# changelog

author: Bernard Johnson <bjohnson@symetrix.com> 3.2.1-10
changelog:
  - cleanup build macros for Fedora
  - fix deprecated qw messages (partial fix for bz #755076)
  - CVE-2011-5081 BackupPC: XSS flaw in RestoreFile.pm
    (bz #795017, #795018, #795019)
  - Broken configuration for httpd 2.4 (bz #871353)


author: Bernard Johnson <bjohnson@symetrix.com> 3.2.1-11
changelog:
  - Missing backuppc.service file after upgrade to 3.2.1-10 causes service to
    exit at start (bz #896626)


author: Johan Cwiklinski <johan AT x-tnd DOT be> 3.3.0-1
changelog:
  - Last upstream release
  - Remove no longer needeed patches
  - Fix incorrect-fsf-address to reduce rpmlint output


author: Bernard Johnson <bjohnson@symetrix.com> 3.3.0-2
changelog:
  - fix typo in README.RHEL
  - enable PIE build (bz #965523)
  - add patch that causes getpwnam to return only uid to fix selinux denials
    (bz #827854)
  - add local-fs.target and remote-fs.target to startup dependency (bz #959309)


author: Daniel Berteaud <daniel@firewall-services.com> 4.2.1-2
changelog:
  - Backport commit to count common rsync xfer errors GLPI #34026 https://github.
    com/backuppc/backuppc/commit/f5904a1f40f20fa76f43c23d12dacddba116a8d4
    (daniel@firewall-services.com)


author: Daniel Berteaud <daniel@firewall-services.com> 4.3.0-1
changelog:
  - Remove now useless files (daniel@firewall-services.com)
  - Update to 4.3.0 (daniel@firewall-services.com)
  - Switch to GitLfsBuilder (daniel@firewall-services.com)


author: Daniel Berteaud <daniel@firewall-services.com> 0.5.5-1
changelog:
  - Update sources to 0.5.5 (daniel@firewall-services.com)
  - Update tito config to use GitLfsBuilder (daniel@firewall-services.com)
  - Track sources with git lfs (daniel@firewall-services.com)


author: Daniel Berteaud <daniel@firewall-services.com> - 0.3.0.20160914.gitcaeed7d-3
changelog:
  - Fix warning when installing dehydrated without upgrading from letsencrypt.sh
  - Update the default hook to use dehydrated_hooks


author: Daniel Berteaud <daniel@firewall-services.com> - 0.3.1.20170119.gitb36d638-1
changelog:
  - Set context to cert_t so it isn't changed to cron_var_lib_t when exec via cron
  - Update to git b36d638


author: Daniel Berteaud <daniel@firewall-services.com> 0.6.2-11
changelog:
  - No reason to restrict read access to the challenge dir And now it can work
    with nginx too (daniel@firewall-services.com)


author: Daniel Berteaud <daniel@firewall-services.com> 0.6.5-0.beta1
changelog:
  - Update to 0.6.5 (daniel@firewall-services.com)
  - Switch to LFS to track tarballs (daniel@firewall-services.com)


author: Daniel Berteaud <daniel@firewall-services.com> - 20140029c-1
changelog:
  - Bump for 2014-09-29c
  - Update odt
  - Update dw2pdf
  - Update nspage
  - Update changes
  - Update todo
  - Update ckgedit
  - Update edittable


author: Daniel Berteaud <daniel@firewall-services.com> - 20140029d-1
changelog:
  - Bump for 2014-09-29d
  - Update changes
  - Update edittable
  - Update encryptedpassword
  - Update loglog
  - Update odt


author: Daniel Berteaud <daniel@firewall-services.com> - 20150810a-1
changelog:
  - Bump for 2015-08-10a
  - Update odt
  - Update dw2pdf
  - Update hidden
  - Update encryptedpassword
  - Update nspage
  - Update ckgedit
  - Update edittable
  - Update sortablejs
  - Update howhard
  - Remove useless dokuwiki_export template


author: Daniel Berteaud <daniel@firewall-services.com> - 20160626-1
changelog:
  - Bump for 2016-06-26
  - Update changes
  - Update ckgedit
  - Update dw2pdf
  - Update edittable
  - Update hidden
  - Update howhard
  - Update loglog
  - Update nspages
  - Update odt
  - Update pagelist
  - Update pagemove
  - Update tag
  - Update todo


author: Daniel Berteaud <daniel@firewall-services.com> - 20160626a-2
changelog:
  - Fix odt export when notes are used
    See https://github.com/LarsGit223/dokuwiki-plugin-odt/issues/144


author: Daniel Berteaud <daniel@firewall-services.com> - 20170219a-1
changelog:
  - Bump for 2017-02-19a
  - Update note
  - Update odt
  - Update dw2pdf
  - Update color
  - Update hidden
  - Update encryptedpasswords
  - Update tag
  - Update pagelist
  - Update changes
  - Update loglog
  - Update todo
  - Update ckgedit
  - Update edittable
  - Update sortablejs
  - Update howhard


author: Daniel Berteaud <daniel@firewall-services.com> - 20170219c-1
changelog:
  - Bump for 2017-02-19c
  - Update ckgedit
  - Update hidden
  - Update tag
  - Update pagelist
  - Update loglog
  - Update edittable
  - Update odt
  - Update nspages
  - Update changes
  - Update dw2pdf


author: Daniel Berteaud <daniel@firewall-services.com> - 20170219d-1
changelog:
  - Bump for 2017-02-19d
  - Update ckgedit
  - Update hidden
  - Update tag
  - Update pagelist
  - Update loglog
  - Update edittable
  - Update odt
  - Update nspages
  - Update changes
  - Update dw2pdf


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.27-1
changelog:
  - Fixed crash in auth process when auth-policy was configured and
    authentication was aborted/failed without a username set.
  - director: If two users had different tags but the same hash,
    the users may have been redirected to the wrong tag's hosts.
  - Index files may have been thought incorrectly lost, causing
    "Missing middle file seq=.." to be logged and index rebuild.
    This happened more easily with IMAP hibernation enabled.
  - Various fixes to restoring state correctly in un-hibernation.
  - dovecot.index files were commonly 4 bytes per email too large. This
    is because 3 bytes per email were being wasted that could have been
    used for IMAP keywords.
  - Various fixes to handle dovecot.list.index corruption better.
  - lib-fts: Fixed assert-crash in address tokenizer with specific input.
  - Fixed assert-crash in HTML to text parsing with specific input
    (e.g. for FTS indexing or snippet generation)
  - doveadm sync -1: Fixed handling mailbox GUID conflicts.
  - sdbox, mdbox: Perform full index rebuild if corruption is detected
    inside lib-index, which runs index fsck.
  - quota: Don't skip quota checks when moving mails between different
    quota roots.
  - search: Multiple sequence sets or UID sets in search parameters
    weren't handled correctly. They were incorrectly merged together.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.28-1
changelog:
  - dovecot updated to 2.2.28, pigeonhole to 0.4.17
  - auth: Support OAUTHBEARER and XOAUTH2 mechanisms. Also support them
    in lib-dsasl for client side.
  - imap: SEARCH/SORT may have assert-crashed in
    client_check_command_hangs
  - imap: FETCH X-MAILBOX may have assert-crashed in virtual mailboxes.
  - search: Using NOT n:* or NOT UID n:* wasn't handled correctly
  - fts: fts_autoindex_exclude = \Special-use caused crashes
  - doveadm-server: Fix leaks and other problems when process is reused
    for multiple requests (service_count != 1)
  - sdbox: Fix assert-crash on mailbox create race
  - lda/lmtp: deliver_log_format values weren't entirely correct if Sieve
    was used. especially %{storage_id} was broken.
  - imapsieve plugin: Fixed assert failure occurring when used with virtual
    mailboxes.
  - doveadm sieve plugin: Fixed crash when setting Sieve script via attribute's
    string value.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.29-1
changelog:
  - dovecot updated to 2.2.29
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers, too much
    data was added to auth cache. This could have resulted in wrong
    replies when using multiple passdbs/userdbs.
  - auth: passdb { skip & mechanisms } were ignored for the first passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't always
    synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands via
    doveadm-server. Almost all errors used exit code 75 (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working correctly.
  - doveadm director status <user>: "Initial config" was always empty
  - imapc: Various reconnection fixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.29.1-1
changelog:
  - dovecot updated to 2.2.29.1
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - pigeonhole updated to 0.4.18
  - imapsieve plugin: Implemented the copy_source_after rule action. When this
    is enabled for a mailbox rule, the specified Sieve script is executed for
    the message in the source mailbox during a "COPY" event. This happens only
    after the Sieve script that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  - imapsieve plugin: Added non-standard Sieve environment items for the source
    and destination mailbox.
  - multiscript: The execution of the discard script had an implicit "keep",
    rather than an implicit "discard".


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.30.1-1
changelog:
  - dovecot updated to 2.2.30.1
  - More fixes to automatically fix corruption in dovecot.list.index
  - dsync-server: Fix support for dsync_features=empty-header-workaround
  - imapc: Various bugfixes, including infinite loops on some errors
  - IMAP NOTIFY wasn't working for non-INBOX if IMAP client hadn't
    enabled modseq tracking via CONDSTORE/QRESYNC.
  - fts-lucene: Fix it to work again with mbox format
  - Some internal error messages may have contained garbage in v2.2.29
  - mail-crypt: Re-encrypt when copying/moving mails and per-mailbox keys
    are used. Otherwise the copied mails can't be opened.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.30.2-1
changelog:
  - dovecot updated to 2.2.30.2
  - auth: Multiple failed authentications within short time caused crashes
  - push-notification: OX driver crashed at deinit


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.32-1
changelog:
  - dovecot updated to 2.2.32
  - Modseq tracking didn't always work correctly. This could have caused
    imap unhibernation to fail or IMAP QRESYNC/CONDSTORE extensions to
    not work perfectly.
  - mdbox: "Inconsistency in map index" wasn't fixed automatically
  - dict-ldap: %variable values used in the LDAP filter weren't escaped.
  - quota=count: quota_warning = -storage=.. was never executed (try #2).
  - imapc: >= 32 kB mail bodies were supposed to be cached for subsequent
    FETCHes, but weren't.
  - quota-status service didn't support recipient_delimiter
  - acl: Don't access dovecot-acl-list files with acl_globals_only=yes
  - mail_location: If INDEX dir is set, mailbox deletion deletes its
    childrens' indexes. 
  - director: v2.2.31 caused rapid reconnection loops to directors
    that were down.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.32-2
changelog:
  - pigeonhole updated to 0.4.20
  - Made the retention period for redirect duplicate identifiers
    configurable. Changed the default retention period from 24 to 12 hours.
  - sieve-filter: Fixed memory leak: forgot to clean up script binary at
    end of execution
  - managesieve-login: Fixed handling of AUTHENTICATE command. A second
    authenticate command would be parsed wrong.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.1-1
changelog:
  - dovecot updated to 2.2.33.1, pigeonhole updated to 
  - Added %{if}, see https://wiki2.dovecot.org/Variables#Conditionals
  - sdbox: Mails were always opened when expunging, unless
    mail_attachment_fs was explicitly set to empty.
  - lmtp/doveadm proxy: hostip passdb field was ignored, which caused
    unnecessary DNS lookups if host field wasn't an IP
  - lmtp proxy: Fix crash when receiving unexpected reply in RCPT TO
  - quota_clone: Update also when quota is unlimited (broken in v2.2.31)
  - mbox, zlib: Fix assert-crash when accessing compressed mbox
  - doveadm director kick -f parameter didn't work
  - doveadm director flush <host> resulted flushing all hosts, if <host>
    wasn't an IP address.
  - director: Various fixes to handling backend/director changes at
     abnormal times, especially while ring was unsynced.
  - director: Use less CPU in imap-login processes when moving/kicking
    many users.
  - lmtp: Session IDs were duplicated/confusing with multiple RCPT TOs
    when lmtp_rcpt_check_quota=yes
  - LDA Sieve plugin: Fixed sequential execution of LDAP-based scripts. A
    missing LDAP-based script could cause the script sequence to exit earlier.
  - sieve-filter: Removed the (now) duplicate utf8 to mutf7 mailbox name
    conversion. This caused problems with mailbox names containing UTF-8
    characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.33.2-1
changelog:
  - dovecot updated to 2.2.33.2
  - doveadm: Fix crash in proxying (or dsync replication) if remote is
    running older than v2.2.33
  - auth: Fix memory leak in %{ldap_dn}
  - dict-sql: Fix data types to work correctly with Cassandra


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.2.34-1
changelog:
  - dovecot updated to 2.2.34, pigeonhole updated to 0.4.22
  - fixes CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be reached
    and the process restarted. This happens only if Dovecot config has
    local_name { } or local { } configuration blocks and attacker uses
    randomly generated SNI servernames.
  - fixes CVE-2017-14461: Parsing invalid email addresses may cause a crash or
    leak memory contents to attacker. For example, these memory contents
    might contain parts of an email from another user if the same imap
    process is reused for multiple users.
  - fixes CVE-2017-15132: Aborted SASL authentication leaks memory in login
    process.


author: Marianne Lombard <marianne@tuxette.fr> - 2.3.6
changelog:
  - new version, reintroduction in fedora and epel
  - cleanup of the spec (removing sysVinit stuff, old BuildRequires, old releases stuff)
  - adding sub-packages for task-* (using Guillaume Rousse OBS spec as model https://build.opensuse.org/package/view_file/home:guillomovitch/fusioninventory-agent/fusioninventory-agent.spec)
  - task-wakeonlan is excluded (dependancy issue)


author: Daniel Berteaud <daniel@firewall-services.com> 0.9.8-1
changelog:
  - update to 0.9.8 (nemesis-alpha-8)
  - Allow access to /etc/pki/tls/certs
  - Don't move VERSION in the doc folder


author: Daniel Berteaud <daniel@firewall-services.com> - 0.0.20160127.git79ff846-2
changelog:
  - Rename httpd.sh hook to 10httpd.sh
  - Provide le_revoke.sh script to revoke old certificates
  - Add timestamp to logs using awk


author: Wolfgang Ulbrich <chat-to-me@raveit.de> - 1.6.2-2
changelog:
  - disable python bindings
  - add --disable-schemas-compile configure flag
  - use modern make install macro
  - fix unused-direct-shlib-dependency
  - add LGPLv2+ license
  - move huge data in /usr/share in -data subpackage


author: Wolfgang Ulbrich <chat-to-me@raveit.de> - 1.7.90-1
changelog:
  - update to 1.7.90 release
  - use --with-gnome --all-name for find locale
  - enable python bindings, add BR pygtk2-devel


author: Gavin Carr <gavin@openfusion.com.au> 2.0.0rc3-1
changelog:
  - Set explicit servername in t/TESTS to fix general test failures.
  - Add explicit Apache 2.2 support.
  - Add separate mod_auth_tkt-cgi package containing /var/www/auth CGI scripts.
  - Factor out cgi config settings into AuthTktConfig.pm.
  - Bump to version 2.0.0rc3.


author: Gavin Carr <gavin@openfusion.com.au> 2.0.99b1
changelog:
  - Bump version number to 2.0.99b1, first beta release of 2.1 branch.
  - Add support for SHA256 digests.
  - Add TKTAuthSecretOld support.


author: Gavin Carr <gavin@openfusion.com.au> 2.0.99b2
changelog:
  - Bump version number to 2.0.99b2, second beta release of 2.1 branch.
  - Fix bug with partial-cookie-names incorrectly matching.


author: Daniel Berteaud <daniel@firewall-services.com> 1.15.10-1
changelog:
  - Remove 1.15.9 tarball (daniel@firewall-services.com)
  - Update to 1.15.10 (daniel@firewall-services.com)


author: Daniel Berteaud <daniel@firewall-services.com> 1.18.0-0.beta1
changelog:
  - Update to 1.18.0 (daniel@firewall-services.com)
  - Update mod lua to 0.10.16rc5 (daniel@firewall-services.com)
  - Update mod_security to 1.0.1 (daniel@firewall-services.com)
  - Remove naxsi support (daniel@firewall-services.com)


author: Daniel Berteaud <daniel@firewall-services.com> 1.18.0-0.beta2
changelog:
  - Declare LUAJIT_LIB and LUAJIT_INC (daniel@firewall-services.com)
  - Automatic commit of package [nginx] minor release [1.18.0-0.beta1].
    (daniel@firewall-services.com)


author: Carl Thompson <fedora@red-dragon.com> 1:1.5-2
changelog:
  - added check section to spec
  - removed BUILD_ROOT check in install and clean
  - included the README and Changes files to the installation
  - re enabled the internal dependancy checks


author: Carl Thompson <fedora@red-dragon.com> 1.5-3
changelog:
  - update files section for cleaner docs list
  - removed epoch
  - added Crypt as a directory owned by package


author: Carl Thompson <fedora@red-dragon.com> 1.7-1
changelog:
  - upgraded to version 1.7
  - added patch to remove AutoMake functions of perl so its
  - dependant on packages
  - updated spec to work with fedora and epel builds
  - updated spec to deal with perl module install paths


author: Daniel Berteaud <daniel@firewall-services.com> - 0.17-1
changelog:
  - Update to 0.17
  - Fix volume enumération (see https://rt.cpan.org/Public/Bug/Display.html?id=94991)
  - Report data and metadata allocation for thin pools


author: stephane de Labrusse <stephdl@de-labrusse.fr> 0.84-11.sme
changelog:
  - Modify whitelist_soft transaction to interact with dnsbl filter [SME: 8747]
  - by John Crisp <jcrisp@safeandsoundit.co.uk>


author: Daniel Berteaud <daniel@firewall-services.com> 0.84-12.sme
changelog:
  - Revert forcing TLSv1 patch as it breaks some inbound delivery [SME: 8851]
  - Revert whitelist_soft dnsbl as it hasn't been verified yet and we need to
    push the fix for TLSv1 [SME: 8747]


author: stephane de Labrusse <stephdl@de-labrusse.fr> 0.84-15.sme
changelog:
  - Modify whitelist_soft transaction to interact with dnsbl filter [SME: 8747]
  - by John Crisp <jcrisp@safeandsoundit.co.uk>
  - Added qpsmtpd-0.84-make-dnsbl-more-whitelist_soft-aware.patch


author: Daniel Berteaud <daniel@firewall-services.com> 0.84-18.sme
changelog:
  - Allow reading SSL_version from the tls_protocols config file (and turn
    TLSv1 back on by default) [SME: 9162]


author: Daniel Berteaud <daniel@firewall-services.com> 3.0.9.13-1
changelog:
  - Update tito config to match new lib path (daniel@firewall-services.com)
  - Remove old archives (daniel@firewall-services.com)
  - Update to 3.0.9.13 (daniel@firewall-services.com)
  - Switch to GitLfsBuilder (daniel@firewall-services.com)


author: Andreas Schneider <asn@redhat.com> - 4.8.3-1
changelog:
  - related: #1558560 - Rebase to Samba version 4.8.3
  - resolves: #1579398 - Add winbind localauth krb5 plugin


author: Andreas Schneider <asn@redhat.com> - 4.8.3-4
changelog:
  - resolves: #1614132 - Fix delete-on-close after smb2_find
  - resolves: #1614265 - Fix CVE-2018-1139
  - resolves: #1614269 - Fix CVE-2018-10858


author: Andreas Schneider <asn@redhat.com> - 4.9.1-1
changelog:
  - resolves: #1649434 - Update to version 4.9.1
  - resolves: #1648852 - Fix out of bound array access in ctdb
  - resolves: #1647960 - Fix segfault in the debug system with hardended build
  - resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
  - resolves: #1650452 - Add smbc_setOptionProtocols()
  - resolves: #1659513 - Fix testparm/pdbedit crash
  - resolves: #1529301 - Added new 'net ads spn' command
  - resolves: #1595277 - Fix manpage for 'net ads lookup'
  - resolves: #1600274 - Fix vfs_audit log which does not show full path names
  - resolves: #1623140 - Fix handling the 'disable netbios' option
  - resolves: #1624227 - Connect to spoolss with the correct version information
  - resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
  - resolves: #1579401 - Implement 'net ads leave --keep-account'
  - resolves: #1624227 - Fix spoolss client operations against newer Windows
                         versions
  - resolves: #1656405 - Fix looking up local system accounts


author: Andreas Schneider <asn@redhat.com> - 4.9.1-2
changelog:
  - resolves: #1674403 - Fix panic when setting 'force group' on a share with
                         an active connections
  - resolves: #1670720 - Fix installation of samba-python
  - resolves: #1669476 - Fix user lookup via UPN


author: Andreas Schneider <asn@redhat.com> - 4.9.1-3
changelog:
  - resolves: #1479451 - Fix 'net' command auth with Kerberos
  - resolves: #1686158 - Fix printing with CUPS
  - resolves: #1662408 - Fix username/password printing with CUPS


author: Andreas Schneider <asn@redhat.com> - 4.9.1-4
changelog:
  - resolves: #1690222 - Fix --max-protocol documentation of smbclient
  - resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
  - resolves: #1696524 - Fix CVE-2019-3880


author: Daniel Berteaud <daniel@firewall-services.com> 6.16-1
changelog:
  - Clean changelog (daniel@firewall-services.com)
  - Remove README from /usr/share/squidclamav (daniel@firewall-services.com)
  - Include cgi (daniel@firewall-services.com)
  - Don't try to include non existing lib (daniel@firewall-services.com)


author: Daniel Berteaud <daniel@firewall-services.com> 7.1-0.beta1
changelog:
  - Update to 7.1 (daniel@firewall-services.com)
  - Update tito to use GitLfsBuilder (daniel@firewall-services.com)
  - Track tgz with LFS (daniel@firewall-services.com)


author: Marcus Kool <marcus-dot-kool@urlfilterdb.com> - 1.33.3
changelog:
  Fix: ufdbgclient truncates Squid request lines to 8K which means that very long URLs cannot be filtered
  Fix: ufdbGenTable erroneously warned about URLs inside a comment
  Fix: make ufdbGuard compile on FreeBSD
  Fix: when evaluate-and IPv4/6 is used in a source definition, the source may not matched
  Fix: ufdbguardd did not accept the IPv6 address '::'
  Enhancement: several warnings for IPv4 and IPv6 addresses inside a source were implemented


author: Marcus Kool <marcus-dot-kool@urlfilterdb.com> - 1.33.4
changelog:
  Fix: URLs with very long domainnames may cause a crash if the URL is not in the URL database
  Fix: ufdbguardd did not obey 'continue' inside a source
  Fix: the logfile did not not contain "PASS URL" for all allowed URLs
  Fix: suppress another warning by ufdbGenTable if the -q option is used
  Fix: execuserlist with large arguments cannot be cached
  Fix: ufdbguardd sometimes does not use the correct source for its decision
  Fix: in-addr also matched URLs without an IP address
  Configuration: the option squid-uses-active-bumping was missing in the default configuration file


author: Marcus Kool <marcus-dot-kool@urlfilterdb.com> - 1.33.5
changelog:
  Fix: ufdbguardd may crash during a database refresh
  Fix: empty pass statements in acls may cause a crash.
  Fix: SSH tunnels were detected but access was not blocked
  Fix: sometimes the SSL/TLS certificate was not checked to be signed by a CA
  Fix: skip acls with "pass any" if the source has the continue flag set


author: Daniel Berteaud <daniel@firewall-services.com> 1.33.5-1
changelog:
  - git-annex in
    dani@germaine.lapiole.org:~/big/e-smith/files/users/dani/src/ufdbGuard
    (daniel@firewall-services.com)


author: Daniel Berteaud <daniel@firewall-services.com> 1.33.8-2
changelog:
  - Update to 1.33.8 (daniel@firewall-services.com)
  - Update tito config to use GitLfsBuilder (daniel@firewall-services.com)
  - Track sources with git lfs (daniel@firewall-services.com)


author: Daniel B. <daniel@firewall-services.com> - 0.2.6-1
changelog:
  - Add a --no-offline option
  - Revert 10 tries max to take snapshot
  - Cleanup snapshot and temp files for image based disks


author: Daniel B. <daniel@firewall-services.com> - 0.2.9-1
changelog:
  - Fix when using a relative path for backupdir
  - Fix image based disk support when they are stored on the / filesystem


author: Daniel B. <daniel@firewall-services.com> - 0.2.10-1
changelog:
  - Correctly handle disks list when several VM are backed up in one run
    Patch by Diego Rondini <diego.rondini@kynetics.it>


author: Randy Thompson <randy@heroictek.com> - 1.1-b787d2
changelog:
  - b787d2a2c4b1abc3653bad10aec943b8efcd7aab from git://git.code.sf.net/p/winexe/winexe-waf
  - a6bda1f2bc85779feb9680bc74821da5ccd401c5 from git://git.samba.org/samba.git


author: Zabbix Packager <info@zabbix.com> - 5.2.0-0.1alpha1
changelog:
  - update to 5.2.0alpha1
  - building server and proxy with mysql 8 & postgresql 12 on rhel/centos 7 (ZBX-18221)
  - added various After=postgresql* directives to server & proxy service files (ZBX-17492)


author: Zabbix Packager <info@zabbix.com> - 5.2.0-0.2alpha2
changelog:
  - update to 5.2.0alpha2
  - building only agent, sender & get packages on rhel <= 7
  - creating empty log file for agent2 (ZBX-18243)


author: Zabbix Packager <info@zabbix.com> - 5.2.0-0.3alpha3
changelog:
  - update to 5.2.0alpha3
  - added separate zabbix-web-deps package
  - doing hardened builds on rhel >= 8
  - removed libyaml.patch
  - overriding ExternalScripts & AlertScriptsPath in binaries instead of config files (ZBX-17983)


author: Daniel Berteaud <daniel@firewall-services.com> 0.2.76-1
changelog:
  - Add support for some NVMe temp sensors Found on OVH's Advanced servers for
    example (daniel@firewall-services.com)
  - Fix when running on Debian buster Which fails with RC 25 when using
    File::Spec devnull (daniel@firewall-services.com)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.12.2-1
changelog:
  - update to upstream release 1.12.2
  - Resolves: #1468584 - (CVE-2017-7529) CVE-2017-7529 nginx: Integer
    overflow in nginx range filter module leading to memory disclosure


