# changelog

author: Ian Kent <ikent@redhat.com> - 1:5.1.4-18
changelog:
  - add man page note about extra slashes in paths.
  - add a number of covarity identified fixes.
  - change expire type naming to better reflect usage.
  - use defines for expire type.
  - make umount_ent() recognise forced umount.
  - enable SIGUSR2 handling in rpm spec file.
  - fix age setting at startup.


author: Ian Kent <ikent@redhat.com> - 1:5.1.5-4
changelog:
  - support strictexpire mount option.
  - fix hesiod string check in master_parse().
  - add BuildRequires: krb5-devel.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.2.1-19
changelog:
  - Python 2 binary package renamed to python2-fuse
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Iryna Shcherbina <ishcherb@redhat.com> - 0.2.1-21
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Miro Hrončok <mhroncok@redhat.com> - 0.2.1-22
changelog:
  - Update Python macros to new packaging standards
    (See https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build)


author: Robbie Harwood <rharwood@redhat.com> - 3.2.1-14
changelog:
  - Fix CVE-2016-10152 (hardcoded DNS fallback)
  - Fix CVE-2016-10151 (weak SUID check)
  - Move package to autosetup


author: Joe Orton <jorton@redhat.com> - 2.4.38-6
changelog:
  - apachectl: cleanup and replace script wholesale (#1641237)
   * drop "apachectl fullstatus" support
   * run systemctl with --no-pager option
   * implement graceful&graceful-stop by signal directly
  - run "httpd -t" from legacy action script


author: Joe Orton <jorton@redhat.com> - 2.4.39-3
changelog:
  - fix statedir symlink to point to /var/lib/httpd (#1697662)
  - mod_reqtimeout: fix default values regression (PR 63325)


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-3 + 0.10.3-5
changelog:
  - Disable OpenSSH hardening flags and use the ones provided by system
  - Ignore unknown parts of PKCS#11 URI
  - Do not fail with GSSAPI enabled in match blocks (#1580017)
  - Fix the segfaulting cavs test (#1628962)


author: Jakub Jelen <jjelen@redhat.com> - 7.9p1-1 + 0.10.3-6
changelog:
  - New upstream release OpenSSH 7.9p1 (#1632902, #1630166)
  - Honor GSSAPIServerIdentity option for GSSAPI key exchange
  - Do not break gsssapi-keyex authentication method when specified in
    AuthenticationMethods
  - Follow the system-wide PATH settings (#1633756)
  - Address some coverity issues


author: Jakub Jelen <jjelen@redhat.com> - 7.9p1-2 + 0.10.3-6
changelog:
  - Fix LDAP configure test (#1642414)
  - Avoid segfault on kerberos authentication failure
  - Reference correct file in configuration example (#1643274)
  - Dump missing GSSAPI configuration options
  - Allow to disable RSA signatures with SHA-1


author: Jakub Jelen <jjelen@redhat.com> - 7.9p1-3 + 0.10.3.6
changelog:
  - Backport Match final to unbreak canonicalization with crypto-policies (#1630166)
  - gsskex: Dump correct option
  - Backport several fixes from 7_9 branch, mostly related to certificate authentication (#1665611)
  - Backport patch for CVE-2018-20685 (#1665786)
  - Correctly initialize ECDSA key structures from PKCS#11


author: Jakub Jelen <jjelen@redhat.com> - 7.9p1-4 + 0.10.3.6
changelog:
  - Log when a client requests an interactive session and only sftp is allowed
  - Fix minor issues in ssh-copy-id
  - Enclose redhat specific configuration with Match final block


author: Jakub Jelen <jjelen@redhat.com> - 7.9p1-5 + 0.10.3.6
changelog:
  - Fix kerberos cleanup procedures with GSSAPI
  - Update cached passwd structure after PAM authentication
  - Do not fall back to sshd_net_t SELinux context
  - Fix corner cases of PKCS#11 URI implementation
  - Do not negotiate arbitrary primes with DH GEX in FIPS


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-1 + 0.10.3-7
changelog:
  - New upstream release (#1701072)
  - Removed support for VendroPatchLevel configuration option
  - Significant rework of GSSAPI Key Exchange
  - Significant rework of PKCS#11 URI support


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-2 + 0.10.3-7
changelog:
  - Use OpenSSL KDF
  - Use high-level OpenSSL API for signatures handling
  - Mention crypto-policies in manual pages instead of hardcoded defaults
  - Verify in package testsuite that SCP vulnerabilities are fixed
  - Do not fail in FIPS mode, when unsupported algorithm is listed in configuration


