# changelog

author: Stuart D. Gathman <stuart@gathman.org> 0.1-3
changelog:
  - Add global acme httpd conf
  - Append intermediate certs, add current lets-encrypt intermediate cert


author: Stuart D. Gathman <stuart@gathman.org> 0.1-5
changelog:
  - sign: Use tmp output to avoid wiping existing cert on error
  - acme_tiny: get intermediate cert from acme protocol


author: Stuart D. Gathman <stuart@gathman.org> 0.1-6
changelog:
  - Python3 fixes for cert-check
  - acme-tiny: Update patch to leave default behavior unchanged
  - make /var/lib/acme readable by all except private


author: Stuart D. Gathman <stuart@gathman.org> 0.1-7
changelog:
  - sign: Actually use the new --chain flag
  - cron: Make days to expiration explicit
  - spec: Set file modes with install
  - acme.conf: mark as config


author: Stuart D. Gathman <stuart@gathman.org> 0.1-8
changelog:
  - Add use_systemd flag to use systemd timer and enable on Fedora and epel7
  - Enable use_python3 flag for Fedora (but not epel7).


author: Stuart D. Gathman <stuart@gathman.org> 0.1-9
changelog:
  - Use %{systemd_requires}
  - Remove unneeded cronie, python dependencies
  - Add acme-tiny.timer to systemd scriptlets
  - Add README-fedora.md
  - acme_tiny: Fix --chain patch for python2.6 (el6)
  - acme_tiny: Suppress traceback on error


author: Stuart D. Gathman <stuart@gathman.org> 0.2-1.20170616gitaf025f5
changelog:
  - BZ#1468045 Update to new upstream version
  - BZ#1409686 Message.getallmatchingheaders() is broken in python3.


author: Stuart D. Gathman <stuart@gathman.org> 0.2-3.20170616gitaf025f5
changelog:
  - BZ#1507333 EL6 missing python-argparse dependency
  - BZ#1515781 Agreement updated.
  - BZ#1409345 Unwritable certs silently skipped


author: Stuart D. Gathman <stuart@gathman.org> 4.1.0-3
changelog:
  - Update README-fedora.md to describe notify.sh
  - Apply selected changes from Marcel Metz <mmetz@adrian-broher.net>:
  - Use openssl x509 -checkend parameter to determine certificate expiration
  - Remove Let's Encrypt intermediate certificate
  - Remove cron job used on non systemd systems


author: Stuart Gathman <stuart@bmsi.com> 1.3-1
changelog:
  - Make newline after UNA optional (SEG terminator can be 1 or 2 chars)
  - Allow unmapping mapped chars
  - Handle fewer than 3 subelements for syntax


author: Stuart Gathman <stuart@bmsi.com> 0.4-1
changelog:
  - Make BMS and SystemData typesafe
  - add InvSfxField with test cases
  - Suppress SystemData FileNotFound complaints on stderr
  - Add ProfitCenter


author: Stuart Gathman <stuart@bmsi.com> 0.8-1
changelog:
  - simplified auto-create support via Dataset.create()
  - delay keyfield count check in Relate to prevent exception on open
  - call activeChanged when changing indexName
  - ensure DataListeners added only once


author: Stuart Gathman <stuart@bmsi.com> 0.9-1
changelog:
  - sort method on MemData
  - getText(byte[],Field) 
  - Test for and fix edit after insert when no current record bug.
  - 2038 rollover flag in TimeStampField


author: Stuart Gathman <stuart@bmsi.com> 1.3-1
changelog:
  - Share database connection between Query instances
  - Disable broken deleteAll optimization
  - Fix SQL insertrow losing data on error
  - Fix SQL concurrent inserts


author: Stuart Gathman <stuart@bmsi.com> 0.6-1
changelog:
  - Rename AcctSum to CCLdgrAcctSum and remove CCLdgrAcctSummary (dup)
  - Add rebuild option on Check
  - Change search order for dynamic ledger summary selection
  - Alpha version of GLLdgrIq and GLPftLossIQ


author: Stuart Gathman <stuart@bmsi.com> 0.7-1
changelog:
  - Fix CCScope.getRange() and add test cases.
  - add standard scopes resource and add when creating SCOPE file
  - more command line tools for CCScope
  - department restriction by user for RGPrint


author: Stuart Gathman <stuart@gathman.org> 0.8-1
changelog:
  - New CCScope cli features
  - CuaptSS - sales analysis spreadsheet (dmm)
  - improved test cases
  - build in mock


author: Stuart Gathman <stuart@bmsi.com> 0.3.6-1
changelog:
  - fix WebForm not ending with newline, add TestCases.
  - add authorization check for prog= with WEB.USER.PROGS
  - add getUserMenu() called for null menu: "menu/"


author: Stuart Gathman <stuart@bmsi.com> 0.3.7-1
changelog:
  - Define option names in WEB.PROGS, use for prog= and building menus.
  - Improve menu.html to look like existing manual menus
  - Remove prog and add seq field to WEB.USER.PROGS
  - Fix infinite recursion when redefining paint in a WebMenu subclass


author: Stuart Gathman <stuart@bmsi.com> 0.3.10-1
changelog:
  - Fix disappearing menus.
  - Alt cust support
  - WD: magic webdoc prefix on menus
  - WebCheckbox auto submit
  - close=all works without domain


author: Stuart Gathman <stuart@bmsi.com> 0.6-1
changelog:
  - Make LineWrite.writeLine() extendable.
  - allow IOException from LineReader.reset()
  - IsamFile.release()


author: Stuart Gathman <stuart@gathman.org> 1.0.2-1
changelog:
  - Move native lib to %{_libdir}/%{name}
  - https://fedoraproject.org/wiki/Packaging:Java#Packaging_JAR_files_that_use_JNI


author: Stuart Gathman <stuart@bmsi.com> 2.11.3-1
changelog:
  - libbtas: detect and recover server restart
  - Cisam: enable auto-repair of dupkey on secondary index.


author: Stuart Gathman <stuart@bmsi.com> 2.11.3-2
changelog:
  - libbtas: improve server restart recovery
  - btserve: allow linking to root dir again
  - drop AIX support in spec


author: Stuart Gathman <stuart@bmsi.com> 2.11.4-1
changelog:
  - Cisam: support isbtasinfo
  - Cisam: skip bad index records on read (see testBadIndex in DatasetTest.java)


author: Stuart Gathman <stuart@bmsi.com> 2.11.5-1
changelog:
  - support CREATE TABLE PRIMARY KEY and CREATE INDEX in sql
  - Make btstart and backup use /bms/etc/btfstab


author: Stuart Gathman <stuart@bmsi.com> 2.11.6-1
changelog:
  - LFS support for btsave,btrest,btddir.
  - support nflds and nkflds in sql directory tables
  - fix CSV output bugs in sql, issue817


author: Stuart D. Gathman <stuart@gathman.org> 17.3-3
changelog:
  - Add node_modules to tools
  - Add #pragmas to ignore bogus warnings from gcc6
  - Fix shift of signed int


author: Stuart D. Gathman <stuart@gathman.org> 17.3-5
changelog:
  - Add use_embedded option
  - Reorganize with use_systemd, use_upstart
  - Set __restorecon only if not defined
  - Use install instead of cp to set file modes
  - Move randombytes,publictoip6 and /usr/lib/cjdns to main package
  - Fix bad #! lines in contrib/python
  - Patch util/Security.c to call setgroups(0,...) before setuid().


author: Stuart D. Gathman <stuart@gathman.org> 17.3-6
changelog:
  - Man pages
  - Move /usr/lib/cjdns to /usr/libexec/cjdns
  - Move all C tools to main package, mark (nodejs) tools noarch


author: Stuart D. Gathman <stuart@gathman.org> 17.3-7
changelog:
  - Add explicit systemd dependency
  - Add selinux-policy-targeted dependency
  - Add version to main package dependencies
  - Remove use of #!/usr/bin/env in nodejs tools
  - Change all top level define to global
  - Remove workaround for missing -fPIC on libnacl for X86_64 on f22.


author: Stuart D. Gathman <stuart@gathman.org> 17.3-8
changelog:
  - Add release to main package dependencies
  - More man pages
  - Restore missing cjdns-resume.service
  - Add empty config to be owned by package


author: Stuart D. Gathman <stuart@gathman.org> 17.3-9
changelog:
  - Strip /8 from IPs printed by cjdns-online
  - Add GPL3+ to cjdns-online
  - ghost /etc/cjdroute.conf
  - Include _isa formula in subpackage requires.


author: Stuart D. Gathman <stuart@gathman.org> 17.3-11
changelog:
  - Patch some bugs in traceroute and symlink to /usr/bin/cjdns-traceroute
  - man page for cjdns-traceroute, sessionStats
  - switch to libsodium instead of nacl


author: Stuart D. Gathman <stuart@gathman.org> 17.3-12
changelog:
  - Run modprobe only if /dev/tun not present - fixes running on openVZ
  - Select nacl/libsodium with a macro
  - Switch back to nacl for platforms that support it
  - man page for peerStats


author: Stuart D. Gathman <stuart@gathman.org> 16.3-2
changelog:
  - move graphing tools to graph subpackage: networkx has a lot of dependencies.
  - use embedded nacl only for i686 (which compiles it with -fPIC)


author: Stuart D. Gathman <stuart@gathman.org> 17.3-5
changelog:
  - Add use_embedded option
  - Reorganize with use_systemd, use_upstart
  - Set __restorecon only if not defined
  - Use install instead of cp to set file modes
  - Move randombytes,publictoip6 and /usr/lib64/cjdns to main package
  - Fix bad #! lines in contrib/python
  - Patch util/Security.c to call setgroups(0,...) before setuid().


author: Stuart D. Gathman <stuart@gathman.org> 17.3-9
changelog:
  - Strip /8 from IPs printed by cjdns-online
  - ghost /etc/cjdroute.conf
  - Include _isa formula in subpackage requires.


author: Stuart D. Gathman <stuart@gathman.org> 17.3-13
changelog:
  - man page for cjdnslog
  - Fix running on Fedora as well as openVZ. :-P
  - Make cjdns exclusive to nodejs_arches. Rafael Fonseca <rdossant@redhat.com>


author: Stuart D. Gathman <stuart@gathman.org> 17.4-1
changelog:
  - Update to 17.4 upstream release
  - Remove cap3 patch, as it is incorporated upstream
  - Remove Constant.js patch, as it is incorporated upstream


author: Stuart D. Gathman <stuart@gathman.org> 17.4-3
changelog:
  - Remove cjdns-resume.service patch, incorporated upstream
  - Add --interface option to cjdns-online.sh


author: Stuart D. Gathman <stuart@gathman.org> 18-2
changelog:
  - Remove Sign.c which uses a private API and isn't needed until supernodes.
  - Use libsodium by default: seems best performance of dynamic libraries


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 19.1-7
changelog:
  - Python 2 binary package renamed to python2-cjdns
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Iryna Shcherbina <ishcherb@redhat.com> - 20.1-3
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Stuart Gathman <stuart@gathman.org> - 20.2-5
changelog:
  - Install cjdnsadmin python module in site-packages
  - Work around missing python2-networkx Provides in python-networkx bz#1647987
  - Fix deprecated Buffer ctor in nodejs tools except on el6


author: Stuart Gathman <stuart@gathman.org> - 20.3-5
changelog:
  - Remove deprecated sysctl() call in getUUID (read from /proc/.../random/uuid)
  - Patch a local copy of ronn to stop calling util.puts/util.debug


author: Stuart Gathman <stuart@gathman.org> 0.1.2-1
changelog:
  - SFTP: use mkstemp for downloaded files, like pftp
  - SFTP: don't print stat for unconfirmed uploads


author: Stuart Gathman <stuart@bmsi.com> 1.0-4
changelog:
  - Remove allocj, webdocj, artimej - which are provided in other packages
  - move /bms/edx/lib/user to edx-devel


author: Mat Booth <mat.booth@redhat.com> - 2.7.1-0.2.b3
changelog:
  - Use upstream's launcher script and provide a more complete jython_home directory
    to allow virtualenv to work with jython, rhbz#1373279
  - Also enable unit test suite


author: Stuart Gathman <stuart@bmsi.com> 1.1.7-1
changelog:
  - Support 48-bit millisecond timestamp
  - Use absolute path for /bms/bin/perror to avoid conflict with mysql perror


author: Stuart Gathman <stuart@bmsi.com> 0.8.17-1
changelog:
  - report keysize of DKIM signatures.
  - simple DKIM milter as another sample
  - basic DKIM signing support
  - Implement DKIM policy in access file.  
  - Parse Authentication-Results header to get dkim result for feedback mail.  
  - Let DKIM confirm domain for missing or neutral SPF result.


author: Stuart Gathman <stuart@bmsi.com> 0.8.18-1
changelog:
  - Test cases and bug fixes for spfmilter
  - Configure untrapped_exception policy for spfmilter
  - Reject numeric HELO for spfmilter
  - from_words from file feature for bms milter
  - ban mailbox, not entire domain, for configured email_providers
  - Use pysqlite (included in python) for greylist database
  - banned_domains and ips moved back to logdir for bms milter
  - straighten out datadir vs logdir for bms milter


author: Stuart Gathman <stuart@gathman.org> 0.8.18-3
changelog:
  - Use daemonize instead of start.sh, which is gone from pymilter
  - Fix typo in maskip logic for greylisting


author: Jaroslav Škarvada <jskarvad@redhat.com> - 20110221-11
changelog:
  - Fixed sed optflags patching to work with new distro CFLAGS
  - Rebuilt with new distro CFLAGS (PIC)
  - Fixed typo in dist-flags patch
  - Limit length of ABI string (by abi-len-lmit patch)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 20110221-14
changelog:
  - Fixed shared library to export symbols from all objects
  - Explicitly set -fPIC and not relying on default CFLAGS
    Related: rhbz#1276066


author: Stuart D. Gathman <stuart@gathman.org> 2.3.0-5
changelog:
  - Add bundle option to allow installing binary rpms on EL7
  - Move openas2-server config to /etc/openas2


author: Stuart D. Gathman <stuart@gathman.org> 2.3.0-5
changelog:
  - Add bundle option to allow installing binary rpms on EL7
  - Move openas2-server configs to /etc/openas2


author: Stuart D. Gathman <stuart@gathman.org> 2.3.1-1
changelog:
  - Update to 2.3.1
  - move data to /var/spool/openas2
  - add flag to enable tests at build time
  - add flag to enable SentryLogger plugin


author: Stuart D. Gathman <stuart@gathman.org> 2.6.1-3
changelog:
  - Some changes recommended by mizdebsk from #fedora-java
  - Use %bcond_with
  - Remove /var/run/openas2, Provides
  - Add logrotate to delete old log files


author: Stuart D. Gathman <stuart@gathman.org> 2.6.1-6
changelog:
  - Set db_directory to /var/lib/openas2/db in sample config
  - Include hsqldb patches in SRPM even when not active
  - Use __requires_exclude instead of bogus Provides for bundling


author: Stuart D. Gathman <stuart@gathman.org> 2.6.2-2
changelog:
  - Move server to base package and core libs to lib subpackage.
  - Explicit daemon-reload for bundled (el7).


author: Stuart Gathman <stuart@bmsi.com> 1.1.8-1
changelog:
  - Build with jdk-1.5.0_16
  - Add IPC.euid, IPC.egid, Stat.umask()
  - Support IPC_PRIVATE and IPC_CREAT with SharedMem


author: Stuart Gathman <stuart@bmsi.com> 1.3.2-1
changelog:
  - Flag spams deleted from quarantine without discarding
  - Detect messages added to quarantine after it was displayed


author: Stuart Gathman <stuart@gathman.org> 0.601-1
changelog:
  - When stringifying RFC 5451 property values (pvalue), format them as quoted-
    strings if they contain spaces or special characters (and are not e-mail
    addresses). E.g., IPv6 addresses in policy.iprev properties must be
    double-quoted.
  - Fix broken references to quoted_string variable in authres.core.
    AuthenticationResultsHeader._parse_pvalue method. (Closes: LP #1165978)
  - Fix erroneous reference to ArgumentError exception to refer to ValueError
    instead. When does the Ruby compatiblity layer for Python come out?
  - Added additional tests/examples in authres/tests


author: Stuart Gathman <stuart@bmsi.com> 0.4.1-1
changelog:
  - fix except clauses for python3
  - Add test case for <https://launchpad.net/bugs/587783>
  - add back dkim.Relaxed and dkim.Simple constants


author: Stuart Gathman <stuart@bmsi.com> 0.5-1
changelog:
  - raise KeyFormatError when missing required key parts in DNS
  - test fail on extra headers in message
  - test case for handling of multiple from
  - do not sign all headers by default
  - option to verify signatures other than first


author: Stuart Gathman <stuart@bmsi.com> 0.5.1-1
changelog:
  - performance patch from https://launchpad.net/~petri Petri Lehtinen
  - save parsed signatures in DKIM object
  - do not require DNS/dnspython for signing


author: Stuart Gathman <stuart@bmsi.com> 0.5.2-1
changelog:
  - Fix sha1 hash, Bug #969206
  - Fix NoAnswer exception using dnspython
  - Fix typos reporting ValidationError and DKIMException
  - Change default canonicalization to relaxed/simple to work around Bug #939128


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0-8
changelog:
  - Python 2 binary package renamed to python2-pymilter
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 1.0-13
changelog:
  - Update Python macros to new packaging standards
    (See https://fedoraproject.org/wiki/Changes/Move_usr_bin_python_into_separate_package)


author: Stuart Gathman <stuart@gathman.org> - 1.0.5-4
changelog:
  - Fix deprecation warnings, make PY_SSIZE_T_CLEAN
  - message_from_binary_file now has a required argument `policy`
  - Fix some test cases and bugs found on py3 bmsmilter install


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.0.12-9
changelog:
  - Python2 binary package has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Stuart Gathman <stuart@bmsi.com> 1.0-1
changelog:
  - Foundation for python milter envfrom rewriting (in progress)
  - Python 2.6
  - Depend on pymilter for dirs, even though we don't
    really need it for anything else until envfrom rewriting is done.


author: Stuart Gathman <stuart@gathman.org> 1.0.2-1
changelog:
  - Fix daemon to run in python2
  - Move daemons to /usr/libexec/milter so they get bin_t selinux label


author: Stuart Gathman <stuart@bmsi.com> 0.9.3-1
changelog:
  - Handle source route in Milter.utils.parse_addr()
  - Fix default arg in chgfrom.
  - Disable negotiate callback for libmilter < 8.14.3 (1,0,1)


author: Stuart Gathman <stuart@bmsi.com> 0.9.5-1
changelog:
  - Print milter.error for invalid callback return type.
    (Since stacktrace is empty, the TypeError exception is confusing.)
  - Fix milter-template.py
  - Tweak Milter.utils.addr2bin and Milter.dynip to handle IP6


author: Stuart Gathman <stuart@bmsi.com> 0.9.7-1
changelog:
  - Raise RuntimeError when result != CONTINUE for @noreply and @nocallback
  - Remove redundant table in miltermodule
  - Fix CNAME chain duplicating TXT records in Milter.dns (from pyspf).


author: Stuart Gathman <stuart@bmsi.com> 0.9.8-1
changelog:
  - Add Milter.test module for unit testing milters.
  - Fix typo that prevented setsymlist from being active.
  - Change untrapped exception message to:
  - "pymilter: untrapped exception in milter app"


author: Stuart Gathman <stuart@gathman.org> 1.0-1
changelog:
  - Allow ACCEPT as untrapped exception policy
  - Optional dir for getaddrset and getaddrdict in Milter.config
  - Show registered milter name in untrapped exception message.
  - Include selinux subpackage
  - Provide Milter.greylist export and Milter.greylist import to migrate data


author: Stuart Gathman <stuart@gathman.org> 1.0-2
changelog:
  - Remove start.sh to track EPEL repository, suggest daemonize as replacement
  - Selinux subpackage should not care about pymilter version


author: Stuart D. Gathman <stuart@gathman.org> 1.2.1-4
changelog:
  - More changes from package review:
  - Keep upstream introducer name and symlink to it
  - Specify an additional directory level after sitelib in files


author: Stuart D. Gathman <stuart@gathman.org> 1.2.12-2
changelog:
  - Fix broken rhel condition typo
  - Fix unused (except in devel) env python shebangs to keep rpmlint happy


author: Stuart Gathman <stuart@bmsi.com> 1.4.20-1
changelog:
  - RPM release for CentOS-6.2
    Features:
  - Experimental support for the new Chameleon templating engine.
    We now have two configurable templating engines, the old Zope TAL
    templates (called zopetal in the config) and the new Chameleon (called
    chameleon in the config). A new config-option "template_engine" under
    [main] can take these config-options, the default is zopetal.
    Thanks to Cheer Xiao for the idea of making this configurable *and*
    for the actual implementation! (Ralf)
    WARNING: Chameleon support is highly experimental and *not* recommended for
    production use. It has known performance issues and i18n is not yet
    functioning. It's still under active development. Only use this feature if
    you want to experiment with Chameleon and/or help with Roundup
    developement. If you found a bug in Chameleon support, please report after
    testing against latest Roundup source from the Mercurial repository.
  - issue2550678: Allow pagesize=-1 which returns all results.
    Suggested and implemented by John Kristensen. 
    Tested by Satchidanand Haridas. (Bernhard)
  - Allow to turn off translation of generated html options in menu method
    of LinkHTMLProperty and MultilinkHTMLProperty -- default is
    translation as it used to be (Ralf)
  - Sending of OpenPGP encrypted mail to all users or selected users (via
    roles) is now working. (Ralf)
  - Add config-option "nosy" to messages_to_author setting in [nosy]
    section of config: This will send a message to the author only
    in the case where the author is on the nosy-list (either added
    earlier or via the add_author setting). Current config-options
    for this setting will send / not send to author without considering
    the nosy list. (Ralf)
    Bugs:
  - issue2550730: FAQ has broken link to Zope book. Reported and fixed by
    John Rouillard.(Bernhard)
  - issue2550728: remove buggy parentheses in TAL/DummyEngine.py.
    Reported and fixed by Ralf Hemmecke. (Bernhard)
  - issue2550715: IndexError when requesting non-existing file via http.
    Reported and fixed by Cedric Krier. (Bernhard)
  - issue2550712: exportcsvaction errors poorly when given invalid columns.
    Reported by Will Kahn-Greene, fixed by Cedric Krier. (Bernhard)
  - issue2550695: 'No sort or group' settings not retained when editing queries.
    Reported and fixed by John Kristensen. Tested by Satchidanand Haridas. 
    (Bernhard)
  - Fix matching of incoming email addresses to the alternate_addresses
    field of a user -- this would match substrings, e.g. if the user has
    discuss-support@example.com as an alternate email and an incoming mail
    is addressed to support@example.com this would (wrongly) match. (Ralf)
  - issue2550729: Fix password history display for anydbm backend, thanks
    to Ralf Hemmecke for reporting. (Ralf)
  - OpenPGP support is again working (pyme API has changed significantly) and
    we now have a regression test. We now take care that bounce-messages
    for incoming encrypted mails or mails where the policy dictates that
    outgoing traffic should be encrypted is actually OpenPGP encrypted. (Ralf)
  - Ignore confirm set() fields by themselves in the absence of non-"confirm"
    values; otherwise a bare confirm field can be used to change the a
    password. Reported by Cam Blackwood. (Ralf)
  - Updated version of simplified Chinese message file by Cheer Xiao:
    Corrected some mistakes, added a few more items and did some
    formating. (Ralf)
  - Fix xmlrpc URL parsing so that passwords may contain a ':' character
    (Ralf)
  - Be more tolerant when parsing RFC2047 encoded mail headers. Use
    backported version of my proposed changes to
    email.header.decode_header in http://bugs.python.org/issue1079
    (Ralf)
  - issue2550684 Fix XSS vulnerability when username contains HTML code,
    thanks to Thomas Arendsen Hein for reporting and patch. (Ralf)
  - issue2550711 Fix XSS vulnerability in @action parameter,
    thanks to "om" for reporting. (Ralf)
  - issue2550535 In some cases even when keep_quoted_text=yes is
    configured we would strip quoted sections. This hit the python
    bug-tracker especially for python interpreter examples with leading
    '>>>' strings. The fix is slightly different compared to the proposal
    as this broke keep_quoted_text=no in certain cases. We also fix a bug
    where keep_quoted_text=no would drop the last line of a non-quoted
    section if there wasn't an empty line between the next quotes. (Ralf)
  - issue2431638 wrong registration link in bounce mail for non-registered
    users reported *years* ago by anonymous (Ralf)
  - Fix doc/upgrading.txt which produces errors with latest docutils about
    wrong block structure. Fix .gitignore in doc directory. Thanks to
    Cheer Xiao for the patches. (Ralf)
  - Fix wrong execute permissions on some files, thanks to Cheer Xiao for
    the patch. (Ralf)
  - Fix override of TemplatingUtils in instance.py, thanks to Cheer Xiao
    for the patch. (Ralf)
  - Fix another XSS with the "otk" parameter, thanks to Jesse Ruderman for
    reporting. (Ralf)
  - Mark cookies HttpOnly and -- if https is used -- secure. Fixes
    issue2550689, but is untested if this really works in browsers.
    Thanks to Joseph Myers for reporting. (Ralf)
  - Fix another XSS with the ok- and error message, see issue2550724. We
    solve this differently from the proposals in the bug-report by not
    allowing *any* html-tags in ok/error messages anymore. Thanks to 
    David Benjamin for the bug-report and to Ezio Melotti for several
    proposed fixes. (Ralf)


