# changelog

author: Nalin Dahyabhai <nalin@redhat.com> 1.10-2
changelog:
  - add patch to accept keytab entries with vno==0 as matches when we're
    searching for an entry with a specific name/kvno (#230382/#782211,RT#3349)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-5
changelog:
  - when removing -workstation, remove our files from the info index while
    the file is still there, in %preun, rather than %postun, and use the
    compressed file's name (#801035)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-1
changelog:
  - update to 1.10.1
    - drop the KDC crash fix
    - drop the KDC lookaside cache fix
    - drop the fix for kadmind RPC ACLs (CVE-2012-1012)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-2
changelog:
  - change back dns_lookup_kdc to the default setting (Stef Walter, #805318)
  - comment out example.com examples in default krb5.conf (Stef Walter, #805320)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-3
changelog:
  - have -server require /usr/share/dict/words, which we set as the default
    dict_file in kdc.conf (#817089)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-1
changelog:
  - update to 1.10.2
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user
    - also package the PDF format admin, user, and install guides
    - drop some PDFs that no longer get built right
  - add a backport of Stef's patch to set the client's list of supported
    enctypes to match the types of keys that we have when we are using a
    keytab to try to get initial credentials, so that a KDC won't send us
    an AS reply that we can't encrypt (RT#2131, #748528)
  - don't shuffle around any shared libraries on releases with no-separate-/usr,
    since /usr/lib is the same place as /lib
  - add explicit buildrequires: on 'hostname', for the tests, on systems where
    it's in its own package, and require net-tools, which used to provide the
    command, everywhere


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-2
changelog:
  - back out this labeling change (dwalsh):
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user


author: Derek Atkins <warlord@MIT.EDU>
changelog:
  - change non-target-cpu kernel dep to a file dep
  - make sure we use the proper kernel version for the dependency.


author: Derek Atkins <warlord@MIT.EDU> 1.4.2-0.1.rc1
changelog:
  - update to 1.4.2-rc1
  - hand-apply lee damon's changes to support largesmp kernels from RHEL4
    (but only add support for 2.6 kernels.  No need for the 2.4 kernels).
  - don't need the posixlock patch anymore.


author: Derrick Brashear <shadow@dementia.org> 1.4.2-2
changelog:
  - integrate s390x changes
  - allow for building libafs*.a and not libafs*.so into packages, for platforms
    that won't build the .so files.


author: Simon Wilkinson <simon@sxw.org.uk> 1.4.4-3
changelog:
  - Use distributed files, rather than those in packager's SOURCE directory
  - Remove SuidCells stuff, which was unused


author: Simon Wilkinson <simon@sxw.org.uk> 1.4.5
changelog:
  - Update to match the shipped 1.4.5 RPMS
  - Fix the kvariant stuff to only configure the 'standard' case once
  - Add openafs-kvers.sh back in


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-3
changelog:
  - backport a fix to allow a PKINIT client to handle SignedData from a KDC
    that's signed with a certificate that isn't in the SignedData, but which
    is available as an anchor or intermediate on the client (RT#7183)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-5
changelog:
  - add upstream patch to fix freeing an uninitialized pointer and dereferencing
    another uninitialized pointer in the KDC (MITKRB5-SA-2012-001, CVE-2012-1014
    and CVE-2012-1015, #844779 and #844777)
  - fix a thinko in whether or not we mess around with devel .so symlinks on
    systems without a separate /usr (sbose)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-6
changelog:
  - go back to not messing with library file paths on Fedora 17: it breaks
    file path dependencies in other packages, and since Fedora 17 is already
    released, breaking that is our fault


author: Joe Orton <jorton@redhat.com> - 2.2.21-6
changelog:
  - complete conversion to systemd, drop init script (#770311)
  - fix comments in /etc/sysconfig/httpd (#771024)
  - enable PrivateTmp in service file (#781440)
  - set LANG=C in /etc/sysconfig/httpd


author: Joe Orton <jorton@redhat.com> - 2.2.22-4
changelog:
  - switch default runtimedir to /var/run/httpd
  - extend _httpd_* macro set per proposed guidelines
  - fix comments in sysconfig file (#771024)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha2.2
changelog:
  - modify the deltat grammar to also tell gcc (4.7) to suppress
    "maybe-uninitialized" warnings in addition to the "uninitialized" warnings
    it's already being told to suppress (RT#7080)


author: Mitchell Berger <mitchb@mit.edu> - 4.0.0-3.1405M.svn20100104
changelog:
  - Update to new original upstream version (svn snapshot)
  - Build and install libmrclient as a shared library (from Debathena)


author: Mitchell Berger <mitchb@mit.edu> - 4.0.0-4.1489M.svn20100223
changelog:
  - Update to new original upstream version (svn snapshot)
  - Drop install-headers patch which was incorporated upstream (from Debathena)


author: Mitchell Berger <mitchb@mit.edu> 1.9-1
changelog:
  - Per Fedora packaging guidelines, don't ever remove groups.
  - Rebuild to ensure that the nss-nonlocal-users group is added, even if it was
    previously rejected by a buggy groupadd with an incorrect name length limit.


author: Tomas Mraz <tmraz@redhat.com> - 5.9p1-13 + 0.9.2-32
changelog:
  - add back the restorecon call to ssh-copy-id - it might be needed on older
    distributions (#739989)


author: Petr Lautrbach <plautrba@redhat.com> 5.9p1-18 + 0.9.2-32
changelog:
  - replace TwoFactorAuth with RequiredAuthentications[12]
    https://bugzilla.mindrot.org/show_bug.cgi?id=983


author: Thomas Vander Stichele <thomas at apestaart dot org>
changelog:
  - 1.0.11.1-5
  - Clarify license based on https://github.com/dajobe/redland-bindings/commit/e5cf494c69f541ad3d357b69c821a85865dbdbc4
  - More changes from package review
  - Incorporate upstream ruby patch
  - Incorporate upstream python patch


author: Anders Kaseorg <andersk@mit.edu> - 3.0-0
changelog:
  - Decrease version below a hypothetical Fedora package.
  - Split out -server, -libs, and -devel into subpackages.
  - Disable the static library and remove the libtool archive.


author: Tomas Mraz <tmraz@redhat.com> 5.9p1-23 + 0.9.3-1
changelog:
  - fix segfault in su when pam_ssh_agent_auth is used and the ssh-agent
    is not running, most probably not exploitable
  - update pam_ssh_agent_auth to 0.9.3 upstream version


author: Petr Lautrbach <plautrba@redhat.com> 5.9p1-28 + 0.9.3-1
changelog:
  - avoid xfree(NULL) in ssh_selinux_copy_context() (#789502)
  - fix the man moduli page (#841065)
  - fix the required authentications patch (#872608)
  - fix IPQoS not being set on non-mapped v4-in-v6 addressed connections (#861818)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-7
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #914756)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-9
changelog:
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917841, CVE-2012-1016)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.8.25-3
changelog:
  - And slightly change %gem_install because rubygems 1.8.25
    does not support --document=ri,rdoc style
    (Vít Ondruch <vondruch@redhat.com>)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.8.25-5
changelog:
  - Detect json / io-console directory at %check
  - Prevent squash of %gem_install with following line
    (Vít Ondruch <vondruch@redhat.com>)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-10
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #949984/#949987)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-11
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #951964)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.7.5-1
changelog:
  - New upstream release 1.7.5
  - Obsoletes patch #2
  - Rebase patch #1 (optflags) to match the 1.7.5 code
  - Fixed Source0 URL to point at the upstream tarball


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.0-1
changelog:
  - New upstream release 1.0
  - Remove patches, no longer needed for nodejs
  - Fix typo in -devel description
  - use github tarball instead of checkout


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 2.0-2.20121110git245f6f0
changelog:
  - latest git snapshot
  - fixes tests
  - use SMP make flags
  - build as Release instead of Debug
  - ship new strict variant


author: Stephen Gallagher <sgallagh@redhat.com> - 1:0.9.4-4.gitdc559a5
changelog:
  - Bump epoch for the version downgrade
  - The 0.9.7 version hit the Rawhide repo due to the mass rebuild, we need a
    clean upgrade path.


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:0.10.0-2.git5462dab
changelog:
  - drop the patchlevel from the SONAME since libuv will retain binary
    compatibility for the life of the 0.10.x series


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 0.8.2-2
changelog:
  - use RPM-installed headers by default
  - now patched to use the system gyp instead of relying on a symlink


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 0.10.0-3
changelog:
  - add virtual ABI provides for node and v8 so binary module's deps break when
    binary compatibility is broken
  - automatically add matching Requires to nodejs binary modules
  - add %nodejs_arches macro to future-proof ExcluseArch stanza in dependent
    packages


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 0.10.2-1
changelog:
  - new upstream release 0.10.2
    http://blog.nodejs.org/2013/03/28/node-v0-10-2-stable/
  - remove %nodejs_arches macro since it will only be useful if it is present in
    the redhat-rpm-config package
  - add default filtering macro to remove unwanted Provides from native modules
  - nodejs-symlink-deps now supports multiple modules in one SRPM properly
  - nodejs-symlink-deps also now supports a --check argument that works in the
    current working directry instead of the buildroot


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 0.10.3-1
changelog:
  - new upstream release 0.10.3
    http://blog.nodejs.org/2013/04/03/node-v0-10-3-stable/
  - nodejs-symlink-deps: only create symlink if target exists
  - nodejs-symlink-deps: symlink devDependencies when --check is used


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 0.10.4-1
changelog:
  - new upstream release 0.10.4
    http://blog.nodejs.org/2013/04/11/node-v0-10-4-stable/
  - add no-op macro to permit spec compatibility with EPEL


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.3.0-3
changelog:
  - rename from opener to nodejs-opener
  - add exec permission on opener (executable and lib are same file)
  - remove DOS EOLs from LICENSE.txt


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.1.3-2
changelog:
  - bring into conformance with newer library packaging standards
  - guard Requires for F17 automatic dependency generation


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.2.17-2
changelog:
  - revert a change that adds a dep (that only affects Windows anyway)
  - fix bogus date in changelog warning


author: Tom Callaway <spot@fedoraproject.org> - 1:3.13.7.5-1
changelog:
  - update to 3.13.7.5 (needed for chromium 23)
  - Resolves multiple security issues (CVE-2012-5120, CVE-2012-5128)
  - d8 is now using a static libv8, resolves bz 881973)


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1:3.14.5.8-1
changelog:
  - new upstream release 3.14.5.8
  - backport security fix for remote DoS via crafted javascript (RHBZ#924495; CVE-2013-2632)


author: Paul Howarth <paul@city-fan.org> 2.3.6-1
changelog:
  - Update to 2.3.6 (see CHANGES-FCGID for full details)
    - Fix possible stack buffer overwrite (CVE-2010-3872)
    - Change the default for FcgidMaxRequestLen from 1GB to 128K; administrators
      should change this to an appropriate value based on site requirements
    - Correct a problem that resulted in FcgidMaxProcesses being ignored in some
      situations
    - Return 500 instead of segfaulting when the application returns no output
  - Don't include SELinux policy for RHEL-5 builds since RHEL >= 5.5 includes it
  - Explicitly require /bin/sed for fixconf script


author: Paul Howarth <paul@city-fan.org> 2.3.6-2
changelog:
  - Add /etc/tmpfiles.d/mod_fcgid.conf for builds on Fedora 15 onwards to
    support running with /var/run on tmpfs (#656625)


author: Paul Howarth <paul@city-fan.org> 2.3.6-5
changelog:
  - Fix regression in 2.3.6 that broke process controls when using vhost-specific
    configuration (upstream issue 49902, #783742, CVE-2012-1181)


author: Paul Howarth <paul@city-fan.org> 2.3.6-6
changelog:
  - Fix compatibility with httpd 2.4 in F-18/RHEL-7 onwards
  - Use /run rather than /var/run from F-15/RHEL-7 onwards


author: Paul Howarth <paul@city-fan.org> 2.3.7-1
changelog:
  - Update to 2.3.7
    - Introduce FcgidWin32PreventOrphans directive on Windows to use OS Job
      Control Objects to terminate all running fcgi's when the worker process
      has been abruptly terminated (PR: 51078)
    - Periodically clean out the brigades that are pulling in the request body
      for handoff to the fcgid child (PR: 51749)
    - Resolve crash during graceful restarts (PR: 50309)
    - Solve latency/congestion of resolving effective user file access rights
      when no such info is desired, for config-related filename stats (PR: 51020)
    - Fix regression in 2.3.6 that broke process controls when using
      vhost-specific configuration
    - Account for first process in class in the spawn score
  - Drop patch for CVE-2012-1181, now included in upstream release


author: Anders Kaseorg <andersk@mit.edu> - 2.3.7-1.scripts.1
changelog:
  - Fix CVE-2013-4365.  Upstream patch from
    https://svn.apache.org/viewvc?view=revision&revision=r1527362


author: Josh Boyer <jwboyer@redhat.com> - 3.9.9-100
changelog:
  - CVE-2013-1059 libceph: Fix NULL pointer dereference in auth client code (rhbz 977356 980341)
  - CVE-2013-2234 net: information leak in AF_KEY notify (rhbz 980995 981007)
  - Linux v3.9.9


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Add report fixup for Genius Gila mouse from Benjamin Tissoires (rhbz 959721)
  - Add vhost-net use-after-free fix (rhbz 976789 980643)
  - Add fix for timer issue in bridge code (rhbz 980254)
  - CVE-2013-2232 ipv6: using ipv4 vs ipv6 structure during routing lookup in sendmsg (rhbz 981552 981564)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Fix various overflow issues in ext4 (rhbz 976837)
  - Add iwlwifi fix for connection issue (rhbz 885407)


