# changelog

author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to %{_var}/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include %{version}


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Fix the required nspr version to be 4.10.6


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-4
changelog:
  - Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove patches rendered obsolete by the rebase


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-13
changelog:
  - added new options to configure retransmissions on lan/lanplus interfaces
    (#748073)
  - updated dellem command (#739358)
  - fixed exit code of ipmitool -o list (#715615)
  - improved checking of command line arguments (#725993)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-11
changelog:
  - fixed delloem powermonitor on bigendian systems (#731718)
  - fixed memory leak in Serial-over-Lan module (#731977)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-10
changelog:
  - added -Y option for ipmitool to hide Kg key from cmdline (#698647)
  - added 'channel setkg' command to set Kg encryption key on remote machine
    (#726390)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-10
changelog:
  - updated 'delloem setled' command to indicate SES status and drive
    activities for a PCI-e SSD (#727314)


author: Jan Safranek <jsafrane@redhat.com> 1.8.10-2
changelog:
  - fix issues found during package review:
    - clear Default-Start: line in the init script, the service should be 
      disabled by default
    - added Obsoletes: OpenIPMI-tools
    - compile with --disable-dependency-tracking to speed things up
    - compile with --enable-file-security
    - compile with --disable-intf-free, don't depend on FreeIPMI libraries
      (FreeIPMI has its own ipmitool-like utility)


author: Jingdong Lu <jingdong.lu@oracle.com> 6.2.0.873-10.0.1.el6
changelog:
  - Include patches from QLogic [bug 17260235] (Guangyu Sun)
  - Include useful patches from upstream [bug 16658181] (Guangyu Sun)
  - Rename iscsi-initiator-utils-use-red-hat-for-name.patch to
    iscsi-initiator-utils-use-oracle-for-name.patch and use com.oracle
    in prefix [bug 10625276]


author: Andy Grover <agrover@redhat.com> - 6.2.0.873-6
changelog:
  - Update bnx2i-vlan-boot-support.patch to check session != NULL
    before calling iscsi_sysfs_read_iface


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-3
changelog:
  - 831003 boot over VLAN support patches
  - 916007 replace iscsiuio with code merged upstream 0.7.8.1b
  - 884427 fix for db errors when vdsm creates static entries for
           target portals already setup through discovery
  - 983553 run target refresh in parallel so unreachable doesn't block others


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-1
changelog:
  - Sync with upstream 2.0.873
  - 854776 Bring up network interface for iSCSI boot with bnx2i
  - 811428 make version string reported by iscsiadm match RPM version
  - fix iscsid segfault during qla4xxx login


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.40
changelog:
  - 738192 Fix regression added when handling 738192 where unknown params
    messages got logged by mistake.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.37
changelog:
  - 805467 Have iscsistart/iscsiadm bring up offload net interface.
  - 796574 Fix port handling when hostnames are used for portals.
  - 739843 Fix default iface setup handling.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.36
changelog:
  - 740054 sync iscsiuio to 0.7.2.1
  - 790609 Add ping and host chap support to iscsiadm
  - 636013 scalability testing.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.31
changelog:
  - 749051 Sync iscsiuio to iscsiuio-0.7.0.14g to fix boot hang
    when connection is lost during startup.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.28
changelog:
  - 736116 (again) fix aligment for iface nl msgs.
  - Fix iscsid restart issue when using qla4xxx boot.
  - Fix ipv6 boot when using ibft.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.25
changelog:
  - 732912 Fix return value/msg when iscsiadm fails to log into target
  - 696808 Update iscsiuio to v0.7.0.14.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.23
changelog:
  - 696808 Sync brcm/uio to v0.7.0.8.
  - 715434 Fix iscsiadm command line help discoverydb/discovery2 description.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.21
changelog:
  - 593269 iscsi was built against libcrypto, but was not using the code
  so this disabled the building of that code [patch from .14 got dropped
  due to mismerge].


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.20
changelog:
  - 696267 Create a offloaded session if the iscsi_host MAC and ibft
  MAC match. This enables support for Broadcoms hba boot mode.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.18
changelog:
  - fix iscsiadm exit code when iscsid is not running and the
  discovery command is run.
  - 689359 Fix uIP when using DCB for FCoE
  - 691902 Fix iscsiadm SendTargets offload support when the PDU's data len
  is 8K.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.17
changelog:
  - 634021 Fix in .14 added regression during iscsi startup that prevented
  sessions from getting created.


author: Ales Kozumplik <akozumpl@redhat.com> 6.2.0.872.16
changelog:
  - 529443 fwparam_sysfs: fix pathname manipulation error in
    fwparam_sysfs_boot_info.
  - 529443 Make libiscsi nodes remember the interface they connect through.


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.14
changelog:
  - 593269 iscsi was built against libcrypto, but was not using the code
  so this disabled the building of that code.
  - 599539 document brcm_iscsiuio options in man page.
  - 599542 document iscsiadm host mode hostno argument.
  - 631821 iscsi discovery was not incrementing ITT when multiple text
  commands were sent. This prevented discovery from finding all targets.
  - 634021 iscsi init script did not shutdown all sessions during system
  shutdown/reboot causing the host to hang.
  - 658428 iscsi init script should not shutdown sessions when root is
  using them and should not fail startup on all iscsiadm login failures.
  - 635899 sync brcm_iscsiuio to 0.6.2.13 to add support for IPv6, VLAN,
  57711E, and 57712 hardware.
  - 640115 fix hang caused due to race in ISCSI_ERR_INVALID_HOST handling.
  - 640340 fix iscsiadm exit codes.
  - 624437 support hostnames in node mode.


author: Ales Kozumplik <akozumpl@redhat.com> 6.2.0.872.12
changelog:
  - 442980 partial offload boot: Remove the OFFLOAD_BOOT_SUPPORTED ifdef. This
    effectively makes OFFLOAD_BOOT_SUPPORTED always enabled.


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.10
changelog:
  - 605663 Log message when iface binding, and doc rp_filter settings
    needed for iface binding.

  p* Mon Aug 5 2010 Mike Christie <mchristi@redhat.com> 6.2.0.872.9
  - 614035 Make iscsi status print session info.
  - Fix uip vlan and 10 gig bugs.


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.6
changelog:
  - 602899 Add discovery db support.
  - 595591 Sync brcm_iscsiuio to 0.5.15.
  - 589256 Do not log success message and return ENODEV
  - 601434 Fix iscsiadm handling of non-default port


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.5
changelog:
  - 602286 No need to compile iscsistart as static. This also fixes
    the segfault when hostnames are passed in for the portal ip.


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.4
changelog:
  - 590580 libiscsi get_firmware_foo does not work without first creating a
    libiscsi context
  - 588931 Fix uip and iscsid initialization race
  - 570664 Add basic vlan support for bnx2i's brcm uip daemon
  - 589761 Fix multiple init script bugs: rh_status does not detect offload,
    start/stop does not work due to iscsiadm output being directed to stderr,
    discovery daemon does not get auto started/stopped, iscsid restart does
    not restart daemon if force-start was used.
  - 585649 Fix iscsid "-eq: unary operator expected" bug.


author: Mike Christie <mchristi@redhat.com> 6.2.0.871.1.1-2
changelog:
  - 556985 Fix up init.d iscsid script to remove offload modules and
    load be2iscsi.
  - Enable s390/s390x


author: Hans de Goede <hdegoede@redhat.com> 6.2.0.870-9
changelog:
  - Don't crash when asked to parse the ppc firmware table more then
    once (which can be done from libiscsi) (#491363)


author: Hans de Goede <hdegoede@redhat.com> 6.2.0.870-7
changelog:
  - libiscsi: use fwparam_ibft_sysfs() instead of fw_get_entry(), as
    the latter causes stack corruption (workaround #490515)


author: Hans de Goede <hdegoede@redhat.com> 6.2.0.870-4
changelog:
  - Fix libiscsi.discover_sendtargets python method to accept None as valid
    authinfo argument (#485217)


author: Hans de Goede <hdegoede@redhat.com> 6.2.0.870-0.2.rc1
changelog:
  - Add force-start iscsid initscript option and use that in "patch to make
    iscsiadm start iscsid when needed" so that iscsid will actual be started
    even if there are no iscsi disks configured yet (rh 470437)
  - Do not start iscsid when not running when iscsiadm -k 0 gets executed
    (rh 470438)


author: Hans de Goede <hdegoede@redhat.com> 6.2.0.870-0.1.rc1
changelog:
  - Rewrite SysV initscripts, fixes rh 441290, 246960, 282001, 436175, 430791
  - Add patch to make iscsiadm complain and exit when run as user instead
    of hang spinning for the database lock
  - Add patch to make iscsiadm start iscsid when needed (rh 436175 related)
  - Don't start iscsi service when network not yet up (in case of using NM)
    add NM dispatcher script to start iscsi service once network is up


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.6
changelog:
  - Rebase to RHEL5 to bring in bug fixes.
  - 437522 iscsi startup does not need to modify with network startup.
  - 436175 Check for running sessions when stopping service.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.865-0.2
changelog:
  - Rebase to upstream's bug fix release.
  - Revert init script startup changes from 225915 which reviewers did
   not like.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.754-0.0
changelog:
  - Rebase to upstream.
  - Add back --map functionality but in session mode to match RHEL5 fixes
  - Break up iscsi init script into two, so iscsid can be started early for root


author: Mike Christie <mchristie@redhat.com> - 6.2.0.747-0.0
changelog:
  - Fix several bugs in actor.c (iscsi scheduling). This should result
  - in better dm-multipath intergation and fix bugs where time outs
  - or requests were missed or dropped.
  - Set default noop timeout correctly.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.695-0.6
changelog:
  - BZ 209523 make sure the network is not going to get shutdown so
  iscsi devices (include iscsi root and dm/md over iscsi) get syncd.
  - BZ 209415 have package create iscsi var dirs


author: Mike Christie <mchristie@redhat.com> - 6.2.0.695-0.2
changelog:
  - BZ 208050 - change default initiator name to reflect redhat
  - Move pid from /etc/iscsi to /var/run/iscsid.pid


author: Mike Christie <mchristie@redhat.com> - 6.2.0.695-0.1
changelog:
  - Add compat with FC kernel so iscsid will pass startup checks and run.
  - Fix bug when using hw iscsi and software iscsi and iscsid is restarted.
  - Fix session matching bug when hw and software iscsi is both running


author: Mike Christie <mchristie@redhat.com> - 6.1.1.685
changelog:
  - Rebase to upstream to bring in many bug fixes and rm db.
  - iscsi uses /etc/iscsi instead of just etc now


author: Mike Christie <mchristie@redhat.com> - 6.1.1.645
changelog:
  - update to upstream 1.1.645
  - Note DB and interface changed so you must update kernel, tools and DB


author: Mike Christie <mchristi@redhat.com> - 6.0.5.595-2
changelog:
  - add PatM's statics.c file. This is needed for boot since 
    there is no getpwuid static available at that time.


author: Jeremy Katz <katzj@redhat.com> - 6.0.5.595-1
changelog:
  - ensure that we respect %{optflags}
  - cleaned up initscript to make use of standard functions, return right 
    values and start by default
  - build iscsistart as a static binary for use in initrds


author: Mike Christie <mchristi@redhat.com>
changelog:
  - rebase package to svn rev 595 to fix several bugs
    NOTE!!!!!!!! This is not compatible with the older open-iscsi modules
    and tools. You must upgrade.


author: Mike Christie <mchristi@redhat.com>
changelog:
  - update package to open-iscsi svn rev 571
    NOTE!!!!!!!! This is not compatible with the older open-iscsi modules
    and tools. You must upgrade.


author: Mike Christie <mchristi@redhat.com>
changelog:
  - From Andy Henson <andy@zexia.co.uk>:
    Autogenerate /etc/initiatorname.iscsi during install if not already present
  - Remove code to autogenerate /etc/initiatorname.iscsi from initscript
  - From dan.y.roche@gmail.com:
    add touch and rm lock code
  - update README
  - update default iscsid.conf. "cnx" was not supported. The correct
    id was "conn".


author: Mike Christie <mchristi@redhat.com>
changelog:
  - rebase package to bring in ppc64 unsigned long vs unsigned
    long long fix and iscsadm return value fix. Also drop rdma patch
    becuase it is now upstream.


author: Adam Jackson <ajax@redhat.com> 1.8.6-3
changelog:
  - cairo-1.8.6-repeat-modes.patch: Enable the repeat and pad blend modes in
    the xlib backend to make firefox performance slightly less dire.


author: Behdad Esfahbod <besfahbo@redhat.com> 1.2.2-3
changelog:
  - Remove unnecessary --disable-* arguments to configure, add --enable-*
    for those backends we really want to make sure are enabled.


author: Ray Strode <rstrode@redhat.com> - 1.2.2-2
changelog:
  - add lame libXt-devel BuildReq to get things building again.
  - small spec tweaks to follow conventions


author: Carl Worth <cworth@redhat.com> - 1.1.4-2
changelog:
  - Revert upstream commit that introduced a dependency on a newer
    poppler version for the PDF tests.


author: Carl Worth <cworth@redhat.com> - 1.1.4-1
changelog:
  - Update to new upstream 1.1.4
  - Drop both embedded-bitmaps and XRenderAddGlyphs patches as both now
    have upstream versions


author: Carl Worth <cworth@redhat.com> - 1.1.2-2
changelog:
  - Add suggested patch for XRenderAddGlyphs crash of bug #4705
    https://bugs.freedesktop.org/show_bug.cgi?id=4705


author: Carl Worth <cworth@redhat.com> - 1.1.2-1
changelog:
  - Update to new upstream 1.1.2
  - Port forward the embedded bitmaps patch (now committed upstream to
    1.1.3)
  - Drop build-fix and chunk-glyphs patches which now come from upstream


author: Kristian Høgsberg <krh@redhat.com> - 1.0.0-1
changelog:
  - Update to cairo-1.0.0.
  - Drop cairo-0.9.2-cache-eviction-fix.patch and
    cairo-0.9.2-dont-hash-null-string.patch.


author: Kristian Høgsberg <krh@redhat.com> 0.9.2-3
changelog:
  - Add cairo-0.9.2-dont-hash-null-string.patch to avoid crash when
    creating a cairo font from a FT_Face.


author: Kristian Høgsberg <krh@redhat.com> 0.9.2-1
changelog:
  - Also obsolete libpixman-debuginfo.
  - Add cairo-0.9.2-cache-eviction-fix.patch to fix ft font cache eviction.


author: Kristian Høgsberg <krh@redhat.com> 0.9.2-1
changelog:
  - Update to cairo 0.9.2.  Add Obsoletes: for libpixman <= 0.1.6.
  - Drop cairo-0.6.0-font-options-to-scaled-font.patch.


author: Kristian Høgsberg <krh@redhat.com> - 0.6.0-2
changelog:
  - Add cairo-0.6.0-font-options-to-scaled-font.patch to make sure font
    cache eviction works correctly (#164664).


author: Kristian Høgsberg <krh@redhat.com> - 0.5.1-4
changelog:
  - Add more missing devel package requires (libpng-devel and
    xorg-x11-devel) (#161688)
  - Add Owens patch (cairo-0.5.1-bitmap-fonts.patch) to make bitmap
    fonts work with cairo (#161653).


author: Kristian Høgsberg <krh@redhat.com> - 0.5.1-2
changelog:
  - Package gtk docs as part of devel package.
  - Nuke static library.
  - Update devel files so /usr/include/cairo is owned by devel package.


author: Kristian Høgsberg <krh@redhat.com> - 0.5.1-1
changelog:
  - Update to cairo 0.5.1.
  - Remove gtk-doc files, since --disable-gtk-doc doesn't work.
  - Disable gtk-doc and add freetype and fontconfig BuildRequires.


author: Kristian Høgsberg <krh@redhat.com> - 0.2.0-1
changelog:
  - Incorporate changes suggested by katzj: Require: ldconfig and run it
    in %post and %postun, don't pass CFLAGS to make.


author: Jindrich Novy <jnovy@redhat.com> 4.999.9-0.2.20091007.beta
changelog:
  - include XZ in RHEL5 (#519122)
  - repack tarball to bz2, RHEL5 doesn't know anything about XZ yet
  Resolves: #519122


author: Bill Nottingham <notting@redhat.com> 4.999.8-0.6.beta
changelog:
  - fix release versioning to match guidelines
  - fix up lzma-compat summary/description
  - tweak licensing


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.186.38
changelog:
  - From 414d97feb2e28ed131da33546ea81a919c30e285 Mon Sep 17 00:00:00 2001
    From: Jan Beulich <jbeulich@suse.com>
    Date: Fri, 2 Jun 2017 15:51:58 +0100
    Subject: [PATCH 4/4] gnttab: __gnttab_unmap_common_complete() is
    all-or-nothing
    All failures have to be detected in __gnttab_unmap_common(), the
    completion function must not skip part of its processing. In particular
    the GNTMAP_device_map related putting of page references and adjustment
    of pin count must not occur if __gnttab_unmap_common() signaled an
    error. Furthermore the function must not make adjustments to global
    state (here: clearing GNTTAB_device_map) before all possibly failing
    operations have been performed.
    There's one exception for IOMMU related failures: As IOMMU manipulation
    occurs after GNTMAP_*_map have been cleared already, the related page
    reference and pin count adjustments need to be done nevertheless. A
    fundamental requirement for the correctness of this is that
    iommu_{,un}map_page() crash any affected DomU in case of failure.
    The version check appears to be pointless (or could perhaps be a
    BUG_ON() or ASSERT()), but for the moment also move it.
    This is part of XSA-224.
    Reported-by: Jan Beulich <jbeulich@suse.com>
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 26224357]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.186.37
changelog:
  - From 5fd4726857a913e90de95623dc385f8856465839 Mon Sep 17 00:00:00 2001
    From: George Dunlap <george.dunlap@citrix.com>
    Date: Fri, 2 Jun 2017 15:21:27 +0100
    Subject: [PATCH 3/4] gnttab: correct logic to get page references during map
    requests
    The rules for reference counting are somewhat complicated:
    * Each of GNTTAB_host_map and GNTTAB_device_map need their own
    reference count
    * If the mapping is writeable:
    - GNTTAB_host_map needs a type count under only some conditions
    - GNTTAB_device_map always needs a type count
    If the mapping succeeds, we need to keep all of these; if the mapping
    fails, we need to release whatever references we have acquired so far.
    Additionally, the code that does a lot of this calculation "inherits"
    a reference as part of the process of finding out who the owner is.
    Finally, if the grant is mapped as writeable (without the
    GNTMAP_readonly flag), but the hypervisor cannot grab a
    PGT_writeable_page type, the entire operation should fail.
    Unfortunately, the current code has several logic holes:
    * If a grant is mapped only GNTTAB_device_map, and with a writeable
    mapping, but in conditions where a *host* type count is not
    necessary, the code will fail to grab the necessary type count.
    * If a grant is mapped both GNTTAB_device_map and GNTTAB_host_map,
    with a writeable mapping, in conditions where the host type count is
    not necessary, *and* where the page cannot be changed to type
    PGT_writeable, the condition will not be detected.
    In both cases, this means that on success, the type count will be
    erroneously reduced when the grant is unmapped.  In the second case,
    the type count will be erroneously reduced on the failure path as
    well.  (In the first case the failure path logic has the same hole
    as the reference grabbing logic.)
    Additionally, the return value of get_page() is not checked; but this
    may fail even if the first get_page() succeeded due to a reference
    counting overflow.
    First of all, simplify the restoration logic by explicitly counting
    the reference and type references acquired.
    Consider each mapping type separately, explicitly marking the
    'incoming' reference as used so we know when we need to grab a second
    one.
    Finally, always check the return value of get_page[_type]() and go to
    the failure path if appropriate.
    This is part of XSA-224.
    Signed-off-by: George Dunlap <george.dunlap@citrix.com>
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 26224357]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.186.36
changelog:
  - From 52078b99abbc534a5bda6f7d8ab2b403711a9bcf Mon Sep 17 00:00:00 2001
    From: Jan Beulich <jbeulich@suse.com>
    Date: Fri, 2 Jun 2017 15:21:27 +0100
    Subject: [PATCH 2/4] gnttab: never create host mapping unless asked to
    We shouldn't create a host mapping unless asked to even in the case of
    mapping a granted MMIO page. In particular the mapping wouldn't be torn
    down when processing the matching unmap request.
    This is part of XSA-224.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 26224357]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.186.35
changelog:
  - From 0aa6bc3bba0aeec067feed2a7378d285d7529684 Mon Sep 17 00:00:00 2001
    From: George Dunlap <george.dunlap@citrix.com>
    Date: Thu, 15 Jun 2017 16:24:02 +0100
    Subject: [PATCH 1/4] gnttab: Fix handling of dev_bus_addr during unmap
    If a grant has been mapped with the GNTTAB_device_map flag, calling
    grant_unmap_ref() with dev_bus_addr set to zero should cause the
    GNTTAB_device_map part of the mapping to be left alone.
    Unfortunately, at the moment, op->dev_bus_addr is implicitly checked
    before clearing the map and adjusting the pin count, but only the bits
    above 12; and it is not checked at all before dropping page
    references.  This means a guest can repeatedly make such a call to
    cause the reference count to drop to zero, causing the page to be
    freed and re-used, even though it's still mapped in its pagetables.
    To fix this, always check op->dev_bus_addr explicitly for being
    non-zero, as well as op->flag & GNTMAP_device_map, before doing
    operations on the device_map.
    While we're here, make the logic a bit cleaner:
    * Always initialize op->frame to zero and set it from act->frame, to reduce the
    chance of untrusted input being used
    * Explicitly check the full dev_bus_addr against act->frame <<
    PAGE_SHIFT, rather than ignoring the lower 12 bits
    This is part of XSA-224.
    Reported-by: Jan Beulich <jbeulich@suse.com>
    Signed-off-by: George Dunlap <george.dunlap@citrix.com>
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 26224357]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.186.34
changelog:
  - From: Jan Beulich <jbeulich@suse.com>
    Subject: guest_physmap_remove_page() needs its return value checked
    Callers, namely such subsequently freeing the page, must not blindly
    assume success - the function may namely fail when needing to shatter a
    super page, but there not being memory available for the then needed
    intermediate page table.
    As it happens, guest_remove_page() callers now also all check the
    return value.
    Furthermore a missed put_gfn() on an error path in gnttab_transfer() is
    also being taken care of.
    This is part of XSA-222.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Signed-off-by: Julien Grall <julien.grall@arm.com>
    Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Conflict:
    xen/arch/arm/p2m.c
    xen/arch/x86/mm.c
    xen/include/asm-arm/p2m.h
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 26202617]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.186.33
changelog:
  - From: Andrew Cooper <andrew.cooper3@citrix.com>
    Subject: xen/memory: Fix return value handing of guest_remove_page()
    Despite the description in mm.h, guest_remove_page() previously returned 0 for
    paging errors.
    Switch guest_remove_page() to having regular 0/-error semantics, and propagate
    the return values from clear_mmio_p2m_entry() and mem_sharing_unshare_page()
    to the callers (although decrease_reservation() is the only caller which
    currently cares).
    This is part of XSA-222.
    Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Reviewed-by: Jan Beulich <jbeulich@suse.com>
    Conflict:
    xen/common/memory.c
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 26202617]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.186.32
changelog:
  - From 6926e40943eef0e0ef7acfc53cee819a41a41247 Mon Sep 17 00:00:00 2001
    From: Andrew Cooper <andrew.cooper3@citrix.com>
    Date: Thu, 11 May 2017 14:47:00 +0100
    Subject: [PATCH] x86/shadow: Hold references for the duration of emulated
    writes
    The (misnamed) emulate_gva_to_mfn() function translates a linear address to an
    mfn, but releases its page reference before returning the mfn to its caller.
    sh_emulate_map_dest() uses the results of one or two translations to construct
    a virtual mapping to the underlying frames, completes an emulated
    write/cmpxchg, then unmaps the virtual mappings.
    The page references need holding until the mappings are unmapped, or the
    frames can change ownership before the writes occurs.
    This is XSA-219
    Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Reviewed-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Tim Deegan <tim@xen.org>
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 26202185]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.186.31
changelog:
  - From 1b0cf99d046286c601a28af0ef7c1a17eb3eb2cb Mon Sep 17 00:00:00 2001
    From: Jan Beulich <jbeulich@suse.com>
    Date: Thu, 15 Jun 2017 12:05:29 +0100
    Subject: [PATCH 4/4] gnttab: correct maptrack table accesses
    In order to observe a consistent (limit,pointer-table) pair, the reader
    needs to either hold the maptrack lock (in line with documentation) or
    both sides need to order their accesses suitably. At the same time add
    read barriers to lockless readers.
    This is part of XSA-218.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 26202032]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.186.30
changelog:
  - From d188b4bf7c6d17fae1a7d14867aaeb72f972d3ac Mon Sep 17 00:00:00 2001
    From: George Dunlap <george.dunlap@citrix.com>
    Date: Fri, 2 Jun 2017 12:40:04 +0100
    Subject: [PATCH 3/4] gnttab: Avoid potential double-put of maptrack entry
    Each grant mapping for a particular domain is tracked by an in-Xen
    "maptrack" entry.  This entry is is referenced by a "handle", which is
    given to the guest when it calls gnttab_map_grant_ref().
    There are two types of mapping a particular handle can refer to:
    GNTMAP_host_map and GNTMAP_device_map.  A given
    gnttab_unmap_grant_ref() call can remove either only one or both of
    these entries.  When a particular handle has no entries left, it must
    be freed.
    gnttab_unmap_grant_ref() loops through its grant unmap request list
    twice.  It first removes entries from any host pagetables and (if
    appropraite) iommus; then it does a single domain TLB flush; then it
    does the clean-up, including telling the granter that entries are no
    longer being used (if appropriate).
    At the moment, it's during the first pass that the maptrack flags are
    cleared, but the second pass that the maptrack entry is freed.
    Unfortunately this allows the following race, which results in a
    double-free:
    A: (pass 1) clear host_map
    B: (pass 1) clear device_map
    A: (pass 2) See that maptrack entry has no mappings, free it
    B: (pass 2) See that maptrack entry has no mappings, free it #
    Unfortunately, unlike the active entry pinning update, we can't simply
    move the maptrack flag changes to the second half, because the
    maptrack flags are used to determine if iommu entries need to be
    added: a domain's iommu must never have fewer permissions than the
    maptrack flags indicate, or a subsequent map_grant_ref() might fail to
    add the necessary iommu entries.
    Instead, free the maptrack entry in the first pass if there are no
    further mappings.
    This is part of XSA-218.
    Signed-off-by: George Dunlap <george.dunlap@citrix.com>
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Conflict:
    xen/common/grant_table.c
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 26202032]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.186.29
changelog:
  - From abbbccaa119bf8b05f0828bd9138104f08c4f8df Mon Sep 17 00:00:00 2001
    From: Jan Beulich <jbeulich@suse.com>
    Date: Fri, 2 Jun 2017 12:22:42 +0100
    Subject: [PATCH 2/4] gnttab: fix unmap pin accounting race
    Once all {writable} mappings of a grant entry have been unmapped, the
    hypervisor informs the guest that the grant entry has been released by
    clearing the _GTF_{reading,writing} usage flags in the guest's grant
    table as appropriate.
    Unfortunately, at the moment, the code that updates the accounting
    happens in a different critical section than the one which updates the
    usage flags; this means that under the right circumstances, there may be
    a window in time after the hypervisor reported the grant as being free
    during which the grant referee still had access to the page.
    Move the grant accounting code into the same critical section as the
    reporting code to make sure this kind of race can't happen.
    This is part of XSA-218.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 26202032]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.186.28
changelog:
  - From 4ca403ecff82d3efdd838e08b258cb4dd3062c60 Mon Sep 17 00:00:00 2001
    From: Quan Xu <quan.xu@intel.com>
    Date: Fri, 2 Jun 2017 12:30:34 +0100
    Subject: [PATCH 1/4] IOMMU: handle IOMMU mapping and unmapping failures
    Treat IOMMU mapping and unmapping failures as a fatal to the DomU
    If IOMMU mapping and unmapping failed, crash the DomU and propagate
    the error up to the call trees.
    No spamming of the log can occur. For DomU, we avoid logging any
    message for already dying domains. For Dom0, that'll still be more
    verbose than we'd really like, but it at least wouldn't outright
    flood the console.
    Signed-off-by: Quan Xu <quan.xu@intel.com>
    Reviewed-by: Kevin Tian <kevin.tian@intel.com>
    Reviewed-by: Jan Beulich <jbeulich@suse.com>
    Conflict:
    xen/drivers/passthrough/iommu.c
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 26202032]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.186.27
changelog:
  - From: Jan Beulich <jbeulich@suse.com>
    Subject: x86/mm: disallow page stealing from HVM domains
    The operation's success can't be controlled by the guest, as the device
    model may have an active mapping of the page. If we nevertheless
    permitted this operation, we'd have to add further TLB flushing to
    prevent scenarios like
    "Domains A (HVM), B (PV), C (PV); B->target==A
    Steps:
    1. B maps page X from A as writable
    2. B unmaps page X without a TLB flush
    3. A sends page X to C via GNTTABOP_transfer
    4. C maps page X as pagetable (potentially causing a TLB flush in C,
    but not in B)
    At this point, X would be mapped as a pagetable in C while being
    writable through a stale TLB entry in B."
    A similar scenario could be constructed for A using XENMEM_exchange and
    some arbitrary PV domain C then having this page allocated.
    This is XSA-217.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: George Dunlap <george.dunlap@citrix.com>
    Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 26201839]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.186.26
changelog:
  - From: Jan Beulich <jbeulich@suse.com>
    Subject: xen/disk: don't leak stack data via response ring
    Rather than constructing a local structure instance on the stack, fill
    the fields directly on the shared ring, just like other (Linux)
    backends do. Build on the fact that all response structure flavors are
    actually identical (the old code did make this assumption too).
    This is XSA-216.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Acked-by: Anthony PERARD <anthony.perard@citrix.com>
    hw/block/xen_disk.c moved to hw/xen_disk.c
    hw/block/xen_blkif.h moved to hw/xen_blkif.h
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 26201333]


author: Tomas Sykora <tosykora@redhat.com> - 1.8.6p3-26
changelog:
  - RHEL-6.9 erratum
    - Fix race condition when creating /var/log/sudo-io direcotry
    Resolves: rhbz#1365156


author: Tomas Sykora <tosykora@redhat.com> - 1.8.6p3-25
changelog:
  - RHEL-6.9 erratum
    - Fix "sudo -l command" in the LDAP and SSS backends when the command
      is not allowed.
    Resolves: rhbz#1374410
    - Fix sudo log file wrong group ownership
    Resolves: rhbz#1330001
    - Fix sudo parsing sudoers with user's locale
    Resolves: rhbz#1318374


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-24
changelog:
  - RHEL-6.8 erratum
    - fixed a bug causing that non-root users can list privileges of
      other users
    Resolves: rhbz#1312481


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-23
changelog:
  - RHEL-6.8 erratum
    - fixed handling of closefrom_override defaults option
    Resolves: rhbz#1309976


author: Radovan Sroka <rsroka@redhat.com> - 1.8.6p3-22
changelog:
  - RHEL-6.8 erratum
    - fixed potential getcwd failure, resulting in Null pointer exception 
    Resolves: rhbz#1284886


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-21
changelog:
  - RHEL-6.8 erratum
    - search also by user id when fetching rules from LDAP
    Resolves: rhbz#1135531


author: Radovan Sroka <rsroka@redhat.com> - 1.8.6p3-21
changelog:
  - RHEL-6.8 erratum
    - fixed ldap's and sssd's sudoOption value and remove quotes
    - fixed ldap's and sssd's sudoOption whitespaces parse problem
    Resolves: rhbz#1144422
    Resolves: rhbz#1279447


author: Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-21
changelog:
  - RHEL-6.8 erratum
    - removed defaults option requiretty from /etc/sudoers
    - backported pam_service and pam_login_service defaults options
    - implemented a new defaults option for changing netgroup processing
      semantics
    - fixed visudo's quiet cli option
    Resolves: rhbz#1248695
    Resolves: rhbz#1247231
    Resolves: rhbz#1241896
    Resolves: rhbz#1197885
    Resolves: rhbz#1233205


author: Peter Schiffer <pschiffe@redhat.com> - 12.4-7
changelog:
  - resolves: #857120
    fixed incorrect return code when TMPDIR points to invalid path
  - resolves: #845098
    added support for alternatives


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.3-1
changelog:
  - Place mailx to /bin/mailx, to avoid extra symlink in redhat-lsb package
  - /bin/mailx is now a base binary, another symlinked to it.


author: Dmitry Butskoy <Dmitry@Butskoy.name>
changelog:
  - add missed BR for krb5-devel
  - activate IPv6 support
  - change config to /etc/mail.rc for compatibility
  - add triggerpostun scriptlets against previous mailx and nail
    to check and merge (when possible) their user config changes
  - use proper config filename in manuals
  - use "less" instead of non-provided "pg" for nobsdcompat mode


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.3-0
changelog:
  - Change the name from "nail" to upstream's "mailx".
    Merge with the ordinary "mailx" cvs tree for Fedora 10.
    Now this stuff supersedes the old ancient mailx-8.x in Fedora.
  - Build with nss instead of openssl, for "Security Consolidation" process.


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.0-2
changelog:
  - complete "mailx to nail" changes in the manual and config files
  - drop _smp_mflags: it caused make to work incorrectly.


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.0-1
changelog:
  - upgrade to 12.0
  - change new upstream name "mailx" to the old name "nail" to avoid
    conflicts with the Core mailx package.
  - drop Source1, use package's html file instead.


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 11.25-3
changelog:
  - more spec file cleanups
  - accepted for Fedora Extra
    (review by Aurelien Bompard <gauret@free.fr>)


author: William Roche <william.roche@oracle.com> - 3.3.2-1.2
changelog:
  - BACKPORT 19877572 - DISCOVER_NETWORK FAILED - NO DEVICE FOUND VSWITCH SWITCH@1
    Signed-off-by: William Roche <william.roche@oracle.com> [bug 20646623]


author: William Roche <william.roche@oracle.com> - 3.3.1-276.el6.17
changelog:
  - 20185577 - BACKPORT: UNABLE TO CHANGE THE MTU ON A DLMP/ACTIVE_BACKUP AGGREGATION
    Signed-off-by: William Roche <william.roche@oracle.com> [bug 20185577]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 3.3.1-276.el6.15
changelog:
  - send per physical cpu utilization statistic
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Jim Perry <jim.perry@oracle.com> [bug 19707017]


author: William Roche <william.roche@oracle.com> - 3.3.1-276.el6.14
changelog:
  - INSTALLATION OF ORACLE VM AGENT AGENT SPARC FAILS ON S11.2 [bug 18371968] 
    Signed-off-by: William Roche <william.roche@oracle.com>


author: Chuang Cao <chuang.cao@oracle.com> - 3.3.1-276.el6.13
changelog:
  - storage_discover disk size 0 with some active/ghost configurations
    Signed-off-by: Chuang Cao <chuang.cao@oracle.com>
    Reviewed-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Reviewed-by: Carson Hovey <carson.hovey@oracle.com> [bug 19131600]


author: Chuang Cao <chuang.cao@oracle.com> - 3.3.1-276.el6.12
changelog:
  - Signed-off by: Adnan G Misherfi <adnan.misherfi@oracle.com>
    Signed-off by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Backported-by: Chuang Cao <chuang.cao@oracle.com> [bug 19725961]


author: Chuang Cao <chuang.cao@oracle.com> - 3.3.1-276.el6.11
changelog:
  - Use ETHTOOL_OPTS directive instead of ETHTOOL_OFFLOAD_OPTS
    which was OVM work around to persist LRO setting (disabled) for 10G interfaces
    Signed-off by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Backported-by: Chuang Cao <chuang.cao@oracle.com> [bug 19731130]


author: Joe Jin <joe.jin@oracle.com> - 3.3.1-276.el6.10
changelog:
  - assembly import: add some support for OVF spec 2.1.0
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Backported-by: Joe Jin <joe.jin@oracle.com> [bug 19639096]


author: Ke-Chiang Chen <ke-chiang.chen@oracle.com> - 3.3.1-276.el6.9
changelog:
  - Added command to return available space on system disk
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Alex Chartre <alexandre.chartre@oracle.com> [bug 19651862]


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 3.3.1-276.el6.6
changelog:
  - Bug 18934340 - VM SERIAL CONSOLE CAN NOT BE CONNECTED AFTER REBOOT SPARC PRIMARY DOMAIN
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com>
    Signed-off-by: William Roche <william.roche@oracle.com>


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "Requires: xorg-x11-proto-devel" to devel for xinerama.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXinerama to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-3
changelog:
  - Added "BuildRequires: libXau-devel", as twm fails without it, but does not
    check for it with ./configure.  Bug (fdo#5065)


author: Karel Klic <kklic@redhat.com> - 6.0-1
changelog:
  - Rebase to upstream 6.0
    Resolves: #594860
  - Fixed a buffer overflow (rhbz#532380, unzip-6.0-attribs-overflow.patch)
  - Generate debuginfos (rhbz#540220, unzip-6.0-nostrip.patch)
  - New upstream version
  - Compiled using `make generic_gcc` (includes asm)
  - Removed unzip542-rpmoptflags.patch, because RPM_OPT_FLAGS 
    are provided using command line
  - Removed unzip-5.51-link-segv.patch, because the link file 
    is not reopened in the current version
  - Removed unzip-5.51-link-segv2.patch, the bug was already fixed 
    in open_outfile in 5.52
  - Removed unzip-5.52-toctou.patch (CAN-2005-2475), the vulnerability 
    is fixed in the current version
  - Removed unzip-5.52-near-4GB.patch, unzip-5.52-near-4GB2.patch, 
    unzip-5.52-4GB3.patch, and unzip-5.52-4GB_types.patch, because 
    the current version supports large files
  - Removed unzip-5.52-long-filename.patch, the current version
    fixes the vulnerability by checking the length of command line 
    arguments in unzip.c
  - Removed unzip-5.52-makefile.patch, because we no longer create
    the link manually
  - Removed unzip-5.52-open.patch, the current version uses umask.
  - Removed unzip-5.52-cve-2008-0888.patch, the current version
    fixes this vulnerability
  - Ported unzip-5.52-249057.patch to current version (unzip-6.0-close)


author: Ivana Varekova <varekova@redhat.com> 5.52-2
changelog:
  - fix bug 180078 - unzip -l causing error
  - fix CVE-2005-4667 - unzip long file name buffer overflow


author: Lon Hohberger <lhh@redhat.com> 5.50-30
changelog:
  - SECURITY Round 3: Fix up original patch (from 5.50-9) to fix
  ^V/ exploit, but still allow '-:', which the other patch (5.50-18)
  does not allow.  Never allow explicit writing to the root
  directory; force users to change there and extract it manually.


author: Lon Hohberger <lhh@redhat.com> 5.50-18
changelog:
  - SECURITY: Incorporate far cleaner patch from Ben Laurie
  <ben@algroup.co.uk> which also fixes ^V/ (quote-slash).
  Patch checks post-decode as opposed to inline as previous
  patch does.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 5.42
  - Don't strip binaries explicitly
  - build without assembly, it doesn't seem to increase performance 
  - make it respect RPM_OPT_FLAGS, define _GNU_SOURCE
  - use %{_tmppath}
  - "License:" replaces "Copyright:"
  - Update URL
  - include zipgrep
  - COPYING doesn't exist anymore, include LICENSE instead


author: James Antill <james@fedoraproject.org> 3.0.0-8
changelog:
  - Tweak progress output so it's hopefully less confusing
  - Add dynamic resizing ability to progress bar
  - Resolves: bug#437197


author: James Antill <james@fedoraproject.org> 3.0.0-7
changelog:
  - Fix reget's against servers that don't allow Range requests, also tweaks
  - reget == check_timestamp, if anyone/thing uses that.
  - Resolves: bug#435156
  - Fix minor typo in progress for single instance.


author: James Antill <james@fedoraproject.org> 3.0.0-6
changelog:
  - Fix the ftp byterange port problem:
  - Resolves: bug#419241
  - Fixup the progress UI:
  -   add function for total progress
  -   add total progress percentagee current download line
  -   add rate to current download line
  -   use dead space when finished downloading
  -   don't confuse download rate on regets.


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.119.65
changelog:
  - From: Andrew Cooper <andrew.cooper3@citrix.com>
    Date: Sun, 18 Dec 2016 15:42:59 +0000
    Subject: [PATCH] x86/emul: Correct the handling of eflags with SYSCALL
    A singlestep #DB is determined by the resulting eflags value from the
    execution of SYSCALL, not the original eflags value.
    By using the original eflags value, we negate the guest kernels attempt to
    protect itself from a privilege escalation by masking TF.
    Introduce a tf boolean and have the SYSCALL emulation recalculate it
    after the instruction is complete.
    This is XSA-204
    Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Reviewed-by: Jan Beulich <jbeulich@suse.com>
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com> [bug 25294894]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.119.64
changelog:
  - From: Jan Beulich <jbeulich@suse.com>
    Subject: x86: force EFLAGS.IF on when exiting to PV guests
    Guest kernels modifying instructions in the process of being emulated
    for another of their vCPU-s may effect EFLAGS.IF to be cleared upon
    next exiting to guest context, by converting the being emulated
    instruction to CLI (at the right point in time). Prevent any such bad
    effects by always forcing EFLAGS.IF on. And to cover hypothetical other
    similar issues, also force EFLAGS.{IOPL,NT,VM} to zero.
    This is XSA-202.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 25235035]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.119.63
changelog:
  - From: Jan Beulich <jbeulich@suse.com>
    Subject: x86emul: CMPXCHG8B ignores operand size prefix
    Otherwise besides mis-handling the instruction, the comparison failure
    case would result in uninitialized stack data being handed back to the
    guest in rDX:rAX (32 bits leaked for 32-bit guests, 96 bits for 64-bit
    ones).
    This is XSA-200.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 25180312]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.119.62
changelog:
  - qemu_up: ioport_read, ioport_write: be defensive about 32-bit addresses
    On x86, ioport addresses are 16-bit.  That these functions take 32-bit
    arguments is a mistake.  Changing the argument type to 16-bit will
    discard the top bits of any erroneous values from elsewhere in qemu.
    Also, check just before use that the value is in range.  (This turns
    an ill-advised change to MAX_IOPORTS into a possible guest crash
    rather than a privilege escalation vulnerability.)
    And, in the Xen ioreq processor, clamp incoming ioport addresses to
    16-bit values.  Xen will never write >16-bit values but the guest may
    have access to the ioreq ring.  We want to defend the rest of the qemu
    code from wrong values.
    This is XSA-199.
    Signed-off-by: Ian Jackson <Ian.Jackson@eu.citrix.com>
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 25149316] {CVE-2016-9637}


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.119.61
changelog:
  - qemu: ioport_read, ioport_write: be defensive about 32-bit addresses
    On x86, ioport addresses are 16-bit.  That these functions take 32-bit
    arguments is a mistake.  Changing the argument type to 16-bit will
    discard the top bits of any erroneous values from elsewhere in qemu.
    Also, check just before use that the value is in range.  (This turns
    an ill-advised change to MAX_IOPORTS into a possible guest crash
    rather than a privilege escalation vulnerability.)
    And, in the Xen ioreq processor, clamp incoming ioport addresses to
    16-bit values.  Xen will never write >16-bit values but the guest may
    have access to the ioreq ring.  We want to defend the rest of the qemu
    code from wrong values.
    This is XSA-199.
    Signed-off-by: Ian Jackson <Ian.Jackson@eu.citrix.com>
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 25149316] {CVE-2016-9637}


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1.0-39
changelog:
  - when the backing device is a linear device mapper, create local filesystem instead of clustered.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>


author: Jingjie Jiang <jingjie.jiang@oracle.com> - 0.1.0-37
changelog:
  - hange the /usr/bin/storage_discover to /usr/sbin/storage_discover since the ovs-storage-utils merged into ovs-agant and use the same directory for the commands as ovs-agent.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Jingjie Jiang <jingjie.jiang@oracle.com>


author: Junjie Wei <junjie.wei@oracle.com> - 0.1.0-36
changelog:
  - Set the default node slots to 32.
    Signed-off-by: Junjie Wei <junjie.wei@oracle.com>
    Signed-off-by: Xiaodong Yang <xiao.dong.yang@oracle.com> [bug 13847335]


author: Junjie Wei <junjie.wei@oracle.com> - 0.1.0-32
changelog:
  - Add support of ocfs2 device on-disk cluster stack update.
    Signed-off-by: Junjie Wei <junjie.wei@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com>
    Signed-off-by: Sunil Mushran <sunil.mushran@oracle.com>


author: Kurt Hackel <kurt.hackel@oracle.com> - 0.1.0-31
changelog:
  - Adds a hack to the ocfs2 plugin so that the server determines independently whether to mkfs with "local" or clustered options.  It will check storage utils (same thing used by discovery so should match the Manager) to see if the LUN is "local".
    We should change this when possible by splitting the ocfs2 plugin into local and cluster personalities and putting all the rules in core to understand when each can be used.


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1.0-26
changelog:
  - fix umask
    We don't need to calculate the mode or chmod.
    For os.mknod: default mode is 0600, default node type is stat.S_IFREG, umask is 077, the actual mode (mode & ~umask) will be 0600.
    For os.mkdir: default mode is 0777, umask is 077, the actual mode (mode & ~umask) will be 0700.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com> [bug 12719289]


author: Kurt Hackel <kurt.hackel@oracle.com> - 0.1.0-25
changelog:
  - Allow ocfs2 plugin to create local-only filesystems as well as clustered.
    Use more sensible mkfs params for vm storage.


author: Cathy Avery <cathy.avery@oracle.com> - 0.1.0-23
changelog:
  - listFileSystems no longer throws exception when encountering fs error but logs error.
    Oracle_Bug: 12543055


author: Wiekus Beukes <wiekus.beukes@oracle.com> - 0.1.0-15
changelog:
  - Should not throw an exception if there are no devices on the system, rather just return no file systems..
    bug:11679187


author: Joel Becker <joel.becker@oracle.com> - 0.1.0-9
changelog:
  - OCFS2.py: More updates for spec 1.27 (1.2.7?)
    - Make mount()/unmount()'s keyword arguments match OSCPlugin.py
    - Test the new mount arguments
    - Make the filesys_path -> backing_device changes to testocfs2.py
    - Add isSplittable()
    - Test isSplittable()
    Signed-off-by: Joel Becker <joel.becker@oracle.com>


author: Wiekus Beukes <wiekus.beukes@oracle.com> - 0.1.0-7
changelog:
  - Updated to spec version 1.27;
    replaced filesys_path with backing_device;
    removed list_can_filter and thin_clone from plugin_ability, and added the backing_device_type (set to single device);
    added create/destroy mount point flags to mount/unmount respectively;
    added kludge to keep the plugin -release in sync with the .spec file (auto patch rev the -release on every patch)
    patch-name:update-to-1.27-spec.patch


author: Joel Becker <joel.becker@oracle.com> - 0.1.0-6
changelog:
  - testocfs2: Fix a few test errors that cause problems on 1.24
    Signed-off-by: Joel Becker <joel.becker@oracle.com>


author: Joel Becker <joel.becker@oracle.com> - 0.1.0-3
changelog:
  - OCFS2/testocfs2: Update to the new filesys_type=Block changes.
    Keep up with OSCPlugin's change of filesys_type to a generic Block type.
    Signed-off-by: Joel Becker <joel.becker@oracle.com>


author: Wiekus Beukes <wiekus.beukes@oracle.com> 0.1.0-2
changelog:
  - Fixing many bugs as uncovered by the cert testing
  - Fixed issues with RPM and generated __init__.py file


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-5
changelog:
  - use /dev/urandom for seeding in the FIPS mode
  - make the tests to pass in the FIPS mode also fixing
    the FIPS-186-3 DSA keygen


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-3
changelog:
  - drop the S390 build workaround as it is no longer needed
  - additional spec file cleanups for merge review (#226008)


author: Tomas Mraz <tmraz@redhat.com> 1.4.4-1
changelog:
  - update to 1.4.4
  - do not abort when the fips mode kernel flag is inaccessible
    due to permissions (#470219)
  - hobble the library to drop the ECC support


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1
  - bump libgpgerror-devel requirement to 1.4, matching the requirement enforced
    by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-5
changelog:
  - add missing gawk buildrequirement
  - switch from explicitly specifying the /dev/random RNG to just verifying
    that the non-LGPL ones were disabled by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.4-4
changelog:
  - clarify license
  - force use of the linux /dev/random RNG, to avoid accidentally falling back
    to others which would affect the license of the resulting library


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-2
changelog:
  - remove file conflicts in libgcrypt-config by making the 64-bit version
    think the libraries are in /usr/lib (which is wrong, but which it also
    prunes from the suggest --libs output, so no harm done, hopefully)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.1.7
  - change license to LGPL.
  - include splint annotations patch.
  - install info pages.


author: Thomas Woerner <twoerner@redhat.com> - 1.2-10
changelog:
  - Added support for brctl show <bridge> (rhbz#690529)
  - Added multicast option documentation to man page (rhbz#676355)


author: David Woodhouse <dwmw2@redhat.com> 1.0.4-4
changelog:
  - BuildRequires: sysfsutils-devel to make the horrid autoconf script magically
    change the entire package's behaviour just because it happens to find 
    slightly different header files lying around.
  - Include our own kernel-derived headers


author: Jingdong Lu <jingdong.lu@oracle.com> 3.3-6.370.el6.42
changelog:
  - Update spec file [20122857] (Zhigang Wang)
    add Requires: orclovn-user
    change Obsoletes: osc-plugin-manager-devel < 1.2.9-32


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.2-5
changelog:
  - Enable execshield stack protection on ppc/ppc64 (572826)
    related: rhbz#1343082
  - Fix strict-aliasing warnings in build (990540).


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.1-7
changelog:
  - Remove ocaml-find-{requires,provides}.sh from this package.  These are
    now in upstream RPM 4.8 (RHBZ#545116).
  - define -> global in a few places.


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.1-2
changelog:
  - ocaml-find-requires.sh: Calculate runtime version using ocamlrun
    -version instead of fedora-ocaml-release file.


author: Richard W.M. Jones <rjones@redhat.com> - 3.11.1-1
changelog:
  - OCaml 3.11.1 (this is virtually the same as the release candidate
    that we were using for Fedora 12).


author: Richard W.M. Jones <rjones@redhat.com> - 3.10.2-3
changelog:
  - ocaml-ocamldoc provides ocamldoc (bz #449931).
  - REMOVED provides of labltk, camlp4.  Those are libraries and all
    packages should now depend on ocaml-labltk / ocaml-camlp4 / -devel
    as appropriate.


author: Richard W.M. Jones <rjones@redhat.com> - 3.10.0-7
changelog:
  - Run chrpath to delete rpaths used on some of the stublibs.
  - Ignore Parsetree module in dependency calculation.
  - Fixed ocaml-find-{requires,provides}.sh regexp calculation so it doesn't
    over-match module names.


author: Richard W.M. Jones <rjones@redhat.com> - 3.10.0-6
changelog:
  - ocaml-runtime provides ocaml(runtime) = 3.10.0, and
    ocaml-find-requires.sh modified so that it adds this requires
    to other packages.  Now can upgrade base ocaml packages without
    needing to rebuild everything else.


author: Richard W.M. Jones <rjones@redhat.com> - 3.10.0-5
changelog:
  - Don't include the release number in fedora-ocaml-release file, so
    that packages built against this won't depend on the Fedora release.


author: Toshio Kuratomi <toshio-tiki-lounge.com> - 3.08.3-4
changelog:
  - Fix for gcc4 and the 32 bit assembly in otherlibs/num.
  - Fix to allow compilation with RPM_OPT_FLAG defined -O level.


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.2.5.el6uek]
changelog:
  - KEYS: Fix keyring ref leak in join_session_keyring() (Yevgeny Pats)  [Orabug: 22563965]  {CVE-2016-0728}


author: Chuck Anderson <chuck.anderson@oracle.com> [3.8.13-118.2.4.el6uek]
changelog:
  - KEYS: Don't permit request_key() to construct a new keyring (David Howells)  [Orabug: 22373442]  {CVE-2015-7872}


author: Chuck Anderson <chuck.anderson@oracle.com> [3.8.13-118.2.3.el6uek]
changelog:
  - dcache: Handle escaped paths in prepend_path (Eric W. Biederman)  [Orabug: 22373283]  
  - vfs: Test for and handle paths that are unreachable from their mnt_root (Eric W. Biederman)  [Orabug: 22249875]  
  - KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells)  [Orabug: 22373442]  {CVE-2015-7872} 
  - KEYS: Fix race between key destruction and finding a keyring by name (David Howells)  [Orabug: 22373442]


author: Tim Waugh <twaugh@redhat.com> 0.0.4-7
changelog:
  - Fix small memory leak and move malloc() check close to call (bug #718176).
  - Requires chkconfig (bug #712362).


author: Tim Waugh <twaugh@redhat.com> 0.0.4-1
changelog:
  - 0.0.4:
    - Fixed initscript so that it will not be reordered to start after
      rpcbind (bug #487250).


author: Tim Waugh <twaugh@redhat.com> 0.0.3-1
changelog:
  - 0.0.3:
    - Allow multiple services to be defined in a single configuration
      file.
    - Allow protocol specifications, e.g. ipp/udp.


author: Tim Waugh <twaugh@redhat.com> 0.0.1-2
changelog:
  - More consistent use of macros.
  - Build requires xmlto.
  - Don't use %makeinstall.
  - No need to run make check.


author: Tim Waugh <twaugh@redhat.com> 0.0.1-1
changelog:
  - Default permissions for directories.
  - Initscript should not be marked config.
  - Fixed license tag.
  - Better buildroot tag.


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.3.2.el6uek]
changelog:
  - x86/nmi/64: Use DF to avoid userspace RSP confusing nested NMI detection (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157} 
  - x86/nmi/64: Reorder nested NMI checks (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157} 
  - x86/nmi/64: Improve nested NMI comments (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157} 
  - x86/nmi/64: Switch stacks on userspace NMI entry (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157} 
  - x86/paravirt: Replace the paravirt nop with a bona fide empty function (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157}


author: Kamil Dudka <kdudka@redhat.com> - 8.4-44
changelog:
  - fix the functionality of 'sort -h -k ...' in multi-byte locales (#1357979)
  - use correct path to grep(1) in colorls.sh (#1376892)
  - make colorls.sh compatible with ksh (#1321643)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-41
changelog:
  - colorls.sh,colorls.csh - call utilities with complete path (#1222140)
  - mkdir, mkfifo, mknod - respect default umask/acls when 
    COREUTILS_CHILD_DEFAULT_ACLS envvar is set (to match rhel 7 behaviour,


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-40
changelog:
  - ls: improve efficiency on filesystems without support for ACLs,
    xattrs or SELinux (#1248141)
  - su: suppress PAM info messages for -c or non-login sessions (#1267588)
  - tail, stat: recognize several new filesystems - up2date by Jan 1st 2016 (#1280333)


author: Ondrej Oprala <ooprala@redhat.com> - 8.4-39
changelog:
  - du: improve du error message of coreutils commands in a chrooted environment
    (patch by Boris Ranto) (#1086916)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-34
changelog:
  - tail: disable inotify in --follow for vxfs (#1104244)
  - df: dereference symlinks to disk device nodes (#812449)
  - dd: add support for count_bytes iflag (#1098078)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-33
changelog:
  - su: don't terminate parent process upon SIGTERM(#1063887)
  - tail: do not show "reverting to polling" warning when not
    necessary (#1046818)
  - chcon: document default behaviour for symlink (#1064621)
  - fix dd sparse test failure on XFS (#1075679)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-29
changelog:
  - CVE-2013-0221 CVE-2013-0223 CVE-2013-0222 - fix various
    segmentation faults in sort, uniq and join(#1015019)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-25
changelog:
  - pr -n no longer crashes when passed values >= 32.
    Also line numbers are consistently padded with spaces,
    rather than with zeros for certain widths. (#997537)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-22
changelog:
  - wait for su child to prevent errorneous execution of some
    commands (#749679)
  - correct return values after signal termination (#889531)
    and propagation of child core dump info (#747592)
  - dd now accepts 'status=none' to suppress all
    informational output(#965654)
  - cut --output-delimiter option was ignored for multibyte
    locales (#867984)
  - remove redundant setpwent() and setgrent () syscalls
    from stat -U/-G to improve NIS performance (#911206)
  - date: deal correctly with invalid input with special
    characters (#960160)
  - dd: provide support for the conv=sparse (#908980)
  - su/runuser: clarify which envvars are preserved/initialized
    in -p/-m and -l help/man documentation (#967623)
  - du: properly detect bindmounts (#836557)
  - df: fix alignment of columns (#842040)
  - id,groups: fix correct group printing (#816708)
  - mv : replace empty directories in cross file
    system move (#980061)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-21
changelog:
  - fix parsing of field regression in sort command
    (introduced between RHEL5 and RHEL6 upstream) (#956143)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-20
changelog:
  - revert to polling for unknown filesystems, update
    known fs for tail and stat based on coreutils-8.21 (#827199)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-17
changelog:
  - fix memory leak in ls -l (#751974)
  - document difference between ls -lZ and ls -Zl (#771843)
  - fix various i18n patch related issues in pr (#772172)
  - df should display target device information when
    a symbolic link is specified as a parameter(#766461)
  - su no longer hangs when a program set itself to ignore
    SIG_CHLD signal, and fork a child to exec su(#754029)
  - stat recognizes few new filesystems, tail -f recognizes
    FhGFS and GPFS as remote (disables inotify) (#769874)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-14
changelog:
  - tweak documentation of tail --sleep-interval (#725618)
  - prevent build failure on system with mock>=1.1.9 (#691292)
  - su: fix shell suspend in tcsh (#703712)
  - ls: use acl_extended_file_nofollow() to prevent unnecessary
    autofs mounts(#720325)
  - fix cp -Z functionality if the destination exists(#715557)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-12
changelog:
  - document that dd's iflag=fulblock prevents dd's oflag=direct
   automatic turn off when reading via pipe(#614605)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-11
changelog:
  - adjust the wording in the octal value byte representation
    documentation to match with upstream(#660033)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-10
changelog:
  - compile coreutils su with RELRO and PIE again(#630017)
  - document rare usefulness of tail options --sleep-interval
    and --max-unchanged-stats with inotify support(#662900)
  - fix double free error in tac for input line longer
    than 16KiB(#628212)
  - fix segfault in sort if LC_TIME differs from the rest
    of locales(#649224)
  - fix support for DTR/DSR control flow in stty(#598631)
  - clarify mkdir --mode behaviour in info documentation
    (#609262)
  - inform about dropped ninth bit of 3-digit octal values in byte
    representations in info documentation(#660033)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-7
changelog:
  - doublequote LS_COLORS in colorls.*sh scripts to speedup
    shell start(#586949)
  - update /etc/DIR_COLORS* files
  - move readlink from /usr/bin to bin, keep symlink in
    /usr/bin(#586948)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-4
changelog:
  - fix exit status of terminated child processes in su with
    pam(#563852)
  - do not depend on selinux patch application in
    _require_selinux tests


author: Ondrej Vasik <ovasik@redhat.com> - 8.2-3
changelog:
  - require gmp-devel/gmp for large numbers support
  - fix misc/selinux root-only test
  - bring back uname -p/-i functionality except of the
    athlon hack
  - comment patches


author: Ondrej Vasik <ovasik@redhat.com> - 8.2-2
changelog:
  - Sanity changes(#548421):
    - use grep instead of deprecated egrep in colorls.sh script
    - remove unnecessary versioned requires
    - remove non-upstream hack for uname -p
    - add dtrdsr patch from RHEL-5 to prevent regression


author: Ondrej Vasik <ovasik@redhat.com> - 8.2-1
changelog:
  - new upstream release 8.2
  - removed applied patches, temporarily do not run dup_cloexec()
    dependent gnulib tests failing in koji
  - do not use bold attribute in 256-colors dircolor
  - CVE-2009-4135 coreutils: Unsafe temporary directory use
    in "distcheck" rule(#546705)


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-1
changelog:
  - new upstream release 8.1
  - fix build under koji (no test failures with underlying
    RHEL-5 XEN kernel due to unsearchable path and lack of
    futimens functionality)


author: Ondrej Vasik <ovasik@redhat.com> - 7.6-6
changelog:
  - ls -LR exits with status 2, not 0, when it encounters
    a cycle(#525402)
  - ls: print "?", not "0" as inode of dereferenced dangling
    symlink(#525400)
  - call the install-info on .gz info files


author: Ondrej Vasik <ovasik@redhat.com> - 7.5-4
changelog:
  - fixed regression where df -l <device> as regular user
    cause "Permission denied" (#520630, introduced by fix for
    rhbz #497830)


author: Ondrej Vasik <ovasik@redhat.com> - 7.5-2
changelog:
  - Better fix than workaround the koji insufficient utimensat
    support issue to prevent failures in other packages


author: Ondrej Vasik <ovasik@redhat.com> - 7.5-1
changelog:
  - New upstream release 7.5, remove already applied patches,
    defuzz few others, xz in default set(by dependencies),
    so no explicit br required
  - skip two new tests on system with insufficient utimensat
    support(e.g. koji)
  - libstdbuf.so in separate coreutils-libs subpackage
  - update /etc/DIRCOLORS*


author: Ondrej Vasik <ovasik@redhat.com> - 7.4-6
changelog:
  - do process install-info only with info files present(#515970)
  - BuildRequires for xz, use xz tarball


author: Kamil Dudka <kdudka@redhat.com> - 7.4-5
changelog:
  - ls -1U with two or more arguments (or with -R or -s) works properly again
  - install runs faster again with SELinux enabled (#479502)


author: Ondrej Vasik <ovasik@redhat.com> 7.2-1
changelog:
  - New upstream bugfix release 7.2
  - removed applied patches
  - temporarily disable strverscmp failing gnulib test


author: Ondrej Vasik <ovasik@redhat.com> 7.1-7
changelog:
  - do not ship /etc/DIR_COLORS.xterm - as many terminals
    use TERM xterm and black background as default - making
    ls color output unreadable
  - shipping /etc/DIR_COLORS.lightbgcolor instead of it for
    light(white/gray) backgrounds
  - try to preserve xattrs in cp -a when possible


author: Ondrej Vasik <ovasik@redhat.com> 7.1-2
changelog:
  - workaround libcap issue with broken headers (#483548)
  - fix gnulib testsuite failure (4x77 (skip) is not
    77(skip) ;) )


author: Ondrej Vasik <ovasik@redhat.com> - 7.1-1
changelog:
  - New upstream release 7.1 (temporarily using tar.gz tarball
    as there are no xz utils in Fedora), removed applied
    patches, amended patches and LS_COLORS files


author: Ondrej Vasik <ovasik@redhat.com> - 7.0-4
changelog:
  - fixed syntax error w/ "expr" command using negative
    string/integer as first (i.e expr -125) - due to
    complexity of changes used diff against upstream git-head
    (#474434)
  - enable total-awk test again (and skip it when df not working)


author: Ondrej Vasik <ovasik@redhat.com> - 7.0-2
changelog:
  - added requirements for util-linux-ng >= 2.14
    because of file conflict in update from F-8/F-9(#472445)
  - some sed cleanup, df totaltests patch changes (not working
    correctly yet :( )


author: Ondrej Vasik <ovasik@redhat.com> - 7.0-1
changelog:
  - new upstream release
  - modification/removal of related patches
  - use automake 1.10.1 instead of 1.10a
  - temporarily skip df --total tests (failures),
    timeout-paramaters (failure on ppc64)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-16
changelog:
  - make possible to disable capability in ls due to
    performance impact when not cached(#467508)
  - do not patch generated manpages - generate them at build
    time
  - do not mistakenly display -g and -G runuser option in su
    --help output


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-15
changelog:
  - fix several date issues(e.g. countable dayshifts, ignoring
    some cases of relative offset, locales conversions...)
  - clarify ls exit statuses documentation (#446294)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-14
changelog:
  - cp -Z now correctly separated in man page (#466646)
  - cp -Z works again (#466653)
  - make preservation of SELinux CTX non-mandatory for
    preserve=all cp option


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-13
changelog:
  - remove unimplemented (never accepted by upstream) option
    for chcon changes only. Removed from help and man.
  - remove ugly lzma hack as lzma is now supported by setup
    macro


author: Jarod Wilson <jarod@redhat.com> - 6.12-12
changelog:
  - fix up potential test failures when building in certain
    slightly quirky environments (part of bz#442352)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-10
changelog:
  - seq should no longer fail to display final number of some
    float usages of seq with utf8 locales(#463556)


author: Kamil Dudka <kdudka@redhat.com> - 6.12-7
changelog:
  - dd: iflag=fullblock now read full blocks if possible
    (#431997, #449263)
  - ls: --color now highlights files with capabilities (#449985)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-5
changelog:
  - fix authors for basename and echo
  - fix who info pages, print last runlevel only for printable
    chars


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-3
changelog:
  - workaround for koji failures(#449910, #442352) now 
    preserves timestamps correctly - fallback to supported
    functions, added test case
  - runuser binary is no longer doubled in /usr/bin/runuser


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-2
changelog:
  - workaround for strange koji failures(#449910,#442352)
  - fixed ls -ZC segfault(#449866, introduced by 6.10-1 
    SELinux patch reworking)


author: Ondrej Vasik <ovasik@redhat.com> - 6.11-3
changelog:
  - added arch utility (from util-linux-ng)
  - do not show executable file types without executable bit
    in colored ls as executable


author: Ondrej Vasik <ovasik@redhat.com> - 6.11-2
changelog:
  - Do not show misleading scontext in id command when user
    is specified (#443485)
  - Avoid possible test failures on non-english locales


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-18
changelog:
  - fix colorls.sh syntax with Zsh (#440652)
  - mention that cp -a includes -c option + mention cp -c 
    option in manpages (#440056)
  - fix typo in runuser manpages (#439410)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-17
changelog:
  - better workaround of glibc getoptc change(factor test)
  - don't segfault mknod, mkfifo with invalid-selinux-context


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-16
changelog:
  - keep LS_COLORS when USER_LS_COLORS defined
  - someupstream fixes:
  - mkdir -Z invalid-selinux-context dir no longer segfaults
  - ptx with odd number of backslashes no longer leads to buffer
    overflow
  - paste -d'\' file" no longer ovveruns memory


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-15
changelog:
  - covered correct handling for some test conditions failures
    e.g. root build+selinux active and not running mcstrans(d)
    or selinux enforcing (#436717)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-13
changelog:
  - disable echo option separator behavior(added by #431005,
    request for removal #437653 + upstream)
  - temporarily disabled longoptions change until full 
    clarification upstreamery (#431005)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-8
changelog:
  - use default security context in install - broken by 
    coreutils-6.10 update(#319231)
  - some sh/csh scripts optimalizations(by ville.skytta@iki.fi,
    - #433189, #433190)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-5
changelog:
  - enabled 256-color support in colorls shell scripts(#429121)
  - fixed syntax error in csh script(#431315)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-3
changelog:
  - fix unability of echo to display certain strings(added --
    separator, #431005)
  - do not require only one long_opt for certain commands 
    e.g. sleep, yes - but use first usable (#431005)
  - do not override userspecified LS_COLORS variable, but
    use it for colored ls(#430827)
  - discard errors from dircolors to /dev/null + some tuning 
    of lscolor sh/csh scripts(#430823)
  - do not consider files with SELinux security context as
    files having ACL in ls long format(#430779)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-1
changelog:
  - New upstream release(changed %prep because of lack of lzma
    support in %setup macro)
  - License GPLv3+
  - removed patches cp-i-u,du-ls-upstream,statsecuritycontext,
    futimens,getdateYYYYMMDD,ls-x
  - modified patches to be compilable after upstream changes
  - selinux patch reworked to have backward compatibility with
    F8(cp,ls and stat behaviour differ from upstream in SELinux
    options)
  - su-l/runuser-l pam file usage a bit documented(#368721)
  - more TERMs for DIR_COLORS, added colors for audio files,
    more image/compress file types(taken from upstream 
    dircolors.hin)
  - new file DIR_COLORS.256color which takes advantage from 
    256color term types-not really used yet(#429121)


author: Ondrej Vasik <ovasik@redhat.com> - 6.9-17
changelog:
  - added several missing colored TERMs(including rxvt-unicode,
    screen-256color and xterm-256color) to DIR_COLORS and
    DIR_COLORS.xterm(#239266)


author: Ondrej Vasik <ovasik@redhat.com> - 6.9-12
changelog:
  - added some upstream supported dircolors TERMs(#239266)
  - fixed du output for unaccesible dirs(#250089)
  - a bit of upstream tunning for symlinks


author: Ondrej Vasik <ovasik@redhat.com> - 6.9-10
changelog:
  - modified coreutils-i18n.patch because of sort -R in
    a non C locales(fix by Andreas Schwab) (#249315)


author: Tim Waugh <twaugh@redhat.com> 6.9-3
changelog:
  - Fixed 'ls -x' output (bug #240298).
  - Disambiguate futimens() from the glibc implementation (bug #242321).


author: Tim Waugh <twaugh@redhat.com> 6.7-9
changelog:
  - Use sed instead of perl for text replacement (bug #225655).
  - Use install-info scriptlets from the guidelines (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-8
changelog:
  - Don't mark profile scripts as config files (bug #225655).
  - Avoid extra directory separators (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-7
changelog:
  - Better Obsoletes/Provides versioning (bug #225655).
  - Use better defattr (bug #225655).
  - Be info file compression tolerant (bug #225655).
  - Moved changelog compression to %install (bug #225655).
  - Prevent upstream changes being masked (bug #225655).
  - Added a comment (bug #225655).
  - Use install -p for non-compiled files (bug #225655).
  - Use sysconfdir macro for /etc (bug #225655).
  - Use Requires(pre) etc for install-info (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-5
changelog:
  - Removed unnecessary stuff in pre scriptlet (bug #225655).
  - Prefix sources with 'coreutils-' (bug #225655).
  - Avoid %makeinstall (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-4
changelog:
  - Ship COPYING file (bug #225655).
  - Use datadir and infodir macros in %pre scriptlet (bug #225655).
  - Use spaces not tabs (bug #225655).
  - Fixed build root.
  - Change prereq to requires (bug #225655).
  - Explicitly version some obsoletes tags (bug #225655).
  - Removed obsolete pl translation fix.


author: Tim Waugh <twaugh@redhat.com> 6.7-1
changelog:
  - 6.7.  No longer need sort-compatibility, rename, newhashes, timestyle,
    acl, df-cifs, afs or autoconf patches.


author: Tim Waugh <twaugh@redhat.com> 5.97-15
changelog:
  - Fixed stat's 'C' format specifier (bug #216676).
  - Misleading 'id -Z root' error message (bug #211089).


author: Tim Waugh <twaugh@redhat.com> 5.97-10
changelog:
  - Ignore 'cifs' filesystems for 'df -l' (bug #183703).
  - Include -g/-G in runuser man page (part of bug #199344).
  - Corrected runuser man page (bug #200620).


author: Tim Waugh <twaugh@redhat.com> 5.97-6
changelog:
  - Added runuser '-g' and '-G' options (bug #199344).
  - Added su '--session-command' option (bug #199066).


author: David Howells <dhowells@redhat.com> 5.97-4
changelog:
  - split the PAM scripts for "su -l"/"runuser -l" from that of normal "su" and
    "runuser" (#198639)
  - add keyinit instructions to PAM scripts


author: Tim Waugh <twaugh@redhat.com> 5.96-4
changelog:
  - Include new hashes (bug #196369).  Patch from upstream.
  - Build at -O1 on s390 for the moment (bug #196369).


author: Dan Walsh <dwalsh@redhat.com> 5.93-6
changelog:
  - Remove pam_selinux.so from su.pamd, not needed for targeted and Strict/MLS 
    will have to newrole before using.


author: Tim Waugh <twaugh@redhat.com> 5.93-4
changelog:
  - Rebuild to pick up new glibc *at functions.
  - Apply runuser PAM patch from bug #173807.  Ship runuser PAM file.


author: Tim Waugh <twaugh@redhat.com> 5.93-2
changelog:
  - Call setsid() in su under some circumstances (bug #173008).
  - Prevent runuser operating when setuid (bug #173113).


author: Tim Waugh <twaugh@redhat.com> 5.92-0.1
changelog:
  - 5.92.
  - No longer need afs, dircolors, utmp, gcc4, brokentest, dateseconds,
    chown, rmaccess, copy, stale-utmp, no-sign-extend, fchown patches.
  - Updated acl, dateman, pam, langinfo, i18n, getgrouplist, selinux patches.
  - Dropped printf-ll, allow_old_options, jday, zh_CN patches.
  - NOTE: i18n patch not ported for sort(1) yet.


author: Dan Walsh <dwalsh@redhat.com> 5.2.1-53
changelog:
  - Allow id to run even when SELinux security context can not be run
  - Change chcon to use raw functions.


author: Tim Waugh <twaugh@redhat.com> 5.2.1-21
changelog:
  - Apply upstream patch to fix 'cp -a' onto multiply-linked files (bug #128874).
  - SELinux patch fix: don't error out if lgetfilecon() returns ENODATA.


author: Tim Waugh <twaugh@redhat.com> 5.2.1-19
changelog:
  - Added 'gnome' TERM to DIR_COLORS (bug #129112).
  - Worked around a bash bug #129128.
  - Fixed an i18n patch bug in cut (bug #129114).


author: Tim Waugh <twaugh@redhat.com> 5.2.1-9
changelog:
  - Mention pam in the info for su (bug #122592).
  - Remove wheel group rant again (bug #122886).
  - Change default behaviour for chgrp/chown (bug #123263).  Patch from
    upstream.


author: Tim Waugh <twaugh@redhat.com> 5.2.0-6
changelog:
  - Apply Paul Eggert's chown patch (bug #116536).
  - Merged chdir patch into pam patch where it belongs.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Stop 'sort -g' leaking memory (i18n patch bug #115620).
  - Don't ship kill, since util-linux already does.
  - Tidy AFS patch.


author: Tim Waugh <twaugh@redhat.com> 5.0-20
changelog:
  - Restrict ACL support to only those programs needing it (bug #106141).
  - Fix default PATH for LSB (bug #102567).


author: Tim Waugh <twaugh@redhat.com> 5.0-13
changelog:
  - Made su use pam again (oops).
  - Fixed another i18n bug causing sort --month-sort to fail.
  - Don't run dubious stty test, since it fails when backgrounded
    (bug #102033).
  - Re-enable make check.


author: Tim Waugh <twaugh@redhat.com> 5.0-12
changelog:
  - Don't run 'make check' for this build (build environment problem).
  - Another uninitialized variable in i18n (from bug #98683).


author: Tim Waugh <twaugh@redhat.com> 5.0-5
changelog:
  - Both kon and kterm support colours (bug #83701).
  - Fix 'ls -l' alignment in zh_CN locale (bug #88346).


author: Tim Waugh <twaugh@redhat.com> 4.5.10-1
changelog:
  - 4.5.10.
  - Update lug, touch_errno, acl, utmp, printf-ll, i18n, test-bugs patches.
  - Drop fr_fix, LC_TIME, preserve, regex patches.


author: Tim Waugh <twaugh@redhat.com> 4.5.3-4
changelog:
  - Fix scriplets.
  - Fix i18n patch so it doesn't break uniq.
  - Fix several other patches to either make the test suite pass or
    not run the relevant tests.
  - Run 'make check'.
  - Fix file list.


author: Tim Waugh <twaugh@redhat.com> 4.5.3-3
changelog:
  - Adapted for Red Hat Linux.
  - Self-host for help2man.
  - Don't ship readlink just yet (maybe later).
  - Merge patches from fileutils and sh-utils (textutils ones are already
    merged it seems).
  - Keep the binaries where the used to be (in particular, id and stat).


author: Thierry Vignaud <tvignaud@mandrakesoft.com> 4.5.2-2mdk
changelog:
  - fix build
  - don't chmode two times su
  - build with large file support
  - fix description
  - various spec cleanups
  - fix chroot installation
  - fix missing /bin/env
  - add old fileutils, sh-utils & textutils ChangeLogs


author: Thierry Vignaud <tvignaud@mandrakesoft.com> 4.5.2-1mdk
changelog:
  - initial release (merge fileutils, sh-utils & textutils)
  - obsoletes/provides: sh-utils/fileutils/textutils
  - fileutils stuff go in 1xx range
  - sh-utils stuff go in 7xx range
  - textutils stuff go in 5xx range
  - drop obsoletes patches 1, 2, 10 (somes files're gone but we didn't ship
    most of them)
  - rediff patches 103, 105, 111, 113, 180, 706
  - temporary disable patch 3 & 4
  - fix fileutils url


author: Ke-Chiang Chen <ke-chiang.chen@oracle.com> - 3.3.3-1.6.el6
changelog:
  - Backport bug 17634608 Do not use intermediate shell invoking process
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com> [bug 21219360]


author: William Roche <william.roche@oracle.com> - 3.3.3-1.5.el6
changelog:
  - BACKPORT 21137720 - ORACLE VM AGENT DOESN'T COME UP WITH PYTHON2.7 -- DEFAULT ON SOLARIS 11.3
    Signed-off-by: William Roche <william.roche@oracle.com>
    Signed-off-by: Vasu Srinivasan <vasu.srinivasan@oracle.com> [bug 21976240]


author: Chuang Cao <chuang.cao@oracle.com> - 3.3.3-1.4.el6
changelog:
  - Check if there are interfaces of bond used in a bridge
    when disable the lro.
    Signed-off-by: Chuang Cao <chuang.cao@oracle.com>
    Signed-off-by: Joe Jin <joe.jin@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 20390557]


author: Chuang Cao <chuang.cao@oracle.com> - 3.3.3-1.3.el6
changelog:
  - make ovs-agent support TLSv1, TLSv1_1 and TLSv1_2
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Backported-by: Chuang Cao <chuang.cao@oracle.com> [bug 21488388]


author: Vasu Srinivasan <vasu.srinivasan@oracle.com> - 3.3.3-1.2.el6
changelog:
  - Backport 20181716 - UNABLE TO DISCOVER A SPARC SERVER WITH A VIRTUAL SWITCH
    Signed-off-by: Vasu Srinivasan <vasu.srinivasan@oracle.com>
    Signed-off-by: William Roche <william.roche@oracle.com> [bug 21302405]


author: William Roche <william.roche@oracle.com> - 3.3.2-1.12.el6
changelog:
  - BACKPORT 20976213 - CLEAN UP PYTHON CODE
    Signed-off-by: William Roche <william.roche@oracle.com> [bug 20976223]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 3.3.2-1.11.el6
changelog:
  - Bond config needed this fix also.
    Disable generic receive offload (GRO) on ixgbe when adding it to a bridge [bug 19514003]


author: Ke-Chiang Chen <ke-chiang.chen@oracle.com> - 3.3.2-1.9.el6
changelog:
  - Backport fix for bug 19731085
    Use ETHTOOL_OPTS directive instead of ETHTOOL_OFFLOAD_OPTS
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Ke-Chiang Chen <ke-chiang.chen@oracle.com> [bug 20963811]


author: Chuang Cao <chuang.cao@oracle.com> - 3.3.2-1.8.el6
changelog:
  - Move calls to logging outside of multiprocessing callback routine.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: AZAR <firas.azar@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Backported-by: Chuang Cao <chuang.cao@oracle.com> [bug 19357800]


author: Joe Jin <joe.jin@oracle.com> - 3.3.2-1.7.el6
changelog:
  - When adding a port to a bond, and the bond is a bridge interface, then disable LRO on the new port.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Joe Jin <joe.jin@oracle.com> [bug 20390557]


author: Joe Jin <joe.jin@oracle.com> - 3.3.2-1.5.el6
changelog:
  - When adding a port to a bond, and the bond is a bridge interface, then disable LRO on the new port.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Joe Jin <joe.jin@oracle.com> [bug 20384302]


author: Chuang Cao <chuang.cao@oracle.com> - 3.3.2-1.3.el6
changelog:
  - Do not write HWADDR to ifcfg file if interface is a VLAN over a bond, as it may not come up on restart
    if the MAC address of the bond changed.
    Signed-off by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Backported-by: Chuang Cao <chuang.cao@oracle.com> [bug 19802253]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 3.3.2-1.2.el6
changelog:
  - BACKPORT 19248457 - LONG SERVER DISCOVERY TIME (SEVERAL HOURS) WITH LARGE NUMBER OF DISKS
    Signed-off-by: William Roche <william.roche@oracle.com> [bug 20158892] 
  - make proxy configurable for file download
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com> [bug 20474152]


author: Ray Strode <rstrode@redhat.com> - 1:1.2.16-9
changelog:
  Resolves: #547808
  - Fix activation of daemons (#545267)
  - Fix reload memleak (fdo #24697)
  - Don't forget about pending activations on reload (fdo #24350)
  - Fix reload race (fdo #21597)


author: Colin Walters <walters@redhat.com> - 1:1.2.16-2
changelog:
  - Explicitly add a dbus group id, fixes dbus files getting a
    random group id in cases where the RPM install order varies.
    Fixes https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=458183


author: Colin Walters <walters@redhat.com> - 1:1.2.16-1
changelog:
  - Upstream 1.2.16
  - Remove inotify patch, now upstreamed
  - Remove timeout patch, obsolete with upstream change to infinite
    timeout maximum by default


author: Matthias Clasen <mclasen@redhat.com> - 1.2.1-6
changelog:
  - Add a patch from upstream git that adds a method
    for changing the activation environment on the session bus


author: John (J5) Palmieri <johnp@redhat.com> - 1.2.1-1
changelog:
  - update to latest upstream
  - major version change is really a maint release for 1.1.20
    please read the NEWS file in the source for more information


author: David Zeuthen <davidz@redhat.com> - 1.1.20-1.el6_3
changelog:
  - Update to latest upstream release. Includes fix for CVE-2008-0595.
  - Drop some patches that went upstream already


author: John (J5) Palmieri <johnp@redhat.com> - 1.1.3-1
changelog:
  - new upstream version which obsoletes a number of our patches
  - doc section added for the devhelp docs


author: Dan Walsh <dwalsh@redhat.com> - 1.1.2-5.el6_3
changelog:
  - Reverse we_were_root check to setpcap if we were root.  Also only init
  audit if we were root.  So error dbus message will not show up when policy 
  reload happens.  dbus -session will no longer try to send audit message, 
  only system will.


author: David Zeuthen <davidz@redhat.com> - 1.1.2-2.el6_3
changelog:
  - Move system bus activation helper to /{lib,lib64}/dbus-1. Also set
    the correct mode and permissions. 
  - Own the directory /usr/share/dbus-1/system-services
  - Delete the diretory /{lib,lib64}/dbus-1.0 as it's not used
  - Pass 'dbus' instead of 81 as --with-dbus-user; otherwise the setuid
    system bus activation helper fails


author: Ray Strode <rstrode@redhat.com> - 1.0.1-1
changelog:
  - Update to 1.0.1
  - Apply patch from Thiago Macieira <thiago@kde.org> to 
    fix failed assertion in threading implementation
  - Drop some crazy looking build time speed optimization


author: John (J5) Palmieri <johnp@redhat.com> - 0.90-6
changelog:
  - change the arch-deps.h include directory to /usr/lib[64] instead of /lib[64]
    in the dbus-1.pc file after compile


author: John (J5) Palmieri <johnp@redhat.com> - 0.90-4
changelog:
  - add patch that pregenerates the xml introspect file so d-bus doesn't
    have to be running suring the build.


author: Karsten Hopp <karsten@redhat.de> 0.61-5.2
changelog:
  - add buildrequires libICE-devel, libSM-devel, libcap-devel
  - change buildrequires form libX11 to libX11-devel


author: John (J5) Palmieri <johnp@redhat.com> - 0.61-5
changelog:
  - Backport patch from dbus-connection.c
    - Allows interfaces to be NULL in the message header as per the spec
    - Fixes a problem with pendings calls blocking on a data starved socket


author: John (J5) Palmieri <johnp@redhat.com> 0.61-3
changelog:
  - ABI hasn't changed so add patch that makes dbus-sharp think
    it is still 0.60 (mono uses hard version names so any change
    means apps need to recompile)


author: John (J5) Palmieri <johnp@redhat.com> 0.60-7
changelog:
  - Add patch to fix the python callchain
  - Symlink dbus-send to /usr/bin because some applications
    look for it there


author: John (J5) Palmieri <johnp@redhat.com> 0.60-5
changelog:
  - move base libraries and binaries to /bin and /lib so they can be started
    before /usr is mounted on network mounted /usr systems
  - have D-Bus start early


author: John (J5) Palmieri <johnp@redhat.com> - 0.36.2-1
changelog:
  - upgrade to 0.36.2 which fixes an exploit where
    users can attach to another user's session bus (CAN-2005-0201)


author: John (J5) Palmieri <johnp@redhat.com> - 0.36-1
changelog:
  - Upgrade to dbus-0.36
  - Split modules that go into %{_lib}/python2.4/site-packages/dbus
  and those that go into %{python_sitelib}/dbus (they differ on 64bit)
  - Renable Qt bindings since packages in core can use them


author: John (J5) Palmieri <johnp@redhat.com> - 0.35.2-1
changelog:
  - Upgrade to dbus-0.35.2
  - removed dbus-0.34-kill-babysitter.patch
  - removed dbus-0.34-python-threadsync.patch
  - removed dbus-0.23-selinux-avc-audit.patch
  - added dbus-0.35.2-selinux-avc-audit.patch
  - take out restarts on upgrade


author: John (J5) Palmieri <johnp@redhat.com> - 0.34-1
changelog:
  - Upgrade to dbus-0.34
  - added dbus-0.34-kill-babysitter.patch
  - added dbus-0.34-python-threadsync.patch
  - remove dbus-0.32-print_child_pid.patch
  - remove dbus-0.32-deadlock-fix.patch
  - remove dbus-0.33-types.patch


author: John (J5) Palmieri <johnp@redhat.com> - 0.32-5
changelog:
  - replace selinux_init patch with selinux_chroot_workaround patch
    to work around bad selinux interactions when using chroots
    on the beehive build machines


author: John (J5) Palmieri <johnp@redhat.com> - 0.32-2
changelog:
  - add selinux-init patch to fix dbus from segfaulting when
    building on machines that don't have selinux enabled


author: John (J5) Palmieri <johnp@redhat.com> - 0.31-1
changelog:
  - update to upstream version 0.31
  - take out user has same id patch (merged upstream)
  - udi patch updated
  - dbus-daemon-1 renamed to dbus-daemon
  - dbus-glib-tool renamed to dbus-binding-tool
  - force gcc33 because pyrex generate improper lvalue code
  - disable audit patch for now


author: John (J5) Palmieri <johnp@redhat.com> - 0.23-4
changelog:
  - Explicitly pass in the pid file location to ./configure instead of
    letting it guess based on the build enviornment


author: John (J5) Palmieri <johnp@redhat.com> - 0.23-1
changelog:
  - Update to upstream version 0.23
  - Drop all patches except for the UDI patch as they have been 
    integrated upstream 
  - List of API changes:
        * add setgroups() to drop supplementary groups
        * removed dbus_bug_get_with_g_main since it's been replaced by dbus_g_bus_get
        * added support for int64 and uint64 to the python bindings
        * use SerivceOwnerChanges signal instead of ServiceCreated and ServiceDeleted


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Add a requires for glib2-devel in the devel package
  - Add SE-Linux backport from Colin Walters that fixes 
    messages getting lost in SE-Linux contexts


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Fixed patch to use dbus-1 instead of dbus-1.0
  - (configure.in): Exported just the datadir instead of
    the full path to the dbus datadir for consistency


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - reverting BuildRequires: redhat-release because of issues with build system
  - added precompiled version of the messagebus init script


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Moved dbus-viewer to new dbus-gtk package so that dbus-glib
    no longer requires X or GTK libraries. (RH Bug #130029)


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Added lib64 workaround for python bindings installing to
    the wrong lib directory on 64 bit archs


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Moved dbus-viewer, dbus-monitor and dbus-glib-tool 
    into the dbus-glib package so that the main dbus
    package does not depend on glib (Bug #125285)


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Conflict with cups prior to configuration file change, so that the
    %postun service condrestart works.


author: Havoc Pennington <hp@redhat.com> 0.13-2
changelog:
  - see if removing qt subpackage for now will get us through the build system,
    qt bindings not useful yet anyway


author: Havoc Pennington <hp@redhat.com> 0.11.91-3
changelog:
  - break the tiny dbus-launch that depends on X into separate package
    so a CUPS server doesn't need X installed


author: Havoc Pennington <hp@redhat.com> 0.6.93-1
changelog:
  - new cvs snap that actually forks to background and changes 
    user it's running as and so forth
  - create our system user in pre


author: Havoc Pennington <hp@redhat.com> 0.6.91-1
changelog:
  - disable qt for now because beehive hates me
  - pull a slightly newer cvs snap that creates socket directory
  - cat the make check log after make check fails


author: Tom Lane <tgl@redhat.com> 1.2.1-1
changelog:
  - Imported into RHEL-6 from Fedora 18
  - Dropped separate utils subpackage, because existing packages might expect
    that Requires: libjpeg is enough to pull in the command-line tools;
    we should only alter the subpackage breakdown in a new RHEL branch
  - Dropped turbojpeg build, because it doesn't seem ready for prime time
    and isn't part of our RHEL-6 requirements anyway
  Resolves: #788687


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.18.2.el6uek]
changelog:
  - nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields)  [Orabug: 25986990]  {CVE-2017-7895}


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 3.3.8b-8
changelog:
  - prepare for rename to qt3 on Fedora >= 9 (not enabled yet)
  - add Provides and Obsoletes everywhere
  - update summaries and descriptions
  - remove dots at end of Summary tags
  - fix non-UTF-8 characters


author: Than Ngo <than@redhat.com> 3.3.8b-2
changelog:
  - License: GPLv2 or GPLv3
  - merged in 3.3.8b -> drop following patches:
      * qt-3.3.6-fontrendering-punjabi-209970.patch
      * qt-3.3.6-fontrendering-or_IN-209098.patch
      * qt-3.3.6-fontrendering-gu-228451.patch
      * qt-font-default-subst.diff
      * 0076-fix-qprocess.diff
      * 0082-fix-qdatetime-fromstring.diff
      * qt-x11-free-3.3.8-bz#243722-mysql.patch
      * qt3-CVE-2007-3388.patch
      * utf8-bug-qt3-CVE-2007-0242.diff
      * qt-3.3.6-bz#292941-CVE-2007-4137.patch


author: Than Ngo <than@redhat.com> - 3.3.8-9
changelog:
  - rh#309091, qt should provide %{qtdir}/plugins/styles
  - rh#276521, qt-copy patches 0079, 0080, 0082 and 0084


author: Than Ngo <than@redhat.com> - 1:3.3.8-7
changelog:
  - CVE-2007-3388 qt3 format string flaw
  - backport to fix #bz243722, bz#244148, Applications using qt-mysql crash if database is
    removed before QApplication is destroyed
  - cleanup desktop files


author: Than Ngo <than@redhat.com> - 1:3.3.8-4.fc7
changelog:
  - adjust qt-3.3.8-fontrendering-as_IN-209972.patch and
    qt-3.3.8-fontrendering-#214570.patch for qt-3.3.8


author: Than Ngo <than@redhat.com> - 1:3.3.8-3.fc7
changelog:
  - apply patches to fix
     Qt UTF-8 overlong sequence decoding vulnerability
     QPopupMenu aware of Xinerama
     a regression in QProgress::writeToStdin()


author: Than Ngo <than@redhat.com> - 1:3.3.7-2.fc7
changelog:
  - Resolves: bz#214371, bn_IN font rendering
  - Resolves: bz#217657, ml_IN issue with cursor position
  - Resolves: bz#217638, regression bug in qt
  - Resolves: bz#209974, Vowel position set properly
  - Resolves: bz#214570, Rendering is not fine for 'RA' 09B0


author: Than Ngo <than@redhat.com> 1:3.3.7-1.fc6
changelog:
  - update to 3.3.7
  - fix #209097, ml_IN font rendering
  - fix #209970, pa font rendering
  - fix #209098, or_IN font rendering
  - fix #209972, as_IN font rendering
  - fix #209975, bn_IN font rendering
  - fix #211259, te_IN font rendering
  - fix #211436, as_IN font rendering
    thanks Sachin Tawniya, LingNing Zhang for the fixes
  - move html files to devel
  - add sqlite plugin
  - fix #189012, qt settings should be readable for other


author: Than Ngo <than@redhat.com> 1:3.3.6-11
changelog:
  - apply upstream patches, fix arabic fonts issue, and
    problems with missing minimum size when richtext
    labels are used


author: Than Ngo <than@redhat.com> 1:3.3.6-7
changelog:
  - fix utf8 issue in changelog
  - fix #195410, don't strip binaries/libraries
  - fix #156572, keyReleaseEvent issue


author: Than Ngo <than@redhat.com> 1:3.3.6-1
changelog:
  - update to 3.3.6
  - adapt qt-x11-immodule-unified-qt3.3.5-20060318 to qt-3.3.6
  - remove set of fixes for the immodule patch, included in qt-x11-immodule-unified-qt3.3.5-20060318
  - remove 0051-qtoolbar_77047.patch, qt-x11-free-3.3.4-assistant_de.patch,
    qt-x11-free-3.3.5-warning.patch, included in new upstream


author: Than Ngo <than@redhat.com> 1:3.3.5-6
changelog:
  - update qt-x11-immodule-unified-qt3.3.5-20051018.diff
  - remove unneeded qt-x11-immodule-unified-qt3.3.5-20051012-build.patch


author: Than Ngo <than@redhat.com> 1:3.3.5-5
changelog:
  - update qt-x11-immodule-unified-qt3.3.5-20051012
  - disable some debug messages
  - apply patch to fix build problem with the new immodule patch


author: Than Ngo <than@redhat.com> 1:3.3.4-15
changelog:
  - add better fix for #156977, thanks to trolltech
  - apply patch to fix keyReleaseEvent problem #156572


author: Than Ngo <than@redhat.com> 1:3.3.4-5
changelog:
  - fix application crash when input methode not available (bug #140658)
  - remove .moc/.obj
  - add qt-copy patch to fix KDE #80072


author: Than Ngo <than@redhat.com> 1:3.3.4-2
changelog:
  - remove useless doc files #143949
  - fix build problem if installman is disable #146311
  - add missing html/examples/tutorial symlinks


author: Than Ngo <than@redhat.com> 1:3.3.4-1
changelog:
  - update to 3.3.4
  - adapt many patches to qt-3.3.4
  - drop qt-x11-free-3.3.0-freetype, qt-x11-free-3.3.3-qmake, qt-x11-free-3.3.1-lib64
    qt-x11-free-3.3.3-qimage, which are included in new upstream


author: Than Ngo <than@redhat.com> 1:3.3.3-9
changelog:
  - remove unused patch
  - set XIMInputStyle=On The Spot
  - require xorg-x11-devel instead XFree86-devel


author: Than Ngo <than@redhat.com> 1:3.3.2-8
changelog:
  - add fontconfig fix for qfontdatabase, #123868
  - fix some buildrequires problem, #125289
  - fix dangling symlink, #125351
  - get rid of backup files


author: Than Ngo <than@redhat.com> 1:3.3.2-5
changelog:
  - add missing qembed tool #124052, #124052
  - get rid of unused trigger
  - add qt.conf in ld.so.conf.d -> don't change ld.so.conf #124080


author: Than Ngo <than@redhat.com> 3.3.1-1
changelog:
  - add cvs backport
  - fix lib64 issue, #121052
  - fix CJK font display, bug #121017, #120542, thanks to Leon Ho
  - compress tutorial/examples


author: Than Ngo <than@redhat.com> 3.3.1-0.6
changelog:
  - add 0034-qclipboard_recursion_fix.patch from CVS, #118368
  - add better qt-x11-free-3.3.1-fontdatabase.patch


author: Than Ngo <than@redhat.com> 3.3.0-0.3
changelog:
  - enable IPv6 support
  - use dlopen, instead of linking with OpenGL libraries directly
  - don't install backup files


author: Than Ngo <than@redhat.com> 1:3.2.3-0.2
changelog:
  - Added missing prl files, (report from trolltech)
  - Fixed description
  - include requires XFree86-devel on qt-devel


author: Than Ngo <than@redhat.com> 1:3.2.2-0.2
changelog:
  - add font alias patch file, thanks to Leon Ho
  - clean up monospace.patch from Leon Ho
  - remove some unneeded patch files


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - Change qmlined.h to not include an attic header that is also not shipped
    with Red Hat Linux. This also fixes building unixODBC, that includes this
    header (apparently also without needing it).


author: Than Ngo <than@redhat.com> 3.1.1-3
changelog:
  - add monospace patch file from Leon Ho (bug #79949)
  - add small patch file from Sysoltsev Slawa (bug #79731)


author: Than Ngo <than@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0
  - adjust some patch files for 3.1.0
  - clean up specfile
  - remove some Xft2 patch files, which are now in 3.1.0
  - add qwidget_x11.cpp.diff from Trolltech
  - install qt in %{_libdir}/qt-3.1 (bug #77706)
  - don't use rpath
  - enable large file support
  - use system Xinerama
  - remove unneeded cups patch file
  - fix to build against new XFree86


author: Than Ngo <than@redhat.com> 3.0.5-19
changelog:
  - examples misconfigured (bug #76083)
  - don't include pkg-config (bug #74621)
  - fix build problem with new XFree86


author: Than Ngo <than@redhat.com> 3.0.5-17
changelog:
  - Fixed rpath issue (bug #69692, #69575)
  - Removed dlopen patch
  - Added monospace alias patch from Leon Ho (bug #72811)
  - Added man pages


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.5-14
changelog:
  - Don't link to libstdc++, it isn't used
  - Work around s390 compiler bug (fpic/fPIC coexistance)
  - Do away with the "Feature Bluecurve already defined" warning message
  - Remove qmake cache files from the package


author: Than Ngo <than@redhat.com> 3.0.5-13
changelog:
  - Added fix to use VT100 graphic characters (bug #71364)
  - Added fontdatabase fix from llch@redhat.com (bug #68353)


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.5-11
changelog:
  - Move qtconfig from qt-devel to qt, it's generally useful
  - Use -fno-use-cxa-atexit
  - Some tweaks to allow building Qt/Embedded with the same spec file
  - Apply the GB18030 patch even if xft2 isn't set


author: Than Ngo <than@redhat.com> 3.0.4-10
changelog:
  - add missing Buildprequires desktop-file-utils
  - add patches for GB18030 (llch@redhat.com) bug #68430


author: Jakub Jelinek <jakub@redhat.com> 3.0.4-8
changelog:
  - compile libXinerama.a with -fpic in Qt until XFree86 is fixed
  - make %xft2 work even if old Xft headers aren't installed


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.4-6
changelog:
  - Re-enable Xft2 now that fontconfig is fixed
  - Require a version of fontconfig that works
  - Use -fPIC rather than -fpic on alpha


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.3-10
changelog:
  - Tweaks to allow parallel installations of Qt 3.x (gcc 2.96) and Qt 3.x
    (gcc 3.1)
  - Fix up debug spewage at Qt designer startup


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.3-8
changelog:
  - Get rid of non-threaded version, dlopen()'ing threaded code
    (like plugins) from non-threaded code is dangerous
  - Add some fixes from qt-copy, fixing the ksplash crash some people
    have noticed on a first login
  - Add translation fixes from CVS
  - Patch example .pro files to build outside the Qt source tree (#63023)
  - Fix various bugs


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.3-0.cvs20020314.1
changelog:
  - Update to 3.0.3-pre, required for KDE3
  - force -fPIC usage
  - Remove conflict with qt2 < 2.3.2-1, the new qt2 2.3.1 is fixed and qt 2.3.2
    is broken
  - Ship the qmake config files (so qmake works for building any 3rd party stuff,
    e.g. aethera)


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.2-0.cvs20020114.1
changelog:
  - Build styles directly into the main library for now, there's too much broken
    code out there depending on this ATM.


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.1-2
changelog:
  - Fix up settings search path
  - Add default qtrc allowing to use KDE 3.x Qt plugins
  - Make sure QLibrary uses RTLD_GLOBAL when dlopen()ing libraries


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.1-0.cvs20011210.1
changelog:
  - Update to current (needed by KDE 3.x)
  - Rebuild with current libstdc++
  - Temporarily disable building on alpha
  - Fix build with PostgreSQL 7.2


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-4
changelog:
  - Give designer, uic, moc, etc. their real names - the qt2 versions
    have been renamed in qt2-2.3.2-1.
    Conflict with qt2 < 2.3.2-1.


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-3
changelog:
  - Add symlink /usr/lib/qt-3.0.0 -> /usr/lib/qt3 and set QTDIR to the
    symlink, allowing to update to 3.0.1 without breaking rpath'ed binaries


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-1
changelog:
  - 3.0.0 final
  - fix some minor specfile bugs
  - Modularize some more (image format plugins)
  - Build codecs


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.beta4.1
changelog:
  - beta4
  - build the Motif style directly into Qt rather than as a plugin - Qt should
    always have at least one style...
  - replace the designer3 symlink with a shell script that sets QTDIR correctly
    before launching designer
  - Add desktop file for designer


author: Tim Powers <timp@redhat.com> 3.0.0-0.beta3.4
changelog:
  - explicitly include qm2ts, qmake, qtconfig in the devel package file list to avoid dangling symlinks


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add another ugly workaround for build system problems, this should finally
    get rid of the dangling symlinks


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.beta1.2
changelog:
  - Fix up QSQL Postgres classes for Postgres 7.1.x
  - Fix various bugs:
    - QtMultilineEdit and QtTableView should actually compile
    - Link libqsqlpsql with libpq
    - Don't link the base library with libmysqlclient, linking the MySQL
      module with it is sufficient
  - Add missing const qualifier
  - move the SQL drivers to separate packages to avoid dependencies
  - build and install designer plugins - converting glade files to Qt is fun. ;)
  - handle RPM_OPT_FLAGS


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.3.0-5
changelog:
  - Make sure uic and designer use the libqui from the source tree, not
    a previously installed one.
    Linking uic-x11 against libqui-embedded is definitely not a feature. ;)
  - The qclipboard fix is needed for qt-x11 only, don't apply it if we're
    building qt-embedded


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Don't segfault when running Qt/Embedded applications as root
  - Improve the Qt/Embedded sparc patch so we don't need the specfile hacks
    anymore
  - Fix a bug in QPrintDialog (causing KDE Bug #18608)


author: Than Ngo <than@redhat.com>
changelog:
  - call ldconfig for updating (Bug #19687)
  - added patch from Trolltech, thanks to Rainer <rms@trolltech.com>


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add missing msg2qm, msgmerge, qconfig tools (Bug #18997), introduced
    by broken Makefiles in base
  - fix up %install so it works both with old-style and new-style fileutils
    (fileutils <= 4.0z don't know about -L)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - fix -devel
  - update to the new version of 2.2.1 on trolltech.com; the initial tarball
    contained broken docs


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move Qt designer to a different source RPM to get rid of a
    circular dependency (kdelibs2->qt, qt->kdelibs2)
  - Enable MNG support
  - Don't compile (just include) examples and tutorials
  - move the static libraries to a separate package (qt-static).
    They're HUGE, and most people won't ever need them.
  - clean up spec file
  - fix up dependencies (-devel requires base, -static requires devel,
    Xt requires base)
  - add BuildRequires line


author: Than Ngo <than@redhat.com>
changelog:
  - update release 2.2.0
  - changed copyright to GPL
  - added missing static libraries
  - made symbolic link for designer to load the help files correct
  - made designer and designer-kde2 as sub packages
  - added missing templates for designer
  - remove jakub patch, since the release 2.2.0 already 
    contains this patch.
  - fixed qt again to compile with gcc-2.96
  - use make -j for building


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - move man pages to a more reasonable place (this fixes Bug #14126)
  - exclude ia64 for now (compiler problems!!!)


author: Harald Hoyer <harald@redhat.de>
changelog:
  - made patch smaller and binary compatible when recompiled with 6.2
  - modified connect and moc to cope with the new g++ class layout


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - beta1
  - get rid of qt-ImageIO, the functionality is now in the main Qt library
  - remove qt-Network, the functionality is now in the main Qt library
  - add changes-2.1.0 to %doc


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - new snapshot
  - -GL requires libGL.so.1 instead of Mesa (might as well be glxMesa
    or some commercial OpenGL)
  - -GL BuildPrereqs /usr/X11R6/include/GL/gl.h instead of Mesa-devel
    (might as well be glxMesa or some commercial OpenGL)


author: Bernhard Rosenkraenzer <bero@redhat.de>
changelog:
  - current CVS snapshot
  - fix compilation with gcc 2.95.x
  - use install -c rather than just install to make BSD install happy


author: Preston Brown <pbrown@redhat.com>
changelog:
  - substitution in tutorial and examples so that dependencies are correct and
    they can be successfully rebuilt.
  - switched to completely using QTDIR.  trying to coexist with links into
    /usr/{include,lib} and still compile with qt 1.x is very hard for
    configure scripts to cope with.


author: Hans de Goede <hdegoede@redhat.com> 1:1.0-1
changelog:
  - 1.0 final release
  - need epoch because we were not using the special pre-release
    version-release scheme used now a days in Fedora :(


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.0beta2-2
changelog:
  - Put Obsoletes/Provides theora-exp-devel in the -devel package instead of in
    the -tools package (oops)
  - Install png2theora (bz 349951)


author: Colin Walters <walters@redhat.com> - 1.0alpha4-1
changelog:
  - New upstream version 1.0alpha4 
  - Remove upstreamed patch libtheora-1.0alpha3-include.patch 
  - Use Theora_I_spec.pdf for spec
  - Add in .pc file (yay! another library sees the light)


author: Tim Niemueller <tim@niemueller.de> - 5.1.3-5
changelog:
  - Provide lua = 5.1, this way add-on packages can easily depend on the Lua
    base version and expect certain paths for packages


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.3-4
changelog:
  - Not only own $libdir/lua/5.1 and $datadir/lua/5.1 but also $libdir/lua
    and $datadir/lua for proper removal of these dirs upon lua removal


author: Tim Niemueller <tim@niemueller.de> - 5.1.3-3
changelog:
  - own $libdir/lua/5.1 and $datadir/lua/5.1. These are the standard package
    search path for Lua. Packaging them properly allows for easy creation of
    Lua addon packages.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.1-2
changelog:
  - Only link /usr/bin/lua with readline / do not link %{_libdir}/liblua-5.1.so
    with readline so that we don't cause any License troubles for packages
    linking against liblua-5.1.so, otherwise lua could drag the GPL only readline
    lib into the linking of non GPL apps.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.1-1
changelog:
  - New upstream release 5.1.1
  - Fix detection of readline during compile (iow add readline support back)


author: Joe Nall <joe@nall.com> 0.3.1-1
changelog:
  - Rewrite translations to allow individual word/category mapping
  - Eamon Walsh's color mapping changes


author: Dan Walsh <dwalsh@redhat.com> 0.1.4-1
changelog:
  - Add patch from sgrubb
  - 	Fix 64 bit size problems
  - 	Increase the open file limit
  -	Make sure maximum size is not exceeded


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-3
changelog:
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove unused indentation pseudo patch
  - require nss util 3.16.2.3


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Restore patch for certutil man page
  - supply missing options descriptions to the man page
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-15
changelog:
  - Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Support TLS_FALLBACK_SCSV in tstclnt and ssltap


author: Kevin Lyons <kevin.x.lyons@oracle.com> 1.4.2-3.0.1.el6_10.1
changelog:
  - [Orabug: 29909723] Added patch CVE-2019-3862. (qing.lin@oracle.com)
    Added Additional length checks to prevent out-of-bounds (CVE-2019-3862)


author: Kamil Dudka <kdudka@redhat.com> - 1.4.2-3.el6_10.1
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)

  - use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)


author: Petr Machata <pmachata@redhat.com> - 1:3.81-20
changelog:
  - Add a patch for use-after-free when eval in variable assignments
    reassigns the same variable
  - Resolves: #699911


author: Petr Machata <pmachata@redhat.com> - 1:3.81-12
changelog:
  - Fix the rlimit patch.  The success flag is kept in memory shared
    with parent process after vfork, and so cannot be reset.
  - Related: #214033


author: Petr Machata <pmachata@redhat.com> - 1:3.81-4
changelog:
  - Tidy up the specfile per rpmlint comments
  - Use utf-8 and fix national characters in contributor's names


author: Petr Machata <pmachata@redhat.com> - 1:3.81-1
changelog:
  - Upstream 3.81:
    - Contains several backwards incompatible changes.  See NEWS inside
      the source package to find out more.
  - memory patch and error reporting patch were ported to this version.


author: Petr Machata <pmachata@redhat.com> 1:3.80-11
changelog:
  - Applied (five years old) patch from Jonathan Kamens to allow make to
    handle several pattern-specific variables (#52962).

    The patch was changed so that it forces make to process pattern
    specific variables in the same order as they appear in file.
    (Upstream make behaves this way, too.)  This is change from old make
    behavior, which processed the variables in reverse order.  In case
    you used only x=a assignments, this had the effect of using the
    first pattern specific variable that matched.  For x+=a this just
    doesn't work, and it produces absolutely nonintuitive results.

  - (It would be great if make's target-specific variables were handled
    the same way as pattern-specific ones, just without the pattern
    component.  However current handling is documented and considered a
    feature.)


author: Jakub Jelinek <jakub@redhat.com> 3.80-8
changelog:
  - make sure errno for error reporting is not lost accross _() calls
  - report EOF on read pipe differently from read returning < 0 reporting


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - assume we don't have clock_gettime in configure, so that
    make is not linked against -lpthread (and thus does not
    limit stack to 2MB).


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix build for some odd situations, such as
    - previously installed make != GNU make
    - /bin/sh != bash


author: Patsy Franklin <pfrankli@redhat.com> - 2015e-1
changelog:
  - Rebase to 2015e:
    - Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
      not 06-13 and 07-18 as we had guessed.  (Thanks to Milamber.)
    - Assume Cayman Islands will observe DST starting next year, using US rules.
      Although it isn't guaranteed, it is the most likely.


author: Patsy Franklin <pfrankli@redhat.com> - 2015d-3
changelog:
  -  Morocco will suspend DST from 2015-06-14 03:00 through 2015-07-19 02:00,
     not 06-13 and 07-18 as we had guessed.


author: Patsy Franklin <pfrankli@redhat.com> - 2015d-1
changelog:
  - Rebase to 2015d:
    - The Egyptian Cabinet announced that DST will be cancelled for 2015.
    - The abbreviations for Hawaii-Aleutian standard and daylight times
      have been changed from HAST/HADT to HST/HDT, as per US Government
      Printing Office style. This affects only America/Adak since 1983,
      as America/Honolulu was already using the new style.


author: Patsy Franklin <pfrankli@redhat.com> - 2015c-1
changelog:
  - Rebase to 2015c
    - Egypt's spring-forward transition is at 24:00 on April's last Thursday,
      not 00:00 on April's last Friday.  2015's transition will therefore be on
      Thursday, April 30 at 24:00, not Friday, April 24 at 00:00.  Similar fixes
      apply to 2026, 2037, 2043, etc.


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-68.1.2.el6uek]
changelog:
  - IB/core: Prevent integer overflow in ib_umem_get address arithmetic (Shachar Raindel)  [Orabug: 20799875]  {CVE-2014-8159} {CVE-2014-8159}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-68.1.1.el6uek]
changelog:
  - xen-pciback: limit guest control of command register (Jan Beulich)  [Orabug: 20697017]  {CVE-2015-2150} {CVE-2015-2150} 
  - net: sctp: fix slab corruption from use after free on INIT collisions (Daniel Borkmann)  [Orabug: 20780347]  {CVE-2015-1421}


author: Petr Šabata <contyk@redhat.com> - 1.0.16-1
changelog:
  - 1.0.16 bump, documentation and autotools scripts updates (#829810)
  - Fix an old bogus date in the changelog


author: Petr Šabata <contyk@redhat.com> - 1.0.13-1
changelog:
  - 1.0.13 bump + 47d8dca, "Set SerialNumber to 'Unknown' if not found"  (#788510)
  - Subpackage the pkgconfig file


author: Petr Sabata <psabata@redhat.com> - 1.0.10-2
changelog:
  - Avoid NULL dereference when parsing supported_classes sys entry
  - Remove redundant buildroot definition
  - Resolves: rhbz#690014


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.7-3
changelog:
  - replaced unofficial 1.0.7 source tarball with official one
  - update of Makefile, part of it moved to postinstall section
    of spec file


author: Sergei Garbuzov <sergei.garbuzov@oracle.com> - 9.03.38-1.100.1.el6_4.13.0.1
changelog:
  - Backport from the initscripts-9.03.49-1.0.1.el6.x86_64.rpm
    package (used in 3.4.2) the fix made in 'ifdown-post' script
    by initscripts maintainers.
    The fix is about preventing loss of data in 'resolv.conf' file.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 25353998]


author: Joe Jin <joe.jin@oracle.com> - 9.03.38-1.100.1.el6_4.13
changelog:
  - Move logic to startup /usr/sbin/console from start-ttys.conf to its own .conf file. Revert rev 1482.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Oracle-bug: 17614147 - OVM STATUS CONSOLE DOES NOT APPEAR AFTER BOOT
  - Do not do rename related check if interface is vlan, bond or bridge.
    Signed-off-by: Joe Jin <joe.jin@oracle.com>
    Acked-by: John Haxby <john.haxby@oracle.com>
    Patch_name:do_not_do_rename_for_vlan_bond_bridge.patch [bug 17937709]


author: Carson Hovey <carson.hovey@oracle.com> - 9.03.38-1.100.1.el6_4.12
changelog:
  - Fix startup of Oracle VM Server status console on /dev/tty1
    Signed-off-by: Jingjie Jiang <jingjie.jiang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Oracle-bug: 17614147 - OVM STATUS CONSOLE DOES NOT APPEAR AFTER BOOT


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 9.03.38-1.100.1.el6_4.10
changelog:
  - Port patches (r1041,r621) From ol5.
    Added redhat patch RH583218 for shutdown delay on iscsi disk sync. [bug 13934223]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 9.03.38-1.100.1.el6_4.8
changelog:
  - Port (r662) from ol5.
    Some network adapters are greedy in their use of socket buffers
    and this is exhausting kernel memory. Some drivers deal well with
    this, for others we see netdev watchdog timeouts.
    This address bugs:  11830773, 11737194 [bug 11830773]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 9.03.38-1.100.1.el6_4.7
changelog:
  - Port (r730) from ol5.
    start a console screen instead of login on runlevel 3
    Signed-off-by: Wim Coekaerts <wim.coekaerts@oracle.com>
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com>


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 9.03.38-1.100.1.el6_4.6
changelog:
  - Port (r795) from ol5.
    sysctl.conf: change kernel param:
    kernel.panic_on_oops = 1
    kernel.panic = 60 [bug 12768213]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 9.03.38-1.100.1.el6_4.4
changelog:
  - Port (r1215) from ol5.
    Add the commands  to disable bridge netfilter to sysctl.conf.x86_64 which at
    install becomes sysctl.conf [bug 15920157]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 9.03.38-1.100.1.el6_4.3
changelog:
  - Port (r1296) from ol5. Disable bridge multicast_snooping the Linux bridge can not forward these
    packet to its ports, and it is not needed. [bug 16746299]


author: Václav Pavlín <vpavlin@redhat.com> - 9.03.34-1
changelog:
  - there should be crypttab instead of crypptab in man page (#870025)
  - sysconfig.txt advised saslauthd -a instad of -v (#869075)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.32-1
changelog:
  - check an IP address for existence in ifup-alias
  - remount /dev/shm in sysinit to apply attributes from fstab
  - sets BONDING_OPTS before interface is brougth up and checks if it is not already added
  - Add support for setting random bridge options via BRIDGING_OPTS
  - use vgchange -aay in rc.sysinit and netfs init script
  - script should not kill itself during shutdown
  - fix the NIS domain setting
  - be less strict about VLAN name
  - clarification of work with white spaces in crypttab manpage
  - re-read sysctl values for VLANs on ifup
  - pass useful arguments to halt.local
  - start serial console when we return from runlevel1
  - move VLAN= docs to the interface configuration section, rather than /etc/sysconfig/network.
  - don't accidentally match other bonding devices
  - add usage stanzas for tty.conf and serial.conf
  - rename_device: skip VLAN=yes configuration files
  - allow duplicate address dectection to be disabled


author: Lukas Nykryn <lnykryn@redhat.com> 9.03.28-1
changelog:
  - sysconfig support for IPv6 policy based routing (#781493)
  - fix typo in translation (#757637)
  - fix logic error with removing arp_ip_target (#787107, #746045)
  - don't set primary before we enslave devices. (#749610, <agospoda@redhat.com>)
  - do not check mounted filesystems (#745224)
  - eviscerate ifconfig uses from ip-aliases (#721010, #588993)
  - improve comment in init/serial.conf (#746808)
  - turn off UPS in powerfail situation (#754984, <robert@fedoraproject.org>)
  - netconsole exit arping on first response (#765835)
  - add cifs to check for network filesystem (#760018)
  - fix comments in sysctl.conf (#755175)
  - rc.sysinit - use rcS-emergency job instead of sulogin (#582002)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.26-1
changelog:
  - add 'emergency' mode (#681357)
  - kexec - free reservation memory only for crashkernel=auto (#734987)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.24-1
changelog:
  - add support for sysctl.d (#680527)
  - log network messages via syslog (#653630, #672202)
  - document NM_CONTROLLED (#692123)
  - don't explictly disallow IPv6 aliases (#692240)
  - make sure the bond exists when we bring up the slaves. (#694501)
  - properly add and remove arp_ip_target's (#675079)
  - load static arp entries from ethers file (#696788)
  - fix logic error in rc.sysinit (#698520, <jlau@redhat.com>)
  - handle IPADDRx correctly for static addresses (#700184)
  - don't match filesystem types in hostnames (#703210, <jmueller@data-tronics.com>)
  - check for VLAN interfaces is being slave first (#703475)
  - override NETMASK from PREFIX where specified (#705367, <mpoole@redhat.com>)
  - allow multiple ETHTOOL_OPTS option types (#692410, #693583)
  - don't mount gfs2 in netfs (#689593)
  - fix pid file usage for IPv6. (#729292, <daveg@dgit.ndo.co.uk>)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.22-1
changelog:
  - init.d/functions: fix mishandled argument to fstab-decode (#682879)
  - network-functions: fix check for unmanaged devices (#670154)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.19-1
changelog:
  - sys-unconfig(8) manpage fix (#674397)
  - set default shmmax and shmall for certain architectures (#660036)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.18-1
changelog:
  - don't use the ipv6_exec_ip wrapper
  - don't accidentally cause sit module to be loaded on shutdown. (#654098, <ejsheldrake@gmail.com>)
  - simplify various string match constructs. (#558575, <ville.skytta@iki.fi>)
  - explicitly pass both device and dir when remounting read-only (#620461, <phr@doc.ic.ac.uk>)
  - add infiniband mapping (#648524, <monis@voltaire.com>)
  - fix ifdown calling nmcli for NM-managed devices (#612934, <jklimes@redhat.com>)
  - allow 0 as a vlan tag. (#635360)
  - support multiple IP addreses via IPADDRn, PREFIXn (or NETMASKn) (#633984)
  - stop tty and serial also on runlevel 's' (#629257)
  - system z optimized sysctl settings per default (#633323)
  - don't run kexec-disable for runlevels [S016] (#658138)
  - add # as a valid character in network device names (<Matt_Domsch@dell.com>)
  - use SYSCTLDEVICE without . (#667211, <notting@redhat.com>)
  - handle 'MASTER' being quoted. (#651450, <gfidente@redhat.com>)
  - test if there is /dev/rtc before syncing hardware clock (#598850)


author: Bill Nottingham <notting@redhat.com> - 9.03.13-1
changelog:
  - rename_device - handle quoted 'DEVICE' (#614943, <harald@redhat.com>)
  - rename_device - fix handling of s390 subchannels (#614739, <harald@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.03.10-1
changelog:
  - ifup-eth: check for dhclient configuration in /etc/dhcp as well (#607766)
  - network-functions: handle quoted SUBCHANNELS (#607481)
  - netfs: allow for encrypted network block devices (#605600)


author: Bill Nottingham <notting@redhat.com> - 9.03.9-1
changelog:
  - check NM_CONTROLLED before deciding to use NM for a connection. (#600454)
  - always reboot on autorelabel. (#599879)
  - correct the fix for not clearing  environment with runuser. (#564105)
  - properly handle permission denied on pid file (#595597)


author: Bill Nottingham <notting@redhat.com> - 9.03.8-1
changelog:
  - clean up plymouth shtudown splash (#590103, <rstrode@redhat.com>)
  - rc.sysinit: use lvm2 --sysinit option (#588777)
  - network-functions: behave sanely in the absence of $DEVICE (#592108)
  - sysconfig/debug: export debug variables (#592102)
  - netfs: check for NM to be connected, not just running (#592095)
  - rcS*.conf: check if /etc/inittab exists (#590706, <plautrba@redhat.com>)
  - port vlan code to /sbin/ip (#566485, <plautrba@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.03.6-1
changelog:
  - fix plymouth startup/shutdown (#586040)
  - fstab-decode.8: tweak manpage so it formats correctly (#586476)
  - init.d/functions: handle being unable to read a specified pid file. (#584575)
  - ifup-eth: run dhclient -6 similar to dhclient -4. (#585047)


author: Bill Nottingham <notting@redhat.com> - 9.03.5-1
changelog:
  - network-scripts: integrate with NetworkManager (#550154)
  - clean up obsolete package requirements
  - RAID fixes (<dledford@redhat.com>)
  - network: only blacklist the original loopback interface. (#579829, <evgsyr@gmail.com>)
  - rc.sysinit: check dmraid's return code, to catch 'no raid sets' error. (#568869)
  - po/*: fix mistranslated checks for user input. (#566791)


author: Bill Nottingham <notting@redhat.com> - 9.03.4-1
changelog:
  - move ccw_init, ccw udev rules to s390utils (#539491)
  - network-functions: clean up device checks (#564505)


author: Bill Nottingham <notting@redhat.com> - 9.03.3-1
changelog:
  - pass -m to runuser to not clear environment (#564105)
  - don't use deprecated udev syntax in clock rules (#560801)
  - don't quote regex argument to bash's =~ (#558575, <ville.skytta@iki.fi>)
  - if HWADDR is set and DEVICE is not, use HWADDR to determine DEVICE. (#557941)
  - don't HUP init when messagebus starts (#557821)
  - setsysfont: use UNIMAP rather than SYSFONTACM when calling /bin/unicode_start. (#557173)


author: Bill Nottingham <notting@redhat.com> - 9.03.2-1
changelog:
  - ifup-eth: use dhclient's -H option instead of munging dhclient config files
  - rc.sysinit: move mdadm after dmraid (#554423)
  - ifup-eth: use dhclient -6, not the no-longer-included dhcp6c (#553019, <dcantrell@redhat.com>)
  - add more man pages (#529328, <plautrba@redhat.com>)
  - remove useless echo (#552785)
  - move is_wireless after MACADDR/MTU setting (#552641)
  - serial.conf: respawn correctly. (#552611, <zing@fastmail.fm>)
  - network-functions: use sysfs for wireless check (#552381, <adel.gadllah@gmail.com>)
  - reload init on started messagebus (<plautrba@redhat.com>)
  - honor HOTPLUG in ifdown (#547737)


author: Bill Nottingham <notting@redhat.com> - 9.03.1-1
changelog:
  - re-enable network service (#545255)
  - ifdown: honor HOTPLUG (#547737)
  - silence any erros from bonding adds (#516569)
  - remove assorted configurations we don't support the tools for
    (ipsec-tools ipsec, cipe, IPX)


author: Bill Nottingham <notting@redhat.com> - 9.03-1
changelog:
  - migrate to upstart 0.6.x (<notting@redhat.com>, <plautrba@redhat.com>)
  -- jobs move to /etc/init
  -- collapse rcX and ttyX jobs into single job definitions
  -- jobs are no longer %config
  - remove obsolete doexec command
  - rc.sysinit: handle yet another random return string from dmraid
  - remove never-used 'sulogin' upstart event
  - fix time-setting udev rules for old-style RTC devices (#537595)
  - init.d/network: keep error codes limited to '1'. (#537841)
  - add initial ifup/ifdown man pages. (#529328, <plautrba@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.02-1
changelog:
  - remove long-since deprecated initlog
  - remove IUCV support (#507217)
  - halt: put a wrapper around killall5 to account for retval 2 not being an error (#526539, <hdegoede@redhat.com>)
  - ifup-eth: honor DEFROUTE=yes|no for 'all' connection types. (#528822)
  - network-functions: load bonding driver if BONDING_OPTS is defined. (#516569)
  - rc.sysinit: put /dev/shm in mtab too, as dracut now mounts it. (#528667)


author: Bill Nottingham <notting@redhat.com> - 9.01-1
changelog:
  - rc.sysinit: fix handling of dmraid output to avoid error messages (#527726, <mschmidt@redhat.com>)
  - rwtab: add /var/lib/xend (#526046)
  - translation updates: fi, nb, pl


author: Bill Nottingham <notting@redhat.com> - 9.00-1
changelog:
  - halt: wrap /sbin/killall5 to catch some return codes (#526539)
  - netfs, netconsle, network: fix return codes to match LSB spec (#524489, #524480, #524486)
  - handle kernels compiled both with and without CONFIG_RTC_HCTOSYS
  - halt: use killall5's return code to avoid unncesssary sleeping (#524359, <hdegoede@redhat.com>)
  - halt: don't kill mdmon on shutdown. (#524357, <hdegoede@redhat.com>)
  - rc.sysinit: do not try and activate ISW raidsets, unless noiswmd is passed. (#524355, <hdegoede@redhat.com>)
  - translation updates: ca, cs, da, mai, po, sv, uk


author: Bill Nottingham <notting@redhat.com> - 8.99-1
changelog:
  - init.d/functions: add a '-l' option to status to pass lock file name (#521772)
  - tweak kernel conflict
  - translation updates: as, bn_IN, de, fr, hi, it, hu, kn, mr, or, pa, pt, ru, te


author: Bill Nottingham <notting@redhat.com> - 8.98-1
changelog:
  - sysconfig.txt: doucment DHCP_HOSTNAME (#498052)
  - 88-clock.rules: Use --systz instead of --hctosys. (#517886, #489494)
  - Support rwtab and state passed from dracut initrd (#515771, <wtogami@redhat.com>)
  - restore context of *tmp files (#519748)
  - halt: don't try and save mixer settings if it's not writable. (#515771)
  - rwtab: add /var/spool, /var/lib/dbus, others (#494973, #515771)
  - sysconfig.txt: clarify docs (#518614)
  - rc.sysinit: don't pretend /selinux is configurable (#518164)
  - assorted ipv6 redundant code deletion
  - translation updates: bn, ca, de, es, fi, fr, gu, hi, it, ja, ko, ml, nb, nl, pl, pt, pt_BR, ru, sr, ta, zh_CN, zh_TW


author: Bill Nottingham <notting@redhat.com> - 8.97-1
changelog:
  - ipcalc: fix IPv6 address checking (#516319)
  - ifup-aliases: fix syntax error from earlier cleanups. (#515612, <jik@kamens.brookline.ma.us>)
  - translation updates: nb
  - rc.sysinit: remove useless call to pam_console_apply


author: Bill Nottingham <notting@redhat.com> - 8.96-1
changelog:
  - fix up upstart rules for s390(x). (#515222)
  - leave ChangeLog in the tarball only. (#515012)
  - disable netfilter on bridged interfaces. (#512206)
  - assorted shell-related cleanups to ipv6 and other code (<victor.lowther@gmail.com>)
  - use resolv.conf from dracut netboot before setting hostname. (#514801, <wtogami@redhat.com>)
  - ipcalc updates (<victor.lowther@gmail.com>)
  - only use ethtool for link checking; no more mii-tool
  - require /sbin/blkid directly, as it moves between packages (#508413)
  - redirect bash errors on 'unset' to /dev/null. (#482888)
  - fix dmraid partition naming (#501476, <hdegoede@redhat.com>)
  - don't quote upstart signals. (#501155)
  - translation updates: bn_IN, da, es, sk


author: Bill Nottingham <notting@redhat.com> - 8.95-1
changelog:
  - don't kill runlevel events on subsequent entering of the same runlevel (#498514)
  - lang.*sh: handle spaces in $HOME (#498482)
  - network-functions: explicitly source from the proper directory. (#496233)
  - remove persistent names on sys-unconfig. (#448322)
  - init.d/functions: cgexec has moved to /bin (#495715)
  - allow changing of VLAN type even if the module is already loaded. (#495053, <pietro@bertera.it>)
  - translation updates: fr, ml, pt


author: Bill Nottingham <notting@redhat.com> - 8.94-1
changelog:
  - prefdm: add simple fallbacks, sort rpmdb query for consistency (#494461)
  - translation updates; bn, de, pt, ru, te


author: Bill Nottingham <notting@redhat.com> - 8.93-1
changelog:
  - rc.sysinit: add a disk synchronization point with scsi_wait_scan post-udev (#481470)
  - netfs: drop smbfs support, we don't even ship the module or tools any more
  - setsysfont: honor LC_CTYPE (#487133, <skasal@redhat.com>)
  - prefdm: do fallbacks based on provides of 'service(graphical-login)' (#485751)
  - rc.sysinit: handle multiple IP addresses without choking in the stateless code (#443945)
  - rc.sysinit: catch the right error code from checking for passphrases (#483269, <vladis.kletnieks@vt.edu>)
  - prefdm: handle empty /etc/sysconfig/desktop correctly (#480113)
  - ifup-ipsec: allow use of either ESP only or AH only (#251494, <stijn.tintel@x-tend.be>)
  - ifup-eth: allow passing of arguments to dhcp6c (#437949, <pekkas@netcore.fi>)
  - ifup-eth: fix dhcpv6 when there is no IPv4 configuration (#486507)
  - ifup-ppp: avoid spurious SIGCHLD to pppd (#448881)
  - ifup-eth: add support for creating TUN/TAP devices on the fly (#453973, <scott@zahna.com>)
  - stop plymouth when starting single-user mode. (#491062)
  - add plymouth shutdown script (#473237, <jmccann@redhat.com>)
  - fix lang.sh/lang.sh/consoletype for execution with '-e'
  - ifdown-eth: remove arp_ip_target on ifdown for bonding devices. (#483711)
  - add vlan support for s390 HSI interfaces. (#490584)
  - ipcalc: support IPv6 (#464268, <dcantrell@redhat.com>)
  - translation updates: all


author: Bill Nottingham <notting@redhat.com> - 8.91-1
changelog:
  - fix DHCP reading of options from ifcfg-XXX (#483257)
  - ifdown-eth: clean up bridges on ifdown (#463325, <sean@bruenor.org>)
  - support MD on iSCSI (#480627)
  - remove support for 'ifcfg-foo-bar' configurations that inherit from 'ifcfg-foo'
  - remove slip support
  - translation updates: es, pl, ca, sr, de, sv, pa, pt_BR


author: Bill Nottingham <notting@redhat.com> - 8.90-1
changelog:
  - init.d/functions: cgroup support (<jsafrane@redhat.com>)
  - fix various issues with dmraid handling (#485895, <hdegoede@redhat.com>)
  - rc.sysinit: fix typo. (#487926)
  - console_init: loadkeys has a -q option for silent running. Use it.
  - ifup-tunnel: add compatiblity for openNHRP tunnels (#486559, <claude.tompers@ieee.lu>)
  - ccw_init: don't re-init an existing device, it causes errors. (#484411, <jpayne@redhat.com>)
  - netfs: use same kpartx arguments as rc.sysinit
  - don't list mtab in rwtab (#457941)
  - translation updates: fi, de, mai


author: Bill Nottingham <notting@redhat.com> - 8.89-1
changelog:
  - use a leading path when sourcing files (#482826)
  - netfs: don't unmount nfsd filesystem by accident (#481794, <sprabhu@redhat.com>)
  - bring up ipsec interfaces last (#481733)
  - ifdown-eth: fix bridge + vlan (#481557, <danken@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 8.87-1
changelog:
  - rename_device: be much faster in the presence of many devices (#480687, <danms@us.ibm.com>)
  - fix switching from targeted to MLS policy (#479054, <dwalsh@redhat.com>)
  - rc.sysinit: don't set $(uname -r) or $(uname -m); they're not used
  - network-functions-ipv6: set MTU correctly for 6to4. (#477976, <ackistler@yahoo.com>)
  - add more entries to rwtab (#476799, <harald@redhat.com>)
  - net.hotplug: Bail out sooner if the network service isn't running
  - init.d/halt: determine reboot/halt via existing INIT_HALT environment variable. (#475227)
  - event.d/serial: add some docs
  - init.d/functions: __pids_var_run: Handle multi-line pid files correctly (#473287)
  - remove support for no longer existing 'brctl setgcint' command. (#360471)
  - add %config back for ifcfg-lo (#472761)
  - rcS/rcS-sulogin: don't match commented lines when finding runlevel (#472717)
  - updated translations: de, sk


author: Bill Nottingham <notting@redhat.com> - 8.86-1
changelog:
  - stop plymouth before stopping the runlevel (#467207)
  - fix get_config_by_subchannel (#459044, <harald@redhat.com>)
  - use blkid -l to pick a single most appropriate device (#470027)
  - don't mkswap on halt, as it breaks swap-by-label/UUID (#469823)


author: Bill Nottingham <notting@redhat.com> - 8.85-1
changelog:
  - add some error handling/hiding to netfs NM dispatcher script (#469197)
  - halt: fix code that causes a syntax error on multiple sound cards (#469156)
  - require a new enough udev version to handle where we put the rules
  - exit 0 in /etc/rc.d/rc (#469050)
  - don't set up encrypted devices that have already been set up under different
    names (#462371, <wwoods@redhat.com>)
  - accept either the '+<addr>', or comma-separated addresses for arp_ip_target. (#467954,
    <darcy.sherwood@gmail.com>)
  - translation updates: hu, kn, ko, ml, sr, sr@latin


author: Bill Nottingham <notting@redhat.com> - 8.84-1
changelog:
  - override Arabic, Persian, and Hebrew on the console (<alsadi@ojuba.org>)
  - explicitly run mdadm on boot to catch degraded arrays. (<dledford@redhat.com>)
  - fix setting of console font/map (#458362, <ak@sensi.org>)
  - translations updates: hi, kn, nb, sk, sv, ta


author: Bill Nottingham <notting@redhat.com> - 8.83-1
changelog:
  - various merge review fixes (#225900)
    Notably: init scripts/network scripts are no longer %config
  - remove some extraneous device-mapper initialization
  - use pidfile in status before calling pidof (#463205)
  - use plymouth directly, not the rhgb-client wrapper
  - move bridging after bonding (#449950, <djuran@redhat.com>)
  - use alsactl to save sound settings. (#462677, <jkysela@redhat.com>)
  - quit plymouth differently (<rstrode@redhat.com>)
  - make sure we don't try and spawn a repair shell when there's no
    tty (#463161)
  - move udev rules to /lib
  - stateless updates (#433702, <harald@redhat.com>)
  - call logger with a full path (#447928, <harald@redhat.com>)
  - translation updates: as, bn_IN, ca, cz, de, es, fi, fr, gu, it, ja,
    lv, mr, nl, or, pa, pl, pt_BR, ru, te, zh_TW


author: Bill Nottingham <notting@redhat.com> - 8.82-1
changelog:
  - refresh translation strings
  - plymouth updates. (#460702, <rstrode@redhat.com>)
  - translation updates: fi, lv, no
  - remove duplicate dependency (#465182)
  - ifup-eth: Change how we set the zeroconf route. (#239609)
  - ifup*: Use 0.0.0.0/0, not 0/0. (#460580)


author: Bill Nottingham <notting@redhat.com> - 8.81-1
changelog:
  - rc.sysinit: Don't use -L in find (#458652, #458504, CVE-2008-3524)
  - ifup: kill more code from loopback bringup


author: Bill Nottingham <notting@redhat.com> - 8.80-1
changelog:
  - Fix translation typo (#455804, <ruslanpisarev@gmail.com>)
  - Turn off syncookies
  - Cleanups for proper plymouth support
  - Move the mcheck code to a debugmode package, make it more generic


author: Bill Nottingham <notting@redhat.com> - 8.79-1
changelog:
  - fix mcheck stuff to be installed correctly
  - don't do an arping check for loopback interfaces
  - console_init: don't wait (<arjan@infradead.org>)
  - rc: clean up extraneous set -x noise
  - remove references to static dmraid/multipath binaries (#453987)
  - translation updates: lv


author: Bill Nottingham <notting@redhat.com> - 8.77-1
changelog:
  - NMDispatcher/05-netfs: fix check for default route (#445509)
  - service: don't set $LANG, rely on it to inherit from system locales (#422141)
  - init.d/functions: fix resolve_dm_raid() for older dmraid configs
  - Don't unmount sysfs in halt. (#446292)
  - rc.sysinit: don't try to startup crypto if we can't find the device
  - rc.sysinit: don't echo crypto stuff unless we're actually *doing* something
  - ifup: don't try to rename devices - udev rules are the way to go
  - rc.sysinit: fix typo, and don't restorecon on swap, etc. partitions (#448886)
  - set MALLOC_CHECK_ & MALLOC_PERTURB_ if configured (<pjones@redhat.com>)
  - console_init: support SYSFONTACM correctly, and support UNIMAP (#448704,
    <vvv+fedora@colocall.net>)
  - don't export GRAPHICAL - plymouth is for all modes. also, don't start rhgb
  - fix clock rules to properly handle old-style RTC devices (#447019)
  - translation updates: ko, or, pl


author: Bill Nottingham <notting@redhat.com> - 8.74-1
changelog:
  - use full path to /sbin/ip in NetworkManagerDispatcher script (#444378)
  - lang.{sh,csh}: read only user customization if LANG is already set (#372151)


author: Bill Nottingham <notting@redhat.com> - 8.73-1
changelog:
  - move event-compat-sysv events here, obsolete it
  - fix ctrl-alt-del during rc.sysinit (#444050)
  - fix 'telinit X' from single-user mode (#444001)


author: Bill Nottingham <notting@redhat.com> - 8.71-1
changelog:
  - adjust to gdm using LANG instead of GDM_LANG (#372151, <rstrode@redhat.com>)
  - rework netfs' check for networking availability to properly handle both network
    and NetworkManager


author: Bill Nottingham <notting@redhat.com> - 8.70-1
changelog:
  - find is now in /bin. Use it. (#192991, #239914, #244941, #442178)
  - require event-compat-sysv for now (#442291)
  - fix serial event to wait properly
  - handle encrypted LVs properly (#441728)
  - add a sit tunnel type (#441635)
  - translation updates: ru


author: Bill Nottingham <notting@redhat.com> - 8.69-1
changelog:
  - Bring up lo whenever it shows up, not just in network/NM
  - fix shutdown-related oddities (#438444)
  - translation updates: el, sr, sr@latin, sv


author: Bill Nottingham <notting@redhat.com> - 8.68-1
changelog:
  - netfs: umount 'ncp' filesystems as well (#437117)
  - improve performance of s390 ccw rules (#437110, <mernst@de.ibm.com>)
  - fix consoletype environment leak (#439546)
  - ifdown-eth: make sure NEWCONFIG exists before grepping for it (#390271, continued)
  - console_check: always open with NONBLOCK, clear the serial structs first,
    handle non-16550 ports (<dwmw2@infradead.org>)
  - halt: don't use /etc/sysconfig/clock (#438337)
  - ifup: don't attempt to re-enslave already-enslaved devices (#440077)
  - netfs: run as a NetworkManagerDispatcher script (#439242)
  - netfs: remove $local_fs from the list of provides (making it implicitly provided
    by booting)
  - serial: add a crude hack to wait for runlevels to finish (#437379)
  - serial: frob /etc/securetty when necessary (#437381)
  - add a upstart-specific inittab
  - translation updates: as, bn_IN, cs, de, es, fi, fr, gu, hi, it, ja, kn, ml, mr, nb,
    nl, pa, pl, pt_BR, ru, sk, sr, ta, te, zh_CN


author: Bill Nottingham <notting@redhat.com> - 8.65-1
changelog:
  - Add a serial console udev/upstart handler (#434764, indirectly)
  - Add some upstart notification for sysv scripts (modified from <cjdahlin@ncsu.edu>, #431231)
  - Handle _rnetdev correctly (#435358, <pjones@redhat.com>)
  - various minor speedups (<arjan@infradead.org>)
  - translation updates: el, fr
  - disable network by default, in favor of NetworkManager


author: Bill Nottingham <notting@redhat.com> - 8.64-1
changelog:
  - Add a console_init udev helper to do console initialization
  - add /sbin/pidof requirement (#434863)


author: Bill Nottingham <notting@redhat.com> - 8.63-1
changelog:
  - don't start RAID arrays in rc.sysinit, that's done by udev (corollary of #429604)
  - add a NetworkManager-dispatcher script that does netreport on interface changes
  - use udev rules to set the clock, avoiding issues with modular rtcs (#290731)


author: Bill Nottingham <notting@redhat.com> - 8.61-1
changelog:
  - use lvm, not lvm.static (#429222)
  - ifup-eth: don't do something odd if we find a mac address that
    matches the user-set MACADDR (#251415)
  - rc.sysinit: fix root fs check to catch 'rw,ordered,noatime,etc.' properly
    (#334171)
  - rc.sysinit: Use proper invocations for authconfig, system-config-network
    (#426372, #428202)
  - service: handle unreadable scripts (#427767)
  - initscripts.spec: add requirements for stateless
  - fix perms on /etc/profile.d (#407531, <ville.skytta@iki.fi>)
  - rename_device: handle quoted HWADDR, etc. in ifcfg scripts (#351291)
  - minor stateless fixes
  - Makefile cleanups (from OLPC, <cscott@cscott.net>)
  - translation updates: fr, ru, nb
  - don't endelessly loop on ifdown (#390271)
  - rc.sysinit: - fix encrypted swap partitions with random key
    (<harald@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 8.59-1
changelog:
  - rc.sysinit: fix rhgb check
  - prefdm: add wdm section (#248087)
  - init.d/functions, halt: clean up some extraneous delays (#219816)
  - ifup-wireless: set mode before bringing link up (#254046, <linville@redhat.com>)
  - translation updates: pt_BR, hr


author: Bill Nottingham <notting@redhat.com> - 8.58-1
changelog:
  - revert kernel conflict so that xen can still work (#319401)
  - rename_device, 60-net.rules: only suggest an interface name (part of #264901)
  - require newer udev for persistent net rules (part of #264901)
  - don't hang if someone puts a dangling pipe in /etc/rhgb/temp (#251219)
  - genhostid: fix for 64-bit systems (#306811)
  - more bash matching fixes (#220087)
  - translation updates: is, nb


author: Bill Nottingham <notting@redhat.com> - 8.57-1
changelog:
  - work around upstream bash changes (#220087, modified from <nvigier@mandriva.com>)
  - init.d/network: add Should-Start for firewall services
  - ifup-eth: handle arp_ip_target separately (#288151, <agospoda@redhat.com>)
  - rc.sysinit: remove rc.serial support - should be udev rules
  - rc.sysinit: remove acpi module loading - now supported by the kernel automatically
  - fix en_GB translation (#271201)
  - translation updates: as, bn_IN, bg, ca, cs, de, el, es, fi, gu, hi, it, ja, ko, kn, ml,
    mr, nb, nl, pa, pl, pt, pt_BR, ro, sl, sr, sr@Latn, sv, ta, te, zh_CN


author: Bill Nottingham <notting@redhat.com> - 8.56-1
changelog:
  - rename_device: fix open() call
  - rc.sysinit: optimize out some excess greps (<harald@redhat.com>)
  - halt: support newer nut syntax, conflict with old versions (#252973, <tsmetana@redhat.com>)
  - fix buildreq from popt -> popt-devel
   - newer popt is in /lib|/lib64 - require it, and link dynamically
  - rc.sysinit: added support for cryptsetup-uuids (bug #242078, <harald@redhat.com>)
  - netconsole: fix status(), assorted other cleanups
  - translation updates: fr, ro, sk


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add /etc/networks (#239602)
  - rc.sysinit: fix quotacheck, remove obsolete convertquota (#249003, <tometzky@batory.org.pl>)
  - rc.sysinit: add gfs2 to the 'don't mount here' list (#248985)
  - netfs: check for rpcbind, not portmap (#245595)
  - ifup-eth: set 'primary' later for bonding devices (#236897, <agospoda@redhat.com>)
  - translation updates: cy, en_GB, mk, ml, ms, pl, sk, ta, zh_CN


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - avoid calling unicode_start unnecessarily often during startup/shutdown which
    causes certain monitor/video card combos to flicker heavily (#237839)


author: Bill Nottingham <notting@redhat.com> 8.54-1
changelog:
  - translation updates: as, bg, cs, ja, ms
  - redirect bogus errors from cryptsetup to /dev/null <karsten@redhat.com>


author: Bill Nottingham <notting@redhat.com> 8.53-1
changelog:
  - init.d/halt: use sound saving wrapper from alsa-utils, conflict with
    older versions (#236916)
  - usernetctl: drop user gid (#229372)
  - translation updates: ta, pt_BR, nb, as, hi, de


author: Bill Nottingham <notting@redhat.com> 8.52-1
changelog:
  - lang.sh: fix locales where SYSFONT is not the default (#229996)
  - ifup-wireless: properly quote arguments (#234756)
  - readonly-root: add options for mounting state (#234916)
  - rwtab: updates (#219339, <law@redhat.com>)
  - add netconsole init script (#235952)
  - disable link checking when PERSISTENT_DHCLIENT is set (#234075)
  - restore file context on /etc/resolv.conf (#230776, <dwalsh@redhat.com>)
  - ifup-post: only use the first address (#230157, <michal@harddata.com>)
  - ifup-ipsec: allow overriding of my_identifier (#229343, <cmadams@hiwaay.net>)
  - ifup-wireless: set link up before itweaking wireless parameters (#228253)
  - rc.sysinit: restorecon on mount points when relabeling (#220322)
  - init.ipv6-global: cleanup & optimize sysctl usage (#217595)
  - ifup-eth: support ETHTOOL_OPTS on bridge devices (#208043, <bbaetz@acm.org>)
  - network-functions-ipv6: as we don't use NETWORKING_IPV6, silence errors (#195845)
  - fix description (#229919)
  - translation updates


author: Bill Nottingham <notting@redhat.com> 8.51-1
changelog:
  - fix 'Fedora Fedora' in rc.sysinit
  - halt: use kexec -x to not shut down network (#223932, <mchristi@redhat.com>)
  - network_functions: fix is_bonding_device logic (#229643)
  - translation updates: nb


author: Bill Nottingham <notting@redhat.com> 8.50-1
changelog:
  - lang.csh, lang.sh: if $LANG is set, don't override it (#229102)
  - initlog.1: fix man page formatting (<esr@thyrsus.com>)
  - network-functions: simplify bonding test (#215887, <herbert.xu@redhat.com>)
  - fix ifup-post when lookup fails (#220318, <hiroshi.fujishima+redhat@gmail.com>)
  - add bridging docs (#221412, <markmc@redhat.com>)
  - release bonding slaves properly (#220525)
  - fix ppp-watch with ONBOOT=yes (#216749)
  - support VLAN_PLUS_VID_NO_PAD (#222975, #223011)
  - remove NETWORKING_IPV6; to disable, use a modprobe rule
  - translation updates: ms, de, el, pt_BR, fi, bs, sr, it, ko


author: Bill Nottingham <notting@redhat.com> 8.49-1
changelog:
  - rc.sysinit: remove raidautorn (#219226)
  - ifup-eth: set MACADDR, MTU before initializing bonding slaves, etc (#218792)
  - translation updates: mr, ms, hi, te, ml


author: Bill Nottingham <notting@redhat.com> 8.48-1
changelog:
  - add a step to rename any temporarily renamed devices (#208740, #214817)
  - make sure network modules don't get accidentally reloaded (#211474)
  - rc.sysinit: fix dmraid test (#216334)
  - init.d/halt: don't unmount network filesystems
  - ipsec: Add a way to manually manage racoon.conf (#159343, <mitr@redhat.com>)
  - sysconfig.txt: Document ~/.i18n (#199323, <mitr@redhat.com>)
  - some translation updates


author: Bill Nottingham <notting@redhat.com> 8.47-1
changelog:
  - lang.{sh,csh}: handle sinhalese as well in CJKI clauses (#212438)
  - rc.sysinit: add '--auto=yes' to mdadm invocation (#213671)
  - rename_device: fix incorrect handling of .bak files
  - mount tmpfs with -n (#213132)
  - various SUBCHANNELS related s390 fixage (#204803)
  - lang.{sh,csh}: support iso-8859-8 (#212738, <matan@svgalib.org>)


author: Bill Nottingham <notting@redhat.com> 8.46-1
changelog:
  - ifup-eth: restorecon on moved lease file
  - rc.sysinit: handle "nodmraid" and "nompath" command line options (#209377, <pjones@redhat.com>)
  - revert early-login support (#210836, essentially)
  - blacklist CJKI on the virtual console (#120819)
  - rc.sysinit: use dmraid.static (#211297)
  - use sysfs interface for bonding (#202443, <agospoda@redhat.com>)
  - use /etc/statetab, /etc/statetab.d for local state (#211839, <markmc@redhat.com>)
  - fix or_IN and similar locales (#212219)
  - use SUBCHANNELS as the primary key for s390 network devices (#204803)
  - translation updates


author: Bill Nottingham <notting@redhat.com> 8.45-1
changelog:
  - lang.csh/lang.sh - do *not* stty iutf8; too much chaos with SIGTTOU
    (reverts: #186961; fixes #209469)
  - translation updates: ms


author: Bill Nottingham <notting@redhat.com> 8.44-1
changelog:
  - separate tmpfs-usage for state from readonly-root
  - set keymap correctly in non-utf8 locale (#167363)
  - setsysfont: run unicode_stop if in non-unicode locale
  - lang.csh/lang.sh: set iutf8 if appropriate (#186961)
  - lang.csh/lang.sh: handle non-utf8 locales correctly (#200100)
  - rc.sysinit: redirect stderr from setsysfont (#209204, indirectly)
  - rwtab: fix iscsi file location (#208864)
  - translation updates: el, da, as, or
  - fix stateless updates (#206331, <law@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.43-1
changelog:
  - move ccwgroup initialization to a udev rule (should fix #199139,
    - init.d/functions: don't write to gdmfifo
  - remove unused-since-RHL-7 consolechars code, update docs (#206106)
  - stateless updates (#206331, <law@redhat.com>)
  - translation updates (el, ms, hr, sl)


author: Bill Nottingham <notting@redhat.com> 8.42-1
changelog:
  - run rc.sysinit, /etc/rc in monitor mode (part of #184340)
  - use a better check for 'native' services (#190989, #110761, adapted
    from <matthias@rpmforge.net>)


author: Bill Nottingham <notting@redhat.com> 8.41-1
changelog:
  - fix network ipv6 hang (#207137, others)
  - rc.sysinit: change blkid.tab path to /etc/blkid/blkid.tab
  - rename_device: reset DEVPATH also when renaming (#206884, <phil@fifi.org>)
  - sysconfig.txt: clarify onboot/onparent usage


author: Bill Nottingham <notting@redhat.com> 8.40-1
changelog:
  - translation updates
  - rename_device: use '__tmpXXXX' instead of 'devXXXX' as a temporary device
    name to avoid any realistic namespace clashes
  - rc.sysinit: set default affinity if specified on commandline (#203359)
  - always pass path to '.' (#206035)
  - run setsysfont, loadkeys always when /dev/tty{0,1} exist (#150769)
  - allow going to a shell when system is shut down cleanly (from <dwalsh@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.39-1
changelog:
  - translation updates
  - Handle partitions on multipath/dmraid better (<pjones@redhat.com>)
  - make /dev/mapper/control ourselves (<pjones@redhat.com>)
  - init.d/network: simplify 'status' call
  - fix actual 169.254 networks (#203591)
  - rc.sysinit: don't run vgscan (#191879)
  - init.d/halt: don't umount /dev/root<foo> (<oblin@mandriva.com>)
  - rc.sysinit: catch more dmraid errors (#200683)
  - support 'tmp' option in /etc/crypttab (#201382, <mitr@redhat.com>,
    <lv@lekv.de>)
  - IPv6 updates (<pb@bieringer.de>, includes a fix for #143452)


author: Bill Nottingham <notting@redhat.com> 8.38-1
changelog:
  - translation updates
  - bring down bonding slaves on ifdown (#199706)
  - support LINKDELAY for dhcp (#191137)
  - netfs: run multipath on netdev devices (#180977)
  - halt: use /proc/mounts instead of /etc/mtab (#198426, <mitr@redhat.com>)
  - rc.sysinit: fix getkey race (#191453, <mitr@redhat.com>)
  - spec cleanups (#188614, <kloczek@rudy.mif.pg.gda.pl>)
  - support aliases on vlan (#193133, <mitr@redhat.com>)
  - clean up ifcfg file handling (<mitr@redhat.com>, <michal@harddata.com>)
  - GRE and IPIP tunnel support (#168990, <mitr@redhat.com>,
    <razvan.vilt@linux360.ro>, <aaron.hope@unh.edu>, <sean@enertronllc.com>)
  - rc.sysinit: don't format encrypted swap always (#127378)
  - don't try to add routes to alias devices (#199825, #195656)


author: Bill Nottingham <notting@redhat.com> 8.36-1
changelog:
  - rework automatic swapon - only run if AUTOSWAP=yes, and fix errors
    (#198695, #196179, #196208)
  - redo single so it starts last in runlevel 1, and doesn't kill/start
    services itself
  - add configurable delay for killproc() (#198429, <jorton@redhat.com>)
  - fix loop in rename_device (#199242, <markmc@redhat.com>)
  - rc.sysinit: stateless updates (#197972, <law@redhat.com>)
  - support for copying dhcp leases from initramfs (#198601, <markmc@redhat.com>)
  - readonly-root: SELinux works now in the kernel, allow it
  - init.d/network: don't bring down network if root is on a network device
  - init.d/halt: don't use -i to halt; causes problems with iscsi
  - add support for routing rule-$device (#132252, <mitr@redhat.com>)
  - fix rhgb output (#192604, <tonynelson@georgeanelson.com>)
  - fix crypttab options for LUKS (#197656, <mitr@redhat.com>)
  - ipsec: various fixes & new features (#150682, #168972, <mitr@redhat.com>, <alex@milivojevic.org>)
  - ipsec: add check for IKE_METHOD (#197576, <john_smyth@mail.ru>)
  - rename_device: ignore alias devices, fix race (#186355)
  - ifup/ifdown: don't mark as %config
  - rwtab: some additions/cleanup


author: Bill Nottingham <notting@redhat.com> 8.35-1
changelog:
  - readonly root enhancments (modified from <law@redhat.com>, #193164)
  - encrypted swap, non-root filesystem support (#127378, <mitr@redhat.com, <redhat@flyn.org>)
  - clarify killproc usage (#193711, <mitr@redhat.com>)
  - document BRIDGE= (#192576, <mitr@redhat.com>)
  - rc.sysinit: allow for sulogin instead of automatic relabeling (<dwalsh@rehdat.com>)


author: Bill Nottingham <notting@redhat.com> 8.34-1
changelog:
  - link glib2 dynamically now that it's in /lib, conflict with older
    versions
  - handle cups specially when cleaning /var (#189168)
  - remove ifdown-aliases (<mitr@redhat.com>)
  - ifup-ipsec: fix key handling when only one of AH or ESP is used
    (#166257, <mituc@iasi.rdsnet.ro>)
  - IPv6 updates, including RFC 3041 support (<pb@bieringer.de>)
  - routing fixes, add METRIC support for default routes (#124045, <mitr@redhat.com>)
  - fix handling of mount points with white space (#186713, <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.33-1
changelog:
  - support for readonly root
  - rc.sysinit: remove call to zfcpconf.sh - that should be udev rules
  - ifup*: add NETWORKDELAY and LINKDELAY (#176851, <mitr@redhat.com>)
  - rc.sysinit: remove obsolete initrd code (<pjones@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.32-1
changelog:
  - netfs: fix redirect (#187505)
  - rc.sysinit add forcequotacheck (#168118, <mitr@redhat.com>)
  - functions/pidof: various fixes (#182623, others <mitr@redhat.com>)
  - add support for DHCP on bridges (#125259, <mitr@redhat.com>,
    anders@kaseorg.com>)
  - rc.sysinit: use pidof, not killall (#185429, <pjones@redhat.com>)
  - ppp fixes (#129195, #163950, #92023, <mitr@redhat.com>, <avi@argo.co.il>)
  - ifup/ifdown: unset $WINDOW (#174336, <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.30-1
changelog:
  - hotplug: don't cause modules to be reloaded on ifdown/rmmod (#179809)
  - fix endless loops in ifup/ifdown (#177792, #182466)
  - fix enabling of enforcing SELinux mode after relabel (#181893)
  - remove debugging code from ifup-bnep
  - add /proc, /sys mounting back to rc.sysinit
    Note: booting without an initrd is deprecated
  - translation updates


author: Bill Nottingham <notting@redhat.com> 8.28-1
changelog:
  - kill nash-hotplug before starting udev (<pjones@redhat.com>)
  - silence warnings on /dev/pts remount (<pjones@redhat.com>)
  - more translation updates


author: Bill Nottingham <notting@redhat.com> 8.27-1
changelog:
  - translation updates
  - lang.sh: revert fix for #176832, it's broken
  - ifup-aliases fixes (<pjones@redhat.com>,<mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.26-1
changelog:
  - revert "rc.sysinit: don't mount usbfs, libusb no longer uses it" change
  - add some ugly hacks to make sure net hotplug doesn't run after unclean
    shutdown (#177795)
  - don't mount /sys and /proc in rc.sysinit - the initrd already does
    (<pjones@redhat.com>)
  - halt: try to unmount tmpfs filesystems before swapoff (#174000,
    <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.22-1
changelog:
  - remove references to /usr/X11R6/bin (#177938)
  - rc.sysinit: fix SELinux message formatting (#178532)
  - rc.sysinit: clean cvs as well (#178539, <ville.skytta@iki.fi>)
  - init.d/halt: move halt.local so that it runs before /  is remounted r/o (#179314)
  - rc.sysinit: don't activate already active dmraids (<pjones@redhat.com>)
  - rc.sysinit: don't mount usbfs, libusb no longer uses it
  - init.d/functions: Add -p to status() (#134363, <mitr@redhat.com>)
  - init.d/functions: Separate /var/run/*.pid handling and pidof calls
    to private functions (#63440, <mitr@redhat.com>)
  - init.d/functions: update for current LSB, including -p pidfile
    (#99325, #134363, <mitr@redhat.com>, <tobias.burnus@physik.fu-berlin.de>)
  - getkey: various cleanups, add man page (#54481, <mitr@redhat.com>)
  - lang.sh: don't always call consoletype (<laroche@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.21-1
changelog:
  - move handling of network hotplug events here, add appropriate udev
    rules, obsolete hotplug
  - get rid of some path lookups (#178321, <mclasen@redhat.com>)
  - get hwaddrs from sysfs as opposed to ip | sed
  - translation updates
  - lang.sh: don't run unicode_start for subshells (#176832)
  - halt: ignore sysfs but not /sys<otherstuff> (#177612, <bnocera@redhat.com>)
  - add service(8) man page (#44857) <mitr@redhat.com>


author: Bill Nottingham <notting@redhat.com> 8.19-1
changelog:
  - Require syslog, for alternate implementations thereof (#172885)
  - Fix fsck invocation for weeding out netdev devices (#175803)


author: Bill Nottingham <notting@redhat.com> 8.17-1
changelog:
  - make sure corefile limiting works for user processes as well
    (#166511, <ville.skytta@iki.fi>)
  - ifup-routes: handle no EOF in the route file (#156972)
  - rc.sysinit: tweak mesage (#156972)
  - ifdown-eth: clean up error message (#135167)
  - rc.sysinit: call kpartx on multipath devices (#160227)
  - ifup-eth: move wireless options before bridge options (#122801)
  - ifup-wireless: silence error (#90601)
  - init.d/functions: change translated string (#54682)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - kmodule: don't probe for uninteresting devices. speeds things up
  - network-functions: deal with broken networks better (#168947)
  - rc.sysinit: automatically reboot if labels are really out of date
    (<dwalsh@redhat.com>)
  - network-functions: throw out nameif error messages
  - rc.sysinit: use multipath.static (#168321)
  - rc.sysinit: use ignorelocking (#168195)


author: Bill Nottingham <notting@redhat.com> 8.12-1
changelog:
  - ifup-eth: fix interface renaming (#158774)
  - rc.sysinit: use modprobe, not insmod (#159120, <tmus@tmus.dk>)
  - remove workaround for the fonts-not-initialized-on-secondary-consoles
    problem (fixed in 2.6.12-rc4 and later)
  - setsysfont: correctly bracket systfontacm (#159706)
  - rc.sysinit: always use udevsend, even if no modules (#160987)
  - ifdown-aliases: add 'cd' to the proper dir (#161170)
  - add diskdump restore support (<tuchida@redhat.com>),
    conflict with appropriate diskdumputils
  - rc.sysinit: dmraid/multipath support
    - remove LVM1 support
  - init.d/functions: handle odd quoting in args (#161316, <stransky@redhat.com>)
  - ifup-wireless: set rate in quotes (#163123)
  - handle lvm & fsck for network block devices (#148764,
    <alewis@redhat.com>)
  - initlog: fix invalid free calls,  (#165033), (#163973,<dwalsh@redhat.com>)
  - sysconfig.txt: remove hdparm docs, since the code isn't there (#162962)
  - updated translations: ms, ja, ko, et, zh_CN, zh_TW, sr, ar


author: Bill Nottingham <notting@redhat.com> 8.11-1
changelog:
  - fix mis-bringup of interfaces due to accidentally matched HWADDR
    (a.k.a. ONBOOT=no not working) (#153669, #157252)
  - support automatic relabeling later if rebooted w/o SELinux
    (<dwalsh@redhat.com>)
  - rc.sysinit: fix fixfiles invocation (#157182)
  - btmp should be 0600 (#156900)
  - translation updates: fr, bg, ru, mk, pa, es


author: Bill Nottingham <notting@redhat.com> 8.09-1
changelog:
  - rc.sysinit: clean up screen sockets (#155969)
  - functions: use pidof -c in various functions
  - ifup-ppp: fix static routes with ppp demand dialing (#20142,
    <ohrn+redhat@chalmers.se>)
  - add btmp support (#155537)
  - don't send dhcp hostname (revert of fix for #149667)
  - more early-login modifications (<mclasen@redhat.com>)
  - functions: fix echo (#155270)


author: Bill Nottingham <notting@redhat.com> 8.08-1
changelog:
  - update translation base
  - automatically send hostname for DHCP if it's available and not
    overridden (#149667)
  - load user-defined module scripts from /etc/sysconfig/modules at
    boot (#123927)
  - halt: reverse sort the mount list, avoiding errors
    (#147254, <jamesodhunt@hotmail.com>)
  - ifup-wireless: add SECURITYMODE (#145407)
  - network-functions: don't error out if hotplug doesn't exist (#140008)
  - ifup: always return errors on trying to bring up nonexistent devices (#131461)
  - ifup: fix error message (#143674)
  - rc.sysinit: add a autorelabel boot target (#154496)
  - prefdm: if something else is specified as $DISPLAYMANAGER, try that (#147304)
  - remove support for the old firewall type
  - network: optimize some (#138557, <drepper@redhat.com>)
  - prefdm: fix prefdm arg handling (#154312, <khc@pm.waw.pl>)
  - gdm early-login support (adapted from <rstrode@redhat.com>)
  - ifup-routes: make sure commented lines are handled correctly (#154353,
    - some sysconfig.txt updates (<link@pobox.com>, <jvdias@redhat.com>)
  - rc.sysinit: fix restorecon invocation (#153100)
  - initlog: free some of the more egregious memory leaks (#85935)
  - initlog: fix potential memory overread (#153685, <in-redhat@baka.org>)
  - remove some conflicts, %post scripts, etc. that were only relelvant
    for upgrades from pre-7.0
  - other minor fixes, see ChangeLog


author: Bill Nottingham <notting@redhat.com> 8.06-1
changelog:
  - handle alternate VLAN naming schemes (#115001, <kas@informatics.muni.cz>)
  - ifup-ipsec: handle non-ascii keys (#150552)
  - add proper ipsec route (#146169, #140654)
  - add a restorecon for /tmp to rc.sysinit
  - document ONHOTPLUG in sysconfig.txt
  - fix mistranslation (#151120)
  - don't return 1 for stopping a process if it isn't running at all
  - don't explicitly set fwd polices for ipsec traffic. Let setkey
    handle it.


author: Bill Nottingham <notting@redhat.com> 8.05-1
changelog:
  - ipv6 cleanups (<pb@bieringer.de>)
  - rc.sysinit: fix rngd check (#130350)
    ... then turn it off entirely
  - rc.sysinit: get rid of duplicate date printout (#149795)
  - ifdown: handle being called on down devices better
  - handle saved resolv.conf on all device types
  - fix network-functions cleanup
  - netfs: fix _netdev unmounting (#147610, <alewis@redhat.com>)
  - dhcp release cleanups (<jvdias@redhat.com>)
  - ifup-bnep: bluetooth update <dwmw2@infradead.org>
  - more ipsec stuff (#147001, <ckjohnson@gwi.net>)


author: Bill Nottingham <notting@redhat.com> 8.04-1
changelog:
  - split out ifup/ifdown general case to ifup/ifdown-eth;
    add ifup/ifdown-bnep (<dwmw2@redhat.com>)
  - ifup-ipsec: add fwd policies (#145507)
  - fix multiple scsi_hostadapter loads (#145432)
  - enable syncookies in sysctl.conf (#145201)


author: Bill Nottingham <notting@redhat.com> 8.03-1
changelog:
  - use udevsend to handle hotplug events (requires recent udev)
  - remove pump, dhcpcd support
  - fix ONxxx (#136531, <cww@redhat.com>)
  - fix various fgreps to not catch commented lines (#136531, expanded
    from <cww@redhat.com>)
  - set ETHTOOL_OPTS on addressless devices (#144682, <mpoole@redhat.com>)
  - kill dhcp client even if BOOTOPROTO is now static (#127726, others)
  - replace the use of route/ifconfig with ip in IPv6 code, remove support
    for ipv6calc (<pb@bierenger.de>, <pekkas@netcore.fi>)
  - fix quoting in daemon() (#144634)
  - make sysctl be silent (#144483)


author: Bill Nottingham <notting@redhat.com> 8.02-1
changelog:
  - remove initlog, minilogd
  - add a flag to kmodule for use with kudzu's socket mode, use it
  - change setting of IPv6 default route (#142308, <pb@bieringer.de>)
  - netfs: don't unmount NFS root FS (#142169)


author: Bill Nottingham <notting@redhat.com> 7.98-1
changelog:
  - various kmodule speedups
  - rc.d/init.d/netfs: don't mount GFS (#140281)
  - fix various minilogd bogosities (#106338)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix check_link_down to still check negotiation if link is
    listed as "up" on entering (#110164, <dbaron@dbaron.org>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - take an axe to rc.sysinit:
    - remove delay on unclean startup
    - remove hdparm code
    - remove LVM1 code
    - remove old raidtab code in favor of mdadm
    - remove support for old isapnp tools
    - move all block device mangling before fsck. run fsck *once*, not twice
    - some more LC_ALL=C stuff


author: Florian La Roche <laroche@redhat.com>
changelog:
  - /etc/rc.d/rc: use "LC_ALL=C grep" for small speedup
  - /etc/rc.d/rc.sysinit:
    - do not read udev.conf, this seems to be all in the start_udev script
    - fix detection of "nomodules" kernel command line option
    - read /proc/cmdline earlier and convert rhgb to use that, too
    - load_module(): change redirection to /dev/null
    - some checks for RHGB_STARTED="" looked strange
  - /etc/sysconfig/network-scripts/ifup-ppp:
    - remove a call to basename with shell builtins
  - /etc/sysconfig/network-scripts/network-functions:
    - remove some calls to basename/sed with shell builtins


author: Bill Nottingham <notting@redhat.com> 7.93.2-1
changelog:
  - fix prefdm fallback to installed display managers (#137274)
  - fix incorrect rhgb temporary path (#137391)


author: Bill Nottingham <notting@redhat.com> 7.91-1
changelog:
  - rc.d/rc.sysinit: remove devlabel call
  - mdadm support, now that raidtools is gone (#126636, #88785)
  - call ipv6to4 scripts in /etc/ppp/(ip-up|ip-down) (#124390, <dwmw2@redhat.com>)
  - cleanup a couple of nits that could affect bug #134754
  - make sure we return to rhgb after fsck (#133966, #112839, #134449)
  - automatically reboot when fsck calls for it, instead of requiring
    manual intervention (#117641 and duplicates)
  - ifup-wireless: fix key for open vs. restricted (#135235, <dax@gurulabs.com>)
  - translation updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - use runuser instead of su; require it
  - init.d/halt: use right file name for random seed (#134432)


author: Bill Nottingham <notting@redhat.com> - 7.86-1
changelog:
  - use /etc/hotplug/blacklist to blacklist modules in hardware init (#132719)
  - filter indic locales on the console (#134198)


author: Bill Nottingham <notting@redhat.com> - 7.85-1
changelog:
  - ifup, network-functions: fix worked-by-accident shell quoting
  - lang.csh: remove setting of dspmbyte (#89549, <mitr@redhat.com>)
  - SELinux fixes
  - clean up prefdm
  - init.d/functions: export LC_MESSAGES (#133786)
  - allow daemon to coredump if requested (#130175)
  - network-functions: be more liberal in what we accept for link types (#90602, #127984)
  - fix overzealousness with -range aliases (#65415)
  - rc.sysinit: use s-c-keyboard, not kbdconfig (#133929)
  - fix checkpid logic, clean up potential errors (#134030)
  - translation updates


author: Bill Nottingham <notting@redhat.com> - 7.82-1
changelog:
  - fix handling of nonexistent devices (#132839)
  - rhgb enhancements (<veillard@redhat.com>, #132665)
  - initscripts.spec: require nash (#132513)
  - translation updates


author: Dan Walsh <dwalshg@redhat.com> - 7.78-2
changelog:
  - fix setting SELinux contexts on udev-created-in-initrd devices
  - Let restorecon check if selinux is enabled.


author: Bill Nottingham <notting@redhat.com> - 7.77-1
changelog:
  - mount usbfs (#131347)
  - start any automatic raid devices
  - remove triggers for ancient releases, bulletproof remaining ones (#131356)


author: Jason Vas Dias <jvdias@redhat.com> 7.73-1
changelog:
  - Add support for running the DHCPv6 client to ifup
  - (new DHCPV6C=yes/no ifcfg-${IF} variable) + update sysconfig.txt


author: Bill Nottingham <notting@redhat.com> 7.70-1
changelog:
  - autoload hardware modules on startup
  - minor fsck cleanup (#115028, <leonard-rh-bugzilla@den.ottolander.nl>)
  - ifup: support STP bridging (#123324)
  - rc.sysinit: do a SELinux relabel if forced
  - rc.sysinit: remove devfs compat and the remaining 2.4 compat
  - ifup-wireless: support multiple keys (#127957)
  - fix firmware loading (#129155, <bnocera@redhat.com>)


author: Jason Vas Dias <jvdias@redhat.com> 7.67-1
changelog:
  - fix change_resolv_conf: if pre-existing /etc/resolv.conf
  - non-existent or empty, replace with new file contents.


author: Jason Vas Dias <jvdias@redhat.com> 7.66-1
changelog:
  - Allow users to use generic /etc/dhclient.conf if per-device
  - /etc/dhclient-${DEVICE}.conf is non-existent or empty


author: Bill Nottingham <notting@redhat.com> 7.62-1
changelog:
  - fix up resolv.conf munging (#129921)
  - use rngd if available
  - run start_udev if necessary (#120605)
  - readonly root updates (#129893, <markmc@redhat.com>)
  - ifup-wireless: quote key (#129930)
  - remove rawdevices (#130048)
  - handle binfmt_misc in rc.sysinit for the case where it's built in (#129954)
  - remove mkkerneldoth
  - don't remove linguas in lang.* (part of #9733)
  - fix nfs unmounting (#129765)
  - fix URL (#129433)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix bonding + no IP (#127285)
  - wrap second LVM initialization in vgscan check to avoid extraneous messages (#127639)


author: Bill Nottingham <notting@redhat.com> 7.59-1
changelog:
  - set context on ICE directory after making it (#127099, <concert@europe.com>)
  - don't mount GFS filesystems in rc.sysinit


author: Bill Nottingham <notting@redhat.com> 7.58-1
changelog:
  - rc.d/rc.sysinit: hack: make ICE directory on boot (#86480)
  - set devicetype for xDSL (#126194)
  - ignore locking failures when starting lvm volumes (#126192, <radu@primit.ro>)
  - unset LC_MESSAGES for rhgb (#126020, <ynakai@redhat.com>)
  - bonding fixes
  - setsysfont: remove error (#100559)
  - remove duplicate setting of network routes (#125450)
  - vlan fixes (#107504, <hrunting@texas.net>)
  - ifup-aliases: remove bogus route setting (#120908)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix bridging confusing module order (#122848, <luto@myrealbox.com>)
  - rc.d/rc.sysinit: don't mount cifs (#122501)


author: Bill Nottingham <notting@redhat.com> 7.51-1
changelog:
  - get rid of LVM error when no volumes are defined (#121197)
  - fix selinux short-circuit test (#121143, <michal@harddata.com>)
  - /dev/mapper/control is a special file, check it accordingly (#121963)
  - support ETHTOOL_OPTS on bonding slaves (#119430, <hrunting@texas.net>)
  - handle multiple spaces correctly in rc.sysinit, network-functions
    (#118583, <pallas@kadan.cz>)
  - cleanup fd leaks, mem leaks, other bogosities
    (#119987, <linux_4ever@yahoo.com>)
  - rc.d/init.d/network: remove ipv6 bogosity (#114128)
  - translation updates


author: Bill Nottingham <notting@redhat.com> 7.50-1
changelog:
  - fix LVM issues in rc.sysinit (#120458, #119975)
  - deal with fixed racoon parser
  - translation updates from translators
  - fix USB loading (#120911)


author: Bill Nottingham <notting@redhat.com> 7.49-1
changelog:
  - use alsa for mixer saving in halt
  - don't umount /proc in halt (#118880)
  - various translation updates from translators


author: Bill Nottingham <notting@redhat.com> 7.47-1
changelog:
  - translation: catch more input strings (#106285, <mitr@volny.cz>)
  - remove autologin from prefdm (#108969)
  - return to rhgb after ./unconfigured (#109807, <jkeating@j2solutions.net>)
  - handle iso15 in setsysfont (#110243)
  - clean up samba & vmware in rc.sysinit (#113104)
  - some sysconfig.txt documentation (#110427, #118063)
  - fix bug in umount-on-halt (#113088, <giardina@airlab.elet.polimi.it>)
  - handle CIFS in netfs (#115691)
  - make sure hotplug isn't stuck unset (#116666, <aoliva@redhat.com>)
  - handle network fs better in rc.sysinit (#111290)
  - nomodules applies to usb/firewire too (#113278)
  - ipsec fix (#116922, <felipe_alfaro@linuxmail.org>)
  - make sure rc exits cleanly (#117827, <enrico.scholz@informatik.tu-chemnitz.de>)
  - fsck root FS from initrd, for dynamic majors (#117575, <sct@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.44-1
changelog:
  - NFSv4 support (<chucklever@bigfoot.com>, <steved@redhat.com>)
  - handle 2.6-style 'install ethX ...' lines correctly
  - mount sysfs by default
  - time to clean up the cruft. remove:
    - boot-time depmod
    - linking of /boot/System.map to /boot/System.map-`uname -r`
    - /var/log/ksyms.X
    - libredhat-kernel support


author: Bill Nottingham <notting@redhat.com> 7.31-1
changelog:
  - fix bonding + dhcp (#91399)
  - fix typo (#103781)
  - sysconfig/network-scripts/ifup: fix use of local

  - fix shutdown with NFS root (#100556, <Julian.Blake@cern.ch>)
  - remove /var/run/confirm when done with /etc/rc (#100898)
  - ipcalc: fix some memory handling (#85478, <miked@ed.ac.uk>)
  - handle sorting > 10 network devices (#98209)
  - unset ONPARENT after use (#101384)
  - random other fixes
  - bridging support (<dwmw2@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.29-1
changelog:
  - setsysfont: don't echo to /dev/console (#102004)
  - fix ethernet device renaming deadlock (#101566)
  - consoletype: don't return 'vt' on vioconsole (#90465)
  - ifup: fix short-circuit (#101445)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ifup-routes: pass the interface name to handle_file() so that we don't try
    to use the routes file's name as an interface name


author: Bill Nottingham <notting@redhat.com> 7.27-1
changelog:
  - add a check to consoletype for the current foreground console
  - use it when running unicode_start (#98753)


author: Bill Nottingham <notting@redhat.com> 7.26-1
changelog:
  - ipsec support (see sysconfig.txt, ifup-ipsec)
  - read $CONFIG.keys, for non-world-readable keys
  - allow default window size for routes to be set with WINDOW= (#98112)
  - support setting device options with ethtool opts
  - fix s390 bootup spew (#98078)
  - support renaming interfaces with nameif based on hwaddr


author: Bill Nottingham <notting@redhat.com> 7.25-1
changelog:
  - fix DNS punching in the case of other rules for the DNS server
    (#97686, <martin@zepler.org>)
  - initlog, ppp-watch, and usernetctl tweaks (<linux_4ever@yahoo.com>)
  - fix grep for mingetty (#97188)
  - fix rhgb-client bad syntax
  - change network device searching, use correct naming, fix route issues
    (<harald@redhat.com>)
  - other random tweaks


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - initscripts-s390.patch: remove not needed parts about PNP=
  - inittab.390: sync with normal version
  - rc.sysinit: remove two further calls to /sbin/consoletype with $CONSOLETYPE


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - sysconfig/init.s390: set LOGLEVEL=3 as for other archs
  - rc.d/init.d/network, rc.d/rc: change confirmation mode to
    not use an environment variable
  - rc.d/init.d/functions: make strstr() even shorter, remove old
    "case" version that has been already commented out
  - rc.d/rc.sysinit:
    - no need to set NETWORKING=no, it is not used/exported
    - do not export BOOTUP
    - delete two "sleep 1" calls that wants to add time to go
      into confirmation mode. There is enough time to press a
      key anyway or use "confirm" in /proc/cmdline.
    - read /proc/cmdline into a variable
    - use strstr() to search in /proc/cmdline
    - add "forcefsck" as possible option in /proc/cmdline
    - while removing lock files, no need to call `basename`
    - add unamer=`uname -r` and reduce number of forks
    - do not fork new bash to create /var/log/ksyms.0


author: Karsten Hopp <karsten@redhat.de> 7.15-1
changelog:
  - Mainframe has no /dev/ttyX devices and no mingetty, don't
    initialize them. This gave error messages during startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - init.d/network: don't advertise "probe: true" in the header if we don't
    recognize "probe" as an argument


author: Bill Nottingham <notting@redhat.com> 7.09-1
changelog:
  - initialize two ttys past # of mingettys (for GDM)
  - fix zeroconf route
  - redhat-config-network writes $NAME.route for some static routes
    (e.g., ppp); handle that (#84193)


author: Bill Nottingham <notting@redhat.com> 7.08-1
changelog:
  - load keybdev & mousedev even if hid is already loaded/static
  - run fewer scripts through action (#49670, #75279, #81531)


author: Bill Nottingham <notting@redhat.com> 7.07-1
changelog:
  - fix nicknames & profiles (#82246)
  - fix check_device_down (#83780, <pzb@datstacks.com>)
  - vlan fixes (<tis@foobar.fi>)
  - fix groff macros (#83531, <tsekine@sdri.co.jp>)
  - various updated translations
  - fix checkpid for multiple pids (#83401)


author: Bill Nottingham <notting@redhat.com> 7.04-1
changelog:
  - tweak some translatable strings
  - fix for rc.sysinit on machines that pass arguments to mingetty
    (<nalin@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.03-1
changelog:
  - move system font setting sooner (<milan.kerslager@pslib.cz>)
  - fix link checking for dhcp, use both ethtool and mii-tool
  - fix CJK text on the console, and locale-archive held open
    on shutdown
  - IPv6 updates <pekkas@netcore.fi>, <pb@bieringer.de>
  - speedup tweaks (<drepper@redhat.com>)
  - use glib2 for ppp-watch (#78690, <kisch@mindless.com>)
  - add zeroconf route (#81738)
  - fix ifup-ppp for dial-on-demand, and onboot (<goeran@uddeborg.pp.se>)
  - tweak raidtab parsing, don't worry about not-in-fstab RAID devices
    (#71087, #78467, <aja@mit.edu>)
  - don't automatically bring up aliases if 'ONPARENT=no' is set (#78992)
  - getkey cleanups/tweaks (#76071, <ben@enchantedforest.org>)
  - rework halt_get_remaining (#76831, <michal@harddata.com>)
  - ipcalc: fix calculation of /32 addresses (#76646)
  - various other tweaks and fixes


author: Bill Nottingham <notting@redhat.com> 7.00-1
changelog:
  - tweaks for potential GUI bootup
  - loop checking for network link state, don't unilterally wait five
    seconds


author: Bill Nottingham <notting@redhat.com> 6.97-1
changelog:
  - IPv6 update (<pekkas@netcore.fi>, <pb@bieringer.de>)
  - devlabel support (<Gary_Lerhaupt@Dell.com>)
  - do lazy NFS umounts


author: Bill Nottingham <notting@redhat.com> 6.96-1
changelog:
  - fix various static-routes brokeness (#74317, #74318, #74320, #76619,
    - fix handling of SYSFONTACM in setsysfont (#75662)
  - fix lang.csh for CJK (#76908, <ynakai@redhat.com>)
  - IPv6 update (<pekkas@netcore.fi>, <pb@bieringer.de>)
  - other minor tweaks


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't infinite loop on ifdown
  - remove disabling of DMA; this can cause problems
  - move swap startup to after LVM (#66588)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't cycle through eth0-eth9 on dhcp link check (#68127)
  - don't retry indefinitely on ppp startup
  - activate network profile passed on kernel commandline via netprofile=
  - fix iptables invocations again
  - translation refresh


author: Bill Nottingham <notting@redhat.com>
changelog:
  - require /etc/redhat-release (#68903)
  - fix tty2-tty6 (sort of)
  - fix iptables invocations (#70807, #71201, #68368)
  - other minor tweaks


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - /sbin/service: set PATH before calling startup scripts
    HOME and TERM are also set during bootup, but they should not make
    a difference for well-written daemons.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - /etc/init.d/functions:
    daemon(): avoid starting another bash
    killproc(): avoid starting another bash for the default case
  - do not call "insmod -p" before loading the "st" module


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - allow an option for ups poweroff  #68123
  - change grep for ONBOOT=  #63903
  - allow building with a cross-compiler  #64362,#64255
  - faster check in network-functions:check_default_route()
  - better checks for backup files
  - drastically reduce the number of consoletype invocations
  - do not export "GATEWAY" in network-functions
  - code cleanups in rc.sysinit


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - rc.sysinit: do not load raid modules unless /etc/raidtab exists
  - many cleanups for more consistent shell programming and also
    many smaller speedups within network scripts, no un-necessary sourcing
    of files etc
  - nearly re-code /etc/rc.d/rc


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - start some sh coding cleanups
  - change to /etc/init.d/functions
  - eliminate some un-necessary PATH settings
  - eliminate some TEXTDOMAIN settings


author: Bill Nottingham <notting@redhat.com> 6.64-1
changelog:
  - make sure chatdbg is set before using it (#63448, <Bertil@Askelid.com>)
  - allow tweaking of more devices with hdparm (#53511), and
    tweak non-disk devices iff they explicitly have a config file
    for that device (#56575, #63415)
  - some translation updates


author: Bill Nottingham <notting@redhat.com> 6.63-1
changelog:
  - ipcalc cleanups (#58410)
  - quit stripping binaries
  - do LVM init after RAID init too (#63238)
  - export all locale variables (#56142)
  - run sysctl -p after network init as well


author: Bill Nottingham <notting@redhat.com> 6.62-1
changelog:
  - delete X/VNC locks on startup (#63035)
  - shut up DMA disabling, move it to after ide-scsi (#62873, #62956)
  - use full path to /sbin/ifconfig (#59457)
  - /sbin/service: change to root directory before staring/stopping;
    also sanitize environment


author: Bill Nottingham <notting@redhat.com> 6.56-1
changelog:
  - use nameif for interfaces where we don't agree on HWADDR with the
    config file (<harald@redhat.com>)
  - LSB support tweaks


author: Mike A. Harris <mharris@redhat.com> 6.55-1
changelog:
  - Removed process accounting stuff from rc.sysinit and halt scripts as it is
    now handled by the psacct initscript in the psacct package


author: Than Ngo <than@redhat.com>
changelog:
  - add ISDN patches from pekkas@netcore.fi and pb@bieringer.de (bug #52491)
  - fix handling of ISDN LSZ Compresssion


author: Bill Nottingham <notting@redhat.com> 6.31-1
changelog:
  - message un-tweaks (<johnsonm@redhat.com>)
  - make getkey more useful, fix some of the autofsck stuff (<johnsonm@redhat.com>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix a broken call to check_device_down
  - make all loopback addresses have host scope, not global scope.
    Fixes #49374, possibly others


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add is_available() network function, use it; cleans up ugly modprobe
    error messages
  - update translation info
  - fix #51787


author: Than Ngo <than@redhat.com>
changelog:
  - don't set MSN if it' empty (it's now optional)
  - don't give login name as a cmdline-option (Bug #23066)
  - remove peer device file if ppp connection is down
  - fix channel bundling


author: Bill Nottingham <notting@redhat.com>
changelog:
  - tweak raittab grep slightly (#51231)
  - allow resetting of default route for DHCP addresses (#48994)
  - save resolv.conf in ifup-ppp for restoration by ifdown-post (#50759)
  - when munging firewall rules for dns, only allow dest ports 1025-65535 (#44038, #40833)
  - allow shell characters in ppp names (#43719)
  - allow setting DHCP arguments, just kill dhcpcd instead of using -k (#46492)
  - behave sanely if ifup called when dhcpcd is running (#49392, #51038)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - honor HOTPLUG=no if running under hotplug (#47483)
  - use awk, not grep, for modprobe -c checks (#49616)
  - don't print ugly messages for the case where the device doesn't exist,
    and there is no alias (i.e., PCMCIA ONBOOT=yes (#various))
  - run kbdconfig in /.unconfigured mode (#43941)
  - use a bigger buffer size argument to dmesg (#44024)
  - detach loopback devices on shutdown (#43919, #45826)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't use kbd commands in setsysfont now that we've switched back to
    console-tools (#50075)
  - sleep in check_link_down; some devices require it
  - only bring link down if check_link_down fails


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update netdev stuff to use _netdev
  - IPv6 updates (<pekkas@netcore.fi>)
  - fix downing of devices with static IPs (#49777, #49783)
  - put ifcfg-lo back in the package


author: Bill Nottingham <notting@redhat.com>
changelog:
  - own some more directories
  - use -O nonetdev, require mount package that understands this
  - fix do_netreport when called as non-root
  - remove ip addresses from interfaces on ifdown
  - oops, fix ifup/ifdown


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix '--check'
  - prereq sh-utils (#43065)
  - fix some invocations of reboot/halt (#45966)
  - fix typo in ifup-wireless
  - don't muck with /etc/issue each boot
  - big IPv6 update (<pekkas@netcore.fi>)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - disable hwclock on S390 (no such executable)
  - Fix up kernel versioning on binary-only modules (S390)
  - don't use newt scripts on S390 console


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - reenable pump, but make sure dhcpcd is the default. This
    way, upgrades of systems without dhcpcd has a better chance at
    working.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run ifup ppp0 if ppp-watch gets SIGINT (#40585, ak@cave.hop.stu.neva.ru)
  - fix do_netreport (#37716, #39603 <crlf@aeiou.pt>)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - copyright: GPL -> license: GPL
  - fix a syntax error in lang.csh
  - skip commented-out i18n configuration lines in lang.csh


author: Bill Nottingham <notting@redhat.com>
changelog:
  - IPv6 fixes (#30506)
  - make static-routes handling more sane and consistent (#29500, #29549)
  - handle multiple USB controllers *correctly*


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - usernetctl, ppp-watch: cleanups
  - netreport: use O_NOFOLLOW
  - ifup-ppp: let ppp-watch watch over demand-dialed connections (#28927)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run isapnp on isapnp-enabled 2.4 kernels (part of #29450)
  - disable hotplug during network initscript
  - don't munge wireless keys in ifup; that will be done with the
    PCMCIA wireless stuff
  - run sndconfig --mungepnp for non-native-isapnp soundcards
  - don't explicitly kill things in init.d/single, init will do it
  - don't explicitly load usb-storage; mount the usbdevfs before initializing
    host controller modules


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix some substitions in init.d/functions (fixes various killproc issues)
  - make sure ipv6 module alias is available if configured
  - fix initlog segfaults in popt when called with bogus stuff (#28140)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pidofproc() and killproc() try to use the PID associated with the full
    pathname first before killing the daemon by its basename (for daemons that
    share the same basename, i.e. "master" in postfix and cyrus-imapd) (#19016)
  - fix status() as well


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add all save changes for s390 s390x that won't break anything
    patches are from Oliver Paukstadt @ millenux.com


author: Bill Nottingham <notting@redhat.com>
changelog:
  - modify firewall on ifup to allow any new DNS servers through (#25951)
  - don't muck with the font in lang.csh/lang.sh (#26349)
  - don't display Japanese if we aren't on a pty (#25041)
  - load ide-scsi if passed on /proc/cmdline


author: Bill Nottingham <notting@redhat.com>
changelog:
  - various init.d/functions cleanups (#10761, from <mjt@tls.msk.ru>)
  - in daemon(), only look at pidfile to determine if process is running
    (#17244, others)
  - ifup-ppp enhancements (#17388, from <ayn2@cornell.edu>)
  - ipv6 support (#23576, originally by Peter Bieringer <pb@bieringer.de>)
  - lots of other minor fixes (see ChangeLog)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add plusb support (#18892, patch from <eric.ayers@compgen.com>)
  - don't ignore RETRYTIMEOUT when we never connect (#14071, patch from
    <ak@cave.hop.stu.neva.ru>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - do LVM setup through normal initscripts mechanisms
  - ignore backup files in /etc/sysconfig/network-scripts
  - lots of .po file updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - only load sound if persistent DMA buffers are necessary
  - fix lots of bugs: #18619, #21187, #21283, #12097
  - integrate MAXFAIL option for ppp-watch
  - don't load keymaps/fonts on a serial console


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - changed hdparm section in rc.sysinit to allow different
    parameters for each disk (if needed) by copying
    /etc/sysconfig/harddisks to /etc/sysconfig/harddiskhda (hdb,hdc..)
  - fix RFE #20967


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - handle "gw x.x.x.x" as the last pair of flags in ifup-routes (#18804)
  - fix top-level makefile install target
  - make usernetctl just fall-through if getuid() == 0


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add usleep after kill -KILL in pidofproc, works around lockd issues (#14847)
  - add some fallback logic to prefdm (#16464)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't load usb drivers if they're compiled statically
  - don't call ifdown-post twice for ppp (#15285)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - remove console-tools requirement
  - in netfs, start portmap if needed
  - cosmetic cleanups, minor tweaks
  - don't probe USB controllers


author: Matt Wilson <msw@redhat.com>
changelog:
  - kill all the PreTransaction stuff
  - directory ownership cleanups, add more LSB symlinks
  - move all the stuff back in to /etc/rc.d/


author: Bill Nottingham <notting@redhat.com>
changelog:
  - tweak %pre back to a mv (rpm is fun!)
  - do USB initialization before fsck, so keyboard works if it fails


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ifup-ppp: add hooks for demand-dialing PPP
  - functions: use basename of process when looking for its PID file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't create resolv.conf 0600
  - don't run ps as much (speed issues)
  - allow setting of MTU
  - other minor fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - check that LC_ALL/LINGUAS and LANG are set before referencing them in lang.csh
  - fix check for /var/*/news, work around for bug #9140


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - attempt to restore default route if PPP takes it over
  - man page fix for ipcalc
  - shvar cleaning
  - automate maintaining /boot/System.map symlinks


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - improvements in clone device handling
  - better signal handling in ppp-watch
  - yet another attempt to fix those rare PAP/CHAP problems


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fix more possible failed CHAP authentication (with chat scripts)
  - fix ppp default route problem
  - added ppp-watch man page, fixed usernetctl man page
  - make ifup-ppp work again when called from netcfg and linuxconf
  - try to keep ppp-watch from filling up logs by respawning pppd too fast
  - handle all linuxconf-style alias files with linuxconf


author: Bill Nottingham <notting@redhat.com>
changelog:
  - load mixer settings for monolithic sound
  - man page for ppp-watch
  - add ARP variable for ifup
  - some i18n fixes


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fix some failed CHAP authentication
  - fix extremely unlikely, but slightly possible kill-random-process
    bug in ppp-watch
  - allow DNS{1,2} in any ifcfg-* file, not just PPP, and
    add nameserver entries, don't just replace them
  - don't use /tmp/confirm, use /var/run/confirm instead


author: Bill Nottingham <notting@redhat.com>
changelog:
  - assorted brown paper bag fixes
  - check for programs/files before executing/sourcing them
  - control stop-a like magic sysrq


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - ppp-watch now always kills pppd pgrp to make sure dialers are dead,
    and tries to hang up the modem


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - add --remotename option to wvdial code
  - make sure we do not have an earlier version of wvdial that doesn't
    know how handle --remotename
  - make ppp-watch background itself after 30 seconds even if
    connection does not come up, at boot time only, so that a
    non-functional PPP connection cannot hang boot.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - new NFS unmounting from Bill Rugolsky <rugolsky@ead.dsa.com>
  - fix ifup-sl/dip confusion
  - more raid startup cleanup
  - make utmp group 22


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - use new linkname argument to pppd to make if{up,down}-ppp
    reliable -- requires ppp-2.3.9 or higher


author: Bill Nottingham <notting@redhat.com>
changelog:
  - stability fixes for initlog
  - initlog now has a config file
  - add alias speedup from dharris@drh.net
  - move netfs links
  - usleep updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't make module-info, System.map links
  - handle utmpx/wtmpx
  - fix lots of bugs in 4.21 release :)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - clean out /var better
  - let everyone read /var/run/ppp*.dev
  - fix network startup so it doesn't depend on /usr


author: Bill Nottingham <notting@redhat.com>
changelog:
  - load keymaps & console font early
  - fixes for channel bonding, strange messages with non-boot network interfaces


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run linuxconf if /usr isn't mounted
  - set macaddr before bootp
  - zero in the /var/run/utmpx file (gafton)
  - don't set hostname on ppp/slip (kills X)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - doc updates
  - support for SYSFONTACM, other console-tools stuff
  - add net route for interface if it isn't there.
  - fix for a bash/bash2 issue


author: Bill Nottingham <notting@redhat.com>
changelog:
  - Mmm. Must always remove debugging code. before release. *thwap*
  - pump support
  - mount -a after mount -a -t nfs


author: Bill Nottingham <notting@redhat.com>
changelog:
  - bugfixes (ifup-ppp, kill -TERM, force fsck, hwclock --adjust, setsysfont)
  - add initlog support. Now everything is logged (and bootup looks different)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - rc.sysvinit should be working with all kernel versions now
  - requires e2fsprogs (for fsck)
  - set INPUTRC and LESSCHARSET on linux-lat


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - /etc/rc.d/rc: don't run /etc/rc.d/rcN.d/[KS]??foo.{rpmsave,rpmorig} scripts.
  - /etc/rc.d/rc.sysinit: raid startup (Nigel.Metheringham@theplanet.net).
  - /sbin/setsysfont: permit unicode fonts.


author: Erik Troan <ewt@redhat.com>
changelog:
  - ipcalc should *never* have been setgid anything
  - depmod isn't run properly for non-serial numbered kernels


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added lots of linuxconf support.  Should still work on systems that
    do not have linuxconf installed, but linuxconf gives enhanced support.
  - In concert with linuxconf, added IPX support.  Updated docs to reflect it.


author: Erik Troan <ewt@redhat.com>
changelog:
  - touch /var/lock/subsys/kerneld after cleaning out /var/lock/subsys
  - the logic for when  /var/lock/subsys/kerneld is touched was backwards


author: Erik Troan <ewt@redhat.com>
changelog:
  - tried to get /proc stuff right one more time (uses -t nonfs,proc now)
  - added support for /fsckoptions
  - changed 'yse' to 'yes' in KERNELD= line


author: Erik Troan <ewt@redhat.com>
changelog:
  - set domainname to "" if none is specified in /etc/sysconfig/network
  - fix /proc mounting to get it in /etc/mtab


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed network-scripts to allow full pathnames as config files
  - removed some old 3.0.3 pcmcia device handling


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - /var/run/netreport needs to be group-writable now that /sbin/netreport
    is setguid instead of setuid.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added network-functions to spec file.
  - Added report functionality to usernetctl.
  - Fixed bugs I introduced into usernetctl while adding clone device support.
  - Clean up entire RPM_BUILD_ROOT directory in %clean.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Clone device support in network scripts, rc scripts, and usernetctl.
  - Disassociate from controlling tty in PPP and SLIP startup scripts,
    since they act as daemons.
  - Spec file now provides start/stop symlinks, since they don't fit in
    the CVS archive.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - reworked status() to adjust for processes that change their argv[0] in
    the process table.  The process must still have it's "name" in the argv[0]
    string (ala sendmail: blah blah).


author: Donald Barnes <djb@redhat.com>
changelog:
  - added status function to functions along with better killproc
    handling.
  - added /sbin/usleep binary (written by me) and man page
  - changed BuildRoot to /var/tmp instead of /tmp


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - /sbin/netreport sgid rather than suid.
  - /var/run/netreport writable by group root.

  - /etc/ppp/ip-{up|down} no longer exec their local versions, so
    now ifup-post and ifdown-post will be called even if ip-up.local
    and ip-down.local exist.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Support for net event notification:
    Call /sbin/netreport to request that SIGIO be sent to you whenever
    a network interface changes status (won't work for brining up SLIP
    devices).
    Call /sbin/netreport -r to remove the notification request.
  - Added ifdown-post, and made all the ifdown scrips call it, and
    added /etc/ppp/ip-down script that calls /etc/ppp/ip-down.local
    if it exists, then calls ifdown-post.
  - Moved ifup and ifdown to /sbin


author: Erik Troan <ewt@redhat.com>
changelog:
  - Added DHCP support
  - Set hostname via reverse name lookup after configuring a networking
    device if the current hostname is (none) or localhost


author: Erik Troan <ewt@redhat.com>
changelog:
  - Got rid of xargs dependency in halt script
  - Don't mount /proc twice (unmount it in between)
  - sulogin and filesystem unmounting only happened for a corrupt root
    filesystem -- it now happens when other filesystems are corrupt as well


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added MTU for PPP.
  - Put PPPOPTIONS at the end of the options string instead of at the
    beginning so that they override other options.  Gives users more rope...
  - Don't do module-based stuff on non-module systems.  Ignore errors if
    st module isn't there and we try to load it.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Changed ifup-ppp and ifdown-ppp not to use doexec, because the argv[0]
    provided by doexec goes away when pppd gets swapped out.
  - ifup-ppp now sets remotename to the logical name of the device.
    This will BREAK current PAP setups on netcfg-managed interfaces,
    but we needed to do this to add a reasonable interface-specific
    PAP editor to netcfg.


author: Erik Troan <ewt@redhat.com>
changelog:
  - Added usernetctl wrapper for user mode ifup and ifdown's and man page
  - Rewrote ppp and slip kill and retry code
  - Added doexec and man page


author: Nalin Dahyabhai <nalin@redhat.com> 185-10
changelog:
  - don't overwrite an explicitly-configured search base when we're using DNS
    to locate the server (#735375)


author: Nalin Dahyabhai <nalin@redhat.com> 185-9
changelog:
  - add Ross Tyler's patch to always require authentication during password
    change requests for expired passwords, so that modules which check password
    quality (pam_cracklib) will always have the old password on-hand to examine
    as well (#688747, upstream #431)


author: Nalin Dahyabhai <nalin@redhat.com> 185-6
changelog:
  - add a proposed patch to avoid losing password expiration warnings relayed
    via policy controls when expiration is less than a day away (based on
    patch from Masahiro Matsuya, #637190, upstream #407)


author: Nalin Dahyabhai <nalin@redhat.com> 185-5
changelog:
  - require the pam package explicitly, so that /%{_lib}/security won't be
    an orphaned directory (part of #553857)


author: Nalin Dahyabhai <nalin@redhat.com> 185-3
changelog:
  - make mentions of pam_ldap.conf and %{name}.conf more consistent (rcritten)
  - drop no-longer-used .versions file


author: Nalin Dahyabhai <nalin@redhat.com> 185-1
changelog:
  - split out pam_ldap as a separate source package, update URL, change
    %{version} to reflect pam_ldap's versioning rather than nss_ldap's
  - set config file to /etc/pam_ldap.conf, rootbindpw file /etc/pam_ldap.secret
  - drop %post bits that care about upgrades from RHL 7.2
  - drop %post/%postun calls to ldconfig
  - drop buildrequires on openssl-devel, krb5-devel, cyrus-sasl-devel
  - update to version 185
    - drop now-obsolete patches to the rebind callback
  - add %pre logic for the upgrading-from-a-non-split-nss_ldap case


author: Nalin Dahyabhai <nalin@redhat.com> 264-8
changelog:
  - add "rtkit" and "pulse" to the list of users whom we default to ignoring
    for looking up supplemental groups (Gordon Messmer, part of #186527)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add but don't apply proposed patch for upstream #399: depending on the
    server to enforce the expected case-sensitivity opens up corner cases


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - revert most of the previous round of changes: splitting pam_ldap off
    won't be helpful in the long term if it, too, is eventually going to conflict
    with the nss-ldapd package


author: Nalin Dahyabhai <nalin@redhat.com> - 264/184-100
changelog:
  - split pam_ldap off into a separate binary package
  - require /%{_lib}/security/pam_ldap.so to pull in pam_ldap on upgrades
  - require our configuration file to come from somewhere
  - remove some cruft
  - move the %postun that fixes up pam configs to the pam_ldap package


author: Nalin Dahyabhai <nalin@redhat.com> - 264-1
changelog:
  - update to 264, pulling in Luke's patch for #248, among others
  - add optional checking of nsRole to pam_ldap (#202135, upstream #382)


author: Nalin Dahyabhai <nalin@redhat.com> - 263-1
changelog:
  - update to 263, pulling in Luke's patch for #374 (#445972) which doesn't
    leak the result message, and the fix for #376 (#466794)


author: Nalin Dahyabhai <nalin@redhat.com> - 261-5
changelog:
  - pam_ldap: don't crash when we have to follow a referral while looking up
    information about the authenticating user and we're using SASL, which
    affected 259-1 and later (patch from Paul P Komkoff Jr, #469061)


author: Nalin Dahyabhai <nalin@redhat.com> - 261-4
changelog:
  - add missing local-to-network conversion on port numbers when looking up
    services, which affected 259-1 and later (#450634)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - return 0 (fail) instead of 1 (success) when setnetgrent() is called for
    a netgroup which doesn't actually exist or which has no members (#445972,
    upstream #374)


author: Nalin Dahyabhai <nalin@redhat.com> - 261-2
changelog:
  - add libssl and libcrypto to the list of libraries against which we link
    statically to avoid running into symbol collisions at run-time (#446860)


author: Nalin Dahyabhai <nalin@redhat.com> - 259-3
changelog:
  - try to work around not having had a populated resolver configuration earlier,
    but needing to use its data when we're asked to look up something (#442272)


author: Nalin Dahyabhai <nalin@redhat.com> - 259-2
changelog:
  - apply updated logic for finding libresolv to pam_ldap's build setup
  - add gdm,polkituser to default nss_initgroups_ignoreusers list


author: Nalin Dahyabhai <nalin@redhat.com> - 259-1
changelog:
  - update to nss_ldap 259
  - nss_ldap: update to revised proposed patch for #248
  - pam_ldap: replace two patches to handle password changing against replicas
    with Ralf Haferkamp's revision, which also sends the policy control with the
    initial password change request
  - pam_ldap: enable patch to stop also trying to change password using
    ldap_modify after trying to change it with an exop when the configuration
    is "pam_password exop_send_old"


author: Nalin Dahyabhai <nalin@redhat.com> - 257-5
changelog:
  - nss_ldap: go back to linking with static libldap and liblber so that we
    don't get unresolved references which may be resolved by a different libldap
    used by the calling application


author: Nalin Dahyabhai <nalin@redhat.com> - 257-1
changelog:
  - update to nss_ldap 257
  - look harder when we're looking for symbols provided by the resolver library
    (upstream #337)
  - clarify license (both under LGPLv2 or later)


author: Nalin Dahyabhai <nalin@redhat.com> - 254-2
changelog:
  - resize the supplemental GID array when it gets too large and an array size
    limit isn't set (Gavin Romig-Koch, #232713)


author: Nalin Dahyabhai <nalin@redhat.com> - 254-1
changelog:
  - update to nss_ldap 254
  - use the upstream version scripts
  - stop trying to isolate us from the apps by building with static libraries,
    though that means we're tied to /usr now
  - move the nsswitch module to %{_libdir}; its deps aren't available without
    a mounted /usr anyway
  - make rpmlint happier


author: Nalin Dahyabhai <nalin@redhat.com> - 253-1
changelog:
  - update to 253
    - closes a crasher when glibc's initgroups backend passes in a zero-length,
      NULL buffer to start
    - includes lookup_nssldap updates for autofs


author: Nalin Dahyabhai <nalin@redhat.com> - 251-2
changelog:
  - configure with --enable-configurable-krb5-ccname-gssapi instead of
    --enable-configurable-krb5-ccname, the latter of which doesn't actually
    do anything (Howard Wilkinson)


author: Nalin Dahyabhai <nalin@redhat.com> - 250-5
changelog:
  - adjust nss_ldap's makefile rule to more correctly deduce the right soversion
    for nsswitch modules (#191927)


author: Nalin Dahyabhai <nalin@redhat.com> - 248-2
changelog:
  - set "nss_initgroups_ignoreusers root,ldap" in the default configuration
    file, so that nss_ldap will assume that there are no supplemental groups
    for this user to be found in the directory server (#180657)


author: Nalin Dahyabhai <nalin@redhat.com> 245-1
changelog:
  - update to nss_ldap 245
  - add patch from upcoming 246 release to change the placeholder used when
    userPassword is unreadable from "x" to "*" (upstream #240)


author: Nalin Dahyabhai <nalin@redhat.com> 239-1
changelog:
  - update to nss_ldap 239
  - provide a libnss_ldap.so link for directly linking with nss_ldap, as glibc
    does for the modules it provides


author: Nalin Dahyabhai <nalin@redhat.com> 234-5
changelog:
  - update to pam_ldap 180 to get fix for vulnerability from parsing password
    policy controls which don't contain error numbers (#166164, CAN-2005-2497)


author: Nalin Dahyabhai <nalin@redhat.com> 234-4
changelog:
  - override glibc version detection so that mismatches between the versions of
    32- and 64-bit glibc don't result in our %install installing the module
    with a different name than the 'make install' target uses


author: Nalin Dahyabhai <nalin@redhat.com> 234-3
changelog:
  - fix type mismatch bug in patch for using non-blocking start_tls in
    preference to the blocking version when it's available (#156582)


author: Nalin Dahyabhai <nalin@redhat.com> 232-2
changelog:
  - prefer using libraries in %{_libdir}/nss_ldap-openldap if we find any
  - use ldap_start_tls in preference to ldap_start_tls_s, if found, so that
    we can time out if the server has gone catatonic


author: Nalin Dahyabhai <nalin@redhat.com> 227-1
changelog:
  - update to version 227
  - force nss_ldap to mimic pam_ldap's behavior when the tls_checkpeer setting is
    unconfigured in ldap.conf


author: Nalin Dahyabhai <nalin@redhat.com> 226-3
changelog:
  - fix misleading doc comment in /etc/ldap.conf -- the checkpeer setting follows
    libldap's default, which is dependent on the version of OpenLDAP which which
    this package is linked (part of #143622)


author: Nalin Dahyabhai <nalin@redhat.com> 226-1
changelog:
  - update to nss_ldap 226, pam_ldap 176
  - rework pam_ldap dns autoconfig patch
  - require automake instead of automake15, because autoreconf uses the current
    version (#129877)


author: Nalin Dahyabhai <nalin@redhat.com> 212-1
changelog:
  - update to 212, pam_ldap 167
  - link nss_ldap with libgssapi_krb5, the static libsasl2 includes the gssapi
    mech, at least for now, and we pick up its unresolved symbols at link-time
  - fix out-of-bounds error at initialization-time (part of #101269)
  - include pam_ldap's authorization schema files for slapd as a doc file


author: Nalin Dahyabhai <nalin@redhat.com> 207-5
changelog:
  - fix objectclass and attribute mapping, which failed due to uninitialized
    fields in mapping index structures, fixed upstream in 210 (#110547)


author: Nalin Dahyabhai <nalin@redhat.com> 207-3
changelog:
  - link dynamically with libcom_err if it isn't in /usr/kerberos/%{_lib} (which
    we assume means that it's in /%{_lib})


author: Nalin Dahyabhai <nalin@redhat.com> 207-1
changelog:
  - update to build with newer OpenLDAP
  - add README.TLS to remind people that in order for TLS support to be usable,
    the server's certificate has to pass validation checks made by the client


author: Nalin Dahyabhai <nalin@redhat.com> 202-4
changelog:
  - rework static link order to account for libssl requiring libkrb5
  - force assembly locking on %ix86 systems
  - link with libz, which libssl also requires


author: Nalin Dahyabhai <nalin@redhat.com> 202-2
changelog:
  - apply DB patches from sleepycat.com
  - correctly point nss_ldap at the bundled DB library
  - create /%{_lib} instead of /lib to install into


author: Nalin Dahyabhai <nalin@redhat.com> 202-1
changelog:
  - update to nss_ldap 202, pam_ldap 153
  - update DB from 4.0.14 to 4.1.24.NC
  - try to address multilib path changes


author: Nalin Dahyabhai <nalin@redhat.com> 188-0.6
changelog:
  - rebuild for RHL 6.2
  - change dependency on pam-devel to /usr/include/security/pam_modules.h
  - drop build deps on cyrus-sasl-devel and openldap >= 2.x
  - modify pam_ldap versions file so that binutils from RHL 6.2 can parse it
  - update to nss_ldap 188
  - update to pam_ldap 144


author: Nalin Dahyabhai <nalin@redhat.com> 184-1
changelog:
  - update to pam_ldap 138
  - enable rfc2307bis schema support
  - version the pam_ldap module
  - add the proper soname to the nss_ldap module and remove the symlink
  - add a trigger to run ldconfig again when an upgrade removes the symlink,
    which used to be in this package (doh!)
  - fix the symlink from %{_libdir} to the module (for linking directly to it)


author: Nalin Dahyabhai <nalin@redhat.com> 173-1
changelog:
  - update to nss_ldap 173, which includes doc updates
  - update to pam_ldap 133, which simplifies the dnsconfig patch quite a bit


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - link statically with libldap again, because libldap is linked with other
    shared libraries now (keeping us from having files in /usr open when we
    go to shut the system down)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 172, fixing schema mapping code
  - update to pam_ldap 124, incorporating TLS default option and doc fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 164, fixing the timeout problem correctly
  - update to pam_ldap 122, fixing escaping of user name in filters


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 163, fixing the timeout problem
  - update to pam_ldap 120
  - add gdbm-devel as a buildprereq, because we list it in $LIBS (#48999)
  - add db3-devel as a buildprereq (#48999)
  - add pam-devel as a buildprereq (#48999)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make nss_ldap fail when attempting to startup TLS fails, because that's what
    we do when LDAPS doesn't work (and what pam_ldap does already)
  - add DNS autoconfiguration to pam_ldap


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 149, minor fixes for compile glitches
  - update to pam_ldap 105, minor fixes (as above) and handles shadow expiration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 138, which folds in our patch for initgroups
  - change the default search base in ldap.conf to dc=example,dc=com


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - version the NSS module so that it works properly with programs which have
    been linked statically to a different version of an LDAP library, like
    Netscape Communicator


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - BuildPrereq gdbm-devel
  - pass RPM_OPT_FLAGS as CFLAGS to %configure
  - if protocol version is 2, explicitly set protocol version to 3 before trying
    to start TLS
  - add STARTTLS support to nss_ldap
  - work around a build-time problem on ia64


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 122
  - link statically with libsasl, require the first devel package that supplied it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to pam_ldap 67 to fix a bug in template user code
  - convert symlink in /usr/lib to a relative one (#16132)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - use the ldap.conf file as an external source
  - don't forcibly build the support for version 3
  - imported the default spec file from the tarball and fixed it up for RH 6.1


author: Than Ngo <than@redhat.com> - 2.4-1
changelog:
  - update to 1.0.7pre43, changed Roman glyphs in all fonts back
    to original metrics. bz#243180, bz#138896, bz#140584
  - cleanup BR, bz#227297
  - drop chkfontpath dependency and use the catalogue font path mechanism


author: Than Ngo <than@redhat.com> 2.3-5
changelog:
  - fix the mkfontdir issue for modular X
  - remove unneeded -e option from mkfontdir
  - add Prereq on mkfontdir


author: Than Ngo <than@redhat.com> 2.2-1
changelog:
  - Upgrade to upstream version 1.0.7pre26, bug #122500
  - drop NimbusRomNo9L-Medi* fonts that are included in pre26


author: Owen Taylor <otaylor@redhat.com> 2.1-1
changelog:
  - Upgrade to upstream version 1.0.7pre22
  - Massive cleanups to fonts.dir/fonts.scale handling (use mkfontscale
    instead of fonts.scale from the package, etc.)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Newer upstream version
  - Fix accidental revert of urw-fontspecific => adobe-fontspecific change
  - Tweak hints in "Nimbus Sans Regular L" a bit.


author: Than Ngo <than@redhat.com> 2.0-19
changelog:
  - update urw fonts
  - add missing ZapfDingbats font (bug #65101, #65523)
  - fixed metric troubles (bug #65522)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - use adobe-fontspecific instead of urw-fontspecific encoding name for 
    symbol font.  Fixes some java issues.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - added missing fonts.dir, fonts.scale, %post, %postun using chkfontpath
  - changed foundary from Adobe (which was a lie) to URW.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - eliminated section that adds to XF86Config
  - changed fonts to reside in /usr/share/fonts/default/URW, so they can be
    shared between X and Ghostscript (and other, future programs/applications)


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-68.2.2.el6uek]
changelog:
  - crypto: aesni - fix memory usage in GCM decryption (Stephan Mueller)  [Orabug: 21077385]  {CVE-2015-3331}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-68.2.1.el6uek]
changelog:
  - xen/pciback: Don't disable PCI_COMMAND on PCI device reset. (Konrad Rzeszutek Wilk)  [Orabug: 20807438]  {CVE-2015-2150} 
  - xen-blkfront: fix accounting of reqs when migrating (Roger Pau Monne)  [Orabug: 20860817]  
  - Doc/cpu-hotplug: Specify race-free way to register CPU hotplug callbacks (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - net/iucv/iucv.c: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - net/core/flow.c: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - mm, vmstat: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - profile: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - trace, ring-buffer: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - hwmon, via-cputemp: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - hwmon, coretemp: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - octeon, watchdog: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - oprofile, nmi-timer: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - intel-idle: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - drivers/base/topology.c: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - acpi-cpufreq: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - scsi, fcoe: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - scsi, bnx2fc: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - scsi, bnx2i: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - arm64, debug-monitors: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - arm64, hw_breakpoint.c: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - x86, kvm: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - x86, oprofile, nmi: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - x86, pci, amd-bus: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - x86, hpet: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - x86, intel, cacheinfo: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - x86, amd, ibs: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - x86, therm_throt.c: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - x86, mce: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - x86, intel, uncore: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - x86, vsyscall: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - x86, cpuid: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - x86, msr: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - powerpc, sysfs: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - sparc, sysfs: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - s390, smp: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - s390, cacheinfo: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - arm, hw-breakpoint: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - ia64, err-inject: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - ia64, topology: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - ia64, palinfo: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - CPU hotplug, perf: Fix CPU hotplug callback registration (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - CPU hotplug: Provide lockless versions of callback registration functions (Srivatsa S. Bhat)  [Orabug: 20917697]  
  - isofs: Fix unchecked printing of ER records (Jan Kara)  [Orabug: 20930551]  {CVE-2014-9584} 
  - KEYS: close race between key lookup and freeing (Sasha Levin)  [Orabug: 20930548]  {CVE-2014-9529} {CVE-2014-9529} 
  - mm: memcg: do not allow task about to OOM kill to bypass the limit (Johannes Weiner)  [Orabug: 20930539]  {CVE-2014-8171} 
  - mm: memcg: do not declare OOM from __GFP_NOFAIL allocations (Johannes Weiner)  [Orabug: 20930539]  {CVE-2014-8171} 
  - fs: buffer: move allocation failure loop into the allocator (Johannes Weiner)  [Orabug: 20930539]  {CVE-2014-8171} 
  - mm: memcg: handle non-error OOM situations more gracefully (Johannes Weiner)  [Orabug: 20930539]  {CVE-2014-8171} 
  - mm: memcg: do not trap chargers with full callstack on OOM (Johannes Weiner)  [Orabug: 20930539]  {CVE-2014-8171} 
  - mm: memcg: rework and document OOM waiting and wakeup (Johannes Weiner)  [Orabug: 20930539]  {CVE-2014-8171} 
  - mm: memcg: enable memcg OOM killer only for user faults (Johannes Weiner)  [Orabug: 20930539]  {CVE-2014-8171} 
  - x86: finish user fault error path with fatal signal (Johannes Weiner)  [Orabug: 20930539]  {CVE-2014-8171} 
  - arch: mm: pass userspace fault flag to generic fault handler (Johannes Weiner)  [Orabug: 20930539]  {CVE-2014-8171} 
  - selinux: Permit bounded transitions under NO_NEW_PRIVS or NOSUID. (Stephen Smalley)  [Orabug: 20930501]  {CVE-2014-3215} 
  - IB/core: Prevent integer overflow in ib_umem_get address arithmetic (Shachar Raindel)  [Orabug: 20799875]  {CVE-2014-8159} {CVE-2014-8159}


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-22
changelog:
  - resolves: #996134
    fixed umask command in sa1 script
  - resolves: #967386
    documented and partialy fixed regression caused by sysstat-9.0.4-diskstats.patch


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-21
changelog:
  - resolves: #838914
    keep log files for 28 days instead of 7
  - resolves: #916396
    fixed buffer overflow in iostat program when inspecting encrypted disks
  - resolves: #826399, #826403, #804534
    added support for persistent device names
  - resolves: #888823
    increased NR_CPUS and NR_IRQS constants
  - resolves: #820992
    made init script LSB
  - resolves: #850810
    added iostat option to report interval statistics in first report


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-20
changelog:
  - related: #693398
    added note about -S option to the sadc manual page
  - resolved: #801453
    fixed return code of sa2 script
  - resolved: #801702
    increased IOC_MAXMINOR constant for block devices


author: Peter Schiffer <pschiffe@redhat.com> - 9.0.4-19
changelog:
  - resolves: #766431
    added support for symlinks to the iostat command
  - resolves: #771594
    updated reading /proc/diskstats file according to the kernel
  - resolves: #700797
    fixed minor resource leak
  - resolves: #694759
    fixed iostat command does not reporting shares with long names
  - resolves: #690562
    fixed cifsiostat does not report number of open files correctly
  - resolves: #674648
    added new option -P ON to mpstat, showing only online cpu in statistics
  - resolves: #693398
    updated sysstat configuration


author: Ivana Hutarova Varekova <varekova@redhat.com> - 9.0.4-16
changelog:
  - Related: #592283
    improved support of cifs mount points (mounting and unmounting during
    cifsiostat run)


author: Ivana Hutarova Varekova <varekova@redhat.com> - 9.0.4-14
changelog:
  - Resolves: #637705
    'sar -u ALL' doesn't report an correct value
  - Resolves: #631841
    fix the tickless kernel output of sar command
  - Resolves: #592283
    add CIFS support to iostat


author: Ivana Varekova <varekova@redhat.com> - 9.0.4-3
changelog:
  - fix init script - add INIT INFO flags (#522740)
    and add condrestart, try-restart and force-reload (#522743)


author: Ivana Varekova <varekova@redhat.com> - 8.0.2-2
changelog:
  - change license tag
  - remove sysstat.crond source (add -d)
  - remove obsolete sysconfig file
  - spec file cleanup


author: Ivana Varekova <varekova@redhat.com> - 8.0.1-1
changelog:
  - update to 8.0.1
  - remove useless patches
  - spec file cleanup
  - remove smp build flag (ar problem)
  - add libdir flags


author: Charles Bennett <ccb@redhat.com> 5.0.5-5.fc
changelog:
  - bring in filename and append-msg patch
  - append-msg adds verbose text for when saNN data file cpu count
  -  does not match cpu count on the currently running system


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - version 5.0.5
  - remove some obsolete patches
  - update statreset, overrun, lib64init patches
  - renumber patches


author: Alan Cox <alan@redhat.com>
changelog:
  - Fix spew of crap to console at startup
  - Fix order of startup (#124035)
  - Fix array overrun (#117182)
  - Fix interrupt buffer sizing (caused bogus irq info)


author: Nils Philippsen <nphilipp@redhat.com> 5.0.0-0.6
changelog:
  - let user configure how long to keep logs through /etc/sysconfig/sysstat
    (#81294)
  - reset stats at system boot (#102445)


author: Nils Philippsen <nphilipp@redhat.com> 5.0.0-0.4
changelog:
  - fix insecure tmp files in scripts (#78212)
  - require tools needed in scripts
  - use IFNAMSIZ from {_includedir}/linux/if.h for maximum interface length


author: Trond Eivind Glomsrød <teg@redhat.com> 4.0.3-2
changelog:
  - Do the daily sa2 run just before midnight, not at 4AM... you'd 
    only get 4 hours worth of data that way (#63132)


author: Trond Eivind Glomsrød <teg@redhat.com> 4.0.2-1
changelog:
  - 4.0.2
  - the kernel patch for extended statistics is in, don't say it needs
    applying in the man page


author: Preston Brown <pbrown@redhat.com>
changelog:
  - Summarize previous day's activity with sa2, not current day (which is only 4 hours of data when it gets run) (#24820)
  - upgrade to 3.3.4 for full 2.4 compatibility and improved iostat


author: Preston Brown <pbrown@redhat.com>
changelog:
  - make sure disk accounting is enabled to fix iostat -l, -p (#16268)
  - crontab entries were missing the user (root) to run as (#18212)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - packaged for Winston
  - change va patch to indicate kernel is not patched for iostat accounting.
    re-enable if our stock kernel gets this patch.
  - upgrade to 3.2.
  - install crontab entry.


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-0.3
changelog:
  - Rebase RHEL 6.7.z to NSS-util 3.21 in preparation for Firefox 45
  - Resolves: Bug 1299874
  - Update upstream patch for CVE-2016-1950


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.149.7
changelog:
  - Fix invalid file descriptor reuse while sending DNS query
    (#1207995, CVE-2013-7423).
  - Fix buffer overflow in gethostbyname_r with misaligned buffer
    (#1209375, CVE-2015-1781).


author: Denys Vlasenko <dvlasenk@redhat.com> - 1:1.15.1-13
changelog:
  - Resolves: #790335 "busybox various flaws" including:
    "buffer underflow in decompression"
    "udhcpc insufficient checking of DHCP options"


author: Denys Vlasenko <dvlasenk@redhat.com> - 1:1.15.1-12
changelog:
  - Backport 'set -o pipefail' support
  - Resolves: #782018
  - Add btrfs support to findfs and related applets
  - Resolves: #751927


author: Denys Vlasenko <dvlasenk@redhat.com> - 1:1.15.1-11
changelog:
  - Fix cpio applet to print "N blocks" to stderr, not stdout
  - Change .config, making hwclock read adjtime from correct location:
    /etc/adjtime
  - Fix awk to correctly interpret numbers with leading zeros: 02.345
  - Resolves: #615391, #621853, #633961


author: Milos Jakubicek <xjakub@fi.muni.cz> - 1:1.13.2-4
changelog:
  - Fixing FTBFS on i586/x86_64/ppc, ppc64 still an issue:
  - Updated uClibc to 0.9.30.1, subsequently:
  - Removed uClibc-0.9.30 patch (merged upstream).
  - Added uClibc-0.9.30.1-getline.patch -- prevents conflicts with getline()
    from stdio.h
  - Temporarily disable C99 math to bypass ppc bug, see https://bugs.uclibc.org/show_bug.cgi?id=55


author: Ivana Varekova <varekova@redhat.com> - 1:1.1.1-1
changelog:
  - update to 1.1.1
  - fix CVE-2006-1058 - BusyBox passwd command 
    fails to generate password with salt (#187386)
  - add -minimal-toc option
  - add RPM_OPT_FLAGS
  - remove asm/page.h used sysconf command to get PAGE_SIZE
  - add overfl patch to aviod Buffer warning


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - update to 0.60.2
  - include more pieces for the anaconda version so that collage can go away
  - make the mount in busybox.anaconda default to -onolock


author: Adam Jackson <ajax@redhat.com> 1.2.5-6.2
changelog:
  - Drop vbetool, should not be needed.  Video resume is supported through
    KMS or not at all. (#545808)
  - Drop radeontool, same logic.


author: Till Maas <opensource@till.name> - 1.2.5-6
changelog:
  - filesystem subpackage contents are now provided by filesystem (Red Hat
    Bugzilla 515362) filesystem-2.4.28-1.fc12


author: Richard Hughes <rhughes@redhat.com> - 1.2.5-1
changelog:
  - New upstream version
  - If running on a system that is using KMS, we will refuse to handle any video
    quirks passed to us by HAL, and we will not chvt to an empty console.
  - Fix a longstanding bug in tuning scheduler powersaving knobs on SMT systems.


author: Richard Hughes <rhughes@redhat.com> - 1.2.4-1
changelog:
  - Update to 1.2.4
  - Fixes a glitch in module unloading
  - Numerous small usability and debugging improvements


author: Richard Hughes <rhughes@redhat.com> - 1.2.2.1-1
changelog:
  - Update to 1.2.2.1
  - Supports automatically pulling quirks from HAL and has the ability to save
    the last working set of quirks to an .fdi file.


author: Richard Hughes <rhughes@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0
  - The core hook-running machinery will now abort running hooks of one fails,
    and the front-end scripts will return a failure error code if hook-running
    was aborted.


author: Till Maas <opensource@till.name> - 1.1.2.2-2
changelog:
  - %pre and %post scriptlets should not be needed anymore, old
    config files should be already moved in every supported release
    and the selinux context for the logfile should be restored by
    rpm
  - remove pcitulils BR, it was needed for vbetool, which is in a
    separate package now
  - substitute %{__rm} macros for uniform macro usage


author: Richard Hughes <rhughes@redhat.com> - 1.1.0-8
changelog:
  - Rip out all the consolehelper and PAM stuff - users are not meant to be
    running these tools directly and it's a massive change from upstream.


author: Till Maas <opensource till name> - 1.1.0-5
changelog:
  - remove double %dir %{_libdir}/pm-utils
  - update pm-utils-99hd-apm-restore to work with current pm-utils release
    Red Hat Bugzilla: #442294
  - move config file for hd apm restore away from config.d, which is only used
    for pm-utils internal config anymore
  - own /var/run/pm-utils/ and create storage/locks subdirs (may be
    needed for selinux)
  - make sure an empty logfile is created after install (touch -a ...)
  - sort %files
  - make Source0: an URL
  - remove Conflicts: bluez utils, all supported Fedora releases ship
    already a newer version
  - remove unused BR: hal-devel, dbus-devel, pkgconfig, docbook-utils


author: Till Maas <opensource till name> - 0.99.4-14
changelog:
  - add pm-utils-bugreport-info.sh script to collect information for bugreports
  - require Hal (RH #428452)


author: Till Maas <opensource till name> - 0.99.4-12
changelog:
  - remove ExclusiveArch, because it contains all supported archs
    (in case an arch schould be excluded, please use ExcludeArch)
  - improve readability of usermode setup
  - remove pm-restart pm-shutdown from usermode setup, because
    there are no such binaries
  - list more files in %files explicit to make it obvious when
    there are changes in the distributed package
  - add .conf suffix to oldconfig files


author: Till Maas <opensource till name> - 0.99.4-10
changelog:
  - enhance hd-apm-restore and add a config file
  - fix source-definition for hd-apm-restore
  - add hook suffix for hook script


author: Till Maas <opensource till name> - 0.99.4-3
changelog:
  - remove unused patch (vidhooks)
  - add patch to keep logfile (RH #237840 (f7), #238068 (devel)), 
    to keep selinux context
  - simplify spec
  - restore selinux context of logfile in %post 
  - use rpmmacros more often


author: Peter Jones <pjones@redhat.com> - 0.99.4-1
changelog:
  - Merge new upstream
  - remove pm/power.d/laptop-tools
  - add --quirk-reset-brightness (needed for the Fujitsu Lifebook S7110)


author: Till Maas <opensource till name> - 0.99.3-12
changelog:
  - Adjust %files to own /etc/pm/ and /usr/lib/pm-utils/ (#233906)
  - remove (C|CXX|F)FLAGS definitions, they are already in %configure
  - remove Core in Summary tag
  - add URL for pm-utils
  - add %{?arm} to ExclusiveArch (#245463)
  - remove vbetool and require it (it is a separate package now)
  - remove radeontool and require it (it is a separate package now)
  - Update License Tag
  - cleanup buildrequires
  - clear %setup


author: Adam Jackson <ajax@redhat.com> 0.99.3-11
changelog:
  - Install (not just build) vbetool and radeontool on x86_64 too
  - Explicitly list files under %_sbindir, so they don't drop away again
  - Light spec cleanups


author: Phil Knirsch <pknirsch@redhat.com> - 0.99.3-6
changelog:
  - Fixed missing builds for vbetool and radeontool for some archs (#241469)
  - Fixed typo in functions where wrong variable was used (#241633)


author: Phil Knirsch <pknirsch@redhat.com> - 0.19.1-4
changelog:
  - Start/stop correct services in 10NetworkManager hook (#215253)
  - Fixed check for /sys/power/disk and /sys/power/state (#214407)
  - Added proper error messages in case /sys/power/disk or /sys/power/state are
    missing (#215386)
  - Removed service calls and module load/unload for bluetooth hook (#213387)
  - Added hook file to restore the sysfont after resume (#215391)
  - Added the possibility to disable hibernate and suspend completely via the
    config file (#216459)
  - Symlinked the config file to /etc/sysconfig/power-management (#216459)
  - Fixed pm-powersave permission check bug (#222819)
  - Small specfile cleanups


author: Peter Jones <pjones@redhat.com> - 0.19.1-3
changelog:
  - Disable bluetooth suspend/reusme hook by default; the kernel modules seem
    to support this correctly these days.


author: Peter Jones <pjones@redhat.com> - 0.19.1-1
changelog:
  - Hopefully fix Centrino ThinkPad suspend+resume
  - Hopefully fix Intel Mac Mini/MacBook suspend+resume


author: Jeremy Katz <katzj@redhat.com> - 0.19-3
changelog:
  - doing the vbestate save/restore on intel video with the modesetting 
    intel xorg driver is broken.  so don't do it.


author: Peter Jones <pjones@redhat.com> - 0.19-1
changelog:
  - update from CVS
  - move pam and consolehelper stuff here.
  - move video hooks here since HAL isn't ready


author: Peter Jones <pjones@redhat.com> - 0.17-1
changelog:
  - add more helper functions
  - rework things that were forking an extra subshell
  - fix the suspend lock
  - work around bluetooth/usb suspend wackiness


author: Peter Jones <pjones@redhat.com> - 0.16-1
changelog:
  - rework the difference between hibernate and suspend; get rid of PM_MODE
  - add 00clear script
  - move default_resume_kernel from "functions" to 01grub's hibernate section


author: Phil Knirsch <pknirsch@redhat.com> - 0.13-1
changelog:
  - Revert last changes for ATI graphics chips as they seem to cause more
    problems than they solved.


author: Jeremy Katz <katzj@redhat.com> - 0.11-1
changelog:
  - fix display on resume with nvidia graphics
  - add infrastructure to tell what pm-util is running; don't resume 
    video on return from hibernate as the BIOS has already re-initialized it


author: Phil Knirsch <pknirsch@redhat.com> - 0.10-1
changelog:
  - Added missing pciutils-devel BuildRequires (#182566) 
  - Fixed missing vbestata save/restore calls for video suspend/resume (#182167, 
    - Renamed hook scripts to allow local pre and post inserts (#179421)
  - Added support for blinking led lights on Thinkpad Laptops during suspend
    (#179420)
  - Added pm-powersave script for powersaving via HAL (#169054)
  - Added symlinks for pm-shutdown and pm-restart (#165953)


author: Jeremy Katz <katzj@redhat.com> - 0.09-1
changelog:
  - Remove button module on suspend
  - Set default kernel in grub to current one when hibernating 
    so that resume works


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-68.3.5.el6uek]
changelog:
  - KVM: x86: SYSENTER emulation is broken (Nadav Amit)  [Orabug: 21502739]  {CVE-2015-0239} {CVE-2015-0239} 
  - fs: take i_mutex during prepare_binprm for set[ug]id executables (Jann Horn)  [Orabug: 21502254]  {CVE-2015-3339} 
  - eCryptfs: Remove buggy and unnecessary write in file name decode routine (Michael Halcrow)  [Orabug: 21502065]  {CVE-2014-9683}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-68.3.4.el6uek]
changelog:
  - ipv6: Don't reduce hop limit for an interface (D.S. Ljungmark)  [Orabug: 21444790]  {CVE-2015-2922} 
  - ipv4: Missing sk_nulls_node_init() in ping_unhash(). (David S. Miller)  [Orabug: 21444687]  {CVE-2015-3636}


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [3.8.13-68.3.3.el6uek]
changelog:
  - x86/asm/entry/64: Remove a bogus 'ret_from_fork' optimization (Andy Lutomirski)  [Orabug: 21308309]  {CVE-2015-2830} 
  - x86, mm/ASLR: Fix stack randomization on 64-bit systems (Hector Marco-Gisbert)  [Orabug: 21307919]  {CVE-2015-1593} {CVE-2015-1593}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-68.3.2.el6uek]
changelog:
  - x86_64, vdso: Fix the vdso address randomization algorithm (Andy Lutomirski)  [Orabug: 21226729]  {CVE-2014-9585} 
  - isofs: Fix infinite looping over CE entries (Jan Kara)  [Orabug: 21225975]  {CVE-2014-9420} 
  - x86_64, switch_to(): Load TLS descriptors before switching DS and ES (Andy Lutomirski)  [Orabug: 21225937]  {CVE-2014-9419}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-68.3.1.el6uek]
changelog:
  - xen-netfront: use correct linear area after linearizing an skb (David Vrabel)  [Orabug: 21209908]  
  - sched: Prevent divide by zero when cpu power calculation is 0 (Todd Vierling)  [Orabug: 21123125]  
  - crypto: aesni - fix memory usage in GCM decryption (Stephan Mueller)  [Orabug: 21077385]  {CVE-2015-3331}


author: Behdad Esfahbod <besfahbo@redhat.com> - 1.15.4-1
changelog:
  - Update to 1.15.4
  - [Build]Require libthai[-devel]
  - Require pkgconfig in -devel
  - Remove "static libs" from -devel description, since we don't ship them.


author: Behdad Esfahbod <besfahbo@redhat.com> - 1.15.3-4
changelog:
  - Undo the posttrans change.  That's a no no.  We now regenerate the module
    file in postun if there are any other pango versions left.  This should
    take care of the problem in the future.


author: Behdad Esfahbod <besfahbo@redhat.com> - 1.15.3-3
changelog:
  - Move pango.modules generation to posttrans, to make sure modules available
    in an older version but not this one are removed.
  - Resolves #222217


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-7
changelog:
  - Fix problem with pango_layout_get_attributes returning one too few items
    (Needed to fix problems mentioned in #135656, 
    http://bugzilla.gnome.org/show_bug.cgi?id=155912)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-5
changelog:
  - Fix problem in the last patch where we weren't getting the metrics from the 
    right font description (#136428, Steven Lawrance)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-4
changelog:
  - Move place where we compute fontset metrics to fix problems with line 
    height in CJK locales (#131218)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-2
changelog:
  - Add patch from CVS to fix display of U+3000 (#132203,  
    reported upstream by Suresh Chandrasekharan, Federic Zhang)


author: Owen Taylor <otaylor@redhat.com> 1.4.0-2
changelog:
  - Fix location for modules file on ppc/ppc64 (#114399)
  - Make the spec file check to avoid further mismatches


author: Owen Taylor <otaylor@redhat.com> 1.2.5-3.0
changelog:
  - Package pango-querymodules as pango-querymodules-{32,64}; look for 
    pango.modules in an architecture-specific directory.
    (Fixes #111511, Justin M. Forbes)


author: Tim Powers <timp@redhat.com> 1.2.1-3
changelog:
  - remove deps on Xft and Xft-devel since XFree86 no longer has the
    virtual prvodes. Instead, require XFree86-devel > 4.2.99


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Patch from CVS to synthesize GDEF tables for fonts
    without them, like the Kacst fonts in fonts-arabic


author: Havoc Pennington <hp@redhat.com>
changelog:
  - explicitly require pangoxft to be built, so we catch situations such
    as xft.pc moving to /usr/X11R6
  - also add /usr/X11R6/lib/pkgconfig to PKG_CONFIG_PATH as a temporary 
    hack


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fix linked list manipulation problem that was causing hang for anaconda
  - Fix warning from loading mini-fonts with context == NULL


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Remove fixed-ltmain.sh, relibtoolize; to fix relink problems without 
  - Fix bug causing hex boxes to be misrendered
    leaving RPATH (#66005)
  - For FT2 backend, supply FT_LOAD_NO_BITMAP to avoid problems with 
    fonts with embedded bitmaps (#67851)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Up FreeType version to deal with FreeType-2.0.x / 2.1.x \
    ABI changes for pango's OpenType code.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Version 0.22
  - add explicit check for required glib2 version before we do the build,
    so we don't end up with bad RPMs on --nodeps builds
  - PreReq the glib2_version version, instead of 1.3.8 hardcoded that 
    no one had updated recently


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-11
changelog:
  - fixed shutdown hang if root filesystem is network based (rhbz#1007632)
    Thanks to Rodrigo A B Freire for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-10
changelog:
  - New reload action for ip*tables services (rhbz#928812)
    It tries to reload the firewall rules from /etc/sysconfig/ip*tables. If this
    failes, it does not load the fallbacks and the old firewall rules are still
    there.
  - Use /lib*/xtables without version and not linked by alternatives again for 
    compatibility to older versions (rhbz#924362)
    The symlink for /lib*/xtables with the previous version will be cleaned up
    in a pre script.
  - Backport of --queue-bypass (rhbz#845435)
    Thanks to Florian Westphal and kay
  - Make ip*tables-save consistent to man page (rhbz#983198)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-9
changelog:
  - make alternatives names arch dependant for multilib (rhbz#860148)
  - added virtual provides for base libraries to be able to resolve library file requires


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-7
changelog:
  - Use alternatives to support other iptables versions for MRG kernels
    (rhbz#747068)
  - Restore sysctl values on service restart (rhbz#800208)
  - Added fallback support in case of error in service start (rhbz#808272)
  - Added AUDIT targets to to man pages (rhbz#809108)
  - Fixed maximum chain name length (rhbz#821441)
  - Added missing dependency for poliycoreutils package (rhbz#836286)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-6
changelog:
  - reverted upstream patches, because they are breaking the ABI
  - created new patch based on upstream but without ABI break (rhbz#725879)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-5
changelog:
  - fixed option parser problem (mark matches with mark options) (rhbz#725879)
    based on upstream commits:
      600f38db82548a683775fd89b6e136673e924097
      59e8114c6792242e80785f4461d5e663fb9a3d64
      d3b2e391e3b944581e20e216af76339cc87d0590
      2d68ae7ce6e40e3977ee11a57296cf76801ae320
      1dc27393b7ba401e6228a5ee2472a6eb72836c43
      1e128bd804b676ee91beca48312de9b251845d09
      fa503ad59f73d20d85f4cdf53324a01d2ad8591e


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-4
changelog:
  - added IPv6 transparent proxy support (rhbz#590186)
  - added auditing support (rhbz#642393)
    Thanks to Thomas Graf for the patch
  - init: restore context for save and use /etc/sysconfig for temps (rhbz#644273)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-2
changelog:
  - fixed initscript to be LSB compliant (rhbz#593228)
    - added euid 0 check
    - reload returns 3 (unimplemented feature)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-1
changelog:
  - rebase to version 1.4.7:
    - libip4tc: Add static qualifier to dump_entry()
    - libipq: build as shared library
    - recent: reorder cases in code (cosmetic cleanup)
    - several man page and documentation fixes
    - policy: fix error message showing wrong option
    - includes: header updates
    - Lift restrictions on interface names
  - fixed license and moved iptables-xml into base package according to review
  - added default values for IPTABLES_STATUS_VERBOSE and
    IPTABLES_STATUS_LINENUMBERS in init script


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-3
changelog:
  - fixes according to review:
  - fixed license
  - moved /bin/iptables-xml to iptables main package fixes dangling symlink in
    ipv6 sub-package
  - added missing lsb keywords Required-Start and Required-Stop to init script


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-2
changelog:
  - moved libip*tc and libxtables libs to /lib[64], added symlinks for .so libs
    to /usr/lib[64] for compatibility (rhbz#558796)


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-1
changelog:
  - new version 1.4.6 with support for all new features of 2.6.32
    - several man page fixes
    - Support for nommu arches
    - realm: remove static initializations
    - libiptc: remove unused functions
    - libiptc: avoid strict-aliasing warnings
    - iprange: do accept non-ranges for xt_iprange v1
    - iprange: warn on reverse range
    - iprange: roll address parsing into a loop
    - iprange: do accept non-ranges for xt_iprange v1 (log)
    - iprange: warn on reverse range (log)
    - libiptc: fix wrong maptype of base chain counters on restore
    - iptables: fix undersized deletion mask creation
    - style: reduce indent in xtables_check_inverse
    - libxtables: hand argv to xtables_check_inverse
    - iptables/extensions: make bundled options work again
    - CONNMARK: print mark rules with mask 0xffffffff as set instead of xset
    - iptables: take masks into consideration for replace command
    - doc: explain experienced --hitcount limit
    - doc: name resolution clarification
    - iptables: expose option to zero packet/byte counters for a specific rule
    - build: restore --disable-ipv6 functionality on system w/o v6 headers
    - MARK: print mark rules with mask 0xffffffff as --set-mark instead of --set-xmark
    - DNAT: fix incorrect check during parsing
    - extensions: add osf extension
    - conntrack: fix --expires parsing


author: Thomas Woerner <twoerner@redhat.com> 1.4.5-1
changelog:
  - new version 1.4.5 with support for all new features of 2.6.31
    - libxt_NFQUEUE: add new v1 version with queue-balance option
    - xt_conntrack: revision 2 for enlarged state_mask member
    - libxt_helper: fix invalid passed option to check_inverse
    - libiptc: split v4 and v6
    - extensions: collapse registration structures
    - iptables: allow for parse-less extensions
    - iptables: allow for help-less extensions
    - extensions: remove empty help and parse functions
    - xtables: add multi-registration functions
    - extensions: collapse data variables to use multi-reg calls
    - xtables: warn of missing version identifier in extensions
    - multi binary: allow subcommand via argv[1]
    - iptables: accept multiple IP address specifications for -s, -d
    - several build fixes
    - several man page fixes
  - fixed two leaked file descriptors on sockets (rhbz#521397)


author: Thomas Woerner <twoerner@redhat.com> 1.4.4-1
changelog:
  - new version 1.4.4 with support for all new features of 2.6.30
    - several man page fixes
    - iptables: replace open-coded sizeof by ARRAY_SIZE
    - libip6t_policy: remove redundant functions
    - policy: use direct xt_policy_info instead of ipt/ip6t
    - policy: merge ipv6 and ipv4 variant
    - extensions: add `cluster' match support
    - extensions: add const qualifiers in print/save functions
    - extensions: use NFPROTO_UNSPEC for .family field
    - extensions: remove redundant casts
    - iptables: close open file descriptors
    - fix segfault if incorrect protocol name is used
    - replace open-coded sizeof by ARRAY_SIZE
    - do not include v4-only modules in ip6tables manpage
    - use direct xt_policy_info instead of ipt/ip6t
    - xtables: fix segfault if incorrect protocol name is used
    - libxt_connlimit: initialize v6_mask
    - SNAT/DNAT: add support for persistent multi-range NAT mappings


author: Thomas Woerner <twoerner@redhat.com> 1.4.3.1-1
changelog:
  - new version 1.4.3.1
    - libiptc is now shared
    - supports all new features of the 2.6.29 kernel
  - dropped typo_latter patch


author: Thomas Woerner <twoerner@redhat.com> 1.4.2-3
changelog:
  - still more review fixes (rhbz#225906)
    - consistent macro usage
    - use sed instead of perl for rpath removal
    - use standard RPM CFLAGS, but also -fno-strict-aliasing (needed for libiptc*)


author: Thomas Woerner <twoerner@redhat.com> 1.4.2-1
changelog:
  - new version 1.4.2
  - removed TOS value mask patch (upstream)
  - more review fixes (rhbz#225906)
  - install all header files (rhbz#462207)
  - dropped nf_ext_init (rhbz#472548)


author: Thomas Woerner <twoerner@redhat.com> 1.4.1-1
changelog:
  - new version 1.4.1 with new build environment
  - additional ipv6 network mask patch from Jan Engelhardt
  - spec file cleanup
  - removed old patches


author: Tom "spot" Callaway <tcallawa@redhat.com> 1.4.0-5
changelog:
  - use normal kernel headers, not linux/compiler.h
  - change BuildRequires: kernel-devel to kernel-headers
  - We need to do this to be able to build for both sparcv9 and sparc64 
    (there is no kernel-devel.sparcv9)


author: Thomas Woerner <twoerner@redhat.com> 1.4.0-3
changelog:
  - use the kernel headers from the build tree for iptables for now to be able to 
    compile this package, but this makes the package more kernel dependant
  - use s6_addr32 instead of in6_u.u6_addr32


author: Thomas Woerner <twoerner@redhat.com> 1.4.0-1
changelog:
  - new version 1.4.0
  - fixed condrestart (rhbz#428148)
  - report the module in rmmod_r if there is an error
  - use nf_ext_init instead of my_init for extension constructors


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-6
changelog:
  - fixed leaked file descriptor before fork/exec (rhbz#312191)
  - blacklisting is not working, use "install X /bin/(true|false)" test instead
  - return private exit code 150 for disabled ipv6 support
  - use script name for output messages


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-5
changelog:
  - fixed error code for stopping a already stopped firewall (rhbz#321751)
  - moved blacklist test into start


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-4.1
changelog:
  - do not start ip6tables if ipv6 is blacklisted (rhbz#236888)
  - use simpler fix for (rhbz#295611)
    Thanks to Linus Torvalds for the patch.


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-4
changelog:
  - fixed IPv6 reject type (rhbz#295181)
  - fixed init script: start, stop and status
  - support netfilter compiled into kernel in init script (rhbz#295611)
  - dropped inversion for limit modules from man pages (rhbz#220780)
  - fixed typo in ip6tables man page (rhbz#236185)


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-3
changelog:
  - do not depend on local_fs in lsb header - this delayes start after network
  - fixed exit code for initscript usage


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-2
changelog:
  - fixed initscript for LSB conformance (rhbz#246953, rhbz#242459)
  - provide iptc interface again, but unsupported (rhbz#216733)
  - compile all extension, which are supported by the kernel-headers package
  - review fixes (rhbz#225906)


author: Thomas Woerner <twoerner@redhat.com> 1.3.7-1
changelog:
  - new verison 1.3.7
  - iptc is not a public interface and therefore not installed anymore
  - dropped upstream secmark patch


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-2
changelog:
  - fix for plugin problem: link with "gcc -shared" instead of "ld -shared" and 
    replace "_init" with "__attribute((constructor)) my_init"


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-1
changelog:
  - new version 1.3.4
  - dropped free_opts patch (upstream fixed)
  - made libipq PIC (#158623)
  - additional configuration options for iptables startup script (#172929)
    Thanks to Jan Gruenwald for the patch
  - spec file cleanup (dropped linux_header define and usage)


author: Thomas Woerner <twoerner@redhat.com> 1.3.0-2
changelog:
  - Remove unnecessary explicit kernel dep (#146142)
  - Fixed out of bounds accesses (#131848): Thanks to Steve Grubb
    for the patch
  - Adapted iptables-config to reference to modprobe.conf (#150143)
  - Remove misleading message (#140154): Thanks to Ulrich Drepper
    for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.2.11-3.1
changelog:
  - changed default behaviour for IPTABLES_STATUS_NUMERIC to "yes" (#129731)
  - modified config file to match this change and un-commented variables with
    default values


author: Thomas Woerner <twoerner@redhat.com> 1.2.9-1
changelog:
  - vew version 1.2.9
  - new config options in ipXtables-config:
    IPTABLES_MODULES_UNLOAD
  - more documentation in ipXtables-config
  - fix for netlink security issue in libipq (devel package)
  - print fix for libipt_icmp (#109546)


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-13
changelog:
  - marked all messages in iptables init script for translation (#107462)
  - enabled devel package (#105884, #106101)
  - bumped build for fedora for libipt_recent.so (#106002)


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-12.1
changelog:
  - fixed lost udp port range in ip6tables-save (#104484)
  - fixed non numeric multiport port output in ipXtables-savs


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-6
changelog:
  - IPTABLES_SAVE_COUNTER defaults to no, now
  - install config file in /etc/sysconfig
  - exchange unload of ip_tables and ip_conntrack
  - fixed start function


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-5
changelog:
  - new config option IPTABLES_SAVE_ON_RESTART
  - init script: new status, save and restart
  - fixes #44905, #65389, #80785, #82860, #91040, #91560 and #91374


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - remove check for very old kernel versions in init scripts
  - sync up both init scripts and remove some further ugly things
  - add some docu into rpm


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed iptables and ip6tables initscript output, based on #70511
  - check return status of all iptables calls, not just the last one
    in a 'for' loop.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-2
changelog:
  - Merge ip6tables improvements from Ian Prowell <iprowell@prowell.org>
    - Update URL (#59354)
  - Use /sbin/chkconfig rather than chkconfig in %postun script


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-1
changelog:
  - Update to 1.2.4 (various fixes, including security fixes; among others:
    - Fix init script (#31133)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Yet another initscript fix (#30173)
  - Fix the fixes; they fixed some issues but broke more important
    stuff :/ (#30176)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix bugzilla #25986 (initscript not marked as config file)
  - fix bugzilla #25962 (iptables-restore)
  - mv chkconfig --del from postun to preun


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.2
  - fix up ipv6 split
  - add init script
  - Move the plugins from /usr/lib/iptables to /lib/iptables.
    This needs to work before /usr is mounted...
  - Use -O1 on alpha (compiler bug)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - move iptables to /sbin.
  - excludearch alpha for now, not building there because of compiler bug(?)


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.186.48
changelog:
  - From: Jan Beulich <jbeulich@suse.com>
    Subject: gnttab: also validate PTE permissions upon destroy/replace
    In order for PTE handling to match up with the reference counting done
    by common code, presence and writability of grant mapping PTEs must
    also be taken into account; validating just the frame number is not
    enough. This is in particular relevant if a guest fiddles with grant
    PTEs via non-grant hypercalls.
    Note that the flags being passed to replace_grant_host_mapping()
    already happen to be those of the existing mapping, so no new function
    parameter is needed.
    This is XSA-234.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 26721591]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.186.47
changelog:
  - From: Juergen Gross <jgross@suse.com>
    Subject: tools/xenstore: dont unlink connection object twice
    A connection object of a domain with associated stubdom has two
    parents: the domain and the stubdom. When cleaning up the list of
    active domains in domain_cleanup() make sure not to unlink the
    connection twice from the same domain. This could happen when the
    domain and its stubdom are being destroyed at the same time leading
    to the domain loop being entered twice.
    Additionally don't use talloc_free() in this case as it will remove
    a random parent link, leading eventually to a memory leak. Use
    talloc_unlink() instead specifying the context from which the
    connection object should be removed.
    This is XSA-233.
    Signed-off-by: Juergen Gross <jgross@suse.com>
    Reviewed-by: Ian Jackson <ian.jackson@eu.citrix.com>
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 26721575]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.186.46
changelog:
  - From: George Dunlap <george.dunlap@citrix.com>
    Subject: xen/mm: make sure node is less than MAX_NUMNODES
    The output of MEMF_get_node(memflags) can be as large as nodeid_t can
    hold (currently 255).  This is then used as an index to arrays of size
    MAX_NUMNODE, which is 64 on x86 and 1 on ARM, can be passed in by an
    untrusted guest (via memory_exchange and increase_reservation) and is
    not currently bounds-checked.
    Check the value in page_alloc.c before using it, and also check the
    value in the hypercall call sites and return -EINVAL if appropriate.
    Don't permit domains other than the hardware or control domain to
    allocate node-constrained memory.
    This is XSA-231.
    Signed-off-by: George Dunlap <george.dunlap@citrix.com>
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Backported-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 26721504]


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-30.6
changelog:
  - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey()
  - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0292 - integer underflow in base64 decoder
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: Petr Šabata <contyk@redhat.com> - 1.0.28-2
changelog:
  - Don't build on s390x (#693443)
  - Add a note to README about EL6 service already implementing the
    suggested function (#981062)
  - Use rtgenmsg when requesting RTM_GETLINK (#882139)


author: Petr Šabata <contyk@redhat.com> - 1.0.28-1
changelog:
  - Update to 1.0.28 (#829793)
  - Include a fix for #903099, destroying vports first to avoid a hang
  - Fix an old bogus date in the changelog


author: Petr Šabata <contyk@redhat.com> - 1.0.22-2
changelog:
  - Reverting a part of d789267 upstream patch.  Initscript shouldn't return code 2 on
    status query when the daemon is running. (#804936)


author: Petr Šabata <contyk@redhat.com> - 1.0.22-1
changelog:
  - Update to 1.0.22 with 7d3c9d1, "Add date and ps output to fcoedump.sh"
  - Require libhbalinux-1.0.13 or newer


author: Petr Sabata <psabata@redhat.com> - 1.0.17-2
changelog:
  - Changing fcoemon.c includes temporarily to address open-lldp header changes
  - Related: rhbz#672453


author: Petr Sabata <psabata@redhat.com> - 1.0.14-17
changelog:
  - netdev-wait.patch -- POSIX compliance fix; based on suggestion from Petr Pisar
  - Related: rhbz#658076


author: Petr Sabata <psabata@redhat.com> - 1.0.14-16
changelog:
  - remove-vconfig-dep.patch, contrib/fcoe-setup.sh
  - removed vconfig requirement
  - Resolves: rhbz#645796


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.14-2
changelog:
  - updated init script to support force-reload option
    (alias to "restart force" as packaging guidelines suggest)


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.7-6
changelog:
  - renamed init script to fcoe, changed lock filename to fcoe
    (#497604)
  - init script modified to do condrestart properly
  - some modifications in spec file to apply previous change
    to older versions od init script during update
  - fixed issue with accepting long options (#498551)


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.7-2
changelog:
  - minor corrections in spec file
  - moved init script to correct location
  - correction in the init script (chkconfig directives)


author: Dan Walsh <dwalsh@redhat.com> - 2.0.22-1
changelog:
  - Latest update from NSA
  	* Update checkmodule man page and usage by Daniel Walsh and Steve Lawrence
  - Allow policy version to be one number
  Resolves: #588260


author: Dan Walsh <dwalsh@redhat.com> - 2.0.21-1
changelog:
  - Latest update from NSA
  	* Add support for building Xen policies from Paul Nuzzi.
  	* Add long options to checkpolicy and checkmodule by Guido
  	  Trentalancia <guido@trentalancia.com>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.19-1
changelog:
  - Latest update from NSA
  	* Fix alias field in module format, caused by boundary format change
  	  from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Latest update from NSA
  	* Properly escape regex symbols in the lexer from Stephen Smalley.
  	* Add bounds support from KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Latest update from NSA
  	* Update checkpolicy for user and role mapping support from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.15-1
changelog:
  - Latest update from NSA
  	* Fix for policy module versions that look like IPv4 addresses from Jim Carter.
  	  Resolves bug 444451.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.13-1
changelog:
  - Latest update from NSA
  	* Split out non-grammar parts of policy_parse.yacc into
  	  policy_define.c and policy_define.h from Todd C. Miller.
  	* Initialize struct policy_file before using it, from Todd C. Miller.
  	* Remove unused define, move variable out of .y file, simplify COND_ERR, from Todd C. Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.10-1
changelog:
  - Latest update from NSA
  	* Use yyerror2() where appropriate from Todd C. Miller.
  - Build against latest libsepol


author: Dan Walsh <dwalsh@redhat.com> - 2.0.6-1
changelog:
  - Latest update from NSA
  	* Initialize the source file name from the command line argument so that checkpolicy/checkmodule report something more useful than "unknown source".
  	* Merged remove use of REJECT and trailing context in lex rules; make ipv4 address parsing like ipv6 from James Carter.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
changelog:
  * Merged handle unknown policydb flag support from Eric Paris.
  	  Adds new command line options -U {allow, reject, deny} for selecting
  	  the flag when a base module or kernel policy is built.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.3-1
changelog:
  - Latest update from NSA
  	* Merged fix for segfault on duplicate require of sensitivity from Caleb Case.
  	* Merged fix for dead URLs in checkpolicy man pages from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
changelog:
  - Latest update from NSA
  	* Merged patch to use new libsepol error codes by Karl MacMillan.
  	* Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.12-1
changelog:
  - Latest update from NSA
  	* Merged user and range_transition support for modules from 
  	  Darrel Goeddel


author: Dan Walsh <dwalsh@redhat.com> - 1.30.11-1
changelog:
  - Latest update from NSA
  	* merged range_transition enhancements and user module format
  	  changes from Darrel Goeddel
  	* Merged symtab datum patch from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.8-1
changelog:
  - Latest upgrade from NSA
  	* Lindent.
  	* Merged patch to remove TE rule conflict checking from the parser
  	  from Joshua Brindle.  This can only be done properly by the 
  	  expander.
  	* Merged patch to make checkpolicy/checkmodule handling of
  	  duplicate/conflicting TE rules the same as the expander 
  	  from Joshua Brindle.
  	* Merged optionals in base take 2 patch set from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.5-1
changelog:
  - Latest upgrade from NSA
  	* Merged compiler cleanup patch from Karl MacMillan.
  	* Merged fix warnings patch from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.4-1
changelog:
  - Latest upgrade from NSA
  	* Changed require_class to reject permissions that have not been
  	  declared if building a base module.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.3-1
changelog:
  - Latest upgrade from NSA
  	* Fixed checkmodule to call link_modules prior to expand_module
  	  to handle optionals.
  	* Fixed require_class to avoid shadowing permissions already defined
  	  in an inherited common definition.


author: Dan Walsh <dwalsh@redhat.com> - 1.30-1
changelog:
  - Latest upgrade from NSA
  	* Updated version for release.
  	* Fixed bug in role dominance (define_role_dom).


author: Dan Walsh <dwalsh@redhat.com> - 1.29.4-1
changelog:
  - Latest upgrade from NSA
  	* Added a check for failure to declare each sensitivity in
  	  a level definition.
  	* Changed to clone level data for aliased sensitivities to
  	  avoid double free upon sens_destroy.  Bug reported by Kevin
  	  Carr of Tresys Technology.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Latest upgrade from NSA
  	* Added error checking of all ebitmap_set_bit calls for out of
  	  memory conditions.
  	* Merged removal of compatibility handling of netlink classes
  	  (requirement that policies with newer versions include the
  	   netlink class definitions, remapping of fine-grained netlink
  	   classes in newer source policies to single netlink class when
  	   generating older policies) from George Coker.


author: Dan Walsh <dwalsh@redhat.com> 1.27.16-1
changelog:
  - Latest upgrade from NSA
  	* Removed obsolete cond_check_type_rules() function and call and 
  	  cond_optimize_lists() call from checkpolicy.c; these are handled
  	  during parsing and expansion now.
  	* Updated calls to expand_module for interface change.
  	* Changed checkmodule to verify that expand_module succeeds 
  	  when building base modules.
  	* Merged module compiler fixes from Joshua Brindle.
  	* Removed direct calls to hierarchy_check_constraints() and 
  	  check_assertions() from checkpolicy since they are now called 
  	  internally by expand_module().


author: Dan Walsh <dwalsh@redhat.com> 1.27.10-1
changelog:
  - Latest upgrade from NSA
  	* Updated for changes to sepol expand_module and link_modules interfaces.


author: Dan Walsh <dwalsh@redhat.com> 1.27.9-1
changelog:
  - Latest upgrade from NSA
  	* Merged support for require blocks inside conditionals from
  	Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.27.5-1
changelog:
  - Latest upgrade from NSA
  	* Merged error handling improvement in checkmodule from Karl MacMillan (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.27.4-1
changelog:
  - Latest upgrade from NSA
  	* Merged bugfix for dup role transition error messages from
  	Karl MacMillan (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.25.12-1
changelog:
  - Update to NSA Release
  	* Fixed handling of validatetrans constraint expressions.
  	Bug reported by Dan Walsh for checkpolicy -M.


author: Dan Walsh <dwalsh@redhat.com> 1.25.11-1
changelog:
  - Update to NSA Release
  	* Merged use-after-free fix from Serge Hallyn (IBM).  
  	  Bug found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.25.10-1
changelog:
  - Update to NSA Release
  	* Fixed further memory leaks found by valgrind.
  	* Changed checkpolicy to destroy the policydbs prior to exit
  	  to allow leak detection.
  	* Fixed several memory leaks found by valgrind.


author: Dan Walsh <dwalsh@redhat.com> 1.25.8-1
changelog:
  - Update to NSA Release
  	* Updated checkpolicy and dispol for the new avtab format.
  	  Converted users of ebitmaps to new inline operators.
    	  Note:  The binary policy format version has been incremented to 
  	  version 20 as a result of these changes.  To build a policy
  	  for a kernel that does not yet include these changes, use
  	  the -c 19 option to checkpolicy.
  	* Merged patch to prohibit use of "self" as a type name from Jason Tang (Tresys).
  	* Merged patch to fix dismod compilation from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.25.5-1
changelog:
  - Update to NSA Release
  	* Fixed call to hierarchy checking code to pass the right policydb.
  	* Merged patch to update dismod for the relocation of the
  	  module read/write code from libsemanage to libsepol, and
  	  to enable build of test subdirectory from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.25.2-1
changelog:
  - Update to NSA Release
  	* Merged loadable module support from Tresys Technology.
  	* Merged patch to prohibit the use of * and ~ in type sets 
  	  (other than in neverallow statements) and in role sets
  	  from Joshua Brindle (Tresys).
  	* Updated version for release.


author: Dan Walsh <dwalsh@redhat.com> 1.23-3-1
changelog:
  - Update to NSA Release
  	* Added sepol_ prefix to Flask types to avoid namespace
  	  collision with libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.23,1-1
changelog:
  * Merged hierarchical type/role patch from Tresys Technology.
  	* Merged MLS fixes from Darrel Goeddel of TCS.


author: Dan Walsh <dwalsh@redhat.com> 1.21.4-1
changelog:
  * Merged define_user() cleanup patch from Darrel Goeddel (TCS).
  	* Moved genpolusers utility to libsepol.
  	* Merged range_transition support from Darrel Goeddel (TCS).


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-1
changelog:
  - Latest from NSA
  	* Merged typeattribute statement patch from Darrel Goeddel of TCS.
  	* Changed genpolusers to handle multiple user config files.
  	* Merged nodecon ordering patch from Chad Hanson of TCS.


author: Jindrich Novy <jnovy@redhat.com> 0.1.12-12
changelog:
  - remove unnecessary 1ms wakeups while USB transfers are in progress,
    thanks to Scott Lamb (#408131)


author: Jindrich Novy <jnovy@redhat.com> 0.1.12-10
changelog:
  - optimize usb_find_devices() and use openat() instead of open()
   (#273901), thanks to Ulrich Drepper
  - BR gawk


author: Jindrich Novy <jnovy@redhat.com> 0.1.12-7
changelog:
  - merge review spec fixes (#226053)
  - create -static subpackage to ship static libs separately
  - don't use auto* stuff, drop automake, libtool deps
  - BuildRequire openjade, fix Requires


author: Jindrich Novy <jnovy@redhat.com> 0.1.12-3
changelog:
  - use pkg-config calls in libusb-config instead of hardcoded
    defaults to avoid multiarch conflicts (#192714)


author: Jindrich Novy <jnovy@redhat.com> 0.1.11-2
changelog:
  - change device search order, /dev/bus/usb is tried first,
    then /proc/bus/usb, and never try /sys/bus/usb (#178994)


author: Jindrich Novy <jnovy@redhat.com> 0.1.11-1
changelog:
  - 0.1.11
  - require pkgconfig, package libusb.pc
  - fix printf format in linux.c so that libusb can be built with -Werror (default)


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.20.6.el6uek]
changelog:
  - perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus Torvalds)  [Orabug: 27947608]  {CVE-2018-100199}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.20.5.el6uek]
changelog:
  - x86/microcode: probe CPU features on microcode update (Ankur Arora)  [Orabug: 27806667]  
  - x86/microcode: microcode_write() should not reference boot_cpu_data (Ankur Arora)  [Orabug: 27806667]  
  - x86/cpufeatures: use cpu_data in init_scattered_cpuid_flags() (Ankur Arora)  [Orabug: 27806667]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.20.4.el6uek]
changelog:
  - Drivers: hv: fcopy: set .owner reference for file operations (Joe Jin)  [Orabug: 21191022]  
  - ALSA: usb-audio: Kill stray URB at exiting (Takashi Iwai)  [Orabug: 27148281]  {CVE-2017-16527} 
  - HID: usbhid: fix out-of-bounds bug (Jaejoong Kim)  [Orabug: 27207929]  {CVE-2017-16533} 
  - [media] cx231xx-cards: fix NULL-deref on missing association descriptor (Johan Hovold)  [Orabug: 27208072]  {CVE-2017-16536} 
  - net: cdc_ether: fix divide by 0 on bad descriptors (Bjørn Mork)  [Orabug: 27215201]  {CVE-2017-16649} 
  - x86/microcode/intel: Extend BDW late-loading with a revision check (Jia Zhang)  [Orabug: 27343577]  
  - x86/microcode/intel: Disable late loading on model 79 (Borislav Petkov)  [Orabug: 27343577]  
  - Bluetooth: bnep: bnep_add_connection() should verify that it's dealing with l2cap socket (Al Viro)  [Orabug: 27344793]  {CVE-2017-15868} 
  - Bluetooth: hidp: verify l2cap sockets (David Herrmann)  [Orabug: 27344793]  {CVE-2017-15868} 
  - ALSA: pcm: prevent UAF in snd_pcm_info (Robb Glasser)  [Orabug: 27344843]  {CVE-2017-0861} {CVE-2017-0861} 
  - ptrace: use fsuid, fsgid, effective creds for fs access checks (Jann Horn)  [Orabug: 27364691]  {CVE-2017-14140} 
  - sctp: do not peel off an assoc from one netns to another one (Xin Long)  [Orabug: 27387001]  {CVE-2017-15115} 
  - Revert "x86/spec_ctrl: Add 'nolfence' knob to disable fallback for spectre_v2 mitigation" (Ankur Arora)  [Orabug: 27601787]  {CVE-2017-5715} 
  - Revert "x86/spec: Add 'lfence_enabled' in sysfs" (Ankur Arora)  [Orabug: 27601787]  {CVE-2017-5715} 
  - Revert "x86/mitigation/spectre_v2: Add reporting of 'lfence'" (Ankur Arora)  [Orabug: 27601787]  {CVE-2017-5715} 
  - x86/mitigation/spectre_v2: Add reporting of 'lfence' (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/spec: Add 'lfence_enabled' in sysfs (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/spec_ctrl: Add 'nolfence' knob to disable fallback for spectre_v2 mitigation (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/spectre: bring spec_ctrl management logic closer to UEK4 (Ankur Arora)  [Orabug: 27516512]  {CVE-2017-5715} 
  - x86/cpufeatures: Clean up Spectre v2 related CPUID flags (David Woodhouse)  [Orabug: 27516357]  {CVE-2017-5715} 
  - x86/spectre_v2: Remove 0xc2 from spectre_bad_microcodes (Darren Kenny)  [Orabug: 27516419]  {CVE-2017-5715} 
  - x86/cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (David Woodhouse)  [Orabug: 27516419]  {CVE-2017-5715} 
  - x86: intel-family.h: Add GEMINI_LAKE SOC (Len Brown)  [Orabug: 27516419]  
  - x86/cpu/intel: Introduce macros for Intel family numbers (Dave Hansen)  [Orabug: 27516419]  
  - x86/spectre: expose 'stibp' (Konrad Rzeszutek Wilk)  [Orabug: 27516419]  {CVE-2017-5715} 
  - x86/speculation: Add basic IBPB (Indirect Branch Prediction Barrier) support (David Woodhouse)  [Orabug: 27516379]  {CVE-2017-5715} 
  - x86/speculation: Use Indirect Branch Prediction Barrier in context switch (Tim Chen)  [Orabug: 27516379]  {CVE-2017-5715} 
  - x86/spectre: fix spectre_v1 mitigation indicators (Ankur Arora)  [Orabug: 27509932]  {CVE-2017-5715} 
  - x86/ia32/syscall: Clear extended registers %r8-%r15 (Ankur Arora)  [Orabug: 27452028]  {CVE-2017-5715} 
  - x86/ia32/syscall: Save full stack frame throughout the entry code (Ankur Arora)  [Orabug: 27452028]  {CVE-2017-5715} 
  - x86/ia32/syscall: cleanup trailing whitespace (Ankur Arora)  [Orabug: 27452028]  {CVE-2017-5715} 
  - x86/syscall: Clear callee saved registers (%r12-%r15, %rbp, %rbx) (Ankur Arora)  [Orabug: 27452028]  {CVE-2017-5715} 
  - x86/syscall: Save callee saved registers on syscall entrance (Ankur Arora)  [Orabug: 27452028]  {CVE-2017-5715}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.20.3.el6uek]
changelog:
  - gre: fix a possible skb leak (Eric Dumazet)  [Orabug: 26403972]  {CVE-2017-9074} 
  - ipv6: Fix leak in ipv6_gso_segment(). (David S. Miller)  [Orabug: 26403972]  {CVE-2017-9074} 
  - ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Ben Hutchings)  [Orabug: 26403972]  {CVE-2017-9074} 
  - ipv6: Check ip6_find_1stfragopt() return value properly. (David S. Miller)  [Orabug: 26403972]  {CVE-2017-9074} 
  - ipv6: Prevent overrun when parsing v6 header options (Craig Gallek)  [Orabug: 26403972]  {CVE-2017-9074} 
  - tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Wei Wang)  [Orabug: 26813390]  {CVE-2017-14106} 
  - rxrpc: Fix several cases where a padded len isn't checked in ticket decode (David Howells)  [Orabug: 26880517]  {CVE-2017-7482} {CVE-2017-7482} 
  - xen/mmu: Call xen_cleanhighmap() with 4MB aligned for page tables mapping (Zhenzhong Duan)  [Orabug: 26883322]  
  - KVM: x86: fix deadlock in clock-in-progress request handling (Marcelo Tosatti)  [Orabug: 27065995]  
  - ocfs2: fstrim: Fix start offset of first cluster group during fstrim (Ashish Samant)  [Orabug: 27099835]  
  - USB: serial: console: fix use-after-free after failed setup (Johan Hovold)  [Orabug: 27206837]  {CVE-2017-16525} 
  - uwb: properly check kthread_run return value (Andrey Konovalov)  [Orabug: 27206897]  {CVE-2017-16526} 
  - ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor (Takashi Iwai)  [Orabug: 27206928]  {CVE-2017-16529} 
  - USB: fix out-of-bounds in usb_set_configuration (Greg Kroah-Hartman)  [Orabug: 27207240]  {CVE-2017-16531} 
  - USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor() (Alan Stern)  [Orabug: 27207983]  {CVE-2017-16535} 
  - dccp: CVE-2017-8824: use-after-free in DCCP code (Mohamed Ghannam)  [Orabug: 27290301]  {CVE-2017-8824}


author: Jason Vas Dias <jvdias@redhat.com> 1.0-0.9.pre5
changelog:
  - Allow build to succeed with new gcc / glibc-kernheaders
    (compile failed on __u64 redefinition on x86_64).
  - Add a static /usr/lib/libnl.a library to libnl-devel for
    programs that might need to do a static link to libnl.
    Added after consultation with Christopher Aillon.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.43-1
changelog:
  - Update to upstream
    * Move libsemanage.so to /usr/lib
    * Add NAME lines to man pages from Manoj Srivastava<srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.41-1
changelog:
  - Update to upstream
    * Add pkgconfig file from Eamon Walsh.
    * Add semanage_set_check_contexts() function to disable calling
    setfiles


author: Dan Walsh <dwalsh@redhat.com> - 2.0.38-1
changelog:
  - Update to upstream
    * Change semodule upgrade behavior to install even if the module
      is not present from Dan Walsh.
    * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
changelog:
  - Update to upstream
    * Fix persistent dontaudit support to rebuild policy if the 
          dontaudit state is changed from Chad Sellers.
  - Move load_policy to /sbin


author: Dan Walsh <dwalsh@redhat.com> - 2.0.36-1
changelog:
  - Update to upstream
    * Changed bzip-blocksize=0 handling to support existing compressed
    modules in the store.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.35-1
changelog:
  * Revert hard linking of files between tmp/active/previous.
    * Enable configuration of bzip behavior from Stephen Smalley.
      bzip-blocksize=0 to disable compression and decompression support.
      bzip-blocksize=1..9 to set the blocksize for compression.
      bzip-small=true to reduce memory usage for decompression.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.31-1
changelog:
  - Update to upstream
    * Policy module compression (bzip) support from Dan Walsh.
    * Hard link files between tmp/active/previous from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.28-1
changelog:
  - Update to upstream
    * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh


author: Dan Walsh <dwalsh@redhat.com> - 2.0.27-1
changelog:
  - Update to upstream
    * Modify genhomedircon to skip groupname entries.
    Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the groupname syntax.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.26-1
changelog:
  - Update to upstream
    * Fix bug in genhomedircon fcontext matches logic from Dan Walsh.
    Strip any trailing slash before appending /*$.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.25-1
changelog:
  - Update to upstream
    * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley.
      Fixes semanage boolean -D seg fault (bug 441379).


author: Dan Walsh <dwalsh@redhat.com> - 2.0.23-1
changelog:
  - Update to upstream
    * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.22-1
changelog:
  - Update to upstream
    * Free policydb before fork from Joshua Brindle.
    * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.20-1
changelog:
  - Update to upstream
    * Use sepol_set_expand_consume_base to reduce peak memory usage when
    using semodule


author: Dan Walsh <dwalsh@redhat.com> - 2.0.19-1
changelog:
  - Update to upstream
    * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Update to upstream
    * Fix spurious out of memory error reports.
    * Merged second version of fix for genhomedircon handling from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Update to upstream
    * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.15-1
changelog:
  - Update to upstream
    * Fix genhomedircon handling of shells and missing user context template from Dan Walsh.
    * Copy the store path in semanage_select_store from Dan Walsh.
  - Add expand-check=0 to semanage.conf


author: Dan Walsh <dwalsh@redhat.com> - 2.0.14-1
changelog:
  - Upgrade to latest from NSA
    * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley.
    * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.12-1
changelog:
  - Upgrade to latest from NSA
    * ustr cleanups from James Antill.
    * Ensure that /root gets labeled even if using the default context from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Upgrade to latest from NSA
    * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.10-1
changelog:
  - Upgrade to latest from NSA
    * Fix error checking on getpw*_r functions from Todd Miller.
    * Make genhomedircon skip invalid homedir contexts from Todd Miller.
    * Set default user and prefix from seusers from Dan Walsh.
    * Add swigify Makefile target from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
changelog:
  - Upgrade to latest from NSA
    * Pass CFLAGS to CC even on link command, per Dennis Gilmore.
    * Clear errno on non-fatal errors to avoid reporting them upon a
      later error that does not set errno.
    * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley.

  - Fix segfault in genhomedircon when using bad user names


author: Dan Walsh <dwalsh@redhat.com> - 2.0.6-1
changelog:
  - Upgrade to latest from NSA
    * Change to use getpw* function calls to the _r versions from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
changelog:
  - Upgrade to latest from NSA
    * Allow dontaudits to be turned off via semanage interface when
      updating policy


author: Dan Walsh <dwalsh@redhat.com> - 2.0.3-1
changelog:
  - Upgrade to latest from NSA
    * Fix to libsemanage man patches so whatis will work better from Dan Walsh


author: Dan Walsh <dwalsh@redhat.com> - 2.0.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged optimizations from Stephen Smalley.
      - do not set all booleans upon commit, only those whose values have changed
      - only install the sandbox upon commit if something was rebuilt


author: Dan Walsh <dwalsh@redhat.com> - 2.0.1-1
changelog:
  * Merged dbase_file_flush patch from Dan Walsh.
      This removes any mention of specific tools (e.g. semanage)
      from the comment header of the auto-generated files,
      since there are multiple front-end tools.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile test target patch from Caleb Case.
    * Merged get_commit_number function rename patch from Caleb Case.
    * Merged strnlen -> strlen patch from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 1.10.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged python binding fix from Dan Walsh.
    * Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> - 1.9.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to optionally reduce disk usage by removing 
      the backup module store and linked policy from Karl MacMillan
    * Merged patch to correctly propagate return values in libsemanage


author: Dan Walsh <dwalsh@redhat.com> - 1.9.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to compile wit -fPIC instead of -fpic from
      Manoj Srivastava to prevent hitting the global offest table
      limit. Patch changed to include libselinux and libsemanage in
      addition to libsepol.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.17-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to skip reload if no active store exists and
      the store path doesn't match the active store path from Dan Walsh.
    * Merged patch to not destroy sepol handle on error path of
      connect from James Athey.
    * Merged patch to add genhomedircon path to semanage.conf from
      James Athey.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.16-1
changelog:
  - Upgrade to latest from NSA
    * Make most copy errors fatal, but allow exceptions for
      file_contexts.local, seusers, and netfilter_contexts if
      the source file does not exist in the store.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.15-1
changelog:
  - Upgrade to latest from NSA
    * Merged separate local file contexts patch from Chris PeBenito.
    * Merged patch to make most copy errors non-fatal from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.12-1
changelog:
  - Upgrade to latest from NSA
    * Merged support for read operations on read-only fs from 
      Caleb Case (Tresys Technology).


author: Dan Walsh <dwalsh@redhat.com> - 1.6.9-1
changelog:
  - Upgrade to latest from NSA
    * Merged several fixes from Serge Hallyn:
         dbase_file_cache:  deref of uninit data on error path.
         dbase_policydb_cache:  clear fp to avoid double fclose
         semanage_fc_sort:  destroy temp on error paths


author: Dan Walsh <dwalsh@redhat.com> - 1.6.8-1
changelog:
  - Upgrade to latest from NSA
    * Updated default location for setfiles to /sbin to
      match policycoreutils.  This can also be adjusted via 
      semanage.conf using the syntax:
      [setfiles]
      path = /path/to/setfiles
      args = -q -c $@ $<
      [end]


author: Dan Walsh <dwalsh@redhat.com> - 1.6.6-1
changelog:
  - Upgrade to latest from NSA
    * Merged updated file context sorting patch from Christopher
      Ashworth, with bug fix for escaped character flag.
    * Merged file context sorting code from Christopher Ashworth 
      (Tresys Technology), based on fc_sort.c code in refpolicy.
    * Merged python binding t_output_helper removal patch from Dan Walsh.
    * Regenerated swig files.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.3-1
changelog:
  - Fix to work with new version of swig
  - Upgrade to latest from NSA
    * Merged corrected fix for descriptor leak from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile PYLIBVER definition patch from Dan Walsh.
    * Merged man page reorganization from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.6-1
changelog:
  - Make work on RHEL4
  - Upgrade to latest from NSA
    * Merged abort early on merge errors patch from Ivan Gyurdiev.
    * Cleaned up error handling in semanage_split_fc based on a patch
      by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev.
    * Merged MLS handling fixes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.28-1
changelog:
  - Upgrade to latest from NSA
    * Merged bug fix for fcontext validate handler from Ivan Gyurdiev.
    * Merged base_merge_components changes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.26-1
changelog:
  - Upgrade to latest from NSA
    * Merged paths array patch from Ivan Gyurdiev.
    * Merged bug fix patch from Ivan Gyurdiev.
    * Merged improve bindings patch from Ivan Gyurdiev.
    * Merged use PyList patch from Ivan Gyurdiev.  
    * Merged memory leak fix patch from Ivan Gyurdiev.
    * Merged nodecon support patch from Ivan Gyurdiev.
    * Merged cleanups patch from Ivan Gyurdiev.
    * Merged split swig patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.23-1
changelog:
  - Upgrade to latest from NSA
    * Merged optionals in base patch from Joshua Brindle.
    * Merged treat seusers/users_extra as optional sections patch from
      Ivan Gyurdiev.
    * Merged parse_optional fixes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.21-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser/user_extra support patch from Joshua Brindle.
    * Merged remote system dbase patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.19-1
changelog:
  - Upgrade to latest from NSA
    * Merged fname parameter patch from Ivan Gyurdiev.
    * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev.
    * Merged seusers.system patch from Ivan Gyurdiev.
    * Merged improve port/fcontext API patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.18-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev.
    * Merged set_create_store, access_check, and is_connected interfaces
      from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.5.15-1
changelog:
  - Upgrade to latest from NSA
    * Merged pywrap Makefile diff from Dan Walsh.
    * Merged cache management patch from Ivan Gyurdiev.
    * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev.
    * Merged remove apply_local function patch from Ivan Gyurdiev.
    * Merged only do read locking in direct case patch from Ivan Gyurdiev.
    * Merged cache error path memory leak fix from Ivan Gyurdiev.
    * Merged auto-generated file header patch from Ivan Gyurdiev.
    * Merged pywrap test update from Ivan Gyurdiev.
    * Merged hidden defs update from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.14-1
changelog:
  - Upgrade to latest from NSA
    * Merged disallow port overlap patch from Ivan Gyurdiev.
    * Merged join prereq and implementation patches from Ivan Gyurdiev.
    * Merged join user extra data part 2 patch from Ivan Gyurdiev.
    * Merged bugfix patch from Ivan Gyurdiev.
    * Merged remove add_local/set_local patch from Ivan Gyurdiev.
    * Merged user extra data part 1 patch from Ivan Gyurdiev.
    * Merged size_t -> unsigned int patch from Ivan Gyurdiev.
    * Merged calloc check in semanage_store patch from Ivan Gyurdiev,
      bug noticed by Steve Grubb.
    * Merged cleanups after add/set removal patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.9-1
changelog:
  - Upgrade to latest from NSA
    * Merged const in APIs patch from Ivan Gyurdiev.
    * Merged validation of local file contexts patch from Ivan Gyurdiev.
    * Merged compare2 function patch from Ivan Gyurdiev.
    * Merged hidden def/proto update patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.8-1
changelog:
  - Upgrade to latest from NSA
    * Re-applied string and file optimization patch from Russell Coker,
      with bug fix.
    * Reverted string and file optimization patch from Russell Coker.
    * Clarified error messages from parse_module_headers and 
      parse_base_headers for base/module mismatches.


author: Dan Walsh <dwalsh@redhat.com> 1.5.6-1
changelog:
  - Upgrade to latest from NSA
    * Clarified error messages from parse_module_headers and 
      parse_base_headers for base/module mismatches.
    * Merged string and file optimization patch from Russell Coker.
    * Merged swig header reordering patch from Ivan Gyurdiev.
    * Merged toggle modify on add patch from Ivan Gyurdiev.
    * Merged ports parser bugfix patch from Ivan Gyurdiev.
    * Merged fcontext swig patch from Ivan Gyurdiev.
    * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev.
    * Merged man pages for dbase functions patch from Ivan Gyurdiev.
    * Merged pywrap tests patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.4-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch series from Ivan Gyurdiev.
      This includes patches to:
      - separate file rw code from linked list
      - annotate objects
      - fold together internal headers
      - support ordering of records in compare function
      - add active dbase backend, active booleans
      - return commit numbers for ro database calls
      - use modified flags to skip rebuild whenever possible
      - enable port interfaces
      - update swig interfaces and typemaps
      - add an API for file_contexts.local and file_contexts
      - flip the traversal order in iterate/list
      - reorganize sandbox_expand
      - add seusers MLS validation
      - improve dbase spec/documentation
      - clone record on set/add/modify


author: Dan Walsh <dwalsh@redhat.com> 1.5.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged further header cleanups from Ivan Gyurdiev.
    * Merged toggle modified flag in policydb_modify, fix memory leak
      in clear_obsolete, polymorphism vs headers fix, and include guards
      for internal headers patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.1-2
changelog:
  - Upgrade to latest from NSA
    * Merged toggle modified flag in policydb_modify, fix memory leak
      in clear_obsolete, polymorphism vs headers fix, and include guards
      for internal headers patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.1-1
changelog:
  - Upgrade to latest from NSA
    * Added file-mode= setting to semanage.conf, default to 0644.
      Changed semanage_copy_file and callers to use this mode when
      installing policy files to runtime locations.


author: Dan Walsh <dwalsh@redhat.com> 1.3.64-1
changelog:
  - Upgrade to latest from NSA
    * Changed semanage_handle_create() to set do_reload based on
      is_selinux_enabled().  This prevents improper attempts to
      load policy on a non-SELinux system.


author: Dan Walsh <dwalsh@redhat.com> 1.3.63-1
changelog:
  - Upgrade to latest from NSA
    * Dropped handle from user_del_role interface.
    * Removed defrole interfaces.


author: Dan Walsh <dwalsh@redhat.com> 1.3.61-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile python definitions patch from Dan Walsh.
    * Removed is_selinux_mls_enabled() conditionals in seusers and users
      file parsers.


author: Dan Walsh <dwalsh@redhat.com> 1.3.59-1
changelog:
  - Add additional swig objects
    * Merged wrap char*** for user_get_roles patch from Joshua Brindle.
    * Merged remove defrole from sepol patch from Ivan Gyurdiev.
    * Merged swig wrappers for modifying users and seusers from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.56-1
changelog:
  - Upgrade to latest from NSA
    * Fixed free->key_free bug.
    * Merged clear obsolete patch from Ivan Gyurdiev.
    * Merged modified swigify patch from Dan Walsh 
      (original patch from Joshua Brindle).
    * Merged move genhomedircon call patch from Chad Sellers.


author: Dan Walsh <dwalsh@redhat.com> 1.3.53-1
changelog:
  - Upgrade to latest from NSA
    * Merged move seuser validation patch from Ivan Gyurdiev.
    * Merged hidden declaration fixes from Ivan Gyurdiev,
      with minor corrections.


author: Dan Walsh <dwalsh@redhat.com> 1.3.52-1
changelog:
  - Upgrade to latest from NSA
    * Merged cleanup patch from Ivan Gyurdiev.
      This renames semanage_module_conn to semanage_direct_handle,
      and moves sepol handle create/destroy into semanage handle
      create/destroy to allow use even when disconnected (for the
      record interfaces).


author: Dan Walsh <dwalsh@redhat.com> 1.3.51-1
changelog:
  - Upgrade to latest from NSA
    * Clear modules modified flag upon disconnect and commit.
          * Added tracking of module modifications and use it to
      determine whether expand-time checks should be applied
      on commit.
    * Reverted semanage_set_reload_bools() interface.


author: Dan Walsh <dwalsh@redhat.com> 1.3.48-1
changelog:
  - Upgrade to latest from NSA
    * Disabled calls to port dbase for merge and commit and stubbed
      out calls to sepol_port interfaces since they are not exported.
    * Merged rename instead of copy patch from Joshua Brindle (Tresys).
    * Added hidden_def/hidden_proto for exported symbols used within 
      libsemanage to eliminate relocations.  Wrapped type definitions
      in exported headers as needed to avoid conflicts.  Added
      src/context_internal.h and src/iface_internal.h.
    * Added semanage_is_managed() interface to allow detection of whether
      the policy is managed via libsemanage.  This enables proper handling
      in setsebool for non-managed systems.
    * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev,
      to enable runtime control over preserving active boolean values
      versus reloading their saved settings upon commit.


author: Dan Walsh <dwalsh@redhat.com> 1.3.43-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser parser resync, dbase tracking and cleanup, strtol
      bug, copyright, and assert space patches from Ivan Gyurdiev.
    * Added src/*_internal.h in preparation for other changes.
     * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and
            src/seusers.[hc].


author: Dan Walsh <dwalsh@redhat.com> 1.3.41-1
changelog:
  - Upgrade to latest from NSA
    * Merged interface parse/print, context_to_string interface change,
      move assert_noeof, and order preserving patches from Ivan Gyurdiev.
          * Added src/dso.h in preparation for other changes.
    * Merged install seusers, handle/error messages, MLS parsing,
      and seusers validation patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.39-1
changelog:
  - Upgrade to latest from NSA
    * Merged record interface, dbase flush, common database code,
      and record bugfix patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.38-1
changelog:
  - Upgrade to latest from NSA
    * Merged dbase policydb list and count change from Ivan Gyurdiev.
    * Merged enable dbase and set relay patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.35-1
changelog:
  - Update from NSA
    * Merged sepol handle passing, seusers support, and policydb cache
      patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.34-1
changelog:
  - Update from NSA
    * Merged resync to sepol changes and booleans fixes/improvements 
      patches from Ivan Gyurdiev.
    * Merged support for genhomedircon/homedir template, store selection,
      explicit policy reload, and semanage.conf relocation from Joshua
      Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.32-1
changelog:
  - Update from NSA
    * Merged resync to sepol changes and transaction fix patches from
      Ivan Gyurdiev.
    * Merged reorganize users patch from Ivan Gyurdiev.
    * Merged remove unused relay functions patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.30-1
changelog:
  - Update from NSA
    * Fixed policy file leaks in semanage_load_module and
      semanage_write_module.
    * Merged further database work from Ivan Gyurdiev.
    * Fixed bug in semanage_direct_disconnect.


author: Dan Walsh <dwalsh@redhat.com> 1.3.28-1
changelog:
  - Update from NSA
    * Merged interface renaming patch from Ivan Gyurdiev.
    * Merged policy component patch from Ivan Gyurdiev.
    * Renamed 'check=' configuration value to 'expand-check=' for 
      clarity.
    * Changed semanage_commit_sandbox to check for and report errors 
      on rename(2) calls performed during rollback.
    * Added optional check= configuration value to semanage.conf 
      and updated call to sepol_expand_module to pass its value
      to control assertion and hierarchy checking on module expansion.
    * Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.24-1
changelog:
  - Update from NSA
    * Merged default database from Ivan Gyurdiev.
    * Merged removal of connect requirement in policydb backend from
      Ivan Gyurdiev.
    * Merged commit locking fix and lock rename from Joshua Brindle.
    * Merged transaction rollback in lock patch from Joshua Brindle.
    * Changed default args for load_policy to be null, as it no longer
      takes a pathname argument and we want to preserve booleans.
    * Merged move local dbase initialization patch from Ivan Gyurdiev.
    * Merged acquire/release read lock in databases patch from Ivan Gyurdiev.
    * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev.
    * Added calls to sepol_policy_file_set_handle interface prior
      to invoking sepol operations on policy files.
    * Updated call to sepol_policydb_from_image to pass the handle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.20-1
changelog:
  - Update from NSA
    * Changed default args for load_policy to be null, as it no longer
      takes a pathname argument and we want to preserve booleans.
    * Merged move local dbase initialization patch from Ivan Gyurdiev.
    * Merged acquire/release read lock in databases patch from Ivan Gyurdiev.
    * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev.
    * Added calls to sepol_policy_file_set_handle interface prior
      to invoking sepol operations on policy files.
    * Updated call to sepol_policydb_from_image to pass the handle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.20-1
changelog:
  - Update from NSA
    * Merged user and port APIs - policy database patch from Ivan
    Gyurdiev.
    * Converted calls to sepol link_packages and expand_module interfaces
    from using buffers to using sepol handles for error reporting, and 
    changed direct_connect/disconnect to create/destroy sepol handles.


author: Dan Walsh <dwalsh@redhat.com> 1.3.18-1
changelog:
  - Update from NSA
    * Merged bugfix patch from Ivan Gyurdiev.
    * Merged seuser database patch from Ivan Gyurdiev.
    Merged direct user/port databases to the handle from Ivan Gyurdiev.
    * Removed obsolete include/semanage/commit_api.h (leftover).
    Merged seuser record patch from Ivan Gyurdiev.
    * Merged boolean and interface databases from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.14-1
changelog:
  - Update from NSA
    * Updated to use get interfaces for hidden sepol_module_package type.
    * Changed semanage_expand_sandbox and semanage_install_active
    to generate/install the latest policy version supported  by libsepol
    by default (unless overridden by semanage.conf), since libselinux
    will now downgrade automatically for load_policy.
    * Merged new callback-based error reporting system and ongoing
    database work from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.11-1
changelog:
  - Update from NSA
    * Fixed semanage_install_active() to use the same logic for
    selecting a policy version as semanage_expand_sandbox().  Dropped
    dead code from semanage_install_sandbox().


author: Dan Walsh <dwalsh@redhat.com> 1.3.10-1
changelog:
  - Update from NSA
    * Updated for changes to libsepol, and to only use types and interfaces
    provided by the shared libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.3.7-1
changelog:
  - Update from NSA
    * Merged patch series from Ivan Gyurdiev.
      (pointer typedef elimination, file renames, dbase work, backend
       separation)
    * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc].
    * Separated handle create from connect interface.
    * Added a constructor for initialization.
    * Moved up src/include/*.h to src.
    * Created a symbol map file; dropped dso.h and hidden markings.


author: Dan Walsh <dwalsh@redhat.com> 1.3.5-1
changelog:
  - Update from NSA
    * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc].
    * Separated handle create from connect interface.
    * Added a constructor for initialization.
    * Moved up src/include/*.h to src.
    * Created a symbol map file; dropped dso.h and hidden markings.


author: Dan Walsh <dwalsh@redhat.com> 1.3.3-1
changelog:
  - Update from NSA
    * Merged boolean record, stub record handler, and status codes 
      patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.2-1
changelog:
  - Update from NSA
    * Merged stub iterator functionality from Ivan Gyurdiev.
    * Merged interface record patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.1-1
changelog:
  - Update from NSA
    * Merged stub functionality for managing user and port records,
    and record table code from Ivan Gyurdiev.
    * Updated version for release.


author: Dan Walsh <dwalsh@redhat.com> 1.1.6-1
changelog:
  - Update from NSA
    * Merged semod.conf template patch from Dan Walsh (Red Hat),
    but restored location to /usr/share/semod/semod.conf.
    * Fixed several bugs found by valgrind.
    * Fixed bug in prior patch for the semod_build_module_list leak.
    * Merged errno fix from Joshua Brindle (Tresys).
    * Merged fix for semod_build_modules_list leak on error path
      from Serge Hallyn (IBM).  Bug found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.1.3-1
changelog:
  - Update from NSA
    * Merged errno fix from Joshua Brindle (Tresys).
    * Merged fix for semod_build_modules_list leak on error path
      from Serge Hallyn (IBM).  Bug found by Coverity.
    * Merged several fixes from Serge Hallyn (IBM).  Bugs found by
      Coverity.
    * Fixed several other bugs and warnings.
    * Merged patch to move module read/write code from libsemanage
      to libsepol from Jason Tang (Tresys).  
    * Merged relay records patch from Ivan Gyurdiev.
    * Merged key extract patch from Ivan Gyurdiev.

  - Initial version
  - Created by Stephen Smalley <sds@epoch.ncsc.mil>


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.16.3.el6uek]
changelog:
  - crypto: algif_hash - Only export and import on sockets with data (Herbert Xu)  [Orabug: 25417805]  {CVE-2016-8646} 
  - USB: usbfs: fix potential infoleak in devio (Kangjie Lu)  [Orabug: 25462760]  {CVE-2016-4482} 
  - net: fix infoleak in llc (Kangjie Lu)  [Orabug: 25462807]  {CVE-2016-4485} 
  - af_unix: Guard against other == sk in unix_dgram_sendmsg (Rainer Weikusat)  [Orabug: 25463996]  {CVE-2013-7446} 
  - unix: avoid use-after-free in ep_remove_wait_queue (Rainer Weikusat)  [Orabug: 25463996]  {CVE-2013-7446}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.16.2.el6uek]
changelog:
  - net: avoid signed overflows for SO_{SND|RCV}BUFFORCE (Eric Dumazet)  [Orabug: 25203623]  {CVE-2016-9793}


author: Patsy Franklin <pfrankli@redhat.com> - 2016g-2
changelog:
  - Rebase to tzdata-2016g.
    - Turkey changed from EET/EEST (+02/+03) to permanent +03,
      on 2016-09-07.
    - A new leap second will be added on 2016-12-31 23:59:60 UTC.


author: Patsy Franklin <pfrankli@redhat.com> - 2016g-1.prerelease
changelog:
  - Rebase to prerelease version of tzdata-2016g.
    - Turkey changed from EET/EEST (+02/+03) to permanent +03,
      on 2016-09-07. 
    - A new leap second will be added on 2016-12-31 23:59:60 UTC.


author: Patsy Franklin <pfrankli@redhat.com> - 2016f-1
changelog:
  - Rebase to 2016f
    - Egypt cancelled DST.
    - Asia/Novosibirsk transitions from +06 to +07 on 2016-07-24 at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2016d-1
changelog:
  - Rebase to 2016d
    - America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
    - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
    - New zone Asia/Tomsk, split off from Asia/Novosibirsk.  It covers
      Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
      at 02:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2016c-1
changelog:
  - Rebase to 2016c
    - Azerbaijan no longer observes DST.
    - Chile reverts from permanent to seasonal DST.


author: Patsy Franklin <pfrankli@redhat.com> - 2016b-1
changelog:
  - Rebase to 2016b
    - New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and
      Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on
      2016-03-27 at 02:00 local time.  They need distinct zones since their
      post-1970 histories disagree.  New zone Asia/Barnaul for Altai Krai and
      Altai Republic, Russia, which will switch from +06 to +07 on the same date
      and local time.  The Astrakhan change is already official; the others have
      passed the first reading in the State Duma and are extremely likely.
      Also, Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
    - As a trial of a new system that needs less information to be made up,
      the new zones use numeric time zone abbreviations like "+04"
      instead of invented abbreviations like "ASTT".
    - Haiti will not observe DST in 2016.
    - Palestine's spring-forward transition on 2016-03-26 is at 01:00, not 00:00.
      Guess future transitions will be March's last
      Saturday at 01:00, not March's last Friday at 24:00.


author: Patsy Franklin <pfrankli@redhat.com> - 2016a-1
changelog:
  - Rebase to 2016a
    - America/Cayman will not observe daylight saving this year after all.
      Revert our guess that it would.
    - Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00.
    - Asia/Tehran now has DST predictions for the year 2038 and later,
      to be March 21 00:00 to September 21 00:00.  This is likely better
      than predicting no DST, albeit off by a day every now and then.


author: Patsy Franklin <pfrankli@redhat.com> - 2015g-3
changelog:
  - Synchronize javazic tool for OpenJDK 6 & 7 with upstream. (#1212549)
  - Fix Africa/Casablanca transitions from 2027 forward. (#1217109)


author: Patsy Franklin <pfrankli@redhat.com> - 2015g-1
changelog:
  - Rebase to 2015g
    - Turkey's 2015 fall-back transition is scheduled for Nov. 8, not Oct. 25.
    - Norfolk moves from +1130 to +1100 on 2015-10-04 at 02:00 local time.
    - Fiji's 2016 fall-back transition is scheduled for January 17, not 24.
    - Fort Nelson, British Columbia will not fall back on 2015-11-01.  It has
      effectively been on MST (-0700) since it advanced its clocks on 2015-03-08.
      New zone America/Fort_Nelson.


author: Patsy Franklin <pfrankli@redhat.com> - 2015f-1
changelog:
  - Rebase to 2015f
    - North Korea switches to +0830 on 2015-08-15.
      The abbreviation remains "KST".
    - Uruguay no longer observes DST.


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-7
changelog:
  - Don’t use 512-bit RSA private keys in tests
    Related: #1235518
  - Fix testsuite failures if more than one architecture is building concurrently
    Related: #1235518


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.17.3.el6uek]
changelog:
  - net: ping: check minimum size on ICMP header length (Kees Cook)  [Orabug: 25766911]  {CVE-2016-8399}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.17.2.el6uek]
changelog:
  - ipv6: stop sending PTB packets for MTU < 1280 (Hagen Paul Pfeifer)  [Orabug: 25765776]  {CVE-2016-10142} 
  - sg_write()/bsg_write() is not fit to be called under KERNEL_DS (Al Viro)  [Orabug: 25765445]  {CVE-2016-10088} 
  - scsi: sg: check length passed to SG_NEXT_CMD_LEN (peter chang)  [Orabug: 25751996]  {CVE-2017-7187}


author: Daniel Veillard <veillard@redhat.com> 1.1.26-2.el6_3.1
changelog:
  - fixes CVE-2011-1202 CVE-2011-3970 CVE-2012-2825 CVE-2012-2871 CVE-2012-2870
  - Fix direct pattern matching bug
  - Fix popping of vars in xsltCompilerNodePop
  - Fix bug 602515
  - Fix generate-id() to not expose object addresses (CVE-2011-1202)
  - Fix some case of pattern parsing errors (CVE-2011-3970)
  - Fix a bug in selecting XSLT elements (CVE-2012-2825)
  - Fix portability to upcoming libxml2-2.9.0
  - Fix default template processing on namespace nodes (CVE-2012-2871)
  - Cleanup of the pattern compilation code (CVE-2012-2870)
  - Hardening of code checking node types in various entry point (CVE-2012-2870)
  - Hardening of code checking node types in EXSLT (CVE-2012-2870)
  - Fix system-property with unknown namespace
  - Xsltproc should return an error code if xinclude fails
  - Fix a dictionary string usage
  - Avoid a heap use after free error


author: Daniel Veillard <veillard@redhat.com> 1.1.25-1
changelog:
  - release of 1.1.25
  - Add API versioning  for libxslt shared library
  - xsl:sort lang support using the locale
  - many bug fixes


author: Daniel Veillard <veillard@redhat.com> 1.1.24-1.fc10
changelog:
  - release of 1.1.24
  - fixes a few bugs including the key initialization problem
  - tentative fix for multiarch devel problems


author: Jiri Skala <jskala@redhat.com> - 3:2.0.14-1
changelog:
  - Resolves: #586109 - traceroute don't like -l flowlabel, -t priority and -g nexthop option
  - update to latest upstream


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 3:2.0.12-1
changelog:
  - update to 2.0.12 (fixes #461278 and #461626)
  - this release adds support for icmp extensions (including MPLS),
    which was expected for a long time (#176588)
  - drop "tracert" symlink (#461109)


author: Martin Bacovsky <mbacovsk@redhat.com> - 3:2.0.8-1
changelog:
  - upgrade to new upstream traceroute-2.0.8
  - fixed traceroute.8 install source path and traceroute6.8 link source
  - fixed typo in Source0 URL


author: Martin Bacovsky <mbacovsk@redhat.com> - 3:2.0.7-1
changelog:
  - upgrade to new upstream traceroute-2.0.7
  - resolves: #249958: traceroute: useless debuginfo package


author: Martin Bacovsky <mbacovsk@redhat.com> - 2.0.3-1.fc7
changelog:
  - Resolves: #222577 - man page with execute bit
  - Resolves: #223784 - new traceroute breaks scripts
  - Resolves: #223795 - /bin/tcptraceroute symlink occludes alternate tcptraceroute package


author: Robert Scheck <redhat@linuxnetz.de> 1.0.3-3
changelog:
  - enable working IPv6 support in traceroute
  - removed old compatibility links, nothing has SUID/SGID
  - added some documentation files
  - don't expand rpm macros in %changelog


author: Xose Vazquez Perez <xose.vazquez@gmail.com> 1.0.3-2
changelog:
  - license is GPL
  - remove S_ISUID from /bin/traceroute
  - description of this implementation
  - s/$RPM_BUILD_ROOT/%{buildroot}
  - man page needs 0644
  - link it agains relative paths, it works over NFS


author: Phil Knirsch <pknirsch@redhat.com> 1.4a12-20
changelog:
  - Added patch from Jesper Skriver supplied by Kaj J. Niemi to support
    draft-ietf-mpls-icmp-02.txt.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - bugfix for segfault with source routing (#13466)
  - fix bug tracerouting thru aliased ethernet addresses (#9351)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.11-1
changelog:
  - Update to m4-1.4.11 (removed vasnprintf patch, it's included in
    upstream source)
    Resolves: #443589


author: Miloslav Trmac <mitr@redhat.com> - 1.4.5-3
changelog:
  - Use the install-info scriptlets recommended in the Fedora Extras wiki
  - Move $RPM_BUILD_ROOT cleaning from %prep to %install


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add URL tag
  - improved spec file
  - add hack to update config.guess config.sub
  - fix to build with newer autoconf versions


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-7
changelog:
  - Synchronize with udev in pvscan --cache and fix dangling udev_sync cookies.
  - Fix autoactivation to not autoactivate VG/LV on each change of the PVs used.
  - Fix lvmetad updates for lvm1 format and fix reported internal errors.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-6
changelog:
  - Limit RAID device replacement to repair only if LV is not in-sync.
  - Disallow RAID device replacement or repair on inactive LVs.
  - Fix possible race while removing metadata from lvmetad.
  - Fix possible deadlock when querying and updating lvmetad at the same time.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-5
changelog:
  - Avoid a global lock in pvs when lvmetad is in use.
  - Fix crash in pvscan --cache -aay triggered by non-mda PV.
  - Fix memleak in device_is_usable mirror testing function.
  - Do not ignore -f in lvconvert --repair -y -f for mirror and raid volumes.
  - Fix regression that caused inability to create a snapshot of an inactive LV.
  - Remove warning about unsupported discards for non-power-of-2 thin pool chunks.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-4
changelog:
  - Add DM_DISABLE_UDEV environment variable to manage dev nodes by libdm only.
  - Recognize DM_DISABLE_UDEV environment variable for a complete fallback.
  - Do not verify udev operations if --noudevsync command option is used.
  - Automatically deactivate failed preloaded dm tree node.
  - Fix lvm2app to return all property sizes in bytes.
  - Add lvm.conf option global/thin_disabled_features.
  - Add lvconvert support to swap thin pool metadata volume.
  - Implement internal function detach_pool_metadata_lv().
  - Fix lvm2app and return lvseg discards property as string.
  - Allow forced vgcfgrestore of lvm2 metadata with thin volumes.
  - Add lvm.conf thin pool defs thin_pool_{chunk_size|discards|zero}.
  - Support discards for non-power-of-2 thin pool chunks.
  - Support allocation of pool metadata with lvconvert command.
  - Move common functionality for thin lvcreate and lvconvert to toollib.
  - Use lv_is_active() instead of lv_info() call.
  - Disallow pvmove on RAID LVs until they are addressed properly
  - Automatically restore MISSING PVs with no MDAs.
  - Do not allow --splitmirrors on RAID10 logical volumes.
  - When no '-i' argument is given for RAID10, default to 2 stripes.
  - Mirrored log is now fixed before its mirror when double-fault occurs.
  - Exit pvscan --cache immediately if cluster locking used or lvmetad not used.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-3
changelog:
  - Init lvmetad lazily to avoid early socket access on config overrides.
  - Hardcode use_lvmetad=0 if cluster locking used and issue a warning msg.
  - Avoid reading mirrors with failed devices in its mirrored log.
  - Avoid reading from mirrors that have failed devices if they block I/O.
  - Change lvs heading Copy% to Cpy%Sync and print RAID4/5/6 sync% there too.
  - Fix dm_task_set_cookie to properly process udev flags if udev_sync disabled.
  - Add Requires: device-mapper-persistent-data for thin provisioning support.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-1
changelog:
  - Don't try to issue discards to a missing PV to avoid segfault.
  - Fix vgchange -aay not to activate non-matching LVs that follow a matching LV.
  - Fix lvchange --resync for RAID LVs which had no effect.
  - Add RAID10 support (--type raid10).
  - Introduce blkdeactivate script to deactivate block devs with dependencies.
  - Apply 'dmsetup mangle' for dm UUIDs besides dm names.
  - Use -q as short form of --quiet.
  - Suppress non-essential stdout with -qq.
  - Add log/silent to lvm.conf equivalent to -qq.
  - Add (p)artial attribute to lvs.
  - Implement devices/global_filter to hide devices from lvmetad.
  - Add lvmdump -l, to collect a state dump from lvmetad.
  - Add --discards to lvconvert.
  - Add --poolmetadata to lvconvert and support thin meta/data dev stacking.
  - Support creation of read-only thin volumes (lvcreate -p r).
  - Support changes of permissions for thin snapshot volumes.
  - Make lvremove ask before discarding data areas.
  - Prohibit not yet supported change of thin-pool to read-only.
  - Using autoextend percent 0 for thin pool fails 'lvextend --use-policies'.
  - Make vgscan --cache an alias for pvscan --cache.
  - Clear lvmetad metadata/PV cache before a rescan.
  - Fix a segmentation fault upon receiving a corrupt lvmetad response.
  - Give inconsistent metadata warnings in pvscan --cache.
  - Avoid overlapping locks that could cause a deadlock in lvmetad.
  - Fix memory leaks in libdaemon and lvmetad.
  - Optimize libdaemon logging for a fast no-output path.
  - Only create lvmetad pidfile when running as a daemon (no -f).
  - Warn if lvmetad is running but disabled.
  - Warn about running lvmetad with use_lvmetad = 0 in example.conf.
  - Update lvmetad help output (flags and their meaning).
  - Make pvscan --cache read metadata from LVM1 PVs.
  - Make libdaemon buffer handling asymptotically more efficient.
  - Make --sysinit suppress lvmetad connection failure warnings.
  - Prohibit usage of lvcreate --thinpool with --mirrors.
  - Fix lvm2api origin reporting for thin snapshot volume.
  - Add implementation of lvm2api function lvm_percent_to_float.
  - Allow non power of 2 thin chunk sizes if thin pool driver supports that.
  - Allow limited metadata changes when PVs are missing via [vg|lv]change.
  - Do not start dmeventd for lvchange --resync when monitoring is off.
  - Remove pvscan --cache from lvm2-lvmetad init script.
  - Report invalid percentage for property snap_percent of non-snaphot LVs.
  - Disallow conversion of thin LVs to mirrors.
  - Fix lvm2api data_percent reporting for thin volumes.
  - Do not allow RAID LVs in a clustered volume group.
  - Enhance insert_layer_for_lv() with recursive rename for _tdata LVs.
  - Skip building dm tree for thin pool when called with origin_only flag.
  - Ensure descriptors 0,1,2 are always available, using /dev/null if necessary.
  - Use /proc/self/fd when available for closing opened descriptors efficiently.
  - Fix inability to create, extend or convert to a large (> 1TiB) RAID LV.
  - Update lvmetad communications to cope with clients using different filters.
  - Clear LV_NOSYNCED flag when a RAID1 LV is converted to a linear LV.
  - Disallow RAID1 upconvert if the LV was created with --nosync.
  - Disallow addition of RAID images until the array is in-sync.
  - Fix RAID LV creation with '--test' so valid commands do not fail.
  - Add lvm_lv_rename() to lvm2api.
  - Fix setvbuf code by closing and reopening stream before changing buffer.
  - Disable private buffering when using liblvm.
  - When private stdin/stdout buffering is not used always use silent mode.
  - Fix 32-bit device size arithmetic needing 64-bit casting throughout tree.
  - Fix dereference of NULL in lvmetad error path logging.
  - Fix buffer memory leak in lvmetad logging.
  - Change lvmetad logging syntax from -ddd to -l {all|wire|debug}.
  - Add new libdaemon logging infrastructure.
  - Support unmount of thin volumes from pool above thin pool threshold.
  - Update man page to reflect that dm UUIDs are being mangled as well.
  - Add 'mangled_uuid' and 'unmangled_uuid' fields to dmsetup info -c -o.
  - Mangle device UUID on dm_task_set_uuid/newuuid call if necessary.
  - Add dm_task_get_uuid_mangled/unmangled to libdevmapper.
  - Always reset delay_resume_if_new flag when stacking thin pool over anything.
  - Don't create value for dm_config_node and require dm_config_create_value call.
  - Check for existing new_name for dmsetup rename.
  - Fix memory leak in dmsetup _get_split_name() error path.
  - Add Requires: bash >= 4.0 for blkdeactivate script.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.97-1
changelog:
  - Use 'ignore' discards for thin metadata created with older versions.
  - Use proper condition to check for unsupported discards settings.
  - Update lvs manpage with discards (2.02.97).
  - Add support for lvcreate --discards.
  - Issue error message when arguments do not match specified RAID type.
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-9
changelog:
  - Re-enable partial activation of non-thin LVs until it can be fixed (2.02.90).
  - Reinstate snapshots of mirror segment type.
    Warn of deadlock risk when using snapshots of mirror segment type.
  - Set delay_resume_if_new on deptree snapshot origin.
  - Add Conflicts: vdsm < 4.9-113.0 (new 'target' and 'zero' LV attr breaks vdsm).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-8
changelog:
  - Fix up-convert when mirror activation is controled by volume_list and tags.
  - Add a note for global/mirror_segtype_default setting that RAID1 is not cluster-aware.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-7
changelog:
  - Disallow snapshots of mirror segment type.
  - Fix bug in cmirror that caused incorrect status info to print on some nodes.
  - Disallow changing cluster attribute of VG while RAID LVs are active.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-6
changelog:
  - Allow subset of failed devices to be replaced in RAID LVs.
  - Prevent resume from creating error devices that already exist from suspend.
  - Fix lvconvert error message for non-mergeable volumes.
  - Fix volume group unlocking in vgreduce error path.
  - Update and correct lvs man page with supported column names.
  - Rename (Blk)DevNames/DevNos dmsetup header to (Blk)DevNamesUsed/DevNosUsed.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-5
changelog:
  - Add lvmetad man page.
  - Fix RAID device replacement code so that it works under snapshot.
  - Fix inability to split RAID1 image while specifying a particular PV.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-4
changelog:
  - Fix lvresize of thin pool for striped devices.
  - Round upwards when specifying number of extents for lvresize.
  - Round downwards strip alignment for lvcreate with %FREE.
  - Fix problems when specifying PVs during RAID down-converts.
  - Fix ability to handle failures in mirrored log (2.02.89).
  - Change message severity to log_very_verbose for missing dev info in udev db.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-3
changelog:
  - Restart clvmd daemon on lvm2-cluster package upgrade.
  - Keep exclusive activation in pvmove if LV is already active.
  - Disallow pvmove for exclusive LV if some affected LVs are not exclusively activated.
  - Remove unused and wrongly set cluster VG flag from clvmd lock query command.
  - Fix pvmove for exclusively activated LV pvmove in clustered VG (2.02.86).
  - Detect VG name being part of the LV name in lvconvert --splitmirrors -n.
  - Add 'vgscan --cache' functionality for consistency with 'pvscan --cache'.
  - Use 'pvscan --cache' instead of vgscan in lvmetad init script.
  - Exit immediately if LISTEN_PID env var incorrect during systemd handover.
  - Update and fix monitoring of thin pool devices.
  - Fix initializiation of thin monitoring (2.02.92).
  - Remove watch udev rule from 13-dm-disk.rules.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-2
changelog:
  - Fix a regression in handling of lvchange/lvcreate --major/--minor (2.02.95).
  - Fix name conflicts that prevent down-converting RAID1 when specifying a device.
  - Improve thin_check option passing and use configured path.
  - Add --with-thin-check configure option for path to thin_check.
  - Restart dmeventd on device-mapper-event package upgrade.
  - Do not run a new dmeventd instance on restart if there's no existing one.
  - Detect lvm binary path in lvmetad udev rules.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-1
changelog:
  - Update to latest upstream release with initial support for thinly-provisioned
    devices and scalable snapshots, improved support for RAID personalities,
    initial support for LVM metadata caching daemon and various other fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-6
changelog:
  - Fix lv_info open_count test for disabled verify_udev_operations (2.02.86).
  - Log dev name now returned to kernel for registering during cmirror CTR.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-4
changelog:
  - Fix splitmirror in cluster having different DM/LVM views of storage.
  - Fix improper udev settings during suspend/resume for mirror sub-LVs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-3
changelog:
  - Fix overly strict extent-count divisibility requirements for striped mirrors.
  - Fix rounding direction in lvresize when reducing volume size.
  - Fix possible overflow of size if %FREE or %VG is used.
  - Fix vgchange activation of snapshot with virtual origin.
  - Activate virtual snapshot origin exclusively (only on local node in cluster).
  - Fix lv_mirror_count to handle mirrored stripes properly.
  - Fix failure to down-convert a mirror to linear due to udev "dev open" conflict.
  - Fix mirrored log creation when PE size is small - force log_size >= region_size.
  - Fix log size calculation when only a log is being added to a mirror.
  - Work around resume_lv causing error LV scanning during splitmirror operation.
  - Begin using 64-bit status field flags.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-2
changelog:
  - Terminate pv_attr field correctly (2.02.86).
  - Fix resource leak when strdup fails in _get_device_status() (2.02.85).
  - Fix unsafe table load when splitting off smaller mirror from a larger one.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-1
changelog:
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.86-1
changelog:
  - Fix read-only identical table reload supression.
  - Suppress low-level locking errors and warnings while using --sysinit.
  - Remove --force option from lvrename manpage.
  - Change DEFAULT_UDEV_SYNC to 1 so udev_sync is used even without any config.
  - Compare also file size to detect changed config file.
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.83-3
changelog:
  - Mitigate annoying error warning from device is usable check if run as non-root.
  - Fallback to control node creation only if node doesn't exist yet.
  - Avoid possible endless loop in _free_vginfo when 4 or more VGs have same name.
  - Fix to make resuming exclusive cluster mirror use local target type.
  - Lower secure data flag warning to verbose level if unsupported by kernel.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.83-1
changelog:
  - Fix CRC32 calculation on big endian CPU (2.02.75).
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.82-1
changelog:
  - Allow exclusive activation of snapshots in a cluster.
  - Add addnodeonresume and addnodeoncreate switch to dmsetup.
  - Add dm_tak_secure_data fn to libdevmapper to wipe all ioctl buffers in kernel.
  - Increase hash table size to 1024 LV names and 64 PV uuids.
  - Fix node and symlink operations in /dev for recent udev_sync optimalisation.
  - Remove unneeded checks for open_count in lv_info().
  - Synchronize with udev before checking open_count in lv_info().
  - Remove fs_unlock() from lv_resume path.
  - Allow CLVMD_CMD_SYNC_NAMES to be propagated around the cluster if requested.
  - Avoid rebuilding of uuid validation table.
  - Improve lvcreate "insufficient extents" errors to "insufficient free space".
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8
changelog:
  - Fix potential for corruption during cluster mirror device failure.
  - Fix 'lvconvert --splitmirrors' in cluster operation.
  - Ignore snapshots when performing mirror recovery beneath an origin.
  - Add suspend_lv_origin and resume_lv_origin using LCK_ORIGIN_ONLY.
  - Allow internal suspend and resume of origin without its snapshots.
  - Fix dev_manager_transient to access -real device not snapshot-origin.
  - Monitor origin -real device below snapshot instead of overlay device.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-5
changelog:
  - Fix clvmd init script to require proper dependencies.
  - Recognise and give preference to md device partitions (blkext major).
  - Split-mirror operations were ignoring user-specified PVs.
  - Never scan internal LVM devices.
  - Fix segfault in regex matcher with characters of ordinal value > 127.
  - Use built-in rule for device aliases: block/ < dm- < disk/ < mapper/ < other.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-4
changelog:
  - Fix data corruption bug in cluster mirrors.
  - Require logical volume(s) to be explicitly named for lvconvert --merge.
  - Disallow 'mirrored' log type for cluster mirrors.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-2
changelog:
  - Make vgck warn about missing PVs.
  - Revert failed table load preparation after "create, load and resume".
  - Check if cluster log daemon is running before allowing cmirror create.
  - Add dm_create_lockfile to libdm and use for pidfiles for all daemons.
  - Correct LV list order used by lvconvert when splitting a mirror.
  - Check if LV with specified name already exists when splitting a mirror.
  - Fix suspend/resume logic for LVs resulting from splitting a mirror.
  - Fix possible hang when all mirror images of a mirrored log fail.
  - Adjust auto-metadata repair and caching logic to try to cope with empty mdas.
  - Update pvcreate, {pv|vg}change, and lvm.conf man pages about metadataignore.
  - Prompt if metadataignore with vgextend or pvchange would adjust vg_mda_copies.
  - Adjust vg_mda_copies if metadataignore given with vgextend or pvchange.
  - Speed up the regex matcher.
  - Use "nowatch" udev rule for inappropriate devices.
  - Document LVM fault handling in lvm_fault_handling.txt.
  - Clarify help text for vg_mda_count.
  - Add more verbose messages while checking volume_list and hosttags settings.
  - Add log_error when strdup fails in {vg|lv}_change_tag().
  - Do not log backtrace in valid _lv_resume() code path.
  - Remove log directly if all mirror images of a mirrored log fail.
  - Randomly select which mdas to use or ignore.
  - Add printf format attributes to yes_no_prompt and fix a caller.
  - Remove superfluous suspended device counter from clvmd.
  - Fix lvm shell crash when input is entirely whitespace.
  - Update partial mode warning message.
  - Restore the removemissing behaviour of lvconvert --repair --use-policies.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.69-2
changelog:
  - Always pass unsuspended dm devices through persistent filter to other filters.
  - Move test for suspended dm devices ahead of other filters.
  - Fix another segfault in clvmd -R if no response from daemon received. (2.02.68)
  - Preserve memlock balance in clvmd when activation triggers a resume.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.69-1
changelog:
  - Add metadata/vgmetadatacopies to lvm.conf.
  - Add --metadataignore to pvcreate and vgextend.
  - Add vg_mda_copies, pv_mda_used_count and vg_mda_used_count to reports.
  - Describe --vgmetadatacopies in lvm.conf and other man pages.
  - Add --[vg]metadatacopies to select number of mdas to use in a VG.
  - Make the metadata ignore bit control read/write metadata areas in a PV.
  - Add pvchange --metadataignore to set or clear a metadata ignore bit. 
  - Refactor metadata code to prepare for --metadataignore / --vgmetadatacopies.
  - Ensure region_size of mirrored log does not exceed its full size.
  - Preload libc locale messages to prevent reading it in memory locked state.
  - Fix handling of simultaneous mirror image and mirrored log image failure.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.68-1
changelog:
  - Have device-mapper-libs require device-mapper (circular) for udev rules.
  - Clear exec_prefix.
  - Use early udev synchronisation and update of dev nodes for clustered mirrors.
  - Fix udev rules to handle spurious events properly.
  - Add lv_path to reports to offer full /dev pathname.
  - Avoid abort when generating cmirror status.
  - Fix clvmd initscript status to print only active clustered LVs. 
  - Fix segfault in clvmd -R if no response from daemon received.
  - Honour log argument when down-converting stacked mirror.
  - Sleep to workaround clvmd -S race: socket closed early and server drops cmd. 
  - Exit successfully when using -o help (but not -o +help) with LVM reports.
  - Add man pages for lvmconf, dmeventd and non-existent lvmsadc and lvmsar tools.
  - Add --force, --nofsck and --resizefs to lvresize/extend/reduce man pages.
  - Fix lvm2cmd example in documentation.
  - Fix typo in warning message about missing device with allocated data areas.
  - Add device name and offset to raw_read_mda_header error messages.
  - Allow use of lvm2app and lvm2cmd headers in C++ code.
  - Require partial option in lvchange --refresh for partial LVs.
  - Don't merge unchanged persistent cache file before dumping if tool scanned.
  - Avoid selecting names under /dev/block if there is an alternative.
  - Fix clvmd initscript restart command to start clvmd if not yet running.
  - Handle failed restart of clvmd using -S switch properly.
  - Use built-in absolute paths in clvmd (clvmd restart and PV and LV queries).
  - Consistently return ECMD_FAILED if interrupted processing multiple LVs.
  - Add --type parameter description to the lvcreate man page.
  - Document 'clear' in dmsetup man page.
  - Replace strncmp kernel version number checks with proper ones.
  - Update clustered log kernel module name to log-userspace for 2.6.31 onwards.
  - Support autoloading of dm-mod module for kernels from 2.6.35.
  - Add dm_tree_node_set_presuspend_node() to presuspend child when deactivating.
  - Do not fail lvm_init() if init_logging() or _init_rand() generates an errno.
  - Fix incorrect memory pool deallocation while using vg_read for files.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.66-2
changelog:
  - Simplify and fix Requires package headers.
  - If unable to obtain snapshot percentage leave value blank on reports.
  - Use new install_system_dirs and install_initscripts makefile targets.
  - Add lvm2app functions to lookup a vgname from a pvid and pvname.
  - Change internal processing of PVs in pvchange.
  - Validate internal lock ordering of orphan and VG_GLOBAL locks.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.65-1
changelog:
  - Disallow vgchange --clustered if there are active mirrors or snapshots.
  - Fix truncated total size displayed by pvscan.
  - Skip internal lvm devices in scan if ignore_suspended_devices is set.
  - Do not merge old device cache after we run full scan. (2.02.56)
  - Add new --sysinit compound option to vgchange and lvchange.
  - Fix clvmd init script never to deactivate non-clustered volume groups.
  - Drop duplicate errors for read failures and missing devices to verbose level.
  - Do not print encryption key in message debug output (cryptsetup luksResume).
  - Use -d to control level of messages sent to syslog by dmeventd.
  - Change -d to -f to run dmeventd in foreground.
  - Fix udev flags on remove in create_and_load error path.
  - Add dm_list_splice() function to join two lists together.
  - Use /bin/bash for scripts with bashisms.
  - Switch Libs.private to Requires.private in devmapper.pc and lvm2app.pc.
  - Use pkgconfig Requires.private for devmapper-event.pc.


author: Alasdair Kergon <agk@redhat.com> - 2.02.64-1
changelog:
  - Avoid pointless initialisation when the 'version' command is run directly.
  - Fix memory leak for invalid regex pattern input.
  - Display invalid regex pattern for filter configuration in case of error.
  - Fix -M and --type to use strings, not pointers that change on config refresh.
  - Fix lvconvert error message when existing mirrored LV is not found.
  - Set appropriate udev flags for reserved LVs.
  - Disallow the direct removal of a merging snapshot.
  - Don't preload the origin when removing a snapshot whose merge is pending.
  - Disallow the addition of mirror images while a conversion is happening.
  - Disallow primary mirror image removal when mirror is not in-sync.
  - Remove obsolete --name parameter from vgcfgrestore.
  - Add -S command to clvmd to restart the daemon preserving exclusive locks.
  - Increment lvm2app version from 1 to 2 (memory allocation changes).
  - Change lvm2app memory alloc/free for pv/vg/lv properties.
  - Change daemon lock filename from lvm2_monitor to lvm2-monitor for consistency.
  - Add support for new IMPORT{db} udev rule available in udev v152.
  - Add DM_UDEV_PRIMARY_SOURCE_FLAG udev flag to recognize proper DM events.
  - Also include udev libs in libdevmapper.pc.
  - Cache bitset locations to speed up _calc_states.
  - Add a regex optimisation pass for shared prefixes and suffixes.
  - Add dm_bit_and and dm_bitset_equal to libdevmapper.
  - Speed up dm_bit_get_next with ffs().
  - Remove 'lvmconf --lockinglibdir' from cluster post: locking is now built-in.
  - Move libdevmapper-event-lvm2.so to devel package.
  - Explicitly specify libdevmapper-event.so* attributes.
  - Drop support for upgrades from very old versions that used lvm not lvm2.
  - Move libdevmapper-event plug-in libraries into new device-mapper subdirectory.
  - Don't verify lvm.conf contents when using rpm --verify.
  - Move development links to shared objects to /usr.
  - Change libdevmapper deactivation to fail if device is open.
  - Wipe memory buffers for libdevmapper dm-ioctl parameters before releasing.
  - Add support for ioctl's DM_UEVENT_GENERATED_FLAG.
  - Allow incomplete mirror restore in lvconvert --repair upon insufficient space.
  - Do not reset position in metadata ring buffer on vgrename and vgcfgrestore.
  - Allow VGs with active LVs to be renamed.
  - Only pass visible LVs to tools in cmdline VG name/tag expansions without -a.
  - Use C locale and mlockall in clvmd and dmeventd.
  - Mask LCK_HOLD in cluster VG locks for upgrade compatibility with older clvmd.
  - Add activation/polling_interval to lvm.conf as --interval default.
  - Don't ignore error if resuming any LV fails when resuming groups of LVs.
  - Skip closing persistent filter cache file if open failed.
  - Permit mimage LVs to be striped in lvcreate, lvresize and lvconvert.
  - Fix pvmove allocation to take existing parallel stripes into account.
  - Fix incorrect removal of symlinks after LV deactivation fails.
  - Fix is_partitioned_dev not to attempt to reopen device.
  - Fix another thread race in clvmd.
  - Improve vg_validate to detect some loops in lists.
  - Change most remaining log_error WARNING messages to log_warn.
  - Always use blocking lock for VGs and orphan locks.
  - Allocate all memory for segments from private VG mempool.
  - Optimise searching PV segments for seeking the most recently-added.
  - Remove duplicated vg_validate checks when parsing cached metadata.
  - Use hash table of LVs to speed up parsing of text metadata with many LVs.
  - Fix two vg_validate messages, adding whitespace and parentheses.
  - When dmeventd is not forking because of -d flag, don't kill parent process.
  - Fix dso resource leak in error path of dmeventd.
  - Fix --alloc contiguous policy only to allocate one set of parallel areas.
  - Do not allow {vg|lv}change --ignoremonitoring if on clustered VG.
  - Add ability to create mirrored logs for mirror LVs.
  - Fix clvmd cluster propagation of dmeventd monitoring mode.
  - Allow ALLOC_ANYWHERE to split contiguous areas.
  - Add some assertions to allocation code.
  - Introduce pv_area_used into allocation algorithm and add debug messages.
  - Add activation/monitoring to lvm.conf.
  - Add --monitor and --ignoremonitoring to lvcreate.
  - Don't allow resizing of internal logical volumes.
  - Avoid scanning all pvs in the system if operating on a device with mdas.
  - Disable long living process flag in lvm2app library.
  - Fix pvcreate device md filter check.
  - Suppress repeated errors about the same missing PV uuids.
  - Bypass full device scans when using internally-cached VG metadata.
  - Only do one full device scan during each read of text format metadata.
  - Look up missing PVs by uuid not dev_name in pvs to avoid invalid stat.
  - Rewrite clvmd init script.
  - Add default alternative to mlockall using mlock to reduce pinned memory size.
  - Add use_mlockall and mlock_filter to activation section of lvm.conf.
  - Handle misaligned devices that report alignment_offset of -1.
  - Extend core allocation code in preparation for mirrored log areas.
  - No longer fall back to looking up active devices by name if uuid not found.
  - Don't touch /dev in vgmknodes if activation is disabled.
  - Add --showkeys parameter description to dmsetup man page.
  - Add --help option as synonym for help command.
  - Add lvm2app functions lvm_{vg|lv}_{get|add|remove}_tag() functions.
  - Refactor snapshot-merge deptree and device removal to support info-by-uuid.
  - Change spec file to excluding cluster components from the build on s390.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.61-1
changelog:
  - Add %ORIGIN support to lv{create,extend,reduce,resize} --extents.
  - Accept a list of LVs with 'lvconvert --merge @tag' using process_each_lv.
  - Remove false "failed to find tree node" error when activating merging origin.
  - Exit with success when lvconvert --repair --use-policies performs no action.
  - Avoid unnecessary second resync when adding mimage to core-logged mirror.
  - Make clvmd -V return status zero.
  - Fix cmirrord segfault in clog_cpg list processing when converting mirror log. 
  - Deactivate temporary pvmove mirror cluster-wide when activating it fails.
  - Add missing metadata vg_reverts in pvmove error paths.
  - Unlock shared lock in clvmd if activation calls fail.
  - Add lvm_pv_get_size, lvm_pv_get_free and lvm_pv_get_dev_size to lvm2app.
  - Change lvm2app to return all sizes in bytes as documented (not sectors).
  - Exclude internal VG names and uuids from lists returned through lvm2app.
  - Add LVM_SUPPRESS_LOCKING_FAILURE_MESSAGES environment variable.
  - Add DM_UDEV_DISABLE_LIBRARY_FALLBACK udev flag to rely on udev only.
  - Remove hard-coding that skipped _mimage devices from 11-dm-lvm.rules.
  - Export dm_udev_create_cookie function to create new cookies on demand.
  - Add --udevcookie, udevcreatecookie and udevreleasecookie to dmsetup.
  - Set udev state automatically instead of using DM_UDEV_DISABLE_CHECKING.
  - Set udev state automatically instead of using LVM_UDEV_DISABLE_CHECKING.
  - Remove pointless versioned symlinks to dmeventd plugin libraries.
    Resolves: #561422 #561423 #563321


author: Alasdair Kergon <agk@redhat.com> - 2.02.60-1
changelog:
  - Add cmirror subpackage for clustered mirrors.
  - Sleep before first progress check iff pvmove/lvconvert interval has prefix '+'.
  - Fix first syslog message prefix for dmeventd plugins.
  - Make failed locking initialisation messages more descriptive.
  - Add cman requires to cluster subpackage.
  - Set 'preferred_names' in default lvm.conf.
  - Add libdevmapper-event-lvm2.so to serialise dmeventd plugin liblvm2cmd use.
  - Stop dmeventd trying to access already-removed snapshots.
  - Fix clvmd to never scan suspended devices.
  - Fix detection of completed snapshot merge.
  - Improve snapshot merge metadata import validation.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.58-1
changelog:
  - Fix clvmd automatic target module loading crash.
  - Fix allocation code not to stop at the first area of a PV that fits.
  - Add support for the "snapshot-merge" kernel target (2.6.33-rc1).
  - Add --merge to lvconvert to merge a snapshot into its origin.
  - Disable openais and corosync support for clvmd.
    Resolves: #249478 #493055


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.57-1
changelog:
  - Add --splitmirrors to lvconvert to split off part of a mirror.
  - Allow vgremove to remove a VG with PVs missing after a prompt.
  - Add activation/udev_rules config option in lvm.conf.
  - Add --poll flag to vgchange and lvchange to control background daemon launch.
  - Impose limit of 8 mirror images to match the in-kernel kcopyd restriction.
  - Log failure type and recognise type 'F' (flush) in dmeventd mirror plugin.
  - Add --noudevrules option for dmsetup to disable /dev node management by udev.
  - Fix 'dmsetup info -c -o all' to show all fields.
  - Fix coredump and memory leak for 'dmsetup help -c'. 
  - Rename mirror_device_fault_policy to mirror_image_fault policy.
  - Use extended status of new kernel snapshot target 1.8.0 to detect when empty.
  - Allow use of precommitted metadata when a PV is missing.
  - Add global/abort_on_internal_errors to lvm.conf to assist testing.
  - If aborting due to internal error, always send that message to stderr.
  - Keep log type consistent when changing mirror image count.
  - Exit with success in lvconvert --repair --use-policies on failed allocation.
  - Ensure any background daemon exits without duplicating parent's functionality.
  - Change background daemon process names to "(lvm2)".
  - Fix internal lock state after forking.
  - Remove empty PV devices if lvconvert --repair is using defined policies.
  - Use fixed buffer to prevent stack overflow in persistent filter dump.
  - Propagate metadata commit and revert notifications to other cluster nodes.
  - Fix metadata caching and lock state propagation to remote nodes in clvmd.
  - Properly decode all flags in clvmd messages including VG locks.
  - Drop cached metadata after device was auto-repaired and removed from VG.
  - Clear MISSING_PV flag if PV reappeared and is empty.
  - Fix removal of multiple devices from a mirror.
  - Also clean up PVs flagged as missing in vgreduce --removemissing --force.
  - Fix some pvresize and toollib error paths with missing VG releases/unlocks.
  - Explicitly call suspend for temporary mirror layer.
  - Add memlock information to do_lock_lv debug output.
  - Always bypass calls to remote cluster nodes for non-clustered VGs. 
  - Permit implicit cluster lock conversion in pre/post callbacks on local node.
  - Permit implicit cluster lock conversion to the lock mode already held.
  - Fix lock flag masking in clvmd so intended code paths get invoked.
  - Remove newly-created mirror log from metadata if initial deactivation fails.
  - Improve pvmove error message when all source LVs are skipped.
  - Fix memlock imbalance in lv_suspend if already suspended.
  - Fix pvmove test mode not to poll (and fail).
  - Fix vgcreate error message if VG already exists.
  - Fix tools to use log_error when aborted due to user response to prompt.
  - Fix ignored readahead setting in lvcreate --readahead.
  - Fix clvmd memory leak in lv_info_by_lvid by calling release_vg.
  - If LVM_UDEV_DISABLE_CHECKING is set in environment, disable udev warnings.
  - If DM_UDEV_DISABLE_CHECKING is set in environment, disable udev warnings.
  - Always set environment variables for an LVM2 device in 11-dm-lvm.rules.
  - Disable udev rules for change events with DISK_RO set. 
  - Add dm_tree_add_dev_with_udev_flags to provide wider support for udev flags.
  - Correct activated or deactivated text in vgchange summary message.
  - Fix fsadm man page typo (fsdam).
    Resolves: #549870


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.56-1
changelog:
  - Update to latest upstream release with various fixes and enhancements
    detailed in WHATS_NEW.
    Resolves: #463271 #533275


author: Alasdair Kergon <agk@redhat.com> - 2.02.53-1
changelog:
  - Create any directories in /dev with umask 022. (#507397)
  - Handle paths supplied to dm_task_set_name by getting name from /dev/mapper.
  - Add splitname and --yes to dmsetup man page.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.52-3
changelog:
  - Enable udev synchronisation code.
  - Install default udev rules for device-mapper and LVM2.
  - Add BuildRequires: libudev-devel.
  - Add Requires: libudev (to check udev is running).
  - Add Requires: util-linux-ng (blkid used in udev rules).


author: Alasdair Kergon <agk@redhat.com> - 2.02.52-2
changelog:
  - Build dmeventd and place into a separate set of subpackages.
  - Remove no-longer-needed BuildRoot tag and buildroot emptying at install.


author: Alasdair Kergon <agk@redhat.com> - 2.02.52-1
changelog:
  - Prioritise write locks over read locks by default for file locking.
  - Add local lock files with suffix ':aux' to serialise locking requests.
  - Fix readonly locking to permit writeable global locks (for vgscan). (2.02.49)
  - Make readonly locking available as locking type 4.
  - Fix global locking in PV reporting commands (2.02.49).
  - Make lvchange --refresh only take a read lock on volume group.
  - Fix race where non-blocking file locks could be granted in error.
  - Fix pvcreate string termination in duplicate uuid warning message.
  - Don't loop reading sysfs with pvcreate on a non-blkext partition (2.02.51).
  - Fix vgcfgrestore error paths when locking fails (2.02.49).
  - Make clvmd check corosync to see what cluster interface it should use.
  - Fix vgextend error path - if ORPHAN lock fails, unlock / release vg (2.02.49).
  - Clarify use of PE ranges in lv{convert|create|extend|resize} man pages.
  - Restore umask when device node creation fails.
  - Check kernel vsn to use 'block_on_error' or 'handle_errors' in mirror table.


author: Milan Broz <mbroz@redhat.com> - 2.02.51-3
changelog:
  - Fix global locking in PV reporting commands (2.02.49).
  - Fix pvcreate on a partition (2.02.51).
  - Build clvmd with both cman and corosync support.


author: Alasdair Kergon <agk@redhat.com> - 2.02.51-2
changelog:
  - Fix clvmd locking broken in 2.02.50-1.
  - Only change LV /dev symlinks on ACTIVATE not PRELOAD (so not done twice).
  - Make lvconvert honour log mirror options combined with downconversion.
  - Add devices/data_alignment_detection to lvm.conf.
  - Add devices/data_alignment_offset_detection to lvm.conf.
  - Add --dataalignmentoffset to pvcreate to shift start of aligned data area.
  - Update synopsis in lvconvert manpage to mention --repair.
  - Document -I option of clvmd in the man page.


author: Alasdair Kergon <agk@redhat.com> - 2.02.50-1
changelog:
  - Add libs and devel subpackages to include shared libraries for applications.
    N.B. The liblvm2app API is not frozen yet and may still be changed
    Send any feedback to the mailing list lvm-devel@redhat.com.
  - Remove obsolete --with-dmdir from configure.
  - Add global/wait_for_locks to lvm.conf so blocking for locks can be disabled.
  - Fix race condition with vgcreate and vgextend on same device since 2.02.49.
  - Add an API version number, LVM_LIBAPI, to the VERSION string.
  - Return EINVALID_CMD_LINE not success when invalid VG name format is used.
  - Remove unnecessary messages after vgcreate/vgsplit code change in 2.02.49.
  - Store any errno and error messages issued while processing each command.


author: Alasdair Kergon <agk@redhat.com> - 2.02.49-1
changelog:
  - Exclude VG_GLOBAL from vg_write_lock_held so scans open devs read-only again.
  - Fix dev name mismatch in vgcreate man page example.
  - Check md devices for a partition table during device scan.
  - Add extended device (blkext) and md partition (mdp) types to filters.
  - Make text metadata read errors for segment areas more precise.
  - Fix text segment metadata read errors to mention correct segment name.
  - Include segment and LV names in text segment import error messages.
  - Fix memory leak in vgsplit when re-reading the vg.
  - Permit several segment types to be registered by a single shared object.
  - Update the man pages to document size units uniformly.
  - Allow commandline sizes to be specified in terms of bytes and sectors.
  - Update 'md_chunk_alignment' to use stripe-width to align PV data area.
  - Fix segfault in vg_release when vg->cmd is NULL.
  - Add dm_log_with_errno and dm_log_with_errno_init, deprecating the old fns.
  - Fix whitespace in linear target line to fix identical table line detection.
  - Add device number to more log messages during activation.


author: Fabio M. Di Nitto <fdinitto@redhat.com> 2.02.48-2
changelog:
  - BuildRequires and Requires on stable versions of both corosync-lib (1.0.0-1)
    and cluster-lib (3.0.0-20).


author: Alasdair Kergon <agk@redhat.com> - 2.02.48-1
changelog:
  - Abort if automatic metadata correction fails when reading VG to update it.
  - Don't fallback to default major number in libdm: use dm_task_set_major_minor.
  - Explicitly request fallback to default major number in device mapper.
  - Ignore suspended devices during repair.
  - Suggest using lvchange --resync when adding leg to not-yet-synced mirror.
  - Destroy toolcontext on clvmd exit to avoid memory pool leaks.
  - Fix lvconvert not to poll mirror if no conversion in progress.
  - Fix memory leaks in toolcontext error path.
  - Reinstate partial activation support in clustered mode.
  - Allow metadata correction even when PVs are missing.
  - Use 'lvm lvresize' instead of 'lvresize' in fsadm.
  - Do not use '-n' realine option in fsadm for rescue disk compatiblity.
  - Round up requested readahead to at least one page and print warning.
  - Try to repair vg before actual vgremove when force flag provided.
  - Unify error messages when processing inconsistent volume group.
  - Introduce lvconvert --use_policies (repair policy according to lvm.conf).
  - Fix rename of active snapshot with virtual origin.
  - Fix convert polling to ignore LV with different UUID.
  - Cache underlying device readahead only before activation calls.
  - Fix segfault when calculating readahead on missing device in vgreduce.
  - Remove verbose 'visited' messages.
  - Handle multi-extent mirror log allocation when smallest PV has only 1 extent.
  - Add LSB standard headers and functions (incl. reload) to clvmd initscript.
  - When creating new LV, double-check that name is not already in use.
  - Remove /dev/vgname/lvname symlink automatically if LV is no longer visible.
  - Rename internal vorigin LV to match visible LV.
  - Suppress 'removed' messages displayed when internal LVs are removed.
  - Fix lvchange -a and -p for sparse LVs.
  - Fix lvcreate --virtualsize to activate the new device immediately.
  - Make --snapshot optional with lvcreate --virtualsize.
  - Generalise --virtualoriginsize to --virtualsize.
  - Skip virtual origins in process_each_lv_in_vg() without --all.
  - Fix counting of virtual origin LVs in vg_validate.
  - Attempt to load dm-zero module if zero target needed but not present.
  - Add crypt target handling to libdevmapper tree nodes.
  - Add splitname command to dmsetup.
  - Add subsystem, vg_name, lv_name, lv_layer fields to dmsetup reports.
  - Make mempool optional in dm_split_lvm_name() in libdevmapper.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.02.47-2
changelog:
  - BuildRequire newer version of corosynclib (0.97-1) to link against
    latest libraries version (soname 4.0.0).
  - Add lvm2-2_02_48-cluster-cpg-new-api.patch to port clvmd-corosync
    to new corosync cpg API.


author: Alasdair Kergon <agk@redhat.com> - 2.02.47-1
changelog:
  - Inherit readahead setting from underlying devices during activation.
  - Detect LVs active on remote nodes by querying locks if supported.
  - Enable online resizing of mirrors.
  - Use suspend with flush when device size was changed during table preload.
  - Implement query_resource_fn for cluster_locking.
  - Support query_resource_fn in locking modules.
  - Fix pvmove to revert operation if temporary mirror creation fails.
  - Fix metadata export for VG with missing PVs.
  - Add vgimportclone and install it and the man page by default.
  - Force max_lv restriction only for newly created LV.
  - Do not query nonexistent devices for readahead.
  - Reject missing PVs from allocation in toollib.
  - Fix PV datalignment for values starting prior to MDA area. (2.02.45)
  - Add sparse devices: lvcreate -s --virtualoriginsize (hidden zero origin).
  - Fix minimum width of devices column in reports.
  - Add lvs origin_size field.
  - Implement lvconvert --repair for repairing partially-failed mirrors.
  - Fix vgreduce --removemissing failure exit code.
  - Fix remote metadata backup for clvmd.
  - Fix metadata backup to run after vg_commit always.
  - Fix pvs report for orphan PVs when segment attributes are requested.
  - Fix pvs -a output to not read volume groups from non-PV devices.
  - Introduce memory pools per volume group (to reduce memory for large VGs).
  - Always return exit error status when locking of volume group fails.
  - Fix mirror log convert validation question.
  - Enable use of cached metadata for pvs and pvdisplay commands.
  - Fix memory leak in mirror allocation code.
  - Save and restore the previous logging level when log level is changed.
  - Fix error message when archive initialization fails.
  - Make sure clvmd-corosync releases the lockspace when it exits.
  - Fix segfault for vgcfgrestore on VG with missing PVs.
  - Block SIGTERM & SIGINT in clvmd subthreads.
  - Detect and conditionally wipe swapspace signatures in pvcreate.
  - Fix maximal volume count check for snapshots if max_lv set for volume group.
  - Fix lvcreate to remove unused cow volume if the snapshot creation fails.
  - Fix error messages when PV uuid or pe_start reading fails.
  - Flush memory pool and fix locking in clvmd refresh and backup command.
  - Fix unlocks in clvmd-corosync. (2.02.45)
  - Fix error message when adding metadata directory to internal list fails.
  - Fix size and error message of memory allocation at backup initialization.
  - Remove old metadata backup file after renaming VG.
  - Restore log_suppress state when metadata backup file is up-to-date.
  - Export dm_tree_node_size_changed() from libdevmapper.
  - Fix segfault when getopt processes dmsetup -U, -G and -M options.
  - Add _smp_mflags to compilation and remove DESTDIR.


author: Alasdair Kergon <agk@redhat.com> - 2.02.45-1
changelog:
  - Update clusterlib and corosync dependencies.
  - Attempt proper clean up in child before executing fsadm or modprobe.
  - Do not scan devices if reporting only attributes from PV label.
  - Use pkgconfig to obtain corosync library details during configuration.
  - Fix error returns in clvmd-corosync interface to DLM.
  - Add --refresh to vgchange and vgmknodes man pages.
  - Pass --test from lvresize to fsadm as --dry-run.
  - Prevent fsadm from checking mounted filesystems.
  - No longer treats any other key as 'no' when prompting in fsadm.
  - Add --dataalignment to pvcreate to specify alignment of data area.
  - Fix unblocking of interrupts after several commands.
  - Provide da and mda locations in debug message when writing text format label.
  - Mention the restriction on file descriptors at invocation on the lvm man page.
  - Index cached vgmetadata by vgid not vgname to cope with duplicate vgnames.
  - No longer require kernel and metadata major numbers to match.
  - If kernel supports only one dm major number, use in place of any supplied.
  - Add option to /etc/sysconfig/cluster to select cluster type for clvmd.
  - Allow clvmd to start up if its lockspace already exists.
  - Separate PV label attributes which do not need parse metadata when reporting.
  - Remove external dependency on the 'cut' command from fsadm.
  - Fix pvs segfault when pv mda attributes requested for unavailable PV.
  - Add fsadm support for reszing ext4 filesysystems.
  - Change lvm2-cluster to corosync instead of cman.
  - Fix some old changelog typos in email addresses.


author: Alasdair Kergon <agk@redhat.com> - 2.02.44-1
changelog:
  - Add --nameprefixes, --unquoted, --rows to pvs, vgs, lvs man pages.
  - Fix lvresize size conversion for fsadm when block size is not 1K.
  - Fix pvs segfault when run with orphan PV and some VG fields.
  - Display a 'dev_size' of zero for missing devices in reports.
  - Add pv_mda_size to pvs and vg_mda_size to vgs.
  - Fix lvmdump /sys listing to include virtual devices directory.
  - Add "--refresh" functionality to vgchange and vgmknodes.
  - Avoid exceeding LV size when wiping device.
  - Calculate mirror log size instead of using 1 extent.
  - Ensure requested device number is available before activating with it.
  - Fix incorrect exit status from 'help <command>'.
  - Fix vgrename using UUID if there are VGs with identical names.
  - Fix segfault when invalid field given in reporting commands.
  - Use better random seed value in temp file creation.
  - Add read_urandom to read /dev/urandom. Use in uuid calculation.
  - Fix race in vgcreate that would result in second caller overwriting first.
  - Fix uninitialised lv_count in vgdisplay -c.
  - Don't skip updating pvid hash when lvmcache_info struct got swapped.
  - Fix startup race in clvmd.
  - Cope with snapshot dependencies when removing a whole VG with lvremove.
  - Make man pages and tool help text consistent using | for alternative options.
  - Add "all" field to reports expanding to all fields of report type.
  - Enforce device name length and character limitations in libdm.


author: Alasdair Kergon <agk@redhat.com> - 2.02.43-1
changelog:
  - Upstream merge of device-mapper and lvm2 source.
  - Correct prototype for --permission on lvchange and lvcreate man pages.
  - Exit with non-zero status from vgdisplay if couldn't show any requested VG.
  - libdevmapper.pc: Use simplified x.y.z version number.
  - Accept locking fallback_to_* options in the global section as documented.
  - Several fixes to lvconvert involving mirrors.
  - Avoid overwriting in-use on-disk text metadata when metadataarea fills up.
  - Generate man pages from templates and include version.
  - Fix misleading error message when there are no allocatable extents in VG.
  - Fix handling of PVs which reappeared with old metadata version.
  - Fix validation of --minor and --major in lvcreate to require -My always.
  - Allow lvremove to remove LVs from VGs with missing PVs.
  - In VG with PVs missing, by default allow activation of LVs that are complete.
  - Require --force with --removemissing in vgreduce to remove partial LVs.
  - No longer write out PARTIAL flag into metadata backups.
  - Treat new default activation/missing_stripe_filler "error" as an error target.
  - Add devices/md_chunk_alignment to lvm.conf.
  - Pass struct physical_volume to pe_align and adjust for md chunk size.
  - Avoid shuffling remaining mirror images when removing one, retaining primary.
  - Prevent resizing an LV while lvconvert is using it.
  - Avoid repeatedly wiping cache while VG_GLOBAL is held in vgscan & pvscan.
  - Fix pvresize to not allow resize if PV has two metadata areas.
  - Fix setting of volume limit count if converting to lvm1 format.
  - Fix vgconvert logical volume id metadata validation.
  - Fix lvmdump metadata gather option (-m) to work correctly.
  - Fix allocation bug in text metadata format write error path.
  - Fix vgcfgbackup to properly check filename if template is used.
  - vgremove tries to remove lv snapshot first.
  - Improve file descriptor leak detection to display likely culprit and filename.
  - Avoid looping forever in _pv_analyze_mda_raw used by pvck.
  - Change lvchange exit status to indicate if any part of the operation failed.
  - Fix pvchange and pvremove to handle PVs without mdas.
  - Fix pvchange -M1 -u to preserve existing extent locations when there's a VG.
  - Cease recognising snapshot-in-use percentages returned by early devt kernels.
  - Add backward-compatible flags field to on-disk format_text metadata.
  - libdevmapper: Only resume devices in dm_tree_preload_children if size changes.
  - libdevmapper: Extend deptree buffers so the largest possible device numbers fit.
  - libdevmapper: Underline longer report help text headings.


author: Fabio M. Di Nitto <fdinitto@redhat.cm> - 2.02.39-5
changelog:
  - Add BuildRequires on cmanlib-devel. This is required after libcman split
    from cman and cman-devel into cmanlib and cmanlib-devel.
  - Make versioned BuildRequires on cman-devel and cmanlib-devel more strict
    to guarantee to get the right version.


author: Alasdair Kergon <agk@redhat.com> - 2.02.39-3
changelog:
  - Fix up cache for PVs without mdas after consistent VG metadata is processed.
  - Update validation of safe mirror log type conversions in lvconvert.
  - Fix lvconvert to disallow snapshot and mirror combinations.
  - Fix reporting of LV fields alongside unallocated PV segments.
  - Add --unquoted and --rows to reporting tools.
  - Avoid undefined status code after _memlock commands in lvm shell.
  - Fix and improve readahead 'auto' calculation for stripe_size.
  - Fix lvchange output for -r auto setting if auto is already set.
  - Fix add_mirror_images not to dereference uninitialized log_lv upon failure.
  - Add --force to lvextend and lvresize.
  - Fix vgchange to not activate component mirror volumes directly.


author: Alasdair Kergon <agk@redhat.com> - 2.02.38-2
changelog:
  - dmsetup: Add --unquoted and --rows to 'info -c' command.
  - libdevmapper: Fix inverted no_flush debug message.


author: Alasdair Kergon <agk@redhat.com> - 2.02.38-1
changelog:
  - libdevmapper: Make dm_hash_iter safe against deletion.
  - libdevmapper: Accept a NULL pointer to dm_free silently.
  - libdevmapper: Calculate string size within dm_pool_grow_object.
  - libdevmapper: Send reporting field help text to stderr not stdout.

  - dmsetup: Add tables_loaded, readonly and suspended columns to reports.
  - dmsetup: Add --nameprefixes for new report output format FIELD=VALUE.

  - Add --nameprefixes to reporting tools for field name prefix output format.
  - Fix return values for reporting commands when run with no PVs, LVs, or VGs.
  - Add omitted unlock_vg() call when sigint_caught() during vg processing.
  - Fix free_count when reading pool metadata.
  - Fix segfault when using pvcreate on a device containing pool metadata.
  - In script-processing mode, stop if any command fails.
  - Warn if command exits with non-zero status code without a prior log_error.
  - Correct config file line numbers in messages when parsing comments.
  - Add missing deactivation after activation failure in lvcreate -Zy.
  - When removing LV symlinks, skip any where the VG name is not determined.
  - Fix vgsplit internal counting of snapshot LVs.
  - Update vgsplit to only restrict split with active LVs involved in split.
  - Fix vgsplit to only move hidden 'snapshotN' LVs when necessary.
  - Update vgsplit man page to reflect lvnames on the cmdline.
  - Update vgsplit to take "-n LogicalVolumeName" on the cmdline.
  - Fix vgsplit error paths to release vg_to lock.
  - Avoid spurious duplicate VG messages referring to VGs that are gone.
  - Drop dev_name_confirmed error message to debug level.
  - Fix setpriority error message to signed int.
  - Add assertions to trap deprecated P_ and V_ lock usage.
  - Avoid using DLM locks with LCK_CACHE type P_ lock requests.
  - Don't touch /dev in vgrename if activation is disabled.
  - Exclude VG_GLOBAL from internal concurrent VG lock counter.
  - Fix vgmerge snapshot_count when source VG contains snapshots.
  - Fix internal LV counter when a snapshot is removed.
  - Fix metadata corruption writing lvm1-formatted metadata with snapshots.
  - Fix lvconvert -m0 allocatable space check.
  - Don't attempt remote metadata backups of non-clustered VGs.
  - Improve preferred_names lvm.conf example.
  - Fix vgdisplay 'Cur LV' field to match lvdisplay output.
  - Fix lv_count report field to exclude hidden LVs.
  - Fix some pvmove error status codes.
  - Indicate whether or not VG is clustered in vgcreate log message.
  - Mention default --clustered setting in vgcreate man page.
  - Fix vgreduce to use vg_split_mdas to check sufficient mdas remain.
  - Update lvmcache VG lock state for all locking types now.
  - Fix output if overriding command_names on cmdline.
  - Add check to vg_commit() ensuring VG lock held before writing new VG metadata.
  - Add validation of LV name to pvmove -n.
  - Add some basic internal VG lock validation.
  - Fix vgsplit internal counting of snapshot LVs.
  - Update vgsplit to only restrict split with active LVs involved in split.
  - Fix vgsplit to only move hidden 'snapshotN' LVs when necessary.
  - Update vgsplit man page to reflect lvnames on the cmdline.
  - Update vgsplit to take "-n LogicalVolumeName" on the cmdline.
  - Fix vgsplit error paths to release vg_to lock.
  - Fix vgsplit locking of new VG.
  - Avoid erroneous vgsplit error message for new VG.
  - Suppress duplicate message when lvresize fails because of invalid vgname.
  - Cache VG metadata internally while VG lock is held.
  - Fix redundant lvresize message if vg doesn't exist.
  - Make clvmd-cman use a hash rather than an array for node updown info.
  - Decode numbers in clvmd debugging output.
  - Fix uninitialised mutex in clvmd if all daemons are not running at startup.
  - Add config file overrides to clvmd when it reads the active LVs list.
  - Make clvmd refresh the context correctly when lvm.conf is updated.
  - Fix another allocation bug with clvmd and large node IDs.
  - Fix uninitialised variable in clvmd that could cause odd hangs.
  - Correct command name in lvmdiskscan man page.
  - clvmd no longer crashes if it sees nodeids over 50.
  - Fix potential deadlock in clvmd thread handling.
  - Update usage message for clvmd.
  - Fix clvmd man page not to print <br> and clarified debug options.
  - Escape double quotes and backslashes in external metadata and config data.
  - Correct a function name typo in _line_append error message.
  - Fix resetting of MIRROR_IMAGE and VISIBLE_LV after removal of LV.
  - Fix remove_layer_from_lv to empty the LV before removing it.
  - Add missing no-longer-used segs_using_this_lv test to check_lv_segments.
  - Fix lvconvert detection of mirror conversion in progress.
  - Avoid automatic lvconvert polldaemon invocation when -R specified.
  - Fix 'pvs -a' to detect VGs of PVs without metadata areas.
  - Divide up internal orphan volume group by format type.
  - Fix lvresize to support /dev/mapper prefix in the LV name.
  - Fix lvresize to pass new size to fsadm when extending device.
  - Fix unfilled parameter passed to fsadm from lvresize.
  - Update fsadm to call lvresize if the partition size differs (with option -l).
  - Fix fsadm to support VG/LV names.


