# changelog

author: Adam Jackson <ajax@redhat.com> - 18.3.0-0.2
changelog:
  - Mesa 18.3.0 RC2
  - Drop python3 build system backport
  - Drop no-longer-necessary big-endian build fix
  - Re-enable 10bpc fbconfigs


author: Matej Kollar <mkollar@redhat.com> 2.3.1-1
changelog:
  - 1107841 - Avoid creating profile with empty id
  - Typo
  - Retab
  - Bumping package versions for 2.3.
  - Bumping package versions for 2.2.


author: Tomas Kasparek <tkasparek@redhat.com> 2.4.1-1
changelog:
  - rhbz#1232596: Require just openscap-scanner package everywhere
  - Bumping package versions for 2.4.


author: Ondrej Gajdusek <ogajduse@redhat.com> 2.6.1-1
changelog:
  - Increasing required version of rhnlib in due to ImportError module i18n in
    scap.py
  - Bumping package versions for 2.6.


author: Tomas Kasparek <tkasparek@redhat.com> 2.7.1-1
changelog:
  - 1451778 - require openscap-utils on rhel for backward compatibility
  - Updated links to github in spec files
  - Migrating Fedorahosted to GitHub
  - Bumping package versions for 2.7.


author: Michael Mraka <michael.mraka@redhat.com> 2.8.2-1
changelog:
  - install files into python_sitelib/python3_sitelib
  - split spacewalk-oscap into python2/python3 specific packages


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-23.2.el8
changelog:
  - admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
  - locking: restrict sockets to mode 0600 (CVE-2019-10132)
  - logging: restrict sockets to mode 0600 (CVE-2019-10132)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-23.3.el8
changelog:
  - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
  - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
  - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
  - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)


author: Pravin Satpute <psatpute@redhat.com> - 2.91.0-1
changelog:
  - Resolves 1152203 :- Upstream release 2.91.0
  - Rewritten all Open type tables with supporting taml and tml2 tags.
  - Renamed all the glyphs by following AGL syntax.
  - Open type tables are available in .fea file and this time it is compiled with AFDKO.
  - Reusing glyphs by "COPY REFERENCE"
  - Added GRID FITTING table and auto-hinting by fontforge.
  - Tested with Harfbuzz NG and Uniscribe (W8).
  - Auto test module available with test files.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.2-1
changelog:
  - Added  BuildRequires: python3-devel.
  - Resolves: #1423909 - FTBFS in rawhide
  - Upstream new release, migrated from fedorahosted.org to pagure.io.


author: Pravin Satpute <psatpute@redhat.com> - 2.91.3-1
changelog:
  - Upstream new release 2.91.3
  - Update metainfo file with latest specifications
  - Changed location of metainfo to /usr/share/metainfo


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-9
changelog:
  - The template scripts needed to use @libdir@ instead of hardcoding
  - /usr/lib
  - Use make DESTDIR=$RPM_BUILD_ROOT install instead of % makeinstall
  - do the actual build in a "built" subdirectory, until we remove
  - the old script templates


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-15
changelog:
  - Touch all of the ldap/admin/src/scripts/*.in files so that they
  - will be newer than their corresponding script template files, so
  - that make will rebuild them.


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-16
changelog:
  - Fixed the problem where the server would crash upon shutdown in dblayer
  - due to a race condition among the database housekeeping threads
  - Fix a problem with normalized absolute paths for db directories


author: Dennis Gilmore <dennis@ausil.us> - 1.1-0.1.cvs20070108
changelog:
  - update to a cvs snapshot
  - fedorafy the spec 
  - create -devel subpackage
  - apply a patch to use mozldap not mozldap6
  - apply a patch to allow --prefix to work correctly


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-1.el4.cvs20070119
changelog:
  - Changed version to 1.1.0 and added Release 1.el4.cvs20070119
  - merged in changes from Fedora Extras candidate spec file


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-6.el4.20070125
changelog:
  - Move the plugin *.so files into the main package instead of the devel
  - package because they are loaded directly by name via dlopen


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-8.el4.20070125
changelog:
  - added logconv.pl
  - added slapi-plugin.h to devel package
  - added explicit dirs for /var/log/fedora-ds et. al.


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070213
changelog:
  - More cleanup suggested by Dennis Gilmore
  - This is the fedora extras candidate based on cvs tag FedoraDirSvr110a1


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070223
changelog:
  - Renamed package to fedora-ds-base, but keep names of paths/files/services the same
  - use the shortname macro (fedora-ds) for names of paths, files, and services instead
  - of name, so that way we can continue to use e.g. /etc/fedora-ds instead of /etc/fedora-ds-base
  - updated to latest sources


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070320
changelog:
  - update to latest sources
  - added migrateTo11 to allow migrating instances from 1.0.x to 1.1
  - ldapi support
  - fixed pam passthru plugin ENTRY method


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.3.20070720
changelog:
  - Added Requires for perldap, cyrus sasl plugins
  - Removed template-migrate* files
  - Added perl module directory
  - Removed install.inf - setup-ds.pl can now easily generate one


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-1.2
changelog:
  - fix build breakage due to open()
  - mock could not find BuildRequires: db4-devel >= 4.2.52
  - mock works if >= version is removed - it correctly finds db4.6


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-2.0
changelog:
  - This is the beta2 release
  - new file added to package - /etc/sysconfig/dirsrv - for setting
  - daemon environment as is usual in other linux daemons


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-4
changelog:
  - This is the GA release of Fedora DS 1.1
  - Removed version numbers for BuildRequires and Requires
  - Added full URL to source tarball


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0.1-1
changelog:
  - Resolves bug 434403 - GCC 4.3 build fails
  - Rolled new source tarball which includes Nathan's fix for the struct ucred
  - NOTE: Change version back to 1.1.1 for next release
  - this release was pulled from CVS tag FedoraDirSvr110_gcc43


author: Tom "spot" Callaway <tcallawa@redhat.com> - 1.1.0.1-3
changelog:
  - add patch to allow server to work with NSS 3.11.99 and later
  - do NSS_Init after fork but before detaching from console


author: Rich Megginson <rmeggins@redhat.com> - 1.1.2-1
changelog:
  - This is the 1.1.2 release.  The bugs fixed can be found here
  - https://bugzilla.redhat.com/showdependencytree.cgi?id=452721
  - Added winsync-plugin.h to the devel subpackage


author: Rich Megginson <rmeggins@redhat.com> - 1.2.0-1
changelog:
  - new release 1.2.0
  - Made devel package depend on mozldap-devel
  - only create run dir if it does not exist
  - CVS tag: FedoraDirSvr_1_2_0_RC1 FedoraDirSvr_1_2_0_RC1_20090330


author: Rich Megginson <rmeggins@redhat.com> - 1.2.0-4
changelog:
  - final release 1.2.0
  - Resolves: bug 475338 - LOG: the intenal type of maxlogsize, maxdiskspace and minfreespace should be 64-bit integer
  - Resolves: bug 496836 - SNMP ldap-agent on Solaris: Unable to open semaphore for server: 389
  - CVS tag: FedoraDirSvr_1_2_0 FedoraDirSvr_1_2_0_20090428


author: Rich Megginson <rmeggins@redhat.com> - 1.2.1-1
changelog:
  - change name to 389
  - change version to 1.2.1
  - added initial support for numeric string syntax
  - added initial support for syntax validation
  - added initial support for paged results including sorting


author: Rich Megginson <rmeggins@redhat.com> - 1.2.2-1
changelog:
  - backed out - added template-initconfig to %files - this change is for the next major release
  - bump version to 1.2.2
  - fix reopened 509472 db2index all does not reindex all the db backends correctly
  - fix 518520 -  pre hashed salted passwords do not work
  - see https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of
  - bugs fixed in 1.2.2


author: Rich Megginson <rmeggins@redhat.com> - 1.2.3-1
changelog:
  - 1.2.3 release
  - added template-initconfig to %files
  - %posttrans now runs update to update the server instances
  - servers are shutdown, then restarted if running before install
  - scriptlets mostly use lua now to pass data among scriptlet phases


author: Rich Megginson <rmeggins@redhat.com> - 1.2.4-1
changelog:
  - 1.2.4 release
  - resolves bug 221905 - added support for Salted MD5 (SMD5) passwords - primarily for migration
  - resolves bug 529258 - Make upgrade remove obsolete schema from 99user.ldif


author: Nathan Kinder <nkinder@redhat.com> - 1.2.6-0.4.a3
changelog:
  - 1.2.6.a3 release
  - add managed entries plug-in
  - many bug fixes
  - moved selinux subpackage into base package


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.8.rc3
changelog:
  - 1.2.6 release candidate 3
  - git tag 389-ds-base-1.2.6.rc3
  - Bug 603942 - null deref in _ger_parse_control() for subjectdn
  - 609256  - Selinux: pwdhash fails if called via Admin Server CGI
  - 578296  - Attribute type entrydn needs to be added when subtree rename switch is on
  - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl
  - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
  - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
  - 606920 - anonymous resource limit - nstimelimit - also applied to "cn=directory manager"


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.9.rc3
changelog:
  - make selinux-devel explicit Require the base package in order
  - to comply with Fedora Licensing Guidelines


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.10.rc6
changelog:
  - 1.2.6 release candidate 6
  - git tag 389-ds-base-1.2.6.rc6
  - Bug 617013 - repl-monitor.pl use cpu upto 90%
  - Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats
  - Bug 547503 - replication broken again, with 389 MMR replication and TCP errors
  - Bug 613833 - Allow dirsrv_t to bind to rpc ports
  - Bug 612242 - membership change on DS does not show on AD
  - Bug 617629 - Missing aliases in new schema files
  - Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears
  - Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments
  - Bug 617862 - Replication: Unable to delete tombstone errors
  - Bug 594745 - Get rid of dirsrv_lib_t label


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.11.rc7
changelog:
  - 1.2.6 release candidate 7
  - git tag 389-ds-base-1.2.6.rc7
  - Bug 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6.1-1
changelog:
  - This is the 1.2.6.1 release - git tag 389-ds-base-1.2.6.1
  - Bug 634561 - Server crushes when using Windows Sync Agreement
  - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self
  - Bug 612264 - ACI issue with (targetattr='userPassword')
  - Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager"
  - Bug 631862 - crash - delete entries not in cache + referint


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.2.a2
changelog:
  - 1.2.7.a2 release - a1 was the OpenLDAP testday release
  - git tag 389-ds-base-1.2.7.a2
  - added openldap support on platforms that use openldap with moznss
  - for crypto (F-14 and later)
  - many bug fixes
  - Account Policy Plugin (keep track of last login, disable old accounts)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.3.a3
changelog:
  - 1.2.7.a3 release - a2 was never released
  - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
  - Bug 629681 - Retro Changelog trimming does not behave as expected
  - Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif
  -              are not upgraded in the server instance schema dir


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.4.a3
changelog:
  - 1.2.7.a3 release - a2 was never released - this is a rebuild to pick up
  - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
  - Adding the ancestorid fix code to ##upgradednformat.pl.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.5.a4
changelog:
  - 1.2.7.a4 release - git tag 389-ds-base-1.2.7.a4
  - Bug 647932 - multiple memberOf configuration adding memberOf where there is 
  no member
  - Bug 491733 - dbtest crashes
  - Bug 606545 - core schema should include numSubordinates
  - Bug 638773 - permissions too loose on pid and lock files
  - Bug 189985 - Improve attribute uniqueness error message
  - Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operat
  ions
  - Bug 619633 - Make attribute uniqueness obey requiredObjectClass


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.6.a5
changelog:
  - 1.2.7.a5 release - git tag 389-ds-base-1.2.7.a5
  - Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-ref
  erral)
  - Bug 635009 - Add one-way AD sync capability
  - Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot
  - put replication config entries in separate file
  - Bug 567282 - server can not abandon searchRequest of "simple paged results"
  - Bug 329751 - "nested" filtered roles searches candidates more than needed
  - Bug 521088 - DNA should check ACLs before getting a value from the range


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.1-1
changelog:
  - 1.2.7.1 release - git tag 389-ds-base-1.2.7.1
  - Bug 656515 - Allow Name and Optional UID syntax for grouping attributes
  - Bug 656392 - Remove calls to ber_err_print()
  - Bug 625950 - hash nsslapd-rootpw changes in audit log


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.2-1
changelog:
  - 1.2.7.2 release - git tag 389-ds-base-1.2.7.2
  - Bug 659456 - Incorrect usage of ber_printf() in winsync code
  - Bug 658309 - Process escaped characters in managed entry mappings
  - Bug 197886 - Initialize return value for UUID generation code
  - Bug 658312 - Allow mapped attribute types to be quoted
  - Bug 197886 - Avoid overflow of UUID generator


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.3-1
changelog:
  - 1.2.7.3 release - git tag 389-ds-base-1.2.7.3
  - Bug 658312 - Invalid free in Managed Entry plug-in
  - Bug 641944 - Don't normalize non-DN RDN values


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.2.a2
changelog:
  - 1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2
  - Bug 674430 - Improve error messages for attribute uniqueness
  - Bug 616213 - insufficient stack size for HP-UX on PA-RISC
  - Bug 615052 - intrinsics and 64-bit atomics code fails to compile
  -    on PA-RISC
  - Bug 151705 - Need to update Console Cipher Preferences with new ciphers
  - Bug 668862 - init scripts return wrong error code
  - Bug 670616 - Allow SSF to be set for local (ldapi) connections
  - Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the 
  -    log output to the text file
  - Bug 668619 - slapd stops responding
  - Bug 624547 - attrcrypt should query the given slot/token for
  -    supported ciphers
  - Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any 
  -    error message in logs


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.3.a3
changelog:
  - 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3
  - Bug 675320 - empty modify operation with repl on or lastmod off will crash server
  - Bug 675265 - preventryusn gets added to entries on a failed delete
  - Bug 677774 - added support for tmpfiles.d
  - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search
  es
  - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH
  - Bug 671199 - Don't allow other to write to rundir
  - Bug 678646 - Ignore tombstone operations in managed entry plug-in
  - Bug 676053 - export task followed by import task causes cache assertion
  - Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8
  - Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used
  - Bug 676689 - crash while adding a new user to be synced to windows
  - Bug 604881 - admin server log files have incorrect permissions/ownerships
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv
  ice is restarted
  - Bug 675853 - dirsrv crash segfault in need_new_pw()


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.4.a3
changelog:
  - do not create /var/run/dirsrv - setup will create it instead
  - remove the fedora-ds initscript upgrade stuff - we do not support that anymore
  - convert the remaining lua stuff to plain old shell script


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.6.rc1
changelog:
  - 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1
  - Bug 518890 - setup-ds-admin.pl - improve hostname validation
  - Bug 681015 - RFE: allow fine grained password policy duration attributes in 
  -     days, hours, minutes, as well
  - Bug 514190 - setup-ds-admin.pl --debug does not log to file
  - Bug 680555 - ns-slapd segfaults if I have more than 100 DBs
  - Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically
  - Bug 674852 - crash in ldap-agent when using OpenLDAP
  - Bug 679978 - modifying attr value crashes the server, which is supposed to
  -     be indexed as substring type, but has octetstring syntax
  - Bug 676655 - winsync stops working after server restart
  - Bug 677705 - ds-logpipe.py script is failing to validate "-s" and
  -     "--serverpid" options with "-t".
  - Bug 625424 - repl-monitor.pl doesn't work in hub node


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.8.rc2
changelog:
  - 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2
  - Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences
  - Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format
  - Bug 681015 - RFE: allow fine grained password policy duration attributes
  -              in days, hours, minutes, as well
  - Bug 684996 - Exported tombstone cannot be imported correctly
  - Bug 683250 - slapd crashing when traffic replayed
  - Bug 668909 - Can't modify replication agreement in some cases
  - Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1
  - Bug 644784 - Memory leak in "testbind.c" plugin
  - Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.9.rc4
changelog:
  - 389-ds-base-1.2.8.rc4
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv
  ice is restarted
  - 389-ds-base-1.2.8.rc3
  - Bug 690955 - Mrclone fails due to the replica generation id mismatch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.10.rc5
changelog:
  - 389-ds-base-1.2.8.rc5
  - Bug 692469 - Replica install fails after step for "enable GSSAPI for replication"


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.0-1
changelog:
  - 389-ds-base-1.2.8.0
  - Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1
  - Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1
  - Bug 693466 - Unable to change schema online
  - Bug 693503 - matching rules do not inherit from superior attribute type
  - Bug 693455 - nsMatchingRule does not work with multiple values
  - Bug 693451 - cannot use localized matching rules
  - Bug 692331 - Segfault on index update during full replication push on 1.2.7.5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1
changelog:
  - 389-ds-base-1.2.8.2
  - Bug 696407 - If an entry with a mixed case RDN is turned to be
  -    a tombstone, it fails to assemble DN from entryrdn


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.3-1
changelog:
  - 389-ds-base-1.2.8.3
  - Bug 700145 - userpasswd not replicating
  - Bug 700557 - Linked attrs callbacks access free'd pointers after close
  - Bug 694336 - Group sync hangs Windows initial Sync
  - Bug 700215 - ldclt core dumps
  - Bug 695779 - windows sync can lose old values when a new value is added
  - Bug 697027 - 12 - minor memory leaks found by Valgrind + TET


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9-0.2.a2
changelog:
  - 389-ds-base-1.2.9.a2
  - look for separate openldap ldif library
  - Split automember regex rules into separate entries
  - writing Inf file shows SchemaFile = ARRAY(0xhexnum)
  - add support for ldif files with changetype: add
  - Bug 716980 - winsync uses old AD entry if new one not found
  - Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9
  - bump console version to 1.2.6
  - Bug 711679 - unresponsive LDAP service when deleting vlv on replica
  - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file
  - Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package
  - Bug 663752 - Cert renewal for attrcrypt and encchangelog
  - Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute
  - Bug 711906 - ns-slapd segfaults using suffix referrals
  - Bug 707384 - only allow FIPS approved cipher suites in FIPS mode
  - Bug 710377 - Import with chain-on-update crashes ns-slapd
  - Bug 709826 - Memory leak: when extra referrals configured


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.0-1
changelog:
  - Bug 720059 - RDN with % can cause crashes or missing entries
  - Bug 709468 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2.
  - Bug 691313 - Need TLS/SSL error messages in repl status and errors log
  - Bug 712855 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not
  - Bug 713209 - Update sudo schema
  - Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9
  - Bug 718303 - Intensive updates on masters could break the consumer's cache
  - Bug 711679 - unresponsive LDAP service when deleting vlv on replica


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.1-1
changelog:
  - Bug 663752 - Cert renewal for attrcrypt and encchangelog
  -   this was "re-fixed" due to a deadlock condition with cl2ldif task cancel
  - Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma
  - Bug 725743 - Make memberOf use PRMonitor for it's operation lock
  - Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.1-2
changelog:
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed to use configure test for GCC provided 64-bit atomic functions


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.3-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  previous patch broke build on el5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.4-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix coverity NULL deref in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.5-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix another coverity NULL deref in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.6-1
changelog:
  - Bug 728510 - Run dirsync after sending updates to AD
  - Bug 729717 - Fatal error messages when syncing deletes from AD
  - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working.
  - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed again - separate tests for atomic ops and atomic bool cas


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.7-1
changelog:
  - Bug 733103 - large targetattr list with syntax errors cause server to crash or hang
  - Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining
  - Bug 732541 - Ignore error 32 when adding automember config
  - Bug 728592 - Allow ns-slapd to start with an invalid server cert


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.8-1
changelog:
  - Bug 732153 - subtree and user account lockout policies implemented?
  - Bug 722292 - Entries in DS are not updated properly when using WinSync API


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.9-1
changelog:
  - Bug 735121 - simple paged search + ip/dns based ACI hangs server
  - Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code
  - Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server
  - Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.a2-0.2
changelog:
  - Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations
  - Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config
  - Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.4.a4
changelog:
  - Bug 741744 - part3 - MOD operations with chained delete/add get back error 53
  - 1d2f5a0 make memberof transaction aware and able to be a betxnpostoperation plug in
  - b6d3ba7 pass the plugin config entry to the plugin init function
  - 28f7bfb set the ENTRY_POST_OP for modrdn betxnpostoperation plugins
  - Bug 743966 - Compiler warnings in account usability plugin


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.5.a5
changelog:
  - Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD'
  - Bug 750625 750624 750622 744946 Coverity issues
  - Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication
  - Bug 748575 - rhds81 modrn operation and 100% cpu use in replication
  - Bug 745259 - Incorrect entryUSN index under high load in replicated environment
  - f639711 Reduce the number of DN normalization
  - c06a8fa Keep unhashed password psuedo-attribute in the adding entry
  - Bug 744945 - nsslapd-counters attribute value cannot be set to "off"
  - 8d3b921 Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular
  - d316a67 Change referential integrity to be a betxnpostoperation plugin


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.6.a6
changelog:
  - Bug 755725 - 389 programs linked against openldap crash during shutdown
  - Bug 755754 - Unable to start dirsrv service using systemd
  - Bug 745259 - Incorrect entryUSN index under high load in replicated environment
  - d439e3a use slapi_hexchar2int and slapi_str_to_u8 everywhere
  - 5910551 csn_init_as_string should not use sscanf
  - b53ba00 reduce calls to csn_as_string and slapi_log_error
  - c897267 fix member variable name error in slapi_uniqueIDFormat
  - 66808e5 uniqueid formatting - use slapi_u8_to_hex instead of sprintf
  - 580a875 csn_as_string - use slapi_uN_to_hex instead of sprintf
  - Bug 751645 - crash when simple paged fails to send entry to client
  - Bug 752155 - Use restorecon after creating init script lock file


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.7.a7
changelog:
  - Ticket #262 - pid file not removed with systemd
  - Ticket #50 - server should not call a plugin after the plugin close function is called
  - Ticket #18 - Data inconsitency during replication
  - Ticket #49 - better handling for server shutdown while long running tasks are active
  - Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead
  - Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same
  - Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI
  - 6aaeb77 add a hack to disable sasl hostname canonicalization
  - Ticket 168 - minssf should not apply to rootdse
  - Ticket #177 - logconv.pl doesn't detect restarts
  - Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating
  - Ticket 75 - Unconfigure plugin opperations are being called.
  - Ticket 26 - Please support setting defaultNamingContext in the rootdse.
  - Ticket #71 - unable to delete managed entry config
  - Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock
  - Ticket #256 - debug build assertion in ACL_EvalDestroy()
  - Ticket #4 - bak2db gets stuck in infinite loop
  - Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS
  - Ticket #3: acl cache overflown problem
  - Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations
  - Ticket 2 - If node entries are tombstone'd, subordinate entries fail to get the full DN.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.8.a7
changelog:
  - fixes for systemd - remove .pid files after shutting down servers
  - Ticket #263 - add systemd include directive
  - Ticket #264 - upgrade needs better check for "server is running"


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.10.rc1
changelog:
  - ad9dd30 coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers to system resources
  - Ticket #281 - TLS not working with latest openldap
  - Ticket #280 - extensible binary filters do not work
  - Ticket #279 - filter normalization does not use matching rules
  - Trac Ticket #275 - Invalid read reported by valgrind
  - Ticket #277 - cannot set repl referrals or state
  - Ticket #278 - Schema replication update failed: Invalid syntax
  - Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through Auth plugin is enabled
  - Ticket #13 - slapd process exits when put the database on read only mode while updates are coming to the server
  - Ticket #87 - Manpages fixes
  - c493fb4 fix a couple of minor coverity issues
  - Ticket #55 - Limit of 1024 characters for nsMatchingRule
  - Trac Ticket #274 - Reindexing entryrdn fails if ancestors are also tombstoned
  - Ticket #6 - protocol error from proxied auth operation
  - Ticket #38 - nisDomain schema is incorrect
  - Ticket #273 - ruv tombstone searches don't work after reindex entryrdn
  - Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword
  - Ticket #22 - RFE: Support sendmail LDAP routing schema
  - Ticket #161 - Review and address latest Coverity issues
  - Ticket #140 - incorrect memset parameters
  - Trac Ticket 35 - Log not clear enough on schema errors
  - Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn
  - Trac Ticket #52 - FQDN set to nsslapd-listenhost makes the server start fail if IPv4-mapped-IPv6 address is given


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.0-1
changelog:
  - Ticket 284 - Remove unnecessary SNMP MIB files
  - Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5?
  - Ticket 175 - logconv.pl improvements


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-1
changelog:
  - Trac Ticket #298 - crash when replicating orphaned tombstone entry
  - Ticket #281 - TLS not working with latest openldap
  - Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails
  - Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.3-1
changelog:
  - b05139b memleak in normalize_mods2bvals
  - c0eea24 memleak in mep_parse_config_entry
  - 90bc9eb handle null smods
  - Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash
  - Ticket #306 - void function cannot return value
  - ticket 304 - Fix kernel version checking in dsktune


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.4-4
changelog:
  - Ticket #46 - (revised) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #66 - 389-ds-base spec file does not have a BuildRequires on gcc-c++


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11-0.1.a1
changelog:
  - 453eb97 schema def must have DESC '' - close paren must be preceded by space
  - Trac Ticket #46 - (additional) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #331 - transaction errors with db 4.3 and db 4.2
  - Ticket #261 - Add Solaris i386
  - Ticket #316 and Ticket #70 - add post add/mod and AD add callback hooks
  - Ticket #324 - Sync with group attribute containing () fails
  - Ticket #319 - ldap-agent crashes on start with signal SIGSEGV
  - 77cacd9 coverity 12606 Logically dead code
  - Trac Ticket #303 - make DNA range requests work with transactions
  - Ticket #320 - allow most plugins to be betxn plugins
  - Ticket #24 - Add nsTLS1 to the DS schema
  - Ticket #271 - Slow shutdown when you have 100+ replication agreements
  - TIcket #285 - compilation fixes for '--format-security'
  - Ticket 211 - Avoid preop range requests non-DNA operations
  - Ticket #271 - replication code cleanup
  - Ticket 317 - RHDS fractional replication with excluded password policy attributes leads to wrong error messages.
  - Ticket #308 - Automembership plugin fails if data and config area mixed in the plugin configuration
  - Ticket #292 - logconv.pl reporting unindexed search with different search base than shown in access logs
  - 6f8680a coverity 12563 Read from pointer after free (fix 2)
  - e6a9b22 coverity 12563 Read from pointer after free
  - 245d494 Config changes fail because of unknown attribute "internalModifiersname"
  - Ticket #191  - Implement SO_KEEPALIVE in network calls
  - Ticket #289 - allow betxn plugin config changes
  - 93adf5f destroy the entry cache and dn cache in the dse post op delete callback
  - e2532d8 init txn thread private data for all database modes
  - Ticket #291 - cannot use & in a sasl map search filter
  - 6bf6e79 Schema Reload crash fix
  - 60b2d12 Fixing compiler warnings
  - Trac Ticket #260 - 389 DS does not support multiple paging controls on a single connection
  - Ticket #302 - use thread local storage for internalModifiersName & internalCreatorsName
  - fdcc256 Minor bug fix introcuded by commit 69c9f3bf7dd9fe2cadd5eae0ab72ce218b78820e
  - Ticket #306 - void function cannot return value
  - ticket 181 - Allow PAM passthru plug-in to have multiple config entries
  - ticket 211 - Use of uninitialized variables in ldbm_back_modify()
  - Ticket #74 - Add schema for DNA plugin (RFE)
  - Ticket #301 - implement transaction support using thread local storage
  - Ticket #211 - dnaNextValue gets incremented even if the user addition fails
  - 144af59 coverity uninit var and resource leak
  - Trac Ticket #34 - remove-ds.pl does not remove everything
  - Trac Ticket #169 - allow 389 to use db5
  - bc78101 fix compiler warning in acct policy plugin
  - Trac Ticket #84 - 389 Directory Server Unnecessary Checkpoints
  - Trac Ticket #27 - SASL/PLAIN binds do not work
  - Ticket #129 - Should only update modifyTimestamp/modifiersName on MODIFYops
  - Ticket #17 - new replication optimizations


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.1-1
changelog:
  - f227f11 Suppress alert on unavailable port with forced setup
  - Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return
  - Ticket #351 - use betxn plugins by default
  - Trac Ticket #345 - db deadlock return should not log error
  - Ticket #348 - crash in ldap_initialize with multiple threads
  - Ticket #214 - Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied
  - Ticket #207 - [RFE] enable attribute that tracks when a password was last set
  - Ticket #216 - RFE - Disable replication agreements
  - Ticket #337 - RFE - Improve CLEANRUV functionality
  - Ticket #326 - MemberOf plugin should work on all backends
  - Trac Ticket #19 - Convert entryUSN plugin to transaction aware type
  - Ticket #347 - IPA dirsvr seg-fault during system longevity test
  - Trac Ticket #310 - Avoid calling escape_string() for logged DNs
  - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object
  - Ticket #183 - passwordMaxFailure should lockout password one sooner
  - Trac Ticket #335 - transaction retries need to be cache aware
  - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - Ticket #325 - logconv.pl : use of getopts to parse command line options
  - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - 554e29d Coverity Fixes
  - Trac Ticket #46 - (additional 2) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #183 - passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions
  - Ticket #315 - small fix to libglobs
  - Ticket #315 - ns-slapd exits/crashes if /var fills up
  - Ticket #20 - Allow automember to work on entries that have already been added
  - Trac Ticket #45 - Fine Grained Password policy: if passwordHistory is on, deleting the password fails.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.2-1
changelog:
  - Ticket #351 - use betxn plugins by default
  -   revert - make no plugins betxn by default - too great a risk
  -   for deadlocks until we can test this better
  - Ticket #348 - crash in ldap_initialize with multiple threads
  -   fixes PR_Init problem in ldclt


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.4-1
changelog:
  - Ticket #360 - ldapmodify returns Operations error
  - Ticket #321 - krbExtraData is being null modified and replicated on each ssh login
  - Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress
  - Ticket #361: Bad DNs in ACIs can segfault ns-slapd
  - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object
  - Ticket #337 - Improve CLEANRUV task


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.5-1
changelog:
  - Ticket #387 - managed entry sometimes doesn't delete the managed entry
  - 5903815 improve txn test index handling
  - Ticket #360 - ldapmodify returns Operations error - fix delete caching
  - bcfa9e3 Coverity Fix for CLEANALLRUV
  - Trac Ticket #335 - transaction retries need to be cache aware
  - Ticket #389 - ADD operations not in audit log
  - 44cdc84 fix coverity issues with uninit vals, no return checking
  - Ticket 368 - Make the cleanAllRUV task one step
  - Ticket #110 - RFE limiting root DN by host, IP, time of day, day of week


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.6-1
changelog:
  - Ticket #378 - audit log does not log unhashed password: enabled, by default.
  - Ticket #378 - unhashed#user#password visible after changing password
  - Ticket #365 - passwords in clear text in the audit log


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.7-2
changelog:
  - Ticket 378 - unhashed#user#password visible after changing password
  -  fix func declaration from previous patch
  - Ticket 366 - Change DS to purge ticket from krb cache in case of authentication error


author: Mark Reynolds <mareynol@redhat.com> - 1.2.11.8-1
changelog:
  ddcf669 bump version to 1.2.11.8 for offical release
  Ticket #425 - support multiple winsync plugins
  Ticket 403 - cleanallruv coverity fixes
  Ticket 407 - memory leak in dna plugin
  Ticket 403 - CLEANALLRUV feature
  Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs
  3168f04 Coverity defects
  5ff0a02 COVERITY FIXES
  Ticket #388 - Improve replication agreement status messages
  0760116 Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns
  Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion
  Ticket #409 - Report during startup if nsslapd-cachememsize is too small
  Ticket #412 - memberof performance enhancement
  12813: Uninitialized pointer read string_values2keys
  Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  Ticket #410 - Referential integrity plug-in does not work when update interval is not zero
  Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled
  Ticket #405 - referint modrdn not working if case is different
  Ticket 399 - slapi_ldap_bind() doesn't check bind results


author: Mark Reynolds <mareynol@redhat.com> - 1.2.11.11-1
changelog:
  6c0778f bumped version to 1.2.11.11
  Ticket 429 - added nsslapd-readonly to DS schema
  Ticket 403 - fix CLEANALLRUV regression from last commit
  Trac Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.12-1
changelog:
  - 8e5087a Coverity defects - 13089: Dereference after null check ldbm_back_delete
  - Trac Ticket #437 - variable dn should not be used in ldbm_back_delete
  - ba1f5b2 fix coverity resource leak in windows_plugin_add
  - e3e81db Simplify program flow: change while loops to for
  - a0d5dc0 Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0)
  - 0808f7e Simplify program flow: make adduids/moduids/deluids action blocks all similar
  - 77eb760 Simplify program flow: eliminate unnecessary continue
  - c9e9db7 Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new
  - a4ca0cc Change "return"s in modGroupMembership to "break"s to avoid leaking
  - d49035c Factorize into new isPosixGroup function
  - 3b61c03 coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free
  - 33ce2a9 fix mem leaks with parent dn log message, setting winsync windows domain
  - Ticket #440 - periodic dirsync timed event causes server to loop repeatedly
  - Ticket #355 - winsync should not delete entry that appears to be out of scope
  - Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values.
  - 487932d coverity - mbo dead code - winsync leaks, deadcode, null check, test code
  - 2734a71 CLEANALLRUV coverity fixes
  - Ticket #426 - support posix schema for user and group sync
  - Ticket #430 - server to server ssl client auth broken with latest openldap


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.13-1
changelog:
  - Ticket #426 - support posix schema for user and group sync
  -   1) plugin config ldif must contain pluginid, etc. during upgrade or it
  -      will fail due to schema errors
  -   2) posix winsync should have a lower precedence (25) than the default (50)
  -      so that it will be run first
  -   3) posix winsync should support the Winsync API v3 - the v2 functions are
  -      just stubs for now - but the precedence cb is active


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.14-1
changelog:
  - Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement
  - Ticket 386 - large memory growth with ldapmodify(heap fragmentation)
  -  this patch doesn't fix the bug - it allows us to experiment with
  -  different values of mxfast
  - Ticket #374 - consumer can go into total update mode for no reason


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-1
changelog:
  - Trac Ticket #470 - 389 prevents from adding a posixaccount with userpassword after schema reload
  - Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang
  - Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start
  - Ticket 473 - change VERSION.sh to have console version be major.minor
  - Ticket 475 - Root DN Access Control - improve value checking for config
  - Trac Ticket #466 - entry_apply_mod - ADD: Failed to set unhashed#user#password to extension
  - Ticket 474 - Root DN Access Control - days allowed not working correctly
  - Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas
  - 0b79915 fix compiler warnings in ticket 374 code
  - Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope


author: Mark Reynolds <mareynol@redhat.com> - 1.3.0.a1-1
changelog:
  - Ticket #28 - MOD operations with chained delete/add get back error 53 on backend config
  - Ticket #173 - ds-logpipe.py script's man page and script help should be updated for -t option.
  - Ticket #196 - RFE: Interpret IPV6 addresses for ACIs, replication, and chaining 
  - Ticket #218 - RFE - Make RIP working with Replicated Entries 
  - Ticket #328 - make sure all internal search filters are properly escaped 
  - Ticket #329 - 389-admin build fails on F-18 with new apache
  - Ticket #344 - deadlock in replica_write_ruv
  - Ticket #351 - use betxn plugins by default
  - Ticket #352 - make cos, roles, views betxn aware 
  - Ticket #356 - logconv.pl - RFE - track bind info
  - Ticket #365 - Audit log - clear text password in user changes 
  - Ticket #370 - Opening merge qualifier CoS entry using RHDS console changes the entry.
  - Ticket #372 - Setting nsslapd-listenhost or nsslapd-securelistenhost breaks ACI processing
  - Ticket #386 - Overconsumption of memory with large cachememsize and heavy use of ldapmodify
  - Ticket #402 - unhashedTicket #userTicket #password in entry extension
  - Ticket #408 - Create a normalized dn cache
  - Ticket #453 - db2index with -tattrname:type,type fails
  - Ticket #461 - fix build problem with mozldap c sdk 
  - Ticket #462 - add test for include file mntent.h 
  - Ticket #463 - different parameters of getmntent in Solaris


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.1.rc1
changelog:
  - bump version to 1.3.0.rc1
  - Ticket #322 - Create DOAP description for the 389 Directory Server project
  - Trac Ticket #499 - Handling URP results is not corrrect
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Ticket 456 - improve entry cache sizing
  - Trac Ticket #531 - loading an entry from the database should use str2entry_f
  - Trac Ticket #536 - Clean up compiler warnings for 1.3
  - Trac Ticket #531 - loading an entry from the database should use str2entry_fast
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Ticket 527 - ns-slapd segfaults if it cannot rename the logs
  - Ticket 395 - RFE: 389-ds shouldn't advertise in the rootDSE that we can handle a sasl mech if we really can't
  - Ticket 216 - disable replication agreements
  - Ticket 518 - dse.ldif is 0 length after server kill or machine kill
  - Ticket 393 - Change in winSyncInterval does not take immediate effect
  - Ticket 20 - Allow automember to work on entries that have already been added
  - Coverity Fixes
  - Ticket 349 - nsViewFilter syntax issue in 389DS 1.2.5
  - Ticket 337 - improve CLEANRUV functionality
  - Fix for ticket 504
  - Ticket 394 - modify-delete userpassword
  - minor fixes for bdb 4.2/4.3 and mozldap
  - Trac Ticket #276 - Multiple threads simultaneously working on connection's private buffer causes ns-slapd to abort
  - Fix for ticket 465: cn=monitor showing stats for other db instances
  - Ticket 507 - use mutex for FrontendConfig lock instead of rwlock
  - Fix for ticket 510 Avoid creating an attribute just to determine the syntax for a type, look up the syntax directly by type
  - Coverity defect: Resource leak 13110
  - Ticket 517 - crash in DNA if no dnaMagicRegen is specified
  - Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry
  - Trac Ticket #519 - Search with a complex filter including range search is slow
  - Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error
  - Trac Ticket #311 - IP lookup failing with multiple DNS entries
  - Trac Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs
  - Trac Ticket #443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error
  - Ticket #503 - Improve AD version in winsync log message
  - Trac Ticket #190 - Un-resolvable server in replication agreement produces unclear error message
  - Coverity fixes
  - Trac Ticket #391 - Slapd crashes when deleting backends while operations are still in progress
  - Trac Ticket #448 - Possible to set invalid macros in Macro ACIs
  - Trac Ticket #498 - Cannot abaondon simple paged result search
  - Coverity defects
  - Trac Ticket #494 - slapd entered to infinite loop during new index addition
  - Fixing compiler warnings in the posix-winsync plugin
  - Coverity defects
  - Ticket 147 - Internal Password Policy usage very inefficient
  - Ticket 495 - internalModifiersname not updated by DNA plugin
  - Revert "Ticket 495 - internalModifiersname not updated by DNA plugin"
  - Ticket 495 - internalModifiersname not updated by DNA plugin
  - Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h])
  - Ticket 486 - nsslapd-enablePlugin should not be multivalued
  - Ticket 488 - Doc: DS error log messages with typo
  - Trac Ticket #451 - Allow db2ldif to be quiet
  - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes
  - Ticket #481 - expand nested posix groups
  - Trac Ticket #455 - Insufficient rights to unhashed#user#password when user deletes his password
  - Ticket #446 - anonymous limits are being applied to directory manager


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.2.rc2
changelog:
  - bump version to 1.3.0.rc2
  - Trac Ticket #497 - Escaped character cannot be used in the substring search filter
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Trac Ticket #522 - betxn: upgrade is not implemented yet


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.3.rc3
changelog:
  - bump version to 1.3.0.rc3
  - Ticket 549 - DNA plugin no longer reports additional info when range is depleted
  - Ticket 541 - need to set plugin as off in ldif template
  - Ticket 541 - RootDN Access Control plugin is missing after upgrade


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0.3-1
changelog:
  - bump version to 1.3.0.3
  - Ticket #584 - Existence of an entry is not checked when its password is to be deleted
  - Ticket 562 - Crash when deleting suffix


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.0.4-1
changelog:
  - e53d691 bump version to 1.3.0.4
  - Bug 912964 - CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data
  - Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled)
  - Ticket 490 - Slow role performance when using a lot of roles
  - Ticket 590 - ns-slapd segfaults while trying to delete a tombstone entry


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0.5-1
changelog:
  - bump version to 1.3.0.5
  - Ticket 47308 - unintended information exposure when anonymous access is set to rootdse
  - Ticket 628 - crash in aci evaluation
  - Ticket 627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so
  - Ticket 634 - Deadlock in DNA plug-in Ticket #576 - DNA: use event queue for config update only at the start up
  - Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC
  - Ticket 623 - cleanAllRUV task fails to cleanup config upon completion


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.0-1
changelog:
  - bump version to 1.3.1.0
  - Ticket 332 - Command line perl scripts should attempt most secure connection type first
  - Ticket 342 - better error message when cache overflows
  - Ticket 417 - RFE - forcing passwordmustchange attribute by non-cn=directory manager
  - Ticket 419 - logconv.pl - improve memory management
  - Ticket 422 - 389-ds-base - Can't call method "getText"
  - Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts
  - Ticket 458 - RFE - Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords
  - Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used
  - Ticket 487 - Possible to add invalid attribute values to PAM PTA plugin configuration
  - Ticket 502 - setup-ds.pl script should wait if "semanage.trans.LOCK" presen
  - Ticket 505 - use lock-free access name2asi and oid2asi tables (additional)
  - Ticket 508 - lock-free access to FrontendConfig structure
  - Ticket 511 - allow turning off vattr lookup in search entry return
  - Ticket 525 - Introducing a user visible configuration variable for controlling replication retry time
  - Ticket 528 - RFE - get rid of instance specific scripts
  - Ticket 529 - dn normalization must handle multiple space characters in attributes
  - Ticket 532 - RUV is not getting updated for both Master and consumer
  - Ticket 533 - only scan for attributes to decrypt if there are encrypted attrs configured
  - Ticket 534 - RFE: Add SASL mappings fallback
  - Ticket 537 - Improvement of range search
  - Ticket 539 - logconv.pl should handle microsecond timing
  - Ticket 543 - Sorting with attributes in ldapsearch gives incorrect result
  - Ticket 545 - Segfault during initial LDIF import: str2entry_dupcheck()
  - Ticket 547 - Incorrect assumption in ndn cache
  - Ticket 550 - posix winsync will not create memberuid values if group entry become posix group in the same sync interval
  - Ticket 551 - Multivalued rootdn-days-allowed in RootDN Access Control plugin always results in access control violation
  - Ticket 552 - Adding rootdn-open-time without rootdn-close-time to RootDN Acess Control results in inconsistent configuration
  - Ticket 558 - Replication - make timeout for protocol shutdown configurable
  - Ticket 561 - disable writing unhashed#user#password to changelog
  - Ticket 563 - DSCreate.pm: Error messages cannot be used in the if expression since they could be localized.
  - Ticket 565 - turbo mode and replication - allow disable of turbo mode
  - Ticket 571 - server does not accept 0 length LDAP Control sequence
  - Ticket 574 - problems with dbcachesize disk space calculation
  - Ticket 583 - dirsrv fails to start on reboot due to /var/run/dirsrv permissions
  - Ticket 585 - Behaviours of "db2ldif -a <filename>" and "db2ldif.pl -a <filename>" are inconsistent
  - Ticket 587 - Replication error messages in the DS error logs
  - Ticket 588 - Create MAN pages for command line scripts
  - Ticket 600 - Server should return unavailableCriticalExtension when processing a badly formed critical control
  - Ticket 603 - A logic error in str2simple
  - Ticket 604 - Required attribute not checked during search operation
  - Ticket 608 - Posix Winsync plugin throws "posix_winsync_end_update_cb: failed to add task entry" error message
  - Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND
  - Ticket 612 - improve dbgen rdn generation, output
  - Ticket 613 - ldclt: add timestamp, interval, nozeropad, other improvements
  - Ticket 616 - High contention on computed attribute lock
  - Ticket 618 - Crash at shutdown while stopping replica agreements
  - Ticket 620 - Better logging of error messages for 389-ds-base
  - Ticket 621 - modify operations without values need to be written to the changelog
  - Ticket 622 - DS logging errors "libdb: BDB0171 seek: 2147483648: (262144 * 8192) + 0: No such file or directory
  - Ticket 631 - Replication: "Incremental update started" status message without consumer initialized
  - Ticket 633 - allow nsslapd-nagle to be disabled, and also tcp cork
  - Ticket 47299 - allow cmdline scripts to work with non-root user
  - Ticket 47302 - get rid of sbindir start/stop/restart slapd scripts
  - Ticket 47303 - start/stop/restart dirsrv scripts should report and error if no instances
  - Ticket 47304 - reinitialization of a master with a disabled agreement hangs
  - Ticket 47311 - segfault in db2ldif(trigger by a cleanallruv task)
  - Ticket 47312 - replace PR_GetFileInfo with PR_GetFileInfo64
  - Ticket 47315 - filter option in fixup-memberof requires more clarification
  - Ticket 47325 - Crash at shutdown on a replica aggrement
  - Ticket 47330 - changelog db extension / upgrade is obsolete
  - Ticket 47336 - logconv.pl -m not working for all stats
  - Ticket 47341 - logconv.pl -m time calculation is wrong
  - Ticket 47343 - 389-ds-base: Does not support aarch64 in f19 and rawhide
  - Ticket 47347 - Simple paged results should support async search
  - Ticket 47348 - add etimes to per second/minute stats
  - Ticket 47349 - DS instance crashes under a high load


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.1-1
changelog:
  - bump version to 1.3.1.1
  - Ticket 402 - nhashed#user#password in entry extension
  - Ticket 511 - Revision - allow turning off vattr lookup in search entry return
  - Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate
  - Ticket 47327 - error syncing group if group member user is not synced
  - Ticket 47355 - dse.ldif doesn't replicate update to nsslapd-sasl-mapping-fallback
  - Ticket 47359 - new ldap connections can block ldaps and ldapi connections
  - Ticket 47362 - ipa upgrade selinuxusermap data not replicating
  - Ticket 47375 - flush_ber error sending back start_tls response will deadlock
  - Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3)
  - Ticket 47377 - make listen backlog size configurable
  - Ticket 47378 - fix recent compiler warnings
  - Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice
  - Ticket 47385 - DS not shutting down when disk monitoring threshold is reached
  - Coverity Fixes (part 1)
  - Coverity Fixes (Part 2)
  - Coverity Fixes (Part 3)
  - Coverity Fixes (Part 4)
  - Coverity Fixes (Part 5)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.2-1
changelog:
  - bump version to 1.3.1.2
  - Ticket 47391 - deleting and adding userpassword fails to update the password
  - Coverity Fixes (Part 7)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.3-1
changelog:
  - bump version to 1.3.1.3
  - Ticket 47374 - flush.pl is not included in perl5
  - Ticket 47391 - deleting and adding userpassword fails to update the password (additional fix)
  - Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization
  - Ticket 47395 47397 - v2 correct behaviour of account policy if only stateattr is configured or no alternate attr is configured
  - Ticket 47396 - crash on modrdn of tombstone
  - Ticket 47400 - MMR stress test with dna enabled causes a deadlock
  - Ticket 47409 - allow setting db deadlock rejection policy
  - Ticket 47419 - Unhashed userpassword can accidentally get removed from mods
  - Ticket 47420 - An upgrade script 80upgradednformat.pl fails to handle a server instance name incuding '-'


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.4-1
changelog:
  - bump version to 1.3.1.4
  - Ticket 47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negative.
  - Ticket 47424 - Replication problem with add-delete requests on single-valued attributes
  - Ticket 47367 - (phase 2) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
  - Ticket 47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
  - Ticket 47421 - memory leaks in set_krb5_creds
  - Ticket 346 - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute values
  - Ticket 47369  version2 - provide default syntax plugin
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47399 - RHDS denies MODRDN access if ACI list contains any DENY rule
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47428 - Memory leak in 389-ds-base 1.2.11.15
  - Ticket 47392 - ldbm errors when adding/modifying/deleting entries
  - Ticket 47385 - Disk Monitoring is not triggered as expected.
  - Ticket 47410 - changelog db deadlocks with DNA and replication


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.5-1
changelog:
  - bump version to 1.3.1.5
  - Ticket 47456 - delete present values should append values to deleted values
  - Ticket 47455 - valgrind - value mem leaks, uninit mem usage
  - Ticket 47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication
  - Ticket 47440 - Fix runtime errors caused by last patch.
  - Ticket 47440 - Fix compilation warnings and header files
  - Ticket 47405 - CVE-2013-2219 ACLs inoperative in some search scenarios
  - Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D
  - Ticket 47378 - fix recent compiler warnings
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47449 - deadlock after adding and deleting entries
  - Ticket 47441 - Disk Monitoring not checking filesystem with logs
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-1
changelog:
  - bump version to 1.3.1.6
  - Ticket 47455 - valgrind - value mem leaks, uninit mem usage
  - fix coverity 11915 - dead code - introduced with fix for ticket 346
  - fix coverity 11895 - null deref - caused by fix to ticket 47392
  - fix compiler warning in posix winsync code for posix_group_del_memberuid_callback
  - Fix compiler warnings for Ticket 47395 and 47397
  - fix compiler warning (cherry picked from commit 904416f4631d842a105851b4a9931ae17822a107)
  - Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch
  - fix compiler warnings
  - Fix compiler warning (cherry picked from commit ec6ebc0b0f085a82041d993ab2450a3922ef5502)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.7-1
changelog:
  - bump version to 1.3.1.7
  - Bug 1002215 - CVE-2013-4283 389-ds-base: ns-slapd crash due to bogus DN
  - Ticket 47488 - Users from AD sub OU does not sync to IPA
  - Ticket 47461 - logconv.pl - Use of comma-less variable list is deprecated
  - Ticket 47473 - setup-ds.pl doesn't lookup the "root" group correctly


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.8-1
changelog:
  - Ticket #47455 - valgrind - value mem leaks, uninit mem usage
  -  fix breakage in slapi-nis introduced with the previous fix
  - Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.9-1
changelog:
  - release 1.3.1.9
  - Ticket 449 - Allow macro aci keywords to be case-insensitive
  - Ticket 47489 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing
  - Ticket 47507 - automember rebuild task not working as expected


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.10-1
changelog:
  - Ticket #47534 - RUV tombstone search with scope "one" doesn`t work
  - Ticket 47510 - 389-ds-base does not compile against MozLDAP libraries
  - Ticket #47523 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch
  - Ticket 47528 - 389-ds-base built with mozldap can crash from invalid free
  - Ticket #47504 idlistscanlimit per index/type/value
  - Ticket 47513 - tmpfiles.d references /var/lock when they should reference /run/lock
  - Ticket #47492 - PassSync removes User must change password flag on the Windows side
  - Ticket 47509 - CLEANALLRUV doesnt run across all replicas
  - Ticket #47516 replication stops with excessive clock skew
  - 6829200 Coverity fix - 11952 - for Ticket 47512
  - Ticket 47512 - backend txn plugin fixup tasks should be done in a txn


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.11-1
changelog:
  - Ticket 47513 - Set localrundir outside of the "with-fhs" block
  - Ticket 47513 - Refine the check for @localrundir@
  - Ticket 47510 - remove unnecessary typedef
  - Ticket 47510 - Repl Sync does not compile against MozLDAP libraries


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.0-1
changelog:
  - release 1.3.2.0
  - Ticket 48 - Active Directory has certain uids which are reserved and will cause a Directory Server replica initialization of an AD server to abort.
  - Ticket 53 - Need to update supported locales
  - Ticket 54 - locale "nl" not supported by collation plugin
  - Ticket 77 - [RFE] Add ACI support for ldapi
  - Ticket 123 - Enhancement request: "whoami" extended operation
  - Ticket 153 - Schema file parsing overly picky?
  - Ticket 182 - Pwd retry counters replication not enabled by default, and enabling it could lead to undesired results
  - Ticket 197 - rhds82 rfe - BDB backend - clear free page files to reduce changelog size
  - Ticket 205 - rhds81 rfe - snmp counters index strings for multiple network interfaces with ip addr and tcp port pairs
  - Ticket 208 - [RFE] Roles with explicit scoping in RHDS
  - Ticket 283 - Expose slapi_eq_* API
  - Ticket 314 - ChainOnUpdate: "cn=directory manager" can modify userRoot on consumer without changes being chained or replicated. Directory integrity compromised.
  - Ticket 411 - [RFE] mods optimizer
  - Ticket 415 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist
  - Ticket 428 - posix winsync should support ADD user/group entries from DS to AD
  - Ticket 460 - support multiple subtrees and filters
  - Ticket 512 - improve performance of vattr code
  - Ticket 513 - recycle operation pblocks
  - Ticket 514 - investigate connection locking
  - Ticket 521 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change
  - Ticket 564 - Is ldbm_txn_ruv_modify_context still required ?
  - Ticket 568 - using transaction batchval violates durability
  - Ticket 569 - examine replication code to reduce amount of stored state information
  - Ticket 586 - selinux errors with /usr/sbin/setup-ds-admin.pl
  - Ticket 589 - [RFE] Support RFC 4527 Read Entry Controls
  - Ticket 601 - multi master replication allows schema violation
  - Ticket 602 - replication inconsistency if attribute is modified several times in one operaion
  - Ticket 607 - Replication issue: Entry can diverge betwen servers
  - Ticket 609 - nsDS5BeginReplicaRefresh attribute accepts any value and it doesn't throw any error when server restarts.
  - Ticket 615 - High contention on cos cache lock
  - Ticket 617 - Possible to add invalid ACI value
  - Ticket 626 - Possible to add nonexistent target to ACI
  - Ticket 630 - The backend name provided to bak2db is not validated
  - Ticket 47306 - execute index_add_mods only for indexed attributes
  - Ticket 47310 - Attribute "dsOnlyMemberUid" not allowed when syncing nested posix groups from AD with posixWinsync
  - Ticket 47313 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result
  - Ticket 47314 - Winsync should support range retrieval
  - Ticket 47316 - Search against 'view' is always reported as unindexed
  - Ticket 47317 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default
  - Ticket 47319 - make connection buffer size adjustable
  - Ticket 47320 - put conn on work_q not poll list if conn has buffered more_data
  - Ticket 47323 - resurrected entry is not correctly indexed
  - Ticket 47326 - idl switch does not work
  - Ticket 47329 - Improve slapi_back_transaction_begin() return code when transactions are not available
  - Ticket 47331 - Self entry access ACI not working properly
  - Ticket 47337 - mep_pre_op: Unable to fetch origin entry
  - Ticket 47340 - Deleting a separator ',' in 7-bit check plugin arguments makes the server fail to start with segfault
  - Ticket 47350 - Allow search to look up 'in memory RUV'
  - Ticket 47354 - Indexed search are logged with 'notes=U' in the access logs
  - Ticket 47358 - backend performance - introduce optimization levels
  - Ticket 47360 - Delete attribute could crash the server
  - Ticket 47363 - 7-bit checking is not necessary for userPassword
  - Ticket 47370 - DS crashes with some 7-bit check plugin configurations
  - Ticket 47371 - Some updates of "passwordgraceusertime" are useless when updating "userpassword"
  - Ticket 47372 - make old-idl tunable
  - Ticket 47381 - nsslapd-db-transaction-batch-val turns to -1
  - Ticket 47382 - Add a warning message when a connection hits the max number of threads
  - Ticket 47384 - Plugin library path validation
  - Ticket 47387 - improve logconv.pl performance with large access logs
  - Ticket 47388 - [RFE] Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533
  - Ticket 47389 - Non-directory manager can change the individual userPassword's storage scheme
  - Ticket 47394 - remove-ds.pl should remove /var/lock/dirsrv
  - Ticket 47400 - MMR stress test with dna enabled causes a deadlock
  - Ticket 47411 - Replace substring search with plain search in referint plugin
  - Ticket 47416 - IPA replica's - "SASL encrypted packet length exceeds maximum allowed limit"
  - Ticket 47423 - 7-bit check plugin does not work for userpassword attribute
  - Ticket 47425 - should only call windows_update_done if repl agmt type is windows
  - Ticket 47426 - move compute_idletimeout out of handle_pr_read_ready
  - Ticket 47433 - With SeLinux, ports can be labelled per range. setup-ds.pl or setup-ds-admin.pl fail to detect already ranged labelled ports
  - Ticket 47463 - IDL-style can become mismatched during partial restoration
  - Ticket 47487 - enhance retro changelog
  - Ticket 47502 - updates to ruv entry are written to retro changelog
  - Ticket 47504 - idlistscanlimit per index/type/value
  - Ticket 47505 - get rid of valueset_add_valuearray_ext
  - Ticket 47520 - Fix various issues with logconv.pl
  - Ticket 47522 - Password administrators should be able to violate password policy
  - Ticket 47531 - 1.3.2 with mozldap - need to redo sasl_io_recv
  - Ticket 47532 - 1.3.2 with mozldap - crashes in new operation work_q
  - Ticket 47539 - Disabling DNA plug-in throws error 53
  - Ticket 47543 - mozldap - fix compiler warnings


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.1-1
changelog:
  - release 1.3.2.1
  - Ticket 47513 - tmpfiles.d references /var/lock when they should reference /run/lock
  - Ticket 47551 - logconv: -V does not produce unindexed search report
  - Ticket 47490 - Schema replication between DS versions may overwrite newer base schema


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.2-1
changelog:
  - release 1.3.2.2
  - Ticket 47517 - memory leak in range searches and other various leaks
  - ticket 47550 - wip (cherry picked from commit 82377636267787be5182457d619d5a0b662d2658)
  - Ticket 47550 - logconv: failed logins: Use of uninitialized value in numeric comparison at logconv.pl line 949


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.3-1
changelog:
  - release 1.3.2.3
  - Ticket 47515 - Fedora 20: setup-ds-admin.pl
  - Ticket 47569 - Fix build warnings
  - Ticket 47569 - ACIs do not allow attribute subtypes in targetattr keyword
  - Ticket 47565 - Content Sync update file needs extensibleObject
  - Ticket 47560 - fixup memberof task does not work: task entry not added
  - Ticket 47559 - hung server - related to sasl and initialize


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.2.4-1
changelog:
  6cdca01 bump version to 1.3.2.4
  Ticket 47599 - Reduce lock scope in retro changelog plug-in
  Ticket 47596 - attrcrypt fails to find unlocked key
  Ticket 47598 - Convert ldbm_back_seq code to be transaction aware
  Ticket 47597 - Convert retro changelog plug-in to betxn
  Ticket 47585 - Replication Failures related to skipped entries due to cleaned rids
  Ticket 47588 - Compiler warnings building on F19
  Ticket 47581 - Winsync plugin segfault during incremental backoff (phase 2)
  Ticket 47581 - Winsync plugin segfault during incremental backoff
  Ticket 47577 - crash when removing entries from cache
  6b16d30 Revert "Ticket #47559 hung server - related to sasl and initialize"


author: Rich Megginson <rmeggins@redhat.com> - 1.3.2.6-1
changelog:
  - Ticket 47599 - Reduce lock scope in retro changelog plug-in
  -  previous fix missing defition of retrocl_cn_lock


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.2.7-1
changelog:
  - 924ead4 Bump version to 1.3.2.7
  - Ticket 47593 - Update plugin API for OTP plugin
  - Ticket 47599 - fix memory leak in ldbm_back_seq()


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.8-1
changelog:
  - Bump version to 1.3.2.8
  - Ticket 47612 - ns-slapd eats all the memory
  - Ticket 47527 - Allow referential integrity suffixes to be configurable
  - Ticket 47526 - Allow memberof suffixes to be configurable
  - Ticket 342   - better error message when cache overflows (phase 2)
  - Ticket 47587 - hard coded limit of 64 masters in agreement and changelog code
  - Ticket 47611 - Add script to build patched RPMs
  - Ticket 47614 - Possible to specify invalid SASL mechanism in nsslapd-allowed-sasl-mechanisms
  - Ticket 47613 - Impossible to configure nsslapd-allowed-sasl-mechanisms
  - Ticket 47592 - automember plugin task memory leaks
  - Ticket 47591 - entries with empty objectclass attribute value can be hidden
  - Ticket 47596 - attrcrypt fails to find unlocked key


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.9-1
changelog:
  - Bump version to 1.3.2.9
  - Ticket 47621 - v2 make referential integrity configuration more flexible
  - Ticket 47620 - Fix missing left bracket
  - Ticket 47620 - Fix dereferenced NULL pointer in agmtlist_modify_callback()
  - Ticket 47606 - replica init/bulk import errors should be more verbose
  - Ticket 47631 - objectclass may, must lists skip rest of objectclass once first is found in sup
  - Ticket 47627 - Fix replication logging
  - Ticket 47620 - Fix logically dead code.
  - Ticket 47313 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result
  - Ticket 47620 - Config value validation improvement
  - Ticket 47620 - Fix cherry-pick error for 1.3.2 and 1.3.1
  - Ticket 47613 - Issues setting allowed mechanisms
  - Ticket 47617 - allow configuring changelog trim interval
  - Ticket 47601 - Plugin library path validation prevents intentional loading of out-of-tree modules
  - Ticket 47627 - changelog iteration should ignore cleaned rids when getting the minCSN
  - Ticket 47623 - fix memleak caused by 47347
  - Ticket 47622 - Automember betxnpreoperation - transaction not aborted when group entry does not exist
  - Ticket 47623 - fix memleak caused by 47347
  - Ticket 47620 - 389-ds rejects nsds5ReplicaProtocolTimeout attribute


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.10-1
changelog:
  - Bump version to 1.3.2.10
  - Ticket 447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs
  - Ticket 47653 - Need a way to allow users to create entries assigned to themselves
  - Ticket 47647 - remove bogus definition in 60rfc3712.ldif
  - Ticket 47634 - support AttributeTypeDescription USAGE userApplications distributedOperation dSAOperation
  - Ticket 47645 - reset stack, op fields to NULL - clean up stacks at shutdown - free unused plugin config entries


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.11-1
changelog:
  - Bump version to 1.3.2.11
  - Ticket 47653 - Need a way to allow users to create entries assigned to themselves.
  - Ticket 471   - logconv.pl tool removes the access logs contents if "-M" is not correctly used
  - Ticket 47374 - flush.pl is not included in perl5
  - Ticket 47649 - Server hangs in cos_cache when adding a user entry
  - Ticket 443   - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error
  - Ticket 47638 - Overflow in nsslapd-disk-monitoring-threshold on 32bit platform
  - Ticket 47641 - 7-bit check plugin not checking MODRDN operation
  - Ticket 342   - better error message when cache overflows
  - Ticket 47516 - replication stops with excessive clock skew
  - Ticket 47620 - Unable to delete protocol timeout attribute
  - Ticket 408   - Fix crash when disabling/enabling the setting
  - Ticket 47629 - random crashes related to sync repl
  - Ticket 47571 - targetattr ACIs ignore subtype
  - Ticket 47660 - config_set_allowed_to_delete_attrs: Valgrind reports Invalid read
  - Revert "Ticket 47653 - Need a way to allow users to create entries assigned to themselves"


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.12-1
changelog:
  - Bump version to 1.3.2.12
  - Ticket 408   - create a normalized dn cache
  - Ticket 571   - Empty control list causes LDAP protocol error is thrown (dup 47361)
  - Ticket 408   - create a normalized dn cache
  - Ticket 47699 - Propagate plugin precedence to all registered function types
  - Ticket 525   - Replication retry time attributes cannot be added
  - Ticket 47709 - package issue in 389-ds-base
  - Ticket 47700 - Unresolved external symbol references break loading of the ACL plugin
  - Ticket 47642 - Windows Sync group issues
  - Ticket 525   - Replication retry time attributes cannot be added
  - Ticket 47692 - single valued attribute replicated ADD does not work
  - Ticket 47615 - Failed to compile the DS 389 1.3.2.3 version against Berkeley DB 4.2 version
  - Ticket 47677 - Size returned by slapi_entry_size is not accurate
  - Ticket 47693 - Environment variables are not passed when DS is started via service


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.13-1
changelog:
  - Bump version to 1.3.2.13
  - The previous version 1.3.2.12 missed to increment the version in VERSION.sh


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.14-1
changelog:
  - Bump version to 1.3.2.14
  - Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind
  - Ticket 47737 - Under heavy stress, failure of turning a tombstone into glue makes the server hung
  - Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry
  - Ticket 47729 - Directory Server crashes if shutdown during a replication initialization
  - Ticket 47637 - rsa_null_sha should not be enabled by default


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.15-1
changelog:
  - Bump version to 1.3.2.15
  - Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry
  - Ticket 47740 - Coverity issue in 1.3.3
  - Ticket 47740 - Fix coverity issues - Part 5
  - Ticket 47740 - Fix coverity erorrs - Part 4
  - Ticket 47640 - Fix coverity issues - part 3
  - Ticket 47740 - Fix sync plugin resource leaks
  - Ticket 47538 - RFE: repl-monitor.pl plain text output, cmdline config options
  - Ticket 47740 - Coverity Fixes (Mark - part 1)
  - Ticket 47734 - Change made in resolving ticket #346 fails on Debian SPARC64
  - Ticket 47722 - Fixed filter not correctly identified
  - Ticket 47722 - rsearch filter error on any search filter


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.16-1
changelog:
  - Release 1.3.2.16 (This release is 1.3.2.13 + Ticket 47739)
  - Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.17-1
changelog:
  - Release 1.3.2.17
  - Ticket 47446 - logconv.pl memory continually grows
  - Ticket 47713 - Logconv.pl with an empty access log gives lots of errors
  - Ticket 47806 - Failed deletion of aci: no such attribute
  - bump version
  - Ticket 47720 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator.
  - Ticket 47670 - Aci warnings in error log
  - Ticket 47721 - Schema Replication Issue (follow up)
  - Ticket 47721 - Schema Replication Issue (follow up + cleanup)
  - Ticket 47721 - Schema Replication Issue
  - Ticket 47676 - (cont.) Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1
  - Ticket 47676 - Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1
  - Ticket 47541 - Fix Jenkins errors
  - Ticket 47541 - Replication of the schema may overwrite  consumer 'attributetypes' even if  consumer definition is a superset
  - Ticket 47804 - db2bak.pl error with changelogdb
  - Ticket 47780 - Some VLV search request causes memory leaks
  - Ticket 47787 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone
  - Ticket 47764 - Problem with deletion while replicated
  - Ticket 47750 - Creating a glue fails if one above level is a conflict or missing; Ticket 47696 - Large Searches Hang - Possibly entryrdn related
  - Ticket 47772 - fix coverity issue
  - Ticket 47793 - Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled.
  - Ticket 47792 - database plugins need a way to call betxn  plugins
  - Ticket 47707 - 389 DS Server crashes and dies while handles paged searches from clients
  - Ticket 47792 - code cleanup
  - Ticket 47779 - Need to lock server list when removing list
  - Ticket 47771 - Move parentsdn initialization to avoid crash
  - Ticket 47779 - Part of DNA shared configuration is deleted after server restart
  - Ticket 346   - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  - Ticket 47782 - Parent numbordinate count can be incorrectly updated if an error occurs
  - Ticket 47772 - empty modify returns LDAP_INVALID_DN_SYNTAX
  - Ticket 47774 - mem leak in do_search - rawbase not freed upon certain errors
  - Ticket 47773 - mem leak in do_bind when there is an error
  - Ticket 47771 - Performing deletes during tombstone purging results in operation errors
  - Ticket 47767 - Nested tombstones become orphaned after purge
  - Ticket 47766 - Tombstone purging can crash the server if the backend is stopped/disabled
  - Ticket 47759 - Crash in replication when server is under write load
  - Ticket 47740 - Fix coverity issues(part 7)
  - Ticket 47748 - Simultaneous adding a user and binding as the user could fail in the password policy check
  - Ticket 47743 - Memory leak with proxy auth control
  - Ticket 47740 - Crash caused by changes to certmap.c
  - Ticket 47733 - ds logs many "Operation error fetching Null DN" messages
  - Ticket 47740 - Fix coverity issues: null deferences - Part 6
  - Ticket 47732 - ds logs many "SLAPI_PLUGIN_BE_TXN_POST_DELETE_FN plugin returned error" messages
  - Ticket 47740 - Coverity issue in 1.3.3
  - Ticket 47735 - e_uniqueid fails to set if an entry is a conflict entry
  - Ticket 47740 - Fix coverity issues - Part 5
  - Ticket 47740 - Fix coverity erorrs - Part 4
  - Ticket 47640 - Fix coverity issues - part 3
  - Ticket 47740 - Fix sync plugin resource leaks
  - Ticket 47538 - RFE: repl-monitor.pl plain text output, cmdline config options
  - Ticket 47740 - Coverity Fixes (Mark - part 1)
  - Ticket 47734 - Change made in resolving ticket #346 fails on Debian SPARC64
  - Ticket 47722 - Fixed filter not correctly identified
  - Ticket 47722 - rsearch filter error on any search filter


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.18-1
changelog:
  - Release 1.3.2.18
  - Ticket 47750 - Creating a glue fails if one above level is a conflict or missing
  - Ticket 47763 - winsync plugin modify is broken
  - Ticket 47821 - deref plugin cannot handle complex acis
  - Ticket 47831 - server restart wipes out index config if there is a default index
  - Ticket 47817 - The error result text message should be obtained just prior to sending result
  - Ticket 47815 - Add operations rejected by betxn plugins remain in cache
  - Ticket 47809 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..."
  - Ticket 47704 - invalid sizelimits in aci group evaluation
  - Ticket 47813 - remove "goto bail" from previous commit
  - Ticket 47813 - managed entry plugin fails to update member  pointer on modrdn operation
  - Ticket 47808 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed.
  - Ticket 47770 - #481 breaks possibility to reassemble memberuid list


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.19-1
changelog:
  - Release 1.3.2.19
  - Ticket 47779 - Potential deadlock after startup if a dna configuration change is made
  - Ticket 47839 - 389-ds production segfault: __memcpy_sse2_unaligned...


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.20-1
changelog:
  - Release 1.3.2.20
  - Ticket 47753 - Add switch to disable pre-hashed password checking
  - Ticket 47861 - Certain schema files are not replaced during upgrade
  - Ticket 47858 - Internal searches using OP_FLAG_REVERSE_CANDIDATE_ORDER can crash the server
  - Ticket 47797 - DB deadlock when two threads (on separated backend) try to record changes in retroCL
  - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
  - Ticket 47692 - single valued attribute replicated ADD does not work
  - Ticket 47781 - Server deadlock if online import started while  server is under load


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.21-1
changelog:
  - Release 1.3.2.21
  - Resolves: #1127833
              Ticket 47869 - unauthenticated information disclosure (Bug 1123477)
  - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
  - Ticket 47862 - repl-monitor fails to convert "*" to default values
  - Ticket 47824 - paged results control is not working in some cases when we have a subsuffix.
  - Ticket 47862 - Repl-monitor.pl ignores the provided connection parameters
  - Ticket 346   - Fixing memory leaks


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.22-1
changelog:
  - Release 1.3.2.21
  - Resolves: #1127833
              Ticket 47869 - unauthenticated information disclosure (Bug 1123477)
    389-ds-base-1.3.2.22 = 389-ds-base-1.3.2.19 + Bug 1127833 fix.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.2.23-1
changelog:
  - Release 1.3.2.23
  - Ticket 47871 - 389-ds-base-1.3.2.21-1.fc20 crashed over the weekend
  - Ticket 47866 - Errors after upgrading related to attribute "dnaremotebindmethod"
  - Ticket 47816 - v2- internal syncrepl searches are flagged as unindexed
  - Ticket 47877 - check_and_add_entry fails for changetype: add and existing entry
  - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
  - Ticket 47875 - dirsrv not running with old openldap
  - Revert "Ticket #47875 - dirsrv not running with old openldap"
  - Ticket 47875 - dirsrv not running with old openldap
  - Ticket 47446 - logconv.pl memory continually grows
  - Ticket 47874 - Performance degradation with scope ONE after some load
  - Ticket 47872 - Filter AND with only one clause should be optimized
  - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
  - Ticket 47862 - repl-monitor fails to convert "*" to default values
  - Ticket 47824 - paged results control is not working in some cases when we have a subsuffix.
  - Ticket 47862 - Repl-monitor.pl ignores the provided connection parameters
  - Ticket 346   - Fixing memory leaks
  - Ticket 47753 - Add switch to disable pre-hashed password checking
  - Ticket 47861 - Certain schema files are not replaced during upgrade
  - Ticket 47858 - Internal searches using OP_FLAG_REVERSE_CANDIDATE_ORDER can crash the server
  - Ticket 47797 - fix the indentation
  - Ticket 47797 - DB deadlock when two threads (on separated backend) try to record changes in retroCL
  - Ticket 47692 - single valued attribute replicated ADD does not work
  - Ticket 47781 - Server deadlock if online import started while  server is under load


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.0-1
changelog:
  - Release 1.3.3.0
  - Ticket 47879 - coverity defects in plugins/replication/windows_protocol_util.c
  - Ticket 47876 - coverity defects in slapd/tools/mmldif.c
  - Ticket 47574 - start dirsrv after ntpd
  - Ticket 47838 - harden the list of ciphers available by default
  - Ticket 47579 - add dbmon.sh
  - Ticket 47819 - Fix memory leak
  - Ticket 47819 - Improve tombstone purging performance
  - Ticket 47714 - [RFE] Update lastLoginTime also in Account Policy plugin if account lockout is based on passwordExpirationTime.
  - Ticket 47812 - logconv.pl missing -U option from usage
  - Ticket 47664 - Page control does not work if effective rights control is specified
  - Ticket 47790 - Integer config attributes accept invalid  values at server startup
  - Ticket 47710 - Missing warning for invalid replica backoff configuration
  - Ticket 47853 - Missing newline at end of the error log messages in memberof
  - Ticket 47853 - client hangs in add if memberof fails
  - Ticket 47746 - ldap/servers/slapd/back-ldbm/dblayer.c: possible minor problem with sscanf
  - Ticket 47711 - improve dbgen rdn generation, output and man page.
  - Ticket 47855 - Fix previous commit
  - Ticket 47859 - Coverity: 12692 & 12717
  - Ticket 47855 - clear tmp directory at the start of each test
  - Ticket 47844 - Fix hyphens used as minus signed and other manpage mistakes
  - Ticket 47843 - Fix various typos in manpages & code
  - Ticket 47832 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with improper macro
  - Ticket 47852 - Updating winsync one-way sync does not affect the behaviour dynamically
  - Ticket 47846 - server crashes deleting a replication agreement
  - Ticket 47823 - attribute uniqueness enforced on all subtrees
  - Ticket 47654 - Fix regression (deadlock/crash)
  - Ticket 47827 - Fix coverity issue 12695
  - Ticket 47829: memberof scope: allow to exclude subtrees
  - Ticket 47815 - Add operations rejected by betxn plugins remain in cache
  - Ticket 47808 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed
  - Ticket 555   - add fixup-memberuid.pl script
  - Ticket 47827 - online import crashes server if using verbose error logging
  - fix compiler error with alst coverity commit
  - fix coverity issue 12621
  - Ticket 47810 - investigate betxn plugins to ensure they  return the correct error code
  - Ticket 47602 - txn commit being performed too early
  - Ticket 47752 - Don't add unhashed password mod if we don't have an unhashed value
  - Ticket 47803 - syncrepl crash if attribute list is non-empty
  - Ticket 47466 - Fix coverity issue
  - Ticket 47644 - Managed Entry Plugin - transaction not aborted upon failure to create managed entry
  - Ticket 47791 - Negative value of nsSaslMapPriority is not  reset to lowest priority
  - Ticket 47805 - syncrepl doesn't send notification when attribute in search filter changes
  - Ticket 47636 - errorlog-level 16384 is listed as 0 in cn=config
  - Ticket 47451 - Remove old code from linked attr plugin
  - Ticket 47756 - fix coverity issues
  - Ticket 47761 - Return all attributes in rootdse without explicit request
  - fix assertion failure introduced with fix for ticket 47667
  - Ticket 47712 - betxn: retro changelog broken after cancelled transaction
  - Ticket 47667 - Allow nsDS5ReplicaBindDN to be a group DN
  - Ticket 47655 - Improve replication total update logging
  - Ticket 47756 - Improve import logging and abort processing
  - Ticket 47451 - add/enable/disable/remove plugins without server restart
  - Ticket 47553 - Enhance ACIs to have more control over MODRDN operations
  - Ticket 47727 - Updating nsds5ReplicaHost attribute in a replication agreement fails with error 53
  - Ticket 47725 - compiler error on daemon.c
  - Ticket 47701 - Make retro changelog trim interval programmable
  - Ticket 47453 - configure SASL/GSSAPI/Kerberos without server restart
  - Ticket 47701 - Make retro changelog trim interval programmable
  - Ticket 47602 - Make ldbm_back_seq independently support transactions
  - Ticket 47552 - logconv: unindexed report should list bind dn
  - Ticket 47619 - cannot reindex retrochangelog
  - Update test cases due to new modules: Schema, tasks, plugins and index
  - Ticket 47608 - change slapi_entry_attr_get_bool to handle "on"/"off" values, support default value
  - Ticket 47437 - Some attributes in cn=config should not be multivalued
  - Ticket 47573 - schema push can be erronously prevented
  - Ticket 47618 - Enable normalized DN cache by default
  - Ticket 47570 - slapi_ldap_init unusable during independent plugin development
  - Ticket 47659 - ldbm_usn_init: Valgrind reports Invalid read / SIGSEGV
  - Ticket 47654 - fix double free
  - Ticket 47675 - logconv errors when search has invalid bind dn
  - Ticket 47657 - add schema test suite and tests for Ticket #47634
  - Ticket 47668 - test: port ticket47490_test to Replica/Agreement interface (47600)
  - Ticket 47654 - Cleanup old memory leaks reported from valgrind
  - Ticket 47651 - Finaliser to remove instances backups
  - Ticket 47603 - should not modify pre op entry during config validation
  - Ticket 47628 - port testcases to new DirSrv interface
  - Ticket 47525 - Don't modify preop entry in memberOf config
  - Ticket 605   - support TLS 1.1 - Fixing "Coverity 12415 - Logically dead code"
  - Ticket 605   - support TLS 1.1 - lower the log level for the supported NSS version range
  - Ticket 47368 - fix memory leaks
  - Ticket 605   - support TLS 1.1 - adding backward compatibility
  - Ticket 605   - support TLS 1.1
  - Ticket 47603 - Allow RI plugin to use alternate config area
  - Ticket 47586 - Need to rebind after a stop (fix to run direct python script)
  - Ticket 47525 - Need to add locking around config area access
  - Ticket 47457 - default nsslapd-sasl-max-buffer-size should be 2MB
  - Ticket 47525 - Fix memory leak
  - Ticket 381   - Recognize compressed log files
  - Ticket 47525 - Allow memberOf to use an alternate config area
  - Ticket 47529 - Automember plug-in should treat MODRDN operations as ADD operations
  - Ticket 47521 - Complex filter in a search request doen't work as expected.
  - Ticket 47582 - agmt_count in Replica could become (PRUint64)-1
  - Ticket 47368 - Fix coverity issues
  - Ticket 47555 - db2bak.pl issue when specifying non-default directory
  - Ticket 47368 - Fix Jenkins errors
  - Ticket 47368 - IPA server dirsrv RUV entry data excluded from replication
  - Ticket 538   - - hardcoded sasl2 plugin path in ldaputil.c, saslbind.c
  - Ticket 47519 - memory leaks in access control
  - Ticket 47398 - memberOf on a user is converted to lowercase
  - Coverity Issue 12033
  - Ticket 47530 - dbscan on entryrdn should show all matching values
  - Ticket 47422 - With 1.3.04 and subtree-renaming OFF, when a user is deleted after restarting the server, the same entry can't be added
  - bump autoconf to 2.69, automake to 1.13.4, libtool to 2.4.2
  - Ticket 47436 - 389-ds-base - shebang with /usr/bin/env
  - Ticket 47499 - if nsslapd-cachememsize set to the number larger than the RAM available, should result in proper error message.
  - Ticket 47530 - dbscan on entryrdn should show all matching values
  - Ticket 47535 - update man page
  - Ticket 53    - Need to update supported locales Cleaning up typos and format.
  - Ticket 47535 - Logconv.pl - RFE - add on option for a minimum etime for unindexed search stats
  - Ticket 47491 - Update systemd service file to use PartOf directive


author: Nathan Kinder <nkinder@redhat.com> - 1.3.3.2-1
changelog:
  - Release 1.3.3.2
  - Ticket 47889 - DS crashed during ipa-server-install on test_ava_filter
  - Ticket 47895 - If no effective ciphers are available, disable security setting.
  - Ticket 47838 - harden the list of ciphers available by default
  - Ticket 47885 - did not always return a response control
  - Ticket 47890 - minor memory leaks in utilities
  - Ticket 47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
  - Ticket 47748 - Simultaneous adding a user and binding as the user could fail in the password policy check
  - Ticket 47875 - dirsrv not running with old openldap
  - Ticket 47885 - deref plugin should not return references with noc access rights


author: Peter Robinson <pbrobinson@fedoraproject.org> 1.3.3.3-2
changelog:
  - Use generic 64 bit detection (fixes aarch64/ppc64le)
  - PPC/s390 has lm_sensors
  - Minor spec cleanups


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.4-1
changelog:
  - Release 1.3.3.4
  - Ticket 47880 - CI test: added test cases for ticket 47880
  - Ticket 47880 - provide enabled ciphers as search result
  - Ticket 47838 - CI test: adjusted test cases based on the phase 2 fixes for ticket 47838
  - Ticket 47838 - harden the list of ciphers available by default (phase 2)
  - Ticket 47900 - Adding an entry with an invalid password as rootDN is incorrectly rejected
  - Ticket 47908 - 389-ds 1.3.3.0 does not adjust cipher suite configuration on upgrade, breaks itself and pki-server
  - Ticket 47907 - ldclt: assertion failure with -e "add,counteach" -e "object=<ldif file>,rdn=uid:test[A=INCRNNOLOOP(0;24
  - Ticket 47750 - Creating a glue fails if one above level is a conflict or missing


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.5-1
changelog:
  - Release 1.3.3.5
  - Ticket 47914 - Add FreeIPA Conflicts to 389 spec file
  - Ticket 47922 - dynamically added macro aci is not evaluated on the fly
  - Ticket 47897 - Need to move slapi_pblock_set(pb, SLAPI_MODRDN_EXISTING_ENTRY, original_entry->ep_entry) prior to original_entry overwritten
  - Ticket 47920 - Encoding of SearchResultEntry is missing tag
  - Ticket 47912 - Proper handling of "No original_tombstone for changenumber" errors
  - Ticket 47899 - Fix slapi_td_plugin_lock_init prototype
  - Ticket 47919 - ldbm_back_modify SLAPI_PLUGIN_BE_PRE_MODIFY_FN does not return even if one of the preop plugins fails.
  - Ticket 47892 - Fix remaining compiler warnings
  - ticket 47916 - plugin logging parameter only triggers result logging
  - Ticket 47918 - result of dna_dn_is_shared_config is incorrectly used
  - Ticket 47900 - Server fails to start if password admin is set
  - Ticket 47892 - coverity defects found in 1.3.3.x


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.3.6-1
changelog:
  - 5d72a2f bump version to 1.3.3.6-1
  - Ticket 47950 - Bind DN tracking unable to write to internalModifiersName without special permissions
  - Ticket 47958 - Memory leak in password admin if the admin entry does not exist
  - Ticket 47952 - PasswordAdminDN attribute is not properly returned to client
  - Ticket 47451 - Need to unregister tasks created by plugins
  - Ticket 47928 - Disable SSL v3, by default.
  - Ticket 47953 - Should not check aci syntax when deleting an aci
  - Ticket 47948 - ldap_sasl_bind fails assertion (ld != NULL) if it is called from chainingdb_bind over SSL/startTLS
  - Ticket 47945 - Add SSL/TLS version info to the access log
  - Ticket 47939 - Malformed cookie for LDAP Sync makes DS crash
  - Ticket 47937 - Crash in entry_add_present_values_wsi_multi_valued
  - Ticket 47928 - CI test: added test cases for ticket 47928
  - Ticket 47553 - Enhance ACIs to have more control over MODRDN operations


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.7-1
changelog:
  - bump version to 1.3.3.7
  - Coverity 12970 - Explicit null dereference
  - Ticket 47988 - Schema learning mechanism, in replication, unable to extend an existing definition
  - Ticket 47996 - ldclt needs to support SSL Version range
  - Ticket 47738 - use PL_strcasestr instead of strcasestr
  - Ticket 47462 - Stop using DES in the reversible password  encryption plug-in
  - Ticket 47807 - SLAPI_REQUESTOR_ISROOT not set for extended operation plugins
  - Ticket 47991 - upgrade script fails if /etc and /var are on different file systems
  - Ticket 47989 - Windows Sync accidentally cleared raw_entry
  - Ticket 47964 - v2 - Incorrect search result after replacing an empty attribute
  - Ticket 47934 - nsslapd-db-locks modify not taking into account.
  - Ticket 47617 - replication changelog trimming setting validation
  - Ticket 47905 - Bad manipulation of passwordhistory
  - Ticket 47973 - During schema reload sometimes the search returns no results
  - Ticket 47981 - COS cache doesn't properly mark vattr cache as  invalid when there are multiple suffixes
  - Ticket 47980 - Nested COS definitions can be incorrectly  processed
  - Ticket 47451 - Dynamic plugins - fixed thread synchronization
  - Ticket 47750 - During delete operation do not refresh cache entry if it is a tombstone
  - Ticket 47947 - start dirsrv after chrony on RHEL7 and Fedora
  - fix jenkins warning
  - Ticket 47526 - Additional fix for ticket 47526 v3
  - Ticket 47451 - Add Dynamic Plugin CI Suite
  - Ticket 47965 - Fix coverity issues (2014/12/16)
  - Ticket 47451 - Fix jenkins errors
  - Ticket 47451 - Dynamic Plugin - various fixes
  - Ticket 47935 - Error: failed to open an LDAP connection to host 'example.org' port '389' as user 'cn=Directory Manager'. Error: unknown.
  - Ticket 47750 - Need to refresh cache entry after called betxn postop plugins
  - Ticket 47942 -  DS hangs during online total update
  - Ticket 47960 - cookie_change_info returns random negative number if there was no change in a tree
  - Ticket 47960 - cookie_change_info returns random negative number if there was no change in a tree
  - Ticket 47722 - Using the filter file does not work
  - Ticket 47636 - Error log levels not displayed correctly
  - Ticket 47965 - Fix coverity issues (2014/11/24)
  - Ticket 47969 - Fix coverity issue
  - Ticket 47949 - logconv.pl -- support parsing/showing/reporting different protocol versions
  - Ticket 47525 - Crash if setting invalid plugin config area for MemberOf Plugin
  - Ticket 47970 - add lib389 testcase
  - Ticket 47970 - Account lockout attributes incorrectly updated after failed SASL Bind
  - Ticket 47969 - COS memory leak when rebuilding the cache
  - Ticket 47967 - cos_cache_build_definition_list does not stop during server shutdown
  - Ticket 47451 - Running a plugin task can crash the server
  - Ticket 47963 - skip nested groups breaks memberof fixup task
  - Ticket 47963 - RFE - memberOf - add option to skip nested  group lookups during delete operations
  - Ticket 47810 - RI plugin does not return result code if update fails


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.8-1
changelog:
  - bump version to 1.3.3.8
  - Ticket 48001 - ns-activate.pl fails to activate account if it was disabled on AD
  - Ticket 47963 - memberof skip nested groups breaks the plugin


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.8-2
changelog:
  - Fixes spec file to make sure all the server instances are stopped before upgrade
  - Ticket 48030 - DNS errors after IPA upgrade due to broken ReplSync


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.9-1
changelog:
  - bump version to 1.3.3.9
  - Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all]
  - Ticket 47801 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown
  - Ticket 47957 - Make ReplicaWaitForAsyncResults configurable
  - Ticket 47431 - CI test: added test cases for ticket 47431
  - Ticket 47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly
  - Ticket 47936: Create a global lock to serialize write operations over several backends
  - Ticket 48021 - nsDS5ReplicaBindDNGroup checkinterval not working properly
  - Ticket 48048 - Fix coverity issues - 2015/3/1
  - Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
  - Ticket 48109 - CI test: added test cases for ticket 48109
  - Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
  - Ticket 48048 - Fix coverity issues - 2015/2/24
  - Ticket 48030 - spec file should run "systemctl stop" against each running instance instead of dirsrv.target
  - Ticket 47828: DNA scope: allow to exlude some subtrees
  - Ticket 47988: test case
  - Ticket 47901: After total init, nsds5replicaLastInitStatus can report an erroneous error status (like 'Referral')
  - Ticket 48003 - add template scripts
  - Ticket 48003 - build "suite" framework
  - Ticket 48005 - CI test: added test cases for ticket 48005
  - Ticket 48005 - ns-slapd crash in shutdown phase
  - Ticket 47742 - 64bit problem on big endian: auth method not supported
  - Ticket 47836 - Do not return '0' as empty fallback value of nsds5replicalastupdatestart and nsds5replicalastupdatestart
  - Ticket 47728 - compilation failed with ' incomplete struct/union/enum' if not set USE_POSIX_RWLOCKS
  - Ticket 48027 - revise the rootdn plugin configuration validation
  - Ticket 47451 - dynamic plugins - fix crash caused by invalid  plugin config
  - Ticket 48001 - ns-activate.pl fails to activate account if it was disabled on AD


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.10-1
changelog:
  - release 1.3.3.10
  - Resolves: Bug 1216203 - CVE-2015-1854 389ds-base: access control bypass with modrdn


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.11-1
changelog:
  - release 1.3.3.11
  - Ticket 48192 - Individual abandoned simple paged results request has no chance to be cleaned up
  - Ticket 48190 - idm/ipa 389-ds-base entry cache converges to 500 KB in dblayer_is_cachesize_sane
  - Ticket 48183 - bind on db chained to AD returns err=32
  - Ticket 48158 - cleanAllRUV task limit not being enforced correctly
  - Ticket 48158 - Remove cleanAllRUV task limit of 4
  - Ticket 48146 - async simple paged results issue; need to close a small window for a pr index competed among multiple threads.
  - Ticket 48146 - async simple paged results issue; log pr index
  - Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
  - Ticket 48177 - dynamic plugins should not return an error when modifying a critical plugin
  - Ticket 48146 - async simple paged results issue


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.12-1
changelog:
  - release 1.3.3.12
  - Resolves: Bug 1232896 - CVE-2015-3230 389-ds-base: nsSSL3Ciphers preference not enforced server side


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-1
changelog:
  - Release 1.3.4.0 (rebase)
  - Enable nunc-stans in the build.
  - Ticket 47490 - test case failing if 47721 is also fixed
  - Ticket 47640 - Linked attributes transaction not aborted when  linked entry does not exit
  - Ticket 47669 - CI test: added test cases for ticket 47669
  - Ticket 47669 - Retro Changelog Plugin accepts invalid value in nsslapd-changelogmaxage attribute
  - Ticket 47723 - winsync sets AccountUserControl in AD to 544
  - Ticket 47787 - Make the test case more robust
  - Ticket 47833 - TEST CASE only (modrdn fails if renamed entry member of a group and is out of memberof scope)
  - Ticket 47878 - Improve setup-ds update logging
  - Ticket 47893 - should use Sys::Hostname instead Net::Domain
  - Ticket 47910 - allow logconv.pl -S/-E switches to work even when timestamps not present in access log
  - Ticket 47913 - remove-ds.pl should not remove /var/lib/dirsrv
  - Ticket 47921 - indirect cos does not reflect changes in the cos attribute
  - Ticket 47927 - Uniqueness plugin: should allow to exclude some subtrees from its scope
  - Ticket 47953 - testcase for removing invalid aci
  - Ticket 47966 - CI test: added test cases for ticket 47966
  - Ticket 47966 - slapd crashes during Dogtag clone reinstallation
  - Ticket 47972 - make parsing of nsslapd-changelogmaxage more fault tolerant
  - Ticket 47972 - make parsing of nsslapd-changelogmaxage more fool proof
  - Ticket 47998 - cleanup WINDOWS ifdef's
  - Ticket 47998 - remove remaining obsolete OS code/files
  - Ticket 47998 - remove "windows" files
  - Ticket 47999 - address several race conditions in tests
  - Ticket 47999 - lib389 individual tests not running correctly  when run as a whole
  - Ticket 48003 - build "suite" framework
  - Ticket 48008 - db2bak.pl man page should be improved.
  - Ticket 48017 - add script to generate lib389 CI test script
  - Ticket 48019 - Remove refs to constants.py and backup/restore from lib389 tests
  - Ticket 48023 - replace old replication check with lib389 function
  - Ticket 48025 - add an option '-u' to dbgen.pl for adding group entries with uniquemembers
  - Ticket 48026 - fix invalid write for friendly attribute names
  - Ticket 48026 - Fix memory leak in uniqueness plugin
  - Ticket 48026 - Support for uniqueness plugin to enforce uniqueness on a set of attributes.
  - Ticket 48032 - change C code license to GPLv3; change C code license to allow openssl
  - Ticket 48035 - nunc-stans - Revise shutdown sequence
  - Ticket 48036 - ns_set_shutdown should call ns_job_done
  - Ticket 48037 - ns_thrpool_new should take a config struct rather than many parameters
  - Ticket 48038 - logging should be pluggable
  - Ticket 48039 - nunc-stans malloc should be pluggable
  - Ticket 48040 - preserve the FD when disabling a listener
  - Ticket 48043 - use nunc-stans config initializer
  - Ticket 48103 - update DS for new nunc-stans header file
  - Ticket 48110 - Free all the nunc-stans signal jobs when shutdown is detected
  - Ticket 48111 - "make clean" wipes out original files
  - Ticket 48122 - nunc-stans FD leak
  - Ticket 48127 - Using RPM, allows non root user to create/remove DS instance
  - Ticket 48141 - aci with wildcard and macro not correctly evaluated
  - Ticket 48143 - Password is not correctly passed to perl command line tools if it contains shell special characters.
  - Ticket 48149 - ns-slapd double free or corruption crash
  - Ticket 48154 - abort cleanAllRUV tasks should not certify-all by default
  - Ticket 48169 - support NSS 3.18
  - Ticket 48170 - Parse nsIndexType correctly
  - Ticket 48175 - Avoid using regex in ACL if possible
  - Ticket 48178 - add config param to enable nunc-stans
  - Ticket 48191 - CI test: added test cases for ticket 48191
  - Ticket 48191 - RFE: Adding nsslapd-maxsimplepaged-per-conn
  - Ticket 48191 - RFE: Adding nsslapd-maxsimplepaged-per-conn Adding nsslapd-maxsimplepaged-per-conn
  - Ticket 48194 - CI test: added test cases for ticket 48194
  - Ticket 48197 - error texts from preop plugins not sent to client


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.1-1
changelog:
  - Release 1.3.4.1
  - Resolves: Bug 1234277 - distro-wide architecture set overriden by buildsystem; Upgrade nunc-stans to 0.1.5.
  - Enable nunc-stans just for x86_64.
  - Ticket 48203 - Fix coverity issues - 06/22/2015


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.2-1
changelog:
  - Release 1.3.4.2
  - Ticket 48010 - winsync range retrieval gets only 5000 values upon initialization
  - Ticket 48206 - Crash during retro changelog trimming
  - Ticket 48224 - redux 2 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files
  - Ticket 47910 - logconv.pl - check that the end time is greater than the start time
  - Ticket 48179 - Starting a replica agreement can lead to  deadlock
  - Ticket 48226 - CI test: added test cases for ticket 48226
  - Ticket 48226 - In MMR, double free coould occur under some special condition
  - Ticket 48224 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files
  - Ticket 48203 - Fix coverity issues - 07/14/2015
  - Ticket 48194 - CI test: fixing test cases for ticket 48194
  - Ticket 48224 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files
  - Ticket 47910 - logconv.pl - validate start and end time args
  - Ticket 48223 - Winsync fails when AD users have multiple spaces (two)inside the value of the rdn attribute
  - Ticket 47878 - Remove warning suppression in 1.3.4
  - Ticket 48119 - Silent install needs to properly exit when INF file is missing
  - Ticket 48216 - crash in ns-slapd when deleting winSyncSubtreePair from sync agreement
  - Ticket 48217 - cleanAllRUV hangs shutdown if not all of the  replicas are online
  - Ticket 48013 - Inconsistent behaviour of DS when LDAP Sync is used with an invalid cookie
  - Ticket 47799 - Any negative LDAP error code number reported as Illegal error by ldclt.
  - Ticket 48208 - CleanAllRUV should completely purge changelog
  - Ticket 48203 - Fix coverity issues - 07/07/2015
  - Ticket 48119 - setup-ds.pl does not log invalid --file path errors the same way as other errors.
  - Ticket 48192 - Individual abandoned simple paged results request has no chance to be cleaned up
  - Ticket 48214 - CI test: added test cases for ticket 48213
  - Ticket 48214 - ldapsearch on nsslapd-maxbersize returns 0 instead of current value
  - Ticket 48212 - CI test: added test cases for ticket 48212
  - Ticket 48212 - Dynamic nsMatchingRule changes had no effect on the attrinfo thus following reindexing, as well.
  - Ticket 48195 - Slow replication when deleting large quantities of multi-valued attributes


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.4-1
changelog:
  - Release 1.3.4.4
  - Ticket 48255 - total update request can be lost
  - Ticket 48263 - allow plugins to detect tombstone operations
  - Ticket 48265 - Complex filter in a search request doen't work as expected. (regression)
  - Ticket 47981 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes
  - Ticket 48204 - Convert all python scripts to support python3
  - Ticket 48258 - dna plugin needs to handle binddn groups for authorization
  - Ticket 48252 - db2index creates index entry from deleted records
  - Ticket 48228 - wrong password check if passwordInHistory is decreased.
  - Ticket 48252 - db2index creates index entry from deleted records
  - Ticket 47757 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax
  - Ticket 48254 - Shell CLI fails with usage errors if an argument containing white spaces is given
  - Ticket 48254 - CLI db2index fails with usage errors
  - Ticket 47831 - remove debug logging from retro cl
  - Ticket 48243 - replica upgrade failed in starting dirsrv service due to upgrade scripts did not run
  - Ticket 48233 - Server crashes in ACL_LasFindFlush during  shutdown if ACIs contain IP addresss restrictions
  - Ticket 48250 - Slapd crashes reported from latest build
  - Ticket 48249 - sync_repl uuid may be invalid
  - Ticket 48245 - Man pages and help for remove-ds.pl doesn't display "-a" option
  - Ticket 47511 - bashisms in 389-ds-base admin scripts
  - Ticket 47686 - removing chaining database links trigger valgrind read errors
  - Ticket 47931 - memberOf & retrocl deadlocks
  - Ticket 48228 - wrong password check if passwordInHistory is decreased.
  - Ticket 48215 - update dbverify usage in main.c
  - Ticket 48215 - verify_db.pl doesn't verify DB specified by -a option
  - Ticket 47810 - memberOf plugin not properly rejecting updates
  - Ticket 48231 - logconv autobind handling regression caused by 47446
  - Ticket 48232 - winsync lastlogon attribute not syncing between DS and AD.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.5-1
changelog:
  - Release 1.3.4.5
  - Ticket 48316 - Perl-5.20.3-328: Use of literal control characters in variable names is deprecated
  - Ticket 48348 - Running /usr/sbin/setup-ds.pl fails with Can't locate bigint.pm, plus two warnings
  - Ticket 48339 - Share nsslapd-threadnumber in the case nunc-stans is enabled, as well.
  - Ticket 48311 - nunc-stans: Attempt to release connection that is not acquired https://fedorahosted.org/389/ticket/48311
  - Ticket 48325 - Add lib389 test script
  - Ticket 48344 - acl - regression - trailing ', (comma)' in macro matched value is not removed.
  - Ticket 48325 - Replica promotion leaves RUV out of order
  - Ticket 48338 - SimplePagedResults -- abandon could happen between the abandon check and sending results
  - Ticket 47976 - deadlock in mep delete post op
  - Ticket 48311 - nunc-stans: Attempt to release connection that   is not acquired
  - Ticket 47978 - Deadlock between two MODs on the same entry between entry cache and backend lock
  - Ticket 48305 - perl module conditional test is not conditional when checking SELinux policies
  - Ticket 47957 - Add replication test suite for a wait async feature
  - Ticket 48227 - rpm.mk doesn't build srpms for 389-ds and nunc-stans
  - Ticket 48264 - Ticket 47553 tests refactoring
  - Ticket 48304 - ns-slapd - LOGINFO:Unable to remove file
  - Ticket 48298 - ns-slapd crash during ipa-replica-manage del
  - Ticket 48192 - Individual abandoned simple paged results request has no chance to be cleaned up
  - Ticket 48299 - pagedresults - when timed out, search results could have been already freed.
  - Ticket 48204 - update lib389 test scripts for python 3
  - Ticket 48283 - many attrlist_replace errors in connection with cleanallruv
  - Ticket 48266 - do not free repl keep alive entry on error
  - Ticket 48284 - free entry when internal add fails
  - Ticket 48266 - Online init crashes consumer
  - Ticket 48188 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in
  - Ticket 48217 - cleanallruv - fix regression with server shutdown
  - Ticket 48266 - coverity issue
  - Ticket 48266 - Fractional replication evaluates several times the same CSN
  - Ticket 48279 - Check NULL reference in nssasl_mutex_lock etc. (saslbind.c)
  - Ticket 48226 - In MMR, double free coould occur under some special condition
  - Ticket 48273 - Update lib389 tests for new valgrind functions
  - Ticket 48276 - initialize free_flags in reslimit_update_from_entry()
  - Ticket 47553 - Automated the verification procedure
  - Ticket 47761 - Added a few testcases to the basic testsuite
  - Ticket 48254 - Shell CLI fails with usage errors if an argument containing white spaces is given
  - Ticket 47511 - bashisms in 389-ds-base admin scripts
  - Ticket 48267 - Add config setting to MO plugin to add objectclass


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.6-1
changelog:
  - Release 1.3.4.6
  - Ticket 48388 - db2ldif -r segfaults from time to time
  - Ticket 48312 - Crash when doing modrdn on managed entry
  - Ticket 48332 - allow users to specify to relax the FQDN constraint
  - Ticket 48375 - SimplePagedResults -- in the search error case, simple paged results slot was not released.
  - Ticket 48362 - With exhausted range, part of DNA shared configuration is deleted after server restart
  - Ticket 48289 - 389-ds-base: ldclt-bin killed by SIGSEGV
  - Ticket 48305 - perl module conditional test is not conditional when checking SELinux policies
  - Ticket 48370 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same modify operation
  - Ticket 48369 - RFE - Add config setting to always send the  password expiring time


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.7-1
changelog:
  - Release 1.3.4.7
  - Bug 1299417 - worker threads do not detect abnormally closed connections (DS 48412)
  - Ticket 47788 - Supplier can skip a failing update, although  it should retry
  - Ticket 48341 - deadlock on connection mutex
  - Ticket 48406 - Avoid self deadlock by PR_Lock(conn->c_mutex)
  - Revert "Ticket #48338 - SimplePagedResults -- abandon could happen between the abandon check and sending results"


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.8-1
changelog:
  - Release 1.3.4.8
  - Ticket 48445 - keep alive entries can break replication
  - Ticket 47788 - Only check postop result if its a replication operation
  - Ticket 48536 - Crash in slapi_get_object_extension
  - Ticket 48492 - heap corruption at schema replication.
  - Ticket 48448 - dirsrv start-stop fail in certain shell environments.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.0-1
changelog:
  - Release 1.3.5.0
  - nunc-stans - bump version to 0.1.8
  - Ticket 132   - Makefile.am must include header files and template scripts
  - Ticket 142   - [RFE] Default password syntax settings don't work with fine-grained policies
  - Ticket 548   - RFE: Allow AD password sync to update shadowLastChange
  - Ticket 47788 - Only check postop result if its a replication operation
  - Ticket 47840 - add configure option to disable instance specific scripts
  - Ticket 47968 - [RFE] Send logs to journald
  - Ticket 47977 - [RFE] Implement sd_notify mechanism
  - Ticket 48016 - search, matching rules and filter error "unsupported type 0xA9"
  - Ticket 48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance.
  - Ticket 48145 - RFE Add log file for rejected changes
  - Ticket 48147 - Unable to enable DS service for auto start
  - Ticket 48151 - Improve CleanAllRUV task logging
  - Ticket 48218 - cleanAllRUV - modify the existing "force" option to bypass the "replica online" checks
  - Ticket 48244 - No validation check for the value for nsslapd-db-locks.
  - Ticket 48257 - Fix coverity issues - 08/24/2015
  - Ticket 48263 - allow plugins to detect tombstone operations
  - Ticket 48269 - RFE: need an easy way to detect locked accounts locked by inactivity.
  - Ticket 48270 - fail to index an attribute with a specific matching rule/48269
  - Ticket 48280 - enable logging of internal ops in the audit log
  - Ticket 48285 - The dirsrv user/group should be created in rpm %pre, and ideally with fixed uid/gid
  - Ticket 48289 - 389-ds-base: ldclt-bin killed by SIGSEGV
  - Ticket 48290 - No man page entry for - option '-u' of dbgen.pl for adding group entries with uniquemembers
  - Ticket 48294 - Linked Attributes plug-in - won't update links after MODRDN operation
  - Ticket 48295 - Entry cache is not rolled back -- Linked Attributes plug-in - wrong behaviour when adding valid and broken links
  - Ticket 48311 - nunc-stans: Attempt to release connection that is not acquired
  - Ticket 48317 - SELinux port labeling retry attempts are excessive
  - Ticket 48326 - [RFE] it could be nice to have nsslapd-maxbersize default to bigger than 2Mb
  - Ticket 48350 - configure.ac add options for debbuging and security analysis / hardening.
  - Ticket 48351 - Fix buffer overflow error when reading url with len 0
  - Ticket 48363 - Support for rfc3673 '+' to return operational attributes
  - Ticket 48369 - [RFE] response control for password age should be sent by default by RHDS
  - Ticket 48384 - Server startup should warn about values consuming too much ram
  - Ticket 48387 - ASAN invalid read in cos_cache.c
  - Ticket 48394 - lower password history minimum to 1
  - Ticket 48395 - ASAN - Use after free in uiduniq 7bit.c
  - Ticket 48398 - Coverity defect 13352 - Resource leak in auditlog.c
  - Ticket 48400 - ldclt - segmentation fault error while binding
  - Ticket 48445 - keep alive entries can break replication
  - Ticket 48446 - logconv.pl displays negative operation speeds
  - Ticket 48566 - acl.c attrFilterArray maybe uninitialised.
  - Ticket 48662 - db2index with no attribute args fail.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.1-1
changelog:
  - Release 1.3.5.1-1
  - Ticket 47982 - improve timestamp resolution in logs
  - Ticket 48759 - no plugin calls in tombstone purging
  - Ticket 48665 - Prevent sefault in ldbm_instance_modify_config_entry
  - Ticket 48757 - License tag does not match actual license of code
  - Ticket 48746 - Crash when indexing an attribute with a matching rule
  - Ticket 48497 - extended search without MR indexed attribute prevents later indexing with that MR
  - Ticket 48368 - Resolve the py.test conflicts with the create_test.py issue
  - Ticket 48748 - Fix memory_leaks test suite teardown failure
  - Ticket 48383 - import tasks with dynamic buffer sizes
  - Ticket 48420 - change severity of some messages related to "keep alive" entries
  - Ticket 48386 - Clean up dsktune code
  - Ticket 48537 - undefined reference to `abstraction_increment'
  - Ticket 48747 - dirsrv service fails to start when nsslapd-listenhost is configured


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.1-3
changelog:
  - Release 1.3.5.1-3
  - Fixed the %if expression for use_nunc_stans.
  - Removed %if % {use_nunc_stans} from Source3 as well as from nunc_stans_ver.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.3-1
changelog:
  - Release 1.3.5.3-1
  - Ticket 47536 - Allow usage of OpenLDAP libraries that don't use NSS for crypto
  - Ticket 47536 - CI test: added test cases for ticket 47536
  - Ticket 47840 - default instance scripts if undefined.
  - Ticket 47888 - Add CI test
  - Ticket 47888 - DES to AES password conversion fails if a backend is empty
  - Ticket 47951 - Fix startpid from altering dev/null
  - Ticket 47968 - Disable journald logs by default
  - Ticket 47982 - HR Log timers, regression fix for subsystem logging
  - Ticket 48078 - CI test - paged_results - TET part
  - Ticket 48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance.
  - Ticket 48269 - ns-accountstatus status message improvement
  - Ticket 48342 - DNA: deadlock during DNA_EXTEND_EXOP_REQUEST_OID
  - Ticket 48342 - DNA Deadlock test cases
  - Ticket 48342 - Prevent transaction abort if a transaction has not begun
  - Ticket 48350 - Integrate ASAN into our rpm build process
  - Ticket 48374 - entry cache locks not released in error conditions
  - Ticket 48410 - 389-ds-base - Unable to remove / unregister a DS instance from admin server
  - Ticket 48447 - with-initddir should accept no
  - Ticket 48450 - Systemd password agent support
  - Ticket 48492 - heap corruption at schema replication.
  - Ticket 48597 - Deadlock when rebuilding the group of authorized replication managers
  - Ticket 48662 - db2index with no attribute args fail.
  - Ticket 48710 - auto-dn-suffix unrecognized option
  - Ticket 48769 - Fix white space in extendedop.c
  - Ticket 48769 - RFE: Be_txn extended operation plugin type
  - Ticket 48770 - Improve extended op plugin handling
  - Ticket 48775 - If nsSSL3 is on, even if SSL v3 is not really enabled, a confusing message is logged.
  - Ticket 48779 - Remove startpidfile check in start-dirsrv
  - Ticket 48781 - Vague error message: setup_ol_tls_conn - failed: unable to create new TLS context
  - Ticket 48782 - Make sure that when LDAP_OPT_X_TLS_NEWCTX is set, the value is set to zero.
  - Ticket 48783 - Fix ns-accountstatus.pl syntax error
  - Ticket 48784 - CI test: added test cases for ticket 48784
  - Ticket 48784 - Make the SSL version set to the client library configurable.
  - Ticket 48798 - Enable DS to offer weaker DH params in NSS
  - Ticket 48799 - objectclass values could be dropped on the consumer
  - Ticket 48800 - Cleaning up error buffers
  - Ticket 48801 - ASAN errors during tests
  - Ticket 48802 - Compilation warnings from clang
  - Ticket 48808 - Add test case
  - Ticket 48808 - Paged results search returns the blank list of entries
  - Ticket 48813 - password history is not updated when an admin resets the password
  - Ticket 48815 - ns-accountstatus.sh does handle DN's with single quotes
  - Ticket 48818 - In docker, no one can hear your process hang.
  - Ticket 48822 - (389-ds-base-1.3.5) Fixing coverity issues.
  - Ticket 48824 - Cleanup rpm.mk and 389 specfile


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.4-1
changelog:
  - Release 1.3.5.4-1
  - Ticket 48836 - replication session fails because of permission denied
  - Ticket 47819 - RFE - improve tombstone purging performance
  - Ticket 48837 - Replication: total init aborted
  - Ticket 48617 - Server ram checks work in isolation
  - Ticket 48220 - The "repl-monitor" web page does not display "year" in date.
  - Ticket 48829 - Add gssapi sasl replication bind test
  - Ticket 48497 - uncomment pytest from CI test
  - Ticket 48828 - db2ldif is not taking into account multiple suffixes or backends
  - Ticket 48818 - Fix case where return code is always -1
  - Ticket 48826 - 52updateAESplugin.pl may fail on older versions of perl
  - Ticket 48825 - Configure make generate invalid makefile


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.5-1
changelog:
  - Release 1.3.5.5-1
  - Ticket 48848 - modrdn deleteoldrdn can fail to find old attribute value, perhaps due to case folding
  - Ticket 48832 - CI test - fix ticket failures
  - Ticket 48833 - 389 showing inconsistent values for shadowMax and shadowWarning in 1.3.5.1
  - Ticket 48873 - Backend should accept the reduced cache allocation when issane == 1
  - Ticket 48815 - ns-accountstatus.pl - fix DN normalization
  - Ticket 48880 - adding pre/post extop ability
  - Ticket 48449 - Import readNSState from richm's repo
  - Ticket 48877 - Fixes for RPM spec with spectool
  - Ticket 48404 - libslapd owned by libs and devel
  - Ticket 48326 - Move CI test to config test suite and refactor
  - Ticket 48755 - CI test: test case for ticket 48755
  - Ticket 48755 - moving an entry could make the online init fail
  - Ticket 48870 - Correct plugin execution order due to changes in exop
  - Ticket 48799 - Test cases for objectClass values being dropped.
  - Ticket 48863 - remove check for vmsize from util_info_sys_pages
  - Ticket 48872 - Fix segfault and use after free in plugin shutdown
  - Ticket 48862 - At startup DES to AES password conversion causes timeout in start script
  - Ticket 48275 - search returns no entry when OR filter component contains non readable attribute
  - Ticket 47911 - split out snmp agent into a subpackageTicket 47911
  - Ticket 48336 - setup-ds should detect if port is already defined
  - Ticket 48858 - Segfault changing nsslapd-rootpw
  - Ticket 48855 - Add basic pwdPolicy tests
  - Ticket 48747 - dirsrv service fails to start when nsslapd-listenhost is configured
  - Ticket 48752 - Page result search should return empty cookie if there is no returned entry
  - Ticket 48854 - Running db2index with no options breaks replication
  - Ticket 48850 - Correct memory leaks in pwdhash-bin and ns-slapd
  - Ticket 48849 - Systemd introduced incompatible changes that breaks ds build
  - Ticket 48846 - 32 bit systems set low vmsize
  - Ticket 48846 - Older kernels do not expose memavailable
  - Ticket 48846 - Rlimit checks should detect RLIM_INFINITY
  - Ticket 48617 - Coverity fixes
  - Ticket 48745 - Matching Rule caseExactIA5Match indexes incorrectly values with upper cases
  - Ticket 48844 - Regression introduced in matching rules by DS 48746
  - Ticket 48363 - CI test - add test suite
  - Ticket 48795 - Make various improvements to create_test.py
  - Ticket 48834 - Fix jenkins: discared qualifier on auditlog.c
  - Ticket 48834 - Modifier's name is not recorded in the audit log with modrdn and moddn operations
  - Ticket 48754 - ldclt should support -H


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.6-1
changelog:
  - Release 1.3.5.6-1
  - Ticket 48234 - CI test: test case for ticket 48234
  - Ticket 48234 - "matching rules" in ACI's "bind rules not fully evaluated
  - Ticket 48636 - Improve replication convergence
  - Revert "Ticket 48755 - moving an entry could make the online init fail"
  - Ticket 48766 - Replication changelog can incorrectly skip over updates
  - Ticket 47982 - Fix log hr timestamps when invalid value is set in cn=config


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-1
changelog:
  -Release 1.3.5.10-1
  - Ticket 47538 - Fix repl-monitor color and lag times
  - Ticket 47538 - repl-monitor.pl legend not properly sorted
  - Ticket 47538 - repl-monitor.pl not displaying correct color code for lag time
  - Ticket 48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
  - Ticket 48346 - ldaputil code cleanup
  - Ticket 48346 - log too verbose when re-acquiring expired  ticket
  - Ticket 48354 - Review of default ACI in the directory server
  - Ticket 48366 - proxyauth does not work bound as directory manager
  - Ticket 48449 - Import readNSState.py from RichM's repo
  - Ticket 48636 - Fix config validation check
  - Ticket 48637 - DN cache is not always updated when ADD  operation fails
  - Ticket 48745 - Matching Rule caseExactIA5Match indexes incorrectly values with upper cases
  - Ticket 48755 - CI test: test case for ticket 48755
  - Ticket 48755 - moving an entry could make the online init fail
  - Ticket 48889 - ldclt - fix man page and usage info
  - Ticket 48891 - ns-slapd crashes during the shutdown after adding attribute with a matching rule
  - Ticket 48892 - Wrong result code display in audit-failure log
  - Ticket 48893 - cn=config should not have readable components to anonymous
  - Ticket 48895 - tests package should be noarch
  - Ticket 48898 - Crash during shutdown if nunc-stans is enabled
  - Ticket 48899 - Values of dbcachetries/dbcachehits in cn=monitor could overflow.
  - Ticket 48900 - Add connection perf stats to logconv.pl
  - Ticket 48902 - Strdup pwdstoragescheme name to prevent misbehaving plugins
  - Ticket 48904 - syncrepl search returning error 329; plugin sending a bad error code
  - Ticket 48905 - coverity defects


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.11-1
changelog:
  - Release 1.3.5.11-1
  - Ticket 48144 - Add /usr/sbin/status-dirsrv script to get the status of the directory server instance.
  - Ticket 48743 - If a cipher is disabled do not attempt to look it up
  - Ticket 48755 - moving an entry could make the online init fail
  - Ticket 48767 - flow control in replication also blocks receiving results
  - Ticket 48912 - ntUserNtPassword schema
  - Ticket 48914 - db2bak.pl task enters infinitive loop when bak fs is almost full
  - Ticket 48916 - DNA Threshold set to 0 causes SIGFPE
  - Ticket 48918 - Upgrade to 389-ds-base >= 1.3.5.5 doesn't install 389-ds-base-snmp
  - Ticket 48919 - Compiler warnings while building 389-ds-base on RHEL7
  - Ticket 48920 - Memory leak in pwdhash-bin
  - Ticket 48922 - Fix crash when deleting backend while import is running
  - Ticket 48924 - Fixup tombstone task needs to set proper flag when updating tombstones
  - Ticket 48925 - slapd crash with SIGILL: Dsktune should detect lack of CMPXCHG16B
  - Bug 1347761  - CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation, etc.
  - Bug 1353956  - Upgrade from FreeIPA Fedora 23 container to Fedora 24 fails with syntax error at
                   /usr/share/dirsrv/updates/91reindex.pl line 17, near ")
                   Regression introduced by Ticket 48755 to 1.3.5.10-1.
  - Bug 1350393  - setup-ds.pl fails on F24 if perl-Errno is not updated (DS 48901)
  - Bug 1114928  - etup-ds.pl creates configuration files under /usr (DS 528, 47840)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.12-1
changelog:
  - Release 1.3.5.12-1
  - Ticket 48450 - Add prestart work around for systemd ask password
  - Ticket 48943 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password
  - Ticket 47976 - Add fixed CI test case
  - Ticket 48882 - server can hang in connection list processing
  - Ticket 48921 - Adding replication and reliability tests
  - Ticket 48936 - Duplicate collation entries
  - Ticket 48832 - Fix timing and localhost issues
  - Ticket 48832 - Fix pytest compatibility in CI tests
  - Ticket 48832 - CI Tests - make tests more portable
  - Ticket 48943 - Add CI Test for the password test suite
  - Ticket 48940 - DS logs have warning:ancestorid not indexed
  - Ticket 48934 - remove-ds.pl deletes an instance even if wrong prefix was specified
  - Ticket 48336 - Missing semanage dependency
  - Bug 1347760 - Additional CI test case
  - Resolves: Bug 1347760 - CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation, etc.
  - Ticket 48832 - CI tests - convert all the tests to use  py.test
  - Ticket 48939 - nsslapd-workingdir is empty when ns-slapd is started by systemd
  - Ticket 48935 - Update dirsrv.systemd file
  - Ticket 48832 - Fix lib389 CI ticket/suite test failures
  - Ticket 47824 - Remove CI test from tickets and add logging
  - Ticket 48930 - Paged result search can hang the server
  - Ticket 48191 - Move CI test to the pr suite and refactor
  - Ticket 48928 - log of page result cookie should log empty cookie with a different value than 0
  - Ticket 48752 - Add CI test
  - Ticket 47664 - Move CI test to the pr suite and refactor


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.5.14-1
changelog:
  - Bump version to 1.3.5.14-1
  - Ticket 48992 - Total init may fail if the pushed schema is rejected
  - Ticket 48832 - Fix CI test suite for password min age
  - Ticket 48983 - Configure and Makefile.in from new default paths work.
  - Ticket 48983 - Configure and Makefile.in from new default paths work.
  - Ticket 48983 - generate install path info from autotools scripts
  - Ticket 48944 - on a read only replica invalid state info can accumulate
  - Ticket 48766 - use a consumer maxcsn only as anchor if supplier is more advanced
  - Ticket 48921 - CI Replication stress tests have limits set too low
  - Ticket 48969 - nsslapd-auditfaillog always has an explicit path
  - Ticket 48957 - Update repl-monitor to handle new status messages
  - Ticket 48832 - Fix CI tests
  - Ticket 48975 - Disabling CLEAR password storage scheme will  crash server when setting a password
  - Ticket 48369 - Add CI test suite
  - Ticket 48970 - Serverside sorting crashes the server
  - Ticket 48972 - remove old pwp code that adds/removes ACIs
  - Ticket 48957 - set proper update status to replication  agreement in case of failure
  - Ticket 48950 - Add systemd warning to the LD_PRELOAD example in /etc/sysconfig/dirsrv
  - provide backend dir in suffix template
  - Ticket 48953 - Skip labelling and unlabelling ports during the test
  - Ticket 48967 - Add CI test and refactor test suite
  - Ticket 48967 - passwordMinAge attribute doesn't limit the minimum age of the password
  - Fix jenkins warnings about unused vars
  - Ticket 48402 - v3 allow plugins to detect a restore or import
  - Ticket #48969 - nsslapd-auditfaillog always has an explicit path
  - Ticket 48964 - cleanAllRUV changelog purging incorrectly  processes all backends
  - Ticket 48965 - Fix building rpms using rpm.mk
  - Ticket 48965 - Fix generation of the pre-release version
  - Bugzilla 1368956 - man page of ns-accountstatus.pl shows redundant entries for -p port option
  - Ticket 48960 - Crash in import_wait_for_space_in_fifo().
  - Ticket 48832 - Fix more CI test failures
  - Ticket 48958 - Audit fail log doesn't work if audit log disabled.
  - Ticket 48956 - ns-accountstatus.pl showing "activated" user even if it is inactivated
  - Ticket 48954 - replication fails because anchorcsn cannot be found
  - Ticket 48832 - Fix CI tests failures from jenkins server
  - Ticket 48950 - Change example in /etc/sysconfig/dirsrv to use tcmalloc


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.5.14-2
changelog:
  - Bump version to 1.3.5.14-2
  - Ticket 49011 - Remove configure artifacts
  - Ticket 49006 - Enable nunc-stans 0.2.0 by default


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.6.1-0
changelog:
  - Bump version to 1.3.6.1-1
  - Ticket 142   - Refactor and move CI test
  - Ticket 47703 - remove search limit for aci group evaluation
  - Ticket 47978 - Refactor slapi_log_error
  - Ticket 48272 - ADDN Sytle prebind plugin
  - Ticket 48272 - Fix compiler warnings for addn
  - Ticket 48278 - cleanAllRUV should remove keep-alive entry
  - Ticket 48328 - Add missing dependency
  - Ticket 48414 - cleanAllRUV should clean the agreement RUV
  - Ticket 48538 - Failed to delete old semaphore
  - Ticket 48805 - Misleading indent and Uninitialised struct member
  - Ticket 48805 - Sign comparison checks.
  - Ticket 48832 - Fix CI test suite for password min age
  - Ticket 48896 - CI test: test case for ticket 48896
  - Ticket 48896 - Default Setting for passwordMinTokenLength does not work
  - Ticket 48906 - Allow nsslapd-db-locks to be configurable online
  - Ticket 48909 - Replication stops working in FIPS mode
  - Ticket 48921 - CI Replication stress tests have limits set too low
  - Ticket 48944 - on a read only replica invalid state info can accumulate
  - Ticket 48947 - Update default password hash to SSHA512
  - Ticket 48957 - Update repl-monitor to handle new status messages
  - Ticket 48969 - nsslapd-auditfaillog always has an explicit path
  - Ticket 48978 - Build fails on i686
  - Ticket 48978 - Convert slapi_log_error() to a variadic macro
  - Ticket 48978 - Fine tune error logging
  - Ticket 48978 - Fix CI test to account for new logging format
  - Ticket 48978 - Fix logging format errors and replace LDAP_DEBUG
  - Ticket 48978 - refactor LDADebug() to slapi_log_err()
  - Ticket 48978 - refactor LDAPDebug()
  - Ticket 48978 - Update error logging with new codes
  - Ticket 48978 - Update the logging function to accept sev level
  - Ticket 48979 - Allow to compile 389ds with warning Wstrict-prototypes
  - Ticket 48979 - Strict Prototypes
  - Ticket 48982 - Comment about resolving failure to open plugin.
  - Ticket 48982 - Enabling a plugin that has a versioned so causes overflow
  - Ticket 48982 - One line fix, remove unused variable.
  - Ticket 48982 - When plugin doesn't enable, actually log the path it used
  - Ticket 48983 - Configure and Makefile.in from new default paths work.
  - Ticket 48983 -  generate install path info from autotools scripts
  - Ticket 48984 - Add lib389 paths module
  - Ticket 48986 - 47808 triggers overflow in uiduniq.c
  - Ticket 48992 - Total init may fail if the pushed schema is rejected
  - Ticket 48996 - Fix rpm to work with ns 0.2.0
  - Ticket 48996 - remove unused variable.
  - Ticket 48996 - update DS for ns 0.2.0
  - Ticket 49005 - Update lib389 to work in containers correctly.
  - Ticket 49006 - Enable nunc-stans by default.
  - Ticket 49006 - Nunc stans use DS stack size
  - Ticket 49007 - Update configure scripts
  - Ticket 49007 - Update DS basic test to better work with systemd.
  - Ticket 49009 - args debug logging must be more restrictive
  - Ticket 49011 - Remove configure artifacts
  - Ticket 49012 - Removed un-used counters
  - Ticket 49013 - Correct signal handling with NS in DS
  - Ticket 49014 - ns-accountstatus.pl shows wrong status for accounts inactivated by Account policy plugin
  - Ticket 49017 - Various minor test failures
  - use a consumer maxcsn only as anchor if supplier is more advanced


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-2
changelog:
  - Bump version to 1.3.6.1-2
  - Issue 49162 - Only check event.m4 if nunc-stans is enabled
  - Issue 49156 - Add more IDs and fix docstrings
  - Issue 49156 - Fix typo in the import
  - Ticket 49160 - Fix sds benchmark and copyright
  - Issue 47536 - Fix CI testcase
  - Issue 49159 - test_schema_comparewithfiles fails with python-ldap>=2.4.26
  - Issue 49156 - Clean up test suites dir structure and docstrings
  - Issue 49158 - fix latest coverity issues
  - Ticket 49155 - Fix db2ldif path in test
  - Issue 49122 - Fix rpm build
  - Issue 49044 - Fix script usage and man pages
  - Ticket 48707 - Update rfc to accomodate that authid is mandatory
  - Ticket 49141 - Enable tcmalloc
  - Ticket 49142 - bytes vs unicode in plugin tests
  - Ticket 49139 - Update makefile and rpm for import
  - Ticket 49139 - Import libsds and nunc-stans for bundling
  - Issue 49122 - Filtered nsrole that uses nsrole crashes the  server
  - Issue 49147 - Fix tests compatibility with older versions
  - Issue 49141 - Fix spec file for tcmalloc
  - Issue 49141 - Use tcmalloc by default
  - Ticket 49086 - SDN premangaling broken after SASL change
  - Ticket 49137 - Add sasl plain test - ds
  - Ticket 49138 - Increase systemd timout
  - Issue 48226 - Fix CI test
  - Ticket 49140 - Remove legacy inst reference in test
  - Ticket 49134  Remove hardcoded elements from db lock test
  - Fix compiler warning
  - Ticket 47925 - Move add and delete operation aci checks to be before plugins.
  - Ticket 49086 - public api compatability test for SDN changes.
  - Ticket 49116 - Pblock usage analytics
  - Ticket 49020 - Add CI test
  - Revise README for pagure
  - Ticket #49121 - ns-slapd crashes in ldif_sput due to the output buf size is less than the real size.
  - Ticket 48085 - Add replica acceptance test suite
  - Ticket 49008 - Fix regression in check if ruv element exists
  - Ticket 49108 - ds_selinux_port_query doesn't detect ports labeled with range
  - Ticket 49057 - Fix tests failures on older versions of DS
  - Ticket 49111 - Integrate cmocka skeleton to Directory Server
  - Ticket 49016 - (un)register/migration/remove may fail if there is no suffix on 'userRoot' backend
  - Ticket 48085 - Add single master replication test suite
  - Ticket #49104 - Add CI test
  - Ticket #49104 - dbscan-bin crashing due to a segmentation fault
  - Ticket 49105 - Sig FPE when ns-slapd has 0 backends.
  - Ticket 49075 - Adjust log severity levels
  - Ticket 49008 - Add CI test
  - Ticket 49008 v2: aborted operation can leave RUV in incorrect state
  - Ticket 47973 - CI Test case (test_ticket47973_case)
  - Ticket 47973 - CI Test case (test_ticket47973_case)
  - Ticket 47973 - custom schema is registered in small caps after schema reload
  - Ticket 49089 - List library build deps
  - Ticket 49085 - Make a short topology fixture alias
  - Ticket #49088 - 389-ds-base rpm postinstall script bugs
  - Ticket 49028 - Autosize database cache by default.
  - Ticket 49089 - Fix invalid cxxlink statement from hpux
  - Ticket 49087 - ds resolve jenkins issues.
  - Ticket #49082 - Adjusted the CI test case to the fix.
  - Ticket #49082 - Fix password expiration related shadow attributes
  - Ticket #49080 - shadowExpire should not be a calculated value
  - Ticket 49027 - on secfailure do not store cleartext password content
  - Ticket 49031 - Improve memberof with a cache of ancestors for groups
  - Ticket 49079: deadlock on cos cache rebuild
  - Ticket 48665 - Fix RHEL6 test compatibility issues
  - Ticket 49055 - Fix create_test.py issues
  - Ticket 48797 - Add freebsd support to ns-slapd: main
  - Ticket 49055 - Refactor create_test.py
  - Ticket 49060 - Increase number of masters, hubs and consumers in topology
  - Ticket 49055 - Clean up test tickets and suites
  - Ticket 48964 - should not free repl name after purging changelog
  - Ticket 48050 - Refactor acctpolicy_plugin suite
  - Ticket 48964 - cleanallruv changelog purging removes wrong  rid
  - Ticket 49073: nsDS5ReplicatedAttributeListTotal fails when excluding no attribute
  - Ticket 49074 - incompatible nsEncryptionConfig object definition prevents RHEL 7->6 schema replication
  - Ticket 48835 - package tests into python site packages - fix rpm
  - Ticket 49066 - Memory leaks in server - part 2
  - Ticket 49072 - validate memberof fixup task args
  - Ticket 49071 - Import with duplicate DNs throws unexpected errors
  - Ticket 47858 - Add test case for nsTombstone
  - Ticket 48835 - Tests with setup.py.in
  - Ticket 49066 - Memory leaks in server
  - Ticket 47982 - Add CI test suite ds_logs
  - Ticket 49052 - Environment quoting on fedora causes ds to fail to start.
  - Ticket 47662 - Better input argument validation and error messages for cli tools
  - Ticket 48681 - logconv.pl lists sasl binds with no dn as anonymous
  - Ticket 48861: memberof plugin tests suite
  - Ticket 48861: Memberof plugins can update several times the same entry to set the same values
  - Ticket 48163 - Re-space schema.c
  - Ticket 48163 - Read schema from multiple locations
  - Ticket 48894 - improve entrywsi delete
  - Ticket 49051 - Enable SASL LOGIN/PLAIN support as a precursor to LDAPSSOTOKEN
  - Ticket 49020 - do not treat missing csn as fatal
  - Ticket 48133 v2 Non tombstone entry which dn starting with "nsuniqueid=...," cannot be delete
  - Ticket 49055 - Clean up test suites
  - Ticket 48797 - Add freebsd support to ns-slapd: Configure and makefile.
  - Ticket 48797 - Add freebsd support to ns-slapd: Add freebsd support for ldaputil
  - Ticket 48797 - Add freebsd support to ns-slapd: Add support for dsktune
  - Ticket 48797 - Add freebsd support to ns-slapd: Add support for cpp in Fbsd
  - Ticket 48797 - Add freebsd support to ns-slapd: Header files
  - Ticket 48978 - Fix implicit function declaration
  - Ticket 49002 - Remove memset on allocation
  - Ticket 49021 - Automatic thread tuning
  - Ticket 48894 - Issues with delete of entrywsi with large entries.
  - Ticket 49054 - Fix sasl_map unused paramater compiler warnings.
  - Ticket 48050 - Add test suite to acctpolicy_plugin
  - Ticket 49048 - Fix rpm build failure
  - Ticket 49042 - Test failure that expects old default
  - Ticket 49042 - Increase cache defaults slightly
  - Ticket 48894 - Issue with high number of entry state objects.
  - Ticket 48978 - Fix more log refactoring issues
  - Ticket 48707 - Draft Ldap SSO Token proposal
  - Ticket 49024 - Fix the rest of the CI failures
  - Ticket #48987 - Heap use after free in dblayer_close_indexes
  - Ticket 48945 - Improve db2ldif error message.
  - Ticket 49024 - Fix inst_dir parameter in defaults.inf
  - Ticket 49024 - Fix dbdir paths and adjust test cases
  - Ticket 48961 - Allow reset of configuration values to defaults.
  - Ticket #47911 - Move dirsrv-snmp.service to 389-ds-base-snmp package
  - Ticket bz1358565 - Fix compiler warning about unused variable
  - Ticket bz1358565 -  clear and unsalted password types are vulnerable to timing attack
  - Ticket 49016 - (un)register/migration/remove may fail if there is no suffix on 'userRoot' backend
  - Ticket 397 - Add PBKDF2 to Directory Server password storage.
  - Ticket 49024 - Fix CI test failures and defaults.inf
  - Ticket 49026 - Support nunc-stans pkgconfig
  - Ticket 49025 - Upgrade nunc-stans to 0.2.1
  - Ticket 48978 - error log refactoring error


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.2-1
changelog:
  - Bump version to 1.3.6.2-1
  - Ticket 49164 - Change NS to acq-rel semantics for atomics
  - Ticket 49154 - Nunc Stans stress should assert it has 95% success rate
  - Ticket 49165 - pw_verify did not handle external auth
  - Issue 49062 - Reset agmt update staus and total init
  - Ticket 49151 - Remove defunct selinux policy


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.2-2
changelog:
  - Bump verson to 1.3.6.2-2
  - Issue 49169 - Fix covscan errors(regression)
  - Ticket 49172 - Fix test schema files
  - Ticket 49171 - Nunc Stans incorrectly reports a timeout
  - Ticket 49171 - Nunc Stans incorrectly reports a timeout
  - Issue 49169 - Fix covscan errors


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.3-1
changelog:
  - Bump verson to 1.3.6.3
  - Issue 48989 - Overflow in counters and monitor
  - Issue 49095 - targetattr wildcard evaluation is incorrectly case sensitive
  - Ticket 49177 - rpm would not create valid pkgconfig files
  - Issue 49176 - Remove tcmalloc restriction from s390x
  - Issue 49157 - ds-logpipe.py crashes for non-existing users
  - Issue 49065 - dbmon.sh fails if you have nsslapd-require-secure-binds enabled
  - Issue 49095 - Fix double-free in _cl5NewDBFile() error path


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.3-3
changelog:
  - Bump version to 1.3.6.3-3
  - Ticket 49186 - Fix NS to improve shutdown relability
  - Ticket 49174 - nunc-stans can not use negative timeout
  - Ticket 49076 - To debug DB_DEADLOCK condition, allow to reset DB_TXN_NOWAIT flag on txn_begin
  - Issue 49188 - retrocl can crash server at shutdown
  - Ticket 47840 - Add setup_ds test suite


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.4-1
changelog:
  - Bump version to 1.3.6.4-1
  - Ticket 49228 - Fix SSE4.2 detection.
  - Ticket 49229 - Correct issues in latest commits
  - Ticket 49226 - Memory leak in ldap-agent-bin
  - Ticket 49214 - Implement htree concept
  - Ticket 49119 - Cleanup configure.ac options and defines
  - Ticket 49097 - whitespace fixes for pblock change
  - Ticket 49097 - Pblock get/set cleanup
  - Ticket 49222 - Resolve various test issues on rawhide
  - Issue 48978 - Fix the emergency logging functions severity levels
  - Issue 49227 - ldapsearch for nsslapd-errorlog-level returns  incorrect values
  - Ticket 49041 - nss won't start if sql db type set
  - Ticket 49223 - Fix sds queue locking
  - Issue 49204 - Fix 32bit arch build failures
  - Issue 49204 - Need to update function declaration
  - Ticket 49204 - Fix lower bounds on import autosize + On small VM, autotune breaks the access of the suffixes
  - Issue 49221 - During an upgrade the provided localhost name is ignored
  - Issue 49220 - Remote crash via crafted LDAP messages (SECURITY FIX)
  - Ticket 49184 - Overflow in memberof
  - Ticket 48050 - Add account policy tests to plugins test suite
  - Ticket 49207 - Supply docker POC build for DS.
  - Issue 47662 - CLI args get removed
  - Issue 49210 - Fix regression when checking is password min  age should be checked
  - Ticket 48864 - Add cgroup memory limit detection to 389-ds
  - Issue 48085 - Expand the repl acceptance test suite
  - Ticket 49209 - Hang due to omitted replica lock release
  - Ticket 48864 - Cleanup memory detection before we add cgroup support
  - Ticket 48864 - Cleanup up broken format macros and imports
  - Ticket 49153 - Remove vacuum lock on transaction cleanup
  - Ticket 49200 - provide minimal dse.ldif for python installer
  - Issue 49205 - Fix logconv.pl man page
  - Issue 49177 - Fix pkg-config file
  - Issue 49035 - dbmon.sh shows pages-in-use that exceeds the cache size
  - Ticket 48432 - Linux capabilities on ns-slapd
  - Ticket 49196 - Autotune generates crit messages
  - Ticket 49194 - Lower default ioblock timeout
  - Ticket 49193 - gcc7 warning fixes
  - Issue 49039 - password min age should be ignored if password needs to be reset
  - Ticket 48989 - Re-implement lock counter
  - Issue 49192 - Deleting suffix can hang server
  - Issue 49156 - Modify token :assert: to :expectedresults:
  - Ticket 48989 - missing return in counter
  - Ticket 48989 - Improve counter overflow fix
  - Ticket 49190 - Upgrade lfds to 7.1.1
  - Ticket 49187 - Fix attribute definition
  - Ticket 49185 - Fix memleak in compute init


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.5-1
changelog:
  - Bump version to 1.3.6.5-1
  - Ticket 49231 - fix sasl mech handling
  - Ticket 49233 - Fix crash in persistent search
  - Ticket 49230 - slapi_register_plugin creates config entry where it should not
  - Ticket 49135 - PBKDF2 should determine rounds at startup
  - Issue 49236 - Fix CI Tests
  - Ticket 48310 - entry distribution should be case insensitive
  - Ticket 49224 - without --prefix, $prefixdir would be NONE in defaults.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.6-1
changelog:
  - Bump version to 1.3.6.6-1
  - Ticket 49157 - fix error in ds-logpipe.py
  - Ticket 48864 - remove config.h from spal header.
  - Ticket 48681 - logconv.pl - Fix SASL Bind stats and rework report format
  - Ticket 49261 - Fix script usage and man pages
  - Ticket 49238 - AddressSanitizer: heap-use-after-free in libreplication
  - Ticket 48864 - Fix FreeIPA build
  - Ticket 49257 - Reject dbcachesize updates while auto cache sizing is enabled
  - Ticket 49249 - cos_cache is erroneously logging schema checking failure
  - Ticket 49258 - Allow nsslapd-cache-autosize to be modified while the server is running
  - Ticket 49247 - resolve build issues on debian
  - Ticket 49246 - ns-slapd crashes in role cache creation
  - Ticket 49157 - ds-logpipe.py crashes for non-existing users
  - Ticket 49241 - Update man page and usage for db2bak.pl
  - Ticket 49075 - Adjust logging severity levels
  - Ticket 47662 - db2index not properly evaluating arguments
  - Ticket 48989 - fix perf counters


author: Charalampos Stratakis <cstratak@redhat.com> - 1.3.6.6-3
changelog:
  - Bump verstion to 1.3.6.6-3
  - Ensure the binaries are pointing to the Python 3 interpreter (rhbz#1244234)


author: Mark Reynolds <mreynoilds@redhat.com> - 1.3.7.1-1
changelog:
  - Bump verson to 1.3.7.1
  - Ticket 49288 - RootDN Access wrong plugin path in template-dse.ldif.in
  - Ticket 49289 - Improve result handling from connections with NS
  - Ticket 49294 - radiusd before in unit file
  - Ticket 49293 - inttypes in nunc-stans
  - Ticket 49295 - Fix latest CI test failures
  - Ticket 623 - Add test case and refactor the cleanallruv suite
  - Ticket 49291 - slapi_search_internal_callback_pb may SIGSEV if related pblock has not operation set
  - Ticket 49008 - Fix MO plugin betxn test
  - Ticket 48944 - Add CI test case
  - Ticket 49227 - ldapsearch does not return the expected Error log level
  - Ticket 49028 - Add autotuning test suite
  - Ticket 49281 - improve db2* tests
  - Ticket 49273 - bak2db doesn't operate with dbversion
  - Ticket 49184 - adjust logging level in MO plugin
  - Ticket 49257 - Update CI script
  - Ticket 49257 - only register modify callbacks
  - Ticket 49008 - Adjust CI test for new memberOf behavior
  - Ticket 49273 - Fix compiler warning in dbversion_write, missing newline
  - Ticket 49277 - improve out of box system tuning for EL7
  - Ticket 49273 - crash when DBVERSION is corrupt.
  - Ticket 49273 - crash when DBVERSIOn is corrupt.
  - Ticket 49268 - master branch fails on big endian systems
  - Ticket 49271 - Fix pbkdf2 and openssl missing issue
  - Ticket 49242 - add gdb script to rpm
  - Ticket 49269 - Fix coverity errors
  - Ticket 49241 - add symblic link location to db2bak.pl output
  - Ticket #49072: memberOf fixup task does not validate args
  - Ticket 49257 - Reject nsslapd-cachememsize & nsslapd-cachesize when nsslapd-cache-autosize is set
  - Ticket 48538 - Failed to delete old semaphore
  - Ticket 49231 - force EXTERNAL always
  - Ticket 49267 - autosize split of 0 results in dbcache of 0
  - Ticket 49099 - resolve systemd startup interaction with ns
  - Ticket 49157 - fix error in ds-logpipe.py
  - Ticket 48864 - remove config.h from spal header.
  - Ticket 48681 - logconv.pl - Fix SASL Bind stats and rework report format
  - Ticket 49261 - Fix script usage and man pages
  - Ticket 49238 - AddressSanitizer: heap-use-after-free in libreplication
  - Ticket 48864 - Fix FreeIPA build
  - Ticket 49257 - Reject dbcachesize updates while auto cache sizing is enabled
  - Ticket 49249 - cos_cache is erroneously logging schema checking failure
  - Ticket 49248 - update eduPerson to 201602
  - Ticket 48050 - Add a test case for an issue 49014
  - Ticket 49258 - Allow nsslapd-cache-autosize to be modified while the server is running
  - Ticket 49165 - Fix compiler warnings
  - Ticket 49247 - resolve build issues on debian
  - Ticket 48123 - create contrib section
  - Ticket 49099 - fix configure.ac due to NS change
  - Ticket 49250 - remove mempool experimental!
  - Ticket 49099 - ns workers prep
  - Ticket 49185 - Fix leaks in compute init and dblayer
  - Ticket 49246 - ns-slapd crashes in role cache creation
  - Ticket 49244 - resolve various test case issues
  - Ticket 49157 - ds-logpipe.py crashes for non-existing users
  - Ticket 49053 - Fix rpm build
  - Ticket 49237 - Drop support for libdb older than 4.7
  - Ticket 49053 - Enable flto for DS
  - Ticket 49243 - segv in memberof fixup
  - Ticket 48985 - Add schema for nested groups to work out of box.
  - Ticket 49241 - Update man page and usage for db2bak.pl
  - Ticket 49071 - Add test case to tickets
  - Ticket 49075 - Adjust logging severity levels
  - Ticket 47662 - db2index not properly evalauating arguments
  - Ticket 49240 - ci compiler warns
  - Ticket 48989 - fix perf counters
  - Ticket 48681 - logconv.pl - fix sasl/bind stats
  - Ticket 49097 - fix pblock whitespace
  - Ticket 49097 - fix the pblock to be a hierachial structure
  - Ticket 49239 - move ds-replcheck man page and add script
  - Ticket 49239 - Add a tool to compare entries on LDAP servers.
  - Ticket 49231 - fix sasl mech handling
  - Ticket 49233 - Fix crash in persistent search
  - Ticket 49225 - Fix CI Test
  - Ticket 49230 - slapi_register_plugin creates config entry where it should not
  - Ticket 49225 - Add additional CRYPT password storage schemes


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.2-1
changelog:
  - Bump verison to 1.3.7.2
  - Ticket 49038 - Fix regression from legacy code cleanup
  - Ticket 49295 - Fix CI tests
  - Ticket 48067 - Add bugzilla tests for ds_logs
  - Ticket 49356 - mapping tree crash can occur during tot init
  - Ticket 49275 - fix compiler warns for gcc 7
  - Ticket 49248 - Add a docstring to account locking test case
  - Ticket 49445 - remove dead code
  - Ticket 48081 - Add regression tests for pwpolicy
  - Ticket 48056 - Add docstrings to basic test suite
  - Ticket 49349 - global name 'imap' is not defined
  - Ticket 83 - lib389 - Fix tests and create_test.py
  - Ticket 48185 - Remove referint-logchanges attr from referint's config
  - Ticket 48081 - Add regression tests for pwpolicy
  - Ticket 83 - lib389 - Replace topology agmt objects
  - Ticket 49331 - change autoscaling defaults
  - Ticket 49330 - Improve ndn cache performance.
  - Ticket 49347 - reproducable build numbers
  - Ticket 39344 - changelog ldif import fails
  - Ticket 49337 - Add regression tests for import tests
  - Ticket 49309 - syntax checking on referint's delay attr
  - Ticket 49336 - SECURITY: Locked account provides different return code
  - Ticket 49332 - Event queue is not working
  - Ticket 49313 - Change the retrochangelog default cache size
  - Ticket 49329 - Descriptive error msg for USN cleanup task
  - Ticket 49328 - Cleanup source code
  - Ticket 49299 - Add normalized dn cache stats to dbmon.sh
  - Ticket 49290 - improve idl handling in complex searches
  - Ticket 49328 - Update clang-format config file
  - Ticket 49091 - remove usage of changelog semaphore
  - Ticket 49275 - shadow warnings for gcc7 - pass 1
  - Ticket 49316 - fix missing not condition in clock cleanu
  - Ticket 49038 - Remove legacy replication
  - Ticket 49287 - v3 extend csnpl handling to multiple backends
  - Ticket 49310 - remove sds logging in debug builds
  - Ticket 49031 - Improve memberof with a cache of group parents
  - Ticket 49316 - Fix clock unsafety in DS
  - Ticket 48210 - Add IP addr and connid to monitor output
  - Ticket 49295 - Fix CI tests and compiler warnings
  - Ticket 49295 - Fix CI tests
  - Ticket 49305 - Improve atomic behaviours in 389-ds
  - Ticket 49298 - fix missing header
  - Ticket 49314 - Add untracked files to the .gitignore
  - Ticket 49303 - Fix error in CI test
  - Ticket 49302 - fix dirsrv importst due to lib389 change
  - Ticket 49303 - Add option to disable TLS client-initiated renegotiation
  - Ticket 49298 - force sync() on shutdown
  - Ticket 49306 - make -f rpm.mk rpms produces build without tcmalloc enabled
  - Ticket 49297 - improve search perf in bpt by removing a deref
  - Ticket 49284 - resolve crash in memberof when deleting attrs
  - Ticket 49290 - unindexed range searches don't provide notes=U
  - Ticket 49301 - Add one logpipe test case


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.3-1
changelog:
  - Bump version to 1.3.7.3
  - Ticket 49354 - fix regression in total init due to mistake in range fetch
  - Ticket 49370 - local password policies should use the same defaults as the global policy
  - Ticket 48989 - Delete slow lib389 test
  - Ticket 49367 - missing braces in idsktune
  - Ticket 49364 - incorrect function declaration.
  - Ticket 49275 - fix tls auth regression
  - Ticket 49038 - Revise creation of cn=replication,cn=config
  - Ticket 49368 - Fix typo in log message
  - Ticket 48059 - Add docstrings to CLU tests
  - Ticket 47840 - Add docstrings to setup tests
  - Ticket 49348 - support perlless and wrapperless install


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.4-1
changelog:
  - Bump version to 1.3.7.4
  - Ticket 49371 - Cleanup update script
  - Ticket 48831 - Autotune dncache with entry cache.
  - Ticket 49312 - pwdhash -D used default hash algo
  - Ticket 49043 - make replication conflicts transparent to clients
  - Ticket 49371 - Fix rpm build
  - Ticket 49371 - Template dse.ldif did not contain all needed plugins
  - Ticket 49295 - Fix CI Tests
  - Ticket 49050 - make objectclass ldapsubentry effective immediately


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.1-1
changelog:
  - Bump version to 1.4.0.1-1
  - Ticket 49038 - remove legacy replication - change cleanup script precedence
  - Ticket 49392 - memavailable not available
  - Ticket 49235 - pbkdf2 by default
  - Ticket 49279 - remove dsktune
  - Ticket 49372 - filter optimisation improvements for common queries
  - Ticket 49320 - Activating already active role returns error 16
  - Ticket 49389 - unable to retrieve specific cosAttribute when subtree password policy is configured
  - Ticket 49092 - Add CI test for schema-reload
  - Ticket 49388 - repl-monitor - matches null string many times in regex
  - Ticket 49387 - pbkdf2 settings were too aggressive
  - Ticket 49385 - Fix coverity warnings
  - Ticket 49305 - Need to wrap atomic calls
  - Ticket 48973 - Indexing a ExactIA5Match attribute with a IgnoreIA5Match matching rule triggers a warning
  - Ticket 49378 - server init fails
  - Ticket 49305 - Need to wrap atomic calls
  - Ticket 49180 - add CI test
  - Ticket 49180 - errors log filled with attrlist_replace - attr_replace


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.2-1
changelog:
  - Bump version to 1.4.0.2-1
  - Ticket 48393 - fix copy and paste error
  - Ticket 49439 - cleanallruv is not logging information
  - Ticket 48393 - Improve replication config validation
  - Ticket lib389 3 - Python 3 support for ACL test suite
  - Ticket 103 - sysconfig not found
  - Ticket 49436 - double free in COS in some conditions
  - Ticket 48007 - CI test to test changelog trimming interval
  - Ticket 49424 - Resolve csiphash alignment issues
  - Ticket lib389 3 - Python 3 support for pwdPolicy_controls_test.py
  - Ticket 3 - python 3 support - filter test
  - Ticket 49434 - RPM build errors
  - Ticket 49432 - filter optimise crash
  - Ticket 49432 - Add complex fliter CI test
  - Ticket 48894 - harden valueset_array_to_sorted_quick valueset  access
  - Ticket 49401 - Fix compiler incompatible-pointer-types warnings
  - Ticket 48681 - Use of uninitialized value in string ne at /usr/bin/logconv.pl
  - Ticket 49409 - Update lib389 requirements
  - Ticket 49401 - improve valueset sorted performance on delete
  - Ticket 49374 -  server fails to start because maxdisksize is recognized incorrectly
  - Ticket 49408 - Server allows to set any nsds5replicaid in the existing replica entry
  - Ticket 49407 - status-dirsrv shows ellipsed lines
  - Ticket 48681 - Use of uninitialized value in string ne at /usr/bin/logconv.pl
  - Ticket 49386 - Memberof should be ignore MODRDN when the pre/post entry are identical
  - Ticket 48006 - Missing warning for invalid replica backoff  configuration
  - Ticket 49064 - testcase hardening
  - Ticket 49064 - RFE allow to enable MemberOf plugin in dedicated consumer
  - Ticket lib389 3 - python 3 support
  - Ticket 49402 - Adding a database entry with the same database name that was deleted hangs server at shutdown
  - Ticket 48235 - remove memberof lock (cherry-pick error)
  - Ticket 49394 - build warning
  - Ticket 49381 - Refactor numerous suite docstrings - Part 2
  - Ticket 49394 - slapi_pblock_get may leave unchanged the provided variable
  - Ticket 49403 - tidy ns logging
  - Ticket 49381 - Refactor filter test suite docstrings
  - Ticket 48235 - Remove memberOf global lock
  - Ticket 103 - Make sysconfig where it is expected to exist
  - Ticket 49400 - Add clang support to rpm builds
  - Ticket 49381 - Refactor ACL test suite docstrings
  - Ticket 49363 - Merge lib389
  - Ticket 101 - BaseException.message has been deprecated in Python3
  - Ticket 102 - referral support
  - Ticket 99 - Fix typo in create_topology
  - Ticket #98 - Fix dbscan output
  - Ticket #77 - Fix changelogdb param issue
  - Ticket #77 - Refactor docstrings in rST format - part 1
  - Ticket 96 - Change binaries' names
  - Ticket 77 - Add sphinx documentation
  - Ticket 43 - Add support for Referential Integrity plugin
  - Ticket 45 - Add support for Rootdn Access Control plugin
  - Ticket 46 - dsconf support for dynamic schema reload
  - Ticket 74 - Advice users to set referint-update-delay to 0
  - Ticket 92 - display_attr() should return str not bytes in py3
  - Ticket 93 - Fix test cases in ctl_dbtasks_test.py
  - Ticket 88 - python install and remove for tests
  - Ticket 85 - Remove legacy replication attribute
  - Ticket 91 - Fix replication topology
  - Ticket 89 - Fix inconsistency with serverid
  - Ticket 79 - Fix replica.py and add tests
  - Ticket 86 - add build dir to gitignore
  - Ticket 83 - Add an util for generating instance parameters
  - Ticket 87 - Update accesslog regec for HR etimes
  - Ticket 49 - Add support for whoami plugin
  - Ticket 48 - Add support for USN plugin
  - Ticket 78 - Add exists() method to DSLdapObject
  - Ticket 31 - Allow complete removal of some memberOf attrs
  - Ticket31 - Add memberOf fix-up task
  - Ticket 67 - Add ensure_int function
  - Ticket 59 - lib389 support for index management.
  - Ticket 67 - get attr by type
  - Ticket 70 - Improve repl tools
  - Ticket 50 - typo in db2* in dsctl
  - Ticket 31 - Add status command and SkipNested support for MemberOf
  - Ticket 31 - Add functional tests for MemberOf plugin
  - Ticket 66 - expand healthcheck for Directory Server
  - Ticket 69 - add specfile requires
  - Ticket 31 - Initial MemberOf plugin support
  - Ticket 50 - Add db2* tasks to dsctl
  - Ticket 65 - Add m2c2 topology
  - Ticket 63 - part 2, agreement test
  - Ticket 63 - lib389 python 3 fix
  - Ticket 62 - dirsrv offline log
  - Ticket 60 - add dsrc to dsconf and dsidm
  - Ticket 32 - Add TLS external bind support for testing
  - Ticket 27 - Fix get function in tests
  - Ticket 28 - userAccount for older versions without nsmemberof
  - Ticket 27 - Improve dseldif API
  - Ticket 30 - Add initial support for account lock and unlock.
  - Ticket 29 - fix incorrect format in tools
  - Ticket 28 - Change default objectClasses for users and groups
  - Ticket 1 - Fix missing dn / rdn on config.
  - Ticket 27 - Add a module for working with dse.ldif file
  - Ticket 1 - cn=config comparison
  - Ticket 21 - Missing serverid in dirsrv_test due to incorrect allocation
  - Ticket 26 - improve lib389 sasl support
  - Ticket 24 - Join paths using os.path.join instead of string concatenation
  - Ticket 25 - Fix RUV __repr__ function
  - Ticket 23 - Use DirSrv.exists() instead of manually checking for instance's existence
  - Ticket 1 - cn=config comparison
  - Ticket 22 - Specify a basedn parameter for IDM modules
  - Ticket 19 - missing readme.md in python3
  - Ticket 20 - Use the DN_DM constant instead of hard coding its value
  - Ticket 19 - Missing file and improve make
  - Ticket 14 - Remane dsadm to dsctl
  - Ticket 16 - Reset InstScriptsEnabled argument during the init
  - Ticket 14 - Remane dsadm to dsctl
  - Ticket 13 - Add init function to create new domain entries
  - Ticket 15 - Improve instance configuration ability
  - Ticket 10 - Improve command line tool arguments
  - Ticket 9 - Convert readme to MD
  - Ticket 7 - Add pause and resume methods to topology fixtures
  - Ticket 49172 - Allow lib389 to read system schema and instance
  - Ticket 49172 - Allow lib389 to read system schema and instance
  - Ticket 6 - Bump lib389 version 1.0.4
  - Ticket 5 - Fix container build on fedora
  - Ticket 4 - Cert detection breaks some tests
  - Ticket 49137 - Add sasl plain tests, lib389 support
  - Ticket 2 - pytest mark with version relies on root
  - Ticket 49126 - DIT management tool
  - Ticket 49101 - Python 2 generate example entries
  - Ticket 49103 - python 2 support for installer
  - Ticket 47747 - Add topology_i2 and topology_i3
  - Ticket 49087 - lib389 resolve jenkins issues
  - Ticket 48413 - Improvements to lib389 for rest
  - Ticket 49083 - Support prefix for discovery of the defaults.inf file.
  - Ticket 49055 - Fix debugging mode issue
  - Ticket 49060 - Increase number of masters, hubs and consumers in topology
  - Ticket 47747 - Add more topology fixtures
  - Ticket 47840 - Add InstScriptsEnabled argument
  - Ticket 47747 - Add topology fixtures module
  - Ticket 48707 - Implement draft-wibrown-ldapssotoken-01
  - Ticket 49022 - Lib389, py3 installer cannot create entries in backend
  - Ticket 49024 - Fix paths to the dbdir parent
  - Ticket 49024 - Fix db_dir paths
  - Ticket 49024 - Fix paths in tools module
  - Ticket 48961 - Fix lib389 minor issues shown by 48961 test
  - Ticket 49010 - Lib389 fails to start with systemctl changes
  - Ticket 49007 - lib389 fixes for paths to use online values
  - Ticket 49005 - Update lib389 to work in containers correctly.
  - Ticket 48991 - Fix lib389 spec for python2 and python3
  - Ticket 48984 - Add lib389 paths module
  - Ticket 48951 - dsadm dsconfig status and plugin
  - Ticket 47957 - Update the replication "idle" status string
  - Ticket 48951 - dsadm and dsconf base files
  - Ticket 48952 - Restart command needs a sleep
  - Ticket 48949 - Fix ups for style and correctness
  - Ticket 48949 - added copying slapd-collations.conf
  - Ticket 48949 - change default file path generation - use os.path.join
  - Ticket 48949 - os.makedirs() exist_ok not python2 compatible, added try/except
  - Ticket 48949 - configparser fallback not python2 compatible
  - Ticket 48946 - openConnection should not fully popluate DirSrv object
  - Ticket 48832 - Add DirSrvTools.getLocalhost() function
  - Ticket 48382 - Fix serverCmd to get sbin dir properly
  - Bug 1347760 - Information disclosure via repeated use of LDAP ADD operation, etc.
  - Ticket 48937 - Cleanup valgrind wrapper script
  - Ticket 48923 - Fix additional issue with serverCmd
  - Ticket 48923 - serverCmd timeout not working as expected
  - Ticket 48917 - Attribute presence
  - Ticket 48911 - Plugin improvements for lib389
  - Ticket 48911 - Improve plugin support based on new mapped objects
  - Ticket 48910 - Fixes for backend tests and lib389 reliability.
  - Ticket 48860 - Add replication tools
  - Ticket 48888 - Correction to create of dsldapobject
  - Ticket 48886 - Fix NSS SSL library in lib389
  - Ticket 48885 - Fix spec file requires
  - Ticket 48884 - Bugfixes for mapped object and new connections
  - Ticket 48878 - better style for backend in backend_test.py
  - Ticket 48878 - pep8 fixes part 2
  - Ticket 48878 - pep8 fixes and fix rpm to build
  - Ticket 48853 - Prerelease installer
  - Ticket 48820 - Begin to test compatability with py.test3, and the new orm
  - Ticket 48434 - Fix for negative tz offsets
  - Ticket 48857 - Remove python-krbV from lib389
  - Ticket 48820 - Fix tests to ensure they work with the new object types
  - Ticket 48820 - Move Encryption and RSA to the new object types
  - Ticket 48820 - Proof of concept of orm style mapping of configs and objects
  - Ticket 48820 - Clitool rename
  - Ticket 48431 - lib389 integrate ldclt
  - Ticket 48434 - lib389 logging tools
  - Ticket 48796 - add function to remove logs
  - Ticket 48771 - lib389 - get ns-slapd version
  - Ticket 48830 - Convert lib389 to ip route tools
  - Ticket 48763 - backup should run regardless of existing backups.
  - Ticket 48434 - lib389 logging tools
  - Ticket 48798 - EL6 compat for lib389 tests for DH params
  - Ticket 48798 - lib389 add ability to create nss ca and certificate
  - Ticket 48433 - Aci linting tools
  - Ticket 48791 - format args in server tools
  - Ticket 48399 - Helper makefile is missing mkdir dist
  - Ticket 48399 - Helper makefile is missing mkdir dist
  - Ticket 48794 - lib389 build requires are on a single line
  - Ticket 48660 - Add function to convert binary values in an entry to base64
  - Ticket 48764 - Fix mit krb password to be random.
  - Ticket 48765 - Change default ports for standalone topology
  - Ticket 48750 - Clean up logging to improve command experience
  - Ticket 48751 - Improve lib389 ldapi support
  - Ticket 48399 - Add helper makefile to lib389 to build and install
  - Ticket 48661 - Agreement test suite fails at the test_changes case
  - Ticket 48407 - Add test coverage module for lib389 repo
  - Ticket 48357 - clitools should standarise their args
  - Ticket 48560 - Make verbose handling consistent
  - Ticket 48419 - getadminport() should not a be a static method
  - Ticket 48408 - RFE escaped default suffix for tests
  - Ticket 48401 - Revert typecheck
  - Ticket 48401 - lib389 Entry hasAttr returs dict instead of false
  - Ticket 48390 - RFE Improvements to lib389 monitor features for rest389
  - Ticket 48358 - Add new spec file
  - Ticket 48371 - weaker host check on localhost.localdomain
  - Ticket 58358 - Update spec file with pre-release versioning
  - Ticket 48358 - Make Fedora packaging changes to the spec file
  - Ticket 48358 - Prepare lib389 for Fedora Packaging
  - Ticket 48364 - Fix test failures
  - Ticket 48360 - Refactor the delete agreement function
  - Ticket 48361 - Expand 389ds monitoring capabilities
  - Ticket 48246 - Adding license/copyright to lib389 files
  - Ticket 48340 - Add basic monitor support to lib389 https://fedorahosted.org/389/ticket/48340
  - Ticket 48353 - Add Replication REST support to lib389
  - Ticket 47840 - Fix regression
  - Ticket 48343 - lib389 krb5 realm management https://fedorahosted.org/389/ticket/48343
  - Ticket 47840 - fix lib389 to use sbin scripts  https://fedorahosted.org/389/ticket/47840
  - Ticket 48335 - Add SASL support to lib389
  - Ticket 48329 - Fix case-senstive scyheam comparisions
  - Ticket 48303 - Fix lib389 broken tests
  - Ticket 48329 - add matching rule functions to schema module
  - Ticket 48324 - fix boolean capitalisation (one line) https://fedorahosted.org/389/ticket/48324
  - Ticket 48321 - Improve is_a_dn check to prevent mistakes with lib389 auth https://fedorahosted.org/389/ticket/48321
  - Ticket 48322 - Allow reindex function to reindex all attributes
  - Ticket 48319 - Fix ldap.LDAPError exception processing
  - Ticket 48318 - Do not delete a changelog while disabling a replication by suffix
  - Ticket 48308 - Add __eq__ and __ne__ to Entry to allow fast comparison https://fedorahosted.org/389/ticket/48308
  - Ticket 48303 - Fix lib389 broken tests - backend_test
  - Ticket 48309 - Fix lib389 lib imports
  - Ticket 48303 - Fix lib389 broken tests - agreement_test
  - Ticket 48303 - Fix lib389 broken tests - aci_parse_test
  - Ticket 48301 - add tox support
  - Ticket 48204 - update lib389 for python3
  - Ticket 48273 - Improve valgrind functions
  - Ticket 48271 - Fix for self.prefix being none when SER_DEPLOYED_DIR is none https://fedorahosted.org/389/ticket/48271
  - Ticket 48259 - Add aci parsing utilities to lib389
  - Ticket 48252 - (lib389) adding get_bin_dir and dbscan
  - Ticket 48247 - Change the default user to 'dirsrv'
  - Ticket 47848 - Add new function to create ldif files
  - Ticket 48239 - Fix for prefix allocation of un-initialised dirsrv objects
  - Ticket 48237 - Add lib389 helper to enable and disable logging services.
  - Ticket 48236 - Add get effective rights helper to lib389
  - Ticket 48238 - Add objectclass and attribute type query mechanisms
  - Ticket 48029 - Add missing replication related functions
  - Ticket 48028 - add valgrind wrapper for ns-slapd
  - Ticket 48028 - lib389 - add valgrind functions
  - Ticket 48022 - lib389 - Add all the server tasks
  - Ticket 48023 - create function to test replication between servers
  - Ticket 48020 - lib389 - need to reset args_instance with  every DirSrv init
  - Ticket 48000 - Repl agmts need more time to stop
  - Ticket 48004 - Fix various issues
  - Ticket 48000 - replica agreement pause/resume should have a short sleep
  - Ticket 47990 - Add check for ".removed" instances when doing an upgrade
  - Ticket 47990 - Add "upgrade" function to lib389
  - Ticket 47691 - using lib389 with RPMs
  - Ticket 47848 - Add support for setuptools.
  - Ticket 47855 - Add function to clear tmp directory
  - Ticket 47851 - Need to retrieve tmp directory path
  - Ticket 47845 - add stripcsn option to tombstone fixup task
  - Ticket 47851 - Add function to retrieve dirsrvtests data directory
  - Ticket 47845 - Add backup/restore/fixup tombstone tasks to lib389
  - Ticket 47819 - Add the new precise tombstone purging config attribute
  - Ticket 47695 - Add plugins/tasks/Index
  - Ticket 47648 - lib389 - add schema classes, methods
  - Ticket 47671 - CI lib389: allow to open a DirSrv without having to create the instance
  - Ticket 47600 - Replica/Agreement/Changelog not conform to the design
  - Ticket 47652 - replica add fails: MT.list return a list not an entry
  - Ticket 47635 - MT/Backend/Suffix to be conform with the design
  - Ticket 47625 - CI lib389: DirSrv not conform to the design
  - Ticket 47595 - fail to detect/reinit already existing instance/backup
  - Ticket 47590 - CI tests: add/split functions around replication
  - Ticket 47584 - CI tests: add backup/restore of an instance
  - Ticket 47578 - CI tests: removal of 'sudo' and absolute path in lib389
  - Ticket 47568 - Rename DSAdmin class
  - Ticket 47566 - Initial import of DSadmin into 389-test repos


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.3-1
changelog:
  - Bump version to 1.4.0.3
  - Ticket 49457 - Fix spal_meminfo_get function prototype
  - Ticket 49455 - Add tests to monitor test suit.
  - Ticket 49448 - dynamic default pw scheme based on environment.
  - Ticket 49298 - fix complier warn
  - Ticket 49298 - Correct error codes with config restore.
  - Ticket 49454 - SSL Client Authentication breaks in FIPS mode
  - Ticket 49453 - passwd.py to use pwdhash defaults.
  - Ticket 49427 - whitespace in fedse.c
  - Ticket 49410 - opened connection can remain no longer poll, like hanging
  - Ticket 48118 - fix compiler warning for incorrect return type
  - Ticket 49451 - Add environment markers to lib389 dependencies
  - Ticket 49325 - Proof of concept rust tqueue in sds
  - Ticket 49443 - scope one searches in 1.3.7 give incorrect results
  - Ticket 48118 - At startup, changelog can be erronously rebuilt after a normal shutdown
  - Ticket 49412 - SIGSEV when setting invalid changelog config value
  - Ticket 49441 - Import crashes - oneline fix
  - Ticket 49377 - Incoming BER too large with TLS on plain port
  - Ticket 49441 - Import crashes with large indexed binary  attributes
  - Ticket 49435 - Fix NS race condition on loaded test systems
  - Ticket 77 - lib389 - Refactor docstrings in rST format - part 2
  - Ticket 17 - lib389 - dsremove support
  - Ticket 3 - lib389 - python 3 compat for paged results test
  - Ticket 3 - lib389 - Python 3 support for memberof plugin test suit
  - Ticket 3 - lib389 - config test
  - Ticket 3 - lib389 - python 3 support ds_logs tests
  - Ticket 3 - lib389 - python 3 support for betxn test


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.4-1
changelog:
  - Bump version to 1.4.0.4
  - Ticket 49540 - Indexing task is reported finished too early regarding the backend status
  - Ticket 49534 - Fix coverity regression
  - Ticket 49544 - cli release preperation, group improvements
  - Ticket 49542 - Unpackaged files on el7 break rpm build
  - Ticket 49541 - repl config should not allow rid 65535 for masters
  - Ticket 49370 - Add all the password policy defaults to a new local policy
  - Ticket 49425 - improve demo objects for install
  - Ticket 49537 - allow asan to build with stable rustc
  - Ticket 49526 - Improve create_test.py script
  - Ticket 49516 - Add python 3 support for replication suite
  - Ticket 49534 - Fix coverity issues and regression
  - Ticket 49532 - coverity issues - fix compiler warnings & clang issues
  - Ticket 49531 - coverity issues - fix memory leaks
  - Ticket 49463 - After cleanALLruv, there is a flow of keep alive DEL
  - Ticket 49529 - Fix Coverity warnings: invalid deferences
  - Ticket 49509 - Indexing of internationalized matching rules is failing
  - Ticket 49527 - Improve ds* cli tool testing
  - Ticket 49474 - purge saslmaps before gssapi test
  - Ticket 49413 - Changelog trimming ignores disabled replica-agreement
  - Ticket 49446 - cleanallruv should ignore cleaned replica Id in processing changelog if in force mode
  - Ticket 49278 - GetEffectiveRights gives false-negative
  - Ticket 49508 - memory leak in cn=replica plugin setup
  - Ticket 48118 - Add CI test case
  - Ticket 49520 - Cockpit UI - Add database chaining HTML
  - Ticket 49512 - Add ds-cockpit-setup to rpm spec file
  - Ticket 49523 - Refactor CI test
  - Ticket 49524 - Password policy: minimum token length fails  when the token length is equal to attribute length
  - Ticket 49517 - Cockpit UI - Add correct png files
  - Ticket 49517 - Cockput UI - revise config layout
  - Ticket 49523 - memberof: schema violation error message is confusing as memberof will likely repair target entry
  - Ticket 49312 - Added a new test case for "-D configdir"
  - Ticket 49512 - remove backup directories from cockpit source
  - Ticket 49512 - Add initial Cockpit UI Plugin
  - Ticket 49515 - cannot link, missing -fPIC
  - Ticket 49474 - Improve GSSAPI testing capability
  - Ticket 49493 - heap use after free in csn_as_string
  - Ticket 49379 - Add Python 3 support to CI test
  - Ticket 49431 - Add CI test case
  - Ticket 49495 - cos stress test and improvements.
  - Ticket 49495 - Fix memory management is vattr.
  - Ticket 49494 - python 2 bytes mode.
  - Ticket 49471 - heap-buffer-overflow in ss_unescape
  - Ticket 48184 - close connections at shutdown cleanly.
  - Ticket 49218 - Certmap - support TLS tests
  - Ticket 49470 - overflow in pblock_get
  - Ticket 49443 - Add CI test case
  - Ticket 49484 - Minor cli tool fixes.
  - Ticket 49486 - change ns stress core to use absolute int width.
  - Ticket 49445 - Improve regression test to detect memory leak.
  - Ticket 49445 - Memory leak in ldif2db
  - Ticket 49485 - Typo in gccsec_defs
  - Ticket 49479 - Remove unused 'batch' argument from lib389
  - Ticket 49480 - Improvements to support IPA install.
  - Ticket 49474 - sasl allow mechs does not operate correctly
  - Ticket 49449 - Load sysctl values on rpm upgrade.
  - Ticket 49374 - Add CI test case
  - Ticket 49325 - fix rust linking.
  - Ticket 49475 - docker poc improvements.
  - Ticket 49461 - Improve db2index handling for test 49290
  - Ticket 47536 - Add Python 3 support and move test case to suites
  - Ticket 49444 - huaf in task.c during high load import
  - Ticket 49460 - replica_write_ruv log a failure even when it succeeds
  - Ticket 49298 - Ticket with test case and remove-ds.pl
  - Ticket 49408 - Add a test case for nsds5ReplicaId checks
  - Ticket 3 lib389 - python 3 support for subset of pwd cases
  - Ticket 35 lib389 - dsconf automember support


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.5-1
changelog:
  - Bump version to 1.4.0.5
  - CVE-2017-15134 389-ds-base: Remote DoS via search filters in slapi_filter_sprintf
  - Ticket 49546 - Fix broken snmp MIB file
  - Ticket 49554 - update readme
  - Ticket 49554 - Update Makefile for README.md
  - Ticket 49400 - Make CLANG configurable
  - Ticket 49530 - Add pseudolocalization option for dbgen
  - Ticket 49523 - Fixed skipif marker, topology fixture and log message
  - Ticket 49544 - Double check pw prompts
  - Ticket 49548 - Cockpit UI - installer should also setup Cockpit


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.6-1
changelog:
  - Bump version to 1.4.0.6
  - Ticket 49545 - final substring extended filter search returns invalid result
  - Ticket 49572 - ns_job_wait race on condvar
  - Ticket 49584 - Fix Tickets with paged_results test suite
  - Ticket 49161 - memberof fails if group is moved into scope
  - Ticket 49447 - PBKDF2 on upgrade
  - ticket 49551 - correctly handle subordinates and tombstone numsubordinates
  - Ticket 49043 - Add replica conflict test suite
  - Ticket 49296 - Fix race condition in connection code with  anonymous limits
  - Ticket 49568 - Fix integer overflow on 32bit platforms
  - Ticket 48085 - Add encryption cl5 test suite
  - Ticket 49566 - ds-replcheck needs to work with hidden conflict entries
  - Ticket 49519 - Add more Cockpit UI content
  - Ticket 49551 - fix memory leak found by coverity
  - Ticket 49551 - v3 - correct handling of numsubordinates for cenotaphs and tombstone delete
  - Ticket 49278 - Add a new CI test case
  - Ticket 49560 - nsslapd-extract-pemfiles should be enabled by default as openldap is moving to openssl
  - Ticket 49557 - Add config option for checking CRL on outbound SSL Connections
  - Ticket 49446 - Add CI test case
  - Ticket 35 -    Description: Add support for managing automember to dsconf
  - Ticket 49544 - cli release preperation
  - Ticket 48006 - Add a new CI test case


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.7-1
changelog:
  - Bump version to 1.4.0.7
  - Ticket 49477 - Missing pbkdf python
  - Ticket 49552 - Fix the last of the build issues on F28/29
  - Ticket 49522 - Fix build issues on F28
  - Ticket 49631 - same csn generated twice
  - Ticket 49585 - Add py3 support to password test suite : part-3
  - Ticket 49585 - Add py3 support to password test suite : part-2
  - Ticket 48184 - revert previous patch around unuc-stans shutdown crash
  - Ticket 49585 - Add py3 support to password test suite
  - Ticket 46918 - Fix compiler warnings on arm
  - Ticket 49601 - Replace HAVE_SYSTEMD define with WITH_SYSTEMD in svrcore
  - Ticket 49619 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
  - Ticket 49608 - Add support for gcc/clang sanitizers
  - Ticket 49606 - Improve lib389 documentation
  - Ticket 49552 - Fix build issues on F28
  - Ticket 49603 - 389-ds-base package rebuilt on EPEL can't be installed due to missing dependencies
  - Ticket 49593 - NDN cache stats should be under the global stats
  - Ticket 49599 - Revise replication total init status messages
  - Ticket 49596 - repl-monitor.pl fails to find db tombstone/RUV entry
  - Ticket 49589 - merge svrcore into 389-ds-base
  - Ticket 49560 - Add a test case for extract-pemfiles
  - Ticket 49239 - Add a test suite for ds-replcheck tool RFE
  - Ticket 49369 - merge svrcore into 389-ds-base


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.8-1
changelog:
  - Bump version to 1.4.0.8-1
  - Ticket 49639 - Crash when failing to read from SASL conn
  - Ticket 49109 - nsDS5ReplicaTransportInfo should accept StartTLS as an option
  - Ticket 49586 - Add py3 support to plugins test suite
  - Ticket 49511 - memory leak in pwdhash


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.9-1
changelog:
  - Bump version to 1.4.0.9
  - Ticket 49661 - CVE-2018-1089 - Crash from long search filter
  - Ticket 49652 - DENY aci's are not handled properly
  - Ticket 49650 - lib389 enable_tls doesn't work on F28
  - Ticket 49538 - replace cacertdir_rehash with openssl rehash
  - Ticket 49406 - Port backend_test.py test to DSLdapObject implementation
  - Ticket 49649 - Use reentrant crypt_r()
  - Ticket 49642 - lib389 should generate a more complex password
  - Ticket 49612 - lib389 remove_ds_instance() does not remove systemd units
  - Ticket 49644 - crash in debug build


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.10-1
changelog:
  - Bump verision to 1.4.0.10-1
  - Ticket 49640 - Errors about PBKDF2 password storage plugin at server startup
  - Ticket 49571 - perl subpackage and python installer by default
  - Ticket 49740 - UI - Replication monitor color coding is not colorblind friendly
  - Ticket 49741 - UI - View/Edit replication agreement hangs WebUI
  - Ticket 49703 - UI - Set default values in create instance form
  - Ticket 49742 - Fine grained password policy can impact search performance
  - Ticket 49768 - Under network intensive load persistent search can erronously decrease connection refcnt
  - Ticket 49765 - compiler warning
  - Ticket 49689 - Cockpit subpackage does not build in PREFIX installations
  - Ticket 49765 - Async operations can hang when the server is running nunc-stans
  - Ticket 49745 - UI add filter options for error log severity levels
  - Ticket 49761 - Fix test suite issues
  - Ticket 49754 - instances created with dscreate can not be upgraded with setup-ds.pl
  - Ticket 47902 - UI - add continuous refresh log feature
  - Ticket 49381 - Add docstrings to plugin test suites - Part 1
  - Ticket 49646 - Improve TLS cert processing in lib389 CLI
  - Ticket 49748 - Passthru plugin startTLS option not working
  - Ticket 49732 - Optimize resource limit checking for rootdn issued searches
  - Ticket 48377 - Bundle jemalloc
  - Ticket 49736 - Hardening of active connection list
  - Ticket 48184 - clean up and delete connections at shutdown (3rd)
  - Ticket 49675 - Revise coverity fix
  - Ticket 49333 - Do not remove versioned man pages
  - Ticket 49683 - Add support for JSON option in lib389 CLI tools
  - Ticket 49704 - Error log from the installer is concatenating all lines into one
  - Ticket 49726 - DS only accepts RSA and Fortezza cipher families
  - Ticket 49722 - Errors log full of " WARN - keys2idl - recieved NULL idl from index_read_ext_allids, treating as empty set" messages
  - Ticket 49582 - Add py3 support to memberof_plugin test suite
  - Ticket 49675 - Fix coverity issues
  - Ticket 49576 - Add support of ";deletedattribute" in ds-replcheck
  - Ticket 49706 - Finish UI patternfly convertions
  - Ticket 49684 - AC_PROG_CC clobbers CFLAGS set by --enable-debug
  - Ticket 49678 - organiSational vs organiZational spelling in lib389
  - Ticket 49689 - Fix local "make install" after adding cockpit subpackage
  - Ticket 49689 - Move Cockpit UI plugin to a subpackage
  - Ticket 49679 - Missing nunc-stans documentation and doxygen warnings
  - Ticket 49588 - Add py3 support for tickets : part-1
  - Ticket 49576 - Update ds-replcheck for new conflict entries
  - Ticket 48184 - clean up and delete connections at shutdown (2nd try)
  - Ticket 49698 - Remove unneeded patternfly files from Cockpit package
  - Ticket 49581 - Fix dynamic plugins test suite
  - Ticket 49665 - remove obsoleted upgrade scripts
  - Ticket 49693 - A DB_DEADLOCK while adding a tombstone (RUV) leads to access of an already freed entry
  - Ticket 49696 - replicated operations should be serialized
  - Ticket 49669 - Invalid cachemem size can crash the server during a restore
  - Ticket 49684 - AC_PROG_CC clobbers CFLAGS set by --enable-debug
  - Ticket 49685 - make clean fails if cargo is not installed
  - Ticket 49106 - Move ds_* scripts to libexec
  - Ticket 49657 - Fix cascading replication scenario in lib389 API
  - Ticket 49671 - Readonly replicas should not write internal ops to changelog
  - Ticket 49673 - nsslapd-cachememsize can't be set to a value bigger than MAX_INT
  - Ticket 49519 - Convert Cockpit UI to use strictly patternfly stylesheets
  - Ticket 49665 - Upgrade script doesn't enable CRYPT password storage plug-in
  - Ticket 49665 - Upgrade script doesn't enable PBKDF2 password storage plug-in


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.11-1
changelog:
  - Bump version to 1.4.0.11
  - Test for issue #49788
  - Fixing 4-byte UTF-8 character validation
  - Ticket 49777 - add config subcommand to dsconf
  - Ticket 49712 - lib389 CLI tools should return a result code on failures
  - Issue 49588 - Add py3 support for tickets : part-2
  - Remove old RHEL/fedora version checking from upstream specfile
  - Ticket 48204 - remove python2 from scripts
  - Ticket 49576 - ds-replcheck: fix certificate directory verification
  - Bug 1591761 - 389-ds-base: Remove jemalloc exports


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.12-1
changelog:
  - Bump version to 1.4.0.12-1
  - Ticket 48377 - Move jemalloc license to /usr/share/licences
  - Ticket 49813 - Revised interactive installer
  - Ticket 49789 - By default, do not manage unhashed password
  - Ticket 49844 - lib389: don't set up logging at module scope
  - Ticket 49546 - Fix issues with MIB file
  - Ticket 49840 - ds-replcheck command returns traceback errors against ldif files having garbage content when run in offline mode
  - Ticket 49640 - Cleanup plugin bootstrap logging
  - Ticket 49835 - lib389: fix logging
  - Ticket 48818 - For a replica bindDNGroup, should be fetched the first time it is used not when the replica is started
  - Ticket 49780 - acl_copyEval_context double free
  - Ticket 49830 - Import fails if backend name is "default"
  - Ticket 49832 - remove tcmalloc references
  - Ticket 49813 - dscreate - add interactive installer
  - Ticket 49808 - Add option to add backend to dscreate
  - Ticket 49811 - lib389 setup.py should install autogenerated man pages
  - Ticket 49795 - UI - add "action" backend funtionality
  - Ticket 49588 - Add py3 support for tickets : part-3
  - Ticket 49820 - lib389 requires wrong python ldap library
  - Ticket 49791 - Update docker file for new dscreate options
  - Ticket 49761 - Fix more CI test issues
  - Ticket 49811 - Update man pages
  - Ticket 49783 - UI - add server configuration backend
  - Ticket 49717 - Add conftest.py for tests
  - Ticket 49588 - Add py3 support for tickets
  - Ticket 49793 - Updated descriptions in dscreate example INF file
  - Ticket 49471 - Rename dscreate options
  - Ticket 49751 - passwordMustChange attribute is not honored by a RO consumer if using "Chain on Update"
  - Ticket 49734 - Fix various issues with Disk Monitoring
  - Update Source0 URL in rpm/389-ds-base.spec.in


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.13-1
changelog:
  - Bump version to 1.4.0.13
  - Ticket 49854 - ns-slapd should create run_dir and lock_dir directories at startup
  - Ticket 49806 - Add SASL functionality to CLI/UI
  - Ticket 49789 - backout original security fix as it caused a regression in FreeIPA
  - Ticket 49857 - RPM scriptlet for 389-ds-base-legacy-tools throws an error


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.14-1
changelog:
  - Bump version to 1.4.0.14
  - Resolves: Bug 1578773 - ipa-server-install fails on missing setup-ds.pl dependency
  - Ticket 49891 - Use "__python3" macro for python scripts
  - Ticket 49890 - ldapsearch with server side sort crashes the ldap server
  - Ticket 49029 - RFE -improve internal operations logging
  - Ticket 49893 - disable nunc-stans by default
  - Ticket 48377 - Update file name for LD_PRELOAD
  - Ticket 49884 - Improve nunc-stans test to detect socket errors sooner
  - Ticket 49888 - Use perl filter in rpm specfile
  - Ticket 49866 - Add password policy features to CLI/UI
  - Ticket 49881 - Missing check for crack.h
  - Ticket 48056 - Add more test cases to the basic suite
  - Ticket 49761 - Fix replication test suite issues
  - Ticket 49381 - Refactor the plugin test suite docstrings
  - Ticket 49837 - Add new password policy attributes to UI
  - Ticket 49794 - RFE - Add pam_pwquality features to password syntax checking
  - Ticket 49867 - Fix CLI tools' double output


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.14-5
changelog:
  - Bump version to 1.4.0.14-5
  - Resolves: Bug 1591761 - Revert ticket 49372
  - Resolves: Bug 1624196 - CVE-2018-14624 389-ds-base: Server crash through modify command with large DN


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.17-1
changelog:
  - Bump version to 1.4.0.17-1
  - Resolves: Bug 1623633 - Add backend functionality to UI's Schema Tab
  - Resolves: Bug 1602439 - Please review important issues found by covscan
  - Resolves: Bug 1629676 - replica install fails on s390x arch


author: Matus Honek <mhonek@redhat.com> - 1.4.0.17-3
changelog:
  - Bump version to 1.4.0.17-3
  - Resolves: Bug 1635675 - Typo in SPEC file's 'Requires' breaks the latest compose


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.18-1
changelog:
  - Bump version to 1.4.0.18-1
  - Resolves: Bug 1602439 - Please review important issues found by covscan in "389-ds-base-1.4.0.11-1.el8+7" package
  - Resolves: Bug 1623631 - Add backend functionality to UI's Replication Tab
  - Resolves: Bug 1623633 - Add backend functionality to UI's Schema Tab
  - Resolves: Bug 1588057 - CVE-2018-10850 389-ds-base: race condition on reference counter leads to DoS using persistent search
  - Resolves: Bug 1624420 - CVE-2018-14638 389-ds-base: Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly
  - Resolves: Bug 1633718 - 389-ds module: Switched Requires from "python3" to "platform-python"


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-8
changelog:
  - Bump version to 1.4.0.20-8
  - Resolves: Bug 1690024 - ipa role-mod DatabaseError changing cn (entry cache corruption)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-9
changelog:
  - Bump version to 1.4.0.20-9
  - Resolves: Bug 1690024 - ipa role-mod DatabaseError changing cn (missing commit from last release)


author: Mark Reynolds <mreynolds@redhat.com> - 1.4.0.20-10
changelog:
  - Bump version to 1.4.0.20-10
  - Resolves: Bug 1690024 - rebase lib389 to pull in all the dscreate fixes


author: Miroslav Suchý <msuchy@redhat.com> 5.5.1-1
changelog:
  - 470154 - arch can be optional, do not freak out if it is not present
  - 514805 - recognize X86 arch as i386
  - 516898 - workaround for patches which do not have packed most top directory
  - no need to copy file, we can operate directly on original
  - do not read one file twice
  - 559092 - recognize new sun patch cluster format
  - 569946 - normalize solaris "x86" value to rhn known value


author: Miroslav Suchý <msuchy@redhat.com> 5.5.2-1
changelog:
  - Also fixed 'Info' -> 'info' as suggested by Milan Zazrivec.
    (jhutar@redhat.com)
  - And one more space in 'sometime' as suggested by Jan Pazdziora
    (jhutar@redhat.com)
  - Just put space to the correct side (jhutar@redhat.com)


author: Jan Pazdziora 5.5.7-1
changelog:
  - 649259 - do not fail with invalid user, if we are only testing if call exist
    (msuchy@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 5.5.13-1
changelog:
  - get_server_capability() is defined twice in osad and rhncfg, merge and move
    to rhnlib and make it member of rpclib.Server
  - 648403 - do not create TB even on Red Hat Enterprise Linux 4
  - 648403 - workaround missing hasCapability() on RHEL4
  - Updating the copyright years to include 2010.


author: Tomas Lestach <tlestach@redhat.com> 5.5.15-1
changelog:
  - Revert "get_server_capability() is defined twice in osad and rhncfg, merge
    and move to rhnlib and make it member of rpclib.Server" (tlestach@redhat.com)


author: Jan Pazdziora 5.5.17-1
changelog:
  - Revert "Revert "get_server_capability() is defined twice in osad and rhncfg,
    merge and move to rhnlib and make it member of rpclib.Server""
    (msuchy@redhat.com)
  - Revert "Revert "648403 - do not create TB even on Red Hat Enterprise Linux
    4"" (msuchy@redhat.com)


author: Miroslav Suchý 5.5.20-1
changelog:
  - 683200 - instead of encodings.idna use wrapper from rhn.connections, which
    workaround corner cases
  - 683200 - rhnpush.py - convert servername from input to Pune encodings


author: Michael Mraka <michael.mraka@redhat.com> 5.5.22-1
changelog:
  - idn_unicode_to_pune() has to return string
  - no need to define built-in constants
  - delete dead code


author: Jan Pazdziora 5.5.28-1
changelog:
  - 559092 - recognize both new and old patch clusters (michael.mraka@redhat.com)
  - 485880 - put -N option to SYNOPSIS as well (msuchy@redhat.com)


author: Jan Pazdziora 5.5.30-1
changelog:
  - We always have rhnserver (no longer building for RHEL 4-).
  - We only support version 5 and newer of RHEL, removing conditions for old
    versions.


author: Miroslav Suchý 5.5.32-1
changelog:
  - True and False constants are defined since python 2.4
  - do not mask original error by raise in execption


author: Michael Mraka <michael.mraka@redhat.com> 5.5.34-1
changelog:
  - replaced external zip with zipfile module
  - replaced external tar with tarfile module
  - don't call os.path.join() over and over
  - don't read 2GB file into memory at once
  - don't hide original error message
  - replaced external unzip with zipfile module


author: Michael Mraka <michael.mraka@redhat.com> 5.5.39-1
changelog:
  - updated uploadLib to use A_Package interface
  - removed legacy code for satellite < 4.0.6 support
  - converted rhnpush to use A_Package interface
  - InvalidPackageError is now in rhn_pkg
  - removed support for satellite < 4.1.0


author: Michael Mraka <michael.mraka@redhat.com> 5.5.41-1
changelog:
  - merged list() with parent class
  - merged uploadHeaders() with parent class
  - the very same newest() is defined in parent class


author: Michael Mraka <michael.mraka@redhat.com> 5.5.47-1
changelog:
  - reuse UploadError from uploadLib
  - removed functions not used in rhnpush/rhn-package-manager
  - simplified authentication code


author: Jan Pazdziora 5.5.54-1
changelog:
  - Revert "Revert "Revert "get_server_capability() is defined twice in osad and
    rhncfg, merge and move to rhnlib and make it member of rpclib.Server"""


author: Tomas Lestach <tlestach@redhat.com> 5.5.85-1
changelog:
  - 663039 - Setting timeout requires newer rhnlib
  - 663039 - Update man
  - 663039 - Kitten has been sacrificed
  - 663039 - Wire in timeout for rhnpush
  - Cleanup space around comments
  - Misplaced comment after 73a918d909d1804a43f7773b6d0b4d7cb0464ac3
  - Updating function names
  - Remove trailing space


author: Gennadii Altukhov <galt@redhat.com> 5.5.94-1
changelog:
  - Add some fixes to rhnpush for Python 3 compatibility - change mode for open()
    function - HTTPResponse getheaders() was renamed to get() - fix binary string
    decoding
  - Fix types in rhnpush utility
  - Fix relative imports in rhnpush utility


author: Tomas Kasparek <tkasparek@redhat.com> 5.5.96-1
changelog:
  - fixed RuntimeError: dictionary changed size during iteration
  - convert binary data to string to possible compare data in Python 3


author: Gennadii Altukhov <galt@redhat.com> 5.5.101-1
changelog:
  - 1390170 - rhnpush is used on a client side as well, so make it compatible
    with RHEL 5 and Python 2.4


author: Ondrej Gajdusek <ogajduse@redhat.com> 5.5.103-1
changelog:
  - Pylint fixes in rhnpush
  - pylint fix consider-iterating-dictionary for rhnpush.rhnpush_config
  - Use HTTPS in all Github links
  - Updated links to github in spec files
  - Migrating Fedorahosted to GitHub


author: Michael Mraka <michael.mraka@redhat.com> 5.5.105-1
changelog:
  - fixed pylint warnings disabled python3 pylint on Fedora 26+ for now
  - removed outdated solaris2mpm script


author: Michael Mraka <michael.mraka@redhat.com> 5.5.108-1
changelog:
  - run pylint on all Fedoras
  - simplified Makefile
  - modules are now in standard sitelib path
  - install files into python_sitelib/python3_sitelib
  - move rhnpush files into proper python2/python3 subpackages
  - split rhnpush into python2/python3 specific packages


author: Tomas Kasparek <tkasparek@redhat.com> 5.5.110-5
changelog:
  - disable pylint warnings discovered by run on python3 (tkasparek@redhat.com)
  - run pylint 2/3 depending on environment (tkasparek@redhat.com)
  - don't build python2 subpackages on systems with default python3
    (tkasparek@redhat.com)
  - be compliant with new packaging guidelines when requiring python2 packages
    (tkasparek@redhat.com)
  - require python3-devel for building on python3 (tkasparek@redhat.com)


author: Simo Sorce <simo@samba.org> - 0.6.0-1
changelog:
  - New verion with fixes for 32 bit arches
  - drop patches, they are included in he new upstream release


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.3-1
changelog:
  - New upstream version 1.1.3 which fixes some test problems.
  - Disable tests because Rawhide kernel is broken (RHBZ#991808).
  - Remove a single quote from description which confused emacs.
  - Remove patch, now upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.5-2
changelog:
  - New upstream version 1.1.5.
  - Enable the new Python plugin.
  - Perl plugin man page moved to section 3.
  - Perl now requires ExtUtils::Embed.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.6-3
changelog:
  - Backport some upstream patches, fixing a minor bug and adding more tests.
  - Enable the tests since kernel bug is fixed.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.9-2
changelog:
  - New upstream version 1.1.9.
  - Add the streaming plugin.
  - Include fix for streaming plugin in 1.1.9.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.11-5
changelog:
  - Don't run tests on x86, because kernel is broken there
    (https://bugzilla.redhat.com/show_bug.cgi?id=1302071)


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.12-1
changelog:
  - New upstream version 1.1.12
  - Enable Ruby plugin.
  - Disable tests on Rawhide because libvirt is broken again (RHBZ#1344016).


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.13-1
changelog:
  - New upstream version 1.1.13.
  - Remove patches which are all upstream.
  - Remove grubby hack, should not be needed with modern supermin.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.16-2
changelog:
  - New upstream version 1.1.16.
  - Disable python3 plugin on RHEL/EPEL <= 7.
  - Only ship on x86_64 in RHEL/EPEL <= 7.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.18-3
changelog:
  - New upstream version 1.1.18.
  - Add NBD forwarding plugin.
  - Add libselinux-devel so that SELinux support is enabled in the daemon.
  - Apply all patches from upstream since 1.1.18.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.19-1
changelog:
  - New upstream version 1.1.19.
  - Combine all the simple plugins in %{name}-basic-plugins.
  - Add memory and null plugins.
  - Rename the example plugins subpackage.
  - Use %license instead of %doc for license file.
  - Remove patches now upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.23-1
changelog:
  - New upstream version 1.1.23.
  - Add example4 plugin.
  - Python3 tests require libguestfs so disable on s390x.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.3-1
changelog:
  - New stable version 1.2.3.
  - Add patch to work around libvirt problem with relative socket paths.
  - Add patch to fix the xz plugin test with recent guestfish.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-1
changelog:
  - New stable version 1.2.4.
  - Remove upstream patches.
  - Enable tarball signatures.
  - Add upstream patch to fix tests when guestfish not available.


author: Richard W.M. Jones <rjones@redhat.com> - 1.4.0-1
changelog:
  - New upstream version 1.4.0.
  - New plugins: random, zero.
  - New bash tab completion subpackage.
  - Remove unused build dependencies.


author: Richard W.M. Jones <rjones@redhat.com> - 1.4.2-4
changelog:
  - Remove misguided LDFLAGS hack which removed server hardening.
    https://bugzilla.redhat.com/show_bug.cgi?id=1624149#c6
    resolves: rhbz#1624149


author: Dave Anderson <anderson@redhat.com> - 1.0-1.2
changelog:
  - fix Makefile to account for s390 build
  - change exclusive arch entry from i386 to {ix86}
  - Resolves: rbhz#545564


author: Dave Anderson <anderson@redhat.com> - 1.0-2
changelog:
  - Fix for segmentation violation with "trace show -c cpu" command,
    and add "trace dump -t" command.
    Resolves: rbhz#592887


author: Dave Anderson <anderson@redhat.com> - 1.0-3
changelog:
  - Remove trace_dump.patch, which requires a kernel later than
    the RHEL6 base of 2.6.32.
    Resolves: rbhz#601536


author: Dave Anderson <anderson@redhat.com> - 2.0-3
changelog:
  - Replace obsolete _init() and _fini() functions.
  - Fix possible segmentation violation on calloc() failure.
  - Initialize trace_dat to avoid compiler warning.


author: Dave Anderson <anderson@redhat.com> - 2.0.12
changelog:
  - Differentiate ppc64 .ring_buffer_read text symbol from ring_buffer_read data symbol
  - Fix for ring_buffer_per_cpu.nr_pages size change on big-endian systems 
  - Fix for Linux 4.7 change to the TRACE_EVENT_FL_TRACEPOINT flag
    Resolves: rhbz#1441914
    Resolves: rhbz#1440726


author: Dave Anderson <anderson@redhat.com> - 2.0.13
changelog:
  - Build requires crash-devel-7.2.0-2 and usage requires crash-7.2.0-2
    because of load_module structure change.
    Resolves: rhbz#1520825


author: Robin Norwood <rnorwood@redhat.com> - 1.12-1
changelog:
  - Update to latest upstream version: 1.12
  - Fix license tag
  - Add BuildRequires for ExtUtils::MakeMaker and Test::Simple
  - Fix package review issues:
  - Source URL
  - Resolves: bz#226264


author: Paul Howarth <paul@city-fan.org> - 1.15-1
changelog:
  - Update to latest upstream version: 1.15
  - Add buildreq and req for perl(Net::LibIDN) to avoid croaking when trying to
    verify an international name against a certificate


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26 (verify_hostname_of_cert matched only the prefix for the
    hostname when no wildcard was given, e.g. www.example.org matched against a
    certificate with name www.exam in it [#509819])


author: Paul Howarth <paul@city-fan.org> - 1.27-1
changelog:
  - Update to 1.27
    - various regex fixes for i18n and service names
    - fix warnings from perl -w (CPAN RT#48131)
    - improve handling of errors from Net::ssl_write_all


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30 (fix memleak when SSL handshake failed)
  - Add buildreq procps needed for memleak test


author: Paul Howarth <paul@city-fan.org> - 1.32-1
changelog:
  - Update to 1.32 (die in Makefile.PL if Scalar::Util has no dualvar support)
  - Use %{_fixperms} macro instead of our own %{__chmod} incantation


author: Paul Howarth <paul@city-fan.org> - 1.33-1
changelog:
  - Update to 1.33
    - attempt to make t/memleak_bad_handshake.t more stable
    - fix hostname checking: only check an IP against subjectAltName GEN_IPADD


author: Paul Howarth <paul@city-fan.org> - 1.34-1
changelog:
  - Update to 1.34
    - schema http for certificate verification changed to wildcards_in_cn=1
    - if upgrading socket from inet to ssl fails due to handshake problems, the
      socket gets downgraded back again but is still open (CPAN RT#61466)
    - deprecate kill_socket: just use close()


author: Paul Howarth <paul@city-fan.org> - 1.35-1
changelog:
  - Update to 1.35 (addresses CVE-2010-4334)
    - if verify_mode is not VERIFY_NONE and the ca_file/ca_path cannot be
      verified as valid, it will no longer fall back to VERIFY_NONE but throw an
      error (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606058)


author: Paul Howarth <paul@city-fan.org> - 1.36-1
changelog:
  - Update to 1.36
    - update documentation for SSL_verify_callback based on CPAN RT#63743 and
      CPAN RT#63740


author: Paul Howarth <paul@city-fan.org> - 1.37-1
changelog:
  - Update to 1.37
    - don't complain about invalid certificate locations if user explicitly set
      SSL_ca_path and SSL_ca_file to undef: assume that user knows what they are
      doing and will work around the problems themselves (CPAN RT#63741)


author: Paul Howarth <paul@city-fan.org> - 1.38-1
changelog:
  - Update to 1.38
    - fixed wildcards_in_cn setting for http, wrongly set in 1.34 to 1 instead of
      anywhere (CPAN RT#64864)


author: Paul Howarth <paul@city-fan.org> - 1.40-1
changelog:
  - Update to 1.40
    - fix in example/async_https_server
    - get IDN support from URI (CPAN RT#67676)
  - Nobody else likes macros for commands


author: Paul Howarth <paul@city-fan.org> - 1.41-1
changelog:
  - Update to 1.41
    - fix issue in stop_SSL where it did not issue a shutdown of the SSL
      connection if it first received the shutdown from the other side
    - try to make t/nonblock.t more reliable, at least report the real cause of
      SSL connection errors
  - No longer need to re-code docs to UTF-8


author: Paul Howarth <paul@city-fan.org> - 1.43-1
changelog:
  - Update to 1.43
    - add SSL_create_ctx_callback to have a way to adjust context on creation
      (CPAN RT#67799)
    - describe problem of fake memory leak because of big session cache and how
      to fix it (CPAN RT#68073)
    - fix t/nonblock.t
    - stability improvements for t/inet6.t


author: Paul Howarth <paul@city-fan.org> - 1.44-1
changelog:
  - Update to 1.44
    - fix invalid call to inet_pton in verify_hostname_of_cert when identity
      should be verified as ipv6 address because it contains a colon


author: Paul Howarth <paul@city-fan.org> - 1.45-1
changelog:
  - Update to 1.45
    - fix readline to continue when getting interrupt waiting for more data
  - BR: perl(Carp)


author: Paul Howarth <paul@city-fan.org> - 1.48-1
changelog:
  - Update to 1.48
    - further fix for readline fix in 1.45: if the pending data were false (like
      '0'), it failed to read the rest of the line (CPAN RT#71953)


author: Paul Howarth <paul@city-fan.org> - 1.49-1
changelog:
  - Update to 1.49
    - another regression for readline fix: this time it failed to return lines
      at EOF that don't end with newline - extended t/readline.t to catch this
      case and the fix for 1.48


author: Paul Howarth <paul@city-fan.org> - 1.52-1
changelog:
  - Update to 1.52
    - fix for t/nonblock.t hangs on AIX (CPAN RT#72305)
    - disable t/memleak_bad_handshake.t on AIX, because it might hang
      (CPAN RT#72170)
    - fix syntax error in t/memleak_bad_handshake.t


author: Paul Howarth <paul@city-fan.org> - 1.54-1
changelog:
  - Update to 1.54
    - return 0 instead of undef in SSL_verify_callback to fix uninitialized
      warnings (CPAN RT#73629)


author: Paul Howarth <paul@city-fan.org> - 1.55-1
changelog:
  - Update to 1.55
    - work around IO::Socket's work around for systems returning EISCONN etc. on
      connect retry for non-blocking sockets by clearing $! if SUPER::connect
      returned true (CPAN RT#75101)


author: Paul Howarth <paul@city-fan.org> - 1.56-1
changelog:
  - Update to 1.56
    - add automatic or explicit (via SSL_hostname) SNI support, needed for
      multiple SSL hostnames with the same IP (currently only supported for the
      client)
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - No need to delete empty directories from buildroot


author: Paul Howarth <paul@city-fan.org> - 1.58-1
changelog:
  - Update to 1.58
    - fix t/dhe.t for openssl 1.0.1 beta by forcing TLSv1, so that it does not
      complain about the too small RSA key, which it should not use anyway; this
      workaround is not applied for older openssl versions, where it would cause
      failures (CPAN RT#75165)
  - Add patch to fiddle the openssl version number in the t/dhe.t workaround
    because the OPENSSL_VERSION_NUMBER cannot be trusted in Fedora
  - One buildreq per line for readability
  - Drop redundant buildreq perl(Test::Simple)
  - Always run full test suite


author: Paul Howarth <paul@city-fan.org> - 1.59-1
changelog:
  - Update to 1.59
    - if SSLv2 is not supported by Net::SSLeay set SSL_ERROR with useful message
      when attempting to use it
    - modify constant declarations so that 5.6.1 should work again
  - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 1.60-1
changelog:
  - Update to 1.60
    - don't make blocking readline if socket was set nonblocking, but return as
      soon no more data are available (CPAN RT#75910)
    - fix BUG section about threading so that it shows package as thread safe
      as long as Net::SSLeay ≥ 1.43 is used (CPAN RT#75749)
  - BR: perl(constant), perl(Exporter) and perl(IO::Socket)


author: Paul Howarth <paul@city-fan.org> - 1.61-1
changelog:
  - Update to 1.61
    - call CTX_set_session_id_context so that server's session caching works with
      client certificates too (CPAN RT#76053)


author: Paul Howarth <paul@city-fan.org> - 1.64-1
changelog:
  - Update to 1.64
    - ignore die from within eval to make tests more stable on Win32
      (CPAN RT#76147)
    - clarify some behavior regarding hostname verification
  - Drop patch for t/dhe.t, no longer needed


author: Paul Howarth <paul@city-fan.org> - 1.69-1
changelog:
  - Update to 1.69 (changes for CPAN RT#76929)
    - if no explicit cipher list is given, default to ALL:!LOW instead of the
      openssl default, which usually includes weak ciphers like DES
    - new config key SSL_honor_cipher_order and document how to use it to fight
      BEAST attack
    - fix behavior for empty cipher list (use default)
    - re-added workaround in t/dhe.t


author: Paul Howarth <paul@city-fan.org> - 1.70-1
changelog:
  - Update to 1.70
    - make it possible to disable protocols using SSL_version, and make
      SSL_version default to 'SSLv23:!SSLv2'


author: Paul Howarth <paul@city-fan.org> - 1.71-1
changelog:
  - Update to 1.71
    - 1.70 done right: don't disable SSLv2 ciphers; SSLv2 support is better
      disabled by the default SSL_version of 'SSLv23:!SSLv2'


author: Paul Howarth <paul@city-fan.org> - 1.73-1
changelog:
  - Update to 1.73
    - set DEFAULT_CIPHER_LIST to ALL:!LOW instead of HIGH:!LOW
    - make test t/dhe.t hopefully work with more versions of openssl


author: Paul Howarth <paul@city-fan.org> - 1.74-1
changelog:
  - Update to 1.74
    - accept a version of SSLv2/3 as SSLv23, because older documentation could
      be interpreted like this


author: Paul Howarth <paul@city-fan.org> - 1.76-1
changelog:
  - Update to 1.76
    - add support for IO::Socket::IP, which supports inet6 and inet4
      (CPAN RT#75218)
    - fix documentation errors (CPAN RT#77690)
    - made it possible to explicitly disable TLSv11 and TLSv12 in SSL_version
    - use inet_pton from either Socket.pm 1.95 or Socket6.pm
  - Use IO::Socket::IP for IPv6 support where available, else IO::Socket::INET6
  - Add runtime dependency for appropriate IPv6 support module so that we can
    ensure that we run at runtime what we tested with at build time


author: Paul Howarth <paul@city-fan.org> - 1.79-1
changelog:
  - Update to 1.79
    - Use getnameinfo instead of unpack_sockaddr_in6 to get PeerAddr and PeerPort
      from sockaddr in _update_peer, because this provides scope too
    - Work around systems that don't define AF_INET6 (CPAN RT#81216)
    - Prepare transition to a more secure default for SSL_verify_mode; the use of
      the current default SSL_VERIFY_NONE will cause a big warning for clients,
      unless SSL_verify_mode was explicitly set inside the application to this
      insecure value (in the near future the default will be SSL_VERIFY_PEER, and
      thus causing verification failures in unchanged applications)


author: Paul Howarth <paul@city-fan.org> - 1.80-1
changelog:
  - Update to 1.80
    - Removed some warnings in test (missing SSL_verify_mode => 0), which caused
      tests to hang on Windows (CPAN RT#81493)


author: Paul Howarth <paul@city-fan.org> - 1.81-1
changelog:
  - Update to 1.81
    - Deprecated set_ctx_defaults; new name is set_defaults (the old name is
      still available)
    - Changed handling of default path for SSL_(ca|cert|key)* keys: if one of
      these keys is user defined, don't add defaults for the others, i.e.
      don't mix user settings and defaults
    - Cleaner handling of module defaults vs. global settings vs. socket
      specific settings; global and socket specific settings are both provided
      by the user, while module defaults are not
    - Make IO::Socket::INET6 and IO::Socket::IP specific tests both run, even
      if both modules are installed, by faking a failed load of the other module
  - BR: perl(IO::Socket::INET6) and perl(Socket6) unconditionally


author: Paul Howarth <paul@city-fan.org> - 1.82-1
changelog:
  - Update to 1.82
    - sub error sets $SSL_ERROR etc. only if there really is an error; otherwise
      it will keep the latest error, which allows IO::Socket::SSL->new to report
      the correct problem, even if the problem is deeper in the code (like in
      connect)
    - Correct spelling (CPAN RT#82790)


author: Paul Howarth <paul@city-fan.org> - 1.83-1
changelog:
  - Update to 1.83
    - Server Name Indication (SNI) support on the server side (CPAN RT#82761)
    - Reworked part of the documentation, like providing better examples


author: Paul Howarth <paul@city-fan.org> - 1.83-2
changelog:
  - Update to 1.831
    - Separated documentation of non-blocking I/O from error handling
    - Changed and documented behavior of readline to return the read data on
      EAGAIN/EWOULDBLOCK in case of non-blocking socket
      (see https://github.com/noxxi/p5-io-socket-ssl/issues/1)
  - Bumped release rather than version number to preserve likely upgrade path
    and avoid need for epoch or version number ugliness; may revisit this in
    light of upstream's future version numbering decisions


author: Paul Howarth <paul@city-fan.org> - 1.84-1
changelog:
  - Update to 1.84
    - Disabled client side SNI for openssl version < 1.0.0 because of
      CPAN RT#83289
    - Added functions can_client_sni, can_server_sni and can_npn to check
      availability of SNI and NPN features
    - Added more documentation for SNI and NPN


author: Paul Howarth <paul@city-fan.org> - 1.85-1
changelog:
  - Update to 1.85
    - Probe for available modules with local __DIE__ and __WARN__handlers
      (CPAN RT#84574)
    - Fix warning, when IO::Socket::IP is installed and inet6 support gets
      explicitly requested (CPAN RT#84619)


author: Paul Howarth <paul@city-fan.org> - 1.86-1
changelog:
  - Update to 1.86
    - Don't warn about SSL_verify_mode when re-using an existing SSL context
      (CPAN RT#84686)


author: Paul Howarth <paul@city-fan.org> - 1.87-1
changelog:
  - Update to 1.87
    - Complain if given SSL_(key|cert|ca)_(file|path) do not exist or if they are
      not readable (CPAN RT#84829)
    - Fix use of SSL_key|SSL_file objects instead of files, broken with 1.83


author: Paul Howarth <paul@city-fan.org> - 1.88-1
changelog:
  - Update to 1.88
    - Consider a value of '' the same as undef for SSL_ca_(path|file), SSL_key*
      and SSL_cert* - some apps like Net::LDAP use it that way


author: Paul Howarth <paul@city-fan.org> - 1.89-1
changelog:
  - Update to 1.89
    - If IO::Socket::IP is used it should be at least version 0.20; otherwise we
      get problems with HTTP::Daemon::SSL and maybe others (CPAN RT#81932)
    - Spelling corrections


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Support more digests, especially SHA-2 (CPAN RT#85290)
    - Added support for easy SSL interception (man in the middle) based on ideas
      found in mojo-mitm proxy
    - Make 1.46 the minimal required version for Net::SSLeay, because it
      introduced lots of useful functions
  - BR:/R: openssl ≥ 0.9.7e for P_ASN1_TIME_(get,set)_isotime in Net::SSLeay


author: Paul Howarth <paul@city-fan.org> - 1.91-1
changelog:
  - Update to 1.91
    - Added IO::Socket::SSL::Utils for easier manipulation of certificates and
      keys
    - Moved SSL interception into IO::Socket::SSL::Intercept and simplified it
      using IO::Socket::SSL::Utils
    - Enhance meta information in Makefile.PL
  - Bump openssl version requirement to 0.9.8a
  - Need at least version 6.58 of ExtUtils::MakeMaker (CPAN RT#85739)


author: Paul Howarth <paul@city-fan.org> - 1.92-1
changelog:
  - Update to 1.92
    - Intercept: use sha1-fingerprint of original cert for id into cache unless
      otherwise given
    - Fix pod error in IO::Socket::SSL::Utils (CPAN RT#85733)


author: Paul Howarth <paul@city-fan.org> - 1.93-1
changelog:
  - Update to 1.93
    - Need at least OpenSSL version 0.9.8 now, since last 0.9.7 was released 6
      years ago; remove code to work around older releases
    - Changed AUTHOR in Makefile.PL from array back to string, because the array
      feature is not available in MakeMaker shipped with 5.8.9 (CPAN RT#85739)
  - Set openssl version requirement to 0.9.8
  - Drop ExtUtils::MakeMaker version requirement back to 6.46


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Makefile.PL reported wrong version of openssl if Net::SSLeay was not
      installed, instead of reporting a missing dependency of Net::SSLeay


author: Paul Howarth <paul@city-fan.org> - 1.95.1-1
changelog:
  - Update to 1.951
    (1.950)
    - MAJOR BEHAVIOR CHANGE:
      - ssl_verify_mode now defaults to verify_peer for client
      - Previously it used verify_none, but loudly complained since 1.79 about it
      - It will not complain any longer, but the connection will probably fail
      - Please don't simply disable ssl verification; instead, set SSL_ca_file
        etc. so that verification succeeds!
    - MAJOR BEHAVIOR CHANGE:
      - It will now complain if the built-in defaults of certs/my-ca.pem or ca/
        for CA and certs/{server,client}-{key,cert}.pem for cert and key are
        used, i.e. no certificates are specified explicitly
      - In the future these insecure (relative path!) defaults will be removed
        and the CA replaced with the system defaults
    (1.951)
    - Use Net::SSLeay::SSL_CTX_set_default_verify_paths to use openssl's built-in
      defaults for CA unless CA path/file was given (or IO::Socket::SSL built-ins
      used)


author: Paul Howarth <paul@city-fan.org> - 1.95.4-1
changelog:
  - Update to 1.954
    - Accept older versions of ExtUtils::MakeMaker and add meta information like
      link to repository only for newer versions


author: Paul Howarth <paul@city-fan.org> - 1.95.5-1
changelog:
  - Update to 1.955
    - Support for perfect forward secrecy using ECDH, if the Net::SSLeay version
      supports it


author: Paul Howarth <paul@city-fan.org> - 1.95.8-1
changelog:
  - Update to 1.958
    Lots of behavior changes for more secure defaults:
    - BEHAVIOR CHANGE: make default cipher list more secure, especially:
      - No longer support MD5 by default (broken)
      - No longer support anonymous authentication by default (vulnerable to
        man in the middle attacks)
      - Prefer ECDHE/DHE ciphers and add necessary ECDH curve and DH keys, so
        that it uses by default forward secrecy, if underlying
        Net::SSLeay/openssl supports it
      - Move RC4 to the end, i.e. 3DES is preferred (BEAST attack should
        hopefully have been fixed and now RC4 is considered less safe than 3DES)
      - Default SSL_honor_cipher_order to 1, e.g. when used as server it tries
        to get the best cipher even if the client prefers other ciphers; PLEASE
        NOTE that this might break connections with older, less secure
        implementations, in which case revert to 'ALL:!LOW:!EXP:!aNULL' or so
    - BEHAVIOR CHANGE: SSL_cipher_list now gets set on context, not SSL object,
      and thus gets reused if context gets reused; PLEASE NOTE that using
      SSL_cipher_list together with SSL_reuse_ctx no longer has any effect on
      the ciphers of the context
    - Rework hostname verification schemes:
      - Add RFC names as scheme (e.g. 'rfc2818', ...)
      - Add SIP, SNMP, syslog, netconf, GIST
      - BEHAVIOR CHANGE: fix SMTP - now accept wildcards in CN and subjectAltName
      - BEHAVIOR CHANGE: fix IMAP, POP3, ACAP, NNTP - now accept wildcards in CN
    - BEHAVIOR CHANGE: anywhere wildcards like www* now match only 'www1',
      'www2' etc.  but not 'www'
    - Anywhere wildcards like x* are no longer applied to IDNA names (which start
      with 'xn--')
    - Fix crash of Utils::CERT_free
    - Support TLSv11, TLSv12 as handshake protocols
    - Fixed t/core.t: test used cipher_list of HIGH, which includes anonymous
      authorization; with the DH param given by default since 1.956, old versions
      of openssl (like 0.9.8k) used cipher ADH-AES256-SHA (e.g. anonymous
      authorization) instead of AES256-SHA and thus the check for the peer
      certificate failed (because ADH does not exchange certificates) - fixed by
      explicitly specifying HIGH:!aNULL as cipher (CPAN RT#90221)
    - Cleaned up tests:
      - Remove ssl_settings.req and 02settings.t, because all tests now create a
        simple socket at 127.0.0.1 and thus global settings are no longer needed
      - Some tests did not have use strict(!); fixed it
      - Removed special handling for older Net::SSLeay versions that are less
        than our minimum requirement
      - Some syntax enhancements: removed some SSL_version and SSL_cipher_list
        options where they were not really needed
    - Cleanup: remove workaround for old IO::Socket::INET6 but instead require at
      least version 2.55 which is now 5 years old
    - Fix t/session.t to work with older openssl versions (CPAN RT#90240)


author: Paul Howarth <paul@city-fan.org> - 1.960-1
changelog:
  - Update to 1.960
    - Only documentation enhancements:
      - Clarify with text and example code, that within event loops not only
        select/poll should be used, but also pending has to be called
      - Better introduction into SSL; at least mention anonymous authentication as
        something you don't want and should take care with the right cipher
      - Make it more clear that it's better not to change the cipher list unless
        you really know what you're doing
  - Adopt upstream's versioning scheme


author: Paul Howarth <paul@city-fan.org> - 1.961-1
changelog:
  - Update to 1.961
    - IO::Socket::SSL::Utils::CERT_create can now create CA-certificates that
      are not self-signed (by giving issuer_*)


author: Paul Howarth <paul@city-fan.org> - 1.962-1
changelog:
  - Update to 1.962
    - Work around problems with older F5 BIG-IP by offering fewer ciphers on the
      client side by default, so that the client hello stays below 255 bytes


author: Paul Howarth <paul@city-fan.org> - 1.963-1
changelog:
  - Update to 1.963
    - Fix behavior of stop_SSL: for blocking sockets it now enough to call it
      once, for non-blocking it should be called again as long as EAGAIN and
      SSL_ERROR is set to SSL_WANT_(READ|WRITE)
    - Don't call blocking if start_SSL failed and downgraded socket has no
      blocking method
    - Documentation enhancements:
      - Special section for differences to IO::Socket
      - Describe problem with blocking accept on non-blocking socket
      - Describe arguments to new_from_fd and make clear that for upgrading an
        existing IO::Socket, start_SSL should be used directly


author: Paul Howarth <paul@city-fan.org> - 1.964-1
changelog:
  - Update to 1.964
    - Disabling TLSv1_1 did not work, because the constant was wrong; now it gets
      the constants from calling Net::SSLeay::SSL_OP_NO_TLSv1_1 etc.
    - The new syntax for the protocols is TLSv1_1 instead of TLSv11, which matches
      the syntax from OpenSSL (the old syntax continues to work in SSL_version)
    - New functions get_sslversion and get_sslversion_int, which get the SSL
      version of the established session as string or int
    - Disable t/io-socket-inet6.t if Acme::Override::INET is installed


author: Paul Howarth <paul@city-fan.org> - 1.965-1
changelog:
  - Update to 1.965
    - New key SSL_session_key to influence how sessions are inserted and looked
      up in the client's session cache, which makes it possible to share sessions
      over different ip:host (as is required with some FTPS servers)
    - t/core.t - handle case where default loopback source is not 127.0.0.1, like
      in FreeBSD jails


author: Paul Howarth <paul@city-fan.org> - 1.966-1
changelog:
  - Update to 1.966
    - Fixed bug introduced in 1.964 - disabling TLSv1_2 no longer worked by
      specifying !TLSv12; only !TLSv1_2 worked
    - Fixed leak of session objects in SessionCache, if another session
      replaced an existing session (introduced in 1.965)


author: Paul Howarth <paul@city-fan.org> - 1.967-1
changelog:
  - Update to 1.967
    - Verify the hostname inside a certificate by default with a superset of
      common verification schemes instead of not verifying identity at all; for
      now it will only complain if name verification failed but in the future it
      will fail certificate verification, forcing you to set the expected
      SSL_verifycn_name if you want to accept the certificate
    - New option SSL_fingerprint and new methods get_fingerprint and
      get_fingerprint_bin; together they can be used to selectively accept
      specific certificates that would otherwise fail verification, like
      self-signed, outdated or from unknown CAs
    - Utils:
      - Default RSA key length 2048
      - Digest algorithm to sign certificate in CERT_create can be given;
        defaults to SHA-256
      - CERT_create can now issue non-CA self-signed certificate
      - CERT_create add some more useful constraints to certificate
    - Spelling fixes


author: Paul Howarth <paul@city-fan.org> - 1.968-1
changelog:
  - Update to 1.968
    - BEHAVIOR CHANGE: removed implicit defaults of certs/server-{cert,key}.pem
      for SSL_{cert,key}_file and ca/,certs/my-ca.pem for SSL_ca_file; these
      defaults were deprecated since 1.951 (July 2013)
    - Usable CA verification path on Windows etc.:
      - Do not use Net::SSLeay::CTX_set_default_verify_paths any longer to set
        system/build dependent default verification path, because there was no
        way to retrieve these default values and check if they contained usable
        CA
      - Instead, re-implement the same algorithm and export the results with
        public function default_ca() and make it possible to overwrite it
      - Also check for usable verification path during build; if no usable path
        is detected, require Mozilla::CA at build and try to use it at runtime


author: Paul Howarth <paul@city-fan.org> - 1.969-1
changelog:
  - Update to 1.969
    - Fix set_defaults to match documentation regarding short names
    - New function set_args_filter_hack to make it possible to override bad SSL
      settings from other code at the last moment
    - Determine default_ca on module load (and not on first use in each thread)
    - Don't try default hostname verification if verify_mode 0
    - Fix hostname verification when reusing context


author: Paul Howarth <paul@city-fan.org> - 1.970-1
changelog:
  - Update to 1.970
    - Make sure sub default_ca uses a local $_ and not a version of an outer
      scope that might be read-only (CPAN RT#93987)


author: Paul Howarth <paul@city-fan.org> - 1.971-1
changelog:
  - Update to 1.971
    - Try to use SSL_hostname for hostname verification if no SSL_verifycn_name
      is given; this way, hostname for SNI and verification can be specified in
      one step
    - New test program example/simulate_proxy.pl


author: Paul Howarth <paul@city-fan.org> - 1.972-1
changelog:
  - Update to 1.972
    - Make sure t/external/usable_ca.t works also with older openssl without
      support for SNI (CPAN RT#94117)


author: Paul Howarth <paul@city-fan.org> - 1.973-1
changelog:
  - Update to 1.973
    - With SSL_ca, certificate handles can now be used in addition to
      SSL_ca_file and SSL_ca_path
    - No longer complain if SSL_ca_file and SSL_ca_path are both given;
      instead, add both as options to the CA store
    - Shortcut 'issuer' to give both issuer_cert and issuer_key in CERT_create


author: Paul Howarth <paul@city-fan.org> - 1.974-1
changelog:
  - Update to 1.974
    - New function peer_certificates to get the whole certificate chain; needs
      Net::SSLeay ≥ 1.58
    - Extended IO::Socket::Utils::CERT_asHash to provide way more information,
      like issuer information, cert and pubkey digests, all extensions, CRL
      distribution points and OCSP uri


author: Paul Howarth <paul@city-fan.org> - 1.975-1
changelog:
  - Update to 1.975
    - BEHAVIOR CHANGE: work around TEA misfeature on OS X built-in openssl, e.g.
      guarantee that only the explicitly-given CA or the openssl default CA will
      be used; this means that certificates inside the OS X keyring will no
      longer be used, because there is no way to control the use by openssl
      (e.g. certificate pinning etc.)
    - Make external tests run by default to make sure default CA works on all
      platforms; it skips automatically on network problems like timeouts or SSL
      interception, and can also use http(s)_proxy environment variables


author: Paul Howarth <paul@city-fan.org> - 1.978-1
changelog:
  - Update to 1.978
    - Added public prefix checking to verification of wildcard certificates, e.g.
      accept *.foo.com but not *.co.uk; see documentation of
      SSL_verifycn_publicsuffix and IO::Socket::SSL::PublicSuffix
    - Fix publicsuffix for IDNA, more tests with various IDNA libs
      (CPAN RT#94424)
    - Reuse result of IDN lib detection from PublicSuffix.pm in SSL.pm
    - Add more checks to external/usable_ca.t; now it is enough that at least one
      of the hosts verifies against the built-in CA store
    - Add openssl and Net::SSLeay version to diagnostics in load test
  - Switch preferred IDN back-end from Net::LibIDN to URI::_idna as per upstream,
    falling back to Net::IDN::Encode on older distributions
  - Add fix from upstream git to support building with Test::More < 0.88


author: Paul Howarth <paul@city-fan.org> - 1.979-1
changelog:
  - Update to 1.979
    - Hostname checking:
      - Configuration of 'leftmost' is renamed to 'full_label', but the old
        version is kept for compatibility reasons
      - Documentation of predefined schemes fixed to match reality


author: Paul Howarth <paul@city-fan.org> - 1.980-1
changelog:
  - Update to 1.980
    - Disable elliptic curve support for openssl 1.0.1d on 64-bit
      (http://rt.openssl.org/Ticket/Display.html?id=2975)
    - Fix certificate fingerprint calculation
  - Add patch to skip elliptic curve test for openssl 1.0.1d on 64-bit
  - Add patch to fix openssl version test


author: Paul Howarth <paul@city-fan.org> - 1.981-1
changelog:
  - Update to 1.981
    - Fix ecdhe test for openssl 1.0.1d (CPAN RT#95432)
    - Fix detection of openssl 1.0.1d (detected 1.0.1e instead)
    - New function can_ecdh in IO::Socket::SSL


author: Paul Howarth <paul@city-fan.org> - 1.983-1
changelog:
  - Update to 1.983
    - Fix public suffix handling: ajax.googleapis.com should be ok even if
      googleapis.com is in public suffix list (e.g. check one level less)
      (CPAN RT#95317)
    - usable_ca.t - update fingerprints after heartbleed attack
    - usable_ca.t - make sure we have usable CA for tested hosts in CA store


author: Paul Howarth <paul@city-fan.org> - 1.984-1
changelog:
  - Update to 1.984
    - Added OCSP support:
      - Needs Net::SSLeay ≥ 1.59
      - For usage see documentation of IO::Socket::SSL (examples and anything
        with OCSP in the name)
    - New tool util/analyze-ssl.pl, which is intended to help in debugging of SSL
      problems and to get information about capabilities of server; it works also
      as an example of how to use various features (like OCSP, SNI...)
    - Fix peer_certificates (returns leaf certificate only once on client side)
    - Added timeout for stop_SSL (either with Timeout or with the default timeout
      for IO::Socket)
    - Fix IO::Socket::SSL::Utils mapping between ASN1_TIME and time_t when local
      time is not GMT; use Net::SSLeay::ASN1_TIME_timet if available
    - Fix t/external/usable_ca.t for system with junk in CA files


author: Paul Howarth <paul@city-fan.org> - 1.985-1
changelog:
  - Update to 1.985
    - Make OCSP callback return 1 even if it was called on the server side
      because of bad setup of the socket; otherwise we get an endless calling of
      the OCSP callback
    - Consider an OCSP response that is not yet or no longer valid a soft error
      instead of a hard error
    - Fix skip in t/external/ocsp.t in case fingerprint does not match
    - Call EVP_PKEY_free not EVP_KEY_free in IO::Socket::SSL::Utils::KEY_free
      (CPAN RT#95633)
    - util/analyze.pl - with --show-chain check if chain with SNI is different
      from chain w/o SNI
  - Drop ExtUtils::MakeMaker version requirement


author: Paul Howarth <paul@city-fan.org> - 1.988-1
changelog:
  - Update to 1.988
    - Allow IPv4 in common name, because browsers allow this too; only for scheme
      www/http though, not for rfc2818 (because RC2818 does not allow this; in
      default scheme IPv6 and IPv4 are allowed in CN)
    - Fix handling of public suffix; add exemption for *.googleapis.com
      wildcard, which should not be allowed according to public suffix list but
      actually is used
    - Add hostname verification test based on older test of chromium, but change
      some of the test expectations because we don't want to support IP as SAN
      DNS and because we enforce a public suffix list (and thus *.co.uk should
      not be allowed)
    - Fix t/verify_hostname_standalone.t on systems without usable IDNA or IPv6
      (CPAN RT#95719)
    - Enable IPv6 support only if we have a usable inet_pton
    - Remove stale entries from MANIFEST
    - Add transparent support for DER and PKCS#12 files to specify cert and key,
      e.g. it will autodetect the format
    - If SSL_cert_file is PEM and no SSL_key_file is given it will check if the
      key is in SSL_cert_file too


author: Paul Howarth <paul@city-fan.org> - 1.990-1
changelog:
  - Update to 1.990
    - Added option SSL_ocsp_staple_callback to get the stapled OCSP response and
      verify it somewhere else
    - Try to fix warnings on Windows again (CPAN RT#95967)
    - Work around temporary OCSP error in t/external/ocsp.t


author: Paul Howarth <paul@city-fan.org> - 1.991-1
changelog:
  - Update to 1.991
    - New option SSL_OCSP_TRY_STAPLE to enforce staple request even if
      VERIFY_NONE
    - Work around for CPAN RT#96013 in peer_certificates


author: Paul Howarth <paul@city-fan.org> - 1.992-1
changelog:
  - Update to 1.992
    - Set $! to undef before doing IO (accept, read...); on Windows a connection
      reset could cause an SSL read error without setting $!, so make sure we
      don't keep the old value and maybe thus run into an endless loop


author: Paul Howarth <paul@city-fan.org> - 1.993-1
changelog:
  - Update to 1.993
    - Major rewrite of documentation, now in separate file
    - Rework error handling to distinguish between SSL errors and internal errors
      (like missing capabilities)
    - Fix handling of default_ca if given during the run of the program
      (Debian #750646)
    - util/analyze-ssl.pl - fix hostname check if SNI does not work


author: Paul Howarth <paul@city-fan.org> - 1.994-1
changelog:
  - Update to 1.994
    - IO::Socket::SSL can now be used as dual-use socket, e.g. start plain,
      upgrade to SSL and downgrade again all with the same object; see
      documentation of SSL_startHandshake and chapter Advanced Usage
    - Try to apply SSL_ca* even if verify_mode is 0, but don't complain if this
      fails; this is needed if one wants to explicitly verify OCSP lookups even
      if verification is otherwise off, because otherwise the signature check
      would fail (this is mostly useful for testing)
    - Reorder documentation of attributes for new, so that the more important
      ones are at the top


author: Paul Howarth <paul@city-fan.org> - 1.997-1
changelog:
  - Update to 1.997
    - Fix initialization and creation of OpenSSL-internals for perlcc
      compatibility (CPAN RT#95452)
    - Add refresh option for peer_certificate, so that it checks if the
      certificate changed in the mean time (on renegotiation)
    - Fix fingerprint checking - now applies only to top-most certificate
    - IO::Socket::SSL::Utils - accept extensions within CERT_create
    - Various documentation fixes


author: Paul Howarth <paul@city-fan.org> - 1.997-2
changelog:
  - Use system-wide default cipher list to support use of system-wide
    crypto policy (#1076390, #1127577, CPAN RT#97816)
    https://fedoraproject.org/wiki/Changes/CryptoPolicy


author: Paul Howarth <paul@city-fan.org> - 1.998-1
changelog:
  - Update to 1.998
    - Make client authentication work at the server side when SNI is in by use
      having CA path and other settings in all SSL contexts instead of only the
      main one (https://github.com/noxxi/p5-io-socket-ssl/pull/15)


author: Paul Howarth <paul@city-fan.org> - 1.999-1
changelog:
  - Update to 1.999
    - Make sure we don't use version 0.30 of IO::Socket::IP
    - Make sure that PeerHost is checked in all places where PeerAddr is checked,
      because these are synonyms and IO::Socket::IP prefers PeerHost while others
      prefer PeerAddr; also accept PeerService additionally to PeerPort
      (https://github.com/noxxi/p5-io-socket-ssl/issues/16)
    - Add ability to use client certificates and to overwrite hostname with
      util/analyze-ssl.pl


author: Paul Howarth <paul@city-fan.org> - 2.000-1
changelog:
  - Update to 2.000
    - Consider SSL3.0 as broken because of POODLE and disable it by default
    - Skip live tests without asking if environment NO_NETWORK_TESTING is set
    - Skip tests that require fork on non-default windows setups without proper
      fork (https://github.com/noxxi/p5-io-socket-ssl/pull/18)
  - Note that this package still uses system-default cipher and SSL versions,
    which may have SSL3.0 enabled


author: Paul Howarth <paul@city-fan.org> - 2.001-1
changelog:
  - Update to 2.001
    - Add SSL_OP_SINGLE_(DH|ECDH)_USE to default options to increase PFS security
    - Update external tests with currently expected fingerprints of hosts
    - Some fixes to make it still work on 5.8.1


author: Paul Howarth <paul@city-fan.org> - 2.002-1
changelog:
  - Update to 2.002
    - Fix check for (invalid) IPv4 when validating hostname against certificate;
      do not use inet_aton any longer because it can cause DNS lookups for
      malformed IP (CPAN RT#99448)
    - Update PublicSuffix with latest version from publicsuffix.org - lots of new
      top level domains
    - Add exception to PublicSuffix for s3.amazonaws.com (CPAN RT#99702)


author: Paul Howarth <paul@city-fan.org> - 2.006-1
changelog:
  - Update to 2.006
    - Make SSLv3 available even if the SSL library disables it by default in
      SSL_CTX_new (like done in LibreSSL); default will stay to disable SSLv3
      so this will be only done when setting SSL_version explicitly
    - Fix possible segmentation fault when trying to use an invalid certificate
    - Use only the ICANN part of the default public suffix list and not the
      private domains; this makes existing exceptions for s3.amazonaws.com and
      googleapis.com obsolete
    - Fix t/protocol_version.t to deal with OpenSSL installations that are
      compiled without SSLv3 support
    - Make (hopefully) non-blocking work on windows by using EWOULDBLOCK instead
      of EAGAIN; while this is the same on UNIX it is different on Windows and
      socket operations return there (WSA)EWOULDBLOCK and not EAGAIN
    - Enable non-blocking tests on Windows too
    - Make PublicSuffix::_default_data thread safe
    - Update PublicSuffix with latest list from publicsuffix.org
  - Note that this package still uses system-default cipher and SSL versions,
    which may have SSL3.0 enabled
  - Classify buildreqs by usage


author: Paul Howarth <paul@city-fan.org> - 2.007-1
changelog:
  - Update to 2.007
    - Make getline/readline fall back to super class if class is not sslified
      yet, i.e. behave the same as sysread, syswrite etc. (CPAN RT#100529)


author: Paul Howarth <paul@city-fan.org> - 2.008-1
changelog:
  - Update to 2.008
    - Work around recent OCSP verification errors for revoked.grc.com (badly
      signed OCSP response, Firefox also complains about it) in test
      t/external/ocsp.t
    - util/analyze.pl - report more details about preferred cipher for specific
      TLS versions


author: Paul Howarth <paul@city-fan.org> - 2.009-1
changelog:
  - Update to 2.009
    - Remove util/analyze.pl; this tool is now together with other SSL tools at
      https://github.com/noxxi/p5-ssl-tools
    - Added ALPN support (needs OpenSSL1.02, Net::SSLeay 1.56+) (CPAN RT#101452)


author: Paul Howarth <paul@city-fan.org> - 2.010-1
changelog:
  - Update to 2.010
    - New options SSL_client_ca_file and SSL_client_ca to let the server send the
      list of acceptable CAs for the client certificate
    - t/protocol_version.t - fix in case SSLv3 is not supported in Net::SSLeay
      (CPAN RT#101485)


author: Paul Howarth <paul@city-fan.org> - 2.011-1
changelog:
  - Update to 2.011
    - Fix t/ocsp.t - don't count on revoked.grc.com using OCSP stapling
      (CPAN RT#101855)
    - Added option 'purpose' to Utils::CERT_create to get better control of the
      certificate's purpose; default is 'server,client' for non-CA (contrary to
      only 'server' before)
    - Removed RC4 from default cipher suites on the server side
      (https://github.com/noxxi/p5-io-socket-ssl/issues/22)
    - Refactoring of some tests using Test::More
  - Note that this package still uses system-default cipher and SSL versions,
    which may have RC4 enabled
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.013-1
changelog:
  - Update to 2.013
    - Assign severities to internal error handling and make sure that follow-up
      errors like "configuration failed" or "certificate verify error" don't
      replace more specific "hostname verification failed" when reporting in
      sub errstr/$SSL_ERROR (CPAN RT#103423)
    - Enhanced documentation (https://github.com/noxxi/p5-io-socket-ssl/pull/26)


author: Paul Howarth <paul@city-fan.org> - 2.014-1
changelog:
  - Update to 2.014
    - Utils::CERT_create - work around problems with authorityInfoAccess, where
      OpenSSL i2v does not create the same string as v2i expects
    - Intercept - don't clone some specific extensions that only make sense with
      the original certificate


author: Paul Howarth <paul@city-fan.org> - 2.015-1
changelog:
  - Update to 2.015
    - Work around problem with IO::Socket::INET6 on Windows, by explicitly using
      Domain AF_INET in the tests (CPAN RT#104226)


author: Paul Howarth <paul@city-fan.org> - 2.016-1
changelog:
  - Update to 2.016
    - Add flag X509_V_FLAG_TRUSTED_FIRST by default if available in OpenSSL
      (since 1.02) and available with Net::SSLeay (CPAN RT#104759)
    - Work around hanging prompt() with older perl in Makefile.PL
      (CPAN RT#104731)
    - Make t/memleak_bad_handshake.t work on cygwin and other systems having
      /proc/pid/statm (CPAN RT#104659)
    - Add better debugging


author: Paul Howarth <paul@city-fan.org> - 2.018-1
changelog:
  - Update to 2.018
    - Checks for readability of files/dirs for certificates and CA no longer use
      -r because this is not safe when ACLs are used (CPAN RT#106295)
    - New method sock_certificate similar to peer_certificate (CPAN RT#105733)
    - get_fingerprint can now take optional certificate as argument and compute
      the fingerprint of it; useful in connection with sock_certificate
    - Check for both EWOULDBLOCK and EAGAIN since these codes are different on
      some platforms (CPAN RT#106573)
    - Enforce default verification scheme if nothing was specified, i.e. no
      longer just warn but accept; if really no verification is wanted, a scheme
      of 'none' must be explicitly specified
    - Support different cipher suites per SNI hosts
    - startssl.t failed on darwin with old openssl since server requested client
      certificate but offered also anon ciphers (CPAN RT#106687)
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.019-1
changelog:
  - Update to 2.019
    - Work around different behavior of getnameinfo from Socket and Socket6 by
      using a different wrapper depending on which module is used for IPv6
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.020-1
changelog:
  - Update to 2.020
    - Support multiple directories in SSL_ca_path (CPAN RT#106711); directories
      can be given as array or as string with a path separator
    - Typos fixed (https://github.com/noxxi/p5-io-socket-ssl/pull/34)
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.021-1
changelog:
  - Update to 2.021
    - Fixes for documentation and typos
    - Update PublicSuffix with latest version from publicsuffix.org
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.022-1
changelog:
  - Update to 2.022
    - Fix stringification of IPv6 inside subjectAltNames in Utils::CERT_asHash
      (CPAN RT#110253)


author: Paul Howarth <paul@city-fan.org> - 2.023-1
changelog:
  - Update to 2.023
    - OpenSSL 1.0.2f changed the behavior of SSL shutdown in case the TLS
      connection was not fully established, which somehow resulted in
      Net::SSLeay::shutdown returning 0 (i.e. keep trying) and hence an endless
      loop; it will now ignore this result in case the TLS connection was not
      yet established and consider the TLS connection closed instead
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.024-1
changelog:
  - Update to 2.024
    - Work around issue where the connect fails on systems having only a loopback
      interface and where IO::Socket::IP is used as super class (default when
      available)
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.025-1
changelog:
  - Update to 2.025
    - Resolved memleak if SSL_crl_file was used (CPAN RT#113257, CPAN RT#113530)
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 2.026-1
changelog:
  - Update to 2.026
    - Upstream's default cipher lists updated (we use system default though)
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.029-1
changelog:
  - Update to 2.029
    - Add del_session method to session cache
    - Use SSL_session_key as the real key for the cache and not some derivate of
      it, so that it works to remove the entry using the same key
  - BR: perl-generators


author: Paul Howarth <paul@city-fan.org> - 2.031-1
changelog:
  - Update to 2.031
    - Utils::CERT_create - don't add given extensions again if they were already
      added; Firefox croaks with sec_error_extension_value_invalid if (specific?)
      extensions are given twice
    - Assume that Net::SSLeay::P_PKCS12_load_file will return the CA certificates
      with the reverse order as in the PKCS12 file, because that's what it does
    - Support for creating ECC keys in Utils once supported by Net::SSLeay
    - Remove internal sub session_cache and access cache directly (faster)
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.032-1
changelog:
  - Update to 2.032
    - Set session id context only on the server side; even if the documentation
      for SSL_CTX_set_session_id_context makes clear that this function is server
      side only, it actually affects handling of session reuse on the client side
      too and can result in error "SSL3_GET_SERVER_HELLO:attempt to reuse session
      in different context" at the client


author: Paul Howarth <paul@city-fan.org> - 2.033-1
changelog:
  - Update to 2.033
    - Support for session ticket reuse over multiple contexts and processes (if
      supported by Net::SSLeay)
    - Small optimizations, like saving various Net::SSLeay constants into
      variables and access variables instead of calling the constant sub all the
      time
    - Make t/dhe.t work with openssl 1.1.0
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.034-1
changelog:
  - Update to 2.034
    - Move handling of global SSL arguments into creation of context, so that
      these get also applied when creating a context only
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.035-1
changelog:
  - Update to 2.035
    - Fixes for issues introduced in 2.034
      - Return with error in configure_SSL if context creation failed; this
        might otherwise result in a segmentation fault later
      - Apply builtin defaults before any (user configurable) global settings
        (i.e. done with set_defaults, set_default_context...) so that builtins
        don't replace user settings
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.037-1
changelog:
  - Update to 2.037
    - Disable OCSP support when Net::SSLeay 1.75..1.77 is used (CPAN RT#116795)
    - Fix session cache del_session: it freed the session but did not properly
      remove it from the cache; further reuse caused crash
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.038-1
changelog:
  - Update to 2.038
    - Restrict session ticket callback to Net::SSLeay 1.79+ since version before
      contains bug; add test for session reuse
    - Extend SSL fingerprint to pubkey digest, i.e. 'sha1$pub$xxxxxx....'
    - Fix t/external/ocsp.t to use different server (under my control) to check
      OCSP stapling
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.039-1
changelog:
  - Update to 2.039
    - OpenSSL 1.1.0c changed the behavior of SSL_read so that it now returns -1
      on EOF without proper SSL shutdown; since it looks like that this behavior
      will be kept at least for 1.1.1+, adapt to the changed API by treating
      errno=NOERR on SSL_ERROR_SYSCALL as EOF
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.040-1
changelog:
  - Update to 2.040
    - Fix detection of default CA path for OpenSSL 1.1.x
    - Utils::CERT_asHash now includes the signature algorithm used
    - Utils::CERT_asHash can now deal with large serial numbers
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.041-1
changelog:
  - Update to 2.041
    - Leave session ticket callback off for now until the needed patch is
      included in Net::SSLeay (see
      https://rt.cpan.org/Ticket/Display.html?id=116118#txn-1696146)
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.043-1
changelog:
  - Update to 2.043
    - Enable session ticket callback with Net::SSLeay ≥ 1.80
    - Make t/session_ticket.t work with OpenSSL 1.1.0; with this version the
      session no longer gets reused if it was not properly closed, which is now
      done using an explicit close by the client
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.044-1
changelog:
  - Update to 2.044
    - Protect various 'eval'-based capability detections at startup with a
      localized __DIE__ handler; this way, dynamically requiring IO::Socket::SSL
      as done by various third party software should cause less problems even if
      there is a global __DIE__ handler that does not properly deal with 'eval'
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.045-1
changelog:
  - Update to 2.045
    - Fixed memory leak caused by not destroying CREATED_IN_THIS_THREAD for SSL
      objects (GH#55)
    - Optimization: don't track SSL objects and CTX in *CREATED_IN_THIS_THREAD if
      perl is compiled without thread support
    - Small fix in t/protocol_version.t to use older versions of Net::SSLeay with
      openssl build without SSLv3 support
    - When setting SSL_keepSocketOnError to true the socket will not be closed on
      fatal error (GH#53, modified)
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.046-1
changelog:
  - Update to 2.046
    - Clean up everything in DESTROY and make sure to start with a fresh
      %{*self} in configure_SSL because it can happen that a GLOB gets used
      again without calling DESTROY
      (https://github.com/noxxi/p5-io-socket-ssl/issues/56)
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.047-1
changelog:
  - Update to 2.047
    - Better fix for problem which 2.046 tried to fix but broke LWP that way
  - Update patches as needed


author: Paul Howarth <paul@city-fan.org> - 2.048-1
changelog:
  - Update to 2.048
    - Fixed small memory leaks during destruction of socket and context
      (CPAN RT#120643)
  - Drop support for EOL distributions prior to F-13
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 2.049-1
changelog:
  - Update to 2.049
    - Fixed problem caused by typo in the context of session cache (GH#60)
    - Updated PublicSuffix information from publicsuffix.org


author: Paul Howarth <paul@city-fan.org> - 2.050-1
changelog:
  - Update to 2.050
    - Removed unnecessary settings of SSL_version and SSL_cipher_list from tests
    - protocol_version.t can now deal when TLS 1.0 and/or TLS 1.1 are not
      supported, as is the case with openssl versions in latest Debian (buster)


author: Paul Howarth <paul@city-fan.org> - 2.051-1
changelog:
  - Update to 2.051
    - syswrite: If SSL_write sets SSL_ERROR_SYSCALL but not $! (as seen with
      OpenSSL 1.1.0 on Windows), set $! to EPIPE to propagate a useful error up
      (GH#62)


author: Paul Howarth <paul@city-fan.org> - 2.052-1
changelog:
  - Update to 2.052
    - Disable NPN support if LibreSSL ≥ 2.6.1 is detected since they've replaced
      the functions with dummies instead of removing NPN completly or setting
      OPENSSL_NO_NEXTPROTONEG
    - t/01loadmodule.t shows more output helpful in debugging problems
    - Update fingerprints for external tests
    - Update documentation to make behavior of syswrite more clear


author: Paul Howarth <paul@city-fan.org> - 2.054-1
changelog:
  - Update to 2.054
    - Small behavior fixes
      - If SSL_fingerprint is used and matches, don't check for OCSP
      - Utils::CERT_create: Small fixes to properly specific purpose, ability to
        use predefined complex purpose but disable some features
    - Update PublicSuffix
    - Updates for documentation, especially regarding pitfalls with forking or
      using non-blocking sockets, spelling fixes
    - Test fixes and improvements
      - Stability improvements for live tests
      - Regenerate certificates in certs/ and make sure they are limited to the
        correct purpose; check in program used to generate certificates
      - Adjust tests since certificates have changed and some tests used
        certificates intended for client authentication as server certificates,
        which now no longer works


author: Paul Howarth <paul@city-fan.org> - 2.055-1
changelog:
  - Update to 2.055
    - Use SNI also if hostname was given all-uppercase
    - Utils::CERT_create: Don't add authority key for issuer since Chrome does
      not like this
    - Intercept:
      - Change behavior of code-based cache to better support synchronizing
        within multiprocess/threaded set-ups
      - Don't use counter for serial number but somehow base it on original
        certificate in order to avoid conflicts with reuse of serial numbers
        after restart
    - Better support platforms without IPv6 (CPAN RT#124431)
    - Spelling fixes in documentation (CPAN RT#124306)


author: Paul Howarth <paul@city-fan.org> - 2.056-1
changelog:
  - Update to 2.056
    - Intercept: Fix creation of serial number (basing it on binary digest
      instead of treating hex fingerprint as binary), allow use of own serial
      numbers again
    - t/io-socket-ip.t: Skip test if no IPv6 support on system (CPAN RT#124464)
    - Update PublicSuffix


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - Fix memory leak that occurred with explicit stop_SSL in connection with
      non-blocking sockets or timeout (CPAN RT#125867)
    - Fix redefine warnings in case Socket6 is installed but neither
      IO::Socket::IP nor IO::Socket::INET6 (CPAN RT#124963)
    - IO::Socket::SSL::Intercept - optional 'serial' argument can be starting
      number or callback to create serial number based on the original certificate
    - New function get_session_reused to check if a session got reused
    - IO::Socket::SSL::Utils::CERT_asHash: fingerprint_xxx now set to the correct
      value
    - Fix t/session_ticket.t: It failed with OpenSSL 1.1.* since this version
      expects the extKeyUsage of clientAuth in the client cert also to be allowed
      by the CA if CA uses extKeyUsage


author: Paul Howarth <paul@city-fan.org> - 2.059-1
changelog:
  - Update to 2.059 (bug #1610017)
    - Fix memory leak when CRLs are used (CPAN RT#125867)
    - Fix memory leak when using stop_SSL and threads
      (https://rt.cpan.org/Ticket/Display.html?id=125867#txn-1797132)


author: Petr Pisar <ppisar@redhat.com> - 2.059-2
changelog:
  - Adapt to OpenSSL 1.1.1, it requires patched Net-SSLeay (bug #1610017)
  - Enable tests (bug #1610017)


author: Paul Howarth <paul@city-fan.org> - 2.060-1
changelog:
  - Update to 2.060 (bug #1610017)
    - Support for TLS 1.3 with OpenSSL 1.1.1 (needs support in Net::SSLeay too);
      see also CPAN RT#126899
    - TLS 1.3 support is not complete yet for session resume


author: Daniel P. Berrange <berrange@redhat.com> - 0.0.3-5.fc12
changelog:
  - Fix auth against libvirt (rhbz #499594)
  - Fix confusion of VNC credentials (rhbz #499595)
  - Correct keyboard grab handling (rhbz #499362)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.20.0-13
changelog:
  - 1602470 - covscan fixes from upstream
  - 1632268 - cups-filters needs to obsolete ghostscript-cups and foomatic-filters
  - 1626996 - cups-filters: Sticky EOF behavior in glibc breaks descriptor concatenation using dup2


author: Daniel Kopecek <dkopecek@redhat.com> - 11-2
changelog:
  - Check that key derivation key is available
  - Delete remaining references to the removed http pin
  - Install cryptsetup and tpm2_pcrlist in the initramfs
  - Add device TCTI library to the initramfs
    Resolves: rhbz#1648004
    Resolves: rhbz#1650246


author: Paul Howarth <paul@city-fan.org> - 1.1-23
changelog:
  - Fix FTBFS due to missing buildreq perl-devel
  - Simplify find commands using -empty and -delete
  - Make %files list more explicit


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.2.D10-1mdk
changelog:
  - cvs references
  - splitted demo package
  - moved demo files to %{_datadir}/%{name}
  - only manual package requires stylebook-1.0b3
  - only demo package requires servletapi3


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.2.D14-1jpp
changelog:
  - 2.2.D14
  - javadoc into javadoc package
  - compat.jar into compat package
  - compat javadoc into compat-javadoc package


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.2.0-1jpp
changelog:
  - 2.2.0 final
  - versioned dir for javadoc
  - no dependencies for manual and javadoc packages
  - stricter dependency for compat and demo packages
  - fixed package confusion
  - adaptation for new servlet3 package
  - requires xerces-j1 instead of jaxp_parser
  - xml-apis jar now in required xml-commons-apis external package


author: Henri Gomez <hgomez@users.sourceforge.net> 2.3.1-2jpp
changelog:
  - fix built classpath (bsf, bcel are existing jpackage rpms),
  - add buildrequires for javacup and JLex


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.3.1-2jpp
changelog:
  - provides jaxp_transform_impl
  - requires jaxp_parser_impl
  - stylebook already requires xml-commons-apis
  - jaxp_parser_impl already requires xml-commons-apis
  - use sed instead of bash 2.x extension in link area to make spec compatible with distro using bash 1.1x


author: Ville Skyttä <ville.skytta at iki.fi> 2.4-0.D1.2jpp
changelog:
  - Remove xerces-j1 runtime dependency.
  - Add bcel, jlex, regexp to xsltc runtime requirements:
    <http://xml.apache.org/xalan-j/xsltc_usage.html>
  - Build with -Dbuild.compiler=modern (IBM 1.3.1) to avoid stylebook errors.
  - XSLTC now provides jaxp_transform_impl too.
  - Earlier changes by Henri, from unreleased 2.4-D1.1jpp:
      Mon Jul 15 2002 Henri Gomez <hgomez@users.sourceforge.net> 2.4-D1.1jpp
    - 2.4D1
    - use the jlex 1.2.5-5jpp (patched by Xalan/XSLTC team) rpm
    - use the stylebook-1.0-b3_xalan-2.jar included in source file till it will
      be packaged in jpackage
    - use jaxp_parser_impl (possibly xerces-j2) instead of xerces-j1 for docs
      generation, since it's tuned for stylebook-1.0-b3_xalan-2.jar
    - build and provide xsltc in a separate rpm


author: Ville Skyttä <ville.skytta at iki.fi> - 2.4.1-2jpp
changelog:
  - bsf -> oldbsf.
  - Use non-versioned jar in alternative, don't remove it on upgrade.
  - Remove hardcoded packager tag.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.5.1-1jpp
changelog:
  - Update to 2.5.1.
  - Fix jpackage-utils version in BuildRequires, add xerces-j2.
  - Non-versioned javadoc symlinking.
  - Add one missing epoch.
  - Clean up manifests from Class-Path's and other stuff we don't include.
  - xsltc no longer provides a jaxp_transform_impl because of huge classpath
    and general unsuitablity for production-use, system-installed transformer.
  - Own (ghost) %{_javadir}/jaxp_transform_impl.jar.
  - Remove alternatives in preun instead of postun.
  - Disable javadoc subpackage for now:
    <http://issues.apache.org/bugzilla/show_bug.cgi?id=20572>


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.5.2-1jpp
changelog:
  - Update to 2.5.2.
  - Re-enable javadocs, new style versionless symlink handling, crosslink
    with local J2SE javadocs.
  - Spec cleanups.


author: Gary Benson <gbenson@redhat.com> 0:2.6.0-2jpp_3fc
changelog:
  - Remove now-unnecessary workaround for #130162.
  - Rearrange how BC-compiled stuff is built and installed.


author: Gary Benson <gbenson at redhat.com> 0:2.6.0-3jpp_3fc
changelog:
  - Build on ia64, ppc64, s390 and s390x.
  - Switch to aot-compile-rpm (also BC-compiles xsltc and samples).


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:2.7.0-3jpp_1fc
changelog:
  - Merge with latest version from jpp.
  - Undo ExcludeArch since eclipse available for all arch-es.
  - Remove jars from sources for new upstream version.
  - Purge unused patches from previous release.
  - Conditional native compilation with GCJ.
  - Use NVR macros wherever possible.


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:2.7.0-5jpp.1
changelog:
  - Resync with latest from JPP.
  - Partially adopt new naming convention (.1 suffix).
  - Use ln and rm explicitly instead of core-utils in Requires(x).


author: Andrew Overholt <overholt@redhat.com> 0:2.7.1-6
changelog:
  - Fix filename of serializer.jar in xalan-j2's MANIFEST.MF
  - https://bugzilla.redhat.com/show_bug.cgi?id=718738


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.7.1-15
changelog:
  - Add NOTICE.txt file to subpackages
  - Remove bundled sources of other packages used to build javadocs


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:2.7.1-17
changelog:
  - Remove classpaths from manifests, resolves: rhbz#575635
  - Remove jlex from classpath
  - Fix source URL to archive.apache.org
  - Don't mix spaces and tabs in spec file
  - Fix end-of-line encoding of some documentation files


author: Petr Viktorin <pviktori@redhat.com> - 1.0.2-10
changelog:
  - Skip python2 tests to allow removing python2-unittest2 from the distribution
  - Fix workaround for allowing Python 2 for build


author: Petr Viktorin <pviktori@redhat.com> - 1.0.2-11
changelog:
  - Disable the python3 subpackage
    Functionality of funcsigs is available in Python 3's inspect module.


author: Tom Stellard <tstellar@redhat.com> - 5.0.1-11
changelog:
  - Remove conditionals to enable building only the llvm-libs package, we don't
    needs these for module builds.


author: Deepak Bhole <dbhole@redhat.com> 0:1.2.0-0.rc1.1jpp
changelog:
  - Change source zip, and build the ri jars
  - Use setup macro in prep
  - First version all under APL
  - New package name
  - Demo still not yet available under the APL; will be in an update


author: Vivek Lakshmanan <vivekl@redhat.com> 0:1.2.0-0.1.rc1.2jpp.1.fc7
changelog:
  - Use new naming convention
  - Add ASF2.0.txt as doc for api and main package
  - Remove post/postun magic for javadoc
  - Add BR on ant, xerces-j2 and xalan-j2
  - Add conditional patch to make the package build under ecj/gcj


author: Tomas Bzatek <tbzatek@redhat.com> - 0.2.1-2
changelog:
  - Added libarchive dependency for archive backend
  - Require new libsmbclient in order to get smb backend working again


author: David Zeuthen <davidz@redhat.com> - 0.2.3-9
changelog:
  - Ensure archive mounts are read-only and turn on thumbnailing on them
  - Update fuse threading patch


author: Alexander Larsson <alexl@redhat.com> - 1.0.2-2
changelog:
  - Don't return generic fallback icons for files,
    as this means custom mimetypes don't work (from svn)


author: David Zeuthen <davidz@redhat.com> - 1.2.1-3
changelog:
  - Clean up gdu patches and bump BR for gdu to 0.3
  - Avoiding showing volume for ignored mounts (#495033)


author: David Zeuthen <davidz@redhat.com> - 1.2.2-4
changelog:
  - Don't show drives that are supposed to be hidden (#498649)
  - Only automount if media or drive was just inserted - this fixes
    a problem with spurious automounts when partitioning/formatting


author: Tomas Bzatek <tbzatek@redhat.com> - 1.2.2-5
changelog:
  - Require separate libtalloc to fix libsmbclient
  - Ref the infos in next_files_finish (gnome #582195)
  - FTP: parse file sizes > 4GB correctly (#499286)
  - CDDA: allow query well-formed filenames only (#499266)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.3.3-2
changelog:
  - Fix gedit crashed with SEGV in strlen()
  - Fix SMB protocol not handled when opening from a bookmark (#509832)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.3.3-3
changelog:
  - Fix bad mount prefix stripping (part of #509612)
  - Fix gvfsd-sftp segfault when asking a question
  - Enable tar+xz in the archive mounter


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.0-4
changelog:
  - Fix Nautilus not displaying friendly icons for SSH-connected system (#526892)
  - Actually apply the logical partitions patch


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.0-5
changelog:
  - Don't always overwrite on trash restore
  - Separate "Safely Remove Drive" from "Eject"
  - Don't advertise can_poll for drives not using removable media
  - Disallow mounting empty drives
  - Disallow ejecting empty drives
  - Silently drop eject error messages when detaching drive


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.0-7
changelog:
  - HTTP: Support g_file_input_stream_query_info()
  - HTTP: Use libsoup header parsing function
  - Set correct MIME type for MTP music players


author: Tomas Bzatek <tbzatek@redhat.com> - 1.5.1-2
changelog:
  - Metadata fixes
  - SMB: Fix free space calculation for older samba servers
  - fuse: Fix setting timestamps


author: Tomas Bzatek <tbzatek@redhat.com> - 1.5.1-4
changelog:
  - Don't leak mount job operation (#552842)
  - Recognize gphoto2 cameras which don't implement get storageinfo (#552856)
  - ObexFTP: Use a private D-Bus connection for obex-data-server (#539347)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.8.0-2
changelog:
  - Fix threadsafety of closing channels
  - Fix d-bus messages leaks
  - Fix /dev symlink checks in gdu volume monitor


author: Ondrej Holy <oholy@redhat.com> - 1.25.2-2
changelog:
  - Move client libs into the own subpackage
  - Move gvfs tools into the own subpackage
  - Move gvfsd-fuse-tmpfiles.conf into fuse subpackage
  - Remove obsoleted expat-devel dependency
  - Remove obsoleted Group tags
  - Fix bogus dates


author: Danilo de Paula <ddepaula@redhat.com> - 2.12.0-11.el8
changelog:
  - Resolves: bz#1574406
    ([RHEL 8][qemu-kvm] Failed to find romfile "efi-virtio.rom")
  - Resolves: bz#1569675
    (Backwards compatibility of pc-*-rhel7.5.0 and older machine-types)
  - Resolves: bz#1576045
    (Fix build issue by using python3)
  - Resolves: bz#1571145
    (qemu-kvm segfaults on RHEL 8 when run guestfsd under TCG)


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 2.12.0-13.el8
changelog:
  - Resolves: bz#1508137
    ([IBM 8.0 FEAT] KVM: Interactive Bootloader (qemu))
  - Resolves: bz#1513558
    (Remove RHEL6 machine types)
  - Resolves: bz#1568600
    (pc-i440fx-rhel7.6.0 and pc-q35-rhel7.6.0 machine types (x86))
  - Resolves: bz#1570029
    ([IBM 8.0 FEAT] KVM: 3270 Connectivity - qemu part)
  - Resolves: bz#1578855
    (Enable Native Ceph support on non x86_64 CPUs)
  - Resolves: bz#1585651
    (RHEL 7.6 new pseries machine type (ppc64le))
  - Resolves: bz#1592337
    ([IBM 8.0 FEAT] KVM: CPU Model z14 ZR1 (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-14.el8
changelog:
  - kvm-vfio-pci-Default-display-option-to-off.patch [bz#1590511]
  - kvm-python-futurize-f-libfuturize.fixes.fix_print_with_i.patch [bz#1571533]
  - kvm-python-futurize-f-lib2to3.fixes.fix_except.patch [bz#1571533]
  - kvm-Revert-Defining-a-shebang-for-python-scripts.patch [bz#1571533]
  - kvm-spec-Fix-ambiguous-python-interpreter-name.patch [bz#1571533]
  - kvm-qemu-ga-blacklisting-guest-exec-and-guest-exec-statu.patch [bz#1518132]
  - kvm-redhat-rewrap-build_configure.sh-cmdline-for-the-rh-.patch
  - kvm-redhat-remove-the-VTD-LIVE_BLOCK_OPS-and-RHV-options.patch
  - kvm-redhat-fix-the-rh-env-prep-target-s-dependency-on-th.patch
  - kvm-redhat-remove-dead-code-related-to-s390-not-s390x.patch
  - kvm-redhat-sync-compiler-flags-from-the-spec-file-to-rh-.patch
  - kvm-redhat-sync-guest-agent-enablement-and-tcmalloc-usag.patch
  - kvm-redhat-fix-up-Python-3-dependency-for-building-QEMU.patch
  - kvm-redhat-fix-up-Python-dependency-for-SRPM-generation.patch
  - kvm-redhat-disable-glusterfs-dependency-support-temporar.patch
  - Resolves: bz#1518132
    (Ensure file access RPCs are disabled by default)
  - Resolves: bz#1571533
    (Convert qemu-kvm python scripts to python3)
  - Resolves: bz#1590511
    (Fails to start guest with Intel vGPU device)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-15.el8
changelog:
  - kvm-spapr-Add-ibm-max-associativity-domains-property.patch [bz#1599593]
  - kvm-Revert-spapr-Don-t-allow-memory-hotplug-to-memory-le.patch [bz#1599593]
  - kvm-simpletrace-Convert-name-from-mapping-record-to-str.patch [bz#1594969]
  - kvm-tests-fix-TLS-handshake-failure-with-TLS-1.3.patch [bz#1602403]
  - Resolves: bz#1594969
    (simpletrace.py fails when running with Python 3)
  - Resolves: bz#1599593
    (User can't hotplug memory to less memory numa node on rhel8)
  - Resolves: bz#1602403
    (test-crypto-tlssession unit test fails with assertions)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-16.el8
changelog:
  - kvm-spapr-Correct-inverted-test-in-spapr_pc_dimm_node.patch [bz#1601671]
  - kvm-osdep-powerpc64-align-memory-to-allow-2MB-radix-THP-.patch [bz#1601317]
  - kvm-RHEL-8.0-Add-pseries-rhel7.6.0-sxxm-machine-type.patch [bz#1595501]
  - kvm-i386-Helpers-to-encode-cache-information-consistentl.patch [bz#1597739]
  - kvm-i386-Add-cache-information-in-X86CPUDefinition.patch [bz#1597739]
  - kvm-i386-Initialize-cache-information-for-EPYC-family-pr.patch [bz#1597739]
  - kvm-i386-Add-new-property-to-control-cache-info.patch [bz#1597739]
  - kvm-i386-Clean-up-cache-CPUID-code.patch [bz#1597739]
  - kvm-i386-Populate-AMD-Processor-Cache-Information-for-cp.patch [bz#1597739]
  - kvm-i386-Add-support-for-CPUID_8000_001E-for-AMD.patch [bz#1597739]
  - kvm-i386-Fix-up-the-Node-id-for-CPUID_8000_001E.patch [bz#1597739]
  - kvm-i386-Enable-TOPOEXT-feature-on-AMD-EPYC-CPU.patch [bz#1597739]
  - kvm-i386-Remove-generic-SMT-thread-check.patch [bz#1597739]
  - kvm-i386-Allow-TOPOEXT-to-be-enabled-on-older-kernels.patch [bz#1597739]
  - Resolves: bz#1595501
    (Create pseries-rhel7.6.0-sxxm machine type)
  - Resolves: bz#1597739
    (AMD EPYC/Zen SMT support for KVM / QEMU guest (qemu-kvm))
  - Resolves: bz#1601317
    (RHEL8.0 - qemu patch to align memory to allow 2MB THP)
  - Resolves: bz#1601671
    (After rebooting guest,all the hot plug memory will be assigned to the 1st numa node.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-17.el8
changelog:
  - kvm-linux-headers-Update-to-include-KVM_CAP_S390_HPAGE_1.patch [bz#1610906]
  - kvm-s390x-Enable-KVM-huge-page-backing-support.patch [bz#1610906]
  - kvm-redhat-s390x-add-hpage-1-to-kvm.conf.patch [bz#1610906]
  - Resolves: bz#1610906
    ([IBM 8.0 FEAT] KVM: Huge Pages - libhugetlbfs Enablement - qemu-kvm part)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-18.el8
changelog:
  Mass import from RHEL 7.6 qemu-kvm-rhev, including fixes to the following BZs:

  - kvm-AArch64-Add-virt-rhel7.6-machine-type.patch [bz#1558723]
  - kvm-cpus-Fix-event-order-on-resume-of-stopped-guest.patch [bz#1566153]
  - kvm-qemu-img-Check-post-truncation-size.patch [bz#1523065]
  - kvm-vga-catch-depth-0.patch [bz#1575541]
  - kvm-Fix-x-hv-max-vps-compat-value-for-7.4-machine-type.patch [bz#1583959]
  - kvm-ccid-card-passthru-fix-regression-in-realize.patch [bz#1584984]
  - kvm-Use-4-MB-vram-for-cirrus.patch [bz#1542080]
  - kvm-spapr_pci-Remove-unhelpful-pagesize-warning.patch [bz#1505664]
  - kvm-rpm-Add-nvme-VFIO-driver-to-rw-whitelist.patch [bz#1416180]
  - kvm-qobject-Use-qobject_to-instead-of-type-cast.patch [bz#1557995]
  - kvm-qobject-Ensure-base-is-at-offset-0.patch [bz#1557995]
  - kvm-qobject-use-a-QObjectBase_-struct.patch [bz#1557995]
  - kvm-qobject-Replace-qobject_incref-QINCREF-qobject_decre.patch [bz#1557995]
  - kvm-qobject-Modify-qobject_ref-to-return-obj.patch [bz#1557995]
  - kvm-rbd-Drop-deprecated-drive-parameter-filename.patch [bz#1557995]
  - kvm-iscsi-Drop-deprecated-drive-parameter-filename.patch [bz#1557995]
  - kvm-block-Add-block-specific-QDict-header.patch [bz#1557995]
  - kvm-qobject-Move-block-specific-qdict-code-to-block-qdic.patch [bz#1557995]
  - kvm-block-Fix-blockdev-for-certain-non-string-scalars.patch [bz#1557995]
  - kvm-block-Fix-drive-for-certain-non-string-scalars.patch [bz#1557995]
  - kvm-block-Clean-up-a-misuse-of-qobject_to-in-.bdrv_co_cr.patch [bz#1557995]
  - kvm-block-Factor-out-qobject_input_visitor_new_flat_conf.patch [bz#1557995]
  - kvm-block-Make-remaining-uses-of-qobject-input-visitor-m.patch [bz#1557995]
  - kvm-block-qdict-Simplify-qdict_flatten_qdict.patch [bz#1557995]
  - kvm-block-qdict-Tweak-qdict_flatten_qdict-qdict_flatten_.patch [bz#1557995]
  - kvm-block-qdict-Clean-up-qdict_crumple-a-bit.patch [bz#1557995]
  - kvm-block-qdict-Simplify-qdict_is_list-some.patch [bz#1557995]
  - kvm-check-block-qdict-Rename-qdict_flatten-s-variables-f.patch [bz#1557995]
  - kvm-check-block-qdict-Cover-flattening-of-empty-lists-an.patch [bz#1557995]
  - kvm-block-Fix-blockdev-blockdev-add-for-empty-objects-an.patch [bz#1557995]
  - kvm-rbd-New-parameter-auth-client-required.patch [bz#1557995]
  - kvm-rbd-New-parameter-key-secret.patch [bz#1557995]
  - kvm-block-mirror-honor-ratelimit-again.patch [bz#1572856]
  - kvm-block-mirror-Make-cancel-always-cancel-pre-READY.patch [bz#1572856]
  - kvm-iotests-Add-test-for-cancelling-a-mirror-job.patch [bz#1572856]
  - kvm-iotests-Split-214-off-of-122.patch [bz#1518738]
  - kvm-block-Add-COR-filter-driver.patch [bz#1518738]
  - kvm-block-BLK_PERM_WRITE-includes-._UNCHANGED.patch [bz#1518738]
  - kvm-block-Add-BDRV_REQ_WRITE_UNCHANGED-flag.patch [bz#1518738]
  - kvm-block-Set-BDRV_REQ_WRITE_UNCHANGED-for-COR-writes.patch [bz#1518738]
  - kvm-block-quorum-Support-BDRV_REQ_WRITE_UNCHANGED.patch [bz#1518738]
  - kvm-block-Support-BDRV_REQ_WRITE_UNCHANGED-in-filters.patch [bz#1518738]
  - kvm-iotests-Clean-up-wrap-image-in-197.patch [bz#1518738]
  - kvm-iotests-Copy-197-for-COR-filter-driver.patch [bz#1518738]
  - kvm-iotests-Add-test-for-COR-across-nodes.patch [bz#1518738]
  - kvm-qemu-io-Use-purely-string-blockdev-options.patch [bz#1576598]
  - kvm-qemu-img-Use-only-string-options-in-img_open_opts.patch [bz#1576598]
  - kvm-iotests-Add-test-for-U-force-share-conflicts.patch [bz#1576598]
  - kvm-qemu-io-Drop-command-functions-return-values.patch [bz#1519617]
  - kvm-qemu-io-Let-command-functions-return-error-code.patch [bz#1519617]
  - kvm-qemu-io-Exit-with-error-when-a-command-failed.patch [bz#1519617]
  - kvm-iotests.py-Add-qemu_io_silent.patch [bz#1519617]
  - kvm-iotests-Let-216-make-use-of-qemu-io-s-exit-code.patch [bz#1519617]
  - kvm-qcow2-Repair-OFLAG_COPIED-when-fixing-leaks.patch [bz#1527085]
  - kvm-iotests-Repairing-error-during-snapshot-deletion.patch [bz#1527085]
  - kvm-block-Make-bdrv_is_writable-public.patch [bz#1588039]
  - kvm-qcow2-Do-not-mark-inactive-images-corrupt.patch [bz#1588039]
  - kvm-iotests-Add-case-for-a-corrupted-inactive-image.patch [bz#1588039]
  - kvm-main-loop-drop-spin_counter.patch [bz#1168213]
  - kvm-target-ppc-Factor-out-the-parsing-in-kvmppc_get_cpu_.patch [bz#1560847]
  - kvm-target-ppc-Don-t-require-private-l1d-cache-on-POWER8.patch [bz#1560847]
  - kvm-ppc-spapr_caps-Don-t-disable-cap_cfpc-on-POWER8-by-d.patch [bz#1560847]
  - kvm-qxl-fix-local-renderer-crash.patch [bz#1567733]
  - kvm-qemu-img-Amendment-support-implies-create_opts.patch [bz#1537956]
  - kvm-block-Add-Error-parameter-to-bdrv_amend_options.patch [bz#1537956]
  - kvm-qemu-option-Pull-out-Supported-options-print.patch [bz#1537956]
  - kvm-qemu-img-Add-print_amend_option_help.patch [bz#1537956]
  - kvm-qemu-img-Recognize-no-creation-support-in-o-help.patch [bz#1537956]
  - kvm-iotests-Test-help-option-for-unsupporting-formats.patch [bz#1537956]
  - kvm-iotests-Rework-113.patch [bz#1537956]
  - kvm-qemu-img-Resolve-relative-backing-paths-in-rebase.patch [bz#1569835]
  - kvm-iotests-Add-test-for-rebasing-with-relative-paths.patch [bz#1569835]
  - kvm-qemu-img-Special-post-backing-convert-handling.patch [bz#1527898]
  - kvm-iotests-Test-post-backing-convert-target-behavior.patch [bz#1527898]
  - kvm-migration-calculate-expected_downtime-with-ram_bytes.patch [bz#1564576]
  - kvm-sheepdog-Fix-sd_co_create_opts-memory-leaks.patch [bz#1513543]
  - kvm-qemu-iotests-reduce-chance-of-races-in-185.patch [bz#1513543]
  - kvm-blockjob-do-not-cancel-timer-in-resume.patch [bz#1513543]
  - kvm-nfs-Fix-error-path-in-nfs_options_qdict_to_qapi.patch [bz#1513543]
  - kvm-nfs-Remove-processed-options-from-QDict.patch [bz#1513543]
  - kvm-blockjob-drop-block_job_pause-resume_all.patch [bz#1513543]
  - kvm-blockjob-expose-error-string-via-query.patch [bz#1513543]
  - kvm-blockjob-Fix-assertion-in-block_job_finalize.patch [bz#1513543]
  - kvm-blockjob-Wrappers-for-progress-counter-access.patch [bz#1513543]
  - kvm-blockjob-Move-RateLimit-to-BlockJob.patch [bz#1513543]
  - kvm-blockjob-Implement-block_job_set_speed-centrally.patch [bz#1513543]
  - kvm-blockjob-Introduce-block_job_ratelimit_get_delay.patch [bz#1513543]
  - kvm-blockjob-Add-block_job_driver.patch [bz#1513543]
  - kvm-blockjob-Update-block-job-pause-resume-documentation.patch [bz#1513543]
  - kvm-blockjob-Improve-BlockJobInfo.offset-len-documentati.patch [bz#1513543]
  - kvm-job-Create-Job-JobDriver-and-job_create.patch [bz#1513543]
  - kvm-job-Rename-BlockJobType-into-JobType.patch [bz#1513543]
  - kvm-job-Add-JobDriver.job_type.patch [bz#1513543]
  - kvm-job-Add-job_delete.patch [bz#1513543]
  - kvm-job-Maintain-a-list-of-all-jobs.patch [bz#1513543]
  - kvm-job-Move-state-transitions-to-Job.patch [bz#1513543]
  - kvm-job-Add-reference-counting.patch [bz#1513543]
  - kvm-job-Move-cancelled-to-Job.patch [bz#1513543]
  - kvm-job-Add-Job.aio_context.patch [bz#1513543]
  - kvm-job-Move-defer_to_main_loop-to-Job.patch [bz#1513543]
  - kvm-job-Move-coroutine-and-related-code-to-Job.patch [bz#1513543]
  - kvm-job-Add-job_sleep_ns.patch [bz#1513543]
  - kvm-job-Move-pause-resume-functions-to-Job.patch [bz#1513543]
  - kvm-job-Replace-BlockJob.completed-with-job_is_completed.patch [bz#1513543]
  - kvm-job-Move-BlockJobCreateFlags-to-Job.patch [bz#1513543]
  - kvm-blockjob-Split-block_job_event_pending.patch [bz#1513543]
  - kvm-job-Add-job_event_.patch [bz#1513543]
  - kvm-job-Move-single-job-finalisation-to-Job.patch [bz#1513543]
  - kvm-job-Convert-block_job_cancel_async-to-Job.patch [bz#1513543]
  - kvm-job-Add-job_drain.patch [bz#1513543]
  - kvm-job-Move-.complete-callback-to-Job.patch [bz#1513543]
  - kvm-job-Move-job_finish_sync-to-Job.patch [bz#1513543]
  - kvm-job-Switch-transactions-to-JobTxn.patch [bz#1513543]
  - kvm-job-Move-transactions-to-Job.patch [bz#1513543]
  - kvm-job-Move-completion-and-cancellation-to-Job.patch [bz#1513543]
  - kvm-block-Cancel-job-in-bdrv_close_all-callers.patch [bz#1513543]
  - kvm-job-Add-job_yield.patch [bz#1513543]
  - kvm-job-Add-job_dismiss.patch [bz#1513543]
  - kvm-job-Add-job_is_ready.patch [bz#1513543]
  - kvm-job-Add-job_transition_to_ready.patch [bz#1513543]
  - kvm-job-Move-progress-fields-to-Job.patch [bz#1513543]
  - kvm-job-Introduce-qapi-job.json.patch [bz#1513543]
  - kvm-job-Add-JOB_STATUS_CHANGE-QMP-event.patch [bz#1513543]
  - kvm-job-Add-lifecycle-QMP-commands.patch [bz#1513543]
  - kvm-job-Add-query-jobs-QMP-command.patch [bz#1513543]
  - kvm-blockjob-Remove-BlockJob.driver.patch [bz#1513543]
  - kvm-iotests-Move-qmp_to_opts-to-VM.patch [bz#1513543]
  - kvm-qemu-iotests-Test-job-with-block-jobs.patch [bz#1513543]
  - kvm-vdi-Fix-vdi_co_do_create-return-value.patch [bz#1513543]
  - kvm-vhdx-Fix-vhdx_co_create-return-value.patch [bz#1513543]
  - kvm-job-Add-error-message-for-failing-jobs.patch [bz#1513543]
  - kvm-block-create-Make-x-blockdev-create-a-job.patch [bz#1513543]
  - kvm-qemu-iotests-Add-VM.get_qmp_events_filtered.patch [bz#1513543]
  - kvm-qemu-iotests-Add-VM.qmp_log.patch [bz#1513543]
  - kvm-qemu-iotests-Add-iotests.img_info_log.patch [bz#1513543]
  - kvm-qemu-iotests-Add-VM.run_job.patch [bz#1513543]
  - kvm-qemu-iotests-iotests.py-helper-for-non-file-protocol.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-206-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-207-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-210-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-211-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-212-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-213-for-blockdev-create-job.patch [bz#1513543]
  - kvm-block-create-Mark-blockdev-create-stable.patch [bz#1513543]
  - kvm-jobs-fix-stale-wording.patch [bz#1513543]
  - kvm-jobs-fix-verb-references-in-docs.patch [bz#1513543]
  - kvm-iotests-Fix-219-s-timing.patch [bz#1513543]
  - kvm-iotests-improve-pause_job.patch [bz#1513543]
  - kvm-rpm-Whitelist-copy-on-read-block-driver.patch [bz#1518738]
  - kvm-rpm-add-throttle-driver-to-rw-whitelist.patch [bz#1591076]
  - kvm-usb-host-skip-open-on-pending-postload-bh.patch [bz#1572851]
  - kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1574216]
  - kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1574216]
  - kvm-block-file-posix-Pass-FD-to-locking-helpers.patch [bz#1519144]
  - kvm-block-file-posix-File-locking-during-creation.patch [bz#1519144]
  - kvm-iotests-Add-creation-test-to-153.patch [bz#1519144]
  - kvm-vhost-user-add-Net-prefix-to-internal-state-structur.patch [bz#1526645]
  - kvm-virtio-support-setting-memory-region-based-host-noti.patch [bz#1526645]
  - kvm-vhost-user-support-receiving-file-descriptors-in-sla.patch [bz#1526645]
  - kvm-osdep-add-wait.h-compat-macros.patch [bz#1526645]
  - kvm-vhost-user-bridge-support-host-notifier.patch [bz#1526645]
  - kvm-vhost-allow-backends-to-filter-memory-sections.patch [bz#1526645]
  - kvm-vhost-user-allow-slave-to-send-fds-via-slave-channel.patch [bz#1526645]
  - kvm-vhost-user-introduce-shared-vhost-user-state.patch [bz#1526645]
  - kvm-vhost-user-support-registering-external-host-notifie.patch [bz#1526645]
  - kvm-libvhost-user-support-host-notifier.patch [bz#1526645]
  - kvm-block-Introduce-API-for-copy-offloading.patch [bz#1482537]
  - kvm-raw-Check-byte-range-uniformly.patch [bz#1482537]
  - kvm-raw-Implement-copy-offloading.patch [bz#1482537]
  - kvm-qcow2-Implement-copy-offloading.patch [bz#1482537]
  - kvm-file-posix-Implement-bdrv_co_copy_range.patch [bz#1482537]
  - kvm-iscsi-Query-and-save-device-designator-when-opening.patch [bz#1482537]
  - kvm-iscsi-Create-and-use-iscsi_co_wait_for_task.patch [bz#1482537]
  - kvm-iscsi-Implement-copy-offloading.patch [bz#1482537]
  - kvm-block-backend-Add-blk_co_copy_range.patch [bz#1482537]
  - kvm-qemu-img-Convert-with-copy-offloading.patch [bz#1482537]
  - kvm-qcow2-Fix-src_offset-in-copy-offloading.patch [bz#1482537]
  - kvm-iscsi-Don-t-blindly-use-designator-length-in-respons.patch [bz#1482537]
  - kvm-file-posix-Fix-EINTR-handling.patch [bz#1482537]
  - kvm-usb-storage-Add-rerror-werror-properties.patch [bz#1595180]
  - kvm-numa-clarify-error-message-when-node-index-is-out-of.patch [bz#1578381]
  - kvm-qemu-iotests-Update-026.out.nocache-reference-output.patch [bz#1528541]
  - kvm-qcow2-Free-allocated-clusters-on-write-error.patch [bz#1528541]
  - kvm-qemu-iotests-Test-qcow2-not-leaking-clusters-on-writ.patch [bz#1528541]
  - kvm-qemu-options-Add-missing-newline-to-accel-help-text.patch [bz#1586313]
  - kvm-xhci-fix-guest-triggerable-assert.patch [bz#1594135]
  - kvm-virtio-gpu-tweak-scanout-disable.patch [bz#1589634]
  - kvm-virtio-gpu-update-old-resource-too.patch [bz#1589634]
  - kvm-virtio-gpu-disable-scanout-when-backing-resource-is-.patch [bz#1589634]
  - kvm-block-Don-t-silently-truncate-node-names.patch [bz#1549654]
  - kvm-pr-helper-fix-socket-path-default-in-help.patch [bz#1533158]
  - kvm-pr-helper-fix-assertion-failure-on-failed-multipath-.patch [bz#1533158]
  - kvm-pr-manager-helper-avoid-SIGSEGV-when-writing-to-the-.patch [bz#1533158]
  - kvm-pr-manager-put-stubs-in-.c-file.patch [bz#1533158]
  - kvm-pr-manager-add-query-pr-managers-QMP-command.patch [bz#1533158]
  - kvm-pr-manager-helper-report-event-on-connection-disconn.patch [bz#1533158]
  - kvm-pr-helper-avoid-error-on-PR-IN-command-with-zero-req.patch [bz#1533158]
  - kvm-pr-helper-Rework-socket-path-handling.patch [bz#1533158]
  - kvm-pr-manager-helper-fix-memory-leak-on-event.patch [bz#1533158]
  - kvm-object-fix-OBJ_PROP_LINK_UNREF_ON_RELEASE-ambivalenc.patch [bz#1556678]
  - kvm-usb-hcd-xhci-test-add-a-test-for-ccid-hotplug.patch [bz#1556678]
  - kvm-Revert-usb-release-the-created-buses.patch [bz#1556678]
  - kvm-file-posix-Fix-creation-locking.patch [bz#1599335]
  - kvm-file-posix-Unlock-FD-after-creation.patch [bz#1599335]
  - kvm-ahci-trim-signatures-on-raise-lower.patch [bz#1584914]
  - kvm-ahci-fix-PxCI-register-race.patch [bz#1584914]
  - kvm-ahci-don-t-schedule-unnecessary-BH.patch [bz#1584914]
  - kvm-qcow2-Fix-qcow2_truncate-error-return-value.patch [bz#1595173]
  - kvm-block-Convert-.bdrv_truncate-callback-to-coroutine_f.patch [bz#1595173]
  - kvm-qcow2-Remove-coroutine-trampoline-for-preallocate_co.patch [bz#1595173]
  - kvm-block-Move-bdrv_truncate-implementation-to-io.c.patch [bz#1595173]
  - kvm-block-Use-tracked-request-for-truncate.patch [bz#1595173]
  - kvm-file-posix-Make-.bdrv_co_truncate-asynchronous.patch [bz#1595173]
  - kvm-block-Fix-copy-on-read-crash-with-partial-final-clus.patch [bz#1590640]
  - kvm-block-fix-QEMU-crash-with-scsi-hd-and-drive_del.patch [bz#1599515]
  - kvm-virtio-rng-process-pending-requests-on-DRIVER_OK.patch [bz#1576743]
  - kvm-file-posix-specify-expected-filetypes.patch [bz#1525829]
  - kvm-iotests-add-test-226-for-file-driver-types.patch [bz#1525829]
  - kvm-block-dirty-bitmap-add-lock-to-bdrv_enable-disable_d.patch [bz#1207657]
  - kvm-qapi-add-x-block-dirty-bitmap-enable-disable.patch [bz#1207657]
  - kvm-qmp-transaction-support-for-x-block-dirty-bitmap-ena.patch [bz#1207657]
  - kvm-qapi-add-x-block-dirty-bitmap-merge.patch [bz#1207657]
  - kvm-qapi-add-disabled-parameter-to-block-dirty-bitmap-ad.patch [bz#1207657]
  - kvm-block-dirty-bitmap-add-bdrv_enable_dirty_bitmap_lock.patch [bz#1207657]
  - kvm-dirty-bitmap-fix-double-lock-on-bitmap-enabling.patch [bz#1207657]
  - kvm-block-qcow2-bitmap-fix-free_bitmap_clusters.patch [bz#1207657]
  - kvm-qcow2-add-overlap-check-for-bitmap-directory.patch [bz#1207657]
  - kvm-blockdev-enable-non-root-nodes-for-backup-source.patch [bz#1207657]
  - kvm-iotests-add-222-to-test-basic-fleecing.patch [bz#1207657]
  - kvm-qcow2-Remove-dead-check-on-ret.patch [bz#1207657]
  - kvm-block-Move-request-tracking-to-children-in-copy-offl.patch [bz#1207657]
  - kvm-block-Fix-parameter-checking-in-bdrv_co_copy_range_i.patch [bz#1207657]
  - kvm-block-Honour-BDRV_REQ_NO_SERIALISING-in-copy-range.patch [bz#1207657]
  - kvm-backup-Use-copy-offloading.patch [bz#1207657]
  - kvm-block-backup-disable-copy-offloading-for-backup.patch [bz#1207657]
  - kvm-iotests-222-Don-t-run-with-luks.patch [bz#1207657]
  - kvm-block-io-fix-copy_range.patch [bz#1207657]
  - kvm-block-split-flags-in-copy_range.patch [bz#1207657]
  - kvm-block-add-BDRV_REQ_SERIALISING-flag.patch [bz#1207657]
  - kvm-block-backup-fix-fleecing-scheme-use-serialized-writ.patch [bz#1207657]
  - kvm-nbd-server-Reject-0-length-block-status-request.patch [bz#1207657]
  - kvm-nbd-server-fix-trace.patch [bz#1207657]
  - kvm-nbd-server-refactor-NBDExportMetaContexts.patch [bz#1207657]
  - kvm-nbd-server-add-nbd_meta_empty_or_pattern-helper.patch [bz#1207657]
  - kvm-nbd-server-implement-dirty-bitmap-export.patch [bz#1207657]
  - kvm-qapi-new-qmp-command-nbd-server-add-bitmap.patch [bz#1207657]
  - kvm-docs-interop-add-nbd.txt.patch [bz#1207657]
  - kvm-nbd-server-introduce-NBD_CMD_CACHE.patch [bz#1207657]
  - kvm-nbd-server-Silence-gcc-false-positive.patch [bz#1207657]
  - kvm-nbd-server-Fix-dirty-bitmap-logic-regression.patch [bz#1207657]
  - kvm-nbd-server-fix-nbd_co_send_block_status.patch [bz#1207657]
  - kvm-nbd-client-Add-x-dirty-bitmap-to-query-bitmap-from-s.patch [bz#1207657]
  - kvm-iotests-New-test-223-for-exporting-dirty-bitmap-over.patch [bz#1207657]
  - kvm-hw-char-serial-Only-retry-if-qemu_chr_fe_write-retur.patch [bz#1592817]
  - kvm-hw-char-serial-retry-write-if-EAGAIN.patch [bz#1592817]
  - kvm-throttle-groups-fix-hang-when-group-member-leaves.patch [bz#1535914]
  - kvm-Disable-aarch64-devices-reappeared-after-2.12-rebase.patch [bz#1586357]
  - kvm-Disable-split-irq-device.patch [bz#1586357]
  - kvm-Disable-AT24Cx-i2c-eeprom.patch [bz#1586357]
  - kvm-Disable-CAN-bus-devices.patch [bz#1586357]
  - kvm-Disable-new-superio-devices.patch [bz#1586357]
  - kvm-Disable-new-pvrdma-device.patch [bz#1586357]
  - kvm-qdev-add-HotplugHandler-post_plug-callback.patch [bz#1607891]
  - kvm-virtio-scsi-fix-hotplug-reset-vs-event-race.patch [bz#1607891]
  - kvm-e1000-Fix-tso_props-compat-for-82540em.patch [bz#1608778]
  - kvm-slirp-correct-size-computation-while-concatenating-m.patch [bz#1586255]
  - kvm-s390x-sclp-fix-maxram-calculation.patch [bz#1595740]
  - kvm-redhat-Make-gitpublish-profile-the-default-one.patch [bz#1425820]
  - Resolves: bz#1168213
    (main-loop: WARNING: I/O thread spun for 1000 iterations while doing stream block device.)
  - Resolves: bz#1207657
    (RFE: QEMU Incremental live backup - push and pull modes)
  - Resolves: bz#1416180
    (QEMU VFIO based block driver for NVMe devices)
  - Resolves: bz#1425820
    (Improve QEMU packaging layout with modularization of the block layer)
  - Resolves: bz#1482537
    ([RFE] qemu-img copy-offloading (convert command))
  - Resolves: bz#1505664
    ("qemu-kvm: System page size 0x1000000 is not enabled in page_size_mask (0x11000). Performance may be slow" show up while using hugepage as guest's memory)
  - Resolves: bz#1513543
    ([RFE] Add block job to create format on a storage device)
  - Resolves: bz#1518738
    (Add 'copy-on-read' filter driver for use with blockdev-add)
  - Resolves: bz#1519144
    (qemu-img: image locking doesn't cover image creation)
  - Resolves: bz#1519617
    (The exit code should be non-zero when qemu-io reports an error)
  - Resolves: bz#1523065
    ("qemu-img resize" should fail to decrease the size of logical partition/lvm/iSCSI image with raw format)
  - Resolves: bz#1525829
    (can not boot up a scsi-block passthrough disk via -blockdev with error "cannot get SG_IO version number: Operation not supported.  Is this a SCSI device?")
  - Resolves: bz#1526645
    ([Intel 7.6 FEAT] vHost Data Plane Acceleration (vDPA) - vhost user client - qemu-kvm-rhev)
  - Resolves: bz#1527085
    (The copied flag should be updated during  '-r leaks')
  - Resolves: bz#1527898
    ([RFE] qemu-img should leave cluster unallocated if it's read as zero throughout the backing chain)
  - Resolves: bz#1528541
    (qemu-img check reports tons of leaked clusters after re-start nfs service to resume writing data in guest)
  - Resolves: bz#1533158
    (QEMU support for libvirtd restarting qemu-pr-helper)
  - Resolves: bz#1535914
    (Disable io throttling for one member disk of a group during io will induce the other one hang with io)
  - Resolves: bz#1537956
    (RFE: qemu-img amend should list the true supported options)
  - Resolves: bz#1542080
    (Qemu core dump at cirrus_invalidate_region)
  - Resolves: bz#1549654
    (Reject node-names which would be truncated by the block layer commands)
  - Resolves: bz#1556678
    (Hot plug usb-ccid for the 2nd time with the same ID as the 1st time failed)
  - Resolves: bz#1557995
    (QAPI schema for RBD storage misses the 'password-secret' option)
  - Resolves: bz#1558723
    (Create RHEL-7.6 QEMU machine type for AArch64)
  - Resolves: bz#1560847
    ([Power8][FW b0320a_1812.861][rhel7.5rc2 3.10.0-861.el7.ppc64le][qemu-kvm-{ma,rhev}-2.10.0-21.el7_5.1.ppc64le] KVM guest does not default to ori type flush even with pseries-rhel7.5.0-sxxm)
  - Resolves: bz#1564576
    (Pegas 1.1 - Require to backport qemu-kvm patch that fixes expected_downtime calculation during migration)
  - Resolves: bz#1566153
    (IOERROR pause code lost after resuming a VM while I/O error is still present)
  - Resolves: bz#1567733
    (qemu abort when migrate during guest reboot)
  - Resolves: bz#1569835
    (qemu-img get wrong backing file path after rebasing image with relative path)
  - Resolves: bz#1572851
    (Core dumped after migration when with usb-host)
  - Resolves: bz#1572856
    ('block-job-cancel' can not cancel a "drive-mirror" job)
  - Resolves: bz#1574216
    (CVE-2018-3639 qemu-kvm-rhev: hw: cpu: speculative store bypass [rhel-7.6])
  - Resolves: bz#1575541
    (qemu core dump while installing win10 guest)
  - Resolves: bz#1576598
    (Segfault in qemu-io and qemu-img with -U --image-opts force-share=off)
  - Resolves: bz#1576743
    (virtio-rng hangs when running on recent (2.x) QEMU versions)
  - Resolves: bz#1578381
    (Error message need update when specify numa distance with node index >=128)
  - Resolves: bz#1583959
    (Incorrect vcpu count limit for 7.4 machine types for windows guests)
  - Resolves: bz#1584914
    (SATA emulator lags and hangs)
  - Resolves: bz#1584984
    (Vm starts failed with 'passthrough' smartcard)
  - Resolves: bz#1586255
    (CVE-2018-11806 qemu-kvm-rhev: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])
  - Resolves: bz#1586313
    (-smp option is not easily found in the output of qemu help)
  - Resolves: bz#1586357
    (Disable new devices in 2.12)
  - Resolves: bz#1588039
    (Possible assertion failure in qemu when a corrupted image is used during an incoming migration)
  - Resolves: bz#1589634
    (Migration failed when rebooting guest with multiple virtio videos)
  - Resolves: bz#1590640
    (qemu-kvm: block/io.c:1098: bdrv_co_do_copy_on_readv: Assertion `skip_bytes < pnum' failed.)
  - Resolves: bz#1591076
    (The driver of 'throttle' is not whitelisted)
  - Resolves: bz#1592817
    (Retrying on serial_xmit if the pipe is broken may compromise the Guest)
  - Resolves: bz#1594135
    (system_reset many times linux guests cause qemu process Aborted)
  - Resolves: bz#1595173
    (blockdev-create is blocking)
  - Resolves: bz#1595180
    (Can't set rerror/werror with usb-storage)
  - Resolves: bz#1595740
    (RHEL-Alt-7.6 - qemu has error during migration of larger guests)
  - Resolves: bz#1599335
    (Image creation locking is too tight and is not properly released)
  - Resolves: bz#1599515
    (qemu core-dump with aio_read via hmp (util/qemu-thread-posix.c:64: qemu_mutex_lock_impl: Assertion `mutex->initialized' failed))
  - Resolves: bz#1607891
    (Hotplug events are sometimes lost with virtio-scsi + iothread)
  - Resolves: bz#1608778
    (qemu/migration: migrate failed from RHEL.7.6 to RHEL.7.5 with e1000-82540em)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-20.el8
changelog:
  - kvm-migration-stop-compressing-page-in-migration-thread.patch [bz#1594384]
  - kvm-migration-stop-compression-to-allocate-and-free-memo.patch [bz#1594384]
  - kvm-migration-stop-decompression-to-allocate-and-free-me.patch [bz#1594384]
  - kvm-migration-detect-compression-and-decompression-error.patch [bz#1594384]
  - kvm-migration-introduce-control_save_page.patch [bz#1594384]
  - kvm-migration-move-some-code-to-ram_save_host_page.patch [bz#1594384]
  - kvm-migration-move-calling-control_save_page-to-the-comm.patch [bz#1594384]
  - kvm-migration-move-calling-save_zero_page-to-the-common-.patch [bz#1594384]
  - kvm-migration-introduce-save_normal_page.patch [bz#1594384]
  - kvm-migration-remove-ram_save_compressed_page.patch [bz#1594384]
  - kvm-migration-block-dirty-bitmap-fix-memory-leak-in-dirt.patch [bz#1594384]
  - kvm-migration-fix-saving-normal-page-even-if-it-s-been-c.patch [bz#1594384]
  - kvm-migration-update-index-field-when-delete-or-qsort-RD.patch [bz#1594384]
  - kvm-migration-introduce-decompress-error-check.patch [bz#1594384]
  - kvm-migration-Don-t-activate-block-devices-if-using-S.patch [bz#1594384]
  - kvm-migration-not-wait-RDMA_CM_EVENT_DISCONNECTED-event-.patch [bz#1594384]
  - kvm-migration-block-dirty-bitmap-fix-dirty_bitmap_load.patch [bz#1594384]
  - kvm-s390x-add-RHEL-7.6-machine-type-for-ccw.patch [bz#1595718]
  - kvm-s390x-cpumodel-default-enable-bpb-and-ppa15-for-z196.patch [bz#1595718]
  - kvm-linux-headers-asm-s390-kvm.h-header-sync.patch [bz#1612938]
  - kvm-s390x-kvm-add-etoken-facility.patch [bz#1612938]
  - Resolves: bz#1594384
    (2.12 migration fixes)
  - Resolves: bz#1595718
    (Add ppa15/bpb to the default cpu model for z196 and higher in the 7.6 s390-ccw-virtio machine)
  - Resolves: bz#1612938
    (Add etoken support to qemu-kvm for s390x KVM guests)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-22.el8
changelog:
  - Fix an issue with the build_configure script.
  - Resolves: bz#1425820
    (Improve QEMU packaging layout with modularization of the block layer)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-24.el8
changelog:
  - kvm-Add-qemu-keymap-to-qemu-kvm-common.patch [bz#1593117]
  - Resolves: bz#1593117
    (add qemu-keymap utility)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-25.el8
changelog:
  - kvm-Migration-TLS-Fix-crash-due-to-double-cleanup.patch [bz#1594384]
  - Resolves: bz#1594384
    (2.12 migration fixes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-26.el8
changelog:
  - kvm-redhat-remove-extra-in-rhel_rhev_conflicts-macro.patch [bz#1618752]
  - Resolves: bz#1618752
    (qemu-kvm can't be installed in RHEL-8 as it Conflicts with itself.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-27.el8
changelog:
  - kvm-Fix-libusb-1.0.22-deprecated-libusb_set_debug-with-l.patch [bz#1622656]
  - Resolves: bz#1622656
    (qemu-kvm fails to build due to libusb_set_debug being deprecated)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-28.el8
changelog:
  - kvm-e1000e-Do-not-auto-clear-ICR-bits-which-aren-t-set-i.patch [bz#1596024]
  - kvm-e1000e-Prevent-MSI-MSI-X-storms.patch [bz#1596024]
  - kvm-Drop-build_configure.sh-and-Makefile.local-files.patch []
  - kvm-Fix-subject-line-in-.gitpublish.patch []
  - Resolves: bz#1596024
    (The network link can't be detected on guest when the guest uses e1000e model type)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-29.el8
changelog:
  - kvm-target-i386-sev-fix-memory-leaks.patch [bz#1615717]
  - kvm-i386-Fix-arch_query_cpu_model_expansion-leak.patch [bz#1615717]
  - kvm-redhat-Update-build-configuration.patch [bz#1573156]
  - Resolves: bz#1573156
    (Update build configure for QEMU 2.12.0)
  - Resolves: bz#1615717
    (Memory leaks)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-30.el8
changelog:
  - kvm-redhat-Disable-vhost-crypto.patch [bz#1625668]
  - Resolves: bz#1625668
    (Decide if we should disable 'vhost-crypto' or not)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-31.el8
changelog:
  - kvm-i386-Disable-TOPOEXT-by-default-on-cpu-host.patch [bz#1619804]
  - kvm-redhat-enable-opengl-add-build-and-runtime-deps.patch [bz#1618412]
  - Resolves: bz#1618412
    (Enable opengl (for intel vgpu display))
  - Resolves: bz#1619804
    (kernel panic in init_amd_cacheinfo)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-32.el8
changelog:
  - kvm-Re-enable-disabled-Hyper-V-enlightenments.patch [bz#1625185]
  - kvm-Fix-annocheck-issues.patch [bz#1624164]
  - kvm-exec-check-that-alignment-is-a-power-of-two.patch [bz#1630746]
  - kvm-curl-Make-sslverify-off-disable-host-as-well-as-peer.patch [bz#1575925]
  - Resolves: bz#1575925
    ("SSL: no alternative certificate subject name matches target host name" error even though sslverify = off)
  - Resolves: bz#1624164
    (Review annocheck distro flag failures in qemu-kvm)
  - Resolves: bz#1625185
    (Re-enable disabled Hyper-V enlightenments)
  - Resolves: bz#1630746
    (qemu_ram_mmap: Assertion `is_power_of_2(align)' failed)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-33.el8
changelog:
  - kvm-migration-postcopy-Clear-have_listen_thread.patch [bz#1608765]
  - kvm-migration-cleanup-in-error-paths-in-loadvm.patch [bz#1608765]
  - kvm-jobs-change-start-callback-to-run-callback.patch [bz#1632939]
  - kvm-jobs-canonize-Error-object.patch [bz#1632939]
  - kvm-jobs-add-exit-shim.patch [bz#1632939]
  - kvm-block-commit-utilize-job_exit-shim.patch [bz#1632939]
  - kvm-block-mirror-utilize-job_exit-shim.patch [bz#1632939]
  - kvm-jobs-utilize-job_exit-shim.patch [bz#1632939]
  - kvm-block-backup-make-function-variables-consistently-na.patch [bz#1632939]
  - kvm-jobs-remove-ret-argument-to-job_completed-privatize-.patch [bz#1632939]
  - kvm-jobs-remove-job_defer_to_main_loop.patch [bz#1632939]
  - kvm-block-commit-add-block-job-creation-flags.patch [bz#1632939]
  - kvm-block-mirror-add-block-job-creation-flags.patch [bz#1632939]
  - kvm-block-stream-add-block-job-creation-flags.patch [bz#1632939]
  - kvm-block-commit-refactor-commit-to-use-job-callbacks.patch [bz#1632939]
  - kvm-block-mirror-don-t-install-backing-chain-on-abort.patch [bz#1632939]
  - kvm-block-mirror-conservative-mirror_exit-refactor.patch [bz#1632939]
  - kvm-block-stream-refactor-stream-to-use-job-callbacks.patch [bz#1632939]
  - kvm-tests-blockjob-replace-Blockjob-with-Job.patch [bz#1632939]
  - kvm-tests-test-blockjob-remove-exit-callback.patch [bz#1632939]
  - kvm-tests-test-blockjob-txn-move-.exit-to-.clean.patch [bz#1632939]
  - kvm-jobs-remove-.exit-callback.patch [bz#1632939]
  - kvm-qapi-block-commit-expose-new-job-properties.patch [bz#1632939]
  - kvm-qapi-block-mirror-expose-new-job-properties.patch [bz#1632939]
  - kvm-qapi-block-stream-expose-new-job-properties.patch [bz#1632939]
  - kvm-block-backup-qapi-documentation-fixup.patch [bz#1632939]
  - kvm-blockdev-document-transactional-shortcomings.patch [bz#1632939]
  - Resolves: bz#1608765
    (After postcopy migration,  do savevm and loadvm, guest hang and call trace)
  - Resolves: bz#1632939
    (qemu blockjobs other than backup do not support job-finalize or job-dismiss)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-34.el8
changelog:
  - kvm-seccomp-allow-sched_setscheduler-with-SCHED_IDLE-pol.patch [bz#1618356]
  - kvm-seccomp-use-SIGSYS-signal-instead-of-killing-the-thr.patch [bz#1618356]
  - kvm-seccomp-prefer-SCMP_ACT_KILL_PROCESS-if-available.patch [bz#1618356]
  - kvm-configure-require-libseccomp-2.2.0.patch [bz#1618356]
  - kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618356]
  - kvm-memory-cleanup-side-effects-of-memory_region_init_fo.patch [bz#1600365]
  - Resolves: bz#1600365
    (QEMU core dumped when hotplug memory exceeding host hugepages and with discard-data=yes)
  - Resolves: bz#1618356
    (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-35.el8
changelog:
  - kvm-redhat-make-the-plugins-executable.patch [bz#1638304]
  - Resolves: bz#1638304
    (the driver packages lack all the library Requires)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-36.el8
changelog:
  - kvm-check-Only-test-ivshm-when-it-is-compiled-in.patch [bz#1621817]
  - kvm-Disable-ivshmem.patch [bz#1621817]
  - kvm-mirror-Fail-gracefully-for-source-target.patch [bz#1637963]
  - kvm-commit-Add-top-node-base-node-options.patch [bz#1637970]
  - kvm-qemu-iotests-Test-commit-with-top-node-base-node.patch [bz#1637970]
  - Resolves: bz#1621817
    (Disable IVSHMEM in RHEL 8)
  - Resolves: bz#1637963
    (Segfault on 'blockdev-mirror' with same node as source and target)
  - Resolves: bz#1637970
    (allow using node-names with block-commit)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-37.el8
changelog:
  - kvm-block-for-jobs-do-not-clear-user_paused-until-after-.patch [bz#1635583]
  - kvm-iotests-Add-failure-matching-to-common.qemu.patch [bz#1635583]
  - kvm-block-iotest-to-catch-abort-on-forced-blockjob-cance.patch [bz#1635583]
  - Resolves: bz#1635583
    (Quitting VM causes qemu core dump once the block mirror job paused for no enough target space)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-38.el8
changelog:
  - kvm-Revert-hw-acpi-build-build-SRAT-memory-affinity-stru.patch [bz#1609235]
  - kvm-add-udev-kvm-check.patch [bz#1552663]
  - kvm-aio-posix-Don-t-count-ctx-notifier-as-progress-when-.patch [bz#1623085]
  - kvm-aio-Do-aio_notify_accept-only-during-blocking-aio_po.patch [bz#1623085]
  - kvm-aio-posix-fix-concurrent-access-to-poll_disable_cnt.patch [bz#1632622]
  - kvm-aio-posix-compute-timeout-before-polling.patch [bz#1632622]
  - kvm-aio-posix-do-skip-system-call-if-ctx-notifier-pollin.patch [bz#1632622]
  - kvm-intel-iommu-send-PSI-always-even-if-across-PDEs.patch [bz#1450712]
  - kvm-intel-iommu-remove-IntelIOMMUNotifierNode.patch [bz#1450712]
  - kvm-intel-iommu-add-iommu-lock.patch [bz#1450712]
  - kvm-intel-iommu-only-do-page-walk-for-MAP-notifiers.patch [bz#1450712]
  - kvm-intel-iommu-introduce-vtd_page_walk_info.patch [bz#1450712]
  - kvm-intel-iommu-pass-in-address-space-when-page-walk.patch [bz#1450712]
  - kvm-intel-iommu-trace-domain-id-during-page-walk.patch [bz#1450712]
  - kvm-util-implement-simple-iova-tree.patch [bz#1450712]
  - kvm-intel-iommu-rework-the-page-walk-logic.patch [bz#1450712]
  - kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1633928]
  - Resolves: bz#1450712
    (Booting nested guest with vIOMMU, the assigned network devices can not receive packets (qemu))
  - Resolves: bz#1552663
    (81-kvm-rhel.rules is no longer part of initscripts)
  - Resolves: bz#1609235
    (Win2016 guest can't recognize pc-dimm hotplugged to node 0)
  - Resolves: bz#1623085
    (VM doesn't boot from HD)
  - Resolves: bz#1632622
    (~40% virtio_blk disk performance drop for win2012r2 guest when comparing qemu-kvm-rhev-2.12.0-9 with qemu-kvm-rhev-2.12.0-12)
  - Resolves: bz#1633928
    (CVE-2018-3639 qemu-kvm: hw: cpu: speculative store bypass [rhel-8.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-39.el8
changelog:
  - kvm-linux-headers-update.patch [bz#1508142]
  - kvm-s390x-cpumodel-Set-up-CPU-model-for-AP-device-suppor.patch [bz#1508142]
  - kvm-s390x-kvm-enable-AP-instruction-interpretation-for-g.patch [bz#1508142]
  - kvm-s390x-ap-base-Adjunct-Processor-AP-object-model.patch [bz#1508142]
  - kvm-s390x-vfio-ap-Introduce-VFIO-AP-device.patch [bz#1508142]
  - kvm-s390-doc-detailed-specifications-for-AP-virtualizati.patch [bz#1508142]
  - Resolves: bz#1508142
    ([IBM 8.0 FEAT] KVM: Guest-dedicated Crypto Adapters - qemu part)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-40.el8
changelog:
  - kvm-vnc-call-sasl_server_init-only-when-required.patch [bz#1609327]
  - kvm-nbd-server-fix-NBD_CMD_CACHE.patch [bz#1636142]
  - kvm-nbd-fix-NBD_FLAG_SEND_CACHE-value.patch [bz#1636142]
  - kvm-test-bdrv-drain-bdrv_drain-works-with-cross-AioConte.patch [bz#1637976]
  - kvm-block-Use-bdrv_do_drain_begin-end-in-bdrv_drain_all.patch [bz#1637976]
  - kvm-block-Remove-recursive-parameter-from-bdrv_drain_inv.patch [bz#1637976]
  - kvm-block-Don-t-manually-poll-in-bdrv_drain_all.patch [bz#1637976]
  - kvm-tests-test-bdrv-drain-bdrv_drain_all-works-in-corout.patch [bz#1637976]
  - kvm-block-Avoid-unnecessary-aio_poll-in-AIO_WAIT_WHILE.patch [bz#1637976]
  - kvm-block-Really-pause-block-jobs-on-drain.patch [bz#1637976]
  - kvm-block-Remove-bdrv_drain_recurse.patch [bz#1637976]
  - kvm-test-bdrv-drain-Add-test-for-node-deletion.patch [bz#1637976]
  - kvm-block-Drain-recursively-with-a-single-BDRV_POLL_WHIL.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-node-deletion-in-subtree-recurs.patch [bz#1637976]
  - kvm-block-Don-t-poll-in-parent-drain-callbacks.patch [bz#1637976]
  - kvm-test-bdrv-drain-Graph-change-through-parent-callback.patch [bz#1637976]
  - kvm-block-Defer-.bdrv_drain_begin-callback-to-polling-ph.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-that-bdrv_drain_invoke-doesn-t-.patch [bz#1637976]
  - kvm-block-Allow-AIO_WAIT_WHILE-with-NULL-ctx.patch [bz#1637976]
  - kvm-block-Move-bdrv_drain_all_begin-out-of-coroutine-con.patch [bz#1637976]
  - kvm-block-ignore_bds_parents-parameter-for-drain-functio.patch [bz#1637976]
  - kvm-block-Allow-graph-changes-in-bdrv_drain_all_begin-en.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-graph-changes-in-drain_all-sect.patch [bz#1637976]
  - kvm-block-Poll-after-drain-on-attaching-a-node.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-bdrv_append-to-drained-node.patch [bz#1637976]
  - kvm-block-linux-aio-acquire-AioContext-before-qemu_laio_.patch [bz#1637976]
  - kvm-util-async-use-qemu_aio_coroutine_enter-in-co_schedu.patch [bz#1637976]
  - kvm-job-Fix-nested-aio_poll-hanging-in-job_txn_apply.patch [bz#1637976]
  - kvm-job-Fix-missing-locking-due-to-mismerge.patch [bz#1637976]
  - kvm-blockjob-Wake-up-BDS-when-job-becomes-idle.patch [bz#1637976]
  - kvm-aio-wait-Increase-num_waiters-even-in-home-thread.patch [bz#1637976]
  - kvm-test-bdrv-drain-Drain-with-block-jobs-in-an-I-O-thre.patch [bz#1637976]
  - kvm-test-blockjob-Acquire-AioContext-around-job_cancel_s.patch [bz#1637976]
  - kvm-job-Use-AIO_WAIT_WHILE-in-job_finish_sync.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-AIO_WAIT_WHILE-in-completion-ca.patch [bz#1637976]
  - kvm-block-Add-missing-locking-in-bdrv_co_drain_bh_cb.patch [bz#1637976]
  - kvm-block-backend-Add-.drained_poll-callback.patch [bz#1637976]
  - kvm-block-backend-Fix-potential-double-blk_delete.patch [bz#1637976]
  - kvm-block-backend-Decrease-in_flight-only-after-callback.patch [bz#1637976]
  - kvm-blockjob-Lie-better-in-child_job_drained_poll.patch [bz#1637976]
  - kvm-block-Remove-aio_poll-in-bdrv_drain_poll-variants.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-nested-poll-in-bdrv_drain_poll_.patch [bz#1637976]
  - kvm-job-Avoid-deadlocks-in-job_completed_txn_abort.patch [bz#1637976]
  - kvm-test-bdrv-drain-AIO_WAIT_WHILE-in-job-.commit-.abort.patch [bz#1637976]
  - kvm-test-bdrv-drain-Fix-outdated-comments.patch [bz#1637976]
  - kvm-block-Use-a-single-global-AioWait.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-draining-job-source-child-and-p.patch [bz#1637976]
  - kvm-qemu-img-Fix-assert-when-mapping-unaligned-raw-file.patch [bz#1639374]
  - kvm-iotests-Add-test-221-to-catch-qemu-img-map-regressio.patch [bz#1639374]
  - Resolves: bz#1609327
    (qemu-kvm[37046]: Could not find keytab file: /etc/qemu/krb5.tab: Unknown error 49408)
  - Resolves: bz#1636142
    (qemu NBD_CMD_CACHE flaws impacting non-qemu NBD clients)
  - Resolves: bz#1637976
    (Crashes and hangs with iothreads vs. block jobs)
  - Resolves: bz#1639374
    (qemu-img map 'Aborted (core dumped)' when specifying a plain file)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-41.el8
changelog:
  - kvm-block-rbd-pull-out-qemu_rbd_convert_options.patch [bz#1635585]
  - kvm-block-rbd-Attempt-to-parse-legacy-filenames.patch [bz#1635585]
  - kvm-block-rbd-add-deprecation-documentation-for-filename.patch [bz#1635585]
  - kvm-block-rbd-add-iotest-for-rbd-legacy-keyvalue-filenam.patch [bz#1635585]
  - Resolves: bz#1635585
    (rbd json format of 7.6 is incompatible with 7.5)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-42.el8
changelog:
  - kvm-luks-Allow-share-rw-on.patch [bz#1629701]
  - kvm-redhat-reenable-gluster-support.patch [bz#1599340]
  - kvm-redhat-bump-libusb-requirement.patch [bz#1627970]
  - Resolves: bz#1599340
    (Reenable glusterfs in qemu-kvm once BZ#1567292 gets fixed)
  - Resolves: bz#1627970
    (symbol lookup error: /usr/libexec/qemu-kvm: undefined symbol: libusb_set_option)
  - Resolves: bz#1629701
    ("share-rw=on" does not work for luks format image - Fast Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-43
changelog:
  - kvm-configure-add-test-for-libudev.patch [bz#1636185]
  - kvm-qga-linux-report-disk-serial-number.patch [bz#1636185]
  - kvm-qga-linux-return-disk-device-in-guest-get-fsinfo.patch [bz#1636185]
  - kvm-qemu-error-introduce-error-warn-_report_once.patch [bz#1625173]
  - kvm-intel-iommu-start-to-use-error_report_once.patch [bz#1625173]
  - kvm-intel-iommu-replace-more-vtd_err_-traces.patch [bz#1625173]
  - kvm-intel_iommu-introduce-vtd_reset_caches.patch [bz#1625173]
  - kvm-intel_iommu-better-handling-of-dmar-state-switch.patch [bz#1625173]
  - kvm-intel_iommu-move-ce-fetching-out-when-sync-shadow.patch [bz#1625173 bz#1629616]
  - kvm-intel_iommu-handle-invalid-ce-for-shadow-sync.patch [bz#1625173 bz#1629616]
  - kvm-block-remove-bdrv_dirty_bitmap_make_anon.patch [bz#1518989]
  - kvm-block-simplify-code-around-releasing-bitmaps.patch [bz#1518989]
  - kvm-hbitmap-Add-advance-param-to-hbitmap_iter_next.patch [bz#1518989]
  - kvm-test-hbitmap-Add-non-advancing-iter_next-tests.patch [bz#1518989]
  - kvm-block-dirty-bitmap-Add-bdrv_dirty_iter_next_area.patch [bz#1518989]
  - kvm-blockdev-backup-add-bitmap-argument.patch [bz#1518989]
  - kvm-dirty-bitmap-switch-assert-fails-to-errors-in-bdrv_m.patch [bz#1518989]
  - kvm-dirty-bitmap-rename-bdrv_undo_clear_dirty_bitmap.patch [bz#1518989]
  - kvm-dirty-bitmap-make-it-possible-to-restore-bitmap-afte.patch [bz#1518989]
  - kvm-blockdev-rename-block-dirty-bitmap-clear-transaction.patch [bz#1518989]
  - kvm-qapi-add-transaction-support-for-x-block-dirty-bitma.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-add-user_locked-status-checker.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-fix-merge-permissions.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-allow-clear-on-disabled-bitmaps.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-prohibit-enable-disable-on-locke.patch [bz#1518989]
  - kvm-block-backup-prohibit-backup-from-using-in-use-bitma.patch [bz#1518989]
  - kvm-nbd-forbid-use-of-frozen-bitmaps.patch [bz#1518989]
  - kvm-bitmap-Update-count-after-a-merge.patch [bz#1518989]
  - kvm-iotests-169-drop-deprecated-autoload-parameter.patch [bz#1518989]
  - kvm-block-qcow2-improve-error-message-in-qcow2_inactivat.patch [bz#1518989]
  - kvm-bloc-qcow2-drop-dirty_bitmaps_loaded-state-variable.patch [bz#1518989]
  - kvm-dirty-bitmaps-clean-up-bitmaps-loading-and-migration.patch [bz#1518989]
  - kvm-iotests-improve-169.patch [bz#1518989]
  - kvm-iotests-169-add-cases-for-source-vm-resuming.patch [bz#1518989]
  - kvm-pc-dimm-turn-alignment-assert-into-check.patch [bz#1630116]
  - Resolves: bz#1518989
    (RFE: QEMU Incremental live backup)
  - Resolves: bz#1625173
    ([NVMe Device Assignment] Guest could not boot up with q35+iommu)
  - Resolves: bz#1629616
    (boot guest with q35+vIOMMU+ device assignment, qemu terminal shows "qemu-kvm: VFIO_UNMAP_DMA: -22" when return assigned network devices from vfio driver to ixgbe in guest)
  - Resolves: bz#1630116
    (pc_dimm_get_free_addr: assertion failed: (QEMU_ALIGN_UP(address_space_start, align) == address_space_start))
  - Resolves: bz#1636185
    ([RFE] Report disk device name and serial number (qemu-guest-agent on Linux))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-44
changelog:
  - kvm-block-Make-more-block-drivers-compile-time-configura.patch [bz#1598842 bz#1598842]
  - kvm-RHEL8-Add-disable-configure-options-to-qemu-spec-fil.patch [bz#1598842]
  - Resolves: bz#1598842
    (Compile out unused block drivers)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-45
changelog:
  - kvm-target-ppc-add-basic-support-for-PTCR-on-POWER9.patch [bz#1639069]
  - kvm-linux-headers-Update-for-nested-KVM-HV-downstream-on.patch [bz#1639069]
  - kvm-target-ppc-Add-one-reg-id-for-ptcr.patch [bz#1639069]
  - kvm-ppc-spapr_caps-Add-SPAPR_CAP_NESTED_KVM_HV.patch [bz#1639069]
  - kvm-Re-enable-CONFIG_HYPERV_TESTDEV.patch [bz#1651195]
  - kvm-qxl-use-guest_monitor_config-for-local-renderer.patch [bz#1610163]
  - kvm-Declare-cirrus-vga-as-deprecated.patch [bz#1651994]
  - kvm-Do-not-build-bluetooth-support.patch [bz#1654651]
  - kvm-vfio-helpers-Fix-qemu_vfio_open_pci-crash.patch [bz#1645840]
  - kvm-balloon-Allow-multiple-inhibit-users.patch [bz#1650272]
  - kvm-Use-inhibit-to-prevent-ballooning-without-synchr.patch [bz#1650272]
  - kvm-vfio-Inhibit-ballooning-based-on-group-attachment-to.patch [bz#1650272]
  - kvm-vfio-ccw-pci-Allow-devices-to-opt-in-for-ballooning.patch [bz#1650272]
  - kvm-vfio-pci-Handle-subsystem-realpath-returning-NULL.patch [bz#1650272]
  - kvm-vfio-pci-Fix-failure-to-close-file-descriptor-on-err.patch [bz#1650272]
  - kvm-postcopy-Synchronize-usage-of-the-balloon-inhibitor.patch [bz#1650272]
  - Resolves: bz#1610163
    (guest shows border blurred screen with some resolutions when qemu boot with -device qxl-vga ,and guest on rhel7.6 has no  such question)
  - Resolves: bz#1639069
    ([IBM 8.0 FEAT] POWER9 - Nested virtualization in RHEL8.0 KVM for ppc64le - qemu-kvm side)
  - Resolves: bz#1645840
    (Qemu core dump when hotplug nvme:// drive via -blockdev)
  - Resolves: bz#1650272
    (Ballooning is incompatible with vfio assigned devices, but not prevented)
  - Resolves: bz#1651195
    (Re-enable hyperv-testdev device)
  - Resolves: bz#1651994
    (Declare the "Cirrus VGA" device emulation of QEMU as deprecated in RHEL8)
  - Resolves: bz#1654651
    (Qemu: hw: bt: keep bt/* objects from building [rhel-8.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-46
changelog:
  - kvm-qcow2-Give-the-refcount-cache-the-minimum-possible-s.patch [bz#1656507]
  - kvm-docs-Document-the-new-default-sizes-of-the-qcow2-cac.patch [bz#1656507]
  - kvm-qcow2-Fix-Coverity-warning-when-calculating-the-refc.patch [bz#1656507]
  - kvm-include-Add-IEC-binary-prefixes-in-qemu-units.h.patch [bz#1656507]
  - kvm-qcow2-Options-documentation-fixes.patch [bz#1656507]
  - kvm-include-Add-a-lookup-table-of-sizes.patch [bz#1656507]
  - kvm-qcow2-Make-sizes-more-humanly-readable.patch [bz#1656507]
  - kvm-qcow2-Avoid-duplication-in-setting-the-refcount-cach.patch [bz#1656507]
  - kvm-qcow2-Assign-the-L2-cache-relatively-to-the-image-si.patch [bz#1656507]
  - kvm-qcow2-Increase-the-default-upper-limit-on-the-L2-cac.patch [bz#1656507]
  - kvm-qcow2-Resize-the-cache-upon-image-resizing.patch [bz#1656507]
  - kvm-qcow2-Set-the-default-cache-clean-interval-to-10-min.patch [bz#1656507]
  - kvm-qcow2-Explicit-number-replaced-by-a-constant.patch [bz#1656507]
  - kvm-block-backend-Set-werror-rerror-defaults-in-blk_new.patch [bz#1657637]
  - kvm-qcow2-Fix-cache-clean-interval-documentation.patch [bz#1656507]
  - Resolves: bz#1656507
    ([RHEL.8] qcow2 cache is too small)
  - Resolves: bz#1657637
    (Wrong werror default for -device drive=<node-name>)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-47
changelog:
  - kvm-Disable-CONFIG_IPMI-and-CONFIG_I2C-for-ppc64.patch [bz#1640044]
  - kvm-Disable-CONFIG_CAN_BUS-and-CONFIG_CAN_SJA1000.patch [bz#1640042]
  - Resolves: bz#1640042
    (Disable CONFIG_CAN_BUS and CONFIG_CAN_SJA1000 config switches)
  - Resolves: bz#1640044
    (Disable CONFIG_I2C and CONFIG_IPMI in default-configs/ppc64-softmmu.mak)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-48
changelog:
  - kvm-redhat-use-autopatch-instead-of-PATCHAPPLY.patch [bz#1613128]
  - kvm-redhat-Removing-some-unused-build-flags-in-the-spec-.patch [bz#1613128]
  - kvm-redhat-Fixing-rhev-ma-conflicts.patch [bz#1613126]
  - kvm-redhat-Remove-_smp_mflags-cleanup-workaround-for-s39.patch [bz#1613128]
  - kvm-redhat-Removing-dead-code-from-the-spec-file.patch [bz#1613128]
  - kvm-i386-Add-stibp-flag-name.patch [bz#1639446]
  - kvm-Add-functional-acceptance-tests-infrastructure.patch [bz#1655807]
  - kvm-scripts-qemu.py-allow-adding-to-the-list-of-extra-ar.patch [bz#1655807]
  - kvm-Acceptance-tests-add-quick-VNC-tests.patch [bz#1655807]
  - kvm-scripts-qemu.py-introduce-set_console-method.patch [bz#1655807]
  - kvm-Acceptance-tests-add-Linux-kernel-boot-and-console-c.patch [bz#1655807]
  - kvm-Bootstrap-Python-venv-for-tests.patch [bz#1655807]
  - kvm-Acceptance-tests-add-make-rule-for-running-them.patch [bz#1655807]
  - Resolves: bz#1613126
    (Check and fix qemu-kvm-rhev and qemu-kvm-ma conflicts in qemu-kvm for rhel-8)
  - Resolves: bz#1613128
    (Spec file clean up)
  - Resolves: bz#1639446
    (Cross migration from RHEL7.5 to RHEL8 shouldn't fail with cpu flag stibp [qemu-kvm])
  - Resolves: bz#1655807
    (Backport avocado-qemu tests for QEMU 2.12)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> -
changelog:
  - kvm-redhat-enable-tpmdev-passthrough.patch [bz#1654486]
  - Resolves: bz#1654486
    ([RFE] enable TPM passthrough at compile time (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-51
changelog:
  - kvm-Add-edk2-Requires-to-qemu-kvm.patch [bz#1654276]
  - Resolves: bz#1654276
    (qemu-kvm: Should depend on the architecture-appropriate guest firmware)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-51.el8
changelog:
  - kvm-x86-host-phys-bits-limit-option.patch [bz#1598284]
  - kvm-rhel-Set-host-phys-bits-limit-48-on-rhel-machine-typ.patch [bz#1598284]
  - kvm-i386-do-not-migrate-MSR_SMI_COUNT-on-machine-types-2.patch [bz#1659565]
  - kvm-pc-x-migrate-smi-count-to-PC_RHEL_COMPAT.patch [bz#1659565]
  - kvm-slow-train-kvm-clear-out-KVM_ASYNC_PF_DELIVERY_AS_PF.patch [bz#1656829]
  - Resolves: bz#1598284
    ([Intel 8.0 Alpha] physical bits should  < 48  when host with 5level paging &EPT5 and qemu command with "-cpu qemu64" parameters.)
  - Resolves: bz#1656829
    (8->7 migration failed: qemu-kvm: error: failed to set MSR 0x4b564d02 to 0x27fc13285)
  - Resolves: bz#1659565
    (machine type: required compat flag x-migrate-smi-count=off)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-53.el8
changelog:
  - kvm-ui-add-qapi-parser-for-display.patch [bz#1652871]
  - kvm-ui-switch-trivial-displays-to-qapi-parser.patch [bz#1652871]
  - kvm-qapi-Add-rendernode-display-option-for-egl-headless.patch [bz#1652871]
  - kvm-ui-Allow-specifying-rendernode-display-option-for-eg.patch [bz#1652871]
  - kvm-qapi-add-query-display-options-command.patch [bz#1652871]
  - Resolves: bz#1652871
    (QEMU doesn't expose rendernode option for egl-headless display type)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-63.el8_0.1
changelog:
  - kvm-device_tree-Fix-integer-overflowing-in-load_device_t.patch [bz#1693116]
  - Resolves: bz#1693116
    (CVE-2018-20815 qemu-kvm: QEMU: device_tree: heap buffer overflow while loading device tree blob [rhel-8.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-63.el8.0.0.2
changelog:
  - kvm-target-i386-define-md-clear-bit-rhev.patch [bz#1704545]
  - Resolves: bz#1704545
    (CVE-2018-12126 virt:rhel/qemu-kvm: hardware: Microarchitectural Store Buffer Data Sampling [rhel-8.0.0.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-64.el8.0.0.2
changelog:
  - Bump release version to fix the versioning problem (zstream release lower than ystream).
  - Resolves: bz#1704545
    (CVE-2018-12126 virt:rhel/qemu-kvm: hardware: Microarchitectural Store Buffer Data Sampling [rhel-8.0.0.z])


author: Milan Zazrivec <mzazrivec@redhat.com> 2.1.1-1
changelog:
  - 1002041 - don't upload crash file if over the size limit or the upload is
    disabled
  - Bumping package versions for 2.1.


author: Jan Dobes 2.4.1-1
changelog:
  - Pulling updated *.po translations from Zanata.
  - Bumping package versions for 2.4.
  - Bumping package versions for 2.3.
  - Bumping package versions for 2.2.


author: Jan Dobes 2.5.2-1
changelog:
  - fixing warning
  - do not evaluate Makefile
  - do not keep this file in git
  - pulling *.po translations from Zanata
  - fixing current *.po translations


author: Tomas Kasparek <tkasparek@redhat.com> 2.5.5-1
changelog:
  - updating copyright years
  - Regenerating .po and .pot files for spacewalk-abrt.
  - Updating .po translations from Zanata


author: Gennadii Altukhov <galt@redhat.com> 2.6.1-1
changelog:
  - Regenerating .po and .pot files for spacewalk-abrt.
  - Updating .po translations from Zanata
  - Bumping package versions for 2.6.


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-23
changelog:
  - Fix a bug tha caused cloud-init to fail as a result of trying
    to rename bonds.
    Resolves: rhbz#1512247


author: Ryan McCabe <rmccabe@redhat.com> 0.7.9-24
changelog:
  - Set DHCP_HOSTNAME on Azure to allow for the hostname to be
    published correctly when bouncing the network.
    Resolves: rhbz#1434109


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-2.el7
changelog:
  - Revert "remove 'tee' command from logging configuration" [bz#1626117]
  - Resolves: rhbz#1626117]
    (cloud-init-0.7.9-9 doesn't feed cloud-init-output.log)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-3.el8
changelog:
  - ci-Adding-systemd-mount-options-to-wait-for-cloud-init.patch [bz#1615599]
  - ci-Azure-Ignore-NTFS-mount-errors-when-checking-ephemer.patch [bz#1615599]
  - ci-azure-Add-reported-ready-marker-file.patch [bz#1615599]
  - ci-Adding-disk_setup-to-rhel-cloud.cfg.patch [bz#1615599]
  - Resolves: bz#1615599
    ([Azure] cloud-init fails to mount /dev/sdb1 after stop(deallocate)&&start VM)


author: <> - 18.2-4.el8
changelog:
  - ci-Enable-cloud-init-by-default-on-vmware.patch [bz#1644335]
  - Resolves: bz#1644335
    ([ESXi][RHEL8.0]Enable cloud-init by default on VMware)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-5.el8
changelog:
  - ci-Fix-string-missmatch-when-mounting-ntfs.patch [bz#1664227]
  - Resolves: bz#1664227
    ([Azure]String missmatch causes the /dev/sdb1 mounting failed after stop&start VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 18.2-6.el8
changelog:
  - ci-net-Make-sysconfig-renderer-compatible-with-Network-.patch [bz#1602784]
  - Resolves: bz#1602784
    (cloud-init: Sometimes image boots fingerprints is configured, there's a network device present but it's not configured)


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.7-14
changelog:
  - Update to JWS 5.0.2 distribution
  - Resolves: rhbz#1658846 CVE-2018-8034 pki-servlet-container: tomcat: host name verification missing in WebSocket client
  - Resolves: rhbz#1579614 CVE-2018-8014 pki-servlet-container: tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins
  - Resolves: rhbz#1619232 - CVE-2018-8037 pki-servlet-container: tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up
  - Resolves: rhbz#1641874 - CVE-2018-11784 pki-servlet-container: tomcat: Open redirect in default servlet


author: Rex Dieter <rdieter@fedoraproject.org> - 1.13.1-1
changelog:
  - 1.13.1
  - use %ldconfig_scriptlets %make_build %make_install
  - fix rpath in gst-p-bad-cleanup.sh
  - tighten subpkg deps with %{?_isa}
  - -gtk subpkg now empty.  FIXME


author: Wim Taymans <wtaymans@redhat.com> - 1.14.0-3
changelog:
  - Remove obsolete liboil BR (#1588303)
  - Only build extras on Fedora
  - bluez is not in extras
  - vdpau is in extras


author: Matěj Týč <matyc@redhat.com> - 1.3.0-4
changelog:
  - Fixed a sudo regression in oscap-ssh.
  - Updated test to work with newer versions of procps.
  - Updated the man page.


author: Gabriel Becker <ggasparb@redhat.com> - 1.3.0-6
changelog:
  - Removed containers package as RHEL-8.0.0 will not support it.
  - Removed oscap-chroot binary and manpage from utils package as RHEL-8.0.0 will not support it.


author: Gabriel Becker <ggasparb@redhat.com> - 1.3.0-7
changelog:
  - Removed oscap-vm binary and manpage files from build as they will not be supported by RHEL-8.0.0.
  - Explicitly specify which files should be in openscap-utils subpackage.


author: Nils Philippsen <nils@tiptoe.de> - 0.1.9-1
changelog:
  - version 0.1.9
  - change license to BSD (2-clause)
  - require gcc, alsa-lib-devel, fftw-devel for building


author: Richard W.M. Jones <rjones@redhat.com> - 0.31.2-3
changelog:
  - Add a series of upstream patches to enable compiler warnings and
    fix multiple issues.
  - Revert one of the checks which breaks processing of PE binaries.
  - Removed the 'Group' line, not needed with modern Fedora/RPM.


author: Richard W.M. Jones <rjones@redhat.com> - 0.31.3-1
changelog:
  - New upstream version 0.31.3.
  - This includes all the previous upstream patches, and reverts the
    check which broke processing of PE binaries.


author: Martin Gieseking <martin.gieseking@uos.de> - 0.32.3-1
changelog:
  - Updated to version 0.32.3.
  - Dropped patch to fix https://savannah.nongnu.org/bugs/?52319 (applied upstream)


author: gil cattaneo <puntogil@libero.it> 1.2.12-9
changelog:
  - rebuilt rhbz#992387
  - add xmlstreambuffer and jvnet-parent support
  - swith to Xmvn
  - adapt to new guideline


author: Arun SAG <sagarun@gmail.com> - 0.5.1-2
changelog:
  - Remove OPT_FLAGS from build section since it is a noarch package
  - Fix use of mixed tabs and space
  - Remove extra space around the word cumbersome in description


author: Arun SAG <sagarun@gmail.com> - 0.9.3-1
changelog:
  - Updated to new upstream version 0.9.3
  - Include python-gevent as a dependency for requests.async
  - Clean up shebangs in requests/setup.py,test_requests.py and test_requests_ext.py


author: Arun S A G <sagarun@gmail.com> 0.13.1-1
changelog:
  - Updated to latest upstream release 0.13.1
  - Use system provided ca-certificates
  - No more async requests use grrequests https://github.com/kennethreitz/grequests
  - Remove gevent as it is no longer required by requests


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.14.1-4
changelog:
  - Let brp_python_bytecompile run again, take care of the non-python{2,3} modules
    by removing them from the python{,3}-requests package that they did not belong
    in.
  - Use the certificates in the ca-certificates package instead of the bundled one
    + https://bugzilla.redhat.com/show_bug.cgi?id=904614
  - Fix a problem with cookie handling
    + https://bugzilla.redhat.com/show_bug.cgi?id=906924


author: Ralph Bean <rbean@redhat.com> - 1.1.0-1
changelog:
  - Latest upstream.
  - Relicense to ASL 2.0 with upstream.
  - Removed cookie handling patch (fixed in upstream tarball).
  - Updated cert unbundling patch to match upstream.
  - Added check section, but left it commented out for koji.


author: Ralph Bean <rbean@redhat.com> - 1.1.0-2
changelog:
  - Unbundled python-charade/chardet.  Using system python-chardet now.
  - Removed deprecated comments and actions against oauthlib unbundling.
    Those are no longer necessary in 1.1.0.
  - Added links to bz tickets over Patch declarations.


author: Ralph Bean <rbean@redhat.com> - 1.1.0-3
changelog:
  - Unbundled python-urllib3.  Using system python-urllib3 now.
  - Conditionally include python-ordereddict for el6.


author: Ralph Bean <rbean@redhat.com> - 2.0.0-1
changelog:
  - Latest upstream.
  - Add doc macro to the python3 files section.
  - Require python-urllib3 greater than or at 1.7.1.


author: Ralph Bean <rbean@redhat.com> - 2.7.0-3
changelog:
  - Lock down the python-urllib3 version to the specific version we unbundled.
    https://bugzilla.redhat.com/show_bug.cgi?id=1253823


author: Ralph Bean <rbean@redhat.com> - 2.7.0-6
changelog:
  - Replace the provides macro with a plain provides field for now until we can
    re-organize this package into two different subpackages.


author: Ralph Bean <rbean@redhat.com> - 2.7.0-7
changelog:
  - Tell setuptools about what version of urllib3 we're unbundling
    for https://github.com/kennethreitz/requests/issues/2816


author: Tomas Orsava <torsava@redhat.com> - 2.18.4-6
changelog:
  - Skip all tests needing httpbin: httpbin has too many dependencies to be
    shipped in RHEL just for build-time package tests


author: Paul Howarth <paul@city-fan.org> - 2.2.2-1
changelog:
  - Update to 2.2.2
    - geoipupdate now calls fsync on the database directory after a rename to
      make it durable in the event of a crash
  - Update autotools patch


author: Paul Howarth <paul@city-fan.org> - 2.3.1-1
changelog:
  - Update to 2.3.1
    - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
      greater
    - Previously, on an invalid gzip file, geoipupdate would output binary data
      to stderr; it now displays an appropriate error message
    - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
    - $(sysconfdir) is now created if it doesn't exist (GH#33)
    - The sample config file is now usable (GH#33)


author: Paul Howarth <paul@city-fan.org> - 2.4.0-1
changelog:
  - Update to 2.4.0
    - geoipupdate now checks that the database directory is writable: if it is
      not, it reports the problem and aborts
    - geoipupdate now acquires a lock when starting up to ensure only one
      instance may run at a time: a new option, 'LockFile', exists to set the
      file to use as a lock ('.geoipupdate.lock' in the database directory by
      default)
    - geoipupdate now prints out additional information from the server when a
      download request results in something other than HTTP status 2xx; this
      provides more information when the API does not respond with a database
      file
    - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
    - Previously, a variable named 'ERROR' was used, which caused issues building
      on Windows (GH#36)
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - noarch subpackages always available now
    - libcurl-devel always available now


author: Paul Howarth <paul@city-fan.org> - 2.5.0-1
changelog:
  - Update to 2.5.0
    - Replace use of strnlen() due to lack of universal availability (GH#71)
    - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
    - Remove unused base64 library (GH#68)
    - Add the new configuration option 'PreserveFileTimes'; if set, the
      downloaded files will get the same modification times as their original on
      the server (default is '0') (GH#63)
    - Use the correct types when calling 'curl_easy_setopt()'; this fixes
      warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
    - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
      'ProductIds' option was renamed to 'EditionIDs'; the old options will
      continue to work, but upgrading to the new names is recommended for
      forward compatibility


author: Toru Hoshina <hoshina@best.com>
changelog:
  - Modified SPEC in order to install libruby.a so that it should be used by
    another ruby entention.
  - 2nd release.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/12/2000 CVS).
  - Added manuals and FAQs.
  - Split into ruby, ruby-devel, ruby-tcltk, ruby-docs, irb.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/20/2000 CVS).
  - Removed ruby-list.23190.patch(included into ruby_cvs.patch).
  - Added ruby-dev.10054.patch.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/22/2000 CVS).
  - Removed ruby-dev.10054.patch(included into ruby_cvs.patch).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.6.
  - removed ruby-dev.10123.patch(included into ruby-1.4.6).
  - Added ruby_cvs.2000082901.patch(upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Updated to upstream version 1.6.1.
  - Removed ruby_cvs.2000082901.patch and added ruby_cvs.2000092718.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000092718.patch and added ruby_cvs.2000100218.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100218.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000101117.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101117.patch and added ruby_cvs.2000101901.patch
    (upgraded ruby to latest cvs version).
  - Added ruby-dev.11262.patch.
  - Added ruby-dev.11265.patch.


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101901.patch, added ruby_cvs.2000121413.patch
    (upgraded ruby to latest cvs version).
  - Removed ruby-dev.11262.patch, ruby-dev.11265.patch,
    and ruby-dev.11268.patch (included into above patch).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000121413.patch, added ruby_cvs.2000122019.patch
    (upgraded ruby to latest cvs version).
  - new package: libruby


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000122019.patch, added ruby_cvs.2000122215.patch
    (upgraded ruby to latest cvs version, 1.6.2-preview4).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Applied patch: upgraded to cvs version (2001-01-15):
    fixed minor bugs(e.g. ruby makes extention librares too large...).


author: akira yamada <akira@vinelinux.org>
changelog:
  - fixed bad group for libruby.
  - Applied patch: upgraded to cvs version (2001-02-08):
    fixed minor bugs.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.6.4-2
changelog:
  - Remove Japanese description and summaries; they belong in specspo and
    break rpm
  - Clean up specfile
  - Mark language specific files (README.jp) as such
  - bzip2 sources
  - rename the libruby package to ruby-libs for consistency
  - Exclude ia64 (doesn't build - the code doesn't seem to be 64-bit clean
    [has been excluded on alpha forever])


author: Akira TAGOH <tagoh@redhat.com> 1.6.6-1
changelog:
  - New upstream release.
  - Applied bug fix patches:
    - ruby-1.6.6-501-ruby-mode.patch: ruby-talk#30479: disables font-lock
      coloring.
    - ruby-1.6.6-100.patch: ruby-talk#30203: Ruby 1.6.6 bug and fix
                            ruby-list#33047: regex bug
                            PR#230: problem with -d in 1.6.6
  - Added ruby-mode and ruby-mode-xemacs packages.
  - Ruby works fine for ia64. so re-enable to build with ia64.
    (probably it should be worked for alpha)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-1
changelog:
  - New upstream release.
  - ruby-1.6.6-100.patch, ruby-1.6.6-501-ruby-mode.patch:
    removed. these patches no longer should be needed.
  - ruby-1.6.7-500-marshal-proc.patch: applied a fix patch.
    (ruby-dev#16178: Marshal::dump should call Proc#call.)
  - ruby-1.6.7-501-class-var.patch: applied a fix patch.
    (ruby-talk#35157: class vars broken in 1.6.7)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-2
changelog:
  - ruby-man-1.4.6-jp.tar.bz2: removed.
  - ruby-refm-rdp-1.4.7-ja-html.tar.bz2: uses it instead of.
  - ruby-1.6.7-500-marshal-proc.patch, ruby-1.6.7-501-class-var.patch:
    removed.
  - ruby-1.6.7-100.patch: applied a bug fix patch.
    (ruby-dev#16274: patch for 'wm state')
    (PR#206ja: SEGV handle EXIT)
  - ruby-1.6.7-101.patch: applied a bug fix patch.
    (ruby-list#34313: singleton should not be Marshal.dump'ed)
    (ruby-dev#16411: block local var)
  - ruby-1.6.7-102.patch: applied a bug fix patch.
    (handling multibyte chars is partially broken)
  - ruby-1.6.7-103.patch: applied a bug fix patch.
    (ruby-dev#16462: preserve reference for GC, but link should be cut)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-10
changelog:
  - moved sitedir to /usr/lib/ruby/site_ruby again according as our perl and
    python.
  - ruby-1.6.7-resolv1.patch, ruby-1.6.7-resolv2.patch: applied to fix 'Too many
    open files - "/etc/resolv.conf"' issue. (Bug#64830)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-11
changelog:
  - use %configure macro instead of configure script.
  - use the latest config.{sub,guess}.
  - get archname from rbconfig.rb for %dir
  - applied some patches from Debian:
    - 801_extmk.rb-shellwords.patch: use Shellwords
    - 801_mkmf.rb-shellwords.patch: mkmf.rb creates bad Makefile. the Makefile
      links libruby.a to the target.
    - 803_sample-fix-shbang.patch: all sample codes should be
      s|/usr/local/bin|/usr/bin|g
    - 804_parse.y-new-bison.patch: fix syntax warning.
    - 805_uri-bugfix.patch: uri.rb could not handle correctly broken mailto-uri.
  - add ExcludeArch x86_64 temporarily to fix Bug#74581. Right now ruby can't be
    built on x86_64.


author: Elliot Lee <sopwith@redhat.com> 1.6.7-13
changelog:
  - Remove ExcludeArch: x86_64
  - Fix x86_64 ruby with long2int.patch (ruby was assuming that sizeof(long)
    == sizeof(int). The patch does not fix the source of the problem, just
    makes it a non-issue.)
  - _smp_mflags


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-1
changelog:
  - New upstream release.
  - removed some patches. it's no longer needed.
    - ruby-1.6.7-100.patch
    - ruby-1.6.7-101.patch
    - ruby-1.6.7-102.patch
    - ruby-1.6.7-103.patch
    - 801_extmk.rb-shellwords.patch
    - 801_mkmf.rb-shellwords.patch
    - 804_parse.y-new-bison.patch
    - 805_uri-bugfix.patch
    - ruby-1.6.6-900_XXX_strtod.patch
    - ruby-1.6.7-sux0rs.patch
    - ruby-1.6.7-libobj.patch


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-2
changelog:
  - ruby-1.6.8-require.patch: applied to fix the search bug in require.
  - don't apply long2int patch to s390 and s390x. it doesn't work.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-7
changelog:
  - fix the gcc warnings. (#82192)
  - ruby-1.6.8-fix-x86_64.patch: correct a patch.
    NOTE: DON'T USE THIS PATCH FOR BIG ENDIAN ARCHITECTURE.
  - ruby-1.6.7-long2int.patch: removed.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-9
changelog:
  - ruby-1.6.8-castnode.patch: handling the nodes with correct cast.
    use this patch now instead of ruby-1.6.8-fix-x86_64.patch.


author: Akira TAGOH <tagoh@redhat.com> 1.8.1-1
changelog:
  - New upstream release.
  - don't use any optimization for ia64 to avoid the build failure.
  - ruby-1.8.1-ia64-stack-limit.patch: applied to fix SystemStackError when the optimization is disabled.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-9
changelog:
  - ruby-1.8.1-cgi-dos.patch: security fix [CAN-2004-0983]
  - ruby-1.8.1-cgi_session_perms.patch: security fix [CAN-2004-0755]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-1
changelog:
  - New upstream release.
  - ruby-1.8.1-ia64-stack-limit.patch: removed - it's no longer needed.
  - ruby-1.8.1-cgi_session_perms.patch: likewise.
  - ruby-1.8.1-cgi-dos.patch: likewise.
  - generated Ruby interactive documentation - senarated package.
    it's now provided as ri package. (#141806)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-7
changelog:
  - ruby-1.8.2-deadcode.patch: removed the dead code from the source. (#146108)
  - make sure that all documentation files in ruby-docs are the world-
    readable. (#147279)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-9
changelog:
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: fixed the arbitrary command execution
    on XMLRPC server. (#161096)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-1
changelog:
  - New upstream release.
  - Build-Requires xorg-x11-devel instead of XFree86-devel.
  - ruby-multilib.patch: applied for only 64-bit archs.
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: removed. it has already been in upstream.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-3
changelog:
  - fixed the wrong file list. the external library for tcl/tk was included
    in ruby-libs unexpectedly.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-4
changelog:
  - moved the documents from ruby-libs to ruby-docs, which contains the arch
    specific thing and to be multilib support. (#168826)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-0.4.preview2
changelog:
  - updates to 1.8.4-preview2.
  - renamed the packages to ruby-* (#175765)
    - irb  -> ruby-irb
    - rdoc -> ruby-rdoc
    - ri   -> ruby-ri
  - added tcl-devel and tk-devel into BuildRequires.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-1
changelog:
  - New upstream release.
    - fixed a missing return statement. (#140833)
    - fixed an use of uninitialized variable. (#144890)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-3
changelog:
  - ruby-1.8.4-no-eaccess.patch: backported from ruby CVS to avoid conflict
    between newer glibc. (#179835)


author: Akira TAGOH <tagoh@redhat.com>
changelog:
  - ruby-rubyprefix.patch: moved all arch-independent modules under /usr/lib/ruby
    and keep arch-dependent modules under /usr/lib64/ruby for 64bit archs.
    so 'rubylibdir', 'sitelibdir' and 'sitedir' in Config::CONFIG points to
    the kind of /usr/lib/ruby now. (#184199)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-6
changelog:
  - ruby-deprecated-search-path.patch: added the deprecated installation paths
    to the search path for the backward compatibility.
  - added a Provides: ruby(abi) to ruby-libs.
  - ruby-1.8.4-64bit-pack.patch: backport patch from upstream to fix unpack("l")
    not working on 64bit arch and integer overflow on template "w". (#189350)
  - updated License tag to be more comfortable, and with a pointer to get more
    details, like Python package does. (#179933)
  - clean up.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-7
changelog:
  - exclude ppc64 to make ruby-mode package. right now emacs.ppc64 isn't provided
    and buildsys became much stricter.
  - ruby-deprecated-sitelib-search-path.patch: applied to add more search path
    for backward compatiblity.
  - added byacc to BuildReq. (#194161)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-11
changelog:
  - security fixes [CVE-2006-3694]
    - ruby-1.8.4-fix-insecure-dir-operation.patch:
    - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure
      operations in the certain safe-level restrictions. (#199538)
    - ruby-1.8.4-fix-alias-safe-level.patch: fixed to not bypass the certain
      safe-level restrictions. (#199543)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-1
changelog:
  - New upstream release.
  - removed the unnecessary patches:
    - ruby-1.8.4-no-eaccess.patch
    - ruby-1.8.4-64bit-pack.patch
    - ruby-1.8.4-fix-insecure-dir-operation.patch
    - ruby-1.8.4-fix-insecure-regexp-modification.patch
    - ruby-1.8.4-fix-alias-safe-level.patch
  - build with --enable-pthread except on ppc.
  - ruby-1.8.5-hash-memory-leak.patch: backported from CVS to fix a memory leak
    on Hash. [ruby-talk:211233]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-4
changelog:
  - security fix release.
  - ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that
    causes the denial of service. (#212396)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.36-3
changelog:
  - ruby-r12567.patch: backport patch from upstream svn to get rid of
    the unnecessary declarations. (#245446)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.110-1
changelog:
  - New upstream release.
    - ruby-r12567.patch: removed.
  - ruby-1.8.6-CVE-2007-5162.patch: security fix for Net::HTTP that is
    insufficient verification of SSL certificate.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.110-2
changelog:
  - Enable pthread support for ppc too. (#201452)
  - Fix unexpected dependencies appears in ruby-libs. (#253325)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.111-1
changelog:
  - New upstream release.
  - ruby-1.8.6.111-CVE-2007-5162.patch: Update a bit with backporting the changes
     at trunk to enable the fix without any modifications on the users' scripts.
     Note that Net::HTTP#enable_post_connection_check isn't available anymore.
     If you want to disable this post-check, you should give OpenSSL::SSL::VERIFY_NONE
     to Net::HTTP#verify_mode= instead of.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.111-3
changelog:
  - Clean up the spec file.
  - Remove ruby-man-1.4.6 stuff. this is entirely the out-dated document.
    this could be replaced by ri.
  - Disable the static library building.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.114-1
changelog:
  - Security fix for CVE-2008-1145.
  - Improve a spec file. (#226381)
    - Correct License tag.
    - Fix a timestamp issue.
    - Own a arch-specific directory.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.230-1
changelog:
  - New upstream release.
  - Security fixes. (#452295)
    - CVE-2008-1891: WEBrick CGI source disclosure.
    - CVE-2008-2662: Integer overflow in rb_str_buf_append().
    - CVE-2008-2663: Integer overflow in rb_ary_store().
    - CVE-2008-2664: Unsafe use of alloca in rb_str_format().
    - CVE-2008-2725: Integer overflow in rb_ary_splice().
    - CVE-2008-2726: Integer overflow in rb_ary_splice().
  - ruby-1.8.6.111-CVE-2007-5162.patch: removed.
  - Build ruby-mode package for all archtectures.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.230-3
changelog:
  - Backported from upstream SVN to fix a segfault issue. (#452825)
  - Backported from upstream SVN to fix an integer overflow in rb_ary_fill.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.287-1
changelog:
  - New upstream release.
  - Security fixes.
    - CVE-2008-3655: Ruby does not properly restrict access to critical
                     variables and methods at various safe levels.
    - CVE-2008-3656: DoS vulnerability in WEBrick.
    - CVE-2008-3657: Lack of taintness check in dl.
    - CVE-2008-1447: DNS spoofing vulnerability in resolv.rb.
    - CVE-2008-3443: Memory allocation failure in Ruby regex engine.
  - Remove the unnecessary backported patches.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.383-4
changelog:
  - Use bison to regenerate parse.c to keep the original format of error
    messages (bug 530275 comment 4)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.383-5
changelog:
  - Change mkmf.rb to use LIBRUBYARG_SHARED so that have_library() works
    without libruby-static.a (bug 428384)
  - And move libruby-static.a to -static subpackage


author: Jeroen van Meeuwen <j.van.meeuwen@ogd.nl> - 1.8.6.388-8
changelog:
  - Backport openssl/digest functions providing digest and hexdigest functions
    directly in OpenSSL::Digest.methods
  - Make sure that Red Hat people version their changelog entries
  - This is actually release #1, but now needs to be release #7


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-2
changelog:
  - tcltk: Give up using potentially unmaintained ruby_1_8_6 branch
    and instead completely replace with ruby_1_8 branch head
    (at this time, using rev 27738)
    (seems to fix 560053, 590503)
  - Fix Japanese encoding strings under ruby-tcltk/ext/tk/sample/


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-3
changelog:
  - ruby-1.8.x-null-class-must-be-Qnil.patch (bug 530407)
  - Recreate some patches using upstream svn when available, and
    add some comments for patches


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-4
changelog:
  - Patch36 (ruby-1.8.x-RHASH_SIZE-rb_hash_lookup-def.patch)
    also backport rb_hash_lookup definition (bug 592936)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-5
changelog:
  - Retry for bug 559158, Simplify the OpenSSL::Digest class
    pull more change commits from ruby_1_8 branch


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.249-3
changelog:
  - Integrated Jim Meyering's feedback and changes in to:
  - remove trailing blanks
  - placate rpmlint
  - ruby_* definitions: do not use trailing slashes in directory names
  - _normalized_cpu: simplify definition


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-1
changelog:
  - integrate more of jmeyering's and mtaska's feedback
  - removed emacs bits that are now shipped with the emacs package
  - various patch and spec cleanup
  - rebased to ruby 1.8.7 patch 299, removed patches no longer needed:
     ruby-1.8.7-openssl-1.0.patch, ruby-1.8.7-rb_gc_guard_ptr-optimization.patch


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-2
changelog:
  - readded bits to pull tk package from upstream source branch
  - removed unecessary .tk.old dir
  - renamed macros which may cause confusion, removed unused ones


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-3
changelog:
  - updated packaged based on feedback (from mtasaka)
  - added comments to all patches / sources
  - obsoleted ruby-mode, as it's now provided by the emacs package itself
  - readded missing documentation
  - various small compatability/regression fixes


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.7.299-4
changelog:
  - Cleanup spec file
  - Make -irb, -rdoc subpackage noarch
  - Make dependencies between arch-dependent subpackages isa specific
  - Improve sample documentation gathering


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.7.302-1
changelog:
  - Update to 1.8.7.302
  - CVE-2010-0541 (bug 587731) is fixed in this version
  - Update ext/tk to the latest head


author: Mamoru Tasaka <mtasaka@fedoraproject.org> - 1.8.7.352-1
changelog:
  - Update to 1.8.7 p352
  - CVE-2011-2686 is fixed in this version (bug 722415)
  - Update ext/tk to the latest git
  - Remove duplicate path entry (bug 718695)


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-2
changelog:
  - Install RubyGems outside of Ruby directory structure.
  - RubyGems has not its own -devel subpackage.
  - Enhanced macros.ruby and macros.rubygems.
  - All tests are green now (bkabrda).


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-4
changelog:
  - Bundled gems moved into dedicated directories and subpackages.
  - Create and own RubyGems directories for binary extensions.
  - Fix build with GCC 4.7.


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-5
changelog:
  - Initial release of Ruby 1.9.3.
  - Add rubygems dependency on io-console for user interactions.
  - Gems license clarification.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.286-19
changelog:
  - Update to 1.9.3 p286
  - Don't create files when NUL-containing path name is passed
    (bug 865940, CVE-2012-4522)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.327-21
changelog:
  - Update to 1.9.3.327
  - Fix Hash-flooding DoS vulnerability on MurmurHash function
    (CVE-2012-5371)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.374-27
changelog:
  - Update to 1.9.3 p374
  - Fix provided variables in pkgconfig (bug 789532:
    Vít Ondruch <vondruch@redhat.com>)


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-0.1.r39387
changelog:
  - Upgrade to Ruby 2.0.0 (r39387).
  - Introduce %gem_install macro.
  - Build against libdb instead of libdb4 (rhbz#894022).
  - Move native extensions from exts to ruby directory.
  - Enable most of the PPC test suite.
  - Change ruby(abi) -> ruby(release).
  - Rename ruby executable to ruby-mri, to be prepared for RubyPick.
  - Add ruby(runtime_executable) virtual provide, which is later used
    by RubyPick.
  - RDoc now depends on JSON.
  - Try to make -doc subpackage noarch again, since the new RDoc should resolve
    the arch dependent issues (https://github.com/rdoc/rdoc/issues/71).
  - Enable SystemTap support.
  - Add TapSet for Ruby.
  - Split Psych into rubygem-psych subpackage.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-1
changelog:
  - Update to Ruby 2.0.0-p0.
  - Change %{ruby_extdir} to %{ruby_extdir_mri} in preparation for better
    JRuby support.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-3
changelog:
  - Avoid "method redefined;" warnings due to modified operating_system.rb.
  - Fix strange paths created during build of binary gems.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-7
changelog:
  - Macro definition moved into macros.ruby and macros.rubygems files.
  - Added filtering macros.
  - Filter automatically generated provides of private libraries (rhbz#947408).


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.195-8
changelog:
  - Update to Ruby 2.0.0-p195 (rhbz#917374).
  - Fix object taint bypassing in DL and Fiddle (CVE-2013-2065).
  - Fix build against OpenSSL with enabled ECC curves.
  - Add aarch64 support (rhbz#926463).


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-9
changelog:
  - Update to Ruby 2.0.0-p247 (rhbz#979605).
  - Fix CVE-2013-4073.
  - Fix for wrong makefiles created by mkmf (rhbz#921650).
  - Add support for ABRT autoloading.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-13
changelog:
  - Fixes multilib conlicts of .gemspec files.
  - Make symlinks for psych gem to ruby stdlib dirs (rhbz#979133).
  - Use system-wide cert.pem.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-14
changelog:
  - Add forgotten psych.rb link into rubygem-psych to fix "private method `load'
    called for Psych:Moduler" error (rhbz#979133).


author: Vít Ondruch <vondruch@redhat.com> - 2.1.0-17
changelog:
  - Upgrade to Ruby 2.1.0.
  - Move RPM macros into /usr/lib/rpm/macros.d directory.
  - Allow MD5 in OpenSSL for tests.


author: Vít Ondruch <vondruch@redhat.com> - 2.1.0-18
changelog:
  - Don't generate documentation on unexpected places.
  - Detect if rubygems are running under rpmbuild and install gem binary
    extensions into appropriate place.
  - Add support for ppc64le arch (rhbz#1053263).
  - Re-enable some test cases, which are passing now with Kernel 3.12.8+.
  - Backport fix for floating point issues on i686.


author: Vít Ondruch <vondruch@redhat.com> - 2.1.1-20
changelog:
  - Remove useless exclude (rhbz#1065897).
  - Extract load macro into external file and include it.
  - Kill bundled certificates.


author: Vít Ondruch <vondruch@redhat.com> - 2.1.4-24
changelog:
  - Update to Ruby 2.1.4.
  - Include only vendor directories, not their content (rhbz#1114071).
  - Fix "invalid regex" warning for non-rubygem packages (rhbz#1154067).
  - Use load macro introduced in RPM 4.12.


author: Vít Ondruch <vondruch@redhat.com> - 2.2.0-1
changelog:
  - Upgrade to Ruby 2.2.0.
  - Explicitly list RubyGems directories to avoid accidentaly packaged content.
  - Split test-unit and power_assert gems into separate sub-packages.
  - Drop libdb dependency in favor of gdbm.


author: Vít Ondruch <vondruch@redhat.com> - 2.2.2-40
changelog:
  - Fix upgrade path (rubygem-io-console's version was recently bumped in F21
    and makes the higher release to win).


author: Vít Ondruch <vondruch@redhat.com> - 2.3.0-50
changelog:
  - Upgrade to Ruby 2.3.0.
  - Move gemified net-telnet into subpackage.
  - Add did_you_mean subpackage.
  - Add virtual provides for CCAN copylibs.
  - Use weak dependencies.


author: Vít Ondruch <vondruch@redhat.com> - 2.3.1-59
changelog:
  - Continue to use OpenSSL 1.0 for the moment.
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Harden package.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.0-70
changelog:
  - Upgrade to Ruby 2.4.0.
  - Move gemified xmlrpc into subpackage.
  - Move gemified openssl into subpackage.
  - Tk is removed from stdlib.
  - Extend 'gem_' macros for pre-release version support.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.1-83
changelog:
  - Fix "IOError: stream closed" errors affecting Puma.
  - Temporary disable checksec on PPC64LE (rhbz#1479302).


author: Vít Ondruch <vondruch@redhat.com> - 2.5.0-89
changelog:
  - Drop obsolete ldconfig scriptlets.
  - Add GMP dependency.
  - Use 'with' operator in RPM dependency generator.
  - Add conflicts RPM generator.
  - Fix thread_safe test suite segfaults.
  - Fix invalid licenses.


author: Pavel Valena <pvalena@redhat.com> - 2.5.0-89
changelog:
  - Fix: Multiple vulnerabilities in RubyGems
    https://bugzilla.redhat.com/show_bug.cgi?id=1547431
    https://www.ruby-lang.org/en/news/2018/02/17/multiple-vulnerabilities-in-rubygems/


author: Florian Weimer <fweimer@redhat.com> - 2.5.0-89
changelog:
  - Rebuild with new LDFLAGS from redhat-rpm-config
  - Use --with-setjmp-type=setjmp on aarch64 to work around gcc issue (#1545239)


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-92
changelog:
  - Conflict requirement needs to generate dependency.
  - Stop using --with-setjmp-type=setjmp on aarch64 (rhbz#1545239).


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-97
changelog:
  - Fix TLS 1.3 issues.
    * ruby-2.6.0-fix-test-failure-with-TLS-1.3.patch
    * ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with-TLS-1.3.patch
    Related: rhbz#1616213


author: Jun Aruga <jaruga@redhat.com> - 2.5.1-99
changelog:
  - Fix generated rdoc template issues.
    * ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch
    Resolves: rhbz#1612026


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-99
changelog:
  - Additional OpenSSL 1.1.1 fixes.
    * ruby-2.6.0-fix-test-failure-with-TLS-1.3-maint.patch
    * ruby-2.6.0-config-support-include-directive.patch
    * ruby-2.6.0-use-larger-keys-for-SSL-tests.patch
    Related: rhbz#1616213


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-100
changelog:
  - Properly harden package using -fstack-protector-strong.
    * ruby-2.6.0-configure-fstack-protector-strong.patch
    Resolves: rhbz#1624168


author: David King <amigadave@amigadave.com> 5.1.0-1
changelog:
  - Update to 5.1.0 (#1164434)
  - Drop libxml2 patch (fixed upstream)
  - Use pkgconfig for BuildRequires


author: Paolo Bonzini <pbonzini@redhat.com> - 1.7.0-3
changelog:
  - Correct license for libiscsi-utils, prefer %global to %define
  - Add Requires
  - Remove percent-clean section


author: Neal Gompa <ngompa13@gmail.com> - 1.15.0-1
changelog:
  - Rebased to version 1.15.0
  - Removed patch 20 as it has been upstreamed
  - Disabled patch 12 as need for revised one is in question
  - Updated patch 13 to current tree
  - New tool iscsi-perf


author: Cole Robinson <crobinso@redhat.com> - 1.18.0-2
changelog:
  - Fix rdma deps and don't restrict archs
  - Add --disable-werror to fix gcc8 build (bz #1556044)
  - Spec file cleanups (bz #1483290)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-5.el8
changelog:
  - libiscsi-iser_rcv_completion-unify-error-handling.patch [bz#1634541]
  - libiscsi-iser-fix-posting-of-receive-descriptors.patch [bz#1634541]
  - libiscsi-sync-remove-unnecessary-checks.patch [bz#1634541]
  - libiscsi-do-not-warn-for-strncpy.patch [bz#1634541]
  - libiscsi-avoid-fallthrough.patch [bz#1634541]
  - libiscsi-avoid-truncation-when-logging-message-that-includes-.patch [bz#1634541]
  - Resolves: bz#1634541
    (Fix important coverity issues (libiscsi))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> -
changelog:
  - libiscsi-fix-connection-to-LUN-with-IPv6-address.patch [bz#1597942]
  - Resolves: bz#1597942
    (Qemu-kvm fails to connect to iscsi LUN by IPV6 address)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.2-12
changelog:
  - Python 2 binary package renamed to python2-prettytable
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.6-20
changelog:
  - Fixed installation of multiple drivers and text tables in Dracut module
    if environment variables are used


author: Alexander Kurtakov <akurtako@redhat.com> 3.15.0-1
changelog:
  - Update to latest upstream release.
  - Add javassist:javassist depmap.
  - The project is now triple licensed.


author: Orion Poplawski <orion@cora.nwra.com> 3-12
changelog:
  - Add %py_build_egg and %py_install_egg macros
  - Allow multiple args to %py_build/install macros
  - Tidy up macro formatting


author: Orion Poplawski <orion@cora.nwra.com> 3-13
changelog:
  - Add missing sleeps to other build macros
  - Fix build_egg macros
  - Add %py_build_wheel and %py_install_wheel macros


author: Tomas Orsava <torsava@redhat.com> - 3-16
changelog:
  - Added macros for Build/Requires tags using Python dist tags:
    https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages


author: Michal Cyprian <mcyprian@redhat.com> - 3-20
changelog:
  - Revert "Switch %__python3 to /usr/libexec/system-python"
    after the Fedora Change https://fedoraproject.org/wiki/Changes/Making_sudo_pip_safe
    was postponed


author: Kyle McMartin <kyle@redhat.com> - 10.0.2-4.20140118
changelog:
  - Fix up building drivers on AArch64, enable LLVM there.
  - Eliminate some F17 cruft from the spec, since we don't support it anymore.
  - Conditionalize with_radeonsi on with_llvm instead of ppc,s390 && >F-17.
  - Conditionalize libvdpau_radeonsi.so.1* on with_radeonsi instead of simply
    with_llvm to fix a build failure on AArch64.


author: Kyle McMartin <kyle@redhat.com> - 10.0.2-6.20140118
changelog:
  - Fix accidentally inverted logic that meant radeonsi_dri.so went missing
    on all architectures instead of just ppc and s390. Sorry!


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.1-1.20140305
changelog:
  - mesa: Bump version to 10.1 (final) (Ian Romanick)
  - glx/dri2: fix build failure on HURD (Julien Cristau)
  - i965: Validate (and resolve) all the bound textures. (Chris Forbes)
  - i965: Widen sampler key bitfields for 32 samplers (Chris Forbes)


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.1.1-3.20140430
changelog:
  - Update to today snapshot
  - apply as downstream patches for reporting GPU max frequency on r600 (FD.o #73511)


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.2-0.1.rc1.20140505
changelog:
  - Enable omx on x86 and arm (RHBZ #1094199) (kwizart)
  - Split _with_xa from _with_vmware (RHBZ #1094199) (kwizart)
  - Add _with_xa when arch is arm and _with_freedreeno (RHBZ #1094199) (kwizart)


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.2-0.3.rc1.20140505
changelog:
  - Move gallium-pipe to the correct sub-package (RHBZ #1094588) (kwizart)
  - Move egl_gallium.so to the correct location (RHBZ #1094588) (kwizart)
  - Switch from with to enable for llvm shared libs (kwizart)


changelog: - Rebase to 'master' branch (f381c27c548aa28b003c8e188f5d627ab4105f76 commit)
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.3-0.devel.1.f381c27c548aa28b003c8e188f5d627ab4105f76


changelog: - c40d7d6d948912a4d51cbf8f0854cf2ebe916636 commit
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.3-0.devel.2.c40d7d6d948912a4d51cbf8f0854cf2ebe916636


changelog: - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
author:
  Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 10.3-0.devel.2.c40d7d6d948912a4d51cbf8f0854cf2ebe916636.1


changelog: - 10.4 c2867f5b3626157379ef0d4d5bcaf5180ca0ec1f
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.4-0.devel.1.c2867f5b3626157379ef0d4d5bcaf5180ca0ec1f


changelog: - 80771e47b6c1e47ab55f17311e1d4e227a9eb3d8 commit
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.4-0.devel.2.80771e47b6c1e47ab55f17311e1d4e227a9eb3d8


changelog: - add swrast to dri driver list
author:
  Igor Gnatenko <i.gnatenko.brain@gmail.com> - 10.4-0.devel.2.1.80771e47b6c1e47ab55f17311e1d4e227a9eb3d8


author: Igor Gnatenko <i.gnatenko.brain@gmail.com> - 11.3.0-0.1.gitea2bff1
changelog:
  - 11.3.0 (gitea2bff1)
  - Add SWR state-tracker (but disable because build is broken)
  - Use gallium-osmesa instead of classic osmesa (RHBZ #1305588)
  - Remove very old changelogs


author: Hans de Goede <hdegoede@redhat.com> - 17.0.0-0.4.rc2
changelog:
  - Update eglext.h to 20161230 version this brings in some new defines needed
    by some apps / libraries


author: Hans de Goede <hdegoede@redhat.com> - 17.0.0-0.5.rc2
changelog:
  - Fix GLX_SGIX_fbconfig extension dispatching with glvnd, this fixes games such
    as "The Binding of Isaac: Rebirth" and "Crypt of the NecroDancer" from Steam


author: Hans de Goede <hdegoede@redhat.com> - 17.0.1-3
changelog:
  - Fix glXGetDriverConfig not working with glvnd (rhbz#1429894)
  - Fix indirect rendering, add libGLX_indirect.so.0 symlink (rhbz#1427174)


author: Carl Green <carlgreen at gmail.com> - 3.2.1-4
changelog:
  - Renamed from jakarta-commons-collections
  - Updated to use maven2
  - Replaced saxon:group instruction with xsl:for-each-group in pom-maven2jpp-newdepmap.xsl


author: Carl Green <carlgreen at gmail.com> - 3.2.1-5
changelog:
  - Remove source and patches no longer needed for Maven
  - Fix non-standard groups and remove empty sections
  - Fix file permissions


author: Jaromir Capik <jcapik@redhat.com> 3.2.1-13
changelog:
  - saxon dependency removed - not needed
  - minor spec file changes according to the latest guidelines


author: David Walluck <dwalluck@redhat.com> 0:1.5.2-2
changelog:
  - use excalibur for avalon
  - remove javadoc scriptlets
  - GCJ fixes
  - fix maven directory ownership
  - fix -bc --short-circuit by moving some of %build to %prep


author: Yong Yang <yyang@redhat.com> 0:1.5.8-1
changelog:
  - 1.5.8
  - Replace slf4j-1.5.6-integration-tests-current-only.patch with
    slf4j-1.5.8-skip-integration-tests.patch because of the failure of "testMatch"


author: Alexander Kurtakov <akurtako@redhat.com> 0:1.5.11-2
changelog:
  - Skip installing tests jar that is no longer produced.
  - Use javadoc aggregate.
  - Use mavenpomdir macro.


author: Ville Skyttä <ville.skytta@iki.fi> - 0:1.6.1-4
changelog:
  - Specify explicit source encoding to fix build with Java 1.7.
  - Remove no longer needed javadoc dir upgrade hack.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:1.7.2-2
changelog:
  - Fix license to ASL 2.0 and MIT
  - Update to add_maven_depmap macro
  - Use generated .mfiles list
  - Small packaging cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-6
changelog:
  - Fix multilib conflicts in *.pyc and *.pyo files.
  - Only install unversioned *.so file for Python bindings.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.5-1
changelog:
  - New upstream version 1.2.5.
  - This version fixes a number of important memory issues found by
    valgrind and upgrading to this version is recommended for all users.
  - Remove patch now upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.6-2
changelog:
  - New upstream version 1.2.6.
  - Removed patch which is now upstream.
  - Add upstream patch to fix ocaml tests.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.7-3
changelog:
  - New upstream version 1.2.7.
  - Removed patch which is now upstream.
  - Add upstream patches to fix ocaml install rule.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.0-3
changelog:
  - New upstream version 1.3.0.
  - This version adds Ruby bindings, so there is a new subpackage 'ruby-hivex'.
  - Add upstream patch to fix Ruby tests.
  - Remove epoch macro in ruby-hivex dependency.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.1-2
changelog:
  - New upstream version 1.3.1.
  - Remove patch, now upstream.
  - Don't need hack for making an unversioned Python module.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-1
changelog:
  - New upstream version 1.3.3.
  - Rebased gnulib to work around RHBZ#756981.
  - Remove patches which are now upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-7
changelog:
  - Bump and rebuild for Ruby update.
  - Add upstream patch to fix bindings for Ruby 1.9.
  - Add non-upstream patch to pass --vendor flag to extconf.rb


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.7-6
changelog:
  - Fix for latest Ruby in Rawhide.  Fixes build failure identified
    by mass rebuild yesterday.
  - Do not ignore error from running autoreconf.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.8-1
changelog:
  - New upstream version 1.3.8.
  - Fixes handling of keys which use ri-records, for both reading and
    writing (RHBZ#717583, RHBZ#987463).
  - Remove upstream patch.
  - Rebase dirs patch against new upstream sources.
  - Rebase ruby patch against new upstream sources.
  - Modernize the RPM spec file.
  - Fix .gitignore.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.11-2
changelog:
  - Pull in a couple of upstream fixes:
    * Fix memory leak in _hivex_get_children.
    * Increase HIVEX_MAX_VALUE_LEN.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.11-7
changelog:
  - Move hivexregedit to perl-hivex subpackage, since otherwise hivex
    and hence libguestfs depends on perl (RHBZ#1194158).


author: Petr Šabata <contyk@redhat.com> - 1.3.11-13
changelog:
  - Correcting the perl build time dependency list
    Switching to virtual perl()-style symbols
    Dropping unused dependencies and adding some new to fix the FTBFS


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.12-1
changelog:
  - New upstream version 1.3.12.
  - Drop patches which are now upstream.
  - Use OCaml macros to test if OCaml native compiler is available.
  - Use autoreconf --force option.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.13-2
changelog:
  - New upstream version 1.3.13.
  - Drop ancient 'Conflicts' rule.
  - Drop Perl patch for setting INSTALLDIRS.
  - Depend on pod2html, pod2man binaries explicitly.


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - IO::Compress::FAQ - Added a section on bgzip (CPAN RT#103295)
    - IO::Compress::Zip - Zip64 needs to be first in extra field to work around
      a Windows Explorer bug (see
      http://www.info-zip.org/phpBB3/viewtopic.php?f=3&t=440 for details)


author: Paul Howarth <paul@city-fan.org> - 2.070-1
changelog:
  - Update to 2.070
    - Fix prototype errors while lazy loading File::GlobMapper (CPAN RT#117675)
    - zipdetails: Avoid loading optional modules from default . (CPAN RT#116538,
      CVE-2016-1238)
  - Simplify find command using -delete


author: Troy Dawson <tdawson@redhat.com> - 8.0-11
changelog:
  - Expand variables and wildcards in runtime-install.tmpl
  - Cleanup the sections and packages not in RHEL8.


author: Brian C. Lane <bcl@redhat.com> - 8.0-18
changelog:
  - re-add temporarily removed packages (bcl)
    Related: rhbz#1622395
  - Use google-noto-sans-cjk-ttc-fonts (bcl)
    Resolves: rhbz#1626368


author: Martin Kolman <mkolman@redhat.com> - 0.6.0-3
changelog:
  - add patch for DTD fix
  - add patch with support for asynchronous calls (vponcova)
  - add patch with support for transformation between D-Bus errors and exceptions (vponcova)


author: Michael Mraka <michael.mraka@redhat.com> 2.4.2-1
changelog:
  - add action files for packages/errata installation
  - put spacewalk both into python2 and python3 setelibs


author: Michael Mraka <michael.mraka@redhat.com> 2.4.7-1
changelog:
  - added license
  - be consistent in using macros vs. shell variables
  - make spec complient with fedora packaging guidlines


author: Gennadii Altukhov <galt@redhat.com> 2.7.2-1
changelog:
  - reverted 2030f2f6b1efb82bda06676fbf22ab3716e890e5. A new API call is not
    available yet in Fedora 23/24.


author: Tomas Kasparek <tkasparek@redhat.com> 2.7.3-1
changelog:
  - allow building both dnf 1.0 and 2.0 version from the same source
  - 1308493 - initialize spacewalk channels before --enablerepo/--disablerepo
    handler
  - dnf-plugin-spacewalk updated to dnf 2.0


author: Michael Mraka <michael.mraka@redhat.com> 2.7.5-1
changelog:
  - 1308493 - fixed plugin initialization in dnf 2.X
  - Updated links to github in spec files
  - Migrating Fedorahosted to GitHub


author: Michael Mraka <michael.mraka@redhat.com> 2.8.2-1
changelog:
  - install files into python_sitelib/python3_sitelib
  - split dnf-plugin-spacewalk into python2/python3 specific packages


author: Stephen Gallagher <sgallagh@redhat.com> - 0.11-15
changelog:
  - Temporarily disable -Werror=format-security to unbreak the build
  - Build with verbose command-line visible in the logs
  - Resolves: rhbz#1424270


author: David Brown <david.brown@pnnl.gov> - 4.2.10-9
changelog:
  - Resolve dependencies for rawhide (#1308192)
  - Fix port and args environment variables for el5/6 (#1254301)


author: Tomas Orsava <torsava@redhat.com> - 2.7.5-5
changelog:
  - Require python2-psycopg2 instead of python-psycopg2 from the
    python2-psycopg2-debug subpackage
  - Resolves: rhbz#1628242


author: Hans de Goede <hdegoede@redhat.com> - 7.5-11
changelog:
  - Update most fonts:
     -encodings-1.0.4
     -font-adobe-100dpi-1.0.3
     -font-adobe-75dpi-1.0.3
     -font-adobe-utopia-100dpi-1.0.4
     -font-adobe-utopia-75dpi-1.0.4
     -font-adobe-utopia-type1-1.0.4
     -font-arabic-misc-1.0.3
     -font-bh-100dpi-1.0.3
     -font-bh-75dpi-1.0.3
     -font-bh-lucidatypewriter-100dpi-1.0.3
     -font-bh-lucidatypewriter-75dpi-1.0.3
     -font-bitstream-100dpi-1.0.3
     -font-bitstream-75dpi-1.0.3
     -font-bitstream-type1-1.0.3
     -font-cronyx-cyrillic-1.0.3
     -font-cursor-misc-1.0.3
     -font-daewoo-misc-1.0.3
     -font-dec-misc-1.0.3
     -font-isas-misc-1.0.3
     -font-jis-misc-1.0.3
     -font-micro-misc-1.0.3
     -font-misc-cyrillic-1.0.3
     -font-misc-ethiopic-1.0.3
     -font-misc-misc-1.1.2
     -font-mutt-misc-1.0.3
     -font-schumacher-misc-1.1.2
     -font-screen-cyrillic-1.0.4
     -font-sony-misc-1.0.3
     -font-sun-misc-1.0.3
     -font-winitzki-cyrillic-1.0.3
     -font-xfree86-type1-1.0.4
  - Fix a bug in jisx0201.1976-0.enc (#1009350)


author: Simone Caronni <negativo17@gmail.com> - 7.5-12
changelog:
  - Clean up SPEC file, remove obsolete tags, fix all rpmlint warnings.
  - Rework build/install section to be like other xorg packages.
  - Remove all obsolete provides/obsoletes/conflicts.
  - Simplify build requirements.
  - Simplify build, it has not changed since 2008.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018.2-7
changelog:
  - Selectively build python2 or python3 based on current version.
  - Don't use pathfix.py as it fails prep on RHEL when building on systems
    do not have python installled.


author: Tilmann Scheller <tschelle@redhat.com> - 5.0.1-4
changelog:
  - Add %enable_llvmtoolset7 macro to make it easier to activate llvm-toolset-7
    during package builds.


author: Tilmann Scheller <tschelle@redhat.com> - 5.0.1-5
changelog:
  - Move %enable_llvmtoolset7 macro to the -build subpackage to avoid conflicts
    between multiple definitions of %scl when using llvm-toolset-7 to build a SCL


author: Tomas Hoger <thoger@redhat.com> - 0.1.13-11
changelog:
  - Add conditional for building with(out) gst010 / GStreamer 0.10 support.
  - Disable gst010 plugin by default.


author: Stefan Becker <chemobejk@gmail.com> - 0.1.14-3
changelog:
  - update to 0.1.14-70-gfb2f1f7 with alternate server fixes for SIPE
  - add autoreconf build step
  - remove examples subpackage as examples are no longer installed


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-4.20171128gitfb2f1f7
changelog:
  - enable make check again
  - make tests pass in Koji
  - disable test-new-dribble that sometimes hangs indefinitely
  - make tests compile on i686
  - make the package build on armv7hl
  - make the package build on Fedora 28
  - avoid build failure if gstreamer-plugins-base-devel is installed
  - move autoreconf invocation to %prep
  - use Name Version Release that explicitly identifies an SCM snapshot (#1541646)


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-6.20171128gitfb2f1f7
changelog:
  - temporarily make the upstream test-suite run on Intel arches only
  - disable test-send-recv, which fails in Koji


author: Kamil Dudka <kdudka@redhat.com> - 0.1.14-7.20180504git34d6044
changelog:
  - component: accept TURN in nice_component_verify_remote_candidate() (#1541646)
  - update to 0.1.14-85-g34d6044 (#1541646)


author: Jiri Vanek <jvanek@redhat.com> - 1:10.0.0.46-8
changelog:
  - removed accessibility sub-packages
  - kept applied patch and properties files
  - debug sub-packages renamed to slowdebug


author: Jiri Vanek <jvanek@redhat.com> - 1:10.0.1.10-1
changelog:
  - updated to security update 1
  - jexec unlinked from path
  - used java-openjdk as boot jdk
  - aligned provides/requires
  - renamed zip javadoc


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:10.0.1.10-2
changelog:
  - Removed unneeded patches:
    PStack-808293.patch
    multiple-pkcs11-library-init.patch
    ppc_stack_overflow_fix.patch 
  - Added patches for s390 Zero builds:
    JDK-8201495-s390-java-opts.patch
    JDK-8201509-s390-atomic_store.patch
  - Renamed patches for clarity:
    aarch64BuildFailure.patch => JDK-8200556-aarch64-slowdebug-crash.patch
    systemCryptoPolicyPR3183.patch => pr3183-rh1340845-support_fedora_rhel_system_crypto_policy.patch
    bootcycle_jobs.patch => JDK-8201788-bootcycle-images-jobs.patch
    system-nss-ec-rh1565658.patch => pr1983-rh1565658-support_using_the_system_installation_of_nss_with_the_sunec_provider_jdk11.patch


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:10.0.1.10-3
changelog:
  - Inject build flags properly. See RHBZ#1571359
  - Added patch JDK-8202262-libjsig.so-extra-link-flags.patch
    since libjsig.so doesn't get linker flags injected properly.


author: Jiri Vanek <jvanek@redhat.com> - 1:10.0.1.10-7
changelog:
  - quoted sed expressions, changed possibly confusing # by @
  - added vendor(origin) into icons
  - removed last trace of relative symlinks
  - added BuildRequires of javapackages-tools to fix build failure after Requires change to javapackages-filesystem


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.16-1
changelog:
  - Initial version of JDK 11 ea based on tag jdk-11+16.
  - Removed patches no longer needed or upstream:
    sorted-diff.patch (see JDK-8198844)
    JDK-8201788-bootcycle-images-jobs.patch
    JDK-8201509-s390-atomic_store.patch
    JDK-8202262-libjsig.so-extra-link-flags.patch (never was an issue on 11)
    JDK-8193802-npe-jar-getVersionMap.patch
  - Updated and renamed patches:
    java-openjdk-s390-size_t.patch => JDK-8203030-s390-size_t.patch
  - Updated patches for JDK 11:
    pr1983-rh1565658-support_using_the_system_installation_of_nss_with_the_sunec_provider_jdk11.patch


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.16-2
changelog:
  - Disable Aarch64 slowdebug build (see JDK-8204331).
  - s390x doesn't have the SA even though it's a JIT arch.


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.19-1
changelog:
  - updated sources to jdk-11+19
  - added patch6 systemLcmsAndJpgFixFor-f0aeede1b855.patch to fix regression of system libraries after f0aeede1b855 commit
  - adapted pr1983-rh1565658-support_using_the_system_installation_of_nss_with_the_sunec_provider_jdk11.patch to accommodate changes after f0aeede1b855 commit


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.20-1
changelog:
  - removed patch6 JDK-8205616-systemLcmsAndJpgFixFor-rev_f0aeede1b855.patch
  - improved a bit generate_source_tarball.sh to serve also for systemtap
  - thus deleted generate_tapsets.sh
  - simplified and cleared update_package.sh
  - moved to single source jdk - from shenandoah/jdk11
  - bumped to latest jdk11+20
  - adapted PR2126 to jdk11+20
  - adapted handling of systemtap sources to new style
  - (no (misleading) version inside (full version is in name), thus different sed on tapsets and different directory)
  - shortened summaries and descriptions to around 80 chars
  - Hunspell spell checked
  - license fixed to correct jdk11 (sgehwolf)
  - more correct handling of internal libraries (sgehwolf)
  - added lib/security/public_suffix_list.dat as +20 have added it (JDK-8201815)
  - added test for shenandaoh GC presence where expected
  - Removed workaround for broken aarch64 slowdebug build
  - Removed all defattrs
  - Removed no longer necessary cleanup of diz and  debuginfo files


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.22-1
changelog:
  - added Recommends gtk3 for main package
  - changed BuildRequires from gtk2-devel to gtk3-devel (it can be more likely dropped)
  - added Suggests lksctp-tools, pcsc-lite-devel, cups for headless package
  - see RHBZ1598152
  - added trick to catch hs_err files (sgehwolf)
  - updated to shenandaoh-jdk-11+22


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.22-8
changelog:
  - Adjust system NSS patch, pr1983-rh1565658-support_using_the_system_installation_of_nss_with_the_sunec_provider_jdk11.patch, so
    as to filter -Wl,--as-needed from linker flags. Fixes FTBFS issue.


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.28-2
changelog:
  - jfr/*jfc files listed for all arches
  - lib/classlist do not exists s390, ifarch-ed via jit_arches out


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.22-6
changelog:
  - Add patch, JDK-8210416-RHBZ-1624122-fdlibm-opt-fix.patch, so as to
    optimize compilation of fdlibm library.
  - Add patch, JDK-8210425-RHBZ-1624122-sharedRuntimeTrig-opt-fix.patch, so
    as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
  - Add patch, JDK-8210647-RHBZ-1624122-libsaproc-opt-fix.patch, so as to
    optimize compilation of libsaproc (extra c flags won't override
    optimization).
  - Add patch, JDK-8210703-RHBZ-1624122-vmStructs-opt-fix.patch, so as to
    optimize compilation of vmStructs.cpp (part of libjvm.so).
  - No longer filter -O flags from C flags coming from
    redhat-rpm-config.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-5
changelog:
  - Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
    so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
    JDK-8210461.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-6
changelog:
  - Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
    so as to disable log math intrinsic on aarch64. Work-around for
    JDK-8210858


