# changelog

author: Rex Dieter <rdieter@fedoraproject.org> - 1.3.23-5
changelog:
  - LCMS support broken in GraphicsMagick 1.3.23 (#1314898)
  - simplify .spec conditionals (EOL fedora releases mostly)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.6.0-2
changelog:
  - Backport the fix the order of search domains from 1.7 branch
  - Add patch do honor our CFLAGS (patch by Ville Skyttä)
  - Don't bother building throwaway static libs.
  - Disable autotools dependency tracking for cleaner build logs and possible
    slight build speedup.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.6.0-3
changelog:
  - Backport the fix for usage of IPv6 nameserves from 1.7 branch
  - Use default defattr
  - Comment patches
  - Convert the CHANGES file to UTF8


author: Andrea Veri <averi@fedoraproject.org> - 1.2.4p5-1
changelog:
  - New upstream release. Fixes CVEs:
    - CVE-2014-5338 
    - CVE-2014-5339
    - CVE-2014-5340 (BZ: #1132337, #1132339, #1132341)
  - Stop shipping the j4p_performance plugin as it's deprecated. (BZ: #1133068)
  - Turn Wato_Legacy_Eval as True as we want to prevent breakages
    between machines running different Python and/or check-mk releases.
    This is necessary after the 'ast' move from 'pickle' (that was
    generating a insecure API call), however the 'ast' module is still
    not available for RHEL / CentOS 5 machines. The patch is there to 
    avoid miscommunications between different distribution releases. More
    information is available at:
    http://mathias-kettner.com/check_mk_werks.php?werk_id=984.


author: Andrea Veri <averi@fedoraproject.org> - 1.2.6-1
changelog:
  - New upstream release. Source0 is now generated directly from Git
    as Check-Mk's upstream has decided to not include source code files
    (.cc, .c) for livestatus, mkeventd and waitmax anymore on the tarballs
    they release. We want to have these binaries built during the RPM build,
    thus the need to repack the tarball with the procedure outlined above.
  - Include the 02-Downtime-Struct-Update patch to prevent Nagios to core dump
    when a downtime is set. This was caused by a change on the downtime struct
    applied in the course of Nagios 3's development. Thanks Mike Battersby for
    the patch. (BZ: #1083003)
  - Fix the /usr/bin/pnp shebang from the plugins/unitrends_backup file
    as that is a non-existent binary file, upstream probably meant php.
  - PLUGINSDIR on the check_mk_agent binary file is set to be
    %{_datadir}/check-mk-agent/plugins, make sure all the plugins are installed
    there and not on %{_datadir}/check_mk/plugins instead.


author: Andrea Veri <averi@fedoraproject.org> - 1.2.6p2-1
changelog:
  - New upstream release.
  - Add a Require on bind-utils. (BZ: #1218501)
  - Do not install all the plugins by default but make them available
    on a different directory. Users will then be able to symlink each
    of the plugins under the %{_datadir}/check-mk-agent/plugins directory
    and finally mark them as active. (BZ: #1218516)
  - Get rid of plugins from unsupported archs or operating systems.


author: Andrea Veri <averi@fedoraproject.org> - 1.2.6p3-1
changelog:
  - New upstream release.
  - Do not create an /etc/check_mk/conf.d/wato directory on both the
    main and multisite packages.


author: Andrea Veri <averi@fedoraproject.org> - 1.2.6p5-1
changelog:
  - New upstream release.
  - Remove the dependency on php as it causes httpd and httpd-devel
    to be installed with it.


author: Andrea Veri <averi@fedoraproject.org> - 1.2.6p16-1
changelog:
  - New upstream release
  - Remove the strict dependency on xinetd as check-mk-agent is going to run
    even without it. (BZ: #1258969)
  - Update permissions on check_mk/conf.d/wato and check_mk/multisite.d to 770. (BZ: #1281888)
  - Rebuild --with-nagios4 needed (https://tracker.nagios.org/view.php?id=509) on
    OS releases that ship with Nagios 4 already. Thanks Marcin Dulak <Marcin.Dulak@gmail.com>
    for the patch. (BZ #1309350)
  - Add the missing rrd_path to defaults{.py} files (BZ: #1281882)
  - Generate an /etc/nagios/htpasswd.users file at every build for WATO to start properly.


author: Andrea Veri <averi@fedoraproject.org> - 1.2.6p16-2
changelog:
  - Fix the if statement for nagios_version to be assigned correctly
    to the relevant OSs releases needing it.


author: Andrea Veri <averi@fedoraproject.org> - 1.2.6p16-3
changelog:
  - Make sure the /etc/nagios/auth.serials,htpasswd.users files are not
    overwritten at package update.


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 2.47.9-1
changelog:
  - New upstream release
  - Enable tests and add BR CUnit-devel (except EPEL 5)
  - Adapt to new license packaging guidelines


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 15.26-1
changelog:
  - GT6 update
  - Drop patches globus-common-doxygen.patch and globus-common-pkgconfig.patch
    (fixed upstream)


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 15.29-1
changelog:
  - GT6 update
  - Drop patch globus-common-disable-network-tests.patch
    Use NO_EXTERNAL_NET environment variable implemented upstream instead


author: Adam Miller <maxamillion [AT] gmail.com> - 0.8.1-2
changelog:
  - non-printable character filter patch (#504144)
  - Rafal fixed the bug, I just updated the EL packages.


author: Adam Miller <maxamillion [AT] gmail.com> - 0.8.1-3
changelog:
  - "Tree view doesn't work with threads hidden" fixed (#481072)
  - Rafal issued the fix, this is just the update and build for EPEL


author: Adam Miller <maxamillion [AT] gmail.com> - 0.8.2-2
changelog:
  - "htop aborts after hitting F6 key" fixed (#504795)
  - Arrays patch from upstream, patch and build for EPEL


author: <ruben@rubenkerkhof.com> 0.5.0-1
changelog:
  - Updated to new upstream version
  - Changed the service name in the scriptlets
  - Added a configuration file
  - Included GPL License


author: <ruben@rubenkerkhof.com> 0.5.4-1
changelog:
  - Update to new upstream version
  - Upstream fixed permissions on pidfile
  - New manpage for incron.conf
  - Upstream fixed example conf file
  - Upstream fixed the bug which caused that newly created tables were not loaded in some cases
  - Upstream fixed incorrect encoding on LICENSE-GPL file


author: Richard Hughes <richard@hughsie.com> 2.6-1
changelog:
  - Update to new upstream version.
  - Added a way to retrieve matrix shaper always, no matter LUT is present
  - Added pthread dependency
  - Big revamp on Contexts, from Artifex
  - Fixed a bug in PCS/Colorspace order when reading V2 Lab devicelinks
  - Fixed some indexing out of bounds in floating point interpolation
  - Fix for delete tag memory corruption
  - New locking plug-in, from Artifex


author: Richard Hughes <richard@hughsie.com> - 2.7-0.1rc1
changelog:
  - Update to new upstream version.
  - Added a flag  to clip negative values in unbounded transforms
  - Added a global optimization that merges consecutive matrices in pipelines.


author: Carl Thompson <fedora@red-dragon.com> 0.9.5-2
changelog:
  - included shield-trigger-iptables
  - changed default blocking method from route to iptables
  - modified default retention policy from 1 week to 1 hour
  - added man page for shield-trigger-iptables
  - fixed typos in man page for shield-purge


author: Carl Thompson <fedora@red-dragon.com> 0.9.5-6
changelog:
  - fixed the permissions duplications
  - changed permissions on /var/lib/pam_shield to 755
  - changed permissions on pam_shield.so to 755
  - removed -s flag from install command to preserve
  - debuginfo data


author: Carl Thompson <fedora@red-dragon.com> 0.9.5-8
changelog:
  - patches shield-trigger-iptables to insert rules instead of add
  - and added checks for chain existance and creation if necessary
  - before adding rules to iptables/ip6tables and dropped the
  - destination port so it can be used for any service


author: Nathan Scott <nathans@redhat.com> - 3.10.4-1
changelog:
  - Update to latest PCP, pcp-webjs and Vector sources.
  - Packaging improvements after re-review (BZ 1204467)
  - Start pmlogger/pmie independent of persistent state (BZ 1185755)
  - Fix cron error reports for disabled pmlogger service (BZ 1208699)
  - Incorporate Vector from Netflix (https://github.com/Netflix/vector)
  - Sub-packages for pcp-webjs allowing choice and reducing used space.


author: Mark Goodwin <mgoodwin@redhat.com> - 3.10.5-1
changelog:
  - Provide and use non-exit(1)ing pmGetConfig(3) variant (BZ 1187588)
  - Resolve a pmdaproc.sh pmlogger restart regression (BZ 1229458)
  - Replacement of pmatop/pcp-atop(1) utility (BZ 1160811, BZ 1018575)
  - Reduced installation size for minimal applications (BZ 1182184)
  - Ensure pmlogger start scripts wait on pmcd startup (BZ 1185760)
  - Need to run pmcd at least once before pmval -L will work (BZ 185749)


author: Nathan Scott <nathans@redhat.com> - 3.10.6-1
changelog:
  - Fix pcp2graphite write method invocation failure (BZ 1243123)
  - Reduce diagnostics in pmdaproc unknown state case (BZ 1224431)
  - Derived metrics via multiple files, directory expansion (BZ 1235556)
  - Update to latest PCP sources.


author: Nathan Scott <nathans@redhat.com> - 3.10.7-1
changelog:
  - Resolved pmchart sigsegv opening view without context (BZ 1256708)
  - Fixed pmchart memory corruption restoring Saved Hosts (BZ 1257009)
  - Fix perl PMDA API double-free on socket error path (BZ 1258862)
  - Fix python API pmGetOption(3) alignment interface (BZ 1262722)
  - Added missing RPM dependencies to several PMDA sub-packages.
  - Update to latest stable Vector release for pcp-vector-webapp.
  - Update to latest PCP sources.


author: Mark Goodwin <mgoodwin@redhat.com> - 3.10.8-1
changelog:
  - Update pmlogger to log an immediate sample first (BZ 1269921)
  - Add pmOption host and archive setter python APIs (BZ 1270176)
  - Replace old pmatop(1) man page with pcp-atop(1) (BZ 1270761)
  - Update to latest PCP sources.


author: Lukas Berk <lberk@redhat.com> - 3.10.9-1
changelog:
  - Add -V/--version support to several more commands (BZ 1284411)
  - Resolve a pcp-iostat(1) transient device exception (BZ 1249572)
  - Provides pmdapipe, an output-capturing domain agent (BZ 1163413)
  - Python PMAPI pmSetMode allows None timeval parameter (BZ 1284417)
  - Python PMI pmiPutValue now supports singular metrics (BZ 1285371)
  - Fix python PMAPI pmRegisterDerived wrapper interface (BZ 1286733)
  - Fix pmstat SEGV when run with graphical time control (BZ 1287678)
  - Make pmNonOptionsFromList error message less cryptic (BZ 1287778)
  - Drop unimplemented pmdumptext options from usage, man page (BZ 1289909)
  - Stop creating configuration files in tmp_t locations (BZ 1256125)
  - Update to latest PCP sources.


author: Mark Goodwin <mgoodwin@redhat.com> - 3.11.0-1
changelog:
  - Significant speedups to elapsed time stopping pmcd (BZ 1292027)
  - Fix python derived metric exception handling issues (BZ 1299806)
  - incorrect interpolation across <mark> record in a merged archive (BZ 1296750)
  - pcp requires pcp-compat pulling in a lot of unneeded pcp-pmda-* packages (BZ 1293466)
  - Update to latest PCP sources.


author: Dave Brolley <brolley@redhat.com> - 3.11.1-1
changelog:
  - Call Remove script when uninstalling individual PMDAs (BZ 1304722)
  - Restrict pmcd.services to checking known pcp services (BZ 1286361)
  - Support for multi-archive contexts, across all clients (BZ 1262723)
  - Remove the default shotgun approach to stopping daemons (BZ 1210976)
  - Add mechanism for automatic recovery from PMDA timeouts (BZ 1065803)
  - Update to latest PCP sources.


author: Paul Howarth <paul@city-fan.org> 1.3.3b-1
changelog:
  - Update to 1.3.3b
    - Fixed SFTP directory listing bug
    - Avoid corrupting utmpx databases on FreeBSD
    - Avoid null pointer dereferences during data transfers
    - Fixed "AuthAliasOnly on" anonymous login


author: Paul Howarth <paul@city-fan.org> 1.3.3c-1
changelog:
  - Update to 1.3.3c (#647965)
    - Fixed Telnet IAC stack overflow vulnerability (CVE-2010-4221)
    - Fixed directory traversal bug in mod_site_misc (CVE-2010-3867)
    - Fixed SQLite authentications using "SQLAuthType Backend"
  - New DSO module: mod_geoip


author: Paul Howarth <paul@city-fan.org> 1.3.3d-1
changelog:
  - Updated to 1.3.3d
    - Fixed sql_prepare_where() buffer overflow (bug 3536, CVE-2010-4652)
    - Fixed CPU spike when handling .ftpaccess files
    - Fixed handling of SFTP uploads when compression is used
  - Add Default-Stop LSB keyword in initscript (for runlevels 0, 1, and 6)
  - Fix typos in config file and initscript


author: Paul Howarth <paul@city-fan.org> 1.3.3e-1
changelog:
  - Update to 1.3.3e, fixing a large number of bugs reported upstream:
    - Process privileges may not handled properly when --enable-autoshadow is
      used (bug 3757)
    - mod_sftp closes channel too early after scp download (bug 3544)
    - mod_sftp_pam may tell client to disable echoing erroneously (bug 3579)
    - mod_sftp behaves badly when receiving badly formed SSH messages (bug 3586,
      CVE-2011-1137)
    - Using "$shell $libtool" in prxs does not work for all shells (bug 3593)
    - WrapAllowMsg directive broken due to bug 3423 (bug 3538)
    - SocketOptions receive/send buffer size parameters no longer work (bug 3607)
    - mod_wrap2 needs to support netmask rules for IPv6 addresses (bug 3606)
    - APPE/STOU upload flags erroneously preserved across upload commands
      (bug 3612)
    - Malicious module can use sreplace() function to overflow buffer (bug 3614)
    - Exiting sessions don't seem to die properly (bug 3619)
    - mod_delay sometimes logs "unable to load DelayTable into memory" (bug 3622)
    - Plaintext command injection in FTPS support (bug 3624)
    - mod_ifsession rules using regular expressions do not work (bug 3625)
    - Truncated client name saved in ScoreboardFile (bug 3623)
    - %w variable populated with non-absolute path in SQLLog statement (bug 3627)
    - Unnecessarily verbose "warning: unable to throttle bandwidth: Interrupted
      system call" (bug 3628)
    - SSH DISCONNECT messages sent by mod_sftp even for FTP connections in some
      cases (bug 3630)
    - mod_sql should log "unrecoverable database error" at a higher priority
      (bug 3632)
    - Proftpd is eating CPU when reparsing configuration file on SIGHUP (bug 3610)
    - Incorrect generation of DSA signature for SSH sessions (bug 3634)
  - Nobody else likes macros for commands


author: Paul Howarth <paul@city-fan.org> 1.3.3f-1
changelog:
  - Update to 1.3.3f, fixing a large number of bugs reported upstream:
    - Avoid spinning proftpd process if read(2) returns EAGAIN (bug 3639)
    - Segfault seen in mod_sql_mysql if "SQLAuthenticate groupsetfast" used
      (bug 3642)
    - Disable signal handling for exiting session processes (bug 3644)
    - TCPAccessSyslogLevel directive broken by Bug#3317 (bug 3652)
    - TLSVerifyOrder directive is broken (bug 3658)
    - Segmentation fault if there is regex <IfUser> section in a <VirtualHost>
      section; this is a regression caused by a bad backport of the fix for
      Bug#3625 to the 1.3.3 branch (bug 3659)
    - Filenames with embedded IAC do not get processed correctly (bug 3697)
  - Drop upstreamed nostrip patch
  - Use new --disable-strip option to retain debugging symbols
  - Use upstream LDAP quota table schema rather than our own copy


author: Paul Howarth <paul@city-fan.org> 1.3.3g-1
changelog:
  - Update to 1.3.3g, fixing the following bugs:
    - ProFTPD with mod_sql_mysql dies of "Alarm clock" on FreeBSD (bug 3702)
    - Enable OpenSSL countermeasure against SSLv3/TLSv1 BEAST attacks (bug 3704);
      to disable this countermeasure, which may cause interoperability issues
      with some clients, use the NoEmptyFragments TLSOption
    - Response pool use-after-free memory corruption error
      (bug 3711, #752812, ZDI-CAN-1420, CVE-2011-4130)


author: Paul Howarth <paul@city-fan.org> 1.3.3g-2
changelog:
  - Fix possible symlink race when applying UserOwner to newly created directory
    (CVE-2012-6095, #892715, http://bugs.proftpd.org/show_bug.cgi?id=3841)
  - Add -fno-strict-aliasing, needed for mod_radius
  - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> 1.3.3g-3
changelog:
  - Fix mod_sftp/mod_sftp_pam invalid pool allocation during kbdint authentication
    (#1007678, upstream bug #3973, CVE-2013-4359)


author: Paul Howarth <paul@city-fan.org> 1.3.3g-4
changelog:
  - Fix support for 8192-bit DH parameters (#1044586)
  - Add 3072-bit and 7680-bit DH parameters (upstream bug 4002)


author: Paul Howarth <paul@city-fan.org> - 1.3.3g-5
changelog:
  - Fix for CVE-2016-3125: usage of 1024 bit DH key even with manual parameters
    set (http://bugs.proftpd.org/show_bug.cgi?id=4230)
  - Also fixed related issue where only first DH param in TLSDHParamFile is used,
    regardless of requested keylength
    (http://bugs.proftpd.org/show_bug.cgi?id=3868)
  - Add support for specifying TLSv1.1 and TLSv1.2 (#1281493)
  - Fix SUID/SGID directory permission setting regression introduced with fix
    for CVE-2012-6095 (#1297264)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.62-6
changelog:
  - Fixed integer overflow
    Resolves: CVE-2013-4852
  - Fixed bogus dates in changelog (best estimated)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.62-7
changelog:
  - Fixed a heap-corrupting buffer underrun bug in the modmul function
    Resolves: CVE-2013-4206
  - Fixed a buffer overflow vulnerability in the calculation of modular
    inverses when verifying a DSA signature
    Resolves: CVE-2013-4207
  - Fixed problem when private keys are left in memory after being
    used by PuTTY tools
    Resolves: CVE-2013-4208


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.63-1
changelog:
  - New version
    Resolves: rhbz#995610
  - Dropped perms, CVE-2013-4852, CVE-2013-4206, CVE-2013-4207,
    CVE-2013-4208 patches (all in upstream)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.63-5
changelog:
  - Fixed integer overflow and buffer underrun in erase characters (ECH) handling
    Resolves: CVE-2015-5309


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.63-6
changelog:
  - Fixed possible buffer overflow in SCP protocol when parsing server response
    Resolves: CVE-2016-2563


author: Matthias Saou <http://freshrpms.net/> 2.25b-15
changelog:
  - Update to latest upstream sources, same filename, only email address changes.
  - Remove trademarked Fedora logo button and replace with a symlink to the
    main system-logo provided button image.
  - Update default index.html to UTF-8 and thttpd green background color.


author: Matthias Saou <http://freshrpms.net/> 2.25b-20
changelog:
  - Fix thttpd-2.25b-CVE-2005-3124.patch (#483733).
  - Remove unwanted .orig files from patches (#484205).
  - Don't ship useless man pages (#484205).
  - Reorganize all of the webroot files under /var/www/thttpd, remove cgi-bin
    by default, remove useless log directory.
  - Have makeweb be conditional and disabled by default.
  - Fix thttpd mode from 555 to 755.
  - Add new init block to the init script (commands and exit status need work).
  - Re-enable indexes by default, it's possible to turn them off with dir modes.
  - Don't even compile the CGI programs instead of just excluding them.
  - No longer build htpasswd as static.


author: Matthias Saou <http://freshrpms.net/> 2.25b-21
changelog:
  - Include patch to rename conflicting "getline" function (stdio.h).
  - Fix so that makeweb gets compiled in "build" section with the right WEBDIR.


author: Gabriel Somlo <somlo at cmu.edu> 3.0.1-10
changelog:
  - patch to fix RHBZ 1319858, 1319860
  - bump release past (el6 & Fedora specific) attempts to add systemd support


author: Thomas Spura <tomspur@fedoraproject.org> - 2.2.0-3
changelog:
  - add bcond_without pgm macro (Jose Pedro Oliveira, #867182)
  - remove bundled pgm
  - build against openpgm


