::glob (bug #859332)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.1-230
changelog:
  - Do not access freed memory when cloning thread (bug #825749)
  - Match non-breakable space with /[\h]/ in ASCII mode (bug #844919)
  - Clear $@ before `do' I/O error (bug #834226)
  - Do not truncate syscall() return value to 32 bits (bug #838551)


author: Petr Pisar <ppisar@redhat.com> - 4:5.16.1-229
changelog:
  - Remove perl-devel dependency from perl-Test-Harness and perl-Test-Simple
  - Move App::Cpan from perl-Test-Harness to perl-CPAN (bug #854577)


author: Jitka Plesnikova <jplesnik@redhat.com> 4:5.16.1-228
changelog:
  - 5.16.1 bump (see
    http://search.cpan.org/dist/perl-5.16.1/pod/perldelta.pod for release
    notes)
  - Fixed reopening by scalar handle (bug #834221)
  - Fixed tr/// multiple transliteration (bug #831679)
  - Fixed heap-overflow in gv_stashpv (bug #826516)


author: Paul Howarth <paul@city-fan.org> 4:5.16.0-226
changelog:
  - Move the rest of ExtUtils-ParseXS into its sub-package, so that the main
    perl package doesn't need to pull in perl-devel (bug #839953)


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.16.0-RC2-217
changelog:
  - clean patches, not needed with new version
  - regen by podcheck list of failed pods. cn, jp, ko pods failed. I can't decide
    whether it's a real problem or false positives.


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-211
changelog:
  - Fix searching for Unicode::Collate::Locale data (bug #756118)
  - Run safe signal handlers before returning from sigsuspend() and pause()
    (bug #771228)
  - Correct perl-Scalar-List-Utils files list
  - Stop !$^V from leaking (bug #787613)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-207
changelog:
  - Fix interrupted reading. Thanks to Šimon Lukašík for reporting this issue
    and thanks to Marcela Mašláňová for finding fix. (bug #767931)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-205
changelog:
  - Sub-package ExtUtils::Install
  - Sub-package ExtUtils::Manifest
  - Do not provide private perl(ExtUtils::MakeMaker::_version)


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.2-197
changelog:
  - cleaned spec (thanks to Grigory Batalov)
  -  Module-Metadata sub-package contained perl_privlib instead of privlib
  -  %files parent section was repeated twice


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-196
changelog:
  - Filter false perl(DynaLoader) provide from perl-ExtUtils-MakeMaker
    (bug #736714)
  - Change Perl_repeatcpy() prototype to allow repeat count above 2^31
    (bug #720610)
  - Do not own site directories located in /usr/local (bug #732799)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-195
changelog:
  - Fix CVE-2011-3597 (code injection in Digest) (bug #743010)
  - Sub-package Digest and thus Digest::MD5 module (bug #743247)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.2-193
changelog:
  - 5.14.2 bump (see
    https://metacpan.org/module/FLORA/perl-5.14.2/pod/perldelta.pod for release
    notes).
  - Fixes panics when processing regular expression with \b class and /aa
    modifier (bug #731062)
  - Fixes CVE-2011-2728 (File::Glob bsd_glob() crash with certain glob flags)
    (bug #742987)


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.1-189
changelog:
  - Correct perl-CGI list of Provides
  - Make tests optional
  - Correct perl-ExtUtils-ParseXS Provides
  - Correct perl-Locale-Codes Provides
  - Correct perl-Module-CoreList version
  - Automate perl-Test-Simple-tests Requires version


author: Petr Pisar <ppisar@redhat.com> - 4:5.14.1-188
changelog:
  - Make gdbm support optional to bootstrap with new gdbm
  - Split Carp into standalone sub-package to dual-live with newer versions
    (bug #736768)


author: Paul Howarth <paul@city-fan.org> - 4:5.14.1-182
changelog:
  - Have perl-Module-Build explicitly require perl(CPAN::Meta) >= 2.110420,
    needed for creation of MYMETA files by Build.PL; the dual-life version of
    the package already has this dependency


author: Iain Arnell <iarnell@gmail.com> 4:5.14.1-179
changelog:
  - Parse-CPAN-Meta explicitly requires CPAN::Meta::YAML and JSON::PP
  - Exclude CPAN::Meta* from CPAN sub-package
  - Don't try to normalize CPAN-Meta, JSON-PP, and Parse-CPAN-Meta versions;
    their dual-life packages aren't and have much higher numbers already


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.1-178
changelog:
  - update macros -> add %perl_bootstrap 1 and example for readability
  - add into Module::Build dependency on perl-devel (contains macros.perl)
  - create new sub-package macros, because we need macros in minimal buildroot


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.1-171
changelog:
  - update to 5.14.1 - no new modules, just serious bugfixes and doc
  - switch off fork test, which is failing only on koji


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.0-170
changelog:
  - try to update to latest ExtUtils::MakeMaker, no luck -> rebuild with current 
    version, fix bug RT#67618 in modules


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.0-169
changelog:
  - filter even Mac:: requires, polish filter again for correct installation
  - add sub-package Compress-Raw-Bzip2, solve Bzip2 conflicts after install
  - and add IO::Uncompress::Bunzip2 correctly into IO-Compress


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.14.0-161
changelog:
  - test build of released 5.14.0
  - remove Class::ISA from sub-packages
  - patches 8+ are part of new release
  - remove vendorarch/auto/Compress/Zlib


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.12.2-141
changelog:
  - 643447 fix redefinition of constant C in h2ph (visible in git send mail,
    XML::Twig test suite)
  - remove ifdef for s390


author: Petr Sabata <psabata@redhat.com> - 4:5.12.2-1
changelog:
  - Update to 5.12.2
  - Removed one hardcoded occurence of perl version in build process
  - Added correct path to dtrace binary
  - BuildRequires: systemtap-sdt-devel


author: Petr Pisar <ppisar@redhat.com> - 4:5.12.1-130
changelog:
  - Run tests in parallel
  - Add "-Wl,--enable-new-dtags" to linker to allow to override perl's rpath by
    LD_LIBRARY_PATH used in tests. Otherwise tested perl would link to old
    in-system libperl.so.
  - Normalize spec file indentation


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.12.1-123
changelog:
  - remove patch with debugging symbols, which should be now ok without it
  - update to 5.12.1
  - MODULE_COMPAT


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-118
changelog:
  - 463773 remove useless txt files from installation
  - 575842 remove PERL_USE_SAFE_PUTENV, use perl putenv


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-116
changelog:
  - add noarch into correct sub-packages
  - move Provides/Obsoletes into correct modules from main perl


author: Paul Howarth <paul@city-fan.org> - 4:5.10.1-115
changelog:
  - restore missing version macros for Compress::Raw::Zlib, IO::Compress::Base
    and IO::Compress::Zlib


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-109
changelog:
  - 547656 CVE-2009-3626 perl: regexp matcher crash on invalid UTF-8 characters  
  - 549306 version::Internals should be packaged in perl-version subpackage
  - Parse-CPAN-Meta updated and separate package is dead


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.1-100
changelog:
  - new upstream version
  - release number must be high, because of stale version numbers of some
    of the subpackages
  - drop upstreamed patches
  - update the versions of bundled modules
  - shorten the paths in @INC
  - build without DEBUGGING
  - implement compatibility measures for the above two changes, for a short
    transition period
  - provide perl(:MODULE_COMPAT_5.10.0), for that transition period only


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-87
changelog:
  - fix patch-update-Compress-Raw-Zlib.patch (did not patch Zlib.pm)
  - update Compress::Raw::Zlib to 2.023
  - update IO::Compress::Base, and IO::Compress::Zlib to 2.015 (#542645)


author: Chris Weyl <cweyl@alumni.drew.edu> - 4:5.10.0-82
changelog:
  - update our Test-Simple update to 0.92 (patch by Iain Arnell), #519417
  - update Module-Pluggable to 3.9


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-74
changelog:
  - fix generated .ph files so that they no longer cause warnings (#509676)
  - remove PREREQ_FATAL from Makefile.PL's processed by miniperl
  - update to latest Scalar-List-Utils (#507378)
  - perl-skip-prereq.patch: skip more prereq declarations in Makefile.PL files


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-66
changelog:
  - fix CGI::escape for all strings (#472571)
  - perl-CGI-t-util-58.patch: Do not distort lib/CGI/t/util-58.t
    http://rt.perl.org/rt3/Ticket/Display.html?id=64502


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-61
changelog:
  - apply Change 34507: Fix memory leak in single-char character class optimization
  - Reorder @INC, based on b9ba2fadb18b54e35e5de54f945111a56cbcb249
  - fix Archive::Extract to fix test failure caused by tar >= 1.21
  - Merge useful Debian patches


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-60
changelog:
  - remove compatibility obsolete sitelib directories
  - use a better BuildRoot
  - drop a redundant mkdir in %install
  - call patchlevel.h only once; rm patchlevel.bak
  - update modules Sys::Syslog, Module::Load::Conditional, Module::CoreList,
    Test::Harness, Test::Simple, CGI.pm (dropping the upstreamed patch),
    File::Path (that includes our perl-5.10.0-CVE-2008-2827.patch),
    constant, Pod::Simple, Archive::Tar, Archive::Extract, File::Fetch,
    File::Temp, IPC::Cmd, Time::HiRes, Module::Build, ExtUtils::CBuilder
  - standardize the patches for updating embedded modules
  - work around a bug in Module::Build tests bu setting TMPDIR to a directory
    inside the source tree


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-54
changelog:
  - 455410 http://rt.perl.org/rt3/Public/Bug/Display.html?id=54934
    Attempt to free unreferenced scalar fiddling with the symbol table
    Keep the refcount of the globs generated by PerlIO::via balanced.


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-52
changelog:
  - 295021 CVE-2007-4829 perl-Archive-Tar directory traversal flaws
  - add another source for binary files, which test untaring links


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-51
changelog:
  - to fix Fedora bz 473223, which is really perl bug #54186 (http://rt.perl.org/rt3//Public/Bug/Display.html?id=54186)
    we apply Changes 33640, 33881, 33896, 33897


author: Marcela Mašláňová <mmaslano@redhat.com> 4:5.10.0-47.fc10
changelog:
  - rt#33242, rhbz#459918. Segfault after reblessing objects in Storable.
  - rhbz#465728 upgrade Simple::Pod to 3.07


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-46
changelog:
  - also preserve the timestamp of AUTHORS; move the fix to the recode
    function, which is where the stamps go wrong


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-44.fc10
changelog:
  - remove Tar.pm from Archive-Extract
  - fix version of Test::Simple in spec
  - update Test::Simple
  - update Archive::Tar to 1.38


author: Stepan Kasal <skasal@redhat.com> 4:5.10.0-39.fc10
changelog:
  - CGI.pm bug in exists() on tied param hash (#457085)
  - move the enc2xs templates (../Encode/*.e2x) to -devel, (#456534)


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-38
changelog:
  - 455933 update to CGI-3.38
  - fix fuzz problems (patch6)
  - 217833 pos() function handle unicode characters correct


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-33
changelog:
  - 451078 update Test::Harness to 3.12 for more testing. Removed verbose 
  test, new Test::Harness has possibly verbose output, but updated package
  has a lot of features f.e. TAP::Harness. Carefully watched all new bugs 
  related to tests!


author: Stepan Kasal <skasal@redhat.com> 4:5.10.0-26
changelog:
  - make config parameter list consistent for 32bit and 64bit platforms,
    add config option -Dinc_version_list=none (#448735)
  - use perl_archname consistently
  - cleanup of usage of *_lib macros in %install


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-21
changelog:
  - sparc64 fails two tests under mysterious circumstances. we need to get the
    rest of the tree moving, so we temporarily disable the tests on that arch.


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-20
changelog:
  - create the vendor_perl/%{perl_version}/%{perl_archname}/auto directory 
    in %{_libdir} so we own it properly


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-19
changelog:
  - fix CPANPLUS-Dist-Build Provides/Obsoletes (bz 437615)
  - bump version on Module-CoreList subpackage


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-12
changelog:
  - conditionalize multilib patch report in patchlevel.h
  - Update Archive::Extract to 0.26
  - Update Module::Load::Conditional to 0.24


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-7
changelog:
  - Add perl-File-Temp provides/obsoletes/conflicts (#433836),
    reported by Bill McGonigle <bill@bfccomputing.com>
  - escape the macros in Jan 30 entry


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-5
changelog:
  - disable some futime tests in t/io/fs.t because they started failing on x86_64
    in the Fedora builders, and no one can figure out why. :/


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-4
changelog:
  - create %{_prefix}/lib/perl5/vendor_perl/%{perl_version}/auto and own it
    in base perl (resolves bugzilla 214580)


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-1
changelog:
  - 5.10.0 final
  - clear out all the unnecessary patches (down to 8 patches!)
  - get rid of super perl debugging mode
  - add new subpackages


author: Adam Tkac <atkac redhat com> 0.4-0.1.b42
changelog:
  - update to 0.4b42
  - patches merged
    - dump-selinux.patch
    - dump-dmfix.patch
    - dump-immutable.patch
    - dump-0.4b41-libtinfo.patch
    - dump-rh356121.patch
    - dump-rh493635.patch
    - dump-rh490627.patch
    - dump-rh489853.patch
  - fix NVR to conform to Fedora policies


author: Adam Tkac <atkac redhat com> 0.4b41-13
changelog:
  - display dump level correctly in all cases (#493635)
  - -A option is not valid when -P is specified, correct manual page (#490627)
  - fix typos in manual pages (#489853)


author: Jindrich Novy <jnovy@redhat.com> 0.4b41-2
changelog:
  - fix miscompares detected by restore -C caused by SELinux (#189845)
  - link properly against device-mapper and selinux libraries
  - add autoconf BuildRequires
  - use %{?dist}


author: Jindrich Novy <jnovy@redhat.com> 0.4b41-1
changelog:
  - update to 0.4b41
  - drop .fixacl patch, now applied in the new upstream release
  - link against device-mapper


author: Jindrich Novy <jnovy@redhat.com> 0.4b39-2
changelog:
  - Updated the EA patch with support for in-inode EAs, big
    inodes and fixes 'error in EA block' displayed for
    every single inode (#149299) - patch from Stelian Pop


author: Jindrich Novy <jnovy@redhat.com> 0.4b38-1
changelog:
  - Updated to dump 0.4b38 (#144840)
  - Updated the experimental dump patch.
  - Dropped the cvs patch, applied in the upstream release.


author: Mike A. Harris <mharris@redhat.com> 0.4b27-3
changelog:
  - BuildRequires readline-devel >= 4.2 for the rl_completion_matches function
  - Added dump-0.4b27-dump-atomic-read-write.patch to avoid namespace conflict
    with included kernel headers.  atomic_read is a function on s390 and as
    such, cannot be #undef'd


author: Mike A. Harris <mharris@redhat.com> 0.4b27-2
changelog:
  - Added prereq on "setup" to ensure disk group is created prior to this
    package being installed
  - Somehow the dump package changelog got hosed, and part of the spec file
    regressed.  I believe it is fixed now.


author: Mike A. Harris <mharris@redhat.com> 0.4b25-1.72.0
changelog:
  - Rebuilt 0.4b25 for erratum release.  Fixes various bugs that have been
    reported in bugzilla which are logged below.  Also fixes a bug caused by
    linking statically to a faulty system library.
  - Added Provides dump-static line


author: Mike A. Harris <mharris@redhat.com> 0.4b25-1
changelog:
  - Updated to version 0.4b25-1
  - Added homepage URL for RFE (#54601)
  - Also fixed in this release are (#21272, #52663, #56616)
  - Dropped time.h patch as it is unneeded now


author: Mike A. Harris <mharris@redhat.com> 0.4b22-7
changelog:
  - Updated BuildPreReq to e2fsprogs-devel >= 1.18, readline-devel >= 4.1 to
    explicitly state the minimum required deps and fix (#51900)


author: Trond Eivind Glomsrød <teg@redhat.com> 0.4b22-6
changelog:
  - Kill the static subpackage - the standard binaries are now static
    This removes /usb/sbin/*. The static versions are now in /sbin 
    (#53433)
  - Obsolete dump-static


author: Mike A. Harris <mharris@redhat.com> 0.4b22-2
changelog:
  - Removed release tag from buildroot dirname - messy.
  - Broke all lines over multiple lines for readability in specfile.
  - Added --enable-largefile configure flags


author: Preston Brown <pbrown@redhat.com>
changelog:
  - whoops I had dump commented out of the file list.  fixed.
  - dropped suid bits on the static binaries.
  - fix char buffer size issue (#11880)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - workaround egcs bug (#4281) that caused dump problems (#2989).
  - use sigjmp_buf, not jmp_buf (#3260).
  - invoke /etc/rmt (instead of rmt) like other unices. (#3272).
  - use glibc21 err/glob rather than the internal compatibility routines.
  - wire $(OPT) throughout Makefile's.
  - fix many printf problems, mostly lint clean.
  - merge SuSE, Debian and many OpenBSD fixes.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - restore original 6755 root.tty to dump/restore, defattr did tty->root (#684).
  - mark /etc/dumpdates as noreplace.


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 4.2.0-4
  - drop BR: gmp-devel (not used here, libktorrent does)
  - kde-plasma-ktorrent: +Requires: %name-libs
  - libs: +Requires: libktorrent
  - drop deprecated/unused -DWITH_BUILTIN_COUNTRY_FLAGS option


author: Rex Dieter <rdieter@fedoraproject.org> - 3.2.3-2
changelog:
  - kde-plasma-ktorrent pkg (so main pkg doesn't pull in kdebase-workspace)
  - -libs to make multilib friendly


author: Rex Dieter <rdieter@fedoraproject.org> - 3.0.1-4
changelog:
  - %postun: remove extraneous scriplets
  - -devel: own %{_kde4_includedir}/libbtcore/ (and subdirs)
  - -devel: Requires: kdelibs4-devel
  - drop: Requires: oxygen-icon-theme (kde4 runtime already does)
  - Requires(post,postun): xdg-utils


author: Roland Wolters <wolters.liste@gmx.net> 2.2-1
changelog:
  - update to upstream 2.2:
  	- cleaner UI
  	- - New file selection dialog
  	- Statistics plugin with pretty graphs
  	- Possibility to open as many tabs as you want
  	- Diskspace monitoring and stopping of downloads when the diskspace
  	  drops below a certain value
  	- Individual torrent speed limits
  	- Full disk preallocation to avoid fragmentation


author: Roland Wolters <rolandwolters@web.de> 1.2-2
changelog:
  - set vendor string to ""
  - added gtk-update-icon-cache scriplets to post and postun
  - added desktop-database scriplet because of MimeType in ktorrent.desktop
  - moved %{_libdir}/kde3/* to main package
  - moved %{_libdir}/libktorrent.so to main package
  - configure with disable-static and enable-shared
  - added %exclude %{_libdir}/lib*.la


author: Mahaveer Darade <mah.darade@gmail.com> - 0.3.5-1
changelog:
  - upgrade to upstream version 0.3.5
  - drop patch0, merged upstream
    liblognorm-0.3.4-rename-to-lognormalizer.patch
  - remove trailing whitespace


author: Iain Arnell <iarnell@gmail.com> 2:0.70-1
changelog:
  - Unbundle DateTime::TimeZone and DateTime::Locale
  - Bump epoch and revert to upstream versioning
  - Specfile regenerated by cpanspec 1.78.
  - Update description


author: Iain Arnell <iarnell@gmail.com> 1:0.6600-3
changelog:
  - update DateTime::TimeZone to 1.31
  - DateTime::TimeZone no longer has Build.PL; use Makefile.PL
  - whitespace cleanup
  - clean up .packlist


author: Steven Pritchard <steve@kspei.com> 1:0.6600-1
changelog:
  - Update DateTime to 0.66.
  - Update DateTime::TimeZone to 1.26.
  - Update URL for FAQ in description.
  - BR Class::Load and parent.


author: Iain Arnell <iarnell@gmail.com> 1:0.6300-1
changelog:
  - Update DateTime to 0.63
  - Update DateTime::TimeZone to 1.22
  - DateTime license changed from "GPL+ or Artistic" to "Artistic 2.0"
  - Fix DTLocale/Changelog encoding


author: Stepan Kasal <skasal@redhat.com> - 1:0.5300-1
changelog:
  - new upstream version
  - use Build.PL as Makefile.PL no longer exists
  - use iconv to recode to utf-8, not a patch
  - update BuildRequires
  - drop Provides: perl(DateTime::TimeZoneCatalog), it is no longer there
  - use filtering macros


author: Steven Pritchard <steve@kspei.com> 1:0.4401-1
changelog:
  - Update to DateTime 0.4401.
  - Update to DateTime::Locale 0.42.
  - Update to DateTime::TimeZone 0.8301.


author: Steven Pritchard <steve@kspei.com> 1:0.4304-1
changelog:
  - Update to DateTime 0.4304.
  - Update to DateTime::TimeZone 0.78.
  - Update to DateTime::Locale 0.41.


author: Steven Pritchard <steve@kspei.com> 1:0.4302-1
changelog:
  - Update to DateTime 0.4302.
  - Update to DateTime::TimeZone 0.77.
  - Update to DateTime::Locale 0.4001.
  - BR List::MoreUtils.
  - Define IS_MAINTAINER so we run the pod tests.


author: Steven Pritchard <steve@kspei.com> 1:0.37-2
changelog:
  - Filter Win32::TieRegistry dependency.
  - Do the provides filter like we do in cpanspec.
  - Drop some macro usage.


author: Steven Pritchard <steve@kspei.com> 1:0.36-1
changelog:
  - Update to Date::Time 0.36.
  - Update to DateTime::Locale 0.33.
  - Update to DateTime::TimeZone 0.59.


author: Steven Pritchard <steve@kspei.com> 1:0.35-1
changelog:
  - Update to DateTime 0.35.
  - Update to DateTime::Locale 0.3101.
  - LICENSE.icu seems to have been renamed LICENSE.cldr.
  - Update to DateTime::TimeZone 0.54.
  - Use fixperms macro instead of our own chmod incantation.
  - Convert DateTime::LeapSecond to UTF-8 to avoid a rpmlint warning.


author: Steven Pritchard <steve@kspei.com> 1:0.32-1
changelog:
  - Update to DateTime 0.32.
  - Improve Summary, description, and source URLs.
  - Fix find option order.


author: Paul Howarth <paul@city-fan.org> 0.2901-2
changelog:
  - Unpack each tarball only once
  - Use Module::Build's build script where available
  - Help each module find the others when needed
  - Clean up files list
  - Include additional documentation from DT::Locale & DT::TimeZone
  - Add BR: perl(File::Find::Rule) & perl(Test::Pod) to improve test coverage
  - Remove unversioned provides of perl(DateTime) & perl(DateTime::TimeZone)


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-95
changelog:
  - Fix pegasus_openlmi_domain_template()
  - Remove pulseaudio filetrans pulseaudio_manage_home_dirs which is a part of pulseaudio_manage_home_files
  - Change cupsd_t to be allowed to manage own log files
  - Allow sge_execd_t to also connect to sge ports
  - Make gnome-abrt wokring with staff_t
  - Allow sge_execd to bind sge ports. Allow kill capability and reads cgroup files
  - Add web browser plugins to connect to aol ports
  - Update antivirus_can_scan_system boolean
  - Allow mozilla_plugin_t to create pulseaudit_home_t directories
  - mdadm runs ps command which seems to getattr on random log files
  - Allow cobblerd to read network state
  - Add port definition for sge ports
  - Allow useradd_t to r/w var_lib_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-94
changelog:
  - Fix allow rules for postfix_var_run
  - Allow cobblerd to read /etc/passwd
  - Allow keystonte_t to execute rpm
  - Allow tcpd to execute leafnode
  - Allow glance-api to connect to http port to make glance image-create working- Allow NUT to use serial ports
  - Allow postfix-showq to read/write unix.showq in /var/spool/postfix/pid
  - Allow virsh to read xen lock file
  - Allow qemu-ga to create files in /run with proper labeling
  - Allow glusterd to connect to own socket in /tmp
  - Allow unbound net_admin capability because of setsockopt syscall
  - Allow mout to stream connect to rpcbind


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-93
changelog:
  - Allow pki apache domain to create own tmp files and execute httpd_suexec
  - Allow NM and openvpn to acces files on encrypt /home
  - Allow procmail to manger user tmp files/dirs/lnk_files
  - Add virt_stream_connect_svirt() interface
  - Allow dovecot-auth to execute bin_t
  - Allow iscsid to request that kernel load a kernel module
  - Add labeling support for /var/lib/mod_security
  - Backport tuned policy from F19
  - Dontaudit sys_tty_config for thumb_t
  - Add labeling for nm-l2tp-service
  - Allow httpd running as certwatch_t to open tcp socket
  - Fix allow rules for postfix_var_run
  - Allow cobblerd to read /etc/passwd
  - Add support for nginx
  - Allow tcpd to execute leafnode
  - Allow mout to stream connect to rpcbind
  - Add labeling just for /usr/share/pki/ca-trust-source instead of /usr/share/pki


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-92
changelog:
  - Eliminate dontaudit rules so setroubleshoot and audit2allow can tell user what to do if apache attempts to use the terminal
  - Add transition from cupsd_config_t to cupsd_t
  - Fix chrome_role_notrans() to allow also append to stream socket
  - Allow gkeyring_domain to create /var/run/UID/config/dbus file
  - system dbus seems to be blocking suspend
  - Label aliases db files with correct label
  - Allow setroubleshootd to read var_lib_t to make email_alert working
  - Dontaudit attemps to sys_ptrace, which I believe gpsd does not need
  - Allow mpd getattr on file system directories
  - Add rsync_etc_filetrans_config()
  - Label /var/lib/sepolgen as selinux_config_t so that setroubleshoot can read it
  - Add filetrans rules for tw devices
  - Allow systemd-tty-ask to write kmsg
  - label shared libraries in /opt/google/chrome as testrel_shlib_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-91
changelog:
  - Allow domains to use kerberos to read file_context file
  - Allow mozilla_plugin to connect to port 8081
  - Tighten security on virtual machines
  - block_suspend is caps2
  - Allow realmd to run ipa, really needs to be an unconfined_domain
  - Allow sandbox domains to use inherted terminals
  - Allow pscd to use devices labeled svirt_image_t in order to use cat cards.
  - Add label for new alsa pid
  - Alsa now uses a pid file and needs to setsched
  - Allow nova domains to connect to mysql port
  - Allow quantum to connect to keystone port
  - Allow nova-console to talk with mysql over unix stream socket
  - Allow dirsrv to stream connect to uuidd
  - Fix transition for cobbler lib files
  - Label all nagios plugin as unconfined by default
  - Add httpd_serve_cobbler_files()
  - Allow mdadm to read /dev/sr0 and create tmp files
  - Allow certwatch to send mails
  - Allow livecd to transition to rpm_script_t
  - Add cache dir support for cobbler
  - label shared libraries in /opt/google/chrome as testrel_shlib_t
  - Fix labeling for nagios plugins
  - Disable support for .xsession-errors-:[digit] file name transition for now until policycoreutils fix


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-90
changelog:
  - Allow git_system_t to read network state
  - Allow pegasas to execute mount command
  - Allow nagios check disk plugins to execute bin_t
  - Remove transition to mozilla_tmp_t by mozilla_t, to allow it to manage the users tmp dirs
  - Allow quantum to transition to openvswitch_t
  - Allow quantum to use databas
  - allow quantum to stream connect to openvswitch
  - Allow alsa_t signal_perms, we probaly should search for any app that can execute something without transition and give it signal_perms...
  - Add dontaudit for mozilla_plugin_t looking at the xdm_t sockets
  - Allow winbind to manage kerberos_rcache_host
  - Allow spamd to create spamd_var_lib_t directories
  - Dontaudit attempts by httpd_t attempting to read rpm database.  Customer triggered this by executing createrepo, needs back port to rhel6
  - Add mising nslcd_dontaudit_write_sock_file() interface
  - Fix pki_read_tomcat_lib_files() interface
  - Allow certmonger to read pki-tomcat lib files
  - Allow certwatch to execute bin_t
  - Allow snmp to manage /var/lib/net-snmp files
  - Fix for openvswitch_stream_connect()
  - Add rgmanager_search_lib() interface
  - Fix pki_read_tomcat_lib_files() interface
  - Fix cobbler_manage_lib_files() interface
  - Add xserver_dontaudit_xdm_rw_stream_sockets() interface
  - Allow daemon to send dgrams to initrc_t
  - Update textrel_shlib_t names
  - Allow kdm to start the power service to initiate a reboot or poweroff


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-89
changelog:
  - Add port definition for osapi_compute port
  - User accounts need to dbus chat with accountsd daemon
  - fsadm_t sends audit messages in reads kernel_ipc_info when doing livecd-iso-to-disk
  - Allow NetworkManager to transition to ipsec_t, for running strongswan
  - Lots of access required by lvm_t to created encrypted usb device
  - Allow users to dbus chat with systemd_localed
  - Fix handling of .xsession-errors in xserver.if, so kde will work
  - Make sure we label content under /var/run/lock as <<none>>
  - Allow daemon and systemprocesses to search init_var_run_t directory
  - Add boolean to allow xdm to write xauth data to the home directory
  - Add labels to /etc/X11/xorg.d and allow systemd-timestampd_t to manage them
  - Allow httpd_t to connect to osapi_compute port using httpd_use_openstack bolean
  - Fix apache_read_sys_content_rw_dirs() interface
  - Fix sys_nice for cups_domain
  - Allow postfix_postdrop to acces postfix_public socket
  - Allow sched_setscheduler for cupsd_t
  - Looks like certmaster sends mail
  - Allow logrotate to read /var/log/z-push dir
  - Allow fsdaemon to send signull to all domains
  - yum-cron runs rpm from within it.
  - Allow tuned to transition to dmidecode
  - Allow firewalld to do net_admin
  - Call mailman_domain
  - FIx ircssi_home_t type to irssi_home_t
  - Correct file transition rul for qpidd_tmp
  - Fix qpidd policy
  - Add mailman_domain attribute
  - Allow openvswitch to execute shell
  - Allow qpidd to use kerberos
  - Allow mailman to use fusefs, needs back port to RHEL6
  - Allow apache and its scripts to use anon_inodefs
  - Realmd needs to connect to samba ports, needs back port to F18 also
  - Allow adcli running as realmd_t to connect to ldap port
  - Allow NetworkManager to transition to ipsec_t, for running strongswan
  - Make openshift_initrc_t an lxc_domain
  - Fix labeling for drupal an wp-content in subdirs of /var/www/html
  - Allow abrt to read utmp_t file
  - Fix openshift policy to transition lnk_file, sock-file an fifo_file when created in a tmpfs_t, needs back port to RHEL6
  - Allow gssd to manage user_tmp_t files
  - Fix handling of irclogs in users homedir
  - firewalld needs to be able to write to network sysctls
  - fix labeling for (oo|rhc)-restorer-wrapper.sh
  - Allow thumb_t to execute user home content
  - cups uses usbtty_device_t devices
  - These fixes were all required to build a MLS virtual Machine with single level desktops
  - Allow domains to transiton using httpd_exec_t
  - Allow svirt domains to manage kernel key rings
  - Allow setroubleshoot to execute ldconfig
  - Allow firewalld to read generate gnome data


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-88
changelog:
  - Allow abrt to manage mock build environments to catch build problems.
  - Allow virt_domains to setsched for running gdb on itself
  - Allow pulseaudio running as mozilla_plugin_t to read /run/systemd/users/1000
  - Allow cups_t to read inhered tmpfs_t from the kernel
  - Allow openshift_cron_t to look at quota
  - Allow cgred to send signal perms to itself, needs back port to RHEL6
  - Allow certwatch to execut /usr/bin/httpd
  - Allow yppasswdd to use NIS
  - Tuned wants sys_rawio capability
  - Allow thumb_t to execute user home content
  - Allow s-c-kdump to connect to syslogd
  - Allow condor domains block_suspend and dac_override caps
  - Allow condor_master to read passd
  - Allow condor_master to read system state
  - Allow mount to write keys for the unconfined domain
  - Add unconfined_write_keys() interface
  - Add labeling for /usr/share/pki
  - Add additional ports as mongod_port_t for  27018, 27019, 28017, 28018 and 28019 ports
  - Allow commands that are going to read mount pid files to search mount_var_run_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-87
changelog:
  - Allow commands that are going to read mount pid files to search mount_var_run_t
  - Make localectl set-x11-keymap working at all
  - Allow localectl to read /etc/X11/xorg.conf.d directory
  - Allow mount to transition to systemd_passwd_agent
  - Add tcp/9150 as tor_socks_port
  - Allow systemd to list all file system directories
  - Allow sytemd_tmpfiles to create wtmp file
  - Allow automount to block suspend
  - /var/spool/snmptt is a directory which snmdp needs to write to, needs back port to RHEL6
  - Add support for /run/lock/opencryptoki
  - Allow pkcsslotd chown capability
  - Allow pkcsslotd to read passwd


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-86
changelog:
  - cups uses usbtty_device_t devices
  - These fixes were all required to build a MLS virtual Machine with single level desktops
  - Allow domains to transiton using httpd_exec_t
  - Allow svirt domains to manage kernel key rings
  - Allow setroubleshoot to execute ldconfig
  - Allow firewalld to read generate gnome data
  - Add fixes which were all required to build a MLS virtual Machine with single level desktops
  - Need to back port this to RHEL6 for openshift
  - Make systemd_localed_t as unconfined for F18


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-85
changelog:
  - Allow bluetooth to read machine-info
  - Allow obex to request a kernel module
  - Allow mozilla_plugins to list apache modules, for use with gxine
  - Fix labels for POkemon in the users homedir
  - Allow xguest to read mdstat
  - Dontaudit virt_domains getattr on /dev/*
  - Allow boinc domain to send signal to itself
  - Add tcp/8891 as milter port
  - Allow nsswitch domains to read sssd_var_lib_t files
  - Allow ping to read network state.
  - Fix typo
  - Add labels to /etc/X11/xorg.d and allow systemd-timestampd_t to manage them
  - Add labeling for pstorefs_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-84
changelog:
  - Make systemd_hostnamed_t as unconfined domain in F18
  - Call rhcs_manage_cluster_pid_files() instead of rgmanger_manage_pid_files() interface
  - Allow sshd to stream connect to an lxc domain
  - Allow nsswitch_domains to read /etc/hostname
  - xdm_t will try to list any directory mounted, we should just dontaudit them
  - Fix systemd_filetrans_named_content() interface
  - Allow postgresql to manage rgmanager pid files
  - Allow postgresql to read ccs data
  - Allow systemd_domain to send dbus messages to policykit
  - Add labels for /etc/hostname and /etc/machine-info and allow systemd-hostnamed to create them
  - All systemd domains that create content are reading the file_context file and setfscreate
  - Systemd domains need to search through init_var_run_t
  - Allow sshd to communicate with libvirt to set containers labels
  - Add labeling for /var/run/hplip
  - Allow iscsid to read /dev/urandom
  - Allow sshd to log a user directly into a container
  - Allow screen domains to configure tty and setup sock_file in ~/.screen directory, dontaudit attempts to read /etc/shadow still need to dont audit dac_override
  - ALlow setroubleshoot to read default_context_t, needed to backport to F18
  - Label /etc/owncloud as being an apache writable directory
  - Add interface to manage pid files
  - Allow NetworkManger_t to read /etc/hostname
  - Allow virtual machines to setrlimit and send itself signals.
  - Dontaudit chrome_sandbox_nacl_t using user terminals
  - Allow gluster to manage all directories as well as files


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-83
changelog:
  - Fix iptables labels
  - Allow munin CGI scripts to append munin log file
  - Allow munin plugin domains to read passwd
  - Allow collectd CGI script to create /tmp content
  - Add mising gluster boolean
  - Allow collectd to create netlink_tcpdiag_socket
  - Allow proceman to check the state of the network


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-82
changelog:
  - Allow logrotate to read /sys
  - Allow mandb to setattr on man dirs
  - label /usr/bin/yum-builddep as rpm_exec_t
  - Remove init_daemon_run_dir from CUPS policy
  - Backport cups+hplip merge from rawhide
  - Allow munin CGI scritp to search munin logs
  - Allow quantum to connect to amqp port
  - Allow jabberd to connect to jabber_interserver_port_t
  - Fix authconfig.py labeling
  - Fix fcoemon policy
  - Allow kdumpgui to manage bootloader_config
  - Allow httpd_collectd_script to read /etc/passwd
  - Allow milter domains to read /dev/random
  - Allow nmbd_t to create samba_var_t directories
  - Allow logrotote to getattr on all file sytems
  - fcoemon wants also net_raw cap. We have net_admin cap.
  - Allow gpg-agent to access fips_enabled file
  - Allow collectd to read utmp
  - Backport munin policy from rawhide
  - Allow kadmind to read /etc/passwd
  - Dontaudit append .xsession-errors file on ecryptfs for  policykit-auth
  - Allow chrome_nacl to execute /dev/zero
  - Label /usr/lib64/security/pam_krb5/pam_krb5_cchelperas bin_t
  - Add fs_dontaudit_append_fusefs_files() interface
  - Allow systemd domains to talk to kernel_t using unix_dgram_socket
  - Add miscfiles_setattr_man_pages()
  - Add manage interface to be used bu kdumpgui
  - Localectl needs to be able to send dbus signals to users
  - Hostname needs to send syslog messages
  - Add stream support for mpd, accessible from users


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-81
changelog:
  - Fix systemd_dbus_chat_timedated interface
  - Allow userdomains to dbus chat with systemd-hostnamed
  - /usr/share/munin/plugins/plugin.sh should be labeled as bin_t
  - Fix dbus_system_domain() interface
  - Fix thumb_role() interface
  - Allow cgred to list inotifyfs filesystem
  - New access required for virt-sandbox
  - Allow gluster to get attrs on all fs
  - Allow dnsmasq to create content in /var/run/NetworkManager


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-80
changelog:
  - Update virt_qemu_ga_t policy
  - Allow authconfig running from realmd to restart oddjob service
  - Add systemd support for oddjob
  - Add initial policy for realmd_consolehelper_t which if for authconfig executed by realmd


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-79
changelog:
  - Fix condor policy
  - Add labeling for gnashpluginrc
  - Allow chrome_nacl to execute /dev/zero
  - Allow condor domains to read /proc
  - mozilla_plugin_t will getattr on /core if firefox crashes
  - Allow block_suspend cap2 for glusterd
  - Allow nmbd to read /dev/random
  - Fix glusterd labeling
  - dmraid creates /var/lock/dmraid
  - Allow systemd_localed to creatre unix_dgram_sockets
  - Allow systemd_localed to write kernel messages.
  - Also cleanup systemd definition a little.
  - Backport fixes for systemd-hostname policy to F18


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-78
changelog:
  - Label any block devices or char devices under /dev/infiniband as fixed_disk_device_t
  - Fix userdom_restricted_xwindows_user_template() interface
  - User accounts need to dbus chat with accountsd daemon
  - Gnome requires all users to be able to read /proc/1/
  - Add support for /var/lib/systemd/linger
  - Allow systemd-timestamp to set SELinux context
  - Fix systemd.fc
  - Switch gnomeclock_dbus_chat to systemd_dbus_chat_timedated since we have switched the name of gnomeclock
  - Allow sytstemd-timedated to get status of init_t
  - Add new systemd policies for hostnamed and rename gnomeclock_t to systemd_timedate_
  - Allow tuned to created kobject_uevent socket
  - Allow guest user to run fusermount
  - Allow openshift to read /proc and locale
  - Allow realmd to dbus chat with rpm
  - virsh now does a setexeccon call
  - Additional rules required by openshift domains
  - Allow svirt_lxc_domains to use inherited terminals, needed to make virt-sandbox-service execute work
  - Allow spamd_update_t to search spamc_home_t
  - Avcs discovered by mounting an isci device under /mnt
  - Avcs discovered by mounting an isci device under /mnt
  - Allow lspci running as logrotate to read pci.ids
  - Additional fix for networkmanager_read_pid_files()
  - Fix networkmanager_read_pid_files() interface
  - Allow all svirt domains to connect to svirt_socket_t
  - Allow virsh to set SELinux context for a process.
  - Allow tuned to create netlink_kobject_uevent_socket
  - Add new tuned_tmp_t type


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-77
changelog:
  - Add basic rules for pegasus_openlmi_domain
  - Add pegasus_openlmi_domain_template() interface for openlmi-*
  - Allow pppd to send signull
  - Allow tuned to execute ldconfig
  - Fix use_ecryptfs_home_dirs boolean for chrome_sandbox_t
  - Add additional fixes for ecrypts
  - Allow keystone getsched and setsched
  - ALlow nova-cert to connect to postgresql
  - Allow keystone to connect to postgresql
  - Allow glance domain to stream connect to databases
  - Allow all cups domains to getattr on filesystems
  - Fix pacemaker_use_execmem boolean
  - Allow gpg to read fips_enabled
  - FIXME: Add realmd_tmp_t until we get /var/cache/realmd
  - Add support for /var/cache/realmd
  - Add labeling for fenced_sanlock and allow sanclok transition to fenced_t
  - Allow glance domain to send a signal itself
  - Allow xend_t to request that the kernel load a kernel module
  - Add additional interface for ecryptfs


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-75
changelog:
  - Fix smartmontools
  - Fix userdom_restricted_xwindows_user_template() interface
  - Allow Xusers to ioctl lxdm.log to make lxdm working
  - Add xserver_xdm_ioctl_log() interface
  - Add MLS fixes to make MLS boot/log-in working
  - Add mls_socket_write_all_levels() also for syslogd
  - fsck.xfs needs to read passwd
  - Allow postgresql to create pg_log dir
  - Allow sshd to read rsync_data_t to make rsync <backuphost> working
  - Allow useradd to create homedirs in /run.  ircd-ratbox does this and we should just allow it
  - Allow xdm_t to execute gstreamer home content
  - Fix sssd_dontaudit_stream_connect() interface
  - Allow LDA's job to deliver mail to the mailbox
  - dontaudit block_suspend for mozilla_plugin_t
  - Dontaudit attempts by thumb_t to read or list /proc info
  - Allow l2tpd_t to all signal perms
  - Allow uuidgen to read /dev/random
  - Allow fsdaemon to use user pty
  - Add containment of openshift cron jobs
  - Allow system cron jobs to create tmp directories
  - Make userhelp_conf_t a config file
  - Allow mozilla-plugin-config to read power_supply info
  - More fixes for rsync to make rsync <backuphost> wokring
  - Allow fsdaemon to read svirt images[C
  - Allow logwatch to domtrans to mdadm


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-74
changelog:
  - Dontaudit r/w cache_home_t for thumb_t
  - Allow rsync to getattr any file in rsync_data_t
  - Allow l2tpd_t to read network manager content in /run directory
  - Allow named to block_suspend capability
  - Allow gnomesystemmm_t caps because of ioprio_set
  - Allow NM rawip socket
  - Add interface to thumb_t dbus_chat to allow it to read remote process state
  - ALlow logrotate to domtrans to mdadm_t
  - kde gnomeclock wants to write content to /tmp
  - kde gnomeclock wants to write content to /tmp
  - /usr/libexec/kde4/kcmdatetimehelper attempts to create /root/.kde
  - Allow blueman_t to rwx zero_device_t, for some kind of jre
  - Allow mozilla_plugin_t to rwx zero_device_t, for some kind of jre
  - Ftp full access should be allowed to create directories as well as files
  - Add boolean to allow rsync_full_acces, so that an rsync server can write all
  - over the local machine
  - logrotate needs to rotate logs in openshift directories
  - comment files_relabel_non_security_files for now, it does not work with boolean
  - boinc_cliean wants also execmem as boinc projecs have
  - Allow sa-update to search admin home for /root/.spamassassin
  - Allow sa-update to search admin home for /root/.spamassassin
  - Allow antivirus domain to read net sysctl
  - Dontaudit attempts from thumb_t to connect to ssd
  - Dontaudit attempts by readahead to read sock_files
  - Dontaudit attempts by readahead to read sock_files
  - Allow application_domains to send sigchld to login programs
  - Change ssh_use_pts to use macro and only inherited sshd_devpts_t
  - Allow confined users to read systemd_logind seat information


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-73
changelog:
  - Allow gnome keyring to create keyrings dir in ~/.local/share
  - Dontaudit thumb drives trying to bind to udp sockets if nis_enabled is turned on
  - Allow colord_t to read cupsd_t state
  - Add interface to colord_t dbus_chat to allow it to read remote process state


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-72
changelog:
  - Dontaudit net_admin capability for sendmail
  - Logwatch does access check on mdadm binary
  - Add raid_access_check_mdadm() iterface
  - Allow gpg_t to manage all gnome files
  - Add ~/.quakelive as mozilla_home_t content
  - Dontaudit mdadm_t running ps command which is causing sys_ptrace avcs
  - Allow virtd_t to create stream socket perms for svirt_socket_t, so that it can use guestmount.
  - Need to allow virtd_t to write to /proc in order to open namespace sockets for write.
  - Add a couple of dontaudit rules to silence the noice
  - Allow zarafa_deliver_t to bind to lmtp port, also consolodate signal_perms and setrlimit and kill to use zarafa_domain attribute
  - Add mate-thumbnail-font as thumnailer
  - Add pcscd_read_pid_files() interface
  - Lots of probing avc's caused by execugting gpg from staff_t
  - Looks like qpidd_t needs to read /dev/random
  - firewalld seems to be creating mmap files which it needs to execute in /run /tmp and /dev/shm.  Would like to clean this up but for now we will allow
  - Added systemd support for ksmtuned
  - Added booleans
   	ksmtuned_use_nfs
   	ksmtuned_use_cifs
  - Add definition for 2003 as an lmtp port
  - Add filename transition for opasswd


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-71
changelog:
  - Allow udev to communicate with the logind daemon
  - Add labeling for texlive bash scripts
  - Add xserver_filetrans_fonts_cache_home_content() interface
  - Allow rpm_script_t to dbus communicate with certmonger_t
  - Add support for /var/lock/man-db.lock
  - Add support for /var/tmp/abrt(/.*)?
  - Add additional labeling for munin cgi scripts
  - Allow httpd_t to read munin conf files
  - Allow certwatch to read meminfo
  - Fix nscd_dontaudit_write_sock_file() interface
  - Fix gnome_filetrans_home_content() to include also "fontconfig" dir as cache_home_t
  - Allow mozilla_plugin_t to create HOMEDIR/.fontconfig with the proper labeling
  - Allow numad access discovered by Dominic
  - Allow gnomeclock to talk to puppet over dbus
  - Add support for HOME_DIR/.maildir


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-70
changelog:
  - Add label for dns lib files
  - Allow svirt_t images to compromise_kernel when using pci-passthrough
  - Blueman uses ctypes which ends up triggering execmem priv.
  - Dontaudit attempts by thumb_t to use nscd
  - fsdaemon reads all images, if relabeled to svirt_image_t, it should be able to read it
  - Allow abrt to read proc_net_t
  - Allw NM to transition to l2tpd
  - Dontaudit chrome-nacl to append gnome config files
  - Add gnome_dontaudit_append_config_files()
  - Allow svirt_tcg_t to create netlink_route_socket
  - Label /var/lib/unbound as named_cache_t to allow named to write to this directory
  - Allow postfix domains to list /tmp
  - Allow dnsmasq to list tftpdir_rw_t content
  - Allow lxc domains to read fusefs, since libvirt is mounding a fuse file system at /proc/meminfo
  - Allow tmpreaper to delete tmpfs files in tmp
  - Dontaudit access check on tmp_t files/directories
  - dontaudit access checks on file systems types by firewalld
  - Allow mail_munin_plugins domain to run postconf
  - Allow spamd_update to manage gnupg directory
  - Add missing postfix_run_postqueue() interface
  - Add ntp_exec() interface
  - Fix setroubleshoot_fixit_t policy
  - Allow setroubleshoot_fixit to execute rpm
  - zoneminder needs to connect to httpd ports where remote cameras are listening
  - Allow firewalld to execute content created in /run directory
  - Allow svirt_t to read generic certs
  - Add label for Xvnc
  - Add interface to dontaudit access checks on tmp_t
  - Fix interface for dontaudit access check to include directory
  - interface to dontaudit access checks on file systems types
  - Add interface for postgesql_filetrans_name_content to make sure log directories get created with the correct label.
  - Allow sshd_t sys_admin for use with afs logins
  - Allow systemd to read/write all sysctls
  - Additional fix for chroot_user_t backported from RHEL6
  - Allow chroot_user_t to getattr on filesystems
  - Dontaudit vi attempting to relabel to self files
  - Sudo domain is attempting to get the additributes of proc_kcore_t
  - Unbound uses port 8953
  - 
  - Creating tmp-inst directory in a tmp_t directory should not transition
  - Allow init_t to write to watchdog device
  - Add file system definition for other vx file systems


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-69
changelog:
  - Add systemd_status_all_unit_files() interface
  - Add support for nshadow
  - Allow sysadm_t to administrate the postfix domains
  - Add interface to setattr on isid directories for use by tmpreaper
  - Allow sshd_t sys_admin for use with afs logins
  - Allow systemd to read/write all sysctls
  - Allow sshd_t sys_admin for use with afs logins
  - Allow systemd to read/write all sysctls
  - Add systemd_status_all_unit_files() interface
  - Add support for nshadow
  - Allow sysadm_t to administrate the postfix domains
  - Add interface to setattr on isid directories for use by tmpreaper
  - Allow sshd_t sys_admin for use with afs logins
  - Allow systemd to read/write all sysctls
  - Allow sshd_t sys_admin for use with afs logins
  - Add labeling for /var/named/chroot/etc/localtim


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-68
changelog:
  - Allow setroubleshoot_fixit to execute rpm
  - zoneminder needs to connect to httpd ports where remote cameras are listening
  - Allow firewalld to execute content created in /run directory
  - Allow svirt_t to read generic certs
  - Dontaudit leaked ps content to mozilla plugin
  - Allow sshd_t sys_admin for use with afs logins
  - Allow systemd to read/write all sysctls
  - init scripts are creating systemd_unit_file_t directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-67
changelog:
  - systemd_logind_t is looking at all files under /run/user/apache
  - Allow systemd to manage all user tmp files
  - Add labeling for /var/named/chroot/etc/localtime
  - Allow netlabel_peer_t type to flow over netif_t and node_t, and only be hindered by MLS, need back port to RHEL6
  - Keystone is now using a differnt port
  - Allow xdm_t to use usbmuxd daemon to control sound
  - Allow passwd daemon to execute gnome_exec_keyringd
  - Fix chrome_sandbox policy
  - Add labeling for /var/run/checkquorum-timer
  - More fixes for the dspam domain, needs back port to RHEL6
  - More fixes for the dspam domain, needs back port to RHEL6
  - sssd needs to connect to kerberos password port if a user changes his password
  - Lots of fixes from RHEL testing of dspam web
  - Allow chrome and mozilla_plugin to create msgq and semaphores
  - Fixes for dspam cgi scripts
  - Fixes for dspam cgi scripts
  - Allow confine users to ptrace screen
  - Backport virt_qemu_ga_t changes from RHEL
  - Fix labeling for dspam.cgi needed for RHEL6
  - We need to back port this policy to RHEL6, for lxc domains
  - Dontaudit attempts to set sys_resource of logrotate
  - Allow corosync to read/write wdmd's tmpfs files
  - I see a ptrace of mozilla_plugin_t by staff_t, will allow without deny_ptrace being set
  - Allow cron jobs to read bind config for unbound
  - libvirt needs to inhibit systemd
  - kdumpctl needs to delete boot_t files
  - Fix duplicate gnome_config_filetrans
  - virtd_lxc_t is using /dev/fuse
  - Passenger needs to create a directory in /var/log, needs a backport to RHEL6 for openshift
  - apcupsd can be setup to listen to snmp trafic
  - Allow transition from kdumpgui to kdumpctl
  - Add fixes for munin CGI scripts
  - Allow deltacloud to connect to openstack at the keystone port
  - Allow domains that transition to svirt domains to be able to signal them
  - Fix file context of gstreamer in .cache directory
  - libvirt is communicating with logind
  - NetworkManager writes to the systemd inhibit pipe


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-66
changelog:
  - Allow munin disk plugins to get attributes of all directories
  - Allow munin disk plugins to get attributes of all directorie
  - Allow logwatch to get attributes of all directories
  - Fix networkmanager_manage_lib() interface
  - Fix gnome_manage_config() to allow to manage sock_file
  - Fix virtual_domain_context
  - Add support for dynamic DNS for DHCPv6


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-65
changelog:
  - Allow svirt to use netlink_route_socket which was a part of auth_use_nsswitch
  - Add additional labeling for /var/www/openshift/broker
  - Fix rhev policy
  - Allow openshift_initrc domain to dbus chat with systemd_logind
  - Allow httpd to getattr passenger log file if run_stickshift
  - Allow consolehelper-gtk to connect to xserver
  - Add labeling for the tmp-inst directory defined in pam_namespace.conf
  - Add lvm_metadata_t labeling for /etc/multipath


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-63
changelog:
  - Add label for efivarfs
  - Allow certmonger to send signal to itself
  - Allow plugin-config to read own process status
  - Add more fixes for pacemaker
  - apache/drupal can run clamscan on uploaded content
  - Allow chrome_sandbox_nacl_t to read pid 1 content


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-62
changelog:
  - Fix MCS Constraints to control ingres and egres controls on the network.
  - Change name of svirt_nokvm_t to svirt_tcg_t
  - Allow tuned to request the kernel to load kernel modules


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-61
changelog:
  - Label /var/lib/pgsql/.ssh as ssh_home_t
  - Add labeling for /usr/bin/pg_ctl
  - Allow systemd-logind to manage keyring user tmp dirs
  - Add support for 7389/tcp port
  - gems seems to be placed in lots of places
  - Since xdm is running a full session, it seems to be trying to execute lots of executables via dbus
  - Add back tcp/8123 port as http_cache port
  - Add ovirt-guest-agent\.pid labeling
  - Allow xend to run scsi_id
  - Allow rhsmcertd-worker to read "physical_package_id"
  - Allow pki_tomcat to connect to ldap port
  - Allow lpr to read /usr/share/fonts
  - Allow open file from CD/DVD drive on domU
  - Allow munin services plugins to talk to SSSD
  - Allow all samba domains to create samba directory in var_t directories
  - Take away svirt_t ability to use nsswitch
  - Dontaudit attempts by openshift to read apache logs
  - Allow apache to create as well as append _ra_content_t
  - Dontaudit sendmail_t reading a leaked file descriptor
  - Add interface to have admin transition /etc/prelink.cache to the proper label
  - Add sntp support to ntp policy
  - Allow firewalld to dbus chat with devicekit_power
  - Allow tuned to call lsblk
  - Allow tor to read /proc/sys/kernel/random/uuid
  - Add tor_can_network_relay boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-60
changelog:
  - Add openshift_initrc_signal() interface
  - Fix typos
  - dspam port is treat as spamd_port_t
  - Allow setroubleshoot to getattr on all executables
  - Allow tuned to execute profiles scripts in /etc/tuned
  - Allow apache to create directories to store its log files
  - Allow all directories/files in /var/log starting with passenger to be labeled passenger_log_t
  - Looks like apache is sending sinal to openshift_initrc_t now,needs back port to RHEL6
  - Allow Postfix to be configured to listen on TCP port 10026 for email from DSPAM
  - Add filename transition for /etc/tuned/active_profile
  - Allow condor_master to send mails
  - Allow condor_master to read submit.cf
  - Allow condor_master to create /tmp files/dirs
  - Allow condor_mater to send sigkill to other condor domains
  - Allow condor_procd sigkill capability
  - tuned-adm wants to talk with tuned daemon
  - Allow kadmind and krb5kdc to also list sssd_public_t
  - Allow accountsd to dbus chat with init
  - Fix git_read_generic_system_content_files() interface
  - pppd wants sys_nice by nmcli because of "syscall=sched_setscheduler"
  - Fix mozilla_plugin_can_network_connect to allow to connect to all ports
  - Label all munin plugins which are not covered by munin plugins policy  as unconfined_munin_plugin_exec_t
  - dspam wants to search /var/spool for opendkim data
  - Revert "Add support for tcp/10026 port as dspam_port_t"
  - Turning on labeled networking requires additional access for netlabel_peer_t; these allow rules need to be back ported to RHEL6
  - Allow all application domains to use fifo_files passed in from userdomains, also allow them to write to tmp_files inherited from userdomain
  - Allow systemd_tmpfiles_t to setattr on mandb_cache_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-58
changelog:
  - Add back consolekit policy
  - Silence bootloader trying to use inherited tty
  - Silence xdm_dbusd_t trying to execute telepathy apps
  - Fix shutdown avcs when machine has unconfined.pp disabled
  - The host and a virtual machine can share the same printer on a usb device
  - Change oddjob to transition to a ranged openshift_initr_exec_t when run from oddjob
  - Allow abrt_watch_log_t to execute bin_t
  - Allow chrome sandbox to write content in ~/.config/chromium
  - Dontaudit setattr on fontconfig dir for thumb_t
  - Allow lircd to request the kernel to load module
  - Make rsync as userdom_home_manager
  - Allow rsync to search automount filesystem
  - Add fixes for pacemaker


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-57
changelog:
  - Add support for 4567/tcp port
  - Random fixes from Tuomo Soini
  - xdm wants to get init status
  - Allow programs to run in fips_mode
  - Add interface to allow the reading of all blk device nodes
  - Allow init to relabel rpcbind sock_file
  - Fix labeling for lastlog and faillog related to logrotate
  - ALlow aeolus_configserver to use TRAM port
  - Add fixes for aeolus_configserver
  - Allow snmpd to connect to snmp port
  - Allow spamd_update to create spamd_var_lib_t directories
  - Allow domains that can read sssd_public_t files to also list the directory
  - Remove miscfiles_read_localization, this is defined for all domains


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-56
changelog:
  - Allow syslogd to request the kernel to load a module
  - Allow syslogd_t to read the network state information
  - Allow xdm_dbusd_t connect to the system DBUS
  - Add support for 7389/tcp port
  - Allow domains to read/write all inherited sockets
  - Allow staff_t to read kmsg
  - Add awstats_purge_apache_log boolean
  - Allow ksysguardproces to read /.config/Trolltech.conf
  - Allow passenger to create and append puppet log files
  - Add puppet_append_log and puppet_create_log interfaces
  - Add puppet_manage_log() interface
  - Allow tomcat domain to search tomcat_var_lib_t
  - Allow pki_tomcat_t to connect to pki_ca ports
  - Allow pegasus_t to have net_admin capability
  - Allow pegasus_t to write /sys/class/net/<interface>/flags
  - Allow mailserver_delivery to manage mail_home_rw_t lnk_files
  - Allow fetchmail to create log files
  - Allow gnomeclock to manage home config in .kde
  - Allow bittlebee to read kernel sysctls
  - Allow logrotate to list /root


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-55
changelog:
  - Fix userhelper_console_role_template()
  - Allow enabling Network Access Point service using blueman
  - Make vmware_host_t as unconfined domain
  - Allow authenticate users in webaccess via squid, using mysql as backend
  - Allow gathers to get various metrics on mounted file systems
  - Allow firewalld to read /etc/hosts
  - Fix cron_admin_role() to make sysadm cronjobs running in the sysadm_t instead of cronjob_t
  - Allow kdumpgui to read/write to zipl.conf
  - Commands needed to get mock to build from staff_t in enforcing mode
  - Allow mdadm_t to manage cgroup files
  - Allow all daemons and systemprocesses to use inherited initrc_tmp_t files
  - dontaudit ifconfig_t looking at fifo_files that are leaked to it
  - Add lableing for Quest Authentication System


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-54
changelog:
  - Fix filetrans interface definitions
  - Dontaudit xdm_t to getattr on BOINC lib files
  - Add systemd_reload_all_services() interface
  - Dontaudit write access on /var/lib/net-snmp/mib_indexes 
  - Only stop mcsuntrustedproc from relableing files
  - Allow accountsd to dbus chat with gdm
  - Allow realmd to getattr on all fs
  - Allow logrotate to reload all services
  - Add systemd unit file for radiusd
  - Allow winbind to create samba pid dir
  - Add labeling for /var/nmbd/unexpected
  - Allow chrome and mozilla plugin to connect to msnp ports


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-53
changelog:
  - Fix storage_rw_inherited_fixed_disk_dev() to cover also blk_file
  - Dontaudit setfiles reading /dev/random
  - On initial boot gnomeclock is going to need to be set buy gdm
  - Fix tftp_read_content() interface
  - Random apps looking at kernel file systems
  - Testing virt with lxc requiers additional access for virsh_t
  - New allow rules requied for latest libvirt, libvirt talks directly to journald,lxc setup tool needs compromize_kernel,and we need ipc_lock in the container
  - Allow MPD to read /dev/radnom
  - Allow sandbox_web_type to read logind files which needs to read pulseaudio
  - Allow mozilla plugins to read /dev/hpet
  - Add labeling for /var/lib/zarafa-webap
  - Allow BOINC client to use an HTTP proxy for all connections
  - Allow rhsmertd to domain transition to dmidecod
  -  Allow setroubleshootd to send D-Bus msg to ABRT


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-52
changelog:
  - Define usbtty_device_t as a term_tty
  - Allow svnserve to accept a connection
  - Allow xend manage default virt_image_t type
  - Allow prelink_cron_system_t to overide user componant when executing cp
  - Add labeling for z-push
  - Gnomeclock sets the realtime clock
  - Openshift seems to be storing apache logs in /var/lib/openshift/.log/httpd
  - Allow lxc domains to use /dev/random and /dev/urandom


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-51
changelog:
  - Add port defintion for tcp/9000
  - Fix labeling for /usr/share/cluster/checkquorum to label also checkquorum.wdmd
  - Add rules and labeling for $HOME/cache/\.gstreamer-.* directory
  - Add support for CIM provider openlmi-networking which uses NetworkManager dbus API
  - Allow shorewall_t to create netlink_socket
  - Allow krb5admind to block suspend
  - Fix labels on /var/run/dlm_controld /var/log/dlm_controld
  - Allow krb5kdc to block suspend
  - gnomessytemmm_t needs to read /etc/passwd
  - Allow cgred to read all sysctls


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-50
changelog:
  - Allow all domains to read /proc/sys/vm/overcommit_memory
  - Make proc_numa_t an MLS Trusted Object
  - Add /proc/numactl support for confined users
  - Allow ssh_t to connect to any port > 1023
  - Add openvswitch domain
  - Pulseaudio tries to create directories in gnome_home_t directories
  - New ypbind pkg wants to search /var/run which is caused by sd_notify
  - Allow NM to read certs on NFS/CIFS using use_nfs_*, use_samba_* booleans
  - Allow sanlock to read /dev/random
  - Treat php-fpm with httpd_t
  - Allow domains that can read named_conf_t to be able to list the directories
  - Allow winbind to create sock files in /var/run/samba


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-49
changelog:
  - Add smsd policy
  - Add support for OpenShift sbin labelin
  - Add boolean to allow virt to use rawip
  - Allow mozilla_plugin to read all file systems with noxattrs support
  - Allow kerberos to write on anon_inodefs fs
  - Additional access required by fenced
  - Add filename transitions for passwd.lock/group.lock
  - UPdate man pages
  - Create coolkey directory in /var/cache with the correct label


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-48
changelog:
  - Fix label on /etc/group.lock
  - Allow gnomeclock to create lnk_file in /etc
  - label /root/.pki as a home_cert_t
  - Add interface to make sure rpcbind.sock is created with the correct label
  - Add definition for new directory /var/lib/os-probe and bootloader wants to read udev rules
  - opendkim should be a part of milter
  - Allow libvirt to set the kernel sched algorythm
  - Allow mongod to read sysfs_t
  - Add authconfig policy
  - Remove calls to miscfiles_read_localization all domains get this
  - Allow virsh_t to read /root/.pki/ content
  - Add label for log directory under /var/www/stickshift


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-47
changelog:
  - Allow getty to setattr on usb ttys
  - Allow sshd to search all directories for sshd_home_t content
  - Allow staff domains to send dbus messages to kdumpgui
  - Fix labels on /etc/.pwd.lock and friends to be passwd_file_t
  - Dontaudit setfiles reading urand
  - Add files_dontaudit_list_tmp() for domains to which we added sys_nice/setsched
  - Allow staff_gkeyringd_t to read /home/$USER/.local/share/keyrings dir
  - Allow systemd-timedated to read /dev/urandom
  - Allow entropyd_t to read proc_t (meminfo)
  - Add unconfined munin plugin
  - Fix networkmanager_read_conf() interface
  - Allow blueman to list /tmp which is needed by sys_nic/setsched
  - Fix label of /etc/mail/aliasesdb-stamp
  - numad is searching cgroups
  - realmd is communicating with networkmanager using dbus
  - Lots of fixes to try to get kdump to work


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-46
changelog:
  - Allow loging programs to dbus chat with realmd
  - Make apache_content_template calling as optional
  - realmd is using policy kit


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-45
changelog:
  - Add new selinuxuser_use_ssh_chroot boolean
  - dbus needs to be able to read/write inherited fixed disk device_t passed through it
  - Cleanup netutils process allow rule
  - Dontaudit leaked fifo files from openshift to ping
  - sanlock needs to read mnt_t lnk files
  - Fail2ban needs to setsched and sys_nice


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-44
changelog:
  - Change default label of all files in /var/run/rpcbind
  - Allow sandbox domains (java) to read hugetlbfs_t
  - Allow awstats cgi content to create tmp files and read apache log files
  - Allow setuid/setgid for cupsd-config
  - Allow setsched/sys_nice pro cupsd-config
  -  Fix /etc/localtime sym link to be labeled locale_t
  - Allow sshd to search postgresql db t since this is a homedir
  - Allow xwindows users to chat with realmd
  - Allow unconfined domains to configure all files and null_device_t service


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-42
changelog:
  - pki is leaking which we dontaudit until a pki code fix
  - Allow setcap for arping
  - Update man pages
  - Add labeling for /usr/sbin/mcollectived
  - pki fixes
  - Allow smokeping to execute fping in the netutils_t domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-41
changelog:
  - Allow mount to relabelfrom unlabeled file systems
  - systemd_logind wants to send and receive messages from devicekit disk over dbus to make connected mouse working
  - Add label to get bin files under libreoffice labeled correctly
  - Fix interface to allow executing of base_ro_file_type
  - Add fixes for realmd
  - Update pki policy
  - Add tftp_homedir boolean
  - Allow blueman sched_setscheduler
  - openshift user domains wants to r/w ssh tcp sockets


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-40
changelog:
  - Additional requirements for disable unconfined module when booting
  - Fix label of systemd script files
  - semanage can use -F /dev/stdin to get input
  - syslog now uses kerberos keytabs
  - Allow xserver to compromise_kernel access
  -  Allow nfsd to write to mount_var_run_t when running the mount command
  - Add filename transition rule for bin_t directories
  - Allow files to read usr_t lnk_files
  - dhcpc wants chown
  - Add support for new openshift labeling
  - Clean up for tunable+optional statements
  - Add labeling for /usr/sbin/mkhomedir_helper
  - Allow antivirus domain to managa amavis spool files
  - Allow rpcbind_t to read passwd 
  - Allow pyzor running as spamc to manage amavis spool


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-39
changelog:
  - Add interfaces to read kernel_t proc info
  - Missed this version of exec_all
  - Allow anyone who can load a kernel module to compromise kernel
  - Add oddjob_dbus_chat to openshift apache policy
  - Allow chrome_sandbox_nacl_t to send signals to itself
  - Add unit file support to usbmuxd_t
  - Allow all openshift domains to read sysfs info
  - Allow openshift domains to getattr on all domains


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-37
changelog:
  - Allow xdm to search all file systems
  - Add interface to allow the config of all files
  - Add rngd policy
  - Remove kgpg as a gpg_exec_t type
  - Allow plymouthd to block suspend
  - Allow systemd_dbus to config any file
  - Allow system_dbus_t to configure all services
  - Allow freshclam_t to read usr_files
  - varnishd requires execmem to load modules


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-36
changelog:
  - Allow semanage to verify types
  - Allow sudo domain to execute user home files
  - Allow session_bus_type to transition to user_tmpfs_t
  - Add dontaudit caused by yum updates
  - Implement pki policy but not activated


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-35
changelog:
  - tuned wants to getattr on all filesystems
  - tuned needs also setsched. The build is needed for test day


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-34
changelog:
  - Add policy for qemu-qa
  - Allow razor to write own config files
  -  Add an initial antivirus policy to collect all antivirus program
  - Allow qdisk to read usr_t
  - Add additional caps for vmware_host
  - Allow tmpfiles_t to setattr on mandb_cache_t
  - Dontaudit leaked files into mozilla_plugin_config_t
  - Allow wdmd to getattr on tmpfs
  - Allow realmd to use /dev/random
  - allow containers to send audit messages
  - Allow root mount any file via loop device with enforcing mls policy
  - Allow tmpfiles_t to setattr on mandb_cache_t
  - Allow tmpfiles_t to setattr on mandb_cache_t
  - Make userdom_dontaudit_write_all_ not allow open
  - Allow init scripts to read all unit files
  - Add support for saphostctrl ports


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-33
changelog:
  - Add kernel_read_system_state to sandbox_client_t
  - Add some of the missing access to kdumpgui
  - Allow systemd_dbusd_t to status the init system
  - Allow vmnet-natd to request the kernel to load a module
  - Allow gsf-office-thum to append .cache/gdm/session.log
  - realmd wants to read .config/dconf/user
  - Firewalld wants sys_nice/setsched
  - Allow tmpreaper to delete mandb cache files
  - Firewalld wants sys_nice/setsched
  - Allow firewalld to perform  a DNS name resolution
  - Allown winbind to read /usr/share/samba/codepages/lowcase.dat
  - Add support for HTTPProxy* in /etc/freshclam.conf
  - Fix authlogin_yubike boolean
  - Extend smbd_selinux man page to include samba booleans
  - Allow dhcpc to execute consoletype
  - Allow ping to use inherited tmp files created in init scripts
  - On full relabel with unconfined domain disabled, initrc was running some chcon's
  - Allow people who delete man pages to delete mandb cache files


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-31
changelog:
  - Add new mandb policy
  - ALlow systemd-tmpfiles_t to relabel mandb_cache_t
  - Allow logrotate to start all unit files


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-30
changelog:
  - Add fixes for ctbd
  - Allow nmbd to stream connect to ctbd
  - Make cglear_t as nsswitch_domain
  - Fix bogus in interfaces
  - Allow openshift to read/write postfix public pipe
  - Add postfix_manage_spool_maildrop_files() interface
  - stickshift paths have been renamed to openshift
  - gnome-settings-daemon wants to write to /run/systemd/inhibit/ pipes
  - Update man pages, adding ENTRYPOINTS


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-29
changelog:
  -  Add mei_device_t
  - Make sure gpg content in homedir created with correct label
  - Allow dmesg to write to abrt cache files
  - automount wants to search  virtual memory sysctls
  - Add support for hplip logs stored in /var/log/hp/tmp
  - Add labeling for /etc/owncloud/config.php
  - Allow setroubleshoot to send analysys to syslogd-journal
  - Allow virsh_t to interact with new fenced daemon
  - Allow gpg to write to /etc/mail/spamassassiin directories
  - Make dovecot_deliver_t a mail server delivery type
  - Add label for /var/tmp/DNS25


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-27
changelog:
  - Remove init_systemd and init_upstart boolean, Move init_daemon_domain and init_system_domain to use attributes
  - Add attribute to all base os types.  Allow all domains to read all ro base OS types


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-24
changelog:
  - dbus needs to start getty unit files
  - Add interface to allow system_dbusd_t to start the poweroff service
  - xdm wants to exec telepathy apps
  - Allow users to send messages to systemdlogind
  - Additional rules needed for systemd and other boot apps
  - systemd wants to list /home and /boot
  - Allow gkeyringd to write dbus/conf file
  - realmd needs to read /dev/urand
  - Allow readahead to delete /.readahead if labeled root_t, might get created before policy is loaded


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-23
changelog:
  - Fixes to safe more rules
  - Re-write tomcat_domain_template()
  - Fix passenger labeling
  - Allow all domains to read man pages
  - Add ephemeral_port_t to the 'generic' port interfaces
  - Fix the names of postgresql booleans


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-22
changelog:
  - Stop using attributes form netlabel_peer and syslog, auth_use_nsswitch setsup netlabel_peer
  - Move netlable_peer check out of booleans
  - Remove call to recvfrom_netlabel for kerberos call
  - Remove use of attributes when calling syslog call 
  - Move -miscfiles_read_localization to domain.te to save hundreds of allow rules
  - Allow all domains to read locale files.  This eliminates around 1500 allow rules- Cleanup nis_use_ypbind_uncond interface
  - Allow rndc to block suspend
  - tuned needs to modify the schedule of the kernel
  - Allow svirt_t domains to read alsa configuration files
  - ighten security on irc domains and make sure they label content in homedir correctly
  - Add filetrans_home_content for irc files
  - Dontaudit all getattr access for devices and filesystems for sandbox domains
  - Allow stapserver to search cgroups directories
  - Allow all postfix domains to talk to spamd


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-21
changelog:
  - Add interfaces to ignore setattr until kernel fixes this to be checked after the DAC check
  - Change pam_t to pam_timestamp_t
  - Add dovecot_domain attribute and allow this attribute block_suspend capability2
  - Add sanlock_use_fusefs boolean
  - numad wants send/recieve msg
  - Allow rhnsd to send syslog msgs
  - Make piranha-pulse as initrc domain
  - Update openshift instances to dontaudit setattr until the kernel is fixed.


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-20
changelog:
  -  Fix auth_login_pgm_domain() interface to allow domains also managed user tmp dirs because of #856880 related to pam_systemd
  - Remove pam_selinux.8 which conflicts with man page owned by the pam package
  - Allow glance-api to talk to mysql
  - ABRT wants to read Xorg.0.log if if it detects problem with Xorg
  - Fix gstreamer filename trans. interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-18
changelog:
  - Allow postalias to read postfix config files
  - Allow man2html to read man pages
  - Allow rhev-agentd to search all mountpoints
  - Allow rhsmcertd to read /dev/random
  - Add tgtd_stream_connect() interface
  - Add cyrus_write_data() interface
  - Dontaudit attempts by sandboxX clients connectiing to the xserver_port_t
  - Add port definition for tcp/81 as http_port_t
  - Fix /dev/twa labeling
  - Allow systemd to read modules config


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-17
changelog:
  - Merge openshift policy
  - Allow xauth to read /dev/urandom
  - systemd needs to relabel content in /run/systemd directories
  - Files unconfined should be able to perform all services on all files
  - Puppet tmp file can be leaked to all domains
  - Dontaudit rhsmcertd-worker to search /root/.local
  - Allow chown capability for zarafa domains
  -  Allow system cronjobs to runcon into openshift domains
  - Allow virt_bridgehelper_t to manage content in the svirt_home_t labeled directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-16
changelog:
  - nmbd wants to create /var/nmbd
  -  Stop transitioning out of anaconda and firstboot, just causes AVC messages
  - Allow clamscan to read /etc files
  - Allow bcfg2 to bind cyphesis port
  - heartbeat should be run as rgmanager_t instead of corosync_t
  - Add labeling for /etc/openldap/certs
  - Add labeling for /opt/sartest directory
  - Make crontab_t as userdom home reader
  - Allow tmpreaper to list admin_home dir
  - Add defition for imap_0 replay cache file
  - Add support for gitolite3
  - Allow virsh_t to send syslog messages
  - allow domains that can read samba content to be able to list the directories also
  - Add realmd_dbus_chat to allow all apps that use nsswitch to talk to realmd
  - Separate out sandbox from sandboxX policy so we can disable it by default
  - Run dmeventd as lvm_t
  - Mounting on any directory requires setattr and write permissions
  - Fix use_nfs_home_dirs() boolean
  - New labels for pam_krb5
  - Allow init and initrc domains to sys_ptrace since this is needed to look at processes not owned by uid 0
  - Add realmd_dbus_chat to allow all apps that use nsswitch to talk to realmd


author: Dan Walsh <dwalsh@redhat.com> 3.11.1-15
changelog:
  - Separate sandbox policy into sandbox and sandboxX, and disable sandbox by default on fresh installs
  - Allow domains that can read etc_t to read etc_runtime_t 
  - Allow all domains to use inherited tmpfiles


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-14
changelog:
  - Allow realmd to read resolv.conf
  - Add pegasus_cache_t type
  - Label /usr/sbin/fence_virtd as virsh_exec_t
  - Add policy for pkcsslotd
  - Add support for cpglockd
  - Allow polkit-agent-helper to read system-auth-ac
  - telepathy-idle wants to read gschemas.compiled
  - Allow plymouthd to getattr on fs_t
  - Add slpd policy
  - Allow ksysguardproces to read/write config_usr_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-12
changelog:
  - Add file name transitions for ttyACM0
  - spice-vdagent(d)'s are going to log over to syslog
  - Add sensord policy
  - Add more fixes for passenger policy related to puppet
  - Allow wdmd to create wdmd_tmpfs_t
  - Fix labeling for /var/run/cachefilesd\.pid
  - Add thumb_tmpfs_t files type


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-11
changelog:
  - Allow svirt domains to manage the network since this is containerized
  - Allow svirt_lxc_net_t to send audit messages


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-10
changelog:
  - Make "snmpwalk -mREDHAT-CLUSTER-MIB ...." working
  - Allow dlm_controld to execute dlm_stonith labeled as bin_t
  - Allow GFS2 working on F17
  - Abrt needs to execute dmesg
  - Allow jockey to list the contents of modeprobe.d
  - Add policy for lightsquid as squid_cron_t
  - Mailscanner is creating files and directories in /tmp
  - dmesg is now reading /dev/kmsg
  - Allow xserver to communicate with secure_firmware
  - Allow fsadm tools (fsck) to read /run/mount contnet
  - Allow sysadm types to read /dev/kmsg
  -


author: Dan Walsh <dwalsh@redhat.com> 3.11.1-9
changelog:
  - Allow postfix, sssd, rpcd to block_suspend
  - udev seems to need secure_firmware capability
  - Allow virtd to send dbus messages to firewalld so it can configure the firewall


author: Dan Walsh <dwalsh@redhat.com> 3.11.1-8
changelog:
  - Fix labeling of content in /run created by virsh_t
  - Allow condor domains to read kernel sysctls
  - Allow condor_master to connect to amqp
  - Allow thumb drives to create shared memory and semaphores
  - Allow abrt to read mozilla_plugin config files
  - Add labels for lightsquid
  - Default files in /opt and /usr that end in .cgi as httpd_sys_script_t, allow
  - dovecot_auth_t uses ldap for user auth
  - Allow domains that can read dhcp_etc_t to read lnk_files
  - Add more then one watchdog device
  - Allow useradd_t to manage etc_t files so it can rename it and edit them
  - Fix invalid class dir should be fifo_file
  - Move /run/blkid to fsadm and make sure labeling is correct


author: Dan Walsh <dwalsh@redhat.com> 3.11.1-7
changelog:
  - Fix bogus regex found by eparis
  - Fix manage run interface since lvm needs more access
  - syslogd is searching cgroups directory
  - Fixes to allow virt-sandbox-service to manage lxc var run content


author: Dan Walsh <dwalsh@redhat.com> 3.11.1-6
changelog:
  - Fix Boolean settings
  - Add new libjavascriptcoregtk as textrel_shlib_t
  - Allow xdm_t to create xdm_home_t directories
  - Additional access required for systemd
  - Dontaudit mozilla_plugin attempts to ipc_lock
  - Allow tmpreaper to delete unlabeled files
  - Eliminate screen_tmp_t and allow it to manage user_tmp_t
  - Dontaudit mozilla_plugin_config_t to append to leaked file descriptors
  - Allow web plugins to connect to the asterisk ports
  - Condor will recreate the lock directory if it does not exist
  - Oddjob mkhomedir needs to connectto user processes
  - Make oddjob_mkhomedir_t a userdom home manager


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-5
changelog:
  - Put placeholder back in place for proper numbering of capabilities
  - Systemd also configures init scripts


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-4
changelog:
  - Fix ecryptfs interfaces
  - Bootloader seems to be trolling around /dev/shm and /dev
  - init wants to create /etc/systemd/system-update.target.wants
  - Fix systemd_filetrans call to move it out of tunable
  - Fix up policy to work with systemd userspace manager
  - Add secure_firmware capability and remove bogus epolwakeup
  - Call seutil_*_login_config interfaces where should be needed
  - Allow rhsmcertd to send signal to itself
  - Allow thin domains to send signal to itself
  - Allow Chrome_ChildIO to read dosfs_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-2
changelog:
  - Add new type selinux_login_config_t for /etc/selinux/<type>/logins/
  - Additional fixes for seutil_manage_module_store()
  - dbus_system_domain() should be used with optional_policy
  - Fix svirt to be allowed to use fusefs file system
  - Allow login programs to read /run/ data created by systemd_login
  - sssd wants to write /etc/selinux/<policy>/logins/ for SELinux PAM module
  - Fix svirt to be allowed to use fusefs file system
  - Allow piranha domain to use nsswitch
  - Sanlock needs to send Kill Signals to non root processes
  - Pulseaudio wants to execute /run/user/PID/.orc


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.1-1
changelog:
  - Fix saslauthd when it tries to read /etc/shadow
  - Label gnome-boxes as a virt homedir
  - Need to allow svirt_t ability to getattr on nfs_t file systems
  - Update sanlock policy to solve all AVC's
  - Change confined users can optionally manage virt content
  - Handle new directories under ~/.cache
  - Add block suspend to appropriate domains
  - More rules required for containers
  - Allow login programs to read /run/ data created by systemd_logind
  - Allow staff users to run svirt_t processes


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-13
changelog:
  - Add systemd_logind_inhibit_var_run_t attribute
  - Remove corenet_all_recvfrom_unlabeled() for non-contrib policies because we moved it to domain.if for all domain_type
  - Add interface for mysqld to dontaudit signull to all processes
  - Label new /var/run/journal directory correctly
  - Allow users to inhibit suspend via systemd
  - Add new type for the /var/run/inhibit directory
  - Add interface to send signull to systemd_login so avahi can send them
  - Allow systemd_passwd to send syslog messages
  - Remove corenet_all_recvfrom_unlabeled() calling fro policy files
  - Allow       editparams.cgi running as httpd_bugzilla_script_t to read /etc/group
  - Allow smbd to read cluster config
  - Add additional labeling for passenger
  - Allow dbus to inhibit suspend via systemd
  - Allow avahi to send signull to systemd_login


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-12
changelog:
  - Add interface to dontaudit getattr access on sysctls
  - Allow sshd to execute /bin/login
  - Looks like xdm is recreating the xdm directory in ~/.cache/ on login
  - Allow syslog to use the leaked kernel_t unix_dgram_socket from system-jounald
  -  Fix semanage to work with unconfined domain disabled on F18
  - Dontaudit attempts by mozilla plugins to getattr on all kernel sysctls
  - Virt seems to be using lock files
  - Dovecot seems to be searching directories of every mountpoint
  - Allow jockey to read random/urandom, execute shell and install third-party drivers
  - Add aditional params to allow cachedfiles to manage its content
  - gpg agent needs to read /dev/random
  - The kernel hands an svirt domains /SYSxxxxx which is a tmpfs that httpd wants to read and write
  - Add a bunch of dontaudit rules to quiet svirt_lxc domains
  - Additional perms needed to run svirt_lxc domains
  - Allow cgclear to read cgconfig
  - Allow sys_ptrace capability for snmp
  - Allow freshclam to read /proc
  - Allow procmail to manage /home/user/Maildir content
  - Allow NM to execute wpa_cli
  - Allow amavis to read clamd system state
  - Regenerate man pages


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-10
changelog:
  - Add realmd and stapserver policies
  - Allow useradd to manage stap-server lib files
  - Tighten up capabilities for confined users
  - Label /etc/security/opasswd as shadow_t
  - Add label for /dev/ecryptfs
  - Allow condor_startd_t to start sshd with the ranged
  - Allow lpstat.cups to read fips_enabled file
  - Allow pyzor running as spamc_t to create /root/.pyzor directory
  - Add labelinf for amavisd-snmp init script
  - Add support for amavisd-snmp
  - Allow fprintd sigkill self
  - Allow xend (w/o libvirt) to start virtual machines
  - Allow aiccu to read /etc/passwd
  - Allow condor_startd to Make specified domain MCS trusted for setting any category set for the processes it executes
  - Add condor_startd_ranged_domtrans_to() interface
  - Add ssd_conf_t for /etc/sssd
  - accountsd needs to fchown some files/directories
  - Add ICACLient and zibrauserdata as mozilla_filetrans_home_content
  - SELinux reports afs_t needs dac_override to read /etc/mtab, even though everything works, adding dontaudit
  - Allow xend_t to read the /etc/passwd file


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-9
changelog:
  - Until we figure out how to fix systemd issues, allow all apps that send syslog messages to send them to kernel_t
  - Add init_access_check() interface
  - Fix label on /usr/bin/pingus to not be labeled as ping_exec_t
  - Allow tcpdump to create a netlink_socket
  - Label newusers like useradd
  - Change xdm log files to be labeled xdm_log_t
  - Allow sshd_t with privsep to work in MLS
  - Allow freshclam to update databases thru HTTP proxy
  - Allow s-m-config to access check on systemd
  - Allow abrt to read public files by default
  - Fix amavis_create_pid_files() interface
  - Add labeling and filename transition for dbomatic.log
  - Allow system_dbusd_t to stream connect to bluetooth, and use its socket
  - Allow amavisd to execute fsav
  - Allow tuned to use sys_admin and sys_nice capabilities
  - Add php-fpm policy from Bryan
  - Add labeling for aeolus-configserver-thinwrapper
  - Allow thin domains to execute shell
  - Fix gnome_role_gkeyringd() interface description
  - Lot of interface fixes
  - Allow OpenMPI job running as condor_startd_ssh_t to manage condor lib files
  - Allow OpenMPI job to use kerberos
  - Make deltacloudd_t as nsswitch_domain
  - Allow xend_t to run lsscsi
  - Allow qemu-dm running as xend_t to create tun_socket
  - Add labeling for /opt/brother/Printers(.*/)?inf
  - Allow jockey-backend to read pyconfig-64.h labeled as usr_t
  - Fix clamscan_can_scan_system boolean
  - Allow lpr to connectto to /run/user/$USER/keyring-22uREb/pkcs11


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-8
changelog:
  - initrc is calling exportfs which is not confined so it attempts to read nfsd_files
  - Fixes for passenger running within openshift.
  - Add labeling for all tomcat6 dirs
  - Add support for tomcat6
  - Allow cobblerd to read /etc/passwd
  - Allow jockey to read sysfs and and execute binaries with bin_t
  - Allow thum to use user terminals
  - Allow cgclear to read cgconfig config files
  - Fix bcf2g.fc
  - Remove sysnet_dns_name_resolve() from policies where auth_use_nsswitch() is used for other domains
  - Allow dbomatic to execute ruby
  - abrt_watch_log should be abrt_domain
  - Allow mozilla_plugin to connect to gatekeeper port


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-7
changelog:
  - add ptrace_child access to process
  - remove files_read_etc_files() calling from all policies which have auth_use_nsswith()
  - Allow boinc domains to manage boinc_lib_t lnk_files
  - Add support for boinc-client.service unit file
  - Add support for boinc.log
  - Allow mozilla_plugin execmod on mozilla home files if allow_ex
  - Allow dovecot_deliver_t to read dovecot_var_run_t
  - Allow ldconfig and insmod to manage kdumpctl tmp files
  - Move thin policy out from cloudform.pp and add a new thin poli
  - pacemaker needs to communicate with corosync streams
  - abrt is now started on demand by dbus
  - Allow certmonger to talk directly to Dogtag servers
  - Change labeling for /var/lib/cobbler/webui_sessions to httpd_c
  - Allow mozila_plugin to execute gstreamer home files
  - Allow useradd to delete all file types stored in the users hom
  - rhsmcertd reads the rpm database
  - Add support for lightdm


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-6
changelog:
  - Add tomcat policy
  - Remove pyzor/razor policy
  - rhsmcertd reads the rpm database
  - Dontaudit  thumb to setattr on xdm_tmp dir
  - Allow wicd to execute ldconfig in the networkmanager_t domain
  - Add /var/run/cherokee\.pid labeling
  - Allow mozilla_plugin to create mozilla_plugin_tmp_t lnk files too
  - Allow postfix-master to r/w pipes other postfix domains
  - Allow snort to create netlink_socket
  - Add kdumpctl policy
  - Allow firstboot to create tmp_t files/directories
  - /usr/bin/paster should not be labeled as piranha_exec_t
  - remove initrc_domain from tomcat
  - Allow ddclient to read /etc/passwd
  - Allow useradd to delete all file types stored in the users homedir
  - Allow ldconfig and insmod to manage kdumpctl tmp files
  - Firstboot should be just creating tmp_t dirs and xauth should be allowed to write to those
  - Transition xauth files within firstboot_tmp_t
  - Fix labeling of /run/media to match /media
  - Label all lxdm.log as xserver_log_t
  - Add port definition for mxi port
  - Allow local_login_t to execute tmux


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-5
changelog:
  - apcupsd needs to read /etc/passwd
  - Sanlock allso sends sigkill
  - Allow glance_registry to connect to the mysqld port
  - Dontaudit mozilla_plugin trying to getattr on /dev/gpmctl
  - Allow firefox plugins/flash to connect to port 1234
  - Allow mozilla plugins to delete user_tmp_t files
  - Add transition name rule for printers.conf.O
  - Allow virt_lxc_t to read urand
  - Allow systemd_loigind to list gstreamer_home_dirs
  - Fix labeling for /usr/bin
  - Fixes for cloudform services
    * support FIPS
  - Allow polipo to work as web caching
  - Allow chfn to execute tmux


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-4
changelog:
  - Add support for ecryptfs
    * ecryptfs does not support xattr
    * we need labeling for HOMEDIR
  - Add policy for (u)mount.ecryptfs*
  - Fix labeling of kerbero host cache files, allow rpc.svcgssd to manage host cache
  - Allow dovecot to manage Maildir content, fix transitions to Maildir
  - Allow postfix_local to transition to dovecot_deliver
  - Dontaudit attempts to setattr on xdm_tmp_t, looks like bogus code
  - Cleanup interface definitions
  - Allow apmd to change with the logind daemon
  - Changes required for sanlock in rhel6
  - Label /run/user/apache as httpd_tmp_t
  - Allow thumb to use lib_t as execmod if boolean turned on
  - Allow squid to create the squid directory in /var with the correct labe
  - Add a new policy for glusterd from Bryan Bickford (bbickfor@redhat.com)
  - Allow virtd to exec xend_exec_t without transition
  - Allow virtd_lxc_t to unmount all file systems


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-3
changelog:
  - PolicyKit path has changed
  - Allow httpd connect to dirsrv socket
  - Allow tuned to write generic kernel sysctls
  - Dontaudit logwatch to gettr on /dev/dm-2
  - Allow policykit-auth to manage kerberos files
  - Make condor_startd and rgmanager as initrc domain
  - Allow virsh to read /etc/passwd
  - Allow mount to mount on user_tmp_t for /run/user/dwalsh/gvfs
  - xdm now needs to execute xsession_exec_t
  - Need labels for /var/lib/gdm
  - Fix files_filetrans_named_content() interface
  - Add new attribute - initrc_domain
  - Allow systemd_logind_t to signal, signull, sigkill all processes
  - Add filetrans rules for etc_runtime files


author: Miroslav Grepl <mgrepl@redhat.com> 3.11.0-1
changelog:
  - Mass merge with upstream
    * new policy topology to include contrib policy modules
    * we have now two base policy patches


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-128
changelog:
  - Fix description of authlogin_nsswitch_use_ldap
  - Fix transition rule for rhsmcertd_t needed for RHEL7
  - Allow useradd to list nfs state data
  - Allow openvpn to manage its log file and directory
  - We want vdsm to transition to mount_t when executing mount command to make sure /etc/mtab remains labeled correctly
  - Allow thumb to use nvidia devices
  -  Allow local_login to create user_tmp_t files for kerberos
  - Pulseaudio needs to read systemd_login /var/run content
  - virt should only transition named system_conf_t config files
  - Allow  munin to execute its plugins
  - Allow nagios system plugin to read /etc/passwd
  - Allow plugin to connect to soundd port
  - Fix httpd_passwd to be able to ask passwords
  - Radius servers can use ldap for backing store
  - Seems to need to mount on /var/lib for xguest polyinstatiation to work.
  - Allow systemd_logind to list the contents of gnome keyring
  - VirtualGL need xdm to be able to manage content in /etc/opt/VirtualGL
  - Add policy for isns-utils


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-127
changelog:
  - Add policy for subversion daemon
  - Allow boinc to read passwd
  - Allow pads to read kernel network state
  - Fix man2html interface for sepolgen-ifgen
  - Remove extra /usr/lib/systemd/system/smb
  - Remove all /lib/systemd and replace with /usr/lib/systemd
  - Add policy for man2html
  - Fix the label of kerberos_home_t to krb5_home_t
  - Allow mozilla plugins to use Citrix
  - Allow tuned to read /proc/sys/kernel/nmi_watchdog
  - Allow tune /sys options via systemd's tmpfiles.d "w" type


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-126
changelog:
  - Dontaudit lpr_t to read/write leaked mozilla tmp files
  - Add file name transition for .grl-podcasts directory
  - Allow corosync to read user tmp files
  - Allow fenced to create snmp lib dirs/files
  - More fixes for sge policy
  - Allow mozilla_plugin_t to execute any application
  - Allow dbus to read/write any open file descriptors to any non security file on the system that it inherits to that it can pass them to another domain
  - Allow mongod to read system state information
  -  Fix wrong type, we should dontaudit sys_admin for xdm_t not xserver_t
  - Allow polipo to manage polipo_cache dirs
  - Add jabbar_client port to mozilla_plugin_t
  - Cleanup procmail policy
  - system bus will pass around open file descriptors on files that do not have labels on them
  - Allow l2tpd_t to read system state
  - Allow tuned to run ls /dev
  - Allow sudo domains to read usr_t files
  - Add label to machine-id 
  - Fix corecmd_read_bin_symlinks cut and paste error


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-125
changelog:
  - Fix pulseaudio port definition
  - Add labeling for condor_starter
  - Allow chfn_t to creat user_tmp_files
  - Allow chfn_t to execute bin_t
  - Allow prelink_cron_system_t to getpw calls
  - Allow sudo domains to manage kerberos rcache files
  - Allow user_mail_domains to work with courie
  - Port definitions necessary for running jboss apps within openshift
  -  Add support for openstack-nova-metadata-api
  - Add support for nova-console*
  - Add support for openstack-nova-xvpvncproxy
  - Fixes to make privsep+SELinux working if we try to use chage to change passwd
  - Fix auth_role() interface
  - Allow numad to read sysfs
  - Allow matahari-rpcd to execute shell
  - Add label for ~/.spicec
  - xdm is executing lspci as root which is requesting a sys_admin priv but seems to succeed without it
  - Devicekit_disk wants to read the logind sessions file when writing a cd
  - Add fixes for condor to make condor jobs working correctly
  - Change label of /var/log/rpmpkgs to cron_log_t
  - Access requires to allow systemd-tmpfiles --create to work.
  - Fix obex to be a user application started by the session bus.
  - Add additional filename trans rules for kerberos
  - Fix /var/run/heartbeat labeling
  - Allow apps that are managing rcache to file trans correctly
  - Allow openvpn to authenticate against ldap server
  - Containers need to listen to network starting and stopping events


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-123
changelog:
  - Fix zarafa labeling
  - Allow guest_t to fix labeling
  - corenet_tcp_bind_all_unreserved_ports(ssh_t) should be called with the user_tcp_server boolean
  - add lxc_contexts
  - Allow accountsd to read /proc
  - Allow restorecond to getattr on all file sytems
  - tmpwatch now calls getpw
  - Allow apache daemon to transition to pwauth domain
  - Label content under /var/run/user/NAME/keyring* as gkeyringd_tmp_t
  - The obex socket seems to be a stream socket
  - dd label for /var/run/nologin


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-122
changelog:
  - Allow jetty running as httpd_t to read hugetlbfs files
  - Allow sys_nice and setsched for rhsmcertd
  - Dontaudit attempts by mozilla_plugin_t to bind to ssdp ports
  - Allow setfiles to append to xdm_tmp_t
  - Add labeling for /export as a usr_t directory
  - Add labels for .grl files created by gstreamer


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-121
changelog:
  - Add labeling for /usr/share/jetty/bin/jetty.sh
  - Add jetty policy which contains file type definitios
  - Allow jockey to use its own fifo_file and make this the default for all domains
  - Allow mozilla_plugins to use spice (vnc_port/couchdb)
  - asterisk wants to read the network state
  - Blueman now uses /var/lib/blueman- Add label for nodejs_debug
  - Allow mozilla_plugin_t to create ~/.pki directory and content


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-120
changelog:
  - Add clamscan_can_scan_system boolean
  - Allow mysqld to read kernel network state
  - Allow sshd to read/write condor lib files
  - Allow sshd to read/write condor-startd tcp socket
  - Fix description on httpd_graceful_shutdown
  - Allow glance_registry to communicate with mysql
  - dbus_system_domain is using systemd to lauch applications
  - add interfaces to allow domains to send kill signals to user mail agents
  - Remove unnessary access for svirt_lxc domains, add privs for virtd_lxc_t
  - Lots of new access required for secure containers
  - Corosync needs sys_admin capability
  - ALlow colord to create shm
  - .orc should be allowed to be created by any app that can create gstream home content, thumb_t to be specific
  - Add boolean to control whether or not mozilla plugins can create random content in the users homedir
  -  Add new interface to allow domains to list msyql_db directories, needed for libra
  - shutdown has to be allowed to delete etc_runtime_t
  - Fail2ban needs to read /etc/passwd
  -  Allow ldconfig to create /var/cache/ldconfig
  - Allow tgtd to read hardware state information
  - Allow collectd to create packet socket
  - Allow chronyd to send signal to itself
  - Allow collectd to read /dev/random
  - Allow collectd to send signal to itself
  - firewalld needs to execute restorecon
  - Allow restorecon and other login domains to execute restorecon


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-119
changelog:
  - Allow logrotate to getattr on systemd unit files
  - Add support for tor systemd unit file
  - Allow apmd to create /var/run/pm-utils with the correct label
  - Allow l2tpd to send sigkill to pppd
  - Allow pppd to stream connect to l2tpd
  - Add label for scripts in /etc/gdm/
  - Allow systemd_logind_t to ignore mcs constraints on sigkill
  - Fix files_filetrans_system_conf_named_files() interface
  - Add labels for /usr/share/wordpress/wp-includes/*.php
  - Allow cobbler to get SELinux mode and booleans


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-118
changelog:
  - Add unconfined_execmem_exec_t as an alias to bin_t
  - Allow fenced to read snmp var lib files, also allow it to read usr_t
  - ontaudit access checks on all executables from mozilla_plugin
  - Allow all user domains to setexec, so that sshd will work properly if it call setexec(NULL) while running withing a user mode
  - Allow systemd_tmpfiles_t to getattr all pipes and sockets
  - Allow glance-registry to send system log messages
  - semanage needs to manage mock lib files/dirs


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-117
changelog:
  - Add policy for abrt-watch-log
  - Add definitions for jboss_messaging ports
  - Allow systemd_tmpfiles to manage printer devices
  - Allow oddjob to use nsswitch
  - Fix labeling of log files for postgresql
  - Allow mozilla_plugin_t to execmem and execstack by default
  - Allow firewalld to execute shell
  - Fix /etc/wicd content files to get created with the correct label
  - Allow mcelog to exec shell
  - Add ~/.orc as a gstreamer_home_t
  - /var/spool/postfix/lib64 should be labeled lib_t
  - mpreaper should be able to list all file system labeled directories
  - Add support for apache to use openstack
  - Add labeling for /etc/zipl.conf and zipl binary
  - Turn on allow_execstack and turn off telepathy transition for final release


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-116
changelog:
  - More access required for virt_qmf_t
  - Additional assess required for systemd-logind to support multi-seat
  - Allow mozilla_plugin to setrlimit
  - Revert changes to fuse file system to stop deadlock


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-115
changelog:
  - Allow condor domains to connect to ephemeral ports
  - More fixes for condor policy
  - Allow keystone to stream connect to mysqld
  - Allow mozilla_plugin_t to read generic USB device to support GPS devices
  - Allow thum to file name transition gstreamer home content
  - Allow thum to read all non security files
  - Allow glance_api_t to connect to ephemeral ports
  - Allow nagios plugins to read /dev/urandom
  - Allow syslogd to search postfix spool to support postfix chroot env
  - Fix labeling for /var/spool/postfix/dev
  - Allow wdmd chown
  - Label .esd_auth as pulseaudio_home_t
  - Have no idea why keyring tries to write to /run/user/dwalsh/dconf/user, but we can dontaudit for now


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-114
changelog:
  - Add support for clamd+systemd
  - Allow fresclam to execute systemctl to handle clamd
  - Change labeling for /usr/sbin/rpc.ypasswd.env
  	- Allow yppaswd_t to execute yppaswd_exec_t
  	- Allow yppaswd_t to read /etc/passwd
  - Gnomekeyring socket has been moved to /run/user/USER/
  - Allow samba-net to connect to ldap port
  - Allow signal for vhostmd
  - allow mozilla_plugin_t to read user_home_t socket
  - New access required for secure Linux Containers
  - zfs now supports xattrs
  - Allow quantum to execute sudo and list sysfs
  - Allow init to dbus chat with the firewalld
  - Allow zebra to read /etc/passwd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-113
changelog:
  - Allow svirt_t to create content in the users homedir under ~/.libvirt
  - Fix label on /var/lib/heartbeat
  - Allow systemd_logind_t to send kill signals to all processes started by a user
  - Fuse now supports Xattr Support


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-112
changelog:
  - upowered needs to setsched on the kernel
  - Allow mpd_t to manage log files
  - Allow xdm_t to create /var/run/systemd/multi-session-x
  - Add rules for missedfont.log to be used by thumb.fc
  - Additional access required for virt_qmf_t
  - Allow dhclient to dbus chat with the firewalld
  - Add label for lvmetad
  - Allow systemd_logind_t to remove userdomain sock_files
  - Allow cups to execute usr_t files
  - Fix labeling on nvidia shared libraries
  - wdmd_t needs access to sssd and /etc/passwd
  - Add boolean to allow ftp servers to run in passive mode
  - Allow namepspace_init_t to relabelto/from a different user system_u from the user the namespace_init running with
  - Fix using httpd_use_fusefs
  - Allow chrome_sandbox_nacl to write inherited user tmp files as we allow it for chrome_sandbox


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-111
changelog:
  - Rename rdate port to time port, and allow gnomeclock to connect to it
  - We no longer need to transition to ldconfig from rpm, rpm_script, or anaconda
  - /etc/auto.* should be labeled bin_t
  - Add httpd_use_fusefs boolean
  - Add fixes for heartbeat
  - Allow sshd_t to signal processes that it transitions to
  - Add condor policy
  - Allow svirt to create monitors in ~/.libvirt
  - Allow dovecot to domtrans sendmail to handle sieve scripts
  - Lot of fixes for cfengine


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-110
changelog:
  - /var/run/postmaster.* labeling is no longer needed
  - Alllow drbdadmin to read /dev/urandom
  - l2tpd_t seems to use ptmx
  - group+ and passwd+ should be labeled as /etc/passwd
  - Zarafa-indexer is a socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-109
changelog:
  - Ensure lastlog is labeled correctly
  - Allow accountsd to read /proc data about gdm
  - Add fixes for tuned
  - Add bcfg2 fixes which were discovered during RHEL6 testing
  - More fixes for gnome-keyring socket being moved
  - Run semanage as a unconfined domain, and allow initrc_t to create tmpfs_t sym links on shutdown
  - Fix description for files_dontaudit_read_security_files() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-108
changelog:
  - Add new policy and man page for bcfg2
  - cgconfig needs to use getpw calls
  - Allow domains that communicate with the keyring to use cache_home_t instead of gkeyringd_tmpt
  - gnome-keyring wants to create a directory in cache_home_t
  - sanlock calls getpw


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-107
changelog:
  - Add numad policy and numad man page
  - Add fixes for interface bugs discovered by SEWatch
  - Add /tmp support for squid
  - Add fix for #799102
       * change default labeling for /var/run/slapd.* sockets
  - Make thumb_t as userdom_home_reader
  - label /var/lib/sss/mc same as pubconf, so getpw domains can read it
  - Allow smbspool running as cups_t to stream connect to nmbd
  - accounts needs to be able to execute passwd on behalf of users
  - Allow systemd_tmpfiles_t to delete boot flags
  - Allow dnssec_trigger to connect to apache ports
  - Allow gnome keyring to create sock_files in ~/.cache
  - google_authenticator is using .google_authenticator
  - sandbox running from within firefox is exposing more leaks
  - Dontaudit thumb to read/write /dev/card0
  - Dontaudit getattr on init_exec_t for gnomeclock_t
  - Allow certmonger to do a transition to certmonger_unconfined_t
  - Allow dhcpc setsched which is caused by nmcli
  - Add rpm_exec_t for /usr/sbin/bcfg2
  - system cronjobs are sending dbus messages to systemd_logind
  - Thumnailers read /dev/urand


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-106
changelog:
  - Allow auditctl getcap
  - Allow vdagent to use libsystemd-login
  - Allow abrt-dump-oops to search /etc/abrt
  - Got these avc's while trying to print a boarding pass from firefox
  - Devicekit is now putting the media directory under /run/media
  - Allow thumbnailers to create content in ~/.thumbails directory
  - Add support for proL2TPd by Dominick Grift
  - Allow all domains to call getcap
  - wdmd seems to get a random chown capability check that it does not need
  - Allow vhostmd to read kernel sysctls


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-105
changelog:
  - Allow chronyd to read unix
  - Allow hpfax to read /etc/passwd
  - Add support matahari vios-proxy-* apps and add virtd_exec_t label for them
  - Allow rpcd to read quota_db_t
  - Update to man pages to match latest policy
  - Fix bug in jockey interface for sepolgen-ifgen
  - Add initial svirt_prot_exec_t policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-103
changelog:
  - Add a new type for /etc/firewalld and allow firewalld to write to this directory
  - Add definition for ~/Maildir, and allow mail deliver domains to write there
  - Allow polipo to run from a cron job
  - Allow rtkit to schedule wine processes
  - Allow mozilla_plugin_t to acquire a bug, and allow it to transition gnome content in the home dir to the proper label
  - Allow users domains to send signals to consolehelper domains


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-102
changelog:
  - More fixes for boinc policy
  - Allow polipo domain to create its own cache dir and pid file
  - Add systemctl support to httpd domain
  - Add systemctl support to polipo, allow NetworkManager to manage the service
  - Add policy for jockey-backend
  - Add support for motion daemon which is now covered by zoneminder policy
  - Allow colord to read/write motion tmpfs
  - Allow vnstat to search through var_lib_t directories
  - Stop transitioning to quota_t, from init an sysadm_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-100
changelog:
  - Add additional fixes for icmp nagios plugin
  - Allow cron jobs to open fifo_files from cron, since service script opens /dev/stdin
  - Add certmonger_unconfined_exec_t
  - Make sure tap22 device is created with the correct label
  - Allow staff users to read systemd unit files
  - Merge in previously built policy
  - Arpwatch needs to be able to start netlink sockets in order to start
  - Allow cgred_t to sys_ptrace to look at other DAC Processes


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-99
changelog:
  - Back port some of the access that was allowed in nsplugin_t
  - Add definitiona for couchdb ports
  - Allow nagios to use inherited users ttys
  - Add git support for mock
  - Allow inetd to use rdate port
  - Add own type for rdate port
  - Allow samba to act as a portmapper
  - Dontaudit chrome_sandbox attempts to getattr on chr_files in /dev
  - New fixes needed for samba4
  - Allow apps that use lib_t to read lib_t symlinks


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-98
changelog:
  - Add policy for nove-cert
  - Add labeling for nova-openstack  systemd unit files
  - Add policy for keystoke


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-97
changelog:
  - Fix man pages fro domains
  - Add man pages for SELinux users and roles
  - Add storage_dev_filetrans_named_fixed_disk() and use it for smartmon
  - Add policy for matahari-rpcd
  - nfsd executes mount command on restart
  - Matahari domains execute renice and setsched
  - Dontaudit leaked tty in mozilla_plugin_config
  - mailman is changing to a per instance naming
  - Add 7600 and 4447 as jboss_management ports
  - Add fixes for nagios event handlers
  - Label httpd.event as httpd_exec_t, it is an apache daemon


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-96
changelog:
  - Add labeling for /var/spool/postfix/dev/log
  - NM reads sysctl.conf
  - Iscsi log file context specification fix
  -  Allow mozilla plugins to send dbus messages to user domains that transition to it
  - Allow mysql to read the passwd file
  - Allow mozilla_plugin_t to create mozilla home dirs in user homedir
  - Allow deltacloud to read kernel sysctl
  - Allow postgresql_t to connectto itselfAllow postgresql_t to connectto itself
  - Allow postgresql_t to connectto itself
  - Add login_userdomain attribute for users which can log in using terminal


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-95
changelog:
  - Allow sysadm_u to reach system_r by default #784011
  - Allow nagios plugins to use inherited user terminals
  - Razor labeling is not used no longer
  - Add systemd support for matahari
  - Add port_types to man page, move booleans to the top, fix some english
  - Add support for matahari-sysconfig-console
  - Clean up matahari.fc
  - Fix matahari_admin() interfac
  - Add labels for/etc/ssh/ssh_host_*.pub keys


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-94
changelog:
  - Allow ksysguardproces to send system log msgs
  - Allow  boinc setpgid and signull
  - Allow xdm_t to sys_ptrace to run pidof command
  - Allow smtpd_t to manage spool files/directories and symbolic links
  - Add labeling for jetty
  - Needed changes to get unbound/dnssec to work with openswan


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-93
changelog:
  - Add user_fonts_t alias xfs_tmp_t
  - Since depmod now runs as insmod_t we need to write to kernel_object_t
  - Allow firewalld to dbus chat with networkmanager
  - Allow qpidd to connect to matahari ports
  - policykit needs to read /proc for uses not owned by it
  - Allow systemctl apps to connecto the init stream


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-90
changelog:
  - Add proxy class and read access for gssd_proxy
  - Separate out the sharing public content booleans
  - Allow certmonger to execute a script and send signals to  apache and dirsrv to reload the certificate
  -  Add label transition for gstream-0.10 and 12
  - Add booleans to allow rsync to share nfs and cifs file sytems
  - chrome_sandbox wants to read the /proc/PID/exe file of the program that executed it
  - Fix filename transitions for cups files
  - Allow denyhosts to read "unix"
  - Add file name transition for locale.conf.new
  - Allow boinc projects to gconf config files
  - sssd needs to be able to increase the socket limit under certain loads
  - sge_execd needs to read /etc/passwd
  - Allow denyhost to check network state
  - NetworkManager needs to read sessions data
  - Allow denyhost to check network state
  - Allow xen to search virt images directories
  - Add label for /dev/megaraid_sas_ioctl_node
  - Add autogenerated man pages


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-89
changelog:
  - Allow boinc project to getattr on fs
  - Allow init to execute initrc_state_t
  - rhev-agent package was rename to ovirt-guest-agent
  - If initrc_t creates /etc/local.conf then we need to make sure it is labeled correctly
  - sytemd writes content to /run/initramfs and executes it on shutdown
  - kdump_t needs to read /etc/mtab, should be back ported to F16
  - udev needs to load kernel modules in early system boot


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-88
changelog:
  - Need to add sys_ptrace back in since reading any content in /proc can cause these accesses
  - Add additional systemd interfaces which are needed fro *_admin interfaces
  - Fix bind_admin() interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-87
changelog:
  - Allow firewalld to read urand
  - Alias java, execmem_mono to bin_t to allow third parties
  - Add label for kmod
  - /etc/redhat-lsb contains binaries
  - Add boolean to allow gitosis to send mail
  - Add filename transition also for "event20"
  - Allow systemd_tmpfiles_t to delete all file types
  - Allow collectd to ipc_lock


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-86
changelog:
  - make consoletype_exec optional, so we can remove consoletype policy
  - remove unconfined_permisive.patch
  - Allow openvpn_t to inherit user home content and tmp content
  - Fix dnssec-trigger labeling
  - Turn on obex policy for staff_t
  - Pem files should not be secret
  - Add lots of rules to fix AVC's when playing with containers
  - Fix policy for dnssec
  - Label ask-passwd directories correctly for systemd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-85
changelog:
  - sshd fixes seem to be causing unconfined domains to dyntrans to themselves
  - fuse file system is now being mounted in /run/user
  - systemd_logind is sending signals to processes that are dbus messaging with it
  - Add support for winshadow port and allow iscsid to connect to this port
  - httpd should be allowed to bind to the http_port_t udp socket
  - zarafa_var_lib_t can be a lnk_file
  - A couple of new .xsession-errors files
  - Seems like user space and login programs need to read logind_sessions_files
  - Devicekit disk seems to be being launched by systemd
  - Cleanup handling of setfiles so most of rules in te file
  - Correct port number for dnssec
  - logcheck has the home dir set to its cache


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-83
changelog:
  - Add new sysadm_secadm.pp module
  	* contains secadm definition for sysadm_t
  - Move user_mail_domain access out of the interface into the te file
  - Allow httpd_t to create httpd_var_lib_t directories as well as files
  - Allow snmpd to connect to the ricci_modcluster stream
  - Allow firewalld to read /etc/passwd
  - Add auth_use_nsswitch for colord
  - Allow smartd to read network state
  - smartdnotify needs to read /etc/group


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-82
changelog:
  - Allow gpg and gpg_agent to store sock_file in gpg_secret_t directory
  - lxdm startup scripts should be labeled bin_t, so confined users will work
  - mcstransd now creates a pid, needs back port to F16
  - qpidd should be allowed to connect to the amqp port
  - Label devices 010-029 as usb devices
  - ypserv packager says ypserv does not use tmp_t so removing selinux policy types
  - Remove all ptrace commands that I believe are caused by the kernel/ps avcs
  - Add initial Obex policy
  - Add logging_syslogd_use_tty boolean
  - Add polipo_connect_all_unreserved bolean
  - Allow zabbix to connect to ftp port
  - Allow systemd-logind to be able to switch VTs
  - Allow apache to communicate with memcached through a sock_file


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-80
changelog:
  - Add zabbix_can_network boolean
  - Add httpd_can_connect_zabbix boolean
  - Prepare file context labeling for usrmove functions
  - Allow system cronjobs to read kernel network state
  - Add support for selinux_avcstat munin plugin
  - Treat hearbeat with corosync policy
  - Allow corosync to read and write to qpidd shared mem
  -  mozilla_plugin is trying to run pulseaudio 
  - Fixes for new sshd patch for running priv sep domains as the users context
  - Turn off dontaudit rules when turning on allow_ypbind
  - udev now reads /etc/modules.d directory


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-79
changelog:
  - Turn on deny_ptrace boolean for the Rawhide run, so we can test this out
  - Cups exchanges dbus messages with init
  - udisk2 needs to send syslog messages
  - certwatch needs to read /etc/passwd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-77
changelog:
  - Treat Bip with bitlbee policy
        * Bip is an IRC proxy
  - Add port definition for interwise port
  - Add support for ipa_memcached socket
  - systemd_jounald needs to getattr on all processes
  - mdadmin fixes
       * uses getpw
  - amavisd calls getpwnam()
  - denyhosts calls getpwall()


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-76
changelog:
  - Setup labeling of /var/rsa and /var/lib/rsa to allow login programs to write there
  - bluetooth says they do not use /tmp and want to remove the type
  - Allow init to transition to colord
  - Mongod needs to read /proc/sys/vm/zone_reclaim_mode
  - Allow postfix_smtpd_t to connect to spamd
  - Add boolean to allow ftp to connect to all ports > 1023
  - Allow sendmain to write to inherited dovecot tmp files
  - setroubleshoot needs to be able to execute rpm to see what version of packages


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-75
changelog:
  - Merge systemd patch
  - systemd-tmpfiles wants to relabel /sys/devices/system/cpu/online
  - Allow deltacloudd dac_override, setuid, setgid  caps
  - Allow aisexec to execute shell
  - Add use_nfs_home_dirs boolean for ssh-keygen


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-74
changelog:
  - Add labeling for /var/run/systemd/journal/syslog
  - libvirt sends signals to ifconfig
  - Allow domains that read logind session files to list them


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-73
changelog:
  - Fixed destined form libvirt-sandbox
  - Allow apps that list sysfs to also read sympolicy links in this filesystem
  - Add ubac_constrained rules for chrome_sandbox
  - Need interface to allow domains to use tmpfs_t files created by the kernel, used by libra
  - Allow postgresql to be executed by the caller
  - Standardize interfaces of daemons 
  - Add new labeling for mm-handler
  - Allow all matahari domains to read network state and etc_runtime_t files


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-72
changelog:
  - New fix for seunshare, requires seunshare_domains to be able to mounton /
  - Allow systemctl running as logrotate_t to connect to private systemd socket
  - Allow tmpwatch to read meminfo
  - Allow rpc.svcgssd to read supported_krb5_enctype
  - Allow zarafa domains to read /dev/random and /dev/urandom
  - Allow snmpd to read dev_snmp6
  - Allow procmail to talk with cyrus
  - Add fixes for check_disk and check_nagios plugins


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-71
changelog:
  - default trans rules for Rawhide policy
  -  Make sure sound_devices controlC* are labeled correctly on creation
  - sssd now needs sys_admin
  - Allow snmp to read all proc_type
  - Allow to setup users homedir with quota.group


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-70
changelog:
  - Add httpd_can_connect_ldap() interface
  - apcupsd_t needs to use seriel ports connected to usb devices
  - Kde puts procmail mail directory under ~/.local/share
  - nfsd_t can trigger sys_rawio on tests that involve too many mountpoints, dontaudit for now
  - Add labeling for /sbin/iscsiuio


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-69
changelog:
  - Add label for /var/lib/iscan/interpreter
  - Dont audit writes to leaked file descriptors or redirected output for nacl
  - NetworkManager needs to write to /sys/class/net/ib*/mode


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-68
changelog:
  - Allow abrt  to request the kernel to load a module
  - Make sure mozilla content is labeled correctly
  - Allow tgtd to read system state
  - More fixes for boinc
    * allow to resolve dns name
    * re-write boinc policy to use boinc_domain attribute
  - Allow munin services plugins to use NSCD services


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-67
changelog:
  - Allow mozilla_plugin_t to manage mozilla_home_t
  - Allow ssh derived domain to execute ssh-keygen in the ssh_keygen_t domain
  - Add label for tumblerd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-65
changelog:
  - Fixes related to  /bin, /sbin
  - Allow abrt to getattr on blk files
  - Add type for rhev-agent log file
  - Fix labeling for /dev/dmfm
  - Dontaudit wicd leaking
  - Allow systemd_logind_t to look at process info of apps that exchange dbus messages with it
  - Label /etc/locale.conf correctly
  - Allow user_mail_t to read /dev/random
  - Allow postfix-smtpd to read MIMEDefang
  - Add label for /var/log/suphp.log
  - Allow swat_t to connect and read/write nmbd_t sock_file
  - Allow systemd-tmpfiles to setattr for /run/user/gdm/dconf
  - Allow systemd-tmpfiles to change user identity in object contexts
  - More fixes for rhev_agentd_t consolehelper policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-64
changelog:
  - Use fs_use_xattr for squashf
  -  Fix procs_type interface
  - Dovecot has a new fifo_file /var/run/dovecot/stats-mail
  - Dovecot has a new fifo_file /var/run/stats-mail
  - Colord does not need to connect to network
  - Allow system_cronjob to dbus chat with NetworkManager
  - Puppet manages content, want to make sure it labels everything correctly


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-63
changelog:
  - Change port 9050 to tor_socks_port_t and then allow openvpn to connect to it
  - Allow all postfix domains to use the fifo_file
  - Allow sshd_t to getattr on all file systems in order to generate avc on nfs_t
  - Allow apmd_t to read grub.cfg
  - Let firewallgui read the selinux config
  - Allow systemd-tmpfiles to delete content in /root that has been moved to /tmp
  - Fix devicekit_manage_pid_files() interface
  - Allow squid to check the network state
  - Dontaudit colord getattr on file systems
  - Allow ping domains to read zabbix_tmp_t files


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-59
changelog:
  - Allow mcelog_t to create dir and file in /var/run and label it correctly
  - Allow dbus to manage fusefs
  - Mount needs to read process state when mounting gluster file systems
  - Allow collectd-web to read collectd lib files
  - Allow daemons and system processes started by init to read/write the unix_stream_socket passed in from as stdin/stdout/stderr
  - Allow colord to get the attributes of tmpfs filesystem
  - Add sanlock_use_nfs and sanlock_use_samba booleans
  - Add bin_t label for /usr/lib/virtualbox/VBoxManage


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-58
changelog:
  - Add ssh_dontaudit_search_home_dir
  - Changes to allow namespace_init_t to work
  - Add interface to allow exec of mongod, add port definition for mongod port, 27017
  - Label .kde/share/apps/networkmanagement/certificates/ as home_cert_t
  - Allow spamd and clamd to steam connect to each other
  - Add policy label for passwd.OLD
  - More fixes for postfix and postfix maildro
  - Add ftp support for mozilla plugins
  - Useradd now needs to manage policy since it calls libsemanage
  - Fix devicekit_manage_log_files() interface
  - Allow colord to execute ifconfig
  - Allow accountsd to read /sys
  - Allow mysqld-safe to execute shell
  - Allow openct to stream connect to pcscd
  - Add label for /var/run/nm-dns-dnsmasq\.conf
  - Allow networkmanager to chat with virtd_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-55
changelog:
  - Add more MCS fixes to make sandbox working
  - Make faillog MLS trusted to make sudo_$1_t working
  - Allow sandbox_web_client_t to read passwd_file_t
  - Add .mailrc file context
  - Remove execheap from openoffice domain
  - Allow chrome_sandbox_nacl_t to read cpu_info
  - Allow virtd to relabel generic usb which is need if USB device
  - Fixes for virt.if interfaces to consider chr_file as image file type


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-53
changelog:
  - Make nvidia* to be labeled correctly
  - Fix abrt_manage_cache() interface
  - Make filetrans rules optional so base policy will build
  - Dontaudit chkpwd_t access to inherited TTYS
  - Make sure postfix content gets created with the correct label
  - Allow gnomeclock to read cgroup
  - Fixes for cloudform policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-51
changelog:
  -  Begin removing qemu_t domain, we really no longer need this domain.  
  - systemd_passwd needs dac_overide to communicate with users TTY's
  - Allow svirt_lxc domains to send kill signals within their container


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-50
changelog:
  - Allow policykit to talk to the systemd via dbus
  - Move chrome_sandbox_nacl_t to permissive domains
  - Additional rules for chrome_sandbox_nacl


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-49
changelog:
  - Change bootstrap name to nacl
  - Chrome still needs execmem
  - Missing role for chrome_sandbox_bootstrap
  - Add boolean to remove execmem and execstack from virtual machines
  - Dontaudit xdm_t doing an access_check on etc_t directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-48
changelog:
  - Allow named to connect to dirsrv by default
  - add ldapmap1_0 as a krb5_host_rcache_t file
  - Google chrome developers asked me to add bootstrap policy for nacl stuff
  - Allow rhev_agentd_t to getattr on mountpoints
  - Postfix_smtpd_t needs access to milters and cleanup seems to read/write postfix_smtpd_t unix_stream_sockets


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-47
changelog:
  - Fixes for cloudform policies which need to connect to random ports
  - Make sure if an admin creates modules content it creates them with the correct label
  - Add port 8953 as a dns port used by unbound
  - Fix file name transition for alsa and confined users


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-41
changelog:
  - Allow svirt_lxc_domain to chr_file and blk_file devices if they are in the domain
  - Allow init process to setrlimit on itself
  - Take away transition rules for users executing ssh-keygen
  - Allow setroubleshoot_fixit_t to read /dev/urand
  - Allow sshd to relbale tunnel sockets
  - Allow fail2ban domtrans to shorewall in the same way as with iptables
  - Add support for lnk files in the /var/lib/sssd directory
  - Allow system mail to connect to courier-authdaemon over an unix stream socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-40
changelog:
  - Dontaudit access checks for all executables, gnome-shell is doing access(EXEC, X_OK)
  - Make corosync to be able to relabelto cluster lib fies
  - Allow samba domains to search /var/run/nmbd
  - Allow dirsrv to use pam
  - Allow thumb to call getuid
  - chrome less likely to get mmap_zero bug so removing dontaudit
  - gimp help-browser has built in javascript
  - Best guess is that devices named /dev/bsr4096 should be labeled as cpu_device_t
  - Re-write glance policy


author: Dan Walsh <dwalsh@redhat.com> 3.10.0-39.3
changelog:
  - Move dontaudit sys_ptrace line from permissive.te to domain.te
  - Remove policy for hal, it no longer exists


author: Dan Walsh <dwalsh@redhat.com> 3.10.0-39.1
changelog:
  - Remove allow_ptrace and replace it with deny_ptrace, which will remove all 
  ptrace from the system
  - Remove 2000 dontaudit rules between confined domains on transition
  and replace with single
  dontaudit domain domain:process { noatsecure siginh rlimitinh } ;


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-39
changelog:
  - Fixes for bootloader policy
  - $1_gkeyringd_t needs to read $HOME/%USER/.local/share/keystore
  - Allow nsplugin to read /usr/share/config
  - Allow sa-update to update rules
  - Add use_fusefs_home_dirs for chroot ssh option
  - Fixes for grub2
  - Update systemd_exec_systemctl() interface
  - Allow gpg to read the mail spool
  - More fixes for sa-update running out of cron job
  - Allow ipsec_mgmt_t to read hardware state information
  - Allow pptp_t to connect to unreserved_port_t
  - Dontaudit getattr on initctl in /dev from chfn
  - Dontaudit getattr on kernel_core from chfn
  - Add systemd_list_unit_dirs to systemd_exec_systemctl call
  - Fixes for collectd policy
  - CHange sysadm_t to create content as user_tmp_t under /tmp


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-38
changelog:
  - Allow virsh to read xenstored pid file
  - Backport corenetwork fixes from upstream
  - Do not audit attempts by thumb to search config_home_t dirs (~/.config)
  - label ~/.cache/telepathy/logger telepathy_logger_cache_home_t
  - allow thumb to read generic data home files (mime.type)


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-37
changelog:
  - Allow nmbd to manage sock file in /var/run/nmbd
  - ricci_modservice send syslog msgs
  - Stop transitioning from unconfined_t to ldconfig_t, but make sure /etc/ld.so.cache is labeled correctly
  - Allow systemd_logind_t to manage /run/USER/dconf/user


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-36
changelog:
  - Allow logrotate setuid and setgid since logrotate is supposed to do it
  - Fixes for thumb policy by grift
  - Add new nfsd ports
  - Added fix to allow confined apps to execmod on chrome
  - Add labeling for additional vdsm directories
  - Allow Exim and Dovecot SASL
  - Add label for /var/run/nmbd
  - Add fixes to make virsh and xen working together
  - Colord executes ls
  - /var/spool/cron  is now labeled as user_cron_spool_t


author: Dan Walsh <dwalsh@redhat.com> 3.10.0-34.4
changelog:
  - Fixes caused by the labeling of /etc/passwd
  - Add thumb.patch to transition unconfined_t to thumb_t for Rawhide


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-34.3
changelog:
  - Add support for Clustered Samba commands
  - Allow ricci_modrpm_t to send log msgs
  - move permissive virt_qmf_t from virt.te to permissivedomains.te
  - Allow ssh_t to use kernel keyrings
  - Add policy for libvirt-qmf and more fixes for linux containers
  - Initial Polipo
  - Sanlock needs to run ranged in order to kill svirt processes
  - Allow smbcontrol to stream connect to ctdbd


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-34
changelog:
  - Make mta_role() active
  - Allow asterisk to connect to jabber client port
  - Allow procmail to read utmp
  - Add NIS support for systemd_logind_t
  - Allow systemd_logind_t to manage /run/user/$USER/dconf dir which is labeled as config_home_t
  - Fix systemd_manage_unit_dirs() interface
  - Allow ssh_t to manage directories passed into it
  - init needs to be able to create and delete unit file directories
  - Fix typo in apache_exec_sys_script
  - Add ability for logrotate to transition to awstat domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-33
changelog:
  - Change screen to use screen_domain attribute and allow screen_domains to read all process domain state
  - Add SELinux support for ssh pre-auth net process in F17
  - Add logging_syslogd_can_sendmail boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-29
changelog:
  - Allow sanlock to manage virt lib files
  - Add virt_use_sanlock booelan
  - ksmtuned is trying to resolve uids
  - Make sure .gvfs is labeled user_home_t in the users home directory
  - Sanlock sends kill signals and needs the kill capability
  - Allow mockbuild to work on nfs homedirs
  - Fix kerberos_manage_host_rcache() interface
  - Allow exim to read system state


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-28
changelog:
  - Allow systemd-tmpfiles to set the correct labels on /var/run, /tmp and other files
  - We want any file type that is created in /tmp by a process running as initrc_t to be labeled initrc_tmp_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-27
changelog:
  -  Allow collectd to read hardware state information
  - Add loop_control_device_t
  - Allow mdadm to request kernel to load module
  - Allow domains that start other domains via systemctl to search unit dir
  - systemd_tmpfiles, needs to list any file systems mounted on /tmp
  - No one can explain why radius is listing the contents of /tmp, so we will dontaudit
  - If I can manage etc_runtime files, I should be able to read the links
  - Dontaudit hostname writing to mock library chr_files
  - Have gdm_t setup labeling correctly in users home dir
  - Label content unde /var/run/user/NAME/dconf as config_home_t
  - Allow sa-update to execute shell
  - Make ssh-keygen working with fips_enabled
  - Make mock work for staff_t user
  - Tighten security on mock_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-26
changelog:
  - removing unconfined_notrans_t no longer necessary
  - Clean up handling of secure_mode_insmod and secure_mode_policyload
  - Remove unconfined_mount_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-25
changelog:
  - Add exim_exec_t label for /usr/sbin/exim_tidydb
  - Call init_dontaudit_rw_stream_socket() interface in mta policy
  - sssd need to search /var/cache/krb5rcache directory
  - Allow corosync to relabel own tmp files
  - Allow zarafa domains to send system log messages
  - Allow ssh to do tunneling
  - Allow initrc scripts to sendto init_t unix_stream_socket
  - Changes to make sure dmsmasq and virt directories are labeled correctly
  - Changes needed to allow sysadm_t to manage systemd unit files
  - init is passing file descriptors to dbus and on to system daemons
  - Allow sulogin additional access Reported by dgrift and Jeremy Miller
  - Steve Grubb believes that wireshark does not need this access
  - Fix /var/run/initramfs to stop restorecon from looking at
  - pki needs another port
  - Add more labels for cluster scripts
  - Allow apps that manage cgroup_files to manage cgroup link files
  - Fix label on nfs-utils scripts directories
  - Allow gatherd to read /dev/rand and /dev/urand


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-24
changelog:
  - pki needs another port
  - Add more labels for cluster scripts
  - Fix label on nfs-utils scripts directories
  - Fixes for cluster
  - Allow gatherd to read /dev/rand and /dev/urand
  - abrt leaks fifo files


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-23
changelog:
  - Add glance policy
  - Allow mdadm setsched
  - /var/run/initramfs should not be relabeled with a restorecon run
  - memcache can be setup to override sys_resource
  - Allow httpd_t to read tetex data
  - Allow systemd_tmpfiles to delete kernel modules left in /tmp directory.


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-22
changelog:
  - Allow Postfix to deliver to Dovecot LMTP socket
  - Ignore bogus sys_module for lldpad
  - Allow chrony and gpsd to send dgrams, gpsd needs to write to the real time clock
  - systemd_logind_t sets the attributes on usb devices
  - Allow hddtemp_t to read etc_t files
  - Add permissivedomains module
  - Move all permissive domains calls to permissivedomain.te
  - Allow pegasis to send kill signals to other UIDs


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-21
changelog:
  - Allow insmod_t to use fds leaked from devicekit
  - dontaudit getattr between insmod_t and init_t unix_stream_sockets
  - Change sysctl unit file interfaces to use systemctl
  - Add support for chronyd unit file
  - Allow mozilla_plugin to read gnome_usr_config
  - Add policy for new gpsd
  - Allow cups to create kerberos rhost cache files
  - Add authlogin_filetrans_named_content, to unconfined_t to make sure shadow and other log files get labeled correctly


author: Dan Walsh <dwalsh@redhat.com> 3.10.0-20
changelog:
  - Make users_extra and seusers.final into config(noreplace) so semanage users and login does not get overwritten


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-19
changelog:
  - Add policy for sa-update being run out of cron jobs
  - Add create perms to postgresql_manage_db
  - ntpd using a gps has to be able to read/write generic tty_device_t
  - If you disable unconfined and unconfineduser, rpm needs more privs to manage /dev
  - fix spec file
  - Remove qemu_domtrans_unconfined() interface
  - Make passenger working together with puppet
  - Add init_dontaudit_rw_stream_socket interface
  - Fixes for wordpress


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-18
changelog:
  - Turn on allow_domain_fd_use boolean on F16
  - Allow syslog to manage all log files
  - Add use_fusefs_home_dirs boolean for chrome
  - Make vdagent working with confined users
  - Add abrt_handle_event_t domain for ABRT event scripts
  - Labeled /usr/sbin/rhnreg_ks as rpm_exec_t and added changes related to this change
  - Allow httpd_git_script_t to read passwd data
  - Allow openvpn to set its process priority when the nice parameter is used


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-16
changelog:
  - fetchmail can use kerberos
  - ksmtuned reads in shell programs
  - gnome_systemctl_t reads the process state of ntp
  - dnsmasq_t asks the kernel to load multiple kernel modules
  - Add rules for domains executing systemctl
  - Bogus text within fc file


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-13
changelog:
  - Add abrt_domain attribute
  - Allow corosync to manage cluster lib files
  - Allow corosync to connect to the system DBUS


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-10
changelog:
  - Allow rcsmcertd to perform DNS name resolution
  - Add dirsrvadmin_unconfined_script_t domain type for 389-ds admin scripts
  - Allow tmux to run as screen
  - New policy for collectd
  - Allow gkeyring_t to interact with all user apps
  - Add rules to allow firstboot to run on machines with the unconfined.pp module removed


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-9
changelog:
  - Allow systemd_logind to send dbus messages with users
  - allow accountsd to read wtmp file
  - Allow dhcpd to get and set capabilities


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-8
changelog:
  - Fix oracledb_port definition
  - Allow mount to mounton the selinux file system
  - Allow users to list /var directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-6
changelog:
  - Add initial policy for abrt_dump_oops_t
  - xtables-multi wants to getattr of the proc fs
  - Smoltclient is connecting to abrt
  - Dontaudit leaked file descriptors to postdrop
  - Allow abrt_dump_oops to look at kernel sysctls
  - Abrt_dump_oops_t reads kernel ring buffer
  - Allow mysqld to request the kernel to load modules
  - systemd-login needs fowner
  - Allow postfix_cleanup_t to searh maildrop


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-5
changelog:
  - Initial systemd_logind policy
  - Add policy for systemd_logger and additional proivs for systemd_logind
  - More fixes for systemd policies


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-4
changelog:
  - Allow setsched for virsh
  - Systemd needs to impersonate cups, which means it needs to create tcp_sockets in cups_t domain, as well as manage spool directories
  - iptables: the various /sbin/ip6?tables.* are now symlinks for
  /sbin/xtables-multi


author: Miroslav Grepl <mgrepl@redhat.com> 3.10.0-3
changelog:
  - A lot of users are running yum -y update while in /root which is causing ldconfig to list the contents, adding dontaudit
  - Allow colord to interact with the users through the tmpfs file system
  - Since we changed the label on deferred, we need to allow postfix_qmgr_t to be able to create maildrop_t files
  - Add label for /var/log/mcelog
  - Allow asterisk to read /dev/random if it uses TLS
  - Allow colord to read ini files which are labeled as bin_t
  - Allow dirsrvadmin sys_resource and setrlimit to use ulimit
  - Systemd needs to be able to create sock_files for every label in /var/run directory, cupsd being the first.  
  - Also lists /var and /var/spool directories
  - Add openl2tpd to l2tpd policy
  - qpidd is reading the sysfs file


