# changelog

author: Jeffrey Ollie <jeff@ocjtech.us> - 1.8.18.0-1:
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 1.8.18.0.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 1.8.18.0 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release:
  -
  - * --- dsp.c User Configurable DTMF_HITS_TO_BEGIN and
  -       DTMF_MISSES_TO_END
  -   (Closes issue ASTERISK-17493. Reported by alecdavis)
  -
  - * --- Fix error where improper IMAP greetings would be deleted.
  -   (Closes issue ASTERISK-20435. Reported by fhackenberger)
  -
  - * --- iax2-provision: Fix improper return on failed cache retrieval
  -   (Closes issue ASTERISK-20337. Reported by John Covert)
  -
  - * --- Fix T.38 support when used with chan_local in between.
  -   (Closes issue ASTERISK-20229. Reported by wdoekes)
  -
  - * --- Fix an issue where media would not flow for situations where the
  -       legacy STUN code is in use.
  -   (Closes issue ASTERISK-20415. Reported by Michele Cicciotti)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.18.0


author: Jeffrey Ollie <jeff@ocjtech.us> - 1.8.18.1-1:
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 1.8.18.1.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 1.8.18.1 resolves an issue reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is the issue resolved in this release:
  -
  - * --- chan_local: Fix local_pvt ref leak in local_devicestate().
  -   (Closes issue ASTERISK-20769. Reported by rmudgett)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.18.1


author: Jeffrey Ollie <jeff@ocjtech.us> - 1.8.19.0-1:
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 1.8.19.0.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 1.8.19.0 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release:
  -
  - * --- Prevent resetting of NATted realtime peer address on reload.
  -   (Closes issue ASTERISK-18203. Reported by daren ferreira)
  -
  - * --- Do not use a FILE handle when doing SIP TCP reads.
  -   (Closes issue ASTERISK-20212. Reported by Phil Ciccone)
  -
  - * --- Fix execution of 'i' extension due to uninitialized variable.
  -   (Closes issue ASTERISK-20455. Reported by Richard Miller)
  -
  - * --- Ensure that the Queue application tracks busy members in off
  -       nominal situations
  -   (Closes issue ASTERISK-20623. Reported by Bryan Walters)
  -
  - * --- Properly extract the Body information of an EWS calendar item
  -   (Closes issue ASTERISK-19738. Reported by Dmitry Burilov)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.19.0


author: Jeffrey Ollie <jeff@ocjtech.us> - 1.8.20.0-1:
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 1.8.20.0.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 1.8.20.0 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release:
  -
  - * --- app_meetme: Fix channels lingering when hung up under certain
  -       conditions
  -   (Closes issue ASTERISK-20486. Reported by Michael Cargile)
  -
  - * --- Fix stuck DTMF when bridge is broken.
  -   (Closes issue ASTERISK-20492. Reported by Jeremiah Gowdy)
  -
  - * --- Improve Code Readability And Fix Setting natdetected Flag
  -   (Closes issue ASTERISK-20724. Reported by Michael L. Young)
  -
  - * --- Fix extension matching with the '-' char.
  -   (Closes issue ASTERISK-19205. Reported by Philippe Lindheimer, Birger "WIMPy" Harzenetter)
  -
  - * --- Fix call files when astspooldir is relative.
  -   (Closes issue ASTERISK-20593. Reported by James Le Cuirot)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.20.0


author: Jeffrey Ollie <jeff@ocjtech.us> - 1.8.22.0-1:
changelog:
  - The Asterisk Development Team has announced the release of Asterisk 1.8.22.0.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 1.8.22.0 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release:
  -
  - * --- Fix Sorting Order For Parking Lots Stored In Static Realtime
  -   (Closes issue ASTERISK-21035. Reported by Alex Epshteyn)
  -
  - * --- Make ParkAndAnnounce return to priority + 1 when return context
  -       is not defined
  -   (Closes issue ASTERISK-20113. Reported by serginuez)
  -
  - * --- When a session timer expires during a T.38 call, re-invite with
  -       correct SDP
  -   (Closes issue ASTERISK-21232. Reported by Nitesh Bansal)
  -
  - * --- Fix several unreleased mutex locks that cause problem with
  -       processing calls
  -   (Closes issue ASTERISK-21119. Reported by Daniel Bohling)
  -
  - * --- Fix crash when AMI redirect action redirects two channels out of
  -       a bridge.
  -   (Closes issue ASTERISK-21356. Reported by William luke)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.22.0
  -
  - The Asterisk Development Team has announced the release of Asterisk 1.8.21.0.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 1.8.21.0 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release:
  -
  - * --- Fix issue where chan_mobile fails to bind to first available
  -       port
  -   (Closes issue ASTERISK-16357. Reported by challado)
  -
  - * --- Fix station ringback; trunk hangup issues in SLA
  -   (Closes issue ASTERISK-20462. Reported by dkerr)
  -
  - * --- Fix Queue Log Reporting Every Call COMPLETECALLER With "h"
  -       Extension Present
  -   (Closes issue ASTERISK-20743. Reported by call)
  -
  - * --- Fix Record-Route parsing for large headers.
  -   (Closes issue ASTERISK-20837. Reported by Corey Farrell)
  -
  - * --- Fix AMI redirect action with two channels failing to redirect
  -       both channels.
  -   (Closes issue ASTERISK-18975. Reported by Ben Klang)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.21.0
  -
  - The Asterisk Development Team has announced security releases for Certified
  - Asterisk 1.8.15 and Asterisk 1.8, 10, and 11. The available security releases
  - are released as versions 1.8.15-cert2, 1.8.20.2, 10.12.2, 10.12.2-digiumphones,
  - and 11.2.2.
  -
  - These releases are available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - The release of these versions resolve the following issues:
  -
  - * A possible buffer overflow during H.264 format negotiation. The format
  -   attribute resource for H.264 video performs an unsafe read against a media
  -   attribute when parsing the SDP.
  -
  -   This vulnerability only affected Asterisk 11.
  -
  - * A denial of service exists in Asterisk's HTTP server. AST-2012-014, fixed
  -   in January of this year, contained a fix for Asterisk's HTTP server for a
  -   remotely-triggered crash. While the fix prevented the crash from being
  -   triggered, a denial of service vector still exists with that solution if an
  -   attacker sends one or more HTTP POST requests with very large Content-Length
  -   values.
  -
  -   This vulnerability affects Certified Asterisk 1.8.15, Asterisk 1.8, 10, and 11
  -
  - * A potential username disclosure exists in the SIP channel driver. When
  -   authenticating a SIP request with alwaysauthreject enabled, allowguest
  -   disabled, and autocreatepeer disabled, Asterisk discloses whether a user
  -   exists for INVITE, SUBSCRIBE, and REGISTER transactions in multiple ways.
  -
  -   This vulnerability affects Certified Asterisk 1.8.15, Asterisk 1.8, 10, and 11
  -
  - These issues and their resolutions are described in the security advisories.
  -
  - For more information about the details of these vulnerabilities, please read
  - security advisories AST-2013-001, AST-2013-002, and AST-2013-003, which were
  - released at the same time as this announcement.
  -
  - For a full list of changes in the current releases, please see the ChangeLogs:
  -
  - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.15-cert2
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.20.2
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.12.2
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.12.2-digiumphones
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.2.2
  -
  - The security advisories are available at:
  -
  -  * http://downloads.asterisk.org/pub/security/AST-2013-001.pdf
  -  * http://downloads.asterisk.org/pub/security/AST-2013-002.pdf
  -  * http://downloads.asterisk.org/pub/security/AST-2013-003.pdf
  -
  - The Asterisk Development Team has announced the release of Asterisk 1.8.20.1.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk
  -
  - The release of Asterisk 1.8.20.1 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following are the issues resolved in this release:
  -
  - * --- Fix astcanary startup problem due to wrong pid value from before
  -       daemon call
  -   (Closes issue ASTERISK-20947. Reported by Jakob Hirsch)
  -
  - * --- Update init.d scripts to handle stderr; readd splash screen for
  -       remote consoles
  -   (Closes issue ASTERISK-20945. Reported by Warren Selby)
  -
  - * --- Reset RTP timestamp; sequence number on SSRC change
  -   (Closes issue ASTERISK-20906. Reported by Eelco Brolman)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.20.1


author: Jeffrey Ollie <jeff@ocjtech.us> - 1.8.23.0-1:
changelog:
  - The release of Asterisk 1.8.23.0 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release:
  -
  - * --- Fix a memory copying bug in slinfactory which was causing
  -       mixmonitor issues.
  -   (Closes issue ASTERISK-21799. Reported by Michael Walton)
  -
  - * --- IAX2: fix race condition with nativebridge transfers.
  -   (Closes issue ASTERISK-21409. Reported by alecdavis)
  -
  - * --- Fix crash in chan_sip when a core initiated op occurs at the
  -       same time as a BYE
  -   (Closes issue ASTERISK-20225. Reported by Jeff Hoppe)
  -
  - * --- Fix The Payload Being Set On CN Packets And Do Not Set Marker
  -       Bit
  -   (Closes issue ASTERISK-21246. Reported by Peter Katzmann)
  -
  - * --- chan_sip: Session-Expires: Set timer to correctly expire at
  -       (~2/3) of the interval when not the refresher
  -   (Closes issue ASTERISK-21742. Reported by alecdavis)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.23.0


author: Jeffrey Ollie <jeff@ocjtech.us> - 1.8.23.1-1:
changelog:
  - The Asterisk Development Team has announced security releases for Certified
  - Asterisk 1.8.15, 11.2, and Asterisk 1.8, 10, and 11. The available security releases
  - are released as versions 1.8.15-cert2, 11.2-cert2, 1.8.23.1, 10.12.3, 10.12.3-digiumphones,
  - and 11.5.1.
  -
  - These releases are available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases
  -
  - The release of these versions resolve the following issues:
  -
  - * A remotely exploitable crash vulnerability exists in the SIP channel driver if
  -   an ACK with SDP is received after the channel has been terminated. The
  -   handling code incorrectly assumes that the channel will always be present.
  -
  - * A remotely exploitable crash vulnerability exists in the SIP channel driver if
  -   an invalid SDP is sent in a SIP request that defines media descriptions before
  -   connection information. The handling code incorrectly attempts to reference
  -   the socket address information even though that information has not yet been
  -   set.
  -
  - These issues and their resolutions are described in the security advisories.
  -
  - For more information about the details of these vulnerabilities, please read
  - security advisories AST-2013-004 and AST-2013-005, which were
  - released at the same time as this announcement.
  -
  - For a full list of changes in the current releases, please see the ChangeLogs:
  -
  - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-1.8.15-cert3
  - http://downloads.asterisk.org/pub/telephony/certified-asterisk/releases/ChangeLog-11.2-cert2
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-1.8.23.1
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.12.3
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-10.12.3-digiumphones
  - http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.5.1
  -
  - The security advisories are available at:
  -
  -  * http://downloads.asterisk.org/pub/security/AST-2013-004.pdf
  -  * http://downloads.asterisk.org/pub/security/AST-2013-005.pdf
  -
  - The Asterisk Development Team has announced the release of Asterisk 1.8.23.0.
  - This release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.5-0.1.rc1
changelog:
  - The Asterisk Development Team has announced the first release candidate of
  - Asterisk 1.8.5. This release candidate is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - The release of Asterisk 1.8.5-rc1 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release candidate:
  -
  - * Fix Deadlock with attended transfer of SIP call
  -  (Closes issue #18837. Reported, patched by alecdavis. Tested by Irontec, ZX81,
  -   cmaj)
  -
  - * Fixes thread blocking issue in the sip TCP/TLS implementation.
  -  (Closes issue #18497. Reported by vois. Patched by dvossel. Tested by vois,
  -   rossbeer, kowalma, Freddi_Fonet)
  -
  - * Be more tolerant of what URI we accept for call completion PUBLISH requests.
  -  (Closes issue #18946. Reported by GeorgeKonopacki. Patched by mmichelson)
  -
  - * Fix a nasty chanspy bug which was causing a channel leak every time a spied on
  -  channel made a call.
  -  (Closes issue #18742. Reported by jkister. Tested by jcovert, jrose)
  -
  - * This patch fixes a bug with MeetMe behavior where the 'P' option for always
  -  prompting for a pin is ignored for the first caller.
  -  (Closes issue #18070. Reported by mav3rick. Patched by bbryant)
  -
  - * Fix issue where Asterisk does not hangup a channel after endpoint hangs up. If
  -  the call that the dialplan started an AGI script for is hungup while the AGI
  -  script is in the middle of a command then the AGI script is not notified of
  -  the hangup.
  -  (Closes issue #17954, #18492. Reported by mn3250, devmod. Patched by rmudgett)
  -
  - * Resolve issue where leaving a voicemail, the MWI message is never sent. The
  -  same thing happens when checking a voicemail and marking it as read.
  -  (Closes issue ASTERISK-18002. Reported by Leif Madsen. Resolved by Richard
  -   Mudgett)
  -
  - * Resolve issue where wait for leader with Music On Hold allows crosstalk
  -  between participants. Parenthesis in the wrong position. Regression from issue
  -  #14365 when expanding conference flags to use 64 bits.
  -  (Closes issue #18418. Reported by MrHanMan. Patched by rmudgett)
  -
  - * Fix timerfd locking issue.
  -  (Closes ASTERISK-17867, ASTERISK-17415. Patched by kobaz)
  -
  - For a full list of changes in this release candidate, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.5-rc1


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.8.5.0-1
changelog:
  - The Asterisk Development Team announces the release of Asterisk 1.8.5.0. This
  - release is available for immediate download at
  - http://downloads.asterisk.org/pub/telephony/asterisk/
  -
  - The release of Asterisk 1.8.5.0 resolves several issues reported by the
  - community and would have not been possible without your participation.
  - Thank you!
  -
  - The following is a sample of the issues resolved in this release:
  -
  - * Fix Deadlock with attended transfer of SIP call
  -  (Closes issue #18837. Reported, patched by alecdavis. Tested by Irontec, ZX81,
  -  cmaj)
  -
  - * Fixes thread blocking issue in the sip TCP/TLS implementation.
  -  (Closes issue #18497. Reported by vois. Patched by dvossel. Tested by vois,
  -  rossbeer, kowalma, Freddi_Fonet)
  -
  - * Be more tolerant of what URI we accept for call completion PUBLISH requests.
  -  (Closes issue #18946. Reported by GeorgeKonopacki. Patched by mmichelson)
  -
  - * Fix a nasty chanspy bug which was causing a channel leak every time a spied on
  -  channel made a call.
  -  (Closes issue #18742. Reported by jkister. Tested by jcovert, jrose)
  -
  - * This patch fixes a bug with MeetMe behavior where the 'P' option for always
  -  prompting for a pin is ignored for the first caller.
  -  (Closes issue #18070. Reported by mav3rick. Patched by bbryant)
  -
  - * Fix issue where Asterisk does not hangup a channel after endpoint hangs up. If
  -  the call that the dialplan started an AGI script for is hungup while the AGI
  -  script is in the middle of a command then the AGI script is not notified of
  -  the hangup.
  -  (Closes issue #17954, #18492. Reported by mn3250, devmod. Patched by rmudgett)
  -
  - * Resolve issue where leaving a voicemail, the MWI message is never sent. The
  -  same thing happens when checking a voicemail and marking it as read.
  -  (Closes issue ASTERISK-18002. Reported by Leif Madsen. Resolved by Richard
  -  Mudgett)
  -
  - * Resolve issue where wait for leader with Music On Hold allows crosstalk
  -  between participants. Parenthesis in the wrong position. Regression from issue
  -  #14365 when expanding conference flags to use 64 bits.
  -  (Closes issue #18418. Reported by MrHanMan. Patched by rmudgett)
  -
  - For a full list of changes in this release, please see the ChangeLog:
  -
  - http://downloads.asterisk.org/pub/telephony/asterisk/ChangeLog-1.8.5.0


author: Matthias Saou <http://freshrpms.net/> 1.24-3
changelog:
  - Add faad2-devel build requirement to build with MP4 support (Chris Petersen),
    faad2 had to be fixed before it worked, though.


author: Matthias Saou <http://freshrpms.net/> 2.0-3
changelog:
  - Downgrade to 2.0 with gcc 3.4 and 4 patches from dev.gentoo.org, the libmp4v2
    is now internal again, no need for the external mpeg4ip mess... should fix
    many issues, like gtkpod AAC support.


author: Matthias Saou <http://freshrpms.net/> 2.0-8
changelog:
  - Include patch to #include <sys/types.h> in mp4.h to fix building against
    the included libmp4v2 (faac, maybe others).


author: Matthias Saou <http://freshrpms.net/> 2.5-1
changelog:
  - Update to 2.5.
  - Completely remove xmms/bmp plugin, it's a real mess anyway. Use audacious.
  - Rip out libmp4v2 too, it's best as a separate package.
  - Add libsysfs-devel build requirement, as it seems configure checks for it.


author: Matthias Saou <http://freshrpms.net/> 2.5-2
changelog:
  - Add patch to remove backwards compatibility in the header so that we can
    easily identify and patch all programs requiring a rebuild.


author: Patrice Dumas <pertusus[AT]free[DOT]fr> 3.0.4-2
changelog:
  - use newer post scripts
    - use .Package instead of .Dist
    - remove unused patches
    - correct paths in scripts
    - ship check_system_crontabs
    - LSB compliant initscript
    - add scripts that watch config files as daemons and sync fcron files
    - add a subpackage that can be used as a vixie cron replacement


author: Patrice Dumas <pertusus[AT]free[DOT]fr> 3.0.4-4
changelog:
  - instead of using inotifywait use a specific C program to watch config
    - don't try to run anything in the default case and merge the 
      fcron-watch-config subpackage


author: Patrice Dumas <pertusus[AT]free[DOT]fr> 3.0.4-5
changelog:
  - simplify fcron_watch_config.c thanks to watching example in cronie
      and also wait for cron.d instead of erroring
    - dont provide %{_sysconfdir}/cron.d, since fcron_watch_config may
      not be started


author: Matthias Saou <http://freshrpms.net/> 0.4.9-0.8.20070530
changelog:
  - Update to today's SVN codebase.
  - Rename various options to match new configure names.
  - Remove dca support since it's no longer available with the external lib.
  - Enable theora support by default.


author: Dag Wieers <dag@wieers.com> - 0.5-1
changelog:
  - Updated to release 0.5.
  - Disabled speex support, lacking speex 1.2.
  - Rebuild against x264-0.4.20090708.


author: Remi Collet <remi@fedoraproject.org> - 2.2.1-2
changelog:
  - Update to 2.2.1 (from Fedora)
  - remove unneeded sources
  - fix EL-5 and EL-6 build
  - obsolete gd-last when needed
  - use libwebp instead of libvpx for webp images


author: Joe Orton <jorton@redhat.com> - 2.2.14-4
changelog:
  - mod_ssl: add further mitigation for CVE-2009-3555
  - drop proxy_ajp.conf
  - update httpd.conf: decrease Timeout to 1m, update LoadModule
    directives, bump worker to 4 proc/300clients
  - fix hard-coded default pidfile to match default config (#547629)
  - drop legacy X-Pad header from short responses (#526110)
  - disable keepalive for Expect: 100-continue and error response (#533407)
  - mod_ext_filter: fix spurious error log output (#479463)
  - mod_rewrite: don't serialize logfile access (#493023)
  - fix spurious error messages on graceful restart (#233955)
  - mod_ssl: fix potential hang in renegotiation (#510515)
  - mod_proxy_connect: support use SSL client connection (#523594)


author: Joe Orton <jorton@redhat.com> - 2.2.14-5
changelog:
  - mod_ssl: fix CVE-2009-3555 backport (#563119)
  - mod_authnz_ldap: fix for dynamic group support
  - mod_ssl: add SSLInsecureRenegotiation directive (#561435)


author: Joe Orton <jorton@redhat.com> - 2.2.15-1
changelog:
  - update to 2.2.15 (#570465, #570442)
  - fix version string (#572140)
  - mod_ssl: use ASN1_STRING_print() in SSLRequire's OID() (#552942)
  - prevent use of rsync during "make install" (#557049)
  - load mod_version by default in httpd.conf


author: Joe Orton <jorton@redhat.com> - 2.2.15-2
changelog:
  - init script fixes for LSB compliance (#546252)
   * exit code 2 for an unknown script argument
   * exit code 6 for a reload if config-test fails
   * exit code 7 for a reload on a stopped service
   * fixed help output to cover all options
  - mod_dav: handle PUT failure more cleanly (#572911)


author: Joe Orton <jorton@redhat.com> - 2.2.15-3
changelog:
  - add "Satisfy All" for .htaccess in httpd.conf (#594981)
  - adjust user/group creation in %pre (#594395)
  - mod_ssl: tweak OID() evaluation of unknown exts (#594980)


author: Joe Orton <jorton@redhat.com> - 2.2.15-4
changelog:
  - use init script to rotate logs (#606955)
  - disable keepalive for 100-continue and error response (#606964)


author: Eike Rathke <erack@redhat.com> - 50.1.2-6
changelog:
  - Resolves: rhbz#966141 various flaws in Layout Engine font processing
  - Resolves: rhbz#966077 aarch64 support for icu-config.sh wrapper


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 4.0-5
changelog:
  - Merge review: add _smp_mflag, remove RPM_BUILD_ROOT test in istall
    and clean, remove Obsoletes:, fix use of % in changelog
    Resolves: #225955


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 4.0-6
changelog:
  - Fix buildroot
  - Fix matching of cidr-ipv6 network addressed (patch by Lubomir
    Kundrak <lkundrak@redhat.com>)
    Resolves: #280941


author: Philip J Perry <phil@elrepo.org> - 1.0.2-1
changelog:
  - Update to version 1.0.2
  - Install /etc/modprobe.d/tpe.conf
  - Install /etc/sysconfig/modules/tpe.modules
  - Install the docs


author: Matthias Saou <http://freshrpms.net/> 3.96.1-3
changelog:
  - Remove the use off _smp_mflags, as build fails on i386 with -j4 (but didn't
    on x86_64, strange).


author: Matthias Saou <http://freshrpms.net/> 3.96.1-5
changelog:
  - Clear not needed executable stack flag bit from the library to make it work
    with selinux, add prelink build requirement (need to remove for old distros).


author: Remi Collet <Fedora@famillecollet.com> - 0.46-1.1
changelog:
  - update sasl.patch to avoid need of autoconf
  - rebuild for remi repo with SASL for fedora <= 10 and EL <= 5


author: Rich Edelman (rich.edelman@openwave.com)
changelog:
  - Upgraded to version 1.2.0-RC7
  - Changed Makefile to use /lib/modules/`uname -r`/build as the KERNEL_PATH 
    directory, instead of /usr/src/linux. This should make building this package
    across different distributions easier. (Patch mpt-status-fix-kernel-path.diff)


author: Sven Hoexter <sven@timegate.de> - 1.2.0-1
changelog:
  - Add Patch1 and Patch2, taken from Debian and re-diffed for a
    generic path.
  - Add BuildRequires pciutils-devel.
  - Add 'dist' to the release version.
  - Add BuildRoot format from one of the Fedora examples.
  - Change Packager to Sven Hoexter <sven@timegate.de>.
  - Copy the short and long description from the Debian package.


author: Sven Hoexter <sven@timegate.de> - 1.2.0-2
changelog:
  - Start summary with a capital letter (rpmlint).
  - Change License to GPLv2+ (rpmlint).
  - Remove 'Packager' tag (rpmlint).
  - Remove macro from the prior changelog entry (rpmlint).
  - Add -q to the 'setup' macro (rpmlint).
  - Edit 'Source' tag to contain the upstream URL (rpmlint).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - rename to nss-pam-ldapd
  - also check for import settings in /etc/nss_ldap.conf and /etc/pam_ldap.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.4-1
changelog:
  - update to 0.7.4 (#592385)
  - stop trying to migrate retry timeout parameters from old ldap.conf files
  - add an explicit requires: on nscd to make sure it's at least available
    on systems that are using nss-pam-ldapd; otherwise it's usually optional
    (#587306)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-2
changelog:
  - don't return an uninitialized buffer as the value for an optional attribute
    that isn't present in the directory server entry (#592965)


author: Radek Vokal <rvokal@redhat.com> - 5.1.11-3
changelog:
  - spec file clean up by Adrian Reber <adrian@lisas.de>
  - added a URL
  - removed wrong URL from Source
  - fixed summary according to guidlines
  - removed bogus build require
  - disabled xinetd services
  - using correct path in xinetd files
  - removed unnecessary checks for BUILD_ROOT
  - replaced /etc with macro
  - added noreplace flag to %config


author: Remi Collet <Fedora@famillecollet.com> 5.3.8-3
changelog:
  - add mysqlnd sub-package
  - move /usr/lib[64]/php/modules-zts to /usr/lib[64]/php-zts/modules
  - drop patch4 (use --libdir option instead)


author: Remi Collet <rcollet@redhat.com> 5.6.0-0.20.RC3
changelog:
  - php 5.6.0RC3
  - fix license handling
  - fix zts-php-config --php-binary output #1124605
  - cleanup with_libmysql
  - add php-litespeed subpackage (/usr/bin/lsphp)


author: Remi Collet <Fedora@FamilleCollet.com> - 2.1.0-2
changelog:
  - add filter_provides to avoid private-shared-object-provides xdebug.so
  - add %check section (minimal load test)
  - always use libedit


author: Brad Schuetz <brad@omnis.com> 2:2.11.1-2
changelog:
  - Add status filter patch
  - ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/feature-patches/20140322-smtp-delivery-status-filter-patch-postfix-2.11


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.7.0-2
changelog:
  - follow guidelines for alternatives (#570801)
  - move sasl config to /etc/sasl2 (#574434)
  - drop sasl v1 support
  - remove unnecessary requirements
  - use bcond macros


author: Paul Howarth <paul@city-fan.org> 1.3.3b-1
changelog:
  - Update to 1.3.3b
    - Fixed SFTP directory listing bug
    - Avoid corrupting utmpx databases on FreeBSD
    - Avoid null pointer dereferences during data transfers
    - Fixed "AuthAliasOnly on" anonymous login


author: Paul Howarth <paul@city-fan.org> 1.3.3c-1
changelog:
  - Update to 1.3.3c (#647965)
    - Fixed Telnet IAC stack overflow vulnerability (CVE-2010-4221)
    - Fixed directory traversal bug in mod_site_misc (CVE-2010-3867)
    - Fixed SQLite authentications using "SQLAuthType Backend"
  - New DSO module: mod_geoip


author: Paul Howarth <paul@city-fan.org> 1.3.3c-2
changelog:
  - Add /etc/tmpfiles.d/proftpd.conf for builds on Fedora 15 onwards to
    support running with /var/run on tmpfs (#656675)


author: Paul Howarth <paul@city-fan.org> 1.3.3c-3
changelog:
  - Update mod_vroot to 0.9 (improvements to alias handling)
  - Note that the previous default configuration is broken by this change; see
    the new VRootAlias line in proftpd.conf
  - Add Default-Stop LSB keyword in initscript (for runlevels 0, 1, and 6)


author: Paul Howarth <paul@city-fan.org> 1.3.3d-1
changelog:
  - Update to 1.3.3d
    - Fixed sql_prepare_where() buffer overflow (bug 3536)
    - Fixed CPU spike when handling .ftpaccess files
    - Fixed handling of SFTP uploads when compression is used


author: Paul Howarth <paul@city-fan.org> 1.3.3e-1
changelog:
  - Update to 1.3.3e, fixing a large number of bugs reported upstream:
    - Process privileges may not handled properly when --enable-autoshadow is
      used (bug 3757)
    - mod_sftp closes channel too early after scp download (bug 3544)
    - mod_sftp_pam may tell client to disable echoing erroneously (bug 3579)
    - mod_sftp behaves badly when receiving badly formed SSH messages (bug 3586,
      CVE-2011-1137)
    - Using "$shell $libtool" in prxs does not work for all shells (bug 3593)
    - WrapAllowMsg directive broken due to bug 3423 (bug 3538)
    - SocketOptions receive/send buffer size parameters no longer work (bug 3607)
    - mod_wrap2 needs to support netmask rules for IPv6 addresses (bug 3606)
    - APPE/STOU upload flags erroneously preserved across upload commands
      (bug 3612)
    - Malicious module can use sreplace() function to overflow buffer (bug 3614)
    - Exiting sessions don't seem to die properly (bug 3619)
    - mod_delay sometimes logs "unable to load DelayTable into memory" (bug 3622)
    - Plaintext command injection in FTPS support (bug 3624)
    - mod_ifsession rules using regular expressions do not work (bug 3625)
    - Truncated client name saved in ScoreboardFile (bug 3623)
    - %w variable populated with non-absolute path in SQLLog statement (bug 3627)
    - Unnecessarily verbose "warning: unable to throttle bandwidth: Interrupted
      system call" (bug 3628)
    - SSH DISCONNECT messages sent by mod_sftp even for FTP connections in some
      cases (bug 3630)
    - mod_sql should log "unrecoverable database error" at a higher priority
      (bug 3632)
    - Proftpd is eating CPU when reparsing configuration file on SIGHUP (bug 3610)
    - Incorrect generation of DSA signature for SSH sessions (bug 3634)
  - Update mod_vroot to 0.9.2
  - Fix typo in initscript
  - Nobody else likes macros for commands


author: Paul Howarth <paul@city-fan.org> 1.3.3f-1
changelog:
  - Update to 1.3.3f, fixing a large number of bugs reported upstream:
    - Avoid spinning proftpd process if read(2) returns EAGAIN (bug 3639)
    - Segfault seen in mod_sql_mysql if "SQLAuthenticate groupsetfast" used
      (bug 3642)
    - Disable signal handling for exiting session processes (bug 3644)
    - TCPAccessSyslogLevel directive broken by Bug#3317 (bug 3652)
    - TLSVerifyOrder directive is broken (bug 3658)
    - Segmentation fault if there is regex <IfUser> section in a <VirtualHost>
      section; this is a regression caused by a bad backport of the fix for
      Bug#3625 to the 1.3.3 branch (bug 3659)
    - Filenames with embedded IAC do not get processed correctly (bug 3697)
  - Drop upstreamed nostrip patch
  - Use new --disable-strip option to retain debugging symbols
  - Use upstream LDAP quota table schema rather than our own copy


author: Paul Howarth <paul@city-fan.org> 1.3.3g-1
changelog:
  - Update to 1.3.3g, fixing the following bugs:
    - ProFTPD with mod_sql_mysql dies of "Alarm clock" on FreeBSD (bug 3702)
    - Enable OpenSSL countermeasure against SSLv3/TLSv1 BEAST attacks (bug 3704);
      to disable this countermeasure, which may cause interoperability issues
      with some clients, use the NoEmptyFragments TLSOption
    - Response pool use-after-free memory corruption error
      (bug 3711, #752812, ZDI-CAN-1420, CVE-2011-4130)


author: Paul Howarth <paul@city-fan.org> 1.3.3g-2
changelog:
  - Fix possible symlink race when applying UserOwner to newly created directory
    (CVE-2012-6095, #892715, http://bugs.proftpd.org/show_bug.cgi?id=3841)
  - Add -fno-strict-aliasing, needed for mod_radius
  - Drop %defattr, redundant since rpm 4.4


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-10
changelog:
  - don't set xterm function keys in default config (#151556)
  - always return 0 in scriptlet (#433882)
  - fix pty permissions
  - enable utempter support
  - link with libtinfo, don't link with libutil
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.0.3-15
changelog:
  - fix crash when resizing (#515055)
  - try to improve default config (#523647, #506256, #492729)
  - suppress install-info errors (#515999)


author: Russ Combs <rcombs@sourcefire.com> 2.8.0
changelog:
  - Removed README.build_rpms from description
  - Removed 2nd "doc/" component from doc install path
  - Changed doc/ file attributes to mode 0644
  - Moved schemas/ from doc to data dir
  - Added installation of schemas/create_*
  - Removed redundant '/'s from mkdir path specs
  - Eliminated find warning by moving -maxdepth ahead of -type
  - Fixed "warning: File listed twice: ..." for libsf so files


author: Todd Wease <twease@sourcefire.com> 2.9.3
changelog:
  - Removed --enable-decoder-preprocessor-rules since this is now the default
  -	behavior and not configurable.


author: Warren Togami <wtogami@redhat.com> - 3.3.0-0.27.rc1
changelog:
  - sa-update runs in cron automatically if spamd or amavisd is running
    If you use neither, you may force sa-update by editing /etc/sysconfig/sa-update


author: Thorsten Leemhuis <fedora[AT]leemhuis[DOT]info> - 2.8.15-2
changelog:
  - add sqlite-64bit-fixes.patch and sqlite-2.8.15-arch-double-differences.patch
    fixes x86_64; Both were found in a mandrake srpm
  - remove exclusive arch ix86; hopefully this fixes ppc also


author: Ignacio Vazquez-Abrams <ivazquez@ivazquez.net> 2.8.16-1
changelog:
  - Name change to sqlite2
  - Dropped Epoch
  - Added Obsoletes to all subpackages
  - Minor cosmetic changes


author: Alex Lancaster <alexlan[AT]fedoraproject org> - 2.8.17-5
changelog:
  - Install tcl subpackage in correct place, thanks to hkoba for patch (#516411)
  - Use new tclver define, depend on at least tcl 8.5


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.92-1
changelog:
  - Some bug fixes
  - http://trac.transmissionbt.com/query?groupdesc=1&group=component&milestone=1.92&order=severity


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.00-1
changelog:
  - https://trac.transmissionbt.com/wiki/Changes?version=57
  - Drop the clean section as it is redundant now


author: Matthias Saou <http://freshrpms.net/> 0.0.0-0.1.svn468
changelog:
  - Update to svn 468.
  - Lower version from 0.0.svn to 0.0.0 since one day 0.0.1 might come out,
    this shouldn't be much of a problem since the lib is only statically linked,
    thus few people should have it installed, and build systems which aren't
    concerned about upgrade paths should get the latest available package.


author: Matthias Saou <http://freshrpms.net/> 0.0.0-0.2.20060607
changelog:
  - Switch to using the official snapshots.
  - Remove no longer needed UTF-8 AUTHORS file conversion.
  - Simplify xorg build requirement.
  - Switch from full %configure to ./configure with options since no autotools.
  - Enable shared library at last.
  - Add our %{optflags} to the build.
  - Include patch to make the *.so symlink relative.


author: Matthias Saou <http://freshrpms.net/> 0.0.0-0.2.20060731
changelog:
  - Update to 20060731 snapshot.
  - Require the main package from the devel since we have a shared lib now.
  - Remove no longer needed symlink patch.
  - Enable gtk, include patch to have it build, and split off sub-packages.


author: Matthias Saou <http://freshrpms.net/> 0.0.0-0.3.20061023
changelog:
  - Update to 20061023 snapshot, the last was too old for MPlayer 1.0rc1.
  - Remove no longer needed gtk patch.


author: Matthias Saou <http://freshrpms.net/> 0.0.0-0.4.20070529
changelog:
  - Update to 20070529 snasphot for F7 (soname .54 bump to .55).
  - Add missing ldconfig calls for the gtk sub-package.


