# changelog

author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-3
changelog:
  - python-sssdconfig: Fix parssing sssd.conf without config_file_version
  - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-2
changelog:
  - Fix few segfaults
  - Resolves: upstream #2811 - PAM responder crashed if user was not set
  - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-6
changelog:
  - Fix OTP bug
  - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were
                               entered separately


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-4
changelog:
  - Fix ipa-migration bug
  - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled
                               migration mode


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-8
changelog:
  - Backport important patches from upstream 1.13 prerelease
  - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable
                             attribute for group name
  - Resolves: upstream #2335 - Investigate using the krb5 responder
                               for driving the PAM conversation with OTPs
  - Enable cmocka tests for secondary architectures


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-6
changelog:
  - Fix slow login with ipa and SELinux
  - Resolves: upstream #2624 - Only set the selinux context if the context
                               differs from the local one


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-5
changelog:
  - Fix regressions with ipa and SELinux
  - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security
                               context on client is staff_u


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-2
changelog:
  - Add support for python3 bindings
  - Add requirement to python3 or python3 bindings
  - Resolves: rhbz#1014594 - sssd: Support Python 3


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-6
changelog:
  - Fix double free in monitor
  - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort():
                          sssd killed by SIGABRT


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-4
changelog:
  - Decrease priority of sssd-libwbclient 20 -> 5
  - It should be lower than priority of samba veriosn of libwbclient.
  - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-3
changelog:
  - Apply a number of patches from upstream to fix issues found 1.12.3
  - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple
                             interfaces, or isn't documented to be able to
  - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is
                            not running
  - Resolves: upstream #2557  authentication failure with user from AD


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-2
changelog:
  - Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus
  - Resolves: rhbz#1179379 - gzip: stdin: file size changed while
                             zipping when rotating logfile


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-1
changelog:
  - New upstream release 1.12.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3
  - Fix spelling errors in description (fedpkg lint)


author: Sumit Bose <sbose@redhat.com> - 1.12.2-7
changelog:
  - Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes
                             crash in wbinfo
                             - in addition to the patch libwbclient.so is
                               filtered out of the Provides list of the package


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.2-6
changelog:
  - Fix regressions and bugs in sssd upstream 1.12.2
  - https://fedorahosted.org/sssd/ticket/{id}
  - Regressions: #2471, #2475, #2483, #2487, #2529, #2535
  - Bugs: #2287, #2445


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.1-2
changelog:
  - Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user
                             private group from server


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.5-1
changelog:
  - New upstream release 1.11.5
  - Remove upstreamed patch
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.4-1
changelog:
  - New upstream release 1.11.4
  - Remove upstreamed patch
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.3-1
changelog:
  - New upstream release 1.11.3
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-1
changelog:
  - New upstream release 1.11.2
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-3
changelog:
  - Fix multicast checks in the SSSD
  - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source
                             code getting the host info


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-2
changelog:
  - Backport simplification of ccache management from 1.11.1
  - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-0.4.beta2
changelog:
  - Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid:
                        Process /usr/libexec/sssd/sssd_nss was killed by
                        signal 11 (SIGSEGV)
  - Resolves: #996214 - sssd proxy_child segfault


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0.2beta2
changelog:
  - Resolves: #906427 - Do not use %{_lib} in specfile for the nss and
                        pam libraries


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-16
changelog:
  - Move sssd_pac to the sssd-ipa and sssd-ad subpackages
  - Trim out RHEL5-specific macros since we don't build on RHEL 5
  - Trim out macros for Fedora older than F18
  - Update libldb requirement to 1.1.16
  - Trim RPM changelog down to the last year


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-14
changelog:
  - Fix Obsoletes: to account for dist tag
  - Convert post and pre scripts to run on the sssd-common subpackage
  - Remove old conversion from SYSV


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-11.beta2
changelog:
  - Apply a number of patches from upstream to fix issues found post-beta,
    in particular:
    -- segfault with a high DEBUG level
    -- Fix IPA password migration (upstream #1873)
    -- Fix fail over when retrying SRV resolution (upstream #1886)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-9.beta2
changelog:
  - Fix typo in Requires that prevented an upgrade (#973916)
  - Use a hardcoded version in Conflicts, not less-than-current


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-8.beta2
changelog:
  - New upstream release 1.10 beta2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
  - BuildRequire libcmocka-devel in order to run all upstream tests during build
  - BuildRequire libnl3 instead of libnl1
  - No longer BuildRequire initscripts, we no longer use /sbin/service
  - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any
    older krb5-libs version


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-7.beta1
changelog:
  - Apply a couple of patches from upstream git that resolve crashes when
    ID mapping object was not initialized properly but needed later


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-6.beta1
changelog:
  - Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                            realm join
  - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                            default for AD Provider
  - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                            parent directory when logging in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-4.beta1
changelog:
  - Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug
    in ding-libs
  - Fix SSH integration with fully-qualified domains
  - Add the ability to dynamically discover the NetBIOS name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-3
changelog:
  - Recreate Kerberos ccache directory if it's missing
  - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                            directory /run/user/UID/ccdir does not exist


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-18.beta6
changelog:
  - Change the default ccache location to DIR:/run/user/${UID}/krb5cc
    and patch man page accordingly
  - Resolves: rhbz#851304


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-14.beta6
changelog:
  - Don't discard HBAC rule processing result if SELinux is on
    Resolves: rhbz#846792 (CVE-2012-3462)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-13.beta6
changelog:
  - New upstream release 1.9.0 beta 6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6
  - A new option, override_shell was added. If this option is set, all users
    managed by SSSD will have their shell set to its value.
  - Fixes for the support for setting default SELinux user context from FreeIPA.
  - Fixed a regression introduced in beta 5 that broke LDAP SASL binds
  - The SSSD supports the concept of a Primary Server and a Back Up Server in
    failover
  - A new command-line tool sss_seed is available to help prime the cache with
    a user record when deploying a new machine
  - SSSD is now able to discover and save the domain-realm mappings
    between an IPA server and a trusted Active Directory server.
  - Packaging changes to fix ldconfig usage in subpackages (#843995)
  - Rebuild against libldb 1.1.9


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-12.beta5
changelog:
  - New upstream release 1.9.0 beta 5
  - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5
  - Many fixes for the support for setting default SELinux user context from
    FreeIPA, most notably fixed the specificity evaluation
  - Fixed an incorrect default in the krb5_canonicalize option of the AD
    provider which was preventing password change operation
  - The shadowLastChange attribute value is now correctly updated with the
    number of days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-9.beta4
changelog:
  - New upstream release 1.9.0 beta 4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
  - Add a new AD provider to improve integration with Active Directory 2008 R2
    or later servers
  - SUDO integration was completely rewritten. The new implementation works
    with multiple domains and uses an improved refresh mechanism to download
    only the necessary rules
  - The IPA authentication provider now supports subdomains
  - Fixed regression for setups that were setting default_tkt_enctypes
    manually by reverting a previous workaround.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-8.beta3
changelog:
  - New upstream release 1.9.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
  - Add a new PAC responder for dealing with cross-realm Kerberos trusts
  - Terminate idle connections to the NSS and PAM responders


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-7.beta2
changelog:
  - Switch unicode library from libunistring to Glib
  - Drop unnecessary explicit Requires on keyutils
  - Guarantee that versioned Requires include the correct architecture


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-5.beta2
changelog:
  - New upstream release 1.9.0 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
  - Add support for the Kerberos DIR cache for storing multiple TGTs
    automatically
  - Major performance enhancement when storing large groups in the cache
  - Major performance enhancement when performing initgroups() against Active
    Directory
  - SSSDConfig data file default locations can now be set during configure for
    easier packaging


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-2.beta1
changelog:
  - Fix several regressions since 1.5.x
  - Ensure that the RPM creates the /var/lib/sss/mc directory
  - Add support for Netscape password warning expiration control
  - Rebuild against libldb 1.1.6


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-1.beta1
changelog:
  - New upstream release 1.9.0 beta 1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
  - Add native support for autofs to the IPA provider
  - Support for ID-mapping when connecting to Active Directory
  - Support for handling very large (> 1500 users) groups in Active Directory
  - Support for sub-domains (will be used for dealing with trust relationships)
  - Add a new fast in-memory cache to speed up lookups of cached data on
    repeated requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.3-11
changelog:
  - New upstream release 1.8.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
  - Numerous manpage and translation updates
  - LDAP: Handle situations where the RootDSE isn't available anonymously
  - LDAP: Fix regression for users using non-standard LDAP attributes for user
    information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.2-10
changelog:
  - New upstream release 1.8.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
  - Several fixes to case-insensitive domain functions
  - Fix for GSSAPI binds when the keytab contains unrelated principals
  - Fixed several segfaults
  - Workarounds added for LDAP servers with unreadable RootDSE
  - SSH knownhostproxy will no longer enter an infinite loop preventing login
  - The provided SYSV init script now starts SSSD earlier at startup and stops
    it later during shutdown
  - Assorted minor fixes for issues discovered by static analysis tools


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-9
changelog:
  - Don't duplicate libsss_autofs.so in two packages
  - Set explicit package contents instead of globbing


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-8
changelog:
  - Fix uninitialized value bug causing crashes throughout the code
  - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-7
changelog:
  - New upstream release 1.8.1
  - Resolve issue where we could enter an infinite loop trying to connect to an
    auth server
  - Fix serious issue with complex (3+ levels) nested groups
  - Fix netgroup support for case-insensitivity and aliases
  - Fix serious issue with lookup bundling resulting in requests never
    completing
  - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
    in addition to pam_authenticate
  - Fix several regressions in the proxy provider
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - New upstream release 1.8.0
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)
  - Include the IPA AutoFS provider
  - Fixed several memory-corruption bugs
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed a regression in the proxy provider
  - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
  - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                            logged at each login
  - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - New upstream release 1.8.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed several memory-corruption bugs
  - Finalized the ABI for the autofs support
  - Fixed a regression in the proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta2
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
  - Fix two minor manpage bugs
  - Include the IPA AutoFS provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta1
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-5
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features - fix netgroups and sudo as well


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-3
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-1
changelog:
  - New upstream release 1.7.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
  - Support for case-insensitive domains
  - Support for multiple search bases in the LDAP provider
  - Support for the native FreeIPA netgroup implementation
  - Reliability improvements to the process monitor
  - New DEBUG facility with more consistent log levels
  - New tool to change debug log levels without restarting SSSD
  - SSSD will now disconnect from LDAP server when idle
  - FreeIPA HBAC rules can choose to ignore srchost options for significant
    performance gains
  - Assorted performance improvements in the LDAP provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.4-1
changelog:
  - New upstream release 1.6.4
  - Rolls up previous patches applied to the 1.6.3 tarball
  - Fixes a rare issue causing crashes in the failover logic
  - Fixes an issue where SSSD would return the wrong PAM error code for users
    that it does not recognize.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-4
changelog:
  - Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758425 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release 1.6.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3
  - Fixes a major cache performance issue introduced in 1.6.2
  - Fixes a potential infinite-loop with certain LDAP layouts


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-4
changelog:
  - Change selinux policy requirement to Conflicts: with the old version,
    rather than Requires: the supported version.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Improved handling of users and groups with multi-valued name attributes
    (aliases)
  - Performance enhancements
      Initgroups on RFC2307bis/FreeIPA
      HBAC rule processing
  - Improved process-hang detection and restarting
  - Enabled the midpoint cache refresh by default (fewer cache misses on
    commonly-used entries)
  - Cleaned up the example configuration
  - New tool to change debug level on the fly


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.1-1
changelog:
  - New upstream release 1.6.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
  - Fixes a serious issue with LDAP connections when the communication is
    dropped (e.g. VPN disconnection, waking from sleep)
  - SSSD is now less strict when dealing with users/groups with multiple names
    when a definitive primary name cannot be determined
  - The LDAP provider will no longer attempt to canonicalize by default when
    using SASL. An option to re-enable this has been provided.
  - Fixes for non-standard LDAP attribute names (e.g. those used by Active
    Directory)
  - Three HBAC regressions have been fixed.
  - Fix for an infinite loop in the deref code


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release 1.6.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
  - Add host access control support for LDAP (similar to pam_host_attr)
  - Finer-grained control on principals used with Kerberos (such as for FAST or
  - validation)
  - Added a new tool sss_cache to allow selective expiring of cached entries
  - Added support for LDAP DEREF and ASQ controls
  - Added access control features for Novell Directory Server
  - FreeIPA dynamic DNS update now checks first to see if an update is needed
  - Complete rewrite of the HBAC library
  - New libraries: libipa_hbac and libipa_hbac-python


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
changelog:
  - New upstream release 1.5.11
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
  - Fix a serious regression that prevented SSSD from working with ldaps:// URIs
  - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
  - address being saved to the AAAA record


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.10-1
changelog:
  - New upstream release 1.5.10
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
  - Fixed a regression introduced in 1.5.9 that could result in blocking calls
  - to LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.9-1
changelog:
  - New upstream release 1.5.9
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
  - Support for overriding home directory, shell and primary GID locally
  - Properly honor TTL values from SRV record lookups
  - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
  - servers)
  - Properly escape IPv6 addresses in the failover code
  - Do not crash if inotify fails (e.g. resource exhaustion)
  - Don't add multiple TGT renewal callbacks (too many log messages)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.8-1
changelog:
  - New upstream release 1.5.8
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
  - Support for the LDAP paging control
  - Support for multiple DNS servers for name resolution
  - Fixes for several group membership bugs
  - Fixes for rare crash bugs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-3
changelog:
  - Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
  - Make sure to properly convert to systemd if upgrading from newer
  - updates for Fedora 14


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-1
changelog:
  - Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
  -                         cached password with predicatable filename


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
  - Fixed a serious memory leak in the memberOf plugin
  - Fixed a regression with the negative cache that caused it to be essentially
  - nonfunctional
  - Fixed an issue where the user's full name would sometimes be removed from
  - the cache
  - Fixed an issue with password changes in the kerberos provider not working
  - with kpasswd


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-5
changelog:
  - Resolves: rhbz#697057 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server
  - Upgrades from SysV should now maintain enabled/disabled status


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-3
changelog:
  - Fix systemd conversion. Upgrades from SysV to systemd weren't properly
  - enabling the systemd service.
  - Fix a serious memory leak in the memberOf plugin
  - Fix an issue where the user's full name would sometimes be removed
  - from the cache


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
  - Fixes for several crash bugs
  - LDAP group lookups will no longer abort if there is a zero-length member
  - attribute
  - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
  - Fixes for Active Directory when not all users and groups have POSIX attributes
  - Fixes for handling users and groups that have name aliases (aliases are ignored)
  - Fix group memberships after initgroups in the IPA provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.2-1
changelog:
  - New upstream release 1.5.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
  - Fixes for support of FreeIPA v2
  - Fixes for failover if DNS entries change
  - Improved sss_obfuscate tool with better interactive mode
  - Fix several crash bugs
  - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
  - Delete users from the local cache if initgroups calls return 'no such user'
  - (previously only worked for getpwnam/getpwuid)
  - Use new Transifex.net translations
  - Better support for automatic TGT renewal (now survives restart)
  - Netgroup fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#677768 - name service caches names, so id command shows
  -                         recently deleted users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Fix nested group member filter sanitization for RFC2307bis
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  -Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
changelog:
  - Solve a shutdown race-condition that sometimes left processes running
  - Resolves: rhbz#606887 - SSSD stops on upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
changelog:
  - New upstream release 1.4.1
  - Add support for netgroups to the proxy provider
  - Fixes a minor bug with UIDs/GIDs >= 2^31
  - Fixes a segfault in the kerberos provider
  - Fixes a segfault in the NSS responder if a data provider crashes
  - Correctly use sdap_netgroup_search_base


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
changelog:
  - New upstream release 1.4.0
  - Added support for netgroups to the LDAP provider
  - Performance improvements made to group processing of RFC2307 LDAP servers
  - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
  - Build-system improvements to support Gentoo
  - Split out several libraries into the ding-libs tarball
  - Manpage reviewed and updated


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
changelog:
  - Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
  -                         doesn't require it


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
changelog:
  - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
  -                           against LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
changelog:
  - New upstream version 1.2.91 (1.3.0rc1)
  - Improved LDAP failover
  - Synchronous sysdb API (provides performance enhancements)
  - Better online reconnection detection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New stable upstream version 1.2.1
  - Resolves: rhbz#595529 - spec file should eschew %define in favor of
  -                         %global
  - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart.
  - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
  -                         keyring
  - Resolves: rhbz#599724 - sssd is broken on Rawhide


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Jan Vcelak <jvcelak@redhat.com> 1.22.1-1
changelog:
  - new upstream release (#890973)
    + various fixes in manual pages
    + various fixes and improvements in macros
    + new gropdf driver for generating PDF files
  - fix: backslash-period escape does not work (#682857)
  - fix: groff ftbfs - patch does not apply (#885225)


author: Jan Vcelak <jvcelak@redhat.com> 1.21-9
changelog:
  - older security fixes (#709415, #720060):
    + CVE-2009-5044: insecure temporary file handling in pdfroff
    + CVE-2009-5080: improper handling of failed attempts to create temporary directories in eqn2graph/pic2graph/grap2graph
    + CVE-2009-5081: roff2.pl and groffer.pl use easy-to-guess temporary file names


author: Jan Vcelak <jvcelak@redhat.com> 1.21-7
changelog:
  - update: move local configuration from /usr/share/groff/site-* to /etc/groff/*
    (change the paths in the app instead of symlinking to avoid RPM issues)
  - fix groff package: add install-info to %post and %preun


author: Jan Vcelak <jvcelak@redhat.com> 1.21-4
changelog:
  - new subpackage: groff-base (minimal for manual page rendering)
  - move shared data used by gxditview to groff-x11 subpackage
  - move groff reference manual to groff-doc subpackage
  - make groff-doc an architecture independent package
  - move local configuration from /usr/share/groff/site-* to /etc/groff/*


author: Jan Vcelak <jvcelak@redhat.com> 1.21-3
changelog:
  - fix #678572: groffer libdir is incorrect
  - fix #709474: unowned groff doc dir
  - fix #712904: Japanese bold/underline text not displayed correctly (Daiki Ueno <dueno@redhat.com>)


author: Jan Vcelak <jvcelak@redhat.com> 1.20.1-3
changelog:
  - experimental support of Japanese (charclass and wcwidth patches)
    thanks to Daiki Ueno (dueno@redhat.com)


author: Stepan Kasal <skasal@redhat.com> - 1.18.1.14-15
changelog:
  - Replace groff-1.18-nohtml.patch by a code in spec file
  - fix groff-1.18-gzip.patch to apply cleanly
  - simplify the code for symlinking in %install


author: Jesse Keating <jkeating@redhat.com> - 1.18.1.1-9.2
changelog:
  - bump again for double-long bug on ppc(64)
  - bump again for double-long bug on ppc(64)
  - bump again for double-long bug on ppc(64)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.18.1.1-9
changelog:
  - remove gxditview from groff package (#179684)
  - remove obsolete "--enable-japanese" configure option


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.18.1.1-8
changelog:
  - fix segfault in grotty on 64-bit big endian machines (#176904)
  - fix assertion failure on abort message (#141912)
  - attempt to fix a space problem with several european languages (#137728)


author: Jindrich Novy <jnovy@redhat.com> - 1.18.1.1-6
changelog:
  - add BuildRequires imake and update dependencies for modular X
  - spec cleanup
  - fix compilation with gcc-4.1.0


author: Thomas Woerner <twoerner@redhat.com> 1.18.1.1-2
changelog:
  - fixed DoCharacter calls in xditview (#110812)
  - fixed fclose called once too often (#132690): thanks to Ulrich Drepper for
    the bug hunting


author: Thomas Woerner <twoerner@redhat.com> 1.18.1-34
changelog:
  - new debian groff patch: groff_1.18.1-15.diff
  - new fix for debian patch: groff-1.18.1-fix15.patch
  - fixed width in devutf8 font M: groff-1.18.1-devutf8.patch
  - removed iconv patch


author: Thomas Woerner <twoerner@redhat.com> 1.18.1-28.2
changelog:
  - new devutf8 font description
  - use -Tutf8 for ru_*.UTF-8 in nroff.sh
  - fixes #88618 (ru_RU man pages in cambridge are using UTF-8, now)


author: Thomas Woerner <twoerner@redhat.com> 1.18.1-27
changelog:
  - going back to 1.18.1-4 from debian (the newer versions did not work properly)
  - fixed nroff.sh for ru_RU.(!UTF-8)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - remove automatic conversion for ru_* and cz_*
  - add 8bit patch
  - update to 1.18.1-4 debian patch
  - disable Patch8: groff-1.18.1-multichar.patch for now
  - add ugly patch within the iconv patch to partly fix display of russian
    man-pages with "-Tnippon"


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 1.18.1
  - apply groff_1.18-7 from debian
  - remove some not-packaged files
  - rm old printfilters completely


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - install tmac.mse (FWIW tmac.se looks broken) to fix dangling symlink (#10757).
  - add README.A4, how to set up for A4 paper (#8276).
  - add other documents to package.


author: Akira TAGOH <tagoh@redhat.com> - 2.13.1-3
changelog:
  - Stop cleaning up .uuid file even when a directory is empty.
    resolves: rhbz#1653171
  - Use Rachana instead of Meera for serif subsitution.
    resolves: rhbz#1650491


author: Akira TAGOH <tagoh@redhat.com> - 2.13.0-6
changelog:
  - Add Suggests: dejavu-sans-fonts to address pulling the unpredicted
    font package as dependency. (#1321551)


author: Akira TAGOH <tagoh@redhat.com> - 2.12.4-2
changelog:
  - Allow installing 32/64 bit version of fc-cache at the same time. (#1474257)
  - Add fc-cache script to invoke both version of fc-cache if available.


author: Akira TAGOH <tagoh@redhat.com> - 2.10.94-1
changelog:
  - New upstream release.
  - migrate the configuration for XDG Base Directory spec automatically (#882267)


author: Akira TAGOH <tagoh@redhat.com> - 2.10.91-3
changelog:
  - Improve the spec to meet the latest packaging guidelines (#225759)
    - add -devel-doc subpackage.
  - Fix a build issue with automake 1.13


author: Akira TAGOH <tagoh@redhat.com> - 2.10.91-1
changelog:
  - New upstream release (#894109)
    - threadsafe
    - new tool to validate the glyph coverage
    - add new rule to scale the bitmap font.


author: Akira TAGOH <tagoh@redhat.com> - 2.9.91-1
changelog:
  - New upstream release.
    - docs are generated with the fixed docbook (#826145)
    - handle whitespace in family name correctly (#468565, #591634)
    - Updated ne.orth. (#586763)


author: Akira TAGOH <tagoh@redhat.com> - 2.9.0-1
changelog:
  - New upstream release (#803559)
    - Update ks.orth (#790471)
    - Add brx.orth (#790460)
    - Update ur.orth (#757985)
    - No Apple Roman cmap support anymore. should works. (#681808)
    - Update ne.orth (#586763)
    - Add a workaround for ZapfDingbats. (#562952, #497648, #468565)
  - clean up the spec file.
  - Add BR: fontpackages-devel.
  - Add R: fontpackages-filesystem.


author: Behdad Esfahbod <besfahbo@redhat.com> - 2.4.92-1
changelog:
  - Update to 2.4.92.
  - Mark /etc/fonts/conf.d/* as config(noreplace).
  - Remove most of our conf file, all upstreamed except for
    75-blacklist-fedora.conf that I'm happily dropping.  Who has
    Hershey fonts these days...
  - ln upstream'ed 25-unhint-nonlatin.conf from conf.avail in conf.d
  - Add 25-no-bitmap-fedora.conf which is the tiny remaining bit
    of conf that didn't end up upstream.  Can get rid of it in the
    future, but not just yet.


author: Behdad Esfahbod <besfahbo@redhat.com> - 2.4.91-1
changelog:
  - Update to 2.4.91.
  - Add /usr/local/share/fonts to default config. (#147004)
  - Don't rebuild docs, to fix multilib conflicts. (#313011)
  - Remove docbook and elinks BuildRequires and stuff as we don't
    rebuild docs.


author: Behdad Esfahbod <besfahbo@redhat.com> - 2.4.0-1
changelog:
  - Update to 2.4.0
  - Rename/order our configuration stuff to match the new scheme.
    Breaks expected :-(


author: Behdad Esfahbod <besfahbo@redhat.com> - 2.3.97-1
changelog:
  - update to 2.3.97
  - Drop upstreamed patches
  - Regenerate defaultconfig patch
  - Don't touch stamp as it was not ever needed


author: Ray Strode <rstrode@redhat.com> - 2.3.93-4
changelog:
  - apply patch from Tim Mayberry to correct aliasing and disable
    hinting for the two Chinese font names AR PL ShanHeiSun Uni 
    and AR PL Zenkai Uni


author: Carl Worth <cworth@redhat.com> - 2.3.92.cvs20051129-2
changelog:
  - Add two new Chinese font names to the default fonts.conf file:
      AR PL ShanHeiSun Uni
      AR PL Zenkai Uni


author: Bill Nottingham <notting@redhat.com> - 2.3.93-3
changelog:
  - modular X moved fonts from /usr/X11R6/lib/X11/fonts to
    /usr/share/X11/fonts, adjust %configure accordingly and 
    conflict with older font packages


author: Matthias Clasen <mclasen@redhat.com> - 2.3.91.cvs20051031-1
changelog:
  - Update to a newer cvs snapshot
  - Add a patch which should help to understand broken cache problems


author: Matthias Clasen <mclasen@redhat.com> - 2.3.91.cvs20051017-2
changelog:
  - Add new Chinese fonts
  - Fix the 40-blacklist-fonts.conf file to use the documented
    fonts.conf syntax, and exclude the Hershey fonts by family
    name.


author: Kristian Høgsberg <krh@redhat.com> - 2.3.2-1
changelog:
  - Update to fontconfig-2.3.2.  Drop

  	fontconfig-2.1-slighthint.patch,
  	fontconfig-2.2.3-timestamp.patch,
  	fontconfig-2.2.3-names.patch,
  	fontconfig-2.2.3-ta-pa-orth.patch, and
  	fontconfig-2.2.3-timestamp.patch,

    as they are now merged upstream.

  - Fold fontconfig-2.2.3-add-sazanami.patch into
    fontconfig-2.3.2-defaultconfig.patch and split rules to disable CJK
    hinting out into /etc/fonts/conf.d/50-no-hint-fonts.conf.

  - Drop fontconfig-0.0.1.020826.1330-blacklist.patch and use the new
    rejectfont directive to reject those fonts in 40-blacklist-fonts.conf.

  - Add fontconfig-2.3.2-only-parse-conf-files.patch to avoid parsing
    .rpmsave files.

  - Renable s390 documentation now that #97079 has been fixed and add
    BuildRequires: for docbook-utils and docbook-utils-pdf.

  - Drop code to iconv and custom install man pages, upstream does the
    right thing now.

  - Add workaround from hell to make elinks cooperate so we can build
    txt documentation.


author: Owen Taylor <otaylor@redhat.com> - 2.2.3-6
changelog:
  - Sleep a second before the exit of fc-cache to fix problems with fast 
    serial installs of fonts (#140335)
  - Turn off hinting for Lohit Hindi/Bengali/Punjabi (#139816)


author: Owen Taylor <otaylor@redhat.com> - 2.2.3-3
changelog:
  - Backport code from head branch of fontconfig CVS to parse names 
    for postscript fonts (fixes #127500, J. J. Ramsey)
  - Own /usr/share/fonts (#110956, David K. Levine)
  - Add KacstQura to serif/sans-serif/monospace aliases (#101182)


author: Owen Taylor <otaylor@redhat.com> 2.2.1-10
changelog:
  - Require recent freetype (#109592, Peter Oliver)
  - Remove fonts.conf timestamp to fix multiarch conflict (#118182)
  - Disable hinting for Mukti Narrow (#120915, Sayamindu Dasgupta)


author: Owen Taylor <otaylor@redhat.com> 2.2.1-8.0
changelog:
  - Add Albany/Cumberland/Thorndale as fallbacks for Microsoft core fonts and 
    as non-preferred alternatives for Sans/Serif/Monospace
  - Fix FreeType includes for recent FreeType


author: Owen Taylor <otaylor@redhat.com> 2.2.1-6.0
changelog:
  - Should have been passing --with-add-fonts, not --with-add-dirs to 
    configure ... caused wrong version of Luxi to be used. (#100862)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Back out patch that wrote fonts.conf entries that crash RH-8.0 
    gnome-terminal, go with patch from fontconfig CVS instead.
    (#84863)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Move fontconfig man page to main package, since it contains non-devel 
    information (#76189)
  - Look in the OTF subdirectory of /usr/X11R6/lib/fonts as well
    so we find Syriac fonts (#82627)


author: Matt Wilson <msw@redhat.com> 2.1-5
changelog:
  - modified fontconfig-0.0.1.020626.1517-fontdir.patch to hard code
    /usr/X11R6/lib/X11/fonts instead of using $(X_FONT_DIR).  This is
    because on lib64 machines, fonts are not in /usr/X11R6/lib64/....


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Try to fix bug where empty cache entries would be found in 
    ~/.fonts.cache-1 during scanning (#81335)


author: Mike A. Harris <mharris@redhat.com> 2.1-1
changelog:
  - Updated to version 2.1
  - Updated slighthint patch to fontconfig-2.1-slighthint.patch
  - Updated freetype version required to 2.1.2-7


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Upgrade to fcpackage rc3
  - Fix bug in comparisons for xx_XX language tags
  - Compensate for a minor config file change in rc3


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add an explicit PreReq for freetype
  - Move fonts we don't ship to the end of the fonts.conf aliases so
    installing them doesn't change the look.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Memory leak fix when parsing config files
  - Set rh_prefer_bitmaps for .ja fonts to key off of in Xft
  - Fix some groff warnings for fontconfig.man (#72138)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Try once more to get the right default Sans-serif font :-(
  - Switch the Sans/Monospace aliases for Korean to Gulim, not Dotum


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Upgrade to rc2
  - Turn off hinting for all CJK fonts
  - Fix typo in %post
  - Remove the custom language tag stuff in favor of Keith's standard 
    solution.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add FC_HINT_STYLE to FcBaseObjectTypes
  - Switch Chinese fonts to always using Sung-ti / Ming-ti, and never Kai-ti
  - Add ZYSong18030 to aliases (#68428)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - New upstream version, with fix for problems with
    ghostscript-fonts (Fonts don't work for Qt+CJK,
    etc.)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add a hack where we set the "language" fontconfig property based on the locale, then 
    we conditionalize base on that in the fonts.conf file.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - make fonts.conf %config, not %config(noreplace)
  - Another try at the CJK aliases
  - Add some CJK fonts to the config
  - Prefer Luxi Mono to Nimbus Mono


author: Michal Hlavinka <mhlavink@redhat.com> 3.0.1-1
changelog:
  - version 3.0.1
  - add support for Super-H (sh3,sh4) (#446600)
  - fix: broken -L in libpci.pc (#456469)


author: Harald Hoyer <harald@redhat.com> 2.2.9-3
changelog:
  - removed static library, preserve timestamps on install (rhbz#226236)
  - added modified patch from Michael E. Brown @ Dell, to also
    read all /usr/share/hwdata/pci.ids.d/*.ids files (rhbz#195327)


author: Jeremy Katz <katzj@redhat.com> 2.1.11-2
changelog:
  - build a diet libpci_loader.a on i386
  - always assume pread exists, it does with diet and all vaguely recent glibc


author: Elliot Lee <sopwith@redhat.com> 2.1.10-5
changelog:
  - Add patch4 for ppc64. The basic rule seems to be that on any platform
  where it is possible to be running a 64-bit kernel, we need to always 
  print out 64-bit addresses.


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-30
changelog:
  - 1774462 - CVE-2019-8675 - buffer overflow in SNMP and IPP, memory disclosure and DoS in scheduler
  - 1774463 - CVE-2019-8696


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-22
changelog:
  - 1622431 - Jobs with multiple files don't complete when backend fails
  - CVE-2018-4700 cups: Predictable session cookie breaks CSRF protection [rhel-8]


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-21
changelog:
  - 1602469 - fixed covscan issues
  - 1625899 - cups 2.2.6 lpr command fails against old cups 1.3.9 server
  - 1625913 - ssl options aren't initialized when no SSLOptions directive is set in /etc/cups/client.conf
  - 1618009 - Enabling cups.path causes high load when jobs are submitted to CUPS
  - 1630805 - Make cups systemd unit files more upstream-like


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.3-4
changelog:
  - fixing issue with #1437065 - makes res_init() call to local resolver and keeps error message, but no hard exit for cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.1-3
changelog:
  - Unable to print from Windows (7) on a Cups-Server(2.2.1-1) with german umlauts in the filename (bug #1386751)


author: Tim Waugh <twaugh@redhat.com> - 1:2.0.3-3
changelog:
  - Fix slow resume of jobs after restart (STR #4646).
  - Fix redirection from CGI scripts (bug #1232030, STR #4538).


author: Tim Waugh <twaugh@redhat.com> - 1:2.0.0-12
changelog:
  - Re-introduce SSLOptions configuration directive, disable SSL3 by
    default (STR #4476).
  - Enable SSL again via GnuTLS (bug #1161235).


author: Tim Waugh <twaugh@redhat.com> - 1:2.0.0-11
changelog:
  - Removed openssl requirements from spec file as it is no longer
    supported upstream (see bug #1161235).


author: Tim Waugh <twaugh@redhat.com> - 1:2.0.0-10
changelog:
  - cups-lspp.patch: use cupsdLogJob() when appropriate.
  - Fixed some warnings in cups-lspp.patch.
  - New systemd journal fields CUPS_DEST and CUPS_PRINTER, as well as
    accurate code location fields.


author: Tim Waugh <twaugh@redhat.com> - 1:2.0.0-4
changelog:
  - Can no longer reproduce bug #1010580 so removing final-content-type
    patch as it causes issues for some backends (bug #1149244).


author: Tim Waugh <twaugh@redhat.com> - 1:1.7.5-4
changelog:
  - Removed old one-off trigger now it's no longer needed.
  - Run systemd postun script for path and socket unit files as well as
    the main service unit file.
  - Upstream patch for STR #4396, pre-requisite for STR #2913 patch.
  - Upstream patch for STR #2913 to limit Get-Jobs replies to 500 jobs
    (bug #421671).


author: Jiri Popelka <jpopelka@redhat.com> - 1:1.7.1-9
changelog:
  - New client subpackage containing command line client tools (bug #1002342).
  - Removed unneeded Group tags.
  - Removed 'Requires: /sbin/chkconfig'.
  - Moved 'Provides: lpd' to lpd subpackage.


author: Tim Waugh <twaugh@redhat.com> - 1:1.7.1-6
changelog:
  - Track local default in cupsEnumDests() (STR #4332).
  - libcups: avoid race condition when sending IPP requests (STR #4386).
  - Prevent feedback loop when fetching error_log over HTTP (STR #4366).


author: Tim Waugh <twaugh@redhat.com> - 1:1.7.0-10
changelog:
  - Removed cups-dbus-utf8.patch as no longer needed (see STR #4314).
  - Return jobs in rank order when handling IPP-Get-Jobs (STR #4326).


author: Tim Waugh <twaugh@redhat.com> - 1:1.7.0-9
changelog:
  - dbus notifier: call _exit when handling SIGTERM (STR #4314).
  - Use '-f' when using rm in %setup section.
  - Fixed avahi-no-threaded patch so it removes a call to
    avahi_threaded_poll_stop() (bug #1044602).


author: Tim Waugh <twaugh@redhat.com> - 1:1.7-0.26.rc1
changelog:
  - Reverted upstream change to FINAL_CONTENT_TYPE in order to fix
    printing to remote CUPS servers (bug #1010580).


author: Tim Waugh <twaugh@redhat.com> - 1:1.7-0.19.rc1
changelog:
  - Fixed avahi-no-threaded patch (was missing part of cupsd.h). Thanks
    to Joseph Wang for spotting it.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - cups-dbus-utf.patch: now that the scheduler only accepts valid UTF-8
    strings for job-name, there's no need to validate it as UTF-8 in the
    dbus notifier.


author: Jiri Popelka <jpopelka@redhat.com> - 1:1.6.1-23
changelog:
  - Removed obsolete browsing directives from cupsd.conf (bug #880826, STR #4157).
  - Updated summary and descriptions (#882982).
  - Fixed bogus dates in changelog.


author: Jiri Popelka <jpopelka@redhat.com> 1:1.6.1-17
changelog:
  - Migrate cups-lpd from xinetd to systemd socket activatable service (#884641).
  - Clean up old Requires/Conflicts/Obsoletes/Provides.


author: Tim Waugh <twaugh@redhat.com> 1:1.6.1-16
changelog:
  - Additional fix relating to CVE-2012-5519 to avoid misleading error
    message about actions to take to enable file device URIs.


author: Tim Waugh <twaugh@redhat.com> 1:1.6.1-13
changelog:
  - Applied additional upstream patch for CVE-2012-5519 so that the
    RemoteRoot keyword is recognised in the correct configuration file.


author: Tim Waugh <twaugh@redhat.com> 1:1.6.1-11
changelog:
  - Apply upstream fix for CVE-2012-5519 (STR #4223, bug #875898).
    Migrate configuration keywords as needed.


author: Jiri Popelka <jpopelka@redhat.com> 1:1.6.1-1
changelog:
  - 1.6.1
   - simplified systemd.patch due to removed CUPS Browsing protocol (STR #3922)
   - removed:
     textonly filter - moved to cups-filters
     pstopdf filter - cups-filters also has pstopdf (different)
     PHP module - moved to cups-filters (STR #3932)
     serial.patch - moved to cups-filters
     getpass.patch - r10140 removed the getpass() use
     snmp-quirks.patch - fixed upstream (r10493)
     avahi patches - merged upstream (STR #3066)
     icc.patch - merged upstream (STR #3808)
   - TODO:
     - do we need cups-build.patch ?
  - added filesystem sub-package (#624695)
  - use macroized systemd scriptlets


author: Jiri Popelka <jpopelka@redhat.com> 1:1.5.2-13
changelog:
  - Add triggers for samba4-client. (#817110)
  - No need to define BuildRoot and clean it in clean and install section anymore.
  - %defattr no longer needed in %files sections.


author: Jiri Popelka <jpopelka@redhat.com> 1:1.5.2-12
changelog:
  - Install /usr/lib/tmpfiles.d/cups-lp.conf to support /dev/lp* devices (#812641)
  - Move /etc/tmpfiles.d/cups.conf to /usr/lib/tmpfiles.d/ (#812641)


author: Jiri Popelka <jpopelka@redhat.com> 1:1.5.2-11
changelog:
  - The IPP backend did not always setup username/password authentication
    for printers (bug #810007, STR #3985)
  - Detect authentication errors for all requests.
    (bug #810007, upstream commit revision10277)


author: Tim Waugh <twaugh@redhat.com> 1:1.5.2-10
changelog:
  - Removed private-shared-object-provides filter lines as they are not
    necessary (see bug #807767 comment #3).


author: Tim Waugh <twaugh@redhat.com> 1:1.5.2-8
changelog:
  - Avoid systemd PrivateTmp bug by explicitly requiring the fixed
    version of systemd (bug #807672).


author: Tim Waugh <twaugh@redhat.com> 1:1.5.2-2
changelog:
  - Synthesize notify-printer-uri for job-completed events where the job
    never started processing (bug #784786, STR #4014).
  - Removed banners from LSPP patch on Dan Walsh's advice.


author: Remi Collet <remi@fedoraproject.org> 1:1.5.0-28
changelog:
  - build against php 5.4.0, patch for STR #3999
  - add filter to fix private-shared-object-provides
  - add %check for php extension


author: Tim Waugh <twaugh@redhat.com> 1:1.5.0-26
changelog:
  - Replace newline characters with spaces in reported Device IDs
    (bug #782129, STR #4005).
  - Don't accept Device URIs of '\0' from SNMP devices
    (bug #770646, STR #4004).


author: Tim Waugh <twaugh@redhat.com> 1:1.5.0-23
changelog:
  - Detangle cups-serverbin-compat.patch from cups-lspp.patch.
  - Bind to datagram socket as well in systemd cups.socket unit file, to
    prevent that port being stolen by another service (bug #760070).


author: Tim Waugh <twaugh@redhat.com> 1:1.5.0-18
changelog:
  - Make sure to guard against retrying the Avahi connection whilst
    already doing so (Ubuntu #877967).


author: Tim Waugh <twaugh@redhat.com> 1:1.5.0-16
changelog:
  - Use upstream fix for driverd issue (bug #742989).
  - Array handling fixes for DNSSDPrinters.
  - Array handling fixes for Avahi poll implementation.
  - Increase client blocking timeout from 30s to 70s (bug #744715).
  - Set BindIPv6Only=ipv6-only in systemd socket unit file as better fix
    for bug #737230.


author: Tim Waugh <twaugh@redhat.com> 1:1.5.0-12
changelog:
  - More fixes for systemd socket activation:
    - relax permissions check for domain socket in libcups.
    - initialise addrlen before calling getsockname().


author: Richard Hughes <rhughes@redhat.com> 1:1.5.0-11
changelog:
  - Updated colord patch with fixes to DeleteDevice.
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=741697


author: Tim Waugh <twaugh@redhat.com> 1:1.5.0-6
changelog:
  - Tighten explicit libs sub-package requirement so that it includes
    the correct architecture as well (bug #731421 comment #8).


author: Tim Waugh <twaugh@redhat.com> 1:1.5-0.14.rc1
changelog:
  - Undo last change which had no effect.  We already remove the .SILENT
    target from the Makefile as part of the build.


author: Tim Waugh <twaugh@redhat.com> 1:1.5-0.10.rc1
changelog:
  - Don't use portreserve any more.  Better approach is to use systemd
    socket activation (not yet done).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.5-0.1.b1
changelog:
  - 1.5b1
    - removed cups-texttops-rotate-page.patch (#572338 is CANTFIX)
    - removed cups-page-label.patch (#520141 seems to be CANTFIX)


author: Tim Waugh <twaugh@redhat.com> 1:1.4.6-6
changelog:
  - Don't use --enable-pie configure option as it has been removed and
    is now assumed.  See STR #3691.


author: Tim Waugh <twaugh@redhat.com> 1:1.4.6-4
changelog:
  - Properly separated serverbin-compat and lspp patches.
  - Updated ICC patch (still not yet applied).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.6-2
changelog:
  - Use a smaller buffer when writing to USB devices (bug #661814).
  - Handle EAI_NONAME when resolving hostnames (bug #617208).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.5-6
changelog:
  - The cups-config man page has been moved to the devel sub-package.
  - The php sub-package now explicitly requires the libs package with
    the same version and release (bug #646814).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.5-5
changelog:
  - Fixed character encoding in CREDITS.txt.
  - Mark D-Bus configuration file as config file.
  - Don't mark MIME types and convs files as config files.  Overrides
    can be placed as new *.types/*.convs files in /etc/cups.
  - Don't mark banners as config files.  Better is to provide new
    banners.
  - Don't mark templates and www files as config files.  A better way to
    provide local overrides is to use a different ServerRoot setting.
    Note that a recent security fix required changed to template files.
  - Provide versioned LPRng symbol for rpmlint.


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.5-4
changelog:
  - Changed subsystem lock file name in initscript
    so the service is correctly stopped on reboot or halt (bug #659391).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.4-12
changelog:
  - Applied patch to fix cupsd memory corruption vulnerability
    (CVE-2010-2941, bug #652161).
  - Don't crash when MIME database could not be loaded (bug #610088).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.4-10
changelog:
  - Perform locking for gnutls and avoid libgcrypt's broken
    locking (bug #607159).
  - Build with --enable-threads again (bug #607159).
  - Force the use of gnutls despite thread-safety concerns (bug #607159).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Merged F-12 change:
    - Use numeric addresses for interfaces unless HostNameLookups are
      turned on (bug #583054).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.4-1
changelog:
  - 1.4.4.  Fixes several security vulnerabilities (bug #605399):
    CVE-2010-0540, CVE-2010-0542, CVE-2010-1748.  No longer need str3503,
    str3399, str3505, str3541, str3425p2 or CVE-2010-0302 patches.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Removed unapplied gnutls-gcrypt-threads patch.  Fixed typos in
    descriptions for lpd and php sub-packages.


author: Tim Waugh <twaugh@redhat.com> 1:1.4.3-9
changelog:
  - Adjust texttops output to be in natural orientation (STR #3563).
    This fixes page-label orientation when texttops is used in the
    filter chain (bug #572338).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.3-1
changelog:
  - 1.4.3.
  - No longer need CVE-2009-3553, str3381, str3390, str3391,
    str3403, str3407, str3413, str3418, str3422, str3425,
    str3428, str3431, str3435, str3436, str3439, str3440,
    str3442, str3448, str3458, str3460, cups-sidechannel-intrs,
    negative-snmp-string-length, cups-media-empty-warning patches.


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-35
changelog:
  - Fixed (for the third time) patch for STR #3425 to correctly
    remove job info files in /var/spool/cups (bug #571830).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-34
changelog:
  - Applied patch for CVE-2010-0302 (incomplete fix for CVE-2009-3553,
    bug #557775).
  - Added comments for all sources and patches.


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-33
changelog:
  - Don't own filesystem locale directories (bug #569403).
  - Don't apply gcrypt threading patch (bug #553834).
  - Don't treat SIGPIPE as an error (bug #569770).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.2-32
changelog:
  - Fixed cupsGetNamedDest() so it falls back to the real default
    printer when a default from configuration file does not exist (bug #565569, STR #3503).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-23
changelog:
  - Use %{_initddir}, %{_sysconfdir} and SMP make flags.
  - Use mode 0755 for binaries and libraries where appropriate.
  - Fix lpd obsoletes tag.


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-22
changelog:
  - Removed use of prereq and buildprereq.
  - Fixed use of '%' in changelog.
  - Versioned explicit obsoletes/provides.
  - Use tabs throughout.


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-21
changelog:
  - Fixed patch for STR #3425 again by adding in back-ported change from
    svn revision 8929 (bug #549899).  No longer need
    delete-active-printer patch.


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-20
changelog:
  - Fixed ipp authentication for servers requiring authentication for
    IPP-Get-Printer-Attributes (bug #548873, STR #3458).


author: Tim Waugh <twaugh@redhat.com> - 1:1.4.2-14
changelog:
  - The scheduler did not use the Get-Job-Attributes policy for a
    printer (STR #3431).
  - The scheduler added two job-name attributes to each job object
    (STR #3428).
  - The scheduler did not clean out completed jobs when
    PreserveJobHistory was turned off (STR #3425).
  - The web interface did not show completed jobs (STR #3436).
  - Authenticated printing did not always work when printing directly to
    a remote server (STR #3435).
  - Use upstream patch to stop the network backends incorrectly clearing
    the media-empty-warning state (rev 8896).
  - Use upstream patch to fix interrupt handling in the side-channel
    APIs (rev 8896).
  - Use upstream patch to handle negative SNMP string lengths (rev 8896).
  - Use upstream fix for SNMP detection (bug #542857, STR #3413).
  - Use the text filter for text/css files (bug #545026, STR #3442).
  - Show conflicting option values in web UI (bug #544326, STR #3440).
  - Use upstream fix for adjustment of conflicting options
    (bug #533426, STR #3439).
  - No longer requires paps.  The texttopaps filter MIME conversion file
    is now provided by the paps package (bug #545036).
  - Moved %{_datadir}/cups/ppdc/*.h to the main package (bug #545348).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-6
changelog:
  - Fixed display of current driver (bug #537182, STR #3418).
  - Fixed out-of-memory handling when loading jobs (bug #538054,
    STR #3407).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-5
changelog:
  - Fixed typo in admin web template (bug #537884, STR #3403).
  - Reset SIGPIPE handler for child processes (bug #537886, STR #3399).


author: Tim Waugh <twaugh@redhat.com> 1:1.4.2-1
changelog:
  - 1.4.2.  No longer need str3380, str3332, str3356, str3396 patches.
  - Removed postscript.ppd.gz (bug #533371).
  - Renumbered patches and sources.


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.1-13
changelog:
  - Fix incorrectly applied patch from #STR3285 (bug #531108).
  - Set the PRINTER_IS_SHARED variable for admin.cgi (bug #529634, #STR3390).
  - Pass through serial parameters correctly in web interface (bug #529635, #STR3391).
  - Fixed German translation (bug #531144, #STR3396).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.4.1-4
changelog:
  - Changed cups.init to be LSB compliant (bug #521641), i.e.
    return code "2" (instead of "3") if invalid arguments
    return code "4" if restarting service under nonprivileged user
    return code "5" if cupsd not exist or is not executable
    return code "6" if cupsd.conf not exist


author: Tim Waugh <twaugh@redhat.com> 1:1.4.0-2
changelog:
  - Fixed the dnssd backend so that it only reports devices once avahi
    resolution has completed.  This makes it report Device IDs
    (bug #520858).
  - Fix locale code for Norwegian (bug #520379).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.19
changelog:
  - Prevent infinite loop in cupsDoIORequest when processing HTTP
    errors (bug #518065, bug #519663, STR #3311).
  - Fixed document-format-supported attribute when
    application/octet-stream is enabled (bug #516507, STR #3308, patch
    from Jiri Popelka).
  - Fixed buggy JobKillDelay handling fix (STR #3292).
  - Prevent infinite loop in ppdc (STR #3293).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.16
changelog:
  - Fixed JobKillDelay handling for cancelled jobs (bug #518026, STR
    - Use 'exec' to invoke ghostscript in the pstoraster filter.  This
    allows the SIGTERM signal to reach the correct process, as well as
    conserving memory (part of bug #518026).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.14
changelog:
  - Fixed ppds.dat handling of drv files (bug #515027, STR #3279).
  - Fixed udev rules file to avoid DEVTYPE warning messages.
  - Fixed cupsGetNamedDest() so it does not fall back to the default
    printer when a destination has been named (bug #516439, STR #3285).
  - Fixed MIME type rules for image/jpeg and image/x-bitmap
    (bug #516438, STR #3284).
  - Clear out cache files on upgrade.
  - Require acl.


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.13
changelog:
  - Ship udev rules to allow libusb to access printer devices.
  - Fixed duplex test pages (bug #514898, STR #3277).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.12
changelog:
  - Fixed Avahi support in the dnssd backend (bug #513888).
  - Fixed incorrect arguments to sigaction() in dnssd backend (STR #3272).
  - Cheaply restore compatibility with 1.1.x by having cups_get_sdests()
    perform a CUPS_GET_CLASSES request if it is not sure it is talking
    to CUPS 1.2 or later (bug #512866).
  - Prevent ipp backend looping with bad IPP devices (bug #476424,
    STR #3262).
  - Fixed Device ID reporting in the usb backend (STR #3266).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.10
changelog:
  - Applied patch to prevent bad job control files crashing cupsd on
    start-up (STR #3253, bug #509741).
  - Correctly handle CUPS-Get-PPDs requests for models with '+' in their
    names (STR #3254, bug #509586).
  - Accept incorrect device URIs in the (non-libusb) usb backend for
    compatibility with Fedora 11 before bug #507244 was fixed.
  - Applied patch to fix incorrect device URIs (STR #3259, bug #507244).
  - Applied patch to fix job-hold-until for remote queues (STR #3258,
    bug #497376).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.7
changelog:
  - Fixed template problem preventing current printer option defaults
    from being shown in the web interface (bug #506794, STR #3244).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.3
changelog:
  - Don't use RPM_SOURCE_DIR macro.
  - Fixed add/modify-printer templates which had extra double-quote
    characters, preventing the Continue button from appearing in certain
    browsers (bug #506461, STR #3229).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.rc1.1
changelog:
  - 1.4rc1.  No longer need str3124, CVE-2009-0163, CVE-2009-0164,
    str3197, missing-devices patches.
  - Disabled avahi patch for the time being.  More work is needed to
    port this to rc1.
  - Removed wbuffer patch as it is not needed (see STR #1968).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.15
changelog:
  - Accept "Host: ::1" (bug #497393).
  - Accept Host: fields set to the ServerName value (bug #497301).
  - Specify that we want poppler's pdftops (not ghostscript) for the
    pdftops wrapper when calling configure.


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.14
changelog:
  - Applied patch to fix CVE-2009-0163 (bug #490596).
  - Applied patch to fix CVE-2009-0164 (bug #490597).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.13
changelog:
  - Don't verify MD5 sum, file size, or mtime for several config files:
    cupsd.conf, client.conf, classes.conf, printers.conf, snmp.conf,
    subscriptions.conf, lpoptions (bug #486287).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.12
changelog:
  - If cups-polld gets EAI_AGAIN when looking up a hostname,
    re-initialise the resolver (bug #490943).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.7
changelog:
  - Prevent cups-deviced missing devices (STR #3108).
  - Actually drop the perl implementation of the dnssd backend and use
    the avahi-aware one.


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b2.6
changelog:
  - Beginnings of avahi support.  The dnssd backend should now work, but
    the scheduler will not yet advertise DNS-SD services.
  - No longer require avahi-tools as the dnssd backend does not use the
    command line tools any longer.
  - Load MIME type rules correctly (bug #426089, STR #3059).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b1.5
changelog:
  - Applied patch to fix RSS subscription limiting (bug #473901,
    CVE-2008-5183).
  - Attempt to unbreak the fix for STR #2831 (bug #474742).


author: Tim Waugh <twaugh@redhat.com> 1:1.4-0.b1.3
changelog:
  - 1.4b1.
  - No longer need ext, includeifexists, foomatic-recommended,
    getnameddest, str2101, str2536 patches.
  - Require poppler-utils at runtime and for build.  No longer need
    pdftops.conf.
  - Obsolete cupsddk.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.9-1
changelog:
  - 1.3.9, including fixes for CVE-2008-3639 (STR #2918, bug #464710),
    CVE-2008-3640 (STR #2919, bug #464713) and CVE-2008-3641 (STR #2911,
    bug #464716).
  - No longer need str2892 or res_init patches.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.8-5
changelog:
  - The dnssd backend uses avahi-browse so require it (bug #458565).
  - New php sub-package (bug #428235).
  - cups-polld: reinit the resolver if we haven't yet resolved the
    hostname (bug #354071).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Removed autoconf requirement by applying autoconf-generated changes
    to patches that caused them.  Affected patches: cups-lspp.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-13
changelog:
  - CVE-2008-1373 patch is no longer needed (applied upstream).
  - Mark HTML files and templates config(noreplace) for site-local
    modifications (bug #441719).
  - The cups-devel package requires zlib-devel (bug #455192).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-3
changelog:
  - If cupsdTimeoutJob is called when the originating connection is still
    known, pass that to the function so that copy_banner can get at it if
    necessary (bug #447200).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.6-9
changelog:
  - Applied patch to fix CVE-2008-1373 (GIF overflow, bug #438303).
  - Applied patch to prevent heap-based buffer overflow in CUPS helper
    program (bug #436153, CVE-2008-0047, STR #2729).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.6-4
changelog:
  - LSB header for initscript (bug #246897).
  - Move HTML-related files to main application directory so that the CUPS
    web interface still works even with --excludedocs (bug #375631).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.6-3
changelog:
  - Set MaxLogSize to 0 to prevent log rotation.  Upstream default is 1Mb, but
    we want logrotate to be in charge.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.5-6
changelog:
  - Include fixes from svn up to revision 7304.  No longer need str2703 patch.
    Build with --with-dbusdir.
  - Try out logrotate again (bug #432730).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.5-4
changelog:
  - Fix compilation of SO_PEERCRED support.
  - Include fixes from svn up to revision 7287.  No longer need str2650 or
    str2664 patches.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Apply patch to prevent overlong PPD lines from causing failures except
    in strict mode (bug #405061).  Needed for compatibility with older
    versions of foomatic (e.g. Red Hat Enterprise Linux 3/4).
  - Applied upstream patch to fix cupsctl --remote-any (bug #421411, STR #2650).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - CVE-2007-4045 patch is not necessarily because cupsd_client_t objects are
    not moved in array operations, only pointers to them.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fixed CVE-2007-4045 patch; has no effect with shipped packages since they
    are linked with gnutls.
  - LSPP cupsdSetString/ClearString fixes (bug #378451).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.4-2
changelog:
  - Applied patch to fix CVE-2007-4045 (bug #250161).
  - Applied patch to fix CVE-2007-4352, CVE-2007-5392 and
    CVE-2007-5393 (bug #345101).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.3-3
changelog:
  - Use ppdev instead of libieee1284 for parallel port Device ID
    retrieval (bug #311671).  This avoids SELinux audit messages.


author: Tim Waugh <twaugh@redhat.com> 1:1.3-0.rc2.2
changelog:
  - Make cancel man page work properly with alternatives system (bug #249768).
  - Don't call aclocal even when we modify m4 files -- CUPS does not use
    automake (bug #250251).


author: Tim Waugh <twaugh@redhat.com> 1:1.3-0.rc2.1
changelog:
  - Better buildroot tag.
  - Moved LSPP access check in add_job() to before allocation of the job
    structure (bug #231522).
  - 1.3rc2.  No longer need avahi patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.3-0.b1.3
changelog:
  - Change initscript start level to 98, to start after avahi but before
    haldaemon.
  - The devel sub-package requires krb5-devel.


author: Tim Waugh <twaugh@redhat.com> 1:1.3-0.b1.2
changelog:
  - Build requires avahi-compat-libdns_sd-devel.  Applied patch to fix
    build against avahi (bug #245824).
  - Build requires krb5-devel.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Make the initscript use start priority 56 (bug #213828).
  - Better paper-out detection patch (bug #241589).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.10-7
changelog:
  - Until bug #236736 is fixed, work around the kernel usblp driver's
    quirks so that we can detect paper-out conditions.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.10-6
changelog:
  - Fixed 'cancel' man page (bug #234088).
  - Added empty subscriptions.conf file to make sure it gets the right
    SELinux file context.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.7-8
changelog:
  - Removed logrotate config file and maxlogsize patch (bug #227369).  Now
    CUPS is in charge of rotating its own logs, and defaults to doing so once
    they get to 1Mb in size.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.7-6
changelog:
  - Fixed If-Modified-Since: handling in libcups (bug #217556, STR #2133).
  - Fixed extra EOF in pstops output (bug #216154, STR #2111).
  - Use upstream patch for STR #2121.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.7-4
changelog:
  - Another LSPP fix (bug #216669).
  - Fixed LSPP SELinux check (bug #216855).
  - Increased PPD timeout in copy_model() (bug #216065).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.5-4
changelog:
  - Fixed support for /dev/ttyUSB devices (bug #212577, STR #2061).
  - Fixed parallel backend (bug #213021, STR #2056).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-9
changelog:
  - adminutil.c: when writing 'BrowseAllow @LOCAL', add a comment about what
    to change it to when using directed broadcasts from another subnet
    (bug #204373).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-8
changelog:
  - LSPP patch didn't get updated properly in 1:1.2.4-6.  Use the right
    patch this time (bug #208676).  LSPP re-enabled.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-10
changelog:
  - Remove 'Provides: LPRng = 3.8.15-3' (bug #148757).
  - Applied patch to fix STR #1893 (bug #201800).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-6
changelog:
  - Use replacement snmp.c from STR #1737 (bug #193093).
  - Re-enable LSPP; doesn't harm browsing after all.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.1-2
changelog:
  - 1.2.1.
  - Another STR #1705 fix (bug #192034).
  - Fixed devel package multilib conflict (bug #192664).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-7
changelog:
  - Sync to svn5568.  No longer need rpath patch.
  - Added a 'conflicts:' for kdelibs to prevent bug #192548.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-4
changelog:
  - Disable back-channel data in the usb backend (STR #1705, bug #192034).
  - Fix for 'browsing stops on reload', STR #1670 (bug #191217).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5538.
  - Added 'restartlog' to initscript, for clearing out error_log.  Useful
    for problem diagnosis.
  - Initscript no longer needs to check for printconf-backend.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5470.
  - No longer need link, CAN-2005-0064, or no-propagate-ipp-port patches.
  - Switch to upstream PIE implementation (every single binary is PIE).
  - Extend relro to all binaries.
  - Better rpath patch.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - No longer need backend, rcp, or ppdsdat patches.
  - Use configure switch for LogFilePerm default instead of patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.5.rc3.2
changelog:
  - Patch pdftops to understand 'includeifexists', and use that in the
    pdftops.conf file (bug #189809).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.8
changelog:
  - No longer need openssl-devel.
  - Build with LDAP_DEPRECATED=1, to pick up declarations of ldap_init() etc.
  - Only warn about ACLs once (STR #1532).
  - Fix imagetops filter (STR #1533).
  - Sync pstops.c with svn 5382.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.1
changelog:
  - Ship a printers.conf file, and a client.conf file.  That way, they get
    their SELinux file contexts set correctly.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b2.6
changelog:
  - Add KDE compatibility symbols _ipp_add_attr/_ipp_free_attr to ipp.h, with
    a comment saying why they shouldn't be used.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn5102.0
changelog:
  - New svn snapshot.
  - No longer need enabledisable patch.
  - Fixed double-free in scheduler/policy.c (STR #1428).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn4964.0
changelog:
  - Use -fPIE not -fpie in PIE patch.
  - Fix link patch.
  - Patch in PIE instead of using --enable-pie, since that doesn't work.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - 1.2 svn snapshot.
  - No longer need doclink, str1023, pdftops, sanity, lpstat, str1068,
    sigchld, gcc34, gcc4, slow, CAN-2004-0888, CAN-2005-2097, finddest,
    str1249, str1284, str1290, str1301, CVE-2005-3625,6,7 patches.
  - Removed autodetect-tag patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.23-18
changelog:
  - Raise IPP_MAX_VALUES to 100 (bug #164232).  STR #1284.
  - Made FindDest better behaved in some instances (bug #164232).  STR #1283.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-2
changelog:
  - Fixed cups-lpd file mode (bug #137325).
  - Convert all man pages to UTF-8 (bug #107118).  Patch from Miloslav Trmac.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc2.1
changelog:
  - Make cancel-cups(1) man page point to lp-cups(1) not lp(1) (bug #136973).
  - Use upstream patch for STR #953.
  - 1.1.22rc2.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.7
changelog:
  - Prevent filters generating incorrect PS in locales where "," is the
    decimal separator (bug #136102).  Patch from STR #970.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc2.1
changelog:
  - 1.1.21rc2.
  - No longer need state, reload-timeout or str743 patches.
  - httpnBase64 patch no longer applies; alternate method implemented
    upstream.
  - Fix single byte overread in usersys.c (spotted by Colin Walters).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-9
changelog:
  - Apply patches from CVS (authtype) to fix STR #434, STR #611, and as a
    result STR #719.  This fixes several problems including those noted in
    bug #114999.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-8
changelog:
  - If cupsd fails to start, make it exit with an appropriate code so that
    initlog notifies the user (bug #110135).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix cups/util.c:get_num_sdests() to use encryption when it is necessary
    or requested (bug #118982).
  - Use upstream patch for the HTTP/1.1 Continue bug (from STR716).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-7
changelog:
  - Fix non-conformance with HTTP/1.1, which caused failures when printing
    to a Xerox Phaser 8200 via IPP (bug #122352).
  - Make lppasswd(1) PIE.
  - Rotate logs within cupsd (instead of relying on logrotate) if we start
    to approach the filesystem file size limit (bug #123003).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-4
changelog:
  - Tracked D-BUS API changes.
  - Updated D-BUS configuration file.
  - Symlinks to avoid conflicting with bash builtins (bug #102490).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-2
changelog:
  - Try harder to find a translated page for the web interface (bug #107619).
  - Added build_as_pie conditional to spec file to facilitate debugging.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-1
changelog:
  - 1.1.20.
  - No longer need idefense, str226 patches.
  - Updated sanity patch.
  - The devel sub-package requires openssl-devel (bug #110772).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't ignore the file descriptor when ShutdownClient is called: it
    might get closed before we next try to read it (bug #107787).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-10
changelog:
  - Pass correct attributes-natural-language through even in the absence
    of translations for that language (bug #100984).
  - Show compilation command lines.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-7
changelog:
  - Add some %if %use_dbus / %endif's to make it compile without dbus
    (bug #97397).  Patch from Jos Vos.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-0.rc4.1
changelog:
  - 1.1.19rc4.  Ported initscript, idefense, ppdsdat, dbus patches.
  - No longer need error, sigchld patches.
  - Ship cupstestppd.


author: Havoc Pennington <hp@redhat.com> 1:1.1.18-4
changelog:
  - adjust dbus patch - dbus_bus_get() sends the hello for you, 
    and there were a couple of memleaks
  - buildprereq dbus 0.9
  - rebuild for new dbus
  - hope it works, I'm ssh'd in with no way to test. ;-)


author: Tim Waugh <twaugh@redhat.com> 1.1.18-1
changelog:
  - 1.1.18.
  - No longer need uninit patch.
  - Some parts of the iDefense and pdftops patches seem to have been
    picked up, but not others.


author: Tim Waugh <twaugh@redhat.com> 1.1.17-6
changelog:
  - Add epoch to internal requirements.
  - Make 'condrestart' return success exit code when daemon isn't running.


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.15-14
changelog:
  - Buildrequire pam-devel.
  - Patch default PAM config file to remove directory names from module paths,
    allowing the configuration files to work equally well on multilib systems.
  - Patch default PAM config file to use system-auth, require the file at build-
    time because that's what data/Makefile checks for.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-13
changelog:
  - Use logrotate for log rotation (bug #76791).
  - No longer need cups.desktop, since redhat-config-printer handles it.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-11
changelog:
  - Use %configure for multilib correctness.
  - Use libexec instead of lib for CUPS_SERVERBIN.
  - Ship translated man pages.
  - Remove unshipped files.
  - Fix file list permissions (bug #59021, bug #74738).
  - Fix messy initscript output (bug #65857).
  - Add 'reload' to initscript (bug #76114).


author: Tim Waugh <twaugh@redhat.com> 1.1.15-7
changelog:
  - Really add cups-lpd xinetd file (bug #63919).
  - Ship pstoraster (bug #69573).
  - Prevent fread from trying to read from beyond EOF (fixes a segfault
    with new glibc).


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-3
changelog:
  - Add a symlink /usr/share/cups/doc -> /usr/share/doc/cups-devel-1.1.15
    because some applications expect to find the cups docs in
    /usr/share/cups/doc


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-1
changelog:
  - 1.1.15-1
  - Fix up smb printing trigger (samba-client, not samba-clients)
  - Start cupsd earlier, apparently it needs to be running before samba
    starts up for smb printing to work.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-12
changelog:
  - Support SMB printing (#62407)
  - Add HTML redirections to doc files to work around users mistaking
    /usr/share/doc/cups-1.1.14 for the web frontend (#62405)


author: Bill Nottingham <notting@redhat.com> 1.1.14-7
changelog:
  - lpc man page is alternative too
  - run ldconfig in -libs %post/%postun, not main
  - remove alternatives in %preun


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-5
changelog:
  - Move cups-config to cups-devel subpackage
  - Make alternatives usage a %define to simplify builds for earlier
    releases
  - Explicitly provide things we're supplying through alternatives
    to shut up kdeutils dependencies


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-1
changelog:
  - 1.1.13
  - Add patch for koi8-{r,u} and iso8859-8 encodings (#59018)
  - Rename init scripts so we can safely "killall cupsd" from there


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.1.1 (this has some major bugfixes)
  - Fix a typo in initscript (it's $?, not ?$)
  - Fix /usr/etc vs. /etc trouble, don't insist on /usr/var (YUCK!)
  - Create the spool dir


author: Than Ngo <than@redhat.de>
changelog:
  - update to 1.1 release
  - move back to /etc/rc.d/init.d
  - fix cupsd.init to work with /etc/init.d and /etc/rc.d/init.d
  - split cups


author: Tim Powers <timp@redhat.com>
changelog:
  - started changelog 
  - fixed init.d script location
  - changed script in init.d quite a bit and made more like the rest of our
    startup scripts


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.9.6-8
changelog:
  - Python 2 binary package renamed to python2-cracklib
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-5
changelog:
  - make the simplistic check and the purging of special characters much
    less aggressive (#1003624, #985378)


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-3
changelog:
  - fix the python module to work with compressed dictionaries (#972542)
  - fix various dictionary lookup errors (#986400, #986401)
  - make the library reentrant and fix compilation warnings


author: Nalin Dahyabhai <nalin@redhat.com> - 2.9.0-1
changelog:
  - update to 2.9.0 (#970065)
    - adds FascistCheckUser()
  - go ahead and compress the main dictionary, since we're linking with zlib
    anyway


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.22-1
changelog:
  - update to 2.8.22 (#887461), which now returns an error instead of exiting
    when there's a failure opening the dictionary in FascistCheck()


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.19-3
changelog:
  - update the copy of the debian source package to one that can currently be
    retrieved using the URL we list for it


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.18-1
changelog:
  - update to 2.8.18
  - add man pages from Debian (#583932)
  - replace zh_CN translation (related to #627449)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.15-1
changelog:
  - update to 2.8.15
  - update cracklib-words to the current version (2008-05-07)
  - fixup URLs for various dictionary sources that we use
  - fix freeing-an-uninitialized-pointer in the python module (SF#2907102)
  - add a disttag


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.13-1
changelog:
  - update to 2.8.13, which overhauls the python bindings and revises
    FascistCheck()'s behavior:
    2.8.12 success: returns None, fail: returns error text, other: exceptions
    2.8.13 success: returns candidate, fail: throws ValueError, other: exceptions


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.12-1
changelog:
  - update to 2.8.12, which was relicensed to GPLv2
  - package the now-bundled cracklib-small dictionary in cracklib-dicts


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-11
changelog:
  - improve reports of out-of-memory exceptions so that they don't include a
    bogus filename
  - improve reports of file-missing exceptions from the python module so that
    they give the right filename (#225858)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-10
changelog:
  - explicitly include required headers from <packer.h> (#228698)
  - attempt to provide doc strings in the python module


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-9
changelog:
  - drop final "." from summaries (Jef Spaleta, #225659)
  - drop static library from -devel subpackage (Jef Spaleta, #225659)
  - note that the most recently-added wordlist came from bugzilla (#225659)
  - remove explicit dependency on gzip, as it's implicit (Jef Spaleta, #225659)
  - convert %triggerpostun to not use a shell as an interpreter (#225659)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-7
changelog:
  - fix check for the existence of dictionaries when the caller specifies a
    location (#224347, upstream #1644628)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-2
changelog:
  - update to 2.8.9
  - only create compat symlinks for the dictionaries if we aren't installing
    them into the old locations


author: Nalin Dahyabhai <nalin@redhat.com> 2.8.1-1
changelog:
  - update to 2.8.1
    - moves dictionary to new default location under %{_datadir} -- the
      dictionary format is the same across all architectures
    - renames "packer" to "cracklib-packer"
  - conflict with cracklib-dicts < 2.8, where the on-disk format was not
    compatible on 64-bit arches due to now-fixed cleanliness bugs
  - move binaries for manipulating and checking words against dictionaries
    from -dicts into the main package


author: Nalin Dahyabhai <nalin@redhat.com> 2.7-29
changelog:
  - correctly build on 64-bit systems (part of #143417)
  - patch so that 32- and 64-bit libcrack can read dictionaries which were
    incorrectly generated on 64-bit systems of the same endianness (more #143417)
  - include a sample cracklib magic file
  - stop using /usr/dict/* when building the dictionary
  - list words as a build requirement, which it is, instead of a run-time
    requirement
  - provide a virtual arch-specific dep in cracklib-dicts, require it in
    cracklib (part of #143417)


author: Nalin Dahyabhai <nalin@redhat.com> 2.7-25
changelog:
  - fix ldconfig invocation in trigger for older versions which included the
    soname symlink (#114620)


author: Nalin Dahyabhai <nalin@redhat.com> 2.7-24
changelog:
  - include packer.h for reading dictionaries directly, since we already include
    packer in the -dicts subpackage (#68339)
  - don't include the soname symlink in the package, let ldconfig do its job


author: Nalin Dahyabhai <nalin@redhat.com> 2.7-12
changelog:
  - remove cruft that ldconfig already knows how to manage
  - don't explicitly strip anything -- the brp setup decides that
  - tweak the header so that it can be used in C++ (#46685)
  - buildprereq the words package


author: Michal Sekletár <msekleta@redhat.com> - 0.1.0-5
changelog:
  - if interface has name in expected format print it to stdout (#1643515)
  - don't assign names to virtual devices (#1644294)


author: EL Errata <el-errata_ww@oracle.com> - 2.9.5-10.0.1.el8
changelog:
  - Update workflow xml for Oracle [Orabug: 18945470]
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport and libreport-rhel
  - Added orabug20390725.patch to remove redhat reference [Orabug: 20390725]
  - Added Bug20357383.patch to remove redhat reference [Orabug: 20357383]
  - libreport: unresolved deps python3-subscription-manager-rhsm [Orabug: 29386049]
  - Removed libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla


author: Martin Kutlak <mkutlak@redhat.com> - 2.9.5-10
changelog:
  - reportclient: Search for required packages recursively
  - reportclient: Find and download required debuginfo packages
  - report-client: Find debuginfos in own method
  - Resolves: rhbz#1783897


author: Michal Fabik <mfabik@redhat.com> 2.9.5-7
changelog:
  - bugzilla: change the default bugzilla group
  - tests: Disable strcpm'ing a freed pointer
  - Add autogen.sh
  - Resolves #1660449


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.5-6
changelog:
  - replace all Fedora URLs by corresponding values for RHEL
  - fix coverity issues
  - Resolves: #1602590, #1623406


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.5-1
changelog:
  - spec: actualize according to downstream
  - spec: Conditionalize the Python2 and Python3
  - report-python: fix tests if configure --without-python2
  - autogen: correctly parse buildrequires from spec file


author: Martin Kutlak <mkutlak@redhat.com> 2.9.4-1
changelog:
  - Translation updates
  - Revert "use /usr/sbin/"
  - ureport: remove json-c is_error() usage
  - ldconfig and gtk-update-icon-cache is not needed in rawhide
  - reporter-rhtsupport: Remove dependency on redhat-access-insights
  - do not expand macro in changelog
  - move defattr which match the defaults
  - use /usr/sbin/
  - macro python_sitearch is always defined on rhel7+
  - remove rhel6 specific items and accomodate to rhel7+
  - This package uses names with ambiguous `python-` prefix in requirements.
  - reporter-{bugzilla,mantisbt,rhtsupport}: fix free
  - reporter-mailx: rely on configured email
  - spec: fix unowned directories
  - augeas: include local config path
  - doc: update to contain newly added user's local config
  - reporter-mantisbt: read configuration from user's home
  - reporter-rhtsupport: read configuration from user's home
  - reporter-bugzilla: read configuration from user's home
  - reporter-bugzilla: ask concrete bz when requiring login
  - makefile: fix make release


author: Julius Milan <jmilan@redhat.com> 2.9.3-1
changelog:
  - Translation updates
  - commit to delete
  - workflows: fix description in workflow_RHELJavaScript.xml.in
  - workflows: add workflow for adding data to existing case
  - client-python,report-python: Allow python to be optional at build time
  - ignored words: add SYSTEMD_NSS_BYPASS_BUS
  - reporter-ureport: add 'ProcessUnpackaged' option
  - spec: add workflow for adding data to existing case
  - rep-sys-journal: fix in finding executable basename
  - remove old obsolete
  - Group is not used any more
  - remove old changelogs
  - requires pythonX-dnf instead of dnf
  - doc: fix obsolete doxygen tags & complains
  - lib: Introduce pid_for_children element from ns
  - client-python: Do not try to unlink None
  - spec: rename Python binary packages


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.1-1
changelog:
  - build: create tarball in release-* target
  - problem_data: fix double const
  - wizard: fix error found by -Werror=format-security
  - run_event: fix cmp between pointer and zero character
  - build: do not upload tarball to fedorahosted.org
  - spec: do not use fedorahosted.org as source
  - build: fix generating list of dependences in autogen.sh
  - build: generate new release entries with date
  - report-newt: free allocated variables, don't close dd twice
  - build: fix scratch-build target
  - changelog: reflect the PR
  - lib: several bug fixes in parsing of mountinfo
  - lib: correctly recognize chroot in container
  - lib: declare CONTAINER_ROOTS element name
  - lib: add more log wrappers for perror
  - reporter-bugzilla: use /etc/os-release for default url
  - configure.ac: Remove nss dependency
  - spec: include testsuite headers in the devel package
  - tests: include testsuite.h in the dist archive
  - maint: check pulled .po files for errors
  - build: fix bug in changelog generating in release target
  - changelog: fix typos


author: Jakub Filak <jakub@thefilaks.net> 2.9.0-1
changelog:
  - Translation updates
  - build: make the release-* targets smarter
  - add CHANGELOG.md
  - reporter-s-journal: enable SYSLOG_IDENTIFIER from env
  - report-python: add method run_event_on_problem_dir
  - lib: use lz4 instead of lz4cat
  - reportclient: honor ABRT_VERBOSE
  - tree-wide: introduce 'stop_on_not_reportable' option
  - client: add support for $releasever to debuginfo
  - lib: correct test for own root
  - workflows: run analyze_BodhiUpdates event on Fedora
  - man: fix formating
  - reporter-systemd-journal: introduce reporter-systemd-journal
  - problem_data: add function which returns all problem data keys
  - include: add exception_type element constant
  - spec: changes related to reporter-systemd-journal
  - problem_report: add normalization of crashed thread
  - problem_report: make generate report configurable
  - problem_report: use core_backtrace if there is no backtrace
  - lib: refuse to parse negative number as unsigned int
  - spec: simplify and remove old conditional
  - build: add gettext-devel to sysdeps
  - dd: add check for validity of new file FD
  - build: configure tree for debugging by default
  - spec: use %buildroot macro
  - spec: remove defattr which match the defaults
  - spec: do not clean buildroot
  - spec: remove Groups
  - spec: code cleanup
  - lib: fix a bug in dealing with errno
  - lib: add convenient wrappers for uint in map_string_t
  - problem_report: ensure C-string null terminator
  - lib: fix invalid cgroup namespace ID
  - lib: make die function configurable
  - lib: allow using FD of /proc/[pid] instead of pid_t
  - dd: add functions for opening dd item
  - lib: add xfdopen
  - problem data: search for sensitive words in more files
  - dd: add dd_copy_file_at
  - ignored words: add "systemd-logind" and "hawkey"
  - build: reset the default version with each release
  - doc: make README more verbose
  - tree-wide: produce less messages in NOTICE log lvl
  - ureport: less confusing logging
  - spec: install JavaScript workflows
  - workflow: add JavaScript workflows
  - bugzilla: stop including package details


author: Jakub Filak <jfilak@redhat.com> 2.8.0-1
changelog:
  - lib: fix a memory leak in create_dump_dir fn
  - rhtsupport: fix a double free of config at exit
  - autogen: fix typo in usage help string
  - debuginfo: dnf API logging workarounds list
  - lib: don't warn when user word file doesn't exist
  - testuite: add test for forbidden_words
  - lib: be able to define base conf dir at runtime
  - wizard: use dnf instead of yum in add a screencast note
  - problem_report: document resevered elements


author: Matej Habrnal <mhabrnal@redhat.com> 2.7.2-1
changelog:
  - Translation updates
  - wizard: do not create reproducible if complex_detail == no
  - include: save_user_settings function declaration isn’t a prototype
  - Bugzilla: fix typo in comment don -> don't
  - client-python: fix a typo in error check
  - dd: do not log missing uid file when creating new dump dir
  - build: update searched pkg names for systemd


author: Matej Habrnal <mhabrnal@redhat.com> 2.7.1-1
changelog:
  - spec: compression updates
  - lib: add lz4 decompression
  - lib: avoid the need to link against lzma
  - all: format security
  - lib: add cgroup namespace
  - dd: introduce functions getting occurrence stamps
  - dd: introduce dd_get_env_variable
  - lib: add get env variable from a file
  - RHTSupport: include count in Support cases
  - lib: problem report API check fseek return code
  - ignored words: remove 'kwallet_jwakely' which I added wrongly


author: Matej Habrnal <mhabrnal@redhat.com> 2.7.0-1
changelog:
  - ignored words: update ignored words
  - mailx: introduce debug parameter -D
  - mailx: mail formatting: add comment right after %oneline
  - mailx: use problem report api to define an emais' content
  - lib: remove unused function make_description_bz
  - augeas: trim spaces before key value
  - Revert "xml parser: be more verbose in case xml file cannot be opened"
  - xml parser: be more verbose in case xml file cannot be opened
  - spec: add workflows.d to filesystem package
  - makefile: define LANG in release target
  - mailx: stop creating dead.letter on mailx failures
  - workflows: add comments to ambiguous functions
  - workflows: NULL for the default configuration dir
  - workflows: publish the function loading configuration
  - build: fix build on Fedora24
  - augeas: exclude mantisbt format configurations
  - reporter-mantisbt: add missing '=' to conf file
  - curl: fix typo Ingoring -> Ignoring
  - rhtsupport: attach all dump dir's element to a new case
  - rhtsupport: add pkg_vendor, reproducer and reproducible to description
  - report client: add silent mode to clean_up()
  - doc: add documentation for requires-details attribute
  - rhtsupport: Discourage users from reporting in non Red Hat stuff
  - rhtsupport: Discourage users from opening one-shot crashes
  - report-gtk: Require Reproducer for RHTSupport
  - Add workflow for RHEL anonymous report
  - spec: add workflow for RHEL anonymous report files
  - wizard: fix the broken widget expansion
  - dd: add documentation of dd_create_skeleton
  - workflow: add extern C to the header file
  - Fix minor typos
  - Translation updates
  - translations: update zanata configuration
  - wizard: fix the broken "Show log" widget
  - wizard: remove the code correcting Bugzilla groups


author: Matej Habrnal <mhabrnal@redhat.com> 2.6.4-1
changelog:
  - doc: add option -o and -O into reporter-ureport man page
  - rhtsupport: use problme report API to create description
  - bugzilla: make the event configurable
  - report-gtk: offer users to create private ticket
  - bugzilla|centos: declare 'restricted access' support
  - event config: add support for 'restricted access'
  - lib: move CREATE_PRIVATE_TICKET to the global configuration
  - dd: dd_delete_item does not die
  - dd: add function getting stat of item
  - dd: correct handling of TYPE when creating dump directory
  - dd: add function computing dump dir file system size
  - dd: add function counting number of dd items
  - dd: add function copying file descriptor to element
  - dd: allow 1 and 2 letter long element names
  - problem_data: factor out function reading single problem element
  - formatdup: more universal comment
  - dd: make function uid_in_group() public
  - Refactoring conditional directives that break parts of statements.
  - bugzilla: actualize man pages
  - bugzilla: don't report private problem as comment
  - uploader: move username and password to the advanced options
  - uploader: allow empty username and password
  - spec: add uploader config files and related man page
  - uploader: add possibility to set SSH keyfiles
  - curl: add possibility to configure SSH keys
  - desktop-utils: deal with Destkop files without command line
  - ureport: enable attaching of arbitrary values
  - update .gitignore
  - uploader: save remote name in reported_to
  - curl: return URLs without userinfo
  - lib: add function for removing userinfo from URIs
  - plugins: port reporters to add_reported_to_entry
  - reported_to: add a function formatting reported_to lines
  - lib: introduce parser of ISO date strings
  - uploader: use shared dd_create_archive function
  - dd: add a function for compressing dumpdirs
  - problem_report: add examples to the documentation
  - client: document environment variables


author: Matej Habrnal <mhabrnal@redhat.com> 2.6.3-1
changelog:
  - wizard: correct comments in save_text_if_changed()
  - events: improve example
  - reporter-bugzilla: add parameter -p
  - wizard: fix save users changes after reviewing dump dir files
  - dd: make function load_text_file non-static
  - bugzilla: don't attach build_ids
  - run_event: rewrite event rule parser
  - dd: add convenience wrappers fro loading numbers
  - ureport: improve curl's error messages
  - ureport: use Red Hat Certificate Authority to make rhsm cert trusted
  - curl: add posibility to use own Certificate Authority cert
  - spec: add redhat-access-insights to Requires of l-p-rhtsupport
  - bugzilla: put VARIANT_ID= to Whiteboard
  - autogen: use dnf instead of yum to install dependencies
  - configure: use hex value for dump dir mode
  - curl: add a helper for HTTP GET
  - dd: don't warn about missing 'type' if the locking fails
  - dd: stop warning about corrupted mandatory files
  - Use a dgettext function returning strings instead of bytes


author: Kamil Dudka <kdudka@redhat.com> - 8.30-5
changelog:
  - sync: fix open() fallback bug (#1602463)
  - fix implicit declaration warning in coreutils-getgrouplist.patch (#1602463)


author: Kamil Dudka <kdudka@redhat.com> - 8.29-8
changelog:
  - ls: increase the allowed abmon width from 5 to 12 (#1577872)
  - date, ls: pick strftime fixes from glibc to improve locale support (#1577872)


author: Kamil Dudka <kdudka@redhat.com> - 8.29-7
changelog:
  - add provides to coreutils-single to make it a drop-in replacement (#1572693)
  - reintroduce very old Provides (mktemp, sh-utils, textwrap, fileutils, stat)


author: Kamil Dudka <kdudka@redhat.com> - 8.29-5
changelog:
  - drop BR for bison, which is not used during the build
  - make sure that parse-datetime.{c,y} ends up in debuginfo (#1555079)
  - fix build failure with glibc-2.28


author: Kamil Dudka <kdudka@redhat.com> - 8.29-2
changelog:
  - doc: warn about following symlinks recursively in chown/chgrp (CVE-2017-18018)
  - mv -n: do not overwrite the destination


author: Kamil Dudka <kdudka@redhat.com> - 8.27-6
changelog:
  - do not mention a deprecated option in localized man pages
  - drop workaround no longer needed for 10 years old rpm-build bug (#246729)
  - drop unnecessary uses of %defattr


author: Kamil Dudka <kdudka@redhat.com> - 8.25-14
changelog:
  - run autoreconf in %prep
  - drop post-install fix for Japanese locales that no longer applies
  - fix 'sort -h -k' in locales that use blank as thousands separator (#1355780)


author: Kamil Dudka <kdudka@redhat.com> - 8.25-12
changelog:
  - install -Z now sets default SELinux context for created directories (#1339135)
  - drop the %pre scriptlet, which is no longer needed (#1354078)
  - clarify recognition of "^COLOR.*none" in /etc/DIR_COLORS (#1349579)


author: Jakub Martisko <jamartis@redhat.com> - 8.25-11
changelog:
  - switch to UTF8 locale when (un)expand input contains BOM header
    (#1158494)
  - fixed regression where (un)expand would end with "long input line"
    error when BOM header is present


author: Kamil Dudka <kdudka@redhat.com> - 8.25-9
changelog:
  - add BR for glibc-langpack-en to prevent the expand/mb test from failing
  - do not use /bin/mv in %post to avoid a circular dependency (#1348043)


author: Kamil Dudka <kdudka@redhat.com> - 8.25-7
changelog:
  - handle info doc in RPM scriptlets of coreutils-common, which provides it
  - make sure that the license file is installed, even if coreutils-common is not


author: Ondrej Vasik <ovasik@redhat.com> - 8.23-4
changelog:
  - fix the sorting in multibyte locales (NUL-terminate sort keys)
    - patch by Andreas Schwab (#1146185)


author: Ondrej Vasik <ovasik@redhat.com> - 8.23-1
changelog:
  - new upstream release 8.23
  - synchronize the old differences in ls SELinux options
    with upstream
  - skip df/skip-duplicates.sh test for now (passing locally, failing in koji)


author: Ondrej Vasik <ovasik@redhat.com> 8.22-13
changelog:
  - drop the util-linux requirements (smaller docker images),
    drop ancient obsoletes of -libs subpackage


author: Ondrej Vasik <ovasik@redhat.com> 8.22-10
changelog:
  - unset the unnecessary envvars after colorls scripts(#1051703)
  - improve the limitation (check for both utf8 and utf-8)


author: Ondrej Oprala <ooprala@redhat.com> 8.22-8
changelog:
  - Don't use cut mb path if not necessary (#1021403, #499220)
  - several i18n patch improvements merged from OpenSUSE (fixed
    compilation warnings, simplify mb handling in uniq)


author: Ondrej Vasik <ovasik@redhat.com> 8.22-6
changelog:
  - do not modify SELinux contexts of existing parent
    directories when copying files (fix by P.Brady, #1045122)


author: Ondrej Oprala <ooprala@redhat.com> 8.22-5
changelog:
  - reverted an old change and constricted it's condition
  - turned off two multibyte tests (wrong strcoll return value)


author: Ondrej Vasik <ovasik@redhat.com> 8.22-3
changelog:
  - reset buffer before copying to prevent some rare cases of
    invalid output in join and uniq(#1036289)


author: Ondrej Vasik <ovasik@redhat.com> 8.21-20
changelog:
  - fix possible colorls.csh script errors for tcsh with
    noclobber set and entered include file (#1027279)


author: Ondrej Vasik <ovasik@redhat.com> 8.21-18
changelog:
  - pr -e, with a mix of backspaces and TABs, could corrupt the heap
    in multibyte locales (analyzed by J.Koncicky)


author: Ondrej Vasik <ovasik@redhat.com> 8.20-1
changelog:
  - new upstream release 8.20
  - Temporarily require util-linux >= 2.22.1-3 (to prevent missing
    su/runuser on system)


author: Ondrej Vasik <ovasik@redhat.com> - 8.13-1
changelog:
  - new upstream release 8.13
  - temporarily disable recently added multibyte checks in
    misc/cut test
  - fix the SUSE fix for cut output-delimiter
  - drop coreutils-libs subpackage, no longer needed


author: Ondrej Vasik <ovasik@redhat.com> - 8.12-7
changelog:
  - incorporate some i18n patch fixes from OpenSUSE:
    - fix cut output-delimiter option
    - prevent infinite loop in sort when ignoring chars
    - prevent using unitialized variable in cut


author: Ondrej Vasik <ovasik@redhat.com> - 8.12-4
changelog:
  - deprecate non-upstream cp -Z/--context (install should be
    used instead of it), make it working if destination exists
    (#715557)


author: Ondrej Vasik <ovasik@redhat.com> - 8.6-1
changelog:
  - new upstream release 8.6
  - remove applied patches, temporarily disable sort
    debug-keys test for multibyte locales (failing
    because of i18n patch)


author: Ondrej Vasik <ovasik@redhat.com> - 8.5-8
changelog:
  - change assertion failure for invalid multibyte input
    in sort to less confusing error message(#591352)


author: Dan Horák <dan[at]danny.cz> - 8.5-3
changelog:
  - rebuilt with the updated configuration patch
  - drop the old -O1 exception for s390(x)
  - updated the getgrouplist patch (Kamil Dudka)


author: Ondrej Vasik <ovasik@redhat.com> - 8.5-2
changelog:
  - doublequote LS_COLORS in colorls.*sh scripts to speedup
    shell start(#586029)
  - add patch for mkstemp on sparc64(Dennis Gilmore)
  - update /etc/DIR_COLORS* files


author: Ondrej Vasik <ovasik@redhat.com> - 8.2-3
changelog:
  - use grep instead of deprecated egrep in colorls.sh script
    (#548174)
  - remove unnecessary versioned requires/conflicts
  - remove non-upstream hack for uname -p


author: Ondrej Vasik <ovasik@redhat.com> - 8.2-1
changelog:
  - new upstream release 8.2
  - removed applied patches, temporarily do not run dup_cloexec()
    dependent gnulib tests failing in koji


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-1
changelog:
  - new upstream release 8.1
  - fix build under koji (no test failures with underlying
    RHEL-5 XEN kernel due to unsearchable path and lack of
    futimens functionality)


author: Ondrej Vasik <ovasik@redhat.com> - 7.6-6
changelog:
  - ls -LR exits with status 2, not 0, when it encounters
    a cycle(#525402)
  - ls: print "?", not "0" as inode of dereferenced dangling
    symlink(#525400)
  - call the install-info on .gz info files


author: Ondrej Vasik <ovasik@redhat.com> - 7.5-4
changelog:
  - fixed regression where df -l <device> as regular user
    cause "Permission denied" (#520630, introduced by fix for
    rhbz #497830)


author: Ondrej Vasik <ovasik@redhat.com> - 7.5-2
changelog:
  - Better fix than workaround the koji insufficient utimensat
    support issue to prevent failures in other packages


author: Ondrej Vasik <ovasik@redhat.com> - 7.5-1
changelog:
  - New upstream release 7.5, remove already applied patches,
    defuzz few others, xz in default set(by dependencies),
    so no explicit br required
  - skip two new tests on system with insufficient utimensat
    support(e.g. koji)
  - libstdbuf.so in separate coreutils-libs subpackage
  - update /etc/DIRCOLORS*


author: Ondrej Vasik <ovasik@redhat.com> - 7.4-6
changelog:
  - do process install-info only with info files present(#515970)
  - BuildRequires for xz, use xz tarball


author: Kamil Dudka <kdudka@redhat.com> - 7.4-5
changelog:
  - ls -1U with two or more arguments (or with -R or -s) works properly again
  - install runs faster again with SELinux enabled (#479502)


author: Ondrej Vasik <ovasik@redhat.com> 7.2-1
changelog:
  - New upstream bugfix release 7.2
  - removed applied patches
  - temporarily disable strverscmp failing gnulib test


author: Ondrej Vasik <ovasik@redhat.com> 7.1-7
changelog:
  - do not ship /etc/DIR_COLORS.xterm - as many terminals
    use TERM xterm and black background as default - making
    ls color output unreadable
  - shipping /etc/DIR_COLORS.lightbgcolor instead of it for
    light(white/gray) backgrounds
  - try to preserve xattrs in cp -a when possible


author: Ondrej Vasik <ovasik@redhat.com> 7.1-2
changelog:
  - workaround libcap issue with broken headers (#483548)
  - fix gnulib testsuite failure (4x77 (skip) is not
    77(skip) ;) )


author: Ondrej Vasik <ovasik@redhat.com> - 7.1-1
changelog:
  - New upstream release 7.1 (temporarily using tar.gz tarball
    as there are no xz utils in Fedora), removed applied
    patches, amended patches and LS_COLORS files


author: Ondrej Vasik <ovasik@redhat.com> - 7.0-4
changelog:
  - fixed syntax error w/ "expr" command using negative
    string/integer as first (i.e expr -125) - due to
    complexity of changes used diff against upstream git-head
    (#474434)
  - enable total-awk test again (and skip it when df not working)


author: Ondrej Vasik <ovasik@redhat.com> - 7.0-2
changelog:
  - added requirements for util-linux-ng >= 2.14
    because of file conflict in update from F-8/F-9(#472445)
  - some sed cleanup, df totaltests patch changes (not working
    correctly yet :( )


author: Ondrej Vasik <ovasik@redhat.com> - 7.0-1
changelog:
  - new upstream release
  - modification/removal of related patches
  - use automake 1.10.1 instead of 1.10a
  - temporarily skip df --total tests (failures),
    timeout-paramaters (failure on ppc64)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-16
changelog:
  - make possible to disable capability in ls due to
    performance impact when not cached(#467508)
  - do not patch generated manpages - generate them at build
    time
  - do not mistakenly display -g and -G runuser option in su
    --help output


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-15
changelog:
  - fix several date issues(e.g. countable dayshifts, ignoring
    some cases of relative offset, locales conversions...)
  - clarify ls exit statuses documentation (#446294)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-14
changelog:
  - cp -Z now correctly separated in man page (#466646)
  - cp -Z works again (#466653)
  - make preservation of SELinux CTX non-mandatory for
    preserve=all cp option


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-13
changelog:
  - remove unimplemented (never accepted by upstream) option
    for chcon changes only. Removed from help and man.
  - remove ugly lzma hack as lzma is now supported by setup
    macro


author: Jarod Wilson <jarod@redhat.com> - 6.12-12
changelog:
  - fix up potential test failures when building in certain
    slightly quirky environments (part of bz#442352)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-10
changelog:
  - seq should no longer fail to display final number of some
    float usages of seq with utf8 locales(#463556)


author: Kamil Dudka <kdudka@redhat.com> - 6.12-7
changelog:
  - dd: iflag=fullblock now read full blocks if possible
    (#431997, #449263)
  - ls: --color now highlights files with capabilities (#449985)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-5
changelog:
  - fix authors for basename and echo
  - fix who info pages, print last runlevel only for printable
    chars


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-3
changelog:
  - workaround for koji failures(#449910, #442352) now 
    preserves timestamps correctly - fallback to supported
    functions, added test case
  - runuser binary is no longer doubled in /usr/bin/runuser


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-2
changelog:
  - workaround for strange koji failures(#449910,#442352)
  - fixed ls -ZC segfault(#449866, introduced by 6.10-1 
    SELinux patch reworking)


author: Ondrej Vasik <ovasik@redhat.com> - 6.11-3
changelog:
  - added arch utility (from util-linux-ng)
  - do not show executable file types without executable bit
    in colored ls as executable


author: Ondrej Vasik <ovasik@redhat.com> - 6.11-2
changelog:
  - Do not show misleading scontext in id command when user
    is specified (#443485)
  - Avoid possible test failures on non-english locales


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-18
changelog:
  - fix colorls.sh syntax with Zsh (#440652)
  - mention that cp -a includes -c option + mention cp -c 
    option in manpages (#440056)
  - fix typo in runuser manpages (#439410)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-17
changelog:
  - better workaround of glibc getoptc change(factor test)
  - don't segfault mknod, mkfifo with invalid-selinux-context


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-16
changelog:
  - keep LS_COLORS when USER_LS_COLORS defined
  - someupstream fixes:
  - mkdir -Z invalid-selinux-context dir no longer segfaults
  - ptx with odd number of backslashes no longer leads to buffer
    overflow
  - paste -d'\' file" no longer ovveruns memory


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-15
changelog:
  - covered correct handling for some test conditions failures
    e.g. root build+selinux active and not running mcstrans(d)
    or selinux enforcing (#436717)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-13
changelog:
  - disable echo option separator behavior(added by #431005,
    request for removal #437653 + upstream)
  - temporarily disabled longoptions change until full 
    clarification upstreamery (#431005)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-8
changelog:
  - use default security context in install - broken by 
    coreutils-6.10 update(#319231)
  - some sh/csh scripts optimalizations(by ville.skytta@iki.fi,
    - #433189, #433190)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-5
changelog:
  - enabled 256-color support in colorls shell scripts(#429121)
  - fixed syntax error in csh script(#431315)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-3
changelog:
  - fix unability of echo to display certain strings(added --
    separator, #431005)
  - do not require only one long_opt for certain commands 
    e.g. sleep, yes - but use first usable (#431005)
  - do not override userspecified LS_COLORS variable, but
    use it for colored ls(#430827)
  - discard errors from dircolors to /dev/null + some tuning 
    of lscolor sh/csh scripts(#430823)
  - do not consider files with SELinux security context as
    files having ACL in ls long format(#430779)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-1
changelog:
  - New upstream release(changed %prep because of lack of lzma
    support in %setup macro)
  - License GPLv3+
  - removed patches cp-i-u,du-ls-upstream,statsecuritycontext,
    futimens,getdateYYYYMMDD,ls-x
  - modified patches to be compilable after upstream changes
  - selinux patch reworked to have backward compatibility with
    F8(cp,ls and stat behaviour differ from upstream in SELinux
    options)
  - su-l/runuser-l pam file usage a bit documented(#368721)
  - more TERMs for DIR_COLORS, added colors for audio files,
    more image/compress file types(taken from upstream 
    dircolors.hin)
  - new file DIR_COLORS.256color which takes advantage from 
    256color term types-not really used yet(#429121)


author: Ondrej Vasik <ovasik@redhat.com> - 6.9-17
changelog:
  - added several missing colored TERMs(including rxvt-unicode,
    screen-256color and xterm-256color) to DIR_COLORS and
    DIR_COLORS.xterm(#239266)


author: Ondrej Vasik <ovasik@redhat.com> - 6.9-12
changelog:
  - added some upstream supported dircolors TERMs(#239266)
  - fixed du output for unaccesible dirs(#250089)
  - a bit of upstream tunning for symlinks


author: Ondrej Vasik <ovasik@redhat.com> - 6.9-10
changelog:
  - modified coreutils-i18n.patch because of sort -R in
    a non C locales(fix by Andreas Schwab) (#249315)


author: Tim Waugh <twaugh@redhat.com> 6.9-3
changelog:
  - Fixed 'ls -x' output (bug #240298).
  - Disambiguate futimens() from the glibc implementation (bug #242321).


author: Tim Waugh <twaugh@redhat.com> 6.7-9
changelog:
  - Use sed instead of perl for text replacement (bug #225655).
  - Use install-info scriptlets from the guidelines (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-8
changelog:
  - Don't mark profile scripts as config files (bug #225655).
  - Avoid extra directory separators (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-7
changelog:
  - Better Obsoletes/Provides versioning (bug #225655).
  - Use better defattr (bug #225655).
  - Be info file compression tolerant (bug #225655).
  - Moved changelog compression to %install (bug #225655).
  - Prevent upstream changes being masked (bug #225655).
  - Added a comment (bug #225655).
  - Use install -p for non-compiled files (bug #225655).
  - Use sysconfdir macro for /etc (bug #225655).
  - Use Requires(pre) etc for install-info (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-5
changelog:
  - Removed unnecessary stuff in pre scriptlet (bug #225655).
  - Prefix sources with 'coreutils-' (bug #225655).
  - Avoid %makeinstall (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-4
changelog:
  - Ship COPYING file (bug #225655).
  - Use datadir and infodir macros in %pre scriptlet (bug #225655).
  - Use spaces not tabs (bug #225655).
  - Fixed build root.
  - Change prereq to requires (bug #225655).
  - Explicitly version some obsoletes tags (bug #225655).
  - Removed obsolete pl translation fix.


author: Tim Waugh <twaugh@redhat.com> 6.7-1
changelog:
  - 6.7.  No longer need sort-compatibility, rename, newhashes, timestyle,
    acl, df-cifs, afs or autoconf patches.


author: Tim Waugh <twaugh@redhat.com> 5.97-15
changelog:
  - Fixed stat's 'C' format specifier (bug #216676).
  - Misleading 'id -Z root' error message (bug #211089).


author: Tim Waugh <twaugh@redhat.com> 5.97-10
changelog:
  - Ignore 'cifs' filesystems for 'df -l' (bug #183703).
  - Include -g/-G in runuser man page (part of bug #199344).
  - Corrected runuser man page (bug #200620).


author: Tim Waugh <twaugh@redhat.com> 5.97-6
changelog:
  - Added runuser '-g' and '-G' options (bug #199344).
  - Added su '--session-command' option (bug #199066).


author: David Howells <dhowells@redhat.com> 5.97-4
changelog:
  - split the PAM scripts for "su -l"/"runuser -l" from that of normal "su" and
    "runuser" (#198639)
  - add keyinit instructions to PAM scripts


author: Tim Waugh <twaugh@redhat.com> 5.96-4
changelog:
  - Include new hashes (bug #196369).  Patch from upstream.
  - Build at -O1 on s390 for the moment (bug #196369).


author: Dan Walsh <dwalsh@redhat.com> 5.93-6
changelog:
  - Remove pam_selinux.so from su.pamd, not needed for targeted and Strict/MLS 
    will have to newrole before using.


author: Tim Waugh <twaugh@redhat.com> 5.93-4
changelog:
  - Rebuild to pick up new glibc *at functions.
  - Apply runuser PAM patch from bug #173807.  Ship runuser PAM file.


author: Tim Waugh <twaugh@redhat.com> 5.93-2
changelog:
  - Call setsid() in su under some circumstances (bug #173008).
  - Prevent runuser operating when setuid (bug #173113).


author: Tim Waugh <twaugh@redhat.com> 5.92-0.1
changelog:
  - 5.92.
  - No longer need afs, dircolors, utmp, gcc4, brokentest, dateseconds,
    chown, rmaccess, copy, stale-utmp, no-sign-extend, fchown patches.
  - Updated acl, dateman, pam, langinfo, i18n, getgrouplist, selinux patches.
  - Dropped printf-ll, allow_old_options, jday, zh_CN patches.
  - NOTE: i18n patch not ported for sort(1) yet.


author: Dan Walsh <dwalsh@redhat.com> 5.2.1-53
changelog:
  - Allow id to run even when SELinux security context can not be run
  - Change chcon to use raw functions.


author: Tim Waugh <twaugh@redhat.com> 5.2.1-21
changelog:
  - Apply upstream patch to fix 'cp -a' onto multiply-linked files (bug #128874).
  - SELinux patch fix: don't error out if lgetfilecon() returns ENODATA.


author: Tim Waugh <twaugh@redhat.com> 5.2.1-19
changelog:
  - Added 'gnome' TERM to DIR_COLORS (bug #129112).
  - Worked around a bash bug #129128.
  - Fixed an i18n patch bug in cut (bug #129114).


author: Tim Waugh <twaugh@redhat.com> 5.2.1-9
changelog:
  - Mention pam in the info for su (bug #122592).
  - Remove wheel group rant again (bug #122886).
  - Change default behaviour for chgrp/chown (bug #123263).  Patch from
    upstream.


author: Tim Waugh <twaugh@redhat.com> 5.2.0-6
changelog:
  - Apply Paul Eggert's chown patch (bug #116536).
  - Merged chdir patch into pam patch where it belongs.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Stop 'sort -g' leaking memory (i18n patch bug #115620).
  - Don't ship kill, since util-linux already does.
  - Tidy AFS patch.


author: Tim Waugh <twaugh@redhat.com> 5.0-20
changelog:
  - Restrict ACL support to only those programs needing it (bug #106141).
  - Fix default PATH for LSB (bug #102567).


author: Tim Waugh <twaugh@redhat.com> 5.0-13
changelog:
  - Made su use pam again (oops).
  - Fixed another i18n bug causing sort --month-sort to fail.
  - Don't run dubious stty test, since it fails when backgrounded
    (bug #102033).
  - Re-enable make check.


author: Tim Waugh <twaugh@redhat.com> 5.0-12
changelog:
  - Don't run 'make check' for this build (build environment problem).
  - Another uninitialized variable in i18n (from bug #98683).


author: Tim Waugh <twaugh@redhat.com> 5.0-5
changelog:
  - Both kon and kterm support colours (bug #83701).
  - Fix 'ls -l' alignment in zh_CN locale (bug #88346).


author: Tim Waugh <twaugh@redhat.com> 4.5.10-1
changelog:
  - 4.5.10.
  - Update lug, touch_errno, acl, utmp, printf-ll, i18n, test-bugs patches.
  - Drop fr_fix, LC_TIME, preserve, regex patches.


author: Tim Waugh <twaugh@redhat.com> 4.5.3-4
changelog:
  - Fix scriplets.
  - Fix i18n patch so it doesn't break uniq.
  - Fix several other patches to either make the test suite pass or
    not run the relevant tests.
  - Run 'make check'.
  - Fix file list.


author: Tim Waugh <twaugh@redhat.com> 4.5.3-3
changelog:
  - Adapted for Red Hat Linux.
  - Self-host for help2man.
  - Don't ship readlink just yet (maybe later).
  - Merge patches from fileutils and sh-utils (textutils ones are already
    merged it seems).
  - Keep the binaries where the used to be (in particular, id and stat).


author: Thierry Vignaud <tvignaud@mandrakesoft.com> 4.5.2-2mdk
changelog:
  - fix build
  - don't chmode two times su
  - build with large file support
  - fix description
  - various spec cleanups
  - fix chroot installation
  - fix missing /bin/env
  - add old fileutils, sh-utils & textutils ChangeLogs


author: Thierry Vignaud <tvignaud@mandrakesoft.com> 4.5.2-1mdk
changelog:
  - initial release (merge fileutils, sh-utils & textutils)
  - obsoletes/provides: sh-utils/fileutils/textutils
  - fileutils stuff go in 1xx range
  - sh-utils stuff go in 7xx range
  - textutils stuff go in 5xx range
  - drop obsoletes patches 1, 2, 10 (somes files're gone but we didn't ship
    most of them)
  - rediff patches 103, 105, 111, 113, 180, 706
  - temporary disable patch 3 & 4
  - fix fileutils url


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-28
changelog:
  - do not provide explicit url for xml-common subpackage,
    fix trailing spaces
  - add Requires: /bin/basename (#501360)


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-25
changelog:
  - mark xmlcatalog config(noreplace) to prevent overwriting
    of the content, move it to sysconfdir and make symlink for
    it to silence rpmlint


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-24
changelog:
  - mark catalog files as (not md5 size mtime) for verify to
    prevent info about changed files (#453271)


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-23
changelog:
  - Another MergeReview improvements(provided by Patrice Dumas)
  - copy Automake-1.4 files instead of rerunning autotools,
  - better preserving timestamps, better handling of documentation
  - improved XML-common description


author: Ondrej Vasik <ovasik@redhat.com> 0.6.3-22
changelog:
  - Merge Review(226415)
  - changed: License Tag, using RPM macros instead of hardcoded
    dirs, summary ended with dot, added URL, removed CHANGES
    file as obsolete, preserved timestamps and some other cosmetic
    changes
  - no longer shipping old automake tarball, fixed issue with man8_DATA,
    BuildRequire:Automake,Autoconf again(see MergeReview discussion)


author: Tim Waugh <twaugh@redhat.com> 0.6.3-15
changelog:
  - Patch from Ville Skyttä <ville.skytta@iki.fi> (bug #111625):
    - Include /usr/share/xml in xml-common.
    - Own /usr/share/sgml and /usr/share/xml.


author: Tim Waugh <twaugh@redhat.com> 0.6.3-8
changelog:
  - Back to /usr/share/sgml.  Now install docbook-dtds.
  - Use a real install-sh, not the symlink shipped in the tarball.


author: Tim Waugh <twaugh@redhat.com> 0.6.3-6
changelog:
  - Don't create a useless empty catalog.
  - Don't try to put install things outside the build root.
  - Build requires a libxml2 that actually works.


author: Tim Waugh <twaugh@redhat.com> 0.6.3-1
changelog:
  - 0.6.3.  Incorporates oldsyntax and quiet patches.
  - Make /etc/sgml/sgml.conf noreplace.
  - Own /etc/sgml, various other directories (bug #47485, bug #54180).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Change group.
  - Install by hand (man/en/...).  Use %{_mandir}.
  - Use %{_tmppath}.
  - Make install-catalog fail silently if given the old syntax.
  - Add CHANGES file.
  - Change Copyright: to License:.
  - Remove Packager: line.


author: Jan Rybar <jrybar@redhat.com> - 0.115-7
changelog:
  - pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
  - Mitigation of regression caused by fix of CVE-2018-19788
  - Resolves: rhbz#1693781
  - Resolves: rhbz#1693814


author: Jan Rybar <jrybar@redhat.com> - 0.115-2
changelog:
  - Error message about getting authority is too elaborate (forward of #1342855)
  - Bus disconnection report moved to debug mode (forward of #1249627)


author: Miloslav Trmač <mitr@redhat.com> - 0.113-12
changelog:
  - Fix a memory leak in PolkitPermission.
    Patch by Rui Matos <tiagomatos@gmail.com>
    Resolves: #1433915


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.113-8
changelog:
  - Use %license, license needs to be in -libs as it's the only guaranteed installed package
  - Move to mozjs38
  - Other upstream fixes
  - Spec cleanups


author: Miloslav Trmač <mitr@redhat.com> - 0.113-2
changelog:
  - Add a fully versioned dependency from polkit to polkit-libs
    Resolves: #1241759
  - Require polkit-libs, not polkit, in polkit-devel


author: Miloslav Trmač <mitr@redhat.com> - 0.113-1
changelog:
  - Update to polkit-0.113 (CVE-2015-3218, CVE-2015-3255, CVE-2015-3256,
    CVE-2015-4625)
    Resolves: #910262, #1175061, #1177930, #1194391, #1228739, #1233810


author: Rex Dieter <rdieter@fedoraproject.org> - 0.112-9
changelog:
  - polkit doesn't release reference counters of GVariant data (#1180886)
  - fix ldconfig scriptlets (move to -libs subpkg)


author: Colin Walters <walters@redhat.com> - 0.112-8
changelog:
  - Split separate -libs package, so that NetworkManager can just depend on
    that, without dragging in the daemon (as well as libmozjs17).  This
    allows the creation of more minimal systems that want programs like NM,
    but do not need the configurability of the daemon; it would be ok if only
    root is authorized.


author: Miloslav Trmač <mitr@redhat.com> - 0.112-2
changelog:
  - Workaround pam_systemd setting broken XDG_RUNTIME_DIR
    Resolves: #1033774
  - Always use mozjs-17.0 even if js-devel is installed


author: Miloslav Trmač <mitr@redhat.com> - 0.111-1
changelog:
  - Update to polkit-0.111
    Resolves: #917888
  - Use SpiderMonkey from mozjs17 instead of js
  - Ship the signature in the srpm
  - Try to preserve timestamps in (make install)


author: Miloslav Trmač <mitr@redhat.com> - 0.110-4
changelog:
  - Shut up rpmlint about Summary:
  - Build with V=1
  - Use %{_unitdir} instead of hard-coding the path
  - Use the new systemd macros, primarily to run (systemctl daemon-reload)
    Resolves: #857382


author: Miloslav Trmač <mitr@redhat.com> - 0.110-4
changelog:
  - Make the JavaScript engine mandatory.  The polkit-js-engine package has been
    removed, main polkit package Provides:polkit-js-engine for compatibility.
  - Add Requires: polkit-pkla-compat
    Resolves: #908808


author: David Zeuthen <davidz@redhat.com> 0.108-3.el8
changelog:
  - Attempt to open the correct libmozjs185 library, otherwise polkit
    authz rules will not work unless js-devel is installed (fdo #57146)


author: David Zeuthen <davidz@redhat.com> 0.108-1.el8
changelog:
  - Update to upstream release 0.108
  - Drop upstreamed patches
  - This release dynamically loads the JavaScript interpreter and can
    cope with it not being available. In this case, polkit authorization
    rules are not processed and the defaults for an action - as defined
    in its .policy file - are used for authorization decisions.
  - Add new meta-package, polkit-js-engine, that pulls in the required
    JavaScript bits to make polkit authorization rules work. The default
    install - not the minimal install - should include this package


author: David Zeuthen <davidz@redhat.com> 0.106-1.el8
changelog:
  - Update to upstream release 0.106
  - Authorizations are no longer controlled by .pkla files - from now
    on, use the new .rules files described in the polkit(8) man page


author: David Zeuthen <davidz@redhat.com> 0.105-1.el8
changelog:
  - Update to upstream release 0.105
  - Nuke patches that are now upstream
  - Change 'PolicyKit' to 'polkit' in summary and descriptions


author: David Zeuthen <davidz@redhat.com> 0.104-1.el8
changelog:
  - Update to upstream release 0.104
  - Force usage of systemd (instead of ConsoleKit) for session tracking


author: David Zeuthen <davidz@redhat.com> 0.103-1.el8
changelog:
  - Update to upstream release 0.103
  - Drop upstreamed patch
  - Drop Fedora-specific policy, it is now upstream (fdo #41008)


author: David Zeuthen <davidz@redhat.com> 0.102-2.el8
changelog:
  - Add patch to neuter the annoying systemd behavior where stdout/stderr
    is sent to the system logs


author: David Zeuthen <davidz@redhat.com> - 0.101-2
changelog:
  - Nuke desktop_admin_r and desktop_user_r groups - just use the
    wheel group instead (#688363)
  - Update the set of configuration directives that gives users
    in the wheel group extra privileges


author: David Zeuthen <davidz@redhat.com> - 0.97-3
changelog:
  - Add a patch to make pkcheck(1) work the way libvirtd uses it (#623257)
  - Require GLib >= 2.25.12 instead of 2.25.11
  - Ensure polkit-gnome packages earlier than 0.97 are not used with
    these packages


author: David Zeuthen <davidz@redhat.com> - 0.97-1
changelog:
  - Update to 0.97. This release contains a port from EggDBus to the
    GDBus code available in recent GLib releases.


author: David Zeuthen <davidz@redhat.com> - 0.95-0.git20090913.1
changelog:
  - Add bugfix for polkit_unix_process_new_full() (thanks Bastien Nocera)
  - Obsolete old PolicyKit packages


author: David Zeuthen <davidz@redhat.com> - 0.95-0.git20090913
changelog:
  - Update to git snapshot
  - Drop upstreamed patches
  - Turn on GObject introspection
  - Don't delete desktop_admin_r and desktop_user_r groups when
    uninstalling polkit-desktop-policy


author: David Zeuthen <davidz@redhat.com> - 0.94-4
changelog:
  - Add some patches from git master
  - Sort pkaction(1) output
  - Bug 23867 – UnixProcess vs. SystemBusName aliasing


author: David Zeuthen <davidz@redhat.com> - 0.94-3
changelog:
  - Add desktop_admin_r and desktop_user_r groups along with a first cut
    of default authorizations for users in these groups.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.8-2
changelog:
  - Reverted _module_build macro check which fixes systemtap probes on RHEL-8
    Resolves: rhbz#1579386


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.6-2
changelog:
  - Splitted documentation to the doc subpackage
    Resolves: rhbz#1380291
  - Fixed whitespace
  - Dropped obsoleted defattr


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.5.9-3
changelog:
  - Packaged tclAppInit.c into devel subpackage (#702088)
  - Removed rpmlint warning - macro in comment


author: Marcela Maslanova <mmaslano@redhat.com> - 1:8.5.2-3
changelog:
  - tclConfig.sh was fixed again with symlink into libdir/tcl8.5.
  Many packages are looking in /usr/lib, because tcl dir is versioned.


author: Marcela Maslanova <mmaslano@redhat.com> - 1:8.5.2-2
changelog:
  - update to 8.5.2
  - 451750 PostgreSQL need tclConfig.sh in paths
  - 437399 now really own directories


author: Marcela Maslanova <mmaslano@redhat.com> - 1:8.5.1-1
changelog:
  - new version tcl8.5.1
  - fix 433151 problem with regular expression
  - Version 2.5.3 of the http package requires Tcl 8.4 or better ->
  	change make patch, add tm files back to 8.4


author: Marcela Maslanova <mmaslano@redhat.com> - 1:8.5.0-5
changelog:
  - stack checking is ok, error is in application. Removing withouth stack.
  - tcl-8.5.0-hidden.patch isn't ok, fix should be in expect. In the meantime
  	the patch stay here.


author: Wart <wart@kobold.org> - 1:8.5.0-3
changelog:
  - Obsolete the tcl-tcldict package that has been incorporated
    into the main Tcl source code.
  - Disable the the stack checking code; it makes assumptions that are
    not necessarily true on Fedora and causes some apps to fail (BZ #425799)


author: Marcela Maslanova <mmaslano@redhat.com> - 1:8.4.15-6
changelog:
  - CVE-2007-4772 NFA optimization cause hang in loop. Back ported patch
  	from upstream development version.


author: David Cantrell <dcantrell@redhat.com> - 8.4.12-1
changelog:
  - Upgraded to tcl-8.4.12
  - Use ksh rather than bash for the configure script (known bug w/ bash-3.1)
  - Generate HTML docs from source
  - Add in the Tk source for HTML doc generation


author: Jens Petersen <petersen@redhat.com> - 8.4.11-1
changelog:
  - update to latest stable release
    - update tcl-8.4-autoconf.patch
  - buildrequire sed and use it instead of perl for editting tclConfig.sh


author: Jens Petersen <petersen@redhat.com> - 8.4.7-2
changelog:
  - improve tcl8.3.5-tclConfig-package-path-90160.patch to look in libdir in
    addition to datadir for packages, so that tclsh can load binary packages
    in lib64 (135310)


author: Jens Petersen <petersen@redhat.com> - 8.4.7-1
changelog:
  - update to 8.4.7
    - replace tcl-8.4.5-no_rpath.patch by tcl-8.4-no_rpath.patch
    - replace tcl-8.4.5-autoconf.patch by tcl-8.4-autoconf.patch
  - no longer obsolete itcl


author: Jens Petersen <petersen@redhat.com> - 8.4.5-6
changelog:
  - apply tcl-8.4.5-autoconf.patch to build with autoconf 2.5x
    (Robert Scheck, #116773)
  - use %{name} more extensively for script portability
  - run "make test" by default when building (can be disabled with
    "--without check")
  - add a backwards compatible symlink {_prefix}/lib/tk8.4 ->
    {_datadir}/tk8.4 (Michal Jaegermann, part of #90160)
  - use "mkdir -p" instead of "mkdirhier" (Robert Scheck, #116771)
  - include some doc files


author: Jens Petersen <petersen@redhat.com> - 8.4.5-2
changelog:
  - put private header files under generic and unix subdirs
  - include real generic/tclPort.h not just a symlink to tclUnixPort.h
  - add tclMath.h to {_includedir}/tcl-private/generic for building tk
  - remove build remnants from tclConfig.sh


author: Jens Petersen <petersen@redhat.com> - 8.4.5-1
changelog:
  - new package split out from tcltk
  - update to tcl 8.4.5 (#88429)
    - drop tcl-8.3.3-heiierarchy.patch, tcl-8.3.3-dlopen.patch
  	 and tcl8.3.5-koi8-u.enc-88806.patch
  - include private include headers under {_includedir}/tcl-private
  - filtered changelog for tcl
  - buildrequire autoconf213 (#110583) [mvd@mylinux.com.ua]


author: Jens Petersen <petersen@redhat.com> - 8.3.5-90
changelog:
  - split out devel files from tcl and tk into -devel subpackages (#90087)
  - fix tcl package path in tclConfig.sh to point to datadir (#90160)
    [reported by Michal Jaegermann]
  - remove gratuitous whitespace in koi8-u.enc (#88806)
    [reported with fix by Victor Cheburkin]
  - update ucs4 patch to also change regcustom.h, but disable it for now (#89098)


author: Jens Petersen <petersen@redhat.com> - 8.3.5-84
changelog:
  - link all libs with DT_SONAME using tcl.m4 patch (#81297)
  - drop synthetic lib provides
  - remove obsolete patches from srpm
  - update buildrequires
  - use buildroot instead of RPM_BUILD_ROOT
  - install all man pages under mandir, instead of moving some from /usr/man
  - install libtcl and libtk mode 755
  - introduce _genfilelist macro for clean single-sweep find filelist generation
    for each package
  - use perl to remove buildroot prefix from filelists


author: Jens Petersen <petersen@redhat.com> 8.3.5-76
changelog:
  - make it build on x86_64 (details below)
  - don't explicitly update config.{guess,sub} since %configure does it for us
  - added "--without check" rpmbuild option to disable running tests in future
  - build and install tcl and tk with script files under datadir (not libdir)
  - generate filelists from datadir and not from mandir from now on


author: Jens Petersen <petersen@redhat.com>
changelog:
  - update to tcl-8.3.5, tk-8.3.5, tcl-html-8.3.5
  - update url for tcl, tk, tclx, itcl, tcllib
  - build without all makecfg patches for now
    - in particular use upstream versioned library name convention
  - add backward compatible lib symlinks for now
  - add unversioned symlinks for versioned bindir files
  - use make's -C option rather than jumping in and out of source dirs
    during install
  - use INSTALL_ROOT destdir-like make variable instead of makeinstall
    for all subpackages except tix and itcl


author: Jens Petersen <petersen@redhat.com>
changelog:
  - update to tcl-8.3.4, tk-8.3.4 (#75600), tcllib-1.3, itcl-3.2.1,
    tix-8.1.3 (#59098)
  - drop obsolete tcl cruft, tcl refcount, tix perf patches
  - added tcltk html manual
  - drop the crud compat dir symlinks in libdir
  - package now builds without tcl or tk installed (partly #52606)
    - replace all relative paths by absolutes ones, using new tcltktop
    - give absolute paths to tcl and tk when configuring
    - give buildroot bindir path to tcllib make
    - export buildroot libdir in LD_LIBRARY_PATH when installing
  - replace tclvers and tkvers by tcltkvers and use it
  - replace tcl_major and tk_major by tcltk_major and use it
  - don't explicitly provide 64bit libs on ia64 and sparc64


author: Adrian Havill <havill@redhat.com>
changelog:
  * Mon Aug  8 2001 Adrian Havill <havill@redhat.com>
  - re-enable glibc string and math inlines; recent gcc is a-ok.
  - optimize at -O2 instead of -O
  - rename "soname" patches related to makefile/autoconf changes
  - added elf "needed" for tk, tclx, tix, itk


author: Adrian Havill <havill@redhat.com>
changelog:
  - used %makeinstall to brute force fix any remaining unflexible makefile dirs
  - fixed bad ref count release in tcl (bug 49406)
  - revert --enable-threads, linux is (still) not ready (yet) (bug 49251)


author: Adrian Havill <havill@redhat.com>
changelog:
  - refresh all sources to latest stable (TODO: separate expect/expectk)
  - massage out some build stuff to patches (TODO: libtoolize hacked constants)
  - remove patches already rolled into the upstream
  - removed RPATH (bugs 45569, 46085, 46086), added SONAMEs to ELFs
  - changed shared object filenames to something less gross
  - reenable threads which seem to work now
  - made compile-friendly for IA64


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - FHS packaging changes.
  - revert --enable-threads, linux is not ready (yet) (#11789).
  - tcl/tk: update to 8.3.1 (#10779).
  - abstract major tcltk version for soname expansion etc.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to (tcl,tk}-8.2.3, expect-5.31, and itcl-3.1.0, URL's as well.
  - use perl to drill out pre-pended RPM_BUILD_ROOT.
  - configure with --enable-threads (experimental).
  - correct hierarchy spelling (#7082).


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Make changes from bug number 7602
  - Apply patch from bug number 7537
  - Apply fix from bug number 7157
  - Add fixes from bug #7601 to the runtcl patch


author: Otto Hammersmith <otto@redhat.com>
changelog:
  - added patch to remove libieee test in configure.in for tcl and tk.
    Shouldn't be needed anymore for glibc systems, but this isn't the "proper" 
    solution for all systems
  - fixed src urls


author: Robbie Harwood <rharwood@redhat.com> - 1.16-15
changelog:
  - Add SPAKE support
  - Improve protections on internal sensitive buffers
  - Improve internal hex encoding/decoding


author: Robbie Harwood <rharwood@redhat.com> - 1.16-6
changelog:
  - Fix a leak in the previous commit
  - Restore dist macro that was accidentally removed
  - Resolves: #1540939


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-22
changelog:
  * Mon Aug 07 2017 Robbie Harwood <rharwood@redhat.com> - 1.15.1-21
  - Display an error message if ocsp pkinit is requested


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-5
changelog:
  - Automatically add includedir where not present
  - Try removing sleep statement to see if it is still needed
  - Resolves: #1433083


author: Robbie Harwood <rharwood@redhat.com> - 1.14.4-3
changelog:
  - Switch to using autosetup macro.
    - Patches come from git, so it is easiest to just make a git repo


author: Robbie Harwood <rharwood@redhat.com> - 1.14.1-1
changelog:
  - New rawhide, new upstream version
  - Drop CVE patches
  - Rename fix_interposer.patch to acquire_cred_interposer.patch
  - Update acquire_cred_interposer.patch to apply to new source


author: Robbie Harwood <rharwood@redhat.com> - 1.14-21
changelog:
  - Adjust dependency on crypto-polices to be just the file we want
  - Patch courtesy of lslebodn
  - Resolves: #1308984


author: Robbie Harwood <rharwood@redhat.com> - 1.14-19
changelog:
  - Replace _kadmin/_kprop with systemd macros
  - Remove traces of upstart from fedora package per policy
  - Resolves: #1290185


author: Robbie Harwood <rharwood@redhat.com> - 1.14-14
changelog:
  - Remove WITH_NSS macro (always false)
  - Remove WITH_SYSTEMD macro (always true)
  - Remove WITH_LDAP macro (always true)
  - Remove WITH_OPENSSL macro (always true)


author: Robbie Harwood <rharwood@redhat.com> - 1.14-11
changelog:
  - Backport interposer fix (#1284985)
  - Drop workaround pwsize initialization patch (gcc has been fixed)


author: Robbie Harwood <rharwood@redhat.com> - 1.14-9
changelog:
  - Upstream release.  No actual change from beta, just version bump
  - Clean up unused parts of spec file


author: Robbie Harwood <rharwood@redhat.com> - 1.13.2-8
changelog:
  - Remove dependency on systemd-sysv which is no longer needed for fedora > 20
    This also fixes a fail-to-build issue.
  - Miscalaneous spec cleanup fixes


author: Robbie Harwood <rharwood@redhat.com> - 1.13.2-7
changelog:
  - Support config snippets in /etc/krb5.conf.d/ and /usr/share/krb5.conf.d/
    (#1225792, #1146370, #1145808)


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-6
changelog:
  - Use system nss_wrapper and socket_wrapper for testing.
    Patch by Andreas Schneider <asn@redhat.com>


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-5
changelog:
  - Remove Zanata test glue and related workarounds
    - Bug #1234292 ("IPA server cannot be run in container due to incorrect /usr/sbin/_kadmind")
    - Bug #1234326 ("krb5-server introduces new rpm dependency on ksh")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-2
changelog:
  - Add patch to fix Redhat Bug #1227542 ("[SELinux] AVC denials may appear
    when kadmind starts"). The issue was caused by an unneeded |htons()|
    which triggered SELinux AVC denials due to the "random" port usage.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-1
changelog:
  - Add fix for RedHat Bug #1164304 ("Upstream unit tests loads
    the installed shared libraries instead the ones from the build")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-0
changelog:
  - Update to krb5-1.13.2
    - drop patch for krb5-1.13.2-CVE_2015_2694_requires_preauth_bypass_in_PKINIT_enabled_KDC, fixed in krb5-1.13.2
    - drop patch for krb5-1.12.1-CVE_2014_5355_fix_krb5_read_message_handling, fixed in krb5-1.13.2
  - Add script processing for upcoming Zanata l10n support
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-4
changelog:
  - fix for CVE-2015-2694 (#1216133) "requires_preauth bypass
    in PKINIT-enabled KDC".
    In MIT krb5 1.12 and later, when the KDC is configured with
    PKINIT support, an unauthenticated remote attacker can
    bypass the requires_preauth flag on a client principal and
    obtain a ciphertext encrypted in the principal's long-term
    key.  This ciphertext could be used to conduct an off-line
    dictionary attack against the user's password.


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-3
changelog:
  - Add temporay workaround for RH bug #1204646 ("krb5-config
    returns wrong -specs path") which modifies krb5-config post
    build so that development of krb5 dependicies gets unstuck.
    This MUST be removed before rawhide becomes F23 ...


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-2
changelog:
  - fix for CVE-2014-5355 (#1193939) "krb5: unauthenticated
    denial of service in recvauth_common() and others"


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-1
changelog:
  - Update to krb5-1.13.1
    - drop patch for CVE_2014_5353_fix_LDAP_misused_policy_name_crash, fixed in krb5-1.13.1
    - drop patch for kinit -C loops (MIT/krb5 bug #243), fixed in krb5-1.13.1
    - drop patch for CVEs { 2014-9421, 2014-9422, 2014-9423, 2014-5352 }, fixed in krb5-1.13.1
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.13-8
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9423 (#1179863) "libgssrpc server applications
    leak uninitialized bytes (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.13-7
changelog:
  - Remove "python-sphinx-latex" and "tar" from the build requirements
    to fix build failures on F22 machines.
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.13-5
changelog:
  - fix for kinit -C loops (#1184629, MIT/krb5 issue 243, "Do not
    loop on principal unknown errors").
  - Added "python-sphinx-latex" to the build requirements
    to fix build failures on F22 machines.


author: Roland Mainz <rmainz@redhat.com> - 1.13-2
changelog:
  - Bump 1%{?dist} to 2%{?dist} to workaround RPM sort issue
    which would lead yum updates to treat the last alpha as newer
    than the final version.


author: Roland Mainz <rmainz@redhat.com> - 1.13-1
changelog:
  - Update from krb5-1.13-alpha1 to final krb5-1.13
  - Removed patch for CVE-2014-5351 (#1145425) "krb5: current
    keys returned when randomizing the keys for a service principal" -
    now part of upstream sources
  - Use patch for glibc |eventfd()| prototype mismatch (#1147887) only
    for Fedora > 20


author: Roland Mainz <rmainz@redhat.com> - 1.13-0.alpha1.3
changelog:
  - fix for CVE-2014-5351 (#1145425) "krb5: current keys returned when
    randomizing the keys for a service principal"


author: Nalin Dahyabhai <nalin@redhat.com> - 1.13-0.alpha1.2
changelog:
  - kpropd hasn't bothered with -S since 1.11; stop trying to use that flag
    in the systemd unit file


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-1
changelog:
  - update to 1.12.2
    - drop patch for RT#7820, fixed in 1.12.2
    - drop patch for #231147, fixed as RT#3277 in 1.12.2
    - drop patch for RT#7818, fixed in 1.12.2
    - drop patch for RT#7836, fixed in 1.12.2
    - drop patch for RT#7858, fixed in 1.12.2
    - drop patch for RT#7924, fixed in 1.12.2
    - drop patch for RT#7926, fixed in 1.12.2
    - drop patches for CVE-2014-4341/CVE-2014-4342, included in 1.12.2
    - drop patch for CVE-2014-4343, included in 1.12.2
    - drop patch for CVE-2014-4344, included in 1.12.2
    - drop patch for CVE-2014-4345, included in 1.12.2
  - replace older proposed changes for ksu with backports of the changes
    after review and merging upstream (#1015559, #1026099, #1118347)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-12
changelog:
  - gssapi: pull in proposed fix for a double free in initiators (David
    Woodhouse, CVE-2014-4343, #1117963)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-10
changelog:
  - pull in fix for denial of service by injection of malformed GSSAPI tokens
    (CVE-2014-4341, CVE-2014-4342, #1116181)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-9
changelog:
  - pull in changes from upstream which add processing of the contents of
    /etc/gss/mech.d/*.conf when loading GSS modules (#1102839)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-5
changelog:
  - spnego: pull in patch from master to restore preserving the OID of the
    mechanism the initiator requested when we have multiple OIDs for the same
    mechanism, so that we reply using the same mechanism OID and the initiator
    doesn't get confused (#1066000, RT#7858)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-4
changelog:
  - pull in patch from master to move the default directory which the KDC uses
    when computing the socket path for a local OTP daemon from the database
    directory (/var/kerberos/krb5kdc) to the newly-added run directory
    (/run/krb5kdc), in line with what we're expecting in 1.13 (RT#7859, more
    of #1040056 as #1063905)
  - add a tmpfiles.d configuration file to have /run/krb5kdc created at
    boot-time
  - own /var/run/krb5kdc


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add currently-proposed changes to teach ksu about credential cache
    collections and the default_ccache_name setting (#1015559,#1026099)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-2
changelog:
  - pull in multiple changes to allow replay caches to be added to a GSS
    credential store as "rcache"-type credentials (RT#7818/#7819/#7836,


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-1
changelog:
  - update to 1.12.1
    - drop patch for RT#7794, included now
    - drop patch for RT#7797, included now
    - drop patch for RT#7803, included now
    - drop patch for RT#7805, included now
    - drop patch for RT#7807, included now
    - drop patch for RT#7045, included now
    - drop patches for RT#7813 and RT#7815, included now
    - add patch to always retrieve the KDC time offsets from keyring caches,
      so that we don't mistakenly interpret creds as expired before their
      time when our clock is ahead of the KDC's (RT#7820, #1030607)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-11
changelog:
  - update the PIC patch for iaesx86.s to not use ELF relocations to the version
    that landed upstream (RT#7815, #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-10
changelog:
  - amend the PIC patch for iaesx86.s to also save/restore ebx in the
    functions where we modify it, because the ELF spec says we need to


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-9
changelog:
  - grab a more-commented version of the most recent patch from upstream
    master
  - make a guess at making the 32-bit AES-NI implementation sufficiently
    position-independent to not require execmod permissions for libk5crypto
    (more of #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-8
changelog:
  - add patch from Dhiru Kholia for the AES-NI implementations to allow
    libk5crypto to be properly marked as not needing an executable stack
    on arches where they're used (#1045699, and so many others)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-5
changelog:
  - pull in fix from master to make reporting of errors encountered by
    the SPNEGO mechanism work better (RT#7045, part of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update a test wrapper to properly handle things that the new libkrad does,
    and add python-pyrad as a build requirement so that we can run its tests


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-2
changelog:
  - pull in fix from master to return a NULL pointer rather than allocating
    zero bytes of memory if we read a zero-length input token (RT#7794, part of
    - pull in fix from master to ignore an empty token from an acceptor if
    we've already finished authenticating (RT#7797, part of #1043962)
  - pull in fix from master to avoid a memory leak when a mechanism's
    init_sec_context function fails (RT#7803, part of #1043962)
  - pull in fix from master to avoid a memory leak in a couple of error
    cases which could occur while obtaining acceptor credentials (RT#7805, part
    of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-beta2.0
changelog:
  - update to beta2
    - drop obsolete backports for storing KDC time offsets and expiration times
      in keyring credential caches


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-2
changelog:
  - pull in fix to store KDC time offsets in keyring credential caches (RT#7768,
    - pull in fix to set expiration times on credentials stored in keyring
    credential caches (RT#7769, #1031724)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-1
changelog:
  - update to 1.11.4
    - drop patch for RT#7650, obsoleted
    - drop patch for RT#7706, obsoleted as RT#7723
    - drop patch for CVE-2013-1418/CVE-2013-6800, included in 1.11.4


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-30
changelog:
  - check more thoroughly for errors when resolving KEYRING ccache names of type
    "persistent", which should only have a numeric UID as the next part of the
    name (#1029110)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-29
changelog:
  - incorporate upstream patch for remote crash of KDCs which serve multiple
    realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800,


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-28
changelog:
  - drop patch to add additional access() checks to ksu - they add to breakage
    when non-FILE: caches are in use (#1026099), shouldn't be resulting in any
    benefit, and clash with proposed changes to fix its cache handling


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-27
changelog:
  - add some minimal description to the top of the wrapper scripts we use
    when starting krb5kdc and kadmind to describe why they exist (tooling)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-alpha1.0
changelog:
  - initial update to alpha1
    - drop backport of persistent keyring support
    - drop backport for RT#7689
    - drop obsolete patch for fixing a use-before-init in a test program
    - drop obsolete patch teaching config.guess/config.sub about aarch64-linux
    - drop backport for RT#7598
    - drop backport for RT#7172
    - drop backport for RT#7642
    - drop backport for RT#7643
    - drop patches from master to not test GSSRPC-over-UDP and to not
      depend on the portmapper, which are areas where our build systems
      often give us trouble, too; obsolete
    - drop backports for RT#7682
    - drop backport for RT#7709
    - drop backport for RT#7590 and partial backport for RT#7680
    - drop OTP backport
    - drop backports for RT#7656 and RT#7657
  - BuildRequires: libedit-devel to prefer it
  - BuildRequires: pkgconfig, since configure uses it


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-25
changelog:
  - pull up fix for importing previously-exported credential caches in the
    gssapi library (RT# 7706, #1019420)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-24
changelog:
  - backport the callback to use the libkrb5 prompter when we can't load PEM
    files for PKINIT (RT#7590, includes part of #965721/#1016690)
  - extract the rest of the fix #965721/#1016690 from the changes for RT#7680


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-21
changelog:
  - switch to the version of persistent-keyring that was just merged to
    master (RT#7711), along with related changes to kinit (RT#7689)
  - go back to setting default_ccache_name to a KEYRING type


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-20
changelog:
  - pull up fix for not calling a kdb plugin's check-transited-path
    method before calling the library's default version, which only knows
    how to read what's in the configuration file (RT#7709, #1013664)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-19
changelog:
  - configure --without-krb5-config so that we don't pull in the old default
    ccache name when we want to stop setting a default ccache name at configure-
    time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-16
changelog:
  - back out setting default_ccache_name to the new default for now, resetting
    it to the old default while the kernel/keyutils bits get sorted (sgallagh)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-15
changelog:
  - add explicit build-time dependency on a version of keyutils that's new
    enough to include keyctl_get_persistent() (more of #991148)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - only apply the patch to autocreate /run/user/0 when we're hard-wiring the
    default ccache location to be under it; otherwise it's unnecessary


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-11
changelog:
  - don't let comments intended for one scriptlet become part of the "script"
    that gets passed to ldconfig as part of another one (Mattias Ellert, #1005675)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-10
changelog:
  - incorporate Simo's backport of his persistent-keyring changes (#991148)
  - restore build-time default DEFCCNAME on Fedora 21 and later and EL, and
    instead set default_ccache_name in the default krb5.conf's [libdefaults]
    section (#991148)
  - on releases where we expect krb5.conf to be configured with a
    default_ccache_name, add it whenever we upgrade from an older version of
    the package that wouldn't have included it in its default configuration
    file (#991148)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-9
changelog:
  - take another stab at accounting for UnversionedDocdirs for the -libs
    subpackage (spotted by ssorce)
  - switch to just the snapshot of nss_wrapper we were using, since we
    no longer need to carry anything that isn't in the cwrap.org repository
    (ssorce)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-8
changelog:
  - drop a patch we weren't not applying (build tooling)
  - wrap kadmind and kpropd in scripts which check for the presence/absence
    of files which dictate particular exit codes before exec'ing the actual
    binaries, instead of trying to use ConditionPathExists in the unit files
    to accomplish that, so that we exit with failure properly when what we
    expect isn't actually in effect on the system (#800343)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-6
changelog:
  - tweak configuration files used during tests to try to reduce the number
    of conflicts encountered when builds for multiple arches land on the same
    builder


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-4
changelog:
  - use (a bundled, for now, copy of) nss_wrapper to let us run some of the
    self-tests at build-time in more places than we could previously (#978756)
  - cover inconsistencies in whether or not there's a local caching nameserver
    that's willing to answer when the build environment doesn't have a
    resolver configuration, so that nss_wrapper's faking of the local
    hostname can be complete


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-3
changelog:
  - specify dependencies on the same arch of krb5-libs by using the %{?_isa}
    suffix, to avoid dragging 32-bit libraries onto 64-bit systems (#980155)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-2
changelog:
  - special-case /run/user/0, attempting to create it when resolving a
    directory cache below it fails due to ENOENT and we find that it doesn't
    already exist, either, before attempting to create the directory cache
    (maybe helping, maybe just making things more confusing for #961235)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-1
changelog:
  - update to 1.11.3
    - drop patch for RT#7605, fixed in this release
    - drop patch for CVE-2002-2443, fixed in this release
    - drop patch for RT#7369, fixed in this release
  - pull upstream fix for breaking t_skew.py by adding the patch for #961221


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-9
changelog:
  - don't forget to set the SELinux label when creating the directory for
    a DIR: ccache
  - pull in proposed fix for attempts to get initial creds, which end up
    following referrals, incorrectly trying to always use master KDCs if
    they talked to a master at any point (should fix RT#7650)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-8
changelog:
  - pull in patches from master to not test GSSRPC-over-UDP and to not
    depend on the portmapper, which are areas where our build systems
    often give us trouble, too


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-7
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)
  - backport fix for not being able to pass an empty password to the
    get-init-creds APIs and have them actually use it (RT#7642, #960001)
  - add backported proposed fix to use the unauthenticated server time
    as the basis for computing the requested credential expiration times,
    rather than the client's idea of the current time, which could be
    significantly incorrect (#961221)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-6
changelog:
  - pull in upstream fix to start treating a KRB5CCNAME value that begins
    with DIR:: the same as it would a DIR: value with just one ccache file
    in it (RT#7172, #965574)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-3
changelog:
  - pull the changing of the compiled-in default ccache location to
    DIR:/run/user/%{uid}/krb5cc back into F19, in line with SSSD and
    the most recent pam_krb5 build


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-1
changelog:
  - update to 1.11.2
    - drop pulled in patch for RT#7586, included in this release
    - drop pulled in patch for RT#7592, included in this release
  - pull in fix for keeping track of the message type when parsing FAST requests
    in the KDC (RT#7605, #951843) (also #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-9
changelog:
  - move the compiled-in default ccache location from the previous default of
    FILE:/tmp/krb5cc_%{uid} to DIR:/run/user/%{uid}/krb5cc (part of #949588)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-7
changelog:
  - when testing the RPC library, treat denials from the local portmapper the
    same as a portmapper-not-running situation, to allow other library tests
    to be run while building the package


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-6
changelog:
  - create and own /var/kerberos/krb5/user instead of /var/kerberos/kdc/user,
    since that's what the libraries actually look for
  - add buildrequires on nss-myhostname, in an attempt to get more of the tests
    to run properly during builds
  - pull in Simo's patch to recognize "client_keytab" as a key type which can
    be passed in to gss_acquire_cred_from() (RT#7598)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-5
changelog:
  - pull up Simo's patch to mark the correct mechanism on imported GSSAPI
    contexts (RT#7592)
  - go back to using reconf to run autoconf and autoheader (part of #925640)
  - add temporary patch to use newer config.guess/config.sub (more of #925640)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a version comparison to expect newer texlive build requirements when
    %{_rhel} > 6 rather than when it's > 7


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-2
changelog:
  - prebuild PDF docs to reduce multilib differences (internal tooling, #884065)
  - drop the kerberos-iv portreserve file, and drop the rest on systemd systems
  - escape uses of macros in comments (more of #884065)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-1
changelog:
  - update to 1.11.1
    - drop patch for noticing negative timeouts being passed to the poll()
      wrapper in the client transmit functions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11-0.alpha1.1
changelog:
  - handle releases where texlive packaging wasn't yet as complicated as it
    is in Fedora 18
  - fix an uninitialized-variable error building one of the test programs


author: Nalin Dahyabhai <nalin@redhat.com> 1.11-0.alpha1.0
changelog:
  - move the rather large pile of html and pdf docs to -workstation, so
    that just having something that links to the libraries won't drag
    them onto a system, and we avoid having to sort out hard-coded paths
    that include %{_libdir} showing up in docs in multilib packages
  - actually create %{_var}/kerberos/kdc/user, so that it can be packaged
  - correct the list of packaged man pages
  - don't dummy up required tex stylesheets, require them
  - require pdflatex and makeindex


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.11 alpha 1
    - drop backported patch for RT #7406
    - drop backported patch for RT #7407
    - drop backported patch for RT #7408
    - the new docs system generates PDFs, so stop including them as sources
    - drop backported patch to allow deltat.y to build with the usual
      warning flags and the current gcc
    - drop backported fix for disabling use of a replay cache when verifying
      initial credentials
    - drop backported fix for teaching PKINIT clients which trust the KDC's
      certificate directly to verify signed-data messages that are signed with
      the KDC's certificate, when the blobs don't include a copy of the KDC's
      certificate
    - drop backported patches to make keytab-based authentication attempts
      work better when the client tells the KDC that it supports a particular
      cipher, but doesn't have a key for it in the keytab
    - drop backported fix for avoiding spurious clock skew when a TGT is
      decrypted long after the KDC sent it to the client which decrypts it
    - move the cross-referenced HTML docs into the -libs package to avoid
      broken internal links
    - drop patches to fixup paths in man pages, shouldn't be needed any more


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-2
changelog:
  - undo rename from krb5-pkinit-openssl to krb5-pkinit on EL6
  - version the Obsoletes: on the krb5-pkinit-openssl to krb5-pkinit rename
  - reintroduce the init scripts for non-systemd releases
  - forward-port %{?_rawbuild} annotations from EL6 packaging


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-7
changelog:
  - selinux: hang on to the list of selinux contexts, freeing and reloading
    it only when the file we read it from is modified, freeing it when the
    shared library is being unloaded (#845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-6
changelog:
  - go back to not messing with library file paths on Fedora 17: it breaks
    file path dependencies in other packages, and since Fedora 17 is already
    released, breaking that is our fault


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-5
changelog:
  - add upstream patch to fix freeing an uninitialized pointer and dereferencing
    another uninitialized pointer in the KDC (MITKRB5-SA-2012-001, CVE-2012-1014
    and CVE-2012-1015, #844779 and #844777)
  - fix a thinko in whether or not we mess around with devel .so symlinks on
    systems without a separate /usr (sbose)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-3
changelog:
  - backport a fix to allow a PKINIT client to handle SignedData from a KDC
    that's signed with a certificate that isn't in the SignedData, but which
    is available as an anchor or intermediate on the client (RT#7183)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-2
changelog:
  - back out this labeling change (dwalsh):
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-1
changelog:
  - update to 1.10.2
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user
    - also package the PDF format admin, user, and install guides
    - drop some PDFs that no longer get built right
  - add a backport of Stef's patch to set the client's list of supported
    enctypes to match the types of keys that we have when we are using a
    keytab to try to get initial credentials, so that a KDC won't send us
    an AS reply that we can't encrypt (RT#2131, #748528)
  - don't shuffle around any shared libraries on releases with no-separate-/usr,
    since /usr/lib is the same place as /lib
  - add explicit buildrequires: on 'hostname', for the tests, on systems where
    it's in its own package, and require net-tools, which used to provide the
    command, everywhere


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-3
changelog:
  - have -server require /usr/share/dict/words, which we set as the default
    dict_file in kdc.conf (#817089)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-2
changelog:
  - change back dns_lookup_kdc to the default setting (Stef Walter, #805318)
  - comment out example.com examples in default krb5.conf (Stef Walter, #805320)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-1
changelog:
  - update to 1.10.1
    - drop the KDC crash fix
    - drop the KDC lookaside cache fix
    - drop the fix for kadmind RPC ACLs (CVE-2012-1012)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-5
changelog:
  - when removing -workstation, remove our files from the info index while
    the file is still there, in %preun, rather than %postun, and use the
    compressed file's name (#801035)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-2
changelog:
  - add patch to accept keytab entries with vno==0 as matches when we're
    searching for an entry with a specific name/kvno (#230382/#782211,RT#3349)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha2.2
changelog:
  - modify the deltat grammar to also tell gcc (4.7) to suppress
    "maybe-uninitialized" warnings in addition to the "uninitialized" warnings
    it's already being told to suppress (RT#7080)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.3
changelog:
  - pull in patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761317)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761317)
  - pull in patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761317)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.2
changelog:
  - apply upstream patch to fix a null pointer dereference when processing
    TGS requests (CVE-2011-1530, #753748)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.0
changelog:
  - update to 1.10 alpha 1
  - on newer releases where we can assume NSS >= 3.13, configure PKINIT to build
    using NSS
  - on newer releases where we build PKINIT using NSS, configure libk5crypto to
    build using NSS
  - rename krb5-pkinit-openssl to krb5-pkinit on newer releases where we're
    expecting to build PKINIT using NSS instead
  - during %check, run check in the library and kdc subdirectories, which
    should be able to run inside of the build system without issue


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-18
changelog:
  - apply upstream patch to fix a null pointer dereference with the LDAP kdb
    backend (CVE-2011-1527, #744125), an assertion failure with multiple kdb
    backends (CVE-2011-1528), and a null pointer dereference with multiple kdb
    backends (CVE-2011-1529) (#737711)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-17
changelog:
  - pull in patch from trunk to rename krb5int_pac_sign() to krb5_pac_sign() and
    make it public (#745533)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-16
changelog:
  - kadmin.service: fix #723723 again
  - kadmin.service,krb5kdc.service: remove optional use of $KRB5REALM in command
    lines, because systemd parsing doesn't handle alternate value shell variable
    syntax
  - kprop.service: add missing Type=forking so that systemd doesn't assume simple
  - kprop.service: expect the ACL configuration to be there, not absent
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#739853)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-12
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth (#734341)
  - pull in build-time deps for the tests


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-10
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-9
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-8
changelog:
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS
  - pull in a patch to fix losing track of the replay cache FD, from SVN by
    way of Kevin Coffman


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-7
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#723723),
    which is too fragile in cases where the database has been manually moved or
    is accessed through another kdb plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-6
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-5
changelog:
  - pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
    during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
    not to ask for an IPv6 address based on the set of configured interfaces
    (#717378, RT#6922)
  - pull a fix from SVN to use AI_ADDRCONFIG more often (RT#6923)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-4
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#715074)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-3
changelog:
  - pull a fix from SVN to get libgssrpc clients (e.g. kadmin) authenticating
    using the old protocol over IPv4 again (RT#6920)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#576093)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-1
changelog:
  - update to 1.9.1:
    - drop no-longer-needed patches for CVE-2010-4022, CVE-2011-0281,
      CVE-2011-0282, CVE-2011-0283, CVE-2011-0284, CVE-2011-0285


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696343,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't discard the error code from an error message received in response
    to a change-password request (#658871, RT#6893)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - override INSTALL_SETUID at build-time so that ksu is installed into
    the buildroot with the right permissions (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - turn off NSS as the backend for libk5crypto for now to work around its
    DES string2key not working (#679012)
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (MITKRB5-SA-2011-003, CVE-2011-0284, #674325)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - throw in a not-applied-by-default patch to try to make pkinit debugging
    into a run-time boolean option named "pkinit_debug"


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-6
changelog:
  - turn on NSS as the backend for libk5crypto, adding nss-devel as a build
    dependency when that switch is flipped


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-5
changelog:
  - krb5kdc init script: prototype some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (to flush out parts of #651466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
    in the KDC when using the LDAP kdb backend, and an uninitialized pointer
    use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, #664009,
    CVE-2011-0281, #668719, CVE-2011-0282, #668726, CVE-2011-0283, #676126)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-2
changelog:
  - pkinit: when verifying signed data, use the CMS APIs for better
    interoperability (#636985, RT#6851)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-0.beta1.0
changelog:
  - start moving to 1.9 with beta 1
    - drop patches for RT#5755, RT#6762, RT#6774, RT#6775
    - drop no-longer-needed backport patch for #539423
    - drop no-longer-needed patch for CVE-2010-1322
  - if WITH_NSS is set, built with --with-crypto-impl=nss (requires NSS 3.12.9)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-8
changelog:
  - incorporate upstream patch to fix uninitialized pointer crash in the KDC's
    authorization data handling (CVE-2010-1322, #636335)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-6
changelog:
  - pull down patches from trunk to implement k5login_authoritative and
    k5login_directory settings for krb5.conf (#539423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-4
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #629022, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #629022, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-1
changelog:
  - update to 1.8.3
    - drop backports of fixes for gss context expiration and error table
      registration/deregistration mismatch
    - drop patch for upstream #6750


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3
changelog:
  - tell krb5kdc and kadmind to create pid files, since they can
  - add logrotate configuration files for krb5kdc and kadmind (#462658)
  - fix parsing of the pidfile option in the KDC (upstream #6750)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull up fix for upstream #6745, in which the gssapi library would add the
    wrong error table but subsequently attempt to unload the right one


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: move session management calls to before we drop privileges, like
    su does (#596887), and don't skip the PAM account check for root or the
    same user (more of #540769)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-6
changelog:
  - make krb5-server-ldap also depend on the same version-release of krb5-libs,
    as the other subpackages do, if only to make it clearer than it is when we
    just do it through krb5-server
  - drop explicit linking with libtinfo for applications that use libss, now
    that readline itself links with libtinfo (as of readline-5.2-3, since
    fedora 7 or so)
  - go back to building without strict aliasing (compiler warnings in gssrpc)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-5
changelog:
  - add patch to correct GSSAPI library null pointer dereference which could be
    triggered by malformed client requests (CVE-2010-1321, #582466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-1
changelog:
  - update to 1.8.1
    - no longer need patches for #555875, #561174, #563431, RT#6661, CVE-2010-0628
  - replace buildrequires on tetex-latex with one on texlive-latex, which is
    the package that provides it now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - drop patch to suppress key expiration warnings sent from the KDC in
    the last-req field, as the KDC is expected to just be configured to either
    send them or not as a particular key approaches expiration (#556495)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-5
changelog:
  - add upstream fix for denial-of-service in SPNEGO (CVE-2010-0628, #576325)
  - kdc.conf: no more need to suggest keeping keys with v4-compatible salting


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-4
changelog:
  - remove the krb5-appl bits (the -workstation-clients and -workstation-servers
    subpackages) now that krb5-appl is its own package
  - replace our patch for #563431 (kpasswd doesn't fall back to guessing your
    principal name using your user name if you don't have a ccache) with the
    one upstream uses


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-2
changelog:
  - pull up patch to get the client libraries to correctly perform password
    changes over IPv6 (Sumit Bose, RT#6661)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-1
changelog:
  - update to 1.8
    - temporarily bundling the krb5-appl package (split upstream as of 1.8)
      until its package review is complete
    - profile.d scriptlets are now only needed by -workstation-clients
    - adjust paths in init scripts
    - drop upstreamed fix for KDC denial of service (CVE-2010-0283)
    - drop patch to check the user's password correctly using crypt(), which
      isn't a code path we hit when we're using PAM


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-6
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-4
changelog:
  - move the package changelog to the end to match the usual style (jdennis)
  - scrub out references to $RPM_SOURCE_DIR (jdennis)
  - include a symlink to the readme with the name LICENSE so that people can
    find it more easily (jdennis)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-3
changelog:
  - pull up the change to make kpasswd's behavior better match the docs
    when there's no ccache (#563431)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-1
changelog:
  - update to 1.7.1
    - don't trip AD lockout on wrong password (#542687, #554351)
    - incorporates fixes for CVE-2009-4212 and CVE-2009-3295
    - fixes gss_krb5_copy_ccache() when SPNEGO is used
  - move sim_client/sim_server, gss-client/gss-server, uuclient/uuserver to
    the devel subpackage, better lining up with the expected krb5/krb5-appl
    split in 1.8
  - drop kvno,kadmin,k5srvutil,ktutil from -workstation-servers, as it already
    depends on -workstation which also includes them


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-22
changelog:
  - use portreserve correctly -- portrelease takes the basename of the file
    whose entries should be released, so we need three files, not one


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-21
changelog:
  - suppress warnings of impending password expiration if expiration is more than
    seven days away when the KDC reports it via the last-req field, just as we
    already do when it reports expiration via the key-expiration field (#556495)
  - link with libtinfo rather than libncurses, when we can, in future RHEL


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-20
changelog:
  - krb5_get_init_creds_password: check opte->flags instead of options->flags
    when checking whether or not we get to use the prompter callback (#555875)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-19
changelog:
  - use portreserve to make sure the KDC can always bind to the kerberos-iv
    port, kpropd can always bind to the krb5_prop port, and that kadmind can
    always bind to the kerberos-adm port (#555279)
  - correct inadvertent use of macros in the changelog (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-18
changelog:
  - add upstream patch for integer underflow during AES and RC4 decryption
    (CVE-2009-4212), via Tom Yu (#545015)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-17
changelog:
  - put the conditional back for the -devel subpackage
  - back down to the earlier version of the patch for #551764; the backported
    alternate version was incomplete


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-16
changelog:
  - use %global instead of %define
  - pull up proposed patch for creating previously-not-there lock files for
    kdb databases when 'kdb5_util' is called to 'load' (#551764)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-15
changelog:
  - add upstream patch for KDC crash during referral processing (CVE-2009-3295),
    via Tom Yu (#545002)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages that live in the -libs subpackage into the regular
    %{_mandir} tree where they'll still be found if that package is the
    only one installed (#529319)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-11
changelog:
  - ksu: move account management checks to before we drop privileges, like
    su does (#540769)
  - selinux: set the user part of file creation contexts to match the current
    context instead of what we looked up
  - configure with --enable-dns-for-realm instead of --enable-dns, which isn't
    recognized any more


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-10
changelog:
  - move /etc/pam.d/ksu from krb5-workstation-servers to krb5-workstation,
    where it's actually needed (#538703)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-8
changelog:
  - specify the location of the subsystem lock when using the status() function
    in the kadmind and kpropd init scripts, so that we get the right error when
    we're dead but have a lock file - requires initscripts 8.99 (#521772)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if the init script fails to start krb5kdc/kadmind/kpropd because it's already
    running (according to status()), return 0 (part of #521772)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - simplify the man pages patch by only preprocessing the files we care about
    and moving shared configure.in logic into a shared function
  - catch the case of ftpd printing file sizes using %i, when they might be
    bigger than an int now


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-4
changelog:
  - try to merge and clean up all the large file support for ftp and rcp
    - ftpd no longer prints a negative length when sending a large file
      from a 32-bit host


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-3
changelog:
  - switch buildrequires: and requires: on e2fsprogs-devel into
    buildrequires: and requires: on libss-devel, libcom_err-devel, per
    sandeen on fedora-devel-list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a type mismatch in krb5_copy_error_message()
  - ftp: fix some odd use of strlen()
  - selinux labeling: use selabel_open() family of functions rather than
    matchpathcon(), bail on it if attempting to get the mutex lock fails


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - compile with %{?_smp_mflags} (Steve Grubb)
  - drop the bit where we munge part of the error table header, as it's not
    needed any more


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-1
changelog:
  - update to 1.7
    - no need to work around build issues with ASN1BUF_OMIT_INLINE_FUNCS
    - configure recognizes --enable/--disable-pkinit now
    - configure can take --disable-rpath now
    - no more libdes425, krb524d, krb425.info
    - kadmin/k5srvutil/ktutil are user commands now
    - new kproplog
    - FAST encrypted-challenge plugin is new
  - drop static build logic
  - drop pam_krb5-specific configuration from the default krb5.conf
  - drop only-use-v5 flags being passed to various things started by xinetd
  - put %{krb5prefix}/sbin in everyone's path, too (#504525)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-104
changelog:
  - extend PAM support to ksu: perform account and session management for the
    target user
  - pull up and merge James Leddy's changes to also set PAM_RHOST in PAM-aware
    network-facing services


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-103
changelog:
  - fix a typo in a ksu error message (Marek Mahut)
  - "rev" works the way the test suite expects now, so don't disable tests
    that use it


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-101
changelog:
  - add patches for read overflow and null pointer dereference in the
    implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
  - add patch for attempt to free uninitialized pointer in libkrb5
    (CVE-2009-0846)
  - add patch to fix length validation bug in libkrb5 (CVE-2009-0847)
  - put the krb5-user .info file into just -workstation and not also
    -workstation-clients


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-100
changelog:
  - turn off krb4 support (it won't be part of the 1.7 release, but do it now)
  - use triggeruns to properly shut down and disable krb524d when -server and
    -workstation-servers gets upgraded, because it's gone now
  - move the libraries to /%{_lib}, but leave --libdir alone so that plugins
    get installed and are searched for in the same locations (#473333)
  - clean up buildprereq/prereqs, explicit mktemp requires, and add the
    ldconfig for the -server-ldap subpackage (part of #225974)
  - escape possible macros in the changelog (part of #225974)
  - fixup summary texts (part of #225974)
  - take the execute bit off of the protocol docs (part of #225974)
  - unflag init scripts as configuration files (part of #225974)
  - make the kpropd init script treat 'reload' as 'restart' (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-19
changelog:
  - libgssapi_krb5: backport fix for some errors which can occur when
    we fail to set up the server half of a context (CVE-2009-0845)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clear fuzz out of patches, dropping a man page patch which is no longer
    necessary
  - quote %{__cc} where needed because it includes whitespace now
  - define ASN1BUF_OMIT_INLINE_FUNCS at compile-time (for now) to keep building


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-15
changelog:
  - build with -fno-strict-aliasing, which is needed because the library
    triggers these warnings
  - don't forget to label principal database lock files
  - fix the labeling patch so that it doesn't break bootstrapping


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-12
changelog:
  - stop exporting kadmin keys to a keytab file when kadmind starts -- the
    daemon's been able to use the database directly for a long long time now
  - belatedly add aes128,aes256 to the default set of supported key types


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-11
changelog:
  - libgssapi_krb5: properly export the acceptor subkey when creating a lucid
    context (Kevin Coffman, via the nfs4 mailing list)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-10
changelog:
  - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer
    when v4 compatibility is enabled on the KDC (CVE-2008-0062, CVE-2008-0063,
    - add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
    high-numbered descriptors are used (CVE-2008-0947, #433596)
  - add backport bug fix for an attempt to free non-heap memory in
    libgssapi_krb5 (CVE-2007-5901, #415321)
  - add backport bug fix for a double-free in out-of-memory situations in
    libgssapi_krb5 (CVE-2007-5971, #415351)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-9
changelog:
  - rework file labeling patch to not depend on fragile preprocessor trickery,
    in another attempt at fixing #428355 and friends


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-8
changelog:
  - ftp: add patch to fix "runique on" case when globbing fixes applied
  - stop adding a redundant but harmless call to initialize the gssapi internals


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to suppress double-processing of /etc/krb5.conf when we build
    with --sysconfdir=/etc, thereby suppressing double-logging (#231147)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove a patch, to fix problems with interfaces which are "up" but which
    have no address assigned, which conflicted with a different fix for the same
    problem in 1.5 (#200979)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated
  - in login, signal PAM when we're changing an expired password that it's an
    expired password, so that when cracklib flags a password as being weak it's
    treated as an error even if we're running as root


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-7
changelog:
  - drop netdb patch
  - kdb_ldap: add patch to treat 'nsAccountLock: true' as an indication that
    the DISALLOW_ALL_TIX flag is set on an entry, for better interop with Fedora,
    Netscape, Red Hat Directory Server (Simo Sorce)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-5
changelog:
  - enable patch for key-expiration reporting
  - enable patch to make kpasswd fall back to TCP if UDP fails (#251206)
  - enable patch to make kpasswd use the right sequence number on retransmit
  - enable patch to allow mech-specific creds delegated under spnego to be found
    when searching for creds


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-4
changelog:
  - some init script cleanups
    - drop unquoted check and silent exit for "$NETWORKING" (#426852, #242502)
    - krb524: don't barf on missing database if it looks like we're using kldap,
      same as for kadmin
    - return non-zero status for missing files which cause startup to
      fail (#242502)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-3
changelog:
  - allocate space for the nul-terminator in the local pathname when looking up
    a file context, and properly free a previous context (Jose Plans, #426085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-1
changelog:
  - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999
    and CVE-2007-4000 (the new pkinit module is built conditionally and goes
    into the -pkinit-openssl package, at least for now, to make a buildreq
    loop with openssl avoidable)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5.conf %verify(not md5 size mtime) in addition to
    %config(noreplace), like /etc/nsswitch.conf (#329811)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-9
changelog:
  - apply the fix for CVE-2007-4000 instead of the experimental patch for
    setting ok-as-delegate flags


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-7
changelog:
  - also perform PAM session and credential management when ftpd accepts a
    client using strong authentication, missed earlier
  - also label kadmind log files and files created by the db2 plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-6
changelog:
  - incorporate updated fix for CVE-2007-3999 (CVE-2007-4743)
  - fix incorrect call to "test" in the kadmin init script (#252322,#287291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-8
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to %{_var}/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include %{version}


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Jens Petersen <petersen@redhat.com> - 3.1-12
changelog:
  - protect install-info in the rpm scriptlets
    https://fedoraproject.org/wiki/Packaging:Scriptlets#Texinfo


author: Dennis Gilmore <dennis@ausil.us> - 3.0.10-3
changelog:
  - drop back to 3.0.10, 3.0.11 was never pushed anywhere as the soname bump broke buildroots
  - as 3.0.11 never went out no epoch needed.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:1.1.fb23-4
changelog:
  - Python 2 binary package renamed to python2-configshell
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Andy Grover <agrover@redhat.com> - 1:1.1.fb9-1
changelog:
  - New upstream release
  - Remove dependency on python-simpleparse in favor of pyparsing
  - Remove BuildRequires


author: Andy Grover <agrover@redhat.com> - 1:1.1.fb1-1
changelog:
  - New upstream source and release
  - Remove patches:
    * python-configshell-remove-epydoc-dep.patch
    * python-configshell-git-version.patch


author: Andy Grover <agrover@redhat.com> - 1:1.1-2
changelog:
  - Properly update changelog
  - Sync version with upstream, Epoch used
  - Change Source URL to intermediate github repo


author: Andy Grover <agrover@redhat.com> - 1.99.1.git987b63b-3
changelog:
  - Address comments from spec review
    - drop examples/myshell from doc, it hasn't been updated for API change
    - Fully document procedure to generate source .tar.gz
    - Remove "." from summary
    - Remove commented-out spec todos and other cruft


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3-6
changelog:
  * Pass all required compiler/linker flags
  - use annobin plugin
  - generate assembler build notes
  Related: #1624098


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3-1
changelog:
  - Update to new 3.10.3 stable version.
  - Remove ppc64/ppc64le related patches.
  - All packages now use -A option to specify the target CPU/Architecture instead of 
  sed substitutions and auto detection. The packages should now be less dependant on the 
  builder machine used.
  - Base package for each architecture should now be configured to be compatible with the 
  most basic machine of given type.
  - In addittion to base package, added some optimized packages for more advanced CPUs for
  most architectures.
  - Dropped sse2/sse3 subpackages for ix86


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 3.10.1-20
changelog:
  - Link statically to system LAPACK as in earlier versions of Fedora and as
    in OpenBLAS (BZ #1181369).


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 3.10.1-11
changelog:
  - Unbreak AArch64 build.
  - ARMv8 is different from ARMv7 so should not be treated as such. Otherwise
    atlas tries to do some crazy ARMv764 build and fail.


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-1
changelog:
  - Rebase to 3.10.1
  - Dropped x86_64-SSE2, ix86-SSE1, ix86-3DNow, z10, z196 (uncompilable).
  - Modified incompatible patches.
  - Added armv7neon support, modified archdef from softfp abi to hard abi.
  - Modified Make.lib to include build-id, soname, versioned library name and symlinks.
  - Now builds monolithic libsatlas (serial) and libtatlas (threaded)
    libraries with lapack and blas included.
  - Lapack source tarball needed instead of static library.
  - Disabled cpu throttling detection again (sorry, could not work on atlas
    otherwise, feel free to enable yet again - atlas-throttling.patch).
  - Removed mentions of "Fedora" to promote redistribution.
  - Modified parts of atlas.spec sometimes left in place, work still in progress,
    cleanup needed.


author: Deji Akingunola <dakingun@gmail.com> - 3.8.4-3
changelog:
  - Apply patch to enable arm build (Patch provided by Jitesh Shah <jiteshs@marvell.com>)
  - Stop turning off throttle checking, upstream frown at it (seems O.K. for Koji)


author: Deji Akingunola <dakingun@gmail.com> - 3.8.4-1
changelog:
  - Update to 3.8.4
  - Build the default package for SSE2 and add a SSE3 subpackage on x86_64
  - Apply patch (and arch defs.) to build on s390 and s390x (Dan Horák)
  - Fix-up build on s390 and s390x (Christian Bornträger)


author: Deji Akingunola <dakingun@gmail.com> - 3.8.3-15
changelog:
  - Disable the problematic sparc patch
  - Change lapack-devel BR to lapack-static, where liblapack_pic.a now resides.


author: Deji Akingunola <dakingun@gmail.com> - 3.8.3-6
changelog:
  - Add '-g' to build flag to allow proper genration of debuginfo subpackages (Fedora bug #509813)
  - Build for F12


author: Deji Akingunola <dakingun@gmail.com> - 3.8.2-4
changelog:
  - Don't symlink the atlas libdir on i386, cause upgrade issue (BZ#476787)
  - Fix options passed to gcc when making shared libs


author: Quentin Spencer <qspencer@users.sourceforge.net> 3.6.0-10
changelog:
  - Rebuild for Fedora Extras 5.
  - Add --noexecstack to compilation of assembly kernels. These were
    previously marked executable, which caused problems with selinux.


author: Quentin Spencer <qspencer@users.sourceforge.net> 3.6.0-8
changelog:
  - Make all devel subpackages depend on their non-devel counterparts.
  - Add /etc/ld.so.conf.d files for -sse and -3dnow, because they don't
    seem to get picked up automatically.


author: Quentin Spencer <qspencer@users.sourceforge.net> 3.6.0-6
changelog:
  - Use new Debian patch, and enable shared libs (they previously failed
    to build on gcc 4).
  - Minor updates to description and README.Fedora file.
  - Fix buildroot name to match FE preferred form.
  - Fixes for custom optimized builds.
  - Add dist tag.


author: Ian Kent <ikent@redhat.com> - 5.1.4-39
changelog:
  - bz1802251 - Autofs will only mount share once if sss is first ini
    nsswitch.conf
    - fix a regression with map instance lookup.
  - Resolves: rhbz#1802251


author: Ian Kent <ikent@redhat.com> - 5.1.4-38
changelog:
  - bz1660145 - autofs.schema doesn't work in RHEL8
    - update spec file doc inclusions for schema definition update.
  - Related: rhbz#1660145


author: Ian Kent <ikent@redhat.com> - 5.1.4-37
changelog:
  - bz1660145 - autofs.schema doesn't work in RHEL8
    - update ldap READMEs and schema definitions.
  - Resolves: rhbz#1660145


author: Ian Kent <ikent@redhat.com> - 5.1.4-36
changelog:
  - bz1743442 - getmntent returns additional "-hosts" entries when
    automounter is used with "hosts" map (userspace part)
    - also use strictexpire for offsets (mounts).
    - change expire type naming to better reflect usage.
    - remove unused function has_fstab_option().
    - remove unused function reverse_mnt_list().
    - remove a couple of old debug messages.
    - fix amd entry memory leak.
    - fix unlink_mount_tree() not umounting mounts.
    - add ignore mount option.
    - use ignore option for offset mounts as well.
    - add config option for "ignore" mount option.
    - use bit flags for autofs mount types in mnt_list.
    - use mp instead of path in mnt_list entries.
    - always use PROC_MOUNTS to make mount lists.
    - add glibc getmntent_r().
    - use local getmntent_r in table_is_mounted().
    - refactor unlink_active_mounts() in direct.c.
    - don't use tree_is_mounted() for mounted checks.
    - use single unlink_umount_tree() for both direct and indirect mounts.
    - move unlink_mount_tree() to lib/mounts.c.
    - use local_getmntent_r() for unlink_mount_tree().
    - use local getmntent_r() in get_mnt_list().
    - use local getmntent_r() in tree_make_mnt_list().
    - fix missing initialization of autofs_point flags.
  - Resolves: rhbz#1743442


author: Ian Kent <ikent@redhat.com> - 5.1.4-35
changelog:
  - bz1681956 - autofs changes blocked until gating tests are added
    - correct test name in gating.yaml.
  - Related: rhbz#1681956


author: Ian Kent <ikent@redhat.com> - 5.1.4-34
changelog:
  - bz1681956 - autofs changes blocked until gating tests are added
    - add gating.yaml for manual gate testing.
  - Related: rhbz#1681956


author: Ian Kent <ikent@redhat.com> - 5.1.4-33
changelog:
  - bz1689466 - Sanitize autofs logging
    - make expire remaining log level debug.
  - bz1685805 - autofs doesn't expand macros in amd map selectors
    - allow period following macro in selector value.
    - fix macro expansion in selector values.
  - Resolves: rhbz#1689466 rhbz#1685805


author: Ian Kent <ikent@redhat.com> - 5.1.4-32
changelog:
  - bz1703876 - [RFE] Enable additional logging information for autofs
    - add NULL check for get_addr_string() return.
    - use malloc(3) in spawn.c.
    - add mount_verbose configuration option.
    - optionally log mount requestor process info.
    - log mount call arguments if mount_verbose is set.
  - Resolves: rhbz#1703876


author: Ian Kent <ikent@redhat.com> - 5.1.4-31
changelog:
  - bz1689467 - path_resolution on an autofs managed path resets the timer. Can
    this be made configurable?
    - support strictexpire mount option.
  - Resolves: rhbz#1689467


author: Ian Kent <ikent@redhat.com> - 5.1.4-30
changelog:
  - bz1689469 - [autofs] The log no longer print PID of automount process
    - remove autofs4 module load code.
    - add NULL check in prepare_attempt_prefix().
    - update build info with systemd.
    - use flags for startup boolean options.
    - move close stdio descriptors to become_daemon().
    - add systemd service command line option.
  - Resolves: rhbz#1689469


author: Ian Kent <ikent@redhat.com> - 5.1.4-29
changelog:
  - bz1654541 - autofs crash when parsing master map
    - fix hesiod string check in master_parse().
  - Resolves: rhbz#1654541


author: Ian Kent <ikent@redhat.com> - 5.1.4-28
changelog:
  - bz1638487 - Drop dependency on hesiod
    - actually update the spec file with the hesiod removal.
  - Related: rhbz#1638487


author: Ian Kent <ikent@redhat.com> - 5.1.4-27
changelog:
  - bz1638487 - Drop dependency on hesiod
    - better handle hesiod support not built in.
    - exclude hesiod support from configure options
    - remove hesiod depends.
  - Resolves: rhbz#1638487


author: Ian Kent <ikent@redhat.com> - 5.1.4-26
changelog:
  - bz1630190 - yum update hanging while restarting autofs
    - fix incorrect locking in sss lookup.
  - bz1630194 - after upgrading to autofs-5.0.7-83.el7.x86_64 on
    RHEL 7 clients, amd maps /defaults key mount options are no
    longer working
    - fix amd parser opts option handling.
  - Resolves: rhbz#1630190 rhbz#1630194


author: Ian Kent <ikent@redhat.com> - 5.1.4-24
changelog:
  - bz1621938 - autofs can no longer get maps from IPA server
    - fix use after free in parse_ldap_config().
  - Resolves: rhbz#1621938


author: Ian Kent <ikent@redhat.com> - 5.1.4-23
changelog:
  - bz1615782 - autofs master map age is incorrectly set
    - fix age setting at startup.
  - Resolves: rhbz#1615782


author: Ian Kent <ikent@redhat.com> - 5.1.4-22
changelog:
  - bz1613630 - On Red Hat 7.x systems if you try to access local
    filesystems using the automounter through /net then the shell
    and mount could lock up *if* the filesystem your accessing is
    double exported.
    - set bind mount as propagation slave.
    - add master map pseudo options for mount propagation.
  - Resolves: rhbz#1613630


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-21
changelog:
  - bz1611866 - autofs reload is unable to activate new map entries,
    it is autofs restart which shows new map entries.
    - fix update_negative_cache() map source usage.
  - bz1613621 - [autofs]Removed entries still can be accessed
    - mark removed cache entry negative.
  - Resolves: rhbz#1611866 rhbz#1613621


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-20
changelog:
  - bz1612565 - Man page scan results for autofs
    - fix program usage message.
  - Resolves: rhbz#1612565


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-19
changelog:
  - bz1602447 - Please review important issues found by covscan in
    "autofs-5.1.4-18.el8+7"
    - covarity fixes.
  -Resolves: rhbz#1602447


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-18
changelog:
  - bz1593492 - Ignore trailing slashes at the end of executable maps in
    auto.master config file
    - add-man page note about extra slashes in paths
  - Resolves: rhbz#1593492


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-17
changelog:
  - bz1577700 - automount leaves FDs in half-open state
    - fix fd leak in rpc_do_create_client().
  - Resolves: rhbz#1577700


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-16
changelog:
  - tiny patch for autofs typo and possible bug.
  - add units After line to include statd service.
  - use systemd sd_notify() at startup.
  - add "BuildRequires: systemd-devel".
  - fix NFS version mask usage.
  - fix incorrect date in changelog.


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-12
changelog:
  - dont allow trailing slash in master map mount points.
  - fix libresolv configure check.
  - add fedfs-getsrvinfo.c.
  - add mount.fedfs.c.
  - add fedfs-map-nfs4.c
  - add conditional inclusion of fedfs binaries.
  - add an example fedfs master map entry to the installed master map.


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-7
changelog:
  - add error handling for ext_mount_add().
  - account for recent libnsl changes.
  - use_hostname_for_mounts shouldn't prevent selection among replicas.
  - fix monotonic_elapse.
  - Makefiles.rules: remove 'samples' from SUBDIRS.


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-6
changelog:
  - dont use array for path when not necessary.
  - fix prefix option handling in expand_entry().
  - fix sublink option not set from defaults.
  - fix error return in do_nfs_mount().


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-5
changelog:
  - actually apply fix use after free in do_master_list_reset().
  - fix deadlock in dumpmaps.
  - fix rpcgen dependency problem.


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-10
changelog:
  - make negative cache update consistent for all lookup modules.
  - ensure negative cache isn't updated on remount.
  - dont add wildcard to negative cache.
  - make service want network-online (bz1071591).


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-9
changelog:
  - fix custom autofs.conf not being installed.
  - init qdn before use in get_query_dn().
  - fix typo in update_hosts_mounts().
  - fix hosts map update on reload.


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-7
changelog:
  - force disable browse mode for amd format maps.
  - fix hosts map options check in lookup_amd_instance().
  - fix memory leak in create_client().
  - fix memory leak in get_exports().
  - fix memory leak in get_defaults_entry().
  - fix out of order clearing of options buffer.
  - fix reset amd lexer scan buffer.
  - ignore multiple commas in options strings.
  - fix typo in flagdir configure option.
  - clarify multiple mounts description.
  - gaurd against incorrect umount return.
  - update man page autofs(8) for systemd.
  - remove ancient kernel Requires.


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-3
changelog:
  - fix compile error in defaults.c.
  - add serialization to sasl init.
  - dont allocate dev_ctl_ops too early.
  - fix incorrect round robin host detection.
  - fix race accessing qdn in get_query_dn().
  - fix leak in cache_push_mapent().
  - fix config entry read buffer not checked.
  - fix FILE pointer check in defaults_read_config().
  - fix memory leak in conf_amd_get_log_options().
  - fix signed comparison in inet_fill_net().
  - fix buffer size checks in get_network_proximity().
  - fix leak in get_network_proximity().
  - fix buffer size checks in merge_options().
  - check amd lex buffer len before copy.
  - add return check in ldap check_map_indirect().
  - check host macro is set before use.
  - check options length before use in parse_amd.c.
  - fix some out of order evaluations in parse_amd.c.
  - fix copy and paste error in dup_defaults_entry().


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-1
changelog:
  - update to upstream release, 5.1.0.
    - fix reset flex scan buffer on init.
    - fix fix negative status being reset on map read.
    - fix out of order amd timestamp lookup.
    - fix ldap default schema config.
    - fix ldap default master map name config.
    - fix map format init in lookup_init().
    - fix incorrect max key length in defaults get_hash().
    - fix xfn sets incorrect lexer state.
    - fix old style key lookup.
    - fix expire when server not responding.
    - fix ldap_uri config update.
    - fix typo in conf_load_autofs_defaults().
    - fix hash on confg option add and delete.
    - add plus to path match pattern.
    - fix multi entry ldap option handling.
    - cleanup options in amd_parse.c.
    - allow empty value for some map options.
    - allow empty value in macro selectors.


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-0.beta1.1
changelog:
  - amd lookup update lookup ldap to handle amd keys
    - inadvertantly drop from initial series.
  - amd lookup update lookup hesiod to handle amd keys
    - inadvertantly drop from initial series.
  - fix wildcard key lookup.
  - check for non existent negative entries in lookup_ghost().


author: Ian Kent <ikent@redhat.com> - 1:5.0.8-5
changelog:
  - fix ipv6 link local address handling.
  - fix fix ipv6 libtirpc getport.
  - get_nfs_info() should query portmapper if port is not given.
  - fix rpc_portmap_getport() proto not set.


author: Ian Kent <ikent@redhat.com> - 1:5.0.8-4
changelog:
  - allow --with-systemd to take a path arg.
  - fix WITH_LIBTIRPC function name.
  - fix ipv6 libtirpc getport (bz1033918).


author: Ian Kent <ikent@redhat.com> - 1:5.0.8-3
changelog:
  - fix undefined authtype_requires_creds err if ldap enabled but without sasl.
  - fix master map type check.
  - fix task manager not getting signaled.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-20
changelog:
  - fix master map mount options matching.
  - fix master map bogus keywork match.
  - fix fix map entry duplicate offset detection.
  - add a number of fixes based on a Covarity report.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-16
changelog:
  - make dump maps check for duplicate indirect mounts (bz961312).
  - document allowed map sources in auto.master(5) (bz961312).
  - add enable sloppy mount option to configure.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-12
changelog:
  - dont fail on master map self include.
  - fix wildcard multi map regression.
  - fix file descriptor leak when reloading the daemon.
  - depricate nosymlink pseudo option.
  - add symlink pseudo option.
  - update kernel include files.
  - fix requires in spec file.
  - fix libtirpc build option.
  - fix systemd unidir in spec file.
  - document browse option in man page.
  - fix automounter support on parisc.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-10
changelog:
  - fix submount offset delete.
  - fix init script status return.
  - fix use get_proximity() without libtirpc.
  - don't use dirent d_type to filter out files in scandir().
  - don't schedule new alarms after readmap.
  - use numeric protocol ids instead of protoent structs.
  - lib/defaults.c: use WITH_LDAP conditional around LDAP types.
  - make yellow pages support optional.
  - modules/replicated.c: use sin6_addr.s6_addr32.
  - workaround missing GNU versionsort extension.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-8
changelog:
  - fix map entry duplicate offset detection.
  - Allow nsswitch.conf to not contain "automount:" lines.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-6
changelog:
  - fix recursive mount deadlock.
  - increase file map read buffer size.
  - handle new location of systemd.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-4
changelog:
  - include usage in usage message.
  - dont wait forever to restart.
  - add option description to man page.
  - fix null map entry order handling.
  - make description of default MOUNT_WAIT setting clear.
  - configure.in: allow cross compilation.
  - README: update mailing list subscription info.
  - allow non root user to check status.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-3
changelog:
  - fix nobind sun escaped map entries.
  - fix use cache entry after free mistake.
  - fix ipv6 proximity calculation.
  - fix parse buffer initialization.
  - fix typo in automount(8).


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-21
changelog:
  - fix systemd argument passing.
  - fix get_nfs_info() can incorrectly fail.
  - fix offset directory removal.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-21
changelog:
  - fix fix LDAP result leaks on error paths.
  - report map not read when debug logging.
  - duplicate parent options for included maps.
  - update ->timeout() function to not return timeout.
  - move timeout to map_source.
  - fix kernel verion check of version components.
  - dont retry ldap connect if not required.
  - check if /etc/mtab is a link to /proc/self/mounts.
  - fix nfs4 contacts portmap.
  - make autofs wait longer for shutdown.
  - fix sss map age not updated.
  - fix remount deadlock.
  - fix umount recovery of busy direct mount.
  - fix offset mount point directory removal.
  - remove move mount code and configure option.
  - fix remount of multi mount.
  - fix devce ioctl alloc path check.
  - refactor hosts lookup module.
  - remove cache update from parse_mount().
  - add function to delete offset cache entry.
  - allow update of multi mount offset entries.
  - add hup signal handling to hosts map.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-15
changelog:
  - fix typo in libtirpc file name.
  - fix rework error return handling in rpc code.
  - allow MOUNT_WAIT to override probe.
  - improve UDP RPC timeout handling.
  - fix segfault in get_query_dn().
  - use strtok_r() in linux_version_code().
  - fix sss wildcard match.
  - fix dlopen() error handling in sss module.
  - fix configure string length tests for sss library.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-12
changelog:
  - ignore duplicate exports in auto.net.
  - add kernel verion check function.
  - add function to check mount.nfs version.
  - reinstate singleton mount probe.
  - rework error return handling in rpc code.
  - catch EHOSTUNREACH and bail out early.
  - systemd support fixes.
  - fix segmentation fault in do_remount_indirect().


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-9
changelog:
  - add correct patch for "fix improve mount location error reporting".
  - add correct patch for "fix fix wait for master source mutex".


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-5
changelog:
  - fix ipv6 name lookup check.
  - fix ipv6 rpc calls.
  - fix ipv6 configure check.
  - add piddir to configure.
  - add systemd unit support.
  - fix MNT_DETACH define.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-3
changelog:
  - improve mount location error reporting.
  - fix paged query more results check.
  - fix dumpmaps not reading maps.
  - fix result null check in read_one_map().
  - Fix LDAP result leaks on error paths.
  - code analysis fixes 1.
  - fix not bind mounting local filesystem.
  - update dir map-type patch for changed patch order.
  - fix wait for master source mutex.
  - fix submount shutdown race
  - fix fix map source check in file lookup.
  - add disable move mount configure option.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-36
changelog:
  - use weight only for server selection.
  - fix isspace() wild card substition.
  - auto adjust ldap page size.
  - fix prune cache valid check.
  - fix mountd vers retry.
  - fix expire race.
  - add lsb force-reload and try-restart.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-32.fc15
changelog:
  - always read file maps mount lookup map read fix.
  - fix direct map not updating on reread.
  - add external bind method.
  - fix add simple bind auth.
  - add option to dump configured automount maps.
  - wait for master map to be available at start.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-28
changelog:
  - remove extra read master map call.
  - remove extra cache create call in master_add_map_source().
  - fix error handing in do_mount_indirect().
  - expire thread use pending mutex.
  - explicity link against the Kerberos library.
  - remove some log message duplication for verbose logging.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-27.fc14
changelog:
  - fix master map source server unavailable handling.
  - add autofs_ldap_auth.conf man page.
  - fix random selection for host on different network.
  - make redhat init script more lsb compliant.
  - don't hold lock for simple mounts.
  - fix remount locking.
  - fix wildcard map entry match.
  - fix parse_sun() module init.
  - dont check null cache on expire.
  - fix null cache race.
  - fix cache_init() on source re-read.
  - fix mapent becomes negative during lookup.
  - check each dc server individually.
  - fix negative cache included map lookup.
  - remove state machine timed wait.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-25.fc14
changelog:
  - make nfs4 default for replicated selection configuration (bz579949).
  - add simple bind authentication option (bz579951).


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-22
changelog:
  - fix get query dn failure.
  - fix ampersand escape in auto.smb.
  - add locality as valid ldap master map attribute.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-17
changelog:
  - dont connect at ldap lookup module init.
  - fix random selection option.
  - fix disable timeout.
  - fix strdup() return value check.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-6
changelog:
  - don't use master_lex_destroy() to clear parse buffer.
  - make documentation for set-log-priority clearer.


author: Ian Kent <kent@redhat.com> - 1:5.0.5-2
changelog:
  - fix included map read fail handling.
  - refactor ldap sasl authentication bind to eliminate extra connect
    causing some servers to reject the request. 
  - add mount wait parameter to allow timeout of mount requests to
    unresponsive servers.
  - special case cifs escape handling.
  - fix libxml2 workaround configure.
  - more code analysis corrections (and fix a typo in an init script).
  - fix backwards #ifndef INET6.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-1
changelog:
  - update source to latest upstream version.
    - this is essentially a consolidation of the patches already in this rpm.
  - add dist tag to match latest RHEL-5 package tag format.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-39
changelog:
  - fix libxml2 non-thread-safe calls.
  - fix direct map cache locking.
  - fix patch "dont umount existing direct mount on reread" deadlock.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-32
changelog:
  - fix an RPC fd leak.
  - don't block signals we expect to dump core.
  - fix pthread push order in expire_proc_direct().


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-30
changelog:
  - fix incorrect dclist free.
  - srv lookup handle endianness.
  - fix bug introduced by library reload changes which causes autofs to
    not release mount thread resources when using submounts.
  - fix notify mount message path.
  - try harder to work out if we created mount point at remount.
  - fix double free in do_sasl_bind().
  - manual umount recovery fixes.
  - fix map type info parse error.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-28
changelog:
  - use intr option as hosts mount default.
  - sync kernel includes with upstream kernel.
  - dont umount existing direct mount on master re-read.
  - fix incorrect shutdown introduced by library relaod fixes.
  - improve manual umount recovery.
  - dont fail on ipv6 address when adding host.
  - always read file maps multi map fix.
  - always read file maps key lookup fixes.
  - add support for LDAP_URI="ldap:///<domain db>" SRV RR lookup.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-26
changelog:
  - fix lsb init script header.
  - fix memory leak reading ldap master map.
  - fix st_remove_tasks() locking.
  - reset flex scanner when setting buffer.
  - zero s_magic is valid.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-21
changelog:
  - fix file map lookup when reading included or nsswitch sources.
    - a regression introduced by file map lookup optimisation in rev 9.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-15
changelog:
  - fix array out of bounds accesses and cleanup couple of other alloca() calls.
  - Undo mistake in copy order for submount path introduced by rev 11 patch.
  - add check for alternate libxml2 library for libxml2 tsd workaround.
  - add check for alternate libtirpc library for libtirpc tsd workaround.
  - cleanup configure defines for libtirpc.
  - add WITH_LIBTIRPC to -V status report.
  - add libtirpc-devel to BuildRequires.
  - add nfs mount protocol default configuration option.


author: Ian Kent <ikent@redhat.com> - 5.0.4-9
changelog:
  - fix hosts map use after free.
  - fix uri list locking (again).
  - check for stale SASL credentials upon connect fail.
  - add "forcestart" and "forcerestart" init script options to allow
    use of 5.0.3 strartup behavior if required.
  - always read entire file map into cache to speed lookups.
  - make MAX_ERR_BUF and PARSE_MAX_BUF use easier to audit.
  - make some easy alloca replacements.
  - update to configure libtirpc if present.
  - update to provide ipv6 name and address support.
  - update to provide ipv6 address parsing.


author: Ian Kent <ikent@redhat.com> - 5.0.4-8
changelog:
  - rename program map parsing bug fix patch.
  - use CLOEXEC flag functionality for setmntent also, if present.


author: Ian Kent <kent@redhat.com> - 5.0.4-5
changelog:
  - fix negative caching of non-existent keys.
  - fix ldap library detection in configure.
  - use CLOEXEC flag functionality if present.
  - fix select(2) fd limit.
  - make hash table scale to thousands of entries.


author: Ian Kent <kent@redhat.com> - 5.0.3-30
changelog:
  - fix segv during library re-open.
  - fix incorrect pthreads condition handling for expire requests.
  - fix master map lexer eval order.
  - fix bad alloca usage.


author: Ian Kent <ikent@redhat.com> - 5.0.3-28
changelog:
  - don't close file handle for rootless direct mounti-mount at mount.
  - wait submount expire thread completion when expire successful.
  - add inadvertantly ommitted server list locking in LDAP module.


author: Ian Kent <ikent@redhat.com> - 5.0.3-26
changelog:
  - add map-type-in-map-name fix patch to sync with upstream and RHEL.
  - don't readmap on HUP for new mount.
  - add NIS_PARTIAL to map entry not found check and fix use after free bug.


author: Ian Kent <ikent@redhat.com> - 5.0.3-25
changelog:
  - fix fd leak at multi-mount non-fatal mount fail.
  - fix incorrect multi-mount mountpoint calcualtion.


author: Ian Kent <ikent@redhat.com> - 5.0.3-23
changelog:
  - add upstream bug fixes
    - bug fix for mtab check.
    - bug fix for zero length nis key.
    - update for ifc buffer handling.
    - bug fix for kernel automount handling.
  - warning: I found a bunch of patches that were present but not
    being applied.


author: Ian Kent <ikent@redhat.com> - 5.0.3-21
changelog:
  - add upstream bug fix patches
    - add command line option to override is running check.
    - don't use proc fs for is running check.
    - fix fail on included browse map not found.
    - fix incorrect multi source messages.
    - clear stale flag on map read.
    - fix proximity other rpc ping timeout.
    - refactor mount request vars code.
    - make handle_mounts startup condition distinct.
    - fix submount shutdown handling.
    - try not to block on expire.
    - add configuration paramter UMOUNT_WAIT.
    - fix multi mount race.
    - fix nfs4 colon escape handling.
    - check replicated list after probe.
    - add replicated server selection debug logging.
    - update replicated server selection documentation.
    - use /dev/urandom instead of /dev/random.
    - check for mtab pointing to /proc/mounts.
    - fix interface config buffer size.
    - fix percent hack heap corruption.


author: Ian Kent <ikent@redhat.com> - 5.0.3-18
changelog:
  - don't abuse the ap->ghost field on NFS mount.
  - multi-map doesn't pickup NIS updates automatically.
  - eliminate redundant DNS name lookups.
  - mount thread create condition handling fix.
  - allow directory create on NFS root.
  - check direct mount path length.
  - fix incorrect in check in get user info.
  - fix a couple of memory leaks.


author: Ian Kent <ikent@redhat.com> - 5.0.3-8
changelog:
  - revert miscellaneous device node related patches.
  - add missing check for zero length NIS key.
  - fix incorrect match of map type name when included in map name.
  - update rev 7 sasl callbacks patch.


author: Ian Kent <ikent@redhat.com> - 5.0.3-6
changelog:
  - fix expire calling kernel more often than needed.
  - fix unlink of mount tree incorrectly causing autofs mount fail.
  - add miscellaneous device node interface library.
  - use miscellaneous device node, if available, for active restart.
  - device node and active restart fixes.
  - update is_mounted to use device node ioctl, if available.


author: Ian Kent <ikent@redhat.com> - 5.0.3-4
changelog:
  - correction to the correction for handling of LDAP base dns with spaces.
  - avoid using UDP for probing NFSv4 mount requests.
  - use libldap instead of libldap_r.


author: Ian Kent <ikent@redhat.com> - 5.0.3-3
changelog:
  - catch "-xfn" map type and issue "no supported" message.
  - another correction for handling of LDAP base dns with spaces.


author: Ian Kent <ikent@redhat.com> - 5.0.2-25
changelog:
  - Bug 426401: CVE-2007-6285 autofs default doesn't set nodev in /net [rawhide]
    - use mount option "nodev" for "-hosts" map unless "dev" is explicily specified.


author: Ian Kent <ikent@redhat.com> - 5.0.2-23
changelog:
  - Bug 397591 SELinux is preventing /sbin/rpc.statd (rpcd_t) "search" to <Unknown> (sysctl_fs_t).
    - prevent fork between fd open and setting of FD_CLOEXEC.


author: Ian Kent <ikent@redhat.com> - 5.0.2-21
changelog:
  - Bug 421371: CVE-2007-5964 autofs defaults don't restrict suid in /net [rawhide]
    - use mount option "nosuid" for "-hosts" map unless "suid" is explicily specified.


author: Ian Kent <ikent@redhat.com> - 5.0.2-18
changelog:
  - fix schema selection in LDAP schema discovery.
  - check for "*" when looking up wildcard in LDAP.
  - fix couple of edge case parse fails of timeout option.
  - add SEARCH_BASE configuration option.
  - add random selection as a master map entry option.
  - re-read config on HUP signal.
  - add LDAP_URI, LDAP_TIMEOUT and LDAP_NETWORK_TIMEOUT configuration options.
  - fix deadlock in submount mount module.
  - fix lack of ferror() checking when reading files.
  - fix typo in autofs(5) man page.
  - fix map entry expansion when undefined macro is present.
  - remove unused export validation code.
  - add dynamic logging (adapted from v4 patch from Jeff Moyer).
  - fix recursive loopback mounts (Matthias Koenig).
  - add map re-load to verbose logging.
  - fix handling of LDAP base dns with spaces.
  - handle MTAB_NOTUPDATED status return from mount.
  - when default master map, auto.master, is used also check for auto_master.
  - update negative mount timeout handling.
  - fix large group handling (Ryan Thomas).
  - fix for dynamic logging breaking non-sasl build (Guillaume Rousse).
  - eliminate NULL proc ping for singleton host or local mounts.


author: Ian Kent <ikent@redhat.com> - 5.0.2-16
changelog:
  - add descriptive comments to config about LDAP schema discovery.
  - work around segfault at exit caused by libxml2.
  - fix foreground logging (also fixes shutdown needing extra signal bug).


author: Ian Kent <ikent@redhat.com> - 5.0.2-14
changelog:
  - update patch to prevent failure on empty master map.
  - if there's no "automount" entry in nsswitch.conf use "files" source.
  - add LDAP schema discovery if no schema is configured.


author: Ian Kent <ikent@redhat.com> - 5.0.2-11
changelog:
  - don't fail on empty master map.
  - add support for the "%" hack for case insensitive attribute schemas.


author: Ian Kent <ikent@redhat.com> - 5.0.2-10
changelog:
  - mark map instances stale so they aren't "cleaned" during updates.
  - fix large file compile time option.


author: Ian Kent <ikent@redhat.com> - 5.0.2-5
changelog:
  - fix mount point directory creation for bind mounts.
  - add quoting for exports gathered by hosts map.


author: Ian Kent <ikent@redhat.com> - 5.0.2-2
changelog:
  - include krb5.h in lookup_ldap.h (some openssl doesn't implicitly include it).
  - correct initialization of local var in parse_server_string.


author: Ian Kent <ikent@redhat.com> - 5.0.1-16
changelog:
  - add ldaps support.
    - note: it's no longer possible to have multiple hosts in an ldap map spec.
    - note: to do this you need to rely on the ldap client config.


author: Ian Kent <ikent@redhat.com> - 5.0.1-9
changelog:
  - upstream fix for filesystem is local check.
  - disable exports access control check (bz 203277).
  - fix patch to add command option for set a global mount options (bz 214684).


author: Ian Kent <ikent@redhat.com> - 5.0.1-8
changelog:
  - add configuration variable to control appending of global options (bz 214684).
  - add command option to set a global mount options string (bz 214684).


author: Ian Kent <ikent@redhat.com> - 5.0.1-6
changelog:
  - fix directory creation for browse mounts.
  - fix wildcard map handling and improve nsswitch source map update.


author: Ian Kent <ikent@redhat.com> - 5.0.1-5
changelog:
  - drop "DEFAULT_" prefix from configuration names.
  - add option to select replicated server at random (instead of
    ping response time) (bz 227604).
  - fix incorrect cast in directory cleanup routines (bz 231864).


author: Ian Kent <ikent@redhat.com> - 5.0.1-1
changelog:
  - update to release tar.
  - fix return check for getpwuid_r and getgrgid_r.
  - patch to give up trying to update exports list while host is mounted.
  - fix to "@network" matching. 
  - patch to check for fstab update and retry if not updated.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.24
changelog:
  - add "condrestart" to init script (bz 228860).
  - add "@network" and .domain.name export check.
  - fix display map name in mount entry for "-hosts" map.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.18
changelog:
  - update the "task done race" patch to fix a deadlock.
  - added URL tag.
  - removed obsoletes autofs-ldap.
  - replaced init directory paths with %{_initrddir} macro.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.17
changelog:
  - make use of spaces and tabs in spec file consistent.
  - escape embedded macro text in %changelog.
  - eliminate redundant %version and %release.
  - remove redundant conditional check from %clean.
  - remove redundant exit from %preun.
  - correct %defattr spec.
  - remove empty %doc and redundant %dir misc lines.
  - combine program module spec lines into simpler one line form.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.13
changelog:
  - make double quote handing consistent (at least as much as we can).
  - fix handling of trailing white space in wildcard lookup (forward port bz 199720).
  - check fqdn of each interface when matching export access list (bz 213700).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.5
changelog:
  - remove fullstop from Summary tag.
  - change Buildroot to recommended form.
  - replace Prereq with Requires.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.41
changelog:
  - fix nonstrict multi-mount handling (bz 219383).
  - correct detection of duplicate indirect mount entries (bz 220799).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.38
changelog:
  - update master map tokenizer to admit "slasify-colons" option.
  - update location validation to accept "_" (bz 219445).
  - set close-on-exec flag on open sockets (bz 215757).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.34
changelog:
  - change mount "device" from "automount" to the map name.
  - check for buffer overflow in mount_afs.c.
  - replace tempnam with mkdtemp.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.33
changelog:
  - expand export access checks to include missing syntax options.
  - make "-hosts" module try to be sensitive to exports list changes.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.29
changelog:
  - alter nfs4 host probing to not use portmap lookup and add options
    check for "port=" parameter (bz 208757).
  - correct semantics of "-null" map handling (bzs 214800, 208091).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.26
changelog:
  - fix parsing of bad mount mount point in master map (bz 215620).
  - fix use after free memory access in cache.c and lookup_yp.c (bz 208091).
  - eliminate use of pthread_kill to detect task completion (bz 208091).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.23
changelog:
  - fix tokenizer to distinguish between global option and dn string (bz 214684).
  - fix incorrect return from spawn.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.21
changelog:
  - mitigate manual umount of automounts where possible.
  - fix multiply recursive bind mounts.
  - check kernel module version and require 5.00 or above.
  - fix expire regression introduced in the "mitigate manual umount" patch.
  - still more on multiply recursive bind mounts.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.20
changelog:
  - Update patch for changed semantics of mkdir in recent kernels.
  - fix macro table locking (bz 208091).
  - fix nsswitch parser locking (bz 208091).
  - allow only one master map read task at a time.
  - fix misc memory leaks.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.16
changelog:
  - fix get_query_dn not looking in subtree for LDAP search (missed
    econd occurance).
  - allow additional common LDAP attributes in map dn.
  - Resolves: rhbz#205997


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.12
changelog:
  - fix "-fstype=nfs4" server probing (part 2 of bz 208757).
  - set close-on-exec flag on open files where possible (bz 207678).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.11
changelog:
  - fix file handle leak in nsswitch parser (bz 207678).
  - fix memory leak in mount and expire request processing (bz 207678).
  - add additional check to prevent running of cancelled tasks.
  - fix potential file handle leakage in rpc_subs.c for some failure
    cases (bz 207678).
  - fix file handle leak in included map lookup (bz 207678).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.10
changelog:
  - fix get_query_dn not looking in subtree for LDAP search.
  - allow syntax "--timeout <secs>" for backward compatibility
    (bz 193948).
  - make masked_match independent of hostname for exports comparison
    (bz 209638).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.7
changelog:
  - make default installed master map for /net use "-hosts" instead
    of auto.net.
  - fix included map recursive map key lookup.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.5
changelog:
  - fix LDAP lookup delete cache entry only if entry doesn't exist.
  - add missing socket close in replicated host check (Jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.1
changelog:
  - consolidate to rc2.
  - fix colon escape handling.
  - fix recusively referenced bind automounts.
  - update kernel patches.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.17
changelog:
  - fix task cancelation at shutdown (more)
  - fix concurrent mount and expire race with nested submounts.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.16
changelog:
  - fix included map lookup.
  - fix directory cleanup on expire.
  - fix task cancelation at shutdown.
  - fix included map wild card key lookup.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.15
changelog:
  - expire individual submounts.
  - add ino_index locking.
  - fix nested submount expiring away when pwd is base of submount.
  - more expire re-work to cope better with shutdown following cthon tests.
  - allow hostname to start with numeric when validating.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.14
changelog:
  - remove SIGCHLD handler because it is no longer needed and was
    causing expire problems.
  - alter expire locking of multi-mounts to lock sub-tree instead of
    entire tree.
  - review verbose message feedback and update.
  - correction for expire of multi-mounts.
  - spelling corrections to release notes (Jeff Moyer).
  - add back sloppy mount option, removed for Connectathon testing.
  - disable mtab locking again.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.6
changelog:
  - cthon more parser corrections and attempt to fix multi-mounts
    with various combinations of submounts (still not right).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-7
changelog:
  - correct directory cleanup in mount modules.
  - merge key and wildcard LDAP query for lookups (bz 197746).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-2
changelog:
  - merge LDAP authentication update for GSSAPI (Jeff Moyer).
  - update default auth config to add options documenetation (Jeff Moyer).
  - workaround segfaults at exit after using GSSAPI library.
  - fix not checking return in init_ldap_connection (jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-1
changelog:
  - consolidate to beta6, including:
    - mode change update for config file.
    - correction to get_query_dn fix from beta5-4.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-5
changelog:
  - allow global macro defines to override system macros.
  - correct spelling error in default config files missed by
    previous update.
  - misc correctness and a memory leak fix.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-4
changelog:
  - correct spelling error in default config.
  - fix default auth config not being installed.
  - change LDAP query method as my test db was incorrect.
  - change ldap defaults code to handle missing auth config.
  - fix mistake in parsing old style LDAP specs.
  - update LDAP so that new query method also works for old syntax.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-3
changelog:
  - lookup_init cleanup and fix missed memory leak.
  - use nis map order to check if update is needed.
  - fix couple of memory leaks in lookup_yp.c.
  - fix pasre error in replicated server module.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-13
changelog:
  - Change LDAP message severity from crit to degug (bz# 183893).
  - Corrections to INSTALL and README.v5.release.
  - Add patch to fix segv on overlength map keys in file maps (Jeff Moter).
  - Add patch to restrict scanning of /proc to pid directories only (Jeff Moyer).


author: Jeff Moyer <jmoyer@redhat.com> - 5.0.0_beta4-12
changelog:
  - Change BuildPrereq to BuildRequires as per the package guidelines.
  - Add libxml2-devel to the BuildRequires, as it is needed for the LDAP
    authentication bits.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-8
changelog:
  - fix handling of master map entry update (bz # 193718).
  - fix program map handling of invalid multi-mount offsets.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-6
changelog:
  - add free for working var in get_default_logging.
  - add inialisation for kver in autofs_point struct.
  - fix sources list corruption in check_update_map_sources.
  - fix memory leak in walk_tree.
  - fix memory leak in rpc_portmap_getport and rpc_ping_proto.
  - fix memory leak in initialisation of lookup modules.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-4
changelog:
  - check base of offset mount tree is not a mount before umounting
    its offsets.
  - fix replicated mount parse for case where last name in list
    fails lookup.
  - correct indirect mount expire broken by the wildcard lookup fix.
  - fix up multi-mount handling when wildcard map entry present.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-2
changelog:
  - re-instate v4 directory cleanup (bz# 193832 again).
  - backout master map lookup changes made to beta3.
  - change default master map from /etc/auto.master to auto.master
    so that we always use nsswitch to locate master map.
  - change default installed master map to include "+auto.master"
    to pickup NIS master map (all bz# 193831 again).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-6
changelog:
  - add back test for nested mount in program map lookup.
    - I must have commented this out for a reason. I guess we'll
      find out soon enough.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-3
changelog:
  - update hesiod module (Jeff Moyer).
    - add mutex to protect against overlapping mount requests.
    - update return from mount request to give more sensible NSS_*
      values.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-1
changelog:
  - update source to version 5.0.0_beta3.
  - add patch to remove extra debug print.
  - add patch to
    - fix memory alloc error in nis lookup module.
    - add "_" to "." mapname translation to nis lookup module.
  - add patch to add owner pid to mount list struct.
  - add patch to disable NFSv4 when probing hosts (at least foe now).
  - add patch to fix white space handling in replicated server selection code.
  - add patch to prevent striping of debug info macro patch (Jeff Moyer).
  - add patch to add sanity checks on rmdir_path and unlink (Jeff Moyer).
  - add patch to fix e2fsck error code check (Jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-23
changelog:
  - add patch to ignore the "bg" and "fg" mount options as they
    aren't relevant for autofs mounts (bz #184386).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-20
changelog:
  - add patch to use "cifs" instead of smbfs and escape speces
    in share names (bz #163999, #187732).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-18
changelog:
  - Add patch to allow customization of arguments to the
    autofs-ldap-auto-master program (bz #187525).
  - Add patch to escap "#" characters in exports from auto.net
    program mount (bz#178304).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-16
changelog:
  - Replace check-is-multi with more general multi-parse-fix.
  - Add fix for premature return when waiting for lock file.
  - Update copyright declaration for reentrant-syslog source.
  - Add patch for configure option to disable locking during mount.
    But don't disable locking by default.
  - Add ability to handle automount schema used in Sun directory server.
  - Quell compiler warning about getsockopt parameter.
  - Quell compiler warning about yp_order parameter.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-14
changelog:
  - Removed the /misc entry from the default auto.master.  auto.misc has
    an entry for the cdrom device, and the preferred method of mounting the
    cd is via udev/hal.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-12
changelog:
  - The sort command no longer accepts options of the form "+0".  This broke
    auto.net, so the option was removed.  Fixes bz #172111.


author: <jmoyer@redhat.com> - 1:4.1.4-10
changelog:
  - Fix some bugs in the parser
  - allow -net instead of /etc/auto.net
  - Fix a buffer overflow with large key lengths
  - Don't allow autofs to unlink files, only to remove directories
  - change to the upstream reentrant syslog patch from the band-aid deferred
    syslog patch.
  - Get rid of the init script patch that hard-coded the release to redhat.
    This should be handled properly by all red hat distros.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-8
changelog:
  - Add in the deferred syslog patch.  This fixes a hung automounter issue
    related to unsafe calls to syslog in signal handler context.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-7
changelog:
  - I reversed the checking for multimount entries, breaking those configs!
    This update puts the code back the way it was before I broke it.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-6
changelog:
  - Fix a race between mounting a share and updating the cache in the parent
    process.  If the mount completed first, the parent would not expire the
    stale entry, leaving it first on the list.  This causes map updates to not
    be recognized (well, worse, they are recognized after the first expire, but
    not subsequent ones).  Fixes a regression, bug #137026 (rhel3 bug).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-4
changelog:
  - Finish up with the merge breakage.
  - Temporary fix for the multimount detection code.  It seems half-baked.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-123
changelog:
  - Add in an error case that was omitted in the multi-over patch.
  - Update our auto.net to reflect the changes that went into 4.1.4_beta2.
    This fixes a problem seen by at least one customer where a malformed entry
    appeared first in the multimount list, thus causing the entire multimount
    to be ignored.  This new auto.net places that entry at the end, purely by
    luck, but it fixes the problem in this one case.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-119
changelog:
  - Merge in the multi-over patch.  This resolves an issue whereby multimounts
    (such as those used for /net) could be processed in the wrong order,
    resulting in directories not showing up in a multimount tree.  The fix
    is to process these directories in order, shortest to longer path.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-115
changelog:
  - Fixed regression causing any entries after a wildcard in an
    indirect map to be ignored. (bz #151668).
  - Fixed regression which caused local hosts to be mount instead
    of --bind local directories. (bz #146887)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-111
changelog:
  - Fixed one off bug in the submount-variable-propagation patch.
    (bz #143074)
  - Fixed a bug in the init script which wouldn't find the -browse
    option if it was preceded by another option. (fz #113494)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-100
changelog:
  - When using ldap if auto.master doesn't exist we now check for auto_master.
    Addresses bz #130079
  - When using an auto.smb map we now remove the leading ':' from the path which
    caused mount to fail in the past.  Addresses bz #147492
  - Autofs now checks /etc/nsswitch.conf to determine in what order files & nis
    are checked when looking up autofs submount maps which don't specify a
    maptype.  Addresses IT #57612.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-98
changelog:
  - Program maps can repeat the last character of output.  Fix this.  
    Addresses bz #138606
  - Return first entry when there are duplicate keys in a map.  Addresses
    bz #140108.
  - Propagate custom map variables to submounts.  Fixes bz #143074.
  - Create a sysconfig variable to control whether we source only one master
    map (the way sun does), or source all maps found (which is the default for
    backwards compatibility).  Addresses bz #143126.
  - Revised version of the get_best_mount patch. (#146887) cfeist@redhat.com
    The previous patch introduced a regression.  Non-replicated mounts would
    not have the white space stripped from the entry and the mount would fail.
  - Handle comment characters in the middle of the automount line in
    /etc/nsswitch.conf.  Addresses bz #127457.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-90
changelog:
  - Fix potential double free in cache_release.  This bug showed up in a
    multi-map setup.  Two calls to cache_release would result in a SIGSEGV,
    and the automount process would never exit.


author: Chris Feist <cfeist@redhat.com> - 1:4.3-80
changelog:
  - Added a variable to determine if we created the directory or not
    so we don't accidently remove a directory that we didn't create when
    we stop autofs.  (bz #134399)


author: <jmoyer@redhat.com> - 1:4.1.3-74
changelog:
  - Add in the map expiry patch
  - Bring in other patches that have been committed to other branches. This 
    version should now contain all fixes we have to date
  - Merge conflicts due to map expiry changes


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-57
changelog:
  - Pass a socket into clntudp_bufcreate so that we don't use up additional 
    reserved ports.  This patch, along with the socket leak fix, addresses
    bz #128966.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-55
changelog:
  - Fix program maps so that they can have gt 4k characters. (Neil Horman)
    Addresses bz #138994.
  - Add a space after the colon here "Starting automounter:" in init script.
    Fixes bz #138513.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-34
changelog:
  - Added a patch to fix the automounter failing on ldap maps
    when it couldn't get the whole map.  (ie. when the search
    limit was lower than the number of results)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-32
changelog:
  - Fixed the use of +ypmapname so the maps included with +ypmapname
    are used in the correct order.  (In the past the '+' entries
    were always processed after local entries.)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-29
changelog:
  - Fixed a problem with backwards compatability. Specifying local
    maps without '/etc/' prepended to them now works. (bz #136038)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-27
changelog:
  - Fixed an error in the init script which caused duplicate entries to be
    displayed when asking for autofs status.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-20
changelog:
  - Merged my and Ian's socket leak fixes into one, smaller patch. Only
    partially addresses bz #128966.
  - Fix some more echo lines for internationalization. bz #77820
  - Revert the only one auto.master patch until we implement the +auto_master
    syntax.  Temporarily addresses bz #133055.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-18
changelog:
  - Umount loopback filesystems under automount points when stopping the 
    automounter.
  - Uncomment the map expiry patch.
  - change a close to an fclose in lookup_file.c


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-17
changelog:
  - Add patch to support parsing nsswitch.conf to determine map sources.
  - Disable this patch, and Ian's map expiry patch for a FC build.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-15
changelog:
  - Fix a socket leak in the rpc_subs, causing mounts to fail since we are 
    running out of port space fairly quickly.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-14
changelog:
  - New map expiry patch from Ian.
  - Fix a couple signal races.  No known problem reports of these, but they
    are holes, none-the-less.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-13
changelog:
  - Only read one auto.master map (instead of concatenating all found sources).
  - Uncomment Ian's experimental mount expiry patch.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-12
changelog:
  - Add a sysconfig entry to disable direct map support, and set this to 
    1 by default.
  - Disable the beta map expiry logic so I can build into a stable distro.
  - Add defaults for all of the sysconfig variables to the init script so 
    we don't trip over user errors (i.e. deleting /etc/sysconfig/autofs).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-11
changelog:
  - Add beta map expiry code for wider testing. (Ian Kent)
  - Fix check for ghosting option.  I forgot to check for it in DAEMONOPTIONS.
  - Remove STRIPDASH from /etc/sysconfig/autofs


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-10
changelog:
  - Add bad chdir patch from Ian Kent.
  - Add a typo fix for the mtab lock file.
  - Nuke the stripdash patch.  It didn't solve a problem.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-8
changelog:
  - Change icmp ping to an rpc ping.  (Ian Kent)
  - Fix i18n patch
    o Remove the extra \" from one echo line.
    o Use echo -e if we are going to do a \n in the echo string.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-4
changelog:
  - Perform an icmp ping request before rpc_pings, since the rpc clnt_create
    function has a builtin default timeout of 60 seconds.  This could result
    in a long delay when a server in a replicated mount setup is down.
  - For non-replicated server entries, ping a host before attempting to mount.
    (Ian Kent)
  - Change to %configure.
  - Put version-release into .version to allow for automount --version to
    print exact info.
  - Nuke my get-best-mount patch which always uses the long timeout.  This
    should no longer be needed.
  - Put name into changelog entries to make them consistent.  Add e:n-v-r
    into Florian's entry.
  - Stop autofs before uninstalling


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-2
changelog:
  - Incorporate patch from Ian which fixes an infinite loop seen by those
    running older versions of the kernel patches (triggered by non-strict mounts
    being the default).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-6
changelog:
  - The lookup_yp module only dealt with YPERR_KEY, all other errors were 
    treated as success.  As a result, if the ypdomain was not bound, the 
    subprocess that starts mounts would SIGSEGV.  This is now fixed.
  - Option parsing in the init script was not precise enough, sometimes matching
    filesystem options to one of --ghost, --timeout, --verbose, or --debug.  
    The option-parsing patch addresses this issue by making the regexp's much
    more precise.
  - Ian has rolled a third version of the replicated mount fixes.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-5
changelog:
  - Ian has a new fix for replicated server and multi-mounts.  Updated the 
    patch for testing.  Still beta.  (Ian Kent)


author: <jmoyer@redhat.com> - 1:4.1.2-2
changelog:
  - Pass --libdir= to ./configure so we get this right on 64 bit platforms that 
    support backwards compat.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-1
changelog:
  - Change hard-coded paths in the spec file to the %{_xxx} variety.
  - Update to upstream 4.1.2.
  - Add a STRIPDASH option to /etc/sysconfig/autofs which allows for
    compatibility with the Sun automounter options specification syntax in
    auto.master.  See /etc/sysconfig/autofs for more information.  Addresses
    bug 113950.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-6
changelog:
  - Add the /etc/sysconfig/autofs file, and supporting infrastructure in 
    the init script.
  - Add support for UNDERSCORE_TO_DOT for those who want it.
  - We no longer own /net.  Move it to the filesystem package.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-5
changelog:
  - Clarify documentation on direct maps.
  - Send automount daemons a HUP signal during reload.  This tells them to 
    re-read maps (otherwise they use a cached version.  Patch from the autofs
    maintainer.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-3
changelog:
  - Fix bug in get_best_mount, whereby if there is only one option, we 
    choose nothing.  This is primarily due to the fact that we pass 0 in to
    the get_best_mount function for the long timeout parameter.  So, we
    timeout trying to contact our first and only server, and never retry.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.0-7
changelog:
  - Moved the freeing of ap.path to cleanup_exit, as we would otherwise 
    reference an already-freed variable.


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-5
changelog:
  - make the init script only recognize redhat systems.  Nalin seems to remember
    some arcane build system error that can be caused if we don't do this.


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-4
changelog:
  - comment out /net and /misc from the default auto.master.  /net is important
    since in a default shipping install, we can neatly co-exist with amd.


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-3
changelog:
  - Ported forward Red Hat's patches from 3.1.7 that were not already present
    in 4.1.0.
  - Moving autofs from version 3.1.7 to 4.1.0


author: Ian Kent <raven@themaw.net>
changelog:
  - Checked and merged most of the RedHat v3 patches
  - Fixed kernel module handling wu-ftpd login problem (again)


author: Ian Kent <raven@themaw.net>
changelog:
  - Removed ineffective lock stuff
  - Added -n to bind mount to prevent mtab update error
  - Added retry to autofs umount to clean matb after fail
  - Redirected messages from above to debug log and added info message
  - Fixed autofs4 module reentrancy, pwd and chroot handling


author: Ian Kent <raven@themaw.net>
changelog:
  - Fixed autofs4 ghosting patch for 2.4.19 and above (again)
  - Fixed autofs directory removal on failure of autofs mount
  - Fixed lock file wait function overlapping calls to (u)mount


author: Ian Kent <raven@themaw.net>
changelog:
  - Implemented LDAP direct map handling for nisMap and automountMap schema
  - Fixed autofs4 ghosting patch for 2.4.19 and above (again)
  - Added locking to fix overlapping internal calls to (u)mount 
  - Added wait for mtab~ to improve tolerance of overlapping external calls to (u)mount
  - Fixed ghosted directory removal after failed mount attempt


author: Ian Kent <raven@themaw.net>
changelog:
  - Cleaned up an restructured my added code
  - Corrected ghosting problem with 2.4.19 and above
  - Added autofs4 ghosting patch for 2.4.19 and above
  - Implemented HUP signal to force update of ghosted maps


author: Ian Kent <ian.kent@pobox.com>
changelog:
  - Add patch to implement directory ghosting and direct mounts
  - Add patch to for autofs4 module to support ghosting


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.2.4-11
changelog:
  - use _pkgdocdir if available (#994097)
  - build static objects in build section
  - make some dependencies arch-specific


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.1.2-2
changelog:
  - fix integer underflow in compute_hash (#302181)
  - fix SLang_set_error when called from signal handler (#297661)


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.0.7-2
changelog:
  - ignore background color of trailing spaces if terminal has bce (#217276)
  - move static library to -static subpackage
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 2.0.6-1
changelog:
  - update to slang-2.0.6
  - move .so.2 link to main package
  - don't package static library and utf8 link
  - remove requires for libtool and libtermcap
  - rearrange doc files (#191583)


author: Petr Raszyk <praszyk@redhat.com> - 2.0.5-5
changelog:
  - A patch by Bill Nottingham <notting@redhat.com>
    (#174761). slang-LANG.patch
    slang reads automatically sh-env-variable LANG.


author: Petr Raszyk <praszyk@redhat.com> - 1.4.9-22
changelog:
  - libslang-utf8.so should not use the symbol __libc_enable_secure 
  - (#161536). slang-nointerlibc.patch
  - Additional some comments/hints for C-Frame 121


author: Petr Rockai <prockai@redhat.com> - 1.4.9-17
changelog:
  - Patch to compile with gcc4 by Robert Scheck (#151029). (Weeird,
    probably on march 2nd the used buildroot wasn't updated with
    gcc4 yet?).


author: Adrian Havill <havill@redhat.com> 1.4.9-1
changelog:
  - big upgrade to 1.4.9
  - manually redid partially rotted utf patch for sldisply.c
  - no longer necessary to chmod the so files
  - change copyright header to license


author: Bill Nottingham <notting@redhat.com> 1.4.5-9
changelog:
  - tweak UTF-8 linedrawing patch slightly; add README describing some of
    the changes
  - fix a utee/dtee typo


author: Donnie Barnes <djb@redhat.com>
changelog:
  - upgraded to 0.99.38 (will it EVER go 1.0???)
  - all patches removed (all appear to be in this version)


author: Paul Howarth <paul@city-fan.org> - 1.1903-1
changelog:
  - Update to 1.1903
    - Fix documentation typos (CPAN RT#84981)
    - Add -w and -i switches to diffnew.pl (CPAN RT#69945)
    - Remove Algorithm::DiffOld from the index; the module is still distributed
      with Algorithm::Diff, but is not indexed on CPAN because this is an
      ***UNAUTHORIZED*** release of Algorithm::DiffOld
  - Add patch to generate provide for perl(Algorithm::DiffOld)
  - Drop %defattr, redundant since rpm 4.4
  - General spec tidy-up


author: Paul Howarth <paul@city-fan.org> - 6.3-2
changelog:
  - resolves: #1115432
    fix 0003-add-TTY-input-audit-support.patch not to revert readline version
    number to 6.2


author: Miroslav Lichvar <mlichvar@redhat.com> 6.0-3
changelog:
  - include patch 004
  - suppress install-info errors (#515910)
  - remove dir* in infodir after install (#492097)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.2-8
changelog:
  - fix cursor position when prompt has one invisible character (#358231)
  - merge review fixes (#226361)
  - fix source URL


author: Miroslav Lichvar <mlichvar@redhat.com> 5.2-3
changelog:
  - link libreadline with libtinfo (#232277)
  - include upstream 5.2-001 patch
  - move static libraries to -static subpackage, spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> 5.2-1
changelog:
  - update to 5.2 (#213795)
  - use CFLAGS when linking (#199374)
  - package docs and examples (#172497)
  - spec cleanup


author: Jindrich Novy <jnovy@redhat.com> 5.1-1
changelog:
  - update to readline-5.1
  - apply new proposed upstream patches for 5.1 (001-004)
  - drop "read -e" patch, applied upstream


author: Matt Wilson <msw@redhat.com> 4.2a-2
changelog:
  - removed the manual symlinking of .so, readline handles this by itself
  - call only %makeinstall, not %makeinstall install install-shared as
    this makes bogus .old files in the buildroot


author: Bernhard Rosenkraenzer <bero@redhat.com> 4.2-3
changelog:
  - Don't use readline's internal re-implementation of strpbrk on systems
    that have strpbrk - the system implementation is faster and better maintained.


author: Bernhard Rosenkraenzer <bero@redhat.com> 4.2-2
changelog:
  - Make sure headers can be included from C++ applications (#51131)
    (Patch based on Debian's with the bugs removed ;) )


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change the paths listed for the header files in the man page to reflect
    the location changes from previous versions (#35073)
  - note that "on" is acceptable instead of "On" in the man page (#21327)


author: EL Errata <el-errata_ww@oracle.com> - 2.02-81.0.1.el8
changelog:
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Copy symvers.gz to /boot during kernel install [Orabug: 29773086]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - update Oracle Linux certificates (Alexey Petrenko)
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-80
changelog:
  - Fix PRIxGRUB_EFI_STATUS definition
    Related: rhbz#1761811
  - TPM: Print messages if measuraments fail as debug instead of error
    Resolves: rhbz#1761811
  - unix/platform: Initialize variable to fix grub-install on UEFI system
    Resolves: rhbz#1768689
  - blscfg: add a space char when appending fields for variable expansion
    Resolves: rhbz#1669252


author: Peter Jones <pjones@redhat.com> - 2.02-71
changelog:
  - Fix (a fourth time, due to a typo) how LDFLAGS works on non-efi platforms.
    Related: rhbz#1653961


author: Peter Jones <pjones@redhat.com> - 2.02-70
changelog:
  - Fix (once again) how CFLAGS and LDFLAGS propogate the settings for hardened
    builds, because rpmdiff doesn't like the current way failing.
    Related: rhbz#1653961


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-68
changelog:
  - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
    Resolves: rhbz#1680572
  - Try to set -fPIE and friends on libgnu.a (pjones)
  - blscfg: fallback to default_kernelopts if BLS option field isn't set
    Related: rhbz#1680572
  - Remove bogus load_env after blscfg command in 10_linux


author: Peter Jones <pjones@redhat.com> - 2.02-65
changelog:
  - Don't build the grub2-efi-ia32-* packages on i686; it causes multilib
    errors and we don't ship the result anyway.
    Related: rhbz#1637875


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-64
changelog:
  - Make grub2-mkconfig to honour GRUB_CMDLINE_LINUX in /etc/default/grub
    Resolves: rhbz#1637875
  - docs: Stop using polkit / pkexec for grub-boot-success.timer / service
    Resolves: rhbz#1655687


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-63
changelog:
  - BLS files should only be copied by grub-switch-to-blscfg if BLS isn't set
    Related: rhbz#1638117
  - Fix get_entry_number() wrongly dereferencing the tail pointer
    Resolves: rhbz#1654936


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-62
changelog:
  - Drop "Be more aggro about actually using the *configured* network device."
    Resolves: rhbz#1654388
  - Fix menu entry selection based on title
    Resolves: rhbz#1654936


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-61
changelog:
  - Drop buggy downstream patch "efinet: retransmit if our device is busy"
    Resolves: rhbz#1649048
  - Make the menu entry users option argument to be optional
    Related: rhbz#1652434
  - 10_linux_bls: add missing menu entries options
    Resolves: rhbz#1652434


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-60
changelog:
  - Remove quotes when reading ID value from /etc/os-release
    Related: rhbz#1650706
  - blscfg: expand grub_users before passing to grub_normal_add_menu_entry()
    Resolves: rhbz#1650706


author: Peter Jones <pjones@redhat.com> - 2.02-56
changelog:
  - Rebuild for signing
    Resolves: rhbz#1625565
  - blscfg: Make 10_linux_bls sort the same way as well
    Related: rhbz#1638103


author: Peter Jones <pjones@redhat.com> - 2.02-54
changelog:
  - kernel-install: Remove existing initramfs if it's older than the kernel
    Resolves: rhbz#1638405
  - Update the saved entry correctly after a kernel install
    Resolves: rhbz#1638117


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-51
changelog:
  - add 10_linux_bls grub.d snippet to generate menu entries from BLS files
    Resolves: rhbz#1636013
  - Fix syntax issues in 01_fallback_counting.in
    Resolves: rhbz#1615954


author: pjones <pjones@redhat.com> - 1:2.02-50
changelog:
  - Disable TPM (again) on BIOS; it really does not work reliably.
    Resolves: rhbz#1579835
  - Make blscfg module loadable on other grub2 builds
    Resolves: rhbz#1633646
  - Include blscfg module on ppc builds
    Related: rhbz#1633646
  - Fix rpmdiff complaints about execstack
    Related: rhbz#1633646


author: Peter Jones <pjones@redhat.com> - 2.02-48
changelog:
  - Go back to forcing all allocations on x86_64 to be 32-bit, as many UEFI
    implementations seem to have drivers with DMA issues for addresses
    above 4GB.
    Resolves: rhbz#1628346


author: Peter Jones <pjones@redhat.com> - 2.02-47
changelog:
  - BLS fixes from the F29 tree
    - Use /boot/loader/entries as BLS dir also on EFI systems
    - Make 20-grub.install to exit if there is no machine ID set
    - More fixes for BLS
    Resolves: rhbz#1620954


author: Peter Jones <pjones@redhat.com> - 2.02-42
changelog:
  - Fix some minor BLS issues
  - Rework the FDT module linking to make aarch64 build and boot right
    Resolves: rhbz#1601835


author: Hans de Goede <hdegoede@redhat.com>
changelog:
  - Make the user session automatically set the boot_success grubenv flag
  - Make offline-updates increment the boot_indeterminate grubenv variable


author: Peter Jones <pjones@redhat.com> - 2.02-37
changelog:
  - Fixups to work with gcc 8
  - Experimental https boot support on UEFI
  - XFS fixes for sparse inode support
    Resolves: rhbz#1575797


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-36
changelog:
  - Use version field to sort BLS entries if id field isn't defined
  - Add version field to BLS fragments generated by 20-grub.install


author: Peter Jones <pjones@redhat.com> - 2.02-34
changelog:
  - Put the os-prober dep back in - we need to change test plans and criteria
    before it can go.
    Resolves: rhbz#1569411


author: Peter Jones <pjones@redhat.com> - 2.02-33
changelog:
  - Work around some issues with older automake found in CentOS.
  - Make multiple initramfs images work in BLS.


author: Peter Jones <pjones@redhat.com> - 2.02-26
changelog:
  - Try to fix things for new compiler madness.
    I really don't know why gcc decided __attribute__((packed)) on a "typedef
    struct" should imply __attribute__((align (1))) and that it should have a
    warning that it does so.  The obvious behavior would be to keep the alignment
    of the first element unless it's used in another object or type that /also/
    hask the packed attribute.  Why should it change the default alignment at
    all?
  - Merge in the BLS patches Javier and I wrote.
  - Attempt to fix pmtimer initialization failures to not be super duper slow.


author: Peter Jones <pjones@redhat.com> - 2.02-24
changelog:
  - Fix a merge error from 2.02-21 that affected kernel loading on Aarch64.
    Related: rhbz#1519311
    Related: rhbz#1506704
    Related: rhbz#1502312


author: Peter Jones <pjones@redhat.com> - 2.02-23
changelog:
  - Only nerf annobin, not -fstack-crash-protection.
  - Fix a conflict on /boot/efi directory permissions between -cdboot and the
    normal bootloader.


author: Peter Jones <pjones@redhat.com> - 2.02-21
changelog:
  - Fix grub2-efi-modules provides/obsoletes generation
    Resolves: rhbz#1506704
  - *Also* build grub-efi-ia32{,-*,!-modules} packages for i686 builds
    Resolves: rhbz#1502312
  - Make everything under /boot/efi be mode 0700, since that's what FAT will
    show anyway.


author: Peter Jones <pjones@redhat.com> - 2.02-20
changelog:
  - Update to newer upstream for F28
  - Pull in patches for Apollo Lake hardware
    Resolves: rhbz#1519311


author: Peter Jones <pjones@redhat.com> - 2.02-14
changelog:
  - Revert the /usr/lib/.build-id/ change:
    https://fedoraproject.org/wiki/Changes/ParallelInstallableDebuginfo
    says (without any particularly convincing reasoning):
      The main build-id file should not be in the debuginfo file, but in the
      main package (this was always a problem since the package and debuginfo
      package installed might not match). If we want to make usr/lib/debug/ a
      network resource then we will need to move the symlink to another
      location (maybe /usr/lib/.build-id).
    So do it that way.  Of course it doesn't matter, because exclude gets
    ignored due to implementation details.


author: Peter Jones <pjones@redhat.com> - 2.02-13
changelog:
  - Add some unconditional Provides:
    grub2-efi on grub2-efi-${arch}
    grub2-efi-cdboot on grub2-efi-${arch}-cdboot
    grub2 on all grub2-${arch} pacakges
  - Something is somehow adding /usr/lib/.build-id/... to all the -tools
    subpackages, so exclude all that.


author: Peter Jones <pjones@redhat.com> - 2.02-12
changelog:
  - Fix arm kernel command line allocation
    Resolves: rhbz#1484609
  - Get rid of the temporary extra efi packages hack.


author: Peter Jones <pjones@redhat.com> - 2.02-11
changelog:
  - Put grub2-mkimage in -tools, not -tools-extra.
  - Fix i686 building
  - Fix ppc HFS+ usage due to /boot/efi's presence.


author: Peter Jones <pjones@redhat.com> - 2.02-0.34
changelog:
  - Fix power6 makefile bits for newer autoconf defaults.
  - efi/chainloader: fix wrong sanity check in relocate_coff() (Laszlo Ersek)
    Resolves: rhbz#1347291


author: Peter Jones <pjones@redhat.com> - 2.02-0.25
changelog:
  - Fix security issue when reading username and password
    Related: CVE-2015-8370
  - Do a better job of handling GRUB2_PASSWORD
    Related: rhbz#1284370


author: Peter Jones <pjones@redhat.com> - 2.02-0.21
changelog:
  - Back out one of the debuginfo generation patches; it doesn't work right on
    aarch64 yet.
    Resolves: rhbz#1250197


author: Peter Jones <pjones@redhat.com> - 2.02-0.17
changelog:
  - Don't build hardened (fixes FTBFS) (pbrobinson)
  - Reconcile with the current upstream
  - Fixes for gcc 5


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 2.02-0.14
changelog:
  - Move grub2.info/grub2-dev.info install-info scriptlets into *-tools package.
  - Use sub-shell in %__debug_install_post (RHBZ#1168732).
  - Cleanup grub2-starfield-theme packaging.


author: Peter Jones <pjones@redhat.com> - 2.02-0.12
changelog:
  - Make backtrace and usb conditional on !arm
  - Make sure gcdaa64.efi is packaged.
    Resolves: rhbz#1163481


author: Peter Jones <pjones@redhat.com> - 2.02-0.10
changelog:
  - Try to emit linux16/initrd16 and linuxefi/initrdefi when appropriate
    in 30_os-prober.
    Resolves: rhbz#1108296
  - If $fw_path doesn't work to find the config file, try $prefix as well
    Resolves: rhbz#1148652


author: Peter Jones <pjones@redhat.com> - 2.02-0.9
changelog:
  - Clean up the build a bit to make it faster
  - Make grubenv work right on UEFI machines
    Related: rhbz#1119943
  - Sort debug and rescue kernels later than normal ones
    Related: rhbz#1065360
  - Allow "fallback" to include entries by title as well as number.
    Related: rhbz#1026084
  - Fix a segfault on aarch64.
  - Load arm with SB enabled if available.
  - Add some serial port options to GRUB_MODULES.


author: Peter Jones <pjones@redhat.com> - 2.00-19
changelog:
  - Rebase to upstream snapshot.
  - Fix PPC build error (#967862)
  - Fix crash on net_bootp command (#960624)
  - Reset colors on ppc when appropriate (#908519)
  - Left align "Loading..." messages (#908492)
  - Fix probing of SAS disks on PPC (#953954)
  - Add support for UEFI OSes returned by os-prober
  - Disable "video" mode on PPC for now (#973205)
  - Make grub fit better into the boot sequence, visually (#966719)


author: Matthias Clasen <mclasen@redhat.com> - 2.00-18
changelog:
  - Move the starfield theme to a subpackage (#962004)
  - Don't allow SSE or MMX on UEFI builds (#949761)


author: Peter Jones <pjones@redhat.com> - 2.00-17
changelog:
  - Fix booting from drives with 4k sectors on UEFI.
  - Move bash completion to new location (#922997)
  - Include lvm support for /boot (#906203)


author: Peter Jones <pjones@redhat.com> - 2.00-16
changelog:
  - Allow the user to disable submenu generation
  - (partially) support BLS-style configuration stanzas.


author: Peter Jones <pjones@redhat.com> - 2.00-13
changelog:
  - Add vlan tag support (pfsmorigo, #871563)
  - Follow symlinks during PReP installation in grub2-install (pfsmorigo, #874234)
  - Improve search paths for config files on network boot (pfsmorigo, #873406)


author: Peter Jones <pjones@redhat.com> - 2.00-10
changelog:
  - Various PPC fixes.
  - Fix crash fetching from http (gustavold, #860834)
  - Issue separate dns queries for ipv4 and ipv6 (gustavold, #860829)
  - Support IBM CAS reboot (pfsmorigo, #859223)
  - Include all modules in the core image on ppc (pfsmorigo, #866559)


author: Peter Jones <pjones@redhat.com> - 2.00-8
changelog:
  - Don't error on insmod on UEFI/SB, but also don't do any insmodding.
  - Increase device path size for ieee1275
    Resolves: rhbz#857936
  - Make network booting work on ieee1275 machines.
    Resolves: rhbz#857936


author: Peter Jones <pjones@redhat.com> - 2.00-5
changelog:
  - Work around AHCI firmware bug in efidisk driver.
  - Move to newer pesign macros
  - Don't allow insmod if we're in secure-boot mode.


author: Peter Jones <pjones@redhat.com>
changelog:
  - Split module lists for UEFI boot vs UEFI cd images.
  - Add raid modules for UEFI image (related: #750794)
  - Include a prelink whitelist for binaries that need execstack (#839813)
  - Include fix efi memory map fix from upstream (#839363)


author: Peter Jones <pjones@redhat.com> - 2.00-4
changelog:
  - Correct grub-mkimage invocation to use efidir RPM macro (jwb)
  - Sign with test keys on UEFI systems.
  - PPC - Handle device paths with commas correctly.
    Related: rhbz#828740


author: Peter Jones <pjones@redhat.com> - 2.00-3
changelog:
  - Add some more code to support Secure Boot, and temporarily disable
    some other bits that don't work well enough yet.
    Resolves: rhbz#836695


author: Matthew Garrett <mjg@redhat.com> - 2.00-2
changelog:
  - Set a prefix for the image - needed for installer work
  - Provide the font in the EFI directory for the same reason


author: Peter Jones <pjones@redhat.com> - 2.0-0.28.beta5
changelog:
  - Name grub.efi something that's arch-appropriate (kiilerix, pjones)
  - use EFI/$SOMETHING_DISTRO_BASED/ not always EFI/redhat/grub2-efi/ .
  - move common stuff to -tools (kiilerix)
  - spec file cleanups (kiilerix)


author: Peter Jones <pjones@redhat.com> - 2.0-0.27.beta5
changelog:
  - Fix license of theme (mizmo)
    Resolves: rhbz#820713
  - Fix some PPC bootloader detection IBM problem
    Resolves: rhbz#820722


author: Peter Jones <pjones@redhat.com> - 2.0-0.26.beta5
changelog:
  - Update to beta5.
  - Update how efi building works (kiilerix)
  - Fix theme support to bring in fonts correctly (kiilerix, pjones)


author: Peter Jones <pjones@redhat.com> - 2.0-0.20
changelog:
  - Fix ppc64 vs ppc exclude according to what dwa tells me they need
  - Fix version number to better match policy.


author: Peter Jones <pjones@redhat.com> - 1.99-17
changelog:
  - Update for newer autotools and gcc 4.7.0
    Related: rhbz#782144
  - Add /etc/sysconfig/grub link to /etc/default/grub
    Resolves: rhbz#800152
  - ExcludeArch s390*, which is not supported by this package.
    Resolves: rhbz#758333


author: Peter Jones <pjones@redhat.com> - 1.99-12
changelog:
  - Lots of .spec fixes from Mads Kiilerich:
    Remove comment about update-grub - it isn't run in any scriptlets
    patch info pages so they can be installed and removed correctly when renamed
    fix references to grub/grub2 renames in info pages (#743964)
    update README.Fedora (#734090)
    fix comments for the hack for upgrading from grub2 < 1.99-4
    fix sed syntax error preventing use of $RPM_OPT_FLAGS (#704820)
    make /etc/grub2*.cfg %config(noreplace)
    make grub.cfg %ghost - an empty file is of no use anyway
    create /etc/default/grub more like anaconda would create it (#678453)
    don't create rescue entries by default - grubby will not maintain them anyway
    set GRUB_SAVEDEFAULT=true so saved defaults works (rbhz#732058)
    grub2-efi should have its own bash completion
    don't set gfxpayload in efi mode - backport upstream r3402
  - Handle dmraid better. Resolves: rhbz#742226


author: Adam Williamson <awilliam@redhat.com> - 1.99-10
changelog:
  - /etc/default/grub is explicitly intended for user customization, so
    mark it as config(noreplace)


author: Peter Jones <pjones@redhat.com> - 1.99-6
changelog:
  - Use mv not cp to try to avoid moving disk blocks around for -5 fix
    Related: rhbz#735259
  - handle initramfs on xen better (patch from Marko Ristola)
    Resolves: rhbz#728775


author: Peter Jones <pjones@redhat.com> - 1.99-4
changelog:
  - Don't do sysadminny things in %preun or %post ever. (#735259)
  - Actually include the changelog in this build (sorry about -3)


author: Peter Jones <pjones@redhat.com> - 1.99-2
changelog:
  - Require os-prober (#678456) (patch from Elad Alfassa)
  - Require which (#734959) (patch from Elad Alfassa)


author: Peter Jones <pjones@redhat.com> - 1.99-1
changelog:
  - Update to grub-1.99 final.
  - Fix crt1.o require on x86-64 (fix from Mads Kiilerich)
  - Various CFLAGS fixes (from Mads Kiilerich)
    - -fexceptions and -m64
  - Temporarily ignore translations (from Mads Kiilerich)


author: Tomáš Mráz <tmraz@redhat.com> 1.8.3-3
changelog:
  - add CMAC selftest for FIPS POST
  - add continuous FIPS entropy test
  - disable non-approved FIPS hashes in the enforced FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.8.3-2
changelog:
  - make only_urandom a default in non-presence of configuration file
  - run the full FIPS selftests only when the library is called from
    application


author: Tomáš Mráz <tmraz@redhat.com> 1.6.3-3
changelog:
  - touch only urandom in the selftest and when /dev/random is
    unavailable for example by SELinux confinement
  - fix the RSA selftest key (p q swap) (#1204517)


author: Kyle McMartin <kyle@fedoraproject.org> 1.6.1-4
changelog:
  - Re-enable below algos, apply patch from upstream list to make
    that code -fPIC friendly. (rhbz#1069792)


author: Kyle McMartin <kyle@fedoraproject.org> 1.6.1-3
changelog:
  - Disable rijndael, cast5, camellia ARM assembly, as it's non-PIC as
    presently written, which results in .text relocations in the shared
    library. (rhbz#1069792)


author: Tomáš Mráz <tmraz@redhat.com> 1.6.1-1
changelog:
  - new upstream version breaking ABI compatibility
  - this release temporarily includes old compatibility .so


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-3
changelog:
  - add back the nistp521r1 EC curve
  - fix a bug in the Whirlpool hash implementation
  - speed up the PBKDF2 computation


author: Tomas Mraz <tmraz@redhat.com> 1.5.0-8
changelog:
  - fix multilib conflict in libgcrypt-config
  - fix minor memory leaks and other bugs found by Coverity scan


author: Tomas Mraz <tmraz@redhat.com> 1.4.6-3
changelog:
  - Make the FIPS-186-3 DSA implementation CAVS testable
  - add configurable source of RNG seed /etc/gcrypt/rngseed
    in the FIPS mode (#700388)


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-5
changelog:
  - use /dev/urandom for seeding in the FIPS mode
  - make the tests to pass in the FIPS mode also fixing
    the FIPS-186-3 DSA keygen


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-3
changelog:
  - drop the S390 build workaround as it is no longer needed
  - additional spec file cleanups for merge review (#226008)


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-1
changelog:
  - workaround for build on S390 (#548825)
  - spec file cleanups
  - upgrade to new minor upstream release


author: Tomas Mraz <tmraz@redhat.com> 1.4.4-1
changelog:
  - update to 1.4.4
  - do not abort when the fips mode kernel flag is inaccessible
    due to permissions (#470219)
  - hobble the library to drop the ECC support


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1
  - bump libgpgerror-devel requirement to 1.4, matching the requirement enforced
    by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-5
changelog:
  - add missing gawk buildrequirement
  - switch from explicitly specifying the /dev/random RNG to just verifying
    that the non-LGPL ones were disabled by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-4
changelog:
  - clarify license
  - force use of the linux /dev/random RNG, to avoid accidentally falling back
    to others which would affect the license of the resulting library


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-2
changelog:
  - remove file conflicts in libgcrypt-config by making the 64-bit version
    think the libraries are in /usr/lib (which is wrong, but which it also
    prunes from the suggest --libs output, so no harm done, hopefully)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.1.7
  - change license to LGPL.
  - include splint annotations patch.
  - install info pages.


author: Josef Ridky <jridky@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6 (#1468062)
  - Fix issue with capital letters in commands in manpage (#1468984)


author: Christopher Meng <rpm@cicku.me> - 1.4.8-1
changelog:
  - Updated to freeipmi-1.4.8
   - Fix segfault in crypt code with libgcrypt versions >= 1.6.0.
   - Fix --fanout command line parse bug.
   - Fix typ - from FRU spec, language "Tegulu" is actually "Telugu".
   - Fix typ - in SEL session output, "Invalid Username of Password" to
    "Invalid Username or Password".
   - Loop on select() call if interrupted by EINTR in openipmi, ssif, and
    sunbmc inband drivers.
   - Fix integer overflow bug in ipmi-config when configure vlan ID > 255.
   - Add workaround for ipmi-config issue on Supermicr - X10DDW-i.
   - Fix error handling bug in bmc-info.


author: Ales Ledvinka <aledvink@redhat.com> - 1.4.6-1
changelog:
  - Updated to upstream freeipmi-1.4.6
   - In ipmi-fru, support output of DDR4 SDRAM modules.
   - Fix EFI probing on non IA64 systems.
   - Fix corner case in ipmi-raw w/ standard input or --file and empty lines.
   - Fix parsing corner case in ipmi-chassis.
   - Support SSIF bridging.
   - Fix libipmiconsole calculation bug w/ SOL character send size.
   - Support Supermicro H8DGU and H8DG6 OEM sensors and events.
   - Minor documentation updates.


author: Ales Ledvinka <aledvink@redhat.com> - 1.4.3-1
changelog:
  - Updated to upstream freeipmi-1.4.3
   - In ipmi-oem, support Supermicro get-power-supply-status and
     get-pmbus-power-supply-status commands.
   - Support 'ipmiping' workaround in ipmipower.
   - Minor documentation updates.


author: Ales Ledvinka <aledvink@redhat.com> - 1.4.1-1
changelog:
  - Updated to upstream freeipmi-1.4.1
   - Support new tool ipmi-config.  Ipmi-config is a consolidated
     configuration tool implementing everything that was previously in
     bmc-config, ipmi-pef-config, ipmi-sensors-config, and
     ipmi-chassis-config.
     - The consolidated tool will allow users to checkout, commit, and
       diff sections/fields across the four former tools using only one
       tool.
     - The consolidated tool will also allow users to checkout, commit,
       and diff new sections/fields not yet covered in the four former
       tools.
     - Legacy scripts for bmc-config, ipmi-pef-config,
       ipmi-sensors-config, and ipmi-chassis-config will point to the new
       tool with all appropriate options to ensure full backwards
       compatability.
     - The ipmi-pef-config --info option has been made legacy.  It is
       still supported but no longer advertised.
   - Support Intel Data Center Host Interface / Management Engine as
     optional driver type for in-band communication.
     - Typically these are loaded as /dev/dcmi and /dev/mei drivers.
     - This driver is identified as the "inteldcmi" type, as it is
       specific to Intel systems.
   - Support OEM extensions for Intel Windmill, Wiwynn Windmill, and
     Quanta Winterfell motherboards in ipmi-sel and ipmi-sensors.  These
     motherboards are also know as motherboards for the Open Compute
     Project (OCP).
   - Support DCMI configuration in ipmi-config.
   - Update FreeIPMI for changes in IPMI 2.0 Errata 5.  Include are:
     - New sensor events for Power Supply and OS Boot sensors.  New
       events are supported in all areas, ipmi-sensors, ipmi-sel,
       libipmimonitoring, etc.
     - PEF now supports 255 filter numbers, not 127.  This is supported
       in ipmi-config (formerly ipmi-pef-config).
     - Support get/set of new System Info Parameters Present OS Version,
       BMC URL, and Base OS/Hypervisor URL.  This is supported in
       bmc-info and bmc-device.
   - Update ipmi-oem Intel Node Manager OEM commands for changes listed
     in Intelligent Power Node Manager 2.0 specification.
     - Due to changes in the specification, minor text changes may exist
       in some output from intelnm OEM commands.
   - Update ipmi-sel to support new SEL events in Intelligent Power Node
     Manager 2.0 specification.
   - Support 'serialalertsdeferred' workaround in ipmiconsole.
   - Support 'solpacketseq' workaround in ipmiconsole.
   - Fix portability issues for Apple / OS X.
   - Fix bmc-info output of GUID, format was output with two bytes out of
     order.
     - May affect scripts parsing and using the GUID.
   - Bmc-info now supports --get-system-guid and outputs the System GUID
     as well as the Device GUID by default.
     - The Device GUID is not prefixed with the text "Device GUID"
       instead of just "GUID".  Any scripts scripting against this will
       need to be adjusted.
   - Bmc-info now supports a workaround of 'guidformat' to read the GUID
     with a format a number of vendors have incorrectly used.
   - In ipmi-config's sensor configuration, decimal values that cannot be
     encoded accurately now report a clearer error message.


author: Ales Ledvinka <aledvink@redhat.com> - 1.3.4-2
changelog:
  - Module alias dependencies.
  - Changes for previous 1.3.4 update:
   - Support 'solchannelsupport' workraound in ipmiconsole /
     IPMICONSOLE_WORKAROUND_SKIP_CHANNEL_PAYLOAD_SUPPORT workaround flag in
     libipmiconsole.
   - Fix SDR cache workaround for motherboards with invalid SDR record
     counts listed.
   - Workaround Supermicro bug in bmc-watchdog. 
   - Fix error checks in sensor decoding functions, leading to possible
     problems in ipmi-sensors-config.
   - Update documentation with additional workarounds for motherboards.


author: Ales Ledvinka <aledvink@redhat.com> - 1.3.3-1
changelog:
  - Updated to freeipmi-1.3.3
   - Add support for intelnm get-node-manager-alert-destination and
     set-node-manager-alert-destination in ipmi-oem.
   - Under very verbose mode, ipmi-sel will now record types for OEM
     records.  This should allow OEM parses outside of FreeIPMI to more
     effectively parse OEM specific SEL records.
   - Fix big endian portability bugs.


author: Ales Ledvinka <aledvink@redhat.com> - 1.3.2-1
changelog:
  - Updated to freeipmi-1.3.2
   - Update FreeIPMI tools to check libfreeipmi API error codes
     correctly.
   - Update ipmi-api.h to list mappings of IPMI completion codes and
     RMCPPlus codes to API Error codes.


author: Ales Ledvinka <aledvink@redhat.com> - 1.3.1-1
changelog:
  - Updated to freeipmi-1.3.1
   - Timestamp UTC/localtime reporting compliant with specification.
     Remote timestamp expected to be in localtime already.
   - Timestamp reporting options --utc-to-localtime,
     --localtime-to-utc and --utc-offset.
   - In ipmi-fru, support output of DDR3 SDRAM modules.
   - In ipmi-fru, support output of new FRU multirecords, most notably
     extended DC output and extended DC load (per FRU Revision 1.2).
   - Support additional chassis types (per FRU Revision 1.2 update).
   - and more


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.9-1
changelog:
  - Updated to upstream freeipmi-1.2.9
   - Fix threshold output corner case in ipmi-sensors.
   - Fix invalid declaration in libipmimonitoring header.
   - Fix older compiler build problems.
   -
   - Fix portability build bug on ARM systems.
   - Add 'internal IPMI error' troubleshooting to manpages.
   - Fix bmc-info corner case on Bull 510 systems.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.6-2
changelog:
  - spec update by Christopher Meng <rpm@cicku.me>
  - hardened build flags should include PIE also for bmc-watchdog.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.6-1
changelog:
  - Updated to freeipmi-1.2.6
   - Support HP Proliant DL160 G8 OEM sensors.
   - Support Supermicro X9SCM-iiF OEM sensors and events.
   - Support output of temperature sampling period to ipmi-dcmi.
   - Clarify error message when SOL session cannot be stolen in
     ipmiconsole/libipmiconsole.
   - Fix dcmi rolling average time period output error
   - Fix ipmi-dcmi output errors with --get-dcmi-sensor-info.
   - Fix corner case in calculation of confidentiality pad length with
     AES-CBC-128 encryption.  Incorrect pad effects some vendor firmware
     implementations.
   - Send IPMI 2.0 packets differently than IPMI 1.5 packets, as the
     former does not require legacy pad data to be appended to payloads.
   - Fix Intel OEM SEL buffer overflow.
   - Fix out of trunk source build.
   - Support new ipmi_rmcpplus_sendto() and ipmi_rmcpplus_recvfrom()
     functions.
   - Support new HP Proliant DL160 G8 OEM sensor events.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.5-1
changelog:
  - Updated to freeipmi-1.2.5:
   - Support Supermicro X9SPU-F-O OEM sensors and events.
   - Support Supermicro X9DRI-LN4F+ OEM intepretations (previously
     forgotten).


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.4-1
changelog:
  - Updated to freeipmi-1.2.4:
   - Support Supermicro X9DRI-LN4F+ OEM sensors and events.
   - Fix output corner case for "session-based" channels.
   - Fix ipmi-oem set-power-restore-delay corner case in time settings.
   - Fix ipmiseld memleak.
   - Fix libfreeipmi potential fd leak when generating random numbers.
   - Fix libfreeipmi error output bug in RMCP interface.
   - Fix several minor corner cases discovered by static code analysis.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.3-1
changelog:
  - Updated to freeipmi-1.2.3:
   - In ipmi-oem, support new Dell Poweredge R720 OEM commands extensions,
     including:
    - get-nic-selection-failover
    - set-nic-selection-failover
    - power-monitoring-over-interval
    - power-monitoring-interval-range
    - get-last-post-code
   - In ipmi-oem, update active-lom-status for Dell Poweredge R720.
   - In ipmi-oem, support new Dell Poweredge R720 get-system-info option
     'cmc-info'.
   - In ipmi-oem, Dell get-system-info "slot-number" key changed to
     "blade-slot-info".  Legacy option still supported.
   - In ipmi-sel, support Dell Poweredge R720 OEM SEL extensions.
   - In all tools, support nochecksumcheck workaround option.
   - In all daemons (ipmiseld, ipmidetectd, bmc-watchdog), check for
     syscall errors during daemon setup.

   - In libfreeipmi, support Dell R720 OEM extension intepretations.
   - In libfreeipmi, libipmimonitoring, and libipmiconsole, support
     NO_CHECKSUM_CHECK workaround flag.
   - In libipmiconsole, IPMICONSOLE_DEBUG_FILE logs debug to files in
     current working directory and not /var/log.  PID is also appended to
     debug files.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.2-1
changelog:
  - Updated to freeipmi-1.2.2:
   - Support new --sol-payload-instance and --deactivate-all-instances
     options in ipmiconsole.
   - Fix ipmiseld compile issue with -Werror=format-security.


author: Jan Safranek <jsafrane@redhat.com> - 1.2.1-1
changelog:
  - Reworked RPM scriptlets to use systemd-rpm macros (#850117).
  - Updated to freeipmi-1.2.1:
   - Support new ipmiseld daemon, a daemon that regularly polls the SEL
     and stores the events to the local syslog.
   - In ipmipower, support --oem-power-type option to support OEM
     specific power control operations.  Included in this support were
     the follow changes to ipmipower:
     - Support initial OEM power type of C410X.
     - Re-architect to allow input of extra information for an OEM power
       operation via the '+' operator after the hostname.
     - Re-architect to allow input of target hostname multiple times
       under OEM power cases.
     - Re-architect to allow serialization of power control operations to
       the same host.
   - Globally in tools, support --target-channel-number and
     --target-slave-address to specify specific targets.
   - Globally in tools, support ability to specify alternate port via
     optional [:port] in hostname or host config.
   - In ipmi-fru, support --bridge-fru option to allow reading FRU entries
     from satellite controllers.
   - In bmc-config, add configuration support for
     Maximum_Privilege_Cipher_Suite_Id_15 under RMCPplus_Conf_Privilege.
   - Globally support Cipher Suite ID 15 and 16 based on comments from
     Intel.
   - In ipmi-sensors, support --output-sensor-thresholds, to allow
     outputting of sensor thresholds in default output for scripting.
   - In ipmi-sel, support new --post-clear option.
   - In bmc-device, support new --set-sensor-reading-and-event-status
     option.
   - In ipmi-oem, support additional Intel Node Manager commands,
     including:
     - get-node-manager-capabilities
     - node-manager-policy-control 
     - get-node-manager-policy
     - set-node-manager-policy
     - remove-node-manager-policy
     - get-node-manager-alert-thresholds
     - set-node-manager-alert-thresholds
     - get-node-manager-policy-suspend-periods
     - set-node-manager-policy-suspend-periods
     - set-node-manager-power-draw-range
   - In ipmi-oem, support Wistron OEM commands extensions.
   - In ipmi-sel, support Wistron OEM SEL interpretations.
   - In ipmi-fru, support Wistron OEM FRU records.
   - In ipmi-pef-config, support configuration volatile Alert String 0
     and Lan Alert Destination 0.


author: Jan Safranek <jsafrane@redhat.com> - 1.0.3-1
changelog:
  - Updated to freeipmi-1.0.3, see announce at
    http://lists.gnu.org/archive/html/freeipmi-users/2011-03/msg00017.html


author: Jan Safranek <jsafrane@redhat.com> - 1.0.2-1
changelog:
  - Updated to freeipmi-1.0.2, see announce at
    http://lists.gnu.org/archive/html/freeipmi-users/2011-02/msg00027.html


author: Jan Safranek <jsafrane@redhat.com> - 1.0.1:1
changelog:
  - Updated to freeipmi-1.0.1, see announce at
    http://lists.gnu.org/archive/html/freeipmi-users/2011-01/msg00006.html
  - Configuration files moved from /etc/ to /etc/freeipmi/. Support legacy config
    files for backwards compatibility.
  - More detailed release information can be found in the NEWS file.


author: Tony Asleson <tasleson@redhat.com> - 0.11.0-8
changelog:
  - Fix the conflict with sblim-wbemcli: RHBZ #1757855
  - Corrected warning about multiple file inclusion


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.10.0-3
changelog:
  - Python 2 binary package renamed to python2-pywbem
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: David Nalley <david@gnsa.us> 0.7.0-2
changelog:
  - Added some verbiage regarding what WBEM is and expanding WBEM and CIM acronyms
  - Added python-twisted as a dependency


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.3.0-4
changelog:
  - Python 2 binary package renamed to python2-libnl3
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Thomas Haller <thaller@redhat.com> - 3.2.29-2
changelog:
  - Update with patches from upstream
  - check valid input arguments for nla_reserve() (rh#1414305, CVE-2017-0386)
  - fix crash during SRIOV parsing
  - lazyly read psched settings
  - use O_CLOEXEC when creating file descriptors with fopen()


author: Thomas Haller <thaller@redhat.com> - 3.2.26-3
changelog:
  - Update to 3.2.26-rc1
  - fix broken symbols from 3.2.26-1
  - backport upstream fix for nl_socket_set_fd()


author: Thomas Haller <thaller@redhat.com> - 3.2.24-3
changelog:
  - add nl_has_capability() function
  - retry local port on ADDRINUSE (rh #1097175)
  - python: fix passing wrong argument in netlink/core.py
  - fix return value of nl_rtgen_request()
  - fix nl_msec2str()
  - fix crash in rtnl_act_msg_parse()
  - fix rtnl_route_build_msg() not to guess the route scope if RT_SCOPE_NOWHERE


author: Paul Wouters <pwouters@redhat.com> - 3.2.22-2
changelog:
  - Update to 3.2.22 (rhbz#963111)
  - Add patch for double tree crasher in rtnl_link_set_address_family()


author: Stanislaw Gruszka <sgruszka@redhat.com> - 3.18_2018.05.31-2
changelog:
  - Update wireless-regdb to 2018.05.31
  - Remove python2 dependency
  - Use sforshee signed reulatory.bin (required by modern kernels)


author: John W. Linville <linville@redhat.com> - 3.18_2016.02.08-1
changelog:
  - Update wireless-regdb to version 2016.02.08
  - Do not treat unused-const-variable warnings as errors


author: John W. Linville <linville@redhat.com> - 3.18_2015.01.30-3
changelog:
  - Use %license instead of %doc for file containing license information
  - Add %license entry for wireless-regdb
  - Correct NVR info at end of previous changelog entry


author: John W. Linville <linville@redhat.com> - 3.18_2015.01.30-2
changelog:
  - Update crda to version 3.18
  - Update wireless-regdb to version 2015.01.30
  - Drop patch to add DESTDIR in install rules for libreg in crda Makefile


author: John W. Linville <linville@redhat.com> - 3.13_2014.06.02-1
changelog:
  - Add logger commands to setregdomain to make it more communicative
  - Update wireless-regdb to version 2014.06.02


author: John W. Linville <linville@redhat.com> - 3.13_2013.11.27-1
changelog:
  - Update crda to version 3.13
  - Remove obsolete patch for regdbdump to display DFS region
  - Add patch to use DESTDIR rule for crda libreg installation
  - Add patch to avoid calling ldconfig from crda Makefile
  - Remove PREFIX='' lines from make commands
  - Use SBINDIR and LIBDIR definitions in make commands


author: John W. Linville <linville@redhat.com> - 1.1.3_2013.02.13-3
changelog:
  - setregdomain: remove sed and awk calls
  - setregdomain: reimplement COUNTRY assignment with shell function


author: John W. Linville <linville@redhat.com> 1.1.2_2011.04.28-1
changelog:
  - Update crda to version 1.1.2
  - Update wireless-regdb to version 2011.04.28 
  - Fix mis-numbered version comment in changelog for Nov 23 2010


author: John W. Linville <linville@redhat.com> 1.1.1_2009.11.25-3
changelog:
  - Correct license tag from BSD to ISC
  - Comment purpose of regulatory-rules-setregdomain.patch
  - Add copyright and license statement to setregdomain
  - Add comment for why /lib is hardcoded in files section
  - Reformat Dec 21 2009 changelog entry so rpmlint stops complaining


author: John W. Linville <linville@redhat.com> 1.1.1_2009.11.25-2
changelog:
  - Change RPM_OPT_FLAGS to optflags
  - Leave man page compression to rpmbuild
  - Correct date in previous changelog entry


author: John W. Linville <linville@redhat.com> 1.1.0_2009.11.25-3
changelog:
  - Add man page for setregdomain (from Andrew Hecox <ahecox@redhat.com>)
  - Change $RPM_BUILD_ROOT to buildroot


author: John W. Linville <linville@redhat.com> 1.1.0_2009.09.08-1
changelog:
  - Update wireless-regdb to version 2009.09.08 
  - Start resetting release number with version updates


author: John W. Linville <linville@redhat.com> 1.0.1_2009.03.09-9
changelog:
  - Add Requires line for iw package (#492762)
  - Update setregdomain script to correctly check if COUNTRY is set


author: John W. Linville <linville@redhat.com> 1.0.1_2009.03.09-8
changelog:
  - Add setregdomain script to set regulatory domain based on timezone
  - Expand 85-regulatory.rules to invoke setregdomain script on device add


author: John W. Linville <linville@redhat.com> 1.0.1_2009.01.30-4
changelog:
  - Change version to reflect new wireless-regdb upstream release practices
  - Update wireless-regdb version to pick-up recent updates and fixes (#483816)


author: John W. Linville <linville@redhat.com> 1.0.1_2009_01_15-3
changelog:
  - Update for CRDA verion 1.0.1
  - Account for lack of "v" in upstream release tarball naming
  - Add patch to let wireless-regdb install w/o being root


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-23
changelog:
  - Actually apply the patch from the previous build
  - Resolves: rhbz#1670997 - Amend the user lifecycle auditing


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-20
changelog:
  - Resolves: rhbz#1637398 - libuser-python3 should be renamed to comply
                             with Packaging Guidelines


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-19
changelog:
  - Resolves: rhbz#1602600 -  Please review important issues found by covscan
                              in "libuser-0.62-14.el8+7" package


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-17
changelog:
  - Resolves: rhbz#1558151 - libuser needs audit events around the account
                             lifecycle


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-16
changelog:
  - Use 2048bit keys in tests
  - Resolves: rhbz#1611729 - [RHEL8-S-BUILD] libuser Fails Scratch Build on rhel-8.0


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-14
changelog:
  - Do not build python2-libuser at all in RHEL-8
  - Resolves: #1559103 - libuser: Drop Python 2 subpackage(s) from RHEL 8


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.62-10
changelog:
  - Python 2 binary package renamed to python2-libuser
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Stephen Gallagher <sgallagh@redhat.com> - 0.62-7
changelog:
  - Fix FTBFS on Fedora 26+
  - Add patch to fix issues with -Werror=format-security
  - Ensure that the python 3 tests use a locale guaranteed to be present


author: Miloslav Trmač <mitr@redhat.com> - 0.61-1
changelog:
  - Update to libuser-0.61, notably adding Python 3 bindings
    Resolves: #1014555
  - Filter out libuser plugin and Python extension Provides:


author: Miloslav Trmač <mitr@redhat.com> - 0.58-2
changelog:
  - Always use secure_getenv() or __secure_getenv(), fail build if neither is
    available.  Patch by Viktor Hercinger <vhercing@redhat.com>.


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-1
changelog:
  - Update to libuser-0.56.13.
    Resolves: #251951
    Resolves: #454079
    Resolves: #456373
    Resolves: #456382
    Resolves: #530513


author: Miloslav Trmač <mitr@redhat.com> - 0.56.11-1
changelog:
  - Update to libuser-0.56.11.
    Resolves: #454091
    Resolves: #456267
    Resolves: #456270
    Resolves: #487129


author: Miloslav Trmač <mitr@redhat.com> - 0.56.7-1
changelog:
  - Add support for SHA256 and SHA512 in password hashes
    Related: #173583
  - Fix file locking on some architectures
  - Rename sr@Latn.po to sr@latin.po
    Resolves: #426584
  - Address issues from a review by Jason Tibbitts:
    - Remove default.-c, moving the provided functions to libuser proper
    - Remove the WITH_SELINUX build option
    - Move Python library test to %check
    Resolves: #226054


author: Miloslav Trmač <mitr@redhat.com> - 0.56.6-1
changelog:
  - Set SELinux file contexts when creating home directories, preserve them when
    moving home directories
    Resolves: #351201


author: Miloslav Trmač <mitr@redhat.com> - 0.56.5-1
changelog:
  - Work around spurious error messages when run against the Fedora Directory
    server
  - Fix error reporting when creating home directories and creating/removing mail
    spool files
    Resolves: #318121


author: Miloslav Trmač <mitr@redhat.com> - 0.56.4-2
changelog:
  - Split the Python module to a separate subpackage (original patch by Yanko
    Kaneti)
  - Update the License: tag


author: Miloslav Trmac <mitr@redhat.com> - 0.56.1-1
changelog:
  - When changing passwords, only silently ignore know shadow markers, not all
    invalid hashes
    Resolves: #225495


author: Miloslav Trmac <mitr@redhat.com> - 0.56-1
changelog:
  - Tighten the API and implementation to avoid corrupting number-like strings;
    the module interface ABI has changed
    Resolves: #226976


author: Miloslav Trmac <mitr@redhat.com> - 0.54.6-1
changelog:
  - Fix bugs in handling of invalid lines in the files and shadow modules
  - Fix pattern matching in lu_*_enumerate_full in the files and shadow modules
  - Add more error reporting, return non-zero exit status on error from utils
  - Use the skeleton directory specified in libuser.conf by Python
    admin.createHome and admin.addUser, add parameter skeleton= to admin.addUser
    (#189984)


author: Miloslav Trmac <mitr@redhat.com> - 0.54.1-1
changelog:
  - Support importing of configuration from shadow-utils (/etc/login.defs and
    /etc/default/useradd)
  - Add libuser.conf(5) man page


author: Miloslav Trmac <mitr@redhat.com> - 0.54-1
changelog:
  - Make sure attributes with no values can never appear
  - Fix crash in the "files" module when an attribute is missing
  - Use hidden visibility for internal functions, remove them from
    libuser/user_private.h; this changes module interface ABI


author: Miloslav Trmac <mitr@redhat.com> - 0.53.8-1
changelog:
  - Permit "portable" user and group names as defined by SUSv3, plus trailing $
    (#159452)
  - Don't build static libraries


author: Miloslav Trmac <mitr@redhat.com> - 0.53.5-1
changelog:
  - Ignore nss_compat lines in the "files" module (#154651)
  - Autodetect Python version (#154096)
  - Add BuildRequires: libselinux-devel, s/BuildPrereq/BuildRequires/


author: Miloslav Trmac <mitr@redhat.com> - 0.53.3-2
changelog:
  - Add Requires: glib2-devel to libuser-devel (#152501)
  - Run ldconfig using %post{,un} -p to let RPM play tricks


author: Miloslav Trmac <mitr@redhat.com> - 0.53.3-1
changelog:
  - Don't silently ignore some I/O errors
  - Don't include a Cyrus SASL v1 header file when libldap links to v2 (#150046)
  - Rebuild with gcc 4


author: Miloslav Trmac <mitr@redhat.com> - 0.53.2-1
changelog:
  - Important bug fixes in lchage, lgroupmod, lnewusers and lusermod
  - Minor bug fixes in lpasswd and luseradd
  - Add man pages for the utilities (#61673)


author: Miloslav Trmac <mitr@redhat.com> - 0.53-1
changelog:
  - Support UID and GID values larger than LONG_MAX (#124967)
  - Fix updating of groups after user renaming in lusermod
  - Allow setting a shadow password even if the current shadow password is
    invalid (#131180)
  - Add lu_{user,group}_unlock_nonempty (#86414); module interface ABI has 
    changed
  - Miscellaneous bug and memory leak fixes


author: Miloslav Trmac <mitr@redhat.com> - 0.52.6-1
changelog:
  - Make error reporting more consistent, more verbose and always on stderr
    (partly #133861, original patch by Pawel Salek)
  - Mark strings previously blocked by string freeze for translation


author: Miloslav Trmac <mitr@redhat.com> - 0.52.5-1
changelog:
  - Fix home directory renaming in ADMIN.modifyUser (#135280)
  - Further Python reference counting fixes


author: Miloslav Trmac <mitr@redhat.com> - 0.52.2-1
changelog:
  - Allow LDAP connection using ldaps, custom ports or without TLS (original
    patch from Pawel Salek).


author: Miloslav Trmac <mitr@redhat.com> - 0.51.12-1
changelog:
  - Don't claim success and exception at the same time (#133479)
  - LDAP fixes, second round
  - Various other bugfixes


author: Miloslav Trmac <mitr@redhat.com> - 0.51.11-1
changelog:
  - Allow documented optional arguments in Python
    ADMIN.{addUser,modifyUser,deleteUser} (#119812)
  - Add man pages for lchfn and lchsh
  - LDAP fixes, first round
  - Avoid file conflict on multilib systems
  - Call ldconfig correctly


author: Miloslav Trmac <mitr@redhat.com> - 0.51.10-1
changelog:
  - Don't attempt to lookup using original entity name after entity
    modification (rename in particular) (#78376, #121252)
  - Fix copying of symlinks from /etc/skel (#87572, original patch from gLaNDix)
  - Make --enable-quota work, and fix the quota code to at least compile (#89114)
  - Fix several bugs (#120168, original patch from Steve Grubb)
  - Don't hardcode python version in spec file (#130952, from Robert Scheck)
  - Properly integrate the SELinux patch, it should actually be used now, even
    though it was "enabled" since 0.51.7-6


author: Miloslav Trmac <mitr@redhat.com> - 0.51.8-1
changelog:
  - Update to build with latest autotools and gtk-doc
  - Update ALL_LINGUAS and POTFILES.in
  - Rebuild to depend on newer openldap


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.7-1
changelog:
  - ldap: set error codes correctly when we encounter failures initializing
  - don't double-close modules which fail initialization
  - ldap: don't set an error in cases where one is already set


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.6-1
changelog:
  - use a crypt salt consistent with the defaults/crypt_style setting when
    setting new passwords (#79337)


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.5-1
changelog:
  - expose lu_get_first_unused_id() as a package-private function
  - provide libuser.ADMIN.getFirstUnusedUid and libuser.ADMIN.getFirstUnusedGid
    in python


author: Nalin Dahyabhai <nalin@redhat.com> 0.51-1
changelog:
  - files: ignore blank lines in files
  - libuser: disallow creation of accounts with names containing whitespace,
    control characters, or non-ASCII characters


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.101-1
changelog:
  - fix python bindings of enumerateFull functions
  - adjust prompter wrapping to not error out on successful returns


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.100-1
changelog:
  - be more careful about printing error messages
  - fix refreshing after adding of accounts
  - ldap: try to use a search to convert names to DNs, and only fall back to
    guessing if it turns up nothing
  - files: fix an off-by-one in removal of entries


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.98-1
changelog:
  - automatically refresh entities after add, modify, setpass, removepass,
    lock, and unlock operations
  - remove debug spewage when creating and removing mail spools
  - files: fix saving of multi-valued attributes
  - rename MEMBERUID attribute for groups to MEMBERNAME


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.97-1
changelog:
  - files: fix bug in removals
  - ldap: revert attempts at being smart at startup time, because it makes UIs
    very messy (up the three whole dialogs just to start the ldap stuff!)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.93-1
changelog:
  - move shadow initialization for groups to the proper callback
  - rework locking in the files module to not require that files be writable


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.91-1
changelog:
  - ldap: finish port to new API
  - sasl: finish port to new API (needs test)
  - libuser: don't commit object changes before passing data to service
    functions which might need differing data sets to figure out what to
    change (for example, ldap)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - renamed the python module
  - revamped internals to use gobject's gvalues and gvaluearrays instead of
    glists of cached strings
  - add enumeration-with-data functions to the C library


author: Nalin Dahyabhai <nalin@redhat.com> 0.32-1
changelog:
  - link the python module against libpam
  - attempt to import the python modules at build-time to verify dependencies


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-1
changelog:
  - quotaq: fix argument order when reading quota information
  - user_quota: set quota grace periods correctly
  - luseradd: never create home directories for system accounts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - HUP nscd on modifications
  - userutil.c: mmap files we're reading for probable speed gain
  - userutil.c: be conservative with the amount of random data we read
  - docs fixes


author: Nalin Dahyabhai <nalin@redhat.com> 0.28-1
changelog:
  - apps: print usage on errors
  - lnewusers.c: initialize groups as groups, not users
  - lnewusers.c: set passwords for new accounts
  - luseradd.c: accept group names in addition to IDs for the -g flag
  - luseradd.c: allow the primary GID to be a preexisting group


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-1
changelog:
  - add ko translation files
  - files.c: fix a heap corruption bug in lock/unlock (#51750)
  - files.c: close a memory leak in reading of files


author: Nalin Dahyabhai <nalin@redhat.com> 0.26-1
changelog:
  - lusermod: change user name in groups the user is a member of during renames
  - lgroupmod: change primary GID for users who are in the group during renumbers
  - ldap.c: handle new attributes more gracefully if possible
  - add ru translation files


author: Nalin Dahyabhai <nalin@redhat.com> 0.25.1-1
changelog:
  - rename the quota source files to match the library, which clears up a
    file conflict with older quota packages
  - add ja translation files


author: Nalin Dahyabhai <nalin@redhat.com> 0.25-1
changelog:
  - close up some memory leaks
  - add the ability to include resident versions of modules in the library


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-3
changelog:
  - stop leaking descriptors in the files module
  - speed up user creation by reordering some checks for IDs being in use
  - update the shadowLastChanged attribute when we set a password
  - adjust usage of getXXXXX_r where needed
  - fix assorted bugs in python binding which break prompting


author: Nalin Dahyabhai <nalin@redhat.com> 0.23-1
changelog:
  - install sv translation
  - make lpasswd prompt for passwords when none are given on the command line
  - make sure all user-visible strings are marked for translation
  - clean up some user-visible strings
  - require PAM authentication in lchsh, lchfn, and lpasswd for non-networked modules


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - print uids and gids of users and names in lid app
  - fix tree traversal in users_enumerate_by_group and groups_enumerate_by_users
  - implement enumerate_by_group and enumerate_by_user in ldap module
  - fix id-based lookups in the ldap module
  - implement islocked() method in ldap module
  - implement setpass() method in ldap module
  - add lchfn and lchsh apps
  - add %d substitution to libuser.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.21-1
changelog:
  - finish adding a sasldb module which manipulates a sasldb file
  - add users_enumerate_by_group and groups_enumerate_by_users


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - luserdel: remove the user's primary group if it has the same name as
    the user and has no members configured (-G disables)
  - fixup some configure stuff to make libuser.conf get generated correctly
    even when execprefix isn't specified


author: Nalin Dahyabhai <nalin@redhat.com> 0.20-1
changelog:
  - only call the auth module when setting passwords (oops)
  - use GTrees instead of GHashTables for most internal tables
  - files: complain properly about unset attributes
  - files: group passwords are single-valued, not multiple-valued
  - add lpasswd app, make sure all apps start up popt with the right names


author: Nalin Dahyabhai <nalin@redhat.com> 0.18-1
changelog:
  - actually make the new optional arguments optional
  - fix lu_error_new() to actually report errors right
  - fix part of the python bindings
  - include tools in the binary package again
  - fixup modules so that password-changing works right again
  - add a "key" field to prompt structures for use by apps which like to
    cache these things
  - add an optional "mvhomedir" argument to userModify (python)


author: Nalin Dahyabhai <nalin@redhat.com> 0.16.1-1
changelog:
  - finish home directory population
  - implement home directory moving
  - change entity get semantics in the python bindings to allow default values for .get()
  - add lu_ent_has(), and a python has_key() method to Entity types
  - don't include tools in the binary package
  - add translated strings


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - lib/user.c: catch and ignore errors when running stacks
  - lusermod: fix slightly bogus help messages
  - luseradd: when adding a user and group, use the gid of the group
    instead of the user's uid as the primary group
  - properly set the password field in user accounts created using
    auth-only auth modules (shadow needs "x" instead of "!!")
  - implement home directory removal, start on population


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix group password setting in the files module
  - setpass affects both auth and info, so run both stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix errors due to uninitialized fields in the python bindings
  - add kwargs support to all python wrappers
  - add a mechanism for passing arguments to python callbacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't bail when writing empty fields to colon-delimited files
  - use permissions of the original file when making backup files instead of 0600


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish implementing is_locked methods in files/shadow module
  - finish cleanup of the python bindings
  - allow conditional builds of modules so that we can build without
    all of the prereqs for all of the modules


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clean up quota bindings some more
  - finish most of the ldap bindings
  - fix a subtle bug in the files module that would show up when renaming accounts
  - fix mapping methods for entity structures in python


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - get bindings for prompts to work correctly
  - clean up some of the add/remove semantics (set source on add)
  - ldap: implement enumeration
  - samples/enum: fix the argument order


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add functions for enumerating users and groups, optionally per-module
  - lusermod.c: -s should specify the shell, not the home directory


author: Nalin Dahyabhai <nalin@redhat.com> 0.8
changelog:
  - add a "quiet" prompter
  - add --interactive flag to sample apps and default to using quiet prompter
  - ldap: attempt a "self" bind if other attempts fail
  - krb5: connect to the password-changing service if the user principal has
    the NULL instance


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - the great adding-of-the-copyright-statements
  - take more care when creating backup files in the files module


author: Nalin Dahyabhai <nalin@redhat.com> 0.7
changelog:
  - add openldap-devel as a buildprereq
  - krb5: use a continuous connection
  - krb5: add "realm" config directive
  - ldap: use a continuous connection
  - ldap: add "server", "basedn", "binddn", "user", "authuser" config directives
  - ldap: actually finish the account deletion function
  - ldap: don't send cleartext passwords to the directory
  - fix naming attribute for users (should be uid, not gid)
  - refine the search-by-id,convert-to-name,search-by-name logic
  - fix handling of defaults when the config file is read in but contains no value
  - implement an LDAP information store
  - try to clean up module naming with libtool
  - luseradd: pass plaintext passwords along
  - luseradd: use symbolic attribute names instead of hard-coded
  - lusermod: pass plaintext passwords along
  - lgroupadd: pass plaintext passwords along
  - lgroupmod: pass plaintext passwords along
  - add libuser as a dependency of libuser-devel


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 1.8.10-3
changelog:
  - The default installed polkit policy allows console users to access
    smart cards. Non-interactive or remote usage now requires admin
    rights, or a specific policy (see README.polkit)


author: Kalev Lember <kalevlember@gmail.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Drop the systemd support patches which are now upstreamed
  - Package the new pcsc-spay tool in -devel subpackage


author: Kalev Lember <kalevlember@gmail.com> - 1.7.4-6
changelog:
  - Remove the automatic card power down disabling patch again;
    no longer needed with latest libusb1 1.0.9 rc1 (#737988)


author: Kalev Lember <kalev@smartlink.ee> - 1.7.3-1
changelog:
  - Update to 1.7.3
  - Dropped upstreamed patches
  - Dropped the lib64 rpath patch; pcsc-lite now uses system libtool
  - Cleaned up the spec file for modern rpmbuild


author: Kalev Lember <kalev@smartlink.ee> - 1.6.2-1
changelog:
  - Update to 1.6.2
  - Dropped upstreamed patches
  - Removed configure --disable-dependency-tracking option which is the
    default with configure macro.


author: Kalev Lember <kalev@smartlink.ee> - 1.5.5-4
changelog:
  - Fix init script start / stop priorities (#580322)
  - Don't require pkgconfig as the dep is now automatically generated by rpm


author: Kalev Lember <kalev@smartlink.ee> - 1.5.5-3
changelog:
  - Added patch to fix init script LSB header (#565241)
  - Dropped BR: libusb-devel as configure script really picks up libhal instead
  - Use %global instead of %define


author: Kalev Lember <kalev@smartlink.ee> - 1.5.5-2
changelog:
  - Require -libs subpackage from main pcsc-lite package
  - Build -doc subpackage as noarch
  - Dropped --enable-runpid configure option which was removed in 1.4.99
  - Dropped obsolete provides
  - Spec file cleanup


author: Kalev Lember <kalev@smartlink.ee> - 1.5.5-1
changelog:
  - Updated to pcsc-lite 1.5.5
  - Rebased rpath64 patch
  - Dropped upstreamed pcsc-lite-1.5-permissions.patch


author: Karsten Hopp <karsten@redhat.com> 1.4.102-4
changelog:
  - remove excludearch s390, s390x (#467788)
    even though s390 does not have libusb or smartCards, the libusb
    packages are required to build other packages.


author: Bob Relyea <rrelyea@redhat.com> - 1.4.4-2
changelog:
  - Silence libpcsc-lite even when the daemon isn't running.
  - fix typo in init file which prevents the config file from being read.


author: Ville Skyttä <ville.skytta at iki.fi> - 1.3.0-1
changelog:
  - 1.3.0, init script and reader.conf updater included upstream.
  - Split developer docs into a -doc subpackage, include API docs.
  - libmusclecard no longer included, split into separate package upstream.


author: Ville Skyttä <ville.skytta at iki.fi> - 1.2.0-13
changelog:
  - Don't ship static libraries.
  - Don't mark the init script as a config file.
  - Use rm instead of %exclude.
  - Specfile cleanups.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.2.0-10
changelog:
  - Disable dependency tracking to speed up the build.
  - Drop reader.conf patch, it's not needed any more.
  - Rename update-reader-conf to update-reader.conf for consistency with Debian,
    and improve it a bit.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.2.0-0.fdr.6
changelog:
  - Improve package summary.
  - Improvements based on suggestions from Ludovic Rousseau:
    - Don't install pcsc_demo but do include its source in -devel.
    - Sync reader.conf with current upstream CVS HEAD (better docs, less
      intrusive in USB-only setups where it's not needed).


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.2.0-0.fdr.0.2.rc3
changelog:
  - Update to 1.2.0-rc3.
  - Trivial init script improvements.
  - Enable %{_smp_mflags}.
  - Don't bother trying to enable SCF.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-19
changelog:
  - Use different and probably better approach of fixing segfaults if Tcl is
    built with stubs and Expect is used directly from C program


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-14
changelog:
  - Fix segfaults if Tcl is built with stubs and Expect is used directly from C program
    (patch taken from Debian project, written by Sergei Golovan)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-13
changelog:
  - Use vsnprintf instead of vsprintf to avoid buffer overflow
    (it happens e.g. when running systemtap testsuite)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.45-4
changelog:
  - Let user know when expample script needs telnet and it is missing
    Resolves: #703702
  - Use full path to 'su' in passmass example, it's safer
  - Fix expect man page minor formatting issue


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 5.44.1.15-1
changelog:
  - Update to 5.44.1.15 from upstream CVS
    Resolves: #528654, Resolves: #501820
  - Remove config.sub (no longer needed), remove unused patches (few are
    upstream now, few are pointless with new version), comment patches
  - Fix unbuffer to return exit code of ubuffered program
    Resolves: #547686
  - Fix Tk initialization
    Resolves: #456738


author: Miloslav Trmac <mitr@redhat.com> - 5.43.0-7
changelog:
  - s/%{buildroot}/"$RPM_BUILD_ROOT"/g
  - s,/usr/share/man,%{_mandir},g
  - Use the Fedora-specified Buildroot:
  - Remove BuildRequires: libX11-devel
  - Don't install pkgIndex.tcl as an executable file
  - Drop the incorrect expect-5.32.2-fixcat.patch
  - Remove comments from *.h.in because they confuse config.status; this makes
    the workaround expect-5.43.0-cfg-setpgrp.patch unnecesary.


author: Miloslav Trmac <mitr@redhat.com> - 5.43.0-6
changelog:
  - Update to build with Tcl 8.5
  - Drop static libraries
  - Ship more documentation
  - Use %check for (make test), remove the conditional


author: Jens Petersen <petersen@redhat.com> - 5.43.0-2
changelog:
  - fix flushing of unbuffer script (Charles Sullivan, #143963)
    with unbuffer-child-flush-143963.patch (Don Libes)
  - make autoconf include parent dir in testsuite to avoid error
    (Robert Scheck, 150369)
  - separate the examples scripts patches from the rest


author: Jens Petersen <petersen@redhat.com>
changelog:
  - replace expect-5.32.2-setpgrp.patch by expect-5.43.0-cfg-setpgrp.patch
    to set SETPGRP_VOID correctly


author: Robert Scheck <redhat@linuxnetz.de>
changelog:
  - update to 5.43.0 (150369)
    - no longer need expect-5.39.0-64bit-82547.patch,
      expect-5.38.0-autopasswd-9917.patch
      and expect-5.42-mkpasswd-verbose-user-141454.patch
  - run aclocal and configure with current autoconf (116777)
    - buildrequire autoconf and automake instead of autoconf213


author: Jens Petersen <petersen@redhat.com> - 5.42.1-2
changelog:
  - fix "mkpasswd -v" failure when user not specified with
    expect-5.42-mkpasswd-verbose-user-141454.patch (J F Wheeler, 141454)


author: Jens Petersen <petersen@redhat.com> - 5.42.1-1
changelog:
  - update to 5.42.1 (Robert Scheck, 126536)
    - no longer need expect-5.32.2-kibitz.patch
    - update expect-5.38.0-autopasswd-9917.patch
  - drop explicit tcl and tk requires


author: Alan Cox <alan@redhat.com>
changelog:
  - Autopasswd doesnt work and isnt ever going to work with pam around
    since password setting depends on the modules in use (think "fingerprint"
    or "smartcard"..). Remove it.


author: Jens Petersen <petersen@redhat.com> - 5.39.0-95
changelog:
  - new package split out from tcltk
  - build against installed tcl and tk
  - filtered changelog for expect
  - buildrequire autoconf213 (#110583) [mvd@mylinux.com.ua]


author: Jens Petersen <petersen@redhat.com> - 8.3.5-93
changelog:
  - update expect to 5.39.0 (fixes #58317)
  - drop first hunk of 64bit patch and rename to expect-5.39.0-64bit-82547.patch
  - expect-5.32.2-weather.patch and expect-5.32.2-expectk.patch no longer needed


author: Jens Petersen <petersen@redhat.com> - 8.3.5-84
changelog:
  - drop synthetic lib provides
  - remove obsolete patches from srpm
  - update buildrequires
  - use buildroot instead of RPM_BUILD_ROOT
  - install all man pages under mandir, instead of moving some from /usr/man
  - introduce _genfilelist macro for clean single-sweep find filelist generation
    for each package
  - use perl to remove buildroot prefix from filelists


author: Jens Petersen <petersen@redhat.com> 8.3.5-76
changelog:
  - make it build on x86_64 (details below)
  - add 100 to expect patches
  - patch expect configure to get EXP_LIB_SPEC to use libdir
  - don't explicitly update config.{guess,sub} since %configure does it for us
  - added "--without check" rpmbuild option to disable running tests in future
  - generate filelists from datadir and not from mandir from now on


author: Jens Petersen <petersen@redhat.com>
changelog:
  - build without all makecfg patches for now
    - in particular use upstream versioned library name convention
  - add backward compatible lib symlinks for now
  - add unversioned symlinks for versioned bindir files
  - use make's -C option rather than jumping in and out of source dirs
    during install
  - use INSTALL_ROOT destdir-like make variable instead of makeinstall
    for all subpackages except tix and itcl


author: Jens Petersen <petersen@redhat.com>
changelog:
  - move expectk and expect-devel files out of expect into separate packages
    (#9832)
  - drop the crud compat dir symlinks in libdir
  - correct expect license
  - don't explicitly provide 64bit libs on ia64 and sparc64


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - quick hack to have a correct setpgrp() call in expect
  - fix config.guess and config.sub to newer versions


author: Adrian Havill <havill@redhat.com>
changelog:
  - re-enable glibc string and math inlines; recent gcc is a-ok.
  - optimize at -O2 instead of -O
  - rename "soname" patches related to makefile/autoconf changes


author: Adrian Havill <havill@redhat.com>
changelog:
  - used %makeinstall to brute force fix any remaining unflexible makefile dirs
  - improved randomness of expect's mkpasswd script via /dev/random (bug 9507)
  - revert --enable-threads, linux is (still) not ready (yet) (bug 49251)


author: Adrian Havill <havill@redhat.com>
changelog:
  - refresh all sources to latest stable (TODO: separate expect/expectk)
  - massage out some build stuff to patches (TODO: libtoolize hacked constants)
  - remove patches already rolled into the upstream
  - removed RPATH (bugs 45569, 46085, 46086), added SONAMEs to ELFs
  - changed shared object filenames to something less gross
  - reenable threads which seem to work now
  - fixed spawn/eof read problem with expect (bug 43310)
  - made compile-friendly for IA64


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - FHS packaging changes.
  - revert --enable-threads, linux is not ready (yet) (#11789).
  - expect: update to 5.31.7+ (#11595).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to (tcl,tk}-8.2.3, expect-5.31, and itcl-3.1.0, URL's as well.
  - use perl to drill out pre-pended RPM_BUILD_ROOT.
  - configure with --enable-threads (experimental).
  - autopasswd needs to handle password starting with hyphen (#9917).
  - handle 553 ftp status in rftp expect script (#7869).
  - remove cryptdir/decryptdir, as Linux has not crypt command (#6668).
  - correct hierarchy spelling (#7082).
  - fix "expect -d ...", format string had int printed as string (#7775).


author: Tomáš Mráz <tmraz@redhat.com> - 3.4-4
changelog:
  - Cover the gaps in annotation coverage for assembler sources
  - Add .hmac checksums for FIPS mode integrity checking


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.3-5
changelog:
  - Removed executables from the library to allow parallel installation
    of x86-64 and x86 packages. The executables had testing purpose, and
    may be re-introduced in a separate package if needed.


author: Ian Weller <ianweller@gmail.com> 1.15-2
changelog:
  - Removed redundant requires
  - Removed redundant documentation between packages
  - Fixed license tag
  - Fixed -devel description
  - Added the static library back to -devel
  - Added make clean


author: Sachin Prabhu <sprabhu@redhat.com> - 6.8-3
changelog:
  - Add manual gating tests
  - docs: cleanup rst formating
  - mount.cifs.rst: document new (no)handlecache mount option
  - manpage: update mount.cifs manpage with info about rdma option
  - checkopts: add python script to cross check mount options
  - mount.cifs.rst: document missing options, correct wrong ones
  - checkopts: report duplicated options in man page
  - mount.cifs.rst: more cleanups
  - mount.cifs.rst: document vers=3 mount option
  - mount.cifs.rst: document vers=3.02 mount option
  - cifs: Allow DNS resolver key to expire
  - mount.cifs: be more verbose and helpful regarding mount errors
  - Update mount.cifs with vers=default mount option and SMBv3.0.2
  - mount.cifs.rst: update vers=3.1.1 option description
  - getcifsacl: Do not go to parse_sec_desc if getxattr fails.
  - getcifsacl: Improve help usage and add -h option.
  - setcifsacl: fix adding ACE when owner sid in unexpected location
  - cifs.upcall: fix a compiler warning
  - mount.cifs Add various missing parms from the help text
  - mount.cifs: add more options to help message
  - mount.cifs: detect GMT format of snapshot version
  - Update man page for mount.cifs to add new options
  - mount.cifs.rst: mention kernel version for snapshots
  - Fix authors and maintainers


author: Jeff Layton <jlayton@redhat.com> - 6.7-5
changelog:
  - more updates, switch to rst for manpages
  - update mount.cifs manpage to describe defaults better (BZ#1474539)


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 6.4-3
changelog:
  - Let package own %{_sysconfdir}/cifs-utils (RHBZ#1184390).
  - Let package own %{_libdir}/cifs-utils (RHBZ#1184391).


author: Sachin Prabhu <sprabhu@redhat.com> 6.3-2
changelog:
  - autoconf: allow PAM security install directory to be configurable
  - cifs: use krb5_kt_default() to determine default keytab location
  - cifskey: better use snprintf()
  - cifscreds: better error handling when key_search fails
  - cifscreds: better error handling for key_add


author: Jeff Layton <jlayton@redhat.com> 6.2-3
changelog:
  - fixes for bugs reported by coverity:
  - update bad bit shift patch with one that patches getcifsacl.c too
  - remove some dead code from getcifsacl.c, asn1.c, and data_blob.c
  - fix bad handling of allocated memory in del_mtab in mount.cifs.c


author: Jeff Layton <jlayton@redhat.com> 5.9-1
changelog:
  - update to 5.9
  - move mount.cifs to /usr/sbin per new packaging guidelines
  - add -devel package to hold cifsidmap.h


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-3
changelog:
  - turn off common lisp bindings the right way
  - drop finger output
  - recode the changelog into UTF-8 if it isn't UTF-8 (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-2
changelog:
  - fix use of macro in changelog (rpmlint)
  - build with --disable-rpath (rpmlint)
  - build with %{?_smp_mflags}


author: Nalin Dahyabhai <nalin@redhat.com> - 1.6-1
changelog:
  - update to 1.6
  - add suggested summary, buildrequires, and modify install call as suggested
    by package review (#226021)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-3
changelog:
  - give gpg-error-config libdir=@exec_prefix@/lib instead of @libdir@, so that
    it agrees on 32- and 64-bit arches (it suppresses the -L argument if @libdir@
    is /usr/lib, so this should be cleaner than adding a non-standard .pc file
    which upstream developers might inadvertently think they can depend to be on
    every system which provides this library)


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.27-1.0.1
changelog:
  - IPMI SMB kernel module name is ipmi_ssif in all modern kernels.
    openipmi-helper script fixed. [Orabug: 27093288] (alexey.petrenko@oracle.com)


author: Josef Ridky <jridky@redhat.com> - 2.0.25-1
changelog:
  - New upstream release 2.0.25 (#1568194)
  - Replace Python2 with Python3
  - Drop OpenIPMI-python2 and set it as Obsolete
  - Introduce new OpenIPMI-python3 package
  - use ldconfig macros
  - remove old systemd dependencies
  - use autosetup


author: Boris Ranto <branto@redhat.com> - 0:2.0.22-1
changelog:
  - New version (0:2.0.22-1)
  - Apply 'OpenIPMI-2.0.18-pthread-pkgconfig.patch'
  - Apply './OpenIPMI-2.0.19-man.patch'
  - Apply 'OpenIPMI-2.0.21-nobundle.patch'


author: Ledvinka Ales <aledvink@redhat.com> - 2.0.19-7
changelog:
  - Hint compilation to avoid strict aliasing and prevent type-punned pointer issues.
  - Fix rPath regression for OpenIPMI-perl library.


author: Ledvinka Ales <aledvink@redhat.com> - 2.0.19-5
changelog:
  - Support aarch64 by replicating release toolchain.
  - Configuration subpackage with kernel probed wildcard module aliases.
    as workaround for bz#961878 and fesco#1110
  - Man pages symlinks same as bin symlinks.
  - ipmi_ui command help argument.
  - ipmilan missing options.
  - Fixed build requirements.


author: Jan Safranek <jsafrane@redhat.com> - 2.0.19-2
changelog:
  - Updated RPM scriptlets with latest systemd-rpm macros (#850246)
  - Fixed fedora-review tool complaints


author: Jan Safranek <jsafrane@redhat.com> - 2.0.16-9
changelog:
  - fix package License: field, there *are* sources with BSD header
  - distribute README files and COPYING in package


author: Jan Safranek <jsafrane@redhat.com> - 2.0.14-8
changelog:
  - shorter probe interval is used in init script, making the service startup
    quicker in most situations (#475101)


author: Jan Safranek <jsafrane@redhat.com> - 2.0.14-3
changelog:
  - split ipmitool to separate package
  - added 'reload' functionality to init script
  - added seraparate -gui subpackage


author: Phil Knirsch <pknirsch@redhat.com> 2.0.6-1
changelog:
  - Fixed bug with type conversion in ipmitool (#191091)
  - Added python bindings 
  - Split off perl and python bindings in separate subpackages
  - Dropped obsolete patches
  - Added missing buildprereq on readline-devel
  - Made it install the python bindings properly on 64bit archs


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-18
changelog:
  - Updated ipmitool to latest upstream version.
  - Removed 3 patches for already fixed bugs in latest ipmitool.
  - Adapted warning message fix for ipmitool for latest version.


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-16
changelog:
  - Included FRU fix for displaying FRUs with ipmitool
  - Included patch for new option to specify a BMC password for IPMI 2.0 sessions


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-13
changelog:
  - Rebuilt to link against latest openssl libs.
  - Fixed ipmitool not setting session privilege level (#172312)


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-9
changelog:
  - Another update to latest initscripts from Dell
  - Fixed some missing return statements for non-void functions (#164138)


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-7
changelog:
  - Fixed the unwanted output of failed module loading of the initscript. Behaves
    now like all our other initscripts (#165476)


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-2
changelog:
  - Updated to OpenIPMI-1.4.14
  - Split the main package into normal and libs package for multilib support
  - Added ipmitool-1.8.2 to OpenIPMI and put it in tools package
  - Added sysconf and initscript (#158270)
  - Fixed oob subscripts (#149142)


author: Matej Marusak <mmarusak@redhat.com> - 211.2-1
changelog:
  - Users: Fix reboot warnings of changed roles
  - Translation updates (rhbz#1754958)
  - Fix CPU mitigations to recognize kernel options at the beginning of line


author: Martin Pitt <mpitt@redhat.com> - 211.1-1
changelog:
  - system: Fix graph layout across all browsers (rhbz#1792623)
  - websocket: Fix unaligned access in send_prefixed_message_rfc6455()


author: Martin Pitt <mpitt@redhat.com> - 211-1
changelog:
  - Fix HTTPS requests > 4 KiB (rhbz#1785509)
  - Better support for various TLS certificate formats
  - Switch from Zanata to Weblate
  - Overview layout optimizations
  - Translation updates (rhbz#1754958)


author: Martin Pitt <mpitt@redhat.com> - 210-1
changelog:
  - Overview: Add CPU utilization to usage card
  - Dashboard: Support SSH identity unlocking when adding new machines
  - SElinux: Introduce an Ansible automation script
  - Translation updates (partially fixes rhbz#1754958)


author: Matej Marusak <mmmarusak@redhat.com> - 209-1
changelog:
  - New overview design
  - Session timeouts
  - Banners on login screen
  - Client certificate authentication
  - Dropped support for pam_rhost


author: Martin Pitt <mpitt@redhat.com> - 206-1
changelog:
  - Sync with Fedora 31, to get cockpit-tls prerequisite for upcoming Smart card
    support
  - Logging in with SELinux-restricted user role now works (rhbz#1727382)


author: Martin Pitt <mpitt@redhat.com> - 196.1-1
changelog:
  - networkmanager: Show correct IPv6 route metric in dialog (rhbz#1719575)
  - networkmanager: Ensure that endianess is always set (rhbz#1728213)
  - Update translations (rhbz#1689977)


author: Martin Pitt <mpitt@redhat.com> - 196-1
changelog:
  - Networking: Add Firewall Zones configuration rhbz#1678473
  - Fix ssh login to unknown hosts rhbz#1701174
  - Fix login when ~/.bashrc prints to stdout rhbz#1716223
  - Much better On/Off buttons, also avoid text overlap rhbz#1677593


author: Martin Pitt <mpitt@redhat.com> - 191-1
changelog:
  - System: Enable/disable SMT rhbz#1678956
  - Logs: Add service filtering rhbz#1657756
  - Networking: Add custom firewall ports rhbz#1660400


author: Martin Pitt <mpitt@redhat.com> - 189-1
changelog:
  - Add search box to Services page rhbz#1657752
  - Connect to firewalld as superuser rhbz#1664158
  - Fix log filtering rhbz#1665421
  - Show error message for invalid IdM domain names rhbz#1659333
  - Changing passwords as root does not ask for current password rhbz#1666005


author: Martin Pitt <mpitt@redhat.com> - 184-1
changelog:
  - Integration of Cockpit pages on the desktop rhbz#1651264
  - Fix crash in Simplified Chinese locale rhbz#1653544
  - Update screenshots in AppStream data rhbz#1656982
  - Update translations from Zanata rhbz#1608292
  - Improve login error message if cockpit-system is not installed rhbz#1650467
  - Mark deleted cookie as HttpOnly to pacify security scanners rhbz#1656441


author: Martin Pitt <mpitt@redhat.com> - 183-1
changelog:
  - Kernel Dump: Support non-local targets rhbz#1651691
  - Fix firewall page oops when not selecting anything rhbz#1652207
  - Fix changing user's own password rhbz#1652304
  - Never send Content-Length with chunked encoding rhbz#1652511
  - Include "Web Console" in package description rhbz#1653617
  - Respect SSH configuration


author: Martin Pitt <mpitt@redhat.com> - 179-1
changelog:
  - Various crash fixes (coverity) rhbz#1635182
  - Updates for React 16 (for future backports) rhbz#1635182
  - Fix building with platform-python rhbz#1631174


author: Martin Pitt <mpitt@redhat.com> - 178-1
changelog:
  - Fix remote unauthenticated crash with crafted URLs rhbz#1627634
  - Fix large downloads stalling after a few megabytes rhbz#1626847
  - Recommend system-logos to ensure correct branding rhbz#1626066


author: Martin Pitt <mpitt@redhat.com> - 177-1
changelog:
  - Support centrally-managed SSH known hosts rhbz#1622835
  - Drop support for Internet Explorer rhbz#1619993


author: Martin Pitt <mpitt@redhat.com> - 176-1
changelog:
  - Fix Cockpit activation message (/etc/issue.d) rhbz#1615316
  - Suggest other browsers when browser is unsupported rhbz#1619993


author: Marius Vollmer <mvollmer@redhat.com> - 174-1
changelog:
  - Kubernetes: VM detail page
  - Realmd: Install on demand
  - firewalld service is now being dropped by upstream
  - iscsi works fully now


author: Martin Pitt <mpitt@redhat.com> - 172-1
changelog:
  - System: Offer installation of PCP
  - Software Updates: Improve layout in mobile mode
  - Remove ability to drop privileges from navigation bar
  - API: Introduce flow control for all channels
  - Python 3 support rhbz#1561472


author: Martin Pitt <martin@piware.de> - 171-1
changelog:
  - Machines: Add virtual CPU configuration
  - Kubernetes: Add KubeVirt pod metrics
  - Docker: Show container volumes
  - Fix broken actions for non-administrators
  - Networking: Handle non-running NetworkManager
  - Accounts: User role improvements
  - Localize times


author: Martin Pitt <martin@piware.de> - 170-1
changelog:
  - Software Updates: Layout rework
  - oVirt: Use authenticated libvirt connection by default
  - Disable optional packages, they moved to cockpit-appstream source
  - Drop dashboard recommends from metapackage, not RHEL ready yet


author: Martin Pitt <martin@piware.de> - 169-1
changelog:
  - Storage: Offer installation of NFS client support
  - System: Request FreeIPA SSL certificate for Cockpit's web server
  - Services: Show unit relationships
  - Provide motd help about how to access cockpit


author: Martin Pitt <martin@piware.de> - 166-1
changelog:
  - Kubernetes: Add creation of Virtual Machines
  - Realms: Automatically set up Kerberos keytab for Cockpit web server
  - Numbers now get formatted correctly for the selected language


author: Martin Pitt <martin@piware.de> - 165-1
changelog:
  - Storage: Show more details of sessions and services that keep NFS busy
  - Machines: Detect if libvirtd is not running
  - Machines: Show virtual machines that are being created


author: Martin Pitt <martin@piware.de> - 164-1
changelog:
  - Storage: Move NFS management into new details page
  - System: Show available package updates and missing registration
  - System: Fix inconsistent tooltips
  - Logs: Change severities to officially defined syslog levels
  - Machines: Add error notifications
  - Accessibility improvements
  - Reloading the page in the browser now reloads Cockpit package manifests


author: Martin Pitt <martin@piware.de> - 163-1
changelog:
  - Drop "Transfer data asynchronously" VDO option on Storage page
  - Hide Docker storage pool reset button when it cannot work properly
  - Update jQuery to version 3.3.1 (deprecated cockpit API!)


author: Martin Pitt <martin@piware.de> - 161-1
changelog:
  - New VMs can be created on Machines page
  - VMs running in Kubernetes can now be deleted
  - Improve LVM volume resizing
  - Add new Hardware Information page
  - Load Application metadata (Appstream) packages on demand on Debian/Ubuntu
  - Rename cockpit-ovirt package to cockpit-machines-ovirt
  - Stop advertising and supporting cockpit-bundled jQuery library


author: Martin Pitt <martin@piware.de> - 160-1
changelog:
  - Add kubevirt Virtual Machines overview
  - Redesign package list on Software Updates page and show RHEL Errata
  - Install AppStream collection metadata packages on demand on Apps page
  - Add AppStream metadata to cockpit-sosreport for showing up on Apps page
  - Change CPU graphs to use "100%" for a fully loaded multi-processor system
  - Show storage, network, and other numbers with 3 digits of precision
  - Add an example bastion container


author: Martin Pitt <martin@piware.de> - 159-1
changelog:
  - Configure data deduplication with VDO devices on Storage page
  - Add serial console to virtual Machines page and redesign the Consoles tab
  - Show more error message details for failures on virtual Machines page


author: Martin Pitt <martin@piware.de> - 158-1
changelog:
  - Add check boxes for common NFS mount options
  - Clarify Software Update status if only security updates are available
  - Create self-signed certificates with SubjectAltName


author: Martin Pitt <martin@piware.de> - 156-1
changelog:
  - Redesign navigation and support mobile browsing
  - Use /etc/cockpit/krb5.keytab if present to support alternate keytabs
  - Add project homepage link to Apps page
  - Maintain issue(5) file with current Cockpit status
  - Use event-driven refresh of oVirt data instead of polling


author: Martin Pitt <martin@piware.de> - 155-1
changelog:
  - Add NFS client support to the Storage page
  - Add "Maintenance" switch for oVirt hosts
  - Fix Terminal rendering issues in Chrome
  - Prevent closing Terminal with Ctrl+W when focused
  - Support the upcoming OpenShift 3.7 release


author: Martin Pitt <martin@piware.de> - 154-1
changelog:
  - Center the "Disconnected" message in the content area
  - Fix two layout regressions on the Cluster page
  - Remove long-obsolete "./configure --branding" option


author: Martin Pitt <martin@piware.de> - 153-1
changelog:
  - Add cockpit-ovirt package to control oVirt virtual machine clusters
  - Clean up rpmlint/lintian errors in the packages


author: Martin Pitt <martin@piware.de> - 152-1
changelog:
  - Add Applications page
  - Add automatic update configuration for dnf to Software Updates
  - Fix cockpit-bridge crash if /etc/os-release does not exist


author: Martin Pitt <martin@piware.de> - 151-1
changelog:
  - Support loading SSH keys from arbitrary paths
  - Support X-Forwarded-Proto HTTP header for Kubernetes
  - Fix Kubernetes connection hangs (regression in version 150)


author: Martin Pitt <martin@piware.de> - 150-1
changelog:
  - Automatically enable and start newly created timers on the Services page
  - Support cockpit-dashboard installation into OSTree overlay on Atomic
  - Support Kubernetes basic auth with Google Compute Engine 1.7.x


author: petervo <petervo@redhat.com> - 149-1
changelog:
  - Support sending non-maskable interrupt to VMs
  - Fix building on fedora 27
  - Add information about non-met conditions for systemd services
  - Clear cockpit cookie on logout


author: Martin Pitt <martin@piware.de> - 146-1
changelog:
  - Show recent updates and live update log on Software Updates page
  - Improve available Software Updates table layout for small/mobile screens
  - Support OAuth Kubernetes logins to work with Google Compute Engine
  - Fix reporting ABRT crashes that are already known to the server
  - Scroll the virtual machine VNC console into view automatically


author: Martin Pitt <martin@piware.de> - 145-1
changelog:
  - Resize the terminal dynamically to use all available space
  - Let the Machines page update immediately after changes
  - Add delete VM functionality to the Machines page
  - Retire support for external Machines provider API
  - Always recommend rebooting after applying Software Updates
  - Group D-Bus channels to avoid hitting connection limits
  - Fix building on Fedora Rawhide/glibc 2.25.90


author: Martin Pitt <<martin@piware.de>> - 143-1
changelog:
  - Add "Software Updates" page for package (rpm/deb) based operating systems
  - Fix cockpit-machines package to make inline VNC console actually work
  - Fix Kubernetes authentication when Kubernetes configured for RBAC
  - Build Docker page for s390x architecture


author: Martin Pitt <<martin@piware.de>> - 142-1
changelog:
  - Virtual machines display an interactive console, either in browser, or a popup viewer
  - Fix Virtual Machines operations on non-English locales
  - Add documentation explaining how to grant/restrict access via polkit rules


author: Martin Pitt <<mpitt@redhat.com>> - 139-1
changelog:
  - Show more information about virtual machines, such as boot order
  - Fix enablement of timer systemd units created on Services page
  - Fix Storage crash on multiple iSCSI sessions
  - cockpit-docker is now installable with docker-ce or other alternatives
  - Hide docker push commands on Registry image pages for  "pull" roles


author: Stef Walter <<stefw@redhat.com>> - 138-1
changelog:
  - Only allow mdraid disk removal when it won't destroy data
  - Allow DN style usernames in the Kubernetes dashboard
  - Simplify protocol that cockpit talks to session authentication processes


author: Martin Pitt <<mpitt@redhat.com>> - 137-1
changelog:
  - Read ~/.ssh/known_hosts for connecting to remote machines with ssh
  - The Storage LVM setup can add unpartitioned free space as a physical volume
  - NetworkManager's Team plugin can be used on architectures other than x86_64
  - Cockpit's web server understands and properly responds to HTTP HEAD requests
  - Allow parameter substitution in manifest when spawning peer bridges


author: Martin Pitt <<mpitt@redhat.com>> - 134-1
changelog:
  - Show /etc/motd in the "System" task page
  - Drop "System" service actions which are intended for scripts
  - Make login page translatable
  - NetworkManager now activates slave interfaces by itself
  - Add call timeout option to the cockpit.dbus() API
  - The Debian packaging is now able to apply binary patches


author: Martin Pitt <<mpitt@redhat.com>> - 133-1
changelog:
  - Remotely managed machines are now configured in /etc/cockpit/machines.d/*.json
  - Fix NetworkManager's "MTU" dialog layout
  - Build the cockpit-tests package for releases too
  - Split translations into individual packages
  - Packages now configure alternate cockpit-bridge's to interact with the system


author: Martin Pitt <<mpitt@redhat.com>> - 132-1
changelog:
  - Make basic SELinux functionality available without setroubleshootd
  - Allow changing the MAC address for ethernet adapters and see them for bonds
  - Hide "autoconnect" checkbox for network devices without settings
  - Support for external providers other than libvirt on Machines page
  - Some tooltip fixes
  - Add option to restrict max read size to the Cockpit file API
  - Relax dependencies on cockpit-bridge package on Debian/Ubuntu
  - Rename cockpit-test-assets package to cockpit-tests
  - When touching patched files handle case of only one file
  - Always build the cockpit-tests subpackage


author: Stef Walter <<stefw@redhat.com>> - 131-1
changelog:
  - Show session virtual machines on Machines page
  - Fix use of the TAB key on login page
  - Robust naming and detection of network bond master
  - Debian packaging fixes


author: Stef Walter <<stefw@redhat.com>> - 130-1
changelog:
  - cockpit.file() can read non-memory-mappable file
  - Add kdump configuration user interface
  - Allow container Registry Console user names with '@' sign


author: Stef Walter <<stefw@redhat.com>> - 129-1
changelog:
  - Diagnostic sosreport feature now works on RHEL Atomic again
  - The configure script has a --disable-ssh option to toggle libssh dep
  - The configure --disable-ws option has been replaced with above.
  - Unit tests have been fixed on recent GLib versions
  - Several Fedora and Debian packaging fixes


author: Stef Walter <<stefw@redhat.com>> - 126-1
changelog:
  - Show security scan information about containers
  - Choose whether password is cached and reused on login screen
  - Allow renaming of active devices in networking interface
  - More clearly indicate when checking network connectivity
  - The remotectl command can now combine certificate and key files
  - Support Openshift's certificate autogeneration when used as a pod
  - The remotectl tool now checks for keys in certificate files
  - Domain join operations can now be properly cancelled
  - Make Kerberos authentication work even if gss-proxy is in use
  - Javascript code can now export DBus interfaces
  - When proxied, support X-Forwarded-Proto
  - Ignore block devices with a zero size in the storage interface


author: Stef Walter <<stefw@redhat.com>> - 125-1
changelog:
  - Cockpit is now properly translatable
  - Display OSTree signatures
  - New expandable views for storage devices
  - No longer offer to format read-only block devices
  - Use stored passphrases for LUKS devices properly
  - Start testing on RHEL 7.3
  - More strict about transport channels a bridge accepts
  - System shutdown can be scheduled by date


author: Stef Walter <<stefw@redhat.com>> - 124-1
changelog:
  - Build and test on Debian Jessie
  - Deprecate older javascript files
  - Properly terminate user sessions on the Accounts page
  - Fix regression on login screen in older Internet Explorer browsers
  - Fix regression where Date Picker was not shown in System Time dialog


author: Stef Walter <<stefw@redhat.com>> - 123-1
changelog:
  - Release a second tarball with cached javascript dependencies
  - Start verifying that Cockpit works on Ubuntu 16.04
  - Enable and verify the network functionality on Debian
  - Integration tests now log core dumps for diagnosis


author: Stef Walter <stefw@redhat.com> - 122-1
changelog:
  - Works with UDisks in addition to storaged
  - Allow logging into other systems from login page
  - Explicitly specify javascript dependency versions


author: Stef Walter <stefw@redhat.com> - 121-1
changelog:
  - Network Manager Checkpoints
  - Add Debian Branding
  - Fix GSSAPI login on Debian and Ubuntu
  - Generate map files for debugging Javascript and CSS


author: Stef Walter <stefw@redhat.com> - 120-1
changelog:
  - New containers page layout
  - Quick filtering of containers and images on the container page
  - Added sidebar for phisical volumes in a volume group
  - Run a separate cockpit-ssh process when making SSH connections
  - Allow connecting to remote machines from the login page
  - Only connect to remote machines already known to Cockpit
  - Fix bugs preventing journal page from working on Firefox 49
  - Add tooltip describing group name in Roles list


author: petervo <petervo@redhat.com> - 119-1
changelog:
  - Adds basic VM Management and Monitoring
  - MDRaid job improvements
  - Show unmanaged network devices
  - Better errors when formating storage devices
  - Updated VNC example
  - Port subscriptions package to react
  - Allow branding.css to overide shell css


author: Stef Walter <stefw@redhat.com> - 118-1
changelog:
  - Support PAM conversations on the Login screen
  - Users can create systemd timer jobs
  - Provide default names for volume groups and logical volumes
  - Make Docker graphs work on Debian
  - Only offer to format disks with supported file systems
  - Show all managed NetworkManager devices
  - Use webpack for building Cockpit javascript
  - Cockpit URLs can be proxied with a configured HTTP path prefix
  - Allow Cockpit packages to require a minimum version of Cockpit
  - Translations fixes


author: Stef Walter <stefw@redhat.com> - 0.117-1
changelog:
  - * Add support for network teams
  - * Select translations for complex language names
  - * Don't allow formating extended partitions
  - * Can configure Openshift Registry so anonymous users can pull images


author: Stef Walter <stefw@redhat.com> - 0.116-1
changelog:
  - * Support for volumes when starting a docker container
  - * Support for setting environment variables in a docker container
  - * Fix regressions that broke display of localized text


author: Stef Walter <stefw@redhat.com> - 0.115-1
changelog:
  - * Setup Docker container and image storage through the UI
  - * Use Webpack to build Cockpit UI packages
  - * Update the Cockpit Vagrant development box to use Fedora 24


author: Stef Walter <stefw@redhat.com> - 0.114-1
changelog:
  - .104
  - * Network configuration of the Ethernet MTU
  - * Red Hat Subscriptions can now specify activation keys and orgs
  - * Start integration testing on CentOS
  - * SSH Host keys are show on system page
  - * Machine ID is shown on system page
  - * Show intelligent password score error messages


author: Stef Walter <stefw@redhat.com> - 0.113-1
changelog:
  - * Show timer information for systemd timer jobs
  - * Use 'active-backup' as the default for new network bonds
  - * When changing system time check formats properly
  - * Hide the machine asset tag when no asset exists
  - * Disable the network on/off switch for unknown or unmanaged interfaces
  - * Show full string for system hardware info and operating system name


author: Stef Walter <stefw@redhat.com> - 0.112-1
changelog:
  - * Don't show network interfaces where NM_CONTROLLED=no is set
  - * Add textual fields to container memory and CPU sliders
  - * Display contianer memory and CPU resources on Debian
  - * Disable tuned correctly when clearing a performance profile
  - * Fix SELinux enforcing toggle switch and status


author: Stef Walter <stefw@redhat.com> - 0.111-1
changelog:
  - * Tarball build issue in 0.110 is now fixed
  - * The Containers page layouts have been tweaked
  - * Make the Containers resource limits work again
  - * Registry image now have layers displayed correctly


author: Dominik Perpeet <dperpeet@redhat.com> - 0.109-1
changelog:
  - * API stabilization, structural cleanup
  - * SELinux Troubleshooting: documentation, support latest API
  - * Update Patternfly
  - * Use CockpitLang cookie and Accept-Language for localization
  - * Can now click through to perform administration tasks on Nodes on the Cluster dashboard
  - * Cockpit terminal now supports shells like fish


author: Stef Walter <stefw@redhat.com> - 0.108-1
changelog:
  - * SELinux troubleshooting alerts can now be dismissed
  - * Show SELinux icon for critical alerts
  - * SELinux enforcing mode can be turned off and on with a switch
  - * Kubernetes Nodes are now include charts about usage data
  - * Fix Debian dependency on Docker
  - * Update the look and feel of the toggle switch
  - * Update ListenStream documentation to include address info


