# changelog

author: Matthew Harmsen <mharmsen@redhat.com> 9.0.8-2
changelog:
  - 'pki-setup'
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Added 'DRMTool.cfg' configuration file to inventory
  - 'pki-common'
  - 'pki-selinux'
  - 'pki-ca'
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.8-1
changelog:
  - 'pki-setup'
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #532548 - Tool to do DRM re-key
  - 'pki-common'
  - 'pki-selinux'
  - 'pki-ca'
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.7-1
changelog:
  - 'pki-setup'
  -     Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
  -     Bugzilla Bug #694569 - parameter used by pkiremove not updated
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  - 'pki-common'
  -     Bugzilla Bug #695403 - Editing signedaudit or transaction, system logs
        throws 'Invalid protocol' for OCSP subsystems
  -     Bugzilla Bug #694569 - parameter used by pkiremove not updated
  -     Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
        populated in the CA signedAudit messages
  -     Bugzilla Bug #694143 - CA Agent not returning specified request
  -     Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
        populated in the CA signedAudit messages
  -     Bugzilla Bug #698885 - Race conditions during IPA installation
  - 'pki-selinux'
  - 'pki-ca'
  -     Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser
  -     Bugzilla Bug #699837 - service command is not fully backwards compatible
        with Dogtag pki subsystems
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.6-1
changelog:
  - Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta)
  - Bugzilla Bug #693327 - Missing requires: tomcatjss
  - 'pki-setup'
  -     Bugzilla Bug #690626 - pkiremove removes the registry entry for
        all instances on a machine
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #689453 - CRMFPopClient request to CA's unsecure port
        throws file not found exception.
  - 'pki-common'
  -     Bugzilla Bug #692990 - Audit log messages needed to match CC doc:
        DRM Recovery audit log messages
  - 'pki-selinux'
  - 'pki-ca'
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.5-1
changelog:
  - Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta)
  - Require "jss >= 4.2.6-15" as a build and runtime requirement
  - Require "tomcatjss >= 2.1.1" as a build and runtime requirement
    for Fedora 15 and later platforms
  - 'pki-setup'
  -     Bugzilla Bug #688287 - Add "deprecation" notice regarding using
        "shared ports" in pkicreate -help . . .
  -     Bugzilla Bug #688251 - Dogtag installation under IPA takes
        too much time - SELinux policy compilation
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #689501 - ExtJoiner tool fails to join the multiple
        extensions
  - 'pki-common'
  -     Bugzilla Bug #683581 - CA configuration with ECC(Default
        EC curve-nistp521) CA fails with 'signing operation failed'
  -     Bugzilla Bug #689662 - ocsp publishing needs to be re-enabled
        on the EE port
  - 'pki-selinux'
  -     Bugzilla Bug #684871 - ldaps selinux link change
  - 'pki-ca'
  -     Bugzilla Bug #683581 - CA configuration with ECC(Default
        EC curve-nistp521) CA fails with 'signing operation failed'
  -     Bugzilla Bug #684381 - CS.cfg specifies incorrect type of comments
  -     Bugzilla Bug #689453 - CRMFPopClient request to CA's unsecure port
        throws file not found exception.(profile and CS.cfg only)
  - 'pki-silent'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.4-1
changelog:
  - Bugzilla Bug #688763 - Rebase updated Dogtag Packages for Fedora 15 (alpha)
  - Bugzilla Bug #676182 - IPA installation failing - Fails to create CA
    instance
  - Bugzilla Bug #675742 - Profile caIPAserviceCert Not Found
  - 'pki-setup'
  -     Bugzilla Bug #678157 - uninitialized variable warnings from Perl
  -     Bugzilla Bug #679574 - Velocity fails to load all dependent classes
  -     Bugzilla Bug #680420 - xml-commons-apis.jar dependency
  -     Bugzilla Bug #682013 - pkisilent needs xml-commons-apis.jar in it's
        classpath
  -     Bugzilla Bug #673508 - CS8 64 bit pkicreate script uses wrong library
        name for SafeNet LunaSA
  - 'pki-common'
  -     Bugzilla Bug #673638 - Installation within IPA hangs
  -     Bugzilla Bug #678715 - netstat loop fixes needed
  -     Bugzilla Bug #673609 - CC: authorize() call needs to be added to
        getStats servlet
  - 'pki-selinux'
  -     Bugzilla Bug #674195: SELinux error message thrown during token
        enrollment
  - 'pki-ca'
  -     Bugzilla Bug #673638 - Installation within IPA hangs
  -     Bugzilla Bug #673609 - CC: authorize() call needs to be added to
        getStats servlet
  -     Bugzilla Bug #676330 - init script cannot start service
  - 'pki-silent'
  -     Bugzilla Bug #682013 - pkisilent needs xml-commons-apis.jar in it's
        classpath


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-2
changelog:
  - 'pki-common'
  -     Bugzilla Bug #676051 - IPA installation failing - Fails to create CA
        instance
  -     Bugzilla Bug #676182 - IPA installation failing - Fails to create CA
        instance


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-1
changelog:
  - 'pki-common'
  -     Bugzilla Bug #674894 - ipactl restart : an annoy output line
  -     Bugzilla Bug #675179 - ipactl restart : an annoy output line


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.2-1
changelog:
  - Bugzilla Bug #673233 - Rebase pki-core to pick the latest features and fixes
  - 'pki-setup'
  -     Bugzilla Bug #673638 - Installation within IPA hangs
  - 'pki-symkey'
  - 'pki-native-tools'
  - 'pki-util'
  - 'pki-java-tools'
  -     Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided
        by 'netscape.security.provider' package
  - 'pki-common'
  -     Bugzilla Bug #672291 - CA is not publishing certificates issued using
        "Manual User Dual-Use Certificate Enrollment"
  -     Bugzilla Bug #670337 - CA Clone configuration throws TCP connection
        error.
  -     Bugzilla Bug #504056 - Completed SCEP requests are assigned to the
        "begin" state instead of "complete".
  -     Bugzilla Bug #504055 - SCEP requests are not properly populated
  -     Bugzilla Bug #564207 - Searches for completed requests in the agent
        interface returns zero entries
  -     Bugzilla Bug #672291 - CA is not publishing certificates issued using
        "Manual User Dual-Use Certificate Enrollment" -
  -     Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided
        by 'netscape.security.provider' package
  -     Bugzilla Bug #672920 - CA console: adding policy to a profile throws
        'Duplicate policy' error in some cases.
  -     Bugzilla Bug #673199 - init script returns control before web apps have
        started
  -     Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI
        subsystem instances
  - 'pki-selinux'
  - 'pki-ca'
  -     Bugzilla Bug #504013 - sscep request is rejected due to authentication
        error if submitted through one time pin router certificate enrollment.
  -     Bugzilla Bug #672111 - CC doc: certServer.usrgrp.administration missing
        information
  -     Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml
        as part of CC interface review
  -     Bugzilla Bug #672333 - Creation of RA agent fails in IPA installation
  -     Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI
        subsystem instances
  - 'pki-silent'
  -     Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided
        by 'netscape.security.provider' package


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-3
changelog:
  - Bugzilla Bug #656661 - Please Update Spec File to use 'ghost' on files
    in /var/run and /var/lock


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-2
changelog:
  - 'pki-symkey'
  -     Bugzilla Bug #671265 - pki-symkey jar version incorrect
  - 'pki-common'
  -     Bugzilla Bug #564207 - Searches for completed requests in the agent
        interface returns zero entries


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-1
changelog:
  - Allow 'pki-native-tools' to be installed independently of 'pki-setup'
  - Removed explicit 'pki-setup' requirement from 'pki-ca'
    (since it already requires 'pki-common')
  - 'pki-setup'
  -     Bugzilla Bug #223343 - pkicreate: should add 'pkiuser' to nfast group
  -     Bugzilla Bug #629377 - Selinux errors during pkicreate CA, KRA, OCSP
        and TKS.
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from
        OpenLDAP instead of the Mozldap
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #658926 - org.apache.commons.lang class not found on F13
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #665388 - jakarta-* jars have been renamed to apache-*,
        pkicreate fails Fedora 14 and above
  -     Bugzilla Bug #23346 - Two conflicting ACL list definitions in source
        repository
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  - 'pki-symkey'
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #644056 - CS build contains warnings
  - 'pki-native-tools'
  -     template change
  -     Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from
        OpenLDAP instead of the Mozldap
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #644056 - CS build contains warnings
  - 'pki-util'
  -     Bugzilla Bug #615814 - rhcs80 - profile policyConstraintsCritical
        cannot be set to true
  -     Bugzilla Bug #224945 - javadocs has missing descriptions, contains
        empty packages
  -     Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes.
  -     Bugzilla Bug #621338 - Include a server randomly-generated 16 byte
        senderNonce in all signed SCEP responses.
  -     Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade
        attack in SCEP
  -     Bugzilla Bug #621334 - Provide an option to set default hash algorithm
        for signing SCEP response messages.
  -     Bugzilla Bug #635033 - At installation wizard selecting key types other
        than CA's signing cert will fail
  -     Bugzilla Bug #645874 - rfe ecc - add ecc curve name support in JSS and
        CS interface
  -     Bugzilla Bug #488253 - com.netscape.cmsutil.ocsp.BasicOCSPResponse
        ASN.1 encoding/decoding is broken
  -     Bugzilla Bug #551410 - com.netscape.cmsutil.ocsp.TBSRequest ASN.1
        encoding/decoding is incomplete
  -     Bugzilla Bug #550331 - com.netscape.cmsutil.ocsp.ResponseData ASN.1
        encoding/decoding is incomplete
  -     Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit
        policy extension to 5 only
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #658188 - remove remaining references to tomcat5
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #223319 - Certificate Status inconsistency between token
        db and CA
  -     Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory
        During CRL Generation
  - 'pki-java-tools'
  -     Bugzilla Bug #224945 - javadocs has missing descriptions, contains
        empty packages
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #662156 - HttpClient is hard-coded to handle only up to
        5000 bytes
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  - 'pki-common'
  -     Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review
  -     Bugzilla Bug #623745 - SessionTimer with LDAPSecurityDomainSessionTable
        started before configuration completed
  -     Bugzilla Bug #620925 - CC: auditor needs to be able to download audit
        logs in the java subsystems
  -     Bugzilla Bug #615827 - rhcs80 - profile policies need more than 5
        policy mappings (seem hardcoded)
  -     Bugzilla Bug #224945 - javadocs has missing descriptions, contains
        empty packages
  -     Bugzilla Bug #548699 - subCA's admin certificate should be generated by
        itself
  -     Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA
  -     Bugzilla Bug #563386 - rhcs80 ca crash on invalid inputs to profile
        caAgentServerCert (null cert_request)
  -     Bugzilla Bug #621339 - SCEP one-time PIN can be used an unlimited
        number of times
  -     Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml
        as part of CC interface review
  -     Bugzilla Bug #629677 - TPS: token enrollment fails.
  -     Bugzilla Bug #621350 - Unauthenticated user can decrypt a one-time PIN
        in a SCEP request
  -     Bugzilla Bug #503838 - rhcs71-80 external publishing ldap connection
        pools not reliable - improve connections or discovery
  -     Bugzilla Bug #629769 - password decryption logs plain text password
  -     Bugzilla Bug #583823 - CC: Auditing issues found as result of
        CC - interface review
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #586700 - OCSP Server throws fatal error while using
        OCSP console for renewing SSL Server certificate.
  -     Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes.
  -     Bugzilla Bug #621338 - Include a server randomly-generated 16 byte
        senderNonce in all signed SCEP responses.
  -     Bugzilla Bug #607380 - CC: Make sure Java Console can configure all
        security relevant config items
  -     Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be
        generated on TKS instead of TPS.
  -     Bugzilla Bug #489342 -
        com.netscape.cms.servlet.common.CMCOutputTemplate.java
        doesn't support EC
  -     Bugzilla Bug #630121 - OCSP responder lacking option to delete or
        disable a CA that it serves
  -     Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1
  -     Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade
        attack in SCEP
  -     Bugzilla Bug #621334 - Provide an option to set default hash algorithm
        for signing SCEP response messages.
  -     Bugzilla Bug #635033 - At installation wizard selecting key types other
        than CA's signing cert will fail
  -     Bugzilla Bug #621341 - Add CA support for new SCEP key pair dedicated
        for SCEP signing and encryption.
  -     Bugzilla Bug #223336 - ECC: unable to clone a ECC CA
  -     Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned
        by Reason Code - onlySomeReasons ?
  -     Bugzilla Bug #637330 - CC feature: Key Management - provide signature
        verification functions (JAVA subsystems)
  -     Bugzilla Bug #223313 - should do random generated IV param
        for symmetric keys
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #630176 - Improve reliability of the LdapAnonConnFactory
  -     Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on
        ECC curve names (not on key sizes).
  -     Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple
        Certificates from the Same Request
  -     Bugzilla Bug #648757 - expose and use updated cert verification
        function in JSS
  -     Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection
        of signature algorithm; and for ECC curves
  -     Bugzilla Bug #451874 - RFE - Java console - Certificate Wizard missing
        e.c. support
  -     Bugzilla Bug #651040 - cloning shoud not include sslserver
  -     Bugzilla Bug #542863 - RHCS8: Default cert audit nickname written to
        CS.cfg files imcomplete when the cert is stored on a hsm
  -     Bugzilla Bug #360721 - New Feature: Profile Integrity Check . . .
  -     Bugzilla Bug #651916 - kra and ocsp are using incorrect ports
        to talk to CA and complete configuration in DonePanel
  -     Bugzilla Bug #642359 - CC Feature - need to verify certificate when it
        is added
  -     Bugzilla Bug #653713 - CC: setting trust on a CIMC cert requires
        auditing
  -     Bugzilla Bug #489385 - references to rhpki
  -     Bugzilla Bug #499494 - change CA defaults to SHA2
  -     Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit
        policy extension to 5 only
  -     Bugzilla Bug #649910 - Console: an auditor or agent can be added to
        an administrator group.
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets
        as expected
  -     Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for
        validity
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1
  -     Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with
        Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA.
  -     Bugzilla Bug #661889 - The Servlet TPSRevokeCert of the CA returns an
        error to TPS even if certificate in question is already revoked.
  -     Bugzilla Bug #663546 - Disable the functionalities that are not exposed
        in the console
  -     Bugzilla Bug #661514 - CMAKE build system requires rules to make
        javadocs
  -     Bugzilla Bug #658188 - remove remaining references to tomcat5
  -     Bugzilla Bug #649343 - Publishing queue should recover from CA crash.
  -     Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and
        pkiCA, obsolete 2252 and 2256
  -     Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #661142 - Verification should fail when
        a revoked certificate is added
  -     Bugzilla Bug #642741 - CS build uses deprecated functions
  -     Bugzilla Bug #670337 - CA Clone configuration throws TCP connection error
  -     Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time
        interface is no longer available through console
  - 'pki-selinux'
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #667153 - store nuxwdog passwords in kernel ring buffer -
        selinux changes
  - 'pki-ca'
  -     Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review
  -     Bugzilla Bug #620925 - CC: auditor needs to be able to download audit
        logs in the java subsystems
  -     Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA
  -     Bugzilla Bug #583824 - CC: Duplicate servlet mappings found as part of
        CC interface doc review
  -     Bugzilla Bug #621602 - pkiconsole: Click on 'Publishing' option with
        admin privilege throws error "You are not authorized to perform this
        operation".
  -     Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml
        as part of CC interface review
  -     Bugzilla Bug #583823 - CC: Auditing issues found as result of
        CC - interface review
  -     Bugzilla Bug #519291 - Deleting a CRL Issuing Point after edits throws
        'Internal Server Error'.
  -     Bugzilla Bug #586700 - OCSP Server throws fatal error while using
        OCSP console for renewing SSL Server certificate.
  -     Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes.
  -     Bugzilla Bug #621338 - Include a server randomly-generated 16 byte
        senderNonce in all signed SCEP responses.
  -     Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be
        generated on TKS instead of TPS.
  -     Bugzilla Bug #630121 - OCSP responder lacking option to delete or
        disable a CA that it serves
  -     Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1
  -     Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade
        attack in SCEP
  -     Bugzilla Bug #621334 - Provide an option to set default hash algorithm
        for signing SCEP response messages.
  -     Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned
        by Reason Code - onlySomeReasons ?
  -     Bugzilla Bug #637330 - CC feature: Key Management - provide signature
        verification functions (JAVA subsystems)
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on
        ECC curve names (not on key sizes).
  -     Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple
        Certificates from the Same Request
  -     Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection
        of signature algorithm; and for ECC curves
  -     Bugzilla Bug #529945 - (Instructions and sample only) CS 8.0 GA
        release -- DRM and TKS do not seem to have CRL checking enabled
  -     Bugzilla Bug #609641 - CC: need procedure (and possibly tools) to help
        correctly set up CC environment
  -     Bugzilla Bug #509481 - RFE: support sMIMECapabilities extensions in
        certificates (RFC 4262)
  -     Bugzilla Bug #651916 - kra and ocsp are using incorrect ports
        to talk to CA and complete configuration in DonePanel
  -     Bugzilla Bug #511990 - rhcs 7.3, 8.0 - re-activate missing object
        signing support in RHCS
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #489385 - references to rhpki
  -     Bugzilla Bug #499494 - change CA defaults to SHA2
  -     Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit
        policy extension to 5 only
  -     Bugzilla Bug #649910 - Console: an auditor or agent can be added to
        an administrator group.
  -     Bugzilla Bug #632425 - Port to tomcat6
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets
        as expected
  -     Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for
        validity
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #661128 - incorrect CA ports used for revoke, unrevoke
        certs in TPS
  -     Bugzilla Bug #512496 - RFE rhcs80 - crl updates and scheduling feature 
  -     Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with
        Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA.
  -     Bugzilla Bug #649343 - Publishing queue should recover from CA crash.
  -     Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and
        pkiCA, obsolete 2252 and 2256
  -     Bugzilla Bug #223346 - Two conflicting ACL list definitions in source
        repository
  -     Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #661142 - Verification should fail when
        a revoked certificate is added
  -     Bugzilla Bug #668100 - DRM storage cert has OCSP signing extended key
        usage
  -     Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time
        interface is no longer available through console
  -     Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory
        During CRL Generation
  - 'pki-silent'
  -     Bugzilla Bug #627309 - pkisilent subca configuration fails.
  -     Bugzilla Bug #640091 - pkisilent panels need to match with changed java
        subsystems
  -     Bugzilla Bug #527322 - pkisilent ConfigureDRM should configure DRM
        Clone.
  -     Bugzilla Bug #643053 - pkisilent DRM configuration fails
  -     Bugzilla Bug #583754 - pki-silent needs an option to configure signing
        algorithm for CA certificates
  -     Bugzilla Bug #489385 - references to rhpki
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml)
  -     Bugzilla Bug #640042 - TPS Installlation Wizard: need to move Module
        Panel up to before Security Domain Panel
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #588323 - Failed to enable cipher 0xc001
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  -     Bugzilla Bug #645895 - pkisilent: add ability to select ECC curves,
        signing algorithm
  -     Bugzilla Bug #658641 - pkisilent doesn't not properly handle passwords
        with special characters
  -     Bugzilla Bug #642741 - CS build uses deprecated functions


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.0-3
changelog:
  - Bugzilla Bug #668839 - Review Request: pki-core
  -   Removed empty "pre" from "pki-ca"
  -   Consolidated directory ownership
  -   Corrected file ownership within subpackages
  -   Removed all versioning from NSS and NSPR packages


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.0-2
changelog:
  - Bugzilla Bug #668839 - Review Request: pki-core
  -   Added component versioning comments
  -   Updated JSS from "4.2.6-10" to "4.2.6-12"
  -   Modified installation section to preserve timestamps
  -   Removed sectional comments


author: Ralph Bean <rbean@redhat.com> - 0.6.8-2
changelog:
  - Moved .service files from a dbus folder to a systemd folder
    https://github.com/fedora-infra/fedmsg/issues/125
  - Marked .service files as no longer %config files.


author: Ralph Bean <rbean@redhat.com> - 0.6.8-1
changelog:
  - New fedmsg-tail --gource option for visualizations.
  - fedmsg-tweet reorganized to be more similar to other daemons.


author: Ralph Bean <rbean@redhat.com> - 0.6.5-1
changelog:
  - Latest upstream
  - Fix JSON encoding between php and python
  - Stop fedmsg-tweet from falling over.
  - Improved logging.
  - Improved crl cache location; don't keep it in /tmp/
  - Fix a crl permissions issue with fedmsg-tail.
  - Remove duplicate help strings for commands.
  - Added systemd service files.
  - Multiple outbound relay endpoints are now possible.
  - Removed old chkconfig statements.


author: Ralph Bean <rbean@redhat.com> - 0.6.3-1
changelog:
  - Use python-logutils for dictConfig on py2.6.
  - Attempt to fixup rhel conditionals.
  - Added test dependency on python-six and python-mock.


author: Ralph Bean <rbean@redhat.com> - 0.6.1-1
changelog:
  - Stripped fedmsg.text out into its own plugin module.
  - Commands are now defined as classes and use the logging module.
  - Bugfixes to fedmsg-collectd.
  - Renamed fedmsg-tweet.ini to fedmsg-tweet.init.


author: Ralph Bean <rbean@redhat.com> - 0.6.0-1
changelog:
  - New upstream version.
  - New service and subpackage: fedmsg-tweet.
  - New command and subpackage: fedmsg-announce.
  - New command and subpackage: fedmsg-collectd.
  - New routing_policy config and extension of fedmsg.crypto.
  - New functions in fedmsg.text to extract usernames and packages for a msg.
  - Updated docs
  - Pull in logrotate configuration from upstream.
  - Updated rhel conditionals.
  - Remove old temporary BR on orbited


author: Ralph Bean <rbean@redhat.com> - 0.5.5-1
changelog:
  - Lots of work on enhancing and simplifying fedmsg.text from Luke Macken.
  - Remove test_text.py since it now depends on test_hub.py


author: Ralph Bean <rbean@redhat.com> - 0.5.4-1
changelog:
  - New mediawiki, tagger, and git icons in fedmsg.text.
  - Create symlink of dev_certs in build section so tests can pass.
  - Re-enable the test suite in %check again.
  - fedmsg.text entries for tagger rank changes.
  - Updated default FI endpoints (for staging).
  - Remove full text from mediawiki messages to reduce spam.
  - Recursively merge dicts in /etc/fedmsg.d/


author: Ralph Bean <rbean@redhat.com> - 0.5.3-1
changelog:
  - Icons and fedmsg.text support for fedmsg-notify
  - Re-disabled the tests to get a quick release out for fedmsg-notify.


author: Ralph Bean <rbean@redhat.com> - 0.5.2-1
changelog:
  - Allow timeout when connecting to a non-existant fedmsg-relay
  - fedmsg.text entries for new lookaside messages
  - fedmsg.text groundwork support for icons
  - Enhancements to the docs
  - Fixed regression in fedmsg-irc


author: Ralph Bean <rbean@redhat.com> - 0.5.1-1
changelog:
  - Fixed links in meetbot reprs
  - fedmsg.text entries for pkgdb2branch and releng
  - unicode bugfix for fedmsg-tail --terse
  - Fix bug alongside python-moksha-hub-1.0.3-1
  - New defaults fedora-infrastructure endpoints
  - Improved docs
  - Links to real diffs for mediawiki messages
  - Specifiable and longer default tcp timeout for fedmsg-irc
  - Improved config parsing for fedmsg-irc
  - Bugfix to git-hook; ignore pushed tags instead of crashing
  - Allow inner context to be destroyed and recreated inside a thread


author: Ralph Bean <rbean@redhat.com> - 0.5.0-1
changelog:
  - Depend on new Moksha
  - Massive docs improvement.
  - Minor API simplification.
  - Suppress some annoying warnings from fedmsg-tail.


author: Ralph Bean <rbean@redhat.com> - 0.3.9-1
changelog:
  - Bugfix to fedmsg-gateway.
  - to_json utility for sqlalchemy.
  - More convenient default config for end users.


author: Ralph Bean <rbean@redhat.com> - 0.3.8-1
changelog:
  - fedmsg-gateway command, new!
  - Improved thread cleanup with weakref.
  - --terse option for fedmsg-tail
  - Meetbot text processing support.
  - Update to consumer API.. systematized enablement.


author: Ralph Bean <rbean@redhat.com> - 0.2.1-1
changelog:
  - Override producers and consumers entry-points in the hub.  Should fix a
    collision that fedmsg-irc is having with fedoracommunity.


author: Ralph Bean <rbean@redhat.com> - 0.1.4-1
changelog:
  - Fresh version with removed shebang for packaging.
  - %define -> %global
  - Fixed end-of-line encodings in doc/conf.py


author: Ralph Bean <rbean@redhat.com> - 0.1.1-2
changelog:
  - Removed clean section
  - Removed defattr in files section
  - Removed unnecessary references to buildroot


author: Steven Pritchard <steve@kspei.com> 2.1-0.22.rc6
changelog:
  - Update to 2.1_rc6
  - Pass paths to ifconfig, ip, and route to configure
  - BR iproute and Require iproute and net-tools
  - Add BETA21-userpriv-fixups.patch from Alon Bar-Lev


author: Steven Pritchard <steve@kspei.com> 2.1-0.13.beta15
changelog:
  - Update to 2.1_beta15
  - Add openvpn-2.1_beta15-test-timeout.patch to avoid test hang
    (from Paul Howarth)


author: Steven Pritchard <steve@kspei.com> 2.0-2
changelog:
  - Move the plugin directory to _libdir
  - Drop the easy-rsa/Windows directory
  - Comment cleanups
  - Add "processname" header to init script
  - The init script isn't a config file
  - Tag contrib, sample-config-files, sample-keys, and sample-scripts as doc
  - Create/own pid dir


author: Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.11.rc6
changelog:
  - Add down-root and auth-pam plugins
  - Add --enable-password-save and --enable-iproute2
  - Add crypto and loopback tests (somewhat time-consuming)


author: Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.10.rc5
changelog:
  - Update to 2.0_rc5
  - Change the port to 1194 in the roadwarrior-*.conf samples
  - Change openvpn-init.patch to reformat the description in the init script
  - Modify the Summary and description (OpenVPN isn't UDP-only)


author: Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.7.beta17
changelog:
  - Update to 2.0_beta17
  - Require dev instead of /dev/net/tun (for udev compatibility)
  - Change openvpn-init.patch to match upstream (starts even earlier now)


author: Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.5.beta10
changelog:
  - Update to 2.0_beta10
  - Minor fix to configuration example
  - Change the init script to start a little earlier and stop much later
    (after netfs) by default
  - Remove a lot of unnecessary macro use (install/mkdir/cp)
  - Don't create /dev/net/tun, use Requires instead


author: Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.4.beta7
changelog:
  - Update to 2.0_beta7
  - Include gpg signature in source rpm
  - Include 2.0-style configuration examples
  - Minor spec cleanup


author: Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.1.test23
changelog:
  - Update to 2.0_test23
  - BuildRequires lzo-devel, kernel-headers, openssl-devel
  - Lots of spec cleanup


author: Markus Mayer <lotharlutz@gmx.de> - 0.73-2
changelog:
  - fix source url
  - convert LICENSE and AUTHORS to UTF-8
  - remove not needed '%defattr(-,root,root,-)' and 'rm -rf $RPM_BUILD_ROOT'
  - add add soname to lib(jimtcl-add_soname.patch)
  - add README.* files to %doc
  - add STYLE file to %doc


author: Richard W.M. Jones <rjones@redhat.com> - 0.6.1-6
changelog:
  - Rebuilt for updated ocamlnet.
  - Apply patch from Debian to fix builds against ocamlnet 3
    (thanks Stephane Glondu).


author: Richard W.M. Jones <rjones@redhat.com> - 0.6-2
changelog:
  - Added missing BR ocaml-ocamlnet-nethttpd-devel.
  - Test build in mock.
  - Removed ExcludeArch: ppc64.


author: Juan Manuel Borges Caño <juanmabcmail@gmail.com> - 0.4.6-1
changelog:
  - Use more generic man and info files.
  - Remove obsolete "rm -rf $RPM_BUILD_ROOT".
  - Fedora review request (bug 890733).


author: Juan Manuel Borges Caño <juanmabcmail@gmail.com> - 0.4.4-1
changelog:
  - Use GPLv3+.
  - Omit deprecated stuff like BuildRoot, Group, clean and defattr.
  - Omit Requires: glibc-common, implicitly pulled by pretty much everything already.
  - Conform to rpmlint.
  - Reformat description from too long single line.
  - BuildRequires and Requires entries listed one-by-one for a better spec legibility.
  - Fix Source* tag to the full URL for the compressed archive containing the (original) pristine source code.
  - Fix license to GPLv3.
  - Add Changelog.
  - Fedora review request (bug pending).


author: Eduardo Echeverria <echevemaster@gmail.com> - 0.2.3-4
changelog:
  - Add python-django during build
  - Add python-pep8 >= 1.3 during build
  - Add python-coverage during build
  - Add check section
  - Add patch for test (change version pep8 1.3.3 at 1.3)


author: Volker Fröhlich <volker27@gmx.at> - 2.0.8-5
changelog:
  - Correct isa macros
  - No later versions of GPL and LGPL are allowed
  - Break down licenses
  - Solve the rpath issue differently
  - Rename patches and change numbering


author: Volker Fröhlich <volker27@gmx.at> - 2.0.8-2
changelog:
  - Build with system-wide wxpropgrid and polyclipping
  - Correct Exec entry in the desktop file
  - Update patch for e00compr


author: Volker Fröhlich <volker27@gmx.at> - 2.0.8-1
changelog:
  - Updated for new version
  - Drop obsolete patches gcc46 and python-parallel
  - Correct tarball script
  - Update and correct linking in g2clib patch


author: Volker Fröhlich <volker27@gmx.at> - 2.0.7-3
changelog:
  - Delete dxflib from tarball
  - Split patches for dxflib and e00compr
  - Use bundled wxpropgrid for the time being
  - Use system-wide e00compr


author: Volker Fröhlich <volker27@gmx.at> - 2.0.7-2
changelog:
  - Correct g2clib patch to actually use g2clib
  - Only link to libraries actually used
  - Fix configure.in to really search for lodbc
  - Require g2clib-static instead of -devel


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-16
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #951964)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #949984/#949987)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-14
changelog:
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917841, CVE-2012-1016)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-12
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #914756)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-11
changelog:
  - make -server conflict with older versions of SELinux policy that didn't
    allow us to use eventfds, which libverto's backend may depend on in order
    to properly shut down a multi-worker KDC (#871524)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10
changelog:
  - libkdb_ldap: add a workaround to keep the KDC from attempting to write to an
    entry's krbLastAdminUnlock attribute on every AS request (#860759, RT#7502)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-9
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-8
changelog:
  - untag a couple of other patches which don't strictly need to apply during
    %{?_rawbuild} builds (more of #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz, #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-2
changelog:
  - undo rename from krb5-pkinit-openssl to krb5-pkinit on EL6
  - version the Obsoletes: on the krb5-pkinit-openssl to krb5-pkinit rename
  - reintroduce the init scripts for non-systemd releases
  - forward-port %{?_rawbuild} annotations from EL6 packaging


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-7
changelog:
  - selinux: hang on to the list of selinux contexts, freeing and reloading
    it only when the file we read it from is modified, freeing it when the
    shared library is being unloaded (#845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-6
changelog:
  - go back to not messing with library file paths on Fedora 17: it breaks
    file path dependencies in other packages, and since Fedora 17 is already
    released, breaking that is our fault


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-5
changelog:
  - add upstream patch to fix freeing an uninitialized pointer and dereferencing
    another uninitialized pointer in the KDC (MITKRB5-SA-2012-001, CVE-2012-1014
    and CVE-2012-1015, #844779 and #844777)
  - fix a thinko in whether or not we mess around with devel .so symlinks on
    systems without a separate /usr (sbose)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-3
changelog:
  - backport a fix to allow a PKINIT client to handle SignedData from a KDC
    that's signed with a certificate that isn't in the SignedData, but which
    is available as an anchor or intermediate on the client (RT#7183)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-2
changelog:
  - back out this labeling change (dwalsh):
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-1
changelog:
  - update to 1.10.2
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user
    - also package the PDF format admin, user, and install guides
    - drop some PDFs that no longer get built right
  - add a backport of Stef's patch to set the client's list of supported
    enctypes to match the types of keys that we have when we are using a
    keytab to try to get initial credentials, so that a KDC won't send us
    an AS reply that we can't encrypt (RT#2131, #748528)
  - don't shuffle around any shared libraries on releases with no-separate-/usr,
    since /usr/lib is the same place as /lib
  - add explicit buildrequires: on 'hostname', for the tests, on systems where
    it's in its own package, and require net-tools, which used to provide the
    command, everywhere


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-3
changelog:
  - have -server require /usr/share/dict/words, which we set as the default
    dict_file in kdc.conf (#817089)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-2
changelog:
  - change back dns_lookup_kdc to the default setting (Stef Walter, #805318)
  - comment out example.com examples in default krb5.conf (Stef Walter, #805320)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-1
changelog:
  - update to 1.10.1
    - drop the KDC crash fix
    - drop the KDC lookaside cache fix
    - drop the fix for kadmind RPC ACLs (CVE-2012-1012)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-5
changelog:
  - when removing -workstation, remove our files from the info index while
    the file is still there, in %preun, rather than %postun, and use the
    compressed file's name (#801035)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-2
changelog:
  - add patch to accept keytab entries with vno==0 as matches when we're
    searching for an entry with a specific name/kvno (#230382/#782211,RT#3349)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha2.2
changelog:
  - modify the deltat grammar to also tell gcc (4.7) to suppress
    "maybe-uninitialized" warnings in addition to the "uninitialized" warnings
    it's already being told to suppress (RT#7080)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.3
changelog:
  - pull in patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761317)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761317)
  - pull in patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761317)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.2
changelog:
  - apply upstream patch to fix a null pointer dereference when processing
    TGS requests (CVE-2011-1530, #753748)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.0
changelog:
  - update to 1.10 alpha 1
  - on newer releases where we can assume NSS >= 3.13, configure PKINIT to build
    using NSS
  - on newer releases where we build PKINIT using NSS, configure libk5crypto to
    build using NSS
  - rename krb5-pkinit-openssl to krb5-pkinit on newer releases where we're
    expecting to build PKINIT using NSS instead
  - during %check, run check in the library and kdc subdirectories, which
    should be able to run inside of the build system without issue


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-18
changelog:
  - apply upstream patch to fix a null pointer dereference with the LDAP kdb
    backend (CVE-2011-1527, #744125), an assertion failure with multiple kdb
    backends (CVE-2011-1528), and a null pointer dereference with multiple kdb
    backends (CVE-2011-1529) (#737711)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-17
changelog:
  - pull in patch from trunk to rename krb5int_pac_sign() to krb5_pac_sign() and
    make it public (#745533)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-16
changelog:
  - kadmin.service: fix #723723 again
  - kadmin.service,krb5kdc.service: remove optional use of $KRB5REALM in command
    lines, because systemd parsing doesn't handle alternate value shell variable
    syntax
  - kprop.service: add missing Type=forking so that systemd doesn't assume simple
  - kprop.service: expect the ACL configuration to be there, not absent
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#739853)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-12
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth (#734341)
  - pull in build-time deps for the tests


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-10
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-9
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-8
changelog:
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS
  - pull in a patch to fix losing track of the replay cache FD, from SVN by
    way of Kevin Coffman


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-7
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#723723),
    which is too fragile in cases where the database has been manually moved or
    is accessed through another kdb plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-6
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-5
changelog:
  - pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
    during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
    not to ask for an IPv6 address based on the set of configured interfaces
    (#717378, RT#6922)
  - pull a fix from SVN to use AI_ADDRCONFIG more often (RT#6923)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-4
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#715074)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-3
changelog:
  - pull a fix from SVN to get libgssrpc clients (e.g. kadmin) authenticating
    using the old protocol over IPv4 again (RT#6920)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#576093)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-1
changelog:
  - update to 1.9.1:
    - drop no-longer-needed patches for CVE-2010-4022, CVE-2011-0281,
      CVE-2011-0282, CVE-2011-0283, CVE-2011-0284, CVE-2011-0285


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696343,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't discard the error code from an error message received in response
    to a change-password request (#658871, RT#6893)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - override INSTALL_SETUID at build-time so that ksu is installed into
    the buildroot with the right permissions (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - turn off NSS as the backend for libk5crypto for now to work around its
    DES string2key not working (#679012)
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (MITKRB5-SA-2011-003, CVE-2011-0284, #674325)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - throw in a not-applied-by-default patch to try to make pkinit debugging
    into a run-time boolean option named "pkinit_debug"


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-6
changelog:
  - turn on NSS as the backend for libk5crypto, adding nss-devel as a build
    dependency when that switch is flipped


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-5
changelog:
  - krb5kdc init script: prototype some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (to flush out parts of #651466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
    in the KDC when using the LDAP kdb backend, and an uninitialized pointer
    use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, #664009,
    CVE-2011-0281, #668719, CVE-2011-0282, #668726, CVE-2011-0283, #676126)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-2
changelog:
  - pkinit: when verifying signed data, use the CMS APIs for better
    interoperability (#636985, RT#6851)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-0.beta1.0
changelog:
  - start moving to 1.9 with beta 1
    - drop patches for RT#5755, RT#6762, RT#6774, RT#6775
    - drop no-longer-needed backport patch for #539423
    - drop no-longer-needed patch for CVE-2010-1322
  - if WITH_NSS is set, built with --with-crypto-impl=nss (requires NSS 3.12.9)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-8
changelog:
  - incorporate upstream patch to fix uninitialized pointer crash in the KDC's
    authorization data handling (CVE-2010-1322, #636335)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-6
changelog:
  - pull down patches from trunk to implement k5login_authoritative and
    k5login_directory settings for krb5.conf (#539423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-4
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #629022, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #629022, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-1
changelog:
  - update to 1.8.3
    - drop backports of fixes for gss context expiration and error table
      registration/deregistration mismatch
    - drop patch for upstream #6750


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3
changelog:
  - tell krb5kdc and kadmind to create pid files, since they can
  - add logrotate configuration files for krb5kdc and kadmind (#462658)
  - fix parsing of the pidfile option in the KDC (upstream #6750)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull up fix for upstream #6745, in which the gssapi library would add the
    wrong error table but subsequently attempt to unload the right one


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: move session management calls to before we drop privileges, like
    su does (#596887), and don't skip the PAM account check for root or the
    same user (more of #540769)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-6
changelog:
  - make krb5-server-ldap also depend on the same version-release of krb5-libs,
    as the other subpackages do, if only to make it clearer than it is when we
    just do it through krb5-server
  - drop explicit linking with libtinfo for applications that use libss, now
    that readline itself links with libtinfo (as of readline-5.2-3, since
    fedora 7 or so)
  - go back to building without strict aliasing (compiler warnings in gssrpc)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-5
changelog:
  - add patch to correct GSSAPI library null pointer dereference which could be
    triggered by malformed client requests (CVE-2010-1321, #582466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-1
changelog:
  - update to 1.8.1
    - no longer need patches for #555875, #561174, #563431, RT#6661, CVE-2010-0628
  - replace buildrequires on tetex-latex with one on texlive-latex, which is
    the package that provides it now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - drop patch to suppress key expiration warnings sent from the KDC in
    the last-req field, as the KDC is expected to just be configured to either
    send them or not as a particular key approaches expiration (#556495)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-5
changelog:
  - add upstream fix for denial-of-service in SPNEGO (CVE-2010-0628, #576325)
  - kdc.conf: no more need to suggest keeping keys with v4-compatible salting


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-4
changelog:
  - remove the krb5-appl bits (the -workstation-clients and -workstation-servers
    subpackages) now that krb5-appl is its own package
  - replace our patch for #563431 (kpasswd doesn't fall back to guessing your
    principal name using your user name if you don't have a ccache) with the
    one upstream uses


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-2
changelog:
  - pull up patch to get the client libraries to correctly perform password
    changes over IPv6 (Sumit Bose, RT#6661)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-1
changelog:
  - update to 1.8
    - temporarily bundling the krb5-appl package (split upstream as of 1.8)
      until its package review is complete
    - profile.d scriptlets are now only needed by -workstation-clients
    - adjust paths in init scripts
    - drop upstreamed fix for KDC denial of service (CVE-2010-0283)
    - drop patch to check the user's password correctly using crypt(), which
      isn't a code path we hit when we're using PAM


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-6
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-4
changelog:
  - move the package changelog to the end to match the usual style (jdennis)
  - scrub out references to $RPM_SOURCE_DIR (jdennis)
  - include a symlink to the readme with the name LICENSE so that people can
    find it more easily (jdennis)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-3
changelog:
  - pull up the change to make kpasswd's behavior better match the docs
    when there's no ccache (#563431)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-1
changelog:
  - update to 1.7.1
    - don't trip AD lockout on wrong password (#542687, #554351)
    - incorporates fixes for CVE-2009-4212 and CVE-2009-3295
    - fixes gss_krb5_copy_ccache() when SPNEGO is used
  - move sim_client/sim_server, gss-client/gss-server, uuclient/uuserver to
    the devel subpackage, better lining up with the expected krb5/krb5-appl
    split in 1.8
  - drop kvno,kadmin,k5srvutil,ktutil from -workstation-servers, as it already
    depends on -workstation which also includes them


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-22
changelog:
  - use portreserve correctly -- portrelease takes the basename of the file
    whose entries should be released, so we need three files, not one


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-21
changelog:
  - suppress warnings of impending password expiration if expiration is more than
    seven days away when the KDC reports it via the last-req field, just as we
    already do when it reports expiration via the key-expiration field (#556495)
  - link with libtinfo rather than libncurses, when we can, in future RHEL


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-20
changelog:
  - krb5_get_init_creds_password: check opte->flags instead of options->flags
    when checking whether or not we get to use the prompter callback (#555875)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-19
changelog:
  - use portreserve to make sure the KDC can always bind to the kerberos-iv
    port, kpropd can always bind to the krb5_prop port, and that kadmind can
    always bind to the kerberos-adm port (#555279)
  - correct inadvertent use of macros in the changelog (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-18
changelog:
  - add upstream patch for integer underflow during AES and RC4 decryption
    (CVE-2009-4212), via Tom Yu (#545015)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-17
changelog:
  - put the conditional back for the -devel subpackage
  - back down to the earlier version of the patch for #551764; the backported
    alternate version was incomplete


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-16
changelog:
  - use %global instead of %define
  - pull up proposed patch for creating previously-not-there lock files for
    kdb databases when 'kdb5_util' is called to 'load' (#551764)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-15
changelog:
  - add upstream patch for KDC crash during referral processing (CVE-2009-3295),
    via Tom Yu (#545002)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages that live in the -libs subpackage into the regular
    %{_mandir} tree where they'll still be found if that package is the
    only one installed (#529319)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-11
changelog:
  - ksu: move account management checks to before we drop privileges, like
    su does (#540769)
  - selinux: set the user part of file creation contexts to match the current
    context instead of what we looked up
  - configure with --enable-dns-for-realm instead of --enable-dns, which isn't
    recognized any more


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-10
changelog:
  - move /etc/pam.d/ksu from krb5-workstation-servers to krb5-workstation,
    where it's actually needed (#538703)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-8
changelog:
  - specify the location of the subsystem lock when using the status() function
    in the kadmind and kpropd init scripts, so that we get the right error when
    we're dead but have a lock file - requires initscripts 8.99 (#521772)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if the init script fails to start krb5kdc/kadmind/kpropd because it's already
    running (according to status()), return 0 (part of #521772)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - simplify the man pages patch by only preprocessing the files we care about
    and moving shared configure.in logic into a shared function
  - catch the case of ftpd printing file sizes using %i, when they might be
    bigger than an int now


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-4
changelog:
  - try to merge and clean up all the large file support for ftp and rcp
    - ftpd no longer prints a negative length when sending a large file
      from a 32-bit host


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-3
changelog:
  - switch buildrequires: and requires: on e2fsprogs-devel into
    buildrequires: and requires: on libss-devel, libcom_err-devel, per
    sandeen on fedora-devel-list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a type mismatch in krb5_copy_error_message()
  - ftp: fix some odd use of strlen()
  - selinux labeling: use selabel_open() family of functions rather than
    matchpathcon(), bail on it if attempting to get the mutex lock fails


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - compile with %{?_smp_mflags} (Steve Grubb)
  - drop the bit where we munge part of the error table header, as it's not
    needed any more


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-1
changelog:
  - update to 1.7
    - no need to work around build issues with ASN1BUF_OMIT_INLINE_FUNCS
    - configure recognizes --enable/--disable-pkinit now
    - configure can take --disable-rpath now
    - no more libdes425, krb524d, krb425.info
    - kadmin/k5srvutil/ktutil are user commands now
    - new kproplog
    - FAST encrypted-challenge plugin is new
  - drop static build logic
  - drop pam_krb5-specific configuration from the default krb5.conf
  - drop only-use-v5 flags being passed to various things started by xinetd
  - put %{krb5prefix}/sbin in everyone's path, too (#504525)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-104
changelog:
  - extend PAM support to ksu: perform account and session management for the
    target user
  - pull up and merge James Leddy's changes to also set PAM_RHOST in PAM-aware
    network-facing services


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-103
changelog:
  - fix a typo in a ksu error message (Marek Mahut)
  - "rev" works the way the test suite expects now, so don't disable tests
    that use it


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-101
changelog:
  - add patches for read overflow and null pointer dereference in the
    implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
  - add patch for attempt to free uninitialized pointer in libkrb5
    (CVE-2009-0846)
  - add patch to fix length validation bug in libkrb5 (CVE-2009-0847)
  - put the krb5-user .info file into just -workstation and not also
    -workstation-clients


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-100
changelog:
  - turn off krb4 support (it won't be part of the 1.7 release, but do it now)
  - use triggeruns to properly shut down and disable krb524d when -server and
    -workstation-servers gets upgraded, because it's gone now
  - move the libraries to /%{_lib}, but leave --libdir alone so that plugins
    get installed and are searched for in the same locations (#473333)
  - clean up buildprereq/prereqs, explicit mktemp requires, and add the
    ldconfig for the -server-ldap subpackage (part of #225974)
  - escape possible macros in the changelog (part of #225974)
  - fixup summary texts (part of #225974)
  - take the execute bit off of the protocol docs (part of #225974)
  - unflag init scripts as configuration files (part of #225974)
  - make the kpropd init script treat 'reload' as 'restart' (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-19
changelog:
  - libgssapi_krb5: backport fix for some errors which can occur when
    we fail to set up the server half of a context (CVE-2009-0845)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clear fuzz out of patches, dropping a man page patch which is no longer
    necessary
  - quote %{__cc} where needed because it includes whitespace now
  - define ASN1BUF_OMIT_INLINE_FUNCS at compile-time (for now) to keep building


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-15
changelog:
  - build with -fno-strict-aliasing, which is needed because the library
    triggers these warnings
  - don't forget to label principal database lock files
  - fix the labeling patch so that it doesn't break bootstrapping


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-12
changelog:
  - stop exporting kadmin keys to a keytab file when kadmind starts -- the
    daemon's been able to use the database directly for a long long time now
  - belatedly add aes128,aes256 to the default set of supported key types


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-11
changelog:
  - libgssapi_krb5: properly export the acceptor subkey when creating a lucid
    context (Kevin Coffman, via the nfs4 mailing list)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-10
changelog:
  - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer
    when v4 compatibility is enabled on the KDC (CVE-2008-0062, CVE-2008-0063,
    - add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
    high-numbered descriptors are used (CVE-2008-0947, #433596)
  - add backport bug fix for an attempt to free non-heap memory in
    libgssapi_krb5 (CVE-2007-5901, #415321)
  - add backport bug fix for a double-free in out-of-memory situations in
    libgssapi_krb5 (CVE-2007-5971, #415351)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-9
changelog:
  - rework file labeling patch to not depend on fragile preprocessor trickery,
    in another attempt at fixing #428355 and friends


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-8
changelog:
  - ftp: add patch to fix "runique on" case when globbing fixes applied
  - stop adding a redundant but harmless call to initialize the gssapi internals


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to suppress double-processing of /etc/krb5.conf when we build
    with --sysconfdir=/etc, thereby suppressing double-logging (#231147)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove a patch, to fix problems with interfaces which are "up" but which
    have no address assigned, which conflicted with a different fix for the same
    problem in 1.5 (#200979)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated
  - in login, signal PAM when we're changing an expired password that it's an
    expired password, so that when cracklib flags a password as being weak it's
    treated as an error even if we're running as root


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-7
changelog:
  - drop netdb patch
  - kdb_ldap: add patch to treat 'nsAccountLock: true' as an indication that
    the DISALLOW_ALL_TIX flag is set on an entry, for better interop with Fedora,
    Netscape, Red Hat Directory Server (Simo Sorce)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-5
changelog:
  - enable patch for key-expiration reporting
  - enable patch to make kpasswd fall back to TCP if UDP fails (#251206)
  - enable patch to make kpasswd use the right sequence number on retransmit
  - enable patch to allow mech-specific creds delegated under spnego to be found
    when searching for creds


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-4
changelog:
  - some init script cleanups
    - drop unquoted check and silent exit for "$NETWORKING" (#426852, #242502)
    - krb524: don't barf on missing database if it looks like we're using kldap,
      same as for kadmin
    - return non-zero status for missing files which cause startup to
      fail (#242502)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-3
changelog:
  - allocate space for the nul-terminator in the local pathname when looking up
    a file context, and properly free a previous context (Jose Plans, #426085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-1
changelog:
  - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999
    and CVE-2007-4000 (the new pkinit module is built conditionally and goes
    into the -pkinit-openssl package, at least for now, to make a buildreq
    loop with openssl avoidable)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5.conf %verify(not md5 size mtime) in addition to
    %config(noreplace), like /etc/nsswitch.conf (#329811)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-9
changelog:
  - apply the fix for CVE-2007-4000 instead of the experimental patch for
    setting ok-as-delegate flags


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-7
changelog:
  - also perform PAM session and credential management when ftpd accepts a
    client using strong authentication, missed earlier
  - also label kadmind log files and files created by the db2 plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-6
changelog:
  - incorporate updated fix for CVE-2007-3999 (CVE-2007-4743)
  - fix incorrect call to "test" in the kadmin init script (#252322,#287291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-8
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to %{_var}/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include %{version}


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.1-3
changelog:
  - Fixed Bug 631043 - s/qt-devel/qt4-devel/ in BuildRequires
  - Added ibus-qt-HEAD.patch
    Fixed Bug 655530 - Selected text gets deleted in KDE


author: Julian Sikorski <belegdol@fedoraproject.org> - 1:1.11.1-1
changelog:
  - Updated to 1.11.1 and updated BuildRequires accordingly
  - Dropped obsolete Group, Buildroot, %clean and %defattr
  - Updated the scriptlets to the latest spec
  - GConf2 is no more


author: Julian Sikorski <belegdol@fedoraproject.org> - 1:1.10.8-1
changelog:
  - Updated to 1.10.8
  - Dropped scrollkeeper scriptlets since they are no longer needed
  - Updated icon cache and gconf scriptlets to the latest spec


author: Huzaifa Sidhpurwala <huzaifas@redhat.com> 1:1.9.17-3
changelog:
  - Upstream bump to 1.9.17
  - Apply gnome bz patch #605043
  - BR goffice-devel >= 1.7.17
  - Change goffice plugins to 0.7.17


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1:1.8.1-1
changelog:
  - New upstream release 1.8.1
  - Split of perl and libgda/libgnomedb plugins into gnumeric-plugins-extras


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1:1.6.3-10
changelog:
  - Update License tag for new Licensing Guidelines compliance
  - Don't regenerate all the autoxxx stuff (not needed) this fixes building with
    the latest intltool


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1:1.6.3-3
changelog:
  - Fix idl file being in both the main and the devel package
  - Move libspreadsheet.so symlink to the devel package


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1:1.6.2-1
changelog:
  - New upstream version
  - Rebuild for new gcc4.1 and glibc
  - add %{?dist} for consistency with my other packages
  - Update scripts to match the scriptlets wiki page


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1:1.6.1-2
changelog:
  - Switch to core version of libgsf now Core has 1.13 instead of using special
    Extras libgsf113 version.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1:1.6.1-1
changelog:
  - new upstream stable version 1.6.1
  - drop 2 integrated patches
  - own dirs /usr/share/mc/templates /usr/share/mc (bug 169332)
  - proper use of desktop-file-install (bug 171963)
  - put icon in the proper freedesktop.org spec matching icon dir (bug 171964)
  - remove unused mime-type icons
  - clean up specfile, own all dirs not owned by Required packages.
  - add --enable-ssindex (bug 172164)


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.4.3-5
changelog:
  - gtk2-devel and libart_lgpl-devel where not getting sucked in because
    of a bug in another package this has been fixed now so the buildrequires
    have been removed again.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.4.3-4
changelog:
  - For some reason gtk2-devel no longer gets sucked in by our other
    buildrequires so explicitly add it.
  - libart_lgpl-devel is now needed for building, so add this.
  - I also noticed in the configure output that gnumeric can
    use pygtk2, so add this.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.4.3-3
changelog:
  - Add patch3: fix excell export with libgsf >= 0.12 (bugzilla #160075),
    Thanks to Caolan McNamara.


author: Caolan McNamara <caolanm@redhat.com> 1.4.1-1
changelog:
  - bump to new version
  - drop integrated 64bit patch
  - drop integrated desktop.in patch
  - drop integrated latex patch
  - drop disable bonobo patch
  - add enable perl configure patch
  - add quickfix for help being searched for in wrong place #gnome161404#


author: Caolan McNamara <caolanm@redhat.com> 1.2.12
changelog:
  - update to 1.2.12 some exported excel workbooks will not work in Excel
  with older versions
  _ delete unused patches


author: Warren Togami <wtogami@redhat.com> 1.2.8-2
changelog:
  - #74034 own plugin dir
  - #111112 BR intltool scrollkeeper gettext desktop-file-utils
  - some cleanup


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - also disable python for mainframe, this should be fixed properly
    at some point...
  - add guile to filelist


author: Matt Wilson <msw@redhat.com>
changelog:
  - removed patch4 (gnumeric-0.67-sheet_corruption.patch), in CVS now.
  - removed patch8 (gnumeric-0.67-xlsscale.patch), no longer needed.
  - removed patch4 (gnumeric-0.67-s390.patch), no longer needed.
  - regenerated patch6 (gnumeric-0.67.lengthen-warning.patch) against 0.71
  - removed patch2 (gnumeric-0.67-mb.patch), in CVS now.
  - removed patch9 (gnumeric-0.67-backspace.patch), came from CVS.
  - removed patch5 (gnumeric-0.67-desktop.patch), ditto
  - renamed remaining patches:
      patch3 (gnumeric-0.67-excel95-ja.patch) -> patch2
      patch6 (gnumeric-0.71-lengthen-warning.patch) -> patch3
  - removed source10, ja.po from upstream is more up to date.
  - added files needed for bonobo gnumeric back into file list


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fix problem with scaling percentage and XLS files (#51054)
  - Fix problem where default font for ja and other locales was backwards


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Install all files from the plugins in the main package. Putting .la
    files in the main package didn't make sense, and we were missing
    some files for the gnome-glossary package.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Move desktop file to /etc/X11/applnk (#23488)
  - Added BuildPrereq on python-devel (#45029)
  - Add BuildPrereq on gal-devel (#45027)
  - Add <locale.h> include to .mb patch 
    (don't know why it works for me / in the build system, #32388)


author: Akira TAGOH <tagoh@redhat.com>
changelog:
  - Added Japanese patch.
  - Updated Japanese translation.
    Note: Please remove Source10 when the next upstream release.


author: Mamoru Tasaka <mtasaka@fedoraproject.org> - 1.10.2-1
changelog:
  - 1.10.2
  - Make dependency for pkg-config be development only again
  - Change the license tag to "GPLv2 or Ruby"
  - Remove defattr


author: Allisson Azevedo <allisson@gmail.com> 1.4.1-2
changelog:
  - Changed license for Ruby License/GPL
  - Add ruby-devel for devel requires
  - Changed main group for System Environment/Libraries
  - Changed install for keep timestamps


author: Thorsten Leemhuis <fedora@leemhuis.info> - 0.4.3-1
changelog:
  - update to 0.4.3
  - use the newly added setup.py for install, which simplifies the spec file 
    a lot


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.85-2
changelog:
  - fix NepomukSmoke not getting built, breaking the Ruby and C# bindings
  - fix its build (missing #include <nepomuk/resourcetypeterm.h>)
  - fix phpqt_internals.cpp for the current smoke.h
  - Qyoto/Kimono DLLs are now in mono/qyoto rather than mono/2.0


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.80-3
changelog:
  - fix NepomukSmoke build (blacklist Nepomuk::ResourceManager::generateUniqueUri)
  - fix the PyKDE4 Akonadi, kdeui and Phonon bindings to build


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.1-2
changelog:
  - only (temporarily) disable Falcon on F12+
  - drop bindings for polkit-qt on F12+ (PolicyKit 0.9 is going away)
  - remove unused (commented out) patch


author: Than Ngo <than@redhat.com> - 4.2.85-1
changelog:
  - 4.2.85 (4.3 beta1)
  - build fixes backported from trunk by Nicolas Lécureuil <neoclust@mandriva.org>
  - revert change which requires PyQt4 4.5 (Kevin Kofler)
  - fix build issue with gcc-4.4


author: Rex Dieter <rdieter@fedoraproject.org> - 4.2.0-4
changelog:
  - include toggle for PyKDE4-akonadi subpkg (not enabled)
  - PyKDE4: move examples to -devel pkg
  - PyKDE4: make dep on PyQt4 versioned
  - PyKDE4: Provides: -akonadi, Requires: kdepimlibs-akonadi
  - PyKDE4(-devel): adjust description/summary


author: Rex Dieter <rdieter@fedoraproject.org> 4.1.96-4
changelog:
  - update %description/%summaries for new (sub)pkgs
  - use versioned Provides/Requires all over
  - BR: akonadi-devel kdegraphics-devel
  - don't package kde-plasma-ruby-* (cmake error "rbuic4 not found")


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.85-2
changelog:
  - reenable smoke, ruby
  - disable NepomukSmoke for now: it wasn't actually used (the corresponding
    Ruby binding is disabled by default and we don't build the C# bindings) and it
    depends on nepomukquery libs from kdebase (which also means we need to sort
    out the -devel symlink mess there first)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.0-3
changelog:
  - drop unneeded BR kdegraphics4-devel (Ruby Okular bindings disabled by default)
  - add BR kdepimlibs-devel for Python Akonadi bindings


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.83-3
changelog:
  - reenable Ruby again
  - add missing Epoch for minimum kdegraphics-devel version requirement
  - fix CMake target name conflict between Ruby and Python bindings
  - fix file list for Ruby


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.83-2
changelog:
  - reenable smoke again (keep ruby off for now)
  - drop explicit ENABLE_SMOKEKDEVPLATFORM=OFF (now off by default)
  - add BR kdegraphics-devel for the Smoke Okular bindings
  - fix file list


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.80-2
changelog:
  - disable php-qt for now
  - apply PyKDE4 and smokekde build fixes from upstream
  - update file lists (comment out smokeplasma, add new smoke/ruby files)
  - fix incorrect libdir on lib64 platforms


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.2-3
changelog:
  - apply upstream build fixes for Qt 4.3.4 (rev 780996)
  - remove no longer existing protected KService::accessServiceTypes from PyKDE4


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 3.97.0-4
changelog:
  - rewrite libsmokeqt-lib64 patch so it actually works
  - add PyKDE4 files to file list
  - specify minimum versions of sip-devel and PyQt4-devel
  - require PyQt4 in main package, PyQt4-devel in -devel
  - fix unowned Qt and KDE directories under ruby_sitelib


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 3.97.0-3
changelog:
  - omit BR: qwt-devel for now, causes build failure in smokeqt
  - add BRs: sip-devel PyQt4-devel for PyKDE4


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 3.97.0-2
changelog:
  - remove X11 BRs now Required by kdelibs-devel
  - add BR: qwt-devel
  - fix libsmokeqt being in /usr/lib even on 64-bit arches
  - use ruby_sitelib and ruby_sitearch properly


author: Jaromir Capik <jcapik@redhat.com> - 1.7.0-23
changelog:
  - Fixing keyboard shortcuts for adding and deleting objects
  - ... by altering the Mr'Meval's patch (#830628)


author: Nils Philippsen <nils@redhat.com> 1.6.6-1
changelog:
  - get rid of ancient obsoletes/provides, obsolete versioned and build
    dependencies
  - use fedorahosted source URL
  - make GUI optional, disable it per default in Fedora 18 and later
  - fix bogus changelog dates
  - package help files only with GUI, don't mark as documentation


author: Jiri Popelka <jpopelka@redhat.com> 1.6.4-1
changelog:
  - version 1.6.4
    - Don't write DEVICE= line (rhbz#846081)
    - add support for lcs devices
    - Disable the Bind to MAC address option on bond slave devices (rhbz #504824)
    - Do not remove GATEWAYDEV from /etc/sysconfig/network (rhbz #602688).
    - Don't remove route-ethX on save (rhbz #501530)
    - Establishing a QETH Connection chapter added to help
    - use xdg-open instead of htmlview


author: Jiri Popelka <jpopelka@redhat.com> 1.6.1-1
changelog:
  - version 1.6.1
  - ported to use NSS library (rhbz #348321)
  - /etc/modprobe.conf is deprecated (rhbz #589593)
  - typos in spec (rhbz #600633)
  - avoid saving of None values into wvdial.conf (rhbz #601005)
  - read/write PREFIX from/to ifcfg file (rhbz #613801)
  - avoid deprecation warnings (rhbz #626289)


author: Harald Hoyer <harald@redhat.com> 1.5.96-1
changelog:
  - translation update (harald)
  - added DNS1 and DNS2 to the device specific config (harald)
  - do not raise NotImplementedError for getDialog (harald)
  - DSN -> DNS typo (harald)
  - NotImplemented -> NotImplementedError (harald)


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.5.95-1
changelog:
  - New version 1.5.95
  - Fixed hostname test according to latest rfc. (rhbz#473919)
  - Don't write empty options to config file
  - Fixed s-control-network crash when run as non-root (rhbz#470203)
  - DSL: Fixed overwritting synchrounous mode to 'yes' (rhbz#475155)
  - Fixed typo in NCIPsec.py. (rhbz#474988)
  - Added gnome-python2-gnome to Requirements (rhbz#472154)
  - Improved compatibility with NetworkManager
  - Resolves: #472154, #475155, #473919, #474988, #470203


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.5.94-1
changelog:
  - version 1.5.94
  - fixed tcp/ip gateway/netmask problem
  - fixed crash when pap-secrets contains spaces
  - Resolves: #469434, #465748


author: Harald Hoyer <harald@redhat.com> - 1.5.91
changelog:
  - more pylint and cleanups (harald)
  - removed Init2 string (clashes with UTMS) (harald)
  - check if hostname is not None, before checking it (harald)
  - changed to python logging (harald)
  - no activate/deactivate/delete NMControlled devices (harald)
  - changed source from tar.gz to tar.bz2 (harald)


author: Harald Hoyer <harald@redhat.com> - 1.5.90
changelog:
  - genClass replacement (harald@redhat.com)
  - split Conf.py in several submodules (harald@redhat.com)
  - added tui/NCPluginTokenRingInterface (harald@redhat.com)
  - BackendHal fix to use Factory classes (harald@redhat.com)
  - name consistency (harald@redhat.com)
  - named all plugins NCPlugin (harald@redhat.com)
  - speedup module loading by only calling register_plugin from __init__ (harald@redhat.com)
  - make pylint and pychecker happy (harald@redhat.com)
  - ignore system hardware for the UnitTest (harald@redhat.com)
  - MTU moved to base device (harald@redhat.com)
  - extended UnitTests (harald@redhat.com)
  - use newer automake/aclocal syntax (harald@redhat.com)


author: Harald Hoyer <harald@redhat.com> - 1.5.1
changelog:
  - removed CIPE (harald)
  - s/Devernet/Network/ (harald)
  - Auto -> auto (harald)
  - only append localhost to AliasList, if not already in (harald)
  - show error dialog, if device loading failes (harald)
  - moved MRU to Dialup only (harald)
  - recognize qeth devices in kudzu lists (rhbz#184734) (harald)
  - added MRU field (rhbz#221294) (harald)
  - added TUI for QETH (harald)
  - do not traceback, if we try to remove a device not in our active list (harald)
  - added qeth support (harald)
  - removed ctc and iucv devices (rhbz#219180) (harald)
  - do not handle ifcfg-${parent_device}-range* rhbz#221292 (harald)
  - Minor fix in hosts parser to make tui works. (jmoskovc)
  - Stupid mode doesn't go away anymore.(rhbz#177931) (jmoskovc)
  - Fixed crash when Baud=None (jmoskovc)
  - Removing PPP option should work. NETWORKMANAGER -> NM_CONTROLLED (jmoskovc)
  - Fixed problem with import rhbz#429725 (jmoskovc)
  - Changed Clist in host editor to GtkTreeView, added checkbox to show loopbacks in hosts (jmoskovc)
  - Minor fix in hosts parser - now it accepts trailing dot. (jmoskovc)
  - Improved {pap|chap}-secrets parser, added checkbox to reveal password in dialup config (jmoskovc)
  - Fixed crash when hostname is changed. (jmoskovc)


author: Harald Hoyer <harald@redhat.com>, Jiri Moskovcak <jmoskovc@redhat.com> - 1.4.7
changelog:
  - added HAL support
  - fixed /etc/hosts parser
  - added "Controlled by NetworkManager"
  - do not fall into modified state for activate/deactivate (rhbz#377261)


author: Stepan Kasal <skasal@redhat.com> - 1.4.4
changelog:
  - s/NEtwork/Network/ in the summary of -tui, to be consistent
    with the summary line of the main rpm (the neat acronym is no
    longer advertised anyway)
  - Resolves: #239216


author: Harald Hoyer <harald@redhat.com> - 1.4.4
changelog:
  - removed not yet used NCBackendHal.py (rhbz#353771)
  - fixed yelp dependency (rhbz#344981)
  - moved %configure to %build (rhbz#353761)
  - fixed type with getRoot (rhbz#368871)


author: Harald Hoyer <harald@redhat.com> - 1.3.95
changelog:
  - translation update (bug #208886)
  - use rhpl.iwlib for wireless functions (bug #197954)
  - added perl-XML-Parser build requirement


author: Harald Hoyer <harald@redhat.com> - 1.3.90
changelog:
  - fixed:
  - [135014] MTU and MRU should be confiurable for ADSL
  - [141055] system-config-network needs to be able to set MTU
  - [149780] no GATEWAY, IPADDR and NETMASK, if BOOTPROTO=dhcp
  - [150362] [Errno 2] No such file or directory: '/etc/hosts'
  - [157172] Wrong DNS for provider "ZEDAT_Berlin"
  - [160417] Bad: cannot make any changes to network settings
  - [169819] Trailing space in host name causes crash
  - [175078] String (country name) change request
  - [176145] Please enable Serbian translation in system-config-network
  - [177198] deprecation warning in system-config-network
  - [187563] localized option passed to ifcfg-wlan0 files
  - [188321] Creating an alias for a network interface breaks device
             setup after reboots
  - [190242] Firefox instance running as root when used to read docs
             for system-config-*
  - [197401] Don't write HWADDR for alias interfaces


author: Harald Hoyer <harald@redhat.com> - 1.3.27
changelog:
  - use new pam stack replacement
  - added OnParent for Alias Devices
  - added SPI and better key generation for ipsec
  - corrected column handling in main window
  - GUI liftup
  - added AVM Fritz!PCI v2.0 ISDN card to ISDN Hardwarelist (bug 134605)
  - remove /etc/sysconfig/isdncard, if no ISDN is configured


author: Harald Hoyer <harald@redhat.com> - 1.3.17
changelog:
  - better "make clean"
  - removed references to Red Hat Linux
  - added testsuite for data layer
  - added some module-info entries
  - added command line parsing to network-control
  - added IPsec to network-cmd
  - switched logging to syslog
  - do not touch bonding slaves
  - better alias handling
  - better handling of chroot
  - read *.ko modules also
  - handle modules parameter without "="
  - create correct SPI_ identifier for manual IPsec keying
  - better hostname handling
  - better profile handling
  - fix kernel version parsing
  - unknown-flag.xpm for unknown country flags
  - fixed TokenRing glade file (bad hash at beginning of file)
  - fix the length of IPSec shared keys
  - prevent modified status after profile switching
  - save dialog, for ipsec deactivation
  - PEERDNS defaults to yes
  - routing for wireless config dialog
  - only display CIPE for kernel < 2.6


author: Harald Hoyer <harald@redhat.com> - 1.3.16
changelog:
  - be more relaxed, when parsing the kernel version (115917)
  - fixed removing of Hostname (115795)
  - fixed "DevEthernet instance has no attribute 'IPv6Init'" (116375)
  - removed save dialog, when switching profiles (107399)
  - added generic Initstrings (115768)
  - added secure.png logo
  - added "-c" parameter for activate/deactivate
  - changed hotkeys to avoid double entries
  - use new pixmap loading code (only take local paths, if debugging is active)
  - moved updateNetworkScripts() to NC_functions.py
  - fallback on /etc/sysconfig/network-scripts
  - removed /usr/lib/rhs/python from sys.path
  - added -? as a command line option
  - corrected --root= option for gui
  - activate/deactivate buttons always sensitive
  - check for ipsec-tools and dynamically display ipsec tab
  - no second dialog while activating in system-control-network
  - change hosts file on hostname change
  - PEERDNS is true, if not configured


author: Harald Hoyer <harald@redhat.de> 1.3.13
changelog:
  - fixed T-Online dialog #110911
  - default flow control to CTSRTS #110347
  - only clear login/pw on provider select, if provider has its own number
  - fixed cancel of dialup process #103421
  - default to "/" for chrooted configuration
  - default to "default" profile if none active
  - fixed "activate button not active" #110193
  - scn-tui requires newt #104213
  - fixed #107816, by recognizing /var/run/ppp-ppp<NICKNAME>.pid
  - fixed a bug in ISDN activate #100677


author: Harald Hoyer <harald@redhat.de> 1.3.12
changelog:
  - renamed redhat-config-network -> system-config-network
  - added pciutils requirement
  - added utf-8 encoding comments
  - corrected some translation strings
  - added redhat-config-network provides


author: Harald Hoyer <harald@redhat.de> 1.3.10
changelog:
  - removed restriction on t-online password entry #105970
  - failsafe changing the error image #108094
  - corrected indention #108151


author: Harald Hoyer <harald@redhat.de> 1.3.9
changelog:
  - fixed 107501, 107387, 106751, 104213
  - fallback to no logfile, if opening the logfile fails
  - test, if /etc/{hosts,resolv.conf} exists
  - removed ipsec tab


author: Harald Hoyer <harald@redhat.de> 1.3.3
changelog:
  - fixed #85365
  - fixed glade file loading
  - more ipsec stuff
  - neat can use a "chrooted" environment now (-r)
  - .rpmsave will not be loaded
  - no interrupt/io settings for PNP cards
  - HIGIfied labels
  - double click for hardware and ipsec


author: Harald Hoyer <harald@redhat.de> 1.2.12-1
changelog:
  - wlan0 handling
  - splash screen bug fixed
  - improvements in HW list handling
  - isdncard handling #91607


author: Harald Hoyer <harald@redhat.de> 1.2.3-3
changelog:
  - Bugfix release for 9
  - fixed #85011, #85703, #85653, #84956, #83640, #68169, #86476, #78043, #77763


author: Trond Eivind Glomsrød <teg@redhat.com> 1.1.17-1
changelog:
  - Make it use the gnome help system, add yelp as a dependency (#71857)
  - Traceback fix: # 72581
  - translation updates


author: Trond Eivind Glomsrød <teg@redhat.com> 1.1.13-1
changelog:
  - Fixes to the traceback dialog (fix "save to floppy" (we don't do that),
    add i18n.)
  - Fix traceback with malformed /etc/hosts (#69320)
  - Fix dependencies (#69990)
  - Some minor userhelper fixes


author: Than Ngo <than@redhat.com> 1.1.3-1
changelog:
  - get_pixbuf: if no icon was not found, looks the icons
    in standard icon directory
  - bug fixes in wireless


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Turn off wireless. It doesn't work with all modes, all cards
   and you can't edit IP settings after the initial attempt


author: Harald Hoyer <harald@redhat.com> 0.9.6-1
changelog:
  - seperated gui from data layer
  - make .pyc ghost files
  - fixed profile/alias problem
  - modem probing only once


author: Than Ngo <than@redhat.com> 0.9.3-1
changelog:
  - fix internet-druid fails (bug #54192)
  - fix dial on demand problem from some ISDN Provider in German
  - don't trace back if length of Login name is 2 (bug #54322)


author: Than Ngo <than@redhat.com> 0.8.2-1
changelog:
  - fix backtrace bug in CIPE
  - fix traceback bug if self.device.Dialup is None
  - if hardware is deleted, remove all devices used this hardware
  - de.po: fix bad translation


author: Phil Knirsch <phil@redhat.de> 0.8.0-2
changelog:
  - Fixed wrong option handling in /etc/modules.conf (#52853, #52923)
  - Fixed empty search entry in /etc/resolv.conf (#52926)
  - Fixed empty domain entry in /etc/resolv.conf (#52924)
  - Fixed ethernet hardware probing traceback (#52921)


author: Trond Eivind Glomsrød <teg@redhat.com> 0.7.4-1
changelog:
  - More bugfixes, among them #51929, #51991, #51721, #51722,
    partial #52044, #51720.
  - Updated translations, include more languages


author: Phil Knirsch <phil@redhat.de> 0.7-1
changelog:
  - Added a lot of documentation
  - Final changes to the Modem druid dialog and code to look just like the
    hardware add dialog for modems.


author: Phil Knirsch <phil@redhat.de> 0.6.8-3
changelog:
  - Added the modem detection for the ModemDruid.
  - Added kudzu as requirement as it is needed for modem detection.
  - For compatibility still check for symlinks, too. Otherwise older setups will
    break.


author: Phil Knirsch <phil@redhat.de> 0.6.7-2
changelog:
  - Fixed various important bugzilla bugs
  - Added and implemented the add Hardware dialog.
  - Added a working Apply button.
  - Switched to using hardlinks instead of symlinks for config files.


author: Than Ngo <than@redhat.com>
changelog:
  - fix pap/chap Login name for T-online
  - fix InitStrings
  - use gettext function in NC_functions
  - fix loading DEFROUTE/PERSIST/DEMAND/IDLETIMEOUT for Modem dialup
  - don't backtrace if 'SetVolume' and 'Dial Command' are not defined


author: Phil Knirsch <phil@redhat.de> 0.6.1-2
changelog:
  - Fixed buggous removal of ifcfg-lo (#50478)
  - Fixed problems with modem volume in hardware dialog
  - Fixed missing /dev/modem for modem setup (#50673)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't run autogen.sh
  - Mark files in /etc as configuration files
  - Multiple fixes to automake files
  - Add Norwegian translation to desktop files
  - install into the configuration tool desktop directory


author: Than Ngo <than@redhat.com> 0.3.1-1
changelog:
  - obsolete isdn-config internet-config
  - requires consolehelper, alchemist
  - add icon and desktop file
  - use bzip2


author: Daiki Ueno <dueno@redhat.com> - 0.1.3-1
changelog:
  - move arch-independent data files to -common subpackage
  - remove unnecessary R: from -common and -data subpackages
  - add BR: python2-devel


author: Marek Kasik <mkasik@redhat.com> - 2.4.10-4
changelog:
  - Fix emboldening:
      - split out MSB function
      - fix integer overflows
      - fix broken emboldening at small sizes
      - clean up emboldening code and improve comments there
      - fortify emboldening code against egregious distortions
  - Resolves: #891457


author: Marek Kasik <mkasik@redhat.com> 2.4.5-2
changelog:
  - Add freetype-2.4.5-CVE-2011-0226.patch
      (Add better argument check for `callothersubr'.)
      - based on patches by Werner Lemberg,
        Alexei Podtelezhnikov and Matthias Drochner
  - Resolves: #723469


author: Marek Kasik <mkasik@redhat.com> 2.4.4-3
changelog:
  - Enable bytecode interpreter (#547532).
  - Fall back to autohinting if a TTF/OTF doesn't contain any bytecode.


author: Marek Kasik <mkasik@redhat.com> 2.4.3-2
changelog:
  - Add freetype-2.4.3-CVE-2010-3855.patch
      (Protect against invalid `runcnt' values.)
  - Resolves: #651764


author: Behdad Esfahbod <behdad@redhat.com> 2.3.11-1
changelog:
  - Update to 2.3.11.
  - Add freetype-2.3.11-more-demos.patch
  - New demo programs ftmemchk, ftpatchk, and fttimer


author: Behdad Esfahbod <besfahbo@redhat.com> 2.3.9-2
changelog:
  - Add Provides: freetype-bytecode and freetype-subpixel if built
    with those options.
  - Resolves: #155210


author: Behdad Esfahbod <besfahbo@redhat.com> 2.3.7-3
changelog:
  - Add full source URL to Source lines.
  - Add docs to main and devel package.
  - rpmlint is happy now.
  - Resolves: #225770


author: Behdad Esfahbod <besfahbo@redhat.com> 2.3.5-2
changelog:
  - Change spec file to permit enabling bytecode-interpreter and
    subpixel-rendering without editing spec file.
  - Resolves: 249986


author: Behdad Esfahbod <besfahbo@redhat.com> 2.3.0-1
changelog:
  - Update to 2.3.0.
  - Drop upstream patches.
  - Drop -fno-strict-aliasing, it should just work.
  - Fix typo in ftconfig.h generation.


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-16
changelog:
  - Backport binary-search fixes from HEAD
  - Add freetype-2.2.1-ttcmap.patch
  - Resolves: #208734

  - Fix rendering issue with some Asian fonts.
  - Add freetype-2.2.1-fix-get-orientation.patch
  - Resolves: #207261

  - Copy non-X demos even if not compiling with_xfree86.

  - Add freetype-2.2.1-zero-item-size.patch, to fix crasher.
  - Resolves #214048

  - Add X11_PATH=/usr to "make"s, to find modern X.
  - Resolves #212199


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-10
changelog:
  - Fix crasher https://bugs.freedesktop.org/show_bug.cgi?id=6841
  - Add freetype-2.2.1-memcpy-fix.patch


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-1
changelog:
  - Update to 2.2.1
  - Remove FreeType 1, to move to extras
  - Install new demos ftbench, ftchkwd, ftgamma, and ftvalid
  - Enable modules gxvalid and otvalid


author: Owen Taylor <otaylor@redhat.com> - 2.1.9-1
changelog:
  - Upgrade to 2.1.9
  - Since we are just using automake for aclocal, use it unversioned,
    instead of specifying 1.4.


author: Owen Taylor <otaylor@redhat.com> 2.1.7-4
changelog:
  - Add patch from freetype CVS to fix problem with eexec (#117743)
  - Add freetype-devel to buildrequires and -devel requires
    (Maxim Dzumanenko, #111108)


author: Mike A. Harris <mharris@redhat.com> 2.1.7-3
changelog:
  - Added -fno-strict-aliasing to CFLAGS and CXXFLAGS to try to fix SEGV and
    SIGILL crashes in mkfontscale which have been traced into freetype and seem
    to be caused by aliasing issues in freetype macros (#118021)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - allow compiling without the demos as that requires XFree86
    (this allows bootstrapping XFree86 on new archs)


author: Owen Taylor <otaylor@redhat.com> 2.1.4-1
changelog:
  - Version 2.1.4
  - Relibtoolize to get deplibs right for x86_64
  - Use autoconf-2.5x for freetype-1.4 to fix libtool-1.5 compat problem (#91781)
  - Relativize absolute symlinks to fix the -debuginfo package 
    (#83521, Mike Harris)


author: Elliot Lee <sopwith@redhat.com> 2.1.3-7
changelog:
  - Run libtoolize/aclocal/autoconf so that libtool knows to generate shared libraries 
    on ppc64.
  - Use _smp_mflags (for freetype 2.x only)


author: Owen Taylor <otaylor@redhat.com> 2.1.3-4
changelog:
  - Make FreeType robust against corrupt fonts with recursive composite 
    glyphs (#74782, James Antill)


author: Mike A. Harris <mharris@redhat.com> 2.1.3-2
changelog:
  - Update to freetype 2.1.3
  - Removed ttmkfdir sources and patches, as they have been moved from the
    freetype packaging to XFree86 packaging, and now to the ttmkfdir package
  - Removed patches that are now included in 2.1.3:
    freetype-2.1.1-primaryhints.patch, freetype-2.1.2-slighthint.patch,
    freetype-2.1.2-bluefuzz.patch, freetype-2.1.2-stdw.patch,
    freetype-2.1.2-transform.patch, freetype-2.1.2-autohint.patch,
    freetype-2.1.2-leftright.patch
  - Conditionalized inclusion of freetype 1.4 library.


author: Mike A. Harris <mharris@redhat.com> 2.1.2-10
changelog:
  - Attempted to fix lib64 issue in freetype-demos build with X11_LINKLIBS
  - Cleaned up various _foodir macros throughtout specfile
  - Removed with_ttmkfdir build option as it is way obsolete


author: Mike A. Harris <mharris@redhat.com> 2.0.8-2
changelog:
  - Updated to freetype 2.0.8, however docs and demos are stuck at 2.0.7
    on the freetype website.  Munged specfile to deal with the problem by using
    {oldversion} instead of version where appropriate.  <sigh>


author: Tim Powers <timp@redhat.com> 2.0.6-3
changelog:
  - bumping release so that we don't collide with another build of
    freetype, make sure to change the release requirement in the XFree86
    package


author: Mike A. Harris <mharris@redhat.com> 2.0.6-2
changelog:
  - Made ttmkfdir inclusion conditional, and set up a define to include
    ttmkfdir in RHL 7.x builds, since ttmkfdir is now moving to the new
    XFree86-font-utils package.


author: Elliot Lee <sopwith@redhat.com> 2.0.5-3
changelog:
  - Fix bug #56901 (ttmkfdir needed to list Unicode encoding when generating
    font list). (ttmkfdir-iso10646.patch)
  - Use _smp_mflags macro everywhere relevant. (freetype-pre1.4-make.patch)
  - Undo fix for #24253, assume compiler was fixed.


author: Mike A. Harris <mharris@redhat.com> 2.0.4-2
changelog:
  - Added new subpackage freetype-demos, added demos to build
  - Disabled ftdump, ftlint in utils package favoring the newer utils in
    demos package.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.0.3-4
changelog:
  - Add ft2build.h to -devel package, since it's included by all other
    freetype headers, the package is useless without it


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.3-3
changelog:
  - Change "Requires: freetype = name/ver" to "freetype = version/release",
    and move the requirements to the subpackages.


author: Mike A. Harris <mharris@redhat.com> 2.0.3-1
changelog:
  - Updated to Freetype 2.0.3, minor specfile tweaks.
  - Freetype2 docs are is in a separate tarball now. Integrated it.
  - Built in new environment.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - libtool is used to build libttf, so use libtool to link ttmkfdir with it
  - fixup a paths for a couple of missing docs


author: Preston Brown <pbrown@redhat.com>
changelog:
  - newer ttmkfdir that works better, moved ttmkfdir to /usr/bin from /usr/sbin
  - freetype utilities moved to subpkg, X dependency removed from main pkg
  - libttf.so symlink moved to devel pkg


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - call libtoolize to sanitize config.sub and get ARM support
  - dispoze of the patch (not necessary anymore)


author: Miro Hrončok <miro@hroncok.cz> - 1.00-6
changelog:
  - License file without URL
  - Added more BRs
  - PERL_INSTALL_ROOT changed to DESTDIR
  - Removed the deleting empty directories


author: Akira TAGOH <tagoh@redhat.com> - 2.24.10-2
changelog:
  - Add the backport patch from gtk-2-24 branch to allow fallback for immodules.
    This would solves the unexpected immodules selection. (#828764)


author: Richard Hughes <rhughes@redhat.com> - 2.19.5-2
changelog:
  - Apply a patch from upstream to remove two duplicate prototypes that
    breaks the build for many GTK projects.


author: Matthias Clasen <mclasen@redhat.com> - 2.18.3-21
changelog:
  - Fix refcounting issues in the filechooser that lead
    to crashes with device hotplug (gnome #600992)


author: Matthias Clasen <mclasen@redhat.com> - 2.15.2-4
changelog:
  - Split of an immodules subpackage (#444814)
  - Disable ia64 hack thats not needed in Fedora
  - Remove some .la files that crept in


author: Marek Kasik <mkasik@redhat.com> - 2.15.2-3
changelog:
  - modify default_printer.patch to show a network default printer
    in the case of no local default printer
  - Resolves: #478400


author: Matthias Clasen <mclasen@redhat.com> - 2.15.1-4
changelog:
  - Draw radio action proxies as radio menuitems
  - Fix issues with toolitem action proxies and overflow


author: Matthias Clasen <mclasen@redhat.com> - 2.14.4-4
changelog:
  - Reduce rpmlint warnings produced by the ia64 multilib hack
  - Fight unnecessary library dependencies


author: Alexander Larsson <alexl@redhat.com> - 2.14.4-3
changelog:
  - Manually check for fallback file icon since we're not
    always returning that from gio anymore (from upstream)


author: - Marek Kasik <mkasik@redhat.com> - 2.13.2-2
changelog:
  - Reworked correction of hostname of printer which is the
  - print job sent to.
  - Resolves: #248245, #449379


author: Matthias Clasen <mclasen@redhat.com> - 2.12.9-4
changelog:
  - Make sure we use the right icon size for all icons in the
    file chooser (Fix by Tomas Bzatek)
  - Improve the handling of auth dialogs in the file chooser (Tomas Bzatek)


author: Matthias Clasen <mclasen@redhat.com> - 2.12.1-5
changelog:
  - Fix a bug that prevents GtkBuilder-using apps (like totem)
    to run in some locales (like Turkish) (#348631)


author: Ray Strode <rstrode@redhat.com> - 2.11.6-8
changelog:
  - install dummy binary in libdir/gtk-2.0/immodules directory to
    aid rpm when doing ia64 multilib (bug 253726)


author: Matthias Clasen <mclasen@redhat.com> - 2.10.7-1
changelog:
  - Make gdk_pixbuf_loader_close() idempotent
  - Always emit the closed signal when the loader is closed


author: Matthias Clasen <mclasen@redhat.com> - 2.10.6-7
changelog:
  - Fix error handling in pixbuf loaders (#218755)
  - Fix clipping of mnemonic underlines (#218615)
  - Give accessible names to message dialogs (#215472)
  - Fix a crash in the handling of invalid icon themes (#218247)
  - Make the print dialog work when the 'BrowseShortNames Off' cups
    option is used (#217220)


author: Matthias Clasen <mclasen@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Drop upstreamed patches
  - Update the search patch
  - Require pkgconfig in the -devel package


author: Ray Strode <rstrode@redhat.com> - 2.10.1-2
changelog:
  - patch from Jonathan Matthew <jontahn@kaolin.wh9.net> to fix
    crash in GtkTreeModelFilter (upstream bug 346800)


author: Matthias Clasen <mclasen@redhat.com> - 2.9.0-4
changelog:
  - Bump required versions of GLib, Pango and cairo
  - Add conflicts to force updating theme engine packages


author: Christopher Aillon <caillon@redhat.com> 2.8.11-6
changelog:
  - Fix up jkeating's recent %changelog entry to match this spec's style
  - Make the devel package Require %{version}-%{release}


author: Matthias Clasen <mclasen@redhat.com> - 2.4.14-1
changelog:
  - Upgrade to 2.4.14
  - Remove the no longer needed pa.po patch
  - Adjust gtk+-2.4.7-update-counter.patch


author: Matthias Clasen <mclasen@redhat.com> - 2.4.13-5
changelog:
  - Include an upstream bugfix in the
    gtk+-2.4.9-treeview-activate.patch. This fixes
    a crasher bug (#137461)


author: Owen Taylor <otaylor@redhat.com> - 2.4.7-2.2
changelog:
  - Fix problem with infinite loop on bad BMP data (#130450,
    test BMP from Chris Evans, fix from Manish Singh)


author: Matthias Clasen <mclasen@redhat.com> - 2.4.1-3
changelog:
  - Don't install testgtk and testtext
  - Rename binaries to -32/-64 (#124478)
  - Move arch-dependent config files to /etc/gtk-2.0/$host (#124482)
  - Add wrappers for updating the arch-dependent config files


author: Mark McLoughlin <markmc@redhat.com> 2.3.4-1
changelog:
  - Update to 2.3.4
  - Remove the xft-prefs patch, its upstream now
  - Don't kill libtool's hardcode_libdir_flag_spec anymore


author: Owen Taylor <otaylor@redhat.com> 2.2.4-2.1
changelog:
  - Fix up tutorial in packaging (#90197), add FAQ
  - Back out change to make KP_Decimal interpretation dependent on locale
    (#101046)


author: Owen Taylor <otaylor@redhat.com> 2.2.2-2.1
changelog:
  - XFlush() rather than XSync() at the end of process_all_updates()
    (big remote X anaconda speedup)
  - Add patch to fix frequent Red Hat 9 crash
    http://bugzilla.gnome.org/show_bug.cgi?id=105745


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Fix postun to not try to run a script through ldconfig
  - Only remove the gtk.immodules and gdk-pixbuf.loaders files if uninstalling
    while not upgrading


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 2.1.3
  - remove TODO from doc, no longer exists
  - remove 64bit patch, now upstream
  - comment out scroll_to patch, jrb has to deal with this
  - remove keycode patch now upstream
  - remove usintl patch now upstream
  - remove imenvar patch, now upstream
  - remove xftprefs patch now upstream
  - remove xftdraw patch now upstream
  - remove installdir patch (no longer applies) and do "makeinstall RUN_QUERY_IMMODULES_TEST=false"
  - remove extranotify patch, now upstream
  - add gdk-pixbuf-query-loaders to file list
  - remove gdk-pixbuf.loaders and gtk.immodules in postun as they are
    not owned by the package (these should probably live in /var since they
    aren't config files and we overwrite them all the time)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fix a memory leak in xftprefs.patch
  - Fix extra settings notifies on startup that were causing significant
    performance problems as fonts were reloaded.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fixes to GtkIMContextSimple compose table for us-intl keyboards
    (#70995, Alexandre Oliva)
  - Fix problem with keycodes passed to GtkIMContextXIM


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Remove fixed-ltmain.sh, no longer needed
  - Fix bug with GTK_IM_MODULE environment variable
  - Remove profile.d entries setting GDK_USE_XFT, since we now default to it on
  - Backport patch from CVS HEAD to get Xft to work on non-RENDER XServers
  - Version 2.0.6


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add reference docs to -devel package (#61184)
  - Use GTK2_RC_FILES, not GTK_RC_FILES, since KDE points GTK_RC_FILES
    to gtk-1.2 ~/.gtkrc


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Version 1.3.11
  - check atk/pango versions explicitly prior to build,
    so that --nodeps tricks don't result in bad binary RPMs


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - PreReq specific pango and atk versions (#49434)
  - Don't package gtk.immodules (#49584)
  - Added BuildPrereq for libtiff-devel, libjpeg-devel, libpng-devel (#49495)
  - Configure with --disable-gtk-doc (#48987)
  - Package libgdk_pixbuf_xlib (#47753)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Version 1.3.1
  - move back to /usr
  - Remove gtk-config.1 manpage from build since
    it conflicts with gtk+-devel. When we go to
    gtk+ gtk+1.2 setup, we should add it back


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Set the charset explicitely for the default font to avoid
    problems with XFree86-4.0 where the default charset is
    iso10646-1, not iso8859-1.
  - Fix problems with size requisitions for scrolled windows
    that was causing looping. (RH bug #7997)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Explicitely set the foreground of the tooltips to black
    to avoid bad interactions with themes that set a
    light foreground color.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Upgrade to real 1.2.5pre2
  - Changed name so upgrade to 1.2.5 will work :-(
  - Add extra gtkrc files
  - Add examples and English language tutorial to -devel package


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Update for GTK+-1.2.3
  - Patches that will be in GTK+-1.2.4
  - Patch to keep GTK+ from coredumping on X IO errors
  - Patch to improve compatilibity with GTK-1.2.1 (allow
    event mask to be set on realized widgets)


author: Marc Ewing <marc@redhat.com>
changelog:
  - Added aclocal and bin stuff to file list.
  - Added -k to the SMP make line.
  - Added lib/glib to file list.


author: Marc Ewing <marc@redhat.com>
changelog:
  - Reworked to integrate into gtk+ source tree
  - Truncated ChangeLog.  Previous Authors:
    Trond Eivind Glomsrod <teg@pvv.ntnu.no>
    Michael K. Johnson <johnsonm@redhat.com>
    Otto Hammersmith <otto@redhat.com>


author: Pavel Raiskup <praiskup@redhat.com> - 0.10-3.git683dd
changelog:
  - remove downstream patches for now - I'll reapply again if it becomes upstream
  - package the latest git version


author: Pavel Raiskup <praiskup@redhat.com> - 0.10-1.git89df2
changelog:
  - changes for problems spotted/fixed by Scott Tsai in merge-review bug:
  - important change - move git revision behind the release number
  - reflect that ^^^ change in changelog
  - remove statement disabling debuginfo (it is not needed)


author: Pavel Raiskup <praiskup@redhat.com> - 0.10git69cd7-1
changelog:
  - apply downstream patches to reflect https://github.com/praiskup/pybugz
    it allows hierarchy of configuration files and a bit better error handling
  - update URL as upstream is now on github
  - make the RedHat bugzilla default, s/bugz/pybugz/ in manpage
  - fedora-review fixes: s/define/global/, BR python2-devel, noreplace
  - mention in documentation the ~/.bugzrc file
  - switch the binary name to 'bugz' again, it would mislead users (see merge
    review bug comment)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7.1-8
changelog:
  - skip stripping some compiler flags (undocumented)
  - %files: track files closer (lib soname in particular)
  - -devel: avoid dep on cmake 
  - %check: +make test, pkgconfig check


author: Eli Wapniarski <eli@orbsky.homelinux.org> 0.6.3-5
changelog:
  -0.6.3
  - Moved Doxygen docs to the development package.
  - Corrected placement of the cmake project file (Thanks Orcan)
  - Fixed the running of the build tests
  - Corrected column length of the descriptions
  - Changed description of the devlepment package


author: Eli Wapniarski <eli@orbsky.homelinux.org> 0.6.3-3
changelog:
  -0.6.3
  - Fixed placment of library files
  - Activated build tests
  - Corrected ownership of include directory
  - Corrected dependacies
  - Added doxygen documentation
  - Fixed reported version in the changelogs


author: Eli Wapniarski <eli@orbsky.homelinux.org> 0.6.3-2
changelog:
  -0.6.3
  - Split off development libraries to its own package
  - Modified licensing in spec file to reflect GPL2 code though docs state that qjson
  -   licensed under LPGL
  - Uncommeted and corrected sed line in this spec file


author: Miro Hrončok <miro@hroncok.cz> - 1.04-3
changelog:
  - PERL_INSTALL_ROOT changed to DESTDIR
  - Using dos2unix instead of sed
  - Added some remvoed BRs back
  - Do not filter shared C libs (noarch)


author: Steven Hardy <shardy@redhat.com> - 0.7.2-0.1.bzr809
changelog:
  - Rebased against upstream rev 809, fixes several F18 related issues
  - Added dependency on python-requests


author: Garrett Holmstrom <gholms@fedoraproject.org> - 0.7.1-1
changelog:
  - Rebased against version 0.7.1
  - Fixed broken sudoers file generation
  - Fixed "resize_root: noblock" [LP:1080985]


author: Garrett Holmstrom <gholms@fedoraproject.org> - 0.7.0-0.2.bzr659
changelog:
  - Rebased against upstream rev 659
  - Fixed hostname persistence
  - Fixed ssh key printing
  - Fixed sudoers file permissions


author: Garrett Holmstrom <gholms@fedoraproject.org> - 0.6.3-0.5.bzr532
changelog:
  - Use a FQDN (instance-data.) for instance data URL fallback [RH:850916 LP:1040200]
  - Shut off systemd timeouts [RH:836269]
  - Send output to the console [RH:854654]


author: Garrett Holmstrom <gholms@fedoraproject.org> - 0.6.2-0.6.bzr457
changelog:
  - Consolidated selinux file context patches
  - Fixed cloud-init.service dependencies
  - Updated sshkeytypes patch
  - Dealt with differences from Ubuntu's sshd


author: Garrett Holmstrom <gholms@fedoraproject.org> - 0.6.2-0.3.bzr450
changelog:
  - Fixed logfile permission checking
  - Fixed SSH key generation
  - Fixed a bad method call in FQDN-guessing [LP:857891]
  - Updated localefile patch
  - Disabled the grub_dpkg module
  - Fixed failures due to empty script dirs [LP:857926]


author: Vinzenz Feenstra <evilissimo@gmail.com> - 0.3.9-1
changelog:
  - Updated to upstream vsqlite++-0.3.9
  - Removing now obsolete ./autogen.sh call in prep
  - Remove of unnecessary BuildRequires automake and autoconf
  - Upstream renamed Changelog to ChangeLog - reflected changes
  - Upstream renamed LICENSE to COPYING - reflected changes


author: Vinzenz Feenstra <evilissimo@gmail.com> - 0.3.7-2
changelog:
  - Fix for %description spelling 'ibrary' => 'library'
  - Fix for unused libm dependency
  - Include Changelog, README and LICENSE to devel
  - Removed TODO, VERSION
  - Removed duplicated lines in the install sectin
  - New doc sub package for the html documentation and code example
  - Removed static package
  - Removed unnecessary ldconfig call on devel package
  - One BuildRequires entry per line


author: Matthew Barnes <mbarnes@redhat.com> - 3.23.5-1.fc10
changelog:
  - Update to 3.23.5
  - Remove patch for GNOME bug #538703 (fixed upstream).
  - Remove patch for GNOME bug #539289 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 3.23.4-2.fc10
changelog:
  - Add patch for GNOME bug #538703 (load dictionaries on-demand).
  - Add patch for GNOME bug #539289 (stop using GtkType already!).


author: Matthew Barnes <mbarnes@redhat.com> - 3.17.90-2.fc9
changelog:
  - Remove patch for Ximian bug #50052 / GNOME bug #250052 (fixed upstream).
  - Remove patch for Ximian bug #65670 / GNOME bug #265670 (fixed upstream).
  - Remove patch for Ximian bug #66206 / GNOME bug #266206 (obsolete?).


author: Milan Crha <mcrha@redhat.com> - 3.15.91-1.fc8
changelog:
  - Update to 3.15.91
  - Remove patch for Red Hat bug #129212/GNOME bug #262907 (fixed upstream).
  - Remove patch for GNOME bug #446894 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 3.13.91-1.fc7
changelog:
  - Update to 3.13.91
  - Add flag to disable deprecated Pango symbols.
  - Remove patch for GNOME bug #394182 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 3.13.4-2.fc7
changelog:
  - Add patch for GNOME bug #394182 (code cleanup).
  - Remove patch for GNOME bug #363036 (superseded).


author: Matthew Barnes <mbarnes@redhat.com> - 3.13.1-2.fc7
changelog:
  - Add patch for Gnome.org bug #363036 (so long, compiler warnings).
  - Remove patch for Gnome.org bug #360619 (superseded).


author: Matthew Barnes <mbarnes@redhat.com> - 3.12.1-1.fc7
changelog:
  - Update to 3.12.1
  - Use stricter build settings.
  - Add patch for Gnome.org bug #360619 ("incompatible pointer type" warnings).


author: David Malcolm <dmalcolm@redhat.com> - 3.8.1-2
changelog:
  - Remove static libraries; rewrite specfile to be more explicit about the
    package payload (#172883)


author: David Malcolm <dmalcolm@redhat.com> - 3.7.5-3
changelog:
  - Added patch to use pango for cursor navigation and deletion, fixing problems
    with indic scripts (#129212)


author: David Malcolm <dmalcolm@redhat.com> - 3.5.6-2
changelog:
  - Changed deprecated "Copyright" directive into a "License" directive
  - License directive now reads "LGPL/GPL", rather than "LGPL", reflecting comment in README file


author: David Malcolm <dmalcolm@redhat.com> - 3.5.4-1
changelog:
  - Upgrade to 3.5.4
  - Update gtkhtml_major from 3.1 to 3.6 to locate translations
  - Temporarily remove IM patch


author: Jeremy Katz <katzj@redhat.com> 1.1.8-1
changelog:
  - 1.1.8
  - disable tagoh's patch for now.  it's not applied upstream and ends up 
    backing out some translation changes


author: Akira TAGOH <tagoh@redhat.com> 1.1.7-4
changelog:
  - gtkhtml-1.1.7-fixfont.patch: applied to allow fontset by default.
  - gtkhtml-po.tar.bz2: to changes default display/print fonts for CJK.
    perhaps it should be removed when the upstream will releases the next version.
  - gtkhtml-1.1.7-domain.patch: define GNOME_EXPLICIT_TRANSLATION_DOMAIN as gtkhtml-1.1.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.0-19
changelog:
  - Fix license tag to GPLv2+ as GPL3 (only in file COPYING) had been
    added only temporarily for 1.0-alpha1.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.0-17
changelog:
  - Complete previous rebuild that failed unexpectedly because html docdir in
    buildroot had not been created (Rawhide only). Now create it explicitly
    at beginning of %install.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.0-13
changelog:
  - Cherry-pick a few commits (from Vladimir Nadvornik, Klaus Ethgen
    and Vladislav Naumov). With the modified filelist_sort_compare_filedata
    method, Geeqie passes another stress test I've created in order
    to track down rare file_data_unref crashes.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.0-9
changelog:
  - Patch filedata.c check_case_insensitive_ext to accept the first
    tested file name ext and not accept multiple combinations due to
    case-insensitive fs.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.0-8.test1
changelog:
  - Patch filedata.c check_sidecars to avoid adding a file as its own
    sidecar. Case-insensitive sidecar file name generation may not be
    enough if a fs stat is used in conjunction with a case-insensitive fs.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.0-8
changelog:
  - Fix file cache NULL pointer crash in exif-common.c (#679256).
  - Patch and build with large file support.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.0-2
changelog:
  - require exiv2, ImageMagick, fbida, ufraw, zenity for plug-in scripts
  - BR gnome-doc-utils for HTML documentation (and "Help > Contents" menu)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.0-0.13.alpha3
changelog:
  - ignore .helpdir/.htmldir values in geeqierc to fix "Help"
  - add --enable-lirc again to build with LIRC


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.0-0.11.alpha2.1341svn
changelog:
  - update to svn 1341 for pre-alpha3 testing (image metadata features)
  - drop obsolete patches remote-blank and float-layout


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.0-0.4.alpha1
changelog:
  - scriptlets: run update-desktop-database without path
  - drop dependency on desktop-file-utils
  - drop ChangeLog file as it's too low-level


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.0-0.3.alpha1
changelog:
  - package GQview fork "geeqie 1.0alpha1" based on Fedora gqview.spec
  - BR lcms-devel exiv2-devel
  - update -desktop and -editors patch
  - update spec file with more dir macros


author: Adam Tkac <atkac redhat com> - 2.3.1-2
changelog:
  - jpegtran subpkg: require /usr/bin/jpegtran instead of libjpeg to be compatible
    with both libjpeg and libjpeg-turbo


author: Jon Ciesla <limb@jcomserv.net> - 2.3-9
changelog:
  - Add rewrite dep for httpauth, BZ 498061.
  - Adopt rdieter's symlink handling suggestions from rel-eng #1674.


author: Jon Ciesla <limb@jcomserv.net> - 2.3-7
changelog:
  - Drop all jars and remote, uploadapplet and slideshowapplet modules
  - to satisfy legal requirements, as source build would be
  - highly laborious and functionality is not critical.
  - See BZ464566 for details.


author: Jon Ciesla <limb@jcomserv.net> - 2.3-5
changelog:
  - Remove .jar files and build from source BZ464566.
  - Modify source to remove two non-redistutable .jar files.
  - Dropped panorama module as a result.
  - Fix symlink/dir issues, BZ 484240.


author: Jon Ciesla <limb@jcomserv.net> - 2.3-1
changelog:
  - Update to new upstream.
  - Rebased on tarball now that perl path issue is fixed.
  - Added buildroot wipe to start of install.
  - Escaped macros in changelog.


author: John Berninger <john at ncphotography dot com> - 2.2.4-3
changelog:
  - revert to SVN snapshot so that config-time integrity checks don't fail
  - remove embedded copy of smarty and use php-Smarty package


author: John Berninger <johnw at berningeronline dot net> - 2.2-0.3.svn20070506
changelog:
  - Mark the config.php symlink as a config file so that the config.php from 2.1
    installs doesn't get overwritten.  Yes, I did a Bad Thing.


author: John Berninger <johnw at berningeronline dot net> - 2.2-0.2.svn20070506
changelog:
  - Requires PHP 4.3.0, not 4.1.0
  - Add statement of support for DB2, MS SQL server
  - Don't hardcode /srv/gallery2 in install section, use the g2datadir variable
  - Up PHP memory chunk to 24M
  - Known issue - downloading modules and themes from within Gallery will not
    work with G2 being in /usr/share - esp if /usr is read-only.  Would need
    exception to Fedora packaging guidelines to enable this feature


author: John Berninger <johnw at berningeronline dot net> - 2.2-0.1.svn20070506
changelog:
  - Switch to upstream ver 2.2 base
  - Add digibug, dynamicalbum, ecard, flashvideo, httpauth, itemadd, keyalbum, mp3audio, multiroot, replica, webdav modules
  - Add ajaxian, carbon themes
  - Refactor login.txt and config.php references, update readme for same


author: John Berninger <johnw at berningeronline dot net> - 2.1-0.22.svn20060524
changelog:
  - Fix problem with config.php getting put into /usr/share/gallery2 - move it
    to /srv/gallery2 to avoid issues with a ro /usr partition


author: John Berninger <johnw at berningeronline dot net> - 2.1-0.21.svn20060524
changelog:
  - login.txt in /srv/gallery2, patch install/steps/AuthenticateStep.class to
    look there for it to avoid ugly errors that we shouldn't see.


author: John Berninger <johnw at berningeronline dot net> - 2.1-0.18.svn20060524
changelog:
  - Removed g2datadir patch, I think it was this patch causing the multisite
    installation errors
  - Changes installation dir from /var/www/gallery2 to /usr/share/gallery2 per
    updated packaging guidelines
  - Added README.fedora giving a brief explanation of how to set up databases


author: John Berninger <johnw at berningeronline dot net> - 2.1-0.16.svn20060524
changelog:
  - Trying to use %find_lang but builds fail.  Uploading for review / assistance
  - Switch name to svn (vs cvs)
  - Various corrections


author: John Berninger <johnw at berningeronline dot net> - 2.0-0.12.cvs20060303
changelog:
  - Removed gallery2 httpd conf file and htaccess file from tarball, added as 
    separate source files


author: John Berninger <johnw at berningeronline dot net> - 2.0-0.11.cvs20060303
changelog:
  - Update of CVS snapshot to remove potential vulnerabilities in released
    versions < 2.0.3
  - Removed upstream point release number from release tag since we're on the
    2.0 trunk, not a 2.0.2 or 2.0.3 branch.


author: John Berninger <johnw at berningeronline dot net> - 2.0.2-0.10cvs20060223
changelog:
  - Change install directory to /var/www/gallery2 versus /var/www/html/gallery2
  - Add an alias for the gallery2.conf file that goes into httpd/conf.d


author: John Berninger <johnw at berningeronline dot net> - 2.0.2-0.9cvs20060223
changelog:
  - Remove %post, requesting modifications to selinux-policy to handle security
    contexts - BZ 183140


author: John Berninger <johnw at berningeronline dot net> - 2.0.2-0.8cvs20060223
changelog:
  - Add a %post to check for the existence of /usr/bin/chcon, which signifies the
    presence of SELinux, and if it is found, change the security context of
    /srv/gallery2 appropriately.


author: John Berninger <johnw at berningeronline dot net> - 2.0.2-0.7cvs20060223
changelog:
  - Change to CVS tarball.
  - gallery2-gd requires php-gd
  - Added %build section to regen the MANIFEST file.
  - Added several CVS-only modules
  - Added /etc/httpd/conf.d/gallery2.conf config file
  - Added php memory limit override directive to .htaccess


author: John Berninger <johnw at berningeronline dot net> - 2.0.2-7
changelog:
  - Change "<=" to ">=" in several requires fields due to typos.
  - Modify perl source files in gallery2/lib/tools/ to look for /usr/bin/perl
    as opposed to /usr/local/bin/perl


author: John Berninger <johnw at berningeronline dot net> - 2.0.2-6
changelog:
  - break out the individual modules and themes, realigning provides and requires
  - use the -developer upstream tarball - no sense in having 50 different
    specfiles and SRPMS  when all we really need is subpackages.


author: John Berninger <johnw at berningeronline dot net> - 2.0.2-5
changelog:
  - -docs package only contains two files, a fact which I missed earlier, so
    there doesn't seem to be much sense in splitting it.  Remerged.


author: John Berninger <johnw at berningeronline dot net> - 2.0.2-4
changelog:
  - Split off documentation into a -docs package, modify payload listing,
    remove "listed twice" error, change %ghost %config into pure %ghost.
  - Release bump to -4


author: John Berninger <johnw at berningeronline dot net> - 2.0.2-2
changelog:
  - Added ghost config files - these are created during initial setup, they are
    not part of the tarball's payload.
  - Removed relocatability
  - Added '-q' to %setup line
  - Changed name to 'gallery2' (versus 'gallery')


author: Nicolas Chauvet <kwizart@gmail.com> - 0.9.3-5
changelog:
  - Fix registration error rhbz#882743
  - Fix missing symbol rhbz#885402 - patch from qais.yousef@imgtec.com
  - Fix paralle build - patch from qais.yousef@imgtec.com
  - Fix segfault - patch from qais.yousef@imgtec.com


author: Nicolas Chauvet <kwizart@gmail.com> - 0.9.3-2
changelog:
  - Fix build with -Werror - patch from Niels de Vos
  - Convert nodoc fix to a patch
  - Add BR doxygen
  - Enable make check and create a -test subpackage


author: Marc-Andre Lureau
changelog:
  - copy&pasted some good practices from some other .spec.in
  - changed components directory
  - remove unnecessary plugins .la and .a files
  - untested


author: Juan Orti Alcaine <j.orti.alcaine@gmail.com> - 1.2-21
changelog:
  - Fix policycoreutils-python dependency
  - Add security measures in unit file: PrivateTmp, CapabilityBoundingSet,
    InaccessibleDirectories, ReadOnlyDirectories and DeviceAllow


author: Juan Orti Alcaine <j.orti.alcaine@gmail.com> - 1.2-16
changelog:
  - Add documentation to systemd service file
  - Define variable as global
  - Remove unneeded BuildRequires


author: pcpa <paulo.cesar.pereira.de.andrade@gmail.com> - 20120428-1
changelog:
  - Update to latest upstream release.
  - Rework package build that now uses autotools instead of hand made Makefiles.


author: Jerry James <loganjerry@gmail.com> - 20100711-1
changelog:
  - New upstream version
  - Drop unnecessary elements of the spec file (BuildRoot, clean script, etc.)
  - Convert previous patches into sed expressions
  - Add compiler warning elimination patch
  - Eliminate unused direct shared library dependencies
  - Fix the FSF's address to make rpmlint shut up
  - Add documentation to -devel


author: Conrad Meyer <konrad@tylerc.org> - 20080310-3.p7
changelog:
  - Move libraries back to _libdir proper and add main package.
  - Added check section (thanks Michael Schwendt) commented out because
    it doesn't pass right now.
  - Add a versioned SONAME.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.99-3
changelog:
  - Don't import Image directly and import PIL instead for
    F-19 Pillow conversion
    Patch from Toshio Kuratomi <a.badger@gmail.com>
    (bug 895288)


author: Bojan Smojver <bojan@rexursive.com> - 0.6.0-0.5
changelog:
  - bind xrdp-sesman.service to xrdp.service, so that restarts work
  - do not use forking style, but run services in the foreground instead
  - dispense with ExecStop, systemd will do that for us


author: Bojan Smojver <bojan@rexursive.com> - 0.6.0-0.3
changelog:
  - also attempt to restart xrdp-sesman.service (just xrdp.service won't do it)
  - stop xrdp-sesman.service when not needed by xrdp.service


author: Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 0.5.0-2.20090811cvs
changelog:
  - changes from BZ#516364 comment 2 from Mamoru Tasaka
  - changed license to "GPLv2+ with exceptions"
  - dropped -libs subpackage
  - use cvs version
  - remove a patch and use sed instead
  - remove attr's


author: Andrew Wnuk <awnuk@redhat.com> 9.0.9-1
changelog:
  - 'dogtag-pki-ca-theme'
  -      Bugzilla Bug #737423 - Ability to view migrated policy requests
         is very limited. (awnuk)
  - 'dogtag-pki-common-theme'
  - 'dogtag-pki-console-theme'
  - 'dogtag-pki-kra-theme'
  - 'dogtag-pki-ocsp-theme'
  - 'dogtag-pki-ra-theme'
  - 'dogtag-pki-tks-theme'
  - 'dogtag-pki-tps-theme'
  -      Bugzilla Bug #737184 - TPS UI display admin user name as
         "undefined TUS Administrator". (awnuk)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.8-1
changelog:
  - 'dogtag-pki-ca-theme'
  - 'dogtag-pki-common-theme'
  - 'dogtag-pki-console-theme'
  -      Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .
  - 'dogtag-pki-kra-theme'
  - 'dogtag-pki-ocsp-theme'
  - 'dogtag-pki-ra-theme'
  - 'dogtag-pki-tks-theme'
  - 'dogtag-pki-tps-theme'


author: Ade Lee <alee@redhat.com> 9.0.7-1
changelog:
  - 'dogtag-pki-ca-theme'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW
  - 'dogtag-pki-common-theme'
  - 'dogtag-pki-console-theme'
  - 'dogtag-pki-kra-theme'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW
  - 'dogtag-pki-ocsp-theme'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW
  - 'dogtag-pki-ra-theme'
  - 'dogtag-pki-tks-theme'
  -      Bugzilla Bug #712931 - CS requires too many ports
         to be open in the FW
  - 'dogtag-pki-tps-theme'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.6-1
changelog:
  - 'dogtag-pki-ca-theme'
  -      Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
         populated in the CA signedAudit messages (alee)
  -      Bugzilla Bug #694143 - CA Agent not returning specified request (awnuk)
  -      Bugzilla Bug #704351 - remove help buttons in agent and ee UI in all
         subsystems (alee)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'dogtag-pki-common-theme'
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'dogtag-pki-console-theme'
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'dogtag-pki-kra-theme'
  -      Bugzilla Bug #694143 - CA Agent not returning specified request (awnuk)
  -      Bugzilla Bug #704351 - remove help buttons in agent and ee UI in all
         subsystems (alee)
  -      Bugzilla Bug #714068 - KRA: remove monitor servlet from kra (alee)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'dogtag-pki-ocsp-theme'
  -      Bugzilla Bug #704351 - remove help buttons in agent and ee UI in all
         subsystems (alee)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'dogtag-pki-ra-theme'
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'dogtag-pki-tks-theme'
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)
  - 'dogtag-pki-tps-theme'
  -      Bugzilla Bug #491008 - Security Officer: Format Card, Set Home URL and
         Format SO card has 'home phone URL' (jmagne)
  -      Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.5-1
changelog:
  - 'dogtag-pki-ca-theme'
  -     Bugzilla Bug #695015 - Serial No. of a revoked certificate is not
        populated in the CA signedAudit messages
  -     Bugzilla Bug #694143 - CA Agent not returning specified request
  - 'dogtag-pki-common-theme'
  - 'dogtag-pki-console-theme'
  - 'dogtag-pki-kra-theme'
  -     Bugzilla Bug #694143 - CA Agent not returning specified request
  - 'dogtag-pki-ocsp-theme'
  - 'dogtag-pki-ra-theme'
  - 'dogtag-pki-tks-theme'
  - 'dogtag-pki-tps-theme'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.4-1
changelog:
  - Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta)
  - 'dogtag-pki-ca-theme'
  - 'dogtag-pki-common-theme'
  - 'dogtag-pki-console-theme'
  - 'dogtag-pki-kra-theme'
  - 'dogtag-pki-ocsp-theme'
  - 'dogtag-pki-ra-theme'
  - 'dogtag-pki-tks-theme'
  - 'dogtag-pki-tps-theme'
  -     Bugzilla Bug #691447 - TPS UI Admin tab 'Add new token' opens a
        page with text 'Agent operations: Add new tokens'.
  -     Bugzilla Bug #691867 - add ldaps support through perLDAP


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-1
changelog:
  - Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta)
  - 'dogtag-pki-ca-theme'
  - 'dogtag-pki-common-theme'
  -     Bugzilla Bug #683581 - CA configuration with ECC(Default
        EC curve-nistp521) CA fails with 'signing operation failed'
  - 'dogtag-pki-console-theme'
  - 'dogtag-pki-kra-theme'
  - 'dogtag-pki-ocsp-theme'
  - 'dogtag-pki-ra-theme'
  - 'dogtag-pki-tks-theme'
  - 'dogtag-pki-tps-theme'
  -     Bugzilla Bug #684259 - wrong group used for tps operators


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.2-1
changelog:
  - Bugzilla Bug #688763 - Rebase updated Dogtag Packages for Fedora 15 (alpha)
  - Bugzilla Bug #676421 - CC: Remove unused TPS interface calls and add
    audit logging
  - Bugzilla Bug #606944 - Convert TPS to use ldap utilities and API from
    OpenLDAP instead of the Mozldap
  - Bugzilla Bug #678142 - Flakey JAR packaging encountered on Fedora 15
    when using Mock


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-1
changelog:
  - Bugzilla Bug #606944 - Convert TPS to use ldap utilities and API from
    OpenLDAP instead of the Mozldap


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.0-3
changelog:
  - Bugzilla Bug #671030 - Review Request: dogtag-pki-theme - Certificate
    System, Dogtag PKI Theme Components
  -    Augmented overview description.
  -    Isolated and corrected EPEL information
  -    Added comment regarding '/usr/share/pki' file ownership
  - 'dogtag-pki-common-theme'
  -     Bugzilla Bug #671058 - ipa2 - ipa-server-install fails on pkisilent -
        xml parsing string -- ?
  - 'dogtag-pki-ca-theme'
  -     Bugzilla Bug #564207 - Searches for completed requests in the agent
        interface returns zero entries


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.0-2
changelog:
  - Bugzilla Bug #671030 - Review Request: dogtag-pki-theme - Certificate
    System, Dogtag PKI Theme Components
  -     Added 'java-devel' and 'jpackage' build requirements
  -     Added 'java' runtime requirement to 'dogtag-pki-console-theme'
  -     Added file mode change to installation section
  -     Deleted explicit file mode change from files inventory section


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.0-1
changelog:
  - Updated Dogtag 1.3.x --> Dogtag 2.0.0 --> Dogtag 9.0.0
  - 'dogtag-pki-ca-theme' (formerly 'dogtag-pki-ca-ui')
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on
        ECC curve names (not on key sizes).
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets
        as expected
  - 'dogtag-pki-common-theme' (formerly 'dogtag-pki-common-ui')
  -     Bugzilla Bug #630126 - clone installation wizard basedn for internal
        db should not be changeable
  -     Bugzilla Bug #533529 - rhcs80 web wizard - broken login page when
        using valid pin
  -     Bugzilla Bug #223336 - ECC: unable to clone a ECC CA
  -     Bugzilla Bug #528249 - rhcs80 - web pages, css -moz-opacity deprecated
  -     Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection
        of signature algorithm; and for ECC curves
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets
        as expected
  - 'dogtag-pki-console-theme' (formerly 'dogtag-pki-console-ui')
  -     Bugzilla Bug #607380 - CC: Make sure Java Console can configure all
        security relevant config items
  -     Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple
        Certificates from the Same Request
  -     Bugzilla Bug #451874 - RFE - Java console - Certificate Wizard missing
        e.c. support
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #643206 - New CMake based build system for Dogtag
  -     Bugzilla Bug #656733 - Standardize jar install location and jar names
  - 'dogtag-pki-kra-theme' (formerly 'dogtag-pki-kra-ui')
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets
        as expected
  - 'dogtag-pki-ocsp-theme' (formerly 'dogtag-pki-ocsp-ui')
  -     Bugzilla Bug #630121 - OCSP responder lacking option to delete or
        disable a CA that it serves
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets
        as expected
  - 'dogtag-pki-ra-theme' (formerly 'dogtag-pki-ra-ui')
  -     Bugzilla Bug #533529 - rhcs80 web wizard - broken login page when
        using valid pin
  -     Bugzilla Bug #528249 - rhcs80 - web pages, css -moz-opacity deprecated
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  - 'dogtag-pki-tks-theme' (formerly 'dogtag-pki-tks-ui')
  -     Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port
        fowarding for agent services
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface
  -     Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets
        as expected
  - 'dogtag-pki-tps-theme' (formerly 'dogtag-pki-tps-ui')
  -     Bugzilla Bug #607373 - add self test framework to TPS subsytem
  -     Bugzilla Bug #607374 - add self test to TPS self test framework
  -     Bugzilla Bug #624847 - Installed TPS cannot be started to be configured.
  -     Bugzilla Bug #630018 - Delete button missing from Edit Profile page.
  -     Bugzilla Bug #609331 - Should not be able to manually change the status
        on a token marked as permanently lost or destroyed - fix confirmation
        page
  -     Bugzilla Bug #533529 - rhcs80 web wizard - broken login page when
        using valid pin
  -     Bugzilla Bug #642692 - TPS UI Admin tab: Remove 'Submit For Approval'
        greyed out button from the subsystem connection edit page.
  -     Bugzilla Bug #646545 - TPS Agent tab: displays approve list parameter
        with last character chopped.
  -     Bugzilla Bug #528249 - rhcs80 - web pages, css -moz-opacity deprecated
  -     Bugzilla Bug #532724 - Feature: ESC Security officer work station should
        display % of operation complete for format SO card
  -     Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI
        interface


author: Ralph Bean <rbean@redhat.com> - 1.2.1-3
changelog:
  - Removed unreferenced %global pypiname.
  - Changed %check invocation from "nosetests" to "python setup.py test"
  - Added python3 support.


author: Ralph Bean <rbean@redhat.com> - 1.2.1-1
changelog:
  - Fork from python-webob1.0 for forward-compat python-webob1.2.
  - Some modernization of the spec file.


author: Ricky Zhou <ricky@fedoraproject.org> 0.9.2-1
changelog:
  - Upstream released new version.
  - Rename to python-webob, as mentioned in the Python package naming
    guidelines.
  - Clean up spec.
  - Add %check section.


author: Mark McKinstry <mmckinst@nexcess.net> 1.3.4-4.20100625
changelog:
  - only include examples once
  - include a '/' for examples documentation so its clear its a directory


author: Jan Vcelak <jvcelak@redhat.com> 1:1.2.0-0.7.beta2
changelog:
  - disable all Java features because of dependencies on some libraries
    which are unacceptable for Fedora (#849574)


author: Jan Vcelak <jvcelak@redhat.com> 1.2.0-0.5.beta1
changelog:
  - fix: remove bundled libraries (#813721)
    Java applet web interface was removed from the package
  - use java-1.7.0


author: Jan Vcelak <jvcelak@redhat.com> 1.2.0-0.1.beta1
changelog:
  - fix License field (missing licenses for JavaScript libraries)
  - fix pre-release to match Fedora Guidelines for pre-release


author: Jan Vcelak <jvcelak@redhat.com> 1.2.0_beta1-1
changelog:
  - rebase the package:
    + new AJAX web interface
    + support for plugins written in Java
  - removed all plugins, will be packaged separately due to diversion
    in version numbering


author: Jan Vcelak <jvcelak@redhat.com> 1.1.3-3
changelog:
  - add -DBOOST_FILESYSTEM_VERSION=2 flag to workaround incompatibility
    of rb_libtorrent with new libboost


author: Jef Spaleta <jspaleta AT fedoraproject DOT org> 0.99.4-2
changelog:
  - Move python-basemap-examples subpackage to python-basemap srpm 
  - Make it possible to install python-basemap-data without python-basemap


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-59
changelog:
  - Can not unshare IPC in sandbox, since it blows up Xephyr
  - Remove bogus error message sandbox about reseting setfsuid
  - Allow sandbox to mount on symboliclinked homedirs


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-56
changelog:
  - Back port lots of fixes from Rawhide
          * Cleanup python problems
  	* setfiles: estimate percent progress
  	* sandbox: use sepolicy to look for sandbox_t
  	* gui: switch to use sepolicy
  	* gui: sepolgen: use sepolicy to generate
  	* semanage: use sepolicy for boolean dictionary
  	* semanage: seobject verify policy types before allowing you to assign them.
  	* semanage: good error message is sepolgen python module missing
  	* restorecond: remove /etc/mtab from default list
  	* restorecond: Add /etc/udpatedb.conf to restorecond.conf
  	* sandbox: seunshare: do not reassign realloc value
  	* seunshare: do checking on setfsuid


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-55
changelog:
  - Update Translations
  - Fix handling of semanage generate --cgi -n MODULE PATHTO/CGI
  -   This fixes the spec file and script file getting wrong names for modules and types.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-53
changelog:
  - Update with Miroslav patch to handle role attributes
  - Update Translations
  - import sepolicy will only throw exception on missing policy iff selinux is enabled


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-52
changelog:
  - Update to latest patches from eparis/Upstream
  -    secon: add support for setrans color information in prompt output
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-51
changelog:
  - Update translations
  - Fix sepolicy booleans to handle autogenerated booleans descriptions
  - Cleanups of sepolicy manpage 
  - Fix crash on git_shell man page generation


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-50
changelog:
  - Update translations
  - update sepolicy manpage to generate fcontext equivalence data and to list 
  default file context paths.
  - Add ability to generate policy for confined admins and domains like puppet.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-46
changelog:
  - sepolicy transition was blowing up. Also cleanup output when only source is specified.
  - sepolicy generate should allow policy modules names that include - or _


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-45
changelog:
  - Apply patch from Miroslav to display proper range description in man pages g
  - Should print warning on missing default label when run in recusive mode iff 
  - Remove extra -R description, and fix recursive description


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-44
changelog:
  - Additional fixes for disabled SELinux Box
  - system-config-selinux no longer relies on lokkit for /etc/selinux/config


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-41
changelog:
  - Add --path as a parameter to sepolicy generate
  - Print warning message if program does not exists when generating policy, and do not attempt to run nm command
  - Fix sepolicy generate -T to not take an argument, and supress the help message
  - Since this is really just a testing tool


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-37
changelog:
  - Move sepogen python bindings back into policycoreutils-python out of -devel, since sepolicy is using the


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-27
changelog:
  - Only report restorecon warning for missing default label, if not running
  recusively
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-26
changelog:
  - Fix semanage booleans -l, move more boolean_dict handling into sepolicy
  - Update translations
  - Fixup sepolicy generate to discover /var/log, /var/run and /var/lib directories if they match the name
  - Fix kill function call should indicate signal_perms not kill capability
  - Error out cleanly in system-config-selinux, if it can not contact XServer


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-25
changelog:
  - Remove run_init, no longer needed with systemd.
  - Fix sepolicy generate to not include subdirs in generated fcontext file.  (mgrepl patch)


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-24
changelog:
  - Fix manpage to generate proper man pages for alternate policy,  
  basically allow me to build RHEL6 man pages on a Fedora 18 box, as long as 
  I pull the policy, policy.xml and file_contexts and file_contexts.homedir


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-19
changelog:
  - Change sepolicy python bindings to have python pick policy file, fixes weird memory problems in sepolicy network


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-16
changelog:
  - Add Miroslav Grepl patch to generate html man pages
  - Update Translations
  - Add option to sandbox to shred files before deleting


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-14
changelog:
  - Add role_allow to sepolicy.search python bindings, this allows us to remove last requirement for setools-cmdline in gui tools.
  - Fix man page generator.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-12
changelog:
  - Add missing spec.py from templates directory needed for sepolicy generate
  - Add /var/tmp as collection point for sandbox apps.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-10
changelog:
  - Update sepolicy generate with patch to create spec file and man page.
  - Patch initiated by Miroslav Grepl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-9
changelog:
  - Fix semanage to verify that types are appropriate for commands. 
    * Patch initiated by mgrepl
    * Fixes problem of specifying non file_types for fcontext, or not port_types for semanage port


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-8
changelog:
  - Fix typo in preunstall line for restorecond
  - Add mgrepl patch to consolidate file context generated by sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-7
changelog:
  - Fix manpage generation, missing import
  - Add equiv_dict to get samba booleans into smbd_selinux
  - Add proper translations for booleans and remove selinux.tbl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-3
changelog:
  - Allow fixfiles to specify -v, so they can get verbosity rather then progress.
  - Fix load_file Makefile to use SBINDIR rather then real OS.
  - Fix man pages in setfiles and restorecon to reflect what happens when you relabel the entire OS.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream 
  	* genhomedircon: manual page improvements
  	* setfiles/restorecon minor improvements
  	* run_init: If open_init_pty is not available then just use exec
  	* newrole: do not drop capabilities when newrole is run as
  	* restorecon: only update type by default
  	* scripts: Don't syslog setfiles changes on a fixfiles restore
  	* setfiles: do not syslog if no changes
  	* Disable user restorecond by default
  	* Make restorecon return 0 when a file has changed context
  	* setfiles: Fix process_glob error handling
  	* semanage: allow enable/disable under -m
  	* add .tx to gitignore
  	* translations: commit translations from Fedora community
  	* po: silence build process
  	* gui: Checking in policy to support polgengui and sepolgen.
  	* gui: polgen: search for systemd subpackage when generating policy
  	* gui: for exploring booleans
  	* gui: system-config-selinux gui
  	* Add Makefiles to support new gui code
  	* gui: remove lockdown wizard
  	* return equivalency records in fcontext customized
  	* semanage: option to not load new policy into kernel after
  	* sandbox: manpage update to describe standard types
  	* setsebool: -N should not reload policy on changes
  	* semodule: Add -N qualifier to no reload kernel policy
  	* gui: polgen: sort selinux types of user controls
  	* gui: polgen: follow symlinks and get the real path to
  	* gui: Fix missing error function
  	* setfiles: return errors when bad paths are given
  	* fixfiles: tell restorecon to ignore missing paths
  	* setsebool: error when setting multiple options
  	* semanage: use boolean subs.
  	* sandbox: Make sure Xephyr never listens on tcp ports
  	* sepolgen: return and output constraint violation information
  	* semanage: skip comments while reading external configuration files
  	* restorecond: relabel all mount runtime files in the restorecond example
  	* genhomedircon: dynamically create genhomedircon
  	* Allow returning of bastard matches
  	* sepolgen: return and output constraint violation information
  	* audit2allow: one role/type pair per line


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-6
changelog:
  - Change polgen to generate dbus apps as optional so they can compile on minimal policy system, patch from Miroslav Grepl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-4
changelog:
  - Fix restorecon to generate a better percentage of completion on restorecon -R /.
  - Have audit2allow look at the constaint violation and tell the user whether it 
  - is because of user,role or level


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream 
    - policycoreutils
  	* restorecond: wrong options should exit with non-zero error code
  	* restorecond: Add -h option to get usage command
  	* resorecond: user: fix fd leak
  	* mcstrans: add -f to run in foreground
  	* semanage: fix man page range and level defaults
  	* semanage: bash completion for modules should include -a,-m, -d
  	* semanage: manpage update for -e
  	* semanage: dontaudit off should work
  	* semanage: locallist option does not take an argument
  	* sepolgen: Make use of setools optional within sepolgen
     - sepolgen
  	* Make use of setools optional within sepolgen
  	* We need to support files that have a + in them


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-15
changelog:
  - Allow stream sock_files to be stored in /tmp and etc_rw_t directories by sepolgen
  - Trigger on selinux-policy needs to change to selinux-policy-devel
  - Update translations
  - Fix semanage dontaudit off/on exception


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-12
changelog:
  - Add -N qualifier to semanage, setsebool and semodule to allow you to update 
  - policy without reloading it into the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-6
changelog:
  - Rebuild to get latest libsepol which fixes the file_name transition problems
  - Update translations
  - Fix calls to close fd for restorecond


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream 
    - policycoreutils
  	* sandbox: do not propogate inside mounts outside
  	* sandbox: Removing sandbox init script, should no longer be necessary
  	* restorecond: Stop using deprecated interfaces for g_io
  	* semanage: proper auditting of user changes for LSPP
  	* semanage: audit message to show what record(s) and item(s) have chaged
  	* scripts: Update Makefiles to handle /usrmove
  	* mcstrans: Version should have been bumped on last check in
  	* seunshare: Only drop caps not the Bounding Set from seunshare
  	* Add bash-completion scripts for setsebool and semanage
  	* newrole: Use correct capng calls in newrole
  	* Fix infinite loop with inotify on 2.6.31 kernels
  	* fix ftbfs with hardening flags
  	* Only run setfiles if we found read-write filesystems to run it on
  	* update .po files
  	* remove empty po files
  	* do not fail to install if unable to make load_policy lnk file

     - sepolgen
  	* Fix dead links to www.nsa.gov/selinux
  	* audit.py Dont crash if empty data is passed to sepolgen
  	* do not use md5 when calculating hash signatures
  	* fix detection of policy loads


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-22
changelog:
  - Change to use new selinux_binary_policy_path()
  - Add systemd_passwd_agent_exec($1), and systemd_read_fifo_file_passwd_run($1) to templates for _admin interface


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-17
changelog:
  - Change semanage to produce proper audit records for Common Criteria
  - Cleanup packaging for usrmove


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-11
changelog:
  - restorecond fixes:
    Stop using depracated g_io interfaces
    Exit with non zero exit code if wrong options given
    Add -h option


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
changelog:
  - Fix the handling of namespaces in seunshare/sandbox.
  - Currently mounting of directories within sandbox is propogating to the 
  - parent namesspace.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  -Update to upstream
  - sepolgen
  	* better analysis of why things broke
  - policycoreutils
  	* Remove excess whitespace
  	* sandbox: Add back in . functions to sandbox.init script
  	* Fix Makefile to match other policycoreutils Makefiles
  	* semanage: drop unused translation getopt


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Upgrade to upstream
  	* sandbox: move sandbox.conf.5 to just sandbox.5
  	* po: Makefile use -p to preserve times to allow multilib simultatious installs
  	* of po files
  	* sandbox: Allow user to specify the DPI value for X in a sandbox
  	* sandbox: make sure the domain launching sandbox has at least 100 categories
  	* sandbox: do not try forever to find available category set
  	* sandbox: only complain if sandbox unable to launch
  	* sandbox: init script run twice is still successful
  	* semanage: print local and dristo equiv rules
  	* semanage: check file equivalence rules for conflict
  	* semanage: Make sure semanage fcontext -l -C prints even if local keys
  	* are not defined
  	* semanage: change src,dst to target,substitute for equivalency
  	* sestatus: Updated sestatus and man pages.
  	* Added SELinux config file man page.
  	* add clean target to man Makefile


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-7
changelog:
  - Fix dpi handling in sandbox 
  - Make sure semanage fcontext -l -C prints if only local equiv have changed


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-6
changelog:
  - Add listing of distribution equivalence class from semanage fcontext -l
  - Add checking to semanage fcontext -a to guarantee a file specification will not be masked by an equivalence


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-4
changelog:
  - sandbox init script should always return 0
  - sandbox command needs to check range of categories and report error if not big enough


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Upgrade to policycoreutils upstream
  	* sandbox: Maintain the LANG environment into the sandbox
  	* audit2allow: use audit2why internally
  	* fixfiles: label /root but not /var/lib/BackupPC
  	* semanage: update local boolean settings is dealing with localstore
  	* semanage: missing modify=True
  	* semanage: set modified correctly
  	* restorecond: make restorecond dbuss-able
  	* restorecon: Always check return code on asprintf
  	* restorecond: make restorecond -u exit when terminal closes
  	* sandbox: introduce package name and language stuff
  	* semodule_package: remove semodule_unpackage on clean
  	* fix sandbox Makefile to support DESTDIR
  	* semanage: Add -o description to the semanage man page
  	* make use of the new realpath_not_final function
  	* setfiles: close /proc/mounts file when finished
  	* semodule: Document semodule -p in man page
  	* setfiles: fix use before initialized
  	* restorecond: Add .local/share as a directory to watch
  - Upgrade to sepolgen upstream
  	* Ignore permissive qualifier if found in an interface
  	* Return name field in avc data


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-5
changelog:
  - A couple of minor coverity fixes for a potential leaked file descriptor
  - An an unchecked return code.
  - Add ~/.local/share/* to restorecond_user watches


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
      policycoreutils-2.1.6
  	* sepolgen-ifgen: new attr-helper does something
  	* audit2allow: use alternate policy file
  	* audit2allow: sepolgen-ifgen use the attr helper
  	* setfiles: switch from stat to stat64
  	* setfiles: Fix potential crash using dereferenced ftsent
  	* setfiles: do not wrap * output at 80 characters
  	* sandbox: add -Wall and -Werror to makefile
  	* sandbox: add sandbox cgroup support
  	* sandbox: rewrite /tmp handling
  	* sandbox: do not bind mount so much
  	* sandbox: add level based kill option
  	* sandbox: cntrl-c should kill entire process control group
  	* Create a new preserve_tunables flag in sepol_handle_t.
  	* semanage: show running and disk setting for booleans
  	* semanage: Dont print heading if no items selected
  	* sepolgen: audit2allow is mistakakenly not allowing valid module names
  	* semanage: Catch RuntimeErrors, that can be generated when SELinux is disabled
  	* More files to ignore
  	* tree: default make target to all not install
  	* sandbox: do not load unused generic init functions
      sepolgen-1.1.2
  	* src: sepolgen: add attribute storing infrastructure
  	* Change perm-map and add open to try to get better results on
  	* look for booleans that might solve problems
  	* sepolgen: audit2allow is mistakakenly not allowing valid module names
  	* tree: default make target to all not install


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-4
changelog:
  - Maintain the LANG environment Variable into the sandbox
  - Change restorecon/setfiles to only change type part of the context unless 
    -f qualifier is given


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  -Update to upstream
     * policycoreutils
  	* setfiles: Fix process_glob to handle error situations
  	* sandbox: Allow seunshare to run as root
  	* sandbox: trap sigterm to make sure sandbox
  	* sandbox: pass DPI from the desktop
  	* sandbox: seunshare: introduce helper spawn_command
  	* sandbox: seunshare: introduce new filesystem helpers
  	* sandbox: add -C option to not drop
  	* sandbox: split seunshare caps dropping
  	* sandbox: use dbus-launch
  	* sandbox: numerous simple updates to sandbox
  	* sandbox: do not require selinux context
  	* sandbox: Makefile: new man pages
  	* sandbox: rename dir to srcdir
  	* sandbox: allow users specify sandbox window size
  	* sandbox: check for paths up front
  	* sandbox: use defined values for paths rather
  	* sandbox: move seunshare globals to the top
  	* sandbox: whitespace fix
  	* semodule_package: Add semodule_unpackage executable
  	* setfiles: get rid of some stupid globals
  	* setfiles: move exclude_non_seclabel_mounts to a generic location
     * sepolgen
  	* refparser: include open among valid permissions
  	* refparser: add support for filename_trans rules


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  2.1.4 2011-08-17
  	* run_init: clarification of the usage in the
  	* semanage: fix usage header around booleans
  	* semanage: remove useless empty lines
  	* semanage: update man page with new examples
  	* semanage: update usage text
  	* semanage: introduce file context equivalencies
  	* semanage: enable and disable modules
  	* semanage: output all local modifications
  	* semanage: introduce extraction of local configuration
  	* semanage: cleanup error on invalid operation
  	* semanage: handle being called with no arguments
  	* semanage: return sooner to save CPU time
  	* semanage: surround getopt with try/except
  	* semanage: use define/raise instead of lots of
  	* semanage: some options are only valid for
  	* semanage: introduce better deleteall support
  	* semanage: do not allow spaces in file
  	* semanage: distinguish between builtin and local permissive
  	* semanage: centralized ip node handling
  	* setfiles: make the restore function exclude() non-static
  	* setfiles: use glob to handle ~ and
  	* fixfiles: do not hard code types
  	* fixfiles: stop trying to be smart about
  	* fixfiles: use new kernel seclabel option
  	* fixfiles: pipe everything to cat before sending
  	* fixfiles: introduce /etc/selinux/fixfiles_exclude_dirs
  	* semodule: support for alternative root paths

  2.1.3 2011-08-03
  	* semanage: fix indention
  	* semodule_package: fix man page typo
  	* semodule_expand: update man page with -a
  	* semanage: handle os errors
  	* semanage: fix traceback with bad options
  	* semanage: show usage on -h or --help
  	* semanage: introduce more deleteall options
  	* semanage: verify ports < 65536
  	* transaction into semanageRecords
  	* make get_handle a method of semanageRecords
  	* remove a needless blank line
  	* make process_one error if not initialized correctly
  	* fixfiles: correct usage for r_opts.rootpath
  	* put -p in help for restorecon and
  	* fixfiles: do not try to only label
  	* fixfiles clean up /var/run and /var/lib/debug
  	* fixfiles delete tmp sockets and pipes rather
  	* fixfile use find -delete instead of pipe
  	* chcat man page typo
  	* add man page for genhomedircon
  	* setfiles fix typo
  	* setsebool should inform users they need to
  	* setsebool typos
  	* open_init_tty man page typos
  	* Don't add user site directory to sys.path
  	* newrole retain CAP_SETPCAP

  2.1.2 2011-08-02
  	* seunshare: define _GNU_SOURCE earlier
  	* make ignore_enoent do something
  	* restorecond: first user logged in is not noticed
  	* Repo: update .gitignore

  2.1.1 2011-08-01
  	* Man page updates
  	* restorecon fix for bad inotify assumptions

  2.1.0 2011-07-27
  	* Release, minor version bump


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-18
changelog:
  - Change seunshare to send kill signals to the childs session. 
  - Also add signal handler to catch sigint, so if user enters ctrl-C sandbox will shutdown.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-17
changelog:
  - Add -k qualifier to seunshare to have it attempt to kill all processes with 
  the matching MCS label.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-16
changelog:
  - Add -C option to sandbox and seunshare to maintain capabilities, otherwise 
  the bounding set will be dropped.
  - Change --cgroups short name -c rather then -C for consistancy
  - Fix memory and fd leaks in seunshare


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-10
changelog:
  - Allow semodule to pick alternate root for selinux files
  - Add ~/.config/* to restorcond_user.conf, so restorecond will watch for mislabeled files in this directory.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-6
changelog:
  - Apply patches from Christoph A.
    * fix sandbox title 
    * stop xephyr from li
  - Also ignore errors on sandbox include of directory missing files


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-23
changelog:
  - Fix sepolgen to generate network polcy using generic_if and genric_node versus all_if and all_node


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-21
changelog:
  - change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_*
  - This will allow default sandboxes to work on NFS homedirs without allowing 
    access to homedir data


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-20
changelog:
  - Change sepolgen-ifgen to search all available policy files
  - Exit in restorecond if it can not find a UID in the passwd database


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-18
changelog:
  - put back in old handling of -T in sandbox command
  - Put back setsid in seunshare
  - Fix rsync to maintain times


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-16
changelog:
  - Require python-IPy for policycoreutils-python package
  - Fixes for sepologen 
    - Usage statement needs -n name
    - Names with _ are being prevented
    - dbus apps should get _chat interface


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-13
changelog:
  - Rewrite seunshare to make sure /tmp is mounted stickybit owned by root
  - Only allow names in polgengui that contain letters and numbers
  - Fix up node handling in semanage command
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-10
changelog:
  - Cleaup selinux-polgengui to be a little more modern, fix comments and use selected name
  - Cleanup chcat man page


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-3
changelog:
  - Polgengui raises the wrong type of exception.  #471078
  - Change semanage to not allow it to semanage module -D
  - Change setsebool to suggest run as root on failure


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-33
changelog:
  - Move /etc/pam.d/newrole in to polcicycoreutils-newrole
  - Additiona capability  checking in sepolgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-32
changelog:
  - Remove setuid flag and replace with file capabilities
  - Fix sandbox handling of files with spaces in them


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-20
changelog:
  - Tighten down seunshare to create /tmp dir with sticky bit and  MS_NODEV | MS_NOSUID | MS_NOEXEC;
  - Remove setsid on seunshare so ^c on sandbox will cause apps to exit
  - Add dbus-launch --exit-with-session so all processes launched within the sandbox exit with the sandbox
  - Clean up error handling so error will get sent back to sandbox tool


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-17
changelog:
  - Apply patch to restorecond from Chris Adams, which will cause restorecond 
  - to watch first user that logs in.


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-27
changelog:
  - Move genhomedircon.8 to same package as genhomedircon
  - Fix sandbox to pass unit test
  Resolves: #595796


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-23
changelog:
  - Fix seunshare translations
  - Fix seunshare to work on all arches
  - Fix icon for system-config-selinux
  Resolves: #595276


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-17
changelog:
  - Fix policy tool to have correct name in menus
  - Fix seunshare to handle /tmp being in ~/home
  - Fix saving of altered files
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-13
changelog:
  - Make semanage boolean work on disabled machines and during livecd xguest
  - Fix homedir and tmpdir handling in sandbox
  Resolves: #587263


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-7
changelog:
  - Fix crash when args are empty
  Resolves: #582542
  - Fix semange to exit on bad options
  - Fix semanage dontaudit man page section
  Resolves: #582533


author: Dan Walsh <dwalsh@redhat.com> 2.0.81-4
changelog:
  - Update to upstream - sepolgen
  	* Add since-last-boot option to audit2allow from Dan Walsh.
  	* Fix sepolgen output to match what Chris expects for upstream
  	  refpolicy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-14
changelog:
  - Add session capability to sandbox 
  - sandbox -SX -H ~/.homedir -t unconfined_t -l s0:c15 /etc/gdm/Xsession


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-1
changelog:
  - Update to upstream
  	* Remove non-working OUTFILE from fixfiles from Dan Walsh.
  	* Additional exception handling in chcat from Dan Walsh.

  	* fix sepolgen to read a "type 1403" msg as a policy load by Stephen
  	  Smalley <sds@tycho.nsa.gov>
  	* Add support for Xen ocontexts from Paul Nuzzi.


author: Dan Walsh <dwalsh@redhat.com> 2.0.77-1
changelog:
  - Update to upstream
  	* Fixed bug preventing semanage node -a from working
  	  from Chad Sellers
  	* Fixed bug preventing semanage fcontext -l from working
  	  from Chad Sellers
  - Change semanage to use unicode


author: Dan Walsh <dwalsh@redhat.com> 2.0.76-1
changelog:
  - Update to upstream
  	* Remove setrans management from semanage, as it does not work
  	  from Dan Walsh.
  	* Move load_policy from /usr/sbin to /sbin from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-14
changelog:
  - Allow semanage -i and semanage -o to generate customization files.
  - semanage -o will generate a customization file that semanage -i can read and set a machines to the same selinux configuration


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-8
changelog:
  - Add check to sandbox to verify save changes - Chris Pardy
  - Fix memory leak in restorecond - Steve Grubb


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-1
changelog:
  - Update to upstream
  	* Change semodule upgrade behavior to install even if the module
  	  is not present from Dan Walsh.
  	* Make setfiles label if selinux is disabled and a seclabel aware
  	  kernel is running from Caleb Case.
  	* Clarify forkpty() error message in run_init from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 2.0.73-1
changelog:
  - Update to upstream
          * Add semanage dontaudit to turn off dontaudits from Dan Walsh.
          * Fix semanage to set correct mode for setrans file from Dan Walsh.
          * Fix malformed dictionary in portRecord from Dan Walsh.
  	* Restore symlink handling support to restorecon based on a patch by
  	Martin Orr.  This fixes the restorecon /dev/stdin performed by Debian
  	udev scripts that was broken by policycoreutils 2.0.70.


author: Ville Skyttä <ville.skytta@iki.fi> - 2.0.71-9
changelog:
  - Don't try to remove restorecond after last erase (done already in %preun).
  - Ensure scriptlets exit with status 0.
  - Fix %post and %pr


author: Dan Walsh <dwalsh@redhat.com> 2.0.71-1
changelog:
  - Fix chcat to report error on non existing file
  - Update to upstream
  	* Modify setfiles/restorecon checking of exclude paths.  Only check
  	user-supplied exclude paths (not automatically generated ones based on
  	lack of seclabel support), don't require them to be directories, and
  	ignore permission denied errors on them (it is ok to exclude a path to
  	which the caller lacks permission).


author: Dan Walsh <dwalsh@redhat.com> 2.0.70-1
changelog:
  - Update to upstream
  	* Modify restorecon to only call realpath() on user-supplied pathnames
  	from Stephen Smalley.
  	* Fix typo in fixfiles that prevented it from relabeling btrfs 
  	  filesystems from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.68-1
changelog:
  - Fix location of man pages
  - Update to upstream
  	* Modify setfiles to exclude mounts without seclabel option in
  	/proc/mounts on kernels >= 2.6.30 from Thomas Liu.
  	* Re-enable disable_dontaudit rules upon semodule -B from Christopher
  	Pardy and Dan Walsh.
  	* setfiles converted to fts from Thomas Liu.


author: Dan Walsh <dwalsh@redhat.com> 2.0.64-1
changelog:
  - Update to upstream
  	* Keep setfiles from spamming console from Dan Walsh.
  	* Fix chcat's category expansion for users from Dan Walsh.
  - Update po files
  - Fix sepolgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.63-1
changelog:
  - Update to upstream
  	* Fix transaction checking from Dan Walsh.
  	* Make fixfiles -R (for rpm) recursive.
  	* Make semanage permissive clean up after itself from Dan Walsh.
  	* add /root/.ssh/* to restorecond.conf


author: Dan Walsh <dwalsh@redhat.com> 2.0.62-1
changelog:
  - Update to upstream
  	* Add btrfs to fixfiles from Dan Walsh.
  	* Remove restorecond error for matching globs with multiple hard links
   	  and fix some error messages from Dan Walsh.
  	* Make removing a non-existant module a warning rather than an error
  	  from Dan Walsh.
  	* Man page fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-3
changelog:
  - Add Domains Page to system-config-selinux
  - Add ability to create dbus confined applications to polgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-1
changelog:
  - Update to upstream
  	* chcat: cut categories at arbitrary point (25) from Dan Walsh
  	* semodule: use new interfaces in libsemanage for compressed files
  	  from Dan Walsh
  	* audit2allow: string changes for usage


author: Dan Walsh <dwalsh@redhat.com> 2.0.58-1
changelog:
  - Update to upstream
  	* Allow local file context entries to override policy entries in
  	semanage from Dan Walsh.
  	* Newrole error message corrections from Dan Walsh.
  	* Add exception to audit2why call in audit2allow from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.56-1
changelog:
  - Fix semanage help display
  - Update to upstream
  	* fixfiles will now remove all files in /tmp and will check for
  	  unlabeled_t in /tmp and /var/tmp from Dan Walsh.
  	* add glob support to restorecond from Dan Walsh.
  	* allow semanage to handle multi-line commands in a single transaction
  	  from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.54-1
changelog:
  - Update to upstream
  	* Add support for boolean files and group support for seusers from Dan Walsh.
  	* Ensure that setfiles -p output is newline terminated from Russell Coker.


author: Dan Walsh <dwalsh@redhat.com> 2.0.53-1
changelog:
  - Update to upstream
  	* Change setfiles to validate all file_contexts files when using -c from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.52-2
changelog:
  - Add lockdown wizard
  - Allow semanage booleans to take an input file an process lots of booleans at once.


author: Dan Walsh <dwalsh@redhat.com> 2.0.49-1
changelog:
  - Update to upstream
  	* Remove security_check_context calls for prefix validation from semanage.
  	* Change setfiles and restorecon to not relabel if the file already has the correct context value even if -F/force is specified.


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-2
changelog:
  - Add 	rm -rf /tmp/gconfd-* /tmp/pulse-* /tmp/orbit-* to fixfiles restore
  - So that mislabeled files will get removed on full relabel


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-1
changelog:
  - Make restorecond not start by default
  - Fix polgengui to allow defining of confined roles.
  - Add patches from Lubomir Rintel <lkundrak@v3.sk> 
    * Add necessary runtime dependencies on setools-console for -gui
    * separate stderr when run seinfo commands
  - Update to upstream
    * Update semanage man page for booleans from Dan Walsh.
    * Add further error checking to seobject.py for setting booleans.


author: Dan Walsh <dwalsh@redhat.com> 2.0.46-1
changelog:
  - Update to upstream
  	* Update audit2allow to report dontaudit cases from Dan Walsh.
  	* Fix semanage port to use --proto from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> 2.0.43-1
changelog:
  - Update to upstream
  	* Merged fix fixfiles option processing from Vaclav Ovsik.
  - Added existing users, staff and user_t users to polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.42-1
changelog:
  - Update to upstream
  	* Make semodule_expand use sepol_set_expand_consume_base to reduce
  	  peak memory usage.


author: Dan Walsh <dwalsh@redhat.com> 2.0.41-1
changelog:
  - Update to upstream
  	* Merged audit2why fix and semanage boolean --on/--off/-1/-0 support from Dan Walsh.
  	* Merged a second fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.39-1
changelog:
  - Don't initialize audit2allow for audit2why call.  Use default
  - Update to upstream
  	* Merged fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Update to upstream
    * Merged audit2allow cleanups and boolean descriptions from Dan Walsh.
    * Merged setfiles -0 support by Benny Amorsen via Dan Walsh.
    * Merged fixfiles fixes and support for ext4 and gfs2 from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.36-1
changelog:
  - Update to upstream
  	* Merged update to chcat, fixfiles, and semanage scripts from Dan Walsh.
  	* Merged sepolgen fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.35-1
changelog:
  - Update to upstream
  	* Merged support for non-interactive newrole command invocation from Tim Reed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-2
changelog:
  - Make sepolgen set error exit code when partial failure
  - audit2why now checks booleans for avc diagnosis


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-1
changelog:
  - Update to upstream
  	* Update Makefile to not build restorecond if
  	  /usr/include/sys/inotify.h is not present


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-4
changelog:
  - Fix sepolgen to be able to parse Fedora 9 policy
        Handle ifelse statements
        Handle refpolicywarn inside of define
        Add init.if and inetd.if into parse
        Add parse_file to syntax error message


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-1
changelog:
  - Upgrade from NSA
  	* Drop verbose output on fixfiles -C from Dan Walsh.
  	* Fix argument handling in fixfiles from Dan Walsh.
  	* Enhance boolean support in semanage, including using the .xml description when available, from Dan Walsh.
  - Fix handling of final screen in polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.31-1
changelog:
  - Remove no.po
  - Update to upstream
  	* Fix semodule option handling from Dan Walsh.
  	* Add deleteall support for ports and fcontexts in semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.29-1
changelog:
  - Update to upstream
  	* Add genhomedircon script to invoke semodule -Bn from Dan Walsh.
  - Add deleteall for ports and fcontext


author: Dan Walsh <dwalsh@redhat.com> 2.0.28-1
changelog:
  - Update to upstream
  	* Update semodule man page for -D from Dan Walsh.
  	* Add boolean, locallist, deleteall, and store support to semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-13
changelog:
  - Upgrade version of sepolgen from NSA
  	* Expand the sepolgen parser to parse all current refpolicy modules from Karl MacMillan.
  	* Suppress generation of rules for non-denials from Karl MacMillan (take 3).


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-1
changelog:
  - Update semodule man page
  	* Fix genhomedircon searching for USER from Todd Miller
  	* Install run_init with mode 0755 from Dan Walsh.
  	* Fix chcat from Dan Walsh.
  	* Fix fixfiles pattern expansion and error reporting from Dan Walsh.	
  	* Optimize genhomedircon to compile regexes once from Dan Walsh.
  	* Fix semanage gettext call from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.22-13
changelog:
  - Speed up genhomedircon by an order of magnitude by compiling regex
  - Allow semanage fcontext -a -t <<none>> /path to work


author: Dan Walsh <dwalsh@redhat.com> 2.0.20-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged setfiles -c usage fix from Dan Walsh.
  	* Merged restorecon fix from Yuichi Nakamura.
  	* Dropped -lsepol where no longer needed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.16-1
changelog:
  - Updated version of policycoreutils
  	* Merged support for modifying the prefix via semanage from Dan Walsh.
  - Fixed genhomedircon to find homedirs correctly.


author: Dan Walsh <dwalsh@redhat.com> 2.0.15-1
changelog:
  - Updated version of policycoreutils
  	* Merged po file updates from Dan Walsh.
  - Fix semanage to be able to modify prefix in user record


author: Dan Walsh <dwalsh@redhat.com> 2.0.13-1
changelog:
  - Updated version of policycoreutils
  	* Merged setsebool patch to only use libsemanage for persistent boolean changes from Stephen Smalley.
  	* Merged genhomedircon patch to use the __default__ setting from Dan Walsh.
  	* Dropped -b option from load_policy in preparation for always preserving booleans across reloads in the kernel.


author: Dan Walsh <dwalsh@redhat.com> 2.0.10-1
changelog:
  - Updated version of policycoreutils
  	* Merged chcat, fixfiles, genhomedircon, restorecond, and restorecon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.9-1
changelog:
  - Updated version of sepolgen
  	* Merged seobject setransRecords patch to return the first alias from Xavier Toth.


author: Dan Walsh <dwalsh@redhat.com> 2.0.8-1
changelog:
  - Updated version of sepolgen
  	* Merged updates to sepolgen-ifgen from Karl MacMillan.
  	* Merged updates to sepolgen parser and tools from Karl MacMillan.
  	  This includes improved debugging support, handling of interface 
  	  calls with list parameters, support for role transition rules,
  	  updated range transition rule support, and looser matching.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-8
changelog:
  - system-config-selinux should be able to run on a disabled system,
  - at least enough to get it enabled.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-6
changelog:
  - Updated version of sepolgen
  	* Merged patch to discard self from types when generating requires from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-5
changelog:
  - Change location of audit2allow and sepol-ifgen to sbin
  - Updated version of sepolgen
  	* Merged patch to move the sepolgen runtime data from /usr/share to /var/lib to facilitate a read-only /usr from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-1
changelog:
  - Update to upstream
  	* Merged restorecond init script LSB compliance patch from Steve Grubb.
    -sepolgen
  	* Merged better matching for refpolicy style from Karl MacMillan
  	* Merged support for extracting interface paramaters from interface calls from Karl MacMillan
  	* Merged support for parsing USER_AVC audit messages from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-3
changelog:
  - Update to upstream
    -sepolgen
  	* Merged support for enabling parser debugging from Karl MacMillan.
  - Add sgrupp cleanup of restorcon init script


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-1
changelog:
  - Update to upstream
    - policycoreutils
  	* Merged newrole O_NONBLOCK fix from Linda Knippers.
  	* Merged sepolgen and audit2allow patches to leave generated files 
  	  in the current directory from Karl MacMillan.
  	* Merged restorecond memory leak fix from Steve Grubb.
    -sepolgen
  	* Merged patch to leave generated files (e.g. local.te) in current directory from Karl MacMillan.
  	* Merged patch to make run-tests.py use unittest.main from Karl MacMillan.
  	* Merged patch to update PLY from Karl MacMillan.
  	* Merged patch to update the sepolgen parser to handle the latest reference policy from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.3-1
changelog:
  - Update to upstream
  	* Merged translations update from Dan Walsh.
  	* Merged chcat fixes from Dan Walsh.
  	* Merged man page fixes from Dan Walsh.
  	* Merged seobject prefix validity checking from Dan Walsh.
  	* Merged Makefile and refparser.py patch from Dan Walsh.
  	  Fixes PYTHONLIBDIR definition and error handling on interface files.


author: Dan Walsh <dwalsh@redhat.com> 2.0.2-1
changelog:
  - Update to upstream
  	* Merged seobject exception handler fix from Caleb Case.
  	* Merged setfiles memory leak patch from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.1-1
changelog:
  - Update to upstream
  	* Merged small fix to correct include of errcodes.h in semodule_deps from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.0-1
changelog:
  - Update to upstream
  	* Merged new audit2allow from Karl MacMillan.
  	  This audit2allow depends on the new sepolgen python module.
  	  Note that you must run the sepolgen-ifgen tool to generate
  	  the data needed by audit2allow to generate refpolicy. 
  	* Fixed newrole non-pam build.
  - Fix Changelog and spelling error in man page


author: Dan Walsh <dwalsh@redhat.com> 1.34.1-1
changelog:
  - Fix system-config-selinux ports view
  - Update to upstream
  	* Fixed newrole non-pam build.
  	* Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> 1.33.15-1
changelog:
  - Update to upstream
  	* Merged unicode-to-string fix for seobject audit from Dan Walsh.
  	* Merged man page updates to make "apropos selinux" work from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.14-1
changelog:
  * Merged newrole man page patch from Michael Thompson.
  	* Merged patch to fix python unicode problem from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-1
changelog:
  - Want to update to match api
  - Update to upstream
  	* Merged newrole securetty check from Dan Walsh.
  	* Merged semodule patch to generalize list support from Karl MacMillan.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> 1.33.11-1
changelog:
  - Update to upstream
  	* Merged fixfiles and seobject fixes from Dan Walsh.
  	* Merged semodule support for list of modules after -i from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.33.10-1
changelog:
  - Update to upstream
  	* Merged patch to correctly handle a failure during semanage handle
  	  creation from Karl MacMillan.
  	* Merged patch to fix seobject role modification from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.8-1
changelog:
  - Update to upstream
  	* Merged patches from Dan Walsh to:
  	  - omit the optional name from audit2allow
  	  - use the installed python version in the Makefiles
  	  - re-open the tty with O_RDWR in newrole


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-9
changelog:
  - Fix fixfiles script to use tty command correctly.  If this command fails, it 
  should set the LOGFILE to /dev/null
  Resolves: #220879


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-7
changelog:
  - add exists switch to semanage to tell it not to check for existance of Linux user
  Resolves: #219421


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-6
changelog:
  - Fix audit2allow generating reference policy
  - Fix semanage to manage user roles properly 
  Resolves: #220071


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-5
changelog:
  - Update po files
  - Fix newrole to open stdout and stderr rdrw so more will work on MLS machines
  Resolves: #216920


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-1
changelog:
  - Update to upstream
  	* Patch from Dan Walsh to add an pam_acct_msg call to run_init
  	* Patch from Dan Walsh to fix error code returns in newrole
  	* Patch from Dan Walsh to remove verbose flag from semanage man page
  	* Patch from Dan Walsh to make audit2allow use refpolicy Makefile
  	  in /usr/share/selinux/<SELINUXTYPE>


author: Dan Walsh <dwalsh@redhat.com> 1.33.4-1
changelog:
  - Upstream accepted my patches
  	* Merged setsebool patch from Karl MacMillan. 
  	  This fixes a bug reported by Yuichi Nakamura with
  	  always setting booleans persistently on an unmanaged system.


author: Dan Walsh <dwalsh@redhat.com> 1.32-1
changelog:
  - Add newrole audit patch from sgrubb
  - Update to upstream
  	* Merged audit2allow -l fix from Yuichi Nakamura.
  	* Merged restorecon -i and -o - support from Karl MacMillan.
  	* Merged semanage/seobject fix from Dan Walsh.
  	* Merged fixfiles -R and verify changes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.30-1
changelog:
  - Update to upstream
  	* Merged newrole auditing of failures due to user actions from
  	  Michael Thompson.


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-6
changelog:
  - Change setfiles and restorecon to use stderr except for -o flag
  - Also -o flag will now output files


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-1
changelog:
  - Security fixes to run python in a more locked down manner
  - More Translations
  - Update to upstream
  	* Merged fix for restorecon // handling from Erich Schubert.
  	* Merged translations update and fixfiles fix from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.27-4
changelog:
  - Add -i qualified to restorecon to tell it to ignore files that do not exist
  - Fixfiles also modified for this change


author: Dan Walsh <dwalsh@redhat.com> 1.30.26-1
changelog:
  - Update to upstream
  	* Merged semanage local file contexts patch from Chris PeBenito.
  - Fix fixfiles log creation
  - More translations


author: Dan Walsh <dwalsh@redhat.com> 1.30.25-1
changelog:
  - Update to upstream
  	* Merged patch from Dan Walsh with:
  	  * audit2allow: process MAC_POLICY_LOAD events
  	  * newrole:  run shell with - prefix to start a login shell
  	  * po:  po file updates
  	  * restorecond:  bail if SELinux not enabled
  	  * fixfiles: omit -q 
  	  * genhomedircon:  fix exit code if non-root
  	  * semodule_deps:  install man page
  	* Merged secon Makefile fix from Joshua Brindle.
  	* Merged netfilter contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.30.22-1
changelog:
  - Update to upstream
  	* Merged restorecond size_t fix from Joshua Brindle.
  	* Merged secon keycreate patch from Michael LeMay.
  	* Merged restorecond fixes from Dan Walsh.
  	  Merged updated po files from Dan Walsh.
  	* Merged python gettext patch from Stephen Bennett.
  	* Merged semodule_deps from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.30.17-1
changelog:
  - Update to upstream
  	* Lindent.
  	* Merged patch from Dan Walsh with:
  	  * -p option (progress) for setfiles and restorecon.
  	  * disable context translation for setfiles and restorecon.
  	  * on/off values for setsebool.
  	* Merged setfiles and semodule_link fixes from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.30.14-1
changelog:
  - Update to upstream
  	* Merged fix for setsebool error path from Serge Hallyn.
  	* Merged patch from Dan Walsh with:
  	*    Updated po files.
  	*    Fixes for genhomedircon and seobject.
  	*    Audit message for mass relabel by setfiles.


author: Dan Walsh <dwalsh@redhat.com> 1.30.11-1
changelog:
  - Update to upstream
  	* Merged more translations from Dan Walsh.
  	* Merged patch to relocate setfiles to /sbin for early relabel
  	  when /usr might not be mounted from Dan Walsh.
  	* Merged semanage/seobject patch to preserve fcontext ordering in list.
  	* Merged secon patch from James Antill.


author: James Antill <jantill@redhat.com> 1.30.10-2
changelog:
  - secon fixes for --self-exec etc.
  - secon change from level => sensitivity, add clearance.
  - Add mass relabel AUDIT patch, but disable it until kernel problem solved.


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Update to upstream
  	* Merged patch with updates to audit2allow, secon, genhomedircon,
  	  and semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.9-1
changelog:
  - Update to upstream
  	* Fixed audit2allow and po Makefiles for DESTDIR= builds.
  	* Merged .po file patch from Dan Walsh.
  	* Merged bug fix for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - Update to upstream
  	* Merged fix warnings patch from Karl MacMillan.
  	* Merged patch from Dan Walsh.
  	  This includes audit2allow changes for analysis plugins,
  	  internationalization support for several additional programs 
  	  and added po files, some fixes for semanage, and several cleanups.
  	  It also adds a new secon utility.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Add /etc/samba/secrets.tdb to restorecond.conf
  - Update from upstream
  	* Merged semanage prefix support from Russell Coker.
  	* Added a test to setfiles to check that the spec file is
  	  a regular file.


author: Dan Walsh <dwalsh@redhat.com> 1.30.4-1
changelog:
  - Update from upstream
  	* Merged audit2allow fixes for refpolicy from Dan Walsh.
  	* Merged fixfiles patch from Dan Walsh.
  	* Merged restorecond daemon from Dan Walsh.
  	* Merged semanage non-MLS fixes from Chris PeBenito.
  	* Merged semanage and semodule man page examples from Thomas Bleher.


author: Dan Walsh <dwalsh@redhat.com> 1.30.1-1
changelog:
  - Make audit2allow translate dontaudit as well as allow rules
  - Update from upstream
  	* Merged semanage labeling prefix patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.26-1
changelog:
  - Update from upstream
  	* Merged semanage bug fix patch from Ivan Gyurdiev.
  	* Merged improve bindings patch from Ivan Gyurdiev.
  	* Merged semanage usage patch from Ivan Gyurdiev.
  	* Merged use PyList patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.23-1
changelog:
  - Update from upstream
  	* Merged newrole -V/--version support from Glauber de Oliveira Costa.
  	* Merged genhomedircon prefix patch from Dan Walsh.
  	* Merged optionals in base patch from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.20-1
changelog:
  - Update from upstream
  	* Merged seuser/user_extra support patch to semodule_package 
  	  from Joshua Brindle.
  	* Merged getopt type fix for semodule_link/expand and sestatus
  	  from Chris PeBenito.
  - Fix genhomedircon output


author: Dan Walsh <dwalsh@redhat.com> 1.29.17-1
changelog:
  - Update from upstream
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged seusers.system patch from Ivan Gyurdiev.
  	* Merged improve port/fcontext API patch from Ivan Gyurdiev.
  	* Merged genhomedircon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.15-1
changelog:
  - Update from upstream
  	* Merged newrole audit patch from Steve Grubb.
  	* Merged seuser -> seuser local rename patch from Ivan Gyurdiev.
  	* Merged semanage and semodule access check patches from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.11-1
changelog:
  - Added translation support to semanage
  - Update from upstream
  	* Modified newrole and run_init to use the loginuid when
  	  supported to obtain the Linux user identity to re-authenticate,
  	  and to fall back to real uid.  Dropped the use of the SELinux
  	  user identity, as Linux users are now mapped to SELinux users
  	  via seusers and the SELinux user identity space is separate.
  	* Merged semanage bug fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat.8 and genhomedircon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.8-1
changelog:
  - Update to match NSA
  	* Merged semanage fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat, genhomedircon, and semanage diffs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.7-1
changelog:
  - Update to match NSA
  	* Merged newrole cleanup patch from Steve Grubb.
  	* Merged setfiles/restorecon performance patch from Russell Coker.
  	* Merged genhomedircon and semanage patches from Dan Walsh.
  	* Merged remove add_local/set_local patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon and semanage patch from Dan Walsh.
  	* Changed semodule error reporting to include argv[0].


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Update to match NSA
  	* Merged semanage getpwnam bug fix from Serge Hallyn (IBM).
  	* Merged patch series from Ivan Gyurdiev.
  	  This includes patches to:
  	  - cleanup setsebool
  	  - update setsebool to apply active booleans through libsemanage
  	  - update semodule to use the new semanage_set_rebuild() interface
  	  - fix various bugs in semanage
  	* Merged patch from Dan Walsh (Red Hat).
  	  This includes fixes for restorecon, chcat, fixfiles, genhomedircon,
  	  and semanage.


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Fix genhomedircon to work in installer
  - Update to match NSA
  	* Merged patch for chcat script from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.1-1
changelog:
  - Update to match NSA
  	* Merged fix for audit2allow long option list from Dan Walsh.
  	* Merged -r option for restorecon (alias for -R) from Dan Walsh.
  	* Merged chcat script and man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.36-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to warn on use of ROLE in homedir_template
  	  if using managed policy, as libsemanage does not yet support it.


author: Dan Walsh <dwalsh@redhat.com> 1.27.35-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon bug fix from Dan Walsh.
  	* Revised semodule* man pages to refer to checkmodule and
  	  to include example sections.


author: Dan Walsh <dwalsh@redhat.com> 1.27.33-1
changelog:
  - Update to match NSA
  	* Merged audit2allow --tefile and --fcfile support from Dan Walsh.
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged semodule* man pages from Dan Walsh, and edited them.
  	* Changed setfiles to set the MATCHPATHCON_VALIDATE flag to
  	  retain validation/canonicalization of contexts during init.


author: Dan Walsh <dwalsh@redhat.com> 1.27.31-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to always use user_r for the role in the
  	  managed case since user_get_defrole is broken.
  - Add te file capabilities to audit2allow
  - Add man pages for semodule


author: Dan Walsh <dwalsh@redhat.com> 1.27.30-1
changelog:
  - Update to match NSA
  	* Merged sestatus, audit2allow, and semanage patch from Dan Walsh.
  	* Fixed semodule -v option.


author: Dan Walsh <dwalsh@redhat.com> 1.27.29-1
changelog:
  - Update to match NSA
  	* Merged audit2allow python script from Dan Walsh.
  	  (old script moved to audit2allow.perl, will be removed later).
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged semodule quieting patch from Dan Walsh
  	  (inverts default, use -v to restore original behavior).


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-2
changelog:
  - Update to match NSA
  	* Merged genhomedircon rewrite from Dan Walsh.
  - Rewrite audit2allow to python


author: Dan Walsh <dwalsh@redhat.com> 1.27.26-1
changelog:
  * Added -B (--build) option to semodule to force a rebuild.
  	* Reverted setsebool patch to call semanage_set_reload_bools().
  	* Changed setsebool to disable policy reload and to call
  	  security_set_boolean_list to update the runtime booleans.
  	* Changed setfiles -c to use new flag to set_matchpathcon_flags()
  	  to disable context translation by matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.27.23-1
changelog:
  - Update to match NSA
  	* Changed setfiles for the context canonicalization support.
  	* Changed setsebool to call semanage_is_managed() interface
  	  and fall back to security_set_boolean_list() if policy is
  	  not managed.
  	* Merged setsebool memory leak fix from Ivan Gyurdiev.
  	* Merged setsebool patch to call semanage_set_reload_bools()
  	  interface from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to match NSA
  	* Merged setsebool patch from Ivan Gyurdiev.
  	  This moves setsebool from libselinux/utils to policycoreutils,
  	  and rewrites it to use libsemanage for permanent boolean changes.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to match NSA
  	* Merged semodule support for reload, noreload, and store options
  	  from Joshua Brindle.
  	* Merged semodule_package rewrite from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.18-1
changelog:
  - Update to match NSA
  	* Cleaned up usage and error messages and releasing of memory by
     	  semodule_* utilities.
  	* Corrected error reporting by semodule.
  	* Updated semodule_expand for change to sepol interface.
  	* Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to match NSA
  	* Merged non-PAM Makefile support for newrole and run_init from Timothy Wood.


author: Dan Walsh <dwalsh@redhat.com> 1.27.11-1
changelog:
  - Update to match NSA
  	* Updated semodule_expand to use get interfaces for hidden sepol_module_package type.
  	* Merged newrole and run_init pam config patches from Dan Walsh (Red Hat).
  	* Merged fixfiles patch from Dan Walsh (Red Hat).
  	* Updated semodule for removal of semanage_strerror.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to match NSA
  	* Updated semodule_link and semodule_expand to use shared libsepol.
  	Fixed audit2why to call policydb_init prior to policydb_read (still
  	uses the static libsepol).


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to match NSA
  	* Updated for changes to libsepol. 
  	Changed semodule and semodule_package to use the shared libsepol.
  	Disabled build of semodule_link and semodule_expand for now.
  	Updated audit2why for relocated policydb internal headers,
  	still needs to be converted to a shared lib interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.5-1
changelog:
  - Update to match NSA
  	* Fixed warnings in load_policy.
  	* Rewrote load_policy to use the new selinux_mkload_policy()
  	interface provided by libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to match NSA
  	* Merged patch to update semodule to the new libsemanage API
  	and improve the user interface from Karl MacMillan (Tresys).
  	* Modified semodule for the create/connect API split.


author: Dan Walsh <dwalsh@redhat.com> 1.27.2-1
changelog:
  - Update to match NSA
  	* Merged run_init open_init_pty bug fix from Manoj Srivastava
  	  (unblock SIGCHLD).  Bug reported by Erich Schubert.


author: Dan Walsh <dwalsh@redhat.com> 1.27.1-1
changelog:
  - Update to match NSA
  	* Merged error shadowing bug fix for restorecon from Dan Walsh.
  	* Merged setfiles usage/man page update for -r option from Dan Walsh.
  	* Merged fixfiles -C patch to ignore :s0 addition on update
  	  to a MCS/MLS policy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.25.9-1
changelog:
  - Update to match NSA
  	* Changed setfiles -c to translate the context to raw format
  	prior to calling libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update to match NSA
  	* Merged fixes for semodule_link and sestatus from Serge Hallyn (IBM).
  	  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.25.5-1
changelog:
  - Update to match NSA
  	* Merged patch to move module read/write code from libsemanage
  	  to libsepol from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update to match NSA
  	* Merged fixfiles and newrole patch from Dan Walsh.
  	* Merged audit2why man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update to match NSA
  	* Extended audit2why to incorporate booleans and local user 
  	  settings when analyzing audit messages.


author: Dan Walsh <dwalsh@redhat.com> 1.23.9-1
changelog:
  - Update to match NSA
  	* Updated audit2why for sepol_ prefixes on Flask types to
  	  avoid namespace collision with libselinux, and to 
  	  include <selinux/selinux.h> now.


author: Dan Walsh <dwalsh@redhat.com> 1.23.7-1
changelog:
  - Change -f flag in fixfiles to remove stuff from /tmp
  - Change -F flag to pass -F flag  to restorecon/fixfiles.  (IE Force relabel).


author: Dan Walsh <dwalsh@redhat.com> 1.23.6-1
changelog:
  - Update to match NSA
  	* Fixed signed/unsigned pointer bug in load_policy.
  	* Reverted context validation patch for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.23.5-1
changelog:
  - Update to match NSA
  	* Reverted load_policy is_selinux_enabled patch from Dan Walsh.
  	  Otherwise, an initial policy load cannot be performed using
  	  load_policy, e.g. for anaconda.


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update to version from NSA
  	* Merged load_policy is_selinux_enabled patch from Dan Walsh.
  	* Merged restorecon verbose output patch from Dan Walsh.
  	* Merged setfiles altroot patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.23.3-1
changelog:
  - Update to version from NSA
          * Merged context validation patch for genhomedircon from Eric Paris.
  - Fix verbose output of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.23.2-1
changelog:
  - Update to version from NSA
  	* Changed setfiles -c to call set_matchpathcon_flags(3) to
  	  turn off processing of .homedirs and .local.


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update to released version from NSA
  	* Merged rewrite of genhomedircon by Eric Paris.
  	* Changed fixfiles to relabel jfs since it now supports security xattrs
  	  (as of 2.6.11).  Removed reiserfs until 2.6.12 is released with 
  	  fixed support for reiserfs and selinux.


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-2
changelog:
  - Apply Uli patch
  	* The Makefiles should use the -Wall option even if compiled in beehive
  	* Add -W, too
  	* use -Werror when used outside of beehive.  This could also be used unconditionally
  	* setfiles/setfiles.c: fix resulting warning
  	* restorecon/restorecon.c: Likewise
  	* run_init/open_init_pty.c: argc hasn't been checked, the program would crash if
  called without parameters.  ignore the return value of nice properly.
  	* run_init: don't link with -ldl lutil
  	* load_policy: that's the bad bug.  pointer to unsigned int is passed, size_t is
  written to.  fails on 64-bit archs
  	* sestatus: signed vs unsigned problem
  	* newrole: don't link with -ldl


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-1
changelog:
  - Update to latest from NSA
  	* Changed load_policy to fall back to the original policy upon
  	  an error from sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.17-1
changelog:
  - Update to latest from NSA
  	* Merged new genhomedircon script from Dan Walsh.
  	* Changed load_policy to call sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.13-1
changelog:
  - Update from NSA
  	* Merged further change to fixfiles -C from Dan Walsh.
  	* Merged updated fixfiles script from Dan Walsh.
  - Fix error handling of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.21.12-1
changelog:
  - More cleanup of fixfiles sed patch
  	* Merged further patches for restorecon/setfiles -e and fixfiles -C.


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - More cleanup of fixfiles sed patch
  - Upgrade to latest from NSA
  	* Merged patch for open_init_pty from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.9-1
changelog:
  - More cleanup of sed patch
  - Upgrade to latest from NSA
  	* Merged updated fixfiles script from Dan Walsh.
  	* Merged updated man page for fixfiles from Dan Walsh and re-added unzipped.
  	* Reverted fixfiles patch for file_contexts.local; 
  	  obsoleted by setfiles rewrite.
  	* Merged error handling patch for restorecon from Dan Walsh.
  	* Merged semi raw mode for open_init_pty helper from Manoj Srivastava.
  	* Rewrote setfiles to use matchpathcon and the new interfaces
  	  exported by libselinux (>= 1.21.5).


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-3
changelog:
  - Fix fixfiles patch
  - Upgrade to latest from NSA
  	* Prevent overflow of spec array in setfiles.
  - Add diff comparason between file_contexts to fixfiles
  - Allow restorecon to give an warning on file not found instead of exiting


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged newrole -l support from Darrel Goeddel (TCS).
  - Fix genhomedircon STARTING_UID


author: Dan Walsh <dwalsh@redhat.com> 1.21.3-1
changelog:
  - Upgrade to latest from NSA
  	* Fixed restorecon to not treat errors from is_context_customizable()
  	  as a customizable context.
  	* Merged setfiles/restorecon patch to not reset user field unless
  	  -F option is specified from Dan Walsh.
  	* Merged open_init_pty helper for run_init from Manoj Srivastava.
  	* Merged audit2allow and genhomedircon man pages from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.1-3
changelog:
  - Don't change user componant if it is all that changed unless forced.
  - Change fixfiles to concatinate file_context.local for setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.20.1-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles rewrite from Dan Walsh.
  	* Merged restorecon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles and restorecon patches from Dan Walsh.
  	* Don't display change if only user part changed.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-4
changelog:
  - Fix fixfiles handling of rpm
  - Fix restorecon to not warn on symlinks unless -v -v 
  - Fix output of verbose to show old context as well as new context


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-1
changelog:
  - Update to latest from NSA
  	* Changed restorecon to ignore ENOENT errors from matchpathcon.
  	* Merged nonls patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Update with NSA
  	* Added -l option to setfiles to log changes via syslog.
  	* Merged -e option to setfiles to exclude directories.
  	* Merged -R option to restorecon for recursive descent.


author: Dan Walsh <dwalsh@redhat.com> 1.14.1-2
changelog:
  - Fix fixfiles.cron to not run on non SELinux boxes
  - Fix several problems in fixfiles and fixfiles.cron


author: Dan Walsh <dwalsh@redhat.com> 1.13.3-1
changelog:
  - Update latest from NSA
  - Add -o option to setfiles to save output of any files with incorrect context.


author: Colin Walters <walters@redhat.com> 1.10-3
changelog:
  - Add patch to fall back to authenticating via uid if
    the current user's SELinux user identity is the default
    identity
  - Add BuildRequires pam-devel


author: Dan Walsh <dwalsh@redhat.com> 1.9-9
changelog:
  - Change restorecon to not follow symlinks.  It is too difficult and confusing
  - to figure out the file context for the file pointed to by a symlink.


author: Adam Miller <admiller@redhat.com> 1.5.16-1
changelog:
  - And fix the unit test. (rmillner@redhat.com)
  - Fix FrontendHttpServer class validation of chained certificates.
    (rmillner@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.5.15-1
changelog:
  - Merge pull request #1578 from ironcladlou/endpoint_ex_handling
    (dmcphers+openshiftbot@redhat.com)
  - Bug 919161: Fix Python 3.3 Endpoint entry (ironcladlou@gmail.com)
  - Bug 918888 - Had the wrong exit status. (rmillner@redhat.com)
  - Merge pull request #1575 from pmorie/dev/uu
    (dmcphers+openshiftbot@redhat.com)
  - Fix destroyed gear check in UnixUser#destroy (pmorie@gmail.com)
  - Merge pull request #1570 from rmillner/post_stage
    (dmcphers+openshiftbot@redhat.com)
  - Bug 901866 - Put training wheels on the rm command. (rmillner@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.5.14-1
changelog:
  - BZ873896 - [ORIGIN] 000001_openshift_origin_node.conf not included in
    gemspec, but is in tar.gz (calfonso@redhat.com)
  - be sure you dont cache an empty list (dmcphers@redhat.com)
  - Bug 918480 (dmcphers@redhat.com)
  - Bug 917990 - Multiple fixes. (rmillner@redhat.com)
  - Merge pull request #1548 from markllama/dev/cgroup_freezethaw
    (dmcphers+openshiftbot@redhat.com)
  - fixed missing case end and cgset syntax (mlamouri@redhat.com)
  - added cgset freeze|thaw user (markllama@gmail.com)


author: Adam Miller <admiller@redhat.com> 1.5.13-1
changelog:
  - Merge pull request #1545 from pmorie/dev/v2_get_cart (dmcphers@redhat.com)
  - Bug 917163 (dmcphers@redhat.com)
  - Make v2 get_cartridge use instance dir instead of system path
    (pmorie@gmail.com)
  - Merge pull request #1531 from jwhonce/bug/916958 (dmcphers@redhat.com)
  - Bug 916958, Bug 917513 - V1 Model not honoring Broker contract
    (jhonce@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.5.11-1
changelog:
  - remove chown/chmod, errors in mock with Operation Not Permitted, %files
    section should satisfy this (admiller@redhat.com)
  - fixing BuildRequires (admiller@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.5.10-1
changelog:
  - Bug 912215 - Workaround broken SELinux policy. (rmillner@redhat.com)
  - Bug 916839 - The apache user cannot read through /etc/httpd/conf.d on
    STG/INT/PROD for security reasons. (rmillner@redhat.com)
  - Merge pull request #1506 from pmorie/dev/cartridge_refactor
    (dmcphers+openshiftbot@redhat.com)
  - Add simple v2 app builds (pmorie@gmail.com)
  - WIP Cartridge Refactor - Add OPENSHIFT_{CartridgeShortName}_DIR
    (jhonce@redhat.com)
  - Remove parsing version from cartridge-name (pmorie@gmail.com)
  - Bug 916917 - uninitialized constant ApplicationState (jhonce@redhat.com)
  - Merge pull request #1497 from jwhonce/wip/master_unix_user
    (dmcphers@redhat.com)
  - Strip out malformed entries. (rmillner@redhat.com)
  - Move the blank route files out of %post. (rmillner@redhat.com)
  - WIP Cartridge Refactor - Remove oo_spawn use from v1 path (jhonce@redhat.com)
  - Use sync IO for the logger file (ironcladlou@gmail.com)


author: Adam Miller <admiller@redhat.com> 1.5.9-1
changelog:
  - Merge pull request #1486 from lnader/revert_pull_request_1
    (dmcphers@redhat.com)
  - reverted US2448 (lnader@redhat.com)
  - Bug 901424 - Hide the mco command. (rmillner@redhat.com)
  - Bug 901743 - Add the various other commonly used TMP variables.
    (rmillner@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.5.8-1
changelog:
  - Merge pull request #1477 from ironcladlou/dev/cartridge_refactor
    (dmcphers@redhat.com)
  - WIP Cartridge Refactor (pmorie@gmail.com)
  - WIP Cartridge Refactor (pmorie@gmail.com)


author: Adam Miller <admiller@redhat.com> 1.5.7-1
changelog:
  - US2448 (lnader@redhat.com)
  - Merge pull request #1465 from rmillner/BZ912238
    (dmcphers+openshiftbot@redhat.com)
  - Merge pull request #1462 from rmillner/BZ915471
    (dmcphers+openshiftbot@redhat.com)
  - Merge pull request #1459 from rmillner/US3143
    (dmcphers+openshiftbot@redhat.com)
  - Bug 912238 - The last rescue was catching exit. (rmillner@redhat.com)
  - Bug 915471 - The set_selinux_context function was being used in the wrong
    place. (rmillner@redhat.com)
  - WIP Cartridge Refactor - Update cartridge author's guide (jhonce@redhat.com)
  - Use an openshift specific log for last_access. (rmillner@redhat.com)
  - Fix X-Client-IP. (rmillner@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.5.6-1
changelog:
  - Turn route logging off. (rmillner@redhat.com)
  - Fetch returns KeyError. (rmillner@redhat.com)
  - Bug 913351 - Cannot create application successfully when district is added
    (jhonce@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.5.5-1
changelog:
  - fix typo (dmcphers@redhat.com)
  - Bug 913423 - Incorrect syntax for ReverseCookiePath, and the way the node
    table lookup works we do not have the information broken out in a way that
    supports the correct syntax. (rmillner@redhat.com)
  - Use File.chown/chmod. (rmillner@redhat.com)
  - Merge pull request #1429 from jwhonce/dev/wip_master
    (dmcphers+openshiftbot@redhat.com)
  - Merge pull request #1420 from kraman/master
    (dmcphers+openshiftbot@redhat.com)
  - Bug 913288 - Numeric login effected additional commands (jhonce@redhat.com)
  - Removing references to cgconfig/all (kraman@gmail.com)


author: Adam Miller <admiller@redhat.com> 1.5.4-1
changelog:
  - Merge pull request #1417 from jwhonce/dev/wip_master
    (dmcphers+openshiftbot@redhat.com)
  - Bug 912899 - mcollective changing all numeric mongoid to BigInt
    (jhonce@redhat.com)
  - Allow for a __default__ target which matches hosts not otherwise matched.
    (rmillner@redhat.com)
  - Fix permissions for db files. (rmillner@redhat.com)
  - Merge pull request #1409 from tdawson/tdawson/fix_rubygem_sources
    (dmcphers+openshiftbot@redhat.com)
  - Merge pull request #1408 from jwhonce/format_markers
    (dmcphers+openshiftbot@redhat.com)
  - fix rubygem sources (tdawson@redhat.com)
  - WIP Cartridge Refactor (jhonce@redhat.com)
  - Fixing sed script for F18 config updates (kraman@gmail.com)


author: Adam Miller <admiller@redhat.com> 1.5.3-1
changelog:
  - Merge pull request #1405 from rmillner/US3143
    (dmcphers+openshiftbot@redhat.com)
  - Merge pull request #1379 from markllama/bugs/cgroup-start
    (dmcphers+openshiftbot@redhat.com)
  - Merge pull request #1376 from markllama/bug/oo-cgroup-read
    (dmcphers+openshiftbot@redhat.com)
  - Merge pull request #1404 from kraman/master
    (dmcphers+openshiftbot@redhat.com)
  - Fedora 18 moved the httxt2dbm command. (rmillner@redhat.com)
  - Fixing sed expression which transforms 000001_openshift_origin_node.conf for
    Apache 2.4 Revert "Adding path to resolve useradd"   This reverts commit
    31d41d77df658b1bb134a9d2cba7cd8ee28cfe64. (kraman@gmail.com)
  - Commands and mcollective calls for each FrontendHttpServer API.
    (rmillner@redhat.com)
  - Bug 912215: Use oo-ruby for interpreter (ironcladlou@gmail.com)
  - Merge pull request #1391 from rmillner/US3143
    (dmcphers+openshiftbot@redhat.com)
  - Switch from VirtualHosts to mod_rewrite based routing to support high
    density. (rmillner@redhat.com)
  - Add existing community carts to v1 cart list (kraman@gmail.com)
  - Adding path to resolve useradd (kraman@gmail.com)
  - add check for systemd based os (markllama@gmail.com)
  - Merge pull request #1387 from jwhonce/dev/threaddump
    (dmcphers+openshiftbot@redhat.com)
  - Bug 911956 - Fixed miss-spelled method name (jhonce@redhat.com)
  - Bug 906740 - Update error message (jhonce@redhat.com)
  - Fixes to get builds and tests running on RHEL: (kraman@gmail.com)
  - Fixes for ruby193 (john@ibiblio.org)
  - Bug 868427: Fix tidy for v1 carts (ironcladlou@gmail.com)
  - open4 is a rubygem (mlamouri@redhat.com)
  - remove community pod (dmcphers@redhat.com)
  - minor cleanup (dmcphers@redhat.com)
  - Patch node coverage file permissions to work with oo_spawn tests
    (jhonce@redhat.com)
  - Fix embed.feature (pmorie@gmail.com)
  - Initial write-up of pub/sub hooks (mrunal@me.com)
  - Refactor agent and proxy, move all v1 code to v1 model
    (ironcladlou@gmail.com)
  - WIP Cartridge Refactor (jhonce@redhat.com)
  - WIP Cartridge Refactor (jhonce@redhat.com)
  - WIP Cartridge Refactor (jhonce@redhat.com)
  - Bug [906687] - Lacking usage info of oo-cgroup-read command
    (mlamouri@redhat.com)
  - remove use of filesystem cgroup countrol (mlamouri@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.4.5-1
changelog:
  - remove BuildRoot: (tdawson@redhat.com)
  - move rest api tests to functionals (dmcphers@redhat.com)
  - make Source line uniform among all spec files (tdawson@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.4.3-1
changelog:
  - Merge pull request #1255 from sosiouxme/newfacts
    (dmcphers+openshiftbot@redhat.com)
  - <facter,resource_limits> active_capacity/max_active_apps/etc switched to
    gear-based accounting (lmeyer@redhat.com)
  - Merge pull request #1238 from sosiouxme/newfacts
    (dmcphers+openshiftbot@redhat.com)
  - <facter,resource_limits> reckon by gears (as opposed to git repos), add gear
    status facts (lmeyer@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.4.2-1
changelog:
  - Bug 905568: Skip endpoint deletion if no Endpoints in manifest
    (ironcladlou@gmail.com)
  - Merge pull request #1231 from ironcladlou/expose-port-fix
    (dmcphers+openshiftbot@redhat.com)
  - Merge pull request #1235 from danmcp/master (dmcphers@redhat.com)
  - Merge pull request #1117 from mscherer/fix_better_cgroup_listing
    (dmcphers+openshiftbot@redhat.com)
  - Bug 874594 Bug 888550 (dmcphers@redhat.com)
  - Bug 904100: Tolerate missing Endpoint cart manifest entries
    (ironcladlou@gmail.com)
  - BZ896406 - warning message when installing rubygem-openshift-origin-node
    (bleanhar@redhat.com)
  - BZ876324 resolve ServerName/NameVirtualHost situation for
    node/broker/ssl.conf (lmeyer@redhat.com)
  - Switch calling convention to match US3143 (rmillner@redhat.com)
  - adding a dash in the authorized key entry comment to make it more readable
    (abhgupta@redhat.com)
  - fix for bug 894948 (abhgupta@redhat.com)
  - fix and factorise the function for the list of users as openshift_users do
    not match on the same exact list of people than valid_user ( due to code
    duplication and subtle difference between the copies ) (misc@zarb.org)


author: Adam Miller <admiller@redhat.com> 1.3.5-1
changelog:
  - BZ 901449: An SELinux issue prevents forces this script to use system ruby
    and not the SCL version. (rmillner@redhat.com)


author: Dan McPherson <dmcphers@redhat.com> 1.3.4-1
changelog:
  - Bug 901444 (dmcphers@redhat.com)
  - SSL support for custom domains. (mpatel@redhat.com)
  - Replace expose/show/conceal-port hooks with Endpoints (ironcladlou@gmail.com)


author: Adam Miller <admiller@redhat.com> 1.3.3-1
changelog:
  - Fix BZ875200: Add statements to rhcsh ctl_all (pmorie@gmail.com)
  - Merge pull request #1141 from pmorie/bugs/877306
    (dmcphers+openshiftbot@redhat.com)
  - Merge pull request #1140 from pmorie/bugs/877305
    (dmcphers+openshiftbot@redhat.com)
  - Fix usage for oo-admin-ctl-cgroups (pmorie@gmail.com)
  - Add newline to each user for oo-admin-ctl-cgroups stopall (pmorie@gmail.com)


author: Adam Miller <admiller@redhat.com> 1.3.2-1
changelog:
  - Merge pull request #1120 from sosiouxme/BZ876324
    (dmcphers+openshiftbot@redhat.com)
  - BZ876324 resolve ServerName/NameVirtualHost situation for
    node/broker/ssl.conf (lmeyer@redhat.com)
  - Update rhc command usage. Addresses BZ889018. (asari.ruby@gmail.com)
  - Typo. (rmillner@redhat.com)
  - BZ 888410: The reader sequence can block if there is too much stderr
    (rmillner@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.2.6-1
changelog:
  - Merge pull request #1007 from sosiouxme/US3036-origin
    (openshift+bot@redhat.com)
  - Adding oo-accept-systems script for verifying all node hosts from the broker.
    - also verifies cartridge consistency and checks for stale cartridge cache.
    oo-accept-node sanity checks public_ip and public_hostname. Minor edits to
    make node.conf easier to understand. (lmeyer@redhat.com)
  - Fix tests.  The file mock was not working. (rmillner@redhat.com)
  - Post rebase code cleanup. (rmillner@redhat.com)
  - Proper host name validation. (rmillner@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.2.5-1
changelog:
  - bug 884409 (dmcphers@redhat.com)
  - Merge pull request #1023 from ramr/dev/websockets (openshift+bot@redhat.com)
  - Fix frontend httpd tests. (ramr@redhat.com)
  - Node web sockets and http(s) proxy support with spec file and package.
    (ramr@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.2.4-1
changelog:
  - Fix for Bug 883605 (jhonce@redhat.com)
  - updated gemspecs so they work with scl rpm spec files. (tdawson@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.2.3-1
changelog:
  - Merge pull request #1005 from ironcladlou/US2770 (openshift+bot@redhat.com)
  - Refactor tidy into the node library (ironcladlou@gmail.com)
  - Bug Fixes. (rmillner@redhat.com)
  - Move add/remove alias to the node API. (rmillner@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.2.2-1
changelog:
  - Move force-stop into the the node library (ironcladlou@gmail.com)
  - exit code and usage cleanup (dmcphers@redhat.com)
  - Merge pull request #962 from danmcp/master (openshift+bot@redhat.com)
  - Merge pull request #905 from kraman/ruby19 (openshift+bot@redhat.com)
  - add oo-ruby (dmcphers@redhat.com)
  - F18 compatibility fixes   - apache 2.4   - mongo journaling   - JDK 7   -
    parseconfig gem update Bugfix for Bind DNS plugin (kraman@gmail.com)


author: Troy Dawson <tdawson@redhat.com> 1.1.7-2
changelog:
  - Fixed source, change from tar to gem
  - added source1, not in the gem.
  - Fix http conf file to work with httpd 2.4.2+
  - clean up spec


author: Adam Miller <admiller@redhat.com> 1.1.7-1
changelog:
  - BZ877125 - File attributes on open shift-cgroups init script are incorrect,
    should be -rwxr-x--- (calfonso@redhat.com)
  - more ruby1.9 changes (dmcphers@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.1.6-1
changelog:
  - Ruby 1.9 compatibility fixes (ironcladlou@gmail.com)
  - getting specs up to 1.9 sclized (dmcphers@redhat.com)
  - Merge pull request #886 from rmillner/inhibitidler (dmcphers@redhat.com)
  - One of the SELinux denials was accessing the locale file via whois which is
    unnecessary if accessing /etc directly. (rmillner@redhat.com)
  - specifying rake gem version range (abhgupta@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.1.5-1
changelog:
  - Merge remote-tracking branch 'origin-server/master' into BZ874587-origin
    (bleanhar@redhat.com)
  - Merge pull request #881 from rmillner/wrongmcs (openshift+bot@redhat.com)
  - SS -> OPENSHIFT (dmcphers@redhat.com)
  - Was setting mcs label in the wrong place. (rmillner@redhat.com)
  - Fix for Bug 875949 (jhonce@redhat.com)
  - Bug 874587 - CLOUD_NAME in /etc/openshift/node.conf does not work
    (bleanhar@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.1.3-1
changelog:
  - Merge pull request #857 from jwhonce/dev/bz874712_master
    (openshift+bot@redhat.com)
  - Fix for Bug 874712 (jhonce@redhat.com)


author: Adam Miller <admiller@redhat.com> 1.1.2-1
changelog:
  - Merge pull request #851 from brenton/no_trace (openshift+bot@redhat.com)
  - BZ873970, BZ873966 - disabling HTTP TRACE for the Broker, Nodes and Console
    (bleanhar@redhat.com)
  - Increase the table sizes to cover 15000 nodes in dev and prod.
    (rmillner@redhat.com)
  - BZ872523 - set quota for gear failed if the device name is too long
    (bleanhar@redhat.com)
  - Merge pull request #698 from mscherer/fix_doc_node_bin
    (openshift+bot@redhat.com)
  - do not use old name in the script help message (mscherer@redhat.com)


author: Jaromir Capik <jcapik@redhat.com> - 1.20.6-26
changelog:
  - Removing bundled 'inputattach' tool (#875604)
  - ...gonna be shipped separately (linuxconsoletools)


author: Zdenek Prikryl <zprikryl@redhat.com> 1.20.6-6
changelog:
  - Don't complain if installing with --excludedocs (#515927)
  - Drop unnecessary capabilities in gpm (#517659)


author: Zdenek Prikryl <zprikryl@redhat.com> - 1.20.5-1
changelog:
  - Updated to 1.20.5
  - Removed doc patch
  - Removed lisp stuff, it is part of emacs-common now 
  - Spec clean up


author: Zdenek Prikryl <zprikryl@redhat.com> - 1.20.3-1
changelog:
  - Updated to 1.20.3
  - Fixed init script to comply with LSB standard (#246937)
  - Mass patch cleanup
  - Fixed typo in doc (#446679)


author: Petr Rockai <prockai@redhat.com> - 1.20-1-76
changelog:
  - align sleeps to tick boundary, should reduce cpu wakeups
    on laptops, fixes #205064 (patch by Arjan van de Ven)
  - disable gpm altogether in runlevel 5, it is probably not
    worth the overhead considering it is barely used at all


author: Petr Rockai <prockai@redhat.com> - 1.20.1-75
changelog:
  - fix a bug where gpm daemon kept stdin/out/err open after
    detaching from terminal, causing eg. pipes from initscript
    to hang for the lifetime of gpm


author: Petr Rockai <prockai@redhat.com> 1.20.1-73
changelog:
  - do not ooops in gpm when console device cannot be found, print
    an error message instead and exit(1), as per BR 140025, 176178
  - do not print messages in libgpm, unless envvar GPM_VERBOSE
    is set -- avoids unwanted clutter from libgpm in apps like dialog
    or mc when gpm is not available


author: Adrian Havill <havill@redhat.com> 1.20.1-64
changelog:
  - fixing multilib conflict (#135305):
    o remove buildsys check/conditional for gziping info pages (let rpm
      do it)
    o don't pre-byte-compile emacs code


author: Adrian Havill <havill@redhat.com> 1.20.1-61
changelog:
  - remove unnecessary diagnostic and check of the consolename (#129962)
  - remove /etc/sysconfig/gpm; set unset defaults in the init script instead
    after mousecfg is (or is not) read


author: Florian La Roche <laroche@redhat.com>
changelog:
  - sysconfig/gpm should probably go away, that is more confusing than
    helping anyone
  - read at least sysconfig/gpm first as it seems to have the default values
    and sysconfig/mouse is getting probed values and probably has better
    settings in it.


author: Adrian Havill <havill@redhat.com> 1.20.1-57
changelog:
  - read both the sysconfig/mouse and sysconfig/gpm (preferrence to gpm
    settings), not just one of them, if both exist (#134389)


author: Adrian Havill <havill@redhat.com> 1.20.1-54
changelog:
  - change init so that MOUSECFG fallsback to /etc/sysconfig/gpm if
    /etc/sysconfig/mouse doesn't exist (#133141)
  - fixed compile vs new kernheaders (#131783)


author: Adrian Havill <havill@redhat.com> 1.20.1-46
changelog:
  - revise nodebug patch as liblow reporting the VC to the console through
    stderr has re-appeared (#117676)


author: Adrian Havill <havill@redhat.com> 1.20.1-43
changelog:
  - add event device (for 2.6 kernel) superpatch-- includes all
    patches up to release 38; thanks to Dmitry Torokhov
  - change default mouse device over to /dev/input/mice
  - set mouse type to Intellimouse Explorer (exps2), which is what
    the 2.6 kernel exports by default


author: Adrian Havill <havill@redhat.com> 1.20.1-35
changelog:
  - remove debug output from gpm_report() to prevent spurious
    debugging msgs even when not in debug mode (#98210)


author: Adrian Havill <havill@redhat.com> 1.20.1-33
changelog:
  - reversed -t and -m params in init script, removed $OPTION
  - add doc blurb regarding no auto-repeat with multiple mice


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - don't link against -lncurses, instead make wgetch and stdscr weak
    undefined symbols to break library dependency cycle


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Revert to the version from 7.2 because later versions have some grave
    issues I can't {reproduce,debug} with my hardware, such as


author: Preston Brown <pbrown@redhat.com>
changelog:
  - security patch on socket descriptor from Chris Evans.  Thanks Chris.
  - include limits.h for OPEN_MAX


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - 1.19.1
  - call initgroups in gpm-root before spawning command as user
  - make gpm-root work on big endian


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.19.0
  - fix build on systems that don't have emacs
    (configure built t-mouse* only if emacs was installed)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - make sure all binaries are stripped, make init stuff more chkconfig style
  - removed sparc-specific mouse stuff
  - bumped libver to 1.17.5
  - fixed texinfo source


author: Donald Barnes <djb@redhat.com>
changelog:
  - upgraded from 1.10 to 1.12
  - added status/restart functionality to init script
  - added define LIBVER 1.11


author: Stu Tomlinson <stu@nosnilmot.com> 2.10.5-1
changelog:
  - Update to 2.10.5, CVE-2012-3374
  - Allow building only libraries (#831364)
  - Revive FT crash prevention patch


author: Jon Ciesla <limburgher@gmail.com> - 2.10.4-1
changelog:
  - Update to 2.10.4, CVE-2012-2214, CVE-2012-2318, BZ 806839, 819454.
  - Port to farstream patch upstreamed.


author: Jon Ciesla <limburgher@gmail.com> - 2.10.2-1
changelog:
  - Update to 2.10.2, BZ 803293, 803299.
  - Dropping MSN patches.  Protocol patch not needed, won't connect
  - to 16 by default.  Crash patch was upstreamed.
  - Dropped nm09 patch, upstreamed.


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.7.3-2
changelog:
  - use _isa in explicit Requires on libpurple to prevent yum from trying to 
    jump architectures to resolve dependency


author: Stu Tomlinson <stu@nosnilmot.com> 2.7.1-5
changelog:
  - Rebuild against newer libedataserver
  - spec file cleanup:
      replace %define with %global
      replace tabs with spaces for consistency
      mark prefs.xml as a config file


author: Stu Tomlinson <stu@nosnilmot.com> 2.7.1-1
changelog:
  - 2.7.1
  - Adds Direct Connection support for MSN
  - Numerous bug fixes
  - Evolution support moved to pidgin-evolution for F13+ (#581144)


author: Stu Tomlinson <stu@nosnilmot.com> 2.7.0-2
changelog:
  - Upstream backports:
      3c30f64efedafc379b6536852bbb3b6ef5f1f6c9 - fix for receiving HTML on ICQ
      13fbe0815f84d5b3c001947559f5818c10275f4c - prevent null deref on disconnecting account (#592750)
      c4a874926d07b8597db4b78a181a89cf720a8418 - fix blinking tray icon on new message (#592691)
      cfe0e649dda34d9252d40d8f67e445336a247998 - prevent race condition on Yahoo! login
      e3dd36706068f3b8eabd630ff71d270c145cce42 - fix crash in Oscar (#548128)
      13fbe0815f84d5b3c001947559f5818c10275f4c - fix crash during network disconnect (#592750)


author: Stu Tomlinson <stu@nosnilmot.com> - 2.7.0-1
changelog:
  - 2.7.0 with features, bug fixes and a security fix: CVE-2010-1624 (#591806)
  - Use System SSL Certificates (#576721)
  - Add additional dependencies for Voice + Video (#581343)
  - Upstream backport:
      87ada76abf90c44e615679efc5f8128bb941bba1 Reduce MSN traffic


author: Warren Togami <wtogami@redhat.com> - 2.6.6-2
changelog:
  - Upstream backports:
      0e3079d15adeb12c1e57ceaf5bf037f9b71c8abd Fix AIM SSL clientLogin
      b14ee507e932a395a0e1f29298af162c8614ca0f Fix AIM clientLogin with proxy


author: Warren Togami <wtogami@redhat.com> - 2.6.6-1
changelog:
  - 2.6.6 with security and numerous minor bug fixes
    CVE-2010-0277 CVE-2010-0420 CVE-2010-0423
  - Bug #528796: Get rid of #!/usr/bin/env python


author: Warren Togami <wtogami@redhat.com> 2.6.2-2
changelog:
  - Upstream backports:
      97e003ed2bc2bafbb993693c9ae9c6d667731cc1 aim-buddy-status-grab
      37aa00d044431100d37466517568640cb082680c yahoo-buddy-idle-time
      40005b889ee276fbcd0a4e886a68d8a8cce45698 yahoo-status-change-away
      cb46b045aa6e927a3814d9053c2b1c0f08d6fa62 crash-validate-jid


author: Stu Tomlison <stu@nosnilmot.com> 2.5.8-2
changelog:
  - Backport patch from upstream to enable NSS to recognize root CA
    certificates that use MD2 & MD4 algorithms in their signature, as
    used by some MSN and XMPP servers


author: Warren Togami <wtogami@redhat.com> 2.5.2-6
changelog:
  - Automatically detect booleans to enable build features from dist tag
  - Unify RHEL4 and RHEL5 spec with Fedora to make both easier to maintain


author: Warren Togami <wtogami@redhat.com> 2.5.2-2
changelog:
  - Upstream backports:
    100: sametime-redirect-null crash
    101: NetworkManager-improvement
    102: no-password-in-dialog-if-not-remembering
    103: temporarily-remember-password-during-auto-reconnect
    104: smilie-theme-change-crash
    105: url_fetch_connect_cb-double-free crash
    106: GtkIMHtmlSmileys-remove-crash
    107: remove-dialog-from-open-dialog-list


author: Stu Tomlinson <stu@nosnilmot.com> 2.5.1-3
changelog:
  - Backport fixes from upstream:
    Add "Has You:" back to MSN tooltips
    Fix crash during removal of your own buddy icon
    Fix crash when handling self signed certificate with NSS SSL


author: Stu Tomlinson <stu@nosnilmot.com> 2.4.1-3
changelog:
  - Rebuild for new evolution-data-server
  - Clean up default prefs.xml
  - Enable nautilus integration plugin by default in prefs.xml (#242289)


author: Warren Togami <wtogami@redhat.com> - 2.2.0-2
changelog:
  - License clarification
  - Backport patches to fix memory leaks
  - Backport patches to fix proxy settings & status scores


author: Warren Togami <wtogami@redhat.com> - 2.1.0-2
changelog:
  - Upstream fix backports
    115: gmail-notification-crash #2323
    117: drag-and-drop-mouse-click-group-header #2333
    118: jabber-confirm-authentication-unencrypted-crash #2493


author: Stu Tomlinson <stu@nosnilmot.com> - 2.1.0-1
changelog:
  - 2.1.0
  - Only include translations in libpurple instead of duplicating them in
    packages that depend on libpurple anyway


author: Stu Tomlinson <stu@nosnilmot.com> - 2.0.1-4
changelog:
  - Fix purple-remote for AIM & ICQ accounts (#240589)
  - Add missing Requires to -devel packages
  - Add missing BuildRequires for libxml2-devel


author: Stu Tomlinson <stu@nosnilmot.com> - 2.0.0-1
changelog:
  - 2.0.0
  - Add scriptlets to install & uninstall GConf schemas
  - Move schema file from libpurple to Pidgin to avoid GConf
    dependencies in libpurple
  - rename gaim-fedora-prefs.xml to purple-fedora-prefs.xml


author: Stu Tomlinson <stu@nosnilmot.com>
changelog:
  - Update Gtk icon cache when installing or uninstalling (#238621)
  - Don't own all directories we put icons in


author: Warren Togami <wtogami@redhat.com> - 2.0.0-0.35.beta7devel
changelog:
  - upstream insists that we remove the Epoch
    rawhide users might need to use --oldpackage once to upgrade
  - remove mono and howl cruft


author: Stu Tomlinson <stu@nosnilmot.com> - 2:2.0.0-0.34.beta7devel
changelog:
  - Split into pidgin, finch & libpurple, along with corresponding -devel RPMs
  - Remove ldconfig for plugin directories
  - Fix non-UTF8 %changelog


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.33.beta7devel
changelog:
  - pidgin-2.0.0 snapshot prior to beta7
  - rename gaim to pidgin/purple/finch in various places of spec (not complete)
  - ExcludeArch s390, s390x.  It never did work there.
  - Include meanwhile plugin by moving to Extras


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.31.beta6
changelog:
  - Removed debian-02_gnthistory-in-gtk
    Removed debian-03_gconf-gstreamer.patch
    Upstream recommended removing these patches.
  - Add fix-buggy-fetch-url
  - Enable type_chat and type_chat_nick in default prefs.xml


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.22.beta5
changelog:
  - 2.0.0 beta5
  - Debian patches
      02_gnthistory-in-gtk
      03_gconf-gstreamer
      04_blist-memleak
      05_url-handler-xmpp
      06_jabber-registration-srv
      07_msn-custom-smiley-crash
  - SILC Account Edit Crash


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.19.beta4
changelog:
  - buildreq NetworkManager-glib-devel FC5+ (katzj)
  - #213800 debug window freeze fix
  - #212818 IRC SIGPIPE crash fix


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.17.beta4
changelog:
  - temporary workaround for gstreamer build bug in beta4
    --enable-gstreamer prevented it from working =)
    NOTE: beta4 removed libao support entirely.  Distros that lack gstreamer-0.10+
    will need to use command line sound output from now on.
  - Gadu Gadu is re-included in beta4 without requirement of external library


author: Warren Togami <wtogami@redhat.com> 2.0.0-0.3.beta3
changelog:
  - more spec cleanups
  - buildreq libXScrnSaver-devel, gettext, intltool, desktop-file-utils
  - disable mono for now due to #196877


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-9
changelog:
  - Ensure that security opt flags are used (#165795)
  - Many bug fixes from Peter Lawler (#171350)
    156: Fix Yahoo chatroom ignore on join
    157: Fix Italian yahoo profiles
    158: Strip HTML from status
    159: xmlnode cleanup
    160: Fix crash on non-terminated strings
    161: silc-close-gaim_request-window-prpl-disconnect-p1
    162: silc-close-gaim_request-window-prpl-disconnect-p2
    163: silc-close-gaim_request-window-prpl-disconnect-p3
    164: silc-close-gaim_request-window-prpl-disconnect-p4
    165: silc-close-gaim_request-window-prpl-disconnect-p5
    166: silc-close-gaim_request-window-prpl-disconnect-p6
    167: MSN data corruption fix
    168: msn-kill-convo-close-timeout-notices-p1
    169: msn-kill-convo-close-timeout-notices-p2
    170: msn-kill-convo-close-timeout-notices-p3
    171: forceful-connection_disconnect-not-wipe-password
    172: Clipboard leak and history scrolling fix
    173: smileys-logtype-p1
    174: smileys-logtype-p2
    175: Allow Italics in IRC
    176: Add more authors
    177: Update copyright
    178: Update HACKING doc
    179: Fix doc creation
    180: Fix AIM/ICQ Rate Limiting issue


author: Ray Strode <rstrode@redhat.com> - 1:1.5.0-7
changelog:
  - use upstream desktop file (except use generic name, because 
    this is our default instant messaging client)


author: Peter Jones <pjones@redhat.cm> - 1:1.5.0-4
changelog:
  - rebuild for new cairo, add -Wno-pointer-sign
  - add -Wno-pointer-sign until somebody maintaining this package makes it build
    without it.


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-2
changelog:
  - always use -z relro and FORTIFY_SOURCE opt flags for FC3+ and RHEL4+ 
    (compiler simply ignores these flags if they are unsupported)


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-1
changelog:
  - 1.5.0 security and bug fixes
    CAN-2005-2370 Gadu-Gadu memory alignment bug
    CAN-2005-2102 AIM/ICQ non-UTF-8 Filename Crash
    CAN-2005-2103 AIM/ICQ away message buffer overflow


author: Warren Togami <wtogami@redhat.com> 1:1.4.0-5
changelog:
  - FC5+ automatic -fstack-protector-all switch
  - 150: MSN buddy names with space disconnect and profile corruption
         (supercedes patch 149)
  - 151: Gadu Gadu memory alignment crash
  - 152: Rename Group Merge crash
  - 153: mailto: parse crash (util.c)
  - 154: mailto: parse crash (MSN)
  - 155: mailto: parse crash (Zephyr)


author: Warren Togami <wtogami@redhat.com> 1:1.4.0-4
changelog:
  - 149: MSN username with space disconnect fix
  - Do not own perl dir, remove empty files (#162994 jpo)


author: Warren Togami <wtogami@redhat.com> 1:1.3.1-0
changelog:
  - 1.3.1 more bug fixes
    CAN-2005-1269 CAN-2005-1934
  - enable Message Notification plugin by default


author: Warren Togami <wtogami@redhat.com> 1:1.3.0-1
changelog:
  - 1.3.0 many bug fixes and two security fixes
    long URL crash fix (#157017) CAN-2005-1261
    MSN bad messages crash fix (#157202) CAN-2005-1262


author: Warren Togami <wtogami@redhat.com> 1:1.1.4-4
changelog:
  - 144: POSIX functions became macros, build fix (#150429)
  - 145: Fix non-proxy yahoo file transfer
  - 146: Fix non-proxy yahoo buddy icons


author: Warren Togami <wtogami@redhat.com> 1:1.1.4-1
changelog:
  - 1.1.4 with MSN crash fix, g_stat() crash workaround
    CAN-2005-0208 Gaim HTML parsing DoS (another one)


author: Warren Togami <wtogami@redhat.com> 1:1.1.3-2
changelog:
  - 1.1.3 including two security fixes
    CAN-2005-0472 Client freezes when receiving certain invalid messages
    CAN-2005-0473 Client crashes when receiving specific malformed HTML


author: Warren Togami <wtogami@redhat.com> 0.82-1
changelog:
  - Update to 0.82 resolves several security issues and bugs
    CAN-2004-0500, CAN-2004-0754, CAN-2004-0784, CAN-2004-0785
    More details at http://gaim.sourceforge.net/security/


author: Warren Togami <wtogami@redhat.com> 0.81-4
changelog:
  - conditionalize features for alternate target distributions
  - remove unnecessary ExclusiveArch
  - other cleanups


author: Warren Togami <wtogami@redhat.com> 0.81-3
changelog:
  - CVS backport 133: CAN-2004-0500 MSNLP buffer overflow
                 134: Select buddy icon in new account crash
                 135: Jabber join crash
                 136: Jabber tooltip fake self crash


author: Warren Togami <wtogami@redhat.com> 0.81-1
changelog:
  - 0.81
  - krb5-devel for Zephyr
  - evolution-data-server-devel integration
    plugin disabled by default because it seems very unstable


author: Warren Togami <wtogami@redhat.com> 0.80-1
changelog:
  - update to 0.80
  - enable ExtPlacement plugin by default
  - Smiley Theme "Default" by default (bug fix)
  - Insertions -> Control-{B/I/U} by default


author: Warren Togami <wtogami@redhat.com> 0.79-2
changelog:
  - remove tray icon patch temporarily because it seems to cause more
    problems than it solves.
  - provide gaim-devel
  - CVS backport 128: Cached buddy icons fix


author: Warren Togami <wtogami@redhat.com> 0.79-1
changelog:
  - update to 0.79
  - update desktop patch
  - update header and pkgconfig locations
  - update default prefs
  - FC3 sed behavior workaround
  - temporarily disable evolution integration


author: Warren Togami <wtogami@redhat.com> 0.78-7
changelog:
  - CVS backport 125: MSN disconnect on non-fatal error fix
                 126: Paste html with img crash fix
                 127: Misplaced free fix


author: Warren Togami <wtogami@redhat.com> 0.77-7
changelog:
  - CVS backport 121: byte order badness and crashing copy & paste fix
                 122: history.so scroll to bottom in new tabs fix


author: Warren Togami <wtogami@redhat.com> 0.77-6
changelog:
  - CVS backport 118: x86-64 yahoo auth fix
                 119: Copy/paste fixes for UCS-2 encoded selection
                 120: IRC reconnect segfault fix
  - remove relnot.so plugin because it is unusable in FC
  - Default enable logging and history.so plugin
            enable autoreconnect plugin
  - Fix Gnome Default url handler


author: Warren Togami <wtogami@redhat.com> 0.77-3
changelog:
  - remove gnome-open manual, since 0.77 has "GNOME Default" as default.
  - update default prefs.xml, disable buddy icons in buddy list
  - CVS backport 114: plugin prefs saving fix
                 115: autoreconn-suppress-dialogs
                 116: fix smileys in dialogs
                 117: gtk+ 2.0 compat


author: Warren Togami <wtogami@redhat.com> 0.76-6
changelog:
  - CVS backports:
    111 Prevent Crash during password change if blank fields
    112 Prevent Crash if remote sends invalid characters
    113 Enable /etc/gaim/prefs.xml defaults for new profiles
  - Tray Icon enabled by default
  - Relabel internal version with V-R


author: Warren Togami <wtogami@redhat.com> 0.76-5
changelog:
  - CVS backports: 
    102 Fix ^F keybinding when gtkrc is set to emacs mode
    103 Add Missing File: evolution-1.5.x buildability
    104 When MSN server intermittently has problems accessing buddy list, MSN will crash with 0.76
    105, 106, 107 MSN Error reporting fixes
    108 History plugin causes unnecessary horizontal scrollbars
    109 Fix the text replace plugin 
    110 Prevent message sending while offline


author: Warren Togami <wtogami@redhat.com>
changelog:
  - CVS snapshot, generated with automake-1.7.9
  - update #4
  - update #2 but disable
  - #5 no longer needed
  - default to gnome-open #6
  - some spec cleanup


author: Christopher Blizzard <blizzard@redhat.com> 1:0.75-1.1.0
changelog:
  - Include patch that fixes a bunch of buffer-related problems, mostly
    from nectar@freebsd.org and some of my own changes.


author: Christopher Blizzard <blizzard@redhat.com> 1:0.75-0
changelog:
  - Update to 0.75.
  - Remove mem leak patch that is already included in 0.75.
  - Clean up a lot of old unused patches and old source tarballs.


author: Christopher Blizzard <blizzard@redhat.com> 0.59-7
changelog:
  - Include patch that uses htmlview instead of calling Netscape
    directly
  - Include patch that turns off the buddy ticker and changes the button
    look to the (sane) default.


author: Tim Powers <timp@redhat.com>
changelog:
  - updated to 0.11.0pre2
  - enable gnome support
  - updated ispell to aspell patch
  - cleaned up file list


author: Tim Powers <timp@redhat.com>
changelog:
  - some ideas taken from the package available at the gaim website, mainly to install the applet stuff too.


author: Tim Powers <timp@redhat.com>
changelog:
  - cleaned up spec for use with RPM 4.0 (al la _sysconfdir _datadir etc)
  - update to 0.9.17
  - yay! a man page!


author: Martin Gieseking <martin.gieseking@uos.de> 2.5.0-1
changelog:
  - Updated to new upstream release.
  - Removed patch that fixed missing includes (has been applied upstream).


author: Martin Gieseking <martin.gieseking@uos.de> 2.0.1-1
changelog:
  - updated to new upstream release
  - the new release no longer provides and depends on jsonxx, thus removed the virtual Provides for the bundled library


author: Martin Gieseking <martin.gieseking@uos.de> 1.4.0-3
changelog:
  - added virtual Provides for bundled jsonxx library
  - added patch to replace calls of deprecated Boost functions in Fedora >= 15


author: Martin Gieseking <martin.gieseking@uos.de> 1.4.0-2
changelog:
  - explicitely BR java/java-devel epoch/version >= 1:1.6.0
  - removed BR: php
  - move Provides filters to the top
  - changed license to ASL 2.0 and BSD
  - removed -O3 from CFLAGS/CXXFLAGS
  - preserve timestamps of zorba.jar and css files
  - link private json library statically
  - added missing %defattr in php subpackage


author: Michel Salim <salimma@fedoraproject.org> - 0.1.12-2
changelog:
  - invoke ldconfig on (un)install
  - remove %clean section; only targeting F-14+
  - re-enable deletion of invalid locale dir


author: Jon Ciesla <limb@jcomserv.net> - 4.3-1
changelog:
  - New upstream.
  - S_ISCHR patch upstreamed.
  - parallel patch updated.
  - Cleaned up some file encodings.


author: Stepan Kasal <skasal@redhat.com> - 4.1-3
changelog:
  - build the TTY driver (it was disabled since it first appered in 3.7.2-1)
  - build with speech-dispatcher, packed into a separate sub-package


author: Stepan Kasal <skasal@redhat.com> - 4.1-2
changelog:
  - move data-directory back to default: /etc/brltty
  - move brltty to /bin and /lib, so that it can be used to repair the system
    without /usr mounted (#276181)
  - move vstp and libbrlttybba.so to brlapi
  - brltty no longer requires brlapi
  - brlapi now requires brltty from the same build


author: Stepan Kasal <skasal@redhat.com> - 4.1-1
changelog:
  - new upstream version
  - use --disable-stripping instead of make variable override
  - install the default brltty-pm.conf to docdir only (#526168)
  - remove the duplicate copies of rhmkboot and rhmkroot from docdir
  - patch configure so that the dirs in summary are not garbled:
    brltty-autoconf-quote.patch
  - move data-directory to ${datadir}/brltty


author: Stepan Kasal <skasal@redhat.com> - 4.0-2
changelog:
  - escape rpm macros in the rpm change log
  - add requires to bind subpackages from one build together


author: Stepan Kasal <skasal@redhat.com> - 4.0-1
changelog:
  - new upstream version
  - drop upstreamed patches; ./autogen not needed anymore
  - pack the xbrlapi server; move its man page to brlapi package
  - add man-page for brltty.conf (#526168)


author: Stepan Kasal <skasal@redhat.com> - 3.10-4
changelog:
  - own the tcl subdirectory (#474032)
  - set CPPFLAGS to java include dirs, so that the java bindings build with
    any java implementation (#498964)
  - add --without-curses; there is no curses package BuildRequired anyway


author: Stepan Kasal <skasal@redhat.com> - 3.10-1
changelog:
  - new upstream release
  - drop brltty-3.9-java-svn.patch, brltty-3.9-tcl85path.patch,
    and brltty-3.9-pyxfix.patch, they are upstream
  - fix BuildRoot
  - fix many sub-packages' Requires on brlapi


author: Stepan Kasal <skasal@redhat.com> - 3.9-3
changelog:
  - add brltty-3.9-autoconf.patch to fix to build with Autoconf 2.62
  - add brltty-3.9-parallel.patch to fix race condition with parallel make
  - add brltty-3.9-pyxfix.patch to fix build with current pyrex
  - Summary lines shall not end with a dot


author: Tomas Janousek <tjanouse@redhat.com> - 3.8-1
changelog:
  - update to latest upstream
  - added the at-spi driver, tcl and python bindings
  - fixed the license tags


author: Adrian Havill <havill@redhat.com> 3.2-2
changelog:
  - changed spec "Copyright" to "License"
  - use %configure macro, %{_libdir} for non-ia32 archs
  - removed unnecessary set and unset, assumed/default spec headers
  - fixed unpackaged man page, duplicate /bin and /lib entries
  - use plain install vs scripts for non-i386 buildsys


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.21-1
changelog:
  - New upstream version 1.2.21.
  - Change %define to %global.
  - Use upstream RPM 4.8 OCaml dependency generator.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.20-2
changelog:
  - The final license of the code is LGPLv2+ with the OCaml linking
    exception.  It was derived from earlier BSD code.
  - Don't duplicate the license files across base and -devel packages.
  - Add note to spec about inclusion of *.ml file in -devel package.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.5-3
changelog:
  - Force signed chars when compiling, as per comment from upstream author.
  - Remove the part in the description which says this is only
    supported on little endian architectures.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.5-2
changelog:
  - Remove ExclusiveArch, but add a Fedora README file warning about
    shortcomings on non-x86 architectures.
  - Added missing dependency ocaml-type-conv.
  - Move *.ml file to devel package.


author: Rex Dieter <rdieter@fedoraproject.org> - 1.5.1-2
changelog:
  - %build: revert back to --with-pam-dir=/%{_lib}/security/ (#951456)
  - %build: drop --enable-gcov (developer-only option, not needed here)
  - drop unused patches
  - -pam: drop extra %doc stuff (included already in Required base pkg)
  - use %caps(cap_ipc_lock=ep) .../mate-keyring-daemon (see also #668831)


author: Dan Mashal <dan.mashal@fedoraproject.org> - 1.5.0-4
changelog:
  - Fix compilation errors
  - Rework specfile
  - Update configure flags
  - Add latest upstream commits patch


author: Leigh Scott <leigh123linux@googlemail.com> - 1.4.0-13
changelog:
  - Drop requires pam and glib2-devel
  - Drop build requires mateconf-devel, mate-doc-utils, mate-desktop and libselinux-devel
  - Swap build requires dbus-glib-develfor dbus-devel


author: Leigh Scott <leigh123linux@googlemail.com> - 1.4.0-12
changelog:
  - Fix directory ownership
  - Remove desktop-file-utils build requires and validation on xdg files
  - Remove surplus configure options
  - Drop un-needed build requires
  - Add requires pam to pam sub-package
  - Re-add sed command to avoid unneeded direct dependencies
  - Fix permissions on mate-keyring-daemon


author: Wolfgang Ulbrich <chat-to-me@raveit.de> - 1.4.0-7
changelog:
  - fix mixed use of $RPM_BUILD_ROOT & %{buildroot}
  - rename patch to mate
  - fix requires in -devel
  - fix scriplet sections


author: Aleš Kozumplík <ales@redhat.com> - 0.2.22-1.git97180b8
changelog:
  - move is_glob_pattern() to dnf.util (Ales Kozumplik)
  - validate parameter never used in Base.read_repos() (Ales Kozumplik)
  - cosmetic: refactor: getReposFromConf*() -> read_*_repos() (Ales Kozumplik)
  - refactor: introduce Cli.command property. (Ales Kozumplik)
  - repos: get rid of Base.prerepoconf. (Ales Kozumplik)
  - repos: simplify how repos are set up. (Ales Kozumplik)
  - always use iniparse, do not fallback to ConfigParser. (Ales Kozumplik)
  - 'dnf repolist' is silent. (Ales Kozumplik)
  - enabling/disabling repos doesn't respect the cmdline order. (RhBug:913143) (Ales Kozumplik)
  - install by filenames and globbed filenames (RhBug:912130) (Ales Kozumplik)
  - doc: man page: better describe the input patterns. (Ales Kozumplik)
  - tests: test_installroot_with_etc() broken on other machines. (Ales Kozumplik)
  - fix globbing installs again. (Ales Kozumplik)
  - 'dnf list' shouldn't look for provides. (Ales Kozumplik)
  - pass installroot to the sack. (RhBug:915048) (Ales Kozumplik)
  - fix traceback in Cli.configure() with --installroot (Ales Kozumplik)
  - at least do not traceback if history undo doesn't work. (Ales Kozumplik)
  - adapt to new interface hawkey.Subject interface (34bae0c) (Ales Kozumplik)
  - search: try to make the better matches come on top. (Ales Kozumplik)
  - search: perform the search case-insensitive. (Ales Kozumplik)
  - tests: bring the cli.search() method under the test. (Ales Kozumplik)
  - repo: when reverting repomd.xml make sure we reset its srcfile (RhBug:904706) (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.2.21-1.git050524e
changelog:
  - Selector.get_best_selector() should be able to handle simple version (not just EVR). (Ales Kozumplik)
  - remove YumUtilBase(). (Ales Kozumplik)
  - Do not check for unfinished transactions in Base.buildTransaction() (RhBug:902810) (Ales Kozumplik)
  - list command accepts NEVRA combinations as arguments. (RhBug:901833) (Ales Kozumplik)
  - tests: fix Cli.configure() test to pass without the main system conffile present. (Ales Kozumplik)
  - tests: test toplevel from test_sanity. (Ales Kozumplik)
  - case-insensitive matching in Subject. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.2.20-2.gite7d9c11
changelog:
  - cosmetic: trailing whitespace in dnf.yum.callbacks (Ales Kozumplik)
  - rename 'YumBase' to 'Base'. (Ales Kozumplik)
  - remove base.yumvar property. (Ales Kozumplik)
  - Get rid of preconf. (Ales Kozumplik)
  - BaseConfig.overrides() (Ales Kozumplik)
  - YumOptionParser._non_nones2dict() (Ales Kozumplik)
  - cosmetic: trailing whitespace in dnf.yum.parser (Ales Kozumplik)
  - Make the Base object accessible from the toplevel 'dnf' module. (Ales Kozumplik)
  - Config option for the default userinput answer. (Ales Kozumplik)
  - tests: reflect changes to querying updates in hawkey commit 961ca40. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.2.20-1.gitdec970f
changelog:
  - fix '--exclude' command-line option (related RhBug:871892)
  - Introduce --best switch to force trying latest packages in transactions ( RhBug:882211)
  - fix '--disablerepo' (related RhBug:871892)
  - Tell RPM it's OK to downgrade during dist-sync (RhBug:894339)
  - 'dnf install' should skip already installed packages and say so. (RhBug:882851)


author: Aleš Kozumplík <ales@redhat.com> - 0.2.19-1.gitb901926
changelog:
  - options parsing: do not access repositories before cache_c is ready. (RhBug:889706)
  - move to the latest hawkey using libsolv-0.2.3


author: Aleš Kozumplík <ales@redhat.com> - 0.2.18-1.git3701ad6
changelog:
  - Allow specifying removal with 'name.arch' and others (RhBug:877449)
  - install: use Subject class to allow installation by provides (RhBug:880303)
  - Remove rpmdb_warn_checks() and friends. (RhBug:884623)
  - DNF should not allow .src.rpm installation (RhBug:884603).
  - Some DNF commands require different Goal/Solver configuration. (RhBug:873079)
  - Match ordinary package provides in 'dnf provides <provide>', not just files. (RhBug:871892)
  - doc: update how arguments to commands can be specified.


author: Aleš Kozumplík <ales@redhat.com> - 0.2.17-1.git6a055e6
changelog:
  - fix UnicodeDecodeError crash in history.py. (RhBug:877332)
  - Support the 'dnf upgrade-to' command.
  - fix: transaction traceback when rpmdb contains a package with no HDRID (RhBug:878823)
  - Enable 'dnf distro-sync'.


author: Aleš Kozumplík <ales@redhat.com> - 0.2.16-1.git9f050eb
changelog:
  - massive dead code removals accross the code base (3k LOC dropped)
  - fix match_counter.sorted() tracebacks if its empty. (RhBug:873875)
  - fix: callback error in some rpm transactions because of nonexistent Package.verEQ.
  - Plain 'dnf update' ignores packages with broken deps. (RhBug:872948)
  - support 'dnf upgrade' syntax to do the same thing as 'dnf update'.
  - refactor: YumCommand is just Command now.
  - Split Cli out of the YumBaseCli eintopf.
  - Enable 'dnf reinstall <pkg> again.


author: Aleš Kozumplík <ales@redhat.com> - 0.2.15-3.git5d85f6b
changelog:
  - support full NEVRA specification for the erase and install commands. (RhBug: 867553)
  - Enable check-update command. (RhBug: 868810)
  - Support listing patterned obsoletes.
  - fix traceback: list --showduplicates.


author: Aleš Kozumplík <ales@redhat.com> - 0.2.14-2.git4831982
changelog:
  - works against hawkey-0.3.0
  - search: sort so same matched keywords stay next to each other.
  - Add custom ABRT collector.
  - fix: _preload_file() does the right thing when destfn does not exist.
  - Make the logfiles readable by everyone.
  - yumRepo: log when we are leaving MD files behind and don't know why.
  - Support globs in the install command when multilib_policy is 'best'. (RhBug: 864710)
  - Fix failing unit tests on i686.


author: Aleš Kozumplík <ales@redhat.com> - 0.2.13-1.gitda60a96
changelog:
  - fix: traceback in YumBase.verifyTransaction() for local .rpms.
  - Enable the 'clean' command. (RhBug: 853940)
  - download no sqlite metadata.
  - Reenable the search command. (RhBug: 853940)


author: Aleš Kozumplík <ales@redhat.com> - 0.2.12-1.git832ecd1
changelog:
  - fix 'dnf --version'. (RhBug: 857710)
  - Latest hawkey compatibilities.
  - Run 'make check' when building the RPM.


author: Aleš Kozumplík <akozumpl@redhat.com> - 0.2.7-5.git632e1eb
changelog:
  - Clean dependencies during 'dnf erase'.
  - fixed: readline problems under pdb.
  - 'dnf info' now works.
  - removal: yum.sqlitesack, yum.packageSack and RPMDBPackageSack.


author: Aleš Kozumplík <akozumpl@redhat.com> - 0.2.4-3.gite3adb52
changelog:
  - Use cron to prefetch metadata.
  - Always loads filelists (attempts to fix some resolving problems).


author: Dmitrij S. Kryzhevich <krege@land.ru> - 0.120-6
changelog:
  - Upstream sources updated to 0.120-r1.
  - Remove bundle qtsingleapplication while rpm building.
  - Drop qtsingleapplication patch (applied in upstream).
  - Drop fix for LICENSE file (applied in upstream).


author: Dmitrij S. Kryzhevich <krege@land.ru> - 0.120-2
changelog:
  - post and postun scripts added.
  - Source0 changed for Packaging:SourceURL.
  - fix for © symbol in LICENSE.


author: Pavel Raiskup <praiskup@redhat.com> - 2:1.26-12
changelog:
  - sync manpage help2man
  - fix problems with big uids/gids and pax format (> 2^21) (#913406)
  - fix creating sparse pax archives containing files of effective
    size >8GB (#516309)
  - allow extracting single volume from multi-volume archive (#919897)


author: Pavel Raiskup <praiskup@redhat.com> 2:1.26-10
changelog:
  - allow to build tar in difference CoverityScan by forcing the '.gets' patch to
    be applied even in the run without patches


author: Ondrej Vasik <ovasik@redhat.com> 2:1.26-7
changelog:
  - store&restore security.capability extended attributes category
    (#771927)
  - fix build failure with undefined gets


author: Pavel Raiskup <praiskup@redhat.com> 2:1.26-5
changelog:
  - fix for bad cooperation of the '-C' (change directory) and '-u' (update
    package) options (#688567)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.25-4
changelog:
  - mention that some compression options might not work if
    the external program is not available(#666755)


author: Kamil Dudka <kdudka@redhat.com> 2:1.23-6
changelog:
  - fix exclusion of long file names with --xattrs (#634866)
  - do not crash with --listed-incremental (#635318)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-17
changelog:
  - CVE-2010-0624 tar, cpio: Heap-based buffer overflow
    by expanding a specially-crafted archive (#572149)
  - realloc within check_exclusion_tags() caused invalid write
    (#570591)
  - not closing file descriptors for excluded files/dirs with
    exlude-tag... options could cause descriptor exhaustion
    (#570591)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-12
changelog:
  - do not fail with POSIX 2008 glibc futimens() (#552320)
  - temporarily disable fix for #531441, causing stack smashing
    with newer glibc(#551206)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-11
changelog:
  - fix segfault with corrupted metadata in code_ns_fraction
    (#531441)
  - commented patches and sources


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-10
changelog:
  - store xattrs for symlinks (#525992) - by Kamil Dudka
  - update tar(1) manpage (#539787)
  - fix memory leak in xheader (#518079)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.22-4
changelog:
  - Report record size only if the archive refers to a device
    (#487760)
  - Do not sigabrt with new gcc/glibc because of writing to
    struct members of gnutar header at once via strcpy


author: Ondrej Vasik <ovasik@redhat.com> 2:1.21-1
changelog:
  - New upstream release 1.21, removed applied patches
  - add support for -I option, fix testsuite failure


author: Ondrej Vasik <ovasik@redhat.com> 2:1.20-3
changelog:
  - Fixed wrong documentation for xattrs options (#466517)
  - fixed bug with null file terminator and change dirs
    (upstream)


author: Ondrej Vasik <ovasik@redhat.com> 2:1.20-1
changelog:
  - new upstream release 1.20 (lzma support, few new options
    and bugfixes)
  - heavily modified xattrs patches(as tar-1.20 now uses automake
    1.10.1)


author: Radek Brich <rbrich@redhat.com> 2:1.19-3
changelog:
  - do not print getfilecon/setfilecon warnings when SELinux is disabled
    or SELinux data are not available (bz#431879)
  - fix for GCC 4.3


author: Radek Brich <rbrich@redhat.com> 2:1.19-2
changelog:
  - fix errors in man page
    * fix definition of --occurrence (bz#416661, patch by Jonathan Wakely)
    * update meaning of -l: it has changed from --one-filesystem
      to --check-links (bz#426717)
  - update license tag, tar 1.19 is GPLv3+


author: Radek Brich <rbrich@redhat.com> 2:1.17-5
changelog:
  - fix (non)detection of xattrs
  - move configure stuff from -xattrs patch to -xattrs-conf,
    so the original patch could be easily read
  - fix -xattrs patch to work with zero length files and show
    warnings when xattrs not available (fixes by James Antill)
  - possible corruption (#408621) - add warning to man page
    for now, may be actually fixed later, depending on upstream


author: Radek Brich <rbrich@redhat.com> 2:1.17-1
changelog:
  - new upstream version
  - patch for wildcards (#206841), restoring old behavior
  - patch for testsuite
  - update -xattrs patch
  - drop 13 obsolete patches


author: Peter Vrabec <pvrabec@redhat.com> 1.15.90-4
changelog:
  - fix problem with unpacking archives in a directory for which 
    one has write permission but does not own (such as /tmp) (#149686)


author: Peter Vrabec <pvrabec@redhat.com> 1.15.1-12
changelog:
  - fix extracting sparse files to a filesystem like vfat,
    when ftruncate may fail to grow the size of a file.(#179507)


author: Peter Vrabec <pvrabec@redhat.com> 1.15.1-5
changelog:
  - extract sparse files even if the output fd is not seekable.(#154882)
  - (sparse_scan_file): Bugfix. offset had incorrect type.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.13.19-5
changelog:
  - Fix build with current autoconf (stricter checking on AC_DEFINE)
  - Fix segfault when tarring directories without having read permissions
    (#40802)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - fix hang on tar tvzf - <something.tar.gz, introduced by
    exit code fix (Bug #15448), Patch from Tim Waugh <twaugh@redhat.com>


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - 1.13.14
  - Update man page to know about -I / --bzip
  - Remove dependancy on rmt - tar can be used for anything local
    without it.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to tar-1.12.64013.
  - subtract (and reopen #2415) bzip2 support using -y.
  - move gtar to /bin.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - Fiddle bindir/libexecdir to get RH install correct.
  - Don't include /sbin/rmt -- use the rmt from dump.
  - Turn on nls.


author: Orion Poplawski <orion@cora.nwra.com> 4.5.7-1
changelog:
  - Update to 4.5.7
  - Drop triangulate patch applied upstream
  - License is now (as of 4.5.6 actually) GPLv2 or later
  - Re-enable octave support since we are GPLv3 compatible now


author: Orion Poplawski <orion@cora.nwra.com> 4.5.1-2
changelog:
  - Rebuild for netcdf 4.1.0
  - Don't make GMT-common depend on GMT
  - Remove BR GMT-coastlines, disable check for bootstrap


author: Orion Poplawski <orion@cora.nwra.com> 4.4.0-1
changelog:
  - Update to 4.4.0
  - Merge doc package into main package as noarch sub-packages
  - Merge examples sub-package into doc


author: Orion Poplawski <orion@cora.nwra.com> 4.3.0-2
changelog:
  - Add patch to link libraries properly
  - Run ldconfig in %post, dummy
  - Don't ship .bat file
  - Don't ship .in files
  - Don't make .csh examples executable
  - Drop execute bit on .m files


author: Orion Poplawski <orion@cora.nwra.com> 4.3.0-1
changelog:
  - Update to 4.3.0, drop many upsreamed patches
  - Add patch to install octave files in DESTDIR
  - Add patch to fix segfaults due to uninitialized memory
  - Add patch to fix a possible buffer overflow warning
  - Remove duplicate html directory from examples package
  - Create __package_docs directory for main package docs


author: Orion Poplawski <orion@cora.nwra.com> 4.2.1-3
changelog:
  - Remove unfree source
  - Split out xgridedit into sub-package
  - Add BR and R on less
  - Redirect octave-config stderr to /dev/null
  - Move config files to /etc/GMT
  - Use install -c -p to preserve timestamps
  - Use cp -pr to copy share data
  - Add sonames to shared libraries


author: Orion Poplawski <orion@cora.nwra.com> 4.2.1-2
changelog:
  - Drop -doc sub-package, will have separate -docs package
  - Add lower case name provides
  - Build Octave files


author: Rich Mattes <richmattes@gmail.com> - 0.2.2-2
changelog:
  - Added -static virtual provides to -devel subpackage
  - Moved package description to -devel subpackage


author: Kalev Lember <kalevlember@gmail.com> - 1.1-9
changelog:
  - Renamed the source package to mingw-libssh2 (#800434)
  - Spec clean up
  - Use mingw macros without leading underscore


author: Tom "spot" Callaway <tcallawa@redhat.com> - 2.10.0-2
changelog:
  - get rid of index.txt scriptlet on R-core (bz 533572)
  - leave macro in place, but don't call /usr/lib/rpm/R-make-search-index.sh equivalent anymore
  - add version check to see if we need to run R-make-search-index.sh guts


author: Tom "spot" Callaway <tcallawa@redhat.com> - 2.8.1-9
changelog:
  - drop profile.d scripts, they broke more than they fixed
  - minimize hard-coded Requires based on Martyn Plummer's analysis


author: Tom "spot" Callaway <tcallawa@redhat.com> - 2.8.1-5
changelog:
  - add R-java and R-java-devel "dummy" packages, so that we can get java dependent R-modules 
    to build/install


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.8.1-2
changelog:
  - add pango-devel to BuildRequires (thanks to Martyn Plummer and Peter Dalgaard)
  - fix libRmath requires to need V-R (thanks to Martyn Plummer)


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.8.0-1
changelog:
  - Update to 2.8.0
  - New subpackage layout: R-core is functional userspace, R is metapackage 
    requiring everything
  - Fix system bzip2 detection


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.7.2-1
changelog:
  - update to 2.7.2
  - fix spec for alpha compile (bz 458931)
  - fix security issue in javareconf script (bz 460658)


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.7.0-4
changelog:
  - fixup sed invocation added in -3
  - make -devel package depend on base R = version-release
  - fix bad paths in package html files


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.7.0-2
changelog:
  - add patch from Martyn Plummer to avoid possible bad path hardcoding in 
    /usr/bin/Rscript
  - properly handle ia64 case (bz 446181)


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.7.0-1
changelog:
  - update to 2.70
  - rcompgen is no longer a standalone package
  - redirect javareconf to /dev/null (bz 442366)


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.6.2-1
changelog:
  - properly version the items in the VR bundle
  - 2.6.2
  - don't use setarch for java setup
  - fix R post script file


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.6.1-3
changelog:
  - move INSTALL back into R main package, as it is useful without the 
    other -devel bits (e.g. installing noarch package from CRAN)


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.6.1-2
changelog:
  - based on changes from Martyn Plummer <martyn.plummer@r-project.org>
  - use configure options rdocdir, rincludedir, rsharedir 
  - use DESTDIR at installation
  - remove obsolete generation of packages.html
  - move header files and INSTALL R-devel package


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.6.0-2
changelog:
  - add R CMD javareconf to post (bz 354541)
  - don't pickup bogus perl provides (bz 356071)
  - use xdg-open, drop requires for firefox/evince (bz 351841)


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.4.1-4
changelog:
  - get rid of termcap related requires, replace with ncurses
  - use java-1.5.0-gcj instead of old java-1.4.2
  - add /usr/share/R/library as a valid R_LIBS directory for noarch bits


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.0.1-50
changelog:
  - big bump. This is the fc4 package, the fc3 package is 2.0.1-11
  - enable gnome gui, add requires as needed


author: Martyn Plummer <plummer@iarc.fr> 0:2.0.1-0.fdr.3
changelog:
  - R-devel package is now a stub package with no files, except a documentation
    file (RPM won't accept sub-packages with no files). R now conflicts
    with earlier (i.e 0:2.0.1-0.fdr.2) versions of R-devel.
  - Created libRmath subpackage with shared library.


author: Martyn Plummer <plummer@iarc.fr> 0:2.0.0-0.fdr.3
changelog:
  - Set R_PRINTCMD at configure times so that by default getOption(printcmd)
    gives "lpr".
  - Define macro fcx for all Fedora distributions. This replaces Rinfo


author: Martyn Plummer <plummer@iarc.fr> 0:2.0.0-0.fdr.1
changelog:
  - Built R 2.0.0
  - There is no longer a BUGS file, so this is not installed as a 
    documentation file.


author: Martyn Plummer <plummer@iarc.fr> 0:1.9.1-0.fdr.4
changelog:
  - Added gcc-g++ to the list of BuildRequires for all platforms.
    Although a C++ compiler is not necessary to build R, it must
    be present at configure time or R will not be correctly configured
    to build packages containing C++ code.


author: Martyn Plummer <plummner@iarc.fr> 0:1.9.1-0.fdr.2
changelog:
  - Added libtermcap-devel as BuildRequires for RH 8.0 and 9. Without
    this we get no readline support.


author: Martyn Plummer <plummer@iarc.fr> 0:1.9.0-0.fdr.3
changelog:
  - Corrected names for fc1/fc2/el3 when using conditional BuildRequires
  - Configure searches for C++ preprocessor and fails if we don't have
    gcc-c++ installed. Added to BuildRequires for FC2.


author: Martyn Plummer <plummer@iarc.fr> 0:1.9.0-0.fdr.2
changelog:
  - Added patch to overcome problems with X.org headers (backported
    from R 1.9.1; patch supplied by Graeme Ambler)
  - Changed permissions of source files to 644 to please rpmlint


author: Martyn Plummer <plummer@iarc.fr> 0:1.9.0-0.fdr.1
changelog:
  - R.spec file now has mode 644. Previously it was unreadable by other
    users and this was causing a crash building under mach.
  - Changed version number to conform to Fedora conventions. 
  - Removed Provides: and Obsoletes: R-base, R-recommended, which are
    now several years old. Nobody should have a copy of R-base on a 
    supported platform.
  - Changed buildroot to Fedora standard
  - Added Requires(post,preun): info
  - Redirect output from postinstall/uninstall scripts to /dev/null
  - Added BuildRequires tags necessary to install R with full 
    capabilities on a clean mach buildroot. Conditional buildrequires
    for tcl-devel and tk-devel which were not present on RH9 or earlier.


author: Martyn Plummer <plummer@iarc.fr>
changelog:
  - Added patch to set environment variable LANG to C in shell wrapper,
    avoiding warnings about UTF-8 locale not being supported


author: Martyn Plummer <plummer@iarc.fr>
changelog:
  - No need to export optimization flags. This is done by %configure
  - Folded info installation into %makeinstall 
  - Check that RPM_BASE_ROOT is not set to "/" before cleaning up


author: Martyn Plummer <plummer@iarc.fr>
changelog:
  - Changes from James Henstridge <james@daa.com.au> to allow building on IA64:
  - Added BuildRequires for tcl-devel tk-devel tetex-latex
  - Use the %configure macro to call the configure script
  - Pass --with-tcl-config and --with-tk-config arguments to configure
  - Set rhome to point to the build root during "make install"


author: Ruben Kerkhof <ruben@rubenkerkhof.com> - 3.2-4
changelog:
  - Enable PrivateTmp as per http://fedoraproject.org/wiki/Features/ServicesPrivateTmp
  - Fix bogus date in changelog


author: Morten Stevens <mstevens@imt-systems.com> - 3.1-7
changelog:
  - Disable pdns guardian by default (rhbz#883852)
  - Drop backend MongoDB as it does not work (upstream commit 3017)


author: <ruben@rubenkerkhof.com> 2.9.20-8
changelog:
  - Add the pdns user and group to the config file
  - Don't restart pdns on an upgrade
  - Minor cleanups in scriptlets


author: <ruben@rubenkerkhof.com> 2.9.20-2
changelog:
  - A few changes for FE review (bz #219973):
  - Renamed package to pdns, since that's how upstream calls it
  - Removed calls to ldconfig
  - Subpackages now require %{version}-%{release}


author: Parag Nemade <pnemade AT redhat DOT com> - 0.4.4.2-7
changelog:
  - Resolves:rh#879672 - missing(?) dependency to caribou-gtk3-module
  - Add missing gconf schema scriptlet for -antler


author: Parag Nemade <pnemade AT redhat.com> - 0.2.00-2
changelog:
  - Caribou now only be shown in GNOME. (rh#698603)
  - Add desktop-file-validate for caribou-autostart.desktop
  - Add ||: for caribou-autostart.desktop to skip the error.


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 0.22-4
changelog:
  - install bash completion in the correct place and remove the
    triggerin/triggerun scriptlets
  - include the example scripts in libexecdir


author: Petr Lautrbach <plautrba@redhat.com> 6.1p1-7 + 0.9.3-3
changelog:
  - allow specification of alternate host key location(s) via /etc/sysconfig/sshd
    <john_florian@dart.biz> (#865803)
  - sshd.service: use KillMode=process (#890376)
  - don't use export in sysconfig file (#953111)


author: Petr Lautrbach <plautrba@redhat.com> 6.1p1-3 + 0.9.3-3
changelog:
  - replace RequiredAuthentications2 with AuthenticationMethods based on upstream
  - obsolete RequiredAuthentications[12] options
  - fix openssh-6.1p1-privsep-selinux.patch


author: Petr Lautrbach <plautrba@redhat.com> 6.1p1-2
changelog:
  - add SELinux comment to /etc/ssh/sshd_config about SELinux command to modify port (#861400)
  - drop required chkconfig (#865498)
  - drop openssh-5.9p1-sftp-chroot.patch (#830237)


author: Petr Lautrbach <plautrba@redhat.com> 6.1p1-1 + 0.9.3-3
changelog:
  - new upstream release (#852651)
  - use DIR: kerberos type cache (#848228)
  - don't use chroot_user_t for chrooted users (#830237)
  - replace scriptlets with systemd macros (#850249)
  - don't use /bin and /sbin paths (#856590)


author: Tomas Mraz <tmraz@redhat.com> 5.9p1-23 + 0.9.3-1
changelog:
  - fix segfault in su when pam_ssh_agent_auth is used and the ssh-agent
    is not running, most probably not exploitable
  - update pam_ssh_agent_auth to 0.9.3 upstream version


author: Petr Lautrbach <plautrba@redhat.com> 5.9p1-18 + 0.9.2-32
changelog:
  - replace TwoFactorAuth with RequiredAuthentications[12]
    https://bugzilla.mindrot.org/show_bug.cgi?id=983


author: Tomas Mraz <tmraz@redhat.com> - 5.9p1-13 + 0.9.2-32
changelog:
  - add back the restorecon call to ssh-copy-id - it might be needed on older
    distributions (#739989)


author: Tomas Mraz <tmraz@redhat.com> - 5.9p1-12 + 0.9.2-32
changelog:
  - still support /etc/sysconfig/sshd loading in sshd service (#754732)
  - fix incorrect key permissions generated by sshd-keygen script (#754779)


author: Tomas Mraz <tmraz@redhat.com> - 5.9p1-11 + 0.9.2-32
changelog:
  - remove unnecessary requires on initscripts
  - set VerifyHostKeyDNS to ask in the default configuration (#739856)


author: Jan F. Chadima <jchadima@redhat.com> - 5.8p2-12 + 0.9.2-31
changelog:
  - Systemd compatibility according to Mathieu Bridon <bochecha@fedoraproject.org>
  - Split out the host keygen into their own command, to ease future migration
    to systemd. Compatitbility with the init script was kept.
  - Migrate the package to full native systemd unit files, according to the Fedora
    packaging guidelines.
  - Prepate the unit files for running an ondemand server. (do not add it actually)


author: Jan F. Chadima <jchadima@redhat.com> - 5.8p1-20 + 0.9.2-30
changelog:
  - use /dev/random or /dev/urandom for seeding prng
  - improve periodical reseeding of random generator


author: Jan F. Chadima <jchadima@redhat.com> - 5.8p1-18 + 0.9.2-30
changelog:
  - add periodical reseeding of random generator 
  - change selinux contex for internal sftp in do_usercontext
  - exit(0) after sigterm


author: Jan F. Chadima <jchadima@redhat.com> - 5.6p1-20 + 0.9.2-29
changelog:
  - reapair clientloop crash (#627332)
  - properly restore euid in case connect to the ssh-agent socket fails


author: Jan F. Chadima <jchadima@redhat.com> - 5.5p1-10 + 0.9.2-26
changelog:
  - Repair the reference in man ssh-ldap-helper(8)
  - Repair the PubkeyAgent section in sshd_config(5)
  - Provide example ldap.conf


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-28
changelog:
  - Repair initscript to be acord to guidelines (#521860)
  - Add bugzilla# to application of edns and xmodifiers patch


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-20
changelog:
  - merged xmodifiers to redhat patch
  - merged gssapi-role to selinux patch
  - merged cve-2007_3102 to audit patch
  - sesftp patch only with WITH_SELINUX flag
  - rearange sesftp patch according to upstream request


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-5
changelog:
  - remove obsolete --with-rsh (#478298)
  - add pam_sepermit to allow blocking confined users in permissive mode
    (#471746)
  - move system-auth after pam_selinux in the session stack


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-4
changelog:
  - set FD_CLOEXEC on channel sockets (#475866)
  - adjust summary
  - adjust nss-keys patch so it is applicable without selinux patches (#470859)


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-1
changelog:
  - upgrade to new upstream release
  - fixed a problem with public key authentication and explicitely
    specified SELinux role


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-2
changelog:
  - add LANGUAGE to accepted/sent environment variables (#443231)
  - use pam_selinux to obtain the user context instead of doing it itself
  - unbreak server keep alive settings (patch from upstream)
  - small addition to scp manpage


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-1
changelog:
  - upgrade to new upstream (#441066)
  - prevent initscript from killing itself on halt with upstart (#438449)
  - initscript status should show that the daemon is running
    only when the main daemon is still alive (#430882)


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-10
changelog:
  - fix race on control master and cleanup stale control socket (#436311)
    patches by David Woodhouse


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-9
changelog:
  - set FD_CLOEXEC on client socket
  - apply real fix for window size problem (#286181) from upstream
  - apply fix for the spurious failed bind from upstream
  - apply open handle leak in sftp fix from upstream


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-4
changelog:
  - do not copy /etc/localtime into the chroot as it is not
    necessary anymore (#193184)
  - call setkeycreatecon when selinux context is established
  - test for NULL privk when freeing key (#391871) - patch by
    Pierre Ossman


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-1
changelog:
  - upgrade to latest upstream
  - use libedit in sftp (#203009)
  - fixed audit log injection problem (CVE-2007-3102)


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-8
changelog:
  - fix sftp client problems on write error (#247802)
  - allow disabling autocreation of server keys (#235466)


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-2
changelog:
  - support mls on labeled networks (#220487)
  - support mls level selection on unlabeled networks
  - allow / in usernames in scp (only beginning /, ./, and ../ is special)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-13
changelog:
  - improved pam_session patch so it doesn't regress, the patch is necessary
    for the pam_session_close to be called correctly as uid 0


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-11
changelog:
  - merge sshd initscript patches
  - kill all ssh sessions when stop is called in halt or reboot runlevel
  - remove -TERM option from killproc so we don't race on sshd restart


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10
changelog:
  - improve gssapi-no-spnego patch (#208102)
  - CVE-2006-4924 - prevent DoS on deattack detector (#207957)
  - CVE-2006-5051 - don't call cleanups from signal handler (#208459)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-9
changelog:
  - don't report duplicate syslog messages, use correct local time (#189158)
  - don't allow spnego as gssapi mechanism (from upstream)
  - fixed memleaks found by Coverity (from upstream)
  - allow ip options except source routing (#202856) (patch by HP)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-8
changelog:
  - drop the pam-session patch from the previous build (#201341)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
changelog:
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
changelog:
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-3
changelog:
  - enable the subprocess in chroot to send messages to system log
  - sshd should prevent login if audit call fails


author: Tomas Mraz <tmraz@redhat.com> - 4.3p1-2
changelog:
  - fixed another place where syslog was called in signal handler
  - pass locale environment variables to server, accept them there (#179851)


author: Tomas Mraz <tmraz@redhat.com> - 4.2p1-9
changelog:
  - drop x11-ssh-askpass from the package
  - drop old build_6x ifs from spec file
  - improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
    characters to person looking at the display
  - less hackish fix for the __USE_GNU problem


author: Nalin Dahyabhai <nalin@redhat.com> - 4.2p1-8
changelog:
  - work around missing gccmakedep by wrapping makedepend in a local script
  - remove now-obsolete build dependency on "xauth"


author: Warren Togami <wtogami@redhat.com> - 4.2p1-7
changelog:
  - xorg-x11-devel -> libXt-devel
  - rebuild for new xauth location so X forwarding works
  - buildreq audit-libs-devel
  - buildreq automake for aclocal
  - buildreq imake for xmkmf
  -  -D_GNU_SOURCE in flags in order to get it to build
     Ugly hack to workaround openssh defining __USE_GNU which is
     not allowed and causes problems according to Ulrich Drepper
     fix this the correct way after FC5test1


author: Tomas Mraz <tmraz@redhat.com> 4.2p1-2
changelog:
  - use include instead of pam_stack in pam config
  - use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
  - upstream patch for displaying authentication errors


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-5
changelog:
  - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
  - install ssh-copy-id from contrib (#88707)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-4
changelog:
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - don't use X11 port which can't be bound on all IP families (#163732)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-3
changelog:
  - fix small regression caused by the nologin patch (#161956)
  - fix race in getpeername error checking (mindrot #1054)


author: Tomas Mraz <tmraz@redhat.com> 4.0p1-2
changelog:
  - fixed Local/RemoteForward in ssh_config.5 manpage
  - fix fatal when Local/RemoteForward is used and scp run (#153258)
  - don't leak user validity when using krb5 authentication


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-11
changelog:
  - don't call syslog in signal handler
  - allow password authentication when copying from remote
    to remote machine (#103364)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-10
changelog:
  - enable trusted forwarding by default if X11 forwarding is 
    required by user (#137685 and duplicates)
  - disable protocol 1 support by default in sshd server config (#88329)
  - keep the gnome-askpass dialog above others (#69131)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - change permissions on pam.d/sshd to 0644 (#64697)
  - patch initscript so it doesn't kill opened sessions if
    the sshd daemon isn't running anymore (#67624)


author: Nalin Dahyabhai <nalin@redhat.com> 3.9p1-8
changelog:
  - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
    to enable display of a vendor patch level during version exchange (#120285)
  - configure with --disable-strip to build useful debuginfo subpackages


author: Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
changelog:
  - request gssapi-with-mic by default but not delegation (flag day for anyone
    who used previous gssapi patches)
  - no longer request x11 forwarding by default


author: Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
changelog:
  * Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
  - Built RHLE3 U2 update package.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - additional fix for apparently-never-happens double-free in buffer_free()
  - extend fix for #103998 to cover SSH1


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-11
changelog:
  - apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
  - skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-6
changelog:
  - modify patch which clears the supplemental group list at startup to only
    complain if setgroups() fails if sshd has euid == 0
  - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-6
changelog:
  - move scp to the -clients subpackage, because it directly depends on ssh
    which is also in -clients (#84329)


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-2
changelog:
  - patch PAM configuration to use relative path names for the modules, allowing
    us to not worry about which arch the modules are built for on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-2
changelog:
  - rework the close-on-exit docs
  - include configuration file man pages
  - make use of nologin as the privsep shell optional


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-1
changelog:
  - update to 3.3p1
  - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
  - disable gtk2 askpass
  - require pam-devel by filename rather than by package for erratum
  - include patch from Solar Designer to work around anonymous mmap failures


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-4
changelog:
  - drop buildreq on db1-devel
  - require pam-devel by package name
  - require autoconf instead of autoconf253 again


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-3
changelog:
  - pull patch from CVS to avoid printing error messages when some of the
    default keys aren't available when running ssh-add
  - refresh to current revisions of Simon's patches


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2gss
changelog:
  - reintroduce Simon's gssapi patches
  - add buildprereq for autoconf253, which is needed to regenerate configure
    after applying the gssapi patches
  - refresh to the latest version of Markus's patch to build properly with
    older versions of OpenSSL


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
changelog:
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x


author: Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
changelog:
  - update to SNAP-20020220 for testing purposes (you've been warned, if there's
    anything to be warned about, gss patches won't apply, I don't mind)


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
changelog:
  - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support


author: Nalin Dahyabhai <nalin@redhat.com> 3.0p1-1
changelog:
  - merge some of Damien Miller <djm@mindrot.org> changes from the upstream
    3.0p1 spec file and init script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.0p1
  - update to x11-ssh-askpass 1.2.4.1
  - change build dependency on a file from pam-devel to the pam-devel package
  - replace primes with moduli


author: Nalin Dahyabhai <nalin@redhat.com> 2.9p2-7
changelog:
  - fix scp's server's reporting of file sizes, and build with the proper
    preprocessor define to get large-file capable open(), stat(), etc.
    (sftp has been doing this correctly all along) (#51827)
  - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
  - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
  - mark profile.d scriptlets as config files (#42337)
  - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
  - change a couple of log() statements to debug() statements (#50751)
  - pull cvs patch to add -t flag to sshd (#28611)
  - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull cvs patch to add session initialization to no-pty sessions
  - pull cvs patch to not cut off challengeresponse auth needlessly
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed (#49263)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change Copyright: BSD to License: BSD
  - add Markus Friedl's unverified patch for the cookie file deletion problem
    so that we can verify it
  - drop patch to check if xauth is present (was folded into cookie patch)
  - don't apply gssapi patches for the errata candidate
  - clear supplemental groups list at startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix an error parsing the new default sshd_config
  - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
    dealing with comments right


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
    to be removed before the next beta cycle because it's a big departure
    from the upstream version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish marking strings in the init script for translation
  - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
    at startup (change merged from openssh.com init script, originally by
    Pekka Savola)
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove explicit openssl requirement, fixes builddistro issue
  - make initscript stop() function wait until sshd really dead to avoid 
    races in condrestart


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - mention that challengereponse supports PAM, so disabling password doesn't
    limit users to pubkey and rsa auth (#34378)
  - bypass the daemon() function in the init script and call initlog directly,
    because daemon() won't start a daemon it detects is already running (like
    open connections)
  - require the version of openssl we had when we were built


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make do_pam_setcred() smart enough to know when to establish creds and
    when to reinitialize them
  - add in a couple of other fixes from Damien for inclusion in the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p2
  - call setcred() again after initgroups, because the "creds" could actually
    be group memberships


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
  - don't enable challenge-response by default until we find a way to not
    have too many userauth requests (we may make up to six pubkey and up to
    three password attempts as it is)
  - remove build dependency on rsh to match openssh.com's packages more closely


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Revert the patch to move pam_open_session.
  - Init script and spec file changes from Pekka Savola. (#28750)
  - Patch sftp to recognize '-o protocol' arguments. (#29540)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Chuck the closing patch.
  - Add a trigger to add host keys for protocol 2 to the config file, now that
    configuration file syntax requires us to specify it with HostKey if we
    specify any other HostKey values, which we do.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Redo patch to move pam_open_session after the server setuid()s to the user.
  - Rework the nopam patch to use be picked up by autoconf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.1p1.
  - Add init script mods from Pekka Savola.
  - Tweak the init script to match the CVS contrib script more closely.
  - Redo patch to ssh-add to try to adding both identity and id_dsa to also try
    adding id_rsa.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.0p1.
  - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
  - Resync with parts of Damien Miller's openssh.spec from CVS, including
    update of x11 askpass to 1.2.0.
  - Only require openssl (don't prereq) because we generate keys in the init
    script now.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't open a PAM session until we've forked and become the user (#25690).
  - Apply Andrew Bartlett's patch for letting pam_authenticate() know which
    host the user is attempting a login from.
  - Resync with parts of Damien Miller's openssh.spec from CVS.
  - Don't expose KbdInt responses in debug messages (from CVS).
  - Detect and handle errors in rsa_{public,private}_decrypt (from CVS).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - More gettextizing.
  - Close all files after going into daemon mode (needs more testing).
  - Extract patch from CVS to handle auth banners (in the client).
  - Extract patch from CVS to handle compat weirdness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
    succeeded, to allow public-key authentication after a failure with "none"
    authentication.  (#21268)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to x11-askpass 1.1.1. (#21301)
  - Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge multiple PAM text messages into subsequent prompts when possible when
    doing keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Disable the built-in MD5 password support.  We're using PAM.
  - Take a crack at doing keyboard-interactive authentication with PAM, and
    enable use of it in the default client configuration so that the client
    will try it when the server disallows password authentication.
  - Build with debugging flags.  Build root policies strip all binaries anyway.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add the primes file from the latest snapshot to the main package (#20884).
  - Add the dev package to the prereq list (#19984).
  - Remove the default path and mimic login's behavior in the server itself.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Resync with conditional options in Damien Miller's .spec file for an errata.
  - Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to OpenSSH 2.3.0p1.
  - Update to x11-askpass 1.1.0.
  - Enable keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
    build PAM authentication in.
  - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
  - Clean out no-longer-used patches.
  - Patch ssh-add to try to add both identity and id_dsa, and to error only
    when neither exists.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update x11-askpass to 1.0.2. (#17835)
  - Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
    always find them in the right place. (#17909)
  - Set the default path to be the same as the one supplied by /bin/login, but
    add /usr/X11R6/bin. (#17909)
  - Try to handle obsoletion of ssh-server more cleanly.  Package names
    are different, but init script name isn't. (#17865)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 20000823 snapshot.
  - Change subpackage requirements from %{version} to %{version}-%{release}
  - Back out the pipe patch.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 2.1.1p4, which includes fixes for config file parsing problems.
  - Move the init script back.
  - Add Damien's quick fix for wackiness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Move condrestart to server postun.
  - Move key generation to init script.
  - Actually use the right patch for moving the key generation to the init script.
  - Clean up the init script a bit.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Patch to build with neither RSA nor RSAref.
  - Miscellaneous FHS-compliance tweaks.
  - Fix for possibly-compressed man pages.


author: Than Ngo <than@redhat.com> - 2.4-1
changelog:
  - update to 1.0.7pre43, changed Roman glyphs in all fonts back
    to original metrics. bz#243180, bz#138896, bz#140584
  - cleanup BR, bz#227297
  - drop chkfontpath dependency and use the catalogue font path mechanism


author: Than Ngo <than@redhat.com> 2.3-5
changelog:
  - fix the mkfontdir issue for modular X
  - remove unneeded -e option from mkfontdir
  - add Prereq on mkfontdir


author: Than Ngo <than@redhat.com> 2.2-1
changelog:
  - Upgrade to upstream version 1.0.7pre26, bug #122500
  - drop NimbusRomNo9L-Medi* fonts that are included in pre26


author: Owen Taylor <otaylor@redhat.com> 2.1-1
changelog:
  - Upgrade to upstream version 1.0.7pre22
  - Massive cleanups to fonts.dir/fonts.scale handling (use mkfontscale
    instead of fonts.scale from the package, etc.)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Newer upstream version
  - Fix accidental revert of urw-fontspecific => adobe-fontspecific change
  - Tweak hints in "Nimbus Sans Regular L" a bit.


author: Than Ngo <than@redhat.com> 2.0-19
changelog:
  - update urw fonts
  - add missing ZapfDingbats font (bug #65101, #65523)
  - fixed metric troubles (bug #65522)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - use adobe-fontspecific instead of urw-fontspecific encoding name for 
    symbol font.  Fixes some java issues.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - added missing fonts.dir, fonts.scale, %post, %postun using chkfontpath
  - changed foundary from Adobe (which was a lie) to URW.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - eliminated section that adds to XF86Config
  - changed fonts to reside in /usr/share/fonts/default/URW, so they can be
    shared between X and Ghostscript (and other, future programs/applications)


author: Sébastien Willmann <sebastien.willmann@gmail.com> - 2.3-2.20111231cvs
changelog:
  - Replaced cp by install
  - Removed .jar and .class cleanup, since there is nothing to cleanup
  - Changed patch: now storing configuration in $HOME/.config/rachota


author: Michael Schwendt <mschwendt@fedoraproject.org> - 5.1.3-2
changelog:
  - Add BuildRequires/Requires python-chardet because if it's installed
    as a dependency of other Python module packages, it would be imported
    and used anyway, and it doesn't make any tests fail.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 5.1.3-1
changelog:
  - Update to 5.1.3 (50k diff).
  - Patch test-suite minimally for python3 to show that it fails early.
  - Fix file permissions and line delimiters at end of %prep section.
  - Fix python3 sitelib path in %check section.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 5.1.2-2
changelog:
  - Also package NEWS files as documentation.
  - 5.1.2 fixes CVE-2012-2921
    (DoS via memory consumption processing ENTITY declarations).


author: Michael Schwendt <mschwendt@fedoraproject.org> - 5.1.2-1
changelog:
  - Update to 5.1.2 and its security fix (#787401).
  - Ignore testsuite results for now (#787401).
  - Set PYTHONPATH in %check section to include files in %buildroot.
  - Drop CFLAGS usage from spec file, because this is Python.


author: Luke Macken <lmacken@redhat.com> - 5.0.1-1
changelog:
  - Latest upstream release
  - Remove feedparser_utf8_decoding.patch
  - Remove democracynow_feedparser_fix.patch
  - Run the test suite


author: Guillermo Gómez <gomix@fedoraproject.org> - 1.6.2-1
changelog:
  - Update to version 1.6.2
  - Replaced Net::IPv4Addr with NetAddr::IP module which has support for IPv6
    address network parsing and comparisons.
  - wget added as required to support default configuration.


author: Guillermo Gómez <gomix@fedoraproject.org> - 1.6.1-1
changelog:
  - Update to version 1.6.1
  - Bug fix for 'Couldn't load target' error
  - Bug fix for fast_pattern interpretation for relative matches
  - Updated to the latest Emerging Threats rule set


author: Guillermo Gomez <gomix@fedoraproject.org> - 1.5-0
changelog:
  - Upgrade to major release version 1.5-0
  - WARNING: Compatibility issue with 1.0.6 fwsnort.conf, previous
    fwsnort.conf renamed as /etc/fwsnort/fwsnort.conf.rpmsave.


author: Guillermo Gómez <ggomez@neotechgw.com> - 1.0.6-1
changelog:
  - First Fedora spec compliant version, several modifications
  - No deps included
  - Free snort rules included


author: Ville Skyttä <ville.skytta at iki.fi> - 0.9.2-2
changelog:
  - Drop no longer needed (and failing) old ppc config bug workarounds.
  - Sync group creation scriptlet with current Fedora packaging guidelines.
  - Set default config to the "updates" flavour.


author: Ville Skyttä <ville.skytta at iki.fi>
changelog:
  - Create only the "mach" group, and do not remove it on erase.  The
    "mach" user is not really needed for anything.


author: Ville Skyttä <ville.skytta at iki.fi>
changelog:
  - Make mach chroot build user/group configurable using
    "rpmbuild --define 'build(user|group) foo'"
  - Build in the %build section.


author: Elder Marco <eldermarco@fedoraproject.org> - 0.9.1-1
changelog:
  - New upstream release
  - Added desktop-file-utils as BuildRequires.
  - Removed clean section and BuildRoot tag (not required any more).
  - Removed Encoding key from .desktop file.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.1.0-2
changelog:
  - Add workaround for tab too small with GTK3
    (bug 922729, pcmanfm-Bugs-3602000)
  - Add workaround for pcmanfm --help showing garbage message
    (pcmanfm-Bugs-3607427)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 0.5-2
changelog:
  - F-10+: Use more generic icon name due to gnome-icon-theme 2.23.X change
    First try (need more fix)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 0.3.5.23-2
changelog:
  - Apply patch to fix crash on 64bits arch as suggested by Hans
    (bug 433182)
  - Disable to mount removable devices for now


author: Mahaveer Darade <mah.darade@gmail.com> - 0.3.5-1
changelog:
  - upgrade to upstream version 0.3.5
  - drop patch0, merged upstream
    liblognorm-0.3.4-rename-to-lognormalizer.patch
  - remove trailing whitespace


author: Chris Tyler <chris@tylers.info> - 2.0-1
changelog:
  - Updated to python version of the script
  - Using github as the software source
  - Added new RPM macros


author: Chris Tyler <chris@tylers.info> - 0.4-1
changelog:
  - allow more than 2 partitions
  - verify that partition being resized is last partition
  - experimental features for swap file creation


author: Praveen K Paladugu <praveen_paladugu@dell.com> -1.8.12-7
changelog:
  - service & scripts to allow OS to capture BMC's IP & URL info
  - Also pass the OS information to BMC
  - patches submitted by Charles Rose (charles_rose[at]dell.com)

  - failed sol session activation crashes while logging exit 
  - Fix for #835542


author: Jan Safranek <jsafrane@redhat.com> - 1.8.12-2
changelog:
  - Fixed starting ipmievd under systemd (#819234).
  - Updated RPM scriplets with latest systemd-rpm macros (#850161)


author: Jan Safranek <jsafrane@redhat.com> 1.8.10-2
changelog:
  - fix issues found during package review:
    - clear Default-Start: line in the init script, the service should be 
      disabled by default
    - added Obsoletes: OpenIPMI-tools
    - compile with --disable-dependency-tracking to speed things up
    - compile with --enable-file-security
    - compile with --disable-intf-free, don't depend on FreeIPMI libraries
      (FreeIPMI has its own ipmitool-like utility)


author: Martin Gansser <linux4martin@gmx.de> - 0.1.2-6
changelog:
  - Rebuild
  - added OSD patch for signal information
  - added patch for Main menu info area with VDR 1.7.28+
  - added patch to display free video disk space with VDR 1.7.28+


author: <jmarrero@fedoraproject.org> 1.2.1-2
changelog:
  - moved libowncloudsync.so* to common as it is now used by mirall and owncloud-client
  - re-added mirall .desktop launcher


author: <jmarrero@fedoraproject.org> 1.1.0-1
changelog:
  - Version Upgrade to 1.1.0
  - Removed the need to look for occsync now mirall looks for ocsync the new name of owncloud-csync


author: <jmarrero@fedoraproject.org> 1.0.5-3
changelog:
  - added icon scriplets for owncloud-client icons
  - moved %doc to mirall-common
  - Added cmake  dcSYNC_INCLUDE_PATH:PATH=/usr/include/occsync and dc SYNC_LIBRARY:PATH=/usr/lib64/liboccsync.so to have mirall look for occsync instead of csync
  - Removed uneeded dep
  - Changelog corrections and clean up


author: <jmarrero@fedoraproject.org> 1.0.5-2
changelog:
  - Divided mirall into mirall-common, mirall and owncloud-client
  - Added dcMAKE_SHARED_LINKER_FLAGS="-Wl,--as-needed
  - moved exclude.lst back to /etc/, the apps look for it there
  - fixed icons descriptions
  - added refresh icon cache
  - updated csync dep to owncloud-csync


author: <jmarrero@fedoraproject.org> 1.0.5-1
changelog:
  - Update to 1.0.5
  - drop defattr
  - remove not-needed dependencies
  - changelog cleanup
  - moved exclude.lst to /etc/mirall/
  - fixed source01 and source 02 (icons)


author: Iain Arnell <iarnell@gmail.com> 2:0.70-1
changelog:
  - Unbundle DateTime::TimeZone and DateTime::Locale
  - Bump epoch and revert to upstream versioning
  - Specfile regenerated by cpanspec 1.78.
  - Update description


author: Iain Arnell <iarnell@gmail.com> 1:0.6600-3
changelog:
  - update DateTime::TimeZone to 1.31
  - DateTime::TimeZone no longer has Build.PL; use Makefile.PL
  - whitespace cleanup
  - clean up .packlist


author: Steven Pritchard <steve@kspei.com> 1:0.6600-1
changelog:
  - Update DateTime to 0.66.
  - Update DateTime::TimeZone to 1.26.
  - Update URL for FAQ in description.
  - BR Class::Load and parent.


author: Iain Arnell <iarnell@gmail.com> 1:0.6300-1
changelog:
  - Update DateTime to 0.63
  - Update DateTime::TimeZone to 1.22
  - DateTime license changed from "GPL+ or Artistic" to "Artistic 2.0"
  - Fix DTLocale/Changelog encoding


author: Stepan Kasal <skasal@redhat.com> - 1:0.5300-1
changelog:
  - new upstream version
  - use Build.PL as Makefile.PL no longer exists
  - use iconv to recode to utf-8, not a patch
  - update BuildRequires
  - drop Provides: perl(DateTime::TimeZoneCatalog), it is no longer there
  - use filtering macros


author: Steven Pritchard <steve@kspei.com> 1:0.4401-1
changelog:
  - Update to DateTime 0.4401.
  - Update to DateTime::Locale 0.42.
  - Update to DateTime::TimeZone 0.8301.


author: Steven Pritchard <steve@kspei.com> 1:0.4304-1
changelog:
  - Update to DateTime 0.4304.
  - Update to DateTime::TimeZone 0.78.
  - Update to DateTime::Locale 0.41.


author: Steven Pritchard <steve@kspei.com> 1:0.4302-1
changelog:
  - Update to DateTime 0.4302.
  - Update to DateTime::TimeZone 0.77.
  - Update to DateTime::Locale 0.4001.
  - BR List::MoreUtils.
  - Define IS_MAINTAINER so we run the pod tests.


author: Steven Pritchard <steve@kspei.com> 1:0.37-2
changelog:
  - Filter Win32::TieRegistry dependency.
  - Do the provides filter like we do in cpanspec.
  - Drop some macro usage.


author: Steven Pritchard <steve@kspei.com> 1:0.36-1
changelog:
  - Update to Date::Time 0.36.
  - Update to DateTime::Locale 0.33.
  - Update to DateTime::TimeZone 0.59.


author: Steven Pritchard <steve@kspei.com> 1:0.35-1
changelog:
  - Update to DateTime 0.35.
  - Update to DateTime::Locale 0.3101.
  - LICENSE.icu seems to have been renamed LICENSE.cldr.
  - Update to DateTime::TimeZone 0.54.
  - Use fixperms macro instead of our own chmod incantation.
  - Convert DateTime::LeapSecond to UTF-8 to avoid a rpmlint warning.


author: Steven Pritchard <steve@kspei.com> 1:0.32-1
changelog:
  - Update to DateTime 0.32.
  - Improve Summary, description, and source URLs.
  - Fix find option order.


author: Paul Howarth <paul@city-fan.org> 0.2901-2
changelog:
  - Unpack each tarball only once
  - Use Module::Build's build script where available
  - Help each module find the others when needed
  - Clean up files list
  - Include additional documentation from DT::Locale & DT::TimeZone
  - Add BR: perl(File::Find::Rule) & perl(Test::Pod) to improve test coverage
  - Remove unversioned provides of perl(DateTime) & perl(DateTime::TimeZone)


author: Roman Rakus <rrakus@redhat.com> - 4.2.37-6
changelog:
  - Update info about trap in man page
    Resolves: #799958
  - instead of setting the signal handler to SIG_IGN while installing
    the new trap handler, block the signal and unblock it after the new handler
    is installed
    Resolves: #695656


author: Roman Rakus <rrakus@redhat.com> - 4.1.9-3
changelog:
  - don't segfault when trying to bind int variable to array
    with bad array subsrcipt
    Resolves: #618289


author: Ville Skyttä <ville.skytta@iki.fi> - 4.1.9-2
changelog:
  - Move doc dir ownership to main package.
  - Preserve doc timestamps.
  - Add --without tests option for building without running the test suite.


author: Jesse Keating <jkeating@redhat.com> - 3.2-29
changelog:
  - Add the Requires(post) back for ncurses-libs, so that rpm knows
    where to break the loop.  The post actually does require the curses
    libs for the sh calls.  Could consider doing this in LUA and not have
    any external deps.


author: Roman Rakus <rrakus@redhat.com> - 3.2-28
changelog:
  - Removing Requires for mktemp and ncurses, which cause
    dependencing loop
  - Enabling #define SSH_SOURCE_BASHRC, because ssh changed.
    Resolves: #458839
  - Catch signals right after calling execve()
    Resolves: #455548


author: Tomas Janousek <tjanouse@redhat.com> - 3.2-20
changelog:
  - Added bash32-026 upstream official patch
  - Added bash32-027 upstream official patch (#249987)
  - Added bash32-028 upstream official patch
  - Added bash32-029 upstream official patch (#286861)
  - Added bash32-030 upstream official patch
  - Added bash32-031 upstream official patch (#358231)
  - Added bash32-032 upstream official patch
  - Added bash32-033 upstream official patch
  - Fix insert command repeating in vi mode (#190350)


author: Tomas Janousek <tjanouse@redhat.com> - 3.2-19
changelog:
  - fix cursor position when prompt has one invisible character (#358231)
  - dropped examples/loadables/ from docs, since it wasn't possible to build them
    anyway (#174380)
  - fix #286861: Wrong input confuses bash's arithmetic unit permanently
  - fix #344411: $RANDOM stays the same when job executed in the background


author: Pete Graner <pgraner@redhat.com> - 3.2-18
changelog:
  - Added bash32-021 upstream official patch
  - Added bash32-025 upstream official patch
  - Added bash32-024 upstream official patch
  - Added bash32-023 upstream official patch
  - Added bash32-022 upstream official patch


author: Pete Graner <pgraner@redhat.com> - 3.2-17
changelog:
  - Added bash32-018 upstream official patch
  - Added bash32-020 upstream official patch
  - Added bash32-019 upstream official patch


author: Pete Graner <pgraner@redhat.com> - 3.2-15
changelog:
  - Update to the Improve bash $RANDOM pseudo RNG (bug #234906) 
    now works with subshells and make $RANDOM on demand thus reducing the 
    amount of AVCs thrown.


author: Tim Waugh <twaugh@redhat.com> 3.2-7
changelog:
  - Reinstated this change:
    - Post requires ncurses (bug #224567).
  - Reverted this change:
    - Added triggers for install-info (bug #225609).


author: Tim Waugh <twaugh@redhat.com> 3.2-5
changelog:
  - Added triggers for install-info (bug #225609).
  - Use full path to utilities in scriptlets (bug #225609).
  - Fix missing sh-bangs in example scripts (bug #225609).
  - Post requires ncurses (bug #224567).
  - Removed Prefix tag (bug #225609).
  - Fixed BuildRoot tag (bug #225609).
  - Removed trailing full-stop from summary (bug #225609).
  - Spec file is now UTF-8 (bug #225609).
  - Removed obsolete Obsoletes (bug #225609).
  - Moved 'make check' to new 'check' section (bug #225609).
  - Removed uses of RPM_SOURCE_DIR (bug #225609).
  - Fixed macros in changelog (bug #225609).
  - Changed tabs to spaces (bug #225609).


author: Tim Waugh <twaugh@redhat.com> 3.2-1
changelog:
  - Build requires autoconf and gettext.
  - 3.2.  No longer need aq, login, ulimit, sighandler or read-memleak
    patches.


author: Tim Waugh <twaugh@redhat.com> 3.1-2
changelog:
  - No longer need loadables, mbinc or shellfunc patches.
  - Use literal single-quote in bash man page where appropriate (bug #177051).


author: Tim Waugh <twaugh@redhat.com> 3.1-1
changelog:
  - 3.1.
  - No longer need ia64, utf8, multibyteifs, jobs, sigpipe,
    read-e-segfault, manpage, crash, pwd, afs, subshell patches.
  - Remove wrap patch for now.
  - Use upstream patch to fix arrays.


author: Tim Waugh <twaugh@redhat.com> 3.0-40
changelog:
  - Fix read memleak when reading from non-blocking fd (bug #173283).
  - Missed another loop for improved sighandler patch (bug #169231).


author: Tim Waugh <twaugh@redhat.com> 3.0-36
changelog:
  - Added Url: tag (bug #172770).
  - Do not explicitly gzip info pages (bug #172770).
  - Fix permissions on bashbug (bug #172770).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fixed AFS support for output redirection, so that the correct errors
    are reported for other filesystems (bug #155373).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Reverted this change:
    - Added code to /etc/skel/.bash_logout to support the gpm selection buffer
      invalidation on virtual terminals (bug #115493).


author: Tim Waugh <twaugh@redhat.com> 3.0-21
changelog:
  - Added code to /etc/skel/.bash_logout to support the gpm selection buffer
    invalidation on virtual terminals (bug #115493).


author: Tim Waugh <twaugh@redhat.com> 3.0-13
changelog:
  - Check for EINVAL from waitpid() and avoid WCONTINUED in that case.
  - Fixed jobs4 test.
  - Applied experimental upstream patch for trap compatibility.
  - Re-make documentation to reflect source changes.


author: Tim Waugh <twaugh@redhat.com> 3.0-5
changelog:
  - Make trap usage string show POSIX usage (bug #128938).
  - Updated ${x[@]:1} expansion fix from bug-bash list.
  - Updated patch to fix unset array crash (from bug-bash list).


author: Tim Waugh <twaugh@redhat.com> 3.0-2
changelog:
  - Fixed brace expansion (bug #129128).
  - Build with AFS support again, since bug #86514 seems fixed upstream
    (bug #129094).


author: Tim Waugh <twaugh@redhat.com> 2.05b-23
changelog:
  - Fix a warning message (bug #79629).
  - Don't remove generated source during build, for debuginfo package.
  - Don't build with AFS support (bug #86514).


author: Tim Waugh <twaugh@redhat.com> 2.05b-6
changelog:
  - Add the (4) patches from ftp.gnu.org (bug #75888, bug #72512).
  - Ship '.' man page, which doesn't get picked up by glob.
  - Don't install files not shipped when building.
  - Locale shell variables fix (bug #74701).


author: Tim Waugh <twaugh@redhat.com> 2.05b-4
changelog:
  - Fix history substitution modifiers in UTF-8 (bug #70294, bug #71186).
  - Fix ADVANCE_CHAR at end of string (bug #70819).
  - docs: CWRU/POSIX.NOTES no longer exists, but ship POSIX.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05a-9
changelog:
  - Add patch from Ulrich Drepper to get better error messages when trying
    to launch an application with a bad ELF interpreter (e.g. libc5 ld.so)
    (#60870)


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-5
changelog:
  - Don't set BASH_ENV in .bash_profile, it causes .bashrc to be sourced
    twice in interactive non-login shells.
  - s/Copyright/License/


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-2
changelog:
  - bash comes with its own copy of readline... Add the patches we're
    applying in the readline package.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-1
changelog:
  - Update to 2.05
  - Change PROMPT_COMMAND in bashrc for xterms
    to something less space consuming (#24159)
  - Provide plugs for alternate prompt commands (#30634), but don't
    default to them


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 2.04 final
  - remove the echo, pwd, test and kill man pages from the package,
    we're getting them from sh-utils


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 2.04beta5
  - adapt patches
  - Fix up bashrc
  - Don't put in bashrc1, this should be done by the bash1 package
  - use install -c instead of plain install to work on *BSD
  - remove the collected patches - they're now in the base version.
  - make compressed man pages optional


author: Florian La Roche <Florian.LaRoche@redhat.com>
changelog:
  - add some collected patches for bash2
  - change it over to be the main bash package
  - install man-pages root:root
  - obsolete bash2, bash2-doc


author: Ian Macdonald <ianmacd@xs4all.nl>
changelog:
  - upgraded to version 2.02
  - Alpha, MIPS & Sparc patches removed due to lack of test platforms
  - glibc & signal patches no longer required
  - added documentation subpackage (doc)


author: Donnie Barnes <djb@redhat.com>
changelog:
  - added signal handling patch from Dean Gaudet <dgaudet@arctic.org> that
    is based on a change made in bash 2.0.  Should fix some early exit
    problems with suspends and fg.


author: Jens Petersen <petersen@redhat.com> - 0.6-12
changelog:
  - build with Cabal >= 1.8 to stop the dependency inheritance between
    the executables (see https://github.com/haskell/cabal/issues/822)


author: Jens Petersen <petersen@redhat.com> - 0.6-4
changelog:
  - piggyback gnome-bluetile-session off gnome-fallback session
  - drop the gnome bluetile.session file


author: Jens Petersen <petersen@redhat.com> - 0.5.3-8
changelog:
  - add back gnome-bluetile-session.desktop patched to "gnome-session --session="
    which simplifies our readme file considerably


author: Jens Petersen <petersen@redhat.com> - 0.5.3-5
changelog:
  - subpackage the core window-manager program: it is doesn't depend on gtk2hs
  - gnome-session uses gconf to find window-manager:
  - remove gnome-bluetile-session, since WINDOW_MANAGER doesn't work by default
  - add a readme file explaining the gconf and other ways of setting up


author: Jens Petersen <petersen@redhat.com> - 0.5.3-3
changelog:
  - use desktop-file-install to install bluetile.desktop (#426753)
  - fix the desktop files for desktop-install-validate
  - add manpages (#426753)


author: Jens Petersen <petersen@redhat.com> - 0.5.3-1
changelog:
  - BSD license
  - homepage url
  - BR xmonad-contrib, gtk, glade haskell libs
  - add .desktop files like those in xmonad


author: Jesse Keating <jkeating@redhat.com> - 1.10-1
changelog:
  - Force invalid dist values to 0 (spot) (jkeating)
  - Fix a traceback in fixbranches (#817478) (jkeating)


author: Jesse Keating <jkeating@redhat.com> - 1.9-1
changelog:
  - Wrap the prune command in a try (rhbz#785820) (jkeating)
  - Use koji if we have it to get master details (rhbz#785234) (jkeating)
  - Always send builds from master to 'rawhide' (rhbz#785234) (jkeating)
  - Handle fedpkg calls not from a git repo (rhbz#785776) (jkeating)


author: Jesse Keating <jkeating@redhat.com> - 1.8-1
changelog:
  - More completion fixes (jkeating)
  - Add mock-config and mockbuild completion (jkeating)
  - Simplify test for fedpkg availability. (ville.skytta)
  - Fix ~/... path completion. (ville.skytta)
  - Add --raw to bash completion (jkeating)
  - Make things quiet when possible (jkeating)
  - Fix property variables (jkeating)


author: Jesse Keating <jkeating@redhat.com> - 1.7-1
changelog:
  - Adapt property overloading to new-style class. (bochecha)
  - Use super(), now that rpkg uses new-style classes everywhere (bochecha)
  - Add gitbuildurl to the bash completion. (jkeating)
  - Handle koji config with unknown module name (jkeating)


author: Jesse Keating <jkeating@redhat.com> - 1.6-1
changelog:
  - Replace -c with -C for the --config option (jkeating)
  - Package up fedpkg-fixbranches (#751507) (jkeating)
  - Use old style of super class calls (jkeating)


author: Jesse Keating <jkeating@redhat.com> - 1.3-1
changelog:
  - Fix buildrequires (jkeating)
  - Don't register a nonexestant target (jkeating)
  - Drop koji-rhel.conf file (jkeating)
  - Fix up the setup.py (jkeating)


author: Jesse Keating <jkeating@redhat.com> - 1.2-1
changelog:
  - Catch raises in the libraries (jkeating)
  - Fix the fixbranches script for new module name (jkeating)
  - srpm takes arguments, pass them along (jkeating)
  - Get error output from user detection failures (jkeating)
  - Get the user name from the Fedora SSL certificate. (bochecha)
  - Fix crash when detecting Rawhide. (bochecha)


author: Jesse Keating <jkeating@redhat.com> - 1.1-1
changelog:
  - Overload curl stuff (jkeating)
  - Hardcode fedpkg version requires (jkeating)
  - Fix up changelog date (jkeating)


author: Remi Collet <remi@fedoraproject.org> - 1.2.3-1
changelog:
  - Version 1.2.3 (stable), API 1.2.3 (stable)
  - upstream now provides LICENSE and tests
  - run all tests if network available, else only parser


author: Petr Pisar <ppisar@redhat.com> 1.01-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Add BuildRequires covered by perl package
  - Distribute examples
  - Install into perl core (i.e. do not use vendor paths)


author: Brian Pepple <bpepple@fedoraproject.org> - 0.2.1-1
changelog:
  - Update to 0.2.1.
  - Add BR on farstream-devel.
  - Bump minimum version of tp-glib.
  - Add obsolete/provide on telepathy-farsight.


author: Konstantin Ryabitsev <mricon@kernel.org> - 0.3-1
changelog:
  - Use the git-checkout notation as per Fedora guidelines.
  - Move "test" dir to be with the -server package.
  - Make kup-client to just be the "kup" package.
  - Provide the kup-generate-tarball.sh script to automate tarball generation.
  - Create a -server-utils subpackage for gpg-sign-all and genrings tools.
  - Create a tmpfiles entry for systemd (needed for F15 and above).


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-3
changelog:
  - fix: minor documentation fixes
  - set SASL_NOCANON to on by default (#949864)
  - remove trailing spaces


author: Jan Synáček <jsynacek@redhat.com> 2.4.35-1
changelog:
  - new upstream release (#947235)
  - fix: slapd.service should ensure that network is up before starting (#946921)
  - fix: NSS related resource leak (#929357)


author: Jan Synáček <jsynacek@redhat.com> 2.4.34-2
changelog:
  - fix: syncrepl push DELETE operation does not recover (#920482)
  - run autoreconf every build, drop autoreconf patch (#926280)


author: Jan Synáček <jsynacek@redhat.com> 2.4.34-1
changelog:
  - enable perl backend (#820547)
  - package ppolicy-check-password (#829749)
  - add perl specific BuildRequires
  - fix bogus dates


author: Jan Vcelak <jvcelak@fedoraproject.org> 2.4.34-1
changelog:
  - new upstream release (#917603)
  - fix: slapcat segfaults if cn=config.ldif not present (#872784)
  - use systemd-rpm macros in spec file (#850247)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.33-1
changelog:
  - new upstream release:
    + slapd: ACLs, syncrepl
    + backends: locking and memory management in MDB
    + manpages: slapo-refint
  - patch update: MozNSS certificate database in SQL format cannot be used (#860317)
  - fix: slapd.service should not use /tmp (#859019)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-3
changelog:
  - fix: some TLS ciphers cannot be enabled (#852338)
  - fix: connection hangs after fallback to second server when certificate hostname verification fails (#852476)
  - fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#852786)
  - fix: MozNSS certificate database in SQL format cannot be used (#857373)
  - fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#857455)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-2
changelog:
  - enhancement: TLS, prefer private keys from authenticated slots
  - enhancement: TLS, allow certificate specification including token name
  - resolve TLS failures in replication in 389 Directory Server


author: Jan Vcelak <jvcelak@redhat.com> 2.4.32-1
changelog:
  - new upstream release
    + library: double free, SASL handling
    + tools: read SASL_NOCANON from config file
    + slapd: config index renumbering, duplicate error response
    + backends: various fixes in mdb, bdb/hdb, ldap
    + accesslog, syncprov: fix memory leaks in with replication
    + sha2: portability, thread safety, support SSHA256,384,512
    + documentation fixes


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-5
changelog:
  - fix: querying for IPv6 DNS records when IPv6 is disabled on the host (#835013)
  - fix: smbk5pwd module computes invalid LM hashes (#841560)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-4
changelog:
  - modify the package build process
    + fix autoconfig files to detect Mozilla NSS library using pkg-config
    + remove compiler flags which are not needed currently
    + build server, client and library together
    + avoid stray dependencies by using --as-needed linker flag
    + enable SLAPI interface in slapd


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-3
changelog:
  - update fix: count constraint broken when using multiple modifications (#795766)
  - fix: invalid order of TLS shutdown operations (#808464)
  - fix: TLS error messages overwriting in tlsm_verify_cert() (#810462)
  - fix: reading pin from file can make all TLS connections hang (#829317)
  - CVE-2012-2668: cipher suite selection by name can be ignored (#825875)
  - fix: slapd fails to start on reboot (#829272)
  - fix: default cipher suite is always selected (#828790)
  - fix: less influence between individual TLS contexts:
    - replication with TLS does not work (#795763)
    - possibly others


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-2
changelog:
  - fix: nss-tools package is required by the base package, not the server subpackage
  - fix: MozNSS CA certdir does not work together with PEM CA cert file (#819536)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.31-1
changelog:
  - new upstream release
    + library: IPv6 url detection
    + library: rebinding to failed connections
    + server: various fixes in mdb backend
    + server: various fixes in replication
    + server: various fixes in overlays and minor backends
    + documentation fixes
  - remove patches which were merged upstream


author: Jan Vcelak <jvcelak@redhat.com> 2.4.30-1
changelog:
  - new upstream release
    + server: fixes in mdb backend
    + server: fixes in manual pages
    + server: fixes in syncprov, syncrepl, and pcache
  - removed patches which were merged upstream


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-4
changelog:
  - fix: missing options in manual pages of client tools (#796232)
  - fix: SASL_NOCANON option missing in ldap.conf manual page (#732915)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-3
changelog:
  - fix: ldap_result does not succeed for sssd (#771484)
  - Jan Synáček <jsynacek@redhat.com>:
    + fix: count constraint broken when using multiple modifications (#795766)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-2
changelog:
  - fix update: provide ldif2ldbm, not ldib2ldbm (#437104)
  - Jan Synáček <jsynacek@redhat.com>:
    + unify systemctl binary paths throughout the specfile and make them usrmove compliant
    + make path to chkconfig binary usrmove compliant


author: Jan Vcelak <jvcelak@redhat.com> 2.4.29-1
changelog:
  - new upstream release
    + MozNSS fixes
    + connection handling fixes
    + server: buxfixes in mdb backend
    + server: buxfixes in overlays (syncrepl, meta, monitor, perl, sql, dds, rwm)
  - openldap-servers now provide ldib2ldbm (#437104)
  - certificates management improvements
    + create empty Mozilla NSS certificate database during installation
    + enable builtin Root CA in generated database (#789088)
    + generate server certificate using Mozilla NSS tools instead of OpenSSL tools
    + fix: correct path to check-config.sh in service file (Jan Synáček <jsynacek@redhat.com>)
  - temporarily disable certificates checking in check-config.sh script
  - fix: check-config.sh get stuck when executing command as a ldap user


author: Jan Vcelak <jvcelak@redhat.com> 2.4.28-3
changelog:
  - fix: replication (syncrepl) with TLS causes segfault (#783431)
  - fix: slapd segfaults when PEM certificate is used and key is not set (#772890)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.28-1
changelog:
  - new upstream release
    + server: support for delta-syncrepl in multi master replication
    + server: add experimental backend - MDB
    + server: dynamic configuration for passwd, perl, shell, sock, and sql backends
    + server: support passwords in APR1
    + library: support for Wahl (draft)
    + a lot of bugfixes
  - remove patches which were merged upstream
  - compile backends as modules (except BDB, HDB, and monitor)
  - reload systemd daemon after installation


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-6
changelog:
  - package cleanup:
    + hardened build: switch from LDFLAGS to RPM macros
    + remove old provides and obsoletes
    + add new slapd maintainance scripts
    + drop defattr macros, clean up permissions in specfile
    + fix rpmlint warnings: macros in comments/changelog
    + fix rpmlint warnings: non UTF-8 documentation
    + rename environment file to be more consistent (ldap -> slapd)
  - replace sysv initscript with systemd service file (#
  - new format of environment file due to switch to systemd
    (automatic conversion is performed)
  - patch OpenLDAP to skip empty command line arguments
    (arguments expansion in systemd works different than in shell)
  - CVE-2011-4079: one-byte buffer overflow in slapd (#749324)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-5
changelog:
  - rebuild: openldap does not work after libdb rebase (#743824)
  - regression fix: openldap built without tcp_wrappers (#743213)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-3
changelog:
  - fix: SSL_ForceHandshake function is not thread safe (#701678)
  - fix: allow unsetting of tls_* syncrepl options (#734187)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.26-2
changelog:
  - security hardening: library needs partial RELRO support added (#733071)
  - fix: NSS_Init* functions are not thread safe (#731112)
  - fix: incorrect behavior of allow/try options of VerifyCert and TLS_REQCERT (#725819)
  - fix: memleak - free the return of tlsm_find_and_verify_cert_key (#725818)
  - fix: conversion of constraint overlay settings to cn=config is incorrect (#733067)
  - fix: DDS overlay tolerance parametr doesn't function and breakes default TTL (#733069)
  - manpage fix: errors in manual page slapo-unique (#733070)
  - fix: matching wildcard hostnames in certificate Subject field does not work (#733073)
  - new feature: honor priority/weight with ldap_domain2hostlist (#733078)
  - manpage fix: wrong ldap_sync_destroy() prototype in ldap_sync(3) manpage (#717722)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.25-1
changelog:
  - rebase to new upstream release
  - change default database type from BDB to HDB
  - enable ldapi:/// interface by default
  - set cn=config management ACLs for root user, SASL external schema (#712495)
  - fix: server scriptlets require initscripts package (#716857)
  - fix: connection fails if TLS_CACERTDIR doesn't exist but TLS_REQCERT
    is set to 'never' (#716854)
  - fix: segmentation fault caused by double-free in ldapexop (#699683)
  - fix: segmentation fault of client tool when input line in LDIF file
    is splitted but indented incorrectly (#716855)
  - fix: segmentation fault of client tool when LDIF input file is not terminated
    by a new line character (#716858)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.24-2
changelog:
  - new: system resource limiting for slapd using ulimit
  - fix update: openldap can't use TLS after a fork() (#636956)
  - fix: possible null pointer dereference in NSS implementation
  - fix: openldap-servers upgrade hangs or do not upgrade the database (#664433)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-7
changelog:
  - fix: openldap can't use TLS after a fork() (#636956)
  - fix: openldap-server upgrade gets stuck when the database is damaged (#664433)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-6
changelog:
  - fix: some server certificates refused with inadequate type error (#668899)
  - fix: default encryption strength dropped in switch to using NSS (#669446)
  - systemd compatibility: add configuration file (#656647, #668223)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-5
changelog:
  - initscript: slaptest with '-u' to skip database opening (#667768)
  - removed slurpd options from sysconfig/ldap
  - fix: verification of self issued certificates (#657984)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-4
changelog:
  - Mozilla NSS - implement full non-blocking semantics
    ldapsearch -Z hangs server if starttls fails (#652822)
  - updated list of all overlays in slapd.conf (#655899)
  - fix database upgrade process (#656257)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-3
changelog:
  - add support for multiple prefixed Mozilla NSS database files in TLS_CACERTDIR
  - reject non-file keyfiles in TLS_CACERTDIR (#652315)
  - TLS_CACERTDIR precedence over TLS_CACERT (#652304)
  - accept only files in hash.0 format in TLS_CACERTDIR (#650288)
  - improve SSL/TLS trace messages (#652818)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-2
changelog:
  - fix possible infinite loop when checking permissions of TLS files (#641946)
  - removed outdated autofs.schema (#643045)
  - removed outdated README.upgrade
  - removed relics of migrationtools


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-1
changelog:
  - rebase to 2.4.23
  - embeded db4 library removed
  - removed bogus links in "SEE ALSO" in several man-pages (#624616)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.22-7
changelog:
  - Mozilla NSS - delay token auth until needed (#616552)
  - Mozilla NSS - support use of self signed CA certs as server certs (#614545)


author: Jan Vcelak <jvcelak@redhat.com> - 2.4.22-6
changelog:
  - CVE-2010-0211 openldap: modrdn processing uninitialized pointer free (#605448)
  - CVE-2010-0212 openldap: modrdn processing IA5StringNormalize NULL pointer dereference (#605452)
  - obsolete configuration file moved to /usr/share/openldap-servers (#612602)


author: Rich Megginson <rmeggins@redhat.com> - 2.4.22-3
changelog:
  - added ldif.h to the public api in the devel package
  - added -lldif to the public api
  - added HAVE_MOZNSS and other flags to use Mozilla NSS for crypto


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.22-1
changelog:
  - rebased to 2.4.22 (mostly bugfixes, added back-ldif, back-null testing support)
  - due to some possible issues pointed out in last update testing phase, I'm
    pulling back the last change (slapd can't be moved since it depends on /usr
    possibly mounted from network)


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-2
changelog:
  - fixed tls connection accepting when TLSVerifyClient = allow
  - /etc/openldap/ldap.conf removed from files owned by openldap-servers
  - minor changes in spec file to supress warnings
  - some changes in init script, so it would be possible to use it when
    using old configuration style


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-4
changelog:
  - updated smbk5pwd patch to be linked with libldap (#526500)
  - the last buffer overflow patch replaced with the one from upstream
  - added /etc/openldap/slapd.d and /etc/openldap/slapd.conf.bak
    to files owned by openldap-servers


author: Jan Zeleny <jzeleny@redhat.com> 2.4.18-2
changelog:
  - changed configuration approach. Instead od slapd.conf slapd
    is using slapd.d directory now
  - fix of some issues caused by renaming of init script
  - fix of buffer overflow issue in ldif.c pointed out by new glibc


author: Jan Zeleny <jzeleny@redhat.com> 2.4.16-1
changelog:
  - rebase of openldap to 2.4.16
  - fixed minor issue in spec file (output looking interactive
    when installing servers)


author: Jan Zeleny <jzeleny@redhat.com> 2.4.15-3
changelog:
  - extended previous patch (#481310) to remove options cfMP
    from some client tools
  - correction of patch setugid (#494330)


author: Jan Safranek <jsafranek@redhat.com> 2.4.11-3
changelog:
  - add SLAPD_SHUTDOWN_TIMEOUT to /etc/sysconfig/ldap, allowing admins
    to set non-default slapd shutdown timeout
  - add checkpoint to default slapd.conf file (#458679)


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-4
changelog:
  - bdb upgraded to 4.6.21
  - reworked upgrade logic again to run db_upgrade when bdb version
    changes


author: Jan Safranek <jsafranek@redhat.com> 2.4.8-3
changelog:
  - reworked the upgrade logic, slapcat/slapadd of the whole database
    is needed only if minor version changes (2.3.x -> 2.4.y)
  - do not try to save database in LDIF format, if openldap-servers package
    is  being removed (it's up to the admin to do so manually)


author: Jan Safranek <jsafranek@redhat.com> 2.4.7-4
changelog:
  - fixed rpmlint warnings and errors
    - /etc/openldap/schema/README moved to /usr/share/doc/openldap


author: Jan Safranek <jsafranek@redhat.com> 2.3.38-2
changelog:
  - skeleton /etc/sysconfig/ldap added
  - new SLAPD_LDAP option to turn off listening on ldap:/// (#292591)
  - fixed checking of SSL (#292611)
  - fixed upgrade with empty database


author: Jan Safranek <jsafranek@redhat.com> 2.3.37-2
changelog:
  - do not use specific automake and autoconf
  - do not distinguish between NPTL and non-NPTL platforms, we have NPTL
    everywhere
  - db-4.6.18 integrated
  - updated openldap-servers License: field to reference BDB license


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-6
changelog:
  - fix compat-slapcat compilation. Now it can be found in
    /usr/lib/compat-openldap/slapcat, because the tool checks argv[0]
    (#246581)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-4
changelog:
  - Fix initscript return codes (#242667)
  - Provide overlays (as modules; #246036, #245896)
  - Add available modules to config file


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-3
changelog:
  - do not create script in /tmp on startup (bz#188298)
  - add compat-slapcat to openldap-compat (bz#179378)
  - do not import ddp services with migrate_services.pl
    (bz#201183)
  - sort the hosts by adders, preventing duplicities
    in migrate*nis*.pl (bz#201540)
  - start slupd for each replicated database (bz#210155)
  - add ldconfig to devel post/postun (bz#240253)
  - include misc.schema in default slapd.conf (bz#147805)


author: Jan Safranek <jsafranek@redhat.com> 2.3.34-2
changelog:
  - slapadd during package update is now quiet (bz#224581)
  - use _localstatedir instead of var/ during build (bz#220970)
  - bind-libbind-devel removed from BuildRequires (bz#216851)
  - slaptest is now quiet during service ldap start, if
    there is no error/warning (bz#143697)
  - libldap_r.so now links with pthread (bz#198226)
  - do not strip binaries to produce correct .debuginfo packages
    (bz#152516)


author: Jay Fenlason <fenlason<redhat.com> 2.3.34-1
changelog:
  - New upstream release
  - Upgrade the scripts for migrating the database so that they might
    actually work.
  - change bind-libbind-devel to bind-devel in BuildPreReq


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.19-2
changelog:
  - Upgrade to 2.3.19, which upstream now considers stable
  - Modify the -config.patch, ldap.init, and this spec file to put the
    pid file and args file in an ldap-owned openldap subdirectory under
    /var/run.
  - Move back_sql* out of _sbindir/openldap , which requires
    hand-moving slapd and slurpd to _sbindir, and recreating symlinks
    by hand.
  - Retire openldap-2.3.11-ads.patch, which went upstream.
  - Update the ldap.init script to run slaptest as the ldap user rather
    than as root.  This solves
    bz#150172 Startup failure after database problem
  - Add to the servers post and preun scriptlets so that on preun, the
    database is slapcatted to /var/lib/ldap/upgrade.ldif and the
    database files are saved to /var/lib/ldap/rpmorig.  On post, if
    /var/lib/ldap/upgrade.ldif exists, it is slapadded.  This means that
    on upgrades from 2.3.16-2 to higher versions, the database files may
    be automatically upgraded.  Unfortunatly, because of the changes to
    the preun scriptlet, users have to do the slapcat, etc by hand when
    upgrading to 2.3.16-2.  Also note that the /var/lib/ldap/rpmorig
    files need to be removed by hand because automatically removing your
    emergency fallback files is a bad idea.
  - Upgrade internal bdb to db-4.4.20.  For a clean upgrade, this will
    require that users slapcat their databases into a temp file, move
    /var/lib/ldap someplace safe, upgrade the openldap rpms, then
    slapadd the temp file.


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-3
changelog:
  - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and
    compat-openldap- to close
    bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-2
changelog:
  - Upgrade to 2.3.11, which upstream now considers stable.
  - Switch compat-openldap to 2.2.29
  - remove references to nss_ldap_build from the spec file
  - remove references to 2.0 and 2.1 from the spec file.
  - reorganize the build() function slightly in the spec file to limit the
    number of redundant and conflicting options passedto configure.
  - Remove the attempt to hardlink ldapmodify and ldapadd together, since
    the current make install make ldapadd a symlink to ldapmodify.
  - Include the -ads patches to allow SASL binds to an Active Directory
    server to work.  Nalin <nalin@redhat.com> wrote the patch, based on my
    broken first attempt.


author: Jay Fenlason <fenlason@redhat.com> 2.2.26-2
changelog:
  - Move the slapd.pem file to /etc/pki/tls/certs
    and edit the -config patch to match to close
    bz#143393  Creates certificates + keys at an insecure/bad place
  - also use _sysconfdir instead of hard-coding /etc


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add the tls-fix-connection-test patch to close
    bz#161991 openldap password disclosure issue
  - add the hop patches to prevent infinite looping when chasing referrals.
    OpenLDAP ITS #3578


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.26-1
changelog:
  - run slaptest with the -u flag if no id2entry db files are found, because
    you can't check for read-write access to a non-existent database (#156787)
  - add _sysconfdir/openldap/cacerts, which authconfig sets as the
    TLS_CACERTDIR path in /etc/openldap/ldap.conf now
  - use a temporary wrapper script to launch slapd, in case we have arguments
    with embedded whitespace (#158111)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.26 (stable 20050429)
  - enable the lmpasswd scheme
  - print a warning if slaptest fails, slaptest -u succeeds, and one of the
    directories listed as the storage location for a given suffix in slapd.conf
    contains a readable file named __db.001 (#118678)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1
changelog:
  - update to 2.2.24 (stable 20050318)
  - export KRB5_KTNAME in the init script, in case it was set in the sysconfig
    file but not exported


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1
changelog:
  - update to 2.2.23 (stable-20050125)
  - update notes on upgrading from earlier versions
  - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1
changelog:
  - update to 2.2.20 (stable-20050103)
  - warn about unreadable krb5 keytab files containing "ldap" keys
  - warn about unreadable TLS-related files
  - own a ref to subdirectories which we create under _libdir/tls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.17 (stable-20040923) (#135188)
  - move nptl libraries into arch-specific subdirectories on x86 boxes
  - require a newer glibc which can provide nptl libpthread on i486/i586


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move slapd startup to earlier in the boot sequence (#103160)
  - update to 2.2.15 (stable-20040822)
  - change version number on compat-openldap to include the non-compat version
    from which it's compiled, otherwise would have to start 2.2.15 at release 3
    so that it upgrades correctly


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    evolution_connector_prefix)
  - provide openldap-evolution-devel = version-release in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1
changelog:
  - add compat-openldap subpackage
  - default to bdb, as upstream does, gambling that we're only going to be
    on systems with nptl now


author: Thomas Woerner <twoerner@redhat.com> 2.1.29-3
changelog:
  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2
changelog:
  - fix incorrect use of find when attempting to detect a common permissions
    error in the init script (#114866)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1
changelog:
  - change logging facility used from daemon to local4 (#112730, reversing #11047)
    BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build bundled libdb for slapd dynamically to make the package smaller,
    among other things
  - on tls-capable arches, build libdb both with and without shared posix
    mutexes, otherwise just without
  - disable posix mutexes unconditionally for db 4.0, which shouldn't need
    them for the migration cases where it's used
  - update to MigrationTools 45


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually require newer libtool, as was intended back in 2.1.22-0, noted as
    missed by Jim Richardson


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0
changelog:
  - 2.1.22 now badged stable
  - be more aggressive in what we index by default
  - use/require libtool 1.5


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_*
  - install slapcat/slapadd from 2.0.x for migration purposes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17
  - disable the shell backend, not expected to work well with threads
  - drop the kerberosSecurityObject schema, the krbName attribute it
    contains is only used if slapd is built with v2 kbind support


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8
changelog:
  - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
  - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
    1936, 2007, 2009, which were included in 2.0.26.
  - add two more patches for db 4.1.24 from sleepycat's updates page
  - use openssl pkgconfig data, if any is available


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/_libdir instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1
changelog:
  - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
    slapd databases until we move to 2.1.x)
  - use %{_smp_mflags} when running make
  - update to MigrationTools 44
  - enable dynamic module support in slapd


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2
changelog:
  - switch to an internalized Berkeley DB as the ldbm back-end  (NOTE: this breaks
    access to existing on-disk directory data)
  - add slapcat/slapadd with gdbm for migration purposes
  - remove Kerberos dependency in client libs (the direct Kerberos dependency
    is used by the server for checking {kerberos} passwords)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2
changelog:
  - temporarily disable optimizations for ia64 arches
  - specify pthreads at configure-time instead of letting configure guess


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable kbind support (deprecated, and I suspect unused)
  - configure with --with-kerberos=k5only instead of --with-kerberos=k5
  - build slapd with threads


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1
changelog:
  - update to 2.0.12 to pull in fixes for setting of default TLS options, among
    other things
  - update to migration tools 39
  - drop tls patch, which was fixed better in this release


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a build-time requirement on pam-devel
  - add a build-time requirement on a sufficiently-new libtool to link
    shared libraries to other shared libraries (which is needed in order
    for prelinking to work)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
    compliance) by name (follows from #43079, which split cyrus-sasl's
    cram-md5 and digest-md5 modules out into cyrus-sasl-md5)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move shared libraries to /lib
  - redo init script for better internationalization (#26154)
  - don't use ldaprc files in the current directory (#38402) (patch from
    hps@intermeta.de)
  - add BuildPrereq on tcp wrappers since we configure with
    --enable-wrappers (#43707)
  - don't overflow debug buffer in mail500 (#41751)
  - don't call krb5_free_creds instead of krb5_free_cred_contents any
    more (#43159)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build dummy certificate in %post, use it in default config
  - configure-time shenanigans to help a confused configure script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out pidfile patches, which interact weirdly with Linux threads
  - mark non-standard schema as such by moving them to a different directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
    a /etc/sysconfig/ldap file (#23549)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
    per mail from the ldap-nis mailing list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
    (OpenLDAP ITS #889)
  - add "-h ldaps:///" to server init when TLS is enabled, in order to support
    ldaps in addition to the regular STARTTLS (suggested by Del)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  - configure slapd to run as the non-root user "ldap" (#19370)
  - chdir() before chroot() (we don't use chroot, though) (#19369)
  - disable saving of the pid file because the parent thread which saves it and
    the child thread which listens have different pids


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add missing required attributes to conversion scripts to comply with schema
  - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
    our own OID tree to define attributes and classes migration scripts expect
  - tweak automounter migration script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - try adding the suffix first when doing online migrations
  - force ldapadd to use simple authentication in migration scripts
  - add indexing of a few attributes to the default configuration
  - add commented-out section on using TLS to default configuration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.6
  - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  - take the -s flag off of slapadd invocations in migration tools
  - add the cosine.schema to the default server config, needed by inetorgperson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add the nis.schema and inetorgperson.schema to the default server config
  - make ldapadd a hard link to ldapmodify because they're identical binaries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build a semistatic slurpd with threads, everything else without
  - disable reverse lookups, per email on OpenLDAP mailing lists
  - make sure the execute bits are set on the shared libraries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split off clients and servers to shrink down the package and remove the
    base package's dependency on Perl
  - make certain that the binaries have sane permissions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to gdbm; I'm getting off the db merry-go-round
  - tweak the init script some more
  - add instdir to @INC in migration scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak init script to return error codes properly
  - change initscripts dependency to one on /etc/init.d


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.11
  - add condrestart logic to init script
  - munge migration scripts so that you don't have to be
    /usr/share/openldap/migration to run them
  - add code to create pid files in /var/run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  - backport replacement for the ldapuser patch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.10
  - add revamped version of patch from kos@bastard.net to allow execution as
    any non-root user
  - remove test suite from %build because of weirdness in the build system


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  - fix some possible string-handling problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add -D_REENTRANT to make threaded stuff more stable, even though it looks
    like the sources define it, too
  - mark *.ph files in migration tools as config files


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.2.7
  - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  - take include files out of base package


author: Ondrej Vasik <ovasik@redhat.com> 1.74.2-2
changelog:
  - updated Makefile: do ship .svg images(#486849), xsl
    stylesheets for website, xhtml-1_1, docbook -> epub
    convertor


author: Ondrej Vasik <ovasik@redhat.com> 1.73.2-8
changelog:
  - remove entries from xmlcatalog only on removal of package
    (required because of the change with droping release
     -caused drop of catalog entries during update)


author: Ondrej Vasik <ovasik@redhat.com> 1.73.2-7
changelog:
  - change a few non-constant expressions to constant that
    could now be handled by passivetex(#366441)


author: Ondrej Vasik <ovasik@redhat.com> 1.73.2-6
changelog:
  - fixed docbook-xsl-pagesetup.patch to follow Norman Walsh's
    documentation for nonpassivetex processing(#307001)


author: Ondrej Vasik <ovasik@redhat.com> 1.73.2-5
changelog:
  - convert all html files in doc to UTF-8 in prep
    (latest rpmlint gives warnings)
  - no longer using release in style-xsl dir(#389231)


author: Tim Waugh <twaugh@redhat.com> 1.69.1-2
changelog:
  - Patches from W. Michael Petullo:
    - Fix lists blocking (bug #161371).
    - Avoid proportional-column-width for passivetex (bug #176766).


author: Tim Waugh <twaugh@redhat.com> 1.64.1-6
changelog:
  - Fix last margin-left fix (bug #113456).
  - Reduce instances of itemized/ordered lists having misalignments.


author: Tim Waugh <twaugh@redhat.com> 1.62.4-1
changelog:
  - 1.62.4.
  - No longer need hyphens patch.
  - Avoid expressions in margin-left attributes, since passivetex does not
    understand them.


author: Chris Runge <crunge@pobox.com>
changelog:
  - added extensions and additional doc
  - bin added to doc; the Perl files are for Win32 Perl and so need some
    conversion first


author: Chris Runge <crunge@pobox.com>
changelog:
  - Initial RPM (based on docbook-style-dsssl RPM)
  - note: no catalog right now (I don't know how to do it; and not sure why
    it is necessary)


author: Kalev Lember <kalevlember@gmail.com> - 1.10.1-1
changelog:
  - Update to 1.10.1
  - Drop upstreamed patches
  - Enable parallel make
  - Adjust for webkit -> webkitgtk tarball rename


author: Kalev Lember <kalevlember@gmail.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Backport NPAPI plugin support from trunk
  - Fix the build with spellchecking enabled (Paweł Forysiuk)
  - Backport a build fix with bison 2.6


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.24.10-3
changelog:
  - Renamed the source package to mingw-gtk2 (RHBZ #800392)
  - Use mingw macros without leading underscore


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.24.9-1
changelog:
  - Update to 2.24.9
  - Dropped the .la files
  - Dropped the .dll.a files for all modules
  - Fix gmodule linker failure when using the latest pango


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.21.7-1
changelog:
  - Update to 2.21.7
  - Dropped upstreamed WIMP theme patch
  - Moved all gdk-pixbuf bits to a seperate package as upstream has separated it
  - Added BR: mingw32-gdk-pixbuf


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.20.1-2
changelog:
  - Re-enable the WIMP theme now that upstream has provided a fix for it (RHBZ #608911, GNOME BZ #598299)
  - Rebuild against libpng 1.4.3


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.18.3-1
changelog:
  - Update to 2.18.3
  - Drop upstreamed patch (GNOME BZ #597535)
  - Re-enable GDI+ support as it's fixed upstream (GNOME BZ #552678)
  - This release contains a workaround for a rendering bug which got
    introduced during the CSW merge (GNOME BZ #598299)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.17.11-3
changelog:
  - Use relative paths instead of absolute paths in the gdk-pixbuf.loaders file
  - Added the gtk.immodules file (BZ #522957)


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.17.7-1
changelog:
  - Update to 2.17.7
  - Automatically generate debuginfo subpackage
  - Add --with-libjasper to the ./configure command


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.17.1-1
changelog:
  - Update to 2.17.1
  - Use %global instead of %define
  - The -static subpackage was missing a Group: declaration
  - Drop upstreamed patch
  - Add BR: mingw32-libtiff
  - Updated the gdk-pixbuf.loaders file for libtiff support


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.15.5-1
changelog:
  - Update to 2.15.5
  - Disable gdiplus support for now because of GNOME BZ#552678
  - Use the ./configure flag --without-libtiff until mingw32-libtiff is packaged
  - Fixed the %defattr line
  - Dropped the .def files as they aren't used anymore after compilation
  - Added -static subpackage


author: Richard W.M. Jones <rjones@redhat.com> - 2.15.0-1
changelog:
  - Rebase to Fedora native version 2.15.0.
  - Disable static libraries.
  - Use _smp_mflags.
  - Use find_lang macro.


author: Richard W.M. Jones <rjones@redhat.com> - 2.14.4-1
changelog:
  - New upstream version 2.14.4.
  - Require cairo >= 1.8.0 because of important fixes.
  - Remove a couple of patches which are now upstream.


author: Orion Poplawski <orion@nwra.com> - 1:1.7.0-0.3.b1
changelog:
  - Add patch from github pull 371 to fix python 3.3 pickle issue
  - Remove cython .c source regeneration - fails now


author: Orion Poplawski <orion@cora.nwra.com> - 1:1.7.0-0.1.b1
changelog:
  - Update to 1.7.0b1
  - Rebase python 3.3 patchs to current git master
  - Drop patches applied upstream


author: David Malcolm <dmalcolm@redhat.com> - 1:1.6.2-5
changelog:
  - rework patches for 3.3 to more directly reflect upstream's commits
  - re-enable test suite on python 3
  - forcibly regenerate Cython .c source to avoid import issues on Python 3.3


author: Orion Poplawski <orion@cora.nwra.com> - 1:1.6.0-0.1.b1
changelog:
  - Update to 1.6.0b1
  - Build python3  module with python3
  - Add patch from upstream to fix build time import error


author: Jon Ciesla <limb@jcomserv.net> 1.2.0-1
changelog:
  - New upstream release, added python-nose BR. BZ 465999.
  - Using atlas blas, not blas-devel. BZ 461472.


author: Jarod Wilson <jwilson@redhat.com> 1.0.2-2
changelog:
  - Drop BR: atlas-devel, since it just provides binary-compat
    blas and lapack libs. Atlas can still be optionally used
    at runtime. (Note: this is all per the atlas maintainer).


author: Jarod Wilson <jwilson@redhat.com> 1.0.1-3
changelog:
  - Fix up cpuinfo bug (#229753). Upstream bug/change:
    http://projects.scipy.org/scipy/scipy/ticket/349


author: Jarod Wilson <jwilson@redhat.com> 1.0.1-2
changelog:
  - Per discussion w/Jose Matos, Obsolete/Provide f2py, as the
    stand-alone one is no longer supported/maintained upstream


author: Hans de Goede <hdegoede@redhat.com> - 0.9.1-16
changelog:
  - Rebuild for new SDL_gfx
  - Drop gcj aot bits, Fedora has not been using these for a long long time
  - Update to match latest java packaging guidelines


author: Hans de Goede <j.w.r.degoede@hhs.nl> 0.9.1-7
changelog:
  - And the dejavu-fonts fontfile names changed back again (what fun)
  - The gcj bug causing us to not compile has been fixed, use gcj again
    and drop ExclusiveArch
  - There is no reason for us to run ldconfig!
  - Sigh we must now define __arch__ ourself as the newer swig doesn't


author: Hans de Goede <j.w.r.degoede@hhs.nl> 0.9.1-6
changelog:
  - Adjust font symlinks in sdljava-demo package for fontfile name changes in
    dejavu-fonts (bz 388861)


author: Hans de Goede <j.w.r.degoede@hhs.nl> 0.9.1-2
changelog:
  - Dynamically determine gcc include path instead of hardcoding it, so that
    sdljava will build on other setups then devel-x86_64 too (oops).


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.9.12-17
changelog:
  - Update to last version 0.9.12 with hope it fix BZ#646694 and by request BZ#666612
  - Change java related exclusion to El6 too.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.9.8-16
changelog:
  - Noarch subpackage became only on Fedora
  	( https://fedorahosted.org/fedora-infrastructure/ticket/1772#comment:4 )
  - Also -javaviewers subpackage compleatly disabled on PPC arch on EL-5 because
  	there no java-devel >= 1:1.6.0 and java-1.6.0-openjdk-devel.
  	( https://fedorahosted.org/fedora-infrastructure/ticket/1772#comment:4 )


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.9.8-12
changelog:
  - Own %{_datadir}/%{name} instead of %{_datadir}/%{name}/classes
  - Add Requires: %{name} = %{version}-%{release} in subpackage.
  - Change summary and description for javaviewers subpackage.
  - Remove %doc marker from man-page.
  - %defattr(-,root,root,0755) -> %defattr(-,root,root,-)
  - Add classes/ssl/src/tight/README classes/ssl/src/ultra/README files into
  	javaviewers subpackage %doc (thank you Orcan Ogetbil)
  - ln -s replaced by %{__ln_s}
  - Set License: GPLv2+ for javaviewers subpackage (Thanks Spot)


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.9.8-11
changelog:
  - Remove all prebuilt *.jar-files in %prep section and try build it from source.
  - Add BR java-1.6.0-openjdk-devel
  - Introduce new subpackage x11vnc-javaviewers.
  - Add separate build java-viewers.
  - Add Russian localized versions of Summary and descrioptions.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.9.8-10
changelog:
  - Fix some spelling, change some cosmetic things.
  - Delete Patch0 and hacks to link with system lzo package - it is not needed
  	anymore as we link it with systel libvncserver instead.
  - Delete BR lzo-devel
  - Remiove empty directory %{_datadir}/%{name}/


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.9.8-8
changelog:
  - Link to shared lzo instead of minilzo for all (not only EL-5).
  - Add BuildRequires: /usr/include/X11/extensions/XShm.h
  - Patch2: x11vnc-0.9.8-XShm-explicit-include.patch
  - Step to conditional BR for Fedora 12, add
  	Patch2: x11vnc-0.9.8-XShm-explicit-include.patch to build on it.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.9.8-7
changelog:
  - Change license to GPLv2 without plus according to x11vnc.c
  	source (thanks to Christian Krause).
  - For consistency macros usage replace "ln -s" by %{__ln_s},
  	mv by %{__mv} and similar (chmod, sed).
  - Change find call to avoid using xargs in chmod sources command.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.9.8-6
changelog:
  - Build with openssl unconditionally.
  - Add Patch1: x11vnc-0.9.8-disableRpath.patch
  - fix source perms for the -debuginfo package rpmlint warnings


