# changelog

author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Put changelog at the end
  - Move .so files to devel subpackage
  - Don't mess with ld.so.conf
  - Don't use %{prefix}, this isn't a relocatable package
  - Don't define a bad docdir
  - Add BuildRequires
  - Use %{_tmppath}
  - Don't define name, version etc. on top of the file (why 
    do so many do that?)
  - s/Copyright/License/


author: David King <amigadave@amigadave.com> 5.1.0-1
changelog:
  - Update to 5.1.0 (#1164434)
  - Drop libxml2 patch (fixed upstream)
  - Use pkgconfig for BuildRequires


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-2
changelog:
  - Address review comments (rhbz#832670)
      fix licence (LGPLv2+ -> LGPLv2)
      fix tarball URL
      remove obsolete use of RPM_BUILD_ROOT
      remove BuildRequires on pkg-config
      remove use of %defattr


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-1
changelog:
  - Package libmusicbrainz5, apart from the name/version it's identical to
    libmusicbrainz4 so this .spec is based on it.


author: Christophe Fergeau <cfergeau@redhat.com> - 4.0.3-1
changelog:
  - New upstream 4.0.3 release, should fix a bug breaking metadata fetching
    from musicbrainz servers


author: Rex Dieter <rdieter@fedoraproject.org> - 3.0.2-5
changelog:
  - fix doxygen-induced multilib conflicts (#480378)
  - add %check section (disabled by default, pending cppunit detection issues)


author: John (J5) Palmieri <johnp@redhat.com> 2.1.1-1
changelog:
  - Update to upstream version 2.1.1
  - Removed libmusicbrainz-2.0.2-missing-return.patch
  - Removed libmusicbrainz-2.0.2-conf.patch


author: Brent Fox <bfox@redhat.com> 2.0.2-6
changelog:
  - add a BuildPreReq for libstdc++-devel and gcc-c++ (bug #106556)
  - add a Requires for libstdc++-devel for libmusicbrainz-devel


author: Ondrej Vasik <ovasik@redhat.com> - 4.2.4-51
changelog:
  - check malloc success (#473488)
  - fix few compiler warnings, free malloc memory before exit
  - new URL


author: Trond Eivind Glomsrod <teg@redhat.com>
changelog:
  - Make it support large files (structs, stats, opens and of course:
    _don't use signed longs for file size before and after compression_.)
    This should fix #39470


author: Trond Eivind Glomsrod <teg@redhat.com>
changelog:
  - change category to Applications/File, to match
    gzip and bzip2 
  - rename the spec file to ncompress.spec
  - add ppc to the bigendian arch list


author: Owen Taylor <otaylor@redhat.com> - 3.20.1-2
changelog:
  - Remove dependency on system-backgrounds-gnome; this made sense when
    gnome-desktop contained the GConf schemas, but now the background
    settings live in gsettings-desktop-schemas and are overridden to
    point to a Fedora background with a file we drop in from
    desktop-backgrounds-gnome.


author: David King <amigadave@amigadave.com> - 3.15.90-1
changelog:
  - Update to 3.15.90
  - Use license macro for COPYING and COPYING.LIB
  - Use pkgconfig for BuildRequires


author: Adam Jackson <ajax@redhat.com> - 1.7.1-5
changelog:
  - Drop BuildRequires: java-devel. Originally that was to force a specific
    JDK version, which we no longer need to do.


author: Simone Caronni <negativo17@gmail.com> - 1.7.1-1
changelog:
  - Update to 1.7.1.
  - Skip PDF document generation through fop. It fixes FTBFS on Fedora 22. Tarball
    is not yet compatible with Fedora xmlgraphics-commons >= 2.0.
  - Remove useless db files.


author: Jan Dobes 2.7.1-1
changelog:
  - Updated links to github in spec files
  - Migrating Fedorahosted to GitHub
  - Bumping package versions for 2.7.
  - Bumping package versions for 2.6.


author: Gennadii Altukhov <galt@redhat.com> 2.5.1-1
changelog:
  - Adapt spacewalk-client-cert for Python 2/3 compatibility
  - Bumping package versions for 2.5.
  - Bumping package versions for 2.4.


author: Charalampos Stratakis <cstratak@redhat.com> - 0.28.1-6
changelog:
  - Replace GCC's attribute optimize("Os") by the better supported and similar (cold).
  - Resolves: rhbz#1658621


author: Petr Pisar <ppisar@redhat.com> - 6.06-2
changelog:
  - Fix CVE-2014-3230 (incorrect handling of SSL certificate verification if
    HTTPS_CA_DIR or HTTPS_CA_FILE environment variables are set) (bug #1094442)


author: Jacob Wang <jacob.wang@oracle.com> - 2.4.37-12.0.1
changelog:
  - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262]
  - Replace index.html with Oracle's index page oracle_index.html


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-12
changelog:
  - Resolves: #1696142 - CVE-2019-0217 httpd:2.4/httpd: mod_auth_digest: access
    control bypass due to race condition
  - Resolves: #1696097 - CVE-2019-0220 httpd:2.4/httpd: URL normalization
    inconsistency
  - Resolves: #1669221 - `ExtendedStatus Off` directive when using mod_systemd
    causes systemctl to hang
  - Resolves: #1673022 - httpd can not be started with mod_md enabled


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-11
changelog:
  - Resolves: #1695432 - CVE-2019-0211 httpd: privilege escalation
    from modules scripts
  - Resolves: #1696091 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control 
    bypass when using per-location client certification authentication


author: Joe Orton <jorton@redhat.com> - 2.4.37-7
changelog:
  - add DefaultStateDir/ap_state_dir_relative() (#1653009)
  - mod_dav_fs: use state dir for default DAVLockDB
  - mod_md: use state dir for default MDStoreDir


author: Joe Orton <jorton@redhat.com> - 2.4.35-7
changelog:
  - mod_ssl: drop SSLRandomSeed from default config (#1638730)
  - mod_ssl: follow OpenSSL protocol defaults if SSLProtocol
       is not configured (Rob Crittenden, #1638738)


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.35-4
changelog:
  - Resolves: #1635681 - sync with Fedora 28/29 httpd
  - comment-out SSLProtocol, SSLProxyProtocol from ssl.conf in default
    configuration; now follow OpenSSL system default (#1468322)
  - dropped NPN support
  - mod_md: change hard-coded default MdStoreDir to state/md (#1563846)
  - don't block on service try-restart in posttrans scriptlet
  - build and load mod_brotli
  - mod_systemd: show bound ports in status and log to journal
    at startup
  - updated httpd.service.xml man page
  - tweak wording in privkey passphrase prompt
  - drop sslmultiproxy patch
  - apachectl: don't read /etc/sysconfig/httpd
  - drop irrelevant Obsoletes for devel subpackage
  - move instantiated httpd@.service to main httpd package


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.28-2
changelog:
  - Resolves: #1512563 - httpd: update welcome page branding
  - Resolves: #1511123 - RFE: httpd use event MPM by default
  - Resolves: #1493510 - RFE: httpd, add IP_FREEBIND support for Listen


author: Joe Orton <jorton@redhat.com> - 2.4.27-9
changelog:
  - use sscg defaults; append CA cert to generated cert
  - document httpd-init.service in httpd-init.service(8)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.25-7
changelog:
  - Resolves: #1397243 - Backport Apache Bug 53098 - mod_proxy_ajp:
    patch to set worker secret passed to tomcat


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.23-7
changelog:
  - Resolves: #1401530 - CVE-2016-8740 httpd: Incomplete handling of
    LimitRequestFields directive in mod_http2


author: Joe Orton <jorton@redhat.com> - 2.4.23-2
changelog:
  - restore build of mod_proxy_fdpass (#1325883)
  - improve check tests to catch configured-but-not-built modules


author: Joe Orton <jorton@redhat.com> - 2.4.23-1
changelog:
  - update to 2.4.23 (#1325883, #1353203)
  - load mod_proxy_hcheck
  - recommend use of "systemctl edit" in httpd.service


author: Joe Orton <jorton@redhat.com> - 2.4.18-3
changelog:
  - remove httpd pre script (duplicate of httpd-filesystem's)
  - in httpd-filesystem pre script, create group/user iff non-existent


author: Joe Orton <jorton@redhat.com> - 2.4.17-1
changelog:
  - update to 2.4.17 (#1271224)
  - build, load mod_http2
  - don't build mod_asis, mod_file_cache
  - load mod_cache_socache, mod_proxy_wstunnel by default
  - check every built mod_* is configured
  - synch ssl.conf with upstream; disable SSLv3 by default


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.10-15
changelog:
  - core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704)
  - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)
  - mod_proxy_fcgi: fix a potential crash with long headers (CVE-2014-3583)
  - mod_lua: fix handling of the Require line when a LuaAuthzProvider is used
    in multiple Require directives with different arguments (CVE-2014-8109)


author: Joe Orton <jorton@redhat.com> - 2.4.10-8
changelog:
  - pull in httpd-filesystem as Requires(pre) (#1128328)
  - fix cipher selection in default ssl.conf, depend on new OpenSSL (#1134348)
  - require hostname for mod_ssl post script (#1135118)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.10-7
changelog:
  - mod_systemd: updated to the latest version
  - use -lsystemd instead of -lsystemd-daemon (#1125084)
  - fix possible crash in SIGINT handling (#958934)


author: Joe Orton <jorton@redhat.com> - 2.4.10-6
changelog:
  - mod_ssl: treat "SSLCipherSuite PROFILE=..." as special (#1109119)
  - switch default ssl.conf to use PROFILE=SYSTEM (#1109119)


author: Joe Orton <jorton@redhat.com> - 2.4.10-2
changelog:
  - enable mod_request by default for mod_auth_form
  - move disabled-by-default modules from 00-base.conf to 00-optional.conf


author: Joe Orton <jorton@redhat.com> - 2.4.6-4
changelog:
  - load mod_macro by default (#998452)
  - add README to conf.modules.d
  - mod_proxy_http: add possible fix for threading issues (r1534321)
  - core: add fix for truncated output with CGI scripts (r1530793)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-12
changelog:
  - mod_unique_id: replace use of hostname + pid with PRNG output (#976666)
  - apxs: mention -p option in manpage


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-6
changelog:
  - htpasswd/htdbm: fix hash generation bug (#956344)
  - do not dump vhosts twice in httpd -S output (#928761)
  - mod_cache: fix potential crash caused by uninitialized variable (#954109)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-5
changelog:
  - execute systemctl reload as result of apachectl graceful
  - mod_ssl: ignore SNI hints unless required by config
  - mod_cache: forward-port CacheMaxExpire "hard" option
  - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy
    is not configured.


author: Joe Orton <jorton@redhat.com> - 2.4.3-13
changelog:
  - filter mod_*.so auto-provides (thanks to rcollet)
  - pull in syslog logging fix from upstream (r1344712)


author: Joe Orton <jorton@redhat.com> - 2.4.3-7
changelog:
  - use systemd scriptlets if available (#850149)
  - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists


author: Joe Orton <jorton@redhat.com> - 2.4.2-18
changelog:
  - avoid use of "core" GIF for a "core" directory (#168776)
  - drop use of "syslog.target" in systemd unit file


author: Joe Orton <jorton@redhat.com> - 2.4.2-15
changelog:
  - move tmpfiles.d fragment into /usr/lib per new guidelines
  - package /run/httpd not /var/run/httpd
  - set runtimedir to /run/httpd likewise


author: Joe Orton <jorton@redhat.com> - 2.4.2-4
changelog:
  - pull from upstream:
    * use TLS close_notify alert for dummy_connection (r1326980+)
    * cleanup symbol exports (r1327036+)


author: Joe Orton <jorton@redhat.com> - 2.4.1-3
changelog:
  - add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc)
  - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage


author: Joe Orton <jorton@redhat.com> - 2.4.1-2
changelog:
  - clean docroot better
  - ship proxy, ssl directories within /var/cache/httpd
  - default config:
   * unrestricted access to (only) /var/www
   * remove (commented) Mutex, MaxRanges, ScriptSock
   * split autoindex config to conf.d/autoindex.conf
  - ship additional example configs in docdir


author: Joe Orton <jorton@redhat.com> - 2.4.1-1
changelog:
  - update to 2.4.1
  - adopt upstream default httpd.conf (almost verbatim)
  - split all LoadModules to conf.modules.d/*.conf
  - include conf.d/*.conf at end of httpd.conf
  - trim %changelog


author: Joe Orton <jorton@redhat.com> - 2.2.21-6
changelog:
  - complete conversion to systemd, drop init script (#770311)
  - fix comments in /etc/sysconfig/httpd (#771024)
  - enable PrivateTmp in service file (#781440)
  - set LANG=C in /etc/sysconfig/httpd


author: Joe Orton <jorton@redhat.com> - 2.2.17-7
changelog:
  - generate dummy mod_ssl cert with CA:FALSE constraint (#667841)
  - add man page stubs for httpd.event, httpd.worker
  - drop distcache support
  - add STOP_TIMEOUT support to init script


author: Joe Orton <jorton@redhat.com> - 2.2.15-3
changelog:
  - default config tweaks:
   * harden httpd.conf w.r.t. .htaccess restriction (#591293)
   * load mod_substitute, mod_version by default
   * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf
   * add commented list of shipped-but-unloaded modules
   * bump up worker defaults a little
   * drop KeepAliveTimeout to 5 secs per upstream
  - fix LSB compliance in init script (#522074)
  - bundle NOTICE in -tools
  - use init script in logrotate postrotate to pick up PIDFILE
  - drop some old Obsoletes/Conflicts


author: Daniel P. Berrangé <berrange@redhat.com> - 4.5.0-4
changelog:
  - Fix typed parameter memory handling (rhbz #1602346)
  - Fix missing NWFilterBinding module (rhbz #1615841)


author: David Tardon <dtardon@redhat.com> - 0.3.1-5
changelog:
  - Resolves: rhbz#918079 libcmis::sha1() can return digests with fewer
    than 40 hexadecimal digits
  - Resolves: rhbz#918080 restrict redirection protocols


author: David King <amigadave@amigadave.com> - 2:3.13.92-1
changelog:
  - Update to 3.13.92
  - Split camera service out to a subpackage
  - Use pkgconfig for BuildRequires
  - Tidy spec file


author: Hans de Goede <hdegoede@redhat.com> - 2:3.9.91-3
changelog:
  - In F-19 we had a long list of bugfix patches, most of these have been merged
    into gnome-3.10 but not all have been merged yet, re-add the non merged ones
  - Fix video recording not working
  - Allow changing effects while recording
  - Disallow changing camera settings while recording
  - Fix cheese misbehavior when going from 0 -> 1 or 1 -> 0 camera devices


author: Hans de Goede <hdegoede@redhat.com> - 2:3.9.2-2
changelog:
  - Fix cheese-introduction.png being in both cheese and cheese-libs (#893756)
  - Put the COPYING file in the docs for cheese-libs (#893800)


author: Hans de Goede <hdegoede@redhat.com> - 2:3.5.5-1
changelog:
  - New upstream release 3.5.5
  - Fix cheese crashing on tvcards which report they can capture 0x0 as
    minimum resolution (rhbz#850505)


author: Hans de Goede <hdegoede@redhat.com> - 2:3.4.2-3
changelog:
  - Reduce camerabin pipeline creation time (rhbz#797188, gnome#677731)
  - Don't add 0 byte sized files to the thumb-view (rhbz#830166, gnome#677735)
  - Fix sizing of horizontal thumbnail list (rhbz#829957)
  - Optimize encoding parameters (rhbz#572169)


author: Hans de Goede <hdegoede@redhat.com> - 2:3.5.1-2
changelog:
  - Fix missing images on buttons, also fixes the "Gtk-WARNING **: Attempting to
    add a widget with type GtkImage to a GtkButton ..." warnings (gnome#677543)
  - Fix cheese crashing when started on machines with v4l2 radio or vbi devices
    (rhbz#810429, gnome#677544)


author: Alexander Larsson <alexl@redhat.com> - 1:2.91.93-3
changelog:
  - Move gsettings schema to cheese-libs, fixes control-center crash (#691667)
  - Move typelib to cheese-libs


author: Kalev Lember <klember@redhat.com> - 3.27.92-1
changelog:
  - Update to 3.27.92
  - Don't set group tags
  - Remove ancient obsoletes
  - Remove gsettings schema scriptlets


author: Ray Strode <rstrode@redhat.com> 3.18.0-4
changelog:
  - Fix password handoff in non-autologin case
  - Remove unneccessary part of autologin fix
    Related: #1269581


author: David King <amigadave@amigadave.com> - 3.15.90-1
changelog:
  - Update to 3.15.90
  - Update URL
  - Use pkgconfig for BuildRequires
  - Use license macro for COPYING and COPYING.LIB
  - Preserve timestamps during install


author: Tomas Bzatek <tbzatek@redhat.com> - 2.29.92-2
changelog:
  - More robust error display and handling
  - [secret-store] Don't save session keyring to disk
  - [dbus] Allow unlocking even when always unlock is not available
  - [dbus] Hide the automatically unlock check when login not usable
  - [login] Fix various issues storing and using auto unlock passwords


author: Tomas Bzatek <tbzatek@redhat.com> - 2.29.5-2
changelog:
  - Fix endless loop when looking for password in login keyring
  - Fix undefined reference to S_ISSOCK (#557970)


author: Matthias Clasen <mclasen@redhat.com> - 2.26.1-1
changelog:
  - Update to 2.26.1
  - See http://download.gnome.org/sources/gnome-keyring/2.26/gnome-keyring-2.26.1.news


author: Richard Hughes <rhughes@redhat.com> - 2.26.0-2
changelog:
  - Fix a nasty bug that's been fixed upstream where gnome-keyring-daemon
    would hang when re-allocating from a pool of secure memory.


author: Colin Walters <walters@redhat.com> - 2.22.3.6-2
changelog:
  - Add --disable-acl-prompts; you can't try to maintain integrity
    between two processes with the same UID and no other form of
    access control.


author: Alexander Larsson <alexl@redhat.com> - 2.20-4
changelog:
  - Have the pam module tell the daemon to init the login keyring 
    without using the socket as selinux limits access to that


author: Alexander Larsson <alexl@redhat.com> - 2.20-2
changelog:
  - Backport fix from svn where newly created keyrings weren't
    found
  - Don't unset default keyring on daemon shutdown


author: Daiki Ueno <dueno@redhat.com> - 0.1.24-1
changelog:
  - Update to 0.1.24
  - Apply patch from upstream, which fixes scim-thai FTBFS with GCC6 (Closes: #1308117)


author: Daiki Ueno <dueno@redhat.com> - 0.1.19-1
changelog:
  - Update to 0.1.19
  - Fix bogus dates in %changelog
  - Remove libthai-0.1.9-doxygen-segfault.patch, which is no longer
    necessary with the latest Doxygen
  - Don't install man pages, as per upstream's default


author: Behdad Esfahbod <besfahbo@redhat.com> 0.1.7-2
changelog:
  - Apply comments from Matthias Clasen (#222611) 
  - devel summary improvement
  - devel require pkgconfig
  - configure --disable-static
  - Add comments about the voodoo
  - Install docs in the right place


author: Behdad Esfahbod <besfahbo@redhat.com> 0.1.7-1
changelog:
  - Initial package based on package by Supphachoke Suntiwichaya
    and Kamthorn Krairaksa for the OLPC.


author: Martin Pitt <mpitt@redhat.com>
changelog:
  - Drop unpublished -doc package to fix FTBFS rhbz#1640736
  - Add dist-git smoketest rhbz#1625683
  - Move dbus system user creation to correct package rhbz#1634496


author: David Herrmann <dh.herrmann@gmail.com> - 1:1.12.8-2
changelog:
  - Extract 'dbus-tools' package from 'dbus-daemon' to provide all command-line
    utilities independent of the actual message bus. They are valid to be used
    with independent message-bus implementations, so they should not needlessly
    pull in dbus-daemon.


author: David Herrmann <dh.herrmann@gmail.com> - 1:1.12.8-1
changelog:
  - Extract 'dbus-common' package from 'dbus-daemon' to provide XML configuration
    and setup files as independent package ready for alternative Message Bus
    implementations to be used.


author: David Herrmann <dh.herrmann@gmail.com> - 1:1.12.8-1
changelog:
  - Turn 'dbus' package into 'dbus-daemon' package, but keep 'dbus' for
    compatibility around and make it pull in the new 'dbus-daemon' package.


author: Adam Jackson <ajax@redhat.com> - 1:1.12.0-3
changelog:
  - Don't Require: xorg-x11-xinit. We don't actually need it, and newer
    filesystem packages own the directory for us.


author: David King <amigadave@amigadave.com> - 1:1.9.14-1
changelog:
  - Update to 1.9.14
  - Update man page globs in files section
  - Build tests in a separate build directory
  - Enable installed tests, with new -tests subpackage
  - Allow extra dependencies for tests to be disabled independently of check


author: David King <amigadave@amigadave.com> - 1:1.8.12-2
changelog:
  - Drop bindir patch, and update to comply with UsrMove
  - Correct license description for multiple licenses
  - Use macroized systemd scriptlets (#850083)
  - Add some more documentation from the upstream tarball
  - Tighten subpackage dependencies by using %{?_isa}
  - Use --with-tests to conditionalize test dependencies
  - Use /run instead of /var/run
  - Remove obsolete dbus.target.wants (#1084087)


author: David King <amigadave@amigadave.com> - 1:1.8.12-1
changelog:
  - Update to 1.8.12 (#1168438)
  - Fixes CVE-2014-3635 (fd.o#83622)
  - Fixes CVE-2014-3636 (fd.o#82820)
  - Fixes CVE-2014-3637 (fd.o#80559)
  - Fixes CVE-2014-3638 (fd.o#81053)
  - Fixes CVE-2014-3639 (fd.o#80919)
  - Fixes CVE-2014-7824 (fd.o#85105)


author: Colin Walters <walters@verbum.org> - 1:1.8.4-2
changelog:
  - New upstream version:
  - Fixes CVE-2014-3477 (fd.o#78979): "local DoS in dbus-daemon"
  - Drop "make check" for now, per http://lists.freedesktop.org/archives/dbus/2014-June/016223.html
  - BR systemd-devel


author: Ville Skyttä <ville.skytta@iki.fi> - 1:1.6.18-3
changelog:
  - Adapt to unversioned docdirs; don't ship all docs in main package.
  - Fix bogus dates in %changelog and tabs vs spaces warning.


author: Colin Walters <walters@verbum.org> - 1:1.6.18-1
changelog:
  - New upstream version
  - Added backported patch which should fix the test suite; thanks to
    Yanko Kaneti for the suggestion.


author: Colin Walters <walters@verbum.org> - 1:1.6.12-2
changelog:
  - Enable all upstream tests
    Resolves: #955532
    This is fairly hacky; a much better replacement would be
    something like the InstalledTests system.  But we have to live
    with rpm and stuff for now...


author: Colin Walters <walters@verbum.org>
changelog:
  - Update to 1.4.20; closes #806082
  - Ensure /var/lib/dbus exists; this seems to have been
    dropped from upstream build rules.
  - Adapt to documentation actually being installed


author: Lennart Poettering <lpoetter@redhat.com> - 1:1.4.10-3
changelog:
  - Don't restart D-Bus on upgrades, dont' enable D-Bus, since it is statically enabled.
  - https://bugzilla.redhat.com/show_bug.cgi?id=732426


author: Colin Walters <walters@verbum.org> - 1:1.4.10-1
changelog:
  - New upstream version
  - Drop XML docs patch which is now upstream
  - Drop devhelp stuff; people should be using GDBus now.  If you
    don't, the raw doxygen is fine.


author: Colin Walters <walters@verbum.org> - 1:1.2.18-1
changelog:
  - New upstream release
    Drop all upstreamed patches.
  - start-early.patch had both bindir changes and start-early; the
    latter was upstreamed, so start-early is now bindir.patch.
    Ideally later get this partial-bindir stuff upstream.


author: Colin Walters <walters@verbum.org> - 1:1.2.16-11
changelog:
  - Drop dbus-libs requiring dbus; this was unnecessary for programs
    which happened to speak the dbus protocol but don't require
    the daemon.
    Note that libdbus does support autolaunching dbus-daemon in
    the session as an emergency fallback for legacy situations; however,
    these cases were likely to have dbus installed already (via comps).
    If they don't, well one turned to the wrong page in the choose your
    own adventure book.


author: Ray Strode <rstrode@redhat.com> - 1:1.2.16-9
changelog:
  - Fix activation of daemons (#545267)
  - Fix reload memleak (fdo #24697)
  - Don't forget about pending activations on reload (fdo #24350)
  - Fix reload race (fdo #21597)


author: Colin Walters <walters@redhat.com> - 1:1.2.16-2
changelog:
  - Explicitly add a dbus group id, fixes dbus files getting a
    random group id in cases where the RPM install order varies.
    Fixes https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=458183


author: Colin Walters <walters@redhat.com> - 1:1.2.16-1
changelog:
  - Upstream 1.2.16
  - Remove inotify patch, now upstreamed
  - Remove timeout patch, obsolete with upstream change to infinite
    timeout maximum by default


author: Matthias Clasen <mclasen@redhat.com> - 1.2.1-6
changelog:
  - Add a patch from upstream git that adds a method
    for changing the activation environment on the session bus


author: John (J5) Palmieri <johnp@redhat.com> - 1.2.1-1
changelog:
  - update to latest upstream
  - major version change is really a maint release for 1.1.20
    please read the NEWS file in the source for more information


author: David Zeuthen <davidz@redhat.com> - 1.1.20-1.el8
changelog:
  - Update to latest upstream release. Includes fix for CVE-2008-0595.
  - Drop some patches that went upstream already


author: John (J5) Palmieri <johnp@redhat.com> - 1.1.3-1
changelog:
  - new upstream version which obsoletes a number of our patches
  - doc section added for the devhelp docs


author: Dan Walsh <dwalsh@redhat.com> - 1.1.2-5.el8
changelog:
  - Reverse we_were_root check to setpcap if we were root.  Also only init
  audit if we were root.  So error dbus message will not show up when policy
  reload happens.  dbus -session will no longer try to send audit message,
  only system will.


author: David Zeuthen <davidz@redhat.com> - 1.1.2-2.el8
changelog:
  - Move system bus activation helper to /{lib,lib64}/dbus-1. Also set
    the correct mode and permissions.
  - Own the directory /usr/share/dbus-1/system-services
  - Delete the diretory /{lib,lib64}/dbus-1.0 as it's not used
  - Pass 'dbus' instead of 81 as --with-dbus-user; otherwise the setuid
    system bus activation helper fails


author: Ray Strode <rstrode@redhat.com> - 1.0.1-1
changelog:
  - Update to 1.0.1
  - Apply patch from Thiago Macieira <thiago@kde.org> to
    fix failed assertion in threading implementation
  - Drop some crazy looking build time speed optimization


author: John (J5) Palmieri <johnp@redhat.com> - 0.90-6
changelog:
  - change the arch-deps.h include directory to /usr/lib[64] instead of /lib[64]
    in the dbus-1.pc file after compile


author: John (J5) Palmieri <johnp@redhat.com> - 0.90-4
changelog:
  - add patch that pregenerates the xml introspect file so d-bus doesn't
    have to be running suring the build.


author: Karsten Hopp <karsten@redhat.de> 0.61-5.2
changelog:
  - add buildrequires libICE-devel, libSM-devel, libcap-devel
  - change buildrequires form libX11 to libX11-devel


author: John (J5) Palmieri <johnp@redhat.com> - 0.61-5
changelog:
  - Backport patch from dbus-connection.c
    - Allows interfaces to be NULL in the message header as per the spec
    - Fixes a problem with pendings calls blocking on a data starved socket


author: John (J5) Palmieri <johnp@redhat.com> 0.61-3
changelog:
  - ABI hasn't changed so add patch that makes dbus-sharp think
    it is still 0.60 (mono uses hard version names so any change
    means apps need to recompile)


author: John (J5) Palmieri <johnp@redhat.com> 0.60-7
changelog:
  - Add patch to fix the python callchain
  - Symlink dbus-send to /usr/bin because some applications
    look for it there


author: John (J5) Palmieri <johnp@redhat.com> 0.60-5
changelog:
  - move base libraries and binaries to /bin and /lib so they can be started
    before /usr is mounted on network mounted /usr systems
  - have D-Bus start early


author: John (J5) Palmieri <johnp@redhat.com> - 0.36.2-1
changelog:
  - upgrade to 0.36.2 which fixes an exploit where
    users can attach to another user's session bus (CAN-2005-0201)


author: John (J5) Palmieri <johnp@redhat.com> - 0.36-1
changelog:
  - Upgrade to dbus-0.36
  - Split modules that go into %{_lib}/python2.4/site-packages/dbus
  and those that go into %{python_sitelib}/dbus (they differ on 64bit)
  - Renable Qt bindings since packages in core can use them


author: John (J5) Palmieri <johnp@redhat.com> - 0.35.2-1
changelog:
  - Upgrade to dbus-0.35.2
  - removed dbus-0.34-kill-babysitter.patch
  - removed dbus-0.34-python-threadsync.patch
  - removed dbus-0.23-selinux-avc-audit.patch
  - added dbus-0.35.2-selinux-avc-audit.patch
  - take out restarts on upgrade


author: John (J5) Palmieri <johnp@redhat.com> - 0.34-1
changelog:
  - Upgrade to dbus-0.34
  - added dbus-0.34-kill-babysitter.patch
  - added dbus-0.34-python-threadsync.patch
  - remove dbus-0.32-print_child_pid.patch
  - remove dbus-0.32-deadlock-fix.patch
  - remove dbus-0.33-types.patch


author: John (J5) Palmieri <johnp@redhat.com> - 0.32-5
changelog:
  - replace selinux_init patch with selinux_chroot_workaround patch
    to work around bad selinux interactions when using chroots
    on the beehive build machines


author: John (J5) Palmieri <johnp@redhat.com> - 0.32-2
changelog:
  - add selinux-init patch to fix dbus from segfaulting when
    building on machines that don't have selinux enabled


author: John (J5) Palmieri <johnp@redhat.com> - 0.31-1
changelog:
  - update to upstream version 0.31
  - take out user has same id patch (merged upstream)
  - udi patch updated
  - dbus-daemon-1 renamed to dbus-daemon
  - dbus-glib-tool renamed to dbus-binding-tool
  - force gcc33 because pyrex generate improper lvalue code
  - disable audit patch for now


author: John (J5) Palmieri <johnp@redhat.com> - 0.23-4
changelog:
  - Explicitly pass in the pid file location to ./configure instead of
    letting it guess based on the build enviornment


author: John (J5) Palmieri <johnp@redhat.com> - 0.23-1
changelog:
  - Update to upstream version 0.23
  - Drop all patches except for the UDI patch as they have been
    integrated upstream
  - List of API changes:
        * add setgroups() to drop supplementary groups
        * removed dbus_bug_get_with_g_main since it's been replaced by dbus_g_bus_get
        * added support for int64 and uint64 to the python bindings
        * use SerivceOwnerChanges signal instead of ServiceCreated and ServiceDeleted


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Add a requires for glib2-devel in the devel package
  - Add SE-Linux backport from Colin Walters that fixes
    messages getting lost in SE-Linux contexts


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Fixed patch to use dbus-1 instead of dbus-1.0
  - (configure.in): Exported just the datadir instead of
    the full path to the dbus datadir for consistency


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - reverting BuildRequires: redhat-release because of issues with build system
  - added precompiled version of the messagebus init script


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Moved dbus-viewer to new dbus-gtk package so that dbus-glib
    no longer requires X or GTK libraries. (RH Bug #130029)


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Added lib64 workaround for python bindings installing to
    the wrong lib directory on 64 bit archs


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Moved dbus-viewer, dbus-monitor and dbus-glib-tool
    into the dbus-glib package so that the main dbus
    package does not depend on glib (Bug #125285)


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Conflict with cups prior to configuration file change, so that the
    %postun service condrestart works.


author: Havoc Pennington <hp@redhat.com> 0.13-2
changelog:
  - see if removing qt subpackage for now will get us through the build system,
    qt bindings not useful yet anyway


author: Havoc Pennington <hp@redhat.com> 0.11.91-3
changelog:
  - break the tiny dbus-launch that depends on X into separate package
    so a CUPS server doesn't need X installed


author: Havoc Pennington <hp@redhat.com> 0.6.93-1
changelog:
  - new cvs snap that actually forks to background and changes
    user it's running as and so forth
  - create our system user in pre


author: Havoc Pennington <hp@redhat.com> 0.6.91-1
changelog:
  - disable qt for now because beehive hates me
  - pull a slightly newer cvs snap that creates socket directory
  - cat the make check log after make check fails


author: Paul Howarth <paul@city-fan.org> - 2.3.9-7
changelog:
  - Use /usr/bin/sed rather than /bin/sed for fixconf script on modern releases
  - Drop %defattr, redundant since rpm 4.4
  - Use %license where possible


author: Paul Howarth <paul@city-fan.org> 2.3.9-1
changelog:
  - Update to 2.3.9
    - SECURITY: Fix possible heap buffer overwrite (CVE-2013-4365)
    - Add experimental cmake-based build system for Windows
    - Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA
      Authenticator/Authorizor/Access directives' command line argument, as
      currently documented (PR#51194)
    - Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
      assignments) (PR#51657)
    - Conform script response parsing with mod_cgid and ensure no response body
      is sent when ap_meets_conditions() determines that request conditions are
      met
    - Improve logging in access control hook functions
    - Avoid making internal sub-requests and processing Location headers when in
      FCGI_AUTHORIZER mode, as the auth hook functions already treat Location
      headers returned by scripts as an error since redirections are not
      meaningful in this mode
    - Revert fix for PR#53693, added in 2.3.8 but undocumented
    - Fix issues with a minor optimization added in 2.3.8


author: Paul Howarth <paul@city-fan.org> 2.3.7-1
changelog:
  - Update to 2.3.7
    - Introduce FcgidWin32PreventOrphans directive on Windows to use OS Job
      Control Objects to terminate all running fcgi's when the worker process
      has been abruptly terminated (PR: 51078)
    - Periodically clean out the brigades that are pulling in the request body
      for handoff to the fcgid child (PR: 51749)
    - Resolve crash during graceful restarts (PR: 50309)
    - Solve latency/congestion of resolving effective user file access rights
      when no such info is desired, for config-related filename stats (PR: 51020)
    - Fix regression in 2.3.6 that broke process controls when using
      vhost-specific configuration
    - Account for first process in class in the spawn score
  - Drop patch for CVE-2012-1181, now included in upstream release


author: Paul Howarth <paul@city-fan.org> 2.3.6-6
changelog:
  - Fix compatibility with httpd 2.4 in F-18/RHEL-7 onwards
  - Use /run rather than /var/run from F-15/RHEL-7 onwards


author: Paul Howarth <paul@city-fan.org> 2.3.6-5
changelog:
  - Fix regression in 2.3.6 that broke process controls when using vhost-specific
    configuration (upstream issue 49902, #783742, CVE-2012-1181)


author: Paul Howarth <paul@city-fan.org> 2.3.6-2
changelog:
  - Add /etc/tmpfiles.d/mod_fcgid.conf for builds on Fedora 15 onwards to
    support running with /var/run on tmpfs (#656625)


author: Paul Howarth <paul@city-fan.org> 2.3.6-1
changelog:
  - Update to 2.3.6 (see CHANGES-FCGID for full details)
    - Fix possible stack buffer overwrite (CVE-2010-3872)
    - Change the default for FcgidMaxRequestLen from 1GB to 128K; administrators
      should change this to an appropriate value based on site requirements
    - Correct a problem that resulted in FcgidMaxProcesses being ignored in some
      situations
    - Return 500 instead of segfaulting when the application returns no output
  - Don't include SELinux policy for RHEL-5 builds since RHEL >= 5.5 includes it
  - Explicitly require /bin/sed for fixconf script


author: Paul Howarth <paul@city-fan.org> 2.3.4-2
changelog:
  - Add fixes from upstream svn for a number of issues, most notably that the
    fixconf script had an error in the regexp, which resulted in a prefix of
    "FcgidFcgid" on the updated directives


author: Paul Howarth <paul@city-fan.org> 2.3.4-1
changelog:
  - Update to 2.3.4 (configuration directives changed again)
  - Add fixconf.sed script for config file directives update


author: Paul Howarth <paul@city-fan.org> 2.3.1-2.20090925svn818270
changelog:
  - Update to svn revision 818270
  - DESTDIR and header detection patches upstreamed
  - Build SELinux policy module for EL-5; support in EL-5.3 is incomplete and
    will be fixed in EL-5.5 (#519369)
  - Drop aliases httpd_sys_content_r{a,o,w}_t -> httpd_fastcgi_content_r{a,o,w}_t
    from pre-2.5 SElinux policy module as these types aren't defined there


author: Paul Howarth <paul@city-fan.org> 2.3.1-1.20090923svn817978
changelog:
  - Update to post-2.3.1 svn snapshot
  - Upstream moved to apache.org
  - License changed to ASL 2.0
  - Use FCGID-prefixed config file options (old ones deprecated)
  - Lots of documentation changes
  - Renumber sources
  - Don't defer to mod_fastcgi if both are present
  - Drop gawk buildreq
  - Add patches fixing RPM build issues (DESTDIR support, header detection)


author: Paul Howarth <paul@city-fan.org> 2.2-12
changelog:
  - Don't use /etc/httpd/run as basis of "run" directory as its DAC permissions
    are not permissive enough in F-11 onwards; instead, revert to
    /var/run/mod_fcgid and tweak default config accordingly (#502273)


author: Paul Howarth <paul@city-fan.org> 2.2-11
changelog:
  - Follow link /etc/httpd/run and make our "run" directory a subdir of wherever
    that leads (#501123)


author: Paul Howarth <paul@city-fan.org> 2.2-10
changelog:
  - EL 5.3 now has SELinux support in the main selinux-policy package so handle
    that release as per Fedora >= 8, except that the RHEL selinux-policy package
    doesn't Obsolete/Provide mod_fcgid-selinux like the Fedora version, so do
    the obsoletion here instead


author: Paul Howarth <paul@city-fan.org> 2.2-7
changelog:
  - SELinux policy module no longer built for Fedora 8 onwards as it is
    obsoleted by the main selinux-policy package
  - Conflicts for selinux-policy packages older than the releases where mod_fcgid
    policy was incorporated have been added for Fedora 8, 9, and 10 versions, to
    ensure that SELinux support will work if installed


author: Paul Howarth <paul@city-fan.org> 2.2-6
changelog:
  - SELinux policy module rewritten to merge fastcgi and system script domains
    in preparation for merge into main selinux-policy package (#462318)
  - Try to determine supported SELinux policy types by reading /etc/selinux/config


author: Paul Howarth <paul@city-fan.org> 2.2-3
changelog:
  - Update SELinux policy to fix occasional failures on restarts
    (move shared memory file into /var/run/mod_fcgid directory)


author: Paul Howarth <paul@city-fan.org> 2.1-5
changelog:
  - Update source URL to point to downloads.sf.net rather than dl.sf.net
  - Upstream released new tarball without changing version number, though the
    only change was in arch/win32/fcgid_pm_win.c, which is not used to build the
    RPM package
  - Clarify license as GPL (unspecified/any version)
  - Unexpand tabs in spec
  - Add buildreq of gawk


author: Paul Howarth <paul@city-fan.org> 2.1-3
changelog:
  - Major update of SELinux policy, supporting accessing data on NFS/CIFS shares
    and a new boolean, httpd_fastcgi_can_sendmail, to allow connections to SMTP
    servers
  - Fix for SELinux policy on Fedora 7, which didn't work due to changes in the
    permissions macros in the underlying selinux-policy package


author: Paul Howarth <paul@city-fan.org> 2.1-1
changelog:
  - Update to 2.1
  - Update documentation and patches
  - Rename some source files to reduce chances of conflicting names
  - Include SharememPath directive in conf file to avoid unfortunate upstream
    default location


author: Paul Howarth <paul@city-fan.org> 1.10-5
changelog:
  - Split off SELinux module into separate subpackage to avoid dependency on
    the selinux-policy package for the main package


author: Paul Howarth <paul@city-fan.org> 1.10-4
changelog:
  - SELinux policy packages moved from %{_datadir}/selinux/packages/POLICYNAME
    to %{_datadir}/selinux/POLICYNAME
  - hardlink identical policy module packages together to avoid duplicate files


author: Paul Howarth <paul@city-fan.org> 1.10-3
changelog:
  - Adjust buildreqs for FC6 onwards
  - Figure out where top_dir is dynamically since the /etc/httpd/build
    symlink is gone in FC6


author: Paul Howarth <paul@city-fan.org> 1.09-10
changelog:
  - SELinux policy update:
    * allow httpd to read httpd_fastcgi_content_t without having the
    | httpd_builtin_scripting boolean set
    * allow httpd_fastcgi_script_t to read /etc/resolv.conf without
    | having the httpd_can_network_connect boolean set


author: Paul Howarth <paul@city-fan.org> 1.09-8
changelog:
  - Change default context type for socket directory from var_run_t to
    httpd_fastcgi_sock_t for better separation


author: Paul Howarth <paul@city-fan.org> 1.09-7
changelog:
  - Add SELinux policy module and README.Fedora
  - Conflict with selinux-policy versions older than what we're built on


author: Paul Howarth <paul@city-fan.org> 1.09-6
changelog:
  - Instead of conflicting with mod_fastcgi, don't add the handler for .fcg etc.
    if mod_fastcgi is present


author: Paul Howarth <paul@city-fan.org> 1.09-5
changelog:
  - Use correct handler name in fcgid.conf
  - Conflict with mod_fastcgi
  - Create directory %{_localstatedir}/run/mod_fcgid for sockets


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.3.0-3
changelog:
  - Remove softhsm2-pk11install. Software modules are to be registered with
    p11-kit as in https://fedoraproject.org/wiki/PackagingDrafts/Pkcs11Support (#1541095).


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.2.0-2
changelog:
  - Increased the level of messages that go to syslog, thus softhsm
    will no longer write on syslog when it cannot open the shared DB (#1425135)
  - Allow users in the 'ods' group to store their keys in /var/lib/softhsm/tokens/
    while at the same time disallow deleting other users' keys (using the
    sticky bit). Prevent users in the 'ods' group from writing in /var/lib/softhsm.


author: Paul Wouters <pwouters@redhat.com> - 2.1.0-1
changelog:
  - Resolves: rhbz#1244461 Updated to 2.1.0
  - Resolves: rhbz#1272423 Softhsm PKCS#11 module not visible to NSS becasue it is not in the search path
  - Resolves: rhbz#1177086 A marked as trusted certificate cannot be written in a softhsmv2 db
  - Resolves: rhbz#1272453 - A marked as CA certificate cannot be written in a softhsmv2 db
  - Removed merged in bug#162 patch
  - Temporarily disable make check because cppunit is broken


author: Paul Wouters <pwouters@redhat.com> - 2.0.0-1
changelog:
  - Resolves: rhbz#1244461 Update to softhsm-2.0.0
  - Resolves: rhbz#1177086 A marked as trusted certificate cannot be written in a softhsmv2 db
  - Resolves: rhbz#1159827 Typo in homedir in /etc/passwd
  - Added global prever to toggle snapshot vs full release build changes


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-3
changelog:
  - Add support for CKM_RSA_PKCS_OAEP key un/wrapping [Petr Spacek]
  - Use OpenSSL EVP interface for AES key wrapping [Petr Spacek]
  - Fix softhsm2-pk11install buid and post call
  - Do not use --with-objectstore-backend-db (causes issues on i686)
  - Change install directory to /usr/lib*/pkcs11/
  - Install pkcs11 module file
  - Use official upstream tar ball
  - Create ods user to own softhsm/token files
  - Enable migration tools (for softhsm-v1 installs)
  - Add softlink for softhsm-v1 .so (needed for opendnssec's conf.xml)
  - Require p11-kit, nss-tools, for SoftHSM PKCS #11 Module file
  - Copy pk11install.c from coolkey package
  - Enable hardened build
  - Add upstream official source url


author: Paul Wouters <paul@xelerance.com> - 1.3.0-3
changelog:
  - Initial Fedora package
  - Do not install the .a file
  - Use a separate "opendnssec" user to own /var/sofhsm


author: Radek Novacek <rnovacek@redhat.com> 1.6.5-1
changelog:
  - Update to version 1.6.5
  - Change architecture to noarch
  - Change python_sitearch to python_sitelib
  - Changelog in no longer in source tarball
  - Remove nonpacked files


author: Roozbeh Pournader <roozbeh@farsiweb.info> - 1.1.3-2
changelog:
  - Remove %{enchant_dir} macro
  - Add %dir for architecture-specific directory
  - Add "Provides:" for PyEnchant
  - Remove "Requires:" on enchant (Brian Pepple)


author: Michael Mraka <michael.mraka@redhat.com> 5.4.65-1
changelog:
  - rhn-virtualization: do not install sys-v init script on SUSE
  - rhn-virtualization: add missing dirs to filelist for SUSE and enable build
    for Tumbleweed


author: Michael Mraka <michael.mraka@redhat.com> 5.4.62-1
changelog:
  - install files into python_sitelib/python3_sitelib
  - move rhn-virtualization-host files into proper python2/python3 subpackages
  - move rhn-virtualization-common files into proper python2/python3 subpackages
  - split rhn-virtualization-host into python2/python3 specific packages
  - split rhn-virtualization into python2/python3 specific packages


author: Jan Pazdziora 5.4.45-1
changelog:
  - isInstallerConfig should check for autoyast in commandline
  - catch libvirtError to return meaningfull error messages


author: Paul Howarth <paul@city-fan.org> - 1.1903-1
changelog:
  - Update to 1.1903
    - Fix documentation typos (CPAN RT#84981)
    - Add -w and -i switches to diffnew.pl (CPAN RT#69945)
    - Remove Algorithm::DiffOld from the index; the module is still distributed
      with Algorithm::Diff, but is not indexed on CPAN because this is an
      ***UNAUTHORIZED*** release of Algorithm::DiffOld
  - Add patch to generate provide for perl(Algorithm::DiffOld)
  - Drop %defattr, redundant since rpm 4.4
  - General spec tidy-up


author: Pravin Satpute <psatpute@redhat.com> - 2.5.5-1
changelog:
  - Upstream new release 2.5.5
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.5.4-1
changelog:
  - Upstream release 2.5.4
  - Added support for Unicode 8.0 characters U0C00, U0C34 and U0C5A
  - Added support for Latin characters
  - Using TTFAUTOHINT now while building ttf file.
  - Resolves #985343, #1229213 and #1258123.


author: Rex Dieter <rdieter@fedoraproject.org> - 0.2.8-5
changelog:
  - BR: libgs-devel (f28+)
  - .spec cleanup/cosmetics (drop deprecated tags, use %autosetup/%license, tighten subpkg dep)


author: Matthias Clasen <mclasen@redhat.com> - 0.2.4-1
changelog:
  - Update to 0.2.4
  - See http://mail.gnome.org/archives/gnome-announce-list/2010-February/msg00059.html


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Made package arch specific due to pkgconfig files being placed in lib64
    if the noarch packages manage to get built on x86_64/ppc64/s390x.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Cleaned up file manifest.
  - Made package noarch, as it is just header files.
  - Disable debuginfo processing, as there are no ELF objects in package.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-4
changelog:
  - Updated dep to "Requires(pre): xorg-x11-filesystem >= 0.99.2-3" for new fix.
  - Moved bitmap files back into the upstream default of _includedir (#173665).


author: Marek Goldmann <mgoldman@redhat.com> - 2.11.0-5
changelog:
  - Use non-versioned jar name, RHBZ#800463
  - Cleanup in spec file to follow new guidelines
  - Consolidated javadocs packages
  - Removed manual subpackage because of stylebook issues, see comment on obsolete


author: Mat Booth <fedora@matbooth.co.uk> - 2.11.0-1
changelog:
  - Update to latest upstream version.
  - Provide JAXP 1.4.
  - Fix some minor rpmlint warnings.
  - Add dep on xalan-j2.
  - Fix javadoc taglets.


author: Mat Booth <fedora@matbooth.co.uk> - 2.9.0-4
changelog:
  - Fix broken links in manual and fix javadoc requires.
  - Build 1.5 bytecode instead of 1.6, for compatibility.


author: Mat Booth <fedora@matbooth.co.uk> - 2.9.0-2
changelog:
  - Add a build dep on a font package because the JDK is missing a dependency
    to function correctly in headless mode. See RHBZ #478480 and #521523.
  - Fix groups.


author: Mat Booth <fedora@matbooth.co.uk> - 2.9.0-1
changelog:
  - Update to 2.9.0: This is the version Eclipse expects, previously the OSGi
    manifest was lying about its version :-o
  - Enable manual sub-package now xml-stylebook is in Fedora.
  - Drop GCJ support.
  - Minor changes to spec to make it more conforming to the guidelines.
  - Drop the libgcj patch, we don't seem to need it anymore.
  - Add the OSGi manifest as part of the build instead of the install.
  - Fix packaging bug RHBZ #472646.


author: Matt Wringe <mwringe at redhat.com> 0:2.7.1-7jpp
changelog:
  - Add conditional native compiling
  - Add missing requires for javadocs
  - Add missing requires for post and preun
  - Update version to 7jpp at Fedora's request


author: Ralph Apel <r.apel at r-apel.de> 0:2.7.1-2jpp
changelog:
  - First JPP-1.7 release
  - use tools subdir and give it as java.endorsed.dirs (for java-1.4.2-bea e.g.)


author: Gary Benson <gbenson at redhat.com> 0:2.6.2-5jpp
changelog:
  - Remove the tools tarball, and build xjavac from source.
  - Patch xjavac to fix the classpath under libgcj too.


author: Gary Benson <gbenson@redhat.com> 0:2.6.2-4jpp_8fc
changelog:
  - Remove the tools tarball, and build xjavac from source.
  - Replace classpath workaround to xjavac task and use
    xml-commons classes again (#152255).


author: Gary Benson <gbenson@redhat.com> 0:2.6.2-4jpp_3fc
changelog:
  - Revert xjavac classpath workaround, and patch to use libgcj's
    classes instead of those in xml-commons (#152255).


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:2.6.2-3jpp
changelog:
  - Updated Patch #0 to fix breakage using BEA 1.4.2 SDK, new patch
    from <mwringe@redhat.com> and <vivekl@redhat.com>.


author: Vivek Lakshmanan <vivekl@redhat.com> 0:2.6.2-2jpp_2rh
changelog:
  - Added new Source1 URL and added new %setup to expand it under the
    expanded result of Source0.
  - Updated Patch0 to fix version discrepancies.
  - Added build requirement for xml-commons-apis


author: Michal Ruprich <mruprich@redhat.com> - 1.2.0-6
changelog:
  - Adding libmaxminddb as a new package to RHEL-8 (rhbz#1607927)
  - Adding Recommends tag for geolite2 databases


author: Jan Vcelak <jvcelak@fedoraproject.org> 1.1.1-4
changelog:
  - remove utils subpackage and place mmdblookup into devel subpackage
  - remove Group from the spec file
  - move NOTICE and Changes.md to devel subpackage


author: Paul Wouters <pwouters@redhat.com> - 1.4.14-1
changelog:
  - Update to 1.4.14 as first steop to migrating to 2.x
  - Resolves: rhbz#1413254 Move tmpfiles.d config to %{_tmpfilesdir}, install LICENSE as %license


author: Paul Wouters <pwouters@redhat.com> - 1.4.9-3
changelog:
  - Resolves: rbz#1303965 upgrade to opendnssec-1.4.9-1.fc23 breaks old installations
  - On initial install, after token init, also run ods-ksmutil setup


author: Paul Wouters <pwouters@redhat.com> - 1.4.7-2
changelog:
  - Resolves rhbz#1219746 ods-signerd.service misplaced After= in section Service
  - Resolves rhbz#1220443 OpenDNSSEC fails to initialise a slot in softhsm on first install


author: Paul Wouters <pwouters@redhat.com> - 1.4.6-1
changelog:
  - Updated to 1.4.6
  - Removed incorporated patch upstream
  - Remove Wants= from ods-signerd.service (rhbz#1098205)


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-1
changelog:
  - Updated to 1.4.4 (compatibility with non RFC 5155 errata 3441)
  - Change the default ZSK policy from 1024 to 2048 bit RSA keys
  - Fix post to be quiet when upgrading opendnssec


author: Paul Wouters <pwouters@redhat.com> - 1.4.3-1
changelog:
  - Updated to 1.4.3 (rhel#1048449) - minor bugfixes, minor feature enhancements
  - rhel#1025985 OpenDNSSEC signer cannot be started due to a typo in service file


author: Paul Wouters <pwouters@redhat.com> - 1.4.1-1
changelog:
  - Updated to 1.4.1. NSEC3 handling and serial number handling fixes
  - Add BuildRequire for systemd-units


author: Paul Wouters <pwouters@redhat.com> - 1.4.0-0.5.b2
changelog:
  - Updated to 1.4.0b2
  - All patches have been merged upstream
  - cron job should be marked as config file


author: Paul Wouters <pwouters@redhat.com> - 1.4.0-0.4.b1
changelog:
  - Added BuildRequires: procps-ng for bug OPENDNSSEC-345
  - Change RRSIG inception offset to -2h to avoid possible
    daylight saving issues on resolvers
  - Patch to prevent removal of occluded data


author: Paul Wouters <pwouters@redhat.com> - 1.4.0-0.3.b1
changelog:
  - Just an EVR fix to the proper standard
  - Cleanup of spec file
  - Introduce new systemd-rpm macros (rhbz#850242)


author: Paul Wouters <pwouters@redhat.com> - 1.4.0-0.b1.1
changelog:
  - Updated to 1.4.0b1
  - Patch for NSEC3PARAM TTL
  - Cron job to assist narrowing ods-enforcerd timing differences


author: Paul Wouters <pwouters@redhat.com> - 1.4.0-0.a3.1
changelog:
  - Updated to 1.4.0a3
  - Patch to more aggressively try to resign
  - Patch to fix locking issue eating up cpu


author: Paul Wouters <pwouters@redhat.com> - 1.4.0-0.a1
changelog:
  - The 1.4.x branch no longer needs ruby, as the auditor has been removed
  - Added missing openssl-devel BuildRequire
  - Comment out <SkipPublicKey/> so keys generated by ods can be used by bind


author: Paul Wouters <pwouters@redhat.com> - 1.3.6-3
changelog:
  - Requires rubygem-soap4r when using ruby-1.9
  - Don't ghost /var/run/opendnssec
  - Converted initd to systemd


author: Paul Wouters <paul@xelerance.com> - 1.3.2-3
changelog:
  - Add ods user for opendnssec tasks
  - Added initscripts and services for ods-signerd and ods-enforcerd
  - Initialise OpenDNSSEC softhsm token on first install


author: Paul Wouters <paul@xelerance.com> - 1.3.2-1
changelog:
  - Updated to 1.3.2
  - Added dependancies on opencryptoki and softhsm
  - Don't install duplicate unreadable .sample files
  - Fix upstream conf.xml to point to actually used library paths


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> 20170801-3
changelog:
  - *-devel subpackage added
  - typos & syntax fixed for AppStream files
  - NimbusSansNarrow-BdOblique.* renamed to *-BoldOblique
  - *-nimbus-sans-narrow subpackage dropped
  - priority/ordering decreased [60->61]
  - ship *.otf format files as well


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 20170801-2
changelog:
  - urw-base35-fonts-20170801-000-split-urw-fallback.patch added
  - decrease the fontconfig priority/ordering value to 60 (bug #1494850)
  - set same priority value for urw-fallback.conf as for other files (bug #1495199)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 20170801-1
changelog:
  - rebase to 20170801 version
  - removed urw-* string from subpackages
  - fontconfig priority value updated to 35
  - error messages from 'xset fp rehash' suppressed (bug #1466254)
  - AppStream files added into (sub)packages
  - fontconfig files added into (sub)packages
  - fixed fonts path during %install
  - source location updated to point at github.com


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 20160926-1
changelog:
  - %description line in 'fontfamily_subpkg' macro split
  - requirement for 'fontpackages-filesystem' added
  - mark 'font.dir' and 'font.scale' as %ghost files
  - fix the upgrading process (for Obsoletes|Provides|Conflicts)
  - simplify creation of the subpackages with auxiliary %fontfamily_subpkg macro
  - update the fontconfig cache and X11 Logical Font Description database
    (during install/update/erase)
  - initial version of specfile created


author: Jan Kaluza <jkaluza@redhat.com> - 3:2.1.15-10
changelog:
  - fix #921421 - fix /var/spool/mailman/ permissions
  - fix #921423 - move mm_cfg.py to /etc/mailman
  - move templates from /usr/lib/mailman to /etc/mailman


author: Jan Kaluza <jkaluza@redhat.com> - 3:2.1.15-8
changelog:
  - fix #838580 - check if directories are 0755, there is no need to need
    02775 on all Mailman directories


author: Jan Kaluza <jkaluza@redhat.com> - 3:2.1.14-13
changelog:
  - fix #751581 - changed systemd service file to create error log with proper
    permissions, changed logrotate conf to swifth to proper username/group


author: Jan Kaluza <jkaluza@redhat.com> - 3:2.1.14-6
changelog:
  - fix #688435 - set proper permissions for private archive
  - fix badly rebased LC_CTYPE patch which caused newlist to fail with traceback


author: Jan Kaluza <jkaluza@redhat.com> - 3:2.1.14-5
changelog:
  - fix #679644 - fixed CVE-2011-0707: three XSS flaws due improper
    escaping of the full name of the member


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.13-6
changelog:
  - fix #631881 - CVE-2010-3089: Multiple security flaws leading
    to cross-site scripting (XSS) attacks


author: Daniel Novotny <dnovotny@redhat.com> 3:2.1.12-9
changelog:
  - regenerated patches so patch fuzz 3 is not needed (bz#513207)
  - mm_cfg.pyc and .pyo are now %verify(not md5 size mtime) (bz#512794)


author: Daniel Novotny <dnovotny@redhat.com> 3:2.1.12-7
changelog:
  - fix bz#512798 -  Mailman path in /usr/bin/mailman-update-cfg 
    is incorrect on x86_64.
  - added explanation comment in mailman-update-cfg, to justify
    why this script is needed


author: Daniel Novotny <dnovotny@redhat.com> 3:2.1.12-5
changelog:
  - hardcoded library path removed
  - mixed use of spaces and tabs fixed
  - added --libdir to configure
  - fixed URL to tarball
  - permissions of source files changed to 0644
  - got rid of "file listed twice" warnings: listing the files explicitly
  - all this were cleanups for merge review (#226117)


author: Tomas Smetana <tsmetana@redhat.com> - 3:2.1.11-3
changelog:
  - fix #457388 - don't call "/usr/bin/python" from /etc/cron.d/mailman
  - fix #457389 - cron complains about bad username


author: Tomas Smetana <tsmetana@redhat.com> - 3:2.1.9-8
changelog:
  - fix #333011 - withlist crashes with NameError
  - fix #350461 - init script prevents proper SELinux domain transitions
  - fix #303061 - broken multipart mail headers


author: Tomas Smetana <tsmetana@redhat.com> - 3:2.1.9-7
changelog:
  - fix #242678 wrong init script
  - fix #247160 INSTALL.REDHAT references non-existent README.POSTFIX file,
    patch by Todd Zullinger
  - fix #132495 jp character encoding is not UTF8, patch by Todd Zullinger
  - update license, add dist to release


author: John Dennis <jdennis@redhat.com> - 3:2.1.6-1.fc4
changelog:
  - initial port of 2.1.6
    remove mailman-2.1.5-moderator-request.patch, present in new release
    remove mailman-2.1-CAN-2005-0202.patch,       present in new release
    remove mailman-2.1-CAN-2004-1177.patch,       present in new release


author: John Dennis <jdennis@redhat.com> - 3:2.1.5-31.fc4
changelog:
  - fix bug #132750, add daemon to mail-gid so courier mail server will work.
  - fix bug #143008, wrong location of mailmanctl in logrotate
  - fix bug #142605, init script doesn't use /var/lock/subsys


author: John Dennis <jdennis@redhat.com> 3:2.1.5-26
changelog:
  - fix typo in install documentation
  - fix error in templates/Makefile.in, bad install args, fixes bug #136001,
    thank you to Kaj J. Niemi for spotting this.


author: John Dennis <jdennis@redhat.com> 3:2.1.5-21
changelog:
  - move list data dir to /var/lib/mailman to conform to FHS
    move lock dir to /var/lock/mailman to conform to FHS
    move config dir (VAR_PREFIX/data) to /etc/mailman to conform to FHS
    Thanks to Matt Domsch for pointing this out.


author: John Dennis <jdennis@redhat.com> 3:2.1.5-20
changelog:
  - fix bug #132732, security policy violations,
  - bump release verison
    move non-data installation files from /var/mailman to /usr/lib/mailman,
    update documentation


author: John Dennis <jdennis@redhat.com> 3:2.1.5-15
changelog:
  - fix bug #117615, don't overwrite user modified templates on install
    made template directory "config noreplace"


author: John Dennis <jdennis@redhat.com> 3:2.1.5-14
changelog:
  - add comments into the crontab files so users know the /etc/cron.d
    file is volitile and will edit the right file.
    Also make the master crontab file "config noreplace" so edits are preserved.


author: John Dennis <jdennis@redhat.com> 3:2.1.5-10
changelog:
  - fix bug #129492 and bug #120912
    stop using crontab to setup mailman's cron jobs,
    instead install cron script in /etc/cron.d


author: John Dennis <jdennis@redhat.com> 3:2.1.5-9
changelog:
  - apply patch to elminate "-1 LISTNAME moderator request(s) waiting" messages
    problem desciption here:
    http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq03.038.htp


author: John Dennis <jdennis@redhat.com> - 3:2.1.5-6
changelog:
  - fix bug in pre scriplet, last command had been "service mailman stop"
    which should have been harmless if mailman was not installed except
    that it left the exit status from the script as non-zero and rpm
    aborted the install.


author: John Dennis <jdennis@redhat.com> - 3:2.1.5-5
changelog:
  - add status reporting to init.d control script
    stop mailman during an installation
    restart mailman if it had been running prior to installation


author: John Dennis <jdennis@redhat.com> 3:2.1.5-1
changelog:
  - bring up to latest 2.1.5 upstream release
    From Barry Warsaw: Mailman 2.1.5, a bug fix release that also
    contains new support for the Turkish language, and a few minor new
    features. Mailman 2.1.5 is a significant upgrade which should
    improve disk i/o performance, administrative overhead for discarding
    held spams, and the behavior of bouncing member disables.  This
    version also contains a fix for an exploit that could allow 3rd
    parties to retrieve member passwords.  It is thus highly recommended
    that all existing sitesupgrade to the latest version


author: Warren Togami <wtogami@redhat.com> 3:2.1.4-4
changelog:
  - #105638 fix bytecompile and rpm -V
  - postun /etc/postfix/aliases fix
  - clean uninstall (no more empty dirs)
  - #115378 RedirectMatch syntax fix


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - fix bug 72004, 74483, 74484, 87856 - improper log rotation
  - fix bug 88083 - mailman user/group needed to exist during build
  - fix bug 88144 - wrong %file attributes on mm_cfg.py
  - fix bug 89221 - mailman user not created on install
  - fix bug 89250 - wrong pid file name in initscript


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - various small tweaks to the spec file to make installation cleaner
  - use %{__python} when compiling, redirect compile output to /dev/null,
  - don't run update in %post, let the user do it, remove the .pyc files in %postun,
  - add setting of MAILHOST and URLHOST to localhost.localdomain, don't let
  - configure set them to the build machine.


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - 1) remove config patch, mailmanctl was not the right file to install in init.d,
  - it needed to be scripts/mailman
  - 2) rename httpd-mailman.conf to mailman.conf, since the file now lives
  - in httpd/conf.d directory the http prefix is redundant and inconsistent
  - with the other file names in that directory.


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - Bring package up to date with current upstream source, 2.1
  - Fix several install/packaging problems that were in upstream source
  - Add multiple mail group functionality
  - Fix syntax error in fblast.py
  - Remove the forced setting of mail host and url host in mm_cfg.py


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.9-1
changelog:
  - include README.QMAIL in with the docs (#58887)
  - include README.SENDMAIL and README.EXIM in with the docs
  - use an included httpd.conf file instead of listing the configuration
    directives in the %description, which due to specspo magic might look
    wrong sometimes (part of #51324)
  - interpolate the DEFAULT_HOST_NAME value in mm.cfg into both the DEFAULT_URL
    and MAILMAN_OWNER (#57987)
  - move logs to /var/log/mailman, qfiles to /var/spool/mailman, rotate
    logs in the log directory (#48724)
  - raise exceptions when someone tries to set the admin address for a list
    to that of the admin alias (#61468)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a default permissions problem in %{_var}/mailman/archives/private,
    reported by Johannes Erdfelt
  - update to 2.0.9


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.8-1
changelog:
  - set FQDN and URL at build-time so that they won't be set to the host the
    RPM package is built on (#59177)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.5
  - change the default hostname from localhost to localhost.localdomain in the
    default configuration
  - chuck configuration file settings other than those dependent on the host name
    (the build system's host name is not a good default)  (#32337)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make the default owner root again so that root owns the docs
  - update to 2.0beta5, which fixes a possible security vulnerability
  - add smrsh symlink


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to beta4
  - change uid/gid to apache.apache to match apache (#13593)
  - properly recompile byte-compiled versions of the scripts (#13619)
  - change mailman alias from root to postmaster


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move web files to reside under %{contentdir}
  - move files from /usr/share to %{_datadir}
  - integrate spot-fixes from mailman lists via gnome.org


author: Simone Caronni <negativo17@gmail.com> - 7.5-18
changelog:
  - xlsfonts 1.0.5
  - xlsatoms 1.1.2
  - xev 1.2.2
  - xdpyinfo 1.3.2
  - Use git commit id for edid-decode-snapshot.


author: Simone Caronni <negativo17@gmail.com> - 7.5-16
changelog:
  - Clean up SPEC file, fix rpmlint warnings.
  - Update xslclients to 1.1.3.
  - Simplify build requirements.


author: Peter Hutterer <peter.hutterer@redhat.com> 7.5-12
changelog:
  - Update sources for latest tarballs, some changes got lost before the commit
  - require gettext-devel for AM_ICONV (now required by xwininfo)


author: Than Ngo <than@redhat.com> - 7:20180414-12
changelog:
  - texconfig is needed in texconfig-sys, added Requirement texlive-texconfig
  - multilib issue detected by rpmdiff
  - drop obsoleted patch for poppler-0.58
  - XML validity issue
    Related: #1602712


changelog: - add Provides: tetex-latex to the latex subpackage
author:
  Than Ngo <than@redhat.com> - 7:20170524-11                                                           


author: Than Ngo <than@redhat.com> - 7:20170524-6
changelog:
  - fix wrong provides tex(english.ldf)
  - add babel-english. add fontawesome, awesomebox
  - add reference to support old texmf tree
  - fix build issue, not found html.sty and texinfo.tex


author: Than Ngo <than@redhat.com> - 7:20170524-3
changelog:
  - add anyfontsize, classpack, collection-htmlxml, latex2man
  - add provide tetex-tex4ht, jadetex, tetex-tex4ht, texlive-collection-htmlxml, tex(anyfontsize.sty), texlive-latex2man


author: Than Ngo <than@redhat.com> - 2:2012-34.20130427_r30134
changelog:
  - Resolves: bz#1064453, add missing texlive-metapost and groff.enc
    Resolves: bz#948532, add missing manpages for pdfxmltex, xmltex
    Resolves: bz#1213886, tex4ht-bin requires latex
    Resolves: bz#1217556, port for poppler-0.26.5
    Resolves: bz#1035679, scriptlet errors when installing texlive packages
    Resolves: bz#1184987, add texlive-titling


author: Jindrich Novy <novyjindrich@gmail.com> - 2012-21-20130427
changelog:
  - add missing shebang to context script
  - mark language.dat as config file (#929367)
  - add scripts for checking out sources and CTAN archives


author: Jindrich Novy <novyjindrich@gmail.com> - 2012-20-20130321
changelog:
  - bring chkweb back to life
  - fix context script (#924918)
  - prefer scripts installed from sources than from CTAN
  - BR: ghostscript-devel because of dvisvgm (#924662)


author: Jindrich Novy <jnovy@redhat.com> 2012-17-20130310
changelog:
  - run updmap-sys --syncwithtrees posttrans (#915086)
  - don't conflict with other packages (#913678)
  - obsolete tex-cm-lgc (#907728)
  - obsolete tex-kerkis (#907726)
  - fix clashes with xmltex (#877690)
  - use fedora latexmk instead of texlive latexmk (#914689)
  - fix broken symlinks in /usr/bin (#910952)
  - fmtutil doesn't print jadetex errors any more (#875266)
  - fix post scriptlets


author: Jindrich Novy <jnovy@redhat.com> 2012-15-20130131
changelog:
  - enlarge tex(latex) dependency set, introduce tex(latex-base) (#904147)
  - fix post-scriptlets (#875257)
  - ship macros.texlive (#885762)
  - depend directly on texlive-kpathsea-lib
  - disable rpath


author: Jindrich Novy <jnovy@redhat.com> 2012-12-20130102
changelog:
  - fix dependencies and upgrade path (#892054, #891709)
  - do not ship windows and other unneeded files


author: Jindrich Novy <jnovy@redhat.com> 2012-11-20130102
changelog:
  - sync with CTAN
  - added new buildrequires
  - don't use texlive's psutils
  - don't obsolete latexmk (#868996)


author: Jindrich Novy <jnovy@redhat.com> 2012-10-20121205
changelog:
  - sync with CTAN
  - compile also C++ sources with -fno-strict-aliasing
  - ship adhocfilelist
  - fix changelog dates


author: Jindrich Novy <jnovy@redhat.com> 2012-9-20121120
changelog:
  - obsolete metapost-metauml (#573863)
  - update BR perl-MD5 to perl(Digest::MD5) - required for updmap
  - remove redundant posttrans executions in texlive-base (#865650)
  - own ls-R in texmf-local directory


author: Jindrich Novy <jnovy@redhat.com> 2012-8-20121115
changelog:
  - prevent sed from being verbose in install log when uninstalling
  - be sure the old /usr/share/texmf tree is indexed and searched by
  kpathsea (#876710)
  - drop patch to fix build for dvisvgm, it is now applied upstream
  - fix dependencies in texlive and texlive-base subpackages (#875364)


author: Jindrich Novy <jnovy@redhat.com> 2012-5-20121024
changelog:
  - don't conflict with latexmk (#868996)
  - unify versioning for both binary and noarch subpackages
  - remove lcdf-typetools hack for s390(x)


author: Jindrich Novy <jnovy@redhat.com> 2012-3-20121024
changelog:
  - sync with upstream - fixes problem lcdf-typetools tests
  - disable largefile support to fix pdflatex on 32bit arches (#872231)
  - put compatibility TEXMF tree reference into texm-local instead
  symlinking it to /usr/share/texmf directly


author: Jindrich Novy <jnovy@redhat.com> 2012-3-20121019
changelog:
  - sync with upstream sources
  - make /usr/share/texmf visible to kpathsea, make texmf-local
  pointing to it (#867656, #864875)
  - fix versioning of binary packages


author: Jindrich Novy <jnovy@redhat.com> 2012-3-20120926
changelog:
  - obsolete chktex (#864211)
  - make config.ps a config file (#441171)
  - fix post/postun scriptlet dependencies
  - all subpackages now have %dist tag


author: Jindrich Novy <jnovy@redhat.com> 2012-2-20120926
changelog:
  - drop relase subpackage (no more needed as TL is now in Fedora)
  - fix -doc dependencies
  - remove (not-built) asymtote from source tarball
  - undefined catalogue version defaults to 0
  - perform automatic license audit
  - include also packages not part of any scheme
  - don't strip binaries so that we can generate debuginfo (#863635)
  - clean up depsolver


author: Jindrich Novy <jnovy@redhat.com> 2011-0.1.20110227
changelog:
  - fix upgrade path with old TL2007 xetex, context or dvips installed
  - fix package generation bug that caused some package might be missing
  from the repository
  (http://www.linux.cz/pipermail/texlive/2011-February/000086.html)
  - fix upstream source URLs


author: Jindrich Novy <jnovy@redhat.com> 2011-0.1.20110120
changelog:
  - bump release to 2011 (we are using the 2011/dev SVN version)
  - add more file virtual provides (TFM, TTF, TTC, PFA, PFB, PCF, OTF,
  TEX, CNF, CFG, DEF, DAT, LDF, FD, ENC, MAP, VF, VPL, CLO, BUG, BUG2)


author: Jindrich Novy <jnovy@redhat.com> 2010-13.20101112
changelog:
  - temporarily disable dvi2tty because of failing test suite
  - package /etc/texmf and point texmf-config there


author: Jindrich Novy <jnovy@redhat.com> 2010-11.20101007
changelog:
  - sync with the latest TL2010 sources
  - don't make redundant copies of binaries, symlink them
  - fix symlinks to perl utilities


author: Jindrich Novy <jnovy@redhat.com> 2010-9.20100814
changelog:
  - fix file attributes and rpmlint warnings
  - define libdir when calling configure
  - rebuild against new poppler


author: Jindrich Novy <jnovy@redhat.com> 2010-8.20100715
changelog:
  - move all the licenses and base directory hierarchy to texlive-base
  noarch subpackage
  - add automatic licensing code


author: Jindrich Novy <jnovy@redhat.com> 2010-7.20100531
changelog:
  - switch to "tlpretest" source tree
  - add lua and ruby dependencies to packages requiring them
  - generate global package database "texlive.tlpdb" directly from
  tlpobj files shipped with each package


author: Jindrich Novy <jnovy@redhat.com> 2009-3.20100326
changelog:
  - declare fmutil.cnf, updmap.cfg, context.cnf and texmf.cnf as config files
  so that they don't get overwritten with texlive-kpathsea update
  - move man and info pages to the main packages, not -doc


author: Jindrich Novy <jnovy@redhat.com> 2009-2
changelog:
  - install man and info pages into proper locations visible
  by man and info
  - update scriptlets
  - remove xindy bits


author: Jindrich Novy <jnovy@redhat.com> 2009-0.11
changelog:
  - fix generation of packages that ships only documentation
  - fix versioning of packages without version but with revision
  - fix heuristics for gathering .sty files dependencies
  - include packages under GFSL license
  - make files in old texmf tree from previous installs visible
  - do not obsolete old kpathsea, try to coexist
  - remove dvipdfm, dvipdfmx,depend of Fedora ones


author: Jindrich Novy <jnovy@redhat.com> 2009-0.3
changelog:
  - require system psutils and t1utils and don't build the TL ones
  - correctly obsolete old kpathsea
  - binaries now have -bin postfix
  - support for Fedora fonts


author: Jindrich Novy <jnovy@redhat.com> 2009-0.2
changelog:
  - add tetex-* virtual provides
  - fix unversioned requires
  - filter out unwanted libs and utilities from source


author: Jindrich Novy <jnovy@redhat.com> 2008-0.2
changelog:
  - update to today's svn sources of binaries from upstream
  - fix directory -> symlink conversion
  - add ly1 (#488651)


author: Jindrich Novy <jnovy@redhat.com> 2008-0.1
changelog:
  - initial packaging for TeX Live 2008
  - wrote tl2rpm.c to autogenerate packages and post scriptlets
  from TeX Live metadata
  - fix kpathsea default search path


author: Pravin Satpute <psatpute@redhat.com> - 2.91.3-1
changelog:
  - Upstream new release 2.91.3
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Pravin Satpute <psatpute@redhat.com> - 2.91.2-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423909 - FTBFS in rawhide
  - Upstream new release, migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.0-1
changelog:
  - Resolves 1152203 :- Upstream release 2.91.0
  - Rewritten all Open type tables with supporting taml and tml2 tags.
  - Renamed all the glyphs by following AGL syntax.
  - Open type tables are available in .fea file and this time it is compiled with AFDKO.
  - Reusing glyphs by "COPY REFERENCE"
  - Added GRID FITTING table and auto-hinting by fontforge.
  - Tested with Harfbuzz NG and Uniscribe (W8).
  - Auto test module available with test files.


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.1.3-2
changelog:
  - Bump version to 1.4.1.3-2
  - Resolves: Bug 1544973 - [RFE] IPA replica stuck at last update status: Error (18) Replication error acquiring replica: Incremental update transient error.


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.1.3-1
changelog:
  - Bump version to 1.4.1.3-1
  - Resolves: Bug 1633718 - 389-ds module: Switched Requires from "python3" to "platform-python"
  - Resolves: Bug 1654059 - 389-ds-base: dscreate and dsconf print DM's password in verbose mode
  - Resolves: Bug 1712467 - Rebase 389-ds-base on RHEL 8.1


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-7
changelog:
  - Bump version to 1.4.0.20-7
  - Resolves: Bug 1671735 - dscreate interactive fails when the suffix contains spaces 
  - Resolves: Bug 1654101 - Fix cherry-pick error in setup.py


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-6
changelog:
  - Bump version to 1.4.0.20-6
  - Resolves: Bug 1654101 - dscreate - suffix create root node option
  - Resolves: Bug 1671505 - ns-slapd crashes with k5_mutex_lock: Assertion `r == 0' failed


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-5
changelog:
  - Bump version to 1.4.0.20-5
  - Resolves: Bug 1654566 - dsctl db2ldif: Failing with error AttributeError: DirSrv has no attribute '_instance'


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-3
changelog:
  - Bump version to 1.4.0.20-3 
  - Resolves: Bug 1654105 - RHDS 11: dsconf related issues
  - Resolves: Bug 1623634 - Add backend functionality to UI's Plugin Tab
  - Resolves: Bug 1648971 - ssca needs to be removed after dirsrv instance is removed
  - Resolves: Bug 1654430 - cockpit does not validate Directory Manager password change operation
  - Resolves: Bug 1654241 - Add backend functionality to UI's Server Tab No. 2 (CLI and UI)
  - Resolves: Bug 1658622 - Information disclosure while using WebUI


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-2
changelog:
  - Bump version to 1.4.0.20-2
  - Resolves: Bug 1648937 - python3-lib389 pulls dependencies required only by tests


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-1
changelog:
  - Bump version to 1.4.0.20-1
  - Resolves: Bug 1631461 - Python installer doesn't label ports with ldap_port_t
  - Resolves: Bug 1653165 - certmap fails when Issuer DN has comma in name
  - Resolves: Bug 1653469 - Customer requesting -y option for ds-replcheck
  - Resolves: Bug 1654101 - dscreate related issues
  - Resolves: Bug 1654116 - dsctl related issues
  - Resolves: Bug 1654134 - 389 web UI gives error when try to do backup management
  - Resolves: Bug 1654281 - RHDS webui console is not loading other instances apart
  - Resolves: Bug 1654451 - dscreate permissions and SELinux labels "too relaxed/open", "incorrect" 
  - Resolves: Bug 1654518 - While creating instance getting error "ERR - createprlistensockets - PR_Bind() on All Interfaces port 392 failed: Netscape Portable Runtime error -5966
  - Resolves: Bug 1654566 - dsctl db2ldif: Failing with error AttributeError: DirSrv has no attribute '_instance'
  - Resolves: Bug 1654577 - Cockpit create backup should perform backup name check
  - Resolves: Bug 1654581 - dsidm: User creation failing with error AttributeError: module 'sys' has no attribute 'ext' 
  - Resolves: Bug 1654693 - dsconfig doesn't have option to pass password as an argument
  - Resolves: Bug 1658613 - Bind password change for replica agreement breaks replication


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.19-2
changelog:
  - Bump version to 1.4.0.19-2
  - Resolves: Bug 1631461 - Python installer doesn't label ports with ldap_port_t


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.19-1
changelog:
  - Bump version to 1.4.0.19-1
  - Resolves: Bug 1648924 - during MODRDN referential integrity can fail erronously while updating large groups
  - Resolves: Bug 1631461 - Python installer doesn't label ports with ldap_port_t


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.18-1
changelog:
  - Bump version to 1.4.0.18-1
  - Resolves: Bug 1602439 - Please review important issues found by covscan in "389-ds-base-1.4.0.11-1.el8+7" package
  - Resolves: Bug 1623631 - Add backend functionality to UI's Replication Tab
  - Resolves: Bug 1623633 - Add backend functionality to UI's Schema Tab
  - Resolves: Bug 1588057 - CVE-2018-10850 389-ds-base: race condition on reference counter leads to DoS using persistent search
  - Resolves: Bug 1624420 - CVE-2018-14638 389-ds-base: Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly
  - Resolves: Bug 1633718 - 389-ds module: Switched Requires from "python3" to "platform-python"


author: Matus Honek <mhonek@redhat.com> - 1.4.0.17-3
changelog:
  - Bump version to 1.4.0.17-3
  - Resolves: Bug 1635675 - Typo in SPEC file's 'Requires' breaks the latest compose


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.17-1
changelog:
  - Bump version to 1.4.0.17-1
  - Resolves: Bug 1623633 - Add backend functionality to UI's Schema Tab
  - Resolves: Bug 1602439 - Please review important issues found by covscan
  - Resolves: Bug 1629676 - replica install fails on s390x arch


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.14-5
changelog:
  - Bump version to 1.4.0.14-5
  - Resolves: Bug 1591761 - Revert ticket 49372
  - Resolves: Bug 1624196 - CVE-2018-14624 389-ds-base: Server crash through modify command with large DN


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.14-1
changelog:
  - Bump version to 1.4.0.14
  - Resolves: Bug 1578773 - ipa-server-install fails on missing setup-ds.pl dependency
  - Ticket 49891 - Use "__python3" macro for python scripts
  - Ticket 49890 - ldapsearch with server side sort crashes the ldap server
  - Ticket 49029 - RFE -improve internal operations logging
  - Ticket 49893 - disable nunc-stans by default
  - Ticket 48377 - Update file name for LD_PRELOAD
  - Ticket 49884 - Improve nunc-stans test to detect socket errors sooner
  - Ticket 49888 - Use perl filter in rpm specfile
  - Ticket 49866 - Add password policy features to CLI/UI
  - Ticket 49881 - Missing check for crack.h
  - Ticket 48056 - Add more test cases to the basic suite
  - Ticket 49761 - Fix replication test suite issues
  - Ticket 49381 - Refactor the plugin test suite docstrings
  - Ticket 49837 - Add new password policy attributes to UI
  - Ticket 49794 - RFE - Add pam_pwquality features to password syntax checking
  - Ticket 49867 - Fix CLI tools' double output


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.13-1
changelog:
  - Bump version to 1.4.0.13
  - Ticket 49854 - ns-slapd should create run_dir and lock_dir directories at startup
  - Ticket 49806 - Add SASL functionality to CLI/UI
  - Ticket 49789 - backout original security fix as it caused a regression in FreeIPA
  - Ticket 49857 - RPM scriptlet for 389-ds-base-legacy-tools throws an error


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.12-1
changelog:
  - Bump version to 1.4.0.12-1
  - Ticket 48377 - Move jemalloc license to /usr/share/licences
  - Ticket 49813 - Revised interactive installer
  - Ticket 49789 - By default, do not manage unhashed password
  - Ticket 49844 - lib389: don't set up logging at module scope
  - Ticket 49546 - Fix issues with MIB file
  - Ticket 49840 - ds-replcheck command returns traceback errors against ldif files having garbage content when run in offline mode
  - Ticket 49640 - Cleanup plugin bootstrap logging
  - Ticket 49835 - lib389: fix logging
  - Ticket 48818 - For a replica bindDNGroup, should be fetched the first time it is used not when the replica is started
  - Ticket 49780 - acl_copyEval_context double free
  - Ticket 49830 - Import fails if backend name is "default"
  - Ticket 49832 - remove tcmalloc references
  - Ticket 49813 - dscreate - add interactive installer
  - Ticket 49808 - Add option to add backend to dscreate
  - Ticket 49811 - lib389 setup.py should install autogenerated man pages
  - Ticket 49795 - UI - add "action" backend funtionality
  - Ticket 49588 - Add py3 support for tickets : part-3
  - Ticket 49820 - lib389 requires wrong python ldap library
  - Ticket 49791 - Update docker file for new dscreate options
  - Ticket 49761 - Fix more CI test issues
  - Ticket 49811 - Update man pages
  - Ticket 49783 - UI - add server configuration backend
  - Ticket 49717 - Add conftest.py for tests
  - Ticket 49588 - Add py3 support for tickets
  - Ticket 49793 - Updated descriptions in dscreate example INF file
  - Ticket 49471 - Rename dscreate options
  - Ticket 49751 - passwordMustChange attribute is not honored by a RO consumer if using "Chain on Update"
  - Ticket 49734 - Fix various issues with Disk Monitoring
  - Update Source0 URL in rpm/389-ds-base.spec.in


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.11-1
changelog:
  - Bump version to 1.4.0.11
  - Test for issue #49788
  - Fixing 4-byte UTF-8 character validation
  - Ticket 49777 - add config subcommand to dsconf
  - Ticket 49712 - lib389 CLI tools should return a result code on failures
  - Issue 49588 - Add py3 support for tickets : part-2
  - Remove old RHEL/fedora version checking from upstream specfile
  - Ticket 48204 - remove python2 from scripts
  - Ticket 49576 - ds-replcheck: fix certificate directory verification
  - Bug 1591761 - 389-ds-base: Remove jemalloc exports


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.10-1
changelog:
  - Bump verision to 1.4.0.10-1
  - Ticket 49640 - Errors about PBKDF2 password storage plugin at server startup
  - Ticket 49571 - perl subpackage and python installer by default
  - Ticket 49740 - UI - Replication monitor color coding is not colorblind friendly
  - Ticket 49741 - UI - View/Edit replication agreement hangs WebUI
  - Ticket 49703 - UI - Set default values in create instance form
  - Ticket 49742 - Fine grained password policy can impact search performance
  - Ticket 49768 - Under network intensive load persistent search can erronously decrease connection refcnt
  - Ticket 49765 - compiler warning
  - Ticket 49689 - Cockpit subpackage does not build in PREFIX installations
  - Ticket 49765 - Async operations can hang when the server is running nunc-stans
  - Ticket 49745 - UI add filter options for error log severity levels
  - Ticket 49761 - Fix test suite issues
  - Ticket 49754 - instances created with dscreate can not be upgraded with setup-ds.pl
  - Ticket 47902 - UI - add continuous refresh log feature
  - Ticket 49381 - Add docstrings to plugin test suites - Part 1
  - Ticket 49646 - Improve TLS cert processing in lib389 CLI
  - Ticket 49748 - Passthru plugin startTLS option not working
  - Ticket 49732 - Optimize resource limit checking for rootdn issued searches
  - Ticket 48377 - Bundle jemalloc
  - Ticket 49736 - Hardening of active connection list
  - Ticket 48184 - clean up and delete connections at shutdown (3rd)
  - Ticket 49675 - Revise coverity fix
  - Ticket 49333 - Do not remove versioned man pages
  - Ticket 49683 - Add support for JSON option in lib389 CLI tools
  - Ticket 49704 - Error log from the installer is concatenating all lines into one
  - Ticket 49726 - DS only accepts RSA and Fortezza cipher families
  - Ticket 49722 - Errors log full of " WARN - keys2idl - recieved NULL idl from index_read_ext_allids, treating as empty set" messages
  - Ticket 49582 - Add py3 support to memberof_plugin test suite
  - Ticket 49675 - Fix coverity issues
  - Ticket 49576 - Add support of ";deletedattribute" in ds-replcheck
  - Ticket 49706 - Finish UI patternfly convertions
  - Ticket 49684 - AC_PROG_CC clobbers CFLAGS set by --enable-debug
  - Ticket 49678 - organiSational vs organiZational spelling in lib389
  - Ticket 49689 - Fix local "make install" after adding cockpit subpackage
  - Ticket 49689 - Move Cockpit UI plugin to a subpackage
  - Ticket 49679 - Missing nunc-stans documentation and doxygen warnings
  - Ticket 49588 - Add py3 support for tickets : part-1
  - Ticket 49576 - Update ds-replcheck for new conflict entries
  - Ticket 48184 - clean up and delete connections at shutdown (2nd try)
  - Ticket 49698 - Remove unneeded patternfly files from Cockpit package
  - Ticket 49581 - Fix dynamic plugins test suite
  - Ticket 49665 - remove obsoleted upgrade scripts
  - Ticket 49693 - A DB_DEADLOCK while adding a tombstone (RUV) leads to access of an already freed entry
  - Ticket 49696 - replicated operations should be serialized
  - Ticket 49669 - Invalid cachemem size can crash the server during a restore
  - Ticket 49684 - AC_PROG_CC clobbers CFLAGS set by --enable-debug
  - Ticket 49685 - make clean fails if cargo is not installed
  - Ticket 49106 - Move ds_* scripts to libexec
  - Ticket 49657 - Fix cascading replication scenario in lib389 API
  - Ticket 49671 - Readonly replicas should not write internal ops to changelog
  - Ticket 49673 - nsslapd-cachememsize can't be set to a value bigger than MAX_INT
  - Ticket 49519 - Convert Cockpit UI to use strictly patternfly stylesheets
  - Ticket 49665 - Upgrade script doesn't enable CRYPT password storage plug-in
  - Ticket 49665 - Upgrade script doesn't enable PBKDF2 password storage plug-in


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.9-1
changelog:
  - Bump version to 1.4.0.9
  - Ticket 49661 - CVE-2018-1089 - Crash from long search filter
  - Ticket 49652 - DENY aci's are not handled properly
  - Ticket 49650 - lib389 enable_tls doesn't work on F28
  - Ticket 49538 - replace cacertdir_rehash with openssl rehash
  - Ticket 49406 - Port backend_test.py test to DSLdapObject implementation
  - Ticket 49649 - Use reentrant crypt_r()
  - Ticket 49642 - lib389 should generate a more complex password
  - Ticket 49612 - lib389 remove_ds_instance() does not remove systemd units
  - Ticket 49644 - crash in debug build


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.8-1
changelog:
  - Bump version to 1.4.0.8-1
  - Ticket 49639 - Crash when failing to read from SASL conn
  - Ticket 49109 - nsDS5ReplicaTransportInfo should accept StartTLS as an option
  - Ticket 49586 - Add py3 support to plugins test suite
  - Ticket 49511 - memory leak in pwdhash


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.7-1
changelog:
  - Bump version to 1.4.0.7
  - Ticket 49477 - Missing pbkdf python
  - Ticket 49552 - Fix the last of the build issues on F28/29
  - Ticket 49522 - Fix build issues on F28
  - Ticket 49631 - same csn generated twice
  - Ticket 49585 - Add py3 support to password test suite : part-3
  - Ticket 49585 - Add py3 support to password test suite : part-2
  - Ticket 48184 - revert previous patch around unuc-stans shutdown crash
  - Ticket 49585 - Add py3 support to password test suite
  - Ticket 46918 - Fix compiler warnings on arm
  - Ticket 49601 - Replace HAVE_SYSTEMD define with WITH_SYSTEMD in svrcore
  - Ticket 49619 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
  - Ticket 49608 - Add support for gcc/clang sanitizers
  - Ticket 49606 - Improve lib389 documentation
  - Ticket 49552 - Fix build issues on F28
  - Ticket 49603 - 389-ds-base package rebuilt on EPEL can't be installed due to missing dependencies
  - Ticket 49593 - NDN cache stats should be under the global stats
  - Ticket 49599 - Revise replication total init status messages
  - Ticket 49596 - repl-monitor.pl fails to find db tombstone/RUV entry
  - Ticket 49589 - merge svrcore into 389-ds-base
  - Ticket 49560 - Add a test case for extract-pemfiles
  - Ticket 49239 - Add a test suite for ds-replcheck tool RFE
  - Ticket 49369 - merge svrcore into 389-ds-base


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.6-1
changelog:
  - Bump version to 1.4.0.6
  - Ticket 49545 - final substring extended filter search returns invalid result
  - Ticket 49572 - ns_job_wait race on condvar
  - Ticket 49584 - Fix Tickets with paged_results test suite
  - Ticket 49161 - memberof fails if group is moved into scope
  - Ticket 49447 - PBKDF2 on upgrade
  - ticket 49551 - correctly handle subordinates and tombstone numsubordinates
  - Ticket 49043 - Add replica conflict test suite
  - Ticket 49296 - Fix race condition in connection code with  anonymous limits
  - Ticket 49568 - Fix integer overflow on 32bit platforms
  - Ticket 48085 - Add encryption cl5 test suite
  - Ticket 49566 - ds-replcheck needs to work with hidden conflict entries
  - Ticket 49519 - Add more Cockpit UI content
  - Ticket 49551 - fix memory leak found by coverity
  - Ticket 49551 - v3 - correct handling of numsubordinates for cenotaphs and tombstone delete
  - Ticket 49278 - Add a new CI test case
  - Ticket 49560 - nsslapd-extract-pemfiles should be enabled by default as openldap is moving to openssl
  - Ticket 49557 - Add config option for checking CRL on outbound SSL Connections
  - Ticket 49446 - Add CI test case
  - Ticket 35 -    Description: Add support for managing automember to dsconf
  - Ticket 49544 - cli release preperation
  - Ticket 48006 - Add a new CI test case


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.5-1
changelog:
  - Bump version to 1.4.0.5
  - CVE-2017-15134 389-ds-base: Remote DoS via search filters in slapi_filter_sprintf
  - Ticket 49546 - Fix broken snmp MIB file
  - Ticket 49554 - update readme
  - Ticket 49554 - Update Makefile for README.md
  - Ticket 49400 - Make CLANG configurable
  - Ticket 49530 - Add pseudolocalization option for dbgen
  - Ticket 49523 - Fixed skipif marker, topology fixture and log message
  - Ticket 49544 - Double check pw prompts
  - Ticket 49548 - Cockpit UI - installer should also setup Cockpit


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.4-1
changelog:
  - Bump version to 1.4.0.4
  - Ticket 49540 - Indexing task is reported finished too early regarding the backend status
  - Ticket 49534 - Fix coverity regression
  - Ticket 49544 - cli release preperation, group improvements
  - Ticket 49542 - Unpackaged files on el7 break rpm build
  - Ticket 49541 - repl config should not allow rid 65535 for masters
  - Ticket 49370 - Add all the password policy defaults to a new local policy
  - Ticket 49425 - improve demo objects for install
  - Ticket 49537 - allow asan to build with stable rustc
  - Ticket 49526 - Improve create_test.py script
  - Ticket 49516 - Add python 3 support for replication suite
  - Ticket 49534 - Fix coverity issues and regression
  - Ticket 49532 - coverity issues - fix compiler warnings & clang issues
  - Ticket 49531 - coverity issues - fix memory leaks
  - Ticket 49463 - After cleanALLruv, there is a flow of keep alive DEL
  - Ticket 49529 - Fix Coverity warnings: invalid deferences
  - Ticket 49509 - Indexing of internationalized matching rules is failing
  - Ticket 49527 - Improve ds* cli tool testing
  - Ticket 49474 - purge saslmaps before gssapi test
  - Ticket 49413 - Changelog trimming ignores disabled replica-agreement
  - Ticket 49446 - cleanallruv should ignore cleaned replica Id in processing changelog if in force mode
  - Ticket 49278 - GetEffectiveRights gives false-negative
  - Ticket 49508 - memory leak in cn=replica plugin setup
  - Ticket 48118 - Add CI test case
  - Ticket 49520 - Cockpit UI - Add database chaining HTML
  - Ticket 49512 - Add ds-cockpit-setup to rpm spec file
  - Ticket 49523 - Refactor CI test
  - Ticket 49524 - Password policy: minimum token length fails  when the token length is equal to attribute length
  - Ticket 49517 - Cockpit UI - Add correct png files
  - Ticket 49517 - Cockput UI - revise config layout
  - Ticket 49523 - memberof: schema violation error message is confusing as memberof will likely repair target entry
  - Ticket 49312 - Added a new test case for "-D configdir"
  - Ticket 49512 - remove backup directories from cockpit source
  - Ticket 49512 - Add initial Cockpit UI Plugin
  - Ticket 49515 - cannot link, missing -fPIC
  - Ticket 49474 - Improve GSSAPI testing capability
  - Ticket 49493 - heap use after free in csn_as_string
  - Ticket 49379 - Add Python 3 support to CI test
  - Ticket 49431 - Add CI test case
  - Ticket 49495 - cos stress test and improvements.
  - Ticket 49495 - Fix memory management is vattr.
  - Ticket 49494 - python 2 bytes mode.
  - Ticket 49471 - heap-buffer-overflow in ss_unescape
  - Ticket 48184 - close connections at shutdown cleanly.
  - Ticket 49218 - Certmap - support TLS tests
  - Ticket 49470 - overflow in pblock_get
  - Ticket 49443 - Add CI test case
  - Ticket 49484 - Minor cli tool fixes.
  - Ticket 49486 - change ns stress core to use absolute int width.
  - Ticket 49445 - Improve regression test to detect memory leak.
  - Ticket 49445 - Memory leak in ldif2db
  - Ticket 49485 - Typo in gccsec_defs
  - Ticket 49479 - Remove unused 'batch' argument from lib389
  - Ticket 49480 - Improvements to support IPA install.
  - Ticket 49474 - sasl allow mechs does not operate correctly
  - Ticket 49449 - Load sysctl values on rpm upgrade.
  - Ticket 49374 - Add CI test case
  - Ticket 49325 - fix rust linking.
  - Ticket 49475 - docker poc improvements.
  - Ticket 49461 - Improve db2index handling for test 49290
  - Ticket 47536 - Add Python 3 support and move test case to suites
  - Ticket 49444 - huaf in task.c during high load import
  - Ticket 49460 - replica_write_ruv log a failure even when it succeeds
  - Ticket 49298 - Ticket with test case and remove-ds.pl
  - Ticket 49408 - Add a test case for nsds5ReplicaId checks
  - Ticket 3 lib389 - python 3 support for subset of pwd cases
  - Ticket 35 lib389 - dsconf automember support


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.3-1
changelog:
  - Bump version to 1.4.0.3
  - Ticket 49457 - Fix spal_meminfo_get function prototype
  - Ticket 49455 - Add tests to monitor test suit.
  - Ticket 49448 - dynamic default pw scheme based on environment.
  - Ticket 49298 - fix complier warn
  - Ticket 49298 - Correct error codes with config restore.
  - Ticket 49454 - SSL Client Authentication breaks in FIPS mode
  - Ticket 49453 - passwd.py to use pwdhash defaults.
  - Ticket 49427 - whitespace in fedse.c
  - Ticket 49410 - opened connection can remain no longer poll, like hanging
  - Ticket 48118 - fix compiler warning for incorrect return type
  - Ticket 49451 - Add environment markers to lib389 dependencies
  - Ticket 49325 - Proof of concept rust tqueue in sds
  - Ticket 49443 - scope one searches in 1.3.7 give incorrect results
  - Ticket 48118 - At startup, changelog can be erronously rebuilt after a normal shutdown
  - Ticket 49412 - SIGSEV when setting invalid changelog config value
  - Ticket 49441 - Import crashes - oneline fix
  - Ticket 49377 - Incoming BER too large with TLS on plain port
  - Ticket 49441 - Import crashes with large indexed binary  attributes
  - Ticket 49435 - Fix NS race condition on loaded test systems
  - Ticket 77 - lib389 - Refactor docstrings in rST format - part 2
  - Ticket 17 - lib389 - dsremove support
  - Ticket 3 - lib389 - python 3 compat for paged results test
  - Ticket 3 - lib389 - Python 3 support for memberof plugin test suit
  - Ticket 3 - lib389 - config test
  - Ticket 3 - lib389 - python 3 support ds_logs tests
  - Ticket 3 - lib389 - python 3 support for betxn test


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.2-1
changelog:
  - Bump version to 1.4.0.2-1
  - Ticket 48393 - fix copy and paste error
  - Ticket 49439 - cleanallruv is not logging information
  - Ticket 48393 - Improve replication config validation
  - Ticket lib389 3 - Python 3 support for ACL test suite
  - Ticket 103 - sysconfig not found
  - Ticket 49436 - double free in COS in some conditions
  - Ticket 48007 - CI test to test changelog trimming interval
  - Ticket 49424 - Resolve csiphash alignment issues
  - Ticket lib389 3 - Python 3 support for pwdPolicy_controls_test.py
  - Ticket 3 - python 3 support - filter test
  - Ticket 49434 - RPM build errors
  - Ticket 49432 - filter optimise crash
  - Ticket 49432 - Add complex fliter CI test
  - Ticket 48894 - harden valueset_array_to_sorted_quick valueset  access
  - Ticket 49401 - Fix compiler incompatible-pointer-types warnings
  - Ticket 48681 - Use of uninitialized value in string ne at /usr/bin/logconv.pl
  - Ticket 49409 - Update lib389 requirements
  - Ticket 49401 - improve valueset sorted performance on delete
  - Ticket 49374 -  server fails to start because maxdisksize is recognized incorrectly
  - Ticket 49408 - Server allows to set any nsds5replicaid in the existing replica entry
  - Ticket 49407 - status-dirsrv shows ellipsed lines
  - Ticket 48681 - Use of uninitialized value in string ne at /usr/bin/logconv.pl
  - Ticket 49386 - Memberof should be ignore MODRDN when the pre/post entry are identical
  - Ticket 48006 - Missing warning for invalid replica backoff  configuration
  - Ticket 49064 - testcase hardening
  - Ticket 49064 - RFE allow to enable MemberOf plugin in dedicated consumer
  - Ticket lib389 3 - python 3 support
  - Ticket 49402 - Adding a database entry with the same database name that was deleted hangs server at shutdown
  - Ticket 48235 - remove memberof lock (cherry-pick error)
  - Ticket 49394 - build warning
  - Ticket 49381 - Refactor numerous suite docstrings - Part 2
  - Ticket 49394 - slapi_pblock_get may leave unchanged the provided variable
  - Ticket 49403 - tidy ns logging
  - Ticket 49381 - Refactor filter test suite docstrings
  - Ticket 48235 - Remove memberOf global lock
  - Ticket 103 - Make sysconfig where it is expected to exist
  - Ticket 49400 - Add clang support to rpm builds
  - Ticket 49381 - Refactor ACL test suite docstrings
  - Ticket 49363 - Merge lib389
  - Ticket 101 - BaseException.message has been deprecated in Python3
  - Ticket 102 - referral support
  - Ticket 99 - Fix typo in create_topology
  - Ticket #98 - Fix dbscan output
  - Ticket #77 - Fix changelogdb param issue
  - Ticket #77 - Refactor docstrings in rST format - part 1
  - Ticket 96 - Change binaries' names
  - Ticket 77 - Add sphinx documentation
  - Ticket 43 - Add support for Referential Integrity plugin
  - Ticket 45 - Add support for Rootdn Access Control plugin
  - Ticket 46 - dsconf support for dynamic schema reload
  - Ticket 74 - Advice users to set referint-update-delay to 0
  - Ticket 92 - display_attr() should return str not bytes in py3
  - Ticket 93 - Fix test cases in ctl_dbtasks_test.py
  - Ticket 88 - python install and remove for tests
  - Ticket 85 - Remove legacy replication attribute
  - Ticket 91 - Fix replication topology
  - Ticket 89 - Fix inconsistency with serverid
  - Ticket 79 - Fix replica.py and add tests
  - Ticket 86 - add build dir to gitignore
  - Ticket 83 - Add an util for generating instance parameters
  - Ticket 87 - Update accesslog regec for HR etimes
  - Ticket 49 - Add support for whoami plugin
  - Ticket 48 - Add support for USN plugin
  - Ticket 78 - Add exists() method to DSLdapObject
  - Ticket 31 - Allow complete removal of some memberOf attrs
  - Ticket31 - Add memberOf fix-up task
  - Ticket 67 - Add ensure_int function
  - Ticket 59 - lib389 support for index management.
  - Ticket 67 - get attr by type
  - Ticket 70 - Improve repl tools
  - Ticket 50 - typo in db2* in dsctl
  - Ticket 31 - Add status command and SkipNested support for MemberOf
  - Ticket 31 - Add functional tests for MemberOf plugin
  - Ticket 66 - expand healthcheck for Directory Server
  - Ticket 69 - add specfile requires
  - Ticket 31 - Initial MemberOf plugin support
  - Ticket 50 - Add db2* tasks to dsctl
  - Ticket 65 - Add m2c2 topology
  - Ticket 63 - part 2, agreement test
  - Ticket 63 - lib389 python 3 fix
  - Ticket 62 - dirsrv offline log
  - Ticket 60 - add dsrc to dsconf and dsidm
  - Ticket 32 - Add TLS external bind support for testing
  - Ticket 27 - Fix get function in tests
  - Ticket 28 - userAccount for older versions without nsmemberof
  - Ticket 27 - Improve dseldif API
  - Ticket 30 - Add initial support for account lock and unlock.
  - Ticket 29 - fix incorrect format in tools
  - Ticket 28 - Change default objectClasses for users and groups
  - Ticket 1 - Fix missing dn / rdn on config.
  - Ticket 27 - Add a module for working with dse.ldif file
  - Ticket 1 - cn=config comparison
  - Ticket 21 - Missing serverid in dirsrv_test due to incorrect allocation
  - Ticket 26 - improve lib389 sasl support
  - Ticket 24 - Join paths using os.path.join instead of string concatenation
  - Ticket 25 - Fix RUV __repr__ function
  - Ticket 23 - Use DirSrv.exists() instead of manually checking for instance's existence
  - Ticket 1 - cn=config comparison
  - Ticket 22 - Specify a basedn parameter for IDM modules
  - Ticket 19 - missing readme.md in python3
  - Ticket 20 - Use the DN_DM constant instead of hard coding its value
  - Ticket 19 - Missing file and improve make
  - Ticket 14 - Remane dsadm to dsctl
  - Ticket 16 - Reset InstScriptsEnabled argument during the init
  - Ticket 14 - Remane dsadm to dsctl
  - Ticket 13 - Add init function to create new domain entries
  - Ticket 15 - Improve instance configuration ability
  - Ticket 10 - Improve command line tool arguments
  - Ticket 9 - Convert readme to MD
  - Ticket 7 - Add pause and resume methods to topology fixtures
  - Ticket 49172 - Allow lib389 to read system schema and instance
  - Ticket 49172 - Allow lib389 to read system schema and instance
  - Ticket 6 - Bump lib389 version 1.0.4
  - Ticket 5 - Fix container build on fedora
  - Ticket 4 - Cert detection breaks some tests
  - Ticket 49137 - Add sasl plain tests, lib389 support
  - Ticket 2 - pytest mark with version relies on root
  - Ticket 49126 - DIT management tool
  - Ticket 49101 - Python 2 generate example entries
  - Ticket 49103 - python 2 support for installer
  - Ticket 47747 - Add topology_i2 and topology_i3
  - Ticket 49087 - lib389 resolve jenkins issues
  - Ticket 48413 - Improvements to lib389 for rest
  - Ticket 49083 - Support prefix for discovery of the defaults.inf file.
  - Ticket 49055 - Fix debugging mode issue
  - Ticket 49060 - Increase number of masters, hubs and consumers in topology
  - Ticket 47747 - Add more topology fixtures
  - Ticket 47840 - Add InstScriptsEnabled argument
  - Ticket 47747 - Add topology fixtures module
  - Ticket 48707 - Implement draft-wibrown-ldapssotoken-01
  - Ticket 49022 - Lib389, py3 installer cannot create entries in backend
  - Ticket 49024 - Fix paths to the dbdir parent
  - Ticket 49024 - Fix db_dir paths
  - Ticket 49024 - Fix paths in tools module
  - Ticket 48961 - Fix lib389 minor issues shown by 48961 test
  - Ticket 49010 - Lib389 fails to start with systemctl changes
  - Ticket 49007 - lib389 fixes for paths to use online values
  - Ticket 49005 - Update lib389 to work in containers correctly.
  - Ticket 48991 - Fix lib389 spec for python2 and python3
  - Ticket 48984 - Add lib389 paths module
  - Ticket 48951 - dsadm dsconfig status and plugin
  - Ticket 47957 - Update the replication "idle" status string
  - Ticket 48951 - dsadm and dsconf base files
  - Ticket 48952 - Restart command needs a sleep
  - Ticket 48949 - Fix ups for style and correctness
  - Ticket 48949 - added copying slapd-collations.conf
  - Ticket 48949 - change default file path generation - use os.path.join
  - Ticket 48949 - os.makedirs() exist_ok not python2 compatible, added try/except
  - Ticket 48949 - configparser fallback not python2 compatible
  - Ticket 48946 - openConnection should not fully popluate DirSrv object
  - Ticket 48832 - Add DirSrvTools.getLocalhost() function
  - Ticket 48382 - Fix serverCmd to get sbin dir properly
  - Bug 1347760 - Information disclosure via repeated use of LDAP ADD operation, etc.
  - Ticket 48937 - Cleanup valgrind wrapper script
  - Ticket 48923 - Fix additional issue with serverCmd
  - Ticket 48923 - serverCmd timeout not working as expected
  - Ticket 48917 - Attribute presence
  - Ticket 48911 - Plugin improvements for lib389
  - Ticket 48911 - Improve plugin support based on new mapped objects
  - Ticket 48910 - Fixes for backend tests and lib389 reliability.
  - Ticket 48860 - Add replication tools
  - Ticket 48888 - Correction to create of dsldapobject
  - Ticket 48886 - Fix NSS SSL library in lib389
  - Ticket 48885 - Fix spec file requires
  - Ticket 48884 - Bugfixes for mapped object and new connections
  - Ticket 48878 - better style for backend in backend_test.py
  - Ticket 48878 - pep8 fixes part 2
  - Ticket 48878 - pep8 fixes and fix rpm to build
  - Ticket 48853 - Prerelease installer
  - Ticket 48820 - Begin to test compatability with py.test3, and the new orm
  - Ticket 48434 - Fix for negative tz offsets
  - Ticket 48857 - Remove python-krbV from lib389
  - Ticket 48820 - Fix tests to ensure they work with the new object types
  - Ticket 48820 - Move Encryption and RSA to the new object types
  - Ticket 48820 - Proof of concept of orm style mapping of configs and objects
  - Ticket 48820 - Clitool rename
  - Ticket 48431 - lib389 integrate ldclt
  - Ticket 48434 - lib389 logging tools
  - Ticket 48796 - add function to remove logs
  - Ticket 48771 - lib389 - get ns-slapd version
  - Ticket 48830 - Convert lib389 to ip route tools
  - Ticket 48763 - backup should run regardless of existing backups.
  - Ticket 48434 - lib389 logging tools
  - Ticket 48798 - EL6 compat for lib389 tests for DH params
  - Ticket 48798 - lib389 add ability to create nss ca and certificate
  - Ticket 48433 - Aci linting tools
  - Ticket 48791 - format args in server tools
  - Ticket 48399 - Helper makefile is missing mkdir dist
  - Ticket 48399 - Helper makefile is missing mkdir dist
  - Ticket 48794 - lib389 build requires are on a single line
  - Ticket 48660 - Add function to convert binary values in an entry to base64
  - Ticket 48764 - Fix mit krb password to be random.
  - Ticket 48765 - Change default ports for standalone topology
  - Ticket 48750 - Clean up logging to improve command experience
  - Ticket 48751 - Improve lib389 ldapi support
  - Ticket 48399 - Add helper makefile to lib389 to build and install
  - Ticket 48661 - Agreement test suite fails at the test_changes case
  - Ticket 48407 - Add test coverage module for lib389 repo
  - Ticket 48357 - clitools should standarise their args
  - Ticket 48560 - Make verbose handling consistent
  - Ticket 48419 - getadminport() should not a be a static method
  - Ticket 48408 - RFE escaped default suffix for tests
  - Ticket 48401 - Revert typecheck
  - Ticket 48401 - lib389 Entry hasAttr returs dict instead of false
  - Ticket 48390 - RFE Improvements to lib389 monitor features for rest389
  - Ticket 48358 - Add new spec file
  - Ticket 48371 - weaker host check on localhost.localdomain
  - Ticket 58358 - Update spec file with pre-release versioning
  - Ticket 48358 - Make Fedora packaging changes to the spec file
  - Ticket 48358 - Prepare lib389 for Fedora Packaging
  - Ticket 48364 - Fix test failures
  - Ticket 48360 - Refactor the delete agreement function
  - Ticket 48361 - Expand 389ds monitoring capabilities
  - Ticket 48246 - Adding license/copyright to lib389 files
  - Ticket 48340 - Add basic monitor support to lib389 https://fedorahosted.org/389/ticket/48340
  - Ticket 48353 - Add Replication REST support to lib389
  - Ticket 47840 - Fix regression
  - Ticket 48343 - lib389 krb5 realm management https://fedorahosted.org/389/ticket/48343
  - Ticket 47840 - fix lib389 to use sbin scripts  https://fedorahosted.org/389/ticket/47840
  - Ticket 48335 - Add SASL support to lib389
  - Ticket 48329 - Fix case-senstive scyheam comparisions
  - Ticket 48303 - Fix lib389 broken tests
  - Ticket 48329 - add matching rule functions to schema module
  - Ticket 48324 - fix boolean capitalisation (one line) https://fedorahosted.org/389/ticket/48324
  - Ticket 48321 - Improve is_a_dn check to prevent mistakes with lib389 auth https://fedorahosted.org/389/ticket/48321
  - Ticket 48322 - Allow reindex function to reindex all attributes
  - Ticket 48319 - Fix ldap.LDAPError exception processing
  - Ticket 48318 - Do not delete a changelog while disabling a replication by suffix
  - Ticket 48308 - Add __eq__ and __ne__ to Entry to allow fast comparison https://fedorahosted.org/389/ticket/48308
  - Ticket 48303 - Fix lib389 broken tests - backend_test
  - Ticket 48309 - Fix lib389 lib imports
  - Ticket 48303 - Fix lib389 broken tests - agreement_test
  - Ticket 48303 - Fix lib389 broken tests - aci_parse_test
  - Ticket 48301 - add tox support
  - Ticket 48204 - update lib389 for python3
  - Ticket 48273 - Improve valgrind functions
  - Ticket 48271 - Fix for self.prefix being none when SER_DEPLOYED_DIR is none https://fedorahosted.org/389/ticket/48271
  - Ticket 48259 - Add aci parsing utilities to lib389
  - Ticket 48252 - (lib389) adding get_bin_dir and dbscan
  - Ticket 48247 - Change the default user to 'dirsrv'
  - Ticket 47848 - Add new function to create ldif files
  - Ticket 48239 - Fix for prefix allocation of un-initialised dirsrv objects
  - Ticket 48237 - Add lib389 helper to enable and disable logging services.
  - Ticket 48236 - Add get effective rights helper to lib389
  - Ticket 48238 - Add objectclass and attribute type query mechanisms
  - Ticket 48029 - Add missing replication related functions
  - Ticket 48028 - add valgrind wrapper for ns-slapd
  - Ticket 48028 - lib389 - add valgrind functions
  - Ticket 48022 - lib389 - Add all the server tasks
  - Ticket 48023 - create function to test replication between servers
  - Ticket 48020 - lib389 - need to reset args_instance with  every DirSrv init
  - Ticket 48000 - Repl agmts need more time to stop
  - Ticket 48004 - Fix various issues
  - Ticket 48000 - replica agreement pause/resume should have a short sleep
  - Ticket 47990 - Add check for ".removed" instances when doing an upgrade
  - Ticket 47990 - Add "upgrade" function to lib389
  - Ticket 47691 - using lib389 with RPMs
  - Ticket 47848 - Add support for setuptools.
  - Ticket 47855 - Add function to clear tmp directory
  - Ticket 47851 - Need to retrieve tmp directory path
  - Ticket 47845 - add stripcsn option to tombstone fixup task
  - Ticket 47851 - Add function to retrieve dirsrvtests data directory
  - Ticket 47845 - Add backup/restore/fixup tombstone tasks to lib389
  - Ticket 47819 - Add the new precise tombstone purging config attribute
  - Ticket 47695 - Add plugins/tasks/Index
  - Ticket 47648 - lib389 - add schema classes, methods
  - Ticket 47671 - CI lib389: allow to open a DirSrv without having to create the instance
  - Ticket 47600 - Replica/Agreement/Changelog not conform to the design
  - Ticket 47652 - replica add fails: MT.list return a list not an entry
  - Ticket 47635 - MT/Backend/Suffix to be conform with the design
  - Ticket 47625 - CI lib389: DirSrv not conform to the design
  - Ticket 47595 - fail to detect/reinit already existing instance/backup
  - Ticket 47590 - CI tests: add/split functions around replication
  - Ticket 47584 - CI tests: add backup/restore of an instance
  - Ticket 47578 - CI tests: removal of 'sudo' and absolute path in lib389
  - Ticket 47568 - Rename DSAdmin class
  - Ticket 47566 - Initial import of DSadmin into 389-test repos


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.1-1
changelog:
  - Bump version to 1.4.0.1-1
  - Ticket 49038 - remove legacy replication - change cleanup script precedence
  - Ticket 49392 - memavailable not available
  - Ticket 49235 - pbkdf2 by default
  - Ticket 49279 - remove dsktune
  - Ticket 49372 - filter optimisation improvements for common queries
  - Ticket 49320 - Activating already active role returns error 16
  - Ticket 49389 - unable to retrieve specific cosAttribute when subtree password policy is configured
  - Ticket 49092 - Add CI test for schema-reload
  - Ticket 49388 - repl-monitor - matches null string many times in regex
  - Ticket 49387 - pbkdf2 settings were too aggressive
  - Ticket 49385 - Fix coverity warnings
  - Ticket 49305 - Need to wrap atomic calls
  - Ticket 48973 - Indexing a ExactIA5Match attribute with a IgnoreIA5Match matching rule triggers a warning
  - Ticket 49378 - server init fails
  - Ticket 49305 - Need to wrap atomic calls
  - Ticket 49180 - add CI test
  - Ticket 49180 - errors log filled with attrlist_replace - attr_replace


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.4-1
changelog:
  - Bump version to 1.3.7.4
  - Ticket 49371 - Cleanup update script
  - Ticket 48831 - Autotune dncache with entry cache.
  - Ticket 49312 - pwdhash -D used default hash algo
  - Ticket 49043 - make replication conflicts transparent to clients
  - Ticket 49371 - Fix rpm build
  - Ticket 49371 - Template dse.ldif did not contain all needed plugins
  - Ticket 49295 - Fix CI Tests
  - Ticket 49050 - make objectclass ldapsubentry effective immediately


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.3-1
changelog:
  - Bump version to 1.3.7.3
  - Ticket 49354 - fix regression in total init due to mistake in range fetch
  - Ticket 49370 - local password policies should use the same defaults as the global policy
  - Ticket 48989 - Delete slow lib389 test
  - Ticket 49367 - missing braces in idsktune
  - Ticket 49364 - incorrect function declaration.
  - Ticket 49275 - fix tls auth regression
  - Ticket 49038 - Revise creation of cn=replication,cn=config
  - Ticket 49368 - Fix typo in log message
  - Ticket 48059 - Add docstrings to CLU tests
  - Ticket 47840 - Add docstrings to setup tests
  - Ticket 49348 - support perlless and wrapperless install


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.2-1
changelog:
  - Bump verison to 1.3.7.2
  - Ticket 49038 - Fix regression from legacy code cleanup
  - Ticket 49295 - Fix CI tests
  - Ticket 48067 - Add bugzilla tests for ds_logs
  - Ticket 49356 - mapping tree crash can occur during tot init
  - Ticket 49275 - fix compiler warns for gcc 7
  - Ticket 49248 - Add a docstring to account locking test case
  - Ticket 49445 - remove dead code
  - Ticket 48081 - Add regression tests for pwpolicy
  - Ticket 48056 - Add docstrings to basic test suite
  - Ticket 49349 - global name 'imap' is not defined
  - Ticket 83 - lib389 - Fix tests and create_test.py
  - Ticket 48185 - Remove referint-logchanges attr from referint's config
  - Ticket 48081 - Add regression tests for pwpolicy
  - Ticket 83 - lib389 - Replace topology agmt objects
  - Ticket 49331 - change autoscaling defaults
  - Ticket 49330 - Improve ndn cache performance.
  - Ticket 49347 - reproducable build numbers
  - Ticket 39344 - changelog ldif import fails
  - Ticket 49337 - Add regression tests for import tests
  - Ticket 49309 - syntax checking on referint's delay attr
  - Ticket 49336 - SECURITY: Locked account provides different return code
  - Ticket 49332 - Event queue is not working
  - Ticket 49313 - Change the retrochangelog default cache size
  - Ticket 49329 - Descriptive error msg for USN cleanup task
  - Ticket 49328 - Cleanup source code
  - Ticket 49299 - Add normalized dn cache stats to dbmon.sh
  - Ticket 49290 - improve idl handling in complex searches
  - Ticket 49328 - Update clang-format config file
  - Ticket 49091 - remove usage of changelog semaphore
  - Ticket 49275 - shadow warnings for gcc7 - pass 1
  - Ticket 49316 - fix missing not condition in clock cleanu
  - Ticket 49038 - Remove legacy replication
  - Ticket 49287 - v3 extend csnpl handling to multiple backends
  - Ticket 49310 - remove sds logging in debug builds
  - Ticket 49031 - Improve memberof with a cache of group parents
  - Ticket 49316 - Fix clock unsafety in DS
  - Ticket 48210 - Add IP addr and connid to monitor output
  - Ticket 49295 - Fix CI tests and compiler warnings
  - Ticket 49295 - Fix CI tests
  - Ticket 49305 - Improve atomic behaviours in 389-ds
  - Ticket 49298 - fix missing header
  - Ticket 49314 - Add untracked files to the .gitignore
  - Ticket 49303 - Fix error in CI test
  - Ticket 49302 - fix dirsrv importst due to lib389 change
  - Ticket 49303 - Add option to disable TLS client-initiated renegotiation
  - Ticket 49298 - force sync() on shutdown
  - Ticket 49306 - make -f rpm.mk rpms produces build without tcmalloc enabled
  - Ticket 49297 - improve search perf in bpt by removing a deref
  - Ticket 49284 - resolve crash in memberof when deleting attrs
  - Ticket 49290 - unindexed range searches don't provide notes=U
  - Ticket 49301 - Add one logpipe test case


author: Mark Reynolds <mreynoilds@redhat.com> - 1.3.7.1-1
changelog:
  - Bump verson to 1.3.7.1
  - Ticket 49288 - RootDN Access wrong plugin path in template-dse.ldif.in
  - Ticket 49289 - Improve result handling from connections with NS
  - Ticket 49294 - radiusd before in unit file
  - Ticket 49293 - inttypes in nunc-stans
  - Ticket 49295 - Fix latest CI test failures
  - Ticket 623 - Add test case and refactor the cleanallruv suite
  - Ticket 49291 - slapi_search_internal_callback_pb may SIGSEV if related pblock has not operation set
  - Ticket 49008 - Fix MO plugin betxn test
  - Ticket 48944 - Add CI test case
  - Ticket 49227 - ldapsearch does not return the expected Error log level
  - Ticket 49028 - Add autotuning test suite
  - Ticket 49281 - improve db2* tests
  - Ticket 49273 - bak2db doesn't operate with dbversion
  - Ticket 49184 - adjust logging level in MO plugin
  - Ticket 49257 - Update CI script
  - Ticket 49257 - only register modify callbacks
  - Ticket 49008 - Adjust CI test for new memberOf behavior
  - Ticket 49273 - Fix compiler warning in dbversion_write, missing newline
  - Ticket 49277 - improve out of box system tuning for EL7
  - Ticket 49273 - crash when DBVERSION is corrupt.
  - Ticket 49273 - crash when DBVERSIOn is corrupt.
  - Ticket 49268 - master branch fails on big endian systems
  - Ticket 49271 - Fix pbkdf2 and openssl missing issue
  - Ticket 49242 - add gdb script to rpm
  - Ticket 49269 - Fix coverity errors
  - Ticket 49241 - add symblic link location to db2bak.pl output
  - Ticket #49072: memberOf fixup task does not validate args
  - Ticket 49257 - Reject nsslapd-cachememsize & nsslapd-cachesize when nsslapd-cache-autosize is set
  - Ticket 48538 - Failed to delete old semaphore
  - Ticket 49231 - force EXTERNAL always
  - Ticket 49267 - autosize split of 0 results in dbcache of 0
  - Ticket 49099 - resolve systemd startup interaction with ns
  - Ticket 49157 - fix error in ds-logpipe.py
  - Ticket 48864 - remove config.h from spal header.
  - Ticket 48681 - logconv.pl - Fix SASL Bind stats and rework report format
  - Ticket 49261 - Fix script usage and man pages
  - Ticket 49238 - AddressSanitizer: heap-use-after-free in libreplication
  - Ticket 48864 - Fix FreeIPA build
  - Ticket 49257 - Reject dbcachesize updates while auto cache sizing is enabled
  - Ticket 49249 - cos_cache is erroneously logging schema checking failure
  - Ticket 49248 - update eduPerson to 201602
  - Ticket 48050 - Add a test case for an issue 49014
  - Ticket 49258 - Allow nsslapd-cache-autosize to be modified while the server is running
  - Ticket 49165 - Fix compiler warnings
  - Ticket 49247 - resolve build issues on debian
  - Ticket 48123 - create contrib section
  - Ticket 49099 - fix configure.ac due to NS change
  - Ticket 49250 - remove mempool experimental!
  - Ticket 49099 - ns workers prep
  - Ticket 49185 - Fix leaks in compute init and dblayer
  - Ticket 49246 - ns-slapd crashes in role cache creation
  - Ticket 49244 - resolve various test case issues
  - Ticket 49157 - ds-logpipe.py crashes for non-existing users
  - Ticket 49053 - Fix rpm build
  - Ticket 49237 - Drop support for libdb older than 4.7
  - Ticket 49053 - Enable flto for DS
  - Ticket 49243 - segv in memberof fixup
  - Ticket 48985 - Add schema for nested groups to work out of box.
  - Ticket 49241 - Update man page and usage for db2bak.pl
  - Ticket 49071 - Add test case to tickets
  - Ticket 49075 - Adjust logging severity levels
  - Ticket 47662 - db2index not properly evalauating arguments
  - Ticket 49240 - ci compiler warns
  - Ticket 48989 - fix perf counters
  - Ticket 48681 - logconv.pl - fix sasl/bind stats
  - Ticket 49097 - fix pblock whitespace
  - Ticket 49097 - fix the pblock to be a hierachial structure
  - Ticket 49239 - move ds-replcheck man page and add script
  - Ticket 49239 - Add a tool to compare entries on LDAP servers.
  - Ticket 49231 - fix sasl mech handling
  - Ticket 49233 - Fix crash in persistent search
  - Ticket 49225 - Fix CI Test
  - Ticket 49230 - slapi_register_plugin creates config entry where it should not
  - Ticket 49225 - Add additional CRYPT password storage schemes


author: Charalampos Stratakis <cstratak@redhat.com> - 1.3.6.6-3
changelog:
  - Bump verstion to 1.3.6.6-3
  - Ensure the binaries are pointing to the Python 3 interpreter (rhbz#1244234)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.6-1
changelog:
  - Bump version to 1.3.6.6-1
  - Ticket 49157 - fix error in ds-logpipe.py
  - Ticket 48864 - remove config.h from spal header.
  - Ticket 48681 - logconv.pl - Fix SASL Bind stats and rework report format
  - Ticket 49261 - Fix script usage and man pages
  - Ticket 49238 - AddressSanitizer: heap-use-after-free in libreplication
  - Ticket 48864 - Fix FreeIPA build
  - Ticket 49257 - Reject dbcachesize updates while auto cache sizing is enabled
  - Ticket 49249 - cos_cache is erroneously logging schema checking failure
  - Ticket 49258 - Allow nsslapd-cache-autosize to be modified while the server is running
  - Ticket 49247 - resolve build issues on debian
  - Ticket 49246 - ns-slapd crashes in role cache creation
  - Ticket 49157 - ds-logpipe.py crashes for non-existing users
  - Ticket 49241 - Update man page and usage for db2bak.pl
  - Ticket 49075 - Adjust logging severity levels
  - Ticket 47662 - db2index not properly evaluating arguments
  - Ticket 48989 - fix perf counters


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.5-1
changelog:
  - Bump version to 1.3.6.5-1
  - Ticket 49231 - fix sasl mech handling
  - Ticket 49233 - Fix crash in persistent search
  - Ticket 49230 - slapi_register_plugin creates config entry where it should not
  - Ticket 49135 - PBKDF2 should determine rounds at startup
  - Issue 49236 - Fix CI Tests
  - Ticket 48310 - entry distribution should be case insensitive
  - Ticket 49224 - without --prefix, $prefixdir would be NONE in defaults.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.4-1
changelog:
  - Bump version to 1.3.6.4-1
  - Ticket 49228 - Fix SSE4.2 detection.
  - Ticket 49229 - Correct issues in latest commits
  - Ticket 49226 - Memory leak in ldap-agent-bin
  - Ticket 49214 - Implement htree concept
  - Ticket 49119 - Cleanup configure.ac options and defines
  - Ticket 49097 - whitespace fixes for pblock change
  - Ticket 49097 - Pblock get/set cleanup
  - Ticket 49222 - Resolve various test issues on rawhide
  - Issue 48978 - Fix the emergency logging functions severity levels
  - Issue 49227 - ldapsearch for nsslapd-errorlog-level returns  incorrect values
  - Ticket 49041 - nss won't start if sql db type set
  - Ticket 49223 - Fix sds queue locking
  - Issue 49204 - Fix 32bit arch build failures
  - Issue 49204 - Need to update function declaration
  - Ticket 49204 - Fix lower bounds on import autosize + On small VM, autotune breaks the access of the suffixes
  - Issue 49221 - During an upgrade the provided localhost name is ignored
  - Issue 49220 - Remote crash via crafted LDAP messages (SECURITY FIX)
  - Ticket 49184 - Overflow in memberof
  - Ticket 48050 - Add account policy tests to plugins test suite
  - Ticket 49207 - Supply docker POC build for DS.
  - Issue 47662 - CLI args get removed
  - Issue 49210 - Fix regression when checking is password min  age should be checked
  - Ticket 48864 - Add cgroup memory limit detection to 389-ds
  - Issue 48085 - Expand the repl acceptance test suite
  - Ticket 49209 - Hang due to omitted replica lock release
  - Ticket 48864 - Cleanup memory detection before we add cgroup support
  - Ticket 48864 - Cleanup up broken format macros and imports
  - Ticket 49153 - Remove vacuum lock on transaction cleanup
  - Ticket 49200 - provide minimal dse.ldif for python installer
  - Issue 49205 - Fix logconv.pl man page
  - Issue 49177 - Fix pkg-config file
  - Issue 49035 - dbmon.sh shows pages-in-use that exceeds the cache size
  - Ticket 48432 - Linux capabilities on ns-slapd
  - Ticket 49196 - Autotune generates crit messages
  - Ticket 49194 - Lower default ioblock timeout
  - Ticket 49193 - gcc7 warning fixes
  - Issue 49039 - password min age should be ignored if password needs to be reset
  - Ticket 48989 - Re-implement lock counter
  - Issue 49192 - Deleting suffix can hang server
  - Issue 49156 - Modify token :assert: to :expectedresults:
  - Ticket 48989 - missing return in counter
  - Ticket 48989 - Improve counter overflow fix
  - Ticket 49190 - Upgrade lfds to 7.1.1
  - Ticket 49187 - Fix attribute definition
  - Ticket 49185 - Fix memleak in compute init


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.3-3
changelog:
  - Bump version to 1.3.6.3-3
  - Ticket 49186 - Fix NS to improve shutdown relability
  - Ticket 49174 - nunc-stans can not use negative timeout
  - Ticket 49076 - To debug DB_DEADLOCK condition, allow to reset DB_TXN_NOWAIT flag on txn_begin
  - Issue 49188 - retrocl can crash server at shutdown
  - Ticket 47840 - Add setup_ds test suite


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.3-1
changelog:
  - Bump verson to 1.3.6.3
  - Issue 48989 - Overflow in counters and monitor
  - Issue 49095 - targetattr wildcard evaluation is incorrectly case sensitive
  - Ticket 49177 - rpm would not create valid pkgconfig files
  - Issue 49176 - Remove tcmalloc restriction from s390x
  - Issue 49157 - ds-logpipe.py crashes for non-existing users
  - Issue 49065 - dbmon.sh fails if you have nsslapd-require-secure-binds enabled
  - Issue 49095 - Fix double-free in _cl5NewDBFile() error path


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.2-2
changelog:
  - Bump verson to 1.3.6.2-2
  - Issue 49169 - Fix covscan errors(regression)
  - Ticket 49172 - Fix test schema files
  - Ticket 49171 - Nunc Stans incorrectly reports a timeout
  - Ticket 49171 - Nunc Stans incorrectly reports a timeout
  - Issue 49169 - Fix covscan errors


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.2-1
changelog:
  - Bump version to 1.3.6.2-1
  - Ticket 49164 - Change NS to acq-rel semantics for atomics
  - Ticket 49154 - Nunc Stans stress should assert it has 95% success rate
  - Ticket 49165 - pw_verify did not handle external auth
  - Issue 49062 - Reset agmt update staus and total init
  - Ticket 49151 - Remove defunct selinux policy


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-2
changelog:
  - Bump version to 1.3.6.1-2
  - Issue 49162 - Only check event.m4 if nunc-stans is enabled
  - Issue 49156 - Add more IDs and fix docstrings
  - Issue 49156 - Fix typo in the import
  - Ticket 49160 - Fix sds benchmark and copyright
  - Issue 47536 - Fix CI testcase
  - Issue 49159 - test_schema_comparewithfiles fails with python-ldap>=2.4.26
  - Issue 49156 - Clean up test suites dir structure and docstrings
  - Issue 49158 - fix latest coverity issues
  - Ticket 49155 - Fix db2ldif path in test
  - Issue 49122 - Fix rpm build
  - Issue 49044 - Fix script usage and man pages
  - Ticket 48707 - Update rfc to accomodate that authid is mandatory
  - Ticket 49141 - Enable tcmalloc
  - Ticket 49142 - bytes vs unicode in plugin tests
  - Ticket 49139 - Update makefile and rpm for import
  - Ticket 49139 - Import libsds and nunc-stans for bundling
  - Issue 49122 - Filtered nsrole that uses nsrole crashes the  server
  - Issue 49147 - Fix tests compatibility with older versions
  - Issue 49141 - Fix spec file for tcmalloc
  - Issue 49141 - Use tcmalloc by default
  - Ticket 49086 - SDN premangaling broken after SASL change
  - Ticket 49137 - Add sasl plain test - ds
  - Ticket 49138 - Increase systemd timout
  - Issue 48226 - Fix CI test
  - Ticket 49140 - Remove legacy inst reference in test
  - Ticket 49134  Remove hardcoded elements from db lock test
  - Fix compiler warning
  - Ticket 47925 - Move add and delete operation aci checks to be before plugins.
  - Ticket 49086 - public api compatability test for SDN changes.
  - Ticket 49116 - Pblock usage analytics
  - Ticket 49020 - Add CI test
  - Revise README for pagure
  - Ticket #49121 - ns-slapd crashes in ldif_sput due to the output buf size is less than the real size.
  - Ticket 48085 - Add replica acceptance test suite
  - Ticket 49008 - Fix regression in check if ruv element exists
  - Ticket 49108 - ds_selinux_port_query doesn't detect ports labeled with range
  - Ticket 49057 - Fix tests failures on older versions of DS
  - Ticket 49111 - Integrate cmocka skeleton to Directory Server
  - Ticket 49016 - (un)register/migration/remove may fail if there is no suffix on 'userRoot' backend
  - Ticket 48085 - Add single master replication test suite
  - Ticket #49104 - Add CI test
  - Ticket #49104 - dbscan-bin crashing due to a segmentation fault
  - Ticket 49105 - Sig FPE when ns-slapd has 0 backends.
  - Ticket 49075 - Adjust log severity levels
  - Ticket 49008 - Add CI test
  - Ticket 49008 v2: aborted operation can leave RUV in incorrect state
  - Ticket 47973 - CI Test case (test_ticket47973_case)
  - Ticket 47973 - CI Test case (test_ticket47973_case)
  - Ticket 47973 - custom schema is registered in small caps after schema reload
  - Ticket 49089 - List library build deps
  - Ticket 49085 - Make a short topology fixture alias
  - Ticket #49088 - 389-ds-base rpm postinstall script bugs
  - Ticket 49028 - Autosize database cache by default.
  - Ticket 49089 - Fix invalid cxxlink statement from hpux
  - Ticket 49087 - ds resolve jenkins issues.
  - Ticket #49082 - Adjusted the CI test case to the fix.
  - Ticket #49082 - Fix password expiration related shadow attributes
  - Ticket #49080 - shadowExpire should not be a calculated value
  - Ticket 49027 - on secfailure do not store cleartext password content
  - Ticket 49031 - Improve memberof with a cache of ancestors for groups
  - Ticket 49079: deadlock on cos cache rebuild
  - Ticket 48665 - Fix RHEL6 test compatibility issues
  - Ticket 49055 - Fix create_test.py issues
  - Ticket 48797 - Add freebsd support to ns-slapd: main
  - Ticket 49055 - Refactor create_test.py
  - Ticket 49060 - Increase number of masters, hubs and consumers in topology
  - Ticket 49055 - Clean up test tickets and suites
  - Ticket 48964 - should not free repl name after purging changelog
  - Ticket 48050 - Refactor acctpolicy_plugin suite
  - Ticket 48964 - cleanallruv changelog purging removes wrong  rid
  - Ticket 49073: nsDS5ReplicatedAttributeListTotal fails when excluding no attribute
  - Ticket 49074 - incompatible nsEncryptionConfig object definition prevents RHEL 7->6 schema replication
  - Ticket 48835 - package tests into python site packages - fix rpm
  - Ticket 49066 - Memory leaks in server - part 2
  - Ticket 49072 - validate memberof fixup task args
  - Ticket 49071 - Import with duplicate DNs throws unexpected errors
  - Ticket 47858 - Add test case for nsTombstone
  - Ticket 48835 - Tests with setup.py.in
  - Ticket 49066 - Memory leaks in server
  - Ticket 47982 - Add CI test suite ds_logs
  - Ticket 49052 - Environment quoting on fedora causes ds to fail to start.
  - Ticket 47662 - Better input argument validation and error messages for cli tools
  - Ticket 48681 - logconv.pl lists sasl binds with no dn as anonymous
  - Ticket 48861: memberof plugin tests suite
  - Ticket 48861: Memberof plugins can update several times the same entry to set the same values
  - Ticket 48163 - Re-space schema.c
  - Ticket 48163 - Read schema from multiple locations
  - Ticket 48894 - improve entrywsi delete
  - Ticket 49051 - Enable SASL LOGIN/PLAIN support as a precursor to LDAPSSOTOKEN
  - Ticket 49020 - do not treat missing csn as fatal
  - Ticket 48133 v2 Non tombstone entry which dn starting with "nsuniqueid=...," cannot be delete
  - Ticket 49055 - Clean up test suites
  - Ticket 48797 - Add freebsd support to ns-slapd: Configure and makefile.
  - Ticket 48797 - Add freebsd support to ns-slapd: Add freebsd support for ldaputil
  - Ticket 48797 - Add freebsd support to ns-slapd: Add support for dsktune
  - Ticket 48797 - Add freebsd support to ns-slapd: Add support for cpp in Fbsd
  - Ticket 48797 - Add freebsd support to ns-slapd: Header files
  - Ticket 48978 - Fix implicit function declaration
  - Ticket 49002 - Remove memset on allocation
  - Ticket 49021 - Automatic thread tuning
  - Ticket 48894 - Issues with delete of entrywsi with large entries.
  - Ticket 49054 - Fix sasl_map unused paramater compiler warnings.
  - Ticket 48050 - Add test suite to acctpolicy_plugin
  - Ticket 49048 - Fix rpm build failure
  - Ticket 49042 - Test failure that expects old default
  - Ticket 49042 - Increase cache defaults slightly
  - Ticket 48894 - Issue with high number of entry state objects.
  - Ticket 48978 - Fix more log refactoring issues
  - Ticket 48707 - Draft Ldap SSO Token proposal
  - Ticket 49024 - Fix the rest of the CI failures
  - Ticket #48987 - Heap use after free in dblayer_close_indexes
  - Ticket 48945 - Improve db2ldif error message.
  - Ticket 49024 - Fix inst_dir parameter in defaults.inf
  - Ticket 49024 - Fix dbdir paths and adjust test cases
  - Ticket 48961 - Allow reset of configuration values to defaults.
  - Ticket #47911 - Move dirsrv-snmp.service to 389-ds-base-snmp package
  - Ticket bz1358565 - Fix compiler warning about unused variable
  - Ticket bz1358565 -  clear and unsalted password types are vulnerable to timing attack
  - Ticket 49016 - (un)register/migration/remove may fail if there is no suffix on 'userRoot' backend
  - Ticket 397 - Add PBKDF2 to Directory Server password storage.
  - Ticket 49024 - Fix CI test failures and defaults.inf
  - Ticket 49026 - Support nunc-stans pkgconfig
  - Ticket 49025 - Upgrade nunc-stans to 0.2.1
  - Ticket 48978 - error log refactoring error


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.6.1-0
changelog:
  - Bump version to 1.3.6.1-1
  - Ticket 142   - Refactor and move CI test
  - Ticket 47703 - remove search limit for aci group evaluation
  - Ticket 47978 - Refactor slapi_log_error
  - Ticket 48272 - ADDN Sytle prebind plugin
  - Ticket 48272 - Fix compiler warnings for addn
  - Ticket 48278 - cleanAllRUV should remove keep-alive entry
  - Ticket 48328 - Add missing dependency
  - Ticket 48414 - cleanAllRUV should clean the agreement RUV
  - Ticket 48538 - Failed to delete old semaphore
  - Ticket 48805 - Misleading indent and Uninitialised struct member
  - Ticket 48805 - Sign comparison checks.
  - Ticket 48832 - Fix CI test suite for password min age
  - Ticket 48896 - CI test: test case for ticket 48896
  - Ticket 48896 - Default Setting for passwordMinTokenLength does not work
  - Ticket 48906 - Allow nsslapd-db-locks to be configurable online
  - Ticket 48909 - Replication stops working in FIPS mode
  - Ticket 48921 - CI Replication stress tests have limits set too low
  - Ticket 48944 - on a read only replica invalid state info can accumulate
  - Ticket 48947 - Update default password hash to SSHA512
  - Ticket 48957 - Update repl-monitor to handle new status messages
  - Ticket 48969 - nsslapd-auditfaillog always has an explicit path
  - Ticket 48978 - Build fails on i686
  - Ticket 48978 - Convert slapi_log_error() to a variadic macro
  - Ticket 48978 - Fine tune error logging
  - Ticket 48978 - Fix CI test to account for new logging format
  - Ticket 48978 - Fix logging format errors and replace LDAP_DEBUG
  - Ticket 48978 - refactor LDADebug() to slapi_log_err()
  - Ticket 48978 - refactor LDAPDebug()
  - Ticket 48978 - Update error logging with new codes
  - Ticket 48978 - Update the logging function to accept sev level
  - Ticket 48979 - Allow to compile 389ds with warning Wstrict-prototypes
  - Ticket 48979 - Strict Prototypes
  - Ticket 48982 - Comment about resolving failure to open plugin.
  - Ticket 48982 - Enabling a plugin that has a versioned so causes overflow
  - Ticket 48982 - One line fix, remove unused variable.
  - Ticket 48982 - When plugin doesn't enable, actually log the path it used
  - Ticket 48983 - Configure and Makefile.in from new default paths work.
  - Ticket 48983 -  generate install path info from autotools scripts
  - Ticket 48984 - Add lib389 paths module
  - Ticket 48986 - 47808 triggers overflow in uiduniq.c
  - Ticket 48992 - Total init may fail if the pushed schema is rejected
  - Ticket 48996 - Fix rpm to work with ns 0.2.0
  - Ticket 48996 - remove unused variable.
  - Ticket 48996 - update DS for ns 0.2.0
  - Ticket 49005 - Update lib389 to work in containers correctly.
  - Ticket 49006 - Enable nunc-stans by default.
  - Ticket 49006 - Nunc stans use DS stack size
  - Ticket 49007 - Update configure scripts
  - Ticket 49007 - Update DS basic test to better work with systemd.
  - Ticket 49009 - args debug logging must be more restrictive
  - Ticket 49011 - Remove configure artifacts
  - Ticket 49012 - Removed un-used counters
  - Ticket 49013 - Correct signal handling with NS in DS
  - Ticket 49014 - ns-accountstatus.pl shows wrong status for accounts inactivated by Account policy plugin
  - Ticket 49017 - Various minor test failures
  - use a consumer maxcsn only as anchor if supplier is more advanced


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.5.14-2
changelog:
  - Bump version to 1.3.5.14-2
  - Ticket 49011 - Remove configure artifacts
  - Ticket 49006 - Enable nunc-stans 0.2.0 by default


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.5.14-1
changelog:
  - Bump version to 1.3.5.14-1
  - Ticket 48992 - Total init may fail if the pushed schema is rejected
  - Ticket 48832 - Fix CI test suite for password min age
  - Ticket 48983 - Configure and Makefile.in from new default paths work.
  - Ticket 48983 - Configure and Makefile.in from new default paths work.
  - Ticket 48983 - generate install path info from autotools scripts
  - Ticket 48944 - on a read only replica invalid state info can accumulate
  - Ticket 48766 - use a consumer maxcsn only as anchor if supplier is more advanced
  - Ticket 48921 - CI Replication stress tests have limits set too low
  - Ticket 48969 - nsslapd-auditfaillog always has an explicit path
  - Ticket 48957 - Update repl-monitor to handle new status messages
  - Ticket 48832 - Fix CI tests
  - Ticket 48975 - Disabling CLEAR password storage scheme will  crash server when setting a password
  - Ticket 48369 - Add CI test suite
  - Ticket 48970 - Serverside sorting crashes the server
  - Ticket 48972 - remove old pwp code that adds/removes ACIs
  - Ticket 48957 - set proper update status to replication  agreement in case of failure
  - Ticket 48950 - Add systemd warning to the LD_PRELOAD example in /etc/sysconfig/dirsrv
  - provide backend dir in suffix template
  - Ticket 48953 - Skip labelling and unlabelling ports during the test
  - Ticket 48967 - Add CI test and refactor test suite
  - Ticket 48967 - passwordMinAge attribute doesn't limit the minimum age of the password
  - Fix jenkins warnings about unused vars
  - Ticket 48402 - v3 allow plugins to detect a restore or import
  - Ticket #48969 - nsslapd-auditfaillog always has an explicit path
  - Ticket 48964 - cleanAllRUV changelog purging incorrectly  processes all backends
  - Ticket 48965 - Fix building rpms using rpm.mk
  - Ticket 48965 - Fix generation of the pre-release version
  - Bugzilla 1368956 - man page of ns-accountstatus.pl shows redundant entries for -p port option
  - Ticket 48960 - Crash in import_wait_for_space_in_fifo().
  - Ticket 48832 - Fix more CI test failures
  - Ticket 48958 - Audit fail log doesn't work if audit log disabled.
  - Ticket 48956 - ns-accountstatus.pl showing "activated" user even if it is inactivated
  - Ticket 48954 - replication fails because anchorcsn cannot be found
  - Ticket 48832 - Fix CI tests failures from jenkins server
  - Ticket 48950 - Change example in /etc/sysconfig/dirsrv to use tcmalloc


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.12-1
changelog:
  - Release 1.3.5.12-1
  - Ticket 48450 - Add prestart work around for systemd ask password
  - Ticket 48943 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password
  - Ticket 47976 - Add fixed CI test case
  - Ticket 48882 - server can hang in connection list processing
  - Ticket 48921 - Adding replication and reliability tests
  - Ticket 48936 - Duplicate collation entries
  - Ticket 48832 - Fix timing and localhost issues
  - Ticket 48832 - Fix pytest compatibility in CI tests
  - Ticket 48832 - CI Tests - make tests more portable
  - Ticket 48943 - Add CI Test for the password test suite
  - Ticket 48940 - DS logs have warning:ancestorid not indexed
  - Ticket 48934 - remove-ds.pl deletes an instance even if wrong prefix was specified
  - Ticket 48336 - Missing semanage dependency
  - Bug 1347760 - Additional CI test case
  - Resolves: Bug 1347760 - CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation, etc.
  - Ticket 48832 - CI tests - convert all the tests to use  py.test
  - Ticket 48939 - nsslapd-workingdir is empty when ns-slapd is started by systemd
  - Ticket 48935 - Update dirsrv.systemd file
  - Ticket 48832 - Fix lib389 CI ticket/suite test failures
  - Ticket 47824 - Remove CI test from tickets and add logging
  - Ticket 48930 - Paged result search can hang the server
  - Ticket 48191 - Move CI test to the pr suite and refactor
  - Ticket 48928 - log of page result cookie should log empty cookie with a different value than 0
  - Ticket 48752 - Add CI test
  - Ticket 47664 - Move CI test to the pr suite and refactor


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.11-1
changelog:
  - Release 1.3.5.11-1
  - Ticket 48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance.
  - Ticket 48743 - If a cipher is disabled do not attempt to look it up
  - Ticket 48755 - moving an entry could make the online init fail
  - Ticket 48767 - flow control in replication also blocks receiving results
  - Ticket 48912 - ntUserNtPassword schema
  - Ticket 48914 - db2bak.pl task enters infinitive loop when bak fs is almost full
  - Ticket 48916 - DNA Threshold set to 0 causes SIGFPE
  - Ticket 48918 - Upgrade to 389-ds-base >= 1.3.5.5 doesn't install 389-ds-base-snmp
  - Ticket 48919 - Compiler warnings while building 389-ds-base on RHEL7
  - Ticket 48920 - Memory leak in pwdhash-bin
  - Ticket 48922 - Fix crash when deleting backend while import is running
  - Ticket 48924 - Fixup tombstone task needs to set proper flag when updating tombstones
  - Ticket 48925 - slapd crash with SIGILL: Dsktune should detect lack of CMPXCHG16B
  - Bug 1347761  - CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation, etc.
  - Bug 1353956  - Upgrade from FreeIPA Fedora 23 container to Fedora 24 fails with syntax error at
                   /usr/share/dirsrv/updates/91reindex.pl line 17, near ")
                   Regression introduced by Ticket 48755 to 1.3.5.10-1.
  - Bug 1350393  - setup-ds.pl fails on F24 if perl-Errno is not updated (DS 48901)
  - Bug 1114928  - etup-ds.pl creates configuration files under /usr (DS 528, 47840)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-1
changelog:
  -Release 1.3.5.10-1
  - Ticket 47538 - Fix repl-monitor color and lag times
  - Ticket 47538 - repl-monitor.pl legend not properly sorted
  - Ticket 47538 - repl-monitor.pl not displaying correct color code for lag time
  - Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
  - Ticket 48346 - ldaputil code cleanup
  - Ticket 48346 - log too verbose when re-acquiring expired  ticket
  - Ticket 48354 - Review of default ACI in the directory server
  - Ticket 48366 - proxyauth does not work bound as directory manager
  - Ticket 48449 - Import readNSState.py from RichM's repo
  - Ticket 48636 - Fix config validation check
  - Ticket 48637 - DN cache is not always updated when ADD  operation fails
  - Ticket 48745 - Matching Rule caseExactIA5Match indexes incorrectly values with upper cases
  - Ticket 48755 - CI test: test case for ticket 48755
  - Ticket 48755 - moving an entry could make the online init fail
  - Ticket 48889 - ldclt - fix man page and usage info
  - Ticket 48891 - ns-slapd crashes during the shutdown after adding attribute with a matching rule
  - Ticket 48892 - Wrong result code display in audit-failure log
  - Ticket 48893 - cn=config should not have readable components to anonymous
  - Ticket 48895 - tests package should be noarch
  - Ticket 48898 - Crash during shutdown if nunc-stans is enabled
  - Ticket 48899 - Values of dbcachetries/dbcachehits in cn=monitor could overflow.
  - Ticket 48900 - Add connection perf stats to logconv.pl
  - Ticket 48902 - Strdup pwdstoragescheme name to prevent misbehaving plugins
  - Ticket 48904 - syncrepl search returning error 329; plugin sending a bad error code
  - Ticket 48905 - coverity defects


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.6-1
changelog:
  - Release 1.3.5.6-1
  - Ticket 48234 - CI test: test case for ticket 48234
  - Ticket 48234 - "matching rules" in ACI's "bind rules not fully evaluated
  - Ticket 48636 - Improve replication convergence
  - Revert "Ticket 48755 - moving an entry could make the online init fail"
  - Ticket 48766 - Replication changelog can incorrectly skip over updates
  - Ticket 47982 - Fix log hr timestamps when invalid value is set in cn=config


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.5-1
changelog:
  - Release 1.3.5.5-1
  - Ticket 48848 - modrdn deleteoldrdn can fail to find old attribute value, perhaps due to case folding
  - Ticket 48832 - CI test - fix ticket failures
  - Ticket 48833 - 389 showing inconsistent values for shadowMax and shadowWarning in 1.3.5.1
  - Ticket 48873 - Backend should accept the reduced cache allocation when issane == 1
  - Ticket 48815 - ns-accountstatus.pl - fix DN normalization
  - Ticket 48880 - adding pre/post extop ability
  - Ticket 48449 - Import readNSState from richm's repo
  - Ticket 48877 - Fixes for RPM spec with spectool
  - Ticket 48404 - libslapd owned by libs and devel
  - Ticket 48326 - Move CI test to config test suite and refactor
  - Ticket 48755 - CI test: test case for ticket 48755
  - Ticket 48755 - moving an entry could make the online init fail
  - Ticket 48870 - Correct plugin execution order due to changes in exop
  - Ticket 48799 - Test cases for objectClass values being dropped.
  - Ticket 48863 - remove check for vmsize from util_info_sys_pages
  - Ticket 48872 - Fix segfault and use after free in plugin shutdown
  - Ticket 48862 - At startup DES to AES password conversion causes timeout in start script
  - Ticket 48275 - search returns no entry when OR filter component contains non readable attribute
  - Ticket 47911 - split out snmp agent into a subpackageTicket 47911
  - Ticket 48336 - setup-ds should detect if port is already defined
  - Ticket 48858 - Segfault changing nsslapd-rootpw
  - Ticket 48855 - Add basic pwdPolicy tests
  - Ticket 48747 - dirsrv service fails to start when nsslapd-listenhost is configured
  - Ticket 48752 - Page result search should return empty cookie if there is no returned entry
  - Ticket 48854 - Running db2index with no options breaks replication
  - Ticket 48850 - Correct memory leaks in pwdhash-bin and ns-slapd
  - Ticket 48849 - Systemd introduced incompatible changes that breaks ds build
  - Ticket 48846 - 32 bit systems set low vmsize
  - Ticket 48846 - Older kernels do not expose memavailable
  - Ticket 48846 - Rlimit checks should detect RLIM_INFINITY
  - Ticket 48617 - Coverity fixes
  - Ticket 48745 - Matching Rule caseExactIA5Match indexes incorrectly values with upper cases
  - Ticket 48844 - Regression introduced in matching rules by DS 48746
  - Ticket 48363 - CI test - add test suite
  - Ticket 48795 - Make various improvements to create_test.py
  - Ticket 48834 - Fix jenkins: discared qualifier on auditlog.c
  - Ticket 48834 - Modifier's name is not recorded in the audit log with modrdn and moddn operations
  - Ticket 48754 - ldclt should support -H


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.4-1
changelog:
  - Release 1.3.5.4-1
  - Ticket 48836 - replication session fails because of permission denied
  - Ticket 47819 - RFE - improve tombstone purging performance
  - Ticket 48837 - Replication: total init aborted
  - Ticket 48617 - Server ram checks work in isolation
  - Ticket 48220 - The "repl-monitor" web page does not display "year" in date.
  - Ticket 48829 - Add gssapi sasl replication bind test
  - Ticket 48497 - uncomment pytest from CI test
  - Ticket 48828 - db2ldif is not taking into account multiple suffixes or backends
  - Ticket 48818 - Fix case where return code is always -1
  - Ticket 48826 - 52updateAESplugin.pl may fail on older versions of perl
  - Ticket 48825 - Configure make generate invalid makefile


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.3-1
changelog:
  - Release 1.3.5.3-1
  - Ticket 47536 - Allow usage of OpenLDAP libraries that don't use NSS for crypto
  - Ticket 47536 - CI test: added test cases for ticket 47536
  - Ticket 47840 - default instance scripts if undefined.
  - Ticket 47888 - Add CI test
  - Ticket 47888 - DES to AES password conversion fails if a backend is empty
  - Ticket 47951 - Fix startpid from altering dev/null
  - Ticket 47968 - Disable journald logs by default
  - Ticket 47982 - HR Log timers, regression fix for subsystem logging
  - Ticket 48078 - CI test - paged_results - TET part
  - Ticket 48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance.
  - Ticket 48269 - ns-accountstatus status message improvement
  - Ticket 48342 - DNA: deadlock during DNA_EXTEND_EXOP_REQUEST_OID
  - Ticket 48342 - DNA Deadlock test cases
  - Ticket 48342 - Prevent transaction abort if a transaction has not begun
  - Ticket 48350 - Integrate ASAN into our rpm build process
  - Ticket 48374 - entry cache locks not released in error conditions
  - Ticket 48410 - 389-ds-base - Unable to remove / unregister a DS instance from admin server
  - Ticket 48447 - with-initddir should accept no
  - Ticket 48450 - Systemd password agent support
  - Ticket 48492 - heap corruption at schema replication.
  - Ticket 48597 - Deadlock when rebuilding the group of authorized replication managers
  - Ticket 48662 - db2index with no attribute args fail.
  - Ticket 48710 - auto-dn-suffix unrecognized option
  - Ticket 48769 - Fix white space in extendedop.c
  - Ticket 48769 - RFE: Be_txn extended operation plugin type
  - Ticket 48770 - Improve extended op plugin handling
  - Ticket 48775 - If nsSSL3 is on, even if SSL v3 is not really enabled, a confusing message is logged.
  - Ticket 48779 - Remove startpidfile check in start-dirsrv
  - Ticket 48781 - Vague error message: setup_ol_tls_conn - failed: unable to create new TLS context
  - Ticket 48782 - Make sure that when LDAP_OPT_X_TLS_NEWCTX is set, the value is set to zero.
  - Ticket 48783 - Fix ns-accountstatus.pl syntax error
  - Ticket 48784 - CI test: added test cases for ticket 48784
  - Ticket 48784 - Make the SSL version set to the client library configurable.
  - Ticket 48798 - Enable DS to offer weaker DH params in NSS
  - Ticket 48799 - objectclass values could be dropped on the consumer
  - Ticket 48800 - Cleaning up error buffers
  - Ticket 48801 - ASAN errors during tests
  - Ticket 48802 - Compilation warnings from clang
  - Ticket 48808 - Add test case
  - Ticket 48808 - Paged results search returns the blank list of entries
  - Ticket 48813 - password history is not updated when an admin resets the password
  - Ticket 48815 - ns-accountstatus.sh does handle DN's with single quotes
  - Ticket 48818 - In docker, no one can hear your process hang.
  - Ticket 48822 - (389-ds-base-1.3.5) Fixing coverity issues.
  - Ticket 48824 - Cleanup rpm.mk and 389 specfile


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.1-3
changelog:
  - Release 1.3.5.1-3
  - Fixed the %if expression for use_nunc_stans.
  - Removed %if % {use_nunc_stans} from Source3 as well as from nunc_stans_ver.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.1-1
changelog:
  - Release 1.3.5.1-1
  - Ticket 47982 - improve timestamp resolution in logs
  - Ticket 48759 - no plugin calls in tombstone purging
  - Ticket 48665 - Prevent sefault in ldbm_instance_modify_config_entry
  - Ticket 48757 - License tag does not match actual license of code
  - Ticket 48746 - Crash when indexing an attribute with a matching rule
  - Ticket 48497 - extended search without MR indexed attribute prevents later indexing with that MR
  - Ticket 48368 - Resolve the py.test conflicts with the create_test.py issue
  - Ticket 48748 - Fix memory_leaks test suite teardown failure
  - Ticket 48383 - import tasks with dynamic buffer sizes
  - Ticket 48420 - change severity of some messages related to "keep alive" entries
  - Ticket 48386 - Clean up dsktune code
  - Ticket 48537 - undefined reference to `abstraction_increment'
  - Ticket 48747 - dirsrv service fails to start when nsslapd-listenhost is configured


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.0-1
changelog:
  - Release 1.3.5.0
  - nunc-stans - bump version to 0.1.8
  - Ticket 132   - Makefile.am must include header files and template scripts
  - Ticket 142   - [RFE] Default password syntax settings don't work with fine-grained policies
  - Ticket 548   - RFE: Allow AD password sync to update shadowLastChange
  - Ticket 47788 - Only check postop result if its a replication operation
  - Ticket 47840 - add configure option to disable instance specific scripts
  - Ticket 47968 - [RFE] Send logs to journald
  - Ticket 47977 - [RFE] Implement sd_notify mechanism
  - Ticket 48016 - search, matching rules and filter error "unsupported type 0xA9"
  - Ticket 48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance.
  - Ticket 48145 - RFE Add log file for rejected changes
  - Ticket 48147 - Unable to enable DS service for auto start
  - Ticket 48151 - Improve CleanAllRUV task logging
  - Ticket 48218 - cleanAllRUV - modify the existing "force" option to bypass the "replica online" checks
  - Ticket 48244 - No validation check for the value for nsslapd-db-locks.
  - Ticket 48257 - Fix coverity issues - 08/24/2015
  - Ticket 48263 - allow plugins to detect tombstone operations
  - Ticket 48269 - RFE: need an easy way to detect locked accounts locked by inactivity.
  - Ticket 48270 - fail to index an attribute with a specific matching rule/48269
  - Ticket 48280 - enable logging of internal ops in the audit log
  - Ticket 48285 - The dirsrv user/group should be created in rpm %pre, and ideally with fixed uid/gid
  - Ticket 48289 - 389-ds-base: ldclt-bin killed by SIGSEGV
  - Ticket 48290 - No man page entry for - option '-u' of dbgen.pl for adding group entries with uniquemembers
  - Ticket 48294 - Linked Attributes plug-in - won't update links after MODRDN operation
  - Ticket 48295 - Entry cache is not rolled back -- Linked Attributes plug-in - wrong behaviour when adding valid and broken links
  - Ticket 48311 - nunc-stans: Attempt to release connection that is not acquired
  - Ticket 48317 - SELinux port labeling retry attempts are excessive
  - Ticket 48326 - [RFE] it could be nice to have nsslapd-maxbersize default to bigger than 2Mb
  - Ticket 48350 - configure.ac add options for debbuging and security analysis / hardening.
  - Ticket 48351 - Fix buffer overflow error when reading url with len 0
  - Ticket 48363 - Support for rfc3673 '+' to return operational attributes
  - Ticket 48369 - [RFE] response control for password age should be sent by default by RHDS
  - Ticket 48384 - Server startup should warn about values consuming too much ram
  - Ticket 48387 - ASAN invalid read in cos_cache.c
  - Ticket 48394 - lower password history minimum to 1
  - Ticket 48395 - ASAN - Use after free in uiduniq 7bit.c
  - Ticket 48398 - Coverity defect 13352 - Resource leak in auditlog.c
  - Ticket 48400 - ldclt - segmentation fault error while binding
  - Ticket 48445 - keep alive entries can break replication
  - Ticket 48446 - logconv.pl displays negative operation speeds
  - Ticket 48566 - acl.c attrFilterArray maybe uninitialised.
  - Ticket 48662 - db2index with no attribute args fail.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.8-1
changelog:
  - Release 1.3.4.8
  - Ticket 48445 - keep alive entries can break replication
  - Ticket 47788 - Only check postop result if its a replication operation
  - Ticket 48536 - Crash in slapi_get_object_extension
  - Ticket 48492 - heap corruption at schema replication.
  - Ticket 48448 - dirsrv start-stop fail in certain shell environments.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.7-1
changelog:
  - Release 1.3.4.7
  - Bug 1299417 - worker threads do not detect abnormally closed connections (DS 48412)
  - Ticket 47788 - Supplier can skip a failing update, although  it should retry
  - Ticket 48341 - deadlock on connection mutex
  - Ticket 48406 - Avoid self deadlock by PR_Lock(conn->c_mutex)
  - Revert "Ticket #48338 - SimplePagedResults -- abandon could happen between the abandon check and sending results"


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.6-1
changelog:
  - Release 1.3.4.6
  - Ticket 48388 - db2ldif -r segfaults from time to time
  - Ticket 48312 - Crash when doing modrdn on managed entry
  - Ticket 48332 - allow users to specify to relax the FQDN constraint
  - Ticket 48375 - SimplePagedResults -- in the search error case, simple paged results slot was not released.
  - Ticket 48362 - With exhausted range, part of DNA shared configuration is deleted after server restart
  - Ticket 48289 - 389-ds-base: ldclt-bin killed by SIGSEGV
  - Ticket 48305 - perl module conditional test is not conditional when checking SELinux policies
  - Ticket 48370 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same modify operation
  - Ticket 48369 - RFE - Add config setting to always send the  password expiring time


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.5-1
changelog:
  - Release 1.3.4.5
  - Ticket 48316 - Perl-5.20.3-328: Use of literal control characters in variable names is deprecated
  - Ticket 48348 - Running /usr/sbin/setup-ds.pl fails with Can't locate bigint.pm, plus two warnings
  - Ticket 48339 - Share nsslapd-threadnumber in the case nunc-stans is enabled, as well.
  - Ticket 48311 - nunc-stans: Attempt to release connection that is not acquired https://fedorahosted.org/389/ticket/48311
  - Ticket 48325 - Add lib389 test script
  - Ticket 48344 - acl - regression - trailing ', (comma)' in macro matched value is not removed.
  - Ticket 48325 - Replica promotion leaves RUV out of order
  - Ticket 48338 - SimplePagedResults -- abandon could happen between the abandon check and sending results
  - Ticket 47976 - deadlock in mep delete post op
  - Ticket 48311 - nunc-stans: Attempt to release connection that   is not acquired
  - Ticket 47978 - Deadlock between two MODs on the same entry between entry cache and backend lock
  - Ticket 48305 - perl module conditional test is not conditional when checking SELinux policies
  - Ticket 47957 - Add replication test suite for a wait async feature
  - Ticket 48227 - rpm.mk doesn't build srpms for 389-ds and nunc-stans
  - Ticket 48264 - Ticket 47553 tests refactoring
  - Ticket 48304 - ns-slapd - LOGINFO:Unable to remove file
  - Ticket 48298 - ns-slapd crash during ipa-replica-manage del
  - Ticket 48192 - Individual abandoned simple paged results request has no chance to be cleaned up
  - Ticket 48299 - pagedresults - when timed out, search results could have been already freed.
  - Ticket 48204 - update lib389 test scripts for python 3
  - Ticket 48283 - many attrlist_replace errors in connection with cleanallruv
  - Ticket 48266 - do not free repl keep alive entry on error
  - Ticket 48284 - free entry when internal add fails
  - Ticket 48266 - Online init crashes consumer
  - Ticket 48188 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in
  - Ticket 48217 - cleanallruv - fix regression with server shutdown
  - Ticket 48266 - coverity issue
  - Ticket 48266 - Fractional replication evaluates several times the same CSN
  - Ticket 48279 - Check NULL reference in nssasl_mutex_lock etc. (saslbind.c)
  - Ticket 48226 - In MMR, double free coould occur under some special condition
  - Ticket 48273 - Update lib389 tests for new valgrind functions
  - Ticket 48276 - initialize free_flags in reslimit_update_from_entry()
  - Ticket 47553 - Automated the verification procedure
  - Ticket 47761 - Added a few testcases to the basic testsuite
  - Ticket 48254 - Shell CLI fails with usage errors if an argument containing white spaces is given
  - Ticket 47511 - bashisms in 389-ds-base admin scripts
  - Ticket 48267 - Add config setting to MO plugin to add objectclass


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.4-1
changelog:
  - Release 1.3.4.4
  - Ticket 48255 - total update request can be lost
  - Ticket 48263 - allow plugins to detect tombstone operations
  - Ticket 48265 - Complex filter in a search request doen't work as expected. (regression)
  - Ticket 47981 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes
  - Ticket 48204 - Convert all python scripts to support python3
  - Ticket 48258 - dna plugin needs to handle binddn groups for authorization
  - Ticket 48252 - db2index creates index entry from deleted records
  - Ticket 48228 - wrong password check if passwordInHistory is decreased.
  - Ticket 48252 - db2index creates index entry from deleted records
  - Ticket 47757 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax
  - Ticket 48254 - Shell CLI fails with usage errors if an argument containing white spaces is given
  - Ticket 48254 - CLI db2index fails with usage errors
  - Ticket 47831 - remove debug logging from retro cl
  - Ticket 48243 - replica upgrade failed in starting dirsrv service due to upgrade scripts did not run
  - Ticket 48233 - Server crashes in ACL_LasFindFlush during  shutdown if ACIs contain IP addresss restrictions
  - Ticket 48250 - Slapd crashes reported from latest build
  - Ticket 48249 - sync_repl uuid may be invalid
  - Ticket 48245 - Man pages and help for remove-ds.pl doesn't display "-a" option
  - Ticket 47511 - bashisms in 389-ds-base admin scripts
  - Ticket 47686 - removing chaining database links trigger valgrind read errors
  - Ticket 47931 - memberOf & retrocl deadlocks
  - Ticket 48228 - wrong password check if passwordInHistory is decreased.
  - Ticket 48215 - update dbverify usage in main.c
  - Ticket 48215 - verify_db.pl doesn't verify DB specified by -a option
  - Ticket 47810 - memberOf plugin not properly rejecting updates
  - Ticket 48231 - logconv autobind handling regression caused by 47446
  - Ticket 48232 - winsync lastlogon attribute not syncing between DS and AD.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.2-1
changelog:
  - Release 1.3.4.2
  - Ticket 48010 - winsync range retrieval gets only 5000 values upon initialization
  - Ticket 48206 - Crash during retro changelog trimming
  - Ticket 48224 - redux 2 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files
  - Ticket 47910 - logconv.pl - check that the end time is greater than the start time
  - Ticket 48179 - Starting a replica agreement can lead to  deadlock
  - Ticket 48226 - CI test: added test cases for ticket 48226
  - Ticket 48226 - In MMR, double free coould occur under some special condition
  - Ticket 48224 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files
  - Ticket 48203 - Fix coverity issues - 07/14/2015
  - Ticket 48194 - CI test: fixing test cases for ticket 48194
  - Ticket 48224 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files
  - Ticket 47910 - logconv.pl - validate start and end time args
  - Ticket 48223 - Winsync fails when AD users have multiple spaces (two)inside the value of the rdn attribute
  - Ticket 47878 - Remove warning suppression in 1.3.4
  - Ticket 48119 - Silent install needs to properly exit when INF file is missing
  - Ticket 48216 - crash in ns-slapd when deleting winSyncSubtreePair from sync agreement
  - Ticket 48217 - cleanAllRUV hangs shutdown if not all of the  replicas are online
  - Ticket 48013 - Inconsistent behaviour of DS when LDAP Sync is used with an invalid cookie
  - Ticket 47799 - Any negative LDAP error code number reported as Illegal error by ldclt.
  - Ticket 48208 - CleanAllRUV should completely purge changelog
  - Ticket 48203 - Fix coverity issues - 07/07/2015
  - Ticket 48119 - setup-ds.pl does not log invalid --file path errors the same way as other errors.
  - Ticket 48192 - Individual abandoned simple paged results request has no chance to be cleaned up
  - Ticket 48214 - CI test: added test cases for ticket 48213
  - Ticket 48214 - ldapsearch on nsslapd-maxbersize returns 0 instead of current value
  - Ticket 48212 - CI test: added test cases for ticket 48212
  - Ticket 48212 - Dynamic nsMatchingRule changes had no effect on the attrinfo thus following reindexing, as well.
  - Ticket 48195 - Slow replication when deleting large quantities of multi-valued attributes


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.1-1
changelog:
  - Release 1.3.4.1
  - Resolves: Bug 1234277 - distro-wide architecture set overriden by buildsystem; Upgrade nunc-stans to 0.1.5.
  - Enable nunc-stans just for x86_64.
  - Ticket 48203 - Fix coverity issues - 06/22/2015


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-1
changelog:
  - Release 1.3.4.0 (rebase)
  - Enable nunc-stans in the build.
  - Ticket 47490 - test case failing if 47721 is also fixed
  - Ticket 47640 - Linked attributes transaction not aborted when  linked entry does not exit
  - Ticket 47669 - CI test: added test cases for ticket 47669
  - Ticket 47669 - Retro Changelog Plugin accepts invalid value in nsslapd-changelogmaxage attribute
  - Ticket 47723 - winsync sets AccountUserControl in AD to 544
  - Ticket 47787 - Make the test case more robust
  - Ticket 47833 - TEST CASE only (modrdn fails if renamed entry member of a group and is out of memberof scope)
  - Ticket 47878 - Improve setup-ds update logging
  - Ticket 47893 - should use Sys::Hostname instead Net::Domain
  - Ticket 47910 - allow logconv.pl -S/-E switches to work even when timestamps not present in access log
  - Ticket 47913 - remove-ds.pl should not remove /var/lib/dirsrv
  - Ticket 47921 - indirect cos does not reflect changes in the cos attribute
  - Ticket 47927 - Uniqueness plugin: should allow to exclude some subtrees from its scope
  - Ticket 47953 - testcase for removing invalid aci
  - Ticket 47966 - CI test: added test cases for ticket 47966
  - Ticket 47966 - slapd crashes during Dogtag clone reinstallation
  - Ticket 47972 - make parsing of nsslapd-changelogmaxage more fault tolerant
  - Ticket 47972 - make parsing of nsslapd-changelogmaxage more fool proof
  - Ticket 47998 - cleanup WINDOWS ifdef's
  - Ticket 47998 - remove remaining obsolete OS code/files
  - Ticket 47998 - remove "windows" files
  - Ticket 47999 - address several race conditions in tests
  - Ticket 47999 - lib389 individual tests not running correctly  when run as a whole
  - Ticket 48003 - build "suite" framework
  - Ticket 48008 - db2bak.pl man page should be improved.
  - Ticket 48017 - add script to generate lib389 CI test script
  - Ticket 48019 - Remove refs to constants.py and backup/restore from lib389 tests
  - Ticket 48023 - replace old replication check with lib389 function
  - Ticket 48025 - add an option '-u' to dbgen.pl for adding group entries with uniquemembers
  - Ticket 48026 - fix invalid write for friendly attribute names
  - Ticket 48026 - Fix memory leak in uniqueness plugin
  - Ticket 48026 - Support for uniqueness plugin to enforce uniqueness on a set of attributes.
  - Ticket 48032 - change C code license to GPLv3; change C code license to allow openssl
  - Ticket 48035 - nunc-stans - Revise shutdown sequence
  - Ticket 48036 - ns_set_shutdown should call ns_job_done
  - Ticket 48037 - ns_thrpool_new should take a config struct rather than many parameters
  - Ticket 48038 - logging should be pluggable
  - Ticket 48039 - nunc-stans malloc should be pluggable
  - Ticket 48040 - preserve the FD when disabling a listener
  - Ticket 48043 - use nunc-stans config initializer
  - Ticket 48103 - update DS for new nunc-stans header file
  - Ticket 48110 - Free all the nunc-stans signal jobs when shutdown is detected
  - Ticket 48111 - "make clean" wipes out original files
  - Ticket 48122 - nunc-stans FD leak
  - Ticket 48127 - Using RPM, allows non root user to create/remove DS instance
  - Ticket 48141 - aci with wildcard and macro not correctly evaluated
  - Ticket 48143 - Password is not correctly passed to perl command line tools if it contains shell special characters.
  - Ticket 48149 - ns-slapd double free or corruption crash
  - Ticket 48154 - abort cleanAllRUV tasks should not certify-all by default
  - Ticket 48169 - support NSS 3.18
  - Ticket 48170 - Parse nsIndexType correctly
  - Ticket 48175 - Avoid using regex in ACL if possible
  - Ticket 48178 - add config param to enable nunc-stans
  - Ticket 48191 - CI test: added test cases for ticket 48191
  - Ticket 48191 - RFE: Adding nsslapd-maxsimplepaged-per-conn
  - Ticket 48191 - RFE: Adding nsslapd-maxsimplepaged-per-conn Adding nsslapd-maxsimplepaged-per-conn
  - Ticket 48194 - CI test: added test cases for ticket 48194
  - Ticket 48197 - error texts from preop plugins not sent to client


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.12-1
changelog:
  - release 1.3.3.12
  - Resolves: Bug 1232896 - CVE-2015-3230 389-ds-base: nsSSL3Ciphers preference not enforced server side


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.11-1
changelog:
  - release 1.3.3.11
  - Ticket 48192 - Individual abandoned simple paged results request has no chance to be cleaned up
  - Ticket 48190 - idm/ipa 389-ds-base entry cache converges to 500 KB in dblayer_is_cachesize_sane
  - Ticket 48183 - bind on db chained to AD returns err=32
  - Ticket 48158 - cleanAllRUV task limit not being enforced correctly
  - Ticket 48158 - Remove cleanAllRUV task limit of 4
  - Ticket 48146 - async simple paged results issue; need to close a small window for a pr index competed among multiple threads.
  - Ticket 48146 - async simple paged results issue; log pr index
  - Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
  - Ticket 48177 - dynamic plugins should not return an error when modifying a critical plugin
  - Ticket 48146 - async simple paged results issue


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.10-1
changelog:
  - release 1.3.3.10
  - Resolves: Bug 1216203 - CVE-2015-1854 389ds-base: access control bypass with modrdn


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.9-1
changelog:
  - bump version to 1.3.3.9
  - Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all]
  - Ticket 47801 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown
  - Ticket 47957 - Make ReplicaWaitForAsyncResults configurable
  - Ticket 47431 - CI test: added test cases for ticket 47431
  - Ticket 47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly
  - Ticket 47936: Create a global lock to serialize write operations over several backends
  - Ticket 48021 - nsDS5ReplicaBindDNGroup checkinterval not working properly
  - Ticket 48048 - Fix coverity issues - 2015/3/1
  - Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
  - Ticket 48109 - CI test: added test cases for ticket 48109
  - Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
  - Ticket 48048 - Fix coverity issues - 2015/2/24
  - Ticket 48030 - spec file should run "systemctl stop" against each running instance instead of dirsrv.target
  - Ticket 47828: DNA scope: allow to exlude some subtrees
  - Ticket 47988: test case
  - Ticket 47901: After total init, nsds5replicaLastInitStatus can report an erroneous error status (like 'Referral')
  - Ticket 48003 - add template scripts
  - Ticket 48003 - build "suite" framework
  - Ticket 48005 - CI test: added test cases for ticket 48005
  - Ticket 48005 - ns-slapd crash in shutdown phase
  - Ticket 47742 - 64bit problem on big endian: auth method not supported
  - Ticket 47836 - Do not return '0' as empty fallback value of nsds5replicalastupdatestart and nsds5replicalastupdatestart
  - Ticket 47728 - compilation failed with ' incomplete struct/union/enum' if not set USE_POSIX_RWLOCKS
  - Ticket 48027 - revise the rootdn plugin configuration validation
  - Ticket 47451 - dynamic plugins - fix crash caused by invalid  plugin config
  - Ticket 48001 - ns-activate.pl fails to activate account if it was disabled on AD


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.8-2
changelog:
  - Fixes spec file to make sure all the server instances are stopped before upgrade
  - Ticket 48030 - DNS errors after IPA upgrade due to broken ReplSync


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.8-1
changelog:
  - bump version to 1.3.3.8
  - Ticket 48001 - ns-activate.pl fails to activate account if it was disabled on AD
  - Ticket 47963 - memberof skip nested groups breaks the plugin


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.7-1
changelog:
  - bump version to 1.3.3.7
  - Coverity 12970 - Explicit null dereference
  - Ticket 47988 - Schema learning mechanism, in replication, unable to extend an existing definition
  - Ticket 47996 - ldclt needs to support SSL Version range
  - Ticket 47738 - use PL_strcasestr instead of strcasestr
  - Ticket 47462 - Stop using DES in the reversible password  encryption plug-in
  - Ticket 47807 - SLAPI_REQUESTOR_ISROOT not set for extended operation plugins
  - Ticket 47991 - upgrade script fails if /etc and /var are on different file systems
  - Ticket 47989 - Windows Sync accidentally cleared raw_entry
  - Ticket 47964 - v2 - Incorrect search result after replacing an empty attribute
  - Ticket 47934 - nsslapd-db-locks modify not taking into account.
  - Ticket 47617 - replication changelog trimming setting validation
  - Ticket 47905 - Bad manipulation of passwordhistory
  - Ticket 47973 - During schema reload sometimes the search returns no results
  - Ticket 47981 - COS cache doesn't properly mark vattr cache as  invalid when there are multiple suffixes
  - Ticket 47980 - Nested COS definitions can be incorrectly  processed
  - Ticket 47451 - Dynamic plugins - fixed thread synchronization
  - Ticket 47750 - During delete operation do not refresh cache entry if it is a tombstone
  - Ticket 47947 - start dirsrv after chrony on RHEL7 and Fedora
  - fix jenkins warning
  - Ticket 47526 - Additional fix for ticket 47526 v3
  - Ticket 47451 - Add Dynamic Plugin CI Suite
  - Ticket 47965 - Fix coverity issues (2014/12/16)
  - Ticket 47451 - Fix jenkins errors
  - Ticket 47451 - Dynamic Plugin - various fixes
  - Ticket 47935 - Error: failed to open an LDAP connection to host 'example.org' port '389' as user 'cn=Directory Manager'. Error: unknown.
  - Ticket 47750 - Need to refresh cache entry after called betxn postop plugins
  - Ticket 47942 -  DS hangs during online total update
  - Ticket 47960 - cookie_change_info returns random negative number if there was no change in a tree
  - Ticket 47960 - cookie_change_info returns random negative number if there was no change in a tree
  - Ticket 47722 - Using the filter file does not work
  - Ticket 47636 - Error log levels not displayed correctly
  - Ticket 47965 - Fix coverity issues (2014/11/24)
  - Ticket 47969 - Fix coverity issue
  - Ticket 47949 - logconv.pl -- support parsing/showing/reporting different protocol versions
  - Ticket 47525 - Crash if setting invalid plugin config area for MemberOf Plugin
  - Ticket 47970 - add lib389 testcase
  - Ticket 47970 - Account lockout attributes incorrectly updated after failed SASL Bind
  - Ticket 47969 - COS memory leak when rebuilding the cache
  - Ticket 47967 - cos_cache_build_definition_list does not stop during server shutdown
  - Ticket 47451 - Running a plugin task can crash the server
  - Ticket 47963 - skip nested groups breaks memberof fixup task
  - Ticket 47963 - RFE - memberOf - add option to skip nested  group lookups during delete operations
  - Ticket 47810 - RI plugin does not return result code if update fails


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.3.6-1
changelog:
  - 5d72a2f bump version to 1.3.3.6-1
  - Ticket 47950 - Bind DN tracking unable to write to internalModifiersName without special permissions
  - Ticket 47958 - Memory leak in password admin if the admin entry does not exist
  - Ticket 47952 - PasswordAdminDN attribute is not properly returned to client
  - Ticket 47451 - Need to unregister tasks created by plugins
  - Ticket 47928 - Disable SSL v3, by default.
  - Ticket 47953 - Should not check aci syntax when deleting an aci
  - Ticket 47948 - ldap_sasl_bind fails assertion (ld != NULL) if it is called from chainingdb_bind over SSL/startTLS
  - Ticket 47945 - Add SSL/TLS version info to the access log
  - Ticket 47939 - Malformed cookie for LDAP Sync makes DS crash
  - Ticket 47937 - Crash in entry_add_present_values_wsi_multi_valued
  - Ticket 47928 - CI test: added test cases for ticket 47928
  - Ticket 47553 - Enhance ACIs to have more control over MODRDN operations


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.5-1
changelog:
  - Release 1.3.3.5
  - Ticket 47914 - Add FreeIPA Conflicts to 389 spec file
  - Ticket 47922 - dynamically added macro aci is not evaluated on the fly
  - Ticket 47897 - Need to move slapi_pblock_set(pb, SLAPI_MODRDN_EXISTING_ENTRY, original_entry->ep_entry) prior to original_entry overwritten
  - Ticket 47920 - Encoding of SearchResultEntry is missing tag
  - Ticket 47912 - Proper handling of "No original_tombstone for changenumber" errors
  - Ticket 47899 - Fix slapi_td_plugin_lock_init prototype
  - Ticket 47919 - ldbm_back_modify SLAPI_PLUGIN_BE_PRE_MODIFY_FN does not return even if one of the preop plugins fails.
  - Ticket 47892 - Fix remaining compiler warnings
  - ticket 47916 - plugin logging parameter only triggers result logging
  - Ticket 47918 - result of dna_dn_is_shared_config is incorrectly used
  - Ticket 47900 - Server fails to start if password admin is set
  - Ticket 47892 - coverity defects found in 1.3.3.x


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.4-1
changelog:
  - Release 1.3.3.4
  - Ticket 47880 - CI test: added test cases for ticket 47880
  - Ticket 47880 - provide enabled ciphers as search result
  - Ticket 47838 - CI test: adjusted test cases based on the phase 2 fixes for ticket 47838
  - Ticket 47838 - harden the list of ciphers available by default (phase 2)
  - Ticket 47900 - Adding an entry with an invalid password as rootDN is incorrectly rejected
  - Ticket 47908 - 389-ds 1.3.3.0 does not adjust cipher suite configuration on upgrade, breaks itself and pki-server
  - Ticket 47907 - ldclt: assertion failure with -e "add,counteach" -e "object=<ldif file>,rdn=uid:test[A=INCRNNOLOOP(0;24
  - Ticket 47750 - Creating a glue fails if one above level is a conflict or missing


author: Peter Robinson <pbrobinson@fedoraproject.org> 1.3.3.3-2
changelog:
  - Use generic 64 bit detection (fixes aarch64/ppc64le)
  - PPC/s390 has lm_sensors
  - Minor spec cleanups


author: Nathan Kinder <nkinder@redhat.com> - 1.3.3.2-1
changelog:
  - Release 1.3.3.2
  - Ticket 47889 - DS crashed during ipa-server-install on test_ava_filter
  - Ticket 47895 - If no effective ciphers are available, disable security setting.
  - Ticket 47838 - harden the list of ciphers available by default
  - Ticket 47885 - did not always return a response control
  - Ticket 47890 - minor memory leaks in utilities
  - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
  - Ticket 47748 - Simultaneous adding a user and binding as the user could fail in the password policy check
  - Ticket 47875 - dirsrv not running with old openldap
  - Ticket 47885 - deref plugin should not return references with noc access rights


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.0-1
changelog:
  - Release 1.3.3.0
  - Ticket 47879 - coverity defects in plugins/replication/windows_protocol_util.c
  - Ticket 47876 - coverity defects in slapd/tools/mmldif.c
  - Ticket 47574 - start dirsrv after ntpd
  - Ticket 47838 - harden the list of ciphers available by default
  - Ticket 47579 - add dbmon.sh
  - Ticket 47819 - Fix memory leak
  - Ticket 47819 - Improve tombstone purging performance
  - Ticket 47714 - [RFE] Update lastLoginTime also in Account Policy plugin if account lockout is based on passwordExpirationTime.
  - Ticket 47812 - logconv.pl missing -U option from usage
  - Ticket 47664 - Page control does not work if effective rights control is specified
  - Ticket 47790 - Integer config attributes accept invalid  values at server startup
  - Ticket 47710 - Missing warning for invalid replica backoff configuration
  - Ticket 47853 - Missing newline at end of the error log messages in memberof
  - Ticket 47853 - client hangs in add if memberof fails
  - Ticket 47746 - ldap/servers/slapd/back-ldbm/dblayer.c: possible minor problem with sscanf
  - Ticket 47711 - improve dbgen rdn generation, output and man page.
  - Ticket 47855 - Fix previous commit
  - Ticket 47859 - Coverity: 12692 & 12717
  - Ticket 47855 - clear tmp directory at the start of each test
  - Ticket 47844 - Fix hyphens used as minus signed and other manpage mistakes
  - Ticket 47843 - Fix various typos in manpages & code
  - Ticket 47832 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with improper macro
  - Ticket 47852 - Updating winsync one-way sync does not affect the behaviour dynamically
  - Ticket 47846 - server crashes deleting a replication agreement
  - Ticket 47823 - attribute uniqueness enforced on all subtrees
  - Ticket 47654 - Fix regression (deadlock/crash)
  - Ticket 47827 - Fix coverity issue 12695
  - Ticket 47829: memberof scope: allow to exclude subtrees
  - Ticket 47815 - Add operations rejected by betxn plugins remain in cache
  - Ticket 47808 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed
  - Ticket 555   - add fixup-memberuid.pl script
  - Ticket 47827 - online import crashes server if using verbose error logging
  - fix compiler error with alst coverity commit
  - fix coverity issue 12621
  - Ticket 47810 - investigate betxn plugins to ensure they  return the correct error code
  - Ticket 47602 - txn commit being performed too early
  - Ticket 47752 - Don't add unhashed password mod if we don't have an unhashed value
  - Ticket 47803 - syncrepl crash if attribute list is non-empty
  - Ticket 47466 - Fix coverity issue
  - Ticket 47644 - Managed Entry Plugin - transaction not aborted upon failure to create managed entry
  - Ticket 47791 - Negative value of nsSaslMapPriority is not  reset to lowest priority
  - Ticket 47805 - syncrepl doesn't send notification when attribute in search filter changes
  - Ticket 47636 - errorlog-level 16384 is listed as 0 in cn=config
  - Ticket 47451 - Remove old code from linked attr plugin
  - Ticket 47756 - fix coverity issues
  - Ticket 47761 - Return all attributes in rootdse without explicit request
  - fix assertion failure introduced with fix for ticket 47667
  - Ticket 47712 - betxn: retro changelog broken after cancelled transaction
  - Ticket 47667 - Allow nsDS5ReplicaBindDN to be a group DN
  - Ticket 47655 - Improve replication total update logging
  - Ticket 47756 - Improve import logging and abort processing
  - Ticket 47451 - add/enable/disable/remove plugins without server restart
  - Ticket 47553 - Enhance ACIs to have more control over MODRDN operations
  - Ticket 47727 - Updating nsds5ReplicaHost attribute in a replication agreement fails with error 53
  - Ticket 47725 - compiler error on daemon.c
  - Ticket 47701 - Make retro changelog trim interval programmable
  - Ticket 47453 - configure SASL/GSSAPI/Kerberos without server restart
  - Ticket 47701 - Make retro changelog trim interval programmable
  - Ticket 47602 - Make ldbm_back_seq independently support transactions
  - Ticket 47552 - logconv: unindexed report should list bind dn
  - Ticket 47619 - cannot reindex retrochangelog
  - Update test cases due to new modules: Schema, tasks, plugins and index
  - Ticket 47608 - change slapi_entry_attr_get_bool to handle "on"/"off" values, support default value
  - Ticket 47437 - Some attributes in cn=config should not be multivalued
  - Ticket 47573 - schema push can be erronously prevented
  - Ticket 47618 - Enable normalized DN cache by default
  - Ticket 47570 - slapi_ldap_init unusable during independent plugin development
  - Ticket 47659 - ldbm_usn_init: Valgrind reports Invalid read / SIGSEGV
  - Ticket 47654 - fix double free
  - Ticket 47675 - logconv errors when search has invalid bind dn
  - Ticket 47657 - add schema test suite and tests for Ticket #47634
  - Ticket 47668 - test: port ticket47490_test to Replica/Agreement interface (47600)
  - Ticket 47654 - Cleanup old memory leaks reported from valgrind
  - Ticket 47651 - Finaliser to remove instances backups
  - Ticket 47603 - should not modify pre op entry during config validation
  - Ticket 47628 - port testcases to new DirSrv interface
  - Ticket 47525 - Don't modify preop entry in memberOf config
  - Ticket 605   - support TLS 1.1 - Fixing "Coverity 12415 - Logically dead code"
  - Ticket 605   - support TLS 1.1 - lower the log level for the supported NSS version range
  - Ticket 47368 - fix memory leaks
  - Ticket 605   - support TLS 1.1 - adding backward compatibility
  - Ticket 605   - support TLS 1.1
  - Ticket 47603 - Allow RI plugin to use alternate config area
  - Ticket 47586 - Need to rebind after a stop (fix to run direct python script)
  - Ticket 47525 - Need to add locking around config area access
  - Ticket 47457 - default nsslapd-sasl-max-buffer-size should be 2MB
  - Ticket 47525 - Fix memory leak
  - Ticket 381   - Recognize compressed log files
  - Ticket 47525 - Allow memberOf to use an alternate config area
  - Ticket 47529 - Automember plug-in should treat MODRDN operations as ADD operations
  - Ticket 47521 - Complex filter in a search request doen't work as expected.
  - Ticket 47582 - agmt_count in Replica could become (PRUint64)-1
  - Ticket 47368 - Fix coverity issues
  - Ticket 47555 - db2bak.pl issue when specifying non-default directory
  - Ticket 47368 - Fix Jenkins errors
  - Ticket 47368 - IPA server dirsrv RUV entry data excluded from replication
  - Ticket 538   - - hardcoded sasl2 plugin path in ldaputil.c, saslbind.c
  - Ticket 47519 - memory leaks in access control
  - Ticket 47398 - memberOf on a user is converted to lowercase
  - Coverity Issue 12033
  - Ticket 47530 - dbscan on entryrdn should show all matching values
  - Ticket 47422 - With 1.3.04 and subtree-renaming OFF, when a user is deleted after restarting the server, the same entry can't be added
  - bump autoconf to 2.69, automake to 1.13.4, libtool to 2.4.2
  - Ticket 47436 - 389-ds-base - shebang with /usr/bin/env
  - Ticket 47499 - if nsslapd-cachememsize set to the number larger than the RAM available, should result in proper error message.
  - Ticket 47530 - dbscan on entryrdn should show all matching values
  - Ticket 47535 - update man page
  - Ticket 53    - Need to update supported locales Cleaning up typos and format.
  - Ticket 47535 - Logconv.pl - RFE - add on option for a minimum etime for unindexed search stats
  - Ticket 47491 - Update systemd service file to use PartOf directive


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.23-1
changelog:
  - Release 1.3.2.23
  - Ticket 47871 - 389-ds-base-1.3.2.21-1.fc20 crashed over the weekend
  - Ticket 47866 - Errors after upgrading related to attribute "dnaremotebindmethod"
  - Ticket 47816 - v2- internal syncrepl searches are flagged as unindexed
  - Ticket 47877 - check_and_add_entry fails for changetype: add and existing entry
  - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
  - Ticket 47875 - dirsrv not running with old openldap
  - Revert "Ticket #47875 - dirsrv not running with old openldap"
  - Ticket 47875 - dirsrv not running with old openldap
  - Ticket 47446 - logconv.pl memory continually grows
  - Ticket 47874 - Performance degradation with scope ONE after some load
  - Ticket 47872 - Filter AND with only one clause should be optimized
  - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
  - Ticket 47862 - repl-monitor fails to convert "*" to default values
  - Ticket 47824 - paged results control is not working in some cases when we have a subsuffix.
  - Ticket 47862 - Repl-monitor.pl ignores the provided connection parameters
  - Ticket 346   - Fixing memory leaks
  - Ticket 47753 - Add switch to disable pre-hashed password checking
  - Ticket 47861 - Certain schema files are not replaced during upgrade
  - Ticket 47858 - Internal searches using OP_FLAG_REVERSE_CANDIDATE_ORDER can crash the server
  - Ticket 47797 - fix the indentation
  - Ticket 47797 - DB deadlock when two threads (on separated backend) try to record changes in retroCL
  - Ticket 47692 - single valued attribute replicated ADD does not work
  - Ticket 47781 - Server deadlock if online import started while  server is under load


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.22-1
changelog:
  - Release 1.3.2.21
  - Resolves: #1127833
              Ticket 47869 - unauthenticated information disclosure (Bug 1123477)
    389-ds-base-1.3.2.22 = 389-ds-base-1.3.2.19 + Bug 1127833 fix.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.21-1
changelog:
  - Release 1.3.2.21
  - Resolves: #1127833
              Ticket 47869 - unauthenticated information disclosure (Bug 1123477)
  - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
  - Ticket 47862 - repl-monitor fails to convert "*" to default values
  - Ticket 47824 - paged results control is not working in some cases when we have a subsuffix.
  - Ticket 47862 - Repl-monitor.pl ignores the provided connection parameters
  - Ticket 346   - Fixing memory leaks


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.20-1
changelog:
  - Release 1.3.2.20
  - Ticket 47753 - Add switch to disable pre-hashed password checking
  - Ticket 47861 - Certain schema files are not replaced during upgrade
  - Ticket 47858 - Internal searches using OP_FLAG_REVERSE_CANDIDATE_ORDER can crash the server
  - Ticket 47797 - DB deadlock when two threads (on separated backend) try to record changes in retroCL
  - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
  - Ticket 47692 - single valued attribute replicated ADD does not work
  - Ticket 47781 - Server deadlock if online import started while  server is under load


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.19-1
changelog:
  - Release 1.3.2.19
  - Ticket 47779 - Potential deadlock after startup if a dna configuration change is made
  - Ticket 47839 - 389-ds production segfault: __memcpy_sse2_unaligned...


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.18-1
changelog:
  - Release 1.3.2.18
  - Ticket 47750 - Creating a glue fails if one above level is a conflict or missing
  - Ticket 47763 - winsync plugin modify is broken
  - Ticket 47821 - deref plugin cannot handle complex acis
  - Ticket 47831 - server restart wipes out index config if there is a default index
  - Ticket 47817 - The error result text message should be obtained just prior to sending result
  - Ticket 47815 - Add operations rejected by betxn plugins remain in cache
  - Ticket 47809 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..."
  - Ticket 47704 - invalid sizelimits in aci group evaluation
  - Ticket 47813 - remove "goto bail" from previous commit
  - Ticket 47813 - managed entry plugin fails to update member  pointer on modrdn operation
  - Ticket 47808 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed.
  - Ticket 47770 - #481 breaks possibility to reassemble memberuid list


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.17-1
changelog:
  - Release 1.3.2.17
  - Ticket 47446 - logconv.pl memory continually grows
  - Ticket 47713 - Logconv.pl with an empty access log gives lots of errors
  - Ticket 47806 - Failed deletion of aci: no such attribute
  - bump version
  - Ticket 47720 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator.
  - Ticket 47670 - Aci warnings in error log
  - Ticket 47721 - Schema Replication Issue (follow up)
  - Ticket 47721 - Schema Replication Issue (follow up + cleanup)
  - Ticket 47721 - Schema Replication Issue
  - Ticket 47676 - (cont.) Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1
  - Ticket 47676 - Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1
  - Ticket 47541 - Fix Jenkins errors
  - Ticket 47541 - Replication of the schema may overwrite  consumer 'attributetypes' even if  consumer definition is a superset
  - Ticket 47804 - db2bak.pl error with changelogdb
  - Ticket 47780 - Some VLV search request causes memory leaks
  - Ticket 47787 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone
  - Ticket 47764 - Problem with deletion while replicated
  - Ticket 47750 - Creating a glue fails if one above level is a conflict or missing; Ticket 47696 - Large Searches Hang - Possibly entryrdn related
  - Ticket 47772 - fix coverity issue
  - Ticket 47793 - Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled.
  - Ticket 47792 - database plugins need a way to call betxn  plugins
  - Ticket 47707 - 389 DS Server crashes and dies while handles paged searches from clients
  - Ticket 47792 - code cleanup
  - Ticket 47779 - Need to lock server list when removing list
  - Ticket 47771 - Move parentsdn initialization to avoid crash
  - Ticket 47779 - Part of DNA shared configuration is deleted after server restart
  - Ticket 346   - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  - Ticket 47782 - Parent numbordinate count can be incorrectly updated if an error occurs
  - Ticket 47772 - empty modify returns LDAP_INVALID_DN_SYNTAX
  - Ticket 47774 - mem leak in do_search - rawbase not freed upon certain errors
  - Ticket 47773 - mem leak in do_bind when there is an error
  - Ticket 47771 - Performing deletes during tombstone purging results in operation errors
  - Ticket 47767 - Nested tombstones become orphaned after purge
  - Ticket 47766 - Tombstone purging can crash the server if the backend is stopped/disabled
  - Ticket 47759 - Crash in replication when server is under write load
  - Ticket 47740 - Fix coverity issues(part 7)
  - Ticket 47748 - Simultaneous adding a user and binding as the user could fail in the password policy check
  - Ticket 47743 - Memory leak with proxy auth control
  - Ticket 47740 - Crash caused by changes to certmap.c
  - Ticket 47733 - ds logs many "Operation error fetching Null DN" messages
  - Ticket 47740 - Fix coverity issues: null deferences - Part 6
  - Ticket 47732 - ds logs many "SLAPI_PLUGIN_BE_TXN_POST_DELETE_FN plugin returned error" messages
  - Ticket 47740 - Coverity issue in 1.3.3
  - Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry
  - Ticket 47740 - Fix coverity issues - Part 5
  - Ticket 47740 - Fix coverity erorrs - Part 4
  - Ticket 47640 - Fix coverity issues - part 3
  - Ticket 47740 - Fix sync plugin resource leaks
  - Ticket 47538 - RFE: repl-monitor.pl plain text output, cmdline config options
  - Ticket 47740 - Coverity Fixes (Mark - part 1)
  - Ticket 47734 - Change made in resolving ticket #346 fails on Debian SPARC64
  - Ticket 47722 - Fixed filter not correctly identified
  - Ticket 47722 - rsearch filter error on any search filter


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.16-1
changelog:
  - Release 1.3.2.16 (This release is 1.3.2.13 + Ticket 47739)
  - Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.15-1
changelog:
  - Bump version to 1.3.2.15
  - Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry
  - Ticket 47740 - Coverity issue in 1.3.3
  - Ticket 47740 - Fix coverity issues - Part 5
  - Ticket 47740 - Fix coverity erorrs - Part 4
  - Ticket 47640 - Fix coverity issues - part 3
  - Ticket 47740 - Fix sync plugin resource leaks
  - Ticket 47538 - RFE: repl-monitor.pl plain text output, cmdline config options
  - Ticket 47740 - Coverity Fixes (Mark - part 1)
  - Ticket 47734 - Change made in resolving ticket #346 fails on Debian SPARC64
  - Ticket 47722 - Fixed filter not correctly identified
  - Ticket 47722 - rsearch filter error on any search filter


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.14-1
changelog:
  - Bump version to 1.3.2.14
  - Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind
  - Ticket 47737 - Under heavy stress, failure of turning a tombstone into glue makes the server hung
  - Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry
  - Ticket 47729 - Directory Server crashes if shutdown during a replication initialization
  - Ticket 47637 - rsa_null_sha should not be enabled by default


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.13-1
changelog:
  - Bump version to 1.3.2.13
  - The previous version 1.3.2.12 missed to increment the version in VERSION.sh


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.12-1
changelog:
  - Bump version to 1.3.2.12
  - Ticket 408   - create a normalized dn cache
  - Ticket 571   - Empty control list causes LDAP protocol error is thrown (dup 47361)
  - Ticket 408   - create a normalized dn cache
  - Ticket 47699 - Propagate plugin precedence to all registered function types
  - Ticket 525   - Replication retry time attributes cannot be added
  - Ticket 47709 - package issue in 389-ds-base
  - Ticket 47700 - Unresolved external symbol references break loading of the ACL plugin
  - Ticket 47642 - Windows Sync group issues
  - Ticket 525   - Replication retry time attributes cannot be added
  - Ticket 47692 - single valued attribute replicated ADD does not work
  - Ticket 47615 - Failed to compile the DS 389 1.3.2.3 version against Berkeley DB 4.2 version
  - Ticket 47677 - Size returned by slapi_entry_size is not accurate
  - Ticket 47693 - Environment variables are not passed when DS is started via service


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.11-1
changelog:
  - Bump version to 1.3.2.11
  - Ticket 47653 - Need a way to allow users to create entries assigned to themselves.
  - Ticket 471   - logconv.pl tool removes the access logs contents if "-M" is not correctly used
  - Ticket 47374 - flush.pl is not included in perl5
  - Ticket 47649 - Server hangs in cos_cache when adding a user entry
  - Ticket 443   - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error
  - Ticket 47638 - Overflow in nsslapd-disk-monitoring-threshold on 32bit platform
  - Ticket 47641 - 7-bit check plugin not checking MODRDN operation
  - Ticket 342   - better error message when cache overflows
  - Ticket 47516 - replication stops with excessive clock skew
  - Ticket 47620 - Unable to delete protocol timeout attribute
  - Ticket 408   - Fix crash when disabling/enabling the setting
  - Ticket 47629 - random crashes related to sync repl
  - Ticket 47571 - targetattr ACIs ignore subtype
  - Ticket 47660 - config_set_allowed_to_delete_attrs: Valgrind reports Invalid read
  - Revert "Ticket 47653 - Need a way to allow users to create entries assigned to themselves"


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.10-1
changelog:
  - Bump version to 1.3.2.10
  - Ticket 447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs
  - Ticket 47653 - Need a way to allow users to create entries assigned to themselves
  - Ticket 47647 - remove bogus definition in 60rfc3712.ldif
  - Ticket 47634 - support AttributeTypeDescription USAGE userApplications distributedOperation dSAOperation
  - Ticket 47645 - reset stack, op fields to NULL - clean up stacks at shutdown - free unused plugin config entries


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.9-1
changelog:
  - Bump version to 1.3.2.9
  - Ticket 47621 - v2 make referential integrity configuration more flexible
  - Ticket 47620 - Fix missing left bracket
  - Ticket 47620 - Fix dereferenced NULL pointer in agmtlist_modify_callback()
  - Ticket 47606 - replica init/bulk import errors should be more verbose
  - Ticket 47631 - objectclass may, must lists skip rest of objectclass once first is found in sup
  - Ticket 47627 - Fix replication logging
  - Ticket 47620 - Fix logically dead code.
  - Ticket 47313 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result
  - Ticket 47620 - Config value validation improvement
  - Ticket 47620 - Fix cherry-pick error for 1.3.2 and 1.3.1
  - Ticket 47613 - Issues setting allowed mechanisms
  - Ticket 47617 - allow configuring changelog trim interval
  - Ticket 47601 - Plugin library path validation prevents intentional loading of out-of-tree modules
  - Ticket 47627 - changelog iteration should ignore cleaned rids when getting the minCSN
  - Ticket 47623 - fix memleak caused by 47347
  - Ticket 47622 - Automember betxnpreoperation - transaction not aborted when group entry does not exist
  - Ticket 47623 - fix memleak caused by 47347
  - Ticket 47620 - 389-ds rejects nsds5ReplicaProtocolTimeout attribute


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.8-1
changelog:
  - Bump version to 1.3.2.8
  - Ticket 47612 - ns-slapd eats all the memory
  - Ticket 47527 - Allow referential integrity suffixes to be configurable
  - Ticket 47526 - Allow memberof suffixes to be configurable
  - Ticket 342   - better error message when cache overflows (phase 2)
  - Ticket 47587 - hard coded limit of 64 masters in agreement and changelog code
  - Ticket 47611 - Add script to build patched RPMs
  - Ticket 47614 - Possible to specify invalid SASL mechanism in nsslapd-allowed-sasl-mechanisms
  - Ticket 47613 - Impossible to configure nsslapd-allowed-sasl-mechanisms
  - Ticket 47592 - automember plugin task memory leaks
  - Ticket 47591 - entries with empty objectclass attribute value can be hidden
  - Ticket 47596 - attrcrypt fails to find unlocked key


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.2.7-1
changelog:
  - 924ead4 Bump version to 1.3.2.7
  - Ticket 47593 - Update plugin API for OTP plugin
  - Ticket 47599 - fix memory leak in ldbm_back_seq()


author: Rich Megginson <rmeggins@redhat.com> - 1.3.2.6-1
changelog:
  - Ticket 47599 - Reduce lock scope in retro changelog plug-in
  -  previous fix missing defition of retrocl_cn_lock


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.2.4-1
changelog:
  6cdca01 bump version to 1.3.2.4
  Ticket 47599 - Reduce lock scope in retro changelog plug-in
  Ticket 47596 - attrcrypt fails to find unlocked key
  Ticket 47598 - Convert ldbm_back_seq code to be transaction aware
  Ticket 47597 - Convert retro changelog plug-in to betxn
  Ticket 47585 - Replication Failures related to skipped entries due to cleaned rids
  Ticket 47588 - Compiler warnings building on F19
  Ticket 47581 - Winsync plugin segfault during incremental backoff (phase 2)
  Ticket 47581 - Winsync plugin segfault during incremental backoff
  Ticket 47577 - crash when removing entries from cache
  6b16d30 Revert "Ticket #47559 hung server - related to sasl and initialize"


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.3-1
changelog:
  - release 1.3.2.3
  - Ticket 47515 - Fedora 20: setup-ds-admin.pl
  - Ticket 47569 - Fix build warnings
  - Ticket 47569 - ACIs do not allow attribute subtypes in targetattr keyword
  - Ticket 47565 - Content Sync update file needs extensibleObject
  - Ticket 47560 - fixup memberof task does not work: task entry not added
  - Ticket 47559 - hung server - related to sasl and initialize


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.2-1
changelog:
  - release 1.3.2.2
  - Ticket 47517 - memory leak in range searches and other various leaks
  - ticket 47550 - wip (cherry picked from commit 82377636267787be5182457d619d5a0b662d2658)
  - Ticket 47550 - logconv: failed logins: Use of uninitialized value in numeric comparison at logconv.pl line 949


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.1-1
changelog:
  - release 1.3.2.1
  - Ticket 47513 - tmpfiles.d references /var/lock when they should reference /run/lock
  - Ticket 47551 - logconv: -V does not produce unindexed search report
  - Ticket 47490 - Schema replication between DS versions may overwrite newer base schema


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.0-1
changelog:
  - release 1.3.2.0
  - Ticket 48 - Active Directory has certain uids which are reserved and will cause a Directory Server replica initialization of an AD server to abort.
  - Ticket 53 - Need to update supported locales
  - Ticket 54 - locale "nl" not supported by collation plugin
  - Ticket 77 - [RFE] Add ACI support for ldapi
  - Ticket 123 - Enhancement request: "whoami" extended operation
  - Ticket 153 - Schema file parsing overly picky?
  - Ticket 182 - Pwd retry counters replication not enabled by default, and enabling it could lead to undesired results
  - Ticket 197 - rhds82 rfe - BDB backend - clear free page files to reduce changelog size
  - Ticket 205 - rhds81 rfe - snmp counters index strings for multiple network interfaces with ip addr and tcp port pairs
  - Ticket 208 - [RFE] Roles with explicit scoping in RHDS
  - Ticket 283 - Expose slapi_eq_* API
  - Ticket 314 - ChainOnUpdate: "cn=directory manager" can modify userRoot on consumer without changes being chained or replicated. Directory integrity compromised.
  - Ticket 411 - [RFE] mods optimizer
  - Ticket 415 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist
  - Ticket 428 - posix winsync should support ADD user/group entries from DS to AD
  - Ticket 460 - support multiple subtrees and filters
  - Ticket 512 - improve performance of vattr code
  - Ticket 513 - recycle operation pblocks
  - Ticket 514 - investigate connection locking
  - Ticket 521 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change
  - Ticket 564 - Is ldbm_txn_ruv_modify_context still required ?
  - Ticket 568 - using transaction batchval violates durability
  - Ticket 569 - examine replication code to reduce amount of stored state information
  - Ticket 586 - selinux errors with /usr/sbin/setup-ds-admin.pl
  - Ticket 589 - [RFE] Support RFC 4527 Read Entry Controls
  - Ticket 601 - multi master replication allows schema violation
  - Ticket 602 - replication inconsistency if attribute is modified several times in one operaion
  - Ticket 607 - Replication issue: Entry can diverge betwen servers
  - Ticket 609 - nsDS5BeginReplicaRefresh attribute accepts any value and it doesn't throw any error when server restarts.
  - Ticket 615 - High contention on cos cache lock
  - Ticket 617 - Possible to add invalid ACI value
  - Ticket 626 - Possible to add nonexistent target to ACI
  - Ticket 630 - The backend name provided to bak2db is not validated
  - Ticket 47306 - execute index_add_mods only for indexed attributes
  - Ticket 47310 - Attribute "dsOnlyMemberUid" not allowed when syncing nested posix groups from AD with posixWinsync
  - Ticket 47313 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result
  - Ticket 47314 - Winsync should support range retrieval
  - Ticket 47316 - Search against 'view' is always reported as unindexed
  - Ticket 47317 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default
  - Ticket 47319 - make connection buffer size adjustable
  - Ticket 47320 - put conn on work_q not poll list if conn has buffered more_data
  - Ticket 47323 - resurrected entry is not correctly indexed
  - Ticket 47326 - idl switch does not work
  - Ticket 47329 - Improve slapi_back_transaction_begin() return code when transactions are not available
  - Ticket 47331 - Self entry access ACI not working properly
  - Ticket 47337 - mep_pre_op: Unable to fetch origin entry
  - Ticket 47340 - Deleting a separator ',' in 7-bit check plugin arguments makes the server fail to start with segfault
  - Ticket 47350 - Allow search to look up 'in memory RUV'
  - Ticket 47354 - Indexed search are logged with 'notes=U' in the access logs
  - Ticket 47358 - backend performance - introduce optimization levels
  - Ticket 47360 - Delete attribute could crash the server
  - Ticket 47363 - 7-bit checking is not necessary for userPassword
  - Ticket 47370 - DS crashes with some 7-bit check plugin configurations
  - Ticket 47371 - Some updates of "passwordgraceusertime" are useless when updating "userpassword"
  - Ticket 47372 - make old-idl tunable
  - Ticket 47381 - nsslapd-db-transaction-batch-val turns to -1
  - Ticket 47382 - Add a warning message when a connection hits the max number of threads
  - Ticket 47384 - Plugin library path validation
  - Ticket 47387 - improve logconv.pl performance with large access logs
  - Ticket 47388 - [RFE] Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533
  - Ticket 47389 - Non-directory manager can change the individual userPassword's storage scheme
  - Ticket 47394 - remove-ds.pl should remove /var/lock/dirsrv
  - Ticket 47400 - MMR stress test with dna enabled causes a deadlock
  - Ticket 47411 - Replace substring search with plain search in referint plugin
  - Ticket 47416 - IPA replica's - "SASL encrypted packet length exceeds maximum allowed limit"
  - Ticket 47423 - 7-bit check plugin does not work for userpassword attribute
  - Ticket 47425 - should only call windows_update_done if repl agmt type is windows
  - Ticket 47426 - move compute_idletimeout out of handle_pr_read_ready
  - Ticket 47433 - With SeLinux, ports can be labelled per range. setup-ds.pl or setup-ds-admin.pl fail to detect already ranged labelled ports
  - Ticket 47463 - IDL-style can become mismatched during partial restoration
  - Ticket 47487 - enhance retro changelog
  - Ticket 47502 - updates to ruv entry are written to retro changelog
  - Ticket 47504 - idlistscanlimit per index/type/value
  - Ticket 47505 - get rid of valueset_add_valuearray_ext
  - Ticket 47520 - Fix various issues with logconv.pl
  - Ticket 47522 - Password administrators should be able to violate password policy
  - Ticket 47531 - 1.3.2 with mozldap - need to redo sasl_io_recv
  - Ticket 47532 - 1.3.2 with mozldap - crashes in new operation work_q
  - Ticket 47539 - Disabling DNA plug-in throws error 53
  - Ticket 47543 - mozldap - fix compiler warnings


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.11-1
changelog:
  - Ticket 47513 - Set localrundir outside of the "with-fhs" block
  - Ticket 47513 - Refine the check for @localrundir@
  - Ticket 47510 - remove unnecessary typedef
  - Ticket 47510 - Repl Sync does not compile against MozLDAP libraries


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.10-1
changelog:
  - Ticket #47534 - RUV tombstone search with scope "one" doesn`t work
  - Ticket 47510 - 389-ds-base does not compile against MozLDAP libraries
  - Ticket #47523 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch
  - Ticket 47528 - 389-ds-base built with mozldap can crash from invalid free
  - Ticket #47504 idlistscanlimit per index/type/value
  - Ticket 47513 - tmpfiles.d references /var/lock when they should reference /run/lock
  - Ticket #47492 - PassSync removes User must change password flag on the Windows side
  - Ticket 47509 - CLEANALLRUV doesnt run across all replicas
  - Ticket #47516 replication stops with excessive clock skew
  - 6829200 Coverity fix - 11952 - for Ticket 47512
  - Ticket 47512 - backend txn plugin fixup tasks should be done in a txn


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.9-1
changelog:
  - release 1.3.1.9
  - Ticket 449 - Allow macro aci keywords to be case-insensitive
  - Ticket 47489 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing
  - Ticket 47507 - automember rebuild task not working as expected


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.8-1
changelog:
  - Ticket #47455 - valgrind - value mem leaks, uninit mem usage
  -  fix breakage in slapi-nis introduced with the previous fix
  - Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.7-1
changelog:
  - bump version to 1.3.1.7
  - Bug 1002215 - CVE-2013-4283 389-ds-base: ns-slapd crash due to bogus DN
  - Ticket 47488 - Users from AD sub OU does not sync to IPA
  - Ticket 47461 - logconv.pl - Use of comma-less variable list is deprecated
  - Ticket 47473 - setup-ds.pl doesn't lookup the "root" group correctly


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-1
changelog:
  - bump version to 1.3.1.6
  - Ticket 47455 - valgrind - value mem leaks, uninit mem usage
  - fix coverity 11915 - dead code - introduced with fix for ticket 346
  - fix coverity 11895 - null deref - caused by fix to ticket 47392
  - fix compiler warning in posix winsync code for posix_group_del_memberuid_callback
  - Fix compiler warnings for Ticket 47395 and 47397
  - fix compiler warning (cherry picked from commit 904416f4631d842a105851b4a9931ae17822a107)
  - Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch
  - fix compiler warnings
  - Fix compiler warning (cherry picked from commit ec6ebc0b0f085a82041d993ab2450a3922ef5502)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.5-1
changelog:
  - bump version to 1.3.1.5
  - Ticket 47456 - delete present values should append values to deleted values
  - Ticket 47455 - valgrind - value mem leaks, uninit mem usage
  - Ticket 47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication
  - Ticket 47440 - Fix runtime errors caused by last patch.
  - Ticket 47440 - Fix compilation warnings and header files
  - Ticket 47405 - CVE-2013-2219 ACLs inoperative in some search scenarios
  - Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D
  - Ticket 47378 - fix recent compiler warnings
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47449 - deadlock after adding and deleting entries
  - Ticket 47441 - Disk Monitoring not checking filesystem with logs
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.4-1
changelog:
  - bump version to 1.3.1.4
  - Ticket 47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negative.
  - Ticket 47424 - Replication problem with add-delete requests on single-valued attributes
  - Ticket 47367 - (phase 2) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
  - Ticket 47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
  - Ticket 47421 - memory leaks in set_krb5_creds
  - Ticket 346 - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute values
  - Ticket 47369  version2 - provide default syntax plugin
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47399 - RHDS denies MODRDN access if ACI list contains any DENY rule
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47428 - Memory leak in 389-ds-base 1.2.11.15
  - Ticket 47392 - ldbm errors when adding/modifying/deleting entries
  - Ticket 47385 - Disk Monitoring is not triggered as expected.
  - Ticket 47410 - changelog db deadlocks with DNA and replication


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.3-1
changelog:
  - bump version to 1.3.1.3
  - Ticket 47374 - flush.pl is not included in perl5
  - Ticket 47391 - deleting and adding userpassword fails to update the password (additional fix)
  - Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization
  - Ticket 47395 47397 - v2 correct behaviour of account policy if only stateattr is configured or no alternate attr is configured
  - Ticket 47396 - crash on modrdn of tombstone
  - Ticket 47400 - MMR stress test with dna enabled causes a deadlock
  - Ticket 47409 - allow setting db deadlock rejection policy
  - Ticket 47419 - Unhashed userpassword can accidentally get removed from mods
  - Ticket 47420 - An upgrade script 80upgradednformat.pl fails to handle a server instance name incuding '-'


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.2-1
changelog:
  - bump version to 1.3.1.2
  - Ticket 47391 - deleting and adding userpassword fails to update the password
  - Coverity Fixes (Part 7)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.1-1
changelog:
  - bump version to 1.3.1.1
  - Ticket 402 - nhashed#user#password in entry extension
  - Ticket 511 - Revision - allow turning off vattr lookup in search entry return
  - Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate
  - Ticket 47327 - error syncing group if group member user is not synced
  - Ticket 47355 - dse.ldif doesn't replicate update to nsslapd-sasl-mapping-fallback
  - Ticket 47359 - new ldap connections can block ldaps and ldapi connections
  - Ticket 47362 - ipa upgrade selinuxusermap data not replicating
  - Ticket 47375 - flush_ber error sending back start_tls response will deadlock
  - Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3)
  - Ticket 47377 - make listen backlog size configurable
  - Ticket 47378 - fix recent compiler warnings
  - Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice
  - Ticket 47385 - DS not shutting down when disk monitoring threshold is reached
  - Coverity Fixes (part 1)
  - Coverity Fixes (Part 2)
  - Coverity Fixes (Part 3)
  - Coverity Fixes (Part 4)
  - Coverity Fixes (Part 5)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.0-1
changelog:
  - bump version to 1.3.1.0
  - Ticket 332 - Command line perl scripts should attempt most secure connection type first
  - Ticket 342 - better error message when cache overflows
  - Ticket 417 - RFE - forcing passwordmustchange attribute by non-cn=directory manager
  - Ticket 419 - logconv.pl - improve memory management
  - Ticket 422 - 389-ds-base - Can't call method "getText"
  - Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts
  - Ticket 458 - RFE - Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords
  - Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used
  - Ticket 487 - Possible to add invalid attribute values to PAM PTA plugin configuration
  - Ticket 502 - setup-ds.pl script should wait if "semanage.trans.LOCK" presen
  - Ticket 505 - use lock-free access name2asi and oid2asi tables (additional)
  - Ticket 508 - lock-free access to FrontendConfig structure
  - Ticket 511 - allow turning off vattr lookup in search entry return
  - Ticket 525 - Introducing a user visible configuration variable for controlling replication retry time
  - Ticket 528 - RFE - get rid of instance specific scripts
  - Ticket 529 - dn normalization must handle multiple space characters in attributes
  - Ticket 532 - RUV is not getting updated for both Master and consumer
  - Ticket 533 - only scan for attributes to decrypt if there are encrypted attrs configured
  - Ticket 534 - RFE: Add SASL mappings fallback
  - Ticket 537 - Improvement of range search
  - Ticket 539 - logconv.pl should handle microsecond timing
  - Ticket 543 - Sorting with attributes in ldapsearch gives incorrect result
  - Ticket 545 - Segfault during initial LDIF import: str2entry_dupcheck()
  - Ticket 547 - Incorrect assumption in ndn cache
  - Ticket 550 - posix winsync will not create memberuid values if group entry become posix group in the same sync interval
  - Ticket 551 - Multivalued rootdn-days-allowed in RootDN Access Control plugin always results in access control violation
  - Ticket 552 - Adding rootdn-open-time without rootdn-close-time to RootDN Acess Control results in inconsistent configuration
  - Ticket 558 - Replication - make timeout for protocol shutdown configurable
  - Ticket 561 - disable writing unhashed#user#password to changelog
  - Ticket 563 - DSCreate.pm: Error messages cannot be used in the if expression since they could be localized.
  - Ticket 565 - turbo mode and replication - allow disable of turbo mode
  - Ticket 571 - server does not accept 0 length LDAP Control sequence
  - Ticket 574 - problems with dbcachesize disk space calculation
  - Ticket 583 - dirsrv fails to start on reboot due to /var/run/dirsrv permissions
  - Ticket 585 - Behaviours of "db2ldif -a <filename>" and "db2ldif.pl -a <filename>" are inconsistent
  - Ticket 587 - Replication error messages in the DS error logs
  - Ticket 588 - Create MAN pages for command line scripts
  - Ticket 600 - Server should return unavailableCriticalExtension when processing a badly formed critical control
  - Ticket 603 - A logic error in str2simple
  - Ticket 604 - Required attribute not checked during search operation
  - Ticket 608 - Posix Winsync plugin throws "posix_winsync_end_update_cb: failed to add task entry" error message
  - Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND
  - Ticket 612 - improve dbgen rdn generation, output
  - Ticket 613 - ldclt: add timestamp, interval, nozeropad, other improvements
  - Ticket 616 - High contention on computed attribute lock
  - Ticket 618 - Crash at shutdown while stopping replica agreements
  - Ticket 620 - Better logging of error messages for 389-ds-base
  - Ticket 621 - modify operations without values need to be written to the changelog
  - Ticket 622 - DS logging errors "libdb: BDB0171 seek: 2147483648: (262144 * 8192) + 0: No such file or directory
  - Ticket 631 - Replication: "Incremental update started" status message without consumer initialized
  - Ticket 633 - allow nsslapd-nagle to be disabled, and also tcp cork
  - Ticket 47299 - allow cmdline scripts to work with non-root user
  - Ticket 47302 - get rid of sbindir start/stop/restart slapd scripts
  - Ticket 47303 - start/stop/restart dirsrv scripts should report and error if no instances
  - Ticket 47304 - reinitialization of a master with a disabled agreement hangs
  - Ticket 47311 - segfault in db2ldif(trigger by a cleanallruv task)
  - Ticket 47312 - replace PR_GetFileInfo with PR_GetFileInfo64
  - Ticket 47315 - filter option in fixup-memberof requires more clarification
  - Ticket 47325 - Crash at shutdown on a replica aggrement
  - Ticket 47330 - changelog db extension / upgrade is obsolete
  - Ticket 47336 - logconv.pl -m not working for all stats
  - Ticket 47341 - logconv.pl -m time calculation is wrong
  - Ticket 47343 - 389-ds-base: Does not support aarch64 in f19 and rawhide
  - Ticket 47347 - Simple paged results should support async search
  - Ticket 47348 - add etimes to per second/minute stats
  - Ticket 47349 - DS instance crashes under a high load


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0.5-1
changelog:
  - bump version to 1.3.0.5
  - Ticket 47308 - unintended information exposure when anonymous access is set to rootdse
  - Ticket 628 - crash in aci evaluation
  - Ticket 627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so
  - Ticket 634 - Deadlock in DNA plug-in Ticket #576 - DNA: use event queue for config update only at the start up
  - Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC
  - Ticket 623 - cleanAllRUV task fails to cleanup config upon completion


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.0.4-1
changelog:
  - e53d691 bump version to 1.3.0.4
  - Bug 912964 - CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data
  - Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled)
  - Ticket 490 - Slow role performance when using a lot of roles
  - Ticket 590 - ns-slapd segfaults while trying to delete a tombstone entry


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0.3-1
changelog:
  - bump version to 1.3.0.3
  - Ticket #584 - Existence of an entry is not checked when its password is to be deleted
  - Ticket 562 - Crash when deleting suffix


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.3.rc3
changelog:
  - bump version to 1.3.0.rc3
  - Ticket 549 - DNA plugin no longer reports additional info when range is depleted
  - Ticket 541 - need to set plugin as off in ldif template
  - Ticket 541 - RootDN Access Control plugin is missing after upgrade


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.2.rc2
changelog:
  - bump version to 1.3.0.rc2
  - Trac Ticket #497 - Escaped character cannot be used in the substring search filter
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Trac Ticket #522 - betxn: upgrade is not implemented yet


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.1.rc1
changelog:
  - bump version to 1.3.0.rc1
  - Ticket #322 - Create DOAP description for the 389 Directory Server project
  - Trac Ticket #499 - Handling URP results is not corrrect
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Ticket 456 - improve entry cache sizing
  - Trac Ticket #531 - loading an entry from the database should use str2entry_f
  - Trac Ticket #536 - Clean up compiler warnings for 1.3
  - Trac Ticket #531 - loading an entry from the database should use str2entry_fast
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Ticket 527 - ns-slapd segfaults if it cannot rename the logs
  - Ticket 395 - RFE: 389-ds shouldn't advertise in the rootDSE that we can handle a sasl mech if we really can't
  - Ticket 216 - disable replication agreements
  - Ticket 518 - dse.ldif is 0 length after server kill or machine kill
  - Ticket 393 - Change in winSyncInterval does not take immediate effect
  - Ticket 20 - Allow automember to work on entries that have already been added
  - Coverity Fixes
  - Ticket 349 - nsViewFilter syntax issue in 389DS 1.2.5
  - Ticket 337 - improve CLEANRUV functionality
  - Fix for ticket 504
  - Ticket 394 - modify-delete userpassword
  - minor fixes for bdb 4.2/4.3 and mozldap
  - Trac Ticket #276 - Multiple threads simultaneously working on connection's private buffer causes ns-slapd to abort
  - Fix for ticket 465: cn=monitor showing stats for other db instances
  - Ticket 507 - use mutex for FrontendConfig lock instead of rwlock
  - Fix for ticket 510 Avoid creating an attribute just to determine the syntax for a type, look up the syntax directly by type
  - Coverity defect: Resource leak 13110
  - Ticket 517 - crash in DNA if no dnaMagicRegen is specified
  - Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry
  - Trac Ticket #519 - Search with a complex filter including range search is slow
  - Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error
  - Trac Ticket #311 - IP lookup failing with multiple DNS entries
  - Trac Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs
  - Trac Ticket #443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error
  - Ticket #503 - Improve AD version in winsync log message
  - Trac Ticket #190 - Un-resolvable server in replication agreement produces unclear error message
  - Coverity fixes
  - Trac Ticket #391 - Slapd crashes when deleting backends while operations are still in progress
  - Trac Ticket #448 - Possible to set invalid macros in Macro ACIs
  - Trac Ticket #498 - Cannot abaondon simple paged result search
  - Coverity defects
  - Trac Ticket #494 - slapd entered to infinite loop during new index addition
  - Fixing compiler warnings in the posix-winsync plugin
  - Coverity defects
  - Ticket 147 - Internal Password Policy usage very inefficient
  - Ticket 495 - internalModifiersname not updated by DNA plugin
  - Revert "Ticket 495 - internalModifiersname not updated by DNA plugin"
  - Ticket 495 - internalModifiersname not updated by DNA plugin
  - Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h])
  - Ticket 486 - nsslapd-enablePlugin should not be multivalued
  - Ticket 488 - Doc: DS error log messages with typo
  - Trac Ticket #451 - Allow db2ldif to be quiet
  - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes
  - Ticket #481 - expand nested posix groups
  - Trac Ticket #455 - Insufficient rights to unhashed#user#password when user deletes his password
  - Ticket #446 - anonymous limits are being applied to directory manager


author: Mark Reynolds <mareynol@redhat.com> - 1.3.0.a1-1
changelog:
  - Ticket #28 - MOD operations with chained delete/add get back error 53 on backend config
  - Ticket #173 - ds-logpipe.py script's man page and script help should be updated for -t option.
  - Ticket #196 - RFE: Interpret IPV6 addresses for ACIs, replication, and chaining 
  - Ticket #218 - RFE - Make RIP working with Replicated Entries 
  - Ticket #328 - make sure all internal search filters are properly escaped 
  - Ticket #329 - 389-admin build fails on F-18 with new apache
  - Ticket #344 - deadlock in replica_write_ruv
  - Ticket #351 - use betxn plugins by default
  - Ticket #352 - make cos, roles, views betxn aware 
  - Ticket #356 - logconv.pl - RFE - track bind info
  - Ticket #365 - Audit log - clear text password in user changes 
  - Ticket #370 - Opening merge qualifier CoS entry using RHDS console changes the entry.
  - Ticket #372 - Setting nsslapd-listenhost or nsslapd-securelistenhost breaks ACI processing
  - Ticket #386 - Overconsumption of memory with large cachememsize and heavy use of ldapmodify
  - Ticket #402 - unhashedTicket #userTicket #password in entry extension
  - Ticket #408 - Create a normalized dn cache
  - Ticket #453 - db2index with -tattrname:type,type fails
  - Ticket #461 - fix build problem with mozldap c sdk 
  - Ticket #462 - add test for include file mntent.h 
  - Ticket #463 - different parameters of getmntent in Solaris


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-1
changelog:
  - Trac Ticket #470 - 389 prevents from adding a posixaccount with userpassword after schema reload
  - Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang
  - Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start
  - Ticket 473 - change VERSION.sh to have console version be major.minor
  - Ticket 475 - Root DN Access Control - improve value checking for config
  - Trac Ticket #466 - entry_apply_mod - ADD: Failed to set unhashed#user#password to extension
  - Ticket 474 - Root DN Access Control - days allowed not working correctly
  - Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas
  - 0b79915 fix compiler warnings in ticket 374 code
  - Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.14-1
changelog:
  - Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement
  - Ticket 386 - large memory growth with ldapmodify(heap fragmentation)
  -  this patch doesn't fix the bug - it allows us to experiment with
  -  different values of mxfast
  - Ticket #374 - consumer can go into total update mode for no reason


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.13-1
changelog:
  - Ticket #426 - support posix schema for user and group sync
  -   1) plugin config ldif must contain pluginid, etc. during upgrade or it
  -      will fail due to schema errors
  -   2) posix winsync should have a lower precedence (25) than the default (50)
  -      so that it will be run first
  -   3) posix winsync should support the Winsync API v3 - the v2 functions are
  -      just stubs for now - but the precedence cb is active


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.12-1
changelog:
  - 8e5087a Coverity defects - 13089: Dereference after null check ldbm_back_delete
  - Trac Ticket #437 - variable dn should not be used in ldbm_back_delete
  - ba1f5b2 fix coverity resource leak in windows_plugin_add
  - e3e81db Simplify program flow: change while loops to for
  - a0d5dc0 Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0)
  - 0808f7e Simplify program flow: make adduids/moduids/deluids action blocks all similar
  - 77eb760 Simplify program flow: eliminate unnecessary continue
  - c9e9db7 Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new
  - a4ca0cc Change "return"s in modGroupMembership to "break"s to avoid leaking
  - d49035c Factorize into new isPosixGroup function
  - 3b61c03 coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free
  - 33ce2a9 fix mem leaks with parent dn log message, setting winsync windows domain
  - Ticket #440 - periodic dirsync timed event causes server to loop repeatedly
  - Ticket #355 - winsync should not delete entry that appears to be out of scope
  - Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values.
  - 487932d coverity - mbo dead code - winsync leaks, deadcode, null check, test code
  - 2734a71 CLEANALLRUV coverity fixes
  - Ticket #426 - support posix schema for user and group sync
  - Ticket #430 - server to server ssl client auth broken with latest openldap


author: Mark Reynolds <mareynol@redhat.com> - 1.2.11.11-1
changelog:
  6c0778f bumped version to 1.2.11.11
  Ticket 429 - added nsslapd-readonly to DS schema
  Ticket 403 - fix CLEANALLRUV regression from last commit
  Trac Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values


author: Mark Reynolds <mareynol@redhat.com> - 1.2.11.8-1
changelog:
  ddcf669 bump version to 1.2.11.8 for offical release
  Ticket #425 - support multiple winsync plugins
  Ticket 403 - cleanallruv coverity fixes
  Ticket 407 - memory leak in dna plugin
  Ticket 403 - CLEANALLRUV feature
  Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs
  3168f04 Coverity defects
  5ff0a02 COVERITY FIXES
  Ticket #388 - Improve replication agreement status messages
  0760116 Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns
  Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion
  Ticket #409 - Report during startup if nsslapd-cachememsize is too small
  Ticket #412 - memberof performance enhancement
  12813: Uninitialized pointer read string_values2keys
  Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  Ticket #410 - Referential integrity plug-in does not work when update interval is not zero
  Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled
  Ticket #405 - referint modrdn not working if case is different
  Ticket 399 - slapi_ldap_bind() doesn't check bind results


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.7-2
changelog:
  - Ticket 378 - unhashed#user#password visible after changing password
  -  fix func declaration from previous patch
  - Ticket 366 - Change DS to purge ticket from krb cache in case of authentication error


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.6-1
changelog:
  - Ticket #378 - audit log does not log unhashed password: enabled, by default.
  - Ticket #378 - unhashed#user#password visible after changing password
  - Ticket #365 - passwords in clear text in the audit log


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.5-1
changelog:
  - Ticket #387 - managed entry sometimes doesn't delete the managed entry
  - 5903815 improve txn test index handling
  - Ticket #360 - ldapmodify returns Operations error - fix delete caching
  - bcfa9e3 Coverity Fix for CLEANALLRUV
  - Trac Ticket #335 - transaction retries need to be cache aware
  - Ticket #389 - ADD operations not in audit log
  - 44cdc84 fix coverity issues with uninit vals, no return checking
  - Ticket 368 - Make the cleanAllRUV task one step
  - Ticket #110 - RFE limiting root DN by host, IP, time of day, day of week


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.4-1
changelog:
  - Ticket #360 - ldapmodify returns Operations error
  - Ticket #321 - krbExtraData is being null modified and replicated on each ssh login
  - Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress
  - Ticket #361: Bad DNs in ACIs can segfault ns-slapd
  - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object
  - Ticket #337 - Improve CLEANRUV task


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.2-1
changelog:
  - Ticket #351 - use betxn plugins by default
  -   revert - make no plugins betxn by default - too great a risk
  -   for deadlocks until we can test this better
  - Ticket #348 - crash in ldap_initialize with multiple threads
  -   fixes PR_Init problem in ldclt


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.1-1
changelog:
  - f227f11 Suppress alert on unavailable port with forced setup
  - Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return
  - Ticket #351 - use betxn plugins by default
  - Trac Ticket #345 - db deadlock return should not log error
  - Ticket #348 - crash in ldap_initialize with multiple threads
  - Ticket #214 - Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied
  - Ticket #207 - [RFE] enable attribute that tracks when a password was last set
  - Ticket #216 - RFE - Disable replication agreements
  - Ticket #337 - RFE - Improve CLEANRUV functionality
  - Ticket #326 - MemberOf plugin should work on all backends
  - Trac Ticket #19 - Convert entryUSN plugin to transaction aware type
  - Ticket #347 - IPA dirsvr seg-fault during system longevity test
  - Trac Ticket #310 - Avoid calling escape_string() for logged DNs
  - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object
  - Ticket #183 - passwordMaxFailure should lockout password one sooner
  - Trac Ticket #335 - transaction retries need to be cache aware
  - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - Ticket #325 - logconv.pl : use of getopts to parse command line options
  - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - 554e29d Coverity Fixes
  - Trac Ticket #46 - (additional 2) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #183 - passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions
  - Ticket #315 - small fix to libglobs
  - Ticket #315 - ns-slapd exits/crashes if /var fills up
  - Ticket #20 - Allow automember to work on entries that have already been added
  - Trac Ticket #45 - Fine Grained Password policy: if passwordHistory is on, deleting the password fails.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11-0.1.a1
changelog:
  - 453eb97 schema def must have DESC '' - close paren must be preceded by space
  - Trac Ticket #46 - (additional) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #331 - transaction errors with db 4.3 and db 4.2
  - Ticket #261 - Add Solaris i386
  - Ticket #316 and Ticket #70 - add post add/mod and AD add callback hooks
  - Ticket #324 - Sync with group attribute containing () fails
  - Ticket #319 - ldap-agent crashes on start with signal SIGSEGV
  - 77cacd9 coverity 12606 Logically dead code
  - Trac Ticket #303 - make DNA range requests work with transactions
  - Ticket #320 - allow most plugins to be betxn plugins
  - Ticket #24 - Add nsTLS1 to the DS schema
  - Ticket #271 - Slow shutdown when you have 100+ replication agreements
  - TIcket #285 - compilation fixes for '--format-security'
  - Ticket 211 - Avoid preop range requests non-DNA operations
  - Ticket #271 - replication code cleanup
  - Ticket 317 - RHDS fractional replication with excluded password policy attributes leads to wrong error messages.
  - Ticket #308 - Automembership plugin fails if data and config area mixed in the plugin configuration
  - Ticket #292 - logconv.pl reporting unindexed search with different search base than shown in access logs
  - 6f8680a coverity 12563 Read from pointer after free (fix 2)
  - e6a9b22 coverity 12563 Read from pointer after free
  - 245d494 Config changes fail because of unknown attribute "internalModifiersname"
  - Ticket #191  - Implement SO_KEEPALIVE in network calls
  - Ticket #289 - allow betxn plugin config changes
  - 93adf5f destroy the entry cache and dn cache in the dse post op delete callback
  - e2532d8 init txn thread private data for all database modes
  - Ticket #291 - cannot use & in a sasl map search filter
  - 6bf6e79 Schema Reload crash fix
  - 60b2d12 Fixing compiler warnings
  - Trac Ticket #260 - 389 DS does not support multiple paging controls on a single connection
  - Ticket #302 - use thread local storage for internalModifiersName & internalCreatorsName
  - fdcc256 Minor bug fix introcuded by commit 69c9f3bf7dd9fe2cadd5eae0ab72ce218b78820e
  - Ticket #306 - void function cannot return value
  - ticket 181 - Allow PAM passthru plug-in to have multiple config entries
  - ticket 211 - Use of uninitialized variables in ldbm_back_modify()
  - Ticket #74 - Add schema for DNA plugin (RFE)
  - Ticket #301 - implement transaction support using thread local storage
  - Ticket #211 - dnaNextValue gets incremented even if the user addition fails
  - 144af59 coverity uninit var and resource leak
  - Trac Ticket #34 - remove-ds.pl does not remove everything
  - Trac Ticket #169 - allow 389 to use db5
  - bc78101 fix compiler warning in acct policy plugin
  - Trac Ticket #84 - 389 Directory Server Unnecessary Checkpoints
  - Trac Ticket #27 - SASL/PLAIN binds do not work
  - Ticket #129 - Should only update modifyTimestamp/modifiersName on MODIFYops
  - Ticket #17 - new replication optimizations


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.4-4
changelog:
  - Ticket #46 - (revised) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #66 - 389-ds-base spec file does not have a BuildRequires on gcc-c++


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.3-1
changelog:
  - b05139b memleak in normalize_mods2bvals
  - c0eea24 memleak in mep_parse_config_entry
  - 90bc9eb handle null smods
  - Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash
  - Ticket #306 - void function cannot return value
  - ticket 304 - Fix kernel version checking in dsktune


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-1
changelog:
  - Trac Ticket #298 - crash when replicating orphaned tombstone entry
  - Ticket #281 - TLS not working with latest openldap
  - Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails
  - Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.0-1
changelog:
  - Ticket 284 - Remove unnecessary SNMP MIB files
  - Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5?
  - Ticket 175 - logconv.pl improvements


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.10.rc1
changelog:
  - ad9dd30 coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers to system resources
  - Ticket #281 - TLS not working with latest openldap
  - Ticket #280 - extensible binary filters do not work
  - Ticket #279 - filter normalization does not use matching rules
  - Trac Ticket #275 - Invalid read reported by valgrind
  - Ticket #277 - cannot set repl referrals or state
  - Ticket #278 - Schema replication update failed: Invalid syntax
  - Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through Auth plugin is enabled
  - Ticket #13 - slapd process exits when put the database on read only mode while updates are coming to the server
  - Ticket #87 - Manpages fixes
  - c493fb4 fix a couple of minor coverity issues
  - Ticket #55 - Limit of 1024 characters for nsMatchingRule
  - Trac Ticket #274 - Reindexing entryrdn fails if ancestors are also tombstoned
  - Ticket #6 - protocol error from proxied auth operation
  - Ticket #38 - nisDomain schema is incorrect
  - Ticket #273 - ruv tombstone searches don't work after reindex entryrdn
  - Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword
  - Ticket #22 - RFE: Support sendmail LDAP routing schema
  - Ticket #161 - Review and address latest Coverity issues
  - Ticket #140 - incorrect memset parameters
  - Trac Ticket 35 - Log not clear enough on schema errors
  - Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn
  - Trac Ticket #52 - FQDN set to nsslapd-listenhost makes the server start fail if IPv4-mapped-IPv6 address is given


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.8.a7
changelog:
  - fixes for systemd - remove .pid files after shutting down servers
  - Ticket #263 - add systemd include directive
  - Ticket #264 - upgrade needs better check for "server is running"


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.7.a7
changelog:
  - Ticket #262 - pid file not removed with systemd
  - Ticket #50 - server should not call a plugin after the plugin close function is called
  - Ticket #18 - Data inconsitency during replication
  - Ticket #49 - better handling for server shutdown while long running tasks are active
  - Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead
  - Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same
  - Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI
  - 6aaeb77 add a hack to disable sasl hostname canonicalization
  - Ticket 168 - minssf should not apply to rootdse
  - Ticket #177 - logconv.pl doesn't detect restarts
  - Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating
  - Ticket 75 - Unconfigure plugin opperations are being called.
  - Ticket 26 - Please support setting defaultNamingContext in the rootdse.
  - Ticket #71 - unable to delete managed entry config
  - Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock
  - Ticket #256 - debug build assertion in ACL_EvalDestroy()
  - Ticket #4 - bak2db gets stuck in infinite loop
  - Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS
  - Ticket #3: acl cache overflown problem
  - Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations
  - Ticket 2 - If node entries are tombstone'd, subordinate entries fail to get the full DN.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.6.a6
changelog:
  - Bug 755725 - 389 programs linked against openldap crash during shutdown
  - Bug 755754 - Unable to start dirsrv service using systemd
  - Bug 745259 - Incorrect entryUSN index under high load in replicated environment
  - d439e3a use slapi_hexchar2int and slapi_str_to_u8 everywhere
  - 5910551 csn_init_as_string should not use sscanf
  - b53ba00 reduce calls to csn_as_string and slapi_log_error
  - c897267 fix member variable name error in slapi_uniqueIDFormat
  - 66808e5 uniqueid formatting - use slapi_u8_to_hex instead of sprintf
  - 580a875 csn_as_string - use slapi_uN_to_hex instead of sprintf
  - Bug 751645 - crash when simple paged fails to send entry to client
  - Bug 752155 - Use restorecon after creating init script lock file


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.5.a5
changelog:
  - Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD'
  - Bug 750625 750624 750622 744946 Coverity issues
  - Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication
  - Bug 748575 - rhds81 modrn operation and 100% cpu use in replication
  - Bug 745259 - Incorrect entryUSN index under high load in replicated environment
  - f639711 Reduce the number of DN normalization
  - c06a8fa Keep unhashed password psuedo-attribute in the adding entry
  - Bug 744945 - nsslapd-counters attribute value cannot be set to "off"
  - 8d3b921 Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular
  - d316a67 Change referential integrity to be a betxnpostoperation plugin


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.4.a4
changelog:
  - Bug 741744 - part3 - MOD operations with chained delete/add get back error 53
  - 1d2f5a0 make memberof transaction aware and able to be a betxnpostoperation plug in
  - b6d3ba7 pass the plugin config entry to the plugin init function
  - 28f7bfb set the ENTRY_POST_OP for modrdn betxnpostoperation plugins
  - Bug 743966 - Compiler warnings in account usability plugin


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.a2-0.2
changelog:
  - Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations
  - Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config
  - Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.9-1
changelog:
  - Bug 735121 - simple paged search + ip/dns based ACI hangs server
  - Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code
  - Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server
  - Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.8-1
changelog:
  - Bug 732153 - subtree and user account lockout policies implemented?
  - Bug 722292 - Entries in DS are not updated properly when using WinSync API


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.7-1
changelog:
  - Bug 733103 - large targetattr list with syntax errors cause server to crash or hang
  - Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining
  - Bug 732541 - Ignore error 32 when adding automember config
  - Bug 728592 - Allow ns-slapd to start with an invalid server cert


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.6-1
changelog:
  - Bug 728510 - Run dirsync after sending updates to AD
  - Bug 729717 - Fatal error messages when syncing deletes from AD
  - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working.
  - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed again - separate tests for atomic ops and atomic bool cas


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.5-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix another coverity NULL deref in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.4-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix coverity NULL deref in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.3-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  previous patch broke build on el5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.1-2
changelog:
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed to use configure test for GCC provided 64-bit atomic functions


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.1-1
changelog:
  - Bug 663752 - Cert renewal for attrcrypt and encchangelog
  -   this was "re-fixed" due to a deadlock condition with cl2ldif task cancel
  - Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma
  - Bug 725743 - Make memberOf use PRMonitor for it's operation lock
  - Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.0-1
changelog:
  - Bug 720059 - RDN with % can cause crashes or missing entries
  - Bug 709468 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2.
  - Bug 691313 - Need TLS/SSL error messages in repl status and errors log
  - Bug 712855 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not
  - Bug 713209 - Update sudo schema
  - Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9
  - Bug 718303 - Intensive updates on masters could break the consumer's cache
  - Bug 711679 - unresponsive LDAP service when deleting vlv on replica


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9-0.2.a2
changelog:
  - 389-ds-base-1.2.9.a2
  - look for separate openldap ldif library
  - Split automember regex rules into separate entries
  - writing Inf file shows SchemaFile = ARRAY(0xhexnum)
  - add support for ldif files with changetype: add
  - Bug 716980 - winsync uses old AD entry if new one not found
  - Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9
  - bump console version to 1.2.6
  - Bug 711679 - unresponsive LDAP service when deleting vlv on replica
  - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file
  - Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package
  - Bug 663752 - Cert renewal for attrcrypt and encchangelog
  - Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute
  - Bug 711906 - ns-slapd segfaults using suffix referrals
  - Bug 707384 - only allow FIPS approved cipher suites in FIPS mode
  - Bug 710377 - Import with chain-on-update crashes ns-slapd
  - Bug 709826 - Memory leak: when extra referrals configured


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.3-1
changelog:
  - 389-ds-base-1.2.8.3
  - Bug 700145 - userpasswd not replicating
  - Bug 700557 - Linked attrs callbacks access free'd pointers after close
  - Bug 694336 - Group sync hangs Windows initial Sync
  - Bug 700215 - ldclt core dumps
  - Bug 695779 - windows sync can lose old values when a new value is added
  - Bug 697027 - 12 - minor memory leaks found by Valgrind + TET


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1
changelog:
  - 389-ds-base-1.2.8.2
  - Bug 696407 - If an entry with a mixed case RDN is turned to be
  -    a tombstone, it fails to assemble DN from entryrdn


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.0-1
changelog:
  - 389-ds-base-1.2.8.0
  - Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1
  - Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1
  - Bug 693466 - Unable to change schema online
  - Bug 693503 - matching rules do not inherit from superior attribute type
  - Bug 693455 - nsMatchingRule does not work with multiple values
  - Bug 693451 - cannot use localized matching rules
  - Bug 692331 - Segfault on index update during full replication push on 1.2.7.5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.10.rc5
changelog:
  - 389-ds-base-1.2.8.rc5
  - Bug 692469 - Replica install fails after step for "enable GSSAPI for replication"


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.9.rc4
changelog:
  - 389-ds-base-1.2.8.rc4
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv
  ice is restarted
  - 389-ds-base-1.2.8.rc3
  - Bug 690955 - Mrclone fails due to the replica generation id mismatch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.8.rc2
changelog:
  - 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2
  - Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences
  - Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format
  - Bug 681015 - RFE: allow fine grained password policy duration attributes
  -              in days, hours, minutes, as well
  - Bug 684996 - Exported tombstone cannot be imported correctly
  - Bug 683250 - slapd crashing when traffic replayed
  - Bug 668909 - Can't modify replication agreement in some cases
  - Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1
  - Bug 644784 - Memory leak in "testbind.c" plugin
  - Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.6.rc1
changelog:
  - 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1
  - Bug 518890 - setup-ds-admin.pl - improve hostname validation
  - Bug 681015 - RFE: allow fine grained password policy duration attributes in 
  -     days, hours, minutes, as well
  - Bug 514190 - setup-ds-admin.pl --debug does not log to file
  - Bug 680555 - ns-slapd segfaults if I have more than 100 DBs
  - Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically
  - Bug 674852 - crash in ldap-agent when using OpenLDAP
  - Bug 679978 - modifying attr value crashes the server, which is supposed to
  -     be indexed as substring type, but has octetstring syntax
  - Bug 676655 - winsync stops working after server restart
  - Bug 677705 - ds-logpipe.py script is failing to validate "-s" and
  -     "--serverpid" options with "-t".
  - Bug 625424 - repl-monitor.pl doesn't work in hub node


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.4.a3
changelog:
  - do not create /var/run/dirsrv - setup will create it instead
  - remove the fedora-ds initscript upgrade stuff - we do not support that anymore
  - convert the remaining lua stuff to plain old shell script


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.3.a3
changelog:
  - 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3
  - Bug 675320 - empty modify operation with repl on or lastmod off will crash server
  - Bug 675265 - preventryusn gets added to entries on a failed delete
  - Bug 677774 - added support for tmpfiles.d
  - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search
  es
  - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH
  - Bug 671199 - Don't allow other to write to rundir
  - Bug 678646 - Ignore tombstone operations in managed entry plug-in
  - Bug 676053 - export task followed by import task causes cache assertion
  - Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8
  - Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used
  - Bug 676689 - crash while adding a new user to be synced to windows
  - Bug 604881 - admin server log files have incorrect permissions/ownerships
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv
  ice is restarted
  - Bug 675853 - dirsrv crash segfault in need_new_pw()


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.2.a2
changelog:
  - 1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2
  - Bug 674430 - Improve error messages for attribute uniqueness
  - Bug 616213 - insufficient stack size for HP-UX on PA-RISC
  - Bug 615052 - intrinsics and 64-bit atomics code fails to compile
  -    on PA-RISC
  - Bug 151705 - Need to update Console Cipher Preferences with new ciphers
  - Bug 668862 - init scripts return wrong error code
  - Bug 670616 - Allow SSF to be set for local (ldapi) connections
  - Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the 
  -    log output to the text file
  - Bug 668619 - slapd stops responding
  - Bug 624547 - attrcrypt should query the given slot/token for
  -    supported ciphers
  - Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any 
  -    error message in logs


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.3-1
changelog:
  - 1.2.7.3 release - git tag 389-ds-base-1.2.7.3
  - Bug 658312 - Invalid free in Managed Entry plug-in
  - Bug 641944 - Don't normalize non-DN RDN values


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.2-1
changelog:
  - 1.2.7.2 release - git tag 389-ds-base-1.2.7.2
  - Bug 659456 - Incorrect usage of ber_printf() in winsync code
  - Bug 658309 - Process escaped characters in managed entry mappings
  - Bug 197886 - Initialize return value for UUID generation code
  - Bug 658312 - Allow mapped attribute types to be quoted
  - Bug 197886 - Avoid overflow of UUID generator


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.1-1
changelog:
  - 1.2.7.1 release - git tag 389-ds-base-1.2.7.1
  - Bug 656515 - Allow Name and Optional UID syntax for grouping attributes
  - Bug 656392 - Remove calls to ber_err_print()
  - Bug 625950 - hash nsslapd-rootpw changes in audit log


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.6.a5
changelog:
  - 1.2.7.a5 release - git tag 389-ds-base-1.2.7.a5
  - Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-ref
  erral)
  - Bug 635009 - Add one-way AD sync capability
  - Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot
  - put replication config entries in separate file
  - Bug 567282 - server can not abandon searchRequest of "simple paged results"
  - Bug 329751 - "nested" filtered roles searches candidates more than needed
  - Bug 521088 - DNA should check ACLs before getting a value from the range


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.5.a4
changelog:
  - 1.2.7.a4 release - git tag 389-ds-base-1.2.7.a4
  - Bug 647932 - multiple memberOf configuration adding memberOf where there is 
  no member
  - Bug 491733 - dbtest crashes
  - Bug 606545 - core schema should include numSubordinates
  - Bug 638773 - permissions too loose on pid and lock files
  - Bug 189985 - Improve attribute uniqueness error message
  - Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operat
  ions
  - Bug 619633 - Make attribute uniqueness obey requiredObjectClass


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.4.a3
changelog:
  - 1.2.7.a3 release - a2 was never released - this is a rebuild to pick up
  - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
  - Adding the ancestorid fix code to ##upgradednformat.pl.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.3.a3
changelog:
  - 1.2.7.a3 release - a2 was never released
  - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
  - Bug 629681 - Retro Changelog trimming does not behave as expected
  - Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif
  -              are not upgraded in the server instance schema dir


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.2.a2
changelog:
  - 1.2.7.a2 release - a1 was the OpenLDAP testday release
  - git tag 389-ds-base-1.2.7.a2
  - added openldap support on platforms that use openldap with moznss
  - for crypto (F-14 and later)
  - many bug fixes
  - Account Policy Plugin (keep track of last login, disable old accounts)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6.1-1
changelog:
  - This is the 1.2.6.1 release - git tag 389-ds-base-1.2.6.1
  - Bug 634561 - Server crushes when using Windows Sync Agreement
  - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self
  - Bug 612264 - ACI issue with (targetattr='userPassword')
  - Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager"
  - Bug 631862 - crash - delete entries not in cache + referint


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.11.rc7
changelog:
  - 1.2.6 release candidate 7
  - git tag 389-ds-base-1.2.6.rc7
  - Bug 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.10.rc6
changelog:
  - 1.2.6 release candidate 6
  - git tag 389-ds-base-1.2.6.rc6
  - Bug 617013 - repl-monitor.pl use cpu upto 90%
  - Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats
  - Bug 547503 - replication broken again, with 389 MMR replication and TCP errors
  - Bug 613833 - Allow dirsrv_t to bind to rpc ports
  - Bug 612242 - membership change on DS does not show on AD
  - Bug 617629 - Missing aliases in new schema files
  - Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears
  - Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments
  - Bug 617862 - Replication: Unable to delete tombstone errors
  - Bug 594745 - Get rid of dirsrv_lib_t label


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.9.rc3
changelog:
  - make selinux-devel explicit Require the base package in order
  - to comply with Fedora Licensing Guidelines


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.8.rc3
changelog:
  - 1.2.6 release candidate 3
  - git tag 389-ds-base-1.2.6.rc3
  - Bug 603942 - null deref in _ger_parse_control() for subjectdn
  - 609256  - Selinux: pwdhash fails if called via Admin Server CGI
  - 578296  - Attribute type entrydn needs to be added when subtree rename switch is on
  - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl
  - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
  - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
  - 606920 - anonymous resource limit - nstimelimit - also applied to "cn=directory manager"


author: Nathan Kinder <nkinder@redhat.com> - 1.2.6-0.4.a3
changelog:
  - 1.2.6.a3 release
  - add managed entries plug-in
  - many bug fixes
  - moved selinux subpackage into base package


author: Rich Megginson <rmeggins@redhat.com> - 1.2.4-1
changelog:
  - 1.2.4 release
  - resolves bug 221905 - added support for Salted MD5 (SMD5) passwords - primarily for migration
  - resolves bug 529258 - Make upgrade remove obsolete schema from 99user.ldif


author: Rich Megginson <rmeggins@redhat.com> - 1.2.3-1
changelog:
  - 1.2.3 release
  - added template-initconfig to %files
  - %posttrans now runs update to update the server instances
  - servers are shutdown, then restarted if running before install
  - scriptlets mostly use lua now to pass data among scriptlet phases


author: Rich Megginson <rmeggins@redhat.com> - 1.2.2-1
changelog:
  - backed out - added template-initconfig to %files - this change is for the next major release
  - bump version to 1.2.2
  - fix reopened 509472 db2index all does not reindex all the db backends correctly
  - fix 518520 -  pre hashed salted passwords do not work
  - see https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of
  - bugs fixed in 1.2.2


author: Rich Megginson <rmeggins@redhat.com> - 1.2.1-1
changelog:
  - change name to 389
  - change version to 1.2.1
  - added initial support for numeric string syntax
  - added initial support for syntax validation
  - added initial support for paged results including sorting


author: Rich Megginson <rmeggins@redhat.com> - 1.2.0-4
changelog:
  - final release 1.2.0
  - Resolves: bug 475338 - LOG: the intenal type of maxlogsize, maxdiskspace and minfreespace should be 64-bit integer
  - Resolves: bug 496836 - SNMP ldap-agent on Solaris: Unable to open semaphore for server: 389
  - CVS tag: FedoraDirSvr_1_2_0 FedoraDirSvr_1_2_0_20090428


author: Rich Megginson <rmeggins@redhat.com> - 1.2.0-1
changelog:
  - new release 1.2.0
  - Made devel package depend on mozldap-devel
  - only create run dir if it does not exist
  - CVS tag: FedoraDirSvr_1_2_0_RC1 FedoraDirSvr_1_2_0_RC1_20090330


author: Rich Megginson <rmeggins@redhat.com> - 1.1.2-1
changelog:
  - This is the 1.1.2 release.  The bugs fixed can be found here
  - https://bugzilla.redhat.com/showdependencytree.cgi?id=452721
  - Added winsync-plugin.h to the devel subpackage


author: Tom "spot" Callaway <tcallawa@redhat.com> - 1.1.0.1-3
changelog:
  - add patch to allow server to work with NSS 3.11.99 and later
  - do NSS_Init after fork but before detaching from console


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0.1-1
changelog:
  - Resolves bug 434403 - GCC 4.3 build fails
  - Rolled new source tarball which includes Nathan's fix for the struct ucred
  - NOTE: Change version back to 1.1.1 for next release
  - this release was pulled from CVS tag FedoraDirSvr110_gcc43


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-4
changelog:
  - This is the GA release of Fedora DS 1.1
  - Removed version numbers for BuildRequires and Requires
  - Added full URL to source tarball


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-2.0
changelog:
  - This is the beta2 release
  - new file added to package - /etc/sysconfig/dirsrv - for setting
  - daemon environment as is usual in other linux daemons


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-1.2
changelog:
  - fix build breakage due to open()
  - mock could not find BuildRequires: db4-devel >= 4.2.52
  - mock works if >= version is removed - it correctly finds db4.6


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.3.20070720
changelog:
  - Added Requires for perldap, cyrus sasl plugins
  - Removed template-migrate* files
  - Added perl module directory
  - Removed install.inf - setup-ds.pl can now easily generate one


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070320
changelog:
  - update to latest sources
  - added migrateTo11 to allow migrating instances from 1.0.x to 1.1
  - ldapi support
  - fixed pam passthru plugin ENTRY method


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070223
changelog:
  - Renamed package to fedora-ds-base, but keep names of paths/files/services the same
  - use the shortname macro (fedora-ds) for names of paths, files, and services instead
  - of name, so that way we can continue to use e.g. /etc/fedora-ds instead of /etc/fedora-ds-base
  - updated to latest sources


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070213
changelog:
  - More cleanup suggested by Dennis Gilmore
  - This is the fedora extras candidate based on cvs tag FedoraDirSvr110a1


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-8.el4.20070125
changelog:
  - added logconv.pl
  - added slapi-plugin.h to devel package
  - added explicit dirs for /var/log/fedora-ds et. al.


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-6.el4.20070125
changelog:
  - Move the plugin *.so files into the main package instead of the devel
  - package because they are loaded directly by name via dlopen


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-1.el4.cvs20070119
changelog:
  - Changed version to 1.1.0 and added Release 1.el4.cvs20070119
  - merged in changes from Fedora Extras candidate spec file


author: Dennis Gilmore <dennis@ausil.us> - 1.1-0.1.cvs20070108
changelog:
  - update to a cvs snapshot
  - fedorafy the spec 
  - create -devel subpackage
  - apply a patch to use mozldap not mozldap6
  - apply a patch to allow --prefix to work correctly


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-16
changelog:
  - Fixed the problem where the server would crash upon shutdown in dblayer
  - due to a race condition among the database housekeeping threads
  - Fix a problem with normalized absolute paths for db directories


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-15
changelog:
  - Touch all of the ldap/admin/src/scripts/*.in files so that they
  - will be newer than their corresponding script template files, so
  - that make will rebuild them.


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-9
changelog:
  - The template scripts needed to use @libdir@ instead of hardcoding
  - /usr/lib
  - Use make DESTDIR=$RPM_BUILD_ROOT install instead of % makeinstall
  - do the actual build in a "built" subdirectory, until we remove
  - the old script templates


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.6-4
changelog:
  - don't package python2 files for rhnlib (tkasparek@redhat.com)
  - be compliant with new packaging guidelines when requiring python2 packages
    (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.4-1
changelog:
  - 1494389 - Revert "[1260527] RHEL7 reboot loop"
  - 1494389 - Revert "fix except in rhnlib to make it compatible with Python 2.4"


author: Gennadii Altukhov <grinrag@gmail.com> 2.8.3-1
changelog:
  - Python's OpenSSL.SSL.Connection method for getting state was renamed. Now
    before run it we should determinate its name via getattr built-in function.


author: Gennadii Altukhov <grinrag@gmail.com> 2.8.1-1
changelog:
  - 1471045 - check a state of handshake before shutdown SSL connection
  - Bumping package versions for 2.8.


author: Jan Dobes 2.7.2-1
changelog:
  - Let the memory usage for ssl-memleak-test stabilize a bit. During the test
    run, the first memory check is often done too quickly, and all necessary
    memory is not allocated yet, ending is false negative test result.
  - Updated links to github in spec files
  - Migrating Fedorahosted to GitHub


author: Gennadii Altukhov <galt@redhat.com> 2.6.1-1
changelog:
  - 1381343 - make rhncfg action configfile compatible with Python 2/3
  - Bumping package versions for 2.6.


author: Jan Dobes 2.5.84-1
changelog:
  - just set one required attribute to be compatible with all xmlrpclib versions
  - fixed SyntaxError: invalid syntax ' .. = b ' to work in python 2.4


author: Grant Gainey 2.5.83-1
changelog:
  - revert contruction errors='ignore' for python3
  - python <2.7 fix 'TypeError: encode() takes no keyword arguments'


author: Tomas Kasparek <tkasparek@redhat.com> 2.5.76-1
changelog:
  - use single variable instead of a tuple
  - exception rising has changed in python 3
  - print is function in python3
  - make exceptions compatible with python 2.4 to 3.3


author: Stephen Herr <sherr@redhat.com> 2.5.56-1
changelog:
  - 947639 - make Proxy timeouts configurable
  - Purging %changelog entries preceding Spacewalk 1.0, in active packages.


author: Martin Minar <mminar@redhat.com> 2.5.48-1
changelog:
  - Change PASS percentage after few attempts and print percentage in case of
    failure (jhutar@redhat.com)


author: Miroslav Suchý 2.5.39-1
changelog:
  - idn_ascii_to_pune() have to return string (msuchy@redhat.com)
  - Revert "idn_unicode_to_pune() have to return string" (msuchy@redhat.com)
  - update copyright years (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 2.5.35-1
changelog:
  - 683200 - create idn_ascii_to_pune() and idn_pune_to_unicode(), which will
    take care about corner cases of encodings.idna


author: Miroslav Suchý <msuchy@redhat.com> 2.5.34-1
changelog:
  - Revert "Revert "get_server_capability() is defined twice in osad and rhncfg,
    merge and move to rhnlib and make it member of rpclib.Server""
    (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 2.5.32-1
changelog:
  - get_server_capability() is defined twice in osad and rhncfg, merge and move
    to rhnlib and make it member of rpclib.Server
  - Updating the copyright years to include 2010.


author: Miroslav Suchý <msuchy@redhat.com> 2.5.27-1
changelog:
  - add copyright file - this is required by Debian policy
  - update GPLv2 license file
  - 618267 - simplify regexp


author: Miroslav Suchý <msuchy@redhat.com> 2.5.25-1
changelog:
  - 595837 - write nice error in case of "connection reset by peer" and xmlrpc
    protocol error (msuchy@redhat.com)
  - 583980 - replace fcntl.O_NDELAY with os.O_NDELAY, for newer Pythons.
    (jpazdziora@redhat.com)
  - 583020 - need to initialize self.send_handler for the class Server as well.
    (jpazdziora@redhat.com)
  - Removing server from cmd-line (slukasik@redhat.com)
  - Adding port number to command line args (slukasik@redhat.com)
  - Adding shebang (slukasik@redhat.com)
  - Fixing return value (slukasik@redhat.com)
  - Fixing typo. (slukasik@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 2.8.2-1
changelog:
  - install files into python_sitelib/python3_sitelib
  - split spacewalk-koan into python2/python3 specific packages


author: Michael Mraka <michael.mraka@redhat.com> 2.8.1-1
changelog:
  - purged changelog entries for Spacewalk 2.0 and older
  - use standard brp-python-bytecompile
  - Bumping package versions for 2.8.


author: Jan Dobes 2.7.1-1
changelog:
  - Updated links to github in spec files
  - Migrating Fedorahosted to GitHub
  - Bumping package versions for 2.7.


author: Jan Dobes 2.6.1-1
changelog:
  - embed_kickstart was renamed to embed_autoinst in koan upstream
  - Bumping package versions for 2.6.


author: Stephen Herr <sherr@redhat.com> 2.3.1-1
changelog:
  - 1187482 - make file preservation work again with new upstream koan
  - spacewalk-koan: improved merge-rd
  - Bumping package versions for 2.3.


author: Stephen Herr <sherr@redhat.com> 2.2.2-1
changelog:
  - 1063409 - guest provisioned on RHEL 7 host have no graphical console
  - Merge pull request #9 from dyordano/1071657


author: Stephen Herr <sherr@redhat.com> 2.1.1-1
changelog:
  - 988428 - Mark spacewalk-koan as correctly requiring the xz package
  - Bumping package versions for 2.1.


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 10.6.9-1
changelog:
  - Rebased to PKI 10.6.9
  - Bug #1629048 - X500Name.directoryStringEncodingOrder overridden by CSR encoding
  - Bug #1652269 - Replace Nuxwdog
  - Bug #1656856 - Need Method to Include SKI in CA Signing Certificate Request


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 10.6.8-1
changelog:
  - Rebased to PKI 10.6.8
  - Bug #1602659 - Fix issues found by covscan
  - Bug #1566360 - Fix missing serial number from pki-server subsystem-cert-find


author: Alexander Bokovoy <abokovoy@redhat.com> - 10.6.6-2
changelog:
  - Use platform-python interpreter
  - Bug #1620066 - pkispawn crashes as /usr/bin/python3 does not exist


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 10.6.4-3
changelog:
  - Patch PKI to use Jackson 2 and avoid Jackson 1 dependency.
    Add direct dependency on slf4j-jdk14.


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 10.6.2-3
changelog:
  - Fixed macro expressions
  - Bug #1566606 - pki-core: Switch to Python 3
  - Bug #1590467 - pki-core: Drop pylint dependency from RHEL 8


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 10.6.1-1
changelog:
  - Rebased to PKI 10.6.1
  - Bug #1559047 - pki-core misses a dependency to pki-symkey
  - Bug #1573094 - FreeIPA external CA installation fails


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 10.6.0-0.3
changelog:
  - Iryna Shcherbina <ishcherb@redhat.com>: Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
  - Rebased to PKI 10.6.0 beta2


author: Michal Sekletár <msekleta@redhat.com> - 11.7.3-2
changelog:
  - sysstat's buildsystem doesn't really use LDFLAGS, we have to merge CFLAGS and LDFLAGS to get binaries with full RELRO (#1624177)


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.6-1
changelog:
  - resolves: #972508
    updated to 10.1.6
  - resolves: #993394
    fixed FTBFS (added BR on systemd)
  - install the docs in the new pkgdocdir
    (thanks to Mathieu Bridon <bochecha@fedoraproject.org> for the patch)


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.2-2
changelog:
  - added new -y option to iostat command to skip first since boot report if
    displaying multiple reports


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.2-1
changelog:
  - resolves: #863791
    updated to 10.1.2
  - resolves: #850333
    migrated to the new systemd-rpm macros
  - cleaned .spec file


author: Peter Schiffer <pschiffe@redhat.com> - 10.1.1-1
changelog:
  - resolves: #844387
    update to 10.1.1
  - keep log files for 28 days instead of 7
  - collect all aditional statistics


author: Ivana Hutarova Varekova <varekova@redhat.com> - 10.0.0-4
changelog:
  - close the file descriptor in a special situation in read_uoptime function
  - fix the number on open files in cifsiostat output


author: Ivana Hutarova Varekova <varekova@redhat.com> - 9.0.6.1-7
changelog:
  - remove needless DOCDIR setting
  - remove needless INIT_DIR setting
  - fix the problem with --disable-man-group option


author: Ivana Varekova <varekova@redhat.com> - 9.0.4-3
changelog:
  - fix init script - add INIT INFO flags (#522740)
    and add condrestart, try-restart and force-reload (#522743)


author: Ivana Varekova <varekova@redhat.com> - 8.0.2-2
changelog:
  - change license tag
  - remove sysstat.crond source (add -d)
  - remove obsolete sysconfig file
  - spec file cleanup


author: Ivana Varekova <varekova@redhat.com> - 8.0.1-1
changelog:
  - update to 8.0.1
  - remove useless patches
  - spec file cleanup
  - remove smp build flag (ar problem)
  - add libdir flags


author: Dave Anderson <anderson@redhat.com> - 7.2.6-2
changelog:
  - Fix "p" command regression
    Resolves: rhbz#1718417  
  - Fix arm64 debug kernel read error message during initialization
    Resolves: rhbz#1718736


author: Dave Anderson <anderson@redhat.com> - 7.2.6-1
changelog:
  - Rebase to latest upstream sources
    Resolves: rhbz#1686560 
  - Utilize the VMCOREINFO PT_NOTE in /proc/kcore header
    Resolves: rhbz#1627528
  - Support extraction of CONFIG_PROC_VMCORE_DEVICE_DUMP data from dumpfile header
    Resolves: rhbz#1702535


author: Dave Anderson <anderson@redhat.com> - 7.2.3-16
changelog:
  - Resurrect "dev -p" option.
  - Fix "dev -[dD]" options to account for request_queue.in_flight[] removal.
    Resolves: rhbz#1662039
  - Command line input fixes
    Resolves: rhbz#1664061


author: Dave Anderson <anderson@redhat.com> - 7.2.3-12
changelog:
  - Address covscan issues
    Resolves: rhbz#1602466
  - Fix for x86_64 5-level pagetable vmalloc range expansion
    Resolves: rhbz#1637125


author: Dave Anderson <anderson@redhat.com> - 7.2.0-1
changelog:
  - Rebase to upstream version 7.2.0
  - Rebase to github commits da9bd35a_to_e2efacdd.patch
    Resolves: rhbz#1497316
  - ppc64le: fix for "WARNING: cannot access vmalloc'd module memory"
    Resolves: rhbz#1485391
  - Support for analyzing an SADUMP crash dump if KASLR is enabled
    Resolves: rhbz#1504467


author: Dave Anderson <anderson@redhat.com> - 7.1.9-2
changelog:
  - Rebase to github commits 87179026 to ad3b8476
    Resolves: rhbz#1393534
  - Prohibit native gdb disassemble command when KASLR
    Resolves: rhbz#1445649


author: Dave Anderson <anderson@redhat.com> - 7.1.9-1
changelog:
  - Rebase to upstream version 7.1.9
    Resolves: rhbz#1393534
  - Fix gdb "set scope" option for KASLR kernels.
    Resolves: rhbz#1440725
  - Fix for the determination of the x86_64 "phys_base" value when it is
    not passed in the VMCOREINFO data of ELF vmcores
    Resolves: rhbz#1439170


author: Dave Anderson <anderson@redhat.com> - 7.1.8-1
changelog:
  - Rebase to upstream version 7.1.8
    Resolves: rhbz#1393534
  - POWER9 - Power ISA 3.0 related support for crash utility
    Resolves: rhbz#1368711
  - crash package update - ppc64/ppc64le
    Resolves: rhbz#1384944
  - exception RIP: unknown or invalid address
    Resolves: rhbz#1350457
  - Crash does not always parse correctly the modules symbol tables
    Resolves: rhbz#1360415
  - ARM64: crash live system from: WARNING: cannot read linux_banner string
    Resolves: rhbz#1392007
  - kmem: invalid structure member offset: page_count
    Resolves: rhbz#1392011
  - Kernel address space randomization [KASLR] support 
    Resolves: rhbz#1392658
  - invalid structure size: tnt
    Resolves: rhbz#1420653


author: Dave Anderson <anderson@redhat.com> - 7.1.5-2
changelog:
  - Fix for kernel module symbol gathering when the ordering of module
    symbol name strings does not match the order of the kernel_symbol
    structures.
  - Resolves: rhbz#1375130


author: Dave Anderson <anderson@redhat.com> - 7.1.5-1
changelog:
  - Rebase to upstream version 7.1.5
    Resolves: rhbz#1292566
  - Decode clflushopt instruction
    Resolves: rhbz#1262479
  - Support AArch64 QEMU generated dumps 
    Resolves: rhbz#1299873
  - crash: zero-size memory allocation (aarch64) 
    Resolves: rhbz#1312738


author: Dave Anderson <anderson@redhat.com> - 7.1.2-3
changelog:
  - crash fails to read or wrongly reads some parts of memory in sadump vmcore format
    Resolves: rhbz#1282997


author: Dave Anderson <anderson@redhat.com> - 7.1.2-2
changelog:
  - Fix "kmem -s <address>", "bt -F[F]", and "rd -S[S]" options in kernels 
    configured with CONFIG_SLUB having multiple-page slabs.
    Resolves: rhbz#1244003
  - Fix for SIGSEGV generated by "bt -[f|F]" in ARM64 kernels.
    Resolves: rhbz#1248859


author: Dave Anderson <anderson@redhat.com> - 7.1.2-1
changelog:
  - Rebase to upstream version 7.1.2
    Resolves: rhbz#1207696
  - Fix several ppc64 backtrace issues
    Resolves: rhbz#1235447


author: Dave Anderson <anderson@redhat.com> - 7.1.1-1
changelog:
  - Rebase to upstream version 7.1.1
    Resolves: rhbz#1207696
  - Display s390x vector registers from a kernel dump.
    Resolves: rhbz#1182161
  - Fix date displayed on initial system banner and by the "sys" command on ARM64.
    Resolves: rhbz#1223044
  - Fix ARM64 page size calculation on 4.1 and later kernels.
    Resolves: rhbz#1222645


author: Dave Anderson <anderson@redhat.com> - 7.0.9-5
changelog:
  - Support new sadump format that can represent more than 16 TB physical memory space
    Resolves: rhbz#1182383


author: Dave Anderson <anderson@redhat.com> - 7.0.9-2
changelog:
  - Use registers from QEMU-generated ELF and compressed kdump headers 
    for active task backtraces.
  - Resolves: rhbz#1169555


author: Dave Anderson <anderson@redhat.com> - 7.0.8-2
changelog:
  - Fix ps performance patch regression on live systems.
  - Resolves: rhbz#1134177
  - Minor build-related fixes for ppc64le.
  - Resolves: rhbz#1123991


author: Dave Anderson <anderson@redhat.com> - 7.0.8-1
changelog:
  - Rebase to upstream version 7.0.8.
  - Resolves: rhbz#1110513
  - Fix to calculate the physical base address of dumpfiles created
    by a "virsh dump" of an OVMF guest.
  - Resolves: rhbz#1080698
  - Support for aarch64 architecture.
  - Resolves: rhbz#1110551
  - Fix to prevent crash from spinning endlessly on a corrupted/truncated
    dumpfile whose bitmap data is not wholly contained within the file.
  - Resolves: rhbz#1114088
  - Support for ppc64le architecture.
  - Resolves: rhbz#1123991


author: Dave Anderson <anderson@redhat.com> - 7.0.2-5
changelog:
  - Fix for a missing kernel-mode exception frame dump by the x86_64 
    "bt" command if a page fault was generated by a bogus RIP.
  - Resolves: rhbz#1057353
  - Fix for the x86_64 "bt" command to prevent an unwarranted message
    indicating "WARNING: possibly bogus exception frame" generated
    from a blocked kernel thread that was in the process of exec'ing
    a user process via the call_usermodehelper() facility.
  - Resolves: rhbz#1057357


author: Dave Anderson <anderson@redhat.com> - 7.0.2-4
changelog:
  - Fixes for "kmem -S" command for CONFIG_SLUB.
  - Resolves: rhbz#1045591
  - Increase S390X NR_CPUS
  - Resolves: rhbz#1051156


author: Dave Anderson <anderson@redhat.com> - 7.0.2-2
changelog:
  - Compressed kdump 46-bit physical memory support
    Resolves: rhbz#1015250
  - Fix incorrect backtrace for dumps taken with "virsh dump --memory-only"
    Resolves: rhbz#1020469
  - Fix cpu number display on systems with more than 254 cpus
    Resolves: rhbz#1020536


author: Dave Anderson <anderson@redhat.com> - 7.0.2-1
changelog:
  - Update to latest upstream release
  - Fix for ppc64 embedded gdb NULL pointer translation sigsegv
  - Fix for bt -F failure


author: Dave Anderson <anderson@redhat.com> - 5.1.8-1
changelog:
  - Update to latest upstream release
  - Additional fixes for gcc-4.6 -Werror compile failures for ARM architecture.


author: Dave Anderson <anderson@redhat.com> - 4.0.9-1
changelog:
  - Update to upstream release, which allows the removal of the 
    Revision tag workaround, the crash-4.0-8.11-dwarf3.patch and 
    the crash-4.0-8.11-optflags.patch


author: Lubomir Rintel <lkundrak@v3.sk> - 4.0.8.11-1
changelog:
  - Update to later upstream release
  - Fix abuse of Revision tag

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild


author: Dave Anderson <anderson@redhat.com> - 4.0-7.7.1
changelog:
  - Updates to this file per crash merge review
  - Update to upstream version 4.0-7.7.  Full changelog viewable in:
      http://people.redhat.com/anderson/crash.changelog.html


author: Dave Anderson <anderson@redhat.com> - 4.0-6.0.5
changelog:
  - Second attempt at addressing the GCC 4.3 build, which failed due
    to additional ptrace.h includes in the lkcd vmdump header files.


author: Dave Anderson <anderson@redhat.com> - 4.0-6.0.4
changelog:
  - First attempt at addressing the GCC 4.3 build, which failed on x86_64
    because ptrace-abi.h (included by ptrace.h) uses the "u32" typedef,
    which relies on <asm/types.h>, and include/asm-x86_64/types.h
    does not not typedef u32 as done in include/asm-x86/types.h.


author: Dave Anderson <anderson@redhat.com> - 4.0-3.3
changelog:
  - Updated crash.patch to match upstream version 4.0-3.3.
  - Support for x86_64 relocatable kernels.  BZ #204557


author: Dave Anderson <anderson@redhat.com> - 4.0-3.1
changelog:
  - Updated crash.patch to match upstream version 4.0-3.1.
  - Added kdump reference to description.
  - Added s390 and s390x to ExclusiveArch list.  BZ #199125
  - Removed LKCD v1 pt_regs references for s390/s390x build.
  - Removed LKCD v2_v3 pt_regs references for for s390/s390x build.


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.4
changelog:
  - Updated crash.patch such that <asm/page.h> is not #include'd
    by s390_dump.c; IBM did not make the file s390[s] only; BZ #192719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.3
changelog:
  - Updated crash.patch such that <asm/page.h> is not #include'd
    by vas_crash.h; only ia64 build complained; BZ #191719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.2
changelog:
  - Updated crash.patch such that <asm/segment.h> is not #include'd
    by lkcd_x86_trace.c; also for BZ #191719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.1
changelog:
  - Updated crash.patch to bring it up to 4.0-2.26, which should 
    address BZ #191719 - "crash fails to build in mock"


author: Dave Anderson <anderson@redhat.com> 3.10-13
changelog:
  - Compiler error- and warning-related fixes for gcc 4 build.
  - Update to enhance x86 and x86_64 gdb disassembly output so as to
    symbolically display call targets from kernel module text without
    requiring module debuginfo data.
  - Fix hole where an ia64 vmcore could be mistakenly accepted as a
    usable dumpfile on an x86_64 machine, leading eventually to a
    non-related error message.


author: Dave Anderson <anderson@redhat.com> 3.10-9
changelog:
  - Updated source package to crash-3.10.tar.gz, containing
    IBM's final ppc64 processor support for RHEL4
  - Fixes potential "bt -a" hang on dumpfile where netdump IPI interrupted
    an x86 process while executing the instructions just after it had entered
    the kernel for a syscall, but before calling the handler.  BZ #139437
  - Update to handle backtraces in dumpfiles generated on IA64 with the
    INIT switch (functionality intro'd in RHEL3-U5 kernel).  BZ #139429
  - Fix for handling ia64 and x86_64 machines booted with maxcpus=1 on
    an SMP kernel.  BZ #139435
  - Update to handle backtraces in dumpfiles generated on x86_64 from the
    NMI exception stack (functionality intro'd in RHEL3-U5 kernel).
  - "kmem -[sS]" beefed up to more accurately verify slab cache chains
    and report errors found.
  - Fix for ia64 INIT switch-generated backtrace handling when
    init_handler_platform() is inlined into ia64_init_handler();
    properly handles both RHEL3 and RHEL4 kernel patches.
    BZ #138350
  - Update to enhance ia64 gdb disassembly output so as to
    symbolically display call targets from kernel module
    text without requiring module debuginfo data.


author: Dave Anderson <anderson@redhat.com> 3.8-3
changelog:
  - remove (harmless) error message during ia64 diskdump invocation when
    an SMP system gets booted with maxcpus=1
  - several 2.6 kernel specific updates


author: Jay Fenlason <fenlason@redhat.com> 3.5-2
changelog:
  - remove ppc from arch list, since it doesn't work with ppc64 kernels
  - remove alpha from the arch list since we don't build it any more


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-30
changelog:
  - Dropped sysvinit support
    Resolves: rhbz#1610287
  - Dropped hesiod support
    Resolves: rhbz#1638491


author: Robert Scheck <robert@fedoraproject.org> - 8.15.2-27
changelog:
  - Use SSL_CTX_use_certificate_chain_file() to handle intermediate
    certificates passed additionally in confSERVER_CERT (#1565341)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-19
changelog:
  - Replaced compile-fix patch by format-security patch from Debian not to
    change status codes
    Resolves: rhbz#1482808


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-15
changelog:
  - Explicitly enabled sm-client statistics
    Related: rhbz#890585
  - Fixed compilation with -Werror=format-security which seems to be the
    default in f27+


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-13
changelog:
  - Removed systemd limit for sendmail restarts to workaround failure due to
    rapid restarts caused by NetworkManager dispatcher script
    Resolves: rhbz#1422771


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-11
changelog:
  - Added SASL AUTH_REALM into default configuration
    Resolves: rhbz#748279
  - Fixed compilation with openssl-1.1.0
    Resolves: rhbz#1400239


author: Ondřej Lysoněk <olysonek@redhat.com> - 8.15.2-9
changelog:
  - Fixed Provides and Obsoletes in sendmail-milter-devel
  - Made 'Requires: sendmail-milter' in sendmail-milter-devel arch specific


author: Ondřej Lysoněk <olysonek@redhat.com> - 8.15.2-8
changelog:
  - Removed dependency for sendmail in sendmail-devel, renamed sendmail-devel
    to sendmail-milter-devel
    Resolves: rhbz#891288


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-1
changelog:
  - New version
    Resolves: rhbz#1239185
  - Dropped ipv6-bad-helo patch (upstreamed)
  - Updated/defuzzified patches


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.1-1
changelog:
  - New version
  - Dropped hesiod patch (not needed)
  - Dropped libdb5 patch (upstreamed)
  - Rebased patches


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.6-2
changelog:
  - Fixed milter_helo regression (milter-helo-fix patch)
    Resolves: rhbz#895552
  - Fixed bogus dates in changelog


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-9
changelog:
  - Enabled alternatives --initscript in post section
  - Improved sysvinit subpackage - switched to noarch, added scriptlets
  - Workarounded sm-client stop on SysV to systemd migration


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-7
changelog:
  - Hardened build with full relro
  - Provided SysV initscript in sysvinit subpackage for backward compatibility


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-6
changelog:
  - Fixed systemctl disable command in preun section
  - Replaced reload by restart, dropped ExecReload from sendmail.service
    Resolves: rhbz#719931
  - Switched to systemctl in NetworkManager dispatcher script
  - Added ExecStartPre=-/etc/mail/make to sm-client.service
  - Hardcoded daemon option (-bd) to sendmail.service, dropped the DAEMON var
  - QUEUE var in /etc/sysconfig/sendmail replaced by SENDMAIL_OPTS var
  - Added default preset (-q1h) to SENDMAIL_OPTS var


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-4
changelog:
  - Removed dots from description (there are no dots in systemd packaging
    guidelines)
  - Changed service type to forking and explicitly specified PID files
  - Fixed creation of sm-client.pid
  - Added Wants to sm-client.service and sendmail.service
  - Replaced each occurrence of /var/run by /run in config files
  - More details are available in rhbz#697636


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.5-1
changelog:
  - New version 8.14.5
  - Removed m4-ldap-routing, milter-fix-negativeid, man-i-option-fix
    patches (upstreamed)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-21
changelog:
  - fix negative ctx_id in milter debug output (#577558)
  - fix incomplete description of the -i option in man page (#676824)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-18
changelog:
  - add QoS support, patch from Philip Prindeville <philipp@fedoraproject.org>
    upstream reserved option ID 0xe7 for testing of this new feature (#576643)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-11
changelog:
  - README.libmilter moved to milter subpackage
  - updated description of doc subpackage
  - README.redhat removed (not needed any more)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-10
changelog:
  - added stub man pages for hoststat and purgestat
  - rmail man page added to alternatives
  - updated subpackages description
  - sendmail-cf/cf/README is not packaged - it is useless for end users
  - added comments about purpose of files and patches
  - removed redundant license tag from milter subpackage


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-8
changelog:
  - all 'define' changed to 'global' in spec
  - perl interpreter path fixup moved from 'install' to 'prep'


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-6
changelog:
  - sasl2 config moved from {_libdir}/sasl2 to {_sysconfdir}/sasl2
  - added libdb5 patch for building with libdb-5
  - rebuilt with libdb-5


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-4
changelog:
  - used noreplace for sasl config
  - used ghost instead of explicit provides
  - deffattr changed to (-,root,root,-)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.14.4-1
changelog:
  - new version 8.14.4 (#552078)
  - RPM attributes S, 5, T not recorded for statistics file
  - adapted patches: makemapman, dynamic, switchfile (#552078)
  - movefiles patch incorporated into aliases_dir patch
  - drop exitpanic patch (fixed upstream)


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-9
changelog:
  - fix milter file descriptors leaks (#485426)
  - skip colon separator when parsing service name in ServiceSwitchFile
  - return with non-zero exit code when free space is below MinFreeBlocks
  - fix service stop/restart when only smclient is running
  - fix submit.cf and helpfile permissions
  - more merge review fixes (#226407)


author: Miroslav Lichvar <mlichvar@redhat.com> 8.14.3-2
changelog:
  - add NM dispatcher script (#451575)
  - print warning on service start when sendmail-cf is required (#447148)
  - replace Makefile with shell script to avoid dependency on make (#467841)
  - fix multiarch conflicts (#343161)
  - preserve timestamps on config files
  - gzip RELEASE_NOTES
  - defuzz patches
  - drop gcc2690 patch


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-4
changelog:
  - do not remove /etc/aliases.db on package removal (rhbz#223637)
  - fixed remaining paths to certs directory in sendmail.mc file
  - added contrib scripts to the doc package (rhbz#183723)
  - added LSB header to init script (rhbz#247053)
  - added plain login information for cyrus-sasl to access file
  - fixed compile problem with glibc-2.6.90+
  - fixed reoccuring m4 include problem (now using sinclude)


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-2
changelog:
  - readded chkconfig add for sendmail in post script
  - dropped mysql support (useless without further patching)
  - fixed executable permissions for /usr/sbin/makemap and /usr/sbin/smrsh
  - dropped FFR_UNSAFE_SASL, because it has no effect anymore


author: Thomas Woerner <twoerner@redhat.com> 8.14.1-1
changelog:
  - new version 8.14.1
  - spec file cleanup for merge review (rhbz#226407)
  - dropped update support for sendmail versions prior to 8.12.0
  - using pdf documentation


author: Florian La Roche <laroche@redhat.com>
changelog:
  - #205803 add sparc/sparc64 to -fPIE list
  - change sendmail.cf reference into sendmail-cf package name


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-3
changelog:
  - using new syntax for access database (#177566)
  - fixed failure message while shutting down sm-client (#119429)
    resolution: stop sm-client before sendmail
  - fixed method to specify persistent queue runners (#126760)
  - removed patch backup files from sendmail-cf tree (#152955)
  - fixed missing dnl on SMART_HOST define (#166680)
  - fixed wrong location of aliases and aliases.db file in aliases man page
    (#166744)
  - enabled CipherList config option for sendmail (#172352)
  - added user chowns for /etc/mail/authinfo.db and move check for cf files
    (#184341)
  - fixed Makefile of vacation (#191396)
    vacation is not included in this sendmail package
  - /var/log/mail now belongs to sendmail (#192850)


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-1
changelog:
  - new version 8.13.7 (#195282)
  - fixes CVE-2006-1173 (VU#146718): possible denial of service issue caused by
    malformed multipart messages (#195776)


author: Thomas Woerner <twoerner@redhat.com> 8.13.5-3
changelog:
  - fixed selinuxenabled path in initscript
  - fixed error handling with sigwait (#137709)
    Thanks to Jonathan Kamens for the patch
  - fixed prereq for cyrus-sasl: now using /usr/sbin/saslauthd
  - appended 'dnl' to cert tags in sendmail.mc


author: Thomas Woerner <twoerner@redhat.com> 8.13.4-1
changelog:
  - new version 8.13.4
  - added requires for the sendmail base package in sendmail-cf, sendmail-devel
    and sendmail-doc
  - dropped upstream close_wait.p2 patch


author: Thomas Woerner <twoerner@redhat.com> 8.13.3-1.1
changelog:
  - fixed gcc4 build: use double quotes for confOPTIMIZE to avoid m4 confusion
    with ','
  - fix for ppc: using tripple-quotes


author: Thomas Woerner <twoerner@redhat.com> 8.13.0-1.1
changelog:
  - fixed init script to not complain missing sendmail-cf package (#126975)
  - better message in /etc/mail/Makefile for missing sendmail-cf package.


author: Thomas Woerner <twoerner@redhat.com> 8.13.0-1
changelog:
  - new version 8.13.0
  - made /etc/mail/Makefile complain missing sendmail-cf package (#123348)
  - fixed ownership of %{_includedir}/libmilter (#73977)
  - moved back to /usr/share/ssl/certs as certificate directory (see sendmail.mc)
  - extended sendmail.mc for spam protection


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-4.1
changelog:
  - added authinfo to possible sendmail maps: /etc/mail/Makefile (#119010)
  - fixed minor version in changelog


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-3
changelog:
  - RH3.0E version: sasl1, no pie, old_setup (provide /etc/aliases)
  - new switches for pie and old_setup


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-2
changelog:
  - added information for saslauthd and AUTH (#113463)
  - fixed STATUS_FILE in sendmail-redhat.mc (#114302)
  - reset mta after update if mta was sendmail (#114257)
  - enabled pie for ia64 again


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-1.2
changelog:
  - /usr/lib/sendmail is in alternatives, now
  - removed trailing / from stdir
  - fixed define for STATUS_FILE


author: Thomas Woerner <twoerner@redhat.com> 8.12.10-6
changelog:
  - reverted to sasl1 for 3.0E: added with_sasl1
  - spec file cleanup
  - new location for statistics file (/var/log/)


author: Karsten Hopp <karsten@redhat.de> 8.12.10-3
changelog:
  - fix usage of RPM_OPT_FLAGS variable in spec file
  - add makecert.sh script to -doc subpackage
  - add cert paths to sendmail.mc


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - move debug information from sendmail into debuginfo rpm
  - on %post make sure /etc/aliases.db and /etc/mail/*.db is correctly
    owned by root
  - do not set confTRUSTED_USER to smmsp in sendmail-redhat.mc


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - run "make -C /etc/mail" (maybe generating new sendmail.cf, then newaliases
  - added $SENDMAIL_OPTARG that could be set by /etc/sysconfig/sendmail #99224


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.9-6
changelog:
  - move Sendmail.conf from /usr/lib/sasl to /usr/lib/sasl2 and change the
    default pwcheck method to "saslauthd"


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.9-5
changelog:
  - configure to use libsasl2 instead of libsasl to avoid linking with both
    (we also link to libldap, which now uses libsasl2)
  - link with -ldb instead of -ldb-4.0 on all releases after RHL 7.3 instead
    of just 7.3 (all versions of db4-devel thereafter are expected to provide
    the right linking setup)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - mark /etc/mail/Makefile as config(noreplace) #87688
  - mark /etc/pam.d/smtp as config(noreplace) #87731


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - call make with the target "all" #86005
  - add start/stop/restart as Makefile targets
  - add another security patch


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add correct db4-devel requirements for newer releases
  - completely re-do many ifdef code in the spec-file
  - fix some issues building for older RHL releases


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add a confTRUSTED_USER line into sendmail.mc, submit.mc is already ok
  - add patch from sendmail.org for cf/m4/proto.m4


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - do not reject all numeric login names if hesiod support is
    compiled in. #80060
  - remove reference to non-existing man-pages #74552


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - sendmail-8.12.7-etrn.patch from Jos Vos <jos@xos.nl>
  - submit.mc: enable "use_ct_file" by default  #80519
  - add _FFR_MILTER_ROOT_UNSAFE  #78223


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add openssl-devel as a build-time requirement
  - preprocess the config file to add the right version of %{_lib}
  - add kerberos -I and -L flags to build configuration, needed for newer
    versions of libssl


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - always have a queue run interval for sm-msp-queue   #81424
  - Jos Vos suggests adding another variable for sm-client queue-run


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add the following changes from Adrian Havill <havill@redhat.com>
    to our default sendmail.mc file:
  	- added commented-out-by-default common AUTH/SSL examples
  	- updated m4 example and rpm reference
  	- added more comment documentation
  	- add commented out confAUTO_REBUILD example
  	- improve description about MASQUERADE_AS


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add to submit.mc: define(`_MTA_HOST_', `[127.0.0.1]')
    to deliver directly to localhost IP instead of going through DNS
  - submit.mc: exchange msp and use_ct_file to better enable it
  - do not undefine UUCP_RELAY and BITNET_RELAY
  - sendmail.mc: use LOCAL_DOMAIN instead of "Cw" directly
  - sendmail.mc: add commented out MASQUERADE_AS example
  - re-enable DAEMON variable for now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove absolute path names from the PAM configuration, allowing it to be
    used by any arch on a multilib system


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Changed the behaviour in /etc/mail/Makefile to generate the sendmail.cf and
    submit.cf from the mc files if they changed.
  - Added a small README.redhat that descibed the new mc file behaviour and the
    split into sendmail.cf and submit.cf.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - suggestions form Stephane Lentz:
  	- add correct include statement into submit.mc (like sendmail.mc)
  	- add commented out further suggestions into submit.mc
  	- disable ident lookups


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - make sure more version information is in the cf file #54418
  - do not use "-b" flag when patching in spec file
  - require newer chkconfig version #61035
  - fix preun script #60880
  - add TMPF to access file creation #60956


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - mv include files to /usr/include/libmilter/ #60795
  - do not use "-f" option to virtusertable #60196
  - ad an example smarthost entry to config file #58298


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.2-1
changelog:
  - update to 8.12.2 (adds STARTTLS support without need for sfio)
  - don't forcibly strip binaries; let the build root handle it
  - add creation of the smmsp account (51/51) in %pre
  - enable hesiod map support
  - modify default config to use an MSP
  - comment out 'O AutoRebuildAliases' in %post, otherwise sendmail will
    fail to restart on upgrades


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - integrate ugly logic to compile this src.rpm also on older Red Hat
    Linux releases
  - clean up spec file and patches a bit
  - add db4 support


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - fix another path to correct docu
  - include sendmail/README in the docu
  - compile with -D_FFR_WORKAROUND_BROKEN_NAMESERVERS, but do not
    enable this at runtime
  - devel subpackage files owned by root now


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - change "-q" to "-s" as option to make #57216
  - move milter lib into separate "devel" sub-package
  - add include files to devel sub-package #56064
  - fix pointer in access file to docu #54351


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add libmilter docu
  - add support for userdb to /etc/mail/Makefile
  - use "btree" database files if a userdb is used
  - buildrequires tcp_wrappers


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 8.11.3
  - add "localhost.localdomain" to the list of hostnames accepted
    for local delivery "Cw" in /etc/mail/sendmail.mc
  - add patches from Pekka Savola <pekkas@netcore.fi>
  	- Enable IPv6 at compile time, patch for glibc 2.2 from PLD
  	- Add a commented-out IPv6 daemon .mc line to sendmail.mc
  	- buildrequire: openldap-devel, cyrus-sasl-devel


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add changes from Christopher McCrory <chrismcc@pricegrabber.com>:
  	- prepare /etc/mail/Makefile for more maps not shipped with this rpm
  	- changed sendmail.mc to include some more commented out options,
  	  so that people are directly pointed at important options
  	- add /etc/pam.d/smtp for AUTH
  	- add FEATURE(use_ct_file) and /etc/mail/trusted-users


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - enable daemon mode again, but only listen to the loopback device
    instead of all devices.
  - do not include check.tar with old anti-spam rules


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to (security release) 8.11.2
  - build also on RHL 6.x #16061
  - include smrsh man-page #17901
  - use the "-f" flag for makemap to preserve case for virtusertable
    and userdb in /etc/mail/Makefile - suggested by Harald Hoyer
  - fix /usr/doc -> usr/share/doc in docu #20611
  - wrong path in sendmail.mc #20691
  - tcp-wrapper support wasn't enabled correctly #21642
  - do not expose user "root" when masquerading like in older releases #21643
  - disable the VRFY and EXPN smtp commands #21801
  - disable queue-runs for normal users (restrictqrun privacy flag)
  - fix typo in sendmail.mc #21880, #22682
  - disable daemon mode to see what needs fixing


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - install man pages, not groff output (#3746).
  - use dnl not '#' in m4 comment (#3749).
  - add FEATURE(mailtertable) to the config -- example file needs this (#4649).
  - use db2 not db1.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fox the awk scripts in the postinstall
  - enable FEATURE(accept_unresolvable_domains) by default to make laptop
    users happy.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - make the redhat.mc be a separate source files. Sanitize patches that used
    to touch it.
  - install redhat.mc as /etc/sendmail.mc so that people can easily modify
    their sendmail.cf configurations.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - provide a more sane /etc/mail/access default config file
  - use makemap to initializa the empty databases, not touch
  - added a small, but helpful /etc/mail/Makefile


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Allow empty QUEUE in /etc/sysconfig/sendmail for those who
    want to run sendmail in daemon mode without processing the
    queue regularly.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - added chkconfig support
  - various spec file cleanups
  - changed group to Networking/Daemons (from Daemons).  Sure, it runs on
    non networked systems, but who really *needs* it then?


author: Donnie Barnes <djb@redhat.com>
changelog:
  - made /etc/mail/deny.db a ghost
  - removed preun that used to remove deny.db (ghost handles that now)
  - NOTE: upgrading from the sendmail packages in 4.8, 4.8.1, and possibly
    4.9 (all Red Hat betas between 4.2 and 5.0) could cause problems.  You
    may need to do a makemap in /etc/mail and a newaliases after upgrading
    from those packages.  Upgrading from 4.2 or prior should be fine.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - updated to 8.8.7
  - added some spam filtration
  - combined some makefile patches
  - added BuildRoot support


author: Joe Orton <jorton@redhat.com> - 1.6.0-1
changelog:
  - update to 1.6.0 (#1460831)
  - move bdb support to loadable DSO in apr-util-dbd subpackage
  - drop NSS, freetds support


author: Bojan Smojver <bojan@rexursive.com> - 1.3.2-3
changelog:
  - revert build dependencies, change from -2 didn't help
  - add apr-util-1.3.2-pgsql.patch (remove pgsql_LIBS during detection)


author: Bojan Smojver <bojan@rexursive.com> - 1.2.12-1
changelog:
  - bump up to 1.2.12
  - drop MySQL DBD driver, shipped upstream
  - adjust various patches to apply
  - rework tests in %check (1.2.x got tests from trunk)


author: Bojan Smojver <bojan@rexursive.com> 1.2.10-1
changelog:
  - bump up to 1.2.10
  - pick up newly checked in MySQL DBD driver directly from ASF
  - remove dbdopen patch (fixed upstream)
  - remove xmlns patch (fixed upstream)
  - remove autoexpat patch (fixed upstream)


author: Joe Orton <jorton@redhat.com> 1.2.8-9
changelog:
  - add rewrite of expat autoconf code (upstream r493791)
  - fix build for new glibc open()-as-macro
  - split out sqlite subpackage


author: Joe Orton <jorton@redhat.com> 1.2.8-3
changelog:
  - build DBD drivers as DSOs (w/Bojan Smojver, #192922)
  - split out pgsql driver into -pgsql subpackage


author: Joe Orton <jorton@redhat.com> 0.9.3-5
changelog:
  - fix to try linking against -ldb first (#90917)
  - depend on openldap, gdbm, db4, expat appropriately.


author: Joe Orton <jorton@redhat.com> 0.9.3-3
changelog:
  - make devel package conflict with old subversion-devel
  - run the less crufty parts of the test suite


author: Timothy Redaelli <tredaelli@redhat.com> - 18.11-1
changelog:
  - Updated to DPDK 18.11 (#1492326):
    - Updated configs
    - Added libmnl-devel BuildRequires for Mellanox


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-12
changelog:
  - Use python3 packages on RHEL8 and Fedora
  - Remove dpdk-pmdinfo (#1494462)
  - Backport "net/mlx5: fix build with rdma-core v19"


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-8
changelog:
  - Align with DPDK patches inside OVS FDP 18.06
  - Enable BNXT, MLX4, MLX5, NFP and QEDE PMDs
  - Backport "net/mlx: fix rdma-core glue path with EAL plugins" (only needed on
    DPDK package)


author: Timothy Redaelli <tredaelli@redhat.com> - 17.11-1
changelog:
  - Update to DPDK 17.11 (#1522700)
  - Use a static configuration file
  - Remove i686 from ExclusiveArch since it's not supported on RHEL7
  - Remove "--without shared" support


author: John W. Linville <linville@redhat.com> - 16.11.2-3
changelog:
  - Enable i40e driver in PowerPC along with its altivec intrinsic support
  - Add PCI probing support for vfio-pci devices in Power8


author: Panu Matilainen <pmatilai@redhat.com> - 16.07-1
changelog:
  - Update to DPDK 16.07 (#1383195)
  - Disable unstable bnx2x driver (#1330589)
  - Enable librte_vhost NUMA support again (#1279525)
  - Enable librte_cryptodev, its no longer considered experimental
  - Change example prefix to dpdk- for consistency with other utilities
  - Update driverctl to 0.89


author: Panu Matilainen <pmatilai@redhat.com> - 2.2.0-2
changelog:
  - Use a different quoting method to avoid messing up vim syntax highlighting
  - A string is expected as CONFIG_RTE_MACHINE value, quote it too
  - Enable librte_vhost NUMA-awareness


author: Panu Matilainen <pmatilai@redhat.com> - 2.2.0-1
changelog:
  - Update DPDK to 2.2.0 final
  - Add README and MAINTAINERS docs
  - Adopt new upstream standard installation layout, including
    dpdk_nic_bind.py renamed to dpdk_nic_bind
  - Move the unversioned pmd symlinks from libdir -devel
  - Establish a driver directory for automatic driver loading
  - Disable CONFIG_RTE_SCHED_VECTOR, it conflicts with CONFIG_RTE_MACHINE default
  - Disable experimental cryptodev library
  - More complete dtneeded patch
  - Make option matching stricter in spec setconf
  - Update driverctl to 0.59


author: Panu Matilainen <pmatilai@redhat.com> - 2.1.0-1
changelog:
  - Update to dpdk 2.1.0 final
    - Disable ABI_NEXT
    - Rebase patches as necessary
    - Fix build of ip_pipeline example
    - Drop no longer needed -Wno-error=array-bounds
    - Rename libintel_dpdk to libdpdk


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-7
changelog:
  - Drop pointless build conditional, the linker script is here to stay
  - Drop vhost-cuse build conditional, vhost-user is here to stay
  - Cleanup comments a bit
  - Enable parallel build again
  - Dont build examples by default


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-4
changelog:
  - Drop unused pre-2.0 era patches
  - Handle vhost-user/cuse selection automatically based on the copr repo name


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-3
changelog:
  - Dont depend on fuse when built for vhost-user support
  - Drop version from testpmd binary, we wont be parallel-installing that


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-2
changelog:
  - Remove the broken kmod stuff
  - Add a new dkms-based eventfd_link subpackage if vhost-cuse is enabled


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.2086.git263333bb.2
changelog:
  - Switch (back) to vhost-user, thus disabling vhost-cuse support
  - Build requires fuse-devel for now even when fuse is unused


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.2049.git2f95a470.1
changelog:
  - New snapshot
  - Add spec option for enabling vhost-user instead of vhost-cuse
  - Build requires fuse-devel only with vhost-cuse
  - Add virtual provide for vhost user/cuse tracking


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1911.gitffc468ff.1
changelog:
  - New snapshot
  - Disable kernel module build by default
  - Add patch to fix missing defines/includes for external applications


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1906.git00c68563.1
changelog:
  - New snapshot
  - Remove bogus devname module alias from eventfd-link module
  - Whack evenfd-link to honor RTE_KERNELDIR too


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1903.gitb67578cc.3
changelog:
  - Add spec option to build kernel modules too
  - Build eventfd-link module too if kernel modules enabled


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1903.gitb67578cc.2
changelog:
  - Move config changes from spec after "make config" to simplify things
  - Move config changes from dpdk-config patch to the spec


author: Panu Matilainen <pmatilai@redhat.com> - 2.0.0-0.1695.gitc2ce3924.1
changelog:
  - Add spec magic to easily switch between stable and snapshot versions
  - Add tarball snapshot script for reference
  - Update to pre-2.0 git snapshot


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-10
changelog:
  - Drop symbol versioning patches, always do library version for shared
  - Add comment on the combined library thing


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-5
changelog:
  - Add DT_NEEDED for external dependencies (pcap, fuse, dl, pthread)
  - Enable combined library creation, needed for OVS
  - Enable shared library creation, needed for sanity


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-3
changelog:
  - Fix -Wformat clash preventing i40e driver build, enable it
  - Fix -Wall clash preventing enic driver build, enable it


author: Panu Matilainen <pmatilai@redhat.com> - 1.8.0-2
changelog:
  - Enable librte_vhost, which buildrequires fuse-devel
  - Enable physical NIC drivers that build (e1000, ixgbe) for VFIO use


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-7
changelog:
  - Policy compliance: move static libraries to -devel, provide dpdk-static
  - Add a spec option to build as shared libraries


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-6
changelog:
  - Avoid variable expansion in the spec here-documents during build
  - Drop now unnecessary debug flags patch
  - Add a spec option to build a combined library


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-5
changelog:
  - Avoid unnecessary use of %global, lazy expansion is normally better
  - Drop unused destdir macro while at it
  - Arrange for RTE_SDK environment + directory layout expected by DPDK apps
  - Drop config from main package, it shouldn't be needed at runtime


author: Panu Matilainen <pmatilai@redhat.com> - 1.7.0-4
changelog:
  - Copy the headers instead of broken symlinks into -devel package
  - Force sane mode on the headers
  - Avoid unnecessary %exclude by not copying unpackaged content to buildroot
  - Clean up summaries and descriptions
  - Drop unnecessary kernel-devel BR, we are not building kernel modules


author: - John W. Linville <linville@redhat.com> - 1.7.0-2
changelog:
  - Use EXTRA_CFLAGS to include standard Fedora compiler flags in build
  - Set CONFIG_RTE_MACHINE=default to build for least-common-denominator machines
  - Turn-off build of librte_acl, since it does not build on default machines
  - Turn-off build of physical device PMDs that require kernel support
  - Clean-up the install rules to match current packaging
  - Correct changelog versions 1.0.7 -> 1.7.0
  - Remove ix86 from ExclusiveArch -- it does not build with above changes


author: Kalev Lember <kalevlember@gmail.com> - 0.7.93-1
changelog:
  - Update to 0.7.93
  - Tighten deps with the _isa macro
  - Don't manually require pkgconfig; rpmbuild generates this automatically
  - Use license macro for the COPYING file


author: David King <amigadave@amigadave.com> - 3.12.1-2
changelog:
  - Fix desktop database scriptlet (#685030)
  - Use pkgconfig for BuildRequires
  - Fix bogus dates in changelog


author: Kalev Lember <kalevlember@gmail.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - Drop the -Werror patch; applied upstream
  - Add glib-compile-schemas scriptlets
  - Relicensed from LGPLv2+ to GPLv2+


author: David Zeuthen <davidz@redhat.com> - 2.29.0-0.git20091202.el8
changelog:
  - Update to git snapshot that requires udisks instead of DeviceKit-disks
  - The UI has been completely revamped


author: David Zeuthen <davidz@redhat.com> - 2.28.0-1.el8
changelog:
  - Update to upstream release 2.28.0
  - Compared to previous releases, this release should whine less about SMART


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.6-1
changelog:
  - Update to 3.0.6.
  - Remove upstreamed patches and renumber the rest.
  - Disable one new failing test:
    https://github.com/cyrusimap/cyrus-imapd/issues/2332


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-12
changelog:
  - Update list of excluded tests.
  - Update Cassandane snapshot; use new base_port config setting.  No need to
    patch that in now.
  - Add four new expected-to-fail tests from new Cassandane snapshot.
  - Add patch to collect extra Cassandane logging in case we hit some of those
    sporadic failures again.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-11
changelog:
  - Re-enable imaptest on >= F29.
  - F29's imaptest fixes several bugs, allowing all tests to be run there.
  - Relocate cassandane base port to hopefully work better in koji.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-10
changelog:
  - Update cassandane checkout to fix a test that was broken by DST.
  - Add patch to fix sieve scripts for usernames containing a dot.
  - Disable imaptest in cassandane until
    https://bugzilla.redhat.com/show_bug.cgi?id=1562970 is fixed.
  - Re-enable tests on s390; it seems to be better now.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-6
changelog:
  - Update cassandane checkout.
  - Add two new build dependencies.
  - Remove all JMAP-related tests from the exclusion lists, since cassandane no
    longer runs any JMAP tests on cyrus 3.0.
  - Collapse unused test skip lists.
  - Add ten additional skipped tests, after consultation with upstream.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-5
changelog:
  - Add patch to fix segfaults in squatter.
  - Exclude one test on all releases instead of just F28+.
  - Remove --cleanup from cassandane invocation.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.5-3
changelog:
  - Re-enable clamav and mariadb support as those are now built with openssl 1.1.
  - But no clamav on ppc64 because of
    https://bugzilla.redhat.com/show_bug.cgi?id=1534071


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.4-3
changelog:
  - Rebuild for new libical.
  - Add patch to fix compilation error with new libical.
  - Disable two tests which fail due to the new libical.


author: Pavel Zhukov <landgraf@fedoraproject.org> - 3.0.4-1
changelog:
  - Update to 3.0.4
  - Patched cassandane for new behaviour. It should be updated idealy.
  - Disable ImapTest.urlauth2 test; it seems to fail randomly regardless of
    architecture.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.3-1
changelog:
  - Update to 3.0.3, which contains an important security fix.  The fix is not
    embargoed but no CVE has been assigned yet.
  - Drop patches merged upstream.
  - An update of imaptest has resulted in three additional cassandane failures,
    reported upstream as https://github.com/cyrusimap/cyrus-imapd/issues/2087.
    In order to get the security fix out without delay, those three tests have been
    disabled.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.2-5
changelog:
  - Add two patches from upstream which fix JMAPCalendars issues on 32-bit and
    big-endian architectures.
  - Clean up test invocation and exclusion list.  More tests pass now.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.2-3
changelog:
  - Patch the provided imapd.conf and cyrus.conf to more closely match previous
    Fedora defaults and directories included in this package and to enable
    features which are supported by the Fedora build.
  - Add tmpfiles.d configuration file for directories in /run.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.2-2
changelog:
  - Exclude one more test from 32-bit arches.  Looks like this failure crept in
    with the Cassandane update.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-7
changelog:
  - Add old /usr/lib/cyrus-imapd directory to the utils package and add a symlink
    there to the deliver binary.  This should help a bit with migrations.
  - Add upstream patch to fix reconstruct failures on 32-bit architectures.
    Re-enable those five Cassandane tests.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-6
changelog:
  - Rename two commands: quota -> cyr_quota, restore -> cyr_restore.
  - Fix Cassandane to handle those renames.
  - Fix location of cyr_fetchnews.
  - Fix Perl 5.26-related module linking issue which caused a test failure.
    Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1461669


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-5
changelog:
  - Use proper path to ctl_mboxlist in cron file.
  - Add patch to increase individual test timeout.  Sometimes armv7hl can't
    complete a single test in 20 seconds.
  - Disable the Metronome tests; upstream says that they just won't reliably on
    shared hardware.
  - Don't bother running Cassandane on s390x for now.  The machines are simply
    too slow.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-3
changelog:
  - Remove clamav from build requirements.
  - Add --cleanup to Cassandane call to hopefully reduce build disk usage.
  - Disable maxforkrate test on s390x; our builders are too slow to run it.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-2
changelog:
  - Add patch to fix up some endianness issues.
  - Enable both test suites on all architectures.
  - Add arch-specific excludes for a few Cassandane tests.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.0.1-1
changelog:
  - Initial attempt at importing 3.0.  Many new dependencies.
  - Use a stock sample imapd.conf file instead of a Fedora-provided one.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 2.5.10-1
changelog:
  - Initial update to the 2.5 series.
  - Significant spec cleanups.
  - Add sscg dep and follow
    https://fedoraproject.org/wiki/Packaging:Initial_Service_Setup for initial
    cert generation.
  - Change default conf to use the system crypto policy.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 2.4.18-1
changelog:
  - Update to 2.4.18, rhbz#1267871 and rhbz#1267878
  - Backport ff4e6c71d932b3e6bbfa67d76f095e27ff21bad0 to fix issues from
    http://seclists.org/oss-sec/2015/q3/651


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 2.4.17-13
changelog:
  - Remove invalid Patch0: URL.
  - Use HTTP for upstream source.
  - pod2html was split out of the main perl package, breaking cyrus.
    Add a build dep for it.


author: Jeroen van Meeuwen <vanmeeuwen@kolabsys.com> - 2.4.17-1
changelog:
  - New upstream version, fixes upstream bugs:
  - reconstruct doesn't retain internaldate correctly (#3733)
  - Race condition in maibox rename (#3696)
  - DBERROR db4: Transaction not specified for a transactional database (#3715)
  - performance degradation on huge indexes in 2.4 branch (#3717)
  - typo fix in imapd.conf man page (#3729)
  - quota does not find all quotaroots if quotalegacy, fulldirhash and prefix are used and virtdomains is off (#3735)
  - Mail delivered during XFER was lost (#3737)
  - replication does not work on RENAME (#3742)
  - Failed asserting during APPEND (#3754)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.4.12-4
changelog:
  - reduce noisy logging, add option to turn on LOG_DEBUG syslog
    messages again (thanks Philip Prindeville) (#754940)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.4.8-1
changelog:
  - cyrus-imapd updated to 2.4.8
  - fixed: cannot set unlimited quota through proxy
  - fixed: reconstruct tries to set timestamps again and again
  - fixed: response for LIST "" user is wrong
  - fixed: THREAD command doesn't support quoted charset
  - fixed crashes in mupdatetest and cyr_expire when using -x


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.16-6
changelog:
  - follow licensing guideline update
  - devel sub-package has to have virtual static provides (#609604)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.16-5
changelog:
  - spec cleanup
  - simplified packaging (merge -perl in -utils)
  - remove obsoleted and/or unmaintained additional sources/patches
  - remove long time not used files from the cvs/srpm
  - update additional sources/patches from their upstream


author: Kalev Lember <kalev@smartlink.ee> - 2.21.1-2
changelog:
  - added missing Conflicts: gtkmm24-devel to -devel subpackage
  - calculate two-digit download directory from three-digit package version


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.33-1
changelog:
  - fix rhnsd triggered upgrade of rhnsd on systemd systems
  - 1494389 - Revert "[1260527] RHEL7 reboot loop"
  - 1494389 - Revert "1260527 RHEL7 rhnsd reload doesn't work"


author: Jan Dobes 5.0.27-1
changelog:
  - 1383668 - close and reopen syslog when redirecting child output
  - Updated links to github in spec files
  - Migrating Fedorahosted to GitHub


author: Jan Dobes 5.0.19-1
changelog:
  - do not keep this file in git
  - delete file with input files after template is created
  - pulling *.po translations from Zanata
  - fixing current *.po translations


author: Jan Dobes 5.0.17-1
changelog:
  - 1138939 - up2date and systemid files are managed by rhnsd itself, no need to
    break init script if they do not exist


author: Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.28-66.0.1
changelog:
  - add Ampere emag  to tunable cpu list (Patrick McGehearty)
  - add optimized memset for emag
  - add an ASIMD variant of strlen for falkor
  - Orabug: 2700101.
  - Modify glibc-ora28849085.patch so it works with RHCK kernels.
  - Orabug: 28849085.
  - Make _IO_funlockfile match __funlockfile and _IO_flockfile match __flockfile
  - Both should test
  -   if (stream->_flags & _IO_USER_LOCK) == 0)
  -     _IO_lock_lock (*stream->_lock);
  - OraBug: 28481550.


author: Florian Weimer <fweimer@redhat.com> - 2.28-65
changelog:
  - glibc-all-langpacks: Do not delete locale archive during update (#1717347)
  - Do not mark /usr/lib/locale/locale-archive as a configuration file
    because it is always automatically overwritten by build-locale-archive.


author: Patsy Griffin Franklin <patsy@redhat.com> - 2.28-48
changelog:
  - Add compiler barriers around modifications of the robust mutex list
    for pthread_mutex_trylock. (#1672773)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-43
changelog:
  - Update to glibc 2.28 release tarball:
  - Translation updates
  - x86/CET: Fix property note parser (swbz#23467)
  - x86: Add tst-get-cpu-features-static to $(tests) (swbz#23458)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-42
changelog:
  - Auto-sync with upstream branch master,
    commit af86087f02a5522d8801a11d8381e04f95e33162:
  - x86/CET: Don't parse beyond the note end
  - Fix Linux fcntl OFD locks tests on unsupported kernels
  - x86: Populate COMMON_CPUID_INDEX_80000001 for Intel CPUs (swbz#23459)
  - x86: Correct index_cpu_LZCNT (swbz#23456)
  - Fix string/tst-xbzero-opt if build with gcc head


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-41
changelog:
  - Build with --enable-cet on x86_64, i686
  - Auto-sync with upstream branch master,
    commit cfba5dbb10cc3abde632b46c60c10b2843917035:
  - Keep expected behaviour for [a-z] and [A-z] (#1607286)
  - Additional ucontext tests
  - Intel CET enhancements
  - ISO C11 threads support
  - Fix out-of-bounds access in IBM-1390 converter (swbz#23448)
  - New locale Yakut (Sakha) for Russia (sah_RU) (swbz#22241)
  - os_RU: Add alternative month names (swbz#23140)
  - powerpc64: Always restore TOC on longjmp (swbz#21895)
  - dsb_DE locale: Fix syntax error and add tests (swbz#23208)
  - Improve performance of the generic strstr implementation
  - regcomp: Fix off-by-one bug in build_equiv_class (swbz#23396)
  - Fix out of bounds access in findidxwc (swbz#23442)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-38
changelog:
  - Auto-sync with upstream branch master,
    commit 93304f5f7a32f73b551266c5a181db51d97a71e4:
  - Install <bits/statx.h> header
  - Put the correct Unicode version number 11.0.0 into the generated files


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-36
changelog:
  - Auto-sync with upstream branch master,
    commit fd70af45528d59a00eb3190ef6706cb299488fcd:
  - Add the statx function
  - regexec: Fix off-by-one bug in weight comparison (#1582229)
  - nss_files: Fix re-reading of long lines (swbz#18991)
  - aarch64: add HWCAP_ATOMICS to HWCAP_IMPORTANT
  - aarch64: Remove HWCAP_CPUID from HWCAP_IMPORTANT
  - conform/conformtest.pl: Escape literal braces in regular expressions
  - x86: Use AVX_Fast_Unaligned_Load from Zen onwards.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-30
changelog:
  - Auto-sync with upstream branch master,
    commit b7b88cea4151d85eafd7ababc2e4b7ae1daeedf5:
  - New locale: dsb_DE (Lower Sorbian)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-29
changelog:
  - Drop glibc-deprecate_libcrypt.patch.  Variant applied upstream. (#1566464)
  - Drop glibc-linux-timespec-header-compat.patch.  Upstreamed.
  - Auto-sync with upstream branch master,
    commit e69d994a63afc2d367f286a2a7df28cbf710f0fe.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-28
changelog:
  - Drop glibc-rh1315108.patch.  extend_alloca was removed upstream. (#1315108)
  - Auto-sync with upstream branch master,
    commit c49e18222e4c40f21586dabced8a49732d946917.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-24
changelog:
  - Auto-sync with upstream branch master,
    commit 14beef7575099f6373f9a45b4656f1e3675f7372:
  - iconv: Make IBM273 equivalent to ISO-8859-1 (#1592270)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-22
changelog:
  - Modernise nsswitch.conf defaults (#1581809)
  - Adjust build flags inheritence from redhat-rpm-config
  - Auto-sync with upstream branch master,
    commit 104502102c6fa322515ba0bb3c95c05c3185da7a.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-20
changelog:
  - Auto-sync with upstream branch master,
    commit 7f9f1ecb710eac4d65bb02785ddf288cac098323:
  - CVE-2018-11237: Buffer overflow in __mempcpy_avx512_no_vzeroupper (#1581275)
  - Drop glibc-rh1452750-allocate_once.patch,
    glibc-rh1452750-libidn2.patch.  Applied upstream.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-18
changelog:
  - Do not run telinit u on upgrades (#1579225)
  - Auto-sync with upstream branch master,
    commit 632a6cbe44cdd41dba7242887992cdca7b42922a.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-17
changelog:
  - Avoid exporting some Sun RPC symbols with default versions (#1577210)
  - Inherit the -mstackrealign flag if it is set
  - Inherit compiler flags in the original order
  - Auto-sync with upstream branch master,
    commit 89aacb513eb77549a29df2638913a0f8178cf3f5:
  - CVE-2018-11236: realpath: Fix path length overflow (#1581270, swbz#22786)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-13
changelog:
  - Auto-sync with upstream branch master,
    commit d39c0a459ef32a41daac4840859bf304d931adab:
  - CVE-2017-18269: memory corruption in i386 memmove (#1580934)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-7
changelog:
  - Auto-sync with upstream branch master,
    commit 1a2f44a848663036c8a14671fe0faa3fed0b2a25:
  - Remove spurios reference to libpthread_nonshared.a


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-6
changelog:
  - Switch back to upstream master branch
  - Drop glibc-rh1013801.patch, applied upstream.
  - Drop glibc-fedora-nptl-linklibc.patch, no longer needed.
  - Auto-sync with upstream branch master,
    commit bd60ce86520b781ca24b99b2555e2ad389bbfeaa.


author: Richard W.M. Jones <rjones@redhat.com> - 2.27-4
changelog:
  - riscv64: Add symlink from /usr/lib64/lp64d -> /usr/lib64 for ABI compat.
  - riscv64: Disable valgrind smoke test on this architecture.


author: Florian Weimer <fweimer@redhat.com> - 2.27-3
changelog:
  - Spec file cleanups:
    - Remove %defattr(-,root,root)
    - Use shell to run ldconfig %transfiletrigger
    - Move %transfiletrigger* to the glibc-common subpackage
    - Trim changelog
    - Include ChangeLog.old in the source RPM


author: Florian Weimer <fweimer@redhat.com> - 2.27-2.1
changelog:
  - Linux: use reserved name __key in pkey_get (#1542643)
  - Auto-sync with upstream branch release/2.27/master,
    commit 56170e064e2b21ce204f0817733e92f1730541ea.


author: Carlos O'Donell <carlos@redhat.com> - 2.27-1
changelog:
  - Update to released glibc 2.27.
  - Auto-sync with upstream branch master,
    commit 23158b08a0908f381459f273a984c6fd328363cb.


author: Richard W.M. Jones <rjones@redhat.com> - 2.26.9000-52
changelog:
  - Disable -fstack-clash-protection on riscv64:
    not supported even by GCC 7.3.1 on this architecture.


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-51
changelog:
  - Explicitly run ldconfig in the buildroot
  - Do not run ldconfig from scriptlets
  - Put triggers into the glibc-common package, do not pass arguments to ldconfig


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-50
changelog:
  - Auto-sync with upstream branch master,
    commit cdd14619a713ab41e26ba700add4880604324dbb:
  - libnsl: Turn remaining symbols into compat symbols (swbz#22701)
  - be_BY, be_BY@latin, lt_LT, el_CY, el_GR, ru_RU, ru_UA, uk_UA:
    Add alternative month names (swbz#10871)
  - x86: Revert Intel CET changes to __jmp_buf_tag (swbz#22743)
  - aarch64: Revert the change of the __reserved member of mcontext_t


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-48
changelog:
  - Auto-sync with upstream branch master,
    commit 21c0696cdef617517de6e25711958c40455c554f:
  - locale: Implement alternative month names (swbz#10871)
  - locale: Change month names for pl_PL (swbz#10871)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-45
changelog:
  - Drop static PIE support on aarch64.  It leads to crashes at run time.
  - Remove glibc-rpcgen subpackage.  See rpcsvc-proto.  (#1531540)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-44
changelog:
  - Correct the list of static PIE architectures (#1247050)
  - glibc_post_upgrade: Remove process restart logic
  - glibc_post_upgrade: Integrate into the build process
  - glibc_post_upgrade: Do not clean up tls subdirectories
  - glibc_post_upgrade: Drop ia64 support
  - Remove architecture-specific symbolic link for iconvconfig
  - Auto-sync with upstream branch master,
    commit 4612268a0ad8e3409d8ce2314dd2dd8ee0af5269:
  - powerpc: Fix syscalls during early process initialization (swbz#22685)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-43
changelog:
  - Enable static PIE support on i386, x86_64 (#1247050)
  - Remove add-on support (already gone upstream)
  - Rework test suite status reporting
  - Auto-sync with upstream branch master,
    commit 64f63cb4583ecc1ba16c7253aacc192b6d088511:
  - malloc: Fix integer overflows in memalign and malloc functions (swbz#22343)
  - x86-64: Properly align La_x86_64_retval to VEC_SIZE (swbz#22715)
  - aarch64: Update bits/hwcap.h for Linux 4.15
  - Add NT_ARM_SVE to elf.h


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-41
changelog:
  - CVE-2018-1000001: Make getcwd fail if it cannot obtain an absolute path
    (#1533837)
  - elf: Synchronize DF_1_* flags with binutils (#1439328)
  - Auto-sync with upstream branch master,
    commit 860b0240a5645edd6490161de3f8d1d1f2786025:
  - aarch64: fix static pie enabled libc when main is in a shared library
  - malloc: Ensure that the consolidated fast chunk has a sane size


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-40
changelog:
  - libnsl: Do not install libnsl.so, libnsl.a (#1531540)
  - Use unversioned Supplements: for langpacks (#1490725)
  - Auto-sync with upstream branch master,
    commit 9a08a366a7e7ddffe62113a9ffe5e50605ea0924:
  - hu_HU locale: Avoid double space (swbz#22657)
  - math: Make default libc_feholdsetround_noex_ctx use __feholdexcept
    (swbz#22702)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-39
changelog:
  - nptl: Open libgcc.so with RTLD_NOW during pthread_cancel (#1527887)
  - Introduce libnsl subpackage and remove NIS headers (#1531540)
  - Use versioned Obsoletes: for libcrypt-nss.
  - Auto-sync with upstream branch master,
    commit 08c6e95234c60a5c2f37532d1111acf084f39345:
  - nptl: Add tst-minstack-cancel, tst-minstack-exit (swbz#22636)
  - math: ldbl-128ibm log1pl (-qNaN) spurious "invalid" exception (swbz#22693)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-38
changelog:
  - nptl: Fix stack guard size accounting (#1527887)
  - Remove invalid Obsoletes: on glibc-header provides
  - Require python3 instead of python during builds
  - Auto-sync with upstream branch master,
    commit 09085ede12fb9650f286bdcd805609ae69f80618:
  - math: ldbl-128ibm lrintl/lroundl missing "invalid" exceptions (swbz#22690)
  - x86-64: Add sincosf with vector FMA


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-36
changelog:
  - Auto-sync with upstream branch master,
    commit 579396ee082565ab5f42ff166a264891223b7b82:
  - nptl: Add test for callee-saved register restore in pthread_exit
  - getrlimit64: fix for 32-bit configurations with default version >= 2.2
  - elf: Add linux-4.15 VDSO hash for RISC-V
  - elf: Add RISC-V dynamic relocations to elf.h
  - powerpc: Fix error message during relocation overflow
  - prlimit: Replace old_rlimit RLIM64_INFINITY with RLIM_INFINITY (swbz#22678)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-35
changelog:
  - Remove sln (#1531546)
  - Remove Sun RPC interfaces (#1531540)
  - Rebuild with newer GCC to fix pthread_exit stack unwinding issue (#1529549)
  - Auto-sync with upstream branch master,
    commit f1a844ac6389ea4e111afc019323ca982b5b027d:
  - CVE-2017-16997: elf: Check for empty tokens before DST expansion (#1526866)
  - i386: In makecontext, align the stack before calling exit (swbz#22667)
  - x86, armhfp: sync sys/ptrace.h with Linux 4.15 (swbz#22433)
  - elf: check for rpath emptiness before making a copy of it
  - elf: remove redundant is_path argument
  - elf: remove redundant code from is_dst
  - elf: remove redundant code from _dl_dst_substitute
  - scandir: fix wrong assumption about errno (swbz#17804)
  - Deprecate external use of libio.h and _G_config.h


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-34
changelog:
  - Auto-sync with upstream branch master,
    commit bad7a0c81f501fbbcc79af9eaa4b8254441c4a1f:
  - copy_file_range: New function to copy file data
  - nptl: Consolidate pthread_{timed,try}join{_np}
  - nptl: Implement pthread_self in libc.so (swbz#22635)
  - math: Provide a C++ version of iseqsig (swbz#22377)
  - elf: remove redundant __libc_enable_secure check from fillin_rpath
  - math: Avoid signed shift overflow in pow (swbz#21309)
  - x86: Add feature_1 to tcbhead_t (swbz#22563)
  - x86: Update cancel_jmp_buf to match __jmp_buf_tag (swbz#22563)
  - ld.so: Examine GLRO to detect inactive loader (swbz#20204)
  - nscd: Fix nscd readlink argument aliasing (swbz#22446)
  - elf: do not substitute dst in $LD_LIBRARY_PATH twice (swbz#22627)
  - ldconfig: set LC_COLLATE to C (swbz#22505)
  - math: New generic sincosf
  - powerpc: st{r,p}cpy optimization for aligned strings
  - CVE-2017-1000409: Count in expanded path in _dl_init_path (#1524867)
  - CVE-2017-1000408: Compute correct array size in _dl_init_paths (#1524867)
  - x86-64: Remove sysdeps/x86_64/fpu/s_cosf.S
  - aarch64: Improve strcmp unaligned performance


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-32
changelog:
  - Obsolete the libcrypt-nss subpackage (#1525396)
  - armhfp: Disable -fstack-clash-protection due to GCC bug (#1522678)
  - ppc64: Disable power6 multilib due to GCC bug (#1522675)
  - Auto-sync with upstream branch master,
    commit 243b63337c2c02f30ec3a988ecc44bc0f6ffa0ad:
  - libio: Free backup area when it not required (swbz#22415)
  - math: Fix nextafter and nexttoward declaration (swbz#22593)
  - math: New generic cosf
  - powerpc: POWER8 memcpy optimization for cached memory
  - x86-64: Add sinf with FMA
  - x86-64: Remove sysdeps/x86_64/fpu/s_sinf.S
  - math: Fix ctanh (0 + i NaN), ctanh (0 + i Inf) (swbz#22568)
  - lt_LT locale: Base collation on copy "iso14651_t1" (swbz#22524)
  - math: Add _Float32 function aliases
  - math: Make cacosh (0 + iNaN) return NaN + i pi/2 (swbz#22561)
  - hsb_DE locale: Base collation on copy "iso14651_t1" (swbz#22515)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-31
changelog:
  - Add elision tunables.  Drop related configure flag.  (#1383986)
  - Auto-sync with upstream branch master,
    commit 37ac8e635a29810318f6d79902102e2e96b2b5bf:
  - Linux: Implement interfaces for memory protection keys
  - math: Add _Float64, _Float32x function aliases
  - math: Use sign as double for reduced case in sinf
  - math: fix sinf(NAN)
  - math: s_sinf.c: Replace floor with simple casts
  - et_EE locale: Base collation on iso14651_t1 (swbz#22517)
  - tr_TR locale: Base collation on iso14651_t1 (swbz#22527)
  - hr_HR locale: Avoid single code points for digraphs in LC_TIME (swbz#10580)
  - S390: Fix backtrace in vdso functions


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-30
changelog:
  - Add build dependency on bison
  - Auto-sync with upstream branch master,
    commit 7863a7118112fe502e8020a0db0fa74fef281f29:
  - math: New generic sinf (swbz#5997)
  - is_IS locale: Base collation on iso14651_t1 (swbz#22519)
  - intl: Improve reproducibility by using bison (swbz#22432)
  - sr_RS, bs_BA locales: make collation rules the same as for hr_HR (wbz#22534)
  - hr_HR locale: various updates (swbz#10580)
  - x86: Make a space in jmpbuf for shadow stack pointer
  - CVE-2017-17426: malloc: Fix integer overflow in tcache (swbz#22375)
  - locale: make forward accent sorting the default in collating (swbz#17750)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-29
changelog:
  - Enable -fstack-clash-protection (#1512531)
  - Auto-sync with upstream branch master,
    commit a55430cb0e261834ce7a4e118dd9e0f2b7fb14bc:
  - elf: Properly compute offsets of note descriptor and next note (swbz#22370)
  - cs_CZ locale: Base collation on iso14651_t1 (swbz#22336)
  - Implement the mlock2 function
  - Add _Float64x function aliases
  - elf: Consolidate link map sorting
  - pl_PL locale: Base collation on iso14651_t1 (swbz#22469)
  - nss: Export nscd hash function as __nss_hash (swbz#22459)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-28
changelog:
  - Auto-sync with upstream branch master,
    commit cccb6d4e87053ed63c74aee063fa84eb63ebf7b8:
  - sigwait can fail with EINTR (#1516394)
  - Add memfd_create function
  - resolv: Fix p_secstodate overflow handling (swbz#22463)
  - resolv: Obsolete p_secstodate
  - Avoid use of strlen in getlogin_r (swbz#22447)
  - lv_LV locale: fix collation (swbz#15537)
  - S390: Add cfi information for start routines in order to stop unwinding
  - aarch64: Optimized memset for falkor


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-27
changelog:
  - Auto-sync with upstream branch master,
    commit f6e965ee94b37289f64ecd3253021541f7c214c3:
  - powerpc: AT_HWCAP2 bit PPC_FEATURE2_HTM_NO_SUSPEND
  - aarch64: Add HWCAP_DCPOP bit
  - ttyname, ttyname_r: Don't bail prematurely (swbz#22145)
  - signal: Optimize sigrelse implementation
  - inet: Check length of ifname in if_nametoindex (swbz#22442)
  - malloc: Account for all heaps in an arena in malloc_info (swbz#22439)
  - malloc: Add missing arena lock in malloc_info (swbz#22408)
  - malloc: Use __builtin_tgmath in tgmath.h with GCC 8 (swbz#21660)
  - locale: Replaced unicode sequences in the ASCII printable range
  - resolv: More precise checks in res_hnok, res_dnok (swbz#22409, swbz#22412)
  - resolv: ns_name_pton should report trailing \ as error (swbz#22413)
  - locale: mfe_MU, miq_NI, an_ES, kab_DZ, om_ET: Escape / in d_fmt (swbz#22403)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-26
changelog:
  - Auto-sync with upstream branch master,
    commit 6b86036452b9ac47b4ee7789a50f2f37df7ecc4f:
  - CVE-2017-15804: glob: Fix buffer overflow during GLOB_TILDE unescaping
  - powerpc: Use latest string function optimization for internal function calls
  - math: No _Float128 support for ppc64le -mlong-double-64 (swbz#22402)
  - tpi_PG locale: Fix wrong d_fmt
  - aarch64: Disable lazy symbol binding of TLSDESC
  - tpi_PG locale: fix syntax error (swbz#22382)
  - i586: Use conditional branches in strcpy.S (swbz#22353)
  - ffsl, ffsll: Declare under __USE_MISC, not just __USE_GNU
  - csb_PL locale: Fix abmon/mon for March (swbz#19485)
  - locale: Various yesstr/nostr/yesexpr/noexpr fixes (swbz#15260, swbz#15261)
  - localedef: Add --no-warnings/--warnings option
  - powerpc: Replace lxvd2x/stxvd2x with lvx/stvx in P7's memcpy/memmove
  - locale: Use ASCII as much as possible in LC_MESSAGES
  - Add new locale yuw_PG (swbz#20952)
  - malloc: Add single-threaded path to malloc/realloc/calloc/memalloc
  - i386: Replace assembly versions of e_powf with generic e_powf.c
  - i386: Replace assembly versions of e_log2f with generic e_log2f.c
  - x86-64: Add powf with FMA
  - x86-64: Add logf with FMA
  - i386: Replace assembly versions of e_logf with generic e_logf.c
  - i386: Replace assembly versions of e_exp2f with generic e_exp2f.c
  - x86-64: Add exp2f with FMA
  - i386: Replace assembly versions of e_expf with generic e_expf.c


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-25
changelog:
  - Auto-sync with upstream branch master,
    commit 797ba44ba27521261f94cc521f1c2ca74f650147:
  - math: Add bits/floatn.h defines for more _FloatN / _FloatNx types
  - posix: Fix improper assert in Linux posix_spawn (swbz#22273)
  - x86-64: Use fxsave/xsave/xsavec in _dl_runtime_resolve (swbz#21265)
  - CVE-2017-15670: glob: Fix one-byte overflow (#1504807)
  - malloc: Add single-threaded path to _int_free
  - locale: Add new locale kab_DZ (swbz#18812)
  - locale: Add new locale shn_MM (swbz#13605)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-24
changelog:
  - Use make -O to serialize make output
  - Auto-sync with upstream branch master,
    commit 63b4baa44e8d22501c433c4093aa3310f91b6aa2:
  - sysconf: Fix missing definition of UIO_MAXIOV on Linux (#1504165)
  - Install correct bits/long-double.h for MIPS64 (swbz#22322)
  - malloc: Fix deadlock in _int_free consistency check
  - x86-64: Don't set GLRO(dl_platform) to NULL (swbz#22299)
  - math: Add _Float128 function aliases
  - locale: Add new locale mjw_IN (swbz#13994)
  - aarch64: Rewrite elf_machine_load_address using _DYNAMIC symbol
  - powerpc: fix check-before-set in SET_RESTORE_ROUND
  - locale: Use U+202F as thousands separators in pl_PL locale (swbz#16777)
  - math: Use __f128 to define FLT128_* constants in include/float.h for old GCC
  - malloc: Improve malloc initialization sequence (swbz#22159)
  - malloc: Use relaxed atomics for malloc have_fastchunks
  - locale: New locale ca_ES@valencia (swbz#2522)
  - math: Let signbit use the builtin in C++ mode with gcc < 6.x (swbz#22296)
  - locale: Place monetary symbol in el_GR, el_CY after the amount (swbz#22019)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-22
changelog:
  - Auto-sync with upstream branch master,
    commit c38a4bfd596db2be2b9c1f96715bdc833eab760a:
  - malloc: Use compat_symbol_reference in libmcheck (swbz#22050)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-21
changelog:
  - Auto-sync with upstream branch master,
    commit 596f70134a8f11967c65c1d55a94a3a2718c731d:
  - Silence -O3 -Wall warning in malloc/hooks.c with GCC 7 (swbz#22052)
  - locale: No warning for non-symbolic character (swbz#22295)
  - locale: Allow "" int_curr_Symbol (swbz#22294)
  - locale: Fix localedef exit code (swbz#22292)
  - nptl: Preserve error in setxid thread broadcast in coredumps (swbz#22153)
  - powerpc: Avoid putting floating point values in memory (swbz#22189)
  - powerpc: Fix the carry bit on mpn_[add|sub]_n on POWER7 (swbz#22142)
  - Support profiling PIE (swbz#22284)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-20
changelog:
  - Auto-sync with upstream branch master,
    commit d8425e116cdd954fea0c04c0f406179b5daebbb3:
  - nss_files performance issue in multi mode (swbz#22078)
  - Ensure C99 and C11 interfaces are available for C++ (swbz#21326)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-19
changelog:
  - Move /var/db/Makefile to nss_db (#1498900)
  - Auto-sync with upstream branch master,
    commit 645ac9aaf89e3311949828546df6334322f48933:
  - openpty: use TIOCGPTPEER to open slave side fd


author: Carlos O'Donell <carlos@systemhalted.org> - 2.26.90-18
changelog:
  - Auto-sync with upstream master,
    commit 1e26d35193efbb29239c710a4c46a64708643320.
  - malloc: Fix tcache leak after thread destruction (swbz#22111)
  - powerpc:  Fix IFUNC for memrchr.
  - aarch64: Optimized implementation of memmove for Qualcomm Falkor
  - Always do locking when iterating over list of streams (swbz#15142)
  - abort: Do not flush stdio streams (swbz#15436)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-17
changelog:
  - Move nss_compat to the main glibc package (#1400538)
  - Auto-sync with upstream master,
    commit 11c4f5010c58029e73e656d5df4f8f42c9b8e877:
  - crypt: Use NSPR header files in addition to NSS header files (#1489339)
  - math: Fix yn(n,0) without SVID wrapper (swbz#22244)
  - math: Fix log2(0) and log(10) in downward rounding (swbz#22243)
  - math: Add C++ versions of iscanonical for ldbl-96, ldbl-128ibm (swbz#22235)
  - powerpc: Optimize memrchr for power8
  - Hide various internal functions (swbz#18822)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-16
changelog:
  - Auto-sync with upstream master,
    commit 1e2bffd05c36a9be30d7092d6593a9e9aa009ada:
  - Add IBM858 charset (#1416405)
  - Update kernel version in syscall-names.list to 4.13
  - Add Linux 4.13 constants to bits/fcntl-linux.h
  - Add fcntl sealing interfaces from Linux 3.17 to bits/fcntl-linux.h
  - math: New generic powf, log2f, logf
  - Fix nearbyint arithmetic moved before feholdexcept (swbz#22225)
  - Mark __dso_handle as hidden (swbz#18822)
  - Skip PT_DYNAMIC segment with p_filesz == 0 (swbz#22101)
  - glob now matches dangling symbolic links (swbz#866, swbz#22183)
  - nscd: Release read lock after resetting timeout (swbz#22161)
  - Avoid __MATH_TG in C++ mode with -Os for fpclassify (swbz#22146)
  - Fix dlclose/exit race (swbz#22180)
  - x86: Add SSE4.1 trunc, truncf (swbz#20142)
  - Fix atexit/exit race (swbz#14333)
  - Use execveat syscall in fexecve (swbz#22134)
  - Enable unwind info in libc-start.c and backtrace.c
  - powerpc: Avoid misaligned stores in memset
  - powerpc: build some IFUNC math functions for libc and libm (swbz#21745)
  - Removed redundant data (LC_TIME and LC_MESSAGES) for niu_NZ (swbz#22023)
  - Fix LC_TELEPHONE for az_AZ (swbz#22112)
  - x86: Add MathVec_Prefer_No_AVX512 to cpu-features (swbz#21967)
  - x86: Add x86_64 to x86-64 HWCAP (swbz#22093)
  - Finish change from “Bengali” to “Bangla” (swbz#14925)
  - posix: fix glob bugs with long login names (swbz#1062)
  - posix: Fix getpwnam_r usage (swbz#1062)
  - posix: accept inode 0 is a valid inode number (swbz#19971)
  - Remove redundant LC_TIME data in om_KE (swbz#22100)
  - Remove remaining _HAVE_STRING_ARCH_* definitions (swbz#18858)
  - resolv: Fix memory leak with OOM during resolv.conf parsing (swbz#22095)
  - Add miq_NI locale for Miskito (swbz#20498)
  - Fix bits/math-finite.h exp10 condition (swbz#22082)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-15
changelog:
  - Auto-sync with upstream master,
    commit b38042f51430974642616a60afbbf96fd0b98659:
  - Implement tmpfile with O_TMPFILE (swbz#21530)
  - Obsolete pow10 functions
  - math.h: Warn about an already-defined log macro


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-14
changelog:
  - Build glibc with -O2 (following the upstream default).
  - Auto-sync with upstream master,
    commit f4a6be2582b8dfe8adfa68da3dd8decf566b3983:
  - malloc: Abort on heap corruption, without a backtrace (swbz#21754)
  - getaddrinfo: Return EAI_NODATA for gethostbyname2_r with NO_DATA (swbz#21922)
  - getaddrinfo: Fix error handling in gethosts (swbz#21915) (swbz#21922)
  - Place $(elf-objpfx)sofini.os last (swbz#22051)
  - Various locale fixes (swbz#15332, swbz#22044)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-13
changelog:
  - Drop glibc-rh952799.patch, applied upstream (#952799, swbz#22025)
  - Auto-sync with upstream master,
    commit 5f9409b787c5758fc277f8d1baf7478b752b775d:
  - Various locale fixes (swbz#22022, swbz#22038, swbz#21951, swbz#13805,
    swbz#21971, swbz#21959)
  - MIPS/o32: Fix internal_syscall5/6/7 (swbz#21956)
  - AArch64: Fix procfs.h not to expose stdint.h types
  - iconv_open: Fix heap corruption on gconv_init failure (swbz#22026)
  - iconv: Mangle __btowc_fct even without __init_fct (swbz#22025)
  - Fix bits/math-finite.h _MSUF_ expansion namespace (swbz#22028)
  - Provide a C++ version of iszero that does not use __MATH_TG (swbz#21930)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-11
changelog:
  - Auto-sync with upstream master,
    commit 3d7b66f66cb223e899a7ebc0f4c20f13e711c9e0:
  - string/stratcliff.c: Replace int with size_t (swbz#21982)
  - Fix tgmath.h handling of complex integers (swbz#21684)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-10
changelog:
  - Use an architecture-independent system call list (#1484729)
  - Drop glibc-fedora-include-bits-ldbl.patch (#1482105)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-8
changelog:
  - Auto-sync with upstream master,
    commit a8410a5fc9305c316633a5a3033f3927b759be35:
  - Obsolete matherr, _LIB_VERSION, libieee.a.


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-6
changelog:
  - Auto-sync with upstream master,
    commit b5889d25e9bf944a89fdd7bcabf3b6c6f6bb6f7c:
  - assert: Support types without operator== (int) (#1483005)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-5
changelog:
  - Auto-sync with upstream master,
    commit 2585d7b839559e665d5723734862fbe62264b25d:
  - Do not use generic selection in C++ mode
  - Do not use __builtin_types_compatible_p in C++ mode (#1481205)
  - x86-64: Check FMA_Usable in ifunc-mathvec-avx2.h (swbz#21966)
  - Various locale fixes (swbz#21750, swbz#21960, swbz#21959, swbz#19852)
  - Fix sigval namespace (swbz#21944)
  - x86-64: Optimize e_expf with FMA (swbz#21912)
  - Adjust glibc-rh827510.patch.


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 2.26-4
changelog:
  - Remove 'Buildroot' tag, 'Group' tag, and '%clean' section, and don't
    remove the buildroot in '%install', all per Fedora Packaging Guidelines
    (#1476839)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-3
changelog:
  - Auto-sync with upstream master,
    commit 403143e1df85dadd374f304bd891be0cd7573e3b:
  - x86-64: Align L(SP_RANGE)/L(SP_INF_0) to 8 bytes (swbz#21955)
  - powerpc: Add values from Linux 4.8 to <elf.h>
  - S390: Add new s390 platform z14.
  - Various locale fixes (swbz#14925, swbz#20008, swbz#20482, swbz#12349
    swbz#19982, swbz#20756, swbz#20756, swbz#21836, swbz#17563, swbz#16905,
    swbz#21920, swbz#21854)
  - NSS: Replace exported NSS lookup functions with stubs (swbz#21962)
  - i386: Do not set internal_function
  - assert: Suppress pedantic warning caused by statement expression (swbz#21242)
  - powerpc: Restrict xssqrtqp operands to Vector Registers (swbz#21941)
  - sys/ptrace.h: remove obsolete PTRACE_SEIZE_DEVEL constant (swbz#21928)
  - Remove __qaddr_t, __long_double_t
  - Fix uc_* namespace (swbz#21457)
  - nss: Call __resolv_context_put before early return in get*_r (swbz#21932)
  - aarch64: Optimized memcpy for Qualcomm Falkor processor
  - manual: Document getcontext uc_stack value on Linux (swbz#759)
  - i386: Add <startup.h> (swbz#21913)
  - Don't use IFUNC resolver for longjmp or system in libpthread (swbz#21041)
  - Fix XPG4.2 bits/sigaction.h namespace (swbz#21899)
  - x86-64: Add FMA multiarch functions to libm
  - i386: Support static PIE in start.S
  - Compile tst-prelink.c without PIE (swbz#21815)
  - x86-64: Use _dl_runtime_resolve_opt only with AVX512F (swbz#21871)
  - x86: Remove __memset_zero_constant_len_parameter (swbz#21790)


author: Florian Weimer <fweimer@redhat.com> - 2.26-2
changelog:
  - Disable multi-arch (IFUNC string functions) on i686 (#1471427)
  - Remove nosegneg 32-bit Xen PV support libraries (#1482027)
  - Adjust spec file to RPM changes


author: Carlos O'Donell <carlos@systemhalted.org> - 2.26-1
changelog:
  - Update to released glibc 2.26.
  - Auto-sync with upstream master,
    commit 2aad4b04ad7b17a2e6b0e66d2cb4bc559376617b.
  - getaddrinfo: Release resolver context on error in gethosts (swbz#21885)


author: Michal Srb <msrb@redhat.com> - 2.2.5-8
changelog:
  - Fix FTBFS (Resolves: rhbz#1106636)
  - Adapt to current packaging guidelines
  - Remove R, add BR: javapackages-local (for %mvn_artifact macro)


author: Omair Majid <omajid@redhat.com> - 2.1.504-1
changelog:
  - Update to .NET Core Runtime 2.1.8 and SDK 2.1.504
  - Sync with Fedora copr spec file
  - Resolves: RHBZ#1646713


author: Pravin Satpute <psatpute@redhat.com> - 2.91.1-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423908 - FTBFS in rawhide.
  - Upstream new release, migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.0-1
changelog:
  - Updated with upstream release 2.91.0
  - First release of Lohit Odia after re-writing GSUB rules.
  - Open type rules are available in .fea file for easy reusability.
  - Feature file compiled with AFDKO.
  - Supports orya and ory2 both.
  - Developer friendly glyphs names with AGL syntax format.
  - Corrected glyph class for all glyphs. 
  - Improved shape of ka-viramasignodia-taodia.
  - Added Glyph positioning rules for below based matra.
  - Test file available with release tarball.
  - Auto testing support with harfbuzz hb-shape.
  - Tested with Harfbuzz and Uniscribe (W8 and XP)
  - Corrected feature rules for conjucts ଖ୍ର ଗ୍ର କ୍ଷ୍ଯ


author: Colin Walters <walters@redhat.com> - 2.28.6-8
changelog:
  - Add various missing BuildRequires, switch to pkgconfig() syntax
  - Backport upstream patch which fixes a crasher in some applications


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.6-2
changelog:
  - disable introspection in anticipation of pygobject3
  - https://bugzilla.redhat.com/show_bug.cgi?id=731851
  - pygobject2 now becomes legacy for static binding support (e.g. PyGTK)


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.6-1
changelog:
  - update to upstream 2.28.6
  - closure: avoid double free crash
  - GVariantType is a boxed struct in newer versions of glib
  - Revert back to a GVariant workaround since the fix hasn't migrated to
    Fedora's version of glib yet (workaround works in both cases)
  - closure: Check the out arg is not null.
  - Fix GC-related crash during PyGObject deallocation (remove patch from
    previous spec)


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.2-1
changelog:
  - update to upstream version 2.28.2 stable
  - fixes issue in bug - https://bugzilla.redhat.com/show_bug.cgi?id=682543


author: John (J5) Palmieri <johnp@redhat.com> - 2.28.1-1
changelog:
  - update to upstream version 2.28.1 stable
  - fix the spec file's sources line to point to the correct ftp directory


author: John (J5) Palmieri <johnp@redhat.com> - 2.26.0-4
changelog:
  - Edit PyCapsule patch to only use PyCapsule in Python 3.x
    since this effects header files which require other modules to 
    be recompiled.  There is actually discussion upstream to undeprecate it
    for the 2.x series


author: John (J5) Palmieri <johnp@redhat.com> - 2.26.0-3
changelog:
  - add patch to work with PyCapsule since PyCObject is removed from 
    Python 3.2 which we ship in rawhide


author: John (J5) Palmieri <johnp@redhat.com> - 2.26.0-2
changelog:
  - add another py3k patch so that we compile correctly under python 3
  - fixes a couple of print syntax and a try, except syntax


author: Colin Walters <walters@verbum.org> - 2.21.4-4
changelog:
  - Update to latest upstream
  - Drop upstreamed patches
  - Require pycairo, since we have a module that uses it
  - Drop libtool overriding; was not commented and seems fine
    without
  - Drop --enable-thread, it's default now
  - Drop --enable-pygi, it's default now
  - Drop clean section, no longer needed in F-14
  - Drop python-sitearch copy&paste, no longer needed in F-14
  - Add SMP flags to make


author: Colin Walters <walters@verbum.org> - 2.21.1-6
changelog:
  - Switch to disabling pygi, remove my patch for now.  See commentary
    https://bugzilla.redhat.com/show_bug.cgi?id=569885#c38


author: - Matthew Barnes <mbarnes@redhat.com> - 2.16.0-1.fc11
changelog:
  - Update to 2.16.0
  - Remove patch for RH bug #457502 (fixed upstream).
  - Remove patch for GNOME bug #551059 and #551212 (fixed upstream).


author: Matthew Barnes <mbarnes@redhat.com> - 2.15.1-1.fc10
changelog:
  - Update to 2.15.1
  - Bump glib2_version to 2.16.0.
  - Remove ancient automake_version.
  - Add a pygobject2-codegen subpackage.


author: Matthias Clasen <mclasen@redhat.com> - 0.3.3-1
changelog:
  - Update to 0.3.3
  - Include gtk3 module
  - Drop gtk deps, since we don't want to depend on both gtk2 and gtk3;
    instead own the directories


author: Jitka Plesnikova <jplesnik@redhat.com> - 0.04-18
changelog:
  - Update dependencies
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Remove build root cleaning, BuildRoot definition and %defattr


author: Ondrej Vasik <ovasik@redhat.com> 0.0.27-1
changelog:
  - New version 0.0.27
  - remove several bashisms in scripts
  - add new option --profile for preprocessing documents
    with profiling stylesheet
  - fix several potential crashes in xmlif (found by static analysis)


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.25-6
changelog:
  - drop hard requirement for text-www-browser (any package that
    needs docbook->txt for build  may buildrequire any of
    w3m/lynx/elinks as suggested by script)


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.24-1
changelog:
  - new release 0.0.24, basic support for docbook->epub
    conversion, use backend extensions by default
    (--noextensions) to disable it


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.23-1
changelog:
  - New version 0.0.23
  - added autodetection for more common tools like
    gnu cp or tail
  - added option --noautosize to prevent overriding
    of user-defined or system-default paper size
  - use shell built-in 'type -t' instead of 'which'
    utility for detection of file availability


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.22-1
changelog:
  - New version 0.0.22
  - autodetection for tools/program paths, consolidated
    error code handling, build warnings cleanup


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.21-6
changelog:
  - fix cleaning up of temporary files with libpaper(Debian)
  - fix xmllint postvalid (added noent option), use nonet
    switch


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.21-3
changelog:
  - merge review(#226568):
    ship documentation files, fix license tag, use recommended
    parallel make, make install instead of macro, require libxslt
    instead of direct binary requirement


author: Ondrej Vasik <ovasik@redhat.com> - 0.0.20-1
changelog:
  - new version 0.0.20
  - added experimental fop support(additional output formats)
  - possibility to read stylesheet from STDIN, using recursive
    cp in docbook formats, updated man pages


author: Tim Waugh <twaugh@redhat.com> 0.0.12-2
changelog:
  - Disable magic encoding detection, since the stylesheets don't handle
    it well at all (bug #80732).


author: Tim Waugh <twaugh@redhat.com> 0.0.11-1
changelog:
  - 0.0.11.
  - xmlto.mak no longer needed.
  - CVS patch no longer needed.
  - Update docbook-xsl requirement.
  - Ship xmlif.
  - Run tests.
  - No longer a noarch package.


author: Tom "spot" Callaway <tcallawa@redhat.com> - 1:8.4.2-5
changelog:
  - apps can't find libTix.so without an ld.so.conf.d file. It probably makes
    more sense to move this library back into %{_libdir}, but I'll leave that to
    Vitezslav to decide.
  - fix tix-8.4.2-tcl8.5.patch so that it leaves the TkPutImage define to XPutImage,
    otherwise, apps just stop working.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1:8.4.2-3
changelog:
  - Fix for build with tcl 8.5, change the installing paths,
    remove unused variable (Marcela Maslanova <mmaslano@redhat.com>)
  - Fix build issues and installation path problems for tcl 8.5,
    move demo programs to -doc subpackage (Wart <wart@kobold.org>)
  - Fix buildroot, tix 8.4 to tcl 8.5 compatibility patch based on
    patch by Greg Couch


author: Jens Petersen <petersen@redhat.com> - 1:8.1.4-95
changelog:
  - new package split out from tcltk
  - build with installed tcl and tk
  - build without itcl for now
  - add a tixwish symlink
  - clean build remnants from tixConfig.sh
  - move devel files to devel subpackage
  - move doc files to doc subpackage
  - filter out non-tix changelog entries


author: Jens Petersen <petersen@redhat.com> - 8.3.5-90
changelog:
  - make sure expect and itcl are linked against buildroot not installroot libs
    - add itcl3.2-tclstubs-cfg.patch so that itcl can find tclstubs in buildroot


author: Jens Petersen <petersen@redhat.com> - 8.3.5-89
changelog:
  - install tix pkgIndex under libdir and let it use datadir for WmDefault
    (#83662 and partly #45570)


author: Jens Petersen <petersen@redhat.com> - 8.3.5-85
changelog:
  - install tix library files under datadir
  - fix dangling iwidgets symlink in libdir
  - build all except tclx with _smp_mflags
  - add some requires


author: Jens Petersen <petersen@redhat.com> - 8.3.5-84
changelog:
  - link all libs with DT_SONAME using tcl.m4 patch (#81297)
  - drop synthetic lib provides
  - update tix to 8.1.4
  - include tix docs (part of #72497), except the pdf files
  - revert to itcl3.2 due to 3.2.1 config problems
  - fix iwidget libdir symlink
  - install iwidget scripts under datadir
  - remove obsolete patches from srpm
  - update buildrequires
  - use buildroot instead of RPM_BUILD_ROOT
  - install all man pages under mandir, instead of moving some from /usr/man
  - introduce _genfilelist macro for clean single-sweep find filelist generation
    for each package
  - use perl to remove buildroot prefix from filelists


author: Jens Petersen <petersen@redhat.com> 8.3.5-76
changelog:
  - make it build on x86_64 (details below)
  - add itcl_major and use it
  - patch tix so it can find itcl-3.2.1 config files
  - don't explicitly update config.{guess,sub} since %configure does it for us
  - added "--without check" rpmbuild option to disable running tests in future
  - build and install itcl with library files under datadir
  - build tix after itcl, and actually config, build and install tix itcl library
  - generate filelists from datadir and not from mandir from now on
  - install tix binary libraries in libdir


author: Jens Petersen <petersen@redhat.com>
changelog:
  - update to tcl-8.3.5, tk-8.3.5, tcl-html-8.3.5
  - update url for tcl, tk, tclx, itcl, tcllib
  - build without all makecfg patches for now
    - in particular use upstream versioned library name convention
  - add backward compatible lib symlinks for now
  - add unversioned symlinks for versioned bindir files
  - don't apply obsolete tix dirtree patch any more (#45570)
  - set tix to epoch 1, since 8.1.3 < 8.2.0b1
  - build shared tix libs
  - use make's -C option rather than jumping in and out of source dirs
    during install
  - don't need to move itcl and tcllib man pages downunder datadir
  - include all tix files in manifest (#72497)


author: Jens Petersen <petersen@redhat.com>
changelog:
  - update to tcl-8.3.4, tk-8.3.4 (#75600), tcllib-1.3, itcl-3.2.1,
    tix-8.1.3 (#59098)
  - drop obsolete tcl cruft, tcl refcount, tix perf patches
  - drop the crud compat dir symlinks in libdir
  - replace tclvers and tkvers by tcltkvers and use it
  - replace tcl_major and tk_major by tcltk_major and use it
  - don't explicitly provide 64bit libs on ia64 and sparc64
  - drop obsolete tix perf patch (#59098)
  - update tix build steps for 8.1.3


author: Adrian Havill <havill@redhat.com>
changelog:
  - fixed itkwish/itclsh lib problem (bug 52608)
  - make itcl install not need tclsh/wish during config/make (bug 52606)


author: Adrian Havill <havill@redhat.com>
changelog:
  - added execute bit mode for itclsh and itksh compat shells
  - re-enable glibc string and math inlines; recent gcc is a-ok.
  - optimize at -O2 instead of -O
  - rename "soname" patches related to makefile/autoconf changes
  - added elf "needed" for tk, tclx, tix, itk


author: Adrian Havill <havill@redhat.com>
changelog:
  - added itclsh/itkwish for backwards compatibility, fixed rpath (bug 46086)
  - fixed 64 bit RPM provides for dependencies


author: Adrian Havill <havill@redhat.com>
changelog:
  - refresh all sources to latest stable (TODO: separate expect/expectk)
  - massage out some build stuff to patches (TODO: libtoolize hacked constants)
  - remove patches already rolled into the upstream
  - removed RPATH (bugs 45569, 46085, 46086), added SONAMEs to ELFs
  - added all necessary header files for itcl (bug 41374)
  - made compile-friendly for IA64


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - merge "best known" patches from searching, stubs were broken.
  - tix needs -fwritable-strings (#14352).
  - create tixwish symlink.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - make sure that tix shared libraries are installed.
  - don't mess with %{_libdir}, it's gonna be a FHS pita.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to (tcl,tk}-8.2.3, expect-5.31, and itcl-3.1.0, URL's as well.
  - use perl to drill out pre-pended RPM_BUILD_ROOT.
  - configure with --enable-threads (experimental).


author: Otto Hammersmith <otto@redhat.com>
changelog:
  - fixed filelist for tix... replacing path to the expect binary in scripts
    was leaving junk files around.


author: Thomas Haller <thaller@redhat.com> - 1.8.10-2
changelog:
  - fix double-free handling VPN data in nm-applet (rh #1541565)
  - fix certificate chooser for no available modules (bgo #785674)


author: Lubomir Rintel <lrintel@redhat.com> - 1.8.0-2
changelog:
  - editor: fix crash when destroying 802.1x page (rh #1458567)
  - po: update Japanese translation (rh #1379642)


author: Lubomir Rintel <lkundrak@v3.sk> - 1.2.0-0.1.20150903git807cbdf
changelog:
  - Update to 1.2 git snapshot:
  - Add libnma subpackages
  - Add support for libnm-based properties plugins


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.9.0-8.git20140123
changelog:
  - update to latest git snapshot (git20140123 sha:5d4f17e)
  - applet: fix crash when "CA certificate is not required" (rh #1055535)


author: Dan Winship <danw@redhat.com> - 0.9.9.0-7.git20131028
changelog:
  - update to latest git snapshot
  - re-enable nm-applet on certain non-GNOME-Shell desktops (rh #1017471)


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-6.git20130906
changelog:
  - libnm-gtk: fix for enabling the Apply button for PEAP and TTLS (rh #1000564)
  - libnm-gtk: only save CA certificate ignored value when connection is saved
  - editor: fix display of VLAN parent interface


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-5.git20130906
changelog:
  - editor: fix missing user/password when re-editing a connection (rh #1000564)
  - editor: fix handling of missing CA certificate prompts (rh #758076) (rh #809489)
  - editor: fix handling of bonding modes (rh #953076)
  - applet/editor: add InfiniBand device support (rh #867273)


author: Dan Williams <dcbw@redhat.com> - 0.9.8.1-3.git20130430
changelog:
  - editor: fix possible crash canceling connection edit dialog
  - applet: only request secrets from the user when allowed to
  - applet: fix signal icons with newer libpng
  - applet: fix possible crash getting secrets with libsecret


author: Dan Williams <dcbw@redhat.com> - 0.9.8.1-1.git20130327
changelog:
  - Update to 0.9.8.2 snapshot
  - Updated translations
  - editor: don't overwrite bridge/bond master interface name with UUID
  - applet: fix WWAN PIN dialog invalid "label1" entry widget
  - editor: fix allowed values for VLAN ID and MTU
  - editor: preserve existing PPP connection LCP echo failure and reply values
  - editor: ensure changes to the STP checkbox are saved
  - editor: hide BSSID for AdHoc connection (rh #906133)
  - editor: fix random data sneaking into IPv6 route gateway fields
  - editor: fix handling of initial entry for MAC address widgets


author: Dan Williams <dcbw@redhat.com> - 0.9.7.997-1
changelog:
  - Update to 0.9.7.997 (0.9.8-beta2)
  - editor: better handling of gateway entry for IPv4
  - editor: fix some mnemonics (rh #893466)
  - editor: fix saving connection when ignoring CA certificate
  - editor: enable Bridge connection editing
  - editor: hide widgets not relevant for VPN connections


author: Dan Williams <dcbw@redhat.com> - 0.9.5.96-1
changelog:
  - Update to 0.9.6-rc2
  - lib: recognize PKCS#12 files exported from Firefox
  - lib: fix some wireless dialog crashes


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.5.95-1.git20120713
changelog:
  - update to 0.9.5.95 (0.9.6-rc1)  snapshot
  - editor: fixed UI mnemonics
  - editor: fix defaults for PPP echo values
  - applet: various crash and stability fixes
  - applet: show IPv6 addressing page for VPN plugins that support it
  - applet: port to GSettings and split out 0.8 -> 0.9 migration code into standalone tool


author: Martin Kolman <mkolman@redhat.com> - 0.6.0-3
changelog:
  - add patch for DTD fix
  - add patch with support for asynchronous calls (vponcova)
  - add patch with support for transformation between D-Bus errors and exceptions (vponcova)


author: Pravin Satute <psatute AT redhat DOT com> - 2.1-1
changelog:
  - Upstream new release with ttfautohint
  - Changed url to https://github.com/RedHatBrand/overpass/, https://overpassfont.org looks dead.


author: Jan Koutny <jan.koutny@oracle.com> - 2.12.0-0.1.rc1.0.1
changelog:
  - Set AMD CPU freq governor to ondemand when unapplying cpu tunings [Orabug: 30033199]
  - Restored the system rules in recommend.conf [Orabug: 29962987]
  - Added oci-nic profile and updated profiles-oci-recommend [Orabug: 29869969]
    for increasing combined channels to 16 on NICs with bnxt_en driver on BM 
  - Do not access xps_cpus on single queue devices [Orabug: 29894296]
  - OL8 does not support System Purpose [Orabug: 29443881]
    Remove syspurpose_role option in recommend.conf.
  - Added profiles-oci-recommend package [Orabug: 29632202]
  - Modified the patch for ol8 [Orabug: 29560068] (james.cheng@oracle.com)
  - Added iscsi plugin, and
    - added oci-rps-xps profile [Orabug: 28397039]
    - added oci-busy-polling profile [Orabug: 28748149]
    - added oci-cpu-power profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.12.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1685585
    - sap-netweaver: changed values of kernel.shmall and kernel.shmmax to RHEL-8 defaults
      resolves: rhbz#1708418
    - sap-netweaver: changed value of kernel.sem to RHEL-8 default
      resolves: rhbz#1701394
    - sap-hana-vmware: dropped profile
      resolves: rhbz#1715541
    - s2kb function: fixed to be compatible with python3
      resolves: rhbz#1684122
    - do fallback to the powersave governor (balanced and powersave profiles)
      resolves: rhbz#1679205
    - added support for negation of CPU list
      resolves: rhbz#1676588
    - switched from sysctl tool to own implementation
      resolves: rhbz#1666678
    - realtime-virtual-host: added tsc-deadline=on to qemu cmdline
      resolves: rhbz#1554458
    - fixed handling of devices that have been removed and re-attached
      resolves: rhbz#1677730


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.10.0-9
changelog:
  - realtime-virtual-guest/host: start/stop rt-entsk daemon on
    initialization/shutdown
    resolves: rhbz#1619822


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.10.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#1546598
    - IRQ affinity handled by scheduler plugin
      resolves: rhbz#1590937


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.10.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1546598
    - script: show stderr output in the log
    - realtime-virtual-host: script.sh: add error checking
    - man: improved tuned-profiles-cpu-partitioning.7
    - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
    - plugin_scheduler: whitelist/blacklist processed also for thread names
    - bootloader: patch all GRUB2 config files
    - profiles: added mssql profile
    - tuned-adm: print log excerpt when changing profile
    - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
    - sysctl: support assignment modifiers as other plugins do
    - oracle: fixed ip_local_port_range parity warning
      resolves: rhbz#1527219
    - Fix verifying cpumask on systems with more than 32 cores
      resolves: rhbz#1528368
    - oracle: updated the profile to be in sync with KCS 39188
      resolves: rhbz#1447323


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.8.0-6
changelog:
  - Dropped qemu-kvm-tools-rhev requirement, now satisfied by
    tuned-profiles-nfv-host-bin
    Related: rhbz#1504681


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.8.0-1
changelog:
  - new release
    - rebase tuned to latest upstream
      resolves: rhbz#1388454
    - cpu-partitioning: enabled timer migration
      resolves: rhbz#1408308
    - cpu-partitioning: disabled kvmclock sync and ple
      resolves: rhbz#1395855
    - spec: muted error if there is no selinux support
      resolves: rhbz#1404214
    - units: implemented instance priority
      resolves: rhbz#1246172
    - bootloader: added support for initrd overlays
      resolves: rhbz#1414098
    - cpu-partitioning: set CPUAffinity early in initrd image
      resolves: rhbz#1394965
    - cpu-partitioning: set workqueue affinity early
      resolves: rhbz#1395899
    - scsi_host: fixed probing of ALPM, missing ALPM logged as info
      resolves: rhbz#1416712
    - added new profile cpu-partitioning
      resolves: rhbz#1359956
    - bootloader: improved inheritance
      resolves: rhbz#1274464
    - units: mplemented udev-based regexp device matching
      resolves: rhbz#1251240
    - units: introduced pre_script, post_script
      resolves: rhbz#1246176
    - realtime-virtual-host: accommodate new ktimersoftd thread
      resolves: rhbz#1332563
    - defirqaffinity: fixed traceback due to syntax error
      resolves: rhbz#1369791
    - variables: support inheritance of variables
      resolves: rhbz#1433496
    - scheduler: added support for cores isolation
      resolves: rhbz#1403309
    - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
      resolves: rhbz#1413111
    - desktop: fixed typo in profile summary
      resolves: rhbz#1421238
    - with systemd don't do full rollback on shutdown / reboot
      resolves: rhbz#1421286
    - builtin functions: added virt_check function and support to include
      resolves: rhbz#1426654
    - cpulist_present: explicitly sorted present CPUs
      resolves: rhbz#1432240
    - plugin_scheduler: fixed initialization
      resolves: rhbz#1433496
    - log errors when applying a profile fails
      resolves: rhbz#1434360
    - systemd: added support for older systemd CPUAffinity syntax
      resolves: rhbz#1441791
    - scheduler: added workarounds for low level exceptions from
      python-linux-procfs
      resolves: rhbz#1441792
    - bootloader: workaround for adding tuned_initrd to new kernels on restart
      resolves: rhbz#1441797


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.1-3
changelog:
  - Fixed traceback when non-existent profile is queried through
    tuned-adm profile_info
    Resolves: rhbz#1385145


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.1-1
changelog:
  - New release
    Resolves: rhbz#1362481
  - Dropped tuned-gui-traceback-fix and tuned-adm-list-no-dbus-traceback-fix
    patches (both upstreamed)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.0-2
changelog:
  - Fixed tuned-gui traceback (by tuned-gui-traceback-fix patch)
    Resolves: rhbz#1358846
  - Fixed 'tuned-adm list' traceback if daemon is not running
    (by tuned-adm-list-no-dbus-traceback-fix patch)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.0-1
changelog:
  - new-release
    - gui: fixed save profile
      resolves: rhbz#1242491
    - tuned-adm: added --ignore-missing parameter
      resolves: rhbz#1243807
    - plugin_vm: added transparent_hugepage alias
      resolves: rhbz#1249610
    - plugins: added modules plugin
      resolves: rhbz#1249618
    - plugin_cpu: do not show error if cpupower or x86_energy_perf_policy are
      missing
      resolves: rhbz#1254417
    - tuned-adm: fixed restart attempt if tuned is not running
      resolves: rhbz#1258755
    - nfv: avoided race condition by using synchronous mode
      resolves: rhbz#1259039
    - realtime: added check for isolcpus sanity
      resolves: rhbz#1264128
    - pm_qos: fixed exception if PM_QoS is not available
      resolves: rhbz#1296137
    - plugin_sysctl: reapply system sysctl after Tuned sysctl are applied
      resolves: rhbz#1302953
    - atomic: increase number of inotify watches
      resolves: rhbz#1322001
    - realtime-virtual-host/guest: added rcu_nocbs kernel boot parameter
      resolves: rhbz#1334479
    - realtime: fixed kernel.sched_rt_runtime_us to be -1
      resolves: rhbz#1346715
    - tuned-adm: fixed detection of no_daemon mode
      resolves: rhbz#1351536
    - plugin_base: correctly strip assignment modifiers even if not used
      resolves: rhbz#1353142
    - plugin_disk: try to workaround embedded '/' in device names
      related: rhbz#1353142
    - sap-hana: explicitly setting kernel.numa_balancing = 0 for better performance
      resolves: rhbz#1355768
    - switched to polkit authorization
      resolves: rhbz#1095142
    - plugins: added scsi_host plugin
      resolves: rhbz#1246992
    - spec: fixed conditional support for grub2 to work with selinux
      resolves: rhbz#1351937
    - gui: added tuned icon and desktop file
      resolves: rhbz#1356369


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.0-1
changelog:
  - new-release
    - plugin_cpu: do not show error if cpupower or x86_energy_perf_policy are missing
    - plugin_sysctl: fixed quoting of sysctl values
      resolves: rhbz#1254538
    - tuned-adm: added log file location hint to verify command output
    - libexec: fixed listdir and isdir in defirqaffinity.py
      resolves: rhbz#1252160
    - plugin_cpu: save and restore only intel pstate attributes that were changed
      resolves: rhbz#1252156
    - functions: fixed sysfs save to work with options
      resolves: rhbz#1251507
    - plugins: added scsi_host plugin
    - tuned-adm: fixed restart attempt if tuned is not running
    - spec: fixed post scriptlet to work without grub
      resolves: rhbz#1265654
    - tuned-profiles-nfv: fix find-lapictscdeadline-optimal.sh for CPUS where ns > 6500
      resolves: rhbz#1267284
    - functions: fixed restore_logs_syncing to preserve SELinux context on rsyslog.conf
      resolves: rhbz#1268901
    - realtime: set unboud workqueues cpumask
      resolves: rhbz#1259043
    - spec: correctly remove tuned footprint from /etc/default/grub
      resolves: rhbz#1268845
    - gui: fixed creation of new profile
      resolves: rhbz#1274609
    - profiles: removed nohz_full from the realtime profile
      resolves: rhbz#1274486
    - profiles: Added nohz_full and nohz=on to realtime guest/host profiles
      resolves: rhbz#1274445
    - profiles: fixed lapic_timer_adv_ns cache
      resolves: rhbz#1259452
    - plugin_sysctl: pass verification even if the option doesn't exist
      related: rhbz#1252153
    - added support for 'summary' and 'description' of profiles,
      extended D-Bus API for Cockpit
      related: rhbz#1228356


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-1
changelog:
  - new-release
    related: rhbz#1155052
    - plugin_scheduler: work with nohz_full
      resolves: rhbz#1247184
    - fixed realtime-virtual-guest/host profiles packaged twice
      resolves: rhbz#1249028
    - fixed requirements of realtime and nfv profiles
    - fixed tuned-gui not starting
    - various other minor fixes


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.0-1
changelog:
  - new-release
    resolves: rhbz#1155052
    - add support for ethtool -C to tuned network plugin
      resolves: rhbz#1152539
    - add support for ethtool -K to tuned network plugin
      resolves: rhbz#1152541
    - add support for calculation of values for the kernel command line
      resolves: rhbz#1191595
    - no error output if there is no hdparm installed
      resolves: rhbz#1191775
    - do not run hdparm on hotplug events if there is no hdparm tuning
      resolves: rhbz#1193682
    - add oracle tuned profile
      resolves: rhbz#1196298
    - fix bash completions for tuned-adm
      resolves: rhbz#1207668
    - add glob support to tuned sysfs plugin
      resolves: rhbz#1212831
    - add tuned-adm verify subcommand
      resolves: rhbz#1212836
    - do not install tuned kernel command line to rescue kernels
      resolves: rhbz#1223864
    - add variables support
      resolves: rhbz#1225124
    - add built-in support for unit conversion into tuned
      resolves: rhbz#1225135
    - fix vm.max_map_count setting in sap-netweaver profile
      resolves: rhbz#1228562
    - add tuned profile for RHEL-RT
      resolves: rhbz#1228801
    - plugin_scheduler: added support for runtime tuning of processes
      resolves: rhbz#1148546
    - add support for changing elevators on xvd* devices (Amazon EC2)
      resolves: rhbz#1170152
    - add workaround to be run after systemd-sysctl
      resolves: rhbz#1189263
    - do not change settings of transparent hugepages if set in kernel cmdline
      resolves: rhbz#1189868
    - add tuned profiles for RHEL-NFV
      resolves: rhbz#1228803
    - plugin_bootloader: apply $tuned_params to existing kernels
      resolves: rhbz#1233004


