# changelog

author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.12-1
changelog:
  - dbox: Fixes to handling external attachments
  - dsync: More fixes to avoid hanging with remote syncs
  - dsync: Many other syncing/correctness fixes
  - doveconf: v2.0.10 and v2.0.11 didn't output plugin {} section right


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.11-1
changelog:
  - IMAP: Fixed hangs with COMPRESS extension
  - IMAP: Fixed a hang when trying to COPY to a nonexistent mailbox. 
  - IMAP: Fixed hang/crash with SEARCHRES + pipelining $.
  - IMAP: Fixed assert-crash if IDLE+DONE is sent in same TCP packet.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-1
changelog:
  - dovecot updated to 2.0.9
  - fixed a high system CPU usage / high context switch count performance problem
  - lda: Fixed a crash when trying to send "out of quota" reply


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.8-1
changelog:
  - dovecot updated to 2.0.8, pigeonhole updated to 0.2.2
  - services' default vsz_limits weren't being enforced correctly
  - added systemd support
  - dbox: Fixes to handling external mail attachments
  - imap, pop3: When service { client_count } was larger than 1, the
    log messages didn't use the correct prefix
  - MySQL: Only the first specified host was ever used


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.7-1
changelog:
  - dovecot updated to 2.0.7
  - IMAP: Fixed LIST-STATUS when listing subscriptions with subscriptions=no namespaces.
  - IMAP: Fixed SELECT QRESYNC not to crash on mailbox close if a lot of changes were being sent. 
  - quota: Don't count virtual mailboxes in quota
  - doveadm expunge didn't always actually do the physical expunging
  - Fixed some index reading optimizations introduced by v2.0.5.
  - LMTP proxying fixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.6-1
changelog:
  - dovecot updated to 2.0.6
  - Pre-login CAPABILITY includes IDLE again. Mainly to make Blackberry
    servers happy.
  - auth: auth_cache_negative_ttl default was 0 in earlier v2.0.x, but it
    was supposed to be 1 hour as in v1.x. Changed it back to 1h.
  - doveadm: Added import command for importing mails from other storages.
  - Reduced NFS I/O operations for index file accesses
  - dbox, Maildir: When copying messages, copy also already cached fields
    from dovecot.index.cache
  - Maildir: LDA/LMTP assert-crashed sometimes when saving a mail.
  - Fixed leaking fds when writing to dovecot.mailbox.log.
  - Fixed rare dovecot.index.cache corruption
  - IMAP: SEARCH YOUNGER/OLDER wasn't working correctly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.5-1
changelog:
  - dovecot updated to 2.0.5
  - acl: Fixed the logic of merging multiple ACL entries
  - sdbox: Fixed memory leak when copying messages with hard links. 
  - zlib: Fixed several crashes, which mainly showed up with mbox.
  - quota: Don't crash if user has quota disabled, but plugin loaded.
  - acl: Fixed crashing when sometimes listing shared mailboxes via dict proxy.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.4-1
changelog:
  - dovecot updated to 2.0.4
  - multi-dbox: If :INDEX=path is specified, keep storage/dovecot.map.index* 
    files also in the index path rather than in the main storage directory.
  - dsync: POP3 UIDLs weren't copied with Maildir
  - dict file: Fixed fd leak (showed up easily with LMTP + quota)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.3-1
changelog:
  - dovecot updated to 2.0.3
  - dovecot-lda: Removed use of non-standard Envelope-To: header as 
    a default for -a
  - dsync: Fixed handling \Noselect mailboxes
  - Fixed an infinite loop introduced by v2.0.2's message parser changes.
  - Fixed a crash introduced by v2.0.2's istream-crlf changes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.2-1
changelog:
  - dovecot updated
  - vpopmail support is disabled for now, since it's broken. You can use
    it via checkpassword support or its sql/ldap database directly.
  - maildir: Fixed "duplicate uidlist entry" errors that happened at
    least with LMTP when mail was delivered to multiple recipients
  - Deleting ACLs didn't cause entries to be removed from acl_shared_dict
  - mail_max_lock_timeout setting wasn't working with all locks


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.1-1
changelog:
  - dovecot and pigeonhole updated
  - sieve: sieved renamed to sieve-dump
  - when dsync is started as root, remote dsync command is now also executed 
    as root instead of with dropped privileges.
  - IMAP: QRESYNC parameters for SELECT weren't handled correctly.
  - UTF-8 string validity checking wasn't done correctly
  - dsync: Fixed a random assert-crash with remote dsyncing


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-1
changelog:
  - dovecot and pigeonhole updated
  - dict quota didn't always decrease quota when messages were expunged
  - Shared INBOX wasn't always listed with FS layout


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.21.rc5
changelog:
  - dovecot and pigeonhole updated
  - Using more than 2 plugins could have caused broken behavior
  - Listescape plugin fixes
  - mbox: Fixed a couple of assert-crashes
  - mdbox: Fixed potential assert-crash when saving multiple messages 
    in one transaction


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.20.rc4
changelog:
  - dovecot and pigeonhole updated
  - doveadm mailbox status: Fixed listing non-ASCII mailbox names. 
  - doveadm fetch: Fixed output when fetching message header or body
  - doveadm director map/add/remove: Fixed handling IP address as parameter. 
  - dsync: A few more fixes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.19.rc3
changelog:
  - dovecot and pigeonhole updated
  - fixed lda + sieve crash
  - added mail_temp_dir setting, used by deliver and lmtp for creating
    temporary mail files. Default is /tmp.
  - imap: Fixed checking if list=children namespace has children.
  - mdbox: Race condition fixes related to copying and purging


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.18.rc2.20100716
changelog:
  - dovecot and pigeonhole updated
  - enabled pigeonhole's build time test suite
  - acl: Fixed crashon FS layout with non-default hierarchy separator
  - dbox renamed to sdbox
  - dsync fixes and improvements


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.17.rc2.20100712
changelog:
  - dovecot and pigeonhole updated
  - fixed a crash with empty mail_plugins
  - fixed sharing INBOX to other users
  - director+LMTP proxy wasn't working correctly
  - v1.x config parser failed with some settings if pigeonhole wasn't installed.
  - virtual: If non-matching messages weren't expunged within same session,
    they never got expunged.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.15.beta6.20100626
changelog:
  - updated dovecot, pigeonhole and man pages
  - moved disable_plaintext_auth to 10-auth.conf
  - mdbox: Fixed assert-crash on storage rebuild if file got lost
  - lib-charset: Don't assert-crash when iconv() skips lots of invalid input
  - master: Fixed crash on deinit (maybe also on reload)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.14.beta5.20100610
changelog:
  - dovecot updated 
  - lib-storage: Fixed accessing uncommitted saved mails with dsync
  - example-config: Moved ACL and quota settings to a separate .conf files
  - dbox, mdbox: Fixed race conditions when creating mailboxes


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.13.beta5.20100529
changelog:
  - dovecot and pigeonhole updated
  - enable solr fulltext search
  - master: Fixed crash on config reload
  - lib-storage: Don't assert-crash when copying a mail fails


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.8.beta4.20100505
changelog:
  - pigeonhole and dovecot updated to snapshot 20100505
  - mdbox: Avoid rebuilding storage if another process already did it
  - lib-storage: Fixed () sublists in IMAP SEARCH parser
  - example-config: auth-checkpassword include wasn't listed in 10-auth.conf
  - doveadm: Added search command
  - lib-master: Don't crash after timeouting an auth-master request
  - master: If inet listener uses DNS name, which returns multiple IPs, 
    listen in all of them


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.7.beta4.20100427
changelog:
  - updated to snapshot 20100427
  - doveconf <setting name> now prints only the one setting's value
  - mdbox: Automatically delete old temp.* files from storage/ directory
  - mdbox: use flock locking by default


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.6.beta4.20100421
changelog:
  - updated to snapshot 20100421
  - mdbox: Purge crashed if it purged all messages from a file
  - lib-storage: Shared namespace's prefix_len wasn't updated after prefix was truncated
  - imap-quota: Iterate quota roots only once when replying to GETQUOTAROOT
  - idle: Do cork/uncork when sending "OK Still here" notification
  - login: If proxy returns ssl=yes and no port, switch port to imaps/pop3s


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.5.beta4.20100414
changelog:
  - add make check
  - updated to snapshot 20100414
  - config: Added nn- prefix to *.conf files so the sort ordering makes more sense
  - lib-master: Log an error if login client disconnects too early
  - mdbox: If purging found corrupted files, it didn't auto-rebuild storage
  - lib-storage: Added support for searching save date
  - and more...
  - pigeonhole updated:
  - Mailbox extension: fixed memory leak in the mailboxexists test
  - added login failure handler


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.4.beta4.20100406
changelog:
  - updated to snapshot 20100406
  - auth: If userdb lookup fails internally, don't cache the result.
  - Added support for userdb lookup to fail with a reason
  - sdbox: mailbox_update() could have changed UIDVALIDITY incorrectly
  - layout=maildir++: Fixed deleting mailboxes with mailbox=file storages
  - Fixed potential problems with parsing invalid address groups.
  - dsync: Don't repeatedly try to keep opening the same failing mailbox
  - lib-storage: Don't crash if root mail directory isn't given.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.11-1
changelog:
  - updated to 1.2.11
  - mbox: Message header reading was unnecessarily slow. Fetching a
    huge header could have resulted in Dovecot eating a lot of CPU.
    Also searching messages was much slower than necessary.
  - maildir: Reading uidlist could have ended up in an infinite loop.
  - IMAP IDLE: v1.2.7+ caused extra load by checking changes every
    0.5 seconds after a change had occurred in mailbox


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-3
changelog:
  - merged dovecot-sieve and dovecot-managesieve into dovecot-pigeonhole
  - merged dovecot-sqlite, dovecot-gssapi and dovecot-ldap into dovecot


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-2
changelog:
  - updated sive and managesieve
  - Added preliminary support for Sieve plugins and added support for
    installing Sieve development headers
  - Variables extension: added support for variable namespaces.
  - Added configurable script size limit. Compiler will refuse to
    compile files larger than sieve_max_script_size.
  - Fixed a bug in the i;ascii-numeric comparator. If one of the
    strings started with a non-digit character, the comparator would
    always yield less-than.
  - Imap4flags extension: fixed bug in removeflag: removing a single
    flag failed due to off-by-one error (bug report by Julian Cowley).
  - Fixed parser recovery. In particular cases it would trigger spurious
    errors after an initial valid error and sometimes additional errors
    were inappropriately ignored.
  - Implemented ManageSieve QUOTA enforcement.
  - Added MAXREDIRECTS capability after login.
  - Implemented new script name rules specified in most recent
    ManageSieve draft.
  - Fixed assertion failure occuring with challenge-response SASL
    mechanisms.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.10-1
changelog:
  - updated to 1.2.10
  - %variables now support %{host}, %{pid} and %{env:ENVIRONMENT_NAME}
    everywhere.
  - LIST-STATUS capability is now advertised
  - maildir: Fixed several assert-crashes.
  - imap: LIST "" inbox shouldn't crash when using namespace with
    "INBOX." prefix.
  - lazy_expunge now ignores non-private namespaces.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.9-1
changelog:
  - updated to 1.2.9
  - maildir: When saving, filenames now always contain ,S=<size>.
    Previously this was done only when quota plugin was loaded. It's
    required for zlib plugin and may be useful for other things too.
  - maildir: v1.2.7 and v1.2.8 caused assert-crashes in
    maildir_uidlist_records_drop_expunges()
  - maildir_copy_preserve_filename=yes could have caused crashes.
  - Maildir++ quota: % limits weren't updated when limits were read
    from maildirsize.
  - virtual: v1.2.8 didn't fully fix the "lots of mailboxes" bug
  - virtual: Fixed updating virtual mailbox based on flag changes.
  - fts-squat: Fixed searching multi-byte characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.7-1
changelog:
  - updated to dovecot 1.2.7
  - add man pages
  - IMAP: IDLE now sends "Still here" notifications to same user's
    connections at the same time. This hopefully reduces power usage
    of some mobile clients that use multiple IDLEing connections.
  - IMAP: If imap_capability is set, show it in the login banner.
  - IMAP: Implemented SORT=DISPLAY extension.
  - Login process creation could have sometimes failed with epoll_ctl()
    errors or without epoll probably some other strange things could
    have happened.
  - Maildir: Fixed some performance issues
  - Maildir: Fixed crash when using a lot of keywords.
  - Several fixes to QRESYNC extension and modseq handling
  - mbox: Make sure failed saves get rolled back with NFS.
  - dbox: Several fixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.6-3
changelog:
  - sieve updated to 0.1.13 which brings these changes:
  - Body extension: implemented proper handling of the :raw transform
    and added various new tests to the test suite. However, :content
    "multipart" and :content "message/rfc822" are still not working.
  - Fixed race condition occuring when multiple instances are saving the
    same binary (patch by Timo Sirainen).
  - Body extension: don't give SKIP_BODY_BLOCK flag to message parser,
    we want the body!
  - Fixed bugs in multiscript support; subsequent keep actions were not
    always merged correctly and implicit side effects were not always
    handled correctly.
  - Fixed a segfault bug in the sieve-test tool occuring when compile
    fails.
  - Fixed segfault bug in action procesing. It was triggered while
    merging side effects in duplicate actions.
  - Fixed bug in the Sieve plugin that caused it to try to stat() a NULL
    path, yielding a 'Bad address' error.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.6-1
changelog:
  - dovecot updated to 1.2.6
  - Added authtest utility for doing passdb and userdb lookups.
  - login: ssl_security string now also shows the used compression.
  - quota: Don't crash with non-Maildir++ quota backend.
  - imap proxy: Fixed crashing with some specific password characters.
  - fixed broken dovecot --exec-mail.
  - Avoid assert-crashing when two processes try to create index at the
    same time.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.5-1
changelog:
  - updated to dovecot 1.2.5
  - Authentication: DIGEST-MD5 and RPA mechanisms no longer require
    user's login realm to be listed in auth_realms. It only made
    configuration more difficult without really providing extra security.
  - zlib plugin: Don't allow clients to save compressed data directly.
    This prevents users from exploiting (most of the) potential security
    holes in zlib/bzlib.
  - fix index file handling that could have caused an assert-crash
  - IMAP: Fixes to QRESYNC extension.
  - deliver: Don't send rejects to any messages that have Auto-Submitted
    header. This avoids emails loops.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.4-1
changelog:
  - updated: dovecot 1.2.4, managesieve 0.11.9, sieve 0.1.12
  - fixed a crash in index file handling
  - fixed a crash in saving messages where message contained a CR
    character that wasn't followed by LF
  - fixed a crash when listing shared namespace prefix
  - sieve: implemented the new date extension. This allows matching
    against date values in header fields and the current date at
    the time of script evaluation
  - managesieve: reintroduced ability to abort SASL with "*" response


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.3-1
changelog:
  - updated: dovecot 1.2.3, managesieve 0.11.8, sieve 0.1.11
  - Mailbox names with control characters can't be created anymore.
    Existing mailboxes can still be accessed though.
  - Allow namespace prefix to be opened as mailbox, if a mailbox
    already exists in the root dir.
  - Maildir: dovecot-uidlist was being recreated every time a mailbox
    was accessed, even if nothing changed.
  - listescape plugin was somewhat broken
  - ldap: Fixed hang when >128 requests were sent at once.
  - fts_squat: Fixed crashing when searching virtual mailbox.
  - imap: Fixed THREAD .. INTHREAD crashing.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.2-1.20090728snap
changelog:
  - updated to post 1.2.2 snapshot (including post release GSSAPI fix)
  - Fixed "corrupted index cache file" errors
  - IMAP: FETCH X-* parameters weren't working.
  - Maildir++ quota: Quota was sometimes updated wrong
  - Dovecot master process could hang if it received signals too rapidly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.1-1
changelog:
  - updated to 1.2.1
  - GSSAPI authentication is fixed (#506782)
  - logins now fail if home directory path is relative, because it was 
    not working correctly and never was expected to work
  - sieve and managesieve update


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.11-1
changelog:
  - updated to 1.1.11
  - IMAP: PERMANENTFLAGS list didn't contain \*, causing some clients
    not to save keywords.
  - auth: Using "username" or "domain" passdb fields caused problems
    with cache and blocking passdbs in v1.1.8 .. v1.1.10.   
  - userdb prefetch + blocking passdbs was broken with non-plaintext
    auth in v1.1.8 .. v1.1.10.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.7-2
changelog:
  - revert changes from 1:1.1.6-2 and 1:1.1.6-1
  - password can be stored in different file readable only for root 
    via !include_try directive


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.6-1
changelog:
  - update to upstream version 1.1.6
  - change permissions of deliver and dovecot.conf to prevent possible password exposure


author: Dan Horak <dan[at]danny.cz> - 1:1.1.2-1
changelog:
  - update to upstream version 1.1.2
  - final solution for #445200 (add /etc/sysconfig/dovecot for start-up options)


author: Dan Horak <dan[at]danny.cz> - 1:1.1.0-1
changelog:
  - update to upstream version 1.1.0
  - update sieve plugin to 1.1.5
  - remove unnecessary patches
  - enable ldap and gssapi plugins
  - change ownership of dovecot.conf (Resolves: #452088)


author: Dan Horak <dan[at]danny.cz> - 1:1.0.14-1
changelog:
  - update to upstream version 1.0.14
  - remove setcred patch (use of setcred must be explictly enabled in config)


author: Dan Horak <dan[at]danny.cz> - 1:1.0.13-8
changelog:
  - update scriptlets to follow UsersAndGroups guideline
  - remove support for upgrading from version < 1.0 from scriptlets
  - Resolves: #448095


author: Tomas Janousek <tjanouse@redhat.com> - 1.0.0-11.7
changelog:
  - specfile merge from 145241 branch
      - new sql split patch
      - support for not building all sql modules
      - split sql libraries to separate packages


author: Tomas Janousek <tjanouse@redhat.com> - 1.0-1.rc15
changelog:
  - update to latest upstream, fixes a few bugs, plus a security
    vulnerability (#216508, CVE-2006-5973)


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc7
changelog:
  - update to latest upstream release candidate, should fix occasional
    hangs and mbox issues... INBOX. namespace is still broken though
  - do not run over symlinked certificates in new locations on upgrade


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc2
changelog:
  - update to latest upstream release candidate
  - disable inotify for now, doesn't build -- this needs fixing though


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta8.2
changelog:
  - put back pop3_uidl_format default that got lost
    in the beta2->beta7 upgrade (would cause pop3 to not work
    at all in many situations)


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.5
changelog:
  - fix #182240 by looking in lib64 for libs first and then lib
  - fix comment #1 in #182240 by copying over the example config files
    to documentation directory


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.3
changelog:
  - change the compiled-in defaults and adjust the default's configfile
    commented-out example settings to match compiled-in defaults,
    instead of changing the defaults only in the configfile, as per #179432
  - fix #179574 by providing a default uidl_format for pop3
  - half-fix #179620 by having plaintext auth enabled by default... this
    needs more thinking (which one we really want) and documentation
    either way


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2
changelog:
  - new upstream version, hopefully fixes #173928, #163550
  - fix #168866, use install -p to install documentation


author: John Dennis <jdennis@redhat.com> - 0.99.14-1.fc4
changelog:
  - fix bug #147874, update to 0.99.14 release
    v0.99.14 2005-02-11  Timo Sirainen <tss at iki.fi>
    - Message address fields are now parsed differently, fixing some
      issues with spaces. Affects only clients which use FETCH ENVELOPE
      command.
    - Message MIME parser was somewhat broken with missing MIME boundaries
    - mbox: Don't allow X-UID headers in mails to override the UIDs we
      would otherwise set. Too large values can break some clients and
      cause other trouble.
    - passwd-file userdb wasn't working
    - PAM crashed with 64bit systems
    - non-SSL inetd startup wasn't working
    - If UID FETCH notices and skips an expunged message, don't return
      a NO reply. It's not needed and only makes clients give error
      messages.


author: John Dennis <jdennis@redhat.com> 0.99.13-3.devel
changelog:
  - fix bug #145214, force mbox_locks to fcntl only
  - fix bug #145241, remove prereq on postgres and mysql, allow rpm auto
    dependency generator to pick up client lib dependency if needed.


author: John Dennis <jdennis@redhat.com> 0.99.13-2.devel
changelog:
  - make postgres & mysql conditional build
  - remove execute bit on migration example scripts so rpm does not pull
    in additional dependences on perl and perl modules that are not present
    in dovecot proper.
  - add REDHAT-FAQ.txt to doc directory


author: John Dennis <jdennis@redhat.com> 0.99.13-1.devel
changelog:
  - bring up to date with latest upstream, 0.99.13, bug #143707
    also fix bug #14462, bad dovecot-uid macro name


author: John Dennis <jdennis@redhat.com> 0.99.11-8.devel
changelog:
  - fix bug #129539, dovecot starts too early,
    set chkconfig to 65 35 to match cyrus-imapd
  - also delete some old commented out code from SSL certificate creation


author: John Dennis <jdennis@redhat.com> 0.99.11-7.devel
changelog:
  - add UW to Dovecot migration documentation and scripts, bug #139954
    fix SSL documentation and scripts, add missing documentation, bug #139276


author: John Dennis <jdennis@redhat.com> 0.99.11-1.FC3.1
changelog:
  - bring up to latest upstream,
    comments from Timo Sirainen <tss at iki.fi> on release v0.99.11 2004-09-04  
    + 127.* and ::1 IP addresses are treated as secured with
      disable_plaintext_auth = yes
    + auth_debug setting for extra authentication debugging
    + Some documentation and error message updates
    + Create PID file in /var/run/dovecot/master.pid
    + home setting is now optional in static userdb
    + Added mail setting to static userdb
    - After APPENDing to selected mailbox Dovecot didn't always notice the
      new mail immediately which broke some clients
    - THREAD and SORT commands crashed with some mails
    - If APPENDed mail ended with CR character, Dovecot aborted the saving
    - Output streams sometimes sent data duplicated and lost part of it.
      This could have caused various strange problems, but looks like in
      practise it rarely caused real problems.


author: John Dennis <jdennis@redhat.com> 0.99.10.9-1,FC3,1
changelog:
  - bring up to date with latest upstream, fixes include:
  - LDAP support compiles now with Solaris LDAP library
  - IMAP BODY and BODYSTRUCTURE replies were wrong for MIME parts which
    didn't contain Content-Type header.
  - MySQL and PostgreSQL auth didn't reconnect if connection was lost
    to SQL server
  - Linking fixes for dovecot-auth with some systems
  - Last fix for disconnecting client when downloading mail longer than
    30 seconds actually made it never disconnect client. Now it works
    properly: disconnect when client hasn't read _any_ data for 30
    seconds.
  - MySQL compiling got broken in last release
  - More PostgreSQL reconnection fixing


author: John Dennis <jdennis@redhat.com> 0.99.10.7-1,FC3,1
changelog:
  - enable postgres and mySQL in build
  - fix configure to look for mysql in alternate locations
  - nuke configure script in tar file, recreate from configure.in using autoconf

  - bring up to latest upstream, which included:
  - Added outlook-pop3-no-nuls workaround to fix Outlook hang in mails with NULs.
  - Config file lines can now contain quoted strings ("value ")
  - If client didn't finish downloading a single mail in 30 seconds,
    Dovecot closed the connection. This was supposed to work so that
    if client hasn't read data at all in 30 seconds, it's disconnected.
  - Maildir: LIST now doesn't skip symlinks


author: John Dennis <jdennis@redhat.com> - 0.99.10.6-1
changelog:
  - bring up to date with upstream,
    recent change log comments from Timo Sirainen were:
    SHA1 password support using OpenSSL crypto library
    mail_extra_groups setting
    maildir_stat_dirs setting
    Added NAMESPACE capability and command
    Autocreate missing maildirs (instead of crashing)
    Fixed occational crash in maildir synchronization
    Fixed occational assertion crash in ioloop.c
    Fixed FreeBSD compiling issue
    Fixed issues with 64bit Solaris binary


author: Warren Togami <wtogami@redhat.com> 0.99.10.4-4
changelog:
  - default auth config that is actually usable
  - Timo Sirainen (author) suggested functionality fixes
    maildir, imap-fetch-body-section, customflags-fix


author: Jeremy Katz <katzj@redhat.com> 0.99.10-7
changelog:
  - another patch from upstream to fix returning invalid data on partial 
    BODY[part] fetches
  - patch to avoid confusion of draft/deleted in indexes


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.2
changelog:
  - 0.99.10-rc2 (includes ssl detection fix)
  - a few tweaks from fedora
    - noreplace the config file
    - configure --with-ldap to get LDAP enabled


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.1
changelog:
  - 0.99.10-rc1
  - add fix for ssl detection
  - add zlib-devel to BuildRequires
  - change pam service name to dovecot
  - include pam config


author: Jeremy Katz <katzj@redhat.com> 0.99.9.1-1
changelog:
  - update to 0.99.9.1
  - add patch from upstream to fix potential bug when fetching with 
    CR+LF linefeeds
  - tweak some things in the initscript and config file noticed by the 
    fedora folks


author: Jeremy Katz <katzj@redhat.com> 0.99.8-1
changelog:
  - 0.99.8
  - add some buildrequires
  - fixup to build with openssl 0.9.7
  - now includes a pop3 daemon (off by default)
  - clean up description and %preun
  - add dovecot user (uid/gid of 97)
  - add some buildrequires
  - move the ssl cert to %{_datadir}/ssl/certs
  - create a dummy ssl cert in %post
  - own /var/run/dovecot
  - make the config file a source so we get default mbox locks of fcntl


author: Paul Howarth <paul@city-fan.org> 1.7.2-17
changelog:
  - Add note in options.pptp about MPPE not being available in FIPS mode
    (#845112)
  - Add note in options.pptp about PPTP with MSCHAP-V2 being insecure


author: Paul Howarth <paul@city-fan.org> 1.7.2-14
changelog:
  - Build with warning-fix patches to address occasional segfaults (#749455)
  - Patches have all now been merged upstream


author: Paul Howarth <paul@city-fan.org> 1.7.2-13.2
changelog:
  - Add patch to fix highly-parallel build (e.g. -j16)
  - Add additional compiler warning flags to highlight questionable code
  - Add patch to fix comparisons between signed and unsigned integers
  - Add patch to fix const usage
  - Add patch to fix missing field initializers
  - Add patch to suppress warnings about possibly unused variables
  - Add patch to fix declarations that are not prototypes
  - Add patch to fix warnings about nested externs
  - Add patch to fix dubious typecasts that violate strict-aliasing rules
  - Update the FSF address references and GPLv2 license text
  - Use default optimization level (-O2) again


author: Paul Howarth <paul@city-fan.org> 1.7.2-13.1
changelog:
  - Drop compiler optimization level to -O0 as per upstream in attempt to
    resolve occasional segfault in pptpcm (#749455)
  - Add patch to fix highly-parallel build (e.g. -j16)


author: Paul Howarth <paul@city-fan.org> 1.7.2-13
changelog:
  - Patch to fix broken Call-Disconnect-Notify code accepted upstream
  - Add upstream patch to support setting SO_MARK for the PPTP TCP control
    connection as well as on the GRE packets
  - Add upstream patch to implement the --nohostroute option
  - Nobody else likes macros for commands


author: Paul Howarth <paul@city-fan.org> 1.7.2-11
changelog:
  - Require systemd-units for ownership of /etc/tmpfiles.d directory
  - Fix Call-Disconnect-Notify operation


author: Paul Howarth <paul@city-fan.org> 1.7.2-10
changelog:
  - Add /etc/tmpfiles.d/pptp.conf to create /var/run/pptp at boot time for
    systems with /var/run on tmpfs (#656672)


author: Paul Howarth <paul@city-fan.org> 1.7.2-9
changelog:
  - Add some fixes from CVS:
    - Fix waitpid usage
    - Move free of connection struct out of main loop
    - Avoid using connection struct after it is freed


author: Paul Howarth <paul@city-fan.org> 1.7.2-6
changelog:
  - Don't check for MPPE capability in kernel and pppd unless we're creating a
    tunnel that requires encryption
  - Don't check for MPPE capability in kernel and pppd at all because current
    Fedora releases and EL >= 5 include MPPE support out of the box (#502967)


author: Paul Howarth <paul@city-fan.org> 1.7.2-5
changelog:
  - Retain permissions on /etc/ppp/chap-secrets when using pptpsetup (#492090)
  - Use upstream versions of patches
  - Re-enable parallel build; Makefile dependencies now fixed
  - Use perl rather than sed to edit Makefile, for spec compatibility with
    ancient distro releases


author: Paul Howarth <paul@city-fan.org> 1.7.2-3
changelog:
  - Add dependency on /sbin/ip
  - Disable parallel make - object files are missing dependency on config.h


author: Paul Howarth <paul@city-fan.org> 1.7.2-1
changelog:
  - Update to 1.7.2
  - New script and manpage: pptpsetup
  - Add patch to remove reference to stropts.h, not shipped in F9 onwards


author: Paul Howarth <paul@city-fan.org> 1.7.1-3
changelog:
  - Change download URL from df.sf.net to downloads.sf.net
  - Expand tabs in spec
  - Clarify license as GPL version 2 or later


author: Paul Howarth <paul@city-fan.org> 1.7.1-1
changelog:
  - new upstream version 1.7.1 (fixes #166394)
  - include new document PROTOCOL-SECURITY
  - cosmetic change: replace variables with macros


author: Paul Howarth <paul@city-fan.org> 1.7.0-1
changelog:
  - new upstream version 1.7.0
  - remove patch, included upstream
  - edit Makefile to prevent attempted chown in %install
  - remove redundant %attr tag in %files
  - honour $RPM_OPT_FLAGS
  - ensure directories have correct permissions


author: Paul Howarth <paul@city-fan.org> 1.6.0-2
changelog:
  - Weed out documentation useful only to developers
  - Add dist tag
  - Use full URL for SOURCE0
  - Fix permissions on %{_sbindir}/pptp


author: Jakub Jelen <jjelen@redhat.com> 2.1.26-18
changelog:
  - Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
  - Add and document ability to run saslauth as non-root user (#1188065)
  - Support AIX SASL GSSAPI (#1174322)
  - Update client library to be thread safe (#1147659)
  - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
  - Don't use unnecessary quotes around user description (#1082564)
  - Fix confusing message when config file has typo (#1022479)


author: Petr Lautrbach <plautrba@redhat.com> 2.1.26-10
changelog:
  - fix hardening for /usr/sbin/saslauthd
  - add testsaslauthd.8 man page to the package
  - use static md5global.h file


author: Petr Lautrbach <plautrba@redhat.com> 2.1.26-7
changelog:
  - fix the spec file in order to build the cyrus-sasl-sql plugin
    with support for PostgreSQL and MySQL


author: Jindrich Novy <jnovy@redhat.com> 2.1.23-31
changelog:
  - temporarily disable libdb support to resolve cyrus-sasl
    chicken and egg build problem against libdb


author: Petr Lautrbach <plautrba@redhat.com> 2.1.23-29
changelog:
  - Change saslauth user homedir to /run/saslauthd (#752889)
  - Change all /var/run/ to /run/
  - DAEMONOPTS are not supported any more in systemd units


author: Jan F. Chadima <jchadima@redhat.com> - 2.1.23-23
changelog:
  - Migrate the package to full native systemd unit files, according to the Fedora
    packaging guidelines.


author: Tomas Mraz <tmraz@redhat.com> - 2.1.22-19
changelog:
  - always use the current external db4 when linking,
    thanks to Dan Horak for the original patch (#464098)


author: Tomas Mraz <tmraz@redhat.com> - 2.1.22-15
changelog:
  - drop reload from initscript help (#448154)
  - fix hang in rimap auth method (#438533)
  - build the krb4 plugin (#154675)


author: Steve Conklin <sconklin@redhat.com> - 2.1.22-11
changelog:
  - Cleanup after merge review bz #225673
  - no longer mark /etc/rc.d/init.d/saslauthd as config file
  - removed -x permissions on include files
  - added devel package dependency on cyrus-sasl
  - removed some remaining .la files that were being delivered


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-6
changelog:
  - install config files and init scripts using -p
  - pull in patch to build with current automake (#229010, Jacek Konieczny
    and Robert Scheck)
  - remove prereq on ldconfig, RPM should pick it up based on the -libs
    scriptlets
  - pull in patch to correctly detect gsskrb5_register_acceptor_identity
    (#200892, Mirko Streckenbach)
  - move sasldb auxprop modules into the -lib subpackage, so that we'll pick
    it up for multilib systems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove static build, which is no longer a useful option because not all of
    our dependencies are available as static libraries
  - drop patches which were needed to keep static builds going
  - drop gssapi-generic patch due to lack of interest
  - update the bundled copy of db to 4.5.20 (#229012)
  - drop dbconverter-2, as we haven't bundled v1 libraries since FC4


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-5
changelog:
  - rebuild
  - add 'authentication' or 'auxprop' to summaries for plugin packages to
    better indicate what the plugin provides
  - switch from automake 1.9 to automake 1.7


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-12
changelog:
  - add conditionalized build dependency on openldap-devel (#191855)
  - patch md5global.h to be the same on all architectures


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-11
changelog:
  - add unapplied patch which makes the DIGEST-MD5 plugin omit the realm
    argument when the environment has $CYRUS_SASL_DIGEST_MD5_OMIT_REALM set to a
    non-zero value, for testing purposes
  - add missing buildrequires on zlib-devel (#190113)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-9
changelog:
  - use --as-needed to avoid linking dbconverter-2 with SQL libraries, which
    it doesn't use because it manipulates files directly (#173321)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-8
changelog:
  - rebuild with new OpenLDAP, overriding the version checks to assume that
    2.3.11 is acceptable
  - remove a lingering patch for 1.x which we no longer use


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-4
changelog:
  - move the ldapdb auxprop support into a subpackage (#167300)
    (note: the ldap password check support in saslauthd doesn't use auxprop)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-2
changelog:
  - move the ANONYMOUS mech plugin to the -lib subpackage so that multilib
    systems can use it without installing the main package
  - build the static libraries without sql auxprop support


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-1
changelog:
  - update to 2.1.21
  - turn off compilation of libsasl v1 (finally)
  - explicitly disable sqlite to avoid the build warning
  - change the default mechanism which is set for saslauthd from "shadow" to
    "pam" (#159194)
  - split the shared library up from saslauthd so that multilib systems don't
    have to pull in every dependency of saslauthd for the compat arch (#166749)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.19-1
changelog:
  - rebuild (the 2.1.19 changelog for fixing a buffer overflow referred to a CVS
    revision between 2.1.18 and 2.1.19)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a saslauthd_version option to libsasl's saslauthd client and teach it to
    do the right thing
  - enable the saslauthd client code in libsasl version 1 (it's still going away!)
  - add saslauthd1-checkpass/saslauthd2-checkpass for testing the above change


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17, forcing the gssapi plugin to be shared now, as before
  - use a bundled libdb (#112215)
  - build static-with-all-plugins and normal-shared libsasl versions
  - add sasl2-{shared,static}-mechlist for very basic sanity checking
  - make inclusion of sasl1 stuffs conditional, because it's so going away


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.15-6
changelog:
  - use /dev/urandom instead of /dev/random for SASL2 (docs indicate that this is
    safe if you aren't using OTP or SRP, and we build neither); SASL1 appears to
    use it to seed the libc RNG only (#103378)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.15-5
changelog:
  - install saslauthd's mdoc page instead of the pre-formatted man page, which
    would get formatted again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - include testsaslauthd
  - note in the README that the saslauthd protocol is different for v1 and v2,
    so v1's clients can't talk to the v2 server


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - consider either des_cbc_encrypt or DES_cbc_encrypt to be sufficient when
    searching for a DES implementation in libcrypto
  - pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.7-3
changelog:
  - rebuild, overriding sasldir when running make so that on multilib systems
    applications will be able to load modules for the right arch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.0, which is designed to be installed in parallel with cyrus sasl
    1.x, so fork the package and rename it to cyrus-sasl2
  - add the sasldb auxprop plugin to the main package
  - add disabled-by-default saslauthd init script
  - move the .la files for plugins into their respective packages -- they're
    needed by the library


author: Nalin Dahyabhai <nalin@redhat.com> 1.5.24-21
changelog:
  - include sample programs in the -devel subpackage, prefixing their names
    with "sasl-" to reduce future potential naming conflicts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add gdbm-devel as a build dependency (#44990)
  - split off CRAM-MD5 and DIGEST-MD5 into a subpackage of their own (#43079,
    and dialogs with David L. Parsley)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split out the PLAIN and LOGIN mechanisms into their own package (this allows
    an administrator to disable them by simply removing the package)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move .so files for modules to their respective packages -- they're not -devel
    links meant for use by ld anyway


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - force use of gdbm for database files to avoid DB migration weirdness
  - enable login mechanism
  - disable gssapi until it can coexist peacefully with non-gssapi setups
  - actually do a make in the build section (#15410)


author: Mads Kiilerich <mads@kiilerich.com>
changelog:
  - updated to sasl 1.5.11
  - configure --disable-krb4 --without-rc4 --disable-cram 
    because of missing libraries and pine having cram as default...
  - handle changing libsasl.so versions


author: Nathaniel McCallum <npmccallum@redhat.com> - 4-1
changelog:
  - Import SRPM from Fedora (tang-4-3.fc26)
  - Remove nagios dependency
  - Adjust http-parser version for RHEL


author: Tomas Mraz <tmraz@redhat.com> - 1.3.2-1
changelog:
  - new upstream version
  - re-enable gpg tests (original patch by John Morris <john@zultron.com>)
  - quiet configure warning 'could not find g13'
  - there is no libgpgme-pth anymore


author: Simon Lukasik <slukasik@redhat.com> - 1.3.0-6
changelog:
  - Resolve multilib conflict of gpgme-config (#341351)
  - Resolve multilib conflict of gpgme.h (#341351)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.7-3
changelog:
  - track shlib sonames closer, to highlight future abi/soname changes
  - _with_gpg macro, to potentially conditionalize gnupg vs gnupg2 defaults
    for various os/releases (ie, fedora vs rhel)


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 0:1.0.2-1
changelog:
  - LGPL used here, and made summary more explicit.
  - Remove dirmngr dependency (gpgsm interfaces with it).
  - Obsolete cryptplug as gpgme >= 0.4.5 provides what we used cryptplug for.


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-2.el7
changelog:
  - Rebase to 1.2 [bz#1384435]
  - Resolves: bz#1384435
    (Rebase libunwind package (and add for ppc64le): libunwind)


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-6.el7
changelog:
  - Fix update from EPEL version [bz#1289950]
  - Resolves: bz#1289950
    (libunwind in RHEL 7.2 has a smaller release than the last libunwind package in EPEL-7)


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-5
changelog:
  - Version bumped [bz#1238864]
  - Resolves: bz#1238864
    libunwind: bump version to win against existing branches


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-2
changelog:
  - lu-Fix-rpmdiff-failure.patch [bz#1229359]
  - lu-Fix-buffer-overflow-reported-by-Coverity.patch [bz#1233114]
  - Resolves: bz#1229359
    (Fix multilib support)
  - Resolves: bz#1233114
    (fix off-by-one in dwarf_to_unw_regnum (CVE-2015-3239))


author: Brian Pepple <bpepple@fedoraproject.org> - 0.11.93-1
changelog:
  - Update to 0.11.93.
  - Add batch to fix build with recent kernels, the v4l2_buffer input field was removed.
  - Use %global instead of %define.


author: Nils Philippsen <nils@redhat.com> - 1.4.0-1
changelog:
  - version 1.4.0
  - remove ancient obsoletes and bogus requirements
  - require systemd >= 30 for localed
  - update gtk-update-icon-cache scriptlets


author: Nils Philippsen <nils@redhat.com> - 1.3.1-12
changelog:
  - use consistent names for patches, create backup files
  - use polkit/pkexec instead of consolehelper
  - add man page


author: Ville Skyttä <ville.skytta@iki.fi> - 1.3.1-11
changelog:
  - Add dependency on newt-python (#845391, Sandro Mani).
  - Fix bogus dates in %changelog and rpmlint tabs vs spaces warning.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.3.1-5
changelog:
  - Apply patches from itamarjp, landgraf, mschwendt to fix:
    - Needs pyhon-dbus: https://bugzilla.redhat.com/show_bug.cgi?id=708631
    - Missing OK button: https://bugzilla.redhat.com/show_bug.cgi?id=646041


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.15-8
changelog:
  - system-config-keyboard-1.2.15-nolayout.patch: insert a default ServerLayout
    section if none is found.


author: Lubomir Rintel <lkundrak@v3.sk> - 1.2.15-5
changelog:
  - Include icon in anaconda keyboard selection screen (#469165)
  - Remove extension from desktop entry icon


author: Lubomir Kundrak <lkundrak@redhat.com> 1.2.15-1
changelog:
  - New upstream release
  - Fix possibility to cancel in TUI (#216132)
  - Use system icon set (#291261)
  - Fix install places and permissions


author: Jesse Keating <jkeating@redhat.com> - 1.2.11-4
changelog:
  - Patch to work with new firstboot (#424811)
  - Add requires for kudzu/newt (#177301)
  - Update url (#235072)
  - Remove obsolete no translation (#332301)


author: Pete Graner <pgraner@redhat.com> - 1.2.11-2
changelog:
  - Updated License tag per Fedora Licenseing Guidlines.
  - Removed  --add-category X-Red-Hat-Base to fix build errors


author: Brent Fox <bfox@redhat.com> 1.2.1-1
changelog:
  - renamed from redhat-config-keyboard
  - add Obsoletes for redhat-config-keyboard
  - make changes for Python2.3


author: Brent Fox <bfox@redhat.com> 1.0.3-1
changelog:
  - add a us keymap to keymaps with non-latin chars (bug #82440)
  - write out the XkbVariant line if it is present
  - handle XkbOptions to allow toggling between keymaps


author: Brent Fox <bfox@redhat.com> 0.9.2-1
changelog:
  - Wrap the destroy call in a try/except because there is no self.mainWindow in firstboot reconfig mode


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1.1.0-11
changelog:
  - Fix Requires to be against tpm2-tss instead of tpm2-tss-devel
  - Add BuildRequires to specify version tpm2-tss-devel needed
  - Add Requires to tpm2-abrmd-devel for tpm2-tss-devel
  resolves: rhbz#1627827


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-4
changelog:
  - Rename and relocate udev rules file to _udevrulesdir
  - Update scriptlet to add service name after systemd_postrun


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-2
changelog:
  - Removed BuildRequires for gcc
  - Move tpm2-abrmd systemd service to /usr/lib/systemd/system
  - Added scriptlet for tpm2-abrmd systemd service
  - Use autoreconf instead of bootstrap


author: Ed Avis <eda@waniasset.com> - 5.48-1
changelog:
  - Update to 5.48.
  - rhbz#214709 Krasnoyarsk patch now upstream.
  - Changed name to Date-Manip as now used on CPAN.


author: Robin Norwood <rnorwood@redhat.com> - 5.44-4
changelog:
  - Apply patch to use date +%z as possible source for timezone data
  - Fix license tag
  - Add TODO and HISTORY to %doc list


author: Robin Norwood <rnorwood@redhat.com> - 5.44-2
changelog:
  - Add support for KRAT and KRAST timezones
  - Include magic dist tag in release
  - Resolves: rhbz#214709
  - Related: rhbz#100786


author: Akira TAGOH <tagoh@redhat.com> - 20120415-1
changelog:
  - Updates to 20120415.
  - Get rid of Japanese manpages that English manpages is not available in Fedora.


author: Akira TAGOH <tagoh@redhat.com> - 20101205-3
changelog:
  - Add deprecated notice for the usage of PORT in sink directives. (#600321)
  - Add descriptions for the extended and device format fields. (#669646)


author: Akira TAGOH <tagoh@redhat.com> - 20101110-1
changelog:
  - Updates to 20101110.
  - Get rid of the unnecessary patches:
    - man-pages-ja-missing-pkglist.patch
    - man-pages-ja-fix-mdoc.patch


author: Akira TAGOH <tagoh@redhat.com> - 20101028-1
changelog:
  - Updates to 20101028.
  - Get rid of patches since applied upstream:
    - man-pages-ja-IT603773-less.patch


author: Akira TAGOH <tagoh@redhat.com> - 20100315-1
changelog:
  - updates to 20100315.
  - get rid of SysVinit manpages according to #580465.
    - halt(8)
    - init(8)
    - poweroff(8)
    - reboot(8)
    - runlevel(8)
    - shutdown(8)
    - telinit(8)


author: Akira TAGOH <tagoh@redhat.com> - 20091215-1
changelog:
  - updates to 20091215.
  - apply some patches to correct typos:
    - man-pages-ja-486655-mkfs.8.patch
    - man-pages-ja-509048-less.1.patch
    - man-pages-ja-515467-strings.1.patch
    - man-pages-ja-527638-chgrp.1.patch
    - man-pages-ja-537103-ip.7.patch
    - man-pages-ja-fix-mdoc.patch
  - clean up the spec file.


author: Akira TAGOH <tagoh@redhat.com> - 20090615-1
changelog:
  - updates to 20090615.
  - Remove patches merged upstream:
    - man-pages-ja-20031215-crontab-0days.patch
    - man-pages-ja-432668-iptables.8.patch
    - man-pages-ja-20050215-ls.patch
  - Correct various typos:
    - sysctl(8), bash(1), echo(1), wall(1), vmstat(8), edquota(8).


author: Akira TAGOH <tagoh@redhat.com> - 20080815-1
changelog:
  - updates to 20080815.
  - correct the description of 'suspend' built-in command in bash(1).
  - correct the description of top(1) command.


author: Akira TAGOH <tagoh@redhat.com> - 20080415-2
changelog:
  - correct the description of --dscp option in iptables(8).
  - correct the description of the syntax for octadecimal and hexadecimal
    in printf(1).


author: Akira TAGOH <tagoh@redhat.com> - 20070915-1
changelog:
  - updates to 20070915.
    - remove man-pages-ja-222495-swapon.2.patch so that it's no longer needed.
  - clean up the spec file.
  - fix some warnings in perl script.


author: Akira TAGOH <tagoh@redhat.com> - 20070615-1
changelog:
  - updates to 20070615.
    - man-pages-ja-20051115-libaio.patch: removed.
    - man-pages-ja-20060815-204664-write.2.patch: removed.


author: Akira TAGOH <tagoh@redhat.com> - 20060815-2
changelog:
  - man-pages-ja-20060815-204667-nfs.5.patch: fixed nfs.5
  - man-pages-ja-20060815-204664-write.2.patch: fixed write.2
  - man-pages-ja-20060815-178955-at.1.patch: fixed at.1


author: Akira TAGOH <tagoh@redhat.com> - 20051115-1
changelog:
  - updates to 20051115.
  - man-pages-ja-20051115-libaio.patch: fixed a misleading of the header file
    required and a typo.
  - man-pages-ja-20050215-ls.patch: fixed the -H option's explanation.


author: Akira TAGOH <tagoh@redhat.com> - 20051015-1
changelog:
  - updates to 20051015.
  - man-pages-ja-20050215-shmget.patch: no longer needed. merged into upstream.


author: Akira TAGOH <tagoh@redhat.com> - 20050215-1
changelog:
  - updates to 20050215.
  - fixed wrong argument type and structure member variable type
    in shmget(2) (#149217)


author: Akira TAGOH <tagoh@redhat.com> 20040515-1
changelog:
  - updates to 20040515.
  - fixed wrong manpage for kill(1). we prefers util-linux thing rather than procps.


author: Akira TAGOH <tagoh@redhat.com> 20030415-3
changelog:
  - include README and translation_list files. (#90543)
  - use sh-utils's su.1 instead of shadow's one (#90552)
  - fix summary and description. (#90548)


author: Kalev Lember <kalevlember@gmail.com> - 3.0-1
changelog:
  - Update to 3.0
  - Use license macro for the LICENCE file
  - Use desktop-file-validate instead of desktop-file-install


author: Hans de Goede <hdegoede@redhat.com> - 2.0-8
changelog:
  - Add a patch fixing various crashes due to referencing freed memory (#1133339)
  - Cherry-pick some other fixes from upstream git


author: Julian Sikorski <belegdol@fedoraproject.org> - 2.0-1
changelog:
  - Updated to 2.0
  - Made the make calls verbose
  - Dropped explicit pulsaudio-libs dependency
  - Updated the version in the pulseaudio-libs-devel BR


author: Julian Sikorski <belegdol@fedoraproject.org> - 1.0-1
changelog:
  - Updated to 1.0
  - Switched to .xz sources
  - Dropped obsolete Group, Buildroot, %clean and %defattr
  - Updated Source0 and URL
  - Switched to gtk3


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.3-6
changelog:
  - resolves: #948695
    fixed double free
  - fixed certain man pages to match options with --help and --usage


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.3-1
changelog:
  - resolves: #858577
    updated to 2.6.3
  - cleaned .spec file
  - resolves: #855632
    fixed SIGABRT crash
  - adds support for man-pages-overrides


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.2-1
changelog:
  - resolves: #833312
    update to 2.6.2
  - resolves: #657409
    fixed warning when invoking col by the mandb program in cron
  - resolves: #829935
    enabled support for man pages compressed with lzip
  - resolves: #821778
    added virtual provides for bundled gnulib library
  - resolves: #824825
    apropos returns correct exit code for invalid man page


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.1-2
changelog:
  - resolves: #677669
    added support for wildcards in path
  - resolves: #693458
    fixed error with .so links


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.1-1
changelog:
  - resolves: #790771
    update to 2.6.1
  - resolves: #806086
    removed hard-dependency on cron, update man db after install or update


author: Peter Schiffer <pschiffe@redhat.com> - 2.6.0.2-3
changelog:
  - resolves: #702904
    fixed double free or corruption issue
  - resolves: #739207
    require groff-base instead of groff
  - rebuilt for gdbm-1.9.1-1


author: Parag <pnemade AT redhat.com> - 2.000-1
changelog:
  - Update to next upstream release
  - Resolves: rh#335851-[ne_NP] Add license text file to madan-fonts package
  - Resolves: rh#520047-[ne_NP] Need fontconfig rules for Madan font


author: Dan Williams <dcbw@redhat.com> - 1.1-14
changelog:
  - Fix portmap position calculation (rh #677526) (rh #677725)
  - Make port allocation threadsafe (rh #677527) (rh #677724)


author: Jason Vas Dias <jvdias@redhat.com> 1.0-0.9.pre5
changelog:
  - Allow build to succeed with new gcc / glibc-kernheaders
    (compile failed on __u64 redefinition on x86_64).
  - Add a static /usr/lib64/libnl.a library to libnl-devel for
    programs that might need to do a static link to libnl.
    Added after consultation with Christopher Aillon.


author: Steve Dickson <steved@redhat.com> 0.2.4-0.16
changelog:
  - getnetconfig.c: fix a BAD_FREE (CWE-763) (bz 1631609)
  - Fix EOF detection on non-blocking socket (bz 1331554)


author: Steve Dickson <steved@redhat.com> 0.2.4-0.7
changelog:
  - Backported upstream debugging (bz 1273159)
  - Fixed memory leak in svc_vc_create (bz 1276685)
  - Fixed memory leaks in server-side GSS authenticator (bz 1282488)


author: Karsten Hopp <karsten@redhat.com> 0.2.1-7.1
changelog:
  - replace Requires(devel) with a simple Requires as the new rpm
    aborts otherwise with "Bad Requireflags: qualifiers: Requires(devel)"


author: Steve Dickson <steved@redhat.com> 0.2.0-3
changelog:
  - Updated to latest upstream tag: 0-2-1-rc3
      Fixed the --disable-gss options
      Fixed a number of warnings
      Change how architectures are define in xdr_float.c


author: Steve Dickson <steved@redhat.com> 0.2.0-2
changelog:
  - Updated to latest upstream tag: 0-2-1-rc2
      rpcb_clnt: RPC_PROGNOTREGISTERED is a permanent error
      clnt_dg: Fix infinite loop when datagram call times ou
      Updated .gitignore file
      Replace the hard coded path name with the top_srcdir macrc
      Added 'doc' to the SUBDIRS list so make install work correctly.


author: Steve Dickson <steved@redhat.com> 0.1.10-6
changelog:
  - libtirpc: set r_netid and r_owner in __rpcb_findaddr_timed
  - libtirpc: be sure to free cl_netid and cl_tp
  - libtirpc: must free saved wire verifier when destroying context


author: Steve Dickson <steved@redhat.com> 0.1.10-3
changelog:
  - backwards compatibility: fix order of fields in TI-RPC's 
    svc_req (bz 481388)
  - Removed a number warnings.


author: Steve Dickson <steved@redhat.com> 0.1.9-5
changelog:
  - Fix for taddr2addr conversion bug of local addresses
  - Fixed some of warnings in: src/auth_time.c, src/clnt_dg.c and
    src/clnt_raw.c
  - Added some #ifdef NOTUSED around some code in src/rpbc_clnt.c
    that was not being used...


author: Steve Dickson <steved@redhat.com> 0.1.7-11
changelog:
  - Made tcp6/udp6 network ids no longer visible in the netconfig
    file since the ipv6 code is not fully baked yet in rpcbind. (bz 249121)


author: <steved@redhat.com> 0.1.7-9
changelog:
  - Fixed mutex lock problem in clnt_raw_create()
  - Ignore the return value of snprintf() and use strlen() instead
    to bump the pointer in clnt_sperror()
  - A couple ntohs() were needed in bindresvport_sa()
  - Added IP_RECVERR processing with to clnt_dg_call() so
    application will see errors instead of timing out
  - Make sure remote address (xp_rtaddr) is populated
    with the correct type of address.
  - Change the order of network ids in /etc/netconfg
    putting ipv4 ids before ipv6.
  - Bumped up Release from 8 to 9.


author: <steved@redhat.com> 0.1.7-6
changelog:
  - Fixed potential buffer overflow in xdr_strings
  - Added a optimization to bindresvport that allows more
    ports to be tried.


author: Steve Dickson <steved@redhat.com> 0.1.7-2
changelog:
  - Uncommented tcp6 and udp6 in the default /etc/netconfig file.
  - Added hooks to used the libgssapi library.


author: Rex Dieter <rdieter@fedoraproject.org> 1.1.0-0.10.20110714git
changelog:
  - fix gnome-screensaver detection bogosity (#702540,#736159)
  - xdg-open: x-www-browser: command not found (#755553)
  - drop htmlview hackage


author: Rex Dieter <rdieter@fedoraproject.org> 1.1.0-0.2.20110201
changelog:
  - 20110201 snapshot
  - add gnome3 support, make default browser work again for xdg-settings (#654746)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.0.2-19.20100709
changelog:
  - xdg-open man page needs updating to include FILE and SEE ALSO (#603841)
  - xdg-open should call mimeopen with -L option (#430072)
  - xdg-desktop-icon :  use localized desktop folder name (fdo#19011)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.0.2-16.20091217cvs
changelog:
  - xdg-mime: line 531: kde-config: command not found (#545702)
  - xdg-email calls gconftool which doesn't exist (#548529)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.0.2-14.20091016cvs
changelog:
  - prefer gvfs-open over gnome-open (#529287)
  - DE=gnome, if org.gnome.SessionManager exists on dbus (#529287)


author: Elliott Baron <ebaron@redhat.com> - 1.7R5-1
changelog:
  - Update to 1.7R5.
  - Add rhino-backout-686806.patch for backward compatibility.
  - Resolves: rhbz#1350331


author: Ville Skyttä <ville.skytta@iki.fi> - 1.7R3-3
changelog:
  - Crosslink javadocs with Java's.
  - Drop versioned jars and javadoc dir.
  - Exclude patch backup files from -examples.


author: Matěj Cepl <mcepl@redhat.com> - 1.7R3-1
changelog:
  - Fix numbering of the package (this is not a prerelease)
  - Remove unnecessary macros
  - Increase happines of rpmlint (better Group tags)


author: Lillian Angel <langel@redhat.com> - 0:1.7-0.3.r2pre.1.1
changelog:
  - Updated rhino-build.patch
  - License for treetable has been fixed. Re-included this code, and removed patch.
  - Resolves: rhbz#457336


author: Matt Wringe <mwringe@redhat.com> 0:1.6-0.1.r5.1jpp.2
changelog:
  - Remove script from build as the debugging tool is disabled due to it
    containing proprietary code from Sun.


author: Deepak Bhole <dbhole@redhat.com> 0:1.6-0.1.r5.1jpp.1
changelog:
  - Upgrade to 1.6r5
  - Change release per Fedora guidelines
  - Disable dependency on xmlbeans (optional component, not in Fedora yet)
  - Disable building of debugger tool, as it needs confidential code from Sun
  - Remove post/postuns for javadoc and add the two dirs as %doc


author: David Walluck <david@jpackage.org> 0:1.6-0.r1.1jpp
changelog:
  - 1_6R1
  - add demo subpackage containing example code
  - add jpp release info to implementation version
  - add script to launch js shell
  - build E4X implementation (Requires: xmlbeans)
  - remove `Class-Path' from manifest


author: 2002 Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.5R2-6jpp
changelog:
  - backward compatibility js.jar symlink
  - used original swing exemples archive
  - fixed javadoc empty package-list file
  - no dependencies for manual and javadoc packages


author: Wes Hardaker <wjhns174@hardakers.net> - 0.24-3
changelog:
  - BuildRequire perl(Test) perl(ExtUtils::MakeMaker) perl(Crypt::OpenSSL::Bignum)
  - Fixed source code URL


author: Paul Moore <pmoore@redhat.com> - 2.2.1-1
changelog:
  - Removed '--disable-static' from the build to ensure that scmp_sys_resolver
    is self contained and resolve RPATH issues


author: Paul Moore <pmoore@redhat.com> - 1.0.0-0
changelog:
  - New upstream version
  - Remove verbose build patch as it is no longer needed
  - Enable _smp_mflags during build stage


author: Havoc Pennington <hp@redhat.com>
changelog:
  - require gconf 1.2.0, rebuild with that
  - use desktop-file-install for .desktop file
  - include .desktop file and pixmaps in file list


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-12
changelog:
  - Resolves: #1183909 - programs using "PreeditType: OverTheSpot" is stalled
  - Resolves: #1191825 - gtk2's immodules.cache won't be updated in some cases


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-6
changelog:
  - Resolves: #1051389, #1051391, #1051408, #1051397, #1051398, #1051415,
                Updated ibus-HEAD.patch for upstream
  - Resolves: #1050813
    Deleted notify-python in Requires


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-1
changelog:
  - Bumped to 1.5.3
  - Deleted ibus-xx-g-s-disable-preedit.patch as EOL.
  - Deleted ibus-gjs as EOL.
  - Removed imsettings-gnome, im-chooser, libgnomekbd dependencies.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.2-4
changelog:
  - Updated ibus-HEAD.patch for upstream.
  - Added ibus-xx-1.5.2.patch until 1.5.3 will be released.
  - Added ibus-xx-ctrl-space.patch for back compatible triggers.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.2-1
changelog:
  - Bumped to 1.5.2
  - Created noarch packages for python files due to .pyc and .pyo.
  - Added man pages.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20121109-1
changelog:
  - Bumped to 1.4.99.20121109
  - Removed im-chooser, imsettings-gnome, gnome-icon-theme-symbolic
    dependencies in f18 because ibus gnome integration is done.
    Use ibus-keyboard instead of input-keyboard-symbolic.
  - Disabled ibus-gjs build because of ibus gnome integration.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120822-2
changelog:
  - Updated ibus-530711-preload-sys.patch
  - Updated ibus-541492-xkb.patch
  - Updated ibus-xx-no-use.diff
    Fixed Bug 854161 - not able to add keymap with ibus-setup


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120822-1
changelog:
  - Bumped to 1.4.99.20120822
  - Bumped to ibus-gjs 3.4.1.20120815
    Fixed Bug 845956 - ibus backward trigger key is not customized
    Fixed Bug 844580 - ibus-dconf does not load the system gvdb
  - Separated ibus-810211-no-switch-by-no-trigger.patch from ibus-HEAD.patch


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120428-2
changelog:
  - Updated ibus-HEAD.patch
  - Updated ibus-541492-xkb.patch
  - Updated ibus-xx-branding-switcher-ui.patch
    Fixed Bug 810211 - Cancel Control + space pressing Control key.
  - Updated ibus-xx-no-use.diff
    Enabled to customize trigger keys with non-modifier trigger keys.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120428-1
changelog:
  - Bumped to 1.4.99.20120428
    Fixed Bug 799571 - no IME list at the session login.
    Fixed Bug 810415 - ibus does not handle Ctrl+space with BUTTON_PRESS.
  - Bumped to ibus-gjs 3.4.1.20120428
    Fixed Bug 802052 - no modifiers trigger keys.
    Fixed Bug 803244 - IME switch Ctrl+space not working on shell text entry.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120317-1
changelog:
  - Bumped to 1.4.99.20120317
    Fixed Bug 718668 - focus move is slow with ibus-gnome3
    Fixed Bug 749497 - Enhance IME descriptions in status icon active menu
  - Bumped to ibus-gjs 3.3.90.20120317
  - Added ibus-xx-no-use.diff
    Fixed Bug 803260 - Disable non-global input method mode
  - Updated ibus-HEAD.patch
    Fixed Bug 803250 - ibus lookup window font customization
    Fixed Bug 803177 - language id on ibus-ui-gtk3 switcher
  - Update ibus-530711-preload-sys.patch
    Fixed Bug 797023 - port preload engines


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120303-3
changelog:
  - Bumped to ibus-gjs 3.3.90.20120308 to work with gnome-shell 3.3.90
  - Fixed Bug 786906 - Added ifnarch ppc ppc64 s390 s390x
  - Updated ibus-HEAD.patch
    Fixed Bug 800897 - After doing "ctrl+space", ibus tray icon freezes


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120203-3
changelog:
  - Fixed ibus-setup on C locale
  - Fixed to show no registered engines from g-c-c.
  - Enabled Alt_R keybinding on ko locales for ibus gtk only.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120203-1
changelog:
  - Updated to 1.4.99.20120203
  - Removed ibus-xx-bridge-hotkey.patch
  - Updated ibus-541492-xkb.patch to use libgnomekbd.
  - Updated ibus-xx-setup-frequent-lang.patch for 1.4.99.20120203


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-17
changelog:
  - Added ibus-771115-property-compatible.patch for f16
    Fixed Bug 771115 - IBusProperty back compatibility.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-16
changelog:
  - Enhanced ibus-gnome3 shell lookup window.
  - Updated ibus-HEAD.patch from upstream
    Fixed Bug 769135 - ibus-x11 SEGV in _process_key_event_done.
  - Updated ibus-541492-xkb.patch
    Fixed Bug 757889 - ibus-setup SEGV without active engine.
    Fixed Bug 760213 - ibus-setup saves XKB variants correctly.
    Fixed Bug 769133 - ibus-engine-xkb returns FALSE for ASCII typings.
  - Updated ibus-xx-bridge-hotkey.patch for an enhancement.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-14
changelog:
  - Enabled dconf.
  - Updated ibus-HEAD.patch
    Fixed Bug 618229 - engine setup buton on ibus-setup.
  - Removed ibus-711632-fedora-fallback-icon.patch as upstreamed.
  - Updated ibus-xx-bridge-hotkey.patch
    Removed Enable/Disable buttons on ibus-setup


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-11
changelog:
  - Updated ibus-541492-xkb.patch
    Fixed Bug 750484 - support reloading Xmodmap
  - Updated ibus-HEAD.patch
    Fixed Bug 753781 - ibus-x11 needs async for hangul ibus_commit_text.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-10
changelog:
  - Updated ibus-xx-bridge-hotkey.patch for f16
    Fixed no XKB languages from layout only. e.g. in(eng).
  - Updated ibus-541492-xkb.patch
    Fixed not to show 'eng' on GUI for in(eng).


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-9
changelog:
  - Updated ibus-HEAD.patch
    Fixed prev/next keys without global engine.
  - Updated ibus-xx-bridge-hotkey.patch for f16
    Fixed Bug 747902 - mouse and ctrl+space not working
    Fixed Bug 749770 - IME hotkey after Control + Space
  - Updated ibus-711632-fedora-fallback-icon.patch
    Fixed Bug 717831 - use old icon for desktops other than gnome


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-2
changelog:
  - Updated to 1.4.0
  - Updated ibus-gjs 3.0.2.20110928 for f15.
  - Updated ibus-gjs 3.2.0.20110928 for f16. (#740588)
  - Updated ibus-530711-preload-sys.patch
    Fixed not to show duplicated engine names in setup treeview (#740447)
  - Updated bus-gjs-xx-gnome-shell-3.1.4-build-failure.patch for f16.
  - Updated ibus-xx-bridge-hotkey.patch
    Fixed a XKB configuration without the input focus for f16 (#739165)
    Fixed not to show null strings in case of no variants (#738130)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110817-4
changelog:
  - Updated ibus-gjs 3.1.91.20110908 and 3.0.2.20110908 for gnome-shell.
    Fixed preedit active segments on gnome-shell and X11 apps.
  - Added ibus-xx-g-s-disable-preedit.patch
    Disabled preedit on gnome-shell for a workaround.
  - Updated ibus.spec
    Fixed Bug 735879 pre/postun scripts


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110817-3
changelog:
  - Fixed Bug 700472 Use a symbol icon instead of an image icon.
  - Updated ibus-HEAD.patch for upstream.
  - Removed ibus-435880-surrounding-text.patch as upstream.
  - Added ibus-711632-fedora-fallback-icon.patch
    Fixed SEGV with no icon in oxygen-gtk icon theme.
  - Added ibus-xx-bridge-hotkey.patch
    Triaged Bug 707370 SetEngine timeout
    Fixed Bug 731610 Keep IM state when text input focus changes
  - Added transitional ibus-gnome3 package.
    Fixed Bug 718110 Use a shell icon instead of pygtk2 icon.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110419-1
changelog:
  - Updated to 1.3.99.20110419
  - Added ibus-HEAD.patch
    Fixed Bug 697471 - ibus-gconf zombie when restart ibus from ibus panel.
  - Updated ibus-541492-xkb.patch
    Fixed Bug 701202 - us(dvorak) does not show up in list
    Updated ibus-1.0.pc for ibus-xkb
    Showed XKB variant descriptions only without layout descriptions.
  - Updated ibus-xx-setup-frequent-lang.patch
    Updated UI strings


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110408-1
changelog:
  - Updated to 1.3.99.20110408
    Fixed Bug 683484 - Timed out SetEngine when select an engine from panel.
    Fixed Bug 657165 - IBus for gnome-shell for Fedora 15.
  - Upstreamed ibus-657165-panel-libs.patch
  - Removed ibus-675503-gnome-shell-workaround.patch
  - Added ibus-xx-setup-frequent-lang.patch
  - Updated ibus-541492-xkb.patch
    Fixed Bug 696481 - no the variant maps without language codes
  - Added dependency of imsettings-gnome.
    Fixed Bug 696510 - need a dependency in ibus-gtk3 for imsettings-gnome


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110228-1
changelog:
  - Updated to 1.3.99.20110228
  - Integrated the part of gjs in Bug 657165 ibus for gnome-shell.
    Added ibus-657165-panel-libs.patch
    Added gnome-shell-ibus-plugins-20110304.tar.bz2
  - Fixed Bug 675503 - a regression in sync mode
    Added ibus-675503-gnome-shell-workaround.patch until gnome-shell is updated.
  - Fixed Bug 677856 - left ibus snooper when im client is switched.
  - Fixed Bug 673047 - abrt ibus_xkb_get_current_layout for non-XKB system
    Updated ibus-541492-xkb.patch


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110117-1
changelog:
  - Updated to 1.3.99.20110117
  - Fixed Bug 666427 - ibus requires dbus-x11
  - Fixed Bug 670137 - QT_IM_MODULE=xim in ibus.conf without ibus-qt


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20101202-1
changelog:
  - Updated to 1.3.99.20101202
  - Added ibus-530711-preload-sys.patch
    Fixed Bug 530711 - Reload preloaded engines by login


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.8-1
changelog:
  - Updated to 1.3.8
  - Added ibus-541492-xkb.patch
    Fixes Bug 541492 - ibus needs to support some xkb layout switching
  - Added ibus-435880-surrounding-text.patch
    Fixes Bug 435880 - ibus-gtk requires surrounding-text support
  - Added ibus-xx-workaround-gtk3.patch
    Workaround for f14 http://koji.fedoraproject.org/koji/taskinfo?taskID=2516604


author: Peng Huang <phuang@redhat.com> - 1.3.0-3
changelog:
  - Update ibus-HEAD.patch
  - Fix bug - some time panel does not show candidates.
  - Update some po files


author: Peng Huang <phuang@redhat.com> - 1.2.0.20091225-1
changelog:
  - Update to 1.2.0.20091225
  - Fix bug 513895 - new IME does not show up in ibus-setup
  - Fix bug 531857 - applet order should correspond with preferences order
  - Fix bug 532856 - should not list already added input-methods in Add selector


author: Peng Huang <phuang@redhat.com> - 1.2.0.20091204-1
changelog:
  - Update to 1.2.0.20091204
  - Fix Bug 529920 - language panel pops up on the wrong monitor
  - Fix Bug 541197 - Ibus crash


author: Peng Huang <phuang@redhat.com> - 1.2.0.20091124-1
changelog:
  - Update to 1.2.0.20091124
  - Update some translations.
  - Fix bug 538147 - [abrt] crash detected in firefox-3.5.5-1.fc12


author: Peng Huang <phuang@redhat.com> - 1.2.0.20090915-1
changelog:
  - Update to 1.2.0.20090915
  - Fix bug 521591 - check if the icon filename is a real file before trying to open it
  - Fix bug 522310 - Memory leak on show/hide
  - Fix bug 509518 - ibus-anthy should only override to jp layout for kana input


author: Peng Huang <phuang@redhat.com> - 1.2.0.20090828-1
changelog:
  - Update to 1.2.0.20090828
  - Change the icon on systray.
  - Fix segment fault in ibus_hotkey_profile_destroy
  - Fix some memory leaks.


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090612-1
changelog:
  - Update to 1.1.0.20090612
  - Fix bug 504942 - PageUp and PageDown do not work in candidate list
  - Fix bug 491040 - Implememnt mouse selection in candidate list


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090609-1
changelog:
  - Update to Update to 1.1.0.20090609
  - Fix bug 502414 - Implemented on-screen help facility
  - Fix bug 502561 - iBus should show keymap name on iBus panel
  - Fix bug 498043 - ibus Alt-grave trigger conflicts with openoffice.org
  - Implemented API for setting labels for candidates in LookupTable


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-5
changelog:
  - Update ibus-HEAD.patch.
  - Show the default input method with bold text
  - Add information text below input methods list


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-4
changelog:
  - Update ibus-HEAD.patch.
  - Fix bug 501211 - ibus-setup window should be raised if running or just stay on top/grab focus
  - Fix bug 501640 - ibus should adds new IMEs at end of engine list not beginning
  - Fix bug 501644 - [IBus] focus-out and disabled IME should hide language panel


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-2
changelog:
  - Remove requires notification-daemon
  - Fix bug 500588 - Hardcoded requirement for notification-daemon


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-1
changelog:
  - Update to 1.1.0.20090508
  - Fix bug 499533 - [Indic] ibus should allow input in KDE using all supported Indic locales
  - Fix bug 498352 - hotkey config table should list keys in same order as on main setup page
  - Fix bug 497707 - ibus French translation update


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090423-2
changelog:
  - Fix bug 498141 - new ibus install needs gtk immodules
  - Separate ibus document from ibus-devel to ibus-devel-docs


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090423-1
changelog:
  - Update to ibus-1.1.0.20090423.
  - Fix bug 497265 - [mai_IN] Maithili language name is not correct.
  - Fix bug 497279 - IBus does not works with evolution correctly.
  - Enhance authentication both in daemon & clients


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090417-1
changelog:
  - Update to ibus-1.1.0.20090417.
  - Fix bug 496199 -  cannot remove Ctrl+Space hotkey with ibus-setup


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090413-3
changelog:
  - Update ibus-HEAD.patch.
  - Fix bug 495431 -  ibus Release modifier doesn't work with Alt
  - Fix bug 494445 -  ibus-hangul missing Hangul Han/En mode
    (and Alt_R+release hotkey)
  - Update te.po


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090413-2
changelog:
  - Update ibus-HEAD.patch.
  - Change the mode of /tmp/ibus-$USER to 0700 to improve security
  - Change the mode of /tmp/ibus-$USER/socket-address to 0600 to improve security
  - Update as.po


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090407-3
changelog:
  - Update the tarball.
  - Fix bug 494511 - ibus-gtk makes gnome-terminal abort 
    when a key is pressed


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090407-1
changelog:
  - Update to ibus-1.1.0.20090407.
  - Fix bug 491042 - ibus default trigger hotkeys
  - Fix bug 492929 - ibus-hangul can cause gtk app to lockup
  - Fix bug 493701 -  (ibus) imsettings disconnect/reconnect kills gtk app
  - Fix bug 493687 -  ibus-hangul should default to vertical candidate selection
  - Fix bug 493449 -  ibus broke Alt-F2 command auto-completion


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090331-1
changelog:
  - Update to ibus-1.1.0.20090331.
  - Fix bug 492956 - screws up keyboard input in firefox
  - Fix bug 490143 - ibus issue with gnome-keyring


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090311-3
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree
  - Fix bug 491999 - up/down arrow keys broken in xchat


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090311-2
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree.
  - Fix bug 490009 - Deleting Next Engine shortcuts doesn't work
  - Fix bug 490381 - Change "Next/Previous engine" labels


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090311-1
changelog:
  - Update to ibus-1.1.0.20090311.
  - Update setup ui follow GNOME Human Interface Guidelines 2.2 (#489497).


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090225-1
changelog:
  - Update to ibus-1.1.0.20090225.
  - Fix problems in %post and %postun scripts.
  - Hide ibus & ibus preferences menu items.


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090211-10
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree.
  - Put 'Select an input method' in engine select combobox (#485861).


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090211-6
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree.
  - The new patch fixes ibus-x11 segfault (#485661).


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090211-1
changelog:
  - Add --xim argument in xinput-ibus
  - Add Obsoletes:  ibus-qt <= 1.1.0
  - Move libibus.so.* to ibus-libs to make ibus multilib.
  - Update to 1.1.0.20090211.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-3
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "Requires: xorg-x11-proto-devel" to devel for dmx.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libdmx to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Rex Dieter <rdieter@fedoraproject.org> - 0.2-4.20160531git
changelog:
  - arch'd adwaita-qt5 runtime dep
  - use system %_qt5_version macro, instead of by-hand one here
  - BR: qt5-qtbase-private-devel (helps track hard qt5-qtbase runtime dep)


author: Steven Pritchard <steve@kspei.com> 0.29-1
changelog:
  - Update to 0.29.
  - Use fixperms macro instead of our own chmod incantation.
  - Reformat to match cpanspec output.


author: EL Errata <el-errata_ww@oracle.com> - 20-28.0.1
changelog:
  - weak-modules: add patch for [Orabug: 26672773]
  - add PKCS#7 signature support [Orabug: 27645962]
  - Reviewed-by: Alexey Petrenko <alexey.petrenko@oracle.com>


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-28
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1774925


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-26
changelog:
  - weak-modules: handle independent modules in one run
  - weak-modules: use asterisk for kernel version in sandbox
    Resolves: rhbz#1695547


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-23
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1619889.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-20
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1510058


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-18
changelog:
  - depmod: external directories support.
    Resolves: rhbz#1361857
  - BuildRequires automake autoconf libtool.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-17
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1468305
  - weak-modules: implement dry run by symlink restoration.
    Resolves: rhbz#1477073


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-12
changelog:
  - weak-modules: fix coverity introduced by latest changes
  - weak-modules: fix "permission denied" on some upgrades.
    Resolves: rhbz#1416566


author: Tony Camuso <tcamuso@redhat.com> - 20-10
changelog:
  - Rename patches so they are not specific to the build. This was
    causing problems with z-stream builds.
    Resolves: rhbz#1416498


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-10
changelog:
  - weak-modules: deprecate --delete-modules switch.
  - weak-modules: implement some pathes configuration from cmdline.
  - weak-modules: redesign to reuse depmod -aeE functionality
    (with some preparation changes).
    This is an updated version of the script which doesn't support
    multiple installation of the same out-of-tree module (stored in the
    'extra' subdirectory). But it more correctly checks dependencies
    between the modules.
    Resolves: rhbz#1367942


author: Tony Camuso <tcamuso@redhat.com> - 20-9
changelog:
  - Must be bumped to 20-9 due to changes and version bumps in the
    7.2-z stream.
    Resolves: rhbz#1320204


author: David Shea <dshea@redhat.com> - 20-6
changelog:
  - Accept '.' as part of a symbol exported by the kernel
    Resolves: rhbz#1283486
  - Check the addon modules of the new kernel for exported symbols
    Resolves: rhbz#1296465


author: David Shea <dshea@redhat.com> - 20-5
changelog:
  - Check for changes in non-module files that affect that initramfs
    Resolves: rhbz#1108166
  - Use dracut to skip early cpio archives in the initramfs
    Resolves: rhbz#1210449


author: Kay Sievers <kay@redhat.com> - 7-1
changelog:
  - update to version 7
    - fix issue with --show-depends, where built-in
      modules of the running kernel fail to include
      loadable modules of the kernel specified


author: Harald Hoyer <harald@redhat.com> 5-6
changelog:
  - add upstream patch to fix "modprobe --ignore-install --show-depends"
    otherwise dracut misses a lot of modules, which are already loaded


author: Kay Sievers <kay@redhat.com> - 5-3
changelog:
  - temporarily add fake-provides to be able to bootstrap
    the new udev which pulls the old udev into the buildroot


author: Kay Sievers <kay@redhat.com> - 5-1
changelog:
  - Update to version 5
  - replace the module-init-tools package and provide all tools
    as compatibility symlinks


author: Jon Masters <jcm@jonmasters.org> - 3-1
changelog:
  - Update to latest upstream (adds new depmod replacement utility)
  - For the moment, use the "kmod" utility to test the various functions


author: Jon Masters <jcm@jonmasters.org> - 2-3
changelog:
  - Update package incorporating fixes from initial review feedback
  - Cleaups to SPEC, rpath, documentation, library and binary locations


author: Wim Taymans <wtaymans@redhat.com> - 1.4.5-6
changelog:
  - Fix h264 and h265 buffer size checks
  - Fix mpegts pat parsing and add more size checks
  Resolves: rhbz#1400898


author: Hans de Goede <hdegoede@}redhat.com> - 1.2.3-3
changelog:
  - Put the fluidsynth plugin in its own subpackage and make it require
    soundfont2-default (rhbz#1078925)


author: Brian Pepple <bpepple@fedoraproject.org> - 0.11.93-2
changelog:
  - Fix permission on tarball clean-up script.
  - Re-enable soundtouch-devel.
  - Add COPYING.LIB to package.
  - Use %global instead of %define.


author: EL Errata <el-errata_ww@oracle.com> - 0.6.3-8.0.1
changelog:
  - Remove the service definition file for Sattelite and remove references in HA serivce file.
    [Orabug: 30152337]


author: Eric Garver <egarver@redhat.com> - 0.6.3-3
changelog:
  - backport recent upstream stable fixes
  - backport fix --remove-rules deleting all direct rules
  - backport fix unable to delete rich rule forward-port
  - backport fix forward-port for external zone hijacking internal zone
  - backport fix testsuite iptables locking


author: Eric Garver <egarver@redhat.com> - 0.6.3-2
changelog:
  - backport recent upstream stable fixes
  - backport fix to enable IP forwarding only if toaddr specified


author: Eric Garver <egarver@redhat.com> - 0.6.3-1
changelog:
  - rebase package to v0.6.3, include recent stable fixes
  - use QT4 patch for firewall-applet
  - remove cockpit service definition, cockpit package still ships their own
  - remove testsuite force of LC_ALL=C.UTF-8. RHEL-7 doesn't have C.UTF-8
  - remove nftables support


author: Phil Sutter - 0.4.4.4-11
changelog:
  - core: Log unsupported ICMP types as informational only (RHBZ#1479951)
  - doc: firewall-cmd: Document --query-* options return codes (RHBZ#1372716)
  - doc: firewall-cmd: Document quirk in --reload option (RHBZ#1452137)
  - firewall-cmd: Use colors only if output is a TTY (RHBZ#1368544)
  - firewall-offline-cmd: Don't require root for help output (RHBZ#1445214)


author: Eric Garver <egarver@redhat.com> - 0.4.4.4-7
changelog:
  - firewall.functions: New function get_nf_nat_helpers (RHBZ#1452681)
  - firewall.core.fw: Get NAT helpers and store them internally. (RHBZ#1452681)
  - firewall.core.fw_zone: Load NAT helpers with conntrack helpers (RHBZ#1452681)
  - firewalld.dbus: Add missing properties nf_conntrach_helper_setting and
    nf_conntrack_helpers (RHBZ#1452681)
  - D-Bus interfaces: Fix GetAll for interfaces without properties (RHBZ#1452017)
  - firewall.server.firewalld: New property for NAT helpers supported by the
    kernel (RHBZ#1452681)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.4-4
changelog:
  - Add services for oVirt: ovirt-imageio, ovirt-vmconsole, ovirt-storageconsole,
    ctbc and nrpe (RHBZ#1449158)
  - Fix policy issue with the choice policies by using the .policy.choice
    extension (RHBZ#1449754)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.4-3
changelog:
  - Fix --{set,get}-{short,description} for zones (RHBZ#1416325)
  - Man pages: Add sctp and dccp for ports, ... (RHBZ#1429808)
  - Add support for new wait option in restore commands (RHBZ#1446162)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.4-2
changelog:
  - Add support for sctp and dccp in ports, source-ports and forward-ports
    (RHBZ#1429808)
  - Fix firewall-offline-cmd --remove-service-from-zone= option (RHBZ#1438127)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.4-1
changelog:
  - Rebase to firewalld-0.4.4.4
    http://www.firewalld.org/2017/03/firewalld-0-4-4-4-release
  - Drop references to fedorahosted.org from spec file and Makefile.am, use
    archive from github
  - Fix inconsistent ordering of rules in INPUT_ZONE_SOURCE (issue#166)
    (RHBZ#1421222)
  - Fix ipset overloading from /etc/firewalld/ipsets (RHBZ#1423941)
  - Fix permanent rich rules using icmp-type elements (RHBZ#1434763)
  - firewall-config: Deactivate edit, remove, .. buttons if there are no items
  - Check if ICMP types are supported by kernel before trying to use them
    (RHBZ#1401978)
  - firewall-config: Show invalid ipset type in the ipset configuration dialog
    in a special label (RHBZ#1419058)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.3-1
changelog:
  - Rebase to firewalld-0.4.4.3 (RHBZ#1414584)
  - Support disabled automatic helper assignment in firewalld (RHBZ#1006225)
  - Fix masquerade rules to be created always the same (RHBZ#1374001)
  - Properly handle quoted ifcfg file values (RHBZ#1395348)
  - Fix extension of ifcfg backup files (RHBZ#1400478)
  - Complete icmp types list (RHBZ#1401978)
  - Fix LOG rule placement for LogDenied (RHBZ#1402932)
  - Show error messages from NM and do not trace back (RHBZ#1405562)
  - Support icmp-type usage in rich rules (RHBZ#1409544)
  - New service file for freeipa-trust (RHBZ#1411650)
  - Fix --{set,get}-{short,description} for ipset in commands (RHBZ#1416325)
  - Speed up large ipset file loading and import (RHBZ#1416817)
  - Improve support for ipsets in firewalld (RHBZ#1419058)
  - ALREADY_ errors should result in warnings and zero exit code (RHBZ#1420457)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-7
changelog:
  - Tolerate ipv6_rpfilter fail (RHBZ#1285769)
  - Fix set_rules to copy the rule before extracting the table (RHBZ#1373260)
  - Translation update (RHBZ#1273296)
  - Conflict with NetworkManager < 1:1.4.0-3.el7 (RHBZ#1366288)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-6
changelog:
  - Do not use exit code 254 for {ALREADY,NOT}_ENABLED sequences (RHBZ#1366654)
  - Fail with NOT_AUTHORIZED if authorization fails (RHBZ#1368549)
  - firewall-cmd: Fix get and set description for permanent zones (RHBZ#1368949)
  - Fix loading of service helpers in active zones (RHBZ#1371116)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-5
changelog:
  - Print errors and warnings to stderr additional patch (RHBZ#1360894)
  - Fixed trace back in firewallctl (RHBZ#1367155)
  - Fix client crash if systembus can not be aquired (RHBZ#1367038)
  - Make ALREADY_ENABLED a warning (RHBZ#1366654)
  - Added conflict to old squid package providing the squid.service file
    (RHBZ#1366308)
  - Fixed firewall-cmd help typo (RHBZ#1367171)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-4
changelog:
  - Fixed firewall-config gettext usage (RHBZ#1361612)
  - Fixed ifcfg file reader and writer (RHBZ#1362171)
  - Fixed loading ipset entries from file in commands (RHBZ#1365198)
  - Added conflicts to old main package to sub packages (RHBZ#1361669)
  - Do not show settings of zones etc. without authentication (RHBZ#1357098)
  - Fixed CVE-2016-5410 (RHBZ#1359296)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-3
changelog:
  - Fix test suite for command change (RHBZ#1360871)
  - Fix test suite with stderr usage (RHBZ#1360894)
  - Rebuild for wrong docdir without version (RHBZ#1057327#c7)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-2
changelog:
  - Updated conflict for selinux-policy (RHBZ#1304723)
  - Fixed exit codes in command line clients (RHBZ#1357050)
  - Fixed traceback in firewall-cmd without args (RHBZ#1357063)
  - Fixed source docs in man pages and help output (RHBZ#1357888)
  - Fixed rebuild of changed man pages (RHBZ#1360362)
  - Use stderr for errors and warnings in command line tools (RHBZ#1360894)
  - Fixed lockdown not denying invalid commands (RHBZ#1360871)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-1
changelog:
  - Rebase to 0.4.3.2
  - Fix regression with unavailable optional commands
  - All missing backend messages should be warnings
  - Individual calls for missing restore commands
  - Only one authenticate call for add and remove options and also sequences
  - RH-Satellite-6 service now upstream
  - Conflict for selinux-policy needed to be updated to newer release
    (RHBZ#1304723)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.1-1
changelog:
  - Rebase to 0.4.3.1
  - firewall.command: Fix python3 DBusException message not interable error
  - src/Makefile.am: Fix path in firewall-[offline-]cmd_test.sh while installing
  - firewallctl: Do not trace back on list command without further arguments
  - firewallctl (man1): Added remaining sections zone, service, ..
  - firewallctl: Added runtime-to-permanent, interface and source parser,
    IndividualCalls setting
  - firewall.server.config: Allow to set IndividualCalls property in config
    interface
  - Fix missing icmp rules for some zones
  - runProg: Fix issue with running programs
  - firewall-offline-cmd: Fix issues with missing system-config-firewall
  - firewall.core.ipXtables: Split up source and dest addresses for transaction
  - firewall.server.config: Log error in case of loading malformed files in
    watcher
  - Install and package the firewallctl man page


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3-1
changelog:
  - Rebase to 0.4.3
  - Rebase to the new upstream and new release (RHBZ#1302802)
  - New firewallctl command line utility (RHBZ#1147959)
  - Adds radius TCP ports (RHBZ#1219717)
  - XSD enhancements for conflicting tag specification (RHBZ#1296573)
  - Adds port for corosync-qnetd to high-availability service (RHBZ#1347530)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.2-1
changelog:
  - Rebase to 0.4.2
  - Allows unspecifying zone binding for interfaces in firewall-config
    (RHBZ#1066037)
  - Adds improved management of zone binding for interfaces, connections and
    sources (RHBZ#1083626)
  - Adds commands to showing details of zones, services, .. (RHBZ#1147500)
  - Adds a default logging option (RHBZ#1147951)
  - Adds quiet option for firewall-offline-cmd (RHBZ#1220467)
  - Adds support for zone chain usage in direct rules (RHBZ#1136801,
    RHBZ#1336881)
  - Adds source port support in zones, services and rich rules (RHBZ#1214770)
  - Adds services imap and smtps (RHBZ#1220196)
  - Fixes runtime to permanent migration(RHBZ#1237242)
  - Fixes removal of destination addresses for services in permanent view in
    firewall-config (RHBZ#1278281)
  - Fixes firewall-config usage over ssh (RHBZ#1281416)
  - Fixes reload disconnects with existing connections (RHBZ#1287449)
  - Fixes ICMP packet drops while reloading (RHBZ#1288177)
  - Adds option to add a new zone, service, .. from existing file (RHBZ#1292926)
  - Adds improved checks for file readers, fixes error reporting of strings
    containing illegal characters (RHBZ#1303026)
  - Transforms direct.passthrough errors into warnings (RHBZ#1301573)
  - Reduced getprotobyname and getservbyname calls for NIS use (RHBZ#1305434)
  - Fixes (repeated) firewalld reload by sending SIGHUP signal (RHBZ#1313023)
  - Adds After=dbus.service to service file to fix shutdown (RHBZ#1313845)
  - Adds ICMP block inversion support (RHBZ#1325335)
  - Fixes local traffic issue with masquerading in default zone (RHBZ#1326130)
  - Adds destination rich rules without an element (RHBZ#1326462)
  - Fixes reload after default zone change to newly introduced zone (RHBZ#1273888)
  - Fixes start without ipv6_rpfilter module (RHBZ#1285769)
  - Adds log of denied packets option (RHBZ#1322505)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-13
changelog:
  - Fixed file mode of schema configuration file verifier check.sh (RHBZ#994479)
  - Include upstream testsuite in SRPM package (RHBZ#1261502)
  - Added missing ports to RH-Satellite-6 mservice (RHBZ#1254531)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-12
changelog:
  - New schema configuration file verifier (RHBZ#994479)
  - More information about interface handling with and without NetworkManager
    (RHBZ#1122739) (RHBZ#1128563)
  - Apply all rich rules for non-default targets (RHBZ#1142741)
  - New iscsi service (RHBZ#1150656)
  - New rsync service (RHBZ#1150659)
  - ipXtables: use -w or -w2 if supported (RHBZ#1161745)
  - Do not use ipv6header for protocol matching. (RHBZ#1164605)
  - Iptables does not like limit of 1/d (RHBZ#1176813)
  - Fix readdition of removed permanent direct settings (RHBZ#1182671)
  - Fix bugs found by upstream test suite (RHBZ#1183008)
  - Fix polkit auth for query and get passthroughs methods (RHBZ#1183688)
  - New vdsm service (RHBZ#1194382)
  - New freeipa services (RHBZ#1206490)
  - Add missing parts to firewall-offline-cmd man page (RHBZ#1217678)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-11
changelog:
  - added missing upstream commit 265bfe90 for (RHBZ#993650)
  - also add log message in the firewall-cmd output (RHBZ#1057095)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-8
changelog:
  - fixed GUI missing name of active zone (RHBZ#993655)
  - recreate man pages at build time (RHBZ#1071303)
    - fixes rich language log level (RHBZ#993740)
    - fixes typo in firewall-cmd man page (RHBZ#1064401)
  - new support to save runtime as permanent (RHBZ#993650)
  - new cli --timeout time specifiers support (RHBZ#994044)
  - updated translations (RHBZ#1048119) (RHBZ#1083592)
  - more descriptive error message in case of mistakes in iptables (RHBZ#1057095)
  - use apparent name for default target (RHBZ#1075675)
  - simplified firewalld usage on servers by dropping at_console (RHBZ#1097765)
  - fixed enable/disable of lockdown (RHBZ#1111573)
  - new Satellite 6 service (RHBZ#1135634)
  - fixed inconsistent color usage for firewall-cmd messages (RHBZ#1097841)
  - fixed missing -Es in lockdown whitelist firewall-config command (RHBZ#1099065)
  - unified runtime and permanent D-Bus API (RHBZ#1127706)
  - fixed missing update of the connections menu in firewall-config (RHBZ#1120212)
  - better docs for interface bindings in firewalld and NetworkManager (RHBZ#1112742)
  - firewall-config: Show target REJECT (RHBZ#1058794)
  - fixed inconsistent PolicyKit domain usage in main D-Bus interface (RHBZ#1061809)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-5
changelog:
  - fixed rich language log level (RHBZ#993740)
  - firewall-config: use simple tool to change zones for connections (RHBZ#993782)
  - translations update (RHBZ#1030330)
  - firewall-config: fixed service and icmptype name dulications (RHBZ#1067639)
  - allow router advertisements for IPv6 rpfilter (RHBZ#1067652)
  - firewall-applet: allow to bind connections to the defaut zone (RHBZ#1068148)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-4
changelog:
  - firewall-config creates unloadable config; port forwarding broken
    (RHBZ#1057628)
  - Network connection is lost after changing Zones Default Target to DROP
    (RHBZ#1057629)
  - permanently adding rich rule with audit creates unloadable config XML
    (RHBZ#1057684)
  - firewalld input_zones has default rule for public zone (RHBZ#1058339)
  - firewall-cmd is not able to add and remove zones, services and icmptypes
    (RHBZ#1064386)
  - firewall-config leaves deleted services shown if they were in use
    (RHBZ#1058853)
  - firewall-cmd does not allow user to change zone default target (RHBZ#1058791)
  - firewall-cmd man page has a typo in --help description (RHBZ#1064401)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-2
changelog:
  - fixed rich rules (RHBZ#1054270)
  - fixed small defects in firewall-cmd and firewall-config (RHBZ#1054289)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.9-1
changelog:
  - rebase to 0.3.9 version:
  - translation updates
  - New IPv6_rpfilter setting to enable source address validation (RHBZ#847707)
  - Do not mix original and customized zones in case of target changes,
    apply only used zones
  - firewall-cmd: fix --*_lockdown_whitelist_uid to work with uid 0
  - Don't show main window maximized. (RHBZ#1046811)
  - Use rmmod instead of 'modprobe -r' (RHBZ#1031102)
  - Deprecate 'enabled' attribute of 'masquerade' element
  - firewall-config: new zone was added twice to the list
  - firewalld.dbus(5)
  - Enable python shebang fix again
  - firewall/client: handle_exceptions: Use loop in decorator
  - firewall-offline-cmd: Do not mask firewalld service with disabled option
  - firewall-config: richRuleDialogActionRejectType Entry -> ComboBox
  - Rich_Rule: fix parsing of reject element (RHBZ#1027373)
  - Show combined zones in permanent configuration (RHBZ#1002016)
  - firewall-cmd(1): document exit code 2 and colored output (RHBZ#1028507)
  - firewall-config: fix RHBZ#1028853


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.8-1
changelog:
  - fix memory leaks
  - New option --debug-gc
  - Python3 compatibility
  - Better non-ascii support
  - several firewall-config & firewall-applet fixes
  - New --remove-rules commands for firewall-cmd and removeRules methods for D-Bus
  - Fixed FirewallDirect.get_rules to return proper list
  - Fixed LastUpdatedOrderedDict.keys()
  - Enable rich rule usage in trusted zone (RHBZ#994144)
  - New error codes: INVALID_CONTEXT, INVALID_COMMAND, INVALID_USER and INVALID_UID


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.7-1
changelog:
  - Don't fail on missing ip[6]tables/ebtables table. (RHBZ#967376)
  - bash-completion: --permanent --direct options
  - firewall/core/fw.py: fix checking for iptables & ip6tables (RHBZ#1017087)
  - firewall-cmd: use client's exception_handler instead of catching exceptions ourselves
  - FirewallClientZoneSettings: fix {add|remove|query}RichRule()
  - Extend amanda-client service with 10080/tcp (RHBZ#1016867)
  - Simplify Rich_Rule()_lexer() by using functions.splitArgs()
  - Fix encoding problems in exception handling (RHBZ#1015941)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.6.2-1
changelog:
  - firewall-offline-cmd: --forward-port 'toaddr' is optional (RHBZ#1014958)
  - firewall-cmd: fix variable name (RHBZ#1015011)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.6-1
changelog:
  - firewalld.richlanguage.xml: correct log levels (RHBZ#993740)
  - firewall-config: Make sure that all zone settings are updated properly on firewalld restart
  - Rich_Limit: Allow long representation for duration (RHBZ#994103
  - firewall-config: Show "Changes applied." after changes (RHBZ#993643)
  - Use own connection dialog to change zones for NM connections
  - Rename service cluster-suite to high-availability (RHBZ#885257)
  - Permanent direct support for firewall-config and firewall-cmd
  - Try to avoid file descriptor leaking (RHBZ#951900)
  - New functions to split and join args properly (honoring quotes)
  - firewall-cmd(1): 2 simple examples
  - Better IPv6 NAT checking.
  - Ship firewalld.direct(5).


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.5-1
changelog:
  - Only use one PK action for configuration (RHBZ#994729)
  - firewall-cmd: indicate non-zero exit code with red color
  - rich-rule: enable to have log without prefix & log_level & limit
  - log-level warn/err -> warning/error (RHBZ#1009436)
  - Use policy DROP while reloading, do not reset policy in restart twice
  - Add _direct chains to all table and chain combinations
  - documentation improvements
  - New firewalld.direct(5) man page docbook source
  - tests/firewall-cmd_test.sh: make rich language tests work
  - Rich_Rule._import_from_string(): improve error messages (RHBZ#994150)
  - direct.passthrough wasn't always matching out_signature (RHBZ#967800)
  - firewall-config: twist ICMP Type IP address family logic.
  - firewall-config: port-forwarding/masquerading dialog (RHBZ#993658)
  - firewall-offline-cmd: New --remove-service=<service> option (BZ#969106)
  - firewall-config: Options->Lockdown was not changing permanent.
  - firewall-config: edit line on doubleclick (RHBZ#993572)
  - firewall-config: System Default Zone -> Default Zone (RHBZ#993811)
  - New direct D-Bus interface, persistent direct rule handling, enabled passthough
  - src/firewall-cmd: Fixed help output to use more visual parameters
  - src/firewall-cmd: New usage output, no redirection to man page anymore
  - src/firewall/core/rich.py: Fixed forwad port destinations
  - src/firewall-offline-cmd: Early enable/disable handling now with mask/unmask
  - doc/xml/firewalld.zone.xml: Added more information about masquerade use
  - Prefix to log message is optional (RHBZ#998079)
  - firewall-cmd: fix --permanent --change-interface (RHBZ#997974)
  - Sort zones/interfaces/service/icmptypes on output.
  - wbem-https service (RHBZ#996668)
  - applet&config: add support for KDE NetworkManager connection editor
  - firewall/core/fw_config.py: New method update_lockdown_whitelist
  - Added missing file watcher for lockdown whitelist in config D-Bus interface
  - firewall/core/watcher: New add_watch_file for lockdown-whitelist and direct
  - Make use of IPv6 NAT conditional, based on kernel number (RHBZ#967376)


author: Thomas Woerner <twoerner@redhat.com> 0.3.4-1
changelog:
  - several rich rule check enhancements and fixes
  - firewall-cmd: direct options - check ipv4|ipv6|eb (RHBZ#970505)
  - firewall-cmd(1): improve description of direct options (RHBZ#970509)
  - several firewall-applet enhancements and fixes
  - New README
  - several doc and man page fixes
  - Service definitions for PCP daemons (RHBZ#972262)
  - bash-completion: add lockdown and rich language options
  - firewall-cmd: add --permanent --list-all[-zones]
  - firewall-cmd: new -q/--quiet option
  - firewall-cmd: warn when default zone not active (RHBZ#971843)
  - firewall-cmd: check priority in --add-rule (RHBZ#914955)
  - add dhcpv6 (for server) service (RHBZ#917866)
  - firewall-cmd: add --permanent --get-zone-of-interface/source --change-interface/source
  - firewall-cmd: print result (yes/no) of all --query-* commands
  - move permanent-getZoneOf{Interface|Source} from firewall-cmd to server
  - Check Interfaces/sources when updating permanent zone settings.
  - FirewallDConfig: getZoneOfInterface/Source can actually return more zones
  - Fixed toaddr check in forward port to only allow single address, no range
  - firewall-cmd: various output improvements
  - fw_zone: use check_single_address from firewall.functions
  - getZoneOfInterface/Source does not need to throw exception
  - firewall.functions: Use socket.inet_pton in checkIP, fixed checkIP*nMask
  - firewall.core.io.service: Properly check port/proto and destination address
  - Install applet desktop file into /etc/xdg/autostart
  - Fixed option problem with rich rule destinations (RHBZ#979804)
  - Better exception creation in dbus_handle_exceptions() decorator (RHBZ#979790)
  - Updated firewall-offline-cmd
  - Use priority in add, remove, query and list of direct rules (RHBZ#979509)
  - New documentation (man pages are created from docbook sources)
  - firewall/core/io/direct.py: use prirority for rule methods, new get_all_ methods
  - direct: pass priority also to client.py and firewall-cmd
  - applet: New blink and blink-count settings
  - firewall.functions: New function ppid_of_pid
  - applet: Check for gnome3 and fix it, use new settings, new size-changed cb
  - firewall-offline-cmd: Fix use of systemctl in chroot
  - firewall-config: use string.ascii_letters instead of string.letters
  - dbus_to_python(): handle non-ascii chars in dbus.String.
  - Modernize old syntax constructions.
  - dict.keys() in Python 3 returns a "view" instead of list
  - Use gettext.install() to install _() in builtins namespace.
  - Allow non-ascii chars in 'short' and 'description'
  - README: More information for "Working With The Source Repository"
  - Build environment fixes
  - firewalld.spec: Added missing checks for rhel > 6 for pygobject3-base
  - firewall-applet: New setting show-inactive
  - Don't stop on reload when lockdown already enabled (RHBZ#987403)
  - firewall-cmd: --lockdown-on/off did not touch firewalld.conf
  - FirewallApplet.gschema.xml: Dropped unused sender-info setting
  - doc/firewall-applet.xml: Added information about gsettings
  - several debug and log message fixes
  - Add chain for sources so they can be checked before interfaces (RHBZ#903222)
  - Add dhcp and proxy-dhcp services (RHBZ#986947)
  - io/Zone(): don't error on deprecated family attr of source elem
  - Limit length of zone file name (to 12 chars) due to Netfilter internals.
  - It was not possible to overload a zone with defined source(s).
  - DEFAULT_ZONE_TARGET: {chain}_ZONE_{zone} -> {chain}_{zone}
  - New runtime get<X>Settings for services and icmptypes, fixed policies callbacks
  - functions: New functions checkUser, checkUid and checkCommand
  - src/firewall/client: Fixed lockdown-whitelist-updated signal handling
  - firewall-cmd(1): move firewalld.richlanguage(5) reference in --*-rich-rule
  - Rich rule service: Only add modules for accept action
  - firewall/core/rich: Several fixes and enhanced checks
  - Fixed reload of direct rules
  - firewall/client: New functions to set and get the exception handler
  - firewall-config: New and enhanced UI to handle lockdown and rich rules
  - zone's immutable attribute is redundant
  - Do not allow to set settings in config for immutable zones.
  - Ignore deprecated 'immutable' attribute in zone files.
  - Eviscerate 'immutable' completely.
  - FirewallDirect.query_rule(): fix it
  - permanent direct: activate firewall.core.io.direct:Direct reader
  - core/io/*: simplify getting of character data
  - FirewallDirect.set_config(): allow reloading


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Remove migrating to a systemd unit file from a SysV initscript
  - Remove pointless "ExclusiveOS" tag


author: Thomas Woerner <twoerner@redhat.com> 0.3.3-1
changelog:
  - new service files
  - relicensed logger.py under GPLv2+
  - firewall-config: sometimes we don't want to use client's exception handler
  - When removing Service/IcmpType remove it from zones too (RHBZ#958401)
  - firewall-config: work-around masquerade_check_cb() being called more times
  - Zone(IO): add interfaces/sources to D-Bus signature
  - Added missing UNKNOWN_SOURCE error code
  - fw_zone.check_source: Raise INVALID_FAMILY if family is invalid
  - New changeZoneOfInterface method, marked changeZone as deprecated
  - Fixed firewall-cmd man page entry for --panic-on
  - firewall-applet: Fixed possible problems of unescaped strings used for markup
  - New support to bind zones to source addresses and ranges (D-BUS, cmd, applet
  - Cleanup of unused variables in FirewallD.start
  - New firewall/fw_types.py with LastUpdatedOrderedDict
  - direct.chains, direct.rules: Using LastUpdatedOrderedDict
  - Support splitted zone files
  - New reader and writer for stored direct chains and rules
  - LockdownWhitelist: fix write(), add get_commands/uids/users/contexts()
  - fix service_writer() and icmptype_writer() to put newline at end of file
  - firewall-cmd: fix --list-sources
  - No need to specify whether source address family is IPv4 or IPv6
  - add getZoneOfSource() to D-Bus interface
  - Add tests and bash-completion for the new "source" operations
  - Convert all input args in D-Bus methods
  - setDefaultZone() was calling accessCheck() *after* the action
  - New uniqify() function to remove duplicates from list whilst preserving order
  - Zone.combine() merge also services and ports
  - config/applet: silence DBusException during start when FirewallD is not running (RHBZ#966518)
  - firewall-applet: more fixes to make the address sources family agnostic
  - Better defaults for lockdown white list
  - Use auth_admin_keep for allow_any and allow_inactive also
  - New D-Bus API for lockdown policies
  - Use IPv4, IPv6 and BRIDGE for FirewallD properties
  - Use rich rule action as audit type
  - Prototype of string-only D-Bus interface for rich language
  - Fixed wrongly merged source family check in firewall/core/io/zone.py
  - handle_cmr: report errors, cleanup modules in error case only, mark handling
  - Use audit type from rule action, fixed rule output
  - Fixed lockdown whitelist D-Bus handling method names
  - New rich rule handling in runtime D-Bus interface
  - Added interface, source and rich rule handling (runtime and permanent)
  - Fixed dbus_obj in FirewallClientConfigPolicies, added queryLockdown
  - Write changes in setLockdownWhitelist
  - Fixed typo in policies log message in method calls
  - firewall-cmd: Added rich rule, lockdown and lockdown whitelist handling
  - Don't check access in query/getLockdownWhitelist*()
  - firewall-cmd: Also output masquerade flag in --list-all
  - firewall-cmd: argparse is able to convert argument to desired type itself
  - firewall-cmd_test.sh: tests for permanent interfaces/sources and lockdown whitelist
  - Makefile.am: add missing files
  - firewall-cmd_test.sh: tests for rich rules
  - Added lockdown, source, interface and rich rule docs to firewall-cmd
  - Do not masquerade lo if masquerade is enabled in the default zone (RHBZ#904098)
  - Use <rule> in metavar for firewall-cmd parser


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.2-1
changelog:
  - Fix signal handling for SIGTERM
  - Additional service files (RHBZ#914859)
  - Updated po files
  - s/persistent/permanent/ (Trac Ticket #7)
  - Better behaviour when running without valid DISPLAY (RHBZ#955414)
  - client.handle_exceptions(): do not loop forever
  - Set Zone.defaults in zone_reader (RHBZ#951747)
  - client: do not pass the dbus exception name to handler
  - IO_Object_XMLGenerator: make it work with Python 2.7.4 (RHBZ#951741)
  - firewall-cmd: do not use deprecated BaseException.message
  - client.py: fix handle_exceptions() (RHBZ#951314)
  - firewall-config: check zone/service/icmptype name (RHBZ#947820)
  - Allow 3121/tcp (pacemaker_remote) in cluster-suite service. (RHBZ#885257)
  - firewall-applet: fix default zone hangling in 'shields-up' (RHBZ#947230)
  - FirewallError.get_code(): check for unknown error


author: Thomas Woerner <twoerner@redhat.com> 0.3.1-1
changelog:
  - Use explicit file lists for make dist
  - New rich rule validation check code
  - New global check_port and check_address functions
  - Allow source white and black listing with the rich rule
  - Fix error handling in case of unsupported family in rich rule
  - Enable ip_forwarding in masquerade and forward-port
  - New functions to read and write simple files using filename and content
  - Add --enable-sysconfig to install Fedora-specific sysconfig config file.
  - Add chains for security table (RHBZ#927015)
  - firewalld.spec: no need to specify --with-systemd-unitdir
  - firewalld.service: remove syslog.target and dbus.target
  - firewalld.service: replace hard-coded paths
  - Move bash-completion to new location.
  - Revert "Added configure for new build env"
  - Revert "Added Makefile.in files"
  - Revert "Added po/Makefile.in.in"
  - Revert "Added po/LINGUAS"
  - Revert "Added aclocal.m4"
  - Amend zone XML Schema


author: Thomas Woerner <twoerner@redhat.com> 0.3.0-1
changelog:
  - Added rich language support
  - Added lockdown feature
  - Allow to bind interfaces and sources to zones permanently
  - Enabled IPv6 NAT support
    masquerading and port/packet forwarding for IPv6 only with rich language
  - Handle polkit errors in client class and firewall-config
  - Added priority description for --direct --add-rule in firewall-cmd man page
  - Add XML Schemas for zones/services/icmptypes XMLs
  - Don't keep file descriptors open when forking
  - Introduce --nopid option for firewalld
  - New FORWARD_IN_ZONES and FORWARD_OUT_ZONES chains (RHBZ#912782)
  - Update cluster-suite service (RHBZ#885257)
  - firewall-cmd: rename --enable/disable-panic to --panic-on/off (RHBZ#874912)
  - Fix interaction problem of changed event of gtk combobox with polkit-kde
    by processing all remaining events (RHBZ#915892)
  - Stop default zone rules being applied to all zones (RHBZ#912782)
  - Firewall.start(): don't call set_default_zone()
  - Add wiki's URL to firewalld(1) and firewall-cmd(1) man pages
  - firewalld-cmd: make --state verbose (RHBZ#886484)
  - improve firewalld --help (RHBZ#910492)
  - firewall-cmd: --add/remove-* can be used multiple times (RHBZ#879834)
  - Continue loading zone in case of wrong service/port etc. (RHBZ#909466)
  - Check also services and icmptypes in Zone() (RHBZ#909466)
  - Increase the maximum length of the port forwarding fields from 5 to 11 in
    firewall-config
  - firewall-cmd: add usage to fail message
  - firewall-cmd: redefine usage to point to man page
  - firewall-cmd: fix visible problems with arg. parsing
  - Use argparse module for parsing command line options and arguments
  - firewall-cmd.1: better clarify where to find ACTIONs
  - firewall-cmd Bash completion
  - firewall-cmd.1: comment --zone=<zone> usage and move some options
  - Use zone's target only in %s_ZONES chains
  - default zone in firewalld.conf was set to public with every restart (#902845)
  - man page cleanup
  - code cleanup


author: Jiri Popelka <jpopelka@redhat.com> - 0.2.12-2
changelog:
  - Default zone in firewalld.conf was reseted with every restart (RHBZ#902845)
  - Add icon cache related scriptlets for firewall-config (RHBZ#902680)
  - Fix typo in firewall-config (RHBZ#895812)
  - Fix few mistakes in firewall-cmd(1) man page


author: Thomas Woerner <twoerner@redhat.com> 0.2.12-1
changelog:
  - firewall-cmd: use -V instead of -v for version info (RHBZ#886477)
  - firewall-cmd: don't check reload()'s return value (RHBZ#886461)
  - actually install firewalld.zones.5
  - firewall-config: treat exceptions when adding new zone/service/icmp
    (RHBZ#886602)
  - firewalld.spec: Fixed requirements of firewall-config to use gtk2 and
    pygobject3
  - Fail gracefully when running in non X environment.(RHBZ#886551)
  - offline-cmd: fail gracefully when no s-c-f config
  - fix duplicated iptables rules (RHBZ#886515)
  - detect errors and duplicates in config file (RHBZ#886581)
  - firewall-config: don't make 'Edit Service' and 'Edit ICMP Type' insensitive
  - firewalld.spec: fixed requirements, require pygobject3-base
  - frewall-applet: Unused code cleanup
  - firewall-applet: several usability fixes and enhancements
    (RHBZ#886531) (RHBZ#886534)
  - firewall/server/server.py: fixed KeyboardInterrupt message (RHBZ#886558)
  - Moved fallback zone and minimal_mark to firewall.config.__init__
  - Do not raise ZONE_ALREADY_SET in change_zone if old zone is set again
    (RHBZ#886432)
  - Make default zone default for all unset connections/interfaces
    (RHBZ#888288) (RHBZ#882736)
  - firewall-config: Use Gtk.MessageType.WARNING for warning dialog
  - firewall-config: Handle unknown services and icmptypes in persistent mode
  - firewall-config: Do not load settings more than once
  - firewall-config: UI cleanup and fixes (RHBZ#888242)
  - firewall-cmd: created alias --change-zone for --change-interface
  - firewall-cmd man page updates (RHBZ#806511)
  - Merged branch 'build-cleanups'
  - dropped call to autogen.sh in build stage, not needed anymore due to 
    'build-cleanups' merge


author: Thomas Woerner <twoerner@redhat.com> 0.2.11-2
changelog:
  - require pygobject3-base instead of pygobject3 (no cairo needed) (RHBZ#874378)
  - fixed dependencies of firewall-config to use gtk3 with pygobject3-base and 
    not pygtk2


author: Thomas Woerner <twoerner@redhat.com> 0.2.11-1
changelog:
  - Fixed more _xmlplus (PyXML) incompatibilities to python xml
  - Several man page updates
  - Fixed error in addForwardPort, removeForwardPort and queryForwardPort
  - firewall-cmd: use already existing queryForwardPort()
  - Update firewall.cmd man page, use man page as firewall-cmd usage (rhbz#876394)
  - firewall-config: Do not force to show labels in the main toolbar
  - firewall-config: Dropped "Change default zone" from toolbar
  - firewall-config: Added menu entry to change zones of connections
  - firewall-applet: Zones can be changed now using nm-connection-editor
    (rhbz#876661)
  - translation updates: cs, hu, ja


author: Thomas Woerner <twoerner@redhat.com> 0.2.10-1
changelog:
  - tests/firewalld_config.py: tests for config.service and config.icmptype
  - FirewallClientConfigServiceSettings(): destinations are dict not list
  - service/zone/icmptype: do not write deprecated name attribute
  - New service ntp
  - firewall-config: Fixed name of about dialog
  - configure.in: Fixed getting of error codes
  - Added coding to all pyhton files
  - Fixed copyright years
  - Beautified file headers
  - Force use of pygobject3 in python-slip (RHBZ#874378)
  - Log: firewall.server.config_icmptype, firewall.server.config_service and
    firewall.server.config_zone: Prepend full path
  - Allow ":" in interface names for interface aliases
  - Add name argument to Updated and Renamed signal
  - Disable IPv4, IPv6 and EB tables if missing - for IPv4/IPv6 only environments
  - firewall-config.glade file cleanup
  - firewall-config: loadDefaults() can throw exception
  - Use toolbars for Add/Edit/Remove/LoadDefaults buttons for zones, services
    and icmp types
  - New vnc-server service, opens ports for displays :0 to :3 (RHBZ#877035)
  - firewall-cmd: Fix typo in help output, allow default zone usage for
    permanenent options
  - Translation updates: cs, fr, ja, pt_BR and zh_CN


author: Thomas Woerner <twoerner@redhat.com> 0.2.9-1
changelog:
  - firewall-config: some UI usability changes
  - firewall-cmd: New option --list-all-zones, output of --list-all changed,
    more option combination checks
  - firewall-applet: Replaced NMClient by direct DBUS calls to fix python core
    dumps in case of connection activates/deactivates
  - Use fallback 'C' locale if current locale isn't supported (RHBZ#860278)
  - Add interfaces to zones again after reload
  - firewall-cmd: use FirewallClient().connected value
  - firewall-cmd: --remove-interface was not working due to a typo
  - Do not use restorecon for new and backup files
  - Fixed use of properties REJECT and DROP
  - firewalld_test.py: check interfaces after reload
  - Translation updates
  - Renamed firewall-convert-scfw-config to firewall-offline-cmd, used by
    anaconda for firewall configuration (e.g. kickstart)
  - Fix python shebang to use -Es at installation time for bin_SCRIPTS and
    sbin_SCRIPTS and at all times in gtk3_chooserbutton.py
  - tests/firewalld_config.py: update test_zones() test case
  - Config interface: improve renaming of zones/services/icmp_types
  - Move emiting of Added signals closer to source.
  - FirewallClient(): config:ServiceAdded signal was wrongly mapped
  - Add argument 'name' to Removed signal
  - firewall-config: Add callbacks for config:[service|icmp]-[added|removed]
  - firewall-config: catch INVALID_X error when removing zone/service/icmp_type
  - firewall-config: remove unused code
  - Revert "Neutralize _xmlplus instead of conforming it"
  - firewall-applet: some UI usability changes
  - firewall-cmd: ALREADY_ENABLED, NOT_ENABLED, ZONE_ALREADY_SET are warnings


author: Thomas Woerner <twoerner@redhat.com> 0.2.8-1
changelog:
  - Do not apply old settings to zones after reload
  - FirewallClient: Added callback structure for firewalld signals
  - New firewall-config with full zone, service and icmptype support
  - Added Shields Up/Down configuration dialog to firewall-applet
  - Name attribute of main tag deprecated for zones, services and icmptypes,
    will be ignored if present
  - Fixed wrong references in firewalld man page
  - Unregister DBus interfaces after sending out the Removed signal
  - Use proper DBus signature in addIcmpType, addService and addZone
  - New builtin property for config interfaces
  - New test case for Config interface
  - spec: use new systemd-rpm macros (rhbz#850110)
  - More config file verifications
  - Lots of smaller fixes and enhancements


author: Thomas Woerner <twoerner@redhat.com> 0.2.6-1
changelog:
  - New D-BUS interface for persistent configuration
  - Aded support for persistent zone configuration in firewall-cmd
  - New Shields Up feature in firewall-applet
  - New requirements for python-decorator and pygobject3
  - New firewall-config sub-package
  - New firewall-convert-scfw-config config script


author: Thomas Woerner <twoerner@redhat.com> 0.2.5-1
changelog:
  - Fixed traceback in firewall-cmd for failed or canceled authorization, 
    return proper error codes, new error codes NOT_RUNNING and NOT_AUTHORIZED
  - Enhanced firewalld service file (RHBZ#806868) and (RHBZ#811240)
  - Fixed duplicates in zone after reload, enabled timed settings after reload
  - Removed conntrack --ctstate INVALID check from default ruleset, because it
    results in ICMP problems (RHBZ#806017).
  - Update interfaces in default zone after reload (rhbz#804814)
  - New man pages for firewalld(1), firewalld.conf(5), firewalld.icmptype(5),
    firewalld.service(5) and firewalld.zone(5), updated firewall-cmd man page
    (RHBZ#811257)
  - Fixed firewall-cmd help output
  - Fixed missing icon for firewall-applet (RHBZ#808759)
  - Added root user check for firewalld (RHBZ#767654)
  - Fixed requirements of firewall-applet sub package (RHBZ#808746)
  - Update interfaces in default zone after changing of default zone (RHBZ#804814)
  - Start firewalld before NetworkManager (RHBZ#811240)
  - Add Type=dbus and BusName to service file (RHBZ#811240)


author: Thomas Woerner <twoerner@redhat.com> 0.2.3-1
changelog:
  - firewall-cmd: several changes and fixes
  - code cleanup
  - fixed icmp protocol used for ipv6 (rhbz#801182)
  - added and fixed some comments
  - properly restore zone settings, timeout is always set, check for 0
  - some FirewallError exceptions were actually not raised
  - do not REJECT in each zone
  - removeInterface() don't require zone
  - new tests in firewall-test script
  - dbus_to_python() was ignoring certain values
  - added functions for the direct interface: chains, rules, passthrough
  - fixed inconsistent data after reload
  - some fixes for the direct interface: priority positions are bound to ipv,
    table and chain
  - added support for direct interface in firewall-cmd:
  - added isImmutable(zone) to zone D-Bus interface
  - renamed policy file
  - enhancements for error messages, enables output for direct.passthrough
  - added allow_any to firewald policies, using at leas auth_admin for policies
  - replaced ENABLE_FAILED, DISABLE_FAILED, ADD_FAILED and REMOVE_FAILED by
    COMMAND_FAILED, resorted error codes
  - new firewalld configuration setting CleanupOnExit
  - enabled polkit again, found a fix for property problem with slip.dbus.service
  - added dhcpv6-client to 'public' (the default) and to 'internal' zones.
  - fixed missing settings form zone config files in
    "firewall-cmd --list=all --zone=<zone>" call
  - added list functions for services and icmptypes, added --list=services and
    --list=icmptypes to firewall-cmd


author: Thomas Woerner <twoerner@redhat.com> 0.2.2-1
changelog:
  - enabled dhcpv6-client service for zones home and work
  - new dhcpv6-client service
  - firewall-cmd: query mode returns reversed values
  - new zone.changeZone(zone, interface)
  - moved zones, services and icmptypes to /usr/lib/firewalld, can be overloaded
    by files in /etc/firewalld (no overload of immutable zones block, drop,
    trusted)
  - reset MinimalMark in firewalld.cnf to default value
  - fixed service destination (addresses not used)
  - fix xmlplus to be compatible with the python xml sax parser and python 3
    by adding __contains__ to xml.sax.xmlreader.AttributesImpl
  - use icon and glib related post, postun and posttrans scriptes for firewall
  - firewall-cmd: fix typo in state
  - firewall-cmd: fix usage()
  - firewall-cmd: fix interface action description in usage()
  - client.py: fix definition of queryInterface()
  - client.py: fix typo in getInterfaces()
  - firewalld.service: do not fork
  - firewall-cmd: fix bug in --list=port and --port action help message
  - firewall-cmd: fix bug in --list=service


author: Thomas Woerner <twoerner@redhat.com>
changelog:
  - moved zones, services and icmptypes to /usr/lib/firewalld, can be overloaded
    by files in /etc/firewalld (no overload of immutable zones block, drop,
    trusted)


author: Thomas Woerner <twoerner@redhat.com> 0.2.0-2
changelog:
  - added glib2-devel to build requires, needed for gsettings.m4
  - added --with-system-unitdir arg to fix installaiton of system file
  - added glib-compile-schemas calls for postun and posttrans
  - added EXTRA_DIST file lists


author: Thomas Woerner <twoerner@redhat.com> 0.2.0-1
changelog:
  - version 0.2.0 with new FirewallD1 D-BUS interface
  - supports zones with a default zone
  - new direct interface as a replacement of the partial virt interface with 
    additional passthrough functionality
  - dropped custom rules, use direct interface instead
  - dropped trusted interface funcionality, use trusted zone instead
  - using zone, service and icmptype configuration files
  - not using any system-config-firewall parts anymore


author: Thomas Woerner <twoerner@redhat.com> 0.1.3-1
changelog:
  - new version 0.1.3
  - restore all firewall features for reload: panic and virt rules and chains
  - string fixes for firewall-cmd man page (by Jiri Popelka)
  - fixed firewall-cmd port list (by Jiri Popelka)
  - added firewall dbus client connect check to firewall-cmd (by Jiri Popelka)
  - translation updates: de, es, gu, it, ja, kn, ml, nl, or, pa, pl, ru, ta,
                         uk, zh_CN


author: Thomas Woerner <twoerner@redhat.com> 0.1.2-1
changelog:
  - fixed package according to package review (rhbz#665395):
    - non executable scripts: dropped shebang
    - using newer GPL license file
    - made /etc/dbus-1/system.d/FirewallD.conf config(noreplace)
    - added requires(post) and (pre) for chkconfig


author: Thomas Woerner <twoerner@redhat.com> 0.1.1-1
changelog:
  - new version 0.1.1
  - fixed source path in POTFILES*
  - added missing firewall_config.py.in
  - added misssing space for spec_ver line
  - using firewall_config.VARLOGFILE
  - added date to logging output
  - also log fatal and error logs to stderr and firewall_config.VARLOGFILE
  - make log message for active_firewalld fatal


author: Pravin Satpute <psatpute@redhat.com> - 0.120-1
changelog:
  - Upstream new release.
  - Added new families Hadasim CLM, Keter YG, Simple CLM, Stam Ashkenaz CLM, Stam Sefarad CLM


author: Pravin Satpute <psatpute@redhat.com> - 0.105-1
changelog:
  - Upstream new release.
  - Miriam Mono family is now OpenType and has diacritics support developed by Yoram Gnat.


author: Peter Hutterer <peter.hutterer@redhat.com> 0.5-2
changelog:
  - Fix gnome-control-center crash for Bamboo Pen & Touch
  - Generic styli needs to have erasers, default to two tools.


author: Olivier Fourdan <ofourdan@redhat.com> 0.3-5
changelog:
  - Mark data subpackage as noarch and make it a requirement for libwacom
  - Use generated udev rule file to list only known devices from libwacom
    database


author: Peter Hutterer <peter.hutterer@redhat.com> 0.3-4
changelog:
  - libwacom-0.3-add-list-devices.patch: add API to list devices
  - libwacom-0.3-add-udev-generator.patch: add a udev rules generater tool
  - libwacom-0.3-add-bamboo-one.patch: add Bamboo One definition


author: Marcel Plch <mplch@redhat.com> - 1.4.11-22
changelog:
  - Backport upstream patch to fix cron failing on
    smart card authentication
  - Resolves: rhbz#1650314


author: Marcel Plch <mplch@redhat.com> - 1.4.11-20
changelog:
  - Fix race condition when crontab is modified the same second
    before and after reading the crontab
  - Resolves: rhbz#1638691


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18
changelog:
  - fix regression - spurious PAM log message from crontab (#1479064)
  - allow empty variables in crontabs (#1439217)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-17
changelog:
  - make anacron not to contradict itself in syslog
    (job output does not have to be necessarily mailed)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-16
changelog:
  - disable mail from anacron with empty MAILTO
  - crontab: do not block access with PAM when running as root
  - improve the crontab man page
  - do not hardcode system_u selinux user but use the user from
    the current context


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-14
changelog:
  - mark the 0hourly and dailyjobs crontabs as config
  - properly handle users for whose getpwnam() returns NULL temporarily
  - log when crond is shutting down


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.11-5
changelog:
  - Cronie doesn't work when is executed as stand alone without systemd (for 
    debuging issues)
  - Fix another permission, hopefully all now.
  - Resolves: rhbz#1012420, rhbz#1015567


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.11-3
changelog:
  - 919290 systemd script use "KillMode=process"
  - Fcntl locking has different semantics than flock. Prefer flock.
    - 49225e172d156531ca142518d2638350752e373a
  - Pull PAM environment variables also from session modules.
    - c8e7d1b43c86a85441cb09cf7e08090f3ec1f384


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.11-2
changelog:
  - scriptlets are not created correctly if systemd is not in BR 986698
  - remove sub-package sysvinit, which is not needed anymore
  - update license, anacron is under GPLv2+


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.10-5
changelog:
  - add support for RANDOM_DELAY - delaying job startups
  - pass some environment variables to processes (LANG, etc.) (#969761)
  - do not use putenv() with string literals (#971516)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.8-4
changelog:
  - drop the without systemd build condition
  - add the chkconfig readding trigger to the sysvinit subpackage


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.7-2
changelog:
  - use only systemd units with systemd
  - add trigger for restart on glibc, libselinux or pam upgrades (#699189)


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.1-1
changelog:
  - update to 1.4.1
  - create and own /var/spool/anacron/cron.{daily,weekly,monthly} to
   remove false warning about non existent files
  - Resolves: 517398


author: Tomas Mraz <tmraz@redhat.com> - 1.1-3
changelog:
  - fix setting keycreate context
  - unify logging a bit
  - cleanup some warnings and fix a typo in TZ code
  - 450993 improve and fix inotify support


author: Ondrej Vasik <ovasik@redhat.com> - 1.1-2
changelog:
  - rpmlint check
  - /etc/ files marked as config, fixed bad requirements
  - cosmetic cleanup of spec file


author: Ondrej Vasik <ovasik@redhat.com> 0.6.14-31
changelog:
  - fix escaping of double-quotes in docbook2man (#826139)
  - fix the wrong format of C-style functions in docbook2man (#662869)
  - fix stray .fi at the end of funcsynopsis section (#662869)


author: Ondrej Vasik <ovasik@redhat.com> 0.6.14-18
changelog:
  - another quoted variable fixes for spaces in filenames
  - use SGML_INCLUDE in man backend(upstream)
  - change upstream URL to something useful
  - escape dots and single quotes in column 1 in docbook2man-spec.pl


author: Ondrej Vasik <ovasik@redhat.com> 0.6.14-15
changelog:
  - require grep,gawk, fix jw script to find SGML_BASE_DIR even
    with grep with colors(#473278), finish funcsynopsis patch
    drop


author: Ondrej Vasik <ovasik@redhat.com> 0.6-14-14
changelog:
  - ship new version of docbook2man-spec.pl to avoid issues
    with the old one
  - dropped funcsynopsis patch - docbook2man-spec.pl from
    tarball used no longer


author: Ondrej Vasik <ovasik@redhat.com> 0.6.14-11
changelog:
  - rpmlint check
  - fixed: dist tag, summary ended with dot, license tag,
    versioned provides/obsoletes + some cosmetic changes


author: Ondrej Vasik <ovasik@redhat.com> 0.6.14-8
changelog:
  - Added more fixes for handling spaces in directory name
  - SGML_FILE variable is factored out of SGML_ARGUMENTS
  - (changes taken from upstream)


author: Elliot Lee <sopwith@redhat.com> 0.6.12-6
changelog:
  - tetex-dvips requirement should go on main package (not just pdf 
    subpackage) because docbook2ps requires dvips too.


author: Tim Waugh <twaugh@redhat.com> 0.6.10-2
changelog:
  - Don't define graphic-default-extension in the stylesheet---it messes
    up PS+PDF output from the same source.


author: Tim Waugh <twaugh@redhat.com> 0.6.10-1
changelog:
  - 0.6.10.
  - No longer need automake files.
  - No longer need '.', jw-custom, '@', pdf, nochunks, txt, '-o', manpage,
    sdata, help, ol, '-V', sgml_xml, excl, link, pagesize, or texinputs
    patches.


author: Tim Waugh <twaugh@redhat.com> 0.6.9-21
changelog:
  - Edited the wrong file when making the patch.. fix breakage introduced
    by trying to fix bug #58375.


author: Tim Waugh <twaugh@redhat.com> 0.6.9-20
changelog:
  - Fix docbook frontend (bug #51478).
  - Make the old db2html script understand the .xml filename extension
    (bug #59194).
  - Determine page size to use automatically from LC_PAPER (bug #58375).


author: Tim Waugh <twaugh@redhat.com> 0.6.9-9
changelog:
  - Actually apply the patch that makes man backend understand &minus;.
  - Also don't redefine <comment> and <remark> for HTML output either.


author: Tim Waugh <twaugh@redhat.com> 0.6.9-8
changelog:
  - Default stylesheet: <comment> and <remark> as rationale markers
    probably isn't really appropriate for general use.
  - Default stylesheet: larger top margin to make some RTF readers
    happy (bug #56011).
  - Make man backend understand &minus;.
  - Specfile cleanups (%{_bindir}, %{_docdir}).


author: Tim Waugh <twaugh@redhat.com> 0.6.9-6
changelog:
  - Explicit synopsis for each docbook2[xxx] command in the jw man page.
  - Clean up all temporary files in pdf backend.


author: Tim Waugh <twaugh@redhat.com> 0.6.9-4
changelog:
  - Adjust stylesheet so that it works with docbook-dsssl 1.72.
  - Fix jw so that -o and -d can be used together (bug #53546).


author: Tim Waugh <twaugh@redhat.com> 0.6.9-3
changelog:
  - Fix txt backend so that it works.
  - Fix jw so that it uses the HTML stylesheet for text backends.
  - Use links if lynx isn't available, in txt backend.


author: Tim Waugh <twaugh@redhat.com> 0.6-14
changelog:
  - db2html: copy admon graphics to output directory (bug #40143).
  - Require docbook-style-dsssl 1.64-2 for symbolic link used by db2html.
  - db2html: handle arguments with spaces better.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix argument parsing in docbook2xxx (bug #31518).
  - Fix argument passing in db2html (bug #31520).
  - Fix pdf generation (bug #31524).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Only create output directory for db2html (bug #27092). (docbook2html
    does not create an output directory in the upstream version, but
    the compatibility script has been made to do so.)


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Change group.
  - Use %{_mandir} and %{_prefix}.
  - db2* symlinks.
  - Obsolete stylesheets (and -db2pdf).
  - Change Copyright: to License:.
  - Remove Packager: line.
  - Reword description.


author: Petr Sabata <contyk@redhat.com> - 1.50-1
changelog:
  - 1.50 bump
  - Cleaning the spec file (I assume pre-EPEL6 compatibility is no longer
    essential here)
  - Adding Exporter and Scalar::Util (optional but preferred) to BR/Rs


author: Chris Weyl <cweyl@alumni.drew.edu> 1.39-1
changelog:
  - auto-update to 1.39 (by cpan-spec-update 0.01)
  - added a new br on perl(File::Spec) (version 0.80)


author: Steven Pritchard <steve@kspei.com> 1.04-1
changelog:
  - Specfile autogenerated by cpanspec 1.70.
  - Drop redundant perl build dependency.
  - BR YAML, YAML::Syck, and Test::Pod for better test coverage.


author: Kalev Lember <kalevlember@gmail.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - Drop the -Werror patch; applied upstream
  - Add glib-compile-schemas scriptlets
  - Relicensed from LGPLv2+ to GPLv2+


author: David Zeuthen <davidz@redhat.com> - 2.29.0-0.git20091202.el7
changelog:
  - Update to git snapshot that requires udisks instead of DeviceKit-disks
  - The UI has been completely revamped


author: David Zeuthen <davidz@redhat.com> - 2.28.0-1.el7
changelog:
  - Update to upstream release 2.28.0
  - Compared to previous releases, this release should whine less about SMART


author: Tim Waugh <twaugh@redhat.com> 3.2-4
changelog:
  - Real fix for bug #747969: the diffutils info file changed name in
    3.1.  Updated the scriptlets to install/remove the correct filename
    from the info directory.


author: Tim Waugh <twaugh@redhat.com> 3.2-2
changelog:
  - Applied upstream gnulib fix for float test on ppc, as well as
    correction for LDBL_MANT_DIG definition (bug #733536).


author: Tim Waugh <twaugh@redhat.com> 2.8.1-25
changelog:
  - Only try to install the info file if it exists so that package
    installation does not fail with --excludedocs (bug #515919).


author: Tim Waugh <twaugh@redhat.com> 2.8.1-20
changelog:
  - Converted spec file to UTF-8 (bug #225696).
  - Fixed summary (bug #225696).
  - Fixed PreReq (bug #225696).
  - Removed Prefix (bug #225696).
  - Fixed build root (bug #225696).
  - Avoid %makeinstall (bug #225696).
  - Fixed license tag (bug #225696).


author: Florian Müllner <fmuellner@redhat.com> - 3.28.2-2
changelog:
  - Update rebased downstream patches
    Related: #1568624
  - Revert port to python3 of some utility tools
    Resolves: #1493526
  - Add tooltips to app names in overview
    Resolves: #1541180


author: Ray Strode <rstrode@redhat.com> - 3.22.3-14
changelog:
  - fix unlock after upgrade
    Related: #1448786
  - switch from setup to autosetup -S git for easier patch maintenance


author: Owen Taylor <otaylor@redhat.com> - 3.14.4-49
changelog:
  - Fix bug where maximized windows would flicker to the wrong size when
    restarting the shell (on stereo enable or otherwise)
    Resolves: #1306802


author: Ray Strode <rstrode@redhat.com> 3.14.4-35
changelog:
  - Ensure the unlock password entry is desensitized when there's
    no password being asked for (Such as when the message is just
    "Please insert smartcard")
    Resolves: #1262999


author: Ray Strode <rstrode@redhat.com> 3.14.4-30
changelog:
  - Another timed login update.  Makes the indicator work
    when animations are disabled.
    Related: #1252424


author: Ray Strode <rstrode@redhat.com> 3.14.4-22
changelog:
  - One more update to Next button handling
    Resolves: 1240623
    Related: #1240615
    Related: #1174373


author: Ray Strode <rstrode@redhat.com> 3.14.4-21
changelog:
  - Make sure Next button starts out desensitized
    Resolves: 1240623
    Related: #1240615
    Related: #1174373


author: Ray Strode <rstrode@redhat.com> 3.14.4-17
changelog:
  - Fix wonkiness if user hits escape from Not Listed screen
    after typing wrong password
    Resolves: #1220023


author: Ray Strode <rstrode@redhat.com> 3.14.4-12
changelog:
  - Ensure password authentication is used if no authentication scheme is configured
  - Ensure smartcard authentication is used if smartcard authentication is configured

    Related: #1174373 1034968


author: Ray Strode <rstrode@redhat.com> 3.8.4-44
changelog:
  - If password authentication is disabled and smartcard authentication is
    enabled and smartcard isn't plugged in at start up, prompt user for
    smartcard
    Resolves: #1159385


author: Ray Strode <rstrode@redhat.com> 3.8.4-35
changelog:
  - Disallow cancel from login screen before login attempt
    has been initiated.
    Resolves: rhbz#1109530


author: Florian Müllner <fmuellner@redhat.com> - 3.8.4-15
changelog:
  - Close run dialog on mode changes when the new session mode doesn't allow it
    Resolves: rhbz#1031142
  - Prevent fallback keyring dialog to appear on lock screen


author: Rui Matos <rmatos@redhat.com> - 3.8.4-14
changelog:
  - Add a DBus method to load a single extension
    Resolves: rhbz#1028466
  - Add a SESSION_MODE extension type
    Resolves: rhbz#1028462


author: Florian Müllner <fmuellner@redhat.com> - 3.8.4-11
changelog:
  - Re-add yelp to default favorites - this downstream patch was
    accidentally dropped when rebasing on F19
    Resolves: #958196
  - Fix network icon not updating
    Resolves: #1009867
  - Do not hide on/off switch while connecting to wireless
    Resolves: #908829
  - Fix apps menu not being disabled when open during screen lock
    Resolves: #1027501
  - Be more defensive when enabling/disabling extensions
    Resolves: #1027501
  - Re-enable browser plugin and move it to a subpackage
    Resolves: #972783


author: Florian Müllner <fmuellner@redhat.com> - 3.8.4-10
changelog:
  - Backport support for hasWorkspaces session mode property
    Resolves: #1025444
  - Backport input validation of screenshot/screencast DBus methods
    Resolves: #1022491


author: Kalev Lember <kalevlember@gmail.com> - 3.8.1-2
changelog:
  - Add missing telepathy-logger runtime dep
  - Depend on gnome-session-xsession so that it gets pulled in for
    typical GNOME installs


author: Florian Müllner <fmuellner@redhat.com> - 3.6.1-2
changelog:
  - Remove avoid-redhat-menus patch

    The standard way of supporting a desktop-specific menu layout is
    to set XDG_MENU_PREFIX (which we made gnome-session do now).


author: Owen Taylor <otaylor@redhat.com> - 3.4.0-2
changelog:
  - Change gnome-shell-favourite-apps-firefox.patch to also patch the JS code
    to handle the transition from mozilla-firefox.desktop to firefox.desktop.
    (#808894, reported by Jonathan Kamens)


author: Dan Williams <dcbw@redhat.com> - 3.0.1-4
changelog:
  - Fix initial connections to WPA Enterprise access points (#699014)
  - Fix initial connections to mobile broadband networks


author: Nils Philippsen <nils@redhat.com> - 3.0.0.2-1
changelog:
  - Update to 3.0.0.2 (fixes missing import that was preventing extensions from
    loading.)
  - Update source URL


author: Owen Taylor <otaylor@redhat.com> - 2.91.1-1
changelog:
  - Update to 2.91.1
  - Add libcroco-devel to BuildRequires, apparently it was getting
    pulled in indirectly before
  - Add libcanberra-devel and pulseaudio-libs-devel BuildRequires


author: Adam Miller <maxamillion@fedoraproject.org> - 2.31.2-2
changelog:
  - Added new version requirements for dependencies based on upstream releases
  - Added new file listings for gnome-shell-clock-preferences binary and .desktop
  - Added gnome-shell man page file listing


author: Adam Miller <maxamillion@fedoraproject.org> - 2.29.1-2
changelog:
  - Bumped for new version of mutter and clutter
  - Added version requirement to gjs-devel because of dependency of build


author: Adam Miller <maxamillion@fedoraproject.org> - 2.28.0.20101015git-1
changelog:
  - Added dependency on a git build of gobject-introspect to solve some breakage
  - Also went ahead and made a new git tarball


author: Owen Taylor <otaylor@redhat.com> - 2.27.2-1
changelog:
  - Update to 2.27.2
  - Add an explicit dep on gobject-introspection 0.6.5 which is required 
    for the new version


author: EL Errata <el-errata_ww@oracle.com> - 033-568.0.1
changelog:
  - bcache module removed (now in bcache-tools upstream) [Orabug: 30800803]
  - add ofb and cfb to 01fips kernel module list [Orabug: 30622681]
  - Fix dhclient classless static route parsing [Orabug: 28881975]
  - Add new rd.iscsi.bypass parameter to always prefer root=, if it exists [Orabug: 30312004]
  - Remove 0560-95iscsi-iscsiroot-synchronously-wait-until-iscsistar.patch [Orabug: 30100182]
  - Oracle kernels are now shipped with .xz compressed modules - strip .xz before calculating module name ( backwards compatible ) [Orabug: 28622864] (Alex Burmashev)
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Enhancement of module alias handling for kernel upgrade and downgrade compatibility [Orabug: 24408414]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - Update 0001-Dracut-Handle-module-alias-of-the-running-kernel.patch to redirect to &1 instead of /dev/null [Orabug 24346754] [Orabug: 24658791] (Manjunath Govind)
  - add Handle module alias of the running kernel [Orabug: 24346754] (Manjunath Govind)
  - add Correctly handle module aliases [Orabug: 22600855] (Fabian Vogt)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)
  - parametrize initrd DAD packets to boot faster [Orabug: 27910517]
  - 01fips: Add sha3_generic module (Khalid Aziz <khalid.aziz@oracle.com>)


author: Lukas Nykryn <lnykryn@redhat.com> - 033-560
changelog:
  - fips: removed false-positive 'FATAL: Module xxx not found' error message when kernel provides a generic algo for module
  - fips: ensure fs module for /boot is installed
  - iscsi: always popd, even if there is no iscsi device
  - Harden dracut against BASH_ENV environment variable
  - fips: check fips integrity just before mounting local filesystems in /sysroot


author: Lukas Nykryn <lnykryn@redhat.com> - 033-551
changelog:
  - Revert "add 90multipath-hostonly module"
  - Introduce tri-state hostonly mode
  Resolves: #1599592
  - Correct paths for firmware
  Resolves: #1608491
  - Record loaded kernel modules when hostonly mode is enabled
  Resolves: #1607744


author: Lukas Nykryn <lnykryn@redhat.com> - 033-546
changelog:
  - fcoe: handle CNAs with DCB firmware support
  Resolves: #1442663
  - mdraid: wait for rd.md.uuid specified devices to be assembled
  Resolves: #1451660
  - dracut: Introduce --force-drivers parameter and force_drivers=+ config option
  Resolves: #1577626
  - Skip iscsi attachment if no info
  Resolves: #1513397
  - Fix loading of modules in modules-load.d
  Resolves: #1547730
  - 40network: introduce ip=either6 option
  Resolves: #1582398
  - dracut-functions.sh:check_vol_slaves() speedup LV -> VG name
  Resolves: #1531503
  - dracut-function.sh:check_block_and_slaves() check for block devices
  Resolves: #1549498
  - net-lib: bump carrier timeout to 15
  Resolves: #1401811
  - dracut.sh: workaround broken read from /proc/modules
  Resolves: #1578222


author: Lukas Nykryn <lnykryn@redhat.com> - 033-534
changelog:
  - base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
  - base/dracut-lib.sh: remove bashism
  - Align dev_unit_name() with systemd's function.
  - dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
  Resolves: #1306640
  - 90dmsquash-live-ntfs: fix depends()
  - 90dmsquash-live: we don't have find_binary inside initramdisk
  - dracut: Ajusting variables name for --include
  Resolves: #1489882


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-520
changelog:
  - network/ifup: don't arping for point-to-point connections
  Resolves: #1477339
  - network: Only bring up wired network interfaces
  Resolves: #1480246
  - dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
  Resolves: #1490777
  - Fix MTU on bond interface.
  - add 'mtu' parameter for bond options
  Resolves: #1494265
  - fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
  Resolves: #1378910
  - lvm_scan.sh: use -K when calling lvchange
  Resolves: #1489841


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-513
changelog:
  - spec: add missing modules
  - add 90multipath-hostonly module
  Resolves: #1457311
  - Add NTFS support to 90dmsquash-live module
  Resolves: #1449410
  - dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
  - rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
  - dracut.sh: introduce "--no-hostonly-default-device" argument
  Resolves: #1483838
  - 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
  Resolves: #1479325
  - dracut.cmdline: remove extra ":" from ip= doc
  Resolves: #1469997
  - Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
  - fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
  Resolves: #1415032


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-499
changelog:
  - module-setup.sh: Add ARM specific driver to initramfs image
  Resolves: #1459277
  - Revert "systemd/dracut-initqueue.sh: don't go into emergency"
  Resolves: #1396865
  - udev-rules: pull in 40-redhat-cpu-hotplug.rules
  Resolves: #1460707


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-495
changelog:
  - ifup: don't ifup team master indefinitely
  Resolves: rhbz#1416958
  - write-ifcfg: do't write MTU twice for regular eth devices
  Resolves: rhbz#1366163
  - network/ifup: write override file before dhcp_do
  Resolves: rhbz#1415004


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-487
changelog:
  - add upstream tests
  - dracut.sh: fail hard, if we find modules and modules.dep is missing
  Resolves: rhbz#1298656
  - add dracut.pc pkg-config file
  Resolves: rhbz#1397853
  - systemd/dracut-cmdline.sh: unset "UNSET" $root
  Releated: rhbz#1365667
  - dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
  - fips/module-setup.sh: make tcrypt non-optional


author: Harald Hoyer <harald@redhat.com> - 033-461
changelog:
  - be more liberal to multiple ip= lines and ip=dhcp
  Resolves: rhbz#1304069
  - don't display error for hba.conf
  Resolves: rhbz#1369342


author: Harald Hoyer <harald@redhat.com> - 033-457
changelog:
  - add --help documentation for --no-hostonly-i18n and --hostonly-i18n options
  Resolves: rhbz#1266448
  - mention rd.shell=0 for rd.emergency
  Resolves: rhbz#1359144
  - put IPv6 IP in brackets for IBFT
  Resolves: rhbz#1322592
  - install symlinked ca-bundle.crt for curl and ssl
  Resolves: rhbz#1341280


author: Harald Hoyer <harald@redhat.com> - 033-449
changelog:
  - include /etc/lvm/lvm_<host_tag>.conf
  Resolves: rhbz#1328778
  - cleanup watchdog module
  Resolves: rhbz#1319986
  - make reboot/halt/poweroff work
  Resolves: rhbz#1324454
  - include nfs module, if host_fs_types contains nfs
    copy filesystems to host_fs_types
  Resolves: rhbz#1349253
  - add kernel command line argument rd.emergency to specify a
    default action rd.emergency=[reboot|poweroff|halt]
  Resolves: rhbz#1359144
  - deduplicate /etc/resolv.conf
  Resolves: rhbz#1332418


author: Harald Hoyer <harald@redhat.com> - 033-436
changelog:
  - ip=auto6 waits now until some router advertisments have been done
  Resolves: rhbz#1242058 rhbz#1292623
  - default iSCSI off-load start is now done in the background via systemd
  - don't fail on missing swap devices
  Resolves: rhbz#1165736
  - on shutdown re-mount the pivot-root writeable again
  Resolves: rhbz#1178497
  - fixed waiting for interface to be up
  Resolves: rhbz#1289341
  - for iSCSI, wait for all interfaces to be up
  Resolves: rhbz#1247478
  - correctly set MAC address on interface for DHCP
  Resolves: rhbz#1274230
  - fixed detection of virtual machines
  Resolves: rhbz#1170122
  - suppress building of early microcode image for non-x86 HW
  Resolves: rhbz#1260187
  - show more meaningfull messages for missing binaries
  Resolves: rhbz#1201035
  - backport fcoe fixes
  Resolves: rhbz#1169672
  - find device mapper devices with user_friendly_names turned on
  Resolves: rhbz#1299800
  - add dm-snapshot kernel module for LVM
  Resolves: rhbz#1287940
  - skip gpg files for microcode generation
  Resolves: rhbz#1282870
  - add description for --no-hostonly-i18n and --hostonly-i18n options
  Resolves: rhbz#1266448
  - copy all requires lines from crypttab
  Resolves: rhbz#1254987
  - add "wheel" and "adm" to passwd and group
  Resolves: rhbz#1275792 rhbz#1287537
  - strip whitespaces from volume group name in check_vol_slaves()
  Resolves: rhbz#1299879
  - dhcp: support rfc3442-classless-static-routes
  Resolves: rhbz#1260955
  - activate all bridges
  Resolves: rhbz#1194604
  - don't call "udevadm control --exit"
  Resolves: rhbz#1277026
  - support multiple bond interfaces
  Resolves: rhbz#1282679
  - configure other interfaces, if team/bond is configured
  Resolves: rhbz#1282680
  - error out, if initramfs.img could not be created
    and remove a partial written image
  Resolves: rhbz#1235895
  - optionally install items in 01-dist.conf
  Resolves: rhbz#1222529
  - fixed MAC and MUT settings in ip= command line parameter
  Resolves: rhbz#1271656


author: Harald Hoyer <harald@redhat.com> - 033-385
changelog:
  - add more SDHCI driver
  Resolves: rhbz#1336503
  - add str_ends() function
  - optimize test suite for RHEL


author: Harald Hoyer <harald@redhat.com> - 033-379
changelog:
  - Autodetect iSCSI firmware
  - check, if NFS is already mounted
  Resolves: rhbz#1302764
  - fix carrier detection
  - fix majmin_to_mpath_dev()
  - add "wheel" and "adm" to passwd and group
  Resolves: rhbz#1287537
  - add "tar" and "dd" requirement
  Resolves: rhbz#1285810
  - for microcode generation, skip gpg files
  - add documentation: for "--hostonly-i18n" "--no-hostonly-i18n" "i18n_install_all"
  - add classless-static-routes support
  Resolves: rhbz#1260955


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-359
changelog:
  - write-ifcfg: fix creating configuration for VLAN
  Resolves: rhbz#1267311
  - 90qemu: also add ibmvscsi on qemu
  Resolves: rhbz#1245959


author: Harald Hoyer <harald@redhat.com> 033-358
changelog:
  - fixed qemu detection
  Resolves: rhbz#1245959
  - fixed vlan ifcfg generation and nameserver handling
  Resolves: rhbz#1267311


author: Harald Hoyer <harald@redhat.com> 033-353
changelog:
  - fix network wait_for_if_up() to parse NO-CARRIER
  Resolves: rhbz#1249507
  - don't create garbage directories because of ldconfig
    misparsing
  Resolves: rhbz#1264725


author: Harald Hoyer <harald@redhat.com> 033-349
changelog:
  - no iSCSI timeout and modprobe, if iSCSI is not used
  - modprobe iSCSI modules with "-b" to allow blacklisting
  Resolves: rhbz#1263984
  - check for firmware file existance, before crafting
    microcode cpio
  Resolves: rhbz#1263798


author: Harald Hoyer <harald@redhat.com> 033-346
changelog:
  - slim down the image by not including microcode header, if
    not needed
  - add command line parameter for hostonly keyboard layouts
     --hostonly-i18n
  Resolves: rhbz#1262208


author: Harald Hoyer <harald@redhat.com> 033-333
changelog:
  - fixed more iSCSI handling
  Resolves: rhbz#1114966 rhbz#1189891
  - fixed "ip=ibft"
  Resolves: rhbz#1256814
  - fixed cmsifup and s390 ifup
  Resolves: rhbz#1245660


author: Harald Hoyer <harald@redhat.com> 033-328
changelog:
  - add hostonly multipath.conf (to save memory in kdump)
  Resolves: rhbz#994702
  - increase version number of systemd dependency
  - fixed more iSCSI handling
  Resolves: rhbz#1114966 rhbz#1189891
  - check for duplicate IPv4 address
  Resolves: rhbz#1202553


author: Harald Hoyer <harald@redhat.com> 033-314
changelog:
  - fixed iSCSI handling
  Resolves: rhbz#1114966 rhbz#1189891
  - check for duplicate IPv4 address
  Resolves: rhbz#1202553
  - wait udev to be settled before transitioning to the real root
  Resolves: rhbz#1231373
  - support ip= parameter with enx* interface for autobinding to MAC
  Resolves: rhbz#1241102
  - include 40-redhat.rules in the initramfs
  Resolves: rhbz#1241547
  - degrade missing binaries for modules to info level
  Resolves: rhbz#1242845
  - cleanup lldpad cleanly to help out in state transition from initramfs
  Resolves: rhbz#1246217


author: Harald Hoyer <harald@redhat.com> 033-283
changelog:
  - add support for "x-initrd.mount"
  Resolves: rhbz#1080405
  - add network timeout kernel command line arguments
  Resolves: rhbz#1088808
  - use fcoemon and write out fcoemon config
  Resolves: rhbz#1129884 rhbz#1129888
  - add fcoe module EDD parsing quirk for i40e
  Resolves: rhbz#1129886
  - add RENEW to dhclient-script
  Resolves: rhbz#1144277
  - only fetch squashfs.img once
  Resolves: rhbz#1152485
  - add more input kernel drivers
  Resolves: rhbz#1165585 rhbz#1194529
  - be more sloppy with swap partitions and don't fail without them
  Resolves: rhbz#1165736
  - don't call dinfo binary
  Resolves: rhbz#1167082
  - don't halt the system, if the media check is aborted
  Resolves: rhbz#1167735
  - add boot option to spcecify size of live image rw overlay
  Resolves: rhbz#1183566
  - fix nfs dracut module, to not alter rootok for non nfs root
  Resolves: rhbz#1186004
  - don't fsck nfs 
  Resolves: rhbz#1186699
  - correctly parse multi line kernel command line
  Resolves: rhbz#1186822
  - add hyperv_fb module
  Resolves: rhbz#1187428
  - fixup IPv6 NFS addresses parsing
  Resolves: rhbz#1190098
  - add drbg kernel module in fips mode
  Resolves: rhbz#1193147
  - add all multipath path selector kernel modules
  Resolves: rhbz#1195392
  - don't symlink /var/log /run/log
  Resolves: rhbz#1199645
  - wait for IPv6 link local addresses
  Resolves: rhbz#1209814
  - fix references to grub config file in dracut man page
  Resolves: rhbz#1209962
  - add s390 kernel crypto modules to dracut-fips
  Resolves: rhbz#1215766
  - suppress 'cat: write error: Broken pipe' for lsinitrd
  Resolves: rhbz#1223888
  - enable DNS before routes to avoid race conditions
  Resolves: rhbz#1226004
  - add point-to-point ethernet configured via DHCP
  Resolves: rhbz#1227813
  - add virtio-pci
  Resolves: rhbz#1231716
  - add cache tools for dm-cache usage
  Resolves: rhbz#1234407
  - dracut-functions: move non-function code to dracut-init.sh
  Resolves: rhbz#1235500
  - add more information why a dracut module could not be included
  Resolves: rhbz#1236190
  - fixup iBFT parsing
  Resolves: rhbz#1236610


author: Harald Hoyer <harald@redhat.com> 033-248
changelog:
  - fips: rearrange fips modules due to zlib
  Resolves: rhbz#1216086
  - wait for IPV6 DAD in DHCP PREINIT6
  - wait 5s for an network link carrier to appear
  Resolves: rhbz#1088808


author: Harald Hoyer <harald@redhat.com> 033-237
changelog:
  - add support for multiple autoconf options ip=eth0:auto6,dhcp
  Resolves: rhbz#1069270
  - fixed team implementation
  Resolves: rhbz#1147521


author: Harald Hoyer <harald@redhat.com> 033-233
changelog:
  - fips: corrected previous fix
  Resolves: rhbz#1165603
  - fixed iscsi_target parsing
  Resolves: rhbz#1176534
  - skip GlobalKnownHostsFile for ssh_config
  Resolves: rhbz#1086778
  - cms-write-ifcfg.sh: turn SUBCHANNELS into lowercase
  Resolves: rhbz#1169384
  - fixed static routes execution
  Resolves: rhbz#1101412
  - add 90-vconsole.rules
  Resolves: rhbz#1162177


author: Harald Hoyer <harald@redhat.com> 033-224
changelog:
  - don't enforce iSCSI target name policy
  Resolves: rhbz#1078867
  - replaced "ip=auto" with "ip=dhcp" in the documentation
  Resolves: rhbz#1086931
  - bind bonding and bridge interfaces to SUBCHANNELS on s390(x)
  Resolves: rhbz#1090524
  - turn on ipv6, if configured
  Resolves: rhbz#1091410
  - parse DASD="none" as empty
  Resolves: rhbz#1096979
  - add virtio-console for qemu
  Resolves: rhbz#1097999
  - fail on missing dracut modules
  Resolves: rhbz#1121362
  - replace the default route
  Resolves: rhbz#1137022


author: Harald Hoyer <harald@redhat.com> 033-213
changelog:
  - add "-m" option to lsinitrd to list the modules used
  Resolves: rhbz#1122806
  - add "--rebuild" option to dracut
  Resolves: rhbz#1123900


author: Harald Hoyer <harald@redhat.com> 033-207
changelog:
  - only fsck from the systemd side
  Resolves: rhbz#1080699
  - handle multiple fcoe devices
  Resolves: rhbz#1082512
  - handle entries in ssh_config
  Resolves: rhbz#1086778
  - do not bind persistent interfaces to MAC
  Resolves: rhbz#1087945
  - fixed iscsiroot install in initqueue
  Resolves: rhbz#1094469
  - handle upper case letters in SUBCHANNELS
  Resolves: rhbz#1094773
  - add rd.route kernel command line parameter
  Resolves: rhbz#1101412
  - do not reload systemd on wait_for_dev
  Resolves: rhbz#1126008


author: Harald Hoyer <harald@redhat.com> 033-160
changelog:
  - add fsck.<filesystem>, if it exists
  Resolves: rhbz#1083654
  - set IPV6INIT=yes if inet6 is found on the interface
  Resolves: rhbz#1083153


author: Harald Hoyer <harald@redhat.com> 033-156
changelog:
  - network: set correct lease times for DHCPv6
  Resolves: rhbz#1064365
  - include dm-cache kernel modules
  Resolves: rhbz#1081435


author: Harald Hoyer <harald@redhat.com> 033-153
changelog:
  - fcoe: wait for lldpad to be ready
  Resolves: rhbz#1080353
  - network: handle "ip=dhcp6" for all interfaces
  Resolves: rhbz#1064365


author: Harald Hoyer <harald@redhat.com> 033-150
changelog:
  - make dracut-shutdown not fail fatally
  Resolves: rhbz#1067116
  - do PREINIT6 for DHCP6
  Resolves: rhbz#1064365


author: Harald Hoyer <harald@redhat.com> 033-144
changelog:
  - wait for IPv6 tentative flag to be cleared
  Resolves: rhbz#1069263
  - set correct flag file for interfaces
  Resolves: rhbz#1069263
  - add systemd-sysctl service to initramfs
  Resolves: rhbz#1070086
  - honor kernel cmdline, no internal cmdline anymore
  Resolves: rhbz#985160
  - --mount can now take fsck options
  Resolves: rhbz#1069106


author: Harald Hoyer <harald@redhat.com> 033-137
changelog:
  - added sdhci_acpi to static list of kernel modules
  - add kernel drivers from the update directory to search path
  Resolves: rhbz#1055774
  - set the correct initiatior name for iBFT (typo)
  - try all FcoeBootDevice variables
  Resolves: rhbz#1032699
  - write directly to the output file and get correct selinux label
  - add sys-kernel-config.mount to the initramfs
  - configure IPv6 interface for DHCP6
  Resolves: rhbz#1064365
  - Wait until the tentative flag is cleared.
  Resolves: rhbz#1069263
  - no HWADDR if SUBCHANNELS are set for s390 interfaces
  Resolves: rhbz#1056438
  - modify the device timeout for the root device with the rootfs-generator
  Resolves: rhbz#1069133
  Resolves: rhbz#1028043
  - do not store kernel cmdline config in the initramfs about device assembly
  Resolves: rhbz#949697
  - write directly to the output image
  Resolves: rhbz#1062544


author: Harald Hoyer <harald@redhat.com> 033-124
changelog:
  - fixed dns parsing for ip= parameter
  Resolves: rhbz#1034287
  - skipcpio bugfixes
  Resolves: rhbz#1045639
  - do not ifup, and already setup network
  Resolves: rhbz#844828
  - do not run dhclient twice
  Resolves: rhbz#844828


author: Harald Hoyer <harald@redhat.com> 033-110
changelog:
  - add nameservers from ibft settings
  Resolves: rhbz#1034287
  - add microcode to the initramfs image by default
  Resolves: rhbz#1045639
  - halt the machine for wrong checksums in FIPS mode
  Resolves: rhbz#1053655
  - add kernel drivers from the update directory to search path
  Resolves: rhbz#1055774
  - set the ip address lifetime for DHCP setups
  Resolves: rhbz#1058519


author: Harald Hoyer <harald@redhat.com> 033-84
changelog:
  - fixed iscsistart for iscsi_firmware
  Related: rhbz#1031160
  - add more drivers
  Resolves: rhbz#1048403
  Resolves: rhbz#1038827
  - add rd.bootif=0 parameter
  Resolves: rhbz#1044623
  - halt the machine, if FIPS fails
  - do not exit != 0 for dracut-rootfs-generator


author: Harald Hoyer <harald@redhat.com> 033-67
changelog:
  - fixed luks timeout
  Resolves: rhbz#949697
  - do not systemctl daemon-reload
  Resolves: rhbz#1023039 rhbz#1028043
  - do not do dhcp on interfaces with no link
  Resolves: rhbz#1029062
  - do iscsistart for iscsi_firmware even without network
  Resolves: rhbz#1031160


author: Harald Hoyer <harald@redhat.com> 033-40
changelog:
  - fips: include crct10dif_generic
  Resolves: rhbz#1024455
  - add /etc/system-fips in the initramfs
  Resolves: rhbz#1014284


author: Harald Hoyer <harald@redhat.com> 033-39
changelog:
  - fixed booting with rd.iscsi.firmware and without root=
  Resolves: rhbz#1024858
  - fixed resuming
  - fix swap detection in hostonly
  - fixed missing modules in hostonly, which have no modalias
  Resolves: rhbz#1015284
  - moved dracut to /usr/sbin


author: Harald Hoyer <harald@redhat.com> 033-26
changelog:
  - create /dev/mapper/live-base for anaconda
  Resolves: rhbz#1009710
  - support "rootfallback=<root fallback device>"
  Resolves: rhbz#727333
  - add UEFI FCoE boot support
  Resolves: rhbz#732059
  - Make udev db records for MD devices persistent
    so LVM on MD autoactivation works correctly
  Resolves: rhbz#1017031
  - support mdadm-3.2.6+ and mdadm-3.3+
  - install lvm thin utils for non-hostonly also


author: Harald Hoyer <harald@redhat.com> 032-23
changelog:
  - do not fail on empty dracut module directories
  Resolves: rhbz#1003153
  - parse cmdline parameter, even if rootok=1
  Resolves: rhbz#978330
  - fixed ibft_to_cmdline()


author: Harald Hoyer <harald@redhat.com> 032-19
changelog:
  - fixed curl error with zero size kickstart file
  Resolves: rhbz#989133
  - fixed systemd-cat failure, when systemd is installed
    but not actually running
  Resolves: rhbz#1002021
  - do not fail on empty dracut module directories
  Resolves: rhbz#1003153


author: Harald Hoyer <harald@redhat.com> 032-1
changelog:
  - fix for kdump in FIPS mode
  Resolves: rhbz#920931
  - fixed iBFT booting
  Resolves: rhbz#989944
  - fixed FIPS mode initramfs creation
  Resolves: rhbz#990250
  - shutdown: fixed killall_proc_mountpoint()
  Resolves: rhbz#996549
  - disable lvmetad in the initramfs
  Resolves: rhbz#996627
  - require dhclient


author: Harald Hoyer <harald@redhat.com> 031-22.git20130809
changelog:
  - lsinitrd.sh: add old cpio signature
  - dracut.sh: call find with -print0 and cpio with --null
  - dracut.asc: small corrections
  - systemd/dracut-initqueue.sh: continue to boot if finished failed
  - dracut.sh/dracut-functions.sh: handle root on non-block device
  - dracut-functions.sh: removed non dracut-install shell functions
  - dracut-functions.sh: inst_multiple == dracut_install
  - 51-dracut-rescue.install: fixed rescue image creation
  - dracut.sh: do not strip in FIPS mode
  Resolves: rhbz#990250
  - dracut.sh: check the value of --kver
  - crypt: Fix typo--/etc/crypttab not /etc/cryptab
  - network/net-lib.sh: fix ibft interface configuration
  - iscsi/module-setup.sh: install some modules regardless of hostonly
  - multipath: need_shutdown if multipath devices exist
  Resolves: rhbz#994913
  - omit drivers fix


author: Harald Hoyer <harald@redhat.com> 031-1
changelog:
  - do not include the resume dracut module in hostonly mode,
    if no swap is present
  - don't warn twice about omitted modules
  - use systemd-cat for logging on systemd systems, if logfile is unset
  - fixed PARTUUID parsing
  - support kernel module signing keys
  - do not install the usrmount dracut module in hostonly mode,
    if /sbin/init does not live in /usr
  - add debian udev rule files
  - add support for bcache
  - network: handle bootif style interfaces
    e.g. ip=77-77-6f-6f-64-73:dhcp
  - add support for kmod static devnodes
  - add vlan support for iBFT


author: Harald Hoyer <harald@redhat.com> 030-1
changelog:
  - support new persistent network interface names
  - fix findmnt calls, prevents hang on stale NFS mounts
  - add systemd.slice and slice.target units
  - major shell cleanup
  - support root=PARTLABEL= and root=PARTUUID=
  - terminfo: only install l/linux v/vt100 and v/vt220
  - unset all LC_* and LANG, 10% faster
  - fixed dependency loop for dracut-cmdline.service
  - do not wait_for_dev for the root devices
  - do not wait_for_dev for devices, if dracut-initqueue is not needed
  - support early microcode loading with --early-microcode
  - dmraid, let dmraid setup its own partitions
  - sosreport renamed to rdsosreport


author: Harald Hoyer <harald@redhat.com> 029-1
changelog:
  - wait for IPv6 auto configuration
  Resolves: rhbz#973719
  - i18n: make the default font configurable
  - systemd/dracut-pre-pivot.service: also execute for cleanup hooks or rd.break
  - add dracut-shutdown.service.8 manpage
  - lvm: redirect error message of lvs to /dev/null
  Resolves: rhbz#921235


author: Harald Hoyer <harald@redhat.com> 028-1
changelog:
  - lvm: fixed "thin" recognition
  Resolves: rhbz#921235
  - install libs also from one dir above
    fixes booting power6 generated initramfs on power7
  - setup correct system time and time zone in initrd
  - cms fixups
  Resolves: rhbz#970982 rhbz#971025 rhbz#825199
  - iso-scan/filename fixes
  Resolves: rhbz#972337
  - add udev rules for persistent network naming
  Resolves: rhbz#972662


author: Harald Hoyer <harald@redhat.com> 027-81.git20130531
changelog:
  - fix btrfs mount flags for /usr
  - degrade message about missing tools for stripping
  Resolves: rhbz#958519
  - set environment vars DRACUT_SYSTEMD, NEWROOT in service file
  Resolves: rhbz#963159
  - don't add volatile swap partitions to host_devs
  - add libssl.so.10 to make kdump work with fips mode
  - readd selinux dracut module for kdump
  - url-lib/url-lib.sh: turn off curl globbing
  Resolves: rhbz#907497
  - include btrfs-zero-log in the initramfs
  Resolves: rhbz#963257
  - proper NAME the network interfaces
  Resolves: rhbz#965842
  - install default font latarcyrheb-sun16
  Resolves: rhbz#927564
  - optionally install /etc/pcmcia/config.opts
  Resolves: rhbz#920076
  - fix ONBOOT for slaves, set TYPE=Bond for bonding
  Resolves: rhbz#919001
  - add nvme kernel module
  Resolves: rhbz#910734
  - add xfs_metadump
  - selinux: load_policy script fix
  - add hid-hyperv and hv-vmbus kernel modules
  - add parameter rd.live.squashimg
  Resolves: rhbz#789036 rhbz#782108
  - wait for all required interfaces if "rd.neednet=1"
  Resolves: rhbz#801829
  - lvm: add tools for thin provisioning
  Resolves: rhbz#921235
  - ifcfg/write-ifcfg.sh: fixed ifcfg file generation
  - do not wait for mpath* devices
  Resolves: rhbz#969068


author: Harald Hoyer <harald@redhat.com> 027-36.git20130418
changelog:
  - fix initramfs creation on noexec tmpdir
  Resolves: rhbz#953426
  - more options for lsinitrd
  - bash completion for lsinitrd
  - do not output debug information on initramfs creation, if rd.debug is
    on the kernel command line
  - drop requirement on 'file', lsinitrd can find the magic on its own


author: Harald Hoyer <harald@redhat.com> 027-26.git20130415
changelog:
  - do not call plymouth with full path
  - include systemd-random-seed-load.service
  - fix ca-bundle.crt for ssl curl
  Resolves: rhbz#950770
  - add support for "iso-scan/filename" kernel parameter


author: Harald Hoyer <harald@redhat.com> 027-17.git20130409
changelog:
  - only include needed /etc/crypttab entries
  Resolves:rhbz#919752
  - add support for bridge over team and vlan
  - support multiple bonding interfaces
  - add "action_on_fail=" kernel command line parameter
  - add support for bridge over a vlan tagged interface


author: Harald Hoyer <harald@redhat.com> 026-72.git20130320
changelog:
  - fix rescue image naming
  Resolves: rhbz#923439
  - turn off host-only mode if essential system filesystems not mounted
  - turn off host-only mode if udev database is not accessible


author: Harald Hoyer <harald@redhat.com> 026-33.git20130313
changelog:
  - add module-load.d modules to the initramfs
  - add sysctl.d to the initramfs
  - optimize plymouth module for systemd mode
  - add new dracut parameter "--regenerate-all"
  - add new dracut parameter "--noimageifnotneeded"
  - shutdown: mount move /run /sys /dev /proc out of /oldroot
    before pre-shutdown
  - add bash completion for dracut


author: Harald Hoyer <harald@redhat.com> 023-13.git20120821
changelog:
  - reintroduce rd.neednet, which reenables anaconda networking
  - fix some dracut-install corner cases
  - fix FIPS for /boot not on extra partition


author: Harald Hoyer <harald@redhat.com> 020-83.git20120711
changelog:
  - more systemd journal fixes
  - nfs module fix
  - install also /lib/modprobe.d/*
  - fixed dracut-shutdown service
  - safeguards for dracut-install
  - for --include also copy symlinks


author: Harald Hoyer <harald@redhat.com> 020-70.git20120710
changelog:
  - more systemd unit fixups
  - restart systemd-journald in switch-root post
  - fixed dracut-install loader ldd error message


author: Harald Hoyer <harald@redhat.com> 020-64.git20120709
changelog:
  - fixed plymouth install
  - fixed resume
  - fixed dhcp
  - no dracut systemd services installed in the system


author: Harald Hoyer <harald@redhat.com> 019-92.git20120625
changelog:
  - support vlan tagged binding
  - speedup initramfs emergency service
  - speedup image creation
  - fix installkernel() return codes
  Resolves: rhbz#833256
  - add qemu and qemu-net modules to add qemu drivers even in host-only
  - speedup btrfs and xfs fsck (nop)
  - no more mknod in the initramfs (fixes plymouth on s390)


author: Harald Hoyer <harald@redhat.com> 017-39.git20120308
changelog:
  - kill dhclient silently
  - cleanup and fix network config writeout to /run/initramfs/state
  Resolves: rhbz#799989
  - various cleanups


author: Harald Hoyer <harald@redhat.com> 017-22.git20120302
changelog:
  - nfs path fixes for live image over nfs
    root=live:nfs://10.10.10.10:/srv/all/install.img ip=dhcp rd.neednet


author: Harald Hoyer <harald@redhat.com> 009-3
changelog:
  - fixed dhcp
  - added /lib/firmware/updates to firmware directories 
  - fixed LiveCD /dev/.initramfs fallback
  - fixed cdrom polling
  - dropped net-tools dependency


author: Harald Hoyer <harald@redhat.com> 008-2
changelog:
  - do not write dracut.log to /tmp under any circumstances
  - touch /dev/.systemd/plymouth after plymouth started


author: Harald Hoyer <harald@redhat.com>
changelog:
  - Remove requirements, which are not really needed
  Resolves: rhbz#598509
  - fixed copy of network config to /dev/.initramfs/ (patch 146)
  Resolves: rhbz#594649
  - more password beauty (patch 142)
  Resolves: rhbz#561092
  - support multiple iSCSI disks (patch 143)
  Resolves: rbhz#580190
  - fixed selinux=0 (patch 130)
  Resolves: rhbz#593080
  - add support for booting LVM snapshot root volume (patch 145)
  Resolves: rbhz#602723
  - remove hardware field from BOOTIF= (patch 148)
  Resolves: rhbz#599593
  - add aes kernel modules and fix crypt handling (patch 137, patch 140 and patch 147)
  Resolves: rhbz#600170


author: Harald Hoyer <harald@redhat.com>
changelog:
  - fixed dracut manpages 
  Resolves: rhbz#589109
  - use ccw-init and ccw rules from s390utils
  Resolves: rhbz#533494
  - fixed fcoe
  Resolves: rhbz#486244
  - various other bugfixes seen in Fedora


author: Harald Hoyer <harald@redhat.com>
changelog:
  - fixed network with multiple nics
  - fixed nfsidmap paths
  - do not run blkid on non active container raids
  - fixed cdrom polling mechanism
  - update to latest git


author: Harald Hoyer <harald@redhat.com>
changelog:
  - fixed dracut manpages
  - dmraid parse different error messages
  - add cdrom polling mechanism for slow cdroms
  - add module btrfs
  - teach dmsquash live-root to use rootflags
  - trigger udev with action=add
  - fixed add_drivers handling 
  - add sr_mod
  - use pigz instead of gzip, if available


author: Harald Hoyer <harald@redhat.com>
changelog:
  - fixed rpmlint errors (rhbz#570547)
  - removed firmware package from dracut-kernel (rhbz#572634)
  - add dcb support to dracut's FCoE support (rhbz#563794)
  - force install some modules in hostonly mode (rhbz#573094)
  - various other bugfixes
  - Resolves: rhbz#570547, rhbz#572634, rhbz#563794, rhbz#573094


author: Harald Hoyer <harald@redhat.com> 002-26
changelog:
  - add WITH_SWITCH_ROOT make flag
  - add fips requirement conditional
  - add more device mapper modules (bug #539656)


author: Harald Hoyer <harald@redhat.com> 002-22
changelog:
  - add module 90multipath
  - add module 01fips
  - renamed module 95ccw to 95znet (bug #533833)
  - crypt: ignore devices in /etc/crypttab (root is not in there)
  - dasd: only install /etc/dasd.conf in hostonly mode (bug #533833)
  - zfcp: only install /etc/zfcp.conf in hostonly mode (bug #533833)
  - kernel-modules: add scsi_dh scsi_dh_rdac scsi_dh_emc (bug #527750)
  - dasd: use dasdconf.sh from s390utils (bug #533833)


author: Harald Hoyer <harald@redhat.com> 002-18
changelog:
  - renamed lvm/device-mapper udev rules according to upstream changes
  - fixed dracut search path issue


author: Harald Hoyer <harald@redhat.com> 002-13
changelog:
  - fixed init=<command> handling
  - kill loginit if "rdinitdebug" specified
  - run dmsquash-live-root after udev has settled (bug #527514)


author: Harald Hoyer <harald@redhat.com> 002-10
changelog:
  - do not destroy assembled raid arrays if mdadm.conf present
  - mount /dev/shm 
  - let udevd not resolve group and user names
  - preserve timestamps of tools on initramfs generation
  - generate symlinks for binaries correctly
  - moved network from udev to initqueue
  - mount nfs3 with nfsvers=3 option and retry with nfsvers=2
  - fixed nbd initqueue-finished
  - improved debug output: specifying "rdinitdebug" now logs
    to dmesg, console and /init.log
  - stop udev before killing it
  - add ghost /var/log/dracut.log
  - dmsquash: use info() and die() rather than echo
  - strip kernel modules which have no x bit set
  - redirect stdin, stdout, stderr all RW to /dev/console
    so the user can use "less" to view /init.log and dmesg


author: Warren Togami <wtogami@redaht.com> 002-5
changelog:
  - Revert back to -3, Add umount back to initrd
    This makes no functional difference to LiveCD.  See Bug #525319


author: Harald Hoyer <harald@redhat.com> 002-3
changelog:
  - bail out if selinux policy could not be loaded and 
    selinux=0 not specified on kernel command line 
    (bug #524113)
  - set finished criteria for dmsquash live images


author: Harald Hoyer <harald@redhat.com> 001-10
changelog:
  - add ifname= argument for persistent netdev names
  - new /initqueue-finished to check if the main loop can be left
  - copy mdadm.conf if --mdadmconf set or mdadmconf in dracut.conf


author: Harald Hoyer <harald@redhat.com> 001-8
changelog:
  - plymouth: use plymouth-populate-initrd
  - add add_drivers for dracut and dracut.conf
  - do not mount /proc and /selinux manually in selinux-load-policy


author: Harald Hoyer <harald@redhat.com> 001-1
changelog:
  - version 001
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.8-1
changelog:
  - version 0.8 
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.7-1
changelog:
  - version 0.7
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.6-1
changelog:
  - version 0.6
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.5-1
changelog:
  - version 0.5
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.4-1
changelog:
  - version 0.4
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.3-1
changelog:
  - version 0.3
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.13-9
changelog:
  - Related: #1499793 - revert previous reboot loop changes
    (tkasparek@redhat.com)
  - Resolves: #1499793 - Revert "1260527 RHEL7 rhnsd reload doesn't work"
    (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.13-8
changelog:
  - Resolves: #1480306 - change permissions for rhnsd.pid (grinrag@gmail.com)
  - Resolves: #1489989 - umask(0) does not reset to default umask
    (tkasparek@redhat.com)
  - Resolves: #1475039 - close and reopen syslog when redirecting child output
    (martin.matuska@axelspringer.de)


author: Gennadii Altukhov <galt@redhat.com> 5.0.13-6
changelog:
  - 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
  - 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)


author: Grant Gainey 5.0.13-5
changelog:
  - Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
  - Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
    no need to break init script if they do not exist (jdobes@redhat.com)
  - Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
  - Revert changes in order to clean up tagging issues with brew
    (ggainey@redhat.com)
  - Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
    (ggainey@redhat.com)
  - Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
  - Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
    (ggainey@redhat.com)
  - Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
    no need to break init script if they do not exist (jdobes@redhat.com)
  - Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 5.0.10-1
changelog:
  - let rhnsd.service be enabled after installation
  - Purging %changelog entries preceding Spacewalk 1.0, in active packages.


author: Milan Zazrivec <mzazrivec@redhat.com> 5.0.9-1
changelog:
  - Update .po and .pot files for rhnsd.
  - New translations from Transifex for rhnsd.
  - Download translations from Transifex for rhnsd.


author: Jan Pazdziora 5.0.7-1
changelog:
  - Only run chkconfig if we are in the SysV world.
  - rhnsd needs to be marked as forking.
  - When talking to systemctl, we need to say .service.


author: Michael Calmer <mc@suse.de> 5.0.5-1
changelog:
  - use systemd on openSUSE >= 12.1
  - do not start rhnsd in runlevel 2 which has no network
  - no use of /var/lock/subsys/ anymore


author: Jan Pazdziora 4.9.12-1
changelog:
  - Merging Transifex changes for rhnsd.
  - New translations from Transifex for rhnsd.
  - Download translations from Transifex for rhnsd.


author: Tomas Lestach <tlestach@redhat.com> 4.9.8-1
changelog:
  - updating Copyright years for year 2011 (tlestach@redhat.com)
  - update .po and .pot files for rhnsd (tlestach@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 4.9.4-1
changelog:
  - l10n: Updates to Czech (cs) translation (msuchy@fedoraproject.org)
  - cleanup - removing translation file, which does not match any language code
    (msuchy@redhat.com)
  - update po files for rhnsd (msuchy@redhat.com)
  - generate new pot file for rhnsd (msuchy@redhat.com)
  - l10n: Updates to Polish (pl) translation (raven@fedoraproject.org)


author: Trond Eivind Glomsrød <teg@redhat.com> 1.0.2-1
changelog:
  - 1.0.2
  - Total overhaul of build precedure
  - Add many small helper programs added to 1.0.2
  - drop old patches


author: Trond Eivind Glomsrød <teg@redhat.com> 1.0.1-5
changelog:
  - Don't segfault when infile is a directory and "-f" is used (#56623)
  - Automake is evil. Add workaround


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - FHS packaging to build on solaris2.5.1.
  - remove config.cache from autoconf patch.
  - sparc: use %configure, but not the m4 macros.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - autoconfed and libtoolized package 
  - fixed Copyright (it's BSD, not GPL)
  - dumped bzless (less works fine with bz2-files)
  - rewrote build and install parts
  - separated main package and devel package


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - force compilation with egcs to avoid gcc optimization bug (thank God 
    we haven't been beaten by it)


author: Matthias Clasen <mclasen@redhat.com> - 2.22.1-1
changelog:
  - Update to 2.22.1 (filechooser crash fixes)
  - Implement authentication support for the file chooser (Tomas Bzatek)


author: Matthias Clasen <mclasen@redhat.com> - 2.15.1.cvs20060505-2
changelog:
  - Update to a cvs snapshot that supports the new GTK+ filechooser
    backend API
  - Require GTK+ 2.9.0


author: Ray Strode <rstrode@redhat.com> - 2.10.0-1
changelog:
  - Update to 2.10.0

  -* Thu Jan 27 2005 Matthias Clasen <mclasen@redhat.com> - 2.9.1-1
  - Update to 2.9.1
  - Drop upstreamed patches


author: Colin Walters <walters@redhat.com> 2.6.0-5
changelog:
  - Backport fileselector crash fix from HEAD
  - Remove unneeded calls to autotools
  - Remove BR on autotools


author: Alexander Larsson <alexl@redhat.com> 2.6.0-3
changelog:
  - Backport fixes from cvs
  -  fix fileselector crashes
  -  fix auth callback threadsafeness
  -  fix auth callback modal dialog bug


author: Tim Powers <timp@redhat.com> 2.2.0.1-5
changelog:
  - fixed requires so that we no longer require Xft and Xft-devel, but
    instead XFree86 and XFree86-devel >= 4.2.99


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 1.106.0.90 snap, glib 1.3.11
  - add explicit-versioned requires on dependency libs
  - do gconftool stuff, put schemas in file list
  - use makeinstall instead of destdir to avoid broken makefiles


author: Fabiano Fidêncio <fidencio@redhat.com> - 20190805-2
changelog:
  - Resolves: rhbz#1750807 - Fedora/RHEL/CentOS JeOS kickstart files for
                             unattended installation are broken


author: Fabiano Fidêncio <fidencio@redhat.com> - 20190805-1
changelog:
  - Resolves: rhbz#1737367 - Update to latest upstream release
  - Resolves: rhbz#1737369 - Add 7.8 to the osinfo-db which will be used on 7.8


author: Felipe Borges <feborges@redhat.com> - 20170813-1
changelog:
  - Update source URL to Pagure
   - Drop the rhel-7.4 data patch
   - Update to new release
   - Resolves: rhbz#1479731


author: Lubomir Rintel <lkundrak@v3.sk> - 2.4.0-2
changelog:
  - Add the previously omitted systemd service file (rh #1352055)
  - Fix crash with invalid arguments (rh #1358472)


author: Thomas Haller <thaller@redhat.com> 1.2.7-3
changelog:
  - Add manual page for usb_modeswitch_dispatcher and fix errors in
    manual page of usb_modeswitch (rhbz#948451, rhbz#884203).


author: Dan Williams <dcbw@redhat.com> 1.2.3-1
changelog:
  - Update to new upstream release
  - Build TCL tool as a static binary to remove dependency on TCL itself rhbz#760839


author: Huzaifa Sidhpurwala <huzaifas@redhat.com> 1.2.2-2
changelog:
  - Add usb_modeswitch.sh udev script and move Tcl dispatcher script to sbindir,
    resolves rhbz#782614, patch from Dominic Cleal
  - Fix bus/device-based search, from deb#656248


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.1.7-1
changelog:
  - New upstream release.  Resolves rhbz#625004
  - Update spec to match current guidelines
  - Fix relevant rpmlint errors and warnings


author: Marek Kasik <mkasik@redhat.com> - 2.4.11-11
changelog:
  - Fixes CVE-2014-9657
     - Check minimum size of `record_size'.
  - Fixes CVE-2014-9658
     - Use correct value for minimum table length test.
  - Fixes CVE-2014-9675
     - New macro that checks one character more than `strncmp'.
  - Fixes CVE-2014-9660
     - Check `_BDF_GLYPH_BITS'.
  - Fixes CVE-2014-9661
     - Initialize `face->ttf_size'.
     - Always set `face->ttf_size' directly.
     - Exclusively use the `truetype' font driver for loading
       the font contained in the `sfnts' array.
  - Fixes CVE-2014-9663
     - Fix order of validity tests.
  - Fixes CVE-2014-9664
     - Add another boundary testing.
     - Fix boundary testing.
  - Fixes CVE-2014-9667
     - Protect against addition overflow.
  - Fixes CVE-2014-9669
     - Protect against overflow in additions and multiplications.
  - Fixes CVE-2014-9670
     - Add sanity checks for row and column values.
  - Fixes CVE-2014-9671
     - Check `size' and `offset' values.
  - Fixes CVE-2014-9673
     - Fix integer overflow by a broken POST table in resource-fork.
  - Fixes CVE-2014-9674
     - Fix integer overflow by a broken POST table in resource-fork.
     - Additional overflow check in the summation of POST fragment lengths.
  - Work around behaviour of X11's `pcfWriteFont' and `pcfReadFont' functions
  - Resolves: #1197740


author: Marek Kasik <mkasik@redhat.com> - 2.4.11-3
changelog:
  - Fix emboldening:
      - split out MSB function
      - fix integer overflows
      - fix broken emboldening at small sizes
  - Resolves: #891457


author: Marek Kasik <mkasik@redhat.com> 2.4.5-2
changelog:
  - Add freetype-2.4.5-CVE-2011-0226.patch
      (Add better argument check for `callothersubr'.)
      - based on patches by Werner Lemberg,
        Alexei Podtelezhnikov and Matthias Drochner
  - Resolves: #723469


author: Marek Kasik <mkasik@redhat.com> 2.4.4-3
changelog:
  - Enable bytecode interpreter (#547532).
  - Fall back to autohinting if a TTF/OTF doesn't contain any bytecode.


author: Marek Kasik <mkasik@redhat.com> 2.4.3-2
changelog:
  - Add freetype-2.4.3-CVE-2010-3855.patch
      (Protect against invalid `runcnt' values.)
  - Resolves: #651764


author: Behdad Esfahbod <behdad@redhat.com> 2.3.11-1
changelog:
  - Update to 2.3.11.
  - Add freetype-2.3.11-more-demos.patch
  - New demo programs ftmemchk, ftpatchk, and fttimer


author: Behdad Esfahbod <besfahbo@redhat.com> 2.3.9-2
changelog:
  - Add Provides: freetype-bytecode and freetype-subpixel if built
    with those options.
  - Resolves: #155210


author: Behdad Esfahbod <besfahbo@redhat.com> 2.3.7-3
changelog:
  - Add full source URL to Source lines.
  - Add docs to main and devel package.
  - rpmlint is happy now.
  - Resolves: #225770


author: Behdad Esfahbod <besfahbo@redhat.com> 2.3.5-2
changelog:
  - Change spec file to permit enabling bytecode-interpreter and
    subpixel-rendering without editing spec file.
  - Resolves: 249986


author: Behdad Esfahbod <besfahbo@redhat.com> 2.3.0-1
changelog:
  - Update to 2.3.0.
  - Drop upstream patches.
  - Drop -fno-strict-aliasing, it should just work.
  - Fix typo in ftconfig.h generation.


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-16
changelog:
  - Backport binary-search fixes from HEAD
  - Add freetype-2.2.1-ttcmap.patch
  - Resolves: #208734

  - Fix rendering issue with some Asian fonts.
  - Add freetype-2.2.1-fix-get-orientation.patch
  - Resolves: #207261

  - Copy non-X demos even if not compiling with_xfree86.

  - Add freetype-2.2.1-zero-item-size.patch, to fix crasher.
  - Resolves #214048

  - Add X11_PATH=/usr to "make"s, to find modern X.
  - Resolves #212199


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-10
changelog:
  - Fix crasher https://bugs.freedesktop.org/show_bug.cgi?id=6841
  - Add freetype-2.2.1-memcpy-fix.patch


author: Behdad Esfahbod <besfahbo@redhat.com> 2.2.1-1
changelog:
  - Update to 2.2.1
  - Remove FreeType 1, to move to extras
  - Install new demos ftbench, ftchkwd, ftgamma, and ftvalid
  - Enable modules gxvalid and otvalid


author: Owen Taylor <otaylor@redhat.com> - 2.1.9-1
changelog:
  - Upgrade to 2.1.9
  - Since we are just using automake for aclocal, use it unversioned,
    instead of specifying 1.4.


author: Owen Taylor <otaylor@redhat.com> 2.1.7-4
changelog:
  - Add patch from freetype CVS to fix problem with eexec (#117743)
  - Add freetype-devel to buildrequires and -devel requires
    (Maxim Dzumanenko, #111108)


author: Mike A. Harris <mharris@redhat.com> 2.1.7-3
changelog:
  - Added -fno-strict-aliasing to CFLAGS and CXXFLAGS to try to fix SEGV and
    SIGILL crashes in mkfontscale which have been traced into freetype and seem
    to be caused by aliasing issues in freetype macros (#118021)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - allow compiling without the demos as that requires XFree86
    (this allows bootstrapping XFree86 on new archs)


author: Owen Taylor <otaylor@redhat.com> 2.1.4-1
changelog:
  - Version 2.1.4
  - Relibtoolize to get deplibs right for x86_64
  - Use autoconf-2.5x for freetype-1.4 to fix libtool-1.5 compat problem (#91781)
  - Relativize absolute symlinks to fix the -debuginfo package 
    (#83521, Mike Harris)


author: Elliot Lee <sopwith@redhat.com> 2.1.3-7
changelog:
  - Run libtoolize/aclocal/autoconf so that libtool knows to generate shared libraries 
    on ppc64.
  - Use _smp_mflags (for freetype 2.x only)


author: Owen Taylor <otaylor@redhat.com> 2.1.3-4
changelog:
  - Make FreeType robust against corrupt fonts with recursive composite 
    glyphs (#74782, James Antill)


author: Mike A. Harris <mharris@redhat.com> 2.1.3-2
changelog:
  - Update to freetype 2.1.3
  - Removed ttmkfdir sources and patches, as they have been moved from the
    freetype packaging to XFree86 packaging, and now to the ttmkfdir package
  - Removed patches that are now included in 2.1.3:
    freetype-2.1.1-primaryhints.patch, freetype-2.1.2-slighthint.patch,
    freetype-2.1.2-bluefuzz.patch, freetype-2.1.2-stdw.patch,
    freetype-2.1.2-transform.patch, freetype-2.1.2-autohint.patch,
    freetype-2.1.2-leftright.patch
  - Conditionalized inclusion of freetype 1.4 library.


author: Mike A. Harris <mharris@redhat.com> 2.1.2-10
changelog:
  - Attempted to fix lib64 issue in freetype-demos build with X11_LINKLIBS
  - Cleaned up various _foodir macros throughtout specfile
  - Removed with_ttmkfdir build option as it is way obsolete


author: Mike A. Harris <mharris@redhat.com> 2.0.8-2
changelog:
  - Updated to freetype 2.0.8, however docs and demos are stuck at 2.0.7
    on the freetype website.  Munged specfile to deal with the problem by using
    {oldversion} instead of version where appropriate.  <sigh>


author: Tim Powers <timp@redhat.com> 2.0.6-3
changelog:
  - bumping release so that we don't collide with another build of
    freetype, make sure to change the release requirement in the XFree86
    package


author: Mike A. Harris <mharris@redhat.com> 2.0.6-2
changelog:
  - Made ttmkfdir inclusion conditional, and set up a define to include
    ttmkfdir in RHL 7.x builds, since ttmkfdir is now moving to the new
    XFree86-font-utils package.


author: Elliot Lee <sopwith@redhat.com> 2.0.5-3
changelog:
  - Fix bug #56901 (ttmkfdir needed to list Unicode encoding when generating
    font list). (ttmkfdir-iso10646.patch)
  - Use _smp_mflags macro everywhere relevant. (freetype-pre1.4-make.patch)
  - Undo fix for #24253, assume compiler was fixed.


author: Mike A. Harris <mharris@redhat.com> 2.0.4-2
changelog:
  - Added new subpackage freetype-demos, added demos to build
  - Disabled ftdump, ftlint in utils package favoring the newer utils in
    demos package.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.0.3-4
changelog:
  - Add ft2build.h to -devel package, since it's included by all other
    freetype headers, the package is useless without it


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.3-3
changelog:
  - Change "Requires: freetype = name/ver" to "freetype = version/release",
    and move the requirements to the subpackages.


author: Mike A. Harris <mharris@redhat.com> 2.0.3-1
changelog:
  - Updated to Freetype 2.0.3, minor specfile tweaks.
  - Freetype2 docs are is in a separate tarball now. Integrated it.
  - Built in new environment.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - libtool is used to build libttf, so use libtool to link ttmkfdir with it
  - fixup a paths for a couple of missing docs


author: Preston Brown <pbrown@redhat.com>
changelog:
  - newer ttmkfdir that works better, moved ttmkfdir to /usr/bin from /usr/sbin
  - freetype utilities moved to subpkg, X dependency removed from main pkg
  - libttf.so symlink moved to devel pkg


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - call libtoolize to sanitize config.sub and get ARM support
  - dispoze of the patch (not necessary anymore)


author: Eugene Syromiatnikov <esyr@redhat.com> - 9.1.0-87
changelog:
  - Revert to usage of join instead of comm in find-requires.ksym:mod_requires()
    as generated "Requires:" and "Provides:" lists have different format
    and unsuitable for processing with comm (#1619235)


author: Eugene Syromiatnikov <esyr@redhat.com> - 9.1.0-86
changelog:
  - Add support for compressed kernel modules to find-provides,
    find-provides.ksyms, find-requires, find-requires.ksyms (#1619891)


author: Eugene Syromiatnikov <esyr@redhat.com> - 9.1.0-85
changelog:
  - Fix generation of kernel module versioned symbol dependencies for the case
    when module depends on a symbol with the same name as the one present
    in kernel but with a different version (#1619235)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 9.1.0-84
changelog:
  - Revert dropping brp-java-repack-jars
  - fix generating group owner name when processing a jar file (#1460628)


author: Florian Festi <ffesti@redhat.com> - 9.1.0-70
changelog:
  - Be stricter with she bang lines in find-requires (#1179523)
  - Use --with-cpu=power8 for ppc64le (#1213268)
  - Fix stripping of binaries for changed file output (#1250015)
  - Fix find-provides.libtool for new libtool style (#1061619)
  - Restore UID/ GID on jar files (#1270053)
  - Fix latest_kernel macro (#1323087)
  - Add _pkgdocdir and _docdir_fmt macro (#1057327)
  - Fix detection for perl files in old depencency generator (#1324003)


author: Florian Festi <ffesti@redhat.com> - 9.1.0-65
changelog:
  - Fix fix for ppc64le libtool issues (#1113618)
  - As this package is noarch we need to have a runtime solution


author: Panu Matilainen <pmatilai@redhat.com> - 9.1.0-56
changelog:
  - Drop accidentally added second -m32 switch from i686 build flags
  - Use -mcpu=power7 for ppc and ppc64 builds (#789116)


author: Panu Matilainen <pmatilai@redhat.com> - 9.1.0-55
changelog:
  - Add dependency generator for kABI provides (#1004930)
  - Explicitly require rpm >= 4.9.0 for the above


author: Panu Matilainen <pmatilai@redhat.com> - 9.1.0-49
changelog:
  - Re-add various kABI-related bits (Jon Masters)
  - Allow kmod building against z-stream kernels (Jiri Benc)


author: Adam Jackson <ajax@redhat.com> 9.1.0-44
changelog:
  - redhat-config-*: Use + to append rather than %rename, to protect against
    multiple -specs= ending up in the command line. (#892837)


author: Panu Matilainen <pmatilai@redhat.com> - 9.1.0-43
changelog:
  - Add optflags stack protector override for AArch64 (#909788)
  - Also set FCFLAGS from %configure (#914831)


author: Panu Matilainen <pmatilai@redhat.com> - 9.1.0-42
changelog:
  - Switch back to manual config.guess/sub copies for reproducability
  - Replace config.guess/sub from %configure again (#951442)


author: Jens Petersen <petersen@redhat.com> - 9.1.0-38
changelog:
  - add ARM to ghc_arches_with_ghci for ghc-7.4.2 ghci support
    (NB this change should not be backported before ghc-7.4.2)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 9.1.0-36
changelog:
  - Patch to fix spaces in files used in filtering macros
    https://bugzilla.redhat.com/show_bug.cgi?id=783932


author: Toshio Kuratomi <toshio@fedoraproject.org> - 9.1.0-34
changelog:
  - Add patch from https://bugzilla.redhat.com/show_bug.cgi?id=783433
    to fix spaces in files and directories that are fed to the
    brp-python-hardlink script
  - Require zip since java repack jars requires it
    https://bugzilla.redhat.com/show_bug.cgi?id=857479
  - Java jars need the MANIFEST.MF file to be first in the archive
    https://bugzilla.redhat.com/show_bug.cgi?id=465664
  - Fix kernel_source macro to match the directory that kernel sources are installed in
    https://bugzilla.redhat.com/show_bug.cgi?id=648996
  - Patch _mandir, _infodir, and _defaultocdir to use _prefix
    https://bugzilla.redhat.com/show_bug.cgi?id=853216


author: Dennis Gilmore <dennis@ausil.us> - 9.1.0-23
changelog:
  - remove patch that forces --disable-silent-rules to configure 
  - it breaks anything set to not ignore unknown configure options


author: Adam Jackson <ajax@redhat.com> 9.1.0-18
changelog:
  - redhat-hardened-cc1: Inject -fPIE, not -fPIC.
    cf. http://lists.fedoraproject.org/pipermail/devel/2011-September/157365.html


author: Adam Jackson <ajax@redhat.com> 9.1.0-17
changelog:
  - Expose %_hardening_{c,ld}flags independently to make it easier for
    packages to apply them to selected components


author: Adam Jackson <ajax@redhat.com> 9.1.0-15
changelog:
  - redhat-hardened-{cc1,ld}: Move some of the rewrite magic to gcc specs so
    we don't end up with both -fPIC and -fPIE on the command line


author: Dennis Gilmore <dennis@ausil.us> - 9.1.0-7
changelog:
  - add -srpm to the arches files so that the base language macros can
    be parallel installable with these


author: Panu Matilainen <pmatilai@redhat.com> - 9.1.0-1
changelog:
  - new version, lose merged patches (fixes #521141, #455279, #496522, #458648)
  - require rpm for parent dir, version >= 4.6.0 for sane keyserver behavior
  - buildrequire libtool to grab copies of config.guess and config.sub
  - add URL to the git repo and upstream changelog as documentation


author: Paul Howarth <paul@city-fan.org> 9.0.3-17
changelog:
  - redhat-rpm-config-9.0.3-filtering-macros.patch: Rediff so we don't ship a .orig file
  - add (empty) %build section
  - fix unescaped macros in changelog


author: Adam Jackson <ajax@redhat.com> 9.0.3-15
changelog:
  - redhat-rpm-config-9.0.4-brpssa-speedup.patch: When looking for static
    archives, only run file(1) on files named *.a. (#517101)


author: Adam Jackson <ajax@redhat.com> 9.0.3-14
changelog:
  - redhat-rpm-config-9.0.3-jars-with-spaces.patch: Handle repacking jars
    whose filenames contain spaces. (#461854)


author: Dennis Gilmore <dennis@ausil.us> - 9.0.3-5
changelog:
  - apply fedora 11 default buildflags
  - set 32 bit intel build arch to i586 on compatiable hardware
  - set 32 bit sparc build arch to sparcv9 on compatiable hardware


author: Jon Masters <jcm@redhat.com> - 9.0.3-1
changelog:
  - Ensure Java Jar files have readable files within.
  - Remove overwritten config.guess|sub files (testing).
  - Fix Fortran flags for building using _fmoddir.
  - Pull in objdump fix to upstream find-requires.


author: Jon Masters <jcm@redhat.com> - 9.0.2-1
changelog:
  - Remove smp dependencies
  - Update config.guess|sub files
  - Don't call find-requires.ksyms for kmod packages (kernel kABI scripts).


author: Jesse Keating <jkeating@redhat.com> - 9.0.1-1
changelog:
  - Remove dist defines, fedora-release does that now
  - Enable post-build buildroot checking by default


author: Jeremy Katz <katzj@redhat.com> - 9.0.0-1
changelog:
  - use stock find-lang.sh (#213041)
  - arm fixes (Lennert Buytenhek, #243523)
  - allow jar repacking to be disabled (#219731)
  - fix running dist.sh --fc (#223651)
  - hardlink identical .pyc and .pyo files to save space (Ville Skyttä)
  - fix TMPDIR usage (Matthew Miller, #235614)


author: Jeremy Katz <katzj@redhat.com> - 8.1.0-1
changelog:
  - add modalias tags to kmod packages and other kmod changes (jcm)
  - recompress jars to avoid multilib conflicts (bkonrath)


author: Jon Masters <jcm@redhat.com> 8.0.45-15
changelog:
  - Add modalias tags to kernel module packages (kmods) for tracking.
  - Further information is available at http://www.kerneldrivers.org/.


author: Jon Masters <jcm@redhat.com> 8.0.45-14
changelog:
  - Rebased all previous patches (since java fix introduced offset).
  - Added Fedora per-release macros to platforms section of macros.
    Further debate may see these move elsewhere in the ordering.


author: Elliot Lee <sopwith@redhat.com> 8.0.33-1
changelog:
  - Change -D to -Wp,-D to make java happy
  - Add -D_FORTIFY_SOURCE=2 to global cflags (as per Jakub & Arjan's request)


author: Jens Petersen <petersen@redhat.com> - 8.0.26-1
changelog:
  - preserve the vendor field when VENDOR not set
  - put VENDOR in the final i386-libc line, not the tentative one


author: Jens Petersen <petersen@redhat.com> - 8.0.25-1
changelog:
  - update config.{guess,sub} to 2003-06-17
  - define VENDOR to be redhat only when /etc/redhat-release present
    [suggested by jbj]
  - put VENDOR in vendor field in our config.guess file for
    ia64, ppc, ppc64, s390, s390x, x86_64 and elf32-i386 Linux
  - drop the --host, --build, --target and --program-prefix configure options
    from %configure, since this causes far too many problems


author: Jens Petersen <petersen@redhat.com> - 8.0.22-2
changelog:
  - add config.guess and config.sub (2003-02-22) with s390 patch on config.sub
  - make %configure use them


author: Jens Petersen <petersen@redhat.com> 7.3.92-4
changelog:
  - fix %configure targeting for autoconf-2.5x (#58468)
  - include ~/.rpmmacros in macrofiles file path again


author: Paul Howarth <paul@city-fan.org> - 0.33-7
changelog:
  - BR:/R: perl(Carp)
  - BR: perl(constant), perl(Exporter) and perl(ExtUtils::CBuilder)
  - Add commentary regarding non-use of Test::LeakTrace for EL-7 builds
  - Use Test::LeakTrace for EL-5 builds
  - Drop support for EL-4 builds since it was EOL-ed ages ago
  - Drop %defattr, redundant since rpm 4.4
  - Don't need to remove empty directories from the buildroot
  - Remove more command macros


author: Paul Howarth <paul@city-fan.org> - 0.33-1
changelog:
  - Update to 0.33
    - Updated can_xs to fix a bug in it
  - Reinstate compatibility with old distributions like EL-5
  - Drop Test::More version requirement to 0.42
  - BR: perl(ExtUtils::MakeMaker)
  - BR: perl(Test::LeakTrace) except on EL-4/EL-5 where it's not available
  - BR: perl(Pod::Simple), perl(Test::CPAN::Meta), perl(Test::MinimumVersion)
    (if we're not bootstrapping) and perl(Test::Pod), and run the developer tests
    too
  - Don't use macros for commands
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Make %files list more specific
  - Use tabs


author: Iain Arnell <iarnell@gmail.com> - 0.30-1
changelog:
  - Update to latest upstream version
  - Clean up spec for modern rpmbuild
  - Use perl_default_filter
  - Remove unnecessary buildrequires


author: Vít Ondruch <vondruch@redhat.com> - 0.16.0-1
changelog:
  - Update to thor 0.16.0.
  - Remove rubygem(diff-lcs) dependency, since it is just optional.
  - Remove rubygem(ruby2ruby) dependnecy, since it is just optional, to allow
    conversion of Rakefiles to Thorfiles (but it doesnt work withou ParseTree anyway).


author: Matthew Kent <mkent@magoazul.com> - 0.12.0-2
changelog:
  - Add Requires for rubygem(rake) (#542559).
  - Upstream replaced Source after the gemcutter migration, update to latest
    (#542559).
  - Add Requires for rubygem(diff-lcs) as Thor can take advantage of it for
    colourized diff output (#542559).


author: Jakub Martisko <jamartis@redhat.com> - 3.10.1-12
changelog:
  - cleanup: merge the application of ppc patches from previous commit
    into single block
  - Related: rhbz#1350536


author: Jakub Martisko <jamartis@redhat.com> - 3.10.1-11
changelog:
  - apply patches 99 and 110 to all ppc variants
  - build lapack with -frecursive flag (#1176026)
  - fix possible memory leak (#1350536)
  - fix wrong sed substitutions (#1402627)
  - Resolves: rhbz#1350536
  - Related: rhbz#1176026


author: Jaromir Capik <jcapik@redhat.com> - 3.10.1-10
changelog:
  - patching for Power8 to pass performance tunings and tests on P8 builders
  - re-enabling tests on ppc64le
  - Resolves: rhbz#1125475


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-9
changelog:
  - ppcle patches (conflicting patches modified)
  - tests on ppcle disabled to shorten build time and fit into 24 hour limit
  - resolves bug 1125475
  - aarch64 patches
  - Resolves: rhbz#1061956


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-7
changelog:
  - change x86_64 archdef to P4, prefetch instruction from hammer is illegal on some pentium 4
  - add -fstack-protector-strong to flags
  - Resolves: rhbz#1070783


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-1
changelog:
  - Rebase to 3.10.1
  - Dropped x86_64-SSE2, ix86-SSE1, ix86-3DNow, z10, z196 (uncompilable).
  - Modified incompatible patches.
  - Added armv7neon support, modified archdef from softfp abi to hard abi.
  - Modified Make.lib to include build-id, soname, versioned library name and symlinks.
  - Now builds monolithic libsatlas (serial) and libtatlas (threaded)
    libraries with lapack and blas included.
  - Lapack source tarball needed instead of static library.
  - Disabled cpu throttling detection again (sorry, could not work on atlas
    otherwise, feel free to enable yet again - atlas-throttling.patch).
  - Removed mentions of "Fedora" to promote redistribution.
  - Modified parts of atlas.spec sometimes left in place, work still in progress,
    cleanup needed.


author: Deji Akingunola <dakingun@gmail.com> - 3.8.4-3
changelog:
  - Apply patch to enable arm build (Patch provided by Jitesh Shah <jiteshs@marvell.com>)
  - Stop turning off throttle checking, upstream frown at it (seems O.K. for Koji)


author: Deji Akingunola <dakingun@gmail.com> - 3.8.4-1
changelog:
  - Update to 3.8.4
  - Build the default package for SSE2 and add a SSE3 subpackage on x86_64
  - Apply patch (and arch defs.) to build on s390 and s390x (Dan Horák)
  - Fix-up build on s390 and s390x (Christian Bornträger)


author: Deji Akingunola <dakingun@gmail.com> - 3.8.3-15
changelog:
  - Disable the problematic sparc patch
  - Change lapack-devel BR to lapack-static, where liblapack_pic.a now resides.


author: Deji Akingunola <dakingun@gmail.com> - 3.8.3-6
changelog:
  - Add '-g' to build flag to allow proper genration of debuginfo subpackages (Fedora bug #509813)
  - Build for F12


author: Deji Akingunola <dakingun@gmail.com> - 3.8.2-4
changelog:
  - Don't symlink the atlas libdir on i386, cause upgrade issue (BZ#476787)
  - Fix options passed to gcc when making shared libs


author: Quentin Spencer <qspencer@users.sourceforge.net> 3.6.0-10
changelog:
  - Rebuild for Fedora Extras 5.
  - Add --noexecstack to compilation of assembly kernels. These were
    previously marked executable, which caused problems with selinux.


author: Quentin Spencer <qspencer@users.sourceforge.net> 3.6.0-8
changelog:
  - Make all devel subpackages depend on their non-devel counterparts.
  - Add /etc/ld.so.conf.d files for -sse and -3dnow, because they don't
    seem to get picked up automatically.


author: Quentin Spencer <qspencer@users.sourceforge.net> 3.6.0-6
changelog:
  - Use new Debian patch, and enable shared libs (they previously failed
    to build on gcc 4).
  - Minor updates to description and README.Fedora file.
  - Fix buildroot name to match FE preferred form.
  - Fixes for custom optimized builds.
  - Add dist tag.


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-14
changelog:
  - add DRBG CAVS driver and other necessary CAVS driver updates (#1172568)
  - allow ath reinitialization in FIPS mode
  - allow for auto-initialization of DRBG


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-13
changelog:
  - touch only urandom in the selftest and when /dev/random is
    unavailable for example by SELinux confinement
  - fix the RSA selftest key (p q swap)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-5
changelog:
  - add FIPS DRBG implementation
  - run the FIPS POST tests in shared library constructor
  - make it possible to run the test suite in the FIPS mode


author: Tomas Mraz <tmraz@redhat.com> 1.5.0-8
changelog:
  - fix multilib conflict in libgcrypt-config
  - fix minor memory leaks and other bugs found by Coverity scan


author: Tomas Mraz <tmraz@redhat.com> 1.4.6-3
changelog:
  - Make the FIPS-186-3 DSA implementation CAVS testable
  - add configurable source of RNG seed /etc/gcrypt/rngseed
    in the FIPS mode (#700388)


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-5
changelog:
  - use /dev/urandom for seeding in the FIPS mode
  - make the tests to pass in the FIPS mode also fixing
    the FIPS-186-3 DSA keygen


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-3
changelog:
  - drop the S390 build workaround as it is no longer needed
  - additional spec file cleanups for merge review (#226008)


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-1
changelog:
  - workaround for build on S390 (#548825)
  - spec file cleanups
  - upgrade to new minor upstream release


author: Tomas Mraz <tmraz@redhat.com> 1.4.4-1
changelog:
  - update to 1.4.4
  - do not abort when the fips mode kernel flag is inaccessible
    due to permissions (#470219)
  - hobble the library to drop the ECC support


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1
  - bump libgpgerror-devel requirement to 1.4, matching the requirement enforced
    by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-5
changelog:
  - add missing gawk buildrequirement
  - switch from explicitly specifying the /dev/random RNG to just verifying
    that the non-LGPL ones were disabled by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-4
changelog:
  - clarify license
  - force use of the linux /dev/random RNG, to avoid accidentally falling back
    to others which would affect the license of the resulting library


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-2
changelog:
  - remove file conflicts in libgcrypt-config by making the 64-bit version
    think the libraries are in /usr/lib (which is wrong, but which it also
    prunes from the suggest --libs output, so no harm done, hopefully)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.1.7
  - change license to LGPL.
  - include splint annotations patch.
  - install info pages.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: parag <paragn@fedoraproject.org> - 1.0.3-2
changelog:
  - Merge-Review #226091
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length README AUTHORS file


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193504)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXtst to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXtst to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Petr Pisar <ppisar@redhat.com> - 0.26-6
changelog:
  - Do not source /etc/profile.d/krb5-devel.sh as krb5-devel-1.8.1-6 does not
    provide it and places executables into standard PATH.


author: Steven Pritchard <steve@kspei.com> 0.26-1
changelog:
  - Update to 0.26.
  - Cleanup a little to more closely match cpanspec output.
  - BR ExtUtils::MakeMaker.


author: Steven Pritchard <steve@kspei.com> 0.24-2
changelog:
  - Update License tag.
  - Use fixperms macro instead of our own chmod incantation.
  - Source in /etc/profile.d/krb5-devel.sh to get our path right.


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-2
changelog:
  - make link checking optional, to avoid needing to pull in linkchecker and
  its dependencies (rbhz#823930)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-2
changelog:
  - fix broken link to "Global Module Index", and add a %check, verifying the
  absence of broken links (rhbz#670493)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-1
changelog:
  - move to 2.6.4
  - drop build requirement on python-jinja; python-sphinx requires python-jinja2
  (bug 532135)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.5.13-5
changelog:
  - Fixed fork, enabled threading (by notifier-thread-fork-fix patch)
    Resolves: rhbz#869315
  - Rebuild to fix systemtap on aarch64
    Resolves: rhbz#1238479


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.5.9-3
changelog:
  - Packaged tclAppInit.c into devel subpackage (#702088)
  - Removed rpmlint warning - macro in comment


author: Marcela Maslanova <mmaslano@redhat.com> - 1:8.5.2-3
changelog:
  - tclConfig.sh was fixed again with symlink into libdir/tcl8.5.
  Many packages are looking in /usr/lib, because tcl dir is versioned.


author: Marcela Maslanova <mmaslano@redhat.com> - 1:8.5.2-2
changelog:
  - update to 8.5.2
  - 451750 PostgreSQL need tclConfig.sh in paths
  - 437399 now really own directories


author: Marcela Maslanova <mmaslano@redhat.com> - 1:8.5.1-1
changelog:
  - new version tcl8.5.1
  - fix 433151 problem with regular expression
  - Version 2.5.3 of the http package requires Tcl 8.4 or better ->
  	change make patch, add tm files back to 8.4


author: Marcela Maslanova <mmaslano@redhat.com> - 1:8.5.0-5
changelog:
  - stack checking is ok, error is in application. Removing withouth stack.
  - tcl-8.5.0-hidden.patch isn't ok, fix should be in expect. In the meantime
  	the patch stay here.


author: Wart <wart@kobold.org> - 1:8.5.0-3
changelog:
  - Obsolete the tcl-tcldict package that has been incorporated
    into the main Tcl source code.
  - Disable the the stack checking code; it makes assumptions that are
    not necessarily true on Fedora and causes some apps to fail (BZ #425799)


author: Marcela Maslanova <mmaslano@redhat.com> - 1:8.4.15-6
changelog:
  - CVE-2007-4772 NFA optimization cause hang in loop. Back ported patch
  	from upstream development version.


author: David Cantrell <dcantrell@redhat.com> - 8.4.12-1
changelog:
  - Upgraded to tcl-8.4.12
  - Use ksh rather than bash for the configure script (known bug w/ bash-3.1)
  - Generate HTML docs from source
  - Add in the Tk source for HTML doc generation


author: Jens Petersen <petersen@redhat.com> - 8.4.11-1
changelog:
  - update to latest stable release
    - update tcl-8.4-autoconf.patch
  - buildrequire sed and use it instead of perl for editting tclConfig.sh


author: Jens Petersen <petersen@redhat.com> - 8.4.7-2
changelog:
  - improve tcl8.3.5-tclConfig-package-path-90160.patch to look in libdir in
    addition to datadir for packages, so that tclsh can load binary packages
    in lib64 (135310)


author: Jens Petersen <petersen@redhat.com> - 8.4.7-1
changelog:
  - update to 8.4.7
    - replace tcl-8.4.5-no_rpath.patch by tcl-8.4-no_rpath.patch
    - replace tcl-8.4.5-autoconf.patch by tcl-8.4-autoconf.patch
  - no longer obsolete itcl


author: Jens Petersen <petersen@redhat.com> - 8.4.5-6
changelog:
  - apply tcl-8.4.5-autoconf.patch to build with autoconf 2.5x
    (Robert Scheck, #116773)
  - use %{name} more extensively for script portability
  - run "make test" by default when building (can be disabled with
    "--without check")
  - add a backwards compatible symlink {_prefix}/lib/tk8.4 ->
    {_datadir}/tk8.4 (Michal Jaegermann, part of #90160)
  - use "mkdir -p" instead of "mkdirhier" (Robert Scheck, #116771)
  - include some doc files


author: Jens Petersen <petersen@redhat.com> - 8.4.5-2
changelog:
  - put private header files under generic and unix subdirs
  - include real generic/tclPort.h not just a symlink to tclUnixPort.h
  - add tclMath.h to {_includedir}/tcl-private/generic for building tk
  - remove build remnants from tclConfig.sh


author: Jens Petersen <petersen@redhat.com> - 8.4.5-1
changelog:
  - new package split out from tcltk
  - update to tcl 8.4.5 (#88429)
    - drop tcl-8.3.3-heiierarchy.patch, tcl-8.3.3-dlopen.patch
  	 and tcl8.3.5-koi8-u.enc-88806.patch
  - include private include headers under {_includedir}/tcl-private
  - filtered changelog for tcl
  - buildrequire autoconf213 (#110583) [mvd@mylinux.com.ua]


author: Jens Petersen <petersen@redhat.com> - 8.3.5-90
changelog:
  - split out devel files from tcl and tk into -devel subpackages (#90087)
  - fix tcl package path in tclConfig.sh to point to datadir (#90160)
    [reported by Michal Jaegermann]
  - remove gratuitous whitespace in koi8-u.enc (#88806)
    [reported with fix by Victor Cheburkin]
  - update ucs4 patch to also change regcustom.h, but disable it for now (#89098)


author: Jens Petersen <petersen@redhat.com> 8.3.5-76
changelog:
  - make it build on x86_64 (details below)
  - don't explicitly update config.{guess,sub} since %configure does it for us
  - added "--without check" rpmbuild option to disable running tests in future
  - build and install tcl and tk with script files under datadir (not libdir)
  - generate filelists from datadir and not from mandir from now on


author: Jens Petersen <petersen@redhat.com>
changelog:
  - update to tcl-8.3.4, tk-8.3.4 (#75600), tcllib-1.3, itcl-3.2.1,
    tix-8.1.3 (#59098)
  - drop obsolete tcl cruft, tcl refcount, tix perf patches
  - added tcltk html manual
  - drop the crud compat dir symlinks in libdir
  - package now builds without tcl or tk installed (partly #52606)
    - replace all relative paths by absolutes ones, using new tcltktop
    - give absolute paths to tcl and tk when configuring
    - give buildroot bindir path to tcllib make
    - export buildroot libdir in LD_LIBRARY_PATH when installing
  - replace tclvers and tkvers by tcltkvers and use it
  - replace tcl_major and tk_major by tcltk_major and use it
  - don't explicitly provide 64bit libs on ia64 and sparc64


author: Adrian Havill <havill@redhat.com>
changelog:
  - used %makeinstall to brute force fix any remaining unflexible makefile dirs
  - fixed bad ref count release in tcl (bug 49406)
  - revert --enable-threads, linux is (still) not ready (yet) (bug 49251)


author: Remi Collet <remi@fedoraproject.org> 1:1.9.4-14
changelog:
  - add explicit requires on all needed extensions (phpci)
  - fix pecl launcher (need ini to be parsed for some
    extenstions going to be build as shared, mainly simplexml)
  - add fix for new unpack format (php 5.5)


author: Remi Collet <remi@fedoraproject.org> 1:1.9.4-9
changelog:
  - move tests to /usr/share/tests/pear
  - move pkgxml to /var/lib/pear
  - remove XML_RPC
  - refresh installer


author: Remi Collet <remi@fedoraproject.org> 1:1.9.4-6
changelog:
  - fix Obsoletes version for XML_Util (#226295)
  - add link to upstream bug - please Provides LICENSE file
    https://pear.php.net/bugs/bug.php?id=19368
  - add link to upstream bug - Incorrect FSF address
    https://pear.php.net/bugs/bug.php?id=19367


author: Remi Collet <remi@fedoraproject.org> 1:1.9.4-5
changelog:
  - Update Archive_Tar to 1.3.9
  - add patch from RHEL (Joe Orton)
  - fix install-pear.php URL (with our patch for doc_dir applied)


author: Tim Jackson <rpm@timj.co.uk> 1:1.7.1-2
changelog:
  - Set cfg_dir to be %{_sysconfdir}/pear (and own it)
  - Update install-pear.php script
  - Add %pear_cfgdir and %pear_wwwdir macros


author: Remi Collet <Fedora@FamilleCollet.com> 1:1.6.2-1
changelog:
  - update to 1.6.2
  - remove patches merged upstream
  - Fix : "pear install" hangs on non default channel (#283401)


author: Joe Orton <jorton@redhat.com> 1:1.4.11-3
changelog:
  - use BuildArch not BuildArchitectures (#226925)
  - fix to use preferred BuildRoot (#226925)
  - strip more buildroot-relative paths from *.reg
  - force correct gpg path in default pear.conf


author: Joe Orton <jorton@redhat.com> 1:1.4.9-2
changelog:
  - update to 1.4.9 (thanks to Remi Collet, #183359)
  - package /usr/share/pear/.pkgxml (#190252)
  - update to XML_RPC-1.4.8
  - bundle the v3.0 LICENSE file


author: Jaromir Capik <jcapik@redhat.com> 3.2.1-13
changelog:
  - saxon dependency removed - not needed
  - minor spec file changes according to the latest guidelines


author: Carl Green <carlgreen at gmail.com> - 3.2.1-5
changelog:
  - Remove source and patches no longer needed for Maven
  - Fix non-standard groups and remove empty sections
  - Fix file permissions


author: Carl Green <carlgreen at gmail.com> - 3.2.1-4
changelog:
  - Renamed from jakarta-commons-collections
  - Updated to use maven2
  - Replaced saxon:group instruction with xsl:for-each-group in pom-maven2jpp-newdepmap.xsl


author: Honza Horak <hhorak@redhat.com> - 2.0.35-19
changelog:
  - Spec file cleanup
  - Compile and run test suite during build
  - Using chrpath to get rid of --rpath in gd-progs


author: Than Ngo <than@redhat.com> 2.0.33-1
changelog:
  - 2.0.33 #150717
  - apply the patch from Jose Pedro Oliveira
    - Added the release macro to the subpackages requirements versioning
    - Handled the gdlib-config movement to gd-devel in a differment manner
    - Added fontconfig-devel to the build requirements
    - Added xorg-x11-devel to the build requirements (Xpm)
    - Removed explicit /sbin/ldconfig requirement (gd rpm)
    - Removed explicit perl requirement (gd-progs rpm)
    - Added several missing documentation files (including the license file)
    - Replaced %makeinstall by make install DESTDIR=...


author: Phil Knirsch <pknirsch@redhat.com> 2.0.27-1
changelog:
  - Updated to 2.0.27 due to:
    o Potential memory overruns in gdImageFilledPolygon. Thanks to John Ellson.
    o The sign of Y-axis values returned in the bounding box by gdImageStringFT
      was incorrect. Thanks to John Ellson and Riccardo Cohen.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.8.4-3
changelog:
  - There's really no reason to link against both freetype 1.x and 2.x,
    especially when gd is configured to use just freetype 2.x. ;)


author: Philipp Knirsch <Philipp.Knirsch@redhat.de>
changelog:
  - Fixed bug #22001 where during installation the .so.1 and the so.1.8 links
    didn't get installed and therefore updates had problems.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - define HAVE_LIBTTF to actually enable ttf support (oops, #18299)
  - remove explicit dependencies on libpng, libjpeg, et. al.
  - add BuildPrereq: freetype-devel


author: Petr Menšík <pemensik@redhat.com> - 12:4.2.5-74
changelog:
  - Use bind-export-libs package instead of bind99
  - Use isc-config.sh to configure bind libs
  - Change requirement to bind-export-devel
  - Compile with recent bind includes, that does not include isc/util.h


author: Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-55
changelog:
  - Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
  - Fix syntax error in attr


author: Pavel Šimerda <psimerda@redhat.com> - 12:4.2.5-48
changelog:
  - Resolves: #1302282 - systemd fails to keep dhcpd running after repeated
    restarts by NetworkManager dispatcher.d script


author: Zdenek Dohnal <zdohnal@redhat.com> - 12:4.2.5-44
changelog:
  - 1269596 - dhclient-script doesn't keep old nameservers
  - 1193586 - DHCP renewal does not update lifetimes if MTU has changed
  - 1306608 - Add ignore-client-uids option to dhcpd
  - 1267489 - dhclient-script does not respect DEFROUTE/GATEWAYDEV


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-38
changelog:
  - correctly set IB's hw->hlen and add more randomness into xid generation (#1195693)
  - send unicast request/release via correct interface (#1177351)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-37
changelog:
  - dhcpd generates spurious responses when seeing requests from vlans on plain interface (#1175350)
  - option 97 - pxe-client-id (#1175422)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-34
changelog:
  - Use network-online.target instead of network.target (#1145832)
  - dhclient-script: restorecon calls shouldn't be needed
                     as we have SELinux transition rules (#1161500)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-30
changelog:
  - 11-dhclient: handle "dhcp4-change" and limit it to chrony/ntp (#1093490)
  - [dhclient -6] infinite preferred/valid lifetime represented as -1 (#1133839)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-29
changelog:
  - dhclient-script: fix stateless DHCPv6 mode (#1101149)
  - Add GUIDs in the DHCP logs for IPoIB. (#1109947)
  - dhclient-script: handle option 121 properly (#1109949)
  - dhclient-script: it's OK if the arping reply comes from our system (#1116004)
  - dhclient-script: PREINIT6: make sure link-local address is available (#1130803)
  - dhclient-script: IPv6 address which fails DAD is auto-removed when it was
               added with valid_lft/preferred_lft other then 'forever' (#1133465)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-5
changelog:
  - remove missing-ipv6-not-fatal.patch because the concerning code is later
    removed with getifaddrs.patch


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-2
changelog:
  - during update convert DHC*ARGS from /etc/sysconfig/dhc*
    to /etc/systemd/system/dhc*.service (#895475)
  - 12-dhcpd NM dispatcher script now restarts also dhcpd6 service


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.4-22.P2
changelog:
  - add After=time-sync.target to dhcpd[6].service (#878293)
  - remove groff from BuildRequires (no idea why it's been there)


author: Tomas Hozza <thozza@redhat.com> - 12:4.2.4-14.P1
changelog:
  - SystemD unit files don't use Environment files any more (#850558)
  - NetworkManager dispatcher script doesn't use DHCPDARGS any more


author: Tomas Hozza <thozza@redhat.com> - 12:4.2.4-12.P1
changelog:
  - dhclient-script: fixed CONFIG variable value passed to need_config (#848858)
  - dhclient-script: calling dhclient-up-hooks after setting up route, gateways 
                     & interface alias (#848869)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.4-6
changelog:
  - ib.patch: added fall-back method (using ioctl(SIOCGIFHWADDR)) when getting
              of HW address with getifaddrs() fails (#626514-c#63, #840601).


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.4-0.5.rc1
changelog:
  - dhcpd.service: explicitly add -cf to indicate what conf file we use (#819325)
  - no need to copy /etc/*.conf to /etc/dhcp/*.conf in %prep anymore


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-11.P1
changelog:
  - revert change made in 4.2.3-3 because of failing failover inicialization (#765967)
    the procedure is now:
    init lease file, init failover, init PID file, change effective user/group ID
  - don't need to fix lease files ownership before starting service
  - dhclient-script: allow static route with a 0.0.0.0 next-hop address (#769463)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-10.P1
changelog:
  - hopefully we don't need 12-dhcpd anymore as 'After=network.target'
    in dhcpd[6].service should take care of the original problem (#565921)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-9.P1
changelog:
  - don't ship legacy SysV initscripts
  - dhcpd6: move '-cf /etc/dhcp/dhcpd6.conf' from sysconfig/dhcpd6 to dhcpd6.service
  - run 'chown -R dhcpd:dhcpd /var/lib/dhcpd/' before starting dhcpd/dhcpd6 service
    for the case where leases file is owned by root:root as a
    consequence of running dhcpd without '-user dhcpd -group dhcpd' (#744292)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-7
changelog:
  - Send DHCPDECLINE and exit(2) when duplicate address was detected and
    dhclient had been started with '-1' (#756759).
  - Don't build with -D_GNU_SOURCE, configure.ac uses AC_USE_SYSTEM_EXTENSIONS


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-3
changelog:
  - Write lease file AFTER changing of the effective user/group ID.
  - Move omshell from dhcp-common to main package (where it originally was).


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-2
changelog:
  - Write PID file BEFORE changing of the effective user/group ID.
  - Really define _hardened_build this time


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-12
changelog:
  - change ownership of /var/lib/dhcpd/ to dhcpd:dhcpd (#744292)
  - no need to drop capabilies in dhcpd since it's been running as regular user


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-7
changelog:
  - Support for IPoIB (IP over InfiniBand) interfaces (#660681)
  - Hopefully last tweak of adding of user and group (#699713)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-6
changelog:
  - PIE-RELRO.patch is not needed anymore, defining _hardened_build does the same
  - One more tweak of adding of user and group (#699713)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-3
changelog:
  - Tighten explicit libs sub-package requirement so that it includes
    the correct architecture as well.


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-2
changelog:
  - #699713:
    - Use '--enable-paranoia --enable-early-chroot' configure flags
    - Create/delete dhcpd user in %post/%postun
    - Run dhcpd/dhcpd6 services with '-user dhcpd -group dhcpd'


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-0.1.b1
changelog:
  - 4.2.2b1: upstream merged initialization-delay.patch
  - Drop all capabilities in dhcpd/dhcrelay (#699713)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-12.P1
changelog:
  - Removed upstream-merged IFNAMSIZ.patch
  - Polished patches according to results from static analysis of code.


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-11.P1
changelog:
  - Add triggerpostun scriptlet tied to dhcp-sysvinit
  - Make it possible to build without downstream patches (Kamil Dudka)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-9.P1
changelog:
  - Packages dhcp/dhclient/dhcp-common explicitly require the libs sub-package
    with the same version and release (bug #705037).
  - Fix triggerun scriptlet


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-0.1.b1
changelog:
  - 4.2.1b1: fix for CVE-2011-0413 (#672996)
  - No longer need invalid-dhclient-conf, parse_date and release6-elapsed patches


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-22.P2
changelog:
  - 4.2.0-P2: fix for CVE-2010-3616 (#662326)
  - Use upstream fix for #628258
  - Provide versioned symbols for rpmlint


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-16.P1
changelog:
  - 4.2.0-P1: fix for CVE-2010-3611 (#649880)
  - dhclient-script: when updating 'search' statement in resolv.conf,
    add domain part of hostname if it's not already there (#637763)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-12
changelog:
  - Server was ignoring client's
    Solicit (where client included address/prefix as a preference) (#634842)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-11
changelog:
  - Use ping instead of arping in dhclient-script to handle
    not-on-local-net gateway in ARP-less device (#524298)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-10
changelog:
  - Check whether there is any unexpired address in previous lease
    prior to confirming (INIT-REBOOT) the lease (#585418)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-8
changelog:
  - Explicitly clear the ARP cache and flush all addresses & routes
    instead of bringing the interface down (#574568)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-2
changelog:
  - Add 12-dhcpd NM dispatcher script (#565921)
  - Rename 10-dhclient to 11-dhclient (10-sendmail already exists)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-23.P1
changelog:
  - 4.1.1-P1: pair of bug fixes including one for CVE-2010-2156 (#601405)
  - Compile with -fno-strict-aliasing


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-20
changelog:
  - Move /etc/NetworkManager/dispatcher.d/10-dhclient script
    from dhcp to dhclient subpackage (#586999)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-18
changelog:
  - If the Reply was received in response to Renew or Rebind message,
    client adds any new addresses in the IA option to the IA (#578097)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-16
changelog:
  - In client initiated message exchanges stop retransmission
    upon reaching the MRD rather than at some point after it (#559153)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-15
changelog:
  - In dhclient-script check whether bound address
    passed duplicate address detection (DAD) (#559147)
  - If the bound address failed DAD (is found to be in use on the link),
    the dhcpv6 client sends a Decline message to the server
    as described in section 18.1.7 of RFC-3315 (#559147)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-14
changelog:
  - Fix UseMulticast.patch to not repeatedly parse dhcpd.conf for unicast option
  - Fix dhclient-script to set interface MTU only when it's greater than 576 (#574629)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-13
changelog:
  - Discard unicast Request/Renew/Release/Decline message
    (unless we set unicast option) and respond with Reply
    with UseMulticast Status Code option (#573090)
  - Remove DHCPV6 OPERATION section from dhclient.conf.5
    describing deprecated 'send dhcp6.oro' syntax


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-9
changelog:
  - In dhclient-script:
    - use ip command options '-4' or '-6' as shortcuts for '-f[amily] inet' resp. '-f[amily] inet6'
    - do not use IP protocol family identifier with 'ip link'


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-4
changelog:
  - Fix dhclient-script to delete address which the client is going to release
    as soon as it begins the Release message exchange process (#559142)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-3
changelog:
  - move /etc/dhcp.conf to /etc/dhcp.conf.rpmsave in %post (#561094)
  - document -nc option in dhclient(8) man page


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.0p1-18
changelog:
  - Hide startup info when starting dhcpd6 service.
  - Remove -TERM from calling killproc when stopping dhcrelay (#555672)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.0p1-15
changelog:
  - dhclient logs its pid to make troubleshooting NM managed systems
    with multiple dhclients running easier (#546792)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-4
changelog:
  - Upgrade to latest ldap-for-dhcp patch which makes sure that only
    dhcpd links with OpenLDAP (#517474)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-3
changelog:
  - Update NetworkManager dispatcher script to remove case conversion
    and source /etc/sysconfig/network


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-2
changelog:
  - Add /usr/lib[64]/pm-utils/sleep.d/56dhclient to handle suspend and
    resume with active dhclient leases (#479639)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-22
changelog:
  - Set permissions on /etc/dhcp to 0750 (#508247)
  - Update to new ldap-for-dhcp patch set
  - Correct problems when upgrading from a previous release and your
    dhcpd.conf file not being placed in /etc/dhcp (#506600)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-21
changelog:
  - Handle cases in add_timeout() where the function is called with a NULL
    value for the 'when' parameter (#506626)
  - Fix SELinux denials in dhclient-script when the script makes backup
    configuration files and restores them later (#483747)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-19
changelog:
  - Restrict interface names given on the dhcpd command line to length
    IFNAMSIZ or shorter (#441524)
  - Change to /etc/sysconfig/network-scripts in dhclient-script before
    calling need_config or source_config (#496233)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-17
changelog:
  - Fix setting default route when client IP address changes (#486512, #473658)
  - 'reload' and 'try-restart' on dhcpd and dhcrelay init scripts
    will display usage information and return code 3


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-16
changelog:
  - Correct %post problems in dhclient package (#495361)
  - Read hooks scripts from /etc/dhcp (#495361)
  - Update to latest ldap-for-dhcp


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-6
changelog:
  - Enable dhcpv6 support (#480798)
  - Fix config file migration in scriptlets (#480543)
  - Allow dhclient-script expansion with /etc/dhcp/dhclient.d/*.sh scripts


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-2
changelog:
  - Make sure all /etc/dhcp config files are marked in the manifest
  - Include new config file directies in the dhcp and dhclient packages
  - Do not overwrite new config files if they already exist


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-1
changelog:
  - Upgraded to ISC dhcp-4.1.0
  - Had to rename the -T option to -timeout as ISC is now using -T
  - Allow package rebuilders to easily enable DHCPv6 support with:
        rpmbuild --with DHCPv6 dhcp.spec
    Note that Fedora is still using the 'dhcpv6' package, but some
    users may want to experiment with the ISC DHCPv6 implementation
    locally.


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-32
changelog:
  - Enable LDAP/SSL support in dhcpd (#467740)
  - Do not calculate a prefix for an address we did not receive (#473885)
  - Removed libdhcp4client because libdhcp has been removed from Fedora


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-31
changelog:
  - Use O_CLOEXEC in open(2) calls and "e" mode in fopen(3) calls, build
    with -D_GNU_SOURCE so we pick up O_CLOEXEC (#468984)
  - Add missing prototype for validate_port() in common/inet.c


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-30
changelog:
  - Fix dhclient.conf man page and sample config file to say 'supersede
    domain-search', which is what was actually demonstrated (#467955)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-26
changelog:
  - Validate port numbers for dhclient, dhcpd, and dhcrelay to ensure
    that are within the correct range (#438149)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-23
changelog:
  - Prevent $metric from being set to '' (#460640)
  - Remove unnecessary warning messages
  - Do not source config file (ifcfg-DEVICE) unless it exists


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-22
changelog:
  - Add missing '[' to dhclient-script (#459860)
  - Correct test statement in add_default_gateway() in dhclient-script (#459860)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-20
changelog:
  - Rewrite of /sbin/dhclient-script (make the script a little more readable,
    discontinue use of ifconfig in favor of ip, store backup copies of orig
    files in /var rather than in /etc)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-19
changelog:
  - Remove 'c' from the domain-search format string in common/tables.c
  - Prevent \032 from appearing in resolv.conf search line (#450042)
  - Restore SELinux context on saved /etc files (#451560)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-17
changelog:
  - Carry over RES_OPTIONS from ifcfg-ethX files to /etc/resolv.conf (#202923)
  - Clean up Requires tags for devel packages
  - Allow SEARCH variable in ifcfg files to override search path (#454152)
  - Do not down interface if there is an active lease (#453982)
  - Clean up how dhclient-script restarts ypbind
  - Set close-on-exec on dhclient.leases for SELinux (#446632)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-16
changelog:
  - Remove instaces of \032 in domain search option (#450042)
  - Make 'service dhcpd configtest' display text indicating the status


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-12
changelog:
  - Remove Requires on openldap-server (#432180)
  - Replace CLIENTBINDIR, ETCDIR, DBDIR, and RUNDIR in the man pages with the
    correct paths


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-10
changelog:
  - Save conf files adding '.predhclient.$interface' to the name (#306381)
  - Only restore conf files on EXPIRE/FAIL/RELEASE/STOP if there are no other
    dhclient processes running (#306381)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-9
changelog:
  - Match LDAP server option values in stables.c and dhcpd.h (#431003)
  - Fix invalid sprintf() statement in server/ldap.c (#431003)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-6
changelog:
  - read_function() comes from the LDAP patch, so fix it there
  - Init new struct universe structs in libdhcp4client so we don't crash on
    multiple DHCP attempts (#428203)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-4
changelog:
  - Fix dhclient.lease file parsing problems (#428785)
  - Disable IPv6 support for now as we already ship dhcpv6 (#428987)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-1
changelog:
  - Upgrade to ISC dhcp-4.0.0 (#426634)
       - first ISC release to incorporate DHCPv6 protocol support
       - source tree now uses GNU autoconf/automake
  - Removed the libdhcp4client-static package


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-8
changelog:
  - Put dhcp.schema in /etc/openldap/schema (#330471)
  - Remove manpages patch and keep modified man pages as Source files
  - Improve dhclient.8 man page to list options in a style consistent
    with most other man pages on the planet
  - Upgrade to latest dhcp LDAP patch, which brings in a new dhcpd-conf-to-ldap
    script, updated schema file, and other bug fixes including SSL support for
    LDAP authentication (#375711)
  - Do not run dhcpd and dhcrelay services by default (#362321)


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-6
changelog:
  - Rename Makefile.dist to Makefile.libdhcp4client
  - Spec file cleanups
  - Include stdarg.h in libdhcp_control.h


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-5
changelog:
  - Remove chkconfig usage for ypbind in dhclient-script (#351211)
  - Combine dhcp-static and dhcp-devel packages since there are no shared
    libraries offered
  - Remove Requires: openldap-devel on dhcp-devel and libdhcp4client-devel
  - Make libdhcp4client-devel require dhcp-devel (for libdhcp_control.h)
  - Do not make dhcp-devel require the dhcp package, those are independent


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-4
changelog:
  - Install libdhcp_control.h to /usr/include/isc-dhcp/libdhcp_control.h
  - Update libdhcp4client patch to use new libdhcp_control.h location
  - Remove __fedora_contrib/ subdirectory in /usr/share/doc/dhcp-3.1.0,
    install those docs to /usr/share/doc/dhcp-3.1.0


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-1
changelog:
  - Upgrade to ISC dhcp-3.1.0
  - Remove unnecessary /usr/include/dhcp4client/isc_dhcp headers
  - Make sure restorecon is run on /var/lib/dhcpd/dhcpd.leases (#251688)
  - Install dhcp.schema to /etc/openldap/dhcp.schema (#330471)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-8
changelog:
  - Init script fixes (#320761)
  - Removed linux.dbus-example script since we aren't using dhcdbd now
  - Remove dhcdbd leftovers from dhclient-script (#306381)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-7
changelog:
  - In dhcp.conf.5, explain that if no next-server statement applies to the
    requesting client, the address 0.0.0.0 is used (#184484).


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-3
changelog:
  - Remove the -x switch enabling extended new option info.  If given to
    dhclient now, it's ignored.


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-36
changelog:
  - BOOTP_BROADCAST_ALWAYS is not the same as ATSFP, fixed
  - Added anycast mac support to dhclient for OLPC


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-35
changelog:
  - Disable -fvisibility=hidden for now as it breaks dhcpv4_client() from
    the shared library (#240804)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-34
changelog:
  - Init script fixes (#237985, #237983)
  - Reference correct scripts in dhclient-script.8 man page (#238036)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-31
changelog:
  - Spec file cleanups (#225691)
  - Put libdhcpctl.a and libomapi.a in dhcp-devel-static package
  - Put libdhcp4client.a in libdhcp4client-devel-static package


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-27
changelog:
  - Ensure that Perl and Perl modules are not added as dependencies (#234688)
  - Reorganize patches by feature/bug per packaging guidelines (#225691)
  - Move the following files from patches to source files:
       linux.dbus-example, linux, Makefile.dist, dhcp4client.h, libdhcp_control.h
  - Compile with -fno-strict-aliasing as ISC coding standards generally don't
    agree well with gcc 4.x.x


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-24
changelog:
  - Include contrib/ subdirectory in /usr/share/doc (#230476)
  - Added back Requires for perl since dhcpd-conf-to-ldap needs it (#225691)
  - Put copies of dhcp-options and dhcp-eval man pages in the dhcp and
    dhclient packages rather than having the elaborate symlink collection
  - Explicitly name man pages in the %files listings
  - Use the %{_sysconfdir} and %{_initrddir} macros (#225691)
  - Use macros for commands in %build and %install
  - Split README.ldap, draft-ietf-dhc-ldap-schema-01.txt, and
    dhcpd-conf-to-ldap.pl out of the LDAP patch
  - Split linux.dbus-example script out of the extended new option info patch
  - Remove unnecessary changes from the Makefile patch


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-23
changelog:
  - Update Xen partial checksums patch
  - Remove perl Requires (#225691)
  - Make dhcp-devel depend on dhcp = e:v-r (#225691)
  - libdhcp4client-devel Requires pkgconfig (#225691)
  - Do not add to RPM_OPT_FLAGS, use COPTS variable instead (#225691)
  - Use %{buildroot} macro instead of RPM_BUILD_ROOT variable (#225691)
  - Preserve timestamps on all installed data files (#225691)
  - Remove dhcp-options.5.gz and dhcp-eval.5.gz symlinking in post (#225691)
  - Use %defattr(-,root,root,-) (#225691)
  - Do not flag init scripts as %config in %files section (#225691)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-13
changelog:
  - Add support for dhcpd(8) to read dhcpd.conf from an LDAP server (#224352)
  - Remove invalid ja_JP.eucJP man pages from /usr/share/doc


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-9
changelog:
  - Remove dhcptables.pl from the source package
  - Mark libres.a symbols hidden (#198496)
  - Set DT_SONAME on libdhcp4client to libdhcp4client-VERSION.so.0
  - Make function definition for dst_hmac_md5_init() match the prototype


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-8
changelog:
  - Roll md5 patch in to libdhcp4client patch since it's related
  - Do not overwrite /etc/ntp/step-tickers (#217663)
  - Resolves: rhbz#217663


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-4
changelog:
  - Enable relinquish_timeouts() and cancel_all_timeouts() even when
    DEBUG_MEMORY_LEAKAGE_ON_EXIT is not defined
  - Add prototypes for b64_pton() and b64_ntop in dst/
  - Move variable declarations and labels around in the fix-warnings patch
  - Expand the list of objects needed for libdhcp4client (#215328)
  - Use libres.a in libdhcp4client since it gives correct minires objects
  - Remove the dhcp options table in C, Perl, Python, and text format (these
    were reference files added to /usr/share/doc)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-3
changelog:
  - Remove struct universe *universe from envadd_state in the client patch
  - Add struct universe *universe to envadd_state in the enoi patch
  - Add example dbusified dhclient-script in the enoi patch


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-2
changelog:
  - Change the way libdhcp4client is compiled (patch main source, create new
    Makefile rather than copy and patch code after main patches)
  - Fix up problems generating compiler warnings
  - Use 'gcc' for making dependencies
  - Pass -fPIC instead of -fpie/-fPIE in compiler flags
  - Combine the extended new option info changes in to one patch file (makes
    it easier for outside projects that want to use dhcdbd and NetworkManager)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.4-24
changelog:
  - Put typedef for dhcp_state_e before it's used in libdhcp_control.h (#212612)
  - Remove dhcpctl.3 from minires/Makefile.dist because it's in dhcpctl
  - Remove findptrsize.c and just set compiler flag for ppc64 and s390x


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.4-23
changelog:
  - Remove NODEBUGINFO junk from the spec file as well as old/unused code
  - Rolled all 68 patches in to one patch since more than half of them get
    overridden by later patches anyway.


author: Peter Jones <pjones@redhat.com> - 12:3.0.4-15
changelog:
  - Make timeout dispatch code not recurse while traversing a linked
    list, so it doesn't try to free an entries that have been removed.
    (bz #195723)
  - Don't patch in a makefile, do it in the spec.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-14
changelog:
  - fix bug 191461: preserve ntp.conf local clock fudge statements
  - fix bug 193047: both dhcp and dhclient need to ship common
                    man-pages: dhcp-options(5) dhcp-eval(5)


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-10
changelog:
  - fix bug 193047: allow $METRIC to be specified for dhclient routes
  - add a '-R <request option list>' dhclient argument


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-8.1
changelog:
  - fix a libdhcp4client memory leak (1 strdup) and 
    fill in client->packet.siaddr before bind_lease() for pump
    nextServer option.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Fix bug 191470: prevent dhcpd writing 8 byte dhcp-lease-time 
                    option in packets on 64-bit platforms


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Add the libdhcp4client library package for use by the new libdhcp 
    package, which enables dhclient to be invoked by programs in a 
    single process from the library. The normal dhclient code is
    unmodified by this.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-1
changelog:
  - Upgrade to upstream version 3.0.4, released Friday 2006-05-05 .
  - Add new dhclient command line arguments:
    -H <host-name> : parse as dhclient.conf 'send host-name "<host-name>";'
    -F <fqdn>      : parse as dhclient.conf 'send fqdn.fqdn "<fqdn>";'
    -T <timeout>   : parse as dhclient.conf 'timeout <timeout>;'


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-26
changelog:
  - fix bug 181908: enable dhclient to operate on IBM zSeries z/OS linux guests:
    o add -I <dhcp-client-identifier> dhclient command line option
    o add -B "always broadcast" dhclient command line option
    o add 'bootp-broadcast-always;' dhclient.conf statement


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-22
changelog:
  - fix bug 181482: resolv.conf not updated on RENEW :
    since dhcp-3.0.1rc12-RHScript.patch: "$new_domain_servers" should have
    been "$new_domain_name_servers" :-(


author: Dan Williams <dcbw@redhat.com> - 11:3.0.3-21
changelog:
  - Fix dhclient-script to use /bin/dbus-send now that all dbus related
    binaries are in /bin rather than /usr/bin


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-20
changelog:
  - fix bug 177845: allow client ip-address as default router 
  - fix bug 176615: fix DDNS update when Windows-NT client sends 
                    host-name with trailing nul


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-12
changelog:
  - fix bug 173619: dhclient-script should reconfig on RENEW if 
                    subnet-mask, broadcast-address, mtu, routers, etc.
                    have changed
  - apply upstream improvements to trailing nul options fix of bug 160655


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-11
changelog:
  - Rebuild for FC-5
  - fix bug 167028 - test IBM's unicast bootp patch (from xma@us.ibm.com)
  - fix bug 171312 - silence chkconfig error message if ypbind not installed
  - fix dhcpd.init when -cf arg given to dhcpd
  - make dhcpd init touch /var/lib/dhcpd/dhcpd.leases, not /var/lib/dhcp/dhcpd.leases


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-10
changelog:
  - Allow dhclient route metrics to be specified with DHCP options:
    The dhcp-options(5) man-page states:
    'option routers ... Routers should be listed in order of preference' 
    and
    'option static-routes ... are listed in descending order of priority' .
    No preference / priority could be set with previous dhclient-script .
    Now, dhclient-script provides: 
    Default Gateway (option 'routers') metrics:
      Instead of allowing only one default gateway, if more than one router 
      is specified in the routers option, routers following the first router
      will have a 'metric' of their position in the list (1,...N>1).
    Option static-routes metrics:
      If a target appears in the list more than once, routes for duplicate
      targets will have successively greater metrics, starting at 1.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-8
changelog:
  - further fix for bug 160655 / ISC bug 15293 - upstream patch:
    do NOT always strip trailing nulls in the dhcpd server
  - handle static-routes option properly in dhclient-script :
    trailing 0 octets in the 'target' IP specify the class -
    ie '172.16.0.0 w.x.y.z' specifies '172.16/16 via w.x.y.z'.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-7
changelog:
  - fix bug 169164: separate /var/lib/{dhcpd,dhclient} directories
  - fix bug 167292: update failover port info in dhcpd.conf.5; give
                    failover ports default values in server/confpars.c


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-6
changelog:
  - fix bug 167273: time-offset should not set timezone by default
                    tzdata's Etc/* files are named with reverse sign
                    for hours west - ie. 'GMT+5' is GMT offset -18000seconds.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-4
changelog:
  - fix bug 166926: make dhclient-script handle interface-mtu option
    make dhclient-script support /etc/dhclient{,-$IF}-{up,down}-hooks scripts
    to allow easy customization to support other non-default DHCP options -
    documented in 'man 8 dhclient-script' .
  - handle the 'time-offset' DHCP option, requested by default.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-3
changelog:
  - fix bug 160655: strip trailing '\0' bytes from text options before append
  - fix gcc4 compiler warnings ; now compiles with -Werror
  - add RPM_OPT_FLAGS to link as suggested in gcc man-page on '-pie' option
  - change ISC version string to 'V3.0.3-RedHat' at request of ISC


author: Jason Vas Dias <jvdias@redhat.com> 11:3.0.3-1
changelog:
  - Upgrade to upstream version 3.0.3 
  - Don't apply the 'default boot file server' patch: legacy
    dhcp behaviour broke RFC 2131, which requires that the siaddr
    field only be non-zero if the next-server or tftp-server-name
    options are specified.
  - Try removing the 1-5 second wait on dhclient startup altogether.
  - fix bug 163367: supply default configuration file for dhcpd


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.3rc1-1
changelog:
  - Upgrade to upstream version 3.0.3rc1
  - fix bug 163203: silence ISC blurb on configtest 
  - fix default 'boot file server' value (packet->siaddr):
    In dhcp-3.0.2(-), this was defaulted to the server address;
    now it defaults to 0.0.0.0 (a rather silly default!) and
    must be specified with the 'next-server' option (not the tftp-boot-server
    option ?!?) which causes PXE boot clients to fail to load anything after
    the boot file.


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-14
changelog:
  - Fix bug 159929: prevent dhclient flooding network on repeated DHCPDECLINE
  - dhclient fast startup:
     remove dhclient's  random 1-5 second delay on startup if only
     configuring one interface
     remove dhclient_script's "sleep 1" on PREINIT
  - fix new gcc-4.0.0-11 compiler warnings for binding_state_t


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-11
changelog:
  - as pointed out by Peter Jones, dhclient-script spews
  - 'chkconfig: Usage' if run in init state 1 (runlevel returns "unknown".)
  - this is now corrected.


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-9
changelog:
  - bugs 153244 & 155143 are now fixed with SELinux policy; 
    autotrans now works for dhcpc_t, so restorecons are not required,
    and dhclient runs OK under dhcpc_t with SELinux enforcing.
  - fix bug 155506: 'predhclien' typo (emacs!).


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-8
changelog:
  - Fix bugs 153244 & 155143: 
        o restore dhclient-script 'restorecon's
        o give dhclient and dhclient-script an exec context of
          'system_u:object_r:sbin_t' that allows them to run
          domainname / hostname and to update configuration files
          in dhclient post script.
  - Prevent dhclient emitting verbose ISC 'blurb' on error exit in -q mode


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-7
changelog:
  - Add '-x' "extended option environment" dhclient argument:
  -  When -x option given to dhclient:
  -    dhclient enables arbitrary option processing by writing information
  -    about user or vendor defined option space options to environment.
  -
  - fix bug 153244: dhclient should not use restorecon
  - fix bug 151023: dhclient no 'headers & libraries' 
  - fix bug 149780: add 'DHCLIENT_IGNORE_GATEWAY' variable
  - remove all usage of /sbin/route from dhclient-script


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-8
changelog:
  - Add better execshield security link options
  - fix dhcpd.init when no /etc/dhcpd.conf exists and -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-4
changelog:
  - make dhclient-script TIMEOUT mode do exactly the same configuration
  - as BOUND / RENEW / REBIND / REBOOT if router ping succeeds


author: Jason Vas Dias <jvdias@redhat.com> 3.0.2rc3-4
changelog:
  - fix bug 147926: dhclient-script should do restorecon for modified conf files
  - optimize execshield protection


author: Jason Vas Dias <jvdias@redhat.com> 8.3.0.4rc3-3
changelog:
  - fix bug 147375: dhcpd heap corruption on 32-bit 'subnet' masks
  - fix bug 147502: dhclient should honor GATEWAYDEV and GATEWAY settings
  - fix bug 146600: dhclient's timeout mode ping should use -I
  - fix bug 146524: dhcpd.init should discard dhcpd's initial output message
  - fix bug 147739: dhcpd.init configtest should honor -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-17
changelog:
  - fix bug 144250: gcc-3.4.3-11 is broken :
  - log_error ("Lease with bogus binding state: %d size: %d",
  -   comp -> binding_state,
  -   sizeof(comp->binding_state));
  - prints:    'Lease with bogus binding state: 257 1'    !
  - compiling with gcc33 (compat-gcc-8-3.3.4.2 fixes for now).


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-16
changelog:
  - fix bug 143704: dhclient -r does not work if lease held by
  - dhclient run from ifup . dhclient will now look for the pid
  - files created by ifup.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-14
changelog:
  - NTP: fix bug 139715: merge in new ntp servers only rather than replace
  - all the ntp configuration files; restart ntpd if configuration changed.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-12
changelog:
  - fix bug 138181 & bug 139468: do not attempt to listen/send on
  -     unconfigured  loopback, point-to-point or non-broadcast
  -     interfaces (don't generate annoying log messages)
  - fix bug 138869: dhclient-script: check if '$new_routers' is
  -     empty before doing 'set $new_routers;...;ping ... $1'


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-11
changelog:
  - dhcp-3.0.2b1 came out today. A diff of the 'ack_lease' function
  - Dave Hankins and I patched exposed a missing '!' on an if clause
  - that got dropped with the 'new-host' patch. Replacing the '!'.
  - Also found one missing host_dereference.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-10
changelog:
  - clean-up last patch: new-host.patch adds host_reference(host)
  - without host_dereference(host) before returns in ack_lease
  - (dhcp-3.0.1-host_dereference.patch)


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-9
changelog:
  - Fix bug 133522:
  - PXE Boot clients with static leases not given 'file' option
  - 104 by server - PXE booting was disabled for 'fixed-address'
  - clients.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-8
changelog:
  - Fix bug 131212:
  - If "deny booting" is defined for some group of hosts,
  - then after one of those hosts is denied booting, all
  - hosts are denied booting, because of a pointer not being
  - cleared in the lease record. 
  - An upstream patch was obtained which will be in dhcp-3.0.2.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-7
changelog:
  - Forward DNS update by client was disabled by a bug that I
  - found in code where 'client->sent_options' was being
  - freed too early.
  - Re-enabled it after contacting upstream maintainer
  - who confirmed that this was a bug (bug #130069) -
  - submitted patch dhcp-3.0.1.preserve-sent-options.patch.
  - Upstream maintainer informs me this patch will be in dhcp-3.0.2 .


author: Dan Walsh <dwalsh@redhat.com> 1:3.0.1rc14-1
changelog:
  - User kernelversion instead of uname-r
  - Update to latest package from ISC
  - Remove inherit-leases patch for now.


author: Elliot Lee <sopwith@redhat.com> 3.0pl1-8
changelog:
  - More #68650 (modify requested options)
  - Fix #71453 (dhcpctl man page) and #71474 (include libdst.a) and


author: David Sainty <saint@redhat.com> 3.0pl1-1
changelog:
  - Change to dhclient, dhcp, dhcp-devel packaging
  - Move to 3.0pl1, do not strip binaries
  - Drop in sysconfig-enabled dhclient-script


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix booting of JavaStations
    (reported by Pete Zaitcev <zaitcev@metabyte.com>).
  - fix SIGBUS crashes on SPARC (apparently gcc is too clever).


author: Erik Troan <ewt@redhat.com>
changelog:
  - applied patch from Chris Evans which makes the server a bit more paranoid
    about dhcp requests coming in from the wire


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated to build in a buildroot properly
  - don't package up the client, as it doens't work very well <sigh>


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - removed the actual inet.d links (chkconfig takes care of this for us)
    and made the %postun section handle upgrades.


author: Thomas Moschny <thomas.moschny@gmx.de> - 0.3.8-2
changelog:
  - Specfile cleanups as suggested in the review.
  - Remove unneeded BR on pkgconfig.
  - Remove unneeded chrpath call.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-15
changelog:
  - Fixed build in case ocaml is preinstalled in the build root and
    support shouldn't be built
    Resolves: rhbz#1443907


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-14
changelog:
  - Rebuilt for new architectures
    Resolves: rhbz#1379884
  - Added fix to support compilation with ocaml-4.04.0
    Resolves: rhbz#1393750


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-13
changelog:
  - Made brltty-config executable, currently useless, but FHS compliant
    Resolves: rhbz#1332981
  - Fixed multilib
    Related: rhbz#1324850


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-12
changelog:
  - Improved fix for Braille characters not displaying in the XW driver window
    Related: rhbz#1324669


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-11
changelog:
  - Fixed Braille characters not displaying in the XW driver window
    Resolves: rhbz#1324669
  - Added AT-SPI2 driver
    Resolves: rhbz#1324672
  - Fixed requirements
    Resolves: rhbz#1324850


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-10
changelog:
  - Hardened build
    Resolves: rhbz#1092547
  - Fixed Braille display emulator to start
    Resolves: rhbz#1304725


author: Jon Ciesla <limburgher@gmail.com> - 4.5-5
changelog:
  - Add systemd unit file, BZ 916628.
  - Drop spurious post scripts.
  - Move eveything but man pages and license files top -docs.


author: Jon Ciesla <limb@jcomserv.net> - 4.3-1
changelog:
  - New upstream.
  - S_ISCHR patch upstreamed.
  - parallel patch updated.
  - Cleaned up some file encodings.


author: Stepan Kasal <skasal@redhat.com> - 4.1-3
changelog:
  - build the TTY driver (it was disabled since it first appered in 3.7.2-1)
  - build with speech-dispatcher, packed into a separate sub-package


author: Stepan Kasal <skasal@redhat.com> - 4.1-2
changelog:
  - move data-directory back to default: /etc/brltty
  - move brltty to /bin and /lib, so that it can be used to repair the system
    without /usr mounted (#276181)
  - move vstp and libbrlttybba.so to brlapi
  - brltty no longer requires brlapi
  - brlapi now requires brltty from the same build


author: Stepan Kasal <skasal@redhat.com> - 4.1-1
changelog:
  - new upstream version
  - use --disable-stripping instead of make variable override
  - install the default brltty-pm.conf to docdir only (#526168)
  - remove the duplicate copies of rhmkboot and rhmkroot from docdir
  - patch configure so that the dirs in summary are not garbled:
    brltty-autoconf-quote.patch
  - move data-directory to ${datadir}/brltty


author: Stepan Kasal <skasal@redhat.com> - 4.0-2
changelog:
  - escape rpm macros in the rpm change log
  - add requires to bind subpackages from one build together


author: Stepan Kasal <skasal@redhat.com> - 4.0-1
changelog:
  - new upstream version
  - drop upstreamed patches; ./autogen not needed anymore
  - pack the xbrlapi server; move its man page to brlapi package
  - add man-page for brltty.conf (#526168)


author: Stepan Kasal <skasal@redhat.com> - 3.10-4
changelog:
  - own the tcl subdirectory (#474032)
  - set CPPFLAGS to java include dirs, so that the java bindings build with
    any java implementation (#498964)
  - add --without-curses; there is no curses package BuildRequired anyway


author: Stepan Kasal <skasal@redhat.com> - 3.10-1
changelog:
  - new upstream release
  - drop brltty-3.9-java-svn.patch, brltty-3.9-tcl85path.patch,
    and brltty-3.9-pyxfix.patch, they are upstream
  - fix BuildRoot
  - fix many sub-packages' Requires on brlapi


author: Stepan Kasal <skasal@redhat.com> - 3.9-3
changelog:
  - add brltty-3.9-autoconf.patch to fix to build with Autoconf 2.62
  - add brltty-3.9-parallel.patch to fix race condition with parallel make
  - add brltty-3.9-pyxfix.patch to fix build with current pyrex
  - Summary lines shall not end with a dot


author: Tomas Janousek <tjanouse@redhat.com> - 3.8-1
changelog:
  - update to latest upstream
  - added the at-spi driver, tcl and python bindings
  - fixed the license tags


author: Adrian Havill <havill@redhat.com> 3.2-2
changelog:
  - changed spec "Copyright" to "License"
  - use %configure macro, %{_libdir} for non-ia32 archs
  - removed unnecessary set and unset, assumed/default spec headers
  - fixed unpackaged man page, duplicate /bin and /lib entries
  - use plain install vs scripts for non-i386 buildsys


author: Brian Pepple <bpepple@fedoraproject.org> - 0.11.4-1
changelog:
  - Update to 0.11.4.
  - Add BR on python-twisted, dbus-python, and pygobject2 for tests.
  - Bump min version of tp-glib.


author: Brian Pepple <bpepple@fedoraproject.org> - 0.9.3-1
changelog:
  - Update to 0.9.3.
  - Drop vcard-manager-hashtable patch.
  - Drop try-not-to-set-vcard-fields patch.
  - Drop vcard-on-login patch.
  - Drop loudmouth-devel BR.


author: Lorenzo Villani <lvillani@binaryhelix.net> - 1.0-0.10.rc2
changelog:
  - fix package summary and descriptions (as requested by Richard Hughes)
  - match cmake minimum required version with the contents of CMakeLists.txt
    (paranoid fix)


author: Tomas Popela <tpopela@redhat.com> - 12.10.0-12
changelog:
  - Move package from EPEL 7 to RHEL 7, but leave the mono support in EPEL in
    libappindicator-sharp package.
  - Resolves: rhbz#1546657


author: Eric Garver - 0.5.8-7
changelog:
  - netsniff-ng: add packet fanout support
  - doc: authors: add Michal as contributor
  - man: netsniff-ng: document fanout options
  - netsniff-ng: add example for fanout into man page


author: Daniel Borkmann <dborkman@redhat.com> - 0.5.8-4
changelog:
  - GeoIP was added to RHEL7, so we can make use of that to enable
    astraceroute and features in netsniff-ng.
  - For this we also need zlib in order to make the updater work.


author: Daniel Borkmann <dborkman@redhat.com> - 0.5.8-3
changelog:
  - Package Wrangler feedback from Thomas Graf
  - Note: 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "x86_64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info does not work with upstream's build system here as CFLAGS
    will be overwritten. Changes would need to be proposed to upstream first.


author: Daniel Borkmann <dborkman@redhat.com> - 0.5.8-1
changelog:
  - Initial netsniff-ng spec file for RHEL, import of 0.5.8-rc1. Note that
    RHEL packaging differs significantly from Fedora as we only do a partial
    build and have a small fraction of dependencies that are available on
    RHEL.


author: Tom Lane <tgl@redhat.com> 1:5.1.17-5
changelog:
  - Switch to noarch (non-GCJ) build
  Resolves: #688937, #819139
  - Fix mysql-connector-java-jdbc-4.1.patch to cover both driver classes
  Related: #816696


author: Milos Jakubicek <xjakub@fi.muni.cz> - 1:5.1.8-1
changelog:
  - Update to 5.1.8 (resolves BZ#480154) with jboss integration disabled.
  - Added BR: java-1.6.0-openjdk-devel, java-1.5.0-gcj-devel, jakarta-commons-logging
  - Minor spec file updates: %global instead of %define, tabs instead of spaces
  - Dropped unnecessary patch-build.xml and mysql-connector-java-noSunAppletSecurity.patch


author: Igor Foox <ifoox@redhat.com> 1:3.1.12-1jpp_4fc
changelog:
  - Fix indentation of preamble.
  - Fix version and epoch of jta Requires.
  - Fix Group from Development/Libraries to System Environment/Libraries.


author: Igor Foox <ifoox@redhat.com> 1:3.1.12-1jpp_3fc
changelog:
  - Remove duplicate readme files.
  - Remove binary jars from distributed tarball, since they have no source
    attached to them, and are in violation of the LGPL.
  - Change jta BR to 1.0 from 1.0.1 since geronimo-specs-compat is 1.0.
  - Remove unneccessary 0 epoch from BRs.


author: Igor Foox <ifoox@redhat.com> 1:3.1.12-1jpp_1fc
changelog:
  - Natively compile
  - Add mysql-connector-java-noSunAppletSecurity.patch to take out references
  to sun classes
  - Change BuildRoot to what Extras expects


author: Jason Corley <jason.corley@gmail.com> 1:3.1.12-1jpp
changelog:
  - 3.1.12
  - add some more docs from the tarball
  - correct url
  - remove vendor and distribution, should be defined in ~/.rpmmacros instead


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:3.1.1-1jpp
changelog:
  - 3.1.1, supports stored procedures and SAVEPOINTs among other things.
  - Tidy .spec file: nicer description and don't own %{_javadir}


author: Henri Gomez <hgomez@users.sourceforge.net>
changelog:
  - mm.mysql 2.0.8
  - seriously patch build.xml to make it compile on Linux boxes
    with both JDK 1.2/1.3 and 1.1
  - added javadoc generation to build.xml
  - changed manual to javadoc package


author: Henri Gomez <hgomez@users.sourceforge.net>
changelog:
  - Initial release mm.mysql 2.0.3
  - detect jdbc-2.0 extension jar (javax.sql) and if present
    also build MysqlDataSource and MysqlDataSourceFactory
  - build with IBM JDK 1.3.0 (cx130-20001114) and jikes 1.12
  - build CLASSPATH=/usr/share/java/jdbc2_0-stdext.jar


author: Paul Howarth <paul@city-fan.org> - 2.061-1
changelog:
  - Update to 2.061
    - zipdetails (1.06)
      - Get it to cope with Android 'zipalign' non-standard extra fields; these
        are used to make sure that a non-compressed member starts on a 4 byte
        boundary
    - unzip example with IO::Uncompress::Unzip (CPAN RT#84647)


author: Paul Howarth <paul@city-fan.org> - 2.060-1
changelog:
  - Update to 2.060
    - Updated POD
      - CPAN RT#82138: Example code not clear - gunzip() takes filenames!
    - IO::Compress::Base
      - Remove the flush call when opening a filehandle


author: Paul Howarth <paul@city-fan.org> - 2.059-1
changelog:
  - Update to 2.059
    - IO::Compress::Base
      - Added "Encode" option (fixes the encoding half of CPAN RT#42656)


author: Paul Howarth <paul@city-fan.org> - 2.058-1
changelog:
  - Update to 2.058
    - IO::Compress::Zip
      - Allow member name and Zip Comment to be "0"
    - IO::Compress::Base::Common
      - Remove "-r" test - the file open will catch this
      - IO::Compress::Base::Common returned that it could not read readable files
        in NFS (CPAN RT#80855)
    - Install to 'site' instead of 'perl' when perl version is 5.11+
      (CPAN RT#79820)
    - General performance improvements
    - Fix failing 01misc.t subtest introduced in 2.057 (CPAN RT#81119)
  - Explicitly install to 'perl' directories


author: Paul Howarth <paul@city-fan.org> - 2.055-1
changelog:
  - Update to 2.055
    - FAQ: added a few paragraphs on how to deal with pbzip2 files
      (CPAN RT#77743)
    - Compress::Zip: speed up compress, uncompress, memGzip and memGunzip
      (CPAN RT#77350)
  - BR: perl(lib)
  - Drop BR: perl(Test::Builder) and perl(Test::More) as they're bundled
  - Drop BR: perl(Config), perl(Fcntl), perl(File::Copy), perl(File::Glob),
    perl(POSIX) and perl(Symbol) as they're not dual-lived
  - Drop redundant explicit require for perl(Exporter)
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 2.052-1
changelog:
  - Update to 2.052
    - IO::Compress::Zip: force a ZIP64 archive when it contains ≥ 0xFFFF entries
    - Fix typo in POD (CPAN RT#76130)
  - Don't need to remove empty directories from buildroot


author: Paul Howarth <paul@city-fan.org> - 2.049-1
changelog:
  - Update to 2.049
    - IO::Compress::Zip:
      - Error in t/cz-03zlib-v1.t that caused warnings with 5.15 (Perl RT#110736)


author: Paul Howarth <paul@city-fan.org> - 2.048-1
changelog:
  - Update to 2.048
    - Set minimum Perl version to 5.6
    - Set minimum zlib version to 1.2.0
    - IO::Compress::Zip:
      - In one-shot zip, set the Text Flag if "-T" thinks the file is a text file
      - In one-shot mode, wrote mod time and access time in wrong order in the
        "UT" extended field
    - IO::Compress test suite fails with Compress::Raw::Zlib 2.047 and zlib < 1.2.4
      (CPAN RT#74503)
  - Resync Compress::Raw::* dependency versions
  - Add buildreqs for core perl modules, which might be dual-lived
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 2.046-1
changelog:
  - Update to 2.046
    - Minor update to bin/zipdetails
    - Typo in name of IO::Compress::FAQ.pod
    - IO::Uncompress::Unzip:
      - Example for walking a zip file used eof to control the outer loop; this
        is wrong
    - IO::Compress::Zip:
      - Change default for CanonicalName to false (CPAN RT#72974)
  - Freeze Compress::Raw::* dependency versions until next synchronized release


author: Paul Howarth <paul@city-fan.org> - 2.044-1
changelog:
  - Update to 2.044
    - Moved FAQ.pod under the lib directory so it can get installed
    - Added bin/zipdetails
    - In IO::Compress::Zip, in one-shot mode, enable Zip64 mode if the input
      file/buffer ≥ 0xFFFFFFFF bytes
    - Update IO::Compress::FAQ


author: Paul Howarth <paul@city-fan.org> - 2.043-1
changelog:
  - Update to 2.043
    - IO::Compress::Base:
      - Fixed issue that with handling of Zip files with two (or more) entries
        that were STORED; symptom is the first is uncompressed ok but the next
        will terminate early if the size of the file is greater than BlockSize
        (CPAN RT#72548)


author: Paul Howarth <paul@city-fan.org> - 2.042-1
changelog:
  - Update to 2.042
    - IO::Compress::Zip:
      - Added exUnixN option to allow creation of the "ux" extra field, which
        allows 32-bit UID/GID to be stored
      - In one-shot mode use exUnixN rather than exUnix2 for the UID/GID
    - IO::Compress::Zlib::Extra::parseExtraField:
      - Fixed bad test for length of ID field (CPAN RT#72329, CPAN RT#72505)


author: Paul Howarth <paul@city-fan.org> - 2.040-1
changelog:
  - Update to 2.040
    - IO::Compress::Zip:
      - Added CanonicalName option (note this option is set to true by default)
      - Added FilterName option
      - ExtAttr now populates MSDOS attributes
    - IO::Uncompress::Base:
      - Fixed issue where setting $\ would corrupt the uncompressed data
    - t/050interop-*.t:
      - Handle case when external command contains a whitespace (CPAN RT#71335)
    - t/105oneshot-zip-only.t:
      - CanonicalName test failure on Windows (CPAN RT#68926)


author: Paul Howarth <paul@city-fan.org> - 2.033-1
changelog:
  - Update to 2.033 (fixed typos and spelling errors - Perl RT#81816)
  - Use more explicit %files list
  - Simplify inclusion of IO::Compress::FAQ
  - Drop redundant explicit requires of Compress::Raw::{Bzip2,Zlib}
  - Drop installdirs patch, not needed with perl 5.12
  - Default installdirs are perl, so no need to specify it explicitly
  - Make %summary less generic


author: Avesh Agarwal <avagarwa@redhat.com> - 5.2.0-1
changelog:
  Resolves: #1120371
  - Rebase to new upstream release 5.2.0
  - IMA/TPM based remote attestation
  - Aikgen tool to generate an Attestation Identity Key bound
    to a TPM
  - PT-EAP transport protocol (RFC 7171) for TNC
  - Enabled support for acert for checking X509 attribute certificate
  - Updates local patches
  - Spec file update
  - openac tool replaced with pki --acert


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-4
changelog:
  Resolves:#1067119
  - Fixed full hardening for strongswan (full relro and PIE).
    The previous macros had a typo and did not work
    (see bz#1067119).
  - Fixed files permissions for executables and config files to
    correctly reflect their intent.
  - Fixed tnc package description to eliminate rpmlint errors.
  - Fixed pki binary and moved it to /usr/libexece/strongswan as
    others binaries are there too to eliminate rpmlint errors.
  - Fixed systemd service name to "strongimv TNC".
  - Removed the dependency on gmp-devel


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-2
changelog:
  Resolves: #1049523
  Resolves: #1036846
  Resolves: #1007548
  - A typo caused a patch not being applied, so fixed that and
    bumping the number number.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.1-1
changelog:
  Resolves: #1049523
  Resolves: #1036846
  Resolves: #1007548
  - Modified spec file significantly to reflect the current state of
    the package, as this rebase enables several major modules: TNC
    client and server (IF-TNCCS), IMC-IMV (IF-M), PT-TLS (RFC 6876),
    SWID IMC/IMV, charon daemon and it related libs and modules,
    tnc-pdp, tnc-ifmap plugins.


author: Avesh Agarwal <avagarwa@redhat.com> - 5.1.0-2
changelog:
  - Fixed initialization crash of IMV and IMC particularly
    attestation imv/imc as libstrongswas was not getting initialized.


author: David Walluck <dwalluck@redhat.com> 0:3.1-4
changelog:
  - remove Class-Path from MANIFEST.MF
  - add unversioned javadoc symlink
  - remove javadoc scriptlets
  - fix directory ownership
  - remove build requirement on dos2unix


author: Ralph Apel <r.apel@r-apel.de> - 0:3.1-3jpp
changelog:
  - Add poms and depmap frags with groupId of org.objectweb.asm !
  - Add asm-all.jar 
  - Add -javadoc Requires post and postun
  - Restore Vendor, Distribution


author: Rob Crittenden <rcritten@redhat.com> 0.9.2-1
changelog:
  - update to 0.9.2
  - Enable loading the NSS PKCS#11 pem module
  - Add a URL
  - Specify the license as LGPLv2+ instead of just LGPL


author: Rob Crittenden <rcritten@redhat.com> 0.9.1-2
changelog:
  - rename LICENSE to COPYING
  - don't ship the .la in -devel
  - fixup devel requirement to be exactly the parent package, not >=


author: Jens Petersen <petersen@redhat.com> - 1.55-20
changelog:
  - revert license tags and add only GPL+ and GPLv2+ and LDP
    (a more detailed license audit of the manpages is really needed)


author: Ding-Yi Chen <dchen@redhat.com> - 1.55-7
changelog:
  - Bug 487941 - File conflict between man-pages-es-extra and shadow-utils
    Removed es/man8/vigr.8.gz


author: Ding-Yi Chen <dchen@redhat.com> - 1.55-1
changelog:
  - [Bug 388391] New: fileconflicts with other packages
  - Remove mc.1.gz, as it conflicts with mc-4.6.1a-49.20070604cvs.fc8.i386.rpm
  - Remove newgrp.1.gz, as it conflicts with shadow-utils-4.0.18.1-18.fc8.i386.rpm


author: Hushan Jia <hushan.jia@gmail.com> 1.4.9.1-1
changelog:
  - Update to upstream 1.4.9.1 which have several bug fixes and enhancements
  - remove arch definitions, the syscalls are now detected during configuring


author: Tom Lane <tgl@redhat.com> 9.1.0-1
changelog:
  - Update pg_filedump to version 9.1.0, to support PostgreSQL 9.1.
  - Point to new upstream home at pgfoundry.org.


author: Tom Lane <tgl@redhat.com> 9.0.0-1
changelog:
  - Update pg_filedump to version 9.0.0, to support PostgreSQL 9.0.
  - Relabel license as PostgreSQL now that that's separately recognized by OSI.


author: Tom Lane <tgl@redhat.com> 8.4.0-3
changelog:
  - Add -fno-strict-aliasing to CFLAGS per rpmdiff complaint, and -fwrapv
    too just to be on the safe side.
  Related: #596204


author: Tom Lane <tgl@redhat.com> 8.1-1
changelog:
  - Update pg_filedump to version 8.1, to support PostgreSQL 8.1.
  - Change version numbering so that major version matches corresponding
    PostgreSQL version.


author: Tom Lane <tgl@redhat.com> 4.0-1
changelog:
  - Update pg_filedump to version 4.0, to support PostgreSQL 8.0.
  - Keep pg_crc.c on hand as a plain source file instead of a patch.
    Easier to compare to main PG sources that way.


author: Tom Lane <tgl@redhat.com>
changelog:
  - Update to version 3.0.
  - Increment Buildrequires to >= PostgreSQL 7.4
  - Rebuild for Fedora Core 2.


author: Josef Ridky <jridky@redhat.com> - 3.3.3-21
changelog:
  - Resolves: #1417830 - check return value from setreuid method
  - Resolves: #1423040 - fix local authentication issue


author: Josef Ridky <jridky@redhat.com> - 3.3.3-18
changelog:
  - Resolves: #1286330 - set non-blocking connection
  - Resolves: #1299761 - fix amindex: invalid service
  - Resolves: #1306980 - fix problem with handling compressed files


author: Petr Hracek <phracek@redhat.com> - 3.3.3-1
changelog:
  - New upstream version
  - Dependecy to /usr/sbin/service was removed.
   Instead of /usr/sbin/service systemd files are used.


author: Petr Hracek <phracek@redhat.com> - 3.3.2-4
changelog:
  - fix (#858703) add killpgrp(8) man page to the amanda-client package
      (killpgrp will be removed from man-pages package)
  - Fix autogen for parallel tests.


author: Lukáš Nykrýn <lnykryn@redhat.com> - 3.3.0-3
changelog:
  - fix #757618 - Use of qw(...) as parentheses is deprecated
  - fix #752253 - Using functions in amanda-client which are provided by server


author: Jan Görig <jgorig@redhat.com> - 3.3.0-1
changelog:
  - upgrade to new upstream release
  - uses bsdtcp authentication by default
  - dropped amanda-3.1.1-bsd.patch
  - modified example directory handling and dropped amanda-3.1.0-example.patch


author: Jan Görig <jgorig@redhat.com> - 3.2.2-1
changelog:
  - upgrade to new upstream release
  - removed merged patch amanda-3.1-amrestore.patch
  - fixed build on system with amanda installed


author: Jan Görig <jgorig@redhat.com> - 3.2.0-1
changelog:
  - upgrade to new upstream release
  - fixed build with new glib
  - changed owner of the most files to root
  - moved variable files from /etc/amanda to /var/lib/amanda
  - spec cleanups
  - fix #648321 - amanda rpm should not provide the perl(Math::BigInt)


author: Jan Görig <jgorig@redhat.com> - 3.1.1-2
changelog:
  - removed obsolete README-rpm
  - modified client configuration to match xinetd one
  - modified tcpport patch to include postgresql sample configuration


author: Jan Görig <jgorig@redhat.com> - 3.1.1-1
changelog:
  - upgraded to new upstream bugfix version
  - dropped old upgrade scriptlets
  - spec cleanups
  - created symlink to manpage for amoldrecover
  - default configuration now backups extended attributes
  - fix #610169 - fixed build flags
  - fix #600552 - corrected amdatadir path, updated example patch


author: Jan Görig <jgorig@redhat.com> - 3.1.0-1
changelog:
  - upgraded to new upstream version
  - documentation moved to main package
  - fixed license tag
  - moved files from libexecdir to libdir to avoid multilib conflict
  - moved files between subpackages
  - updated path in xinetd config
  - added -fPIE to CFLAGS and -pie to LDFLAGS
  - removed unused patches
  - removed obsolete devel subpackage


author: Daniel Novotny <dnovotny@redhat.com> 2.6.0p2-9
changelog:
  - fix #497488 -  amanda subpackages require only a specific version of amanda,
        not also release


author: Orion Poplawski <orion@cora.nwra.com> 2.6.0p2-2
changelog:
  - Drop duplicated libamglue.so from -devel
  - Update -pie patch
  - Fix Source typo
  - Move xinetd to main package - used by both client and server
  - Move %{_libexecdir}/amanda/amanda-sh-lib.sh to main package
  - LIBEXECDIR is used in xinetd template
  - Make calcsize setuid root


author: Daniel Novotny 2.6.0p2-1
changelog:
  - Update to 2.6.0p2
  - perl-ExtUtils-Embed added to BuildRequires
  - perl patch dropped (upstreamed)
  - library name change from libamglue.so.* to libamglue.so


author: Orion Poplawski <orion@cora.nwra.com> 2.6.0-0.b3_20080310.1
changelog:
  - Update to 2.6.0b3_20080310
  - Re-add updated pie patch, re-add autogen
  - Update example patch to modify Makefile.am, leave template.d in
   /var/lib/amanda for now


author: Orion Poplawski <orion@cora.nwra.com> 2.6.0-0.b2_20080220.1
changelog:
  - Update to 2.6.0b2-20080220
  - Drop libdir patch, use --with-libdir instead
  - Move perl modules to %{perl_vendorarch} and add perl Requires


author: Orion Poplawski <orion@cora.nwra.com> 2.6.0-0.b2
changelog:
  - Update to 2.6.0b2, drop upstreamed patches
  - Update xattrs patch
  - Add patches to fix install locations
  - Add -fPIE/-pie to CFLAGS/LDFLAGS, drop pie patch
  - Drop autotools BR
  - Drop /usr/bin/Mail BR and specify mailer as /bin/mail
  - Add %check section
  - Move /etc/amanda/amandates to /var/lib/amanda/amandates
  - Remove ending . from summaries


author: Radek Brich <rbrich@redhat.com> 2.5.2.p1-9
changelog:
  - Change default amanda user name to 'amandabackup' (#124510).
    This should not break upgrades as config files are checked for
    old user name and updated.
  - Add some explaining comments to .amandahosts (#153749)


author: Radek Brich <rbrich@redhat.com> 2.5.2.p1-5
changelog:
  - Added ssh and ncompress to BuildRequires (#250730).
  - Removed some obsolete makes from build section.


author: Radek Brich <rbrich@redhat.com> 2.5.2.p1-3
changelog:
  - Update -undefSymbols patch. All undefined symbols reported by
    'ldd -r' should now be fixed (#198178).


author: Radek Brich <rbrich@redhat.com> 2.5.2.p1-2
changelog:
  - Fix undefined symbols in libamserver.so.
  - Fix ./autogen so it automatically installs ylwrap (bug 224143).
  - Run ./autogen in prep section (otherwise the -pie patch had no effect).
  - Update -pie patch.


author: Radek Brich <rbrich@redhat.com> 2.5.2.p1-1
changelog:
  - New upstream version.
  - Client rpm now installs amanda-client.conf.
  - Removed obsolete patches -bug18322 and -rsh.
  - Clean up spec file (non-utf8 error and some warnings from rpmlint).


author: Jay Fenlason <fenlason@redhat.com> 2.5.1p3-1.el7
changelog:
  - Upgrade to new upstream release, now that 2.5.1 is somewhat stable.
  - Note that this requires changing the xinetd configuration and amanda.conf
    because of the new authentication mechanism.
  - -server subpackage does not require xinetd.
  - -server scriptlets do not need to reload xinetd.


author: Jay Fenlason <fenlason@redhat.com> 2.5.0p2-4
changelog:
  - Include my -dump_size patch to close
    bz#206129: Dump output size determined incorrectly
  - Clean up the spec file, following some suggestions in
    bz#185659: amanda 2.5.0
  - Use a tarball without the problematic contrib/sst directory.
  - Include my new_gnutar (based on a patch by Orion Poplawski
    <orion@cora.nwra.com>) to work around changed incremental file format
    in newer (>1.15.1) versions of gnutar.
  - include my -wildcards patch to turn on wildcards with new versions of tar.


author: Jay Fenlason <fenlason@redhat.com> 2.5.0p2-3
changelog:
  - move libamclient-*.so to the base rpm, so that multilib support works.
    This fixes
    bz#205202 File conflicts


author: Jay Fenlason <fenlason@redhat.com> 2.5.0p2-2
changelog:
  - New upstream version
  - Make the BuildRequires on /usr/bin/Mail rather than mailx, because we
    don't really care where the Mail command comes from.
  - include the amcheck_badtape patch by Paul Bijnens
    <paul.bijnens@xplanation.com> to fix a problem where amcheck doesn't
    realize the wrong tape is in the drive.
  - include the error_msg patch from Jean-Louis Martineau <martineau@zmanda.com>
    to fix a double-free problem
  - include the restore patch from Jean-Louis Martineau <martineau@zmanda.com>
    to fix an error in amrestore
  - include a slightly modified form of the big_holding_disk patch from
    Andrej Filipcic <andrej.filipcic@ijs.si> to fix a problem with holding
    disks bigger than 4tb


author: Jay Fenlason <fenlason@redhat.com> 2.5.0-2
changelog:
  - New upstream release: 2.5.0, with new features
  - Do not include our own amanda.conf anymore, use the one from the
    tarball.
  - Remove the static libraries.
  - Update the -pie patch
  - Turn on the new -with-ssh-security option.
  - Change the mode of ~amanda/.amandahosts to 600, since 2.5.0 requires
    it.
  - actually use the defconfig macro it this spec file.
  - Change the name of the index server to "amandahost" from localhost.
    Users should ensure that "amandahost.their-domain" points to their
    Amanda server.
  - Change amandahosts likewise.
  - Add dependency on /usr/bin/Mail
  - Ensure unversioned .so files are only in the -devel rpm.
  - Remove DUMPER_DIR and the files in it, as nothing seems to actually
    use them.
  - Include the -overflow patch from Jean-Louis Martineau
    <martineau@zmanda.com>


author: Jay Fenlason <fenlason@redhat.com> 2.4.5p1-3
changelog:
  - Fix spec file to use %{_localstatedir} instead of hardcoding /var/lib
  - Add amanda_user and amanda_group defines, to make changing the username
    easier.
  - Add a BuildRequires on /usr/bin/Mail


author: Jay Fenlason <fenlason@redhat.com> 2.4.5-2
changelog:
  - New upstream release.  This obsoletes the -bug144052 patch.
  - Reorg this spec file slightly to allow someone to specify
    index server, tape server and default configuration when
    rebuilding the rpms via something like
    'rpmbuild -ba --define "indexserver foo.fqdn.com" amanda.spec'
    This change suggested by Matt Hyclak <hyclak@math.ohiou.edu>.


author: Jay Fenlason <fenlason@redhat.com> 2.4.4p2-1
changelog:
  - New upstream version, includes the -sigchld and -client-utils
    patches.  Also includes a new chg-disk changer script and a new
    amqde "quick-and-dirty estimate" program (called from sendsize--not
    a user command.


author: Jay Fenlason <fenlason@redhat.com> 2.4.3-3
changelog:
  - Removed call to signal(SIGCHLD, SIG_IGN) which prevents wait...()
    from working on newer Red Hat systems.  This fixes bug #84092.


author: Jay Fenlason <fenlason@redhat.com> 2.4.3-2
changelog:
  - Add spec file entry for /usr/lib/amanda so owner/group set
    correctly  Fixes bugs 74025 and 73379.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 2.4.2p2 - fixes problems with amrecover (#26567)
  - made config files noreplace
  - don't build on IA64 right now, amanda doesn't like
    the dump there: It segfaults.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Use %{version} in source URL, and thus actually use 
    2.4.2p1 instead of 2.4.2 (doh! # 28759)
  - add patch to handle bogus /dev/root entries (#28759)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - don't have "chunksize -1" as the default, as it's no longer
    supported
  - make it uid amanda, with home /var/lib/amada
    so programs can actually access it (#20510)
  - make .amandahosts a config file (#18322)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - build with shared libraries.
  - add amanda-devel package to contain static libraries.
  - update to 2.4.2-19991216-beta1 (#16818).
  - sort out client-server file confusions (#17232).
  - amandaidx-xinetd should have "wait = no" (#17551).
  - /var/lib/amanda needs operator.disk ownership (17913).
  - /etc/xinetd.d/amanda added to the amanda-server package (#18112).
  - ignore socket error message (#18322).


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - only do reload of xinetd if xinetd is running (#16653)
  - don't show output of reload command to STDOUT (#16653)
  - don't use /usr/sbin/tcpd in amidx, xinetd is linked
    with tcp_wrappers
  - prereq initscripts (fixes #14572 and duplicates)


author: Tim Powers <timp@redhat.com>
changelog:
  - fixed files/dirs ending up in the wrong packages.
  - last time it wasn't built with dump (doh!), this time it is. Now has a
    BuildRequires for dump.


author: Tim Powers <timp@redhat.com>
changelog:
  - make sure the man pages are gzipped in each subpackage, overriding the build
    system spec_install_post macro.
  - using mega spec file changes from Marc Merlin <merlin_bts@valinux.com> since
    the package we were shipping in the past had some major issues (not in
    Marc's words ;)
  - using Marc's added README and modified config files.
  - adapted patches written by Alexandre Oliva <oliva@dcc.unicamp.br> from Marc
    Merlin's package so that the patch matches the source version (the patches
    are the glibc2.1 and glibc2.2 patches)


author: Tim Powers <timp@redhat.com>
changelog:
  - fix so configure doesn't crap out (libtoolize --force)
  - gzip man pages, strip binaries
  - rebuilt for 6.2


author: Otto Hammersmith <otto@redhat.com>
changelog:
  - updated to 2.4.0b6, fixes security hole among other things
    (as well as finally got the glibc patch in the main source.)


author: Jan Rybar <jrybar@redhat.com> 22.20-13
changelog:
  - fuser manpage: note about invisible other PIDs moved to RESTRICTIONS section
  - Resolves: rhbz#1400126


author: Jaromir Capik <jcapik@redhat.com> - 22.20-6
changelog:
  - Fixing null pointer dereference introduced with namespaces
  - Fixing bogus dates in the changelog
  - Related: rhbz#980514


author: Richard W.M. Jones <rjones@redhat.com> 22.20-1
changelog:
  - Update to 22.20.
    Contains a fix for: http://sourceforge.net/p/psmisc/bugs/53/
  - Fix src/pstree.c when SELinux is available.


author: Jan Görig <jgorig@redhat.com> 22.13-1
changelog:
  - updated to new upstream version
  - removed unused patch
  - peekfd should work on all architectures now
  - spec cleanups


author: Tomas Smetana <tsmetana@redhat.com> 22.6-5
changelog:
  - fix configure.ac to include all the required headers for peekfd
  - remove kernel-headers again -- not needed in rawhide


author: Karel Zak <kzak@redhat.com> 22.1.03072006cvs-1
changelog:
  - update to new upstream CVS version 
  - enable new fuser version
  - fix fuser return code 
  - fix #183897 - "pstree -a" call results in segmentation fault


author: Karel Zak <kzak@redhat.com> 21.6-1
changelog:
  - sync with upstream release 21.6
  - cleanup selinux patch
  - fix #165167 - buffer overflow detected in fuser


author: Karel Zak <kzak@redhat.com> 21.5-1
changelog:
  - Updated to new upstream version 21.5
  - Ported SELinux patch forward as psmisc-21.5-selinux.patch
  - Added psmisc-21.5-term.patch that fix termcap.h and term.h conflicts


author: Mike A. Harris <mharris@redhat.com> 21.4-1
changelog:
  - Updated to new upstream version 21.4
  - Ported SELinux patch forward as psmisc-21.4-redhat-selinux-psmisc.patch,
    but disabled SELINUX support temporarily until other build problems are
    resolved
  - Remove MKINSTALLDIRS-./mkinstalldirs from "make install" as that causes the
    build to fail when "./" changes.  If this option is ever added back, make
    it relative to $RPM_BUILD_DIR instead of ./ so that things do not break
  - Added pstree.x11 to file list after rpm reported it present in buildroot but
    not packaged


author: Mike A. Harris <mharris@redhat.com> 21.3-1
changelog:
  - Updated to new upstream version 21.3
  - Removed dead script gensig.sh
  - Disabled psmisc-21.2-gcc33.patch as it is included in 21.3


author: Mike A. Harris <mharris@redhat.com> 21.2-2
changelog:
  - Updated to new upstream version 21.2
  - Updated Source: URL to sourceforge's current ftp area
  - Fixes fuser largefile bug (#66340)
  - Disable prep time sh %{SOURCE1} >src/signames.h as the 21.2 release
    fixes this already now.


author: Bernhard Rosenkraenzer <bero@redhat.com> 20.2-4
changelog:
  - Autogenerate the signal list from _includedir/bits/signum.h
    to make sure it works on all arches and doesn't break again.


author: Bernhard Rosenkraenzer <bero@redhat.com> 20.2-1
changelog:
  - 20.2
  - Add patch from bug report #56186; the problem is not reproducable,
    but the patch can't hurt.


author: Bernhard Rosenkraenzer <bero@redhat.com> 20.1-2
changelog:
  - Add BuildRequires (#49562)
  - s/Copyright/License/
  - Fix license (it's actually dual-licensed BSD/GPL, not just "distributable")


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.8-4
changelog:
  - fix to only prompt for passwords when obtaining credentials for performing
    password changes by toggling the subsequent_prompt default to off when
    called to perform a password change (#1063933)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.7-1
changelog:
  - drop some no-longer-necessary code to cede ownership of keyring ccaches
    to an unprivileged user at login-time to work better with upcoming changes
    to libkrb5's keyring ccache support (libkrb5: #991148, this one's #1005376)
  - if we don't have a ccname_template, if we're built against a libkrb5 that
    provides interfaces for reading its configuration files, try to read the
    default_ccache_name value from the [libdefaults] section before falling
    back to the default we've set at compile-time (#more of #1005376)
  - stop specifying a default ccache location at compile-time on F21 and later,
    to make our unconfigured default better line up with libkrb5's unconfigured
    default


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.6-1
changelog:
  - handle ccache creation correctly for users who are mapped to principal
    names in realms other than the default (#999604)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.5-1
changelog:
  - update to 2.4.5
    - handle non-unique ccname templates
  - switch to a non-unique default ccname template on newer releases


author: Nalin Dahyabhai <nalin@redhat.com> - 2.4.2-1
changelog:
  - update to 2.4.2
    - don't override the primary ccache selection when updating DIR: caches
    - handle the signature of trace callbacks being different between 1.10 and
      1.11


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.97-1
changelog:
  - update to 2.3.97
    - fix the order of credentials in a user ccache looking wrong
    - in the ticket manipulation helper, if we're trying to switch IDs and
      can't, if we should be able to do so, flag an error


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.14-2
changelog:
  - on Fedora 18 and later, override the default ccname template and specify that
    it be FILE:/run/user/%U/krb5cc_XXXXXX


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.14-1
changelog:
  - update to 2.3.14
    - attempt to drop to the user's privileges when reinitializing/refreshing
      credentials, which newer versions of login seem to do while they're still
      running as root (#822493)
  - on Fedora 18 and later, override the default ccname template and specify that
    it be FILE:/run/user/%u/krb5cc_XXXXXX


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.13-1
changelog:
  - update to 2.3.13
    - don't treat setcred() as session open/close in sshd (#720609, #725797)
    - don't create a new ccache when "external" is enabled, as the calling
      application's already managing one (#690832)
    - always re-read "external" creds when possible, and use an in-memory
      ccache when setting up tokens (more of #690832)
    - apply when-to-prompt-for-what logic that we use in authentication to
      the initial part of password-change (#700520)
    - fix some bashisms and explicitly note errors when we run into them
      (ticket #1, patch by Aleksander Adamowski)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-2
changelog:
  - build with %{_smp_mflags}, if set (Parag AN, part of #226225)
  - drop explicit buildroot specification and cleanup (Parag AN, part of
    - drop explicit -fPIC since libtool seems to be doing the right thing (Parag
    AN, part of #226225)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.11-1
changelog:
  - create creds before calling krb5_kuserok() so that they're available when
    it goes to look up the target user's home directory (#563442)
  - collapse multiple levels of debugging into a single debug level (#157107)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.10-2
changelog:
  - replace BuildPreReq: with BuildRequires: (rpmlint)
  - fix inadvertent macro use in changelog (rpmlint)
  - drop the final '.' from the package summary (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.10-1
changelog:
  - pull up changes to fine-tune the logic for selecting which key in a keytab
    to use when validating credentials


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.9-1
changelog:
  - add a "multiple_ccaches" option to allow forcing the previous behavior of
    not deleting an old ccache whenever we create a new one, but saving them
    until the call that caused us to create them is reversed, and default the
    setting to being enabled for "su", which needs it


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.8-1
changelog:
  - add a "chpw_prompt" option, to allow changing expired passwords while
    authenticating, as a workaround for applications which don't handle
    password expiration the way PAM expects them to (#509092)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.7-1
changelog:
  - when called to refresh credentials, store the new creds in the default
    ccache location if $KRB5CCNAME isn't set (#507984)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.5-1
changelog:
  - when we get asked for the user's long-term key, use a plain Password:
    prompt value rather than the library-supplied one


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - catch the case where we pass a NULL initial password into libkrb5 and
    it uses our callback to ask us for the password for the user using a
    principal name, and reject that (#502602)
  - always prompt for a password unless we were told not to (#502602,
    CVE-2009-1384)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.4-1
changelog:
  - don't request password-changing credentials with the same options that we
    use when requesting ticket granting tickets, which might run afoul of KDC
    policies


author: Nalin Dahyabhai <nalin@redhat.com> - 2.3.1-1
changelog:
  - don't bother trying to set up a temporary v4 ticket file during session open
    unless we obtained v4 creds somewhere


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.23-1
changelog:
  - when we're changing passwords, force at least one attempt to authenticate
    using the KDC, even in the pathological case where there's no previously-
    entered password and we were told not to ask for one (#400611)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.22-1
changelog:
  - make sure we don't fall out of the calling process's PAG when we check
    the .k5login (fallout from #371761)
  - make most boolean options controllable on a per-service basis


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set perms on the user's KEYRING: ccache so that the user can write to it
  - suppress an error message if a KEYRING: ccache we're about to destroy has
    already been revoked


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.20-1
changelog:
  - move temporary ccaches which aren't used for serializing from FILE: type
    into MEMORY: type
  - don't barf during credential refresh when $KRB5CCNAME isn't set


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.19-1
changelog:
  - log to AUTHPRIV facility by default
  - add a "ccname_template" option, which can be set to "KEYRING:..." to switch
    to using the kernel keyring
  - add a "preauth_options" option for setting generic preauth parameters
  - allow "keytab" locations to be specified on a per-service basis, so that
    unprivileged apps which do password-checking and which have their own
    keytabs can use their own keys to validate the KDC's response


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.17-1
changelog:
  - correct the license: tag -- this module is dual-licensed (LGPL+ or BSD)
  - fix a man page missing line
  - tactfully suggest in the man page that if your app needs the "tokens"
    flag in order to work properly, it's broken


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.16-1
changelog:
  - update to 2.2.16, also avoiding use of the helper if we're creating a ticket
    file for our own use


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.15-1
changelog:
  - update to 2.2.15, adjusting the fix for #150056 so that it doesn't run
    afoul of SELinux policy by attempting to read a ccache which was created
    for use by the user via the helper
  - build with --with-default-use-shmem=sshd --with-default-external=sshd, to
    get the expected behavior without requiring administrator intervention


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.10-0.1
changelog:
  - revert previous changes to how prompting works, and add a
    no_subsequent_prompt option to suppress libkrb5-based prompts during
    authentication, providing the PAM_AUTHTOK for all questions which
    libkrb5 asks


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.10-0
changelog:
  - rework prompting so that we stop getting stray prompts every now and then,
    and so that use_first_pass will *never* prompt for any information


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.9-1
changelog:
  - return PAM_IGNORE instead of PAM_SERVICE_ERR when we're called in
    an unsafe situation and told to refresh credentials (#197428)
  - drop from setuid to "normal" before calling our storetmp helper, so that
    it doesn't freak out except when *it* is setuid (#190159)
  - fix handling of "external" cases where the forwarded creds don't belong to
    the principal name we guessed for the user (#182239,#197660)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.8-1
changelog:
  - don't try to validate creds in a password-changing situation, because the
    attempt will always fail unless the matching key is in the keytab, which
    should never be the case for the password-changing service (#187303, rbasch)
  - if v4 has been disabled completely, go ahead and try to set 2b tokens
    because we're going to end up having to do that anyway (#182378)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.7-1
changelog:
  - add v4 credential conversion for "use_shmem" and "external" cases (though
    it should be redundant with "use_shmem") (#182239)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.6-1
changelog:
  - add a "krb4_use_as_req" option so that obtaining v4 creds kinit-style can
    be disabled completely (Hugo Meiland)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.5-1
changelog:
  - don't log debug messages that we're skipping session setup/teardown unless
    debugging is enabled (#179037)
  - try to build the module with -Bsymbolic if we can figure out how to do that


author: Nalin Dahyabhai <nalin@redhat.com> 1.57-1
changelog:
  - force -fPIC
  - add --with-moduledir, --with-krb5-libs, --with-krbafs-libs to configure
  - add per-user stashes and return values


author: Nalin Dahyabhai <nalin@redhat.com> 1.49-1
changelog:
  - set PAM_USER using the user's parsed name, converted back to a local name
  - add account management service (checks for key expiration and krb5_kuserok())
  - handle account expiration errors


author: Nalin Dahyabhai <nalin@redhat.com> 1.46-1
changelog:
  - link with libresolv to get res_search, tip from Justin McNutt, who
    built it statically
  - explicitly link with libdes425
  - handle cases where getpwnam_r fails but still sets the result pointer
  - if use_authtok is given and there is no authtok, error out


author: Nalin Dahyabhai <nalin@redhat.com> 1.43-1
changelog:
  - add minimum UID support (#52358)
  - don't link pam_krb5 with libkrbafs
  - make all options in krb5.conf available as PAM config arguments


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - note that we had to prepend the current directory to a given path in
    dlopen.c when we had to (noted by Onime Clement)


author: Nalin Dahyabhai <nalin@redhat.com> 1.42-1
changelog:
  - return PAM_NEW_AUTHTOK_REQD when attempts to get initial credentials
    fail with KRB5KDC_ERR_KEY_EXP (noted by Onime Clement)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add info about accessing the CVS repository to the README
  - parser cleanups (thanks to Dane Skow for a more complicated sample)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't set forwardable and assorted other flags when getting password-
    changing service ticket (noted, and fix supplied, by Onime Clement)
  - try __posix_getpwnam_r on Solaris before we try getpwnam_r, which may
    or may not be expecting the same number/type of arguments (noted by
    Onime Clement)
  - use krb5_aname_to_localname to convert the principal to a login name
    and set PAM_USER to the result when authenticating
  - some autoconf fixes for failure cases


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't call initialize_krb5_error_table() or initialize_ovk_error_table()
    if they're not found at compile-time (reported for RHL 6.x by Chris Riley)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - note that [pam] is still checked in addition to [appdefaults]
  - note that AFS and Kerberos IV support requires working Kerberos IV
    configuration files (i.e., kinit -4 needs to work) (doc changes
    suggested by Martin Schulz)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add max_timeout, timeout_shift, initial_timeout, and addressless options
    (patches from Simon Wilkinson)
  - fix the README to document the [appdefaults] section instead of [pam]
  - change example host and cell names in the README to use example domains


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't delete tokens unless we're also removing ticket files (report and
    patch from Sean Dilda)
  - report initialization errors better


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - treat semicolons as a comment character, like hash marks (bug reported by
    Greg Francis at Gonzaga University)
  - use the [:blank:] equivalence class to simplify the configuration file parser
  - don't mess with the real environment
  - implement mostly-complete aging support


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't fail to fixup the krb5 ccache if something goes wrong obtaining
    v4 credentials or creating a krb4 ticket file (#33262)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fixup the man page
  - log return code from k_setpag() when debugging
  - create credentials and get tokens when setcred is called for REINITIALIZE


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't twiddle ownerships until after we get AFS tokens
  - use the current time instead of the issue time when storing v4 creds, since
    we don't know the issuing host's byte order
  - depend on a PAM development header again instead of pam-devel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a separate config file parser for compatibility with settings that
    predate the appdefault API
  - use a version script under Linux to avoid polluting the global namespace
  - don't have a default for afs_cells
  - need to close the file when we succeed in fixing permissions (noted by
    jlkatz@eos.ncsu.edu)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use the appdefault API to read krb5.conf if available
  - create v4 tickets in such a way as to allow 1.2.2 to not think there's
    something fishy going on


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - only try to delete ccache files once
  - ignore extra data in v4 TGTs, but log that we got some
  - require "validate" to be true to try validating, and fail if validation fails


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix prompting when the module's first in the stack and the user does not have
    a corresponding principal in the local realm
  - properly implement TGT validation
  - change a few non-error status messages into debugging messages
  - sync the README and the various man pages up


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Seth Vidal's no_user_check flag
  - document no_user_check and skip_first_pass options in the man pages
  - rebuild against Kerberos 5 1.2 (release 15)


author: Jesper Dangaard Brouer <brouer@redhat.com> - 0.0.4-8
changelog:
  - Add missing long option --set-counters and update documentation
    Corrosponding short option -c was implemented, but undocumented.
    Resolves: rhbz#1050854


author: Jesper Dangaard Brouer <brouer@redhat.com> - 0.0.4-5
changelog:
  - fix issues reported by static analysis tools
    Resolves: rhbz#1027762
  - add man-pages for arptables-{save,restore}
    Resolves: rhbz#1025726


author: Adam Jackson <ajax@redhat.com> 1.3.3-1
changelog:
  - libXfont 1.3.3.
  - libXfont-1.3.1-fast-retry.patch: Retry font server connections faster.
    (#443070)


author: Adam Jackson <ajax@redhat.com> 1.2.3-2.fc7
changelog:
  - libXfont-1.2.3-namespace-pollution.patch: Hide some symbols from the dynamic
    linker to avoid colliding with other libs.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXfont to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Removed libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch, which is now
    integrated upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-3
changelog:
  - Added libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch to remove
    conditionalization of FONTDIRATTRIB from sources instead of tweaking
    CFLAGS for bug (#172997, fdo#5047).


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXfont to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXfont to version 0.99.1 from X11R7 RC1
  - Remove libfontcache* from file manifests, as it is static linked into Xfont


author: Mike A. Harris <mharris@redhat.com> 0.99.0-5
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro
  - Fix BuildRequires to use new libX* style package names


author: Mike A. Harris <mharris@redhat.com> 0.99.0-4
changelog:
  - Added xorg-x11-proto-devel dependency to 'devel' subpackage, because the
    libXfont headers use some of the protocol headers, but the autotooling of
    libXfont doesn't autodetect this yet.  Discovered when bdftopcf failed to
    compile while trying to package xorg-x11-font-utils, even though libXfont
    headers were installed.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Changed all virtual BuildRequires to the "xorg-x11-" prefixed non-virtual
    package names, as we want xorg-x11 libs to explicitly build against
    X.Org supplied libs, rather than "any implementation", which is what the
    virtual provides is intended for.
  - Added freetype-devel build dependency


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-4
changelog:
  - Respect OpenSSL default ciphers and protocol versions (bug #1127322)
  - Fix typo in Utils.pm (bug #1097710)


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Makefile.PL reported wrong version of openssl if Net::SSLeay was not
      installed, instead of reporting a missing dependency of Net::SSLeay


author: Paul Howarth <paul@city-fan.org> - 1.93-1
changelog:
  - Update to 1.93
    - Need at least OpenSSL version 0.9.8 now, since last 0.9.7 was released 6
      years ago; remove code to work around older releases
    - Changed AUTHOR in Makefile.PL from array back to string, because the array
      feature is not available in MakeMaker shipped with 5.8.9 (CPAN RT#85739)
  - Set openssl version requirement to 0.9.8
  - Drop ExtUtils::MakeMaker version requirement back to 6.46


author: Paul Howarth <paul@city-fan.org> - 1.92-1
changelog:
  - Update to 1.92
    - Intercept: use sha1-fingerprint of original cert for id into cache unless
      otherwise given
    - Fix pod error in IO::Socket::SSL::Utils (CPAN RT#85733)


author: Paul Howarth <paul@city-fan.org> - 1.91-1
changelog:
  - Update to 1.91
    - Added IO::Socket::SSL::Utils for easier manipulation of certificates and
      keys
    - Moved SSL interception into IO::Socket::SSL::Intercept and simplified it
      using IO::Socket::SSL::Utils
    - Enhance meta information in Makefile.PL
  - Bump openssl version requirement to 0.9.8a
  - Need at least version 6.58 of ExtUtils::MakeMaker (CPAN RT#85739)


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Support more digests, especially SHA-2 (CPAN RT#85290)
    - Added support for easy SSL interception (man in the middle) based on ideas
      found in mojo-mitm proxy
    - Make 1.46 the minimal required version for Net::SSLeay, because it
      introduced lots of useful functions
  - BR:/R: openssl ≥ 0.9.7e for P_ASN1_TIME_(get,set)_isotime in Net::SSLeay


author: Paul Howarth <paul@city-fan.org> - 1.89-1
changelog:
  - Update to 1.89
    - If IO::Socket::IP is used it should be at least version 0.20; otherwise we
      get problems with HTTP::Daemon::SSL and maybe others (CPAN RT#81932)
    - Spelling corrections


author: Paul Howarth <paul@city-fan.org> - 1.88-1
changelog:
  - Update to 1.88
    - Consider a value of '' the same as undef for SSL_ca_(path|file), SSL_key*
      and SSL_cert* - some apps like Net::LDAP use it that way


author: Paul Howarth <paul@city-fan.org> - 1.87-1
changelog:
  - Update to 1.87
    - Complain if given SSL_(key|cert|ca)_(file|path) do not exist or if they are
      not readable (CPAN RT#84829)
    - Fix use of SSL_key|SSL_file objects instead of files, broken with 1.83


author: Paul Howarth <paul@city-fan.org> - 1.86-1
changelog:
  - Update to 1.86
    - Don't warn about SSL_verify_mode when re-using an existing SSL context
      (CPAN RT#84686)


author: Paul Howarth <paul@city-fan.org> - 1.85-1
changelog:
  - Update to 1.85
    - Probe for available modules with local __DIE__ and __WARN__handlers
      (CPAN RT#84574)
    - Fix warning, when IO::Socket::IP is installed and inet6 support gets
      explicitly requested (CPAN RT#84619)


author: Paul Howarth <paul@city-fan.org> - 1.84-1
changelog:
  - Update to 1.84
    - Disabled client side SNI for openssl version < 1.0.0 because of
      CPAN RT#83289
    - Added functions can_client_sni, can_server_sni and can_npn to check
      availability of SNI and NPN features
    - Added more documentation for SNI and NPN


author: Paul Howarth <paul@city-fan.org> - 1.83-2
changelog:
  - Update to 1.831
    - Separated documentation of non-blocking I/O from error handling
    - Changed and documented behavior of readline to return the read data on
      EAGAIN/EWOULDBLOCK in case of non-blocking socket
      (see https://github.com/noxxi/p5-io-socket-ssl/issues/1)
  - Bumped release rather than version number to preserve likely upgrade path
    and avoid need for epoch or version number ugliness; may revisit this in
    light of upstream's future version numbering decisions


author: Paul Howarth <paul@city-fan.org> - 1.83-1
changelog:
  - Update to 1.83
    - Server Name Indication (SNI) support on the server side (CPAN RT#82761)
    - Reworked part of the documentation, like providing better examples


author: Paul Howarth <paul@city-fan.org> - 1.82-1
changelog:
  - Update to 1.82
    - sub error sets $SSL_ERROR etc. only if there really is an error; otherwise
      it will keep the latest error, which allows IO::Socket::SSL->new to report
      the correct problem, even if the problem is deeper in the code (like in
      connect)
    - Correct spelling (CPAN RT#82790)


author: Paul Howarth <paul@city-fan.org> - 1.81-1
changelog:
  - Update to 1.81
    - Deprecated set_ctx_defaults; new name is set_defaults (the old name is
      still available)
    - Changed handling of default path for SSL_(ca|cert|key)* keys: if one of
      these keys is user defined, don't add defaults for the others, i.e.
      don't mix user settings and defaults
    - Cleaner handling of module defaults vs. global settings vs. socket
      specific settings; global and socket specific settings are both provided
      by the user, while module defaults are not
    - Make IO::Socket::INET6 and IO::Socket::IP specific tests both run, even
      if both modules are installed, by faking a failed load of the other module
  - BR: perl(IO::Socket::INET6) and perl(Socket6) unconditionally


author: Paul Howarth <paul@city-fan.org> - 1.80-1
changelog:
  - Update to 1.80
    - Removed some warnings in test (missing SSL_verify_mode => 0), which caused
      tests to hang on Windows (CPAN RT#81493)


author: Paul Howarth <paul@city-fan.org> - 1.79-1
changelog:
  - Update to 1.79
    - Use getnameinfo instead of unpack_sockaddr_in6 to get PeerAddr and PeerPort
      from sockaddr in _update_peer, because this provides scope too
    - Work around systems that don't define AF_INET6 (CPAN RT#81216)
    - Prepare transition to a more secure default for SSL_verify_mode; the use of
      the current default SSL_VERIFY_NONE will cause a big warning for clients,
      unless SSL_verify_mode was explicitly set inside the application to this
      insecure value (in the near future the default will be SSL_VERIFY_PEER, and
      thus causing verification failures in unchanged applications)


author: Paul Howarth <paul@city-fan.org> - 1.76-1
changelog:
  - Update to 1.76
    - add support for IO::Socket::IP, which supports inet6 and inet4
      (CPAN RT#75218)
    - fix documentation errors (CPAN RT#77690)
    - made it possible to explicitly disable TLSv11 and TLSv12 in SSL_version
    - use inet_pton from either Socket.pm 1.95 or Socket6.pm
  - Use IO::Socket::IP for IPv6 support where available, else IO::Socket::INET6
  - Add runtime dependency for appropriate IPv6 support module so that we can
    ensure that we run at runtime what we tested with at build time


author: Paul Howarth <paul@city-fan.org> - 1.74-1
changelog:
  - Update to 1.74
    - accept a version of SSLv2/3 as SSLv23, because older documentation could
      be interpreted like this


author: Paul Howarth <paul@city-fan.org> - 1.73-1
changelog:
  - Update to 1.73
    - set DEFAULT_CIPHER_LIST to ALL:!LOW instead of HIGH:!LOW
    - make test t/dhe.t hopefully work with more versions of openssl


author: Paul Howarth <paul@city-fan.org> - 1.71-1
changelog:
  - Update to 1.71
    - 1.70 done right: don't disable SSLv2 ciphers; SSLv2 support is better
      disabled by the default SSL_version of 'SSLv23:!SSLv2'


author: Paul Howarth <paul@city-fan.org> - 1.70-1
changelog:
  - Update to 1.70
    - make it possible to disable protocols using SSL_version, and make
      SSL_version default to 'SSLv23:!SSLv2'


author: Paul Howarth <paul@city-fan.org> - 1.69-1
changelog:
  - Update to 1.69 (changes for CPAN RT#76929)
    - if no explicit cipher list is given, default to ALL:!LOW instead of the
      openssl default, which usually includes weak ciphers like DES
    - new config key SSL_honor_cipher_order and document how to use it to fight
      BEAST attack
    - fix behavior for empty cipher list (use default)
    - re-added workaround in t/dhe.t


author: Paul Howarth <paul@city-fan.org> - 1.64-1
changelog:
  - Update to 1.64
    - ignore die from within eval to make tests more stable on Win32
      (CPAN RT#76147)
    - clarify some behavior regarding hostname verification
  - Drop patch for t/dhe.t, no longer needed


author: Paul Howarth <paul@city-fan.org> - 1.61-1
changelog:
  - Update to 1.61
    - call CTX_set_session_id_context so that server's session caching works with
      client certificates too (CPAN RT#76053)


author: Paul Howarth <paul@city-fan.org> - 1.60-1
changelog:
  - Update to 1.60
    - don't make blocking readline if socket was set nonblocking, but return as
      soon no more data are available (CPAN RT#75910)
    - fix BUG section about threading so that it shows package as thread safe
      as long as Net::SSLeay ≥ 1.43 is used (CPAN RT#75749)
  - BR: perl(constant), perl(Exporter) and perl(IO::Socket)


author: Paul Howarth <paul@city-fan.org> - 1.59-1
changelog:
  - Update to 1.59
    - if SSLv2 is not supported by Net::SSLeay set SSL_ERROR with useful message
      when attempting to use it
    - modify constant declarations so that 5.6.1 should work again
  - Drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> - 1.58-1
changelog:
  - Update to 1.58
    - fix t/dhe.t for openssl 1.0.1 beta by forcing TLSv1, so that it does not
      complain about the too small RSA key, which it should not use anyway; this
      workaround is not applied for older openssl versions, where it would cause
      failures (CPAN RT#75165)
  - Add patch to fiddle the openssl version number in the t/dhe.t workaround
    because the OPENSSL_VERSION_NUMBER cannot be trusted in Fedora
  - One buildreq per line for readability
  - Drop redundant buildreq perl(Test::Simple)
  - Always run full test suite


author: Paul Howarth <paul@city-fan.org> - 1.56-1
changelog:
  - Update to 1.56
    - add automatic or explicit (via SSL_hostname) SNI support, needed for
      multiple SSL hostnames with the same IP (currently only supported for the
      client)
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - No need to delete empty directories from buildroot


author: Paul Howarth <paul@city-fan.org> - 1.55-1
changelog:
  - Update to 1.55
    - work around IO::Socket's work around for systems returning EISCONN etc. on
      connect retry for non-blocking sockets by clearing $! if SUPER::connect
      returned true (CPAN RT#75101)


author: Paul Howarth <paul@city-fan.org> - 1.54-1
changelog:
  - Update to 1.54
    - return 0 instead of undef in SSL_verify_callback to fix uninitialized
      warnings (CPAN RT#73629)


author: Paul Howarth <paul@city-fan.org> - 1.52-1
changelog:
  - Update to 1.52
    - fix for t/nonblock.t hangs on AIX (CPAN RT#72305)
    - disable t/memleak_bad_handshake.t on AIX, because it might hang
      (CPAN RT#72170)
    - fix syntax error in t/memleak_bad_handshake.t


author: Paul Howarth <paul@city-fan.org> - 1.49-1
changelog:
  - Update to 1.49
    - another regression for readline fix: this time it failed to return lines
      at EOF that don't end with newline - extended t/readline.t to catch this
      case and the fix for 1.48


author: Paul Howarth <paul@city-fan.org> - 1.48-1
changelog:
  - Update to 1.48
    - further fix for readline fix in 1.45: if the pending data were false (like
      '0'), it failed to read the rest of the line (CPAN RT#71953)


author: Paul Howarth <paul@city-fan.org> - 1.45-1
changelog:
  - Update to 1.45
    - fix readline to continue when getting interrupt waiting for more data
  - BR: perl(Carp)


author: Paul Howarth <paul@city-fan.org> - 1.44-1
changelog:
  - Update to 1.44
    - fix invalid call to inet_pton in verify_hostname_of_cert when identity
      should be verified as ipv6 address because it contains a colon


author: Paul Howarth <paul@city-fan.org> - 1.43-1
changelog:
  - Update to 1.43
    - add SSL_create_ctx_callback to have a way to adjust context on creation
      (CPAN RT#67799)
    - describe problem of fake memory leak because of big session cache and how
      to fix it (CPAN RT#68073)
    - fix t/nonblock.t
    - stability improvements for t/inet6.t


author: Paul Howarth <paul@city-fan.org> - 1.41-1
changelog:
  - Update to 1.41
    - fix issue in stop_SSL where it did not issue a shutdown of the SSL
      connection if it first received the shutdown from the other side
    - try to make t/nonblock.t more reliable, at least report the real cause of
      SSL connection errors
  - No longer need to re-code docs to UTF-8


author: Paul Howarth <paul@city-fan.org> - 1.40-1
changelog:
  - Update to 1.40
    - fix in example/async_https_server
    - get IDN support from URI (CPAN RT#67676)
  - Nobody else likes macros for commands


author: Paul Howarth <paul@city-fan.org> - 1.38-1
changelog:
  - Update to 1.38
    - fixed wildcards_in_cn setting for http, wrongly set in 1.34 to 1 instead of
      anywhere (CPAN RT#64864)


author: Paul Howarth <paul@city-fan.org> - 1.37-1
changelog:
  - Update to 1.37
    - don't complain about invalid certificate locations if user explicitly set
      SSL_ca_path and SSL_ca_file to undef: assume that user knows what they are
      doing and will work around the problems themselves (CPAN RT#63741)


author: Paul Howarth <paul@city-fan.org> - 1.36-1
changelog:
  - Update to 1.36
    - update documentation for SSL_verify_callback based on CPAN RT#63743 and
      CPAN RT#63740


author: Paul Howarth <paul@city-fan.org> - 1.35-1
changelog:
  - Update to 1.35 (addresses CVE-2010-4334)
    - if verify_mode is not VERIFY_NONE and the ca_file/ca_path cannot be
      verified as valid, it will no longer fall back to VERIFY_NONE but throw an
      error (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606058)


author: Paul Howarth <paul@city-fan.org> - 1.34-1
changelog:
  - Update to 1.34
    - schema http for certificate verification changed to wildcards_in_cn=1
    - if upgrading socket from inet to ssl fails due to handshake problems, the
      socket gets downgraded back again but is still open (CPAN RT#61466)
    - deprecate kill_socket: just use close()


author: Paul Howarth <paul@city-fan.org> - 1.33-1
changelog:
  - Update to 1.33
    - attempt to make t/memleak_bad_handshake.t more stable
    - fix hostname checking: only check an IP against subjectAltName GEN_IPADD


author: Paul Howarth <paul@city-fan.org> - 1.32-1
changelog:
  - Update to 1.32 (die in Makefile.PL if Scalar::Util has no dualvar support)
  - Use %{_fixperms} macro instead of our own %{__chmod} incantation


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30 (fix memleak when SSL handshake failed)
  - Add buildreq procps needed for memleak test


author: Paul Howarth <paul@city-fan.org> - 1.27-1
changelog:
  - Update to 1.27
    - various regex fixes for i18n and service names
    - fix warnings from perl -w (CPAN RT#48131)
    - improve handling of errors from Net::ssl_write_all


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26 (verify_hostname_of_cert matched only the prefix for the
    hostname when no wildcard was given, e.g. www.example.org matched against a
    certificate with name www.exam in it [#509819])


author: Paul Howarth <paul@city-fan.org> - 1.15-1
changelog:
  - Update to latest upstream version: 1.15
  - Add buildreq and req for perl(Net::LibIDN) to avoid croaking when trying to
    verify an international name against a certificate


author: Robin Norwood <rnorwood@redhat.com> - 1.12-1
changelog:
  - Update to latest upstream version: 1.12
  - Fix license tag
  - Add BuildRequires for ExtUtils::MakeMaker and Test::Simple
  - Fix package review issues:
  - Source URL
  - Resolves: bz#226264


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-8.1
changelog:
  - Define nnp_nosuid_transition policy capability (rhbz#1480519)
  - use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  - Allow runtime labeling of ibendports (rhbz#1464489)
  - Allow runtime labeling of Infiniband Pkeys (rhbz#1464489)
  - Add IB end port handling to CIL (rhbz#1464489)
  - Add ibendport ocontext handling (rhbz#1464489)
  - Add support for ibendportcon labels (rhbz#1464489)
  - Add Infiniband Pkey handling to CIL (rhbz#1464489)
  - Add ibpkey ocontext handling (rhbz#1464489)
  - Add support for ibpkeycon labels (rhbz#1464489)
  - Remove unused attribute on a used argument from avrule_read() (rhbz#1464489)
  - Add binary module support for xperms
  - Add support for converting extended permissions to CIL


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-7
changelog:
  - Define cgroup_seclabel policy capability (rhbz#1493517)
  - Fix unitialized jmp and invalid dereference


author: Petr Lautrbach <plautrba@redhat.com> 2.5-6
changelog:
  - Fix memory leak in expand.c
  - Fix invalid read when policy file is corrupt
  - Fix possible use of uninitialized variables


author: Petr Lautrbach <plautrba@redhat.com> 2.5-5
changelog:
  - Warn instead of fail if permission is not resolved
  - Ignore object_r when adding userrole mappings to policydb


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Correctly detect unknown classes in sepol_string_to_security_class
  - Sort object files for deterministic linking order
  - Fix neverallowxperm checking on attributes
  - Remove libsepol.map when cleaning
  - Add high-level language line marking support to CIL
  - Change logic of bounds checking to match change in kernel
  - Fix multiple spelling errors
  - Only apply bounds checking to source types in rules
  - Fix CIL and not add an attribute as a type in the attr_type_map
  - Build policy on systems not supporting DCCP protocol
  - Fix extended permissions neverallow checking
  - Fix CIL neverallow and bounds checking
  - Android.mk: Add -D_GNU_SOURCE to common_cflags


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Update to upstream 
  	* filename_trans: use some better sorting to compare and merge
  	* coverity fixes
  	* implement default type policy syntax
  	* Fix memory leak issues found by Klocwork
  - Add CONTRAINT_NAMES to the kernel


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Update to upstream 
  	* fix neverallow checking on attributes
  	* Move context_copy() after switch block in ocontext_copy_*().
  	* check for missing initial SID labeling statement.
  	* Add always_check_network policy capability
  	* role_fix_callback skips out-of-scope roles during expansion.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
changelog:
  - Update to upstream 
  	* reserve policycapability for redhat testing of ptrace child
  	* cosmetic changes to make the source easier to read
  	* prepend instead of append to filename_trans list
  	* Android/MacOS X build support
  	* allocate enough space to hold filename in trans rules


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-3
changelog:
  - Fix off by one error that is causing file_name transition rules to be expanded- incorrectly on i686 machines


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-2
changelog:
  - Allow policy to specify the source of target for generating the default user,role 
  - or mls label for a new target.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  - Update to upstream 
  	* regenerate .pc on VERSION change
  	* Move ebitmap_* functions from mcstrans to libsepol
  	* expand: do filename_trans type comparison on mapped representation


author: Dan Walsh <dwalsh@redhat.com> - 2.1.3-2
changelog:
  -The filename_trans code had a bug where duplicate detection was being
  done between the unmapped type value of a new rule and the type value of
  rules already in policy.  This meant that duplicates were not being
  silently dropped and were instead outputting a message that there was a
  problem.  It made things hard because the message WAS using the mapped
  type to convert to the string representation, so it didn't look like a
  dup!


author: Dan Walsh <dwalsh@redhat.com> - 2.1.3-1
changelog:
  -Update to upstream
  	* Skip writing role attributes for policy.X and
  	* Indicate when boolean is indeed a tunable.
  	* Separate tunable from boolean during compile.
  	* Write and read TUNABLE flags in related
  	* Copy and check the cond_bool_datum_t.flags during link.
  	* Permanently discard disabled branches of tunables in
  	* Skip tunable identifier and cond_node_t in expansion.
  	* Create a new preserve_tunables flag
  	* Preserve tunables when required by semodule program.
  	* setools expects expand_module_avrules to be an exported
  	* tree: default make target to all not


author: Dan Walsh <dwalsh@redhat.com> - 2.1.2-0
changelog:
  - Update to upstream 
  	* Only call role_fix_callback for base.p_roles during expansion.
  	* use mapped role number instead of module role number


author: Dan Walsh <dwalsh@redhat.com> 2.0.44-1
changelog:
  -Update to upstream
  	* Fixes for new role_transition class field by Eric Paris.
  	* Add libsepol support for filename_trans rules by Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> 2.0.42-3
changelog:
  - Apply Eparis Patch
    This patch add libsepol support for filename_trans rules.  These rules
  allow on to make labeling decisions for new objects based partially on
  the last path component.  They are stored in a list.  If we find that
  the number of rules grows to an significant size I will likely choose to
  store these in a hash, both in libsepol and in the kernel.  But as long
  as the number of such rules stays small, this should be good.


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Upgrade to latest from NSA
    * Check last offset in the module package against the file size.
    Reported by Manoj Srivastava for bug filed by Max Kellermann.


author: Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-2
changelog:
  * Wed Feb 18 2009 Dan Walsh <dwalsh@redhat.com> 2.0.35-1
  - Upgrade to latest from NSA
          * Fix alias field in module format, caused by boundary format change
            from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-1
changelog:
  - Upgrade to latest from NSA
    * Add bounds support from KaiGai Kohei.
    * Fix invalid aliases bug from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 2.0.32-1
changelog:
  - Upgrade to latest from NSA
    * Allow require then declare in the source policy from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 2.0.31-1
changelog:
  - Upgrade to latest from NSA
    * Fix mls_semantic_level_expand() to handle a user require w/o MLS information from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.30-1
changelog:
  - Upgrade to latest from NSA
    * Fix endianness bug in the handling of network node addresses from Stephen Smalley.
      Only affects big endian platforms.
      Bug reported by John Weeks of Sun upon policy mismatch between x86 and sparc.


author: Dan Walsh <dwalsh@redhat.com> 2.0.28-1
changelog:
  - Upgrade to latest from NSA
    * Fix mls_level_convert() to gracefully handle an empty user declaration/require from Stephen Smalley.
    * Belatedly merge test for policy downgrade from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-1
changelog:
  - Upgrade to latest from NSA
    * Drop unused ->buffer field from struct policy_file.
    * Add policy_file_init() initalizer for struct policy_file and use it, from Todd C. Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.23-1
changelog:
  - Upgrade to latest from NSA
    * Accept "Flask" as an alternate identifier string in kernel policies from Stephen Smalley.
    * Add support for open_perms policy capability from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> 2.0.21-1
changelog:
  - Upgrade to latest from NSA
    * Fix invalid memory allocation in policydb_index_others() from Jason Tang.


author: Dan Walsh <dwalsh@redhat.com> 2.0.20-1
changelog:
  - Upgrade to latest from NSA
    * Port of Yuichi Nakamura's tune avtab to reduce memory usage patch from the kernel avtab to libsepol from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.19-1
changelog:
  - Upgrade to latest from NSA
    * Add support for consuming avrule_blocks during expansion to reduce
      peak memory usage.


author: Dan Walsh <dwalsh@redhat.com> 2.0.18-1
changelog:
  - Upgrade to latest from NSA
    * Added support for policy capabilities from Todd Miller.
    * Prevent generation of policy.18 with MLS enabled from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.15-1
changelog:
  - Upgrade to latest from NSA
    * clarify and reduce neverallow error reporting from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.14-1
changelog:
  - Upgrade to latest from NSA
    * Reject self aliasing at link time from Stephen Smalley.
    * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.
    * Fixed bug in require checking from Stephen Smalley.
    * Added user hierarchy checking from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.10-1
changelog:
  - Upgrade to latest from NSA
    * Merged support for the handle_unknown policydb flag from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> 2.0.9-1
changelog:
  - Upgrade to latest from NSA
    * Moved next_entry and put_entry out-of-line to reduce code size from Ulrich Drepper.
    * Fixed module_package_read_offsets bug introduced by the prior patch.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-1
changelog:
  - Upgrade to latest from NSA
    * Eliminate unaligned accesses from policy reading code from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.5-1
changelog:
  - Upgrade to latest from NSA
       * Fix sepol_context_clone to handle a NULL context correctly.
            This happens for e.g. semanage_fcontext_set_con(sh, fcontext, NULL)
      to set the file context entry to "<<none>>".
  - Apply patch from Joshua Brindle to disable dontaudit rules


author: Dan Walsh <dwalsh@redhat.com> 2.0.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged add boolmap argument to expand_module_avrules() from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 2.0.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix from Karl to remap booleans at expand time to 
      avoid holes in the symbol table.


author: Dan Walsh <dwalsh@redhat.com> 2.0.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged libsepol segfault fix from Stephen Smalley for when
      sensitivities are required but not present in the base.
    * Merged patch to add errcodes.h to libsepol by Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.15.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to compile wit -fPIC instead of -fpic from
      Manoj Srivastava to prevent hitting the global offest table
      limit. Patch changed to include libselinux and libsemanage in
      addition to libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.15.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix from Karl MacMillan for a segfault when linking
      non-MLS modules with users in them.


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix for version comparison that was preventing range
      transition rules from being written for a version 5 base policy
      from Darrel Goeddel.


author: Dan Walsh <dwalsh@redhat.com> 1.12.27-1
changelog:
  - Upgrade to latest from NSA
    * Merged mls user and range_transition support in modules
      from Darrel Goeddel


author: Dan Walsh <dwalsh@redhat.com> 1.12.26-1
changelog:
  - Upgrade to latest from NSA
    * Merged range transition enhancements and user format changes
      Darrel Goeddel


author: Dan Walsh <dwalsh@redhat.com> 1.12.25-1
changelog:
  - Upgrade to latest from NSA
    * Merged conditionally expand neverallows patch from Jeremy Mowery.
    * Merged refactor expander patch from Jeremy Mowery.


author: Dan Walsh <dwalsh@redhat.com> 1.12.24-1
changelog:
  - Upgrade to latest from NSA
    * Merged libsepol unit tests from Joshua Brindle.
    * Merged symtab datum patch from Karl MacMillan.
    * Merged netfilter contexts support from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.12.21-1
changelog:
  - Upgrade to latest from NSA
    * Merged helpful hierarchy check errors patch from Joshua Brindle.
    * Merged semodule_deps patch from Karl MacMillan.
      This adds source module names to the avrule decls.


author: Dan Walsh <dwalsh@redhat.com> 1.12.19-1
changelog:
  - Upgrade to latest from NSA
    * Lindent.
    * Merged optionals in base take 2 patch set from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.12.17-1
changelog:
  - Upgrade to latest from NSA
    * Revert 1.12.16.
    * Merged cleaner fix for bool_ids overflow from Karl MacMillan,
      replacing the prior patch.
    * Merged fixes for several memory leaks in the error paths during
      policy read from Serge Hallyn.


author: Dan Walsh <dwalsh@redhat.com> 1.12.14-1
changelog:
  - Upgrade to latest from NSA
    * Fixed bool_ids overflow bug in cond_node_find and cond_copy_list,
      based on bug report and suggested fix by Cedric Roux.
    * Merged sens_copy_callback, check_role_hierarchy_callback,
      and node_from_record fixes from Serge Hallyn.


author: Dan Walsh <dwalsh@redhat.com> 1.12.12-1
changelog:
  - Upgrade to latest from NSA
    * Added sepol_policydb_compat_net() interface for testing whether
      a policy requires the compatibility support for network checks
      to be enabled in the kernel.


author: Dan Walsh <dwalsh@redhat.com> 1.12.11-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to initialize sym_val_to_name arrays from Kevin Carr.
      Reworked to use calloc in the first place, and converted some other
      malloc/memset pairs to calloc calls.


author: Dan Walsh <dwalsh@redhat.com> 1.12.9-1
changelog:
  - Upgrade to latest from NSA
    * Dropped tests from all Makefile target.
    * Merged fix warnings patch from Karl MacMillan.
    * Merged libsepol test framework patch from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.12.6-1
changelog:
  - Upgrade to latest from NSA
    * Fixed cond_normalize to traverse the entire cond list at link time.


author: Dan Walsh <dwalsh@redhat.com> 1.12.5-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix for leak of optional package sections from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.12.3-1
changelog:
  - Upgrade to latest from NSA
    * Fixed attr_convert_callback and expand_convert_type_set
      typemap bug.


author: Dan Walsh <dwalsh@redhat.com> 1.12-2
changelog:
  - Upgrade to latest from NSA
    * Updated version for release.
    * Merged cond_evaluate_expr fix from Serge Hallyn (IBM).
    * Fixed bug in copy_avrule_list reported by Ivan Gyurdiev.
    * Merged sepol_policydb_mls_enabled interface and error handling
      changes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.18-1
changelog:
  - Upgrade to latest from NSA
    * Merged node_expand_addr bugfix and node_compare* change from
      Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.17-1
changelog:
  - Upgrade to latest from NSA
    * Merged nodes, ports: always prepend patch from Ivan Gyurdiev.
    * Merged bug fix patch from Ivan Gyurdiev.
    * Added a defined flag to level_datum_t for use by checkpolicy.
    * Merged nodecon support patch from Ivan Gyurdiev.
    * Merged cleanups patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.13-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser/user_extra support patch from Joshua Brindle.
    * Merged fix patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.12-1
changelog:
  - Upgrade to latest from NSA
    * Merged assertion copying bugfix from Joshua Brindle.
    * Merged sepol_av_to_string patch from Joshua Brindle.
    * Merged clone record on set_con patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.10-1
changelog:
  - Upgrade to latest from NSA
    * Merged cond_expr mapping and package section count bug fixes
      from Joshua Brindle.
    * Merged improve port/fcontext API patch from Ivan Gyurdiev.  
    * Merged fixes for overflow bugs on 64-bit from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.7-1
changelog:
  - Upgrade to latest from NSA
    * Merged const in APIs patch from Ivan Gyurdiev.
    * Merged compare2 function patch from Ivan Gyurdiev.
    * Fixed hierarchy checker to only check allow rules.


author: Dan Walsh <dwalsh@redhat.com> 1.11.5-1
changelog:
  - Upgrade to latest from NSA
    * Merged further fixes from Russell Coker, specifically:
      - av_to_string overflow checking
      - sepol_context_to_string error handling
      - hierarchy checking memory leak fixes and optimizations
      - avrule_block_read variable initialization
    * Marked deprecated code in genbools and genusers.


author: Dan Walsh <dwalsh@redhat.com> 1.11.4-1
changelog:
  - Upgrade to latest from NSA
    * Merged bugfix for sepol_port_modify from Russell Coker.
    * Fixed bug in sepol_iface_modify error path noted by Ivan Gyurdiev.
    * Merged port ordering patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.2-2
changelog:
  - Upgrade to latest from NSA
    * Merged patch series from Ivan Gyurdiev.
      This includes patches to:
      - support ordering of records in compare function
      - enable port interfaces
      - add interfaces for context validity and range checks
      - add include guards


author: Dan Walsh <dwalsh@redhat.com> 1.9.40-1
changelog:
  - Upgrade to latest from NSA
    * Merged module function and map file cleanup from Ivan Gyurdiev.
    * Merged MLS and genusers cleanups from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.39-1
changelog:
  - Upgrade to latest from NSA
    Prepare for removal of booleans* and *.users files.
    * Cleaned up sepol_genbools to not regenerate the image if
      there were no changes in the boolean values, including the
      degenerate case where there are no booleans or booleans.local
      files.
    * Cleaned up sepol_genusers to not warn on missing local.users.


author: Dan Walsh <dwalsh@redhat.com> 1.9.38-1
changelog:
  - Upgrade to latest from NSA
    * Removed sepol_port_* from libsepol.map, as the port interfaces
      are not yet stable.


author: Dan Walsh <dwalsh@redhat.com> 1.9.36-1
changelog:
  - Upgrade to latest from NSA
    * Merged context_to_string interface change patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.35-1
changelog:
  - Upgrade to latest from NSA
    * Added src/dso.h and src/*_internal.h.
      Added hidden_def for exported symbols used within libsepol.
      Added hidden for symbols that should not be exported by
      the wildcards in libsepol.map.


author: Dan Walsh <dwalsh@redhat.com> 1.9.34-1
changelog:
  - Upgrade to latest from NSA
    * Merged record interface, record bugfix, and set_roles patches 
      from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.32-1
changelog:
  - Upgrade to latest from NSA
    * Added further checking and error reporting to 
      sepol_module_package_read and _info.
    * Merged sepol handle passing, DEBUG conversion, and memory leak
      fix patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.30-1
changelog:
  - Upgrade to latest from NSA
    * Removed processing of system.users from sepol_genusers and
      dropped delusers logic.
    * Removed policydb_destroy from error path of policydb_read,
      since create/init/destroy/free of policydb is handled by the
      caller now.
    * Fixed sepol_module_package_read to handle a failed policydb_read
      properly.
    * Merged query/exists and count patches from Ivan Gyurdiev.
    * Merged fix for pruned types in expand code from Joshua Brindle.
    * Merged new module package format code from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.9.26-1
changelog:
  - Upgrade to latest from NSA
    * Merged context interface cleanup, record conversion code, 
      key passing, and bug fix patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.25-1
changelog:
  - Upgrade to latest from NSA
    * Merged users cleanup patch from Ivan Gyurdiev.
    * Merged user record memory leak fix from Ivan Gyurdiev.
    * Merged reorganize users patch from Ivan Gyurdiev.

  - Need to check for /sbin/telinit


author: Dan Walsh <dwalsh@redhat.com> 1.9.23-1
changelog:
  - Upgrade to latest from NSA
    * Added check flag to expand_module() to control assertion
      and hierarchy checking on expansion.
    * Reworked check_assertions() and hierarchy_check_constraints()
      to take handles and use callback-based error reporting.
    * Changed expand_module() to call check_assertions() and 
      hierarchy_check_constraints() prior to returning the expanded
      policy.


author: Dan Walsh <dwalsh@redhat.com> 1.9.21-1
changelog:
  - Upgrade to latest from NSA
    * Changed sepol_module_package_set_file_contexts to copy the
      file contexts data since it is internally managed.
    * Added sepol_policy_file_set_handle interface to associate
      a handle with a policy file.
    * Added handle argument to policydb_from_image/to_image.
    * Added sepol_module_package_set_file_contexts interface.
    * Dropped sepol_module_package_create_file interface.
    * Reworked policydb_read/write, policydb_from_image/to_image, 
      and sepol_module_package_read/write to use callback-based error
      reporting system rather than DEBUG.


author: Dan Walsh <dwalsh@redhat.com> 1.9.19-1
changelog:
  - Upgrade to latest from NSA
    * Reworked link_packages, link_modules, and expand_module to use
    callback-based error reporting system rather than error buffering.


author: Dan Walsh <dwalsh@redhat.com> 1.9.18-1
changelog:
  - Upgrade to latest from NSA
    * Merged conditional expression mapping fix in the module linking
    code from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.9.17-1
changelog:
  - Upgrade to latest from NSA
    * Hid sepol_module_package type definition, and added get interfaces.
    * Merged new callback-based error reporting system from Ivan
    Gyurdiev.
    * Merged support for require blocks inside conditionals from
    Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.9.14.1-1
changelog:
  - Upgrade to latest from NSA
    * Fixed use of policydb_from_image/to_image to ensure proper
    init of policydb.
    * Isolated policydb internal headers under <sepol/policydb/*.h>.
    These headers should only be used by users of the static libsepol.
    Created new <sepol/policydb.h> with new public types and interfaces
    for shared libsepol.
    Created new <sepol/module.h> with public types and interfaces moved
    or wrapped from old module.h, link.h, and expand.h, adjusted for
    new public types for policydb and policy_file.
    Added public interfaces to libsepol.map.
    Some implementation changes visible to users of the static libsepol:
    1) policydb_read no longer calls policydb_init.
    Caller must do so first.
    2) policydb_init no longer takes policy_type argument.
    Caller must set policy_type separately.
    3) expand_module automatically enables the global branch.  
    Caller no longer needs to do so.
    4) policydb_write uses the policy_type and policyvers from the 
    policydb itself, and sepol_set_policyvers() has been removed.


author: Dan Walsh <dwalsh@redhat.com> 1.9.11-1
changelog:
  - Upgrade to latest from NSA
    * Merged bug fix for check_assertions handling of no assertions
    from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.9.10-1
changelog:
  - Upgrade to latest from NSA
    * Merged iterate patch from Ivan Gyurdiev.
    * Merged MLS in modules patch from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.9.8-1
changelog:
  - Upgrade to latest from NSA
    * Merged pointer typedef elimination patch from Ivan Gyurdiev.
    * Merged user list function, new mls functions, and bugfix patch
      from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.5-1
changelog:
  - Upgrade to latest from NSA
    * Merged boolean record and memory leak fix patches from Ivan
    Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.1-2
changelog:
  - Upgrade to latest from NSA
    * Merged stddef.h patch and debug conversion patch from 
    Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.1-1
changelog:
  - Upgrade to latest from NSA
    * Fixed expand_avtab and expand_cond_av_list to keep separate
    entries with identical keys but different enabled flags.
    * Updated version for release.


author: Dan Walsh <dwalsh@redhat.com> 1.7.24-1
changelog:
  - Upgrade to latest from NSA
    * Fixed symtab_insert return value for duplicate declarations.
    * Merged fix for memory error in policy_module_destroy from
    Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.7.22-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix for memory leak in sepol_context_to_sid from
    Jason Tang (Tresys).
    * Merged fixes for resource leaks on error paths and
      change to scope_destroy from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.7.20-1
changelog:
  - Upgrade to latest from NSA
    * Merged more fixes for resource leaks on error paths 
      from Serge Hallyn (IBM).  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.7.19-1
changelog:
  - Upgrade to latest from NSA
    * Changed to treat all type conflicts as fatal errors.
    * Merged several error handling fixes from 
      Serge Hallyn (IBM).  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.7.15-1
changelog:
  - Upgrade to latest from NSA
    * Fixed empty list test in cond_write_av_list.  Bug found by
      Coverity, reported by Serge Hallyn (IBM).
    * Merged patch to policydb_write to check errors 
      when writing the type->attribute reverse map from
      Serge Hallyn (IBM).  Bug found by Coverity.
    * Fixed policydb_destroy to properly handle NULL type_attr_map
      or attr_type_map.


author: Dan Walsh <dwalsh@redhat.com> 1.7.13-1
changelog:
  - Upgrade to latest from NSA
    * Improved memory use by SELinux by both reducing the avtab 
      node size and reducing the number of avtab nodes (by not
      expanding attributes in TE rules when possible).  Added
      expand_avtab and expand_cond_av_list functions for use by
      assertion checker, hierarchy checker, compatibility code,
      and dispol.  Added new inline ebitmap operators and converted
      existing users of ebitmaps to the new operators for greater 
      efficiency.
      Note:  The binary policy format version has been incremented to 
      version 20 as a result of these changes.


author: Dan Walsh <dwalsh@redhat.com> 1.7.10-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to move module read/write code from libsemanage
      to libsepol from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.7.9-1
changelog:
  - Upgrade to latest from NSA
    * Enabled further compiler warning flags and fixed them.
    * Merged user, context, port records patch from Ivan Gyurdiev.
    * Merged key extract function patch from Ivan Gyurdiev.
    * Merged mls_context_to_sid bugfix from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.7.6-1
changelog:
  - Upgrade to latest from NSA
    * Merged context reorganization, memory leak fixes, 
      port and interface loading, replacements for genusers and
      genbools, debug traceback, and bugfix patches from Ivan Gyurdiev.
    * Merged uninitialized variable bugfix from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.7.5-1
changelog:
  - Upgrade to latest from NSA
    * Merged debug support, policydb conversion functions from Ivan Gyurdiev (Red Hat).
    * Removed genpolbools and genpolusers utilities.
    * Merged hierarchy check fix from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.7.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged header file cleanup and memory leak fix from Ivan Gyurdiev (Red Hat).
    * Merged genbools debugging message cleanup from Red Hat.


author: Dan Walsh <dwalsh@redhat.com> 1.5.10-1
changelog:
  - Fix reset booleans warning message
  - Upgrade to latest from NSA
    * License changed to LGPL v2.1, see COPYING.


author: Dan Walsh <dwalsh@redhat.com> 1.5.9-2
changelog:
  - Upgrade to latest from NSA
    * Added sepol_genbools_policydb and sepol_genusers_policydb for
      audit2why.


author: Dan Walsh <dwalsh@redhat.com> 1.5.8-1
changelog:
  - Upgrade to latest from NSA
    * Added sepol_ prefix to Flask types to avoid 
      namespace collision with libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.5.2-1
changelog:
  - Update to latest from NSA
    * Added man page for sepol_check_context.
    * Added man page for sepol_genusers function.
    * Merged man pages for genpolusers and chkcon from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.3.8-1
changelog:
  - Update to latest from NSA
          * Cleaned up error handling in sepol_genusers and sepol_genbools.


author: Dan Walsh <dwalsh@redhat.com> 1.3.6-1
changelog:
  - Update to latest from NSA
    * Changed sepol_genusers to also use getline and correctly handle
      EOL.


author: Dan Walsh <dwalsh@redhat.com> 1.3.5-1
changelog:
  - Update to latest from NSA
    * Merged endianness and compute_av patches from Darrel Goeddel (TCS).
    * Merged range_transition support from Darrel Goeddel (TCS).
    * Added sepol_genusers function.


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-5
changelog:
  - Moving from rpmfusion-free to Fedora because it will be free of known patents
    in all countries from 2012-04-04 onwards
  - Changed license from GPL to GPLv2+ and included up-to-date license file


author: Mike Bonnet <mikeb@redhat.com> - 1.0.90-1
changelog:
  - return the contents of the AP_REP message from rd_rep()
  - improved memory handling
  - removed use of KRB_PRIVATE


author: Mike Bonnet <mikeb@redhat.com> - 1.0.12-2
changelog:
  - configure.in: parse version number out of spec file
  - add URL tag
  - add LGPL text
  - remove Requires: krb5-libs, let rpm pick up library dependencies
  - bump revision


author: Mike Bonnet <mikeb@redhat.com>
changelog:
  - fix typo in error definition
  - change the return value of recvauth() from ac to (ac, princ), where princ is the principal sent by sendauth()
  - rename the package and reorganize the BuildRequires, to be more Extras-friendly


author: David Arcari <darcari@redhat.com> 5.44-1
changelog:
  - Update to 5.44
  - Ship btattach tool
  - Configure systemctl settings for bluez-obex correctly
  - Add Provides: bluez-obexd
  Resolves: #1434581, #1401501


author: Don Zickus <dzickus@redhat.com> 5.41-1
changelog:
  - Update to 5.41
  - obexd fixes to prevent crashes
  - add /etc/bluetooth/main.conf config file
  Resolves: #1313363, #1336476, #1338895


author: Bastien Nocera <bnocera@redhat.com> 4.101-4
changelog:
  - Clean up requires and build requires
  - Use CUPS macro (#772236)
  - Enable audio socket so a2dp works in PulseAudio again (#874015)
  - Fix hid2hci not working with recent kernels (#877998)


author: Hans de Goede <hdegoede@redhat.com> 4.96-3
changelog:
  - Put hid2hci into its own (optional) subpackage, so that people who
    just want to use their HID proxying HCI with the keyboard and mouse
    it came with, will have things working out of the box.
  - Put udev rules in /lib/udev, where package installed udev rules belong


author: Hans de Goede <hdegoede@redhat.com> 4.96-2
changelog:
  - hid2hci was recently removed from udev and added to bluez in 4.93,
    udev in Fedora-16 no longer has hid2hci -> enable it in our bluez builds.
    This fixes bluetooth not working on machines where the bluetooth hci
    initially shows up as a hid device, such as with many Dell laptops.


author: Lennart Poettering <lpoetter@redhat.com> - 4.94-4
changelog:
  - Enable bluetoothd on all upgrades from 4.87-6 and older, in order to fix up broken F15 installations


author: Lennart Poettering <lpoetter@redhat.com> - 4.94-2
changelog:
  - Enable bluetoothd by default
  - Follow-up on https://bugzilla.redhat.com/show_bug.cgi?id=694519 also fixing upgrades


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> 4.69-3
changelog:
  - Comment out Requires: dbus-bluez-pin-helper for bootstrapping. Otherwise
    it drags in the old blueman, built against python-2.6


author: Dan Horák <dan[at]danny.cz> 4.66-3
changelog:
  - don't require the pin helper on s390(x) now, we can disable the whole
    bluetooth stack in the future


author: Bastien Nocera <bnocera@redhat.com> 4.61-1
changelog:
  - Update to 4.61
  - Remove Wacom tablet enabler, now in the kernel
  - Fix linking with new DSO rules (#564799)


author: Bastien Nocera <bnocera@redhat.com> 4.57-2
changelog:
  - Move the rfcomm.conf to the compat package, otherwise
    the comments at the top of it are confusing


author: Bastien Nocera <bnocera@redhat.com> 4.50-2
changelog:
  - Remove obsoleted patches
  - Add another CUPS backend patch
  - Update cable pairing patch for new build system


author: Bastien Nocera <bnocera@redhat.com> 4.47-2
changelog:
  - Remove hid2hci calls, they're in udev now
  - Work-around udev bug, bluetoothd wasn't getting enabled
    on coldplug


author: Karsten Hopp <karsten@redhat.com> 4.29-2
changelog:
  - bluez builds fine on s390(x) and the packages are required to build
    other packages, drop ExcludeArch


author: - David Woodhouse <David.Woodhouse@intel.com> - 4.5-2
changelog:
  - Change main utils package name to 'bluez'; likewise its subpackages
  - Remove references to obsolete initscripts (hidd,pand,dund)


author: - Bastien Nocera <bnocera@redhat.com> - 4.5-1
changelog:
  - Update to 4.5
  - Fix initscript to actually start bluetoothd by hand
  - Add chkconfig information to the initscript


author: Dan Williams <dcbw@redhat.com> - 0.7.991-2.git20130710
changelog:
  - Handle PNP connected devices
  - Fall back to AT for messaging if QMI modem doesn't support the WMS service
  - Fix IPv6 bearer creation for HSO devices
  - Fix detection of supported modes on Icera-based modems
  - Fix handling of some Icera-based modems with limited capability ports
  - Add support for Olivetti Olicard 200


author: Dan Williams <dcbw@redhat.com> - 0.7.991-1.git20130607
changelog:
  - Update to 0.7.991 snapshot
  - Fix SMS validity parsing
  - Allow registration changes to 'searching' without disconnecting
  - Fix reading SMS messages from some QMI-based devices
  - Increase connection timeout for Novatel E362
  - Fix PIN retries checking when unlocking Ericsson devices
  - Better handling of supported and preferred modes (eg 2G, 3G, 4G preference)


author: Kalev Lember <kalevlember@gmail.com> - 0.7.990-3.git20130515
changelog:
  - Install the libmm-glib.so symlink in -glib-devel
  - Include the /usr/share/libmm-glib directory in -glib-devel
  - Make sure -glib-devel subpackage depends on the base -glib package


author: Dan Williams <dcbw@redhat.com> - 0.6.0.0-1
changelog:
  - Update to 0.6.0
  - core: fix SMS notifications on many Qualcomm devices
  - core: use SMS PDU mode by default (more compatible)
  - novatel: fix CDMA roaming indication
  - zte: support more devices
  - zte: power down modems when disabled
  - mbm: power down modems when disabled
  - mbm: add support for Ericsson H5321
  - sierra: fix detection of secondary ports
  - sierra: more reliable connections with USB 305/AT&T Lightning


author: Dan Williams <dcbw@redhat.com> - 0.5.3.96-1
changelog:
  - Update to 0.5.3.96 (0.5.4-rc2)
  - core: fix SMS handling on a number of devices
  - zte: support for devices that use Icera chipsets
  - core: ignore unsupported QMI WWAN ports (rh #835153)


author: Dan Williams <dcbw@redhat.com> - 0.5.2.0-1
changelog:
  - Update to 0.5.2
  - core: retry sending SMS in PDU mode if text fails
  - hso: fix connection regression due to Nokia device fixes


author: Dan Williams <dcbw@redhat.com> - 0.5.1.97-1
changelog:
  - Update to 0.5.2-rc1
  - core: fix a few crashes
  - nokia: fix issues with various Nokia devices
  - huawei: fix modem crashes with older Huawei devices (like E220)


author: Dan Williams <dcbw@redhat.com> - 0.5.1.96-1
changelog:
  - Update to git snapshot of 0.5.2
  - option: fix handling of access technology reporting
  - cdma: fix handling of EVDO registration states
  - mbm: fix problems reconnecting on Ericsson F5521gw modems
  - gsm: fix connections using the Motorola Flipout
  - gsm: better detection of registration state when connecting
  - mbm: add support for more Ericsson modems
  - gobi: ensure rebranded Gobi devices are driven by Gobi
  - gsm: fix SMS multipart messages, PDU-only mode, and text-mode message listing
  - huawei: fix USSD handling
  - nokia: add support for Nokia Internet Sticks
  - gsm: fix registration response handling on some newer devices
  - sierra: add support for Icera-based devices (USB305, AT&T Lightning)


author: Dan Williams <dcbw@redhat.com> - 0.4.998-1.git20110706
changelog:
  - Update to 0.5-beta4
  - gsm: various USSD fixes
  - samsung: support for Y3400 module and various other fixes
  - gobi: support access technology reporting while disconnected
  - nokia: fix issues with N900 USB connected operation (rh #583691)


author: Dan Williams <dcbw@redhat.com> - 0.4.997-1
changelog:
  - Update to 0.5-beta3
  - samsung: only support Y3300 (fixes issues with other Samsung modems)
  - longcheer: restrict to only supported devices
  - simtech: add support for Prolink PH-300
  - gsm: various SMS cleanups and fixes
  - x22x: add support for access technology reporting and the Alcatel X200 modem


author: Dan Williams <dcbw@redhat.com> 0.4-8.git20110427
changelog:
  - samsung: add support for Samsung Y3300 GSM modem
  - huawei: fixes for probing and handling various Huawei devices
  - wavecom: add support for some Wavecom modems
  - zte: fix crashes with Icera-based devices
  - mbm: add support for Lenovo F5521gw module
  - core: add support for basic SMS reception
  - core: faster probing for devices that support it (option, samsung)


author: Dan Williams <dcbw@redhat.com> - 0.4-5.git20110201
changelog:
  - core: add device and SIM identifier properties
  - dbus: fix property access permissions via D-Bus (rh #58594)
  - cdma: better detection of EVDO registration
  - cdma: recognize dual-mode devices as CDMA instead of GSM
  - gsm: better handling of wrong PIN entry
  - gsm: allow usage of older GSM character encoding schemes
  - gsm: preliminary USSD support
  - gsm: fix handling of modems that report signal strength via +CIND
  - sierra: fix handling of Sierra CnS ports mistakenly recognized as QCDM
  - sierra: ensure packet-switched network attachment before dialing
  - zte: add support for T-Mobile Rocket 2.0
  - mbm: add support for HP-branded Ericsson devices
  - linktop: add support for Linktop/Teracom LW273
  - x22x: add support for various Alcatel devices (like the X220D)


author: Dan Williams <dcbw@redhat.com> - 0.4-4.git20100720
changelog:
  - gsm: fix location services API signals
  - gsm: fix issue with invalid operator names (rh #597088)
  - novatel: fix S720 signal strength reporting
  - novatel: detect CDMA home/roaming status


author: Dan Williams <dcbw@redhat.com> - 0.4-2.git20100628
changelog:
  - core: fix crash during probing when a plugin doesn't support all ports (rh #603294)
  - gsm: better registration state checking when devices don't support AT+CREG (Blackberries)
  - gsm: add support for getting remaining unlock retry counts


author: Dan Williams <dcbw@redhat.com> - 0.4-1.git20100622
changelog:
  - core: fix occasional crash when device is unplugged (rh #591728)
  - core: ensure errors are correctly returned when device is unplugged
  - core: ensure claimed ports don't fall back to Generic (rh #597296)
  - gsm: better compatibility with various phones
  - mbm: better detection of connection errors
  - simtech: add plugin for Simtech devices (like Airlink 3GU)
  - sierra: fix CDMA roaming detection


author: Dan Williams <dcbw@redhat.com> - 0.3-13.git20100507
changelog:
  - core: fix crash when plugging in some Sierra and Option NV devices (rh #589798)
  - gsm: better compatibility with various Sony Ericsson phones
  - longcheer: better support for Alcatel X060s modems


author: Dan Williams <dcbw@redhat.com> - 0.3-11.git20100502
changelog:
  - core: ignore some failures on disconnect (rh #578280)
  - core: add support for platform serial devices
  - gsm: better Blackberry DUN support
  - gsm: periodically poll access technology
  - cdma: prevent crash on modem removal (rh #571921)
  - mbm: add support for Sony Ericsson MD400, Dell 5541, and Dell 5542 modems
  - novatel: better signal strength reporting on CDMA cards
  - novatel: add access technology and mode preference support on GSM cards
  - zte: fix mode preference retrieval
  - longcheer: add support for Zoom modems (4595, 4596, etc)
  - longcheer: add access technology and mode preference support


author: Dan Williams <dcbw@redhat.com> - 0.3-8.git20100408
changelog:
  - mbm: fix retrieval of current allowed mode
  - gsm: fix initialization issues with some devices (like Blackberries)


author: Dan Williams <dcbw@redhat.com> - 0.3-7.git20100405
changelog:
  - core: fix detection of some generic devices (rh #579247)
  - core: fix detection regression of some Huawei devices in 0.3-5
  - cdma: periodically poll registration state and signal quality
  - cdma: really fix registration detection on various devices (rh #569067)


author: Dan Williams <dcbw@redhat.com> - 0.3-5.git20100331
changelog:
  - core: only export a modem when all its ports are handled (rh #540438, rh #569067, rh #552121)
  - cdma: handle signal quality requests while connected for more devices
  - cdma: handle serving system requests while connected for more devices
  - gsm: determine current access technology earlier
  - huawei: work around automatic registration issues on some devices


author: Dan Williams <dcbw@redhat.com> - 0.3-4.git20100323
changelog:
  - core: ensure enabled modems are disabled when MM stops
  - core: better capability detection for Blackberry devices (rh #573510)
  - cdma: better checking of registration states (rh #540438, rh #569067, rh #552121)
  - gsm: don't block modem when it requires PIN2
  - option: fix access technology updates


author: Dan Williams <dcbw@redhat.com> - 0.3-3.git20100317
changelog:
  - mbm: add device IDs for C3607w
  - mbm: fail earlier during connection failures
  - mbm: fix username/password authentication when checked by the network
  - hso: implement asynchronous signal quality updates
  - option: implement asynchronous signal quality updates
  - novatel: correctly handle CDMA signal quality
  - core: basic PolicyKit support
  - core: fix direct GSM registration information requests
  - core: general GSM PIN/PUK unlock fixes
  - core: poll GSM registration state internally for quicker status updates
  - core: implement GSM 2G/3G preference
  - core: implement GSM roaming allowed/disallowed preference
  - core: emit signals on access technology changes
  - core: better handling of disconnections
  - core: fix simple CDMA status requests


author: Dan Williams <dcbw@redhat.com> - 0.3-2.git20100211
changelog:
  - core: startup speed improvements
  - core: GSM PIN checking improvements
  - huawei: fix EVDO-only connections on various devices (rh #553199)
  - longcheer: add support for more devices


author: Dan Williams <dcbw@redhat.com> - 0.3-1.git20100119
changelog:
  - anydata: new plugin for AnyData CDMA modems (rh #547294)
  - core: fix crashes when devices are unplugged during operation (rh #553953)
  - cdma: prefer primary port for status/registration queries
  - core: fix probing/detection of some PIN-locked devices (rh #551376)
  - longcheer: add plugin for Alcatel (X020, X030, etc) and other devices
  - gsm: fix Nokia N80 network scan parsing


author: Dan Williams <dcbw@redhat.com> - 0.2.997-5.git20100101
changelog:
  - core: fix apparent hangs by limiting retried serial writes
  - gsm: ensure modem state is reset when disabled


author: Dan Williams <dcbw@redhat.com> - 0.2.997-3.git20091216
changelog:
  - sierra: ensure CDMA device is powered up when trying to use it
  - cdma: better signal quality parsing (fixes ex Huawei EC168C)
  - zte: handle unsolicited messages better during probing


author: Dan Williams <dcbw@redhat.com> - 0.2.997-2.git20091214
changelog:
  - cdma: fix signal strength reporting on some devices
  - cdma: better registration state detection when dialing (ex Sierra 5275)
  - option: always use the correct tty for dialing commands


author: Dan Williams <dcbw@redhat.com> - 0.2.997-1
changelog:
  - core: fix reconnect after manual disconnect (rh #541314)
  - core: fix various segfaults during registration
  - core: fix probing of various modems on big-endian architectures (ie PPC)
  - core: implement modem states to avoid duplicate operations
  - hso: fix authentication for Icera-based devices like iCON 505
  - zte: use correct port for new devices
  - nozomi: fix detection


author: Dan Williams <dcbw@redhat.com> - 0.2-4.20091105
changelog:
  - Update to latest git
  - core: fix pppd 2.4.5 errors about 'baudrate 0'
  - cdma: wait for network registration before trying to connect
  - gsm: add cell access technology reporting
  - gsm: allow longer-running network scans
  - mbm: various fixes for Ericsson F3507g/F3607gw/Dell 5530
  - nokia: don't power down phones on disconnect
  - hso: fix disconnection/disable


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.1.0-5
changelog:
  - Fix Source URL
  - Use tarball from upstream
  - Add COPYING, README and AUTHORS to sources (previously placed in the modified tarball)


author: Daiki Ueno <dueno@redhat.com> - 0.2.4-1.1
changelog:
  - use 'ruby(release)' on RHEL 7 as well as Fedora 19 (Closes: #1002870)
  - disable workaround for ruby bindings needed for earlier Fedora 19


author: Daiki Ueno <dueno@redhat.com> - 0.2.2-1
changelog:
  - new upstream release
  - for Fedora 19 or later, use 'ruby(release)' instead of 'ruby(abi)',
    and also update the required Ruby ABI/release version to 2.0.0


author: Daiki Ueno <dueno@redhat.com> - 0.2.1-2
changelog:
  - remove unnesseary BR
  - don't embed rpath in executables
  - add docs
  - drop buildroot cleanup
  - preserve timestamp when make install


author: Victor Toso <victortoso@redhat.com> - 0.14.0-18
changelog:
  - Fix clipboard logs on requests for targets on grab from client
    Resolves: rhbz#1594876
  - Make some clipboard logs debug instead of error
    Resolves: rhbz#1686008


author: Victor Toso <victortoso@redhat.com> - 0.14.0-17
changelog:
  - Fix 'Dependency failed for Activation socket' message
    Resolves: rhbz#1545212
  - Fix socket leak
    Resolves: rhbz#1650596


author: Victor Toso <victortoso@redhat.com> - 0.14.0-14
changelog:
  - Do not allow drag-and-drop on (gdm) login screen
    Resolves: rhbz#1328761
  - Do not allow drag-and-drop on locked screen
    Resolves: rhbz#1323623


author: Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-11
changelog:
  - Add client to guest audio volume synchronization
    Resolves: rhbz#1264102
  - Exit with error when virtio channel device is missing
    Resolves: rhbz#1256704


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-9
changelog:
  - Don't install rsyslog config file. This can cause duplicate logging
    to syslog in rhel6->rhel7 upgrades, and is not really useful anyway
    as the same functionality can be achieved with journald
    Resolves: rhbz#1136881


author: Christophe Fergeau <cfergeau@redhat.com> 0.14.0-8
changelog:
  - Fix copy and paste issues with vncclient
    Resolves: rhbz#1130218
  - Make vdagent more robust against xrandr failures
    Resolves: rhbz#1066422
  - Fix autostart of vdagent in gdm
    Resolves: rhbz#1052172


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-5
changelog:
  - Silence session agent error logging when not running in a vm (rhbz#999804)
  - Release guest clipboard ownership on client disconnect (rhbz#1003977)


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-3
changelog:
  - Advertise clipboard line-endings for copy and paste line-ending conversion
  - Build spice-vdagentd as pie + relro


author: Hans de Goede <hdegoede@redhat.com> - 0.14.0-1
changelog:
  - New upstream release 0.14.0
  - Adds support for file transfers from client to guest
  - Adds manpages for spice-vdagent and spice-vdagentd


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-2
changelog:
  - Fix setting of mode on non arbitrary resolution capable X driver
  - Fix wrong mouse coordinates on vms with multiple qxl devices


author: Hans de Goede <hdegoede@redhat.com> - 0.12.0-1
changelog:
  - New upstream release 0.12.0
  - This moves the tmpfiles.d to /usr/lib/tmpfiles.d (rhbz#840194)
  - This adds a systemd .service file (rhbz#848102)


author: Hans de Goede <hdegoede@redhat.com> - 0.10.0-1
changelog:
  - New upstream release 0.10.0
  - This supports using systemd-logind instead of console-kit (rhbz#756398)


author: Hans de Goede <hdegoede@redhat.com> 0.8.0-2
changelog:
  - Make the per session agent process automatically reconnect to the system
    spice-vdagentd when the system daemon gets restarted


author: Brian C. Lane <bcl@redhat.com> 1.0.10-1
changelog:
  - Fix for gcc type-punned and sizeof pointer warnings. (bcl)
  - Add exit code 2 for user abort (#907600) (bcl)
  - Cleanup TABs and update Copyrights (bcl)
  - Standardize *FLAGS in Makefile (ryan)


author: Brian C. Lane <bcl@redhat.com> 1.0.9-1
changelog:
  - Add python-isomd5sum package with python bindings
  - Add callback and interrupt support to the python library
  - Add RPM_OPT_FLAGS to CFLAGS and update makefile to use CFLAGS from environment


author: Radek Vykydal <rvykydal@redhat.com> - 1:1.0.6-1
changelog:
  - Add abort check feature (#555107) (dpierce, rvykydal)
    Changes prototype of exported checkMediaFile function.
  - Fix exit value of checkisomd5 (rvykydal)
  - Remove output to stderr from library (#576251) (bcl)
  - Use separate return value for image not found (#578160) (bcl)


author: Jeremy Katz <katzj@redhat.com> - 1:1.0.4-1
changelog:
  - Add man pages from Ryan Finnie (ryan AT finnie DOT org)
  - Use popt in checkisomd5 (Ryan Finnie)
  - Fix verbose/gauge interactions (Ryan Finnie)
  - A few other little janitorial things (Ryan Finnie)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 4.11-9
changelog:
  - Update to current packaging guidelines
  - Drop old Obsoletes/Provides for junit4 rename
  - Disable test which fails with Java 8


author: Michal Srb <msrb@redhat.com> - 0:4.11-7
changelog:
  - Drop "-SNAPSHOT" from version ID
  - See: https://lists.fedoraproject.org/pipermail/java-devel/2013-August/004923.html


author: Michal Srb <msrb@redhat.com> - 0:4.10-7
changelog:
  - Build-time dependency perl-MD5 replaced with perl(Digest::MD5)
  - Description cleanup (Resolves: #888389)


author: EL Errata <el-errata_ww@oracle.com> - 1.16.4-37.0.1
changelog:
  - Revert Redhat's change of disallowing duplicated incomplete gid
    when "id_provider=ldap" is used, which caused regression in AD
    environment. [Orabug: 29286774] [Doc ID 2605732.1]


author: Michal Židek <mzidek@redhat.com> - 1.16.4-37
changelog:
  - Resolves: rhbz#1784620 - Force LDAPS over 636 with AD Access Provider
  - just bumping the version to fix generated dates in man pages


author: Michal Židek <mzidek@redhat.com> - 1.16.4-34
changelog:
  - Resolves: rhbz#1768404 - automount on RHEL7 gives the message
                             'lookup(sss): setautomntent: No such file or
                             directory'


author: Michal Židek <mzidek@redhat.com> - 1.16.4-32
changelog:
  - Resolves: rhbz#1530741 - Trusted domain user logins succeed after using ipa
                             trustdomain-disable


author: Michal Židek <mzidek@redhat.com> - 1.16.4-31
changelog:
  - Resolves: rhbz#1746878 - Let IPA client read IPA objects via LDAP and not
                             a extdom plugin when resolving trusted users and
                             groups


author: Michal Židek <mzidek@redhat.com> - 1.16.4-30
changelog:
  - Resolves: rhbz#1530741 - Trusted domain user logins succeed after using
                             ipa trustdomain-disable


author: Michal Židek <mzidek@redhat.com> - 1.16.4-29
changelog:
  - Resolves: rhbz#1713352 - Implicit files domain gets activated when no
                             sssd.conf present and sssd is started


author: Michal Židek <mzidek@redhat.com> - 1.16.4-28
changelog:
  - Resolves: rhbz#1206221 - sssd should not always read entire autofs map from
                             ldap


author: Michal Židek <mzidek@redhat.com> - 1.16.4-27
changelog:
  - Resolves: rhbz#1657978 - SSSD is not refreshing cached user data for the
                             ipa sub-domain in a IPA/AD trust


author: Michal Židek <mzidek@redhat.com> - 1.16.4-26
changelog:
  - Resolves: rhbz#1541172 - ad_enabled_domains does not disable old subdomain
                             after a restart until a timer removes it


author: Michal Židek <mzidek@redhat.com> - 1.16.4-25
changelog:
  - Resolves: rhbz#1738674 - Paging not enabled when fetching external groups,
                             limits the number of external groups to 2000


author: Michal Židek <mzidek@redhat.com> - 1.16.4-24
changelog:
  - Resolves: rhbz#1650018 - SSSD doesn't clear cache entries for IDs
                             below min_id


author: Michal Židek <mzidek@redhat.com> - 1.16.4-23
changelog:
  - Resolves: rhbz#1724088 - negative cache does not use values from
                             'filter_users' config option for known domains


author: Michal Židek <mzidek@redhat.com> - 1.16.4-22
changelog:
  - Resolves: rhbz#1422618 - sssd does not failover to another IPA
                             server if just the KDC service fails 
  - Just bumping the version to work around "build already exists"


author: Michal Židek <mzidek@redhat.com> - 1.16.4-21
changelog:
  - Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
  - Rebuild japanese gmo file explicitly


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.4-18
changelog:
  - Resolves: rhbz#1710286 - The server error message is not returned if
                             password change fails


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.4-17
changelog:
  - Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                             properly


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.4-15
changelog:
  - Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                             /trusts


author: Michal Židek <mzidek@redhat.com> - 1.16.4-14
changelog:
  - Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                             and fails otherwise


author: Michal Židek <mzidek@redhat.com> - 1.16.4-12
changelog:
  - Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                           - This was partially fixed by the rebase, but one
                             spec file change was missing.


author: Michal Židek <mzidek@redhat.com> - 1.16.4-11
changelog:
  - Resolves: rhbz#1350012 - kinit / sssd kerberos fail over
  - Resolves: rhbz#720688 - [RFE] return multiple server addresses to the
                            Kerberos locator plugin


author: Michal Židek <mzidek@redhat.com> - 1.16.4-9
changelog:
  - Resolves: rhbz#1666819 - SSSD can trigger a NSS lookup when parsing the
                             filter_users/groups lists on startup, this can
                             block the startup


author: Michal Židek <mzidek@redhat.com> - 1.16.4-8
changelog:
  - Resolves: rhbz#1645461 - Slow ldb search causes blocking during startup
                             which might cause the registration to time out


author: Michal Židek <mzidek@redhat.com> - 1.16.4-7
changelog:
  - Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover
                             subdomains / trusts


author: Michal Židek <mzidek@redhat.com> - 1.16.4-6
changelog:
  - Resolves: rhbz#1671138 - User is unable to perform sudo as a user on IPA
                             Server, even though `sudo -l` shows permissions
                             to do so


author: Michal Židek <mzidek@redhat.com> - 1.16.4-5
changelog:
  - Resolves: rhbz#1657806 - [RFE]: Optionally disable generating auto private
                             groups for subdomains of an AD provider


author: Michal Židek <mzidek@redhat.com> - 1.16.4-4
changelog:
  - Resolves: rhbz#1641131 - [RFE] Need an option in SSSD so that it will skip
                             GPOs that have groupPolicyContainers, unreadable
                             by SSSD.
  - Resolves: rhbz#1660874 - CVE-2018-16838 sssd: improper implementation of
                             GPOs due to too restrictive permissions [rhel-7]


author: Michal Židek <mzidek@redhat.com> - 1.16.4-3
changelog:
  - Resolves: rhbz#1631656 - KCM: kinit: Matching credential not found while
                             getting default ccache


author: Michal Židek <mzidek@redhat.com> - 1.16.4-2
changelog:
  - Resolves: rhbz#1406678 - sssd service is starting before network service
  - Resolves: rhbz#1616853 - SSSD always boots in Offline mode


