# changelog

author: Paul Oehler <poehler@interworx.com>
changelog:
  - Set Epoch to 3, to combat incompatible updates from 3rd party repos.
  - Added port 24 to default open ports, as sftp will be there by default.


author: Paul Oehler <poehler@interworx.com>
changelog:
  - Upgrade to https://github.com/rfxn/advanced-policy-firewall/commit/93adac0e19f8e486826dda4c2706dbf294b4b2b8


author: Paul Oehler <poehler@interworx.com>
changelog:
  - Upgrade to 0.99.3
  - added clamav-0.99.3-scanners.patch (https://gist.github.com/manuelm/dbc94001c77c07363cdcb5b390c2cb04)


author: Paul Oehler <poehler@interworx.com>
changelog:
  - Backported newer TLS_PROTOCOL management from latest courier
  - Added mkdhparams logic
  - Changed default TLS_PROTOCOL value from SSL3 to TLSv1+


author: Peter Ajamian <pj@ghettoforge.org> - 1:2.3.0-1
changelog:
  - Dovecot to 2.3.0.rc1
  - Pigeonhole to 0.5.0.rc1
  - Renamed to dovecot23
  - Rebase waitonline patch
  - Log reopen patch no longer needed.
  - Removed libstats files and replaced with old-stats.
  - Added 20-submission.conf.


author: Remi Collet <remi@fedoraproject.org> - 2.2.1-2
changelog:
  - Update to 2.2.1 (from Fedora)
  - remove unneeded sources
  - fix EL-5 and EL-6 build
  - obsolete gd-last when needed
  - use libwebp instead of libvpx for webp images


author: Remi Collet <remi@fedoraproject.org> - 2.2.5-1
changelog:
  - Update to 2.2.5
  - fix double-free in gdImagePngPtr(). CVE-2017-6362
  - fix buffer over-read into uninitialized memory. CVE-2017-7890


author: Paul Oehler <poehler@interworx.com>
changelog:
  - Added various relevant redhat patches
  - httpd-2.2.15-CVE-2014-0231.patch
  - httpd-2.2.15-apachectl-status.patch
  - httpd-2.2.15-cgi-timeout.patch
  - httpd-2.2.15-mod_proxy_http-bb-cleanup.patch
  - httpd-2.2.15-mod_ssl-reload.patch
  - httpd-2.2.15-proxy-keepalive.patch
  - httpd-2.2.15-proxyvhostlog.patch
  - httpd-2.2.15-r1388547.patch
  - httpd-2.2.15-r1530280.patch
  - httpd-2.2.15-r1542327.patch (logjam vuln)
  - httpd-2.2.15-ssl-crl-caching.patch


author: Paul Oehler <poehler@interworx.com>
changelog:
  - Moved SSLProtocol and SSLCipherSuite out of ssl.conf virtualhost
    to establish a more reasonable default for these settings.


author: Chris Wells <clwells@nexcess.net>
changelog:
  - added squirrelmail suport to the httpd-custom.conf
  - fixed awstats aliases based on new awstats package


author: Paul Oehler <poehler@interworx.com>
changelog:
  - bumped to 2.0.63 version, required for building with newer autotools in Fedora 8
  - added support for Fedora 8


author: Tim College <tcollege@interworx.com>
changelog:
  - Dropped unsupported OSes from build
  - Added new config files for working with iworxphp72
  - Added iworx-httpd-mmn


author: Tomislav Plavcic <tomislav.plavcic@percona.com>
changelog:
  - Fixed RPMs assumes that .pid file is located in datadir (bug1201896)
  - Fixed errors in debug build when maintainer mode is on (bug1408232)


author: Tim College <tcollege@interworx.com>
changelog:
  - Added .iworx. to the name of the RPM to be included in automatic updates
  - Added restarting of the IWorx DB to the %post section


author: Paul Oehler <poehler@interworx.com>
changelog:
  - Removed interworx-5.1.0 dependency, broke rpmbuild of proftpd etc.
  - Added back libmysqlclient naming convention logic.


author: William Horka <whorka@hmdc.harvard.edu> 2.4.6-2
changelog:
  - Add selinux module
  - Remove unused log dir and add IPC socket dir
  - Add FastCgiWrapper, FastCgiConfig, and FastCgiWrapper to fastcgi.conf
  - Set httpd User and Group in fastcgi.conf so mod_fastcgi.so will load


author: Tim College <tcollege@interworx.com>
changelog:
  - Changed to run as iworx-web instead of iworx user
  - Added code to create iworx-web user and group if needed


author: Remi Collet <remi@remirepo.net> - 7.2.29-1
changelog:
  - Update to 7.2.29 - http://www.php.net/releases/7_2_29.php
  - use oracle client library version 19.6 (18.5 on EL-6)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-20
changelog:
  - resource-agents: fs-lib: fix do_monitor device mapping
    (fs_lib_fix_do_monitor_device_mapping.patch)
    Resolves: rhbz#669832


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-21
changelog:
  - Mirror dev failure in HA LVM can cause service failur
    (fix_bug_683213_mirror_dev_failure_in_ha_lvm_can_cause_service_failure.patch)
    Resolves: rhbz#683213


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-1
changelog:
  - Rebase package on top of new upstream:
    resource-agents: Improve LD_LIBRARY_PATH handling by SAP*
    resource-agents: Add resource type to logging
    oracledb.sh resource script should attempt a clean shutdown first
    resource-agent does not remove nfs service temp dirs when using nfslock=1
    Listen line in generated httpd.conf incorrect
    Include rhev-check upstream
  - spec file update:
    * drop all patches
    * resync with upstream spec file. See top section for local deltas
    Resolves: rhbz#707127, rhbz#705763, rhbz#667217
  - Move rgmanager S/Lang from resource-agents to rgmanager:
    * Add versioned Conflicts on rgmanager to avoid file conflicts
    Resolves: rhbz#693518


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.9.2-1
changelog:
  - Rebase package on top of new upstream
    * ship xsl and rng files required to build relaxng schema
    * drop local copy of sfex_init.8
    * drop bz711852-Fix-ASEHAagent-to-allow-for-multiple-ASEHA-agents-on.patch
      included upstream
  - spec file update:
    add %post to generate new relaxng schema
    Resolves: rhbz#707127


author: Chris Feist <cfeist@redhat.com> - 3.9.2-2
changelog:
  - Postgres-8 resource agent now properly detects if postgresql was started
  - fs.sh resource agent now returns the proper response code when a device
    does not yet exist.
  - Resolves: rhbz#709400 rhbz#694816


author: Chris Feist <cfeist@redhat.com> - 3.9.2-3
changelog:
  - Main rgmanager resource agents now use proper return codes for use with
    pacemaker.
  - NFS mounts now unmount faster when the network is lost.
  - Resolves: rhbz#678497 rhbz#727643


author: Chris Feist <cfeist@redhat.com> - 3.9.2-4
changelog:
  - Create a link for the modified dtd for rgmanager
  - Fix ocf-tester so rgmanager agents requiring bash don't cause syntax errors
  - Resolves: rhbz#727643


author: Nalin Dahyabhai <nalin@redhat.com> 2002e-17
changelog:
  - account for the /usr/share/ssl -> /etc/pki/tls move in the patch which
    sets the locations at compile-time (more of #165967)


author: Jonathan Kamens <jik@kamens.brookline.ma.us> 2004g-1
changelog:
  - Upstream version 2004g (#176974)
  - Remove obsolete doc file "WARNING"
  - Remove security patch included in new upstream version
  - Custom flock code no longer necessary; included in upstream


author: Jindrich Novy <jnovy@redhat.com> 10.47.05-5
changelog:
  - remove obsolete pgmtopbm and pnmcomp, symlink them to the new
    compatible variants
  - fix ppmfade -h, --help options
  - add missing man pages
  - pnmmargin won't create leftovers in /tmp
  - add Requires: ghostscript
  - link against -lz


author: Jindrich Novy <jnovy@redhat.com> 10.47.05-6
changelog:
  - pgmtopbm should generate PBM, not PAM file
  - forwardport pnmmontage from 10.35 to make it work
  - fix pamstretch-gen


author: Jindrich Novy <jnovy@redhat.com> 10.47.05-9
changelog:
  - fix cmuwtopbm so that magic bytes test actually works
  - fix pamtojpeg2k (don't close stdout twice)


author: Tim College <tcollege@interworx.com> - 6.0.0
changelog:
  - Changed to dummy package as part of changing to iworxphp72
  - Stupid change to trigger build attempt


author: Tim College <tcollege@interworx.com>
changelog:
  - Conditionally reset the contents of tlscipherdefaults file
  - The earlier change wound up in .rpmnew


author: Paul Oehler <poehler@interworx.com>
changelog:
  - added dns_ip6_lookup patch to disable ipv6 for qmail-remote via control/dns_ip6_lookup
  - added ip6_senderip patch to make control/senderip honor per-domain ip6 settings


author: Remi Collet <remmi@remirepo.net> - 7.1-1
changelog:
  - add remi-safe repository
  - translate repository name
  - update repository configuration for "remirepo.net" domain


author: Adam Vollrath <adam@endpoint.com>
changelog:
  - Refactored to use Phusion's installer instead of building from source
  - Changed prefix to just /usr/local
  - Added check for existing /usr/local/bin/ruby
  - Split rubygems into a subpackage


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-23
changelog:
  - RHEL-6.8 erratum
    - fixed handling of closefrom_override defaults option
    Resolves: rhbz#1309976


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-24
changelog:
  - RHEL-6.8 erratum
    - fixed a bug causing that non-root users can list privileges of
      other users
    Resolves: rhbz#1312481


author: Tomas Sykora <tosykora@redhat.com> - 1.8.6p3-25
changelog:
  - RHEL-6.9 erratum
    - Fix "sudo -l command" in the LDAP and SSS backends when the command
      is not allowed.
    Resolves: rhbz#1374410
    - Fix sudo log file wrong group ownership
    Resolves: rhbz#1330001
    - Fix sudo parsing sudoers with user's locale
    Resolves: rhbz#1318374


author: Tomas Sykora <tosykora@redhat.com> - 1.8.6p3-26
changelog:
  - RHEL-6.9 erratum
    - Fix race condition when creating /var/log/sudo-io direcotry
    Resolves: rhbz#1365156


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 20061116.0-4
changelog:
  - Update to modern Fedora standards (no BuildRoot or rm -rf in %install).
  - No need for empty %prep and %build.
  - I prefer %{buildroot} these days.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 20100211.0-1
changelog:
  - New upstream release 20100211.0.
  - New project URL, now distributed as a tarball.
  - New docs, including a license file.


author: Joseph Purkis <jpurkis@interworx.com>
changelog:
  - Adding Almalinux and cleaning up old rhexs
  - Added interworx-prep-vpopmail for details look at interworx-prep-vpopmail notes.


