# changelog

author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-9
changelog:
  - The template scripts needed to use @libdir@ instead of hardcoding
  - /usr/lib
  - Use make DESTDIR=$RPM_BUILD_ROOT install instead of % makeinstall
  - do the actual build in a "built" subdirectory, until we remove
  - the old script templates


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-15
changelog:
  - Touch all of the ldap/admin/src/scripts/*.in files so that they
  - will be newer than their corresponding script template files, so
  - that make will rebuild them.


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-16
changelog:
  - Fixed the problem where the server would crash upon shutdown in dblayer
  - due to a race condition among the database housekeeping threads
  - Fix a problem with normalized absolute paths for db directories


author: Dennis Gilmore <dennis@ausil.us> - 1.1-0.1.cvs20070108
changelog:
  - update to a cvs snapshot
  - fedorafy the spec 
  - create -devel subpackage
  - apply a patch to use mozldap not mozldap6
  - apply a patch to allow --prefix to work correctly


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-1.el4.cvs20070119
changelog:
  - Changed version to 1.1.0 and added Release 1.el4.cvs20070119
  - merged in changes from Fedora Extras candidate spec file


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-6.el4.20070125
changelog:
  - Move the plugin *.so files into the main package instead of the devel
  - package because they are loaded directly by name via dlopen


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-8.el4.20070125
changelog:
  - added logconv.pl
  - added slapi-plugin.h to devel package
  - added explicit dirs for /var/log/fedora-ds et. al.


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070213
changelog:
  - More cleanup suggested by Dennis Gilmore
  - This is the fedora extras candidate based on cvs tag FedoraDirSvr110a1


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070223
changelog:
  - Renamed package to fedora-ds-base, but keep names of paths/files/services the same
  - use the shortname macro (fedora-ds) for names of paths, files, and services instead
  - of name, so that way we can continue to use e.g. /etc/fedora-ds instead of /etc/fedora-ds-base
  - updated to latest sources


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070320
changelog:
  - update to latest sources
  - added migrateTo11 to allow migrating instances from 1.0.x to 1.1
  - ldapi support
  - fixed pam passthru plugin ENTRY method


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.3.20070720
changelog:
  - Added Requires for perldap, cyrus sasl plugins
  - Removed template-migrate* files
  - Added perl module directory
  - Removed install.inf - setup-ds.pl can now easily generate one


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-1.2
changelog:
  - fix build breakage due to open()
  - mock could not find BuildRequires: db4-devel >= 4.2.52
  - mock works if >= version is removed - it correctly finds db4.6


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-2.0
changelog:
  - This is the beta2 release
  - new file added to package - /etc/sysconfig/dirsrv - for setting
  - daemon environment as is usual in other linux daemons


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-4
changelog:
  - This is the GA release of Fedora DS 1.1
  - Removed version numbers for BuildRequires and Requires
  - Added full URL to source tarball


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0.1-1
changelog:
  - Resolves bug 434403 - GCC 4.3 build fails
  - Rolled new source tarball which includes Nathan's fix for the struct ucred
  - NOTE: Change version back to 1.1.1 for next release
  - this release was pulled from CVS tag FedoraDirSvr110_gcc43


author: Tom "spot" Callaway <tcallawa@redhat.com> - 1.1.0.1-3
changelog:
  - add patch to allow server to work with NSS 3.11.99 and later
  - do NSS_Init after fork but before detaching from console


author: Rich Megginson <rmeggins@redhat.com> - 1.1.2-1
changelog:
  - This is the 1.1.2 release.  The bugs fixed can be found here
  - https://bugzilla.redhat.com/showdependencytree.cgi?id=452721
  - Added winsync-plugin.h to the devel subpackage


author: Rich Megginson <rmeggins@redhat.com> - 1.2.0-1
changelog:
  - new release 1.2.0
  - Made devel package depend on mozldap-devel
  - only create run dir if it does not exist
  - CVS tag: FedoraDirSvr_1_2_0_RC1 FedoraDirSvr_1_2_0_RC1_20090330


author: Rich Megginson <rmeggins@redhat.com> - 1.2.0-4
changelog:
  - final release 1.2.0
  - Resolves: bug 475338 - LOG: the intenal type of maxlogsize, maxdiskspace and minfreespace should be 64-bit integer
  - Resolves: bug 496836 - SNMP ldap-agent on Solaris: Unable to open semaphore for server: 389
  - CVS tag: FedoraDirSvr_1_2_0 FedoraDirSvr_1_2_0_20090428


author: Rich Megginson <rmeggins@redhat.com> - 1.2.1-1
changelog:
  - change name to 389
  - change version to 1.2.1
  - added initial support for numeric string syntax
  - added initial support for syntax validation
  - added initial support for paged results including sorting


author: Rich Megginson <rmeggins@redhat.com> - 1.2.2-1
changelog:
  - backed out - added template-initconfig to %files - this change is for the next major release
  - bump version to 1.2.2
  - fix reopened 509472 db2index all does not reindex all the db backends correctly
  - fix 518520 -  pre hashed salted passwords do not work
  - see https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of
  - bugs fixed in 1.2.2


author: Rich Megginson <rmeggins@redhat.com> - 1.2.3-1
changelog:
  - 1.2.3 release
  - added template-initconfig to %files
  - %posttrans now runs update to update the server instances
  - servers are shutdown, then restarted if running before install
  - scriptlets mostly use lua now to pass data among scriptlet phases


author: Rich Megginson <rmeggins@redhat.com> - 1.2.4-1
changelog:
  - 1.2.4 release
  - resolves bug 221905 - added support for Salted MD5 (SMD5) passwords - primarily for migration
  - resolves bug 529258 - Make upgrade remove obsolete schema from 99user.ldif


author: Nathan Kinder <nkinder@redhat.com> - 1.2.6-0.4.a3
changelog:
  - 1.2.6.a3 release
  - add managed entries plug-in
  - many bug fixes
  - moved selinux subpackage into base package


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.8.rc3
changelog:
  - 1.2.6 release candidate 3
  - git tag 389-ds-base-1.2.6.rc3
  - Bug 603942 - null deref in _ger_parse_control() for subjectdn
  - 609256  - Selinux: pwdhash fails if called via Admin Server CGI
  - 578296  - Attribute type entrydn needs to be added when subtree rename switch is on
  - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl
  - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
  - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
  - 606920 - anonymous resource limit - nstimelimit - also applied to "cn=directory manager"


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.9.rc3
changelog:
  - make selinux-devel explicit Require the base package in order
  - to comply with Fedora Licensing Guidelines


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.10.rc6
changelog:
  - 1.2.6 release candidate 6
  - git tag 389-ds-base-1.2.6.rc6
  - Bug 617013 - repl-monitor.pl use cpu upto 90%
  - Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats
  - Bug 547503 - replication broken again, with 389 MMR replication and TCP errors
  - Bug 613833 - Allow dirsrv_t to bind to rpc ports
  - Bug 612242 - membership change on DS does not show on AD
  - Bug 617629 - Missing aliases in new schema files
  - Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears
  - Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments
  - Bug 617862 - Replication: Unable to delete tombstone errors
  - Bug 594745 - Get rid of dirsrv_lib_t label


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.11.rc7
changelog:
  - 1.2.6 release candidate 7
  - git tag 389-ds-base-1.2.6.rc7
  - Bug 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6.1-1
changelog:
  - This is the 1.2.6.1 release - git tag 389-ds-base-1.2.6.1
  - Bug 634561 - Server crushes when using Windows Sync Agreement
  - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self
  - Bug 612264 - ACI issue with (targetattr='userPassword')
  - Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager"
  - Bug 631862 - crash - delete entries not in cache + referint


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.2.a2
changelog:
  - 1.2.7.a2 release - a1 was the OpenLDAP testday release
  - git tag 389-ds-base-1.2.7.a2
  - added openldap support on platforms that use openldap with moznss
  - for crypto (F-14 and later)
  - many bug fixes
  - Account Policy Plugin (keep track of last login, disable old accounts)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.3.a3
changelog:
  - 1.2.7.a3 release - a2 was never released
  - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
  - Bug 629681 - Retro Changelog trimming does not behave as expected
  - Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif
  -              are not upgraded in the server instance schema dir


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.4.a3
changelog:
  - 1.2.7.a3 release - a2 was never released - this is a rebuild to pick up
  - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
  - Adding the ancestorid fix code to ##upgradednformat.pl.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.5.a4
changelog:
  - 1.2.7.a4 release - git tag 389-ds-base-1.2.7.a4
  - Bug 647932 - multiple memberOf configuration adding memberOf where there is 
  no member
  - Bug 491733 - dbtest crashes
  - Bug 606545 - core schema should include numSubordinates
  - Bug 638773 - permissions too loose on pid and lock files
  - Bug 189985 - Improve attribute uniqueness error message
  - Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operat
  ions
  - Bug 619633 - Make attribute uniqueness obey requiredObjectClass


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.6.a5
changelog:
  - 1.2.7.a5 release - git tag 389-ds-base-1.2.7.a5
  - Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-ref
  erral)
  - Bug 635009 - Add one-way AD sync capability
  - Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot
  - put replication config entries in separate file
  - Bug 567282 - server can not abandon searchRequest of "simple paged results"
  - Bug 329751 - "nested" filtered roles searches candidates more than needed
  - Bug 521088 - DNA should check ACLs before getting a value from the range


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.1-1
changelog:
  - 1.2.7.1 release - git tag 389-ds-base-1.2.7.1
  - Bug 656515 - Allow Name and Optional UID syntax for grouping attributes
  - Bug 656392 - Remove calls to ber_err_print()
  - Bug 625950 - hash nsslapd-rootpw changes in audit log


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.2-1
changelog:
  - 1.2.7.2 release - git tag 389-ds-base-1.2.7.2
  - Bug 659456 - Incorrect usage of ber_printf() in winsync code
  - Bug 658309 - Process escaped characters in managed entry mappings
  - Bug 197886 - Initialize return value for UUID generation code
  - Bug 658312 - Allow mapped attribute types to be quoted
  - Bug 197886 - Avoid overflow of UUID generator


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.3-1
changelog:
  - 1.2.7.3 release - git tag 389-ds-base-1.2.7.3
  - Bug 658312 - Invalid free in Managed Entry plug-in
  - Bug 641944 - Don't normalize non-DN RDN values


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.2.a2
changelog:
  - 1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2
  - Bug 674430 - Improve error messages for attribute uniqueness
  - Bug 616213 - insufficient stack size for HP-UX on PA-RISC
  - Bug 615052 - intrinsics and 64-bit atomics code fails to compile
  -    on PA-RISC
  - Bug 151705 - Need to update Console Cipher Preferences with new ciphers
  - Bug 668862 - init scripts return wrong error code
  - Bug 670616 - Allow SSF to be set for local (ldapi) connections
  - Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the 
  -    log output to the text file
  - Bug 668619 - slapd stops responding
  - Bug 624547 - attrcrypt should query the given slot/token for
  -    supported ciphers
  - Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any 
  -    error message in logs


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.3.a3
changelog:
  - 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3
  - Bug 675320 - empty modify operation with repl on or lastmod off will crash server
  - Bug 675265 - preventryusn gets added to entries on a failed delete
  - Bug 677774 - added support for tmpfiles.d
  - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search
  es
  - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH
  - Bug 671199 - Don't allow other to write to rundir
  - Bug 678646 - Ignore tombstone operations in managed entry plug-in
  - Bug 676053 - export task followed by import task causes cache assertion
  - Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8
  - Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used
  - Bug 676689 - crash while adding a new user to be synced to windows
  - Bug 604881 - admin server log files have incorrect permissions/ownerships
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv
  ice is restarted
  - Bug 675853 - dirsrv crash segfault in need_new_pw()


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.4.a3
changelog:
  - do not create /var/run/dirsrv - setup will create it instead
  - remove the fedora-ds initscript upgrade stuff - we do not support that anymore
  - convert the remaining lua stuff to plain old shell script


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.6.rc1
changelog:
  - 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1
  - Bug 518890 - setup-ds-admin.pl - improve hostname validation
  - Bug 681015 - RFE: allow fine grained password policy duration attributes in 
  -     days, hours, minutes, as well
  - Bug 514190 - setup-ds-admin.pl --debug does not log to file
  - Bug 680555 - ns-slapd segfaults if I have more than 100 DBs
  - Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically
  - Bug 674852 - crash in ldap-agent when using OpenLDAP
  - Bug 679978 - modifying attr value crashes the server, which is supposed to
  -     be indexed as substring type, but has octetstring syntax
  - Bug 676655 - winsync stops working after server restart
  - Bug 677705 - ds-logpipe.py script is failing to validate "-s" and
  -     "--serverpid" options with "-t".
  - Bug 625424 - repl-monitor.pl doesn't work in hub node


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.8.rc2
changelog:
  - 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2
  - Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences
  - Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format
  - Bug 681015 - RFE: allow fine grained password policy duration attributes
  -              in days, hours, minutes, as well
  - Bug 684996 - Exported tombstone cannot be imported correctly
  - Bug 683250 - slapd crashing when traffic replayed
  - Bug 668909 - Can't modify replication agreement in some cases
  - Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1
  - Bug 644784 - Memory leak in "testbind.c" plugin
  - Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.9.rc4
changelog:
  - 389-ds-base-1.2.8.rc4
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv
  ice is restarted
  - 389-ds-base-1.2.8.rc3
  - Bug 690955 - Mrclone fails due to the replica generation id mismatch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.10.rc5
changelog:
  - 389-ds-base-1.2.8.rc5
  - Bug 692469 - Replica install fails after step for "enable GSSAPI for replication"


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.0-1
changelog:
  - 389-ds-base-1.2.8.0
  - Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1
  - Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1
  - Bug 693466 - Unable to change schema online
  - Bug 693503 - matching rules do not inherit from superior attribute type
  - Bug 693455 - nsMatchingRule does not work with multiple values
  - Bug 693451 - cannot use localized matching rules
  - Bug 692331 - Segfault on index update during full replication push on 1.2.7.5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1
changelog:
  - 389-ds-base-1.2.8.2
  - Bug 696407 - If an entry with a mixed case RDN is turned to be
  -    a tombstone, it fails to assemble DN from entryrdn


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.3-1
changelog:
  - 389-ds-base-1.2.8.3
  - Bug 700145 - userpasswd not replicating
  - Bug 700557 - Linked attrs callbacks access free'd pointers after close
  - Bug 694336 - Group sync hangs Windows initial Sync
  - Bug 700215 - ldclt core dumps
  - Bug 695779 - windows sync can lose old values when a new value is added
  - Bug 697027 - 12 - minor memory leaks found by Valgrind + TET


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9-0.2.a2
changelog:
  - 389-ds-base-1.2.9.a2
  - look for separate openldap ldif library
  - Split automember regex rules into separate entries
  - writing Inf file shows SchemaFile = ARRAY(0xhexnum)
  - add support for ldif files with changetype: add
  - Bug 716980 - winsync uses old AD entry if new one not found
  - Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9
  - bump console version to 1.2.6
  - Bug 711679 - unresponsive LDAP service when deleting vlv on replica
  - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file
  - Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package
  - Bug 663752 - Cert renewal for attrcrypt and encchangelog
  - Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute
  - Bug 711906 - ns-slapd segfaults using suffix referrals
  - Bug 707384 - only allow FIPS approved cipher suites in FIPS mode
  - Bug 710377 - Import with chain-on-update crashes ns-slapd
  - Bug 709826 - Memory leak: when extra referrals configured


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.0-1
changelog:
  - Bug 720059 - RDN with % can cause crashes or missing entries
  - Bug 709468 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2.
  - Bug 691313 - Need TLS/SSL error messages in repl status and errors log
  - Bug 712855 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not
  - Bug 713209 - Update sudo schema
  - Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9
  - Bug 718303 - Intensive updates on masters could break the consumer's cache
  - Bug 711679 - unresponsive LDAP service when deleting vlv on replica


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.1-1
changelog:
  - Bug 663752 - Cert renewal for attrcrypt and encchangelog
  -   this was "re-fixed" due to a deadlock condition with cl2ldif task cancel
  - Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma
  - Bug 725743 - Make memberOf use PRMonitor for it's operation lock
  - Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.1-2
changelog:
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed to use configure test for GCC provided 64-bit atomic functions


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.3-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  previous patch broke build on el5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.4-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix coverity NULL deref in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.5-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix another coverity NULL deref in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.6-1
changelog:
  - Bug 728510 - Run dirsync after sending updates to AD
  - Bug 729717 - Fatal error messages when syncing deletes from AD
  - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working.
  - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed again - separate tests for atomic ops and atomic bool cas


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.7-1
changelog:
  - Bug 733103 - large targetattr list with syntax errors cause server to crash or hang
  - Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining
  - Bug 732541 - Ignore error 32 when adding automember config
  - Bug 728592 - Allow ns-slapd to start with an invalid server cert


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.8-1
changelog:
  - Bug 732153 - subtree and user account lockout policies implemented?
  - Bug 722292 - Entries in DS are not updated properly when using WinSync API


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.9-1
changelog:
  - Bug 735121 - simple paged search + ip/dns based ACI hangs server
  - Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code
  - Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server
  - Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.a2-0.2
changelog:
  - Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations
  - Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config
  - Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.4.a4
changelog:
  - Bug 741744 - part3 - MOD operations with chained delete/add get back error 53
  - 1d2f5a0 make memberof transaction aware and able to be a betxnpostoperation plug in
  - b6d3ba7 pass the plugin config entry to the plugin init function
  - 28f7bfb set the ENTRY_POST_OP for modrdn betxnpostoperation plugins
  - Bug 743966 - Compiler warnings in account usability plugin


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.5.a5
changelog:
  - Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD'
  - Bug 750625 750624 750622 744946 Coverity issues
  - Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication
  - Bug 748575 - rhds81 modrn operation and 100% cpu use in replication
  - Bug 745259 - Incorrect entryUSN index under high load in replicated environment
  - f639711 Reduce the number of DN normalization
  - c06a8fa Keep unhashed password psuedo-attribute in the adding entry
  - Bug 744945 - nsslapd-counters attribute value cannot be set to "off"
  - 8d3b921 Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular
  - d316a67 Change referential integrity to be a betxnpostoperation plugin


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.6.a6
changelog:
  - Bug 755725 - 389 programs linked against openldap crash during shutdown
  - Bug 755754 - Unable to start dirsrv service using systemd
  - Bug 745259 - Incorrect entryUSN index under high load in replicated environment
  - d439e3a use slapi_hexchar2int and slapi_str_to_u8 everywhere
  - 5910551 csn_init_as_string should not use sscanf
  - b53ba00 reduce calls to csn_as_string and slapi_log_error
  - c897267 fix member variable name error in slapi_uniqueIDFormat
  - 66808e5 uniqueid formatting - use slapi_u8_to_hex instead of sprintf
  - 580a875 csn_as_string - use slapi_uN_to_hex instead of sprintf
  - Bug 751645 - crash when simple paged fails to send entry to client
  - Bug 752155 - Use restorecon after creating init script lock file


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.7.a7
changelog:
  - Ticket #262 - pid file not removed with systemd
  - Ticket #50 - server should not call a plugin after the plugin close function is called
  - Ticket #18 - Data inconsitency during replication
  - Ticket #49 - better handling for server shutdown while long running tasks are active
  - Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead
  - Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same
  - Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI
  - 6aaeb77 add a hack to disable sasl hostname canonicalization
  - Ticket 168 - minssf should not apply to rootdse
  - Ticket #177 - logconv.pl doesn't detect restarts
  - Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating
  - Ticket 75 - Unconfigure plugin opperations are being called.
  - Ticket 26 - Please support setting defaultNamingContext in the rootdse.
  - Ticket #71 - unable to delete managed entry config
  - Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock
  - Ticket #256 - debug build assertion in ACL_EvalDestroy()
  - Ticket #4 - bak2db gets stuck in infinite loop
  - Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS
  - Ticket #3: acl cache overflown problem
  - Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations
  - Ticket 2 - If node entries are tombstone'd, subordinate entries fail to get the full DN.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.8.a7
changelog:
  - fixes for systemd - remove .pid files after shutting down servers
  - Ticket #263 - add systemd include directive
  - Ticket #264 - upgrade needs better check for "server is running"


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.10.rc1
changelog:
  - ad9dd30 coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers to system resources
  - Ticket #281 - TLS not working with latest openldap
  - Ticket #280 - extensible binary filters do not work
  - Ticket #279 - filter normalization does not use matching rules
  - Trac Ticket #275 - Invalid read reported by valgrind
  - Ticket #277 - cannot set repl referrals or state
  - Ticket #278 - Schema replication update failed: Invalid syntax
  - Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through Auth plugin is enabled
  - Ticket #13 - slapd process exits when put the database on read only mode while updates are coming to the server
  - Ticket #87 - Manpages fixes
  - c493fb4 fix a couple of minor coverity issues
  - Ticket #55 - Limit of 1024 characters for nsMatchingRule
  - Trac Ticket #274 - Reindexing entryrdn fails if ancestors are also tombstoned
  - Ticket #6 - protocol error from proxied auth operation
  - Ticket #38 - nisDomain schema is incorrect
  - Ticket #273 - ruv tombstone searches don't work after reindex entryrdn
  - Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword
  - Ticket #22 - RFE: Support sendmail LDAP routing schema
  - Ticket #161 - Review and address latest Coverity issues
  - Ticket #140 - incorrect memset parameters
  - Trac Ticket 35 - Log not clear enough on schema errors
  - Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn
  - Trac Ticket #52 - FQDN set to nsslapd-listenhost makes the server start fail if IPv4-mapped-IPv6 address is given


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.0-1
changelog:
  - Ticket 284 - Remove unnecessary SNMP MIB files
  - Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5?
  - Ticket 175 - logconv.pl improvements


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-1
changelog:
  - Trac Ticket #298 - crash when replicating orphaned tombstone entry
  - Ticket #281 - TLS not working with latest openldap
  - Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails
  - Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.3-1
changelog:
  - b05139b memleak in normalize_mods2bvals
  - c0eea24 memleak in mep_parse_config_entry
  - 90bc9eb handle null smods
  - Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash
  - Ticket #306 - void function cannot return value
  - ticket 304 - Fix kernel version checking in dsktune


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.4-4
changelog:
  - Ticket #46 - (revised) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #66 - 389-ds-base spec file does not have a BuildRequires on gcc-c++


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11-0.1.a1
changelog:
  - 453eb97 schema def must have DESC '' - close paren must be preceded by space
  - Trac Ticket #46 - (additional) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #331 - transaction errors with db 4.3 and db 4.2
  - Ticket #261 - Add Solaris i386
  - Ticket #316 and Ticket #70 - add post add/mod and AD add callback hooks
  - Ticket #324 - Sync with group attribute containing () fails
  - Ticket #319 - ldap-agent crashes on start with signal SIGSEGV
  - 77cacd9 coverity 12606 Logically dead code
  - Trac Ticket #303 - make DNA range requests work with transactions
  - Ticket #320 - allow most plugins to be betxn plugins
  - Ticket #24 - Add nsTLS1 to the DS schema
  - Ticket #271 - Slow shutdown when you have 100+ replication agreements
  - TIcket #285 - compilation fixes for '--format-security'
  - Ticket 211 - Avoid preop range requests non-DNA operations
  - Ticket #271 - replication code cleanup
  - Ticket 317 - RHDS fractional replication with excluded password policy attributes leads to wrong error messages.
  - Ticket #308 - Automembership plugin fails if data and config area mixed in the plugin configuration
  - Ticket #292 - logconv.pl reporting unindexed search with different search base than shown in access logs
  - 6f8680a coverity 12563 Read from pointer after free (fix 2)
  - e6a9b22 coverity 12563 Read from pointer after free
  - 245d494 Config changes fail because of unknown attribute "internalModifiersname"
  - Ticket #191  - Implement SO_KEEPALIVE in network calls
  - Ticket #289 - allow betxn plugin config changes
  - 93adf5f destroy the entry cache and dn cache in the dse post op delete callback
  - e2532d8 init txn thread private data for all database modes
  - Ticket #291 - cannot use & in a sasl map search filter
  - 6bf6e79 Schema Reload crash fix
  - 60b2d12 Fixing compiler warnings
  - Trac Ticket #260 - 389 DS does not support multiple paging controls on a single connection
  - Ticket #302 - use thread local storage for internalModifiersName & internalCreatorsName
  - fdcc256 Minor bug fix introcuded by commit 69c9f3bf7dd9fe2cadd5eae0ab72ce218b78820e
  - Ticket #306 - void function cannot return value
  - ticket 181 - Allow PAM passthru plug-in to have multiple config entries
  - ticket 211 - Use of uninitialized variables in ldbm_back_modify()
  - Ticket #74 - Add schema for DNA plugin (RFE)
  - Ticket #301 - implement transaction support using thread local storage
  - Ticket #211 - dnaNextValue gets incremented even if the user addition fails
  - 144af59 coverity uninit var and resource leak
  - Trac Ticket #34 - remove-ds.pl does not remove everything
  - Trac Ticket #169 - allow 389 to use db5
  - bc78101 fix compiler warning in acct policy plugin
  - Trac Ticket #84 - 389 Directory Server Unnecessary Checkpoints
  - Trac Ticket #27 - SASL/PLAIN binds do not work
  - Ticket #129 - Should only update modifyTimestamp/modifiersName on MODIFYops
  - Ticket #17 - new replication optimizations


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.1-1
changelog:
  - f227f11 Suppress alert on unavailable port with forced setup
  - Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return
  - Ticket #351 - use betxn plugins by default
  - Trac Ticket #345 - db deadlock return should not log error
  - Ticket #348 - crash in ldap_initialize with multiple threads
  - Ticket #214 - Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied
  - Ticket #207 - [RFE] enable attribute that tracks when a password was last set
  - Ticket #216 - RFE - Disable replication agreements
  - Ticket #337 - RFE - Improve CLEANRUV functionality
  - Ticket #326 - MemberOf plugin should work on all backends
  - Trac Ticket #19 - Convert entryUSN plugin to transaction aware type
  - Ticket #347 - IPA dirsvr seg-fault during system longevity test
  - Trac Ticket #310 - Avoid calling escape_string() for logged DNs
  - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object
  - Ticket #183 - passwordMaxFailure should lockout password one sooner
  - Trac Ticket #335 - transaction retries need to be cache aware
  - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - Ticket #325 - logconv.pl : use of getopts to parse command line options
  - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - 554e29d Coverity Fixes
  - Trac Ticket #46 - (additional 2) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #183 - passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions
  - Ticket #315 - small fix to libglobs
  - Ticket #315 - ns-slapd exits/crashes if /var fills up
  - Ticket #20 - Allow automember to work on entries that have already been added
  - Trac Ticket #45 - Fine Grained Password policy: if passwordHistory is on, deleting the password fails.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.2-1
changelog:
  - Ticket #351 - use betxn plugins by default
  -   revert - make no plugins betxn by default - too great a risk
  -   for deadlocks until we can test this better
  - Ticket #348 - crash in ldap_initialize with multiple threads
  -   fixes PR_Init problem in ldclt


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.4-1
changelog:
  - Ticket #360 - ldapmodify returns Operations error
  - Ticket #321 - krbExtraData is being null modified and replicated on each ssh login
  - Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress
  - Ticket #361: Bad DNs in ACIs can segfault ns-slapd
  - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object
  - Ticket #337 - Improve CLEANRUV task


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.5-1
changelog:
  - Ticket #387 - managed entry sometimes doesn't delete the managed entry
  - 5903815 improve txn test index handling
  - Ticket #360 - ldapmodify returns Operations error - fix delete caching
  - bcfa9e3 Coverity Fix for CLEANALLRUV
  - Trac Ticket #335 - transaction retries need to be cache aware
  - Ticket #389 - ADD operations not in audit log
  - 44cdc84 fix coverity issues with uninit vals, no return checking
  - Ticket 368 - Make the cleanAllRUV task one step
  - Ticket #110 - RFE limiting root DN by host, IP, time of day, day of week


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.6-1
changelog:
  - Ticket #378 - audit log does not log unhashed password: enabled, by default.
  - Ticket #378 - unhashed#user#password visible after changing password
  - Ticket #365 - passwords in clear text in the audit log


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.7-2
changelog:
  - Ticket 378 - unhashed#user#password visible after changing password
  -  fix func declaration from previous patch
  - Ticket 366 - Change DS to purge ticket from krb cache in case of authentication error


author: Mark Reynolds <mareynol@redhat.com> - 1.2.11.8-1
changelog:
  ddcf669 bump version to 1.2.11.8 for offical release
  Ticket #425 - support multiple winsync plugins
  Ticket 403 - cleanallruv coverity fixes
  Ticket 407 - memory leak in dna plugin
  Ticket 403 - CLEANALLRUV feature
  Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs
  3168f04 Coverity defects
  5ff0a02 COVERITY FIXES
  Ticket #388 - Improve replication agreement status messages
  0760116 Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns
  Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion
  Ticket #409 - Report during startup if nsslapd-cachememsize is too small
  Ticket #412 - memberof performance enhancement
  12813: Uninitialized pointer read string_values2keys
  Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  Ticket #410 - Referential integrity plug-in does not work when update interval is not zero
  Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled
  Ticket #405 - referint modrdn not working if case is different
  Ticket 399 - slapi_ldap_bind() doesn't check bind results


author: Mark Reynolds <mareynol@redhat.com> - 1.2.11.11-1
changelog:
  6c0778f bumped version to 1.2.11.11
  Ticket 429 - added nsslapd-readonly to DS schema
  Ticket 403 - fix CLEANALLRUV regression from last commit
  Trac Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.12-1
changelog:
  - 8e5087a Coverity defects - 13089: Dereference after null check ldbm_back_delete
  - Trac Ticket #437 - variable dn should not be used in ldbm_back_delete
  - ba1f5b2 fix coverity resource leak in windows_plugin_add
  - e3e81db Simplify program flow: change while loops to for
  - a0d5dc0 Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0)
  - 0808f7e Simplify program flow: make adduids/moduids/deluids action blocks all similar
  - 77eb760 Simplify program flow: eliminate unnecessary continue
  - c9e9db7 Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new
  - a4ca0cc Change "return"s in modGroupMembership to "break"s to avoid leaking
  - d49035c Factorize into new isPosixGroup function
  - 3b61c03 coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free
  - 33ce2a9 fix mem leaks with parent dn log message, setting winsync windows domain
  - Ticket #440 - periodic dirsync timed event causes server to loop repeatedly
  - Ticket #355 - winsync should not delete entry that appears to be out of scope
  - Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values.
  - 487932d coverity - mbo dead code - winsync leaks, deadcode, null check, test code
  - 2734a71 CLEANALLRUV coverity fixes
  - Ticket #426 - support posix schema for user and group sync
  - Ticket #430 - server to server ssl client auth broken with latest openldap


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.13-1
changelog:
  - Ticket #426 - support posix schema for user and group sync
  -   1) plugin config ldif must contain pluginid, etc. during upgrade or it
  -      will fail due to schema errors
  -   2) posix winsync should have a lower precedence (25) than the default (50)
  -      so that it will be run first
  -   3) posix winsync should support the Winsync API v3 - the v2 functions are
  -      just stubs for now - but the precedence cb is active


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.14-1
changelog:
  - Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement
  - Ticket 386 - large memory growth with ldapmodify(heap fragmentation)
  -  this patch doesn't fix the bug - it allows us to experiment with
  -  different values of mxfast
  - Ticket #374 - consumer can go into total update mode for no reason


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-1
changelog:
  - Trac Ticket #470 - 389 prevents from adding a posixaccount with userpassword after schema reload
  - Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang
  - Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start
  - Ticket 473 - change VERSION.sh to have console version be major.minor
  - Ticket 475 - Root DN Access Control - improve value checking for config
  - Trac Ticket #466 - entry_apply_mod - ADD: Failed to set unhashed#user#password to extension
  - Ticket 474 - Root DN Access Control - days allowed not working correctly
  - Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas
  - 0b79915 fix compiler warnings in ticket 374 code
  - Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope


author: Mark Reynolds <mareynol@redhat.com> - 1.3.0.a1-1
changelog:
  Ticket #28 	MOD operations with chained delete/add get back error 53 on backend config
  Ticket #173 	ds-logpipe.py script's man page and script help should be updated for -t option.
  Ticket #196 	RFE: Interpret IPV6 addresses for ACIs, replication, and chaining 
  Ticket #218 	RFE - Make RIP working with Replicated Entries 
  Ticket #328 	make sure all internal search filters are properly escaped 
  Ticket #329 	389-admin build fails on F-18 with new apache 	
  Ticket #344 	deadlock in replica_write_ruv
  Ticket #351 	use betxn plugins by default
  Ticket #352 	make cos, roles, views betxn aware 
  Ticket #356 	logconv.pl - RFE - track bind info
  Ticket #365 	Audit log - clear text password in user changes 
  Ticket #370 	Opening merge qualifier CoS entry using RHDS console changes the entry. 
  Ticket #372 	Setting nsslapd-listenhost or nsslapd-securelistenhost breaks ACI processing 	
  Ticket #386 	Overconsumption of memory with large cachememsize and heavy use of ldapmodify 	
  Ticket #402 	unhashedTicket #userTicket #password in entry extension 	
  Ticket #408 	Create a normalized dn cache 	
  Ticket #453 	db2index with -tattrname:type,type fails 	
  Ticket #461 	fix build problem with mozldap c sdk 	
  Ticket #462 	add test for include file mntent.h 	
  Ticket #463 	different parameters of getmntent in Solaris


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.1.rc1
changelog:
  - bump version to 1.3.0.rc1
  - Ticket #322 - Create DOAP description for the 389 Directory Server project
  - Trac Ticket #499 - Handling URP results is not corrrect
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Ticket 456 - improve entry cache sizing
  - Trac Ticket #531 - loading an entry from the database should use str2entry_f
  - Trac Ticket #536 - Clean up compiler warnings for 1.3
  - Trac Ticket #531 - loading an entry from the database should use str2entry_fast
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Ticket 527 - ns-slapd segfaults if it cannot rename the logs
  - Ticket 395 - RFE: 389-ds shouldn't advertise in the rootDSE that we can handle a sasl mech if we really can't
  - Ticket 216 - disable replication agreements
  - Ticket 518 - dse.ldif is 0 length after server kill or machine kill
  - Ticket 393 - Change in winSyncInterval does not take immediate effect
  - Ticket 20 - Allow automember to work on entries that have already been added
  - Coverity Fixes
  - Ticket 349 - nsViewFilter syntax issue in 389DS 1.2.5
  - Ticket 337 - improve CLEANRUV functionality
  - Fix for ticket 504
  - Ticket 394 - modify-delete userpassword
  - minor fixes for bdb 4.2/4.3 and mozldap
  - Trac Ticket #276 - Multiple threads simultaneously working on connection's private buffer causes ns-slapd to abort
  - Fix for ticket 465: cn=monitor showing stats for other db instances
  - Ticket 507 - use mutex for FrontendConfig lock instead of rwlock
  - Fix for ticket 510 Avoid creating an attribute just to determine the syntax for a type, look up the syntax directly by type
  - Coverity defect: Resource leak 13110
  - Ticket 517 - crash in DNA if no dnaMagicRegen is specified
  - Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry
  - Trac Ticket #519 - Search with a complex filter including range search is slow
  - Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error
  - Trac Ticket #311 - IP lookup failing with multiple DNS entries
  - Trac Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs
  - Trac Ticket #443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error
  - Ticket #503 - Improve AD version in winsync log message
  - Trac Ticket #190 - Un-resolvable server in replication agreement produces unclear error message
  - Coverity fixes
  - Trac Ticket #391 - Slapd crashes when deleting backends while operations are still in progress
  - Trac Ticket #448 - Possible to set invalid macros in Macro ACIs
  - Trac Ticket #498 - Cannot abaondon simple paged result search
  - Coverity defects
  - Trac Ticket #494 - slapd entered to infinite loop during new index addition
  - Fixing compiler warnings in the posix-winsync plugin
  - Coverity defects
  - Ticket 147 - Internal Password Policy usage very inefficient
  - Ticket 495 - internalModifiersname not updated by DNA plugin
  - Revert "Ticket 495 - internalModifiersname not updated by DNA plugin"
  - Ticket 495 - internalModifiersname not updated by DNA plugin
  - Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h])
  - Ticket 486 - nsslapd-enablePlugin should not be multivalued
  - Ticket 488 - Doc: DS error log messages with typo
  - Trac Ticket #451 - Allow db2ldif to be quiet
  - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes
  - Ticket #481 - expand nested posix groups
  - Trac Ticket #455 - Insufficient rights to unhashed#user#password when user deletes his password
  - Ticket #446 - anonymous limits are being applied to directory manager


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.2.rc2
changelog:
  - bump version to 1.3.0.rc2
  - Trac Ticket #497 - Escaped character cannot be used in the substring search filter
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Trac Ticket #522 - betxn: upgrade is not implemented yet


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.3.rc3
changelog:
  - bump version to 1.3.0.rc3
  - Ticket 549 - DNA plugin no longer reports additional info when range is depleted
  - Ticket 541 - need to set plugin as off in ldif template
  - Ticket 541 - RootDN Access Control plugin is missing after upgrade


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0.3-1
changelog:
  - bump version to 1.3.0.3
  - Ticket #584 - Existence of an entry is not checked when its password is to be deleted
  - Ticket 562 - Crash when deleting suffix


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.0.4-1
changelog:
  - e53d691 bump version to 1.3.0.4
  - Bug 912964 - CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data
  - Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled)
  - Ticket 490 - Slow role performance when using a lot of roles
  - Ticket 590 - ns-slapd segfaults while trying to delete a tombstone entry


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0.5-1
changelog:
  - bump version to 1.3.0.5
  - Ticket 47308 - unintended information exposure when anonymous access is set to rootdse
  - Ticket 628 - crash in aci evaluation
  - Ticket 627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so
  - Ticket 634 - Deadlock in DNA plug-in Ticket #576 - DNA: use event queue for config update only at the start up
  - Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC
  - Ticket 623 - cleanAllRUV task fails to cleanup config upon completion


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.0-1
changelog:
  - bump version to 1.3.1.0
  - Ticket 332 - Command line perl scripts should attempt most secure connection type first
  - Ticket 342 - better error message when cache overflows
  - Ticket 417 - RFE - forcing passwordmustchange attribute by non-cn=directory manager
  - Ticket 419 - logconv.pl - improve memory management
  - Ticket 422 - 389-ds-base - Can't call method "getText"
  - Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts
  - Ticket 458 - RFE - Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords
  - Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used
  - Ticket 487 - Possible to add invalid attribute values to PAM PTA plugin configuration
  - Ticket 502 - setup-ds.pl script should wait if "semanage.trans.LOCK" presen
  - Ticket 505 - use lock-free access name2asi and oid2asi tables (additional)
  - Ticket 508 - lock-free access to FrontendConfig structure
  - Ticket 511 - allow turning off vattr lookup in search entry return
  - Ticket 525 - Introducing a user visible configuration variable for controlling replication retry time
  - Ticket 528 - RFE - get rid of instance specific scripts
  - Ticket 529 - dn normalization must handle multiple space characters in attributes
  - Ticket 532 - RUV is not getting updated for both Master and consumer
  - Ticket 533 - only scan for attributes to decrypt if there are encrypted attrs configured
  - Ticket 534 - RFE: Add SASL mappings fallback
  - Ticket 537 - Improvement of range search
  - Ticket 539 - logconv.pl should handle microsecond timing
  - Ticket 543 - Sorting with attributes in ldapsearch gives incorrect result
  - Ticket 545 - Segfault during initial LDIF import: str2entry_dupcheck()
  - Ticket 547 - Incorrect assumption in ndn cache
  - Ticket 550 - posix winsync will not create memberuid values if group entry become posix group in the same sync interval
  - Ticket 551 - Multivalued rootdn-days-allowed in RootDN Access Control plugin always results in access control violation
  - Ticket 552 - Adding rootdn-open-time without rootdn-close-time to RootDN Acess Control results in inconsistent configuration
  - Ticket 558 - Replication - make timeout for protocol shutdown configurable
  - Ticket 561 - disable writing unhashed#user#password to changelog
  - Ticket 563 - DSCreate.pm: Error messages cannot be used in the if expression since they could be localized.
  - Ticket 565 - turbo mode and replication - allow disable of turbo mode
  - Ticket 571 - server does not accept 0 length LDAP Control sequence
  - Ticket 574 - problems with dbcachesize disk space calculation
  - Ticket 583 - dirsrv fails to start on reboot due to /var/run/dirsrv permissions
  - Ticket 585 - Behaviours of "db2ldif -a <filename>" and "db2ldif.pl -a <filename>" are inconsistent
  - Ticket 587 - Replication error messages in the DS error logs
  - Ticket 588 - Create MAN pages for command line scripts
  - Ticket 600 - Server should return unavailableCriticalExtension when processing a badly formed critical control
  - Ticket 603 - A logic error in str2simple
  - Ticket 604 - Required attribute not checked during search operation
  - Ticket 608 - Posix Winsync plugin throws "posix_winsync_end_update_cb: failed to add task entry" error message
  - Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND
  - Ticket 612 - improve dbgen rdn generation, output
  - Ticket 613 - ldclt: add timestamp, interval, nozeropad, other improvements
  - Ticket 616 - High contention on computed attribute lock
  - Ticket 618 - Crash at shutdown while stopping replica agreements
  - Ticket 620 - Better logging of error messages for 389-ds-base
  - Ticket 621 - modify operations without values need to be written to the changelog
  - Ticket 622 - DS logging errors "libdb: BDB0171 seek: 2147483648: (262144 * 8192) + 0: No such file or directory
  - Ticket 631 - Replication: "Incremental update started" status message without consumer initialized
  - Ticket 633 - allow nsslapd-nagle to be disabled, and also tcp cork
  - Ticket 47299 - allow cmdline scripts to work with non-root user
  - Ticket 47302 - get rid of sbindir start/stop/restart slapd scripts
  - Ticket 47303 - start/stop/restart dirsrv scripts should report and error if no instances
  - Ticket 47304 - reinitialization of a master with a disabled agreement hangs
  - Ticket 47311 - segfault in db2ldif(trigger by a cleanallruv task)
  - Ticket 47312 - replace PR_GetFileInfo with PR_GetFileInfo64
  - Ticket 47315 - filter option in fixup-memberof requires more clarification
  - Ticket 47325 - Crash at shutdown on a replica aggrement
  - Ticket 47330 - changelog db extension / upgrade is obsolete
  - Ticket 47336 - logconv.pl -m not working for all stats
  - Ticket 47341 - logconv.pl -m time calculation is wrong
  - Ticket 47343 - 389-ds-base: Does not support aarch64 in f19 and rawhide
  - Ticket 47347 - Simple paged results should support async search
  - Ticket 47348 - add etimes to per second/minute stats
  - Ticket 47349 - DS instance crashes under a high load


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.1-1
changelog:
  - bump version to 1.3.1.1
  - Ticket 402 - nhashed#user#password in entry extension
  - Ticket 511 - Revision - allow turning off vattr lookup in search entry return
  - Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate
  - Ticket 47327 - error syncing group if group member user is not synced
  - Ticket 47355 - dse.ldif doesn't replicate update to nsslapd-sasl-mapping-fallback
  - Ticket 47359 - new ldap connections can block ldaps and ldapi connections
  - Ticket 47362 - ipa upgrade selinuxusermap data not replicating
  - Ticket 47375 - flush_ber error sending back start_tls response will deadlock
  - Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3)
  - Ticket 47377 - make listen backlog size configurable
  - Ticket 47378 - fix recent compiler warnings
  - Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice
  - Ticket 47385 - DS not shutting down when disk monitoring threshold is reached
  - Coverity Fixes (part 1)
  - Coverity Fixes (Part 2)
  - Coverity Fixes (Part 3)
  - Coverity Fixes (Part 4)
  - Coverity Fixes (Part 5)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.2-1
changelog:
  - bump version to 1.3.1.2
  - Ticket 47391 - deleting and adding userpassword fails to update the password
  - Coverity Fixes (Part 7)


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.3-1
changelog:
  - bump version to 1.3.1.3
  - Ticket 47374 - flush.pl is not included in perl5
  - Ticket 47391 - deleting and adding userpassword fails to update the password (additional fix)
  - Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization
  - Ticket 47395 47397 - v2 correct behaviour of account policy if only stateattr is configured or no alternate attr is configured
  - Ticket 47396 - crash on modrdn of tombstone
  - Ticket 47400 - MMR stress test with dna enabled causes a deadlock
  - Ticket 47409 - allow setting db deadlock rejection policy
  - Ticket 47419 - Unhashed userpassword can accidentally get removed from mods
  - Ticket 47420 - An upgrade script 80upgradednformat.pl fails to handle a server instance name incuding '-'


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.4-1
changelog:
  - bump version to 1.3.1.4
  - Ticket 47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negat
  - Ticket 47424 - Replication problem with add-delete requests on single-valued attributes
  - Ticket 47367 - (phase 2) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
  - Ticket 47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
  - Ticket 47421 - memory leaks in set_krb5_creds
  - Ticket 346 - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute v
  - Ticket 47369  version2 - provide default syntax plugin
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47339 - RHDS denies MODRDN access if ACI list contains any DENY rule
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47428 - Memory leak in 389-ds-base 1.2.11.15
  - Ticket 47392 - ldbm errors when adding/modifying/deleting entries
  - Ticket 47385 - Disk Monitoring is not triggered as expected.
  - Ticket 47410 - changelog db deadlocks with DNA and replication


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.5-1
changelog:
  - bump version to 1.3.1.5
  - Ticket 47456 - delete present values should append values to deleted values
  - Ticket 47455 - valgrind - value mem leaks, uninit mem usage
  - Ticket 47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication
  - Ticket 47440 - Fix runtime errors caused by last patch.
  - Ticket 47440 - Fix compilation warnings and header files
  - Ticket 47405 - CVE-2013-2219 ACLs inoperative in some search scenarios
  - Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D
  - Ticket 47378 - fix recent compiler warnings
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47449 - deadlock after adding and deleting entries
  - Ticket 47441 - Disk Monitoring not checking filesystem with logs
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-1
changelog:
  - bump version to 1.3.1.6
  - Ticket 47455 - valgrind - value mem leaks, uninit mem usage
  - fix coverity 11915 - dead code - introduced with fix for ticket 346
  - fix coverity 11895 - null deref - caused by fix to ticket 47392
  - fix compiler warning in posix winsync code for posix_group_del_memberuid_callback
  - Fix compiler warnings for Ticket 47395 and 47397
  - fix compiler warning (cherry picked from commit 904416f4631d842a105851b4a9931ae17822a107)
  - Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch
  - fix compiler warnings
  - Fix compiler warning (cherry picked from commit ec6ebc0b0f085a82041d993ab2450a3922ef5502)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-2
changelog:
  - bump version to 1.3.1.6-2
  - Resolves Bug 1000633 - ns-slapd crash due to bogus DN
  - Ticket #47488 - Users from AD sub OU does not sync to IPA


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-3
changelog:
  - Ticket #47455 - valgrind - value mem leaks, uninit mem usage
  - Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-4
changelog:
  - bump version to 1.3.1.6-4
  - Resolves Bug 1007988 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing (Ticket 47489)
  - Resolves Bug 853931 - Allow macro aci keywords to be case-insensitive (Ticket 449)
  - Resolves Bug 1006563 - automember rebuild task not working as expected (Ticket 47507)


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-5
changelog:
  - Resolves: bug 1013896 - logconv.pl - Use of comma-less variable list is deprecated
  - Resolves: bug 1008256 - backend txn plugin fixup tasks should be done in a txn
  - Resolves: bug 1013738 - CLEANALLRUV doesnt run across all replicas
  - Resolves: bug 1011220 - PassSync removes User must change password flag on the Windows side
  - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock
  - Resolves: bug 1012125 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch
  - Resolves: bug 1013063 - RUV tombstone search with scope "one" doesn`t work
  - Resolves: bug 1013893 - Indexed search are logged with 'notes=U' in the access logs
  - Resolves: bug 1013894 - improve logconv.pl performance with large access logs
  - Resolves: bug 1013898 - Fix various issues with logconv.pl
  - Resolves: bug 1013897 - logconv.pl uses /var/tmp for BDB temp files
  - Resolves: bug 1013900 - logconv: some stats do not work across server restarts
  - Resolves: bug 1014354 - Coverity fixes - 12023, 12024, and 12025


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-6
changelog:
  - Resolves: bug 1013900 - logconv: some stats do not work across server restarts
  -  previous patch introduced regressions
  -  fixed by c2eced0 ticket #47550 and e2a880b Ticket #47550 and 8b10f83 Ticket #47551
  - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock
  -  previous patch not complete, fixed by a11be5c Ticket 47513
  - Resolves: bug 1016749 - DS crashes when "cn=Directory Manager" is changing it's password
  -  cherry picked upstream f786600 Ticket 47329 and b67e230 Coverity Fixes
  - Resolves: bug 1015252 locale "nl" not supported by collation plugin
  - Resolves: bug 1016317 Need to update supported locales
  - Resolves: bug 1016722 memory leak in range searches


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-7
changelog:
  - Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep
  - Resolves: bug 1018914 fixup memberof task does not work: task entry not added


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-8
changelog:
  - release 1.3.1.6-8
  - Resolves: bug 971111 - DNA plugin failed to fetch replication agreement 
  - Resolves: bug 1026931 - 1.2.11.29 crash when removing entries from cache


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-9
changelog:
  - release 1.3.1.6-9
  - Resolves: bug 1028440 - Winsync replica initialization and incremental updates from DS to AD fails on RHEL
  - Resolves: bug 1027502 - Replication Failures related to skipped entries due to cleaned rids
  - Resolves: bug 1027047 - Winsync plugin segfault during incremental backoff


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-10
changelog:
  - release 1.3.1.6-10
  - Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep
  -     had to revert earlier change - does not work and breaks ipa


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-11
changelog:
  - Resolves: bug 1024979 - CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-12
changelog:
  - release 1.3.1.6-12
  - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribute (Ticket 47620)
  - Resolves: bug 1034898 - automember plugin task memory leaks (Ticket 47592)
  - Resolves: bug 1034451 - Possible to specify invalid SASL mechanism in nsslapd-allowed-sasl-mechanisms (Ticket 47614)
  - Resolves: bug 1032318 - entries with empty objectclass attribute value can be hidden (Ticket 47591)
  - Resolves: bug 1032316 - attrcrypt fails to find unlocked key (Ticket 47596)
  - Resolves: bug 1031227 - Reduce lock scope in retro changelog plug-in (Ticket 47599)
  - Resolves: bug 1031226 - Convert ldbm_back_seq code to be transaction aware (Ticket 47598)
  - Resolves: bug 1031225 - Convert retro changelog plug-in to betxn (Ticket 47597)
  - Resolves: bug 1031223 - hard coded limit of 64 masters in agreement and changelog code (Ticket 47587)
  - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613)
  - Resolves: bug 1035824 - Automember betxnpreoperation - transaction not aborted when group entry does not exist (Ticket 47622)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-14
changelog:
  - release 1.3.1.6-14
  - Resolves: bug 853355 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs (Ticket 447) 
  - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613)
  - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribut; Fix logically dead code; Fix dereferenced NULL pointer in agmtlist_modify_callback(); Fix missing left brackete (Ticket 47620)
  - Resolves: bug 1042855 - nsds5ReplicaProtocolTimeout attribute is not validated when added to replication agreement; Config value validation improvement (Ticket 47620)
  - Resolves: bug 918717 - server does not accept 0 length LDAP Control sequence (Ticket 571)
  - Resolves: bug 1034902 - replica init/bulk import errors should be more verbose (Ticket 47606)
  - Resolves: bug 1044219 - fix memleak caused by 47347 (Ticket 47623)
  - Resolves: bug 1049522 - Crash after replica is installed; Fix cherry-pick error for 1.3.2 and 1.3.1 (Ticket 47620)
  - Resolves: bug 1049568 - changelog iteration should ignore cleaned rids when getting the minCSN (Ticket 47627)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-15
changelog:
  - release 1.3.1.6-15
  - Resolves: bug 918702 -  better error message when cache overflows (Ticket 342)
  - Resolves: bug 1009679 - replication stops with excessive clock skew (Ticket 47516)
  - Resolves: bug 1042855 - Unable to delete protocol timeout attribute (Ticket 47620)
  - Resolves: bug 918694 - Fix crash when disabling/enabling the setting (Ticket 408)
  - Resolves: bug 853355 - config_set_allowed_to_delete_attrs: Valgrind reports Invalid read (Ticket 47660)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-17
changelog:
  - release 1.3.1.6-17
  - Resolves: bug 853106 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (Ticket 443)
  - Resolves: bug 1049525 - Server hangs in cos_cache when adding a user entry (Ticket 47649)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-18
changelog:
  - release 1.3.1.6-18
  - Resolves: bug 838656 - logconv.pl tool removes the access logs contents if "-M" is not correctly used (Ticket 471)
  - Resolves: bug 922538 - improve dbgen rdn generation, output (Ticket 47374)
  - Resolves: bug 970750 - flush.pl is not included in perl5 (Ticket 47374)
  - Resolves: bug 1013898 - Fix various issues with logconv.pl (Ticket 471)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-19
changelog:
  - release 1.3.1.6-19
  - Resolves: bug 1065971 - Enrolling a host into IdM/IPA always takes two attempts (Ticket 47704)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-20
changelog:
  - release 1.3.1.6-20
  - Resolves: bug 1065242 - 389-ds-base, conflict occurs at yum installation if multilib_policy=all. (Ticket 47709)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-21
changelog:
  - release 1.3.1.6-21
  - Resolves: bug 918694 - Fix covscan defect FORWARD_NULL (Ticket 408)
  - Resolves: bug 918717 - Fix covscan defect COMPILER WARNINGS (Ticket 571)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-22
changelog:
  - release 1.3.1.6-22
  - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-23
changelog:
  - Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind) (Added 0095-Ticket-47739-directory-server-is-insecurely-misinter.patch)

    Tue Mar 11 2014 Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-23
  - release 1.3.1.6-22
  - Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-24
changelog:
  - release 1.3.1.6-24
  - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735); regression - sub-type length in attribute type was mistakenly subtracted.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-26
changelog:
  - release 1.3.1.6-26
  - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution (Ticket 346)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-1
changelog:
  - release 1.3.3.1-1
  - Resolves: bug 746646 - RFE: easy way to configure which users and groups to sync with winsync
  - Resolves: bug 881372 - nsDS5BeginReplicaRefresh attribute accepts any value and it doesn't throw any error when server restarts.
  - Resolves: bug 920597 - Possible to add invalid ACI value
  - Resolves: bug 921162 - Possible to add nonexistent target to ACI
  - Resolves: bug 923799 - if nsslapd-cachememsize set to the number larger than the RAM available, should result in proper error message.
  - Resolves: bug 924937 - Attribute "dsOnlyMemberUid" not allowed when syncing nested posix groups from AD with posixWinsync
  - Resolves: bug 951754 - Self entry access ACI not working properly
  - Resolves: bug 952517 - Dirsrv instance failed to start with Segmentation fault (core dump) after modifying 7-bit check plugin
  - Resolves: bug 952682 - nsslapd-db-transaction-batch-val turns to -1
  - Resolves: bug 966443 - Plugin library path validation
  - Resolves: bug 975176 - Non-directory manager can change the individual userPassword's storage scheme
  - Resolves: bug 979465 - IPA replica's - "SASL encrypted packet length exceeds maximum allowed limit"
  - Resolves: bug 982597 - Some attributes in cn=config should not be multivalued
  - Resolves: bug 987009 - 389-ds-base - shebang with /usr/bin/env
  - Resolves: bug 994690 - RFE: Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart
  - Resolves: bug 1012991 - errorlog-level 16384 is listed as 0 in cn=config
  - Resolves: bug 1013736 - Enabling/Disabling DNA plug-in throws "ldap_modify: Server Unwilling to Perform (53)" error
  - Resolves: bug 1014380 - setup-ds.pl doesn't lookup the "root" group correctly
  - Resolves: bug 1020459 - rsa_null_sha should not be enabled by default
  - Resolves: bug 1024541 - start dirsrv after ntpd
  - Resolves: bug 1029959 - Managed Entries betxnpreoperation - transaction not aborted upon failure to create managed entry
  - Resolves: bug 1031216 - add dbmon.sh
  - Resolves: bug 1044133 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result
  - Resolves: bug 1044134 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default
  - Resolves: bug 1044135 - make connection buffer size adjustable
  - Resolves: bug 1044137 - posix winsync should support ADD user/group entries from DS to AD
  - Resolves: bug 1044138 - mep_pre_op: Unable to fetch origin entry
  - Resolves: bug 1044139 - [RFE] Support RFC 4527 Read Entry Controls
  - Resolves: bug 1044140 - Allow search to look up 'in memory RUV'
  - Resolves: bug 1044141 - MMR stress test with dna enabled causes a deadlock
  - Resolves: bug 1044142 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist
  - Resolves: bug 1044143 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change
  - Resolves: bug 1044144 - resurrected entry is not correctly indexed
  - Resolves: bug 1044146 - Add a warning message when a connection hits the max number of threads
  - Resolves: bug 1044147 - 7-bit check plugin does not work for userpassword attribute
  - Resolves: bug 1044148 - The backend name provided to bak2db is not validated
  - Resolves: bug 1044149 - Winsync should support range retrieval
  - Resolves: bug 1044150 - 7-bit checking is not necessary for userPassword
  - Resolves: bug 1044151 - With SeLinux, ports can be labelled per range. setup-ds.pl or setup-ds-admin.pl fail to detect already ranged labelled ports
  - Resolves: bug 1044152 - ChainOnUpdate: "cn=directory manager" can modify userRoot on consumer without changes being chained or replicated. Directory integrity compromised.
  - Resolves: bug 1044153 - mods optimizer
  - Resolves: bug 1044154 - multi master replication allows schema violation
  - Resolves: bug 1044156 - DS crashes with some 7-bit check plugin configurations
  - Resolves: bug 1044157 - Some updates of "passwordgraceusertime" are useless when updating "userpassword"
  - Resolves: bug 1044159 - [RFE] Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533
  - Resolves: bug 1044160 - remove-ds.pl should remove /var/lock/dirsrv
  - Resolves: bug 1044162 - enhance retro changelog
  - Resolves: bug 1044163 - updates to ruv entry are written to retro changelog
  - Resolves: bug 1044164 - Password administrators should be able to violate password policy
  - Resolves: bug 1044168 - Schema replication between DS versions may overwrite newer base schema
  - Resolves: bug 1044169 - ACIs do not allow attribute subtypes in targetattr keyword
  - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable
  - Resolves: bug 1044171 - Allow referential integrity suffixes to be configurable
  - Resolves: bug 1044172 - Plugin library path validation prevents intentional loading of out-of-tree modules
  - Resolves: bug 1044173 - make referential integrity configuration more flexible
  - Resolves: bug 1044177 - allow configuring changelog trim interval
  - Resolves: bug 1044179 - objectclass may, must lists skip rest of objectclass once first is found in sup
  - Resolves: bug 1044180 - memberOf on a user is converted to lowercase
  - Resolves: bug 1044181 - report unindexed internal searches
  - Resolves: bug 1044183 - With 1.3.04 and subtree-renaming OFF, when a user is deleted after restarting the server, the same entry can't be added
  - Resolves: bug 1044185 - dbscan on entryrdn should show all matching values
  - Resolves: bug 1044187 - logconv.pl - RFE - add on option for a minimum etime for unindexed search stats
  - Resolves: bug 1044188 - Recognize compressed log files
  - Resolves: bug 1044191 - support TLSv1.1 and TLSv1.2, if supported by NSS
  - Resolves: bug 1044193 - default nsslapd-sasl-max-buffer-size should be 2MB
  - Resolves: bug 1044194 - Complex filter in a search request doen't work as expected.
  - Resolves: bug 1044196 - Automember plug-in should treat MODRDN operations as ADD operations
  - Resolves: bug 1044198 - Replication of the schema may overwrite consumer 'attributetypes' even if consumer definition is a superset
  - Resolves: bug 1044202 - db2bak.pl issue when specifying non-default directory
  - Resolves: bug 1044203 - Allow referint plugin to use an alternate config area
  - Resolves: bug 1044205 - Allow memberOf to use an alternate config area
  - Resolves: bug 1044210 - idl switch does not work
  - Resolves: bug 1044211 - make old-idl tunable
  - Resolves: bug 1044212 - IDL-style can become mismatched during partial restoration
  - Resolves: bug 1044213 - backend performance - introduce optimization levels
  - Resolves: bug 1044215 - using transaction batchval violates durability
  - Resolves: bug 1044216 - examine replication code to reduce amount of stored state information
  - Resolves: bug 1048980 - 7-bit check plugin not checking MODRDN operation
  - Resolves: bug 1049030 - Windows Sync group issues
  - Resolves: bug 1052751 - Page control does not work if effective rights control is specified
  - Resolves: bug 1052754 - Allow nsDS5ReplicaBindDN to be a group DN
  - Resolves: bug 1057803 - logconv errors when search has invalid bind dn
  - Resolves: bug 1060032 - [RFE] Update lastLoginTime also in Account Policy plugin if account lockout is based on passwordExpirationTime.
  - Resolves: bug 1061060 - betxn: retro changelog broken after cancelled transaction
  - Resolves: bug 1061572 - improve dbgen rdn generation, output and man page.
  - Resolves: bug 1063990 - single valued attribute replicated ADD does not work
  - Resolves: bug 1064006 - Size returned by slapi_entry_size is not accurate
  - Resolves: bug 1064986 - Replication retry time attributes cannot be added
  - Resolves: bug 1067090 - Missing warning for invalid replica backoff configuration
  - Resolves: bug 1072032 - Updating nsds5ReplicaHost attribute in a replication agreement fails with error 53
  - Resolves: bug 1074306 - Under heavy stress, failure of turning a tombstone into glue makes the server hung
  - Resolves: bug 1074447 - Part of DNA shared configuration is deleted after server restart
  - Resolves: bug 1076729 - Continuous add/delete of an entry in MMR setup causes entryrdn-index conflict
  - Resolves: bug 1077884 - ldap/servers/slapd/back-ldbm/dblayer.c: possible minor problem with sscanf
  - Resolves: bug 1077897 - Memory leak with proxy auth control
  - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing
  - Resolves: bug 1082967 - attribute uniqueness plugin fails when set as a chaining component
  - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution
  - Resolves: bug 1086890 - empty modify returns LDAP_INVALID_DN_SYNTAX
  - Resolves: bug 1086902 - mem leak in do_bind when there is an error
  - Resolves: bug 1086904 - mem leak in do_search - rawbase not freed upon certain errors
  - Resolves: bug 1086908 - Performing deletes during tombstone purging results in operation errors
  - Resolves: bug 1090178 - #481 breaks possibility to reassemble memberuid list
  - Resolves: bug 1092099 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone
  - Resolves: bug 1092342 - nsslapd-ndn-cache-max-size accepts any invalid value.
  - Resolves: bug 1092648 - Negative value of nsSaslMapPriority is not reset to lowest priority
  - Resolves: bug 1097004 - Problem with deletion while replicated
  - Resolves: bug 1098654 - db2bak.pl error with changelogdb
  - Resolves: bug 1099654 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator.
  - Resolves: bug 1108405 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..."
  - Resolves: bug 1108407 - managed entry plugin fails to update managed entry pointer on modrdn operation
  - Resolves: bug 1108865 - memory leak in ldapsearch filter objectclass=*
  - Resolves: bug 1108870 - ACI warnings in error log
  - Resolves: bug 1108872 - Logconv.pl with an empty access log gives lots of errors
  - Resolves: bug 1108874 - logconv.pl memory continually grows
  - Resolves: bug 1108881 - rsearch filter error on any search filter
  - Resolves: bug 1108895 - [RFE - RHDS9] CLI report to monitor replication
  - Resolves: bug 1108902 - rhds91 389-ds-base-1.2.11.15-31.el6_5.x86_64 crash in db4 __dbc_get_pp env = 0x0 ?
  - Resolves: bug 1108909 - single valued attribute replicated ADD does not work
  - Resolves: bug 1109334 - 389 Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled.
  - Resolves: bug 1109336 - Parent numsubordinate count can be incorrectly updated if an error occurs
  - Resolves: bug 1109339 - Nested tombstones become orphaned after purge
  - Resolves: bug 1109354 - Tombstone purging can crash the server if the backend is stopped/disabled
  - Resolves: bug 1109357 - Coverity issue in 1.3.3
  - Resolves: bug 1109364 - valgrind - value mem leaks, uninit mem usage
  - Resolves: bug 1109375 - provide default syntax plugin
  - Resolves: bug 1109378 - Environment variables are not passed when DS is started via service
  - Resolves: bug 1111364 - Updating winsync one-way sync does not affect the behaviour dynamically
  - Resolves: bug 1112824 - Broken dereference control with the FreeIPA 4.0 ACIs
  - Resolves: bug 1113605 - server restart wipes out index config if there is a default index
  - Resolves: bug 1115177 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with improper macro
  - Resolves: bug 1117021 - Server deadlock if online import started while server is under load
  - Resolves: bug 1117975 - paged results control is not working in some cases when we have a subsuffix.
  - Resolves: bug 1117979 - harden the list of ciphers available by default
  - Resolves: bug 1117981 - Fix various typos in manpages & code
  - Resolves: bug 1117982 - Fix hyphens used as minus signed and other manpage mistakes
  - Resolves: bug 1118002 - server crashes deleting a replication agreement
  - Resolves: bug 1118006 - RFE - forcing passwordmustchange attribute by non-cn=directory manager
  - Resolves: bug 1118007 - [RFE] Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords
  - Resolves: bug 1118014 - Enhance ACIs to have more control over MODRDN operations
  - Resolves: bug 1118021 - Return all attributes in rootdse without explicit request
  - Resolves: bug 1118025 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  - Resolves: bug 1118032 - Schema Replication Issue
  - Resolves: bug 1118034 - 389 DS Server crashes and dies while handles paged searches from clients
  - Resolves: bug 1118043 - Failed deletion of aci: no such attribute
  - Resolves: bug 1118048 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed.
  - Resolves: bug 1118051 - Add switch to disable pre-hashed password checking
  - Resolves: bug 1118054 - Make ldbm_back_seq independently support transactions
  - Resolves: bug 1118055 - Add operations rejected by betxn plugins remain in cache
  - Resolves: bug 1118057 - online import crashes server if using verbose error logging
  - Resolves: bug 1118059 - add fixup-memberuid.pl script
  - Resolves: bug 1118060 - winsync plugin modify is broken
  - Resolves: bug 1118066 - memberof scope: allow to exclude subtrees
  - Resolves: bug 1118069 - 389-ds production segfault: __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:144
  - Resolves: bug 1118074_DELETE_FN - plugin returned error" messages
  - Resolves: bug 1118076 - ds logs many "Operation error fetching Null DN" messages
  - Resolves: bug 1118077 - Improve import logging and abort handling
  - Resolves: bug 1118079 - Multi master replication initialization incomplete after restore of one master
  - Resolves: bug 1118080 - Don't add unhashed password mod if we don't have an unhashed value
  - Resolves: bug 1118081 - Investigate betxn plugins to ensure they return the correct error code
  - Resolves: bug 1118082 - The error result text message should be obtained just prior to sending result
  - Resolves: bug 1123865 - CVE-2014-3562 389-ds-base: 389-ds: unauthenticated information disclosure [rhel-7.1]


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-2
changelog:
  - release 1.3.3.1-2
  - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748)
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47834)
  - Resolves: bug 1139882 - coverity defects found in 1.3.3.1 (DS 47890)
  - Resolves: bug 1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (DS 47885 - deref plugin should not return references with noc access rights)
  - Resolves: bug 1117979 - harden the list of ciphers available by default (DS 47838, DS 47895)
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47889 - DS crashed during ipa-server-install on test_ava_filter)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-4
changelog:
  - release 1.3.3.1-4
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing  (DS 47750)
  - Resolves: bug 1145846 - 389-ds 1.3.3.0 does not adjust cipher suite configuration on upgrade, breaks itself and pki-server (DS 47908)
  - Resolves: bug 1117979 - harden the list of ciphers available by default (phase 2) (DS 47838)
                          - provide enabled ciphers as search result (DS 47880)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-6
changelog:
  - release 1.3.3.1-6
  - Resolves: bug 1151287 - dynamically added macro aci is not evaluated on the fly (DS 47922)
  - Resolves: bug 1080186 - Need to move slapi_pblock_set(pb, SLAPI_MODRDN_EXISTING_ENTRY, original_entry->ep_entry) prior to original_entry overwritten (DS 47897)
  - Resolves: bug 1150694 - Encoding of SearchResultEntry is missing tag (DS 47920)
  - Resolves: bug 1150695 - ldbm_back_modify SLAPI_PLUGIN_BE_PRE_MODIFY_FN does not return even if one of the preop plugins fails. (DS 47919)
  - Resolves: bug 1139882 - Fix remaining compiler warnings (DS 47892)
  - Resolves: bug 1150206 - result of dna_dn_is_shared_config is incorrectly used (DS 47918)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-8
changelog:
  - release 1.3.3.1-8
  - Resolves: bug 1156607 - Crash in entry_add_present_values_wsi_multi_valued (DS 47937)
  - Resolves: bug 1153737 - Disable SSL v3, by default (DS 47928, DS 47945, DS 47948)
  - Resolves: bug 1158804 - Malformed cookie for LDAP Sync makes DS crash (DS 47939)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-9
changelog:
  - release 1.3.3.1-9
  - Resolves: bug 1153737 - Disable SSL v3, by default. (DS 47928)
  - Resolves: bug 1163461 - Should not check aci syntax when deleting an aci (DS 47953)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-10
changelog:
  - release 1.3.3.1-10
  - Resolves: bug 1172731 - CVE-2014-8112 password hashing bypassed when "nsslapd-unhashed-pw-switch" is set to off 
  - Resolves: bug 1166265 - DS hangs during online total update (DS 47942)
  - Resolves: bug 1168151 - CVE-2014-8105 information disclosure through 'cn=changelog' subtree
  - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable (DS 47526)
  - Resolves: bug 1171356 - Bind DN tracking unable to write to internalModifiersName without special permissions (DS 47950)
  - Resolves: bug 1153737 - logconv.pl -- support parsing/showing/reporting different protocol versions (DS 47949)
  - Resolves: bug 1171355 - start dirsrv after chrony on RHEL7 and Fedora (DS 47947)
  - Resolves: bug 1170707 - cos_cache_build_definition_list does not stop during server shutdown (DS 47967)
  - Resolves: bug 1170708 - COS memory leak when rebuilding the cache (DS - Ticket 47969)
  - Resolves: bug 1170709 - Account lockout attributes incorrectly updated after failed SASL Bind (DS 47970)
  - Resolves: bug 1166260 - cookie_change_info returns random negative number if there was no change in a tree (DS 47960)
  - Resolves: bug 1012991 - Error log levels not displayed correctly (DS 47636)
  - Resolves: bug 1108881 - rsearch filter error on any search filter (DS 47722)
  - Resolves: bug 994690  - Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart (DS 47451)
  - Resolves: bug 1162997 - Running a plugin task can crash the server (DS 47451)
  - Resolves: bug 1166252 - RHEL7.1 ns-slapd segfault when ipa-replica-install restarts (DS 47451)
  - Resolves: bug 1172597 - Crash if setting invalid plugin config area for MemberOf Plugin (DS 47525)
  - Resolves: bug 1139882 - coverity defects found in 1.3.3.x (DS 47965)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-11
changelog:
  - release 1.3.3.1-11
  - Resolves: bug 1080186 - During delete operation do not refresh cache entry if it is a tombstone (DS 47750)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-12
changelog:
  - release 1.3.3.1-12
  - Resolves: bug 1182477 - Windows Sync accidentally cleared raw_entry (DS 47989)
  - Resolves: bug 1180325 - upgrade script fails if /etc and /var are on different file systems (DS 47991 )
  - Resolves: bug 1183655 - Schema learning mechanism, in replication, unable to extend an existing definition (DS 47988)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-14
changelog:
  - release 1.3.3.1-14
  - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030)
              Fixes spec file to make sure all the server instances are stopped before upgrade
  - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-16
changelog:
  - release 1.3.3.1-16
  - Resolves: bug 1212894 - CVE-2015-1854 389ds-base: access control bypass with modrdn


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-17
changelog:
  - release 1.3.3.1-17
  - Resolves: bug 1226510 - idm/ipa 389-ds-base entry cache converges to 500 KB in dblayer_is_cachesize_sane (DS 48190)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-18
changelog:
  - release 1.3.3.1-18
  - Resolves: bug 1228823 - async simple paged results issue (DS 48146, DS 48192)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-19
changelog:
  - release 1.3.3.1-19
  - Resolves: bug 1230996 - nsSSL3Ciphers preference not enforced server side (DS 48194)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-1
changelog:
  - Release 1.3.4.0-1 (rebase)
  - Enable nunc-stans for x86_64.
  - Resolves: bug 1034325 - Linked attributes betxnpreoperation - transaction not aborted when linked entry does not exit (DS 47640)
  - Resolves: bug 1052755 - Retro Changelog Plugin accepts invalid value in nsslapd-changelogmaxage attribute (DS 47669)
  - Resolves: bug 1096409 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown (DS 47801)
  - Resolves: bug 1145378 - Adding an entry with an invalid password as rootDN is incorrectly rejected (DS 47900)
  - Resolves: bug 1145382 - Bad manipulation of passwordhistory (DS 47905)
  - Resolves: bug 1154147 - Uniqueness plugin: should allow to exclude some subtrees from its scope (DS 47927)
  - Resolves: bug 1171358 - Make ReplicaWaitForAsyncResults configurable (DS 47957)
  - Resolves: bug 1171663 - MODDN fails when entry doesn't have memberOf attribute and new DN is in the scope of memberOfExcludeSubtree (DS 47526)
  - Resolves: bug 1174457 - [RFE] memberOf - add option to skip nested group lookups during delete operations (DS 47963)
  - Resolves: bug 1178640 - db2bak.pl man page should be improved. (DS 48008)
  - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)
  - Resolves: bug 1180331 - Local Password Policies for Nested OU's not honoured (DS 47980)
  - Resolves: bug 1180776 - nsslapd-db-locks modify not taking into account (DS 47934)
  - Resolves: bug 1181341 - nsslapd-changelogtrim-interval and nsslapd-changelogcompactdb-interval are not validated (DS 47617)
  - Resolves: bug 1185882 - ns-activate.pl fails to activate account if it was disabled on AD (DS 48001)
  - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005)
  - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030)
  - Resolves: bug 1206309 - winsync sets AccountUserControl in AD to 544 (DS 47723)
  - Resolves: bug 1210845 - slapd crashes during Dogtag clone reinstallation (DS 47966)
  - Resolves: bug 1210850 - add an option '-u' to dbgen.pl for adding group entries with (DS 48025)
  - Resolves: bug 1210852 - aci with wildcard and macro not correctly evaluated (DS 48141)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-2
changelog:
  - release 1.3.4.0-2
  - Resolves: bug 1235060 - Fix coverity issues 
  - Resolves: bug 1235387 - Slow replication when deleting large quantities of multi-valued attributes (DS 48195)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-3
changelog:
  - release 1.3.4.0-3
  - Resolves: bug 1228823 - async simple paged results issue (DS 48192)
  - Resolves: bug 1237325 - reindex off-line twice could provoke index corruption (DS 48212)
  - Resolves: bug 1238790 - ldapsearch on nsslapd-maxbersize returns 0 instead of current value (DS 48214)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-4
changelog:
  - release 1.3.4.0-4
  - Resolves: bug 1240404 - setup-ds.pl does not log invalid --file path errors the same (DS 48119)
  - Resolves: bug 1240406 - setup -u stops after first failure (DS 47878)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-6
changelog:
  - release 1.3.4.0-6
  - Resolves: bug 1240845 - cleanallruv should completely clean changelog (DS 48208)
  - Resolves: bug 1095603 - Any negative LDAP error code number reported as Illegal error by ldclt. (DS 47799)
  - Resolves: bug 1168675 - Inconsistent behaviour of DS when LDAP Sync is used with an invalid cookie (DS 48013)
  - Resolves: bug 1241723 - cleanAllRUV hangs shutdown if not all of the replicas are online (DS 48217)
  - Resolves: bug 1241497 - crash in ns-slapd when deleting winSyncSubtreePair from sync agreement (DS 48216)
  - Resolves: bug 1240404 - Silent install needs to properly exit when INF file is missing (DS 48119)
  - Resolves: bug 1240406 - Remove warning suppression in 1.3.4 (DS 47878)
  - Resolves: bug 1242683 - Winsync fails when AD users have multiple spaces (two)inside the value of the rdn attribute (DS 48223)
  - Resolves: bug 1160243 - logconv.pl - validate start and end time args (DS 47910)
  - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)
  - Resolves: bug 1230996 - CI test: fixing test cases for ticket 48194 (DS 48194)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-7
changelog:
  - release 1.3.4.0-7
  - Resolves: bug 1235060 - Fix coverity issues - 07/14/2015 (DS 48203)
  - Resolves: bug 1242531 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-8
changelog:
  - release 1.3.4.0-8
  - Resolves: bug 1160243 - [RFE] allow logconv.pl -S/-E switches to work even when exact/same timestamps are not present in access log file (DS 47910)
  - Resolves: bug 1172037 - winsync range retrieval gets only 5000 values upon initialization (DS 48010)
  - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)
  - Resolves: bug 1243950 - When starting a replica agreement a deadlock can occur with an op updating nsuniqueid index (DS 48179)
  - Resolves: bug 1243970 -  In MMR, double free coould occur under some special condition (DS 48226)
  - Resolves: bug 1244926 - Crash while triming the retro changelog (DS 48206)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-9
changelog:
  - release 1.3.4.0-9
  - Resolves: bug 1240876 - verify_db.pl doesn't verify DB specified by -a option. (DS 48215)
  - Resolves: bug 1245235 - winsync lastlogon attribute not syncing between IPA & Windows 2008. (DS 48232)
  - Resolves: bug 1245519 - Deadlock with retrochangelog, memberof plugin (DS 47931)
  - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228)
  - Resolves: bug 1247811 - logconv autobind handling regression caused by 47446 (DS 48231)
  - Resolves: bug 1250177 - Investigate betxn plugins to ensure they return the correct error code (DS 47810)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-11
changelog:
  - release 1.3.4.0-11
  - Resolves: bug 1249784 - ipa-dnskeysyncd unhandled exception on named-pkcs11 start (DS 48249)
  - Resolves: bug 1252082 - removing chaining database links trigger valgrind read error (DS 47686)
  - Resolves: bug 1252207 - bashisms in 389-ds-base admin scripts (DS 47511)
  - Resolves: bug 1252533 - Man pages and help for remove-ds.pl doesn't display "-a" option (DS 48245)
  - Resolves: bug 1252781 - Slapd crashes reported from latest builds (DS 48250)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-12
changelog:
  - release 1.3.4.0-12
  - Resolves: bug 1252133 - replica upgrade failed in starting dirsrv service (DS 48243)
  - Resolves: bug 1254344 - Server crashes in ACL_LasFindFlush during shutdown if ACIs contain IP addresss restrictions (DS 48233)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-14
changelog:
  - release 1.3.4.0-14
  - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228)
  - Resolves: bug 1255851 - Shell CLI fails with usage errors if an argument containing white spaces is given (DS 48254)
  - Resolves: bug 1256938 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax (DS 47757)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-15
changelog:
  - release 1.3.4.0-15
  - Resolves: bug 1258996 - Complex filter in a search request doen't work as expected. (regression) (DS 48265)
  - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-16
changelog:
  - release 1.3.4.0-16
  - Resolves: bug 1243970 - In MMR, double free coould occur under some special condition (DS 48276, DS 48226)
  - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266)
  - Resolves: bug 1241723 - cleanallruv - fix regression with server shutdown (DS 48217)
  - Resolves: bug 1264224 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in (DS 48188)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-17
changelog:
  - release 1.3.4.0-17
  - Resolves: bug 1259949 - A backport error (coverity -- unused variable 'init_retry')


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-18
changelog:
  - release 1.3.4.0-18
  - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266, DS 48284)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-19
changelog:
  - release 1.3.4.0-19
  - Resolves: bug 1228823 - async simple paged results issue (DS 48299, DS 48192)
  - Resolves: bug 1266944 - ns-slapd crash during ipa-replica-manage del (DS 48298)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.2-1
changelog:
  - release 1.3.5.2-1
  - Resolves: bug 1270020 - Rebase 389-ds-base to 1.3.5 in RHEL-7.3 
  - Resolves: bug 1288229 - many attrlist_replace errors in connection with cleanallruv (DS 48283)
  - Resolves: bug 1315893 - License tag does not match actual license of code (DS 48757)
  - Resolves: bug 1320715 - DES to AES password conversion fails if a backend is empty (DS 48777)
  - Resolves: bug 190862  - [RFE] Default password syntax settings don't work with fine-grained policies (DS 142)
  - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 548)
  - Resolves: bug 1143066 - The dirsrv user/group should be created in rpm %pre, and ideally with fixed uid/gid (DS 48285)
  - Resolves: bug 1153758 - [RFE] Support SASL/GSSAPI when ns-slapd is behind a load-balancer (DS 48332)
  - Resolves: bug 1160902 - search, matching rules and filter error "unsupported type 0xA9" (DS 48016)
  - Resolves: bug 1186512 - High memory fragmentation observed in ns-slapd; OOM-Killer invoked (DS 48377, 48129)
  - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109)
  - Resolves: bug 1209094 - [RFE] Allow logging of rejected changes (DS 48145, 48280)
  - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144)
  - Resolves: bug 1210842 - [RFE] Add PIDFile option to systemd service file (DS 47951)
  - Resolves: bug 1223510 - [RFE] it could be nice to have nsslapd-maxbersize default to bigger than 2Mb (DS 48326)
  - Resolves: bug 1229799 - ldclt-bin killed by SIGSEGV (DS 48289)
  - Resolves: bug 1249908 - No validation check for the value for nsslapd-db-locks. (DS 48244)
  - Resolves: bug 1254887 - No man page entry for - option '-u' of dbgen.pl for adding group entries with uniquemembers (DS 48290)
  - Resolves: bug 1255557 - db2index creates index entry from deleted records (DS 48252)
  - Resolves: bug 1258610 - total update request must not be lost (DS 48255)
  - Resolves: bug 1258611 - dna plugin needs to handle binddn groups for authorization (DS 48258)
  - Resolves: bug 1259624 - [RFE] Provide a utility to detect accounts locked due to inactivity (DS 48269)
  - Resolves: bug 1259950 - Add config setting to MemberOf Plugin to add required objectclass got memberOf attribute (DS 48267)
  - Resolves: bug 1266510 - Linked Attributes plug-in - wrong behaviour when adding valid and broken links (DS 48295)
  - Resolves: bug 1266532 - Linked Attributes plug-in - won't update links after MODRDN operation (DS 48294)
  - Resolves: bug 1267750 - pagedresults - when timed out, search results could have been already freed. (DS 48299)
  - Resolves: bug 1269378 - ds-logpipe.py with wrong arguments - python exception in the output (DS 48302)
  - Resolves: bug 1271330 - nunc-stans: Attempt to release connection that is not acquired (DS 48311)
  - Resolves: bug 1272677 - nunc stans: ns-slapd killed by SIGTERM
  - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT
  - Resolves: bug 1273142 - crash in Managed Entry plugin (DS 48312)
  - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982)
  - Resolves: bug 1273550 - Deadlock between two MODs on the same entry between entry cache and backend lock (DS 47978)
  - Resolves: bug 1273555 - deadlock in mep delete post op (DS 47976)
  - Resolves: bug 1273584 - lower password history minimum to 1 (DS 48394)
  - Resolves: bug 1275763 - [RFE] add setup-ds.pl option to disable instance specific scripts (DS 47840)
  - Resolves: bug 1276072 - [RFE] Allow RHDS to be setup using a DNS CNAME alias for General.FullMachineName (DS 48328)
  - Resolves: bug 1278567 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338)
  - Resolves: bug 1278584 - Share nsslapd-threadnumber in the case nunc-stans is enabled, as well. (DS 48339)
  - Resolves: bug 1278755 - deadlock on connection mutex (DS 48341)
  - Resolves: bug 1278987 - Cannot upgrade a consumer to supplier in a multimaster environment (DS 48325)
  - Resolves: bug 1280123 - acl - regression - trailing ', (comma)' in macro matched value is not removed. (DS 48344)
  - Resolves: bug 1290111 - [RFE] Support for rfc3673 '+' to return operational attributes (DS 48363)
  - Resolves: bug 1290141 - With exhausted range, part of DNA shared configuration is deleted after server restart (DS 48362)
  - Resolves: bug 1290242 - SimplePagedResults -- in the search error case, simple paged results slot was not released. (DS 48375)
  - Resolves: bug 1290600 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same ldapmodify operation (DS 48370)
  - Resolves: bug 1295947 - 389-ds hanging after a few minutes of operation (DS 48406, revert 48338)
  - Resolves: bug 1296310 - ldclt - segmentation fault error while binding (DS 48400)
  - Resolves: bug 1299758 - CVE-2016-0741 389-ds-base: Worker threads do not detect abnormally closed connections causing DoS [rhel-7.3]
  - Resolves: bug 1301097 - logconv.pl displays negative operation speeds (DS 48446)
  - Resolves: bug 1302823 - Crash in slapi_get_object_extension (DS 48536)
  - Resolves: bug 1303641 - heap corruption at schema replication. (DS 48492)
  - Resolves: bug 1307151 - keep alive entries can break replication (DS 48445)
  - Resolves: bug 1310848 - Supplier can skip a failing update, although it should retry. (DS 47788)
  - Resolves: bug 1314557 - change severity of some messages related to "keep alive" enties (DS 48420)
  - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450)
  - Resolves: bug 1316742 - no plugin calls in tombstone purging (DS 48759)
  - Resolves: bug 1319329 - [RFE] add nsslapd-auditlog-logging-enabled: off to template-dse.ldif (DS 48145)
  - Resolves: bug 1320295 - If nsSSL3 is on, even if SSL v3 is not really enabled, a confusing message is logged. (DS 48775)
  - Resolves: bug 1326520 - db2index uses a buffer size derived from dbcachesize (DS 48383)
  - Resolves: bug 1328936 - objectclass values could be dropped on the consumer (DS 48799)
  - Resolves: bug 1287475 - [RFE] response control for password age should be sent by default by RHDS (DS 48369)
  - Resolves: bug 1331343 - Paged results search returns the blank list of entries (DS 48808)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.3-1
changelog:
  - release 1.3.5.3-1
  - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144)
  - Resolves: bug 1332533 - ns-accountstatus.pl gives error message on execution along with results. (DS 48815)
  - Resolves: bug 1332709 - password history is not updated when an admin resets the password (DS 48813)
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48822)
  - Resolves: bug 1333515 - Enable DS to offer weaker DH params in NSS  (DS 48798)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.4-1
changelog:
  - release 1.3.5.4-1
  - Resolves: bug 1334455 - db2ldif is not taking into account multiple suffixes or backends (DS 48828)
  - Resolves: bug 1241563 - The "repl-monitor" web page does not display "year" in date. (DS 48220)
  - Resolves: bug 1335618 - Server ram sanity checks work in isolation (DS 48617)
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48837)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.5-1
changelog:
  - Release 1.3.5.5-1
  - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 48833)
  - Resolves: bug 1344414 - [RFE] adding pre/post extop ability (DS 48880)
  - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449)
  - Resolves: bug 1257568 - /usr/lib64/dirsrv/libnunc-stans.so is owned by both -libs and -devel (DS 48404)
  - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755)
  - Resolves: bug 1342609 - At startup DES to AES password conversion causes timeout in start script (DS 48862)
  - Resolves: bug 1316328 - search returns no entry when OR filter component contains non readable attribute (DS 48275)
  - Resolves: bug 1280456 - setup-ds should detect if port is already defined (DS 48336)
  - Resolves: bug 1312557 - dirsrv service fails to start when nsslapd-listenhost is configured (DS 48747)
  - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48752)
  - Resolves: bug 1340307 - Running db2index with no options breaks replication (DS 48854)
  - Resolves: bug 1337195 - Regression introduced in matching rules by DS 48746 (DS 48844)
  - Resolves: bug 1335492 - Modifier's name is not recorded in the audit log with modrdn and moddn operations (DS 48834)
  - Resolves: bug 1316741 - ldctl should support -H with ldap uris (DS 48754)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.6-1
changelog:
  - Release 1.3.5.6-1
  - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982)
  - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48766, DS 48636)
  - Resolves: bug 1233926 - "matching rules" in ACI's "bind rules not fully evaluated (DS 48234)
  - Resolves: bug 1346165 - 389-ds-base-1.3.5.5-1.el7.x86_64 requires policycoreutils-py


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.7-1
changelog:
  - Release 1.3.5.7-1
  - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109)
  - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449)
  - Resolves: bug 1290101 - proxyauth support does not work when bound as directory  manager (DS 48366)
  - Resolves: bug 1338872 - Wrong result code display in audit-failure log (DS 48892)
  - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538)
  - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule  (DS 48891)
  - Resolves: bug 1347407 - By default aci can be read by anonymous (DS 48354)
  - Resolves: bug 1347412 - cn=SNMP,cn=config entry can be read by anonymous (DS 48893)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.8-1
changelog:
  - Release 1.3.5.8-1
  - Resolves: bug 1290101 - proxyauth support does not work when bound as directory  manager (DS 48366)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.9-1
changelog:
  - Release 1.3.5.9-1
  - Resolves: bug 1349571 - Improve MMR replication convergence (DS 48636)
  - Resolves: bug 1304682 - "stale" automember rule (associated to a removed group) causes discrepancies in the database (DS 48637)
  - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755)
  - Resolves: bug 1316731 - syncrepl search returning error 329; plugin sending a bad error code (DS 48904)
  - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule  (DS 48891)
  - Resolves: bug 1349577 - Values of dbcachetries/dbcachehits in cn=monitor could overflow. (DS 48899)
  - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT (DS 48898)
  - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538)
  - Resolves: bug 1350632 - ns-slapd shutdown crashes if pwdstorageschema name is from stack. (DS 48902)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-1
changelog:
  - Release 1.3.5.10-1
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48905)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-2
changelog:
  - Release 1.3.5.10-2
  - Resolves: bug 1353714 - If a cipher is disabled do not attempt to look it up (DS 48743)
  - Resolves: bug 1353592 - Setup-ds.pl --update fails - regression (DS 48755)
  - Resolves: bug 1353544 - db2bak.pl task enters infinitive loop when bak fs is almost full (DS 48914)
  - Resolves: bug 1354374 - Upgrade to 389-ds-base >= 1.3.5.5 doesn't install 389-ds-base-snmp (DS 48918)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-4
changelog:
  - Release 1.3.5.10-4
  - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144)
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919)
  - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat
  - Resolves: bug 1354660 - flow control in replication also blocks receiving results (DS 48767)
  - Resolves: bug 1356261 - Fixup tombstone task needs to set proper flag when updating (DS 48924)
  - Resolves: bug 1355760 - ns-slapd crashes during the deletion of backend (DS 48922)
  - Resolves: bug 1353629 - DS shuts down automatically if dnaThreshold is set to 0 in a MMR setup (DS 48916)
  - Resolves: bug 1355879 - nunc-stans: ns-slapd crashes during startup with SIGILL on AMD Opteron 280 (DS 48925)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-5
changelog:
  - Release 1.3.5.10-5
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-6
changelog:
  - Release 1.3.5.10-6
  - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48928)
  - Resolves: bug 1360447 - nsslapd-workingdir is empty when ns-slapd is started by systemd (DS 48939)
  - Resolves: bug 1360327 - remove-ds.pl deletes an instance even if wrong prefix was specified (DS 48934)
  - Resolves: bug 1349815 - DS logs have warning:ancestorid not indexed for all CS subsystems (DS 48940)
  - Resolves: bug 1329061 - 389-ds-base-1.3.4.0-29.el7_2 "hang" (DS 48882)
  - Resolves: bug 1360976 - EMBARGOED CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack
  - Resolves: bug 1361134 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password (DS 48943) 
  - Resolves: bug 1361321 - Duplicate collation entries (DS 48936)
  - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450)
  - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-7
changelog:
  - Release 1.3.5.10-7
  - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450)
  - Resolves: bug 1360976 - fixing a compiler warning


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-8
changelog:
  - Release 1.3.5.10-8
  - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48954)
  - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950)
  - Resolves: bug 1366561 - ns-accountstatus.pl giving error even "No such object (32)" (DS 48956)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-9
changelog:
  - Release 1.3.5.10-9
  - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950)
  - Resolves: bug 1366828 - audit on failure doesn't work if attribute nsslapd-auditlog-logging-enabled is NOT enabled (DS 48958)
  - Resolves: bug 1368520 - Crash in import_wait_for_space_in_fifo() (DS 48960)
  - Resolves: bug 1368956 - man page of ns-accountstatus.pl shows redundant entries for -p port option
  - Resolves: bug 1369537 - passwordMinAge attribute doesn't limit the minimum age of the password (DS 48967)
  - Resolves: bug 1369570 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964)
  - Resolves: bug 1369425 - ACI behaves erratically (DS 48972)
  - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957)
  - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969)
  - Resolves: bug 1371283 - Server Side Sorting crashes the server. (DS 48970)
  - Resolves: bug 1371284 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-10
changelog:
  - Release 1.3.5.10-10
  - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957)
  - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-11
changelog:
  - Release 1.3.5.10-11
  - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-12
changelog:
  - Release 1.3.5.10-12
  - Resolves: bug 1384785 - Replica install fails with old IPA master sometimes during replication process (DS 48992)
  - Resolves: bug 1388501 - 389-ds-base is missing runtime dependency - bind-utils (DS 48328)
  - Resolves: bug 1388581 - Replication stops working only when fips mode is set to true (DS 48909)
  - Resolves: bug 1390342 - ns-accountstatus.pl shows wrong status for accounts inactivated by Account policy plugin (DS 49014)
  - Resolves: bug 1390343 - trace args debug logging must be more restrictive (DS 49009)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-2
changelog:
  - Bump version to 1.3.6.1-2
  - Resolves: bug 1431877 - 389-1.3.6.1-1.el7 covscan errors
  - Resolves: bug 1432206 - content sync plugin can hang server shutdown
  - Resolves: bug 1432149 - sasl external binds fail in 1.3.6.1


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-4
changelog:
  - Bump version to 1.3.6.1-4
  - Resolves: bug 1379424 - Reset-agmt-update-staus-and-total-init
  - Resolves: bug 1394000 - dbmon.sh-fails-if-you-have-nsslapd-requi.patch
  - Resolves: bug 1417344 - targetattr-wildcard-evaluation-is-incorr.patch
  - Resolves: bug 1429770 - ds-logpipe.py-crashes-for-non-existing-u.patch
  - Resolves: bug 1433697 - Fix-double-free-in-_cl5NewDBFile-error-path.patch
  - Resolves: bug 1433996 - retrocl-can-crash-server-at-shutdown.patch
  - Resolves: bug 1434967 - rpm-would-not-create-valid-pkgconfig-fi.patch
  - Resolves: bug 1417338 - To-debug-DB_DEADLOCK-condition-allow-to.patch
  - Resolves: bug 1433850 - Deleting-suffix-can-hang-server.patch


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-5
changelog:
  - Bump version to 1.3.6.1-5
  - Resolves: bug 1377452 - Integer overflow in counters and monitor
  - Resolves: bug 1425907 - Harden password storage scheme
  - Resolves: bug 1431207 - ns-slapd killed by SIGABRT


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-6
changelog:
  - Bump version to 1.3.6.1-6
  - Resolves: bug 1437006 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages
  - Resolves: bug 1341689 - dbmon.sh / cn=monitor] nsslapd-db-pages-in-use is increasing
  - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set
  - Resolves: bug 1397288 - typo in logconv.pl man page
  - Resolves: bug 1436994 - incorrect pathes in pkg-config files
  - Resolves: bug 1396448 - Add a hard dependency for >=selinux-policy-3.13.1-75


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-7
changelog:
  - Bump version to 1.3.6.1-7
  - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set(fix crash regression)
  - Resolves: bug 1381326 - dirsrv-snmp.service is provided by 389-ds-base instead of 389-ds-base-snmp
  - Resolves: bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-8
changelog:
  - Bump version to 1.3.6.1-8
  - Resolves: Bug 1432016 - Possible deadlock while installing an ipa replica
  - Resolves: Bug 1438029 - Overflow in memberof


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-9
changelog:
  - Bump version to 1.3.6.1-9
  - Resolves: Bug 1442880 - setup-ds-admin.pl -u with nsslapd-localhost changed
  - Resolves: Bug 1443682 - util_info_sys_pages should be able to detect memory restrictions in a cgroup


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-10
changelog:
  - Bump version to 1.3.6.1-10
  - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
  - Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
  - Resolves: Bug 1377452 - Integer overflow in performance counters
  - Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
  - Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
  - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-11
changelog:
  - Bump version to 1.3.6.1-11
  - Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
  - Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-13
changelog:
  - Bump version to 1.3.6.1-13
  - Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-14
changelog:
  - Bump version to 1.3.6.1-14
  - Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
  - Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
  - Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
  - Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
  - Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
  - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
  - Resolves: Bug 1451657 - -v option is not working for db2ldif.pl


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-15
changelog:
  - Bump version to 1.3.6.1-15
  - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
  - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
  - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
  - Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
  - Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-16
changelog:
  - Bump version to 1.3.6.1-16
  - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
  - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
  - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
  - Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
  - Resolves: Bug 1456774 - ipa-replica server fails to upgrade


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-17
changelog:
  - Bump version to 1.3.6.1-17
  - Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
  - Resolves: Bug 1476162 - Change the retrochangelog default cache size


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-18
changelog:
  - Bump version to 1.3.6.1-18
  - Require srvcore 4.1.3
  - Resolves: Bug 1479757 - dse.ldif and fsync
  - Resolves: Bug 1479755 - backup fails if changelog is enabled
  - Resolves: Bug 1479756 - Locked account provides different return code if password is correct


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.19-1
changelog:
  - Bump version to 1.3.6.19-1
  - Remove old mozldap and db4 requirements
  - Resolves: Bug 1483865 - Crash while binding to a server during replication online init


author: Donnie Barnes <djb@redhat.com>
changelog:
  - added signal handling patch from Dean Gaudet <dgaudet@arctic.org> that
    is based on a change made in bash 2.0.  Should fix some early exit
    problems with suspends and fg.


author: Ian Macdonald <ianmacd@xs4all.nl>
changelog:
  - upgraded to version 2.02
  - Alpha, MIPS & Sparc patches removed due to lack of test platforms
  - glibc & signal patches no longer required
  - added documentation subpackage (doc)


author: Florian La Roche <Florian.LaRoche@redhat.com>
changelog:
  - add some collected patches for bash2
  - change it over to be the main bash package
  - install man-pages root:root
  - obsolete bash2, bash2-doc


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 2.04beta5
  - adapt patches
  - Fix up bashrc
  - Don't put in bashrc1, this should be done by the bash1 package
  - use install -c instead of plain install to work on *BSD
  - remove the collected patches - they're now in the base version.
  - make compressed man pages optional


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 2.04 final
  - remove the echo, pwd, test and kill man pages from the package,
    we're getting them from sh-utils


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-1
changelog:
  - Update to 2.05
  - Change PROMPT_COMMAND in bashrc for xterms
    to something less space consuming (#24159)
  - Provide plugs for alternate prompt commands (#30634), but don't
    default to them


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-2
changelog:
  - bash comes with its own copy of readline... Add the patches we're
    applying in the readline package.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-5
changelog:
  - Don't set BASH_ENV in .bash_profile, it causes .bashrc to be sourced
    twice in interactive non-login shells.
  - s/Copyright/License/


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05a-9
changelog:
  - Add patch from Ulrich Drepper to get better error messages when trying
    to launch an application with a bad ELF interpreter (e.g. libc5 ld.so)
    (#60870)


author: Tim Waugh <twaugh@redhat.com> 2.05b-4
changelog:
  - Fix history substitution modifiers in UTF-8 (bug #70294, bug #71186).
  - Fix ADVANCE_CHAR at end of string (bug #70819).
  - docs: CWRU/POSIX.NOTES no longer exists, but ship POSIX.


author: Tim Waugh <twaugh@redhat.com> 2.05b-6
changelog:
  - Add the (4) patches from ftp.gnu.org (bug #75888, bug #72512).
  - Ship '.' man page, which doesn't get picked up by glob.
  - Don't install files not shipped when building.
  - Locale shell variables fix (bug #74701).


author: Tim Waugh <twaugh@redhat.com> 2.05b-23
changelog:
  - Fix a warning message (bug #79629).
  - Don't remove generated source during build, for debuginfo package.
  - Don't build with AFS support (bug #86514).


author: Tim Waugh <twaugh@redhat.com> 3.0-2
changelog:
  - Fixed brace expansion (bug #129128).
  - Build with AFS support again, since bug #86514 seems fixed upstream
    (bug #129094).


author: Tim Waugh <twaugh@redhat.com> 3.0-5
changelog:
  - Make trap usage string show POSIX usage (bug #128938).
  - Updated ${x[@]:1} expansion fix from bug-bash list.
  - Updated patch to fix unset array crash (from bug-bash list).


author: Tim Waugh <twaugh@redhat.com> 3.0-13
changelog:
  - Check for EINVAL from waitpid() and avoid WCONTINUED in that case.
  - Fixed jobs4 test.
  - Applied experimental upstream patch for trap compatibility.
  - Re-make documentation to reflect source changes.


author: Tim Waugh <twaugh@redhat.com> 3.0-21
changelog:
  - Added code to /etc/skel/.bash_logout to support the gpm selection buffer
    invalidation on virtual terminals (bug #115493).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Reverted this change:
    - Added code to /etc/skel/.bash_logout to support the gpm selection buffer
      invalidation on virtual terminals (bug #115493).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fixed AFS support for output redirection, so that the correct errors
    are reported for other filesystems (bug #155373).


author: Tim Waugh <twaugh@redhat.com> 3.0-36
changelog:
  - Added Url: tag (bug #172770).
  - Do not explicitly gzip info pages (bug #172770).
  - Fix permissions on bashbug (bug #172770).


author: Tim Waugh <twaugh@redhat.com> 3.0-40
changelog:
  - Fix read memleak when reading from non-blocking fd (bug #173283).
  - Missed another loop for improved sighandler patch (bug #169231).


author: Tim Waugh <twaugh@redhat.com> 3.1-1
changelog:
  - 3.1.
  - No longer need ia64, utf8, multibyteifs, jobs, sigpipe,
    read-e-segfault, manpage, crash, pwd, afs, subshell patches.
  - Remove wrap patch for now.
  - Use upstream patch to fix arrays.


author: Tim Waugh <twaugh@redhat.com> 3.1-2
changelog:
  - No longer need loadables, mbinc or shellfunc patches.
  - Use literal single-quote in bash man page where appropriate (bug #177051).


author: Tim Waugh <twaugh@redhat.com> 3.2-1
changelog:
  - Build requires autoconf and gettext.
  - 3.2.  No longer need aq, login, ulimit, sighandler or read-memleak
    patches.


author: Tim Waugh <twaugh@redhat.com> 3.2-5
changelog:
  - Added triggers for install-info (bug #225609).
  - Use full path to utilities in scriptlets (bug #225609).
  - Fix missing sh-bangs in example scripts (bug #225609).
  - Post requires ncurses (bug #224567).
  - Removed Prefix tag (bug #225609).
  - Fixed BuildRoot tag (bug #225609).
  - Removed trailing full-stop from summary (bug #225609).
  - Spec file is now UTF-8 (bug #225609).
  - Removed obsolete Obsoletes (bug #225609).
  - Moved 'make check' to new 'check' section (bug #225609).
  - Removed uses of RPM_SOURCE_DIR (bug #225609).
  - Fixed macros in changelog (bug #225609).
  - Changed tabs to spaces (bug #225609).


author: Tim Waugh <twaugh@redhat.com> 3.2-7
changelog:
  - Reinstated this change:
    - Post requires ncurses (bug #224567).
  - Reverted this change:
    - Added triggers for install-info (bug #225609).


author: Pete Graner <pgraner@redhat.com> - 3.2-15
changelog:
  - Update to the Improve bash $RANDOM pseudo RNG (bug #234906) 
    now works with subshells and make $RANDOM on demand thus reducing the 
    amount of AVCs thrown.


author: Pete Graner <pgraner@redhat.com> - 3.2-17
changelog:
  - Added bash32-018 upstream official patch
  - Added bash32-020 upstream official patch
  - Added bash32-019 upstream official patch


author: Pete Graner <pgraner@redhat.com> - 3.2-18
changelog:
  - Added bash32-021 upstream official patch
  - Added bash32-025 upstream official patch
  - Added bash32-024 upstream official patch
  - Added bash32-023 upstream official patch
  - Added bash32-022 upstream official patch


author: Tomas Janousek <tjanouse@redhat.com> - 3.2-19
changelog:
  - fix cursor position when prompt has one invisible character (#358231)
  - dropped examples/loadables/ from docs, since it wasn't possible to build them
    anyway (#174380)
  - fix #286861: Wrong input confuses bash's arithmetic unit permanently
  - fix #344411: $RANDOM stays the same when job executed in the background


author: Tomas Janousek <tjanouse@redhat.com> - 3.2-20
changelog:
  - Added bash32-026 upstream official patch
  - Added bash32-027 upstream official patch (#249987)
  - Added bash32-028 upstream official patch
  - Added bash32-029 upstream official patch (#286861)
  - Added bash32-030 upstream official patch
  - Added bash32-031 upstream official patch (#358231)
  - Added bash32-032 upstream official patch
  - Added bash32-033 upstream official patch
  - Fix insert command repeating in vi mode (#190350)


author: Roman Rakus <rrakus@redhat.com> - 3.2-28
changelog:
  - Removing Requires for mktemp and ncurses, which cause
    dependencing loop
  - Enabling #define SSH_SOURCE_BASHRC, because ssh changed.
    Resolves: #458839
  - Catch signals right after calling execve()
    Resolves: #455548


author: Jesse Keating <jkeating@redhat.com> - 3.2-29
changelog:
  - Add the Requires(post) back for ncurses-libs, so that rpm knows
    where to break the loop.  The post actually does require the curses
    libs for the sh calls.  Could consider doing this in LUA and not have
    any external deps.


author: Ville Skyttä <ville.skytta@iki.fi> - 4.1.9-2
changelog:
  - Move doc dir ownership to main package.
  - Preserve doc timestamps.
  - Add --without tests option for building without running the test suite.


author: Roman Rakus <rrakus@redhat.com> - 4.1.9-3
changelog:
  - don't segfault when trying to bind int variable to array
    with bad array subsrcipt
    Resolves: #618289


author: Roman Rakus <rrakus@redhat.com> - 4.2.37-7
changelog:
  - Update info about trap in man page
    Resolves: #799958
  - instead of setting the signal handler to SIG_IGN while installing
    the new trap handler, block the signal and unblock it after the new handler
    is installed
    Resolves: #695656


author: Scott Lampert <fortunato@heavymetal.org>
changelog:
  - Used buildroot
  - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include
    on Redhat 5.0 instead of <nlist.h>


author: Manuel J. Galan <manolow@step.es>
changelog:
  - Several essential modifications to build and install correctly.
  - Modified 'ndc' to avoid deprecated use of '-'


author: Stepan Kasal <kasal@math.cas.cz>
changelog:
  - nslookup patched:
    to count numRecords properly
    to fix subsequent calls to ls -d
    to parse "view" and "finger" commands properly
    the view hack updated for bind-8 (using sed)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 8.2.1.
  - add named.logrotate (#3571).
  - hack around egcs-1.1.2 -m486 bug (#3413, #3485).
  - vet file list.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - use real stop and start in named.init for restart, not ndc restart, it has
    problems when named has changed during a package update... (# 4890)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up location of named-bootconf.pl and make it executable
    (Bug #8028)
  - bind-devel requires bind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - provide /var/named (fix for bugs #9847, #10205)
  - preserve args when restarted via ndc(8) (bug #10227)
  - make resolv.conf(5) a link to resolver(5) (bug #10245)
  - fix SYSTYPE bug in all makefiles
  - move creation of named user from %post into %pre


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify logrotate setup to use PID file
  - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time
  - actually bump the release this time


author: Bernhard Rosenkranzer <bero@redhat.com>
changelog:
  - Fix up the initscript (Bug #13033)
  - Fix build with current glibc (Bug #12755)
  - /etc/rc.d/init.d -> /etc/init.d
  - use %{_mandir} rather than /usr/share/man


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed logrotate script (wrong path to kill)
  - include header files in -devel package
  - bugzilla #22049, #19147, 21606


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move run files to /var/run/named/ - /var/run isn't writable
    by the user we're running as. (Bug #20665)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Make /etc/rndc.conf and /etc/sysconfig/named noreplace
  - Make devel require bind = %{version} rather than just bind


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us;
    1 was fixed in a Red Hat patch already, 2 others are portability
    improvements)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes
    from 9.1.1rc2
  - bind requires bind-utils (#28317)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Don't use the standard rndc key from the documentation, instead, create a random one
    at installation time (#26358)
  - Make /etc/rndc.conf readable by user named only, it contains secret keys


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9
changelog:
  - Work around bind 8 -> bind 9 migration problem when using buggy zone files:
    accept zones without a TTL, but spew out a big fat warning. (#31393)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1
changelog:
  - 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for
    the version number, though.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2
changelog:
  - Add named.conf man page from bind 8.x (outdated, but better than nothing,
    - Rename the rndc key (#42895)
  - Add dnssec* man pages


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3
changelog:
  - Add build dependencies (#49368)
  - Make sure running service named start several times doesn't create
    useless processes (#47596)
  - Work around the named parent process returning 0 even if the config
    file is broken (it's parsed later by the child processes) (#45484)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4
changelog:
  - Make sure /etc/rndc.conf isn't world-readable even after the
    %post script inserted a random key (#53009)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1
changelog:
  - 9.2.0rc3
  - remove ttl patch, I don't think we need this for 8.0.
  - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page
  - add lwres* man pages to -devel


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7
changelog:
  - Don't exit if /etc/named.conf doesn't exist if we're running
    chroot (#60868)
  - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders
    versions or bug #58335 will be back. "It compiles, therefore it works"
    isn't always true.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2
changelog:
  - Move libisccc, lib isccfg and liblwres from bind-utils to bind,
    they're not required if you aren't running a nameserver.


author: Karsten Hopp <karsten@redhat.de> 9.2.1-7
changelog:
  - fix name of pidfine in logrotate script (#68842)
  - fix owner of logfile in logrotate script (#41391)
  - fix nslookup and named.conf man pages (output on stderr)
    (#63553, #63560, #63561, #54889, #57457)
  - add rfc1912 (#50005)
  - gzip all rfc's
  - fix typo in keygen.c (#54870)
  - added missing manpages (#64065)
  - shutdown named properly with rndc stop (#62492)
  - /sbin/nologin instead of /bin/false (#68607)
  - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381)
  - don't kill initscript when rndc fails (reload)    (#58750)


author: Daniel Walsh <dwalsh@redhat.com> 9.2.1-12
changelog:
  - Fix log rotate to use service named reload
  - Change service named reload to give success/failure message [73770]
  - Fix File checking [75710]
  - Begin change to automatically run in CHROOT environment


author: Daniel Walsh <dwalsh@redhat.com> 9.2.2-13
changelog:
  - Fix config description of named.conf in chroot
  - Change named.init script to check for existence of /etc/sysconfig/network


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed named.init generation of error messages on
  - 'service named stop' and 'service named reload'
  - as per bug 127775


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed bug 129289: bind-chroot install / deinstall
  - on install, existing config files 'safe_replace'd
  - with links to chroot copies; on uninstall, moved back.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Remove resolver(5) manpage now in man-pages (bug 130792);
  - Don't create /dev/ entries in bind-chroot if already there (bug 127556);
  - fix bind-devel Requires (bug 130919)
  - Set default location for dumpdb & stats files to /var/named/data


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fix bug 130981: add '-t' option to named-checkconf invocation in
  - named.init if chroot installed.


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10
changelog:
  - Fix bug 130121: add '%ghost' entries for files included in previous
  - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* -
  - that RPM removed after upgrade .


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3
changelog:
  - Fix bug 131803: replace ROOTDIR line removed by broken
  - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chroot


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3
changelog:
  - Fix bug 132303: if ROOTDIR line was replaced after upgrade from
  - bind-chroot-9.2.2-21, restart named


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14
changelog:
  - Upgrade to upstream bind-9.2.4rc8 .
  - Progress: Finally! Hooray! ISC bind now distributes:
  - o named.conf(5) and nslookup(8) manpages
  -    'bind-manpages.bz2' source can now disappear
  -    (could this have something to do with ISC bug I raised about this?)
  - o 'deprecation_msg' global has vanished
  -     bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1
changelog:
  - BIND 9.2.4 (final release) released - source code actually
  - identical to 9.2.4rc8, with only version number change.


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2
changelog:
  - Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix}
  - Fix bug 135175: named.init must return non-zero if named is not run
  - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named
  - Fix bug 133423: bind-chroot %files entries should have been %dirs


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4
changelog:
  - Fix bugs 140528 and 141113:
  - 2 second timeouts when IPv6 not configured and root nameserver's
  - AAAA addresses are queried


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2
changelog:
  - Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named
  -                 based on 'named_write_master_zones' SELinux boolean.
  - Fix bug 143744: dig & nsupdate IPv6 timeout  (dup of 140528)


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1
changelog:
  - Upgrade to 9.3.1rc1
  - Add Simplified Database Backend (SDB) sub-package ( bind-sdb )
  -     add named_sdb - ldap + pgsql + dir database backend support with
  -     'ENABLE_SDB' named.sysconfig option
  - Add BIND resolver library & includes sub-package ( libbind-devel)
  - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init
  - fix bug 146084 : shutup restorecon


author: Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5
changelog:
  - fix bug 150288: h_errno not being accessed / set correctly in libbind
  - add libbind man-pages from bind-8.4.6


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4
changelog:
  - Rebuild for bind-sdb libpq.so.3 dependency
  - fix bug 150981: don't install libbind man-pages if no libbind
  - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...)
    to work and correct number of CPUs to be determined


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbus
changelog:
  - Enhancement to allow dynamic forwarder table management and
  - DHCP forwarder auto-configuration with D-BUS


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4
changelog:
  - Fix bug 157601: give named.init a configtest function
  - Fix bug 156797: named.init should check SELinux booleans.local before booleans
  - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc
  - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat
                    BIND quirks and SELinux DDNS / slave zone file configuration
  - D-BUS patches NOT applied until dhcdbd is in FC


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6
changelog:
  - fix bug 157950: dig / host / nslookup should reject invalid resolv.conf
                    files and not use uninitialized garbage nameserver values
                    (ISC bug 14841 raised).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7
changelog:
  - fix bug 160914: resolver utilities should try next server on empty referral
                    (now that glibc bug 162625 is fixed)
                    host and nslookup now by default try next server on SERVFAIL
                    (host now has '-s' option to disable, and nslookup given
                     '[no]fail' option similar to dig's [no]fail option).
  - rebuild and re-test with new glibc & gcc (all tests passed).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10
changelog:
  - Build with D-BUS patch by default; D-BUS support enabled with named -D option
  - Enable D-BUS for named_sdb also
  - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create()
  - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server
  - fix named.init script to handle named_sdb properly
  - fix named.init script checkconfig() to handle named '-c' option
    and make configtest, test, check configcheck synonyms


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12
changelog:
  - fix bug 168302: use %{__cc} for compiling dns-keygen
  - fix bug 167682: bind-chroot directory permissions
  - fix issues with -D dbus option when dbus service not running or disabled


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18
changelog:
  - fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() -
        task->state != task_ready and will cause Abort in task.c if process
        is waiting for NameOwnerChanged to do a SetForwarders


author: Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20
changelog:
  - Allow the -D enable D-BUS option to be used within bind-chroot .
  - fix bug 171226: supply some documentation for pgsql SDB .


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22
changelog:
  - fix bug 172632 - remove .la files
  - ship namedGetForwarders and namedSetForwarders scripts
  - fix detection of -D option in chroot


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24
changelog:
  - allow D-BUS support to work in bind-chroot environment:
    workaround latest selinux policy by mounting /var/run/dbus/
    under chroot instead of /var/run/dbus/system-bus-socket


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4
changelog:
  - regenerate redhat_doc patch for non-DBUS builds
  - allow dbus builds to work with dbus version < 0.6 (bz #179816)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6
changelog:
  - replace caching-nameserver with bind-config sub-package
  - fix bug 177595: handle case where $ROOTDIR is a link in initscript
  - fix bug 177001: bind-config creates symlinks OK now
  - fix bug 176388: named.conf is now never replaced by any RPM
  - fix bug 176248: remove unecessary creation of rpmsave links
  - fix bug 174925: no replacement of named.conf
  - fix bug 173963: existing named.conf never modified
  - major .spec file cleanup


author: Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8
changelog:
  - Do not allow package to be installed if named:25 userid creation fails
  - Give libbind a pkg-config file
  - remove restorecon from bind-chroot-admin (not required).
  - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14
changelog:
  - fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup
  - add '%doc' sample configuration files in /usr/share/doc/bind*/sample
  - rebuild with new gcc and glibc


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16
changelog:
  - fix bug 187286: 
       prevent host(1) printing duplicate 'is an alias for' messages
       for the default AAAA and MX lookups as well as for the A lookup
       (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups).
       This is upstream bug #15702 fixed in the unreleased bind-9.3.3
  - fix bug 187333: fix SOURCE24 and SOURCE25 transposition


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20
changelog:
  - fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 
    (upstream bugs #15642, #15528 ?)
  - allow named ability to generate core dumps after setuid (upstream bug #15753)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22
changelog:
  - apply upstream patch for ncache_adderesult segfault bug 173961 addenda
  - fix bug 188382: rpm --verify permissions inconsistencies
  - fix bug 189186: use /sbin/service instead of initscript
  - rebuild for new gcc, glibc-kernheaders


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6
changelog:
  - fix bugs 191093, 189789
  - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version:
    ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): 
    o change 2024 / bug 16027:
      named emitted spurious "zone serial unchanged" messages on reload
    o change 2013 / bug 15941:
      handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully
    o change 2009 / bug 15808: coverity fixes
    o change 1997 / bug 15818: 
      named was failing to replace negative cache entries when a positive one
      for the type was learnt
    o change 1994 / bug 15694: OpenSSL 0.9.8 support
    o change 1991 / bug 15813:
      The configuration data, once read, should be treated as readonly.
    o misc. validator fixes 
    o misc. resolver fixes
    o misc. dns fixes
    o misc. isc fixes
    o misc. libbind fixes
    o misc. isccfg fix
    o misc. lwres fix
    o misc. named fixes
    o misc. dig fixes
    o misc. nsupdate fix
    o misc. tests fixes


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30
changelog:
  - fix bug 196398 - Enable -D option automatically in initscript
    if NetworkManager enabled in any runlevel.
  - fix namedGetForwarders for new dbus
  - fix bug 195881 - libbind.so should be owned by bind-libbind-devel


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32
changelog:
  - fix addenda to bug 189789: 
    determination of selinux enabled was still not 100% correct in bind-chroot-admin
  - fix addenda to bug 196398:
    make named.init test for NetworkManager being enabled AFTER testing for -D absence;
    named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable
    auto-enable of named dbus support if NetworkManager enabled.


author: Martin Stransky <stransky@redhat.com> - 30:9.3.2-37
changelog:
  - fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory
  - fix for #202547 - file_contexts: invalid context


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-3
changelog:
  - added fix from #209400 - Bind Init Script does not create 
    the PID file always, created by Jeff Means
  - added timeout to stop section of init script. 
    The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT
    shell variable.


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-6
changelog:
  - fix for #200465: named-checkzone and co. cannot be run as non-root user
  - fix for #212348: chroot'd named causes df permission denied error
  - fix for #211249, #211083 - problems with stopping named
  - fix for #212549: init script does not unmount /proc filesystem
  - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1,
      added edns-enable options to named configuration file which can suppress
      EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options)
  - fix for #212961: bind-chroot doesn't clean up its mess on %preun
  - update to 9.3.3rc3, removed already merged patches


author: Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3
changelog:
  - added back an interval to restart
  - renamed package, it should meet the N-V-R criteria
  - fix for #216185: bind-chroot-admin able to change root mode 750
  - added fix from #215997: incorrect permissions on dnszone.schema
  - added a notice to init script when /etc/named.conf doesn't exist (#216075)


author: Martin Stransky <stransky@redhat.com> - 31:9.3.3-2
changelog:
  - added namedGetForwarders written in shell (#176100),
    created by Baris Cicek <baris@nerd.com.tr>.


author: Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7
changelog:
  - package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs)
  - Resolves: #214208


author: Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7
changelog:
  - fixed building without libbind
  - fixed post section (selinux commands is now in if-endif statement)
  - prever macro has been removed from version


author: Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7
changelog:
  - updated to 9.4.0
  - bind-chroot-admin now sets EAs correctly (#213926)
  - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)


author: Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7
changelog:
  - added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>)
  - moved bind-chroot-admin script to chroot package
  - bind-9.3.2-redhat_doc.patch is always applied (#231738)


author: Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7
changelog:
  - prepared bind to merge review
  - added experimental idn support to bind-utils utils (not enabled by default yet)
  - change chroot policy in caching-nameserver post section
  - fixed bug in bind-chroot-admin - rootdir function is called properly now


author: Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7
changelog:
  - removed query-source[-v6] options from caching-nameserver config
    (#209954, increase security)
  - throw away idn. It won't be ready in fc7


author: Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7
changelog:
  - removed DEBUGINFO option because with this option (default) was bind
    builded with -O0 and without this flag no debuginfo package was produced.
    (I want faster bind => -O2 + debuginfo)
  - fixed zone finding (#236426)


author: Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7
changelog:
  - improved "zone freeze patch" - if multiple zone with same name exists
    no zone is freezed
  - minor cleanup in caching-nameserver's config file
  - fixed race-condition in dbus code (#235809)
  - added forgotten restorecon statement in bind-chroot-admin


author: Adam Tkac <atkac redhat com> 31:9.4.1-3
changelog:
  - fixed bind-chroot-admin dynamic DNS handling (#239149)
  - updated zone-freeze patch to latest upstream
  - ldap sdb has been rewriten to latest api (#239802)


author: Adam Tkac <atkac redhat com> 31:9.4.1-4
changelog:
  - removed ldap-api patch and start using deprecated API
  - fixed minor problem in bind-chroot-admin script (#241103)


author: Adam Tkac <atkac redhat com> 31:9.4.1-5
changelog:
  - very minor compatibility change in bind-chroot-admin (line 215)
  - enabled IDN support by default and don't distribute IDN libraries
  - specfile cleanup
  - add dynamic directory to /var/named. This directory will be primarily used for
    dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist


author: Adam Tkac <atkac redhat com> 31:9.4.1-6
changelog:
  - major changes in initscript. Could be LSB compatible now
  - removed caching-nameserver subpackage. Move configs from this
    package to main bind package as default configuration and major
    configuration cleanup


author: Adam Tkac <atkac redhat com> 31:9.4.1-7
changelog:
  - marked caching-nameserver as obsolete (#244604)
  - fixed typo in initscript (causes that named doesn't detect NetworkManager
    correctly)
  - next cleanup in configuration - moved configfiles into config.tar
  - removed delay between start & stop in restart function in named.init


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-2
changelog:
  - minor changes in default configuration
  - fix h_errno assigment during resolver initialization (unbounded recursion, #245857)
  - removed wrong patch to #150288


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9
changelog:
  - removed bind-sdb package (default named has compiled SDB backend now)
  - integrated DLZ (Dynamically loadable zones) drivers
  - integrated GSS-TSIG support (RFC 3645)
  - build with -O0 (many new features, potential core dumps will be more useful)


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-5
changelog:
  - integrated "autotools" patch for testing purposes (upstream will
    accept it in future, for easier building)


author: Adam Tkac <atkac redhat com> 32:9.5.0-6.a6
changelog:
  - updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and
    CVE-2007-2926
  - fixed building on 64bits


author: Adam Tkac <atkac redhat com> 32:9.5.0-8.a6
changelog:
  - minor next improvements on autotools patch
  - dig and host utilities now using libidn instead idnkit for
    IDN support


author: Adam Tkac <atkac redhat com> 32:9.5.0-9.a6
changelog:
  - disable 64bit dlz driver patch on alpha and ia64 (#251298)
  - remove wrong malloc functions from lib/dns/spnego.c (#251853)


author: Adam Tkac <atkac redhat com> 32:9.5.0-10.a6
changelog:
  - dropped direct dependency to /etc/openldap/schema directory
  - changed hardcoded paths to macros
  - fired away code which configure LDAP server


author: Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6
changelog:
  - added new initscript option KEYTAB_FILE which specified where
    is located kerberos .keytab file for named service
  - obsolete temporary bind-9.5-spnego-memory_management.patch by
    bind-9.5-gssapictx-free.patch which conforms BIND coding standards
    (#251853)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.a6
changelog:
  - start using --disable-isc-spnego configure option
    - remove bind-9.5-spnego-memory_management.patch (source isn't
      compiled)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6
changelog:
  - removed end dots from Summary sections (skasal@redhat.com)
  - fixed wrong file creation by autotools patch (skasal@redhat.com)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6
changelog:
  - initscript failure message is now printed correctly (#277981,
    Quentin Armitage (quentin armitage org uk) )


author: Adam Tkac <atkac redhat com> 32:9.5.0-12.a6
changelog:
  - bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are
    obsoleted by upstream bind-9.5-_res_errno.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6
changelog:
  - added bind-sdb again, contains SDB modules and DLZ modules
  - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-17.a7
changelog:
  - 9.5.0a7
  - dropped patches (upstream)
    - bind-9.5-update.patch
    - bind-9.5-pool_badfree.patch
    - bind-9.5-_res_errno.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7
changelog:
  - bind-9.5-random_ports.patch was removed because upstream doesn't
    like it. query-source{,v6} options are sufficient (#391931)
  - bind-chroot-admin called restorecon on /proc filesystem (#405281)


author: Adam Tkac <atkac redhat com> 32:9.5.0-23.b1
changelog:
  - fixed initscript wait loop (#426382)
  - removed dependency on policycoreutils and libselinux (#426515)


author: Adam Tkac <atkac redhat com> 32:9.5.0-24.b1
changelog:
  - removed bind-9.3.2-prctl_set_dumpable.patch (upstream)
  - allow parallel building of libdns library
  - CVE-2008-0122


author: Adam Tkac <atkac redhat com> 32:9.5.0-26.b2
changelog:
  - build with -D_GNU_SOURCE (#431734)
  - improved fix for #253537, posttrans script is now used
  - improved fix for #400461
  - 9.5.0b2
    - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch
      - only named, named-sdb and lwresd are PIE
    - bind-9.5-sdb.patch has been updated
    - bind-9.5-libidn.patch has been updated
    - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch
    - removed bind-9.5-gssapi-header.patch (upstream)
    - removed bind-9.5-CVE-2008-0122.patch (upstream)
  - removed bind-9.2.2-nsl.patch
  - improved sdb_tools Makefile.in


author: Adam Tkac <atkac redhat com> 32:9.5.0-27.b2
changelog:
  - removed conditional build with libefence (use -fmudflapth instead)
  - fixed building of DLZ stuff (#432497)
  - do not build Berkeley DB DLZ backend
  - temporary build with --disable-linux-caps and without threads (#433102)
  - update named.ca file to affect IPv6 changes in root zone


author: Adam Tkac <atkac redhat com> 32:9.5.0-30.b3
changelog:
  - 9.5.0b3 release
  - dropped patches (upstream)
    - bind-9.5-transfer-segv.patch
    - bind-9.5-mudflap.patch
    - bind-9.5.0-generate-xml.patch
    - bind-9.5-libcap.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-32.b3
changelog:
  - reverted "any" patch, upstream says not needed
  - log EDNS failure only when we really switch to plain EDNS (#275091)
  - detect configuration file better


author: Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1
changelog:
  - updated to 9.5.0rc1
  - merged patches
    - bind-9.5-libcap.patch
  - make binaries readable by others (#427826)


author: Adam Tkac <atkac redhat com> 32:9.5.0-36.1
changelog:
  - removed dns-keygen utility in favour of rndc-confgen -a (#449287)
  - some minor sample fixes (#449274)


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1
changelog:
  - 9.5.1b1 release (CVE-2008-1447)
  - dropped bind-9.5-recv-race.patch because upstream doesn't want it


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1
changelog:
  - static libraries are no longer supported
  - IP acls weren't merged correctly (#457175)
  - use fPIE on sparcv9/sparc64 (Dennis Gilmore)
  - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2
changelog:
  - 9.5.1b2 release
  - patches merged
    - bind95-rh454783.patch
    - bind-9.5-edns.patch
    - bind95-rh450995.patch
    - bind95-rh457175.patch


author: Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1
changelog:
  - 9.6.0b1 release
  - don't build ODBC and Berkeley DB DLZ drivers
  - end of bind-chroot-admin script, copy config files to chroot manually
  - /proc doesn't have to be mounted to chroot
  - temporary use libbind from 9.5 series, noone has been released for 9.6 yet


author: Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1
changelog:
  - 9.6.0rc1 release
  - patches merged
    - bind-9.2.0rc3-varrun.patch
    - bind-95-sdlz-include.patch
    - bind-96-libxml2.patch
  - fixed rare use-after-free problem in host utility (#452060)
  - enabled chase of DNSSEC signature chains in dig


author: Adam Tkac <atkac redhat com> 32:9.6.0-11.P1
changelog:
  - fall back to insecure mode when no supported DNSSEC algorithm is found
    instead of SERVFAIL
  - don't fall back to non-EDNS0 queries when DO bit is set


author: Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1
changelog:
  - 9.6.1b1 release
  - patches merged
    - bind-96-isc_header.patch
    - bind-95-rh469440.patch
    - bind-96-realloc.patch
    - bind9-fedora-0001.diff
  - use -version-number instead of -version-info libtool param


author: Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1
changelog:
  - update the patch for dynamic loading of database backends
  - fix dns_db_unregister()
  - useradd now takes "-N" instead of "-n" (atkac, #495726)
  - print nicer error msg when zone file is actually a directory (atkac, #490837)


author: Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1
changelog:
  - update the patch for dynamic loading of database backends
  - create %{_libdir}/bind directory
  - copy default named.conf to doc directory, shared with s-c-bind (atkac)


author: Adam Tkac <atkac redhat com> 32:9.6.1-1
changelog:
  - 9.6.1 release
  - simplify chroot maintenance. Important files and directories are mounted into
    chroot (see /etc/sysconfig/named for more info, #504596)
  - fix doc/named.conf.default perms


author: Adam Tkac <atkac redhat com> 32:9.6.1-2
changelog:
  - improved "chroot automount" patches (#504596)
  - host should fail if specified server doesn't respond (#507469)


author: Adam Tkac <atkac redhat com> 32:9.6.1-3
changelog:
  - fix broken symlinks in bind-libs (#509635)
  - fix typos in /etc/sysconfig/named (#509650)
  - add DEBUG option to /etc/sysconfig/named (#510283)


author: Adam Tkac <atkac redhat com> 32:9.6.1-9.P1
changelog:
  - next attempt to fix the postun trigger (#520385)
  - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patch


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2
changelog:
  - improve chroot related documentation (#507795)
  - add NetworkManager dispatcher script to reload named when network interface is
    activated/deactivated (#490275)
  - don't set/unset named_write_master_zones SELinux boolean every time in
    initscript, modify it only when it's actually needed


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1
changelog:
  - update to 9.7.0b1
  - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC
    keys


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2
changelog:
  - obsolete dnssec-conf
  - automatically update configuration from old dnssec-conf based
  - improve default configuration; enable DLV by default
  - remove obsolete triggerpostun from bind-libs subpackage


author: Adam Tkac <atkac redhat com> 32:9.7.0-2
changelog:
  - improve automatic DNSSEC reconfiguration trigger
  - initscript now returns 2 in case that action doesn't exist (#523435)
  - enable/disable chroot when bind-chroot is installed/uninstalled


author: Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1
changelog:
  - update to 9.7.1b1
  - make /var/named/dynamic as a default directory for managed DNSSEC keys
  - add patch to get "managed-keys-directory" option working
  - patches merged
    - bind97-managed-keyfile.patch
    - bind97-rh554316.patch


author: Adam Tkac <atkac redhat com> 32:9.7.1-3.P1
changelog:
  - remove outdated Copyright.caching-nameserver file
  - remove rfc1912.txt, it is already located in %doc/rfc directory
  - move COPYRIGHT to the bind-libs subpkg
  - add COPYRIGHT to the -pkcs11 subpkg


author: Adam Tkac <atkac redhat com> 32:9.7.2-3.P2
changelog:
  - new bind-libs-lite and bind-lite-devel subpkgs which contain
    public version of BIND 9 libraries
  - don't ship devel files for internal version of BIND 9 libraries


author: Adam Tkac <atkac redhat com> 32:9.7.2-5.P2
changelog:
  - move BIND9 internal libs back to %{_libdir}
  - add "-export" suffix to public libraries (-lite subpkg)


author: Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1
changelog:
  - fix "service named status" when used with named-sdb
  - don't check MD5, size and mtime of sysconfig/named


author: Adam Tkac <atkac redhat com> 32:9.7.3-1
changelog:
  - update to 9.7.3
  - fix dig +trace on dualstack systems (#674334)
  - fix linkage order when building on system with older BIND (#665971)
  - reduce number of gcc warnings


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1
changelog:
  - update to 9.8.1rc1
  - patches merged
    - bind97-rh674334.patch
    - bind97-cleanup.patch
    - bind98-includes.patch


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1
changelog:
  - fix rare race condition in request.c
  - print "the working directory is not writable" as debug message
  - re-add configtest target to initscript
  - initscript: sybsys name is always named, not named-sdb
  - nsupdate returned zero when target zone didn't exist (#700097)
  - nsupdate could have failed if server has multiple IPs and the first
    was unreachable (#714049)


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1
changelog:
  - fix DLZ related compilation issues
  - make /etc/named.{root,iscdlv}.key world-readable
  - add bind-libs versioned requires to bind pkg


author: Adam Tkac <atkac redhat com> 32:9.8.1-1
changelog:
  - update to 9.8.1
  - ship /etc/trusted-key.key (needed by dig)
  - use select instead of epoll in export libs (#735103)


author: Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2
changelog:
  - update to 9.9.0b2 (CVE-2011-4313)
  - patches merged
    - bind97-rh700097.patch
    - bind99-cinfo.patch


author: Adam Tkac <atkac redhat com> 32:9.9.0-1
changelog:
  - update to 9.9.0
  - load dynamic DBs later (and update dyndb patch)
  - fix memory leak in named during processing of rndc command
  - don't call `rndc-confgen -a` in "post" section
  - fix some packaging bugs in bind-chroot


author: Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2
changelog:
  - Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047)
  - Fixed path to libdb.so in config.dlz.in


author: Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2
changelog:
  - fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045)
  - changed %define macros to %global and fixed several rpmlint warnings


author: Adam Tkac <atkac redhat com> 32:9.9.2-1
changelog:
  - update to 9.9.2
  - bind97-rh714049.patch has been dropped
  - patches merged
    - bind98-rh816164.patch


author: Adam Tkac <atkac redhat com> 32:9.9.2-6.P1
changelog:
  - generate /etc/rndc.key during named service startup if doesn't exist
  - increase startup timeout in systemd units to 90sec (default)
  - fix IDN related statement in dig.1 manpage


author: Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1
changelog:
  - Corrected IP addresses in named.ca (#901741)
  - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)


author: Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1
changelog:
  - update to 9.9.3rc1
  - bind-96-libtool2.patch has been merged
  - fix bind tmpfiles.d for named.pid /run migration (#920713)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1
changelog:
  - Include recursion Warning in named.conf and named.conf.sample (#740894)
  - Include managed-keys-directory statement in named.conf.sample (#948026)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2
changelog:
  - update to 9.9.3rc2
  - part of bind97-exportlib.patch not needed any more
  - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source
  - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch
  - bind99-opts.patch merged


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-1
changelog:
  - update to 9.9.3
  - install dns/update.h header
  - update RRL patch to the latest version 9.9.3-rl.150.20


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2
changelog:
  - update to 9.9.3-P2 (fix for CVE-2013-4854)
  - update RRL patch to 9.9.3-P2-rl.13207.22
  - Fix script for setting up chroot so it unmounts everything successfully


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-5
changelog:
  - Install configuration for rwtab and fix chroot setup script (#1028189)
  - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-7
changelog:
  - Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384)
  - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-8
changelog:
  - Split chroot package for named and named-sdb
  - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15
changelog:
  - Use /dev/urandom when generating rndc.key file (#1107568)
  - Allow authentication using TSIG in allow-notify configuration statement (#1067424)
  - Fix race condition when destroying a resolver fetch object (#1072379)
  - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959)
  - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17
changelog:
  - Fix error in dyndb API that can cause named to freeze on shutdown (#1142150)
  - Fix error in triggerun scriptlet (#1143033)
  - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19
changelog:
  - Install config for tmpfiles under %{_tmpfilesdir} (#1180976)
  - Fixed systemctl path in logrotate configuration (#1164264)
  - remove information about system-config-bind from named.8 man page (#1152066)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20
changelog:
  - DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22
changelog:
  - Add version specific requires on bind for bind-pkcs11 (Related: #1097753)
  - Resolve issues found by static analysis (Related: #1097753)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23
changelog:
  - Don't copy /etc/localtime on -chroot package installation (#1186773)
  - Fix SPF resource records check to comply with RFC7208 (#1215164)
  - Don't use ISC's DLV by default (#1223336)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33
changelog:
  - Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185)
  - Fix error in internal test suite (#1259514)
  - Fix named-checkconf call in *-chroot.service files (#1278082)
  - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34
changelog:
  - Added support for CAA records (#1306610)
  - Use HTTPS URL instead of FTP for upstream sources (#1319280)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36
changelog:
  - Added automatic interface scan functionality (#1294506)
  - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)


author: Petr Menšík <pemensik@redhat.com> - 32:9.9.4-39
changelog:
  - Fix CVE-2016-9131 (ISC change 4508)
  - Fix CVE-2016-9147 (ISC change 4510)
  - Fix regression introduced by CVE-2016-8864 (ISC change 4530)
  - Fix CVE-2016-9444 (ISC change 4517)


author: Petr Menšík <pemensik@redhat.com> - 32:9.9.4-40
changelog:
  - Fix possible infinite loop in start_lookup (CVE-2016-2775)
  - Do not change lib permissions in chroot (#1392531)


author: Martin Nagy <mnagy@redhat.com> - 0.1.0-0.6.a1.20091210git
changelog:
  - update to the latest git snapshot
  - change upstream URL, project moved to fedorahosted
  - change license to GPL version 2 or later
  - add epoch to versioned requires
  - add krb5-devel to the list of build requires


author: Adam Tkac <atkac redhat com> - 0.2.0-1
changelog:
  - update to 0.2.0
  - patches merged
    - 0001-Bugfix-Improve-LDAP-schema-to-be-loadable-by-OpenLDA.patch
    - 0004-Bugfix-Fix-loading-of-child-zones-from-LDAP.patch


author: Petr Spacek <pspacek redhat com> - 5.2-1
changelog:
  - update to 5.2
  - adds DNSSEC support and supports root zone in LDAP
  - idnsZoneActive attribute is not supported anymore


author: Petr Spacek <pspacek redhat com> - 6.0-2
changelog:
  - fix bug 1161635: send DNS NOTIFY message after any modification to the zone
  - fix bug 1168131: crash caused by interaction between forward and master zones


author: Petr Spacek <pspacek redhat com> - 7.99-1
changelog:
  - preliminary update to latests snapshot of upstream Git: 158e95e (#1204110)
  - resolves: #829395  DNSSEC support
  - resolves: #1139776 LDAP MODRDN (rename) is not supported
  - resolves: #1139778 Records deleted when connection to LDAP is down are not refreshed properly
  - resolves: #1184065 PTR record synchronization for A/AAAA record tuple can fail mysteriously
  - resolves: #1207539 Add support for TLSA resource records (DANE)
  - resolves: #1207540 Plugin will crash if idnsForwardZone object is in the wrong place
  - resolves: #1207541 Generic support for unknown DNS RR types (RFC 3597)


author: Petr Spacek <pspacek redhat com> - 8.0-1
changelog:
  - update to latest upstream version
  - resolves: #1204110 Rebase bind-dyndb-ldap to latest upstream version


author: Petr Spacek <pspacek@redhat.com> - 9.0-1
changelog:
  - update to latest upstream version
  - related: #1292145 Rebase bind-dyndb-ldap to latest upstream version


author: Petr Spacek <pspacek@redhat.com> - 10.0-1
changelog:
  - update to latest upstream version
  - resolves: #1292145 Rebase bind-dyndb-ldap to latest upstream version


author: Tomas Krizek <tkrizek@redhat.com> - 11.1-1
changelog:
  - update to letest upstream version
  - resolves: #1393889 Rebase to bind-dyndb-ldap 11+
  - resolves: #1165796 bind-dyndb-ldap crashes if server is shutting down and connection to LDAP is down
  - resolves: #1413805 bind-dyndb-ldap default schema is shipped with syntax error


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - upgraded again to 2.8.1.0.28 (at least on alpha now egcs will compile)
  - added info packages handling


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated to 2.8.1.0.29 (HJ warned me that this thing is a moving target...
    :-)
  - "fixed" the damn make install command so that all tools get installed


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added ARM patch from philb
  - version 2.9.1.0.19a
  - added a patch to allow arm* arch to be identified as an ARM


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - version  2.9.1.0.23
  - patch to make texinfo documentation compile
  - auto rebuild in the new build environment (release 2)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - back out very *stupid* sparc patch done by HJLu. People, keep out of
    things you don't understand.
  - add alpha relax patch from rth


author: Jim Kingdon
changelog:
  - No source/spec changes, just rebuilding with egcs-1.1.2-18 because
    the older egcs was miscompling gprof.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - 2.11.90.0.8
    - some SHF_MERGE suport fixes
  - don't build with tooldir /usrusr instead of /usr (#40937)
  - reserve few .dynamic entries for prelinking


author: Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-6
changelog:
  - support for -z combreloc
  - remove .dynamic patch, -z combreloc patch does this better
  - set STT_FUNC default symbol sizes in .endp directive on IA-64


author: Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-8
changelog:
  - on IA-64, put crtend{,S}.o's .IA_64.unwind section last in
    .IA_64.unwind output section (for compatibility with 7.1 eh)


author: Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-11
changelog:
  - add iplt support for IA-64 (Richard Henderson)
  - switch to new section flags for SHF_MERGE and SHF_STRINGS, put
    in compatibility code
  - "s" section flag for small data sections on IA-64 and Alpha
    (Richard Henderson)
  - fix sparc64 .plt[32768+] handling
  - don't emit .rela.stab on sparc


author: Jakub Jelinek <jakub@redhat.com> 2.11.92.0.5-1
changelog:
  - update to 2.11.92.0.5
    - binutils localization (#45148)
    - fix typo in REPORT_BUGS_TO (#54325)
  - support files bigger than 2GB in strings (#54406)


author: Jakub Jelinek <jakub@redhat.com> 2.11.92.0.12-1
changelog:
  - update to 2.11.92.0.12
    - optimize .dynstr and .shstrtab sections (#55524)
    - fix ld.1 glitch (#55459)
  - turn relocs against SHF_MERGE local symbols with zero addend
    into STT_SECTION + addend
  - remove man pages for programs not included (nlmconv, windres, dlltool;
    - add BuildRequires for texinfo


author: Jakub Jelinek <jakub@redhat.com> 2.11.92.0.12-3
changelog:
  - H.J.'s patch to avoid crash if input files are not ELF
  - don't crash if a SHF_MERGE for some reason could not be merged
  - fix objcopy/strip to preserve SHF_MERGE sh_entsize
  - optimize .eh_frame sections, add PT_GNU_EH_FRAME support
  - support anonymous version tags in version script


author: Jakub Jelinek <jakub@redhat.com> 2.11.92.0.12-7
changelog:
  - as ld is currently not able to shrink input sections to zero size
    during discard_info, build a fake minimal CIE in that case
  - update elf-strtab patch to what was commited


author: Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-2
changelog:
  - trade one saved runtime page for data segment (=almost always not shared)
    for up to one page of disk space where possible


author: Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-4
changelog:
  - add DW_EH_PE_absptr -> DW_EH_PE_pcrel optimization for shared libs,
    if DW_EH_PE_absptr cannot be converted that way, don't build the
    .eh_frame_hdr search table


author: Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-12
changelog:
  - fix .hidden handling on SPARC (Richard Henderson)
  - don't crash when linking -shared non-pic code with SHF_MERGE
  - fix .eh_frame_hdr for DW_EH_PE_aligned
  - correctly adjust DW_EH_PE_pcrel encoded personalities in CIEs


author: Jakub Jelinek <jakub@redhat.com> 2.12.90.0.15-1
changelog:
  - update to 2.12.90.0.15
  - TLS .tbss fix
  - don't use rpm %configure macro, it is broken too often (#69366)


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.2-1
changelog:
  - update to 2.13.90.0.2
    - fix ld TLS assertion failure (#70084)
    - fix readelf --debug-dump= handling to match man page and --help
      (#68997)
  - fix _GLOBAL_OFFSET_TABLE gas handling (#70241)


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.2-3
changelog:
  - allow addends for IA-32 TLS @tpoff, @ntpoff and @dtpoff
  - clear memory at *r_offset of dynamic relocs on PPC
  - avoid ld crash if accessing non-local symbols through LE relocs
  - new IA-32 TLS relocs, bugfixes and testcases
  - use brl insn on IA-64 (Richard Henderson)
  - fix R_IA64_PCREL21{M,F} handling (Richard Henderson)
  - build in separate builddir, so that gasp tests don't fail
  - include localization


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.4-1
changelog:
  - update to 2.13.90.0.4
  - x86-64 TLS support
  - some IA-32 TLS fixes
  - some backported patches from trunk
  - include opcodes, ld, gas and bfd l10n too


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.4-2
changelog:
  - fix orphan .rel and .rela section placement with -z combreloc (Alan Modra)
  - skip incompatible linker scripts when searching for libraries


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.10-1
changelog:
  - update to 2.13.90.0.10
  - add a bi-arch patch for sparc/s390/x86_64
  - add --enable-64-bit-bfd on sparc, s390 and ppc


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.10-3
changelog:
  - fix names and content of alpha non-alloced .rela.* sections (#76583)
  - delete unpackaged files from the buildroot


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.10-4
changelog:
  - pad .rodata.cstNN sections at the end if they aren't sized to multiple
    of sh_entsize
  - temporary patch to make .eh_frame and .gcc_except_table sections
    readonly if possible (should be removed when AUTO_PLACE is implemented)
  - fix .PPC.EMB.apuinfo section flags


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.16-8
changelog:
  - alpha TLS fixes
  - use .debug_line directory table to make the section tiny bit smaller
  - libtool fix from Jens Petersen


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-2
changelog:
  - fix SEARCH_DIR on x86_64/s390x
  - fix Alpha --relax
  - create DT_RELA{,SZ,ENT} on s390 even if there is just .rela.plt
    and no .rela.dyn section
  - support IA-32 on IA-64 (#83752)
  - .eh_frame_hdr fix (Andreas Schwab)


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-3
changelog:
  - handle .symver x, x@FOO in ld such that relocs against x become
    dynamic relocations against x@FOO (#83325)
  - two PPC64 TLS patches (Alan Modra)


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-5
changelog:
  - fix the previous .symver change
  - remove libbfd.so and libopcodes.so symlinks, so that other packages
    link statically, not dynamically against libbfd and libopcodes
    whose ABI is everything but stable


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-6
changelog:
  - don't clear elf_link_hash_flags in the .symver patch
  - only use TC_FORCE_RELOCATION in s390's TC_FORCE_RELOCATION_SUB_SAME
    (Alan Modra)


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.20-4
changelog:
  - fix ppc32 plt reference counting
  - don't include %{_prefix}/%{_lib}/debug in the non-debuginfo package
    (#87729)


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-1
changelog:
  - update to 2.14.90.0.4-1
  - gas CFI updates (Richard Henderson)
  - dynamic executables (Ulrich Drepper)


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-2
changelog:
  - rename ld --dynamic option to --pic-executable or --pie
  - fix ld --help output
  - document --pie/--pic-executable in ld.info and ld.1


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-7
changelog:
  - some CFI updates/fixes
  - don't create dynamic relocations against symbols defined in PIE
    exported from its .dynsym


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-8
changelog:
  - remove some unnecessary provides in ppc64 linker script
    which were causing e.g. empty .ctors/.dtors section creation


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-9
changelog:
  - ensure R_PPC64_{RELATIVE,ADDR64} have *r_offset == r_addend
    and the other relocs have *r_offset == 0


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-13
changelog:
  - update CFI stuff to 2003-06-18
  - make sure .eh_frame is aligned to 8 bytes on 64-bit arches,
    remove padding within one .eh_frame section


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-14
changelog:
  - added support for Intel Prescott instructions
  - fix hint@pause for ia64
  - add workaround for LTP sillyness (#97934)


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-16
changelog:
  - fix readelf -d on IA-64
  - build libiberty.a with -fPIC, so that it can be lined into shared
    libraries


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-17
changelog:
  - fix ia64 -pie support
  - require no undefined non-weak symbols in PIEs like required for normal
    binaries


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-19
changelog:
  - fix -pie support on amd64, s390, s390x and ppc64
  - issue relocation overflow errors for s390/s390x -fpic code when
    accessing .got slots above 4096 bytes from .got start


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-22
changelog:
  - fix elfNN_ia64_dynamic_symbol_p (Richard Henderson, #86661)
  - don't access memory beyond what was allocated in readelf
    (Richard Henderson)


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.5-4
changelog:
  - fix ppc64 elfvsb linker tests
  - some more 64-bit cleanliness fixes, give ppc64 fdesc symbols
    type and size (Alan Modra)


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.6-1
changelog:
  - update to 2.14.90.0.6
  - speed up string merging (Lars Knoll, Michael Matz, Alan Modra)
  - speed up IA-64 local symbol handling during linking


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.6-4
changelog:
  - fix assembly parsing of foo=(.-bar)/4 (Alan Modra)
  - fix IA-64 assembly parsing of (p7) hint @pause


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-2
changelog:
  - fix testcases on AMD64
  - fix .got's sh_entsize on IA32/AMD64
  - set COMMONPAGESIZE on s390/s390x
  - set COMMONPAGESIZE on ppc32 (Alan Modra)


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-8
changelog:
  - with -z now without --enable-new-dtags create DT_BIND_NOW
    dynamic entry in addition to DT_FLAGS_1 with DF_1_NOW bit set


author: Jakub Jelinek <jakub@redhat.com> 2.15.90.0.1.1-2
changelog:
  - update to 20040326 CVS
    - fix ppc64 weak .opd symbol handling (Alan Modra, #119086)
  - fix .tbss handling bug introduced


author: Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-4
changelog:
  - -z relro ppc/ppc64/ia64 fixes
  - change x86-64 .plt symbol st_size handling to match ia32
  - prettify objdump -d output


author: Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-4
changelog:
  - kill ppc64 dot symbols (Alan Modra)
  - objdump -d support for objects without dot symbols
  - support for overlapping ppc64 .opd entries


author: Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-5
changelog:
  - various ppc64 make check fixes when using non-dot-syms gcc (Alan Modra)
  - fix --gc-sections
  - on ia64 create empty .gnu.linkonce.ia64unw*.* sections for
    .gnu.linkonce.t.* function doesn't need unwind info


author: Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-7
changelog:
  - resolve all undefined ppc64 .* syms to the function bodies through
    .opd, not just those used in brach instructions (Alan Modra)


author: Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-8
changelog:
  - fix linker segfaults on input objects with SHF_LINK_ORDER with
    incorrect sh_link (H.J.Lu, Nick Clifton, #130198, BZ #290)


author: Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-9
changelog:
  - avoid almost 1MB (sparse) gaps in the middle of -z relro
    libraries on x86-64 (Andreas Schwab)
  - fix -z relro to make sure end of PT_GNU_RELRO segment is always
    COMMONPAGESIZE aligned


author: Jakub Jelinek <jakub@redhat.com> 2.15.92.0.2-3
changelog:
  - revert Sep 09 change to make ppc L second argument e.g. for tlbie
    non-optional
  - fix stripping of prelinked binaries and libraries (#133734)
  - allow strings(1) on 32-bit arches to be used again with > 2GB
    files (#133555)


author: Jakub Jelinek <jakub@redhat.com> 2.15.92.0.2-10
changelog:
  - avoid unnecessary gap with -z relro showing on i686 libc.so
  - ppc64 --emit-relocs fix (Alan Modra)
  - don't crash if STT_SECTION symbol has incorrect st_shndx (e.g. SHN_ABS,
    as created by nasm; #142181)
  - don't try to make absptr LSDAs relative if they don't have relocations
    against them (Alan Modra, #141162)


author: Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2-1
changelog:
  - update to 2.15.94.0.2
  - fix .note.GNU-stack/PT_GNU_STACK computation in linker on ppc64 (#147296)
  - fix stripping of binaries/libraries that have empty sections right before
    .dynamic section (with the same starting address; #144038)
  - handle AS_NEEDED (...) in linker script INPUT/GROUP


author: Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2-3
changelog:
  - fix buffer overflows in readelf (#149506)
  - move c++filt to binutils from gcc-c++, conflict with gcc-c++ < 4.0 (#86333)


author: Jakub Jelinek <jakub@redhat.com> 2.16.90.0.3-1
changelog:
  - update to 2.16.90.0.3
  - update to 20050615 CVS
    - ppc32 secure PLT support (Alan Modra)
  - further bfd/readelf robustification


author: Jakub Jelinek <jakub@redhat.com> 2.16.91.0.1-3
changelog:
  - fix buffer overflow in readelf ia64 unwind printing code
  - use vsnprintf rather than vsprintf in gas diagnostics (Tavis Ormandy)
  - fix ld-cdtest when CFLAGS contains -fexceptions


author: Jakub Jelinek <jakub@redhat.com> 2.16.91.0.2-2
changelog:
  - don't complain about relocs to discarded sections in ppc32
    .got2 sections (Alan Modra, PR target/17828)


author: Jakub Jelinek <jakub@redhat.com> 2.16.91.0.5-1
changelog:
  - update to 2.16.91.0.5
  - don't error about .toc1 references to discarded sectiosn on ppc64
    (#175944)


author: Jakub Jelinek <jakub@redhat.com> 2.16.91.0.6-1
changelog:
  - update to 2.16.91.0.6
    - fix ppc64 --gc-sections
    - disassembler fixes for x86_64 cr/debug regs
    - fix linker search order for DT_NEEDED libs


author: Jakub Jelinek <jakub@redhat.com> 2.16.91.0.6-2
changelog:
  - add MNI support on i?86/x86_64 (#183080)
  - support S signal frame augmentation flag in .eh_frame,
    add .cfi_signal_frame support (#175951, PR other/26208, BZ#300)


author: Jakub Jelinek <jakub@redhat.com> 2.16.91.0.6-6
changelog:
  - fix ld error message formatting, so that collect2 parser can
    parse it again for g++ -frepo (#187142)


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.2-1
changelog:
  - update to 2.17.50.0.2
  - update from CVS to 20060601
  - speed up the ELF linker by caching the result of kept section check
    (H.J. Lu)


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.2-3
changelog:
  - fix two places in ld that misbehaved with MALLOC_PERTURB_=N
  - fix .tls_common handling in relocatable linking


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.2-8
changelog:
  - add support for new AMDFAM10 instructions (#198281, IT#97662)
  - add -march=/-mtune= gas support on x86/x86-64
  - x86/x86-64 nop insn improvements
  - fix DT_GNU_HASH shift count value computation


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.6-2
changelog:
  - update to 2.17.50.0.6
    - fix for section relative linker script defined symbols in
      empty sections (#207598, BZ#3267)
    - fix handling of DW_CFA_set_loc in .eh_frame optimizations
    - fix R_PPC_{PLT,GOT{,_TLSGD,_TLSLD,_TPREL,_DTPREL}}16_HA relocation
      handling with weak undefined symbols (Alan Modra, #211094)


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.7-1
changelog:
  - update to 2.17.50.0.7
    - .cfi_personality and .cfi_lsda directives, per subsection .cfi_*
      directives, better .eh_frame CIE merging


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.12-1
changelog:
  - update to 2.17.50.0.12
  - revert the misdesigned LD_SYMBOLIC{,_FUNCTIONS} env var support,
    only support -Bsymbolic/-Bsymbolic-functions/--dynamic-list*


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.12-3
changelog:
  - don't require matching ELF_OSABI for target vecs with ELFOSABI_NONE,
    only prefer specific osabi target vecs over the generic ones
    (H.J.Lu, #230964, BZ#3826)
  - build libbfd.so and libopcodes.so with -Bsymbolic-functions


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.17-4
changelog:
  - don't kill the %{_gnu} part of target name on arm
    (Lennert Buytenhek, #243516)
  - create just one PT_NOTE segment header for all consecutive SHT_NOTE
    sections


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.18-1
changelog:
  - update to 2.17.50.0.18
    - GPLv3+
    - preserve .note.gnu.build-id in objcopy --only-keep-debug (#251935)
    - fix sparc64/alpha broken by --build-id patch (#252936)
  - update License tag
  - fix ld crash with --build-id and non-ELF output format (Alan Modra, BZ#4923)


author: Jakub Jelinek <jakub@redhat.com> 2.18.50.0.4-2
changelog:
  - revert aranges optimization (Alan Modra, BZ#5303, BZ#5755)
  - fix ld-shared testcase for GCC 4.3 (H.J. Lu)


author: Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.6-4
changelog:
  - include the `dist' tag in the Release number
  - libbfd.a symbols visibility is now hidden (for #447426, suggested by Jakub)


author: Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.8-1
changelog:
  - Update to 2.18.50.0.8.
    - Drop the .clmul -> .pclmul renaming backport.
  - Add %{binutils_target} macro to support building cross-binutils.
    (David Woodhouse)
  - Support `--without testsuite' to suppress the testsuite run.
  - Support `--with debug' to build without optimizations.
  - Refresh the patchset with fuzz 0 (for new rpmbuild).
  - Enable the spu target on ppc/ppc64 (BZ 455242).


author: Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.8-2
changelog:
  - Fix parsing elf64-i386 files for kdump PAE vmcore dumps (BZ 457189).
  - Turn on 64-bit BFD support for i386, globally enable AC_SYS_LARGEFILE.
  - `--with debug' builds now with --disable-shared.
  - Removed a forgotten unused ld/eelf32_spu.c workaround from 2.18.50.0.8-1.


author: Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-1
changelog:
  - Update to 2.18.50.0.9.
    - Drop the ppc-only spu target pre-build stage (BZ 455242).
    - Drop parsing elf64-i386 files for kdump PAE vmcore dumps (BZ 457189).
  - New .spec BuildRequires zlib-devel (/-static) for compressed sections.
  - Update .spec Buildroot to be more unique.


author: Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-2
changelog:
  - Package review, analysed by Jon Ciesla and Patrice Dumas (BZ 225615).
   - build back in the sourcedir without problems as gasp is no longer included.
   - Fix the install-info requirement.
   - Drop the needless gzipping of the info files.
   - Provide Obsoletes versions.
   - Use the %configure macro.


author: Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-3
changelog:
  - Provide libbfd.so and libopcodes.so for automatic dependencies (BZ 463101).
  - Fix .eh_frame_hdr build on C++ files with discarded common groups (BZ 458950).
  - Provide --build and --host to fix `rpmbuild --target' biarch builds.
  - Include %{binutils_target}- filename prefix for binaries for cross builds.
  - Fix multilib conflict on %{_prefix}/include/bfd.h's BFD_HOST_64BIT_LONG_LONG.


author: Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-6
changelog:
  - binutils-devel now requires zlib-devel (BZ 463101 comment 5).
  - Fix complains on .gnu.linkonce.r relocations to their discarded
    .gnu.linkonce.t counterparts.


author: Jan Kratochvil <jan.kratochvil@redhat.com> 2.18.50.0.9-7
changelog:
  - Fix %{_prefix}/include/bfd.h on 32-bit hosts due the 64-bit BFD target
    support from 2.18.50.0.8-2 (BZ 468495).


author: Nick Clifton <nickc@redhat.com> 2.19.50.0.1
changelog:
  - Rebase sources on 2.19.50.0.1 tarball.  Update all patches, trimming
    those that are no longer needed.


author: Nick Clifton <nickc@redhat.com> 2.19.50.0.1-8
changelog:
  - Add build-id patch to ensure that section contents are incorporated
    into a build id.  (BZ 472152)


author: Nick Clifton <nickc@redhat.com> 2.19.51.0.11-28
changelog:
  - Rebase sources on 2.19.51.0.13 tarball.  Remove redundant orphan section placement patch. (BZ 512937)


author: Nick Clifton <nickc@redhat.com> 2.20.51.0.2-1
changelog:
  - Rebase on 2.20 tarball.
  - Remove redundant moxie patch.
  - Remove redundant unique is global patch.
  - Remove redundant cxxfilt java doc patch.


author: Jan Kratochvil <jan.kratochvil@redhat.com> 2.20.51.0.2-2
changelog:
  - Fix rpm --excludedocs (BZ 515922).
  - Fix spurious scriplet errors by `exit 0'. (BZ 517979, Nick Clifton)


author: Nick CLifton <nickc@redhat.com> 2.20.51.0.2-3
changelog:
  - Rename --add-needed to --copy-dt-needed-entries and improve error message about unresolved symbols in DT_NEEDED DSOs.


author: Jakub Jelinek <jakub@redhat.com> 2.20.51.0.2-4
changelog:
  - Fix ld -s with IRELATIVE relocations.  (BZ 533321, PR ld/10911)
  - Add AMD Orochi LWP support, fix FMA4 support.


author: Nick Clifton <nickc@redhat.com> - 2.20.51.0.7-1
changelog:
  - Rebase on 2.20.51.0.7 tarball.
  - Delete redundant patches:
    binutils-2.20.51.0.2-add-needed.patch,
    binutils-2.20.51.0.2-do-not-set-ifunc.patch,
    binutils-2.20.51.0.2-enable-gold.patch,
    binutils-2.20.51.0.2-gas-expr.patch,
    binutils-2.20.51.0.2-ifunc-ld-s.patch,
    binutils-2.20.51.0.2-lwp.patch,
    binutils-2.20.51.0.2-ppc-hidden-plt-relocs.patch,
    binutils-2.20.51.0.2-x86-hash-table.patch,
  - Do not allow unique symbols to be bound locally.  (PR ld/11434)
  - Add support for DWARF4 debug information.


author: Nick Clifton <nickc@redhat.com> - 2.20.51.0.7-4
changelog:
  - Allow GOLD linker to parse "-l<name>" directives inside INPUT statements in linker scripts. (BZ 600553)


author: Nick Clifton <nickc@redhat.com> - 2.20.51.0.7-5
changelog:
  - Rename the binutils-static package to binutils-devel in line with the Fedora packaging guidelines.


author: Nick Clifton <nickc@redhat.com> - 2.21.51.0.5-1
changelog:
  - Rebase on 2.21.51.0.5 tarball.
  - Delete redundant patches.
  - Fix gold+ld configure command line option.


author: Nick Clifton <nickc@redhat.com> - 2.22.52.0.1-1
changelog:
  - Rebase on 2.22.52 release.
  - Remove build-id.patch and gold-casts.patch as they are included in the 2.22.52 sources.


author: Nick Clifton <nickc@redhat.com> - 2.22.52.0.2-1
changelog:
  - Rebase on 2.22.52.0.2 release.  (#816514)
  - Retire binutils-2.22.52.0.1-weakdef.patch, binutils-2.22.52.0.1-ld-13621.patch, binutils-rh797752.patch, binutils-2.22.52.0.1-x86_64-hidden-ifunc.patch, binutils-2.22.52.0.1-tsx.patch and binutils-2.22.52.0.1-hidden-ifunc.patch.
  - Update binutils-2.22.52.0.1-reloc-on-by-default.patch.


author: Nick Clifton <nickc@redhat.com> - 2.23.51.0.1-1
changelog:
  - Rebase on 2.23.51.0.1 release.  (#846433)
  - Retire binutils-2.22.52.0.4-dwz.patch, binutils-2.22.52.0.4-ar-4Gb.patch, binutils-2.22.52.0.4-arm-plt-refcount.patch, binutils-2.22.52.0.4-s390-64bit-archive.patch.


author: Nick Clifton <nickc@redhat.com> - 2.23.51.0.2-1
changelog:
  - Rebase on 2.23.51.0.2 release.  (#856119)
  - Retire binutils-2.23.51.0.1-gold-keep.patch and binutils-rh805974.patch.


author: Jeff Law <law@redhat.com> - 2.23.52.0.1-10
changelog:
  - Add libstdc++-static as a build requirement when running
    the testsuite.
  - Add remaining power8 support (#731883)


author: Jeff Law <law@redhat.com> - 2.23.52.0.1-11
changelog:
  - Add support for TDB notes section (#805115)
  - Fix length operands for cdzt, cxzt czdt and czxt (#805115)


author: Jakub Jelinek <jakub@redhat.com> - 2.23.52.0.1-12
changelog:
  - Add Intel AVX3, MPX and SHA support.
  - Add support for x86-64 -mcmodel=large -fpic TLS transitions.  (#994244)


author: Jeff Law <law@redhat.com> - 2.23.52.0.1-14
changelog:
  - Fix two may-be-uninitialized issues exposed by changes in
    compiler flags used to build binutils (#1048848).


author: Kyle McMartin <kyle@redhat.com> - 2.23.52.0.1-16.4
changelog:
  - AArch64: Backport two fixes from upstream and add a draft patch to
    set DF_STATIC_TLS when emitting IE relocs. Also increase
    ELF_COMMONPAGESIZE to 64K to match the kernel.


author: Patsy Franklin <pfrankli@redhat.com> - 2.23.52.0.1-21.9
changelog:
  - This fixes a problem seen on powerpc64le ELFv2 when creating a
    function symbol alias with ld --defsym.  st_other needs to be copied
    from the source symbol to the alias in order to set up the local entry
    offset for the alias.


author: Patsy Franklin <pfrankli@redhat.com> - 2.23.52.0.1-22.9
changelog:
  - Reduce the size of aarch64 .debug_line; fix cfi encoding of fp registers;
    add register names to dumping of aarch64 cfi data. Patch provided by rth.
    Resolves: #1132641


author: Jeff Law <law@redhat.com> - 2.23.52.0.1-25.9
changelog:
  Revert this change (handled elsewhere): 
  - Additional patch from Alan to fix problems with ld --defsym.
    (#1132732)


author: Jeff Law <law@redhat.com> - 2.23.52.0.1-33
changelog:
  - Do not replace R_390_TLS_LE{32,64} with R_390_TLS_TPOFF for PIE
    (#872148)
  - Enable relro by default for arm and aarch64 (#1203449)
  - Backport 3 RELRO improvements for ppc64/ppc64le from upstream
    (#1175624)


author: Jeff Law <law@redhat.com> - 2.23.52.0.1-37
changelog:
  - Andreas's backport of z13 and dependent fixes for s390,
    including tesetcase fix from Apr 27, 2015.'  (#1182153)


author: Jeff Law <law@redhat.com> - 2.23.52.0.1-40
changelog:
  - Minor testsuite adjustments for PPC changes in -38/-39.
    (#1183838)
    Fix md_assemble for PPC to handle arithmetic involving the TOC
    better.  (#1183838)


author: Martin Sebor <msebor@redhat.com> - 2.23.52.0.1-41
changelog:
  - Fixup bfd elf_link_add_object_symbols for ppc64 to prevent subsequent
    uninitialized accesses elsewhere. (#1172766)


author: Jeff Law <law@redhat.com> - 2.23.52.0.1-42
changelog:
  - Clamp maxpagesize at 1 (rather than 0) to avoid segfaults
    in the linker when passed a bogus max-page-size argument.
    (#1203449)


author: Jeff Law <law@redhat.com> - 2.23.52.0.1-44
changelog:
  - Avoid reading beyond function boundary when disassembling.
    (#1060282)

  - For binary ouput, we don't have an ELF bfd output so can't access
    elf_elfheader.  (#1226864)


author: Nick Clifton <nickc@redhat.com> - 2.23.52.0.1-45
changelog:
  - Change strings program to default to -a.  Fix problems parsing
    files containg corrupt ELF group sections.  (#1157276)


author: Nick Clifton <nickc@redhat.com> 2.25.1-3
changelog:
  - Experimental rebase on FSF 2.25.1 sources.
    (#1341730)
  - Retire: patch11, patch12, patch13, patch14, patch15,
    patch16, patch17, patch18, patch19, patch20, patch21,
    patch22, patch23, patch24, patch25, patch26, patch27,
    patch28, patch29, patch30, patch32, patch100, patch101,
    patch102, patch110, patch111, patch112, patch113, patch114,
    patch115, patch116, patch117, patch118, patch119, patch120,
    patch121, patch201, patch202, patch203, patch204, patch205,
    patch206, patch207, patch208, patch209, patch210, patch211,
    patch212, patch300, patch301, patch302, patch303, patch304,
    patch305, patch306, patch307, patch308, patch309, patch400,
    patch401, patch402, patch403, patch404, patch405, patch406,
    patch407, patch501
  - Add patch to suppress checking of PPC64 TLBIE instruction.  [TEMPORARY]
  - Add fix for FSF PR 18879
  - Add fix for s390x linker testsuite failure.
    (#1276755)
    (#1260158)
    (#1300734)
    (#1288068)


author: Nick Clifton <nickc@redhat.com> 2.25.1-4
changelog:
  - Improve warning message for overflowing AArch64 relocs.
  - Import patch to fix PR18668.
  - Ignore warning messages about duplicate FDE entries
    (#1300543)
    (#1300603)
    (#1285614)
    (#1243559)


author: Nick Clifton <nickc@redhat.com> 2.25.1-13
changelog:
  - Add support for Zeppelin x86 extensions.
  - Add support for the AMD MWAITX extension.
  - Add support for the PowerPC Power9 architecture.
  - Remove spurious binutils document references.
    (#1335313)
    (#1335684)
    (#1333305)


author: Nick Clifton <nickc@redhat.com> 2.25.1-14-base
changelog:
  - Extend Release string to include ".base" thus ensuring that it
    will not collide with a DTS release which might otherwise have
    the same name.
    (#1337617)


author: Nick Clifton <nickc@redhat.com> 2.25.1-17-base
changelog:
  - Close memory leak in "ar" archiver program.
    (#1162655)
  - Retire the copy-osabi patch.
    (#1252066)


author: Nick Clifton <nickc@redhat.com> 2.25.1-25-base
changelog:
  - Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
    (#1326710)


author: Nick Clifton <nickc@redhat.com> 2.25.1-32.base
changelog:
  - Revert part of the objdump speed up patch which was preventing proper function name lookup.
    (#1465318)


author: Nick Clifton <nickc@redhat.com> 2.25.1-32.base.1
changelog:
  - Revert part of the objdump speed up patch which was preventing proper function name lookup.
    (#1479773)


author: - Bastien Nocera <bnocera@redhat.com> - 4.5-1
changelog:
  - Update to 4.5
  - Fix initscript to actually start bluetoothd by hand
  - Add chkconfig information to the initscript


author: - David Woodhouse <David.Woodhouse@intel.com> - 4.5-2
changelog:
  - Change main utils package name to 'bluez'; likewise its subpackages
  - Remove references to obsolete initscripts (hidd,pand,dund)


author: Karsten Hopp <karsten@redhat.com> 4.29-2
changelog:
  - bluez builds fine on s390(x) and the packages are required to build
    other packages, drop ExcludeArch


author: Bastien Nocera <bnocera@redhat.com> 4.47-2
changelog:
  - Remove hid2hci calls, they're in udev now
  - Work-around udev bug, bluetoothd wasn't getting enabled
    on coldplug


author: Bastien Nocera <bnocera@redhat.com> 4.50-2
changelog:
  - Remove obsoleted patches
  - Add another CUPS backend patch
  - Update cable pairing patch for new build system


author: Bastien Nocera <bnocera@redhat.com> 4.57-2
changelog:
  - Move the rfcomm.conf to the compat package, otherwise
    the comments at the top of it are confusing


author: Bastien Nocera <bnocera@redhat.com> 4.61-1
changelog:
  - Update to 4.61
  - Remove Wacom tablet enabler, now in the kernel
  - Fix linking with new DSO rules (#564799)


author: Dan Horák <dan[at]danny.cz> 4.66-3
changelog:
  - don't require the pin helper on s390(x) now, we can disable the whole
    bluetooth stack in the future


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> 4.69-3
changelog:
  - Comment out Requires: dbus-bluez-pin-helper for bootstrapping. Otherwise
    it drags in the old blueman, built against python-2.6


author: Lennart Poettering <lpoetter@redhat.com> - 4.94-2
changelog:
  - Enable bluetoothd by default
  - Follow-up on https://bugzilla.redhat.com/show_bug.cgi?id=694519 also fixing upgrades


author: Lennart Poettering <lpoetter@redhat.com> - 4.94-4
changelog:
  - Enable bluetoothd on all upgrades from 4.87-6 and older, in order to fix up broken F15 installations


author: Hans de Goede <hdegoede@redhat.com> 4.96-2
changelog:
  - hid2hci was recently removed from udev and added to bluez in 4.93,
    udev in Fedora-16 no longer has hid2hci -> enable it in our bluez builds.
    This fixes bluetooth not working on machines where the bluetooth hci
    initially shows up as a hid device, such as with many Dell laptops.


author: Hans de Goede <hdegoede@redhat.com> 4.96-3
changelog:
  - Put hid2hci into its own (optional) subpackage, so that people who
    just want to use their HID proxying HCI with the keyboard and mouse
    it came with, will have things working out of the box.
  - Put udev rules in /lib/udev, where package installed udev rules belong


author: Bastien Nocera <bnocera@redhat.com> 4.101-4
changelog:
  - Clean up requires and build requires
  - Use CUPS macro (#772236)
  - Enable audio socket so a2dp works in PulseAudio again (#874015)
  - Fix hid2hci not working with recent kernels (#877998)


author: Don Zickus <dzickus@redhat.com> 5.41-1
changelog:
  - Update to 5.41
  - obexd fixes to prevent crashes
  - add /etc/bluetooth/main.conf config file
  Resolves: #1313363, #1336476, #1338895


author: David Arcari <darcari@redhat.com> 5.44-1
changelog:
  - Update to 5.44
  - Ship btattach tool
  - Configure systemctl settings for bluez-obex correctly
  - Add Provides: bluez-obexd
  Resolves: #1434581, #1401501


author: Steven Dake <sdake@redhat.com> - 0.91-2
changelog:
  - use /sbin/service instead of calling init script directly.
  - put corosync-objctl man page in the main package.
  - change all initrddir to initddir for fedora 10 guidelines.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.92-4.svn1707
changelog:
  - Update to svn trunk at revision 1707 from upstream.
  - Update spec file to include new lcrso services and include file.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.92-5.svn1709
changelog:
  - Update to svn trunk at revision 1709 from upstream.
  - Update spec file to include new include files.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.92-6.svn1750
changelog:
  - Update to svn trunk at revision 1750 from upstream.
  - Include new quorum service in the packaging.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.92-7.svn1756
changelog:
  - Update to svn trunk at revision 1756 from upstream.
  - Add support pkgconfig to devel package.
  - Tidy up spec files by re-organazing sections according to packages.
  - Split libraries from corosync to corosynclib.
  - Rename corosync-devel to corosynclib-devel.
  - Comply with multiarch requirements (libraries).


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.93-1
changelog:
  - New upstream release.
  - Drop alphatag from spec file.
  - Drop trunk patch.
  - Update Provides for corosynclib-devel.
  - Backport gcc-4.4 build fix from trunk.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.93-2
changelog:
  - Rename gcc-4.4 patch to match svn commit (r1767).
  - Backport patch from trunk (commit r1774) to fix quorum engine.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.94-1
changelog:
  - New upstream release.
  - Drop obsolete patches.
  - Add soname bump patch that was missing from upstream.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.94-2.svn1792
changelog:
  - Import fixes from upstream:
    * Fix uninitialized memory. Spotted by valgrind (1788)
    * Fix logsys_set_format by updating the right bits (1789)
    * logsys: re-add support for timestamp  (1790)
    * Fix cpg crash (1791)
    * Allow logsys_format_set to reset to default (1792)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.94-3.svn1794
changelog:
  - Import fixes from upstream:
    * Add reserve/release feature to totem message queue space (1793)
    * Fix CG shutdown (1794)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.94-4.svn1797
changelog:
  - Import fixes from upstream:
    * Cleanup logsys format init around to use default settings (1795)
    * logsys_format_set should use its own internal copy of format_buffer (1796)
    * Add logsys_format_get to logsys API (1797)
  - Cherry pick svn1807 to unbreak CPG.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.95-1
changelog:
  - New upstream release
  - spec file updates:
    * Drop alpha tag
    * Drop local patches (no longer required)
    * Allow to build from svn trunk by supporting rpmbuild --with buildtrunk 
    * BuildRequires autoconf automake if building from trunk
    * Execute autogen.sh if building from trunk and if no configure is available
    * Switch to use rpm configure macro and set standard install paths
    * Build invokation now supports _smp_mflags
    * Remove install section for docs and use proper doc macro instead
    * Add tree fixup bits to drop static libs and html docs (only for now)
    * Add LICENSE file to all subpackages
    * libraries have moved to libdir. Drop ld.so.conf.d corosync file
    * Update BuildRoot usage to preferred versions/names


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.97-1.svn2232
changelog:
  - New upstream release
  - spec file updates:
    * Drop pkgconfig fix that's now upstream
    * Update to svn version 2232
    * Define buildtrunk if we are using svn snapshots
    * BuildRequires: nss-devel to enable nss crypto for network communication
    * Force autogen invokation if buildtrunk is defined
    * Whitespace cleanup
    * Stop shipping corosync.conf in favour of a generic example
    * Update file list


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.98-1
changelog:
  - New upstream release
  - spec file updates:
    * Drop corosync-trunk patch and alpha tag.
    * Fix alphatag vs buildtrunk handling.
    * Drop requirement on ais user/group and stop creating them.
    * New config file locations from upstream: /etc/corosync/corosync.conf.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.1.0-1
changelog:
  - New upstream release
  - spec file updates:
    * enable IB support
    * explicitly define built-in features at configure time


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.2.0-1
changelog:
  - New upstream release
  - Use global instead of define
  - Update Source0 url
  - Use more name macro around
  - Cleanup install section. Init script is now installed by upstream
  - Cleanup whitespace
  - Don't deadlock between package upgrade and corosync condrestart
  - Ship service.d config directory
  - Fix Conflicts vs Requires
  - Ship new sam library and man pages


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.2.2-1
changelog:
  - New upstream release
  - Add upstream trunk revision 2770 to add cpg_model_initialize api.
  - Fix URL and Source0 entries.
  - Add workaround to broken 1.2.2 Makefile with make -j.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.3.0-1
changelog:
  - New upstream release
  - drop upstream patch revision-2770.patch now included in release
  - update spec file to ship corosync-blackbox


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.99.2-1
changelog:
  - New upstream release
  - Re-enable xmlconfig bits
  - Ship cmap man pages
  - Add workaround to usrmove breakage!!


author: Jan Friesse <jfriesse@redhat.com> 2.3.1-3
changelog:
  - Resolves: rhbz#998362

  - Fix scheduler pause-detection timeout (rhbz#998362)
  - merge upstream commit 2740cfd1eac60714601c74df2137fe588b607866 (rhbz#998362)


author: Jan Friesse <jfriesse@redhat.com> 2.3.2-3
changelog:
  - Resolves: rhbz#1031832

  - cfgtool: return error on reload failure (rhbz#1031832)
  - merge upstream commit 7014f10123a634cf026491edc9a09d6044106116 (rhbz#1031832)


author: Jan Friesse <jfriesse@redhat.com> 2.3.3-2
changelog:
  - Resolves: rhbz#1067028

  - cpg: Refactor mh_req_exec_cpg_procleave (rhbz#1067028)
  - merge upstream commit fcf26e03036b6ae5a8ef762ea0b5691a4f790c92 (rhbz#1067028)
  - cpg: Make sure nodid is always logged as hex num (rhbz#1067028)
  - merge upstream commit 83c63b247f4030fe8123df7c9f96d7a1c8e245b1 (rhbz#1067028)
  - cpg: Make sure left nodes are really removed (rhbz#1067028)
  - merge upstream commit fbe8768f1bbab6d546023d70e7f7b91a9dc213b0 (rhbz#1067028)


author: Jan Friesse <jfriesse@redhat.com> 2.3.3-3
changelog:
  - Resolves: rhbz#1059607
  - Resolves: rhbz#1069254
  - Resolves: rhbz#1074673
  - Resolves: rhbz#1078361
  - Resolves: rhbz#1078363
  - Resolves: rhbz#1085468
  - Resolves: rhbz#1086233
  - Resolves: rhbz#1108508
  - Resolves: rhbz#1108511
  - Resolves: rhbz#1108522
  - Resolves: rhbz#1108525
  - Resolves: rhbz#1108708
  - Resolves: rhbz#1117911

  - Free object allocated at quorum_register_callback (rhbz#1059607)
  - merge upstream commit fa71067a93ea99d8dc4812e3a028ae154216a91a (rhbz#1059607)
  - votequorum: Add extended options to auto_tie_breaker (rhbz#1059607)
  - merge upstream commit 90d448af3b4b4508ca890cce67113cb226475d3b (rhbz#1059607)
  - totemsrp: Fix typo with cont gather (rhbz#1108508)
  - merge upstream commit 38c04d9a66ba41dae14a57eba119dabb31cbb18f (rhbz#1108508)
  - mon: Make mon compilable with libstatgrab ver 0.9 (rhbz#1108511)
  - merge upstream commit e1e2390b61fb5d47a8639f2538721675dd411b08 (rhbz#1108511)
  - mon: Fix comparsion typo (rhbz#1108511)
  - merge upstream commit 57ff693b70cb7aaa81e52e9d24f38aa0399a8c46 (rhbz#1108511)
  - mon: Pass correct pointer to inst (rhbz#1108511)
  - merge upstream commit 099f704cdddfb3b72fe93fb1f4fc777672eb9fdf (rhbz#1108511)
  - mon: Make monitoring work (rhbz#1108511)
  - merge upstream commit ff67daa55f6cfcb48357a8fddaa312b9fb49602b (rhbz#1108511)
  - votequorum: Properly initialize atb and atb_string (rhbz#1059607)
  - merge upstream commit e1801ba49738a3ae2ba3ca08c2b74dda5ff9056c (rhbz#1059607)
  - config: Handle totem_set_volatile_defaults errors (rhbz#1078361)
  - merge upstream commit 2f0cad20a9a368683fd59a869b2cb360bd31f95b (rhbz#1078361)
  - Log: Make reload of logging work (rhbz#1078361)
  - merge upstream commit 1b6abcc7d5afd4651efcdba1a65effb259f6ee3e (rhbz#1078361)
  - Really clear totemconfig nodes on reload (rhbz#1078361)
  - merge upstream commit eeb2384157351ff460be0648d954e5e97213d532 (rhbz#1078361)
  - totemconfig: Key change process dependencies (rhbz#1078361)
  - merge upstream commit b95ebd640eb45267d69822c8292a0098a8e4180e (rhbz#1078361)
  - totemconfig: Log errors on key change and reload (rhbz#1078361)
  - merge upstream commit 9a8de87c34071f54a9e3b545a1a7460d64568579 (rhbz#1078361)
  - Add token_coefficient option (rhbz#1078361)
  - merge upstream commit 58176d6779a0f5ff23dabf61dff7544db29af25a (rhbz#1078361)
  - init: Make init script configurable (rhbz#1078363)
  - merge upstream commit 1f7e78ab9cc686a7528ac4601651ded9d204b01f (rhbz#1078363)
  - config: Allow dynamic change of token_coefficient (rhbz#1078361)
  - merge upstream commit 7557fdec487cb5fad7c449949ba58496bd396458 (rhbz#1078361)
  - upstart: Make job conf file configurable (rhbz#1108522)
  - merge upstream commit d23ee6a3e0d5299f488bf9abed98f1853fd0e8b0 (rhbz#1108522)
  - Indent: Remove space in negation of expression (rhbz#1108522)
  - merge upstream commit b6e2c8024dd314ce17eac4f3f83a2320ebb7017d (rhbz#1108522)
  - Indent: Remove newline before else branch start (rhbz#1108522)
  - merge upstream commit d0dc9ae93c6f41ab9139242d754428fcf9bcc653 (rhbz#1108522)
  - totemiba: Add multicast recovery (rhbz#1108522)
  - merge upstream commit 4d6a18d8a5c0001f2eaeebb79d75f999c671cb74 (rhbz#1108522)
  - totemiba: Fix incorrect failed log message (rhbz#1108522)
  - merge upstream commit e905f92bf532c291d9be23b6a16d972f36d5d464 (rhbz#1108522)
  - logsys: Log error if blackbox cannot be created (rhbz#1108525)
  - merge upstream commit 19c5b63ff5fae43c2acf28ce95cca6460f500176 (rhbz#1108525)
  - logsys: Log warning if flightrecorder init fails (rhbz#1108525)
  - merge upstream commit 8f13a983204c2bc16c7490cee6db90138ecc43f1 (rhbz#1108525)
  - Introduce get_run_dir function (rhbz#1108525)
  - merge upstream commit d310b251c3ba5e92c7ca1b8f6f8197d71141a8d6 (rhbz#1108525)
  - Move ringid store and load from totem library (rhbz#1108525)
  - merge upstream commit da46ecfc3087de97ad9a76fe6a156f10170503a2 (rhbz#1108525)
  - init: change return value when starting corosync (rhbz#1078363)
  - merge upstream commit 7a6cc6b5a2f6ec5d88e52e34e62f18db1915afd7 (rhbz#1078363)
  - Install doc: Correct a typo (rhbz#1108522)
  - merge upstream commit a64696698718071e4e531a5a3332c363742c550b (rhbz#1108522)
  - coroparse: More strict numbers parsing (rhbz#1108708)
  - merge upstream commit 4e9716ed30ffe6a5750f5c6c2565815e88413c23 (rhbz#1108708)
  - Doc: Enhance INSTALL file a bit (rhbz#1108522)
  - merge upstream commit e8a5c56ab27fff4beef910804841d73aaa17a6a1 (rhbz#1108522)
  - Make config.reload_in_progress key read only (rhbz#1085468)
  - merge upstream commit c8e3f14fdb284aadf023d7e62c0f951181f21736 (rhbz#1085468)
  - votequorum: Do not process events during reload (rhbz#1085468)
  - merge upstream commit 72cf15af27ea9dbf918839ac44929ed9c65eea5e (rhbz#1085468)
  - systemd: Config example for corosync wd service (rhbz#1108522)
  - merge upstream commit f6d6a9b0a0ca99a201bb9e9353a05075b700bcbd (rhbz#1108522)
  - fix memory leak produced by 'corosync -v' (rhbz#1117911)
  - merge upstream commit cc80c8567d6eec1d136f9e85d2f8dfb957337eef (rhbz#1117911)
  - Handle SIGSEGV and SIGABRT signals (rhbz#1117911)
  - merge upstream commit 384760cb670836dc37e243f594612c6e68f44351 (rhbz#1117911)
  - Fix compiler warning introduced by previous patch (rhbz#1117911)
  - merge upstream commit dfaca4b10a005681230a81e229384b6cd239b4f6 (rhbz#1117911)
  - corosync-cmapctl: Allow -p option to delete keys (rhbz#1108522)
  - merge upstream commit 7a4bb37723777bf6bcd08035696d8d7317c0ce1d (rhbz#1108522)
  - Implement config file testing mode (rhbz#1108522)
  - merge upstream commit e3ffd4fedc8158cdb5057f9fe40b6459e3d85846 (rhbz#1108522)
  - cleanup after test-driver (rhbz#1108522)
  - merge upstream commit c7ebb09530349b7b1bbec7b1d9ef4b05ad186a63 (rhbz#1108522)
  - be consistent in using CPPFLAGS vs CFLAGS (rhbz#1108522)
  - merge upstream commit 84b9e5989aa4a7090aeccbeb6cb8910735274a65 (rhbz#1108522)
  - Slightly rework corosync-keygen. (rhbz#1108522)
  - merge upstream commit 520fe686c5e45f0f7143e749a3f6c2001a2ea0d7 (rhbz#1108522)
  - totemconfig: Free ifaddrs list (rhbz#1108522)
  - merge upstream commit dc35bfae6213256fd7f0d5bf4dd9d5fa0f77a6f6 (rhbz#1108522)
  - totemconfig: totem_config_get_ip_version (rhbz#1108522)
  - merge upstream commit 10c80f454e70b42fc394d3326af1eb81c4be0d75 (rhbz#1108522)
  - totemconfig: refactor nodelist_to_interface func (rhbz#1108522)
  - merge upstream commit 63bf09776fb84e939cd56ec2c2d1bbea97c2e0e1 (rhbz#1108522)
  - corosync-keygen: Replace printf/exit call with err (rhbz#1108522)
  - merge upstream commit 0ce8d51c6d989c4e62d8c1f3fc42785c4f3d250c (rhbz#1108522)
  - config: Fix typos (rhbz#1108522)
  - merge upstream commit 3b8365e80668eea55bdd3f7178693c82884331ae (rhbz#1108522)
  - totemconfig: Make sure join timeout is less than consensus (rhbz#1074673)
  - merge upstream commit 88dbb9f722122f04dc7c95681375a53a3a1301a5 (rhbz#1074673)
  - votequorum: Return current ring id in callback (rhbz#1108522)
  - merge upstream commit 5f6f68805c48f8f72f66f7fff9abc44b4c65df1e (rhbz#1108522)
  - votequorum: Add ring id to poll call (rhbz#1108522)
  - merge upstream commit b8902464d1b040326108ce7ec0934c1de5fe04ee (rhbz#1108522)
  - ipc: Process votequorum messages during sync (rhbz#1108522)
  - merge upstream commit 7cad804629fe7d936d098569122f84979959b554 (rhbz#1108522)
  - votequorum: Block sync until qdevice poll (rhbz#1108522)
  - merge upstream commit b4c99346352ce39cf96f7b12943811c896b89caa (rhbz#1108522)
  - testvotequorum2: Opt for polling with old ringid (rhbz#1108522)
  - merge upstream commit f8413350b2df4e37822e6d34e9337da87993d271 (rhbz#1108522)
  - votequorum: Make qdev timeout in sync configurable (rhbz#1108522)
  - merge upstream commit 17488909d4ae0dc948eb9a4a15133570faaf9c0b (rhbz#1108522)
  - Cancel token holding while in retransmition (rhbz#1108522)
  - merge upstream commit f135b680967aaef1d466f40170c75ae3e470e147 (rhbz#1108522)
  - votequorum: Add cmap key to reset wait_for_all (rhbz#1086233)
  - merge upstream commit cbf753405b7924e48aa1838cc1d14044229449b3 (rhbz#1086233)
  - quorumtool: Sort output by nodeid (rhbz#1108522)
  - merge upstream commit ddb017fa0e2026ee4f0d05e9bf780898c32c129a (rhbz#1108522)
  - YKD: Fix loading of YKD quorum module (rhbz#1108522)
  - merge upstream commit 02f58aec9cd53887aa1dfe1616fcbb32671987d4 (rhbz#1108522)
  - corosync-quorumtool: add sort options (rhbz#1108522)
  - merge upstream commit f53580c2c1c8fa621cbc18de81974811799bafd8 (rhbz#1108522)
  - TODO: Remove TODO file (rhbz#1108522)
  - merge upstream commit c9232d5d6cbfb1e4de9eb09afadda630ad4fee83 (rhbz#1108522)
  - Makefile: Do not install TODO file (rhbz#1108522)
  - merge upstream commit 4b7293da7a03253a7f96401642e1afb006e7750c (rhbz#1108522)
  - totem: Inform RRP about membership changes (rhbz#1069254)
  - merge upstream commit acb55cdb03808a4cea745b1b6a80c7ef1769880f (rhbz#1069254)
  - totemnet: Add totemnet_member_set_active (rhbz#1069254)
  - merge upstream commit 4c717942cf5f35902be630f393b81a03a81bb194 (rhbz#1069254)
  - totemrrp: Implement *_membership_changed (rhbz#1069254)
  - merge upstream commit 371a99e96147f600510bd9d819b92a4de94fcc30 (rhbz#1069254)
  - totemudpu: Implement member_set_active (rhbz#1069254)
  - merge upstream commit 71f1b99649329ab06309791d0a621d3cfbb74bdb (rhbz#1069254)
  - totemudpu: Send msgs to all members occasionally (rhbz#1069254)
  - merge upstream commit 2429481b96d895c366ca27c82a2bd7cfee55af15 (rhbz#1069254)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-3
changelog:
  - Resolves: rhbz#1078361
  - Resolves: rhbz#1136429
  - Resolves: rhbz#1149916

  - [crypto] fix crypto block rounding/padding calculation (rhbz#1136429)
  - merge upstream commit 239e2397820f9fa7ef430ebef0947ec1246eb50f (rhbz#1136429)
  - Adjust MTU for IPv6 correctly (rhbz#1136429)
  - merge upstream commit 03f95ddaa1d223e1e93788a307dc1b36d86b22b5 (rhbz#1136429)
  - init: Don't wait for ipc if corosync doesn't start (rhbz#1149916)
  - merge upstream commit b627844f3d5c5788bd8bb140d8852ba666da16aa (rhbz#1149916)
  - manpage: Fix English (rhbz#1078361)
  - merge upstream commit f77a61ac1795e794244440e1bfe804f02cc5d2b6 (rhbz#1078361)
  - Store configuration values used by totem to cmap (rhbz#1078361)
  - merge upstream commit bb52fc2774ef690d6bb951fe9cc34e5b373caffe (rhbz#1078361)
  - man page: Improve description of token timeout (rhbz#1078361)
  - merge upstream commit 57539d1abc09e5aef322cb9cca5b3e6c496cfae9 (rhbz#1078361)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-4
changelog:
  - Resolves: rhbz#1184154

  - Handle adding and removing UDPU members atomically (rhbz#1184154)
  - merge upstream commit d77cec24d0025d353681762fe707794c621665c7 (rhbz#1184154)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-5
changelog:
  - Resolves: rhbz#1197091
  - Resolves: rhbz#1197671

  - Votequorum: Fix auto_tie_breaker default (rhbz#1197091)
  - merge upstream commit 314a01c98e5f98ff686333966dbe675935b7b6a8 (rhbz#1197091)
  - Don't allow both two_node and auto_tie_breaker in corosync.conf (rhbz#1197671)
  - merge upstream commit c832ade034fa737561ccabefbe417c9d7855d970 (rhbz#1197671)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-6
changelog:
  - Resolves: rhbz#1170347
  - Resolves: rhbz#1225441
  - Resolves: rhbz#1226842
  - Resolves: rhbz#1229194
  - Resolves: rhbz#1234261
  - Resolves: rhbz#1234266
  - Resolves: rhbz#682771
  - Resolves: rhbz#773464

  - config: Make sure user doesn't mix IPv6 and IPv4 (rhbz#773464)
  - merge upstream commit 6c028d4d9c53decaa9469c792ac68fd2a886e7d9 (rhbz#773464)
  - config: Process broadcast option consistently (rhbz#773464)
  - merge upstream commit 70bd35fc06e68a010d780dfa39bd68d4bd2f7da7 (rhbz#773464)
  - config: Ensure mcast address/port differs for rrp (rhbz#773464)
  - merge upstream commit 6449bea835c90045baa23e3e041fed1df2abf070 (rhbz#773464)
  - Reset timer_problem_decrementer on fault (rhbz#1234261)
  - merge upstream commit 8f284b26b3331e1ab252969ba65543e6d9217ab1 (rhbz#1234261)
  - automake: Check minimum automake version (rhbz#773464)
  - merge upstream commit 114b826c67126fe1f690ad976b5217a8487994a4 (rhbz#773464)
  - Set RR priority by default (rhbz#1170347)
  - merge upstream commit 177ef0e5240b4060ff5b14eab6f2eefee3aa777d (rhbz#1170347)
  - Log auto-recovery of ring only once (rhbz#773464)
  - merge upstream commit e0ac861efdc32831366a2b5f5cc1d61e2ffa5504 (rhbz#773464)
  - totem: Ignore duplicated commit tokens in recovery (rhbz#1234261)
  - merge upstream commit 4ee84c51fa73c4ec7cbee922111a140a3aaf75df (rhbz#1234261)
  - corosync_ring_id_store: Use safer permissions (rhbz#1234266)
  - merge upstream commit 252b38ab8a62ff083e83b1d6f514109f7b7cbb42 (rhbz#1234266)
  - totemsrp: Format member list log as unsigned int (rhbz#773464)
  - merge upstream commit 5d9acc5604eb4e8a739cb37a4ad46bcc5ad8deb6 (rhbz#773464)
  - cpg: Add support for messages larger than 1Mb (rhbz#682771)
  - merge upstream commit 8cc8e513633a1a8b12c416e32fb5362fcf4d65dd (rhbz#682771)
  - Really add cpghum (rhbz#682771)
  - merge upstream commit 3842ba6080e00fd9484a2a875d982e149f67bc44 (rhbz#682771)
  - quorum: don't allow quorum_trackstart to be called twice (rhbz#1229194)
  - merge upstream commit 82526d2fe9137e8b604f1bbae6d6e39ba41377f9 (rhbz#1229194)
  - totemconfig: Check for duplicate nodeids (rhbz#773464)
  - merge upstream commit 997074cc3e1ea425ca63e453b7e2181741bdcef0 (rhbz#773464)
  - totem: Log a message if JOIN or LEAVE message is ignored (rhbz#773464)
  - merge upstream commit 53f67a2a7914228f1a406aad61ea6768525e11b0 (rhbz#773464)
  - totemsrp: Improve logging of left/down nodes (rhbz#773464)
  - merge upstream commit ab8942f6260fde93824ed2a18e09e572b59ceb25 (rhbz#773464)
  - votequorum: Fix auto_tie_breaker behaviour in odd-sized clusters (rhbz#1229194)
  - merge upstream commit b9f5c290b7dedd0a677cdfc25db7dd111245a745 (rhbz#1229194)
  - Add note about rrp active beeing unsupported (rhbz#1226842)
  - merge upstream commit 219965f4fe694eaaf2eb4ea05cdc7e35f5146114 (rhbz#1226842)
  - Log: Add logrotate configuration file (rhbz#1225441)
  - merge upstream commit aabbace625b3c68332b4356887378fca81f8f387 (rhbz#1225441)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-7
changelog:
  - Related: rhbz#682771

  - Don't link with libz when not needed (rhbz#682771)
  - merge upstream commit 145f9279d12cf0b981494bbd4dabbc9c3641378e (rhbz#682771)


author: Jan Friesse <jfriesse@redhat.com> 2.3.6-1
changelog:
  - Related: rhbz#1306680
  - Resolves: rhbz#1289169
  - Resolves: rhbz#1306349
  - Resolves: rhbz#1282372
  - Resolves: rhbz#1317573
  - Resolves: rhbz#1336462

  - Rebase to Corosync 2.3.6


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-2
changelog:
  - Resolves: rhbz#1363654

  - Config: Flag config uidgid entries (rhbz#1363654)
  - merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-3
changelog:
  - Related: rhbz#1363654

  - Enhance spec so corosync-qdevice subpackage depends on same version of
    the corosync and corosynclib packages.


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-4
changelog:
  - Resolves: rhbz#1367813

  - Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
  - merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
  - man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
  - merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
  - Qnetd LMS: Fix two partition use case (rhbz#1367813)
  - merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-6
changelog:
  - Resolves: rhbz#1371880

  - libvotequorum: Bump version (rhbz#1371880)
  - merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
  - votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
  - merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
  - votequorum: simplify reconfigure message handling (rhbz#1371880)
  - merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-7
changelog:
  - Related: rhbz#1371880

  - Fix build on RHEL7.3 latest (rhbz#1371880)
  - merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
  - Enable aarch64 build (bz#1422598)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-8
changelog:
  - Resolves: rhbz#1434528
  - Resolves: rhbz#1434529
  - Resolves: rhbz#1434534

  - cfg: Prevents use of uninitialized buffer (rhbz#1434528)
  - merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
  - man: Fix typos in man page (rhbz#1434529)
  - merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
  - Fix typo: Destorying -> Destroying (rhbz#1434529)
  - merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
  - init: Add doc URIs to the systemd service files (rhbz#1434529)
  - merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
  - man: Modify man-page according to command usage (rhbz#1434529)
  - merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
  - Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
  - merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
  - upstart: Add softdog module loading example (rhbz#1434529)
  - merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
  - Remove deprecated doxygen flags (rhbz#1434529)
  - merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
  - Remove redundant header file inclusion (rhbz#1434528)
  - merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
  - Qdevice: fix spell errors in qdevice (rhbz#1434529)
  - merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
  - doc: document watchdog_device parameter (rhbz#1434529)
  - merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
  - Logsys: Change logsys syslog_priority priority (rhbz#1434534)
  - merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
  - logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
  - merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-9
changelog:
  - Resolves: rhbz#1445001

  - Main: Call mlockall after fork (rhbz#1445001)
  - merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
  - Disable aarch64 build (bz#1422598)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-9.1
changelog:
  - Resolves: rhbz#1477461

  - main: Add option to set priority (rhbz#1477461)
  - merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
  - main: Add support for libcgroup (rhbz#1477461)
  - merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-9.2
changelog:
  - Resolves: rhbz#1484264

  - totem: Propagate totem initialization failure (rhbz#1484264)
  - merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
  - totemcrypto: Refactor symmetric key importing (rhbz#1484264)
  - merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
  - totemcrypto: Use different method to import key (rhbz#1484264)
  - merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
  - totemcrypto: Fix compiler warning (rhbz#1484264)
  - merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - Fiddle bindir/libexecdir to get RH install correct.
  - Don't include /sbin/rmt -- use the rmt from dump package.
  - Don't include /bin/mt -- use the mt from mt-st package.
  - Add prereq's


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - fix infinite loop unpacking empty files with hard links (#4208).
  - stdout should contain progress information (#3358).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - revert the stdout patch (#3358), restoring original GNU cpio behavior
    (#6376, #7538), the patch was dumb.


author: Jeff Johnson <jbj@redhat.com> 2.5-1
changelog:
  - update 2.5, restack and consolidate patches.
  - don't apply (but include for now) freebsd and #56346 patches.
  - add url (#54598).


author: Peter Vrabec <pvrabec@redhat.com> 2.6-8
changelog:
  - fix large file support, archive >4GiB, archive members <4GiB (#160056)
  - fix race condition holes, use mode 0700 for dir creation


author: Peter Vrabec <pvrabec@redhat.com> 2.6-12
changelog:
  - fix warn_if_file_changed() and set exit code to #1 when 
    cpio fails to store file > 4GB (#183224)


author: Peter Vrabec <pvrabec@redhat.com> 2.6-13
changelog:
  - merge toAsciiError.patch with writeOutHeaderBufferOverflow.patch
  - merge largeFileGrew.patch with lfs.patch
  - fix large file support, cpio is able to store files<8GB 
    in 'old ascii' format (-H odc option)
  - adjust warnings.patch


author: Radek Brich <rbrich@redhat.com> 2.9-6
changelog:
  - when extracting archive created with 'find -depth',
    restore the permissions of directories properly (bz#430835)
  - fix for GCC 4.3


author: Radek Brich <rbrich@redhat.com> 2.9-7
changelog:
  - fix -dir_perm patch to restore permissions correctly even
    in passthrough mode -- revert affected code to cpio 2.8 state
    (bz#430835)


author: Ondrej Vasik <ovasik@redhat.com> 2.10-5
changelog:
  - remove redundant setLocale patch
  - fix segfault with nonexisting file with patternnames
    (#567022)


author: Ondrej Vasik <ovasik@redhat.com> 2.10-6
changelog:
  - CVE-2010-0624 fix heap-based buffer overflow by expanding
    a specially-crafted archive(#572150)
  - comment patches


author: Ondrej Vasik <ovasik@redhat.com> 2.11-8
changelog:
  - drop unnecessary patches: cpio-2.9-dir_perm.patch and
    cpio-2.9-sys_umask.patch - reported by M.Castellini


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-14
changelog:
  - fix bad changelog entries
  - allow to build in Fedora Rawhide (temporarily because of #872336) (the value
    is guessed from from /usr/include/asm-generic/fcntl.h)


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-17
changelog:
  - fix small memory leak in copyin.c (#919454)
  - remove %defattr and install 'cpio' to real %{_bindir}
  - CovScan: add %{?_rawbuild}


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-20
changelog:
  - fix another bogus date in changelog
  - update config.guess/config.sub for aarm64 build (#925189)
  - run autoreconf instead of autoheader


author: John H Terpstra <jht@samba.anu.edu.au>
changelog:
  - Many optimisations (some suggested by Manoj Kasichainula <manojk@io.com>
  - Use of chkconfig in place of individual symlinks to /etc/rc.d/init/smb
  - Compounded make line
  - Updated smb.init restart mechanism
  - Use compound mkdir -p line instead of individual calls to mkdir
  - Fixed smb.conf file path for log files
  - Fixed smb.conf file path for incoming smb print spool directory
  - Added a number of options to smb.conf file
  - Added smbadduser command (missed from all previous RPMs) - Doooh!
  - Added smbuser file and smb.conf file updates for username map


author: Erik Troan <ewt@redhat.com>
changelog:
  - made the %postun script a tad less agressive; no reason to remove
    the logs or lock file (after all, if the lock file is still there,
    samba is still running)
  - the %postun and %preun should only exectute if this is the final
    removal
  - migrated %triggerpostun from Red Hat's samba package to work around
    packaging problems in some Red Hat samba releases


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add a mount.smb to make smb mounting a little easier.
  - smb filesystems apparently don't work on alpha. Oops.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.0.5
  - fix mount.smb - smbmount options changed again.........
  - fix postun. oops.
  - update some stuff from the samba team's spec file.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - use cp rather than mv to preserve /etc/services perms (#4938 et al).
  - use mktemp to generate /etc/tmp.XXXXXX file name.
  - add prereqs on sed/mktemp/killall (need to move killall to /bin).
  - fix trigger syntax (i.e. "samba < 1.9.18p7" not "samba < samba-1.9.18p7")


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix yp_get_default_domain in autoconf
  - only link against readline for smbclient
  - fix log rotation (#9909)


author: Than Ngo <than@redhat.de>
changelog:
  - add initdir macro to handle the initscript directory
  - add a new macro to handle /etc/pam.d/system-auth


author: Bill Nottingham <notting@redhat.com>
changelog:
  - move initscript back
  - remove 'Using Samba' book from %doc 
  - move stuff to /etc/samba (#13708)
  - default configuration tweaks (#13704)
  - some logrotate tweaks


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix swat only_from line (#18726, others)
  - fix attempt to write outside buildroot on install (#17943)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set a default CA certificate path in smb.conf (#19010)
  - require openssl >= 0.9.5a-20 to make sure we have a ca-bundle.crt file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - i18n-ize initscript
  - add a sysconfig file for daemon options (#23550)
  - clarify smbpasswd man page (#23370)
  - build with LFS support (#22388)
  - avoid extraneous pam error messages (#10666)
  - add Urban Widmark's bug fixes for smbmount (#19623)
  - fix setgid directory modes (#11911)
  - split swat into subpackage (#19706)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak the PAM code some more to try to do a setcred() after initgroups()
  - pull in all of the optflags on i386 and sparc
  - don't explicitly enable Kerberos support -- it's only used for password
    checking, and if PAM is enabled it's a no-op anyway


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to samba 2.2.0
  - moved codepages to %{_datadir}/samba/codepages
  - use all available CPUs for building rpm packages
  - use %{_xxx} defines at most places in spec-file
  - "License:" replaces "Copyright:"
  - dropped excludearch sparc
  - de-activated japanese patches 100 and 200 for now 
    (they need to be fixed and tested wth 2.2.0)
  - separated swat.desktop file from spec-file and added
    german translations
  - moved /etc/sysconfig/samba to a separate source-file
  - use htmlview instead of direct call to netscape in 
    swat.desktop-file


author: Helge Deller <hdeller@redhat.de>
changelog:
  - build as 2.2.0-1 release
  - skip the documentation-directories docbook, manpages and yodldocs
  - don't include *.sgml documentation in package
  - moved codepage-directory to /usr/share/samba/codepages
  - make it compile with glibc-2.2.3-10 and kernel-headers-2.4.2-2


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - (these changes are from the non-head version)
  - Don't include /usr/sbin/samba, it's the same as the initscript
  - unset TMPDIR, as samba can't write into a TMPDIR owned
    by root (#41193)
  - Add pidfile: lines for smbd and nmbd and a config: line
    in the initscript  (#15343)
  - don't use make -j
  - explicitly include /usr/share/samba, not just the files in it


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Use /var/cache/samba instead of /var/lock/samba 
  - Remove "domain controller" keyword from smb.conf, it's 
    deprecated (from #13704)
  - Sync some examples with smb.conf.default
  - Fix password synchronization (#16987)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include smbpasswd in samba, it's in samba-common (#51598)
  - Add a disabled "obey pam restrictions" statement - it's not
    active, as we use encrypted passwords, but if the admin turns
    encrypted passwords off the choice is available. (#31351)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-3
changelog:
  - Add "--with-utmp" to configure options (#55372)
  - Include winbind, pam_smbpass.so, rpcclient and smbcacls
  - start using /var/cache/samba, we need to keep state and there is
    more than just locks involved


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-5
changelog:
  - Teach smbadduser about "getent passwd" 
  - Fix more pid-file references
  - Add (conditional) winbindd startup to the initscript, configured in
    /etc/sysconfig/samba


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-6
changelog:
  - Move winbind files to samba-common. Add separate initscript for
    winbind 
  - Fixes for winbind - protect global variables with mutex, use
    more secure getenv


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.3a-3
changelog:
  - include interfaces.o in pam_smbpass.so, which needs symbols from interfaces.o
    (patch posted to samba-list by Ilia Chipitsine)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.5-7
changelog:
  - Enable VFS support and compile the "recycling" module (#69796)
  - more selective includes of the examples dir


author: Jay Fenlason <fenlason@redhat.com> 2.2.7a-3
changelog:
  - edited spec file to put .so files in the correct directories
    on 64-bit platforms that have 32-bit compatability issues
    (sparc64, x86_64, etc).  This fixes bugzilla #83782.
  - Added samba-2.2.7a-error.patch from twaugh.  This fixes
    bugzilla #82454.


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.7a-4
changelog:
  - relink libnss_wins.so with SHLD="%{__cc} -lnsl" to force libnss_wins.so to
    link with libnsl, avoiding unresolved symbol errors on functions in libnsl


author: Jay Fenlason <fenlason@redhat.com> 2.2.8-0
changelog:
  - Upgrade to 2.2.8
  - removed commented out patches.
  - removed old patches and .md5 files from the repository.
  - remove duplicate /sbin/chkconfig --del winbind which causes
    warnings when removing samba.
  - Fixed minor bug in smbprint that causes it to fail when called with
    more than 10 parameters: the accounting file (and spool directory
    derived from it) were being set wrong due to missing {}.  This closes
    bug #86473.
  - updated smb.conf patch, includes new defaults to close bug #84822.


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-1
changelog:
  - upgrade to 2.2.8a
  - remove old .md5 files
  - add "pid directory = /var/run" to the smb.conf file.  Fixes #88495
  - Patch from jra@dp.samba.org to fix a delete-on-close regression


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-2
changelog:
  - add libsmbclient.so for gnome-vfs-extras
  - Edit specfile to specify /var/run for pid files
  - Move /tmp/.winbindd/socket to /var/run/winbindd/socket


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-3beta3
changelog:
  - Merge from 3.0.0-2beta3.3E
  - (Correct log file names (#100981).)
  - (Fix pidfile directory in samab.log)
  - (Remove obsolete samba-3.0.0beta2.tar.bz2.md5 file)
  - (Move libsmbclient to the -common package (#99449))


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-15
changelog:
  - New 3.0.0 final release
  - merge nmbd-netbiosname and testparm patches from 3E branch
  - updated the -logfiles patch to work against 3.0.0
  - updated the pie patch
  - update the VERSION file during build
  - use make -j if avaliable
  - merge the winbindd_privileged change from 3E
  - merge the "rm /usr/lib" patch that allows Samba to build on 64-bit
    platforms despite the broken Makefile


author: Felipe Alfaro Solana <felipe_alfaro@linuxmail.org> 3.0.1-1
changelog:
  - Update to 3.0.1
  - Removed testparm patch as it's already merged
  - Removed Samba.7* man pages
  - Fixed .buildroot patch
  - Fixed .pie patch
  - Added new /usr/bin/tdbdump file


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-3rc2
changelog:
  - add %dir entries for %{_libdir}/samba and %{_libdir}/samba/charset
  - Upgrade to new upstream version
  - build mount.cifs for the new cifs filesystem in the 2.6 kernel.


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-5
changelog:
  - New upstream version: 3.0.2 final includes security fix for #114995
    (CAN-2004-0082)
  - Edit postun script for the -common package to restart winbind when
    appropriate.  Fixes bugzilla #114051.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Change all requires lines to list an explicit epoch.  Closes #102715
  - Add an explicit Epoch so that %{epoch} is defined.


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-1.pre1
changelog:
  - New upstream version.
  - Updated -pie and -logfiles patches for 3.0.3pre1
  - add krb5-devel to buildrequires, fixes #116560
  - Add patch from Miloslav Trmac (mitr@volny.cz) to allow non-root to run
    "service smb status".  This fixes #116559


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-2.pre2
changelog:
  - New upstream version  
  - Updated configure line to remove --with-fhs and to explicitly set all
    the directories that --with-fhs was setting.  We were overriding most of
    them anyway.  This closes #118598


author: jay Fenlason <fenlason@redhat.com> 3.0.3-3.rc1
changelog:
  - New upstream version
  - updated spec file to make libsmbclient.so executable.  This closes
    bugzilla #121356


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-5
changelog:
  - Patch to allow password changes from machines patched with
    Microsoft hotfix MS04-011.
  - Include patches for https://bugzilla.samba.org/show_bug.cgi?id=1302
    and https://bugzilla.samba.org/show_bug.cgi?id=1309


author: Jay Fenlason <fenlason@redhat.com> 3.0.5.0pre1.0
changelog:
  - New upstream version
  - use % { SOURCE1 } instead of a hardcoded path
  - include -winbind patch from Gerald (Jerry) Carter (jerry@samba.org)
    https://bugzilla.samba.org/show_bug.cgi?id=1315
    to make winbindd work against Windows versions that do not have
    128 bit encryption enabled.
  - Moved %{_bindir}/net to the -common package, so that folks who just
    want to use winbind, etc don't have to install -client in order to
    "net join" their domain.
  - New upstream version obsoletes the patches added in 3.0.3-5
  - Remove smbgetrc.5 man page, since we don't ship smbget.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-0.pre1.1
changelog:
  - Backport base64_decode patche to close CAN-2004-0500
  - Backport hash patch to close CAN-2004-0686
  - use_authtok patch from Nalin Dahyabhai <nalin@redhat.com>
  - smbclient-kerberos patch from Alexander Larsson <alexl@redhat.com>
  - passwd patch uses "*" instead of "x" for "hashed" passwords for
    accounts created by winbind.  "x" means "password is in /etc/shadow" to
    brain-damaged pam_unix module.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-2
changelog:
  - Upgrade to 3.0.5, which is a regression from 3.0.5pre1 for a
    security fix.
  - Include the 3.0.4-backport patch from the 3E branch.  This restores
    some of the 3.0.5pre1 and 3.0.5rc1 functionality.


author: Jason Vas Dias <jvdias@redhat.com> 3.0.5-3
changelog:
  - Removed '-pie' patch - 3.0.5 uses -fPIC/-PIC, and the combination
  - resulted in executables getting corrupt stacks, causing smbmnt to
  - get a SIGBUS in the mount() call (bug 127420).


author: Jay Fenlason <fenlason@redhat.com> 3.0.6-3
changelog:
  - New upstream version.
  - Include post 3.0.6 patch from "Gerald (Jerry) Carter" <jerry@samba.org>
    to fix a duplicate in the LDAP schema.
  - Include 64-bit timestamp patch from Ravikumar (rkumar@hp.com)
    to allow correct timestamp handling on 64-bit platforms and fix #126109.
  - reenable the -pie patch.  Samba is too widely used, and too vulnerable
    to potential security holes to disable an important security feature
    like -pie.  The correct fix is to have the toolchain not create broken
    executables when programs compiled -pie are stripped.
  - Remove obsolete patches.
  - Modify this spec file to put libsmbclient.{a,so} in the right place on
    x86_64 machines.


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-3
changelog:
  - Upgrade to 3.0.7, which fixes CAN-2004-0807 CAN-2004-0808
    This obsoletes the 3.0.6-schema patch.
  - Update BuildRequires line to include openldap-devel openssl-devel
    and cups-devel


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-4
changelog:
  - Update docs section to not carryover the docs/manpages directory
    This moved many files from /usr/share/doc/samba-3.0.7/docs/* to
    /usr/share/doc/samba-3.0.7/*
  - Modify spec file as suggested by Rex Dieter (rdieter@math.unl.edu)
    to correctly create libsmbclient.so.0 and to use %_initrddir instead
    of rolling our own.  This closes #132642
  - Add patch to default "use sendfile" to no, since sendfile appears to
    be broken
  - Add patch from Volker Lendecke <vl@samba.org> to help make
    ldapsam_compat work again.
  - Add patch from "Vince Brimhall" <vbrimhall@novell.com> for ldapsam_compat
    These two patches close bugzilla #132169


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include patch from Steven Lawrance (slawrance@yahoo.com) that modifies
    smbmnt to work with 32-bit uids.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.2
changelog:
  - Re-enable the x_fclose patch that was accidentally disabled
    in 3.0.8-0.pre1.1.  This closes #135832
  - include Nalin's -fqdn and -salt patches.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.3
changelog:
  - disable the -salt patch, because it causes undefined references in
    libsmbclient that prevent gnome-vfs from building.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-2
changelog:
  - New upstream version fixes CAN-2004-0930.  This obsoletes the
    disable-sendfile, salt, signing-shortkey and fqdn patches.
  - Add my <fenlason@redhat.com> ugly non-ascii-domain patch.
  - Updated the pie patch for 3.0.8.
  - Updated the logfiles patch for 3.0.8.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3
changelog:
  - Include the corrected docs tarball, and use it instead of the
    obsolete docs from the upstream 3.0.8 tarball.
  - Update the logfiles patch to work with the updated docs.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3.1
changelog:
  - Rescue the install.mount.smbfs patch from Juanjo Villaplana
    (villapla@si.uji.es) to prevent building the srpm from trashing your
    installed /usr/bin/smbmount


author: Than Ngo <than@redhat.com> 3.0.8-4
changelog:
  - fix unresolved symbols in libsmbclient which caused applications
    such as KDE's konqueror to fail when accessing smb:// URLs. #139894


author: Jay Fenlason <fenlason@redhat.com> 3.0.9-2
changelog:
  - New upstream release.  This obsoletes the -secret patch.
    Include my changetrustpw patch to make "net ads changetrustpw" stop
    aborting.  This closes #134694
  - Remove obsolete triggers for ancient samba versions.
  - Move /var/log/samba to the -common rpm.  This closes #76628
  - Remove the hack needed to get around the bad docs files in the
    3.0.8 tarball.
  - Change the comment in winbind.init to point at the correct pidfile.
    This closes #76641


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-2
changelog:
  - New upstream release that closes CAN-2004-1154  bz#142544
  - Include the -64bit patch from Nalin.  This closes bz#142873
  - Update the -logfiles patch to work with 3.0.10
  - Create /var/run/winbindd and make it part of the -common rpm to close
    bz#142242


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-4
changelog:
  - Update the -man patch to fix ntlm_auth.1 too.
  - Move pam_smbpass.so to the -common package, so both the 32
    and 64-bit versions will be installed on multiarch platforms.
    This closes bz#143617
  - Added new -delim patch to fix mount.cifs so it can accept
    passwords with commas in them (via environment or credentials
    file) to close bz#144198


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-3
changelog:
  - add -gcc4 patch to compile with gcc 4.
  - remove the now obsolete -smbclient-kerberos.patch
  - Include four upstream patches from
    http://samba.org/~jerry/patches/post-3.0.11/
    (Slightly modified the winbind_find_dc_v2 patch to apply easily with
    rpmbuild).


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-4
changelog:
  - Use the updated filter-requires-samba.sh file, so we don't accidentally
    pick up a dependency on perl(Crypt::SmbHash)


author: Jay Fenlason <fenlason@redhat.com> 3.0.13-2
changelog:
  - New upstream release
  - add my -quoting patch, to fix swat with strings that contain
    html meta-characters, and to use correct quote characters in
    lists, closing bz#134310
  - include the upstream winbindd_2k3sp1 patch
  - include the -smbclient patch.
  - include the -hang patch from upstream.


author: Jay Fenlason <fenlason@redhat.com> 3.0.14a-2
changelog:
  - New upstream release.
  - the -64bit-timestamps, -clitar, -establish_trust, user_rights_v1,
    winbind_find_dc_v2 patches are now obsolete.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20-2
changelog:
  - New upstream release
    Includes five upstream patches -bug3010_v1, -groupname_enumeration_v3,
      -regcreatekey_winxp_v1, -usrmgr_groups_v1, and -winbindd_v1
    This obsoletes the -pie and -delim patches
    the -warning and -gcc4 patches are obsolete too
    The -man, -passwd, and -smbspool patches were updated to match 3.0.20pre1
    Also, the -quoting patch was implemented differently upstream
    There is now a umount.cifs executable and manpage
    We run autogen.sh as part of the build phase
    The testprns command is now gone
    libsmbclient now has a man page
  - Include -bug106483 patch to close
    bz#106483 smbclient: -N negates the provided password, despite documentation
  - Added the -warnings patch to quiet some compiler warnings.
  - Removed many obsolete patches from CVS.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20b-2
changelog:
  - turn on -DLDAP_DEPRECATED to allow access to ldap functions that have
    been depricated in 2.3.11, but which don't have well-documented
    replacements (ldap_simple_bind_s(), for example).
  - Upgrade to 3.0.20b, which includes all the previous upstream patches.
  - Updated the -warnings patch for 3.0.20a.
  - Include  --with-shared-modules=idmap_ad,idmap_rid to close
    bz#156810 --with-shared-modules=idmap_ad,idmap_rid
  - Include the new samba.pamd from Tomas Mraz (tmraz@redhat.com) to close
    bz#170259 pam_stack is deprecated


author: Jay Fenlason <fenlason@redhat.com> 3.0.21b-2
changelog:
  - New upstream version.
  - Since the rawhide kernel has dropped support for smbfs, remove smbmount
    and smbumount.  Users should use mount.cifs instead.
  - Upgrade to 3.0.21b


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-0.RC3
changelog:
  - New upstream RC release.
  - Update the -logfiles, and -passwd patches for
    3.0.23rc3
  - Include the change to smb.init from Bastien Nocera <bnocera@redhat.com>)
    to close
    bz#182560 Wrong retval for initscript when smbd is dead
  - Update this spec file to build with 3.0.23rc3
  - Remove the -install.mount.smbfs patch, since we don't install
    mount.smbfs any more.


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-2
changelog:
  - New upstream release.
  - Use modified filter-requires-samba.sh from packaging/RHEL/setup/
    to get rid of bogus dependency on perl(Unicode::MapUTF8)
  - Update the -logfiles and -smb.conf patches to work with 3.0.23


author: Jay Fenlason <fenlason@redhat.com> 3.0.23a-3
changelog:
  - Fix the -logfiles patch to close
    bz#199607 Samba compiled with wrong log path.
    bz#199206 smb.conf has incorrect log file path


author: Simo Sorce <ssorce@redhat.com> 3.0.24-2.fc7
changelog:
  - New upstream release
  - Fix packaging issue wrt idmap modules used only by smbd
  - Addedd Vista Patchset for compatibility with Windows Vista
  - Change default of "msdfs root", it seem to cause problems with
    some applications and it has been proposed to change it for
    3.0.25 upstream


author: Simo Sorce <ssorce@redhat.com> 3.0.24-3.fc7
changelog:
  - Directories reorg, tdb files must go to /var/lib, not
    to /var/cache, add migration script in %post common
  - Split out libsmbclient, devel and doc packages
  - Remove libmsrpc.[h|so] for now as they are not really usable
  - Remove kill -HUP from rotate, samba use -HUP for other things
    noit to reopen logs


author: Simo Sorce <ssorce@redhat.com> 3.0.24-5.fc7
changelog:
  - actually use the correct samba.pamd file not the old samba.pamd.stack file
  - fix logifles and use upstream convention of log.* instead of our old *.log
    Winbindd creates its own log.* files anyway so we will be more consistent
  - install our own (enhanced) default smb.conf file
  - Fix pam_winbind acct_mgmt PAM result code (prevented local users from
    logging in). Fixed by Guenther.
  - move some files from samba to samba-common as they are used with winbindd
    as well


author: Simo Sorce <ssorce@redhat.com> 3.0.24-6.fc7
changelog:
  - do not put comments inline on smb.conf options, they may be read
    as part of the value (for example log files names)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-7.fc7
changelog:
  - make winbindd start earlier in the init process, at the same time
    ypbind is usually started as well
  - add a sepoarate init script for nmbd called nmb, we need to be able
    to restart nmbd without dropping al smbd connections unnecessarily


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - remove patch for bug 106483 as it introduces a new bug that prevents
    the use of a credentials file with the smbclient tar command
  - move the samba private dir from being the same as the config dir
    (/etc/samba) to /var/lib/samba/private


author: Simo Sorce <ssorce@redhat.com> 3.0.24-9.fc7
changelog:
  - integrate most of merge review proposed changes (bug #226387)
  - remove libsmbclient-devel-static and simply stop shipping the
    static version of smbclient as it seem this is deprecated and
    actively discouraged


author: Simo Sorce <ssorce@redhat.com> 3.0.24-10.fc7
changelog:
  - set passdb backend = tdbsam as default in smb.conf
  - remove samba-docs dependency from swat, that was a mistake
  - put back COPYING and other files in samba-common
  - put examples in samba not in samba-docs
  - leave only stuff under docs/ in samba-doc


author: Guenther Deschner <gdeschner@redhat.com> 3.0.24-11.fc7
changelog:
  - enable PAM and NSS dlopen checks during build
  - fix unresolved symbols in libnss_wins.so (bug #198230)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-12.fc7
changelog:
  - fixes in smb.conf
  - advice in smb.conf to put scripts in /var/lib/samba/scripts
  - create /var/lib/samba/scripts so that selinux can be happy
  - fix Vista problems with msdfs errors


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - fixes in the spec file
  - moved to 3.0.25rc1
  - addedd patches (merged upstream so they will be removed in 3.0.25rc2)


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - update to 3.0.25a as it contains many fixes
  - add a fix for pam_smbpass made by Günther but committed upstream after 3.0.25a was cut.


author: Simo Sorce <ssorce@redhat.com> 3.2.0-0.pre1.fc9
changelog:
  - New major relase, minor switched from 0 to 2
  - License change, the code is now GPLv3+
  - Numerous improvements and bugfixes included
  - package libsmbsharemodes too
  - remove smbldap-tools as they are already packaged separately in Fedora
  - Fix bug 245506


author: Simo Sorce <ssorce@redhat.com> - 3.2.0-0.pre1.3
changelog:
  - Try to fix GCC 4.3 build
  - Add --with-dnsupdate flag and also make sure other flags are required just to
    be sure the features are included without relying on autodetection to be
    successful


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.0-0.25
changelog:
  - Update to 3.3.0 final
  - Add upstream fix for ldap connections to AD (Bug #6073)
  - Remove bogus perl dependencies (resolves: #473051)


author: Simo Sorce <ssorce@redhat.com> - 3.3.1-0.29
changelog:
  - Make the talloc and ldb packages optionsl and disable their build within
    the samba3 package, they are now built as part of the samba4 package
    until they will both be released as independent packages.


author: Simo Sorce <ssorce@redhat.com> - 3.3.2-0.33
changelog:
  - Fix nmbd init script nmbd reload was causing smbd not nmbd to reload the
    configuration
  - Fix upstream bug 6224, nmbd was waiting 5+ minutes before running elections on
    startup, causing your own machine not to show up in the network for 5 minutes
    if it was the only client in that workgroup (fix committed upstream)


author: Guenther Deschner <gdeschner@redhat.com> - 3.4.0-0.41
changelog:
  - Fix Bug #6551 (vuid and tid not set in sessionsetupX and tconX)
  - Specify required talloc and tdb version for BuildRequires


author: Simo Sorce <ssorce@redhat.com> - 3.4.2-47
changelog:
  - Spec file cleanup
  - Fix sources upstream location
  - Remove conditionals to build talloc and tdb, now they are completely indepent
    packages in Fedora
  - Add defattr() where missing
  - Turn all tabs into 4 spaces
  - Remove unused migration script
  - Split winbind-clients out of main winbind package to avoid multilib to include
    huge packages for no good reason


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.3-60
changelog:
  - Update to 3.5.3
  - Make sure nmb and smb initscripts return LSB compliant return codes
  - Fix winbind over ipv6


author: Andreas Schneider <asn@redhat.com> - 2:3.6.5-88
changelog:
  - Move tmpfiles.d config to common package as it is needed for smbd and
    winbind.
  - Make sure tmpfiles get created after installation.


author: Ville Skyttä <ville.skytta@iki.fi> - 2:3.6.6-92
changelog:
  - Call ldconfig at libwbclient and -winbind-clients post(un)install time.
  - Fix empty localization files, use %find_lang to find and %lang-mark them.
  - Escape macros in %changelog.
  - Fix source tarball URL.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.0-154.rc3
changelog:
  - Update to 4.0.0rc3.
  - resolves: #805562 - Unable to share print queues.
  - resolves: #863388 - Unable to reload smbd configuration with systemctl.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.0-160.rc3
changelog:
  - resolves: #867893 - Move /var/log/samba to samba-common package for
                        winbind which requires it.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.2-1
changelog:
  - Update to Samba 4.0.2.
  - Fixes CVE-2013-0213.
  - Fixes CVE-2013-0214.
  - resolves: #906002
  - resolves: #905700
  - resolves: #905704
  - Fix conn->share_access which is reset between user switches.
  - resolves: #903806
  - Add missing example and make sure we don't introduce perl dependencies.
  - resolves: #639470


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.3-1
changelog:
  - Update to Samba 4.0.3.
  - resolves: #907544 - Add unowned directory /usr/lib64/samba.
  - resolves: #906517 - Fix pidl code generation with gcc 4.8.
  - resolves: #908353 - Fix passdb backend ldapsam as module.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.4-3
changelog:
  - resolves: #919405 - Fix and improve large_readx handling for broken clients.
  - resolves: #924525 - Don't use waf caching.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.5-1
changelog:
  - Update to Samba 4.0.5.
  - Add UPN enumeration to passdb internal API (bso #9779).
  - resolves: #928947 - samba-doc is obsolete now.
  - resolves: #948606 - LogRotate should be optional, and not a hard "Requires".


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.7-2
changelog:
  - resolves: #972692 - Build with PIE and full RELRO.
  - resolves: #884169 - Add explicit dependencies suggested by rpmdiff.
  - resolves: #981033 - Local user's krb5cc deleted by winbind.
  - resolves: #984331 - Fix samba-common tmpfiles configuration file in wrong
                        directory.


author: - Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.2
changelog:
  - resolves: #985985 - Fix file conflict between samba and wine.
  - resolves: #985107 - Add support for new default location for Kerberos
                        credential caches.


author: - Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.7
changelog:
  - related: #985609 - Update to Samba 4.1.0rc3.
  - resolves: #1005422 - Add support for KEYRING ccache type in pam_winbindd.


author: - Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.8
changelog:
  - related: #985609 - Update to Samba 4.1.0rc4.
  - resolves: #1014656 - Split out a samba-winbind-modules package.


author: - Andreas Schneider <asn@redhat.com> - 4.1.0-4
changelog:
  - related: #884169 - Add direct dependency to samba-libs in the
                       glusterfs package.
  - resolves: #996567 - Fix userPrincipalName composition.
  - related: #884169 - Fix memset call with zero length in in ntdb.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-4
changelog:
  - resolves: #1034048 - Fix group name substitution in template homedir.
  - resolves: #1018041 - Fix CVE-2013-4408.
  - related: #884169 - Fix several covscan warnings.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-9
changelog:
  - resolves: #1033122 - Fix dropbox regression.
  - resolves: #1040464 - Fix %G substituion for config parameters.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-12
changelog:
  - resolves: #1050886 - Fix full CPU utilization in winbindd.
  - resolves: #1051400 - Fix segfault in smbd.
  - resolves: #1051402 - Fix SMB2 server panic when a smb2 brlock times out.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-17
changelog:
  - resolves: #1067606 - Fix wbinfo with one-way trust.
  - resolves: #1069569 - Fix memory leak reading the printer list.


author: - Alexander Bokovoy <abokovoy@redhat.com> - 4.1.1-30
changelog:
  - resolves: #1083859  - Force KRB5CCNAME in Samba systemd units.
  - related: #1082598 - Fully enables systemd integration.


author: - Guenther Deschner <gdeschner@redhat.com> - 4.1.1-34
changelog:
  - resolves: #1105505 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1108845 - CVE-2014-3493: DoS in smbd with unicode path names.
  - resolves: #1105574 - CVE-2014-0178: Uninitialized memory exposure.


author: - Andreas Schneider <asn@redhat.com> - 4.1.1-37
changelog:
  - resolves: #1072352 - Make pidl a noarch subpackage.
  - resolves: #1133516 - Create a samba-test-libs package.
  - resolves: #1132873 - Add support to rebuild without clustering.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-2
changelog:
  - resolves: #1138554 - Fix consuming a lot of CPU when re-reading printcap info.
  - resolves: #1134323 - Fix running Samba on little endian Power8 (ppc64le).
  - resolves: #1113064 - Fix case sensitivity options with SMB2 protocols.
  - resolves: #1088924 - Fix applying ACL masks when setting ACLs.
  - resolves: #1135723 - Fix 'force user' regression.
  - resolves: #1117770 - Fix empty full_name field with samlogon.
  - resolves: #1101210 - Fix telling systemd that nmbd is waiting for interfaces.
  - resolves: #1127931 - Fix getgroups() with idmap_ad returning non-mapped groups.
  - resolves: #1144963 - Fix idmap_ad with SFU against trusted domains.
  - resolves: #1140568 - Fix a segfault in the smbclient echo command.
  - resolves: #1089940 - Improve service principal guessing in 'net ads'.
  - resolves: #955561 - Fix overwriting of SPNs in AD during 'net ads join'.
  - resolves: #955562 - Add precreated SPNS from AD during keytab initialization.


author: - Guenther Deschner <gdeschner@redhat.com> - 4.1.12-3
changelog:
  - resolves: #878351 - Fix usage of AES keys by default.
  - resolves: #861366 - Fix KRB5 locator to use same KDC for joining and DNS update.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-9
changelog:
  - resolves: #1162552 - Fix net ads join segfault on big endian systems.
  - resolves: #1164203 - Fix net ads join segfault with existing keytab.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-11
changelog:
  - resolves: #1163748 - Fix smbclient -L fails against new Windows versions
                         over TCP.
  - resolves: #1167849 - Fix smbstatus --profile always returning EXIT_FAILURE.


author: - Andreas Schneider <asn@redhat.com> - 4.1.12-13
changelog:
  - resolves: #1172089 - Fix 'net rpc join' with schannel changes.
  - resolves: #1170883 - Fix 'net time system' segfault.


author: Andreas Schneider <asn@redhat.com> - 4.2.2-1
changelog:
  - resolves: #1196140 - Rebase Samba to version 4.2.2
  - resolves: #1186403 - Split patches to fix multiarch conflicts
  - resolves: #1167325 - Retrieve printer GUID from AD if it is not in the
                         registry
  - resolves: #1220174 - Fix issues with winbind library dependencies
  - resolves: #1211658 - Fix stale cache entries on printer rename
  - resolves: #1228809 - Fix reconnect on session exparation


author: Andreas Schneider <asn@redhat.com> - 4.2.2-2
changelog:
  - related: #1196140 - Add missing build dependency for libarchive
  - related: #1196140 - Make sure we do a hardened build


author: Andreas Schneider <asn@redhat.com> - 4.2.3-1
changelog:
  - related: #1196140 - Rebase to version 4.2.3
  - resolves: #1237036 - Fix DCERPC PDU calculation
  - resolves: #1237039 - Fix winbind request cancellation
  - resolves: #1223981 - Fix possible segfault with smbX protocol setting


author: Andreas Schneider <asn@redhat.com> - 4.2.3-2
changelog:
  - resolves: #1238194 - Fix the 'dfree command'
  - resolves: #1216062 - Document netbios name length limitation


author: Andreas Schneider <asn@redhat.com> - 4.2.3-6
changelog:
  - resolves: #1255322 - Fix 'map to guest = Bad uid' option
  - resolves: #1255326 - Fix segfault with 'mangling method = hash'


author: Andreas Schneider <asn@redhat.com> - 4.2.3-9
changelog:
  - resolves: #1273912 - Fix dependencies to samba-common
  - resolves: #1273393 - Fix user after free in smb name resolution


author: Guenther Deschner <gdeschner@redhat.com> - 4.2.3-11
changelog:
  - resolves: #1290711
  - CVE-2015-3223 Remote DoS in Samba (AD) LDAP server
  - CVE-2015-5299 Missing access control check in shadow copy code
  - CVE-2015-5252 Insufficient symlink verification in smbd
  - CVE-2015-5296 Samba client requesting encryption vulnerable to
                  downgrade attack


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.10-7
changelog:
  - Fix regressions introduced with security tightening as part of Badlock release
  - resolves: #1330199


author: Andreas Schneider <asn@redhat.com> - 4.4.4-1
changelog:
  - resolves: #1303076 - Rebase Samba to version 4.4.4
  - resolves: #1314673 - Fix CVE-2015-7560
  - resolves: #1263322 - Add '--no-dns-updates' option to 'net ads join'
  - resolves: #1264433 - Fix segfault in pam_winbind.so with invalid config
                         options
  - resolves: #1193504 - Fix smbget to retrieve files recursively
  - resolves: #1193502 - Fix smbget to use command line credentials
  - resolves: #1193493 - Fix smbget url credentials parsing
  - resolves: #1273999 - Support printing with Kerberos credentials on newer
                         CUPS versions
  - resolves: #1296821 - Define /etc/pam.d/samba as a non replaceable config
  - resolves: #1261107 - Fix memory leak because of missing talloc stackframe
  - resolves: #1333562 - Fix memory leak after smbc_free_context()
  - resolves: #1315422 - Fix regression from CVE-2015-5252
  - resolves: #1316899 - Fixed idmap_hash module issues when used with others
  - resolves: #1322691 - Fix badlock related bugs
  - Fix CVE-2015-5370
  - Fix CVE-2016-2110
  - Fix CVE-2016-2111
  - Fix CVE-2016-2112
  - Fix CVE-2016-2113
  - Fix CVE-2016-2114
  - Fix CVE-2016-2115
  - Fix CVE-2016-2118
  - resolves: #1327951 - Fix regression with anonymous connections from OS X
  - resolves: #1327845 - Fix pcap_cache_reload() with spoolssd
  - resolves: #1289640 - Fix ctdb selinux issue with read only tracking dbs
  - resolves: #1341208 - Fix enumerating groups over NSS with idmap_ad
  - resolves: #1345827 - Fix resolving trusted domain users on domain member
  - resolves: #1346334 - Fix typo in smb.conf.example
  - resolves: #1335292 - Fix site-aware 'net ads join -k'
  - resolves: #1260214 - Accept empty realm for ad domains with 'security=domain'


author: Andreas Schneider <asn@redhat.com> - 4.4.4-3
changelog:
  - related: #1260214 - Correctly warn about missing realm for ad domains
                        with 'security=domain'


author: Andreas Schneider <asn@redhat.com> - 4.4.4-4
changelog:
  - resolves: #1351655 - Fix winbind meomory leak with each cached credentials
                         login
  - resolves: #1351961 - Fix CVE-2016-2119


author: Andreas Schneider <asn@redhat.com> - 4.4.4-5
changelog:
  - resolves: #1359091 - Package /usr/lib/samba/ldb in the common-libs package
  - resolves: #1360788 - Fix multilib issue with ctdb-tests package
  - resolves: #1362385 - Fix Samba ignoring supplementary groups
  - resolves: #1364051 - Fix smbd panic with stale ctdb entries


author: Andreas Schneider <asn@redhat.com> - 4.4.4-6
changelog:
  - resolves: #1367316 - Increase required Kerbersion version number
  - resolves: #1366477 - Fix using the right krb5 ccache in libads
  - resolves: #1356501 - Fix high CPU usage with smbclient connection to
                         non-reachable IP


author: Andreas Schneider <asn@redhat.com> - 4.4.4-10
changelog:
  - resolves: #1377690 - Fix linking nss_wins with libreplace
  - resolves: #1377729 - Fix nss_wins function definitions for gethostbyname*
  - resolves: #1377307 - Fix %G substitution in AD case
  - resolves: #1377751 - Fix regression of smbclient unable to connect to
                         Apple and Azure


author: Andreas Schneider <asn@redhat.com> - 4.6.0-0.1.rc3
changelog:
  - resolves: #1391954 - Update to Samba 4.6.0rc3
  - resolves: #1271082 - Wrong groups listed when id command is called before login
  - resolves: #1327810 - Use 'printcap cache time' for the house keeping interval
  - resolves: #1356932 - Improve documentation for 'ldap ssl' in smb.conf manpage
  - resolves: #1365111 - Fix printer removal if "List in Directory" checkbox is
                         unticked and printer is not listed in AD
  - resolves: #1368439 - Fix ntlm_auth wrong password issues
  - resolves: #1397871 - Include the system krb5.conf in winbinds generated conf
  - resolves: #1397891 - Fix marsalling of spoolss SetPrinter info level 2
  - resolves: #1397895 - Add missing support APD_COPY_FROM_DIRECTORY in
                         AddPrinterDriver
  - resolves: #1403242 - Samba can not access trusted domains through transitive
                         trusts
  - resolves: #1403975 - Fix trusted domain logins
  - resolves: #1411978 - Include the system krb5.conf in winbinds generated conf
  - resolves: #1416746 - Fix division by zero error in ctdb 05.system event script


author: Andreas Schneider <asn@redhat.com> - 4.6.0-0.1.rc4
changelog:
  - related: #1391954 - Update to Samba 4.6.0rc4
  - resolves: #1420130 - samba_krb5_wrapper does not list devices when called with
                         no arguments
  - resolves: #1277999 - Change RPC port range to Windows defaults


author: Andreas Schneider <asn@redhat.com> - 4.6.0-1
changelog:
  - related: #1391954 - Update to Samba 4.6.0
  - resolves: #1401505 - Improved idmap_hash documentation
  - resolves: #1218926 - Samba ignores default_keytab_name in krb5.conf
  - resolves: #1389786 - Add 'net ads dns unregister'


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.6.0-3
changelog:
  - Ensure we set realm when updating ccache in auth/credentials
  - resolves: #1430759 - use GSSAPI gss_acquire_cred_from call for gssproxy support


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.6.0-4
changelog:
  - Export internal arcfour_crypt_blob in Python as samba.arcfour_encrypt
  - related: #1391954 - Update to Samba 4.6.0


author: Andreas Schneider <asn@redhat.com> - 4.6.0-5
changelog:
  - related: #1391954 - Fix kerberos cross-realm referrals
  - resolves: #1430755 - Fix 'net ads' keytab handling


author: Andreas Schneider <asn@redhat.com> - 4.6.2-7
changelog:
  - resolves: #1461336 - Fix smbclient username parsing
  - resolves: #1460937 - Fix username normalization with winbind


author: Andreas Schneider <asn@redhat.com> - 4.6.2-10
changelog:
  - resolves: #1484423 - Require at least krb5 version 1.15.1
  - resolves: #1484713 - Fix password changes for users via smbpasswd
  - resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                         returned errors


author: Horst H. von Brand <vonbrand@inf.utfsm.cl>
changelog:
  - Redid the description
  - Cut overlong make line, loosened changelog a bit
  - I think Junio (or perhaps OSDL?) should be vendor...


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.99.4-3
changelog:
  - use dist tag to differentiate between branches
  - use rpm optflags by default (patch0)
  - own %{_datadir}/git-core/


author: Chris Wright <chrisw@osdl.org> 0.99.4-4
changelog:
  - drop sh_utils, sh-utils, diffutils, mktemp, and openssl Requires
  - use RPM_OPT_FLAGS in spec file, drop patch0


author: H. Peter Anvin <hpa@zytor.com> 0.99.9j-1
changelog:
  - Change subpackage names to git-<name> instead of git-core-<name>
  - Create empty root package which brings in all subpackages
  - Rename git-tk -> gitk


author: Chris Wright <chrisw@redhat.com> 1.1.0-1
changelog:
  - Update to latest git-1.1.0 (drop git-email for now)
  - Now creates multiple packages:
  -        git-core, git-svn, git-cvs, git-arch, gitk


author: Josh Boyer <jwboyer@gmail.com> 1.5.3.6-1
changelog:
  - git-1.5.3.6
  - git-core requires perl(Error) (bug 367861)
  - git-svn requires perl(Term:ReadKey) (bug 261361)
  - git-email requires perl-Git (bug 333061)


author: Jeremy Katz <katzj@redhat.com> - 1.5.4.1-2
changelog:
  - Add upstream patch (e62a641de17b172ffc4d3a803085c8afbfbec3d1) to have 
    gitweb rss feeds point be commitdiffs instead of commit


author: James Bowes <jbowes@redhat.com> 1.5.4.4-3
changelog:
  - Include the sample hooks from contrib/hooks as docs (bug 321151).
  - Install the bash completion script from contrib (bug 433255).
  - Include the html docs in the 'core' package again (bug 434271).


author: Josh Boyer <jwboyer@gmail.com> 1.6.0.3-1
changelog:
  - git-1.6.0.3
  - Drop curl requirement in favor of libcurl (bug 449388)
  - Add requires for SMTP-SSL perl module to make git-send-email work (bug 443615)


author: Todd Zullinger <tmz@pobox.com> 1.6.0.6-1
changelog:
  - git-1.6.0.6
  - Fixes a local privilege escalation bug in gitweb
    (http://article.gmane.org/gmane.comp.version-control.git/103624)
  - Add gitk Requires to git-gui (bug 476308)


author: Todd Zullinger <tmz@pobox.com> 1.6.1-1
changelog:
  - Install git-* commands in %{_libexecdir}/git-core, the upstream default
  - Remove libcurl from Requires, rpm will pick this up automatically
  - Consolidate build/install options in %make_git (Roland McGrath)
  - Include DirectoryIndex in gitweb httpd-config (bug 471692)
  - Define DOCBOOK_XSL_172 to fix minor manpage issues
  - Rename %{_var}/lib/git-daemon to %{_var}/lib/git
  - Preserve timestamps on installed files
  - Quiet some rpmlint complaints
  - Use macros more consistently


author: Todd Zullinger <tmz@pobox.com> 1.6.1.3-1
changelog:
  - git-1.6.1.3
  - Set htmldir so "git help -w <command>" works
  - Patch git-web--browse to not use "/sbin/start" to browse
  - Include git-daemon documentation in the git-daemon package


author: Todd Zullinger <tmz@pobox.com> - 1.6.1.3-2
changelog:
  - Require perl(Authen::SASL) in git-email (bug 483062)
  - Build many of the subpackages as noarch
  - Update URL field


author: Todd Zullinger <tmz@pobox.com> - 1.6.2-1
changelog:
  - git-1.6.2
  - Include contrib/emacs/README in emacs subpackage
  - Drop upstreamed git-web--browse patch


author: Todd Zullinger <tmz@pobox.com> - 1.6.2.2-1
changelog:
  - git-1.6.2.2
  - Include contrib/ dir in %doc (bug 492490)
  - Don't set DOCBOOK_XSL_172, fix the '\&.ft' with sed (bug 485161)
  - Ignore Branches output from cvsps-2.2b1 (bug 490602)
  - Remove shebang from bash-completion script
  - Include README in gitweb subpackage


author: Todd Zullinger <tmz@pobox.com> - 1.6.3.2-1
changelog:
  - git-1.6.3.2
  - Require emacs >= 22.2 for emacs support (bug 495312)
  - Add a .desktop file for git-gui (bug 498801)
  - Set ASCIIDOC8 and ASCIIDOC_NO_ROFF to correct documentation issues,
    the sed hack to fix bug 485161 should no longer be needed
  - Escape newline in git-daemon xinetd description (bug 502393)
  - Add xinetd to git-daemon Requires (bug 504105)
  - Organize BuildRequires/Requires, drop redundant expat Requires
  - Only build noarch subpackages on Fedora >= 10
  - Only build emacs and arch subpackages on Fedora
  - Handle curl/libcurl naming for EPEL and Fedora


author: Todd Zullinger <tmz@pobox.com> - 1.6.3.3-1
changelog:
  - git-1.6.3.3
  - Move contributed hooks to %{_datadir}/git-core/contrib/hooks (bug 500137)
  - Fix rpmlint warnings about Summary and git-mergetool--lib missing shebang


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.2-1
changelog:
  - git-1.6.5.2
  - Drop asciidoc --unsafe option, it should not be needed anymore
  - Don't use install -t/-T, they're not compatible with older coreutils
  - Don't use -perm /a+x with find, it's incompatible with older findutils


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.3-1
changelog:
  - git-1.6.5.3
  - Only BR perl(Error) on Fedora and RHEL >= 5
  - Use config.mak to set build options
  - Improve compatibility with EPEL
  - Replace $RPM_BUILD_ROOT with %{buildroot}
  - Fix Obsoletes for those rebuilding on EL-4


author: Todd Zullinger <tmz@pobox.com> - 1.6.6.1-1
changelog:
  - git-1.6.6.1
  - Use %{gitcoredir}/git-daemon as xinetd server option, for SELinux (#529682)
  - Make %{_var}/lib/git the default gitweb projectroot (#556299)
  - Include gitweb/INSTALL file as documentation, the gitweb README refers to it
  - Ship a short example gitweb config file (%{_sysconfdir}/gitweb.conf)
  - Remove long fixed xinetd IPv6 workaround on Fedora (#557528)
  - Install missing gitweb.js (#558740)


author: Todd Zullinger <tmz@pobox.com> - 1.7.0-1
changelog:
  - git-1.7.0
  - Link imap-send with libcrypto (#565147)
  - Disable building of unused python remote helper libs


author: Todd Zullinger <tmz@pobox.com> - 1.7.1-1
changelog:
  - git-1.7.1
  - Fix conditionals for EL-6
  - Comply with Emacs add-on packaging guidelines (#573423), Jonathan Underwood
    - Place elisp source files in separate emacs-git-el package
    - Place git support files in own directory under site-lisp
    - Use Emacs packaging macros


author: Todd Zullinger <tmz@pobox.com> - 1.7.4.1-1
changelog:
  - Update to 1.7.4.1
  - Clean up documentation settings (the defaults changed in 1.7.4)
  - Improve EL-5 compatibility, thanks to Kevin Fenzi for emacs testing


author: Adam Tkac <atkac redhat com> - 1.7.4.2-1
changelog:
  - update to 1.7.4.2
  - move man3/Git.3pm file to perl-Git subpkg (#664889)
  - add perl-DBD-SQLite dependency to git-cvs (#602410)


author: Todd Zullinger <tmz@pobox.com> - 1.7.6-4
changelog:
  - Drop git-arch on fedora >= 16, the tla package has been retired
  - Rework most spec file dist conditionals to make future changes easier


author: Todd Zullinger <tmz@pobox.com> - 1.7.6.2-1
changelog:
  - Update to 1.7.6.2
  - Fixes incompatibility caused by git push --quiet fix
    http://thread.gmane.org/gmane.comp.version-control.git/180652


author: Adam Tkac <atkac redhat com> - 1.8.0-1
changelog:
  - update to 1.8.0
  - include git-credential-gnome-keyring helper in git pkg
  - 0001-cvsimport-strip-all-inappropriate-tag-strings.patch was merged


author: Todd Zullinger <tmz@pobox.com> - 1.8.1.4-2
changelog:
  - Update asciidoc requirements, drop unsupported ASCIIDOC7
  - Define GNU_ROFF to force ASCII apostrophes in manpages (so copy/paste works)
  - Install tcsh completion (requires manual setup by users)
  - Clean up dist conditionals, don't pretend to support EL-4 builds
  - Use prebuilt documentation on EL-5, where asciidoc is too old
  - Respect gitexecdir variable in git-subtree install


author: Todd Zullinger <tmz@pobox.com> - 1.8.2-2
changelog:
  - Require perl(Term::ReadKey) for git add --interactive (#928328)
  - Drop DESTDIR from python instlibdir
  - Fix bogus changelog dates


author: Petr Stodulka <pstodulk@redhat.com> -1.8.3.1-9
changelog:
  - add control of GSSAPI credential delegation to enable HTTP(S)-SSO
    authentication
    Resolves: #1369173


author: Jonathan Shapiro <shap@eros-os.com> - 0.9.4-2
changelog:
  - update to 0.9.4-2
  - install contrib directory
  - set up required path for hgk
  - install man5 man pages


author: Neal Becker <ndbecker2@gmail.com> - 1.0-5
changelog:
  - Move hgk-related py files to hgk
  - Put mergetools.hgrc in /etc/mercurial/hgrc.d
  - Add hgk.rc and put in /etc/mercurial/hgrc.d


author: Neal Becker <ndbecker2@gmail.com> - 1.0-12
changelog:
  - Remove xemacs pkg - this is moved to xemacs-extras
  - Own /usr/lib64/python2.7/site-packages/{mercurial,hgext} dirs


author: Neal Becker <ndbecker2@gmail.com> - 1.1.2-5
changelog:
  - Own directories bash_completion.d and zsh/site-functions
    https://bugzilla.redhat.com/show_bug.cgi?id=487015


author: Kristian Høgsberg <krh@redhat.com> 0.3.4-1
changelog:
  - New upstream version again.
  - Add nautilus property page .so's.
  - Stop scrollkeeper from doing what it does.


author: Kristian Høgsberg <krh@redhat.com> 0.5.0-2
changelog:
  - Spec file update from Brian Pepple <bdpepple@ameritech.net> (#123527):
    - Drop Requires for gtk2 & poppler, devel soname pulls these in.
    - Disable GConf schema install in install section.
    - Add BR for gnome-doc-utils, nautilus & libXt-devel.
    - Use smp_mflags.
    - Drop BR for desktop-file-utils,gcc & gcc-c++.
    - Add URL & full source.
    - Use more macros.
    - Fix ownership of some directories.
    - Drop depreciated prereq, and use requires.
    - Use fedora extras preferred buildroot.
    - Various formatting changes.


author: Kristian Høgsberg <krh@redhat.com> 0.5.3-1
changelog:
  - Bump poppler_version to 0.5.2.
  - Package icons and add %post and %postun script to update icon cache.


author: Matthias Clasen <mclasen@redhat.com> - 2.20.1-5
changelog:
  - Fix a problem in the tiff patch
  - Turn off the dvi backend for now, since the tetex kpathsea 
    gives linker errors on x86_64


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.27.1-2
changelog:
  - Include /usr/include/evince directory (#483306).
  - Don't run /sbin/ldconfig in post scriptlet (no shared libs in that pkg).
  - Let -libs post/postun run /sbin/ldconfig directly.


author: Marek Kasik <mkasik@redhat.com> - 2.29.91-2
changelog:
  - Use Type 1 fonts when viewing DVI files
  - Use correct name when the font is mapped
  - Related: #562648


author: Marek Kasik <mkasik@redhat.com> - 2.30.0-6
changelog:
  - rpmlint related changes:
  -   Don't define RPATH
  -   Remove static libs
  -   Avoid expansion of some macros in changelog


author: Marek Kasik <mkasik@redhat.com> - 2.30.1-2
changelog:
  - Make sure dot_dir exists before creating last_settings file
  - backported from upstream
  - Related: #586343


author: Marek Kasik <mkasik@redhat.com> - 2.31.3-5.20100621git
changelog:
  - Don't try to install evince.schemas file (it doesn't exist anymore)
  - Remove unused patches
  - Resolves: #595217


author: Marek Kasik <mkasik@redhat.com> - 2.31.5-3
changelog:
  - Move %doc files to evince-libs subpackage
  -   see Subpackage Licensing in Packaging:LicensingGuidelines


author: Marek Kasik <mkasik@redhat.com> - 2.31.5-4
changelog:
  - Restore io mode when returning from opening of synctex file
  - Patch by David Tardon
  - Resolves: #613916


author: Marek Kasik <mkasik@redhat.com> - 2.31.5-5
changelog:
  - Don't sigsegv when a page is manually entered
  - Remove 0001-pdf-Fix-build-when-text_layout-is-not-available.patch


author: Marek Kasik <mkasik@redhat.com> - 2.91.1-1
changelog:
  - Update to 2.91.1
  - Remove evince-2.91.0-introspection-build-fix.patch
  - Add evince-2.91.1-requires.patch


author: Marek Kasik <mkasik@redhat.com> - 2.91.5-2
changelog:
  - Remove evince-CVE-2010-2640_CVE-2010-2641_CVE-2010-2642_CVE-2010-2643.patch
  - Change the way thumbnailer is integrated with system


author: Marek Kasik <mkasik@redhat.com> - 3.3.5-1
changelog:
  - Update to 3.3.5
  - Remove evince-t1font-mapping.patch (committed upstream)
  - Solve build issues by running autogen.sh


author: Marek Kasik <mkasik@redhat.com> - 3.8.0-2
changelog:
  - Don't remove the NoDisplay key from evince.desktop because
  - it has been already removed
  - Related: gnome#634245


author: Marek Kasik <mkasik@redhat.com> - 3.14.1-6
changelog:
  - Scroll to page on which is the search result selected by user
  - when not in continuous mode.
  - Resolves: #1162254


author: Marek Kasik <mkasik@redhat.com> - 3.15.4-2
changelog:
  - Revert fix of centering of documents when printing with a manual scale.
  - This caused problems with printing of landscape documents.
  - Resolves: #1173832


author: Till Maas <opensource@till.name> - 3.15.90-2
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: David King <amigadave@amigadave.com> - 3.17.4-1
changelog:
  - Update to 3.17.4
  - Update URL
  - Use pkgconfig for BuildRequires
  - Use license for COPYING
  - Update man page glob in files section


author: Marek Grac <mgrac@redhat.com> - 4.0.2-3
changelog:
  - fence_bladecenter: Fix telnet login failure
  - fence_brocade: Rewrite to fencing library
  - fencing_snmp: Fix 'KeyError --a'
  - fence_scsi: Fix XML metadata
  - fence_scsi: Add a documentation of "delay"
  - fence_ilo2: Unable to login when password contains "


author: Marek Grac <mgrac@redhat.com> - 4.0.2-4
changelog:
  - fence_vmware_soap: Disable cache in SUDS library to resolve SELinux problems
    Resolves: rhbz#1022528
  - fencing: Add information that operation 'unfence' should be run automatically after start of the cluster
    Resolves: rhbz#1012994
  - Aligned to upstream 4.0.4


author: Marek Grac <mgrac@redhat.com> - 4.0.2-5
changelog:
  - fence_vmware_soap: Report if user privileges are not enough for given operation
    Resolves: rhbz#1018780
  - fence_wti: Add support for named groups
    Resolves: rhbz#1022536
  - fence_rsb: Update regular expression to match newer firmware version
    Resolves: rhbz#1022538


author: Marek Grac <mgrac@redhat.com> - 4.0.2-6
changelog:
  - fencing: Ensure validity of XML metadata using Relax NG 
    Resolves: rhbz#1022529
  - fencing: Fix invalid use of options[".."]
    Resolves: rhbz#1022533
  - fence_brocade: Add fence agent
    Resolves: rhbz#1021392


author: Marek Grac <mgrac@redhat.com> - 4.0.2-8
changelog:
  - fence-agents-all now includes fence-virt which is not available everywhere
    Resolves: rhbz#1028940


author: Marek Grac <mgrac@redhat.com> - 4.0.2-10
changelog:
  - fix default action for fabric fencing agents
    Resolves: rhbz#1021392
  - modify key generation in fence_scsi to support pacemaker/corosync cluster
    Resolves: rhbz#994466


author: Marek Grac <mgrac@redhat.com> - 4.0.2-13
changelog:
  - fencing: Do not use public key if identity file is not defined
    Resolves: rhbz#1048843
  - fence_vmware_soap: Add support for --delay option
    Resolves: rhbz#1057299
  - fence_wti: Add support for named groups (also for firmware 1.43)
    Resolves: rhbz#1022536


author: Marek Grac <mgrac@redhat.com> - 4.0.2-14
changelog:
  - fence_vmware_soap: Fix unexpected exception
    Resolves: rhbz#1018780
  - nss_wrapper was replaced by gnutls-cli
    Resolves: rhbz#990539


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 4.0.2-17
changelog:
  - Fix fence-agents-* Requires on proper fence-agents-common and silence
    suds error
    Resolves: rhbz#1018780


author: Marek Grac <mgrac@redhat.com> - 4.0.11-1
changelog:
  - rebase of fence agents
    Resolves: rhbz#1120682
  - INFO: fence_scsi_check.pl is now a python script


author: Marek Grac <mgrac@redhat.com> - 4.0.11-5
changelog:
  - fence_wti: Fix problem with EOL introduced by rebase
    Resolves: rhbz#1148762
  - fence_rsb: Fix issue with new firmware 
    Resolves: rhbz#1111597


author: Marek Grac <mgrac@redhat.com> - 4.0.11-6
changelog:
  - fence_cisco_ucs and fence_vmware_soap should logout even in case of failure
    Resolves: rhbz#1111599
  - fence_vmware_soap: Fix issue with import of fail_usage
    Resolves: rhbz#1153059


author: Marek Grac <mgrac@redhat.com> - 4.0.11-9
changelog:
  - fence_ilo_ssh: Fix EOL issue, syslog problem and add fence_ilo_[34]_ssh symlink
    Resolves: rhbz#1121122


author: Marek Grac <mgrac@redhat.com> - 4.0.11-11
changelog:
  - fence_ipmilan: Unset default cipher
    Resolves: rhbz#1203877
  - fence_ilo2: Add --tls1.0
    Resolves: rhbz#1199970
  - update scripts so 'make check' is working again


author: Marek Grac <mgrac@redhat.com> - 4.0.11-13
changelog:
  - fence_scsi: Add monitor operation
    Resolves: rhbz#1213571
  - fence_scsi: Force unfence if any of paths is off
    Resolves: rhbz#1214919
  - fence_cisco_ucs: Fix https:// prefix with --ssl-(in)secure
    Resolves: rhbz#1165591
  - fence_kdump: Add monitor operation
    Resolves: rhbz#1196068
  - fence2rng: Fix problem with quotes
    Resolves: rhbz#1207982


author: Marek Grac <mgrac@redhat.com> - 4.0.11-14
changelog:
  - fence_rhevm: Add authentication via cookies
    Resolves: rhbz#1145769
  - fence_ilo_moonshot: New fence agent
    Resolves: rhbz#1152917
  - fence_emerson: New fence agent
    Resolves: rhbz#1171732
  - fence_rsa: New fence agent
    Resolves: rhbz#1185329


author: Marek Grac <mgrac@redhat.com> - 4.0.11-16
changelog:
  - fence_compute: Agent cleanup
    Resolves: rhbz#1214359
  - fence_hpblade: Add support for HP Integrity Superdome
    Resolves: rhbz#1216997
  - fence_zvmip: Add --missing-as-off and change monitor/status actions
    Resolves: rhbz#1188750
  - fence_mpath: new fence agent
    Resolves: rhbz#1102727
  - fencing: Option --port-as-ip
    Resolves: rhbz#1214522


author: Marek Grac <mgrac@redhat.com> - 4.0.11-18
changelog:
  - fence_rsa: Fix login issue
    Resolves: rhbz#1185329
  - fencing: support for list-status
    Resolves: rhbz#1250586
  - fencing: Fix support for --port-as-ip
    Resolves: rhbz#1214522


author: Marek Grac <mgrac@redhat.com> - 4.0.11-21
changelog:
  - fence_mpath: Fix unfencing after non-cluster reboot
    Resolves: 1102727
  - manual pages now describe 'list-status' properly

  bz1102727-3-fence_mpath.patch bz1250586-2-list_status.patch


author: Marek Grac <mgrac@redhat.com> - 4.0.11-24
changelog:
  - fence_ipmilan: Add removed attributes -i & timeout
    Resolves: rhbz#1257137
  - fence_ipmilan: Do not print password in verbose mode
    Resolves: rhbz#1241648
  - fence_ilo: Negotiation of TLS1.0 is more automatic
    Resolves: rhbz#1256908


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-34
changelog:
  - fence_virsh: add --missing-as-off
    Resolves: rhbz#1254821
  - fence_ipmilan: fix power_wait regression
    Resolves: rhbz#1275250
  - fence_ipmilan: add diag action
    Resolves: rhbz#1286045
  - fence_ipmilan: warn that cycle method can report success before node
    is powered off
    Resolves: rhbz#1271780
  - fence_scsi: fix persistentl typo in short desc
    Resolves: rhbz#1280139
  - fence_scsi: remove /dev/dm-X reference
    Resolves: rhbz#1280151
  - fence_rhevm: add Filter header
    Resolves: rhbz#1287059
  - fence_amt_ws: new fence agent
    Resolves: rhbz#1296201
  - fence_compute: fix to locate all instances to be evacuated
    Resolves: rhbz#1313561


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-44
changelog:
  - fence_mpath: update info to say unique key per node instead of per
    node/device
    Resolves: rhbz#1280151


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-52
changelog:
  - fence_compute: fix ConnectionError
    Resolves: rhbz#1384073
  - fence_lpar: add IVM support and improve error handling
    Resolves: rhbz#1376481
  - fence_vmware_soap: suppress warning for --ssl-insecure
    Resolves: rhbz#1393962
  - Add support for "s" for seconds for delay, *_timeout, *_wait parameters
    Resolves: rhbz#1377928
  - fence-agents-zvm: add to fence-agents-all dependencies for s390x
    Resolves: rhbz#1255700
  - Build for ppc64le
    Resolves: rhbz#1402566


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-56
changelog:
  - fencing: add validate-all action
    Resolves: rhbz#1433948
  - fence_rhevm: add "--disable-http-filter" to be able to explicitly
    use oVirt API version 3
    Resolves: rhbz#1422499


author: Marek Grac <mgrac@redhat.com> - 4.0.11-57
changelog:
  - Set SELinux booleans required for fence agent integration with cluster
    Resolves: rhbz#1427986
  - Add consistency of parameters between STDIN and command-line
    Resolves: rhbz#1403028


author: Martin Stransky <stransky@redhat.com> - 24.4.0-3
changelog:
  - Added a workaround for Bug 1054242 - RHEVM: Extremely high memory
    usage in Firefox 24 ESR on RHEL 6.5


author: Thomas Woerner <twoerner@redhat.com>
changelog:
  - removed la files, removed devel package
  - split into 4 packages: freeradius, freeradius-mysql, freeradius-postgresql,
      freeradius-unixODBC
  - fixed requires and buildrequires
  - create logging dir in post if it does not exist
  - fixed module load without la files


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.0-2.2
changelog:
  - modify default PAM configuration to remove the directory part of the module
    name, so that 32- and 64-bit libpam (called from 32- or 64-bit radiusd) on
    multilib systems will always load the right module for the architecture
  - modify default PAM configuration to use pam_stack


author: Thomas Woerner <twoerner@redhat.com> 1.0.0-0.pre3.2
changelog:
  - added buildrequires for zlib-devel (#127162)
  - fixed libdir patch to prefer own libeap instead of installed one (#127168)
  - fixed samba account maps in LDAP for samba v3 (#127173)


author: Thomas Woerner <twoerner@redhat.com> 1.0.4-2
changelog:
  - added missing build requires for libtool-ltdl-devel (#160877)
  - modified file list to get a report for missing plugins


author: Thomas Woerner <twoerner@redhat.com> 1.1.1-1
changelog:
  - new version 1.1.1
  - fixed incorrect rlm_sql globbing (#189095)
    Thanks to Yanko Kaneti for the fix.
  - fixed chown syntax in post script (#182777)
  - dropped gcc34, libdir and realloc-return patch
  - spec file cleanup with additional libtool build fixes


author: Karsten Hopp <karsten@redhat.com> 1.1.3-3
changelog:
  - remove trailing dot from summary
  - fix buildroot
  - fix post/postun/preun requirements
  - use rpm macros


author: Thomas Woerner <twoerner@redhat.com> 1.1.5-1
changelog:
  - new version 1.1.5
    - no /etc/raddb/otppasswd.sample anymore
    - build is pie by default, dropped pie patch
  - fixed build requirement for perl (perl-devel)


author: Thomas Woerner <twoerner@redhat.com> 1.1.6-2
changelog:
  - radiusd expects /etc/raddb to not be world readable or writable
    /etc/raddb now belongs to radiusd, post script sets permissions


author: Thomas Woerner <twoerner@redhat.com> 1.1.7-1
changelog:
  - new versin 1.1.7
  - install snmp MIB files
  - dropped LDAP_DEPRECATED flag, it is upstream
  - marked config files for sub packages as config (rhbz#240400)
  - moved db files to /var/lib/raddb (rhbz#199082)


author: <jdennis@redhat.com> - 1.1.7-3.3.ipa
changelog:
  - add support in rlm_ldap for reading clients from ldap
  - fix TLS parameter controling if a cert which fails to validate
    will be accepted (i.e. self-signed),
    rlm_ldap config parameter=tls_require_cert
    ldap LDAP_OPT_X_TLS_REQUIRE_CERT parameter was being passed to
    ldap_set_option() when it should have been ldap_int_tls_config()


author: John Dennis <jdennis@redhat.com> - 2.0.3-1
changelog:
  - Upgrade to current upstream 2.0.3 release
  - Many thanks to Enrico Scholz for his spec file suggestions incorporated here
  - Resolve: bug #438665: Contains files owned by buildsystem
  - Add dialupadmin-mysql, dialupadmin-postgresql, dialupadmin-ldap subpackages
    to further partition external dependencies.
  - Clean up some unnecessary requires dependencies
  - Add versioned requires between subpackages


author: John Dennis <jdennis@redhat.com> - 2.0.3-2
changelog:
  - remove support for radrelay, it's different now
  - turn off default inclusion of SQL config files in radiusd.conf since SQL
    is an optional RPM install
  - remove mssql config files


author: John Dennis <jdennis@redhat.com> - 2.0.4-1
changelog:
  - upgrade to latest upstream, see Changelog for details
  - resolves: bug #447545: freeradius missing /etc/raddb/sites-available/inner-tunnel


author: John Dennis <jdennis@redhat.com> - 2.0.5-1
changelog:
  - upgrade to latest upstream, see Changelog for details,
    upstream now has more complete fix for bug #447545, local patch removed


author: John Dennis <jdennis@redhat.com> - 2.0.5-2
changelog:
  - Resolves: bug #453761: FreeRADIUS %post should not include chown -R
    specify file attributes for /etc/raddb/ldap.attrmap
    fix consistent use of tabs/spaces (rpmlint warning)


author: John Dennis <jdennis@redhat.com> - 2.1.1-1
changelog:
  - Resolves: bug #464119 bootstrap code could not create initial certs in /etc/raddb/certs because
    permissions were 750, radiusd running as euid radiusd could not write there, permissions now 770


author: John Dennis <jdennis@redhat.com> - 2.1.1-3
changelog:
  - make spec file buildable on RHEL5.2 by making perl-devel a fedora only dependency.
  - remove diaupadmin packages, it's not well supported and there are problems with it.


author: John Dennis <jdennis@redhat.com> - 2.1.1-8
changelog:
  - add --with-system-libtool to configure as a workaround for
  undefined reference to lt__PROGRAM__LTX_preloaded_symbols


author: John Dennis <jdennis@redhat.com> - 2.1.3-1
changelog:
  - upgrade to latest upstream release, upstream summary follows:
    The focus of this release is stability.
    Feature Improvements:
      * Allow running with "user=radiusd" and binding to secure sockets.
      * Start sending Status-Server "are you alive" messages earlier, which
        helps with proxying multiple realms to a home server.
      * Removed thread pool code from rlm_perl.  It's not necessary.
      * Added example Perl configuration to raddb/modules/perl
      * Force OpenSSL to support certificates with SHA256. This seems to be
        necessary for WiMAX certs.
    Bug fixes:
      * Fix Debian patch to allow it to build.
      * Fix potential NULL dereference in debugging mode on certain
        platforms for TTLS and PEAP inner tunnels.
      * Fix uninitialized memory in handling of vendor definitions
      * Fix parsing of quoted (but non-string) attributes in the "users" file.
      * Initialize uknown NAS IP to 255.255.255.255, rather than 0.0.0.0
      * use SUN_LEN in control socket, to avoid truncation on some platforms.
      * Correct internal handling of "debug condition" to prevent it from
        being over-written.
      * Check return code of regcomp in "unlang", so that invalid regular
        expressions are caught rather than mishandled.
      * Make rlm_sql use <ltdl.h>.  Addresses bug #610.
      * Document list "type = status" better.  Closes bug #580.
      * Set "default days" for certificates, because OpenSSL won't do it.
        This closes bug #615.
      * Reference correct list in example raddb/modules/ldap. Closes #596.
      * Increase default schema size for Acct-Session-Id to 64. Closes #540.
      * Fix use of temporary files in dialup-admin.  Closes #605 and
        addresses CVE-2008-4474.
      * Addressed a number of minor issues found by Coverity.
      * Added DHCP option 150 to the dictionary.  Closes #618.


author: John Dennis <jdennis@redhat.com> - 2.1.6-1
changelog:
  - update to latest upstream release, from upstream Changelog:
    Feature improvements
      * radclient exits with 0 on successful (accept / ack), and 1
        otherwise (no response / reject)
      * Added support for %{sql:UPDATE ..}, and insert/delete
        Patch from Arran Cudbard-Bell
      * Added sample "do not respond" policy.  See raddb/policy.conf
        and raddb/sites-available/do_not_respond
      * Cleanups to Suse spec file from Norbert Wegener
      * New VSAs for Juniper from Bjorn Mork
      * Include more RFC dictionaries in the default install
      * More documentation for the WiMAX module
      * Added "chase_referrals" and "rebind" configuration to rlm_ldap.
        This helps with Active Directory.  See raddb/modules/ldap
      * Don't load pre/post-proxy if proxying is disabled.
      * Added %{md5:...}, which returns MD5 hash in hex.
      * Added configurable "retry_interval" and "poll_interval"
        for "detail" listeners.
      * Added "delete_mppe_keys" configuration option to rlm_wimax.
        Apparently some WiMAX clients misbehave when they see those keys.
      * Added experimental rlm_ruby from
        http://github.com/Antti/freeradius-server/tree/master
      * Add Tunnel attributes to ldap.attrmap
      * Enable virtual servers to be reloaded on HUP.  For now, only
        the "authorize", "authenticate", etc. processing sections are
        reloaded.  Clients and "listen" sections are NOT reloaded.
      * Updated "radwatch" script to be more robust.  See scripts/radwatch
      * Added certificate compatibility notes in raddb/certs/README,
        for compatibility with different operating systems. (i.e. Windows)
      * Permit multiple "-e" in radmin.
      * Add support for originating CoA-Request and Disconnect-Request.
        See raddb/sites-available/originate-coa.
      * Added "lifetime" and "max_queries" to raddb/sql.conf.
        This helps address the problem of hung SQL sockets.
      * Allow packets to be injected via radmin.  See "inject help"
        in radmin.
      * Answer VMPS reconfirmation request.  Patch from Hermann Lauer.
      * Sample logrotate script in scripts/logrotate.freeradius
      * Add configurable poll interval for "detail" listeners
      * New "raddebug" command.  This prints debugging information from
        a running server.  See "man raddebug.
      * Add "require_message_authenticator" configuration to home_server
        configuration.  This makes the server add Message-Authenticator
        to all outgoing Access-Request packets.
      * Added smsotp module, as contributed by Siemens.
      * Enabled the administration socket in the default install.
        See raddb/sites-available/control-socket, and "man radmin"
      * Handle duplicate clients, such as with replicated or
        load-balanced SQL servers and "readclients = yes"
    Bug fixes
      * Minor changes to allow building without VQP.
      * Minor fixes from John Center
      * Fixed raddebug example
      * Don't crash when deleting attributes via unlang
      * Be friendlier to very fast clients
      * Updated the "detail" listener so that it only polls once,
        and not many times in a row, leaking memory each time...
      * Update comparison for Packet-Src-IP-Address (etc.) so that
        the operators other than '==' work.
      * Did autoconf magic to work around weird libtool bug
      * Make rlm_perl keep tags for tagged attributes in more situations
      * Update UID checking for radmin
      * Added "include_length" field for TTLS.  It's needed for RFC
        compliance, but not (apparently) for interoperability.
      * Clean up control sockets when they are closed, so that we don't
        leak memory.
      * Define SUN_LEN for systems that don't have it.
      * Correct some boundary conditions in the conditional checker ("if")
        in "unlang".  Bug noted by Arran Cudbard-Bell.
      * Work around minor building issues in gmake.  This should only
        have affected developers.
      * Change how we manage unprivileged user/group, so that we do not
        create control sockets owned by root.
      * Fixed more minor issues found by Coverity.
      * Allow raddb/certs/bootstrap to run when there is no "make"
        command installed.
      * In radiusd.conf, run_dir depends on the name of the program,
        and isn't hard-coded to "..../radiusd"
      * Check for EOF in more places in the "detail" file reader.
      * Added Freeswitch dictionary.
      * Chop ethernet frames in VMPS, rather than droppping packets.
      * Fix EAP-TLS bug.  Patch from Arnaud Ebalard
      * Don't lose string for regex-compares in the "users" file.
      * Expose more functions in rlm_sql to rlm_sqlippool, which
        helps on systems where RTLD_GLOBAL is off.
      * Fix typos in MySQL schemas for ippools.
      * Remove macro that was causing build issues on some platforms.
      * Fixed issues with dead home servers.  Bug noted by Chris Moules.
      * Fixed "access after free" with some dynamic clients.

  - fix packaging bug, some directories missing execute permission
    /etc/raddb/dictionary now readable by all.


author: John Dennis <jdennis@redhat.com> - 2.1.7-1
changelog:
  - enable building of the rlm_wimax module
  - pcap wire analysis support is enabled and available in utils subpackage
  - Resolves bug #523053 radtest manpage in wrong package
  - update to latest upstream release, from upstream Changelog:
    Feature improvements
      * Full support for CoA and Disconnect packets as per RFC 3576
        and RFC 5176.  Both receiving and proxying CoA is supported.
      * Added "src_ipaddr" configuration to "home_server".  See
        proxy.conf for details.
      * radsniff now accepts -I, to read from a filename instead of
        a device.
      * radsniff also prints matching requests and any responses to those
        requests when '-r' is used.
      * Added example of attr_filter for Access-Challenge packets
      * Added support for udpfromto in DHCP code
      * radmin can now selectively mark modules alive/dead.
        See "set module state".
      * Added customizable messages on login success/fail.
        See msg_goodpass && msg_badpass in log{} section of radiusd.conf
      * Document "chase_referrals" and "rebind" in raddb/modules/ldap
      * Preliminary implementation of DHCP relay.
      * Made thread pool section optional.  If it doesn't exist,
        the server will run single-threaded.
      * Added sample radrelay.conf for people upgrading from 1.x
      * Made proxying more stable by failing over, rather than
        rejecting the first request.  See "response_window" in proxy.conf
      * Allow home_server_pools to exist without realms.
      * Add dictionary.iea (closes bug #7)
      * Added support for RFC 5580
      * Added experimental sql_freetds module from Gabriel Blanchard.
      * Updated dictionary.foundry
      * Added sample configuration for MySQL cluster in raddb/sql/ndb
        See the README file for explanations.
    Bug fixes
      * Fixed corner case where proxied packets could have extra
        character in User-Password attribute.  Fix from Niko Tyni.
      * Extended size of "attribute" field in SQL to 64.
      * Fixes to ruby module to be more careful about when it builds.
      * Updated Perl module "configure" script to check for broken
        Perl installations.
      * Fix "status_check = none".  It would still send packets
        in some cases.
      * Set recursive flag on the proxy mutex, which enables safer
        cleanup on some platforms.
      * Copy the EAP username verbatim, rather than escaping it.
      * Update handling so that robust-proxy-accounting works when
        all home servers are down for extended periods of time.
      * Look for DHCP option 53 anywhere in the packet, not just
        at the start.
      * Fix processing of proxy fail handler with virtual servers.
      * DHCP code now prints out correct src/dst IP addresses
        when sending packets.
      * Removed requirement for DHCP to have clients
      * Fixed handling of DHCP packets with message-type buried in the packet
      * Fixed corner case with negation in unlang.
      * Minor fixes to default MySQL & PostgreSQL schemas
      * Suppress MSCHAP complaints in debugging mode.
      * Fix SQL module for multiple instance, and possible crash on HUP
      * Fix permissions for radius.log for sites that change user/group,
        but which don't create the file before starting radiusd.
      * Fix double counting of packets when proxying
      * Make %l work
      * Fix pthread keys in rlm_perl
      * Log reasons for EAP failure (closes bug #8)
      * Load home servers and pools that aren't referenced from a realm.
      * Handle return codes from virtual attributes in "unlang"
        (e.g. LDAP-Group).  This makes "!(expr)" work for them.
      * Enable VMPS to see contents of virtual server again
      * Fix WiMAX module to be consistent with examples.  (closes bug #10)
      * Fixed crash with policies dependent on NAS-Port comparisons
      * Allowed vendor IDs to be be higher than 32767.
      * Fix crash on startup with certain regexes in "hints" file.
      * Fix crash in attr_filter module when packets don't exist
      * Allow detail file reader to be faster when "load_factor = 100"
      * Add work-around for build failures with errors related to
        lt__PROGRAM__LTX_preloaded_symbols.  libltdl / libtool are horrible.
      * Made ldap module "rebind" option aware of older, incompatible
        versions of OpenLDAP.
      * Check value of Fall-Through in attr_filter module.


author: John Dennis <jdennis@redhat.com> - 2.1.7-3
changelog:
  - resolves: bug #522111 non-conformant initscript
    also change permission of /var/run/radiusd from 0700 to 0755
    so that "service radiusd status" can be run as non-root


author: John Dennis <jdennis@redhat.com> - 2.1.7-6
changelog:
  - more spec file clean up from review comments
  - remove freeradius-libs subpackage, move libfreeradius-eap and
    libfreeradius-radius into the main package
  - fix subpackage requires, change from freeradius-libs to main package
  - fix description of the devel subpackage, remove referene to non-shipped libs
  - remove execute permissions on src files included in debuginfo
  - remove unnecessary use of ldconfig
  - since all sub-packages now require main package remove user creation for sub-packages
  - also include the LGPL library license file in addition to the GPL license file
  - fix BuildRequires for perl so it's compatible with both Fedora, RHEL5 and RHEL6


author: John Dennis <jdennis@redhat.com> - 2.1.7-7
changelog:
  - Remove devel subpackage. It doesn't make much sense to have a devel package since
    we don't ship libraries and it produces multilib conflicts.


author: John Dennis <jdennis@redhat.com> - 2.1.8-1
changelog:
  - update to latest upstream
    Feature improvements
    * Print more descriptive error message for too many EAP sessions.
      This gives hints on what to do when "failed to store handler"
    * Commands received from radmin are now printed on stdout when
      in debugging mode.
    * Allow accounting packets to be written to a detail file, even
      if they were read from a different detail file.
    * Added OpenSSL license exception (src/LICENSE.openssl)

    Bug fixes
    * DHCP sockets can now set the broadcast flag before binding to a
      socket.  You need to set "broadcast = yes" in the DHCP listener.
    * Be more restrictive on string parsing in the config files
    * Fix password length in scripts/create-users.pl
    * Be more flexible about parsing the detail file.  This allows
      it to read files where the attributes have been edited.
    * Ensure that requests read from the detail file are cleaned up
      (i.e. don't leak) if they are proxied without a response.
    * Write the PID file after opening sockets, not before
      (closes bug #29)
    * Proxying large numbers of packets no longer gives error
      "unable to open proxy socket".
    * Avoid mutex locks in libc after fork
    * Retry packet from detail file if there was no response.
    * Allow old-style dictionary formats, where the vendor name is the
      last field in an ATTRIBUTE definition.
    * Removed all recursive use of mutexes.  Some systems just don't
      support this.
    * Allow !* to work as documented.
    * make templates work (see templates.conf)
    * Enabled "allow_core_dumps" to work again
    * Print better errors when reading invalid dictionaries
    * Sign client certificates with CA, rather than server certs.
    * Fix potential crash in rlm_passwd when file was closed
    * Fixed corner cases in conditional dynamic expansion.
    * Use InnoDB for MySQL IP Pools, to gain transactional support
    * Apply patch to libltdl for CVE-2009-3736.
    * Fixed a few issues found by LLVM's static checker
    * Keep track of "bad authenticators" for accounting packets
    * Keep track of "dropped packets" for auth/acct packets
    * Synced the "debian" directory with upstream
    * Made "unlang" use unsigned 32-bit integers, to match the
      dictionaries.


author: John Dennis <jdennis@redhat.com> - 2.1.8-2
changelog:
  - resolves: bug #526559 initial install should run bootstrap to create certificates
    running radiusd in debug mode to generate inital temporary certificates
    is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial
    rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file
  - resolves: bug #528493 use sha1 algorithm instead of md5 during cert generation
    the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files
    were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months


author: John Dennis <jdennis@redhat.com> - 2.1.9-1
changelog:
  - update to latest upstream, mainly bug fix release
    Feature improvements
    * Add radmin command "stats detail <file>" to see what
      is going on inside of a detail file reader.
    * Added documentation for CoA.  See raddb/sites-available/coa
    * Add sub-option support for Option 82.  See dictionary.dhcp
    * Add "server" field to default SQL NAS table, and documented it.

    Bug fixes
    * Reset "received ping" counter for Status-Server checks.  In some
      corner cases it was not getting reset.
    * Handle large VMPS attributes.
    * Count accounting responses from a home server in SNMP / statistics
      code.
    * Set EAP-Session-Resumed = Yes, not "No" when session is resumed.
    * radmin packet counter statistics are now unsigned, for numbers
      2^31..2^32.  After that they roll over to zero.
    * Be more careful about expanding data in PAP and MS-CHAP modules.
      This prevents login failures when passwords contain '{'.
    * Clean up zombie children if there were many "exec" modules being
      run for one packet, all with "wait = no".
    * re-open log file after HUP.  Closes bug #63.
    * Fix "no response to proxied packet" complaint for Coa / Disconnect
      packets.  It shouldn't ignore replies to packets it sent.
    * Calculate IPv6 netmasks correctly.  Closes bug #69.
    * Fix SQL module to re-open sockets if they unexpectedly close.
    * Track scope for IPv6 addresses.  This lets us use link-local
      addresses properly.  Closes bug #70.
    * Updated Makefiles to no longer use the shell for recursing into
      subdirs.  "make -j 2" should now work.
    * Updated raddb/sql/mysql/ippool.conf to use "= NULL".  Closes
      bug #75.
    * Updated Makefiles so that "make reconfig" no longer uses the shell
      for recursing into subdirs, and re-builds all "configure" files.
    * Used above method to regenerate all configure scripts.
      Closes bug #34.
    * Updated SQL module to allow "server" field of "nas" table
      to be blank: "".  This means the same as it being NULL.
    * Fixed regex realm example.  Create Realm attribute with value
      of realm from User-Name, not from regex.  Closes bug #40.
    * If processing a DHCP Discover returns "fail / reject", ignore
      the packet rather than sending a NAK.
    * Allow '%' to be escaped in sqlcounter module.
    * Fix typo internal hash table.
    * For PEAP and TTLS, the tunneled reply is added to the reply,
      rather than integrated via the operators.  This allows multiple
      VSAs to be added, where they would previously be discarded.
    * Make request number unsigned.  This changes nothing other than
      the debug output when the server receives more than 2^31 packets.
    * Don't block when reading child output in 'exec wait'.  This means
      that blocked children get killed, instead of blocking the server.
    * Enabled building without any proxy functionality
    * radclient now prefers IPv4, to match the default server config.
    * Print useful error when a realm regex is invalid
    * relaxed rules for preprocess module "with_cisco_vsa_hack".  The
      attributes can now be integer, ipaddr, etc.  (i.e. non-string)
    * Allow rlm_ldap to build if ldap_set_rebind_proc() has only
      2 arguments.
    * Update configure script for rlm_python to avoid dynamic linking
      problems on some platforms.
    * Work-around for bug #35
    * Do suid to "user" when running in debug mode as root
    * Make "allow_core_dumps" work in more situations.
    * In detail file reader, treat bad records as EOF.
      This allows it to continue working when the disk is full.
    * Fix Oracle default accounting queries to work when there are no
      gigawords attributes.  Other databases already had the fix.
    * Fix rlm_sql to show when it opens and closes sockets.  It already
      says when it cannot connect, so it should say when it can connect.
    * "chmod -x" for a few C source files.
    * Pull update spec files, etc. from RedHat into the redhat/ directory.
    * Allow spaces when parsing integer values.  This helps people who
      put "too much" into an SQL value field.


author: John Dennis <jdennis@redhat.com> - 2.1.10-1
changelog:
  Feature improvements
    * Install the "radcrypt" program.
    * Enable radclient to send requests containing MS-CHAPv1
      Send packets with: MS-CHAP-Password = "password".  It will
      be automatically converted to the correct MS-CHAP attributes.
    * Added "-t" command-line option to radtest.  You can use "-t pap",
     "-t chap", "-t mschap", or "-t eap-md5".  The default is "-t pap"
    * Make the "inner-tunnel" virtual server listen on 127.0.0.1:18120
      This change and the previous one makes PEAP testing much easier.
    * Added more documentation and examples for the "passwd" module.
    * Added dictionaries for RFC 5607 and RFC 5904.
    * Added note in proxy.conf that we recommend setting
      "require_message_authenticator = yes" for all home servers.
    * Added example of second "files" configuration, with documentation.
      This shows how and where to use two instances of a module.
    * Updated radsniff to have it write pcap files, too.  See '-w'.
    * Print out large WARNING message if we send an Access-Challenge
      for EAP, and receive no follow-up messages from the client.
    * Added Cached-Session-Policy for EAP session resumption.  See
      raddb/eap.conf.
    * Added support for TLS-Cert-* attributes. For details, see
      raddb/sites-available/default, "post-auth" section.
    * Added sample raddb/modules/{opendirectory,dynamic_clients}
    * Updated Cisco and Huawei, HP, Redback, and ERX dictionaries.
    * Added RFCs 5607, 5904, and 5997.
    * For EAP-TLS, client certificates can now be validated using an
      external command.  See eap.conf, "validate" subsection of "tls".
    * Made rlm_pap aware of {nthash} prefix, for compatibility with
      legacy RADIUS systems.
    * Add Module-Failure-Message for mschap module (ntlm_auth)
    * made rlm_sql_sqlite database configurable.  Use "filename"
      in sql{} section.
    * Added %{tolower: ...string ... }, which returns the lowercase
      version of the string.  Also added %{toupper: ... } for uppercase.

    Bug fixes
    * Fix endless loop when there are multiple sub-options for
      DHCP option 82.
    * More debug output when sending / receiving DHCP packets.
    * EAP-MSCHAPv2 should return the MPPE keys when used outside
      of a TLS tunnel.  This is needed for IKE.
    * Added SSL "no ticket" option to prevent SSL from creating sessions
      without IDs.  We need the IDs, so this option should be set.
    * Fix proxying of packets from inside a TTLS/PEAP tunnel.
      Closes bug #25.
    * Allow IPv6 address attributes to be created from domain names
      Closes bug #82.
    * Set the string length to the correct value when parsing double
      quotes.  Closes bug #88.
    * No longer look users up in /etc/passwd in the default configuration.
      This can be reverted by enabling "unix" in the "authorize" section.
    * More #ifdef's to enable building on systems without certain
      features.
    * Fixed SQL-Group comparison to register only if the group
      query is defined.
    * Fixed SQL-Group comparison to register <instance>-SQL-Group,
      just like rlm_ldap.  This lets you have multiple SQL group checks.
    * Fix scanning of octal numbers in "unlang".  Closes bug #89.
    * Be less aggressive about freeing "stuck" requests.  Closes bug #35.
    * Fix example in "originate-coa" to refer to the correct packet.
    * Change default timeout for dynamic clients to 1 hour, not 1 day.
    * Allow passwd module to map IP addresses, too.
    * Allow passwd module to be used for CoA packets
    * Put boot filename into DHCP header when DHCP-Boot-Filename
      is specified.
    * raddb/certs/Makefile no longer has certs depend on index.txt and
       serial.  Closes bug #64.
    * Ignore NULL errorcode in PostgreSQL client.  Closes bug #39
    * Made Exec-Program and Exec-Program-Wait work in accounting
      section again.  See sites-available/default.
    * Fix long-standing memory leak in esoteric conditions.  Found
      by Jerry Nichols.
    * Added "Password-With-Header == userPassword" to raddb/ldap.attrmap
      This will automatically convert more passwords.
    * Updated rlm_pap to decode Password-With-Header, if it was base64
      encoded, and to treat the contents as potentially binary data.
    * Fix Novell eDir code to use the right function parameters.
      Closes bug #86.
    * Allow spaces to be escaped when executing external programs.
      Closes bug #93.
    * Be less restrictive about checking permissions on control socket.
      If we're root, allow connecting to a non-root socket.
    * Remove control socket on normal server exit.  If the server isn't
      running, the control socket should not exist.
    * Use MS-CHAP-User-Name as Name field from EAP-MSCHAPv2 for MS-CHAP
      calculations.  It *MAY* be different (upper / lower case) from
      the User-Name attribute.  Closes bug #17.
    * If the EAP-TLS methods have problems, more SSL errors are now
      available in the Module-Failure-Message attribute.
    * Update Oracle configure scripts.  Closes bug #57.
    * Added text to DESC fields of doc/examples/openldap.schema
    * Updated more documentation to use "Restructured Text" format.
      Thanks to James Lockie.
    * Fixed typos in raddb/sql/mssql/dialup.conf.  Closes bug #11.
    * Return error for potential proxy loops when using "-XC"
    * Produce better error messages when slow databases block
      the server.
    * Added notes on DHCP broadcast packets for FreeBSD.
    * Fixed crash when parsing some date strings.  Closes bug #98
    * Improperly formatted Attributes are now printed as "Attr-##".
      If they are not correct, they should not use the dictionary name.
    * Fix rlm_digest to be check the format of the Digest attributes,
      and return "noop" rather than "fail" if they're not right.
    * Enable "digest" in raddb/sites-available/default.  This change
      enables digest authentication to work "out of the box".
    * Be less aggressive about marking home servers as zombie.
      If they are responding to some packets, they are still alive.
    * Added Packet-Transmit-Counter, to track detail file retransmits.
      Closes bug #13.
    * Added configure check for lt_dladvise_init().  If it exists, then
      using it solves some issues related to libraries loading libraries.
    * Added indexes to the MySQL IP Pool schema.
    * Print WARNING message if too many attributes are put into a packet.
    * Include dhcp test client (not built by default)
    * Added checks for LDAP constraint violation.  Closes bug #18.
    * Change default raddebug timeout to 60 seconds.
    * Made error / warning messages more consistent.
    * Correct back-slash handling in variable expansion.  Closes bug #46.
      You SHOULD check your configuration for backslash expansion!
    * Fix typo in "configure" script (--enable-libltdl-install)
    * Use local libltdl in more situations.  This helps to avoid
      compile issues complaining about lt__PROGRAM__LTX_preloaded_symbols.
    * Fix hang on startup when multiple home servers were defined
      with "src_ipaddr" field.
    * Fix 32/64 bit issue in rlm_ldap.  Closes bug #105.
    * If the first "listen" section defines 127.0.0.1, don't use that
      as a source IP for proxying.  It won't work.
    * When Proxy-To-Realm is set to a non-existent realm, the EAP module
      should handle the request, rather than expecting it to be proxied.
    * Fix IPv4 issues with udpfromto.  Closes bug #110.
    * Clean up child processes of raddebug.  Closes bugs #108 and #109
    * retry OTP if the OTP daemon fails.  Closes bug #58.
    * Multiple calls to ber_printf seem to work better.  Closes #106.
    * Fix "unlang" so that "attribute not found" is treated as a "false"
      comparison, rather than a syntax error in the configuration.
    * Fix issue with "Group" attribute.


author: John Dennis <jdennis@redhat.com> - 2.1.10-3
changelog:
  - bug 666589 - removing freeradius from system does not delete the user "radiusd"
    fix scriptlet argument testing, simplify always exiting with zero


author: John Dennis <jdennis@redhat.com> - 2.1.10-7
changelog:
  - Resolves: #689045 Using rlm_perl cause radiusd failed to start
    Fix configure typo which caused lt_dladvise_* functions to be skipped.
    run autogen.sh because HAVE_LT_DLADVISE_INIT isn't in src/main/autogen.h
    Implemented by: freeradius-lt-dladvise.patch


author: John Dennis <jdennis@redhat.com> - 2.1.11-1
changelog:
  - Upgrade to latest upstream release: 2.1.11
  - Remove the following two patches as upstream has incorporated them:
      freeradius-radtest-ipv6.patch
      freeradius-lt-dladvise.patch
  - Upstream changelog for 2.1.11:
    Feature improvements
    * Added doc/rfc/rfc6158.txt: RADIUS Design Guidelines.
      All vendors need to read it and follow its directions.
    * Microsoft SoH support for PEAP from Phil Mayers.
      See doc/SoH.txt
    * Certificate "bootstrap" script now checks for certificate expiry.
      See comments in raddb/eap.conf, and then "make_cert_command".
    * Support for dynamic expansion of EAP-GTC challenges.
      Patch from Alexander Clouter.
    * OCSP support from Alex Bergmann.  See raddb/eap.conf, "ocsp"
      section.
    * Updated dictionary.huawei, dictionary.3gpp, dictionary.3gpp3.
    * Added dictionary.eltex, dictionary.motorola, and dictionary.ukerna.
    * Experimental redis support from Gabriel Blanchard.
      See raddb/modules/redis and raddb/modules/rediswho
    * Add "key" to rlm_fastusers.  Closes bug #126.
    * Added scripts/radtee from original software at
      http://horde.net/~jwm/software/misc/comparison-tee
    * Updated radmin "man" page for new commands.
    * radsniff now prints the hex decoding of the packet (-x -x -x)
    * mschap module now reloads its configuration on HUP
    * Added experimental "replicate" module.  See raddb/modules/replicate
    * Policy "foo" can now refer to module "foo".  This lets you
      over-ride the behavior of a module.
    * Policy "foo.authorize" can now over-ride the behavior of module
      "foo", "authorize" method.
    * Produce errors in more situations when the configuration files
      have invalid syntax.

    Bug fixes
    * Ignore pre/post-proxy sections if proxying is disabled
    * Add configure checks for pcap_fopen*.
    * Fix call to otp_write in rlm_otp
    * Fix issue with Access-Challenge checking from 2.1.10, when the
      debug flag was set after server startup.  Closes #116 and #117.
    * Fix typo in zombie period start time.
    * Fix leak in src/main/valuepair.c.  Patch from James Ballantine.
    * Allow radtest to use spaces in shared secret.
      Patch from Cedric Carree.
    * Remove extra calls to HMAC_CTX_init() in rlm_wimax, fixing leak.
      Patch from James Ballantine.
    * Remove MN-FA key generation.  The NAS does this, not AAA.
      Patch from Ben Weichman.
    * Include dictionary.mikrotik by default.  Closes bug #121.
    * Add group membership query to MS-SQL examples.  Closes bug #120.
    * Don't cast NAS-Port to integer in Postgresql queries.
      Closes bug #112.
    * Fixes for libtool and autoconf from Sam Hartman.
    * radsniff should read the dictionaries in more situations.
    * Use fnmatch to check for detail file reader==writer.
      Closes bug #128.
    * Check for short writes (i.e. disk full) in rlm_detail.
      Closes bug #130.  Patches and testing from John Morrissey.
    * Fix typo in src/lib/token.c.  Closes bug #124
    * Allow workstation trust accounts to use MS-CHAP.
      Closes bug #123.
    * Assigning foo=`/bin/echo hello` now produces a syntax error
      if it is done outside of an "update" section.
    * Fix "too many open file descriptors" problem when using
      "verify client" in eap.conf.
    * Many fixes to dialup_admin for PHP5, by Stefan Winter.
    * Allow preprocess module to have "hints = " and "huntgroups =",
      which allows them to be empty or non-existent.
    * Renamed "php3" files to "php" in dialup_admin/
    * Produce error when sub-TLVs are used in a dictionary.  They are
      supported only in the "master" branch, and not in 2.1.x.
    * Minor fix in dictionary.redback.  Closes bug #138.
    * Fixed MySQL "NULL" issues in ippool.conf.  Closes bug #129.
    * Fix to Access-Challenge warning from Ken-ichirou Matsuzawa.
      Closes bug #118.
    * DHCP fixes to send unicast packets in more situations.
    * Fix to udpfromto, to enable it to work on IPv6 networks.
    * Fixes to the Oracle accounting_onoff_query.
    * When using both IPv4 and IPv6 home servers, ensure that we use the
      correct local socket for proxying.  Closes bug #143.
    * Suppress messages when thread pool is nearly full, all threads
      are busy, and we can't create new threads.
    * IPv6 is now enabled for udpfromto.  Closes bug #141
    * Make sqlippool query buffer the same size as sql module.
      Closes bug #139.
    * Make Coa / Disconnect proxying work again.
    * Configure scripts for rlm_caching from Nathaniel McCallum
    * src/lib/dhcp.c and src/include/libradius.h are LGPL, not GPL.
    * Updated password routines to use time-insensitive comparisons.
      This prevents timing attacks (though none are known).
    * Allow sqlite module to do normal SELECT queries.
    * rlm_wimax now has a configure script
    * Moved Ascend, USR, and Motorola "illegal" dictionaries to separate
      files.  See share/dictionary for explanations.
    * Check for duplicate module definitions in the modules{} section,
      and refuse to start if duplicates are found.
    * Check for duplicate virtual servers, and refuse to start if
      duplicates are found.
    * Don't use udpfromto if source is INADDR_ANY.  Closes bug #148.
    * Check pre-conditions before running radmin "inject file".
    * Don't over-ride "no match" with "match" for regexes.
      Closes bug #152.
    * Make retry and error message configurable in mschap.
      See raddb/modules/mschap
    * Allow EAP-MSCHAPv2 to send error message to client.  This change
      allows some clients to prompt the user for a new password.
      See raddb/eap.conf, mschapv2 section, "send_error".
    * Load the default virtual server before any others.
      This matches what users expect, and reduces confusion.
    * Fix configure checks for udpfromto.  Fixes Debian bug #606866
    * Definitive fix for bug #35, where the server could crash under
      certain loads.  Changes src/lib/packet.c to use RB trees.
    * Updated "configure" checks to allow IPv6 udpfromto on Linux.
    * SQL module now returns NOOP if the accounting start/interim/stop
      queries don't do anything.
    * Allow %{outer.control: ... } in string expansions
    * home_server coa config now matches raddb/proxy.conf
    * Never send a reply to a DHCP Release.


author: John Dennis <jdennis@redhat.com> - 2.1.12-1
changelog:
  - Upgrade to latest upstream release: 2.1.12
  - Upstream changelog for 2.1.12:
    Feature improvements
    * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
      dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
    * Added support for PCRE from Phil Mayers
    * Configurable file permission in rlm_linelog
    * Added "relaxed" option to rlm_attr_filter.  This copies attributes
      if at least one match occurred.
    * Added documentation on dynamic clients.
      See raddb/modules/dynamic_clients.
    * Added support for elliptical curve cryptography.
      See ecdh_curve in raddb/eap.conf.
    * Added support for 802.1X MIBs in checkrad
    * Added support for %{rand:...}, which generates a uniformly
      distributed number between 0 and the number you specify.
    * Created "man" pages for all installed commands, and documented
      options for all commands.  Patch from John Dennis.
    * Allow radsniff to decode encrypted VSAs and CoA packets.
      Patch from Bjorn Mork.
    * Always send Message-Authenticator in radtest. Patch from John Dennis.
      radclient continues to be more flexible.
    * Updated Oracle schema and queries
    * Added SecurID module.  See src/modules/rlm_securid/README

    Bug fixes
    * Fix memory leak in rlm_detail
    * Fix "failed to insert event"
    * Allow virtual servers to be reloaded on HUP.
      It no longer complains about duplicate virtual servers.
    * Fix %{string:...} expansion
    * Fix "server closed socket" loop in radmin
    * Set ownership of control socket when starting up
    * Always allow root to connect to control socket, even if
      "uid" is set.  They're root.  They can already do anything.
    * Save all attributes in Access-Accept when proxying inner-tunnel
      EAP-MSCHAPv2
    * Fixes for DHCP relaying.
    * Check certificate validity when using OCSP.
    * Updated Oracle "configure" script
    * Fixed typos in dictionary.alvarion
    * WARNING on potential proxy loop.
    * Be more aggressive about clearing old requests from the
      internal queue
    * Don't open network sockets when using -C


author: John Dennis <jdennis@redhat.com> - 2.1.12-2
changelog:
  - rename /etc/tmpfiles.d/freeradius.conf to /etc/tmpfiles.d/radiusd.conf
    remove config(noreplace) because it must match files section and
    permissions differ between versions.
  - fixup macro usage for /var/run & /var/lib


author: John Dennis <jdennis@redhat.com> - 2.1.12-4
changelog:
  - resolves: bug#781744
    systemd service file incorrectly listed pid file as
    /var/run/radiusd/radiusd which it should have been
    /var/run/radiusd/radiusd.pid


author: John Dennis <jdennis@redhat.com> - 2.1.12-5
changelog:
  - resolves: bug#781877 (from RHEL5) rlm_dbm_parse man page misspelled
  - resolves: bug#760193 (from RHEL5) radtest PPPhint option is not parsed properly


author: John Dennis <jdennis@redhat.com> - 2.1.12-6
changelog:
  Fixing bugs in RHEL6 rebase, applying fixes here as well
    resolves: bug#700870 freeradius not compiled with --with-udpfromto
    resolves: bug#753764 shadow password expiration does not work
    resolves: bug#712803 radtest script is not working with eap-md5 option
    resolves: bug#690756 errors in raddb/sql/postgresql/admin.sql template


author: John Dennis <jdennis@redhat.com> - 2.2.0-0
changelog:
  - Add new patch to avoid reading .rpmnew, .rpmsave and other invalid
    files when loading config files
  - Upgrade to new 2.2.0 upstream release
  - Upstream changelog for 2.1.12:
    Feature improvements
    * 100% configuration file compatible with 2.1.x.
      The only fix needed is to disallow "hashsize=0" for rlm_passwd
    * Update Aruba, Alcatel Lucent, APC, BT, PaloAlto, Pureware,
      Redback, and Mikrotik dictionaries
    * Switch to using SHA1 for certificate digests instead of MD5.
      See raddb/certs/*.cnf
    * Added copyright statements to the dictionaries, so that we know
      when people are using them.
    * Better documentation for radrelay and detail file writer.
      See raddb/modules/radrelay and raddb/radrelay.conf
    * Added TLS-Cert-Subject-Alt-Name-Email from patch by Luke Howard
    * Added -F <file> to radwho
    * Added query timeouts to MySQL driver.  Patch from Brian De Wolf.
    * Add /etc/default/freeradius to debian package.
      Patch from Matthew Newton
    * Finalize DHCP and DHCP relay code.  It should now work everywhere.
      See raddb/sites-available/dhcp, src_ipaddr and src_interface.
    * DHCP capabilitiies are now compiled in by default.
      It runs as a DHCP server ONLY when manually enabled.
    * Added one letter expansions: %G - request minute and %I request
      ID.
    * Added script to convert ISC DHCP lease files to SQL pools.
      See scripts/isc2ippool.pl
    * Added rlm_cache to cache arbitrary attributes.
    * Added max_use to rlm_ldap to force connection to be re-established
      after a given number of queries.
    * Added configtest option to Debian init scripts, and automatic
      config test on restart.
    * Added cache config item to rlm_krb5. When set to "no" ticket
      caching is disabled which may increase performance.

    Bug fixes
    * Fix CVE-2012-3547.  All users of 2.1.10, 2.1.11, 2.1.12,
      and 802.1X should upgrade immediately.
    * Fix typo in detail file writer, to skip writing if the packet
      was read from this detail file.
    * Free cached replies when closing resumed SSL sessions.
    * Fix a number of issues found by Coverity.
    * Fix memory leak and race condition in the EAP-TLS session cache.
      Thanks to Phil Mayers for tracking down OpenSSL APIs.
    * Restrict ATTRIBUTE names to character sets that make sense.
    * Fix EAP-TLS session Id length so that OpenSSL doesn't get
      excited.
    * Fix SQL IPPool logic for non-timer attributes.  Closes bug #181
    * Change some informational messages to DEBUG rather than error.
    * Portability fixes for FreeBSD.  Closes bug #177
    * A much better fix for the _lt__PROGRAM__LTX_preloaded_symbols
      nonsense.
    * Safely handle extremely long lines in conf file variable expansion
    * Fix for Debian bug #606450
    * Mutex lock around rlm_perl Clone routines. Patch from Eike Dehling
    * The passwd module no longer permits "hashsize = 0".  Setting that
      is pointless for a host of reasons.  It will also break the server.
    * Fix proxied inner-tunnel packets sometimes having zero authentication
      vector.  Found by Brian Julin.
    * Added $(EXEEXT) to Makefiles for portability.  Closes bug #188.
    * Fix minor build issue which would cause rlm_eap to be built twice.
    * When using "status_check=request" for a home server, the username
      and password must be specified, or the server will not start.
    * EAP-SIM now calculates keys from the SIM identity, not from the
      EAP-Identity.  Changing the EAP type via NAK may result in
      identities changing.  Bug reported by Microsoft EAP team.
    * Use home server src_ipaddr when sending Status-Server packets
    * Decrypt encrypted ERX attributes in CoA packets.
    * Fix registration of internal xlat's so %{mschap:...} doesn't
      disappear after a HUP.
    * Can now reference tagged attributes in expansions.
      e.g. %{Tunnel-Type:1} and %{Tunnel-Type:1[0]} now work.
    * Correct calculation of Message-Authenticator for CoA and Disconnect
      replies.  Patch from Jouni Malinen
    * Install rad_counter, for managing rlm_counter files.
    * Add unique index constraint to all SQL flavours so that alternate
      queries work correctly.
    * The TTLS diameter decoder is now more lenient.  It ignores
      unknown attributes, instead of rejecting the TTLS session.
    * Use "globfree" in detail file reader.  Prevents very slow leak.
      Closes bug #207.
    * Operator =~ shouldn't copy the attribute, like :=.  It should
      instead behave more like ==.
    * Build main Debian package without SQL dependencies
    * Use max_queue_size in threading code
    * Update permissions in raddb/sql/postgresql/admin.sql
    * Added OpenSSL_add_all_algorithms() to fix issues where OpenSSL
      wouldn't use methods it knew about.
    * Add more sanity checks in dynamic_clients code so the server won't
      crash if it attempts to load a badly formated client definition.


author: John Dennis <jdennis@redhat.com> - 2.2.0-1
changelog:
  - resolves: bug#876564 - fails to start without freeradius-mysql
  - use upstream version of freeradius-exclude-config-file.patch


author: John Dennis <jdennis@redhat.com> - 2.2.0-3
changelog:
  - specify homedir (/var/lib/radiusd) for radiusd user in useradd,
    do not permit useradd to default the homedir.


author: John Dennis <jdennis@redhat.com> - 3.0.0-4
changelog:
  - resolves: bug#1031035
    remove radeapclient man page,
    upstream no longer supports radeapclient, use eapol_test instead
  - resolves: bug#1031061
    rlm_eap_leap memory corruption, see freeradius-rlm_leap.patch
  - move man pages for utils into utils subpackage from doc subpackage
  - fix HAVE_EC_CRYPTO test to include f20
  - add new directory /var/run/radiusd/tmp
    update mods-available/eap so tls-common.verify.tmpdir to point to it


author: John Dennis <jdennis@redhat.com> - 3.0.1-1
changelog:
  - Upgrade to upstream 3.0.1 release, full config compatible with 3.0.0.
    This is a roll-up of all upstream bugs fixes found in 3.0.0
    See upstream ChangeLog for details (in freeradius-doc subpackage)
  - resolves: bug#1052450 (fedora 1053020)
  - resolves: bug#1044748 (fedora 1044747)
  - resolves: bug#1048475 (fedora 1048474)
  - resolves: bug#1043037 (fedora 1043036)


author: John Dennis <jdennis@redhat.com> - 3.0.1-3
changelog:
  - resolves: bug#1055073 (fedora 1055072)
    rlm_ippool; bad config file attribute and fails to send reply attributes
  - resolves: bug#1055567 (fedora 1056227)
    bad mysql sql syntax
  - change CFLAGS -imacros to -include to address gcc/gdb bug 1004526
    where gdb will not display source information, only <command-line>


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.1-6
changelog:
  - Fix CVE-2014-2015 "freeradius: stack-based buffer overflow flaw in rlm_pap
    module"
  - resolves: bug#1066984 (fedora 1066763)


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-0.1.rc2
changelog:
  - Upgrade to upstream 3.0.4-rc2 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
  - Add installation of SNMP MIB files.
  - Resolves: Bug#1036562 Missing doc page for kerberos module
  - Resolves: Bug#1099625 Default message digest defaults to sha1
  - Resolves: Bug#1109159 missing mib files in freeradius package
  - Resolves: Bug#1113010 radiusd doesn't send snmp trap when max_threads value
                          is reached
  - Resolves: Bug#1114669 Missing -P option in radtest manpage
  - Resolves: Bug#1115128 radisud can't start if proto = udp is specified
  - Resolves: Bug#1115134 radiusd aborts after 'Access-Request' when listens on
                          TCP port
  - Resolves: Bug#1115137 radiusd listens on udp port even if proto = tcp is
                          specified
  - Resolves: Bug#1126725 radiusd silently fails when start_servers is higher
                          than max_servers
  - Resolves: Bug#1135446 Radeapclient is not available


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-1
changelog:
  - Upgrade to upstream 3.0.4 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-2
changelog:
  - Fix abort on home server triggers.
    Resolves: Bug#1113509 radiusd aborts when it has no proxy response with active
                          snmp traps
  - Fix segfault upon example.pl read failure.
    Resolves: Bug#1146403 radiusd segfaults when file for perl module has
                          wrong permissions
  - Fix example.pl permissions.
    Resolves: Bug#1146406 /etc/raddb/mods-config/perl/example.pl has wrong
                          permissions and radiusd fails to start
  - Fix integer handling in various cases.
    Resolves: Bug#1146441 upstream test suite fails
  - Fix dhcpclient's dictionary.dhcp loading.
    Resolves: Bug#1146939 dhcpclient lookups dictionary.dhcp file in wrong
                          location


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-3
changelog:
  - Fix a number of trigger issues.
    Resolves: Bug#1110407 radiusd doesn't send snmp trap after "radmin -e 'hup
                          files'"
    Resolves: Bug#1110414 radiusd doesn't send snmp trap when sql connection is
                          opened,closed or fail
    Resolves: Bug#1110186 radiusd doesn't send snmp trap when ldap connection
                          fails/opens/closes
    Resolves: Bug#1109164 snmp trap messages send by radiusd are inconsistent
                          and incomplete
  - Fix two omissions from radtest manpage.
    Resolves: Bug#1146898 'eap-md5' value is missing in -t option in SYNOPSIS
                          of radtest man page
    Resolves: Bug#1114669 Missing -P option in radtest manpage
  - Disable OpenSSL version checking to avoid the need to edit radiusd.conf to
    confirm heartbleed is fixed.
    Resolves: Bug#1155070 FreeRADIUS doesn't start after upgrade due to failing
                          OpenSSL version check


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-4
changelog:
  - Fix possible group info corruption/segfault in rlm_unix' fr_getgrnam.
  - Fix file configuration item parsing.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-5
changelog:
  - Disable rlm_rest building explicitly to avoid unintended builds on some
    architectures breaking RPM build.
    Resolves: Bug#1162156
  - Add -D option support to dhcpclient.
    Related: Bug#1146939
  - Don't install rbmonkey - a test tool only useful to developers.
    Related: Bug#1146966
  - Update clients(5) man page
    Resolves: Bug#1147464


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-6
changelog:
  - Don't remove backslash from unknown escape sequences in LDAP values.
    Resolves: Bug#1173526
  - Improve dhcpclient and rad_counter online help.
    Resolves: Bug#1146966
  - raddb: Move trigger.conf INCLUDE before modules, making it easier to refer
    to trigger variables from module configurations.
    Resolves: Bug#1155961
  - Fix ipaddr option fallback onto ipv6.
    Resolves: Bug#1168868
  - raddb: Comment on ipaddr/ipv4addr/ipv6addr use.
    Resolves: Bug#1168247


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.7-1
changelog:
  - Upgrade to upstream v3.0.7 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related: Bug#1202751


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.8-1
changelog:
  - Upgrade to upstream v3.0.8 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related: Bug#1202751


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.9-1
changelog:
  - Upgrade to upstream v3.0.9 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related: Bug#1202751


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.10-1
changelog:
  - Upgrade to upstream v3.0.10 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related: Bug#1202751
    Resolves: Bug#1340334 freeradius: Decryption of very long Tunnel-Passwords
                          can cause buffer overflow
  - Remove rlm_eap_tnc support as the required package "tncfhh" was retired.


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.11-1
changelog:
  - Upgrade to upstream v3.0.11 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Resolves: Bug#1197551
    Resolves: Bug#1179745
    Resolves: Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
    Resolves: Bug#1289849 FreeRadius should start after ldap, ipa and krb5kdc
    Resolves: Bug#1208886 Add the latest Mikrotik dictionary into Freeradius
    Resolves: Bug#1198620 radutmp should not rotate
    Resolves: Bug#1180979 Freeradius is installing files under /etc/tmpfiles.d/
    Resolves: Bug#1187904 radiusd logrotate config file contains old style
                          "/sbin/service radius reload" reload call
    Resolves: Bug#1167846 radiusd fails to load clients from ldap
    Resolves: Bug#1422018 /usr/lib/systemd/system/radiusd.service is marked
                          executable. Please remove executable permission bits
    Resolves: Bug#1167843 support for older style generic attributes in
                          rlm_ldap doesn't work
    Resolves: Bug#1354234 home servers are marked as dead by radiusd


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.12-1
changelog:
  - Upgrade to upstream v3.0.12 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
    Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                          detail file
    Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
    Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
    Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                          load
    Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.12-2
changelog:
  - Do not fail logrotate if radiusd is not running.
    Resolves: Bug#1365226 error running non-shared postrotate script for
                          /var/log/radius/radius.log of
                          '/var/log/radius/radius.log '
  - Fix output to log file specified with -l option.
    Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                          option
  - Fix long hostnames interpreted as IP addresses.
    Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                          name as a domain name
  - Avoid clashes with libtool library symbols.
    Resolves: Bug#1391960 undefined symbol: get_vtable in
                          /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
  - Remove mentions of Auth-Type = System from docs.
    Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
  - Improve ip/v4/v6/addr documentation.
    Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                          and AAAA entries


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-1
changelog:
  - Upgrade to upstream v3.0.13 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
    Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                          compile time
    Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                          can't connect to mysql server
    Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-2
changelog:
  - Fix some issues found with static analyzers.
    Resolves: Bug#1432103 FreeRADIUS fails covscan checks
  - Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-3
changelog:
  - Explicitly disable rlm_cache_memcached to avoid error when the module's
    dependencies are installed, and it is built, but not packaged.
    Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  - Prevent segfaults by adding a missing handling of connection errors in
    rlm_ldap.
    Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
  - Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
    Resolves: Bug#1436619 radtest does not work with eap-md5


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-4
changelog:
  - Disable internal OpenSSL cache.
    Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass
  - Check sizeof(*packet), not sizeof(packet) in EAP-PWD
    Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
  - Parse port as well as address for dhcpclient destination
    Resolves: Bug#1457825 dhcpclient does no accept IP:PORT


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-5
changelog:
  - Refer to correct package version in configuration comments for Bug#1458746
    (CVE-2017-9148) fix.
    Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-6
changelog:
  - Avoid race condition when creating session cache file
    Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                          authentication bypass


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-7
changelog:
  - Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                          to improper output buffer size check in make_secret()
  - Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                          fr_dhcp_decode() when decoding option 63
  - Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                          data2vp_wimax()
  - Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                          exhaustion with 'concat' attributes
  - Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                          dhcp_attr2vp()
  - Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                          fr_dhcp_decode_suboptions()


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-8
changelog:
  - Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
  - Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                         data2vp_wimax()


author: Ray Strode <rstrode@redhat.com> - 3.22.3-4
changelog:
  - Drop reference to wayland in config file
  - use autosetup to simplify spec maintenance
    Related: #1386862


author: Ray Strode <rstrode@redhat.com> 3.22.3-8
changelog:
  - Reap transient login screens when they are no longer needed
  - Jump to login screen if we end up on a blank VT
    Resolves: #1301028


author: Ray Strode <rstrode@redhat.com> - 3.22.3-10
changelog:
  - Add patches to try to maintain some semblance of compatibility
    when live upgrading between 7.3 and 7.4
    Related: #1448786


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 5.50 at last...
  - hpdj 2.6
  - Added 3rd party drivers:
    - Lexmark 5700 (lxm5700m)
    - Alps MD-* (md2k, md5k)
    - Lexmark 2050, 3200, 5700 and 7000 (lex2050, lex3200, lex5700, lex7000)


author: Michael Stefaniuc <mstefani@redhat.com>
changelog:
  - added the stp driver from the gimp-print project.
    It supports high quality printing especialy with Epson Stylus Photo.


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - merged in some patches that got away:
    * Fri Sep  1 2000 Mitsuo Hamada <mhamada@redhat.com>
    - add support JIS B size
    - fix the problem of reconverting GNUPLOT output


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - upgraded to 6.51, a major version upgrade
  - rewrote spec file, threw out some patches
  - turned on IBM's Omni print drivers interface
  - turned on HP's hpijs print drivers interface
  - turned on every driver that looked usable from linux
  - sacrificed a chicken to integrate the old Japanese drivers
  - - This didn't work. The japanese patches are turned off, pending review.
  - - I can do loops with C, but the bugs are in Postscript init files


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-2
changelog:
  - luckily, I had a spare chicken. Thanks to some work by Nakai, and one last
  - desperate search through google, everything /seems/ to be working. I know
  - that there are going to be problems in the japanese code, and I need to turn
  - on the cjk font map from adobe, but it /works/ at the moment.


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-4
changelog:
  - applied drepper@redhat.com's patch for #50300
  - fixed build deps on zlib-devel and libpng-devel, #49853
  - made gs_init.ps a config file; #25096
  - O\^/nZ the daTa directorieZ now; #50693


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-9
changelog:
  - applied IBM's glib patches for Omni, which now works.
  - BE AWARE: we now link against libstdc++ and glib for this, and use a c++
  - link stage to do the dirty.
  - added glib-devel buildreq and glib req, I don't think we require everything
  - yet, I could pull in sasl.


author: Bernhard Rosenkraenzer <bero@redhat.com> 6.52-1
changelog:
  - Updates:
    - ghostscript 6.52
    - hpdj 2.6 -> pcl3 3.3
    - CJK Patchlevel 3, adobe-cmaps 200109
    - gimp-print 4.2.0
  - Adapt patches
  - Fix various URLs
  - Begin cleaning up spec file
  - Fix bugs #21879 and #50923


author: Tim Waugh <twaugh@redhat.com> 6.52-6
changelog:
  - Fix config patch so that gs --help displays the right thing.
  - Don't ship sysvlp.sh.
  - Fix some shell scripts.
  - Ship escputil man page (bug #58919).


author: Tim Waugh <twaugh@redhat.com> 7.05-1
changelog:
  - 7.05.
  - No longer need mkstemp, vflib.fixup, quoting, or PARANOIDSAFER
    patches.
  - Don't apply CJK patches any more (no longer needed).
  - Updated Source15, Patch0, Patch10, Patch5, Patch24, Patch14, Patch12.
  - Made gdevdmpr.c compile again.
  - Move gimp-print to a separate package.
  - Ship the shared object too (and a .so file that is dlopened).
  - Update Omni patch.  No longer need Omni_path, Omni_quiet, Omni_glib patches.
  - Require Omni >= 0.6.1.
  - Add patch to fix gtk+ initial window size.
  - Add devel package with header files.
  - Turn on IJS support.
  - Update hpijs to 1.1.
  - Don't ship the hpijs binary in the ghostscript package.
  - Use -fPIC when building ijs.


author: Tim Waugh <twaugh@redhat.com> 7.05-2
changelog:
  - Don't apply bogus parts of vflib patch (bug #65268).
  - Work around Omni -sPAPERSIZE=a4 problem (bug #65269).


author: Tim Waugh <twaugh@redhat.com> 7.05-8
changelog:
  - Requires recent version of patchutils (bug #65947).
  - Don't ship broken man page symlinks (bug #66238).


author: Tim Waugh <twaugh@redhat.com> 7.05-25
changelog:
  - Fix level 1 PostScript output (bug #78450).
  - No need to carry gomni.c, since it comes from the patch.


author: Tim Waugh <twaugh@redhat.com> 7.05-26
changelog:
  - Don't ship the shared object yet (part of bug #79340).
  - Don't make the gtk package, since that needs the shared object.


author: Tim Waugh <twaugh@redhat.com> 7.05-33
changelog:
  - Add some missing font aliases (bug #73342).
  - Use the system jpeg library.
  - Update hpijs to 1.3.1.
  - Update gdevcups.c from cups-1.1.18.


author: Tim Waugh <twaugh@redhat.com> 7.05-34
changelog:
  - Apply fix for CJK font search method when the fonts are not available
    (bug #83516).
  - The gb18030 patch no longer applies here.


author: Tim Waugh <twaugh@redhat.com> 7.06-1
changelog:
  - 7.06.
  - Updated config, vflib.fixup patches.
  - No longer need dx6, jpeg patches.
  - No longer need to add in missed GNU drivers.
  - Turn off dj970 driver (hpijs drives that).


author: Tim Waugh <twaugh@redhat.com> 7.07-1
changelog:
  - 7.07.
  - Parametrize build_libgs.
  - Remove Omni requirement (bug #88177).
  - Fix ghostscript-gtk obsoletes: line (bug #88175).


author: Tim Waugh <twaugh@redhat.com> 7.07-15
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - Conflicts with foomatic before hpijs 1.5 data.
  - Make fontconfig optional.


author: Tim Waugh <twaugh@redhat.com> 7.07-17
changelog:
  - Removed stp driver.  Use the IJS version (ijsgimpprint) instead.
  - No longer conflicts with foomatic for hpijs versioning.


author: Tim Waugh <twaugh@redhat.com> 7.07-19
changelog:
  - Attempt to fix gdevcups crash (bug #114256).
  - Make gs dynamically link to libgs (bug #114276).
  - Fix gdevesmv.c's misuse of const (bug #114250).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Run /sbin/ldconfig in %post/%postun.
  - Stricter requirements for the main package in the subpackages.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.1
changelog:
  - Switch to ESP Ghostscript.
  - 8.15rc3.
  - Lots of patches dropped.  Perhaps some will need to be re-added.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.2
changelog:
  - Drop 'Provides: libijs.so' because it is incorrect.
  - Build igcref.c with -O0 to work around bug #150771.
  - Renumber patches.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.4
changelog:
  - Add Japanese fonts to FAPIcidfmap (bug #161187).
  - Moved Resource directory.
  - Added use-external-freetype patch (bug #161187).


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.5
changelog:
  - Split font configuration (bug #161187).
  - Reverted this change:
    - Build requires xorg-x11-devel, not XFree86-devel.


author: Tim Waugh <twaugh@redhat.com> 8.15.2-9
changelog:
  - Apply CJKV patch from svn164:165 plus the fix from svn173:174 (bug #194592,
    bug #203712, possibly bug #167596).


author: Tim Waugh <twaugh@redhat.com> 8.15.3-2
changelog:
  - 8.15.3.  No longer need gtk2, ps2epsi, badc, pagesize,
    use-external-freetype, split-font-configuration or cjkv patches.
  - Renumbered patches.


author: Tim Waugh <twaugh@redhat.com> 8.15.3-6
changelog:
  - Configure with --with-drivers=ALL since the advertised default is not
    what gets used (bug #223819).


author: Tim Waugh <twaugh@redhat.com> 8.15.3-7
changelog:
  - dvipdf script fixes (bug #88906).
  - Moved libijs.so and libgs.so into devel package (bug #203623).


author: Tim Waugh <twaugh@redhat.com> 8.15.4-3
changelog:
  - Apply fonts in CIDFnmap even if the same fontnames are already registered
    (bug #163231).
  - New file CIDFmap (bug #233966).
  - Allow local overrides for FAPIcidfmap, cidfmap and Fontmap (bug #233966).


author: Tim Waugh <twaugh@redhat.com> 8.60-0.r8112.1
changelog:
  - 8.60 snapshot from svn.  Patches dropped:
    - big-cmap-post
    - split-cidfnmap
    - exactly-enable-cidfnmap
    - Fontmap.local
    No longer needed:
    - gxcht-64bit-crash


author: Tim Waugh <twaugh@redhat.com> 8.61-2
changelog:
  - Add /usr/share/fonts to fontpath (bug #402551).
  - Restore cidfmap-switching bits, except for FAPIcidfmap which is no
    longer used.
  - Add runlibfileifexists to gs_init.ps.
  - Build with --disable-compile-inits (bug #402501).


author: Tim Waugh <twaugh@redhat.com> 8.61-9
changelog:
  - Build with jasper again (bug #433897).  Build requires jasper-devel, and
    a patch to remove jas_set_error_cb reference.


author: Tim Waugh <twaugh@redhat.com> 8.62-4
changelog:
  - Applied patch to work around bug #229174.
  - Applied patch from upstream to fix box_fill_path for shfill (bug #452348).


author: Tim Waugh <twaugh@redhat.com> 8.63-1
changelog:
  - 8.63.  No longer need r8591 or incomplete-ccittfax patches.
  - Compile without strict aliasing opts due to warnings across several
    files.
  - Don't run autogen.sh for main package, just for ijs which doesn't
    ship with a configure script.


author: Tim Waugh <twaugh@redhat.com> 8.64-6
changelog:
  - Applied patch to fix CVE-2009-0792 (bug #491853).
  - Applied patch to fix CVE-2009-0196 (bug #493379).


author: Tim Waugh <twaugh@redhat.com> 8.64-11
changelog:
  - Fixed CVE-2009-0583,0584 patch by using 255 as the maximum number of
    points, not 100, and by not treating a missing black point tag as an
    error (bug #487744).


author: Tim Waugh <twaugh@redhat.com> 8.70-1
changelog:
  - 8.70.
  - License has changed to GPLv3+.  Packages containing programs that
    link to libgs/libijs are:
    - foomatic (GPLv2+)
    - libspectre (GPLv2+)
    - ImageMagick (ImageMagick, listed on Licensing wiki page under
      "Good Licenses" and marked as GPLv3 compat)
    - gutenprint (GPLv2+)


author: Tim Waugh <twaugh@redhat.com> 8.70-3
changelog:
  - Don't ship libtool la files (bug #542674).
  - Fix debugging output from gdevcups (CVE-2009-4270, bug #540760).
  - Harden ghostscript's debugging output functions (bug #540760).


author: Tim Waugh <twaugh@redhat.com> 8.70-6
changelog:
  - Fixed pdftoraster so that it waits for its sub-process to exit.
  - Another gdevcups duplex fix from upstream revision 10631
    (bug #541604).


author: Tim Waugh <twaugh@redhat.com> 8.71-4
changelog:
  - Actually revert the upstream gdevcups changes (bug #563313).
  - Fixed pdf2dsc.ps (bug #565935).
  - Use fixed patch for LDFLAGS to make sure libgs.so gets a soname
    (bug #565935).


author: Tim Waugh <twaugh@redhat.com> 8.71-6
changelog:
  - Fixed summary.
  - Fixed macros in changelog.
  - Avoid mixed spaces and tabs.
  - Ship COPYING file.
  - Added comments for all patches.
  - More consistent macro use.


author: Tim Waugh <twaugh@redhat.com> 8.71-7
changelog:
  - Don't own the %{_datadir}/ghostscript or
    %{_datadir}/ghostscript/conf.d directories as the filesystem
    package already does (bug #569442).


author: Tim Waugh <twaugh@redhat.com> 8.71-8
changelog:
  - Restore the TIFF default strip size of 0 (bug #571520).
  - Don't segfault closing tiffg3 device if opening failed (bug #571520).
  - Don't revert gdevcups y-axis change (bug #541604).
  - Reallocate memory in gdevcups when color depth changes (bug #563313).


author: Tim Waugh <twaugh@redhat.com> 8.71-9
changelog:
  - Backported some more TIFF fixes (bug #573970).
  - Use upstream fix for TIFF default strip size (bug #571520).


author: Tim Waugh <twaugh@redhat.com> 8.71-12
changelog:
  - Change SEARCH_HERE_FIRST default to make -P- default instead of -P
    (bug #599564).
  - Removed redundant gs-executable patch (bug #502550).


author: Tim Waugh <twaugh@redhat.com> 8.71-15
changelog:
  - Restored Fontmap.local patch, incorrectly dropped after
    ghostscript-8.15.4-3 (bug #610301).
  - Applied patch to let gdevcups use automatic memory allocation.  Use
    RIPCache=auto in /etc/cups/cupsd.conf to enable.
  - Applied patch to fix NULL dereference in bbox driver (bug #591624).
  - Applied upstream patch to fix iname.c segfault (bug #465311).


author: Tim Waugh <twaugh@redhat.com> 9.00-1
changelog:
  - Updated to 9.00.  No longer need -P-, CVE-2009-4270, CVE-2010-1628,
    SEARCH_HERE_FIRST, bbox-close, cups-realloc-color-depth,
    epstopdf-failure, fPIC, gdevcups-ripcache, iname-segfault, ldfalgs,
    pdf2dsc, pdftoraster-exit, tif-fail-close, tiff-default-strip-size,
    or tiff-fixes patches.


author: Tim Waugh <twaugh@redhat.com> 9.00-3
changelog:
  - Don't use carriage return in ps2epsi output (bug #635786).
  - Include more documentation (bug #634354).


author: Tim Waugh <twaugh@redhat.com> 9.00-8
changelog:
  - Applied upstream ICC fix (bug #655449).
  - gdevcups: use correct width and height values when allocating memory
    (upstream bug 691733).


author: Tim Waugh <twaugh@redhat.com> 9.01-1
changelog:
  - 9.01.  No longer needed gdevcups-691733, glyph-stretch-691920,
    icc-fix, scan_token, or system-jasper patches.


author: Tim Waugh <twaugh@redhat.com> - 9.05-3
changelog:
  - Removed more bundled packages (bug #816747).
  - Fixed missing error check when setting ICC profile.


author: Tim Waugh <twaugh@redhat.com> - 9.06-5
changelog:
  - Updated build requirement from gtk2-devel to gtk3-devel so that gsx
    gets built using the correct loader (bug #884483).


author: Tim Waugh <twaugh@redhat.com> 9.07-10
changelog:
  - Added in missing part of gs_sprintf backport: add in the header to
    stdio_.h. Without this there are problems with va_args on some
    platforms (bug #979681).


author: Tim Waugh <twaugh@redhat.com> 9.07-18
changelog:
  - Applied patch from upstream to fix memory handling issue that could
    lead to crashes (bug #1105519).


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-19
changelog:
  - Import LCMS2 2.6 rebase changes into ghostscript (bug #959351)
  - Fix hanging of ghostscript when converting PDF -> PNG (bug #1302121)
  - Do not SIGSEGV after icc_profile error, report error instead (bug #1243784)
  - Fix the color printing on HP InkJet printers (bug #1225858)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-21
changelog:
  - Added security fixes for:
    - CVE-2013-5653 (bug #1380327)
    - CVE-2016-7977 (bug #1380415)
    - CVE-2016-7978 (bug #1382300)
    - CVE-2016-7979 (bug #1382305)
    - CVE-2016-8602 (bug #1383940)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.07-25
changelog:
  - Added security fix for CVE-2017-7207 (bug #1434353)
  - Added explicit requirement for lcms2 version we are build with (bug #1436273)


author: Nicholas van Oudtshoorn <vanoudt@gmail.com> - 1.0.2-2
changelog:
  - Removed dependency on silgraphite-devel
  - Stopped building comparerenderer - the only thing that depended on silgraphite


author: Parag Nemade <paragn AT fedoraproject DOT org> - 1.2.0-2
changelog:
  - revert the wrongly committed f18 spec to f19
  - spec file cleanup
  - thanks to jnovy for finding me minimum texlive BR
  - partial multilib fix for manual.html


author: Parag Nemade <paragn AT fedoraproject DOT org> - 1.2.0-4
changelog:
  - Drop refman.pdf as its same as manual.html
  - patch install path for cmake files as they are arch dependent


author: Caolán McNamara <caolanm@redhat.com> - 1.3.10-1
changelog:
  - Resolves: rhbz#1472290
    CVE-2017-7771 CVE-2017-7772 CVE-2017-7773 CVE-2017-7774
    CVE-2017-7775 CVE-2017-7776 CVE-2017-7777 CVE-2017-7778


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.8.9-2
changelog:
  - Remove bundled JARs and classes
  - Add workaround for rhbz#971483
  - Add Public Domain to licenses
  - Install ASL 2.0 license text, resolves: rhbz#858257


author: Fabiano Fidêncio <fidencio@redhat.com> - 2.7.1-5
changelog:
  - Bump http-parser release number to avoid people pulling EPEL package instead
    of RHEL package
    Resolves: rhbz#1480321


author: Joe Orton <jorton@redhat.com> - 2.2.15-3
changelog:
  - default config tweaks:
   * harden httpd.conf w.r.t. .htaccess restriction (#591293)
   * load mod_substitute, mod_version by default
   * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf
   * add commented list of shipped-but-unloaded modules
   * bump up worker defaults a little
   * drop KeepAliveTimeout to 5 secs per upstream
  - fix LSB compliance in init script (#522074)
  - bundle NOTICE in -tools
  - use init script in logrotate postrotate to pick up PIDFILE
  - drop some old Obsoletes/Conflicts


author: Joe Orton <jorton@redhat.com> - 2.2.17-7
changelog:
  - generate dummy mod_ssl cert with CA:FALSE constraint (#667841)
  - add man page stubs for httpd.event, httpd.worker
  - drop distcache support
  - add STOP_TIMEOUT support to init script


author: Joe Orton <jorton@redhat.com> - 2.2.21-6
changelog:
  - complete conversion to systemd, drop init script (#770311)
  - fix comments in /etc/sysconfig/httpd (#771024)
  - enable PrivateTmp in service file (#781440)
  - set LANG=C in /etc/sysconfig/httpd


author: Joe Orton <jorton@redhat.com> - 2.4.1-1
changelog:
  - update to 2.4.1
  - adopt upstream default httpd.conf (almost verbatim)
  - split all LoadModules to conf.modules.d/*.conf
  - include conf.d/*.conf at end of httpd.conf
  - trim %changelog


author: Joe Orton <jorton@redhat.com> - 2.4.1-2
changelog:
  - clean docroot better
  - ship proxy, ssl directories within /var/cache/httpd
  - default config:
   * unrestricted access to (only) /var/www
   * remove (commented) Mutex, MaxRanges, ScriptSock
   * split autoindex config to conf.d/autoindex.conf
  - ship additional example configs in docdir


author: Joe Orton <jorton@redhat.com> - 2.4.1-3
changelog:
  - add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc)
  - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage


author: Joe Orton <jorton@redhat.com> - 2.4.2-4
changelog:
  - pull from upstream:
    * use TLS close_notify alert for dummy_connection (r1326980+)
    * cleanup symbol exports (r1327036+)


author: Joe Orton <jorton@redhat.com> - 2.4.2-15
changelog:
  - move tmpfiles.d fragment into /usr/lib per new guidelines
  - package /run/httpd not /var/run/httpd
  - set runtimedir to /run/httpd likewise


author: Joe Orton <jorton@redhat.com> - 2.4.2-18
changelog:
  - avoid use of "core" GIF for a "core" directory (#168776)
  - drop use of "syslog.target" in systemd unit file


author: Joe Orton <jorton@redhat.com> - 2.4.3-7
changelog:
  - use systemd scriptlets if available (#850149)
  - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists


author: Joe Orton <jorton@redhat.com> - 2.4.3-13
changelog:
  - filter mod_*.so auto-provides (thanks to rcollet)
  - pull in syslog logging fix from upstream (r1344712)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-5
changelog:
  - execute systemctl reload as result of apachectl graceful
  - mod_ssl: ignore SNI hints unless required by config
  - mod_cache: forward-port CacheMaxExpire "hard" option
  - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy
    is not configured.


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-6
changelog:
  - htpasswd/htdbm: fix hash generation bug (#956344)
  - do not dump vhosts twice in httpd -S output (#928761)
  - mod_cache: fix potential crash caused by uninitialized variable (#954109)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-12
changelog:
  - mod_unique_id: replace use of hostname + pid with PRNG output (#976666)
  - apxs: mention -p option in manpage


author: Joe Orton <jorton@redhat.com> - 2.4.6-13
changelog:
  - mod_ssl: sanity-check use of "SSLCompression" (#1036666)
  - mod_proxy_http: fix brigade memory usage (#1040447)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-17
changelog:
  - mod_dav: add security fix for CVE-2013-6438 (#1077907)
  - mod_log_config: add security fix for CVE-2014-0098 (#1077907)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-18
changelog:
  - mod_cgid: add security fix for CVE-2014-0231 (#1120608)
  - mod_proxy: add security fix for CVE-2014-0117 (#1120608)
  - mod_deflate: add security fix for CVE-2014-0118 (#1120608)
  - mod_status: add security fix for CVE-2014-0226 (#1120608)
  - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-19
changelog:
  - fix build on ppc64le by using configure macro (#1125545)
  - compile httpd with -O3 on ppc64le (#1123490)
  - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-30
changelog:
  - core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704)
  - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-31
changelog:
  - mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled
    instead of hardcoding it (#1168050)
  - mod_proxy: support Unix Domain Sockets (#1168081)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-32
changelog:
  - mod_authn_dbd: fix use-after-free bug with postgresql (#1188779)
  - mod_remoteip: correct the trusted proxy match test (#1179306)
  - mod_status: honor remote_ip as documented (#1169081)
  - mod_deflate: fix decompression of files larger than 4GB (#1170214)
  - core: improve error message for inaccessible DocumentRoot (#1170220)
  - ab: try all addresses instead of failing on first one when not available (#1125276)
  - mod_proxy_wstunnel: add support for SSL (#1180745)
  - mod_proxy_wstunnel: load this module by default (#1180745)
  - mod_rewrite: add support for WebSockets (#1180745)
  - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091)
  - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache
    are used and SSL session is resumed (#1170206)
  - mod_ssl: fix memory leak on httpd reloads (#1181690)
  - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476)
  - mod_cgi: return error code 408 on timeout (#1162152)
  - mod_dav_fs: set default value of DAVLockDB (#1176449)
  - add Documentation= to the httpd.service and htcacheclean.service (#1184118)
  - do not display "bomb" icon for files ending with "core" (#1170215)
  - add missing Reason-Phrase in HTTP response headers (#1162159)
  - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625)
  - apachectl: ignore HTTPD variable from sysconfig (#1214401)
  - apachectl: fix "graceful" documentation (#1214398)
  - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-34
changelog:
  - mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328)
  - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820)
  - fix -D[efined] or <Define>[d] variables lifetime accross restarts (#1227219)
  - mod_ssl: do not send NPN extension with not configured (#1226015)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-35
changelog:
  - mod_remoteip: correct the trusted proxy match test (#1179306)
  - mod_dav: send complete response when resource is created (#1235383)
  - apachectl: correct the apachectl status man page (#1231924)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-36
changelog:
  - Revert fix for #1162152, it is not needed in RHEL7
  - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-37
changelog:
  - core: fix chunk header parsing defect (CVE-2015-3183)
  - core: replace of ap_some_auth_required with ap_some_authn_required
    and ap_force_authn hook (CVE-2015-3185)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-41
changelog:
  - mod_cache: merge r->err_headers_out into r->headers when the response
    is cached for the first time (#1264989)
  - mod_ssl: Do not send SSL warning when SNI hostname is not found as per
    RFC 6066 (#1298148)
  - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038)
  - fix apache user creation when apache group already exists (#1299889)
  - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757)
  - mod_proxy: fix slow response time for reponses with error status code
    when using ProxyErrorOverride (#1283653)
  - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149)
  - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495)
  - rotatelogs: improve support for localtime (#1244545)
  - ab: fix read failure when targeting SSL server (#1255331)
  - mod_log_debug: fix LogMessage example in documentation (#1279465)
  - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime
    of DB lookup entries independently of the selected DB engine (#1287844)
  - mod_ssl: fix hardware crypto support with custom DH parms (#1291865)
  - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)


author: Joe Orton <jorton@redhat.com> - 2.4.6-47
changelog:
  - prefork: fix delay completing graceful restart (#1327624)
  - mod_ldap: fix authz regression, failing to rebind (#1415257)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-48
changelog:
  - Resolves: #1406184 - stapling_renew_response: abort early
    (before apr_uri_parse) if ocspuri is empty


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-50
changelog:
  - Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed
    worker to be retried before the retry period is over


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-53
changelog:
  - Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple
    successive graceful reloads


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-54
changelog:
  - Resolves: #1372692 - Apache httpd does not log status code "413" in
    access_log when exceeding LimitRequestBody


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-55
changelog:
  - Resolves: #1371876 - Apache httpd returns "200 OK" for a request
    exceeding LimitRequestBody when enabling mod_ext_filter


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-56
changelog:
  - Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi
    spamming non-errors: AH01075: Error dispatching request to : (passing
    brigade to output filters)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-58
changelog:
  - Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves
    with mod_proxy_http and mod_proxy_ajp


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-59
changelog:
  - Resolves: #1378946 - Backport of apache bug 55910: Continuation lines
    are broken during buffer resize


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-60
changelog:
  - Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
    in certinfo_free() function registered by ssl_stapling_ex_init()


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-61
changelog:
  - Related: #1414258 - Crash during restart or at startup in mod_ssl,
    in certinfo_free() function registered by ssl_stapling_ex_init()


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-62
changelog:
  - Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
    patch to set worker secret passed to tomcat


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-64
changelog:
  - Resolves: #1442872 - apache user is not created during httpd installation
    when apache group already exist with GID other than 48


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-67.2
changelog:
  - Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
    authentication bypass
  - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
  - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
  - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
  - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
    in mod_auth_digest


author: CentOS Sources <bugs@centos.org> - 2.4.6-67.el7.centos.2
changelog:
  - Remove index.html, add centos-noindex.tar.gz
  - change vstring
  - change symlink for poweredby.png
  - update welcome.conf with proper aliases


author: Rob Crittenden <rcritten@redhat.com> - 0.1.0-2
changelog:
  - Add mod_auth_kerb and cyrus-sasl-gssapi to Requires
  - Remove references to admin server in ipa-server-setupssl
  - Generate a client certificate for the XML-RPC server to connect to LDAP with
  - Create a keytab for Apache
  - Create an ldif with a test user
  - Provide a certmap.conf for doing SSL client authentication


author: Karl MacMillan <kmacmill@redhat.com> - 0.4.0-2
changelog:
  * Fri Sep 7 2007 Karl MacMillan <kmacmill@redhat.com> - 0.3.0-1
  - Added support for libipa-dna-plugin


author: Rob Crittenden <rcritten@redhat.com> - 0.4.1-2
changelog:
  - Broke invididual Requires and BuildRequires onto separate lines and
    reordered them
  - Added python-tgexpandingformwidget as a dependency
  - Require at least fedora-ds-base 1.1


author: Rob Crittenden <rcritten@redhat.com> 0.99-3
changelog:
  - Included LICENSE and README in all packages for documentation
  - Move user-modifiable content to /etc/ipa and linked back to
    /usr/share/ipa/html
  - Changed some references to /usr to the {_usr} macro and /etc
    to {_sysconfdir}
  - Added popt-devel to BuildRequires for Fedora 8 and higher and
    popt for Fedora 7
  - Package the egg-info for Fedora 9 and higher for ipa-python


author: Rob Crittenden <rcritten@redhat.com> 0.99-7
changelog:
  - Ensure that /etc/ipa exists before moving user-modifiable html files there
  - Put html files into /etc/ipa/html instead of /etc/ipa


author: Rob Crittenden <rcritten@redhat.com> 0.99-9
changelog:
  - Pull upstream changelog 641
  - Require minimum version of krb5-server on F-7 and F-8
  - Package some new files


author: Rob Crittenden <rcritten@redhat.com> 0.99-10
changelog:
  - Pull upstream changelog 678
  - Add new subpackage, ipa-server-selinux
  - Add Requires: authconfig to ipa-python (bz #433747)
  - Package i18n files


author: Rob Crittenden <rcritten@redhat.com> 0.99-11
changelog:
  - Pull upstream changelog 698
  - Fix ownership of /var/log/ipa_error.log during install (435119)
  - Add pwpolicy command and man page


author: Rob Crittenden <rcritten@redhat.com> - 1.0.0-2
changelog:
  - Fix Requires for krb5-server that was missing for Fedora versions > 9
  - Remove quotes around test for fedora version to package egg-info


author: Rob Crittenden <rcritten@redhat.com> - 1.0.0-4
changelog:
  - Add missing entry for /var/cache/ipa/kpasswd (444624)
  - Added patch to fix permissions problems with the Apache NSS database.
  - Added patch to fix problem with DNS querying where the query could be
    returned as the answer.
  - Fix spec error where patch1 was in the wrong section


author: Rob Crittenden <rcritten@redhat.com> - 1.0.0-5
changelog:
  - Set fedora-ds-base minimum version to 1.1.0.1-4 and mod_nss minimum
    version to 1.0.7-4 so we pick up the NSS fixes.
  - Add selinux-policy-base(post) to Requires (446496)


author: Rob Crittenden <rcritten@redhat.com> - 1.1.0-1
changelog:
  - Update to upstream version 1.1.0
  - Patch for indexing memberof attribute
  - Patch for indexing uidnumber and gidnumber
  - Patch to change DNA default values for replicas
  - Patch to fix uninitialized variable in ipa-getkeytab


author: Simo Sorce <ssorce@redhat.com> - 1.1.0-3
changelog:
  - Fix for CVE-2008-3274
  - Fix segfault in ipa-kpasswd in case getifaddrs returns a NULL interface
  - Add fix for bug #453185
  - Rebuild against openldap libraries, mozldap ones do not work properly
  - TurboGears is currently broken in rawhide. Added patch to not build
    the UI locales and removed them from the ipa-server files section.


author: Rob Crittenden <rcritten@redhat.com> - 1.2.0-1
changelog:
  - Update to upstream version 1.2.0
  - Set fedora-ds-base minimum version to 1.1.3 for winsync header
  - Set the minimum version for SELinux policy
  - Remove references to Fedora 7


author: Simo Sorce <ssorce@redhat.com> - 1.2.0-3
changelog:
  - Respin after the tarball has been re-released upstream
    New hash is 506c9c92dcaf9f227cba5030e999f177


author: Jason Gerard DeRose <jderose@redhat.com> - 1.99-8
changelog:
  - Removed python-cherrypy from BuildRequires and Requires
  - Added Requires python-assets, python-wehjit


author: Rob Crittenden <rcritten@redhat.com> - 1.99-23
changelog:
  - Change Requires from fedora-ds-base to 389-ds-base
  - Set minimum level of 389-ds-base to 1.2.6 for the replication
    version plugin.


author: Rob Crittenden <rcritten@redhat.com> - 1.99-27
changelog:
  - Set minimum version of certmonger to 0.26 (to pck up #621670)
  - Set minimum version of pki-silent to 1.3.4 (adds -key_algorithm)
  - Set minimum version of pki-ca to 1.3.6
  - Set minimum version of sssd to 1.2.1


author: Rob Crittenden <rcritten@redhat.com> - 1.99-28
changelog:
  - Drop conflicts on mod_nss
  - Require nss-pam-ldapd on F-14 or higher instead of nss_ldap (#606847)
  - Drop a slew of conditionals on older Fedora releases (< 12)
  - Add a few conditionals against RHEL 6
  - Add Requires of nss-tools on ipa-client


author: Rob Crittenden <rcritten@redhat.com> - 1.99-29
changelog:
  - Drop requires on python-configobj (not used any more)
  - Drop ipa-ldap-updater message, upgrades are done differently now


author: Simo Sorce <ssorce@redhat.com> - 1.99-39
changelog:
  - Remove dependency on nss_ldap/nss-pam-ldapd
  - The official client is sssd and that's what we use by default.


author: Rob Crittenden <rcritten@redhat.com> - 1.99-41
changelog:
  - Re-arrange doc and defattr to clean up rpmlint warnings
  - Remove conditionals on older releases
  - Move some man pages into admintools subpackage
  - Remove some explicit Requires in client that aren't needed
  - Consistent use of buildroot vs RPM_BUILD_ROOT


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.2.beta.git80e87e7
changelog:
  - Remove unnecessary moving of v1 CA serial number file in post script
  - Add Obsoletes for server-selinxu subpackage
  - Using git snapshot 442d6ad30ce1156914e6245aa7502499e50ec0da


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.1.beta2
changelog:
  - Set min version of 389-ds-base to 1.2.8
  - Set min version of mod_nss 1.0.8-10
  - Set min version of selinux-policy to 3.9.7-27
  - Add dogtag themes to Requires
  - Update to upstream freeipa-2.0.0.pre2


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.1.rc1
changelog:
  - Set minimum version of sssd to 1.5.1
  - Update to upstream freeipa-2.0.0.rc1
  - Move server-only binaries from admintools subpackage to server


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.4.rc2
changelog:
  - Update to upstream freeipa-2.0.0.rc2
  - Set minimum version of python-nss to 0.11 to make sure IPv6 support is in
  - Set minimum version of sssd to 1.5.1
  - Patch to include SuiteSpotGroup when setting up 389-ds instances
  - Move a lot of BuildRequires so this will build with ONLY_CLIENT enabled


author: Rob Crittenden <rcritten@redhat.com> - 2.0.1-1
changelog:
  - Update minimum selinux-policy to 3.9.16-18
  - Update minimum pki-ca and pki-selinux to 9.0.7
  - Update minimum 389-ds-base to 1.2.8.0-1
  - Update to upstream 2.0.1


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.3-6
changelog:
  - Introduce upgrade script to recover existing configuration after systemd migration
    as user has no means to recover FreeIPA from systemd migration
  - Upgrade script:
    - recovers symlinks in Dogtag instance install
    - recovers systemd configuration for FreeIPA's directory server instances
    - recovers freeipa.service
    - migrates directory server and KDC configs to use proper keytabs for systemd services


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.4-2
changelog:
  - Allow longer dirsrv startup with systemd:
    - IPAdmin class will wait until dirsrv instance is available up to 10 seconds
    - Helps with restarts during upgrade for ipa-ldap-updater
  - Fix pylint warnings from F16 and Rawhide


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.4-3
changelog:
  - Allow Web-based migration to work with tightened SE Linux policy (#769440)
  - Rebuild slapi plugins against re-enterant version of libldap


author: Martin Kosek <mkosek@redhat.com> - 2.1.4-4
changelog:
  - Fix ipa-replica-install crashes
  - Fix ipa-server-install and ipa-dns-install logging
  - Set minimum version of pki-ca to 9.0.17 to fix sslget problem
    caused by FEDORA-2011-17400 update (#771357)


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.4-5
changelog:
  - Force to use 389-ds 1.2.10-0.8.a7 or above
  - Improve upgrade script to handle systemd 389-ds change
  - Fix freeipa to work with python-ldap 2.4.6


