Release version 0.18.4
Add support for using freebl3 for SHA1 and MD5 hashing
p11-kit: Abort initialization if critical module fails to initialize

https://bugzilla.redhat.com/show_bug.cgi?id=985023
open files with O_CLOEXEC when possible

This helps prevent leaked file descriptors when the library is
used in a process which exec's.

opendir() already uses O_CLOEXEC on platforms that support O_CLOEXEC
so we don't need to make changes there.

In addition read config files using p11_mmap_open() so that we get
the simple benefits of O_CLOEXEC with the open() call there.

https://bugzilla.redhat.com/show_bug.cgi?id=984986
Fix various issues highlighted by coverity scanner

Among others fix possible usage of large stack allocation.

Further issues are fixed in git master.
tools: Use $TMPDIR instead of $TEMP

TMPDIR is a more standard environment variable for locating the
temp directory on Unix. In addition since this is only used in
tests, remove the code from the generic p11_path_expand() func.

In general remove the possibility for forks to put $HOME or $TEMP
environment variables in configured paths. This was possible
due to code in p11_path_expand() but not something we supported.

https://bugzilla.redhat.com/show_bug.cgi?id=985017
Don't load configs from user directory when setuid

When running as setuid() or setgid() don't access the user's home
directory, or use $HOME environment variables.

https://bugzilla.redhat.com/show_bug.cgi?id=985014
Support expanding $XDG_CONFIG_HOME in user config paths

If ~/.config is specified as a prefix to a configured path,
then it is expanded to the $XDG_CONFIG_HOME if that exists

Add --with-user-config ./configure option to configure a
different user config directory.

Interpolate the right directories into documentation.
Don't call memdup with zero length or NULL pointer

https://bugzilla.redhat.com/show_bug.cgi?id=985433
Always pass size_t varargs to p11_hash_xxx() functions

https://bugzilla.redhat.com/show_bug.cgi?id=985421
Fix p11_kit_space_strlen() result when empty string

https://bugzilla.redhat.com/show_bug.cgi?id=985416
Use getpwuid_r() instead of the non-thread-sofe getpwuid()
url: Don't escape '6' in URL encoding
Fix extract example in documentation
Release version 0.18.5
doc: Add identifiers to doc sections so gtk-doc doesn't autogen them
Don't use _GNU_SOURCE

glibc declares functions completely different if in POSIX or GNU
mode. Nastiness. Stop using _GNU_SOURCE all together.
Avoid using the non-thread-safe strerror() function

https://bugzilla.redhat.com/show_bug.cgi?id=985481
Use simple serial automake test harness

* Add a testing sanity check to see if we're catching errors
* Fix a few other testing issues
build: support uclibc for program_invocation_short_name

requires errno.h to properly detect.

Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>

https://bugs.freedesktop.org/show_bug.cgi?id=67125