# changelog

author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.8.0-2
changelog:
  - Update scriplets for gsettings schema and icon cache. Fixes rhbz#743580
  - Drop obsolete dependency on Gconf and dbus-c++-devel
  - Update build requires to gtkmm30-devel instead of gtkmm24-devel
  - Fix source url


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 1.9.16-1
changelog:
  - Merge changes from Rex's 1.9.16-1 (Thu Apr 21):
  -   opensc support unconditional
  -   remove hard-coded .gz from %post/%postun
  -   add %check section
  -   add pth patch
  - Put back patch modified from 1.9.15-4 to make tests verbose
    and change signal.c to describe received signals better.


author: Ville Skyttä <ville.skytta at iki.fi> - 1.9.17-1
changelog:
  - 1.9.17, signal info patch applied upstream (#162264).
  - Patch to fix lvalue build error with gcc4 (upstream #485).
  - Patch scdaemon and pcsc-wrapper to load the versioned (non-devel)
    pcsc-lite lib by default.


author: Rex Dieter <rexdieter[AT]users.sf.net> 1.9.19-8
changelog:
  - include gpg-agent-(startup|shutdown) scripts (#136533)
  - BR: libksba-devel >= 1.9.12 
  - %check: be permissive about failures (for now)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.5-2
changelog:
  - gnupg-2.0.5
  - gpg-agent not restarted after kde session crash/killed (#196327)
  - BR: libassuan-devel > 1.0.2, libksba-devel > 1.0.2


author: Karsten Hopp <karsten@redhat.com> 2.0.10-1
changelog:
  - don't require pcsc-lite-libs and libusb on mainframe where
    we don't have those packages as there's no hardware for that


author: Tomas Mraz <tmraz@redhat.com> - 2.0.13-3
changelog:
  - drop s390 specific ifnarchs as all the previously missing dependencies
    are now there
  - split out gpgsm into a smime subpackage to reduce main package dependencies


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.13-4
changelog:
  - Explicitly BR libassuan-static in accordance with the Packaging
    Guidelines (libassuan-devel is still static-only).


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-3
changelog:
  - initialize small amount of secmem for list of algorithms in help (#598847)
    (necessary in the FIPS mode of libgcrypt)


author: Tomas Mraz <tmraz@redhat.com> - 2.0.19-1
changelog:
  - new upstream release
  - set environment in protect-tool (#548528)
  - do not reject OCSP signing certs without keyUsage (#720174)


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.22-4
changelog:
  - allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
  - do not abort when missing hash algorithm in FIPS mode (#1078962)


author: Jeff Johnson <jbj@redhat.com> 1.0.20-1
changelog:
  - update to 1.0.20.
  - add --with-included-opencdk --with-included-libtasn1
  - add --with-included-libcfg --with-included-lzo
  - add --disable-srp-authentication.
  - do "make check" after build.


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-2
changelog:
  - properly require install-info (patch by Ville Skyttä)
  - standard buildroot and use dist tag
  - add COPYING and README to doc


author: Tomas Mraz <tmraz@redhat.com> 2.4.1-1
changelog:
  - new upstream version
  - correct the license tag
  - explicit --with-included-opencdk not needed
  - use external lzo library, internal not included anymore


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-3
changelog:
  - drop superfluous rpath from binaries
  - do not call autoreconf during build
  - specify the license on utils subpackage


author: Tomas Mraz <tmraz@redhat.com> 2.12.7-2
changelog:
  - fix problem when using new libgcrypt
  - split libgnutlsxx to a subpackage (#455146)
  - drop libgnutls-openssl (#460310)


author: Tomas Mraz <tmraz@redhat.com> 2.12.22-2
changelog:
  - rebuilt with new libtasn1
  - make guile bindings optional - breaks i686 build and there is
    no dependent package


author: Tomas Mraz <tmraz@redhat.com> 3.1.7-1
changelog:
  - new upstream version, requires rebuild of dependencies
  - this release temporarily includes old compatibility .so


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.7-1
changelog:
  - new upstream release (#1110696)
  - allow DSA/DH key generation with 1024 when not in FIPS140-2 mode (#1132705)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-4
changelog:
  - reverted change to use the p11-kit certificate storage (#1110750)
  - added functions to test DH/ECDH in FIPS-140-2 mode and fixed
    RSA key generation (#1110696)
  - added manual dependencies on libtasn1 3.8 as well as p11-kit 0.20.7
  - fixed SHA224 in SSSE3 optimized code
  - fixed issue with handshake buffer resets (#1153106)
  - fixed issue in RSA key generation with specific seeds in FIPS140-2 mode


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9
changelog:
  - Amended fix for FIPS enforcement issue (#1163848)
  - Fixed issue with applications that close all file descriptors (#1165047)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11
changelog:
  - Applied fix for urandom FD in FIPS140 mode (#1165047)
  - Applied fix for FIPS140-2 related regression (#1110696)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13
changelog:
  - Corrected reseed and respect of max_number_of_bits_per_request in 
    FIPS140-2 mode. Also enhanced the initial tests. (#1228199)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1
changelog:
  - Addressed issue with DSA public keys smaller than 2^1024 (#1238279)
  - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365)
  - When writing certificates to smart cards write the CKA_ISSUER and
    CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179)
  - Use the shared system certificate store (#1110750)
  - Address MD5 transcript collision attacks in TLS key exchange (#1289888, 
    CVE-2015-7575)
  - Allow hashing data over 2^32 bytes (#1306953)
  - Ensure written PKCS#11 public keys are not marked as private (#1339453)
  - Ensure secure_getenv() is called on all uses of environment variables
    (#1344591).
  - Fix issues related to PKCS #11 private key listing on certain HSMs
    (#1351389)


author: Pravin Satpute <psatpute@redhat.com> - 20130807-1
changelog:
  - Resolves: rh#1023312 Upstream new release of 20130807 tarball.
  - Packages unhinted upstream tarball.
  - This pulled fonts for number of missing Unicode scripts in Fedora


author: Pravin Satpute <psatpute@redhat.com> - 20141001-1
changelog:
  - Google stops release tarball. Zip file derived from git Download zip.
  - 45 new packages added as follows.
  - kufi-arabic-fonts, naskh-arabic-fonts, naskh-arabic-ui-fonts, sans-balinese-fonts, 
  - sans-bamum-fonts, sans-batak-fonts, sans-buginese-fonts, sans-buhid-fonts, 
  - sans-canadian-aboriginal-fonts, sans-cham-fonts, sans-cuneiform-fonts, sans-cypriot-fonts, 
  - sans-gothic-fonts, sans-gurmukhi-fonts, sans-gurmukhi-ui-fonts, 
  - sans-inscriptional-pahlavi-fonts, sans-inscriptional-parthian-fonts, sans-javanese-fonts, 
  - sans-lepcha-fonts, sans-limbu-fonts, sans-linearb-fonts, sans-mongolian-fonts, 
  - sans-myanmar-fonts, sans-myanmar-ui-fonts, sans-new-tai-lue-fonts, sans-ogham-fonts, 
  - sans-ol-chiki-fonts, sans-old-italic-fonts, sans-old-persian-fonts, sans-phags-pa-fonts, 
  - sans-rejang-fonts, sans-runic-fonts, sans-samaritan-fonts, sans-saurashtra-fonts, 
  - sans-sinhala-fonts, sans-sundanese-fonts, sans-syloti-nagri-fonts, sans-syriac-eastern-fonts, 
  - sans-syriac-estrangela-fonts, sans-syriac-western-fonts, sans-tagbanwa-fonts, 
  - sans-tai-le-fonts, sans-tifinagh-fonts, sans-yi-fonts
  - Resolves #1148413


author: Jens Petersen <petersen@redhat.com> - 20141117-1
changelog:
  - update to latest git (aae16d0cd626)
  - package Japanese, Korean, and CJK fonts
  - add Thaana font
  - add common subpackage for license and doc files
  - order spec subpackages lexically


author: Jens Petersen <petersen@redhat.com> - 20141117-2
changelog:
  - move cjk fonts fontconfig priority from 65-0 to 66
  - generate the appinfo metainfo for the subpackages
  - use a single for-loop to install the font config and appdata files
  - move parent appinfo metainfo to common (Parag Nemade)


author: Pravin Satpute <petersen@redhat.com> - 20141117-5
changelog:
  - Resolves: #1269444: including CJK subpackage
  - Rebase from Fedora 22 - 20141117-5 SRPM
  - improve generated font subpackage descriptions
  - it is Hanunoo not Hanuno!
  - specify font filenames more precisely


author: Miroslav Rezanina <mrezanin@redhat.com> 2.4-2
changelog:
  - gperf-allow-customizing-trace-filename.patch [bz#1232702]
  - Resolves: bz#1232702
    (gperftools: tcmalloc debug version uses hard-coded path /tmp/google.alloc)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.4-8.el7
changelog:
  - gp-Use-initial-exec-tls-for-libunwind-s-recursion-flag.patch [bz#1339710]
  - Resolves: bz#1339710
    (initalization of 'recursive' tls variable in libunwind stack capturer occasionally triggers deadlock in ceph)


author: Jeremy Katz <katzj@redhat.com> - 7.0-1
changelog:
  - BR libblkid-devel now instead of e2fsprogs-devel
  - Add bits to switch to using dracut for new-kernel-pkg


author: Hans de Goede <hdegoede@redhat.com> - 7.0.7-1
changelog:
  - Remove writing rd_plytheme=$theme to kernel args in dracut mode (hansg)
  - Add a couple of test cases for extra initrds (rstrode)
  - Allow tmplLine to be NULL in getInitrdVal (rstrode)


author: Peter Jones <pjones@redhat.com> - 7.0.12-1
changelog:
  - compare rootdev using uuid instead of stat, for better btrfs support (josef)
    Resolves: rhbz#530108


author: Peter Jones <pjones@redhat.com> - 7.0.13-1
changelog:
  - Strip boot partition prefix from initrd path if present during --update.
    Related: rhbz#557922
  - add host only support for local kernel compiles (airlied)


author: Peter Jones <pjones@redhat.com> - 8.3-1
changelog:
  - Fix new-kernel-pkg invocation of grubby for grub (patch from Mads Kiilerich)
    Resolves: rhbz#725185


author: Adam Williamson <awilliam@redhat.com> - 8.4-1
changelog:
  - Update to 8.4:
  	+ fix Loading... line for updated kernels
  	+ Add new '--default-title' feature
  	+ Add new '--default-index' feature
  	+ add feature for testing the output of a grubby command
  	+ Fix detection when comparing stage1 to MBR
  	+ do not link against glib-2.0
  	+ Don't crash if grubConfig not found
  	+ Adding extlinux support for new-kernel-pkg
  	+ Look for Debian / Ubuntu grub config files (#703260)
  	+ Make grubby recognize Ubuntu's spin of Grub2 (#703260)


author: Peter Jones <pjones@redhat.com> - 8.9-1
changelog:
  - Refactor grub2 title extraction, making it a function (Cleber Rosa)
  - Include prefix when printing kernel information (Cleber Rosa)
  - Implement support for "default saved" for grub2 (Cleber Rosa)
  - Try to display title when printing information with '--info' (Cleber Rosa)
  - new-kernel-pkg fails to find U-Boot. (D. Marlin)
  - Add support to new-kernel-pkg to recognize ARCH == armv5tel needed for Kir
    (D.Marlin)
  - Include a / when one is missing in paths (#769641)
  - Fix hard coded paths so kernel's "make install" will DTRT.
  - Fix endswith() to correctly test its input for validity.


author: Peter Jones <pjones@redhat.com> - 8.10-1
changelog:
  - Update to 8.10
  - Use "isquote" where appropriate
  - Make --remove-kenrel support titles in grub2 (jianzhong.huang)
  - Use grub2 if it's there on ppc.


author: Peter Jones <pjones@redhat.com> - 8.12-1
changelog:
  - Update to 8.12
  - Preserve trailing indentation when splitting line elements (mads)
    Resolves: rhbz#742720
  - Pick last device mounted on / (pjones,bcl)
    Related: rhbz#820340
    Related: rhbz#820351


author: Peter Jones <pjones@redhat.com> - 8.21-1
changelog:
  - Use systemd vconsole.conf and locale.conf if present
    Resolves rhbz#881908
  - Avoid unnecessary stat calls (from Ville Skyttä)
    Resolves rhbz#741135
  - Spelling fixes (Ville Skyttä)
  - Add a test case for rhbz#742885
  - Handle case-insensitive extlinux config files properly (from Johannes Weiner)


author: Peter Jones <pjones@redhat.com> - 8.23-1
changelog:
  - Update to 8.23
  - Fix empty root device in case of an empty /etc/fstab (lemenkov)
  - General refactoring and cleanup (harald)
  - Don't clean up modules.* so aggressively (harald)


author: Peter Jones <pjones@redhat.com> - 8.25-1
changelog:
  - Error instead of segfaulting if we can't find any working config
    Resolves: rhbz#912873
    Resolves: rhbz#751608


author: Peter Jones <pjones@redhat.com> - 8.27-1
changelog:
  - Make grubby understand grub's "saved_entry" system
    Resolves: rhbz#808021
  - BuildRequire grub2 on appropriate platforms, for the test suite.
    Related: rhbz#808021


author: d.marlin <dmarlin@redhat.com>
changelog:
  - Only set RPM_OPT_FLAGS if undefined to avoid overwriting 
    the platform defaults.
    Resolves: rhbz#1023793


author: Peter Jones <pjones@redhat.com> - 8.28-8
changelog:
  - Fix crash when config file doesn't match command line.
    Related: rhbz#1070646
  - Make crashes work with abrt better.
    Resolves: rhbz#1070646


author: Peter Jones <pjones@redhat.com> - 8.28-10
changelog:
  - Use the correct load commands for aarch64 efi.
    Resolves: rhbz#1081269
  - Support "devicetree" directive in grub2.
    Resolves: rhbz#1063534
  - Explain the default bootloaders and configuration paths slightly better
    in the manual.
    Resolves: rhbz#1001664
  - Conditionally create debug entries when installing kernels.
    Resolves: rhbz#957681
  - Make sure --banner from the command line is used correctly.
    Resolves: rhbz#1032048


author: Peter Jones <pjones@redhat.com> - 8.28-11
changelog:
  - Fix a memory corruption issue we're hitting on s390/s390x
    Resolves: rhbz#1152152
  - Don't use spaces on zipl platforms to describe debugging entries
    Related: rhbz#1152152


author: Peter Jones <pjones@redhat.com> - 8.28-12
changelog:
  - Do a better job recognizing "title" and "default" position and formatting
    on extlinux
    Resolves: rhbz#1200045
  - Do a better job recognizing stanza names and defaults on grub1 and grub2
    Related: rhbz#1142545
  - (reordered some patches to match the ordering in master)
    Related: rhbz#1200045
    Related: rhbz#1142545
  - Add test suite coverage and minor fixes related to zipl and
    --default-{kernel,index,title}
    Related: rhbz#1184014
  - Use systemd debug options that work on RHEL 7
    Resolves: rhbz#1212128


author: Peter Jones <pjones@redhat.com> - 8.28-14
changelog:
  - Handle "set variable" commands separately from other parsing in grubby's
    GetNextLine()
    Resolves: rhbz#1152550


author: Peter Jones <pjones@redhat.com> - 8.28-17
changelog:
  - Fix the ordering of creating the debug entries, so they don't get picked
    when we're choosing kernel command line defaults on upgrades.
    Related: rhbz#1212128


author: rmarshall@redhat.com - 8.28-18
changelog:
  - Patched new-kernel-pkg so that kernel installations when MAKEDEBUG is
    set would put the debugging entries after the non-debugging entries.
    Resolves: #1285601
  - Re-numbered the last set of patches to go with the flow. No actual
    changes to the patches; just a git mv to rename.
  - Re-organized and updated the grubby man page contents to include some
    features that were not documented as well as correct typos and
    re-write some entries for better clarity.
    Resolves: #1232168


author: Brian Pepple <bpepple@fedoraproject.org> - 0.11.93-2
changelog:
  - Fix permission on tarball clean-up script.
  - Re-enable soundtouch-devel.
  - Add COPYING.LIB to package.
  - Use %global instead of %define.


author: Hans de Goede <hdegoede@}redhat.com> - 1.2.3-3
changelog:
  - Put the fluidsynth plugin in its own subpackage and make it require
    soundfont2-default (rhbz#1078925)


author: Matthias Clasen <mclasen@redhat.com> 2.99.0-1
changelog:
  - Update to 2.99.0
  - Drop gtk-update-icon-cache and gtk-builder-convert to
    avoid conflict with gtk2
  - Drop the tooltips-style patch for now


author: Matthias Clasen <mclasen@redhat.com> - 3.8.4-1
changelog:
  - Update to 3.8.4
  - This update includes a considerable number of bug fixes,
    including fixes for filechooser behavior, a crash fix for
    gnome-shell, appearance fixes for menu items, etc.


author: Matthias Clasen <mclasen@redhat.com> - 3.8.4-5
changelog:
  - Avoid losing -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches  
  - Related: #881175


author: Benjamin Otte <otte@redhat.com> - 3.8.8-6
changelog:
  - Properly resize toplevel when collapsing GtkExpander
  - Add missing man pages
  - Allow remapping all keys
  - Resolves: #982295, #948432, #1090126


author: Ray Strode <rstrode@redhat.com> 3.14.13-5
changelog:
  - Update adwaita-gtk3-theme provides version to be big enough
    to upgrade gnome-themes-standard
    Related: #1174442


author: Matthias Clasen <mclasen@redhat.com> 3.14.13-8
changelog:
  - Don't emit warnings for 'new' deprecations by default
  - Disable GtkMenuButton if the associated action says so
  Resolves: #1210747
  Resolves: #1223463


author: Tomas Bzatek <tbzatek@redhat.com> - 0.2.1-2
changelog:
  - Added libarchive dependency for archive backend
  - Require new libsmbclient in order to get smb backend working again


author: David Zeuthen <davidz@redhat.com> - 0.2.3-9
changelog:
  - Ensure archive mounts are read-only and turn on thumbnailing on them
  - Update fuse threading patch


author: Alexander Larsson <alexl@redhat.com> - 1.0.2-2
changelog:
  - Don't return generic fallback icons for files,
    as this means custom mimetypes don't work (from svn)


author: David Zeuthen <davidz@redhat.com> - 1.2.1-3
changelog:
  - Clean up gdu patches and bump BR for gdu to 0.3
  - Avoiding showing volume for ignored mounts (#495033)


author: David Zeuthen <davidz@redhat.com> - 1.2.2-4
changelog:
  - Don't show drives that are supposed to be hidden (#498649)
  - Only automount if media or drive was just inserted - this fixes
    a problem with spurious automounts when partitioning/formatting


author: Tomas Bzatek <tbzatek@redhat.com> - 1.2.2-5
changelog:
  - Require separate libtalloc to fix libsmbclient
  - Ref the infos in next_files_finish (gnome #582195)
  - FTP: parse file sizes > 4GB correctly (#499286)
  - CDDA: allow query well-formed filenames only (#499266)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.3.3-2
changelog:
  - Fix gedit crashed with SEGV in strlen()
  - Fix SMB protocol not handled when opening from a bookmark (#509832)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.3.3-3
changelog:
  - Fix bad mount prefix stripping (part of #509612)
  - Fix gvfsd-sftp segfault when asking a question
  - Enable tar+xz in the archive mounter


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.0-4
changelog:
  - Fix Nautilus not displaying friendly icons for SSH-connected system (#526892)
  - Actually apply the logical partitions patch


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.0-5
changelog:
  - Don't always overwrite on trash restore
  - Separate "Safely Remove Drive" from "Eject"
  - Don't advertise can_poll for drives not using removable media
  - Disallow mounting empty drives
  - Disallow ejecting empty drives
  - Silently drop eject error messages when detaching drive


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.0-7
changelog:
  - HTTP: Support g_file_input_stream_query_info()
  - HTTP: Use libsoup header parsing function
  - Set correct MIME type for MTP music players


author: Tomas Bzatek <tbzatek@redhat.com> - 1.5.1-2
changelog:
  - Metadata fixes
  - SMB: Fix free space calculation for older samba servers
  - fuse: Fix setting timestamps


author: Tomas Bzatek <tbzatek@redhat.com> - 1.5.1-4
changelog:
  - Don't leak mount job operation (#552842)
  - Recognize gphoto2 cameras which don't implement get storageinfo (#552856)
  - ObexFTP: Use a private D-Bus connection for obex-data-server (#539347)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.8.0-2
changelog:
  - Fix threadsafety of closing channels
  - Fix d-bus messages leaks
  - Fix /dev symlink checks in gdu volume monitor


author: Ondrej Holy <oholy@redhat.com> - 1.22.4-1
changelog:
  - Update to 1.22.4
  - Remove obsolete upstream patches
  - Add translations updates from upstream
  - Resolves: #1174716


author: Rex Dieter <rdieter@fedoraproject.org> 4.6.95-2
changelog:
  - License: GPLv2+
  - -libs: License: IJG and LGPLv2+ and GPLv2+ and LGPLv2 or LGPLv3
  - %postun: +update-desktop-database


author: Lukas Tinkl <ltinkl@redhat.com> - 4.9.0-2
changelog:
  - stop the thumbnailing when Gwenview exits; This is important as it
    blocks unmounting of flash drives


author: Jeremy Hinegardner <jeremy@hinegardner.org> - 1.3.12.1-1
changelog:
  - switch to 1.3.12.1 branch
  - add patch from upstream with O'Reilly licensing updates.
  - convert ISO-8859-1 doc files to UTF-8


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.2-1
changelog:
  - update to 1.3.14.2
  - update make flags that changed with this upstream release
  - added man page installation


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.6-1
changelog:
  - update to 1.3.14.6
  - remove gcc 4.3 patch, it has been applied upstream
  - remove MIT license as that code has been removed from upstream


author: Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.15.6-1
changelog:
  - update to 1.3.15.6
  - use new build targets from upstream
  - add in recommended build options for x86 from upstream


author: Robin Lee <cheeselee@fedoraproject.org> - 1.4.22-1
changelog:
  - Update to 1.4.22 (CVE-2012-2942, #824544)
  - Use linux2628 build target
  - No separate x86_64 build target for halog
  - halog build honors rpmbuild optflags
  - Specfile cleanup


author: Ryan O'Hara <rohara@redhat.com> - 1.4.23-1
changelog:
  - Update to 1.4.23 (CVE-2013-1912, #947697)
  - Drop supplementary groups after setuid/setgid (#894626)


author: Tim Waugh <twaugh@redhat.com> 0.9.3-1
changelog:
  - Use /usr/share/applications for putting desktop files in (bug #159932).
  - Requires PyQt (bug #159932).


author: Tim Waugh <twaugh@redhat.com> 0.9.3-4
changelog:
  - Conflicts: hpijs from before this package provided it.
  - Conflicts: system-config-printer < 0.6.132 (i.e. before HPLIP support
    was added)


author: Tim Waugh <twaugh@redhat.com> 0.9.10-4
changelog:
  - Use case-insensitive matching.  0.9.8 gave all-uppercase in some
    situations.
  - Last known working hpijs comes from 0.9.8, so use that.


author: Tim Waugh <twaugh@redhat.com> 0.9.10-5
changelog:
  - Patchlevel 1.
  - Fixed another case-sensitive match.
  - Require hpijs sub-package (bug #189140).
  - Don't package unneeded files (bug #189162).
  - Put fax PPD in the right place (bug #186213).


author: Tim Waugh <twaugh@redhat.com> 1.6.7-2
changelog:
  - 1.6.7.
  - Conflict with selinux-policy < 2.3.4 to make sure new port numbers are
    known about (bug #201357).


author: Tim Waugh <twaugh@redhat.com> 1.6.10-2
changelog:
  - 1.6.10.  No longer need compile patch.
  - Fixed default config file (bug #211072).
  - Moved libhpip to hpijs sub-package (bug #212531).


author: Tim Waugh <twaugh@redhat.com> 1.6.10-3
changelog:
  - IPv6 support (bug #198377).  Local-only sockets are IPv4, and ought
    to be changed to unix domain sockets in future.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Change 'Hidden' to 'NoDisplay' in the desktop file, and use the System
    category instead of Utility (bug #170762).
  - Link libsane-hpaio against libsane (bug #234813).


author: Tim Waugh <twaugh@redhat.com> 1.7.2-6
changelog:
  - Fixed dangling symlinks (bug #236156).
  - Move all fax bits to the gui package (bug #236161).
  - Don't ship fax PPD and backend twice (bug #236092).
  - Run update-desktop-database in the gui package's %post scriptlet
    (bug #236163).
  - Moved desktop-file-utils requirement to gui package (bug #236163).
  - Bumped selinux-policy conflict version (bug #236092).


author: Tim Waugh <twaugh@redhat.com> 1.7.2-7
changelog:
  - Some parts can run without GUI support after all (bug #236161).
  - Added /sbin/service and /sbin/chkconfig requirements for the scriptlets
    (bug #236445).
  - Fixed %post scriptlet's condrestart logic (bug #236445).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Moved hp-setup to the ui package (bug #243273).
  - Prevent SELinux audit message from the CUPS backends (bug #241776)


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't ship hp-check (bug #243273).
  - Moved hp-setup back to the base package, and put code in
    utils.checkPyQtImport() to check for the gui sub-package as well as
    PyQt (bug #243273).


author: Tim Waugh <twaugh@redhat.com> 1.7.4a-1
changelog:
  - Don't put the version in the desktop file; let desktop-file-install do it.
  - 1.7.4a.  No longer need marker-supply or faxing-with-low-supplies
    patches.  Cheetah and cherrypy directories no longer shipped in source
    tarball.


author: Tim Waugh <twaugh@redhat.com> 2.7.6-2
changelog:
  - Main package requires python-reportlab for hp-sendfax (bug #189030).
  - Explicitly enable scanning.
  - Main package requires python-imaging for hp-scan (bug #247210).


author: Tim Waugh <twaugh@redhat.com> 2.7.6-9
changelog:
  - Remove hplip service on upgrade.
  - Updated selinux-policy conflict for bug #249014.
  - Fixed the udev rules file (bug #248740, bug #249025).


author: Tim Waugh <twaugh@redhat.com> 2.7.7-4
changelog:
  - Reverted udev rules change.
  - Ship a HAL FDI file to get correct access control on the USB device
    nodes (bug #251470).
  - Make libsane-hpaio requires the main hplip package, needed for
    libhpip.so (bug #280281).


author: Tim Waugh <twaugh@redhat.com> 2.7.9-1
changelog:
  - 2.7.9.
  - Adjusted udev rules to be less permissive.  We use ConsoleKit to add
    ACLs to the device nodes, so world-writable device nodes can be avoided.


author: Tim Waugh <twaugh@redhat.com> 2.7.9-2
changelog:
  - Use raw instead of 1284.4 communication for LJ4000 series (bug #249191).
  - Build requires openssl-devel.


author: Tim Waugh <twaugh@redhat.com> 2.7.12-2
changelog:
  - Ship installer directory (bug #428246).
  - Avoid multilib conflict (bug #341531).
  - The hpijs sub-package requires net-snmp (bug #376641).


author: Tim Waugh <twaugh@redhat.com> 2.8.2-1
changelog:
  - 2.8.2.  No longer need alloc, unload-traceback or media-empty patches.
  - Ship cupsddk driver.  The hpijs sub-package now requires cupsddk-drivers.


author: Tim Waugh <twaugh@redhat.com> 2.8.2-2
changelog:
  - Update hplip.fdi for Fedora 9: info.bus -> info.subsystem.
  - Images in docdir should not be executable (bug #440552).


author: Tim Waugh <twaugh@redhat.com> 2.8.5-1
changelog:
  - 2.8.5.
  - Configure with --enable-dbus.  Build requires dbus-devel.
  - Fix chmod 644 line.
  - Ship hp-systray in the gui sub-package, but don't ship the desktop
    launcher yet as the systray applet is quite broken.
  - Don't run autoconf.


author: Tim Waugh <twaugh@redhat.com> 2.8.5-2
changelog:
  - Make --qt4 the default for the systray applet, so that it appears
    in the right place.  Requires PyQt4.


author: Tim Waugh <twaugh@redhat.com> 2.8.12-3
changelog:
  - Make --qt4 the default for the systray applet, so that it appears
    in the right place, again (bug #479751).
  - Removed hal preprobe rules as they were causing breakage
    (bug #479648).


author: Tim Waugh <twaugh@redhat.com> 2.8.12-4
changelog:
  - Prevent crash when DEVICE_URI/PRINTER environment variables are not
    set (bug #479808 comment 6).


author: Tim Waugh <twaugh@redhat.com> 3.9.6b-4
changelog:
  - Fixed ui-optional patch for qt4 code path (bug #500473).
  - Fixed HWResolution for 'Normal' output from the hpcups driver
    (laundpad bug #405400).


author: Tim Waugh <twaugh@redhat.com> 3.9.8-5
changelog:
  - Use upstream udev rules instead of hal policy (bug #518172).
  - Removed unnecessary dependency on PyQt as we only use PyQt4 now.


author: Tim Waugh <twaugh@redhat.com> 3.9.8-8
changelog:
  - Fixed typos in page sizes (bug #515469).
  - Build no longer requires libudev-devel.
  - Fixed state reasons handling problems (bug #501338).


author: Tim Waugh <twaugh@redhat.com> 3.9.8-9
changelog:
  - New common sub-package for udev rules and config file (bug #516459).
  - Don't install base/*.py with executable bit set.


author: Tim Waugh <twaugh@redhat.com> 3.9.8-13
changelog:
  - Use dll.d file instead of post scriptlet for hpaio (bug #519988).
  - Fixed RequiresPageRegion patch (bug #518756).


author: Tim Waugh <twaugh@redhat.com> 3.9.8-19
changelog:
  - Retry when connecting to device fails (bug #528483).
  - Avoid busy loop in hpcups when backend has exited (bug #525944).


author: Tim Waugh <twaugh@redhat.com> 3.9.10-1
changelog:
  - 3.9.10.  No longer need clear-previous-state-reasons,
    hpcups-reorder, non-scripts, parenths, plugin-error,
    requirespageregion or state-reasons-newline patches.


author: Tim Waugh <twaugh@redhat.com> 3.9.10-3
changelog:
  - Removed duplex constraints on page sizes with imageable areas larger
    than possible when duplexing (bug #541572).
  - Fixed duplex reverse sides being horizontally flipped (bug #541604).


author: Tim Waugh <twaugh@redhat.com> - 3.9.12-2
changelog:
  - Retry when connecting to device fails (bug #532112).
  - Don't ship PolicyKit mechanism (bug #551773).


author: Tim Waugh <twaugh@redhat.com> - 3.10.2-1
changelog:
  - 3.10.2.  No longer need preferences-crash patch.
  - The pstotiff filter is rubbish so replace it (launchpad #528394).
  - Stopped hpcups pointlessly trying to read spool files
    directly (bug #552572).


author: Tim Waugh <twaugh@redhat.com> - 3.10.2-2
changelog:
  - Removed SYSFS use in udev rules and actually made them work
    (bug #560754).
  - Use a temporary file in pstotiff to allow gs random access.


author: Jiri Popelka <jpopelka@redhat.com> - 3.10.2-9.1
changelog:
  - Added/Corrected several IEEE 1284 Device IDs
    (bugs #577262, #577282, #577282, #577288, #577292, #577302,
    ,#577306, #577308, #577898, #579920, #580231)


author: Jiri Popelka <jpopelka@redhat.com> - 3.10.2-10
changelog:
  - Fixed black/blank lines in ljcolor hpcups output (bug #579461).
    Work-around is to send entire blank raster lines instead of skipping them.


author: Tim Waugh <twaugh@redhat.com> - 3.10.2-11
changelog:
  - Added/corrected more IEEE 1284 Device IDs:
    - HP Color LaserJet CM1312nfi (bug #581005).
    - HP Color LaserJet 3800 (bug #581935).
    - HP Color LaserJet 2840 (bug #582215).
    - HP PSC 2400 (bug #583103).


author: Jiri Popelka <jpopelka@redhat.com> - 3.10.2-15
changelog:
  - Added/corrected more IEEE 1284 Device IDs:
    - HP LaserJet 4250 (bug #585499).
    - HP Color LaserJet 2605dn (bug #583953).
    - HP LaserJet P1007 (bug #585272).


author: Jiri Popelka <jpopelka@redhat.com> - 3.10.5-1
changelog:
  - 3.10.5.   No longer need tray-icon-crash.patch
  - Increase the timeout for system tray availability checking (bug #569969).


author: Jiri Popelka <jpopelka@redhat.com> - 3.10.6-1
changelog:
  - 3.10.6.
  - Changed shebang /usr/bin/env python -> /usr/bin/python (bug #618351).
  - Corrected IEEE 1284 Device IDs:
    - HP Color LaserJet CP1518ni (bug #613689).
    - HP Color LaserJet 2600n (bug #613712).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fixes from package review:
    - Main package and hpijs sub-package require cups for directories.
    - The common sub-package requires udev for directories.
    - The libs sub-package requires python for directories.
    - Avoided macro in comment.
    - The lib sub-package now runs ldconfig for post/postun.
    - Use python_sitearch macro.


author: Tim Waugh <twaugh@redhat.com> - 3.10.6-7
changelog:
  - More fixes from package review:
    - Avoided another macro in comment.
    - Use python_sitearch macro throughout.


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-3
changelog:
  - Fixed traceback on error condition in device.py (bug #628125).
  - Fixed bogus low ink warnings from hpijs driver (bug #643643).


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-6
changelog:
  - Call cupsSetUser in cupsext's addPrinter method before connecting so
    that we can get an authentication callback (bug #538352).
  - Prevent hp-fab traceback when run as root.


author: Jiri Popelka <jpopelka@redhat.com> 3.10.9-7
changelog:
  - The pycups requirement is now python-cups.
  - Corrected IEEE 1284 Device IDs:
    HP LaserJet 4050/4100/2100 Series/2420/4200/4300/4350/5100/8000
                M3027 MFP/M3035 MFP/P3005/P3010/P4014/P4515 (bug #659039).
    HP Color LaserJet 2500/2550 series/3700/4550/4600/4650/4700/5550
                      CP1515n/CP3525/CP4520/CM2320nf MFP (bug #659040).
    HP Color LaserJet CM4730 MFP (bug #658831).


author: Jiri Popelka <jpopelka@redhat.com> 3.10.9-8
changelog:
  - Corrected IEEE 1284 Device IDs:
    HP Color LaserJet CP2025dn (bug #651509).
    HP Color LaserJet CM3530 MFP (bug #659381).


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-9
changelog:
  - Enable D-Bus threading (and require pygobject2) (bug #600932).
  - Fixed incorrect signal name in setup dialog (bug #653626).
  - Another missing newline in filter output (Ubuntu #418053).
  - Prevent hpaio segfaulting on invalid URIs (bug #649092).
  - Catch D-Bus exceptions in fax dialog (bug #645316).


author: Tim Waugh <twaugh@redhat.com> - 3.11.1-2
changelog:
  - Fixed typo causing ";marker-supply-low-warning" state reason to be
    reported by hpijs (bug #675151).


author: Jiri Popelka <jpopelka@redhat.com> 3.11.1-5
changelog:
  - Avoid KeyError in ui4/wifisetupdialog.py (bug #680939).
  - Corrected IEEE 1284 Device IDs:
    LaserJet 1300 (bug #670548)
    LaserJet 3390 (bug #678565)
    LaserJet P1505 (bug #680951)


author: Tim Waugh <twaugh@redhat.com> 3.11.5-4
changelog:
  - Added Device ID for HP LaserJet Professional P1606dn (bug #708472).
  - Update IEEE 1284 Device IDs in hpijs.drv from hpcups.drv.


author: Jiri Popelka <jpopelka@redhat.com> 3.11.10-1
changelog:
  - 3.11.10
  - Use _cups_serverbin macro from cups-devel for where to put driver executables.
  - No need to define BuildRoot and clean it in clean and install section anymore.
  - Corrected IEEE 1284 Device IDs:
    Officejet 6300 series (bug #689378)
    LaserJet Professional M1212nf MFP (bug #742490)


author: Tim Waugh <twaugh@redhat.com> 3.11.10-2
changelog:
  - Corrected IEEE 1284 Device IDs:
    - LaserJet M1536dnf MFP (bug #743915)
    - PSC 1600 series (bug #743821)


author: Tim Waugh <twaugh@redhat.com> 3.11.12-2
changelog:
  - When copying Device IDs from hpcups to hpijs, use ModelName as the
    key instead of ShortNickName (bug #651509 comment #7).


author: Tim Waugh <twaugh@redhat.com> 3.12.2-3
changelog:
  - Added another IEEE 1284 Device ID for Color LaserJet CP2025dn to
    cope with its DNS-SD response, which has no usb_* keys (bug #651509).


author: Tim Waugh <twaugh@redhat.com> 3.12.4-2
changelog:
  - The hpijs sub-package no longer requires cupsddk-drivers (which no
    longer exists as a real package), but cups >= 1.4.


author: Jiri Popelka <jpopelka@redhat.com> 3.12.9-5
changelog:
  - remove useless Conflicts:, Obsoletes: and Provides: fields
  - remove %pre section (stopping&disabling of hplip service on upgrade)
  - make hplip_cron work with non-english locale


author: Jiri Popelka <jpopelka@redhat.com> - 3.12.11-7
changelog:
  - No need to run update-desktop-database (and require desktop-file-utils)
    because there are no MimeKey lines in the desktop files.


author: Tim Waugh <twaugh@redhat.com> - 3.13.4-2
changelog:
  - Fixed changelog dates.
  - Device ID for HP LaserJet P1005 (bug #950776).
  - mark cron job file as config(noreplace)


author: Jiri Popelka <jpopelka@redhat.com> - 3.13.6-1
changelog:
  - 3.13.6
  - hplip-ipp-accessors.patch merged upstream
  - /etc/cron.daily/hplip_cron -> /usr/share/hplip/hplip_clean.sh


author: Tim Waugh <twaugh@redhat.com> - 3.13.7-2
changelog:
  - Applied patch to avoid unix-process authorization subject when using
    polkit as it is racy (CVE-2013-4325).


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.15.9-2
changelog:
  - 1069619 - Rebase to version 3.15.9 extension - solving bug 1346196 (/usr/lib/cups/filter/hpps uses python -B which is unknown), which is duplicate of bug 1202451


author: Lyude Paul <cpaul@redhat.com> - 1.0.0-7
changelog:
  - Initial port from Fedora to RHEL 7.3
  - Add patch for building with gcc4
  - Call autoreconf before starting build
  Resolves: rhbz#1311004


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.61-4jpp
changelog:
  - javadoc in javadoc package
  - doc reorganisation
  - removed Requires: ant
  - patches regenerated and bzipped


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.61-5jpp
changelog:
  - versioned dir for javadoc
  - no dependencies for javadoc package
  - stricter dependencies for demo package
  - section macro
  - adaptation to new servlet3 package


author: Deepak Bhole <dbhole@redhat.com> 1:1.8.0.4-2jpp
changelog:
  - Add missing requirements.
  - Merge with fc spec.
    - From gbenson@redhat.com:
      - Change /etc/init.d to /etc/rc.d/init.d.
      - Create hsqldb user and group with low IDs (RH bz #165670).
      - Do not remove hsqldb user and group on uninstall.
      - Build with servletapi5.
    - From ashah@redhat.com:
      - Change hsqldb user shell to /sbin/nologin.
    - From notting@redhat.com
      - use an assigned user/group id


author: Deepak Bhole <dbhole@redhat.com> 1:1.8.0.4-4jpp
changelog:
  - Added missing entries to the files section
  - From fnasser@redhat.com:
    - Add post requires for servletapi5 to ensure installation order
  - From sgrubb@redhat.com:
    - Apply patch correcting tmp file usage


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-14
changelog:
  - Remove dependency on initscripts
  - Add After=network.target to systemd service
  - Resolves: rhbz#1283893, rhbz#1269717


author: Caolán McNamara <caolanm@redhat.com> - 1.1.5.3-3
changelog:
  - Resolves: rhbz#240696 extend encoding patch to promote and add
    dictionary 8bit WORDCHARS to the ucs-2 word char list


author: Caolán McNamara <caolanm@redhat.com> - 1.1.5.3-5
changelog:
  - fix memory leak
    http://sourceforge.net/tracker/index.php?func=detail&aid=1745263&group_id=143754&atid=756395


author: Caolán McNamara <caolanm@redhat.com> - 1.1.6-1
changelog:
  - latest version
  - drop integrated hunspell-1.1.4-defaultdictfromlang.patch
  - drop integrated hunspell-1.1.5-badheader.patch
  - drop integrated hunspell-1.1.5.encoding.patch


author: Kristian Høgsberg <krh@redhat.com> - 1.2.4.2-2
changelog:
  - Drop ABI breaking hunspell-1.2.2-xulrunner.pita.patch and fix the
    hunspell include in xulrunner.


author: Caolán McNamara <caolanm@redhat.com> - 1.2.8-2
changelog:
  - Resolves: rhbz#471085 in ispell compatible mode (-a), ignore
    -m option which means something different to ispell


author: Caolán McNamara <caolanm@redhat.com> - 1.2.12-1
changelog:
  - latest version
  - drop integrated hunspell-1.2.11-valgrind.patch
  - drop integrated hunspell-1.2.11-koreansupport.patch


author: Caolán McNamara <caolanm@redhat.com> - 1.2.13-1
changelog:
  - latest version
  - drop integrated backport.warnings.patch
  - drop integrated backport.rhbz650503.patch


author: Caolán McNamara <caolanm@redhat.com> - 1.3.2-6
changelog:
  - Resolves: rhbz#573516 have hunspell require hunspell-en to ensure
    at least one dictionary exists


author: Mike A. Harris <mharris@redhat.com> 0.30-1
changelog:
  - Reconfigured Cards database to default to XFree86 4.x for ALL video
    hardware, since 3.3.6 support is being removed.  Video cards not
    supported natively by 4.x will be changed to use the vesa or vga
    driver, or completely removed as unsupported.


author: Mike A. Harris <mharris@redhat.com> 0.31-1
changelog:
  - Modified ATI entries in pcitable to be able to autodetect the FireGL 8700
    and FireGL 8800 which both have the same ID, but different subdevice ID's.
    Added entries to Cards database for the 8700/8800 as well.


author: Bill Nottingham <notting@redhat.com> 0.33-1
changelog:
  - Eizo monitor updates (#56080, <triad@df.lth.se>)
  - pci.ids updates, corresponding pcitable updates
  - pcilint for pcitable


author: Mike A. Harris <mharris@redhat.com> 0.35-1
changelog:
  - Updated Cards db for CT69000
  - Various ATI cleanups and additions to Cards and pcitable
  - Updated S3 Trio3D to default to "vesa" driver (#59956)


author: Mike A. Harris <mharris@redhat.com> 0.37-1
changelog:
  - Changed Matrox G450 driver default options to fix bug (#66697)
  - Corrected S3 Trio64V2 bug in Cards file (#66492)


author: Bill Nottingham <notting@redhat.com> 0.44-1
changelog:
  - fix some of the Dell entries
  - add cardbus controller id (#71198)
  - add audigy mapping
  - add NEC monitor (#71320)


author: Bill Nottingham <notting@redhat.com> 0.61-1
changelog:
  - move pcmcia config file here
  - sort MonitorsDB, add some entries, remove dups
  - switch some network driver mappings


author: Mike A. Harris <mharris@redhat.com>
changelog:
  - Complete reconstruction of all Neomagic hardware entries in Cards
    database to reflect current XFree86, as well as pcitable update,
    and submitted cleaned up entries to sourceforge


author: Mike A. Harris <mharris@redhat.com> 0.65-1
changelog:
  - Added Card:S3 Trio64V2 (Unsupported RAMDAC) entry to pcitable, pci.ids, and
    Cards database to default this particular variant to "vesa" driver (#81659)


author: Mike A. Harris <mharris@redhat.com> 0.68-1
changelog:
  - Massive update of all ATI video hardware PCI IDs in pcitable and a fair
    number of additions and corrections to the Cards database as well


author: Mike A. Harris <mharris@redhat.com> 0.73-1
changelog:
  - Updated pcitable and Cards database to fix Savage entries up a bit, and
    change default Savage/MX driver to 'vesa' as it is hosed and with no sign
    of working in time for 4.3.0.  Fixes (#72476,80278,80346,80423,82394)


author: Mike A. Harris <mharris@redhat.com> 0.88-1
changelog:
  - Update MonitorsDB for new IBM monitors from upstream XFree86 bugzilla:
    http://bugs.xfree86.org/cgi-bin/bugzilla/show_bug.cgi?id=459


author: Mike A. Harris <mharris@redhat.com> 0.99-1
changelog:
  - Added entries for Radeon 9600/9600Pro/9800Pro to Cards
  - Fixed minor glitch in pcitable for Radeon 9500 Pro


author: Bill Nottingham <notting@redhat.com> 0.105-1
changelog:
  - many monitor updates (#114260, #114216, #113993, #113932, #113782,
    - add some PCMCIA cards (#113006, #112505)


author: Mike A. Harris <mharris@redhat.com> 0.110-1
changelog:
  - Added 3Dfx Voodoo Graphics and Voodoo II entries to the Cards database, both
    pointing to Alan Cox's new "voodoo" driver which is now included in XFree86
    4.3.0-62 and later builds in Fedora development.  Mapped their PCI IDs to
    the new Cards entry in pcitable.
  - Updated the entries for 3Dfx Banshee


author: Bill Nottingham <notting@redhat.com> 0.116-1
changelog:
  - move updfstab.conf here
  - add wireless card (#116865)
  - add laptop display panel (#117385)
  - add clipdrive (#119928)
  - add travelling disk (#119143)
  - add NEXDISK (#106782)


author: Bill Nottingham <notting@redhat.com> - 0.120-1
changelog:
  - mainly:
    fix upgradelist module for CMPci cards (#123647)
  - also:
    add another wireless card (#122676)
    add wireless card (#122625)
    add 1280x800 (#121548)
    add 1680x1050 (#121148)
    add IntelligentStick (#124313)


author: Mike A. Harris <mharris@redhat.com> 0.151-1
changelog:
  - Added one hundred billion new nvidia PCI IDs to pcitable and Cards to
    synchronize it with X.Org X11 6.8.2.  (#140601)


author: Bill Nottingham <notting@redhat.com> 0.152-1
changelog:
  - fix qlogic driver mappings, add upgradelist mappings for the modules
    that changed names (#150621)


author: Bill Nottingham <notting@redhat.com> - 0.159-1
changelog:
  - pcitable: make branding happy (#160047)
  - Cards: add required blank line (#157972)
  - add some monitors
  - add JVC CD-ROM (#160907, <richard@rsk.demon.co.uk>)
  - add hisax stuff to blacklist (#154799, #159068)


author: Bill Nottingham <notting@redhat.com> - 0.160-1
changelog:
  - move blacklist to /etc/modprobe.d, require new module-init-tools
  - add LG monitors (#162466, #161734)
  - add orinoco card (#161696)
  - more mptfusion stuff (#107088)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - migrate mpt module names (#161420)
  - remove pcitable entries for drivers in modules.pcimap
  - switch lone remaining 'Server' entry - that can't work right


author: Jeremy Katz <katzj@redhat.com> - 0.171-1
changelog:
  - r128 -> ati.  should fix the unresolved symbol and kem says its more 
    generally the "right" thing to do


author: Adam Jackson <ajackson@redhat.com> - 0.181-1
changelog:
  - Updated videodrivers to mention i945
  - New monitors: Sony CPD-G420 (#145902), Compaq P1110 (#155120).


author: Adam Jackson <ajackson@redhat.com> - 0.182-1
changelog:
  - Added ast driver description to videodrivers
  - Numerous Dell monitor additions (#196734)
  - Numerous Belinea monitor additions (#198087)


author: Phil Knirsch <pknirsch@redhat.com> - 0.183-1
changelog:
  - Updated pci.ids before FC6 final (#198994)
  - Added several missing Samsung monitors (#197463)
  - Included a new inf2mondb.py from Matt Domsch (#158723)


author: Karsten Hopp <karsten@redhat.com> 0.194-1
changelog:
  - Update to latest pci.ids/usb.ids for RHEL5
  - Resolves: #220182
    Add some Dell monitors to MonitorDB


author: Karsten Hopp <karsten@redhat.com> 0.205-1
changelog:
  - really update pci.ids, update-pciids downloaded an old file
  - disable iwl4965 blacklist as it is not approved yet (#245379)


author: Karsten Hopp <karsten@redhat.com> 0.207-1
changelog:
  - pull new upstream pci.ids and rebuild
  - Resolves: bz #251732
  - Resolves: bz #251734
  - Resolves: bz #252195
  - Resolves: bz #252196
  - Resolves: bz #241274


author: Karsten Hopp <karsten@redhat.com> 0.212-1
changelog:
  - pull new upstream pci.ids, usb.ids
  - Resolves: #300831
  - added HP TFT5600 LCD Monitor
  - Resolves: #250569
  - added Acer AL1916W, Eizo L568/L568D, Samsung 795DF
  - Resolves: #250582
  - Add Samsung 205BW/206BW/225BW/226BW
  - Resolves: #250584
  - Add Samsung 931BF
  - Resolves: #250587


author: Karsten Hopp <karsten@redhat.com> 0.217-1
changelog:
  - update pci.ids, oui.txt
  - update usb.ids, fixes #439963
  - add HP w1907 LCD monitor, fixes #431359
  - fix many monitor entries (Stanislav Ievlev, #430276)


author: Karsten Hopp <karsten@redhat.com> 0.220-1
changelog:
  - update pci.ids, usb.ids, oui.txt
  - MonitorsDB: add some Samsung monitors (Ronald Warsow)
  - MonitorsDB: add Dell E1609W (Matt Domsch)
  - MonitorsDB: add 7 Dell monitors (Matt Domsch)
  - MonitorsDB: add a bunch of Hyundai and ImageQuest monitors


author: Karsten Hopp <karsten@redhat.com> 0.220-1
changelog:
  - add new monitor entries from Mandriva hardware database (Thierry Vignaud)
  - make generic entries have properly formated frequencies (Thierry Vignaud)
  - remove duplicate Dell monitor entries (Thierry Vignaud)
  - more vendor name fixes
  - fix extra field in 'Compudyne KD-1500N' definition (Thierry Vignaud)
  - make Dell monitors case consistent (Thierry Vignaud)
  - make all GoldStar monitors have the same vendor name (Thierry Vignaud)
  - add URL of git repository
  - fix spacing (Thierry Vignaud)
  - sort MonitorDB file with LANG=C sort -f -t ";" -k1,2
  - add Samsung SyncMaster 2443BWX (Marc van den Dikkenberg)
  - add some Lenovo monitors (Im Sza)


author: Karsten Hopp <karsten@redhat.com> 0.223-1
changelog:
  - update usb.ids pci.ids oui.txt
  - rename /etc/modprobe.d/blacklist to /etc/modprobe.d/blacklist.conf


author: Karsten Hopp <karsten@redhat.com> 0.232-1
changelog:
  - update usb.ids, out.txt and pci.ids (#550020, #611860)
  - fix incorrect syntax doc/comment in blacklist.conf (Ville Skyttä, #532802)
  - add Acer B243HL and BenQ G2420HDBL (Ville Skyttä, #590787)
  - add HP LP2475w and Samsung 2494HM (Ville Skyttä, #595059)


author: Karsten Hopp <karsten@redhat.com> 0.233-7
changelog:
  - bump release
  - update oui.txt URL
  - fix tarball name in spec file
  - update usb.ids, out.txt and pci.ids


author: Michal Minar <miminar@redhat.com> 0.247-1
changelog:
  - Moved blacklist.conf from /etc/modprobe.d to /usr/lib/modprobe.d.
  - Renamed it to dist-blacklist.conf.
  - Data files update


author: Michal Minar <miminar@redhat.com> 0.252-7.1
changelog:
  - Bumped release to reflect rhel version.
  - Fixed bogus dates in changelog.
  - Generate and install hwdb.d/* files.


author: Michal Minar <miminar@redhat.com> 0.252-8.1
changelog:
  - Updated pci, usb and vendor ids.
  - Resolves: rhbz#1236458
  - Resolves: rhbz#1256004
  - Resolves: rhbz#1266217
  - Resolves: rhbz#1271797


author: Michal Minar <miminar@redhat.com> 0.252-8.2
changelog:
  - Updated pci, usb and vendor ids.
  - Resolves: rhbz#1292382
  - Resolves: rhbz#1291614
  - Resolves: rhbz#1324198


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.1-0
changelog:
  - 1.1 rel# Patch to the 1.1 fix 2967 http://www.open-mpi.org/software/hwloc/nightly/v1.1/hwloc-1.1rc6r2967.tar.bz2
  - Fix hwloc_bitmap_to_ulong right after allocating the bitmap.
  - Fix the minimum width of NUMA nodes, caches and the legend in the graphical lstopo output.
  - Cleanup error management in hwloc-gather-topology.sh.
  - Add a manpage and usage for hwloc-gather-topology.sh on Linux.
  - Rename hwloc-gather-topology.sh to hwloc-gather-topology to be consistent with the upcoming version 1.2ease


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.3-0
changelog:
  - 1.3 release
   - added dependency on libibverbs-devel pciutils-devel
   - cannot provide support for cuda (cuda_runtime_api.h). 
   - Nvidia CUDA is free but not open-source therefore not in Fedora.


author: Jay Fenlason <fenlason@redhat.com> - 1.7-1.1
changelog:
  - Remove build dependencies on libXNVCtrl-devel and w3m because RHEL
    does not have them (w3m is available on x86_64, but not s390).
    Resolves: rhbz978752


author: Jay Fenlason <fenlason@redhat.com> - 1.7-1.2
changelog:
  - Split out lstopo into a -gui subpackage, so the hwloc base package
    does not pull in all of X.
    Resolves: rhbz910165


author: Don Zickus <dzickus@redhat.com> - 1.7-4
changelog:
  - Fix dangling symlink for hwloc-ls manpage
    Resolves: rhbz1081236
    Add desktop entry for lstopo
    Resolves: rhbz1229313


author: Doug Ledford <dledford@redhat.com> - 1.0.5-2
changelog:
  - Don't install the address file or config file, the config file isn't
    strictly needed and defaults will be used if it isn't installed, but
    with the address file we specifically need to build one based upon
    the machine where the program is installed, a default file is not only
    not helpful, but it messes up the daemon.
  - Related: bz700285


author: Doug Ledford <dledford@redhat.com> - 1.0.5-3
changelog:
  - Until the next upstream release, the pid file is in a wonky location.
    Make the init script know about that location so we can stop properly.
  - Resolves: bz808599


author: Michal Schmidt <mschmidt@redhat.com> - 1.0.10-0.1.20150717git825da3ccd2
changelog:
  - Update to pre-release git snapshot of 1.0.10.
  - Adds libibacmp shared library.
  - Rebase coverity patch.
  - Minor spec file cleanup.
  - Resolves: bz1169952


author: Michal Schmidt <mschmidt@redhat.com> - 1.0.10-0.3.20150717git825da3ccd2
changelog:
  - Put libibacmp.so in the main package, it's needed at runtime.
  - No need to run ldconfig, the .so is not in the linker path.
  - Filter the plugin from RPM provides.
  - Related: bz1169952


author: Daiki Ueno <dueno@redhat.com> - 1.5.18-6
changelog:
  - add ibus-kkc-16th-candidate.patch (Closes: #1251882)
  - add ibus-kkc-page-settings.patch (Closes: #1251891)
  - add ibus-kkc-ignore-annotations.patch (Closes: #1251896)


author: Deepak Bhole <dbhole@redhat.com> 1.0.2-2
changelog:
  - Fixed incorrect macro value for min_openjdk_version
  - Use posttrans instead of post, so that upgrade from old plugin works


author: Deepak Bhole <dbhole@redhat.com> 1.0.4-1
changelog:
  - Bump to 1.0.4
  - Fixed rhbz#718164: Home directory path disclosure to untrusted applications
  - Fixed rhbz#718170: Java Web Start security warning dialog manipulation


author: Ville Skyttä <ville.skytta@iki.fi> - 1.3.1-5
changelog:
  - Resolves: rhbz#875496
  - Build with $RPM_LD_FLAGS and %{_smp_mflags}.
  - Run unit tests during build.


author: Jiri Vanek <jvanek@redhat.com> 1.3.2-0
changelog:
  - Updated to latest ustream release of 1.3 branch - 1.3.2
   - Security Updates
    - CVE-2013-1927, RH884705: fixed gifar vulnerability
    - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path.
   - Common
    - Added new option in itw-settings which allows users to set JVM arguments when plugin is initialized.
   - NetX
    - PR580: http://www.horaoficial.cl/ loads improperly
   - Plugin
     PR1260: IcedTea-Web should not rely on GTK
     PR1157: Applets can hang browser after fatal exception
  - Removed upstreamed patch to remove GTK dependency
    - icedtea-web-pr1260-remove-gtk-dep.patch


author: Jiri Vanek <jvanek@redhat.com> 1.4-0
changelog:
  - Updated to 1.4
  - See announcement for detail
   - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-May/023195.html
  - commented out check - some junit4  incompatibility


author: Jiri Vanek <jvanek@redhat.com> 1.4-1
changelog:
  - Adapted to latest openjdk changes
  - added build requires for autoconf and automake
  - minor clean up


author: Jiri Vanek <jvanek@redhat.com> 1.4.1-0
changelog:
  - updated to 1.4.1
  - add icedtea-web man page (resolves 948443)
  - removed upstreamed  patch1 b25-appContextFix.patch
  - removed upstreamed  patch2 rhino-pac-permissions.patch
  - make check enabled again
  - should be build for non-standart archs !-)
  - removed unused multilib arches (yupii!)
  - Resolves: rhbz#1009820


author: Jiri Vanek <jvanek@redhat.com> 1.5-2
changelog:
  - add not yet upstreamed DE localisation of 1.5
   - patch0 DElocalizationforIcedTea-Web1.5-0001.patch
  - autoreconf gog  -vfi, see RH1077898
  - ./configure changed to %configure
  - Resolves: rhbz#1077287


author: Jiri Vanek <jvanek@redhat.com> 1.6.0-1
changelog:
  - update to upstream 1.6
  - made to use jdk8 (rh1184970)
  - it will be necessary for 1.6.1 anyway (rh1233687)
  - Resolves: rhbz#1217153


author: Jiri Vanek <jvanek@redhat.com> 1.6.1-1
changelog:
  - updated to upstream release 1.6.1
  - metadata xml files enhanced for javaws
  - forced to use jdk8 by default
  - Resolves: rhbz#1217153


author: Jiri Vanek <jvanek@redhat.com> 1.6.1-4
changelog:
  - added and and applied patch2 fileLogInitializationError-1.6.patch to prevent 
  consequences 1268909
  - Resolves: rhbz#1217153


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-1
changelog:
  - updated to 1.6.2
  - fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
  - generated maven metadata (isntalled but not used. 
  set -e 
     _pompart="need" 
     _jarpart="tobe" 
  _filelist=".mfiles" 
  install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.6.2-4.el7.aarch64/usr/share/maven-fragments 
  for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do 
      if [ -f /builddir/build/BUILDROOT/icedtea-web-1.6.2-4.el7.aarch64$_dir/$_jarpart ]; then 
  	_jpath="/builddir/build/BUILDROOT/icedtea-web-1.6.2-4.el7.aarch64$_dir/$_jarpart" 
      fi 
  done 
  python -m /usr/share/java-utils/maven_depmap   \
            -p "/usr" -n "" \
            /builddir/build/BUILDROOT/icedtea-web-1.6.2-4.el7.aarch64/usr/share/maven-fragments/icedtea-web \
            /builddir/build/BUILDROOT/icedtea-web-1.6.2-4.el7.aarch64/usr/share/maven-poms/$_pompart \
          >> ${_filelist} 
  sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.6.2-4.el7.aarch64::' ${_filelist} 
  sort -u -o ${_filelist} ${_filelist} 


  - Resolves: rhbz#1299537


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-3
changelog:
  - added --family to make it part of javas alternatives alignment
  - java-javaver-openjdk collected into preffered_java 
  - Resolves: rhbz#1299537


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-1
changelog:
  - updated to 1.6.2
  - fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
  - generated maven metadata (isntalled but not used. %add_maven_depmap need tobe fixed)
  - Resolves: rhbz#1299537


author: Erik Troan <ewt@redhat.com>
changelog:
  - Added usernetctl wrapper for user mode ifup and ifdown's and man page
  - Rewrote ppp and slip kill and retry code
  - Added doexec and man page


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Changed ifup-ppp and ifdown-ppp not to use doexec, because the argv[0]
    provided by doexec goes away when pppd gets swapped out.
  - ifup-ppp now sets remotename to the logical name of the device.
    This will BREAK current PAP setups on netcfg-managed interfaces,
    but we needed to do this to add a reasonable interface-specific
    PAP editor to netcfg.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added MTU for PPP.
  - Put PPPOPTIONS at the end of the options string instead of at the
    beginning so that they override other options.  Gives users more rope...
  - Don't do module-based stuff on non-module systems.  Ignore errors if
    st module isn't there and we try to load it.


author: Erik Troan <ewt@redhat.com>
changelog:
  - Got rid of xargs dependency in halt script
  - Don't mount /proc twice (unmount it in between)
  - sulogin and filesystem unmounting only happened for a corrupt root
    filesystem -- it now happens when other filesystems are corrupt as well


author: Erik Troan <ewt@redhat.com>
changelog:
  - Added DHCP support
  - Set hostname via reverse name lookup after configuring a networking
    device if the current hostname is (none) or localhost


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Support for net event notification:
    Call /sbin/netreport to request that SIGIO be sent to you whenever
    a network interface changes status (won't work for brining up SLIP
    devices).
    Call /sbin/netreport -r to remove the notification request.
  - Added ifdown-post, and made all the ifdown scrips call it, and
    added /etc/ppp/ip-down script that calls /etc/ppp/ip-down.local
    if it exists, then calls ifdown-post.
  - Moved ifup and ifdown to /sbin


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - /sbin/netreport sgid rather than suid.
  - /var/run/netreport writable by group root.

  - /etc/ppp/ip-{up|down} no longer exec their local versions, so
    now ifup-post and ifdown-post will be called even if ip-up.local
    and ip-down.local exist.


author: Donald Barnes <djb@redhat.com>
changelog:
  - added status function to functions along with better killproc
    handling.
  - added /sbin/usleep binary (written by me) and man page
  - changed BuildRoot to /var/tmp instead of /tmp


author: Donnie Barnes <djb@redhat.com>
changelog:
  - reworked status() to adjust for processes that change their argv[0] in
    the process table.  The process must still have it's "name" in the argv[0]
    string (ala sendmail: blah blah).


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Clone device support in network scripts, rc scripts, and usernetctl.
  - Disassociate from controlling tty in PPP and SLIP startup scripts,
    since they act as daemons.
  - Spec file now provides start/stop symlinks, since they don't fit in
    the CVS archive.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added network-functions to spec file.
  - Added report functionality to usernetctl.
  - Fixed bugs I introduced into usernetctl while adding clone device support.
  - Clean up entire RPM_BUILD_ROOT directory in %clean.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - /var/run/netreport needs to be group-writable now that /sbin/netreport
    is setguid instead of setuid.


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed network-scripts to allow full pathnames as config files
  - removed some old 3.0.3 pcmcia device handling


author: Erik Troan <ewt@redhat.com>
changelog:
  - set domainname to "" if none is specified in /etc/sysconfig/network
  - fix /proc mounting to get it in /etc/mtab


author: Erik Troan <ewt@redhat.com>
changelog:
  - tried to get /proc stuff right one more time (uses -t nonfs,proc now)
  - added support for /fsckoptions
  - changed 'yse' to 'yes' in KERNELD= line


author: Erik Troan <ewt@redhat.com>
changelog:
  - touch /var/lock/subsys/kerneld after cleaning out /var/lock/subsys
  - the logic for when  /var/lock/subsys/kerneld is touched was backwards


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added lots of linuxconf support.  Should still work on systems that
    do not have linuxconf installed, but linuxconf gives enhanced support.
  - In concert with linuxconf, added IPX support.  Updated docs to reflect it.


author: Erik Troan <ewt@redhat.com>
changelog:
  - ipcalc should *never* have been setgid anything
  - depmod isn't run properly for non-serial numbered kernels


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - /etc/rc.d/rc: don't run /etc/rc.d/rcN.d/[KS]??foo.{rpmsave,rpmorig} scripts.
  - /etc/rc.d/rc.sysinit: raid startup (Nigel.Metheringham@theplanet.net).
  - /sbin/setsysfont: permit unicode fonts.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - rc.sysvinit should be working with all kernel versions now
  - requires e2fsprogs (for fsck)
  - set INPUTRC and LESSCHARSET on linux-lat


author: Bill Nottingham <notting@redhat.com>
changelog:
  - bugfixes (ifup-ppp, kill -TERM, force fsck, hwclock --adjust, setsysfont)
  - add initlog support. Now everything is logged (and bootup looks different)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - Mmm. Must always remove debugging code. before release. *thwap*
  - pump support
  - mount -a after mount -a -t nfs


author: Bill Nottingham <notting@redhat.com>
changelog:
  - doc updates
  - support for SYSFONTACM, other console-tools stuff
  - add net route for interface if it isn't there.
  - fix for a bash/bash2 issue


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run linuxconf if /usr isn't mounted
  - set macaddr before bootp
  - zero in the /var/run/utmpx file (gafton)
  - don't set hostname on ppp/slip (kills X)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - load keymaps & console font early
  - fixes for channel bonding, strange messages with non-boot network interfaces


author: Bill Nottingham <notting@redhat.com>
changelog:
  - clean out /var better
  - let everyone read /var/run/ppp*.dev
  - fix network startup so it doesn't depend on /usr


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't make module-info, System.map links
  - handle utmpx/wtmpx
  - fix lots of bugs in 4.21 release :)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - stability fixes for initlog
  - initlog now has a config file
  - add alias speedup from dharris@drh.net
  - move netfs links
  - usleep updates


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - use new linkname argument to pppd to make if{up,down}-ppp
    reliable -- requires ppp-2.3.9 or higher


author: Bill Nottingham <notting@redhat.com>
changelog:
  - new NFS unmounting from Bill Rugolsky <rugolsky@ead.dsa.com>
  - fix ifup-sl/dip confusion
  - more raid startup cleanup
  - make utmp group 22


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - add --remotename option to wvdial code
  - make sure we do not have an earlier version of wvdial that doesn't
    know how handle --remotename
  - make ppp-watch background itself after 30 seconds even if
    connection does not come up, at boot time only, so that a
    non-functional PPP connection cannot hang boot.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - ppp-watch now always kills pppd pgrp to make sure dialers are dead,
    and tries to hang up the modem


author: Bill Nottingham <notting@redhat.com>
changelog:
  - assorted brown paper bag fixes
  - check for programs/files before executing/sourcing them
  - control stop-a like magic sysrq


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fix some failed CHAP authentication
  - fix extremely unlikely, but slightly possible kill-random-process
    bug in ppp-watch
  - allow DNS{1,2} in any ifcfg-* file, not just PPP, and
    add nameserver entries, don't just replace them
  - don't use /tmp/confirm, use /var/run/confirm instead


author: Bill Nottingham <notting@redhat.com>
changelog:
  - load mixer settings for monolithic sound
  - man page for ppp-watch
  - add ARP variable for ifup
  - some i18n fixes


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fix more possible failed CHAP authentication (with chat scripts)
  - fix ppp default route problem
  - added ppp-watch man page, fixed usernetctl man page
  - make ifup-ppp work again when called from netcfg and linuxconf
  - try to keep ppp-watch from filling up logs by respawning pppd too fast
  - handle all linuxconf-style alias files with linuxconf


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - improvements in clone device handling
  - better signal handling in ppp-watch
  - yet another attempt to fix those rare PAP/CHAP problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - attempt to restore default route if PPP takes it over
  - man page fix for ipcalc
  - shvar cleaning
  - automate maintaining /boot/System.map symlinks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - check that LC_ALL/LINGUAS and LANG are set before referencing them in lang.csh
  - fix check for /var/*/news, work around for bug #9140


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't create resolv.conf 0600
  - don't run ps as much (speed issues)
  - allow setting of MTU
  - other minor fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ifup-ppp: add hooks for demand-dialing PPP
  - functions: use basename of process when looking for its PID file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - tweak %pre back to a mv (rpm is fun!)
  - do USB initialization before fsck, so keyboard works if it fails


author: Matt Wilson <msw@redhat.com>
changelog:
  - kill all the PreTransaction stuff
  - directory ownership cleanups, add more LSB symlinks
  - move all the stuff back in to /etc/rc.d/


author: Bill Nottingham <notting@redhat.com>
changelog:
  - remove console-tools requirement
  - in netfs, start portmap if needed
  - cosmetic cleanups, minor tweaks
  - don't probe USB controllers


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't load usb drivers if they're compiled statically
  - don't call ifdown-post twice for ppp (#15285)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add usleep after kill -KILL in pidofproc, works around lockd issues (#14847)
  - add some fallback logic to prefdm (#16464)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - handle "gw x.x.x.x" as the last pair of flags in ifup-routes (#18804)
  - fix top-level makefile install target
  - make usernetctl just fall-through if getuid() == 0


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - changed hdparm section in rc.sysinit to allow different
    parameters for each disk (if needed) by copying
    /etc/sysconfig/harddisks to /etc/sysconfig/harddiskhda (hdb,hdc..)
  - fix RFE #20967


author: Bill Nottingham <notting@redhat.com>
changelog:
  - only load sound if persistent DMA buffers are necessary
  - fix lots of bugs: #18619, #21187, #21283, #12097
  - integrate MAXFAIL option for ppp-watch
  - don't load keymaps/fonts on a serial console


author: Bill Nottingham <notting@redhat.com>
changelog:
  - do LVM setup through normal initscripts mechanisms
  - ignore backup files in /etc/sysconfig/network-scripts
  - lots of .po file updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add plusb support (#18892, patch from <eric.ayers@compgen.com>)
  - don't ignore RETRYTIMEOUT when we never connect (#14071, patch from
    <ak@cave.hop.stu.neva.ru>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - various init.d/functions cleanups (#10761, from <mjt@tls.msk.ru>)
  - in daemon(), only look at pidfile to determine if process is running
    (#17244, others)
  - ifup-ppp enhancements (#17388, from <ayn2@cornell.edu>)
  - ipv6 support (#23576, originally by Peter Bieringer <pb@bieringer.de>)
  - lots of other minor fixes (see ChangeLog)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - modify firewall on ifup to allow any new DNS servers through (#25951)
  - don't muck with the font in lang.csh/lang.sh (#26349)
  - don't display Japanese if we aren't on a pty (#25041)
  - load ide-scsi if passed on /proc/cmdline


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add all save changes for s390 s390x that won't break anything
    patches are from Oliver Paukstadt @ millenux.com


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pidofproc() and killproc() try to use the PID associated with the full
    pathname first before killing the daemon by its basename (for daemons that
    share the same basename, i.e. "master" in postfix and cyrus-imapd) (#19016)
  - fix status() as well


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix some substitions in init.d/functions (fixes various killproc issues)
  - make sure ipv6 module alias is available if configured
  - fix initlog segfaults in popt when called with bogus stuff (#28140)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run isapnp on isapnp-enabled 2.4 kernels (part of #29450)
  - disable hotplug during network initscript
  - don't munge wireless keys in ifup; that will be done with the
    PCMCIA wireless stuff
  - run sndconfig --mungepnp for non-native-isapnp soundcards
  - don't explicitly kill things in init.d/single, init will do it
  - don't explicitly load usb-storage; mount the usbdevfs before initializing
    host controller modules


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - usernetctl, ppp-watch: cleanups
  - netreport: use O_NOFOLLOW
  - ifup-ppp: let ppp-watch watch over demand-dialed connections (#28927)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - IPv6 fixes (#30506)
  - make static-routes handling more sane and consistent (#29500, #29549)
  - handle multiple USB controllers *correctly*


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - copyright: GPL -> license: GPL
  - fix a syntax error in lang.csh
  - skip commented-out i18n configuration lines in lang.csh


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run ifup ppp0 if ppp-watch gets SIGINT (#40585, ak@cave.hop.stu.neva.ru)
  - fix do_netreport (#37716, #39603 <crlf@aeiou.pt>)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - reenable pump, but make sure dhcpcd is the default. This
    way, upgrades of systems without dhcpcd has a better chance at
    working.


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - disable hwclock on S390 (no such executable)
  - Fix up kernel versioning on binary-only modules (S390)
  - don't use newt scripts on S390 console


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix '--check'
  - prereq sh-utils (#43065)
  - fix some invocations of reboot/halt (#45966)
  - fix typo in ifup-wireless
  - don't muck with /etc/issue each boot
  - big IPv6 update (<pekkas@netcore.fi>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - own some more directories
  - use -O nonetdev, require mount package that understands this
  - fix do_netreport when called as non-root
  - remove ip addresses from interfaces on ifdown
  - oops, fix ifup/ifdown


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update netdev stuff to use _netdev
  - IPv6 updates (<pekkas@netcore.fi>)
  - fix downing of devices with static IPs (#49777, #49783)
  - put ifcfg-lo back in the package


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't use kbd commands in setsysfont now that we've switched back to
    console-tools (#50075)
  - sleep in check_link_down; some devices require it
  - only bring link down if check_link_down fails


author: Bill Nottingham <notting@redhat.com>
changelog:
  - honor HOTPLUG=no if running under hotplug (#47483)
  - use awk, not grep, for modprobe -c checks (#49616)
  - don't print ugly messages for the case where the device doesn't exist,
    and there is no alias (i.e., PCMCIA ONBOOT=yes (#various))
  - run kbdconfig in /.unconfigured mode (#43941)
  - use a bigger buffer size argument to dmesg (#44024)
  - detach loopback devices on shutdown (#43919, #45826)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - tweak raittab grep slightly (#51231)
  - allow resetting of default route for DHCP addresses (#48994)
  - save resolv.conf in ifup-ppp for restoration by ifdown-post (#50759)
  - when munging firewall rules for dns, only allow dest ports 1025-65535 (#44038, #40833)
  - allow shell characters in ppp names (#43719)
  - allow setting DHCP arguments, just kill dhcpcd instead of using -k (#46492)
  - behave sanely if ifup called when dhcpcd is running (#49392, #51038)


author: Than Ngo <than@redhat.com>
changelog:
  - don't set MSN if it' empty (it's now optional)
  - don't give login name as a cmdline-option (Bug #23066)
  - remove peer device file if ppp connection is down
  - fix channel bundling


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add is_available() network function, use it; cleans up ugly modprobe
    error messages
  - update translation info
  - fix #51787


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix a broken call to check_device_down
  - make all loopback addresses have host scope, not global scope.
    Fixes #49374, possibly others


author: Bill Nottingham <notting@redhat.com> 6.31-1
changelog:
  - message un-tweaks (<johnsonm@redhat.com>)
  - make getkey more useful, fix some of the autofsck stuff (<johnsonm@redhat.com>)


author: Than Ngo <than@redhat.com>
changelog:
  - add ISDN patches from pekkas@netcore.fi and pb@bieringer.de (bug #52491)
  - fix handling of ISDN LSZ Compresssion


author: Mike A. Harris <mharris@redhat.com> 6.55-1
changelog:
  - Removed process accounting stuff from rc.sysinit and halt scripts as it is
    now handled by the psacct initscript in the psacct package


author: Bill Nottingham <notting@redhat.com> 6.56-1
changelog:
  - use nameif for interfaces where we don't agree on HWADDR with the
    config file (<harald@redhat.com>)
  - LSB support tweaks


author: Bill Nottingham <notting@redhat.com> 6.62-1
changelog:
  - delete X/VNC locks on startup (#63035)
  - shut up DMA disabling, move it to after ide-scsi (#62873, #62956)
  - use full path to /sbin/ifconfig (#59457)
  - /sbin/service: change to root directory before staring/stopping;
    also sanitize environment


author: Bill Nottingham <notting@redhat.com> 6.63-1
changelog:
  - ipcalc cleanups (#58410)
  - quit stripping binaries
  - do LVM init after RAID init too (#63238)
  - export all locale variables (#56142)
  - run sysctl -p after network init as well


author: Bill Nottingham <notting@redhat.com> 6.64-1
changelog:
  - make sure chatdbg is set before using it (#63448, <Bertil@Askelid.com>)
  - allow tweaking of more devices with hdparm (#53511), and
    tweak non-disk devices iff they explicitly have a config file
    for that device (#56575, #63415)
  - some translation updates


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - start some sh coding cleanups
  - change to /etc/init.d/functions
  - eliminate some un-necessary PATH settings
  - eliminate some TEXTDOMAIN settings


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - rc.sysinit: do not load raid modules unless /etc/raidtab exists
  - many cleanups for more consistent shell programming and also
    many smaller speedups within network scripts, no un-necessary sourcing
    of files etc
  - nearly re-code /etc/rc.d/rc


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - allow an option for ups poweroff  #68123
  - change grep for ONBOOT=  #63903
  - allow building with a cross-compiler  #64362,#64255
  - faster check in network-functions:check_default_route()
  - better checks for backup files
  - drastically reduce the number of consoletype invocations
  - do not export "GATEWAY" in network-functions
  - code cleanups in rc.sysinit


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - /etc/init.d/functions:
    daemon(): avoid starting another bash
    killproc(): avoid starting another bash for the default case
  - do not call "insmod -p" before loading the "st" module


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - /sbin/service: set PATH before calling startup scripts
    HOME and TERM are also set during bootup, but they should not make
    a difference for well-written daemons.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - require /etc/redhat-release (#68903)
  - fix tty2-tty6 (sort of)
  - fix iptables invocations (#70807, #71201, #68368)
  - other minor tweaks


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't cycle through eth0-eth9 on dhcp link check (#68127)
  - don't retry indefinitely on ppp startup
  - activate network profile passed on kernel commandline via netprofile=
  - fix iptables invocations again
  - translation refresh


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't infinite loop on ifdown
  - remove disabling of DMA; this can cause problems
  - move swap startup to after LVM (#66588)


author: Bill Nottingham <notting@redhat.com> 6.96-1
changelog:
  - fix various static-routes brokeness (#74317, #74318, #74320, #76619,
    - fix handling of SYSFONTACM in setsysfont (#75662)
  - fix lang.csh for CJK (#76908, <ynakai@redhat.com>)
  - IPv6 update (<pekkas@netcore.fi>, <pb@bieringer.de>)
  - other minor tweaks


author: Bill Nottingham <notting@redhat.com> 6.97-1
changelog:
  - IPv6 update (<pekkas@netcore.fi>, <pb@bieringer.de>)
  - devlabel support (<Gary_Lerhaupt@Dell.com>)
  - do lazy NFS umounts


author: Bill Nottingham <notting@redhat.com> 7.00-1
changelog:
  - tweaks for potential GUI bootup
  - loop checking for network link state, don't unilterally wait five
    seconds


author: Bill Nottingham <notting@redhat.com> 7.03-1
changelog:
  - move system font setting sooner (<milan.kerslager@pslib.cz>)
  - fix link checking for dhcp, use both ethtool and mii-tool
  - fix CJK text on the console, and locale-archive held open
    on shutdown
  - IPv6 updates <pekkas@netcore.fi>, <pb@bieringer.de>
  - speedup tweaks (<drepper@redhat.com>)
  - use glib2 for ppp-watch (#78690, <kisch@mindless.com>)
  - add zeroconf route (#81738)
  - fix ifup-ppp for dial-on-demand, and onboot (<goeran@uddeborg.pp.se>)
  - tweak raidtab parsing, don't worry about not-in-fstab RAID devices
    (#71087, #78467, <aja@mit.edu>)
  - don't automatically bring up aliases if 'ONPARENT=no' is set (#78992)
  - getkey cleanups/tweaks (#76071, <ben@enchantedforest.org>)
  - rework halt_get_remaining (#76831, <michal@harddata.com>)
  - ipcalc: fix calculation of /32 addresses (#76646)
  - various other tweaks and fixes


author: Bill Nottingham <notting@redhat.com> 7.04-1
changelog:
  - tweak some translatable strings
  - fix for rc.sysinit on machines that pass arguments to mingetty
    (<nalin@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.07-1
changelog:
  - fix nicknames & profiles (#82246)
  - fix check_device_down (#83780, <pzb@datstacks.com>)
  - vlan fixes (<tis@foobar.fi>)
  - fix groff macros (#83531, <tsekine@sdri.co.jp>)
  - various updated translations
  - fix checkpid for multiple pids (#83401)


author: Bill Nottingham <notting@redhat.com> 7.08-1
changelog:
  - load keybdev & mousedev even if hid is already loaded/static
  - run fewer scripts through action (#49670, #75279, #81531)


author: Bill Nottingham <notting@redhat.com> 7.09-1
changelog:
  - initialize two ttys past # of mingettys (for GDM)
  - fix zeroconf route
  - redhat-config-network writes $NAME.route for some static routes
    (e.g., ppp); handle that (#84193)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - init.d/network: don't advertise "probe: true" in the header if we don't
    recognize "probe" as an argument


author: Karsten Hopp <karsten@redhat.de> 7.15-1
changelog:
  - Mainframe has no /dev/ttyX devices and no mingetty, don't
    initialize them. This gave error messages during startup


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - sysconfig/init.s390: set LOGLEVEL=3 as for other archs
  - rc.d/init.d/network, rc.d/rc: change confirmation mode to
    not use an environment variable
  - rc.d/init.d/functions: make strstr() even shorter, remove old
    "case" version that has been already commented out
  - rc.d/rc.sysinit:
    - no need to set NETWORKING=no, it is not used/exported
    - do not export BOOTUP
    - delete two "sleep 1" calls that wants to add time to go
      into confirmation mode. There is enough time to press a
      key anyway or use "confirm" in /proc/cmdline.
    - read /proc/cmdline into a variable
    - use strstr() to search in /proc/cmdline
    - add "forcefsck" as possible option in /proc/cmdline
    - while removing lock files, no need to call `basename`
    - add unamer=`uname -r` and reduce number of forks
    - do not fork new bash to create /var/log/ksyms.0


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - initscripts-s390.patch: remove not needed parts about PNP=
  - inittab.390: sync with normal version
  - rc.sysinit: remove two further calls to /sbin/consoletype with $CONSOLETYPE


author: Bill Nottingham <notting@redhat.com> 7.25-1
changelog:
  - fix DNS punching in the case of other rules for the DNS server
    (#97686, <martin@zepler.org>)
  - initlog, ppp-watch, and usernetctl tweaks (<linux_4ever@yahoo.com>)
  - fix grep for mingetty (#97188)
  - fix rhgb-client bad syntax
  - change network device searching, use correct naming, fix route issues
    (<harald@redhat.com>)
  - other random tweaks


author: Bill Nottingham <notting@redhat.com> 7.26-1
changelog:
  - ipsec support (see sysconfig.txt, ifup-ipsec)
  - read $CONFIG.keys, for non-world-readable keys
  - allow default window size for routes to be set with WINDOW= (#98112)
  - support setting device options with ethtool opts
  - fix s390 bootup spew (#98078)
  - support renaming interfaces with nameif based on hwaddr


author: Bill Nottingham <notting@redhat.com> 7.27-1
changelog:
  - add a check to consoletype for the current foreground console
  - use it when running unicode_start (#98753)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ifup-routes: pass the interface name to handle_file() so that we don't try
    to use the routes file's name as an interface name


author: Bill Nottingham <notting@redhat.com> 7.29-1
changelog:
  - setsysfont: don't echo to /dev/console (#102004)
  - fix ethernet device renaming deadlock (#101566)
  - consoletype: don't return 'vt' on vioconsole (#90465)
  - ifup: fix short-circuit (#101445)


author: Bill Nottingham <notting@redhat.com> 7.31-1
changelog:
  - fix bonding + dhcp (#91399)
  - fix typo (#103781)
  - sysconfig/network-scripts/ifup: fix use of local

  - fix shutdown with NFS root (#100556, <Julian.Blake@cern.ch>)
  - remove /var/run/confirm when done with /etc/rc (#100898)
  - ipcalc: fix some memory handling (#85478, <miked@ed.ac.uk>)
  - handle sorting > 10 network devices (#98209)
  - unset ONPARENT after use (#101384)
  - random other fixes
  - bridging support (<dwmw2@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.44-1
changelog:
  - NFSv4 support (<chucklever@bigfoot.com>, <steved@redhat.com>)
  - handle 2.6-style 'install ethX ...' lines correctly
  - mount sysfs by default
  - time to clean up the cruft. remove:
    - boot-time depmod
    - linking of /boot/System.map to /boot/System.map-`uname -r`
    - /var/log/ksyms.X
    - libredhat-kernel support


author: Bill Nottingham <notting@redhat.com> 7.47-1
changelog:
  - translation: catch more input strings (#106285, <mitr@volny.cz>)
  - remove autologin from prefdm (#108969)
  - return to rhgb after ./unconfigured (#109807, <jkeating@j2solutions.net>)
  - handle iso15 in setsysfont (#110243)
  - clean up samba & vmware in rc.sysinit (#113104)
  - some sysconfig.txt documentation (#110427, #118063)
  - fix bug in umount-on-halt (#113088, <giardina@airlab.elet.polimi.it>)
  - handle CIFS in netfs (#115691)
  - make sure hotplug isn't stuck unset (#116666, <aoliva@redhat.com>)
  - handle network fs better in rc.sysinit (#111290)
  - nomodules applies to usb/firewire too (#113278)
  - ipsec fix (#116922, <felipe_alfaro@linuxmail.org>)
  - make sure rc exits cleanly (#117827, <enrico.scholz@informatik.tu-chemnitz.de>)
  - fsck root FS from initrd, for dynamic majors (#117575, <sct@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.49-1
changelog:
  - use alsa for mixer saving in halt
  - don't umount /proc in halt (#118880)
  - various translation updates from translators


author: Bill Nottingham <notting@redhat.com> 7.50-1
changelog:
  - fix LVM issues in rc.sysinit (#120458, #119975)
  - deal with fixed racoon parser
  - translation updates from translators
  - fix USB loading (#120911)


author: Bill Nottingham <notting@redhat.com> 7.51-1
changelog:
  - get rid of LVM error when no volumes are defined (#121197)
  - fix selinux short-circuit test (#121143, <michal@harddata.com>)
  - /dev/mapper/control is a special file, check it accordingly (#121963)
  - support ETHTOOL_OPTS on bonding slaves (#119430, <hrunting@texas.net>)
  - handle multiple spaces correctly in rc.sysinit, network-functions
    (#118583, <pallas@kadan.cz>)
  - cleanup fd leaks, mem leaks, other bogosities
    (#119987, <linux_4ever@yahoo.com>)
  - rc.d/init.d/network: remove ipv6 bogosity (#114128)
  - translation updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix bridging confusing module order (#122848, <luto@myrealbox.com>)
  - rc.d/rc.sysinit: don't mount cifs (#122501)


author: Bill Nottingham <notting@redhat.com> 7.58-1
changelog:
  - rc.d/rc.sysinit: hack: make ICE directory on boot (#86480)
  - set devicetype for xDSL (#126194)
  - ignore locking failures when starting lvm volumes (#126192, <radu@primit.ro>)
  - unset LC_MESSAGES for rhgb (#126020, <ynakai@redhat.com>)
  - bonding fixes
  - setsysfont: remove error (#100559)
  - remove duplicate setting of network routes (#125450)
  - vlan fixes (#107504, <hrunting@texas.net>)
  - ifup-aliases: remove bogus route setting (#120908)


author: Bill Nottingham <notting@redhat.com> 7.59-1
changelog:
  - set context on ICE directory after making it (#127099, <concert@europe.com>)
  - don't mount GFS filesystems in rc.sysinit


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix bonding + no IP (#127285)
  - wrap second LVM initialization in vgscan check to avoid extraneous messages (#127639)


author: Bill Nottingham <notting@redhat.com> 7.62-1
changelog:
  - fix up resolv.conf munging (#129921)
  - use rngd if available
  - run start_udev if necessary (#120605)
  - readonly root updates (#129893, <markmc@redhat.com>)
  - ifup-wireless: quote key (#129930)
  - remove rawdevices (#130048)
  - handle binfmt_misc in rc.sysinit for the case where it's built in (#129954)
  - remove mkkerneldoth
  - don't remove linguas in lang.* (part of #9733)
  - fix nfs unmounting (#129765)
  - fix URL (#129433)


author: Jason Vas Dias <jvdias@redhat.com> 7.66-1
changelog:
  - Allow users to use generic /etc/dhclient.conf if per-device
  - /etc/dhclient-${DEVICE}.conf is non-existent or empty


author: Jason Vas Dias <jvdias@redhat.com> 7.67-1
changelog:
  - fix change_resolv_conf: if pre-existing /etc/resolv.conf
  - non-existent or empty, replace with new file contents.


author: Bill Nottingham <notting@redhat.com> 7.70-1
changelog:
  - autoload hardware modules on startup
  - minor fsck cleanup (#115028, <leonard-rh-bugzilla@den.ottolander.nl>)
  - ifup: support STP bridging (#123324)
  - rc.sysinit: do a SELinux relabel if forced
  - rc.sysinit: remove devfs compat and the remaining 2.4 compat
  - ifup-wireless: support multiple keys (#127957)
  - fix firmware loading (#129155, <bnocera@redhat.com>)


author: Jason Vas Dias <jvdias@redhat.com> 7.73-1
changelog:
  - Add support for running the DHCPv6 client to ifup
  - (new DHCPV6C=yes/no ifcfg-${IF} variable) + update sysconfig.txt


author: Bill Nottingham <notting@redhat.com> - 7.77-1
changelog:
  - mount usbfs (#131347)
  - start any automatic raid devices
  - remove triggers for ancient releases, bulletproof remaining ones (#131356)


author: Dan Walsh <dwalshg@redhat.com> - 7.78-2
changelog:
  - fix setting SELinux contexts on udev-created-in-initrd devices
  - Let restorecon check if selinux is enabled.


author: Bill Nottingham <notting@redhat.com> - 7.82-1
changelog:
  - fix handling of nonexistent devices (#132839)
  - rhgb enhancements (<veillard@redhat.com>, #132665)
  - initscripts.spec: require nash (#132513)
  - translation updates


author: Bill Nottingham <notting@redhat.com> - 7.85-1
changelog:
  - ifup, network-functions: fix worked-by-accident shell quoting
  - lang.csh: remove setting of dspmbyte (#89549, <mitr@redhat.com>)
  - SELinux fixes
  - clean up prefdm
  - init.d/functions: export LC_MESSAGES (#133786)
  - allow daemon to coredump if requested (#130175)
  - network-functions: be more liberal in what we accept for link types (#90602, #127984)
  - fix overzealousness with -range aliases (#65415)
  - rc.sysinit: use s-c-keyboard, not kbdconfig (#133929)
  - fix checkpid logic, clean up potential errors (#134030)
  - translation updates


author: Bill Nottingham <notting@redhat.com> - 7.86-1
changelog:
  - use /etc/hotplug/blacklist to blacklist modules in hardware init (#132719)
  - filter indic locales on the console (#134198)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - use runuser instead of su; require it
  - init.d/halt: use right file name for random seed (#134432)


author: Bill Nottingham <notting@redhat.com> 7.91-1
changelog:
  - rc.d/rc.sysinit: remove devlabel call
  - mdadm support, now that raidtools is gone (#126636, #88785)
  - call ipv6to4 scripts in /etc/ppp/(ip-up|ip-down) (#124390, <dwmw2@redhat.com>)
  - cleanup a couple of nits that could affect bug #134754
  - make sure we return to rhgb after fsck (#133966, #112839, #134449)
  - automatically reboot when fsck calls for it, instead of requiring
    manual intervention (#117641 and duplicates)
  - ifup-wireless: fix key for open vs. restricted (#135235, <dax@gurulabs.com>)
  - translation updates


author: Bill Nottingham <notting@redhat.com> 7.93.2-1
changelog:
  - fix prefdm fallback to installed display managers (#137274)
  - fix incorrect rhgb temporary path (#137391)


author: Florian La Roche <laroche@redhat.com>
changelog:
  - /etc/rc.d/rc: use "LC_ALL=C grep" for small speedup
  - /etc/rc.d/rc.sysinit:
    - do not read udev.conf, this seems to be all in the start_udev script
    - fix detection of "nomodules" kernel command line option
    - read /proc/cmdline earlier and convert rhgb to use that, too
    - load_module(): change redirection to /dev/null
    - some checks for RHGB_STARTED="" looked strange
  - /etc/sysconfig/network-scripts/ifup-ppp:
    - remove a call to basename with shell builtins
  - /etc/sysconfig/network-scripts/network-functions:
    - remove some calls to basename/sed with shell builtins


author: Bill Nottingham <notting@redhat.com>
changelog:
  - take an axe to rc.sysinit:
    - remove delay on unclean startup
    - remove hdparm code
    - remove LVM1 code
    - remove old raidtab code in favor of mdadm
    - remove support for old isapnp tools
    - move all block device mangling before fsck. run fsck *once*, not twice
    - some more LC_ALL=C stuff


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix check_link_down to still check negotiation if link is
    listed as "up" on entering (#110164, <dbaron@dbaron.org>)


author: Bill Nottingham <notting@redhat.com> 7.98-1
changelog:
  - various kmodule speedups
  - rc.d/init.d/netfs: don't mount GFS (#140281)
  - fix various minilogd bogosities (#106338)


author: Bill Nottingham <notting@redhat.com> 8.02-1
changelog:
  - remove initlog, minilogd
  - add a flag to kmodule for use with kudzu's socket mode, use it
  - change setting of IPv6 default route (#142308, <pb@bieringer.de>)
  - netfs: don't unmount NFS root FS (#142169)


author: Bill Nottingham <notting@redhat.com> 8.03-1
changelog:
  - use udevsend to handle hotplug events (requires recent udev)
  - remove pump, dhcpcd support
  - fix ONxxx (#136531, <cww@redhat.com>)
  - fix various fgreps to not catch commented lines (#136531, expanded
    from <cww@redhat.com>)
  - set ETHTOOL_OPTS on addressless devices (#144682, <mpoole@redhat.com>)
  - kill dhcp client even if BOOTOPROTO is now static (#127726, others)
  - replace the use of route/ifconfig with ip in IPv6 code, remove support
    for ipv6calc (<pb@bierenger.de>, <pekkas@netcore.fi>)
  - fix quoting in daemon() (#144634)
  - make sysctl be silent (#144483)


author: Bill Nottingham <notting@redhat.com> 8.04-1
changelog:
  - split out ifup/ifdown general case to ifup/ifdown-eth;
    add ifup/ifdown-bnep (<dwmw2@redhat.com>)
  - ifup-ipsec: add fwd policies (#145507)
  - fix multiple scsi_hostadapter loads (#145432)
  - enable syncookies in sysctl.conf (#145201)


author: Bill Nottingham <notting@redhat.com> 8.05-1
changelog:
  - ipv6 cleanups (<pb@bieringer.de>)
  - rc.sysinit: fix rngd check (#130350)
    ... then turn it off entirely
  - rc.sysinit: get rid of duplicate date printout (#149795)
  - ifdown: handle being called on down devices better
  - handle saved resolv.conf on all device types
  - fix network-functions cleanup
  - netfs: fix _netdev unmounting (#147610, <alewis@redhat.com>)
  - dhcp release cleanups (<jvdias@redhat.com>)
  - ifup-bnep: bluetooth update <dwmw2@infradead.org>
  - more ipsec stuff (#147001, <ckjohnson@gwi.net>)


author: Bill Nottingham <notting@redhat.com> 8.06-1
changelog:
  - handle alternate VLAN naming schemes (#115001, <kas@informatics.muni.cz>)
  - ifup-ipsec: handle non-ascii keys (#150552)
  - add proper ipsec route (#146169, #140654)
  - add a restorecon for /tmp to rc.sysinit
  - document ONHOTPLUG in sysconfig.txt
  - fix mistranslation (#151120)
  - don't return 1 for stopping a process if it isn't running at all
  - don't explicitly set fwd polices for ipsec traffic. Let setkey
    handle it.


author: Bill Nottingham <notting@redhat.com> 8.08-1
changelog:
  - update translation base
  - automatically send hostname for DHCP if it's available and not
    overridden (#149667)
  - load user-defined module scripts from /etc/sysconfig/modules at
    boot (#123927)
  - halt: reverse sort the mount list, avoiding errors
    (#147254, <jamesodhunt@hotmail.com>)
  - ifup-wireless: add SECURITYMODE (#145407)
  - network-functions: don't error out if hotplug doesn't exist (#140008)
  - ifup: always return errors on trying to bring up nonexistent devices (#131461)
  - ifup: fix error message (#143674)
  - rc.sysinit: add a autorelabel boot target (#154496)
  - prefdm: if something else is specified as $DISPLAYMANAGER, try that (#147304)
  - remove support for the old firewall type
  - network: optimize some (#138557, <drepper@redhat.com>)
  - prefdm: fix prefdm arg handling (#154312, <khc@pm.waw.pl>)
  - gdm early-login support (adapted from <rstrode@redhat.com>)
  - ifup-routes: make sure commented lines are handled correctly (#154353,
    - some sysconfig.txt updates (<link@pobox.com>, <jvdias@redhat.com>)
  - rc.sysinit: fix restorecon invocation (#153100)
  - initlog: free some of the more egregious memory leaks (#85935)
  - initlog: fix potential memory overread (#153685, <in-redhat@baka.org>)
  - remove some conflicts, %post scripts, etc. that were only relelvant
    for upgrades from pre-7.0
  - other minor fixes, see ChangeLog


author: Bill Nottingham <notting@redhat.com> 8.09-1
changelog:
  - rc.sysinit: clean up screen sockets (#155969)
  - functions: use pidof -c in various functions
  - ifup-ppp: fix static routes with ppp demand dialing (#20142,
    <ohrn+redhat@chalmers.se>)
  - add btmp support (#155537)
  - don't send dhcp hostname (revert of fix for #149667)
  - more early-login modifications (<mclasen@redhat.com>)
  - functions: fix echo (#155270)


author: Bill Nottingham <notting@redhat.com> 8.11-1
changelog:
  - fix mis-bringup of interfaces due to accidentally matched HWADDR
    (a.k.a. ONBOOT=no not working) (#153669, #157252)
  - support automatic relabeling later if rebooted w/o SELinux
    (<dwalsh@redhat.com>)
  - rc.sysinit: fix fixfiles invocation (#157182)
  - btmp should be 0600 (#156900)
  - translation updates: fr, bg, ru, mk, pa, es


author: Bill Nottingham <notting@redhat.com> 8.12-1
changelog:
  - ifup-eth: fix interface renaming (#158774)
  - rc.sysinit: use modprobe, not insmod (#159120, <tmus@tmus.dk>)
  - remove workaround for the fonts-not-initialized-on-secondary-consoles
    problem (fixed in 2.6.12-rc4 and later)
  - setsysfont: correctly bracket systfontacm (#159706)
  - rc.sysinit: always use udevsend, even if no modules (#160987)
  - ifdown-aliases: add 'cd' to the proper dir (#161170)
  - add diskdump restore support (<tuchida@redhat.com>),
    conflict with appropriate diskdumputils
  - rc.sysinit: dmraid/multipath support
    - remove LVM1 support
  - init.d/functions: handle odd quoting in args (#161316, <stransky@redhat.com>)
  - ifup-wireless: set rate in quotes (#163123)
  - handle lvm & fsck for network block devices (#148764,
    <alewis@redhat.com>)
  - initlog: fix invalid free calls,  (#165033), (#163973,<dwalsh@redhat.com>)
  - sysconfig.txt: remove hdparm docs, since the code isn't there (#162962)
  - updated translations: ms, ja, ko, et, zh_CN, zh_TW, sr, ar


author: Bill Nottingham <notting@redhat.com>
changelog:
  - kmodule: don't probe for uninteresting devices. speeds things up
  - network-functions: deal with broken networks better (#168947)
  - rc.sysinit: automatically reboot if labels are really out of date
    (<dwalsh@redhat.com>)
  - network-functions: throw out nameif error messages
  - rc.sysinit: use multipath.static (#168321)
  - rc.sysinit: use ignorelocking (#168195)


author: Bill Nottingham <notting@redhat.com> 8.17-1
changelog:
  - make sure corefile limiting works for user processes as well
    (#166511, <ville.skytta@iki.fi>)
  - ifup-routes: handle no EOF in the route file (#156972)
  - rc.sysinit: tweak mesage (#156972)
  - ifdown-eth: clean up error message (#135167)
  - rc.sysinit: call kpartx on multipath devices (#160227)
  - ifup-eth: move wireless options before bridge options (#122801)
  - ifup-wireless: silence error (#90601)
  - init.d/functions: change translated string (#54682)


author: Bill Nottingham <notting@redhat.com> 8.19-1
changelog:
  - Require syslog, for alternate implementations thereof (#172885)
  - Fix fsck invocation for weeding out netdev devices (#175803)


author: Bill Nottingham <notting@redhat.com> 8.21-1
changelog:
  - move handling of network hotplug events here, add appropriate udev
    rules, obsolete hotplug
  - get rid of some path lookups (#178321, <mclasen@redhat.com>)
  - get hwaddrs from sysfs as opposed to ip | sed
  - translation updates
  - lang.sh: don't run unicode_start for subshells (#176832)
  - halt: ignore sysfs but not /sys<otherstuff> (#177612, <bnocera@redhat.com>)
  - add service(8) man page (#44857) <mitr@redhat.com>


author: Bill Nottingham <notting@redhat.com> 8.22-1
changelog:
  - remove references to /usr/X11R6/bin (#177938)
  - rc.sysinit: fix SELinux message formatting (#178532)
  - rc.sysinit: clean cvs as well (#178539, <ville.skytta@iki.fi>)
  - init.d/halt: move halt.local so that it runs before /  is remounted r/o (#179314)
  - rc.sysinit: don't activate already active dmraids (<pjones@redhat.com>)
  - rc.sysinit: don't mount usbfs, libusb no longer uses it
  - init.d/functions: Add -p to status() (#134363, <mitr@redhat.com>)
  - init.d/functions: Separate /var/run/*.pid handling and pidof calls
    to private functions (#63440, <mitr@redhat.com>)
  - init.d/functions: update for current LSB, including -p pidfile
    (#99325, #134363, <mitr@redhat.com>, <tobias.burnus@physik.fu-berlin.de>)
  - getkey: various cleanups, add man page (#54481, <mitr@redhat.com>)
  - lang.sh: don't always call consoletype (<laroche@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.26-1
changelog:
  - revert "rc.sysinit: don't mount usbfs, libusb no longer uses it" change
  - add some ugly hacks to make sure net hotplug doesn't run after unclean
    shutdown (#177795)
  - don't mount /sys and /proc in rc.sysinit - the initrd already does
    (<pjones@redhat.com>)
  - halt: try to unmount tmpfs filesystems before swapoff (#174000,
    <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.27-1
changelog:
  - translation updates
  - lang.sh: revert fix for #176832, it's broken
  - ifup-aliases fixes (<pjones@redhat.com>,<mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.28-1
changelog:
  - kill nash-hotplug before starting udev (<pjones@redhat.com>)
  - silence warnings on /dev/pts remount (<pjones@redhat.com>)
  - more translation updates


author: Bill Nottingham <notting@redhat.com> 8.30-1
changelog:
  - hotplug: don't cause modules to be reloaded on ifdown/rmmod (#179809)
  - fix endless loops in ifup/ifdown (#177792, #182466)
  - fix enabling of enforcing SELinux mode after relabel (#181893)
  - remove debugging code from ifup-bnep
  - add /proc, /sys mounting back to rc.sysinit
    Note: booting without an initrd is deprecated
  - translation updates


author: Bill Nottingham <notting@redhat.com> 8.32-1
changelog:
  - netfs: fix redirect (#187505)
  - rc.sysinit add forcequotacheck (#168118, <mitr@redhat.com>)
  - functions/pidof: various fixes (#182623, others <mitr@redhat.com>)
  - add support for DHCP on bridges (#125259, <mitr@redhat.com>,
    anders@kaseorg.com>)
  - rc.sysinit: use pidof, not killall (#185429, <pjones@redhat.com>)
  - ppp fixes (#129195, #163950, #92023, <mitr@redhat.com>, <avi@argo.co.il>)
  - ifup/ifdown: unset $WINDOW (#174336, <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.33-1
changelog:
  - support for readonly root
  - rc.sysinit: remove call to zfcpconf.sh - that should be udev rules
  - ifup*: add NETWORKDELAY and LINKDELAY (#176851, <mitr@redhat.com>)
  - rc.sysinit: remove obsolete initrd code (<pjones@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.34-1
changelog:
  - link glib2 dynamically now that it's in /lib, conflict with older
    versions
  - handle cups specially when cleaning /var (#189168)
  - remove ifdown-aliases (<mitr@redhat.com>)
  - ifup-ipsec: fix key handling when only one of AH or ESP is used
    (#166257, <mituc@iasi.rdsnet.ro>)
  - IPv6 updates, including RFC 3041 support (<pb@bieringer.de>)
  - routing fixes, add METRIC support for default routes (#124045, <mitr@redhat.com>)
  - fix handling of mount points with white space (#186713, <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.35-1
changelog:
  - readonly root enhancments (modified from <law@redhat.com>, #193164)
  - encrypted swap, non-root filesystem support (#127378, <mitr@redhat.com, <redhat@flyn.org>)
  - clarify killproc usage (#193711, <mitr@redhat.com>)
  - document BRIDGE= (#192576, <mitr@redhat.com>)
  - rc.sysinit: allow for sulogin instead of automatic relabeling (<dwalsh@rehdat.com>)


author: Bill Nottingham <notting@redhat.com> 8.36-1
changelog:
  - rework automatic swapon - only run if AUTOSWAP=yes, and fix errors
    (#198695, #196179, #196208)
  - redo single so it starts last in runlevel 1, and doesn't kill/start
    services itself
  - add configurable delay for killproc() (#198429, <jorton@redhat.com>)
  - fix loop in rename_device (#199242, <markmc@redhat.com>)
  - rc.sysinit: stateless updates (#197972, <law@redhat.com>)
  - support for copying dhcp leases from initramfs (#198601, <markmc@redhat.com>)
  - readonly-root: SELinux works now in the kernel, allow it
  - init.d/network: don't bring down network if root is on a network device
  - init.d/halt: don't use -i to halt; causes problems with iscsi
  - add support for routing rule-$device (#132252, <mitr@redhat.com>)
  - fix rhgb output (#192604, <tonynelson@georgeanelson.com>)
  - fix crypttab options for LUKS (#197656, <mitr@redhat.com>)
  - ipsec: various fixes & new features (#150682, #168972, <mitr@redhat.com>, <alex@milivojevic.org>)
  - ipsec: add check for IKE_METHOD (#197576, <john_smyth@mail.ru>)
  - rename_device: ignore alias devices, fix race (#186355)
  - ifup/ifdown: don't mark as %config
  - rwtab: some additions/cleanup


author: Bill Nottingham <notting@redhat.com> 8.38-1
changelog:
  - translation updates
  - bring down bonding slaves on ifdown (#199706)
  - support LINKDELAY for dhcp (#191137)
  - netfs: run multipath on netdev devices (#180977)
  - halt: use /proc/mounts instead of /etc/mtab (#198426, <mitr@redhat.com>)
  - rc.sysinit: fix getkey race (#191453, <mitr@redhat.com>)
  - spec cleanups (#188614, <kloczek@rudy.mif.pg.gda.pl>)
  - support aliases on vlan (#193133, <mitr@redhat.com>)
  - clean up ifcfg file handling (<mitr@redhat.com>, <michal@harddata.com>)
  - GRE and IPIP tunnel support (#168990, <mitr@redhat.com>,
    <razvan.vilt@linux360.ro>, <aaron.hope@unh.edu>, <sean@enertronllc.com>)
  - rc.sysinit: don't format encrypted swap always (#127378)
  - don't try to add routes to alias devices (#199825, #195656)


author: Bill Nottingham <notting@redhat.com> 8.39-1
changelog:
  - translation updates
  - Handle partitions on multipath/dmraid better (<pjones@redhat.com>)
  - make /dev/mapper/control ourselves (<pjones@redhat.com>)
  - init.d/network: simplify 'status' call
  - fix actual 169.254 networks (#203591)
  - rc.sysinit: don't run vgscan (#191879)
  - init.d/halt: don't umount /dev/root<foo> (<oblin@mandriva.com>)
  - rc.sysinit: catch more dmraid errors (#200683)
  - support 'tmp' option in /etc/crypttab (#201382, <mitr@redhat.com>,
    <lv@lekv.de>)
  - IPv6 updates (<pb@bieringer.de>, includes a fix for #143452)


author: Bill Nottingham <notting@redhat.com> 8.40-1
changelog:
  - translation updates
  - rename_device: use '__tmpXXXX' instead of 'devXXXX' as a temporary device
    name to avoid any realistic namespace clashes
  - rc.sysinit: set default affinity if specified on commandline (#203359)
  - always pass path to '.' (#206035)
  - run setsysfont, loadkeys always when /dev/tty{0,1} exist (#150769)
  - allow going to a shell when system is shut down cleanly (from <dwalsh@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.41-1
changelog:
  - fix network ipv6 hang (#207137, others)
  - rc.sysinit: change blkid.tab path to /etc/blkid/blkid.tab
  - rename_device: reset DEVPATH also when renaming (#206884, <phil@fifi.org>)
  - sysconfig.txt: clarify onboot/onparent usage


author: Bill Nottingham <notting@redhat.com> 8.42-1
changelog:
  - run rc.sysinit, /etc/rc in monitor mode (part of #184340)
  - use a better check for 'native' services (#190989, #110761, adapted
    from <matthias@rpmforge.net>)


author: Bill Nottingham <notting@redhat.com> 8.43-1
changelog:
  - move ccwgroup initialization to a udev rule (should fix #199139,
    - init.d/functions: don't write to gdmfifo
  - remove unused-since-RHL-7 consolechars code, update docs (#206106)
  - stateless updates (#206331, <law@redhat.com>)
  - translation updates (el, ms, hr, sl)


author: Bill Nottingham <notting@redhat.com> 8.44-1
changelog:
  - separate tmpfs-usage for state from readonly-root
  - set keymap correctly in non-utf8 locale (#167363)
  - setsysfont: run unicode_stop if in non-unicode locale
  - lang.csh/lang.sh: set iutf8 if appropriate (#186961)
  - lang.csh/lang.sh: handle non-utf8 locales correctly (#200100)
  - rc.sysinit: redirect stderr from setsysfont (#209204, indirectly)
  - rwtab: fix iscsi file location (#208864)
  - translation updates: el, da, as, or
  - fix stateless updates (#206331, <law@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.45-1
changelog:
  - lang.csh/lang.sh - do *not* stty iutf8; too much chaos with SIGTTOU
    (reverts: #186961; fixes #209469)
  - translation updates: ms


author: Bill Nottingham <notting@redhat.com> 8.46-1
changelog:
  - ifup-eth: restorecon on moved lease file
  - rc.sysinit: handle "nodmraid" and "nompath" command line options (#209377, <pjones@redhat.com>)
  - revert early-login support (#210836, essentially)
  - blacklist CJKI on the virtual console (#120819)
  - rc.sysinit: use dmraid.static (#211297)
  - use sysfs interface for bonding (#202443, <agospoda@redhat.com>)
  - use /etc/statetab, /etc/statetab.d for local state (#211839, <markmc@redhat.com>)
  - fix or_IN and similar locales (#212219)
  - use SUBCHANNELS as the primary key for s390 network devices (#204803)
  - translation updates


author: Bill Nottingham <notting@redhat.com> 8.47-1
changelog:
  - lang.{sh,csh}: handle sinhalese as well in CJKI clauses (#212438)
  - rc.sysinit: add '--auto=yes' to mdadm invocation (#213671)
  - rename_device: fix incorrect handling of .bak files
  - mount tmpfs with -n (#213132)
  - various SUBCHANNELS related s390 fixage (#204803)
  - lang.{sh,csh}: support iso-8859-8 (#212738, <matan@svgalib.org>)


author: Bill Nottingham <notting@redhat.com> 8.48-1
changelog:
  - add a step to rename any temporarily renamed devices (#208740, #214817)
  - make sure network modules don't get accidentally reloaded (#211474)
  - rc.sysinit: fix dmraid test (#216334)
  - init.d/halt: don't unmount network filesystems
  - ipsec: Add a way to manually manage racoon.conf (#159343, <mitr@redhat.com>)
  - sysconfig.txt: Document ~/.i18n (#199323, <mitr@redhat.com>)
  - some translation updates


author: Bill Nottingham <notting@redhat.com> 8.49-1
changelog:
  - rc.sysinit: remove raidautorn (#219226)
  - ifup-eth: set MACADDR, MTU before initializing bonding slaves, etc (#218792)
  - translation updates: mr, ms, hi, te, ml


author: Bill Nottingham <notting@redhat.com> 8.50-1
changelog:
  - lang.csh, lang.sh: if $LANG is set, don't override it (#229102)
  - initlog.1: fix man page formatting (<esr@thyrsus.com>)
  - network-functions: simplify bonding test (#215887, <herbert.xu@redhat.com>)
  - fix ifup-post when lookup fails (#220318, <hiroshi.fujishima+redhat@gmail.com>)
  - add bridging docs (#221412, <markmc@redhat.com>)
  - release bonding slaves properly (#220525)
  - fix ppp-watch with ONBOOT=yes (#216749)
  - support VLAN_PLUS_VID_NO_PAD (#222975, #223011)
  - remove NETWORKING_IPV6; to disable, use a modprobe rule
  - translation updates: ms, de, el, pt_BR, fi, bs, sr, it, ko


author: Bill Nottingham <notting@redhat.com> 8.51-1
changelog:
  - fix 'Fedora Fedora' in rc.sysinit
  - halt: use kexec -x to not shut down network (#223932, <mchristi@redhat.com>)
  - network_functions: fix is_bonding_device logic (#229643)
  - translation updates: nb


author: Bill Nottingham <notting@redhat.com> 8.52-1
changelog:
  - lang.sh: fix locales where SYSFONT is not the default (#229996)
  - ifup-wireless: properly quote arguments (#234756)
  - readonly-root: add options for mounting state (#234916)
  - rwtab: updates (#219339, <law@redhat.com>)
  - add netconsole init script (#235952)
  - disable link checking when PERSISTENT_DHCLIENT is set (#234075)
  - restore file context on /etc/resolv.conf (#230776, <dwalsh@redhat.com>)
  - ifup-post: only use the first address (#230157, <michal@harddata.com>)
  - ifup-ipsec: allow overriding of my_identifier (#229343, <cmadams@hiwaay.net>)
  - ifup-wireless: set link up before itweaking wireless parameters (#228253)
  - rc.sysinit: restorecon on mount points when relabeling (#220322)
  - init.ipv6-global: cleanup & optimize sysctl usage (#217595)
  - ifup-eth: support ETHTOOL_OPTS on bridge devices (#208043, <bbaetz@acm.org>)
  - network-functions-ipv6: as we don't use NETWORKING_IPV6, silence errors (#195845)
  - fix description (#229919)
  - translation updates


author: Bill Nottingham <notting@redhat.com> 8.53-1
changelog:
  - init.d/halt: use sound saving wrapper from alsa-utils, conflict with
    older versions (#236916)
  - usernetctl: drop user gid (#229372)
  - translation updates: ta, pt_BR, nb, as, hi, de


author: Bill Nottingham <notting@redhat.com> 8.54-1
changelog:
  - translation updates: as, bg, cs, ja, ms
  - redirect bogus errors from cryptsetup to /dev/null <karsten@redhat.com>


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - avoid calling unicode_start unnecessarily often during startup/shutdown which
    causes certain monitor/video card combos to flicker heavily (#237839)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add /etc/networks (#239602)
  - rc.sysinit: fix quotacheck, remove obsolete convertquota (#249003, <tometzky@batory.org.pl>)
  - rc.sysinit: add gfs2 to the 'don't mount here' list (#248985)
  - netfs: check for rpcbind, not portmap (#245595)
  - ifup-eth: set 'primary' later for bonding devices (#236897, <agospoda@redhat.com>)
  - translation updates: cy, en_GB, mk, ml, ms, pl, sk, ta, zh_CN


author: Bill Nottingham <notting@redhat.com> - 8.56-1
changelog:
  - rename_device: fix open() call
  - rc.sysinit: optimize out some excess greps (<harald@redhat.com>)
  - halt: support newer nut syntax, conflict with old versions (#252973, <tsmetana@redhat.com>)
  - fix buildreq from popt -> popt-devel
   - newer popt is in /lib|/lib64 - require it, and link dynamically
  - rc.sysinit: added support for cryptsetup-uuids (bug #242078, <harald@redhat.com>)
  - netconsole: fix status(), assorted other cleanups
  - translation updates: fr, ro, sk


author: Bill Nottingham <notting@redhat.com> - 8.57-1
changelog:
  - work around upstream bash changes (#220087, modified from <nvigier@mandriva.com>)
  - init.d/network: add Should-Start for firewall services
  - ifup-eth: handle arp_ip_target separately (#288151, <agospoda@redhat.com>)
  - rc.sysinit: remove rc.serial support - should be udev rules
  - rc.sysinit: remove acpi module loading - now supported by the kernel automatically
  - fix en_GB translation (#271201)
  - translation updates: as, bn_IN, bg, ca, cs, de, el, es, fi, gu, hi, it, ja, ko, kn, ml,
    mr, nb, nl, pa, pl, pt, pt_BR, ro, sl, sr, sr@Latn, sv, ta, te, zh_CN


author: Bill Nottingham <notting@redhat.com> - 8.58-1
changelog:
  - revert kernel conflict so that xen can still work (#319401)
  - rename_device, 60-net.rules: only suggest an interface name (part of #264901)
  - require newer udev for persistent net rules (part of #264901)
  - don't hang if someone puts a dangling pipe in /etc/rhgb/temp (#251219)
  - genhostid: fix for 64-bit systems (#306811)
  - more bash matching fixes (#220087)
  - translation updates: is, nb


author: Bill Nottingham <notting@redhat.com> - 8.59-1
changelog:
  - rc.sysinit: fix rhgb check
  - prefdm: add wdm section (#248087)
  - init.d/functions, halt: clean up some extraneous delays (#219816)
  - ifup-wireless: set mode before bringing link up (#254046, <linville@redhat.com>)
  - translation updates: pt_BR, hr


author: Bill Nottingham <notting@redhat.com> - 8.61-1
changelog:
  - use lvm, not lvm.static (#429222)
  - ifup-eth: don't do something odd if we find a mac address that
    matches the user-set MACADDR (#251415)
  - rc.sysinit: fix root fs check to catch 'rw,ordered,noatime,etc.' properly
    (#334171)
  - rc.sysinit: Use proper invocations for authconfig, system-config-network
    (#426372, #428202)
  - service: handle unreadable scripts (#427767)
  - initscripts.spec: add requirements for stateless
  - fix perms on /etc/profile.d (#407531, <ville.skytta@iki.fi>)
  - rename_device: handle quoted HWADDR, etc. in ifcfg scripts (#351291)
  - minor stateless fixes
  - Makefile cleanups (from OLPC, <cscott@cscott.net>)
  - translation updates: fr, ru, nb
  - don't endelessly loop on ifdown (#390271)
  - rc.sysinit: - fix encrypted swap partitions with random key
    (<harald@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 8.63-1
changelog:
  - don't start RAID arrays in rc.sysinit, that's done by udev (corollary of #429604)
  - add a NetworkManager-dispatcher script that does netreport on interface changes
  - use udev rules to set the clock, avoiding issues with modular rtcs (#290731)


author: Bill Nottingham <notting@redhat.com> - 8.64-1
changelog:
  - Add a console_init udev helper to do console initialization
  - add /sbin/pidof requirement (#434863)


author: Bill Nottingham <notting@redhat.com> - 8.65-1
changelog:
  - Add a serial console udev/upstart handler (#434764, indirectly)
  - Add some upstart notification for sysv scripts (modified from <cjdahlin@ncsu.edu>, #431231)
  - Handle _rnetdev correctly (#435358, <pjones@redhat.com>)
  - various minor speedups (<arjan@infradead.org>)
  - translation updates: el, fr
  - disable network by default, in favor of NetworkManager


author: Bill Nottingham <notting@redhat.com> - 8.68-1
changelog:
  - netfs: umount 'ncp' filesystems as well (#437117)
  - improve performance of s390 ccw rules (#437110, <mernst@de.ibm.com>)
  - fix consoletype environment leak (#439546)
  - ifdown-eth: make sure NEWCONFIG exists before grepping for it (#390271, continued)
  - console_check: always open with NONBLOCK, clear the serial structs first,
    handle non-16550 ports (<dwmw2@infradead.org>)
  - halt: don't use /etc/sysconfig/clock (#438337)
  - ifup: don't attempt to re-enslave already-enslaved devices (#440077)
  - netfs: run as a NetworkManagerDispatcher script (#439242)
  - netfs: remove $local_fs from the list of provides (making it implicitly provided
    by booting)
  - serial: add a crude hack to wait for runlevels to finish (#437379)
  - serial: frob /etc/securetty when necessary (#437381)
  - add a upstart-specific inittab
  - translation updates: as, bn_IN, cs, de, es, fi, fr, gu, hi, it, ja, kn, ml, mr, nb,
    nl, pa, pl, pt_BR, ru, sk, sr, ta, te, zh_CN


author: Bill Nottingham <notting@redhat.com> - 8.69-1
changelog:
  - Bring up lo whenever it shows up, not just in network/NM
  - fix shutdown-related oddities (#438444)
  - translation updates: el, sr, sr@latin, sv


author: Bill Nottingham <notting@redhat.com> - 8.70-1
changelog:
  - find is now in /bin. Use it. (#192991, #239914, #244941, #442178)
  - require event-compat-sysv for now (#442291)
  - fix serial event to wait properly
  - handle encrypted LVs properly (#441728)
  - add a sit tunnel type (#441635)
  - translation updates: ru


author: Bill Nottingham <notting@redhat.com> - 8.71-1
changelog:
  - adjust to gdm using LANG instead of GDM_LANG (#372151, <rstrode@redhat.com>)
  - rework netfs' check for networking availability to properly handle both network
    and NetworkManager


author: Bill Nottingham <notting@redhat.com> - 8.73-1
changelog:
  - move event-compat-sysv events here, obsolete it
  - fix ctrl-alt-del during rc.sysinit (#444050)
  - fix 'telinit X' from single-user mode (#444001)


author: Bill Nottingham <notting@redhat.com> - 8.74-1
changelog:
  - use full path to /sbin/ip in NetworkManagerDispatcher script (#444378)
  - lang.{sh,csh}: read only user customization if LANG is already set (#372151)


author: Bill Nottingham <notting@redhat.com> - 8.77-1
changelog:
  - NMDispatcher/05-netfs: fix check for default route (#445509)
  - service: don't set $LANG, rely on it to inherit from system locales (#422141)
  - init.d/functions: fix resolve_dm_raid() for older dmraid configs
  - Don't unmount sysfs in halt. (#446292)
  - rc.sysinit: don't try to startup crypto if we can't find the device
  - rc.sysinit: don't echo crypto stuff unless we're actually *doing* something
  - ifup: don't try to rename devices - udev rules are the way to go
  - rc.sysinit: fix typo, and don't restorecon on swap, etc. partitions (#448886)
  - set MALLOC_CHECK_ & MALLOC_PERTURB_ if configured (<pjones@redhat.com>)
  - console_init: support SYSFONTACM correctly, and support UNIMAP (#448704,
    <vvv+fedora@colocall.net>)
  - don't export GRAPHICAL - plymouth is for all modes. also, don't start rhgb
  - fix clock rules to properly handle old-style RTC devices (#447019)
  - translation updates: ko, or, pl


author: Bill Nottingham <notting@redhat.com> - 8.79-1
changelog:
  - fix mcheck stuff to be installed correctly
  - don't do an arping check for loopback interfaces
  - console_init: don't wait (<arjan@infradead.org>)
  - rc: clean up extraneous set -x noise
  - remove references to static dmraid/multipath binaries (#453987)
  - translation updates: lv


author: Bill Nottingham <notting@redhat.com> - 8.80-1
changelog:
  - Fix translation typo (#455804, <ruslanpisarev@gmail.com>)
  - Turn off syncookies
  - Cleanups for proper plymouth support
  - Move the mcheck code to a debugmode package, make it more generic


author: Bill Nottingham <notting@redhat.com> - 8.81-1
changelog:
  - rc.sysinit: Don't use -L in find (#458652, #458504, CVE-2008-3524)
  - ifup: kill more code from loopback bringup


author: Bill Nottingham <notting@redhat.com> - 8.82-1
changelog:
  - refresh translation strings
  - plymouth updates. (#460702, <rstrode@redhat.com>)
  - translation updates: fi, lv, no
  - remove duplicate dependency (#465182)
  - ifup-eth: Change how we set the zeroconf route. (#239609)
  - ifup*: Use 0.0.0.0/0, not 0/0. (#460580)


author: Bill Nottingham <notting@redhat.com> - 8.83-1
changelog:
  - various merge review fixes (#225900)
    Notably: init scripts/network scripts are no longer %config
  - remove some extraneous device-mapper initialization
  - use pidfile in status before calling pidof (#463205)
  - use plymouth directly, not the rhgb-client wrapper
  - move bridging after bonding (#449950, <djuran@redhat.com>)
  - use alsactl to save sound settings. (#462677, <jkysela@redhat.com>)
  - quit plymouth differently (<rstrode@redhat.com>)
  - make sure we don't try and spawn a repair shell when there's no
    tty (#463161)
  - move udev rules to /lib
  - stateless updates (#433702, <harald@redhat.com>)
  - call logger with a full path (#447928, <harald@redhat.com>)
  - translation updates: as, bn_IN, ca, cz, de, es, fi, fr, gu, it, ja,
    lv, mr, nl, or, pa, pl, pt_BR, ru, te, zh_TW


author: Bill Nottingham <notting@redhat.com> - 8.84-1
changelog:
  - override Arabic, Persian, and Hebrew on the console (<alsadi@ojuba.org>)
  - explicitly run mdadm on boot to catch degraded arrays. (<dledford@redhat.com>)
  - fix setting of console font/map (#458362, <ak@sensi.org>)
  - translations updates: hi, kn, nb, sk, sv, ta


author: Bill Nottingham <notting@redhat.com> - 8.85-1
changelog:
  - add some error handling/hiding to netfs NM dispatcher script (#469197)
  - halt: fix code that causes a syntax error on multiple sound cards (#469156)
  - require a new enough udev version to handle where we put the rules
  - exit 0 in /etc/rc.d/rc (#469050)
  - don't set up encrypted devices that have already been set up under different
    names (#462371, <wwoods@redhat.com>)
  - accept either the '+<addr>', or comma-separated addresses for arp_ip_target. (#467954,
    <darcy.sherwood@gmail.com>)
  - translation updates: hu, kn, ko, ml, sr, sr@latin


author: Bill Nottingham <notting@redhat.com> - 8.86-1
changelog:
  - stop plymouth before stopping the runlevel (#467207)
  - fix get_config_by_subchannel (#459044, <harald@redhat.com>)
  - use blkid -l to pick a single most appropriate device (#470027)
  - don't mkswap on halt, as it breaks swap-by-label/UUID (#469823)


author: Bill Nottingham <notting@redhat.com> - 8.87-1
changelog:
  - rename_device: be much faster in the presence of many devices (#480687, <danms@us.ibm.com>)
  - fix switching from targeted to MLS policy (#479054, <dwalsh@redhat.com>)
  - rc.sysinit: don't set $(uname -r) or $(uname -m); they're not used
  - network-functions-ipv6: set MTU correctly for 6to4. (#477976, <ackistler@yahoo.com>)
  - add more entries to rwtab (#476799, <harald@redhat.com>)
  - net.hotplug: Bail out sooner if the network service isn't running
  - init.d/halt: determine reboot/halt via existing INIT_HALT environment variable. (#475227)
  - event.d/serial: add some docs
  - init.d/functions: __pids_var_run: Handle multi-line pid files correctly (#473287)
  - remove support for no longer existing 'brctl setgcint' command. (#360471)
  - add %config back for ifcfg-lo (#472761)
  - rcS/rcS-sulogin: don't match commented lines when finding runlevel (#472717)
  - updated translations: de, sk


author: Bill Nottingham <notting@redhat.com> - 8.89-1
changelog:
  - use a leading path when sourcing files (#482826)
  - netfs: don't unmount nfsd filesystem by accident (#481794, <sprabhu@redhat.com>)
  - bring up ipsec interfaces last (#481733)
  - ifdown-eth: fix bridge + vlan (#481557, <danken@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 8.90-1
changelog:
  - init.d/functions: cgroup support (<jsafrane@redhat.com>)
  - fix various issues with dmraid handling (#485895, <hdegoede@redhat.com>)
  - rc.sysinit: fix typo. (#487926)
  - console_init: loadkeys has a -q option for silent running. Use it.
  - ifup-tunnel: add compatibility for openNHRP tunnels (#486559, <claude.tompers@ieee.lu>)
  - ccw_init: don't re-init an existing device, it causes errors. (#484411, <jpayne@redhat.com>)
  - netfs: use same kpartx arguments as rc.sysinit
  - don't list mtab in rwtab (#457941)
  - translation updates: fi, de, mai


author: Bill Nottingham <notting@redhat.com> - 8.91-1
changelog:
  - fix DHCP reading of options from ifcfg-XXX (#483257)
  - ifdown-eth: clean up bridges on ifdown (#463325, <sean@bruenor.org>)
  - support MD on iSCSI (#480627)
  - remove support for 'ifcfg-foo-bar' configurations that inherit from 'ifcfg-foo'
  - remove slip support
  - translation updates: es, pl, ca, sr, de, sv, pa, pt_BR


author: Bill Nottingham <notting@redhat.com> - 8.93-1
changelog:
  - rc.sysinit: add a disk synchronization point with scsi_wait_scan post-udev (#481470)
  - netfs: drop smbfs support, we don't even ship the module or tools any more
  - setsysfont: honor LC_CTYPE (#487133, <skasal@redhat.com>)
  - prefdm: do fallbacks based on provides of 'service(graphical-login)' (#485751)
  - rc.sysinit: handle multiple IP addresses without choking in the stateless code (#443945)
  - rc.sysinit: catch the right error code from checking for passphrases (#483269, <vladis.kletnieks@vt.edu>)
  - prefdm: handle empty /etc/sysconfig/desktop correctly (#480113)
  - ifup-ipsec: allow use of either ESP only or AH only (#251494, <stijn.tintel@x-tend.be>)
  - ifup-eth: allow passing of arguments to dhcp6c (#437949, <pekkas@netcore.fi>)
  - ifup-eth: fix dhcpv6 when there is no IPv4 configuration (#486507)
  - ifup-ppp: avoid spurious SIGCHLD to pppd (#448881)
  - ifup-eth: add support for creating TUN/TAP devices on the fly (#453973, <scott@zahna.com>)
  - stop plymouth when starting single-user mode. (#491062)
  - add plymouth shutdown script (#473237, <jmccann@redhat.com>)
  - fix lang.sh/lang.sh/consoletype for execution with '-e'
  - ifdown-eth: remove arp_ip_target on ifdown for bonding devices. (#483711)
  - add vlan support for s390 HSI interfaces. (#490584)
  - ipcalc: support IPv6 (#464268, <dcantrell@redhat.com>)
  - translation updates: all


author: Bill Nottingham <notting@redhat.com> - 8.94-1
changelog:
  - prefdm: add simple fallbacks, sort rpmdb query for consistency (#494461)
  - translation updates; bn, de, pt, ru, te


author: Bill Nottingham <notting@redhat.com> - 8.95-1
changelog:
  - don't kill runlevel events on subsequent entering of the same runlevel (#498514)
  - lang.*sh: handle spaces in $HOME (#498482)
  - network-functions: explicitly source from the proper directory. (#496233)
  - remove persistent names on sys-unconfig. (#448322)
  - init.d/functions: cgexec has moved to /bin (#495715)
  - allow changing of VLAN type even if the module is already loaded. (#495053, <pietro@bertera.it>)
  - translation updates: fr, ml, pt


author: Bill Nottingham <notting@redhat.com> - 8.96-1
changelog:
  - fix up upstart rules for s390(x). (#515222)
  - leave ChangeLog in the tarball only. (#515012)
  - disable netfilter on bridged interfaces. (#512206)
  - assorted shell-related cleanups to ipv6 and other code (<victor.lowther@gmail.com>)
  - use resolv.conf from dracut netboot before setting hostname. (#514801, <wtogami@redhat.com>)
  - ipcalc updates (<victor.lowther@gmail.com>)
  - only use ethtool for link checking; no more mii-tool
  - require /sbin/blkid directly, as it moves between packages (#508413)
  - redirect bash errors on 'unset' to /dev/null. (#482888)
  - fix dmraid partition naming (#501476, <hdegoede@redhat.com>)
  - don't quote upstart signals. (#501155)
  - translation updates: bn_IN, da, es, sk


author: Bill Nottingham <notting@redhat.com> - 8.97-1
changelog:
  - ipcalc: fix IPv6 address checking (#516319)
  - ifup-aliases: fix syntax error from earlier cleanups. (#515612, <jik@kamens.brookline.ma.us>)
  - translation updates: nb
  - rc.sysinit: remove useless call to pam_console_apply


author: Bill Nottingham <notting@redhat.com> - 8.98-1
changelog:
  - sysconfig.txt: doucment DHCP_HOSTNAME (#498052)
  - 88-clock.rules: Use --systz instead of --hctosys. (#517886, #489494)
  - Support rwtab and state passed from dracut initrd (#515771, <wtogami@redhat.com>)
  - restore context of *tmp files (#519748)
  - halt: don't try and save mixer settings if it's not writable. (#515771)
  - rwtab: add /var/spool, /var/lib/dbus, others (#494973, #515771)
  - sysconfig.txt: clarify docs (#518614)
  - rc.sysinit: don't pretend /selinux is configurable (#518164)
  - assorted ipv6 redundant code deletion
  - translation updates: bn, ca, de, es, fi, fr, gu, hi, it, ja, ko, ml, nb, nl, pl, pt, pt_BR, ru, sr, ta, zh_CN, zh_TW


author: Bill Nottingham <notting@redhat.com> - 8.99-1
changelog:
  - init.d/functions: add a '-l' option to status to pass lock file name (#521772)
  - tweak kernel conflict
  - translation updates: as, bn_IN, de, fr, hi, it, hu, kn, mr, or, pa, pt, ru, te


author: Bill Nottingham <notting@redhat.com> - 9.00-1
changelog:
  - halt: wrap /sbin/killall5 to catch some return codes (#526539)
  - netfs, netconsle, network: fix return codes to match LSB spec (#524489, #524480, #524486)
  - handle kernels compiled both with and without CONFIG_RTC_HCTOSYS
  - halt: use killall5's return code to avoid unncesssary sleeping (#524359, <hdegoede@redhat.com>)
  - halt: don't kill mdmon on shutdown. (#524357, <hdegoede@redhat.com>)
  - rc.sysinit: do not try and activate ISW raidsets, unless noiswmd is passed. (#524355, <hdegoede@redhat.com>)
  - translation updates: ca, cs, da, mai, po, sv, uk


author: Bill Nottingham <notting@redhat.com> - 9.01-1
changelog:
  - rc.sysinit: fix handling of dmraid output to avoid error messages (#527726, <mschmidt@redhat.com>)
  - rwtab: add /var/lib/xend (#526046)
  - translation updates: fi, nb, pl


author: Bill Nottingham <notting@redhat.com> - 9.02-1
changelog:
  - remove long-since deprecated initlog
  - remove IUCV support (#507217)
  - halt: put a wrapper around killall5 to account for retval 2 not being an error (#526539, <hdegoede@redhat.com>)
  - ifup-eth: honor DEFROUTE=yes|no for 'all' connection types. (#528822)
  - network-functions: load bonding driver if BONDING_OPTS is defined. (#516569)
  - rc.sysinit: put /dev/shm in mtab too, as dracut now mounts it. (#528667)


author: Bill Nottingham <notting@redhat.com> - 9.03-1
changelog:
  - migrate to upstart 0.6.x (<notting@redhat.com>, <plautrba@redhat.com>)
  -- jobs move to /etc/init
  -- collapse rcX and ttyX jobs into single job definitions
  -- jobs are no longer %config
  - remove obsolete doexec command
  - rc.sysinit: handle yet another random return string from dmraid
  - remove never-used 'sulogin' upstart event
  - fix time-setting udev rules for old-style RTC devices (#537595)
  - init.d/network: keep error codes limited to '1'. (#537841)
  - add initial ifup/ifdown man pages. (#529328, <plautrba@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.04-1
changelog:
  - various shell-related cleanups and optimizations <ville.skytta@iki.fi>
  - ifup-eth: use dhclient's -H option instead of munging dhclient config files
  - rc.sysinit: move mdadm after dmraid (#494821)
  - ifup-eth: use dhclient -6, not the no-longer-included dhcp6c
  - add more man pages (#529328, <plautrba@redhat.com>)
  - move is_wireless after MACADDR/MTU setting (#552638)
  - serial.conf: respawn correctly. (#552324, <zing@fastmail.fm>)
  - network-functions: use sysfs for wireless check (#551019, <adel.gadllah@gmail.com>)
  - reload init on started messagebus (<plautrba@redhat.com>)
  - honor HOTPLUG in ifdown (#547737)
  - network-functions: silence error. (#516569)


author: Bill Nottingham <notting@redhat.com> - 9.05-1
changelog:
  - network-functions: don't use ethtool for link state, assorted other cleanups
  - inittab: fix job paths in comments (<plautrba@redhat.com>)
  - init.d/functions: don't clear environment in runuser (#203010, #564093)
  - 88-clock.rules: use ATTR, not SYSFS (#560756)
  - init.d/network: don't quote regex argument to bash's =~ (<ville.skytta@iki.fi>)
  - network-functions: use HWADDR to determine DEVICE if DEVICE isn't set (#545597)
  - don't HUP init when messagebus starts (#557791)
  - setsysfont: use UNIMAP, not SYSFONTACM, when calling unicode_start (#557089)
  - ifup: don't leave the link down on link failure for DHCP (#462013, #491009)
  - translation updates: cs


author: Bill Nottingham <notting@redhat.com> - 9.06-1
changelog:
  - move ccw_init and ccw udev rules to s390utils (#539491)
  - rc.sysinit: suppress LVM2 warnings.  (#561938, <prajnoha@redhat.com>)
  - fix translated checks for user input (#566579)
  - refresh translations


author: Bill Nottingham <notting@redhat.com> - 9.07-1
changelog:
  - clean out some extraneous package requirements
  - fix dmraid error checking now that dmraid has return codes (#568790, others)
  - integrate with NetworkManager for ifup/ifdown (#523064)
  - translation updates: cs, da, de, en_GB, es, fi, nl, pl, pt_BR, ru, sr


author: Bill Nottingham <notting@redhat.com> - 9.08-1
changelog:
  - network-functions: redirect error messages when nmcli isn't installed (#570828, <zing@fastmail.fm>)
  - ifdown: use nmcli to get the device, if not specified
  - ifdown: fix typo
  - translation updates: fr


author: Bill Nottingham <notting@redhat.com> - 9.09-1
changelog:
  - rc.sysinit: change RAID handling (<dledford@redhat.com>)
  - fix german mistranslation (#575954, <pb@bierenger.de>)
  - init.d/functions: correct fix for environment with runuser. (#203010, #564093)
  - halt: fix mdmom pid handling for newer mdadm (#549726, <dledford@redhat.com>)
  - init.d/network: only blacklist the original loopback interface. (#579816, <evgsyr@gmail.com>
  - translation updates: de, ja, nb, pt, sv, uk


author: Bill Nottingham <notting@redhat.com> - 9.10-1
changelog:
  - fstab-decode.8: fix formatting (#586476)
  - prefdm: add --retain-splash for KDM as well (#585250)
  - init.d/functions: handle being unable to read a specified pid file. (#584575)
  - init/quit-plymouth.conf: use 'task' for stopping plymouth. (<rstrode@redhat.com>)
  - ifup-eth: run dhclient -6 similar to dhclient -4. (#585047)
  - net.hotplug: don't run on odd interfaces. (#584530)


author: Bill Nottingham <notting@redhat.com> - 9.14-1
changelog:
  - clean up plymouth shtudown splash (#590099, <rstrode@redhat.com>)
  - rc.sysinit: use lvm2 --sysinit option (#588777)
  - network-functions: behave sanely in the absence of $DEVICE (#589521)
  - sysconfig/debug: export debug variables (#589378)
  - netfs: check for NM to be connected, not just running (#589710)
  - rcS*.conf: check if /etc/inittab exists (#590703, <plautrba@redhat.com>)
  - port vlan code to /sbin/ip (#566485, <plautrba@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.15-1
changelog:
  - ifup-eth: check for dhclient configuration in /etc/dhcp as well (#607764, #607766)
  - network-functions: handle quoted SUBCHANNELS (#607481)
  - netfs: allow for encrypted network block devices (#605600)
  - ifdown-ipsec: don't use a full path when killing racoon, so it works in MLS policy (#567295)
  - network-functions: check NM_CONTROLLED before deciding to use NM for a connection. (#599707, probably others.)
  - rc.sysinit: always reboot on autorelabel. (#595823)
  - init.d/functions: handle permission denied on reading PID file. (#595597)
  - clean up some deprecated items
  - translation updates: el, nl, or, zh_CN


author: Bill Nottingham <notting@redhat.com> - 9.16-1
changelog:
  - halt: don't umount cgroups (#612789)
  - rename_device: dequote DEVICE key, handle SUBCHANNELS (<harald@redhat.com>)
  - sysconfig.txt: document PREFIX/NETMASK (#617481, <jklimes@redhat.com>)
  - sysconfig.txt: document NETWORKWAIT (#595386)
  - remove support for hotkey interactive startup (#605016). Use 'confirm' on the commandline
    (but even that doesn't fully make sense in an upstart/systemd world)
  - don't directly execute bash for single-user mode (#540216, #584443, #585053)


author: Bill Nottingham <notting@redhat.com> - 9.17-1
changelog:
  - init.d/functions: redirect start/stop/condrestart/etc to systemctl in a systemd environment (#612728)
  - rc.sysinit: don't frob the console loglevel on boot (#621257, #626572)
  - service: use systemctl on systemd services
  - 10-console.rules: only init consoles on add, not change (<lennart@poettering.net>)
  - halt: fix unmounting bind mounts (#620461, <phr@doc.ic.ac.uk>)
  - killall: exit 0 (#605519)
  - translation updates: de, es, fi, fr, nl, pl, sv, uk


author: Bill Nottingham <notting@redhat.com> - 9.18-1
changelog:
  - fix for new cgroups location (#612789, others <plautrba@redhat.com>)
  - add in basic systemd units
  - translation updates: nb, pt, sv


author: Bill Nottingham <notting@redhat.com> - 9.19-1
changelog:
  - fix packaging of prefdm, rc-local systemd units (#630952)
  - systemd/single.service: conflict with shutdown.target (#630935)
  - translation updates: ja, pt_BR, ru


author: Bill Nottingham <notting@redhat.com> - 9.20-1
changelog:
  - use new pidof -m option to avoid false positives (#632321)
  - systemd/single: set $HOME for single-user mode. (#631590)
  - systemd/killal.service: require shutdown.target (#630935, #632198)


author: Bill Nottingham <notting@redhat.com> - 9.21-1
changelog:
  - build for systemd only
  - ship a default.target link in case the one in /etc gets deleted
  - rc.sysinit: reset btmp on boot if necessary (#633768, <dmach@redhat.com>)
  - single.service: fix invocation so that 'runlevel' works (#630914)


author: Bill Nottingham <notting@redhat.com> - 9.22-1
changelog:
  - merge in systemd-specific startup support; package a -legacy package
    (based on work by <harald@redhat.com>)
  - init-ipv6.global: don't load sit module on shutdown. (#654098, <ejsheldrake@gmail.com>)
  - do not call rhgb-client
  - network-functions: add infiniband mapping (#648524, <monis@voltaire.com>)
  - fix ifdown nmcli invocation (#612934, jklimes@redhat.com>)
  - *ipv6*: don't use obsolete /sbin/ip wrapper
  - sysconfig.txt: adjust clock docs (#637058)
  - lang.csh: fix tcsh + grep-2.7. (#636552)


author: Bill Nottingham <notting@redhat.com> - 9.23-1
changelog:
  - don't throw errors on unreadable /dev/stderr (#650103, <plautrba@redhat.com>)
  - support multiple ipv4 addresses, not just alias devices (#132912, #633984, <jklimes@redhat.com>)
  - properly handle /var/run on tmpfs (#656602, <plautrba@redhat.com>)
  - allow '0' as a vlan tag (#624704, #635360)
  - assorted systemd unit cleanup (<lennart@poettering.net>)


author: Bill Nottingham <notting@redhat.com> - 9.24-1
changelog:
  - ifup-eth/ifdown-eth: handle 'MASTER' being quoted. (#651450, <gfidente@redhat.com>)
  - tmpfiles.d: remove entries that exist in systemd
  - frob device when calling sysctl, in case of vlans. (#665601, #667211, <ossman@cendio.se>)
  - netfs: rework to handle bind-mounted cifs/ncpfs (#663140, <dmudrich@nospam.mudrichsystems.com>)
  - own /etc/crypttab (#664309)
  - init.d/network: add # as a valid character in network device names (<Matt_Domsch@dell.com>)
  - ifup-eth: fix routing regression (#660363)
  - sysctl.conf.s390 - system z optimized sysctl settings per default (#633323, <plautrba@redhat.com>)
  - serial.conf, tty.conf: stop tty and serial also on runlevel 's' (#629257, <plautrba@redhat.com>)
  - translation updates: bn_IN, es, gu, hi, nds, or, pa, uk, zh_CN


author: Bill Nottingham <notting@redhat.com> - 9.25-1
changelog:
  - remove 'Red Hat Linux' references from sysctl.conf* (<ville.skytta@iki.fi>)
  - rc.sysinit: add support for sysctl.d (#593211, <martin@laptop.org>)
  - console_check: support OMAP serial console (#678875, <ndevos@redhat.com>)
  - /sbin/service: accept --ignore-dependencies, --skip-redirect as options
  - /sbin/service: honor SYSTEMCTL_IGNORE_DEPENDENCIES (<lennart@poettering.net>)
  - translation updates: kn, pa, ta, uk


author: Bill Nottingham <notting@redhat.com> - 9.26-1
changelog:
  - network-functions: fix check for unmanaged devices (#670154)
  - ifup-eth: also check /dev/.run/initramfs (<harald@redhat.com>)
  - systemd: execute fedora-sysinit-unhack after sysinit.target (<arvidjaar@gmail.com>)
  - init.d/functions: don't do force/lazy umount for the first nfs umount. (#676851, <jlayton@redhat.com>)
  - further sysctl.d fixes (#593211)
  - init.d/functions: make killproc more granular when delay is passed. (#428029, <xjakub@fi.muni.cz>)
  - ifup: add GVRP support (#597598, <tomek@jot23.org>)
  - init.d/functions: add support for noauto crypt devices, to mirror systemd
  - documentation updates
  - bash cleanups (<ville.skytta@iki.fi>)
  - ifup: remove network device naming requirement from VLAN devices (#462095, <Matt_Domsch@dell.com>)


author: Bill Nottingham <notting@redhat.com> - 9.27-1
changelog:
  - init.d/functions: fix mishandled argument to fstab-decode. (#685137)
  - support ipv6 routing rules, merge route/rule code (#680872, <tobiasoed@hotmail.com>)
  - autorelabel.service, loadmodules.service: fix conditions so that they operate as OR, not AND. (#684125)


author: Bill Nottingham <notting@redhat.com> - 9.28-1
changelog:
  - add some generic network logging, port scripts to it (#507515, #653630)
  - add an error when setting the gateway fails (#672202)


author: Bill Nottingham <notting@redhat.com> - 9.29-1
changelog:
  - systemd: add a storage setup service after cryptsetup.target (#692198)
  - fix /.autorelabel handling (<mschimdt@redhat.com>)
  - don't explicitly disallow IPv6 aliases (#583409, #612877)
  - netfs: don't print errors if mdadm isn't installed. (#692187)
  - ifup-eth: use /run/initramfs rather then /dev/.run/initramfs (<harald@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.30-1
changelog:
  - ifup-eth: handle IPADDRx correctly for static addresses (#697838)
  - systemd: fix storage setup service after cryptsetup.target (#699918)
  - prefdm: tweak how plymouth is quit in the gdm/kdm case (<rstrode@redhat.com>)
  - support /etc/hostname as an override for hostname in /etc/sysconfig/network
  - init.d/single: only ship this in -legacy
  - network-functions: fix IPADDRx index handling (<jklimes@redhat.com>)
  - ifup/down-eth: properly handle apr_ip_target, when used with module options (#604669, <harald@redhat.com>)
  - ifup-eth: ensure bond exists before bringing up slaves (#694501)


author: Bill Nottingham <notting@redhat.com> - 9.31-1
changelog:
  - remove ifup/ifdown-ipsec; they're now in ipsec-tools
  - rc.sysinit: start udev by hand, start_udev is no more (#714531)
  - ifup-aliases: if IPv6 is configured on the alias, configure it. (#583409)
  - ifup-eth: ensure DHCP_HOSTNAME is a short hostname, seed it from HOSTNAME if needed. (#697877)
  - network-functions: override NETMASK from PREFIX where specified (#705367, <mpoole@redhat.com>)
  - exclude single symlink from main package (#705457)
  - network: VLAN, etc. interfaces can be slaves; check for being a slave first. (#703475)
  - network: use LC_ALL=C when calling sed. (https://bugs.mageia.org/show_bug.cgi?id=1216, via <sander.lepik@eesti.ee>)
  - functions: (umount_loop) fuser -k defaults to -9; set the initial pass to kill -15. (#703457)
  - init.d/halt: don't match filesystem types in hostnames (#703203, <jmueller@data-tronics.com>)


author: Bill Nottingham <notting@redhat.com> - 9.32-1
changelog:
  - prefdm: if exec() of all DMs fails, call 'plymouth quit' (#735215)
  - %ghost rc.local (but leave it around on upgrade) (#734268)
  - ifup: support random bridging options via BRIDGING_OPTS (#734045, #665378)
  - selinuxfs moved to /sys/fs, handle it (#733759)
  - netfs/fedora-storage-init: call multipath and kpartx with -u (#733437)
  - plymouth lives in /bin (#702814)
  - drop fedora-autoswap
  - ifdown-eth: fix dhclient pid file for IPv6 (#729292, <daveg@dgit.ndo.co.uk>)
  - move some more things to the legacy subpackage
  - netfs: don't mount gfs2 here (#689593)
  - readonly-root: add an empty CLIENTSTATE definition (#725476)
  - drop sysinit hack/unhack
  - ifup-eth: allow more options in ETHTOOL_OPTS (#692410, #693583)
  - rwtab: update for systemd (#704783)
  - debug.csh: fix for latest csh
  - update translations: eu_ES, hy, ku, lo, my, wa


author: Bill Nottingham <notting@redhat.com> - 9.33-1
changelog:
  - netconsole: only use the first ARP response (#744309, <doug.knight@karmix.org>)
  - udev/rules.d/88-clock.rules: drop this entirely, as it causes issues in conjunction with systemd
  - init.d/network: be less picky about ifcfg file names. (#742276)
  - /sbin/service: do not check for the existence of a systemd unit before redirecting (<mschmidt@redhat.com>)
  - init.d/functions: only run consoletype if connected to something that's console-ish. (#657869)


author: Bill Nottingham <notting@redhat.com> - 9.34-1
changelog:
  - read locale.conf if it exists (#706756)
  - ifdown: fix logic error with removing arp_ip_target (#745681)


author: Bill Nottingham <notting@redhat.com> - 9.35-1
changelog:
  - use the same DHCP lease file names as NetworkManager, where appropriate
  - copy network state from initramfs with a systemd service, not inline (<wwoods@redhat.com>)
  - sysconfig.txt: clean up section on disabling IPv6
  - ifup: allow for ifup-$TYPE/ifdown-$TYPE
  - fedora-readonly.service: drop StandardInput=tty (#785662)
  - sysconfig.txt: document additional ETHTOOL_OPTS enhancements (<raghusiddarth@gmail.com>)
  - port assorted ancient ifup-XYZ scripts away from ifconfig
  - don't use ifconfig in ifup-aliases (#721010, 588993, based on <tgummels@redhat.com>)
  - fedora-storage-init: handle dmraid sets with spaces (#728795, <lnykryn@redhat.com>)
  - fedora-readonly: don't exit with an error if SEinux isn't active. (#768628)
  - init.d/network: fix checks for network filesystems (#760018)
  - fedora-wait-storage: drop stdin/stdout/stderr (#735867)
  - netfs: move to legacy package
  - translation updates


author: Bill Nottingham <notting@redhat.com> - 9.36-1
changelog:
  - ifup-aliases: fix IFS usage mangling of device names (#802119)
  - ifup/ifdown: fix typo (#802055, <lubek@users.sourceforge.net>)


author: Bill Nottingham <notting@redhat.com> - 9.39-1
changelog:
  - assorted documentation cleanups
  - typo, spelling, licenese clean up (<ville.skytta@iki.fi>)
  - service: add support for legacy custom actions packaged in
    /usr/libexec/initscripts/legacy-actions/<script>/<action>
  - network-functions: handle quoted HWADDR (#835372)
  - allow bridge names that start with '-' (<danken@redhat.com>)
  - remove all non-legacy uses of /sbin/route (#682308)
  - move default sysctl.conf to /usr/lib/sysctl.d (#760254)


author: Bill Nottingham <notting@redhat.com> - 9.41-1
changelog:
  - debugmode: MALLOC_CHECK_ is not thread safe. Don't enable it by default (#853175)
  - Add support for 256 color terminals (<pbrady@redhat.com>)
  - ifdown-eth: be less strict about VLAN name (#505314, <vpavlin@redhat.com>)
  - drop prefdm
  - ifup-eth: allow duplicate address detection to be disabled (<bcodding@uvm.edu>)
  - process rule6-* for sit devices (#840009, <lnykryn@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.42-1
changelog:
  - Halloween release!
  - add a default /etc/sysctl.conf that describes how to change values, and where the defaults now live. (#760254)
  - translation updates
  - fedora-autorelabel: don't pass -F to fixfiles (#863662, <dwalsh@redhat.com>)
  - fix calling of firewall-cmd in ifup-post/ifdown-post (<jpopelka@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.43-1
changelog:
  - 60-net.rules: explicitly set the interface name (#870859)
  - ifup-eth: set firewall zone before ifup-ipv6 for DHCPv6 (#802415)
  - migrate to /etc/locale.conf, /etc/vconsole.conf (#881923)
  - rename_device: fix bogus locking
  - fix wireless device detection for kernel 3.6 (#875328)
  - drop fedora-storage-init, fedora-wait-storage (<prajinoha@redhat.com>)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.44-1
changelog:
  - limit udev rule for network renaming (#907365, mschmidt@redhat.com)
  - fix path for arpwatch, seems to be in /var/lib on Fedora 18
  - fix the path for lvm cache, there is no file /etc/lvm/.cache ( but there is one /etc/lvm/cache )
  - fix path for dhcpd, is /var/lib/dhcpd since 2005 ( see 31cdb58df77 on the dhcp package git )
  - fix the patch for apache modules in rwtab, that are now in /var/cache/httpd
  - remove no longer used directory ( at least in Fedora ), hald is deprecated,
    /var/tux cannot be found and xend seems to use a subdirectory of /var/lib/xen
  - correct the path for puppet directory in /etc/rwtab, now use /var/lib/puppet by default
  - allow passing -F from /.autorelabel to fixfiles when relabeling system (#904279)
  - correctly detect Open vSwitch device types
  - clear DEVICE and TYPE variables before every iteration (#902463)
  - sets BONDING_OPTS before interface is brougth up
  - check an IP address for existence in ifup-alias (#852005)
  - sync FSF address with GPL 2 text.
  - fix rpmlint's spaces vs tabs warning.
  - fix bogus %changelog dates.
  - build with $RPM_LD_FLAGS.
  - use -sf, not -s. (#901827)
  - add /usr/libexec/initscripts to file list (#894475)
  - rename term256 to 256term (glob sort) (#849429)
  - readd missing shebang. (#885821)
  - migrate even further away from /etc/sysconfig/network for hostname, and /etc/sysconfig/i18n.


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.45-1
changelog:
  - turn on symlink protections in sysctl (#922030)
  - add systemd-random-seed.service to  Before= in fedora-readonly.service (#888615)
  - mention rule6 files in sysconfig.txt
  - skip nmcli for wireless device (#863707)
  - remove config-noreplace from /etc/inittab (#627474)
  - remount-rootfs.service got renamed to systemd-remount-fs.service
  - compile netreport and usernetctl with full RELRO and PIE (#853178)
  - move stuff directly to /usr (#905492)
  - Remove NETWORKING_IPV6 from sysconfig.txt (#918622)
  - fix greps to correctly handle comments and quotation


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.46-1
changelog:
  - add /var/lib/NetworkManager
  - add ipip6 tunneling support (#928232, raorn@raorn.name)
  - bonding: set master up before slaves
  - set net.ipv6.conf.SYSCTLDEVICE.autoconf in ifup-ipv6
  - ifdown: don't call nmcli on interface that is alread down
  - remove some defaults from sysctl.conf (move to systemd)
  - call flush addresses with scope global
  - service: action should not be empty when calling legacy-actions (#947817)
  - ifup-eth: ignore arping errors (#928379)
  - replace tunctl with ip tuntap (#947875)
  - reload sysctl settings for vlans on ifup
  - try dhcpv6 after v4 failed (#846618)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.47-1
changelog:
  - network-functions: to determine state of nscd check socket not lock (#960779)
  - sysconfig.txt advised saslauthd -a instad of -v
  - update translations from transifex
  - drop translation for other initscripts
  - tweak ifup/ifdown usage and man page (#961917)
  - ctrl-alt-delete.target is provided by systemd package
  - remove some defaults from arch specific sysctl.conf
  - readonly-root: remount rpc_pipefs if readonly-root is used
  - service: mention legacy actions and systemctl redirection in man page


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.48-1
changelog:
  - man: add systemd man pages to service.8 "see also" section
  - add possibility to set domainname through /etc/sysconfig/network
  - rename_device: don't wait for lock with lower permissions
  - 256term.csh: remove quotes around variable (#979796)
  - drop useless variables from /etc/sysconfig/init
  - readonly-root: rpcidmapd restart is not needed anymore
  - ifup-eth: print error only if arping is really called (#974603)
  - readonly-root: Add /var/lib/samba to rwtab


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.2-1
changelog:
  - symlink /etc/sysctl.conf -> /etc/sysctl.d/
  - man: only action specified in LSB are redirected to systemd
  - service: filter actions that are not supported by systemctl in service (#947823)
  - install_bonding_driver: drop check for existing device (#991335)
  - consider IPV6INIT undefined as YES
  - don't care about network filesystems


author: Lukas Nykryn <lnykryn@redhat.com> - 9.49.3-1
changelog:
  - update functions who call nmcli (#1002958)
  - create /var/log/dmesg for compatibility reasons (#854002)


author: Lukas Nykryn <lnykryn@redhat.com> - 9.49.4-1
changelog:
  - ifdown: fix typo in nmcli call (#1006222)
  - ipcalc: support RFC3021 (#997271)
  - enable 'network' service at boot time for interfaces not supported by NetworkManager (#1003936)


author: Lukas Nykryn <lnykryn@redhat.com> - 9.49.7-1
changelog:
  - readonly-root: Add /var/log/audit/audit.log to rwtab (#1026815)
  - brandot: fix posssible segfault (#1024922)


author: Václav Pavlín <vpavlin@redhat.com> - 9.49.8-1
changelog:
  - service: suggest using systemctl if unknown action is used (#1029350)
  - rename_device: remove comments and trailing whitespaces (#1027945)
  - readonly-root: restore selinux context after bind mount (#1029342)


author: Václav Pavlín <vpavlin@redhat.com> - 9.49.11-1
changelog:
  - Revert: provide KVM guest count and limit info message (#1014731)
  - add C implementation of reverted patch


author: Lukas Nykryn <lnykryn@redhat.com> - 9.49.12-1
changelog:
  - use iw instead of iwconfig and friends (#915343)
  - don't care about rc.local anymore (#1034156)
  - udev-kvm-check: simplify reading of threshold (#1031568)
  - brandbot: read only first line (#1031490)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.13-1
changelog:
  - delete IPX support
  - update ifup/ifdown NetworkManager interaction (#1036701, #1061810)
  - set shmmax and shmall defaults to match rhel6 values (#1056547)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.14-1
changelog:
  - update ifup/ifdown NetworkManager interaction (#1036701, #1061810)
  - service: fix action matching
  - service: add condrestart to allowed commands (#1069222)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.18-1
changelog:
  - is_available_wait: properly propage return value from is_available
  - man: update sys-unconfig.8
  - rename_devices: comments need to have a blank before them
  - add example ifcfg files
  - network-functions: improve bonding_masters grep
  - ifup: if we were unable to determine DEVICE always call nmcli up
  - ifup-tunnel: call ifup-ipv6 in the end
  - ifup: also set multicast_snooping after the bridge is up
  - ifup-eth: some options for bridge can be applied after the bridge is up
  - custom naming for VLAN devices
  - ifup-wireless: add support for wowlan
  - vi.po: fix parentheses
  - network-functions: ETHTOOL_DELAY introduction patch
  - ipcalc: -c allow netmask
  - ipcalc: parse prefix more safely
  - use pie and relro by default
  - sys-unconfig: use poweroff instead of halt
  - ifup-aliases: improve duplicate address detection
  - network-functions: handle BONDING_OPTS better
  - fedora-readonly: fix prefix detection (#1059749)
  - network: tell nm to wake the slaves
  - bridging: add possibility to set prio and ageing
  - network: add support for team devices
  - inittab: fix path and mention set-default
  - fedora-domainname: DefaultDependencies=no


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.25-1
changelog:
  - network: tell NM to reload its configuration during start
  - bonding: warn if the ifup for slave device failed
  - brandbot: move to /usr/libexec/initscripts
  - sysctl.conf: drop SHMALL and SHMMAX, they have sane default values in kernel
  - rename_device: allow non-channel nics for s390x machines
  - network-functions: fix check in install_bonding_driver
  - ifup-aliases: don't return with error when arping fails
  - network-functions: fix change_resolv_conf after grep update
  - clarify daemon() usage message
  - ifup: don't call NM for loopback
  - ifup: add missing quotes


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.26-1
changelog:
  - import-state: don't run restorecon when it does not exist
  - network-functions: reeplace iwconfig with iw
  - fedora-readonly: use --make-slave with --bind mounts


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.49.31-1
changelog:
  - ipv6: wait for all global IPv6 addresses to leave the "tentative" state
  - source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
  - ifup-aliases: inherit ARPCHECK from parent device
  - rhel-dmesg: don't start in containers
  - ifup-eth: fix typo in error message (#1038776)
  - sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
  - rwtab: /var/lib/nfs needs to copy the files
  - functions: improve killing loops
  - ipcalc: detect invalid mask
  - ifup: set valid_lft and preferred_lft to forever for static ip
  - service: use systemd mangle for given service
  - ifup-post: check resolve.conf also with DNS2
  - ifdown-post: remove resolv.conf only in specific cases
  - spec: ghost /var/log/dmesg
  - network-functions: is_available_wait should wait even in the case that is_available returns 2
  - autorelabel: turn quota off before relabeling
  - autorelabel: call dracut-initramfs-restore before forced reboot


author: P Linnell <scribusdocs at atlantictechsolutions.com> 0:0.37.0.fdr.1
changelog:
  - pgp'd tarball from inkscape.org
  - clean out the cvs tweaks in spec file
  - enable gnome-print
  - add the new tutorial files
  - make sure .mo file gets packaged
  - add provides: perlSVG
  - submit to Fedora QA


author: P Linnell <scribusdocs at atlantictechsolutions.com> 0:0.37.0.fdr.2
changelog:
  - add libsigc++-devel instead of add libsigc++ - duh
  - add BuildRequires:  perl-XML-Parser
  - fix package name to follow package naming guidelines


author: Jeremy Katz <katzj@redhat.com> - 0.41-4
changelog:
  - add patch for gcc4 problems (ignacio, #156228)
  - fix build on 64bit boxes.  sizeof(int) != sizeof(void*)


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 0.41-6
changelog:
  - remove explicit aclocal/autoconf calls in %build as they create a
    bad Makefile for FC4/i386, which causes build to fail (#156228),
    and no comment explains where they were added/needed


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 0.42-1
changelog:
  - update to 0.42 (also fixes #160326)
  - BR gnome-vfs2-devel
  - no files left in %_libdir/inkscape
  - include French manual page
  - GCC4 patch obsolete, 64-bit patch obsolete, dgettext patch split off


author: Denis Leroy <denis@poolshark.org> - 0.43-1
changelog:
  - Update to 0.43
  - Added 2 patches to fix g++ 4.1 compilation issues
  - Enabled new jabber/loudmouth-based inkboard feature


author: Denis Leroy <denis@poolshark.org> - 0.44-2
changelog:
  - Update to 0.44
  - Removed obsolete patches
  - Disabled experimental perl and python extensions
  - Added pstoedit, skencil, gtkspell and LittleCms support
  - Inkboard feature disabled pending further security tests


author: Denis Leroy <denis@poolshark.org> - 0.44.1-2
changelog:
  - Added patches to fix LaTex import (#217699)
  - Added patch to base postscript import on pstoedit plot-svg


author: Denis Leroy <denis@poolshark.org> - 0.45-1
changelog:
  - Update to 0.45
  - Enabled inkboard, perl and python extensions
  - Added patch for correct python autodetection
  - LaTex patch integrated upstreamed, removed
  - Some rpmlint cleanups


author: Lubomir Kundrak <lkundrak@redhat.com> - 0.45.1-2
changelog:
  - Use GTK print dialog
  - Added compressed SVG association (#245413)
  - popt headers went into popt-devel, post Fedora 7
  - Fix macro usage in changelog


author: Lubomir Kundrak <lkundrak@redhat.com> - 0.45.1+0.46pre1-1
changelog:
  - 0.46 prerelease
  - Minor cosmetic changes to satisfy the QA script
  - Dependency on Boost
  - Inkboard is not optional
  - Merge from Denis Leroy's svn16571 snapshot:
  - Require specific gtkmm24-devel versions
  - enable-poppler-cairo
  - No longer BuildRequire libsigc++20-devel


author: Lubomir Rintel <lkundrak@v3.sk> - 0.47-0.3.20090105svn
changelog:
  - Update to newer SVN
  - Drop upstreamed patches
  - Enable WordPerfect Graphics support
  - Enable embedded Perl scripting
  - Enable Imagemagick support
  - Disable OpenSSL due to licensing issues


author: Lubomir Rintel <lkundrak@v3.sk> - 0.47-0.3.20090227svn
changelog:
  - Past midnight! :)
  - More recent snapshot, our gcc44 fixes now upstream
  - One more gcc44 fix, it even compiles now
  - We install icons now, update icon cache
  - Disable inkboard, for it won't currently compile


author: Lubomir Rintel <lkundrak@v3.sk> - 0.47-0.4.20090301svn
changelog:
  - Bump to later SVN snapshot to fix inkscape/+bug/331864
  - Fix a startup crash when compiled with GCC 4.4
  - It even runs now! :)


author: Lubomir Rintel <lkundrak@v3.sk> - 0.47-0.16.pre3.20090925svn
changelog:
  - Move to a later snapshot
  - Drop debugging compiler flags, enable optimizations again
  - Make it build on everything since EL5 again


author: Stepan Kasal <skasal@redhat.com> - 0.47-5
changelog:
  - require perl(:MODULE_COMPAT_5.10.x) because the package requires libperl.so
  - the same for inkscape-view


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 0.48.2-8
  - fix icon/desktop-file scriptlets (#739375)
  - drop .desktop vendor (f18+)
  - inkscape doesn't build with poppler-0.20.0 (#822413)


author: Jan Safranek <jsafrane@redhat.com> 1.8.10-2
changelog:
  - fix issues found during package review:
    - clear Default-Start: line in the init script, the service should be 
      disabled by default
    - added Obsoletes: OpenIPMI-tools
    - compile with --disable-dependency-tracking to speed things up
    - compile with --enable-file-security
    - compile with --disable-intf-free, don't depend on FreeIPMI libraries
      (FreeIPMI has its own ipmitool-like utility)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.12-2
changelog:
  - Fixed starting ipmievd under systemd (#819234).
  - Updated RPM scriplets with latest systemd-rpm macros (#850161)


author: Praveen K Paladugu <praveen_paladugu@dell.com> 1.8.12-8
changelog:
  - service & scripts to allow OS to capture BMC's IP & URL info
  - Also pass the OS information to BMC
  - patches submitted by Charles Rose (charles_rose[at]dell.com)


author: Ales Ledvinka <aledvink@redhat.com> 1.8.12-13
changelog:
  - fixed argument parsing leaks
  - ask user for password only once and do so only when interactive password
    is the chosen password method.


author: Boris Ranto <branto@redhat.com> - 0:1.8.15-7
changelog:
  - New release (0:1.8.15-7)
  - ID:437 - sel: Fix "sel time set <time>"
  - ID 408 - fix sel list last X listing


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to iproute2-2.2.4-now-ss001007.tar.gz 
  - bzip2 source tar file
  - "License" replaces "Copyright"
  - added "BuildPrereq: tetex-latex tetex-dvips psutils"
  - rebuilt for 7.2


author: Phil Knirsch <pknirsch@redhat.com> 2.4.7-3
changelog:
  - Fixed missing diffserv and atm support in config (#57278).
  - Fixed inconsistent numeric base problem for command line (#65473).


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Updated to latest version. Used by other distros, so seems stable. ;-)
  - Quite a few patches needed updating in that turn.
  - Added ss (#107363) and several other new nifty tools.


author: Phil Knirsch <pknirsch@redhat.com> 2.4.7-14
changelog:
  - Fixed -f option for ss (#118355).
  - Small description fix (#110997).
  - Added initialization of some vars (#74961). 
  - Added patch to initialize "default" rule as well (#60693).


author: Radek Vokal <rvokal@redhat.com> - 2.6.18-1
changelog:
  - upgrade to upstream 2.6.18
  - initcwnd patch merged
  - bug fix for xfrm monitor
  - alignment fixes for cris
  - documentation corrections


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.23-2
changelog:
  - rebuild with fix tetex and linuxdoc-tools -> manual pdf
  - clean unnecessary patches
  - add into spec *.so objects, new BR linux-atm-libs-devel


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.23-3
changelog:
  - rebuild without tetex files. It isn't working in rawhide yet. Added
    new source for ps files. 
  - #431179 backward compatibility for previous iproute versions


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.27-1
changelog:
  - aead support was included into upstream version
  - patch for moving libs is now deprecated
  - update to 2.6.27


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.27-2
changelog:
  - 475130 - Negative preferred lifetimes of IPv6 prefixes/addresses
    displayed incorrectly
  - 472878 - “ip maddr show” in IB interface causes a stack corruption
  - both patches will be probably in iproute v2.6.28


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.28-2
changelog:
  - 483484 install distribution files into /usr/share and also fixed
   install paths in spec
  - add the latest change from git which add DRR support
   c86f34942a0ce9f8203c0c38f9fe9604f96be706


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.29-1
changelog:
  - update to 2.6.29
  - remove DDR patch which became part of sourc
  - add patch with correct headers 1957a322c9932e1a1d2ca1fd37ce4b335ceb7113


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.29-2
changelog:
  - c3651bf4763d7247e3edd4e20526a85de459041b ip6tunnel: Fix no default 
   display of ip4ip6 tunnels
  - e48f73d6a5e90d2f883e15ccedf4f53d26bb6e74 missing arpd directory


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.29-3
changelog:
  - new iptables (xtables) bring problems to tc, when ipt is used. 
    rhbz#497344 still broken. tc_modules.patch brings correct paths to
    xtables, but that doesn't fix whole issue.
  - 497355 ip should allow creation of an IPsec SA with 'proto any' 
    and specified sport and dport as selectors


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.32-2
changelog:
  - add macvlan aka VESA support d63a9b2b1e4e3eab0d0577d0a0f412d50be1e0a7
  - kernel headers 2.6.33 ab322673298bd0b8927cdd9d11f3d36af5941b93
    are needed for macvlan features and probably for other added later.
  - fix number of release which contains 2.6.32 kernel headers and features
    but it was released as 2.6.31


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.33-2
changelog:
  - 578729 6rd tunnel correctly 3979ef91de9ed17d21672aaaefd6c228485135a2
  - change BR texlive to tex according to guidelines


author: Petr Sabata <psabata@redhat.com> - 2.6.38.1-2
changelog:
  - General cleanup
  - Use global instead of define
  - Buildroot removal
  - Correcting URL and Source links
  - Install genl, ifstat, routef, routel and rtpr (rhbz#697319)


author: Petr Sabata <psabata@redhat.com> - 2.6.38.1-3
changelog:
  - Install ctstat, rtstat and routef manpage symlinks
  - Install m_xt & m_ipt tc modules
  - Creating devel and virtual static subpackages with libnetlink


author: Petr Šabata <contyk@redhat.com> - 3.1.0-1
changelog:
  - 3.1.0 bump
  - Point URL and Source to the new location on kernel.org
  - Remove now obsolete defattr
  - Dropping various patches now included upstream
  - Dropping iproute2-2.6.25-segfault.patch; I fail to understand the reason for
    this hack


author: Petr Šabata <contyk@redhat.com> - 3.6.0-3
changelog:
  - Include section 7 manpages (#876857)
  - Fix ancient bogus dates in the changelog (correction based upon commits)
  - Explicitly require some TeX fonts no longer present in the base distribution


author: Petr Šabata <contyk@redhat.com> - 3.10.0-1
changelog:
  - 3.10.0 bump
  - Drop the SHAREDIR patch and revert to upstream ways (#966445)
  - Fix an XFRM regression with FORTIFY_SOURCE


author: Petr Šabata <contyk@redhat.com> - 3.10.0-6
changelog:
  - Fix lnstat -i (#1024426)
  - Support IPv6 peer addresses (#1017228)
  - Add the replace command to bridge fdb (#1024697)
  - Document link type vlan (#979326)


author: Pavel Šimerda <psimerda@redhat.com> - 3.10.0-19
changelog:
  - Resolves: #1081081 - lnstat man page references iproute-doc when it should
    reference iproute-<ver>


author: Phil Sutter - 3.10.0-47
changelog:
  - Related: #1215006 - backport current version of the ss command
  - Related: #1219280 - backport: iproute2: vti6 support


author: Phil Sutter - 3.10.0-48
changelog:
  - Related: #1215006 - backport current version of the ss command
  - Resolves: #1247315 - Fix limitation in iproute/ss regarding dual-stack sockets


author: Phil Sutter - 3.10.0-49
changelog:
  - Resolves: bz#1241486 - backport: tc: fq scheduler
  - Related: #1215006 - backport current version of the ss command


author: Phil Sutter - 3.10.0-50
changelog:
  - Resolves: #1244851 - vti tunnel does not work
  - Resolves: #1155116 - iproute2: implement "-d" option for "ip mon"


author: Phil Sutter - 3.10.0-51
changelog:
  - Resolves: bz#1251451 - can't change the remote/local address of tunnel
    interface to "any" in ipip mode
  - Related: #1213869 - [6wind 7.2 Feat]: backport: iproute2: various netns
    features
  - Related: #1215006 - [RFE] backport current version of the ss command
  - Resolves: #1251070 - Fix multiple programming errors in iproute package
  - Related: #1198456 - backport: dynamic precision, human readable, and IEC
    output to ip stats
  - Related: #1210402 - [6wind 7.2 Feat]: backport: vxlan: unable to configure
    UDP checksums
  - Related: #1213869 - [6wind 7.2 Feat]: backport: iproute2: various netns
    features


author: Phil Sutter - 3.10.0-52
changelog:
  - Resolves: #1254095 - bridge: Add master device name to bridge fdb show
  - Resolves: #1255316 - tc does not allow to attach pfifo_fast qdisc
  - Related: #1251070 - Fix multiple programming errors in iproute package


author: Phil Sutter - 3.10.0-53
changelog:
  - Related: #1212026 - [6wind 7.2 Feat]: backport: ipxfrm: unable to configure
    SPD hash table - reverted this backport due to unmet dependencies


author: Phil Sutter <psutter@redhat.com> [3.10.0-56.el7]
changelog:
  - ipaddress: fix ipaddr_flush for Linux >= 3.1 (Phil Sutter) [1291825]
  - ipaddress: simplify ipaddr_flush() (Phil Sutter) [1291825]
  - libnetlink: introduce nc_flags (Phil Sutter) [1291825]
  - iproute2: Ignore EADDRNOTAVAIL errors during address flush operation (Phil Sutter) [1291825]
  - lnstat: fix header displaying mechanism (Phil Sutter) [1263392]
  - man: lnstat: rewrite manpage (Phil Sutter) [1269133]


author: Phil Sutter <psutter@redhat.com> [3.10.0-57.el7]
changelog:
  - route: Fix printing of locked entries (Phil Sutter) [1291832]
  - route: ignore RTAX_HOPLIMIT of value -1 (Phil Sutter) [1291832]
  - ip-link: remove warning message (Phil Sutter) [1291832]
  - ip: route: add congestion control metric (Phil Sutter) [1291832]
  - ip route: enable per-route ecn settings via 'features' option (Phil Sutter) [1291832]
  - iproute2: ip-route.8.in: minor fixes (Phil Sutter) [1291832]
  - iproute: restrict hoplimit values to be in range [0; 255] (Phil Sutter) [1291832]
  - man ss: Fix explanation when no options specified (Phil Sutter) [1291818]
  - libnetlink: don't confuse variables in rtnl_talk() (Phil Sutter) [1288042]
  - libnetlink: add size argument to rtnl_talk (Phil Sutter) [1288042]
  - ip: fix exit code for rule failures (Phil Sutter) [1288042]
  - ip: return correct exit code on route failure (Phil Sutter) [1288042]
  - link dump filter (Phil Sutter) [1288042]
  - ip: fix exit code for addrlabel (Phil Sutter) [1288042]
  - fix ip -force -batch to continue on errors (Phil Sutter) [1288042]
  - Allow specifying bridge port STP state by name rather than number. (Phil Sutter) [1288042]
  - gre: raising the size of the buffer holding nl messages. (Phil Sutter) [1288042]
  - neighbor: check return values (Phil Sutter) [1277094]
  - ip-address: fix oneline mode for interfaces with VF (Phil Sutter) [1272405]
  - ss: add support for segs_in and segs_out (Phil Sutter) [1269114]
  - ss: add support for bytes_acked & bytes_received (Phil Sutter) [1269114]
  - ss: return -1 if an unrecognized option was given (Phil Sutter) [1265238]
  - man: ip-address: document mngtmpaddr and noprefixroute flags (Phil Sutter) [1231898]
  - man: ip-address: align synopsis with help output (Phil Sutter) [1231898]
  - ip-address.8.in: fix BNF syntax error (Phil Sutter) [1231898]
  - ip-address: fix and extend documentation (Phil Sutter) [1231898]
  - ip: extend "ip-address" man page to reflect the recent flag extensions (Phil Sutter) [1231898]
  - ip: allow ip address show to list addresses with certain flags not being set (Phil Sutter) [1231898]
  - bridge fdb: add 'use' option to set NTF_USE flag in fdb add requests (Phil Sutter) [1075692]
  - bridge: drop man page fragment (Phil Sutter) [1075692]
  - bridge: drop reference to unused option embedded from manpage (Phil Sutter) [1075692]


author: Phil Sutter <psutter@redhat.com> [3.10.0-58.el7]
changelog:
  - tc: ship filter man pages and refer to them in tc.8 (Phil Sutter) [1286711]
  - tc: add a man page for u32 filter (Phil Sutter) [1286711]
  - tc: add a man page for tcindex filter (Phil Sutter) [1286711]
  - tc: add a man page for route filter (Phil Sutter) [1286711]
  - tc: add a man page for fw filter (Phil Sutter) [1286711]
  - tc: add a man page for flow filter (Phil Sutter) [1286711]
  - tc: add a man page for cgroup filter (Phil Sutter) [1286711]
  - tc: add a man page for basic filter (Phil Sutter) [1286711]
  - batch: support quoted strings (Phil Sutter) [1272593]
  - man: fix whatis for fq (Phil Sutter) [1261520]
  - man: tc: add man page for fq pacer (Phil Sutter) [1261520]


author: Phil Sutter <psutter@redhat.com> [3.10.0-59.el7]
changelog:
  - iplink: add ageing_time, stp_state and priority for bridge (Phil Sutter) [1270759]
  - iplink: shortify printing the usage of link type (Phil Sutter) [1270759]
  - iplink: use the short format to print help info (Phil Sutter) [1270759]
  - iplink_bridge: add support for priority (Phil Sutter) [1270759]
  - iplink_bridge: add support for stp_state (Phil Sutter) [1270759]
  - iplink_bridge: add support for ageing_time (Phil Sutter) [1270759]
  - add bridge master device support (Phil Sutter) [1270759]
  - add bridge_slave device support (Phil Sutter) [1270759]
  - iplink: bond_slave: fix ad_actor/partner_oper_port_state output (Phil Sutter) [1269528]
  - ip: remove extra newlines at end-of-file (Phil Sutter) [1269528]
  - ip link: missing options in bond usage (Phil Sutter) [1269528]
  - bond: fix return after invarg (Phil Sutter) [1269528]
  - iplink: bonding: add support for IFLA_BOND_TLB_DYNAMIC_LB (Phil Sutter) [1269528]
  - bonding: export 3ad actor and partner port state (Phil Sutter) [1269528]
  - iplink_bond: add support for ad_actor and port_key options (Phil Sutter) [1269528]
  - ip link: Shortify printing the usage of link type (Phil Sutter) [1269528]
  - add help command to bonding master (Phil Sutter) [1269528]
  - iproute2: allow to change slave options via type_slave (Phil Sutter) [1269528]
  - ip: add nlmon as a device type to help message (Phil Sutter) [1269528]
  - iplink: can: fix help text and man page (Phil Sutter) [1269528]
  - iplink_bond_slave: show mii_status only once (Phil Sutter) [1269528]
  - iplink_bond: fix parameter value matching (Phil Sutter) [1269528]
  - iplink_bond: fix arp_all_targets parameter name in output (Phil Sutter) [1269528]
  - iplink: add support for bonding slave (Phil Sutter) [1269528]
  - introduce support for slave info data (Phil Sutter) [1269528]
  - iproute2: finish support for bonding attributes (Phil Sutter) [1269528]
  - iplink: add support for bonding netlink (Phil Sutter) [1269528]
  - iplink: update available type list (Phil Sutter) [1269528]
  - xfrm: revise man page and document ip xfrm policy set (Phil Sutter) [1269528]
  - xfrm: add command for configuring SPD hash table (Phil Sutter) [1212026]


author: Phil Sutter <psutter@redhat.com> [3.10.0-60.el7]
changelog:
  - man: ip-neighbour.8: Document all known nud states (Phil Sutter) [1276661]
  - fix indentation of ip neighbour man page (Phil Sutter) [1276661]
  - man: ip-*.8: drop any reference to generic ip options (Phil Sutter) [1251186]
  - man8: scrub trailing whitespace (Phil Sutter) [1251186]
  - TBF man page fix (tbf is not classless) (Phil Sutter) [1251186]
  - man tc-htb: Fix HRB -> HTB typo (Phil Sutter) [1251186]
  - man: Spelling fixes (Phil Sutter) [1251186]
  - fix spelling of Kuznetsov (Phil Sutter) [1251186]
  - man: ip-l2tp.8: Fix BNF syntax (Phil Sutter) [1251186]
  - man: ip.8: Add missing flags and token subcommand description (Phil Sutter) [1251186]
  - man: ip: add -h[uman-readable] option (Phil Sutter) [1251186]
  - man: ip-xfrm.8: Document missing parameters (Phil Sutter) [1251186]
  - man: ip-tunnel.8: Document missing 6rd action (Phil Sutter) [1251186]
  - add 'vti'/'vti6' tunnel modes to ip-tunnel manual page (Phil Sutter) [1251186]
  - man: ip-token.8: Review synopsis section (Phil Sutter) [1251186]
  - man: ip-rule.8: Review synopsis section (Phil Sutter) [1251186]
  - man: ip-ntable.8: Review synopsis section (Phil Sutter) [1251186]
  - man: ip-netns.8: Clarify synopsis a bit (Phil Sutter) [1251186]
  - man: ip-neighbour: Fix for missing NUD_STATE description (Phil Sutter) [1251186]
  - man: ip-link.8: Fix and improve synopsis (Phil Sutter) [1251186]
  - man: ip-link.8: minor font fix (Phil Sutter) [1251186]
  - man: ip-address.8: Minor syntax fixes (Phil Sutter) [1251186]
  - iprule: add missing nat keyword to help text (Phil Sutter) [1251186]
  - iproute: TYPE keyword is not optional, fix help text accordingly (Phil Sutter) [1251186]
  - ipntable: Fix typo in help text (Phil Sutter) [1251186]
  - ipneigh: add missing proxy keyword to help text (Phil Sutter) [1251186]
  - iplink: fix help text syntax (Phil Sutter) [1251186]
  - ipaddrlabel: Improve help text precision (Phil Sutter) [1251186]
  - ip: align help text with manpage (Phil Sutter) [1251186]
  - ipl2tp: Print help even on systems without l2tp support (Phil Sutter) [1251186]
  - iprule: Align help text with man page synopsis (Phil Sutter) [1251186]
  - iplink: macvtap: fix man page (Phil Sutter) [1013584]
  - man: ip-link: document MACVLAN/MACVTAP interface types (Phil Sutter) [1013584]
  - man: ip-link: fix a typo (Phil Sutter) [1013584]
  - man ip-link: Add missing link types - vti,ipvlan,nlmon (Phil Sutter) [1013584]
  - iproute2: ip-link.8.in: Spelling fixes (Phil Sutter) [1013584]
  - ip-link: Document IPoIB link type in the man page (Phil Sutter) [1013584]
  - iproute: Descriptions of fou and gue options in ip-link man pages (Phil Sutter) [1013584]
  - iproute2: ip6gre: update man pages (Phil Sutter) [1013584]
  - ip: macvlan: support MACVLAN_FLAG_NOPROMISC flag (Phil Sutter) [1013584]
  - ip: link: consolidate macvlan and macvtap (Phil Sutter) [1013584]


author: Phil Sutter <psutter@redhat.com> [3.10.0-61.el7]
changelog:
  - fix print_ipt: segfault if more then one filter with action -j MARK. (Phil Sutter) [1314403]
  - man: ip-link: Beef up VXLAN csum options a bit (Phil Sutter) [1254625]
  - libnetlink: Double the dump buffer size (Phil Sutter) [1304840]


author: Phil Sutter <psutter@redhat.com> [3.10.0-62.el7]
changelog:
  - tc: fix compilation warning on 32bits arch (Phil Sutter) [1315930]
  - whitespace cleanup (Phil Sutter) [1315930]
  - tc: minor spelling fixes (Phil Sutter) [1315930]
  - simple print newline (Phil Sutter) [1315930]
  - tc: introduce simple action (Phil Sutter) [1315930]
  - man: rtpr: add minimal manpage (Phil Sutter) [1316059]


author: Phil Sutter <psutter@redhat.com> [3.10.0-63.el7]
changelog:
  - doc/tc-filters.tex: Drop overly subjective paragraphs (Phil Sutter) [1275426]
  - doc: Add my article about tc, filters and actions (Phil Sutter) [1275426]
  - gitignore: Ignore 'doc' files generated at runtime (Phil Sutter) [1275426]
  - tests: Add runtime generated files to .gitignore (Phil Sutter) [1275426]
  - man: ship action man pages (Phil Sutter) [1275426]
  - man: tc-skbedit.8: Elaborate a bit on TX queues (Phil Sutter) [1275426]
  - man: tc-police.8: Emphasize on the two rate control mechanisms (Phil Sutter) [1275426]
  - man: tc-mirred.8: Reword man page a bit, add generic mirror example (Phil Sutter) [1275426]
  - man: tc-csum.8: Add an example (Phil Sutter) [1275426]
  - tc: connmark, pedit: Rename BRANCH to CONTROL (Phil Sutter) [1275426]
  - tc: pedit: document branch control in help output (Phil Sutter) [1275426]
  - man: tc-u32: Minor syntax fix (Phil Sutter) [1275426]
  - man: Add a man page for the xt action (Phil Sutter) [1275426]
  - man: Add a man page for the skbedit action (Phil Sutter) [1275426]
  - man: Add a man page for the simple action (Phil Sutter) [1275426]
  - man: Add a man page for the police action (Phil Sutter) [1275426]
  - man: Add a man page for the pedit action (Phil Sutter) [1275426]
  - man: Add a man page for the nat action (Phil Sutter) [1275426]
  - man: Add a man page for the mirred action (Phil Sutter) [1275426]
  - man: Add a man page for the csum action. (Phil Sutter) [1275426]


author: Phil Sutter <psutter@redhat.com> [3.10.0-65.el7]
changelog:
  - man: ip, ip-link: Fix ip option location (Phil Sutter) [1251186]
  - ip: enable configuring multicast group autojoin (Phil Sutter) [1333513]
  - ss: Fix accidental state filter override (Phil Sutter) [1318005]
  - ss: Drop silly assignment (Phil Sutter) [1318005]
  - ss: Fix wrong filter behaviour (Phil Sutter) [1318005]


author: Phil Sutter <psutter@redhat.com> [3.10.0-66.el7]
changelog:
  - ip-link: Support printing VF trust setting (Phil Sutter) [1302119]
  - iplink: Support VF Trust (Phil Sutter) [1302119]
  - add new IFLA_VF_TRUST netlink attribute (Phil Sutter) [1302119]
  - ipaddress: Allow listing addresses by type (Phil Sutter) [1341343]
  - man ip-link: Small example of 'ip link show master' (Phil Sutter) [1341343]
  - ip link: Show devices by type (Phil Sutter) [1341343]
  - ip link: Allow to filter devices by master dev (Phil Sutter) [1341343]


author: Phil Sutter <psutter@redhat.com> [3.10.0-67.el7]
changelog:
  - geneve: fix IPv6 remote address reporting (Phil Sutter) [1339178]
  - geneve: add support to set flow label (Phil Sutter) [1339178]
  - geneve: Add support for configuring UDP checksums. (Phil Sutter) [1339178]
  - geneve: add support for lwt tunnel creation and dst port selection (Phil Sutter) [1339178]
  - geneve: add support for IPv6 link partners (Phil Sutter) [1339178]
  - iplink_geneve: add tos configuration at link creation (Phil Sutter) [1339178]
  - iplink_geneve: add ttl configuration at link creation (Phil Sutter) [1339178]
  - iproute2: update ip-link.8 for geneve tunnels (Phil Sutter) [1339178]
  - iproute2: GENEVE support (Phil Sutter) [1339178]
  - man: ip-address, ip-link: Document 'type' quirk (Phil Sutter) [1341343]
  - man: ip-link.8: Fix 'ip link delete' description (Phil Sutter) [1341343]


author: Phil Sutter <psutter@redhat.com> [3.10.0-68.el7]
changelog:
  - devlink: add manpage for shared buffer (Phil Sutter) [1342515]
  - devlink: implement shared buffer occupancy control (Phil Sutter) [1342515]
  - devlink: implement shared buffer support (Phil Sutter) [1342515]
  - devlink: allow to parse both devlink and port handle in the same time (Phil Sutter) [1342515]
  - devlink: introduce dump filtering function (Phil Sutter) [1342515]
  - devlink: split dl_argv_parse_put to parse and put parts (Phil Sutter) [1342515]
  - devlink: introduce helper to print out nice names (ifnames) (Phil Sutter) [1342515]
  - devlink: introduce pr_out_port_handle helper (Phil Sutter) [1342515]
  - list: add list_add_tail helper (Phil Sutter) [1342515]
  - list: add list_for_each_entry_reverse macro (Phil Sutter) [1342515]
  - devlink: fix "devlink port" help message (Phil Sutter) [1342515]
  - devlink: ignore build result (Phil Sutter) [1342515]
  - add devlink tool (Phil Sutter) [1342515]
  - include: add linked list implementation from kernel (Phil Sutter) [1342515]
  - configure: cleanup (Phil Sutter) [1342515]
  - configure: Check for libmnl (Phil Sutter) [1342515]
  - configure: Add check for the doc tools (Phil Sutter) [1342515]
  - add if_macsec header (Davide Caratti) [1300765]
  - RH-INTERNAL: update kernel headers to v4.6.0 (Davide Caratti) [1300765]
  - utils: fix hex digits parsing in hexstring_a2n() (Davide Caratti) [1300765]
  - ip: add MACsec support (Davide Caratti) [1300765]
  - utils: provide get_hex to read a hex digit from a char (Davide Caratti) [1300765]
  - utils: add get_be{16, 32, 64}, use them where possible (Davide Caratti) [1300765]
  - utils: make hexstring_a2n provide the number of hex digits parsed (Davide Caratti) [1300765]
  - lib/ll_addr: improve ll_addr_n2a() a bit (Davide Caratti) [1300765]
  - iproute2: arpd: use ll_addr_a2n and ll_addr_n2a (Davide Caratti) [1300765]
  - iproute2: utils: change hexstring_n2a and hexstring_a2n to do not work with ":" (Davide Caratti) [1300765]


author: Phil Sutter <psutter@redhat.com> [3.10.0-69.el7]
changelog:
  - ip-address.8: Document autojoin flag (Phil Sutter) [1333513]
  - ip-link.8: Fix font choices (Phil Sutter) [1269528]
  - ip-link: fix man page warnings (Phil Sutter) [1269528]
  - vxlan: fix help and man text (Phil Sutter) [1269528]
  - ip-link: fix unterminated string in manpage (Phil Sutter) [1269528]
  - ip-link.8: Add slave type option descriptions (Phil Sutter) [1269528]
  - ip-link.8: Place 'ip link set' warning more prominently (Phil Sutter) [1269528]
  - ip-link.8: Extend type list in synopsis (Phil Sutter) [1269528]
  - man ip-link: Remove extra GROUP explanation (Phil Sutter) [1269528]
  - man ip-link: Add short description about 'group' (Phil Sutter) [1269528]
  - man ip-link: Add deleting links by group (Phil Sutter) [1269528]
  - iplink: bond_slave: Add missing help functions (Phil Sutter) [1269528]
  - iplink: List valid 'type' argument in ip link help text (Phil Sutter) [1269528]
  - ip link: Add group in usage() for 'ip link delete' (Phil Sutter) [1269528]
  - iproute: constify rtattr_cmp (Phil Sutter) [1348133]
  - ip route: restore route entries in correct order (Phil Sutter) [1348133]


author: Phil Sutter <psutter@redhat.com> [3.10.0-70.el7]
changelog:
  - man: ip-link: Document query_rss option (Phil Sutter) [1264146]
  - Document VF link state control in the ip-link man page (Phil Sutter) [1264146]
  - ipneigh: List all nud states in help output (Phil Sutter) [1276661]
  - iproute2: ip-route.8.in: Add expires option for ip route (Phil Sutter) [1357020]
  - ip route: timeout for routes has to be set in seconds (Phil Sutter) [1357020]
  - route: allow routes to be configured with expire values (Phil Sutter) [1357020]


author: Phil Sutter <psutter@redhat.com> [3.10.0-71.el7]
changelog:
  - ip: add paren to silence warning (Phil Sutter) [1340914]
  - Fix MAC address length check (Jakub Sitnicki) [1253767 1271580]
  - iplink: Check address length via netlink (Jakub Sitnicki) [1253767 1271580]
  - iplink: Add missing variable initialization (Jakub Sitnicki) [1253767 1271580]
  - ip link: Fix crash on older kernels when show VF dev (Jakub Sitnicki) [1340914]
  - ip link: Remove unnecessary device checking (Jakub Sitnicki) [1340914]
  - ip: check for missing dev arg when doing VF rate (Jakub Sitnicki) [1340914]
  - Add support to configure SR-IOV VF minimum and maximum Tx rate through ip tool (Jakub Sitnicki) [1340914]


author: Phil Sutter <psutter@redhat.com> [3.10.0-72.el7]
changelog:
  - macsec: cipher and icvlen can be set separately (Davide Caratti) [1354408]
  - ip {link,address}: add 'macsec' item to TYPE list (Davide Caratti) [1354702]
  - man: macsec: fix macsec related typos (Davide Caratti) [1354702 1354319]
  - Revert "Allow specifying bridge port STP state by name rather than number." (Phil Sutter) [1288042]
  - Revert "fix ip -force -batch to continue on errors" (Phil Sutter) [1288042]
  - Revert "ip: fix exit code for addrlabel" (Phil Sutter) [1288042]
  - Revert "link dump filter" (Phil Sutter) [1288042]
  - Revert "ip: return correct exit code on route failure" (Phil Sutter) [1288042]
  - Revert "ip: fix exit code for rule failures" (Phil Sutter) [1288042]
  - man: ip-link: Drop fou and gue related documentation (Phil Sutter) [1013584]
  - man: ip-link, ip-address: Drop references to ipvlan (Phil Sutter) [1013584]
  - doc, man: ip-rule: Remove incorrect statement about rule 0 (Phil Sutter) [1362561]


author: Phil Sutter <psutter@redhat.com> [3.10.0-73.el7]
changelog:
  - ip-link: add missing {min,max}_tx_rate to help text (Phil Sutter) [1340914]
  - man: ip-link.8: Document missing geneve options (Phil Sutter) [1339178]
  - iproute.spec: Fix for missing cbq.8 man page (Phil Sutter) [1362551]


author: Jeremy Katz <katzj@redhat.com> - 2.0.13.2-1
changelog:
  - update to 2.0.13.2 (#139083)
    - fix firmware upload for firmware in /lib instead of /usr/lib
    - fix sysfs race


author: Will Woods <wwoods@redhat.com> - 2.2.13-2
changelog:
  - Fix iprdump startup - #483340
  - iprutils-swab-moved.patch - fix compilation with 2.6.29 kernels (#483643)


author: Jakub Čajka <jcajka@redhat.com> - 2.4.2-1
changelog:
  - Resolves: #1088562 - [7.1 FEAT] iprutils package update - ppc64
  - Resolves: #1044679 - iprutils should use systemd
  - Resolves: #1092519 - iprutils - PIE and RELRO check


author: Jakub Čajka <jcajka@redhat.com> - 2.4.8-1
changelog:
  - Resolves: #1182038 - [7.2 FEAT] iprutils package update - ppc64/ppc64le
  - Resolves: #1183460 - RHEL7.1 BE: iprutils: Set known zeroed after format


author: Sinny Kumari <skumari@redhat.com> - 2.4.11.1-1
changelog:
  - Resolves: #1274367 - [7.3 FEAT] iprutils package update
  - Resolves: #1297921 - IPR: Raid migration fails to kick while executing through command line


author: Sinny Kumari <skumari@redhat.com> - 2.4.12.1-1
changelog:
  - Resolves: #1364131 - Integrate various important bug fixes for iprutils in
    RHEL7.3 by updating iprutils to 2.4.12


author: Mathieu Bridon <bochecha@fedoraproject.org> - 6.11-1
changelog:
  - New upstream release.
  - Removed our patch, it has been integrated upstream. As such, we also don't
    need to re-run autoreconf any more.


author: Mathieu Bridon <bochecha@fedoraproject.org> - 6.14-1
changelog:
  - New upstream release.
  - Fix scriptlets, ldconfig is needed for the libs subpackage, not the main one.


author: Thomas Woerner <twoerner@redhat.com> - 6.19-5
changelog:
  - New service sub package to provide the ipset service (RHBZ#1136257)
    Service and start-stop script from F-24
  - Fixed ipset package summary (RHBZ#1195171)
    Spec file derived from F-24


author: Thomas Woerner <twoerner@redhat.com> - 6.19-6
changelog:
  - Use /etc/sysconfig/ipset-config in service as EnvironmentFile (RHBZ#1136257)
  - Use /etc/sysconfig/ipset for data as in RHEL-6 (RHBZ#1136257)
  - No save on reload, but legacy save action (RHBZ#1136257)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - move iptables to /sbin.
  - excludearch alpha for now, not building there because of compiler bug(?)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.2
  - fix up ipv6 split
  - add init script
  - Move the plugins from /usr/lib/iptables to /lib/iptables.
    This needs to work before /usr is mounted...
  - Use -O1 on alpha (compiler bug)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix bugzilla #25986 (initscript not marked as config file)
  - fix bugzilla #25962 (iptables-restore)
  - mv chkconfig --del from postun to preun


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Yet another initscript fix (#30173)
  - Fix the fixes; they fixed some issues but broke more important
    stuff :/ (#30176)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-1
changelog:
  - Update to 1.2.4 (various fixes, including security fixes; among others:
    - Fix init script (#31133)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-2
changelog:
  - Merge ip6tables improvements from Ian Prowell <iprowell@prowell.org>
    - Update URL (#59354)
  - Use /sbin/chkconfig rather than chkconfig in %postun script


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed iptables and ip6tables initscript output, based on #70511
  - check return status of all iptables calls, not just the last one
    in a 'for' loop.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - remove check for very old kernel versions in init scripts
  - sync up both init scripts and remove some further ugly things
  - add some docu into rpm


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-5
changelog:
  - new config option IPTABLES_SAVE_ON_RESTART
  - init script: new status, save and restart
  - fixes #44905, #65389, #80785, #82860, #91040, #91560 and #91374


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-6
changelog:
  - IPTABLES_SAVE_COUNTER defaults to no, now
  - install config file in /etc/sysconfig
  - exchange unload of ip_tables and ip_conntrack
  - fixed start function


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-12.1
changelog:
  - fixed lost udp port range in ip6tables-save (#104484)
  - fixed non numeric multiport port output in ipXtables-savs


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-13
changelog:
  - marked all messages in iptables init script for translation (#107462)
  - enabled devel package (#105884, #106101)
  - bumped build for fedora for libipt_recent.so (#106002)


author: Thomas Woerner <twoerner@redhat.com> 1.2.9-1
changelog:
  - vew version 1.2.9
  - new config options in ipXtables-config:
    IPTABLES_MODULES_UNLOAD
  - more documentation in ipXtables-config
  - fix for netlink security issue in libipq (devel package)
  - print fix for libipt_icmp (#109546)


author: Thomas Woerner <twoerner@redhat.com> 1.2.11-3.1
changelog:
  - changed default behaviour for IPTABLES_STATUS_NUMERIC to "yes" (#129731)
  - modified config file to match this change and un-commented variables with
    default values


author: Thomas Woerner <twoerner@redhat.com> 1.3.0-2
changelog:
  - Remove unnecessary explicit kernel dep (#146142)
  - Fixed out of bounds accesses (#131848): Thanks to Steve Grubb
    for the patch
  - Adapted iptables-config to reference to modprobe.conf (#150143)
  - Remove misleading message (#140154): Thanks to Ulrich Drepper
    for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-1
changelog:
  - new version 1.3.4
  - dropped free_opts patch (upstream fixed)
  - made libipq PIC (#158623)
  - additional configuration options for iptables startup script (#172929)
    Thanks to Jan Gruenwald for the patch
  - spec file cleanup (dropped linux_header define and usage)


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-2
changelog:
  - fix for plugin problem: link with "gcc -shared" instead of "ld -shared" and 
    replace "_init" with "__attribute((constructor)) my_init"


author: Thomas Woerner <twoerner@redhat.com> 1.3.7-1
changelog:
  - new verison 1.3.7
  - iptc is not a public interface and therefore not installed anymore
  - dropped upstream secmark patch


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-2
changelog:
  - fixed initscript for LSB conformance (rhbz#246953, rhbz#242459)
  - provide iptc interface again, but unsupported (rhbz#216733)
  - compile all extension, which are supported by the kernel-headers package
  - review fixes (rhbz#225906)


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-3
changelog:
  - do not depend on local_fs in lsb header - this delayes start after network
  - fixed exit code for initscript usage


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-4
changelog:
  - fixed IPv6 reject type (rhbz#295181)
  - fixed init script: start, stop and status
  - support netfilter compiled into kernel in init script (rhbz#295611)
  - dropped inversion for limit modules from man pages (rhbz#220780)
  - fixed typo in ip6tables man page (rhbz#236185)


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-4.1
changelog:
  - do not start ip6tables if ipv6 is blacklisted (rhbz#236888)
  - use simpler fix for (rhbz#295611)
    Thanks to Linus Torvalds for the patch.


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-5
changelog:
  - fixed error code for stopping a already stopped firewall (rhbz#321751)
  - moved blacklist test into start


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-6
changelog:
  - fixed leaked file descriptor before fork/exec (rhbz#312191)
  - blacklisting is not working, use "install X /bin/(true|false)" test instead
  - return private exit code 150 for disabled ipv6 support
  - use script name for output messages


author: Thomas Woerner <twoerner@redhat.com> 1.4.0-1
changelog:
  - new version 1.4.0
  - fixed condrestart (rhbz#428148)
  - report the module in rmmod_r if there is an error
  - use nf_ext_init instead of my_init for extension constructors


author: Thomas Woerner <twoerner@redhat.com> 1.4.0-3
changelog:
  - use the kernel headers from the build tree for iptables for now to be able to 
    compile this package, but this makes the package more kernel dependant
  - use s6_addr32 instead of in6_u.u6_addr32


author: Tom "spot" Callaway <tcallawa@redhat.com> 1.4.0-5
changelog:
  - use normal kernel headers, not linux/compiler.h
  - change BuildRequires: kernel-devel to kernel-headers
  - We need to do this to be able to build for both sparcv9 and sparc64 
    (there is no kernel-devel.sparcv9)


author: Thomas Woerner <twoerner@redhat.com> 1.4.1-1
changelog:
  - new version 1.4.1 with new build environment
  - additional ipv6 network mask patch from Jan Engelhardt
  - spec file cleanup
  - removed old patches


author: Thomas Woerner <twoerner@redhat.com> 1.4.2-1
changelog:
  - new version 1.4.2
  - removed TOS value mask patch (upstream)
  - more review fixes (rhbz#225906)
  - install all header files (rhbz#462207)
  - dropped nf_ext_init (rhbz#472548)


author: Thomas Woerner <twoerner@redhat.com> 1.4.2-3
changelog:
  - still more review fixes (rhbz#225906)
    - consistent macro usage
    - use sed instead of perl for rpath removal
    - use standard RPM CFLAGS, but also -fno-strict-aliasing (needed for libiptc*)


author: Thomas Woerner <twoerner@redhat.com> 1.4.3.1-1
changelog:
  - new version 1.4.3.1
    - libiptc is now shared
    - supports all new features of the 2.6.29 kernel
  - dropped typo_latter patch


author: Thomas Woerner <twoerner@redhat.com> 1.4.4-1
changelog:
  - new version 1.4.4 with support for all new features of 2.6.30
    - several man page fixes
    - iptables: replace open-coded sizeof by ARRAY_SIZE
    - libip6t_policy: remove redundant functions
    - policy: use direct xt_policy_info instead of ipt/ip6t
    - policy: merge ipv6 and ipv4 variant
    - extensions: add `cluster' match support
    - extensions: add const qualifiers in print/save functions
    - extensions: use NFPROTO_UNSPEC for .family field
    - extensions: remove redundant casts
    - iptables: close open file descriptors
    - fix segfault if incorrect protocol name is used
    - replace open-coded sizeof by ARRAY_SIZE
    - do not include v4-only modules in ip6tables manpage
    - use direct xt_policy_info instead of ipt/ip6t
    - xtables: fix segfault if incorrect protocol name is used
    - libxt_connlimit: initialize v6_mask
    - SNAT/DNAT: add support for persistent multi-range NAT mappings


author: Thomas Woerner <twoerner@redhat.com> 1.4.5-1
changelog:
  - new version 1.4.5 with support for all new features of 2.6.31
    - libxt_NFQUEUE: add new v1 version with queue-balance option
    - xt_conntrack: revision 2 for enlarged state_mask member
    - libxt_helper: fix invalid passed option to check_inverse
    - libiptc: split v4 and v6
    - extensions: collapse registration structures
    - iptables: allow for parse-less extensions
    - iptables: allow for help-less extensions
    - extensions: remove empty help and parse functions
    - xtables: add multi-registration functions
    - extensions: collapse data variables to use multi-reg calls
    - xtables: warn of missing version identifier in extensions
    - multi binary: allow subcommand via argv[1]
    - iptables: accept multiple IP address specifications for -s, -d
    - several build fixes
    - several man page fixes
  - fixed two leaked file descriptors on sockets (rhbz#521397)


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-1
changelog:
  - new version 1.4.6 with support for all new features of 2.6.32
    - several man page fixes
    - Support for nommu arches
    - realm: remove static initializations
    - libiptc: remove unused functions
    - libiptc: avoid strict-aliasing warnings
    - iprange: do accept non-ranges for xt_iprange v1
    - iprange: warn on reverse range
    - iprange: roll address parsing into a loop
    - iprange: do accept non-ranges for xt_iprange v1 (log)
    - iprange: warn on reverse range (log)
    - libiptc: fix wrong maptype of base chain counters on restore
    - iptables: fix undersized deletion mask creation
    - style: reduce indent in xtables_check_inverse
    - libxtables: hand argv to xtables_check_inverse
    - iptables/extensions: make bundled options work again
    - CONNMARK: print mark rules with mask 0xffffffff as set instead of xset
    - iptables: take masks into consideration for replace command
    - doc: explain experienced --hitcount limit
    - doc: name resolution clarification
    - iptables: expose option to zero packet/byte counters for a specific rule
    - build: restore --disable-ipv6 functionality on system w/o v6 headers
    - MARK: print mark rules with mask 0xffffffff as --set-mark instead of --set-xmark
    - DNAT: fix incorrect check during parsing
    - extensions: add osf extension
    - conntrack: fix --expires parsing


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-2
changelog:
  - moved libip*tc and libxtables libs to /lib[64], added symlinks for .so libs
    to /usr/lib[64] for compatibility (rhbz#558796)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-1
changelog:
  - new version 1.4.7 with support for all new features of 2.6.33 (rhbz#570767)
    - libip4tc: Add static qualifier to dump_entry()
    - libipq: build as shared library
    - recent: reorder cases in code (cosmetic cleanup)
    - several man page and documentation fixes
    - policy: fix error message showing wrong option
    - includes: header updates
    - Lift restrictions on interface names
  - fixed license and moved iptables-xml into base package according to review


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-2
changelog:
  - added default values for IPTABLES_STATUS_VERBOSE and
    IPTABLES_STATUS_LINENUMBERS in init script
  - added missing lsb keywords Required-Start and Required-Stop to init script


author: Thomas Woerner <twoerner@redhat.com> 1.4.8-1
changelog:
  - new version 1.4.8 all new features of 2.6.34 (rhbz#)
    - extensions: REDIRECT: fix --to-ports parser
    - iptables: add noreturn attribute to exit_tryhelp()
    - extensions: MASQUERADE: fix --to-ports parser
    - libxt_comment: avoid use of IPv4-specific examples
    - libxt_CT: add a manpage
    - iptables: correctly check for too-long chain/target/match names
    - doc: libxt_MARK: no longer restricted to mangle table
    - doc: remove claim that TCPMSS is limited to mangle
    - libxt_recent: add a missing space in output
    - doc: add manpage for libxt_osf
    - libxt_osf: import nfnl_osf program
    - extensions: add support for xt_TEE
    - CT: fix --ctevents parsing
    - extensions: add CT extension
    - libxt_CT: print conntrack zone in ->print/->save
    - xtables: fix compilation when debugging is enabled
    - libxt_conntrack: document --ctstate UNTRACKED
    - iprange: fix xt_iprange v0 parsing


author: Thomas Woerner <twoerner@redhat.com> 1.4.9-1
changelog:
  - new version 1.4.9 with all new features of 2.6.35
    - doc: xt_hashlimit: fix a typo
    - doc: xt_LED: nroff formatting requirements
    - doc: xt_string: correct copy-and-pasting in manpage
    - extensions: add the LED target
    - extensions: libxt_quota.c: Support option negation
    - extensions: libxt_rateest: fix bps options for iptables-save
    - extensions: libxt_rateest: fix typo in the man page
    - extensions: REDIRECT: add random help
    - includes: sync header files from Linux 2.6.35-rc1
    - libxt_conntrack: do print netmask
    - libxt_hashlimit: always print burst value
    - libxt_set: new revision added
    - utils: add missing include flags to Makefile
    - xtables: another try at chain name length checking
    - xtables: remove xtables_set_revision function
    - xt_quota: also document negation
    - xt_sctp: Trace DATA chunk that supports SACK-IMMEDIATELY extension
    - xt_sctp: support FORWARD_TSN chunk type


author: Thomas Woerner <twoerner@redhat.com> 1.4.10-1
changelog:
  - new version 1.4.10 with all new features of 2.6.36
    - all: consistent syntax use in struct option
    - build: fix static linking
    - doc: let man(1) autoalign the text in xt_cpu
    - doc: remove extra empty line from xt_cpu
    - doc: minimal spelling updates to xt_cpu
    - doc: consistent use of markup
    - extensions: libxt_quota: don't ignore the quota value on deletion
    - extensions: REDIRECT: add random help
    - extensions: add xt_cpu match
    - extensions: add idletimer xt target extension
    - extensions: libxt_IDLETIMER: use xtables_param_act when checking options
    - extensions: libxt_CHECKSUM extension
    - extensions: libipt_LOG/libip6t_LOG: support macdecode option
    - extensions: fix compilation of the new CHECKSUM target
    - extensions: libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
    - iptables-xml: resolve compiler warnings
    - iptables: limit chain name length to be consistent with targets
    - libiptc: add Libs.private to pkgconfig files
    - libiptc: build with -Wl,--no-as-needed
    - xtables: remove unnecessary cast
  - dropped xt_CHECKSUM, added upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.11-1
changelog:
  - new version 1.4.11 with all new features of 2.6.37-39 (not usable)
    - lots of changes and bugfixes for base and extensions
    - complete changelog:
      http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.11.txt


author: Thomas Woerner <twoerner@redhat.com> 1.4.11.1-1.1
changelog:
  -  added temporary provides for libxtables.so.5 to be able to rebuild iproute,
     which is part of the standard build environment


author: Thomas Woerner <twoerner@redhat.com> 1.4.11.1-3
changelog:
  - added support for native systemd file (rhbz#694738)
    - new iptables.service file
    - additional requires
    - moved sysv init scripts to /usr/libexec
    - added new post, preun and postun scripts and triggers


author: Thomas Woerner <twoerner@redhat.com> 1.4.12-1
changelog:
  - new version 1.4.12 with support of all new features of kernel 3.0
    - build: attempt to fix building under Linux 2.4
    - build: bump soversion for recent data structure change
    - build: install modules in arch-dependent location
    - doc: fix group range in libxt_NFLOG's man
    - doc: fix version string in ip6tables.8
    - doc: include matches/targets in manpage again
    - doc: mention multiple verbosity flags
    - doc: the -m option cannot be inverted
    - extensions: support for per-extension instance global variable space
    - iptables-apply: select default rule file depending on call name
    - iptables: consolidate target/match init call
    - iptables: Coverity: DEADCODE
    - iptables: Coverity: NEGATIVE_RETURNS
    - iptables: Coverity: RESOURCE_LEAK
    - iptables: Coverity: REVERSE_INULL
    - iptables: Coverity: VARARGS
    - iptables: restore negation for -f
    - libip6t_HL: fix option names from ttl -> hl
    - libipt_LOG: fix ignoring all but last flags
    - libxtables: ignore whitespace in the multiaddress argument parser
    - libxtables: properly reject empty hostnames
    - libxtables: set clone's initial data to NULL
    - libxt_conntrack: move more data into the xt_option_entry
    - libxt_conntrack: restore network-byte order for v1,v2
    - libxt_hashlimit: use a more obvious expiry value by default
    - libxt_rateest: abolish global variables
    - libxt_RATEEST: abolish global variables
    - libxt_RATEEST: fix userspacesize field
    - libxt_RATEEST: use guided option parser
    - libxt_state: fix regression about inversion of main option
    - option: remove last traces of intrapositional negation
  - complete changelog:
    http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.12.txt


author: Thomas Woerner <twoerner@redhat.com> 1.4.12-1.1
changelog:
  - added temporary provides for libxtables.so.6 to be able to rebuild iproute,
    which is part of the standard build environment


author: Thomas Woerner <twoerner@redhat.com> 1.4.12.1-1
changelog:
  - new version 1.4.12.1 with new pkgconfig/libipq.pc
    - build: abort autogen on subcommand failure
    - build: strengthen check for overlong lladdr components
    - build: workaround broken linux-headers on RHEL-5
    - doc: clarify libxt_connlimit defaults
    - doc: fix typo in libxt_TRACE
    - extensions: use multi-target registration
    - libip6t_dst: restore setting IP6T_OPTS_LEN flag
    - libip6t_frag: restore inversion support
    - libip6t_hbh: restore setting IP6T_OPTS_LEN flag
    - libipq: add pkgconfig file
    - libipt_ttl: document that negation is available
    - libxt_conntrack: fix --ctproto 0 output
    - libxt_conntrack: remove one misleading comment
    - libxt_dccp: fix deprecated intrapositional ordering of !
    - libxt_dccp: fix random output of ! on --dccp-option
    - libxt_dccp: provide man pages options in short help too
    - libxt_dccp: restore missing XTOPT_INVERT tags for options
    - libxt_dccp: spell out option name on save
    - libxt_dscp: restore inversion support
    - libxt_hashlimit: default htable-expire must be in milliseconds
    - libxt_hashlimit: observe new default gc-expire time when saving
    - libxt_hashlimit: remove inversion from hashlimit rev 0
    - libxt_owner: restore inversion support
    - libxt_physdev: restore inversion support
    - libxt_policy: remove superfluous inversion
    - libxt_set: put differing variable names in directly
    - libxt_set: update man page about kernel support on the feature
    - libxt_string: define _GNU_SOURCE for strnlen
    - libxt_string: escape the escaping char too
    - libxt_string: fix space around arguments
    - libxt_string: replace hex codes by char equivalents
    - libxt_string: simplify hex output routine
    - libxt_tcp: always print the mask parts
    - libxt_TCPMSS: restore build with IPv6-less libcs
    - libxt_TOS: update linux kernel version list for backported fix
    - libxt_u32: fix missing allowance for inversion
    - src: remove unused IPTABLES_MULTI define
    - tests: add negation tests for libxt_statistic
    - xtoptions: flag use of XTOPT_POINTER without XTOPT_PUT
  - removed include/linux/types.h before build to be able to compile


author: Thomas Woerner <twoerner@redhat.com> 1.4.12.2-1
changelog:
  - new version 1.4.12.2 with new pkgconfig/libip4tc.pc and pkgconfig/libip6tc.pc
    - build: make check stage not fail when building statically
    - build: restore build order of modules
    - build: scan for unreferenced symbols
    - build: sort file list before build
    - doc: clarification on the meaning of -p 0
    - doc: document iptables-restore's -T option
    - doc: fix undesired newline in ip6tables-restore(8)
    - ip6tables-restore: implement missing -T option
    - iptables: move kernel version find routing into libxtables
    - libiptc: provide separate pkgconfig files
    - libipt_SAME: set PROTO_RANDOM on all ranges
    - libxtables: Fix file descriptor leak in xtables_lmap_init on error
    - libxt_connbytes: fix handling of --connbytes FROM
    - libxt_CONNSECMARK: fix spacing in output
    - libxt_conntrack: improve error message on parsing violation
    - libxt_NFQUEUE: fix --queue-bypass ipt-save output
    - libxt_RATEEST: link with -lm
    - libxt_statistic: link with -lm
    - Merge branch 'stable'
    - Merge branch 'stable' of git://dev.medozas.de/iptables
    - nfnl_osf: add missing libnfnetlink_CFLAGS to compile process
    - xtoptions: fill in fallback value for nvals
    - xtoptions: simplify xtables_parse_interface


author: Thomas Woerner <twoerner@redhat.com> 1.4.14-1
changelog:
  - new version 1.4.14
    - extensions: add IPv6 capable ECN match extension
    - extensions: add nfacct match
    - extensions: add rpfilter module
    - extensions: libxt_rateest: output all options in save hook
    - iptables: missing free() in function cache_add_entry()
    - iptables: missing free() in function delete_entry()
    - libiptc: fix retry path in TC_INIT
    - libiptc: Returns the position the entry was inserted
    - libipt_ULOG: fix --ulog-cprange
    - libxt_CT: add --timeout option
    - ip(6)tables-restore: make sure argv is NULL terminated
    - Revert "libiptc: Returns the position the entry was inserted"
    - src: mark newly opened fds as FD_CLOEXEC (close on exec)
    - tests: add rateest match rules
  - dropped patch5 (cloexec), merged upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.15-1
changelog:
  - new version 1.4.15
    - extensions: add HMARK target
    - iptables-restore: fix parameter parsing (shows up with gcc-4.7)
    - iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)
    - libxtables: add xtables_ip[6]mask_to_cidr
    - libxt_devgroup: add man page snippet
    - libxt_hashlimit: add support for byte-based operation
    - libxt_recent: add --mask netmask
    - libxt_recent: remove unused variable
    - libxt_HMARK: correct a number of errors introduced by Pablo's rework
    - libxt_HMARK: fix ct case example
    - libxt_HMARK: fix output of iptables -L
    - Revert "iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)"


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-1
changelog:
  - new version 1.4.16.2
    - build: support for automake-1.12
    - build: separate AC variable replacements from xtables.h
    - build: have `make clean` remove dep files too
    - doc: grammatical updates to libxt_SET
    - doc: clean up interpunction in state list for xt_conntrack
    - doc: deduplicate extension descriptions into a new manpage
    - doc: trim "state" manpage and reference conntrack instead
    - doc: have NOTRACK manpage point to CT instead
    - doc: mention iptables-apply in the SEE ALSO sections
    - extensions: libxt_addrtype: fix type in help message
    - include: add missing linux/netfilter_ipv4/ip_queue.h
    - iptables: fix wrong error messages
    - iptables: support for match aliases
    - iptables: support for target aliases
    - iptables-restore: warn about -t in rule lines
    - ip[6]tables-restore: cleanup to reduce one level of indentation
    - libip6t_frag: match any frag id by default
    - libxtables: consolidate preference logic
    - libxt_devgroup: consolidate devgroup specification parsing
    - libxt_devgroup: guard against negative numbers
    - libxt_LED: guard against negative numbers
    - libxt_NOTRACK: replace as an alias to CT --notrack
    - libxt_state: replace as an alias to xt_conntrack
    - libxt_tcp: print space before, not after "flags:"
    - libxt_u32: do bounds checking for @'s operands
    - libxt_*limit: avoid division by zero
    - Merge branch 'master' of git://git.inai.de/iptables
    - Merge remote-tracking branch 'nf/stable'
    - New set match revision with --return-nomatch flag support
  - dropped fixrestore patch, upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-2
changelog:
  - new sub package services providing the systemd services (RHBZ#862922)
  - new sub package utils: provides nfnl_osf and the pf.os database
  - using %{_libexecdir}/iptables as script path for the original init scripts
  - added service iptables save funcitonality using the new way provided by 
    initscripts 9.37.1 (RHBZ#748134)
  - added virtual provide for libxtables.so.7


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-4
changelog:
  - fixed missing services for update of pre F-18 installations (rhbz#867960)
    - provide and obsolete old main package in services sub package
    - provide and obsolete old ipv6 sub package (pre F-17) in services sub package


author: Ville Skyttä <ville.skytta@iki.fi> - 1.4.16.2-6
changelog:
  - Own unowned -services libexec dirs (#894464, Michael Scherer).
  - Fix -services unit file permissions (#732936, Michal Schmidt).


author: Thomas Woerner <twoerner@redhat.com> 1.4.18-1
changelog:
  - new version 1.4.18 
    - lots of documentation changes
    - Introduce match/target aliases
    - Add the "state" alias to the "conntrack" match
    - iptables: remove unused leftover definitions
    - libxtables: add xtables_rule_matches_free
    - libxtables: add xtables_print_num
    - extensions: libip6t_DNPT: fix wording in DNPT target
    - extension: libip6t_DNAT: allow port DNAT without address
    - extensions: libip6t_DNAT: set IPv6 DNAT --to-destination
    - extensions: S/DNPT: add missing save function
  - changes of 1.4.17:
    - libxt_time: add support to ignore day transition
    - Convert the NAT targets to use the kernel supplied nf_nat.h header
    - extensions: add IPv6 MASQUERADE extension
    - extensions: add IPv6 SNAT extension
    - extensions: add IPv6 DNAT target
    - extensions: add IPv6 REDIRECT extension
    - extensions: add IPv6 NETMAP extension
    - extensions: add NPT extension
    - extensions: libxt_statistic: Fix save output


author: Thomas Woerner <twoerner@redhat.com> 1.4.19.1-1
changelog:
  - new version 1.4.19.1
    - libxt_NFQUEUE: fix bypass option documentation
    - extensions: add connlabel match
    - extensions: add connlabel match
    - ip[6]tables: show --protocol instead of --proto in usage
    - libxt_recent: Fix missing space in manpage for --mask option
    - extensions: libxt_multiport: Update manpage to list valid protocols
    - utils: nfnl_osf: use the right nfnetlink lib
    - libip6t_NETMAP: Use xtables_ip6mask_to_cidr and get rid of libip6tc dependency
    - Revert "build: resolve link failure for ip6t_NETMAP"
    - libxt_osf: fix missing --ttl and --log in save output
    - libxt_osf: fix bad location for location in --genre
    - libip6t_SNPT: add manpage
    - libip6t_DNPT: add manpage
    - utils: updates .gitignore to include nfbpf_compile
    - extensions: libxt_bpf: clarify --bytecode argument
    - libxtables: fix parsing of dotted network mask format
    - build: bump version to 1.4.19
    - libxt_conntrack: fix state match alias state parsing
    - extensions: add libxt_bpf extension
    - utils: nfbpf_compile
    - doc: mention SNAT in INPUT chain since kernel 2.6.36
  - fixed changelog date weekdays where needed


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-1
changelog:
  - no connlabel.conf upstream anymore
  - new version 1.4.21
    - doc: clarify DEBUG usage macro
    - iptables: use autoconf to process .in man pages
    - extensions: libipt_ULOG: man page should mention NFLOG as replacement
    - extensions: libxt_connlabel: use libnetfilter_conntrack
    - Introduce a new revision for the set match with the counters support
    - libxt_CT: Add the "NOTRACK" alias
    - libip6t_mh: Correct command to list named mh types in manpage
    - extensions: libxt_DNAT, libxt_REDIRECT, libxt_NETMAP, libxt_SNAT, libxt_MASQUERADE, libxt_LOG: rename IPv4 manpage and tell about IPv6 support
    - extensions: libxt_LED: fix parsing of delay
    - ip{6}tables-restore: fix breakage due to new locking approach
    - libxt_recent: restore minimum value for --seconds
    - iptables-xml: fix parameter parsing (similar to 2165f38)
    - extensions: add copyright statements
    - xtables: improve get_modprobe handling
    - ip[6]tables: Add locking to prevent concurrent instances
    - iptables: Fix connlabel.conf install location
    - ip6tables: don't print out /128
    - libip6t_LOG: target output is different to libipt_LOG
    - build: additional include path required after UAPI changes
    - iptables: iptables-xml: Fix various parsing bugs
    - libxt_recent: restore reap functionality to recent module
    - build: fail in configure on missing dependency with --enable-bpf-compiler
    - extensions: libxt_NFQUEUE: add --queue-cpu-fanout parameter
    - extensions: libxt_set, libxt_SET: check the set family too
    - ip6tables: Use consistent exit code for EAGAIN
    - iptables: libxt_hashlimit.man: correct address
    - iptables: libxt_conntrack.man extraneous commas
    - iptables: libip(6)t_REJECT.man default icmp types
    - iptables: iptables-xm1.1 correct man section
    - iptables: libxt_recent.{c,man} dead URL
    - iptables: libxt_string.man add examples
    - extensions: libxt_LOG: use generic syslog reference in manpage
    - iptables: extensions/GNUMakefile.in use CPPFLAGS
    - iptables: correctly reference generated file
    - ip[6]tables: fix incorrect alignment in commands_v_options
    - build: add software version to manpage first line at configure stage
    - extensions: libxt_cluster: add note on arptables-jf
    - utils: nfsynproxy: fix error while compiling the BPF filter
    - extensions: add SYNPROXY extension
    - utils: add nfsynproxy tool
    - iptables: state match incompatibilty across versions
    - libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks
    - iptables: improve chain name validation
    - iptables: spurious error in load_extension
    - xtables: trivial spelling fix


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-2
changelog:
  - fixed system hang at shutdown if root device is network based (RHBZ#1007934)
    Thanks to Rodrigo A B Freire for the patch


author: Jiri Popelka <jpopelka@redhat.com> - 1.4.21-3
changelog:
  - no need to support the pre-systemd things
  - use systemd macros (#850166)
  - remove scriptlets for migrating to a systemd unit from a SysV initscripts
  - ./configure -> %configure
  - spec clean up
  - fix self-obsoletion


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-9
changelog:
  - fixed missing system hang at shutdown if root device is network based
    (RHBZ#1007934)
  - Fixed iptables-save man page completely wrong (RHBZ#1054871)
  - Fixed missing reload action for iptables service (RHBZ#1066007)
  - Fixed regressions from RHEL-6 iptables services (RHBZ#1067670)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-14
changelog:
  - Add cgroup support (RHBZ#1058660)
  - Add wait seonds support for commands (RHBZ#1156411)
  - Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
  - Add message for init script error returns (RHBZ#1200415)
  - Use flock for wait option (RHBZ#1202435)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-16
changelog:
  - Fix important coverity findings: missing include for flock and use bash for
    init script (RHBZ#1264399)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-17
changelog:
  - Fixed init script not to fail on missing restorecon (RHBZ#1246380)
  - Adapted man page snipplet for TRACE to use proper logging backend names
    (RHBZ#1261238)
  - Warn about use of DROP in nat table (RHBZ#1298879)
  - Fixed modules unload in init script (RHBZ#1324102)


author: Phil Cameron <pcameron@redhat.com> - 1.1.4-6
changelog:
  - fix 1283773 - segfault in rate_add_rate

    Jun 17 2014 Alejandro Pérez  <aeperezt@fedoraproject.org>
    fix 1109768 bad configuration logrotate
    Mar 02 2014 Alejandro Pérez  <aeperezt@fedoraproject.org>
    fix bug 1020552 - rpm report /var/lock/ipraf-ng is missing
    added missing file iptraf-nf-tmpfiles.conf
    Dec 03 2013 Nikola Pajkovsky <npajkovs@redhat.com>
    Fedora start using -Werror=format-security and iptraf-ng had some
    parts where error compilation was trigged.
    202b2e7b27a1 Makefile: add -Werror=format-security
    Resolved: #1037133


author: Matt Domsch <mdomsch@fedoraproject.org> - 0.9.9-1
changelog:
  - new upstream version 0.9.9
  -- plus patches from git up to 20090818 which fix build errors and
     other release-critical bugs.
  -- 0.9.9: added Attansic L1E and sis190/191 ethernet drivers.  Fixes
     and updates to e1000 and 3c90x drivers.
  -- 0.9.8: new commands: time, sleep, md5sum, sha1sum. 802.11 wireless
     support with Realtek 8180/8185 and non-802.11n Atheros drivers.
     New Marvell Yukon-II gigabet Ethernet driver.  HTTP redirection
     support.  SYSLINUX floppy image type (.sdsk) with usable file
     system.  Rewrites, fixes, and updates to 3c90x, forcedeth, pcnet32,
     e1000, and hermon drivers.


author: Matt Domsch <mdomsch@fedoraproject.org> - 1.0.1-1
changelog:
  - New drivers: Intel e1000, e1000e, igb, EFI snpnet, JMicron jme,
    Neterion X3100, vxge, pcnet32.
  - Bug fixes and improvements to drivers, wireless, DHCP, iSCSI,
    COMBOOT, and EFI.


author: Daniel P. Berrange <berrange@redhat.com> - 20120319-2.git0b2c788
changelog:
  - Remove BuildRoot & rm -rf of it in install/clean sections
  - Remove defattr in file section
  - Switch to use global, instead of define for macros
  - Add note about Patch1 not going upstream
  - Split BRs across lines for easier readability


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-4.gitc4bce43
changelog:
  - ipxe-Use-next-server-from-filename-s-settings-block.patch [bz#1062644]
  - Resolves: bz#1062644
    (pxe boot fails if next-server details come from a different dhcp server)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-5.gitc4bce43.el7
changelog:
  - ipxe-Enable-infrastructure-to-specify-an-autoboot-device-.patch [bz#1031518]
  - ipxe-Allow-prefix-to-specify-a-PCI-autoboot-device-locati.patch [bz#1031518]
  - ipxe-Store-boot-bus-dev.fn-address-as-autoboot-device-loc.patch [bz#1031518]
  - ipxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00..patch [bz#1031518]
  - ipxe-Revert-Remove-2-second-startup-wait.patch [bz#857123]
  - ipxe-Allow-ROM-banner-timeout-to-be-configured-independen.patch [bz#857123]
  - ipxe-Customize-ROM-banner-timeout.patch [bz#857123]
  - Resolves: bz#1031518
    (iPXE does not honor specified boot device)
  - Resolves: bz#857123
    (Guests never get an iPXE prompt)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20130517-6.gitc4bce43.el7
changelog:
  - ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
  - ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
  - ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
  - Resolves: bz#1084561
    (RFE: ship UEFI drivers for ipxe in RHEL-7.y)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-2.git6366fa7a.el7
changelog:
  - ipxe-Enable-IPv6-protocol-in-non-QEMU-builds.patch [bz#1350167]
  - Resolves: bz#1350167
    (ipxe: enable IPV6)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-3.git6366fa7a.el7
changelog:
  - ipxe-Add-pci_find_next_capability.patch [bz#1242850]
  - ipxe-Add-virtio-1.0-constants-and-data-structures.patch [bz#1242850]
  - ipxe-Add-virtio-1.0-PCI-support.patch [bz#1242850]
  - ipxe-Add-virtio-net-1.0-support.patch [bz#1242850]
  - ipxe-Renumber-virtio_pci_region-flags.patch [bz#1242850]
  - ipxe-Fix-virtio-pci-logging.patch [bz#1242850]
  - Resolves: bz#1242850
    (Ipxe can not recognize "network device" when enable virtio-1 of virtio-net-pci)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-4.git6366fa7a.el7
changelog:
  - ipxe-Send-TCP-keepalives-on-idle-established-connections.patch [bz#1322056]
  - ipxe-enable-e1000e-rom.patch [bz#1361534]
  - Resolves: bz#1322056
    (ipxe freeze during HTTP download with last RPM)
  - Resolves: bz#1361534
    (RFE: Integrate e1000e implementation in downstream QEMU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20160127-5.git6366fa7a.el7
changelog:
  - ipxe-Strip-802.1Q-VLAN-0-priority-tags.patch [bz#1316329]
  - Resolves: bz#1316329
    ([RFE] Properly Handle 8021.Q VID 0 Frames, as new vlan model in linux kernel does.)


author: Jesse Keating <jkeating@redhat.com> - 1.13-2
changelog:
  - rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc*
    (#203001)
  - Remove hack to use cvs checkin ID as release as it doesn't follow
    packaging guidelines


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.3-5
changelog:
  - Make irqbalance scan for new irqs when it detects new irqs (bz832815)
  - Fixes SIGFPE crash for some banning configuration (bz849792)
  - Fixes affinity_hint values processing (bz832815)
  - Adds banirq and bansript options (bz837049)
  - imake isn't needed for building any more (bz844359)
  - Fixes clogging of syslog (bz837646)
  - Added IRQBALANCE_ARGS variable for passing arguments via systemd(bz837048)
  - Fixes --hint-policy=subset behavior (bz844381)


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.6-5
changelog:
  - Fixed irqbalance web adresses in spec (bz1060810)
  - Default hintpolicy adjusted (bz1060814)
  - Missing autogen.sh call fixed


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.7-2
changelog:
  - fixed unused variable revealed by covscan
  - fixed ignored pid argument (#1155632)
  - warning when irqbalance started under non-root (#1155799)
  - more robust signal handling (#1158937)
  - fixed hostname in manpage (#1162251)


author: Hans de Goede <hdegoede@redhat.com> - 6.2.0.872-11
changelog:
  - Fix iscsid autostarting when upgrading from an older version
    (add iscsid.startup key to iscsid.conf on upgrade)
  - Fix printing of [ OK ] when successfully stopping iscsid
  - systemd related fixes:
   - Add Should-Start/Stop tgtd to iscsi init script to fix (re)boot from
     hanging when using locally hosted targets
   - %ghost /var/lock/iscsi and contents (#656605)


author: Hans de Goede <hdegoede@redhat.com> - 6.2.0.872-12
changelog:
  - Change iscsi init scripts to check for networking being actually up, rather
    then for NetworkManager being started (#692230)


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.18
changelog:
  - 789683 Fix boot slow down when the iscsi service is started
    (regression added in 6.2.0.872.16 when the nm wait was added).


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-1
changelog:
  - rebase to new upstream code
  - systemd conversion
  - 565245 Fix multilib issues caused by timestamp in doxygen footers


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-4
changelog:
  - build with libkmod support, instead of calling out to modprobe
  - enable socket activation by default


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-7
changelog:
  - Use the systemd tmpfiles service to recreate lockfiles in /var/lock
  - 955167 build as a position independent executable
  - 894576 fix order of setuid/setgid and drop additional groups


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-10
changelog:
  - sync with upstream git, minor context fixes after rebase of out-of-tree patches
  - iscsiuio is merged upstream, remove old source archive and patches
  - spec cleanups to fix rpmlint issues


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-11
changelog:
  - iscsi boot related fixes
    make sure iscsid gets started if there are any boot sessions running
    add reload target to fix double session problem when restarting from NM
    don't rely on session list passed from initrd, never got fully implemented
    remove patches related to running iscsid from initrd, possible to revisit later


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-16
changelog:
  - fix iscsiuio socket activation
  - have systemd start socket units on iscsiadm use, if not already listening


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-19
changelog:
  - 1007388 fixes for iscsiadm to support qla4xxx
  - refresh boot session info patches to final version from upstream,
    fixes context issues with later patches
  - 1006156, 1006161 Add/Update entries in chap table through Open-iSCSI
  - 948134 extend support to set additional parameters for network configuration
  - 1049710 update open-iscsi to support host statistics
  - 1043019 iscsiuio fix for arp cache flush issue
  - 1059332 Fix broken discovery sessions over iser
  - 1017393 split out iscsiuio into a seperate sub-package


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-20
changelog:
  - 1049710 host0 being treated as an invalid in the host stats command
  - 1015563 revert change to return code when calling login_portal for sessions
    that already exist, as it impacts users scripting around iscsiadm


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-21
changelog:
  - 1069825
  - boot session handling improvements
  - Fix iscsi-mark-root for changed iscsiadm output
  - Make sure iscsiuio is running for boot session recovery when using the
    bnx2i transport by forcing iscsiuio.service start
  - Make NM dispatch triggered re-check for autostart sessions async
  - Accept exit code 21, no records, from iscsiadm as success in
    iscsi.service


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-22
changelog:
  - 1081798 retry login on host not found error
  - 1111925 ignore iscsiadm return in iscsi.service
  - 1126524 make sure systemd order against remote mounts is correct
  - 963039 add discovery as a valid mode in iscsiadm.8
  - sync with upstream


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-24
changelog:
  - 1040343 segfault from unexpected netlink event during discovery
  - inhibit strict aliasing optimizations in iscsiuio, rpmdiff error


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-29
changelog:
  - 1166713 1187792 add missing ExecStart, only newer systemd lets that be optional for oneshot services


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-32
changelog:
  - 1235684 apply safe_logout setting to flashnode sessions as well
    but only when logging out by session id, not by flashnode index


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-34
changelog:
  - 1322000 ensure TCP abort on session failure to prevent data corruption with link flap
  - 1294964, 1265073, 1213569 iscsiuio update, fix small ARP table issue
  - 1309488 remove broken sysfs cache code to speed up login of many sessions
  - 1330348 sync with upstream Open-iSCSI for minor fixes


author: Florian La Roche <Florian.LaRoche@redhat.com>
changelog:
  - use relative instead of absolute link in postinstall script
  - use only one patch-file for the config file
  - change from 0700 to 0755 perms
  - change Makefiles instead of moving things around in the spec file
  - include the manpages of the X11 progs only in the xisdnload rpm


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - fix compilation with kernel 2.4.x
  - rebuild with new ncurses and Tcl
  - enable building of eurofile and divertctl stuff


author: Than Ngo <than@redhat.de>
changelog:
  - rebuilt for 7.0
  - FHS fixes
  - fix dependencies problem with new tcltk
  - fix to built with kernel-2.4


author: Than Ngo <than@redhat.de>
changelog:
  - add more documents
  - and missing config files to isdnlog
  - some fixes in vbox, isdnlog, vboxgetty
  - mark ioptions as %config(noreplace)
  - add pppdcapiplugin
  - add missing /sbin/ldconfig in %post and %postun
  - fix to build on ia64


author: Than Ngo <than@redhat.com>
changelog:
  - split package into isdn4k-utils, isdn4k-utils-vboxgetty, xisdnload
  - convert old isdn configuration format into new format
  - add startup script for loading module and starting isdnlog


author: Than Ngo <than@redhat.com>
changelog:
  - make isdnctrl executable by normal users (Bug #30803)
  - fix a minor bug in triggerpostun
  - fix rebuild problem in beehive if kernel-source is missed


author: Than Ngo <than@redhat.com> 3.1-47
changelog:
  - fixed symlinks bugs (bug #55306)
  - fix a bug in converting of old isdn configuration (bug #55083)
  - some hacks for ASUS COM ISDNLink ISA PnP


author: Than Ngo <than@redhat.com> 3.1-48
changelog:
  - new upstream
  - remove some unused patch files
  - move pppcapiplugin to /usr/lib/pppd, The plugin option now looks in here
  - devel sub package
  - buildreqquires: linuxdoc-tools


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.1-50
changelog:
  - new upstream, needed to switch isdnlog to EUR currency for contries that
    have it
  - fix installation of pppcapiplugin man page
  - don't build against 2.4.5 kernel headers, they're not compatible with
    2.4.17.


author: Than Ngo <than@redhat.com> 3.2-10.p1
changelog:
  - fix build problem with new libpcap

  -* Wed Jan 14 2004 Than Ngo <than@redhat.com> 3.2-9.p1
  - fixed permission problem


author: Than Ngo <than@redhat.com> 3.2-16.p1.1
changelog:
  - fix build problem with gcc-3.4
  - fix typo bug in isdnlog, bug #120568
  - fix capiplugin for working with pppd 2.4.2, bug #125723


author: Than Ngo <than@redhat.com> - 3.2-62
changelog:
  - fix #398121, capiplugin.so uses non-existent libcapi20.so
  - fix CAPI overflow
  - fix #471712, add sh architecture support


author: Than Ngo <than@redhat.com> - 3.2-69
changelog:
  - fix quotation issue with autoconf-2.64
  - fix bz#556056, split off -static subpackage
  - fix bz#539020, FTBFS


author: Than Ngo <than@redhat.com> - 3.2-70
changelog:
  - enable capi.new
  - add 40-isdn.rules, it's dropped from udev in F14 and later
  - fix multilib issue
  - add subpackage doc


author: Than Ngo <than@redhat.com> - 3.2-71
changelog:
  - fix bz#566909, thanks to Louis Lagendijk
      - own LIBDIR/capi
      - fix loading of plugins
      - remove chkconfig capi off


author: Than Ngo <than@redhat.com> - 3.2-72
changelog:
  - bz#545469, put vboxgetty config file in correct directory
  - fix wrong exit status in startup scrripts


author: Than Ngo <than@redhat.com> - 3.2-75
changelog:
  - apply patch to fix man pages, thanks to John Bradshaw
    bz#673794, bz#665079, bz#663637, bz#675715, bz#669053, bz#675676, bz#669081,
    bz#675604, bz#675679, bz#664335, bz#674204, bz#669091


author: Than Ngo <than@redhat.com> - 3.2-94
changelog:
  - Resolves: bz#1060370
    update patch to handle all cases by recursing through fmtmsg
    instead of vfmtmsg directly which depends on va_list type.


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 1.0.2
changelog:
  - Fixes for the iwpmd start-up scripts with systemd
  - A change to enable multi devices per port mapper client
  - Releasing libiwpm-1.0.2 to be included in OFED-3.18


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 1.0.3rc1
changelog:
  - Adding iwpmd.conf file to enable changing the size
    of the netlink socket receive buffer
  - Including a fix for failing to send netlink messages


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 1.0.3
changelog:
  - Fix for the init script to enable the service to start automatically
    after boot on SLES11 SP4
  - Releasing libiwpm-1.0.3 to be included in OFED-3.18-1


author: Rob Crittenden <rcritten@redhat.com> 4.2.4-5
changelog:
  - Include the 3 license files
  - Remove Requires for nss and nspr. These libraries have versioned symbols
    so BuildRequires is enough to set the minimum.
  - Add sparc64 for the 64-bit list


author: Rob Crittenden <rcritten@redhat.com> 4.2.4-6
changelog:
  - Use _jnidir macro instead of _javadir for the jar files. This will break
    multilib installs but adheres to the jpackage spec.


author: Rob Crittenden <rcritten@redhat.com> 4.2.6-1
changelog:
  - Resolves: bug 455305 - <cfu@redhat.com>
    CA ECC Signing Key Failure
  - Resolves: bug 502111 - <cfu@redhat.com>
    Need JSS interface for NSS's PK11_GenerateKeyPairWithOpFlags() function
  - Resolves: bug 503809 - <mharmsen@redhat.com>
    Update JSS version to 4.2.6
  - Resolves: bug 503817 - <mharmsen@redhat.com>
    Create JSS Javadocs as their own RPM


author: Rob Crittenden <rcritten@redhat.com> 4.2.6-4
changelog:
  - Resolves: bug 224688 - <cfu@redhat.com>
    Support ECC POP on the server
  - Resolves: bug 469456 - <jmagne@redhat.com>
    Server Sockets are hard coded to IPV4
  - Resolves: bug 509183 - <mharmsen@redhat.com>
    Set NSS dependency >= 3.12.3.99


author: John Dennis <jdennis@redhat.com> - 4.2.6-10
changelog:
  - Resolves: bug 656094 - <jdennis@redhat.com>
    Rebase jss to at least jss-4.2.6-9
  - <jdennis@redhat.com>
    merge in updates from Fedora
    move jar location to %{_libdir}/jss and provide symlinks, on 32bit looks like this:
      /usr/lib/java/jss4.jar -> /usr/lib/jss/jss4.jar
      /usr/lib/jss/jss4-<version>.jar
      /usr/lib/jss/jss4.jar -> jss4-<version>.jar
      /usr/lib/jss/libjss4.so
  - bug 654657 - <jdennis@redhat.com>
    Incorrect socket accept error message due to bad pointer arithmetic
  - bug 647364 - <cfu@redhat.com>
    Expose updated certificate verification function in JSS
  - bug 529945 - <cfu@redhat.com>
    expose NSS calls for OCSP settings
  - bug 638833 - <cfu@redhat.com>
    rfe ecc - add ec curve name support in JSS and CS
  - <rcritten@redhat.com>
    Need to explicitly catch UnsatisfiedLinkError exception for System.load()
  - bug 533304 - <rcritten@redhat.com>
    Move location of libjss4.so to subdirectory and use System.load() to
    load it instead of System.loadLibrary() for Fedora packaging compliance


author: Christina Fu <cfu@redhat.com> - 4.2.6-11
changelog:
  - bug 654657 - <jdennis@redhat.com>
    Incorrect socket accept error message due to bad pointer arithmetic
  - bug 661142 - <cfu@redhat.com>
    Verification should fail when a revoked certificate is added


author: Jack Magne <jmagne@redhat.com> - 4.2.6-15.99
changelog:
  - bug 694661 - TKS instance crash during token enrollment.
    Back out of previous patch for #676083.


author: Christina Fu <cfu@redhat.com> - 4.2.6-17
changelog:
  - Bug 670980 - Cannot create system certs when using LunaSA HSM in FIPS Mode
    and ECC algorithms (support tokens that don't do ECDH)


author: Christina Fu <cfu@redhat.com> - 4.2.6-21
changelog:
  - Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping
    unwrapping keys should be done in the token
  - support for PKCS5v2; support for secure PKCS12
  - Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after the
    in-place upgrade( CS 8.0->8.1)


author: Christina Fu <cfu@redhat.com> - 4.2.6-23
changelog:
  - Bugzilla Bug #797351 - JSS - HSM token name was mistaken for manufacturer
    identifier (cfu)
  - Bugzilla Bug #804840 - [RFE] ECC encryption keys cannot be archived
    ECC phase2 work - support for ECC encryption key archival and recovery (cfu)
  - Bugzilla Bug #783007 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . (mharmsen)
  - Dogtag TRAC Task #109 (https://fedorahosted.org/pki/ticket/109) - add
    benign JNI jar file symbolic link from JNI libdir to JNI jar file (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.2.6-24
changelog:
  - Bugzilla Bug #783007 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . BadPaddingException (mharmsen)


author: Christina Fu <cfu@redhat.com> - 4.2.6-35
changelog:
  - Bugzilla Bug #1040640 - Incorrect OIDs for SHA2 algorithms
    (cfu for jnimeh@gmail.com)
  - Bugzilla Bug #1133718 - Key strength validation is not performed for RC4
    algorithm (nkinder)
  - Bugzilla Bug #816396 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 via NSS through JSS (cfu)


author: Christina Fu <cfu@redhat.com> - 4.2.6-40
changelog:
  - Bugzilla 1074208 - pass up exact JSS certificate validation errors from NSS
    (edewata)
  - Bugzilla 1331596 - Key archival fails when KRA is configured with lunasa.
    (cfu)
  - PKI ticket 801 - Merge pki-symkey into jss (phase 1)
    (jmagne)


author: Christina Fu <cfu@redhat.com> - 4.2.6-42
changelog:
  - Sync up patches from both Fedora and RHEL; adding one patch
    (cfu, edewata, mharmsen) from RHEL:
  - Bugzilla Bug #1289799 - JSS build failure on F23 and Rawhide (edewata)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.05-2
changelog:
  - Build everything, obsoletes console-tools
  - s/Copyright:/License:/
  - License is GPL, not just distributable
  - Add our compose mappings from old console-tools
  - Add triggerpostun -- console-tools magic to get sane fonts and mappings


author: Than Ngo <than@redhat.com>
changelog:
  - update to 1.0.6
  - use %{_tmppath}
  - use find_lang
  - support new gettext
  - remove some patch files, which are included in 1.0.6
  - fix to use RPM_OPT_FLAGS


author: Jakub Jelinek <jakub@redhat.com> 1.06-24
changelog:
  - use cyr-sun16 cyrillic chars in latarcyrheb-sun16 font
    instead of old LatArCyrHeb-16 chars
  - add Euro character to latarcyrheb-sun16
  - use latarcyrheb-sun16 by default in unicode_start script


author: Nalin Dahyabhai <nalin@redhat.com> 1.06-27
changelog:
  - add detached signature
  - remove directory names from PAM configuration so that the same config file
    can be used for any arch on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 1.08-2
changelog:
  - only output terminal unicode init sequence if both stdout and stderr are
    connected to terminals, so that it doesn't show up when script outputs
    get piped to files


author: Adrian Havill <havill@redhat.com> 1.08-7
changelog:
  - make euro/latin-9 the default instead of latin-1 and 7-bit (#97013)
  - fix swedish keymap; se, not sv (#88791)
  - add fr-latin0 legacy alias of fr-latin-9 (#88324)
  - add ".map" ext to filename param of init script (#90562)


author: Adrian Havill <havill@redhat.com> 1.08-9
changelog:
  - don't print "plus before..." warnings about non-supported capslock
    in unimode <Andries.Brouwer@cwi.nl> (#81855)


author: Miloslav Trmac <mitr@redhat.com> - 1.12-4
changelog:
  - Don't ship a patch backup file
  - Mention in setfont.8 that 512-glyph fonts reduce the number of available
    colors (#140935, patch by Dmitry Butskoj)
  - Remove "Meta_acute" from German keymaps (#143124)
  - Make the %triggerun script condition more precise, ignore failure of the
    script


author: Miloslav Trmac <mitr@redhat.com> - 1.12-5
changelog:
  - Put "Meta_acute" back in German keymaps, just ignore it in (loadkeys -u)
    (patch by Jochen Schmitt)
  - Don't ship patch backup files, simpler way


author: Miloslav Trmac <mitr@redhat.com> - 1.12-11
changelog:
  - Don't ship character set lists (they are already in glibc-common) and an
    obsolete copy of kbd.FAQ


author: Miloslav Trmac <mitr@redhat.com> - 1.12-13
changelog:
  - Fix build with new coreutils
  - Hardcode paths in unicode_start to avoid a few file lookups (#178329)
  - Drop unnecessary Prereq: sed mktemp


author: Miloslav Trmac <mitr@redhat.com> - 1.12-19
changelog:
  - Ship "el" translation instead of the obsolete "gr" translation
    Resolves: #210749
  - Fix % quoting in %changelog


author: Miloslav Trmac <mitr@redhat.com> - 1.12-20
changelog:
  - Document that setkeycodes doesn't affect USB keyboards and that the kernel
    doesn't provide the raw scan codes by default
    Resolves: #211803


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.12-26
changelog:
  - Fix ro.map to generate right unicode for s, S, t, T with comma
  - Fix LatArCyrHeb-16 unicode mapping table to show comma-version
    of s, S, t, T and cedilla-version of s, S, t, T as the same glyph
    (because there is no font in kbd for comma-version)
    Resolves: #329071


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.12-28
changelog:
  - Fix ro.map.gz, add ro_std.map.gz, drop ro_win.map.gz,
    add Lat2-Terminus16.psf console font (many thanks to Alexandru Szasz
    <alexxed@gmail.com>)
    Resolves: #253892


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15-4
changelog:
  - Merge review (drop Provides/Obsoletes, change Prereq to Requires,
    add URL, convert ChangeLog to utf-8, replace locale destination
    with macro, add COPYING and add dvorak documentation)
    Resolves: #225958


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.2-1
changelog:
  - Update to kbd-1.15.2 (removed kbd-1.15-quiet_doc.patch and romanian keymaps, both are
    part of the upstream tarball now)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.3-4
changelog:
  - Ship double scaled latarcyrheb console font for high resolution screens
    (created by Tom Horsley)
    Resolves: #617768


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-1
changelog:
  - Update to kbd-1.15.5 (removed kbd-1.15-resizecon-x86_64.patch,
    kbd-1.15-defkeymap.patch, kbd-1.15.3-fix-es-translation.patch,
    kbd-1.15.3-loadkeys-d.patch)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-3
changelog:
  - Include xkb layouts from xkeyboard-config converted to console keymaps
  - Add version to vlock provides
    Resolves: #902564


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8
changelog:
  - Fix vlock doesn't perform PAM account management or credential reinitialization
    Resolves: #1032140


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.0-2
changelog:
  - BR: libXxf86misc-devel
  - BR: libXxf86misc-devel
  - BR: libXcomposite-devel
  - BR: bluez-libs-devel
  - BR: libxklavier-devel
  - BR: pam-devel
  - BR: lm_sensors-devel
  - BR: libXdamage-devel
  - BR: libXv-devel
  - BR: libXres-devel


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.0-3
changelog:
  - own some more directories
  - add %defattr to package devel
  - some spec cleanups
  - -R: kdepimlibs-devel
  - +BR: libXpm-devel
  - +BR: glib2-devel (do we really need this?)


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.0-7
changelog:
  - use kde.desktop from /usr/share/apps/kdm/sessions/kde.desktop
  - use %config(noreplace) for /etc/ksysguarddrc
  - Requires: kdebase, kdebase-runtime, oxygen-icon-theme
  - fix url


author: Rex Dieter <rdieter[AT]fedoraproject.org> 3.96.1-2
changelog:
  - %doc README COPYING
  - -libs subpkg
  - -libs: Requires: kdelibs4
  - don't remove libplasma.so from %{_kde4_libdir}
  - %files: use %_datadir for dbus-1/interfaces,xsessions


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 3.96.1-3
changelog:
  - update and apply redhat-startkde patch
  - update and apply KDM ConsoleKit patch (#228111, kde#147790)
  - ConsoleKit patch also includes xdmcp fixes from Mandriva (#243560)


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.2-2
changelog:
  - BR: dbus-devel
  - crystalsvg icons are not part of kdebase-workspace anymore
  - make sure libkdeinit_plasma.so is in normal package


author: Rex Dieter <rdieter[AT]fedoraproject.org> 3.97.0-3
changelog:
  - Requires: coreutils dbus-x11 xorg-x11-apps xorg-x11-utils
              xorg-x11-server-utils (used in startkde)
  - drop pam configs that were previously moved to kde-settings


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.0-1
changelog:
  - update to 4.0.0
  - drop upstreamed creategtkrc-gtk212 patch
  - update redhat-startkde and consolekit-kdm patches


author: Than Ngo <than@redhat.com> 4.0.2-7
changelog:
  - apply upstream patch to fix changing wallpaper causes desktop to go white
  - apply upstream patch to check whether the to-be-embedded window has been destroyed, (bz#437058)


author: Lukáš Tinkl <ltinkl@redhat.com> 4.0.3-15
changelog:
  - workaround #434824: KDE4 System Settings - No Method To Enter Administrative Mode
  - fix #441062: packagekit tools do not show icons correctly on KDE


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.72-1
changelog:
  - update to 4.0.72
  - update file list (Lorenzo Villani)
  - port plasma-konsole, ck-shutdown, rootprivs, plasma-default-wallpaper patches
  - remove NoDisplay=true in systemsettings onlyshowkde patch (still add
    OnlyShowIn=KDE), rename to show-systemsettings
  - drop upstreamed suspend patch
  - drop backported kde#155362 and menu-switch patches
  - drop rh#443610 patch, "Zoom Out" should be working in 4.1
  - disable kde#158301 patch for now (fails to apply, looks hard to port)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.85-3
changelog:
  - rewrite and reapply plasma-default-wallpaper patch
  - (no more separate plasma-default-wallpaper-config part)
  - rediff kde#154119 patch one last time


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.99-2
changelog:
  - backport Plasma tooltip manager from KDE 4.2 (fixes regression from 4.0)
    WARNING: Adds some new APIs from 4.2 (Plasma::popupPosition, Plasma::viewFor,
             Plasma::ToolTip*), use at your own risk, we have no control to
             guarantee that they will not change!


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.99-5
changelog:
  - F10+: fix circular kdebase<->kdebase-workspace dependency: don't Obsolete or
    Require kdebase, as kdebase now requires kdebase-workspace, obviating the
    upgrade path hack


author: Lukáš Tinkl <ltinkl@redhat.com> 4.1.0-5
changelog:
  - fix 457479: "Run as root" dialog of kdm system settings is shown twice
    (due to activated signal being connected to twice)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.2-6
changelog:
  - reenable panel-autohide-fix-flicker patch
  - backport revision 866998 to fix the CPU consumption problem (kde#172549)
  - backport panelview.cpp coordinate fixes (revisions 869882, 869925, 870041)
  - backport revision 871058 (request config sync when panel controller goes away)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.2-10
changelog:
  - never touch PATH in startkde, prepending $QTDIR/bin is unnecessary on Fedora
    and breaks locating Qt 3 Assistant and other Qt 3 stuff (startkde gets run
    with a full path by KDM)


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.80-1
changelog:
  - 4.1.80
  - BR cmake >= 2.6.2
  - make install/fast
  - drop _default_patch_fuzz 2
  - rebase startkde patch
  - rebase plasma-konsole patch
  - rebase ck-shutdown patch
  - add PyKDE4-devel, python-devel and PyQt4-devel to build plasma's python
    scripting interface
  - BR google-gadgets-devel for google gadgets scriptengine
  - BR libusb-devel for Logitech USB support in KControl


author: Than Ngo <than@redhat.com> 4.1.80-2
changelog:
  - merged
  - drop kdebase-workspace-4.1.2-kdm-i18n.patch, it's included in upstream
  - drop kdebase-workspace-4.0.85-plasma-default-wallpaper.patch, it's included in upstream
  - drop kdebase-workspace-4.1.65-consolekit-kdm.patch
  - add kdebase-workspace-4.1.80-session-button.patch
  - add kdebase-workspace-4.1.2-ldap.patch


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.80-3
changelog:
  - rebase kdebase-workspace-4.1.1-show-systemsettings.patch
  - new library: Kephal -> adapt file lists


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.80-5
changelog:
  - use python_sitearch for x86_64 systems
  - kephal seems to be disabled/removed, re-adapted file lists


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.85-5
changelog:
  - drop BR edje-devel, we need QEdje instead, which we don't have yet
  - comment out BR google-gadgets-* for now, need 0.10.4, have 0.10.3


author: Rex Dieter <rdieter@fedoraproject.org> - 4.2.0-3
changelog:
  - Requires: PyKDE4 (for plasmascript bits)
  - solid-bluetoothTrunkTo42.diff (bug #481801), and 
    +Provides: solid-bluetooth(-devel) = 4.3


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.2.0-4.1
changelog:
  - conditionalize bluetooth backport on F10+
  - F9: revert solid-bluetooth to the version from KDE 4.1.4


author: Rex Dieter <rdieter@fedoraproject.org> - 4.2.1-9
changelog:
  - kdm subpkg
  - -devel: move cmake modules here
  - Requires: kdelibs4%{?_isa} ..
  - BR: libutempter-devel (drops need for kwrited helper)


author: Rex Dieter <rdieter@fedoraproject.org> 4.2.85-2
changelog:
  - upgrade path broken (F-11+), Obsoletes: guidance-power-manager (#502892)
  - drop < F-10 crud, have_bluez3


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.2.95-2
changelog:
  - port and reapply rootprivs (#434824) patch (#508593)
  - fix internal version number (otherwise it mismatches with our file list)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.0-2
changelog:
  - move designer plugins to -libs, fixes
    Multilib conflicts for index.cache.bz2 (#515088)
  - tighten -libs deps, using %{?_isa}
  - %check: desktop-file-validate


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.0-101
changelog:
  - inflate Release tag, avoiding possible upgrade/obsoletes pain 
  - -devel: drop Provides: PolicyKit-kde-devel, bump Obsoletes


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.1-3
changelog:
  - -python-applet: Provides: plasma-scriptengine-python
  - Requires: system-ksplash-theme (f12+,rhel6+)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.75-0.4.svn1048496
changelog:
  - backport battery plasmoid from current pre-4.3.80 trunk for showremainingtime
  - rebase battery-plasmoid-showremainingtime patch
  - rebase brightness-keys patch for the above backport


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.85-3
changelog:
  - F13+: don't Obsoletes: PolicyKit-kde, let polkit-kde obsolete it
  - F13+: explicitly require polkit-kde instead of PolicyKit-authentication-agent


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.90-5
changelog:
  - do not link calendar dataengine with Akonadi (kde#215150, rh#552473)
  - s/plasma-engine/plasma-dataengine/


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.90-8
changelog:
  - SELinux is preventing /sbin/setfiles "read" access on
    /var/spool/gdm/force-display-on-active-vt (deleted) (#556643)


author: Than Ngo <than@redhat.com> - 4.4.0-4
changelog:
  - move xsession desktop files to main package
    (cannot start kde from gdm if kdm not installed)
  - Desktop locking crashes (kde#217882#16)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.4.2-2
changelog:
  - try to workaround "X server hogs the CPU (#577482)" by letting X
    choose vt itself
  - include (but not yet apply) kubuntu_34_kdm_plymouth_transition.diff


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.4.2-3
changelog:
  - rip out bulletproof X changes (cf. kubuntu_33_kdm_bulletproof_x.diff) from
    our copy of kubuntu_34_kdm_plymouth_transition.diff
  - drop experimental novt patch, should not be needed with the working Plymouth
    integration and may have side effects (can readd it later if really needed)
  - fix icon name in plasma-konsole patch: use XDG icon instead of kappfinder one


author: Rex Dieter <rdieter@fedoraproject.org> - 4.4.85-2
changelog:
  - Adding "Enable networking" button to knetworkmanager (rh#598765, kde#238325)
  - drop < f12 conditionals
  - pciutils, raw1394 & qualculate BRs
  - added kcmkdm helper and policy (from kdelibs)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.2-2
changelog:
  - include better, upstream fix for: krandr: Display Settings are Lost
    on Logout (kdebug183143, rh#607180)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.5.2-5
changelog:
  - use upstream ck-shutdown patch from 4.6 trunk (instead of my old one),
    supports GDM session switching (#560511, kde#186198)
  - drop old F11- version of the ck-shutdown patch, F11 is EOL


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.5.3-2
changelog:
  - drop classicmenu-games patch, upstream fixed the same issue differently and
    now the 2 fixes conflict (classic menu confuses Name and Description)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.80-7
changelog:
  - -googlegadgets => plasma-scriptengine-googlegaddgets
  - -python-applet => plasma-scriptengine-python
  - (new) plasma-scriptengine-ruby


author: Rex Dieter <rdieter@fedoraproject.org> 4.6.1-2
changelog:
  - use system-kde-theme again (ie, lovelock-kde-theme on f15)
  - -Requires: system-backgrounds-kde
  - +Requires: system-plasma-desktoptheme 
  - -ksplash-themes: move Default (Air+Horos) ksplash theme here


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.6.1-7
changelog:
  - Restore lost hunks from redhat_startkde patch, fixes regressions with running
    Qt 3 binaries (Qt 3 Assistant etc.) and with the initial background color
  - Fix incorrectly rebased hunk from redhat_startkde patch, fixes regression with
    language setting


author: Lukas Tinkl <ltinkl@redhat.com> - 4.6.2-2
changelog:
  - #694222 - Brightness controls no longer work
  - kdebug#257948 - Powerdevil can no longer control brightness
  - drop obsolete HAL backlight patch


author: Jaroslav Reznik <jreznik@redhat.com> 4.7.0-1
changelog:
  - 4.7.0
  - kde4workspace_version is not needed anymore
  - Provides: kde-workspace kde-wallpapers (to match new upstream tarballs)


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.1-2
changelog:
  - upstream kwin_performance patch
  - Use /etc/login.defs to define a 'system' account instead of hard-coding 500 (#732830)


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.3-12
changelog:
  - Crash in TaskManager::TaskItem::task (kde#272495)
  - Crashes When Adding Weather Widgets (Geolocation) (kde#277036)


author: Radek Novacek <rnovacek@redhat.com> 4.7.80-3
changelog:
  - Fixed file listed twice
  - Remove big cursors from files (they are no longer in upstream tarball)
  - Add new files: libkwinglutils.so*, liboxygenstyleconfig.so*
    libpowerdevilconfigcommonprivate.so*, kfontinst.knsrc
  - New ksplash theme Minimalistic
  - patch: don't use INSTALL to copy file to current binary dir


author: Radek Novacek <rnovacek@redhat.com> 4.7.80-4
changelog:
  - Respin with new upstream tarball
  - Drop patch: don't use INSTALL to copy file to current binary dir


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.95-3
changelog:
  - kdm overwrites ~/.Xauthority with wrong SELinux context on logout (#567914,kde#242065)
  - gcc47 fixes


author: Rex Dieter <rdieter@fedoraproject.org> 4.8.0-2
changelog:
  - kcm_colors subpkg (#761184)
  - kdm-themes: Requires: kde-wallpapers unconditionally (#784389)
  - s/kdebase-runtime/kde-runtime/


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.8.0-5
changelog:
  - kde-workspace: Requires: ConsoleKit (shutdown/restart, works around #788171)
  - kdm: Requires: ConsoleKit (works around #787855, nasty error message on login)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.8.80-2
changelog:
  - new showremainingtime patch, now just defaults the option to true
    (It doesn't have ugly side effects anymore with the rewritten plasmoid.)


author: Rex Dieter <rdieter@fedoraproject.org> 4.8.95-3
changelog:
  - Battery Monitor widget stops tracking charging state changes after suspend/resume cycle (#837345, kde#287952)


author: Than Ngo <than@redhat.com> - 4.8.97-2
changelog:
  - remove obsolete stuffs in startkde, kde-4.6.x already uses QLocale
    to try obtain a default country.


author: Rex Dieter <rdieter@fedoraproject.org> 4.9.0-2
changelog:
  - kcm_fonts should use $XDG_CONFIG_HOME/fontconfig/fonts.conf for storage settings for fontconfig > 2.10.0 (kde#304317)


author: Lukáš Tinkl <ltinkl@redhat.com> 4.9.1-6
changelog:
  - update the systemd PowerDevil Policy Agent patch to match the upstream
    version (part of KDE 4.9.2)
  - update clock applets on system date/time changes


author: Martin Briza <mbriza@redhat.com> - 4.9.3-3
changelog:
  - user switching dialog now doesn't list inactive (closing) sessions and more information is retrieved from logind


author: Martin Briza <mbriza@redhat.com> 4.9.90-2
changelog:
  - Merged and cleaned the systemd shutdown and logout patches.
  - It is possible to use systemd and/or CK without defining it at compile time


author: Rex Dieter <rdieter@fedoraproject.org> 4.9.97-3
changelog:
  - hack to use org.freedesktop.login1 to handle suspend (instead of upower),
    seems to help avoid double-sleep (#859227)


author: Rex Dieter <rdieter@fedoraproject.org> 4.10.0-6
changelog:
  - tweak fedora-plasma-cache.sh for plasma-svgelements*, Trolltech.conf too
  - enable powerdevil-login1 support on f18


author: Rex Dieter <rdieter@fedoraproject.org> 4.10.1-2
changelog:
  - PowerDevil should use upower to suspend on F17 (#920874)
  - other small upstream fixes (xrandrbrightness, login1 leak, stop screensaver)


author: Rex Dieter <rdieter@fedoraproject.org> 4.10.2-5
changelog:
  - drop LD_BIND_NOW from startkde (#908380)
  - fold all startkde-related patches into redhat_startkde.patch


author: Martin Briza <mbriza@redhat.com> 4.10.2-9
changelog:
  - regenerated the systemd-displaymanager patch against latest upstream master
  - worked around #955374 before I fix it clean upstream


author: Than Ngo <than@redhat.com> - 4.10.5-3
changelog:
  - CVE-2013-4132, backport systray icons memleak fix
  - CVE-2013-4133, backport potential kcheckpass security issue


author: Than Ngo <than@redhat.com> - 4.10.5-20
changelog:
  - Resolves: bz#1040678 - cannot assign custom keyboard shortcut for Show Desktop Grid
  - Resolves: bz#1090492 - changing calendar settings does not appear in plasmoid until month changed
  - Resolves: bz#1109936 - incorrect dispaly corner detection with multiple displays


author: Daniel Vrátil <dvratil@redhat.com> - 4.10.5-21
changelog:
  - Resolves: bz#1090492 - changing calendar settings does not appear in plasmoid until month changed (fixed patch)
  - Resolves: bz#1109936 - incorrect dispaly corner detection with multiple displays (fixed patch)


author: Jan Grulich <jgrulich@redhat.com> - 4.11.10-8
changelog:
  - Powerdevil: do not notify about a non existent action
    Resolves: bz#1289149
  - Plasma taskmanager: close context menu when task is closed
    Resolves: bz#1262603


author: Preston Brown <pbrown@redhat.com>
changelog:
  - removed bell.xpm (used to be in fvwm2-icons, don't want installer to see
  - this previous connection and autoselect kdebase for upgrade).


author: Preston Brown <pbrown@redhat.com>
changelog:
  - today's snapshot makes kfm a bit nicer and some other fixes
  - moved default rc files to kdesupport


author: Preston Brown <pbrown@redhat.com>
changelog:
  - snapshot, includes kde 1.1.1 + fixes
  - kvt removed for security reasons.  It is a steaming pile of...


author: Preston Brown <pbrown@redhat.com>
changelog:
  - customized startkde script to set up user environment if not present.
  - mention kthememgr in description.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - added link to /etc/X11/applnk, .directory file
  - included lowcolor icon sub-package
  - enable .desktop file access


author: Preston Brown <pbrown@redhat.com>
changelog:
  - start autorun if present in startkde
  - check for configured soundcard before running sound services


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Build the OpenGL screensavers, and move them to a separate package
  - Improve the spec file (BuildPrereqs etc.)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - new snapshot
  - ExcludeArch ia64 for now
  - remove gnome .desktop file, we get it from gnome-core now.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - rebuild, now that kdelibs2 works on alpha
  - use the same ugly hack to get kdebase to compile
  - remove ksysguard on alpha (even more compiler problems)


author: Than Ngo <than@redhat.com>
changelog:
  - fix dependency problem with KDE1 so that KDE1 and KDE2 can be installed
    at the same time
  - add missing ldconfig in %post anf %postun
  - fix for reading config files in /etc/X11/xdm, add Xsession to requires


author: Than Ngo <than@redhat.com>
changelog:
  - fix gnome-session so that KDE2 can be started from gdm
  - pam/kde2 instead pam/kde to avoid problem with KDE1
  - don't requires qt-GL, It's now in qt


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - get rid of the 3d-screensavers package - now that qt-GL is part of qt,
    there's no need to keep them separate to avoid the dependency.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to CVS
  - Enable building kpilot
  - Obsolete kpilot
  - Don't exclude ia64, use -O0 on ia64
  - Disable building kpilot on ia64 (compiler breakage)


author: Than Ngo <than@redhat.com> 6:3.2.0-0.3
changelog:
  - 3.2.0 release
  - built with qt 3.3.0
  - add patch file from Stable branch, fix some critical bugs in kmail


author: Than Ngo <than@redhat.com> 3.3.2-0.1
changelog:
  - update to 3.3.2
  - get rid of the kdepim-3.3.1-cvs.patch, kdepim-3.3.0-holiday.patch,
    both are included in 3.3.2


author: Than Ngo <than@redhat.com> 6:3.4.1-1
changelog:
  - add kdepim-kpilot-fix.diff
  - update to 3.4.1
  - remove kdepim-3.4.0-long.patch, it's included in new upstream


author: Than Ngo <than@redhat.com> 6:3.5.2-2
changelog:
  - fix #190491, korganizer crashes whenever New Event selected
  - fix crash from proko2
  - possibly fix crash while selecting mail in mail header view
  - fix #122571, kmail doesn't remember "fallback character encoding" setting
  - fix #126571, kmail crashes when pressing "Send again..." in drafts folder
  - fix syntax error in /usr/bin/kmail_clamav.sh


author: Than Ngo <than@redhat.com> 6:3.5.4-1
changelog:
  - apply upstream patches,
     - Kmail crashes on startup, kde#132008
     - Cannot send to addresses containing an ampersand (&), kde#117882


author: Than Ngo <than@redhat.com> 6:3.5.4-5
changelog:
  - apply upstream patches
     fix 98545, kmail does not remember pop3 passwords
     add default values for font sizes
     fix #133792, do not double-count days during weekly-summarized report
     remove a duplicated holiday
     fix #134200, always initialize mLineHeight and mFirstColumnWidth
     fix #126975, Refuse to LOGIN when hasCapability("LOGINDISABLED")
     fix #134702, Kontact crashes when moving mail between imap folders
     fix #126060, Kmail crash when IMAP mailbox modified externally


author: Rex Dieter <rdieter[AT]fedoraproject.org> 6:3.5.6-7
changelog:
  - +BR: gpgme-devel gnokii-devel libmal-devel
  - +Requires: pinentry-gui
  - drop unused/deprecated patches
  - revert to kinder/gentler scriptlets
  - sanitize .la files a bit


author: Lorenzo Villani <lvillani@binaryhelix.net> - 6:4.1.80-1
changelog:
  - 4.1.80
  - BR cmake >= 2.6.2
  - make install/fast
  - kdepim-4.1.2-kabcdistlistupdater.patch upstreamed


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.0-2
changelog:
  - -libs: move designer plugins here
  - %check: desktop-file-validate
  - don't own %{_kde4_appsdir}/kconf_update/


author: Radek Novacek <rnovacek@redhat.com> 7:4.7.80-1
changelog:
  - 4.7.80 (beta 1)
  - add BR: kdebase-devel
  - drop "nepomuk disabled spam" patch, patched file not exists


author: Matthias Saou <http://freshrpms.net/> 1.1.13-1
changelog:
  - Update to 1.1.13.
  - Change mode of configuration file to 0600.
  - Don't include all of "doc" since it meant re-including all man pages.
  - Don't include samples in the main configuration path, they're in %doc.
  - Include patch to add an optional label to interfaces.


author: Matthias Saou <http://freshrpms.net/> 1.1.13-4
changelog:
  - Add missing \n to the kernel define, for when multiple kernels are installed.
  - Pass STRIP=/bin/true to "make" in order to get a useful debuginfo package.


author: Matthias Saou <http://freshrpms.net/> 1.1.13-5
changelog:
  - Include types patch to fix compile on F7 (David Woodhouse).
  - Fix up file modes (main binary 700 -> 755 and config 600 -> 640).


author: Matthias Saou <http://freshrpms.net/> 1.1.14-1
changelog:
  - Update to 1.1.14.
  - Remove all upstreamed patches.
  - Remove our init script and sysconfig files, use the same now provided by the
    upstream package (will need to patch for LSB stuff soonish).
  - Include new goodies/arpreset.pl in %doc.
  - Add missing scriplet requirements.


author: Matthias Saou <http://freshrpms.net/> 1.1.14-2
changelog:
  - Include patch from Shinji Tanaka to fix conf include from inside some
    directives like vrrp_instance.


author: Matthias Saou <http://freshrpms.net/> 1.1.19-3
changelog:
  - Update init script to have keepalived start after the local MTA (#526512).
  - Simplify the kernel source detection, to avoid running rpm from rpmbuild.


author: Matthias Saou <http://freshrpms.net/> 1.1.20-1
changelog:
  - Update to 1.1.20 (#589923).
  - Update BR conditional for RHEL6.
  - No longer include goodies/arpreset.pl, it's gone from the sources.


author: Ryan O'Hara <rohara@redhat.com> - 1.2.7-3
changelog:
  - Update spec file.
  - Add option to prevent respawn of child processes.
  - Remove duplicate command-line option code.
  - Use popt to generate usage message.
  - Fix pointer arithmetic for VRRP packets.
  - Fix comparison of primary IP address.
  - Fix loading of SSL certificate.
  - Fix typo in error message.
  - Update FSF address in GPLv2 license.
  - Remove debug message from if_get_by_ifname.


author: Jon Masters <jcm@jonmasters.org> - 2-3
changelog:
  - Update package incorporating fixes from initial review feedback
  - Cleaups to SPEC, rpath, documentation, library and binary locations


author: Jon Masters <jcm@jonmasters.org> - 3-1
changelog:
  - Update to latest upstream (adds new depmod replacement utility)
  - For the moment, use the "kmod" utility to test the various functions


author: Kay Sievers <kay@redhat.com> - 5-1
changelog:
  - Update to version 5
  - replace the module-init-tools package and provide all tools
    as compatibility symlinks


author: Kay Sievers <kay@redhat.com> - 5-3
changelog:
  - temporarily add fake-provides to be able to bootstrap
    the new udev which pulls the old udev into the buildroot


author: Harald Hoyer <harald@redhat.com> 5-6
changelog:
  - add upstream patch to fix "modprobe --ignore-install --show-depends"
    otherwise dracut misses a lot of modules, which are already loaded


author: Kay Sievers <kay@redhat.com> - 7-1
changelog:
  - update to version 7
    - fix issue with --show-depends, where built-in
      modules of the running kernel fail to include
      loadable modules of the kernel specified


author: David Shea <dshea@redhat.com> - 20-5
changelog:
  - Check for changes in non-module files that affect that initramfs
    Resolves: rhbz#1108166
  - Use dracut to skip early cpio archives in the initramfs
    Resolves: rhbz#1210449


author: David Shea <dshea@redhat.com> - 20-6
changelog:
  - Accept '.' as part of a symbol exported by the kernel
    Resolves: rhbz#1283486
  - Check the addon modules of the new kernel for exported symbols
    Resolves: rhbz#1296465


author: Tony Camuso <tcamuso@redhat.com> - 20-9
changelog:
  - Must be bumped to 20-9 due to changes and version bumps in the
    7.2-z stream.
    Resolves: rhbz#1320204


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include %{version}


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to %{_var}/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-8
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-6
changelog:
  - incorporate updated fix for CVE-2007-3999 (CVE-2007-4743)
  - fix incorrect call to "test" in the kadmin init script (#252322,#287291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-7
changelog:
  - also perform PAM session and credential management when ftpd accepts a
    client using strong authentication, missed earlier
  - also label kadmind log files and files created by the db2 plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-9
changelog:
  - apply the fix for CVE-2007-4000 instead of the experimental patch for
    setting ok-as-delegate flags


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5.conf %verify(not md5 size mtime) in addition to
    %config(noreplace), like /etc/nsswitch.conf (#329811)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-1
changelog:
  - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999
    and CVE-2007-4000 (the new pkinit module is built conditionally and goes
    into the -pkinit-openssl package, at least for now, to make a buildreq
    loop with openssl avoidable)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-3
changelog:
  - allocate space for the nul-terminator in the local pathname when looking up
    a file context, and properly free a previous context (Jose Plans, #426085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-4
changelog:
  - some init script cleanups
    - drop unquoted check and silent exit for "$NETWORKING" (#426852, #242502)
    - krb524: don't barf on missing database if it looks like we're using kldap,
      same as for kadmin
    - return non-zero status for missing files which cause startup to
      fail (#242502)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-5
changelog:
  - enable patch for key-expiration reporting
  - enable patch to make kpasswd fall back to TCP if UDP fails (#251206)
  - enable patch to make kpasswd use the right sequence number on retransmit
  - enable patch to allow mech-specific creds delegated under spnego to be found
    when searching for creds


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-7
changelog:
  - drop netdb patch
  - kdb_ldap: add patch to treat 'nsAccountLock: true' as an indication that
    the DISALLOW_ALL_TIX flag is set on an entry, for better interop with Fedora,
    Netscape, Red Hat Directory Server (Simo Sorce)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated
  - in login, signal PAM when we're changing an expired password that it's an
    expired password, so that when cracklib flags a password as being weak it's
    treated as an error even if we're running as root


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove a patch, to fix problems with interfaces which are "up" but which
    have no address assigned, which conflicted with a different fix for the same
    problem in 1.5 (#200979)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to suppress double-processing of /etc/krb5.conf when we build
    with --sysconfdir=/etc, thereby suppressing double-logging (#231147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-8
changelog:
  - ftp: add patch to fix "runique on" case when globbing fixes applied
  - stop adding a redundant but harmless call to initialize the gssapi internals


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-9
changelog:
  - rework file labeling patch to not depend on fragile preprocessor trickery,
    in another attempt at fixing #428355 and friends


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-10
changelog:
  - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer
    when v4 compatibility is enabled on the KDC (CVE-2008-0062, CVE-2008-0063,
    - add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
    high-numbered descriptors are used (CVE-2008-0947, #433596)
  - add backport bug fix for an attempt to free non-heap memory in
    libgssapi_krb5 (CVE-2007-5901, #415321)
  - add backport bug fix for a double-free in out-of-memory situations in
    libgssapi_krb5 (CVE-2007-5971, #415351)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-11
changelog:
  - libgssapi_krb5: properly export the acceptor subkey when creating a lucid
    context (Kevin Coffman, via the nfs4 mailing list)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-12
changelog:
  - stop exporting kadmin keys to a keytab file when kadmind starts -- the
    daemon's been able to use the database directly for a long long time now
  - belatedly add aes128,aes256 to the default set of supported key types


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-15
changelog:
  - build with -fno-strict-aliasing, which is needed because the library
    triggers these warnings
  - don't forget to label principal database lock files
  - fix the labeling patch so that it doesn't break bootstrapping


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clear fuzz out of patches, dropping a man page patch which is no longer
    necessary
  - quote %{__cc} where needed because it includes whitespace now
  - define ASN1BUF_OMIT_INLINE_FUNCS at compile-time (for now) to keep building


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-19
changelog:
  - libgssapi_krb5: backport fix for some errors which can occur when
    we fail to set up the server half of a context (CVE-2009-0845)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-100
changelog:
  - turn off krb4 support (it won't be part of the 1.7 release, but do it now)
  - use triggeruns to properly shut down and disable krb524d when -server and
    -workstation-servers gets upgraded, because it's gone now
  - move the libraries to /%{_lib}, but leave --libdir alone so that plugins
    get installed and are searched for in the same locations (#473333)
  - clean up buildprereq/prereqs, explicit mktemp requires, and add the
    ldconfig for the -server-ldap subpackage (part of #225974)
  - escape possible macros in the changelog (part of #225974)
  - fixup summary texts (part of #225974)
  - take the execute bit off of the protocol docs (part of #225974)
  - unflag init scripts as configuration files (part of #225974)
  - make the kpropd init script treat 'reload' as 'restart' (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-101
changelog:
  - add patches for read overflow and null pointer dereference in the
    implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
  - add patch for attempt to free uninitialized pointer in libkrb5
    (CVE-2009-0846)
  - add patch to fix length validation bug in libkrb5 (CVE-2009-0847)
  - put the krb5-user .info file into just -workstation and not also
    -workstation-clients


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-103
changelog:
  - fix a typo in a ksu error message (Marek Mahut)
  - "rev" works the way the test suite expects now, so don't disable tests
    that use it


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-104
changelog:
  - extend PAM support to ksu: perform account and session management for the
    target user
  - pull up and merge James Leddy's changes to also set PAM_RHOST in PAM-aware
    network-facing services


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-1
changelog:
  - update to 1.7
    - no need to work around build issues with ASN1BUF_OMIT_INLINE_FUNCS
    - configure recognizes --enable/--disable-pkinit now
    - configure can take --disable-rpath now
    - no more libdes425, krb524d, krb425.info
    - kadmin/k5srvutil/ktutil are user commands now
    - new kproplog
    - FAST encrypted-challenge plugin is new
  - drop static build logic
  - drop pam_krb5-specific configuration from the default krb5.conf
  - drop only-use-v5 flags being passed to various things started by xinetd
  - put %{krb5prefix}/sbin in everyone's path, too (#504525)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - compile with %{?_smp_mflags} (Steve Grubb)
  - drop the bit where we munge part of the error table header, as it's not
    needed any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a type mismatch in krb5_copy_error_message()
  - ftp: fix some odd use of strlen()
  - selinux labeling: use selabel_open() family of functions rather than
    matchpathcon(), bail on it if attempting to get the mutex lock fails


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-3
changelog:
  - switch buildrequires: and requires: on e2fsprogs-devel into
    buildrequires: and requires: on libss-devel, libcom_err-devel, per
    sandeen on fedora-devel-list


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-4
changelog:
  - try to merge and clean up all the large file support for ftp and rcp
    - ftpd no longer prints a negative length when sending a large file
      from a 32-bit host


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - simplify the man pages patch by only preprocessing the files we care about
    and moving shared configure.in logic into a shared function
  - catch the case of ftpd printing file sizes using %i, when they might be
    bigger than an int now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if the init script fails to start krb5kdc/kadmind/kpropd because it's already
    running (according to status()), return 0 (part of #521772)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-8
changelog:
  - specify the location of the subsystem lock when using the status() function
    in the kadmind and kpropd init scripts, so that we get the right error when
    we're dead but have a lock file - requires initscripts 8.99 (#521772)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-10
changelog:
  - move /etc/pam.d/ksu from krb5-workstation-servers to krb5-workstation,
    where it's actually needed (#538703)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-11
changelog:
  - ksu: move account management checks to before we drop privileges, like
    su does (#540769)
  - selinux: set the user part of file creation contexts to match the current
    context instead of what we looked up
  - configure with --enable-dns-for-realm instead of --enable-dns, which isn't
    recognized any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages that live in the -libs subpackage into the regular
    %{_mandir} tree where they'll still be found if that package is the
    only one installed (#529319)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-15
changelog:
  - add upstream patch for KDC crash during referral processing (CVE-2009-3295),
    via Tom Yu (#545002)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-16
changelog:
  - use %global instead of %define
  - pull up proposed patch for creating previously-not-there lock files for
    kdb databases when 'kdb5_util' is called to 'load' (#551764)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-17
changelog:
  - put the conditional back for the -devel subpackage
  - back down to the earlier version of the patch for #551764; the backported
    alternate version was incomplete


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-18
changelog:
  - add upstream patch for integer underflow during AES and RC4 decryption
    (CVE-2009-4212), via Tom Yu (#545015)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-19
changelog:
  - use portreserve to make sure the KDC can always bind to the kerberos-iv
    port, kpropd can always bind to the krb5_prop port, and that kadmind can
    always bind to the kerberos-adm port (#555279)
  - correct inadvertent use of macros in the changelog (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-20
changelog:
  - krb5_get_init_creds_password: check opte->flags instead of options->flags
    when checking whether or not we get to use the prompter callback (#555875)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-21
changelog:
  - suppress warnings of impending password expiration if expiration is more than
    seven days away when the KDC reports it via the last-req field, just as we
    already do when it reports expiration via the key-expiration field (#556495)
  - link with libtinfo rather than libncurses, when we can, in future RHEL


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-22
changelog:
  - use portreserve correctly -- portrelease takes the basename of the file
    whose entries should be released, so we need three files, not one


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-1
changelog:
  - update to 1.7.1
    - don't trip AD lockout on wrong password (#542687, #554351)
    - incorporates fixes for CVE-2009-4212 and CVE-2009-3295
    - fixes gss_krb5_copy_ccache() when SPNEGO is used
  - move sim_client/sim_server, gss-client/gss-server, uuclient/uuserver to
    the devel subpackage, better lining up with the expected krb5/krb5-appl
    split in 1.8
  - drop kvno,kadmin,k5srvutil,ktutil from -workstation-servers, as it already
    depends on -workstation which also includes them


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-3
changelog:
  - pull up the change to make kpasswd's behavior better match the docs
    when there's no ccache (#563431)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-4
changelog:
  - move the package changelog to the end to match the usual style (jdennis)
  - scrub out references to $RPM_SOURCE_DIR (jdennis)
  - include a symlink to the readme with the name LICENSE so that people can
    find it more easily (jdennis)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-6
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-1
changelog:
  - update to 1.8
    - temporarily bundling the krb5-appl package (split upstream as of 1.8)
      until its package review is complete
    - profile.d scriptlets are now only needed by -workstation-clients
    - adjust paths in init scripts
    - drop upstreamed fix for KDC denial of service (CVE-2010-0283)
    - drop patch to check the user's password correctly using crypt(), which
      isn't a code path we hit when we're using PAM


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-2
changelog:
  - pull up patch to get the client libraries to correctly perform password
    changes over IPv6 (Sumit Bose, RT#6661)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-4
changelog:
  - remove the krb5-appl bits (the -workstation-clients and -workstation-servers
    subpackages) now that krb5-appl is its own package
  - replace our patch for #563431 (kpasswd doesn't fall back to guessing your
    principal name using your user name if you don't have a ccache) with the
    one upstream uses


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-5
changelog:
  - add upstream fix for denial-of-service in SPNEGO (CVE-2010-0628, #576325)
  - kdc.conf: no more need to suggest keeping keys with v4-compatible salting


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - drop patch to suppress key expiration warnings sent from the KDC in
    the last-req field, as the KDC is expected to just be configured to either
    send them or not as a particular key approaches expiration (#556495)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-1
changelog:
  - update to 1.8.1
    - no longer need patches for #555875, #561174, #563431, RT#6661, CVE-2010-0628
  - replace buildrequires on tetex-latex with one on texlive-latex, which is
    the package that provides it now


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-5
changelog:
  - add patch to correct GSSAPI library null pointer dereference which could be
    triggered by malformed client requests (CVE-2010-1321, #582466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-6
changelog:
  - make krb5-server-ldap also depend on the same version-release of krb5-libs,
    as the other subpackages do, if only to make it clearer than it is when we
    just do it through krb5-server
  - drop explicit linking with libtinfo for applications that use libss, now
    that readline itself links with libtinfo (as of readline-5.2-3, since
    fedora 7 or so)
  - go back to building without strict aliasing (compiler warnings in gssrpc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: move session management calls to before we drop privileges, like
    su does (#596887), and don't skip the PAM account check for root or the
    same user (more of #540769)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull up fix for upstream #6745, in which the gssapi library would add the
    wrong error table but subsequently attempt to unload the right one


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3
changelog:
  - tell krb5kdc and kadmind to create pid files, since they can
  - add logrotate configuration files for krb5kdc and kadmind (#462658)
  - fix parsing of the pidfile option in the KDC (upstream #6750)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-1
changelog:
  - update to 1.8.3
    - drop backports of fixes for gss context expiration and error table
      registration/deregistration mismatch
    - drop patch for upstream #6750


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-4
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #629022, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #629022, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-6
changelog:
  - pull down patches from trunk to implement k5login_authoritative and
    k5login_directory settings for krb5.conf (#539423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-8
changelog:
  - incorporate upstream patch to fix uninitialized pointer crash in the KDC's
    authorization data handling (CVE-2010-1322, #636335)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-0.beta1.0
changelog:
  - start moving to 1.9 with beta 1
    - drop patches for RT#5755, RT#6762, RT#6774, RT#6775
    - drop no-longer-needed backport patch for #539423
    - drop no-longer-needed patch for CVE-2010-1322
  - if WITH_NSS is set, built with --with-crypto-impl=nss (requires NSS 3.12.9)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-2
changelog:
  - pkinit: when verifying signed data, use the CMS APIs for better
    interoperability (#636985, RT#6851)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
    in the KDC when using the LDAP kdb backend, and an uninitialized pointer
    use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, #664009,
    CVE-2011-0281, #668719, CVE-2011-0282, #668726, CVE-2011-0283, #676126)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-5
changelog:
  - krb5kdc init script: prototype some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (to flush out parts of #651466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-6
changelog:
  - turn on NSS as the backend for libk5crypto, adding nss-devel as a build
    dependency when that switch is flipped


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - throw in a not-applied-by-default patch to try to make pkinit debugging
    into a run-time boolean option named "pkinit_debug"


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - turn off NSS as the backend for libk5crypto for now to work around its
    DES string2key not working (#679012)
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (MITKRB5-SA-2011-003, CVE-2011-0284, #674325)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - override INSTALL_SETUID at build-time so that ksu is installed into
    the buildroot with the right permissions (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't discard the error code from an error message received in response
    to a change-password request (#658871, RT#6893)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696343,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-1
changelog:
  - update to 1.9.1:
    - drop no-longer-needed patches for CVE-2010-4022, CVE-2011-0281,
      CVE-2011-0282, CVE-2011-0283, CVE-2011-0284, CVE-2011-0285


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#576093)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-3
changelog:
  - pull a fix from SVN to get libgssrpc clients (e.g. kadmin) authenticating
    using the old protocol over IPv4 again (RT#6920)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-4
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#715074)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-5
changelog:
  - pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
    during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
    not to ask for an IPv6 address based on the set of configured interfaces
    (#717378, RT#6922)
  - pull a fix from SVN to use AI_ADDRCONFIG more often (RT#6923)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-6
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-7
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#723723),
    which is too fragile in cases where the database has been manually moved or
    is accessed through another kdb plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-8
changelog:
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS
  - pull in a patch to fix losing track of the replay cache FD, from SVN by
    way of Kevin Coffman


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-9
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-10
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-12
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth (#734341)
  - pull in build-time deps for the tests


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-16
changelog:
  - kadmin.service: fix #723723 again
  - kadmin.service,krb5kdc.service: remove optional use of $KRB5REALM in command
    lines, because systemd parsing doesn't handle alternate value shell variable
    syntax
  - kprop.service: add missing Type=forking so that systemd doesn't assume simple
  - kprop.service: expect the ACL configuration to be there, not absent
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#739853)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-17
changelog:
  - pull in patch from trunk to rename krb5int_pac_sign() to krb5_pac_sign() and
    make it public (#745533)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-18
changelog:
  - apply upstream patch to fix a null pointer dereference with the LDAP kdb
    backend (CVE-2011-1527, #744125), an assertion failure with multiple kdb
    backends (CVE-2011-1528), and a null pointer dereference with multiple kdb
    backends (CVE-2011-1529) (#737711)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.0
changelog:
  - update to 1.10 alpha 1
  - on newer releases where we can assume NSS >= 3.13, configure PKINIT to build
    using NSS
  - on newer releases where we build PKINIT using NSS, configure libk5crypto to
    build using NSS
  - rename krb5-pkinit-openssl to krb5-pkinit on newer releases where we're
    expecting to build PKINIT using NSS instead
  - during %check, run check in the library and kdc subdirectories, which
    should be able to run inside of the build system without issue


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.2
changelog:
  - apply upstream patch to fix a null pointer dereference when processing
    TGS requests (CVE-2011-1530, #753748)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.3
changelog:
  - pull in patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761317)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761317)
  - pull in patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761317)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha2.2
changelog:
  - modify the deltat grammar to also tell gcc (4.7) to suppress
    "maybe-uninitialized" warnings in addition to the "uninitialized" warnings
    it's already being told to suppress (RT#7080)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-2
changelog:
  - add patch to accept keytab entries with vno==0 as matches when we're
    searching for an entry with a specific name/kvno (#230382/#782211,RT#3349)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-5
changelog:
  - when removing -workstation, remove our files from the info index while
    the file is still there, in %preun, rather than %postun, and use the
    compressed file's name (#801035)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-1
changelog:
  - update to 1.10.1
    - drop the KDC crash fix
    - drop the KDC lookaside cache fix
    - drop the fix for kadmind RPC ACLs (CVE-2012-1012)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-2
changelog:
  - change back dns_lookup_kdc to the default setting (Stef Walter, #805318)
  - comment out example.com examples in default krb5.conf (Stef Walter, #805320)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-3
changelog:
  - have -server require /usr/share/dict/words, which we set as the default
    dict_file in kdc.conf (#817089)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-1
changelog:
  - update to 1.10.2
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user
    - also package the PDF format admin, user, and install guides
    - drop some PDFs that no longer get built right
  - add a backport of Stef's patch to set the client's list of supported
    enctypes to match the types of keys that we have when we are using a
    keytab to try to get initial credentials, so that a KDC won't send us
    an AS reply that we can't encrypt (RT#2131, #748528)
  - don't shuffle around any shared libraries on releases with no-separate-/usr,
    since /usr/lib is the same place as /lib
  - add explicit buildrequires: on 'hostname', for the tests, on systems where
    it's in its own package, and require net-tools, which used to provide the
    command, everywhere


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-2
changelog:
  - back out this labeling change (dwalsh):
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-3
changelog:
  - backport a fix to allow a PKINIT client to handle SignedData from a KDC
    that's signed with a certificate that isn't in the SignedData, but which
    is available as an anchor or intermediate on the client (RT#7183)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-5
changelog:
  - add upstream patch to fix freeing an uninitialized pointer and dereferencing
    another uninitialized pointer in the KDC (MITKRB5-SA-2012-001, CVE-2012-1014
    and CVE-2012-1015, #844779 and #844777)
  - fix a thinko in whether or not we mess around with devel .so symlinks on
    systems without a separate /usr (sbose)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-6
changelog:
  - go back to not messing with library file paths on Fedora 17: it breaks
    file path dependencies in other packages, and since Fedora 17 is already
    released, breaking that is our fault


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-7
changelog:
  - selinux: hang on to the list of selinux contexts, freeing and reloading
    it only when the file we read it from is modified, freeing it when the
    shared library is being unloaded (#845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-2
changelog:
  - undo rename from krb5-pkinit-openssl to krb5-pkinit on EL6
  - version the Obsoletes: on the krb5-pkinit-openssl to krb5-pkinit rename
  - reintroduce the init scripts for non-systemd releases
  - forward-port %{?_rawbuild} annotations from EL6 packaging


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.11 alpha 1
    - drop backported patch for RT #7406
    - drop backported patch for RT #7407
    - drop backported patch for RT #7408
    - the new docs system generates PDFs, so stop including them as sources
    - drop backported patch to allow deltat.y to build with the usual
      warning flags and the current gcc
    - drop backported fix for disabling use of a replay cache when verifying
      initial credentials
    - drop backported fix for teaching PKINIT clients which trust the KDC's
      certificate directly to verify signed-data messages that are signed with
      the KDC's certificate, when the blobs don't include a copy of the KDC's
      certificate
    - drop backported patches to make keytab-based authentication attempts
      work better when the client tells the KDC that it supports a particular
      cipher, but doesn't have a key for it in the keytab
    - drop backported fix for avoiding spurious clock skew when a TGT is
      decrypted long after the KDC sent it to the client which decrypts it
    - move the cross-referenced HTML docs into the -libs package to avoid
      broken internal links
    - drop patches to fixup paths in man pages, shouldn't be needed any more


author: Nalin Dahyabhai <nalin@redhat.com> 1.11-0.alpha1.0
changelog:
  - move the rather large pile of html and pdf docs to -workstation, so
    that just having something that links to the libraries won't drag
    them onto a system, and we avoid having to sort out hard-coded paths
    that include %{_libdir} showing up in docs in multilib packages
  - actually create %{_var}/kerberos/kdc/user, so that it can be packaged
  - correct the list of packaged man pages
  - don't dummy up required tex stylesheets, require them
  - require pdflatex and makeindex


author: Nalin Dahyabhai <nalin@redhat.com> 1.11-0.alpha1.1
changelog:
  - handle releases where texlive packaging wasn't yet as complicated as it
    is in Fedora 18
  - fix an uninitialized-variable error building one of the test programs


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-1
changelog:
  - update to 1.11.1
    - drop patch for noticing negative timeouts being passed to the poll()
      wrapper in the client transmit functions


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-2
changelog:
  - prebuild PDF docs to reduce multilib differences (internal tooling, #884065)
  - drop the kerberos-iv portreserve file, and drop the rest on systemd systems
  - escape uses of macros in comments (more of #884065)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a version comparison to expect newer texlive build requirements when
    %{_rhel} > 6 rather than when it's > 7


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-5
changelog:
  - pull up Simo's patch to mark the correct mechanism on imported GSSAPI
    contexts (RT#7592)
  - go back to using reconf to run autoconf and autoheader (part of #925640)
  - add temporary patch to use newer config.guess/config.sub (more of #925640)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-6
changelog:
  - create and own /var/kerberos/krb5/user instead of /var/kerberos/kdc/user,
    since that's what the libraries actually look for
  - add buildrequires on nss-myhostname, in an attempt to get more of the tests
    to run properly during builds
  - pull in Simo's patch to recognize "client_keytab" as a key type which can
    be passed in to gss_acquire_cred_from() (RT#7598)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-7
changelog:
  - when testing the RPC library, treat denials from the local portmapper the
    same as a portmapper-not-running situation, to allow other library tests
    to be run while building the package


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-9
changelog:
  - move the compiled-in default ccache location from the previous default of
    FILE:/tmp/krb5cc_%{uid} to DIR:/run/user/%{uid}/krb5cc (part of #949588)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-1
changelog:
  - update to 1.11.2
    - drop pulled in patch for RT#7586, included in this release
    - drop pulled in patch for RT#7592, included in this release
  - pull in fix for keeping track of the message type when parsing FAST requests
    in the KDC (RT#7605, #951843) (also #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-3
changelog:
  - pull the changing of the compiled-in default ccache location to
    DIR:/run/user/%{uid}/krb5cc back into F19, in line with SSSD and
    the most recent pam_krb5 build


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-6
changelog:
  - pull in upstream fix to start treating a KRB5CCNAME value that begins
    with DIR:: the same as it would a DIR: value with just one ccache file
    in it (RT#7172, #965574)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-7
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)
  - backport fix for not being able to pass an empty password to the
    get-init-creds APIs and have them actually use it (RT#7642, #960001)
  - add backported proposed fix to use the unauthenticated server time
    as the basis for computing the requested credential expiration times,
    rather than the client's idea of the current time, which could be
    significantly incorrect (#961221)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-8
changelog:
  - pull in patches from master to not test GSSRPC-over-UDP and to not
    depend on the portmapper, which are areas where our build systems
    often give us trouble, too


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-9
changelog:
  - don't forget to set the SELinux label when creating the directory for
    a DIR: ccache
  - pull in proposed fix for attempts to get initial creds, which end up
    following referrals, incorrectly trying to always use master KDCs if
    they talked to a master at any point (should fix RT#7650)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-1
changelog:
  - update to 1.11.3
    - drop patch for RT#7605, fixed in this release
    - drop patch for CVE-2002-2443, fixed in this release
    - drop patch for RT#7369, fixed in this release
  - pull upstream fix for breaking t_skew.py by adding the patch for #961221


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-2
changelog:
  - special-case /run/user/0, attempting to create it when resolving a
    directory cache below it fails due to ENOENT and we find that it doesn't
    already exist, either, before attempting to create the directory cache
    (maybe helping, maybe just making things more confusing for #961235)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-3
changelog:
  - specify dependencies on the same arch of krb5-libs by using the %{?_isa}
    suffix, to avoid dragging 32-bit libraries onto 64-bit systems (#980155)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-4
changelog:
  - use (a bundled, for now, copy of) nss_wrapper to let us run some of the
    self-tests at build-time in more places than we could previously (#978756)
  - cover inconsistencies in whether or not there's a local caching nameserver
    that's willing to answer when the build environment doesn't have a
    resolver configuration, so that nss_wrapper's faking of the local
    hostname can be complete


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-6
changelog:
  - tweak configuration files used during tests to try to reduce the number
    of conflicts encountered when builds for multiple arches land on the same
    builder


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-8
changelog:
  - drop a patch we weren't not applying (build tooling)
  - wrap kadmind and kpropd in scripts which check for the presence/absence
    of files which dictate particular exit codes before exec'ing the actual
    binaries, instead of trying to use ConditionPathExists in the unit files
    to accomplish that, so that we exit with failure properly when what we
    expect isn't actually in effect on the system (#800343)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-9
changelog:
  - take another stab at accounting for UnversionedDocdirs for the -libs
    subpackage (spotted by ssorce)
  - switch to just the snapshot of nss_wrapper we were using, since we
    no longer need to carry anything that isn't in the cwrap.org repository
    (ssorce)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-10
changelog:
  - incorporate Simo's backport of his persistent-keyring changes (#991148)
  - restore build-time default DEFCCNAME on Fedora 21 and later and EL, and
    instead set default_ccache_name in the default krb5.conf's [libdefaults]
    section (#991148)
  - on releases where we expect krb5.conf to be configured with a
    default_ccache_name, add it whenever we upgrade from an older version of
    the package that wouldn't have included it in its default configuration
    file (#991148)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-11
changelog:
  - don't let comments intended for one scriptlet become part of the "script"
    that gets passed to ldconfig as part of another one (Mattias Ellert, #1005675)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - only apply the patch to autocreate /run/user/0 when we're hard-wiring the
    default ccache location to be under it; otherwise it's unnecessary


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-15
changelog:
  - add explicit build-time dependency on a version of keyutils that's new
    enough to include keyctl_get_persistent() (more of #991148)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-16
changelog:
  - back out setting default_ccache_name to the new default for now, resetting
    it to the old default while the kernel/keyutils bits get sorted (sgallagh)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-19
changelog:
  - configure --without-krb5-config so that we don't pull in the old default
    ccache name when we want to stop setting a default ccache name at configure-
    time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-20
changelog:
  - pull up fix for not calling a kdb plugin's check-transited-path
    method before calling the library's default version, which only knows
    how to read what's in the configuration file (RT#7709, #1013664)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-21
changelog:
  - switch to the version of persistent-keyring that was just merged to
    master (RT#7711), along with related changes to kinit (RT#7689)
  - go back to setting default_ccache_name to a KEYRING type


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-24
changelog:
  - backport the callback to use the libkrb5 prompter when we can't load PEM
    files for PKINIT (RT#7590, includes part of #965721/#1016690)
  - extract the rest of the fix #965721/#1016690 from the changes for RT#7680


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-25
changelog:
  - pull up fix for importing previously-exported credential caches in the
    gssapi library (RT# 7706, #1019420)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-alpha1.0
changelog:
  - initial update to alpha1
    - drop backport of persistent keyring support
    - drop backport for RT#7689
    - drop obsolete patch for fixing a use-before-init in a test program
    - drop obsolete patch teaching config.guess/config.sub about aarch64-linux
    - drop backport for RT#7598
    - drop backport for RT#7172
    - drop backport for RT#7642
    - drop backport for RT#7643
    - drop patches from master to not test GSSRPC-over-UDP and to not
      depend on the portmapper, which are areas where our build systems
      often give us trouble, too; obsolete
    - drop backports for RT#7682
    - drop backport for RT#7709
    - drop backport for RT#7590 and partial backport for RT#7680
    - drop OTP backport
    - drop backports for RT#7656 and RT#7657
  - BuildRequires: libedit-devel to prefer it
  - BuildRequires: pkgconfig, since configure uses it


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-27
changelog:
  - add some minimal description to the top of the wrapper scripts we use
    when starting krb5kdc and kadmind to describe why they exist (tooling)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-28
changelog:
  - drop patch to add additional access() checks to ksu - they add to breakage
    when non-FILE: caches are in use (#1026099), shouldn't be resulting in any
    benefit, and clash with proposed changes to fix its cache handling


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-29
changelog:
  - incorporate upstream patch for remote crash of KDCs which serve multiple
    realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800,


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-30
changelog:
  - check more thoroughly for errors when resolving KEYRING ccache names of type
    "persistent", which should only have a numeric UID as the next part of the
    name (#1029110)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-1
changelog:
  - update to 1.11.4
    - drop patch for RT#7650, obsoleted
    - drop patch for RT#7706, obsoleted as RT#7723
    - drop patch for CVE-2013-1418/CVE-2013-6800, included in 1.11.4


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-2
changelog:
  - pull in fix to store KDC time offsets in keyring credential caches (RT#7768,
    - pull in fix to set expiration times on credentials stored in keyring
    credential caches (RT#7769, #1031724)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-beta2.0
changelog:
  - update to beta2
    - drop obsolete backports for storing KDC time offsets and expiration times
      in keyring credential caches


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-2
changelog:
  - pull in fix from master to return a NULL pointer rather than allocating
    zero bytes of memory if we read a zero-length input token (RT#7794, part of
    - pull in fix from master to ignore an empty token from an acceptor if
    we've already finished authenticating (RT#7797, part of #1043962)
  - pull in fix from master to avoid a memory leak when a mechanism's
    init_sec_context function fails (RT#7803, part of #1043962)
  - pull in fix from master to avoid a memory leak in a couple of error
    cases which could occur while obtaining acceptor credentials (RT#7805, part
    of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update a test wrapper to properly handle things that the new libkrad does,
    and add python-pyrad as a build requirement so that we can run its tests


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-5
changelog:
  - pull in fix from master to make reporting of errors encountered by
    the SPNEGO mechanism work better (RT#7045, part of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-8
changelog:
  - add patch from Dhiru Kholia for the AES-NI implementations to allow
    libk5crypto to be properly marked as not needing an executable stack
    on arches where they're used (#1045699, and so many others)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-9
changelog:
  - grab a more-commented version of the most recent patch from upstream
    master
  - make a guess at making the 32-bit AES-NI implementation sufficiently
    position-independent to not require execmod permissions for libk5crypto
    (more of #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-10
changelog:
  - amend the PIC patch for iaesx86.s to also save/restore ebx in the
    functions where we modify it, because the ELF spec says we need to


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-11
changelog:
  - update the PIC patch for iaesx86.s to not use ELF relocations to the version
    that landed upstream (RT#7815, #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-1
changelog:
  - update to 1.12.1
    - drop patch for RT#7794, included now
    - drop patch for RT#7797, included now
    - drop patch for RT#7803, included now
    - drop patch for RT#7805, included now
    - drop patch for RT#7807, included now
    - drop patch for RT#7045, included now
    - drop patches for RT#7813 and RT#7815, included now
    - add patch to always retrieve the KDC time offsets from keyring caches,
      so that we don't mistakenly interpret creds as expired before their
      time when our clock is ahead of the KDC's (RT#7820, #1030607)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-2
changelog:
  - pull in multiple changes to allow replay caches to be added to a GSS
    credential store as "rcache"-type credentials (RT#7818/#7819/#7836,


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add currently-proposed changes to teach ksu about credential cache
    collections and the default_ccache_name setting (#1015559,#1026099)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-4
changelog:
  - pull in patch from master to move the default directory which the KDC uses
    when computing the socket path for a local OTP daemon from the database
    directory (/var/kerberos/krb5kdc) to the newly-added run directory
    (/run/krb5kdc), in line with what we're expecting in 1.13 (RT#7859, more
    of #1040056 as #1063905)
  - add a tmpfiles.d configuration file to have /run/krb5kdc created at
    boot-time
  - own /var/run/krb5kdc


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-5
changelog:
  - spnego: pull in patch from master to restore preserving the OID of the
    mechanism the initiator requested when we have multiple OIDs for the same
    mechanism, so that we reply using the same mechanism OID and the initiator
    doesn't get confused (#1066000, RT#7858)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-9
changelog:
  - pull in changes from upstream which add processing of the contents of
    /etc/gss/mech.d/*.conf when loading GSS modules (#1102839)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-10
changelog:
  - pull in fix for denial of service by injection of malformed GSSAPI tokens
    (CVE-2014-4341, CVE-2014-4342, #1116181)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-12
changelog:
  - gssapi: pull in proposed fix for a double free in initiators (David
    Woodhouse, CVE-2014-4343, #1117963)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-1
changelog:
  - update to 1.12.2
    - drop patch for RT#7820, fixed in 1.12.2
    - drop patch for #231147, fixed as RT#3277 in 1.12.2
    - drop patch for RT#7818, fixed in 1.12.2
    - drop patch for RT#7836, fixed in 1.12.2
    - drop patch for RT#7858, fixed in 1.12.2
    - drop patch for RT#7924, fixed in 1.12.2
    - drop patch for RT#7926, fixed in 1.12.2
    - drop patches for CVE-2014-4341/CVE-2014-4342, included in 1.12.2
    - drop patch for CVE-2014-4343, included in 1.12.2
    - drop patch for CVE-2014-4344, included in 1.12.2
    - drop patch for CVE-2014-4345, included in 1.12.2
  - replace older proposed changes for ksu with backports of the changes
    after review and merging upstream (#1015559, #1026099, #1118347)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-4
changelog:
  - kpropd hasn't bothered with -S since 1.11; stop trying to use that flag
    in the systemd unit file


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-5
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1078888)
  - define _GNU_SOURCE in files where we use EAI_NODATA, to make sure that
    it's declared (#1059730,#1084068,#1109102)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-6
changelog:
  - backport patch to make the client skip checking the server's reply
    address when processing responses to password-change requests, which
    between NAT and upcoming HTTPS support, can cause us to erroneously
    report an error to the user when the server actually reported success
    (RT#7886)
  - backport support for accessing KDCs and kpasswd services via HTTPS
    proxies (marked by being specified as https URIs instead as hostnames
    or hostname-and-port), such as the one implemented in python-kdcproxy
    (RT#7929, #109919), and pick up a subsequent patch to build HTTPS
    as a plugin


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-8
changelog:
  - fix the problem where the %license file has been a dangling symlink
  - ksu: pull in fix from pull #206 to avoid breakage when the
    default_ccache_name doesn't include a cache type as a prefix
  - ksu: pull in a proposed fix for pull #207 to avoid breakage when the
    invoking user doesn't already have a ccache


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-9
changelog:
  - Undo libkadmclnt SONAME change (from 8 to 9) which originally
    happened in the krb5 1.12 rebase (#1166012) but broke
    rubygem-rkerberos (sort of ruby language bindings for
    libkadmclnt&co.) dependicies, as side effect of
    rubygem-rkerberos using private interfaces in libkadmclnt.


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-10
changelog:
  - In ksu, without the -e flag, also check .k5users (#1105489)
    When ksu was explicitly told to spawn a shell, a line in .k5users which
    listed "*" as the allowed command would cause the principal named on the
    line to be considered as a candidate for authentication.
    When ksu was not passed a command to run, which implicitly meant that
    the invoking user wanted to run the target user's login shell, knowledge
    that the principal was a valid candidate was ignored, which could cause
    a less optimal choice of the default target principal.
    This doesn't impact the authorization checks which we perform later.
    Patch by Nalin Dahyabhai <nalin@redhat.com>


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-13
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9423 (#1179863) "libgssrpc server applications
    leak uninitialized bytes (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-14
changelog:
  - fix for kinit -C loops (#1184629, MIT/krb5 issue 243, "Do not
    loop on principal unknown errors").


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-0
changelog:
  - Update to krb5-1.13.1
    - patch krb5-1.12-selinux-label was updated and renamed to krb5-1.13-selinux-label
    - patch krb5-1.11-dirsrv-accountlock was updated and renamed to krb5-1.13-dirsrv-accountlock
    - drop patch for krb5-1.12-pwdch-fast, fixed in krb5-1.13
    - drop patch for krb5-1.12ish-kpasswd_tcp, fixed in krb5-1.13
    - drop patch for krb5-master-rcache-internal-const, no longer needed
    - drop patch for krb5-master-rcache-acquirecred-cleanup, no longer needed
    - drop patch for krb5-master-rcache-acquirecred-source, no longer needed
    - drop patch for krb5-master-rcache-acquirecred-test, no longer needed
    - drop patch for krb5-master-move-otp-sockets, no longer needed
    - drop patch for krb5-master-mechd, no longer needed
    - drop patch for krb5-master-strdupcheck, no longer needed
    - drop patch for krb5-master-compatible-keys, no longer needed
    - drop patch for krb5-1.12-system-exts, fixed in krb5-1.13
    - drop patch for 0001-In-ksu-merge-krb5_ccache_copy-and-_restricted, no longer needed
    - drop patch for 0002-In-ksu-don-t-stat-not-on-disk-ccache-residuals, no longer needed
    - drop patch for 0003-Use-an-intermediate-memory-cache-in-ksu, no longer needed
    - drop patch for 0004-Make-ksu-respect-the-default_ccache_name-setting, no longer needed
    - drop patch for 0005-Copy-config-entries-to-the-ksu-target-ccache, no longer needed
    - drop patch for 0006-Use-more-randomness-for-ksu-secondary-cache-names, no longer needed
    - drop patch for 0007-Make-krb5_cc_new_unique-create-DIR-directories, no longer needed
    - drop patch for krb5-1.12-kpasswd-skip-address-check, fixed in krb5-1.13
    - drop patch for 0000-Refactor-cm-functions-in-sendto_kdc.c, no longer needed
    - drop patch for 0001-Simplify-sendto_kdc.c, no longer needed
    - drop patch for 0002-Add-helper-to-determine-if-a-KDC-is-the-master, no longer needed
    - drop patch for 0003-Use-k5_transport-_strategy-enums-for-k5_sendto, no longer needed
    - drop patch for 0004-Build-support-for-TLS-used-by-HTTPS-proxy-support, no longer needed
    - drop patch for 0005-Add-ASN.1-codec-for-KKDCP-s-KDC-PROXY-MESSAGE, no longer needed
    - drop patch for 0006-Dispatch-style-protocol-switching-for-transport, no longer needed
    - drop patch for 0007-HTTPS-transport-Microsoft-KKDCPP-implementation, no longer needed
    - drop patch for 0008-Load-custom-anchors-when-using-KKDCP, no longer needed
    - drop patch for 0009-Check-names-in-the-server-s-cert-when-using-KKDCP, no longer needed
    - drop patch for 0010-Add-some-longer-form-docs-for-HTTPS, no longer needed
    - drop patch for 0011-Have-k5test.py-provide-runenv-to-python-tests, no longer needed
    - drop patch for 0012-Add-a-simple-KDC-proxy-test-server, no longer needed
    - drop patch for 0013-Add-tests-for-MS-KKDCP-client-support, no longer needed
    - drop patch for krb5-1.12ish-tls-plugins, fixed in krb5-1.13.1
    - drop patch for krb5-1.12-nodelete-plugins, fixed in krb5-1.13.1
    - drop patch for krb5-1.12-ksu-untyped-default-ccache-name, fixed in krb5-1.13.1
    - drop patch for krb5-1.12-ksu-no-ccache, fixed in krb5-1.13.1
    - drop patch for krb5-ksu_not_working_with_default_principal, fixed in krb5-1.13.1
    - drop patch for CVE_2014_5353_fix_LDAP_misused_policy_name_crash, fixed in krb5-1.13.1
    - drop patch for CVE_2014_5354_support_keyless_principals_in_ldap, fixed in krb5-1.13.1
    - drop patch for kinit -C loops (MIT/krb5 bug #243), fixed in krb5-1.13.1
    - drop patch for CVEs { 2014-9421, 2014-9422, 2014-9423, 2014-5352 }, fixed in krb5-1.13.1
    - added patch krb5-1.14-Support-KDC_ERR_MORE_PREAUTH_DATA_REQUIRED
    - added patch krb5-1.12.1-CVE_2014_5355_fix_krb5_read_message_handling
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-1
changelog:
  - fix for CVE-2015-2694 (#1218020) "requires_preauth bypass
    in PKINIT-enabled KDC".
    In MIT krb5 1.12 and later, when the KDC is configured with
    PKINIT support, an unauthenticated remote attacker can
    bypass the requires_preauth flag on a client principal and
    obtain a ciphertext encrypted in the principal's long-term
    key.  This ciphertext could be used to conduct an off-line
    dictionary attack against the user's password.


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-2
changelog:
  - the rebase to krb5 1.13.1 in vers 1.13.1-0 also fixed RH
    bug #1156144 ("krb5 upstream test t_kdb.py failure")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-0
changelog:
  - Update to krb5-1.13.2
    - drop patch for krb5-1.13.2-CVE_2015_2694_requires_preauth_bypass_in_PKINIT_enabled_KDC, fixed in krb5-1.13.2
    - drop patch for krb5-1.12.1-CVE_2014_5355_fix_krb5_read_message_handling, fixed in krb5-1.13.2


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-1
changelog:
  - the rebase to krb5 1.13.1 in vers 1.13.1-0 also fixed:
    - Bug 1144498 ("Fix the race condition in the libkrb5 replay cache")
    - Bug 1163402 ("kdb5_ldap_util view_policy does not shows ticket flags on s390x and ppc64")
    - Bug 1185770 ("Missing upstream test in krb5-1.12.2: src/tests/gssapi/t_invalid.c")
    - Bug 1204211 ("CVE-2014-5355 krb5: unauthenticated denial of service in recvauth_common() and other")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-2
changelog:
  - Add fix for RedHat Bug #1164304 ("Upstream unit tests loads
    the installed shared libraries instead the ones from the build")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-3
changelog:
  - Add patch to fix Redhat Bug #1222903 ("[SELinux] AVC denials may appear
    when kadmind starts"). The issue was caused by an unneeded |htons()|
    which triggered SELinux AVC denials due to the "random" port usage.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-4
changelog:
  - the rebase to krb5 1.13.2 in vers 1.13.2-0 also fixed:
    - Redhat Bug #1247761 ("RFE: Minor krb5 spec file cleanup and sync
      with recent Fedora 22/23 changes")
    - Redhat Bug #1247751 ("krb5-config returns wrong -specs path")
    - Redhat Bug #1247608 ('Add support for multi-hop preauth mechs
      via |KDC_ERR_MORE_PREAUTH_DATA_REQUIRED| for RFC 6113 ("A
      Generalized Framework for Kerberos Pre-Authentication")')
  - Removed "krb5-1.10-kprop-mktemp.patch" and
    "krb5-1.3.4-send-pr-tempfile.patch", both are no longer used since
    the rebase to krb5 1.13.1


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-5
changelog:
  - Add a patch to fix RedHat bug #1251586 ("KDC sends multiple
    requests to ipa-otpd for the same authentication") which causes
    the KDC to send multiple retries to ipa-otpd for TCP transports
    while it should only be done for UDP.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-6
changelog:
  - Add a patch to fix RedHat bug #1252454 ('testsuite complains
    "Lifetime has increased by 32436 sec while 0 sec passed!",
    while rhel5-libkrb5 passes') so that krb5 resolves GSS creds
    if |time_rec| is requested.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-7
changelog:
  - Obsolete multilib versions of server packages to fix RH
    bug #1251913 ("krb5 should obsolete the multilib versions
    of krb5-server and krb5-server-ldap").
    The following packages are declared obsolete:
    - krb5-server-1.11.3-49.el7.i686
    - krb5-server-1.11.3-49.el7.ppc
    - krb5-server-1.11.3-49.el7.s390
    - krb5-server-ldap-1.11.3-49.el7.i686
    - krb5-server-ldap-1.11.3-49.el7.ppc
    - krb5-server-ldap-1.11.3-49.el7.s390


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-8
changelog:
  - Add a patch to fix RH Bug #1250154 ("[s390x, ppc64, ppc64le]:
    kadmind does not accept ACL if kadm5.acl does not end with EOL")
    The code "accidently" works on x86/AMD64 because declaring a
    variable |char| results in an |unsigned char| by default while
    most other platforms (e.g. { s390x, ppc64, ppc64le, ...})
    default to |signed char| (still have to use lint(1) to clean
    up 38 more instances of this kind of bug).


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-9
changelog:
  - Ammend patch for RedHat bug #1252454 ('testsuite complains
    "Lifetime has increased by 32436 sec while 0 sec passed!",
    while rhel5-libkrb5 passes') to handle the newly introduced
    valgrind hits.


author: Robbie Harwood <rharwood@redhat.com> 1.13.2-9
changelog:
  - Add patch and test case for "KDC does not return proper
    client principal for client referrals"
  - Resolves: #1259846


author: Robbie Harwood <rharwood@redhat.com> - 1.14.1-1
changelog:
  - Rebase to new upstream version 1.14.1
  - Remove pax logic
  - Resolves: #1292153
  - Resolves: #1135427
  - Resolves: #1265509
  - Resolves: #1265510
  - Resolves: #1296241


author: Robbie Harwood <rharwood@redhat.com> - 1.14.1-16
changelog:
  - Fix kprop/iprop handling of default realm
  - Fix t_kprop.py
  - Resolves: #1290561
  - Resolves: #1302967
  - Resolves: #1292795


author: Jiri Olsa <jolsa@redhat.com> - 0.9.9-1
changelog:
  - updating to version 0.9.9
  - Resolves: #881654
  - Resolves: #1028410
  - Resolves: #1045025
  - Resolves: #1045368
  - Resolves: #1045388


author: Stanislav Kozina <skozina@redhat.com> - 0.9.15-1
changelog:
  - always load whitelist file from kernel-abi-whitelists package, remove the attached files
  - always load Module.symvers file from kernel-devel package, remove attached files
  - use python-bugzilla instead of private bz_xmlrpc package
  - Resolves: #1328384
  - Resolves: #906664
  - Resolves: #906659
  - Resolves: #1272348


author: Stanislav Kozina <skozina@redhat.com> - 0.9.17-1
changelog:
  - Add -y option to provide path to the Module.symvers file
  - Resolves: #1366929
  - Resolves: #1366952


author: Tomas Smetana <tsmetana@redhat.com> 20070328-2
changelog:
  - fix wrong exit status of spawned process after SIGSTOP
  - fix building of debuginfo package, add %{?dist} to release
  - fix handling of SIGTTOU in non-interactive shell
  - remove useless builtins


author: Tomas Smetana <tsmetana@redhat.com> 20071105-2
changelog:
  - fix #405381 - ksh will not handle $(xxx) when typeset -r IFS
  - fix #386501 - bad group in spec file


author: Michal Hlavinka <mhlavink@redhat.com> - 20100309-4
changelog:
  - fix infinite loop when whence builtin is used with -q option (#587127)
  - fix stdin for double command substitution (#584007)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100924-2
changelog:
  - disable only known to be broken builtins, let other enabled
  - skip regression tests if /dev/fd is missing


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-4
changelog:
  - bind Home, End, Delete,... key correctly for emacs mode
  - do not crash when executed from deleted directory


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-5
changelog:
  - ksh could not enter directories with path containing /.something (#889748)
  - file name autocomplete prevented following numeric input (#889745)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-12
changelog:
  - ksh sometimes wrote wrong byte sequence to terminal when vi editing 
    mode was used (#1026360)
  - fix errors in man page (#1030867)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-15
changelog:
  - fix argv rewrite (#1047507)
  - fix memory leak (#1048995)
  - standard error output could get misdirected (#1048272)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-19
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1070328)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-20
changelog:
  - fix segfault in job list code (#1084406)
  - do not resend signal on termination (#1085385)
  - fix brace expansion on/off (#1099935)
  - fix incorrect rounding of numsers 0.5 < |x| <1.0 in printf (#1070871)
  - fix parser errors related to the end of the here-document marker (#1111120)
  - ksh hangs when command substitution fills out the pipe buffer (#1077090)
  - using typeset -l with a restricted variabled caused segmentation fault (#1121960)
  - monitor mode was documented incorrectly (#1100215)
  - do not crash when unsetting running function from another one (#1100215)
  - should report an error when trying to cd into directory without execution bit (#1109893)
  - job locking mechanism did not survive compiler optimization (#1116506)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-21
changelog:
  - include symlink for restricted shell (#1146161)
  - ksh hangs when command substitution containing pipe fills out the pipe buffer (#1138751)
  - current directory could differ from PWD (#1135573)
  - cd builtin could break IO redirection (#1133585)
  - return code from a function could be wrong (#1116507)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-26
changelog:
  - closing a file descriptor in a command substitution caused loss of the output (#1202439)
  - fix: in a login shell "( cmd & )" does nothing (#1217237)
  - exporting fixed with variable corrupted its data (#1192026)
  - fix segfault when handling a trap (#1211540)
  - combining alarm and IFS caused segfault (#1192119)
  - declaration of a two dimemsional associatve array could add an extra 0 element (#1193557)
  - do not inherit invalid variables during shell initializaton (#1211538)
  - case in a for loop inside a subshell caused syntax error (#1241014)


author: Simo Sorce <simo@redhat.com> 2.3.6-0.20131125.3
changelog:
  - Initial packaging
  - Based on the spec file by Jean-Marc Liger <jmliger@siris.sorbonne.fr>
  - Code is updated to latest master via a jumbo patch while waiting for
    official upstream release.
  - Jumbo patch includes also additional patches sent to upstream list)
    to build on Fedora 20
  - Perl bindings are disabled as they fail to build
  - Disable doc building as it doesn't ork correctly for now


author: Simo Sorce <simo@redhat.com> 2.4.0-0
changelog:
  - Update to final 2.4.0 version
  - Drop all patches, they are now included in 2.4.0
  - Change Source URI


author: Remi Collet <rcollet@redhat.com> - 2.4.0-4
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/Php56
  - add numerical prefix to extension configuration file
  - drop unneeded dependency on pecl
  - add provides php-lasso


author: John Dennis <jdennis@redhat.com> - 2.4.1-7
changelog:
  - Add ECP support, brings Lasso up to current upstream tip + revised ECP patches
    Resolves: #1205342


author: John Dennis <jdennis@redhat.com> - 2.4.1-8
changelog:
  - Add explicit minimum dependency on glib2 2.42,
    for some reason RPM is not automatically detecting the dependency
    Resolves: #1254989


author: Richard Hughes <richard@hughsie.com> 2.2-1
changelog:
  - Update to new upstream version
  - Stability and efficienty fixes
  - Adds support for dictionary metatag


author: Richard Hughes <richard@hughsie.com> 2.4-1
changelog:
  - Update to new upstream version.
  - Black point detection from the algorithm disclosed by Adobe
  - Added support for transforms on planar data with different stride
  - Added a new plug-in type for optimizing full transforms
  - Linear (gamma 1.0) profiles can now operate in unbounded mode
  - Added "half" float support


author: Richard Hughes <richard@hughsie.com> 2.5-1
changelog:
  - Update to new upstream version.
  - Added a reference for Mac MLU tag
  - Added a way to read the profile creator from header
  - Added error descriptions on cmsSmoothToneCurve
  - Added identity curves support for write V2 LUT
  - Added new cmsPlugInTHR() and fixed some race conditions
  - Added TIFF Lab16 handling on tifficc
  - Fixed a bug on big endian platforms not supporting uint64 or long long.
  - Fixed a multithead bug on optimization
  - Fixed devicelink generation for 8 bits
  - Fixed some 64 bit warnings on size_t to uint32 conversions
  - Rendering intent used when creating the transform is now propagated to profile
  - RGB profiles store only one copy of the curve to save space
  - Transform2Devicelink now keeps white point when guessing deviceclass is enabled
  - Update black point detection algorithm to reflect ICC changes
  - User defined parametric curves can now be saved in ICC profiles


author: Andrew Hughes <gnu.andrew@redhat.com> - 2.6-3
changelog:
  - Run tests as part of %check, fixing Makefile to set LD_LIBRARY_PATH
  - Use upstream endianness fix to avoid ppc64le being built big-endian
  - Resolves: #1250914


author: David Walluck <david@anti-microsoft.org> 0:4.1-5jpp
changelog:
  - add Distribution and Vendor tags
  - fix jpackage-utils requirement
  - change gmake to %__make
  - break %description lines


author: Dennis Gilmore <dennis@ausil.us> - 4.18-1
changelog:
  - update to 4.18
  - spec contents pulled from RHEL5 srpm 
  - fedora spec changelog
  - update buildroot
  - use jss from fedora for building


author: Rich Megginson <rmeggins@redhat.com> 0:4.18-8
changelog:
  - Resolves: bug 684012 - LDAPSchemaElement.getOptionalValues() mangles values
  - upstream bug https://bugzilla.mozilla.org/show_bug.cgi?id=640750


author: Paul Wouters <paul@xelerance.com> 1.0.0-6
changelog:
  - added a make clean for 2.3.3 since .o files were left behind upstream,
    causing failure on ppc platform


author: Paul Wouters <paul@xelerance.com> 1.0.1-3
changelog:
  - Fixed changelog typo in date
  - Rebuild requested for PT_GNU_HASH support from gcc
  - Did not upgrade to 1.1.0 due to compile issues on x86_64


author: Paul Wouters <paul@xelerance.com> 1.2.0-2
changelog:
  - Own the /usr/include/ldns directory (bug #233858)
  - Removed obsoleted patch
  - Remove files form previous libtool run accidentally packages by upstream


author: Paul Wouters <paul@xelerance.com> 1.2.0-10
changelog:
  - Added sha256 DS record patch to ldns-key2ds
  - Minor tweaks for proper doc/man page installation.
  - Workaround for parallel builds


author: Paul Wouters <paul@xelerance.com> 1.2.0-11
changelog:
  - Patch for ldns-key2ds to write to stdout
  - Again remove extra set of man pages from doc
  - own /usr/include/ldns (bug 233858)


author: Paul Wouters <paul@xelerance.com> - 1.5.1-4
changelog:
  - Memory management bug when generating a sha256 key, see:
    https://bugzilla.redhat.com/show_bug.cgi?id=493953


author: Paul Wouters <paul@xelerance.com> - 1.6.0-3
changelog:
  - Added patch to compile with --without-ssl
  - Removed openssl dependancies
  - Recompiled with --without-ssl


author: Paul Wouters <paul@xelerance.com> - 1.6.1-2
changelog:
  - Added openssl dependancy back in, since we get more functionality
   when using openssl. Especially in 'drill'.


author: Paul Wouters <paul@xelerance.com> - 1.6.2-1
changelog:
  - Upgraded to 1.6.2. This fixes various bugs.
    (upstream released mostly to default with sha2 for the imminent
     signed root, but we already enabled that in our builds)


author: Paul Wouters <paul@xelerance.com> - 1.6.4-2
changelog:
  - Fix missing _ldns.so causing ldns-python to not work
  - Patch for installing ldns-python files
  - Patch for rpath in ldns-python
  - Don't install .a file for ldns-python


author: Paul Wouters <paul@xelerance.com> - 1.6.10-2
changelog:
  - Fix for losing nameserver when it drops UDP fragments in
    ldns_resolver_send_pkt [Willem Toorop <willem@NLnetLabs.nl>]
  - Added ldnsx module (to be merged into ldns soon)
    http://git.xelerance.com/cgi-bin/gitweb.cgi?p=ldnsx.git;a=summary


author: Paul Wouters <paul@xelerance.com> - 1.6.11-2
changelog:
  - Updated to 1.6.11, fixes rhbz#741026 which is CVE-2011-3581
  - Python goes into sitearch, not sitelib
  - Fix source link and spelling errors in description


author: Paul Wouters <pwouters@redhat.com> - 1.6.13-1
changelog:
  - Upgraded to 1.6.13, bugfix release
  - Added --disable-ecdsa as ECC is still banned
  - Removed --with-sha2 - it is always enabled and option was removed


author: Paul Wouters <pwouters@redhat.com> - 1.6.13-2
changelog:
  - Added reworked ldns-read-zone patch from trunk
    (adds -p for SOA padding, and -o for zeroizing timestamps/sigs)


author: Paul Wouters <pwouters@redhat.com> - 1.6.14-1
changelog:
  - [pulled before release]
  - Updated to 1.6.14
  - Removed merged in patch
  - Added new dependancy on ca-certificates for ldns-dane PKIX validation


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Tim Powers <timp@redhat.com>
changelog:
  - patched to build with gcc-2.96
  - use gcc instead of c++ for CXX, otherwise you expose an ICE in gcc when
    using g++ on two files, one being a C++ source, and the other a C source.
    Using gcc does the correct thing.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - explicitly list the modules which are built when the package compiles, so
    that module build failures (for whatever reason) get caught


author: Nalin Dahyabhai <nalin@redhat.com> 2.6.9-1
changelog:
  - include patch based on patch from Ulf Härnhammar to fix unsafe use of
    sscanf when reading http directory listings (CAN-2003-0963)
  - include patch based on patch from Ulf Härnhammar to fix compile warnings
    modified based on input from Solar Designer


author: Nalin Dahyabhai <nalin@redhat.com> 2.6.10-1
changelog:
  - update to 2.6.10, which folds in the previous patches
  - configure with --with-debug so that we get useful debug info


author: Nalin Dahyabhai <nalin@redhat.com> 2.6.10-3
changelog:
  - add patch to avoid DoS when connecting to HTTP servers (or "HTTP" "servers")
    which don't provide status headers, or provide empty lines instead of status
    headers


author: Jason Vas Dias <jvdias@redhat.com> - 3.3.2-1
changelog:
  - *** PLEASE COULD ANYONE MODIFYING lftp TEST IT BEFORE SUBMITTING! ***
    (and preferably contact the lftp package maintainer (me) first - thank you!)
    bug 171096 : 'mget files in lftp causes abort' (core dump actually)
    resulted from not doing so .
    See http://lftp.yar.ru :
  	Recent events:2005-10-17: 
  	lftp-3.3.2 released. Fixed a coredump caused by double-free.


author: Jason Vas Dias<jvdias@redhat.com> - 3.3.5-1
changelog:
  - Upgrade to version 3.3.5
  - fix bug bz172376 : host lookups should use any address found after timeout


author: Jason Vas Dias<jvdias@redhat.com> - 3.3.5-4
changelog:
  - fix bug 176315: openssl libraries not being picked up - gnutls was instead
  - improvements to bug 172376 fix


author: Maros Barabas <mbarabas@redhat.com> - 3.5.10-3
changelog:
  - Correct mistake removing devel package & calling chkconfig
  - Resolves #235436
  - Removing automake autoconf
  - Resolves #225984


author: Martin Nagy <mnagy@redhat.com> - 3.6.1-1
changelog:
  - upgrade to upstream version 3.6.1
  - remove rpath and make some spec file changes for review (#225984)
  - remove old patches
  - fix core dumping when html tag has its argument empty
  - use own libtool


author: Jiri Skala <jskala@redhat.com> - 4.0.9-3
changelog:
  - fixes issue when some servers require forcing SSL3.0
  - corrected check for 'max time' used for fix #600218


author: Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6
changelog:
  - Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
  - Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
  - Added RFE - lftp configurations for restricting each SSL/TLS 
    version (#1182987)
  - Fixed bogus dates of this SPEC


author: Mike A. Harris <mharris@redhat.com> 0.99.0-2
changelog:
  - Renamed package to prepend "xorg-x11" to the name for consistency with
    the rest of the X11R7 packages.
  - Added "Requires: %{name} = %{version}-%{release}" dependency to devel
    subpackage to ensure the devel package matches the installed shared libs.
  - Added virtual "Provides: lib<name>" and "Provides: lib<name>-devel" to
    allow applications to use implementation agnostic dependencies.
  - Added post/postun scripts which call ldconfig.
  - Added Conflicts with XFree86-libs and xorg-x11-libs to runtime package,
    and Conflicts with XFree86-devel and xorg-x11-devel to devel package.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated to libX11-0.99.2 from the X11R7 RC1 release.
  - Added en_GR.UTF-8 locale to file manifest.
  - Forcibly remove Xcms.txt


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libX11 to version 0.99.3 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.3-4
changelog:
  - Added libX11-0.99.3-datadir-locale-dir-fix.patch, to fix build to install
    the locale data files into datadir instead of libdir. (#173282)


author: Mike A. Harris <mharris@redhat.com> 0.99.4-1
changelog:
  - Updated libX11 to version 0.99.4 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added libX11-1.0.1-setuid.diff to fix potential security issue (#196094)
  - Change dependency on "filesystem" package to "xorg-x11-filesystem" package,
    so we can control this dep centrally.
  - Added NEWS to doc list.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-1
changelog:
  - Updated libX11 to version 1.0.2
  - Bump BuildRequires and Requires to "xorg-x11-proto-devel >= 7.1-2" to meet
    new "xproto >= 7.0.6" dependency.
  - Disable libX11-0.99.3-datadir-locale-dir-fix.patch as it is now included
    upstream.
  - Remove autoconf dependency as we no longer need it.


author: Mike A. Harris <mharris@redhat.com> 1.0.3-1.fc6
changelog:
  - Updated libX11 to version 1.0.3
  - Remove libX11-1.0.1-setuid.diff as it is included in the 1.0.3 release.
  - Added 'dist' tag to "Release:"


author: Mike A. Harris <mharris@redhat.com> 1.0.3-2.fc6
changelog:
  - Added libX11-nls-indic-locales-bug185376.patch to add support for various
    indic locales which have now been committed upstream (#185376)


author: Adam Jackson <ajax@redhat.com> 1.1.2-3
changelog:
  - libX11-1.1.2-GetMotionEvents.patch: Fix the definition of XGetMotionEvents
    to match the argument order in the headers. (#274671)


author: Adam Jackson <ajax@redhat.com> 1.1.3-2
changelog:
  - libX11-1.1.3-xkb-lock-fix.patch: Don't LockDisplay() recursively.  Fixes
    Gnome hang at logout. (#326461)


author: Adam Jackson <ajax@redhat.com> 1.1.4-3
changelog:
  - libX11-1.1.4-xcb-xreply-leak.patch: Fix a leak when the client has a
    non-fatal error handler. (mclasen, fdo #17616)


author: Dhaval Giani <dhaval@linux.vnet.ibm.com> 0.32.1-1
changelog:
  * Tue Feb 24 2009 Balbir Singh <balbir@linux.vnet.ibm.com> 0.33-1
  - Update to 0.33, spec file changes to add Makefiles and pam_cgroup module


author: Jan Safranek <jsafrane@redhat.com> 0.36.2-1
changelog:
  - Update to 0.36.2, fixing packaging the libraries (#605434)
  - Remove the dependency on redhat-lsb (#603578)


author: Jan Safranek <jsafrane@redhat.com> 0.37-1
changelog:
  - Update to 0.37
  - use /sys/fs/cgroup as default directory to mount control groups (and rely on
    systemd mounting tmpfs there)


author: Jan Safranek <jsafrane@redhat.com> 0.37.1-4
changelog:
  - fixed cgconfig service not to unmount stuff it did not mount
  - added better sample cgconfig.conf file to reflect systemd
    mounting all controllers during boot (#702111)


author: Peter Schiffer <pschiffe@redhat.com> - 0.38-3
changelog:
  - resolves: #850183
    scriptlets replaced with new systemd macros (thanks to vpavlin)
  - cleaned .spec file


author: Peter Schiffer <pschiffe@redhat.com> 0.40-0.rc1.1
changelog:
  - resolves: #819568, #740113
    rebased to 0.40.rc1
  - resolves: #983264
    rebuilt with full relro and PIE
  - resolves: #1016810
    removed cgrulesengd daemon


author: Peter Schiffer <pschiffe@redhat.com> 0.40-0.rc1.2
changelog:
  - related: #1016810
    returned creation of cgred group, which was removed in previous commit by mistage


author: jchaloup <jchaloup@redhat.com> - 0.41-8
changelog:
  - resolves: #885174
    loading configuration files from /etc/cgconfig.d/ directory
  - resolves: #885166
    use * character as a meta character for all mounted
  - resolves: #886920
    add examples to man pages
  - resolves: #1143851
    extending cgroup names with default
  - resolves: #1142807
    api.c: support for setting multiline values in control files
    config.c: xfs file system sets item->d_type to zero, stat() and S_ISREG() test added (#885174)


author: David Tardon <dtardon@redhat.com> - 0.3.1-5
changelog:
  - Resolves: rhbz#918079 libcmis::sha1() can return digests with fewer
    than 40 hexadecimal digits
  - Resolves: rhbz#918080 restrict redirection protocols


author: David Tardon <dtardon@redhat.com> - 0.5.0-2
changelog:
  - Related: rhbz#1290152 autoreconf is not needed
  - Related: rhbz#1290152 add a bunch of fixes found by coverity


author: Adam Jackson <ajax@redhat.com> 2.4.41-1
changelog:
  - libdrm 2.4.41 plus git.  Done as a git snapshot instead of the released
    2.4.41 since the release tarball is missing man/ entirely. 
  - Pre-F16 changelog trim


author: Dominik Mierzejewski <rpm[AT]greysector.net> 0.1.10-3.20070503
changelog:
  - update to current snapshot from new upstream
  - clean up some specfile cruft
  - disable static libs
  - drop unnecessary explicit dependency on libdvdread


author: Dominik Mierzejewski <rpm[AT]greysector.net> 4.1.1-1
changelog:
  - switch to new upstream
  - libdvdread comes from here now
  - apply dvdread udf-related fixes from upstream SVN


author: Dominik Mierzejewski <rpm[AT]greysector.net> 4.1.1-2
changelog:
  - use upstream non-autotools buildsystem
  - build with external libdvdread for older releases
  - fix version.h
  - fix soname
  - fix lib paths on 64bit


author: Dominik Mierzejewski <rpm[AT]greysector.net> 4.1.4-0.1.svn1184
changelog:
  - fix multilib conflict, based on a patch by Rex Dieter (rhbz#477684)
  - update to SVN r1184
  - move TODO to devel docs


author: Matthias Saou <matthias.saou@est.une.marmotte.net>
changelog:
  - Back to using libdvdcss 1.1.1, now it's all merged and fine.
  - Rebuilt against Red Hat Linux 7.3.
  - Added the -j8 expansion.


author: Ville Skyttä <ville.skytta at iki.fi> - 0.9.4-4
changelog:
  - Fix linking with libdl on x86_64.
  - Don't ship static libs.
  - Build with dependency tracking disabled.
  - Convert specfile and docs to UTF-8.
  - Improve package descriptions.


author: Dominik Mierzejewski <rpm@greysector.net> 4.1.4-0.1.svn1183
changelog:
  - updated to SVN r1183
  - simplified multilib patch
  - fixed endianness issues (rhbz#442508)
  - added some docs


author: Dennis Gilmore <dennis@ausil.us> - 3.0.10-3
changelog:
  - drop back to 3.0.10, 3.0.11 was never pushed anywhere as the soname bump broke buildroots
  - as 3.0.11 never went out no epoch needed.


author: Dan Horák <dhorak@redhat.com> - 3.0.13-16
changelog:
  - Drop ppc64le from the multilib list
  - Use additional BR: only in ppc64le build
  - Resolves: RHBZ1116945


author: Karsten Hopp <karsten@redhat.com> 0.1.0-6.pre1.1
changelog:
  - Excludearch s390 s390x, we don't have USB devices there and this package
    doesn't build without USB support


author: Matthew Garrett <mjg@redhat.com> 0.1.0-7.pre1
changelog:
  - fprint-add-udev-rules.patch - build udev rules for autosuspend
  - move hal fdi into the main package rather than -devel
  - add autoreconf as a build depend while carrying the udev diff


author: Christophe Fergeau <cfergeau@redhat.com> 0.0.3-2
changelog:
  - Removed definition of BuildRoot and cleanup of BuildRoot in %clean
  - Added missing arch to versioned Requires: %{name} in the -devel package
  - Don't include empty NEWS and ChangeLog in built RPM


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.1-2
changelog:
  - Requires a new enough librest as we use symbols not available in older
    librest
    Related: rhbz#1116844


author: Fabiano Fidêncio <fidencio@redhat.com> 0.3.3-2
changelog:
  - Fix crash when VM has several ISO domains
    Resolves: rhbz#1274356
  - Add OvirtProxy::sso-token support for oVirt 4.0
    Resolves: rhbz#1324457


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-3
changelog:
  - Add upstream patch fixing unwanted authentication dialog for foreign menu
    when using remote-viewer ovirt://
    Resolves: rhbz#1346256


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-4
changelog:
  - Add upstream patch forcing use of the older v3 REST API as we don't support
    yet the v4 API
    Resolves: rhbz#1346215


author: Steve Fox <drfickle@k-lug.org> - 0.20060706-2
changelog:
  - Fix the Makefile so that the ld.hugetlbfs script doesn't store the
    DESTDIR in the path to the ldscripts dir


author: Eric Munson <ebmunson@us.ibm.com> 2.1-1
changelog:
  - Updating for libhuge-2.1 release
  - Adding -devel and -utils subpackages for various utilities
    and devel files.


author: Jarod Wilson <jarod@redhat.com> 2.6-3
changelog:
  - Add hopefully-about-to-be-merged-upstream hugeadm enhancements
  - Add huge pages setup helper script, using new hugeadm enhancements


author: Roland Dreier <rdreier@cisco.com> - 1.1-0.1.rc2
changelog:
  - New upstream release
  - Remove dependency on libsysfs, since it is no longer used
  - Put section 3 manpages in devel package.
  - Spec file cleanups: remove unused ver macro, improve BuildRoot, add
    Requires for /sbin/ldconfig, split static libraries into
    devel-static package, and don't use makeinstall any more (all
    suggested by Doug Ledford <dledford@redhat.com>).


author: Roland Dreier <rdreier@cisco.com> - 1.1.2-1
changelog:
  - New upstream release
  - Update description to mention RDMA and iWARP, not just InfiniBand
  - Add "Requires" tag for libibverbs base package to -devel


author: Doug Ledford <dledford@redhat.com> - 1.1.3-2
changelog:
  - Add Requires of -devel package to -devel-static package
  - Add Requires of libibverbs-driver (this pulls in the various driver packages
    automatically when the libibverbs package is installed)


author: Doug Ledford <dledford@redhat.com> - 1.1.5-3
changelog:
  - Change which package actually requires the driver psuedoprovide
    so that a driver library is not needed in order to build the
    base libibverbs package in the build system


author: Doug Ledford <dledford@redhat.com> - 1.1.6-5
changelog:
  - Correct the Url and Source tags now that the openfabrics server no longer
    responds if you don't include the www in the link


author: Doug Ledford <dledford@redhat.com> - 1.1.7-6
changelog:
  - Add in support for flow steering and IP addressing of UD RoCE QPs
  - Resolves: bz1058537, bz1062281


author: Doug Ledford <dledford@redhat.com> - 1.1.8-1
changelog:
  - Grab official upstream release.  This includes all of the pre-release
    items we had in the last release except for the IP based RoCE GID
    addressing changes.  So we are still carrying patches for those two
    items
  - Upstream fixed the copy-n-paste error that broke flow steering
  - Related: bz1094988
  - Resolves: bz947308


author: Doug Ledford <dledford@redhat.com> - 1.1.8-2
changelog:
  - Update RoCE IP addressing patches to latest version under review
  - Build against valgrind on ppc64le
  - Fix a coverity found issue
  - Resolves: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.1.8-4
changelog:
  - Fix one of the coverity bugs in a different way (the original fix
    caused a problem in libmlx4)
  - Related: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.1.8-6
changelog:
  - Add build on s390
  - Drop back to building against libnl instead of libnl3
  - Resolves: bz1182178, bz1177115


author: Doug Ledford <dledford@redhat.com> - 1.1.8-7
changelog:
  - Add checksum offload support
  - Update the various patches to the ones from the official upstream git repo
  - Related: bz1195888


author: Paolo Bonzini <pbonzini@redhat.com> - 1.7.0-3
changelog:
  - Correct license for libiscsi-utils, prefer %global to %define
  - Add Requires
  - Remove %clean section


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-3
changelog:
  - Fixed issues reported by coverity (bz #1026820)
  - Do not mark /etc/ld.so.conf.d/ as config (bz #1011126)
  - Resolves: #1026820 
  - Resolves: #1011126


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-7.el7
changelog:
  - libiscsi-Discovery-return-multiple-portals-for-the-same-disco.patch [bz#1266523]
  - libiscsi-iscsi-ls-skip-link-local-IPv6-addresses.patch [bz#1266523]
  - Resolves: bz#1266523
    (iscsi-ls doesn't work if target has more than one portal)


author: Daiki Ueno <dueno@redhat.com> - 0.1.3-1
changelog:
  - move arch-independent data files to -common subpackage
  - remove unnecessary R: from -common and -data subpackages
  - add BR: python2-devel


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.22-8
changelog:
  - Fixes from package review
  - Change Requires: on tools subpackage to be the exact version/release
  - Remove unnecessary BuildRoot directive


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-1
changelog:
  - New upstream release 1.0.0
  - SOname bump to account for module loading changes
  - Rename libldb-tools to ldb-tools to make upgrades easier


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.3-2
changelog:
  - Build and install API documentation
  - Build tdb_compat and ccan statically. They have no upstream releases to
    link against yet and their API is in flux. It is unsafe to make them
    public and shared at this time.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.3-3
changelog:
  - Add explicit mention of the bundled libreplace
  - https://fedorahosted.org/fpc/ticket/120
  - Add explicit mention of bundled libtdb_compat and libccan
  - https://fedorahosted.org/fpc/ticket/119


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.4-1
changelog:
  - New upstream release
  - Add ldb_module_error() routine
  - Fedora: work around unreliable configure check for pytevent
  - Drop patch to ignore --disable-silent-rules (included in tarball)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.6-1
changelog:
  - New upstream release 1.1.6
  - Drop upstream patches
  - Required for upcoming Samba 4 beta
  - Explicitly build with tdb1 support


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.8-1
changelog:
  - New upstream release 1.1.8
  - Required for latest Samba 4 beta
  - Fixes for pyldb
  - Revert to using tdb1 by default
  - Drop support for tdb_compat
  - CCAN is no longer built as a static library


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.9-1
changelog:
  - New upstream release 1.1.9
  - Required for Samba 4 Beta 5
  - Ensure rename target does not exist before deleting old record
  - Add parameter to avoid NULL format string flagged by -Werror=format


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.14-2
changelog:
  - Add patch by Stephen Gallagher to include manual pages for
    ldb_connect() and several other functions.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.17-2
changelog:
  - Fix the minimal required tdb version
  - Related: rhbz#1133914 - Rebase libldb to version 1.1.17 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-2
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-3
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Roland Dreier <rdreier@cisco.com> - 1.0-2
changelog:
  - Spec file cleanups, based on Fedora review: don't mark
    libmlx4.driver as a config file, since it is not user modifiable,
    and change the name of the -devel-static package to plain -devel,
    since it would be empty without the static library.


author: Doug Ledford <dledford@redhat.com> - 1.0.1-1
changelog:
  - Update to latest upstream release
  - Add pseudo provides of libibverbs-driver
  - Update buildrequires for libibverbs API change


author: Doug Ledford <dledford@redhat.com> - 1.0.1-3
changelog:
  - Tweak the provides and obsoletes a little bit to make sure we only pull in
    the -static package to replace past -devel-static packages, and not past
    -devel packages.


author: Doug Ledford <dledford@redhat.com> - 1.0.4-2
changelog:
  - Fix Url and Source tags
  - Drop old Provides/Obsoletes we used to change package names
  - Pick up a bug fix to modprobe.d/libmlx4.conf


author: Doug Ledford <dledford@redhat.com> - 1.0.5-1
changelog:
  - Update to latest upstream
  - Drop awk based setup for a bash based setup, making including
    the setup code on an initramfs easier
  - Modernize spec file


author: Doug Ledford <dledford@redhat.com> - 1.0.5-7
changelog:
  - Fix dracut module support to work with rdma dracut module
  - Add support for IP based RoCE addressing and UD QPs
  - Add flow steering support
  - Related: bz1064316, bz1062284, bz1058538


author: Doug Ledford <dledford@redhat.com> - 1.0.6-1
changelog:
  - Update to latest upstream release
  - Update RoCE IP GID support
  - Fix flow steering support
  - Resolves: bz1094988


author: Doug Ledford <dledford@redhat.com> - 1.0.6-2
changelog:
  - Bump and rebuilt against latest libibverbs (updated RoCE GID
    patch in libibverbs)
  - Fix a couple compiler warnings (the problems were bogus, but
    we still prefer a silent build)
  - Related: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.0.6-3
changelog:
  - Drop the module init stuff and move it to the rdma package
  - Make sure we require the rdma package, and that we conflict
    with older versions of the package
  - Related: bz1164618


author: Doug Ledford <dledford@redhat.com> - 1.0.1-1
changelog:
  - Update to latest upstream release
  - Remove files related to setting ports to Ethernet mode as that
    isn't even supported on this card yet and the files that are
    there will be wrong when it is supported
  - Resolves: bz1061584


author: Jarod Wilson <jarod@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream release v1.2.1
  - This is libmlx5, not libmlx4, fix descriptions accordingly
  - Resolves: bz1298698, bz1275412, bz1275396, bz1296267, bz1296186, bz1288821


author: Jarod Wilson <jarod@redhat.com> - 1.2.1-7
changelog:
  - Fix mlx5_post_send incompatibility with ibv_post_send ABI
  - Add explicit Requires: on libibverbs >= 1.2.1
  - Resolves: rhbz#1364525


author: Linus Walleij <triad@df.lth.se> 0.0.20-1
changelog:
  - New upstream release.
  - Updated after review by Parag AN, Kevin Fenzi and Ralf Corsepius.
  - Fixed pkgconfig bug upstream after being detected by Ralf...


author: Linus Walleij <triad@df.lth.se> 0.1.4-1
changelog:
  - New upstream release.
  - Candidate for FC5, FC6 backport.
  - Hopefully API/ABI compatible, testing in devel tree.


author: Linus Walleij <triad@df.lth.se> 0.2.0-1
changelog:
  - New upstream release.
  - Fixes (hopefully) the issues found by Harald.
  - Dependent apps will need to recompile and patch some minor code.


author: Linus Walleij <triad@df.lth.se> 0.2.2-2
changelog:
  - Flat out KILL the Doxygen HTML docs to resolve multiarch conflicts.
    Either upstream (that's me!) needs to work around the HTML files being
    different each time OR Doxygen must stop generating anchors that
    hash the system time, creating different files with each generation.
    Pre-generating the docs is deemed silly. (Someone will disagree.)


author: Linus Walleij <triad@df.lth.se> 0.2.3-1
changelog:
  - New upstream release.
  - New soname libmtp.so.7 so all apps using libmtp have to
    be recompiled, have fun.
  - If it works out we'll try to reserve a spot to backport
    this fixed version to F8 and F7 in a controlled manner.


author: Linus Walleij <triad@df.lth.se> 0.2.6.1-3
changelog:
  - Loose PAM console permissions, also assume that we can ship
    documentation again since Doxygen has been updated. Fedora
    HALd rules for the portable_audio_player capability in
    20-acl-management.fdi will change permissions on the device
    node for each plugged-in device.


author: Linus Walleij <triad@df.lth.se> 0.3.0-1
changelog:
  - Upgrade to 0.3.0. This has to happen some way, perhaps the
    painful way: I upgrade to gnomad2 2.9.2 that use 0.3.0 and
    then I write patches to Rhythmbox and Amarok to use 0.3.0
    and also send these upstream.


author: Linus Walleij <triad@df.lth.se> 1.0.3-2
changelog:
  - Replace hal-filesystem dependence with hal-info
    We can remove this altogether once all apps are cleansed
    from HAL.


author: Linus Walleij <triad@df.lth.se> 1.0.3-4
changelog:
  - Set ENV{ACL_MANAGE}="0" and TAG+="udev-acl" akin to rfkill
    apparently this may be an interrim solution.


author: Linus Walleij <triad@df.lth.se> 1.0.3-6
changelog:
  - It appears adding ENV{ID_MTP_DEVICE}="1",
    ENV{ID_MEDIA_PLAYER}="1" is the way forward so testing this
    before pushing a new libmtp release.


author: Linus Walleij <triad@df.lth.se> 1.1.0-1
changelog:
  - New upstream version including fixed bugs and the patch we
    used to carry. Dependecies need to be rebuilt. (New
    soversion)


author: Linus Walleij <triad@df.lth.se> 1.1.1-1
changelog:
  - New upstream version fixing problems with a few color devices
    plus adding new device support. Move udev rules from level
    60 to level 69 to come after SANE and avoid probing these
    devices.


author: Jiri Pirko <jpirko@redhat.com> - 1.2-1
changelog:
  - Update to 1.2
  - libndp: silently ignore packets with optlen 0 [1016064]
  - libndp: fix processing for larger options [1016064]
  - libndp: do not fail on receiving non-ndp packets [1016078]


