# changelog

author: Tom "spot" Callaway <tcallawa@redhat.com> 1:0-0.2.20070920
changelog:
  - fixed versioning (bumped epoch, since it now shows as older)
  - change sbin symlink to actual copy to be safe


author: Matthias Saou <http://freshrpms.net/> 8.38.6-1
changelog:
  - Update to 8.38.6.
  - Remove no longer shipped fireglcontrolpanel.
  - Include desktop entry for the new ATI Catalyst Control Center (amdcccle).
  - Remove vendor prefix from the desktop file.


author: Matthias Saou <http://freshrpms.net/> 8.29.6-3
changelog:
  - Add /usr/X11R6 dri symlinks, required because of hardcoded paths inside the
    main libraries (Alexandre Silva Lopes).
  - Add /etc/ati/authatieventsd.sh since it is required by the Fedora init script
    (Alexandre Silva Lopes).


author: Matt Domsch <Matt_Domsch@dell.com> 2.0.16.1
changelog:
  - spec file cleanups per re-review in Fedora
  - add bash completion, rpmbuild check, pinit, pass-arch patches from
    Mandriva.  These are generic.  The other Mandriva patches appear to
    be distro-specific.
  - Look for /etc/sysconfig/module-init-tools to get some values.


author: Matt Domsch <Matt_Domsch@dell.com> 2.0.16
changelog:
  - fix override_dest_module_location() for historical distro versions
  - don't run weak-modules if it doesn't exist


author: Matt Domsch <Matt_Domsch@dell.com> 2.0.14.1
changelog:
  - After upgrading from older DKMS versions to 2.0.14, any previously
    installed modules wouldn't show status properly, and wouldn't
    uninstall properly, due to the new policy of using /extras/ and
    /updates/.  Needed to take that into account and look in both places.
  - SuSE puts weak-modules in /usr/lib/module-init-tools not /sbin.


author: Matt Domsch <Matt_Domsch@dell.com> 2.0.13.2
changelog:
  - RHEL5 weak module recognition with new state installed-weak
  - autoinstaller recognizes installed-weak and doesn't rebuild
  - RHEL5 and SLES10 and higher weak module code expects modules to go
    into /lib/modules/$kern/{extra,updates} respectively, so force that.


author: Matt Domsch <Matt_Domsch@dell.com>
changelog:
  - patch from http://qa.mandriva.com/show_bug.cgi?id=27985 assigns new
    modprobe.conf alias ordinals starting at zero.


author: Matt Domsch <Matt_Domsch@dell.com> 2.0.13.1
changelog:
  - properly create driver disks for Fedora Core 6 and RHEL5
  - make .iso, .tar, and floppy .img driver disks for Red Hat and SuSE
  - set CLEAN properly even if MAKE[] isn't set.
  - fix install.sh buglet installing the manpage


author: Matt Domsch <Matt_Domsch@dell.com> 2.0.10.1-1
changelog:
  - fix munging of /etc/sysconfig/kernel INITRD_MODULES= line
    so it doesn't move already-present entries to the end


author: Matt Domsch <Matt_Domsch@dell.com> 2.0.9.1-1
changelog:
  - patch from Eric Devolder enables mkinitrd for Debian Sarge
  - include debian/ directory in upstream tarball


author: Matt Domsch <Matt_Domsch@dell.com> 2.0.8.3
changelog:
  - look to DKMS_DIRECTIVE* environment variables to override dkms.conf settings
  - don't create/remove (unused) /var/lock/subsys/dkms files in autoinstaller


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 2.0.8.2
changelog:
  - Multi driver suse driver disk support (thanks to Sreenivas.Bagalkote@engenio.com)
  - Cleanup tempdir when ldtarball fails


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 2.0.5.9
changelog:
  - FIXED BUG, when only some modules have original_modules, ARCHIVE_PREF3 wasn't getting reset causing big problems


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 2.0.4.3
changelog:
  - Allow MAKE_MATCH[0] to decide if MAKE[0] will be used
  - Add Taroon check in template-dkms-mkrpm.spec for ia32e detection


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 2.0.3.3
changelog:
  - Added quotes to $kernel_config when checking variable
  - Tweak the multiowned arch detection workaround to deal with no ownership


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 2.0.2.5
changelog:
  - DKMS ldtarball arch fix for changed Andreas 2.0.2 code
  - Workaround for Red Hat's new source symlink in 2.6.9
  - All 'cd -' now output to /dev/null


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 2.0.1.2-1
changelog:
  - Charles Duffy's fix for multiple rpms owning /lib/modules/kernel...
  - Andreas Gruenbacher's removal of IFS usage
  - Andreas Gruenbacher's reorganizing prepare check into prepare_kernel
  - Andreas Gruenbacher's patch to cut down on line length by using $base_dir
  - fixed $base_dir so it gets set after setup_kernels_arches


author: Andreas Gruenbacher <agruen@suse.de>
changelog:
  - patch to remove tick usage
  - patch to rewrite version comparison code
  - patch to switch to usage of case, remove use of grep -c, remove use of IFS
  - patch to change handling of stderr


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 2.0.0-1
changelog:
  - Output to stderr is now >> and not >
  - Added kludge to allow redhat1 driver disks with BOOT kernel modules
  - Allow cross arch building on 2.6 if --kernelsourcedir is passed
  - Generic make commands now respect --kernelsourcedir
  - Bumped dkms_dbversion to 2.0.0


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.96.01-1
changelog:
  - Look for /etc/SuSEconfig also to know if its a SuSE box
  - If no make command, set the clean command


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.95.11-1
changelog:
  - Split modulesconf_modify to separate add and remove functions
  - Added support for /etc/modprobe.conf


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.95.06-1
changelog:
  - Buchan Milne's Mandrake prep support patch
  - Buchan Milne's macro additions to template-dkms-mkrpm.spec
  - Buchan Milne's typo corrections in mkrpm
  - Buchan Milne's change to how mkrpm works (mktarball happen in rpm prep)


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.94.16-1
changelog:
  - Added a dependency on modutils for usage of modinfo
  - Added version sanity check
  - dkms_autoinstaller now check for sanity of version
  - Changed conversion algorithm for /var/dkms to /var/lib/dkms
  - Changed all warning to get to stderr
  - set_module_suffix doesn't use version_checker because its too slow


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.94.06-1
changelog:
  - Reworked version checking to handle non-digit characters
  - Added coreutils as a dependency
  - Create a tempdir in mkdriverdisk, whoops (thanks Charles Duffy)


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.94.03-1
changelog:
  - dkms_dbversion belongs in /var/lib/dkms (thanks Thomas Palmieri)
  - Added a version checking subroutine
  - Removed gt2dot4 variable in favor of kernel version checking
  - MAKE is no longer required.  If none specified, it uses a default.


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.93.14-1
changelog:
  - Fixed bug when find finds more than one thing (thanks Paul Howarth)
  - Changed arch detection code to first try RPM which always will get it right (thanks Vladimir Simonov)


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.93.12-1
changelog:
  - Initial mkrpm is working
  - Added --source-only option to mktarball
  - mkrpm handles --source-only
  - Updated manpage


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.92.24-1
changelog:
  - Continue rework of kernelver/arch handling
  - Added PATH fix (thanks Andrey Ulanov <andrey.ulanov@acronis.com>)
  - config_contents should not be local (thanks Andrey Ulanov)
  - If no config in /configs, just use .config (thanks Andrey Ulanov)
  - match now pays attention to --kernelsourcedir


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.92.04-1
changelog:
  - Added STRIP[] directive.  By default dkms now runs strip -g on all built modules.
  - Fix set_module_suffix in dkms build
  - Changed /etc/dkms_framework.conf to /etc/dkms/framework.conf
  - Added reload into dkms_autoinstaller to limit Mandrake error messages
  - Moved /var/dkms to /var/lib/dkms !!!!!!!!!!!!!!!!


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.91.18-1
changelog:
  - Added --installtree option to specify different install location besides /lib/modules
  - Took Charles Duffy's advice and removed brackets on error messages


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.91.11-1
changelog:
  - Added build time check for gcc and make if there is a build failure
  - You can now specify --archive to mktarball to control the naming of the made tarball (thanks Vladimir Simonov)


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.90.45-1
changelog:
  - Pass --targetarch to dkms_mkkerneldoth (thanks to Vladimir Simonov <validimir.simonov@acronis.com>)
  - Moved arch detection into a function called detect_arch


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.90.32-1
changelog:
  - Completing arch awareness and transition scripts
  - Created upgrade_dkms_archify.sh to update DKMS trees for arch support


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.09.21-1
changelog:
  - Improved readability of install and uninstall text to the screen
  - You can now specify multiple actions in the same command


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.09.05-1
changelog:
  - Added arch_used as part of the filename of a tarball created by mktarball
  - If multiple original modules exist in a single kernel, the one in /updates is preferred
  - Changed multiple original module handling to move out and store all collisions


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.09.01-1
changelog:
  - Changed 2.6 prep prepare-all target usage to make modules_prepare
  - Changed 2.6 make command to always use M= as this is fixed in 2.6.6-rc3-bk5


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.09-1
changelog:
  - If module build exit status is bad, die accordingly
  - 2.6 kernel prep changes (not quite there yet, still broken)


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.08.06-1
changelog:
  - Added BUILD_EXCLUSIVE_KERNEL & BUILD_EXCLUSIVE_ARCH directives for dkms.conf
  - Tweaked dkms_autoinstaller to more gracefully handle a build failure


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 1.07-1
changelog:
  - Added work-around to recognize ia32e kernel config instead of x86_64
  - Got rid of start and stop functions which were no-ops anyway


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.99.01-1
changelog:
  - Only edit /etc/modules.conf if remake_initrd is set or if this is the last uninstall and no original module exists
  - Added MODULES_CONF_OBSOLETE_ONLY array directive in dkms.conf
  - Updated man page


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.45.01-1
changelog:
  - Added kernel config prepping for hugemem kernel (thanks Amit Bhutani)
  - modules.conf only now gets changed during install or uninstall of active module


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.44.05-1
changelog:
  - Changed MODULES_CONF_ALIAS_TYPE to an array in dkms.conf
  - Added MODULES_CONF_OBSOLETES array in dkms.conf
  - Reworked modules_conf_modify to make use of OBSOLETES logic
  - Updated man page


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.41.15-1
changelog:
  - If depmod or mkinitrd fail during install, automatically go back to built state
  - Warn heavily if mkinitrd fails during uninstall


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.41.10-1
changelog:
  - Added Red Hat specific kernel prep to avoid make dep (Thanks Matt Domsch)
  - Added dkms_mkkerneldoth script to support RH kernel prep
  - Moved dkms from /sbin/ to /usr/sbin
  - Fixed typo which caused original_module not to get replaced on uninstall
  - No longer edit Makefiles, just specify KERNELVERSION=$kernel_version on the command line
  - Removed unnecessary depmod during uninstall


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.40.05-1
changelog:
  - No longer copy dkms.conf into /var/dkms tree, just go to the source_tree so as to reduce duplication
  - Got rid of --post-add, --post-build, --post-install and --post-remove
  - Replaced the above with DKMS directives POST_ADD, POST_BUILD, POST_INSTALL, POST_REMOVE
  - Fixed ldtarball and mktarball to no longer look for these duplicate files
  - Added a sample.conf for /usr/share/doc
  - Updated dkms_dbversion to 1.01 from 1.00 due to these changes
  - Update the man page


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.39.17-1
changelog:
  - Added diff checking in status command in case modules are overwritten by someone else
  - Fixed already built error message in build_module
  - Changed build-arch to noarch
  - Updated sample.spec
  - Change dest_module_location to not get prefaced by /lib/modules/$kernel_version
  - When saving old initrd, copy it instead of moving it in case new one doesn't build
  - Only create source symlink during loadtarball if --force or if it doesn't exist
  - Decide to completely remove during remove_module after doing find with maxdepth of 0 not 1


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.39.08-1
changelog:
  - Reworked mktarball format to remove dependence on /var/dkms and /usr/src
  - Reworked ldtarball to match new tarball format
  - Ldtarball now uses --archive=tarball-location flag instead of --config flag
  - Ldtarball can now load any old source tarball as long as it contains a good dkms.conf
  - Added --kernelsourcedir cli option to provide alternate location for kernel source
  - Driver disk files are now looked for in /redhat_driver_disk
  - Added $tmp_location specifiable in /etc/dkms_framework.conf to specify your /tmp dir (default /tmp)
  - Updated man page


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.38.03-1
changelog:
  - Fixed tmp_dir_name typo in ldtarball
  - Fixed mkdriverdisk to correctly create kernel/module structure
  - Don't expect a rhdd-6.1 file for RH driver disk, dkms will create it
  - Remove mkdriverdisk warning on non BOOT kernels
  - Moved driver_disk directory location to underneath $module_version
  - mkdriverdisk can now accept multiple kernel versions
  - Updated man page with info about $dkms_tree and $source_tree as dkms.conf variables


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.37.10-1
changelog:
  - Don't allow installs of modules onto non-existant kernels
  - Suppressed stderr on some commands
  - Fixed brain-dead bug for REMAKE INITRD
  - During uninstall, dont remake initrd if it was not installed
  - ldtarball into unique tempdir and delete it when finished


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.37.04-1
changelog:
  - Changed PATCH to array based system (added PATCH_MATCH array)
  - PATCHes can now be matched against regular expressions, not just substrings
  - Changed MODULES_CONF to array based system
  - CHANGED MAKE to array based system (added MAKE_MATCH array)
  - MAKEs can now be matched against regular expressions, not just substrings.
  - Updated man page


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.36.10-1
changelog:
  - Changed autoinstaller bootup priority from 08 to 04
  - Changed invoke_command routine to use mktemp for better security
  - Changed invoke_command in dkms_autoinstaller too


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.36.02-1
changelog:
  - Got rid of MODULE_NAME: replaced with BUILT_MODULE_NAME, DEST_MODULE_NAME arrays
  - Got rid of LOCATION: replaced with BUILT_MODULE_LOCATION, DEST_MODULE_LOCATION arrays
  - Update man page


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.35.02-1
changelog:
  - Added PACKAGE_NAME, PACKAGE_VERSION requirements to dkms.conf for gmodconfig use
  - Fixed creation of /var/dkms before cp of dkms_dbversion in install.sh


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.34.01-1
changelog:
  - Added dkms_autoinstaller service (builds module on boot if AUTOINSTALL="yes" in dkms.conf)
  - DKMS usage no longer sent to std_err
  - Added --no-prepare-kernel cli option


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.33.02-1
changelog:
  - Fixed quote bugs in match (Reported by: John Hull <john_hull@dell.com>)
  - Added Fred Treasure to the AUTHORS list
  - Added dkms_dbversion file to DKMS tree to track architecture of dkms db layout


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.32.04-1
changelog:
  - Added mkinitrd support for SuSE (etc_sysconfig_kernel_modify)
  - Added generic make command for kernel >2.4 (make -C <path-to-kernel-source> SUBDIRS=<build dir> modules)
  - Fixed kernel prepare to do Red Hat/Generic by default
  - Only do make dep if < 2.5


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.31.04-1
changelog:
  - Modified the Red Hat prep routine to be smaller and more robust (including summit support)
  - Added sample.spec to the sources for /usr/share/doc
  - If you save a .config before make mrproper, return it right afterwards
  - Updated the man page


author: Gary Lerhaupt <gary_lerahupt@dell.com> 0.30.17-1
changelog:
  - Added a remake_initrd function to keep SuSE from doing wrong things
  - If you know the correct right steps for rebuilding SuSE initrds, please let me know!
  - Updated man page


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.30.15-1
changelog:
  - Added a native readlink function to make sure it exists
  - Added a mkdir -p to $location to make sure it exists
  - Added --directive


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.30.05-1
changelog:
  - Added kernel preparation support for SLES/United Linux (Many thanks to: Fred Treasure <fwtreas@us.ibm.com>)


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.29.09-1
changelog:
  - On remove, to remove all kernel versions you must now specify --all
  - Added grep, cpio and gzip to the Requires of the RPM
  - Added cleaning kernel tree (make mrproper) after last build completes
  - Before prepare kernel, the current .config is stored in memory to be restored later
  - Added a verbose warning to the status command to remind people it only shows DKMS modules
  - Added /etc/dkms_framwork.conf for controlling source_tree and dkms_tree
  - Added the undocumented --dkmstree and --sourcetree options for cli control of these vars
  - When looking for original modules, dkms now employs the find command to expand search past $location
  - Updated man page


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.28.04-1
changelog:
  - Fixed ldtarball/mktarball to obey source_tree & dkms_tree (Reported By: Jordan Hargrave <jordan_hargrave@dell.com>)
  - Added DKMS mailing list to man page


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.27.05-1
changelog:
  - Changed NEEDED_FOR_BOOT to REMAKE_INITRD as this makes more sense
  - Redid handling of modifying modules.conf
  - Added MODULE_CONF_ALIAS_TYPE to specs


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.25.03-1
changelog:
  - Added renaming ability to modules after builds (MODULE_NAME="beforename.o:aftername.o")
  - Started adding mkdriverdisk support
  - Added distro parameter for use with mkdriverdisk
  - Now using readlink to determine symlink pointing location
  - Added redhat BOOT config to default location of config files
  - Fixed a bug in read_conf that caused the wrong make subdirective to be used
  - Remove root requirement for build action


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.23.16-1
changelog:
  - Removed the sourcing in of /etc/init.d/functions as it was unused anyway
  - Implemented generic patching support
  - Updated man page
  - Fixed timing of the creation of DKMS built infrastructure in case of failure


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.23.11-1
changelog:
  - Builds now occur in /var/dkms/$module/$module_version/build and not in /usr/src
  - Fixed the logging of the kernel_config


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.23.01-1
changelog:
  - Started adding patch support
  - Redid reading implementation of modules_conf entries in dkms.conf (now supports more than 5)
  - Updated man page


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.22.06-1
changelog:
  - Module names are not just assumed to end in .o any longer (you must specify full module name)
  - At exit status to invoke_command when bad exit status is returned


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.20.06-1
changelog:
  - Added --config option to specify where alternate .config location exists
  - Updated the man page to indicate the new option.
  - Updated the spec to allow for software versioning printout
  - Added -V which prints out the current dkms version and exits


author: Gary Lerhaupt <gary_lerhaupt@dell.com> 0.18.04-1
changelog:
  - Added support for multiple modules within the same install
  - Added postadd and fixed up the man page


author: Gary Lerhaupt <gary_lerhaupt@dell.com>
changelog:
  - Fixed make.log path error when module make fails
  - Fixed invoke_command to work under RH8.0
  - DKMS now edits kernel makefile to get around RH8.0 problems


author: Gary Lerhaupt <gary_lerhaupt@dell.com>
changelog:
  - Version 0.13: added match option
  - Version 0.14: dkms is no longer a SysV service
  - Added depmod after install and remove
  - Version 0.15: added MODULES_CONF directives in dkms.conf


author: Gary Lerhaupt <gary_lerhaupt@dell.com>
changelog:
  - Changed the name to DKMS
  - Moved original_module to its own separate directory structure
  - Removal now does a complete clean up


author: Gary Lerhaupt <gary_lerhaupt@dell.com>
changelog:
  - Split build into build and install
  - dkds.conf is now sourced in
  - added kernelver variable to dkds.conf


author: Matthias Saou <http://freshrpms.net/> 100.14.11-1
changelog:
  - Update to 100.14.11.
  - Split out 32bit "compat" files to a sub-package on x86_64.
  - Remove Xen patches, as parts seem to be merged (but enough?).


author: Matthias Saou <http://freshrpms.net/> 100.14.09-1
changelog:
  - Update to new 100.14.09 stable release... weird version jump, though.
  - Add triggerin to re-enable driver after xorg-x11-server-Xorg update.


author: Matthias Saou <http://freshrpms.net/> 1.0.9762-2
changelog:
  - Add 60-nvidia.nodes udev file to have device nodes copied in F7 and get
    things right with selinux.


author: Matthias Saou <http://freshrpms.net/> 1.0.9755-1
changelog:
  - Update to 1.0-9755 (stable).
  - Change profile.d sourced files from mode 755 to 644, as they should be.


author: Matthias Saou <http://freshrpms.net/> 1.0.9629-3
changelog:
  - Use the pkg0 file for i386 since it's the same as the pkg1 but without all
    of the precompiled kernel modules we don't use anyway. We save 6MB+ of SRPM.
  - For x86_64 there are no precompiled modules (ATM) so pkg0 and pkg1 are the
    same, but pkg2 has the lib32 files in addition, so it makes sense to use
    pkg2 there.


author: Matthias Saou <http://freshrpms.net/> 1.0.9626-2
changelog:
  - Include nvidia-xconfig, Edward Rudd.
  - Move extracting the installer to the %prep stage, Edward Rudd.
  - No longer do everything from the pkg/ directory.


author: Matthias Saou <http://freshrpms.net/> 1.0.9625-2
changelog:
  - Fix desktop entry.
  - Remove static dev entries, let udev take care of copying them to /dev.
  - Small fix to the driver file mode and remove the created empty directory.
  - Add %{nvidialib32dir} to the ld.so.conf.d file on x86_64.
  - Make sure we have a Files section in xorg.conf, otherwise create an empty
    one for the nvidia-config-display utility/script to work properly.
  - Run the nvidia-config-display utility/script in %post.


author: Matthias Saou <http://freshrpms.net/> 1.0.8774-3
changelog:
  - Add the rpm release to the dkms module version, to make updating the module
    to a fixed same version work (--rpm_safe_upgrade doesn't work as advertised).
  - Force modules install so that the same version can be overwritten instead of
    uninstalled by the old package's %preun when updating.
  - Add build time quiet flag for the scriplets. Undefine to do verbose testing.


author: Matthias Saou <http://freshrpms.net/> 1.0.8774-2
changelog:
  - Include both x86 and x86_64 pkg.run files in the source rpm, so that the
    same can be used for both i386 and x86_64.


author: Matt Domsch <Matt_Domsch@dell.com> - 2.1.0.0-1
changelog:
  - update to latest upstream
  - drop Requires: lsb.  avoid calling rpm (recursively) if possible.
  - add recognition for Oracle Enterprise Linux, Oracle VM, Scientific
    Linux, and VMware 3.x


author: Matt Domsch <Matt_Domsch@dell.com> 2.0.19.1
changelog:
  - depmod on uninstall before mkinitrd, depmod fix & cleanups
  - find_module_from_ko() could incorrectly return multiple values


author: Matt Domsch <Matt_Domsch@dell.com> 2.0.18
changelog:
  - don't include dist/ in tarball
  - use /etc/kernel/{prerm,postinst}.d/dkms in RPMs now too
  - mkrpm: display rpmbuild log on error, write RPMs to $dkms_tree/$module/$module_version/rpm
  - clarify license in spec to GPLv2+


author: Matt Domsch <Matt_Domsch@dell.com> 2.0.17.6
changelog:
  - call udevadm trigger instead of udevtrigger for newer udev (Launchpad #192241)
  - omit installed-weak modules from remove --all (Red Hat BZ#429410)


author: Matt Domsch <Matt_Domsch@dell.com> 2.0.17.5
changelog:
  - call udevtrigger if we install a module for the currently running kernel
  - uninstall from /extra before DEST_MODULE_LOCATION (Red Hat BZ#264981)
  - Run depmod after uninstall


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1:5.03-1.10
changelog:
  - Fix the maximum value on demo configuration dialog
  - Change the encoding of XScreenSaver.ad and man files (bug 319101)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1:5.02-4
changelog:
  - Spec file cleanup
    - Don't use include-directory patch anymore
    - Make all xscreensaver related directories owned by -base subpackage
      because now -extras and -gl-extras subpackage require it.
    - Mark man files as %doc explicitly, because %_mandir is expanded
      in files list
  - Fix write_long() (actually no_malloc_number_to_string())


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1:5.01-0.a1.2
changelog:
  - 5.01a1
  - Revert lang related patch (still needing some works)
  - Disable small scale window (patch from upstream)
  - Disable non-password authentication.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1:5.00-14
changelog:
  - Correct paths to update po files properly and try re-creating po files.
  - Rebuild for FC6T2 devel freeze.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1:5.00-13
changelog:
  - Fix for causing SEGV on exit about petri, squiral (total: 22 hacks)
    I hope this will finally fix all hacks' problems.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1:5.00-12
changelog:
  - Fix other (extras, gl-extras) hacks (total: 21 hacks).
  - Make sure the subprocess xscreensaver-getimage is properly
    killed by parent hack process.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1:5.00-9
changelog:
  - Don't make xscreensaver-base require htmlview.
  - Update ja.po again.
  - Fix noseguy not to eat cpu when geometry is too small.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1:5.00-7
changelog:
  - Change timestamps.
  - Forcely replace the default text till the release version of fedora-release
    formally changes.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1:5.00-6
changelog:
  - Another fixes of config files for ifsmap as reported to jwz 
    livejournal page.
  - Update Japanese translation.
  - Locale fix for xscreensaver-text.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1:5.00-5
changelog:
  - Disable (not remove) some hacks by default according to 4.24 behavior.
  - XML file fix for slidescreen.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1:5.00-4
changelog:
  - Rewrite the patch for decimal separator as discussed with jwz.
  - Change defaults not by patch but by function.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1:5.00-2
changelog:
  - Change the default text.
  - Rewrite root passwd patch.
  - Add browser option to configure.
  - Fix requirement about desktop-backgrounds-basic.
  - Fix decimal separator problem reported by upstream.


author: Ray Strode <rstrode@redhat.com> 1:4.23-1
changelog:
  - update to 4.23
  - add a BuildRequires on imake (spotted by Mamoru Tasaka)
  - add a lot of patches and fixes from Mamoru Tasaka


author: Ray Strode <rstrode@redhat.com> 1:4.22-21
changelog:
  - Update list_files function to fix ownership issues.
    Patch from Mamoru Tasaka (mtasaka@ioa.s.u-tokyo.ac.jp) (bug 161728).


author: Ray Strode <rstrode@redhat.com> 1:4.22-18
changelog:
  - accept zero timeout values for suspend and off.
    Patch from Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp>
    (bug 157501).


author: Ray Strode <rstrode@redhat.com> 1:4.22-12
changelog:
  - remove density option from squiral screensaver,
    Patch from Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp>
    (bug 167374).


author: Ray Strode <rstrode@redhat.com> 1:4.21-3
changelog:
  - Use @libexecdir@/xscreensaver instead of @HACKDIR@ in
    default configuration file so that the path gets expanded
    fully (bug 156906).


author: Ray Strode <rstrode@redhat.com> 1:4.21-2
changelog:
  - Use absolute filenames for screenhacks so we don't pull
    in screenhacks from PATH (bug 151677).
  - Don't try to ping in sonar screensaver (bug 139692).


author: Nalin Dahyabhai <nalin@redhat.com> 1:4.18-19
changelog:
  - We don't patch configure.in, so we don't need to run 'autoconf'.
  - Add --without-kerberos to skip built-in Kerberos password verification, so
    that we'll always go through PAM (fixes 149731).


author: Ray Strode <rstrode@redhat.com> 1:4.18-18
changelog:
  - Install desktop files to /usr/share/applications instead of
    /usr/share/control-center-2.0 (should fix bug 149229).


author: Ray Strode <rstrode@redhat.com> 1:4.18-15
changelog:
  - Remove xscreensaver-config-tool after some discussions with
    jwz.
  - Take out some additional screensavers


author: Ray Strode <rstrode@redhat.com> 1:4.18-14
changelog:
  - Add utility xscreensaver-config-tool to make changing settings
    easier (replaces the short lived xscreensaver-register-hack
    program).  Use xscreensaver-config-tool to set default settings
    instead of using patches. 
  - Split up xscreensaver (fixes 121693).
  - Make preferences dialog slightly more pretty
  - Make lock dialog slightly more pretty


author: Than Ngo <than@redhat.com> 1:4.18-13
changelog:
  - add patch to fix vroot bug and make xscreensaver working in KDE again.
  - get rid of webcollage, which often download porn images


author: Ray Strode <rstrode@redhat.com> 1:4.18-11
changelog:
  - Add xscreensaver-register-hack program to make
    installing and uninstalling screensavers easier
    (working toward fixing bug 121693 [split up screensaver])


author: Ray Strode <rstrode@redhat.com> 1:4.18-5
changelog:
  - Don't allow screensavers access to desktop images by default (bug #126809)
  - Lock screen by default (bug #126809)


author: Bill Nottingham <notting@redhat.com> 4.06-3
changelog:
  - put glade tweaks back in
  - switch pam package to not specify directories, to work on multilib
    arches


author: Nalin Dahyabhai <nalin@redhat.com> 4.06-1
changelog:
  - add a BuildPrereq on bc, which configure requires
  - replace use of fortune with an innocuous-and-editable stand-in script in
    %{stand_in_path}
  - define FORTUNE_PROGRAM at compile-time to force apps to use what's specified
    even if it doesn't happen to be installed at compile-time


author: Yu Shao <yshao@redhat.com> 4.05-3
changelog:
  - use GTK_IM_MODULE=gtk-im-context-simple in lock widget
  - to avoid CJK IM weirdness (#70655, #68216)
  - xscreensaver-rh-imcjk.patch


author: Elliot Lee <sopwith@redhat.com> 4.05-2
changelog:
  - Add fortune-mod to buildprereq to make beehive happy
  - Fix find_lang usage - install translations properly by specifying datadir


author: Bill Nottingham <notting@redhat.com> 4.05-1
changelog:
  - update to 4.05
  - use gtk2 lock widget (<jacob@ximian.com>)
  - some Red Hat-ifications
  - fix critical (#63916)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - never mind, back to 3.33 (wheeee)
  - hack window-id back in for the time being
  - disable memlimit so GL works


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 3.33, fix broken last build
  - fix build weirdness on some package sets (#48905)
  - don't document non-existent options for forest (#49139)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - patch webcollage to use xloadimage
  - in the random list, run petri with -size 2 to save memory
  - extend RPM silliness to man pages, too.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - take out Noseguy module b/c of possible TMv
  - install modules in /usr/X11R6/lib/xscreensaver
  - don't compile support for xshm on the alpha
  - properly buildrooted
  - updated to version 2.34


author: Mike Harrison <mircea@fnal.gov> 8.1.14-LTS.1
changelog:
  - First build for Fermi LTS 4.4
  - Changed configure options to build with just tcp-wrappers
  - Added a wrapper script called 'cons' which calls 'console'


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 8.1.14-3
changelog:
  - Fix from Nate Straz: UDS support (pre-emptively fixed bug 192910)
  - Fix from Nate Straz: krb detection


author: Patrick "Jima" Laughton <jima@auroralinux.org> 8.1.13-1
changelog:
  - Initial Fedora Extras RPM
  - Added patch to disable /usr/share/examples/conserver -- non-standard
  - Added patch to correct poorly written initscript
  - Cleaned up what goes in /usr/share/doc/conserver-8.1.13/ (sloppy)
  - Other .spec cleanups with lots of help from Dennis Gilmore (thanks!)


author: Troy Dawson <dawson@fnal.gov> 8.1.16-4.slf5
changelog:
  - Added directories /var/run/conserver/, /var/log/conserver/
  - Added chkconfig turn on to really turn on


author: Troy Dawson <tmraz@redhat.com> - 4.3p2-40.slf5
changelog:
  - sshd_config - changed it to be UsePam = yes
  - evalutated security patches:  CVE-2006-5052 was already patched by the
    Ubuntu patch.  CVE-2007-3102 was not needed because we didn't have 
    the original audit patch in


author: Troy Dawson <tmraz@redhat.com> - 4.3p2-21.slf5
changelog:
  - Fixing sshd_config - removing extra openssh in sftp line
  - Fixing pam.d/sshd for 64 bit
  - Pulled fermi and sl patched out of the ubuntu patch, into their own.


author: Troy Dawson <tmraz@redhat.com> - 4.3p2-19.slf5
changelog:
  - Changed sshd_config to allow cryptocard support
  - Changed /etc/init.d/sshd to be redhat's old startup


author: Troy Dawson <tmraz@redhat.com> - 4.3p2-18.slf5
changelog:
  - Changed it so that it used the patch from Ubuntu
  - Changed patch so that ssh_config and sshd_config fit Fermi's enviroment


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
changelog:
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
changelog:
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-3
changelog:
  - enable the subprocess in chroot to send messages to system log
  - sshd should prevent login if audit call fails


author: Tomas Mraz <tmraz@redhat.com> - 4.3p1-2
changelog:
  - fixed another place where syslog was called in signal handler
  - pass locale environment variables to server, accept them there (#179851)


author: Tomas Mraz <tmraz@redhat.com> - 4.2p1-9
changelog:
  - drop x11-ssh-askpass from the package
  - drop old build_6x ifs from spec file
  - improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
    characters to person looking at the display
  - less hackish fix for the __USE_GNU problem


author: Nalin Dahyabhai <nalin@redhat.com> - 4.2p1-8
changelog:
  - work around missing gccmakedep by wrapping makedepend in a local script
  - remove now-obsolete build dependency on "xauth"


author: Warren Togami <wtogami@redhat.com> - 4.2p1-7
changelog:
  - xorg-x11-devel -> libXt-devel
  - rebuild for new xauth location so X forwarding works
  - buildreq audit-libs-devel
  - buildreq automake for aclocal
  - buildreq imake for xmkmf
  -  -D_GNU_SOURCE in flags in order to get it to build
     Ugly hack to workaround openssh defining __USE_GNU which is
     not allowed and causes problems according to Ulrich Drepper
     fix this the correct way after FC5test1


author: Tomas Mraz <tmraz@redhat.com> 4.2p1-2
changelog:
  - use include instead of pam_stack in pam config
  - use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
  - upstream patch for displaying authentication errors


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-5
changelog:
  - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
  - install ssh-copy-id from contrib (#88707)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-4
changelog:
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - don't use X11 port which can't be bound on all IP families (#163732)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-3
changelog:
  - fix small regression caused by the nologin patch (#161956)
  - fix race in getpeername error checking (mindrot #1054)


author: Tomas Mraz <tmraz@redhat.com> 4.0p1-2
changelog:
  - fixed Local/RemoteForward in ssh_config.5 manpage
  - fix fatal when Local/RemoteForward is used and scp run (#153258)
  - don't leak user validity when using krb5 authentication


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-11
changelog:
  - don't call syslog in signal handler
  - allow password authentication when copying from remote
    to remote machine (#103364)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-10
changelog:
  - enable trusted forwarding by default if X11 forwarding is 
    required by user (#137685 and duplicates)
  - disable protocol 1 support by default in sshd server config (#88329)
  - keep the gnome-askpass dialog above others (#69131)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - change permissions on pam.d/sshd to 0644 (#64697)
  - patch initscript so it doesn't kill opened sessions if
    the sshd daemon isn't running anymore (#67624)


author: Nalin Dahyabhai <nalin@redhat.com> 3.9p1-8
changelog:
  - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
    to enable display of a vendor patch level during version exchange (#120285)
  - configure with --disable-strip to build useful debuginfo subpackages


author: Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
changelog:
  - request gssapi-with-mic by default but not delegation (flag day for anyone
    who used previous gssapi patches)
  - no longer request x11 forwarding by default


author: Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
changelog:
  * Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
  - Built RHLE3 U2 update package.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - additional fix for apparently-never-happens double-free in buffer_free()
  - extend fix for #103998 to cover SSH1


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-11
changelog:
  - apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
  - skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-6
changelog:
  - modify patch which clears the supplemental group list at startup to only
    complain if setgroups() fails if sshd has euid == 0
  - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-6
changelog:
  - move scp to the -clients subpackage, because it directly depends on ssh
    which is also in -clients (#84329)


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-2
changelog:
  - patch PAM configuration to use relative path names for the modules, allowing
    us to not worry about which arch the modules are built for on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-2
changelog:
  - rework the close-on-exit docs
  - include configuration file man pages
  - make use of nologin as the privsep shell optional


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-1
changelog:
  - update to 3.3p1
  - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
  - disable gtk2 askpass
  - require pam-devel by filename rather than by package for erratum
  - include patch from Solar Designer to work around anonymous mmap failures


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-4
changelog:
  - drop buildreq on db1-devel
  - require pam-devel by package name
  - require autoconf instead of autoconf253 again


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-3
changelog:
  - pull patch from CVS to avoid printing error messages when some of the
    default keys aren't available when running ssh-add
  - refresh to current revisions of Simon's patches


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2gss
changelog:
  - reintroduce Simon's gssapi patches
  - add buildprereq for autoconf253, which is needed to regenerate configure
    after applying the gssapi patches
  - refresh to the latest version of Markus's patch to build properly with
    older versions of OpenSSL


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
changelog:
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x


author: Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
changelog:
  - update to SNAP-20020220 for testing purposes (you've been warned, if there's
    anything to be warned about, gss patches won't apply, I don't mind)


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
changelog:
  - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support


author: Nalin Dahyabhai <nalin@redhat.com> 3.0p1-1
changelog:
  - merge some of Damien Miller <djm@mindrot.org> changes from the upstream
    3.0p1 spec file and init script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.0p1
  - update to x11-ssh-askpass 1.2.4.1
  - change build dependency on a file from pam-devel to the pam-devel package
  - replace primes with moduli


author: Nalin Dahyabhai <nalin@redhat.com> 2.9p2-7
changelog:
  - fix scp's server's reporting of file sizes, and build with the proper
    preprocessor define to get large-file capable open(), stat(), etc.
    (sftp has been doing this correctly all along) (#51827)
  - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
  - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
  - mark profile.d scriptlets as config files (#42337)
  - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
  - change a couple of log() statements to debug() statements (#50751)
  - pull cvs patch to add -t flag to sshd (#28611)
  - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull cvs patch to add session initialization to no-pty sessions
  - pull cvs patch to not cut off challengeresponse auth needlessly
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed (#49263)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change Copyright: BSD to License: BSD
  - add Markus Friedl's unverified patch for the cookie file deletion problem
    so that we can verify it
  - drop patch to check if xauth is present (was folded into cookie patch)
  - don't apply gssapi patches for the errata candidate
  - clear supplemental groups list at startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix an error parsing the new default sshd_config
  - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
    dealing with comments right


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
    to be removed before the next beta cycle because it's a big departure
    from the upstream version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish marking strings in the init script for translation
  - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
    at startup (change merged from openssh.com init script, originally by
    Pekka Savola)
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove explicit openssl requirement, fixes builddistro issue
  - make initscript stop() function wait until sshd really dead to avoid 
    races in condrestart


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - mention that challengereponse supports PAM, so disabling password doesn't
    limit users to pubkey and rsa auth (#34378)
  - bypass the daemon() function in the init script and call initlog directly,
    because daemon() won't start a daemon it detects is already running (like
    open connections)
  - require the version of openssl we had when we were built


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make do_pam_setcred() smart enough to know when to establish creds and
    when to reinitialize them
  - add in a couple of other fixes from Damien for inclusion in the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p2
  - call setcred() again after initgroups, because the "creds" could actually
    be group memberships


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
  - don't enable challenge-response by default until we find a way to not
    have too many userauth requests (we may make up to six pubkey and up to
    three password attempts as it is)
  - remove build dependency on rsh to match openssh.com's packages more closely


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Revert the patch to move pam_open_session.
  - Init script and spec file changes from Pekka Savola. (#28750)
  - Patch sftp to recognize '-o protocol' arguments. (#29540)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Chuck the closing patch.
  - Add a trigger to add host keys for protocol 2 to the config file, now that
    configuration file syntax requires us to specify it with HostKey if we
    specify any other HostKey values, which we do.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Redo patch to move pam_open_session after the server setuid()s to the user.
  - Rework the nopam patch to use be picked up by autoconf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.1p1.
  - Add init script mods from Pekka Savola.
  - Tweak the init script to match the CVS contrib script more closely.
  - Redo patch to ssh-add to try to adding both identity and id_dsa to also try
    adding id_rsa.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.0p1.
  - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
  - Resync with parts of Damien Miller's openssh.spec from CVS, including
    update of x11 askpass to 1.2.0.
  - Only require openssl (don't prereq) because we generate keys in the init
    script now.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't open a PAM session until we've forked and become the user (#25690).
  - Apply Andrew Bartlett's patch for letting pam_authenticate() know which
    host the user is attempting a login from.
  - Resync with parts of Damien Miller's openssh.spec from CVS.
  - Don't expose KbdInt responses in debug messages (from CVS).
  - Detect and handle errors in rsa_{public,private}_decrypt (from CVS).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - More gettextizing.
  - Close all files after going into daemon mode (needs more testing).
  - Extract patch from CVS to handle auth banners (in the client).
  - Extract patch from CVS to handle compat weirdness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
    succeeded, to allow public-key authentication after a failure with "none"
    authentication.  (#21268)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to x11-askpass 1.1.1. (#21301)
  - Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge multiple PAM text messages into subsequent prompts when possible when
    doing keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Disable the built-in MD5 password support.  We're using PAM.
  - Take a crack at doing keyboard-interactive authentication with PAM, and
    enable use of it in the default client configuration so that the client
    will try it when the server disallows password authentication.
  - Build with debugging flags.  Build root policies strip all binaries anyway.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add the primes file from the latest snapshot to the main package (#20884).
  - Add the dev package to the prereq list (#19984).
  - Remove the default path and mimic login's behavior in the server itself.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Resync with conditional options in Damien Miller's .spec file for an errata.
  - Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to OpenSSH 2.3.0p1.
  - Update to x11-askpass 1.1.0.
  - Enable keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
    build PAM authentication in.
  - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
  - Clean out no-longer-used patches.
  - Patch ssh-add to try to add both identity and id_dsa, and to error only
    when neither exists.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update x11-askpass to 1.0.2. (#17835)
  - Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
    always find them in the right place. (#17909)
  - Set the default path to be the same as the one supplied by /bin/login, but
    add /usr/X11R6/bin. (#17909)
  - Try to handle obsoletion of ssh-server more cleanly.  Package names
    are different, but init script name isn't. (#17865)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 20000823 snapshot.
  - Change subpackage requirements from %{version} to %{version}-%{release}
  - Back out the pipe patch.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 2.1.1p4, which includes fixes for config file parsing problems.
  - Move the init script back.
  - Add Damien's quick fix for wackiness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Move condrestart to server postun.
  - Move key generation to init script.
  - Actually use the right patch for moving the key generation to the init script.
  - Clean up the init script a bit.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Patch to build with neither RSA nor RSAref.
  - Miscellaneous FHS-compliance tweaks.
  - Fix for possibly-compressed man pages.


author: Jon Peatfield <J.S.Peatfield@damtp.cam.ac.uk> - 2:2.6.2-1
changelog:
  - Update to 2.6.2 tweaks to build on SL5x (and add DAMTP evil hacks in
    a slightly cleaner way).  Include fix from SL5x 2.5.0-2 srpm (zip
    must be a BuildRequires or it won't get listed in etc/Renviron when
    built in brewbuilder).  Epoch needs to be 2 for SL5x.


author: Martyn Plummer <plummer@iarc.fr> 1:2.5.0-1
changelog:
  - Added patches for RHEL5. Thanks to Ben Walton
  - Fixed bug in postinstall script. Thanks to Jan Kees van Amerongen
  - Apply source patch to ensure that all hard-coded paths are created at
    build time, not install time.
  - Built for R 2.5.0


author: Martyn Plummer <plummer@iarc.fr> 1:2.4.0-2
changelog:
  - Modified Optimization flags for FC6
  - Added -std=gnu99 to CFLAGS (essential)
  - Added texinfo-tex as dependency for FC6
  - Removed R doc directory as doc files


author: Martyn Plummer <plummer@iarc.fr> 1:2.2.1beta-1
changelog:
  - Configure uses --without-blas by default.
  - Install pdf manuals.
  - All toplevel documentation files are installed into _libdir/R
    as they may be required by R (qv note on AUTHORS and THANKS below).
  - Legacy scripts for rebuilding package indices removed.


author: Martyn Plummer <plummer@iarc.fr> 1:2.1.1-2
changelog:
  - The files AUTHORS and THANKS need to be installed into _libdir/R
    as they are required by the function contributors().  Previously
    they were installed only as documentation files.


author: Martyn Plummer <plummer@iarc.fr>
changelog:
  - Dropped support for Red Hat boxed set.
  - Synchronized with Fedora Extras 4 RPM by Tom Calloway
    including support for shared R library.
  - Added gfortran support. However, gcc 4.0.0 will not compile R correctly
    with the default optimization flags, so there is a temporary work-around.


author: Joseph P. Skudlarek <Jskud@Jskud.com> 0:2.1.0-0.fdr.3
changelog:
  - Install R-data.info file as well.
  - Make info processing conditional on texinfo version, not platform release,
    so that if a new enough version is installed, we will build and install info.


author: Martyn Plummer <plummer@iarc.fr> 0:2.1.0-0.fdr.1
changelog:
  - Built R 2.1.0.  R now supports internationalization, so the patch
    to set the locale to "C" is now dropped.
  - install.packages() exits gracefully with a helpful message if
    the file INSTALL is not present, so this is now included in the
    R-devel package.


author: Martyn Plummer <plummer@iarc.fr> 0:2.0.1-0.fdr.5
changelog:
  - Added support for Scientific Linux (http://www.scientificlinux.org)
    A distribution based on RHEL. Thanks to Jon Peatfield.


author: Martyn Plummer <plummer@iarc.fr> 0:2.0.1-0.fdr.3
changelog:
  - R-devel package is now a stub package with no files, except a documentation
    file (RPM won't accept sub-packages with no files). R now conflicts
    with earlier (i.e 0:2.0.1-0.fdr.2) versions of R-devel.
  - Created libRmath subpackage with shared library.


author: Martyn Plummer <plummer@iarc.fr> 0:2.0.0-0.fdr.3
changelog:
  - Set R_PRINTCMD at configure times so that by default getOption(printcmd)
    gives "lpr".
  - Define macro fcx for all Fedora distributions. This replaces Rinfo


author: Martyn Plummer <plummer@iarc.fr> 0:2.0.0-0.fdr.1
changelog:
  - Built R 2.0.0
  - There is no longer a BUGS file, so this is not installed as a 
    documentation file.


author: Robert Scheck <redhat@linuxnetz.de> 2.8.3-1
changelog:
  - Upgrade to 2.8.3 (#196599)
  - Applied Russell Coker's suggested patch to improve the
    performance for SELinux machines significantly (#120622)


author: Jeremy Katz <katzj@redhat.com> - 2.6.13-1
changelog:
  - update to 2.6.13 per request of upstream
  - fixes mount by label of xfs on former raid partition (#122043)


author: Johnny Hughes <johnny@centos.org> 2.2.46-1
changelog:
  - upgraded to upstream version 2.2.46
  - added e2fsprogs-devel and ncurses-devel as build requirements.


author: Quentin Spencer <qspencer@users.sourceforge.net> 3.0.0-1
changelog:
  - Change package name to match upstream, including provides and obsoletes.
  - New release. Numerous changes in build to reflect source reorganization.
  - Moved static libs into separate package.


author: Quentin Spencer <qspencer@users.sourceforge.net> 2.1.1-1
changelog:
  - New release, and package name change from UFsparse to SuiteSparse. Fixes
    bug #210846. Keep the ufsparse package name for now.


author: Quentin Spencer <qspencer@users.sourceforge.net> 2.1.0-1
changelog:
  - New release. Increment versions of some libraries.
  - Rearrange and clean up spec file so all definitions are in one place.


author: Quentin Spencer <qspencer@users.sourceforge.net> 1.2-1
changelog:
  - New release.
  - Build newly added library CXSparse (but not CSparse--see comments
    in build section).


author: Quentin Spencer <qspencer@users.sourceforge.net> 0.91-1
changelog:
  - New upstream release, incorporating previous patches
  - chmod the build directory to ensure all headers are world readable


author: Jarrod Millman <millman@berkeley.edu> - 0.6.0-1
changelog:
  - update to new upstream source
  - update Summary, License, Url, and description
  - added extra dependencies
  - remove symlink since Lib has been renamed scipy


author: Jef Spaleta <jspaleta@gmail.com> - 0.5.1-4
changelog:
  - Minor adjustments to specfile for packaging guidelines. 
  - Changed buildrequires fftw version 3  from fftw2


author: Neal Becker <ndbecker2@gmail.com> - 0.4.8-2
changelog:
  - Fix BuildRoot
  - Add BuildRequires, Requires
  - Test remove d1mach patch
  - Fix defattr
  - Add changelog
  - Removed Prefix, Vendor
  - Fix Source0


author: Rex Dieter <rdieter[AT]fedoraproject.org> 3.1.2-5
changelog:
  - fftw3(-devel): Provides: fftw(-devel) = %version ...
  - cleanup, +%check section (disabled by default)


author: Troy Dawson <dawson@fnal.gov> - 8.3.7-1
changelog:
  - Update to 8.3.7
  - Separated the kernel module out to a separate rpm
    This is because the driver is now in the generic kernel
  - Combined spec files from atrpms and normal SL kernel module specs


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-25.el5.1
changelog:
  - backport fix from 1.6.3 to abort a sequential scan of a keytab if the
    handle to the keytab has become invalidated during the scan (via Vince
    Worthington, #461908)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-25.el5
changelog:
  - add preliminary patch to fix use of uninitialized pointer / double-free in
    KDC (CVE-2008-0062,CVE-2008-0063) (#432620, #432621)
  - add backported patch to fix use-after-free in libgssapi_krb5 (CVE-2007-5901)
    (#415321)
  - add backported patch to fix double-free in libgssapi_krb5 (CVE-2007-5971)
    (#415351)
  - add preliminary patch to fix incorrect handling of high-numbered descriptors
    in the RPC library (CVE-2008-0947) (#433596)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-24
changelog:
  - kdb_ldap: add patch to recognize "nsAccountLock: TRUE" as indicating that
    an entry should have the DISALLOW_ALL_TIX flag set (read only), for better
    interop with Fedora, Netscape, Red Hat Directory Server (Simo Sorce, #431784)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-23
changelog:
  - backport changes from 1.6.3 which allow callers of the the sendto-kdc
    functions to override the failover behavior on a per-response basis, and
    default to failing over on service-unavailable errors (#230384)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-22
changelog:
  - add patch to fall back to TCP kpasswd servers for kdc-unreachable,
    can't-resolve-server, and response-too-big errors (#392631)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-21
changelog:
  - add conditional logic to allow building only the krb5-server-ldap subpackage
    (#427790)
  - use the right sequence numbers when generating password-set/change requests
    for kpasswd servers after the first one (#427789)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-20
changelog:
  - allocate space for the relative path including the nul-terminator (Jose
    Plans, #426085)
  - fix a couple of spots where a file context wouldn't be freed


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-19
changelog:
  - backport from 1.6.3 to initialize a library-allocated get_init_creds_opt
    structure the same way we would one which was allocated by the calling
    application, to restore kinit's traditional behavior of doing a password
    change right when it detects an expired password (#413051)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-18
changelog:
  - fix syntax error in kadmin init script (#373011,#381011)
  - turn off content/size/date verification on krb5.conf (#329771)
  - fix storage of delegated krb5 credentials when they've been wrapped up in
    spnego (#319351)
  - return a delegated credential handle even if the application didn't pass a
    location to store the flags which would be used to indicate that credentials
    were delegated (#314651)
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated (#309951)
  - signal PAM when we're changing an expired password that it's an expired
    password, so that when cracklib flags a password as being weak it's treated
    as an error even if we're running as root (#308131)
  - set the key expiration time in an AS-REP using the sooner of the client's
    entry's key expiration time and the entry's expiration time, instead of
    just the entry's expiration time (#250257)
  - in ftp, don't lose track of a client socket when a server-side error
    causes a download to fail (#248618)
  - in ftp, fix runique when mget is used (#247633)
  - add the snippet documenting the kdc_tcp_ports option to kdc.conf's man
    page, using text taken from the administrator's guide (#282191)
  - in kpasswd, when reading the client's principal name from the ccache fails
    for any reason, fall back to the user's name (#248631)
  - init script cleanups (Michal Marciniszyn, #242500)
  - tweak the telnet man page to refer to the telnet rlogin escape character
    as such instead of rereferring to it simly as the escape character or the
    telnet escape character (#247741)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-17
changelog:
  - ftpd: also do PAM session and credential management when ftp clients use
    strong authentication (#286291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-14
changelog:
  - make krb5-workstation depend on the PAM configuration file used by login.krb5
  - fix omission of kadmin log file when labeling (#253558)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-13
changelog:
  - add preliminary patch to fix buffer overflow in rpcsec_gss implementation
    in libgssrpc (#250973, CVE-2007-3999) and write through uninitialized
    pointer in kadmind (#250976, CVE-2007-4000)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-11
changelog:
  - login: change to the user's home directory after dropping privileges,
    not before (#248050)
  - turn off the ldap features


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-10
changelog:
  - add a patch to allow applications to try to use a key with kvno=0, if
    found, in place of the "right" version for a request (Luke Howard, #230379)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-9
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798) (#239073)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-19
changelog:
  - refrain from killing any lingering members of our child's process group when
    logging that the child process has exited (Jose Plans, #143289)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to /var/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.60
changelog:
  - Add SYSV locking in the case of a read-only filesystem.
  - Resolves: #430942
  - Do not create Xen grub boot entries for a running domU.
  - Resolves: #509568
  - Do not re-link compatible module when also removing it.
  - Resolves: #477089


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.50
changelog:
  - Update weak-modules script to use newer logic on add_modules to
  - avoid occasional creation of needless subdirectories.
  - Resolves: #484762


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.46
changelog:
  - Correct use of 'nm' to avoid unnecessary warning messages.
  - Also add a dependency on binutils and mkinitrd.
  - Resolves: #463777


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.39
changelog:
  - Make modprobe operate in nonblocking mode by default
  - Resolves: #280411.
  - Add a --delete-modules to weak-modules to avoid linking compat
  - Resolves: #432959.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.37
changelog:
  - Sort modules alphabetically.
  - Resolves: #249449.
  - Check override of modules.
  - Resolves: #253512.
  - Fix "--dry-run" option.
  - Resolves: #254141.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.34
changelog:
  - Update to fix inter-module symbol references on 64-bit platforms.
  - (fix wasn't properly in the build yesterday).
  - Resolves: #247986.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.32
changelog:
  - Update fix to pipe issue and use same logic in other place we call "head -n 1"
  - just in case it would ever also cause similarly noisy output.
  - Resolves: #249537.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.31
changelog:
  - Overhaul logic for bootpath driver handling to work with new-kernel-pkg
    grubby better in keeping with their design.
  - Resolves: #252210.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.27
changelog:
  - Make naming of Driver Update Program grub entry more friendly to RHEL users than the previous entries were.
  - Make the resultant grub entry default bootable.
  - Related: #224076.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.15
changelog:
  - Prevent modifying existing grub entries (always add them).
  - Don't ask for new entries to be default by default.
  - Resolves: #222085, #222084.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.10
changelog:
  - Modify weak-modules to handle kmod removal and the need to create
    compatible kernel module links to other compatible modules.
  - Resolves: #215272.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.9
changelog:
  - Modify weak-modules to handle module removal against multiple kABI compat.
    kernels at the same time, removing the correct module links.
  - Resolves: #216645.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.5
changelog:
  - BZ205510 fix causes BZ211519 because mkinitrd mistakenly parses the m-i-t
    output including preloading commands. Reverting this patch for now.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.3
changelog:
  - Updated to upstream with some miscellaneous fixes from contrib.
  - Rebuilt allconf patch since retabbed upstream source.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre2.1.3
changelog:
  - Updated to upstream with new module priority/override features.
  - Documentation updates and other miscellaneous fixes.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre1.4.6
changelog:
  - Don't call depmod on removing a kernel.
  - Warn rather than exit if we can't process weak-updates on new kernel
  - Handle duplicate modules by picking the latter version of the two.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added the mounting of /proc/fs/nfsd to modprobe.conf.dist
    so it gets mounted when nfsd is loaded.


author: Bill Nottingham <notting@redhat.com> 2.4.26-9
changelog:
  - add nfsv4 aliases to modprobe.conf.dist
  - clean out upstreamed aliases in modprobe.conf.dist
  - mount rpc_pipefs when sunrpc is loaded


author: Bill Nottingham <notting@redhat.com> 2.4.26-6
changelog:
  - update module-init-tools to 3.0pre10
  - fix modinfo (#116305)
  - always include /etc/modprobe.conf.dist (don't require the line in modprobe.conf)
  - ship a static modprobe.conf.dist, don't generate it at build time
  - clean up modprobe.conf.dist a little (#113772, #113768)


author: Bill Nottingham <notting@redhat.com> 2.4.26-1
changelog:
  - update to 2.4.26
  - switch around man pages; the module-init-tools man pages are now
    the default
  - add backwards compat usb aliases for the simple case
  - add some commentary to modules.conf/modprobe.conf on conversion
  - modutils-devel goes away


author: Bill Nottingham <notting@redhat.com> 2.4.25-8
changelog:
  - fix leak in module-init-tools-depmod (<arjanv@redhat.com>)
  - look in /lib/modules/`uname -r`/updates for modules


author: Bill Nottingham <notting@redhat.com> 2.4.25-2
changelog:
  - add joystick alias (#91309)
  - add alias for af_key for IPSEC
  - update module-init-tools to 0.9.12
  - ship a modprobe.conf.dist with the aliases that are built into 2.4
    modutils
  - generate a modprobe.conf if needed on install


author: Bill Nottingham <notting@redhat.com> 2.4.22-7
changelog:
  - make sure we don't use diet anywhere but x86, even if it's lying around
  - fix zlib linkage, for real
  - switch ftape alias (#7674)


author: Matt Wilson <msw@redhat.com>
changelog:
  - added a -devel subpackage that contains libraries that apps can use
    to implement insmod and rmmod


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.6
  - alias binfmt-0000 off (#9709)
  - turn off 'modules.conf is more recent than modules.dep' message (#14276,
    others)
  - return nonzero from depmod if there are errors (#40935)
  - fix manpage typo (#33123)


author: Elliot Lee <sopwith@redhat.com> 2.4.5-3
changelog:
  - Add modutils-2.4.5-stblocal.patch from Jakub. See the e-mail message
    inside the patch file for details.
  - Use smp_mflags macro


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.0
  - tweak irda aliases
  - remove vixie-cron dependency (it's not *required*)
  - add missing %build
  LANG=C
  export LANG
  unset DISPLAY
   (where did that go?)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to 2.3.9.
  - port RH patches from 2.1.121 to 2.3.9 where needed.
  - disable warning about conf.modules for now, in 7.0
    we should move to modules.conf.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - pick up ultrapenguin patches (not applied for now).
  - pre-generate keyword.c so gperf doesn't have to be present (not applied).
  - util/sys_cm.c: fix create_module syscall (signed return on sparc too)


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - Handle EM_SPARCV9, kludge to support both 32bit and 64bit kernels
    from the same package on sparc/sparc64.


