# changelog

author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.69-2
changelog:
  - Always pass unsuspended dm devices through persistent filter to other filters.
  - Move test for suspended dm devices ahead of other filters.
  - Fix another segfault in clvmd -R if no response from daemon received. (2.02.68)
  - Preserve memlock balance in clvmd when activation triggers a resume.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-2
changelog:
  - Make vgck warn about missing PVs.
  - Revert failed table load preparation after "create, load and resume".
  - Check if cluster log daemon is running before allowing cmirror create.
  - Add dm_create_lockfile to libdm and use for pidfiles for all daemons.
  - Correct LV list order used by lvconvert when splitting a mirror.
  - Check if LV with specified name already exists when splitting a mirror.
  - Fix suspend/resume logic for LVs resulting from splitting a mirror.
  - Fix possible hang when all mirror images of a mirrored log fail.
  - Adjust auto-metadata repair and caching logic to try to cope with empty mdas.
  - Update pvcreate, {pv|vg}change, and lvm.conf man pages about metadataignore.
  - Prompt if metadataignore with vgextend or pvchange would adjust vg_mda_copies.
  - Adjust vg_mda_copies if metadataignore given with vgextend or pvchange.
  - Speed up the regex matcher.
  - Use "nowatch" udev rule for inappropriate devices.
  - Document LVM fault handling in lvm_fault_handling.txt.
  - Clarify help text for vg_mda_count.
  - Add more verbose messages while checking volume_list and hosttags settings.
  - Add log_error when strdup fails in {vg|lv}_change_tag().
  - Do not log backtrace in valid _lv_resume() code path.
  - Remove log directly if all mirror images of a mirrored log fail.
  - Randomly select which mdas to use or ignore.
  - Add printf format attributes to yes_no_prompt and fix a caller.
  - Remove superfluous suspended device counter from clvmd.
  - Fix lvm shell crash when input is entirely whitespace.
  - Update partial mode warning message.
  - Restore the removemissing behaviour of lvconvert --repair --use-policies.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-4
changelog:
  - Fix data corruption bug in cluster mirrors.
  - Require logical volume(s) to be explicitly named for lvconvert --merge.
  - Disallow 'mirrored' log type for cluster mirrors.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-5
changelog:
  - Fix clvmd init script to require proper dependencies.
  - Recognise and give preference to md device partitions (blkext major).
  - Split-mirror operations were ignoring user-specified PVs.
  - Never scan internal LVM devices.
  - Fix segfault in regex matcher with characters of ordinal value > 127.
  - Use built-in rule for device aliases: block/ < dm- < disk/ < mapper/ < other.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8
changelog:
  - Fix potential for corruption during cluster mirror device failure.
  - Fix 'lvconvert --splitmirrors' in cluster operation.
  - Ignore snapshots when performing mirror recovery beneath an origin.
  - Add suspend_lv_origin and resume_lv_origin using LCK_ORIGIN_ONLY.
  - Allow internal suspend and resume of origin without its snapshots.
  - Fix dev_manager_transient to access -real device not snapshot-origin.
  - Monitor origin -real device below snapshot instead of overlay device.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8.el6_0.1
changelog:
  - Fix usage of --yes flag for ReiserFS resize in fsadm.
  - Fix detection of mounted filesystems for fsadm when udev is used.
  - Fix assignment of default value to LVM variable in fsadm.
  - Fix support for --yes flag for fsadm.
  - Do not execute lvresize with --dry-run option for fsadm.
  - Fix fsadm return error code from user's break action.
  - Revert to old glibc vsnprintf behaviour in emit_to_buffer() to catch overflow.
  - Allocate buffer for metadata tags dynamically to remove 4k limit.
  - Fix the way regions are marked complete to avoid slow --nosync cmirror I/O.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8.el6_0.2
changelog:
  - Fix handling of online filesystem resize (using new fsadm return code).
  - Add DIAGNOSTICS section to fsadm man page.
  - Modify fsadm to return different status code for check of mounted filesystem.
  - Fix memory leak of field_id in _output_field function.
  - Allocate buffer for reporting functions dynamically to support long outputs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8.el6_0.3
changelog:
  - Support repetition of --addtag and --deltag arguments.
  - Add infrastructure for specific cmdline arguments to be repeated in groups.
  - Split the_args cmdline arguments and values into arg_props and arg_values.
  - Fix fsadm to not require '-f' for resize of unmounted filesystem.
  - Fix fsadm to detect mounted filesystems on older system
  - Fix regex optimiser not to ignore RHS of OR nodes in _find_leftmost_common.
  - Update VG metadata only once in vgchange when making multiple changes.
  - Allow independent vgchange arguments to be used together.
  - Fix vgchange to process -a, --refresh, --monitor and --poll like lvchange.
  - Don't take write lock in vgchange --refresh, --poll or --monitor.
  - Skip dm devices in scan if they contain only error targets or are empty.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.82-1
changelog:
  - Allow exclusive activation of snapshots in a cluster.
  - Add addnodeonresume and addnodeoncreate switch to dmsetup.
  - Add dm_tak_secure_data fn to libdevmapper to wipe all ioctl buffers in kernel.
  - Increase hash table size to 1024 LV names and 64 PV uuids.
  - Fix node and symlink operations in /dev for recent udev_sync optimalisation.
  - Remove unneeded checks for open_count in lv_info().
  - Synchronize with udev before checking open_count in lv_info().
  - Remove fs_unlock() from lv_resume path.
  - Allow CLVMD_CMD_SYNC_NAMES to be propagated around the cluster if requested.
  - Avoid rebuilding of uuid validation table.
  - Improve lvcreate "insufficient extents" errors to "insufficient free space".
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.83-1
changelog:
  - Fix CRC32 calculation on big endian CPU (2.02.75).
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.83-3
changelog:
  - Mitigate annoying error warning from device is usable check if run as non-root.
  - Fallback to control node creation only if node doesn't exist yet.
  - Avoid possible endless loop in _free_vginfo when 4 or more VGs have same name.
  - Fix to make resuming exclusive cluster mirror use local target type.
  - Lower secure data flag warning to verbose level if unsupported by kernel.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.86-1
changelog:
  - Fix read-only identical table reload supression.
  - Suppress low-level locking errors and warnings while using --sysinit.
  - Remove --force option from lvrename manpage.
  - Change DEFAULT_UDEV_SYNC to 1 so udev_sync is used even without any config.
  - Compare also file size to detect changed config file.
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-2
changelog:
  - Terminate pv_attr field correctly (2.02.86).
  - Fix resource leak when strdup fails in _get_device_status() (2.02.85).
  - Fix unsafe table load when splitting off smaller mirror from a larger one.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-3
changelog:
  - Fix overly strict extent-count divisibility requirements for striped mirrors.
  - Fix rounding direction in lvresize when reducing volume size.
  - Fix possible overflow of size if %FREE or %VG is used.
  - Fix vgchange activation of snapshot with virtual origin.
  - Activate virtual snapshot origin exclusively (only on local node in cluster).
  - Fix lv_mirror_count to handle mirrored stripes properly.
  - Fix failure to down-convert a mirror to linear due to udev "dev open" conflict.
  - Fix mirrored log creation when PE size is small - force log_size >= region_size.
  - Fix log size calculation when only a log is being added to a mirror.
  - Work around resume_lv causing error LV scanning during splitmirror operation.
  - Begin using 64-bit status field flags.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-4
changelog:
  - Fix splitmirror in cluster having different DM/LVM views of storage.
  - Fix improper udev settings during suspend/resume for mirror sub-LVs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-6
changelog:
  - Fix lv_info open_count test for disabled verify_udev_operations (2.02.86).
  - Log dev name now returned to kernel for registering during cmirror CTR.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-1
changelog:
  - Update to latest upstream release with initial support for thinly-provisioned
    devices and scalable snapshots, improved support for RAID personalities,
    initial support for LVM metadata caching daemon and various other fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-2
changelog:
  - Fix a regression in handling of lvchange/lvcreate --major/--minor (2.02.95).
  - Fix name conflicts that prevent down-converting RAID1 when specifying a device.
  - Improve thin_check option passing and use configured path.
  - Add --with-thin-check configure option for path to thin_check.
  - Restart dmeventd on device-mapper-event package upgrade.
  - Do not run a new dmeventd instance on restart if there's no existing one.
  - Detect lvm binary path in lvmetad udev rules.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-3
changelog:
  - Restart clvmd daemon on lvm2-cluster package upgrade.
  - Keep exclusive activation in pvmove if LV is already active.
  - Disallow pvmove for exclusive LV if some affected LVs are not exclusively activated.
  - Remove unused and wrongly set cluster VG flag from clvmd lock query command.
  - Fix pvmove for exclusively activated LV pvmove in clustered VG (2.02.86).
  - Detect VG name being part of the LV name in lvconvert --splitmirrors -n.
  - Add 'vgscan --cache' functionality for consistency with 'pvscan --cache'.
  - Use 'pvscan --cache' instead of vgscan in lvmetad init script.
  - Exit immediately if LISTEN_PID env var incorrect during systemd handover.
  - Update and fix monitoring of thin pool devices.
  - Fix initializiation of thin monitoring (2.02.92).
  - Remove watch udev rule from 13-dm-disk.rules.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-4
changelog:
  - Fix lvresize of thin pool for striped devices.
  - Round upwards when specifying number of extents for lvresize.
  - Round downwards strip alignment for lvcreate with %FREE.
  - Fix problems when specifying PVs during RAID down-converts.
  - Fix ability to handle failures in mirrored log (2.02.89).
  - Change message severity to log_very_verbose for missing dev info in udev db.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-5
changelog:
  - Add lvmetad man page.
  - Fix RAID device replacement code so that it works under snapshot.
  - Fix inability to split RAID1 image while specifying a particular PV.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-6
changelog:
  - Allow subset of failed devices to be replaced in RAID LVs.
  - Prevent resume from creating error devices that already exist from suspend.
  - Fix lvconvert error message for non-mergeable volumes.
  - Fix volume group unlocking in vgreduce error path.
  - Update and correct lvs man page with supported column names.
  - Rename (Blk)DevNames/DevNos dmsetup header to (Blk)DevNamesUsed/DevNosUsed.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-7
changelog:
  - Disallow snapshots of mirror segment type.
  - Fix bug in cmirror that caused incorrect status info to print on some nodes.
  - Disallow changing cluster attribute of VG while RAID LVs are active.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-8
changelog:
  - Fix up-convert when mirror activation is controled by volume_list and tags.
  - Add a note for global/mirror_segtype_default setting that RAID1 is not cluster-aware.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-9
changelog:
  - Re-enable partial activation of non-thin LVs until it can be fixed (2.02.90).
  - Reinstate snapshots of mirror segment type.
    Warn of deadlock risk when using snapshots of mirror segment type.
  - Set delay_resume_if_new on deptree snapshot origin.
  - Add Conflicts: vdsm < 4.9-113.0 (new 'target' and 'zero' LV attr breaks vdsm).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-10.el6_3.1
changelog:
  - Fix test for PV with unknown VG in process_each_pv to ignore ignored mdas.
  - Fix _alloc_parallel_area to avoid picking already-full areas for raid devices.
  - Fix extending RAID 4/5/6 logical volumes.
  - Never issue discards when LV extents are being reconfigured, not deleted.
  - Allow release_lv_segment_area to fail as functions it calls can fail.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-10.el6_3.2
changelog:
  - Make lvremove ask before discarding data areas.
  - Don't try to issue discards to a missing PV to avoid segfault.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-1
changelog:
  - Don't try to issue discards to a missing PV to avoid segfault.
  - Fix vgchange -aay not to activate non-matching LVs that follow a matching LV.
  - Fix lvchange --resync for RAID LVs which had no effect.
  - Add RAID10 support (--type raid10).
  - Introduce blkdeactivate script to deactivate block devs with dependencies.
  - Apply 'dmsetup mangle' for dm UUIDs besides dm names.
  - Use -q as short form of --quiet.
  - Suppress non-essential stdout with -qq.
  - Add log/silent to lvm.conf equivalent to -qq.
  - Add (p)artial attribute to lvs.
  - Implement devices/global_filter to hide devices from lvmetad.
  - Add lvmdump -l, to collect a state dump from lvmetad.
  - Add --discards to lvconvert.
  - Add --poolmetadata to lvconvert and support thin meta/data dev stacking.
  - Support creation of read-only thin volumes (lvcreate -p r).
  - Support changes of permissions for thin snapshot volumes.
  - Make lvremove ask before discarding data areas.
  - Prohibit not yet supported change of thin-pool to read-only.
  - Using autoextend percent 0 for thin pool fails 'lvextend --use-policies'.
  - Make vgscan --cache an alias for pvscan --cache.
  - Clear lvmetad metadata/PV cache before a rescan.
  - Fix a segmentation fault upon receiving a corrupt lvmetad response.
  - Give inconsistent metadata warnings in pvscan --cache.
  - Avoid overlapping locks that could cause a deadlock in lvmetad.
  - Fix memory leaks in libdaemon and lvmetad.
  - Optimize libdaemon logging for a fast no-output path.
  - Only create lvmetad pidfile when running as a daemon (no -f).
  - Warn if lvmetad is running but disabled.
  - Warn about running lvmetad with use_lvmetad = 0 in example.conf.
  - Update lvmetad help output (flags and their meaning).
  - Make pvscan --cache read metadata from LVM1 PVs.
  - Make libdaemon buffer handling asymptotically more efficient.
  - Make --sysinit suppress lvmetad connection failure warnings.
  - Prohibit usage of lvcreate --thinpool with --mirrors.
  - Fix lvm2api origin reporting for thin snapshot volume.
  - Add implementation of lvm2api function lvm_percent_to_float.
  - Allow non power of 2 thin chunk sizes if thin pool driver supports that.
  - Allow limited metadata changes when PVs are missing via [vg|lv]change.
  - Do not start dmeventd for lvchange --resync when monitoring is off.
  - Remove pvscan --cache from lvm2-lvmetad init script.
  - Report invalid percentage for property snap_percent of non-snaphot LVs.
  - Disallow conversion of thin LVs to mirrors.
  - Fix lvm2api data_percent reporting for thin volumes.
  - Do not allow RAID LVs in a clustered volume group.
  - Enhance insert_layer_for_lv() with recursive rename for _tdata LVs.
  - Skip building dm tree for thin pool when called with origin_only flag.
  - Ensure descriptors 0,1,2 are always available, using /dev/null if necessary.
  - Use /proc/self/fd when available for closing opened descriptors efficiently.
  - Fix inability to create, extend or convert to a large (> 1TiB) RAID LV.
  - Update lvmetad communications to cope with clients using different filters.
  - Clear LV_NOSYNCED flag when a RAID1 LV is converted to a linear LV.
  - Disallow RAID1 upconvert if the LV was created with --nosync.
  - Disallow addition of RAID images until the array is in-sync.
  - Fix RAID LV creation with '--test' so valid commands do not fail.
  - Add lvm_lv_rename() to lvm2api.
  - Fix setvbuf code by closing and reopening stream before changing buffer.
  - Disable private buffering when using liblvm.
  - When private stdin/stdout buffering is not used always use silent mode.
  - Fix 32-bit device size arithmetic needing 64-bit casting throughout tree.
  - Fix dereference of NULL in lvmetad error path logging.
  - Fix buffer memory leak in lvmetad logging.
  - Change lvmetad logging syntax from -ddd to -l {all|wire|debug}.
  - Add new libdaemon logging infrastructure.
  - Support unmount of thin volumes from pool above thin pool threshold.
  - Update man page to reflect that dm UUIDs are being mangled as well.
  - Add 'mangled_uuid' and 'unmangled_uuid' fields to dmsetup info -c -o.
  - Mangle device UUID on dm_task_set_uuid/newuuid call if necessary.
  - Add dm_task_get_uuid_mangled/unmangled to libdevmapper.
  - Always reset delay_resume_if_new flag when stacking thin pool over anything.
  - Don't create value for dm_config_node and require dm_config_create_value call.
  - Check for existing new_name for dmsetup rename.
  - Fix memory leak in dmsetup _get_split_name() error path.
  - Add Requires: bash >= 4.0 for blkdeactivate script.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-3
changelog:
  - Init lvmetad lazily to avoid early socket access on config overrides.
  - Hardcode use_lvmetad=0 if cluster locking used and issue a warning msg.
  - Avoid reading mirrors with failed devices in its mirrored log.
  - Avoid reading from mirrors that have failed devices if they block I/O.
  - Change lvs heading Copy% to Cpy%Sync and print RAID4/5/6 sync% there too.
  - Fix dm_task_set_cookie to properly process udev flags if udev_sync disabled.
  - Add Requires: device-mapper-persistent-data for thin provisioning support.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-4
changelog:
  - Add DM_DISABLE_UDEV environment variable to manage dev nodes by libdm only.
  - Recognize DM_DISABLE_UDEV environment variable for a complete fallback.
  - Do not verify udev operations if --noudevsync command option is used.
  - Automatically deactivate failed preloaded dm tree node.
  - Fix lvm2app to return all property sizes in bytes.
  - Add lvm.conf option global/thin_disabled_features.
  - Add lvconvert support to swap thin pool metadata volume.
  - Implement internal function detach_pool_metadata_lv().
  - Fix lvm2app and return lvseg discards property as string.
  - Allow forced vgcfgrestore of lvm2 metadata with thin volumes.
  - Add lvm.conf thin pool defs thin_pool_{chunk_size|discards|zero}.
  - Support discards for non-power-of-2 thin pool chunks.
  - Support allocation of pool metadata with lvconvert command.
  - Move common functionality for thin lvcreate and lvconvert to toollib.
  - Use lv_is_active() instead of lv_info() call.
  - Disallow pvmove on RAID LVs until they are addressed properly
  - Automatically restore MISSING PVs with no MDAs.
  - Do not allow --splitmirrors on RAID10 logical volumes.
  - When no '-i' argument is given for RAID10, default to 2 stripes.
  - Mirrored log is now fixed before its mirror when double-fault occurs.
  - Exit pvscan --cache immediately if cluster locking used or lvmetad not used.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-5
changelog:
  - Avoid a global lock in pvs when lvmetad is in use.
  - Fix crash in pvscan --cache -aay triggered by non-mda PV.
  - Fix memleak in device_is_usable mirror testing function.
  - Do not ignore -f in lvconvert --repair -y -f for mirror and raid volumes.
  - Fix regression that caused inability to create a snapshot of an inactive LV.
  - Remove warning about unsupported discards for non-power-of-2 thin pool chunks.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-6
changelog:
  - Limit RAID device replacement to repair only if LV is not in-sync.
  - Disallow RAID device replacement or repair on inactive LVs.
  - Fix possible race while removing metadata from lvmetad.
  - Fix possible deadlock when querying and updating lvmetad at the same time.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-7
changelog:
  - Synchronize with udev in pvscan --cache and fix dangling udev_sync cookies.
  - Fix autoactivation to not autoactivate VG/LV on each change of the PVs used.
  - Fix lvmetad updates for lvm1 format and fix reported internal errors.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-9.el6_4.1
changelog:
  - Fix alignment of PV data area if detected alignment less than 1 MB (2.02.74).
  - Give precedence to EMC power2 devices with duplicate PVIDs


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.08-7
changelog:
  - Taking over as maintainer since Anvil has other priorities
  - Add a patch to fix asm detection on i386 (bug 145882, 145893). Thanks to
    Carlo Marcelo Arenas Belon <carenas@sajinet.com.pe> for the initial patch.
  - Removed unused build dependency on nasm
  - Remove static lib
  - Cleanup %doc a bit


author: Hans de Goede <j.w.r.degoede@hhs.nl> 2.02-5
changelog:
  - Fix configure failure with -Werror-implicit-function-declaration in CFLAGS
  - Add a minilzo subpackage which contains a shared version of minilzo, to be
    used by all applications which ship with their own copy of it (bz 439979)


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 1.02-0.2
  - rebuilt for new gcc4.1 snapshot and glibc changes
  - build with lzop 1 since lzop 2 hasn't been merged yet


author: Parag Nemade <pnemade@redhat.com> -1.1.9-4
changelog:
  - Resolves: rh#494810-[indic][m17n-db][m17n-contrib] ibus .engine files no longer needed for new ibus


author: Parag Nemade <pnemade@redhat.com> -1.1.10-1
changelog:
  - update to new upstream release 1.1.10 
  - Resolves: rh#513920: [pa_IN]Jhelum layout conflict with shortcut key in lokalize
  - revert pa-jhelum-numeric-503478.patch to its original version.


author: Parag Nemade <pnemade AT redhat.com> - 1.1.10-4
changelog:
  - Resolves:rh#642138-[te_IN] [inscript] U0C60, U0C44 and U0C01 need key mapping in inscript keymap.
  - Resolves:rh#653781 - [ta_IN] [tamil99] some enhancements needed for more input combinations
  - Resolves:rh#653782 - [hi_IN] problems with hi-remington layout
  - Resolves:rh#653783 - [ml_IN] The character 0D1A ("ച") missing on IOK for Malayalam Inscript


author: Miloslav Trmač <mitr@redhat.com> - 0.20.2-5
changelog:
  - Make test suite pass with OpenSSL 1.0.0
  - Don't ship patch backup files in %doc
    Resolves: #565660


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.11-1
changelog:
  - Update to m4-1.4.11 (removed vasnprintf patch, it's included in
    upstream source)
    Resolves: #443589


author: Parag <pnemade AT redhat.com> - 2.000-1
changelog:
  - Update to next upstream release
  - Resolves: rh#567560-[ne_NP] Need fontconfig rules for Madan font


author: Ville Skyttä <ville.skytta@iki.fi> - 2.1.30-1
changelog:
  - Update to 2.1.30, see NEWS for details.
  - Improve summary and description.
  - Add MIT to License: for mailcap.4 man page.
  - Specfile cleanup.


author: Daniel Novotny <dnovotny@redhat.com> 3:2.1.12-7
changelog:
  - fix bz#512798 -  Mailman path in /usr/bin/mailman-update-cfg 
    is incorrect on x86_64.
  - added explanation comment in mailman-update-cfg, to justify
    why this script is needed


author: Daniel Novotny <dnovotny@redhat.com> 3:2.1.12-9
changelog:
  - regenerated patches so patch fuzz 3 is not needed (bz#513207)
  - mm_cfg.pyc and .pyo are now %verify(not md5 size mtime) (bz#512794)


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-17
changelog:
  - fix #703389 - fixed file permissions in /usr/lib/mailman
  - fix #636825 - fix #!/usr/bin/env python shebang in migrate-fhs
  - fix #704699 - fixed directories permissions in /usr/lib/mailman
  - fix #684622 - do not create and install /etc/mailman/mm_cfg.pyc and pyo files


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-18
changelog:
  - fix #834023 - escape From in email body properly
  - fix #832920 - fix word-wrap in web front-end
  - fix #772998 - fix reset_pw.py script
  - fix #799323 - handle urlhost in newlist script


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-20
changelog:
  - fix #745409 - do not set Indexes in httpd configuration for public archive
  - fix #1008139 - fix traceback when list_data_dir is not a child of var_prefix


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-23
changelog:
  - fix #1095359 - handle update when some mailing lists have been created
    by newer Mailman than this one


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.3-0
changelog:
  - Change the name from "nail" to upstream's "mailx".
    Merge with the ordinary "mailx" cvs tree for Fedora 10.
    Now this stuff supersedes the old ancient mailx-8.x in Fedora.
  - Build with nss instead of openssl, for "Security Consolidation" process.


author: Dmitry Butskoy <Dmitry@Butskoy.name>
changelog:
  - add missed BR for krb5-devel
  - activate IPv6 support
  - change config to /etc/mail.rc for compatibility
  - add triggerpostun scriptlets against previous mailx and nail
    to check and merge (when possible) their user config changes
  - use proper config filename in manuals
  - use "less" instead of non-provided "pg" for nobsdcompat mode


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.3-1
changelog:
  - Place mailx to /bin/mailx, to avoid extra symlink in redhat-lsb package
  - /bin/mailx is now a base binary, another symlinked to it.


author: Peter Schiffer <pschiffe@redhat.com> - 12.4-7
changelog:
  - resolves: #857120
    fixed incorrect return code when TMPDIR points to invalid path
  - resolves: #845098
    added support for alternatives


author: Petr Machata <pmachata@redhat.com> - 1:3.81-12
changelog:
  - Fix the rlimit patch.  The success flag is kept in memory shared
    with parent process after vfork, and so cannot be reset.
  - Related: #214033


author: Petr Machata <pmachata@redhat.com> - 1:3.81-20
changelog:
  - Add a patch for use-after-free when eval in variable assignments
    reassigns the same variable
  - Resolves: #699911


author: Patsy Franklin <pfrankli@redhat.com. - 1:3.81-22
changelog:
  - When the exit status is 2, clean_jobserver() would incorrectly write an
    extra jobserver token to the pipe leading to an internal error message
    complaining that an extra jobserver token is available.
    Resolves: #861189


author: Patsy Franklin <pfrankli@redhat.com. - 1:3.81-23
changelog:
  - Get rid of any avoidable limit on stack size for processes spawned
    via $(shell). 
  - In eval_buffer() don't assume reading_file != NULL. This is not the
    case during the secondexpansion phase.
    Resolves: #835483


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 1.4-6
changelog:
  - always distribute own ldlinux.sys as well as ldlinux.bss
  - add conditional macro %{new_ldlinux} (default off) to build the package
    with ldlinux.bss and ldlinux.sys taken from some syslinux source directly.
  - Update README.usbboot .


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> 7.12-1
changelog:
  - New version
  - Drop upstreamed linking patch
  - Re-add a Makefile.in sed build verbosity trick, which was done in the
    dropped patch but not upstream


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> 7.12-4
changelog:
  - Add patch to change the (un)map_file functions to malaga_(un)map_file,
    there was a symbol conflict with the samba libraries causing a segfault
    if enchant-voikko and evolution-mapi were both installed when using
    Evolution. Bugs rhbz #502546 and sourceforge #2802548, patch by Harri
    Pitkänen.
  - Add defattr to the libmalaga subpackage


author: - Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> 1.3-10
changelog:
  - Install data files into the new location expected by libvoikko 2.1
  - Bump Release to 10 to differentiate this from earlier packages,
    this release or higher needs to be required by the libvoikko 2.1 package


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 1.4-0.1.rc1
changelog:
  - New release candidate.
  - Don't require libmalaga anymore, libvoikko >= 2.2 uses its own malaga
    implementation for Finnish spell checking. Malaga is still required for
    building this package.
  - Cleanup DESTDIR, Makefile now automatically adds the directory version
    and variant to it.


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-30
changelog:
  - resolves: #659646
    man man for Japanese manual page contains duplicated lines in PAGER explanation
  - resolves: #749290
    [RHEL6:REG] Missing Functionality : Improve makewhatis handling of symbolic links


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-31
changelog:
  - resolves: #815209
    fixed override_dir patch - do not override localized man pages
    with English man pages
  - resolves: #713088
    fixed memory leaks


author: Ivana Hutarova Varekova <varekova@redhat.com> - 3.22-13
changelog:
  - Resolves: #528546
    add preadv and pwritev syscalls description
  - Resolves: #613777
    update get_mempolicy man page
  - Resolves: #634626
    remove the obsolete scsi(4) link from sd(4)
  - Resolves: #634986
    remove the BUGS part to NOTES
  - Resolves: #669768 
    remove obsolete man page


author: Ivana Hutarova Varekova <varekova@redhat.com> - 3.22-15
changelog:
  - Resolves: #679894
    add scopev4 to gai.conf man page
  - resolves: #679530
    crypt(3) incorrect key length


author: Peter Schiffer <pschiffe@redhat.com> - 3.22-18
changelog:
  - resolves: #840798
    added warning about 32bit app on 64bit OS to the getdents(2) man page
  - resolves: #822317
    added note that bdflush(2) syscall is obsolete
  - resolves: #752778
    removed db(3) man page with invalid link
  - resolves: #840791
    clarify notfound status on the nsswitch.conf(5) man page
  - resolves: #835679
    mentioned new supported 'services' database on the nscd.conf(5) man page
  - resolves: #745501
    mentioned SSSD on the nsswitch.conf(5) man page
  - resolves: #840796
    updated documentation of the connect(2) call on the ip(7) man page
  - resolves: #714075
    added cciss(4) and hpsa(4) man pages
  - resolves: #804003
    added missing socket options on the ip(7) man page
  - resolves: #714078
    removed documentation for 'order' keyword in the host.conf(5) man page
  - resolves: #714073
    added fattach(2) man page as a link to the unimplemented(2) man page
  - resolves: #840805
    added default values for attributes on the nscd.conf(5) man page
  - resolves: #809564
    added description of EIDRM error to the shmop(2) man page
  - resolves: #745152
    added description of the single-request and single-request-reopen options
    to the resolv.conf(5) man page
  - resolves: #714074
    added recvmmsg(2) man page
  - resolves: #745521
    added description of the UMOUNT_NOFOLLOW flag on the umount(2) man page
  - resolves: #745733
    added sendmmsg(2) man page
  - resolves: #735789
    removed outdated man pages from man-pages_syscalls-01.tar.bz2 archive
    which were replacing newer man pages from upstream man-pages-3.22.tar.bz2
  - resolves: #857163
    fixed description of option n in the tzset(3) man page
  - resolves: #857162
    documented the fact that using shutdown(2) before close(2) is recommended
    when dealing with sockets on the close(2) man page
  - resolves: #858278
    fixed error code on the connect(2) man page
  - resolves: #858240
    updated zdump options in the zdump(8) man page
  - resolves: #857962
    updated description of /proc/sys/fs/file-nr file in the proc(5) man page


author: Peter Schiffer <pschiffe@redhat.com> - 3.22-19
changelog:
  - related: #735789
    renamed modified tarball man-pages_syscalls-01.tar.bz2
    to man-pages_syscalls-02.tar.bz2


author: Ding-Yi Chen <dchen@redhat.com> - 1.55-1
changelog:
  - [Bug 388391] New: fileconflicts with other packages
  - Remove mc.1.gz, as it conflicts with mc-4.6.1a-49.20070604cvs.fc8.i386.rpm
  - Remove newgrp.1.gz, as it conflicts with shadow-utils-4.0.18.1-18.fc8.i386.rpm


author: Ding-Yi Chen <dchen@redhat.com> - 1.55-7
changelog:
  - Bug 487941 - File conflict between man-pages-es-extra and shadow-utils
    Removed es/man8/vigr.8.gz


author: Ding-Yi Chen <dchen at redhat.com> 3.23-5
changelog:
  - According to the comment from Sebastien Aime, following are also removed:
    c.1.gz
    switchdesk.1.gz
    bosskill.8.gz


author: Mike FABIAN <mfabian@redhat.com> 3.23-10
changelog:
  - fix Makefile in man-pages-extras-fr-0.8.1.tar.bz2 to install missing man-pages
  - Resolves: #903048 - [fr_FR] man echo manuals are still English.


author: Mike FABIAN <mfabian@redhat.com> 3.23-10
changelog:
  - Add a warning to the xinetd man-page, warning the user that it is
    severely out of date and one should consult the English man-page
    instead for up-to-date information.
  - Resolves: rhbz#891278


author: Pablo Martin-Gomez <pablo.martin-gomez AT laposte DOT net> 3.23-1
changelog:
  - Fix RH #560915
  - Switch to the Debian's man-pages-fr fork (Source0), which is updated, correctly maintained and provide the patches from man-pages Fedora package


author: Ding-Yi Chen <dchen@redhat.com> - 2.80-4
changelog:
  - Resolves: #560507
    [man-pages-it] Package wrangler fix
  - Remove comments of extra subpackage, as upstream already merge them.


author: Ding-Yi Chen <dchen@redhat.com> - 2.80-5
changelog:
  - Resolves: #560507 [man-pages-it] Package wrangler fix
  - Fixed Fedora 569443 [man-pages-it] Wrong directory ownership


author: Akira TAGOH <tagoh@redhat.com> - 20100115-3
changelog:
  - Get rid of manpages related to SysVinit. (#579647)
  - Add deprecated notice for the usage of PORT in sink directives. (#600324)
  - Revise echo(1) (#618934)
  - Add descriptions for the extended and device format fields. (#628891)


author: Akira TAGOH <tagoh@redhat.com> - 20100115-4
changelog:
  - Add manpages related to upstart. (#579641)
  - Fix a typo in getpriority(2) (#682122)
  - Revert a patch to correct wall(1) again (#699301)
  - Revise the outdated tar(1) (#710704)


author: Akira TAGOH <tagoh@redhat.com> - 20100115-9
changelog:
  - Fix a typo in shmat(2) (#1140481)
  - Add missing %n and %N description for date(1) (#1157413)
  - Add deprecation remarks for intr in nfs(5) (#1173391)
  - Fix a typo in xinetd(8) (#1174088)


author: Akira TAGOH <tagoh@redhat.com> - 20090615-1
changelog:
  - updates to 20090615.
  - Remove patches merged upstream:
    - man-pages-ja-20031215-crontab-0days.patch
    - man-pages-ja-432668-iptables.8.patch
    - man-pages-ja-20050215-ls.patch
  - Correct various typos:
    - sysctl(8), bash(1), echo(1), wall(1), vmstat(8), edquota(8).


author: Akira TAGOH <tagoh@redhat.com> - 20091215-1
changelog:
  - updates to 20091215.
  - apply some patches to correct typos:
    - man-pages-ja-486655-mkfs.8.patch
    - man-pages-ja-509048-less.1.patch
    - man-pages-ja-515467-strings.1.patch
    - man-pages-ja-527638-chgrp.1.patch
    - man-pages-ja-537103-ip.7.patch
    - man-pages-ja-fix-mdoc.patch
  - clean up the spec file.


author: Ding-Yi Chen <dchen at redhat dot com> - 2:20050219-7
changelog:
  - Fix Bug 468501 - There were file conflicts when cheeking the packages 
    to be installed in Fedora-10-beta-x86_6.


author: Ivana Hutarova Varekova <varekova@redhat.com> 2.0-1
changelog:
  - resolves: #658734
    setacl(1) man page bug (package acl)
  - resolves: #651120
    setfattr(1) man page bug (package attr)
  - resolves: #615905
    ospfclient(8) and watchquagga(8) man pages added (package quagga)
  - resolves: #633701
    expect(1) man page is bad formatted (package expect)
  - resolves: #650162
    useradd(8) man page bug (package shadow-utils)
  - resolves: #657563
    Manual page corrections for find(1) (package findutils)
  - resolves: #632081
    man(1) for Japanese manual page contains duplicated lines in PAGER explanation
    (package man)
  - resolves: #604626
    yum-verify man page uses 'pretty' quotes in examples (package yum-utils)
  - resolves: #622451
    Author info is wrong in man page (package logrotate)
  - resolves: #638625
    Ambiguity in logrotate man page (package logrotate)
  - resolves: #644308
    manpage not in sync with options logrotate actually recognizes (package logrotate)
  - resolves: #613979
    dftest and randpkt does not have a man page (package wireshark)
  - resolves: #619779
    lftp(1) option xfer:auto-rename not documented (package lftp)
  - resolves: #673968
    logrotate(8) manpage typo patch (package logrotate)


author: Ivana Hutarova Varekova <varekova@redhat.com> 2.1-1
changelog:
  - resolves: #615873
    Man w3m is stating incorrect program version (package w3m)
  - resolves: #675213
    userpasswd(1) manpage fix (package usermode)
  - resolves: #675688
    pcretest(1) manpage fixes (package pcre)
  - resolves: #675682
    pcregrep(1) manpage fixes (package pcre)
  - resolves: #636785
    "semanage module" is not mentioned in semanage man page (package policycoreutils)
  - resolves: #540492
    8 options are not described in semanage man page (package policycoreutils)


author: Ivana Hutarova Varekova <varekova@redhat.com> 2.4-1
changelog:
  - related: #604626
    add forgotten patch
  - related: #632081
    fix the encoding
  - related: #644308
    fix the typo
  - related: #650162
    fix the patch text
  - related: #676483


author: Ivana Hutarova Varekova <varekova@redhat.com> 6.2.0-1
changelog:
  - resolves: #712256
    Typo in volume_key manpage
  - resolves: #709274
    ntpq(8) manpage fixes
  - resolves: #709058
    ntp-keygen(8) manpage fixes
  - resolves: #615897
    Added missing man page for/usr/sbin/lsmsr in x86info package
  - resolves: #690187
    New man pages for cciss + hpsa modules


author: Ivana Hutarova Varekova <varekova@redhat.com> 6.2.1-1
changelog:
  - resolves: #698151
    Remove documentation for "order" keyword in /etc/host.conf manpage
  - resolves: #688543
    Several lsvpd tools options not documented in man page
  - resolves: #674423
    man page for recvmmsg added
  - resolves: #656245
    add fattach.2 link to uninplemented
  - resolves: #719902
    Remove bug fixed in original component: #674870
    Remove bug fixed in original component: #674878
    Remove bug fixed in original component: #677541
    Remove bug fixed in original component: #677542
    Remove bug fixed in original component: #690801
    Remove bug fixed in original component: #674883


author: Peter Schiffer <pschiffe@redhat.com> 6.2.2-1
changelog:
  - resolves: #727526
    Typo in man curl manpage
  - resolves: #730042
    Add missing man page for cpufreq-aperf and fixed cpufreq-set man page
  - resolves: #602228
    bridge-utils missing documentation in manpage for RFE 574461
  - resolves: #731690
    Man ecryptfs contains invalid link in SEE ALSO section
  - resolves: #734836
    Document that realtime clock functions need to link with -lrt
  - resolves: #656245
    Fixed incorrect link from previous release
  - resolves: #690187
    Added license file for man pages from man-pages package
    Removed bug fixed in original component: #659740
    Added license file for man page from x86info package


author: Peter Schiffer <pschiffe@redhat.com> 6.2.3-1
changelog:
  - resolves: #740670
    vsftpd: documentation for 'max_per_ip' default setting is wrong
  - resolves: #717770
    Need single-request-reopen option documented for resolv.conf
  - resolves: #742098
    Update description of timeo in nfs(5) manpage
  - resolves: #694860
    No mention of sssd in nsswitch.conf man page
  - resolves: #723791
    Lack of UMOUNT_NOFOLLOW flag description in umount(2)
  - resolves: #728416
    [RFE] net: backport sendmmsg syscall [Manpage request]


author: Peter Schiffer <pschiffe@redhat.com> 6.3.1-1
changelog:
  - resolves: #605521
    added manual page for urlgrabber
  - resolves: #768949
    updated info about trapt in bash manual page
  - resolves: #528879
    added missing pages: mksquashfs.1 and unsquashfs.1
  - Removed bug fixed in original component: #659646
  - Removed bug fixed in original component: #659705
  - Removed bug fixed in original component: #659713
  - Removed bug fixed in original component: #659720
  - Removed bug fixed in original component: #674864
  - Removed bug fixed in original component: #674866
  - Removed bug fixed in original component: #676636
  - Removed bug fixed in original component: #676643
  - Removed bug fixed in original component: #714086
  - Removed bug fixed in original component: #745133


author: Peter Schiffer <pschiffe@redhat.com> 6.3.2-1
changelog:
  - resolves: #745467
    added manual page for pkcs_slot
  - resolves: #801742
    fixed redundant "works" word in request-key.conf man page
  - resolves: #695363
    added description of auditing support to the iptables and ip6tables man pages
  - resolves: #801784
    fixed typo in the yum man page
  - resolves: #747970
    added description of -D option to the lsblk man page
  - resolves: #769566
    fixed description of --group-info option in the wbinfo man page
  - resolves: #766341
    removed -s option from cgcreate man page
  - resolves: #801783
    added description of auditing support to the ebtables man page
  - resolves: #800256
    added description of EIDRM error to the shmop man page
  - resolves: #653908
    added missing options to the replcon man page
  - Removed bug fixed in original component: #737990


author: Peter Schiffer <pschiffe@redhat.com> 6.3.3-1
changelog:
  - related: #528879
    fixed name section in the unsquashfs.1 man page
  - resolves: #529335
    added missing pages: fusermount.1, ulockmgr_server.1 and mount.fuse.8
  - resolves: #810910
    mount(8) man page should include relatime in defaults definition


author: Peter Schiffer <pschiffe@redhat.com> 6.4.0-1
changelog:
  - resolves: #866386
    mpo remove tracker
  - removed bug fixed in original component: #676355
  - removed bug fixed in original component: #714073
  - removed bug fixed in original component: #714074
  - removed bug fixed in original component: #714075
  - removed bug fixed in original component: #714078
  - removed bug fixed in original component: #729984
  - removed bug fixed in original component: #735789
  - removed bug fixed in original component: #745152
  - removed bug fixed in original component: #745501
  - removed bug fixed in original component: #745521
  - removed bug fixed in original component: #745733
  - removed bug fixed in original component: #799958
  - removed bug fixed in original component: #809108
  - removed bug fixed in original component: #809117
  - removed bug fixed in original component: #809139
  - removed bug fixed in original component: #809144
  - removed bug fixed in original component: #809564
  - removed bug fixed in original component: #820183
  - removed bug fixed in original component: #690800
  - renamed all patches to include bug id


author: Peter Schiffer <pschiffe@redhat.com> 6.4.1-1
changelog:
  - resolves: #872526
    mentioned ext4 support in dump(8) man page
  - resolves: #853959
    added missing --no-tpm option in rngd(8) man page
  - resolves: #867332
    mentioned that groupmems command is not setuid in groupmems(8) man page
  - resolves: #849201
    added missing alsaunmute(1) man page
  - resolves: #806845
    updated dmidecode(8) man page
  - resolves: #845657
    updated description of localalloc option on the numactl(8) man page
  - resolves: #814417
    updated vnc documentation for -SecurityTypes option
  - resolves: #846591
    added missing options to the ipmitool(1) man page


author: Peter Schiffer <pschiffe@redhat.com> 6.5.0-1
changelog:
  - resolves: #996478
    mpo remove tracker
  - removed bug fixed in original component: #659661
  - removed bug fixed in original component: #714079
  - removed bug fixed in original component: #714084
  - removed bug fixed in original component: #809550


author: Peter Schiffer <pschiffe@redhat.com> 6.5.1-1
changelog:
  - related: #996478
    mpo remove tracker
  - removed bug fixed in original component: #881779
  - resolves: #896700
    fixed missing text in auditd.conf(5) man page
  - resolves: #1002071
    updated description of extglob behavior in bash(1) man page
  - resolves: #807323
    added description of webm format to byzanz-record(1) man page
  - resolves: #885625
    fixed typo on cupsctl(8) man page
  - resolves: #905066
    fixed documentation regarding CA certificates in curl package
  - resolves: #896544
    fixed typos in curl package man pages
  - resolves: #913088
    fixed typo in security_compute_av(3) man page
  - resolves: #913191
    updated selinux(8) man page
  - resolves: #979460
    added clarification about setting variables on mailx(1) man page
  - resolves: #960281
    documented missing values in clock_getres(2) man page
  - resolves: #974697
    updated description of LD_PRELOAD variable in ld.so(8) man page
  - resolves: #953753
    documented /proc/[pid]/oom_score_adj on proc(5) man page
  - resolves: #953750
    documented /proc/sys/kernel/dmesg_restrict on proc(5) man page
  - resolves: #953539
    documented /proc/sys/kernel/kptr_restrict on proc(5) man page
  - resolves: #908295
    fixed typo on syslog(3) man page
  - resolves: #974685
    removed incorrect example from sched_setaffinity(2) man page
  - resolves: #988125
    documented MADV_DONTDUMP and MADV_DODUMP on madvise(2) man page
  - resolves: #903258
    documented FALLOC_FL_PUNCH_HOLE flag on fallocate(2) man page
  - resolves: #957010
    fixed return type of strtoul(3) and strtoull(3)
  - resolves: #928917
    updated description of O_DIRECT on open(2) man page
  - resolves: #979318
    described ipv6 on netstat(8) man page
  - resolves: #951826
    updated default settings of inet_protocols variable on postconf(5) man page
  - resolves: #872144
    backported fix for top(1) man page
  - resolves: #983066
    removed deprecated example from rhnreg_ks(8) man page
  - resolves: #904970
    fixed typos on rsync(1) man page
  - resolves: #907837
    fixed description of -u option on useradd(8) man page
  - resolves: #884699
    fixed typo in usb-devices(1) man page
  - resolves: #972764
    removed superfluous dots after "via" preposition in yum man pages


author: Peter Schiffer <pschiffe@redhat.com> 6.5.2-1
changelog:
  - related: #807323
    fixed typo on byzanz-record(1) man page
  - related: #896700
    fixed even more missing text in auditd.conf(5) man page
  - related: #913191
    fixed typo on selinux(8) man page
  - resolves: #1020432
    properly documented -Z option for passing principal
    list on ssh-keygen(1) man page
  - resolves: #1020417
    removed incorrect default values of KexAlgorithms on ssh_config(5) man page
  - resolves: #833868
    fixed dig(1) man page
  - resolves: #1018622
    updated description of "new station" message on arpwatch(8) man page


author: jchaloup <jchaloup@redhat.com> - 6.6.1-1
changelog:
  - resolves: #1074599
  - removed bug fixed in original component: #1011219
  - removed bug fixed in original component: #1023045
  - removed bug fixed in original component: #1011237
  - removed bug fixed in original component: #1011076
  - removed bug fixed in original component: #1011064
  - removed bug fixed in original component: #1011052
  - removed bug fixed in original component: #882952
  - removed bug fixed in original component: #1011230
  - resolves: #1039986
    vsftpd.conf man page typo
  - resolves: #1066537
    missing b emulate option in man pages
  - resolves: #1059828
    missing pthread mutex man pages (new file in tarball)
  - resolves: #1078319
    core(5) wrong default value for coredump_filter (new file in tarball)
  - resolves: #1058738
    nscd.conf netgroup caching information missing
  - resolves: #1058793
    curl wrong nss link
  - resolves: #735949
    DESTDIR removed from man page
  - resolves: #988713
    rsyncable option missing in gzip.1 man page
  - resolves: #1058100
    nscd.conf default settings
  - resolves: #1058349
    getgrnam.3 buffer size
  - resolves: #1075233
    mention pcresyntax.3 in pcregrep.1 description


author: jchaloup <jchaloup@redhat.com> - 6.6.2-1
changelog:
  - related: #1074599
  - removed bug fixed in original component: #809096
  - removed bug fixed in original component: #1011109
  - removed bug fixed in original component: #1011145
  - removed bug fixed in original component: #1011216
  - resolves: #1108028
    ciphers.1 missing description of ECC and TLSv1.2 suites
  - resolves: #1003511
    idmapd.8 man page options update
  - resolves: #953741
    proc.5 /proc/fs/ not empty directory
  - resolves: #964160
    cracklib-[un]packer.8 .so directive to cracklib-format.8
  - resolves: #1114785
    host.conf multi on by default
  - resolves: #1099335
    febootstrap-to-supermin.8 typo
  - resolves: #1099275
    mailx.1 environment variables conflict
  - resolves: #816252
    replacing unreadable russian mans for readable ones. For simplcity, all ru man pages replaced.
  - resolves: #903666
    tar.1 reference to info tar added to description
  - resolves: #1075152
    xinetd.1 xinetd reload termination handling information
  - resolves: #1017478
    flock.2 nfs locks
  - resolves: #818780
    oddjobd-mkhomedir.conf missing man page added
  - resolves: #1007865
    updating .so directive in various snmp man pages
  - resolves: #969502
    rpm --setperms and --setugids are mutually exclusive
  - resolves: #889049
    vhostmd man page configuration file path correction
  - resolves: #815680
    new man pages lvmcache.7 and lvmthin.7
  - resolves: #1087503
    update information about codeset for charsets.7 and nl_langinfo.3
  - resolves: #1112708
    bash.1 POSIX mode block size
  - resolves: #891928
    man man page missing -D option added
  - resolves: #781499
    makedeltarpm.8 missing attribute -l file and its description
  - related: #815680
    removing added man pages for lvm2


author: jchaloup <jchaloup@redhat.com> - 6.6.3-1
changelog:
  - resolves: #1011892
    new man page for iconv.1
    patch 1003511-mpo-6.6.2-nfs-utils-rpc-idmapd.patch adding man page removed, man page in new tar
    patch 815680-mpo-6.6.2-lvm2-remove-man-pages.patch removing lmv2 man pages removed
    patch 964160-mpo-6.6.2-cracklib-cracklib-format.patch adding man page removed, man page in new tar
  - related: #1058793
    url on a new line for both man pages
  - related: #988713
    mentioning --rsyncable in synopsis


author: jchaloup <jchaloup@redhat.com> - 6.6.3-2
changelog:
  - related: #903666
    adding gtar.1 with link to tar.1
  - related: #1099275
    removing mail.1, nail.1 and Mail.1


author: jchaloup <jchaloup@redhat.com> - 6.7.0-1
changelog:
  - resolves: #1188327
  - removed bug fixed in original component: #674875  (lftp)
  - removed bug fixed in original component: #1011083 (curl)
  - removed bug fixed in original component: #1011101 (curl)
  - removed bug fixed in original component: #1104160 (curl)
  - removed bug fixed in original component: #1011218 (rhn-client-tools)
  - removed bug fixed in original component: #1104021 (zsh)
  - removed bug fixed in original component: #1119567 (net-snmp)
  - removed bug fixed in original component: #1119587 (bash)
  - removed bug fixed in original component: #1119312 (tar)
  - sar.1 man page correct wrong information about %util
    resolves: #1140473
  - fix typo errors in virt-what man page
    resolves: #1099336
  - add missing statfs.f_flags field
    resolves: #1159335
  - removing wrongly encoded russian man pages
    resolves: #1159842
  - adding missing options in reposync.1
    resolves: #1121700


author: jchaloup <jchaloup@redhat.com> - 6.7.1-1
changelog:
  - Upload new tarball
    related: #1188327
  - removed bug fixed in original component: #1119191 (openssl)
  - removed bug fixed in original component: #1119572 (rpm)


author: jchaloup <jchaloup@redhat.com> - 6.7.2-1
changelog:
  - Upload new tarball
  - eventfd.2 man page missing doc detail for EFD_SEMAPHORE
    resolves: #1205351
  - pthread_kill.3 man page fix incorrect information about check
    for the existence of a thread ID
    resolves: #1205377


author: jchaloup <jchaloup@redhat.com> - 6.7.3-1
changelog:
  - Uploaded new tarball
    more detailed explanation for update-minimum with '--advisory'
    option in yum-security manpage
    resolves: #1207200


author: jchaloup <jchaloup@redhat.com> - 6.7.4-1
changelog:
  - Upload new tarball
    related: #1188327
  - removed bug fixed in original component: #878458 (rng-tools)
  - removed bug fixed in original component: #730304 (cpufrequtils)


author: Nikola Forró <nforro@redhat.com> - 6.8.1-1
changelog:
  - resolves: #1287574
  - removed bug fixed in original component: #1103754 (vsftpd)
  - removed bug fixed in original component: #1188612 (sysstat)
  - removed bug fixed in original component: #1119317 (xinetd)
  - removed bug fixed in original component: #1208155 (yum-utils)
  - removed bug fixed in original component: #1189033 (yum-utils)
  - removed bug fixed in original component: #659730 (findutils)
  - removed bug fixed in original component: #820171 (fuse)
  - removed bug fixed in original component: #878467 (shadow-utils)
  - removed bug fixed in original component: #881734 (alsa-utils)
  - removed bug fixed in original component: #1011232 (usbutils)
  - nsswitch.conf.5: add list of files being read when "files" service is used
    resolves: #1188900
  - ethtool.8: fix typo in man page
    resolves: #1231206
  - sa.8: fix invalid option in man page
    resolves: #1233049
  - icastats.1: fix typos and formatting in man page
    resolves: #1234316
  - userhelper.8: use consistent capitalization in man page
    resolves: #1249573
  - socket.7: add SO_REUSEPORT description to man page
    resolves: #1269552
  - rcmd.3: add missing condition to man page
    resolves: #1295349


author: Nikola Forró <nforro@redhat.com> - 6.9.0-1
changelog:
  - upload new tarball
    resolves: #1390141
  - removed bug fixed in original component: #1011204 (net-tools)
  - removed bug fixed in original component: #1300192 (psacct)
  - removed bug fixed in original component: #674862 (quagga)
  - growisofs.1: add comment about closing discs
    resolves: #968454
  - nsswitch.conf.5: mention that "sss" can be used as source
    for compat pseudo-databases
    resolves: #1295676
  - adjtimex.2: sync with upstream
    resolves: #1379392
  - scrub.1: fix description of --freespace option
    resolves: #1122641
  - rsyslogd.8: remove deprecated info about restart after HUP
    resolves: #1295538


author: Andrew Beekhof <andrew@beekhof.net> - 0.4.0-0.28.0b41287.git
changelog:
  - Refresh from upstream
  - Local broker is now optional
  - Functional Host, Network and Services (including support for OCF Resources) agents
    Related: rhbz#658828


author: Andrew Beekhof <andrew@beekhof.net> - 0.4.0-0.29.0b41287.git
changelog:
  - Update to upstream version 2798d52.git
    + Support password authentication to qpid
    + Prevent errors when matahari is started at boot
    Related: rhbz#658828


author: Andrew Beekhof <abeekhof@redhat.com> - 0.4.0-1
changelog:
  - Split the packaging up, one subpackage per agent 
  - Remove dependancy on qpid-cpp-server-devel
  - Convert agents to the QMFv2 API
  - Rebuild for updated qpid-cpp
    Related: rhbz#658828


author: Andrew Beekhof <abeekhof@redhat.com> - 0.4.0-2
changelog:
  - Add explicit versioned dependancies between relevant sub-packages
  - Avoid the -libs package depending on QMF libraries
  - Fix post and postun scripts for matahari-service
  - Resolves: rhbz#688164 rhbz#692400 rhbz#688197 
  - Resolves: rhbz#674185 rhbz#690587


author: Russell Bryant <rbryant@redhat.com> 0.4.3-1
changelog:
  - Rebase to upstream release 0.4.3
  - Resolves: rhbz#733384, rhbz#733393, rhbz#733451, rhbz#731858
  - Resolves: rhbz#733150, rhbz#714249


author: Russell Bryant <rbryant@redhat.com> 0.4.4-1
changelog:
  - Rebase to upstream release 0.4.4
  - Resolves: rhbz#735419, rhbz#735429, rhbz#733483. rhbz#734981
  - Resolves: rhbz#735426, rhbz#734536, rhbz#733468, rhbz#734522
  - Resolves: rhbz#733393, rhbz#736468
  - Related: rhbz#674578


author: Russell Bryant <rbryant@redhat.com> 0.4.4-4
changelog:
  - Sync with upstream spec file fixes.
  - add man pages (rhbz#737088)
  - fix some sysconfig issues (rhbz#737137)
  - ensure old processes get cleaned up after an upgrade (rhbz#737618)
  - fix agent crash on NULL UUIDs (rhbz#739666)
  - don't list "LSB" as a valid standard on windows (rhbz#739952)
  - Resolves: rhbz#737088, rhbz#737137, rhbz#737618, rhbz#739666
  - Resolves: rhbz#739952, rhbz#737541


author: Russell Bryant <rbryant@redhat.com> 0.4.4-5
changelog:
  - remove hard puppet dependency
  - fix sysconfig agent no response (rhbz#740038)
  - Resolves: rhbz#740038
  - Related: rhbz#737137


author: Russell Bryant <rbryant@redhat.com> 0.4.4-6
changelog:
  - resolve coverity warnings in broker wrapper (rhbz#735426)
  - add validation on sysconfig keys (rhbz#740090)
  - store sysconfig keys in a subdir (rhbz#740091)
  - Resolves: rhbz#740090, rhbz#740091
  - Related: rhbz#735426


author: Russell Bryant <rbryant@redhat.com> 0.4.4-7
changelog:
  - Validate sysconfig keys sooner (rhbz#741965)
  - Add man pages in a patch instead of generating during build (rhbz#737088)
  - Update sigar version dependency (rhbz#737541)
  - Resolves: rhbz#741965, rhbz#737088, rhbz#737541


author: Zane Bitter <zbitter@redhat.com> 0.4.4-9
changelog:
  - Read the CPU features on non-x86 architectures (rhbz#746288)
  - Add daemons to chkconfig after installation (rhbz#746084)
  - Resolves: rhbz#746084
  - Related: rhbz#746288


author: Jeff Peeler <jpeeler@redhat.com> 0.4.4-12
changelog:
  - Do not link to the Qpid client library.
  - Remove unused includes to avoid linking to qpid::sys symbols
    Resolves: rhbz#806766


author: Zane Bitter <zbitter@redhat.com> 0.6.0-5
changelog:
  - Fix buffer overflow in broker wrapper
    Related: rhbz#795430
  - Move shadow-utils dependency to correct subpackage


author: Jeff Peeler <jpeeler@redhat.com> 0.6.0-6
changelog:
  - Fix man pages not being installed properly.
  - Fix permission on lockfile preventing broker daemon startup.
  - Resolves: rhbz#803718, rhbz#803590


author: Zane Bitter <zbitter@redhat.com> 0.6.0-15
changelog:
  - Remove Matahari and replace with an empty package.
  - Also obsolete libvirt-qmf and matahari-mingw32
    Resolves: rhbz#833109


author: John (J5) Palmieri <johnp@redhat.com> 1.9-3
changelog:
  - Fix buildroot
  - Add COPYING license file to docs
  - Added {} braces around % macros
  - Own {_sysconfdir}/matchbox directory
  - Own {_datadir}/matchbox


author: Jindrich Novy <jnovy@redhat.com> 4.6.99-0.20090731git
changelog:
  - update to latest GIT mc
  - forwardport prompt fix and exit patch, keep IPv6 patch and drop the others


author: Prarit Bhargava <prarit@redhat.com> 1:1.0pre3-0.1
changelog:
  - updated to 1.0pre3
  - added initscript for Predictive Failure Analysis (PFA) which does not
    run by default.


author: Prarit Bhargava <prarit@redhat.com> 1:1.0pre3_20110718-0.7
changelog:
  - Updated to 1.0pre3 as of Jul 18 2011/cbd4da48 [BZ 699592]
  - chkconfig mcelogd on by default [BZ 699592]


author: Prarit Bhargava <prarit@redhat.com> 1:1.0pre3_20110718-0.14
changelog:
  - Add --supported option to mcelog; include misc fixes [BZ 795508] - v2
  - added missing man page documentation for --supported option


author: Prarit Bhargava <prarit@redhat.com> 1:1.0pre3_20120814_2-0.14
changelog:
  - add /etc/logrotate.d/mcelog file [849252]
  - add chkconfig levels to mcelogd initscript [1006293]
  - fix IvyBridge detection (commits b29cc4d and 2577aeb) [1079360]
  - cleanup .orig and .rej patch files [1059227]
  - add Haswell CPUID 0x3f [1079501]
  - Modify --daemon logic to allow syslog-only output [872387]


author: Prarit Bhargava <prarit@redhat.com> 2:101.0
changelog:
  - Decode MISC register when IO MCA occurs
  - add and fix leaky bucket logging
  - exit with EXIT_SUCCESS (aka 0) when stopped by signal
  - Fix missing handling for flag MCE_GETCLEAR_FLAGS
  - Decode new simple error code number 6
  - introduce new NVR scheme to sync with upstream


author: Prarit Bhargava <prarit@redhat.com> 2:109.1
changelog:
  - updated to upstream 109, brought in previous Haswell and additional fixes
  - add Broadwell support, currently unsupported in kernel


author: Prarit Bhargava <prarit@redhat.com> 2:128.1
changelog:
  - updated to upstream 128
  - a little better documentation to /etc/mcelog/mcelog.conf [1136920]
  - Atom cpuids [1206320]
  - Broadwell-DE cpuid [1206320]
  - Skylake (0x4e and 0x5e) cpuids [1255561]
  - fix cpu buffer overflow warning [1136920]


author: Kiyoshi Matsui <kmatsui@t3.rim.or.jp> 2.7.1-1
changelog:
  - Upstream new release.
  - Change to library build.
  - Devide to 4 packages: mcpp, libmcpp, libmcpp-devel and mcpp-doc.
  - Thanks to Mary Ellen Foster for correcting this spec file.


author: Joe Nall <joe@nall.com> 0.3.1-1
changelog:
  - Rewrite translations to allow individual word/category mapping
  - Eamon Walsh's color mapping changes


author: Doug Ledford <dledford@redhat.com> - 3.1.2-7
changelog:
  - Fix up directory in mdmonitor init script so that we restart mdmon like we
    are supposed to
  - Add a rule to run incremental assembly on containers in case there are
    multiple volumes in a container and we only started some of them in the
    initramfs
  - Make -If work with imsm arrays.  We had too restrictive of a test in
    sysfs_unique_holder.
  - Make incremental assembly of containers act like incremental assembly of
    regular devices (aka, --run is needed to start a degraded array)


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git07202010.1
changelog:
  - Update to latest git repo (3.1.2 plus pending changes, bz617280)
  - Remove mdadm.static as its no longer used in initrd creation
  - Remove glibc-static buildreq
  - Resolves: bz617280


author: Doug Ledford <dledford@redhat.com> - 3.1.3-0.git20100722.1
changelog:
  - Change git date format to the correct format (YYYYMMDD)
  - Update to latest upstream push (fixes bz604023)
  - Resolves: bz604023


author: Doug Ledford <dledford@redhat.com> - 3.1.3-1
changelog:
  - Update to official 3.1.3 release instead of a git snapshot
  - Add patch for return code in the case that a container is not assembled
    due to insufficient drives (bz622408)
  - Add patch to allow the deprecated --no-degraded option to be passed in,
    just not honored (bz622408)
  - Resolves: bz622408


author: Doug Ledford <dledford@redhat.com> - 3.2-1
changelog:
  - Update to latest upstream release
  - Related: bz633306, bz633667, bz633671, bz633688, bz633690, bz633692
  - Fix mdadm udev rules file
  - Resolves: bz605710
  - Process the Y option
  - Resolves: bz636883


author: Doug Ledford <dledford@redhat.com> - 3.2.1-1
changelog:
  - Update to latest upstream release
  - Don't report mismatch counts on either raid1 or raid10 devices
  - Check both active and idle arrays during raid check runs
  - Move raid-check script to /usr/sbin, add a crontab entry to /etc/cron.d
    and mark it config(noreplace) so that users can select their own
    raid check frequency and it will be preserved across updates
  - Allow the raid check script to set both the cpu and io priority on the
    raid check process in an effort to minimize the impact to users on the
    system
  - Related: bz633306


author: Doug Ledford <dledford@redhat.com> - 3.2.2-1.el6_1.1
changelog:
  - Update to latest upstream release (many bugfixes related to the new
    automatic rebuild support: bz723135, bz723137, bz723139, bz723140,
    bz723141, bz723142)
  - Correct typo in /etc/sysconfig/raid-check file
  - Fix a bug related to readding devices into an array
  - Resolves: bz723135, bz723137, bz723139, bz723140, bz723141, bz723142


author: Doug Ledford <dledford@redhat.com> - 3.2.2-1
changelog:
  - Update to latest upstream release (many bugfixes related to the new
    automatic rebuild support: bz716413, bz694083, bz694092, bz694103,
    bz694121, bz694779, bz695336, bz702270)
  - Correct typo in /etc/sysconfig/raid-check file (bz708280)
  - Fix a bug related to readding devices into an array (bz706500)
  - Resolves: bz716413, bz694083, bz694092, bz694103, bz694121, bz694779
  - Resolves: bz695336, bz702270, bz708280, bz706500


author: Doug Ledford <dledford@redhat.com> - 3.2.2-2
changelog:
  - When using writemostly on a raid1 array, if you remove a device that
    is readwrite and then readd it, it can end up being listed as writemostly
    if the device used to pull the superblock info from was writemostly.
    Properly clear the writemostly bit when adding/readding a device.
  - Related: bz706500


author: Doug Ledford <dledford@redhat.com> - 3.2.2-3
changelog:
  - Be robust when running on a version 3.0 kernel
  - Properly set the default chunk size on orom devices
  - Fix getinfo_super_imsm so a hack in create.c can be dropped
  - Make the output of --detail more accurately communicate the state of
    a device that is waiting on a resync because another resync is
    already running
  - A few tweaks to the man page for mdadm to clarify usage in relation to
    imsm arrays
  - Resolves: bz727216, bz727207, bz727210, bz727212, bz727203


author: Doug Ledford <dledford@redhat.com> - 3.2.2-4
changelog:
  - Minor tweaks to wording in the comments of the /etc/sysconfig/raid-check
    file
  - Resolves: bz708280


author: Doug Ledford <dledford@redhat.com> - 3.2.2-5
changelog:
  - Fix multiple issues in the udev incremental assembly rules file.  We should
    now properly support:
    1) Nested md raid arrays
    2) md raid arrays built on top of dm device (like LUKS encrypted devices)
    3) md raid arrays build on top of dm multipath devices (we should no longer
      attempt to grab the path device instead of waiting for the logical
      multipath device to come live and grabbing it for our md raid usage)
  - Resolves: bz598513, bz609122


author: Doug Ledford <dledford@redhat.com> - 3.2.2-6
changelog:
  - Fix several new coverity issues introduced by changes between the rhel6.1
    and rhel6.2 mdadm package (this does not attempt to address coverity
    issues that also exist in rhel6.1)
  - Resolves: bz734716


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-7
changelog:
  - Fix problem where a dirty IMSM RAID isn't assembled correctly during
    boot, preventing booting from this RAID device.
  - Resolves: bz692261


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-8
changelog:
  - Fix problem where an IMSM RAID is rejected because of unexpected
    attribute settings.
  - Resolves: bz733153


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-9
changelog:
  - Fix problem where an IMSM RAID is rejected because of unexpected
    attribute settings. Additional fix being extra cautious from -8.
  - Resolves: bz733153


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-3
changelog:
  - Really enable fix for problem where a device fails to remove from
  - an IMSM container
  - Resolves: bz771332


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-4
changelog:
  - Fix bug where IMSM arrays stay inactive in case a reboot is
  - performed during the reshape process.
  - Resolves: bz730052


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-5
changelog:
  - Fix issue with devices failing to be added to a raid using bitmaps,
    due to trying to write the bitmap with mis-aligned buffers using
    O_DIRECT 
  - Resolves: bz790394


author: Doug Ledford <dledford@redhat.com> - 3.2.3-7
changelog:
  - Fix Monitor mode sometimes crashes when a resync completes
  - Fix missing symlink for mdadm container device when incremental creates
    the array
  - Make sure when creating a second array in a container that the second
    array uses all available space since leaving space for a third array
    is invalid
  - Validate the number of imsm volumes per controller
  - Fix issues with imsm arrays and disks larger than 2TB
  - Add support for expanding imsm arrays/containers
  - Resolves: bz808424, bz808519, bz808492, bz808438, bz808507,
  	    bz808475


author: Doug Ledford <dledford@redhat.com> - 3.2.3-8
changelog:
  - The support for expanding imsm arrays/containers was accepted upstream,
    update to the official patches from there
  - Fix for the issue of --add not being very smart
  - Fix an issue causing rebuilds to fail to restart on reboot (data
    corrupter level problem)
  - Reset the bad flag on map file updates
  - bitmap_offset is signed, treat it as such
  - Related: bz808475
  - Resolves: bz808776, bz812001, bz814743, bz811282


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.3-11
changelog:
  - Fix case where reshape of IMSM RAID fails because we don't check the
    return value when trying to read the word 'degraded' from sysfs,
    resulting in the use of random stack data.
  - Resolves bz824815


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-1
changelog:
  - Update mdadm to upstream release v3.2.5
    This includes all current patches, except for
    mdadm-3.2.3-imsm-fix-correct-checking-volume-s-degradation.patch
  - Resolved bz812358


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-3
changelog:
  - Avoid corruption by prohibiting an IMSM array from spanning multiple
    controllers (bz878810)
  - Prevent creation of a second IMSM array of size 0 (bz880208)
  - Avoid segfault when running mdadm --detail on an IMSM raid1 array
    where two drives have been disabled (bz880225)
  - Resolves bz878810, bz880208, bz880225


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4.1
changelog:
  - Z-Stream fix
  - Fix problem with IMSM metadata where resync progress would be lost
    if an array was stopped during ongoing expansion of a RAID1/5 volume.
  - Fix problem with IMSM RAID5 not rebuilding after reboot
  - Resolves bz958024, bz960612


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4.2
changelog:
  - Z-Stream fix
  - Fix problem with mdadm segfaulting if trying to write superblock
    onto a defective drive resulting in a write error.
  - Resolves bz1001493


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4.3
changelog:
  - Z-Stream fix
  - Fix problem with mdadm segfaulting if trying to write superblock
    onto a defective drive resulting in a write error.
  - Resolves bz1009243


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-6
changelog:
  - Fix problem with IMSM metadata where resync progress would be lost
    if an array was stopped during ongoing expansion of a RAID1/5 volume.
  - Resolves bz903212


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-1
changelog:
  - Update mdadm to upstream release v3.2.6
    This includes all current patches, except for
    mdadm-3.2.5-imsm-Forbid-spanning-between-multiple-controllers.patch and
    mdadm-3.2.5-Create.c-check-if-freesize-is-equal-0.patch
  - Fix problem with arrays marked <ignored> in mdadm.conf still being
    auto-assembled
  - Fix problem with it not being possible to use <ignore> more than
    once in mdadm.conf
  - Resolves bz922971
  - Resolves bz902142
  - Resolves bz902137


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-2
changelog:
  - Enhance raid-check to allow the admin to specify the max number of
    concurrent arrays to be checked at any given time.
  - Resolves bz819943


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-3
changelog:
  - Fix problem where first stop command doesn't stop container during
    IMSM volume's reshape
  - Fix annoying build noise caused by latest rpmbuild
  - Resolves bz956016


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-4
changelog:
  - Fix problem with RAID10 resync failing to restart if it has been
    stopped after 50% completion.
  - Resolves bz995105


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-7
changelog:
  - Check for DM_UDEV_DISABLE_OTHER_RULES_FLAG instead of
    DM_UDEV_DISABLE_DISK_RULES_FLAG in 65-md-incremental.rules 
  - Resolves bz1015514


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-7.1
changelog:
  - Fix problem where mdadm would crash if trying to create an IMSM array with
    missing drives.
  - Resolves bz1077131


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-8
changelog:
  - Work around udev sporadically not updating ID_FS_TYPE field of block
    device entry in its database when array is being created.
  - Resolves bz1040006


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-9
changelog:
  - Change permissions of /etc/cron.d/raid-check to 600
  - Resolves bz1012505
  - Avoid double close() issue reported by Coverity
  - Resolves bz991041


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-10
changelog:
  - Fix problem of IMSM platform capabilities not being detected in UEFI
    mode when only the second SATA controller is enabled.
  - Resolves bz1075529


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-11
changelog:
  - Fix problem where mdadm would crash if trying to create an IMSM array with
    missing drives.
  - Resolves bz1059307


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3-2
changelog:
  - Fix problem with path=* policy not working, due to lack of /dev/disk/by-path/
  - Resolves bz1059193


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3-6
changelog:
  - Fix problem with reshape of IMSM RAID arrays failing to start
  - Disallow IMSM arrays spanning multiple controllers
  - Fix problem with reshape failing to restart when reassembling IMSM RAID
  - Resolves bz1136880, bz1136891, bz1136903


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.2-4
changelog:
  - Fix problem where mdadm allowed the creation of more arrays than
    supported by the BIOS.
  - Resolves bz1211564


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-1.el6_8.3
changelog:
  - Retry reading sync_completed state to avoid a reshape not continuing after
    restarting a reshape
    This is an additional patch to resolve this bug.
  - Resolves bz1331331


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-1.el6_8.4
changelog:
  - Fix problem with mdadm large device names overflowing an internal buffer,
    potentially leading to segfaults.
  - Resolves bz1347808


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-1.el6_8.5
changelog:
  - Fix problem with reshaping IMSM arrays, where a new reshape could be
    launched before the first reshape had fully completed, leading to
    unpected results.
  - Resolves bz1348544


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-4
changelog:
  - Fix problem with mdadm large device names overflowing an internal buffer,
    potentially leading to segfaults.
  - Resolves bz1343809


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-5
changelog:
  - Retry reading sync_completed state to avoid a reshape not continuing after
    restarting a reshape
    This is an additional patch to resolve this bug, which was identified
    during the z-stream backport of this bug.
  - Resolves bz1322317


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-6
changelog:
  - Fix problem with reshaping IMSM arrays, where a new reshape could be
    launched before the first reshape had fully completed, leading to
    unpected results.
  - Resolves bz1340768


author: Xiao Ni <xni@redhat.com> - 3.3.4-8
changelog:
  - Cannot assemble IMSM array with domain policy in mdadm.conf and
    RAID level migration in container with 2 arrays breaks both arrays 
  - Resolves bz1413937 and bz1413615


author: Matthias Clasen <mclasen@redhat.com> - 6-1
changelog:
  - Fix the source URL
  - Use a newer upstream release with support for many more media players
  Resolves: #592310


author: Paul Lindner <lindner@inuus.com> - 1.4.3-1
changelog:
  - Add explicit require on memcached for memcached-devel (resolves 537046)
  - enable-threads option no longer needed
  - Update web site address


author: Paul Lindner <lindner@inuus.com> - 0:1.4.4-1
changelog:
  - Upgraded to upstream memcached-1.4.4 (http://code.google.com/p/memcached/wiki/ReleaseNotes144)
  - Add explicit Epoch to fix issue with broken devel dependencies (resolves 542001)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.4-3.el6_8.1
changelog:
  - fix vulnerabilities allowing remote code execution (CVE-2016-8704,
    CVE-2016-8705, CVE-2016-8706)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.4-4
changelog:
  - fix init script to check for root privileges (#883438)
  - fix race condition when enabling new connections (#902432)
  - fix crash when printing key in verbose mode (#1153902)


author: Paulo Roma <roma@lcg.ufrj.br> - 2.11-4
changelog:
  - Updated to 2.11
  - Patched for booting from grub.
  - Using memtest (ELF) instead of memtest.bin
  - Changed memtest-setup for writing the correct grub entry.
  - Removed obsolete patch memtest86+-2.10-fixflags.patch
  - Created option update grub.conf


author: Paulo Roma <roma@lcg.ufrj.br> - 2.11-6
changelog:
  - grub.conf will not be updated by default. The user
    will have to add and/or remove memtest86+ entries.
  - No messages printed.


author: Warren Togami <wtogami@redhat.com> - 2.11-8
changelog:
  - Bug #494157 rename elf binary so it doesn't accidentally copy the elf binary
    during livecd-creator
  - Put scripts into CVS


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.01-1
changelog:
  - New version
    Resolves: rhbz#1009083
  - Fixed bogus dates in the changelog (best effort)
  - Used global instead of define in macros definition


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.01-2
changelog:
  - Fixed memtest86+ binary (non-ELF) to run from floppy disk
    Resolves: rhbz#1302806
  - Fixed memtest-setup to support --help argument
    Resolves: rhbz#1302000
  - Added distribution specific README file
    Resolves: rhbz#1302005


author: Jan Zeleny <jzeleny@redhat.com> - 1.4-2
changelog:
  - cleanup of spec file (mixed tabs-and-spaces, specific version
    for explicit obsoletes, file attributes)


author: Petr Stodulka <pstodulk@redhat.com> - 1.4-4
changelog:
  - Fixed troubles with SSl connection
  - Fixed adding of broken symlink when 'copy -A'
  - Fixed permissions for */hgk - Thanks to Dave Johanse <davejohansen@gmail.com>
    Resolves: #784079 #928301 #1006457


author: Adam Jackson <ajax@redhat.com> 10.1.1-0.1
changelog:
  - Rebase to Mesa 10.1.1
  - Initial rebuild against llvm 3.4
  - Add llvm_rebase macro for future convenience


author: Dave Airlie <airlied@redhat.com> 7.7-1
changelog:
  - rebase to 7.7 release - the best base to move forward at this point in time.
  - bump libdrm requires


author: Adam Jackson <ajax@redhat.com> 7.11-2
changelog:
  - mesa-7.11-b9c7773e.patch: Sync with 7.11 branch
  - mesa-7.11-gen6-depth-stalls.patch: Fix GPU hangs on gen6+ in openarena
    and others (#741806)
  - Drop tdfx_dri.so, as there's no glide3 package or drm support in el6.


author: Adam Jackson <ajax@redhat.com> 8.1-0.19
changelog:
  - Fix pthread linkage of glapi and osmesa
  - Drop llvmpipe-related patches
  - Don't require mesa-dri1-drivers on s390{,x}


author: Dave Airlie <airlied@redhat.com> 9.0-0.8
changelog:
  - CVE-2013-1872: memory corruption oob read/write on intel (#963063)
  - CVE-2013-1993: interger overflows in protocol handling (#961613)


author: Adam Jackson <ajax@redhat.com> 3.1-13
changelog:
  - Forked spec for RHEL7 Mesa's private use
    - no ocaml support
    - no doxygen build
    - no clang support
    - no static archives
    - no libraries, binaries, or manpages not needed by Mesa


author: Adam Jackson <ajax@redhat.com> 3.3-0.1.rc1
changelog:
  - Update to 3.3 rc1
  - Move library to %{_libdir} to avoid rpath headaches
  - Link with -Bsymbolic and --default-symver
  - --disable-libffi
  - Misc spec cleanup


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-12
changelog:
  - Require gnome-themes rather than nodoka-metacity-theme (rhbz 532455, Stijn Hoop)
  - Add patches for GNOME bugs
     445447 - Application-induced window raise fails when raise_on_click off (rhbz 526045)
     530702 - compiz doesn't start if metacity compositor is enabled (rhbz 537791)
     559816 - Doesn't update keybindings being disabled/cleared (rhbz 473224)
     567528 - Cannot raise windows from applications in Tcl/Tk and Java (rhbz 503522)
     577576 - Failed to read saved session file warning on new sessions (rhbz 493245)
     598231 - When Chromium rings the bell, metacity quits (rhbz 532282)
     598995 - Don't focus ancestor window on a different workspace (rhbz 237158)
     599097 - For mouse and sloppy focus, return to "mouse mode" on motion (rhbz 530261)
     599248 - Add no_focus_windows preference to list windows that shouldn't be focused (rhbz 530262)
     599261 - Add a new_windows_always_on_top preference (rhbz 530263)
     599262 - Add XFCE Terminal as a terminal
     604319 - Handle XError and XIOError for unknown displays (rhbz 537845)


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-13
changelog:
  - Fix crash in in tooltip on_style_set() (rhbz 546509)
  - Fix Crash in SmcSetProperties() on exit (rhbz 539905, gnome 604867)


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-14
changelog:
  - Fix crash in _IceTransClose (rhbz 551994)
    The previous patch for rhbz 539905 didn't actually fix the
    problem; the ICE connection was still being closed twice.


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-16
changelog:
  - Add a patch to fix confusion between windows
    Resolves: rhbz 588926
  - Add translation updates
    Resolves: rhbz 589227


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-17
changelog:
  - Add patch to allow breaking out from maximization during mouse resize
    Resolves: rhbz 523520
  - Add patches that tweak behaviors of RHEL 5.5 added GConf preferences
     - apply new_windows_always_on_top to windows that are raised
       or activated but denied focus as well.
     - exclude the current application from the effect of no_focus_windows
       preference
    Resolves: rhbz 607390


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-19
changelog:
  - Fix breaking out from maximization in reduced resources mode; bug
    discovered in testing resulted in mis-positioning in that case.
    Resolves: rhbz 523520


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-20
changelog:
  - Fix cases where unmaximized size wouldn't be honored when unmaximizing
    in reduced resources mode.
    Resolves: rhbz 523520


author: Martin Nagy <mnagy@redhat.com> - 1.1.33-16
changelog:
  - fix -t option of g32pbm (#188028)
  - move g32pbm and g3cat from mgetty-sendfax to mgetty (#190179)
  - some whitespace changes (#263641)
  - added faxq-helper man page (#243293)


author: Martin Nagy <mnagy@redhat.com> - 1.1.36-1
changelog:
  - update to new upstream release
  - use our own faxq-helper man page now that we updated
  - fix -t flag of faxspool so it now accepts time ranges as it should (#171280)
  - fix mgetty and vgetty logrotate configuration files (#436727)
  - faxspool will handle spaces in file names better (#46697)


author: Kyle McMartin <kyle@redhat.com> - 1:1.17-2
changelog:
  - Don't use a CVS release for RHEL, otherwise it'll always be a branch
    and irritating.
  - Fix syntax error in microcode_ctl.init.
  - Resolves: rhbz#552246.


author: Anton Arapov <anton@redhat.com> - 1:1.17-10
changelog:
  - Fix buffer overflow
  - Resolves: rhbz#768803
  - Update to microcode-20111110.dat
  - Resolves: rhbz#736266


author: Petr Oros <poros@redhat.com> - 1:1.17-21
changelog:
  - Update microcode data file to 20151106 revision.
  - Resolves: #1244968
  - Remove bad file permissions on /lib/udev/rules.d/89-microcode.rules
  - Resolves: #1201276


author: Petr Oros <poros@redhat.com> - 1:1.17-24
changelog:
  - Update microcode data file to 20161104 revision.
  - Add workaround for E5-26xxv4
  - Resolves: #1346045


author: Dave Jones <davej@redhat.com>
changelog:
  - Shorten sleep time during init.
    This really needs to be replaced with proper udev hooks, but this is
    a quick interim fix.


author: Jan Safranek <jsafrane@redhat.com> 47-2
changelog:
  - added support for Fedora DS (when it provides ldif2ldbm)
  - rediffed all patches to get rid of patch fuzz


author: Jan Safranek <jsafrane@redhat.com> - 47-5
changelog:
  - Fixed import of fields with value '0' in /etc/passwd (#563172)
  - Fixed import of three-level base domains (#563155)


author: Florian La Roche <laroche@redhat.com> - 1.08-1
changelog:
  - change Source: tag
  - Bernardo Innocenti bernie at codewiz.org: add LDFLAGS to opt patch
    to enable cross building on 64bit host
  - release 1.08 with loginpause option from Bernardo Innocenti bernie at codewiz.org


author: Petr Pisar <ppisar@redhat.com> - 1.08-5
changelog:
  - Check chroot(), chdir(), and nice() (bug #640933)
  - Limit TTY name length to prevent buffer overflow (bug #640940)
  - Allow login name up to LOGIN_NAME_MAX length (bug #651955)


author: Richard W.M. Jones <rjones@redhat.com> - 2.19.1-4
changelog:
  - Switch to using upstream (GNU) binutils 2.19.1.  It's exactly the
    same as the MinGW version now.


author: Thomas Sailer <t.sailer@alumni.ethz.ch> - 1.37.0-1
changelog:
  - update to 1.37.0
  - actually tell the build system about the target os
  - build also boost DLL's that depend on other boost DLL's


author: Thomas Sailer <t.sailer@alumni.ethz.ch> - 1.37.0-2
changelog:
  - fix %defattr
  - fix description of static package
  - add comments that detail the failures linking the test framework / exec monitor DLL's


author: Andrew Beekhof <abeekhof@redhat.com> - 1.0.5-8.3
changelog:
  - The use of ExclusiveArch conflicts with noarch, using an alternate COLLECTION to limit builds
    Related: rhbz#658833


author: Richard W.M. Jones <rjones@redhat.com> - 0.1-0.2.r11
changelog:
  - Import into fedora-mingw temporary repository because there are packages
    which will depend on this.
  - Fix the version/release according to packaging guidelines.
  - Tidy up the spec file.
  - Use dos2unix and keep the timestamps.


author: Richard W.M. Jones <rjones@redhat.com> - 0-0.3.r11
changelog:
  - Use Version 0
    (https://www.redhat.com/archives/fedora-packaging/2009-January/msg00064.html)
  - Revert use of dos2unix for now
    (https://www.redhat.com/archives/fedora-packaging/2009-January/msg00066.html)
  - Use _smp_mflags.


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 0-0.7.r11
changelog:
  - Use %global instead of %define
  - Automatically generate debuginfo subpackage
  - Fixed %defattr line
  - Added -static subpackage
  - Fixed linker error with C++ applications


author: Andrew Beekhof <abeekhof@redhat.com> - 63-3
changelog:
  - Temporarily provide mingw32(libstdc++-6.dll) so that we can install
    mingw32-pthreads so we can install mingw32-gcc so we can recompile 
    mingw32-pthreads to no longer require mingw32(libstdc++-6.dll).
  - Drop the ExclusiveArch tag, its incompatible with noarch
    Related: rhbz#658833


author: Kai Tietz <ktietz@redhat.com> - 63-5
changelog:
  - Make sure the -debuginfo subpackages are mingw32- prefixed
    even if the base package is mingw-
    Merged from Sun May 29 2011 Kalev Lember <kalev@smartlink.ee> - 64-2
    Related: rhbz#719866


author: Kalev Lember <kalev@smartlink.ee> - 4.4.1-1
changelog:
  - Update to gcc 4.4.1 20090818 svn 150873.
  - Patches taken from native Fedora gcc-4.4.1-6.
  - Replaced %define with %global and updated %defattr.
  - Changed license to match native Fedora gcc package.


author: Kalev Lember <kalev@smartlink.ee> - 4.4.1-2
changelog:
  - Update to gcc 4.4.1 20090902 svn 151328.
  - Patches taken from native Fedora gcc-4.4.1-8.
  - Another license update to keep it in sync with native gcc package.


author: Kalev Lember <kalev@smartlink.ee> - 4.4.2-1
changelog:
  - Update to gcc 4.4.2 20091114 svn 154179, which includes
    VTA backport from 4.5 branch.
  - Patches taken from native Fedora gcc-4.4.2-10.


author: Richard W.M. Jones <rjones@redhat.com> - 0.17-7
changelog:
  - Remove the manpages - already available in base Fedora gettext-devel.
  - Use _smp_mflags for build.
  - Added list of potential BRs.
  - Added license file to doc section.


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.12-11
changelog:
  - Fixed %defattr line
  - Added -static subpackage
  - Use %global instead of %define
  - Automatically generate debuginfo subpackage


author: Richard W.M. Jones <rjones@redhat.com> - 1.4.4-1
changelog:
  - Update to Fedora native version 1.4.4:
    . Remove potentially patented ECC support.
    . Do not abort when the fips mode kernel flag is inaccessible
      due to permissions (#470219).
  - For review (Michel Alexandre Salim):
    . Remove *.def file.
    . Make description clearer.
    . Distribute the license files.
  - The license for binaries is GPLv2+, so update the license field.
  - Add check section (disabled by default).
  - Why did we set PATH before configure? Removed.
  - Added BR mingw32-dlfcn suggested by auto-buildrequires.


author: Richard W.M. Jones <rjones@redhat.com> - 1.6-9
changelog:
  - Verify that we are still matching current native package.
  - Use auto-buildrequires to identify more accurate list of BRs:
      + BR gettext (for /usr/bin/msgfmt etc)
      + BR mingw32-dlfcn
      + BR mingw32-iconv
  - Use _smp_mflags.
  - Use find_lang.


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.7.4-2
changelog:
  - Always use the native win32 thread API even when pthreads is available
  - Dropped a patch which isn't necessary anymore


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 2.7.6-1
changelog:
  - Update to 2.7.6
  - Updated the configure arguments so that the native Win32 thread API
    will be used instead of pthreads


author: Kai Tietz <ktietz@redhat.com>
changelog:
  - Change release number to 4.
  - Added patch libxml2-Fix-an-off-by-one-pointer-access.patch
  - Added patch libxml2-Fix-a-segfault-on-XSD-validation-on-pattern-error.patch
  - Added patch libxml2-Fix-entities-local-buffers-size-problems.patch
  - Added patch libxml2-gnome-bug-561340-fix.patch
  - Added patch for CVE-2012-0841
  - Added patch for CVE-2011-0216
  - Added patch for CVE-2011-2834
  - Added patch for CVE-2011-3919
  - Added patch for CVE-2011-1944
  - Added patch for CVE-2011-3905
    Related: rhbz#891477


author: Erik van Pienbroek <epienbro@fedoraproject.org> - 1.1.25-1
changelog:
  - Update to 1.1.25
  - Dropped upstreamed CVE patch
  - Dropped upstreamed mingw32 patches
  - Added a patch to never use pthreads even if it's available
  - Automatically generate debuginfo subpackages


author: Andrew Beekhof <andrew@beekhof.net> - 0.4.0-0.2.0b41287.git
changelog:
  - Update to upstream version 2798d52.git
    + Support password authentication to qpid
    + Prevent errors when matahari is started at boot
    Related: rhbz#658840


author: Andrew Beekhof <abeekhof@fedoraproject.org> 0.4.2-6
changelog:
  - Sync the windows package with the linux version:
    - Rebase on new upstream release: 325f740
    - Update patch level to: 6b5df25
  - Related: rhbz#730066, rhbz#727194, rhbz#728360, rhbz#730087,
  	rhbz#729516, rhbz#729331, rhbz#728977, rhbz#728988,
  	rhbz#728631, rhbz#729063, rhbz#727192, rhbz#714249,
  	rhbz#688191, rhbz#727961, rhbz#688193


author: Russell Bryant <rbryant@redhat.com> 0.4.2-9
changelog:
  - Sync the windows package with the linux version
    - Update patch level to: 468fc0b
  - Related: rhbz#732498, rhbz#730087, rhbz#731914. rhbz#731858, rhbz#731233
  - Related: rhbz#729332, rhbz#730044, rhbz#730066, rhbz#731534, rhbz#714249
  - Related: rhbz#728360, rhbz#733013


author: Russell Bryant <rbryant@redhat.com> 0.4.4-2
changelog:
  - Rebase to upstream release 0.4.4
  - Resolves: rhbz#735419, rhbz#735429, rhbz#733483. rhbz#734981
  - Resolves: rhbz#735426, rhbz#734536, rhbz#733468, rhbz#734522
  - Resolves: rhbz#733393, rhbz#736468
  - Resolves: rhbz#733384, rhbz#733393, rhbz#733451, rhbz#731858
  - Resolves: rhbz#733150, rhbz#714249


author: Russell Bryant <rbryant@redhat.com> 0.4.4-4
changelog:
  - Import all patches from matahari package
  - rebuild to include latest mingw32-sigar
  - Resolves: rhbz#737088, rhbz#737137, rhbz#737618, rhbz#739666
  - Resolves: rhbz#739952, rhbz#737541


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 2.43-4
changelog:
  - Updated 64bit-fixes patch (remove some more -m32 use)
  - Drop ExclusiveArch, not needed with the above
  - Obsoletes/Provides nsis and nsis-data for migration path from CalcForge
  - Disable NSIS Menu (does not work on *nix, see specfile comment for details)
  - Drop BR wxGTK-devel


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 2.43-6
changelog:
  - Don't build the MinGW parts with debugging information, NSIS corrupts the
    debugging information in the stubs when building installers from them
  - Drop debian-debug-opt patch, all its changes are either taken care of by our
    rpm-opt patch, unwanted (see above) or unneeded


author: Kai Tietz <ktietz@redhat.com> - 0.12-3
changelog:
  - Disable html documentation generation.
  - Add doxygen and graphviz as build-requirement
  - Add dwin32.patch for fixing WIN32 vs. _WIN32 definition checks.
  - Add linker option -Wl,--export-all-symbols
  - Related: rhbz#751349


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.1-4
changelog:
  - Rerun autoconf because the standard configure doesn't know --bindir.
  - Set exec_prefix during make install step.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.3-18
changelog:
  - Cannot copy current directory into itself, so fix the copy command
    which creates 'x' subdirectory.


author: Miroslav Lichvar <mlichvar@redhat.com> 2.3-5
changelog:
  - rename getline to avoid conflict with glibc (#511715)
  - remove makefiles from docs
  - drop wchar patch


author: Thomas Graf <tgraf at, redhat.com> 0.4-4
changelog:
  - Fixed initscript according to SysVInitScript guidelines:
      - Corrected usage text
      - Added force-reload, condrestart and try-restart actions
      - Fixed return code of status action
      - Only start/stop daemon if not already running/stopped


author: Thomas Graf <tgraf at, redhat.com> 0.4-5
changelog:
  - Fix CVE-2010-2522 and CVE-2010-2523 by including the patches:
    - Additional sanity checks for ND options length
    - Security fix: Check origin of netlink messages in netlink helpers.


author: Stepan Kasal <skasal@redhat.com> - 1.5.5-1
changelog:
  - do not require dosfstools nor mkinitrd; tey are not needed for --iso
  - Resolves: 549098, #549099
  - various cosmetic changes
  - drop obsolete conflicts tag
  - better buildroot


author: Michal Hlavinka <mhlavink@redhat.com> - 39-5
changelog:
  - fix crash when bad substitution is used
  - fix crash when alias contains alias
  - fix crash when xtrace is enabled
  - use alternatives for ksh/mksh selection


author: Michal Hlavinka <mhlavink@redhat.com> - 39-9
changelog:
  - tab completion did not work correctly with files containing multibyte 
    characters in name (#771198)


author: Robert Scheck <robert@fedoraproject.org> 38-1
changelog:
  - Upgrade to 38 and updated arc4random.c file
  - Used -combine (-fwhole-program) rather the old -j switch


author: Miloslav Trmač <mitr@redhat.com> - 0.21.1-3
changelog:
  - Merge review fixes, based on a patch by Parag AN:
    - Use %{_localstatedir}/lib instead of hard-coding /var/lib
    - Use %{?_smp_mflags}
    - Preserve file time stamps
    - Only create the group if it doesn't exist, hide errors from rpm


author: Miloslav Trmač <mitr@redhat.com> - 0.22.2-2
changelog:
  - Add "lustre" to PRUNEFS
  - Add all nodev filesystems from the Fedora kernel to PRUNEFS, to make
    (updatedb) work as some users expect
    Related: #543948


author: Miloslav Trmač <mitr@redhat.com> - 0.22.2-4
changelog:
  - Fix a typo in locate(1)
    Resolves: #690800
  - When encountering an empty file name in updatedb, print the name of the
    offending directory instead of aborting
    Resolves: #699363


author: Michal Sekletar <msekleta@redhat.com> - 0.22.2-5
changelog:
  - index zfs filesystems despite the fact they are marked as nodev (#1023779)
  - use more strict permissions for cron script and mark it as config (#1012534)
  - add gpfs to PRUNEFS (#1168301)


author: Michal Sekletar <msekleta@redhat.com> - 0.22.2-6
changelog:
  - mlocate.db is ghost file created with non-default attrs, list them explicitly so rpm --verify doesn't report errors (#1182304)


author: Dan Williams <dcbw@redhat.com> - 1.20090707-1
changelog:
  - Update to latest upstream release including:
  - T-Mobile USA
  - Brazil
  - Bangladesh
  - Sweden
  - Spain
  - Moldova


author: Dan Williams <dcbw@redhat.com> - 1.20090918-1
changelog:
  - Update to latest upstream release including:
  - Algeria, Australia, Belarus, Belgium, Brazil
  - Brunei, Bulgaria, Egypt, Finland, Ghana, Greece
  - India, Italy, Kazakhstan, Korean CDMA operators
  - Kuwait, Mali, Netherlands, Paraguay, Serbia
  - Spain, Sweden, UK


author: Dan Williams <dcbw@redhat.com> - 1.20100122-1
changelog:
  - Update to latest upstream release including:
  - Cyprus, Austria, Ireland, Ukraine, Romainia, Cambodia (rh #530981), 
  - Iraq, India, Sri Lanka, UK, Australia, Singapore,
  - South Korea, Italy, United States, China (rh #517253), Nigeria,
  - Tanzania, Germany, Qatar, Russia, and Finland (rh #528988)


author: Jan Kaluza <jkaluza@redhat.com> - 5.4-14
changelog:
  - Fix principal creation in Constrained Delegation so the principal can
    be defined in KrbServiceName rather than always computing the value.
    (#1210184)


author: C. Sieh <csieh@fnal.gov> - 5.4-6.0.sl6
changelog:
  - Change "--with-krb5=/usr/kerberos" to "--with-krb5=/usr" because the krb
  - location changed on RHEL 6


author: Simo Sorce <simo@redhat.com> 0.7.0-4
changelog:
  - Backport of useful patches from upstream
    - Better handling of IDP reported errors
    - Better handling of session data storage size


author: Simo Sorce <simo@redhat.com> 0.8.0-1
changelog:
  - New upstream realease version 0.8.0
  - Upstream moved to github
  - Drops patches as they have been all included upstream


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.6-1
changelog:
  - Make pam_authenticate_with_login_password available for other modules.
  - Reformat documentation to make the Basic Auth usage less prominent.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.7-1
changelog:
  - No longer call lookup_identity_hook explicitly, hook order does
    the same.
  - Silence compile warnings by specifying C99.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.6-1
changelog:
  - Use org.freedesktop.sssd.infopipe.GetUserGroups for group lists.
  - Support new org.freedesktop.sssd.infopipe.GetUserAttr parameters /
    return values.
  - Removed LookupOutputGroupsSeparator.
  - LookupOutputGroups and LookupUserAttr now support separator as
    optional second parameter.
  - Added LookupUserGroupsIter and LookupUserAttrIter.
  - Added LookupDbusTimeout.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.8.1-1
changelog:
  - Ensure we run before mod_headers so that our result can be put to
    request headers for mod_proxy.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.0-1
changelog:
  - Add support for '+'-prefixed note/variable names.
  - Silence compile warnings by specifying C99.
  - Fix format of logs of dbus calls.


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-13
changelog:
  - Fix array overrun when launching nss_pcache (#714154)
  - For FakeBasicAuth retrieve the entire subject, not just CN. Prefix this
    with "/" to be compatible with OpenSSL.
    Always retrieve the client certificate, not just on the first request
    it is needed. (#702437)
  - Don't try to shut down NSS if it wasn't initialized. (#691502)


author: Robert Relyea <rrelyea@redhat.com> - 1.0.8-14
changelog:
  - Fix 'Bugzilla Bug #797358 - mod_nss fails debug assertion' by removing
    'mod_nss-no_shutdown_if_not_init.patch' and applying
    'mod_nss-no_shutdown_if_not_init_2.patch' instead
  - The 'mod_nss-no_shutdown_if_not_init_2.patch' patch also fixes
    Bugzilla Bug #797326 - File descriptor leak after "service httpd reload"
    or httpd doesn't reload


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-15
changelog:
  - Fixes Bugzilla Bug #749408 - PK11_ListCerts called to retrieve all user
    certificates for every server (mod_nss-PK11_ListCerts.patch)
  - Fixes Bugzilla Bug #749409 - Add '--enable-ecc' option to %configure
    line under %build section of RHEL 6 spec file


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-16
changelog:
  - Fixes Bugzilla Bug #769906 - mod_nss insists on Required value
    NSSCipherSuite not set. (mod_nss-proxyvariables.patch)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-17
changelog:
  - Fixes Bugzilla Bug #816394 - [RFE] Provide Apache 2.2 support for TLS v1.1
    via NSS through mod_nss . . .
  - Bumped version build/runtime requirements for NSPR and NSS


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-18
changelog:
  - Fixes Bugzilla Bug #835071 - [RFE] Support ability to share mod_proxy with
    other SSL providers (w/jorton, nkinder, & rcritten)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-19
changelog:
  - Resolves: CVE-2013-4566
  - Bugzilla Bug #1030265 - mod_nss: incorrect handling of NSSVerifyClient in
    directory context [rhel-6.5.z]


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-20
changelog:
  - Resolves: CVE-2013-4566
  - Bugzilla Bug #1030267 - mod_nss: incorrect handling of NSSVerifyClient in
    directory context [rhel-6.6]


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-21
changelog:
  - Bumped version build/runtime requirements for 'nspr' and 'nss'
  - Added runtime dependency for 'nss-softokn'
  - Bugzilla Bug #1002733 - Apache core generated with sig 5
  - Bugzilla Bug #1016628 - mod_nss httpd segfaulting regularly
  - Bugzilla Bug #866703 - Memory error in mod_nss (eol_memmove.patch)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.10-3
changelog:
  - Resolves: rhbz #1288477 - mod_nss: detect and fail for colons in
    credentials with FakeBasicAuth 
  - Patch created by jkaluza@redhat.com for 'mod_ssl' in rhbz #1027442 -
    mod_ssl: detect and fail for colons in credentials with FakeBasicAuth


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.10-4
changelog:
  - Resolves: rhbz #1280276 - Relocate and downgrade NSSProxyNickname error
    message to a warning (removed error message)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.10-5
changelog:
  - Resolves: rhbz #1295490 - Add server-side Server Name Indication
    (SNI) support
  - Resolves: rhbz #1277613, #1295976 - Always shut down the SSL
    session cache when killing the module. This was the source of a
    rather large memory leak and potential crash in the case of
    SIGHUP or service reload.


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.10-7
changelog:
  - Backported patch from Rob Crittenden
  - Clean up semaphore in nss_pcache on shutdown (#1364561)
  - Update clean semaphore patch to not close pipe twice and to
    shutdown NSS database (#1364561)
  - Update clean semaphore patch to not free the pinList twice.
    (#1364561)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.10-9
changelog:
  - Backported patch from Rob Crittenden
  - Bugzilla Bug #1390359 - foward port NSS OCSP cache settings (rcritten)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-3
changelog:
  - The location of libnssckbi.so moved from /lib[64] to /usr/lib[64] (#558545)
  - Don't generate output when the default NSS database is generated (#538859)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-4
changelog:
  - Remove unused variable and perl substitution for gencert. gencert used to
    have separate variables for NSS & NSPR libraries, that is gone now so this
    variable and substitution aren't needed.
  - Added comments to patch to identify what they do


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-5
changelog:
  - Add (pre) for Requires on httpd so we can be sure the user and group are
    already available
  - Add file Requires on libnssckbi.so so symlink can't fail
  - Use _sysconfdir macro instead of /etc


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-6
changelog:
  - Patch to add configuration options for new NSS negotiation API (#574187)
  - Set minimum version of nss to 3.12.6 to pick up renegotiation fix


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-9
changelog:
  - Add man page for gencert (#605376)
  - Fix hang when handling large POST under some conditions (#634687)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-15
changelog:
  - Fixes Bugzilla Bug #749408 - PK11_ListCerts called to retrieve all user
    certificates for every server (mod_nss-PK11_ListCerts.patch)
  - Fixes Bugzilla Bug #749409 - Add '--enable-ecc' option to '
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -I/usr/lib/gfortran/modules}" ; export FFLAGS ; 
    ./configure --build=ppc-redhat-linux-gnu --host=ppc-redhat-linux-gnu \
  	--target=ppc-redhat-linux-gnu \
  	--program-prefix= \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info'
    line under '%build
  LANG=C
  export LANG
  unset DISPLAY
  ' section of RHEL 6 spec file


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-6
changelog:
  - Bugzilla Bug #746365 - CRLS are not downloaded when mod_revocator module
    is loaded successfully. And no error was thrown in httpd error_log -
    mharmsen
  - Add 'autoreconf -fvi' to build section - mharmsen
  - Fix shutting down Apache if CRLUpdateCritical is on and a CRL
    is not available at startup (#654378) - rcritten@redhat.com
  - Updated mod_revocator-kill patch. The ownership of the semaphore used to
    control access to crlhelper was not always changed to the Apache user
    (#648546) - rcritten@redhat.com
  - Actually apply the patch (#648546) - rcritten@redhat.com
  - Fix killing the web server if updatecritical is set (#648546) -
    rcritten@redhat.com


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-8
changelog:
  - Bugzilla Bug #748577 - mod_revocator does not shut down httpd server if
    expired CRL is fetched
  - Bugzilla Bug #748579 - mod_revocator does not bring down httpd server if
    CRLUpdate fails


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-9
changelog:
  - Bugzilla Bug #749696 - httpd (32 bit) failed to start if mod_revocator
    (32 bit) is installed on ppc64


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-10
changelog:
  - Bugzilla Bug #861999 - mod_revocator exec CLR URIs fail to load: unable to
    load Revocation module, NSS error -8187 - stephen.capstick64@gmail.com
    (mod_revocator-waitpid.patch)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-11
changelog:
  - Backported patch from Rob Crittenden
  - Clean up semaphore in crlhelper on shutdown (#1326841)
  - Update URL to https://fedorahosted.org/mod_revocator/
  - Respin to fix segfault in cleanup call. (#1326841)


author: Martin Sivak <msivak@redhat.com> - 3.9-18
changelog:
  - Fix a segfault when overrides line was incomplete
    Resolves: rhbz#673100
  - Added backports directory to depmod search path
    Resolves: rhbz#761511


author: Tony Camuso <tcamuso@redhat.com>
changelog:
  - weak-modules: when adding a module, should collect the symbols from
    external modules of destination kernel
    Resolves: rhbz#1284935

  - weak-modules: Updating kernel was issuing warnings upon removal of
    old kernel.
    Resolves: rhbz#1343376

  - weak-modules: weak-modules does not handle periods in symbol names
    Resolves: rhbz#1389067


author: Deji Akingunola <dakingun@gmail.com> - 1.2-1
changelog:
  - Adapt to the Fedora MPI packaging guildelines
  - Split out a -doc subpackage
  - New upstream version, v1.2


author: Deji Akingunola <dakingun@gmail.com> - 1.2-2
changelog:
  - Backport upstream patch to workaround changes in Python behaviour in F-12
  - Clean-up the spec file to remove its 'Fedora-ness'.


author: Jay Fenlason <fenlason@redhat.com> - 1.1.1-2.1
changelog:
  - add the m_option macro to replace hardcoding -m{__isa_bits}
    and define it correctly for s390, where __isa_bits is 32, but
    the option to pass to gcc et all is -m31.
    Resolves: rhbz#553650 - mpich2 is failing to build


author: Jay Fenlason <fenlason@redhat.com> 1.1.1-2.2
changelog:
  - Move the .2 to the correct(?) place in the release field.
  - add -fPIC for s390, to close
    Resolves: rhbz#572901 File usr/lib/mpich2/lib/libfmpich.so.1.2 acquired TEXTREL relocations on s390, this suggests missing -fPIC


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Fix the attempted removal of /usr/bin/mp64-mpicc
    in the devel package to match upstream Fedora.
    Resolves: rhbz#587209 mpich2-devel.i686 and mpich2-devel.x86_64 cannot coexist


author: Jay Fenlason <fenlason@redhat.com> 1.1.1-2.3
changelog:
  - ExcludeArch PowerPC and S390{,x} because they no longer have
    the Java jdk required for building.
    Resolves: rhbz#613122 - no longer compiles on s390, etc


author: Doug Ledford <dledford@redhat.com> - 2.0-2
changelog:
  - Recreate lost spec file and patches from memory
  - Add dist tag to release
  - Turn off FORTIFY_SOURCE when building


author: Doug Ledford <dledford@redhat.com> - 3.0-1
changelog:
  - Update to latest upstream version
  - Compile three times against the three mpi stacks and make three packages
  - Resolves: bz451474


author: Jay Fenlason <fenlason@redhat.com> 3.2-3.el6
changelog:
  - Build using new mvapich, mvapich2, and openmpi.
    Add support for the -psm variants of the three mpi stacks.
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 3.2-5.el6
changelog:
  - Rebuild against newer infinipath-psm, openmpi, mvapich, mvapich2
    This removes the openmpi-psm subpackage, as openmpi now switches between
     psm and non- at runtime.
  - Correct version numbers for IMB and OSU benchmarkes in the description.
  - Update spec file to fix pkgwrangler warnings.
    Resolves: rhbz557803
    Related: rhbz739138


author: Jay Fenlason <fenlason@redhat.com> 3.2-7
changelog:
  - include BuildRequires: hwloc-devel from RHEL-7.0
  - Add win_free patch to close
    Resolves: rhbz734023


author: Jay Fenlason <fenlason@redhat.com> 3.2-10
changelog:
  - Add BuildRequires for libibmad-devel
  - Build against mpich, now that we have a mpi-3 version of it.
  - rebuild against new mvapich2
    R e s o l v e s: rhbz1011910, rhbz1011915


author: Jay Fenlason <fenlason@redhat.com> 3.2.4-1
changelog:
  - Backport from RHEL-7.0
  - Edit old changelog entries so commit can work.
  - Update to latest imb and osu versions, no longer using openfabrics.org
    tarball.
    Resolves: rhbz1093468


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.16.2-1
changelog:
  - Update to 2.16.2
  - Mark /etc/crond.d/mrtg file as "noreplace" to keep current setup
    during mrtg update
    Related: #391261
  - Fix mrtg complains of undefined subroutine AF_UNSPEC
    Resolves: #451783


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.16.2-7
changelog:
  - Fix kMG option with more number of values causes segmentation fault
    Resolves: #707188
  - Fix cfgmaker doesn't use ifHighSpeed on IBM FibreChannel switches
    Resolves: #836197


author: Doug Ledford <dledford@redhat.com> - 1.4-2.el6
changelog:
  - Update to tarball from URL instead of from OFED
  - Minor tweaks for pkgwrangler import
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.4-3.el6
changelog:
  - Don't include mtcr.h as we don't really expect anything to need Mellanox
    card register definitions except this program, and we already have the
    file.
  - Change to ExcludeArch instead of ExclusiveArch so we build in all the right
    places.
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.4-6
changelog:
  - Turns out that the previous tarball was full of cruft that upstream should
    have never let make its way into the tarball.  I had to clean the tarball
    out in order to get the package to build properly.
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 3.0-0.6.g6961daa.1
changelog:
  - Update to newer tarball that resolves licensing issues with the last
    tarball
  - Related: bz818183


author: Peter Hutterer <peter.hutterer@redhat.com> 1.1.2-3
changelog:
  - Drop xorg-x11-util-macros build requires, not needed anymore
  - Don't build on s390 (or ppc, if on RHEL)
  - Force autoreconf to avoid libtool errors


author: Adam Tkac <atkac redhat com> 4.0.9-1
changelog:
  - updated to 4.0.9
  - merged mtools-3.9.7-bigdisk.patch to config patch
  - mtools400-rh480112.patch merged to upstream


author: Dan Horák <dan[at]danny.cz> 1.3.12-5
changelog:
  - dropped debug output when tools are called with wrong number of arguments (#538403)
  - added patch to support DESTDIR for installing


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.19-4
changelog:
  - use PATH_MAX for buffers passed to realpath (#492861)
  - unconditionally inode-sort Maildir and MH folders
  - restore connection polling callback when closing SASL connection


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.19-5
changelog:
  - fix certificate verification (CVE-2009-1390)
  - add support for gnutls INSECURE_ALGORITHM error code (#499390)


author: Jan Pacner <jpacner@redhat.com> - 5:1.5.20-5.20091214hg736b6a
changelog:
  - Resolves: #1083524 (segmentation fault when sending an e-mail from a command
    line)
  - Resolves: #750929 (SIGSEGV Crash while parsing certificates file)
  - Resolves: #690409 (mutt crash; seg fault in mx_update_context)
  - Resolves: #674271 (SIGSEGV when browsing pop account)


author: Matej Muzila <mmuzila@redhat.com> 5:1.5.20-8.20091214hg736b6a
changelog:
  - Resolves #1196787 (System default CA bundle not set as default in compiled-in
    default or config)
  - Resolves #1212646 (mutt sends e-mail with broken "From" header, which has no
    host part)


author: Doug Ledford <dledford@redhat.com> - 1.1.0-0.2931.2
changelog:
  - Incorporate fixups to Requires(post) and Requires(preun) from openmpi
  - Fix up post/preun scripts to work like the scripts from openmpi11
  - Resolves: bz465448


author: Doug Ledford <dledford@redhat.com> - 1.1.0-0.3355.1.el5
changelog:
  - Update to final ofed 1.4.1 bits
  - Compile against non-XRC libibverbs
  - Related: bz506258, bz506097


author: Doug Ledford <dledford@redhat.com> - 1.2.0-0.3562.2.el6
changelog:
  - Forward port to the Fedora MPI packaging guidelines and build for
    Red Hat Enterprise Linux 6
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.2.0-0.3562.3.el6
changelog:
  - Fix an issue with usage of _cc_name_suffix that caused a broken define in
    our module file
  - Related: bz543948


author: Jay Fenlason <fenlason@redhat.com> 1.2.0-0.3563.rc1.1.el6
changelog:
  - Upgrade to rc1 from upstream
    Munge release value so it'll upgrade cleanly.
    Add -build patch and modify spec file so rc1 will build.
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.2.0-0.3563.rc1.2.el6
changelog:
  - Fix psm RPM macros so that we can build a -psm variant of mpitests
  - Remove the mandesc files that rpmdiff doesn't like.
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.2.0-0.3563.rc1.4.el6
changelog:
  - -psm-devel and -psm-static need to depend on the psm variants, not the
    base packages.
  - Fix up the build to not use .{non-,}psm directories
  - Fix up the -psm subpackage descriptions.
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.2.0-0.3563.rc1.5.el6
changelog:
  - Include psm config files only in the -psm packages.  Do not include
    non-psm config files in the -psm packages.
    Resolves: rhbz725864


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add Group: to -devel
  - Split into subpackages as required by packaging guidelines
  - cleanup BuildRequires
  - attempt to build on ppc
  - cleanup spec file
  - cleanup mvapich2.pc, still not correct, but closer
    Related: bz543948


author: Jay Fenlason <fenlason@redhat.com> 1.4-2.el6
changelog:
  - Add BuildRequires: python
  - Add BuildRequires: java
  - Remove the pkgconfig file entirely
    Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.4-3.el6
changelog:
  - Fix an issue with usage of _cc_name_suffix that caused a broken define in
    our module file
    Related: bz543948


author: Jay Fenlason <fenlason@redhat.com> 1.4-4.el6
changelog:
  - Move -devel requires to the -devel subpackage.
    Resolves: bz568450
  - Add defattr as required by packaging guidelines
    Related: bz555835


author: Jay Fenlason <fenlason@redhat.com> 1.6-1.el6
changelog:
  - New upstream release, with different build process, and without
    man pages, because we don't have the sowing package, and its
    licensing status is unclear (no licence description of any kind in
    the tarball).
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.6-2.el6
changelog:
  - Fix the psm RPM macros so that we can build a -psm variant of
    mpitests
  - remove the osu-micro-benchmarks, which are being installed with a
    bogus rpath, and which are included in mpitests
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.6-3.el6
changelog:
  - Change the requires on mvapich2-psm-devel to mvapich2-psm from mvapich2
    so that mpitests will build
  - clean up the build to not use .{non-}psm directories.
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.8-1
changelog:
  - New upstream version, with man pages again.
    This fixes the following bugs:
    Related: rhbz739138
    Resolves: rhbz613696
    Resolves: rhbz625620
    Resolves: rhbz735954
    Resolves: rhbz782263


author: Jay Fenlason <fenlason@redhat.com> 1.8-2
changelog:
  - Add BuildRequires on flex and bison
  - Add "export AR=ar" to allow builds on RHEL-7 to work.
    Resolves: rhbz822527


author: Jay Fenlason <fenlason@redhat.com> 1.8-3
changelog:
  - Move the module files to the (correct for RHEL-7) mpi/ directory.
  - Add MANPATH to the module files.


author: Jay Fenlason <fenlason@redhat.com> 2.0a-1
changelog:
  - Add Build Requires on autoconf, automake, libtool,
    perl-Digest-MD5, hwloc-devel, and libibmad-devel.
  - remove build requires on java
  - New upstream version, edited so it can pass a license audit.
    (RHEL7) R e s o l v e s: r h b z 1001718


author: Jay Fenlason <fenlason@redhat.com> 2.0rc1-1
changelog:
  - Upgrade to upstream 2.0rc1
  - Backport from RHEL-7 to RHEL-6
  - Include the -free patch (written by me) to prevent errors caused
    by calling the free macro rather than the free() function.
  - Fix the build process to work on RHEL-6, with its ancient
    auto*, libtool, etc.  This requires not rerunning autogen.sh
  - Resolves: rhbz1093454


author: David Walluck <dwalluck@redhat.com> 1:3.0.1-7.7
changelog:
  - own %{_libdir}/gcj/%{name}
  - add %{_javadocdir}/%{name} to file list
  - remove javadoc scriptlets
  - replace /usr/sbin with %{_sbindir}


author: Andrew Overholt <overholt@redhat.com> 1:3.0.1-9.11
changelog:
  - Remove gcj support
  - Add cleaning of buildroot to beginning of %install
  - Remove old unversioned Obsoletes/Provides
  - Remove touching of RPM_BUILD_ROOT in %prep
  - Fix Groups
  - Fix line endings in styles.css, README.txt, and LICENSE.txt
  - Add %doc files to main package
  - Fix mixed tabs and spaces


author: Tom Lane <tgl@redhat.com> 5.1.42-4
changelog:
  - Sync with current Fedora build, including:
  - Update to MySQL 5.1.42, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-42.html
  - Disable symbolic links by default in /etc/my.cnf
  Resolves: #553653
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines
  - Disable building the innodb plugin; it tickles assorted gcc bugs and
    doesn't seem entirely ready for prime time anyway.
  Resolves: #553632
  - Start mysqld_safe with --basedir=/usr, to avoid unwanted SELinux messages
    (see 547485)
  - Stop waiting during "service mysqld start" if mysqld_safe exits
  Resolves: #544095


author: Tom Lane <tgl@redhat.com> 5.1.42-7
changelog:
  - Add backported patch for CVE-2008-7247 (upstream bug 39277)
  Resolves: #549329
  - Use non-expired certificates for SSL testing (upstream bug 50702)


author: Tom Lane <tgl@redhat.com> 5.1.43-2
changelog:
  - Update to MySQL 5.1.43, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html
  Resolves: #565554
  - Remove mysql-cluster, which is no longer supported by upstream in this
    source distribution.  If we want it we'll need a separate SRPM for it.
  Resolves: #565210


author: Tom Lane <tgl@redhat.com> 5.1.44-2
changelog:
  - Update to MySQL 5.1.44, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-44.html
  Resolves: #565554
  - Remove mysql.info, which is not freely redistributable
  Related: #560181
  - Revert broken upstream fix for their bug 45058
  Related: #566547
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Resolves: #557711
  Resolves: #562749


author: Tom Lane <tgl@redhat.com> 5.1.47-1
changelog:
  - Update to MySQL 5.1.47, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-45.html
    including fixes for CVE-2010-1621, CVE-2010-1626,
    CVE-2010-1848, CVE-2010-1849, CVE-2010-1850
  Resolves: #590598
  - Create mysql group explicitly in pre-server script, to ensure correct GID


author: Tom Lane <tgl@redhat.com> 5.1.47-2
changelog:
  - Add back "partition" storage engine
  Resolves: #598585
  - Fix broken "federated" storage engine plugin
  Resolves: #587170
  - Read all certificates in SSL certificate files, to support chained certs
  Resolves: #598656


author: Tom Lane <tgl@redhat.com> 5.1.47-3
changelog:
  - Add -p "$mypidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #596008


author: Tom Lane <tgl@redhat.com> 5.1.47-4
changelog:
  - Add backported patch for CVE-2010-2008 (upstream bug 53804)
  Resolves: #614215
  - Add BuildRequires perl(Time::HiRes) ... seems to no longer be installed
    by just pulling in perl.


author: Tom Lane <tgl@redhat.com> 5.1.52-1.1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
    including numerous small security issues
  Resolves: #652553
  - Sync with current Fedora package; this includes:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig


author: Tom Lane <tgl@redhat.com> 5.1.52-1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
    including numerous small security issues
  Resolves: #652554
  - Sync with current Fedora package; this includes:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig


author: Tom Lane <tgl@redhat.com> 5.1.61-1.el6_2.1
changelog:
  - Update to 5.1.61, for assorted upstream bugfixes including
    numerous CVEs announced in January 2012
  Resolves: #787191


author: Tom Lane <tgl@redhat.com> 5.1.61-1
changelog:
  - Update to 5.1.61, for assorted upstream bugfixes including
    numerous CVEs announced in January 2012
  Resolves: #787192


author: Tom Lane <tgl@redhat.com> 5.1.66-1
changelog:
  - Update to 5.1.66, for assorted upstream bugfixes including
    CVEs announced in July and October 2012
  Resolves: #871813


author: Tom Lane <tgl@redhat.com> 5.1.67-1
changelog:
  - Update to 5.1.67, for assorted upstream bugfixes including
    CVEs announced in January 2013
  Resolves: #901380


author: Tom Lane <tgl@redhat.com> 5.1.66-1
changelog:
  - Update to 5.1.66, for assorted upstream bugfixes including
    CVEs announced in July and October 2012
  Resolves: #871814


author: Tom Lane <tgl@redhat.com> 5.1.67-1
changelog:
  - Update to 5.1.67, for assorted upstream bugfixes including
    CVEs announced in January 2013
  Resolves: #901381


author: Tom Lane <tgl@redhat.com> 5.1.69-1
changelog:
  - Update to 5.1.69, for assorted upstream bugfixes including
    CVEs announced in April 2013
  Resolves: #953084


author: Tom Lane <tgl@redhat.com> 5.1.69-1
changelog:
  - Update to 5.1.69, for assorted upstream bugfixes including
    CVEs announced in April 2013
  Resolves: #953085


author: Honza Horak <hhorak@redhat.com> 5.1.70-1
changelog:
  - Update to MySQL 5.1.70, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-70.html
    Resolves: #990796, #842052
  - Fix mysqldump failure against MySQL 5.0.x server due missing tables
    Resolves: #877557
  - Add logrotate script
    Resolves: #904061
  - Fix init script to not show failed on start even when server started
    Resolves: #884651


author: Honza Horak <hhorak@redhat.com> 5.1.71-1
changelog:
  - Update to MySQL 5.1.71, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-71.html
    Resolves: #990796


author: Jakub Dorňák <jdornak@redhat.com> - 5.1.73-1
changelog:
  - Update to MySQL 5.1.73, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-73.html
    (CVE-2014-0412, CVE-2014-0437, CVE-2013-5908, CVE-2014-0393,
    CVE-2014-0386, CVE-2014-0401, CVE-2014-0402)
    Resolves: #1055880


author: Honza Horak <hhorak@redhat.com> 5.1.73-2
changelog:
  - Make mysqld init script more robust and ignore existing but
    non-being-used unix socket file
    Resolves: #1058719


author: Jakub Dorňák <jdornak@redhat.com> - 5.1.73-1
changelog:
  - Update to MySQL 5.1.73, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-73.html
    (CVE-2014-0412, CVE-2014-0437, CVE-2013-5908, CVE-2014-0393,
    CVE-2014-0386, CVE-2014-0401, CVE-2014-0402)
    Resolves: #1055882


author: Honza Horak <hhorak@redhat.com> 5.1.73-2
changelog:
  - Make mysqld init script more robust and ignore existing but
    non-being-used unix socket file
    Resolves: #1037650


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Patch: mysql_events_2.result.patch
  -->  Scientific Linux is an Enterprise Linux, modify the script to know this
  - Added Source: mysql.ini
  -->  Config file for automated patch script


author: Milos Jakubicek <xjakub@fi.muni.cz> - 1:5.1.8-1
changelog:
  - Update to 5.1.8 (resolves BZ#480154) with jboss integration disabled.
  - Added BR: java-1.6.0-openjdk-devel, java-1.5.0-gcj-devel, jakarta-commons-logging
  - Minor spec file updates: %global instead of %define, tabs instead of spaces
  - Dropped unnecessary patch-build.xml and mysql-connector-java-noSunAppletSecurity.patch


author: Tom Lane <tgl@redhat.com> 1:5.1.12-2
changelog:
  - Update to 5.1.12
  Resolves: #591209
  - Note: assigned Release 2 to ensure this build is NVR-newer than the
    current EPEL5 build, as per above bug.


author: Tom Lane <tgl@redhat.com> 1:5.1.17-1
changelog:
  - Update to 5.1.17 for assorted bug fixes
  - Add patch to provide some stub functions for JDBC 4.1 compatibility
  Resolves: #816696


author: Tom Lane <tgl@redhat.com> 1:5.1.17-2
changelog:
  - Switch to noarch (non-GCJ) build so that we can BuildRequire JDK >= 1.6;
    the former build method has not worked since before RHEL6.0 was released,
    because java-1.6.0-openjdk is no longer shipped for all arches.
  Related: #816696


author: Tom Lane <tgl@redhat.com> 1:5.1.17-6
changelog:
  - Add explicit Obsoletes to get rid of old arch-specific packages,
    per discussions in bugs 821892 and 822206
  Related: #816696


author: Tom Lane <tgl@redhat.com> 5.1.5r1144-1
changelog:
  - Update to mysql-connector-odbc 5.1.5r1144, to go with MySQL 5.1.x.
    Note the library name has changed from libmyodbc3 to libmyodbc5.


author: Mathieu Bridon <bochecha@fedoraproject.org> - 1.2-2
changelog:
  - added comment explaining how the source is obtained (as it is modified from upstream)
  - temporary fix for RHBZ#490830 while not fixed upstream


author: Kamil Dudka <kdudka@redhat.com> - 2.0.9-1
changelog:
  - new upstream release
  - dropped patch no longer needed (possible change in behavior though negligible)
  - fixed broken HTML doc in FR locales (#523951)


author: Kamil Dudka <kdudka@redhat.com> - 2.0.9-4
changelog:
  - install a system-wide configuration file based on nanorc.sample
  - disable line wrapping by default (#528359)


author: Matthias Clasen <mclasen@redhat.com> - 2.28.4-14
changelog:
  - Remove space-saving hack that causes multilib problems
  - Explicitly require nautilus-extensions in nautilus-devel
  Resolves: #596188


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28.4-17
changelog:
  - Fix bookmark renaming from browser Places sidebar (#636881)
  - Refresh desktop location after xdg-dirs change (#661589)
  - Fix saving window geometry (#654091)
  - Prevent a crash when deleting files (#652607)
  - Prevent deadlock on recursive dbus sync calls (#666086)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28.4-19
changelog:
  - Fix segfault on startup when showing homedir as desktop (#755561)
  - Rearrange icons on desktop when screen size changes (#600260)
  - Fix free space display in Properties window (#772103)
  - Fall back to regular file rename when updating desktop file contents fails (#782467)


author: Carlos Soriano <csoriano@redhat.com> - 2.28.4-20
changelog:
  - Fix crashes accessing files over sftp (#1072272)
  - Fix crashes on folder removal in browser mode (#1026561)
  Resolves: #1072272 #1026561


author: Tomas Bzatek <tbzatek@redhat.com> - 0.17-4
changelog:
  - Require gnome-terminal to have at least one terminal installed (#716398)
  - Update japanese translation (#630236)
  - Fix terminal invocation parameters (#640496)


author: Petr Šabata <contyk@redhat.com> - 1.84-23
changelog:
  - Remove offensive language from some of the scripts (#1064755)
  - Accept HTTP/1.1 proxy responses (#1000773)


author: Ondrej Vasik <ovasik@redhat.com> - 4.2.4-51
changelog:
  - check malloc success (#473488)
  - fix few compiler warnings, free malloc memory before exit
  - new URL


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-16.20080301
changelog:
  - update to patch 20080301
  - provide libtermcap.so (#428898)
  - move all headers to /usr/include
  - move libncursesw out of /usr
  - make examples in documentation compilable (#436355)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.6-18.20080628
changelog:
  - update to patch 20080628
  - move mlterm and screen.* entries to -base
  - change kbs to ^? in rxvt and screen entries


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-19
changelog:
  - fixed exit code of snmp utilities when wrong argument to '-A' option
    is specified (#574061)
  - fixed BER parsing of incoming packets - siletnly discard the invalid ones
    according to RFC (#568651)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-21
changelog:
  - fixed hrFSTable and hrStorageTable to provide persistent table indexes
    according to RFS 2790 (#595325)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-22
changelog:
  - fixed value of ipIfStatsTable.Ip6ReasmReqds (#597265)
  - added missing include files from util_funcs directory (#604636)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-23
changelog:
  - fixed segfault when parsing snmpd.conf with disman entries (#607080)
  - fixed value of IP-MIB::ipv6InterfaceForwarding (#607074)
  - fixed output of snmptranslate tool when displaying ranges of UNSIGNED
    type (#606874)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-27.1
changelog:
  - fixed truncation of sysObjectID (#652223)
  - fixed assertions in calculating of statistics in IF-MIB (#652551)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-27.1
changelog:
  - fixed truncation of sysObjectID (#641113)
  - fixed assertions in calculating of statistics in IF-MIB (#621664)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-28
changelog:
  - fixed recompilation of the package on machine without IPv6 (#657835)
  - fixed SMUX getting stuck on big-endian platforms (#665053)
  - fixed OID comparsion in snmpwalk, now the output does not include
    objects outside requested subtree (#636890)
  - fixed IPv4 address creation in ipAddressTable (#616764)
  - added IPv6 address creation to ipAddressTable (#616336)
  - fixed value of ipAddressPrefixAutonomousFlag OID (#625262)
  - fixed ipv6IfTable - new interfaces were not added there (#627564)
  - extended BRIDGE-MIB implementation to cover RFC 4363 (#630157)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-31
changelog:
  * fixed BRIDGE-MIB implementation in /usr/bin/snmp-bridge-mib,
    now it supports embedded perl and answers GETNEXT requests correctly
    (#630157).


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-32
changelog:
  - fixed varbind parsing in python netsnmp module (#711481)
  - fixed session initialization in python netsnmp module (#710667)
  - fixed crash when getting out-of-memory in inetNetToMediaTable (#708947)
  - added xfs and jfs filesystem support to hrStorageTable (#707912)
  - fixed snmpd to purge zombies resulted from pass_persist process exit
    (#703682)
  - added a log message when snmpd detects two interfaces with the same
    IP address and thus having only one ipTable entry for both (#702171)
  - added new snmpd.conf options 'interface_fadeout' and
    'interface_replace_old' to controll snmpd behavior when more
    interfaces get the same name (#702165)
  - fixed snmptrapd leaking memory when processing traps in embedded perl
    (#678314)
  - fixed hrSystemDate timezone sign (#683680)
  - fixed snmp logging 'truncating integer value > 32 bits' for
    UCD-SNMP-MIB::systemStats (#681949)
  - fixed rare race condition in hrSWRunTable (#683563)
  - recompiled with relro for better security (#725657)
  - snmpd should not change request-id when sending multiple SMUX messages
    (#708370)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-38
changelog:
  - fixed snmpd crashing with many AgentX subagent (#749227)
  - fixed SNMPv2-MIB::sysObjectID value when "sysObjectID" config file
    option with long OID was used (#786931)
  - fixed value of BRIDGE-MIB::dot1dBasePortIfIndex.1 (#740172)
  - fixed parsing of "proxy" snmpd.conf option not to enable
    verbose logging by default (#746903)
  - added new "realStorageUnits" config file option to support
    disks > 16 TB in hrStorageTable (#741789)
  - added vxfs, reiserfs and ocfs2 filesystem support to hrStorageTable
    (#746903)
  - fixed snmpd sigsegv when embedded perl script registers one handler
    twice (#748907)
  - fixed setting of SNMP-TARGET-MIB::snmpTargetAddrRowStatus via
    SNMP-SET request on 64-bit platforms (#754275)
  - fixed crash when /var/lib/net-snmp/mib_indexes/ files have wrong
    SELinux context (#754971)
  - fixed memory leak when agentx subagent disconnects in the middle
    of request processing (#736580)
  - fixed slow (re-)loads of TCP-MIB::tcpConnectionTable (#789909)
  - removed 'error finding row index in _ifXTable_container_row_restore'
    error message (#788954)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-43
changelog:
  - fixed value of UCD-SNMP-MIB::extCommand to contain full command
    line (#842279)
  - fixed rpath to perl.so (#848319)
  - added support for port numbers in 'clientaddr' configuration
    option (#833013)
  - fixed rare snmptrapd crash on SIGHTERM handling when embedded perl
    is used (#824402)
  - fixed engineID of outgoing traps if 'trapsess -e <engineID>' is used in
    snmpd.conf (#800671)
  - updated documentation of '-c' option of snmptrapd (#784502)
  - fixed endless loop when SIGTEM arrives in middle of internal query
    processing (#851637)
  - fixed UCD-DISKIO-MIB::diskIOLA values (#848155)
  - removed various error log messages related to counte64 expansions
    (#846906)
  - removed various error log messages when IPv6 is disabled (#845157)
  - added support of cvfs filesystem in hrStorageTable (#846532)
  - fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
    which could result in some entries missing in the table (#846436)
  - added support of simfs filesystem in hrStorageTable (#861152)
  - fixed responding to requests on a multihost machine (#825889)


author: <jsafrane@redhat.com> - 1:5.5-44.4
changelog:
  - fixed snmpd crashing in the middle of agentx request processing when
    a subagent disconnects (#955511)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-45
changelog:
  - fixed potential memory leak on realloc failure when processing 'extend'
    option (#893119)
  - added precise enumeration of configuration files searched to
    snmp_config(5) man page (#907571)
  - set permissions of snmpd.conf and snmptrapd conf to 0600 (#919239)
  - fixed kernel threads in hrSWRunTable (#919952)
  - fixed various error codes in Python module (#955771)
  - fixed snmpd crashing in the middle of agentx request processing when
    a subagent disconnects (#955511)
  - allow 'includeFile' and 'includeDir' options in configuration files
    (#917816)
  - fixed netlink message size (#927474)
  - fixed IF-MIB::ifSpeedHi on systems with non-standard interface speeds
    (#947973)
  - fixed BRIDGE-MIB::dot1dBasePortTable not to include the bridge itself
    as a port (#960568)
  - fixed snmpd segfault when 'agentaddress' configuration options is used
    and too many SIGHUP signals are received (#968898)
  - updated UCD-SNMP-MIB::dskTable to dynamically add/remove disks
    if 'includeAllDisks' is specified in snmpd.conf (#922691)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-46
changelog:
  - fixed parsing of bulk responses (#983116)
  - added support of vzfs filesystem in hrStorageTable (#989498)
  - fixed endless loop when parsing sendmail configuration file with
    queue groups (#991213)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-49
changelog:
  - fixed snmp daemons and utilities crashing in FIPS mode (#1001830)
  - added support of btrfs filesystem in hrStorageTable (#1006706)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-49.1
changelog:
  - added 'diskio' option to snmpd.conf, it's possible to monitor only selected
    devices in diskIOTable (#990674)
  - fixed CVE-2014-2284: denial of service flaw in Linux implementation of
    ICMP-MIB (#1073222)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-49.2
changelog:
  - added cache to hrSWRunTable to provide consistent results (#1085315)
  - skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1086683)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-50
changelog:
  - added 'diskio' option to snmpd.conf, it's possible to monitor only selected
    devices in diskIOTable (#990674)
  - fixed CVE-2014-2284: denial of service flaw in Linux implementation of
    ICMP-MIB (#1073223)
  - added cache to hrSWRunTable to provide consistent results (#1007634)
  - skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1073237)
  - fixed snmptrapd crashing on forwarding SNMPv3 traps (#1131844)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-50
changelog:
  - added 'diskio' option to snmpd.conf, it's possible to monitor only selected
    devices in diskIOTable (#990674)
  - fixed CVE-2014-2284: denial of service flaw in Linux implementation of
    ICMP-MIB (#1073223)
  - added cache to hrSWRunTable to provide consistent results (#1007634)
  - skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1073237)
  - fixed snmptrapd crashing on forwarding SNMPv3 traps (#1131844)
  - fixed HOST-RESOURCES-MIB::hrSystemProcesses (#1134335)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-51
changelog:
  - added faster caching into IP-MIB::ipNetToMediaTable (#789500)
  - fixed compilation with "-Werror=format-security" (#1181994)
  - added clear error message when port specified in 'clientaddrr' config
    option cannot be bound (#886468)
  - fixed error check in IP-MIB::ipAddressTable (#1012430)
  - fixed agentx client crash on failed response (#1023570)
  - fixed dashes in net-snmp-config.h (#1034441)
  - fixed crash on monitor trigger (#1050970)
  - fixed 'netsnmp_assert 1 == new_val->high failed' message in system log
    (#1065210)
  - fixed parsing of 64bit counters from SMUX subagents (#1069046)
  - Fixed HOST-RESOURCES-MIB::hrProcessorTable on machines with >100 CPUs
    (#1070075)
  - fixed net-snmp-create-v3-user to have the same content on 32 and 64bit
    installations (#1073544)
  - fixed IPADDRESS value length in Python bindings (#1100099)
  - fixed hrStorageTable to contain 31 bits integers (#1104293)
  - fixed links to developer man pages (#1119567)
  - fixed storageUseNFS functionality in hrStorageTable (#1125793)
  - fixed netsnmp_set Python bindings call truncating at the first '\000'
    character (#1126914)
  - fixed log level of SMUX messages (#1140234)
  - use python/README to net-snmp-python subpackage (#1157373)
  - fixed forwarding of traps with RequestID=0 in snmptrapd (#1146948)
  - fixed typos in NET-SNMP-PASS-MIB and SMUX-MIB (#1162040)
  - fixed close() overhead of extend commands (#1188295)
  - fixed lmSensorsTable not reporting sensors with duplicate names (#967871)
  - fixed hrDeviceTable with interfaces with large ifIndex (#1195547)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-52
changelog:
  - Fixed snmptrapd crash when '-OQ' parameter is used and invalid trap is
    received (#CVE-2014-3565)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-55.el6
changelog:
  - Fixed 'clientaddr' option for UDPv6 client messages (#1279501)
  - Increased maximum size of AgentX packets (#1271196).
  - Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
    (#1250023).
  - Fixed client utilities reporting 'read_config_store open failure on
    /var/lib/net-snmp/snmpapp.conf' (#1246568)
  - Fixed typos in NET-SNMP-AGENT-MIB.txt (#1241865)
  - Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1227640)
  - Restored message about duplicate IP address (#1227374)
  - Fixed fd leak in sctp statistics (#1291054)


author: Josef Ridky <jridky@redhat.com> - 1:5.5-57.el6_8.1
changelog:
  - Resolves: #1363606 - An SNMPv3 request with a small max message size can lead to SNMPv1/2c bulk requests timing out


author: Josef Ridky <jridky@redhat.com> - 1:5.5-58.el6
changelog:
  - Resolves: #1315481 - An SNMPv3 request with a small max message size can lead to SNMPv1/2c bulk requests timing out


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-93
changelog:
  - scanf format length fix (non exploitable?) from Fabian Hugelshofer <hugelshofer2006@gmx.ch>
  - URL tag changed to http://net-tools.berlios.de/


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-95
changelog:
  - netstat - avoid name resolution for listening or established sockets (-l) by return fast. 
  - netstat - --continuous should flush stdout
  - added missing man pages (iptunnel, ipmaddr, netplug, netplug.d, netplugd.conf)
  - added note about obsolete commands to existing man pages 
  - let the user know that ifconfig can correctly show only first 8 bytes of Infiniband hw address


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-96
changelog:
  - netplug moved to separate package
  - #319981 and #322901 - minor man pages changes
  - applied changes from berlios cvs, which fix: Berlios #16232, Gentoo #283759 and polish Makefile and slattach


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-97
changelog:
  - Make "hostname -s" display host name cut at the first dot (no
    matter if the host name resolves or not) (bug #531702)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-99
changelog:
  - return defining of BuildRoot even it's no longer necessary
    (https://fedoraproject.org/wiki/Packaging:Guidelines#BuildRoot_tag)
    to silent rpmlint false warning


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-102
changelog:
  - fixed statistics.c to use unsigned long long (instead of int) to handle 64 bit integers (Bug #580054)
  - fixed typo in statistics.c
  - interface slip: cast keepalive/outfill to unsigned long to fix warnings on 64bit hosts
  - interface: fix IPv6 parsing of interfaces with large indexes (> 255)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-103
changelog:
  - improved statistics-doubleword.patch (Bug #580054)
  - improved netstat(8) man page (#614931)
  - HFI support (#633506)
  - fixed memory leak in netstat when run with -c option (#634539)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-105
changelog:
  - Fix mii-tool/mii-diag/ether-wake to not default to eth0 because
    since RHEL-6.1 network devices can have arbitrary names (#682368)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-106
changelog:
  - Improve route(8) man page saying that 'route mss' actually sets MTU (#680837)
  - plipconfig man page and usage output fixes (#694766)
  - Add -A,--all-fqdns and -I,--all-ip-addresses options to hostname (#705110)
  - Use ?_rawbuild macro required for Coverity to scan defects
    in downstream patches separately (#708538)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-108
changelog:
  - patch netstat to separate basename of -p only if it is absolute
    path (in order to make argv[0]="sshd pty/0" display as sshd, and not as /0).
    (#725348)


author: Laine Stump <laine@redhat.com> - 0.1.6-2
changelog:
  - make miimon/arpmon in bond definitions optional
  - Resolves: rhbz#585108
  - properly deal with initializing a 0 length /etc/sysconfig/iptables file
  - Resolves: rhbz#582905


author: Laine Stump <laine@redhat.com> - 0.1.6-4
changelog:
  - install missing sysconfig.aug file
  - Resolves: rhbz#613886
  - Don't delete the physical interface config when defining a vlan
  - Resolves: rhbz#585112


author: Laine Stump <laine@redhat.com> - 0.1.7-1
changelog:
  - rebase to netcf-0.1.7
    - Resolves: rhbz#651032
    - remove all iptables manipulation
    - Resolves: rhbz#633346
    - Resolves: rhbz#629206


author: Laine Stump <laine@redhat.com> - 0.1.8-1
changelog:
  - rebase to netcf-0.1.8
    - resolves rhbz#616060
    - show ifup output in relevant error message
    - resolves rhbz#662057
    - pkgconfig file should not list augeas, libxml or libxslt
    - resolves rhbz#681078
    - Need to input 'quit' twice to quit ncftool after an erroneous command
    - resolves rhbz#703318
    - %desc field in specfile has a typo
    - resolves rhbz#705061
    - rebase netcf for RHEL6.2
    - resolves rhbz#708476
    - RFE: transaction-oriented API for handling host interfaces


author: Laine Stump <laine@redhat.com> - 0.1.9-1
changelog:
  - rebase to netcf-0.1.9
    - resolves rhbz#616060
    - always add <bridge> element to bridge, even if there is no physdev present
    - resolves rhbz#713180
    - don't log error if interface isn't found in kernel during status report
    - resolves rhbz#713286
    - update gnulib


author: Laine Stump <laine@redhat.com> - 0.1.9-1
changelog:
  - resolves rhbz#728184
    - eliminate potential use of uninitialized index/pointer in add_bridge_info
    - resolves rhbz#736920
    - resolves rhbz#739505
    - fix missing vlan/bond/ethernet info in dumpxml --live


author: Laine Stump <laine@redhat.com> - 0.1.9-3
changelog:
  - resolves rhbz#886862
    - libnl addr and link caches are not thread-safe, leading to
      libvirtd crashes


author: Laine Stump <laine@redhat.com> - 0.1.9-4
changelog:
  - resolves rhbz#844578
    - check IFF_RUNNING before considering and interface "active"
    - resolves rhbz#848722
    - fix ipcalc_netmask


author: Laine Stump <laine@redhat.com> - 0.2.4-1
changelog:
  - rebase to netcf-0.2.4
   - resolves rhbz#851748
   - avoid use of uninitialized data when getting mac address
     resolves rhbz#1052156
   - eliminate duplicate quotes in bonding options
   - resolves rhbz#879055
   - wait for IFF_UP and IFF_RUNNING after calling ifup
   - don't require IFF_RUNNING for bridge devices
   - avoid memory leak in debian when listing interfaces
   - limit interface names to IFNAMSIZ-1 characters in length
   - support systemd for netcf-transaction


author: Laine Stump <laine@redhat.com> - 0.2.4-2
changelog:
  - resolves rhbz#1113978
   - Fix name of DHCPV6C variable in ifcfg files
   - resolves rhbz#1116314
   - Fix netmask for prefix == 32
   - apply patches to source with git rather than patch


author: Laine Stump <laine@redhat.com> - 0.2.4-3
changelog:
  - resolves rhbz#1208894
   - Remove extraneous single quotes from IPV6ADDR_SECONDARIES
   - resolves rhbz#1208897
   - Bad parsing of network-scripts/ifcfg-xxxx files
   - resolves rhbz#1165966
   - resolves CVE-2014-8119
   - augeas path expression injection via interface name


author: Peter Vrabec <pvrabec@redhat.com> - 0.19-6
changelog:
  - make initscript LSB compliant
  - show version of netlabelctl and libnetlabel in help
  - fixing return codes
    Resolves: #537053 #602577 #602291


author: Jindrich Novy <jnovy@redhat.com> 10.47.05-5
changelog:
  - remove obsolete pgmtopbm and pnmcomp, symlink them to the new
    compatible variants
  - fix ppmfade -h, --help options
  - add missing man pages
  - pnmmargin won't create leftovers in /tmp
  - add Requires: ghostscript
  - link against -lz


author: Jindrich Novy <jnovy@redhat.com> 10.47.05-6
changelog:
  - pgmtopbm should generate PBM, not PAM file
  - forwardport pnmmontage from 10.35 to make it work
  - fix pamstretch-gen


author: Jindrich Novy <jnovy@redhat.com> 10.47.05-9
changelog:
  - fix cmuwtopbm so that magic bytes test actually works
  - fix pamtojpeg2k (don't close stdout twice)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.8-1
changelog:
  - enable slang utf8 mode (#425992)
  - support --disable-nls option (patch by Natanael Copa)
  - redraw screen when using entry in euc encodings


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.9-1
changelog:
  - handle component destruction (patch by Richard W.M. Jones)
  - fix newtWinEntry definition
  - don't use uninitialized values in newtWinMenu
  - remove workarounds for old bug in SLsmg_write_nstring
  - improve SIGWINCH handling in form
  - don't abort from whiptail gauge on SIGWINCH
  - redisplay also last line
  - update Polish translation (Piotr Drąg)
  - update URL and Source tag


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.10-1
changelog:
  - improve --noitem description (#456305)
  - add setHeight to Textbox class
  - fix fixedheight forms
  - free keymap in newtFinished()
  - fix memory leak in textbox
  - fix valgrind error in checkboxtree
  - don't crash when running empty form
  - don't crash or hang when form has no focusable elements
  - before checkboxtree drawing return first item in GetCurrent()
  - redraw textbox in SetText()
  - add setColor description to SnackScreen docstring (Greg Swift)
  - make sure Widget isn't used directly (Greg Swift) (#452920)
  - add Serbian translations (Miloš Komarčević)
  - add Balochi translation (Mostafa Daneshvar)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.11-1
changelog:
  - fix buffer overflow in textbox when reflowing (#523955, CVE-2009-2905)
  - use full textbox width when reflowing and allow minimal width 1
  - fix writing lines longer than width in textbox
  - don't use va_list in newtvwindow more than once (#523696)
  - bind \E[Z to back-tab in built-in keymap (#468046)
  - terminate string after reading file in whiptail
  - add newtRadioSetCurrent function (Thomas Jarosch)
  - add pkgconfig support (Thomas Jarosch)
  - add Malay, Malayalam, Assamese, Gujarati, Bengali India, Kannada, Telugu
    translations
  - include tutorial in txt format
  - include debian patches
    - fix crash in textbox SetText when topLines != 0
    - don't link modules with libraries already linked with libnewt
    - add Asturian and Marathi translations


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.11-3
changelog:
  - add support for changing colors in individual labels, scrollbars, entries,
    textboxes and scales, add custom colorsets (#707704)


author: Soumya Koduri <skoduri@redhat.com> 2.2.0-5
changelog:
  - [Common_SAL] Fix an issue with adjusting lock ranges
  - [FSAL_GLUSTER] Include O_EXCL flag while creating a file
  - [FSAL_GLUSTER] Bail out incase of larger lock ranges


author: Soumya Koduri <skoduri@redhat.com> 2.2.0-6
changelog:
  - [NFS-Ganesha] Do not let systemd restart ganesha on abort
  - [NFS-Ganesha] Make it possible to disable FSAL_NULL during build
  - [FSAL_GLUSTER] Enable subdir mount for symlinks


author: Soumya Koduri <skoduri@redhat.com> 2.2.0-10
changelog:
  - MainNFSD: Cleanup RPCs before do_shutdown() (#1233533)
  - [FSAL_GLUSTER]: Fix error handling in ACL APIs (#1242148)
  - [FSAL_GLUSTER]: Remove earlier ACL implementation (#1251477)
  - [FSAL_GLUSTER]: Cleanup ACL code (#1251471)
  - [FSAL_GLUSTER]: Display Deny ACE entries (#1238561)


author: Soumya Koduri <skoduri@redhat.com> 2.2.0-11
changelog:
  - [FSAL_GLUSTER] Add missed check during backport (#1276348)
  - [FSAL_GLUSTER] Populate Allow ACL entries accordingly (#1277886)
  - MainNFSD: Rightly use grace_period option for grace (#1276683)
  - [FSAL_GLUSTER] Fix uninitialized variable (#1277886)
  - use cmake macro to set correct compile flags (#1244792)
    by Niels de Vos <ndevos@redhat.com>


author: Soumya Koduri <skoduri@redhat.com> 2.2.0-12
changelog:
  - MainNFSD: Unref export entry if pNFS DS is enabled (#1286244)
  - [FSAL_GLUSTER] Handle ENOENT properly in getattrs (#1289483)


author: Steve Dickson <steved@redhat.com> 1.2.2-3
changelog:
  - Allow mountd to not listen for RPC calls when v2/v3 disabled (bz 538922)
  - Added portmap to init script dependencies (bz 583007)
  - Added in the mount.nfs4 and umount.nfs4 man pages (bz 528951)
  - Did some initscripts improvement (bz 596095)
  - Added error message for an invaild mount option value (bz 588886)
  - Added error message for an invaild proto option value (bz 588879)


author: Steve Dickson <steved@redhat.com> 1.2.2-5
changelog:
  - Removed the inconsistent default anonuid/anongid values. (bz 566888)
  - Created the rpcuser group (bz 594206)


author: Steve Dickson <steved@redhat.com> 1.2.3-6
changelog:
  - Added support for AD style kerberos to rpc.gssd (bz 671474)
  - Disabled the installing of the nfsidmap command


author: Steve Dickson <steved@redhat.com> 1.2.3-8
changelog:
  - initscripts: just try to mount rpc_pipefs always (bz 692702) 
  - Rely on crypto module autoloading in init scripts
  - svcgssd: Document "-n" for svcgssd (bz 697359)
  - mount.nfs: anticipate RLIMIT_FSIZE (bz 697981)
  - exportfs manpage: Ipv6 update (bz 715078)
  - mountd: Stop segfault in mtab code (bz 723438)
  - exportfs: wilcards in exports can lead to unintended mounts (bz 715391)
  - umount: allow spaces in unmount paths (bz 702273)
  - specfile: reordered how libgssglue is linked in (bz 720479)


author: Steve Dickson <steved@redhat.com> 1.2.3-9
changelog:
  - umount.nfs: Got IPV6 unmounts working again (bz 732673)
  - mountd: return multiple hosts exporting the same directory (bz 726112) 
  - mount: Better error message for invalid version (bz 723780)


author: Steve Dickson <steved@redhat.com> 1.2.3-15
changelog:
  - mout.nfs: Don't roll back to IPv4 whe IPv6 fails (bz 744657)
  - rpcdebug: Added pNFS and FSCache debugging (bz 747400)


author: Steve Dickson <steved@redhat.com> 1.2.3-17
changelog:
  - Used correct locking file in nfs.init script (bz 772543)
  - Create a locking file for rpc.rquotad (bz 766472)
  - Normalized umount paths (bz 758000)
  - Fixed parsing error in nfsmount.conf code (bz 754666)


author: Steve Dickson <steved@redhat.com> 1.2.3-18
changelog:
  - Fixed nfs initscript to handle reloads correctly (bz 784022)
  - Add support for umlauts in group names in idmapper (bz 772619)
  - Stoppped racing exportfs in clusters (bz 800335)


author: Steve Dickson <steved@redhat.com> 1.2.3-19
changelog:
  - Fixed decode group names with spaces in idmapd (bz 787970)
  - Remove two unused gss commands (bz 738932)


author: Steve Dickson <steved@redhat.com> 1.2.3-22
changelog:
  - NFS initscript needs to do a rpcidmapd condrestart not a condstart (bz 809201)
  - Allow v2|v3 background mounts to retry when server is down (bz 740472) 
  - Fix the umounting of symbolic links (bz 801085)


author: Steve Dickson <steved@redhat.com> 1.2.3-26
changelog:
  - Fixed typo in the checking of nfsnobody (bz 816149)
  - Fixed the exporting of subdirectories (bz 816162)


author: Steve Dickson <steved@redhat.com> 1.2.3-29
changelog:
  - V4 mounts hang on exports to netgroups (bz 815673)
  - Strip the '[]' off of ipv6 addresses (bz 811882)
  - Removed a use_ipaddr race in mountd (bz 797209)


author: Steve Dickson <steved@redhat.com> 1.2.3-30
changelog:
  - gssd: Don't link with libgssapi_krb5 (bz 784909)
  - Fix referrals that use IPv6 addresses (bz 820737)
  - Add -l option to gssd to force legacy behaviour (bz 802469)
  - Add support to svcgssd to limit the negotiated enctypes (bz 802469)
  - Changed nfs.init to allow umounts to happen cleanly during 
    system shutdown (bz 856923)


author: Steve Dickson <steved@redhat.com> 1.2.3-34
changelog:
  - Update the default encryption types in svcgssd (bz 877636)
  - Added the -v 4.1 mount option (bz 877052)


author: Steve Dickson <steved@redhat.com> 1.2.3-35
changelog:
  - Fixed a regession in mountd that cause a localhost mounts to hang (bz 797209)
  - Make sure mount tries all the addresses returned by getaddrinfo (bz 876847)


author: Steve Dickson <steved@redhat.com> 1.2.3-38
changelog:
  - Fixed typo in nfsstat's output (bz 890146)
  - Fixed retrans defaults in nfs(5) man page (bz 952560)
  - Clean rpc.idmapd messages when nfsd starts (bz 892235)
  - Fixed sm-notify to work with localhost (bz 950324)
  - Fixed pNFS stats (bz 962602)
  - Remove no_acl from exports(5) man page (bz 991302)
  - Improve nfsmount.conf configuration parsing (bz 889272)
  - Fixed sm-notify -v (bz 995484)


author: Steve Dickson <steved@redhat.com> 1.2.3-39_5.4
changelog:
  - exportfs: added ipv6 bracket support (bz 1133837)
  - exportfs: disable READERPLUS for v3  (bz 1133835)


author: Steve Dickson <steved@redhat.com> 1.2.3-45
changelog:
  - Smothed out upgrads from rhel6 to rhel7 (bz 1086625)
  - rpc.statd: Bind downcall socket to loopback address (bz 1018358)
  - nfsiostat: periodically flush stdout (bz 1007195)
  - Fixed a buffer overflow in exportfs (bz 1008381)


author: Steve Dickson <steved@redhat.com> 1.2.3-47
changelog:
  - Stop Treat IP addresses a FQDN rather than SUBNETs. (bz 1098592)
  - Removed the local_lock not supported line in man page (bz 1017477)


author: Steve Dickson <steved@redhat.com> 1.2.3-50
changelog:
  - gssd: Drop full domain when constructing the Ad hostname (bz 1067423)
  - Explained nfsiostat output in man page (bz 869684)
  - mountd.man: Added missing arguments in man page (bz 1003555)


author: Steve Dickson <steved@redhat.com> 1.2.3-53
changelog:
  - gssd: Error out when rpc_pipefs directory is empty (bz 1116698)
  - exportfs: Removed a warning from exportfs.c (bz 1133562)
  - nfsiostat: Corrected the cache hits (bz 1066314)
  - mountd: optimize libblkid usage (bz 1113204)


author: Steve Dickson <steved@redhat.com> 1.2.3-55
changelog:
  - Fixed typo in exports manpage  (bz 1152554)
  - mountd need to ignore vroots on v3 mounts (bz 1164317)
  - Added support for /etc/exports.d (bz 1123099)
  - Print error message on remount failures (bz 1026446)
  - Update mountstats to upstream version (bz 1172827)


author: Steve Dickson <steved@redhat.com> 1.2.3-56
changelog:
  - Fixed return values in mountstats (bz 1172827)
  - mountstats: Normalize the mountpoints passed on the command line (bz 1007281)


author: Steve Dickson <steved@redhat.com> 1.2.3-58
changelog:
  - Fixed pseudo exports without security flavors  (bz 1187277)
  - Made the posttrans conditional (bz 1078829)


author: Steve Dickson <steved@redhat.com> 1.2.3-60
changelog:
  - Remove SPKM-3 support from gssd (bz 1187277)
  - Enable all auth flavors on pseudofs exports (bz 1187277)


author: Steve Dickson <steved@redhat.com> 1.2.3-1
changelog:
  - Initscripts changes needed to support NFS over RDMA (bz 631012)
  - Initscripts changes needed for NFS to shutdown cleanly (bz 636513)
  - Initscripts changes needed for rpcbind to be running 
    when nfs is started (bz 641291)


author: Steve Dickson <steved@redhat.com> 1.2.3-65
changelog:
  - nfsidmap: make sure give arguments are valid (bz 1230600)
  - nfsidmap: Display the effective NFSv4 domain name (bz 948680)
  - gssd: allow gssd and svcgssd to set the libtirpc debug level (bz 1273161)
  - gssd: select non-conventional principal (bz 1268031)
  - gssd:  Don't assume the machine account will be in uppercase (bz 1273166)
  - sm-notify: delete files in sm.bak after a NOTIFY reply (bz 1278921)


author: Steve Dickson <steved@redhat.com> 1.2.3-66
changelog:
  - svc_create: Make sure errors are logged (bz 1156647)
  - gssd: suppress error message if rpc_pipefs dir disappears (bz 1220156)
  - gssd: set $HOME to prevent recursion (bz 1223661)
  - statd: Update existing record if we receive SM_MON... (bz 1280024)
  - mountstats.man: fixed typo in man page (bz 1263968)


author: Steve Dickson <steved@redhat.com> 1.2.3-67
changelog:
  - mount.nfs: Fix fallback from tcp to udp (bz 1287894)
  - exportfs: escape path for function test_export (bz 735696)
  - nfs-utils.spec: No verification on runtime configuration files (bz 1118176)
  - idmapd: added usage statement (bz 1001439)
  - mountd: fix netgroup lookup for short hostnames (bz 1231998)
  - mountd: fix bug affecting exports of dirs with 64bit inode number (bz 994564)


author: Steve Dickson <steved@redhat.com> 1.2.3-71
changelog:
  - rpc.mountd: set libtirpc nonblocking mode to avoid DO (bz 1301581)
  - nfsidmap: Clean up other exit status cases (bz 1313603)
  - gssd: Fix inner-loop variable reuse (bz 1313090)
  - mount.nfs manpage: Add nfsmount.conf (bz 1302981)
  - nfs.init: Set exit code on restarts (bz 1205055)


author: Steve Dickson <steved@redhat.com> 1.2.3-73
changelog:
  - mountd: fix is_subdirectory to understand '/' (bz 1331207)
  - mount.nfs: Fix for the bug in v1.2.4 that breaks mount.nfs (bz 1208385)
  - mount.nfs: Removed supported flag from usage string (bz 1000990)
  - mountd.man: Update to change -P option as an alias for -p (bz 1037926)
  - exportfs: Deal with path's trailing "/" in unexportfs_parsed() (bz 1276538)
  - mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1352856)


author: Steve Dickson <steved@redhat.com> 1.1.5-2
changelog:
  - Updated to latest upstream release: libnfsidmap-0.24-rc1 (bz 650970)
  - Reset default values in /etc/idmap.conf (bz 650997)
  - Remove some warnings in the RPMdiff run (bz 594279)


author: Steve Dickson <steved@redhat.com> - 0.3.1-1.1
changelog:
  - Updated to latest upstream version 0.3.1 which eliminated the 
    need for the patches introduced in the previous commit.


author: Steve Dickson <steved@redhat.com> - 0.3.3-8
changelog:
  - Allow spaces in principal names (bz 1252265)
  - nfs4_setfacl.c: Fix fd leak in edit_ACL() (bz 662726)


author: Matthias Clasen <mclasen@redhat.com> - 0.4.1-1.20090923.3
changelog:
  - Fix issues with the multi-monitor support
  - Make screensaver check work
  - Use gvfs-open instead of gnome-open


author: John Dennis <jdennis@redhat.com> - 0.1.1-1
changelog:
  - upgrade to current upstream
  - no longer remove package config file (notify-python.pc), resolves bug #427001


author: John Dennis <jdennis@redhat.com> - 0.1.1-10
changelog:
  - spec file clean-ups reported during RHEL-6 import review
    Related: #555835
    replace define with global
    remove URL tag, there is no project URL, it had been pointing to a page with package specification
    remove unnecessary use of CFLAGS
    export PYTHON environment variable pointing to interpreter
    install COPYING AUTHORS NEWS README ChangeLog into docdir


author: Elio Maldonado <emaldona@redhat.com> - 4.9.5-3
changelog:
  - Bump the release tag so it's higher than the one for rhel-6.4.z
  - Resolves: rhbz#919180 - Rebase to nspr-4.9.5


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-1
changelog:
  - Update Version to 4.10.0 to prevent Mozilla apps update problems as
  - reported and fixed on https://bugzilla.redhat.com/show_bug.cgi?id=981166
  - Resolves: rhbz#1002643 - Rebase RHEL 6 to NSPR 4.10 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Rebase to nspr-4.10.2
  - Resolves: rhbz#1032485 - CVE-2013-5607 (MFSA 2013-103) Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Rebase to nspr-4.10.2
  - Resolves: rhbz#1032488 - CVE-2013-5607 (MFSA 2013-103) Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.6-2
changelog:
  - Rebase to nspr-4.10.8
  - Resolves: Bug 1200920 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269360 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269361 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption


author: Elio Maldonado <emaldona@redhat.com> - 4.11.0-1
changelog:
  - Rebase to NSPR 4.11
  - Resolves: Bug 1297891 - Rebase RHEL 6.8 to NSPR 4.11 in preparation for Firefox 45


author: Elio Maldonado <emaldona@redhat.com> - 4.9.2-0.1
changelog:
  - Retagging to ensure n-v-r is lower than the one for rhel-6.4
  - Resolves: rhbz#891661 - [RFE] Rebase nspr to 4.9.2 due to Firefox 17 ESR


author: Elio Maldonado <emaldona@redhat.com> - 4.9.5-2
changelog:
  - Update to NSPR_4_9_5_RTM
  - Resolves: rhbz#927186 - Rebase to nspr-4.9.5
  - Add upstream URL for an existing patch per packaging guidelines


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-7
changelog:
  - Update expired PayPayEE.cert test certificate
  - Conditionalize some database tests on user not being root


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-5
changelog:
  - Appying the changes in previous log
  - Changing some BuildRequires to >= as well
  - Temporarily disabling all tests for faster builds


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-2
changelog:
  - Add suppport for pkcs8 formatted keys in the pem module
  - Add verify(not md5 size mtime) to configuration files attributes
  - Prevent nss-sysinit disabling on package upgrade
  - Create pkcs11.txt with correct permissions regardless of current umask
  - Add option to setup-nsssysinit.sh to report nss-sysinit status
  - Update test certificate which had expired


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-2
changelog:
  - Prefer user database ca cert trust settings system's ones
  - Swap internal key slot on fips mode switches


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-3
changelog:
  - Add requires for pkcs11-devel on nss-softokn-freebl devel
  - Run the test suites in check section per packaging guidelines


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-1
changelog:
  - Resolves: Bug 744070 - Update to 3.13.1
  - nss should protect against being called before nss_Init [784674]
  - CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST) [784490]


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-4
changelog:
  - Add two needed patches
  - Resolves: rhbz#783315 - Need nss workaround for freebl bug that causes openswan to drop connections
  - Resolves: rhbz#747387 - Unable to contact LDAP Server during winsync


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-1
changelog:
  - Update to 3.13.3
  - Resolves: rhbz#798539 - Distrust MITM subCAs issued by TrustWave
  - Remove builtins-nssckbi_1_88_rtm.patch which the rebase obsoletes


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Resolves: rhbz#768669 - PEM unregistered callback causes SIGSEGV


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-3
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Use completed patch per code review


author: Elio Maldonado <emaldona@redhat.com> - 3.13.6-1
changelog:
  - Update to NSS_3_13_6_RTM
  - Resolves: rhbz#891663 - Update to 3.13.5 for mozilla 10.0.6
  - Resolves: rhbz#891151 [CVE-2013-0743]


author: Elio Maldonado <emaldona@redhat.com> - 3.13.6-2
changelog:
  - Retagging for rhel-6.3 z-stream
  - Update to NSS_3_13_6_RTM
  - Resolves: rhbz#891663 - Update to 3.13.5 for mozilla 10.0.6
  - Resolves: rhbz#891151 [CVE-2013-0743]


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-7
changelog:
  - Add dummy sources file to test for and prevent breaking rhpkg commands
  - Enable testing for 'rhpk upload' and 'rhpk new-sources' breakage such as hangs
  - Related: rhbz#837089


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-8
changelog:
  - PEM peminit returns CKR_CANT_LOCK when needed to inform caller module isn't thread safe
  - Resolves: rhbz#555019 - [PEM] invalid writes in multi-threaded libcurl based application


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-9
changelog:
  - Fix locking issue causing curl hangs and authenticate to the correct session
  - Resolves: rhbz#872838


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-12
changelog:
  - Recreate the distrust patch by backporting the upstream one
  - Resolves: rhpbz#890914 - Dis-trust TURKTRUST mis-issued *.google.com certificate


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3.14.3_RTM
  - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Update expired test certificates (fixed in upstream bug 852781)
  - Sync up pem module's rsawrapr.c with softoken's upstream changes for nss-3.14.3
  - Reactivate the aia tests


author: Elio Maldonado - 3.14.3-2
changelog:
  - Install sechash.h and secmodt.h which are now provided by nss-devel
  - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Remove unsafe -r option from commands that remove headers already shipped by nss-util and nss-softoken


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Ensure pem uses system freebl as with this update freebl brings in new API's
  - Resolves: rhbz#927157 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Revert to accepting MD5 on digital signatures by default
  - Resolves: rhbz#957603 - nss 3.14 - MD5 hash algorithm disabled


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-6
changelog:
  - Fix all.sh test for which application was last build by updating nss-versus-softoken-test.path
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Kai Engert <kaie@redhat.com> - 3.15.1-7
changelog:
  - Additional syntax fixes in nss-versus-softoken-test.patch
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-8
changelog:
  - Don't require nss-softokn-fips
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-9
changelog:
  - Rebuild for the pem module to link with freel from nss-softokn-3.14.3-6.el6
  - Related: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]
  - Related: rhbz#1010224 - NSS 3.15 breaks SSL in OpenLDAP clients


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-10
changelog:
  - Restore a mistakenly removed patch
  - Resolves: rhbz#961659 - SQL backend does not reload certificates


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-11
changelog:
  - Fix the test for zero failures in the %check section
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-12
changelog:
  - Add a zero default value to the DISABLETEST and TEST_FAILURES checks
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-13
changelog:
  - Add zero default value to DISABLETEST check and fix the TEST_FAILURES check and reporting
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS
  - Related: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-14
changelog:
  - Add s390x and ia64 to the %define multilib_arches list used for defining alt_ckbi
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-15
changelog:
  - Using export NSS_DISABLE_HW_GCM=1 to deal with some problemmatic build systems
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Enable patch with fix for deadlock in trust domain lock and object lock
  - Resolves: Bug 1036477 - deadlock in trust domain lock and object lock
  - Disable hw gcm on rhel-5 based build environments where OS lacks support
  - Rollback changes to build nss without softokn until Bug 689919 is approved
  - Cipher suite was run as part of the nss-softokn build


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1042685 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117) [rhel-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Resolves: Bug 1048713 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-6
changelog:
  - Make pem's derEncodingsMatch function work with encrypted keys
  - Resolves: Bug 1048713 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-5
changelog:
  - Move removal of directories to the end of the %prep section
  - Resolves: Bug 689919 - build without any softoken or util sources in the tree


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-6
changelog:
  - Update pem sources to the same ones used on rhel-7
  - Remove no longer needed patches on account of this update
  - Resolves: Bug 1002205


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-2
changelog:
  - Remove two unused patches and apply a needed one that was missed
  - Resolves: Bug 1112136 - Rebase nss in RHEL 6.5.Z to NSS 3.16.1


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-7
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1145431 - CVE-2014-1568


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-15
changelog:
  - Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Support TLS_FALLBACK_SCSV in tstclnt and ssltap


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Restore patch for certutil man page
  - supply missing options descriptions to the man page
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-3
changelog:
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove unused indentation pseudo patch
  - require nss util 3.16.2.3


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-1
changelog:
  - Rebase to NSS 3.18
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]
  - Keep the same cipher suite order as we had in NSS_3_15_3_RTM
  - Resolves: Bug 1202488 - openldap-2.4.23-34.el6_5.1.i686 fails after updating nss to nss-3.16.1-4.el6_5.i686
  - Resolves: Bug 1182902 - rhel65 ns-slapd crash, segfault error 4 in libnss3.so in PK11_DoesMechanism at pk11slot.c:1824


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-2
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1207052 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-3
changelog:
  - Restore a patch that had been mistakenly disabled
  - Resolves: Bug 1207052 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-4
changelog:
  - Fix shell syntax error in nss/tests/all.sh
  - Resolves: Bug 1207052 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-5
changelog:
  - Update and reeneable nss-646045.patch on account of the rebase
  - Resolves: Bug 1207052 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Kai Engert <kaie@redhat.com> - 3.18.0-5.1
changelog:
  - Require softokn build 22 to ensure runtime compatibility.
  - Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-2
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-3
changelog:
  - Restore a patch that had been mistakenly disabled
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-4
changelog:
  - Fix shell syntax error in nss/tests/all.sh
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-5
changelog:
  - Update and reeneable nss-646045.patch on account of the rebase
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Kai Engert <kaie@redhat.com> - 3.18.0-5.3
changelog:
  - On RHEL 6.x keep the TLS version defaults unchanged.
  - Require softokn build 22 to ensure runtime compatibility.
  - Relax the requirement from pkcs11-devel to nss-softokn-freebl-devel
    to allow same or newer.
  - Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-8
changelog:
  - Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
  - Resolves: Bug 1289881


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-9
changelog:
  - Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
  - Resolves: Bug 1289890


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-2
changelog:
  - Enable two additional ciphers and keep another one disabled
  - Prevent enabling extended masker key derive


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-6
changelog:
  - Fix syntax errors in patch that disables sslv2 tests
  - Resolves: Bug 1297888 - Rebase RHEL 6.8 to NSS 3.21 for Firefox 45


author: Kai Engert <kaie@redhat.com> - 3.21.3-2
changelog:
  - Mozilla #1314604 / Red Hat CVE-2016-8635
  - remove disable_hw_gcm.patch which hasn't been used since 3.16.1


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-7
changelog:
  - Add patch to check if hash algorithms are backed by a token
  - Add patch to disable TLS_ECDHE_{RSA,ECDSA}_WITH_AES_128_CBC_SHA256,
    which have never enabled in the past


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-9
changelog:
  - Update fix_multiple_open patch to fix regression in openldap client
  - Remove pk11_genobj_leak patch, which caused crash with Firefox
  - Add comment in the policy file to preserve the last empty line
  - Disable SHA384 ciphersuites when CKM_TLS12_KEY_AND_MAC_DERIVE is not
    provided by softoken; this superseds check_hash_impl patch


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-10
changelog:
  - Add patch to fix SSL CA name leaks, taken from NSS 3.27.2 release
  - Add patch to fix bash syntax error in tests/ssl.sh
  - Add patch to remove duplicate ciphersuites entries in sslinfo.c
  - Add patch to abort selfserv/strsclnt/tstclnt on non-parsable version range
  - Build with support for SSLKEYLOGFILE


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-11
changelog:
  - Adjust the sslstress.txt filename so that it matches with the
    disableSSL2tests patch ported from RHEL 7
  - Exclude SHA384 and CHACHA20_POLY1305 ciphersuites from stress tests
  - Don't add gtests and ssl_gtests to nss_tests, unless gtests are enabled


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-1
changelog:
  - Rebase to 3.28.3
  - Remove upstreamed moz-1282627-rh-1294606.patch,
    moz-1312141-rh-1387811.patch, moz-1315936.patch, and
    moz-1318561.patch
  - Remove no longer necessary nss-duplicate-ciphers.patch
  - Disable X25519 and exclude tests using it
  - Catch failed ASN1 decoding of RSA keys, by Kamil Dudka (#1427481)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-5
changelog:
  - backport support for the "validnames" option from SVN and use it to allow
    parentheses characters by modifying the default setting (#690870)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-6
changelog:
  - backport patches from 0.7.10 to interpret more types of errors as indicators
    that we need to ask a different server (#692817) and from 0.7.12 to not
    get stuck while cleaning up SSL/TLS encrypted connections


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-8
changelog:
  - switch to only munging the contents of /etc/nslcd.conf on the very first
    install (#706454)
  - make sure that we have enough space to parse any valid GID value when
    parsing a user's primary GID (#716822,#720230)
  - tweak the default "validnames" setting to also allow shorter and shorter
    names to pass muster (#706860)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-9
changelog:
  - include backported enhancement to take URIs in the form "dns:DOMAIN" in
    addition to the already-implemented "dns" (#730309)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-10
changelog:
  - update the validnames changes to the self-tests so that their expectations
    match the modified defaults (#737496)


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-11
changelog:
  - do not overflow big UID values, use explicit base when converting UIDs
    and GIDs to integer types (#741362)


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-14
changelog:
  - run the config file upgrade in %posttrans to avoid problems on multilib
    (#706454)
  - convert UID to long long on all arches to catch negative values (#741362)


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-16
changelog:
  - Do not print a "Broken Pipe" error message after requesting a large group
    (#791042)
  - Fix a typo in the disconnection logic (#747281), patch by Martin Poole


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-18.3
changelog:
  - Resolves: rhbz#1193114 - nslcd does not reconnect to alternate ldap server
                             when using SSL


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-20.1
changelog:
  - Resolves: rhbz#1193115 - nslcd does not reconnect to alternate ldap server
                             when using SSL


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-20.1
changelog:
  - Resolves: rhbz#1192451 - nslcd does not reconnect to alternate ldap server
                             when using SSL


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-20.2
changelog:
  - Do not crash when parsing the tls_ciphers option
  - Resolves: rhbz#1184361 - segfault occurs when nslcd starts


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-20.3
changelog:
  - Use a static buffer for OpenLDAP callback structure
  - Resolves: rhbz#999472 - nslcd does not reconnect to alternate ldap server
                            when using SSL


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - rename to nss-pam-ldapd
  - also check for import settings in /etc/nss_ldap.conf and /etc/pam_ldap.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.4-1
changelog:
  - update to 0.7.4 (#592385)
  - stop trying to migrate retry timeout parameters from old ldap.conf files
  - add an explicit requires: on nscd to make sure it's at least available
    on systems that are using nss-pam-ldapd; otherwise it's usually optional
    (#587306)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-2
changelog:
  - don't return an uninitialized buffer as the value for an optional attribute
    that isn't present in the directory server entry (#592965)


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-24
changelog:
  - Apply two patches from upstream
  - Resolves: rhbz#1105382 - nslcd: error reading from client: Success


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-25
changelog:
  - Resolves: rhbz#917876 - [patch] Retry on zero length buffers rather than
                            declaring source unavailable


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-26
changelog:
  - Apply patches in prep
  - Resolves: rhbz#917876 - [patch] Retry on zero length buffers rather than
                            declaring source unavailable


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-27
changelog:
  - Resolves: rhbz#1240388 - nslcd fails to fetch member of group if that
                             members name has 19 or more character in its name


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-30
changelog:
  - Resolves: rhbz#1293564 - Segmentation fault during upstream make check
  - Also fix regressions in the tio.c module revealed by subsequent testing


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-31
changelog:
  - Resolves: rhbz#1293564 - fix doc to describe actual uri format
                             in nslcd.conf


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-32
changelog:
  - Don't double-close the socket
  - Resolves: rhbz#1309364 - Use-after-free in case resolving hosts or
                             networks fail


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-4
changelog:
  - tweak the pre-generated man pages to avoid a syntax error warning with older
    versions of groff (#676483)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.4-11
changelog:
  - Move libfreebl3.so and its .chk file to /lib{64} keeping
  - symbolic links to them in /usr/lib{64} so as not break others


author: Elio Maldonado <emaldona@redhat.com> - 3.12.4-16
changelog:
  - allow prelink of softoken and freebl. Change the verify code to use
    prelink -u if prelink is installed. Fix by Robert Relyea


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-2.1
changelog:
  - Don't enable FIPS when CONFIG_CRYPTO_FIPS=n
  - Fix typo in the package description
  - Fix capitalization error in prelink conflict statement
  - Require nspr 4.8.4


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-4
changelog:
  - Resolves: rhbz#710298 - fix intel optimized aes code to handle case where input and ouput are in the same buffer


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
  - Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib before the signing commands in __spec_install_post scriplet
    to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
  - Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
  - Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
  - Update the licence to MPLv2.0


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Add patch to conditionally compile according to old or new sqlite api
  - new is used on rhel-6 while rhel-5 uses old but we need the same code for both
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Enable ECC support for suite b and add upstream fixes for aec gcm
  - Use the unstripped upstream sources with ecc support
  - Limit the ECC support to suite b
  - Apply several upstream aes gcm fixes
  - Rename macros EC_MIN_KEY_BITS and EC_MAX_KEY_BITS per upstream
  - Resolves: rhbz#960208 - Enable ECC in nss-softoken
  - Related: rhbz#919172


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released
  - Display cpuifo as part of the tests and make NSS_DISABLE_HW_GCM the environment variable to test for
  - When appling the patches use a backup file suffix that better describes the patch purpose


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-6
changelog:
  - create -fips packages 
  - patch submitted by Bob Relyea <rrelyea@redhat.com>
  - fix the script that splits softoken off from nss
  - patch nss/cmd/lib/basicutil.c to build against nss-util-3.15.1
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-7
changelog:
  - Fix the PR_Access stub to actually access the correct permissions
  - Resolves: rhbz#1008513 - Unable to login in fips mode
  - Run the lowhash tests
  - Require nspr-4.0.0 and nss-util-3.15.1


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-8
changelog:
  - Enable new packaging but don't apply nss-fips-post.patch
  - Related: rhbz#1008513 - Unable to login in fips mode


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-10
changelog:
  - Skip calls to CHECK_FORK in {C & NSC}_GetFunctionList
  - Resolves: Bug 1082900 - Admin server segfault when configuration DS configured on SSL port
  - Add workaround to %check
  unset DISPLAY
   section for RHEL-5 based build machines where kernel lacks support for hardware GCM


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-11
changelog:
  - Skip calls to CHECK_FORK in {C & NSC}_GetFunctionList
  - Resolves: Bug 1053437 - Admin server segfault when configuration DS configured on SSL port


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-12
changelog:
  - Avoid call to sdb_measureAccess in lib/softoken/sdb.c s_open if NSS_SDB_USE_CACHE is "yes" or "no"
  - Resolves: Bug 1044666 - Can curl HTTPS requests make fewer access system calls?


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-15
changelog:
  - Fix shlibsign to return non-zero on failure
  - Resolves: Bug 587634 - shlibsign returns 0 although if fails


author: Bob Relyea <rrelyea@redhat.com> - 3.14.3-21
changelog:
  - Require nss-softokn-freebl of at least the same version and release
  - Resolves: Bug 1183448 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm


author: Bob Relyea <rrelyea@redhat.com> - 3.14.3-21
changelog:
  - Require nss-softokn-freebl of at least the same version and release
  - Resolves: Bug 1182662 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-23
changelog:
  - Pick up upstream freebl patch for CVE-2015-2730
  - Check for P == Q or P ==-Q before adding P and Q


author: Elio Maldonado - 3.12.9-12
changelog:
  - Bootstrapping of the builroot in preparation for rebase to 3.14.3
  - Remove hasht.h from the %files devel list to prevent update conflicts with nss-util
  - With 3.14.3 hasht.h will be provided by nss-util-devel
  - Related: rhbz#927158 - rebase nss-softokn to 3.14.3


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#927158 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
  - Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib before the signing commands in __spec_install_post scriplet
    to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
  - Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
  - Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
  - Update the licence to MPLv2.0


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Add patch to conditionally compile according to old or new sqlite api
  - new is used on rhel-6 while rhel-5 uses old but we need the same code for both
  - Resolves: rhbz#927158 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue


author: Elio Maldonado - 3.12.9-12
changelog:
  - Bootstrapping of the builroot in preparation for rebase to 3.14.3
  - Remove hasht.h from the %files devel list to prevent update conflicts with nss-util
  - With 3.14.3 hasht.h will be provided by nss-util-devel
  - Related: rhbz#919172 - rebase nss-softokn to 3.14.3


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#799192 - Update to 3.13.3
  - Update minimum nspr version for Requires and BuildRequires to 4.9
  - Fix version/release in changelog to match the Version and Release tags, now 3.13.3-2


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-1
changelog:
  - Update to NSS_3_13_5_RTM
  - Resolves: rhbz#833480 - Update nss-util on RHEL 6.x to NSS 3.13.5 for Mozilla 10.0.6
  - Add -L${libdir}/nss3 to Libs: line in nspr.pc.in


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-3
changelog:
  - Update to nss-3.14.0.0-1
  - Add temporary patch so utilmod doesn't include any headers from softoken
  - Keep the hasht.h from current nss-softokn-devel
  - Remove the long obsoleted nss-nolocalsql.patch


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#927171 - Rebase to 3.14.3 as part of the fix for the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919174 - Rebase to 3.14.3 as part of the fix for the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-2
changelog:
  - Revert to accepting MD5 on digital signatures by default
  - Resolves: rhbz#918136 - nss 3.14 - MD5 hash algorithm disabled


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Update to NSS_3_15_1_RTM
  - Resolves: rhbz#1002644 - Rebase RHEL 6 to NSS-UTIL 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-3
changelog:
  - Preserve existing permissions when replacing existing pkcs11.txt file, but keep strict default permissions for new files
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Add nss-util portion of a fix for pluggable ecc bug in nss and nss-util
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Apply the patch for the pluggable ecc fix
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - nssutil_growList and nssutil_ReadSecmodDB cleanup
  - Resolves: Bug 1019529 - New defect found in nss-util-3.14.0.0-2.el6


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-4
changelog:
  - Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove patches rendered obsolete by the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Fix the required nspr version to be 4.10.6


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-1
changelog:
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove patches rendered obsolete by the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Fix the required nspr version to be 4.10.6
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-0.3
changelog:
  - Rebase RHEL 6.7.z to NSS-util 3.21 in preparation for Firefox 45
  - Resolves: Bug 1299874
  - Update upstream patch for CVE-2016-1950


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-1
changelog:
  - Rebase to nss-util from nss 3.21
  - Resolves: Bug 1297890 - Rebase RHEL 6.8 to NSS-util 3.21 in preparation for Firefox 45


author: Daiki Ueno <dueno@redhat.com> - 3.21.3-1
changelog:
  - Rebase to nss-3.21.3
  - Remove patch for CVE-2016-1950, which is included in the release
  - Related: Bug 1347908


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-1
changelog:
  - Rebase to NSS 3.26.0
  - Remove upstreamed patch for CVE-2016-1950
  - Remove p-disable-md5-590364-reversed.patch for bug 1335915


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-42.el6
changelog:
  - turn off crypto, hash, queue, and replication support, which aren't used,
    reduces the package size, and sidesteps needing to patch anything for #347741
  - create and populate new db files, moving them in place afterward so that we
    never have a partially-built db file "live" (patch from Kelsey Cummings,
    CentOS #1987)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.1.pre1
changelog:
  - update to 2.2.3pre1, which you can still get from upstream
  - build with -fno-strict-aliasing to avoid problems triggered by strict aliasing
  - package the translations


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.3.pre1
changelog:
  - import Kees Cook's patch to fix accidental leakage of part of ./DB_CONFIG
    (#580192, CVE-2010-0826)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.3.pre1.1
changelog:
  - import patch to handle initgroups directly rather than forcing libc to
    use the enumeration interfaces, which could result in two threads calling
    initgroups() at the same time to both get a subset of the right answers
    (#718203)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.4.pre1
changelog:
  - import patch to handle initgroups directly rather than forcing libc to
    use the enumeration interfaces, which could result in two threads calling
    initgroups() at the same time to both get a subset of the right answers
    (#705466)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.4.pre1.1
changelog:
  - when the initgroups function needs to parse a group entry which contains a
    large list of users, reinitialize the buffer that we pass to the parsing
    function, which destroyed what we passed to it the previous time (#788668)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.5.pre1
changelog:
  - when the initgroups function needs to parse a group entry which contains a
    large list of users, reinitialize the buffer that we pass to the parsing
    function, which destroyed what we passed to it the previous time (#751461)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p6-4
changelog:
  - don't restart ntpd in dhclient script with every renewal
  - fix buffer overflow in ntpq (#490617)
  - check status in condrestart (#481261)
  - don't crash when compiled with HAVE_TIMER_CREATE (#486217)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-1
changelog:
  - update to 4.2.4p7 (CVE-2009-1252)
  - improve PLL response when kernel discipline is disabled
  - don't log STA_MODE changes
  - enable nanokernel support
  - allow minpoll 3
  - increase memlock limit
  - move html documentation to -doc subpackage (#492444)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-2
changelog:
  - fix frequency calculation when starting with no drift file
  - reduce phase adjustments beyond Allan intercept in daemon PLL


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-3
changelog:
  - handle system time jumps better
  - don't wake up every second for refclocks without timer
  - don't crash in ntpstat when unknown clock type is received (#505564)
  - make ntpstat process first packet in multipacket response
  - switch to editline
  - set pool.ntp.org vendor zone in spec (#512711)
  - compile with -fno-strict-aliasing


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-1
changelog:
  - update to 4.2.6p5 (#654004, #641800, #714079, #714084, #716968, #819781,
    - bind broadcast client to new interfaces (#973807)
  - allow selection of cipher for private key files (#749530)
  - retry few times in ntpdate init script before giving up (#673198)
  - print synchronization distance instead of dispersion in ntpstat (#830821)
  - ignore duplicate servers from dhclient (#862983)
  - add fourth server to default ntp.conf and use iburst (#667524, #623616)
  - drop comment enabling local driver in default config (#816645)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-2
changelog:
  - don't generate weak control key for resolver (CVE-2014-9293)
  - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
  - fix buffer overflows via specially-crafted packets (CVE-2014-9295)
  - don't mobilize passive association when authentication fails (CVE-2014-9296)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-3
changelog:
  - validate lengths of values in extension fields (CVE-2014-9297)
  - drop packets with spoofed source address ::1 (CVE-2014-9298)
  - add nanosecond support to SHM refclock (#1117704)
  - allow creating all SHM segments with owner-only access (#1122015)
  - allow symmetric keys up to 32 bytes again (#1053551)
  - fix calculation of root dispersion (#1045376)
  - fix crash in ntpq mreadvar command (#1165141)
  - don't step clock for leap second with -x option (#1190619)
  - don't drop packets with source port below 123 (#1171630)
  - use larger RSA exponent in ntp-keygen (#1184421)
  - refresh peers on routing updates (#1193850)
  - increase memlock limit again (#1053568)
  - warn when monitor can't be disabled due to limited restrict (#1166596)
  - improve documentation of restrict command (#1069019)
  - update logconfig documentation for patched default (#1193849)
  - don't build ntpsnmpd (#995134)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-5
changelog:
  - reject packets without MAC when authentication is enabled (CVE-2015-1798)
  - protect symmetric associations with symmetric key against DoS attack
    (CVE-2015-1799)
  - fix generation of MD5 keys with ntp-keygen on big-endian systems
    (CVE-2015-3405)
  - log when stepping clock for leap second or ignoring it with -x (#1204625)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-7
changelog:
  - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
  - allow only one step larger than panic threshold with -g (CVE-2015-5300)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-9
changelog:
  - fix crash with invalid logconfig command (CVE-2015-5194)
  - fix crash when referencing disabled statistic type (CVE-2015-5195)
  - don't hang in sntp with crafted reply (CVE-2015-5219)
  - don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
    CVE-2015-7702)
  - fix memory leak with autokey (CVE-2015-7701)
  - don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
  - don't crash in ntpq with crafted packet (CVE-2015-7852)
  - add option to set Differentiated Services Code Point (DSCP) (#1228314)
  - extend rawstats log (#1242895)
  - fix resetting of leap status (#1243034)
  - report clock state changes related to leap seconds (#1242937)
  - allow -4/-6 on restrict lines with mask (#1232146)
  - retry joining multicast groups (#1288534)
  - explain synchronised state in ntpstat man page (#1286969)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-10
changelog:
  - don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
  - fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-10.el6_8.1
changelog:
  - don't allow spoofed packets to demobilize associations (CVE-2015-7979,
    CVE-2016-1547)
  - don't allow spoofed packet to enable symmetric interleaved mode
    (CVE-2016-1548)
  - check mode of new source in config command (CVE-2016-2518)
  - make MAC check resilient against timing attack (CVE-2016-1550)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-10.el6_8.2
changelog:
  - don't limit rate of packets from sources (CVE-2016-7426)
  - don't change interface from received packets (CVE-2016-7429)
  - fix calculation of root distance again (CVE-2016-7433)
  - require authentication for trap commands (CVE-2016-9310)
  - fix crash when reporting peer event to trappers (CVE-2016-9311)


author: Petr Holasek <pholasek@redhat.com> - 2.0.7-4
changelog:
  - Symbol numa_num_possible_cpus exported (bz804827)
  - miscalculating of numa_num_configured_cpus was fixed (bz804480)


author: Anton Arapov <anton@redhat.com> - 2.0.7-7
changelog:
  - numastat.c: fix bug preventing correct static huge page quantities
  - numastat.c: update version number
  - numastat.8: remove redundant "interleave hit" description
  - numastat.8: remove extraneous leading spaces and blank lines
  - numastat.8: enhance explanation of correct placement for "-s" option
  - Resolves: rhbz#987507


author: Ade Lee <alee@redhat.com> 1.0.0-14
changelog:
  - Resolves: #643546 - [RFE] Add nuxwdog to RHEL.
  - Remove old encryption scheme
  - Store passwords in kernel keyring


author: Tania Bento <tbento@redhat.com> 0:1.3.2-1jpp.1
changelog:
  - Changed %BuildRoot tag.
  - Bootstrap Buildling.
  - Should not touch buildroot in %prep.
  - Removed %Vendor tag.
  - Removed %Distribution tag.
  - Fixed %Release tag.
  - Fixed %Sourcei0 tag.
  - Added %doc to %files section.
  - Edited %doc in %files javadoc section.


author: Ralph Apel <r.apel@r-apel.de> - 0:3.1-3jpp
changelog:
  - Add poms and depmap frags with groupId of org.objectweb.asm !
  - Add asm-all.jar 
  - Add -javadoc Requires post and postun
  - Restore Vendor, Distribution


author: David Walluck <dwalluck@redhat.com> 0:3.1-4
changelog:
  - remove Class-Path from MANIFEST.MF
  - add unversioned javadoc symlink
  - remove javadoc scriptlets
  - fix directory ownership
  - remove build requirement on dos2unix


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.1-7
changelog:
  - Remove ocaml-find-{requires,provides}.sh from this package.  These are
    now in upstream RPM 4.8 (RHBZ#545116).
  - define -> global in a few places.


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.2-5
changelog:
  - Enable execshield stack protection on ppc/ppc64 (572826)
    related: rhbz#1343082
  - Fix strict-aliasing warnings in build (990540).


author: S390x secondary arch maintainer <fedora-s390x@lists.fedoraproject.org>
changelog:
  - ExcludeArch sparc64, s390, s390x as we don't have OCaml on those archs
    (added sparc64 per request from the sparc maintainer)


author: Richard W.M. Jones <rjones@redhat.com> - 2.01.1-4
changelog:
  - Import Fedora Rawhide package.
  - Replace %define with %global.
  - Use upstream RPM 4.8 OCaml dependency generator.


author: Richard W.M. Jones <rjones@redhat.com> - 0.4.0-2
changelog:
  - New upstream version 0.4.0.
  - Upstream build system has been rationalized, so remove all the
    hacks we were using.
  - Upstream now contains tests, run them.
  - Needs ounit in order to carry out the tests.


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.3-1
changelog:
  - New upstream release 0.3.3 (mainly small bugfixes).
  - This requires ocaml-fileutils 0.4.0 and is incompatible with
    any earlier version.
  - Fixed a number of rpmlint warnings with *.ml files in the
    non-devel package.


author: Richard W.M. Jones <rjones@redhat.com> - 0.3.3-3.4
changelog:
  - Remove camomile dependency completely.
  - Disable tests, since they require camomile.  Also we have to patch
    out the tests in the Makefile since they run anyway (and break).


author: Troy Dawson <dawson@fnal.gov> 0.9.8-3
changelog:
  - Client was updated 
  - Fixes issues with users using ups perl
  - Fixed issue when the rpm comments field has a newline in it.
  - Turned debug on the cron job so mail will get sent


author: Troy Dawson <dawson@fnal.gov> 0.9.9-1
changelog:
  - Client now points to fortytwo as the server
  - cronjob now moved to z_... to get a more random time


author: Troy Dawson <dawson@fnal.gov> 0.9.9-6
changelog:
  - Turned off debugging, check to see if we're on fermilab networks
  - Write to a log, and do logrotate
  - Minor fixes to the client to now do --local --xml


author: Troy Dawson <dawson@fnal.gov> 0.9.9-7
changelog:
  - Updated cron to check to see if it can access the server
    and goes through a list of domains to see if it's at Fermilab


author: Connie Sieh <csieh@fnal.gov> 0.9.9-14
changelog:
  - replaced "ifconfig" to "ip addr" in z_ocs.inventory.client.cron
  - ifconfig did not work with infiniband


author: Nalin Dahyabhai <nalin@redhat.com> 0.28-1
changelog:
  - split off python subpackage, make -devel depend on -libs, let autodeps
    provide the main package's dependency on -libs (#228377)


author: Nalin Dahyabhai <nalin@redhat.com> 0.29-1
changelog:
  - split off mkhomedir bits into a subpackage (#236820)
  - take a pass at new-init-ifying the init script (#247005)


author: Nalin Dahyabhai <nalin@redhat.com> 0.29.1-1
changelog:
  - when we install the mkhomedir subpackage, if there's a running oddjobd, ask
    it to reload its configuration
  - fix missing bits from the namespace changes in configuration files
  - restart the service in %postun


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-1
changelog:
  - drop the shared library and python bindings, which so far as i can tell
    weren't being used, obsoleting them to avoid a mess on upgrades
  - move the mkhomedir helper from %{_libdir}/oddjob to %{_libexecdir}/oddjob
    to make the multilib configuration files agree (#559232)
  - use %global instead of %define


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-2
changelog:
  - backport patch to stop trying to close a stale connection to the bus,
    which used to generate a warning from libdbus, but which now causes an
    assertion failure (#634356)
  - when creating home directories, default to the UMASK setting from
    /etc/login.defs (part of #659681) and ensure the execute bit is set
    on any intermediate directories we create (the rest of #659681)
  - make sure the test helper has consistent permissions and make sure our
    self-tests verify them (#612617)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-4
changelog:
  - make the init script exit with status 2 when given an unknown command, rather
    than with status 1 (#674534)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-5
changelog:
  - signal the system message bus to reload its configuration whenever we
    drop a new configuration file in place for it during package %post (#678345)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-6
changelog:
  - stop overriding the system-wide UMASK default in our default
    oddjobd-mkhomedir.conf file (#1150607)


author: Troy Dawson <dawson@fnal.gov> - 5.SL
changelog:
  - Fixed startup bug for real this time.
  - Added check for cell
  - Added check so user can say if they want it to start on boot or not


author: Stephan Wiesand <stephan wiesand desy de> 1.5.74-79.SLx
changelog:
  - 1.5.74 release
  - F10 -> SL6
  - changed how to determine the domain (hostname -d/-f may not work)
  - restorevol moved from sbin to bin


author: Stephan Wiesand <stephan wiesand desy de> 1.5.74-80.z1.SLx
changelog:
  - more SL6 changes:
  - use afsvers macro instead of PACKAGE_VERSION which is no longer available
  - patch1075 to fix kernel panic on module load
  - and: buildrequire make...


author: Stephan Wiesand <stephan wiesand desy de> 1.5.76-81.SLx
changelog:
  - update to latest feature release
  - patch1075 should no longer be required
  - libkopenafs is now 1.1
  - DAFS is built by default - added files to openafs-server
  - added the new krb.excl(5) manpage to openafs-server


author: Stephan Wiesand <stephan wiesand desy de> 1.5.78-83.SLx
changelog:
  - update to latest feature release
  - enable dugging symbols by default
  - there is no more /usr/include/potpourri.h
  - module is called ...mp.ko again?


author: Stephan Wiesand <stephan wiesand desy de> 1.5.78-84.SLx
changelog:
  - removed support for SL3/4, greatly simplifying the spec
  - removed support for ia32e, ia64, athlon, ...
  - removed all old patches and obsolete sources (like openafs-krb5.tar.gz)
  - relaxed requirements between userland and kernel-module package
  - updated Changelog & Relnotes, and made sure we do so in the future
  - don't package the afs_compile_et manpage in the main packages as well
  - don't add -fPIC to CFLAGS (be compatible with openafs.org spec)
  - configure: no --enable-debug[-kernel] by default (be compatible with openafs.org spec)
  - configure: added --disable-strip-binaries (be compatible with openafs.org spec)
  - configure: added --with-linux-kernel-packaging (be compatible with openafs.org spec)
  - this also renames the module to openafs.ko, so change in rc script
  - configure: added --disable-kernel-module to non-module builds
  - and moved the build requirement on kernel-devel to the module package
  - the server package shouldn't require the kernel module
  - debugspec can now be defined on the command line, and defaults to 0
  - moved much of the kernel/kvers/****dir voodoo into openafs-sl-defs.sh
  - which also replaces openas-lslrelease-helper.sh (and no longer stes SL5 on SL6)
  - updated CellServDB to latest from grand.central.org (Dec 13, 2010)


author: Stephan Wiesand <stephan wiesand desy de> 1.5.78-86.SLx
changelog:
  - don't strip any binaries, let rpm do the job
  - new in openafs-debug: cacheout, afscp, fsx
  - new in openafs-client: afsio
  - moved into main package: restorevol
  - moved into openafs-server: ka-forwarder + manpage
  - server package should own /usr/afs/etc
  - moved into openafs-authlibs: libkopenafs.so.1[.1]
  - moved into openafs-authlibs-devel: libkopenafs.{a,so}, kopenafs.h, libafs{authent,rpc}.a 
  - fixed chcon in server's post script for SL6
  - introduced the ability to build a kabi-tracking kmod (define build_kmod 1)
  - introduced a switch to disable building the fuse client
  - and unless that switch is used, buildrequire fuse-devel and package afsd.fuse
  - other minor changes to make rpmlint less unhappy
  - renamed openafs-debug to openafs-plumbing-tools
  - moved fssync-debug and manpages into -plumbing-tools
  - enabled debugsyms by default again, no effect on kernel module


author: Stephan Wiesand <stephan wiesand desy de> 1.6.0-90.pre1.SLx
changelog:
  - let openafs-client own the /afs mountpoint to avoid selinux troubles
  - change initdir macro to /etc/rc.d/init.d (like upstream), and use it everywhere


author: Stephan Wiesand <stephan wiesand desy de> 1.6.0-91.pre2.SLx
changelog:
  - update to next prerelease
  - package /afs as ghost, and create it in post again - and fix the label


author: Stephan Wiesand <stephan wiesand desy de> 1.6.1-98.pre1.SLx
changelog:
  - update to prerelease 1 for 1.6.1 release
  - there are no release notes yet
  - package new library libafscp.a in -devel
  - the old patch 302 (afsdump_scan) is finally upstream


author: Stephan Wiesand <stephan wiesand desy de> 1.6.1-113.SLx
changelog:
  - added patch 1077 to fix buffer overflows (from 1.6.2 release)
  - added a purgecache action to the client init script (Pat Riehecky)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.2-0.141.SLx
changelog:
  - (untested, unfinished)
  - use our own script for dealing with "weak updates", don't patch weak-modules
  - use different paths, don't interfere with weak-modules
  - new subpackage for the script: module-tools (license), require from kmods
  - script is run from scripts and triggers in the kmods
  - no longer provide kabi-mods
  - added a purgecache action to the client init script (Pat Riehecky)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.2-0.144.SLx
changelog:
  - do some more work in modules script
  - print debug output from kmod scripts if variable "verbose" is set


author: Stephan Wiesand <stephan wiesand desy de> 1.6.2-145.SLx
changelog:
  - 1.6.5 security release addressing openafs-sa-2013-0003 and -0004
  - see SECURITY.txt for important info on how to actually secure your site
  - just updating to this build is *not* sufficient


author: Stephan Wiesand <stephan wiesand desy de> 1.6.5.1-146.SLx
changelog:
  - 1.6.5.1 bugfix release
  - modify buildroot to use mktemp, allowing simultaneous builds (Pat)
  - fix the AFS mountpoint in the cacheinfo file generated in the SPEC


author: Stephan Wiesand <stephan wiesand desy de> 1.6.5.1-147.SLx
changelog:
  - patch1080 with http://gerrit.openafs.org/10578 to fix RHBZ #1038315 on EL 6.5
  - fix build on EL 5.10


author: Stephan Wiesand <stephan wiesand desy de> 1.6.10-153.SLx
changelog:
  - update to release 1.6.10
  - patch 1084 to revert gerrit 11358
  - patch 1085 with aklog/krb524 fix from gerrit 11538
  - package the new volscan executable + manpage, in -server
  - don't package the xfs_size_check manpage
  - removed the old lwp versions of butc, fileserver, volserver
  - support for SL7
  -  support "--with modsign" to sign the kernel module
  -  ship systemd unit files on this platform, rather than init scripts
  -  the old init scripts are called in "prepare" mode from the unit files
  -  in this mode, they do the usual checks/autoconfig, ...
  -  and then they write the environment files used in the unit files
  - added BOSSERVER_OPTIONS variable to sysconfig (and server startup files)
  - added ENABLE_DYNROOT_SPARSE to sysconfig (and client init script)
  -  defaults to on on SL7, off on SL5/6
  - patches 1080..83 are already in
  - use the right path to depmod, and generally the right sbin


author: Stephan Wiesand <stephan wiesand desy de> 1.6.10-153.SLx
changelog:
  - update to release 1.6.10
  - patch 1084 to revert gerrit 11358
  - patch 1085 with aklog/krb524 fix from gerrit 11538
  - package the new volscan executable + manpage, in -server
  - do not package the xfs_size_check manpage
  - removed the old lwp versions of butc, fileserver, volserver
  - support for SL7
  -  support "--with modsign" to sign the kernel module
  -  ship systemd unit files on this platform, rather than init scripts
  -  the old init scripts are called in "prepare" mode from the unit files
  -  in this mode, they do the usual checks/autoconfig, ...
  -  and then they write the environment files used in the unit files
  - added BOSSERVER_OPTIONS variable to sysconfig (and server startup files)
  - added ENABLE_DYNROOT_SPARSE to sysconfig (and client init script)
  -  defaults to on on SL7, off on SL5/6
  - patches 1080..83 are already in
  - use the right path to depmod, and generally the right sbin


author: Stephan Wiesand <stephan wiesand desy de> 1.6.11-204.SLx
changelog:
  - update to release 1.6.11
  - patch 1084 should no longer be needed (should...)
  - patch 1085 is included in 1.6.11
  - added "Provides: openafs-sl-client = %{version}" as requested by Pat


author: Stephan Wiesand <stephan wiesand desy de> 1.6.11-205.SLx
changelog:
  - fixed dependency of the -kpasswd subpackage (spotted by Pat Riehecky)
  - fixed on_network test to work on EL7 in server rc file too (reported by
    Otto-Michael Braun)
  - fixed unsatisfied dependencies on shared libs from -authlib-devel by turning
    AutoReq off for that package (reported by Ben Meekhof)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.11.1-206.SLx
changelog:
  - first test build of 1.6.11.1, based on HEAD at 9e1cf26
  - + 11760/1 (Linux 4.0) + 11808 (aklog fix) + 11809 (FBSD kbuild)
  - + 11820 (NEWS) + 11819 (make 1.6.11.1)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.14-218.SLx
changelog:
  - update to release 1.6.14
  - fixes a 1.6.13 regression in vlserver when volumes are queried by regex
  - the "backup" util does this, unless vols are specified with ".*" or "" only


author: Stephan Wiesand <stephan wiesand desy de> 1.6.15-221.SLx
changelog:
  - update to release 1.6.15 (security release)
  - addresses OPENAFS-SA-2015-007 (CVE-2015-7762, CVE-2015-7763)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.17-234.SLx
changelog:
  - update to release 1.6.17 (security release)
  - install service unit files with mode 644, not 755 (rt.central.org #132662)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.2-0.136.1.pre4.SLx
changelog:
  - pseudo pre4 - has gerrit 8912, 8937, 8940, 8939, 8945, + bos.patch
  - this could be 1.6.2 final
  - require /sbin/modprobe, not modutils (SL7/FC18)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.2-0.137.1.pre4.SLx
changelog:
  - update to current head of 1.6.x (a15c406) + gerrit 9895, 8750 + bos patch
  - updated CellServDB to latest from grand.central.org (Jan 28, 2013)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.2-0.138.1.pre4.SLx
changelog:
  - the actual pre4, downloaded from grand.central.org, + bos.patch
  - adapted client init script to changed ifconfig output on F18 (->EL7)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.20-256.SLx
changelog:
  - update to security release 1.6.20
  - added RemainAfterExit=true in afs.service, to fix the case where only
    kernel threads remain after the client has started


author: Stephan Wiesand <stephan wiesand desy de> 1.6.5.1-147.SLx
changelog:
  - patch1080 with http://gerrit.openafs.org/10578 to fix RHBZ #1038315 on EL 4.6
  - fix build on EL 5.10


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.1.1-1
changelog:
  - New upstream release.
  - spec file updates:
    * Cleanup macro usage
    * Drop Conflict: in favour of correct Requires:
    * Whitespace cleanup


author: Ryan O'Hara <rohara@redhat.com> - 1.1.1-2
changelog:
  - Resolves: rhbz#555164
  - Resolves: rhbz#557275
  - Resolves: rhbz#557622
  - Add upstream revision 2104 - Fix saCkptDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2105 - Fix saTmrDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2106 - Fix saLckDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2107 - Fix saClmDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2108 - Fix saMsgDispatch such that it will break out of switch if callback is received and is undefined.
  - Add upstream revision 2109 - Prevents iteration of a checkpoint section during synchronization.
  - Add upstream revision 2111 - Update to openais.spec.in to fix URL and File location.


author: Dan Horák <dhorak@redhat.com> 2.3.1-1
changelog:
  - New upstream release 2.3.1. (#559364)
  - opencryptoki-2.3.0-fix-nss-breakage.patch was merged.
  - updated pkcsslotd initscript (#547324)
  - Resolves: #559364
  - Related: #547324


author: Dan Horák <dhorak@redhat.com> 2.3.3-2.1
changelog:
  - properly check CKA_MODULUS_BITS to establish key length for ica token (#743556)
  - Resolves: #743556


author: Dan Horák <dhorak@redhat.com> 2.4-2
changelog:
  - don't add root to pkcs11 group (#732756)
  - document implications of the pkcs11 group membership (#730903)
  - Resolves: #732756, #730903


author: Petr Lautrbach <plautrba@redhat.com> 2.4.3.1-2
changelog:
  - use correct OID in CKA_ECDSA_PARAMS attribute
  - fixed ica token's SHA update function when passing zero message size
  - Resolves: #1027606, #1131745


author: Haïkel Guémar <karlthered@gmail.com> - 2.0.0-1
changelog:
  - Updated to 2.0.0
  - Removed upstream-ed patches
  - Ugly hack (added cvconfig.h)
  - Disable %check on ppc64


author: Haïkel Guémar <karlthered@gmail.com> - 2.0.0-6
changelog:
  - use cmake build system
  - applications renamed to opencv_xxx instead of opencv-xxx
  - add devel-docs subpackage #546605
  - add OpenCVConfig.cmake
  - enable openmp build
  - enable old SWIG based python wrappers
  - opencv package is a good boy and use global instead of define


author: Karel Klic <kklic@redhat.com> - 2.0.0-7
changelog:
  - re-enable testing on CMake build system
  - fix memory corruption in the gaussian random number generator


author: Dan Horák <dhorak@redhat.com> - 2.14.1-3.1
changelog:
  - Fix support for Power Supply Serial/Part Numbers (#915336),
    patch by Michele Baldessari <michele@redhat.com>
  - Resolves: #915336


author: Dan Horák <dhorak@redhat.com> - 2.14.1-3.2
changelog:
  - add mssing sensor RDRs for the fan resource (#969003)
  - fix openhpi connection failures with redundant OAs (#969004)
  - fix segfaults when retrieving thermal info (#969005)
  - add missing thermal sensors (#969006)
  - Resolves: #969003, #969004, #969003, #969006


author: Dan Horák <dhorak@redhat.com> - 2.14.1-4
changelog:
  - Fix support for Power Supply Serial/Part Numbers (#891626),
    patch by Michele Baldessari <michele@redhat.com>
  - Resolves: #891626


author: Dan Horák <dhorak@redhat.com> - 2.14.1-5
changelog:
  - add mssing sensor RDRs for the fan resource (#924852)
  - fix openhpi connection failures with redundant OAs (#948386)
  - fix segfaults when retrieving thermal info (#953515)
  - add missing thermal sensors (#953525)
  - Resolves: #924852, #948386, #953515, #953525


author: Michal Toman <mtoman@redhat.com> - 3.4.0-1
changelog:
  - rebase to 3.4.0 - #1127907
  - remove ipv6 patch - it is a part of 3.4.0
  - fix "strmsock.cpp:558: accept failed" - #1105679


author: Tim Waugh <twaugh@redhat.com> 1.3.2-28
changelog:
  - Don't ship .so or .la files (bug #203635).
  - Added dist tag to release.
  - Fixed summary.
  - Fixed build root.
  - Removed prefix tag.


author: Rex Dieter <rdieter@fedoraproject.org> - 1.3-5
changelog:
  - libopenjpeg has undefined references (#467661)
  - openjpeg.h is installed in a directory different from upstream's default (#484887)
  - drop -O3 (#504663)
  - add %check section
  - %files: track libopenjpeg somajor (2)


author: Tom Lane <tgl@redhat.com> 1.3-7
changelog:
  - Apply two upstream fixes for crasher bugs
  Resolves: #609389
  - Fix FTBFS: ImplicitDSOLinking (see Fedora bug 564783)


author: Tom Lane <tgl@redhat.com> 1.3-8
changelog:
  - Apply patches for CVE-2009-5030, CVE-2012-3358
  Resolves: #831562
  - Include -DCMAKE_INSTALL_LIBDIR in cmake call; fixes FTBFS with recent
    versions of cmake


author: Petr Hracek <phracek@redhat.com> 1.3-10
changelog:
  - Apply patch for CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 
  Resolves: #1038985 CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052


author: Petr Hracek <phracek@redhat.com> 1.3-10
changelog:
  - Apply patch for CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 
  Resolves: #1038987 CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052


author: Nikola Forró <nforro@redhat.com> - 1.3-16
changelog:
  - Revert previous changes in patch for CVE-2016-5159
  - Fix double free in patch for CVE-2016-5139
  - Fix memory leaks and invalid read in cio_bytein
    Related: #1419775


author: Tom Lane <tgl@redhat.com> 1.3-8
changelog:
  - Apply patches for CVE-2009-5030, CVE-2012-3358
  Resolves: #831561
  - Include -DCMAKE_INSTALL_LIBDIR in cmake call; fixes FTBFS with recent
    versions of cmake


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-7
changelog:
  - updated usage line in init script
  - changed return code when calling init script with bad arguments


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-9
changelog:
  - fixed broken link /usr/sbin/slapschema (#583568)
  - removed some static libraries from openldap-devel (#583575)


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-10
changelog:
  - updated overlay list in config file (#586143)
  - config dir slapd.d added to package payload (#585276)
  - init script now creates only symlink, not harldink, in /var/run (#584870)


author: Jan Zeleny <jzeleny@redhat.com> - 2.4.19-12
changelog:
  - updated man pages - only slaptest can convert configuration schema
    (#584787)
  - openldap compiled with -fno-strict-aliasing (#596193)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.19-15.1
changelog:
  - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success
  - fix: CVE-2011-1025 rootpw is not verified for ndb backend


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-7
changelog:
  - fix: some server certificates refused with inadequate type error (#669846)
  - fix: default encryption strength dropped in switch to using NSS (#669845)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-10
changelog:
  - fix: add symlinks for libraries moved in 2.4.23-5 to allow building
    packages which require these libraries in the old location (#678105)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-11
changelog:
  - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success
  - fix: CVE-2011-1025 rootpw is not verified for ndb backend
  - fix: openldap startup script ignores ulimit settings (#679356)
  - fix: add symlinks into /usr/lib*/ (#680139)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-13
changelog:
  - fix update: openldap can't use TLS after a fork() (#671553)
  - fix: possible NULL pointer dereferences in NSS non-blocking patch (#684035)
  - fix: move libldif to /lib for consistency (#548475)
  - fix: openldap-servers upgrade hangs or do not upgrade the database (#685119)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-14
changelog:
  - fix update: openldap startup script ignores ulimit settings (#679356)
  - fix update: openldap-servers upgrade hangs or do not upgrade the database (#685119)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-15
changelog:
  - fix: rpm -V fail when upgrading with openldap-devel installed (#693716)
    (remove devel *.so symlinks from /lib and leave them in /usr/lib)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-16
changelog:
  - fix: memleak in tlsm_auth_cert_handler (#717738)
  - fix: segmentation fault of client tool when LDIF input file is not terminated
    by a new line character (#698921)
  - fix: segmentation fault of client tool when input line in LDIF file
    is splitted but indented incorrectly (#701227)
  - fix: server scriptlets require initscripts package (#712358)
  - enable ldapi:/// interface by default
  - set cn=config management ACLs for root user, SASL external schema (#712494)
  - fix: ldapsearch fails if no CA certificate is available (#713525)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-17
changelog:
  - fix: strict aliasing warnings during package build (#723487)
  - add partial RELRO support for libraries (#723999)
  - fix: incorrect behavior of allow/try options of VerifyCert and TLS_REQCERT (#729095)
  - fix: memleak - free the return of tlsm_find_and_verify_cert_key (#729087)
  - fix: TLS_REQCERT=never ignored when the certificate is expired (#722959)
  - fix: matching wildcard hostnames in certificate Subject field does not work (#726984)
  - fix: OpenLDAP server segfaults when using back-sql (#727533)
  - fix: conversion of constraint overlay settings to cn=config is incorrect (#722923)
  - fix: DDS overlay tolerance parametr doesn't function and breakes default TTL (#723514)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-18
changelog:
  - fix: overlay refint option refint_nothing doesn't function correctly (#725479)
  - fix: Unwanted slash printed when installing openldap-servers (#732001)
  - manpage fix: TLS options in documentation are not valid for MozNSS (#684810)
  - fix: NSS_Init* functions are not thread safe (#731168)
  - manpage fix: errors in manual page slapo-unique (#723521) 
  - new feature: honor priority/weight with ldap_domain2hostlist (#730311)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-20
changelog:
  - new feature update: honor priority/weight with ldap_domain2hostlist (#730311)
  - fix regression: openldap built without tcp_wrappers (#742592)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-21
changelog:
  - fix: ldapsearch crashes with invalid parameters (#743781)
  - fix: replication (syncrepl) with TLS causes segfault (#783445)
  - fix: openldap server in MirrorMode sometimes fails to resync via syncrepl (#784211)
  - use portreserve to reserve LDAPS port (636/tcp+udp) (#790687)
  - fix: missing options in manual pages of client tools (#745470)
  - fix: SASL_NOCANON option missing in ldap.conf manual page (#732916)
  - fix: slapd segfaults when certificate key cannot be loaded (#796808)
  - Jan Synáček <jsynacek@redhat.com>
    + fix: overlay constraint with count option work bad with modify operation (#742163)
    + fix: Default SSL certificate bundle is not found by openldap library (#742023)
    + fix: Duplicate close() calls in OpenLDAP (#784203)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-23
changelog:
  - security fix: CVE-2012-1164: assertion failure by processing search queries
    requesting only attributes for particular entry (#813162)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-24
changelog:
  - fix update: Default SSL certificate bundle is not found by openldap library (#742023)
  - fix: memberof overlay on the frontend database causes server segfault (#730745)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-26
changelog:
  - fix: MozNSS CA cert dir does not work together with PEM CA cert file (#818844)
  - fix: memory leak: def_urlpre is not freed (#816168)
  - fix update: Default SSL certificate bundle is not found by openldap library (#742023)


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-26.2
changelog:
  - CVE-2012-2668 (#825875)
    + cipher suite selection by name can be ignored
    + default cipher suite is always selected


author: Jan Vcelak <jvcelak@redhat.com> 2.4.23-29
changelog:
  - fix: invalid order of TLS shutdown operations (#818572)
  - fix: TLS error messages overwriting in tlsm_verify_cert() (#828787)
  - fix: reading pin from file can make all TLS connections hang (#829319)
  - fix: replication with TLS does not work (#707599)
  - fix: some TLS ciphers cannot be enabled (#852339)
  - fix: connection hangs after fallback to second server when certificate hostname verification fails (#843056)
  - fix: not all certificates in OpenSSL compatible CA certificate directory format are loaded (#811468)
  - fix: MozNSS certificate database in SQL format cannot be used (#857390)
  - fix: libldap does not load PEM certificate if certdb is used as TLS_CACERTDIR (#859858)
  - fix: do not send IPv6 DNS queries when IPv6 is disabled on the host (#835012)
  - fix: modification of olcSyncrepl attribute takes server out of MirrorMode (#821848)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-1
changelog:
  - rebase to 2.4.39 (#923680)
    + drop a lot of upstreamed patches, backport the rest
    + compile in mdb
    + remove automatic slapd.conf -> slapd-config conversion


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-3
changelog:
  - add another missing patch forgotten during the rebase
  - fix: enable dynamic linking - unresolved symbols in the smbk5pwd module


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-7
changelog:
  - fix: regression: deadlock during SSL_ForceHandshake when getting connection to replica (#1263477)
    + apply (and modify a little) the patch from commit 1eeaeeb7


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-8
changelog:
  - fix: slapd crash in do_search (#1257543)
  - Fix: Cannot build the package after libtool rebase (#1296129)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-9
changelog:
  - fix: Bad log levels in check_password module (#1255046)
  - [rfe] add informational message about database backup when openldap is updated (#1261651)
  - fix: id_query option is not available after rebasing openldap to 2.4.39 (#1288545)
  - fix: We can't search expected entries from LDAP server (#1212283)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-10
changelog:
  - fix: update description in slapd.conf for NSS database related options (#1131094)
  - fix: check_password minPoints parameter useless (#1255063)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-11
changelog:
  - fix: OpenLDAP doesn't use sane (or default) cipher order (#1300701)
    + Add support for TLSv1.2, and SHA256 and SHA384 ciphers
    + Use what NSS considers default for DEFAULT cipher string.
    + Drop unnecessary hardcoded cipher suites' default flags
    + Update with TLSv1.2 ciphers
  - revert: check_password minPoints parameter useless (#1255063)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-13
changelog:
  - NSS: fix setting olcTLSProtocolMin (#1249092)
  - fix slapd crash in do_search (sc_writewait) (#1340861)
  - NSS: fix parsing code (#1372349)
    + refactor ciphers-related patches
    + fix cipherstring parsing
  - NSS: fix cipher suites' definitions (#1372357)
    + fix some ciphers' flags
    + add new ciphers to match the current NSS
    + add PSK and CHACHA20POLY1305 cipher strings


author: Matus Honek <mhonek@redhat.com> - 2.4.40-14
changelog:
  - NSS: use a hex number for some ciphersuite definitions (#1372357)
  - NSS: fix OpenLDAP crash in NSS shutdown handling (#1373222)
  - fix: rpm -V openldap-servers complains after a clean install (#1263220)


author: Matus Honek <mhonek@redhat.com> - 2.4.40-15
changelog:
  - ITS#8337 fix missing olcDbChecksum config attr (#1397961)
  - ITS#8003 fix off-by-one in LDIF length (#1397949)


author: Jan Synáček <jsynacek@redhat.com> - 2.4.39-10
changelog:
  - revert previous patch (#1172296)
  - fix: crash in ldap_domain2hostlist when processing SRV record (#1164369)
  - support TLS 1.1 and later (#1160467)
  - enhancement: add ppolicy-check-password (#1155390)


author: Matúš Honěk <mhonek@redhat.com> - 2.4.40-7
changelog:
  - fix: regression: deadlock during SSL_ForceHandshake when getting connection to replica (#1267501)
    + apply (and modify a little) the patch from commit 1eeaeeb7


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.5
changelog:
  - fixed SEGV error moving mouse over window related to XmToolTipGetLabel
    (MotifZone bug fix #1388)
    Resolves: rhbz#277381


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-0
changelog:
  - rebase to 2.3.1 (CVS dist release)
    Resolves: rhbz#455736
  - fixes OpenMotif XmList problem
    Resolves: rhbz#405801
  - fixes List.c/ReplaceItem() segfaults when item selected
    Resolves: rhbz#431460
  - fixes [motifzone 1400 ] openmotif/ BadFont on multiple display application
    Resolves: rhbz#438910
  - fixes applications dump core in non-UTF8 environment
    Resolves: rhbz#453722
  - fixes lots of additional bugs: see release notes


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2
changelog:
  - more fixes for unreliable pasting into XmTextField (MotifZone bug #1321)
    Resolves: rhbz#405941
  - the fix for MotifZone bug #1400 is not working for remote displays


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1
changelog:
  - new version 2.3.2 with upstream bug fixes: #1212, #1277, #1473, #1476
  - spec file cleanup
  - make build work with libtool
  - all man pages are utf-8, no need to convert them anymore
  - enabled EditRes support with upstream fix
  - fixed parallel build
  - fixed patches for fuzz 0
    Related: rhbz#543948


author: Thomas Woerner <twoerner@redhat.com> 2.3.2-1.1
changelog:
  - fixes according to review:
  - fixed buildroot
  - removed dot from summary
  - removed dist tag from changelog
  - added source download link


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-2
changelog:
  - fixed LabelGadget draws background over border of its parent (rhbz#584300)
    (MotifZone bug #1517)
  - fixed LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-4
changelog:
  - fixed Label draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1521 refixed)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-5
changelog:
  - fixed use after free with comboboxes and XIM (rhbz#866499)
    (MotifZone bug #1559)
  - fixed border at insertion cursor if XmNmarginWidth is set (rhbz#866496)
    (MotifZone bug #1552)
  - fixed copy/paste problem with Clipboard (rhbz#867463)
    (MotifZone bug #1529)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-5
changelog:
  - fixed border at insertion cursor if XmNmarginWidth is set (rhbz#796014)
    (MotifZone bug #1552)
  - fixed use after free with comboboxes and XIM (rhbz#836892)
    (MotifZone bug #1559)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-7.1
changelog:
  - added lost patch for #647411: openmotif-2.3.3-motifzone_1529.patch
    (rhbz#1096754)
  - fixed missing outline in mwm while moving window (rhbz#1096749)
    (copy of rhbz#997241)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-7.1
changelog:
  - added lost patch for #647411: openmotif-2.3.3-motifzone_1529.patch
    (rhbz#1096315)
  - fixed missing outline in mwm while moving window (rhbz#1000343)
    (copy of rhbz#997241)


author: Thomas Woerner <twoerner@redhat.com> 2.3.3-8
changelog:
  - fixed Label size computed wrong within a Form (rhbz#869782) (rhbz#953938)
    (copy of rhbz#980577)
    (MotifZone bug #1612 final upstream patch with white space changes)
  - fixed segmentation violation in XmList after calling XmListDeleteAllItems 
    and clicking on a new item with left-shift left-button click (rhbz#1058644)
    (MotifZone bug #1636)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-11
changelog:
  - fixed mrm initialization error in MrmOpenHierarchyPerDisplay (#167094)
    Thanks to Arjan van de Ven for the patch.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-16
changelog:
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Upgrade to new upstream version
    This disables openib-ibcm, which is broken in 1.5.3
    This brings in esmtp and valgrind memchecker support from Fedora
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> - 1.5.3-1
changelog:
  - Conditionalize the psm and psm-devel subpackages, to keep rpmbuild
    from trying to build them on ppc
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> - 1.5.3-2
changelog:
  - Fix the rpm macros for the -psm subpackage, so we can build
    a -psm varient of mpitests
    Related: rhbz725016


author: Jay Fenlason <fenlason@redhat.com> 1.5.4-1
changelog:
  - Clean up provides and requires to close
    Resolves: rhbz768457
  - Remove and obsolete the -psm variants that have been folded into the main
    packages.
    Resolves: rhbz758618
  - New upstream version
    Resolves: rhbz768109
    Related: rhbz739138


author: Jay Fenlason <fenlason@redhat.com> 1.5.4-2
changelog:
  - Fix the build process by getting rid of the -build patch
    and autogen to fix
    Resolves: rhbz749115


author: Michal Schmidt <mschmidt@redhat.com> 1.10.1-1
changelog:
  - Update to 1.10.1.
  - Backport additional fixes from Fedora.
    - Fortran module install (bug #1154982)
    - Add upstream patch to fix zero size message
    Resolves: rhbz1130442, rhbz1142168


author: Michal Schmidt <mschmidt@redhat.com> 1.10.2-1
changelog:
  - Update to 1.10.2.
  - Use versioned directory and module names "openmpi-1.10",
    "openmpi-1.10-$arch".
    The unversioned names remain with openmpi-1.8 (built from compat-openmpi).
  - Related: rhbz1130442


author: Michal Schmidt <mschmidt@redhat.com> 1.10.2-2
changelog:
  - Name the binary package "openmpi-1.10". The provide name "openmpi"
    remains to openmpi-1.8 for maximum compatibility with RHEL 6.7.
  - Related: rhbz1130442


author: Doug Ledford <dledford@redhat.com> - 1.4-1
changelog:
  - Update to latest upstream stable version
  - Add support for libibcm usage
  - Enable sge support via configure options since it's no longer on by default
  - Add patch to resolve allreduce issue (bz538199)
  - Remove no longer needed patch for Chelsio cards


author: Doug Ledford <dledford@redhat.com> - 1.4-3
changelog:
  - Fix pkgconfig file substitution
  - Bump version so we are later than the equivalent version from Red Hat
    Enterprise Linux


author: Jay Fenlason <fenlason@redhat.com> - 1.4.1-1
changelog:
  - New upstream version, which includes the changeset_r22324 patch.
  - Correct a typo in the Source0 line in this spec file.


author: Jay Fenlason <fenlason@redhat.com> - 1.4.1-4
changelog:
  - Update to fix licencing and packaging issues:
    Use the system plpa and ltdl librarires rather than the ones in the tarball
    Remove licence incompatible files from the tarball.
  - update module.in to prepend-path		PYTHONPATH


author: Jay Fenlason <fenlason@redhat.com> - 1.4.1-4.2
changelog:
  - BuildRequire the infinipath-psm package to pull in support
    for it on x86_64.
    Related: rhbz570274


author: Jay Fenlason <fenlason@redhat.com> - 1.4.1-4.3
changelog:
  - Split the psm support packages into their own rpms to close
    Resolves: rhbz616575 openmpi does not work with non-infinipath hardware


author: Caolán McNamara <caolanm@redhat.com> - 1:3.2.0-12.7
changelog:
  - Resolves: rhbz#601599 openoffice.org-3.3.0.ooo100686.wizards.types.not.mediatypes.patch
  - Resolves: rhbz#577823 openoffice.org-3.3.0.ooo112247.vcl.workaround.overlarge.replacements.patch


author: Caolán McNamara <caolanm@redhat.com> - 1:3.2.0-12.9
changelog:
  - Resolves: rhbz#603043/ooo#112386 improve gtk fpicker stability
  - Resolves: rhbz#603013/ooo#112363 avoid a11y crash


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.1
changelog:
  - Resolves: rhbz#642200 openoffice.org various flaws
  - CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
    descriptions and OXT extension files
  - CVE-2010-3451 Array index error by insecure parsing of broken rtf
    tables
  - CVE-2010-3452 Integer signedness error (crash) by processing certain
    RTF tags
  - CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
    with WW8 list styles with specially-crafted count of list levels
  - CVE-2010-3454 Array index error by scanning document typography
    information of certain *.doc files
  - CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.2
changelog:
  - Resolves: rhbz#642200 openoffice.org various flaws
  - CVE-2010-4253 heap based buffer overflow in PPT import


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.3
changelog:
  - Resolves: rhbz#642200 openoffice.org various flaws
  - CVE-2010-4643 heap based buffer overflow when parsing TGA files


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.6
changelog:
  - Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
    overflows in JPEG, PNG and BMP reader implementations


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.6.7
changelog:
  - Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
    processing invalid Escher graphics records length in the Powerpoint
    documents


author: Šimon Lukašík <slukasik@redhat.com> - 1.2.7-1
changelog:
  - upgrade to the latest upstream release (#1259037)
  - Introduced '--verbose' mode (#1287295)
  - Detailed OVAL results present in HTML report (#1140240)
  - fixed issues in scap-as-rpm tool (#1226398, #1258958)
  - introduced support for non-decimal OVAL vetsions (#1248378)
  - 'oscap oval eval --report' command (#1258958)
  - 'oscap xccdf generate --profile <custom-profile> guide' (#1139822)


author: Watson Sato <wsato@redhat.com> - 1.2.11-1
changelog:
  - Upgrade to the latest upstream release
  - NIST certified OpenSCAP (#1364207)
  - Huge speed-up of generating HTML reports and guides
  - Support remote datastream components
  - Support tailoring of external datastreams
  - New option generating OVAL results without system characteristics
  - Support for extracting Ansible playbooks
  - Enabled fetching remote resources in OVAL module
  - Support --benchmark-id when running `oscap xccdf generate guide`
  - Enabled offline scanning in many probes
  - Added and updated various CPEs
  - Fixed manual page for oscap-ssh (#1299969)


author: Martin Preisler <mpreisle@redhat.com> - 1.2.12-1
changelog:
  - Upgrade to the latest upstream release
  - improved HTML report by referencing links
  - fixed validity errors in ARF files
  - fixed CVE parsing
  - fixed injecting xccdf:check-content-ref references in ARF results
  - fixed oscap-docker incompliance reporting (#1387248)
  - fixed oscap-docker man page (#1387166)


author: Doug Ledford <dledford@redhat.com> - 3.3.5-1
changelog:
  - Update to latest upstream release.  We need various defines in ib_types.h
    for the latest ibutils package to build properly, and the latest ibutils
    package is needed because we found licensing problems in the older
    tarballs during review.


author: Doug Ledford <dledford@redhat.com> - 3.3.9-1
changelog:
  - Update to latest upstream version (3.3.5 -> 3.3.9)
  - Add /etc/sysconfig/opensm for use by opensm init script
  - Enable the ability to start more than one instance of opensm for multiple
    fabric support
  - Enable the ability to start opensm with a priority other than default for
    support of backup opensm instances
  - Related: bz725016
  - Resolves: bz633392


author: Doug Ledford <dledford@redhat.com> - 3.3.12-1
changelog:
  - Generate the opensm.conf file instead of shipping a static one as a source
  - Update to latest upstream release (FDR link speed support)
  - Resolves: bz750609


author: Doug Ledford <dledford@redhat.com> - 3.3.13-1
changelog:
  - Update to latest upstream release
  - Add patch to support specifying subnet_prefix on command lien
  - Update init script to pass unique subnet_prefix's when using the GUID
    method of starting multiple instances
  - Fix up LSB init script headers
  - Resolves: bz754196


author: Doug Ledford <dledford@redhat.com> - 3.3.15-1
changelog:
  - Update to latest upstream source (adds more SRIOV support)
  - Fix init script when no config files are present
  - Related: bz756396


author: Tim Waugh <twaugh@redhat.com> 1.5.2-4
changelog:
  - Fixed build root.
  - Give IDs to nodes in the release notes source to prevent releasenotes.html
    having multilib conflicts (bug #228320).


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-95
changelog:
  - adjust the key echange DH groups and ssh-keygen according to SP800-131A (#993580)
  - log failed integrity test if /etc/system-fips exists (#1020803)
  - backport ECDSA and ECDH support (#1028335)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-96
changelog:
  - prevent a server from skipping SSHFP lookup (#1081338) CVE-2014-2653
  - ignore environment variables with embedded '=' or '\0' characters CVE-2014-2532
  - backport ControlPersist option (#953088)
  - log when a client requests an interactive session and only sftp is allowed (#997377)
  - don't try to load RSA1 host key in FIPS mode (#1009959)
  - restore Linux oom_adj setting when handling SIGHUP to maintain behaviour over restart
    (#1010429)
  - ssh-keygen -V - relative-specified certificate expiry time should be relative to current time
    (#1022459)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-97
changelog:
  - x11 forwarding - be less restrictive when can't bind to one of available addresses
    (#1027197)
  - better fork error detection in audit patch (#1028643)
  - fix openssh-5.3p1-x11.patch for non-linux platforms (#1100913)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-98
changelog:
  - add possibility to autocreate only RSA key into initscript (#1111568)
  - fix several issues reported by coverity


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-105
changelog:
  - Fix ControlPersist option with ProxyCommand (#1160487)
  - Backport fix of ssh-keygen with error : gethostname: File name too long (#1161454)
  - Backport show remote address instead of UNKNOWN after timeout at password prompt (#1161449)
  - Fix printing of extensions in v01 certificates (#1093869)
  - Fix confusing audit trail for unsuccessful logins (#1127312)
  - Don't close fds for internal sftp sessions (#1085710)
  - Fix config parsing quotes (backport) (#1134938)
  - Enable logging in chroot into separate file (#1172224)
  - Fix auditing when using combination of ForcedCommand and PTY (#1131585)
  - Fix ssh-copy-id on non-sh remote shells (#1135521)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-106
changelog:
  - Add missing ControlPersist option to man ssh (#1197763)
  - Add sftp option to force mode of created files (#1191055)
  - Do not load RSA1 keys in FIPS mode (#1197072)
  - Add missing support for ECDSA in ssh-keyscan (#1196331)
  - Fix coverity/gcc issues (#1196063)
  - Backport wildcard functionality for PermitOpen in sshd_config file (#1159055)
  - Ability to specify an arbitrary LDAP filter in ldap.conf (#1119506)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-109
changelog:
  - Fix problems with failing persistent connections (#1131585)
  - Fix memory leaks in auditing patch (#1208584)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-110
changelog:
  - Fix minor problems found by covscan/gcc (#1196063)
  - Add missing options in man ssh (#1197763)
  - Add KbdInteractiveAuthentication documentation to man sshd_config (#1109251)
  - Correct freeing newkeys structure when privileged monitor exits (#1208584)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-113
changelog:
  - Fix segfaulting agent during removal of CAC credentials (#1253612)
  - Make  pam_namespace  usage consistent across system-wide (#1250069)
  - Add GSSAPIKexAlgorithms option for both server and client (#1253060)
  - ECDSA host key not loaded by sshd by default (fix man page) (#1218070)
  - Resolve segfault in pam_ssh_agent_auth in FIPS mode (#1278315)
  - Backport Match LocalAddress from OpenSSH 6.1 (#1211673)
  - Backport security patches from openssh-6.9 and 7.0 (#1281468)
  -  CVE-2015-5352: XSECURITY restrictions bypass under certain conditions
  -  CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices
  -  CVE-2015-6563: Privilege separation weakness related to PAM support
  -  CVE-2015-6564: Use-after-free bug related to PAM support
  -  weakness of agent locking (ssh-add -x) to password guessing (#1238238)
  - Clarify a keyword that appears in multiple matching Match blocks (#1219820)
  - Clarity of TERM variable in AcceptEnv and SendEnv options (#1285003)
  - Enhance AllowGroups documentation in man page (#1284997)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-114
changelog:
  - pam_ssh_agent_auth: Provide authorized_keys_command= feature (#1299555)
  - CVE-2016-1908: Prevent possible fallback from untrusted X11 forwarding (#1299048)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-116
changelog:
  - Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
  - Initialize devices_done variable for challenge response (#1281468)
  - Update behaviour of X11 forwarding to match upstream (#1299048)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-119
changelog:
  - Resolve sftp force permission colision with umask (#1341747)
  - Relax bits needed check to allow hmac-sha2-512 with gss-group1-sha1- (#1353359)
  - close ControlPersist background process stderr when not in debug mode (#1335539)
  - Do not add a message "The agent has no identities." in ~/.ssh/authorized_keys (#1353410)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-120
changelog:
  - Prevent infinite loop when Ctrl+Z pressed at password prompt (#1218424)
  - Remove RC4 cipher and MD5 based MAC from the default client proposal (#1373836)


author: Jakub Jelen <jjelen@redhat.com> - 5.3p1-122
changelog:
  - Allow to use ibmca crypto hardware (#1397547)
  - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-70.1
changelog:
  - enable aes-ctr ciphers use the EVP engines from OpenSSL such as the AES-NI (#756929)
  - add CAVS test driver for the aes-ctr ciphers (#782091)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-73
changelog:
  - remove openssh-4.3p2-no-v6only.patch (#732955)
  - adjust Linux out-of-memory killer (#744236)
  - fix sshd init script - check existence of crypto (#797384)
  - add RequiredAuthentications[12] (#657378)
  - run privsep slave process as the users SELinux context (#798241)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-82
changelog:
  - check return value of PK11_Authenticate in ssh-add -n (#782912)
  - document available methods to RequiredAuthentications[12] (#821641)
  - fix ssh-copy-id (#836650)
  - fix segmentation fault in ssh client (#836655)
  - update pam_ssh_agent_auth to 0.9.3 upstream version
  - fix segfault in su when pam_ssh_agent_auth is used and the ssh-agent
    is not running (#834404)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-85
changelog:
  - fix chroot logging issue (#872169)
  - change the bad key permissions error message (#880575)
  - fix a race condition in ssh-agent (#896561)
  - backport support for PKCS11 from openssh-5.4p1 (#908038)
  - add a KexAlgorithms knob to the client and server configuration (#951704)
  - fix parsing logic of ldap.conf file (#954094)
  - Add HMAC-SHA2 algorithm support (#969565)
  - store krb5 credentials after a pam session is created (#974096)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-86
changelog:
  - Add support for certificate key types for users and hosts (#906872)
  - Apply RFC3454 stringprep to banners when possible (#955792)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-87
changelog:
  - bump the minimum value of SSH_USE_STRONG_RNG to 14 according to SP800-131A (#993577)
  - fixed an issue with broken 'ssh -I pkcs11' (#908038)
  - abort non-subsystem sessions to forced internal sftp-server (#993509)
  - reverted 'store krb5 credentials after a pam session is created (#974096)'


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-90
changelog:
  - change default value of MaxStartups - CVE-2010-5107 - #908707
  - add -fips subpackages that contains the FIPS module files (#1001565)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-2
changelog:
  - make CA dir readable - the private keys are in private subdir (#584810)
  - a few fixes from upstream CVS
  - make X509_NAME_hash_old work in FIPS mode (#568395)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-3
changelog:
  - fix wrong ASN.1 definition of OriginatorInfo - CVE-2010-0742 (#598738)
  - fix information leak in rsa_verify_recover - CVE-2010-1633 (#598732)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-7
changelog:
  - listen on ipv6 wildcard in s_server so we accept connections
    from both ipv4 and ipv6 (#601612)
  - fix openssl speed command so it can be used in the FIPS mode
    with FIPS allowed ciphers (#619762)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-8
changelog:
  - add -x931 parameter to openssl genrsa command to use the ANSI X9.31
    key generation method
  - use FIPS-186-3 method for DSA parameter generation
  - add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable
    to allow using MD5 when the system is in the maintenance state
    even if the /proc fips flag is on
  - make openssl pkcs12 command work by default in the FIPS mode


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-15
changelog:
  - better documentation of the available digests in apps (#693858)
  - backported CHIL engine fixes (#693863)
  - allow testing build without downstream patches (#708511)
  - enable partial RELRO when linking (#723994)
  - add intelx engine with improved performance on new Intel CPUs
  - add OPENSSL_DISABLE_AES_NI environment variable which disables
    the AES-NI support (does not affect the intelx engine)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-16
changelog:
  - merge the optimizations for AES-NI, SHA1, and RC4 from the intelx
    engine to the internal implementations


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-20.1
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4577 - possible DoS through malformed RFC 3779 data (#771778)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-20.3
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-20.5
changelog:
  - fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)
  - properly initialize tkeylen in the CVE-2012-0884 fix


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-25.1
changelog:
  - use PKCS#8 when writing private keys in FIPS mode as the old
    PEM encryption mode is not FIPS compatible (#812348)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-27
changelog:
  - fix sslrand(1) and sslpasswd(1) reference in openssl(1) manpage (#841645)
  - drop superfluous lib64 fixup in pkgconfig .pc files (#770872)
  - force BIO_accept_new(*:<port-number>) to listen on IPv4


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-27.2
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.17.beta4
changelog:
  - upstream fix compression handling on session resumption
  - various null checks and other small fixes from upstream
  - upstream changes for the renegotiation info according to the latest draft


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.19.beta4
changelog:
  - fix CVE-2009-4355 - leak in applications incorrectly calling
    CRYPTO_free_all_ex_data() before application exit (#546707)
  - upstream fix for future TLS protocol version handling


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.21.beta5
changelog:
  - gracefully handle zero length in assembler implementations of
    OPENSSL_cleanse (#564029)
  - do not fail in s_server if client hostname not resolvable (#561260)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-15
changelog:
  - make DTLS1 work in FIPS mode
  - avoid RSA and DSA 512 bits and Whirlpool in 'openssl speed' in FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-16.14
changelog:
  - fix CVE-2010-5298 - possible use of memory after free
  - fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment
  - fix CVE-2014-0198 - possible NULL pointer dereference
  - fix CVE-2014-0221 - DoS from invalid DTLS handshake packet
  - fix CVE-2014-0224 - SSL/TLS MITM vulnerability
  - fix CVE-2014-3470 - client-side DoS when using anonymous ECDH


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-16.15
changelog:
  - fix CVE-2014-3505 - doublefree in DTLS packet processing
  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  - fix CVE-2014-3507 - avoid memory leak in DTLS
  - fix CVE-2014-3508 - fix OID handling to avoid information leak
  - fix CVE-2014-3509 - fix race condition when parsing server hello
  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS
  - fix CVE-2014-3511 - disallow protocol downgrade via fragmentation


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-21
changelog:
  - add DH_compute_key_padded needed for FIPS CAVS testing
  - make 3des strength to be 128 bits instead of 168 (#1056616)
  - FIPS mode: do not generate DSA keys and DH parameters < 2048 bits
  - FIPS mode: use approved RSA keygen (allows only 2048 and 3072 bit keys)
  - FIPS mode: add DH selftest
  - FIPS mode: reseed DRBG properly on RAND_add()
  - FIPS mode: add RSA encrypt/decrypt selftest
  - FIPS mode: add hard limit for 2^32 GCM block encryptions with the same key
  - use the key length from configuration file if req -newkey rsa is invoked


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-26
changelog:
  - drop EXPORT, RC2, and DES from the default cipher list (#1057520)
  - print ephemeral key size negotiated in TLS handshake (#1057715)
  - do not include ECC ciphersuites in SSLv2 client hello (#1090952)
  - properly detect encryption failure in BIO (#1100819)
  - fail on hmac integrity check if the .hmac file is empty (#1105567)
  - FIPS mode: make the limitations on DSA, DH, and RSA keygen
    length enforced only if OPENSSL_ENFORCE_MODULUS_BITS environment
    variable is set


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-30.2
changelog:
  - fix CVE-2014-3567 - memory leak when handling session tickets
  - fix CVE-2014-3513 - memory leak in srtp support
  - add support for fallback SCSV to partially mitigate CVE-2014-3566
    (padding attack on SSL3)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-30.5
changelog:
  - fix CVE-2014-3570 - incorrect computation in BN_sqr()
  - fix CVE-2014-3571 - possible crash in dtls1_get_record()
  - fix CVE-2014-3572 - possible downgrade of ECDH ciphersuite to non-PFS state
  - fix CVE-2014-8275 - various certificate fingerprint issues
  - fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
    ciphersuites and on server
  - fix CVE-2015-0205 - do not allow unauthenticated client DH certificate
  - fix CVE-2015-0206 - possible memory leak when buffering DTLS records


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-30.6
changelog:
  - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey()
  - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0292 - integer underflow in base64 decoder
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-30.8
changelog:
  - drop the AES-GCM restriction of 2^32 operations because the IV is
    always 96 bits (32 bit fixed field + 64 bit invocation field)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-30.9
changelog:
  - fix CVE-2015-4000 - prevent the logjam attack on client - restrict
    the DH key size to at least 768 bits (limit will be increased in future)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-30.10
changelog:
  - fix CVE-2014-8176 - invalid free in DTLS buffering code
  - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
  - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
  - fix CVE-2015-1791 - race condition handling NewSessionTicket
  - fix CVE-2015-1792 - CMS verify infinite loop with unknown hash function
  - fix CVE-2015-3216 - regression in RAND locking that can cause segfaults on
    read in multithreaded applications


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-30.11
changelog:
  - improved fix for CVE-2015-1791
  - add missing parts of CVE-2015-0209 fix for corectness although unexploitable


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-30.6
changelog:
  - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey()
  - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0292 - integer underflow in base64 decoder
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-34
changelog:
  - copy digest algorithm when handling SNI context switch
  - improve documentation of ciphersuites - patch by Hubert Kario
  - add support for setting Kerberos service and keytab in
    s_server and s_client


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-39
changelog:
  - fix CVE-2015-3216 - regression in RAND locking that can cause segfaults on
    read in multithreaded applications


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-40
changelog:
  - fix CVE-2014-8176 - invalid free in DTLS buffering code
  - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
  - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
  - fix CVE-2015-1791 - race condition handling NewSessionTicket
  - fix CVE-2015-1792 - CMS verify infinite loop with unknown hash function


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-42.1
changelog:
  - fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
  - fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
  - fix CVE-2015-3196 - race condition when handling PSK identity hint


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-42.4
changelog:
  - fix CVE-2016-0702 - side channel attack on modular exponentiation
  - fix CVE-2016-0705 - double-free in DSA private key parsing
  - fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-46
changelog:
  - fix 1-byte memory leak in pkcs12 parse (#1229871)
  - document some options of the speed command (#1197095)


author: Connie Sieh <csieh@fnal.gov 1.0.1e-48
changelog:
  - backport upstream commit to replace expired testing certificates
    for S/MIME tests (#1335097)
  - Not changing version as next RHEL version will need this patch


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48.1
changelog:
  - fix CVE-2016-2105 - possible overflow in base64 encoding
  - fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
  - fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
  - fix CVE-2016-2108 - memory corruption in ASN.1 encoder
  - fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
  - fix CVE-2016-0799 - memory issues in BIO_printf


author: Connie Sieh <csieh@fnal.gov> 1.0.1e-48.el6_8.1
changelog:
  - backport upstream commit to replace expired testing certificates
    for S/MIME tests (#1335097)
  - Not changing version since next RHEL version will need this


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48.3
changelog:
  - fix CVE-2016-2177 - possible integer overflow
  - fix CVE-2016-2178 - non-constant time DSA operations
  - fix CVE-2016-2179 - further DoS issues in DTLS
  - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
  - fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
  - fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
  - fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
  - fix CVE-2016-6304 - unbound memory growth with OCSP status request
  - fix CVE-2016-6306 - certificate message OOB reads
  - mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
    112 bit effective strength
  - replace expired testing certificates


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48.4
changelog:
  - fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher
  - fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-52
changelog:
  - deprecate and disable verification of insecure hash algorithms
  - disallow DH keys with less than 1024 bits in TLS client
  - remove support for weak and export ciphersuites
  - use correct digest when exporting keying material in TLS1.2 (#1376741)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-8
changelog:
  - support multiple CRLs with same subject in a store (#457134)
  - fix CVE-2009-0590 - reject incorrectly encoded ASN.1 strings (#492304)
  - seed FIPS rng directly from kernel random device
  - do not require fipscheck to build the package (#475798)
  - call pairwise key tests in FIPS mode only (#479817)
  - do not crash when parsing bad mime data (#472440)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-13
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-14
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-15
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-20.1
changelog:
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server
  - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
  - disable SSLv2 in the generic TLS method


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.23-1
changelog:
  - New upstream release
  - Supports smartcards now
  - Supports PSK with NSS
  - Supports libcap-ng for lowering capabilities of pluto process 
  - Updated README.nss


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-1
changelog:
  - New upstream release
  - Cisco interop patches
  - Improved init script
  - Fix to allow ";" in the ike/esp parameters
  - Fix to unset IKEv2 Critical flag for payloads defined in RFC 4306
  - Fix to Zeroize ISAKMP and IPsec SA's when in FIPS mode
  - Fix to the issue where Some programs were installed
    twice causing .old files
  - lwdns.req.log moved from /var/tmp/ to /var/run/pluto/ .
    This is to avoid an SElinux AVC Denial
  - Fix for the issueo where ipsec help shows the list twice
  - Fix for compile time warnings


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-2
changelog:
  - Modified summary in spec file
  - Replaced buildroot with RPM_BUILD_ROOT in spec file
  - Included html files in the doc package
  - Patch for disabling openswan startup at the system
    boot by default


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-3
changelog:
  Resolves: #568355 Implementation of new Diffie-Hellman groups 
                    described in RFC 5114
  Resolves: #568493 Pluto's child process can not add routes
  Resolves: #568648 some subcommand doesn't work
  Resolves: #568652 the transport mode doesn't work
  Resolves: #574833 Openswan client can not interop with 
                    Cisco VPN servers
  Resolves: #574839 ImplicitDSOLinking
  Resolves: #574841 Openswan Implementation issue related to 
                    hardcoded length of hash algorithms


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.24-4
changelog:
  Resolves: #579629
  Resolves: #584224
  Resolves: #586420
  Resolves: #592630
  Resolves: #594767
  Resolves: #579747
  Resolves: #587669


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-1
changelog:
  Resolves: 642722
  Resolves: 642724
  Resolves: 646718
  Resolves: 628879
  Resolves: 621790
  Resolves: 668785
  Resolves: 658253
  Resolves: 658121


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-7
changelog:
  Resolves: #737973
  Resolves: #737975
  Resolves: #737976
  Resolves: #738385
  Resolves: #742632
  Resolves: #742070


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-11
changelog:
  Resolves: #813192
  Resolves: #813194
  Resolves: #813355
  Resolves: #813356
  Resolves: #813357
  Resolves: #813360
  Resolves: #813362
  Resolves: #813364
  Resolves: #813366
  Resolves: #813372
  Resolves: #813378
  Resolves: #813379
  Resolves: #813565
  Resolves: #814600


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-11
changelog:
  Resolves: #771464
  Resolves: #771465
  Resolves: #771466
  Resolves: #771467
  Resolves: #771473
  Resolves: #771475


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-21.1
changelog:
  - Resolves: #1013971 - Openswan does not support IKE Fragmentation extension
  - Resolves: #1013985 - Openswan does not support RFC2407 Notify Payload
  - Resolves: #1012736 - initial loading of CRL always fails on pluto startup
  - Resolves: #1012735 - crl signature verification failure in when input signature is stripped of all leading zeros
  - Resolves: #1015810 - openswan does not allow SHA2 auth algorithms under FIPS


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-21.2
changelog:
  - Resolves: #1013925 - Openswan does not fully establish IKE tunnel with modecfgclient disabled 
  - Resolves: #1013984 - NAT-T transport bug affects Openswan+L2TP connections with NATed clients


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-21
changelog:
  - Resolves: rhbz#975550 ikev2 md5 hash results in incorrect policy
  - Resolves: rhbz#985596 openswan does not allow SHA2 auth algorithms under FIPS mode 
  - Resolves: rhbz#881914 openswan doesn't support SHA2 certificates
  - Resolves: rhbz#954249 barf and look should not cause loading of kernel modules
  - Resolves: rhbz#954249 barf and look should not cause loading of kernel modules
  - Resolves: rhbz#960235 CVE-2013-2053: remote buffer overflow in atodn()
  - Resolves: rhbz#963833 Abort pluto on crypto failure to prevent plaintext / nonce leak
  - Resolves: rhbz#771612 ipsec barf should not grep sparse file
  - Resolves: rhbz#841325 leftmodecfgclient=no causes rekey failure [Avesh]
  - Resolves: rhbz#848132 dpdaction=restart can cause full phase1 timeout after DPD [Avesh]
  - Resolves: rhbz#880004 Backported libreswan IKE fragmentation support 
  - Resolves: rhbz#908476 Backported libreswan INITIAL-CONTACT Notify support
  - Resolves: rhbz#796683 Backported libreswan USERCOMPILE with -fno-strict-aliasing
  - Resolves: rhbz#959568 Backported libreswan nat_keepalive=yes|no (default yes) option
  - Resolves: rhbz#916743 Backported libreswan control transmission delay timing
  - Resolves: rhbz#959566 Backported libreswan ikeping compile warnings
  - Resolves: rhbz#957400 Openswan did not load aesni_intel kernel module
  - Resolves: rhbz#960171 Initial loading of CRL always fails on pluto startup [Matt Rogers]
  - Resolves: rhbz#958969 Crl signature verification failure in when input signature is stripped of all leading zeros
  - Resolves: rhbz#868986 Fix for RDN values containing a comma [Matt Rogers]
  - Resolves: rhbz#747966 Missing else keyword


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-23
changelog:
  - Resolves: rhbz#998587 underspecific build requires (of nss)
  - Resolves: rhbz#1002312 IKEv2 skeyseed calculation only succeeds because of unspecified compiler behaviour
  - Resolves: rhbz#1002633 openswan needs -fips subpackage that would provide the FIPS hmac files


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-27.3
changelog:
  - Resolves: rhbz#1089395 pluto doesn't bring up sourceip route when peer restarts
  - Resolves: rhbz#1090273 openswan breaks NAT-T draft clients
  - Resolves: rhbz#1090614 pluto cannot write to directories not owned by root


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-31
changelog:
  - Resolves: rhbz#1088656 pluto doesn't bring up sourceip route when peer restarts
  - Resolves: rhbz#1070356 openswan breaks NAT-T draft clients
  - Resolves: rhbz#1041576 (pluto cannot write to directories not owned by root)
  - Resolves: rhbz#1025687 service ipsec stop shows errors about unloading used modules
  - Resolves: rhbz#1092913 The default nss database created by ipsec can not be used
  - Resolves: rhbz#1105179 ipsec_auto --ready doesn't work properly
  - Resolves: rhbz#1002708 rightid=%fromcert does not use the ID from the offered peer certificate
  - Resolves: rhbz#908478  Openswan is sending DPD and/or NAT-T keep alive messages when the IPsec SA is active
  - Resolves: rhbz#970349  ikev2 pending SA and rekey issues
  - Resolves: rhbz#970279  ikev2=insist allows an ikev1 proposal when acting as responder
  - Resolves: rhbz#988106  strict checking of phase2alg= parameters allows mismatched policy
  - Resolves: rhbz#1019746 ipsec ikeping does not recognize --exchangenum parameter
  - Resolves: rhbz#1018327 ipsec.conf man page lacks example for AES-GCM configuration
  - Resolves: rhbz#730975  Openswan doesn't work with ike=modp1536 option
  - Resolves: rhbz#1021961 pluto abort when using SHA2_{384,512} IKE encryption algorithm
  - Resolves: rhbz#739949  Openswan net-to-net not work with unencrypted connection on specific port
  - Resolves: rhbz#993124  ikev2 delete payloads are not delivered to peer
  - Resolves: rhbz#834397  ikev2 crashes when firing up a few conns at once
  - Resolves: rhbz#1099871  Missing man-page ipsec_whack


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-32
changelog:
  - Resolves: rhbz#1092913 create nss db before startup if not there
  - Resolves: rhbz#1098473 ipsec newhostkey returns 0 even if it fails (and enforce min 2192 RSA key size)
  - Resolves: rhbz#1114683 configuring a non-standard ESP algorithm (like CAST) cause a restart of pluto
  - Resolves: rhbz#1126066 dcookie code enabled with force_busy=yes uses bad pointer causing restart


author: Paul Wouters <pwouters@redhat.com> - 2.6.32-35
changelog:
  - Resolves: rhbz#1114683 configuring a non-standard AH / ESP algorithm [updated]
  - Resolves: rhbz#993124 ikev2 delete - work around to unbreak -fstack-protector [updated]


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.32-4.1
changelog:
  Resolves: #718078: zstream clone of 711975
  Resolves: #712114: zstream clone of 703985
  Resolves: #712112: zstream clone of 703473
  Resolves: #712168: zstream clone of 704548


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.3-7
changelog:
  - Add missing openwsman headers to libwsman-devel
    Resolves: #615922
  - Move initscript to the right place
    Resolves: #626773
  - Fix return values from initscript according to guidelines
    Resolves: #613031
  - Fix ssl check behaviour in initscript
    Resolves: #617549
  - Fix openwsman crashes when sfcb is stopped
    Resolves: #625160


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.3-11
changelog:
  - Additional PAM config fixes
    (use pam_cracklib.so instead of pam_pwcheck.so,
    remove "none" option from session type check - pam_unix.so desn't have it)
    Related: #1152654


author: Praveen K Paladugu <praveen_paladugu@dell.com> - 2.2.0-1
changelog:
  - Updated the sources to 2.2.0. Couple of major changes are as follows:
  - Major changes:
  -       Adapt IANA ports of 5985 (http) and 5986 (https)
  -       Change the Ruby bindings module name to 'Openwsman'
  -       Change the Ruby plugin module name to 'Openwsman'
  -       IPv6 support (A_Venkatachalam@Dell.com)
  -       preliminary support for wbem intrinsic operations
  -           'EnumerateClassNames' and 'GetClass' (kkaempf@suse.de)
  -            (needs fixed sblim-sfcc, see www.openwsman.org for details)


author: Will Cohen <wcohen@redhat.com> - 0.9.6-5
changelog:
  - Handle debuginfo section differences. rhbz #591538
  - Produce a 32-bit ppc oprofile packages for java support. rhbz #463223


author: Will Cohen <wcohen@redhat.com> - 0.9.6-10
changelog:
  - Corrections for i386/arch_perfmon filters.
  - Make nehalem events available.
  - Add AMD family 12/14/15h support. Resolves: rhbz #650126
  - Add Intel westmere support. Resolves: rhbz #643478
  - opcontrol numeric argument checking. Resolves: rhbz #589638


author: Will Cohen <wcohen@redhat.com> - 0.9.5-3
changelog:
  - Allow timer mode to work.
  - Correct location for addditional files in man pages. Resolves: rhbz #508669


author: Daniel Mach <dmach@redhat.com> - 0.9.9-5
changelog:
  - Update Intel Haswell events.
  - Add support for Intel Silvermont (Avoton).
  - Add support for Intel Broadwell.
  - Add support for aarch64.
  - Update IBM power8 events.


author: William Cohen <wcohen@redhat.com> - 0.9.9-12
changelog:
  - Add support for Intel Xeon D. rhbz1231399
  - Add support for Intel Skylake Mobile/Desktop processors. rhbz1254764
  - Fix coverity warnings. rhbz1206242


author: Weiping Pan <wpan@redhat.com> 2.0.8.rh1 2
changelog:
  - rebuild oracleasm for RHEL6.5, sync to upstream commit d368091e98dc
  - (oracleasm: Add support for new error return codes from block/SCSI)


author: Weiping Pan <wpan@redhat.com> 2.0.8 4
changelog:
  - add  .clear_inode callback, fix bug 1157408.
  - rebuild oracleasm for RHEL6.6 in brew, update the version to 2.0.8-4


author: Matthew Harmsen <mharmsen@redhat.com> 1.3.0-2
changelog:
  - Bugzilla Bug #521983 -  New package for Dogtag PKI: osutil
  - Complied with Fedora JNI packaging logic


author: Matthew Harmsen <mharmsen@redhat.com> 1.3.0-3
changelog:
  - Bugzilla Bug #521983 -  New package for Dogtag PKI: osutil
  - Removed LICENSE logic from installation section
  - Take ownership of library directory


author: Matthew Harmsen <mharmsen@redhat.com> 2.0.1-1
changelog:
  - Removed version information from NSPR and NSS build/runtime requires
  - Bugzilla Bug #638377 - Generate PKI UI components which exclude
    a GUI interface
  - Bugzilla Bug #643206 - New CMake based build system for Dogtag
  - Bugzilla Bug #644056 - CS build contains warnings
  - Bugzilla Bug #667556 - Consolidate 'osutil' SVN source code with
    'osutil' GIT source code


author: Mike Burns <mburns@redhat.com> 1.9.3-19
changelog:
  - unblacklist utf8 locale rhbz#676105
  - support lsb_release -r rhbz#676108
  - Generalize fstype checks to any ext fs rhbz#676112
  - Fix installer issues with unmounting/mounting of logging services rhbz#680421
  - Fix firstboot menu appearing after installation rhbz#679655
  - RHEV-H UI fixes rhbz#679428 rhbz#636366


author: Mike Burns <mburns@redhat.com> 1.9.3-20
changelog:
  - Include rhevm configuration plugin rhbz#682162
  - Boot failed on cciss storage rhbz#681164
  - Re-install failed to cleanup 5.x installations rhbz#676988
  - dhcp was getting the incorrect gateway address rhbz#676775
  - serial console not operating correctly rhbz#676969
  - SSH configuration not persisted correctly rhbz#681100
  - Include uninstall functionality rhbz#632491 rhbz#626662
  - Autoinstall continues even if image installation fails rhbz#681938
  - Autoinstall intermittently fails on multipath devices rhbz#682005
  - RHEV-H UI fixes rhbz#683331 rhbz#682107 rhbz#681735 rhbz#681131 rhbz#681130 rhbz#634795 rhbz#676066 rhbz#667885 rhbz#631629


author: Mike Burns <mburns@redhat.com> 1.9.3-21
changelog:
  - Include rhevm configuration plugin rhbz#682162
  - Include plugin for RHEV-M registration  rhbz#625083 rhbz#682162
  - Include plugin for RHN registration  rhbz#676006
  - Only allow logged in user to unlock screen rhbz#675248
  - Use multipath for all devices rhbz#676255
  - Fix serial console access rhbz#676969
  - fix ovirt.log generation rhbz#681128
  - Unblock ipv6 dhcp responses rhbz#683354
  - Persist Enable Password Authentication ssh option rhbz#685102
  - Fix network page reset button rhbz#688851
  - Remove duplicate crashkernel option from commandline rhbz#685130
  - Don't allow major version upgrades through the installer rhbz#681128
  - Blank nic gateway if not a valid IP address rhbz#688849


author: Mike Burns <mburns@redhat.com> 1.9.3-22
changelog:
  - Replace shutil.copy with a system call rhbz#683864
  - Fix detection of syslinux/isolinux rhbz#689834
  - Don't allow network changes if registered to RHEVM rhbz#675874
  - fix cciss installation issues rhbz#681164
  - Update weak password warning message rhbz#682924
  - Expand ipv6 fields to 25 chars and fix validation rhbz#681146
  - Add dracut plugin for disk cleanup rhbz#688168
  - return true if ovirt_store_config succeeds rhbz#690677


author: Mike Burns <mburns@redhat.com> 1.9.3-23.2
changelog:
  - Enable vlan config processing rhbz#681168
  - Remove confirm password dialog from RHN setup rhbz#690673
  - Cleanup installation kargs rhbz#640782
  - Update crashkernel parameter rhbz#654565
  - Fix installs to /dev/mapper devices rhbz#676255
  - Fix prompt for input in dracut when cleaning old disks rhbz#692072


author: Mike Burns <mburns@redhat.com> 1.9.3-24
changelog:
  - Fix name in plymouth progress bar rhbz#676784
  - Fix ipv6 dhcp iprules entries rhbz#683354
  - Fix cciss installation errors rhbz#681164
  - Cleanup catching of failures in autoinstall rhbz#681938
  - Support storage_init=<bus> in dracut plugin rhbz#691891
  - Blacklist restorecond.desktop rhbz#679367
  - Cleanup startup errors rhbz#675868
  - Set admin password during autoinstall rhbz#681934
  - Fix hostvg_init storage disks rhbz#681164
  - Allow firstboot to run unconfined rhbz#647756
  - enable en_US.UTF-8 locale in new UI rhbz#675823


author: Mike Burns <mburns@redhat.com> 1.9.3-25
changelog:
  - Enable ESC for aborting ISO media check rhbz#683330
  - Fix ipv6 network configuration files rhbz#690792
  - Add more debug logging for installation failures rhbz#694644
  - Return true when persisting config files rhbz#690677
  - Fix parted Root partition size rhbz#690762
  - Block major version upgrades rhbz#588267
  - Fix name in grub.conf rhbz#677534
  - Fix dracut prompt during cleanup rhbz#692072


author: Mike Burns <mburns@redhat.com> 1.9.3-26.2
changelog:
  - Fix looping in storage_init parsing rhbz#691891
  - Prevent race by making /dev/disk/by-labels on install rhbz#696566
  - Manually recreate /dev/mapper entries for partitions rhbz#696566
  - Save default grub entries after successful reboot rhbz#696566
  - Wipe disk after cleaning lvm info rhbz#626662
  - Fix yum.Errors import error for RHN registration rhbz#696439
  - Fix SELinux context for /boot-kdump rhbz#654565
  - Fix kdump startup rhbz#654565
  - Fix static networking bridge configuration rhbz#696512
  - Correct certificate paths in vdsm.conf config rhbz#625083
  - autoinstall/in-place upgrade breaks serial rhbz#696566


author: Mike Burns <mburns@redhat.com> 1.9.3-27.1
changelog:
  - Remove LANG=C and LC_ALL from /etc/profile rhbz#675823
  - Move uninstall wipe of mbr to ovirt-early rhbz#626662
  - Fix encrypted swap setup and parsing rhbz#633587
  - Fix parsing for AppVG autoinstall rhbz#633583
  - Fix grub installation to usb drives rhbz#699602


author: Mike Burns <mburns@redhat.com> 1.9.3-28.1
changelog:
  - Fix encrypting of Swap2 rhbz#633587
  - Fix grub device map for various usr/devmapper types rhbz#699602


author: Stef Walter <stefw@redhat.com> - 0.18.0-1
changelog:
  - Update to new upstream stable release
  - Various logging tweaks (#928914, #928750)
  - Make the 'p11-kit extract-trust' explicitly reject
    additional arguments


author: Stef Walter <stefw@redhat.com> - 0.18.3-1
changelog:
  - Update to new upstream stable release
  - Fix intermittent firefox cert validation issues (#960230)
  - Include the manual pages in the package


author: Stef Walter <stefw@redhat.com> - 0.18.3-2
changelog:
  - Don't install libnssckbi.so alternatives in the package.
    On RHEL 6 this is done by the update-ca-trust script.


author: Stef Walter <stefw@redhat.com> - 0.18.4-1
changelog:
  - Remove alternative on package removal
  - Update to 0.18.4 with minor p11-kit command fixes
  - Fix arguments to extract-trust p11-kit command


author: Stef Walter <stefw@redhat.com> - 0.18.4-2
changelog:
  - Fix inconsistency issues when multilib packages are installed
  - Add 'p11-kit redhat-setup-trust status' command


author: Stef Walter <stefw@redhat.com> - 0.18.5-1
changelog:
  - Update to new upstream point release
  - Use freebl for hash algorithms (#983384)
  - Don't load configs in home dir when setuid or setgid (#985816)
  - Use $TMPDIR instead of $TEMP while testing (#985017)
  - Use $XDG_DATA_HOME for user pkcs11 module configuration
  - Open files and fds with O_CLOEXEC (#984986)
  - Abort initialization if critical module fails to load (#985023)
  - Don't use thread-unsafe: strerror, getpwuid (#985481)
  - Fix p11_kit_space_strlen() result when empty string (#985416)


author: Andrew Beekhof <andrew@beekhof.net> 1.1.8-2
changelog:
  - Fix internal package dependancies
  - Resolves: rhbz#816875

  - Update to upstream 0b45588
    + Correctly disable syslog output when requested
    + Warn about node names containing a capital letter
    + Do not start fencing until entire device topology is found or query results timeout.
    + Allow nodes to use a name other than uname()


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-4
changelog:
  - Resolves: rhbz#816875
  - Update to upstream db9410b

    + Cluster: Detect node name collisions in corosync
    + Cluster: Strip domains from node names by default
    + Core: Prevent ordering changes when applying xml diffs
    + Fencing: On failure, only try a topology device once from the remote level.
    + Fencing: Retry stonith device for duration of action's timeout period.
    + Fencing: Support 'on_target' option in fencing device metadata for forcing unfence on target node
    + mcp: Re-attach to existing pacemaker components when mcp fails
    + pengine: Bug cl#5101 - Ensure stop order is preserved for partially active groups
    + pengine: Bug cl#5111 - When clone/master child rsc has on-fail=stop, insure all children stop on failure.
    + pengine: Correctly unpack active anonymous clones
    + pengine: Support a 'requires' resource meta-attribute for controlling whether it needs quorum, fencing or nothing
    + pengine: Support resources that require unfencing before start


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-5
changelog:
  - Resolves: rhbz#877364
  - Update to upstream e69dfc1

    + attrd: Correctly handle deletion of non-existant attributes
    + cib: Do not pass local variables to mainloop_add_fd() when creating remote connections
    + Cluster: Do not strip the domain from node names calculated from uname(2)
    + Core: Supply the correct number of arguments for the format string
    + corosync: Avoid errors when closing failed connections
    + fencing: Automatically append 'nodeid' to fencing agent args if it is detected agent supports 'nodeid' parameter
    + mcp: chmod the correct directory instead of /var/run
    + pengine: Prevent double-free for cloned primitive from template


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-6
changelog:
  - Resolves: rhbz#877364
  - Update to upstream d20d06f

    + cib: Avoid use-after-free by correctly support cib_no_children for non-xpath queries
    + cib: Remove text nodes from cib replace operations
    + Cluster: Preserve corosync membership state when matching node name/id entries
    + cman: Do not wait for unmanaged resources during shutdown
    + cman: Ensure reliable shutdown
    + cman: Ignore qdisk 'nodes'
    + Core: Prevent use-of_NULL in IPC code
    + corosync: Ensure peer state is preserved when matching names to nodeids
    + crmd: Avoid filling the ipc queue with data we don't need
    + crmd: Prevent election storms caused by getrusage() values being too close
    + Fencing: Correctly terminate when all device options have been exhausted
    + Fencing: Record delegated self-fencing operations in case they fail
    + legacy: Re-enable logging from the pacemaker plugin
    + pengine: Bug rhbz#880249 - Ensure orphan masters are demoted before being stopped
    + pengine: Bug rhbz#880249 - Teach the PE how to recover masters into primitives
    + pengine: Ensure previous migrations are completed before attempting another one
    + tools: crm_report - Fix node list detection


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.8-7
changelog:
  - Resolves: rhbz#880249
  - Update to upstream ca7bf5e

    + Fencing: Only try peers for non-topology based operations once
    + tools: Have crm_resource generate a valid transition key when sending resource commands to the crmd


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-1.el6_4.1
changelog:
  - Update source tarball to revision: Pacemaker-1.1.10
    Resolves: rhbz#1016617
  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/master/ChangeLog for full details
  - Additional patches:
    + Fix: mcp: Remove LSB hints that instruct chkconfig to start pacemaker at boot time
    + Fencing: Support agents that need the host to be unfenced at startup
    + Fix: crm_report: Collect corosync quorum data
    + Fix: systemd: Prevent glib assertion - only call g_error_free with non-NULL arguments
    + Fix: systemd: Prevent additional use-of-NULL assertions in g_error_free
    + Fix: logging: glib CRIT messages should not produce core files in the background
    + Fix: crmd: Correcty update the history cache when recurring ops change their return code
    + Log: crm_mon: Unmangle the output for failed operations
    + Log: cib: Correctly log short-form xml diffs
    + Log: pengine: Better indicate when a resource has failed
    + Fix: crmd: Prevent crash by passing log arguments in the correct order
    + Fix: pengine: Do not re-allocate clone instances that are blocked in the Stopped state
    + Fix: pengine: Do not allow colocation with blocked clone instances
    + Fix: pengine: Do not restart resources that depend on unmanaged resources
    + Fix: crmd: Prevent recurring monitors being cancelled due to notify operations


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-1.el6_4.2
changelog:
  - Fix: xml: Location constraints are allowed to specify a role
  - Bug rhbz#902407 - crm_resource: Handle --ban for master/slave resources as advertised
    Resolves: rhbz#1016617


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-1.el6_4.3
changelog:
  - Log: crmd: Supply arguments in the correct order
  - Fix: Invalid formatting of log message causes crash
  - Fix: cman: Start clvmd and friends from the init script if enabled
  - Fix: Consistently use 'Slave' as the role for unpromoted master/slave resources
  - Fix: pengine: Location constraints with role=Started should prevent masters from running at all
  - Fix: crm_resource: Observe --master modifier for --move
  - Fix: cman: Do not start pacemaker if cman startup fails
  - Fix: Fencing: Observe pcmk_host_list during automatic unfencing
  - Remove unsupported resource agent
  - Provide a meaningful error if --master is used for primitives and groups
    Resolves: rhbz#1016617


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-5
changelog:
  + Fix: systemd: Prevent glib assertion - only call g_error_free with non-NULL arguments
    + Fix: systemd: Prevent additional use-of-NULL assertions in g_error_free
    + Fix: logging: glib CRIT messages should not produce core files in the background
    + Fix: crmd: Correcty update the history cache when recurring ops change their return code
    + Log: crm_mon: Unmangle the output for failed operations
    + Log: cib: Correctly log short-form xml diffs
    + Log: pengine: Better indicate when a resource has failed


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-7
changelog:
  + Fencing: Support agents that need the host to be unfenced at startup
      Resolves: rhbz#996850
    + Fix: crm_report: Collect corosync quorum data
      Resolves: rhbz#989292


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-8
changelog:
  + Fix: mcp: Remove LSB hints that instruct chkconfig to start pacemaker at boot time
      Resolves: rhbz#997346


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-9
changelog:
  + Fix: xml: Location constraints are allowed to specify a role
    + Bug rhbz#902407 - crm_resource: Handle --ban for master/slave resources as advertised
      Resolves: rhbz#902407


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-10
changelog:
  - Remove unsupported resource agent
      Resolves: rhbz#1005678
  - Provide a meaningful error if --master is used for primitives and groups


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-11
changelog:
  + Fix: cman: Do not start pacemaker if cman startup fails
    + Fix: Fencing: Observe pcmk_host_list during automatic unfencing
      Resolves: rhbz#996850


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.10-12
changelog:
  - Fix: Consistently use 'Slave' as the role for unpromoted master/slave resources
      Resolves: rhbz#1011618
  - Fix: pengine: Location constraints with role=Started should prevent masters from running at all
      Resolves: rhbz#902407
  - Fix: crm_resource: Observe --master modifier for --move
      Resolves: rhbz#902407


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.10-14
changelog:
  - Log: crmd: Supply arguments in the correct order
      Resolves: rhbz#996850
  - Fix: Invalid formatting of log message causes crash
      Resolves: rhbz#996850


author: David Vossel <dvossel@redhat.com> - 1.1.10-14.2
changelog:
  - Fix: lrmd: Correctly cancel monitor actions for lsb/systemd/service resources on cleaning up (cherry picked from commit 1c14b9d69470ff56fd814091867394cd0a1cf61d)
  - Fix: services: Fixes segfault associated with cancelling in-flight recurring operations.
      Resolves: rhbz#1052346


author: David Vossel <dvossel@redhat.com> - 1.1.10-14.3
changelog:
  - Fix: pengine: fixes invalid transition caused by clones with more than 10 instances
      Resolves: rhbz#1087754


author: David Vossel <dvossel@redhat.com> - 1.1.10-15
changelog:
  - Fix: Removes unnecessary newlines in crm_resource -O output
      Resolves: rhbz#1038155
  - Fix: lrmd: Correctly cancel monitor actions for lsb/systemd/service resources on cleaning up (cherry picked from commit 1c14b9d69470ff56fd814091867394cd0a1cf61d)
      Resolves: rhbz#1046131
  - Fix: services: Fixes segfault associated with cancelling in-flight recurring operations.
      Resolves: rhbz#1046131


author: David Vossel <dvossel@redhat.com> - 1.1.10-16
changelog:
  - Fix: pengine: fixes invalid transition caused by clones with more than 10 instances
      Resolves: rhbz#1078954


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-1
changelog:
  - Update to upstream release 1.1.12-rc3
  - The CIB has O(2) better performance and updates are applied with greater reliablity
  - Transient attributes are now recorded in a truely atomic manner
  - Supports fencing agents that need the host to be unfenced at startup
  - CIB ACLs have been reimplemented and are now enabled 
  - Various bugs squashed

  - Resolves: rhbz#1020210 rhbz#1036631 rhbz#1069279
  - Resolves: rhbz#1069795 rhbz#1071995


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.12-2
changelog:
  - Bug rhbz#1054307 - cname pattern match should be more restrictive in init script
      Resolves: rhbz#1054307


author: Andrew Beekhof <beekhof@redhat.com> - 1.1.12-3
changelog:
  - Fix: crmd: avoid double free caused by nested hash table removal
  - Fix: ignore SIGPIPE with gnutls is in use
  - Fix: cib: cl#5222 - Prevent assert in xml_calculate_changes() on performing cib operations
      Resolves: rhbz#1071995


author: David Vossel <dvossel@redhat.com> - 1.1.12-5
changelog:
  - Properly clear shutdown transient attribute after node leaves
    membership.

    Resolves: rhbz#1198638


author: David Vossel <dvossel@redhat.com> - 1.1.12-6
changelog:
  - Fixes invalid free in attrd
  - Fixes crm_mon -E option for external script.
  - Fixes acl read-only access role assignment.

    Resolves: rhbz#1205292
    Resolves: rhbz#1208896
    Resolves: rhbz#1207621


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.12-7
changelog:
  - Ensure relevant components clear cache entries are cleared when peers leave the cluster

    Resolves: rhbz#1193499


author: David Vossel <dvossel@redhat.com> - 1.1.12-8
changelog:
  - Reduce log severity for style upgrade notice.
   - Properly export pacemaker related sysconfig variables
   - Remove warning during yum update of pacemaker packages.

    Resolves: rhbz#1163982
    Resolves: rhbz#1177821
    Resolves: rhbz#1210291


author: Klaus Wenninger <kwenning@redhat.com> - 1.1.14-1.0
changelog:
  - Update to upstream release 1.1.14
   - added README_RGManager_porting to document replacement of
       ccs2cib, ccs_flatten & disable_rgmanager
   - added patchset (0100-0111) from master to implement graceful
       stop of pacemaker_remote
   - require minimum-version 0.17.0 of libqb

    Resolves: rhbz#1193499
    Resolves: rhbz#1195500
    Resolves: rhbz#1200853
    Resolves: rhbz#1215809
    Resolves: rhbz#1219103
    Resolves: rhbz#1235316
    Resolves: rhbz#1246490
    Resolves: rhbz#1246563
    Resolves: rhbz#1252206
    Resolves: rhbz#1257333
    Resolves: rhbz#1275223
    Resolves: rhbz#1287535
    Resolves: rhbz#1297564


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.14-3
changelog:
  - prevent crmd crash after unexpected Pacemaker Remote connection takeover
   - ensure package URL is displayed correctly

    Resolves: rhbz#1252206


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-1
changelog:
  - Rebase to upstream e174ec84857e087210b9dacee3318f8203176129 (1.1.15)

    Resolves: rhbz#1253325
    Resolves: rhbz#1312040
    Resolves: rhbz#1322595
    Resolves: rhbz#1326350
    Resolves: rhbz#1356727


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-2
changelog:
  - Include upstream fixes to init scripts
   - ClusterMon resource should verify pid is crm_mon's
   - Fix CVE-2016-7035

    Resolves: rhbz#1322595
    Resolves: rhbz#1360234
    Resolves: rhbz#1374775


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-3
changelog:
  - Show correct help and error messages in attrd_updater
   - Preserve rolling upgrades involving Pacemaker Remote nodes
   - Update status of clufter in README_RGManager_porting

    Resolves: rhbz#1388558
    Resolves: rhbz#1389028


author: Ken Gaillot <kgaillot@redhat.com> - 1.1.15-4
changelog:
  - crm_report should avoid grep on binary logs
   - document that clufter is now supported

    Resolves: rhbz#1405205


author: Andrew Beekhof <andrew@beekhof.net> - 1.1.0-0.1-00d9bcac8775.hg
changelog:
  - Related: rhbz#rhbz#543948
  - Update the tarball from upstream to version 00d9bcac8775
    + High: PE: Bug 2213 - Ensure groups process location constraints so that clone-node-max works for cloned groups
    + High: PE: Bug lf#2153 - Update regression tests
    + High: PE: Bug lf#2153 - non-clones shouldn't restart when clones stop/start on other nodes
    + High: PE: Bug lf#2209 - Clone ordering should be able to prevent startup of dependant clones
    + High: PE: Bug lf#2216 - Correctly identify the state of anonymous clones when deciding when to probe
    + High: PE: Bug lf#2225 - Operations that require fencing should wait for 'stonith_complete' not 'all_stopped'.
    + High: PE: Bug lf#2225 - Prevent clone peers from stopping while another is instance is (potentially) being fenced
    + High: PE: Correctly anti-colocate with a group
    + High: PE: Correctly unpack ordering constraints for resource sets to avoid graph loops
    + High: Replace stonithd with the new fencing subsystem
    + High: cib: Ensure the loop searching for a remote login message terminates
    + High: cib: Finally fix reliability of receiving large messages over remote plaintext connections
    + High: cib: Fix remote notifications
    + High: cib: For remote connections, default to CRM_DAEMON_USER since thats the only one that the cib can validate the password for using PAM
    + High: cib: Remote plaintext - Retry sending parts of the message that didn't fit the first time
    + Medium: PE: Bug lf#2206 - rsc_order constraints always use score at the top level
    + Medium: PE: Provide a default action for resource-set ordering
    + Medium: PE: Silently fix requires=fencing for stonith resources so that it can be set in op_defaults
    + Medium: ais: Some clients such as gfs_controld want a cluster name, allow one to be specified in corosync.conf
    + Medium: cib: Create valid notification control messages
    + Medium: cib: Indicate where the remote connection came from
    + Medium: cib: Send password prompt to stderr so that stdout can be redirected
    + Medium: extra: Add the daemon parameter to the controld metadata
    + Medium: fencing: Re-engineer the stonith daemon to support RHCS agents
    + Medium: tools: Make crm_mon functional with remote connections
    + Medium: xml: Bug bnc#552713 - Treat node unames as text fields not IDs
    + Medium: xml: Bug lf#2215 - Create an always-true expression for empty rules when upgrading from 0.6


author: Andrew Beekhof <andrew@beekhof.net> - 1.1.0-1
changelog:
  - Related: rhbz#543948
  - Update the tarball from upstream to version 07ab245be519
    + High: crmd: Always connect to stonith
    + High: crmd: Ensure batch-limit is correctly enforced
    + High: crmd: Ensure we have the latest status after a transition abort
    + High: Fencing: Overhaul the fencing daemon
    + High: PE: Bug lf#2153 - non-clones shouldn't restart when clones stop/start on other nodes - improved
    + Medium: PE: Allow resource sets to be reused between ordering and colocation constraints
    + Medium: PE: Implement serializing order constraints that dont cause restarts or inhibit migration
    + Medium: PE: Include node attributes for the node to be fenced
    + Medium: PE: Make crm_simulate a full replacement for ptest
    + Medium: PE: Only complain about target-role=master for non m/s resources
    + Medium: PE: Prevent non-multistate resources from being promoted through target-role
    + Medium: PE: Simplify the rsc_order syntax - don't make funky inferences based on score
    + Medium: PE: Support serialized sets of resources
    + Medium: Tools: Bug lf#2286 - Allow the shell to accept template parameters on the command line
    + Medium: Tools: Bug lf#2307 - Provide a way to determin the nodeid of past cluster members
    + Medium: Tools: crm: add update method to template apply (LF 2289)
    + Medium: Tools: crm: direct RA interface for stonith class resource agents (LF 2270)
    + Medium: Tools: crm: don't remove sets which contain id-ref attribute (LF 2304)
    + Medium: Tools: crm: exclude locations when testing for pathological constraints (LF 2300)
    + Medium: Tools: crm: fix exit code on single shot commands
    + Medium: Tools: crm: fix node delete (LF 2305)
    + Medium: Tools: crm: implement -F (--force) option
    + Medium: Tools: crm: rename status to cibstatus (LF 2236)
    + Medium: Tools: crm: stay in crm if user specified level only (LF 2286)


author: Andrew Beekhof <andrew@beekhof.net> - 1.1.1-1
changelog:
  - Resolves: rhbz#559868
  - Split off the doc package as it has grown quite large
  - Split off the cluster test suite (CTS) so that it can be used by other projects 
  - Update the tarball from upstream to version 46e288ab9014
    + High: PE: Repair handling of unordered groups in RHS ordering constraints
    + High: Agents: Prevent shell expansion of '*' when there are files in /var/lib/heartbeat/cores/root
    + High: ais: Bug lf#2340 - Force rogue child processes to terminate after waiting 2.5 minutes
    + High: ais: Bug lf#2359 - Default expected votes to 2 inside Corosync/OpenAIS plugin
    + High: ais: Bug lf#2359 - expected-quorum-votes not correctly updated after membership change
    + High: ais: Bug rhbz#525552 - Move non-threadsafe calls to setenv() to after the fork()
    + High: crmd: Bug bnc#578644 - Improve handling of cancelled operations caused by resource cleanup
    + High: crmd: Make sure we wait for fencing to complete before continuing
    + High: crmd: Prevent use-of-NULL when non-DCs get stonith callbacks
    + High: Fencing: Account for stonith_get_info() always returning a pointer to the same static buffer
    + High: Fencing: Bug bnc#577007 - Correctly parse the hostlist output from stonith agents
    + High: Fencing: Correctly parse arg maps and do not return a provider for unknown agents
    + High: fencing: Fix can_fence_host_with_device() logic and improve hostlist output parsing
    + High: PE: Bug lf#2358 - Fix master-master anti-colocation
    + High: PE: Correctly implement optional colocation between primitives and clone resources
    + High: PE: Suppress duplicate ordering constraints to achieve orders of magnitude speed increases for large clusters
    + High: Shell: move scores from resource sets to the constraint element (lf#2331)
    + High: Shell: recovery from bad/outdated help index file
    + Medium: Shell: implement lifetime for rsc migrate and node standby (lf#2353)
    + Medium: Shell: node attributes update in configure (bnc#582767)


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-2
changelog:
  - Do not build on ppc and ppc64.
    Resolves: rhbz#590992
  - Rebase on new upstream release
    + High: ais: Do not count votes from offline nodes and calculate current votes before sending quorum data
    + High: ais: Ensure the list of active processes sent to clients is always up-to-date
    + High: ais: Look for the correct conf variable for turning on file logging
    + High: ais: Use the threadsafe version of getpwnam
    + High: Core: Bug lf#2414 - Prevent use-after-free reported by valgrind when doing xpath based deletions
    + High: Core: fix memory leaks exposed by valgrind
    + High: crmd: Bug 2401 - Improved detection of partially active peers
    + High: crmd: Bug lf#2379 - Ensure the cluster terminates when the PE is not available
    + High: crmd: Bug lf#2414 - Prevent use-after-free of the PE connection after it dies
    + High: crmd: Bug lf#2414 - Prevent use-after-free of the stonith-ng connection
    + High: crmd: Do not allow the target_rc to be misused by resource agents
    + High: crmd: Do not ignore action timeouts based on FSA state
    + High: crmd: Ensure we dont get stuck in S_PENDING if we loose an election to someone that never talks to us again
    + High: crmd: Fix memory leaks exposed by valgrind
    + High: crmd: Remove race condition that could lead to multiple instances of a clone being active on a machine
    + High: crmd: Send erase_status_tag() calls to the local CIB when the DC is fenced, since there is no DC to accept them
    + High: crmd: Use global fencing notifications to prevent secondary fencing operations of the DC
    + High: PE: Bug lf#2317 - Avoid needless restart of primitive depending on a clone
    + High: PE: Bug lf#2361 - Ensure clones observe mandatory ordering constraints if the LHS is unrunnable
    + High: PE: Bug lf#2383 - Combine failcounts for all instances of an anonymous clone on a host
    + High: PE: Bug lf#2384 - Fix intra-set colocation and ordering
    + High: PE: Bug lf#2403 - Enforce mandatory promotion (colocation) constraints
    + High: PE: Bug lf#2412 - Correctly locate clone instances by their prefix
    + High: PE: Don ot be so quick to pull the trigger on nodes that are coming up
    + High: PE: Fix memory leaks exposed by valgrind
    + High: PE: Repair handling of unordered groups in RHS ordering constraints
    + High: PE: Rewrite native_merge_weights() to avoid Fix use-after-free
    + High: Shell: always reload status if working with the cluster (bnc#590035)
    + High: Shell: check timeouts also against the default-action-timeout property
    + High: Shell: Default to using the status section from the live CIB (bnc#592762)
    + High: Shell: edit multiple meta_attributes sets in resource management (lf#2315)
    + High: Shell: enable comments (lf#2221)
    + High: Tools: crm_mon - fix memory leaks exposed by valgrind


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-3
changelog:
  - Resolves: rhbz#590667
  - Rebase on new upstream release
    + High: Core: Bug lf#2401 - Backed out changeset 6e6980376f01


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-5
changelog:
  - Resolves: rhbz#594296 - rpmdiff checks
    + Remove legacy scripts
    + Add missing man pages
    + Fix sub-package version requires


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-6
changelog:
  - Resolves: rhbz#610815 - add cman support
    + High: cib: Also free query result for xpath operations that return more than one hit
    + High: cib: Fix the application of unversioned diffs
    + High: Core: Correctly unpack HA_Messages containing multiple entries with the same name
    + High: Core: Resolve coverity RESOURCE_LEAK defects
    + High: crmd: All nodes should see status updates, not just he DC
    + High: crmd: Allow non-DC nodes to clear failcounts too
    + High: crmd: Base DC election on process relative uptime
    + High: crmd: Make sure the membership cache is accurate after a sucessful fencing operation
    + High: crmd: Make sure we always poke the FSA after a transition to clear any TE_HALT actions
    + High: crmd: Prevent segmentation fault
    + High: PE: Avoid creating invalid ordering constraints for probes that are not needed
    + High: PE: Bug lf#1959 - Fail unmanaged resources should not prevent other services from shutting down
    + High: PE: Bug lf#2422 - Ordering dependencies on partially active groups not observed properly
    + High: PE: Bug lf#2424 - Use notify oepration definition if it exists in the configuration
    + High: PE: Bug lf#2433 - No services should be stopped until probes finish
    + High: PE: Correctly detect when there is a real failcount that expired and needs to be cleared
    + High: PE: Correctly handle pseudo action creation
    + High: PE: Fix colocation for interleaved clones
    + High: PE: Fix colocation with partially active groups
    + High: PE: Fix potential use-after-free defect from coverity
    + High: PE: Fix use-after-free in order_actions() reported by valgrind
    + High: PE: Prevent endless loop when looking for operation definitions in the configuration
    + High: stonith: Correctly parse pcmk_host_list parameters that appear on a single line
    + High: tools: crm_simulate - Resolve coverity USE_AFTER_FREE defect


author: Andrew Beekhof <andrew@beekhof.net> 1.1.2-7
changelog:
  - Resolves: rhbz#610815 - add cman support
    + High: ais: Use service slot 10 to avoid conflicting with cman


author: Andrew Beekhof <andrew@beekhof.net> 1.1.4-1
changelog:
  - Resolves: rhbz#668466
  - Update tarball to upstream version: 3ac6ac993d6d
    + Performance improvements for larger clusters
    + Miscellaneous bug fixes


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.5-1
changelog:
  - Fix rpmlint warnings
  - Rebase on new upstream release 
    See included ChangeLog file or http://hg.clusterlabs.org/pacemaker/1.1/file/tip/ChangeLog for details
    + Bugs lf#2445, lf#2493, lf#2508, lf#2518, lf#2527, lf#2544, 
  	 lf#2545, lf#2550, lf#2551, lf#2554, lf#2558, bnc#665131
  - Resolves: rhbz#676286 - Add per device 'diag' option to pacemaker stonith action


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.5-2
changelog:
  - Fix cman integration
  - Resolves: rhbz#684838 - Correctly notify fenced of a successful fencing event 
  - Resolves: rhbz#684825 - Ensure Pacemaker uses the most recent membership/quorum information


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.5-6
changelog:
  - Update tarball to upstream version: b933cbea41b5
  - Resolves: rhbz#708797
  - Resolves: rhbz#451848
  - Resolves: rhbz#708722 
  - Resolves: rhbz#720136


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.6-1
changelog:
  - Update tarball to upstream version: a02c0f1
    See included ChangeLog file or, for full details:
      https://github.com/ClusterLabs/pacemaker/compare/a12de08...a02c0f1
  - Do not build in support for snmp, esmtp by default
  - Create a package for cluster unaware libraries to minimze our footprint 
    on non-cluster nodes
  - Better subpackage descriptions
  - Resolves: rhbz#743175


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.7-1
changelog:
  - Update tarball to upstream version: 148fccf
    See included ChangeLog file or, for full details:
      https://github.com/ClusterLabs/pacemaker/compare/148fccf...a12de08
  - Add libqb-devel as a build dependancy
  - Resolves: rhbz#782255 rhbz#754216 rhbz#729035 
  - Related:  rhbz#790627


author: Andrew Beekhof <abeekhof@redhat.com> - 1.1.7-2
changelog:
  - Update patch level to upstream version: c26e624
  - Resolves: rhbz#720214 rhbz#720218 rhbz#754216 rhbz#789397
    For full details, see:
      https://github.com/ClusterLabs/pacemaker/compare/c26e624...148fccf


author: David Vossel <dvossel@redhat.com> - 1.1.7-3
changelog:
  - Add libqb-devel as a dependancy of pacemaker-libs-devel
  - Medium: PE: Report resources as active in correct data about resource location
    Resolves:  rhbz#799070
  - Low: Tools: Bug rhbz#801351 - Fix crm_report help text
    Resolves: rhbz#801351


author: David Vossel <dvossel@redhat.com> - 1.1.7-5
changelog:
  - Use default value for HB_DAEMON_DIR define when clusterglue does not provide one. 
    Resolves: rhbz#808557


author: Andrew Beekhof <andrew@beekhof.net> 1.1.8-1
changelog:
  - Rebuild for upstream 1.1.8 release
  - Resolves: rhbz#816875 

  - See included ChangeLog file or https://raw.github.com/ClusterLabs/pacemaker/master/ChangeLog for full details

    + New IPC implementation from libqb
    + New logging implementation from libqb
    + Quieter - info, debug and trace logs are no longer sent to syslog
    + Dropped dependancy on cluster-glue
    + Config and core directories no longer located in heartbeat directories
    + Support for managing systemd services
    + Rewritten local resource management daemon
    + Version bumps for every shared library due to API cleanups
    + Removes crm shell, install/use pcs shell and GUI instead


author: Andrew Beekhof <andrew@beekhof.net> 1.1.8-2
changelog:
  - Fix internal package dependancies
  - Resolves: rhbz#816875

  - Update to upstream 0b45588
    + Correctly disable syslog output when requested 
    + Warn about node names containing a capital letter 
    + Do not start fencing until entire device topology is found or query results timeout.
    + Allow nodes to use a name other than uname()


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-7
changelog:
  - pam_console: fix memory corruption when executing handlers (patch by
    Stas Sergeev) and a few more fixes in the handler execution code (#532302)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-5
changelog:
  - fix insecure dropping of priviledges in pam_xauth, pam_env,
    and pam_mail - CVE-2010-3316 (#637898), CVE-2010-3435 (#641335)
  - fix insecure executing of scripts with user supplied environment
    variables in pam_namespace - CVE-2010-3853 (#643043)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-6
changelog:
  - do not overwrite /var/log/tallylog on package update (#614766)
  - add support for uid and gid ranges in limits.conf (#622847)
  - add new pam_faillock module (#644971)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-7
changelog:
  - fix a few memory leaks in error paths and other mistakes
    found by a code review
  - add rhost and tty to auditing data in modules (#677664)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-12
changelog:
  - add character sequence test to pam_cracklib
  - drop unused difignore option from pam_cracklib (#811243)
  - add enforce_for_root option to pam_cracklib (#588893)
  - mention limits.d in the limits.conf(5) manpage (#723297)
  - add ability to lock out inactive accounts to pam_lastlog
  - fix require_selinux option in pam_namespace (#750601)
  - add mntopts flag for tmpfs polyinstantiation method
  - preserve authtok_type in pam_get_authtok() (#811168)
  - fix username mismatch in pam_unix remember feature (#815516)
  - relax restriction of root in pam_pwhistory
  - relax soft nproc limit for root in 90-nproc.conf


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-18
changelog:
  - pam_cracklib: improve documentation (#889233)
  - unbreak authentication if ld.so.preload is not empty
  - correct off by one error in account expiration calculation (#947011)
  - pam_console_apply: do not print error if console.perms.d is empty
  - properly handle all cases where crypt() might return NULL (#1026203)
  - pam_limits: clarify documentation of maxsyslogins limit (#1028490)
  - pam_access: call DNS resolution only when necessary and cache
    results (#1029817)
  - pam_limits: nofile applies to file descriptors not files (#1040664)
  - pam_limits: check whether the utmp login entry is valid (#1054936)
  - correct URLs in spec file (#1071770)
  - pam_userdb: correct the example in man page (#1078779)
  - pam_selinux: canonicalize username for getseuser() (#1083981)
  - pam_access: fix netgroup matching and @user@@netgroup parsing (#740233)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-22
changelog:
  - pam_tally2: added no_lockf_timeout option, do not use it
  - pam_tally2: added debug option
  - pam_tally2: do not create the log file as executable (#1186361)
  - add manpage symlink for environment(5) (#1110258)
  - pam_group: add support for Development/Debug syntax (#1114220)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-23
changelog:
  - pam_succeed_if: properly work with large uids
  - pam_unix: add no_pass_expiry option for ignoring password
    expiration in crond and sshd with public key authentication
  - pam_access: check for (group) match first (#1359303)


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-5
changelog:
  - do not change permissions with pam_console_apply
  - drop obsolete pam_tally module and the faillog file (#461258)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.7-1
changelog:
  - when called to refresh credentials, store the new creds in the default
    ccache location if $KRB5CCNAME isn't set (#507984)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.8-1
changelog:
  - add a "chpw_prompt" option, to allow changing expired passwords while
    authenticating, as a workaround for applications which don't handle
    password expiration the way PAM expects them to (#509092)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.9-1
changelog:
  - add a "multiple_ccaches" option to allow forcing the previous behavior of
    not deleting an old ccache whenever we create a new one, but saving them
    until the call that caused us to create them is reversed, and default the
    setting to being enabled for "su", which needs it


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.10-1
changelog:
  - pull up changes to fine-tune the logic for selecting which key in a keytab
    to use when validating credentials


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.10-2
changelog:
  - replace BuildPreReq: with BuildRequires: (rpmlint)
  - fix inadvertent macro use in changelog (rpmlint)
  - drop the final '.' from the package summary (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-1
changelog:
  - create creds before calling krb5_kuserok() so that they're available when
    it goes to look up the target user's home directory (#563442)
  - collapse multiple levels of debugging into a single debug level (#157107)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-2
changelog:
  - backport fixes to make the libdefaults verify_ap_req_nofail setting control
    what happens when we can't read keytabs, and enable TGT validation by
    default, with "novalidate" as an option which takes a list of services for
    which TGT validation shouldn't be attempted (#622938)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-6
changelog:
  - backport the change to prefer krb5_change_password() over krb5_set_password()
    again from 2.3.12 (#690583)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-7
changelog:
  - don't treat setcred() as session open/close in sshd (#720609, #725797)
  - don't create a new ccache when "external" is enabled, as the calling
    application's already managing one (#690832)
  - always re-read "external" creds when possible, and use an in-memory
    ccache when setting up tokens (more of #690832)
  - during password change, if we got creds during the first pass, don't
    ask for the authtok again (#700520)
  - allow things we do to compensate for transplanting in new self-tests to
    fail if the new tests aren't patched in (#708507)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-8
changelog:
  - in a %{_rawbuild} environment, don't run autoconf, because current
    versions will choke on an unpatched configure.ac (more of #708507)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-9
changelog:
  - refuse to supply non-password information via prompter callback when
    obtaining password-changing credentials (#700520)


author: Nalin Dahyabhai <nalin@redhat.com> 185-3
changelog:
  - make mentions of pam_ldap.conf and %{name}.conf more consistent (rcritten)
  - drop no-longer-used .versions file


author: Nalin Dahyabhai <nalin@redhat.com> 185-5
changelog:
  - require the pam package explicitly, so that /%{_lib}/security won't be
    an orphaned directory (part of #553857)


author: Nalin Dahyabhai <nalin@redhat.com> 185-6
changelog:
  - add a proposed patch to avoid losing password expiration warnings relayed
    via policy controls when expiration is less than a day away (based on
    patch from Masahiro Matsuya, #637190, upstream #407)


author: Nalin Dahyabhai <nalin@redhat.com> 185-9
changelog:
  - add Ross Tyler's patch to always require authentication during password
    change requests for expired passwords, so that modules which check password
    quality (pam_cracklib) will always have the old password on-hand to examine
    as well (#688747, upstream #431)


author: Nalin Dahyabhai <nalin@redhat.com> 185-10
changelog:
  - don't overwrite an explicitly-configured search base when we're using DNS
    to locate the server (#735375)


author: Nalin Dahyabhai <nalin@redhat.com> 264-8
changelog:
  - add "rtkit" and "pulse" to the list of users whom we default to ignoring
    for looking up supplemental groups (Gordon Messmer, part of #186527)


author: Nalin Dahyabhai <nalin@redhat.com> 185-1
changelog:
  - split out pam_ldap as a separate source package, update URL, change
    %{version} to reflect pam_ldap's versioning rather than nss_ldap's
  - set config file to /etc/pam_ldap.conf, rootbindpw file /etc/pam_ldap.secret
  - drop %post bits that care about upgrades from RHL 7.2
  - drop %post/%postun calls to ldconfig
  - drop buildrequires on openssl-devel, krb5-devel, cyrus-sasl-devel
  - update to version 185
    - drop now-obsolete patches to the rebind callback
  - add %pre logic for the upgrading-from-a-non-split-nss_ldap case


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.4-2
changelog:
  - set LDFLAGS_LINUX, not LDFLAGS, so that we don't strip the module before
    the debuginfo gets pulled out (#249963)


author: Avesh Agarwal <avagarwa@redhat.com> - 1.0.5-4
changelog:
  - Patch for new configurable options(rhbz# 219201): 
    disable first upper and last digit check, passwords 
    prompts can be read from a file
  - Fixed an issue with spec file where "Release:" is not
    specified with "(?dist)". Without this, it gives problem
    when tagging across different fedora releases.


author: Avesh Agarwal <avagarwa@redhat.com> - 1.0.5-5
changelog:
  - Fixed following rpmlint errors on src rpm:
    pam_passwdqc.src: W: summary-ended-with-dot Pluggable
    password quality-control module.,
    pam_passwdqc.src:11: E: buildprereq-use pam-devel


author: Avesh Agarwal <avagarwa@redhat.com> - 1.0.5-6
changelog:
  - Added explanation of new options, disable_firstupper_lastdigit_check,
    oldpass_prompt_file, and newpass_prompt_file in the man pages
  - Fixed output messages when disable_firstupper_lastdigit_check option
    is used 
  Resolves: #219201 pam_passwdqc should be more configurable


author: Bob Relyea <rrelyea@redhat.com> - 0.6.2-1
changelog:
  - Pick up the latest pam_pkcs11 from upstream

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-11.1
changelog:
  - Silence expected errors from the console
  - make sure change log has correct dates and email
    Resolves: #654460, #586149


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-13
changelog:
  - If the ssl part is specified for ldap, default to ldaps unless
    otherwise specified in the .conf file


author: Bob Relyea <rrelyea@redhat.com> 0.6.2-14
changelog:
  - Handle PKCS #11 modules when NSS or pam_pkcs11 only specify a partial path
  - Fix coverity issues (found in 7.0 coverity scan)


author: Akira TAGOH <tagoh@redhat.com> - 1.28.1-10
changelog:
  - Avoid the error message at %postun on upgrading to rhel7. (#1086690)
  - Use correct rpm macro for man page (#885846)


author: Denis Leroy <denis@poolshark.org> - 2.25.1.3-1
changelog:
  - Update to upstream 2.25.1.3
  - Package pangomm libdir directory with config include header
  - Fix documentation location


author: William Cohen <wcohen@redhat.com> - 4.0.0-2
changelog:
  - correct the ctests/shlib test
  - have PAPI_set_multiplex() return proper value
  - properly handle event unit masks
  - correct PAPI_name_to_code() to match events
  - Resolves: rhbz562935 Rebase to papi-4.0.0


author: William Cohen <wcohen@redhat.com> - 5.1.1-1
changelog:
  - Rebase to 5.1.1 for:
    - rhbz726798: Support for Sandy Bridge in PAPI
    - rhbz785258: FP event on Sandy Bridge when HT enabled
    - rhbz743648: Support for access to various energy and perf registers via papi 
    - rhbz831751: Ivy Bridge: support PAPI 
    - rhbz740909: Allow parallel builds
    - rhbz785975: Correct use of apostrophes in PAPI documentation


author: Akira TAGOH <tagoh@redhat.com> - 0.6.8-6
changelog:
  - paps-cups.patch: Fix printing with -o landscape in CUPS. (#222137)
  - paps-autoconf262.patch: Fix an error on autoreconf.


author: Hans de Goede <hdegoede@redhat.com> 2.1-1
changelog:
  - New upstream release 2.1
  - Drop all our patches (all merged upstream)
  - This fixes the usage of disks with 4k logical sectors (#523954)
    Resolves: #523954


author: Hans de Goede <hdegoede@redhat.com> 2.1-2
changelog:
  - Fix various memory leaks in error paths (#556012)
  - Add %check section to the specfile, invoking make check
  - If a drive does not have alignment information available default
    to an alignment of 1MiB (#559639)
    Resolves: #559639


author: Hans de Goede <hdegoede@redhat.com> 2.1-3
changelog:
  - Don't crash when reading a DASD disk with PV's on there (#563419)
    Resolves: #563419
  - Don't overwrite the pmbr when merely printing a gpt table (#563211)
    Resolves: #563211


author: Hans de Goede <hdegoede@redhat.com> 2.1-7
changelog:
  - Properly check dm_task_run return value (#585158)
    Resolves: #585158
  - Fix mkpartfs (ext2) on partitions >2TB (#585159)
    Resolves: #585159
  - Add a flag for detecting diagnostics / recovery partitions


author: Brian C. Lane <bcl@redhat.com> 2.1-11
changelog:
  - Document the align-check command
    Resolves: #642476
  - Default to 1MiB partition alignment
    Resolves: #618255


author: Brian C. Lane <bcl@redhat.com> 2.1-13
changelog:
  - Double the buffer for fdasd_check_api_version
    Resolves: #693852
  - Disable tests that fail when run as root


author: Brian C. Lane <bcl@redhat.com> 2.1-14
changelog:
  - Fix scsi_debug race condition in tests
  - turn t9020 and t9030 tests back on
  - Add legacy_boot support to GPT disklabel (#711148)
    Resolves: #711148
  - Remove asserts from CHS guessing code (#692562)
    Resolves: #692562
  - Fix snap radius and don't allow values < 1 (#665496)
    Resolves: #665496


author: Brian C. Lane <bcl@redhat.com> 2.1-17
changelog:
  - Disable t9020 (scsi_debug num_parts is broken)
  - Add a wait loop to t9030 when removing the partition
  - Remove size parameter from scsi_debug in t9030
    Resolves: #746098


author: Brian C. Lane <bcl@redhat.com> 2.1-18
changelog:
  - libparted: copy flags when duplicating GPT partitions
  - test for GPT partition duplicate
    Resolves: #750395
  - Use dm_udev_wait for dm operations
    Resolves: #698121
    Resolves: #751164


author: Brian C. Lane <bcl@redhat.com> 2.1-19
changelog:
  - libparted: HFS/HFS+ probe: don't let a corrupt FS evoke failed assertion
    Resolves: #797979
  - tests: exercise and document the HFS-probe bug fix
    Resolves: #797979
  - libparted: use largest_partnum in dm_reread_part_table
    Resolves: #803108
  - tests: test creating 20 device-mapper partitions
    Resolves: #803108
  - libparted: preserve the uuid on dm partitions
    Resolves: #832145
  - tests: Make sure dm UUIDs are not erased
    Resolves: #832145


author: Brian C. Lane <bcl@redhat.com> 2.1-21
changelog:
  - Raise size limit on loop devices
    Resolves: #869743
  - Remove dm device when last partition is removed
    Resolves: #851705


author: Brian C. Lane <bcl@redhat.com> 2.1-22
changelog:
  - Add PreP GUID support
    Resolves: rhbz#1054283
  - Fix busy partition detection on devices witout sequential minor device numbers
    Resolves: rhbz#1018075
  - Fix align-check in interactive mode
    Resolves: rhbz#975478


author: Brian C. Lane <bcl@redhat.com> 2.1-23
changelog:
  - Drop the warning about greater than 512-byte sector sizes being experimental
    Resolves: rhbz#929319


author: Brian C. Lane <bcl@redhat.com> 2.1-26
changelog:
  - libparted: device mapper uses 512b sectors
    Resolves: rhbz#1189328
  - tests: Add a test for device-mapper partition sizes
    Related: rhbz#1189328
  - tests: Turn on testing of other blocksizes
    Related: rhbz#1189328


author: Brian C. Lane <bcl@redhat.com> 2.1-27
changelog:
  - libparted: fix gpt end of disk handling
    Resolves: rhbz#1180683
  - tests: Add tests for gpt end of disk handling
    Related: rhbz#1180683


author: Ondrej Vasik <ovasik@redhat.com> - 1.25-6
changelog:
  - added doc files
  - used texconfig-sys rehash instead of texhash
  - dist tag, license tag, rpmlint silencing


author: Tomas Mraz <tmraz@redhat.com> 0.75-1
changelog:
  - fix disabling SELinux and audit in spec (#433284)
  - remove obsolete no.po (#332121)
  - updated translations


author: Tomas Mraz <tmraz@redhat.com> 0.77-4.2
changelog:
  - add -e option to expire the password for user
  - compile the binary with PIE and full RELRO options


author: Tim Waugh <twaugh@redhat.com> 2.6-1
changelog:
  - 2.6.  No longer need stderr, suffix, stripcr, parse, allow-spaces,
    ifdef, program_name, or posix-backup patches.


author: Tim Waugh <twaugh@redhat.com> 2.6-2
changelog:
  - Applied upstream patch to prevent incorrect filename being chosen
    when adding a new file (bug #550319).


author: Tim Waugh <twaugh@redhat.com> 0.2.31-4
changelog:
  - Versioned obsoletes/provides (bug #226234).
  - Created %check section (bug #226234).
  - Avoid %makeinstall (bug #226234).
  - Fixed defattr declaration (bug #226234).


author: Radek Brich <rbrich@redhat.com> - 3.4-2
changelog:
  - applied patch for #239000 (pax fails creation of ustar
    if an absolute name is exactly 100 characters long)


author: Ondrej Vasik <ovasik@redhat.com> - 3.4-7
changelog:
  - Merge review #226235: do ship doc files,
    do comment patches, use better buildroot and
    defaults for attributes, allow parallel builds


author: Michal Hlavinka <mhlavink@redhat.com> - 3.1.10-4
changelog:
  - close directory after processing pci.ids.d directory (#684000)
  - sysfs: do not warn on incomplete slot addresses (#1032827)


author: Dave Brolley <brolley@redhat.com> - 3.9.2-1
changelog:
  - Improve pmdarpm(1) concurrency complications (BZ 1044297)
  - Fix pmconfig(1) shell output string quoting (BZ 1085401)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.9.4-1
changelog:
  - Merged pcp-gui and pcp-doc packages into core PCP.
  - Allow for conditional libmicrohttpd builds in spec file.
  - Adopt slow-start capability in systemd PMDA (BZ 1073658)
  - Resolve pmcollectl network/disk mis-reporting (BZ 1097095)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.9.4-3
changelog:
  - Backport PCP daemon signal handling fixes (BZ 847343).
  - Resolve potential signed integer overflow (ET rpmdiff 97915).
  - Update spec to ensure tutorial files live in pcp-doc package.


author: Nathan Scott <nathans@redhat.com> - 3.10.3-1
changelog:
  - Update to latest PCP sources again (BZ 1158681).
  - Fixes bug in s390x /proc/cpuinfo parsing (BZ 1196540).
  - Added explicit PAPI 5.1.1 build dependencies (BZ 1188045).
  - Improved diagnostics for chkconfig-driven service (BZ 1131022).
  - New sub-package for pcp-import-ganglia2pcp.


author: Nathan Scott <nathans@redhat.com> - 3.10.3-2
changelog:
  - Resolve PAPI build dependency issues again (BZ 1188045).
  - Fix Avahi-related pmwebd memory corruption (BZ 1199052).
  - Resolve QA test case failures (BZ 1198031 & BZ 1198981).


author: Nathan Scott <nathans@redhat.com> - 3.10.3-3
changelog:
  - Fix postfix pmda failing to setgid to postfix user (BZ 1213724).
  - Fix postfix pmda not reporting incoming mails (BZ 1213764).
  - Consistent naming for tools related to LVM cache (BZ 1218007).


author: Lukas Berk <lberk@redhat.com> - 3.10.9-1
changelog:
  - Resolve local_sock() double free error (BZ 1258846).
  - Resolve netfilter pmda uses outdated /proc API (BZ 1221653).
  - Update to latest PCP sources (BZ 1248272).
  - Fix pmatop attribute error (BZ 1195429).
  - Fix pmwebd fails when monitoring systems with Vector (BZ 1238863).


author: Lukas Berk <lberk@redhat.com> - 3.10.9-3
changelog:
  - Correct papi version we link against (BZ 1295694)
  - Fix possible overflow with pmdaproc using local context options (BZ 1295801)
  - Dropped pcp-compat package from upstream (BZ 1294390)


author: Lukas Berk <lberk@redhat.com> - 3.10.9-4
changelog:
  - Correct interrupts parsing on s390x platforms (BZ 1297822)
  - Correct papi version we link against for 32 bit arches (BZ 1295694)


author: Lukas Berk <lberk@redhat.com> 3.10.9-6
changelog:
  - Update pmdanamed testcaes (BZ 1303005)
  - Fix possible fd leak in pmdanamed (BZ 1223311)
  - Fix issue with pmdagfs2 installation (BZ 1305939)
  - Address testcase 370 failure on non x86_64 archs (BZ 1305940)
  - Address endian issue with pmdalinux on some platforms (BZ 1298722)


author: Nathan Scott <nathans@redhat.com> 3.10.9-7
changelog:
  - Fix pmlogconf probing of base XFS metrics (BZ 1358972)
  - Resolve SIGFPE in pcp-atop with missing metrics (BZ 1373590)
  - Support pcp-iostat uninterpolated PCP archive replay (BZ 1293661)
  - Resolve several reporting issues in PostgreSQL PMDA (BZ 1304619)


author: Nathan Scott <nathans@redhat.com> 3.10.9-9
changelog:
  - Added pcp-iostat precision reporting capability (BZ 1297498)
  - Fixed a pcp-iostat argument checking stack trace (BZ 1414257)


author: Nathan Scott <nathans@redhat.com> - 3.9.0-1
changelog:
  - Create new sub-packages for pcp-webapi and pcp-manager
  - Split configuration from pcp-libs into pcp-conf (multilib)
  - Fix pmdagluster to handle more volumes, fileops (BZ 1066544)
  - Update to latest PCP sources.


author: Tomas Hoger <thoger@redhat.com> - 7.3-3
changelog:
  - Backport patch from upstream pcre 7.6 to address buffer overflow
    caused by "a character class containing a very large number of
    characters with codepoints greater than 255 (in UTF-8 mode)"
    CVE-2008-0674, #431660
  - Try re-enabling make check again.


author: Lubomir Rintel <lkundrak@v3.sk> - 7.8-1
changelog:
  - Update to 7.8, drop upstreamed patches
  - Fix destination of documentation (#427763)
  - Use buildroot macro consistently
  - Separate the static library, as per current Guidelines
  - Satisfy rpmlint


author: Petr Pisar <ppisar@redhat.com> - 7.8-4
changelog:
  - Add license files to static subpackage (Resolves: #613690)
  - Fix typos in pcretest(1) manual page (Resolves: #676636)
  - Fix typos in pcregrep(1) manual page (Resolves: #676643)


author: Petr Pisar <ppisar@redhat.com> - 7.8-5
changelog:
  - Reintroduce RE::Init(const char*) to restore ABI with pcre-6
    (Resolves: #842000)
  - Fix spelling formfeed, runtime, whitespace in manual pages
    (Resolves: #799003)


author: Petr Pisar <ppisar@redhat.com> - 7.8-6
changelog:
  - Fix repeated forward reference needing a character (Resolves: #756105)
  - Fix caseless match if cases differ in encoding length (Resolves: #759475)


author: Petr Pisar <ppisar@redhat.com> - 7.8-7
changelog:
  - Check starting offest for pointing into a subject string
    (Resolves: #1193524)
  - Pass back detailed error when UTF-8 check fails at runtime
    (Resolves: #1193524)


author: Chris Feist <cfeist@redhat.com> - 0.9.123-3
changelog:
  - Added ability to upgrade cluster cib and we auto upgrade cib if we're running
    an acl command (except show or help)
  - Resolves: rhbz#1112727


author: Chris Feist <cfeist@redhat.com> - 0.9.123-4
changelog:
  - Fixed resource delete for clones of groups with more than one resource
  - Fixed unclone of group so all resources are removed
  - Resolves: rhbz#1107612 rhbz#1108778


author: Chris Feist <cfeist@redhat.com> - 0.9.123-6
changelog:
  - Fixed issue with sync cluster.conf & adding uid/gid across cluster on RHEL6 w/ pcsd
  - Resolves: rhbz#1102836


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.138-1
changelog:
  - Rebased to latest upstream packages
  - Fixed creating default resource operations
  - Added support for RRP and corosync options for cman based clusters
  - Allowed scope=configuration in cib commands
  - Added support for configuring a cluster remotely using pcsd
  - Fixed globally-unique clone resources in pcsd
  - Added resource location to resources / stonith devices list
  - Fixed formatting of resource / fence agent description
  - Fence agent description now contains information about the agent
  - Parallelized cluster start and cluster stop
  - Added warning when nodes stop will cause a loss of the quorum
  - pcs status --full now displays Node attributes and Migration summary
  - Resolves: rhbz#1185738 rhbz#1031141 rhbz#1121769 rhbz#1126835 rhbz#1160359 rhbz#1168986 rhbz#1174244 rhbz#1174793 rhbz#1174798 rhbz#1174801 rhbz#1184763 rhbz#1184922


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.139-1
changelog:
  - Rebased to latest upstream packages
  - Fixed constraints removal and node standby/unstandby using remote GUI
  - Fixed displaying of fence / resource agent metadata in GUI
  - Added Pacemaker Resource defaults and Op defaults to 'pcs config' output
  - Fixed 'pcs resource clear' used on cloned group
  - Added support for scope option in cib commands
  - Added warning when creating a cluster with UDPU transport
  - Reload cluster.conf after node addition / removal
  - Resolves: rhbz#1185738 rhbz#1168982 rhbz#1174793 rhbz#1187488 rhbz#1190167 rhbz#1190168 rhbz#1191898 rhbz#1193433


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.139-9.el6_7.1
changelog:
  - Fixed session and cookies processing
  - Fixed command injection vulnerability
  - Resolves: rhbz#1253287 rhbz#1253291


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.145-1
changelog:
  - Rebased to latest upstream packages
  - Added a warning to "pcs cluster setup" when a node is already in a cluster
  - Fixes in help text and man page
  - Rubygems built with RELRO
  - Added option to put a node into maintenance mode
  - Ungrouping the last resource from a cloned group no longer produces an invalid CIB
  - Removing a resource from a group no longer removes constraints referencing that group
  - Fixed session and cookies processing
  - Fixed command injection vulnerability
  - Added support for exporting cluster configuration to a list of pcs commands using clufter
  - Added automatic removal of old config file backups
  - Fixed removing a fence device from fence levels on deleting the device
  - Resolves: rhbz#1260021 rhbz#1190732 rhbz#1203802 rhbz#1230368 rhbz#1242158 rhbz#1243744 rhbz#1245721 rhbz#1247883 rhbz#1247979 rhbz#1253288 rhbz#1253292 rhbz#1264795 rhbz#1273391 rhbz#1275254


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.146-1
changelog:
  - Rebased to latest upstream packages
  - Rubygems built with RELRO
  - Resolves: rhbz#1260021 rhbz#1242158


author: Tomas Jelinek <tojeline@redhat.com> - 0.9.148-1
changelog:
  - Rebased to latest upstream packages
  - Fixed crashes on one-node clusters
  - Resolves: rhbz#1260021 rhbz#1283627


author: Ivan Devat <idevat@redhat.com> - 0.9.148-2
changelog:
  - Moved DISABLED_GUI option to /etc/sysconfig/pcsd
  - Added backend support for new cluster properties form in web UI
  - Fixed multilib .pyc/.pyo issue
  - Resolves: rhbz#1297782 rhbz#1298163


author: Ivan Devat <idevat@redhat.com> - 0.9.148-3
changelog:
  - Fixed updating cluster properties from older version of web UI
  - Fixed syntax error in utilization attributes functions
  - Resolves: rhbz#1298163
  - Related: rhbz#1260021


author: Ivan Devat <idevat@redhat.com> - 0.9.154-1
changelog:
  - Rebased to latest upstream packages
  - Keep a cluster qauorate as long as possible when shutting it down
  - Fixed disabling TLSv1.1 in pcsd
  - Fixed error message in node maintenance/unmaintenance commands
  - Fixed adding a node when fencing configuration has been manually changed in cluster.conf
  - Make pcsd init script wait for pcsd to fully start
  - Gracefully handle errors when reading cluster properties definition
  - Resolves: rhbz#1373874 rhbz#1353738 rhbz#1344928 rhbz#1369029 rhbz#1319070 rhbz#1328870 rhbz#1325459


author: Ivan Devat <idevat@redhat.com> - 0.9.155-1
changelog:
  - Rebased to latest upstream packages
  - When stopping a cluster with some of the nodes unreachable, stop the cluster completely on all reachable nodes
  - Fixed occasional crashes / failures when using locale other than en_US.UTF8
  - Added SBD support for cman clusters
  - Added alerts management in web UI
  - Resolves: rhbz#1373874 rhbz#1315748 rhbz#1380372 rhbz#1387106 rhbz#1380352 rhbz#1376480


author: Ivan Devat <idevat@redhat.com> - 0.9.155-2
changelog:
  - Fixed upgrading CIB to the latest schema version
  - Adding a node in a cluster does not cause the new node to be fenced immediately
  - Fixed handling of HTTP communication failure
  - Added dependency on cman
  - Resolves: rhbz#1397408 rhbz#1394846 rhbz#1394273 rhbz#1394857


author: Chris Feist <cfeist@redhat.com> - 0.9.26-6
changelog:
  - Added additional specific steps for configuring pcs on Red Hat Enterprise
    Linux 6
  - Resolves: rhbz#878682


author: Chris Feist <cfeist@redhat.com> - 0.9.26-9
changelog:
  - pcs now allows assigning constraints to group/clone/multistate resources
  - pcs no longer deletes resources from the lrm during resource removal
  - Resolves: rhbz#894174 rhbz#893221


author: Chris Feist <cfeist@redhat.com> - 0.9.26-10
changelog:
  - Removed one extra place where pcs incorrectly deleted resources from the lrm
  - Resolves: rhbz#893221


author: Chris Feist <cfeist@redhat.com> - 0.9.82-1
changelog:
  - Show constraint id when printing out location rules
  - Improve error messages when adding location rules with errors
  - Add ability to remove constraint rules
  - Allow move of master/slave resources if --master is present


author: Chris Feist <cfeist@redhat.com> - 0.9.87-1
changelog:
  - Allow two ordering constraints with same resources
  - Improved error messages when trying to master/clone resources
  - Updated error message when attempting to move a master/slave without
    --master


author: Chris Feist <cfeist@redhat.com> - 0.9.88-1
changelog:
  - Don't allow order/colocation constraints created for master primitives
  - Check in clones for stonith resources
  - Clarify 'constraint rule add' in man page/usage
  - Fixed minor usage issue with colocation sets


author: Chris Feist <cfeist@redhat.com> - 0.9.89-1
changelog:
  - Show location constraint role in pcs status/constraint
  - Disable resource before removing
  - Misc man/usage fixes


author: Chris Feist <cfeist@redhat.com> - 0.9.90-1
changelog:
  - Add ability to set node attributes
  - Fix issue setting meta attributes on a master when creating a resource


author: Chris Feist <cfeist@redhat.com> - 0.9.90-2.el6_5.2
changelog:
  - Fixed bug causing an issue when adding stonith level without --force
  - Added ability to create/edit/remove uidgid for corosync in cluster.conf
  - Fixed bug which wouldn't allow a user to standby nodes
  - Resolves: rhbz#1038479 rhbz#1038478 rhbz#1032161


author: Chris Feist <cfeist@redhat.com> - 0.9.90-2.el6_5.3
changelog:
  - When creating a resource using --group/--clone/--master put the group
    inside the master/clone/group before putting it into the live CIB
  - Resolves: rhbz#1099314


author: Bob Relyea <rrelyea@redhat.com> - 1.5.2-14
changelog:
  - handle different usb scheme needed to support ReinerSCT Cyberjack
    readers. Patch was supplied by customer.


author: Bob Relyea <rrelyea@redhat.com> - 1.5.2-15
changelog:
  - unlock mutex on failure
  - clean up socket files after start at init time (allows restart after
    crash or hard fail of pcscd)


author: Karsten Hopp <karsten@redhat.com> 1.4.102-4
changelog:
  - remove excludearch s390, s390x (#467788)
    even though s390 does not have libusb or smartCards, the libusb
    packages are required to build other packages.


author: Doug Ledford <dledford@redhat.com> - 1.2-11
changelog:
  - Upstream has updated the tarball without updating the version, so we
    grabbed the one from the OFED-1.3.2-20080728.0355 tarball
  - Resolves: bz451481


author: Doug Ledford <dledford@redhat.com> - 1.2-13.el5
changelog:
  - Update to ofed 1.4.1 final bits
  - Rebuild against non-XRC libibverbs
  - Related: bz506097, bz506258


author: Doug Ledford <dledford@redhat.com> - 1.3.0-1
changelog:
  - Update to latest upstream release (1.2.3 -> 1.3.0)
  - Strip rocee related code out of upstream update
  - Add a buildrequires on libibumad because upstream needs it now
  - Fix lack of build on i686
  - Related: bz725016
  - Resolves: bz724896


author: Doug Ledford <dledford@redhat.com> - 1.3.0-2
changelog:
  - Update to latest upstream release
  - No longer strip rocee related code out, we can compile with it now
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 2.0-1
changelog:
  - Update to latest upstream release
  - We had to drop ib_clock_test program as no equivalent exists
    in the latest release
  - Resolves: bz806183, bz806185, bz830099


author: Doug Ledford <dledford@redhat.com> - 2.0-2
changelog:
  - Fix rpmdiff detected error.  Upstream overrode our cflags so stack
    protector got turned off.
  - Related: bz806183


author: Michal Schmidt <mschmidt@redhat.com> - 3.0-2.0.16.gb2f2e82
changelog:
  - Respect distro CFLAGS, restore fortification.
  - debuginfo package had executable source files.
  - Related: bz1127235, bz1129312


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-107
changelog:
  - clean spec - remove unused patches, rename patches, sources
  - add releases macros for all modules
  - change license according to legal
  - update modules to stable version. e.g. Module-Build can't be updated anymore
    because of API breakage, that's true also for some other modules.
  - Related: rhbz#543948


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-108
changelog:
  - remove DPERL_USE_SAFE_PUTENV from Configure #577229 Use perl internal
   putenv, which doesn't leak memory.
  - 580238 wrong version of module
  Resolves: rhbz#580238


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-110
changelog:
  - 597982 add all version* in -version sub-package
  - Resolves: rhbz#597982, rhbz#598397, rhbz#595387, rhbz#595387


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-110
changelog:
  - set CPAN installation path into "site"
  - 'make local' now pass because of Patch0, which removes incorectly set
   dependencies
  - Related: rhbz#594768


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-111
changelog:
  - fix conflicts in specfile, upload missing sources, upload patch with
   wrong name
  - Related: rhbz# 594768


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-113
changelog:
  - fix CGI test data location to pass internal tests 
  - remove CPAN and CPANPLUS sysconfig declarations as they are not provided
  - disable tests on s390(x) and ppc64 as multithread stress tests fails
  - Related: rhbz#594768


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-114
changelog:
  - Remove unused @INC paths
  - Own all used @INC paths
  - Own architecture dependent paths by perl-libs due to multiarch
  - Resolves: rhbz#554671


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-116
changelog:
  - require Digest::SHA 640716
  - remove removal of NDBM 640729
  - remove unsupported option fork from prove's documentation 609492
  - Thread desctructor leaks 640720
  - update threads to 1.82 (bugfixes releases) 626330
  - remove unused patches from cvs
  - Resolves: rhbz#640729, rhbz#640716, rhbz#609492, rhbz#640720, rhbz#626330


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-119
changelog:
  - 692862 - lc launders tainted flag, CVE-2011-1487
  - make SOURCE1 executable, because it missed +x in brew
  - Resolves: rhbz#692862


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-119.1
changelog:
  - 731246 (CVE-2011-2939)CVE-2011-2939 heap overflow - decoding Unicode string
  - 743010 - perl: code injection vulnerability in Digest->new()
  - Resolves: rhbz#743090, rhbz#743092


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-120
changelog:
  - 731246 (CVE-2011-2939)CVE-2011-2939 heap overflow - decoding Unicode string
  - 743010 - perl: code injection vulnerability in Digest->new()
  - Resolves: rhbz#743093, rhbz#743091


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-122
changelog:
  - Resolves: rhbz#738421 - Package bzip2 modules
  - Resolves: rhbz#750145 - Add require EE::MM into IPC::Cmd


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-130
changelog:
  - Resolves: #915692 - CVE-2012-5526 (newline injection due to improper CRLF
    escaping in Set-Cookie and P3P headers)
  - Resolves: #915692 - CVE-2012-6329 (possible arbitrary code execution via
    Locale::Maketext)
  - Resolves: #915692 - CVE-2013-1667 (DoS in rehashing code)


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-130
changelog:
  - Resolves: #915693 - CVE-2012-5526 (newline injection due to improper CRLF
    escaping in Set-Cookie and P3P headers)
  - Resolves: #915693 - CVE-2012-6329 (possible arbitrary code execution via
    Locale::Maketext)
  - Resolves: #915693 - CVE-2013-1667 (DoS in rehashing code)


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-132
changelog:
  - Resolves: #767608 - Fix memory leak when accessing non-matched named
    capturing groups
  - Resolves: #839788 - Do not crash if declared DESTROY method has not been
    defined


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-133
changelog:
  - Resolves: #698552 - Correct taintedness tests
  - Resolves: #825713 - Fix find2perl to translate ? glob properly
  - Resolves: #810469 - Upgrade IO-Compress, Compress-Raw-Bzip2, and
    Compress-Raw-Zlib to 2.021
  - Resolves: #819042 - Set default output for Pod::Man and Pod::Text
    parse_file() methods
  - Resolves: #905482 - Require glibc-devel, gdbm-devel, db4-devel by perl-devel


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-134
changelog:
  - Resolves: #973022 - Make non-option handler for Getopt::Long::GetOptions()
    compatible with XML::Simple


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-138
changelog:
  - Fix backslash interpolation in Locale::Maketext (bug #1025906)
  - Do not ignore single-letter-named packages by Module::Plugable (bug #1086215)
  - Run-require exact version of perl-libs by perl-suidperl (bug #1161170)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.10.1-143
changelog:
  - Fix typo in name of the signal PIPE in IPC::Cmd (bug #1315053)
  - Fix crash in httpd mod_perl Perl_sv_pvn_force_flags (bug #1364206)


author: Robin Norwood <rnorwood@redhat.com> - 1.20-2
changelog:
  - Resolves: rhbz#226240
  - Incorporate changes from Steven Pritchard's package review
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - Remove check macro cruft.
  - Update build dependencies.
  - Package LICENSE.
  - BR unzip, zip for better test coverage.


author: Steven Pritchard <steve@kspei.com> 2.11-1
changelog:
  - Update to 2.11.
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to resemble cpanspec output.
  - Drop explicit perl build dependency.


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1.23-3
changelog:
  - Unconditionally BR: perl(Test::CPAN::Meta).
  - Adjust minimum perl version in META.yml (Add Class-Inspector-1.23.diff).


author: Steven Pritchard <steve@kspei.com> 1.4-1
changelog:
  - Update to 1.4.
  - Update License tag.
  - Drop our copy of the license text.
  - Improve Summary.
  - Make description match cpanspec output.
  - BR Test::More.


author: Ville Skyttä <ville.skytta@iki.fi> - 2.42-1
changelog:
  - 2.42.
  - Patch test suite to use system installed Tie::IxHash.
  - Fix some spelling errors in %description.
  - Use Source0: instead of Source:.


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.52-1
changelog:
  - 2.52 bump, specify all dependencies
  - Resolves: #658946 - Stop error reporting when config is a directory


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0.21-1
changelog:
  - Update to 0.21.
  - Corrected several changelog entries.
  - Removed an explicit perl(Convert::ASN1) provides.


author: Paul Howarth <paul@city-fan.org> 1.119-3
changelog:
  - use full paths for all commands used in build
  - use search.cpan.org download URL
  - assume rpm knows about %check and %{perl_vendorlib}
  - cosmetic spec file changes


author: Petr Pisar <ppisar@redhat.com> - 0.57-17
changelog:
  - Link to the ca-certificates ca-bundle.crt instead of shipping our own,
    outdated copy (bug #1059992)


author: Chris Weyl <cweyl@alumni.drew.edu> 1.25-1
changelog:
  - 1.25 needed for DBIx::Class 0.08103
  - auto-update to 1.25 (by cpan-spec-update 0.01)
  - added a new br on perl(File::Spec) (version 0.82)
  - altered br on perl(Test::More) (0 => 0.42)
  - added a new br on perl(DBI) (version 1.57)


author: Robin Norwood <rnorwood@redhat.com> - 1.601-1
changelog:
  - Update to latest CPAN version: 1.601
  - Fix some issues from package review:
    - patch to change #! line in script
    - make script executable
    - fix requires and buildrequires


author: Marcela Mašláňová <mmaslano@redhat.com> - 6.3-1
changelog:
  - new upstream version - noarch, because since 6.0 there were bigger
   changes like stripping this module into more of them


author: Robin Norwood <rnorwood@redhat.com> - 5.44-2
changelog:
  - Add support for KRAT and KRAST timezones
  - Include magic dist tag in release
  - Resolves: rhbz#214709
  - Related: rhbz#100786


author: Robin Norwood <rnorwood@redhat.com> - 5.44-4
changelog:
  - Apply patch to use date +%z as possible source for timezone data
  - Fix license tag
  - Add TODO and HISTORY to %doc list


author: Ed Avis <eda@waniasset.com> - 5.48-1
changelog:
  - Update to 5.48.
  - rhbz#214709 Krasnoyarsk patch now upstream.
  - Changed name to Date-Manip as now used on CPAN.


author: Petr Pisar <ppisar@redhat.com> - 6.24-1
changelog:
  - Rebase to version 6.24 (bug #672934)
  - Patch perl-Date-Manip-5.48-datez-rhbz248500.patch inlcuded in upstream
    already.
  - Move to core Perl path to comply with RHEL Developer Guide


author: Steven Pritchard <steve@kspei.com> 1:0.4302-1
changelog:
  - Update to DateTime 0.4302.
  - Update to DateTime::TimeZone 0.77.
  - Update to DateTime::Locale 0.4001.
  - BR List::MoreUtils.
  - Define IS_MAINTAINER so we run the pod tests.


author: Steven Pritchard <steve@kspei.com> 1:0.4304-1
changelog:
  - Update to DateTime 0.4304.
  - Update to DateTime::TimeZone 0.78.
  - Update to DateTime::Locale 0.41.


author: Steven Pritchard <steve@kspei.com> 1:0.4401-1
changelog:
  - Update to DateTime 0.4401.
  - Update to DateTime::Locale 0.42.
  - Update to DateTime::TimeZone 0.8301.


author: Stepan Kasal <skasal@redhat.com> - 1:0.5300-1
changelog:
  - new upstream version
  - use Build.PL as Makefile.PL no longer exists
  - use iconv to recode to utf-8, not a patch
  - update BuildRequires
  - drop Provides: perl(DateTime::TimeZoneCatalog), it is no longer there
  - use filtering macros


author: Steven Pritchard <steve@kspei.com> 1.09-1
changelog:
  - Update to 1.09.
  - Reformat to match cpanspec output.
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.


author: Ville Skyttä <ville.skytta at iki.fi> - 2.11-2
changelog:
  - Sync with latest rpmdevtools perl spec template.
  - BuildRequire perl(ExtUtils::MakeMaker).
  - Convert docs to UTF-8.


author: Steven Pritchard <steve@kspei.com> 1:0.17011-1
changelog:
  - Update to 0.17011.
  - Canonicalize Source0 URL.
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - Improve Summary.
  - Reformat to match cpanspec output.
  - Build with Module::Build.


author: Steven Pritchard <steve@kspei.com> 1.24-1
changelog:
  - Update to 1.24.
  - Bump Devel::StackTrace dependency to 1.17.
  - Clean up to match current cpanspec output.
  - Improve Summary and description.
  - Build with Module::Build.
  - BR Test::Pod and Test::Pod::Coverage and define IS_MAINTAINER.


author: Nicolas Mailhot <nicolas.mailhot at laposte.net>
changelog:
  - 0.45-1
  ⌖ Fedora 10 alpha general package cleanup
  ⚖ Upstream needs to relicense fast to avoid culling


author: Robin Norwood <rnorwood@redhat.com> - 0.07b4-3
changelog:
  - Various fixes from package review:
  - Remove BR: perl
  - Use dist tag in release
  - Resolves: bz#226258


author: Tom "spot" Callaway <tcallawa@redhat.com> - 2.35-7
changelog:
  - tests work fine locally, one fails in mock, maybe needs a desktop? 
    conditionalized them, default off.


author: Stepan Kasal <skasal@redhat.com> - 2.44-1
changelog:
  - new upstream version
  - run tests always
  - do not add bdf_scripts/ to docs
  - switch off the test that fails in i686 koji


author: Steven Pritchard <steve@kspei.com> 0.24-2
changelog:
  - Update License tag.
  - Use fixperms macro instead of our own chmod incantation.
  - Source in /etc/profile.d/krb5-devel.sh to get our path right.


author: Steven Pritchard <steve@kspei.com> 0.26-1
changelog:
  - Update to 0.26.
  - Cleanup a little to more closely match cpanspec output.
  - BR ExtUtils::MakeMaker.


author: Petr Pisar <ppisar@redhat.com> - 0.26-6
changelog:
  - Do not source /etc/profile.d/krb5-devel.sh as krb5-devel-1.8.1-6 does not
    provide it and places executables into standard PATH (Resolves: #657274)


author: Ralf Corsepius <corsepiu@fedoraproject.org> - 0.20-6
changelog:
  - Add Hook-LexWrap-0.20-cpan-rt-38892.diff to fix
    http://rt.cpan.org/Public/Bug/Display.html?id=38892
    (Bugs shows while building rt3).


author: Paul Howarth <paul@city-fan.org> - 0.21-1
changelog:
  - Update to 0.21
  - New upstream maintainer => new source URL
  - Add buildreqs perl(Test::More) and perl(Test::Pod)
  - Update patch for CPAN RT#38892 to apply without fuzz
  - Fix argument order for find with -depth


author: Ralf Corsepius <corsepiu@fedoraproject.org> - 0.22-1
changelog:
  - Upstream update.
  - Reflect upstream having fixed CPAN RT#38892:
    Remove Hook-LexWrap-0.21-cpan-rt-38892.diff.
  - Reflect upstream having fixed permissions.


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26 (verify_hostname_of_cert matched only the prefix for the
    hostname when no wildcard was given, e.g. www.example.org matched against a
    certificate with name www.exam in it [#509819])


author: Paul Howarth <paul@city-fan.org> - 1.27-1
changelog:
  - Update to 1.27
    - various regex fixes for i18n and service names
    - fix warnings from perl -w (CPAN RT#48131)
    - improve handling of errors from Net::ssl_write_all


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30 (fix memleak when SSL handshake failed)
  - Add buildreq procps needed for memleak test


author: Robin Norwood <rnorwood@redhat.com> - 1.08-3
changelog:
  - Fix various package review issues:
  - Remove BR: perl
  - Remove "|| :" from check section
  - Add dist tag
  - Fix Source URL
  - Fix old changelog entries
  - Resolves: bz#226265


author: Paul Howarth <paul@city-fan.org> 2.110-3
changelog:
  - use search.cpan.org download URL
  - use full paths for all commands used in build
  - assume rpm knows about %check and %{perl_vendorlib}
  - cosmetic spec file changes


author: Steven Pritchard <steve@kspei.com> 0.82-1
changelog:
  - Update to 0.82.
  - Use fixperms macro instead of our own chmod incantation.
  - Fix Source0 URL.
  - BR Test::More.
  - Include LICENSE, README, and abuse/ in docs.
  - Cleanup to more closely resemble cpanspec output.


author: Tom "spot" Callaway <tcallawa@redhat.com> - 0.042-2
changelog:
  - fix license tag (technically, it was correct before, but this keeps rpmlint from
    flagging this package as a false positive)


author: Robin Norwood <rnorwood@redhat.com> - 1:0.33-3
changelog:
  - Bugzilla: 207430
  - Incorporate fixes from Jose Oliveira's patch
  - Add perl(IO::Socket::SSL) as a BuildRequires as well
  - Other cleanups from Jose


author: Robin Norwood <rnorwood@redhat.com> - 1:0.34-3
changelog:
  - Resolves: bz#226267
  - Only filter out the unversioned Provides: perl(Net::LDAP::Filter) to
    avoid breaking dependencies.


author: Petr Pisar <ppisar@redhat.com> - 1:0.40-2
changelog:
  - Do not set SSL ciphers at all by default (bug #1090966)
  - Pass actual length to syswrite() instead of default 1500 B (bug #1104069)


author: Paul Howarth <paul@city-fan.org> 5.425-1
changelog:
  - Update to 5.425
  - Add note about File::Temp requirement
  - New upstream maintainer -> updated URL for source
  - Given that this package will not build on old distributions, don't cater
    for handling old versions of MIME::QuotedPrint in %check and buildreq
    perl(MIME::Base64) >= 3.03
  - Buildreq perl(File::Path) >= 1, perl(File::Spec) >= 0.6, and
    perl(IO::Stringy) >= 2.110
  - Only include README as %doc, not README*
  - Dispense with provides filter, no longer needed


author: Paul Howarth <paul@city-fan.org> 5.426-1
changelog:
  - Update to 5.426
  - Now require File::Temp >= 0.18
  - Add POD tests, coverage disabled because of lack of coverage from upstream


author: Paul Howarth <paul@city-fan.org> 2.02-1
changelog:
  - Update to 2.02
  - Remove buildreqs perl(Net::SMTP) and perl(Net::Domain), bundled with perl
  - Add buildreqs perl(Date::Format), perl(Date::Parse), perl(Test::More), and
    perl(Test::Pod)
  - Remove patch for CPAN RT#20726, now fixed upstream
  - Buildreq perl >= 5.8.1
  - Tweak files list to mark pod files as %doc
  - Fix character encoding for ChangeLog


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.91-3
changelog:
  - dist_file.txt wasn't packaged -> removed, it's needed only for test of build
  - Resolves: rhbz#550011


author: Steven Pritchard <steve@kspei.com> 0.81-1
changelog:
  - Update to 0.81.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.
  - BR ExtUtils::MakeMaker.


author: Chris Weyl <cweyl@alumni.drew.edu> 0.95-1
changelog:
  - auto-update to 0.95 (by cpan-spec-update 0.01)
  - add perl_default_filter (pro forma)
  - altered br on perl(ExtUtils::MakeMaker) (0 => 6.42)


author: Rich Megginson <rmeggins@redhat.com> - 1.5.2-6.2
changelog:
  - fixes for RHEL-6 pkgwrangler review
  - Makefile.PL.rpm is not an upstream source
  - Source URL was pointing to the wrong location
  - change Release so dist tag is last


author: Rich Megginson <rmeggins@redhat.com> - 1.5.3-1
changelog:
  - new version 1.5.3 with openldap support
  - Resolves: bug 610902 - Modify perl-Mozilla-LDAP to use open ldap library


author: Marcela Maslanova <mmaslano@redhat.com> - 0.63-4
changelog:
  - 437681 remove previous patch and use upstream patch, which should solve
          all problems with noisy logs.


author: Chris Weyl <cweyl@alumni.drew.edu> 2.0-5
changelog:
  - disable tests which will fail under mock
  - remove execute bits from files which shouldn't have them
  - include additional buildreq of perl(Time::Timezone)
  - also include perl(Time::Timezone) as a requires, as it provides optional
    functionality and is not picked up by the autoreq/prov scripts.


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.0-9
changelog:
  - fix license tag (technically, it was correct before, but this change prevents
    rpmlint from flagging it as bad in a false positive)


author: Paul Howarth <paul@city-fan.org> - 1.35-1
changelog:
  - update to 1.35
  - drop flag and patch for enabling/disabling external tests - patch now upstream
  - external hosts patch no longer needed as we don't do external tests
  - filter out unversioned provide for perl(Net::SSLeay)
  - use the distro openssl flags rather than guessing them


author: Paul Howarth <paul@city-fan.org> - 1.35-7
changelog:
  - update to svn trunk (rev 252), needed due to omission of MD2 functionality
    from OpenSSL 1.0.0 (CPAN RT#48916)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.03-7
changelog:
  - Fix bug 226273:
    * Add dist tag.
    * Fix rpmlint errors for %description.
    * Remove MANIFEST from package.
  - General clean up of spec file.


author: Chris Weyl <cweyl@alumni.drew.edu> 1.02-1
changelog:
  - update to 1.02
  - note license change:  perl to LGPL
  - switched over to Build.PL; misc spec file cleanups


author: Chris Weyl <cweyl@alumni.drew.edu> 0.103-1
changelog:
  - auto-update to 0.103 (by cpan-spec-update 0.01)
  - added a new br on perl(ExtUtils::MakeMaker) (version 6.42)


author: Steven Pritchard <steve@kspei.com> 1.6-1
changelog:
  - Update to 1.6.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.


author: Ralf Corsépius <rc040203@freenet.de> - 0.33-1
changelog:
  - Upstream update.
  - Conditionally BR: perl(Test::CPAN::Meta).
  - Hack testsuite to accept Test::CPAN::Meta != 0.07.


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 0.35-1
changelog:
  - Upstream update.
  - Remove BuildArch: noarch (package now is arch'ed).
  - Remove testsuite hack to accept perl(Test::CPAN::Meta) != 0.07.


author: Robin Norwood <rnorwood@redhat.com> - 1.95.1-3
changelog:
  - Apply fixes from package review:
    - Remove BR: perl
    - Use iconv to convert file to utf-8
    - Include BR: perl(Test::Pod)
    - Fix old changelog entry
  - Resolves: bz#226274


author: Chris Weyl <cweyl@alumni.drew.edu> 1.962.2-1
changelog:
  - updated for latest GA SQL::Translator
  - add default filtering
  - auto-update to 1.962.2 (by cpan-spec-update 0.01)
  - added a new br on perl(Text::Balanced) (version 0)


author: Chris Weyl <cweyl@alumni.drew.edu> 1.098-1
changelog:
  - "neaten" filtering
  - auto-update to 1.098 (by cpan-spec-update 0.01)
  - added a new br on perl(strict) (version 0)
  - added a new br on perl(Scalar::Util) (version 0)
  - added a new br on perl(File::Temp) (version 0)
  - added a new br on perl(Pod::Usage) (version 0)
  - added a new br on perl(File::Find) (version 0)
  - added a new br on perl(PPI::Token::Whitespace) (version 1.203)
  - added a new br on perl(charnames) (version 0)
  - added a new br on perl(PPI::Document::File) (version 1.203)
  - added a new br on perl(File::Spec::Unix) (version 0)
  - added a new br on perl(List::Util) (version 0)
  - added a new br on perl(lib) (version 0)
  - added a new br on perl(Getopt::Long) (version 0)
  - added a new br on perl(Exporter) (version 0)
  - added a new br on perl(Test::More) (version 0)
  - added a new br on perl(overload) (version 0)
  - added a new br on perl(base) (version 0)
  - added a new br on perl(version) (version 0)
  - added a new br on perl(Carp) (version 0)
  - added a new br on perl(warnings) (version 0)
  - added a new br on perl(PPI::Document) (version 1.203)
  - added a new br on perl(File::Basename) (version 0)
  - added a new br on perl(PPI::Token::Quote::Single) (version 1.203)
  - added a new br on perl(File::Spec) (version 0)
  - added a new br on perl(File::Path) (version 0)
  - added a new br on perl(Pod::PlainText) (version 0)
  - added a new br on perl(Pod::Select) (version 0)
  - added a new br on perl(PPI::Node) (version 1.203)
  - added a new br on perl(English) (version 0)


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.105-2
changelog:
  - remove optional BR, and switch off author tests. aspell is here only for
   author test.
  - rhbz#586154
  - Related: rhbz#543948


author: Steven Pritchard <steve@kspei.com> 0.19-1
changelog:
  - Update to 0.19.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.


author: Paul Howarth <paul@city-fan.org> - 0.20-1
changelog:
  - Update to 0.20 (test updates)
  - No README in upstream distribution
  - BR: perl(Test::More)
  - More specific files list


author: Chris Weyl <cweyl@alumni.drew.edu> 1.03-6
changelog:
  - add explict requires on perl(Readonly::XS).  perl(Readonly::XS) is available
    for all architectures fedora supports, so there's no good reason to not
    require it.
  - spec file rework


author: Chris Weyl <cweyl@alumni.drew.edu> 1.05-1
changelog:
  - update to 1.05
  - filter our provides to prevent private lib from showing up
  - drop patch1; incorporated upstream as of 1.05


author: Ondrej Vasik <ovasik@redhat.com> - 1.03ii-16.3
changelog:
  - added dist tag
  - License to GPL+
  - spec file cleanup (all things from merge review by pnemade #226278)


author: Lubomir Rintel <lkundrak@v3.sk> - 0.710.08-1
changelog:
  - New upstream release
  - Enable tests
  - Include examples in documentation
  - Don't grab in dependencies of exotic transports (for the sake
    of consistency with existing practice of Jabber transport)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 0.710.08-3
changelog:
  - Filter out perl(LWP::Protocol) Provides, which comes from a file
    not stored in Perl's search path for modules (#472359).


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.710.10-3
changelog:
  - if ENV(MOD_PERL) is defined, then standard read insted of sysread must
    be used.
  - Resolves: rhbz#748376


author: Paul Howarth <paul@city-fan.org> 1.4-3
changelog:
  - fix typo in %summary and tidy up %description
  - remove redundant dependency on perl >= 1:5.6.1
  - fix argument order for find with -depth
  - drop "|| :" from %check (only required for ancient rpmbuild versions)
  - add buildreq perl(ExtUtils::MakeMaker)


author: Steven Pritchard <steve@kspei.com> 0.1901-1
changelog:
  - Update to 0.1901.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.


author: Daniel P. Berrange <berrange@redhat.com> - 0.9.10-3
changelog:
  - Fix migration speed units (rhbz #800766)
  - Fix typed param string handling (rhbz #800734)
  - Fixed block stats ref counting


author: Daniel P. Berrange <berrange@redhat.com> - 0.10.2-1
changelog:
  - Update to 0.10.2 release (rhbz #836955)
  - Fix passing flags with schedular parameters (rhbz #848309)


author: Daniel P. Berrange <berrange@redhat.com> - 0.10.2-4
changelog:
  - Fix mistakes in POD docs (rhbz #869130)
  - Fix updating of node memory params (rhbz #865310)
  - Make flags parameters optional (rhbz #873203)


author: Daniel P. Berrange <berrange@redhat.com> - 0.10.2-5
changelog:
  - Fix module type in list_all_nwfilters (rhbz #883775)
  - Fix POD doc errors in StoragePool module (rhbz #882829)
  - Fix return value checks (rhbz #886028)


author: Daniel P. Berrange <berrange@redhat.com> - 0.10.2-6
changelog:
  - Fix handling of flags in get_vcpu_info (rhbz #905836)
  - Fix handling of get_parent with NodeDev object (rhbz #908274)


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.8-1
changelog:
  - Update to 0.2.8 release (rhbz #717887)
  - Fixes missing VIR_DOMAIN_XML_SECURE binding (rhbz #705792)


author: Robin Norwood <rnorwood@redhat.com> - 2.30-3
changelog:
  - fix various issues from package review:
  - remove extra || : from %check
  - add dist tag to release
  - remove BR: perl
  - fix tabs and spacing


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.30-10
changelog:
  - remove the last test, which lead to hang-up of test suite in mock
   Test are non standart, it was need a patch.
  - Resolves: rhbz#558919


author: Steven Pritchard <steve@kspei.com> 0.10-1
changelog:
  - Specfile autogenerated by cpanspec 1.75.
  - Enable author tests.
  - Add examples to docs.
  - BR Test::More.
  - Convert LICENSE to UTF-8.
  - Drop bogus Requires.


author: Steven Pritchard <steve@kspei.com> 0.26-1
changelog:
  - Update to 0.26.
  - Update License tag.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.
  - Drop executable bits.


author: Petr Pisar <ppisar@redhat.com> 1.01-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Add BuildRequires covered by perl package
  - Distribute examples
  - Install into perl core (i.e. do not use vendor paths)


author: Steven Pritchard <steve@kspei.com> 0.082-1
changelog:
  - Specfile autogenerated by cpanspec 1.64.
  - Fix License.
  - Drop explicit dependency on perl(Test::Tester).  (Seems to be bogus.)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 0.07-1
changelog:
  - Update to 0.07.
  - Test::Builder version problem (see #205537).
  - Removed the README file (copy of the manpage).


author: Steven Pritchard <steve@kspei.com> 1.032-1
changelog:
  - Update to 1.032.
  - Use fixperms macro instead of our own chmod incantation.
  - Add LICENSE to docs.


author: Ralf Corsépius <rc040203@freenet.de> - 1.02-2
changelog:
  - Reflect license tag changes.
  - BR: perl(Test::More).
  - Remove BR: perl.
  - Add chmod -x Changes lib/Test/*pm


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11 (#477298)
  - Buildreq ExtUtils::MakeMaker, File::Spec, Test::Builder,
    Test::Builder::Tester, and Test::More (from upstream Makefile.PL)
  - Add runtime dependencies on Test::Builder and Test::Builder::Tester


author: Chris Weyl <cweyl@alumni.drew.edu> 0.21-1
changelog:
  - add perl default filter (pro forma)
  - use _fixperms incantation
  - auto-update to 0.21 (by cpan-spec-update 0.01)
  - altered br on perl(Test::Builder::Tester) (0 => 1.02)
  - altered req on perl(Test::Builder::Tester) (0 => 1.02)


author: Steven Pritchard <steve@kspei.com> 0.35-3
changelog:
  - Improve Summary, description, and Source0 URL.
  - Fix find option ordering.
  - Don't generate license texts.


author: Chris Weyl <cweyl@alumni.drew.edu> 1.37-1
changelog:
  - add filtering
  - auto-update to 1.37 (by cpan-spec-update 0.01)
  - altered br on perl(Algorithm::Diff) (0 => 1.19)
  - added a new br on perl(Exporter) (version 0)
  - added a new br on perl(Test) (version 0)


author: Steven Pritchard <steve@kspei.com> 1:1.16-4
changelog:
  - Fix find option order.
  - Use fixperms macro instead of our own chmod incantation.
  - BR ExtUtils::MakeMaker.
  - Remove check macro cruft.


author: Robin Norwood <rnorwood@redhat.com> - 1.35-4
changelog:
  - Fix various package review issues:
  - Remove redundant BR: perl
  - remove "|| :" from %check
  - move requires filter into spec file
  - remove tabs and fix spacing


author: Robin Norwood <rnorwood@redhat.com> - 0.81-3
changelog:
  - fix various issues from package review:
  - remove || : from %check
  - remove tabs and fix spacing
  - fix encoding for README file


author: Tom "spot" Callaway <tcallawa@redhat.com> - 0.46alpha-32
changelog:
  - fix license tag with upstream confirmation
    see: http://perl-xml.cvs.sourceforge.net/perl-xml/XML-Grove/COPYING?revision=1.2&view=markup


author: Stepan Kasal <skasal@redhat.com> - 0.46alpha-34
changelog:
  - cleaned up universe vs. tab conflict
  - added an explanation why the Version tag does not conform to the rules
  - fixed the source tarball (bz2->gz), to match the upstream exactly
  - improved BuildRoot tag


author: Stepan Kasal <skasal@redhat.com> - 0.46alpha-35
changelog:
  - re-enable check, it seems to work
  - improved the explanation of the non-standard Version tag (Patrice Dumas)
  - filter out bogus and redundant reuires (Paul Howarth)
  - move -depth to the right place on find cmd line (Paul Howarth)


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.96-6
changelog:
  - post scriptlet needs to check whether the file is installed. When it isn't,
   then it's needed call for adding PurePerl parser
   http://perl-xml.sourceforge.net/faq/#parserdetails.ini


author: Marcela Mašláňová <mmaslano@redhat.com> - 0.96-7
changelog:
  - XML-LibXML use triggers for XML::SAX update. Deleting of settings in
   ParserDetails.ini is solved by post and preun part, which create backup.
  - Resolves: rhbz#562173


author: Robin Norwood <rnorwood@redhat.com> - 2.17-1
changelog:
  - Update to latest CPAN version: 2.17
  - Add BuildRequires
  - Fix macro-in-changelog rpmlint warning
  - Fix license tag


author: Chris Weyl <cweyl@alumni.drew.edu> 1.22-8
changelog:
  - add IO::Socket::SSL as a BR/R (see BZ#455344)
  - also add Net::DNS
  - make tests run if --with network-tests
  - misc spec touchups


author: Robin Norwood <rnorwood@redhat.com> - 3.29-4
changelog:
  - Resolves: rhbz#247247
  - Remove bogus Provides: perl(XML::XPathEngine::NodeSet), and move
    Requires filter into spec file.


author: Chris Weyl <cweyl@alumni.drew.edu> 3.34-1
changelog:
  - update prov/dep filtering to current guidelines
  - auto-update to 3.34 (by cpan-spec-update 0.01)
  - added a new br on perl(ExtUtils::MakeMaker) (version 0)
  - altered br on perl(XML::Parser) (0 => 2.23)


author: Chris Weyl <cweyl@alumni.drew.edu> 1.39-1
changelog:
  - auto-update to 1.39 (by cpan-spec-update 0.01)
  - added a new br on perl(File::Spec) (version 0.80)


author: Marcela Mašláňová <mmaslano@redhat.com> 5.816-1
changelog:
  - update to 5.816
  - fix #465855 - install --aliases by default
  - use upstream patch for previous problem (see rt 38736)


author: Petr Pisar <ppisar@redhat.com> - 5.833-3
changelog:
  - Implement hostname verification that is disabled by default. You can install
    IO::Socket::SSL Perl module and set PERL_LWP_SSL_VERIFY_HOSTNAME=1
    enviroment variable (or modify your application to set ssl_opts option
    correctly) to enable the verification. See LWP::UserAgent POD for more
    details. (bug #745800)


author: Petr Pisar <ppisar@redhat.com> - 5.833-4
changelog:
  - Support HTTPS_CERT_FILE and HTTPS_KEY_FILE Net::SSL environment variables
    with IO::Socket::SSL back-end (bug #1365490)


author: Petr Pisar <ppisar@redhat.com> - 5.833-5
changelog:
  - Honor HTTPS_PROXY and https_proxy Net::SSL environment variables with
    IO::Socket::SSL back-end by default (bug #1400632)


author: Robin Norwood <rnorwood@redhat.com> - 0.08-3
changelog:
  - Fix old changelog entry
  - Fix issues from package review:
  - Remove extra BR: perl
  - Remove "|| :" from check section
  - Add dist tag to release
  - Remove extra Provides: perl(Data::Grove)
  - Clean up tabs and spacing
  - Resolves: bz#226269


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 2.1-3
changelog:
  - Bump and rebuild for python 2.5 on devel.
  - Add BR: python-devel as it provides a header necessary for python modules
    on python 2.5.


author: Remi Collet <Fedora@famillecollet.com>
changelog:
  - PHP 5.3.2 Released!
  - remove mime_magic option (now provided by fileinfo, by emu)
  - add patch for http://bugs.php.net/50578
  - remove patch for libedit (upstream)


author: Joe Orton <jorton@redhat.com> - 5.3.2-6
changelog:
  - add security fixes for CVE-2010-1866, CVE-2010-2094, CVE-2010-1917,
    CVE-2010-2531, MOPS-2010-060 (#624469)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 5.3.3-6
changelog:
  - merge Joe's changes:
  - improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH
  - add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
    CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
    CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740732)


author: Joe Orton <jorton@redhat.com> - 5.3.3-11
changelog:
  - add security fixes for CVE-2012-0781, CVE-2011-4153, CVE-2012-0057,
    CVE-2012-0789, CVE-2012-1172, CVE-2012-2143, CVE-2012-2386


author: Remi Collet <rcollet@redhat.com> - 5.3.3-15
changelog:
  - fix permission on source files (#676364)
  - fix negative keys with var_export (#771738)
  - fix setDate when DateTime created from timestamp (#812819)
  - add php(language) and missing provides (#837042)
  - use arch-specific requires (#833545)
  - fix possible buffer overflow in pdo_odbc (#836264)
  - fix possible segfault in pdo_mysql (#824199)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-16
changelog:
  - fix stream support in fileinfo (#858653)
  - fix imap_open DISABLE_AUTHENTICATOR param ignores array (#859371)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-22
changelog:
  - php-xml provides php-xmlreader and php-xmlwriter (#874987)
  - fix possible NULL derefence and buffer overflow (#879179)
  - fix zend garbage collector (#848186, #868375)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-24
changelog:
  - fix buffer overflow in _pdo_pgsql_error (#969110)
  - fix double free when destroy_zend_class fails (#910466)
  - fix segfault in error_handler with
    allow_call_time_pass_reference = Off (#892158)
  - fix copy doesn't report failure on partial copy (#947428)
  - add rpm macros for packagers: %php_inidir,
    %php_incldir and %__php (#953814)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-27.1
changelog:
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
  - core: fix heap-based buffer overflow in DNS TXT record parsing.
    CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage type
    confusion flaw. CVE-2014-3515
  - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
  - fileinfo: unrestricted recursion in handling of indirect type
    rules. CVE-2014-1943
  - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
  - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238


author: Remi Collet <rcollet@redhat.com> - 5.3.3-27.2
changelog:
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
    CVE-2014-2497
  - fileinfo: fix incomplete fix for CVE-2012-1571 in
    cdf_read_property_info. CVE-2014-3587
  - core: fix incomplete fix for CVE-2014-4049 DNS TXT
    record parsing. CVE-2014-3597


author: Remi Collet <rcollet@redhat.com> - 5.3.3-27.3
changelog:
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Joe Orton <jorton@redhat.com> - 5.3.3-1
changelog:
  - update to 5.3.3 (#645591)
  - add security fixes for CVE-2010-3709, CVE-2010-3710,
    CVE-2010-3870, CVE-2009-5016 (#651953)
  - prevent extract() cloberring $GLOBALS (#655118)
  - ensure correct mysql_config is used in biarch builds


author: Joe Orton <jorton@redhat.com> - 5.3.3-3.1
changelog:
  - add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
    CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
    CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740731)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-29
changelog:
  - drop unneeded part of CVE-2006-724.patch and fileinfo.patch
    extension not provided or git binary patches (#1064027)
  - odbc: fix incompatible pointer type (#1053982)
  - mysqli: fix possible segfault in mysqli_stmt::bind_result
    php bug 66762 (#1069167)
  - mysql: fix php_mysql_fetch_hash writes long value into int
    php bug 52636 (#1054953)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-31
changelog:
  - soap: fixRFC2616 transgression (#1045019)
  - fix static calling in non-static method (#953786)
  - fix autoload called from closing session (#954027)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-34
changelog:
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238


author: Jan Kaluza <jkaluza@redhat.com> - 5.3.3-35
changelog:
  - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
  - fileinfo: unrestricted recursion in handling of indirect type
    rules. CVE-2014-1943
  - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
  - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480


author: Remi Collet <rcollet@redhat.com> - 5.3.3-36
changelog:
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
  - core: fix heap-based buffer overflow in DNS TXT record parsing.
    CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage type
    confusion flaw. CVE-2014-3515


author: Remi Collet <rcollet@redhat.com> - 5.3.3-37
changelog:
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
    CVE-2014-2497
  - fileinfo: fix incomplete fix for CVE-2012-1571 in
    cdf_read_property_info. CVE-2014-3587
  - core: fix incomplete fix for CVE-2014-4049 DNS TXT
    record parsing. CVE-2014-3597


author: Remi Collet <rcollet@redhat.com> - 5.3.3-38
changelog:
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670


author: Remi Collet <rcollet@redhat.com> - 5.3.3-39
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Remi Collet <rcollet@redhat.com> - 5.3.3-41
changelog:
  - core: fix double in zend_ts_hash_graceful_destroy CVE-2014-9425
  - core: fix use-after-free in unserialize CVE-2015-2787
  - exif: fix free on unitialized pointer CVE-2015-0232
  - gd: fix buffer read overflow in gd_gif.c CVE-2014-9709
  - date: fix use after free vulnerability in unserialize CVE-2015-0273
  - enchant: fix heap buffer overflow in enchant_broker_request_dict
    CVE-2014-9705
  - phar: use after free in phar_object.c CVE-2015-2301
  - soap: fix type confusion through unserialize


author: Remi Collet <rcollet@redhat.com> - 5.3.3-43
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4026, #1213407
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - soap: more fix type confusion through unserialize #1222538


author: Remi Collet <rcollet@redhat.com> - 5.3.3-47
changelog:
  - fix wrong warning in openssl_encrypt() for missing IV
    when IV is not required #1260315
  - fix segfault's when you try and allocate an SplFixedArray
    with size >= 9999 #1071344
  - segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
  - add options to enable TLS in curl #1255920
  - fix segfault in gc_collect_cycles #1122681


author: Remi Collet <rcollet@redhat.com> - 5.3.3-49
changelog:
  - fix php-soap fails to connect to HTTPS web service sporadically
    as stream_socket_enable_crypto() uses NONBLOCK #1283153


author: Tim Jackson <rpm@timj.co.uk> 1:1.7.1-2
changelog:
  - Set cfg_dir to be %{_sysconfdir}/pear (and own it)
  - Update install-pear.php script
  - Add %pear_cfgdir and %pear_wwwdir macros


author: Joe Orton <jorton@redhat.com> - 1:1.9.4-1
changelog:
  - update to 1.9.4 (#651897)
  - update XML_RPC to 1.5.4, Structures_Graph to 1.0.4, Archive_Tar to 1.3.7


author: Remi Collet <rcollet@redhat.com> - 1:1.9.4-5
changelog:
  - fix unexpanded RPM macro in triggerpostun #1018131
  - define date.timezone in pear/pecl commands #1040839
  - define %php_metadir macro #953810
  - fix incorrect handling of backslashes in file names #1216952


