# changelog

author: Rich Megginson <rmeggins@redhat.com> - 1.1.27-1
changelog:
  - Ticket #281 - TLS not working with latest openldap
  - Ticket #161 - Review and address latest Coverity issues


author: Noriko Hosoi <nhosoi@redhat.com> - 1.1.31-1
changelog:
  - bump version to 1.1.31
  - Ticket #476 - 389 ds do not start on F18 due to missing modules
  - Ticket #293 - remove-ds-admin.pl does not remove everything
  - Ticket 400 - BIND operation result not checked properly in admin server
  - Ticket 401 - Console login fails with anonymous access disabled


author: Rich Megginson <rmeggins@redhat.com> - 1.1.35-1
changelog:
  - 0417dc7 add Eclipse and patch files
  - f2004ea compiler warning - ldif_read_record lineno type depends on openldap version
  - Ticket #47413 389-admin fails to build with latest httpd
  - 2a67826 add more debugging for SSL connection problems
  - Ticket #47465 problem with 389-adminutil detection in m4/adminutil.m4 in 389-admin and 389-dsgw
  - Ticket #47486 compiler warnings in adminutil, admin, dsgw
  - 14b1bf9 ignore files generated by Eclipse
  - Ticket 47467 - Improve CRL import error messages
  - Ticket 362 - Directory Console generates insufficient key strength
  - Ticket 47466 - Importing CA cert with existing name crashes security CGI
  - Ticket 47468 - Change security password validation error is out of order
  - Ticket #47334 - Avoid quoting all settings in console.conf
  - Ticket #47333 - Relabel lockfile when starting Admin Server
  - Ticket #47298 - remove-ds-admin.pl does not stop the admin server
  - Ticket #567 - Restart of Admin server from console fails on segfault


author: Noriko Hosoi <nhosoi@redhat.com> - 1.1.43-1
changelog:
  - Release 1.1.43
  - 389-admin uses 389-admin-git.sh which uses HTTP to download content from git (should use HTTPS) (DS 48762)
  - Resolves: Bug 1334480 - running remove-ds-admin.pl multiple times will make it so you cannot install DS (DS 48429)
  - Resolves: Bug 1260445 - RHDS upgrade change Ownership of certificate files upon upgrade. (DS 48409)
  - Resolves: Bug 1173249 - register-ds-admin - silent file incorrectly processed (DS 47548)
  - Resolves: Bug 1173244 - Configuration Tab does not work with FIPS mode enabled (DS 47493)
  - Resolves: Bug 1223845 - register-ds-admin.pl script prints clear text password in the terminal (DS 48186)
  - Resolves: Bug 1173249 - register-ds-admin.pl fails to set local bind DN and password (DS 47548)
  - Resolves: Bug 966958 - Improve Add CRL/CKL dialog and errors (DS 47467)
  - Resolves: Bug 1217015 - remove-ds-admin.pl removes files in the rpm (DS 48171)
  - Resolves: Bug 979419 - "Manage certificates" crashes admin server (DS 48153)
  - Resolves: Bug 1162417 - repl-monitor invoked from adminserver cgi fails (DS 48024)
  - Resolves: Bug 1183152 - CVE-2015-0233 389-admin: multiple /tmp/ file vulnerabilities [directory_server_10] (DS 47995)
  - Resolves: Bug 1173252 - Admin Server reconfig breaks SSL config (DS 47901)
  - Ticket 47929 - Admin Server - disable SSLv3 by default
  - Ticket 201   - nCipher HSM cannot be configured via the console
  - Ticket 47493 - Configuration Tab does not work with FIPS mode enabled
  - Ticket 47697 - Resource leak in lib/libdsa/dsalib_updown.c
  - Ticket 47860 - register-ds-admin.pl problem when following steps to replicate o=netscaperoot
  - Ticket 47548 - register-ds-admin does not register into remote config ds
  - Ticket 47893 - Admin Server should use Sys::Hostname instead Net::Domain
  - Ticket 47891 - Admin Server reconfig breaks SSL config
  - Ticket 47300 - Update man page for remove-ds-admin.pl
  - Ticket 47850 - "nsslapd-allow-anonymous-access: rootdse" makes login as "admin" fail at the first time
  - Ticket 47497 - Admin Express - remove "Security Level"
  - Ticket 47495 - admin express: wrong instance creation time
  - Ticket 47665 - Create new instance results in setting wrong ACI for the "cn=config" entry
  - Ticket 47478 - No groups file? error restarting Admin server
  - Ticket 47300 - [RFE] remove-ds-admin.pl: redesign the behaviour
  - Ticket 434   - admin-serv logs filling with "admserv_host_ip_check: ap_get_remote_host could not resolve <ip address>"
  - Ticket 47563 - cannot restart directory server from console
  - Ticket 222   - Admin Express issues "Internal Server Error" when the Config DS is down.
  - Ticket 418   - Error with register-ds-admin.pl
  - fix for bug 377 - Unchecked use of SELinux command Reviewed by: rmeggins
  - Ticket 47498 - Error Message for Failed to create the configuration directory server


author: Rich Megginson <rmeggins@redhat.com> - 1.1.6-1
changelog:
  - the 1.1.6 release - git tag 389-admin-console-1.1.6
  - Bug 668950 - Add posix group support to Console
  - Bug 151705 - Need to update Console Cipher Preferences with new ciphers


author: Rich Megginson <rmeggins@redhat.com> - 1.1.7-1
changelog:
  - the 1.1.7 release - git tag 389-admin-console-1.1.7
  - Bug 476925 - Admin Server: Do not allow 8-bit passwords for
  -     the admin user
  - Bug 211296 - Clean up all HTML pages (Admin Express, Repl Monitor, etc)


author: Rich Megginson <rmeggins@redhat.com> - 1.1.8-1
changelog:
  - Bug 723126 - Configure Admin Server -> Connection Restriction --> Add Screen is flicking consistently.


author: Noriko Hosoi<nhosoi@redhat.com> - 1.1.11-1
changelog:
  - Release 1.1.11
  - Bug 723126   - Configure Admin Server -> Connection Restriction --> Add Screen is flicking consistently.
  - Bug 1022104  - Remove versioned jarfiles from _javadir
  - Bug 1234441  - Security info from Help should be removed
  - Ticket 362   - Directory Console generates insufficient key strength
  - Ticket 47467 - Improve online help for Add CRL dialog
  - Ticket 47477 - Cannot restart SSL-admin server from console


author: Noriko Hosoi <nhosoi@redhat.com> - 1.1.17-1
changelog:
  -bump version to 1.1.17
  Resolves: Bug 856089 - slapi_ldap_bind() doesn't check bind results (Ticket 479 - Console logins fail intermittenly)
  Resolves: Bug 905266 - BIND operation result not checked properly in admin server and adminutil


author: Rich Megginson <rmeggins@redhat.com> - 1.1.18-1
changelog:
  - ee1ef81 add Eclipse generated files
  - Ticket #47486 - compiler warnings in adminutil, admin, dsgw
  - 77fd77a fix mem leak in admldapBuildInfoSSL when there is no password


author: Rich Megginson <rmeggins@redhat.com> - 1.1.19-1
changelog:
  - Ticket #47415 "Manage certificates" crashes admin server
  - 8647ad8 fix compiler warnings - enhancements to test ticket 47415


author: Noriko Hosoi <nhosoi@redhat.com> - 1.1.22-1
changelog:
  - Release 1.1.22
  - Ticket 48152 - "Manage certificates" crashes admin server
  - Ticket 47929 - adminutil - future proof getSSLVersion
  - Ticket 47929 - Adminutil - do not use SSL3 by default
  - Ticket 47850 - "nsslapd-allow-anonymous-access: rootdse" makes login as "admin" fail at the first time
  - Ticket 47881 - crash during debug session in adminutil
  - Ticket 47680 - Upgraded 389-admin rpms and now I can't start dirsrv-admin
  - Ticket 47415 - "Manage certificates" crashes admin server
  - Ticket 47486 - compiler warnings in adminutil, admin, dsgw
  - Ticket 47343 - 389-adminutil: Does not support aarch64 in f19 and rawhide


author: Rich Megginson <rmeggins@redhat.com> - 1.1.7-1
changelog:
  - use jpackage_script instead of packaging our own shell script
  - support "skins" package for other brands/versions


author: Noriko Hosoi <nhosoi@redhat.com> - 1.1.17-1
changelog:
  - Release 1.1.17-1
  - Updated the value of PKGGUID and OLDGUID with uuidgen for Windows Console.
  - Resolves #1304595 - Console -- Update Java dependency to 1.8 
  - Add the option "-Djava.net.preferIPv4Stack=true" to template.bat directly.
  - Separate PolicyCRT from CRT in WixMerge.
    Note: there is not policy msm in MSVC 11 C:\Program Files (x86)\Common Files\Merge Modules
  - change the nspr library name for windows (win/{Console.wxs,Makefile}).
  - Removed unused NOMSM from win/build.bat.
  - Resolves #1229424 - Windows console can't be updated, only uninstalled/installed from zero
  - Bug 1022104 - Remove versioned jar files
  - adding el6dsrv dist
  - fixed bogus date


author: Rich Megginson <rmeggins@redhat.com> 1.2.4-1
changelog:
  - the 1.2.4 release - git tag 389-ds-console-1.2.4
  - Bug 450016 - RFE- Console display values in KB/MB/GB
  - Bug 387981 - plain files can be chosen on the Restore Directory dialog
  - Bug 661116 - 389-console Configuration tab admin permissions (nsslapd-referral ?) and folder not expending immediatly
  - Bug 151705 - Need to update Console Cipher Preferences with new ciphers
  - Bug 553066 - Directory Console: do not display "subtree" index type
  - Bug 599732 - Root node in directory browser shows DN syntax error


author: Rich Megginson <rmeggins@redhat.com> 1.2.5-1
changelog:
  - the 1.2.5 release - git tag 389-ds-console-1.2.5
  - Bug 616707 - Add attribute matching rule UI to Console
  - Bug 533505 - Warn about CA cert trust when enabling SSL in Console
  - Bug 158262 - Windows Sync UI is inconistent
  - Bug 504803 - Allow nsslapd-*-logmaxdiskspace to be set to -1 in UI
  - Bug 474113 - Allow access log level to be configured from Console
  - Bug 229693 - Update naming attribute when objectclass is removed
  - Bug 211296 - Clean up all HTML pages (Admin Express, Repl Monitor, etc)


author: Rich Megginson <rmeggins@redhat.com> 1.2.6-1
changelog:
  - git tag 389-ds-console-1.2.6
  - added skins support
  - Bug 700908 - Validate matching rules when creating a new attribute
  - Bug 705753 - Refresh problem in Console directory browser


author: Noriko Hosoi <nhosoi@redhat.com> 1.2.12-1
changelog:
  - Release 1.2.12-1
  - Console -- Update Java dependency to 1.8
  - Ticket 48417 - Security info from Help should be removed (partial)
  - Ticket 48139 - drop support for legacy replication
  - Ticket 48130 - Add "+all" and "-TLS_RSA_WITH_AES_128_GCM_SHA256" to Console Cipher Preference for TLS
  - Ticket 47994 - DS Console always sets nsSSL3 to "on" when a securty setting is adjusted
  - Ticket 47380 - RFE: Winsync loses connection with AD objects when they move from the console. 
  - Ticket 135   - DS console - right clicking an object does not select that object
  - Ticket 47887 - DS Console does not correctly disable SSL
  - Ticket 47485 - DS instance cannot be restored from remote console
  - Ticket 47886 - DS Console - mouse wheel speed very slow
  - Ticket 176   - DS Console should timeout when mismatched port and protocol combination is chosen
  - Ticket 47883 - DS Console - java exception when refreshing  schema
  - Ticket 96    - Window too large for Manage password policy
  - Ticket 370   - Opening merge qualifier CoS entry using RHDS console changes the entry


author: Petr Pisar <ppisar@redhat.com> - 0.5.6-8
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Nicolas Chauvet <kwizart@gmail.com> - 0.5.6-14
changelog:
  - Switch to always retry by default
  - Drop akmods preset by f28
  - Don't enable service on ah
  - Test a rw directory


author: Nicolas Chauvet <kwizart@gmail.com> - 0.5.6-17
changelog:
  - Don't enforce target arch - rhbz#1644430
  - Rework log file path
  - Avoid using /usr/lib/modules for el6 compat


author: František Dvořák <valtri@civ.zcu.cz> - 1.3.37-1
changelog:
  - Release glite-px-proxyrenewal 1.3.37
  - Packaging updates (%license, direct configure script launch)


author: Jakub Čajka <jcajka@redhat.com> - 1.11.4-1
changelog:
  - Rebase to go1.11.4
  - Fix for CVE-2018-16875, CVE-2018-16874 and CVE-2018-16873
  - Resolves: BZ#1664332


author: Jakub Čajka <jcajka@redhat.com> - 1.13-1
changelog:
  - Rebase to go1.13
  - Fix for CVE-2019-9512, CVE-2019-9514, CVE-2019-14809
  - Resolves: BZ#1741815, BZ#1741826, BZ#1743130


author: jchaloup <jchaloup@redhat.com> - 0-0.7.gite1eb486
changelog:
  - Fix %files devel section
  - Fix BR and R, change import path prefix to code.google.com/p
    related: #1250519


author: Jan Chaloupka <jchaloup@redhat.com> - 0-0.5.20171003git6b67b3f
changelog:
  - Bump to upstream 6b67b3fab74d992bd07f72550006ab2c6907c416
    resolves: #1498057
    resolves: #1493960


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 0.22.0-7
changelog:
  - Fix build with GCC 4.3 (#434061), patch by Vasile Gaburici, simpler fix for
    the "list" name conflict from the Debian patch
  - PPC build fix (acinclude readline problem) by Mamoru Tasaka


author: Rich Megginson <rmeggins@redhat.com> - 1.1.6-1
changelog:
  - The 1.1.6 release
  - Bug: 594939 - ACI editing dialog initial size is not big enough to display
  - Bug 151705 - Need to update Console Cipher Preferences with new ciphers
  - fix fourth step of cert wizard for installing cert
  - Bug 668950 - Add posixGroup support to Console
  - Bug 583652 - Console caches magic numbers instead of DNA-generated values


author: Rich Megginson <rmeggins@redhat.com> - 1.1.7-1
changelog:
  - The 1.1.7 release
  - Bug 158926 - Unable to install CA certificate when using hardware token
  -             ( LunaSA )
  - Bug 622436 - Removal of Security:domestic from Console
  - Bug 229699 - objectclass without parent causes StringIndexOutOfBounds in console
  - Bug 583652 - Console caches magic numbers instead of DNA-generated values


author: Rich Megginson <rmeggins@redhat.com> - 1.1.7-2
changelog:
  - using new upstream git repo at fedorahosted.org
  - git tag idm-console-framework-1.1.7
  - Use DefaultTopologyPlugin if topologyplugin not found in the DS
  - Bug 706472 - [console] java exception throw in UI, but user gets created
  - Bug 706258 - ACI Editor dialog flickers


author: Noriko Hosoi <nhosoi@redhat.com> - 1.1.15-1
changelog:
  - Release 1.1.15-1
  - Ticket - Console window could be hidden after login via consoles on multiple hosts (DS 48811)
  - Console -- Update Java dependency to 1.8
  - Ticket 48187 - Adding an OU from console is throwing missing attribute aliasedObjectName error
  - Ticket 48134 - Directory Server Admin Console: plaintext password logged in debug mode
  - Ticket 47946 - Adding an ACI from the GUI removes broken ACIs
  - Ticket 47946 - Need to revise console aci syntax checking
  - Ticket 97    - 389-console should provide usage options, help, and man pages
  - Ticket 48130 - Add "+all" and "-TLS_RSA_WITH_AES_128_GCM_SHA256" to Console Cipher Preference for TLS
  - Ticket 48134 - Directory Server Admin Console: plaintext password logged in debug mode
  - Ticket 47929 - idm-console-framework - set default min to tls1.0
  - Ticket 47946 - ACI's are replaced by "ACI_ALL" after editing group of ACI's including invalid one
  - Ticket 47929 - Console - add tls1.1 support
  - Ticket 47472 - Entries cannot be highlighted in the "Edit Aci" Rights panel
  - Ticket 47364 - Console does not support passwords containing  8-bit characters
  - Ticket 47604 - idm-console-framework: remove versioned jars from /usr/share/java
  - Ticket 47480 - Admin Console "server restart dialog" disppears after clicking OK
  - Ticket 47467 - Improve CRL import dialog text
  - Ticket 362   - Directory Console generates insufficient key strength
  - Bug 1022104 - Do not use versioned jars
  - using new upstream git repo at fedorahosted.org
  - git tag idm-console-framework-1.1.7
  - Use DefaultTopologyPlugin if topologyplugin not found in the DS


author: Ian McLeod <imcleod@redhat.com> - 1.1.8-1
changelog:
  - Upstream release 1.1.8
  - systemd support
  - docker base image updates
  - significant EC2 updates for regions and instance types
  - VMWare fusion vagrant box support


author: Ian McLeod <imcleod@redhat.com> - 1.1.9-1
changelog:
  - Upstream release 1.1.9
    - Add HyperV Vagrant support
    - enhance vSphere and VMWare Fusion support


author: Zsolt Molnar <zsolt.molnar@cern.ch> - 1.12.2-2
changelog:
  - remove forgotten print statements - visible in glue2 mode only
   - some more fixes for memory leaks
   - fix leak when more than one endpt returned if endpoint is specified
   - some more sanity checks and valgrind warning fixes
   - sanity checks , variable initializations
   - fix memory leak in FTS only


author: Adrien Devresse <adevress at cern.ch> - 1.13.0-0
changelog:
  - crash fix related to get_details
   - wildcard support in INFOSYS
   - minor bug fix
   - synchronisation with EMI 2 update


author: Adrien Devresse <adevress at cern.ch> - 1.14.0
changelog:
  - correct several memory leaks
  - correct thread safety issues
  - implement session re-use system for fts 3.0


author: Charles R. Anderson <cra@wpi.edu> - 3.0-1
changelog:
  - Updated to 3.0.  Adds support for importing PasswordSafe v3 files.
  - preserve timestamp on prep/install
  - Add README file


author: Dodji Seketeli <dodji@redhat.com> - 1.0-1
changelog:
  - Update to upstream 1.0 tarball
  - Adjust tarball_revision and tarball_name macros
  - Adjust Release macro
  - Added missing build and runtime require 'mailcap' to allow
    fedabipkgdiff to detect RPM files
  - Update description to account for the new kmidiff tool
  - Remove patches that got applied upstream:
    0001-A-suppressed-diff-node-implies-suppressing-all-equiv.patch
    0001-Bug-20927-Segfault-when-HOME-is-not-set.patch
    0001-Fix-aborting-when-reading-.foo-symbols-from-a-ppc64-.patch
  - Add kmidiff to the RPM


author: Dodji Seketeli <dodji@redhat.com> - 1.5-2
changelog:
  - Apply patches
    Support-having-several-debuginfo-search-dirs-for-a-b.patch and
    Add-a-fail-no-debug-info-to-abidiff.patch


author: Dodji Seketeli <dodji@seketeli.org> - 1.6-1
changelog:
  - Update to upstream 1.6
  - Remove patches:
    Support-having-several-debuginfo-search-dirs-for-a-b.patch
    Add-a-fail-no-debug-info-to-abidiff.patch


author: pjp <pjp@fedoraproject.org> - r128-1
changelog:
  - lz4cli sparse file support
  - Restored lz4hc compression ratio
  - lz4 cli supports long commands
  - Introduced lz4-static sub package BZ#1208203


author: pjp <pjp@fedoraproject.org> - r129-1
changelog:
  - New LZ4_compress_fast() API.
  - New LZ4 CLI improved performance with multiple files.
  - Other bug fix and documentation updates.


author: pjp <pjp@fedoraproject.org> - r130-1
changelog:
  - Fixed: incompatibility sparse mode vs console.
  - Fixed: LZ4IO exits too early when frame crc not present.
  - Fixed: incompatibility sparse mode vs append mode.
  - Performance fix: big compression speed boost for clang(+30%).


author: pjp <pjp@fedoraproject.org> - r131-1
changelog:
  - New: Dos/DJGPP target #114.
  - Added: Example using lz4frame library #118.
  - Changed: liblz4.a no longer compiled with -fPIC by default.


author: David Sommerseth <dazo@eurephia.org> - 2.4.1-3
changelog:
  - Various cleanups
  - Splitting out -devel files into a separate package
  - Removed several contrib and sample files which makes is not
    strictly needed in this package.
  - build: Long running tests can be disabled with "--without tests_long"
  - build: Removed defined %{plugins} macro not in use


author: David Sommerseth <dazo@eurephia.org> - 2.4.2-1
changelog:
  - Update to upstream v2.4.2
  - This update fixes CVE-2017-7478 and CVE-2017-7479
  - Restore the old plug-in locations (rhbz#1444535)


author: David Sommerseth <dazo@eurephia.org> - 2.4.3-1
changelog:
  - Updating to upstream openvpn-2.4.3
  - Fix remotely-triggerable ASSERT() on malformed IPv6 packet {CVE-2017-7508}
  - Prevent two kinds of stack buffer OOB reads and a crash for invalid input data {CVE-2017-7520}
  - Fix potential double-free in --x509-alt-username {CVE-2017-7521}
  - Fix remote-triggerable memory leaks {CVE-2017-7521}
  - Verify PGP signature of source tarball as part of package building


author: David Sommerseth <dazo@eurephia.org> - 2.4.4-1
changelog:
  - Update to upstream openvpn-2.4.4
  - Includes fix for possible stack overflow if --key-method 1 is used {CVE-2017-12166}
  - Build against Fedora EPEL lz4 compression library
  - Build with long running test cases


author: David Sommerseth <dazo@eurephia.org> - 2.4.5-1
changelog:
  - Updating to upstream, openvpn-2.4.5
  - Package upstream ChangeLog, which contains a bit more details than Changes.rst
  - Cleaned up spec file further, removed Group: tag, trimmed changelog section,
    added gcc to BuildRequires.
  - Excluded not relevant file, README.mbedtls
  - Changed crypto self-test to test AES-{128,256}-{CBC,GCM} instead of only BF-CBC (deprecated)


author: Peter Hanecak <hany@hany.sk> - 0.7.7-1
changelog:
  - Update to 0.7.7
  - Dropped pathes (both CVEs fixed in 0.7.7)
  - Added BuildRequires: gcc
    (https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot)


author: Jean-Francois Saucier <jsaucier@gmail.com> - 3.1.2-1
changelog:
  - Update to the new upstream version
  - Added support for postgresql 9.5
  - Removed support for postgresql 8.2


author: Petr Pisar <ppisar@redhat.com> - 0.41-10
changelog:
  - Specify all dependencies (bug #1169791)
  - Sub-package XML::Atom::Server because it requires Apache


author: Iain Arnell <iarnell@gmail.com> 0.3101-1
changelog:
  - update to latest upstream version
  - clean up spec for modern rpmbuild
  - remove unnecessary explicit requires


author: Jerry James <loganjerry@gmail.com> - 965-1
changelog:
  - New upstream release
  - Drop -proof-access patch now that csisat has been retired
  - Add a library built for R support


author: Devrim GUNDUZ <devrim@gunduz.org> - 3.1.3-1
changelog:
  - Update to 3.1.3, per changes described at:
    http://www.pgpool.net/docs/pgpool-II-3.1.3/doc/NEWS.txt


author: Tom Callaway <spot@fedoraproject.org> - 3.2.0-1
changelog:
  - update to 3.2.0
  - add recovery subpackage (thanks to Dmitry S. Makovey)
  - add rhel conditionalization (thanks to Dmitry S. Makovey)
  - update systemd scriptlets


author: Paul Howarth <paul@city-fan.org> 1.3.3g-3
changelog:
  - Fix mod_sftp/mod_sftp_pam invalid pool allocation during kbdint authentication
    (#1007678, upstream bug #3973, CVE-2013-4359)


author: Paul Howarth <paul@city-fan.org> 1.3.3g-4
changelog:
  - Fix support for 8192-bit DH parameters (#1044586)
  - Add 3072-bit and 7680-bit DH parameters (upstream bug 4002)


author: Paul Howarth <paul@city-fan.org> 1.3.3g-5
changelog:
  - Add -utils subpackage for support tools (#1258440), using a sub-package to
    ensure that the main package does not require perl
  - Update ftpasswd to version from proftpd 1.3.5a for additional functionality
    (SHA passwords, locking and unlocking of accounts)


author: Paul Howarth <paul@city-fan.org> - 1.3.3g-8
changelog:
  - Fix SUID/SGID directory permission setting regression introduced with fix
    for CVE-2012-6095 (#1297264)


author: Paul Howarth <paul@city-fan.org> - 1.3.3g-9
changelog:
  - Fix for CVE-2016-3125: usage of 1024 bit DH key even with manual parameters
    set (http://bugs.proftpd.org/show_bug.cgi?id=4230)
  - Also fixed related issue where only first DH param in TLSDHParamFile is used,
    regardless of requested keylength
    (http://bugs.proftpd.org/show_bug.cgi?id=3868)


author: Paul Howarth <paul@city-fan.org> - 1.3.3g-11
changelog:
  - Fixed pre-authentication remote denial-of-service issue
    (CVE-2019-18217, https://github.com/proftpd/proftpd/issues/846)


author: Paul Howarth <paul@city-fan.org> - 1.3.3g-12
changelog:
  - Fix build compatibility with MySQL 8 (#1764401)
    https://github.com/proftpd/proftpd/issues/824
    https://github.com/proftpd/proftpd/pull/825


author: Pavel Raiskup <praiskup@redhat.com> - 1.9.0-1
changelog:
  - new upstream release, per release notes:
    https://github.com/okbob/pspg/releases/tag/1.9.0
    https://github.com/okbob/pspg/releases/tag/1.7.2
    https://github.com/okbob/pspg/releases/tag/1.7.1
    https://github.com/okbob/pspg/releases/tag/1.7.0
    https://github.com/okbob/pspg/releases/tag/1.6.8
    https://github.com/okbob/pspg/releases/tag/1.6.7
    https://github.com/okbob/pspg/releases/tag/1.6.6


author: Pavel Raiskup <praiskup@redhat.com> - 2.0.3-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/2.0.3
  - https://github.com/okbob/pspg/releases/tag/2.0.2


author: Pavel Raiskup <praiskup@redhat.com> - 2.1.3-1
changelog:
  - new upstream release, per release notes:
    https://github.com/okbob/pspg/releases/tag/2.1.3
    https://github.com/okbob/pspg/releases/tag/2.1.2
    https://github.com/okbob/pspg/releases/tag/2.1.1
    https://github.com/okbob/pspg/releases/tag/2.1.0
    https://github.com/okbob/pspg/releases/tag/2.0.5
    https://github.com/okbob/pspg/releases/tag/2.0.4


author: Pavel Raiskup <praiskup@redhat.com> - 2.5.2-1
changelog:
  - new upstream release, per release notes:
    https://github.com/okbob/pspg/releases/tag/2.5.2
    https://github.com/okbob/pspg/releases/tag/2.5.0
    https://github.com/okbob/pspg/releases/tag/2.1.8
    https://github.com/okbob/pspg/releases/tag/2.1.7


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.62-6
changelog:
  - Fixed integer overflow
    Resolves: CVE-2013-4852
  - Fixed bogus dates in changelog (best estimated)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.62-7
changelog:
  - Fixed a heap-corrupting buffer underrun bug in the modmul function
    Resolves: CVE-2013-4206
  - Fixed a buffer overflow vulnerability in the calculation of modular
    inverses when verifying a DSA signature
    Resolves: CVE-2013-4207
  - Fixed problem when private keys are left in memory after being
    used by PuTTY tools
    Resolves: CVE-2013-4208


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.63-1
changelog:
  - New version
    Resolves: rhbz#995610
  - Dropped perms, CVE-2013-4852, CVE-2013-4206, CVE-2013-4207,
    CVE-2013-4208 patches (all in upstream)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.70-1
changelog:
  - New version
    Resolves: rhbz#1468324
    Resolves: rhbz#1468324
  - Dropped gtk2-compile-fix patch (not needed)


author: José Matos <jamatos@fedoraproject.org> - 3.5.0b2-0.2
changelog:
  - Improve description to make it clear that this package in only needed for python 2.7
  - Make the license tag information more explicit.


author: Avram Lubkin <aviso@fedoraproject.org> - 3.5.0b2-1
changelog:
  - Updated to build for el6
  - Updated to build Python3 packages
  - Changed Python2 package name to python2-configparser for Fedora 24+
  - Updated description
  - Removed license comments


author: Paul Howarth <paul@city-fan.org> - 3.9.0-1
changelog:
  - Rewrite for EPEL-6 (python 2 only) without modern python and other macros
  - Update to 3.9.0
  - Build with -mstackrealign for ix86 to avoid segfaults
    https://github.com/Legrandin/pycryptodome/issues/308


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.15.0-6
changelog:
  - Drop explicit locale setting
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Iryna Shcherbina <ishcherb@redhat.com> - 0.23.1-3
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Lubomír Sedlář <lsedlar@redhat.com> - 1.19-1
changelog:
  - Fix get_minor_version on inputs with more that two components
  - Add new release types
  - Add __version__ attribute
  - Documentation improvements


author: Kevin Fenzi <kevin@scrye.com> - 1.20-3
changelog:
  - Fix typo in image names: s/vabrant/vagrant/ (Rawhide)
  - Rebuilt to change main python from 3.4 to 3.6 (EPEL 7)


author: Lubomír Sedlář <lsedlar@redhat.com> - 1.22-1
changelog:
  - Fix parsing composeinfo with almost conflicting UIDs (lsedlar@redhat.com)
  - Improve error message for invalid metadata (lsedlar@redhat.com)
  - Fix image format for vpc (lsedlar@redhat.com)
  - Set up test infrastructure (lsedlar@redhat.com)
  - Add missing parts to the TreeInfo documentation (jkonecny@redhat.com)
  - Add a comment explaining the 'tar-gz' type (awilliam@redhat.com)


author: Lubomír Sedlář <lsedlar@redhat.com> - 1.23-1
changelog:
  - Add class for representing extra files in the compose (lsedlar@redhat.com)
  - Add tests for multiple variants in one .treeinfo (riehecky@fnal.gov)


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 3.15-1
changelog:
  - Update to 3.15
  - Use HTTPS URLs
  - Remove Group tag
  - Enable parallel make with smpflags
  - Switch to %autosetup
  - cherry-pick "Fix passing CFLAGS to PHP configure" from upstream
  - set REMCTL_PYTHON_VERSIONS=python2 (rhbz#1606109)


author: Ondřej Nosek <onosek@redhat.com> - 1.58-3
changelog:
  - Backport: Custom handler for koji watch_tasks
  - Backport: Show nvr in container-build
  - Backport: Different import --offline command behavior


author: Ondřej Nosek <onosek@redhat.com> - 1.58-5
changelog:
  - Now again, libmodulemd is required instead of python3-libmodulemd because
    it was causing troubles with upgrades.


author: Ondřej Nosek <onosek@redhat.com> - 1.59-1
changelog:
  - Add argument to skip build option for container-build (rcerven)
  - Sorting imports (onosek)
  - Ignore error when adding exclude patterns - 1733862 (onosek)
  - Path to lookaside repo fix (onosek)
  - Add commands for interacting with Koji side-tag plugin - 329 (lsedlar)
  - Do not delete files related to gating on import (onosek)
  - Support integer values in the optional module-build arguments (mprahl)
  - container-build: add --build-release argument (kdreyer)
  - Allow some arguments for container-build together (onosek)
  - git-changelog: Fix running on Python 3 - 3 (onosek)
  - Port to libmodulemd 2 API (lsedlar)
  - Module-overview allows filtering by owner - 325 (onosek)
  - Different import --offline command behavior - #445 (onosek)
  - Show nvr in container-build (onosek)
  - Custom handler for koji watch_tasks (onosek)
  - Unittests for clone command (onosek)
  - Fix clone --branches - rhbz#1707223 (tmz)
  - Make gitbuildhash work for windows builds (lsedlar)


author: Ondrej Nosek <onosek@redhat.com> - 1.59-2
changelog:
  - Backport: container-build: add --isolated and --koji-parent-build arguments
  - Backport: Pass skip_build option to buildContainer
  - Backport: Reuse koji_cli.lib.unique_path


author: Michal Toman <mtoman@redhat.com> 1.11-1
changelog:
  - do not die trying to chmod a hardlink
  - only hardlink unpacked vmcores
  - print command line formatted correctly
  - allow submitting vmcores with spaces in file name
  - do not run makedumpfile when not necessary
  - allow to specify kernel VRA with custom cores
  - do not require the trailing slash in task manager URL
  - do not kill retrace-server-cleanup when retrace_log does not exist
  - cache kernel version into task directory
  - add support for ppc64, s390x
  - include floating point registers in userspace backtraces
  - execute ABRT's exploitability plugin if available


author: Michal Toman <mtoman@redhat.com> 1.12-1
changelog:
  - do not run kmem on vmcores by default
  - fix group readability of vmcores
  - add support for lzop compression
  - add DeleteFailedTaskAfter config option
  - add arch-based remote execution
  - add set-success and set-fail actions to retrace-server-interact
  - add config sanity checks to retrace-server-cleanup


author: Michal Toman <mtoman@fedoraproject.org> 1.13-1
changelog:
  - update handling of RT kernels
  - do not forward error messages from 'strings' to actual stderr
  - do not die if RepoDir has no subdirs
  - allow 32-bit crash to be executed on 64-bit hosts
  - add bits for script hooks
  - better integration with FAF
  - refactor worker


author: Jakub Filak <jfilak@redhat.com> - 1.14-1
changelog:
  - generated config.py for the target platform at build time
  - update URL patterns for Fedora repositories
  - spec: add sqlite and cron to requirements
  - set "crash" inside get_crash_cmd file if the file does not exist
  - fix get_use_mock typo
  - use %global for the nested python_site macro instead of %define


author: Jakub Filak <jfilak@redhat.com> - 1.15-1
changelog:
  - Correct paths to Fedora development releases
  - Fix small problem with strip_vmcore calling prepare_debuginfo
  - Avoid calling prepare_debuginfo from retrace-server-interact after kernel version detection
  - Move prepare_debuginfo and strip_vmcore inside RetraceTask
  - Add vmlinux file inside RetraceTask
  - Fix bt_filter missing last task/PID read if the last line was not blank
  - Update the release information to be dynamic based off of plugins
  - Including a Red Hat Enterprise Linux plugin
  - Mock logging into retrace task's dir
  - Enforce uniform mode bits for almost all RetraceTask files
  - Fix incorrect group permissions when writing RetraceServer files especially with interactive mode
  - Fix retrace-server-worker --restart backtrace due to unwriteable retrace_log
  - Correct license address
  - Add VMCoreTask and UsrCoreTask to config


author: Jakub Filak <jfilak@redhat.com> - 1.16-1
changelog:
  - Log failed to start tasks
  - Gracefully handle the worker errors
  - Move the FTP query operation to an AJAX operation
  - Fix duplicate email if a vmcore task fails to determine the kernel version
  - Fix typo preventing email notifications from working.
  - Correct eu-unstrip parser if FILE is '-'
  - Allow package names with Epoch


author: Matej Marusak <mmarusak@redhat.com> 1.17.0-1
changelog:
  - Enable creating releases with makefile
  - Introduce gen-version
  - Do not use fedorahosted.org as source
  - Include md5sum of original archive in summary page
  - Do not try to get default time when ftptask
  - Fix character escape typo
  - Change retrace-server httpd config
  - Modify search for existing vmlinux files in cache to handle older kernel-debuginfos
  - Default to hex mode for crash commands involving backtraces.
  - Create directories for tests if they are not present
  - Don't mention old wiki page
  - Fix double call of _fail method
  - Update README
  - Allow any compression of man pages
  - Autogen without args configures for debugging
  - Run 'configure' at the end of 'autogen'
  - Improve autogen to list and install dependencies
  - Avoid circular dependency on kernel-debuginfo for vmlinux files already in cache
  - Add plugin checking action
  - Update documentation of plugin in README
  - Use short form rhel when creating repository
  - Fix methods arguments
  - Move global variables to config.py.in
  - Recover from missing start/finish task files
  - Change error message in cleanup script
  - Add '-ascending' argument to gdb
  - Use devtoolset-4-gdb when used on RHEL
  - Enable creating repository from faf repository
  - Add 'make check'
  - Correct eu-unstrip parser if FILE is .
  - Not mark packages with different architectures as duplicity
  - Separate worker start_retrace method
  - Add class to wrap plugins accessing
  - Add class to wrap configuration file reading
  - Delete python labels when no python backtrace available
  - Git ignore bytecode
  - Add python backtrace, source and locals into backtrace
  - Move src/lib to src/retrace to make testing retrace-server easier
  - Add "exploitable" into LocationMatch in the httpd.conf
  - Fix invalid syntax error in sys.stderr.print()


author: Athmane Madjoudj <athmane@fedoraproject.org> - 2.0.0-1
changelog:
  - Cleanup the specfile / remove EL5 bits
  - Remove Amazon Linux workaround (s3cmd is now compatible w/ py 2.7)
  - Use py3 for Fedora package


author: Dave Dykstra <dwd@fedoraproject.org> - 3.2.1-1.1
changelog:
  - Add patch for PR #3456 to make --home work with 'mount home = no'
  - Add patch for PR #3803 to make bind mounts from read-only filesystems
    work unprivileged


author: Dave Dykstra <dwd@fedoraproject.org> - 3.4.0-1.1
changelog:
  - Update to upstream 3.4.0-1
  - Fix compiles on non-64 bit architectures (PR #4370)
  - Add config fakeroot CLI which was inadvertently left out of the upstream
    release (PR #4346)


author: Dave Dykstra <dwd@fedoraproject.org> - 3.4.2-1.1
changelog:
  - Upgrade to upstream 3.4.2.  Remove PR #4522, no longer needed.
    Still contains config fakeroot cli PR #4346.


author: Christopher Engelhard <ce@lcts.de> 2.4.0-9
changelog:
  - add bundled provides for fnv and simclist
  - add systemd dependency
  - fix changelog formatting
  - patch & use upstream service file
  - revert 05037d7b - disallow building on rhel < 6
  - make package own /usr/libexec/sshguard


author: Christopher Engelhard <ce@lcts.de> 2.4.0-10
changelog:
  - add missing dependencies
  - move examples to (docdir)/examples subfolder
  - prefix directories with %dir in %files
  - use complete & commented config files
  - add white/blacklisting


author: Bojan Smojver <bojan@rexursive.com> - 0.6.1-1
changelog:
  - try a bump to official 0.6.1
  - provide format for syslog() call
  - fix memset() call
  - fix implicit declarations


