# changelog

author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-39
changelog:
  - nptl: Open libgcc.so with RTLD_NOW during pthread_cancel (#1527887)
  - Introduce libnsl subpackage and remove NIS headers (#1531540)
  - Use versioned Obsoletes: for libcrypt-nss.
  - Auto-sync with upstream branch master,
    commit 08c6e95234c60a5c2f37532d1111acf084f39345:
  - nptl: Add tst-minstack-cancel, tst-minstack-exit (swbz#22636)
  - math: ldbl-128ibm log1pl (-qNaN) spurious "invalid" exception (swbz#22693)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-40
changelog:
  - libnsl: Do not install libnsl.so, libnsl.a (#1531540)
  - Use unversioned Supplements: for langpacks (#1490725)
  - Auto-sync with upstream branch master,
    commit 9a08a366a7e7ddffe62113a9ffe5e50605ea0924:
  - hu_HU locale: Avoid double space (swbz#22657)
  - math: Make default libc_feholdsetround_noex_ctx use __feholdexcept
    (swbz#22702)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-41
changelog:
  - CVE-2018-1000001: Make getcwd fail if it cannot obtain an absolute path
    (#1533837)
  - elf: Synchronize DF_1_* flags with binutils (#1439328)
  - Auto-sync with upstream branch master,
    commit 860b0240a5645edd6490161de3f8d1d1f2786025:
  - aarch64: fix static pie enabled libc when main is in a shared library
  - malloc: Ensure that the consolidated fast chunk has a sane size


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-43
changelog:
  - Enable static PIE support on i386, x86_64 (#1247050)
  - Remove add-on support (already gone upstream)
  - Rework test suite status reporting
  - Auto-sync with upstream branch master,
    commit 64f63cb4583ecc1ba16c7253aacc192b6d088511:
  - malloc: Fix integer overflows in memalign and malloc functions (swbz#22343)
  - x86-64: Properly align La_x86_64_retval to VEC_SIZE (swbz#22715)
  - aarch64: Update bits/hwcap.h for Linux 4.15
  - Add NT_ARM_SVE to elf.h


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-44
changelog:
  - Correct the list of static PIE architectures (#1247050)
  - glibc_post_upgrade: Remove process restart logic
  - glibc_post_upgrade: Integrate into the build process
  - glibc_post_upgrade: Do not clean up tls subdirectories
  - glibc_post_upgrade: Drop ia64 support
  - Remove architecture-specific symbolic link for iconvconfig
  - Auto-sync with upstream branch master,
    commit 4612268a0ad8e3409d8ce2314dd2dd8ee0af5269:
  - powerpc: Fix syscalls during early process initialization (swbz#22685)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-45
changelog:
  - Drop static PIE support on aarch64.  It leads to crashes at run time.
  - Remove glibc-rpcgen subpackage.  See rpcsvc-proto.  (#1531540)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-48
changelog:
  - Auto-sync with upstream branch master,
    commit 21c0696cdef617517de6e25711958c40455c554f:
  - locale: Implement alternative month names (swbz#10871)
  - locale: Change month names for pl_PL (swbz#10871)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-50
changelog:
  - Auto-sync with upstream branch master,
    commit cdd14619a713ab41e26ba700add4880604324dbb:
  - libnsl: Turn remaining symbols into compat symbols (swbz#22701)
  - be_BY, be_BY@latin, lt_LT, el_CY, el_GR, ru_RU, ru_UA, uk_UA:
    Add alternative month names (swbz#10871)
  - x86: Revert Intel CET changes to __jmp_buf_tag (swbz#22743)
  - aarch64: Revert the change of the __reserved member of mcontext_t


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-51
changelog:
  - Explicitly run ldconfig in the buildroot
  - Do not run ldconfig from scriptlets
  - Put triggers into the glibc-common package, do not pass arguments to ldconfig


author: Richard W.M. Jones <rjones@redhat.com> - 2.26.9000-52
changelog:
  - Disable -fstack-clash-protection on riscv64:
    not supported even by GCC 7.3.1 on this architecture.


author: Carlos O'Donell <carlos@redhat.com> - 2.27-1
changelog:
  - Update to released glibc 2.27.
  - Auto-sync with upstream branch master,
    commit 23158b08a0908f381459f273a984c6fd328363cb.


author: Florian Weimer <fweimer@redhat.com> - 2.27-2.1
changelog:
  - Linux: use reserved name __key in pkey_get (#1542643)
  - Auto-sync with upstream branch release/2.27/master,
    commit 56170e064e2b21ce204f0817733e92f1730541ea.


author: Florian Weimer <fweimer@redhat.com> - 2.27-3
changelog:
  - Spec file cleanups:
    - Remove %defattr(-,root,root)
    - Use shell to run ldconfig %transfiletrigger
    - Move %transfiletrigger* to the glibc-common subpackage
    - Trim changelog
    - Include ChangeLog.old in the source RPM


author: Richard W.M. Jones <rjones@redhat.com> - 2.27-4
changelog:
  - riscv64: Add symlink from /usr/lib64/lp64d -> /usr/lib64 for ABI compat.
  - riscv64: Disable valgrind smoke test on this architecture.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-6
changelog:
  - Switch back to upstream master branch
  - Drop glibc-rh1013801.patch, applied upstream.
  - Drop glibc-fedora-nptl-linklibc.patch, no longer needed.
  - Auto-sync with upstream branch master,
    commit bd60ce86520b781ca24b99b2555e2ad389bbfeaa.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-7
changelog:
  - Auto-sync with upstream branch master,
    commit 1a2f44a848663036c8a14671fe0faa3fed0b2a25:
  - Remove spurios reference to libpthread_nonshared.a


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-13
changelog:
  - Auto-sync with upstream branch master,
    commit d39c0a459ef32a41daac4840859bf304d931adab:
  - CVE-2017-18269: memory corruption in i386 memmove (#1580934)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-17
changelog:
  - Avoid exporting some Sun RPC symbols with default versions (#1577210)
  - Inherit the -mstackrealign flag if it is set
  - Inherit compiler flags in the original order
  - Auto-sync with upstream branch master,
    commit 89aacb513eb77549a29df2638913a0f8178cf3f5:
  - CVE-2018-11236: realpath: Fix path length overflow (#1581270, swbz#22786)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-18
changelog:
  - Do not run telinit u on upgrades (#1579225)
  - Auto-sync with upstream branch master,
    commit 632a6cbe44cdd41dba7242887992cdca7b42922a.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-20
changelog:
  - Auto-sync with upstream branch master,
    commit 7f9f1ecb710eac4d65bb02785ddf288cac098323:
  - CVE-2018-11237: Buffer overflow in __mempcpy_avx512_no_vzeroupper (#1581275)
  - Drop glibc-rh1452750-allocate_once.patch,
    glibc-rh1452750-libidn2.patch.  Applied upstream.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-22
changelog:
  - Modernise nsswitch.conf defaults (#1581809)
  - Adjust build flags inheritence from redhat-rpm-config
  - Auto-sync with upstream branch master,
    commit 104502102c6fa322515ba0bb3c95c05c3185da7a.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-24
changelog:
  - Auto-sync with upstream branch master,
    commit 14beef7575099f6373f9a45b4656f1e3675f7372:
  - iconv: Make IBM273 equivalent to ISO-8859-1 (#1592270)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-28
changelog:
  - Drop glibc-rh1315108.patch.  extend_alloca was removed upstream. (#1315108)
  - Auto-sync with upstream branch master,
    commit c49e18222e4c40f21586dabced8a49732d946917.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-29
changelog:
  - Drop glibc-deprecate_libcrypt.patch.  Variant applied upstream. (#1566464)
  - Drop glibc-linux-timespec-header-compat.patch.  Upstreamed.
  - Auto-sync with upstream branch master,
    commit e69d994a63afc2d367f286a2a7df28cbf710f0fe.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-30
changelog:
  - Auto-sync with upstream branch master,
    commit b7b88cea4151d85eafd7ababc2e4b7ae1daeedf5:
  - New locale: dsb_DE (Lower Sorbian)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-36
changelog:
  - Auto-sync with upstream branch master,
    commit fd70af45528d59a00eb3190ef6706cb299488fcd:
  - Add the statx function
  - regexec: Fix off-by-one bug in weight comparison (#1582229)
  - nss_files: Fix re-reading of long lines (swbz#18991)
  - aarch64: add HWCAP_ATOMICS to HWCAP_IMPORTANT
  - aarch64: Remove HWCAP_CPUID from HWCAP_IMPORTANT
  - conform/conformtest.pl: Escape literal braces in regular expressions
  - x86: Use AVX_Fast_Unaligned_Load from Zen onwards.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-38
changelog:
  - Auto-sync with upstream branch master,
    commit 93304f5f7a32f73b551266c5a181db51d97a71e4:
  - Install <bits/statx.h> header
  - Put the correct Unicode version number 11.0.0 into the generated files


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-41
changelog:
  - Build with --enable-cet on x86_64, i686
  - Auto-sync with upstream branch master,
    commit cfba5dbb10cc3abde632b46c60c10b2843917035:
  - Keep expected behaviour for [a-z] and [A-z] (#1607286)
  - Additional ucontext tests
  - Intel CET enhancements
  - ISO C11 threads support
  - Fix out-of-bounds access in IBM-1390 converter (swbz#23448)
  - New locale Yakut (Sakha) for Russia (sah_RU) (swbz#22241)
  - os_RU: Add alternative month names (swbz#23140)
  - powerpc64: Always restore TOC on longjmp (swbz#21895)
  - dsb_DE locale: Fix syntax error and add tests (swbz#23208)
  - Improve performance of the generic strstr implementation
  - regcomp: Fix off-by-one bug in build_equiv_class (swbz#23396)
  - Fix out of bounds access in findidxwc (swbz#23442)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-42
changelog:
  - Auto-sync with upstream branch master,
    commit af86087f02a5522d8801a11d8381e04f95e33162:
  - x86/CET: Don't parse beyond the note end
  - Fix Linux fcntl OFD locks tests on unsupported kernels
  - x86: Populate COMMON_CPUID_INDEX_80000001 for Intel CPUs (swbz#23459)
  - x86: Correct index_cpu_LZCNT (swbz#23456)
  - Fix string/tst-xbzero-opt if build with gcc head


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-43
changelog:
  - Update to glibc 2.28 release tarball:
  - Translation updates
  - x86/CET: Fix property note parser (swbz#23467)
  - x86: Add tst-get-cpu-features-static to $(tests) (swbz#23458)


author: Patsy Griffin Franklin <patsy@redhat.com> - 2.28-48
changelog:
  - Add compiler barriers around modifications of the robust mutex list
    for pthread_mutex_trylock. (#1672773)


author: Florian Weimer <fweimer@redhat.com> - 2.28-65
changelog:
  - glibc-all-langpacks: Do not delete locale archive during update (#1717347)
  - Do not mark /usr/lib/locale/locale-archive as a configuration file
    because it is always automatically overwritten by build-locale-archive.


author: Arjun Shankar <arjun@redhat.com> - 2.28-79
changelog:
  - Remove unwanted whitespace from size lines and account for top chunk in
    malloc_info output (#1735747)


author: Arjun Shankar <arjun@redhat.com> - 2.28-80
changelog:
  - Fix race condition in tst-clone3 and add a new ldconfig test,
    tst-ldconfig-bad-aux-cache (#1764226)


author: Patsy Griffin <patsy@redhat.com> - 2.28-114
changelog:
  - CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
    sincosl, and tanl function. (#1811796)


author: Patsy Griffin <patsy@redhat.com> - 2.28-130
changelog:
  - Fix avx2 strncmp offset compare condition check (#1871394)
  - Add strncmp and strcmp testcases for page boundary


author: Carlos O'Donell <carlos@redhat.com> - 2.28-153
changelog:
  - Support SEM_STAT_ANY via semctl. Return EINVAL for unknown commands to semctl,
    msgctl, and shmctl. (#1912670)


author: Milind Changire <mchangir@redhat.com> - 6.0-1
changelog:
  - rebase to upstream glusterfs at v6.0
  - fixes bugs bz#1493284 bz#1578703 bz#1600918 bz#1670415 bz#1691620 
    bz#1693935 bz#1695057


author: Milind Changire <mchangir@redhat.com> - 6.0-2
changelog:
  - fixes bugs bz#1471742 bz#1652461 bz#1671862 bz#1676495 bz#1691620 
    bz#1696334 bz#1696903 bz#1697820 bz#1698436 bz#1698728 bz#1699709 bz#1699835 
    bz#1702240


author: Rinku Kothiya <rkothiya@redhat.com> - 6.0-3
changelog:
  - fixes bugs bz#1583585 bz#1671862 bz#1702686 bz#1703434 bz#1703753 
    bz#1703897 bz#1704562 bz#1704769 bz#1704851 bz#1706683 bz#1706776 bz#1706893


author: Rinku Kothiya <rkothiya@redhat.com> - 6.0-4
changelog:
  - fixes bugs bz#1480907 bz#1702298 bz#1703455 bz#1704181 bz#1707246
    bz#1708067 bz#1708116 bz#1708121 bz#1709087 bz#1711249 bz#1711296 
    bz#1714078 bz#1714124 bz#1716385 bz#1716626 bz#1716821 bz#1716865 bz#1717927


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-5
changelog:
  - fixes bugs bz#1573077 bz#1694595 bz#1703434 bz#1714536 bz#1714588 
    bz#1715407 bz#1715438 bz#1705018


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-6
changelog:
  - fixes bugs bz#1668001 bz#1708043 bz#1708183 bz#1710701 
    bz#1719640 bz#1720079 bz#1720248 bz#1720318 bz#1720461


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-7
changelog:
  - fixes bugs bz#1573077 bz#1600918 bz#1703423 bz#1704207 bz#1708064
    bz#1709301 bz#1713664 bz#1716760 bz#1717784 bz#1720163 bz#1720192
    bz#1720551 bz#1721351 bz#1721357 bz#1721477 bz#1722131 bz#1722331
    bz#1722509 bz#1722801 bz#1720248


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-8
changelog:
  - fixes bugs bz#1698435 bz#1712591 bz#1715447 bz#1720488 bz#1722209
    bz#1722512 bz#1724089 bz#1726991 bz#1727785 bz#1729108


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-12
changelog:
  - fixes bugs bz#1730914 bz#1731448 bz#1732770 bz#1732792 bz#1733531 
    bz#1734305 bz#1734534 bz#1734734 bz#1735514 bz#1737705 bz#1732774
    bz#1732793


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-14
changelog:
  - fixes bugs bz#1719171 bz#1728673 bz#1731896 bz#1732443 bz#1733970 
    bz#1745107 bz#1746027 bz#1748688 bz#1750241 bz#1572163


author: Rinku Kothiya <rkothiya@redhat.com> - 6.0-23
changelog:
  - fixes bugs bz#1344758 bz#1599802 bz#1685406 bz#1686800 bz#1724021 
    bz#1726058 bz#1727755 bz#1731513 bz#1741193 bz#1758923 bz#1761326 bz#1761486 
    bz#1762180 bz#1764095 bz#1766640


author: Rinku Kothiya <rkothiya@redhat.com> - 6.0-38
changelog:
  - fixes bugs bz#1234220 bz#1286171 bz#1487177 bz#1524457 bz#1640573 
    bz#1663557 bz#1667954 bz#1683602 bz#1686897 bz#1721355 bz#1748865 bz#1750211 
    bz#1754391 bz#1759875 bz#1761531 bz#1761932 bz#1763124 bz#1763129 bz#1764091 
    bz#1775637 bz#1776901 bz#1781550 bz#1781649 bz#1781710 bz#1783232 bz#1784211 
    bz#1784415 bz#1786516 bz#1786681 bz#1787294 bz#1787310 bz#1787331 bz#1787994 
    bz#1790336 bz#1792873 bz#1794663 bz#1796814 bz#1804164 bz#1810924 bz#1815434 
    bz#1836099 bz#1837467 bz#1837926 bz#1838479 bz#1839137 bz#1844359


author: Marc Ewing <marc@redhat.com>
changelog:
  - started with package from Toshio Kuratomi <toshiok@cats.ucsc.edu>
  - cleaned up file list
  - fixed up install-info support


author: Michael Johnson <johnsonm@redhat.com>
changelog:
  - include the private header file gmp-mparam.h because several
    apps seem to assume that they are building against the gmp
    source tree and require it.  Sigh.


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - merge in some debian gmp fixes
  - Ulrich Drepper's __gmp_scale2 fix
  - my mpf_set_q fix
  - sparc64 fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to the configure and makeinstall macros
  - FHS-compliance fixing
  - move docs to non-devel package


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed bugzilla bug #25515 where GMP wouldn't work on IA64 as IA64 is not
  correctly identified as a 64 bit platform.


author: Trond Eivind Glomsrød <teg@redhat.com> 4.1-3
changelog:
  - Redefine the configure macro, the included configure 
    script isn't happy about the rpm default one (#68190). Also, make
    sure the included libtool isn't replaced,


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - enable mpfr  #104395
  - enable cxx  #80195
  - add COPYING.LIB
  - add fixes from gmp web-site
  - remove some cruft patches for older libtool releases


author: Jakub Jelinek <jakub@redhat.com> 4.1.4-11
changelog:
  - make sure libmpfr.a doesn't contain SSE2 instructions on i?86 (#222371)
  - rebase to mpfr 2.2.1 from 2.2.0 + cumulative fixes


author: Karsten Hopp <karsten@redhat.com> 4.1.4-12
changelog:
  - remove trailing dot from summary
  - fix buildroot
  - fix post/postun/... requirements
  - use make install DESTDIR=...
  - replace tabs with spaces
  - convert changelog to utf-8


author: Ivana Varekova <varekova@redhat.com> 4.2.1-1
changelog:
  - update to 4.2.1
  - do some spec cleanups
  - fix 238794 - gmp-devel depends on {version} but not on 
    {version}-{release}
  - remove mpfr (moved to separate package)


author: Peter Schiffer <pschiffe@redhat.com> 1:5.0.2-1
changelog:
  - resolves: #702919
    update to 5.0.2
  - resolves: #738091
    removed unused direct shlib dependency on libm
    updated license in gmp.h and gmp-mparam.h files


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1:5.1.0-1
changelog:
  - rebase to 5.1.0, de-ansi patch no longer applicable
  - upstream dropped libmp.so (bsdmp-like interface)
  - silenced bogus date in changelog


author: Karsten Hopp <karsten@redhat.com> 6.0.0-3
changelog:
  - set default for BMOD_1_TO_MOD_1_THRESHOLD on ppc64, patch by 
    Torbjorn Granlund:
    https://gmplib.org/repo/gmp/rev/4a6d258b467f


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1:6.0.0-13
changelog:
  - do not package sse2 variant, use --enable-fat instead (a bit dangerous, some low level routines will be skipped in `make check`)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.1.2-3
changelog:
  - Build process updated to correctly build .debug_info for i386
    and to correctly use hardening flags


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 1:6.1.2-8
changelog:
  - Missing fipschecks added into build process (bug #1553679)
  - --enable-fat option added to %configure (bug #1493218)


author: Jakub Martisko <jamartis@redhat.com> - 1:6.1.2-9
changelog:
  - Add support for intel CET and -fcf-protection
  - Add missing compiler/linker flags
  Related: #1630567


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 1.9.16-1
changelog:
  - Merge changes from Rex's 1.9.16-1 (Thu Apr 21):
  -   opensc support unconditional
  -   remove hard-coded .gz from %post/%postun
  -   add %check section
  -   add pth patch
  - Put back patch modified from 1.9.15-4 to make tests verbose
    and change signal.c to describe received signals better.


author: Ville Skyttä <ville.skytta at iki.fi> - 1.9.17-1
changelog:
  - 1.9.17, signal info patch applied upstream (#162264).
  - Patch to fix lvalue build error with gcc4 (upstream #485).
  - Patch scdaemon and pcsc-wrapper to load the versioned (non-devel)
    pcsc-lite lib by default.


author: Rex Dieter <rexdieter[AT]users.sf.net> 1.9.19-8
changelog:
  - include gpg-agent-(startup|shutdown) scripts (#136533)
  - BR: libksba-devel >= 1.9.12 
  - %check: be permissive about failures (for now)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.5-2
changelog:
  - gnupg-2.0.5
  - gpg-agent not restarted after kde session crash/killed (#196327)
  - BR: libassuan-devel > 1.0.2, libksba-devel > 1.0.2


author: Karsten Hopp <karsten@redhat.com> 2.0.10-1
changelog:
  - don't require pcsc-lite-libs and libusb on mainframe where
    we don't have those packages as there's no hardware for that


author: Tomas Mraz <tmraz@redhat.com> - 2.0.13-3
changelog:
  - drop s390 specific ifnarchs as all the previously missing dependencies
    are now there
  - split out gpgsm into a smime subpackage to reduce main package dependencies


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.13-4
changelog:
  - Explicitly BR libassuan-static in accordance with the Packaging
    Guidelines (libassuan-devel is still static-only).


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-3
changelog:
  - initialize small amount of secmem for list of algorithms in help (#598847)
    (necessary in the FIPS mode of libgcrypt)


author: Tomas Mraz <tmraz@redhat.com> - 2.0.19-1
changelog:
  - new upstream release
  - set environment in protect-tool (#548528)
  - do not reject OCSP signing certs without keyUsage (#720174)


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.25-1
changelog:
  - new upstream release fixing a minor regression introduced by the previous one
  - add --file-is-digest option needed for copr


author: Tomáš Mráz <tmraz@redhat.com> - 2.1.1-1
changelog:
  - new upstream release
  - this release now includes the dirmngr which is obsoleted as separate package


author: Tomáš Mráz <tmraz@redhat.com> - 2.1.19-1
changelog:
  - upgrade to 2.1.19
  - shorten time waiting on gpg-agent/dirmngr to start by exponential
    backoff (#1431749)


author: Jeff Johnson <jbj@redhat.com> 1.0.20-1
changelog:
  - update to 1.0.20.
  - add --with-included-opencdk --with-included-libtasn1
  - add --with-included-libcfg --with-included-lzo
  - add --disable-srp-authentication.
  - do "make check" after build.


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-2
changelog:
  - properly require install-info (patch by Ville Skyttä)
  - standard buildroot and use dist tag
  - add COPYING and README to doc


author: Tomas Mraz <tmraz@redhat.com> 2.4.1-1
changelog:
  - new upstream version
  - correct the license tag
  - explicit --with-included-opencdk not needed
  - use external lzo library, internal not included anymore


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-3
changelog:
  - drop superfluous rpath from binaries
  - do not call autoreconf during build
  - specify the license on utils subpackage


author: Tomas Mraz <tmraz@redhat.com> 2.12.7-2
changelog:
  - fix problem when using new libgcrypt
  - split libgnutlsxx to a subpackage (#455146)
  - drop libgnutls-openssl (#460310)


author: Tomas Mraz <tmraz@redhat.com> 2.12.22-2
changelog:
  - rebuilt with new libtasn1
  - make guile bindings optional - breaks i686 build and there is
    no dependent package


author: Tomas Mraz <tmraz@redhat.com> 3.1.7-1
changelog:
  - new upstream version, requires rebuild of dependencies
  - this release temporarily includes old compatibility .so


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.7-1
changelog:
  - new upstream release
  - added dependency to autogen-libopts-devel to use the system's
    libopts library
  - added dependency to trousers-devel to enable TPM support


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.7-2
changelog:
  - Use the correct root key for unbound /var/lib/unbound/root.key (#1012494)
  - Pull asm fixes from upstream (#973210)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.1-2
changelog:
  - gnutls_global_deinit() will not do anything if the previous 
    initialization has failed (#1091053)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.1-4
changelog:
  - Replaced /etc/crypto-profiles/apps with /etc/crypto-policies/back-ends.
  - Added support for "very weak" profile.


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.3-2
changelog:
  - Don't link against trousers but rather dlopen() it when available.
    That avoids a dependency on openssl by the main library.


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.4-1
changelog:
  - new upstream release
  - no longer requires trousers patch
  - fixes issue in gnutls_x509_privkey_import (#1250020)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.6-1
changelog:
  - New upstream release (#1273672)
  - Enhances p11tool to write CKA_ISSUER and CKA_SERIAL_NUMBER (#1272178)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.7-1
changelog:
  - New upstream release (#1284300)
  - Documentation updates (#1282864)
  - Adds interface to set unique IDs in certificates (#1281343)
  - Allow arbitrary key sizes with ARCFOUR (#1284401)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.13-1
changelog:
  - New upstream release (#1343258)
  - Addresses issue with setuid programs introduced in 3.4.12 (#1343342)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.1-2
changelog:
  - Prevent the loading of all PKCS#11 modules on certificate verification
    but only restrict to p11-kit trust module (#1507402)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.1-3
changelog:
  - Corrected regression from 3.6.1-2 which prevented the loading of
    arbitrary p11-kit modules (#1507402)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.3-4
changelog:
  - Fixed support for ECDSA public keys (backported from Fedora)
  - Ensure that we do not cause issues with version rollback detection
    and TLS1.3.


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.4-5
changelog:
  - Fix issue with GOST ciphers (#1644193)
  - Made gnutls-serv use the default priorities if none is specified (#1644243)


author: Anderson Sasaki <ansasaki@redhat.com> - 3.6.5-1
changelog:
  - Update to upstream 3.6.5 release
  - Fixes CVE-2018-16868 (#1655395)
  - Removed ldconfig scriptlet
  - Added explicit Requires for nettle >= 3.4.1


author: Anderson Sasaki <ansasaki@redhat.com> - 3.6.5-3
changelog:
  - Fixed CVE-2019-3829 (#1693285)
  - Fixed CVE-2019-3836 (#1693288)
  - Added explicit BuildRequires for nettle-devel >= 3.4.1


author: Daiki Ueno <dueno@redhat.com> - 3.6.8-6
changelog:
  - Treat login error more gracefully when enumerating PKCS#11 tokens (#1705478)
  - Use deterministic ECDSA/DSA in FIPS selftests (#1716560)
  - Add gnutls_aead_cipher_{encrypt,decrypt}v2 functions (#1684461)


author: Daiki Ueno <dueno@redhat.com> - 3.6.8-9
changelog:
  - Fix CFB8 decryption when repeatedly called (#1757848)
  - Fix gnutls_aead_cipher_{en,de}cryptv2 with input not multiple of block size (#1757856)


author: Daiki Ueno <dueno@redhat.com> - 3.6.14-7
changelog:
  - Increase DH key bits to >= 2048 in self-tests (#1879506)
  - Implement self-tests for KDF and CMAC (#1890870)
  - Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)


author: Daiki Ueno <dueno@redhat.com> - 3.6.16-1
changelog:
  - Update to upstream 3.6.16 release (#1956783)
  - Fix potential use-after-free in key_share handling (#1927597)
  - Fix potential use-after-free in pre_shared_key handling (#1927593)
  - Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
  - Fix cert expiration issue in tests (#1908110)


author: Colin Walters <walters@verbum.org> - 0.6.9-3
changelog:
  - Move python library back into /usr/lib/gobject-introspection.  I put
    it there upstream for a reason, namely that apps need to avoid
    polluting the global Python site-packages with bits of their internals.
    It's not a public API.
    
    Possibly resolves bug #569885


author: Colin Walters <walters@verbum.org> - 0.9.3-6
changelog:
  - Strip out test libraries; they're gone in upstream git, and
    create a dependency on cairo (which requires libX11, which makes
    server operating system builders freak out).


author: Colin Walters <walters@verbum.org> - 0.10.5-1
changelog:
  - New upstream release, fixes cairo.gir
    Necessary to avoid gnome-shell having a cairo-devel dependency.
  - Also add cairo-gobject-devel dependency, since we really want
    the cairo typelib to link to GObject, since anyone using
    introspection has it anyways.


author: Kalev Lember <kalevlember@gmail.com> - 1.32.1-2
changelog:
  - Move libffi to pkgconfig Requires.private, in order to
    reduce the impact when libffi soname bump lands in rawhide.


author: Colin Walters <walters@redhat.com> - 1.47.1-2
changelog:
  - Backport revert of upstream patch around setuid apps
    Resolves: #1285991
  - Forcibly reautoconf to bypass timestamp issues


author: Kalev Lember <klember@redhat.com> - 1.55.2-1
changelog:
  - Update to 1.55.2
  - Drop /usr/bin/env shebang patch as the brp scripts now handle this correctly
  - Remove ldconfig scriptlets


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.5e-2
changelog:
  - Fix up the --color option to behave like the one from ls (--color=auto)
    Sooner or later, some people will alias grep="grep --color" and wonder why
    their scripts break.
  - Update docs accordingly
  - Get rid of the annoying blinking in grep --color


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.4.2-7
changelog:
  - Fix up the i18n patch - it used to break "grep '[]a]'" (#49003)
  - revert to 2.4.2 (latest official release) for now


author: Tim Waugh <twaugh@redhat.com> 2.5.1-24
changelog:
  - Work around glibc bug #112869 (segfault in re_compile_pattern).
  - Avoid patching Makefile.am, to avoid automake/autoconf weirdness.


author: Tim Waugh <twaugh@redhat.com> 2.5.1-27
changelog:
  - Fix dfa multibyte character class matching when -i is used (bug #123363).
  - Use bracket patch before i18n patch to make it clear that the bug exists
    upstream.


author: Tim Waugh <twaugh@redhat.com> 2.5.1-31
changelog:
  - Make 'grep -F' avoid UTF-8 processing if the pattern contains no
    multibyte characters (bug #133932).


author: Tim Waugh <twaugh@redhat.com> 2.5.1-32
changelog:
  - Remove mb-caching hack.
  - Better multibyte handling in EGexecute() and Fexecute().
  - Don't need regex.c changes in grep-2.5-i18n.patch.


author: Tim Waugh <twaugh@redhat.com> 2.5.1-35
changelog:
  - Fixes to egf-speedup patch: now it does not change any functionality,
    as intended.
  - GREP_NO_DFA now turns off the DFA engine, for performance testing.


author: Tim Waugh <twaugh@redhat.com> 2.5.1-36
changelog:
  - Automatically disable DFA when processing multibyte input.  GREP_USE_DFA
    environment variable overrides.


author: Tim Waugh <twaugh@redhat.com> 2.5.1-38
changelog:
  - Applied patch from Karsten Hopp to fix background colour problems with
    --color output (bug #138913).


author: Tim Waugh <twaugh@redhat.com> 2.5.1-42
changelog:
  - Further UTF-8 processing avoided since a '\n' byte is always an
    end-of-line character in that encoding.


author: Tim Waugh <twaugh@redhat.com> 2.5.1-45
changelog:
  - More tests (Jakub Jelinek).
  - Jakub Jelinek's much improved -Fi algorithm.
  - Removed bogus part of grep-2.5.1-fgrep patch.


author: Tim Waugh <twaugh@redhat.com> 2.5.1-47
changelog:
  - Run 'make check'.
  - Fixed -w handling for EGexecute.  Now 'make check' passes.
  - Cache MB_CUR_MAX value in egf-speedup patch.
  - Fixed variable shadowing in egf-speedup patch.
  - Removed redundant (and incorrect) code in prline.


author: Stepan Kasal <skasal@redhat.com> - 2.5.1-58
changelog:
  - Adhere to packaging guidelines.
  - Resolves: #225857
  - Use CPPFLAGS= argument to configure to add an -I option.
  - Do not set LDFLAGS=-s for "make install".


author: Lubomir Rintel <lkundrak@v3.sk> 2.5.1a-61
changelog:
  - Fix pcre-mode (-P) line wrapping (bug #324781)
  - Match the version with upstream
  - Recode AUTHORS to utf8


author: Lubomir Rintel <lkundrak@v3.sk> 2.5.3-1
changelog:
  - Update to latest upstream version
  - Drop upstreamed patches
  - Add a couple of regression tests
  - Temporarily disable tests
  - Minor cleanup


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.4-1
changelog:
  - New version: grep-2.5.4
  - Fixed typos in description
  - Updated utf-8 patch
  - Added dfa-optional patch (#538423)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6-1
changelog:
  - New version: grep-2.6
  - Added sigsegv patch (after release patch from upstream)
  - Dropped obsoleted patches: fedora-tests, pcrewrap, case, egf-speedup,
    bz460641, utf8, dfa-optional, w


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-2
changelog:
  - Added dfa-optimize-period patch (speedup for . patterns in UTF-8)
  - Added glibc-matcher-fallback patch (speedup for [a-z] patterns in UTF-8)
  - Added mmap-option-fix patch
  - Added dfa-convert-to-wide-char patch (speedup for -m and remove quadratic
    complexity when going to glibc)
  - Added dfa-speedup-digit-xdigit patch (speedup for [[:digit:]] [:xdigit:]])


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-3
changelog:
  - Added auto-color profile.d scripts (thanks to Ville Skyttä #600832)
  - Removed description macro from changelog


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-4
changelog:
  - Colors can be globally disabled via /etc/GREP_COLORS (#602867)
  - Fixed indentation in spec
  - Fixed defattr in spec


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7-1
changelog:
  - New version: grep-2.7
  - Removed patches (already in upstream): dfa-optimize-period,
    glibc-matcher-fallback, mmap-option-fix, dfa-convert-to-wide-char,
    dfa-speedup-digit-xdigit


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.8-4
changelog:
  - dfa: don't overrun a malloc'd buffer for certain regexps
    (patch dfa-buffer-overrun-fix)
    Resolves: rhbz#713328


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.13-1
changelog:
  - New version
    Resolves: rhbz#837749
  - Fixed -i option
    Resolves: rhbz#828844
  - Added virtual provide and FPC ticket link for bundled gnulib
    Resolves: rhbz#821759


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.14-4
changelog:
  - Added group-separator, no-group-separator options decription
  - Aligned output of built-in help
  - Defuzzified gnulib-tests-rm-f patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.15-1
changelog:
  - New version
    Resolves: rhbz#1023698
  - Fixed bogus date in the changelog
  - Dropped gnulib-tests-rm-f patch, rejected upstream and not
    needed for Fedora build system
  - Dropped man-fix-R patch, upstreamed
  - De-fuzzified other patches


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-6
changelog:
  - Fixed invalid UTF-8 byte sequence error in PCRE mode
    (by pcre-invalid-utf8-fix patch)
    Resolves: rhbz#1161832


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-7
changelog:
  - Backported more PCRE fixes (by pcre-backported-fixes patch)
  - Dropped pcre-invalid-utf8-fix patch, handled by pcre-backported-fixes patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.21-1
changelog:
  - New version
    Resolves: rhbz#1167657
  - De-fuzzified patches
  - Dropped pcre-backported-fixes patch (not needed)


author: Peter Robinson <pbrobinson@fedoraproject.org> 2.21-7
changelog:
  - Minor spec cleanups and modifications
  - Drop Changelog, details in NEWS
  - Add gnulib patch to fix FTBFS with perl 5.22


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22-1
changelog:
  - New version
    Resolves: rhbz#1277113
  - Dropped buf-overrun-fix, recurse-behaviour-change-doc, gnulib
    patches (all upstreamed)
  - Minor spec cleanup to be consistent with whitespaces


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22-2
changelog:
  - Disabled performance related tests
    (by disable-performance-related-tests patch), patch backported from upstream
  - Dropped disable-long-pattern-perf-test patch (not needed, covered by
    previous patch)
    Resolves: rhbz#1278428


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22-4
changelog:
  - Improved encoding errors handling (by better-encoding-errors-handling patch)
    Resolves: rhbz#1219141
  - kwset-abuse test no longer needs to be explicitly set executable


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22-5
changelog:
  - Used latest upstream patch for bug 1269014 to fix regression,
    fixed order of patches
    Resolves: rhbz#1269014


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22-6
changelog:
  - Fixed pcre-count test on secondary architectures
    (byt test-pcre-count-fix patch)
    Resolves: rhbz#1296842


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.23-1
changelog:
  - New version
    Resolves: rhbz#1305035
  - Dropped disable-performance-related-tests, better-encoding-errors-handling,
    Pc-consistent-results, and test-pcre-count-fix patches (all upstreamed)
  - De-fuzzified man-fx-gs, and help-align patches


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - install tmac.mse (FWIW tmac.se looks broken) to fix dangling symlink (#10757).
  - add README.A4, how to set up for A4 paper (#8276).
  - add other documents to package.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 1.18.1
  - apply groff_1.18-7 from debian
  - remove some not-packaged files
  - rm old printfilters completely


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - remove automatic conversion for ru_* and cz_*
  - add 8bit patch
  - update to 1.18.1-4 debian patch
  - disable Patch8: groff-1.18.1-multichar.patch for now
  - add ugly patch within the iconv patch to partly fix display of russian
    man-pages with "-Tnippon"


author: Thomas Woerner <twoerner@redhat.com> 1.18.1-27
changelog:
  - going back to 1.18.1-4 from debian (the newer versions did not work properly)
  - fixed nroff.sh for ru_RU.(!UTF-8)


author: Thomas Woerner <twoerner@redhat.com> 1.18.1-28.2
changelog:
  - new devutf8 font description
  - use -Tutf8 for ru_*.UTF-8 in nroff.sh
  - fixes #88618 (ru_RU man pages in cambridge are using UTF-8, now)


author: Thomas Woerner <twoerner@redhat.com> 1.18.1-34
changelog:
  - new debian groff patch: groff_1.18.1-15.diff
  - new fix for debian patch: groff-1.18.1-fix15.patch
  - fixed width in devutf8 font M: groff-1.18.1-devutf8.patch
  - removed iconv patch


author: Thomas Woerner <twoerner@redhat.com> 1.18.1.1-2
changelog:
  - fixed DoCharacter calls in xditview (#110812)
  - fixed fclose called once too often (#132690): thanks to Ulrich Drepper for
    the bug hunting


author: Jindrich Novy <jnovy@redhat.com> - 1.18.1.1-6
changelog:
  - add BuildRequires imake and update dependencies for modular X
  - spec cleanup
  - fix compilation with gcc-4.1.0


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.18.1.1-8
changelog:
  - fix segfault in grotty on 64-bit big endian machines (#176904)
  - fix assertion failure on abort message (#141912)
  - attempt to fix a space problem with several european languages (#137728)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.18.1.1-9
changelog:
  - remove gxditview from groff package (#179684)
  - remove obsolete "--enable-japanese" configure option


author: Jesse Keating <jkeating@redhat.com> - 1.18.1.1-9.2
changelog:
  - bump again for double-long bug on ppc(64)
  - bump again for double-long bug on ppc(64)
  - bump again for double-long bug on ppc(64)


author: Stepan Kasal <skasal@redhat.com> - 1.18.1.14-15
changelog:
  - Replace groff-1.18-nohtml.patch by a code in spec file
  - fix groff-1.18-gzip.patch to apply cleanly
  - simplify the code for symlinking in %install


author: Jan Vcelak <jvcelak@redhat.com> 1.20.1-3
changelog:
  - experimental support of Japanese (charclass and wcwidth patches)
    thanks to Daiki Ueno (dueno@redhat.com)


author: Jan Vcelak <jvcelak@redhat.com> 1.21-3
changelog:
  - fix #678572: groffer libdir is incorrect
  - fix #709474: unowned groff doc dir
  - fix #712904: Japanese bold/underline text not displayed correctly (Daiki Ueno <dueno@redhat.com>)


author: Jan Vcelak <jvcelak@redhat.com> 1.21-4
changelog:
  - new subpackage: groff-base (minimal for manual page rendering)
  - move shared data used by gxditview to groff-x11 subpackage
  - move groff reference manual to groff-doc subpackage
  - make groff-doc an architecture independent package
  - move local configuration from /usr/share/groff/site-* to /etc/groff/*


author: Jan Vcelak <jvcelak@redhat.com> 1.21-7
changelog:
  - update: move local configuration from /usr/share/groff/site-* to /etc/groff/*
    (change the paths in the app instead of symlinking to avoid RPM issues)
  - fix groff package: add install-info to %post and %preun


author: Jan Vcelak <jvcelak@redhat.com> 1.21-9
changelog:
  - older security fixes (#709415, #720060):
    + CVE-2009-5044: insecure temporary file handling in pdfroff
    + CVE-2009-5080: improper handling of failed attempts to create temporary directories in eqn2graph/pic2graph/grap2graph
    + CVE-2009-5081: roff2.pl and groffer.pl use easy-to-guess temporary file names


author: Jan Vcelak <jvcelak@redhat.com> 1.22.1-1
changelog:
  - new upstream release (#890973)
    + various fixes in manual pages
    + various fixes and improvements in macros
    + new gropdf driver for generating PDF files
  - fix: backslash-period escape does not work (#682857)
  - fix: groff ftbfs - patch does not apply (#885225)


author: Peter Jones <pjones@redhat.com> - 1.99-1
changelog:
  - Update to grub-1.99 final.
  - Fix crt1.o require on x86-64 (fix from Mads Kiilerich)
  - Various CFLAGS fixes (from Mads Kiilerich)
    - -fexceptions and -m64
  - Temporarily ignore translations (from Mads Kiilerich)


author: Peter Jones <pjones@redhat.com> - 1.99-2
changelog:
  - Require os-prober (#678456) (patch from Elad Alfassa)
  - Require which (#734959) (patch from Elad Alfassa)


author: Peter Jones <pjones@redhat.com> - 1.99-4
changelog:
  - Don't do sysadminny things in %preun or %post ever. (#735259)
  - Actually include the changelog in this build (sorry about -3)


author: Peter Jones <pjones@redhat.com> - 1.99-6
changelog:
  - Use mv not cp to try to avoid moving disk blocks around for -5 fix
    Related: rhbz#735259
  - handle initramfs on xen better (patch from Marko Ristola)
    Resolves: rhbz#728775


author: Adam Williamson <awilliam@redhat.com> - 1.99-10
changelog:
  - /etc/default/grub is explicitly intended for user customization, so
    mark it as config(noreplace)


author: Peter Jones <pjones@redhat.com> - 1.99-12
changelog:
  - Lots of .spec fixes from Mads Kiilerich:
    Remove comment about update-grub - it isn't run in any scriptlets
    patch info pages so they can be installed and removed correctly when renamed
    fix references to grub/grub2 renames in info pages (#743964)
    update README.Fedora (#734090)
    fix comments for the hack for upgrading from grub2 < 1.99-4
    fix sed syntax error preventing use of $RPM_OPT_FLAGS (#704820)
    make /etc/grub2*.cfg %config(noreplace)
    make grub.cfg %ghost - an empty file is of no use anyway
    create /etc/default/grub more like anaconda would create it (#678453)
    don't create rescue entries by default - grubby will not maintain them anyway
    set GRUB_SAVEDEFAULT=true so saved defaults works (rbhz#732058)
    grub2-efi should have its own bash completion
    don't set gfxpayload in efi mode - backport upstream r3402
  - Handle dmraid better. Resolves: rhbz#742226


author: Peter Jones <pjones@redhat.com> - 1.99-17
changelog:
  - Update for newer autotools and gcc 4.7.0
    Related: rhbz#782144
  - Add /etc/sysconfig/grub link to /etc/default/grub
    Resolves: rhbz#800152
  - ExcludeArch s390*, which is not supported by this package.
    Resolves: rhbz#758333


author: Peter Jones <pjones@redhat.com> - 2.0-0.20
changelog:
  - Fix ppc64 vs ppc exclude according to what dwa tells me they need
  - Fix version number to better match policy.


author: Peter Jones <pjones@redhat.com> - 2.0-0.26.beta5
changelog:
  - Update to beta5.
  - Update how efi building works (kiilerix)
  - Fix theme support to bring in fonts correctly (kiilerix, pjones)


author: Peter Jones <pjones@redhat.com> - 2.0-0.27.beta5
changelog:
  - Fix license of theme (mizmo)
    Resolves: rhbz#820713
  - Fix some PPC bootloader detection IBM problem
    Resolves: rhbz#820722


author: Peter Jones <pjones@redhat.com> - 2.0-0.28.beta5
changelog:
  - Name grub.efi something that's arch-appropriate (kiilerix, pjones)
  - use EFI/$SOMETHING_DISTRO_BASED/ not always EFI/redhat/grub2-efi/ .
  - move common stuff to -tools (kiilerix)
  - spec file cleanups (kiilerix)


author: Matthew Garrett <mjg@redhat.com> - 2.00-2
changelog:
  - Set a prefix for the image - needed for installer work
  - Provide the font in the EFI directory for the same reason


author: Peter Jones <pjones@redhat.com> - 2.00-3
changelog:
  - Add some more code to support Secure Boot, and temporarily disable
    some other bits that don't work well enough yet.
    Resolves: rhbz#836695


author: Peter Jones <pjones@redhat.com> - 2.00-4
changelog:
  - Correct grub-mkimage invocation to use efidir RPM macro (jwb)
  - Sign with test keys on UEFI systems.
  - PPC - Handle device paths with commas correctly.
    Related: rhbz#828740


author: Peter Jones <pjones@redhat.com>
changelog:
  - Split module lists for UEFI boot vs UEFI cd images.
  - Add raid modules for UEFI image (related: #750794)
  - Include a prelink whitelist for binaries that need execstack (#839813)
  - Include fix efi memory map fix from upstream (#839363)


author: Peter Jones <pjones@redhat.com> - 2.00-5
changelog:
  - Work around AHCI firmware bug in efidisk driver.
  - Move to newer pesign macros
  - Don't allow insmod if we're in secure-boot mode.


author: Peter Jones <pjones@redhat.com> - 2.00-8
changelog:
  - Don't error on insmod on UEFI/SB, but also don't do any insmodding.
  - Increase device path size for ieee1275
    Resolves: rhbz#857936
  - Make network booting work on ieee1275 machines.
    Resolves: rhbz#857936


author: Peter Jones <pjones@redhat.com> - 2.00-10
changelog:
  - Various PPC fixes.
  - Fix crash fetching from http (gustavold, #860834)
  - Issue separate dns queries for ipv4 and ipv6 (gustavold, #860829)
  - Support IBM CAS reboot (pfsmorigo, #859223)
  - Include all modules in the core image on ppc (pfsmorigo, #866559)


author: Peter Jones <pjones@redhat.com> - 2.00-13
changelog:
  - Add vlan tag support (pfsmorigo, #871563)
  - Follow symlinks during PReP installation in grub2-install (pfsmorigo, #874234)
  - Improve search paths for config files on network boot (pfsmorigo, #873406)


author: Peter Jones <pjones@redhat.com> - 2.00-16
changelog:
  - Allow the user to disable submenu generation
  - (partially) support BLS-style configuration stanzas.


author: Peter Jones <pjones@redhat.com> - 2.00-17
changelog:
  - Fix booting from drives with 4k sectors on UEFI.
  - Move bash completion to new location (#922997)
  - Include lvm support for /boot (#906203)


author: Matthias Clasen <mclasen@redhat.com> - 2.00-18
changelog:
  - Move the starfield theme to a subpackage (#962004)
  - Don't allow SSE or MMX on UEFI builds (#949761)


author: Peter Jones <pjones@redhat.com> - 2.00-19
changelog:
  - Rebase to upstream snapshot.
  - Fix PPC build error (#967862)
  - Fix crash on net_bootp command (#960624)
  - Reset colors on ppc when appropriate (#908519)
  - Left align "Loading..." messages (#908492)
  - Fix probing of SAS disks on PPC (#953954)
  - Add support for UEFI OSes returned by os-prober
  - Disable "video" mode on PPC for now (#973205)
  - Make grub fit better into the boot sequence, visually (#966719)


author: Peter Jones <pjones@redhat.com> - 2.02-0.9
changelog:
  - Clean up the build a bit to make it faster
  - Make grubenv work right on UEFI machines
    Related: rhbz#1119943
  - Sort debug and rescue kernels later than normal ones
    Related: rhbz#1065360
  - Allow "fallback" to include entries by title as well as number.
    Related: rhbz#1026084
  - Fix a segfault on aarch64.
  - Load arm with SB enabled if available.
  - Add some serial port options to GRUB_MODULES.


author: Peter Jones <pjones@redhat.com> - 2.02-0.10
changelog:
  - Try to emit linux16/initrd16 and linuxefi/initrdefi when appropriate
    in 30_os-prober.
    Resolves: rhbz#1108296
  - If $fw_path doesn't work to find the config file, try $prefix as well
    Resolves: rhbz#1148652


author: Peter Jones <pjones@redhat.com> - 2.02-0.12
changelog:
  - Make backtrace and usb conditional on !arm
  - Make sure gcdaa64.efi is packaged.
    Resolves: rhbz#1163481


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 2.02-0.14
changelog:
  - Move grub2.info/grub2-dev.info install-info scriptlets into *-tools package.
  - Use sub-shell in %__debug_install_post (RHBZ#1168732).
  - Cleanup grub2-starfield-theme packaging.


author: Peter Jones <pjones@redhat.com> - 2.02-0.17
changelog:
  - Don't build hardened (fixes FTBFS) (pbrobinson)
  - Reconcile with the current upstream
  - Fixes for gcc 5


author: Peter Jones <pjones@redhat.com> - 2.02-0.21
changelog:
  - Back out one of the debuginfo generation patches; it doesn't work right on
    aarch64 yet.
    Resolves: rhbz#1250197


author: Peter Jones <pjones@redhat.com> - 2.02-0.25
changelog:
  - Fix security issue when reading username and password
    Related: CVE-2015-8370
  - Do a better job of handling GRUB2_PASSWORD
    Related: rhbz#1284370


author: Peter Jones <pjones@redhat.com> - 2.02-0.34
changelog:
  - Fix power6 makefile bits for newer autoconf defaults.
  - efi/chainloader: fix wrong sanity check in relocate_coff() (Laszlo Ersek)
    Resolves: rhbz#1347291


author: Peter Jones <pjones@redhat.com> - 2.02-11
changelog:
  - Put grub2-mkimage in -tools, not -tools-extra.
  - Fix i686 building
  - Fix ppc HFS+ usage due to /boot/efi's presence.


author: Peter Jones <pjones@redhat.com> - 2.02-12
changelog:
  - Fix arm kernel command line allocation
    Resolves: rhbz#1484609
  - Get rid of the temporary extra efi packages hack.


author: Peter Jones <pjones@redhat.com> - 2.02-13
changelog:
  - Add some unconditional Provides:
    grub2-efi on grub2-efi-${arch}
    grub2-efi-cdboot on grub2-efi-${arch}-cdboot
    grub2 on all grub2-${arch} pacakges
  - Something is somehow adding /usr/lib/.build-id/... to all the -tools
    subpackages, so exclude all that.


author: Peter Jones <pjones@redhat.com> - 2.02-14
changelog:
  - Revert the /usr/lib/.build-id/ change:
    https://fedoraproject.org/wiki/Changes/ParallelInstallableDebuginfo
    says (without any particularly convincing reasoning):
      The main build-id file should not be in the debuginfo file, but in the
      main package (this was always a problem since the package and debuginfo
      package installed might not match). If we want to make usr/lib/debug/ a
      network resource then we will need to move the symlink to another
      location (maybe /usr/lib/.build-id).
    So do it that way.  Of course it doesn't matter, because exclude gets
    ignored due to implementation details.


author: Peter Jones <pjones@redhat.com> - 2.02-20
changelog:
  - Update to newer upstream for F28
  - Pull in patches for Apollo Lake hardware
    Resolves: rhbz#1519311


author: Peter Jones <pjones@redhat.com> - 2.02-21
changelog:
  - Fix grub2-efi-modules provides/obsoletes generation
    Resolves: rhbz#1506704
  - *Also* build grub-efi-ia32{,-*,!-modules} packages for i686 builds
    Resolves: rhbz#1502312
  - Make everything under /boot/efi be mode 0700, since that's what FAT will
    show anyway.


author: Peter Jones <pjones@redhat.com> - 2.02-23
changelog:
  - Only nerf annobin, not -fstack-crash-protection.
  - Fix a conflict on /boot/efi directory permissions between -cdboot and the
    normal bootloader.


author: Peter Jones <pjones@redhat.com> - 2.02-24
changelog:
  - Fix a merge error from 2.02-21 that affected kernel loading on Aarch64.
    Related: rhbz#1519311
    Related: rhbz#1506704
    Related: rhbz#1502312


author: Peter Jones <pjones@redhat.com> - 2.02-26
changelog:
  - Try to fix things for new compiler madness.
    I really don't know why gcc decided __attribute__((packed)) on a "typedef
    struct" should imply __attribute__((align (1))) and that it should have a
    warning that it does so.  The obvious behavior would be to keep the alignment
    of the first element unless it's used in another object or type that /also/
    hask the packed attribute.  Why should it change the default alignment at
    all?
  - Merge in the BLS patches Javier and I wrote.
  - Attempt to fix pmtimer initialization failures to not be super duper slow.


author: Peter Jones <pjones@redhat.com> - 2.02-33
changelog:
  - Work around some issues with older automake found in CentOS.
  - Make multiple initramfs images work in BLS.


author: Peter Jones <pjones@redhat.com> - 2.02-34
changelog:
  - Put the os-prober dep back in - we need to change test plans and criteria
    before it can go.
    Resolves: rhbz#1569411


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-36
changelog:
  - Use version field to sort BLS entries if id field isn't defined
  - Add version field to BLS fragments generated by 20-grub.install


author: Peter Jones <pjones@redhat.com> - 2.02-37
changelog:
  - Fixups to work with gcc 8
  - Experimental https boot support on UEFI
  - XFS fixes for sparse inode support
    Resolves: rhbz#1575797


author: Hans de Goede <hdegoede@redhat.com>
changelog:
  - Make the user session automatically set the boot_success grubenv flag
  - Make offline-updates increment the boot_indeterminate grubenv variable


author: Peter Jones <pjones@redhat.com> - 2.02-42
changelog:
  - Fix some minor BLS issues
  - Rework the FDT module linking to make aarch64 build and boot right
    Resolves: rhbz#1601835


author: Peter Jones <pjones@redhat.com> - 2.02-47
changelog:
  - BLS fixes from the F29 tree
    - Use /boot/loader/entries as BLS dir also on EFI systems
    - Make 20-grub.install to exit if there is no machine ID set
    - More fixes for BLS
    Resolves: rhbz#1620954


author: Peter Jones <pjones@redhat.com> - 2.02-48
changelog:
  - Go back to forcing all allocations on x86_64 to be 32-bit, as many UEFI
    implementations seem to have drivers with DMA issues for addresses
    above 4GB.
    Resolves: rhbz#1628346


author: pjones <pjones@redhat.com> - 1:2.02-50
changelog:
  - Disable TPM (again) on BIOS; it really does not work reliably.
    Resolves: rhbz#1579835
  - Make blscfg module loadable on other grub2 builds
    Resolves: rhbz#1633646
  - Include blscfg module on ppc builds
    Related: rhbz#1633646
  - Fix rpmdiff complaints about execstack
    Related: rhbz#1633646


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-51
changelog:
  - add 10_linux_bls grub.d snippet to generate menu entries from BLS files
    Resolves: rhbz#1636013
  - Fix syntax issues in 01_fallback_counting.in
    Resolves: rhbz#1615954


author: Peter Jones <pjones@redhat.com> - 2.02-54
changelog:
  - kernel-install: Remove existing initramfs if it's older than the kernel
    Resolves: rhbz#1638405
  - Update the saved entry correctly after a kernel install
    Resolves: rhbz#1638117


author: Peter Jones <pjones@redhat.com> - 2.02-56
changelog:
  - Rebuild for signing
    Resolves: rhbz#1625565
  - blscfg: Make 10_linux_bls sort the same way as well
    Related: rhbz#1638103


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-60
changelog:
  - Remove quotes when reading ID value from /etc/os-release
    Related: rhbz#1650706
  - blscfg: expand grub_users before passing to grub_normal_add_menu_entry()
    Resolves: rhbz#1650706


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-61
changelog:
  - Drop buggy downstream patch "efinet: retransmit if our device is busy"
    Resolves: rhbz#1649048
  - Make the menu entry users option argument to be optional
    Related: rhbz#1652434
  - 10_linux_bls: add missing menu entries options
    Resolves: rhbz#1652434


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-62
changelog:
  - Drop "Be more aggro about actually using the *configured* network device."
    Resolves: rhbz#1654388
  - Fix menu entry selection based on title
    Resolves: rhbz#1654936


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-63
changelog:
  - BLS files should only be copied by grub-switch-to-blscfg if BLS isn't set
    Related: rhbz#1638117
  - Fix get_entry_number() wrongly dereferencing the tail pointer
    Resolves: rhbz#1654936


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-64
changelog:
  - Make grub2-mkconfig to honour GRUB_CMDLINE_LINUX in /etc/default/grub
    Resolves: rhbz#1637875
  - docs: Stop using polkit / pkexec for grub-boot-success.timer / service
    Resolves: rhbz#1655687


author: Peter Jones <pjones@redhat.com> - 2.02-65
changelog:
  - Don't build the grub2-efi-ia32-* packages on i686; it causes multilib
    errors and we don't ship the result anyway.
    Related: rhbz#1637875


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-68
changelog:
  - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
    Resolves: rhbz#1680572
  - Try to set -fPIE and friends on libgnu.a (pjones)
  - blscfg: fallback to default_kernelopts if BLS option field isn't set
    Related: rhbz#1680572
  - Remove bogus load_env after blscfg command in 10_linux


author: Peter Jones <pjones@redhat.com> - 2.02-70
changelog:
  - Fix (once again) how CFLAGS and LDFLAGS propogate the settings for hardened
    builds, because rpmdiff doesn't like the current way failing.
    Related: rhbz#1653961


author: Peter Jones <pjones@redhat.com> - 2.02-71
changelog:
  - Fix (a fourth time, due to a typo) how LDFLAGS works on non-efi platforms.
    Related: rhbz#1653961


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-80
changelog:
  - Fix PRIxGRUB_EFI_STATUS definition
    Related: rhbz#1761811
  - TPM: Print messages if measuraments fail as debug instead of error
    Resolves: rhbz#1761811
  - unix/platform: Initialize variable to fix grub-install on UEFI system
    Resolves: rhbz#1768689
  - blscfg: add a space char when appending fields for variable expansion
    Resolves: rhbz#1669252


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-82
changelog:
  - Drop "Disable multiboot, multiboot2, and linux16 modules on EFI builds"
    Resolves: rhbz#1779480
  - efi/http: Export {fw,http}_path variables to make them global
    Resolves: rhbz#1811561
  - efi/http: Enclose literal IPv6 addresses in square brackets
  - efi/net: Allow to specify a port number in addresses
  - efi/ip4_config: Improve check to detect literal IPv6 addresses
  - efi/net: Print a debug message if parsing the address fails
    Resolves: rhbz#1811560
  - Set image base address before jumping to the PE/COFF entry point
    Resolves: rhbz#1819624


author: Peter Jones <pjones@redhat.com> - 2.02-85
changelog:
  - Fix several CVEs
    Resolves: CVE-2020-10713
    Resolves: CVE-2020-14308
    Resolves: CVE-2020-14309
    Resolves: CVE-2020-14310
    Resolves: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 2.02-86
changelog:
  - Couple more late fixes.
    Resolves: CVE-2020-10713
    Resolves: CVE-2020-14308
    Resolves: CVE-2020-14309
    Resolves: CVE-2020-14310
    Resolves: CVE-2020-14311


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-91
changelog:
  - Fix tps-rpmtest failing due /boot/grub2/grubenv attributes mismatch
    Resolves: rhbz#1813959
  - Include in EFI build the modules needed for LUKS support
    Resolves: rhbz#1873725
  - Fix keyboards that report IBM PC AT scan codes
    Resolves: rhbz#1897587


author: Jan Hlavac <jhlavac@redhat.com> - 2.02-92
changelog:
  - grub2-install: disable support for EFI platforms
    Resolves: rhbz#1737444
  - Include a few more modules to EFI build needed for LUKS support (javierm)
    Related: rhbz#1873725


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-93
changelog:
  - add keylayouts and at_keyboard modules to UEFI Grub2 (rmetrich)
    Related: rhbz#1897587
  - at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
    Resolves: rhbz#1897587
  - add GRUB enhanced debugging features (rmetrich)
    Resolves: rhbz#1776249
  - ieee1275: Avoiding many unecessary open/close (diegodo)
    Resolves: rhbz#1862632
  - ieee1275: device mapper and fibre channel discovery support (diegodo)
    Resolves: rhbz#1873724


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-96
changelog:
  - Fix "Add 'at_keyboard_fallback_set' var to force the set manually"
    Related: rhbz#1897587
  - Fix a boot failure due patch "ieee1275: claim up to 256MB memory"
    Resolves: rhbz#1929111


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-98
changelog:
  - Fix another batch of CVEs
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-99
changelog:
  - Fix bug of grub2-install not checking for the SBAT option
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Jeremy Katz <katzj@redhat.com> - 7.0-1
changelog:
  - BR libblkid-devel now instead of e2fsprogs-devel
  - Add bits to switch to using dracut for new-kernel-pkg


author: Hans de Goede <hdegoede@redhat.com> - 7.0.7-1
changelog:
  - Remove writing rd_plytheme=$theme to kernel args in dracut mode (hansg)
  - Add a couple of test cases for extra initrds (rstrode)
  - Allow tmplLine to be NULL in getInitrdVal (rstrode)


author: Peter Jones <pjones@redhat.com> - 7.0.12-1
changelog:
  - compare rootdev using uuid instead of stat, for better btrfs support (josef)
    Resolves: rhbz#530108


author: Peter Jones <pjones@redhat.com> - 7.0.13-1
changelog:
  - Strip boot partition prefix from initrd path if present during --update.
    Related: rhbz#557922
  - add host only support for local kernel compiles (airlied)


author: Peter Jones <pjones@redhat.com> - 8.3-1
changelog:
  - Fix new-kernel-pkg invocation of grubby for grub (patch from Mads Kiilerich)
    Resolves: rhbz#725185


author: Adam Williamson <awilliam@redhat.com> - 8.4-1
changelog:
  - Update to 8.4:
  	+ fix Loading... line for updated kernels
  	+ Add new '--default-title' feature
  	+ Add new '--default-index' feature
  	+ add feature for testing the output of a grubby command
  	+ Fix detection when comparing stage1 to MBR
  	+ do not link against glib-2.0
  	+ Don't crash if grubConfig not found
  	+ Adding extlinux support for new-kernel-pkg
  	+ Look for Debian / Ubuntu grub config files (#703260)
  	+ Make grubby recognize Ubuntu's spin of Grub2 (#703260)


author: Peter Jones <pjones@redhat.com> - 8.9-1
changelog:
  - Refactor grub2 title extraction, making it a function (Cleber Rosa)
  - Include prefix when printing kernel information (Cleber Rosa)
  - Implement support for "default saved" for grub2 (Cleber Rosa)
  - Try to display title when printing information with '--info' (Cleber Rosa)
  - new-kernel-pkg fails to find U-Boot. (D. Marlin)
  - Add support to new-kernel-pkg to recognize ARCH == armv5tel needed for Kir
    (D.Marlin)
  - Include a / when one is missing in paths (#769641)
  - Fix hard coded paths so kernel's "make install" will DTRT.
  - Fix endswith() to correctly test its input for validity.


author: Peter Jones <pjones@redhat.com> - 8.10-1
changelog:
  - Update to 8.10
  - Use "isquote" where appropriate
  - Make --remove-kenrel support titles in grub2 (jianzhong.huang)
  - Use grub2 if it's there on ppc.


author: Peter Jones <pjones@redhat.com> - 8.12-1
changelog:
  - Update to 8.12
  - Preserve trailing indentation when splitting line elements (mads)
    Resolves: rhbz#742720
  - Pick last device mounted on / (pjones,bcl)
    Related: rhbz#820340
    Related: rhbz#820351


author: Peter Jones <pjones@redhat.com> - 8.21-1
changelog:
  - Use systemd vconsole.conf and locale.conf if present
    Resolves rhbz#881908
  - Avoid unnecessary stat calls (from Ville Skyttä)
    Resolves rhbz#741135
  - Spelling fixes (Ville Skyttä)
  - Add a test case for rhbz#742885
  - Handle case-insensitive extlinux config files properly (from Johannes Weiner)


author: Peter Jones <pjones@redhat.com> - 8.23-1
changelog:
  - Update to 8.23
  - Fix empty root device in case of an empty /etc/fstab (lemenkov)
  - General refactoring and cleanup (harald)
  - Don't clean up modules.* so aggressively (harald)


author: Peter Jones <pjones@redhat.com> - 8.25-1
changelog:
  - Error instead of segfaulting if we can't find any working config
    Resolves: rhbz#912873
    Resolves: rhbz#751608


author: Peter Jones <pjones@redhat.com> - 8.27-1
changelog:
  - Make grubby understand grub's "saved_entry" system
    Resolves: rhbz#768106
    Resolves: rhbz#736188
  - BuildRequire grub2 on appropriate platforms, for the test suite.


author: Peter Jones <pjones@redhat.com> - 8.34-1
changelog:
  - Make grub2 "--copy-default --add-kernel=foo --initrd=bar" work when default
    has no initrd line.
    Resolves: rhbz#1099627
    Related: rhbz#1096358


author: Peter Jones <pjones@redhat.com> - 8.35-5
changelog:
  - See if what people are seeing in 1141414 is actually 957681
    Related: rhbz#957681
    Related: rhbz#1141414


author: Peter Jones <pjones@redhat.com> - 8.35-7
changelog:
  - Revert "debug" image creation for now
    Resolves: rhbz#1153410
  - Fix minor quoting errors in dtbdir code
    Resolves: rhbz#1088933


author: Peter Jones <pjones@redhat.com> - 8.35-9
changelog:
  - Disable "make check" on arm builds; right now the test suite is broken
    there and raises false positives constantly.


author: Peter Jones <pjones@redhat.com> - 8.38-1
changelog:
  - Update to 8.38
  - Fix title extraction with some config file types
    Resolves: rhbz#1204353
    Resolves: rhbz#1204888
    Resolves: rhbz#1206943


author: Peter Jones <pjones@redhat.com> - 8.39-1
changelog:
  - Update to 8.39
  - Fix title extraction with some config file types
    Resolves: rhbz#1204353
    Resolves: rhbz#1204888
    Resolves: rhbz#1206943


author: Peter Jones <pjones@redhat.com> - 8.40-13
changelog:
  - Make the temporary config wrapper be what "grubby" contains, and put
    traditional grubby in grubby-deprecated.


author: Peter Jones <pjones@redhat.com> - 8.40-15
changelog:
  - Install installkernel-bls here as well, not just in the grub2 package,
    since s390x doesn't have grubby packages.
    Related: rhbz#1619344


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-17
changelog:
  - grubby-bls should only check if kernel exists and not if was installed
    Resolves: rhbz#1634740
  - Use ! instead of , as sed delimiter in grubby-bls script
    Resolves: rhbz#1634744
  - Print information about the entry set as default
    Resolves: rhbz#1636180


author: Peter Jones <pjones@redhat.com> - 8.40-19
changelog:
  - grubby-bls: Make grubby-bls sort everything the same way grub2 does
    Resolves: rhbz#1638103
  - grubby-bls: Consistently use the filename as the bls id
    Related: rhbz#1638103
  - grubby-bls: check if entry exists before attempting to print its info
    Resolves: rhbz#1634712


author: Peter Jones <pjones@redhat.com> - 8.40-20
changelog:
  - Add missing patches from RHEL-7 for grubby-deprecated.
    Resolves: rhbz#1561919
  - grubby-bls: make a copy of the cmdline if is modified for an entry
    Resolves: rhbz#1629054


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-21
changelog:
  - grubby-bls: escape delimiter character before replacing the options field
    Resolves: rhbz#1640017


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-29
changelog:
  - grubby-bls: print the absolute kernel and initramfs images paths
    Resolves: rhbz#1649778
  - grubby-bls: make info print the root parameter if is present in cmdline
    Resolves: rhbz#1649791


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-31
changelog:
  - grubby-bls: allow to specify the same kernel param multiple times
    Resolves: rhbz#1652486
  - grubby-bls: expand kernel options if these are environment variables
    Resolves: rhbz#1649785
  - grubby-bls: always generate the BLS snippets when adding new entries
    Resolves: rhbz#1653365
  - Improve man page for --info option (jstodola)
    Resolves: rhbz#1651672


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-37
changelog:
  - grubby-bls: unset default entry if is the one being removed
    Resolves: rhbz#1668329
  - grubby-bls: error if args or remove-args is used without update-kernel
    Related: rhbz#1690765
  - grubby-bls: make --update-kernel ALL to update kernelopts var in grubenv
    Resolves: rhbz#1690765
  - grubby-bls: fix --add-kernel not working when using the --args option
    Related: rhbz#1690765


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-38
changelog:
  - grubby-bls: don't print rpm-sort error messages
    Resolves: rhbz#1731924
  - grubby-bls: remove -o option and support -c for ppc64le grub config
    Resolves: rhbz#1758598
  - grubby-bls: fix logic to check if the kernelopts var is defined in a BLS
    Resolves: rhbz#1726514
  - grubby-bls: don't update grubenv when generating grub.cfg for ppc64le
    Related: rhbz#1726514


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-39
changelog:
  - grubby-bls: strip only /boot from paths
    Resolves: rhbz#1738238
  - Make grubby to also update GRUB_CMDLINE_LINUX in /etc/default/grub
    Resolves: rhbz#1152027
  - grubby-bls: fix corner case when a kernel param value contains a '='
    Resolves: rhbz#1787584
  - grubby-bls: update man page to match options in current wrapper script
    Resolves: rhbz#1812065
  - grubby-bls: always escape the delimiter character used in sed commands
    Related: rhbz#1787584
  - grubby-bls: add a --no-etc-grub-update option
    Related: rhbz#1152027


author: Guenther Deschner <gdeschner@redhat.com> 0.2.3-8
changelog:
  - Fix default proxymech documentation and fix LOCAL_FIRST implementation
  - resolves: https://fedorahosted.org/gss-proxy/ticket/105


author: Guenther Deschner <gdeschner@redhat.com> 0.3.0-0
changelog:
  - New upstream release 0.3.0:
    * Add support for impersonation (depends on s4u2self/s4u2proxy on the KDC)
    * Add support for new rpc.gssd mode of operation that forks and changes uid
    * Add 2 new options allow_any_uid and cred_usage


author: Guenther Deschner <gdeschner@redhat.com> 0.3.0-3
changelog:
  - Fix flags handling in gss_init_sec_context()
  - resolves: https://fedorahosted.org/gss-proxy/ticket/106
  - Fix OID handling in gss_inquire_cred_by_mech()
  - resolves: https://fedorahosted.org/gss-proxy/ticket/107
  - Fix continuation processing for not yet fully established contexts.
  - resolves: https://fedorahosted.org/gss-proxy/ticket/108
  - Add flags filtering and flags enforcing.
  - resolves: https://fedorahosted.org/gss-proxy/ticket/109


author: Guenther Deschner <gdeschner@redhat.com> 0.3.1-0
changelog:
  - New upstream release 0.3.1:
    * Fix use of gssproxy for client initiation
    * Add new enforcing and filtering options for context initialization
    * Fix potential thread safety issues
  - resolves: https://fedorahosted.org/gss-proxy/ticket/110
  - resolves: https://fedorahosted.org/gss-proxy/ticket/111


author: Guenther Deschner <gdeschner@redhat.com> 0.3.1-1
changelog:
  - Fix flags handling in gss_init_sec_context()
  - resolves: https://fedorahosted.org/gss-proxy/ticket/112
  - Fix nfsd startup
  - resolves: https://fedorahosted.org/gss-proxy/ticket/114
  - Fix potential mutex deadlock
  - resolves: https://fedorahosted.org/gss-proxy/ticket/120
  - Fix segfault in gssi_inquire_context
  - resolves: https://fedorahosted.org/gss-proxy/ticket/117
  - resolves: #1061133


author: Simo Sorce <simo@redhat.com> 0.4.0-1
changelog:
  - New upstream realease
    Added optional support for running GSS-Proxy as an unprivileged user
    Uses new /etc/gss/mech.d configuration directory for gss mechanisms
    Kernel related fixes
    General bug fixing, many minor errors or incorrect behaviours have been corrected
  - drop all patches, they are all included upstream


author: Simo Sorce <simo@redhat.com> 0.4.0-2
changelog:
  - Workaround rawhide bug (bz1204646) with krb5-config by switching to
    pkg-config (patch from upstream)


author: Robbie Harwood <rharwood@redhat.com> - 0.5.0-4
changelog:
  - Do not package mod_auth_gssapi conf file
    - This ensures gssproxy works even when the apache user does not exist


author: Robbie Harwood <rharwood@redhat.com> - 0.6.2-1
changelog:
  - Fix incorrect use of non-null string in xdr
  - Also move version number to better reflect what is inside


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added /usr/bin/gzip and /usr/bin/gunzip symlinks as some programs are too
    brain dead to figure out they should be at least trying to use $PATH
  - added BuildRoot


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - adopt patch from Paul Eggert to fix detection of the improper tables in
    inflate.c(huft_build)
  - the latest released version 1.2.4a, which provides documentation updates
    only. But it lets us use small revision numbers again
  - add an dirinfo entry for gzip.info so we can get rid of the ugly --entry
    args to install-info


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Build system handles stripping
  - Don't do thing the system does, like creating directories
  - use --bindir /bin
  - Added URL
  - skip unnecesarry sed step
  - Include THANKS, AUTHORS, ChangeLog, TODO


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add HAVE_LSTAT define, to avoid it doing weird things to symlinks
    instead of ignoring them as the docs say it should (#22045)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed buzilla bug #26680. Wrong skip value after mktemp patch and forced
    overwrite for output file during decompression.


author: Trond Eivind Glomsrød <teg@redhat.com> 1.3.0-16
changelog:
  - replace tempfile patches with improved ones solar@openwall.com
  - Add less to the dependency chain - zless needs it


author: Jeff Johnson <jbj@redhat.com> 1.3.3-9
changelog:
  - enlarge window buffer to avoid accessing beyond end-of-buffer (#78413,#83095).
  - re-enable rsync ready patch.


author: Tomas Mraz <tmraz@redhat.com> 1.3.5-2
changelog:
  - upstream 1.3.5
  - dropped long ago obsolete dirinfo patch
  - escape file names in zgrep (#123012)
  - make stack in match.S nonexecutable


author: Tomas Mraz <tmraz@redhat.com> 1.3.5-3
changelog:
  - don't use the asm code again as it's slower than the gcc compiled one
  - convert the .spec to UTF-8


author: Ivana Varekova <varekova@redhat.com> 1.3.5-8
changelog:
  - fix bug 204676 (patches by Tavis Ormandy)
    - cve-2006-4334 - null dereference problem
    - cve-2006-4335 - buffer overflow problem
    - cve-2006-4336 - buffer underflow problem
    - cve-2006-4338 - infinite loop problem
    - cve-2006-4337 - buffer overflow problem


author: Karel Klic <kklic@redhat.com> - 1.3.13-1
changelog:
  - New upstream version
  - Updated license from GPLv2 to GPLv3+
  - Removed gzip-1.3.12-futimens.patch, as it is fixed in the new version
  - Updated rsync patch to the new upstream version
  - Updated cve-2006-4337 patch to use gzip_error instead of error


author: Karel Klic <kklic@redhat.com> - 1.4-1
changelog:
  - New upstream release
  - Use XZ upstream source archive
  - Removed cve-2010-0001 patch as it's fixed in this release
  - Removed zdiff patch as it's fixed in this release


author: Karel Klic <kklic@redhat.com> - 1.4-2
changelog:
  - Removed the dependency on less (rhbz#629580)
  - Removed the BuildRoot tag
  - Removed the %clean section


author: Michal Luscon <mluscon@redhat.com> 1.5-1
changelog:
  - New upstream version
  - Removed gzip-1.3.9-stderr.patch
  - Removed gzip-1.3.10-zgreppipe.patch
  - Removed gzip-1.3.13-noemptysuffix.patch


author: Petr Stodulka <pstodulk@redhat.com> - 1.6-6
changelog:
  - changed spec file - build section
    obey compiler macros %__cc, %__cpp, %__cxx (#667144)
  - zgrep inherits color setup from grep (#1034839)


author: Petr Stodulka <pstodulk@redhat.com> - 1.7-1
changelog:
  - rebase to new upstream version 1.7
  - dropped all patches (almost all issues are fixed in new upstream version,
    sometimes in different way)
    - only patch gzip-1.3.12-openbsd-owl-tmp.patch is untested - code is changed
      significantly and patch is undocumented from archaic time, so I drop it too
    Resolves: #1321560


author: Jakub Martisko <jamartis@redhat.com> - 1.9-5
changelog:
  - Fix wrong skip size in gzexe
  - Add new test dealing with the ^^ (needs autoreconf)
  - Enable make check (needs less)
    Resolves: 1705413

   * Tue Aug 07 2018 Jakub Martisko <jamartis@redhat.com> - 1.9-4
   - Fix FTBFS bug (gnulib problems)
   - more details: https://lists.gnu.org/r/bug-gnulib/2018-03/msg00000.html
     Resolves 1611722


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - add hardlink man page
  - add -h option
  - use _sbindir instead of /usr/sbin directly
  - don't warn because of uninitialized variable
  - spec cleanup


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-11
changelog:
  - don't use mmap(2) to avoid failures on i386 with 1GB files and larger (#672917)
  - fix package URL (#676962)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-12
changelog:
  - fix possible buffer overflows, integer overflows (CVE-2011-3630 CVE-2011-3631 CVE-2011-3632)
  - update man page


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0-14
changelog:
  - do not allow to hardlink files across filesystems by default (#786719)
    (use -f option to override)


author: Francisco Javier Tsao Santín <tsao@gpul.org> - 1:1.3-1
changelog:
  - Patch by Todd Lewis that adds option -x to exclude files with pcre lib 
  - This patch solves RH Bugzilla ID's 955246 1322198


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1:1.3-4
changelog:
  - remove manually added pcre2 requires (this is autogenerated)
  - removed BuildRoot, %defattr() and Group (new Fedora Packaging Guildline)
  - do not use straight gcc and add use %{__global_ldflags}
  - use %_licensedir is no longer needed
  - minor cleanups:
  -- reformat %description to 80 col
  -- added full URLs in Source fields
  -- more macros
  -- a bit simpler %prep


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - Use O_NONBLOCK when opening devices so we can manipulate CD-ROM drives
    with no media inserted, even when running a current kernel (Bug #6457)


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - disable readahead (#14268)
  - add comment in /etc/sysconfig/harddisks about possible extra parameters


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - update to 5.2 with the following fixes:
   - v5.2 compile fixes for 2.5.xx
   - v5.1 fixed segfault in "-i" on older drives
   - v5.0 lots of updates and new features
   - v4.9 fixed compile error with 2.5.xx kernels
   - v4.8 changed -Q to allow specifying queue depth
   - v4.7 added -z, -Q, -M flags; expanded parm range for -p


author: Karsten Hopp <karsten@redhat.de> 6.1-1
changelog:
  - update to 6.1 (BLKGETSIZE fixes)
  - work around hdparm's usage of kernel headers, assume
    that we run it on little-endian machines only


author: Michal Grzedzicki <mge@fb.com> - 9.54-4
changelog:
  - backport fix for --dco-identify real max sectors calculation from upstream version 9.62 (#1959918)


author: Jiri Popelka <jpopelka@redhat.com> - 3.01-1
changelog:
  - Initial package. Up to now hostname has been part of net-tools package.
  - This package is based on Debian's hostname because Debian has had hostname
    as separate package since 1997 and the code is much better then the old one
    contained in net-tools.


author: Jiri Popelka <jpopelka@redhat.com> - 3.11-3
changelog:
  - remove some rh-specific bits from rh.patch as they are no longer valid (#881913)
  - remove outdated de & pt man pages
  - /usr move: use _bindir macro


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.1-0
changelog:
  - 1.1 rel# Patch to the 1.1 fix 2967 http://www.open-mpi.org/software/hwloc/nightly/v1.1/hwloc-1.1rc6r2967.tar.bz2
  - Fix hwloc_bitmap_to_ulong right after allocating the bitmap.
  - Fix the minimum width of NUMA nodes, caches and the legend in the graphical lstopo output.
  - Cleanup error management in hwloc-gather-topology.sh.
  - Add a manpage and usage for hwloc-gather-topology.sh on Linux.
  - Rename hwloc-gather-topology.sh to hwloc-gather-topology to be consistent with the upcoming version 1.2ease


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.3-0
changelog:
  - 1.3 release
  - added dependency on libibverbs-devel pciutils-devel
  - cannot provide support for cuda (cuda_runtime_api.h).
  - Nvidia CUDA is free but not open-source therefore not in Fedora.


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.8-2
changelog:
  - Unversioned docdir change, more info on 
    https://fedoraproject.org/wiki/Changes/UnversionedDocdirs


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9-1
changelog:
  - Update to 1.9
  - Split out lstopo into a -gui subpackage, so the hwloc base package
    does not pull in all of X.


author: Orion Poplwski <orion@cora.nwra.com> - 1.11.0-1
changelog:
  - Update to version 1.11.0 (fixes bug #1208279)
  - Drop arm patch applied upstream
  - Make hwloc-devel require libibverbs-devel (bug #1191770)
  - Fix man page manipulation (bug #1235954)


author: Michal Schmidt <mschmidt@redhat.com> - 1.11.8-3
changelog:
  - BuildRequire rdma-core-devel on s390(x).
  - Install the hwloc-dump-hwdata.service systemd service on x86/x86_64.


author: Michal Schmidt <mschmidt@redhat.com> - 1.11.9-1
changelog:
  - Update to 1.11.9.
  - BuildRequire gcc, gcc-c++. Drop Group tags.
  - BuildRequire numactl-devel on s390x too.


author: Jarod Wilson <jarod@redhat.com> - 12-3
changelog:
  - Take libi40iw out of tech-preview state (rhbz 1428930)
  - Add ibv_*_pingpong man pages (rhbz 1416541)


author: Jarod Wilson <jarod@redhat.com> - 12-4
changelog:
  - Clean up devel files list
  - Fix up a few dependencies rpmdiff complained about (rhbz 1404035)
  - Add Requires: pciutils for dracut to behave in minimalist cases (rhbz 1429046)
  - Adjust Conflicts: on infiniband-diags to match RHEL packaging (rhbz 1428785)


author: Jarod Wilson <jarod@redhat.com> - 13-1
changelog:
  - Update to rdma-core v13 release (rhbz 1404035)
  - Mellanox mlx5 Direct Verbs support (rhbz 1426430)
  - Get build working on s390x, less mlx5 (rhbz 1434029)


author: Jarod Wilson <jarod@redhat.com> 13-6
changelog:
  - Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
  - Add necessary Provides/Obsoletes for old -static packages
  - Remove ibverbs providers that we aren't currently able to support
  - Resolves: rhbz#1453096, rhbz#1451607


author: Jarod Wilson <jarod@redhat.com> 15-2
changelog:
  - Fix ibacm segfault and improper multicast handling
  - Resolves: rhbz#1502745
  - Resolves: rhbz#1502759


author: Honggang Li <honli@redhat.com> 15-3
changelog:
  - srp_daemon: Don't create async_ev_thread if only run once
  - srp_daemon: Remove unsupported systemd configurations
  - srp_daemon: Start srp_daemon service after network target
  - Resolves: bz1525193
  - Resolves: bz1528671


author: Jarod Wilson <jarod@redhat.com> 15-4
changelog:
  - Add support for extended join multicast API in librdmacm
  - Add support for striding RQ on mlx5
  - Resolves: rhbz#1515487, rhbz#1516571


author: Jarod Wilson <jarod@redhat.com> 15-5
changelog:
  - libmlx4: report RSS caps for improved DPDK support
  - Fix double mutex unlock in iwpmd
  - Resolves: rhbz#1527350
  - Resolves: rhbz#1542362


author: Jarod Wilson <jarod@redhat.com> 15-7
changelog:
  - i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
    causing problems with suspend and resume, and fall back to load via
    systemd rdma initscript.
  - Resolves: rhbz#1561566


author: Jarod Wilson <jarod@redhat.com> 17.1-1
changelog:
  - Rebase to upstream rdma-core v17.1 stable release
  - No more libibcm or ib sysv initscripts
  - Remove ibverbs provider for unsupported CXGB3 devices
  - Remove ibverbs provider for unsupported OCRDMA devices
  - Resolves: rhbz#1492324
  - Resolves: rhbz#1492924
  - Resolves: rhbz#1503621
  - Resolves: rhbz#1504528
  - Resolves: rhbz#1504581
  - Resolves: rhbz#1503723


author: Jarod Wilson <jarod@redhat.com> 18.1-2
changelog:
  - Disable nes, mthca and ipath libibverbs providers, this
    old hardware is no longer supported, and fix disabling
    of cxgb3 and ocrdma


author: Jarod Wilson <jarod@redhat.com> - 19.1-1
changelog:
  - Update to v19.1 stable branch release
  - Fix SRQ support in libi40iw
  - Backport libqedr support for SRQ
  - Resolves: rhbz#1639692
  - Switch rxe_cfg from ifconfig to iproute2
  - Resolves: rhbz#1640637


author: Jarod Wilson <jarod@redhat.com> - 22-1
changelog:
  - Update to upstream v22 release for features and fixes
  - Include legacy ibdev2netdev helper script
  - Resolves: rhbz#1643904


author: Jarod Wilson <jarod@redhat.com> - 22.3-1
changelog:
  - Update to upstream v22.3 stable release for fixes
  - Enable support for Broadcom 57500 hardware
  - Enable support for Mellanox ConnectX-6 DX hardware
  - Resolves: rhbz#1678276
  - Resolves: rhbz#1687435


author: Jarod Wilson <jarod@redhat.com> - 26.0-2
changelog:
  - Add Obsoletes/Provides pair for infiniband-diags-devel
  - Pull in upstream stable-v26 branch patches
  - Fix %postun scriptlet failures by removing superfluous -p options
  - Add new BuildRequires: on pandoc
  - Related: rhbz#1722257


author: Honggang Li <honli@redhat.com> - 29.0-2
changelog:
  - Suppress ibdev2netdev warning messgae
  - Unversioned documentation directory
  - Resolves: bz1794904, bz1824853


author: Honggang Li <honli@redhat.com> - 32.0-1
changelog:
  - Update to upstream v32 release for features and fixes
  - Support Amazon Elastic Fabric Adapter
  - Enable pyverbs
  - Add a check for udevadm in the specfile
  - Resolves: bz1851721, bz1856076, bz1887396, bz1868804


author: Honggang Li <honli@redhat.com> - 32.0-4
changelog:
  - Update to upstream stable release v32.1
  - Fix mlx5 pyverbs CQ test
  - Resolves: bz1915745, bz1907377


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.6.1-0.fdr.3
changelog:
  - Partial fix for bad datadirs returned by icu-config (works as long as
    data packaging mode is not "common" or "dll").


author: Ville Skyttä <ville.skytta at iki.fi> - 0:3.0-0.fdr.1
changelog:
  - Update to 3.0, datadirs patch no longer needed.
  - Package data in shared libs, drop -locales subpackage.
  - Rename -docs subpackage to libicu-doc, and generate graphs with graphviz.


author: Ville Skyttä <ville.skytta at iki.fi> - 3.2-3
changelog:
  - Apply upstream case mapping mutex lock removal patch.
  - Build with gcc 3.2 as a temporary workaround for #152495.


author: Caolán McNamara <caolanm@redhat.com> - 3.6-0.1.d01
changelog:
  - rh#200728# update to prelease 3.6d01 to pick up on sinhala fixes
  - drop integrated rh190879.patch
  - drop integrated icu-3.4-sinhala1.patch


author: Caolán McNamara <caolanm@redhat.com> - 3.6-2
changelog:
  - fix rh#205252#/icu#5365 (gnome#121882#/#icu#4026#) to make icu 
    like pango for multiple dependant vowels


author: Caolán McNamara <caolanm@redhat.com> - 3.6-5
changelog:
  - rh#208705# add pkg-config Require for -devel package
  - add icu.icu5431.malayam.patch for rh#208551#/rh#209084#
  - add icu.icu5433.oriya.patch for rh#208559#/rh#209083#


author: Caolán McNamara <caolanm@redhat.com> - 3.6-20
changelog:
  - Resolves: rhbz#243984 change the icu group as it is libicu 
    which is "System Environment/Libraries" not icu


author: Caolán McNamara <caolanm@redhat.com> - 3.8-0.1.d01
changelog:
  - 3.8 release candidate
  - drop integrated icu.icu5433.oriya.patch
  - drop integrated icu.icu5488.assamese.patch
  - drop integrated icu.icu5500.devicetablecrash.patch
  - drop integrated icu.icu5501.sinhala.biggerexpand.patch
  - drop integrated icu.icu5594.gujarati.patch
  - drop integrated icu.icu5465.telegu.patch


author: Caolán McNamara <caolanm@redhat.com> - 3.8.1-2
changelog:
  - remove icu.icu5365.dependantvowels.patch and cleanup
    icu.icu5506.multiplevowels.patch as they patch and unpatch 
    eachother (thanks George Rhoten for pointing out that madness)


author: Caolán McNamara <caolanm@redhat.com> - 3.8.1-3
changelog:
  - CVE-2007-4770 CVE-2007-4771 add icu.regexp.patch
  - Resolves: rhbz#423211 fix malalayam stuff in light of syllable
    changes


author: Caolán McNamara <caolanm@redhat.com> - 3.8.1-5
changelog:
  - Resolves: rhbz#431401 split syllables on 1st 0d4d of a 0d4d + 
    (>= 0d15 && <= 0d39) + 0d4d + 0d30 sequence


author: Caolán McNamara <caolanm@redhat.com> - 4.0-2
changelog:
  - Resolves: rhbz#459698 drop Malayalam patches. Note test with Rachana/Meera
    instead of Lohit Malayalam before filing bugs against icu wrt.
    Malayalam rendering


author: Caolán McNamara <caolanm@redhat.com> - 4.2-0.1.d03
changelog:
  - 4.2 release candidate
  - drop resolved icu.icu6008.arm.padding.patch
  - drop resolved icu.icu6439.bare.elif.patch


author: Caolán McNamara <caolanm@redhat.com> - 4.4-1
changelog:
  - latest version
  - drop integrated icu.6969.pkgdata.patch
  - drop integrated icu.icu7039.badextract.patch
  - drop integrated icu.XXXX.buildfix.patch


author: Caolán McNamara <caolanm@redhat.com> - 4.4.1-2
changelog:
  - Resolves: rhbz#596171 drop icu.icu6284.strictalias.patch and use
    -fno-strict-aliasig as upstream has added a pile more and doesn't look
    interested in proposed patchs


author: Caolán McNamara <caolanm@redhat.com> - 4.6-1
changelog:
  - latest version
  - upgrade includes a .pc now of its own, drop ours
  - drop integrated icu.6995.kannada.patch
  - drop integrated icu.7971.buildfix.patch
  - drop integrated icu.7972.buildfix.patch
  - drop integrated icu.7932.doublecompare.patch
  - drop integrated icu.8011.buildfix.patch


author: Eike Rathke <erack@redhat.com> - 4.8.1-3
changelog:
  - Resolves: rhbz#766542 CVE-2011-4599 Stack-based buffer overflow
  - add icu.8984.CVE-2011-4599.patch


author: Eike Rathke <erack@redhat.com> - 50.1.2-1
changelog:
  - Update to 50.1.2
  - Resolves: rhbz#856594 to-do add --disable-renaming on next soname bump
  - removed upstream applied icu.9283.regexcmp.crash.patch


author: Eike Rathke <erack@redhat.com> - 50.1.2-6
changelog:
  - Resolves: rhbz#966141 various flaws in Layout Engine font processing
  - Resolves: rhbz#966077 aarch64 support for icu-config.sh wrapper


author: Eike Rathke <erack@redhat.com> - 52.1-1
changelog:
  - upgrade to upstream ICU 52.1
  - Resolves: rhbz#1049265 icu-52.1 is available
  - Resolves: rhbz#1050063 Trivial change to icu-config to support ppc64le
  - drop icu-51-layout-fix-10107.tgz source
  - drop integrated icu.10318.CVE-2013-2924_changeset_34076.patch
  - drop integrated icu.10143.memory.leak.crash.patch


author: Eike Rathke <erack@redhat.com> - 54.1-3
changelog:
  - Resolves: rhbz#1190131 CVE-2014-7923 CVE-2014-7926 CVE-2014-9654
  - Resolves: rhbz#1184811 CVE-2014-6585 CVE-2014-6591


author: Raphael Groner <projects.rg@smart.ms> - 56.1-5
changelog:
  - even more verbosity and debug output
  - add path to extend ICU's internal cache of codes
  - use license macro
  - provide samples in devel subpackage
  - modernize generally


author: Mike FABIAN <mfabian@redhat.com> - 60.2-4
changelog:
  - Add negative-daylight-savings.patch from upstream.
    (see http://bugs.icu-project.org/trac/ticket/13566 and
    http://bugs.icu-project.org/trac/changeset/40954)


author: Parag Nemade <pnemade AT redhat DOT com> - 60.2-7
changelog:
  - Resolves:rh#1602551 - Fix specfile by adding compile options
  - also add BuildRequires for gcc and gcc-c++
  - Correct the upstream URL


author: Mike FABIAN <mfabian@redhat.com> - 60.3-1
changelog:
  - Update to 60.3 maintenance release including support for new Japanese era Reiwa (令和).
  - Resolves: rhbz#1677093


author: Mike FABIAN <mfabian@redhat.com> - 60.3-2
changelog:
  - Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch
  - Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch
  - Resolves: rhbz#1808238


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.0-1
changelog:
  - New upstream release
  - Add OpenSSL 1.0 compatibility package, due to issues with OpenSSL 1.1
  - Remove libtool files
  - Run ldconfig after un/installation to update *.so files
  - Add -devel subpackage to handle include files and examples


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.0-2
changelog:
  - Adjusted docbook xsl path to match the correct stylesheet
  - Remove only *.la files, considering there aren't any *.a files


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.0-3
changelog:
  - Add OpenSSL 1.1 API support for the package, avoiding the need of
    compat-openssl10-devel package


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.1-1
changelog:
  - New upstream release
  - Support for OpenSSL 1.1 was added directly to the source code in upstream,
    thus removing specific patch for it
  - Docbook xsl stylesheet updated to a local path


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.1-2
changelog:
  - Remove libtool files
  - Run ldconfig scriptlets after un/installing
  - Add -devel subpackage to handle include files and examples
  - Disable any static file in the package


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 1.1-3
changelog:
  - Solve memory leaks pointed by covscan tool
  - Add optimization flag O2 during compilation to satisfy annocheck tool


author: Erik Troan <ewt@redhat.com>
changelog:
  - added patch from sopwith to let install-info understand gzip'ed info files
  - use skeletal dir file from texinfo tarball (w/ bash entry to reduce
    dependency chain) instead (and install-info command everywhere else)
  - patches install-info to handle .gz names correctly


author: Erik Troan <ewt@redhat.com>
changelog:
  - added a prereq of bash to the info package -- see the comment for a
    description of why that was done


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - /sbin/install-info should not depend on /usr/lib/libz.so.1 -- statically
    link with /usr/lib/libz.a.


author: Elliot Lee <sopwith@redhat.com> 4.3-2
changelog:
  - Don't strip files here (rpm takes care of it)
  - Use pushd/popd instead of enclosing things in (), to make
    error detection easier
  - Use _smp_mflags


author: Florian La Roche <Florian.LaRoche@redhat.de> 4.3-3
changelog:
  - Make /usr/share/info/dir a real file and remove /etc/info-dir, that
    file should be unused for a long time.


author: Miloslav Trmac <mitr@redhat.com> - 4.8-8
changelog:
  - Ignore scriptlet failures with --excludedocs (#166958)
  - Don't link texindex to zlib, don't pretend to link to zlib statically


author: Miloslav Trmac <mitr@redhat.com> - 4.8-12
changelog:
  - Don't leave around temporary files used by texindex
  - Add missing error handling to texinfo-CAN-2005-3011.patch


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 4.11-1
changelog:
  - Rebase to upstream texinfo-4.11 (update zlib.patch, drop
    texindex.patch and 0xA0.patch -- both included in upstream)
    Resolves: #295441


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 4.11-4
changelog:
  - Don't insert description ("This is...") into the direntry section
    of some generated files
    Resolves: #394191


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 4.12-1
changelog:
  - Update to texinfo-4.12
  - Remove description ("This is...") from /usr/share/info/dir in info
    post install section
    Resolves: #433535


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.1-3
changelog:
  - install-info: use create-tmp-then-rename pattern because of OSTree
    (patch by Colin Walters)
    Resolves: #1348671


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4-2
changelog:
  - Fix broken reference following when the reference is split to
    more than one line
  - Fix possible incorrect selection of already loaded file when
    following cross reference
    Resolves: #1383057


author: Petr Pisar <ppisar@redhat.com> - 6.4-3
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Erik Troan <ewt@redhat.com>
changelog:
  - Added usernetctl wrapper for user mode ifup and ifdown's and man page
  - Rewrote ppp and slip kill and retry code
  - Added doexec and man page


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Changed ifup-ppp and ifdown-ppp not to use doexec, because the argv[0]
    provided by doexec goes away when pppd gets swapped out.
  - ifup-ppp now sets remotename to the logical name of the device.
    This will BREAK current PAP setups on netcfg-managed interfaces,
    but we needed to do this to add a reasonable interface-specific
    PAP editor to netcfg.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added MTU for PPP.
  - Put PPPOPTIONS at the end of the options string instead of at the
    beginning so that they override other options.  Gives users more rope...
  - Don't do module-based stuff on non-module systems.  Ignore errors if
    st module isn't there and we try to load it.


author: Erik Troan <ewt@redhat.com>
changelog:
  - Got rid of xargs dependency in halt script
  - Don't mount /proc twice (unmount it in between)
  - sulogin and filesystem unmounting only happened for a corrupt root
    filesystem -- it now happens when other filesystems are corrupt as well


author: Erik Troan <ewt@redhat.com>
changelog:
  - Added DHCP support
  - Set hostname via reverse name lookup after configuring a networking
    device if the current hostname is (none) or localhost


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Support for net event notification:
    Call /sbin/netreport to request that SIGIO be sent to you whenever
    a network interface changes status (won't work for brining up SLIP
    devices).
    Call /sbin/netreport -r to remove the notification request.
  - Added ifdown-post, and made all the ifdown scrips call it, and
    added /etc/ppp/ip-down script that calls /etc/ppp/ip-down.local
    if it exists, then calls ifdown-post.
  - Moved ifup and ifdown to /sbin


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - /sbin/netreport sgid rather than suid.
  - /var/run/netreport writable by group root.

  - /etc/ppp/ip-{up|down} no longer exec their local versions, so
    now ifup-post and ifdown-post will be called even if ip-up.local
    and ip-down.local exist.


author: Donald Barnes <djb@redhat.com>
changelog:
  - added status function to functions along with better killproc
    handling.
  - added /sbin/usleep binary (written by me) and man page
  - changed BuildRoot to /var/tmp instead of /tmp


author: Donnie Barnes <djb@redhat.com>
changelog:
  - reworked status() to adjust for processes that change their argv[0] in
    the process table.  The process must still have it's "name" in the argv[0]
    string (ala sendmail: blah blah).


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Clone device support in network scripts, rc scripts, and usernetctl.
  - Disassociate from controlling tty in PPP and SLIP startup scripts,
    since they act as daemons.
  - Spec file now provides start/stop symlinks, since they don't fit in
    the CVS archive.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added network-functions to spec file.
  - Added report functionality to usernetctl.
  - Fixed bugs I introduced into usernetctl while adding clone device support.
  - Clean up entire RPM_BUILD_ROOT directory in %clean.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - /var/run/netreport needs to be group-writable now that /sbin/netreport
    is setguid instead of setuid.


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed network-scripts to allow full pathnames as config files
  - removed some old 3.0.3 pcmcia device handling


author: Erik Troan <ewt@redhat.com>
changelog:
  - set domainname to "" if none is specified in /etc/sysconfig/network
  - fix /proc mounting to get it in /etc/mtab


author: Erik Troan <ewt@redhat.com>
changelog:
  - tried to get /proc stuff right one more time (uses -t nonfs,proc now)
  - added support for /fsckoptions
  - changed 'yse' to 'yes' in KERNELD= line


author: Erik Troan <ewt@redhat.com>
changelog:
  - touch /var/lock/subsys/kerneld after cleaning out /var/lock/subsys
  - the logic for when  /var/lock/subsys/kerneld is touched was backwards


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added lots of linuxconf support.  Should still work on systems that
    do not have linuxconf installed, but linuxconf gives enhanced support.
  - In concert with linuxconf, added IPX support.  Updated docs to reflect it.


author: Erik Troan <ewt@redhat.com>
changelog:
  - ipcalc should *never* have been setgid anything
  - depmod isn't run properly for non-serial numbered kernels


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - /etc/rc.d/rc: don't run /etc/rc.d/rcN.d/[KS]??foo.{rpmsave,rpmorig} scripts.
  - /etc/rc.d/rc.sysinit: raid startup (Nigel.Metheringham@theplanet.net).
  - /sbin/setsysfont: permit unicode fonts.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - rc.sysvinit should be working with all kernel versions now
  - requires e2fsprogs (for fsck)
  - set INPUTRC and LESSCHARSET on linux-lat


author: Bill Nottingham <notting@redhat.com>
changelog:
  - bugfixes (ifup-ppp, kill -TERM, force fsck, hwclock --adjust, setsysfont)
  - add initlog support. Now everything is logged (and bootup looks different)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - Mmm. Must always remove debugging code. before release. *thwap*
  - pump support
  - mount -a after mount -a -t nfs


author: Bill Nottingham <notting@redhat.com>
changelog:
  - doc updates
  - support for SYSFONTACM, other console-tools stuff
  - add net route for interface if it isn't there.
  - fix for a bash/bash2 issue


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run linuxconf if /usr isn't mounted
  - set macaddr before bootp
  - zero in the /var/run/utmpx file (gafton)
  - don't set hostname on ppp/slip (kills X)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - load keymaps & console font early
  - fixes for channel bonding, strange messages with non-boot network interfaces


author: Bill Nottingham <notting@redhat.com>
changelog:
  - clean out /var better
  - let everyone read /var/run/ppp*.dev
  - fix network startup so it doesn't depend on /usr


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't make module-info, System.map links
  - handle utmpx/wtmpx
  - fix lots of bugs in 4.21 release :)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - stability fixes for initlog
  - initlog now has a config file
  - add alias speedup from dharris@drh.net
  - move netfs links
  - usleep updates


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - use new linkname argument to pppd to make if{up,down}-ppp
    reliable -- requires ppp-2.3.9 or higher


author: Bill Nottingham <notting@redhat.com>
changelog:
  - new NFS unmounting from Bill Rugolsky <rugolsky@ead.dsa.com>
  - fix ifup-sl/dip confusion
  - more raid startup cleanup
  - make utmp group 22


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - add --remotename option to wvdial code
  - make sure we do not have an earlier version of wvdial that doesn't
    know how handle --remotename
  - make ppp-watch background itself after 30 seconds even if
    connection does not come up, at boot time only, so that a
    non-functional PPP connection cannot hang boot.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - ppp-watch now always kills pppd pgrp to make sure dialers are dead,
    and tries to hang up the modem


author: Bill Nottingham <notting@redhat.com>
changelog:
  - assorted brown paper bag fixes
  - check for programs/files before executing/sourcing them
  - control stop-a like magic sysrq


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fix some failed CHAP authentication
  - fix extremely unlikely, but slightly possible kill-random-process
    bug in ppp-watch
  - allow DNS{1,2} in any ifcfg-* file, not just PPP, and
    add nameserver entries, don't just replace them
  - don't use /tmp/confirm, use /var/run/confirm instead


author: Bill Nottingham <notting@redhat.com>
changelog:
  - load mixer settings for monolithic sound
  - man page for ppp-watch
  - add ARP variable for ifup
  - some i18n fixes


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fix more possible failed CHAP authentication (with chat scripts)
  - fix ppp default route problem
  - added ppp-watch man page, fixed usernetctl man page
  - make ifup-ppp work again when called from netcfg and linuxconf
  - try to keep ppp-watch from filling up logs by respawning pppd too fast
  - handle all linuxconf-style alias files with linuxconf


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - improvements in clone device handling
  - better signal handling in ppp-watch
  - yet another attempt to fix those rare PAP/CHAP problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - attempt to restore default route if PPP takes it over
  - man page fix for ipcalc
  - shvar cleaning
  - automate maintaining /boot/System.map symlinks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - check that LC_ALL/LINGUAS and LANG are set before referencing them in lang.csh
  - fix check for /var/*/news, work around for bug #9140


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't create resolv.conf 0600
  - don't run ps as much (speed issues)
  - allow setting of MTU
  - other minor fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ifup-ppp: add hooks for demand-dialing PPP
  - functions: use basename of process when looking for its PID file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - tweak %pre back to a mv (rpm is fun!)
  - do USB initialization before fsck, so keyboard works if it fails


author: Matt Wilson <msw@redhat.com>
changelog:
  - kill all the PreTransaction stuff
  - directory ownership cleanups, add more LSB symlinks
  - move all the stuff back in to /etc/rc.d/


author: Bill Nottingham <notting@redhat.com>
changelog:
  - remove console-tools requirement
  - in netfs, start portmap if needed
  - cosmetic cleanups, minor tweaks
  - don't probe USB controllers


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't load usb drivers if they're compiled statically
  - don't call ifdown-post twice for ppp (#15285)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add usleep after kill -KILL in pidofproc, works around lockd issues (#14847)
  - add some fallback logic to prefdm (#16464)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - handle "gw x.x.x.x" as the last pair of flags in ifup-routes (#18804)
  - fix top-level makefile install target
  - make usernetctl just fall-through if getuid() == 0


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - changed hdparm section in rc.sysinit to allow different
    parameters for each disk (if needed) by copying
    /etc/sysconfig/harddisks to /etc/sysconfig/harddiskhda (hdb,hdc..)
  - fix RFE #20967


author: Bill Nottingham <notting@redhat.com>
changelog:
  - only load sound if persistent DMA buffers are necessary
  - fix lots of bugs: #18619, #21187, #21283, #12097
  - integrate MAXFAIL option for ppp-watch
  - don't load keymaps/fonts on a serial console


author: Bill Nottingham <notting@redhat.com>
changelog:
  - do LVM setup through normal initscripts mechanisms
  - ignore backup files in /etc/sysconfig/network-scripts
  - lots of .po file updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add plusb support (#18892, patch from <eric.ayers@compgen.com>)
  - don't ignore RETRYTIMEOUT when we never connect (#14071, patch from
    <ak@cave.hop.stu.neva.ru>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - various init.d/functions cleanups (#10761, from <mjt@tls.msk.ru>)
  - in daemon(), only look at pidfile to determine if process is running
    (#17244, others)
  - ifup-ppp enhancements (#17388, from <ayn2@cornell.edu>)
  - ipv6 support (#23576, originally by Peter Bieringer <pb@bieringer.de>)
  - lots of other minor fixes (see ChangeLog)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - modify firewall on ifup to allow any new DNS servers through (#25951)
  - don't muck with the font in lang.csh/lang.sh (#26349)
  - don't display Japanese if we aren't on a pty (#25041)
  - load ide-scsi if passed on /proc/cmdline


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add all save changes for s390 s390x that won't break anything
    patches are from Oliver Paukstadt @ millenux.com


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pidofproc() and killproc() try to use the PID associated with the full
    pathname first before killing the daemon by its basename (for daemons that
    share the same basename, i.e. "master" in postfix and cyrus-imapd) (#19016)
  - fix status() as well


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix some substitions in init.d/functions (fixes various killproc issues)
  - make sure ipv6 module alias is available if configured
  - fix initlog segfaults in popt when called with bogus stuff (#28140)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run isapnp on isapnp-enabled 2.4 kernels (part of #29450)
  - disable hotplug during network initscript
  - don't munge wireless keys in ifup; that will be done with the
    PCMCIA wireless stuff
  - run sndconfig --mungepnp for non-native-isapnp soundcards
  - don't explicitly kill things in init.d/single, init will do it
  - don't explicitly load usb-storage; mount the usbdevfs before initializing
    host controller modules


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - usernetctl, ppp-watch: cleanups
  - netreport: use O_NOFOLLOW
  - ifup-ppp: let ppp-watch watch over demand-dialed connections (#28927)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - IPv6 fixes (#30506)
  - make static-routes handling more sane and consistent (#29500, #29549)
  - handle multiple USB controllers *correctly*


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - copyright: GPL -> license: GPL
  - fix a syntax error in lang.csh
  - skip commented-out i18n configuration lines in lang.csh


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run ifup ppp0 if ppp-watch gets SIGINT (#40585, ak@cave.hop.stu.neva.ru)
  - fix do_netreport (#37716, #39603 <crlf@aeiou.pt>)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - reenable pump, but make sure dhcpcd is the default. This
    way, upgrades of systems without dhcpcd has a better chance at
    working.


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - disable hwclock on S390 (no such executable)
  - Fix up kernel versioning on binary-only modules (S390)
  - don't use newt scripts on S390 console


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix '--check'
  - prereq sh-utils (#43065)
  - fix some invocations of reboot/halt (#45966)
  - fix typo in ifup-wireless
  - don't muck with /etc/issue each boot
  - big IPv6 update (<pekkas@netcore.fi>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - own some more directories
  - use -O nonetdev, require mount package that understands this
  - fix do_netreport when called as non-root
  - remove ip addresses from interfaces on ifdown
  - oops, fix ifup/ifdown


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update netdev stuff to use _netdev
  - IPv6 updates (<pekkas@netcore.fi>)
  - fix downing of devices with static IPs (#49777, #49783)
  - put ifcfg-lo back in the package


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't use kbd commands in setsysfont now that we've switched back to
    console-tools (#50075)
  - sleep in check_link_down; some devices require it
  - only bring link down if check_link_down fails


author: Bill Nottingham <notting@redhat.com>
changelog:
  - honor HOTPLUG=no if running under hotplug (#47483)
  - use awk, not grep, for modprobe -c checks (#49616)
  - don't print ugly messages for the case where the device doesn't exist,
    and there is no alias (i.e., PCMCIA ONBOOT=yes (#various))
  - run kbdconfig in /.unconfigured mode (#43941)
  - use a bigger buffer size argument to dmesg (#44024)
  - detach loopback devices on shutdown (#43919, #45826)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - tweak raittab grep slightly (#51231)
  - allow resetting of default route for DHCP addresses (#48994)
  - save resolv.conf in ifup-ppp for restoration by ifdown-post (#50759)
  - when munging firewall rules for dns, only allow dest ports 1025-65535 (#44038, #40833)
  - allow shell characters in ppp names (#43719)
  - allow setting DHCP arguments, just kill dhcpcd instead of using -k (#46492)
  - behave sanely if ifup called when dhcpcd is running (#49392, #51038)


author: Than Ngo <than@redhat.com>
changelog:
  - don't set MSN if it' empty (it's now optional)
  - don't give login name as a cmdline-option (Bug #23066)
  - remove peer device file if ppp connection is down
  - fix channel bundling


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add is_available() network function, use it; cleans up ugly modprobe
    error messages
  - update translation info
  - fix #51787


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix a broken call to check_device_down
  - make all loopback addresses have host scope, not global scope.
    Fixes #49374, possibly others


author: Bill Nottingham <notting@redhat.com> 6.31-1
changelog:
  - message un-tweaks (<johnsonm@redhat.com>)
  - make getkey more useful, fix some of the autofsck stuff (<johnsonm@redhat.com>)


author: Than Ngo <than@redhat.com>
changelog:
  - add ISDN patches from pekkas@netcore.fi and pb@bieringer.de (bug #52491)
  - fix handling of ISDN LSZ Compression


author: Mike A. Harris <mharris@redhat.com> 6.55-1
changelog:
  - Removed process accounting stuff from rc.sysinit and halt scripts as it is
    now handled by the psacct initscript in the psacct package


author: Bill Nottingham <notting@redhat.com> 6.56-1
changelog:
  - use nameif for interfaces where we don't agree on HWADDR with the
    config file (<harald@redhat.com>)
  - LSB support tweaks


author: Bill Nottingham <notting@redhat.com> 6.62-1
changelog:
  - delete X/VNC locks on startup (#63035)
  - shut up DMA disabling, move it to after ide-scsi (#62873, #62956)
  - use full path to /sbin/ifconfig (#59457)
  - /sbin/service: change to root directory before staring/stopping;
    also sanitize environment


author: Bill Nottingham <notting@redhat.com> 6.63-1
changelog:
  - ipcalc cleanups (#58410)
  - quit stripping binaries
  - do LVM init after RAID init too (#63238)
  - export all locale variables (#56142)
  - run sysctl -p after network init as well


author: Bill Nottingham <notting@redhat.com> 6.64-1
changelog:
  - make sure chatdbg is set before using it (#63448, <Bertil@Askelid.com>)
  - allow tweaking of more devices with hdparm (#53511), and
    tweak non-disk devices iff they explicitly have a config file
    for that device (#56575, #63415)
  - some translation updates


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - start some sh coding cleanups
  - change to /etc/init.d/functions
  - eliminate some un-necessary PATH settings
  - eliminate some TEXTDOMAIN settings


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - rc.sysinit: do not load raid modules unless /etc/raidtab exists
  - many cleanups for more consistent shell programming and also
    many smaller speedups within network scripts, no un-necessary sourcing
    of files etc
  - nearly re-code /etc/rc.d/rc


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - allow an option for ups poweroff  #68123
  - change grep for ONBOOT=  #63903
  - allow building with a cross-compiler  #64362,#64255
  - faster check in network-functions:check_default_route()
  - better checks for backup files
  - drastically reduce the number of consoletype invocations
  - do not export "GATEWAY" in network-functions
  - code cleanups in rc.sysinit


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - /etc/init.d/functions:
    daemon(): avoid starting another bash
    killproc(): avoid starting another bash for the default case
  - do not call "insmod -p" before loading the "st" module


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - /sbin/service: set PATH before calling startup scripts
    HOME and TERM are also set during bootup, but they should not make
    a difference for well-written daemons.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - require /etc/redhat-release (#68903)
  - fix tty2-tty6 (sort of)
  - fix iptables invocations (#70807, #71201, #68368)
  - other minor tweaks


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't cycle through eth0-eth9 on dhcp link check (#68127)
  - don't retry indefinitely on ppp startup
  - activate network profile passed on kernel commandline via netprofile=
  - fix iptables invocations again
  - translation refresh


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't infinite loop on ifdown
  - remove disabling of DMA; this can cause problems
  - move swap startup to after LVM (#66588)


author: Bill Nottingham <notting@redhat.com> 6.96-1
changelog:
  - fix various static-routes brokeness (#74317, #74318, #74320, #76619,
    - fix handling of SYSFONTACM in setsysfont (#75662)
  - fix lang.csh for CJK (#76908, <ynakai@redhat.com>)
  - IPv6 update (<pekkas@netcore.fi>, <pb@bieringer.de>)
  - other minor tweaks


author: Bill Nottingham <notting@redhat.com> 6.97-1
changelog:
  - IPv6 update (<pekkas@netcore.fi>, <pb@bieringer.de>)
  - devlabel support (<Gary_Lerhaupt@Dell.com>)
  - do lazy NFS umounts


author: Bill Nottingham <notting@redhat.com> 7.00-1
changelog:
  - tweaks for potential GUI bootup
  - loop checking for network link state, don't unilterally wait five
    seconds


author: Bill Nottingham <notting@redhat.com> 7.03-1
changelog:
  - move system font setting sooner (<milan.kerslager@pslib.cz>)
  - fix link checking for dhcp, use both ethtool and mii-tool
  - fix CJK text on the console, and locale-archive held open
    on shutdown
  - IPv6 updates <pekkas@netcore.fi>, <pb@bieringer.de>
  - speedup tweaks (<drepper@redhat.com>)
  - use glib2 for ppp-watch (#78690, <kisch@mindless.com>)
  - add zeroconf route (#81738)
  - fix ifup-ppp for dial-on-demand, and onboot (<goeran@uddeborg.pp.se>)
  - tweak raidtab parsing, don't worry about not-in-fstab RAID devices
    (#71087, #78467, <aja@mit.edu>)
  - don't automatically bring up aliases if 'ONPARENT=no' is set (#78992)
  - getkey cleanups/tweaks (#76071, <ben@enchantedforest.org>)
  - rework halt_get_remaining (#76831, <michal@harddata.com>)
  - ipcalc: fix calculation of /32 addresses (#76646)
  - various other tweaks and fixes


author: Bill Nottingham <notting@redhat.com> 7.04-1
changelog:
  - tweak some translatable strings
  - fix for rc.sysinit on machines that pass arguments to mingetty
    (<nalin@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.07-1
changelog:
  - fix nicknames & profiles (#82246)
  - fix check_device_down (#83780, <pzb@datstacks.com>)
  - vlan fixes (<tis@foobar.fi>)
  - fix groff macros (#83531, <tsekine@sdri.co.jp>)
  - various updated translations
  - fix checkpid for multiple pids (#83401)


author: Bill Nottingham <notting@redhat.com> 7.08-1
changelog:
  - load keybdev & mousedev even if hid is already loaded/static
  - run fewer scripts through action (#49670, #75279, #81531)


author: Bill Nottingham <notting@redhat.com> 7.09-1
changelog:
  - initialize two ttys past # of mingettys (for GDM)
  - fix zeroconf route
  - redhat-config-network writes $NAME.route for some static routes
    (e.g., ppp); handle that (#84193)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - init.d/network: don't advertise "probe: true" in the header if we don't
    recognize "probe" as an argument


author: Karsten Hopp <karsten@redhat.de> 7.15-1
changelog:
  - Mainframe has no /dev/ttyX devices and no mingetty, don't
    initialize them. This gave error messages during startup


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - sysconfig/init.s390: set LOGLEVEL=3 as for other archs
  - rc.d/init.d/network, rc.d/rc: change confirmation mode to
    not use an environment variable
  - rc.d/init.d/functions: make strstr() even shorter, remove old
    "case" version that has been already commented out
  - rc.d/rc.sysinit:
    - no need to set NETWORKING=no, it is not used/exported
    - do not export BOOTUP
    - delete two "sleep 1" calls that wants to add time to go
      into confirmation mode. There is enough time to press a
      key anyway or use "confirm" in /proc/cmdline.
    - read /proc/cmdline into a variable
    - use strstr() to search in /proc/cmdline
    - add "forcefsck" as possible option in /proc/cmdline
    - while removing lock files, no need to call `basename`
    - add unamer=`uname -r` and reduce number of forks
    - do not fork new bash to create /var/log/ksyms.0


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - initscripts-s390.patch: remove not needed parts about PNP=
  - inittab.390: sync with normal version
  - rc.sysinit: remove two further calls to /sbin/consoletype with $CONSOLETYPE


author: Bill Nottingham <notting@redhat.com> 7.25-1
changelog:
  - fix DNS punching in the case of other rules for the DNS server
    (#97686, <martin@zepler.org>)
  - initlog, ppp-watch, and usernetctl tweaks (<linux_4ever@yahoo.com>)
  - fix grep for mingetty (#97188)
  - fix rhgb-client bad syntax
  - change network device searching, use correct naming, fix route issues
    (<harald@redhat.com>)
  - other random tweaks


author: Bill Nottingham <notting@redhat.com> 7.26-1
changelog:
  - ipsec support (see sysconfig.txt, ifup-ipsec)
  - read $CONFIG.keys, for non-world-readable keys
  - allow default window size for routes to be set with WINDOW= (#98112)
  - support setting device options with ethtool opts
  - fix s390 bootup spew (#98078)
  - support renaming interfaces with nameif based on hwaddr


author: Bill Nottingham <notting@redhat.com> 7.27-1
changelog:
  - add a check to consoletype for the current foreground console
  - use it when running unicode_start (#98753)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ifup-routes: pass the interface name to handle_file() so that we don't try
    to use the routes file's name as an interface name


author: Bill Nottingham <notting@redhat.com> 7.29-1
changelog:
  - setsysfont: don't echo to /dev/console (#102004)
  - fix ethernet device renaming deadlock (#101566)
  - consoletype: don't return 'vt' on vioconsole (#90465)
  - ifup: fix short-circuit (#101445)


author: Bill Nottingham <notting@redhat.com> 7.31-1
changelog:
  - fix bonding + dhcp (#91399)
  - fix typo (#103781)
  - sysconfig/network-scripts/ifup: fix use of local

  - fix shutdown with NFS root (#100556, <Julian.Blake@cern.ch>)
  - remove /var/run/confirm when done with /etc/rc (#100898)
  - ipcalc: fix some memory handling (#85478, <miked@ed.ac.uk>)
  - handle sorting > 10 network devices (#98209)
  - unset ONPARENT after use (#101384)
  - random other fixes
  - bridging support (<dwmw2@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.44-1
changelog:
  - NFSv4 support (<chucklever@bigfoot.com>, <steved@redhat.com>)
  - handle 2.6-style 'install ethX ...' lines correctly
  - mount sysfs by default
  - time to clean up the cruft. remove:
    - boot-time depmod
    - linking of /boot/System.map to /boot/System.map-`uname -r`
    - /var/log/ksyms.X
    - libredhat-kernel support


author: Bill Nottingham <notting@redhat.com> 7.47-1
changelog:
  - translation: catch more input strings (#106285, <mitr@volny.cz>)
  - remove autologin from prefdm (#108969)
  - return to rhgb after ./unconfigured (#109807, <jkeating@j2solutions.net>)
  - handle iso15 in setsysfont (#110243)
  - clean up samba & vmware in rc.sysinit (#113104)
  - some sysconfig.txt documentation (#110427, #118063)
  - fix bug in umount-on-halt (#113088, <giardina@airlab.elet.polimi.it>)
  - handle CIFS in netfs (#115691)
  - make sure hotplug isn't stuck unset (#116666, <aoliva@redhat.com>)
  - handle network fs better in rc.sysinit (#111290)
  - nomodules applies to usb/firewire too (#113278)
  - ipsec fix (#116922, <felipe_alfaro@linuxmail.org>)
  - make sure rc exits cleanly (#117827, <enrico.scholz@informatik.tu-chemnitz.de>)
  - fsck root FS from initrd, for dynamic majors (#117575, <sct@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.49-1
changelog:
  - use alsa for mixer saving in halt
  - don't umount /proc in halt (#118880)
  - various translation updates from translators


author: Bill Nottingham <notting@redhat.com> 7.50-1
changelog:
  - fix LVM issues in rc.sysinit (#120458, #119975)
  - deal with fixed racoon parser
  - translation updates from translators
  - fix USB loading (#120911)


author: Bill Nottingham <notting@redhat.com> 7.51-1
changelog:
  - get rid of LVM error when no volumes are defined (#121197)
  - fix selinux short-circuit test (#121143, <michal@harddata.com>)
  - /dev/mapper/control is a special file, check it accordingly (#121963)
  - support ETHTOOL_OPTS on bonding slaves (#119430, <hrunting@texas.net>)
  - handle multiple spaces correctly in rc.sysinit, network-functions
    (#118583, <pallas@kadan.cz>)
  - cleanup fd leaks, mem leaks, other bogosities
    (#119987, <linux_4ever@yahoo.com>)
  - rc.d/init.d/network: remove ipv6 bogosity (#114128)
  - translation updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix bridging confusing module order (#122848, <luto@myrealbox.com>)
  - rc.d/rc.sysinit: don't mount cifs (#122501)


author: Bill Nottingham <notting@redhat.com> 7.58-1
changelog:
  - rc.d/rc.sysinit: hack: make ICE directory on boot (#86480)
  - set devicetype for xDSL (#126194)
  - ignore locking failures when starting lvm volumes (#126192, <radu@primit.ro>)
  - unset LC_MESSAGES for rhgb (#126020, <ynakai@redhat.com>)
  - bonding fixes
  - setsysfont: remove error (#100559)
  - remove duplicate setting of network routes (#125450)
  - vlan fixes (#107504, <hrunting@texas.net>)
  - ifup-aliases: remove bogus route setting (#120908)


author: Bill Nottingham <notting@redhat.com> 7.59-1
changelog:
  - set context on ICE directory after making it (#127099, <concert@europe.com>)
  - don't mount GFS filesystems in rc.sysinit


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix bonding + no IP (#127285)
  - wrap second LVM initialization in vgscan check to avoid extraneous messages (#127639)


author: Bill Nottingham <notting@redhat.com> 7.62-1
changelog:
  - fix up resolv.conf munging (#129921)
  - use rngd if available
  - run start_udev if necessary (#120605)
  - readonly root updates (#129893, <markmc@redhat.com>)
  - ifup-wireless: quote key (#129930)
  - remove rawdevices (#130048)
  - handle binfmt_misc in rc.sysinit for the case where it's built in (#129954)
  - remove mkkerneldoth
  - don't remove linguas in lang.* (part of #9733)
  - fix nfs unmounting (#129765)
  - fix URL (#129433)


author: Jason Vas Dias <jvdias@redhat.com> 7.66-1
changelog:
  - Allow users to use generic /etc/dhclient.conf if per-device
  - /etc/dhclient-${DEVICE}.conf is non-existent or empty


author: Jason Vas Dias <jvdias@redhat.com> 7.67-1
changelog:
  - fix change_resolv_conf: if pre-existing /etc/resolv.conf
  - non-existent or empty, replace with new file contents.


author: Bill Nottingham <notting@redhat.com> 7.70-1
changelog:
  - autoload hardware modules on startup
  - minor fsck cleanup (#115028, <leonard-rh-bugzilla@den.ottolander.nl>)
  - ifup: support STP bridging (#123324)
  - rc.sysinit: do a SELinux relabel if forced
  - rc.sysinit: remove devfs compat and the remaining 2.4 compat
  - ifup-wireless: support multiple keys (#127957)
  - fix firmware loading (#129155, <bnocera@redhat.com>)


author: Jason Vas Dias <jvdias@redhat.com> 7.73-1
changelog:
  - Add support for running the DHCPv6 client to ifup
  - (new DHCPV6C=yes/no ifcfg-${IF} variable) + update sysconfig.txt


author: Bill Nottingham <notting@redhat.com> - 7.77-1
changelog:
  - mount usbfs (#131347)
  - start any automatic raid devices
  - remove triggers for ancient releases, bulletproof remaining ones (#131356)


author: Dan Walsh <dwalshg@redhat.com> - 7.78-2
changelog:
  - fix setting SELinux contexts on udev-created-in-initrd devices
  - Let restorecon check if selinux is enabled.


author: Bill Nottingham <notting@redhat.com> - 7.82-1
changelog:
  - fix handling of nonexistent devices (#132839)
  - rhgb enhancements (<veillard@redhat.com>, #132665)
  - initscripts.spec: require nash (#132513)
  - translation updates


author: Bill Nottingham <notting@redhat.com> - 7.85-1
changelog:
  - ifup, network-functions: fix worked-by-accident shell quoting
  - lang.csh: remove setting of dspmbyte (#89549, <mitr@redhat.com>)
  - SELinux fixes
  - clean up prefdm
  - init.d/functions: export LC_MESSAGES (#133786)
  - allow daemon to coredump if requested (#130175)
  - network-functions: be more liberal in what we accept for link types (#90602, #127984)
  - fix overzealousness with -range aliases (#65415)
  - rc.sysinit: use s-c-keyboard, not kbdconfig (#133929)
  - fix checkpid logic, clean up potential errors (#134030)
  - translation updates


author: Bill Nottingham <notting@redhat.com> - 7.86-1
changelog:
  - use /etc/hotplug/blacklist to blacklist modules in hardware init (#132719)
  - filter indic locales on the console (#134198)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - use runuser instead of su; require it
  - init.d/halt: use right file name for random seed (#134432)


author: Bill Nottingham <notting@redhat.com> 7.91-1
changelog:
  - rc.d/rc.sysinit: remove devlabel call
  - mdadm support, now that raidtools is gone (#126636, #88785)
  - call ipv6to4 scripts in /etc/ppp/(ip-up|ip-down) (#124390, <dwmw2@redhat.com>)
  - cleanup a couple of nits that could affect bug #134754
  - make sure we return to rhgb after fsck (#133966, #112839, #134449)
  - automatically reboot when fsck calls for it, instead of requiring
    manual intervention (#117641 and duplicates)
  - ifup-wireless: fix key for open vs. restricted (#135235, <dax@gurulabs.com>)
  - translation updates


author: Bill Nottingham <notting@redhat.com> 7.93.2-1
changelog:
  - fix prefdm fallback to installed display managers (#137274)
  - fix incorrect rhgb temporary path (#137391)


author: Florian La Roche <laroche@redhat.com>
changelog:
  - /etc/rc.d/rc: use "LC_ALL=C grep" for small speedup
  - /etc/rc.d/rc.sysinit:
    - do not read udev.conf, this seems to be all in the start_udev script
    - fix detection of "nomodules" kernel command line option
    - read /proc/cmdline earlier and convert rhgb to use that, too
    - load_module(): change redirection to /dev/null
    - some checks for RHGB_STARTED="" looked strange
  - /etc/sysconfig/network-scripts/ifup-ppp:
    - remove a call to basename with shell builtins
  - /etc/sysconfig/network-scripts/network-functions:
    - remove some calls to basename/sed with shell builtins


author: Bill Nottingham <notting@redhat.com>
changelog:
  - take an axe to rc.sysinit:
    - remove delay on unclean startup
    - remove hdparm code
    - remove LVM1 code
    - remove old raidtab code in favor of mdadm
    - remove support for old isapnp tools
    - move all block device mangling before fsck. run fsck *once*, not twice
    - some more LC_ALL=C stuff


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix check_link_down to still check negotiation if link is
    listed as "up" on entering (#110164, <dbaron@dbaron.org>)


author: Bill Nottingham <notting@redhat.com> 7.98-1
changelog:
  - various kmodule speedups
  - rc.d/init.d/netfs: don't mount GFS (#140281)
  - fix various minilogd bogosities (#106338)


author: Bill Nottingham <notting@redhat.com> 8.02-1
changelog:
  - remove initlog, minilogd
  - add a flag to kmodule for use with kudzu's socket mode, use it
  - change setting of IPv6 default route (#142308, <pb@bieringer.de>)
  - netfs: don't unmount NFS root FS (#142169)


author: Bill Nottingham <notting@redhat.com> 8.03-1
changelog:
  - use udevsend to handle hotplug events (requires recent udev)
  - remove pump, dhcpcd support
  - fix ONxxx (#136531, <cww@redhat.com>)
  - fix various fgreps to not catch commented lines (#136531, expanded
    from <cww@redhat.com>)
  - set ETHTOOL_OPTS on addressless devices (#144682, <mpoole@redhat.com>)
  - kill dhcp client even if BOOTOPROTO is now static (#127726, others)
  - replace the use of route/ifconfig with ip in IPv6 code, remove support
    for ipv6calc (<pb@bierenger.de>, <pekkas@netcore.fi>)
  - fix quoting in daemon() (#144634)
  - make sysctl be silent (#144483)


author: Bill Nottingham <notting@redhat.com> 8.04-1
changelog:
  - split out ifup/ifdown general case to ifup/ifdown-eth;
    add ifup/ifdown-bnep (<dwmw2@redhat.com>)
  - ifup-ipsec: add fwd policies (#145507)
  - fix multiple scsi_hostadapter loads (#145432)
  - enable syncookies in sysctl.conf (#145201)


author: Bill Nottingham <notting@redhat.com> 8.05-1
changelog:
  - ipv6 cleanups (<pb@bieringer.de>)
  - rc.sysinit: fix rngd check (#130350)
    ... then turn it off entirely
  - rc.sysinit: get rid of duplicate date printout (#149795)
  - ifdown: handle being called on down devices better
  - handle saved resolv.conf on all device types
  - fix network-functions cleanup
  - netfs: fix _netdev unmounting (#147610, <alewis@redhat.com>)
  - dhcp release cleanups (<jvdias@redhat.com>)
  - ifup-bnep: bluetooth update <dwmw2@infradead.org>
  - more ipsec stuff (#147001, <ckjohnson@gwi.net>)


author: Bill Nottingham <notting@redhat.com> 8.06-1
changelog:
  - handle alternate VLAN naming schemes (#115001, <kas@informatics.muni.cz>)
  - ifup-ipsec: handle non-ascii keys (#150552)
  - add proper ipsec route (#146169, #140654)
  - add a restorecon for /tmp to rc.sysinit
  - document ONHOTPLUG in sysconfig.txt
  - fix mistranslation (#151120)
  - don't return 1 for stopping a process if it isn't running at all
  - don't explicitly set fwd polices for ipsec traffic. Let setkey
    handle it.


author: Bill Nottingham <notting@redhat.com> 8.08-1
changelog:
  - update translation base
  - automatically send hostname for DHCP if it's available and not
    overridden (#149667)
  - load user-defined module scripts from /etc/sysconfig/modules at
    boot (#123927)
  - halt: reverse sort the mount list, avoiding errors
    (#147254, <jamesodhunt@hotmail.com>)
  - ifup-wireless: add SECURITYMODE (#145407)
  - network-functions: don't error out if hotplug doesn't exist (#140008)
  - ifup: always return errors on trying to bring up nonexistent devices (#131461)
  - ifup: fix error message (#143674)
  - rc.sysinit: add an autorelabel boot target (#154496)
  - prefdm: if something else is specified as $DISPLAYMANAGER, try that (#147304)
  - remove support for the old firewall type
  - network: optimize some (#138557, <drepper@redhat.com>)
  - prefdm: fix prefdm arg handling (#154312, <khc@pm.waw.pl>)
  - gdm early-login support (adapted from <rstrode@redhat.com>)
  - ifup-routes: make sure commented lines are handled correctly (#154353,
    - some sysconfig.txt updates (<link@pobox.com>, <jvdias@redhat.com>)
  - rc.sysinit: fix restorecon invocation (#153100)
  - initlog: free some of the more egregious memory leaks (#85935)
  - initlog: fix potential memory overread (#153685, <in-redhat@baka.org>)
  - remove some conflicts, %post scripts, etc. that were only relelvant
    for upgrades from pre-7.0
  - other minor fixes, see ChangeLog


author: Bill Nottingham <notting@redhat.com> 8.09-1
changelog:
  - rc.sysinit: clean up screen sockets (#155969)
  - functions: use pidof -c in various functions
  - ifup-ppp: fix static routes with ppp demand dialing (#20142,
    <ohrn+redhat@chalmers.se>)
  - add btmp support (#155537)
  - don't send dhcp hostname (revert of fix for #149667)
  - more early-login modifications (<mclasen@redhat.com>)
  - functions: fix echo (#155270)


author: Bill Nottingham <notting@redhat.com> 8.11-1
changelog:
  - fix mis-bringup of interfaces due to accidentally matched HWADDR
    (a.k.a. ONBOOT=no not working) (#153669, #157252)
  - support automatic relabeling later if rebooted w/o SELinux
    (<dwalsh@redhat.com>)
  - rc.sysinit: fix fixfiles invocation (#157182)
  - btmp should be 0600 (#156900)
  - translation updates: fr, bg, ru, mk, pa, es


author: Bill Nottingham <notting@redhat.com> 8.12-1
changelog:
  - ifup-eth: fix interface renaming (#158774)
  - rc.sysinit: use modprobe, not insmod (#159120, <tmus@tmus.dk>)
  - remove workaround for the fonts-not-initialized-on-secondary-consoles
    problem (fixed in 2.6.12-rc4 and later)
  - setsysfont: correctly bracket systfontacm (#159706)
  - rc.sysinit: always use udevsend, even if no modules (#160987)
  - ifdown-aliases: add 'cd' to the proper dir (#161170)
  - add diskdump restore support (<tuchida@redhat.com>),
    conflict with appropriate diskdumputils
  - rc.sysinit: dmraid/multipath support
    - remove LVM1 support
  - init.d/functions: handle odd quoting in args (#161316, <stransky@redhat.com>)
  - ifup-wireless: set rate in quotes (#163123)
  - handle lvm & fsck for network block devices (#148764,
    <alewis@redhat.com>)
  - initlog: fix invalid free calls,  (#165033), (#163973,<dwalsh@redhat.com>)
  - sysconfig.txt: remove hdparm docs, since the code isn't there (#162962)
  - updated translations: ms, ja, ko, et, zh_CN, zh_TW, sr, ar


author: Bill Nottingham <notting@redhat.com>
changelog:
  - kmodule: don't probe for uninteresting devices. speeds things up
  - network-functions: deal with broken networks better (#168947)
  - rc.sysinit: automatically reboot if labels are really out of date
    (<dwalsh@redhat.com>)
  - network-functions: throw out nameif error messages
  - rc.sysinit: use multipath.static (#168321)
  - rc.sysinit: use ignorelocking (#168195)


author: Bill Nottingham <notting@redhat.com> 8.17-1
changelog:
  - make sure corefile limiting works for user processes as well
    (#166511, <ville.skytta@iki.fi>)
  - ifup-routes: handle no EOF in the route file (#156972)
  - rc.sysinit: tweak mesage (#156972)
  - ifdown-eth: clean up error message (#135167)
  - rc.sysinit: call kpartx on multipath devices (#160227)
  - ifup-eth: move wireless options before bridge options (#122801)
  - ifup-wireless: silence error (#90601)
  - init.d/functions: change translated string (#54682)


author: Bill Nottingham <notting@redhat.com> 8.19-1
changelog:
  - Require syslog, for alternate implementations thereof (#172885)
  - Fix fsck invocation for weeding out netdev devices (#175803)


author: Bill Nottingham <notting@redhat.com> 8.21-1
changelog:
  - move handling of network hotplug events here, add appropriate udev
    rules, obsolete hotplug
  - get rid of some path lookups (#178321, <mclasen@redhat.com>)
  - get hwaddrs from sysfs as opposed to ip | sed
  - translation updates
  - lang.sh: don't run unicode_start for subshells (#176832)
  - halt: ignore sysfs but not /sys<otherstuff> (#177612, <bnocera@redhat.com>)
  - add service(8) man page (#44857) <mitr@redhat.com>


author: Bill Nottingham <notting@redhat.com> 8.22-1
changelog:
  - remove references to /usr/X11R6/bin (#177938)
  - rc.sysinit: fix SELinux message formatting (#178532)
  - rc.sysinit: clean cvs as well (#178539, <ville.skytta@iki.fi>)
  - init.d/halt: move halt.local so that it runs before /  is remounted r/o (#179314)
  - rc.sysinit: don't activate already active dmraids (<pjones@redhat.com>)
  - rc.sysinit: don't mount usbfs, libusb no longer uses it
  - init.d/functions: Add -p to status() (#134363, <mitr@redhat.com>)
  - init.d/functions: Separate /var/run/*.pid handling and pidof calls
    to private functions (#63440, <mitr@redhat.com>)
  - init.d/functions: update for current LSB, including -p pidfile
    (#99325, #134363, <mitr@redhat.com>, <tobias.burnus@physik.fu-berlin.de>)
  - getkey: various cleanups, add man page (#54481, <mitr@redhat.com>)
  - lang.sh: don't always call consoletype (<laroche@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.26-1
changelog:
  - revert "rc.sysinit: don't mount usbfs, libusb no longer uses it" change
  - add some ugly hacks to make sure net hotplug doesn't run after unclean
    shutdown (#177795)
  - don't mount /sys and /proc in rc.sysinit - the initrd already does
    (<pjones@redhat.com>)
  - halt: try to unmount tmpfs filesystems before swapoff (#174000,
    <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.27-1
changelog:
  - translation updates
  - lang.sh: revert fix for #176832, it's broken
  - ifup-aliases fixes (<pjones@redhat.com>,<mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.28-1
changelog:
  - kill nash-hotplug before starting udev (<pjones@redhat.com>)
  - silence warnings on /dev/pts remount (<pjones@redhat.com>)
  - more translation updates


author: Bill Nottingham <notting@redhat.com> 8.30-1
changelog:
  - hotplug: don't cause modules to be reloaded on ifdown/rmmod (#179809)
  - fix endless loops in ifup/ifdown (#177792, #182466)
  - fix enabling of enforcing SELinux mode after relabel (#181893)
  - remove debugging code from ifup-bnep
  - add /proc, /sys mounting back to rc.sysinit
    Note: booting without an initrd is deprecated
  - translation updates


author: Bill Nottingham <notting@redhat.com> 8.32-1
changelog:
  - netfs: fix redirect (#187505)
  - rc.sysinit add forcequotacheck (#168118, <mitr@redhat.com>)
  - functions/pidof: various fixes (#182623, others <mitr@redhat.com>)
  - add support for DHCP on bridges (#125259, <mitr@redhat.com>,
    anders@kaseorg.com>)
  - rc.sysinit: use pidof, not killall (#185429, <pjones@redhat.com>)
  - ppp fixes (#129195, #163950, #92023, <mitr@redhat.com>, <avi@argo.co.il>)
  - ifup/ifdown: unset $WINDOW (#174336, <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.33-1
changelog:
  - support for readonly root
  - rc.sysinit: remove call to zfcpconf.sh - that should be udev rules
  - ifup*: add NETWORKDELAY and LINKDELAY (#176851, <mitr@redhat.com>)
  - rc.sysinit: remove obsolete initrd code (<pjones@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.34-1
changelog:
  - link glib2 dynamically now that it's in /lib, conflict with older
    versions
  - handle cups specially when cleaning /var (#189168)
  - remove ifdown-aliases (<mitr@redhat.com>)
  - ifup-ipsec: fix key handling when only one of AH or ESP is used
    (#166257, <mituc@iasi.rdsnet.ro>)
  - IPv6 updates, including RFC 3041 support (<pb@bieringer.de>)
  - routing fixes, add METRIC support for default routes (#124045, <mitr@redhat.com>)
  - fix handling of mount points with white space (#186713, <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.35-1
changelog:
  - readonly root enhancments (modified from <law@redhat.com>, #193164)
  - encrypted swap, non-root filesystem support (#127378, <mitr@redhat.com, <redhat@flyn.org>)
  - clarify killproc usage (#193711, <mitr@redhat.com>)
  - document BRIDGE= (#192576, <mitr@redhat.com>)
  - rc.sysinit: allow for sulogin instead of automatic relabeling (<dwalsh@rehdat.com>)


author: Bill Nottingham <notting@redhat.com> 8.36-1
changelog:
  - rework automatic swapon - only run if AUTOSWAP=yes, and fix errors
    (#198695, #196179, #196208)
  - redo single so it starts last in runlevel 1, and doesn't kill/start
    services itself
  - add configurable delay for killproc() (#198429, <jorton@redhat.com>)
  - fix loop in rename_device (#199242, <markmc@redhat.com>)
  - rc.sysinit: stateless updates (#197972, <law@redhat.com>)
  - support for copying dhcp leases from initramfs (#198601, <markmc@redhat.com>)
  - readonly-root: SELinux works now in the kernel, allow it
  - init.d/network: don't bring down network if root is on a network device
  - init.d/halt: don't use -i to halt; causes problems with iscsi
  - add support for routing rule-$device (#132252, <mitr@redhat.com>)
  - fix rhgb output (#192604, <tonynelson@georgeanelson.com>)
  - fix crypttab options for LUKS (#197656, <mitr@redhat.com>)
  - ipsec: various fixes & new features (#150682, #168972, <mitr@redhat.com>, <alex@milivojevic.org>)
  - ipsec: add check for IKE_METHOD (#197576, <john_smyth@mail.ru>)
  - rename_device: ignore alias devices, fix race (#186355)
  - ifup/ifdown: don't mark as %config
  - rwtab: some additions/cleanup


author: Bill Nottingham <notting@redhat.com> 8.38-1
changelog:
  - translation updates
  - bring down bonding slaves on ifdown (#199706)
  - support LINKDELAY for dhcp (#191137)
  - netfs: run multipath on netdev devices (#180977)
  - halt: use /proc/mounts instead of /etc/mtab (#198426, <mitr@redhat.com>)
  - rc.sysinit: fix getkey race (#191453, <mitr@redhat.com>)
  - spec cleanups (#188614, <kloczek@rudy.mif.pg.gda.pl>)
  - support aliases on vlan (#193133, <mitr@redhat.com>)
  - clean up ifcfg file handling (<mitr@redhat.com>, <michal@harddata.com>)
  - GRE and IPIP tunnel support (#168990, <mitr@redhat.com>,
    <razvan.vilt@linux360.ro>, <aaron.hope@unh.edu>, <sean@enertronllc.com>)
  - rc.sysinit: don't format encrypted swap always (#127378)
  - don't try to add routes to alias devices (#199825, #195656)


author: Bill Nottingham <notting@redhat.com> 8.39-1
changelog:
  - translation updates
  - Handle partitions on multipath/dmraid better (<pjones@redhat.com>)
  - make /dev/mapper/control ourselves (<pjones@redhat.com>)
  - init.d/network: simplify 'status' call
  - fix actual 169.254 networks (#203591)
  - rc.sysinit: don't run vgscan (#191879)
  - init.d/halt: don't umount /dev/root<foo> (<oblin@mandriva.com>)
  - rc.sysinit: catch more dmraid errors (#200683)
  - support 'tmp' option in /etc/crypttab (#201382, <mitr@redhat.com>,
    <lv@lekv.de>)
  - IPv6 updates (<pb@bieringer.de>, includes a fix for #143452)


author: Bill Nottingham <notting@redhat.com> 8.40-1
changelog:
  - translation updates
  - rename_device: use '__tmpXXXX' instead of 'devXXXX' as a temporary device
    name to avoid any realistic namespace clashes
  - rc.sysinit: set default affinity if specified on commandline (#203359)
  - always pass path to '.' (#206035)
  - run setsysfont, loadkeys always when /dev/tty{0,1} exist (#150769)
  - allow going to a shell when system is shut down cleanly (from <dwalsh@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.41-1
changelog:
  - fix network ipv6 hang (#207137, others)
  - rc.sysinit: change blkid.tab path to /etc/blkid/blkid.tab
  - rename_device: reset DEVPATH also when renaming (#206884, <phil@fifi.org>)
  - sysconfig.txt: clarify onboot/onparent usage


author: Bill Nottingham <notting@redhat.com> 8.42-1
changelog:
  - run rc.sysinit, /etc/rc in monitor mode (part of #184340)
  - use a better check for 'native' services (#190989, #110761, adapted
    from <matthias@rpmforge.net>)


author: Bill Nottingham <notting@redhat.com> 8.43-1
changelog:
  - move ccwgroup initialization to a udev rule (should fix #199139,
    - init.d/functions: don't write to gdmfifo
  - remove unused-since-RHL-7 consolechars code, update docs (#206106)
  - stateless updates (#206331, <law@redhat.com>)
  - translation updates (el, ms, hr, sl)


author: Bill Nottingham <notting@redhat.com> 8.44-1
changelog:
  - separate tmpfs-usage for state from readonly-root
  - set keymap correctly in non-utf8 locale (#167363)
  - setsysfont: run unicode_stop if in non-unicode locale
  - lang.csh/lang.sh: set iutf8 if appropriate (#186961)
  - lang.csh/lang.sh: handle non-utf8 locales correctly (#200100)
  - rc.sysinit: redirect stderr from setsysfont (#209204, indirectly)
  - rwtab: fix iscsi file location (#208864)
  - translation updates: el, da, as, or
  - fix stateless updates (#206331, <law@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.45-1
changelog:
  - lang.csh/lang.sh - do *not* stty iutf8; too much chaos with SIGTTOU
    (reverts: #186961; fixes #209469)
  - translation updates: ms


author: Bill Nottingham <notting@redhat.com> 8.46-1
changelog:
  - ifup-eth: restorecon on moved lease file
  - rc.sysinit: handle "nodmraid" and "nompath" command line options (#209377, <pjones@redhat.com>)
  - revert early-login support (#210836, essentially)
  - blacklist CJKI on the virtual console (#120819)
  - rc.sysinit: use dmraid.static (#211297)
  - use sysfs interface for bonding (#202443, <agospoda@redhat.com>)
  - use /etc/statetab, /etc/statetab.d for local state (#211839, <markmc@redhat.com>)
  - fix or_IN and similar locales (#212219)
  - use SUBCHANNELS as the primary key for s390 network devices (#204803)
  - translation updates


author: Bill Nottingham <notting@redhat.com> 8.47-1
changelog:
  - lang.{sh,csh}: handle sinhalese as well in CJKI clauses (#212438)
  - rc.sysinit: add '--auto=yes' to mdadm invocation (#213671)
  - rename_device: fix incorrect handling of .bak files
  - mount tmpfs with -n (#213132)
  - various SUBCHANNELS related s390 fixage (#204803)
  - lang.{sh,csh}: support iso-8859-8 (#212738, <matan@svgalib.org>)


author: Bill Nottingham <notting@redhat.com> 8.48-1
changelog:
  - add a step to rename any temporarily renamed devices (#208740, #214817)
  - make sure network modules don't get accidentally reloaded (#211474)
  - rc.sysinit: fix dmraid test (#216334)
  - init.d/halt: don't unmount network filesystems
  - ipsec: Add a way to manually manage racoon.conf (#159343, <mitr@redhat.com>)
  - sysconfig.txt: Document ~/.i18n (#199323, <mitr@redhat.com>)
  - some translation updates


author: Bill Nottingham <notting@redhat.com> 8.49-1
changelog:
  - rc.sysinit: remove raidautorn (#219226)
  - ifup-eth: set MACADDR, MTU before initializing bonding slaves, etc (#218792)
  - translation updates: mr, ms, hi, te, ml


author: Bill Nottingham <notting@redhat.com> 8.50-1
changelog:
  - lang.csh, lang.sh: if $LANG is set, don't override it (#229102)
  - initlog.1: fix man page formatting (<esr@thyrsus.com>)
  - network-functions: simplify bonding test (#215887, <herbert.xu@redhat.com>)
  - fix ifup-post when lookup fails (#220318, <hiroshi.fujishima+redhat@gmail.com>)
  - add bridging docs (#221412, <markmc@redhat.com>)
  - release bonding slaves properly (#220525)
  - fix ppp-watch with ONBOOT=yes (#216749)
  - support VLAN_PLUS_VID_NO_PAD (#222975, #223011)
  - remove NETWORKING_IPV6; to disable, use a modprobe rule
  - translation updates: ms, de, el, pt_BR, fi, bs, sr, it, ko


author: Bill Nottingham <notting@redhat.com> 8.51-1
changelog:
  - fix 'Fedora Fedora' in rc.sysinit
  - halt: use kexec -x to not shut down network (#223932, <mchristi@redhat.com>)
  - network_functions: fix is_bonding_device logic (#229643)
  - translation updates: nb


author: Bill Nottingham <notting@redhat.com> 8.52-1
changelog:
  - lang.sh: fix locales where SYSFONT is not the default (#229996)
  - ifup-wireless: properly quote arguments (#234756)
  - readonly-root: add options for mounting state (#234916)
  - rwtab: updates (#219339, <law@redhat.com>)
  - add netconsole init script (#235952)
  - disable link checking when PERSISTENT_DHCLIENT is set (#234075)
  - restore file context on /etc/resolv.conf (#230776, <dwalsh@redhat.com>)
  - ifup-post: only use the first address (#230157, <michal@harddata.com>)
  - ifup-ipsec: allow overriding of my_identifier (#229343, <cmadams@hiwaay.net>)
  - ifup-wireless: set link up before itweaking wireless parameters (#228253)
  - rc.sysinit: restorecon on mount points when relabeling (#220322)
  - init.ipv6-global: cleanup & optimize sysctl usage (#217595)
  - ifup-eth: support ETHTOOL_OPTS on bridge devices (#208043, <bbaetz@acm.org>)
  - network-functions-ipv6: as we don't use NETWORKING_IPV6, silence errors (#195845)
  - fix description (#229919)
  - translation updates


author: Bill Nottingham <notting@redhat.com> 8.53-1
changelog:
  - init.d/halt: use sound saving wrapper from alsa-utils, conflict with
    older versions (#236916)
  - usernetctl: drop user gid (#229372)
  - translation updates: ta, pt_BR, nb, as, hi, de


author: Bill Nottingham <notting@redhat.com> 8.54-1
changelog:
  - translation updates: as, bg, cs, ja, ms
  - redirect bogus errors from cryptsetup to /dev/null <karsten@redhat.com>


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - avoid calling unicode_start unnecessarily often during startup/shutdown which
    causes certain monitor/video card combos to flicker heavily (#237839)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add /etc/networks (#239602)
  - rc.sysinit: fix quotacheck, remove obsolete convertquota (#249003, <tometzky@batory.org.pl>)
  - rc.sysinit: add gfs2 to the 'don't mount here' list (#248985)
  - netfs: check for rpcbind, not portmap (#245595)
  - ifup-eth: set 'primary' later for bonding devices (#236897, <agospoda@redhat.com>)
  - translation updates: cy, en_GB, mk, ml, ms, pl, sk, ta, zh_CN


author: Bill Nottingham <notting@redhat.com> - 8.56-1
changelog:
  - rename_device: fix open() call
  - rc.sysinit: optimize out some excess greps (<harald@redhat.com>)
  - halt: support newer nut syntax, conflict with old versions (#252973, <tsmetana@redhat.com>)
  - fix buildreq from popt -> popt-devel
   - newer popt is in /lib|/lib64 - require it, and link dynamically
  - rc.sysinit: added support for cryptsetup-uuids (bug #242078, <harald@redhat.com>)
  - netconsole: fix status(), assorted other cleanups
  - translation updates: fr, ro, sk


author: Bill Nottingham <notting@redhat.com> - 8.57-1
changelog:
  - work around upstream bash changes (#220087, modified from <nvigier@mandriva.com>)
  - init.d/network: add Should-Start for firewall services
  - ifup-eth: handle arp_ip_target separately (#288151, <agospoda@redhat.com>)
  - rc.sysinit: remove rc.serial support - should be udev rules
  - rc.sysinit: remove acpi module loading - now supported by the kernel automatically
  - fix en_GB translation (#271201)
  - translation updates: as, bn_IN, bg, ca, cs, de, el, es, fi, gu, hi, it, ja, ko, kn, ml,
    mr, nb, nl, pa, pl, pt, pt_BR, ro, sl, sr, sr@Latn, sv, ta, te, zh_CN


author: Bill Nottingham <notting@redhat.com> - 8.58-1
changelog:
  - revert kernel conflict so that xen can still work (#319401)
  - rename_device, 60-net.rules: only suggest an interface name (part of #264901)
  - require newer udev for persistent net rules (part of #264901)
  - don't hang if someone puts a dangling pipe in /etc/rhgb/temp (#251219)
  - genhostid: fix for 64-bit systems (#306811)
  - more bash matching fixes (#220087)
  - translation updates: is, nb


author: Bill Nottingham <notting@redhat.com> - 8.59-1
changelog:
  - rc.sysinit: fix rhgb check
  - prefdm: add wdm section (#248087)
  - init.d/functions, halt: clean up some extraneous delays (#219816)
  - ifup-wireless: set mode before bringing link up (#254046, <linville@redhat.com>)
  - translation updates: pt_BR, hr


author: Bill Nottingham <notting@redhat.com> - 8.61-1
changelog:
  - use lvm, not lvm.static (#429222)
  - ifup-eth: don't do something odd if we find a mac address that
    matches the user-set MACADDR (#251415)
  - rc.sysinit: fix root fs check to catch 'rw,ordered,noatime,etc.' properly
    (#334171)
  - rc.sysinit: Use proper invocations for authconfig, system-config-network
    (#426372, #428202)
  - service: handle unreadable scripts (#427767)
  - initscripts.spec: add requirements for stateless
  - fix perms on /etc/profile.d (#407531, <ville.skytta@iki.fi>)
  - rename_device: handle quoted HWADDR, etc. in ifcfg scripts (#351291)
  - minor stateless fixes
  - Makefile cleanups (from OLPC, <cscott@cscott.net>)
  - translation updates: fr, ru, nb
  - don't endelessly loop on ifdown (#390271)
  - rc.sysinit: - fix encrypted swap partitions with random key
    (<harald@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 8.63-1
changelog:
  - don't start RAID arrays in rc.sysinit, that's done by udev (corollary of #429604)
  - add a NetworkManager-dispatcher script that does netreport on interface changes
  - use udev rules to set the clock, avoiding issues with modular rtcs (#290731)


author: Bill Nottingham <notting@redhat.com> - 8.64-1
changelog:
  - Add a console_init udev helper to do console initialization
  - add /sbin/pidof requirement (#434863)


author: Bill Nottingham <notting@redhat.com> - 8.65-1
changelog:
  - Add a serial console udev/upstart handler (#434764, indirectly)
  - Add some upstart notification for sysv scripts (modified from <cjdahlin@ncsu.edu>, #431231)
  - Handle _rnetdev correctly (#435358, <pjones@redhat.com>)
  - various minor speedups (<arjan@infradead.org>)
  - translation updates: el, fr
  - disable network by default, in favor of NetworkManager


author: Bill Nottingham <notting@redhat.com> - 8.68-1
changelog:
  - netfs: umount 'ncp' filesystems as well (#437117)
  - improve performance of s390 ccw rules (#437110, <mernst@de.ibm.com>)
  - fix consoletype environment leak (#439546)
  - ifdown-eth: make sure NEWCONFIG exists before grepping for it (#390271, continued)
  - console_check: always open with NONBLOCK, clear the serial structs first,
    handle non-16550 ports (<dwmw2@infradead.org>)
  - halt: don't use /etc/sysconfig/clock (#438337)
  - ifup: don't attempt to re-enslave already-enslaved devices (#440077)
  - netfs: run as a NetworkManagerDispatcher script (#439242)
  - netfs: remove $local_fs from the list of provides (making it implicitly provided
    by booting)
  - serial: add a crude hack to wait for runlevels to finish (#437379)
  - serial: frob /etc/securetty when necessary (#437381)
  - add an upstart-specific inittab
  - translation updates: as, bn_IN, cs, de, es, fi, fr, gu, hi, it, ja, kn, ml, mr, nb,
    nl, pa, pl, pt_BR, ru, sk, sr, ta, te, zh_CN


author: Bill Nottingham <notting@redhat.com> - 8.69-1
changelog:
  - Bring up lo whenever it shows up, not just in network/NM
  - fix shutdown-related oddities (#438444)
  - translation updates: el, sr, sr@latin, sv


author: Bill Nottingham <notting@redhat.com> - 8.70-1
changelog:
  - find is now in /bin. Use it. (#192991, #239914, #244941, #442178)
  - require event-compat-sysv for now (#442291)
  - fix serial event to wait properly
  - handle encrypted LVs properly (#441728)
  - add a sit tunnel type (#441635)
  - translation updates: ru


author: Bill Nottingham <notting@redhat.com> - 8.71-1
changelog:
  - adjust to gdm using LANG instead of GDM_LANG (#372151, <rstrode@redhat.com>)
  - rework netfs' check for networking availability to properly handle both network
    and NetworkManager


author: Bill Nottingham <notting@redhat.com> - 8.73-1
changelog:
  - move event-compat-sysv events here, obsolete it
  - fix ctrl-alt-del during rc.sysinit (#444050)
  - fix 'telinit X' from single-user mode (#444001)


author: Bill Nottingham <notting@redhat.com> - 8.74-1
changelog:
  - use full path to /sbin/ip in NetworkManagerDispatcher script (#444378)
  - lang.{sh,csh}: read only user customization if LANG is already set (#372151)


author: Bill Nottingham <notting@redhat.com> - 8.77-1
changelog:
  - NMDispatcher/05-netfs: fix check for default route (#445509)
  - service: don't set $LANG, rely on it to inherit from system locales (#422141)
  - init.d/functions: fix resolve_dm_raid() for older dmraid configs
  - Don't unmount sysfs in halt. (#446292)
  - rc.sysinit: don't try to startup crypto if we can't find the device
  - rc.sysinit: don't echo crypto stuff unless we're actually *doing* something
  - ifup: don't try to rename devices - udev rules are the way to go
  - rc.sysinit: fix typo, and don't restorecon on swap, etc. partitions (#448886)
  - set MALLOC_CHECK_ & MALLOC_PERTURB_ if configured (<pjones@redhat.com>)
  - console_init: support SYSFONTACM correctly, and support UNIMAP (#448704,
    <vvv+fedora@colocall.net>)
  - don't export GRAPHICAL - plymouth is for all modes. also, don't start rhgb
  - fix clock rules to properly handle old-style RTC devices (#447019)
  - translation updates: ko, or, pl


author: Bill Nottingham <notting@redhat.com> - 8.79-1
changelog:
  - fix mcheck stuff to be installed correctly
  - don't do an arping check for loopback interfaces
  - console_init: don't wait (<arjan@infradead.org>)
  - rc: clean up extraneous set -x noise
  - remove references to static dmraid/multipath binaries (#453987)
  - translation updates: lv


author: Bill Nottingham <notting@redhat.com> - 8.80-1
changelog:
  - Fix translation typo (#455804, <ruslanpisarev@gmail.com>)
  - Turn off syncookies
  - Cleanups for proper plymouth support
  - Move the mcheck code to a debugmode package, make it more generic


author: Bill Nottingham <notting@redhat.com> - 8.81-1
changelog:
  - rc.sysinit: Don't use -L in find (#458652, #458504, CVE-2008-3524)
  - ifup: kill more code from loopback bringup


author: Bill Nottingham <notting@redhat.com> - 8.82-1
changelog:
  - refresh translation strings
  - plymouth updates. (#460702, <rstrode@redhat.com>)
  - translation updates: fi, lv, no
  - remove duplicate dependency (#465182)
  - ifup-eth: Change how we set the zeroconf route. (#239609)
  - ifup*: Use 0.0.0.0/0, not 0/0. (#460580)


author: Bill Nottingham <notting@redhat.com> - 8.83-1
changelog:
  - various merge review fixes (#225900)
    Notably: init scripts/network scripts are no longer %config
  - remove some extraneous device-mapper initialization
  - use pidfile in status before calling pidof (#463205)
  - use plymouth directly, not the rhgb-client wrapper
  - move bridging after bonding (#449950, <djuran@redhat.com>)
  - use alsactl to save sound settings. (#462677, <jkysela@redhat.com>)
  - quit plymouth differently (<rstrode@redhat.com>)
  - make sure we don't try and spawn a repair shell when there's no
    tty (#463161)
  - move udev rules to /lib
  - stateless updates (#433702, <harald@redhat.com>)
  - call logger with a full path (#447928, <harald@redhat.com>)
  - translation updates: as, bn_IN, ca, cz, de, es, fi, fr, gu, it, ja,
    lv, mr, nl, or, pa, pl, pt_BR, ru, te, zh_TW


author: Bill Nottingham <notting@redhat.com> - 8.84-1
changelog:
  - override Arabic, Persian, and Hebrew on the console (<alsadi@ojuba.org>)
  - explicitly run mdadm on boot to catch degraded arrays. (<dledford@redhat.com>)
  - fix setting of console font/map (#458362, <ak@sensi.org>)
  - translations updates: hi, kn, nb, sk, sv, ta


author: Bill Nottingham <notting@redhat.com> - 8.85-1
changelog:
  - add some error handling/hiding to netfs NM dispatcher script (#469197)
  - halt: fix code that causes a syntax error on multiple sound cards (#469156)
  - require a new enough udev version to handle where we put the rules
  - exit 0 in /etc/rc.d/rc (#469050)
  - don't set up encrypted devices that have already been set up under different
    names (#462371, <wwoods@redhat.com>)
  - accept either the '+<addr>', or comma-separated addresses for arp_ip_target. (#467954,
    <darcy.sherwood@gmail.com>)
  - translation updates: hu, kn, ko, ml, sr, sr@latin


author: Bill Nottingham <notting@redhat.com> - 8.86-1
changelog:
  - stop plymouth before stopping the runlevel (#467207)
  - fix get_config_by_subchannel (#459044, <harald@redhat.com>)
  - use blkid -l to pick a single most appropriate device (#470027)
  - don't mkswap on halt, as it breaks swap-by-label/UUID (#469823)


author: Bill Nottingham <notting@redhat.com> - 8.87-1
changelog:
  - rename_device: be much faster in the presence of many devices (#480687, <danms@us.ibm.com>)
  - fix switching from targeted to MLS policy (#479054, <dwalsh@redhat.com>)
  - rc.sysinit: don't set $(uname -r) or $(uname -m); they're not used
  - network-functions-ipv6: set MTU correctly for 6to4. (#477976, <ackistler@yahoo.com>)
  - add more entries to rwtab (#476799, <harald@redhat.com>)
  - net.hotplug: Bail out sooner if the network service isn't running
  - init.d/halt: determine reboot/halt via existing INIT_HALT environment variable. (#475227)
  - event.d/serial: add some docs
  - init.d/functions: __pids_var_run: Handle multi-line pid files correctly (#473287)
  - remove support for no longer existing 'brctl setgcint' command. (#360471)
  - add %config back for ifcfg-lo (#472761)
  - rcS/rcS-sulogin: don't match commented lines when finding runlevel (#472717)
  - updated translations: de, sk


author: Bill Nottingham <notting@redhat.com> - 8.89-1
changelog:
  - use a leading path when sourcing files (#482826)
  - netfs: don't unmount nfsd filesystem by accident (#481794, <sprabhu@redhat.com>)
  - bring up ipsec interfaces last (#481733)
  - ifdown-eth: fix bridge + vlan (#481557, <danken@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 8.90-1
changelog:
  - init.d/functions: cgroup support (<jsafrane@redhat.com>)
  - fix various issues with dmraid handling (#485895, <hdegoede@redhat.com>)
  - rc.sysinit: fix typo. (#487926)
  - console_init: loadkeys has a -q option for silent running. Use it.
  - ifup-tunnel: add compatibility for openNHRP tunnels (#486559, <claude.tompers@ieee.lu>)
  - ccw_init: don't re-init an existing device, it causes errors. (#484411, <jpayne@redhat.com>)
  - netfs: use same kpartx arguments as rc.sysinit
  - don't list mtab in rwtab (#457941)
  - translation updates: fi, de, mai


author: Bill Nottingham <notting@redhat.com> - 8.91-1
changelog:
  - fix DHCP reading of options from ifcfg-XXX (#483257)
  - ifdown-eth: clean up bridges on ifdown (#463325, <sean@bruenor.org>)
  - support MD on iSCSI (#480627)
  - remove support for 'ifcfg-foo-bar' configurations that inherit from 'ifcfg-foo'
  - remove slip support
  - translation updates: es, pl, ca, sr, de, sv, pa, pt_BR


author: Bill Nottingham <notting@redhat.com> - 8.93-1
changelog:
  - rc.sysinit: add a disk synchronization point with scsi_wait_scan post-udev (#481470)
  - netfs: drop smbfs support, we don't even ship the module or tools any more
  - setsysfont: honor LC_CTYPE (#487133, <skasal@redhat.com>)
  - prefdm: do fallbacks based on provides of 'service(graphical-login)' (#485751)
  - rc.sysinit: handle multiple IP addresses without choking in the stateless code (#443945)
  - rc.sysinit: catch the right error code from checking for passphrases (#483269, <vladis.kletnieks@vt.edu>)
  - prefdm: handle empty /etc/sysconfig/desktop correctly (#480113)
  - ifup-ipsec: allow use of either ESP only or AH only (#251494, <stijn.tintel@x-tend.be>)
  - ifup-eth: allow passing of arguments to dhcp6c (#437949, <pekkas@netcore.fi>)
  - ifup-eth: fix dhcpv6 when there is no IPv4 configuration (#486507)
  - ifup-ppp: avoid spurious SIGCHLD to pppd (#448881)
  - ifup-eth: add support for creating TUN/TAP devices on the fly (#453973, <scott@zahna.com>)
  - stop plymouth when starting single-user mode. (#491062)
  - add plymouth shutdown script (#473237, <jmccann@redhat.com>)
  - fix lang.sh/lang.sh/consoletype for execution with '-e'
  - ifdown-eth: remove arp_ip_target on ifdown for bonding devices. (#483711)
  - add vlan support for s390 HSI interfaces. (#490584)
  - ipcalc: support IPv6 (#464268, <dcantrell@redhat.com>)
  - translation updates: all


author: Bill Nottingham <notting@redhat.com> - 8.94-1
changelog:
  - prefdm: add simple fallbacks, sort rpmdb query for consistency (#494461)
  - translation updates; bn, de, pt, ru, te


author: Bill Nottingham <notting@redhat.com> - 8.95-1
changelog:
  - don't kill runlevel events on subsequent entering of the same runlevel (#498514)
  - lang.*sh: handle spaces in $HOME (#498482)
  - network-functions: explicitly source from the proper directory. (#496233)
  - remove persistent names on sys-unconfig. (#448322)
  - init.d/functions: cgexec has moved to /bin (#495715)
  - allow changing of VLAN type even if the module is already loaded. (#495053, <pietro@bertera.it>)
  - translation updates: fr, ml, pt


author: Bill Nottingham <notting@redhat.com> - 8.96-1
changelog:
  - fix up upstart rules for s390(x). (#515222)
  - leave ChangeLog in the tarball only. (#515012)
  - disable netfilter on bridged interfaces. (#512206)
  - assorted shell-related cleanups to ipv6 and other code (<victor.lowther@gmail.com>)
  - use resolv.conf from dracut netboot before setting hostname. (#514801, <wtogami@redhat.com>)
  - ipcalc updates (<victor.lowther@gmail.com>)
  - only use ethtool for link checking; no more mii-tool
  - require /sbin/blkid directly, as it moves between packages (#508413)
  - redirect bash errors on 'unset' to /dev/null. (#482888)
  - fix dmraid partition naming (#501476, <hdegoede@redhat.com>)
  - don't quote upstart signals. (#501155)
  - translation updates: bn_IN, da, es, sk


author: Bill Nottingham <notting@redhat.com> - 8.97-1
changelog:
  - ipcalc: fix IPv6 address checking (#516319)
  - ifup-aliases: fix syntax error from earlier cleanups. (#515612, <jik@kamens.brookline.ma.us>)
  - translation updates: nb
  - rc.sysinit: remove useless call to pam_console_apply


author: Bill Nottingham <notting@redhat.com> - 8.98-1
changelog:
  - sysconfig.txt: doucment DHCP_HOSTNAME (#498052)
  - 88-clock.rules: Use --systz instead of --hctosys. (#517886, #489494)
  - Support rwtab and state passed from dracut initrd (#515771, <wtogami@redhat.com>)
  - restore context of *tmp files (#519748)
  - halt: don't try and save mixer settings if it's not writable. (#515771)
  - rwtab: add /var/spool, /var/lib/dbus, others (#494973, #515771)
  - sysconfig.txt: clarify docs (#518614)
  - rc.sysinit: don't pretend /selinux is configurable (#518164)
  - assorted ipv6 redundant code deletion
  - translation updates: bn, ca, de, es, fi, fr, gu, hi, it, ja, ko, ml, nb, nl, pl, pt, pt_BR, ru, sr, ta, zh_CN, zh_TW


author: Bill Nottingham <notting@redhat.com> - 8.99-1
changelog:
  - init.d/functions: add a '-l' option to status to pass lock file name (#521772)
  - tweak kernel conflict
  - translation updates: as, bn_IN, de, fr, hi, it, hu, kn, mr, or, pa, pt, ru, te


author: Bill Nottingham <notting@redhat.com> - 9.00-1
changelog:
  - halt: wrap /sbin/killall5 to catch some return codes (#526539)
  - netfs, netconsle, network: fix return codes to match LSB spec (#524489, #524480, #524486)
  - handle kernels compiled both with and without CONFIG_RTC_HCTOSYS
  - halt: use killall5's return code to avoid unncesssary sleeping (#524359, <hdegoede@redhat.com>)
  - halt: don't kill mdmon on shutdown. (#524357, <hdegoede@redhat.com>)
  - rc.sysinit: do not try and activate ISW raidsets, unless noiswmd is passed. (#524355, <hdegoede@redhat.com>)
  - translation updates: ca, cs, da, mai, po, sv, uk


author: Bill Nottingham <notting@redhat.com> - 9.01-1
changelog:
  - rc.sysinit: fix handling of dmraid output to avoid error messages (#527726, <mschmidt@redhat.com>)
  - rwtab: add /var/lib/xend (#526046)
  - translation updates: fi, nb, pl


author: Bill Nottingham <notting@redhat.com> - 9.02-1
changelog:
  - remove long-since deprecated initlog
  - remove IUCV support (#507217)
  - halt: put a wrapper around killall5 to account for retval 2 not being an error (#526539, <hdegoede@redhat.com>)
  - ifup-eth: honor DEFROUTE=yes|no for 'all' connection types. (#528822)
  - network-functions: load bonding driver if BONDING_OPTS is defined. (#516569)
  - rc.sysinit: put /dev/shm in mtab too, as dracut now mounts it. (#528667)


author: Bill Nottingham <notting@redhat.com> - 9.03-1
changelog:
  - migrate to upstart 0.6.x (<notting@redhat.com>, <plautrba@redhat.com>)
  -- jobs move to /etc/init
  -- collapse rcX and ttyX jobs into single job definitions
  -- jobs are no longer %config
  - remove obsolete doexec command
  - rc.sysinit: handle yet another random return string from dmraid
  - remove never-used 'sulogin' upstart event
  - fix time-setting udev rules for old-style RTC devices (#537595)
  - init.d/network: keep error codes limited to '1'. (#537841)
  - add initial ifup/ifdown man pages. (#529328, <plautrba@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.04-1
changelog:
  - various shell-related cleanups and optimizations <ville.skytta@iki.fi>
  - ifup-eth: use dhclient's -H option instead of munging dhclient config files
  - rc.sysinit: move mdadm after dmraid (#494821)
  - ifup-eth: use dhclient -6, not the no-longer-included dhcp6c
  - add more man pages (#529328, <plautrba@redhat.com>)
  - move is_wireless after MACADDR/MTU setting (#552638)
  - serial.conf: respawn correctly. (#552324, <zing@fastmail.fm>)
  - network-functions: use sysfs for wireless check (#551019, <adel.gadllah@gmail.com>)
  - reload init on started messagebus (<plautrba@redhat.com>)
  - honor HOTPLUG in ifdown (#547737)
  - network-functions: silence error. (#516569)


author: Bill Nottingham <notting@redhat.com> - 9.05-1
changelog:
  - network-functions: don't use ethtool for link state, assorted other cleanups
  - inittab: fix job paths in comments (<plautrba@redhat.com>)
  - init.d/functions: don't clear environment in runuser (#203010, #564093)
  - 88-clock.rules: use ATTR, not SYSFS (#560756)
  - init.d/network: don't quote regex argument to bash's =~ (<ville.skytta@iki.fi>)
  - network-functions: use HWADDR to determine DEVICE if DEVICE isn't set (#545597)
  - don't HUP init when messagebus starts (#557791)
  - setsysfont: use UNIMAP, not SYSFONTACM, when calling unicode_start (#557089)
  - ifup: don't leave the link down on link failure for DHCP (#462013, #491009)
  - translation updates: cs


author: Bill Nottingham <notting@redhat.com> - 9.06-1
changelog:
  - move ccw_init and ccw udev rules to s390utils (#539491)
  - rc.sysinit: suppress LVM2 warnings.  (#561938, <prajnoha@redhat.com>)
  - fix translated checks for user input (#566579)
  - refresh translations


author: Bill Nottingham <notting@redhat.com> - 9.07-1
changelog:
  - clean out some extraneous package requirements
  - fix dmraid error checking now that dmraid has return codes (#568790, others)
  - integrate with NetworkManager for ifup/ifdown (#523064)
  - translation updates: cs, da, de, en_GB, es, fi, nl, pl, pt_BR, ru, sr


author: Bill Nottingham <notting@redhat.com> - 9.08-1
changelog:
  - network-functions: redirect error messages when nmcli isn't installed (#570828, <zing@fastmail.fm>)
  - ifdown: use nmcli to get the device, if not specified
  - ifdown: fix typo
  - translation updates: fr


author: Bill Nottingham <notting@redhat.com> - 9.09-1
changelog:
  - rc.sysinit: change RAID handling (<dledford@redhat.com>)
  - fix german mistranslation (#575954, <pb@bierenger.de>)
  - init.d/functions: correct fix for environment with runuser. (#203010, #564093)
  - halt: fix mdmom pid handling for newer mdadm (#549726, <dledford@redhat.com>)
  - init.d/network: only blacklist the original loopback interface. (#579816, <evgsyr@gmail.com>
  - translation updates: de, ja, nb, pt, sv, uk


author: Bill Nottingham <notting@redhat.com> - 9.10-1
changelog:
  - fstab-decode.8: fix formatting (#586476)
  - prefdm: add --retain-splash for KDM as well (#585250)
  - init.d/functions: handle being unable to read a specified pid file. (#584575)
  - init/quit-plymouth.conf: use 'task' for stopping plymouth. (<rstrode@redhat.com>)
  - ifup-eth: run dhclient -6 similar to dhclient -4. (#585047)
  - net.hotplug: don't run on odd interfaces. (#584530)


author: Bill Nottingham <notting@redhat.com> - 9.14-1
changelog:
  - clean up plymouth shtudown splash (#590099, <rstrode@redhat.com>)
  - rc.sysinit: use lvm2 --sysinit option (#588777)
  - network-functions: behave sanely in the absence of $DEVICE (#589521)
  - sysconfig/debug: export debug variables (#589378)
  - netfs: check for NM to be connected, not just running (#589710)
  - rcS*.conf: check if /etc/inittab exists (#590703, <plautrba@redhat.com>)
  - port vlan code to /sbin/ip (#566485, <plautrba@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.15-1
changelog:
  - ifup-eth: check for dhclient configuration in /etc/dhcp as well (#607764, #607766)
  - network-functions: handle quoted SUBCHANNELS (#607481)
  - netfs: allow for encrypted network block devices (#605600)
  - ifdown-ipsec: don't use a full path when killing racoon, so it works in MLS policy (#567295)
  - network-functions: check NM_CONTROLLED before deciding to use NM for a connection. (#599707, probably others.)
  - rc.sysinit: always reboot on autorelabel. (#595823)
  - init.d/functions: handle permission denied on reading PID file. (#595597)
  - clean up some deprecated items
  - translation updates: el, nl, or, zh_CN


author: Bill Nottingham <notting@redhat.com> - 9.16-1
changelog:
  - halt: don't umount cgroups (#612789)
  - rename_device: dequote DEVICE key, handle SUBCHANNELS (<harald@redhat.com>)
  - sysconfig.txt: document PREFIX/NETMASK (#617481, <jklimes@redhat.com>)
  - sysconfig.txt: document NETWORKWAIT (#595386)
  - remove support for hotkey interactive startup (#605016). Use 'confirm' on the commandline
    (but even that doesn't fully make sense in an upstart/systemd world)
  - don't directly execute bash for single-user mode (#540216, #584443, #585053)


author: Bill Nottingham <notting@redhat.com> - 9.17-1
changelog:
  - init.d/functions: redirect start/stop/condrestart/etc to systemctl in a systemd environment (#612728)
  - rc.sysinit: don't frob the console loglevel on boot (#621257, #626572)
  - service: use systemctl on systemd services
  - 10-console.rules: only init consoles on add, not change (<lennart@poettering.net>)
  - halt: fix unmounting bind mounts (#620461, <phr@doc.ic.ac.uk>)
  - killall: exit 0 (#605519)
  - translation updates: de, es, fi, fr, nl, pl, sv, uk


author: Bill Nottingham <notting@redhat.com> - 9.18-1
changelog:
  - fix for new cgroups location (#612789, others <plautrba@redhat.com>)
  - add in basic systemd units
  - translation updates: nb, pt, sv


author: Bill Nottingham <notting@redhat.com> - 9.19-1
changelog:
  - fix packaging of prefdm, rc-local systemd units (#630952)
  - systemd/single.service: conflict with shutdown.target (#630935)
  - translation updates: ja, pt_BR, ru


author: Bill Nottingham <notting@redhat.com> - 9.20-1
changelog:
  - use new pidof -m option to avoid false positives (#632321)
  - systemd/single: set $HOME for single-user mode. (#631590)
  - systemd/killal.service: require shutdown.target (#630935, #632198)


author: Bill Nottingham <notting@redhat.com> - 9.21-1
changelog:
  - build for systemd only
  - ship a default.target link in case the one in /etc gets deleted
  - rc.sysinit: reset btmp on boot if necessary (#633768, <dmach@redhat.com>)
  - single.service: fix invocation so that 'runlevel' works (#630914)


author: Bill Nottingham <notting@redhat.com> - 9.22-1
changelog:
  - merge in systemd-specific startup support; package a -legacy package
    (based on work by <harald@redhat.com>)
  - init-ipv6.global: don't load sit module on shutdown. (#654098, <ejsheldrake@gmail.com>)
  - do not call rhgb-client
  - network-functions: add infiniband mapping (#648524, <monis@voltaire.com>)
  - fix ifdown nmcli invocation (#612934, jklimes@redhat.com>)
  - *ipv6*: don't use obsolete /sbin/ip wrapper
  - sysconfig.txt: adjust clock docs (#637058)
  - lang.csh: fix tcsh + grep-2.7. (#636552)


author: Bill Nottingham <notting@redhat.com> - 9.23-1
changelog:
  - don't throw errors on unreadable /dev/stderr (#650103, <plautrba@redhat.com>)
  - support multiple ipv4 addresses, not just alias devices (#132912, #633984, <jklimes@redhat.com>)
  - properly handle /var/run on tmpfs (#656602, <plautrba@redhat.com>)
  - allow '0' as a vlan tag (#624704, #635360)
  - assorted systemd unit cleanup (<lennart@poettering.net>)


author: Bill Nottingham <notting@redhat.com> - 9.24-1
changelog:
  - ifup-eth/ifdown-eth: handle 'MASTER' being quoted. (#651450, <gfidente@redhat.com>)
  - tmpfiles.d: remove entries that exist in systemd
  - frob device when calling sysctl, in case of vlans. (#665601, #667211, <ossman@cendio.se>)
  - netfs: rework to handle bind-mounted cifs/ncpfs (#663140, <dmudrich@nospam.mudrichsystems.com>)
  - own /etc/crypttab (#664309)
  - init.d/network: add # as a valid character in network device names (<Matt_Domsch@dell.com>)
  - ifup-eth: fix routing regression (#660363)
  - sysctl.conf.s390 - system z optimized sysctl settings per default (#633323, <plautrba@redhat.com>)
  - serial.conf, tty.conf: stop tty and serial also on runlevel 's' (#629257, <plautrba@redhat.com>)
  - translation updates: bn_IN, es, gu, hi, nds, or, pa, uk, zh_CN


author: Bill Nottingham <notting@redhat.com> - 9.25-1
changelog:
  - remove 'Red Hat Linux' references from sysctl.conf* (<ville.skytta@iki.fi>)
  - rc.sysinit: add support for sysctl.d (#593211, <martin@laptop.org>)
  - console_check: support OMAP serial console (#678875, <ndevos@redhat.com>)
  - /sbin/service: accept --ignore-dependencies, --skip-redirect as options
  - /sbin/service: honor SYSTEMCTL_IGNORE_DEPENDENCIES (<lennart@poettering.net>)
  - translation updates: kn, pa, ta, uk


author: Bill Nottingham <notting@redhat.com> - 9.26-1
changelog:
  - network-functions: fix check for unmanaged devices (#670154)
  - ifup-eth: also check /dev/.run/initramfs (<harald@redhat.com>)
  - systemd: execute fedora-sysinit-unhack after sysinit.target (<arvidjaar@gmail.com>)
  - init.d/functions: don't do force/lazy umount for the first nfs umount. (#676851, <jlayton@redhat.com>)
  - further sysctl.d fixes (#593211)
  - init.d/functions: make killproc more granular when delay is passed. (#428029, <xjakub@fi.muni.cz>)
  - ifup: add GVRP support (#597598, <tomek@jot23.org>)
  - init.d/functions: add support for noauto crypt devices, to mirror systemd
  - documentation updates
  - bash cleanups (<ville.skytta@iki.fi>)
  - ifup: remove network device naming requirement from VLAN devices (#462095, <Matt_Domsch@dell.com>)


author: Bill Nottingham <notting@redhat.com> - 9.27-1
changelog:
  - init.d/functions: fix mishandled argument to fstab-decode. (#685137)
  - support ipv6 routing rules, merge route/rule code (#680872, <tobiasoed@hotmail.com>)
  - autorelabel.service, loadmodules.service: fix conditions so that they operate as OR, not AND. (#684125)


author: Bill Nottingham <notting@redhat.com> - 9.28-1
changelog:
  - add some generic network logging, port scripts to it (#507515, #653630)
  - add an error when setting the gateway fails (#672202)


author: Bill Nottingham <notting@redhat.com> - 9.29-1
changelog:
  - systemd: add a storage setup service after cryptsetup.target (#692198)
  - fix /.autorelabel handling (<mschimdt@redhat.com>)
  - don't explicitly disallow IPv6 aliases (#583409, #612877)
  - netfs: don't print errors if mdadm isn't installed. (#692187)
  - ifup-eth: use /run/initramfs rather then /dev/.run/initramfs (<harald@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.30-1
changelog:
  - ifup-eth: handle IPADDRx correctly for static addresses (#697838)
  - systemd: fix storage setup service after cryptsetup.target (#699918)
  - prefdm: tweak how plymouth is quit in the gdm/kdm case (<rstrode@redhat.com>)
  - support /etc/hostname as an override for hostname in /etc/sysconfig/network
  - init.d/single: only ship this in -legacy
  - network-functions: fix IPADDRx index handling (<jklimes@redhat.com>)
  - ifup/down-eth: properly handle apr_ip_target, when used with module options (#604669, <harald@redhat.com>)
  - ifup-eth: ensure bond exists before bringing up slaves (#694501)


author: Bill Nottingham <notting@redhat.com> - 9.31-1
changelog:
  - remove ifup/ifdown-ipsec; they're now in ipsec-tools
  - rc.sysinit: start udev by hand, start_udev is no more (#714531)
  - ifup-aliases: if IPv6 is configured on the alias, configure it. (#583409)
  - ifup-eth: ensure DHCP_HOSTNAME is a short hostname, seed it from HOSTNAME if needed. (#697877)
  - network-functions: override NETMASK from PREFIX where specified (#705367, <mpoole@redhat.com>)
  - exclude single symlink from main package (#705457)
  - network: VLAN, etc. interfaces can be slaves; check for being a slave first. (#703475)
  - network: use LC_ALL=C when calling sed. (https://bugs.mageia.org/show_bug.cgi?id=1216, via <sander.lepik@eesti.ee>)
  - functions: (umount_loop) fuser -k defaults to -9; set the initial pass to kill -15. (#703457)
  - init.d/halt: don't match filesystem types in hostnames (#703203, <jmueller@data-tronics.com>)


author: Bill Nottingham <notting@redhat.com> - 9.32-1
changelog:
  - prefdm: if exec() of all DMs fails, call 'plymouth quit' (#735215)
  - %ghost rc.local (but leave it around on upgrade) (#734268)
  - ifup: support random bridging options via BRIDGING_OPTS (#734045, #665378)
  - selinuxfs moved to /sys/fs, handle it (#733759)
  - netfs/fedora-storage-init: call multipath and kpartx with -u (#733437)
  - plymouth lives in /bin (#702814)
  - drop fedora-autoswap
  - ifdown-eth: fix dhclient pid file for IPv6 (#729292, <daveg@dgit.ndo.co.uk>)
  - move some more things to the legacy subpackage
  - netfs: don't mount gfs2 here (#689593)
  - readonly-root: add an empty CLIENTSTATE definition (#725476)
  - drop sysinit hack/unhack
  - ifup-eth: allow more options in ETHTOOL_OPTS (#692410, #693583)
  - rwtab: update for systemd (#704783)
  - debug.csh: fix for latest csh
  - update translations: eu_ES, hy, ku, lo, my, wa


author: Bill Nottingham <notting@redhat.com> - 9.33-1
changelog:
  - netconsole: only use the first ARP response (#744309, <doug.knight@karmix.org>)
  - udev/rules.d/88-clock.rules: drop this entirely, as it causes issues in conjunction with systemd
  - init.d/network: be less picky about ifcfg file names. (#742276)
  - /sbin/service: do not check for the existence of a systemd unit before redirecting (<mschmidt@redhat.com>)
  - init.d/functions: only run consoletype if connected to something that's console-ish. (#657869)


author: Bill Nottingham <notting@redhat.com> - 9.34-1
changelog:
  - read locale.conf if it exists (#706756)
  - ifdown: fix logic error with removing arp_ip_target (#745681)


author: Bill Nottingham <notting@redhat.com> - 9.35-1
changelog:
  - use the same DHCP lease file names as NetworkManager, where appropriate
  - copy network state from initramfs with a systemd service, not inline (<wwoods@redhat.com>)
  - sysconfig.txt: clean up section on disabling IPv6
  - ifup: allow for ifup-$TYPE/ifdown-$TYPE
  - fedora-readonly.service: drop StandardInput=tty (#785662)
  - sysconfig.txt: document additional ETHTOOL_OPTS enhancements (<raghusiddarth@gmail.com>)
  - port assorted ancient ifup-XYZ scripts away from ifconfig
  - don't use ifconfig in ifup-aliases (#721010, 588993, based on <tgummels@redhat.com>)
  - fedora-storage-init: handle dmraid sets with spaces (#728795, <lnykryn@redhat.com>)
  - fedora-readonly: don't exit with an error if SEinux isn't active. (#768628)
  - init.d/network: fix checks for network filesystems (#760018)
  - fedora-wait-storage: drop stdin/stdout/stderr (#735867)
  - netfs: move to legacy package
  - translation updates


author: Bill Nottingham <notting@redhat.com> - 9.36-1
changelog:
  - ifup-aliases: fix IFS usage mangling of device names (#802119)
  - ifup/ifdown: fix typo (#802055, <lubek@users.sourceforge.net>)


author: Bill Nottingham <notting@redhat.com> - 9.39-1
changelog:
  - assorted documentation cleanups
  - typo, spelling, licenese clean up (<ville.skytta@iki.fi>)
  - service: add support for legacy custom actions packaged in
    /usr/libexec/initscripts/legacy-actions/<script>/<action>
  - network-functions: handle quoted HWADDR (#835372)
  - allow bridge names that start with '-' (<danken@redhat.com>)
  - remove all non-legacy uses of /sbin/route (#682308)
  - move default sysctl.conf to /usr/lib/sysctl.d (#760254)


author: Bill Nottingham <notting@redhat.com> - 9.41-1
changelog:
  - debugmode: MALLOC_CHECK_ is not thread safe. Don't enable it by default (#853175)
  - Add support for 256 color terminals (<pbrady@redhat.com>)
  - ifdown-eth: be less strict about VLAN name (#505314, <vpavlin@redhat.com>)
  - drop prefdm
  - ifup-eth: allow duplicate address detection to be disabled (<bcodding@uvm.edu>)
  - process rule6-* for sit devices (#840009, <lnykryn@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.42-1
changelog:
  - Halloween release!
  - add a default /etc/sysctl.conf that describes how to change values, and where the defaults now live. (#760254)
  - translation updates
  - fedora-autorelabel: don't pass -F to fixfiles (#863662, <dwalsh@redhat.com>)
  - fix calling of firewall-cmd in ifup-post/ifdown-post (<jpopelka@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.43-1
changelog:
  - 60-net.rules: explicitly set the interface name (#870859)
  - ifup-eth: set firewall zone before ifup-ipv6 for DHCPv6 (#802415)
  - migrate to /etc/locale.conf, /etc/vconsole.conf (#881923)
  - rename_device: fix bogus locking
  - fix wireless device detection for kernel 3.6 (#875328)
  - drop fedora-storage-init, fedora-wait-storage (<prajinoha@redhat.com>)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.44-1
changelog:
  - limit udev rule for network renaming (#907365, mschmidt@redhat.com)
  - fix path for arpwatch, seems to be in /var/lib on Fedora 18
  - fix the path for lvm cache, there is no file /etc/lvm/.cache ( but there is one /etc/lvm/cache )
  - fix path for dhcpd, is /var/lib/dhcpd since 2005 ( see 31cdb58df77 on the dhcp package git )
  - fix the patch for apache modules in rwtab, that are now in /var/cache/httpd
  - remove no longer used directory ( at least in Fedora ), hald is deprecated,
    /var/tux cannot be found and xend seems to use a subdirectory of /var/lib/xen
  - correct the path for puppet directory in /etc/rwtab, now use /var/lib/puppet by default
  - allow passing -F from /.autorelabel to fixfiles when relabeling system (#904279)
  - correctly detect Open vSwitch device types
  - clear DEVICE and TYPE variables before every iteration (#902463)
  - sets BONDING_OPTS before interface is brougth up
  - check an IP address for existence in ifup-alias (#852005)
  - sync FSF address with GPL 2 text.
  - fix rpmlint's spaces vs tabs warning.
  - fix bogus %changelog dates.
  - build with $RPM_LD_FLAGS.
  - use -sf, not -s. (#901827)
  - add /usr/libexec/initscripts to file list (#894475)
  - rename term256 to 256term (glob sort) (#849429)
  - readd missing shebang. (#885821)
  - migrate even further away from /etc/sysconfig/network for hostname, and /etc/sysconfig/i18n.


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.45-1
changelog:
  - turn on symlink protections in sysctl (#922030)
  - add systemd-random-seed.service to  Before= in fedora-readonly.service (#888615)
  - mention rule6 files in sysconfig.txt
  - skip nmcli for wireless device (#863707)
  - remove config-noreplace from /etc/inittab (#627474)
  - remount-rootfs.service got renamed to systemd-remount-fs.service
  - compile netreport and usernetctl with full RELRO and PIE (#853178)
  - move stuff directly to /usr (#905492)
  - Remove NETWORKING_IPV6 from sysconfig.txt (#918622)
  - fix greps to correctly handle comments and quotation


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.46-1
changelog:
  - add /var/lib/NetworkManager
  - add ipip6 tunneling support (#928232, raorn@raorn.name)
  - bonding: set master up before slaves
  - set net.ipv6.conf.SYSCTLDEVICE.autoconf in ifup-ipv6
  - ifdown: don't call nmcli on interface that is alread down
  - remove some defaults from sysctl.conf (move to systemd)
  - call flush addresses with scope global
  - service: action should not be empty when calling legacy-actions (#947817)
  - ifup-eth: ignore arping errors (#928379)
  - replace tunctl with ip tuntap (#947875)
  - reload sysctl settings for vlans on ifup
  - try dhcpv6 after v4 failed (#846618)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.47-1
changelog:
  - network-functions: to determine state of nscd check socket not lock (#960779)
  - sysconfig.txt advised saslauthd -a instead of -v
  - update translations from transifex
  - drop translation for other initscripts
  - tweak ifup/ifdown usage and man page (#961917)
  - ctrl-alt-delete.target is provided by systemd package
  - remove some defaults from arch specific sysctl.conf
  - readonly-root: remount rpc_pipefs if readonly-root is used
  - service: mention legacy actions and systemctl redirection in man page


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.48-1
changelog:
  - man: add systemd man pages to service.8 "see also" section
  - add possibility to set domainname through /etc/sysconfig/network
  - rename_device: don't wait for lock with lower permissions
  - 256term.csh: remove quotes around variable (#979796)
  - drop useless variables from /etc/sysconfig/init
  - readonly-root: rpcidmapd restart is not needed anymore
  - ifup-eth: print error only if arping is really called (#974603)
  - readonly-root: Add /var/lib/samba to rwtab


author: Lukas Nykryn <lnykryn@redhat.com> - 9.50-1
changelog:
  - ipcalc: support RFC3021 (#997271)
  - symlink /etc/sysctl.conf -> /etc/sysctl.d/
  - man: only action specified in LSB are redirected to systemd
  - service: filter actions that are not supported by systemctl in service (#947823)
  - install_bonding_driver: drop check for existing device (#991335)
  - consider IPV6INIT undefined as YES
  - don't care about network filesystems


author: Lukáš Nykrýn <lnykryn@redhat.com> 9.51-1
changelog:
  - readonly-root: bind-mount only necessary subset of entries in rwtab
  - readonly-root: Add /var/log/audit/audit.log to rwtab
  - readonly-root: restore selinux context after bind mount
  - rename_device: remove comments and trailing whitespaces
  - service: suggest using systemctl if unknown action is used
  - ifup-eth: fix typo in error message
  - use iw instead of iwconfig and friends
  - update functions who call nmcli
  - ifdown: fix typo in nmcli call


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.53-1
changelog:
  - bridging: add possibility to set prio and ageing
  - ifup: add possibility to specify value for -w parameter of arping
  - network: try to not compete with NM during boot
  - fedora-domainname: DefaultDependencies=no
  - service: add condrestart to allowed commands
  - update ifup/ifdown NetworkManager interaction once more(#1036701, #1061810)
  - network: modify ifup-wireless so it doesn't call exit
  - set shmmax and shmall defaults to match rhel6 values (#1056547)
  - update ifup/ifdown NetworkManager interaction (#1036701, #1061810)
  - service: fix action matching
  - remove ifup-ipx from spec
  - Delete IPX support.
  - remove dependency on sysvinit-tools


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.54-1
changelog:
  - move ppp support to ppp package
  - remove fedora-configure
  - network: detect if / is on netfs
  - is_nm_handling: fix RE
  - bonding: match whole name of interface
  - network: add support for team devices
  - ifup-wireless: fix syntax error
  - fedora-readonly: fix prefix detection


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.55-1
changelog:
  - fix license handling
  - ipcalc: -c allow netmask
  - ipcalc: parse prefix more safely
  - inittab: fix path and mention set-default
  - don't require /sbin/sysctl
  - init.d/functions: check parent dir of pid file for accessibility
  - ifup-eth: some options for bridge can be applied after the bridge is up
  - remove ppp from translation


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.56-1
changelog:
  - network_function: return immediately when device is pres
  ent
  - add configurable DEVTIMEOUT
  - fedora-import-state: do not clobber /
  - network-functions: grep->fgrep in bonding masters matchi
  ng
  - man: update sys-unconfig.8
  - rename_devices: comments need to have a blank before them
  - add example ifcfg files
  - network-functions: improve bonding_masters grep
  - ifup: if we were unable to determine DEVICE always call nmcli up
  - ifup-tunnel: call ifup-ipv6 in the end
  - ifup: also set multicast_snooping after the bridge is up
  - network-functions: ETHTOOL_DELAY introduction patch
  - use pie and relro by default
  - custom naming for VLAN devices
  - vi.po: fix parentheses
  - ifup-wireless: add support for wowlan
  - ifup-wireless: add support for wowlan (second part)
  - ifup-aliases: do not bring up ipv6 for range files
  - sys-unconfig: use poweroff instead of halt
  - ifup-aliases: improve duplicate address detection
  - network-functions: handle BONDING_OPTS better
  - network: tell nm to wake the slaves


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.60-1
changelog:
  - improve check for bond master in install bonding driver
  - network-functions: reeplace iwconfig with iw
  - ifup: fix typo
  - ifdown-ipv6: reset addrgenmode to eui64 for device


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.61-1
changelog:
  - specfile cleanup
  - ifup-ipv6: set accept_ra to 2 when IPV6FORWARDING=yes and IPV6_AUTOCONF=yes
  - ifup-post: check resolve.conf also with DNS2
  - ifup-aliases: do not fail when only ipv6 addr is specified
  - fedora-import-state.service: run a little bit later
  - fedora-readonly: Updates for systemd random-seed handling
  - network-functions: is_available_wait should wait even in the case that is_available returns 2
  - ifdown-post: remove resolv.conf only in specific cases
  - network-functions: fix check in install_bonding_driver


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.62-1
changelog:
  - network-functions: fix change_resolv_conf after grep update
  - ifup-aliases: don't return with error when arping fails
  - init.d/functions: rc.debug option to debug initscripts
  - ifup-aliases: inherit ARPCHECK from parent device
  - network: report that we can't shut down network for root on netfs
  - ifdown-eth: use scope host for lo


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.63-1
changelog:
  - remove ipcalc, it has its own package now
  - network: tell NM to reload its configuration during start
  - bonding: warn if the ifup for slave device failed
  - sysctl.conf: drop SHMALL and SHMMAX, they have sane default values in kernel
  - ifup: don't call NM for loopback
  - clarify daemon() usage message
  - rename_device: allow non-channel nics for s390x machines
  - ifup: add missing quotes


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.64-1
changelog:
  - network-functions: fix wireless detection
  - fedora-readonly: use --make-slave with --bind mounts
  - import-state: don't run restorecon when it does not exist
  - network: modem type interfaces should explicitly start after and stop before common interfaces
  - ifup-post: should be interpreted in bash


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.65-1
changelog:
  - init.d/functions: end with 0
  - fedora-loadmodules: we don't have readahead anymore
  - network-scripts: DEVICE and HWADRR could be quoted by apostrophe
  - ifup-wireless: fix calling of phy_wireless_device
  - ifdown: clean ipv4 localhost addresses
  - ifup-eth: some bridge options are applied later
  - service: improve status and stop function for daemon with intscripts
  - init.d/functions: reload systemd if it can't see an initscript


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.66-1
changelog:
  - remove autorelabel stuff
  - autorelabel: turn quota off before relabeling
  - network: Treat other tunnel interfaces, fixes ifdown stage
  - autorelabel: call dracut-initramfs-restore before forced reboot
  - sysconfig.txt: document PPPOE_EXTRA and PPPD_EXTRA
  - ifdown-eth: fix comparison


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.67-1
changelog:
  - import-state: restore also sensitivity part of SELinux context
  - network: run after network-pre.target
  - ifup-eth: fix setting preferred_lft and valid_lft
  - ifup: don't call nmcli on any lo device
  - source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
  - ipv6: wait for all global IPv6 addresses to leave the "tentative" state
  - rwtab: /var/lib/nfs needs to copy the files
  - functions: improve killing loops
  - ifup: set valid_lft and preferred_lft to forever for static ip
  - service: use systemd mangle for given service


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.68-1
changelog:
  - fedora-import-state: skip modifying of existing folders (#1347436)
  - functions: systemctl show now returns an error when unit does not exist


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.71-1
changelog:
  - usleep: print deprecation warning from now on
  - sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
  - DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
  - re-add missing $HOSTNAME initialization
  - ifup: add support for VLAN_EGRESS_PRIORITY_MAP
  - specfile: mark 'rwtab' and 'statetab' as config files
  - killproc/status: add missing '-b <binary>' option
  - ifdown-eth: we need to flush global scope as well
  - ifup-eth: remove quote marks
  - po: download latest translations from zanata
  - rwtab: add /var/lib/systemd/timers
  - Update initscripts.pot
  - Port headers in xgettext_sh.py to 2017


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.72-1
changelog:
  - rename_device.c: rewrite of isCfg() function
  - Add *.old to list of ignored files
  - Replace usleep(1) calls with sleep(1) calls


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.73-1
changelog:
  - Makefile: replace /var/run with /run
  - Replace /var/run with /run everywhere
  - Update references to sysctl.conf
  - Drop sysctl.d/00-system.conf
  - Drop 256term.{sh,csh}
  - ARPUPDATE introduced


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.75-1
changelog:
  - Makefile: $ROOT variable is now empty by default
  - Makefile: Fix additional error in commit b119d37d1
  - ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
  - init.d/functions: is_true() & is_false() extended by ON/OFF support
  - init.d/functions: convert2sec() function added


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.76-1
changelog:
  - Makefile: return make archive for testing purposes
  - Revert "Makefile: replace /var/run with /run"


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.78-1
changelog:
  - specfile: drop dependancy on /etc/system-release
  - ifup-post: always update nameserver & search entries in /etc/resolv.conf
  - network-scripts: forward DBus calls to /dev/null
  - Spelling fixes
  - Tell git to ignore *.o
  - Use grep -E instead of deprecated egrep
  - Avoid some unnecessary stat calls
  - systemd/system: symlinks for fedora-* services removed
  - network-scripts: firewall-cmd replaced with DBus calls
  - 'debugmode' subpackage dropped completely
  - sysconfig/init* files dropped
  - sysctl.conf.s390 dropped
  - usleep: change the error message to print the full replacement commandline


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.79-1
changelog:
  - ifdown-post: fix logical error in commit 5d61564
  - network: add knob to optionally keep interfaces up during shutdown
  - network-functions: use POSIX forwarding instead of bash-ism


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.80-1
changelog:
  - sysconfig/readonly-root: Clarify the usage of readonly-root
  - use proper shebang where appropriate
  - specfile: remove the systemctl call in the %postun phase
  - network-functions: use tr to upper case strings rather than awk
  - network-functions: add error messages for bonding installation
  - ifdown-eth: no longer needed 'pidof -x dhclient' condition removed
  - netconsole: LSB header added
  - po/xgettext_sh*: converted to use to python3
  - network.service: 'reload' removed
  - ifup-tunnel: Support 'external' tunnels
  - spec: add gcc to BuildRequires
  - init.d/functions: fix sourcing for ksh


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.81-1
changelog:
  - src/consoletype.c: deprecation warning added
  - src/genhostid.c: deprecation warning added
  - src/genhostid.c: fixed to not override /etc/hostid if it already exists
  - src/usleep.c: GCC warnings fixed
  - nis-domainname.service removed
  - fedora-* services renamed to more general names
  - specfile: missing fedora-domainname.service returned in systemd macros
  - COPYING updated to latest GNU version (GPLv2+)
  - network-scripts: control 'network' service with alternatives as well
  - netreport functionality dropped
  - networks moved into 'setup' package
  - lang.{sh,csh} moved into setup package
  - lang.{sh,csh} cleanup before moving to 'setup' package
  - src/sushell moved into 'policycoreutils' package
  - src/shvar.* removed
  - po/xgettext_sh removed
  - sys-unconfig removed
  - Outdated files from doc/ folder removed
  - make archive: ChangeLog generating removed
  - network-scripts: ifup & ifdown -- use alternatives system
  - adjtime moved into 'util-linux' package
  - specfile: simplified & updated to new repository layout
  - .gitignore files updated to new repository layout
  - Makefile simplified & updated to new repository layout
  - po/Makefile simplified & updated to new repository layout
  - src/Makefile simplified & updated to new repository layout
  - Repository scheme updated to new layout
  - fedora-readonly: command substitution warning fixed (null-byte input)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.82-1
changelog:
  - Makefile: make the creation of symlinks relative to path again
  - specfile: trailing file of netreport removed


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.83-1
changelog:
  - network-scripts: Add previously dropped error checking
  - network-scripts: Replace brctl with ip-link
  - Makefile: new release-commit rule added
  - src/rename_device.c: GCC warnings about unused return value suppressed
  - src/usernetctl.c: GCC warnings about unused return value suppressed
  - Makefile: allow sub-makefiles to run in parallel
  - specfile: netconsole service moved to /usr/libexec
  - specfile: services from /usr/lib/systemd moved to /usr/libexec
  - specfile: summary & description updated
  - specfile: no longer needed conflicts dropped
  - specfile: requirements cleanup
  - specfile: obsoletes on previous version of initscripts package added
  - specfile: network-scripts subpackage created
  - specfile: readonly-root subpackage created
  - specfile: netconsole-service subpackage created
  - README.md: Travis CI build icon added
  - .travis.yml: check the 'make install' proceeds as well
  - .travis.yml: initial commit
  - README.md: bug reporting described
  - README.dm: future of initscripts described
  - README.md: description added
  - README.md: references to old git branches added
  - README.md: initial commit
  - network-scripts: setting of firewall ZONE fixed
  - ifdown-post: artifact whitespace removed from the DBus call
  - l10n: drop .tx directory
  - l10n: add zanata.xml


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 10.00-1
changelog:
  - Move the /etc/rwtab.d & /etc/statetab.d folders to 'filesystem'
  - specfile: fix failing build because of incorrect use of (x86-64)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 10.00.1-1
changelog:
  - consoletype/genhostid/usleep: allow disabling of deprecation warnings
  - network/ifup/ifdown: allow disabling of deprecation warnings
  - network/ifup/ifdown: deprecation warnings for 'network-scripts' added


author: Jan Macku <jamacku@redhat.com> - 10.00.3-1
changelog:
  - rc.d/functions: fix escape sequence being output under systemd service units
  - Replace not working awk command with sed


author: Jan Macku <jamacku@redhat.com> - 10.00.5-1
changelog:
  - network-function: bridges are created by ifup-eth
  - network: don't fail with IFDOWN_ON_SHUTDOWN
  - Add ip6gre tunnel option
  - ifup-eth: Check that device name is set
  - Initscripts no longer care about rc.local


author: Jan Macku <jamacku@redhat.com> - 10.00.7-1
changelog:
  - Wait for scope link addresses as well as for scope global addresses
  - Remove deprecated option -m of pidof


author: Jan Macku <jamacku@redhat.com> - 10.00.8-1
changelog:
  - rwtab: Add support for chrony
  - ifup-eth: Switch to bc utility, which supports floating point computations.
  - Replace grep -EL with subshell since -L changed behaviour


author: Jan Macku <jamacku@redhat.com> - 10.00.10-1
changelog:
  - Allow updating rfkill switch status while in readonly root mode
  - service: Prevent variables from globbing
  - Allow updating mlocate.db while in readonly root mode


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to iproute2-2.2.4-now-ss001007.tar.gz 
  - bzip2 source tar file
  - "License" replaces "Copyright"
  - added "BuildPrereq: tetex-latex tetex-dvips psutils"
  - rebuilt for 7.2


author: Phil Knirsch <pknirsch@redhat.com> 2.4.7-3
changelog:
  - Fixed missing diffserv and atm support in config (#57278).
  - Fixed inconsistent numeric base problem for command line (#65473).


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Updated to latest version. Used by other distros, so seems stable. ;-)
  - Quite a few patches needed updating in that turn.
  - Added ss (#107363) and several other new nifty tools.


author: Phil Knirsch <pknirsch@redhat.com> 2.4.7-14
changelog:
  - Fixed -f option for ss (#118355).
  - Small description fix (#110997).
  - Added initialization of some vars (#74961). 
  - Added patch to initialize "default" rule as well (#60693).


author: Radek Vokal <rvokal@redhat.com> - 2.6.18-1
changelog:
  - upgrade to upstream 2.6.18
  - initcwnd patch merged
  - bug fix for xfrm monitor
  - alignment fixes for cris
  - documentation corrections


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.23-2
changelog:
  - rebuild with fix tetex and linuxdoc-tools -> manual pdf
  - clean unnecessary patches
  - add into spec *.so objects, new BR linux-atm-libs-devel


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.23-3
changelog:
  - rebuild without tetex files. It isn't working in rawhide yet. Added
    new source for ps files. 
  - #431179 backward compatibility for previous iproute versions


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.27-1
changelog:
  - aead support was included into upstream version
  - patch for moving libs is now deprecated
  - update to 2.6.27


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.27-2
changelog:
  - 475130 - Negative preferred lifetimes of IPv6 prefixes/addresses
    displayed incorrectly
  - 472878 - “ip maddr show” in IB interface causes a stack corruption
  - both patches will be probably in iproute v2.6.28


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.28-2
changelog:
  - 483484 install distribution files into /usr/share and also fixed
   install paths in spec
  - add the latest change from git which add DRR support
   c86f34942a0ce9f8203c0c38f9fe9604f96be706


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.29-1
changelog:
  - update to 2.6.29
  - remove DDR patch which became part of sourc
  - add patch with correct headers 1957a322c9932e1a1d2ca1fd37ce4b335ceb7113


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.29-2
changelog:
  - c3651bf4763d7247e3edd4e20526a85de459041b ip6tunnel: Fix no default 
   display of ip4ip6 tunnels
  - e48f73d6a5e90d2f883e15ccedf4f53d26bb6e74 missing arpd directory


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.29-3
changelog:
  - new iptables (xtables) bring problems to tc, when ipt is used. 
    rhbz#497344 still broken. tc_modules.patch brings correct paths to
    xtables, but that doesn't fix whole issue.
  - 497355 ip should allow creation of an IPsec SA with 'proto any' 
    and specified sport and dport as selectors


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.32-2
changelog:
  - add macvlan aka VESA support d63a9b2b1e4e3eab0d0577d0a0f412d50be1e0a7
  - kernel headers 2.6.33 ab322673298bd0b8927cdd9d11f3d36af5941b93
    are needed for macvlan features and probably for other added later.
  - fix number of release which contains 2.6.32 kernel headers and features
    but it was released as 2.6.31


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.33-2
changelog:
  - 578729 6rd tunnel correctly 3979ef91de9ed17d21672aaaefd6c228485135a2
  - change BR texlive to tex according to guidelines


author: Petr Sabata <psabata@redhat.com> - 2.6.38.1-2
changelog:
  - General cleanup
  - Use global instead of define
  - Buildroot removal
  - Correcting URL and Source links
  - Install genl, ifstat, routef, routel and rtpr (rhbz#697319)


author: Petr Sabata <psabata@redhat.com> - 2.6.38.1-3
changelog:
  - Install ctstat, rtstat and routef manpage symlinks
  - Install m_xt & m_ipt tc modules
  - Creating devel and virtual static subpackages with libnetlink


author: Petr Šabata <contyk@redhat.com> - 3.1.0-1
changelog:
  - 3.1.0 bump
  - Point URL and Source to the new location on kernel.org
  - Remove now obsolete defattr
  - Dropping various patches now included upstream
  - Dropping iproute2-2.6.25-segfault.patch; I fail to understand the reason for
    this hack


author: Petr Šabata <contyk@redhat.com> - 3.6.0-3
changelog:
  - Include section 7 manpages (#876857)
  - Fix ancient bogus dates in the changelog (correction based upon commits)
  - Explicitly require some TeX fonts no longer present in the base distribution


author: Petr Šabata <contyk@redhat.com> - 3.10.0-1
changelog:
  - 3.10.0 bump
  - Drop the SHAREDIR patch and revert to upstream ways (#966445)
  - Fix an XFRM regression with FORTIFY_SOURCE


author: Petr Šabata <contyk@redhat.com> - 3.10.0-4
changelog:
  - lnstat -i: Run indefinitely if the --count isn't specified (#977845)
  - Switch to unversioned %docdir


author: Phil Sutter <psutter@redhat.com> - 4.5.0-3
changelog:
  - Fix upgrade path by adding correct Requires/Obsoletes statements to spec file
  - Move README.iproute2+tc into tc subpackage


author: Phil Sutter <psutter@redhat.com> - 4.10.0-1
changelog:
  - Ship new header iproute2/bpf_elf.h
  - Document content of remaining docs fixup patch in spec file
  - Drop patches already applied upstream
  - New version 4.10.0


author: Phil Sutter <psutter@redhat.com> [4.17.0-1.el8]
changelog:
  - rdma: print driver resource attributes (Phil Sutter) [1610334]
  - rdma: update rdma_netlink.h to get new driver attributes (Phil Sutter) [1610334]
  - rdma: Print net device name and index for RDMA device (Phil Sutter) [1610334]
  - devlink: CTRL_ATTR_FAMILY_ID is a u16 (Phil Sutter) [1589317]
  - tc: Do not use addattr_nest_compat on mqprio and netem (Phil Sutter) [1589317]
  - ipaddress: Fix and make consistent label match handling (Phil Sutter) [1589317]
  - rt_dsfield: Ship deprecated values for compatibility (Phil Sutter) [1595683]
  - New version 4.17.0 including upstream-suggested fixes (Phil Sutter) [1589317]


author: Phil Sutter <psutter@redhat.com> [4.18.0-2.el8]
changelog:
  - bridge/mdb: fix missing new line when show bridge mdb (Phil Sutter) [1625500]
  - ip-route: Fix segfault with many nexthops (Phil Sutter) [1625358]
  - Update kernel headers (Phil Sutter) [1615915]
  - tc/flower: Add match on encapsulating tos/ttl (Phil Sutter) [1615915]
  - tc/act_tunnel_key: Enable setup of tos and ttl (Phil Sutter) [1615915]
  - iprule: Fix destination prefix output (Phil Sutter) [1623503]
  - ip: Add missing -M flag to help text (Phil Sutter) [1612704]
  - man: ss.8: Describe --events option (Phil Sutter) [1612704]
  - rtmon: List options in help text (Phil Sutter) [1612704]
  - man: rtacct.8: Fix nstat options (Phil Sutter) [1612704]
  - man: ifstat.8: Document --json and --pretty options (Phil Sutter) [1612704]
  - genl: Fix help text (Phil Sutter) [1612704]
  - man: devlink.8: Document -verbose option (Phil Sutter) [1612704]
  - devlink: trivial: Make help text consistent (Phil Sutter) [1612704]
  - bridge: trivial: Make help text consistent (Phil Sutter) [1612704]
  - man: bridge.8: Document -oneline option (Phil Sutter) [1612704]


author: Phil Sutter <psutter@redhat.com> [4.18.0-4.el8]
changelog:
  - iplink_vxlan: take into account preferred_family creating vxlan device (Phil Sutter) [1626321]
  - ip-addrlabel: Fix printing of label value (Phil Sutter) [1639412]
  - bridge: fdb: Fix for missing keywords in non-JSON output (Phil Sutter) [1636532]


author: Phil Sutter <psutter@redhat.com> [4.18.0-5.el8]
changelog:
  - utils: fix get_rtnl_link_stats_rta stats parsing (Phil Sutter) [1626306]
  - uapi: add snmp header file (Phil Sutter) [1626306]
  - macsec: fix off-by-one when parsing attributes (Phil Sutter) [1628428]
  - json: make 0xhex handle u64 (Phil Sutter) [1628428]


author: Phil Sutter <psutter@redhat.com> [4.18.0-6.el8]
changelog:
  - Update kernel headers (Phil Sutter) [1637440]
  - tc_util: Add support for showing TCA_STATS_BASIC_HW statistics (Phil Sutter) [1637440]
  - tc: Remove pointless assignments in batch() (Phil Sutter) [1602555]
  - tipc: Drop unused variable 'genl' (Phil Sutter) [1602555]
  - ip-route: Fix parse_encap_seg6() srh parsing (Phil Sutter) [1602555]
  - rdma: Don't pass garbage to rd_check_is_filtered() (Phil Sutter) [1602555]
  - ip-route: Fix for memleak in error path (Phil Sutter) [1602555]
  - rdma: Fix for ineffective check in add_filter() (Phil Sutter) [1602555]
  - devlink: Fix error reporting in cmd_resource_set() (Phil Sutter) [1602555]
  - libnetlink: fix use-after-free of message buf (Phil Sutter) [1602555]
  - libnetlink: don't return error on success (Phil Sutter) [1602555]
  - libnetlink: fix leak and using unused memory on error (Phil Sutter) [1602555]
  - tc: htb: Print default value in hex (Phil Sutter) [1641053]


author: Phil Sutter <psutter@redhat.com> [4.18.0-7.el8]
changelog:
  - ip-route: Fix nexthop encap parsing (Phil Sutter) [1625358]
  - man: ip-route.8: Document nexthop limit (Phil Sutter) [1625358]


author: Phil Sutter <psutter@redhat.com> [4.18.0-11.el8]
changelog:
  - tc: m_tunnel_key: Add tunnel option support to act_tunnel_key (Phil Sutter) [1654761]
  - tc: f_flower: add geneve option match support to flower (Phil Sutter) [1654761]
  - l2tp: Fix printing of cookie and peer_cookie values (Phil Sutter) [1643805]


author: Andrea Claudi <aclaudi@redhat.com> [4.18.0-12.el8]
changelog:
  - devlink: Add param command support (Andrea Claudi) [1663199]
  - rdma: Fix representation of PortInfo CapabilityMask (Andrea Claudi) [1664694]
  - uapi: update ib_verbs (Andrea Claudi) [1664694]
  - tc: flower: Add support for QinQ (Andrea Claudi) [1615928]
  - ip rule: Add ipproto and port range to filter list (Andrea Claudi) [1678111]


author: Andrea Claudi <aclaudi@redhat.com> [4.18.0-13.el8]
changelog:
  - ip-xfrm: Respect family in deleteall and list commands (Andrea Claudi) [1656717]
  - Update kernel headers (Andrea Claudi) [1716361]
  - uapi: update bpf header (Andrea Claudi) [1716361]
  - uapi: update headers to 4.20-rc1 (Andrea Claudi) [1716361]
  - bpf: add btf func and func_proto kind support (Andrea Claudi) [1716361]
  - lib/bpf: fix build warning if no elf (Andrea Claudi) [1716361]
  - bpf: initialise map symbol before retrieving and comparing its type (Andrea Claudi) [1716361]
  - Include bsd/string.h only in include/utils.h (Andrea Claudi) [1716361]
  - Use libbsd for strlcpy if available (Andrea Claudi) [1716361]
  - bpf: check map symbol type properly with newer llvm compiler (Andrea Claudi) [1716361]
  - bpf: implement btf handling and map annotation (Andrea Claudi) [1716361]
  - bpf: implement bpf to bpf calls support (Andrea Claudi) [1716361]
  - bpf: remove strict dependency on af_alg (Andrea Claudi) [1716361]
  - bpf: move bpf_elf_map fixup notification under verbose (Andrea Claudi) [1716361]
  - iplink: add support for reporting multiple XDP programs (Andrea Claudi) [1716361]
  - rdma: Document IB device renaming option (Andrea Claudi) [1663228]
  - rdma: Add an option to rename IB device interface (Andrea Claudi) [1663228]
  - rdma: Introduce command execution helper with required device name (Andrea Claudi) [1663228]
  - rdma: Update kernel include file to support IB device renaming (Andrea Claudi) [1663228]
  - libnetlink: Convert GETADDR dumps to use rtnl_addrdump_req (Andrea Claudi) [1716772]


author: Andrea Claudi <aclaudi@redhat.com> [4.18.0-15.el8]
changelog:
  - netns: make netns_{save,restore} static (Andrea Claudi) [1719759]
  - ip vrf: use hook to change VRF in the child (Andrea Claudi) [1719759]
  - netns: switch netns in the child when executing commands (Andrea Claudi) [1719759]
  - m_mirred: don't bail if the control action is missing (Andrea Claudi) [1711760]
  - tc: introduce support for chain templates (Andrea Claudi) [1710291]
  - ip: reset netns after each command in batch mode (Andrea Claudi) [1671016]


author: Andrea Claudi <aclaudi@redhat.com> [5.3.0-2.el8]
changelog:
  - man: ip.8: Add missing vrf subcommand description (Andrea Claudi) [1780010]
  - xfrm: not try to delete ipcomp states when using deleteall (Andrea Claudi) [1808634]
  - ip-xfrm: Fix help messages (Andrea Claudi) [1796045]
  - man: rdma.8: Add missing resource subcommand description (Andrea Claudi) [1786576]
  - man: rdma-statistic: Add filter description (Andrea Claudi) [1786565]
  - tc: implement support for action flags (Andrea Claudi) [1770671]
  - Update kernel headers (Andrea Claudi) [1770671]
  - Update kernel headers (Andrea Claudi) [1770671]


author: Andrea Claudi <aclaudi@redhat.com> [5.3.0-3.el8]
changelog:
  - xfrm: also check for ipv6 state in xfrm_state_keep (Andrea Claudi) [1828033]
  - man: bridge.8: fix bridge link show description (Andrea Claudi) [1817571]
  - ip: fix ip route show json output for multipath nexthops (Andrea Claudi) [1738633]
  - ip link: xstats: fix TX IGMP reports string (Andrea Claudi) [1796041]
  - nstat: print useful error messages in abort() cases (Andrea Claudi) [1824896]


author: Andrea Claudi <aclaudi@redhat.com> [5.3.0-4.el8]
changelog:
  - tc: f_flower: add options support for erspan (Andrea Claudi) [1830485]
  - tc: f_flower: add options support for vxlan (Andrea Claudi) [1830485]
  - tc: m_tunnel_key: add options support for erpsan (Andrea Claudi) [1830485]
  - tc: m_tunnel_key: add options support for vxlan (Andrea Claudi) [1830485]
  - iproute_lwtunnel: add options support for erspan metadata (Andrea Claudi) [1830485]
  - iproute_lwtunnel: add options support for vxlan metadata (Andrea Claudi) [1830485]
  - iproute_lwtunnel: add options support for geneve metadata (Andrea Claudi) [1830485]
  - Update kernel headers (Andrea Claudi) [1830485]
  - man: ip.8: add reference to mptcp man-page (Andrea Claudi) [1812207]
  - man: mptcp man page (Andrea Claudi) [1812207]
  - ss: allow dumping MPTCP subflow information (Andrea Claudi) [1812207]
  - Update kernel headers (Andrea Claudi) [1812207]
  - Update kernel headers (Andrea Claudi) [1812207]
  - add support for mptcp netlink interface (Andrea Claudi) [1812207]
  - Update kernel headers and import mptcp.h (Andrea Claudi) [1812207]
  - ip: xfrm: add espintcp encapsulation (Andrea Claudi) [1844045]
  - Update kernel headers and import udp.h (Andrea Claudi) [1844045]


author: Andrea Claudi <aclaudi@redhat.com> [5.3.0-5.el8]
changelog:
  - man: tc-ct.8: Add manual page for ct tc action (Andrea Claudi) [1844637]
  - tc: flower: Add matching on conntrack info (Andrea Claudi) [1844637]
  - tc: Introduce tc ct action (Andrea Claudi) [1844637]
  - tc: add NLA_F_NESTED flag to all actions options nested block (Andrea Claudi) [1844637]
  - Import tc_act/tc_ct.h uapi file (Andrea Claudi) [1844637]
  - ss: allow dumping kTLS info (Andrea Claudi) [1812207]
  - devlink: Add health error recovery status monitoring (Andrea Claudi) [1821039]


author: Andrea Claudi <aclaudi@redhat.com> [5.9.0-2.el8]
changelog:
  - tc: flower: fix json output with mpls lse (Andrea Claudi) [1885770]
  - tc-mpls: fix manpage example and help message string (Andrea Claudi) [1885770]
  - tc-vlan: fix help and error message strings (Andrea Claudi) [1885770]
  - m_mpls: test the 'mac_push' action after 'modify' (Andrea Claudi) [1885770]
  - m_mpls: add mac_push action (Andrea Claudi) [1885770]
  - m_vlan: add pop_eth and push_eth actions (Andrea Claudi) [1885770]
  - Update kernel headers (Andrea Claudi) [1885770]


author: Jeremy Katz <katzj@redhat.com> - 2.0.13.2-1
changelog:
  - update to 2.0.13.2 (#139083)
    - fix firmware upload for firmware in /lib instead of /usr/lib
    - fix sysfs race


author: Will Woods <wwoods@redhat.com> - 2.2.13-2
changelog:
  - Fix iprdump startup - #483340
  - iprutils-swab-moved.patch - fix compilation with 2.6.29 kernels (#483643)


author: Gabriel Krisman Bertazi <krisman@linux.vnet.ibm.com> - 2.4.8-1
changelog:
  - Rebase to 2.4.8
  - Move to Autotools
  - Remove unused files
  - Rebase patch 0001 to use autotools
  - Install bash completion
  - Spec file clean up


author: Mathieu Bridon <bochecha@fedoraproject.org> - 6.11-1
changelog:
  - New upstream release.
  - Removed our patch, it has been integrated upstream. As such, we also don't
    need to re-run autoreconf any more.


author: Mathieu Bridon <bochecha@fedoraproject.org> - 6.14-1
changelog:
  - New upstream release.
  - Fix scriptlets, ldconfig is needed for the libs subpackage, not the main one.


author: Quentin Armitage <quentin@armitage.org.uk> 6.19-2
changelog:
  - Add service pkg - adds save and reload functionality on shutdown/startup
  - Add requires dependency of ipset on matching ipset-libs


author: Mathieu Bridon <bochecha@fedoraproject.org> - 6.21.1-2
changelog:
  - Remove runtime requirement on the kernel.
    https://lists.fedoraproject.org/pipermail/devel/2014-March/196565.html


author: Thomas Woerner <twoerner@redhat.com> - 6.29-1
changelog:
  - New upstream version 6.29 (RHBZ#1317208)
    - Suppress unnecessary stderr in command loop for resize and list
    - Correction in comment test
    - Support chroot buildroots (reported by Jan Engelhardt)
    - Fix "configure" breakage due to pkg-config related changes
      (reported by Jan Engelhardt)
    - Support older pkg-config packages
    - Add bash completion to the install routine (Mart Frauenlob)
    - Fix misleading error message with comment extension
    - Test added to check 0.0.0.0/0,iface to be matched in hash:net,iface type
    - Fix link with libtool >= 2.4.4 (Olivier Blin)


author: Stefano Brivio <sbrivio@redhat.com> - 6.38-3
changelog:
  - Fix loading of sets with dependencies on other sets (RHBZ#1647096), and
    hardcode 6.38-1.el7 for ipset-service upgrade and downgrade triggers, so that
    we don't run into issues with z-stream updates


author: Stefano Brivio <sbrivio@redhat.com> - 7.1-1
changelog:
  - Rebase to 7.1 (RHBZ#1649090):
    - Add compatibility support for strscpy()
    - Correct the manpage about the sort option
    - Add missing functions to libipset.map
    - configure.ac: Fix build regression on RHEL/CentOS/SL (Serhey Popovych)
    - Implement sorting for hash types in the ipset tool
    - Fix to list/save into file specified by option (reported by Isaac Good)
    - Introduction of new commands and protocol version 7, updated kernel include files
    - Add compatibility support for async in pernet_operations
    - Use more robust awk patterns to check for backward compatibility
    - Prepare the ipset tool to handle multiple protocol version
    - Fix warning message handlin
    - Correct to test null valued entry in hash:net6,port,net6 test
    - Library reworked to support embedding ipset completely
    - Add compatibility to support kvcalloc()
    - Validate string type attributes in attr2data() (Stefano Brivio)
    - manpage: Add comment about matching on destination MAC address (Stefano Brivio)
      (RHBZ#1649079)
    - Add compatibility to support is_zero_ether_addr()
    - Fix use-after-free in ipset_parse_name_compat() (Stefano Brivio) (RHBZ#1649085)
    - Fix leak in build_argv() on line parsing error (Stefano Brivio) (RHBZ#1649085)
    - Simplify return statement in ipset_mnl_query() (Stefano Brivio) (RHBZ#1649085)
    - tests/check_klog.sh: Try dmesg too, don't let shell terminate script (Stefano Brivio) 
  - Fixes:
    - Fix all shellcheck warnings in init script (RHBZ#1649085)
    - Make error reporting consistent, introduce different severities (RHBZ#1683711)
    - While restoring, on invalid entries, remove them and retry (RHBZ#1683713)
    - Fix covscan SC2166 warning in init script (RHBZ#1649085)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - move iptables to /sbin.
  - excludearch alpha for now, not building there because of compiler bug(?)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.2
  - fix up ipv6 split
  - add init script
  - Move the plugins from /usr/lib/iptables to /lib/iptables.
    This needs to work before /usr is mounted...
  - Use -O1 on alpha (compiler bug)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix bugzilla #25986 (initscript not marked as config file)
  - fix bugzilla #25962 (iptables-restore)
  - mv chkconfig --del from postun to preun


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Yet another initscript fix (#30173)
  - Fix the fixes; they fixed some issues but broke more important
    stuff :/ (#30176)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-1
changelog:
  - Update to 1.2.4 (various fixes, including security fixes; among others:
    - Fix init script (#31133)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-2
changelog:
  - Merge ip6tables improvements from Ian Prowell <iprowell@prowell.org>
    - Update URL (#59354)
  - Use /sbin/chkconfig rather than chkconfig in %postun script


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed iptables and ip6tables initscript output, based on #70511
  - check return status of all iptables calls, not just the last one
    in a 'for' loop.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - remove check for very old kernel versions in init scripts
  - sync up both init scripts and remove some further ugly things
  - add some docu into rpm


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-5
changelog:
  - new config option IPTABLES_SAVE_ON_RESTART
  - init script: new status, save and restart
  - fixes #44905, #65389, #80785, #82860, #91040, #91560 and #91374


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-6
changelog:
  - IPTABLES_SAVE_COUNTER defaults to no, now
  - install config file in /etc/sysconfig
  - exchange unload of ip_tables and ip_conntrack
  - fixed start function


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-12.1
changelog:
  - fixed lost udp port range in ip6tables-save (#104484)
  - fixed non numeric multiport port output in ipXtables-savs


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-13
changelog:
  - marked all messages in iptables init script for translation (#107462)
  - enabled devel package (#105884, #106101)
  - bumped build for fedora for libipt_recent.so (#106002)


author: Thomas Woerner <twoerner@redhat.com> 1.2.9-1
changelog:
  - vew version 1.2.9
  - new config options in ipXtables-config:
    IPTABLES_MODULES_UNLOAD
  - more documentation in ipXtables-config
  - fix for netlink security issue in libipq (devel package)
  - print fix for libipt_icmp (#109546)


author: Thomas Woerner <twoerner@redhat.com> 1.2.11-3.1
changelog:
  - changed default behaviour for IPTABLES_STATUS_NUMERIC to "yes" (#129731)
  - modified config file to match this change and un-commented variables with
    default values


author: Thomas Woerner <twoerner@redhat.com> 1.3.0-2
changelog:
  - Remove unnecessary explicit kernel dep (#146142)
  - Fixed out of bounds accesses (#131848): Thanks to Steve Grubb
    for the patch
  - Adapted iptables-config to reference to modprobe.conf (#150143)
  - Remove misleading message (#140154): Thanks to Ulrich Drepper
    for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-1
changelog:
  - new version 1.3.4
  - dropped free_opts patch (upstream fixed)
  - made libipq PIC (#158623)
  - additional configuration options for iptables startup script (#172929)
    Thanks to Jan Gruenwald for the patch
  - spec file cleanup (dropped linux_header define and usage)


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-2
changelog:
  - fix for plugin problem: link with "gcc -shared" instead of "ld -shared" and 
    replace "_init" with "__attribute((constructor)) my_init"


author: Thomas Woerner <twoerner@redhat.com> 1.3.7-1
changelog:
  - new verison 1.3.7
  - iptc is not a public interface and therefore not installed anymore
  - dropped upstream secmark patch


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-2
changelog:
  - fixed initscript for LSB conformance (rhbz#246953, rhbz#242459)
  - provide iptc interface again, but unsupported (rhbz#216733)
  - compile all extension, which are supported by the kernel-headers package
  - review fixes (rhbz#225906)


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-3
changelog:
  - do not depend on local_fs in lsb header - this delayes start after network
  - fixed exit code for initscript usage


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-4
changelog:
  - fixed IPv6 reject type (rhbz#295181)
  - fixed init script: start, stop and status
  - support netfilter compiled into kernel in init script (rhbz#295611)
  - dropped inversion for limit modules from man pages (rhbz#220780)
  - fixed typo in ip6tables man page (rhbz#236185)


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-4.1
changelog:
  - do not start ip6tables if ipv6 is blacklisted (rhbz#236888)
  - use simpler fix for (rhbz#295611)
    Thanks to Linus Torvalds for the patch.


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-5
changelog:
  - fixed error code for stopping a already stopped firewall (rhbz#321751)
  - moved blacklist test into start


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-6
changelog:
  - fixed leaked file descriptor before fork/exec (rhbz#312191)
  - blacklisting is not working, use "install X /bin/(true|false)" test instead
  - return private exit code 150 for disabled ipv6 support
  - use script name for output messages


author: Thomas Woerner <twoerner@redhat.com> 1.4.0-1
changelog:
  - new version 1.4.0
  - fixed condrestart (rhbz#428148)
  - report the module in rmmod_r if there is an error
  - use nf_ext_init instead of my_init for extension constructors


author: Thomas Woerner <twoerner@redhat.com> 1.4.0-3
changelog:
  - use the kernel headers from the build tree for iptables for now to be able to 
    compile this package, but this makes the package more kernel dependant
  - use s6_addr32 instead of in6_u.u6_addr32


author: Tom "spot" Callaway <tcallawa@redhat.com> 1.4.0-5
changelog:
  - use normal kernel headers, not linux/compiler.h
  - change BuildRequires: kernel-devel to kernel-headers
  - We need to do this to be able to build for both sparcv9 and sparc64 
    (there is no kernel-devel.sparcv9)


author: Thomas Woerner <twoerner@redhat.com> 1.4.1-1
changelog:
  - new version 1.4.1 with new build environment
  - additional ipv6 network mask patch from Jan Engelhardt
  - spec file cleanup
  - removed old patches


author: Thomas Woerner <twoerner@redhat.com> 1.4.2-1
changelog:
  - new version 1.4.2
  - removed TOS value mask patch (upstream)
  - more review fixes (rhbz#225906)
  - install all header files (rhbz#462207)
  - dropped nf_ext_init (rhbz#472548)


author: Thomas Woerner <twoerner@redhat.com> 1.4.2-3
changelog:
  - still more review fixes (rhbz#225906)
    - consistent macro usage
    - use sed instead of perl for rpath removal
    - use standard RPM CFLAGS, but also -fno-strict-aliasing (needed for libiptc*)


author: Thomas Woerner <twoerner@redhat.com> 1.4.3.1-1
changelog:
  - new version 1.4.3.1
    - libiptc is now shared
    - supports all new features of the 2.6.29 kernel
  - dropped typo_latter patch


author: Thomas Woerner <twoerner@redhat.com> 1.4.4-1
changelog:
  - new version 1.4.4 with support for all new features of 2.6.30
    - several man page fixes
    - iptables: replace open-coded sizeof by ARRAY_SIZE
    - libip6t_policy: remove redundant functions
    - policy: use direct xt_policy_info instead of ipt/ip6t
    - policy: merge ipv6 and ipv4 variant
    - extensions: add `cluster' match support
    - extensions: add const qualifiers in print/save functions
    - extensions: use NFPROTO_UNSPEC for .family field
    - extensions: remove redundant casts
    - iptables: close open file descriptors
    - fix segfault if incorrect protocol name is used
    - replace open-coded sizeof by ARRAY_SIZE
    - do not include v4-only modules in ip6tables manpage
    - use direct xt_policy_info instead of ipt/ip6t
    - xtables: fix segfault if incorrect protocol name is used
    - libxt_connlimit: initialize v6_mask
    - SNAT/DNAT: add support for persistent multi-range NAT mappings


author: Thomas Woerner <twoerner@redhat.com> 1.4.5-1
changelog:
  - new version 1.4.5 with support for all new features of 2.6.31
    - libxt_NFQUEUE: add new v1 version with queue-balance option
    - xt_conntrack: revision 2 for enlarged state_mask member
    - libxt_helper: fix invalid passed option to check_inverse
    - libiptc: split v4 and v6
    - extensions: collapse registration structures
    - iptables: allow for parse-less extensions
    - iptables: allow for help-less extensions
    - extensions: remove empty help and parse functions
    - xtables: add multi-registration functions
    - extensions: collapse data variables to use multi-reg calls
    - xtables: warn of missing version identifier in extensions
    - multi binary: allow subcommand via argv[1]
    - iptables: accept multiple IP address specifications for -s, -d
    - several build fixes
    - several man page fixes
  - fixed two leaked file descriptors on sockets (rhbz#521397)


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-1
changelog:
  - new version 1.4.6 with support for all new features of 2.6.32
    - several man page fixes
    - Support for nommu arches
    - realm: remove static initializations
    - libiptc: remove unused functions
    - libiptc: avoid strict-aliasing warnings
    - iprange: do accept non-ranges for xt_iprange v1
    - iprange: warn on reverse range
    - iprange: roll address parsing into a loop
    - iprange: do accept non-ranges for xt_iprange v1 (log)
    - iprange: warn on reverse range (log)
    - libiptc: fix wrong maptype of base chain counters on restore
    - iptables: fix undersized deletion mask creation
    - style: reduce indent in xtables_check_inverse
    - libxtables: hand argv to xtables_check_inverse
    - iptables/extensions: make bundled options work again
    - CONNMARK: print mark rules with mask 0xffffffff as set instead of xset
    - iptables: take masks into consideration for replace command
    - doc: explain experienced --hitcount limit
    - doc: name resolution clarification
    - iptables: expose option to zero packet/byte counters for a specific rule
    - build: restore --disable-ipv6 functionality on system w/o v6 headers
    - MARK: print mark rules with mask 0xffffffff as --set-mark instead of --set-xmark
    - DNAT: fix incorrect check during parsing
    - extensions: add osf extension
    - conntrack: fix --expires parsing


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-2
changelog:
  - moved libip*tc and libxtables libs to /lib[64], added symlinks for .so libs
    to /usr/lib[64] for compatibility (rhbz#558796)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-1
changelog:
  - new version 1.4.7 with support for all new features of 2.6.33 (rhbz#570767)
    - libip4tc: Add static qualifier to dump_entry()
    - libipq: build as shared library
    - recent: reorder cases in code (cosmetic cleanup)
    - several man page and documentation fixes
    - policy: fix error message showing wrong option
    - includes: header updates
    - Lift restrictions on interface names
  - fixed license and moved iptables-xml into base package according to review


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-2
changelog:
  - added default values for IPTABLES_STATUS_VERBOSE and
    IPTABLES_STATUS_LINENUMBERS in init script
  - added missing lsb keywords Required-Start and Required-Stop to init script


author: Thomas Woerner <twoerner@redhat.com> 1.4.8-1
changelog:
  - new version 1.4.8 all new features of 2.6.34 (rhbz#)
    - extensions: REDIRECT: fix --to-ports parser
    - iptables: add noreturn attribute to exit_tryhelp()
    - extensions: MASQUERADE: fix --to-ports parser
    - libxt_comment: avoid use of IPv4-specific examples
    - libxt_CT: add a manpage
    - iptables: correctly check for too-long chain/target/match names
    - doc: libxt_MARK: no longer restricted to mangle table
    - doc: remove claim that TCPMSS is limited to mangle
    - libxt_recent: add a missing space in output
    - doc: add manpage for libxt_osf
    - libxt_osf: import nfnl_osf program
    - extensions: add support for xt_TEE
    - CT: fix --ctevents parsing
    - extensions: add CT extension
    - libxt_CT: print conntrack zone in ->print/->save
    - xtables: fix compilation when debugging is enabled
    - libxt_conntrack: document --ctstate UNTRACKED
    - iprange: fix xt_iprange v0 parsing


author: Thomas Woerner <twoerner@redhat.com> 1.4.9-1
changelog:
  - new version 1.4.9 with all new features of 2.6.35
    - doc: xt_hashlimit: fix a typo
    - doc: xt_LED: nroff formatting requirements
    - doc: xt_string: correct copy-and-pasting in manpage
    - extensions: add the LED target
    - extensions: libxt_quota.c: Support option negation
    - extensions: libxt_rateest: fix bps options for iptables-save
    - extensions: libxt_rateest: fix typo in the man page
    - extensions: REDIRECT: add random help
    - includes: sync header files from Linux 2.6.35-rc1
    - libxt_conntrack: do print netmask
    - libxt_hashlimit: always print burst value
    - libxt_set: new revision added
    - utils: add missing include flags to Makefile
    - xtables: another try at chain name length checking
    - xtables: remove xtables_set_revision function
    - xt_quota: also document negation
    - xt_sctp: Trace DATA chunk that supports SACK-IMMEDIATELY extension
    - xt_sctp: support FORWARD_TSN chunk type


author: Thomas Woerner <twoerner@redhat.com> 1.4.10-1
changelog:
  - new version 1.4.10 with all new features of 2.6.36
    - all: consistent syntax use in struct option
    - build: fix static linking
    - doc: let man(1) autoalign the text in xt_cpu
    - doc: remove extra empty line from xt_cpu
    - doc: minimal spelling updates to xt_cpu
    - doc: consistent use of markup
    - extensions: libxt_quota: don't ignore the quota value on deletion
    - extensions: REDIRECT: add random help
    - extensions: add xt_cpu match
    - extensions: add idletimer xt target extension
    - extensions: libxt_IDLETIMER: use xtables_param_act when checking options
    - extensions: libxt_CHECKSUM extension
    - extensions: libipt_LOG/libip6t_LOG: support macdecode option
    - extensions: fix compilation of the new CHECKSUM target
    - extensions: libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
    - iptables-xml: resolve compiler warnings
    - iptables: limit chain name length to be consistent with targets
    - libiptc: add Libs.private to pkgconfig files
    - libiptc: build with -Wl,--no-as-needed
    - xtables: remove unnecessary cast
  - dropped xt_CHECKSUM, added upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.11-1
changelog:
  - new version 1.4.11 with all new features of 2.6.37-39 (not usable)
    - lots of changes and bugfixes for base and extensions
    - complete changelog:
      http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.11.txt


author: Thomas Woerner <twoerner@redhat.com> 1.4.11.1-1.1
changelog:
  -  added temporary provides for libxtables.so.5 to be able to rebuild iproute,
     which is part of the standard build environment


author: Thomas Woerner <twoerner@redhat.com> 1.4.11.1-3
changelog:
  - added support for native systemd file (rhbz#694738)
    - new iptables.service file
    - additional requires
    - moved sysv init scripts to /usr/libexec
    - added new post, preun and postun scripts and triggers


author: Thomas Woerner <twoerner@redhat.com> 1.4.12-1
changelog:
  - new version 1.4.12 with support of all new features of kernel 3.0
    - build: attempt to fix building under Linux 2.4
    - build: bump soversion for recent data structure change
    - build: install modules in arch-dependent location
    - doc: fix group range in libxt_NFLOG's man
    - doc: fix version string in ip6tables.8
    - doc: include matches/targets in manpage again
    - doc: mention multiple verbosity flags
    - doc: the -m option cannot be inverted
    - extensions: support for per-extension instance global variable space
    - iptables-apply: select default rule file depending on call name
    - iptables: consolidate target/match init call
    - iptables: Coverity: DEADCODE
    - iptables: Coverity: NEGATIVE_RETURNS
    - iptables: Coverity: RESOURCE_LEAK
    - iptables: Coverity: REVERSE_INULL
    - iptables: Coverity: VARARGS
    - iptables: restore negation for -f
    - libip6t_HL: fix option names from ttl -> hl
    - libipt_LOG: fix ignoring all but last flags
    - libxtables: ignore whitespace in the multiaddress argument parser
    - libxtables: properly reject empty hostnames
    - libxtables: set clone's initial data to NULL
    - libxt_conntrack: move more data into the xt_option_entry
    - libxt_conntrack: restore network-byte order for v1,v2
    - libxt_hashlimit: use a more obvious expiry value by default
    - libxt_rateest: abolish global variables
    - libxt_RATEEST: abolish global variables
    - libxt_RATEEST: fix userspacesize field
    - libxt_RATEEST: use guided option parser
    - libxt_state: fix regression about inversion of main option
    - option: remove last traces of intrapositional negation
  - complete changelog:
    http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.12.txt


author: Thomas Woerner <twoerner@redhat.com> 1.4.12-1.1
changelog:
  - added temporary provides for libxtables.so.6 to be able to rebuild iproute,
    which is part of the standard build environment


author: Thomas Woerner <twoerner@redhat.com> 1.4.12.1-1
changelog:
  - new version 1.4.12.1 with new pkgconfig/libipq.pc
    - build: abort autogen on subcommand failure
    - build: strengthen check for overlong lladdr components
    - build: workaround broken linux-headers on RHEL-5
    - doc: clarify libxt_connlimit defaults
    - doc: fix typo in libxt_TRACE
    - extensions: use multi-target registration
    - libip6t_dst: restore setting IP6T_OPTS_LEN flag
    - libip6t_frag: restore inversion support
    - libip6t_hbh: restore setting IP6T_OPTS_LEN flag
    - libipq: add pkgconfig file
    - libipt_ttl: document that negation is available
    - libxt_conntrack: fix --ctproto 0 output
    - libxt_conntrack: remove one misleading comment
    - libxt_dccp: fix deprecated intrapositional ordering of !
    - libxt_dccp: fix random output of ! on --dccp-option
    - libxt_dccp: provide man pages options in short help too
    - libxt_dccp: restore missing XTOPT_INVERT tags for options
    - libxt_dccp: spell out option name on save
    - libxt_dscp: restore inversion support
    - libxt_hashlimit: default htable-expire must be in milliseconds
    - libxt_hashlimit: observe new default gc-expire time when saving
    - libxt_hashlimit: remove inversion from hashlimit rev 0
    - libxt_owner: restore inversion support
    - libxt_physdev: restore inversion support
    - libxt_policy: remove superfluous inversion
    - libxt_set: put differing variable names in directly
    - libxt_set: update man page about kernel support on the feature
    - libxt_string: define _GNU_SOURCE for strnlen
    - libxt_string: escape the escaping char too
    - libxt_string: fix space around arguments
    - libxt_string: replace hex codes by char equivalents
    - libxt_string: simplify hex output routine
    - libxt_tcp: always print the mask parts
    - libxt_TCPMSS: restore build with IPv6-less libcs
    - libxt_TOS: update linux kernel version list for backported fix
    - libxt_u32: fix missing allowance for inversion
    - src: remove unused IPTABLES_MULTI define
    - tests: add negation tests for libxt_statistic
    - xtoptions: flag use of XTOPT_POINTER without XTOPT_PUT
  - removed include/linux/types.h before build to be able to compile


author: Thomas Woerner <twoerner@redhat.com> 1.4.12.2-1
changelog:
  - new version 1.4.12.2 with new pkgconfig/libip4tc.pc and pkgconfig/libip6tc.pc
    - build: make check stage not fail when building statically
    - build: restore build order of modules
    - build: scan for unreferenced symbols
    - build: sort file list before build
    - doc: clarification on the meaning of -p 0
    - doc: document iptables-restore's -T option
    - doc: fix undesired newline in ip6tables-restore(8)
    - ip6tables-restore: implement missing -T option
    - iptables: move kernel version find routing into libxtables
    - libiptc: provide separate pkgconfig files
    - libipt_SAME: set PROTO_RANDOM on all ranges
    - libxtables: Fix file descriptor leak in xtables_lmap_init on error
    - libxt_connbytes: fix handling of --connbytes FROM
    - libxt_CONNSECMARK: fix spacing in output
    - libxt_conntrack: improve error message on parsing violation
    - libxt_NFQUEUE: fix --queue-bypass ipt-save output
    - libxt_RATEEST: link with -lm
    - libxt_statistic: link with -lm
    - Merge branch 'stable'
    - Merge branch 'stable' of git://dev.medozas.de/iptables
    - nfnl_osf: add missing libnfnetlink_CFLAGS to compile process
    - xtoptions: fill in fallback value for nvals
    - xtoptions: simplify xtables_parse_interface


author: Thomas Woerner <twoerner@redhat.com> 1.4.14-1
changelog:
  - new version 1.4.14
    - extensions: add IPv6 capable ECN match extension
    - extensions: add nfacct match
    - extensions: add rpfilter module
    - extensions: libxt_rateest: output all options in save hook
    - iptables: missing free() in function cache_add_entry()
    - iptables: missing free() in function delete_entry()
    - libiptc: fix retry path in TC_INIT
    - libiptc: Returns the position the entry was inserted
    - libipt_ULOG: fix --ulog-cprange
    - libxt_CT: add --timeout option
    - ip(6)tables-restore: make sure argv is NULL terminated
    - Revert "libiptc: Returns the position the entry was inserted"
    - src: mark newly opened fds as FD_CLOEXEC (close on exec)
    - tests: add rateest match rules
  - dropped patch5 (cloexec), merged upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.15-1
changelog:
  - new version 1.4.15
    - extensions: add HMARK target
    - iptables-restore: fix parameter parsing (shows up with gcc-4.7)
    - iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)
    - libxtables: add xtables_ip[6]mask_to_cidr
    - libxt_devgroup: add man page snippet
    - libxt_hashlimit: add support for byte-based operation
    - libxt_recent: add --mask netmask
    - libxt_recent: remove unused variable
    - libxt_HMARK: correct a number of errors introduced by Pablo's rework
    - libxt_HMARK: fix ct case example
    - libxt_HMARK: fix output of iptables -L
    - Revert "iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)"


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-1
changelog:
  - new version 1.4.16.2
    - build: support for automake-1.12
    - build: separate AC variable replacements from xtables.h
    - build: have `make clean` remove dep files too
    - doc: grammatical updates to libxt_SET
    - doc: clean up interpunction in state list for xt_conntrack
    - doc: deduplicate extension descriptions into a new manpage
    - doc: trim "state" manpage and reference conntrack instead
    - doc: have NOTRACK manpage point to CT instead
    - doc: mention iptables-apply in the SEE ALSO sections
    - extensions: libxt_addrtype: fix type in help message
    - include: add missing linux/netfilter_ipv4/ip_queue.h
    - iptables: fix wrong error messages
    - iptables: support for match aliases
    - iptables: support for target aliases
    - iptables-restore: warn about -t in rule lines
    - ip[6]tables-restore: cleanup to reduce one level of indentation
    - libip6t_frag: match any frag id by default
    - libxtables: consolidate preference logic
    - libxt_devgroup: consolidate devgroup specification parsing
    - libxt_devgroup: guard against negative numbers
    - libxt_LED: guard against negative numbers
    - libxt_NOTRACK: replace as an alias to CT --notrack
    - libxt_state: replace as an alias to xt_conntrack
    - libxt_tcp: print space before, not after "flags:"
    - libxt_u32: do bounds checking for @'s operands
    - libxt_*limit: avoid division by zero
    - Merge branch 'master' of git://git.inai.de/iptables
    - Merge remote-tracking branch 'nf/stable'
    - New set match revision with --return-nomatch flag support
  - dropped fixrestore patch, upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-2
changelog:
  - new sub package services providing the systemd services (RHBZ#862922)
  - new sub package utils: provides nfnl_osf and the pf.os database
  - using %{_libexecdir}/iptables as script path for the original init scripts
  - added service iptables save funcitonality using the new way provided by 
    initscripts 9.37.1 (RHBZ#748134)
  - added virtual provide for libxtables.so.7


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-4
changelog:
  - fixed missing services for update of pre F-18 installations (rhbz#867960)
    - provide and obsolete old main package in services sub package
    - provide and obsolete old ipv6 sub package (pre F-17) in services sub package


author: Ville Skyttä <ville.skytta@iki.fi> - 1.4.16.2-6
changelog:
  - Own unowned -services libexec dirs (#894464, Michael Scherer).
  - Fix -services unit file permissions (#732936, Michal Schmidt).


author: Thomas Woerner <twoerner@redhat.com> 1.4.18-1
changelog:
  - new version 1.4.18 
    - lots of documentation changes
    - Introduce match/target aliases
    - Add the "state" alias to the "conntrack" match
    - iptables: remove unused leftover definitions
    - libxtables: add xtables_rule_matches_free
    - libxtables: add xtables_print_num
    - extensions: libip6t_DNPT: fix wording in DNPT target
    - extension: libip6t_DNAT: allow port DNAT without address
    - extensions: libip6t_DNAT: set IPv6 DNAT --to-destination
    - extensions: S/DNPT: add missing save function
  - changes of 1.4.17:
    - libxt_time: add support to ignore day transition
    - Convert the NAT targets to use the kernel supplied nf_nat.h header
    - extensions: add IPv6 MASQUERADE extension
    - extensions: add IPv6 SNAT extension
    - extensions: add IPv6 DNAT target
    - extensions: add IPv6 REDIRECT extension
    - extensions: add IPv6 NETMAP extension
    - extensions: add NPT extension
    - extensions: libxt_statistic: Fix save output


author: Thomas Woerner <twoerner@redhat.com> 1.4.19.1-1
changelog:
  - new version 1.4.19.1
    - libxt_NFQUEUE: fix bypass option documentation
    - extensions: add connlabel match
    - extensions: add connlabel match
    - ip[6]tables: show --protocol instead of --proto in usage
    - libxt_recent: Fix missing space in manpage for --mask option
    - extensions: libxt_multiport: Update manpage to list valid protocols
    - utils: nfnl_osf: use the right nfnetlink lib
    - libip6t_NETMAP: Use xtables_ip6mask_to_cidr and get rid of libip6tc dependency
    - Revert "build: resolve link failure for ip6t_NETMAP"
    - libxt_osf: fix missing --ttl and --log in save output
    - libxt_osf: fix bad location for location in --genre
    - libip6t_SNPT: add manpage
    - libip6t_DNPT: add manpage
    - utils: updates .gitignore to include nfbpf_compile
    - extensions: libxt_bpf: clarify --bytecode argument
    - libxtables: fix parsing of dotted network mask format
    - build: bump version to 1.4.19
    - libxt_conntrack: fix state match alias state parsing
    - extensions: add libxt_bpf extension
    - utils: nfbpf_compile
    - doc: mention SNAT in INPUT chain since kernel 2.6.36
  - fixed changelog date weekdays where needed


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-1
changelog:
  - no connlabel.conf upstream anymore
  - new version 1.4.21
    - doc: clarify DEBUG usage macro
    - iptables: use autoconf to process .in man pages
    - extensions: libipt_ULOG: man page should mention NFLOG as replacement
    - extensions: libxt_connlabel: use libnetfilter_conntrack
    - Introduce a new revision for the set match with the counters support
    - libxt_CT: Add the "NOTRACK" alias
    - libip6t_mh: Correct command to list named mh types in manpage
    - extensions: libxt_DNAT, libxt_REDIRECT, libxt_NETMAP, libxt_SNAT, libxt_MASQUERADE, libxt_LOG: rename IPv4 manpage and tell about IPv6 support
    - extensions: libxt_LED: fix parsing of delay
    - ip{6}tables-restore: fix breakage due to new locking approach
    - libxt_recent: restore minimum value for --seconds
    - iptables-xml: fix parameter parsing (similar to 2165f38)
    - extensions: add copyright statements
    - xtables: improve get_modprobe handling
    - ip[6]tables: Add locking to prevent concurrent instances
    - iptables: Fix connlabel.conf install location
    - ip6tables: don't print out /128
    - libip6t_LOG: target output is different to libipt_LOG
    - build: additional include path required after UAPI changes
    - iptables: iptables-xml: Fix various parsing bugs
    - libxt_recent: restore reap functionality to recent module
    - build: fail in configure on missing dependency with --enable-bpf-compiler
    - extensions: libxt_NFQUEUE: add --queue-cpu-fanout parameter
    - extensions: libxt_set, libxt_SET: check the set family too
    - ip6tables: Use consistent exit code for EAGAIN
    - iptables: libxt_hashlimit.man: correct address
    - iptables: libxt_conntrack.man extraneous commas
    - iptables: libip(6)t_REJECT.man default icmp types
    - iptables: iptables-xm1.1 correct man section
    - iptables: libxt_recent.{c,man} dead URL
    - iptables: libxt_string.man add examples
    - extensions: libxt_LOG: use generic syslog reference in manpage
    - iptables: extensions/GNUMakefile.in use CPPFLAGS
    - iptables: correctly reference generated file
    - ip[6]tables: fix incorrect alignment in commands_v_options
    - build: add software version to manpage first line at configure stage
    - extensions: libxt_cluster: add note on arptables-jf
    - utils: nfsynproxy: fix error while compiling the BPF filter
    - extensions: add SYNPROXY extension
    - utils: add nfsynproxy tool
    - iptables: state match incompatibilty across versions
    - libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks
    - iptables: improve chain name validation
    - iptables: spurious error in load_extension
    - xtables: trivial spelling fix


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-2
changelog:
  - fixed system hang at shutdown if root device is network based (RHBZ#1007934)
    Thanks to Rodrigo A B Freire for the patch


author: Jiri Popelka <jpopelka@redhat.com> - 1.4.21-3
changelog:
  - no need to support the pre-systemd things
  - use systemd macros (#850166)
  - remove scriptlets for migrating to a systemd unit from a SysV initscripts
  - ./configure -> %configure
  - spec clean up
  - fix self-obsoletion


author: Jiri Popelka <jpopelka@redhat.com> - 1.4.21-8
changelog:
  - add missing reload and panic actions
  - BuildRequires: pkgconfig(x) instead of x-devel
  - no need to specify file mode bits twice (in %install and %files)


author: Thomas Woerner <twoerner@redhat.com> - 1.6.0-1
changelog:
  - New upstream version 1.6.0 with nft-compat support and lots of fixes (RHBZ#1292990)
    Upstream changelog:
    http://netfilter.org/projects/iptables/files/changes-iptables-1.6.0.txt
  - New libs sub package containing libxtables and unstable libip*tc libraries (RHBZ#1323161)
  - Using scripts form RHEL-7 (RHBZ#1240366)
  - New compat sub package for nftables compatibility
  - Install iptables-apply (RHBZ#912047)
  - Fixed module uninstall (RHBZ#1324101)
  - Incorporated changes by Petr Pisar
  - Enabled bpf compiler (RHBZ#1170227) Thanks to Yanko Kaneti for the patch


author: Petr Šabata <contyk@redhat.com> - 1.6.0-4
changelog:
  - Disabling parallel build to avoid build issues with xtables
  - See http://patchwork.alpinelinux.org/patch/1787/ for reference
  - This should be fixed in 1.6.1; parallel build can be restored after the
    update


author: Thomas Woerner <twoerner@redhat.com> - 1.6.1-1
changelog:
  - New upstream version 1.6.1 with enhanced translation to nft support and
    several fixes (RHBZ#1417323)
    http://netfilter.org/projects/iptables/files/changes-iptables-1.6.1.txt
  - Enable parallel build again


author: Michael Cronenworth <mike@cchtml.com> - 1.6.2-1
changelog:
  - New upstream version 1.6.2
    http://www.netfilter.org/projects/iptables/files/changes-iptables-1.6.2.txt


author: Phil Sutter <psutter@redhat.com> - 1.6.2-2
changelog:
  - Kill module unloading support
  - Support /etc/sysctl.d
  - Don't restart services after package update
  - Add support for --wait options to restore commands


author: Phil Sutter - 1.8.0-4
changelog:
  - xtables: Fix for segfault in iptables-nft
  - ebtables: Fix entries count in chain listing
  - Use %autosetup macro in %prep


author: Phil Sutter - 1.8.0-5
changelog:
  - xtables: Use meta l4proto for -p match
  - ebtables: Fix for listing of non-existent chains
  - xtables: Fix for no output in iptables-nft -S


author: Phil Sutter - 1.8.0-8
changelog:
  - Fix issues identified by covscan
  - xtables-restore: Fix flushing referenced custom chains
  - xtables: Accept --wait in iptables-nft-restore


author: Phil Sutter - 1.8.0-9
changelog:
  - Add further fixes for issues identified by covscan
  - Fix for bogus "is incompatible" warnings
  - Fix layout in License tag
  - Replace "Fedora" with "RHEL" in description
  - Make devel sub-package depend on libs sub-package


author: Phil Sutter - 1.8.2-2
changelog:
  - Point out that nftables-variants are installed in package description
  - Fix for deleting arptables rules by referencing them


author: Phil Sutter - 1.8.2-4
changelog:
  - Fix iptables init script for nftables-backend
  - Drop references to unsupported broute table from ebtables man page
  - xtables: Don't use native nftables comments


author: Phil Sutter - 1.8.2-6
changelog:
  - Improve performance with large rulesets
  - Fix for changes in arptables output
  - Fix for inserting rules at wrong position
  - Fix segfault when comparing rules with standard target
  - Fix ebtables output for negated values
  - Document missing arptables FORWARD chain


author: Phil Sutter <psutter@redhat.com> - 1.8.2-10
changelog:
  - arptables-nft: fix decoding of hlen on bigendian platforms
  - xtables-save: Fix table not found error message
  - xtables: Catch errors when zeroing rule rounters
  - extensions: TRACE: Point at xtables-monitor in documentation
  - extensions: libipt_realm: Document allowed realm values


author: Phil Sutter <psutter@redhat.com> - 1.8.2-12
changelog:
  - Add iptables-test.py testsuite to sources
  - extensions: libip6t_mh: fix bogus translation error
  - extensions: AUDIT: Document ineffective --type option
  - xtables-restore: Fix program names in help texts
  - xtables-save: Point at existing man page in help text
  - utils: Add a manpage for nfbpf_compile
  - Mark man pages in base package as documentation files


author: Phil Sutter <psutter@redhat.com> - 1.8.2-14
changelog:
  - arptables: Print space before comma and counters
  - extensions: Fix ipvs vproto parsing
  - extensions: Fix ipvs vproto option printing
  - extensions: Add testcase for libxt_ipvs


author: Phil Sutter <psutter@redhat.com> - 1.8.4-3
changelog:
  - Reduce globbing in library file names to expose future SONAME changes
  - Add bootstrapping for libip*tc SONAME bump


author: Phil Sutter <psutter@redhat.com> - 1.8.4-8
changelog:
  - xtables-translate: Fix for iface++
  - tests: shell: Fix skip checks with --host mode
  - xtables-restore: fix for --noflush and empty lines


author: Phil Sutter <psutter@redhat.com> - 1.8.4-11
changelog:
  - Complete ebtables-nft among match support
  - Replace RHEL-only xtables-monitor fix with upstream solution
  - xtables: Align effect of -4/-6 options with legacy
  - xtables: Drop -4 and -6 support from xtables-{save,restore}
  - Review systemd unit files


author: Phil Sutter <psutter@redhat.com> - 1.8.4-16
changelog:
  - tests/shell: Add test for bitwise avoidance fixes
  - ebtables: Optimize masked MAC address matches
  - nft: Optimize class-based IP prefix matches
  - nft: Fix for broken address mask match detection
  - nft: cache: Make nft_rebuild_cache() respect fake cache
  - tests: shell: Improve concurrent noflush restore test a bit
  - nft: Fix for concurrent noflush restore calls
  - nft: Fix error reporting for refreshed transactions
  - nft: Make batch_add_chain() return the added batch object


author: Phil Sutter <psutter@redhat.com> - 1.8.4-17
changelog:
  - extensions: dccp: Fix for DCCP type 'INVALID'
  - tests: shell: Merge and extend return codes test
  - nft: Fix command name in ip6tables error message
  - extensions: libxt_CT: add translation for NOTRACK
  - extensions: libipt_icmp: Fix translation of type 'any'
  - tests/shell: Test for fixed extension registration
  - libxtables: Register multiple extensions in ascending order
  - libxtables: Simplify pending extension registration
  - libxtables: Make sure extensions register in revision order


author: Nikola Pajkovsky <npajkovs@redhat.com> - 1.1.4-4
changelog:
  - iptraf-ng-1.1.4-4

    Fedora start using -Werror=format-security and iptraf-ng had some
    parts where error compilation was trigged.

    202b2e7b27a1 Makefile: add -Werror=format-security

    Resolved: #1037133


author: Alejandro Pérez <aeperezt@fedoraproject.org> - 1.1.4-5
changelog:
  - fix bug 1020552
    rpm report /var/lock/ipraf-ng is missing
    fix dates on changelog
    added missing file iptraf-nf-tmpfiles.conf


author: Phil Cameron <pcameron@redhat.com> - 1.1.4-16
changelog:
  - Moved upstream from https://fedorahosted.org/iptraf-ng/ to 
    https://github.com/iptraf-ng/iptraf-ng/ with release v1.1.4
    Fixes error in patch Patch03 - this fixes 1283773


author: Thomas Woerner <twoerner@redhat.com> 2.2.1-3
changelog:
  - fixed compile problem because of strerror undefined in scope
    Fixes (rhbz#434482)
  - fixed description (rhbz#140516)


author: Thomas Woerner <twoerner@redhat.com> 2.2.6-1
changelog:
  - New upstream version 2.2.6
    - Located at github
    - Fixes (RHBZ#1294913 and RHBZ#1375395)
  - Additional upstream patch (no_debug) to drop some debugging remains
  - Additional proposed patch to fix segmentation fault with -1 -C (RHBZ#599181)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - add remaining binaries.
  - casts to remove compilation warnings.
  - terminate if -w deadline is reached exactly (#8724).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - include README.ifenslave doco.
  - "ping -i N" was broke for N >= 3 (#9929).
  - update to ss000121:
  -- clockdiff: preserve raw socket errno.
  -- ping: change error exit code to 1 (used to be 92,93, ...)
  -- ping,ping6: if -w specified, transmit until -c limit is reached.
  -- ping,ping6: exit code non-zero if some packets not received within deadline.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a bunch of compiler warnings (#37131)
  - Fixed wrong exit code for no packets and deadline (#40323)
  - Moved arping to /sbin from /usr/sbin due to ifup call (#45785). Symlink from
    /usr/sbin/ provided for backwards compatibility.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Added a patch to activate the rdisc server (#64270).
  - Display the countermeasures warning only in verbose (#55236)


author: Phil Knirsch <pknirsch@redhat.com> 20020124-7
changelog:
  - Added new BuildPreReqs for docbook-utils and perl-SGMLSpm (#66661)
  - Fixed ipv6 error printing problem (#66659).


author: Phil Knirsch <pknirsch@redhat.com> 20020927-3
changelog:
  - Removed bonding tarball and replaced it with ifenslave.c and README
  - FHS compliance for all tools, now to be found in /bin with compat symlinks to
    old places.


author: Phil Knirsch <pknirsch@redhat.com> 20020927-4
changelog:
  - Fixed DNS lookup problems (#68212).
  - Added warning if binding problem failed on subinterface (#81640).


author: Martin Bacovsky <mbacovsk@redhat.com> - 20020927-40
changelog:
  - tracepath doesn't continue past destination host (#174032) 
    previous patch replaced by new one provided by <mildew@gmail.com>
    option -c added


author: Martin Bacovsky <mbacovsk@redhat.com>- 20020927-42
changelog:
  - Resolves: #218706 - now defines the destination address along RFC3484
  - Resolves: #229630 - ifenslave(8) man page added
  - Resolves: #213716 - arping doesn't work on InfiniBand ipoib interfaces


author: Martin Bacovsky <mbacovsk@redhat.com> - 20070202-1
changelog:
  - upgarde to new upstream iputils-s20070202
  - Resolves: #229995
  - Resolves: #225909 - Merge Review: iputils
  - patches revision


author: Martin Bacovsky <mbacovsk@redhat.com> - 20070202-2
changelog:
  - Resolves: #234060: [PATCH] IDN (umlaut domains) support for ping and ping6
    patch provided by Robert Scheck <redhat@linuxnetz.de>


author: Martin Bacovsky <mbacovsk@redhat.com> - 20070202-4
changelog:
  - resolves: #236725: ping does not work for subsecond intervals for ordinary user
  - resolves: #243197: RFE: Please sync ifenslave with current kernel
  - resolves: #246954: Initscript Review
  - resolves: #251124: can't build rdisc - OPEN_MAX undeclared


author: Martin Nagy <mnagy@redhat.com> - 20070202-6
changelog:
  - fix absolute symlinks and character encoding for RELNOTES (#225909)
  - preserve file timestamps (#225909)
  - use %{?_smp_mflags} (#225909)
  - fix service rdisc stop removing of lock file


author: Martin Nagy <mnagy@redhat.com> - 20071127-3
changelog:
  - major patch cleanup so it will be easier to get patches upstream
  - fix for #68212, previous fix actually didn't work for ping6
  - renewed the ia64 align patches
  - update README.bonding
  - clear up the code from warnings
  - spec file cleanup


author: Jiri Skala <jskala@redhat.com> - 20101006-3
changelog:
  - applied patch dropping capabilities of Ludwig Nussel
  - fixes building ping, pinpg6 with -pie option
  - moves most CFLAGS options from spec to Makefile


author: Jan Synáček <jsynacek@redhat.com> 20101006-15
changelog:
  - Ping fixes:
    + enable marking packets when the correct capabilities are set (#802197)
    + integer overflow (#834661)
    + Fallback to numeric addresses while exiting (#834661)


author: Jan Synáček <jsynacek@redhat.com> - 20121112-1
changelog:
  - Update to iputils-s20121112 (#875767)
    + drop unnecessary patches
    + update patches
    + wrap SO_BINDTODEVICE with the correct capability
    + fix incorrect free (hits when -lidn is used)


author: Jan Synáček <jsynacek@redhat.com> - 20121121-1
changelog:
  - Update to iputils-s20121121, drop unnecessary patches
  - Add capabilities to clockdiff and arping
  - Renumber patches
  - Fix arping's default device search logic


author: Jan Synáček <jsynacek@redhat.com> - 20121125-2
changelog:
  - Comment patches and cleanup
  - Update ifaddrs patch
  - Call usage() before limiting capabilities
  - Correct ifaddrs patch
  - Drop corr_type patch (gcc 4.4 build hack)
  - Fix missing end tags in sgml documentation


author: Jan Synáček <jsynacek@redhat.com> - 20121207-1
changelog:
  - Update to iputils-s20121207 (#884983) - fixes a ping segfault introduced
    by the previous update
  - Update ninfod-minor patch
  - Renumber patches
  - Fix -F switch (flowlabel patch)


author: Jan Synáček <jsynacek@redhat.com> - 20121221-8
changelog:
  - reference documentation in the service files
  - remove redundant sysconfig-related stuff
  - remove sysvinit script


author: Jesse Keating <jkeating@redhat.com> - 1.13-2
changelog:
  - rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc*
    (#203001)
  - Remove hack to use cvs checkin ID as release as it doesn't follow
    packaging guidelines


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.3-5
changelog:
  - Make irqbalance scan for new irqs when it detects new irqs (bz832815)
  - Fixes SIGFPE crash for some banning configuration (bz849792)
  - Fixes affinity_hint values processing (bz832815)
  - Adds banirq and bansript options (bz837049)
  - imake isn't needed for building any more (bz844359)
  - Fixes clogging of syslog (bz837646)
  - Added IRQBALANCE_ARGS variable for passing arguments via systemd(bz837048)
  - Fixes --hint-policy=subset behavior (bz844381)


author: Kairui Song <kasong@redhat.com> 2:1.4.0-2
changelog:
  - Fix several memleak problems found by covscan (bz1606969)
  - Fix an possible overflow error (bz1606969)
  - Don't leak socket fd on connection error (bz1606969)
  - Check xen-dyn-event more flexible (bz1576164)


author: Kairui Song <kasong@redhat.com> 2:1.4.0-3
changelog:
  - Update document and remove dead options to fix manpage scan warning (bz1612706)
  - Fix gating test error (bz1680619)


author: Hans de Goede <hdegoede@redhat.com> - 6.2.0.872-11
changelog:
  - Fix iscsid autostarting when upgrading from an older version
    (add iscsid.startup key to iscsid.conf on upgrade)
  - Fix printing of [ OK ] when successfully stopping iscsid
  - systemd related fixes:
   - Add Should-Start/Stop tgtd to iscsi init script to fix (re)boot from
     hanging when using locally hosted targets
   - %ghost /var/lock/iscsi and contents (#656605)


author: Hans de Goede <hdegoede@redhat.com> - 6.2.0.872-12
changelog:
  - Change iscsi init scripts to check for networking being actually up, rather
    then for NetworkManager being started (#692230)


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.18
changelog:
  - 789683 Fix boot slow down when the iscsi service is started
    (regression added in 6.2.0.872.16 when the nm wait was added).


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-1
changelog:
  - rebase to new upstream code
  - systemd conversion
  - 565245 Fix multilib issues caused by timestamp in doxygen footers


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-4
changelog:
  - build with libkmod support, instead of calling out to modprobe
  - enable socket activation by default


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-7
changelog:
  - Use the systemd tmpfiles service to recreate lockfiles in /var/lock
  - 955167 build as a position independent executable
  - 894576 fix order of setuid/setgid and drop additional groups


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-10
changelog:
  - sync with upstream git, minor context fixes after rebase of out-of-tree patches
  - iscsiuio is merged upstream, remove old source archive and patches
  - spec cleanups to fix rpmlint issues


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-11
changelog:
  - iscsi boot related fixes
    make sure iscsid gets started if there are any boot sessions running
    add reload target to fix double session problem when restarting from NM
    don't rely on session list passed from initrd, never got fully implemented
    remove patches related to running iscsid from initrd, possible to revisit later


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-16
changelog:
  - fix iscsiuio socket activation
  - have systemd start socket units on iscsiadm use, if not already listening


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-17
changelog:
  - fix regression in glob use, inappropriate error code escape
  - clean up dead node links from discovery when reusing tpgt


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-21
changelog:
  - boot session handling improvements
  - split out iscsiuio into a seperate sub-package
  - sync with new upstream additions
  - revert change to return code when calling login_portal for sessions
    that already exist, as it impacts users scripting around iscsiadm


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-24.gitc9d830b
changelog:
  - sync with upstream v2.0.873-84-gc9d830b
  - ignore iscsiadm return in iscsi.service
  - make sure systemd order against remote mounts is correct
  - add discovery as a valid mode in iscsiadm.8
  - make sure to pass --with-security=no to isns configure


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-25.gitc9d830b
changelog:
  - split out session logout on shutdown to a separate service
  - 985321 roll up libiscsi patches, update python bindings to support python3
  - scriptlets were never split out properly for the iscsiuio subpackage
  - fix regression in network interface binding
  - created iscsi-shutdown.service to ensure that session cleanup happens
  - Add --with-slp=no
  - segfault from unexpected netlink event during discovery
  - inhibit strict aliasing optimizations in iscsiuio, rpmdiff error


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-26.git6aa2c9b
changelog:
  - rebase to upstream snapshot
  - add patch to improve GIL lock performance in libiscsi
  - Split Python 2 and Python 3 bindings out into subpackages


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-28.git6aa2c9b
changelog:
  - fixed broken multiple trigger scripts, removed old pre-systemd migration triggers
  - added libiscsi session API patch (bz #1262279)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 6.2.0.874-7.git86e8892
changelog:
  - Python 2 binary package renamed to python2-iscsi-initiator-utils
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Chris Leech <cleech@redhat.com> - 6.2.0.876-1.git4ef9261
changelog:
  - pull in post 2.0.876 tagged fixes from upstream git
  - minimal packaging of libopeniscsiusr (internal use only, no dev package yet)


author: Chris Leech <cleech@redhat.com> - 6.2.0.876-5.gitf3c8e90
changelog:
  - iscsiuio: add mutex to protect netlink buffer for pass-through xmit
  - iscsid: get gateway information from sysfs when recovering sessions
  - enabled MaxOustandingR2T negotiation during login


author: Chris Leech <cleech@redhat.com> - 6.2.0.878-0.gitd791ce0
changelog:
  - 1761940 iSCSI CHAP authentication not function with FIPS enabled
  - Service file improvements forward ported from RHEL 7.8
  - various static analysis fixes from upstream


author: Chris Leech - 6.2.0.878-5.gitd791ce0
changelog:
  - 1849931, 1869438 go back to MD5 CHAP only by default
    new CHAP modes can cause issue with some targets,
    so SHA1/SHA256/SHA3-256 modes must be configured to enable now


author: Chris Leech <cleech@redhat.com> - 0.94-1
changelog:
  - new upstream location, update to 0.94
  - new devel package, upstream open-iscsi is dropping it's internal copy


author: Sean Middleditch <sean@middleditch.us> 1.1.3-2
changelog:
  - Fix Changelog dates.
  - Mix autoheader warning.
  - Added make check.
  - Build and install HTML documentation in -devel package.


author: Xin Long <lxin@redhat.com> - 2.11-3
changelog:
  - Deal with warnings under gcc 8
  - Call va_end after va_copy in json_vsprintf
  - Fix bogus date in jansson.spec


author: Markus Mayer <lotharlutz@gmx.de> - 0.73-2
changelog:
  - fix source url
  - convert LICENSE and AUTHORS to UTF-8
  - remove not needed 'defattr(-,root,root,-)' and 'rm -rf $RPM_BUILD_ROOT'
  - add add soname to lib(jimtcl-add_soname.patch)
  - add README.* files to doc
  - add STYLE file to doc


author: Markus Mayer <lotharlutz@gmx.de> - 0.75-1
changelog:
  - new upstream release 0.75
  - rebase jimtcl-fix_doc_paths.patch
  - drop utf-8 conversion in prep (upstream uses utf now)


author: Björn Esser <besser82@fedoraproject.org> - 0.12.1-1
changelog:
  - Update to new upstream release
  - Introduces SONAME bump, that should have been in 0.12 already
  - Unify %doc
  - General spec-file cleanup


author: Björn Esser <besser82@fedoraproject.org> - 0.13-3
changelog:
  - Add upstream patch for adding size_t json_c_object_sizeof()
  - Enable partial multi-threaded support


author: Anna Khaitovich <akhaitov@redhat.com> - 0.13.1-0.3
changelog:
  - Don't package empty /usr/share/doc/json-c
  - Resolves: rhbz#1741076
  - Do not use --enable-rdrand
  - Resolves: rhbz#1806532


author: Kalev Lember <kalevlember@gmail.com> - 1.0.2-1
changelog:
  - Update to 1.0.2
  - Avoid duplicating -devel deps that rpmbuild autogenerates
  - Tighten -devel deps with %_isa


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.05-2
changelog:
  - Build everything, obsoletes console-tools
  - s/Copyright:/License:/
  - License is GPL, not just distributable
  - Add our compose mappings from old console-tools
  - Add triggerpostun -- console-tools magic to get sane fonts and mappings


author: Than Ngo <than@redhat.com>
changelog:
  - update to 1.0.6
  - use %{_tmppath}
  - use find_lang
  - support new gettext
  - remove some patch files, which are included in 1.0.6
  - fix to use RPM_OPT_FLAGS


author: Jakub Jelinek <jakub@redhat.com> 1.06-24
changelog:
  - use cyr-sun16 cyrillic chars in latarcyrheb-sun16 font
    instead of old LatArCyrHeb-16 chars
  - add Euro character to latarcyrheb-sun16
  - use latarcyrheb-sun16 by default in unicode_start script


author: Nalin Dahyabhai <nalin@redhat.com> 1.06-27
changelog:
  - add detached signature
  - remove directory names from PAM configuration so that the same config file
    can be used for any arch on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 1.08-2
changelog:
  - only output terminal unicode init sequence if both stdout and stderr are
    connected to terminals, so that it doesn't show up when script outputs
    get piped to files


author: Adrian Havill <havill@redhat.com> 1.08-7
changelog:
  - make euro/latin-9 the default instead of latin-1 and 7-bit (#97013)
  - fix swedish keymap; se, not sv (#88791)
  - add fr-latin0 legacy alias of fr-latin-9 (#88324)
  - add ".map" ext to filename param of init script (#90562)


author: Adrian Havill <havill@redhat.com> 1.08-9
changelog:
  - don't print "plus before..." warnings about non-supported capslock
    in unimode <Andries.Brouwer@cwi.nl> (#81855)


author: Miloslav Trmac <mitr@redhat.com> - 1.12-4
changelog:
  - Don't ship a patch backup file
  - Mention in setfont.8 that 512-glyph fonts reduce the number of available
    colors (#140935, patch by Dmitry Butskoj)
  - Remove "Meta_acute" from German keymaps (#143124)
  - Make the %triggerun script condition more precise, ignore failure of the
    script


author: Miloslav Trmac <mitr@redhat.com> - 1.12-5
changelog:
  - Put "Meta_acute" back in German keymaps, just ignore it in (loadkeys -u)
    (patch by Jochen Schmitt)
  - Don't ship patch backup files, simpler way


author: Miloslav Trmac <mitr@redhat.com> - 1.12-11
changelog:
  - Don't ship character set lists (they are already in glibc-common) and an
    obsolete copy of kbd.FAQ


author: Miloslav Trmac <mitr@redhat.com> - 1.12-13
changelog:
  - Fix build with new coreutils
  - Hardcode paths in unicode_start to avoid a few file lookups (#178329)
  - Drop unnecessary Prereq: sed mktemp


author: Miloslav Trmac <mitr@redhat.com> - 1.12-19
changelog:
  - Ship "el" translation instead of the obsolete "gr" translation
    Resolves: #210749
  - Fix % quoting in %changelog


author: Miloslav Trmac <mitr@redhat.com> - 1.12-20
changelog:
  - Document that setkeycodes doesn't affect USB keyboards and that the kernel
    doesn't provide the raw scan codes by default
    Resolves: #211803


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.12-26
changelog:
  - Fix ro.map to generate right unicode for s, S, t, T with comma
  - Fix LatArCyrHeb-16 unicode mapping table to show comma-version
    of s, S, t, T and cedilla-version of s, S, t, T as the same glyph
    (because there is no font in kbd for comma-version)
    Resolves: #329071


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.12-28
changelog:
  - Fix ro.map.gz, add ro_std.map.gz, drop ro_win.map.gz,
    add Lat2-Terminus16.psf console font (many thanks to Alexandru Szasz
    <alexxed@gmail.com>)
    Resolves: #253892


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15-4
changelog:
  - Merge review (drop Provides/Obsoletes, change Prereq to Requires,
    add URL, convert ChangeLog to utf-8, replace locale destination
    with macro, add COPYING and add dvorak documentation)
    Resolves: #225958


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.2-1
changelog:
  - Update to kbd-1.15.2 (removed kbd-1.15-quiet_doc.patch and romanian keymaps, both are
    part of the upstream tarball now)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.3-4
changelog:
  - Ship double scaled latarcyrheb console font for high resolution screens
    (created by Tom Horsley)
    Resolves: #617768


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-1
changelog:
  - Update to kbd-1.15.5 (removed kbd-1.15-resizecon-x86_64.patch,
    kbd-1.15-defkeymap.patch, kbd-1.15.3-fix-es-translation.patch,
    kbd-1.15.3-loadkeys-d.patch)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-3
changelog:
  - Include xkb layouts from xkeyboard-config converted to console keymaps
  - Add version to vlock provides
    Resolves: #902564


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.0.1-4
changelog:
  - Add xkb and legacy keymaps subdirs to loadkyes search path, remove symlinks
    Related: #1028207
  - Don't convert layouts that can't input ASCII (patch by Adam Williamson)
    Resolves: #1031848
  - Fix vlock doesn't perform PAM account management or credential reinitialization
    (patch by  Dmitry V. Levin)
    Resolves: #913311


author: John Kacur <jkacur@redhat.com>
changelog:
  - disabled #patch01
  - Updated the trace-cmd source
  - Changed version to 0.7.0
  - Added bogus patch to satisfy rpm requirements
  - Related:bz519630


author: John Kacur <jkacur@redhat.com>
changelog:
  - Added trace-cmd-Makefile-EXTRAVERSION-should-be-set-withou.patch
  - Added trace-cmd-Makefile-use-a-substitution-reference.patch
  - add-DESTDIR-to-make.patch
  - Related: rhbz599507


author: John Kacur <jkacur@redhat.com>
changelog:
  - Rebasing to trace-cmd-1.0.2
  - Added parse-events-Do-not-fail-on-FORMAT-TOO-BIG-event-err.patch
  - Added trace-cmd-Prevent-latency-tracer-plugins-from-doing-.patch
  - Added trace-cmd-Prevent-print_graph_duration-buffer-overfl.patch


author: Jon Stanley <jonstanley@gmail.com> - 1.0.5-1
changelog:
  - Rebase to 1.0.5
  - Add Makefile patch to support passing RPM_OPT_FLAGS
  - Add kernelshark subpackage
  - Initial Fedora version


author: Zamir SUN <zsun@fedoraproject.org> - 2.6-2
changelog:
  - Add bz1386451-trace-cmd-record-crash-f-before-e.patch
  - Fix rpmlint error unstripped-binary-or-object
  - Resolves: rhbz#1386451


author: John Kacur <jkacur@redhat.com> - 2.7-8
changelog:
  - Install kernelshark manpage with kernelshark subpackage, not with trace-cmd
  Resolves: rhbz#1678252


author: Jeff Moyer <jmoyer@redhat.com> - 1.101-4
changelog:
  - Build for x86_64 as well.  Kdump support doesn't work there, but users
    should be able to use kexec.


author: Jeff Moyer <jmoyer@redhat.com> - 1.101-8
changelog:
  - Fix the service stop case.  It was previously unloading the wrong kernel.
  - Implement the "restart" function.
  - Add the "irqpoll" option as a default kdump kernel commandline parameter.
  - Create a default kernel command line in the sysconfig file upon rpm install.


author: Thomas Graf <tgraf@redhat.com> - 1.101-10
changelog:
  - kdump7.patch
     o Remove elf32 core headers support for x86_64
     o Fix x86 prepare elf core header routine
     o Fix ppc64 kexec -p failure for gcc 4.10
     o Fix few warnings for gcc 4.10
     o Add the missing --initrd option for ppc64
     o Fix ppc64 persistent root device bug
  - Remove --elf32-core-headers from default configuration, users
    may re-add it via KEXEC_ARGS.
  - Remove obsolete KEXEC_HEADERS


author: Thomas Graf <tgraf@redhat.com> - 1.101-15
changelog:
  - Don't add kdump service by default, let the user manually add it to
    avoid everyone seeing a warning.


author: Neil Horman <nhorman@redhat.com> - 1.101-45
changelog:
  - fixed typo in mkdumprd for bz 202983
  - fixed typo in mkdumprd for bz 203053
  - clarified docs in kdump.conf with examples per bz 203015


author: Jarod Wilson <jwilson@redhat.com> - 1.101-46
changelog:
  - ppc64 fixups:
    - actually build ppc64 binaries (bug 203407)
    - correct usage output
    - avoid segfault in command-line parsing
  - install kexec man page
  - use regulation Fedora BuildRoot


author: Neil Horman <nhorman@redhat.com> - 1.101-58
changelog:
  - Updating kdump.init and mkdumprd with most recent RHEL5 fixes
  - Fixing BuildReq to require elfutils-devel-static


author: Neil Horman <nhorman@redhat.com> - 1.102pre-1
changelog:
  - Bumping kexec version to latest horms tree (bz 257201)
  - Adding trigger to remove initrds when a kernel is removed


author: Neil Horman <nhorman@redhat.com> - 1.102pre-3
changelog:
  - Fix ARCH placement in kdump init script (bz 427201)
  - Fix BuildRequires
  - Fix Makedumpfile to build with new libelf


author: Neil Horman <nhorman@redhat.com> - 1.102pre-6
changelog:
  - Bringing rawhide up to date with bugfixes from RHEL5
  - Adding patch to prevent kexec buffer overflow on ppc (bz 428684)


author: Neil Horman <nhorman@redhat.com> 2.0.0-18
changelog:
  - Updated initscript to use mkdumprd2 if manifest is present
  - Updated spec to require dash
  - Updated sample manifest to point to correct initscript
  - Updated populate_std_files helper to fix sh symlink


author: CAI Qian <caiqian@redhat.com> - 2.0.0-34
changelog:
  - Massive forward-port from RHEL6
  - Update kexec-kdump-howto.txt
  - Update docs to reflect use of ext4
  - Update mkdumprd to pull in all modules needed
  - Fix mkdumprd typo
  - Removed universal add of ata_piix from mkdumprd
  - Fix infinite loop from modprobe changes
  - Fixed kexec-kdump-howto.doc for RHEL6
  - Update makedumpfile to 1.3.5
  - Improved mkdumprd run time
  - Cai's fix for broken regex
  - Fixing crashkernel syntax parsing
  - Fix initscript to return proper LSB return codes
  - Fixed bad call to resolve_dm_name
  - Added poweroff option to mkdumprd
  - Fixed readlink issue
  - Fixed x86_64 page_offset specifictaion
  - Fixed lvm setup loop to not hang
  - Added utsname support to makedumpfile for 2.6.32
  - Fix critical_disks list to exclude cciss/md
  - Add help info for -b option
  - Add ability to handle firmware hotplug events
  - Update mkdumprd to deal with changes in busybox fsck
  - Vitaly's fix to detect need for 64 bit elf
  - Fix major/minor numbers on /dev/rtc
  - Fix ssh id propogation w/ selinux
  - Add blacklist feature to kdump.conf
  - Removed rhpl code from firstboot
  - Fixed firstboot enable sense
  - Remove bogus debug comment from mkdumprd.
  - Handle SPARSEMEM properly
  - Fix scp monitoring script
  - Fix firstboot to find grub on EFI systems
  - Fixed mkdumprd to remove dup insmod
  - Fixed kdump fsck pause
  - Fixed kdump option handling
  - fixed raid5 module detection


author: Cong Wang <xiyou.wangcong@gmail.com> - 2.0.3-42
changelog:
  - get ip addr with getent
  - spec: depends on dracut-network
  - Handle net option for nfs in kdump.conf correctly


author: Dave Young <dyoung@redhat.com> - 2.0.3-44
changelog:
  - update ppc64 sysconfig, resolve bug 811449
  - deal with nic rename issue, resolve bug 810107
  - update x86_64 sysconfig, resolve bug 813711


author: Dave Young <ruyang@redhat.com> - 2.0.3-46
changelog:
  - mkdumprd: Start using --hostonly and --add kdumpbase while calling dracut
  - get_mp function cleanup
  - move kdump script order to the end of pre pivot
  - port raw dump from rhel6
  - remove multi dump


author: Dave Young <ruyang@redhat.com> - 2.0.3-48
changelog:
  - do_default_action cleanup, Resolves: bz805773
  - add rhcrashkernel-param for anaconda use, Resolves: bz707441
  - Basic iscsi target dump support (software initiator), Resolves bz822701
  - Static ip configuratio support, Resolves: bz822739
  - udev rules fix, Resolves: bz808817


author: Dave Young <ruyang@redhat.com> - 2.0.3-49
changelog:
  - cleanup DUMP_INSTRUCTION handling
  - final reboot behavior fix
  - dump_rootfs for default target fix
  - add vlan support
  - fix and refactor bond handling code
  - fix and refactor bridge handling code
  - core_collector doc basic fix
  - omit plymouth module, Resolves: bz821997
  - mkdumprd manpage cleanup manpage
  - mkdumprd: remove --debug
  - mkdumprd: remove noconf
  - makedumprd: remove -d
  - kdump.conf add sshkey
  - kdump.conf remove disk_timeout
  - kdump.conf make path uncommented
  - kdump.conf.5 add default poweroff
  - kdump.conf default shell fix
  - kdump.conf default default action fix
  - kdump.conf.5 remove module option
  - kdump.conf remove kdump_pre/kdump_post
  - kdump.conf: remove link_delay


author: Dave Young <ruyang@redhat.com> - 2.0.3-50
changelog:
  - add blacklist option, Resolves: bz805774
  - Add kdump_post and kdump_pre support, Resolves: bz805773
  - Port check_config from rhel6, Resolves: bz805778
  - raw core_collector fix
  - ssh core_collector fix
  - drcut-kdump.sh: cleanup kdump.conf check


author: Dave Young <ruyang@redhat.com> - 2.0.3-51
changelog:
  - add s390x netdev setup
  - Add s390x support
  - Cleanup temp file leaved at /tmp/
  - add check_size function for fs dump
  - add ssh check_size
  - blacklist patch apply fix
  - Respect bonding mode
  - Support dump over vlan tagged bonding


author: Dave Young <ruyang@redhat.com> - 2.0.3-53
changelog:
  - refactor net option
  - use fstab-sys to mount nfs
  - rename function dump_localfs
  - dump_localfs error path fix
  - update kexec-kdump-howto.txt about systemctl commands
  - ssh propagate alert message fix
  - remove useless dracut cmdline '-c /dev/null'
  - remove useless dracut cmdline for kernel-modules and kdumpbase
  - install core_collector in module-setup.sh
  - install extra_bins in module-setup.sh
  - remove busybox dependency
  - improve warning message of space checking
  - do not mount root twice
  - do not add fstab-sys module in dracut cmdline
  - omit dash module
  - network dns config fix
  - shell exit value fix


author: Dave Young <ruyang@redhat.com> - 2.0.3-54
changelog:
  - pass raw device as dracut argument
  - iscsi setup fix
  - firstboot: add automatic and manual memory reservation for rhel
  - firstboot: remove unnecessary underline shortkey
  - firstboot: fix gtk warning about non-zero page size
  - firstboot: update all kernels config in grubbyCmd
  - firstboot: add actual reserved memory widget
  - firstboot code cleanup
  - rhcrashkernel-param: echo crashkernel=auto for rhel7
  - Remove the kernel-kdump handling
  - s390x firstboot fix
  - remove elilo support
  - grub2 fix in firstboot
  - Take closing the reboot dialog as no
  - Handle new crashkernel= syntax in firstboot
  - Fix a localized string in firstboot
  - Configure kdump in firstboot
  - fix firstboot to ensure kdump svc is disabled properly
  - firstboot text domain fix
  - Update to use systemctl instead of sysv chkconfig
  - port force_rebuild kdump.conf option
  - Change return value to indicate the result of dump_raw() correctly.
  - call dracut function for default shell


author: Dave Young <ruyang@redhat.com> - 2.0.3-56
changelog:
  - Pull vmcore-dmesg patches from vivek
  - ppc/ppc64: compile purgatory with gcc option msoft-float
  - Update to support f18 grub2 efi config file
  - pass persistent name to dracut --device
  - pass persistent name to dracut --mount
  - use persistent name in kdump.conf of initramfs
  - mkdumprd: add function get_persistent_dev
  - remove useless uuid and label handling


author: Dave Young <ruyang@redhat.com> - 2.0.3-59
changelog:
  - Enable kdump service after installation
  - get MEM_RESERVED from sysfs attribute
  - get_ssh_size: use -n to redirect stdin from /dev/null
  - add random feeding code for ssh dump
  - kdump option space checking improvement
  - kdumpctl: multi dump target checking fix


author: Dave Young <ruyang@redhat.com> - 2.0.3-60
changelog:
  - makedumpfile 1.5.1
  - Update po tar.gz
  - Add a notes for zanata process
  - Add two xmls file for po zanata translation
  - Cleanup and recreate po files


author: Dave Young <ruyang@redhat.com> - 2.0.3-62
changelog:
  - Pull translated po files from zanata
  - Optimize redundent code fetching server of network dump
  - change the dump dir format to be more readable


author: Dave Young <ruyang@redhat.com> - 2.0.3-63
changelog:
  - revert explictly handling of PIPESTATUS
  - enable pipefail bash option
  - wrong ssh key fix
  - build fix: Update 3 po files: po/gu.po po/or.po po/zh_CN.po


author: Dave Young <ruyang@redhat.com> - 2.0.3-65
changelog:
  - Add support for team devices
  - Update translation file po/it.po
  - remove wait for net ok function
  - add bootdev cmdline param
  - kdumpnic cmdline file name cleanup


author: Dave Young <ruyang@redhat.com> - 2.0.3-66
changelog:
  - Spec: remove kdump image when a corresponding kernel is removed
  - Merge an upstream patch for fix a ppc64 makedumpfile bug


author: Baoquan He <bhe@redhat.com> - 2.0.3-67
changelog:
  - Remove comma which is redundant
  - Modify codes related to dump dir to make it clearer
  - Rectify the get_host_ip implementation
  - Revert: Merge an upstream patch for fix a ppc64 makedumpfile bug with with CONFIG_SPARSEMEM_EXTREME
  - pull makedumpfile 1.5.3


author: Baoquan He <bhe@redhat.com> - 2.0.3-68
changelog:
  - tune sysconfig to save memory usage
  - Remove useless codes related to LOGGER in kdumpctl
  - kdumpctl:print out the service status
  - Return to start() function when check_ssh_target failed
  - use findmnt instead of blkid in mkdumprd
  - check dump target mounting earlier
  - kdumpctl: rename function name check_config
  - add function to check kdump config file
  - dracut-module-setup.sh: remove UUID/LABEL quotes before using it
  - Change dump_to_rootfs to be a default option and reboot to be default action
  - Remove "-F" in CORE_COLLECTOR when dump_to_rootfs


author: Baoquan He <bhe@redhat.com> - 2.0.4-1
changelog:
  - Delete several patches which have been merged into kexec-tools-2.0.4
  - Revert: Release 2.0.3-72
  - Release 2.0.3-72
  - Pull kexec-tools-2.0.4
  - Check if block device as dump target is resettable
  - mkdumprd: add function perror_exit
  - Deprecate blacklist option


author: Baoquan He <bhe@redhat.com> - 2.0.4-2
changelog:
  - kdump: Save vmcore-dmesg.txt before saving vmcore
  - Remove "ip=" overwrite to 40ip.conf
  - Add support for bridge over bond/team/vlan.
  - Fix bonding options syntax and get all specified options from ifcfg file.
  - add dracut_args option to kdump.conf
  - kexec-tools.spec: Add ethtool to dependency.
  - error out if dump target is encrypted


author: Baoquan He <bhe@redhat.com> - 2.0.4-3
changelog:
  - mkdumprd: remove -M option for dracut
  - kdumpctl: add selinux relabel when service startup
  - depends on dracut selinux module
  - dracut-kdump.sh: umount rootfs after dump_to_rootfs
  - kdump.sysconfig: append "panic=10" to kdump cmdline
  - kexec-kdump-howto: grubby is suggested modifing kernel cmdline
  - kexec-tools.spec: removes kexec udev rules for s390
  - kdump.sysconfig: Add option action_on_fail and set its default as continue
  - Add tab key as delimiter for core_collector in kdump.conf
  - redirect stdout to stderr


author: Baoquan He <bhe@redhat.com> - 2.0.4-4
changelog:
  - dracut-module-setup.sh: improve the approach to get a bridged interface list
  - dracut-module-setup.sh: cleanup - use kdump_get_mac_addr() function
  - dracut-module-setup.sh: use kernel exported mac address in kdump_get_mac_addr()
  - dracut-module-setup.sh: use perm addr of slaves to setup bonding network
  - kdump: Do not output debug messages by default
  - dracut-module-setup.sh: kdump module depends on drm module
  - mkdumprd: return error if no write permission on save path of server for ssh


author: Baoquan He <bhe@redhat.com> - 2.0.4-5
changelog:
  - monitor-dd-progress fix
  - rawdump: only show dd progress bar when core_collector is not makedumpfile
  - kexec-tools.spec: replaces scriptlets with new systemd macros
  - dracut-kdump.sh: umount fs right before kdump exit
  - dracut-kdump.sh: recursively umount fs and its submounts
  - dracut-kdump.sh: cleanup - using local variable names instead of $1/$2 in functions
  - dracut-kdump.sh: name the invalid vmcore to vmcore-incomplete
  - dracut-kdump.sh: Output top level information about the kdump progress.
  - kexec-kdump-howto: Add a section for debugging tips


author: Baoquan He <bhe@redhat.com> - 2.0.4-6
changelog:
  - add snappy build
  - add lzo build
  - pull makedumpfile-1.5.4
  - mkdumprd: check return value of subshell
  - mkdumprd: get_persistent_dev() return original dev if no persistent dev exists.
  - dracut-kdump.sh: Merge dump_to_rootfs() to dump_fs()
  - dracut-kdump.sh: explicitly sync after each dump
  - Correct wrong weekday of changelog
  - kexec-tools.spec: Remove incorrect description in changelog


author: Baoquan He <bhe@redhat.com> - 2.0.4-7
changelog:
  - dracut-kdump.sh: add do_dump() and error out if dump vmcore fails
  - dracut-module-setup.sh: setup correct system time and time zone in 2nd kernel.
  - kernel cmdline: Remove hugepage allocations
  - Use /lib/dracut/no-emergency-shell to control action on fail
  - Revert: kdump.sysconfig: Add option action_on_fail and set its default as continue
  - dracut-kdump.sh: Redirect kdump script stdout/stderr to /dev/console
  - makedumpfile: Add vmap_area_list definition for ppc/ppc64.


author: Baoquan He <bhe@redhat.com> - 2.0.4-9
changelog:
  - Strip inline comments from the kdump config file before use
  - kdump-lib.sh: add common function strip_comments
  - Introduce kdump-lib.sh for kdump shared functions
  - kdump.service: Start kdump after network is online and remote fs is mounted
  - dracut-module-setup: _dev to be a local variable
  - kdumpctl: Run multiple kdumpctl instances one by one in serial order


author: WANG Chao <chaowang@redhat.com> - 2.0.4-12
changelog:
  - fix sadump format phys_base calculating error
  - kdump, x86: Process multiple Crash kernel in /proc/iomem
  - makedumpfile: wrong cyclic buffer size recalculation causes bitmap data corruption
  - Fix max_mapnr issue on system has over 44-bit addressing.


author: WANG Chao <chaowang@redhat.com> - 2.0.4-14
changelog:
  - Add rd.memdebug in kdump module
  - kdumpctl: Avoid leaking fd to subshell
  - makedumpfile: Understand >= v3.11-rc4 dmesg
  - makedumpfile, ppc: Support to filter dump for kernels that use CONFIG_SPARSEMEM_VMEMMAP.


author: WANG Chao <chaowang@redhat.com> - 2.0.4-18
changelog:
  - update translation files
  - makedumpfile: default to lzo compression
  - makedumpfile: add makedumpfile.conf.sample and its manpage


author: WANG Chao <chaowang@redhat.com> - 2.0.4-20
changelog:
  - vmcore-dmesg: fix timestamp error in vmcore-dmesg.txt
  - makedumpfile: re-enable mmap() and introduce --non-mmap
  - kdump.conf uncomment default core_collector line
  - fix an issue when 'ssh' directive appearing in kdump.conf, the rest part of
    lines in this file are ignored


author: WANG Chao <chaowang@redhat.com> - 2.0.4-21
changelog:
  - makedumpfile: Improve progress information for huge memory system
  - s390: use nr_cpus=1 instead of maxcpus=1


author: WANG Chao <chaowang@redhat.com> - 2.0.4-23
changelog:
  - ssh dump: create random-seed manually
  - makedumpfile: memset() in cyclic bitmap initialization introduce segment fault.
  - Add acpi_no_memhotplug to kdump kernel
  - Add fence kdump support


author: WANG Chao <chaowang@redhat.com> - 2.0.4-24
changelog:
  - add kdump-in-cluster-environment.txt to rpm pkg
  - Secure Boot status check warning
  - Some watchdog driver support


author: WANG Chao <chaowang@redhat.com> - 2.0.4-25
changelog:
  - Pass disable_cpu_apicid to kexec of capture kernel
  - Relax restriction of dumping on encrypted target
  - regression fix on wdt kernel drivers instal


author: WANG Chao <chaowang@redhat.com> - 2.0.6-1
changelog:
  - Rebase kexec-tools-2.0.6
  - fix an issue when dump path is mounted on nfs
  - vmcore-dmesg: stack smashing fix
  - get_ssh_size fix for localized df output


author: WANG Chao <chaowang@redhat.com> - 2.0.6-4
changelog:
  - generate kdump service dependencies on the fly
  - kdump.conf: a standalone path directive becomes a relative path to it's backed disk.


author: WANG Chao <chaowang@redhat.com> - 2.0.7-5
changelog:
  - rework of kdump error handling
  - add fadump support
  - add static route support
  - systemd will take care of shutdown and umount filesystems


author: WANG Chao <chaowang@redhat.com> - 2.0.7-8
changelog:
  - use absolute path for executable in systemd service
  - update to kdump-anaconda-addon-003
  - remove dead kdump firstboot module and po files


author: Baoquan He <bhe@redhat.com> - 2.0.7-9
changelog:
  - kdumpctl: Use kexec file based syscall for secureboot enabled machines
  - kdumpctl: Use kexec file based mode to unload kdump kernel
  - kdumpctl: Do not redirect error messages to /dev/null
  - kexec: Provide an option to use new kexec system call


author: WANG Chao <chaowang@redhat.com> - 2.0.7-10
changelog:
  - Enable ppc64le arch.
  - Rebase makedumpfile-1.5.7
  - add sample eppic scripts to kexec-tools-eppic package
  - Restart kdump service on cpu ADD/REMOVE events


author: WANG Chao <chaowang@redhat.com> - 2.0.8-5
changelog:
  - remove panic_on_warn kernel param in 2nd kernel
  - remove sysctl.conf to restore sysctl default values in 2nd kernel
  - fix a core_collector issue in ssh and raw dump case
  - update to kdump-anaconda-addon-005-2-g86366ae.tar.gz
  - some cleanups


author: WANG Chao <chaowang@redhat.com> - 2.0.8-6
changelog:
  - mount fail if its mount point doesn't exist in /sysroot
  - rebuild initrd dependency during kdump restart
  - fix a dump path issue


author: Dave Young <dyoung@redhat.com> - 2.0.8-8
changelog:
  - execute kdump_post after do_default_action
  - update kdump anaconda addon (translations/help text issus)


author: Baoquan He <bhe@redhat.com> -2.0.8-9
changelog:
  - Revert "execute kdump_post after do_default_action"
  - dracut-module-setup.sh: change the insecure use of /tmp/*$$* filenames
  - make kdump saving directory name consistent with RHEL6


author: Baoquan He <bhe@redhat.com> -2.0.8-10
changelog:
  - add fPIC to makefumpfile CFLAGS to support hardening
  - dracut-module-setup: Enhance kdump to support the bind mounted feature in Atomic
  - Fix the warning if the target path is bind mount in Atomic
  - Get the mount point correctly, if the device has several mount point
  - kdump-lib: Add new function to judge the system is Atomic or not
  - kdump-lib: Add the new function to enhance bind mounted judgement
  - Remove duplicate slash in save path


author: Baoquan He <bhe@redhat.com> -2.0.8-11
changelog:
  - make kdump work when kernel crash after shutdown
  - Disable transparent hugepages in second kernel
  - Filtered out "noauto" options in 2nd kernel fstab


author: Dave Young <dyoung@redhat.com> - 2.0.9-1
changelog:
  - Rebase kexec-tools 2.0.9
  - Rebase makedumpfile 1.5.8
  - revert 6347630 since ipv6 patches has not been reviewed.


author: Dave Young <dyoung@redhat.com> - 2.0.9-2
changelog:
  - Resolve bug 1236456, kexec load fail because koji add extra gcc flags.
  - Remove -FPIC for makedumpfile since it is not necessary without harden build


author: Dave Young <dyoung@redhat.com> - 2.0.10-1
changelog:
  - Rebase kexec-tools 2.0.10
  - Rebase eppic git tree 050615
  - Enhance kdump.conf "default" parameters check


author: Dave Young <dyoung@redhat.com> - 2.0.10-3
changelog:
  - Update kdump addon icon
  - Revert static route corner case patches per bhe. He discussed with Marc
    it is just a corner case.


author: Dave Young <dyoung@redhat.com> - 2.0.10-4
changelog:
  - ipv6 support (except for link scope addresses)
  - Apply the manual DNS to the 2nd kernel
  - load iTCO_wdt early in cmdline hook


author: Baoquan He <bhe@redhat.com> - 2.0.10-6
changelog:
  - mkdumprd: Remove ifcfg from dracut's modules
  - module-setup: Choose the first matched gateway in kdump_static_ip
  - module-setup: Add permanent option to detect static ip address or not


author: Dave Young <dyoung@redhat.com> - 2.0.11-3
changelog:
  - use "systemctl reboot -f" for reboot action
  - Remove kernel param "quiet" from kdump kernel cmdline
  - kdump.sysconfig: add KDUMP_COMMANDLINE_REMOVE
  - Add missing prefixes in default sysconfig file
  - fix bogus date in changelog


author: Dave Young <dyoung@redhat.com> - 2.0.12-4
changelog:
  - update kdump anaconda addon to add mem range in tui 
  - .gitignore: Update to make it more generic
  - kdumpctl: check_rebuild improvement 
  - kdumpctl: Do not rebuild initramfs when $KDUMP_BOOTDIR is read only


author: Dave Young <dyoung@redhat.com> - 2.0.12-5
changelog:
  - kdump-lib: Add get_ifcfg_filename() to get the proper ifcfg file
  - module-setup: Use get_ifcfg_filename() to get the proper ifcfg file


author: Dave Young <dyoung@redhat.com> - 2.0.12-9
changelog:
  - Update kdump anaconda addon
  - makedumpfile: Support _count -> _refcount rename in struct page
  - module-setup: Don't handle iBFT in kdump


author: Dave Young <dyoung@redhat.com> - 2.0.13-5
changelog:
  - Fix bug 1373958 for system boot without initrd
  - Do not depend on /etc/fstab in kdumpctl in case it does not exist


author: Dave Young <dyoung@redhat.com> - 2.0.13-8
changelog:
  - kexec/arch/i386: Add support for KASLR memory randomization
  - Update kdump anaconda addon
  - fadump: restore default initrd when fadump mode is disabled
  - kdump/fadump: fix network interface name when switching from fadump to kdump
  - kdumpctl: filter 'root' kernel parameter when running in live images
  - Documentation: step by step guide on confiuring kdump in live images


author: Dave Young <dyoung@redhat.com> - 2.0.13-9
changelog:
  - rename function kdump_to_udev_name
  - Raw dump: use by-id as persistent policy in 2nd kernel
  - drop dracut duplicate functions
  - dracut-kdump: use POSIX shell syntax
  - Correct two typos in kdumpctl and kdump.conf


author: Dave Young <dyoung@redhat.com> - 2.0.14-4
changelog:
  - drop kdump script rhcrashkernel-param in kexec-tools repo
  - kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors
  - kdumpctl: change prepare_cmdline() to operate KDUMP_COMMANDLINE directly
  - use --hostonly-i18n for dracut


author: Dave Young <dyoung@redhat.com> - 2.0.14-5
changelog:
  - kdump-lib.sh: fix incorrect usage with pipe as input for grep -q in is_pcs_fence_kdump()
  - Document: fix incorrect link in fadump-how.txt


author: Dave Young <dyoung@redhat.com> - 2.0.14-7
changelog:
  - kdump-emergency: fix "Transaction is destructive" emergency failure
  - mkdumprd: reduce lvm2 memory under kdump


author: Dave Young <dyoung@redhat.com> - 2.0.14-8
changelog:
  - kdumpctl: fix status check when CONFIG_CRASH_DUMP is not enabled in kernel
  - kdumpctl: fix a bug in remove_cmdline_param()
  - kdumpctl: remove "root=X" for kdump boot
  - Revert "kdumpctl: filter 'root' kernel parameter when running in live images"


author: Dave Young <dyoung@redhat.com> - 2.0.14-9
changelog:
  - kdump: Introduce 'force_no_rebuild' option
  - kdump-lib-initramfs.sh: ignore the failure of echo
  - kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline


author: Dave Young <dyoung@redhat.com> - 2.0.14-10
changelog:
  - kdumpctl: improve "while read" time for /etc/kdump.conf
  - kdumpctl: update check_dump_fs_modified() to use "lsinitrd -f"
  - kdumpctl: improve check_wdt_modified()
  - kdumpctl: remove is_mode_switched()
  - kdumpctl: bail out earlier in case of no reserved memory


author: Dave Young <dyoung@redhat.com> - 2.0.14-11
changelog:
  - kdumpctl: change the shebang header to use /bin/bash
  - kdumpctl: call strip_comments only when necessary to speedup
  - Revert "kdumpctl: improve "while read" time for /etc/kdump.conf" (rhbz1449801)


author: Dave Young <dyoung@redhat.com> - 2.0.14-13
changelog:
  - kexec-tools.spec: Fix whitespace errors
  - dracut-module-setup: Fix test for inclusion of DRM modules
  - kdump.conf.5: clarify the fence_kdump_nodes option


author: Dave Young <dyoung@redhat.com> - 2.0.15-3
changelog:
  - module-setup: fix 99kdumpbase network dependency
  - mkdumprd: omit dracut modules in case of network dumping
  - mkdumprd: omit dracut modules in case of no dm target
  - mkdumprd: omit crypt when there is no crypt kdump target
  - kdumpctl: use generated rd.lvm.lv=X
  - mkdumprd: change for_each_block_target() to use get_kdump_targets()
  - kdump-lib.sh: introduce get_kdump_targets()
  - kdump-lib.sh: fix improper get_block_dump_target()
  - kdumpctl: fix infinite loop caused by running under bash


author: Dave Young <dyoung@redhat.com> - 2.0.15-10
changelog:
  - Improve 'cpu add' udev rules
  - module-setup: suppress the early iscsi error messages
  - mkdumprd: use 300s as the default systemd unit timeout for kdump mount


author: Dave Young <dyoung@redhat.com> - 2.0.15-13
changelog:
  - dracut-module-setup.sh: eliminate redundant kdump_get_mac_addr call
  - mkdumprd: use --quiet dracut argument to speedup initramfs build
  - mkdumprd: fix patterns to modify mount options
  - fadump: rebuild default initrd with dump capture capability
  - module-setup: remove software iscsi cmdline generated by dracut
  - kdumpctl: remove some cmdline inheritage from 1st kernel
  - mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
  - Change dump_to_rootfs to use "--mount" instead of "root=X"
  - kdumpctl: move is_fadump_capable() to kdump-lib.sh
  - Revert "kdumpctl: use generated rd.lvm.lv=X"
  - Revert "mkdumprd: omit crypt when there is no crypt kdump target"
  - Revert "mkdumprd: omit dracut modules in case of no dm target"
  - Revert "mkdumprd: omit dracut modules in case of network dumping"
  - update bogus date in rpm spec


author: Dave Young <dyoung@redhat.com> - 2.0.16-2
changelog:
  - dracut-module-setup.sh: check whether to include multipath-hostonly or not
  - Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"
  - kdumpctl: skip selinux-relabel for dracut_args --mount dump target


author: Dave Young <dyoung@redhat.com> - 2.0.16-6
changelog:
  - kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel
  - kdumpctl: Check the modification time of core_collector
  - dracut-module-setup.sh: pass correct ip= param for ipv6


author: Kairui Song <kasong@redhat.com> - 2.0.17-14
changelog:
  - Add support to supply 'kaslr-seed' to secondary kernel
  - kexec-tools.spec: Drop kexec-tools-2.0.3-disable-kexec-test.patch


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-16
changelog:
  - dracut-module-setup: Enable dracut squash module
  - dracut-module-setup: Fix DRM module inclusion test for hyper-v


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-17
changelog:
  - Update help text to indicate --mem-usage is supported on archs other than x86_64
  - Fix 'makedumpfile --split' error ("Can't read the buffer of struct page") on x86_64


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-19
changelog:
  - Add aarch64 specific kdump.sysconfig and use 'nr_cpus' instead of 'maxcpus'
  - Add missing usage info
  - Throttle kdump reload request triggered by udev event
  - Rewrite kdump's udev rules
  - kdumpctl: Add reload support


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-20
changelog:
  - makedumpfile: Fix failure of detection of SPARSEMEM EXTREME in case of -x VMLINUX
  - makedumpfile: ppc64: increase MAX_PHYSMEM_BITS to 128TB
  - kdumpctl: Rebuild initramfs if loaded kernel modules changed


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-21
changelog:
  - makedumpfile: Support newer kernels
  - kdump-lib-initramfs.sh: using -force option when poweroff
  - kexec-tools/vmcore-dmesg: fix infinite loop if log buffer wraps around
  - makedumpfile: sadump: fix failure of reading 640 KB backup region if at over 4GB location
  - Make udev reload rules quiet during bootup


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-24
changelog:
  - makedumpfile/arm64: Fix 'info->page_offset' calculation for both KASLR and non-KASLR cases
  - makedumpfile: Prepare paddr_to_vaddr() for arch-specific p2v conversion


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-26
changelog:
  - earlykdump: fix kexec fails to load the early kdump kernel
  - makedumpfile/x86_64: fix an unnecessary message with --mem-usage option


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-27
changelog:
  - Revert "kdumpctl, earlykdump: Don't use kexec_file_load when secure boot is enabled"
  - mkdumprd: refine regex on dropping mount options


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-1
changelog:
  - kexec-tools: rebasing to 2.0.19
  - makedumpfile: upgrade to 1.6.5
  - kexec-tools: x86: Introduce a new option --reuse-video-type
  - makedumpfile: exclude pages that are logically offline
  - earlykdump: Fix failure when earlykdump is included by dracut
  - Update man page for new kdumpctl command: reload / rebuild
  - kdumpctl: add rebuild support
  - rhel-only/kexec.rules: create dedicated udev rules for ppc64


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-2
changelog:
  - kdumpctl: Detect block device driver change for initramfs rebuild
  - Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
  - mkdumprd: allow spaces after 'path' config phrase with network dump setting
  - kexec.rules: create dedicated udev rules for ppc64
  - Revert "rhel-only/kexec.rules: create dedicated udev rules for ppc64"
  - rh-only makedumpfile/arm64: Add support for ARMv8.2-LVA (52-bit user-space VA support)


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-3
changelog:
  - earlykdump: Add a note of final_action option to avoid crash loop
  - Add final_action option to kdump.conf
  - Add failure_action as alias of default and make default obsolete
  - earlykdump: warn when installed kernel version differs from dracut target
  - earlykdump: add more sanity check when generating initramfs
  - fadump: use the original initrd to rebuild fadump initrdfrom


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-4
changelog:
  - kexec-kdump-howto.txt: Add document about encrypted targets
  - kexec-kdump-howto.txt: Add document about initramfs rebiuld
  - kexec-kdump-howto: Add note on setting correct value of kptr_restrict
  - doc: fix dead links in the file kexec-kdump-howto.txt
  - earlykdump: provide a prompt message after the rebuilding of kdump initramfs.
  - Get rid of duplicated strip_comments when reading config
  - mkdumprd: Improve the config reading logic
  - kdumpctl: don't always rebuild when extra_modules is set
  - kdumpctl: follow symlink when checking for modified files
  - fadump: leverage kernel support to re-regisgter FADump


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-5
changelog:
  - kdumpctl: check for ssh path availability when rebuild
  - kdumpctl: Check kdump.conf for error when rebuild is called
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
  - aarch64/kdump.sysconfig: Make config options similar to x86_64


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-9
changelog:
  - kexec/arm64: Add support for handling zlib compressed (Image.gz) image
  - kexec/kexec-zlib.h: Add 'is_zlib_file()' helper function
  - kexec-uImage-arm64.c: Fix return value of uImage_arm64_probe()
  - kexec/kexec.c: Add the missing close() for fd used for kexec_file_load()


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-12.3
changelog:
  - Limit the size of vmcore-dmesg.txt to 2G
  - makedumpfile: x86_64: Fix incorrect exclusion by -e option with KASLR
  - mkdumprd: ensure ssh path exists before check size


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-12.4
changelog:
  - dracut-module-setup.sh: Don't use squash module for fadump
  - Don't mount the dump target unless needed
  - dracut-module-setup: fix bond ifcfg processing
  - Doc: amend the man page of kdump.conf


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-5
changelog:
  - Don't execute final_action if failure_action terminates the system
  - module-setup: re-fix 99kdumpbase network dependency
  - kdumpctl: bail out immediately if host key verification failed
  - kdumpctl: echo msg when waiting for connection
  - kdumpctl: distinguish the failed reason of ssh
  - kdumpctl: wait a while for network ready if dump target is ssh
  - dracut-module-setup: filter out localhost for generic_fence_kdump
  - dracut-module-setup: get localhost alias by manual


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-6
changelog:
  -rhel-8.2.0, origin/rhel-8.2.0) Increase SECTION_MAP_LAST_BIT to 4
  - spec: move binaries from /sbin to /usr/sbin
  - As /etc/kdump.conf timestamp is updated do not compare it when doing rpm --verify
  - kdumpctl: make reload fail proof


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-10
changelog:
  - arm64: kdump: deal with a lot of resource entries in /proc/iomem
  - arm64: kexec: allocate memory space avoiding reserved regions
  - kexec: add variant helper functions for handling memory regions


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-19
changelog:
  - dracut-module-setup.sh: improve get_alias()
  - fadump: update fadump-howto.txt with some troubleshooting help
  - Append both nofail and x-systemd.before to kdump mount target
  - Partially Revert "Don't mount the dump target unless needed"
  - Don't unmount the dump target just after saving vmcore


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-20
changelog:
  - Update docs for the new noauto dump target support
  - kexec-kdump-howto.txt: Add some format to the document
  - mkdumprd: generate usable kdump initramfs even target is not mounted
  - Use get_mount_info to replace findmnt calls
  - kdump-lib.sh: add fstab failback helper for getting mount info
  - Allow calling mkdumprd from kdumpctl even if targat not mounted
  - Add a is_mounted helper
  - Introduce get_kdump_mntpoint_from_target and fix duplicated /
  - Doc: Improves the early-kdump-howto.txt document in several points
  - Doc: Add --force option to step 2 in early-kdump-howto.txt
  - Doc: Fix typo in early-kdump-howto.txt
  - Remove adjust_bind_mount_path call
  - No longer treat atomic/silverblue specially
  - mkdumprd: Simplify handling of user specified target
  - mkdumprd: Use get_save_path instead of parsing config
  - Remove is_dump_target_configured
  - Always use get_save_path to get the 'path' option
  - kdump-lib: Don't abuse echo, and clean up
  - mkdumprd: Fix dracut args parsing
  - mkdumprd: simplify dracut args parsing


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-21
changelog:
  - Don't inherit swiotlb parameter form 1st kernel by default
  - Add a new option 'rd.znet_ifname' in order to use it in udev rules
  - kdump.sysconfig: Remove the option 'log_buf_len' from kdump command line
  - kdump-error-handler.service: Remove ExecStopPost
  - module-setup.sh: Add "rd.neednet" parameter if network is needed


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-25
changelog:
  - kdump.conf: Specify /etc/kdump/{pre.d,post.d}interface
  - dracut-kdump.sh: Execute the binary and script filesin /etc/kdump/{pre.d,post.d}
  - kdumpctl: Check the update of the binary and script files in /etc/kdump/{pre.d,post.d}
  - dracut-module-setup.sh: Install files under /etc/kdump/{pre.d,post.d} into kdump initramfs


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-26
changelog:
  - Fix kdump failure when mount target specified by dracut_args
  - mkdumprd: Fix dracut error on multiple extra_modules


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-28
changelog:
  - mkdumprd: Fix nfs detection in to_mount
  - Always wrap up call to dracut get_persistent_dev function
  - man: improve description about /etc/kdump/{pre.d,post.d}interface


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-30
changelog:
  - x86_64: enable the kexec file load by default
  - Revert "kdump-lib: switch to the kexec_file_load() syscall on x86_64 by default"


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-31
changelog:
  - ppc64/kdump: use kexec_file_load when secureboot is enabled
  - kdump_pre: make notes more precise
  - dracut-kdump.sh: exit shell when machine reboot
  - kdump.conf: fix a grammar issue
  - kdumpctl: detect modification of scripts by its directory's timestamp
  - module-setup.sh: suppress false alarm
  - kexec-tools.spec: make the existence of pre.d and post.d mandatory


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-35
changelog:
  - module-setup.sh: Instead of drop journalctl log, just don't read kmsg
  - s390x: enable the kexec file load by default
  - increase makdumpfile default message level to 7
  - Rework check_config and warn on any duplicated option
  - kdumpctl: Error out if path is set more than once.
  - Don't drop journalctl content if failure action is "shell"
  - dracut-module-install: Move systemd conf install code to a function
  - kdump-lib.sh: Remove is_atomic
  - Refactor kernel image and initrd detection code
  - early-kdump: Use consistent symbol link for kernel and initramfs
  - kdump-lib: strip grub device from kdump_bootdir
  - kdumpctl: fix driver change detection on latest Fedora
  - Revert "kdump-lib: disable efifb if hyperv_fb is in use"
  - kdump-lib.sh: detect secure boot on s390
  - Add a kernel install hook to clean up kdump initramfs


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-36
changelog:
  - arm64: Enable 'kexec_file_load' by default
  - Fix, Add a kernel install hook to clean up kdump initramfs


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-37
changelog:
  - Doc: improve the usage documentation of the logger
  - Update the kdump sysconfig
  - Capitalize the configuration name of log level
  - Add the rd.kdumploglvl option to control log level in the second kernel
  - Appropriately converts logger numeric level to syslog log level
  - Remove unused log levels for kdump logger
  - Add sanity checks for the log levels
  - Add code comments to help better understanding
  - Doc: add a documentation for the usage of logger
  - Improve debugging in the kdump kernel
  - kdumpctl: add the '-d' option to enable the kexec loading debugging messages
  - kdump.sysconfig: add the kdump logger configurations
  - enable the logger for kdump
  - introduce the kdump logger from the dracut


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-38
changelog:
  - Don's try to restart dracut-initqueue if it's already failed
  - fadump-howto: update about 'nocma' and 'off' options for 'fadump=' parameter
  - dracut-module-setup.sh: use auto6 for ipv6
  - module-setup.sh: enable vlan on team interface
  - Fix rootfs detection in dump_fs
  - Remove RHEL-only patch: kexec-tools-2.0.18-makedumpfile-arm64-Add-support-for-ARMv8.2-LVA-52-bi.patch
  - Rebase to makedumpfile-1.6.8 (step1)


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-43
changelog:
  - Always include watchdog-modules
  - mkdumprd: Ensure kdumpbase is added
  - Move watchdog detect and install code to module-setup.sh
  - Add a helper to omit non-mandatory dracut module
  - Move some dracut module dependencies checks to module-setup.sh
  - Set watchdog's pretimeout to zero in kdump kernel
  - kdump-lib.sh: Use a more generic helper to detect omitted dracut module
  - Fix the watchdog drivers detection code
  - Add a helper for detecting watchdog drivers
  - Remove a redundant nfs check
  - kdumpctl: split the driver detection from fs dection function
  - kdump.service: use ConditionKernelCommandLine=crashkernel
  - Revert "Append both nofail and x-systemd.before to kdump mount target"
  - Revert "Don's try to restart dracut-initqueue if it's already failed"
  - Fix dump_fs mount point detection and fallback mount
  - kdump.conf: Update doc about core_collector for ssh target
  - Save the final failure information to log file if saving vmcore failed
  - Doc: Improve the kdump sysconfig document
  - kdumpctl: fix a variable expansion in check_fence_kdump_config()
  - Fedora 33 rhpkg build bug


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-44
changelog:
  - module-setup.sh: don't polute the namespace unnecessarily
  - module-setup.sh: don't source $dracutfunctions
  - logger: source the logger file individually
  - dracut-module-setup.sh: enable ForwardToConsole=yes in fadump mode


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-45
changelog:
  - origin/rhel-8.4.0) Revert "Revert "Append both nofail and x-systemd.before to kdump mount target""
  - kdump.conf: add ipv6 example for nfs and ssh dump
  - fix kdump failure of saving vmcore with the scp + ipv6 method


author: Chunmei Xu <xuchunmei@linux.alibaba.com> - 2.0.21-1.1
changelog:
  - rebase kexec-tools to 2.0.21
  - rebase makedumpfile to 1.6.8
  - makedumpfile: support for lockless ringbuffer of printk
  - makedumpfile: support use 'TCR_EL1.T1SZ' to determine va bits
  - makedumpfile: support read register ID_AA64MMFR2_EL1 to get va bits


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 2.0.21-1.2
changelog:
  - rebase makedumpfile to 1.6.9
  - makedumpfile: migrate to RHEL solution on support for ARMv8.2 LVA 52 bit


author: David Howells <dhowells@redhat.com> - 0.2-1
changelog:
  - Don't attempt to define the error codes in the header file.
  - Pass the release ID through to the makefile to affect the shared library name.


author: David Howells <dhowells@redhat.com> - 0.3-2
changelog:
  - Added timeout keyctl option
  - request_key auth keys must now be assumed
  - Fix keyctl argument ordering for debug negate line in request-key.conf


author: David Howells <dhowells@redhat.com> - 0.3-3
changelog:
  - Added stdint.h inclusion in keyutils.h
  - Made request-key.c use request_key() rather than keyctl_search()
  - Added piping facility to request-key


author: David Howells <dhowells@redhat.com> - 1.0-1
changelog:
  - Rename library and header file "keyutil" -> "keyutils" for consistency
  - Fix shared library version naming to same way as glibc.
  - Add versioning for shared library symbols
  - Create new keyutils-libs package and install library and main symlink there
  - Install base library symlink in /usr/lib and place in devel package
  - Added a keyutils archive library
  - Shorten displayed key permissions list to just those we actually have


author: David Howells <dhowells@redhat.com> - 1.2-1
changelog:
  - Remove syscall manual pages (section 2) to man-pages package [BZ 203582]
  - Don't write to serial port in debugging script


author: David Howells <dhowells@redhat.com> - 1.3-1
changelog:
  - Fix compiler warnings in request-key.
  - Expose the kernel function to get a key's security context.
  - Expose the kernel function to set a processes keyring onto its parent.
  - Move libkeyutils library version to 1.3.


author: David Howells <dhowells@redhat.com> - 1.4-2
changelog:
  - Fix prototypes in manual pages (some char* should be void*).
  - Rename the keyctl_security.3 manpage to keyctl_get_security.3.


author: David Howells <dhowells@redhat.com> - 1.4-4
changelog:
  - Make build guess at default libdirs and word size.
  - Make program build depend on library in Makefile.
  - Don't include $(DESTDIR) in MAN* macros.
  - Remove NO_GLIBC_KEYSYS as it is obsolete.
  - Have Makefile extract version info from specfile and version script.
  - Provide RPM build rule in Makefile.
  - Provide distclean rule in Makefile.


author: David Howells <dhowells@redhat.com> - 1.5-1
changelog:
  - Disable RPATH setting in Makefile.
  - Add -I. to build to get this keyutils.h.
  - Make CFLAGS override on make command line work right.
  - Make specfile UTF-8.
  - Support KEYCTL_REJECT.
  - Support KEYCTL_INSTANTIATE_IOV.
  - Add AFSDB DNS lookup program from Wang Lei.
  - Generalise DNS lookup program.
  - Add recursive scan utility function.
  - Add bad key reap command to keyctl.
  - Add multi-unlink variant to keyctl unlink command.
  - Add multi key purge command to keyctl.
  - Handle multi-line commands in keyctl command table.
  - Move the package to version to 1.5.


author: David Howells <dhowells@redhat.com>
changelog:
  - Adjust the manual page for 'keyctl unlink' to show keyring is optional.
  - Add --version support for the keyutils version and build date.


author: David Howells <dhowells@redhat.com> - 1.5.4-1
changelog:
  - Fix the keyctl padd command and similar to handle binary input.
  - Make keyctl show able to take a keyring to dump.
  - Make keyctl show able to take a flag to request hex key IDs.
  - Make keyctl show print the real ID of the root keyring.


author: David Howells <dhowells@redhat.com> - 1.5.6-1
changelog:
  - Fix the request-key.conf.5 manpage.
  - Fix the max depth of key tree dump (keyctl show).
  - The input buffer size for keyctl padd and pinstantiate should be larger.
  - Add keyctl_invalidate.3 manpage.


author: David Howells <dhowells@redhat.com> - 1.5.7-1
changelog:
  - Provide a utility function to find a key by type and name.
  - Allow keyctl commands to take a type+name arg instead of a key-id arg.
  - Add per-UID get_persistent keyring function.


author: David Howells <dhowells@redhat.com> - 1.5.9-1
changelog:
  - Add manpages for get_persistent.
  - Fix memory leaks in keyctl_describe/read/get_security_alloc().
  - Use keyctl_describe_alloc in dump_key_tree_aux rather than open coding it.
  - Exit rather than returning from act_xxx() functions.
  - Fix memory leak in dump_key_tree_aux.
  - Only get the groups list if we need it.
  - Don't trust sscanf's %n argument.
  - Use the correct path macros in the specfile.
  - Avoid use realloc when the memory has no content.
  - Fix a bunch of issues in key.dns_resolver.
  - Fix command table searching in keyctl utility.
  - Fix a typo in the permissions mask constants.
  - Improve the keyctl_read manpage.
  - Add man7 pages describing various keyrings concepts.


author: David Howells <dhowells@redhat.com> - 1.5.10-1
changelog:
  - Include sys/types.h in keyutils.h.
  - The dns resolver needs limits.h.
  - Overhaul of all manual pages.
  - Some manual pages moved to Linux man-pages project.
  - Add Diffie-Helman keyctl function.


author: Jon Masters <jcm@jonmasters.org> - 2-3
changelog:
  - Update package incorporating fixes from initial review feedback
  - Cleaups to SPEC, rpath, documentation, library and binary locations


author: Jon Masters <jcm@jonmasters.org> - 3-1
changelog:
  - Update to latest upstream (adds new depmod replacement utility)
  - For the moment, use the "kmod" utility to test the various functions


author: Kay Sievers <kay@redhat.com> - 5-1
changelog:
  - Update to version 5
  - replace the module-init-tools package and provide all tools
    as compatibility symlinks


author: Kay Sievers <kay@redhat.com> - 5-3
changelog:
  - temporarily add fake-provides to be able to bootstrap
    the new udev which pulls the old udev into the buildroot


author: Harald Hoyer <harald@redhat.com> 5-6
changelog:
  - add upstream patch to fix "modprobe --ignore-install --show-depends"
    otherwise dracut misses a lot of modules, which are already loaded


author: Kay Sievers <kay@redhat.com> - 7-1
changelog:
  - update to version 7
    - fix issue with --show-depends, where built-in
      modules of the running kernel fail to include
      loadable modules of the kernel specified


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-5
changelog:
  - weak-modules: handle versions with + and other special regex symbols
  - weak-modules: fix misleading message when cannot find dracut.
    Resolves: rhbz#1609372.


author: Eugene Syromiatnikov <esyr@redhat.com> - 25-6
changelog:
  - weak-modules: check also for /lib/modules/$krel/symvers.gz as a possible
    symvers file path.
    Resolves: rhbz#1614119.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-7
changelog:
  - weak-modules: use is_kernel_installed wrapper in update_modules_for_krel.
  - weak-modules: more abstract symvers search implementation.
  - weak-modules: use additional paths for System.map file.
    Resolves: rhbz#1621306.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-8
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1622990.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-10
changelog:
  - weak-modules: group modules on add-kernel
  - weak-modules: do not make groups if there are no extra modules
    Resolves: rhbz#1649211


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-16
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1778889


author: Andy Walsh <awalsh@redhat.com> 6.1.0.0-6
changelog:
  - Fixed kernel requirement to allow subsequent releases without updating spec
  - Resolves: rhbz#1491422


author: Joe Chapman <jochapma@redhat.com> 6.1.0.44-8
changelog:
  - fix readCacheSize handling large numbers
  - vdoformat signals error when it finds a geometry block
  - prevent kernel oops when loading an old geometry block
  - vdoformat silently rounds down physical sizes to a block boundary
  - UDS threads identify related VDO device
  - clean up contents of source tarballs
  - Resolves: rhbz#1505936
  - Resolves: rhbz#1507996
  - Resolves: rhbz#1509466
  - Resolves: rhbz#1510558
  - Resolves: rhbz#1510585
  - Resolves: rhbz#1511201
  - Resolves: rhbz#1511209


author: Joe Chapman <jochapma@redhat.com> 6.1.0.55-9
changelog:
  - fail loading an uncreated index more gracefully
  - remove spurious/unnecessary files from the distribution
  - fix kernel module version
  - make logging less chatty
  - fix an integer overflow in makeVDOLayout
  - Resolves: rhbz#1511034
  - Resolves: rhbz#1511109
  - Resolves: rhbz#1511096


author: Joe Chapman <jochapma@redhat.com> 6.1.0.72-10
changelog:
  - clear VDO metadata on a vdo remove call
  - fix create of new dedupe indices
  - add magic number to VDO geometry block
  - do less logging when stopping a VDO
  - add a UUID
  - Resolves: rhbz#1512127
  - Resolves: rhbz#1516081
  - Resolves: rhbz#1511109
  - Resolves: rhbz#1515183


author: Joe Chapman <jochapma@redhat.com> 6.1.0.89-11
changelog:
  - improve metadata cleanup after vdoformat failure
  - log REQ_FLUSH & REQ_FUA at level INFO
  - improve performance of cuncurrent write requests with the same data
  - Resolves: rhbz#1520972
  - Resolves: rhbz#1521200


author: Joe Chapman <jochapma@redhat.com> 6.1.0.97-11
changelog:
  - Default logical size is no longer over-provisioned
  - Remove debug logging when verifying dedupe advice
  - Resolves: rhbz#1519330


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.106-11
changelog:
  - Detect journal overflow after 160E of writes
  - Clean up UDS threads when removing last VDO
  - Resolves: rhbz#1512968
  - Resolves: rhbz#1523240


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.114-11
changelog:
  - /sys/uds permissions now resticted to superuser only
  - Remove /sys/uds files that should not be used in production
  - Removing kvdo module reports version
  - VDO automatically chooses the proper write policy by default
  - Fixed a Coverity-detected error path leak
  - Resolves: rhbz#1525305
  - Resolves: rhbz#1527734
  - Resolves: rhbz#1527737
  - Resolves: rhbz#1527924
  - Resolves: rhbz#1528399


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.124-11
changelog:
  - Fixed provisional referencing for dedupe.
  - Only log a bio submission from a VDO to itself.
  - vdoformat cleans up metadata properly after fail.
  - Resolves: rhbz#1511587
  - Resolves: rhbz#1520972
  - Resolves: rhbz#1532481


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.130-12
changelog:
  - Fix General Protection Fault unlocking UDS callback mutex
  - Removing kmod-kvdo package unloads kernel module
  - Fix URL to point to GitHub tree
  - Resolves: rhbz#1510176
  - Resolves: rhbz#1533260
  - Resolves: rhbz#1539061


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.146-13
changelog:
  - Module target is now "vdo" instead of "dedupe"
  - Fixed a bug where crash recovery led to failed kernel page request
  - Improved modification log messages
  - Improved package description and summary fields
  - Resolves: rhbz#1535127
  - Resolves: rhbz#1535597
  - Resolves: rhbz#1540696
  - Resolves: rhbz#1541409


author: - J. corwin Coburn <corwin@redhat.com> - 6.2.0.4-1
changelog:
  - Initial pre-release for RHEL 8.
    - Please be aware that this version is not compatible with previous versions
      of VDO. Support for loading or upgrading devices created with VDO version
      6.1 will be available soon.
  - Management tools will work with both python 2 and python 3.
  - Dedupe path improvements.
  - Beginnings of support for non-x86 architectures.
  - Removed obsolete code from UDS.


author: - Andy Walsh <awalsh@redhat.com> - 6.2.0.32-2
changelog:
  Note: This is a pre-release version, future versions of VDO may not support
  VDO devices created with this version.
  - Merged the funnel queue implementations in the uds and kvdo modules.
  - Improved deduplication of concurrent requests containing the same data.
  - Enabled loading of VDO devices created with version 6.0 or 6.1.
  - Moved atomic.h from the UDS module to the VDO module since the UDS module
    doesn't use it.
  - Removed spurious error messages when first creating the index for a new
    VDO.
  - Added validation that the release version numbers in the geometry block
    and VDO super block match.
  - Fixed bug in UDS on architectures with page sizes larger than 4K.
  - Reflected kernel change of SECTOR_SHIFT and SECTOR_SIZE from enums to
    macros.
  - Continued to remove obsolete functionality from the UDS module.
  - Continued to add support for architectures other than x86.
  - Fixed a thread-safety issue in UDS module's chapter cache.


author: - Andy Walsh <awalsh@redhat.com> - 6.2.0.35-2
changelog:
  Note: This is a pre-release version, future versions of VDO may not support
  VDO devices created with this version.
  - Added validation that the release version numbers in the geometry and
    super block match on load.
  - Fixed compilation problems on newer versions of GCC.


author: - Andy Walsh <awalsh@redhat.com> - 6.2.0.71-4
changelog:
  Note: This is a pre-release version, future versions of VDO may not support
  VDO devices created with this version.
  - Updated to compile on aarch64, ppc64le, and s390x processor architectures
    in addition to x86.
  - Updated atomics, memory barriers, and other synchronization mechanisms to
    work on aarch64, ppc64le, and s390x processor architectures in addition
    to x86.
  - Fixed thread safety issues in the UDS page cache.
  - Removed obsolete code and interfaces from the UDS module.
  - Added /sys/kvdo/version which contains the currently loaded version of
    the kvdo module.
  - Updated the UDS module to consistently generate and encode on-disk data
    regardless of the processor architecture.
  - Began Updating the VDO module to consistently encode on-disk data
    regardless of the processor architecture.
  - Added logging of normal operation when a VDO device starts normally.
  - Fixed a potential use-after-free race when shutting down a VDO device.
  - Modified allocations made from VDO index threads to use the correct flags.
  - Exported the MurmurHash3 implementation from the UDS module rather than
    having a seperate copy in the VDO module.
  - Fixed handling of I/O errors in 4.13 and later kernels.
  - Exported functions for handling endian conversions from the UDS module
    for use by the VDO module.


author: - Andy Walsh <awalsh@redhat.com> - 6.2.0.109-4
changelog:
  Note: This is a pre-release version, future versions of VDO may not support
  VDO devices created with this version.
  - Removed obsolete code.
  - Made uses of memory barriers and atomics more portable across platforms.
  - Converted the encoding and decoding of many of VDO's on-disk structures
    to be platform independent.
  - Made the implementation of VDO's in-memory data structures platform
    independent.
  - Fixed a logging bug which resulted in single log message being split
    across multiple log lines on newer kernels.
  - Fixed a bug which would cause attempts to grow the physical size of a VDO
    device to fail if the device below the VDO was resized while the VDO was
    offline.
  - Converted to use GCC's built-in macros for determining endianness.
  - Converted some non-performance critical atomics to be spinlock protected
    in order to avoid dealing with memory barrier portability issues.
  - Fixed a bug which could cause data loss when discarding unused portions
    of a VDO's logical space.
  - Reduced memory usage (slightly) by rearranging structures to pack better
    in memory.
  - Modified grow physical to fail in the prepare step if the size isn't
    changing, avoiding a suspend-and-resume cycle.
  - Added support for building with a 4.18 kernel.


author: - Andy Walsh <awalsh@redhat.com> - 6.2.0.132-4
changelog:
  Note: This is a pre-release version, future versions of VDO may not support
  VDO devices created with this version.
  - Removed obsolete code.
  - Continued conversion of the encoding and decoding of the VDO's on-disk
    structures to be platform independent.
  - Adopted use of gcc's built-in byte order macros.
  - Converted the VDO module to use the platform independent version of the
    Murmur3 hash from the UDS module.
  - Improved counting of dedupe timeouts by including in the count queries
    which are not made due to their being a lack of resources from previous
    queries taking too long.
  - Improved checking that VDO does not allocate memory from its own threads
    during normal operation.
  - Fixed a bug which caused crashes with VDO on top of RAID-50.
  - Fixed a bug which caused VDO to ignore most flush requests on kernels
    later than 4.10
  - Resolves: rhbz#1594062


author: - Andy Walsh <awalsh@redhat.com> - 6.2.0.187-6
changelog:
  - No longer attempt to unload modules in %preun
  - Resolves: rhbz#1553420
  - Fixed a bug in %preun that was attempting to call 'dnf'
  - Resolves: rhbz#1598924
  - Fixed weak-modules calls to use proper location for dracut
  - Resolves: rhbz#1609178
  - Fixed a potential deadlock in the UDS index by using the kernel supplied
    struct callback instead of our own implementation of synchronous
    callbacks.
  - Eliminated obsolete code and fields from UDS.
  - Converted the VDO module to use numeric.h from the UDS module instead of
    having its own version.
  - Fixed a bug which would cause incorrect encoding of VDO data structures
    on disk.
  - Removed or modified logging which prints pointers from the kernel since
    newer kernels obfuscate the pointer values for security reasons.
  - Eliminated confusing and spurious error messages when rebuilding a UDS
    index.
  - Improved memory allocation by not using the incorrect __GFP_NORETRY flag
    and by using the memalloc_noio_save mechanism.
  - Finished conversion of the encoding and decoding of the VDO's on-disk
    structures to be platform independent.
  - Converted VDO to use the atomic API from the UDS module instead of its
    own.
  - Fixed memory leaks in UDS error paths.
  - Fixed a potential stack overflow when reaping the recovery journal.


author: - Andy Walsh <awalsh@redhat.com> - 6.2.0.197-6
changelog:
  - Enabled the setting of max_discard_sectors for VDO devices via sysfs.
    This allows users stacking dm-thin devices on top of VDO to set a value which
    is large enough that dm-thin will send discards to VDO.
  - Resolves: rhbz#1612349


author: - Andy Walsh <awalsh@redhat.com> - 6.2.0.219-17
changelog:
  - Fixed error path memory leaks in the uds and kvdo modules.
  - Resolves: rhbz#1609403
  - Fixed conflict errors when installing RPMs via dnf.
  - Resolves: rhbz#1601103
  - Fixed a hang when recovering a VDO volume with a physical size larger
    than 16TB.
  - Resolves: rhbz#1628316
  - Fixed some potential initialization issues in the UDS module.
  - Resolves: rhbz#1609403
  - Fixed a use-after-free bug in a UDS error path.
  - Resolves: rhbz#1609403
  - Added missing va_end() calls.
  - Resolves: rhbz#1627953
  - Modified Makefile to take build flags from rpmbuild.
  - Resolves: rhbz#1624184


author: - Andy Walsh <awalsh@redhat.com> - 6.2.0.239-26
changelog:
  - Fixed error path memory leaks in the uds and kvdo modules.
  - Resolves: rhbz#1609403
  - Modified the physical and logical growth procedures to be consistent with
    other device mapper targets.
  - Resolves: rhbz#1631868


author: - Andy Walsh <awalsh@redhat.com> - 6.2.0.273-35
changelog:
  - Fixed more error path memory leaks in the uds and kvdo modules.
  - Resolves: rhbz#1639854
  - Removed the read cache.
  - Resolves: rhbz#1639512
  - Fixed a bug which prevented parsing of version 0 table lines.
  - Resolves: rhbz#1643639
  - In order to properly handle version 0 table lines, made no-op physical
    growth not an error.
  - Resolves: rhbz#1643639
  - Limited the number of logical zones to 60.
  - Resolves: rhbz#1645324
  - Converted to use the kernel's bio zeroing method instead of a VDO
    specific one.
  - Resolves: rhbz#1647446
  - Added a missing call to flush_cache_page() after writing pages which may
    be owned by the page cache or a user as required by the kernel.
  - Resolves: rhbz#1647446
  - Added a version 2 table line which uses DM-style optional parameters.
  - Resolves: rhbz#1648469
  - Fixed a bug in the statistics tracking partial I/Os.
  - Resolves: rhbz#1648496
  - Added a maximum discard size table line parameter and removed the
    corresponding sysfs parameter which applied to all VDO devices.
  - Resolves: rhbz#1648469


author: - Andy Walsh <awalsh@redhat.com> - 6.2.0.239-37
changelog:
  - Bumped NVR for driver signing
  - Relates: rhbz#1589873
  - Bumped NVR for new 4.18 kernel
  - Relates: rhbz#1623006


author: - Andy Walsh <awalsh@redhat.com> - 6.2.0.293-38
changelog:
  - Improved dmsetup error reporting of invalid thread counts.
  - rhbz#1645324
  - Allowed VDO backing devices to specified by device number.
  - Resolves: rhbz#1594285
  - Eliminated memory allocations when suspended.
  - Resolves: rhbz#1658348
  - Improved error handling during suspend.
  - Resolves: rhbz#1658348


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.48-51
changelog:
  - Modified the setting of the dm target version for VDO devices to only
    change when the dm interface (i.e. table line) changes instead of tying
    it to the VDO version.
    - Resolves: rhbz#1665298
  - Improved error handling when resizing VDO devices.
    - Resolves: rhbz#1659247
  - Reduced, removed, and/or rate limited error logging to avoid
    soft-lockups.
    - Resolves: rhbz#1678785
    - Resolves: rhbz#1698664
  - Began converting the VDO device to conform to the DM convention of not
    issuing I/O while suspended.
    - Relates: rhbz#1659303
  - Added a dmsetup message to close the UDS index of a running VDO device.
    - Relates: rhbz#1643291


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.102-53
changelog:
  - Continued converting the VDO device to conform to the DM convention of
    not issuing I/O while suspended.
    - Resolves: rhbz#1659303
  - Added more rate limiting of error logging in both the kvdo and uds
    modules in order to avoid soft-lockups on newer kernels.
    - Resolves: rhbz#1703243
  - Eliminated the passing of addresses of unaligned fields in packed
    - Resolves: rhbz#1718058


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.134-56
changelog:
  - Finished converting the VDO device to conform to the DM convention of not
    issuing I/O while suspended.
  - Resolves: rhbz#1659303
  - Fixed a bug where crash recovery could use the wrong threads for certain
    operations potentially resulting in memory corruption.
  - Resolves: rhbz#1703621
  - Fixed a bug which could cause segfaults when running the vdostatus
    command.
  - Resolves: rhbz#1669960
  - Eliminated a backtrace from the error logged when creating a VDO device
    with an erroneous physical size in the table line.
  - Resolves: rhbz#1717435
  - Fixed a possible use-after-free of the UDSConfiguration.
  - Resolves: rhbz#1653802
  - Made VDO a singleton device because multi-segment devices containing a
    VDO have a number of issues.
  - Resolves: rhbz#1725077
  - Converted the VDO device to conform to the DM convention of not issuing
    writes from the constructor.
  - Resolves: rhbz#1669086


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.138-56
changelog:
  - Fixed a crash on allocation failure and a use-after-free race introduced by
    the changes to avoid issuing I/O while suspended.
  - Resolves: rhbz#1659303


author: - Andy Walsh <awalsh@redhat.com> - 6.2.2.18-57
changelog:
  - Reduced the default number of index zones as the previous default
    attempted to maximize index performance at the expense of all other
    processes.
  - Resolves: rhbz#1703507
  - Fixed an assertion when resuming a VDO device which was not suspended
    with the no-flush flag.
  - Resolves: rhbz#1752893


author: - Andy Walsh <awalsh@redhat.com> - 6.2.2.117-63
changelog:
  - Fixed a bug which would cause the UDS index to be perceived as corrupt
    when a VDO volume is moved to a system with a different endianness.
  - Resolves: rhbz#1745211
  - Modified UDS index rebuild to be interruptible so that shutting down a
    VDO whose index is rebuilding need not wait for the index rebuild to
    complete.
  - Resolves: rhbz#1737639
  - Prevented two VDO devices from being started on the same storage.
  - Resolves: rhbz#1725052
  - Fixed rare races which could result in VDO issuing I/O while suspended.
  - Resolves: rhbz#1766358
  - Fixed crashes when re-suspending a VDO after it had been resumed.
  - Resolves: rhbz#1765253
  - Made async mode ACID. Added async-unsafe mode to preserve the performance of
    the old implementation.
  - Resolves: rhbz#1657301


author: - Andy Walsh <awalsh@redhat.com> - 6.2.3.91-73
changelog:
  - Removed unused UDS bio statistics.
  - Resolves: rhbz#1827762
  - Removed support for old kernels.
  - Resolves: rhbz#1827762
  - Fixed Coverity errors.
  - Resolves: rhbz#1827763
  - Improved the error message when slab journal locks overflow.
  - Resolves: rhbz#1827761
  - Fixed a bug which could result in VDO issuing I/O while suspended.
  - Resolves: rhbz#1824789
  - Fixed a rare double-enqueue bug in the recovery journal.
  - Resolves: rhbz#1824802
  - Modified VDO to not allocate an index if the VDO device is started
    with deduplication disabled.
  - Resolves: rhbz#1755448
  - Nodified VDO to not log spurious journal lock warnings when cleaning up
    write requests which failed due to the VDO going read-only.
  - Resolves: rhbz#1840455


author: - Andy Walsh <awalsh@redhat.com> - 6.2.3.107-73
changelog:
  - Fixed a bug which can cause a soft lockup if users interrupt processes
    waiting on dm-setup commands.
  - Resolves: rhbz#1844651
  - Fixed a rare race which could cause a suspend of a VDO device to fail.
  - Resolves: rhbz#1847747


author: - Andy Walsh <awalsh@redhat.com> - 6.2.3.107-74
changelog:
  - Updated dependencies to prevent installing kernel-rt incorrectly.
  - Resolves: rhbz#1811923
  - Bumped requirement for new 4.18 kernel
  - Relates: rhbz#1812069


author: - Andy Walsh <awalsh@redhat.com> - 6.2.4.14-74
changelog:
  - Fixed a bug which causes the UDS index to consume an excessive
    number of CPU cycles when the VDO device is idle.
  - Resolves: rhbz#1870660


author: - Andy Walsh <awalsh@redhat.com> - 6.2.4.26-74
changelog:
  - Modified physical growth to validate the new VDO size against the size of
    the underlying storage.
  - Resolves: rhbz#1732922
  - Fixed issues which prevented lvrename from working on lvm managed
    VDO devices.
  - Resolves: rhbz#1888419


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.11-78
changelog:
  - Introduced new memory size parameter values for UDS indexes which have
    been converted from vdo script management to LVM.
  - Resolves: rhbz#1928284


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.41-78
changelog:
  - Fixed bugs in reading the UDS index of a VDO volume which was converted
    to LVM.
  - Resolves: rhbz#1928284


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.62-79
changelog:
  - Fixed chapter computation for a converted sparse index.
  - Resolves: rhbz#1965516
  - Fixed invalidation of converted chapters.
  - Resolves: rhbz#1966818
  - Removed extraneous fields from the super block of a converted index.
  - Resolves: rhbz#1965546
  - Fixed calculation of the number of expiring chapters in a converted
    index.
  - Resolves: rhbz#1975546
  - Fixed bugs rebuilding a converted index.
  - Resolves: rhbz#1966824


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.65-79
changelog:
  - Removed unneeded allocations from the previous fixes for rebuilding
    a converted index.
  - Resolves: rhbz#1966824


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.72-79
changelog:
  - Fixed a bug which could result in the UDS index issuing I/O while
    suspended.
  - Resolves: rhbz#1990180


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include %{version}


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to %{_var}/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-8
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-6
changelog:
  - incorporate updated fix for CVE-2007-3999 (CVE-2007-4743)
  - fix incorrect call to "test" in the kadmin init script (#252322,#287291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-7
changelog:
  - also perform PAM session and credential management when ftpd accepts a
    client using strong authentication, missed earlier
  - also label kadmind log files and files created by the db2 plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-9
changelog:
  - apply the fix for CVE-2007-4000 instead of the experimental patch for
    setting ok-as-delegate flags


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5.conf %verify(not md5 size mtime) in addition to
    %config(noreplace), like /etc/nsswitch.conf (#329811)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-1
changelog:
  - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999
    and CVE-2007-4000 (the new pkinit module is built conditionally and goes
    into the -pkinit-openssl package, at least for now, to make a buildreq
    loop with openssl avoidable)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-3
changelog:
  - allocate space for the nul-terminator in the local pathname when looking up
    a file context, and properly free a previous context (Jose Plans, #426085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-4
changelog:
  - some init script cleanups
    - drop unquoted check and silent exit for "$NETWORKING" (#426852, #242502)
    - krb524: don't barf on missing database if it looks like we're using kldap,
      same as for kadmin
    - return non-zero status for missing files which cause startup to
      fail (#242502)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-5
changelog:
  - enable patch for key-expiration reporting
  - enable patch to make kpasswd fall back to TCP if UDP fails (#251206)
  - enable patch to make kpasswd use the right sequence number on retransmit
  - enable patch to allow mech-specific creds delegated under spnego to be found
    when searching for creds


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-7
changelog:
  - drop netdb patch
  - kdb_ldap: add patch to treat 'nsAccountLock: true' as an indication that
    the DISALLOW_ALL_TIX flag is set on an entry, for better interop with Fedora,
    Netscape, Red Hat Directory Server (Simo Sorce)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated
  - in login, signal PAM when we're changing an expired password that it's an
    expired password, so that when cracklib flags a password as being weak it's
    treated as an error even if we're running as root


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove a patch, to fix problems with interfaces which are "up" but which
    have no address assigned, which conflicted with a different fix for the same
    problem in 1.5 (#200979)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to suppress double-processing of /etc/krb5.conf when we build
    with --sysconfdir=/etc, thereby suppressing double-logging (#231147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-8
changelog:
  - ftp: add patch to fix "runique on" case when globbing fixes applied
  - stop adding a redundant but harmless call to initialize the gssapi internals


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-9
changelog:
  - rework file labeling patch to not depend on fragile preprocessor trickery,
    in another attempt at fixing #428355 and friends


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-10
changelog:
  - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer
    when v4 compatibility is enabled on the KDC (CVE-2008-0062, CVE-2008-0063,
    - add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
    high-numbered descriptors are used (CVE-2008-0947, #433596)
  - add backport bug fix for an attempt to free non-heap memory in
    libgssapi_krb5 (CVE-2007-5901, #415321)
  - add backport bug fix for a double-free in out-of-memory situations in
    libgssapi_krb5 (CVE-2007-5971, #415351)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-11
changelog:
  - libgssapi_krb5: properly export the acceptor subkey when creating a lucid
    context (Kevin Coffman, via the nfs4 mailing list)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-12
changelog:
  - stop exporting kadmin keys to a keytab file when kadmind starts -- the
    daemon's been able to use the database directly for a long long time now
  - belatedly add aes128,aes256 to the default set of supported key types


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-15
changelog:
  - build with -fno-strict-aliasing, which is needed because the library
    triggers these warnings
  - don't forget to label principal database lock files
  - fix the labeling patch so that it doesn't break bootstrapping


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clear fuzz out of patches, dropping a man page patch which is no longer
    necessary
  - quote %{__cc} where needed because it includes whitespace now
  - define ASN1BUF_OMIT_INLINE_FUNCS at compile-time (for now) to keep building


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-19
changelog:
  - libgssapi_krb5: backport fix for some errors which can occur when
    we fail to set up the server half of a context (CVE-2009-0845)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-100
changelog:
  - turn off krb4 support (it won't be part of the 1.7 release, but do it now)
  - use triggeruns to properly shut down and disable krb524d when -server and
    -workstation-servers gets upgraded, because it's gone now
  - move the libraries to /%{_lib}, but leave --libdir alone so that plugins
    get installed and are searched for in the same locations (#473333)
  - clean up buildprereq/prereqs, explicit mktemp requires, and add the
    ldconfig for the -server-ldap subpackage (part of #225974)
  - escape possible macros in the changelog (part of #225974)
  - fixup summary texts (part of #225974)
  - take the execute bit off of the protocol docs (part of #225974)
  - unflag init scripts as configuration files (part of #225974)
  - make the kpropd init script treat 'reload' as 'restart' (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-101
changelog:
  - add patches for read overflow and null pointer dereference in the
    implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
  - add patch for attempt to free uninitialized pointer in libkrb5
    (CVE-2009-0846)
  - add patch to fix length validation bug in libkrb5 (CVE-2009-0847)
  - put the krb5-user .info file into just -workstation and not also
    -workstation-clients


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-103
changelog:
  - fix a typo in a ksu error message (Marek Mahut)
  - "rev" works the way the test suite expects now, so don't disable tests
    that use it


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-104
changelog:
  - extend PAM support to ksu: perform account and session management for the
    target user
  - pull up and merge James Leddy's changes to also set PAM_RHOST in PAM-aware
    network-facing services


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-1
changelog:
  - update to 1.7
    - no need to work around build issues with ASN1BUF_OMIT_INLINE_FUNCS
    - configure recognizes --enable/--disable-pkinit now
    - configure can take --disable-rpath now
    - no more libdes425, krb524d, krb425.info
    - kadmin/k5srvutil/ktutil are user commands now
    - new kproplog
    - FAST encrypted-challenge plugin is new
  - drop static build logic
  - drop pam_krb5-specific configuration from the default krb5.conf
  - drop only-use-v5 flags being passed to various things started by xinetd
  - put %{krb5prefix}/sbin in everyone's path, too (#504525)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - compile with %{?_smp_mflags} (Steve Grubb)
  - drop the bit where we munge part of the error table header, as it's not
    needed any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a type mismatch in krb5_copy_error_message()
  - ftp: fix some odd use of strlen()
  - selinux labeling: use selabel_open() family of functions rather than
    matchpathcon(), bail on it if attempting to get the mutex lock fails


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-3
changelog:
  - switch buildrequires: and requires: on e2fsprogs-devel into
    buildrequires: and requires: on libss-devel, libcom_err-devel, per
    sandeen on fedora-devel-list


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-4
changelog:
  - try to merge and clean up all the large file support for ftp and rcp
    - ftpd no longer prints a negative length when sending a large file
      from a 32-bit host


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - simplify the man pages patch by only preprocessing the files we care about
    and moving shared configure.in logic into a shared function
  - catch the case of ftpd printing file sizes using %i, when they might be
    bigger than an int now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if the init script fails to start krb5kdc/kadmind/kpropd because it's already
    running (according to status()), return 0 (part of #521772)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-8
changelog:
  - specify the location of the subsystem lock when using the status() function
    in the kadmind and kpropd init scripts, so that we get the right error when
    we're dead but have a lock file - requires initscripts 8.99 (#521772)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-10
changelog:
  - move /etc/pam.d/ksu from krb5-workstation-servers to krb5-workstation,
    where it's actually needed (#538703)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-11
changelog:
  - ksu: move account management checks to before we drop privileges, like
    su does (#540769)
  - selinux: set the user part of file creation contexts to match the current
    context instead of what we looked up
  - configure with --enable-dns-for-realm instead of --enable-dns, which isn't
    recognized any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages that live in the -libs subpackage into the regular
    %{_mandir} tree where they'll still be found if that package is the
    only one installed (#529319)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-15
changelog:
  - add upstream patch for KDC crash during referral processing (CVE-2009-3295),
    via Tom Yu (#545002)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-16
changelog:
  - use %global instead of %define
  - pull up proposed patch for creating previously-not-there lock files for
    kdb databases when 'kdb5_util' is called to 'load' (#551764)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-17
changelog:
  - put the conditional back for the -devel subpackage
  - back down to the earlier version of the patch for #551764; the backported
    alternate version was incomplete


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-18
changelog:
  - add upstream patch for integer underflow during AES and RC4 decryption
    (CVE-2009-4212), via Tom Yu (#545015)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-19
changelog:
  - use portreserve to make sure the KDC can always bind to the kerberos-iv
    port, kpropd can always bind to the krb5_prop port, and that kadmind can
    always bind to the kerberos-adm port (#555279)
  - correct inadvertent use of macros in the changelog (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-20
changelog:
  - krb5_get_init_creds_password: check opte->flags instead of options->flags
    when checking whether or not we get to use the prompter callback (#555875)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-21
changelog:
  - suppress warnings of impending password expiration if expiration is more than
    seven days away when the KDC reports it via the last-req field, just as we
    already do when it reports expiration via the key-expiration field (#556495)
  - link with libtinfo rather than libncurses, when we can, in future RHEL


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-22
changelog:
  - use portreserve correctly -- portrelease takes the basename of the file
    whose entries should be released, so we need three files, not one


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-1
changelog:
  - update to 1.7.1
    - don't trip AD lockout on wrong password (#542687, #554351)
    - incorporates fixes for CVE-2009-4212 and CVE-2009-3295
    - fixes gss_krb5_copy_ccache() when SPNEGO is used
  - move sim_client/sim_server, gss-client/gss-server, uuclient/uuserver to
    the devel subpackage, better lining up with the expected krb5/krb5-appl
    split in 1.8
  - drop kvno,kadmin,k5srvutil,ktutil from -workstation-servers, as it already
    depends on -workstation which also includes them


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-3
changelog:
  - pull up the change to make kpasswd's behavior better match the docs
    when there's no ccache (#563431)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-4
changelog:
  - move the package changelog to the end to match the usual style (jdennis)
  - scrub out references to $RPM_SOURCE_DIR (jdennis)
  - include a symlink to the readme with the name LICENSE so that people can
    find it more easily (jdennis)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-6
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-1
changelog:
  - update to 1.8
    - temporarily bundling the krb5-appl package (split upstream as of 1.8)
      until its package review is complete
    - profile.d scriptlets are now only needed by -workstation-clients
    - adjust paths in init scripts
    - drop upstreamed fix for KDC denial of service (CVE-2010-0283)
    - drop patch to check the user's password correctly using crypt(), which
      isn't a code path we hit when we're using PAM


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-2
changelog:
  - pull up patch to get the client libraries to correctly perform password
    changes over IPv6 (Sumit Bose, RT#6661)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-4
changelog:
  - remove the krb5-appl bits (the -workstation-clients and -workstation-servers
    subpackages) now that krb5-appl is its own package
  - replace our patch for #563431 (kpasswd doesn't fall back to guessing your
    principal name using your user name if you don't have a ccache) with the
    one upstream uses


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-5
changelog:
  - add upstream fix for denial-of-service in SPNEGO (CVE-2010-0628, #576325)
  - kdc.conf: no more need to suggest keeping keys with v4-compatible salting


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - drop patch to suppress key expiration warnings sent from the KDC in
    the last-req field, as the KDC is expected to just be configured to either
    send them or not as a particular key approaches expiration (#556495)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-1
changelog:
  - update to 1.8.1
    - no longer need patches for #555875, #561174, #563431, RT#6661, CVE-2010-0628
  - replace buildrequires on tetex-latex with one on texlive-latex, which is
    the package that provides it now


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-5
changelog:
  - add patch to correct GSSAPI library null pointer dereference which could be
    triggered by malformed client requests (CVE-2010-1321, #582466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-6
changelog:
  - make krb5-server-ldap also depend on the same version-release of krb5-libs,
    as the other subpackages do, if only to make it clearer than it is when we
    just do it through krb5-server
  - drop explicit linking with libtinfo for applications that use libss, now
    that readline itself links with libtinfo (as of readline-5.2-3, since
    fedora 7 or so)
  - go back to building without strict aliasing (compiler warnings in gssrpc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: move session management calls to before we drop privileges, like
    su does (#596887), and don't skip the PAM account check for root or the
    same user (more of #540769)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull up fix for upstream #6745, in which the gssapi library would add the
    wrong error table but subsequently attempt to unload the right one


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3
changelog:
  - tell krb5kdc and kadmind to create pid files, since they can
  - add logrotate configuration files for krb5kdc and kadmind (#462658)
  - fix parsing of the pidfile option in the KDC (upstream #6750)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-1
changelog:
  - update to 1.8.3
    - drop backports of fixes for gss context expiration and error table
      registration/deregistration mismatch
    - drop patch for upstream #6750


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-4
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #629022, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #629022, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-6
changelog:
  - pull down patches from trunk to implement k5login_authoritative and
    k5login_directory settings for krb5.conf (#539423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-8
changelog:
  - incorporate upstream patch to fix uninitialized pointer crash in the KDC's
    authorization data handling (CVE-2010-1322, #636335)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-0.beta1.0
changelog:
  - start moving to 1.9 with beta 1
    - drop patches for RT#5755, RT#6762, RT#6774, RT#6775
    - drop no-longer-needed backport patch for #539423
    - drop no-longer-needed patch for CVE-2010-1322
  - if WITH_NSS is set, built with --with-crypto-impl=nss (requires NSS 3.12.9)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-2
changelog:
  - pkinit: when verifying signed data, use the CMS APIs for better
    interoperability (#636985, RT#6851)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
    in the KDC when using the LDAP kdb backend, and an uninitialized pointer
    use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, #664009,
    CVE-2011-0281, #668719, CVE-2011-0282, #668726, CVE-2011-0283, #676126)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-5
changelog:
  - krb5kdc init script: prototype some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (to flush out parts of #651466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-6
changelog:
  - turn on NSS as the backend for libk5crypto, adding nss-devel as a build
    dependency when that switch is flipped


