# changelog

author: Kyle McMartin <kyle@redhat.com> - 20130418-25.gitb584174
changelog:
  - Use a common version number for both the iwl*-firmware packages and
    linux-firmware itself.
  - Don't reference old kernel-firmware package in %description


author: Josh Boyer <jwboyer@redhat.com> - 20130724-28.git31f6b30
changelog:
  - Temporarily remove AMD microcode (rhbz 988263)
  - Remove Creative CA0132 HD-audio files as they're in alsa-firmware


author: Josh Boyer <jwboyer@fedoraproject.org> - 20140131-35.gitd7f8a7c8
changelog:
  - Update to new snapshot
  - Updates for Intel 3160/7260, radeon HAWAII GPUs, and some rtlwifi chips
  - Fixes bugs 815579 1046935


author: Josh Boyer <jwboyer@fedoraproject.org>
changelog:
  - Add fix for team MTU settings from Jiri Pirko (rhbz 1099857)
  - Backport fix for issues with Quagga introduced by CVE fixes (rhbz 1097684)


author: Josh Boyer <jwboyer@fedoraproject.org>
changelog:
  - CVE-2014-3153 futex: pi futexes requeue issue (rhbz 1103626 1105609)
  - CVE-2014-3940 missing check during hugepage migration (rhbz 1104097 1105042)


author: Josh Boyer <jwboyer@fedoraproject.org> - 3.14.7-200
changelog:
  - Fix elantech right click on Dell vostro 5470 (rhbz 1103528)
  - Fix fstrim on dm-thin volume data (rhbz 1106856)
  - Fix NFS NULL pointer deref with ipv6 (rhbz 1099761)
  - Fix promisc mode on certain e1000e cards (rhbz 1064516)
  - Fix i915 backlight issue on gen4 (rhbz 1094066)
  - Linux v3.14.7


author: - Andreas Schneider <asn@redhat.com> - 4.1.3-1
changelog:
  - Update to Samba 4.1.3.
  - resolves: #1039454 - CVE-2013-4408.
  - resolves: #1039500 - CVE-2012-6150.


author: Petr Sabata <contyk@redhat.com> - 1.5-1
changelog:
  - 1.5 bump
  - BuildRoot and defattr cleanup
  - Use macros in Sources
  - Drop show-ports and foreach patches -- those have been included upstream


author: Petr Sabata <contyk@redhat.com> - 1.5-2
changelog:
  - Add three latest bugfixes from upstream git on top of 1.5
  - Dropping params patch (included upstream variant)


author: Rex Dieter <rdieter@fedoraproject.org> 2.3.3.4-6
changelog:
  - contribs-lib is not built and installed even with config (#794795, upstream ID: 3392466)
  - pkgconfig file is missing clucene-shared (upstream ID: 3461512)
  - non-descriptive descripton (#757319)


author: Paul Wouters <pwouters@redhat.com> - 1.0.1-1
changelog:
  - Updated to 1.0.1
  - Added daemon using systemd and configuration file
  - Removed legacy spec requirements
  - Patch for: parse.c:240:34: error: 'NULL' undeclared


author: Petr Sabata <psabata@redhat.com> - 007-2
changelog:
  - Licensing guidelines compliance fix
  - New cpufrequtils-devel subpackage created
  - Spec file cleanup


author: Sumit Bose <sbose@redhat.com> - 2.1-1
changelog:
  - Update to ctdb version  2.1
  - added fix for tevent configure check
  - make sure autogen.sh is called before configure
    Resolves: rhbz#925204


author: Sumit Bose <sbose@redhat.com> - 2.4-1
changelog:
  - Update to ctdb version 2.4
    Resolves: rhbz#1000471
  - removed version from doc dir
    Resolves: rhbz#993712


author: John Morris <john@zultron.com> - 1:2.2.12-2
changelog:
  - el6 build fixes (#1082384):
  - el6 autoconf too old to regen; use packaged files
  - fix compile error when __global_ldflags macro undefined


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.13-1
changelog:
  - dovecot updated to 2.2.13
  - fixes CVE-2014-3430: denial of service through maxxing out SSL connections
  - pop3 server was still crashing in v2.2.12 
  - maildir: Various fixes and improvements to handling compressed mails
  - fts-lucene, fts-solr: Fixed crash on search when the index contained
    duplicate entries.
  - mail_attachment_dir: Attachments with the last base64-encoded line
    longer than the rest wasn't handled correctly.
  - IMAP: SEARCH/SORT PARTIAL was handled completely wrong in v2.2.11+
  - acl: Global ACL file handling was broken when multiple entries
    matched the mailbox name


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.14-1
changelog:
  - dovecot updated to 2.2.14, pigeonhole updated to 0.4.3
  - fixed several race conditions with dovecot.index.cache handling that
    may have caused unnecessary "cache is corrupted" errors.
  - auth: If auth client listed userdb and disconnected before finishing,
    the auth worker process got stuck
  - imap-login, pop3-login: Fixed potential crashes when client
    disconnected unexpectedly.
  - imap proxy: The connection was hanging in some usage patterns.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.15-1
changelog:
  - dovecot updated to 2.2.15
  - various race condition fixes to LAYOUT=index
  - v2.2.14 virtual plugin crashed in some situations


author: Tom Callaway <spot@fedoraproject.org> - 2.0.10-5
changelog:
  - update to 2.0.10-4 (upstream numbering is goofy)
  - fix missing symbol issue with extension modules (bz810006)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.24-3
changelog:
  - Fix fetchmail loses last line of message if the non-default "mimedecode" option
    is enabled and if that line is not properly terminated
    Resolves: #955814


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.3.24-6
changelog:
  - Fix bogus dates in the %changelog
  - Backport better SSL protocol support and documentation
    Resolves: #1273016
  - Minor fixes in options, usage message and man page
    Resolves: #949013


author: Tomas Mraz <tmraz@redhat.com>- 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: John Dennis <jdennis@redhat.com> - 3.0.0-4
changelog:
  - resolves: bug#1031035
    remove radeapclient man page,
    upstream no longer supports radeapclient, use eapol_test instead
  - resolves: bug#1031061
    rlm_eap_leap memory corruption, see freeradius-rlm_leap.patch
  - move man pages for utils into utils subpackage from doc subpackage
  - fix HAVE_EC_CRYPTO test to include f20
  - add new directory /var/run/radiusd/tmp
    update mods-available/eap so tls-common.verify.tmpdir to point to it


author: John Dennis <jdennis@redhat.com> - 3.0.1-1
changelog:
  - Upgrade to upstream 3.0.1 release, full config compatible with 3.0.0.
    This is a roll-up of all upstream bugs fixes found in 3.0.0
    See upstream ChangeLog for details (in freeradius-doc subpackage)
  - fixes bugs 1053020 1044747 1048474 1043036


author: John Dennis <jdennis@redhat.com> - 3.0.1-2
changelog:
  - resolves: bug#1055073 (fedora 1055072)
    rlm_ippool; bad config file attribute and fails to send reply attributes
  - resolves: bug#1055567 (fedora 1056227)
    bad mysql sql syntax
  - change CFLAGS -imacros to -include to address gcc/gdb bug 1004526
    where gdb will not display source information, only <command-line>


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.1-4
changelog:
  - Fix CVE-2014-2015 "freeradius: stack-based buffer overflow flaw in rlm_pap
    module"
  - resolves: bug#1066984 (fedora 1066763)


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.2-1
changelog:
  - Upgrade to upstream 3.0.2 release, configuration compatible with 3.0.1.
    See upstream ChangeLog for details (in freeradius-doc subpackage)
  - Fixes bugs 1058884 1061408 1070447 1079500


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.3-1
changelog:
  - Upgrade to upstream 3.0.3 release.
    See upstream ChangeLog for details (in freeradius-doc subpackage).
  - Minor configuration parsing change: "Double-escaping of characters in Perl,
    and octal characters has been fixed. If your configuration has text like
    "\\000", you will need to remove one backslash."
  - Additionally includes post-release fixes for:
    * case-insensitive matching in compiled regular expressions not working,
    * upstream issue #634 "3.0.3 SIGSEGV on config parse",
    * upstream issue #635 "3.0.x - rlm_perl - strings are still
      escaped when passed to perl from FreeRADIUS",
    * upstream issue #639 "foreach may cause ABORT".
  - Fixes bugs 1097266 1070447


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.3-2
changelog:
  - Add explicit dependency on OpenSSL package with fixed CVE-2014-0160
    (Heartbleed bug).
  - Add confirmation of CVE-2014-0160 being fixed in OpenSSL to radiusd.conf.


author: Peter Jones <pjones@redhat.com> - 8.21-1
changelog:
  - Use systemd vconsole.conf and locale.conf if present
    Resolves rhbz#881908
  - Avoid unnecessary stat calls (from Ville Skyttä)
    Resolves rhbz#741135
  - Spelling fixes (Ville Skyttä)
  - Add a test case for rhbz#742885
  - Handle case-insensitive extlinux config files properly (from Johannes Weiner)


author: Peter Jones <pjones@redhat.com> - 8.23-1
changelog:
  - Update to 8.23
  - Fix empty root device in case of an empty /etc/fstab (lemenkov)
  - General refactoring and cleanup (harald)
  - Don't clean up modules.* so aggressively (harald)


author: Peter Jones <pjones@redhat.com> - 8.25-1
changelog:
  - Error instead of segfaulting if we can't find any working config
    Resolves: rhbz#912873
    Resolves: rhbz#751608


author: Mathieu Bridon <bochecha@fedoraproject.org> - 6.11-1
changelog:
  - New upstream release.
  - Removed our patch, it has been integrated upstream. As such, we also don't
    need to re-run autoreconf any more.


author: Mathieu Bridon <bochecha@fedoraproject.org> - 6.14-1
changelog:
  - New upstream release.
  - Fix scriptlets, ldconfig is needed for the libs subpackage, not the main one.


author: Quentin Armitage <quentin@armitage.org.uk> 6.19-2
changelog:
  - Add service pkg - adds save and reload functionality on shutdown/startup
  - Add requires dependency of ipset on matching ipset-libs


author: Thomas Woerner <twoerner@redhat.com> 1.4.15-1
changelog:
  - new version 1.4.15
    - extensions: add HMARK target
    - iptables-restore: fix parameter parsing (shows up with gcc-4.7)
    - iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)
    - libxtables: add xtables_ip[6]mask_to_cidr
    - libxt_devgroup: add man page snippet
    - libxt_hashlimit: add support for byte-based operation
    - libxt_recent: add --mask netmask
    - libxt_recent: remove unused variable
    - libxt_HMARK: correct a number of errors introduced by Pablo's rework
    - libxt_HMARK: fix ct case example
    - libxt_HMARK: fix output of iptables -L
    - Revert "iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)"


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-1
changelog:
  - new version 1.4.16.2
    - build: support for automake-1.12
    - build: separate AC variable replacements from xtables.h
    - build: have `make clean` remove dep files too
    - doc: grammatical updates to libxt_SET
    - doc: clean up interpunction in state list for xt_conntrack
    - doc: deduplicate extension descriptions into a new manpage
    - doc: trim "state" manpage and reference conntrack instead
    - doc: have NOTRACK manpage point to CT instead
    - doc: mention iptables-apply in the SEE ALSO sections
    - extensions: libxt_addrtype: fix type in help message
    - include: add missing linux/netfilter_ipv4/ip_queue.h
    - iptables: fix wrong error messages
    - iptables: support for match aliases
    - iptables: support for target aliases
    - iptables-restore: warn about -t in rule lines
    - ip[6]tables-restore: cleanup to reduce one level of indentation
    - libip6t_frag: match any frag id by default
    - libxtables: consolidate preference logic
    - libxt_devgroup: consolidate devgroup specification parsing
    - libxt_devgroup: guard against negative numbers
    - libxt_LED: guard against negative numbers
    - libxt_NOTRACK: replace as an alias to CT --notrack
    - libxt_state: replace as an alias to xt_conntrack
    - libxt_tcp: print space before, not after "flags:"
    - libxt_u32: do bounds checking for @'s operands
    - libxt_*limit: avoid division by zero
    - Merge branch 'master' of git://git.inai.de/iptables
    - Merge remote-tracking branch 'nf/stable'
    - New set match revision with --return-nomatch flag support
  - dropped fixrestore patch, upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-2
changelog:
  - new sub package services providing the systemd services (RHBZ#862922)
  - new sub package utils: provides nfnl_osf and the pf.os database
  - using /usr/libexec/iptables as script path for the original init scripts
  - added service iptables save funcitonality using the new way provided by 
    initscripts 9.37.1 (RHBZ#748134)
  - added virtual provide for libxtables.so.7


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-4
changelog:
  - fixed missing services for update of pre F-18 installations (rhbz#867960)
    - provide and obsolete old main package in services sub package
    - provide and obsolete old ipv6 sub package (pre F-17) in services sub package


author: Ville Skyttä <ville.skytta@iki.fi> - 1.4.16.2-6
changelog:
  - Own unowned -services libexec dirs (#894464, Michael Scherer).
  - Fix -services unit file permissions (#732936, Michal Schmidt).


author: Thomas Woerner <twoerner@redhat.com> 1.4.18-1
changelog:
  - new version 1.4.18 
    - lots of documentation changes
    - Introduce match/target aliases
    - Add the "state" alias to the "conntrack" match
    - iptables: remove unused leftover definitions
    - libxtables: add xtables_rule_matches_free
    - libxtables: add xtables_print_num
    - extensions: libip6t_DNPT: fix wording in DNPT target
    - extension: libip6t_DNAT: allow port DNAT without address
    - extensions: libip6t_DNAT: set IPv6 DNAT --to-destination
    - extensions: S/DNPT: add missing save function
  - changes of 1.4.17:
    - libxt_time: add support to ignore day transition
    - Convert the NAT targets to use the kernel supplied nf_nat.h header
    - extensions: add IPv6 MASQUERADE extension
    - extensions: add IPv6 SNAT extension
    - extensions: add IPv6 DNAT target
    - extensions: add IPv6 REDIRECT extension
    - extensions: add IPv6 NETMAP extension
    - extensions: add NPT extension
    - extensions: libxt_statistic: Fix save output


author: Thomas Woerner <twoerner@redhat.com> 1.4.19.1-1
changelog:
  - new version 1.4.19.1
    - libxt_NFQUEUE: fix bypass option documentation
    - extensions: add connlabel match
    - extensions: add connlabel match
    - ip[6]tables: show --protocol instead of --proto in usage
    - libxt_recent: Fix missing space in manpage for --mask option
    - extensions: libxt_multiport: Update manpage to list valid protocols
    - utils: nfnl_osf: use the right nfnetlink lib
    - libip6t_NETMAP: Use xtables_ip6mask_to_cidr and get rid of libip6tc dependency
    - Revert "build: resolve link failure for ip6t_NETMAP"
    - libxt_osf: fix missing --ttl and --log in save output
    - libxt_osf: fix bad location for location in --genre
    - libip6t_SNPT: add manpage
    - libip6t_DNPT: add manpage
    - utils: updates .gitignore to include nfbpf_compile
    - extensions: libxt_bpf: clarify --bytecode argument
    - libxtables: fix parsing of dotted network mask format
    - build: bump version to 1.4.19
    - libxt_conntrack: fix state match alias state parsing
    - extensions: add libxt_bpf extension
    - utils: nfbpf_compile
    - doc: mention SNAT in INPUT chain since kernel 2.6.36
  - fixed changelog date weekdays where needed


author: Matthias Saou <http://freshrpms.net/> 1.26-2
changelog:
  - Backport the init script from RHEL6, which contains lots of changes to make
    it behave simlarly to the iptables init script (#593276).


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.14-2
changelog:
  - Add patch by Stephen Gallagher to include manual pages for
    ldb_connect() and several other functions.


author: Paul Wouters <pwouters@redhat.com> - 3.4-1
changelog:
  - Updated to 3.4, which only contains style changes to kernel coding style
  - IN MEMORIAM: June 3rd, 2013 Hugh Daniel


author: Paul Wouters <pwouters@redhat.com> - 3.5-2
changelog:
  - Added interop patch for (some?) Cisco VPN clients sending 16 zero
    bytes of extraneous IKE data
  - Removed fipscheck_version


author: Paul Wouters <pwouters@redhat.com> - 3.6-1
changelog:
  - Updated to 3.6 (IKEv2, MODECFG, Cisco interop fixes)
  - Generate empty NSS db if none exists
  - FIPS update, prelink blacklist added.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.10-15
changelog:
  - New upstream release 1.2.10
  - Remove upstreamed patches
  - Provides functionality for the upcoming Samba 4 beta


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.18-2
changelog:
  - Apply a patch from upstream to fix tevent_poll's additional_flags
    on 32bit architectures
  - Resolves: rhbz#975490


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.18-3
changelog:
  - Make the dependency requirements arch-specific
  - Remove ancient, unused patches
  - Remove python variables that are not needed on modern systems


author: Jon Masters <jcm@jonmasters.org> 3.13-0
changelog:
  - New upstream release
  - Supports multiple config file directories
  - Fix handling of Linux 3.x series kernels


author: Jon Masters <jcm@redhat.com> - 3.16-3
changelog:
  - Remove legacy dist-alsa, dist-oss, and dist.conf files (#725841)
  - Make sure we own /lib/modprobe.d and put future stuff in there


author: Milan Crha <mcrha@redhat.com> - 1.0-7
changelog:
  - Add patch to use system's popt.h
  - Add patch to compile only certain parts of the package
  - Disable openchange-server for rawhide too (due to samba4 changes)


author: Milan Crha <mcrha@redhat.com> - 1.0-8
changelog:
  - Add patch for OpenChange bug #397 (crash under MAPIUninitialize)
  - Disable build of python and mapiproxy


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.38-3
changelog:
  - Ikev2 changes from rhel6 to fedora
  - Sha256 changes from rhel6 to fedora
  - Fixed 384/512 changes from rhel6 to fedora
  - Ported cisco-openswan interop changes in aggresive/main mode
  - Labeld-ipsec fixes
  - aes-gcm fixes in ikev1 mode
  - updown netkey script changes related to updating/removing 
    interface ip address and routes
  - Fixes related to rhbz 609343
  - Fixes related to rhbz 831676


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.38-4
changelog:
  - Phase15 as xauth and modecfg is called in openswan is not
    handled properly when only xauth (without modecfg) is used.
  - dpd events and ike/sa lifetime expiry events are not created
    properly when xauth is used without modecfg.
    This commit addresses these issues.


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.38-5
changelog:
  - rhbz #771612: ipsec barf should not grep sparse file. The 
  patch has been provided by pwouters@redhat.com.
  - rhbz #785180: openswan uses ifconfig which is deprecated.
  - rhbz #796683: Compile time no-strict-aliasing issue.
  - rhbz #834396: Coverity scan fixes, warnings, dead code.
  - rhbz #834400: NAT-OA reserved field issue.


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.38-6
changelog:
  - Fixed ipsec verify to avoid perl and use python instead. It helps
    during minimum install so that openswan does not have to pull perl
    packages, and it keeps minimal install really minimum. Also
    Removed compilation of ipsec policy subprogram as it is not
    needed with NETKEY. This patch has been provided by pwouters.


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.38-7
changelog:
  - redhat #820143: systemd support for openswan pluto daemon.
  - Made changes to spec file to support systemd service support.
  - Updated README.nss to remove unnecessary configuration parameters
    that are not required by default and are network topology specific.


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.38-8
changelog:
  - Lot of clean up of spec file, removing unnecessary stuff and 
    fixing ordering of sections. Hopefully making it more readable now.
  - Fixed /var/run/pluto error as it was installed by the package, so
    there is no need to create it inside spec file.
  - Fixed pluto run time error related to missing directories in 
    /etc/ipsec.d/ directory.


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.38-10
changelog:
  - 848132: dpd issue
  - 884556: Fixed relro issue as it was done incorrectly upstream.
    -DPIE was missing so fixed it now. Removed RAEDME.Fedora
     from doc as it is not relevant.
  - 833910: Enabled labeled ipsec
  - fixed zeroization of a message during IKEv2 exchange that
    was missed from rhel merge.
  - fixed a bad commit from openswan upstream that caused ikev2
    crashes and left it unusable.
  - Incorrect unbound changes caused restore resolveconf failures,
    which has been fixed now.


author: Ville Skyttä <ville.skytta@iki.fi> - 7:3.3.4-2
changelog:
  - Fix basic auth and log daemon DB helper builds.
  - Use xz compressed tarball, fix source URLs.
  - Fix bogus dates in %changelog.


author: Michal Luscon <mluscon@redhat.com> - 7:3.3.9-1
changelog:
  - Update to latest upstream version 3.3.9
  - Fixed #976815: file descriptors are hard coded to 16384
  - Fixed: active ftp crashing
  - Fixed: offset of patches


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-80
changelog:
  - Resolves: rhbz#903078 - Out-of-bounds read flaws in
                            autofs and ssh services responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-81
changelog:
  - Resolves: rhbz#903078 - TOCTOU race conditions by copying
                            and removing directory trees


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82
changelog:
  - Resolves: rhbz#888614 - Failure in memberof can lead to failed
                            database update


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.2
changelog:
  - Resolves: rhbz#914671 - pwd_expiration_warning has wrong default for
                            Kerberos
  - Fix the NVR


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.3
changelog:
  - Fix pwd_expiration_warning=0
  - Resolves: rhbz#914671 - pwd_expiration_warning has wrong default for
                            Kerberos


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.4
changelog:
  - Resolves: rhbz#911298 - sssd: simple access provider flaw prevents intended
                             ACL use when client to an AD provider


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-82.6
changelog:
  - Resolves: #950874: Simple access control always denies uppercased users
                       in case insensitive domain


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.3-8
changelog:
  - Fix build failure in fedora rawhide. It was caused due to 
    removal of CMAKE_INSTALL_LIBDIR macro from /etc/rpm/cmake.macros 
    that was present in previous fedora releases.


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.3-13
changelog:
  - Fixes for rhbz #985785 to fix crash issue in Filecert manager
    in platidimv. 
  - Fixed crashing of attestation imv so while loading due to
    wrong static initialization order in attestation imv.
  - Fixes some coverity scan errors.
  - Fixed comilation when sysconf dir variable is not defined on a
    local system. Added some messaging outputs during compilations.
  - Fixed erroneous data type conversion issues causing wrong outputs
    and with potential for data corruption.
  - Fixes tncutil build issue from upstream commit
  - Fixes typo in assignment in platidimv from upstream commit
  - Fixes Fix typo in variable declaraction in hostscannerimv 
    from upstream commit
  - Fixes imcv shared library build issue from upstream commit


author: Jiri Skala <jskala@redhat.com> - 3.0.1-1
changelog:
  - update to latest upstream 3.0.1
  - fixes #851441 - Introduce new systemd-rpm macros in vsftpd spec file
  - fixes #845980 - vsftpd seccomp filter is too strict


author: Nicolas Chauvet <kwizart@gmail.com> - 1.42-2
changelog:
  - Fix for UsrMove - rfbz#2360
  - Fix Conflict with ipset - rfbz#2201
  - Add Requires ipset >= 6.11 - rfbz#2226


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.7-2
changelog:
  - resolves: #972692 - Build with PIE and full RELRO.
  - resolves: #884169 - Add explicit dependencies suggested by rpmdiff.
  - resolves: #981033 - Local user's krb5cc deleted by winbind.
  - resolves: #984331 - Fix samba-common tmpfiles configuration file in wrong
                        directory.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.7-3
changelog:
  - resolves: #985107 - Add support for new default location for Kerberos
                        credential caches.


author: - Andreas Schneider <asn@redhat.com> 2:4.0.8-1
changelog:
  - Update to Samba 4.0.8
  - resolves: #993043 - CVE-2013-4124 [fedora-all]
  - resolves: #984401 - CVE-2013-4124 DoS via integer overflow when reading
                        an EA list
  - related: #985107 - Fix wbinfo error message of unknown command
                       for --krb5ccname.


author: - Andreas Schneider <asn@redhat.com> 2:4.0.9-3
changelog:
  - resolves: #1018856 - Fix installation of pam_winbind after upgrade.
  - related: #1010722 - Split out a samba-winbind-modules package.


author: - Andreas Schneider <asn@redhat.com> 2:4.0.12-1
changelog:
  - Update to Samba 4.0.13.
  - resolves: #1039454 - CVE-2013-4408.
  - resolves: #1039500 - CVE-2012-6150.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.2-1
changelog:
  - Update to Samba 4.0.2.
  - Fixes CVE-2013-0213.
  - Fixes CVE-2013-0214.
  - resolves: #906002
  - resolves: #905700
  - resolves: #905704
  - Fix conn->share_access which is reset between user switches.
  - resolves: #903806
  - Add missing example and make sure we don't introduce perl dependencies.
  - resolves: #639470


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.3-1
changelog:
  - Update to Samba 4.0.3.
  - resolves: #907544 - Add unowned directory /usr/lib64/samba.
  - resolves: #906517 - Fix pidl code generation with gcc 4.8.
  - resolves: #908353 - Fix passdb backend ldapsam as module.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.4-3
changelog:
  - resolves: #919405 - Fix and improve large_readx handling for broken clients.
  - resolves: #924525 - Don't use waf caching.


author: - Andreas Schneider <asn@redhat.com> - 2:4.0.5-1
changelog:
  - Update to Samba 4.0.5.
  - Add UPN enumeration to passdb internal API (bso #9779).
  - resolves: #928947 - samba-doc is obsolete now.
  - resolves: #948606 - LogRotate should be optional, and not a hard "Requires".


