# changelog

author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-3.el8]
changelog:
  - [net] tls: mark as Tech Preview (Sabrina Dubroca) [1570255]
  - [pci] PCI/VPD: Check for VPD access completion before checking for timeout (Myron Stowe) [1618820]
  - [rpmspec] redhat: remove bootwrapper subpackage (Gustavo Duarte) [1578399]
  - [virt] kvm: x86: Set highest physical address bits in non-present/reserved SPTEs (Paolo Bonzini) [1614808]
  - [virt] KVM/x86: Use CC_SET()/CC_OUT in arch/x86/kvm/vmx.c (Paolo Bonzini) [1614808]
  - [virt] KVM: X86: Implement PV IPIs in linux guest (Paolo Bonzini) [1614808]
  - [virt] KVM: X86: Add kvm hypervisor init time platform setup callback (Paolo Bonzini) [1614808]
  - [virt] KVM: X86: Implement "send IPI" hypercall (Paolo Bonzini) [1614808]
  - [virt] KVM/x86: Move X86_CR4_OSXSAVE check into kvm_valid_sregs() (Paolo Bonzini) [1614808]
  - [virt] KVM: x86: Skip pae_root shadow allocation if tdp enabled (Paolo Bonzini) [1614808]
  - [virt] KVM/MMU: Combine flushing remote tlb in mmu_set_spte() (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: skip VMWRITE of HOST_(FS, GS)_BASE when possible (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: skip VMWRITE of HOST_(FS, GS)_SEL when possible (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: always initialize HOST_(FS, GS)_BASE to zero during setup (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: move struct host_state usage to struct loaded_vmcs (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: compute need to reload FS/GS/LDT on demand (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: remove a misleading comment regarding vmcs02 fields (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: rename __vmx_load_host_state() and vmx_save_host_state() (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: add dedicated utility to access guest's kernel_gs_base (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: track host_state.loaded using a loaded_vmcs pointer (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: refactor segmentation code in vmx_save_host_state() (Paolo Bonzini) [1614808]
  - [virt] kvm: nVMX: Fix fault priority for VMX operations (Paolo Bonzini) [1614808]
  - [virt] kvm: nVMX: Fix fault vector for VMX operation at CPL > 0 (Paolo Bonzini) [1614808]
  - [virt] KVM: try __get_user_pages_fast even if not in atomic context (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: Add tlb_remote_flush callback support (Paolo Bonzini) [1614808]
  - [virt] KVM: x86: Add tlb remote flush callback in kvm_x86_ops (Paolo Bonzini) [1614808]
  - [virt] X86/Hyper-V: Add hyperv_nested_flush_guest_mapping ftrace support (Paolo Bonzini) [1614808]
  - [virt] X86/Hyper-V: Add flush HvFlushGuestPhysicalAddressSpace hypercall support (Paolo Bonzini) [1614808]
  - [virt] x86/kvm: Don't use pvqspinlock code if only 1 vCPU (Paolo Bonzini) [1614808]
  - [virt] KVM/MMU: Simplify __kvm_sync_page() function (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Remove CR3_PCID_INVD flag (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Add multi-entry LRU cache for previous CR3s (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Flush only affected TLB entries in kvm_mmu_invlpg* (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Skip shadow page resync on CR3 switch when indicated by guest (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Support selectively freeing either current or previous MMU root (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Add a root_hpa parameter to kvm_mmu->invlpg() (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Skip TLB flush on fast CR3 switch when indicated by guest (Paolo Bonzini) [1614808]
  - [virt] kvm: vmx: Support INVPCID in shadow paging mode (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Propagate guest PCIDs to host PCIDs (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Add ability to skip TLB flush when switching CR3 (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Use fast CR3 switch for nested VMX (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Support resetting the MMU context without resetting roots (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Add support for fast CR3 switch across different MMU modes (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Introduce KVM_REQ_LOAD_CR3 (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Introduce kvm_mmu_calc_root_page_role() (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Add fast CR3 switch code path (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Avoid taking MMU lock in kvm_mmu_sync_roots if no sync is needed (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Make sync_page() flush remote TLBs once only (Paolo Bonzini) [1614808]
  - [virt] KVM: MMU: drop vcpu param in gpte_access (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: Separate logic allocating shadow vmcs to a function (Paolo Bonzini) [1614808]
  - [virt] KVM: VMX: Mark vmcs header as shadow in case alloc_vmcs_cpu() allocate shadow vmcs (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: Expose VMCS shadowing to L1 guest (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: Do not forward VMREAD/VMWRITE VMExits to L1 if required so by vmcs12 vmread/vmwrite bitmaps (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: vmread/vmwrite: Use shadow vmcs12 if running L2 (Paolo Bonzini) [1614808]
  - [virt] KVM: selftests: add tests for shadow VMCS save/restore (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: include shadow vmcs12 in nested state (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: Cache shadow vmcs12 on VMEntry and flush to memory on VMExit (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: Verify VMCS shadowing VMCS link pointer (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: Verify VMCS shadowing controls (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: Introduce nested_cpu_has_shadow_vmcs() (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: Fail VMLAUNCH and VMRESUME on shadow VMCS (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: Allow VMPTRLD for shadow VMCS if vCPU supports VMCS shadowing (Paolo Bonzini) [1614808]
  - [virt] KVM: VMX: Change vmcs12(read, write)_any() to receive vmcs12 as parameter (Paolo Bonzini) [1614808]
  - [virt] KVM: VMX: Create struct for VMCS header (Paolo Bonzini) [1614808]
  - [virt] kvm: selftests: add test for nested state save/restore (Paolo Bonzini) [1614808]
  - [virt] kvm: nVMX: Introduce KVM_CAP_NESTED_STATE (Paolo Bonzini) [1614808]
  - [virt] KVM: x86: do not load vmcs12 pages while still in SMM (Paolo Bonzini) [1614808]
  - [virt] kvm: selftests: add basic test for state save and restore (Paolo Bonzini) [1614808]
  - [virt] kvm: selftests: ensure vcpu file is released (Paolo Bonzini) [1614808]
  - [virt] kvm: selftests: actually use all of lib/vmx.c (Paolo Bonzini) [1614808]
  - [virt] kvm: selftests: create a GDT and TSS (Paolo Bonzini) [1614808]
  - [virt] KVM: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: remove save/restore of host BNDCGFS MSR (Paolo Bonzini) [1614808]
  - [virt] KVM: Switch 'requests' to be 64-bit (explicitly) (Paolo Bonzini) [1614808]
  - [virt] kvm: selftests: add cr4_cpuid_sync_test (Paolo Bonzini) [1614808]
  - [virt] KVM: PPC: Book3S HV: Read kvm->arch.emul_smt_mode under kvm->lock (Paolo Bonzini) [1614808]
  - [virt] KVM: PPC: Book3S HV: Allow creating max number of VCPUs on POWER9 (Paolo Bonzini) [1614808]
  - [virt] KVM: PPC: Book3S HV: Pack VCORE IDs to access full VCPU ID space (Paolo Bonzini) [1614808]
  - [virt] KVM: PPC: Book3S HV: Fix constant size warning (Paolo Bonzini) [1614808]
  - [virt] KVM: PPC: Book3S HV: Add of_node_put() in success path (Paolo Bonzini) [1614808]
  - [virt] KVM: PPC: Book3S: Fix matching of hardware and emulated TCE tables (Paolo Bonzini) [1614808]
  - [virt] KVM: PPC: Remove mmio_vsx_tx_sx_enabled in KVM MMIO emulation (Paolo Bonzini) [1614808]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-2.el8]
changelog:
  - [net] tcp: Add tcp_clamp_rto_to_user_timeout() helper to improve accuracy (Michael Cambria) [1605024]
  - [net] tcp: Add tcp_retransmit_stamp() helper routine (Michael Cambria) [1605024]
  - [net] tcp: convert icsk_user_timeout from jiffies to msecs (Michael Cambria) [1605024]
  - [kernel] Revert sched/fair: Consider SD_NUMA when selecting the most idle group to schedule on (Lauro Ramos Venancio) [1585746]
  - [kernel] redhat: makefile: adjust KBUILD_CFLAGS to reflect kernel.spec for powerpc builds (Gustavo Duarte) [1582568]
  - [rpmspec] redhat: spec: build ppc64le kernel with -O3 (Gustavo Duarte) [1582568]
  - [scsi] scsi: csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1503574]
  - [scsi] csiostor: Add a soft dep on cxgb4 driver (Arjun Vynipadath) [1503574]
  - [firmware] dell_rbu: make firmware payload memory uncachable (Charles Rose) [1584401]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-1.el8]
changelog:
  - [scsi] scsi: lpfc: update driver version to 12.0.0.6 (Dick Kennedy) [1613913]
  - [scsi] scsi: lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1613913]
  - [scsi] scsi: lpfc: Correct LCB ACCept payload (Dick Kennedy) [1613913]
  - [scsi] scsi: lpfc: Limit tracking of tgt queue depth in fast path (Dick Kennedy) [1613913]
  - [scsi] scsi: lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1613913]
  - [scsi] scsi: lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1613913]
  - [scsi] scsi: lpfc: Fix sysfs Speed value on CNA ports (Dick Kennedy) [1613913]
  - [scsi] scsi: lpfc: Fix ELS abort on SLI-3 adapters (Dick Kennedy) [1613913]
  - [scsi] scsi: lpfc: remove null check on nvmebuf (Dick Kennedy) [1613913]
  - [arm64] arm64: fix ACPI dependencies (Bhupesh Sharma) [1556832]
  - [arm64] arm64: acpi: fix alignment fault in accessing ACPI (Bhupesh Sharma) [1556832]
  - [firmware] efi/arm: map UEFI memory map even w/o runtime services enabled (Bhupesh Sharma) [1556832]
  - [firmware] efi/arm: preserve early mapping of UEFI memory map longer for BGRT (Bhupesh Sharma) [1556832]
  - [acpi] drivers: acpi: add dependency of EFI for arm64 (Bhupesh Sharma) [1556832]
  - [arm64] arm64: export memblock_reserve()d regions via /proc/iomem (Bhupesh Sharma) [1556832]
  - [arm64] arm64: kconfig: Ensure spinlock fastpaths are inlined if !PREEMPT (Waiman Long) [1607924]
  - [arm64] arm64: locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607924]
  - [arm64] arm64: barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607924]
  - [scsi] scsi: lpfc: Revise copyright for new company language (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: update driver version to 12.0.0.5 (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: devloss timeout race condition caused null pointer reference (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: Fix NVME Target crash in defer rcv logic (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: Support duration field in Link Cable Beacon V1 command (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: Make PBDE optimizations configurable (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: Fix abort error path for NVMET (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: Fix panic if driver unloaded when port is offline (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: Fix driver not setting dpp bits correctly in doorbell word (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: Add Buffer overflow check, when nvme_info larger than PAGE_SIZE (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: use monotonic timestamps for statistics (Dick Kennedy) [1600946]
  - [x86] mark intel knights landing and knights mill unsupported (David Arcari) [1610493]
  - [netdrv] igb: Remove superfluous reset to PHY and page 0 selection (Corinna Vinschen) [1612824]
  - [tools] selftests/powerpc: Fix ptrace-pkey for default execute permission change (Steve Best) [1498799]
  - [tools] selftests/powerpc: Fix core-pkey for default execute permission change (Steve Best) [1498799]
  - [powerpc] powerpc/pkeys: make protection key 0 less special (Steve Best) [1498799]
  - [powerpc] powerpc/pkeys: Preallocate execute-only key (Steve Best) [1498799]
  - [powerpc] powerpc/pkeys: Fix calculation of total pkeys (Steve Best) [1498799]
  - [powerpc] powerpc/pkeys: Save the pkey registers before fork (Steve Best) [1498799]
  - [powerpc] powerpc/pkeys: key allocation/deallocation must not change pkey registers (Steve Best) [1498799]
  - [powerpc] powerpc/pkeys: Deny read/write/execute by default (Steve Best) [1498799]
  - [powerpc] powerpc/pkeys: Give all threads control of their key permissions (Steve Best) [1498799]
  - [s390] KVM: s390: Add huge page enablement control (David Hildenbrand) [1508102]
  - [s390] s390/mm: Add huge page gmap linking support (David Hildenbrand) [1508102]
  - [s390] s390/mm: hugetlb pages within a gmap can not be freed (David Hildenbrand) [1508102]
  - [s390] KVM: s390: Beautify skey enable check (David Hildenbrand) [1508102]
  - [s390] KVM: s390: Add skey emulation fault handling (David Hildenbrand) [1508102]
  - [s390] s390/mm: Add huge pmd storage key handling (David Hildenbrand) [1508102]
  - [s390] s390/mm: Clear skeys for newly mapped huge guest pmds (David Hildenbrand) [1508102]
  - [s390] s390/mm: Clear huge page storage keys on enable_skey (David Hildenbrand) [1508102]
  - [s390] s390/mm: Add huge page dirty sync support (David Hildenbrand) [1508102]
  - [s390] s390/mm: Add gmap pmd invalidation and clearing (David Hildenbrand) [1508102]
  - [s390] s390/mm: Add gmap pmd notification bit setting (David Hildenbrand) [1508102]
  - [s390] s390/mm: Add gmap pmd linking (David Hildenbrand) [1508102]
  - [s390] s390/mm: Abstract gmap notify bit setting (David Hildenbrand) [1508102]
  - [s390] s390/mm: Make gmap_protect_range more modular (David Hildenbrand) [1508102]
  - [s390] KVM: s390: Replace clear_user with kvm_clear_guest (David Hildenbrand) [1508102]
  - [hwmon] hwmon: (ibmpowernv) Add attributes to enable/disable sensor groups (Steve Best) [1524684]
  - [powerpc] powerpc/powernv: Add support to enable sensor groups (Steve Best) [1524684]
  - [net] net/smc: improve delete link processing (Hendrik Brueckner) [1548452]
  - [net] net/smc: provide fallback reason code (Hendrik Brueckner) [1548452]
  - [net] net/smc: use correct vlan gid of RoCE device (Hendrik Brueckner) [1548452]
  - [net] net/smc: fewer parameters for smc_llc_send_confirm_link() (Hendrik Brueckner) [1548452]
  - [net] net/smc: remove local variable page in smc_rx_splice() (Hendrik Brueckner) [1548452]
  - [net] net/smc: use DECLARE_BITMAP for rtokens_used_mask (Hendrik Brueckner) [1548452]
  - [net] net/smc: add function to get link group from link (Hendrik Brueckner) [1548452]
  - [net] net/smc: eliminate cursor read and write calls (Hendrik Brueckner) [1548452]
  - [net] net/smc: provide smc mode in smc_diag.c (Hendrik Brueckner) [1548452]
  - [s390] s390/ism: add device driver for internal shared memory (Hendrik Brueckner) [1548452]
  - [net] net/smc: add SMC-D diag support (Hendrik Brueckner) [1548452]
  - [net] net/smc: add SMC-D support in af_smc (Hendrik Brueckner) [1548452]
  - [net] net/smc: add SMC-D support in data transfer (Hendrik Brueckner) [1548452]
  - [net] net/smc: add SMC-D support in CLC messages (Hendrik Brueckner) [1548452]
  - [net] net/smc: add pnetid support for SMC-D and ISM (Hendrik Brueckner) [1548452]
  - [net] net/smc: add base infrastructure for SMC-D and ISM (Hendrik Brueckner) [1548452]
  - [net] net/smc: add pnetid support (Hendrik Brueckner) [1548452]
  - [net] net/smc: determine port attributes independent from pnet table (Hendrik Brueckner) [1548452]
  - [x86] mark whiskey-lake processor supported (David Arcari) [1609604]
  - [s390] KVM: s390: add etoken support for guests (Thomas Huth) [1612110]
  - [char] ipmi: do not configure ipmi for HPE m400 (Tony Camuso) [1583537]
  - [scsi] scsi: ipr: Format HCAM overlay ID 0x41 (Steve Best) [1498222]
  - [x86] x86/stacktrace: Enable HAVE_RELIABLE_STACKTRACE for the ORC unwinder (Joe Lawrence) [1587952]
  - [x86] x86/unwind/orc: Detect the end of the stack (Joe Lawrence) [1587952]
  - [x86] x86/stacktrace: Do not fail for ORC with regs on stack (Joe Lawrence) [1587952]
  - [x86] x86/stacktrace: Clarify the reliable success paths (Joe Lawrence) [1587952]
  - [x86] x86/stacktrace: Remove STACKTRACE_DUMP_ONCE (Joe Lawrence) [1587952]
  - [x86] x86/stacktrace: Do not unwind after user regs (Joe Lawrence) [1587952]
  - [infiniband] IB/rxe: Mark Soft-RoCE Transport driver as tech-preview (Don Dutile) [1605216]
  - [scsi] scsi: smartpqi: bump driver version to 1.1.4-130 (Don Brace) [1503736]
  - [scsi] scsi: smartpqi: fix critical ARM issue reading PQI index registers (Don Brace) [1503736]
  - [scsi] scsi: smartpqi: add inspur advantech ids (Don Brace) [1503736]
  - [scsi] scsi: smartpqi: improve error checking for sync requests (Don Brace) [1503736]
  - [scsi] scsi: smartpqi: improve handling for sync requests (Don Brace) [1503736]
  - [netdrv] ice: mark driver as tech-preview (Jonathan Toppins) [1495347]
  - [init] init/Kconfig: remove EXPERT from CHECKPOINT_RESTORE (Adrian Reber) [1568995 1557617 1525389]
  - [scsi] be2iscsi: remove BE3 family support (Maurizio Lombardi) [1598366]
  - [x86] update rh_check_supported processor list (David Arcari) [1595918]
  - [kernel] kABI: Add generic kABI macros to use for kABI workarounds (Myron Stowe) [1546831]
  - [pci] add pci_hw_vendor_status() (Maurizio Lombardi) [1590829]
  - [ata] ahci: thunderx2: Fix for errata that affects stop engine (Robert Richter) [1563590]
  - [pci] Vulcan: AHCI PCI bar fix for Broadcom Vulcan early silicon (Robert Richter) [1563590]
  - [kernel] bpf: set default values for bpf_jit_harden and bpf_jit_kallsyms (Eugene Syromiatnikov) [1569061]
  - [kernel] bpf: Add tech preview taint for syscall (Eugene Syromiatnikov) [1559877]
  - [kernel] bpf: set unprivileged_bpf_disabled to 1 by default, add a boot parameter (Eugene Syromiatnikov) [1561171]
  - [kernel] add Red Hat-specific taint flags (Eugene Syromiatnikov) [1559877]
  - [tools] perf tests: Add Python 3 support to attr.py ("Herton R. Krzesinski") [1561505]
  - [tools] perf scripts python: Add Python 3 support to stat-cpi.py ("Herton R. Krzesinski") [1561505]
  - [kernel] kdump: fix a grammar issue in a kernel message (Dave Young) [1507353]
  - [scripts] tags.sh: Ignore redhat/rpm (Prarit Bhargava) [1582586]
  - [kernel] put RHEL info into generated headers (Prarit Bhargava) [1544999]
  - [kernel] kdump: add support for crashkernel=auto (Dave Young) [1507353]
  - [kernel] kdump: round up the total memory size to 128M for crashkernel reservation (Dave Young) [1507353]
  - [arm64] acpi: prefer booting with ACPI over DTS (Mark Salter) [1576869]
  - [acpi] aarch64: acpi scan: Fix regression related to X-Gene UARTs (Mark Salter) [1519554]
  - [acpi] ACPI / irq: Workaround firmware issue on X-Gene based m400 (Mark Salter) [1519554]
  - [x86] add rh_check_supported (David Arcari) [1565717]
  - [scsi] qla2xxx: Remove PCI IDs of deprecated adapter (Himanshu Madhani) [1572233]
  - [scsi] be2iscsi: remove unsupported device IDs (Chris Leech) [1574502]
  - [scsi] Removing Obsolete hba pci-ids from rhel8 (Dick Kennedy) [1572321]
  - [scsi] hpsa: modify hpsa driver version (Joseph Szczypek) [1471185]
  - [scsi] hpsa: remove old cciss-based smartarray pci ids (Joseph Szczypek) [1471185]
  - [kernel] rh_taint: add support for marking driver as unsupported (Jonathan Toppins) [1565704]
  - [kernel] rh_taint: add support (David Arcari) [1565704]
  - [scsi] qla4xxx: Remove deprecated PCI IDs from RHEL 8 (Chad Dupuis) [1518874]
  - [scsi] aacraid: Remove depreciated device and vendor PCI id's (Raghava Aditya Renukunta) [1495307]
  - [scsi] megaraid_sas: remove deprecated pci-ids (Tomas Henzl) [1509329]
  - [scsi] mpt*: remove certain deprecated pci-ids (Tomas Henzl) [1511953]
  - [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1544999]
  - [acpi] ACPI: APEI: arm64: Ignore broken HPE moonshot APEI support (Al Stone) [1518076]
  - [rpmspec] compute content hash for kernel-headers (Rafael Aquini) [1613003]
  - [rpmspec] compress modules on all architectures ("Herton R. Krzesinski") [1614556]
  - [rpmspec] add gcov rpm packaging support (Jan Stancek) [1601733]
  - [rpmspec] don't ship spdxcheck.py (Jakub Racek)
  - [rpmspec] clean stray bpf files (Jakub Racek) [1593309]
  - [rpmspec] Copy symvers.gz to /lib/modules (Eugene Syromiatnikov) [1609695]
  - [rpmspec] Add kabi-dup related code into specfile (Petr Oros) [1585672]
  - [rpmspec] kernel spec: Add and enable kabi check (Petr Oros) [1585672]
  - [rpmspec] Enable warning checks for configs in rpm build (Prarit Bhargava) [1589858]
  - [rpmspec] remove workaround for rst2man-3 from python3-docutils ("Herton R. Krzesinski") [1602148]
  - [rpmspec] fix dist tag used for hardlink in kernel-devel post ("Herton R. Krzesinski") [1596397]
  - [scripts] get_maintainer.pl: Add optional .get_maintainer.MAINTAINERS override (Prarit Bhargava) [1595727]
  - [rpmspec] drop kernel package dependency on python2 ("Herton R. Krzesinski") [1561505]
  - [kernel] Makefile: Move RHEL definitions down (Jakub Racek) [1576568]
  - [rpmspec] eBPF: Add bpftool package to spec file (Jerome Marchand) [1559607]
  - [rpmspec] fix conflicts with COPYING file while installing newer 4.17 kernel ("Herton R. Krzesinski") [1579563]
  - [rpmspec] do not build kernel meta-package on noarch ("Herton R. Krzesinski") [1579512]
  - [rpmspec] kernel spec: remove copy of arch/x86/purgatory/sha256.* ("Herton R. Krzesinski")
  - [rpmspec] spec: Add new arch/powerpc/kernel/module.lds file to kernel-devel rpm (Steve Best) [1572553]
  - [rpmspec] kernel spec: fix recent build errors from brp-mangle-shebangs ("Herton R. Krzesinski") [1575966]
  - [rpmspec] Add i386 to ExclusiveArch to fix noarch package build ("Herton R. Krzesinski") [1575152]
  - [rpmspec] Build kernel-abi-whitelists package (Petr Oros) [1571189]
  - [rpmspec] kernel spec: build bzImage for s390 (Hendrik Brueckner) [1570041]
  - [rpmspec] kernel spec: arm64: package module.lds in kernel-devel (Mark Salter) [1569014]
  - [rpmspec] Re-enable debuginfo packages and fix build with current dist tag ("Herton R. Krzesinski") [1568901]
  - [rpmspec] kernel spec: build kernel-debug on all architectures ("Herton R. Krzesinski") [1567367]
  - [rpmspec] don't build kernel meta-package if we are only building kernel headers ("Herton R. Krzesinski")
  - [rpmspec] remove use_vdso macro ("Herton R. Krzesinski")
  - [rpmspec] build perf and tools man pages instead of relying on a separate tarball ("Herton R. Krzesinski")
  - [rpmspec] disable debug build if arch is in nobuildarches list ("Herton R. Krzesinski")
  - [rpmspec] remove fedora changelog from spec file ("Herton R. Krzesinski")
  - [rpmspec] only support ppc64le builds ("Herton R. Krzesinski")
  - [rpmspec] remove x86 32-bit package support ("Herton R. Krzesinski")
  - [rpmspec] remove arm 32-bit package support ("Herton R. Krzesinski")
  - [rpmspec] remove configuration generation support from kernel spec file ("Herton R. Krzesinski")
  - [rpmspec] remove broken out patches from kernel spec file ("Herton R. Krzesinski")
  - [rpmspec] import kernel spec from rhel8 bootstrap dist-git ("Herton R. Krzesinski")


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.0.1-15
changelog:
  - Increase the release number to -13 to allow clean upgrade path from
    0.2 since some of the components kept their version the same in 0.3


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.0.1-1
changelog:
  - New upstream release 0.3.0.1
  - https://fedorahosted.org/sssd/wiki/Releases/DingNotes-0.3.0.1
  - obsoletes patch0001


author: Jakub Hrozek <jhrozek@redhat.com> - 0.2.91-14
changelog:
  - include a patch to get rid of autoreconf warnings
  - run autoreconf before configure
  - Resolves: #925258


author: Jan Zeleny <jzeleny@redhat.com> - 0.2.91-1
changelog:
  - Rebase to 0.3.0beta1, changelog available at
    https://fedorahosted.org/sssd/wiki/Releases/DingNotes-0.2.91


author: Stephen Gallagher <sgallagh@redhat.com> - 0.1.3-7
changelog:
  - Fix off-by-one bug in path_concat()
  - Resolves: rhbz#799347 - path_utils:test_path_concat_neg fails on 64-bit big
                            endians


author: Stephen Gallagher <sgallagh@redhat.com> - 0.1.2-3
changelog:
  - New upsteam release 0.1.2
  - Fixes a serious issue with libdhash where hash_enter() would never update
  - existing entries for a key.


author: Tim Waugh <twaugh@redhat.com> 1.4-4
changelog:
  - Applied patches from Jiri Popelka:
    - Fix off-by-one error in call to readlink.
    - Fix possible buffer overrun found by coverity.


author: Tim Waugh <twaugh@redhat.com> 1.2-29
changelog:
  - Use smp_mflags (bug #226445).
  - Better default attributes (bug #226445).
  - Make setup macro quiet (bug #226445).
  - Clean build root in %install section (bug #226445).


author: pjp <pjp@fedoraproject.org> - r131-1
changelog:
  - New: Dos/DJGPP target #114.
  - Added: Example using lz4frame library #118.
  - Changed: liblz4.a no longer compiled with -fPIC by default.


author: pjp <pjp@fedoraproject.org> - r130-1
changelog:
  - Fixed: incompatibility sparse mode vs console.
  - Fixed: LZ4IO exits too early when frame crc not present.
  - Fixed: incompatibility sparse mode vs append mode.
  - Performance fix: big compression speed boost for clang(+30%).


author: pjp <pjp@fedoraproject.org> - r129-1
changelog:
  - New LZ4_compress_fast() API.
  - New LZ4 CLI improved performance with multiple files.
  - Other bug fix and documentation updates.


author: pjp <pjp@fedoraproject.org> - r128-1
changelog:
  - lz4cli sparse file support
  - Restored lz4hc compression ratio
  - lz4 cli supports long commands
  - Introduced lz4-static sub package BZ#1208203


author: pjp <pjp@fedoraproject.org> - r127-1
changelog:
  - Fixed a bug in LZ4 HC streaming mode
  - New lz4frame API integrated into liblz4
  - Fixed a GCC 4.9 bug on highest performance settings


author: pjp <pjp@fedoraproject.org> - r106-3
changelog:
  - fixed install section to replace /usr/ with a macro.
    -> https://bugzilla.redhat.com/show_bug.cgi?id=1015263#c5


author: pjp <pjp@fedoraproject.org> - r106-2
changelog:
  - fixed install section above as suggested in the review.
    -> https://bugzilla.redhat.com/show_bug.cgi?id=1015263#c1


author: Karsten Hopp <karsten@redhat.de> 1.10-24
changelog:
  - added development manpages
  - as there are no manpages for the executables available, added at least
    a FAQ (#172324)


author: Mike A. Harris <mharris@redhat.com> 1.10-13
changelog:
  - Removed %name macro sillyness from package Summary, description text, etc.
  - Removed archaic Prefix: tag
  - lib64 fixes everywhere to use _lib, _libdir, etc
  - Removed deletion of RPM_BUILD_DIR from %clean section
  - Added -q flag to setup macro
  - Severely cleaned up spec file, and removed usage of perl


author: Jakub Jelinek <jakub@redhat.com> 1.10-12
changelog:
  - CFLAGS was using COPTFLAG variable, not COPTFLAGS
  - build with -fpic
  - apply the IA-64 patch everywhere, use capget/capset from glibc,
    not directly as _syscall (as it is broken on IA-32 with -fpic)
  - reenable alpha


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.10-6
changelog:
  - Fix sys/capabilities.h header (#55727)
  - Move to /lib, some applications seem to be using this rather early
    (#55733)


author: Mark Wielaard <mjw@redhat.com> - 0.182-1
changelog:
  - Upgrade to upstream 0.182
    - backends: Support for tilegx has been removed.
    - config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
    - debuginfod: More efficient package traversal, tolerate various
      errors during scanning, grooming progress is more visible and
      interruptible, more prometheus metrics.
    - debuginfod-client: Now supports compressed (kernel) ELF images.
    - libdwfl: Add ZSTD compression support.


author: Mark Wielaard <mjw@redhat.com> - 0.178-4
changelog:
  - Add elfutils-debuginfod-client Provides and Requires with depsuffix
    to get multilib dependencies correct. Add %{version}-%{release} to
    keep subpackages in sync.


author: Mark Wielaard <mjw@redhat.com> - 0.178-2
changelog:
  - New upstream release.
    - debuginfod: New server, client tool and library to index and fetch
                  ELF/DWARF files addressed by build-id through HTTP.
    - doc: There are now some manual pages for functions and tools.
    - backends: The libebl libraries are no longer dynamically loaded
                through dlopen, but are now compiled into libdw.so directly.
    - readelf: -n, --notes now takes an optional "SECTION" argument.
               -p and -x now also handle section numbers.
               New option --dyn-sym to show just the dynamic symbol table.
    - libcpu: Add RISC-V disassembler.
    - libdw: Abbrevs and DIEs can now be read concurrently by multiple
             threads through the same Dwarf handle.
    - libdwfl: Will try to use debuginfod when installed as fallback to
               retrieve ELF and DWARF debug data files by build-id.
  - Fix libdebuginfod file list for debuginfo-client[-devel].


author: Mark Wielaard <mjw@fedoraproject.org> - 0.176-1
changelog:
  - New upstream release.
    - backends: riscv improved core file and return value location support.
    - Fixes CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
            CVE-2019-7664, CVE-2019-7665.


author: Mark Wielaard <mjw@redhat.com> - 0.174-5
changelog:
  - Add elfutils-0.174-x86_64_unwind.patch (#1650114).
  - Add elfutils-0.174-gnu-property-note.patch (#1650120).
  - Add elfutils-0.174-version-note.patch.
  - Add elfutils-0.174-gnu-attribute-note.patch (#1650125).


author: Mark Wielaard <mjw@redhat.com> - 0.174-4
changelog:
  - Add elfutils-0.174-size-rec-ar.patch
    CVE-2018-18520 (#1646479)
  - Add elfutils-0.174-ar-sh_entsize-zero.patch
    CVE-2018-18521 (#1646484)


author: Mark Wielaard <mjw@redhat.com> - 0.174-1
changelog:
  - New upstream release (#1614972)
    - libelf, libdw and all tools now handle extended shnum and shstrndx
      correctly
    - elfcompress: Don't rewrite input file if no section data needs
      updating.  Try harder to keep same file mode bits (suid) on rewrite.
    - strip: Handle mixed (out of order) allocated/non-allocated sections.
    - unstrip: Handle SHT_GROUP sections.
    - backends: RISCV and M68K now have backend implementations to
      generate CFI based backtraces.
    - Fixes CVE-2018-16062, CVE-2018-16402 and CVE-2018-16403
      (#1623754, #1625052, #1625057).


author: Mark Wielaard <mjw@fedoraproject.org> - 0.173-2
changelog:
  - Update elfutils-0.173-new-notes-hack.patch for new annobin note.
  - Unbreak cyclic systemd dependency for buildroot container (#1599083)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.173-1
changelog:
  - New upstream release
    - More fixes for crashes and hangs found by afl-fuzz. In particular
      various functions now detect and break infinite loops caused by bad
      DIE tree cycles.
    - readelf: Will now lookup the size and signedness of constant value
      types to display them correctly (and not just how they were encoded).
    - libdw: New function dwarf_next_lines to read CU-less .debug_line data.
      dwarf_begin_elf now accepts ELF files containing just .debug_line
      or .debug_frame sections (which can be read without needing a DIE
      tree from the .debug_info section).
      Removed dwarf_getscn_info, which was never implemented.
    - backends: Handle BPF simple relocations.
      The RISCV backends now handles ABI specific CFI and knows about
      RISCV register types and names.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.172-1
changelog:
  - New upstream release.
    - No functional changes compared to 0.171.
    - Various bug fixes in libdw and eu-readelf dealing with bad DWARF5
      data. Thanks to running the afl fuzzer on eu-readelf and various
      testcases.
    - eu-readelf -N is ~15% faster.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.171-1
changelog:
  - New upstream release.
    - DWARF5 and split dwarf, including GNU DebugFission, support.
    - readelf: Handle all new DWARF5 sections.
      --debug-dump=info+ will show split unit DIEs when found.
      --dwarf-skeleton can be used when inspecting a .dwo file.
      Recognizes GNU locviews with --debug-dump=loc.
    - libdw: New functions dwarf_die_addr_die, dwarf_get_units,
      dwarf_getabbrevattr_data and dwarf_cu_info.
      libdw will now try to resolve the alt file on first use
      when not set yet with dwarf_set_alt.
      dwarf_aggregate_size() now works with multi-dimensional arrays.
    - libdwfl: Use process_vm_readv when available instead of ptrace.
    - backends: Add a RISC-V backend.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-11
changelog:
  - Add explict libstdc++-devel BuildRequires for demangle support.
  - Add elfutils-0.170-unwind.patch. (#1555726)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-9
changelog:
  - Add elfutils-0.170-core-pid.patch
  - Add elfutils-0.170-elf_sync.patch
  - Add elfutils-0.170-new-notes-hack.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-8
changelog:
  - Add elfutils-0.170-sys-ptrace.patch
  - Make sure spec can be build even when ldconfig_scriplets aren't defined.
  - Add elfutils-0.170-m68k-packed-not-aligned.patch


author: Mark Wielaard <mjw@redhat.com> - 0.170-2
changelog:
  - Config files under /usr/lib/sysctl.d (_sysctldir) aren't %config (#1506660)
    Admin can place the real config file under /etc/sysctl.d as override.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.170-1
changelog:
  - New upstream release. Remove upstreamed patches.
  - provide_yama_scope for either fedora >= 22 and rhel >= 7.


author: Mark Wielaard <mark@klomp.org> - 0.168-5
changelog:
  - Add patches for new gcc warnings and new binutils ppc64 attributes.
    - elfutils-0.168-libasm-truncation.patch
    - elfutils-0.168-ppc64-attrs.patch


author: Mark Wielaard <mark@klomp.org> - 0.168-1
changelog:
  - New upstream release from new home https://sourceware.org/elfutils/
  - Resolves:
    - #1396092 Please implement eu-readelf --symbols[=SECTION]
    - #1388057 memory allocation failure in allocate_elf
    - #1387584 memory allocation failure in __libelf_set_rawdata_wrlock


author: Mark Wielaard <mjw@redhat.com> - 0.167-1
changelog:
  - Upgrade to elfutils-0.167
    Drop upstream elfutils-0.166-elfcmp-comp-gcc6.patch
    Fixes: #1365812, #1352232.


author: Mark Wielaard <mjw@redhat.com> - 0.166-1
changelog:
  - Upgrade to elfutils-0.166
    Drop upstreamed patches:
      - elfutils-0.165-nobitsalign-strip.patch.
      - elfutils-0.165-reloc.patch.
      - elfutils-0.165-elf-libelf.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.165-1
changelog:
  - Update to elfutils-0.165 (#1294079, #1236699, #807053)
    - Add eu-elfcompress
    - Add pkg-config files for libelf and libdw.


author: Mark Wielaard <mjw@redhat.com> - 0.162-1
changelog:
  - Update to 0.162 (#1170810, #1139815, #1129756, #1020842)
  - Include elfutils/known-dwarf.h
  - Drop BuildRequires glibc-headers (#1230468)
  - Removed integrated upstream patches:
    - elfutils-0.161-aarch64relro.patch
    - elfutils-0.161-copyreloc.patch
    - elfutils-0.161-addralign.patch
    - elfutils-0.161-ar-long-name.patch
    - elfutils-0.161-formref-type.patch


author: Mark Wielaard <mjw@redhat.com> - 0.160-1
changelog:
  - Update to 0.160.
    - Remove integrated upstream patches:
      elfutils-aarch64-user_regs_struct.patch
      elfutils-0.159-argp-attach.patch
      elfutils-0.159-aarch64-bool-ret.patch
      elfutils-0.159-elf-h.patch
      elfutils-0.159-ppc64le-elfv2-abi.patch
      elfutils-0.159-report_r_debug.patch
      elfutils-0.159-ko_xz.patch


author: Mark Wielaard <mjw@redhat.com> - 0.159-5
changelog:
  - Add elfutils-0.159-aarch64-bool-ret.patch
  - Add elfutils-0.159-elf-h.patch
  - Add elfutils-0.159-ppc64le-elfv2-abi.patch (#1110249)


author: Mark Wielaard <mjw@redhat.com> - 0.159-1
changelog:
  - Update to 0.159.
    - Remove integrated upstream patches:
      robustify.patch, mod-e_type.patch and CVE-2014-0172.patch.
    - Remove special handling of now default compile and configure flags:
      Don't remove -Werror=format-security, don't configure --enable-dwz.


author: Mark Wielaard <mjw@redhat.com> - 0.157-4
changelog:
  - Add elfutils-0.157-aarch64-got-special-symbol.patch.
  - Remove -Werror=format-security from RPM_OPT_FLAGS.


author: Mark Wielaard <mjw@redhat.com> 0.157-1
changelog:
  - Update to 0.157.
  - Remove elfutils-0.156-abi_cfi-ppc-s390-arm.patch.
  - Remove elfutils-0.156-et_dyn-kernels.patch.


author: Mark Wielaard <mjw@redhat.com> 0.156-5
changelog:
  - Add elfutils-0.156-abi_cfi-ppc-s390-arm.patch.
    Sets up initial CFI return register, CFA location expression and
    register rules for PPC, S390 and ARM (dwarf_cfi_addrframe support).


author: Mark Wielaard <mjw@redhat.com> 0.156-4
changelog:
  - Add elfutils-0.156-et_dyn-kernels.patch.
    Fixes an issue on ppc64 with systemtap kernel address placement.


author: Jan Kratochvil <jan.kratochvil@redhat.com> 0.156-1
changelog:
  - Update to 0.156.
    - #890447 - Add __bss_start and __TMC_END__ to elflint.
    - #909481 - Only try opening files with installed compression libraries.
    - #914908 - Add __bss_start__ to elflint.
    - #853757 - Updated Polish translation.
    - #985438 - Incorrect prototype of __libdwfl_find_elf_build_id.
    - Drop upstreamed elfutils-0.155-binutils-pr-ld-13621.patch.
    - Drop upstreamed elfutils-0.155-mem-align.patch.
    - Drop upstreamed elfutils-0.155-sizeof-pointer-memaccess.patch.


author: Mark Wielaard <mjw@redhat.com> - 0.155-5
changelog:
  - Add ARM variant to elfutils-0.155-binutils-pr-ld-13621.patch rhbz#914908.
  - rhel >= 5 has xz-devel


author: Mark Wielaard <mjw@redhat.com> - 0.155-1
changelog:
  - Update to 0.155.
    - #844270 - eu-nm invalid %N$ use detected.
    - #847454 - Ukrainian translation update.
    - Removed local ar 64-bit symbol patch, dwz support patch and xlatetom fix.


author: Mark Wielaard <mjw@redhat.com> - 0.154-1
changelog:
  - Update to 0.154
    - elflint doesn't recognize SHF_INFO_LINK on relocation sections (#807823)
    - Update license to GPLv3+ and (GPLv2+ or LGPLv3+)
    - Remove elfutils-0.153-dwfl_segment_report_module.patch
  - Add elfutils-0.154-binutils-pr-ld-13621.patch


author: Mark Wielaard <mjw@redhat.com> - 0.153-1
changelog:
  - Update to 0.153
    - New --disable-werror for portability.
    - Support for .zdebug sections (#679777)
    - type_units and DW_AT_GNU_odr_signature support (#679815)
    - low level support DW_OP_GNU_entry_value and DW_TAG_GNU_call_site (#688090)
    - FTBFS on rawhide with gcc 4.7 (#783506)
      - Remove gcc-4.7 patch


author: Roland McGrath <roland@redhat.com> - 0.152-1
changelog:
  - Update to 0.152
    - Various build and warning nits fixed for newest GCC and Autoconf.
    - libdwfl: Yet another prelink-related fix for another regression. (#674465)
    - eu-elfcmp: New flag --ignore-build-id to ignore differing build ID bits.
    - eu-elfcmp: New flag -l/--verbose to print all differences.


author: Roland McGrath <roland@redhat.com> - 0.151-1
changelog:
  - Update to 0.151
    - libdwfl: Fix for more prelink cases with separate debug file.
    - eu-strip: New flag --strip-sections to remove section headers entirely.


author: Roland McGrath <roland@redhat.com> - 0.150-1
changelog:
  - Update to 0.150
    - libdw: Fix for handling huge .debug_aranges section. (#638432)
    - libdwfl: Fix for handling prelinked DSO with separate debug file. (#652857)
    - findtextrel: Fix diagnostics to work with usual section ordering.


author: Roland McGrath <roland@redhat.com> - 0.149-1
changelog:
  - Update to 0.149
    - libdw: Decode new DW_OP_GNU_implicit_pointer operation;
             new function dwarf_getlocation_implicit_pointer.
    - libdwfl: New function dwfl_dwarf_line.
    - eu-addr2line: New flag -F/--flags to print more DWARF line info details.
    - eu-readelf: better .debug_loc processing (#627729)
    - eu-strings: Fix non-mmap file reading. (#609468)
    - eu-strip: -g recognizes .gdb_index as a debugging section. (#631997)


author: Roland McGrath <roland@redhat.com> - 0.148-1
changelog:
  - Update to 0.148
    - libdw: Accept DWARF 4 format: new functions dwarf_next_unit,
             dwarf_offdie_types.
             New functions dwarf_lineisa, dwarf_linediscriminator,
             dwarf_lineop_index.
    - libdwfl: Fixes in core-file handling, support cores from PIEs. (#588818)
               When working from build IDs, don't open a named file
               that mismatches.
    - readelf: Handle DWARF 4 formats.


author: Roland McGrath <roland@redhat.com> - 0.146-1
changelog:
  - Update to 0.146
    - libdwfl: New function dwfl_core_file_report.
    - libelf: Fix handling of phdrs in truncated file. (#577310)
    - libdwfl: Fix infinite loop handling clobbered link_map. (#576379)
  - Package translations.


author: Roland McGrath <roland@redhat.com> - 0.145-1
changelog:
  - Update to 0.145
    - Fix build with --disable-dependency-tracking. (#564646)
    - Fix build with most recent glibc headers.
    - libdw: Fix CFI decoding. (#563528)
    - libdwfl: Fix address bias returned by CFI accessors. (#563528)
               Fix core file module layout identification. (#559836)
    - readelf: Fix CFI decoding.


author: Roland McGrath <roland@redhat.com> - 0.144-1
changelog:
  - Update to 0.144
    - libdw: New function dwarf_aggregate_size for computing (constant) type
             sizes, including array_type cases with nontrivial calculation.
    - readelf: Don't give errors for missing info under -a.
               Handle Linux "VMCOREINFO" notes under -n.
  - Resolves: RHBZ #527004, RHBZ #530704, RHBZ #550858


author: Roland McGrath <roland@redhat.com> - 0.143-1
changelog:
  - Update to 0.143
    - libdw: Various convenience functions for individual attributes now use
             dwarf_attr_integrate to look up indirect inherited attributes.
             Location expression handling now supports DW_OP_implicit_value.
    - libdwfl: Support automatic decompression of files in XZ format,
               and of Linux kernel images made with bzip2 or LZMA
               (as well as gzip).


author: Roland McGrath <roland@redhat.com> - 0.142-1
changelog:
  - Update to 0.142
    - libelf: Bug fix in filling gaps between sections. (#512840)
    - libelf: Add elf_getshdrnum alias for elf_getshnum and elf_getshdrstrndx
              alias for elf_getshstrndx and deprecate original names.
    - libebl, elflint: Add support for STB_GNU_UNIQUE. (#511436)
    - readelf: Add -N option, speeds up DWARF printing
               without address->name lookups. (#505347)
    - libdw: Add support for decoding DWARF CFI into location description form.
             Handle some new DWARF 3 expression operations previously omitted.
             Basic handling of some new encodings slated for DWARF 4.


author: Roland McGrath <roland@redhat.com> - 0.141-1
changelog:
  - Update to 0.141
    - libebl: sparc backend fixes (#490585)
              some more arm backend support
    - libdwfl: fix dwfl_module_build_id for prelinked DSO case (#489439)
               fixes in core file support (#494858)
               dwfl_module_getsym interface improved for non-address symbols
    - eu-strip: fix infinite loop on strange inputs with -f
    - eu-addr2line: take -j/--section=NAME option for binutils compatibility
                    (same effect as '(NAME)0x123' syntax already supported)
  - Resolves: RHBZ #495213, RHBZ #465872, RHBZ #470055, RHBZ #484623


author: Roland McGrath <roland@redhat.com> - 0.139-1
changelog:
  - Update to 0.139
    - libcpu: Add Intel SSE4 disassembler support
    - readelf: Implement call frame information and exception handling dumping.
               Add -e option.  Enable it implicitly for -a.
    - elflint: Check PT_GNU_EH_FRAME program header entry.
    - libdwfl: Support automatic gzip/bzip2 decompression of ELF files. (#472136)


author: Roland McGrath <roland@redhat.com> - 0.138-1
changelog:
  - Update to 0.138
    - Install <elfutils/version.h> header file for applications to use in
      source version compatibility checks.
    - libebl: backend fixes for i386 TLS relocs; backend support for NT_386_IOPERM
    - libcpu: disassembler fixes (#469739)
    - libdwfl: bug fixes (#465878)
    - libelf: bug fixes
    - eu-nm: bug fixes for handling corrupt input files (#476136)


author: Roland McGrath <roland@redhat.com> - 0.137-2
changelog:
  - Update to 0.137
    - libdwfl: bug fixes; new segment interfaces;
               all the libdwfl-based tools now support --core=COREFILE option
  - Resolves: RHBZ #325021, RHBZ #447416


author: Roland McGrath <roland@redhat.com> - 0.135-1
changelog:
  - Update to 0.135
    - libdwfl: bug fixes
    - eu-strip: changed handling of ET_REL files wrt symbol tables and relocs


author: Roland McGrath <roland@redhat.com> - 0.134-1
changelog:
  - Update to 0.134
    - elflint: backend improvements for sparc, alpha (#204170)
    - libdwfl, libelf: bug fixes (#439344, #438867, #438263, #438190)
  - Remove Conflicts: libelf-devel from elfutils-libelf-devel. (#435742)


author: Roland McGrath <roland@redhat.com> - 0.133-2
changelog:
  - Update to 0.133
    - readelf, elflint, libebl: SHT_GNU_ATTRIBUTE section handling (readelf -A)
    - readelf: core note handling for NT_386_TLS, NT_PPC_SPE, Alpha NT_AUXV
    - libdwfl: bug fixes and optimization in relocation handling
    - elfcmp: bug fix for non-allocated section handling
    - ld: implement newer features of binutils linker.
  - Install eu-objdump and libasm, now has limited disassembler support.


author: Roland McGrath <roland@redhat.com> - 0.132-3
changelog:
  - Update to 0.132
    - libelf: Use loff_t instead of off64_t in libelf.h header. (#377241)
    - eu-readelf: Fix handling of ET_REL files in archives.
    - libcpu: Implement x86 and x86-64 disassembler.
    - libasm: Add interface for disassembler.
    - all programs: add debugging of branch prediction.
    - libelf: new function elf_scnshndx.


author: Roland McGrath <roland@redhat.com> - 0.131-1
changelog:
  - Update to 0.131
    - libdw: DW_FORM_ref_addr support; dwarf_formref entry point now deprecated;
             bug fixes for oddly-formatted DWARF
    - libdwfl: bug fixes in offline archive support, symbol table handling;
               apply partial relocations for dwfl_module_address_section on ET_REL
    - libebl: powerpc backend support for Altivec registers


author: Roland McGrath <roland@redhat.com> - 0.130-1
changelog:
  - Update to 0.130
    - eu-readelf -p option can take an argument like -x for one section
    - eu-readelf --archive-index (or -c)
    - eu-readelf -n improved output for core dumps
    - eu-readelf: handle SHT_NOTE sections without requiring phdrs (#249467)
    - eu-elflint: ditto
    - eu-elflint: stricter checks on debug sections
    - eu-unstrip: new options, --list (or -n), --relocate (or -R)
    - libelf: new function elf_getdata_rawchunk, replaces gelf_rawchunk;
              new functions gelf_getnote, gelf_getauxv, gelf_update_auxv
    - libebl: backend improvements (#324031)
    - libdwfl: build_id support, new functions for it
    - libdwfl: dwfl_module_addrsym fixes (#268761, #268981)
    - libdwfl offline archive support, new script eu-make-debug-archive


author: Roland McGrath <roland@redhat.com> - 0.129-1
changelog:
  - Update to 0.129
    - readelf: new options --hex-dump (or -x), --strings (or -p) (#250973)
    - addr2line: new option --symbols (or -S)
    - libdw: dwarf_getscopes fixes (#230235)
    - libdwfl: dwfl_module_addrsym fixes (#249490)


author: Roland McGrath <roland@redhat.com> - 0.128-2
changelog:
  - Update to 0.128
    - new program: unstrip
    - elfcmp: new option --hash-inexact
  - Replace Conflicts: with Provides/Requires using -arch


author: Roland McGrath <roland@redhat.com> - 0.127-1
changelog:
  - Update to 0.127
    - libdw: new function dwarf_getsrcdirs
    - libdwfl: new functions dwfl_module_addrsym, dwfl_report_begin_add,
               dwfl_module_address_section


author: Roland McGrath <roland@redhat.com> - 0.126-1
changelog:
  - Update to 0.126
    - New program eu-ar.
    - libdw: fix missing dwarf_getelf (#227206)
    - libdwfl: dwfl_module_addrname for st_size=0 symbols (#227167, #227231)


author: Roland McGrath <roland@redhat.com> - 0.125-1
changelog:
  - Update to 0.125
    - elflint: Compare DT_GNU_HASH tests.
    - move archives into -static RPMs
    - libelf, elflint: better support for core file handling
    - Really fix libdwfl sorting of modules with 64-bit addresses (#220817).
  - Resolves: RHBZ #220817, RHBZ #213792


author: Roland McGrath <roland@redhat.com> - 0.124-1
changelog:
  - eu-strip -f: copy symtab into debuginfo file when relocs use it (#203000)
  - Update to 0.124
    - libebl: fix ia64 reloc support (#206981)
    - libebl: sparc backend support for return value location
    - libebl, libdwfl: backend register name support extended with more info
    - libelf, libdw: bug fixes for unaligned accesses on machines that care
    - readelf, elflint: trivial bugs fixed


author: Roland McGrath <roland@redhat.com> 0.123-1
changelog:
  - Update to 0.123
    - libebl: Backend build fixes, thanks to Stepan Kasal.
    - libebl: ia64 backend support for register names, return value location
    - libdwfl: Handle truncated linux kernel module section names.
    - libdwfl: Look for linux kernel vmlinux files with .debug suffix.
    - elflint: Fix checks to permit --hash-style=gnu format.


author: Roland McGrath <roland@redhat.com> - 0.122-3
changelog:
  - Update to 0.122
    - Fix libdwfl sorting of modules with 64-bit addresses (#198225).
    - libebl: add function to test for relative relocation
    - elflint: fix and extend DT_RELCOUNT/DT_RELACOUNT checks
    - elflint, readelf: add support for DT_GNU_HASH
    - libelf: add elf_gnu_hash
    - elflint, readelf: add support for 64-bit SysV-style hash tables
    - libdwfl: new functions dwfl_module_getsymtab, dwfl_module_getsym.


author: Roland McGrath <roland@redhat.com> - 0.121-1
changelog:
  - Update to 0.121
    - libelf: bug fixes for rewriting existing files when using mmap (#187618).
    - make all installed headers usable in C++ code (#193153).
    - eu-readelf: better output format.
    - eu-elflint: fix tests of dynamic section content.
    - libdw, libdwfl: handle files without aranges info.


author: Roland McGrath <roland@redhat.com> - 0.120-2
changelog:
  - Update to 0.120
    - License changed to GPL, with some exceptions for using
      the libelf, libebl, libdw, and libdwfl library interfaces.
      Red Hat elfutils is an included package of the Open Invention Network.
    - dwarf.h updated for DWARF 3.0 final specification.
    - libelf: Fix corruption in ELF_C_RDWR uses (#187618).
    - libdwfl: New function dwfl_version; fixes for offline.


author: Roland McGrath <roland@redhat.com> - 0.118-1
changelog:
  - update to 0.118
    - elflint: more tests.
    - libdwfl: New function dwfl_module_register_names.
    - libebl: New backend hook for register names.
  - Make sure -fexceptions is always in CFLAGS.


author: Roland McGrath <roland@redhat.com> - 0.117-2
changelog:
  - update to 0.117
    - libdwfl: New function dwfl_module_return_value_location (#166118)
    - libebl: Backend improvements for several CPUs


author: Roland McGrath <roland@redhat.com> - 0.116-1
changelog:
  - update to 0.116
    - libdw fixes, API changes and additions
    - libdwfl fixes (#169672)
    - eu-strip/libelf fix to preserve setuid/setgid permission bits (#167745)


author: Roland McGrath <roland@redhat.com> - 0.115-2
changelog:
  - update to 0.115
    - New program eu-strings.
    - libdw: New function dwarf_getscopes_die.
    - libelf: speed-ups of non-mmap reading.
    - Implement --enable-gcov option for configure.


author: Roland McGrath <roland@redhat.com> - 0.114-1
changelog:
  - update to 0.114
    - new program eu-ranlib
    - libdw: new calls for inlines
    - libdwfl: new calls for offline modules


author: Roland McGrath <roland@redhat.com> - 0.113-2
changelog:
  - update to 0.113
    - elflint: relax a bit.  Allow version definitions for defined symbols
      against DSO versions also for symbols in nobits sections.
      Allow .rodata section to have STRINGS and MERGE flag set.
    - strip: add some more compatibility with binutils.
    - libdwfl: bug fixes.
  - Separate libdw et al into elfutils-libs subpackage.


author: Roland McGrath <roland@redhat.com> - 0.112-1
changelog:
  - update to 0.112
    - elfcmp: some more relaxation.
    - elflint: many more tests, especially regarding to symbol versioning.
    - libelf: Add elfXX_offscn and gelf_offscn.
    - libasm: asm_begin interface changes.
    - libebl: Add three new interfaces to directly access machine, class,
      and data encoding information.


author: Roland McGrath <roland@redhat.com> - 0.109-2
changelog:
  - update to 0.109
    - verify that libebl modules are from the same build
    - new eu-elflint checks on copy relocations
    - new program eu-elfcmp
    - new experimental libdwfl library


author: Roland McGrath <roland@redhat.com> - 0.108-1
changelog:
  - update to 0.108
    - merge strip fixes
    - sort records in dwarf_getsrclines, fix dwarf_getsrc_die searching
    - update elf.h from glibc


author: Roland McGrath <roland@redhat.com> - 0.107-1
changelog:
  - update to 0.107
    - readelf: improve DWARF output format
    - elflint: -d option to support checking separate debuginfo files
    - strip: fix ET_REL debuginfo files (#156341)


author: Jakub Jelinek <jakub@redhat.com> 0.92-1
changelog:
  - full version
  - macroized spec file for GPL or OSL builds
  - include only libelf under GPL plus wrapper scripts


author: Jakub Jelinek <jakub@redhat.com> 0.72-4
changelog:
  - fix arguments to gelf_getsymshndx and elf_getshstrndx
  - fix other warnings
  - reenable checks on s390x


author: Jeff Johnson <jbj@redhat.com> 0.69-4
changelog:
  - update to 0.69.
  - add "make check" and segfault avoidance patch.
  - elfutils-libelf needs to run ldconfig.


author: Steve Dickson <steved@redhat.com> - 1.2.5-1
changelog:
  - Fixed stack buffer overflow in rpcinfo (bz 1637565)
  - Make sure /var/lib/rpcbind exists (bz 1628901)


author: Nils Philippsen <nils@redhat.com> - 0.2.4-8.rc2
changelog:
  - create and formally own the state directory so it is available from the time
    of first installation until reboot


author: Steve Dickson <steved@redhat.com> - 0.2.3-11.rc1
changelog:
  - Removing the braces from the ${RPCBIND_ARGS} in rpcbind.service (bz 1362201)
  - Stop enable rpcbind.socket with every update (bz 1324666)


author: Steve Dickson <steved@redhat.com> - 0.2.3-0.0
changelog:
  - Updated to latest upstream release: 0.2.3
  - Change RPCBDIR to be /tmp since that will exist after a 
    reboot and bindings wil be perserved during upgrades
    but not reboots.


author: Steve Dickson <steved@redhat.com> - 0.2.2-2.2
changelog:
  - Changed RPCBDIR to be /var/run so bindings are perserved
    during upgrades but not reboots.
  - Make sure rpcbind.socket gets enabled


author: Steve Dickson <steved@redhat.com> - 0.2.2-0.0
changelog:
  - Updated to the latest upstream release: 0.2.2 (bz 747363)
  - Added BuildRequires systemd-compat-libs


author: Steve Dickson <steved@redhat.com> - 0.2.0-18
changelog:
  - Fixed typo causing rpcbind to run as root (bz 734598)
  - Added /etc/sysconfig/rpcbind config file (bz 861025)


author: Steve Dickson <steved@redhat.com> - 0.2.0-2
changelog:
  - Fixed pre scriptle failure during upgrades (bz 507364)
  - Corrected the usage info to match what the rpcbind man
      page says. (bz 466332)
  - Correct package issues (bz 503508)


author: Steve Dickson <steved@redhat.com> 0.1.6-3
changelog:
  - Fixed a typo in the rpcbind.init script that stop warm starts
    from happening with conrestarts
  - Fixed scriptlet failure (bz 462533)


author: Steve Dickson <steved@redhat.com> 0.1.6-2
changelog:
  - Added usptream patches 01 thru 03 that do:
      * Introduce helpers for ipprot/netid mapping
      * Change how we decide on the netids to use for portmap
      * Simplify port live check in pmap_svc.c


author: Steve Dickson <steved@redhat.com> 0.1.4-14
changelog:
  - Fixed a warning in pmap_svc.c
  - Cleaned up warmstarts so uid are longer needed, also
    changed condrestarts to use warmstarts. (bz 428496)


author: Steve Dickson <steved@redhat.com> 0.1.4-13
changelog:
  - Fixed connectivity with Mac OS clients by making sure handle_reply()
    sets the correct fromlen in its recvfrom() call (bz 244492)


author: Steve Dickson <steved@redhat.com> 0.1.4-12
changelog:
  - Changed is_loopback() and check_access() see if the calling
    address is an address on a local interface, just not a loopback
    address (bz 358621).


author: Steve Dickson <steved@redhat.com> 0.1.4-11
changelog:
  - Reworked logic in initscript so the correct exit is 
    used when networking does not exist or is set up
    incorrectly.


author: Steve Dickson <steved@redhat.com> 0.1.4-8
changelog:
  - Fixed typo in init script (bz 248285)
  - Added autoconf rules to turn on secure host checking
    via libwrap. Also turned on host check by default (bz 248284)
  - Changed init script to start service in runlevel 2 (bz 251568)
  - Added a couple missing Requires(pre) (bz 247134)


author: Steve Dickson <steved@redhat.com> 0.1.4-5
changelog:
  - Added dependency on setup which contains the correct
    rpcbind /etc/service entry which in turns stops 
    rpcbind from haning when NIS is enabled. (bz 236865)


author: Jeremy Katz <katzj@redhat.com> - 0.1.4-4
changelog:
  - change man-pages requires into a conflicts as we don't have to have 
    man-pages installed, but if we do, we need the newer version


author: Steve Dickson <steved@redhat.com> 0.1.4-2
changelog:
  - Added dependency on glibc-common which allows the
    rpcinfo command to be installed in the correct place.
  - Added dependency on man-pages so the rpcinfo man 
    pages don't conflict.
  - Added the creation of /var/lib/rpcbind which will be
    used to store state files.
  - Make rpcbind run with the 'rpc' uid/gid when it exists.


author: Steve Dickson <steved@redhat.com> 0.1.4-1
changelog:
  - Initial commit
  - Spec reviewed (bz 228894)
  - Added the Provides/Obsoletes which should
    cause rpcbind to replace portmapper


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.4-2
changelog:
  - drop ppc64p7 hack, per fedora devel list discussion:
    https://lists.fedoraproject.org/archives/list/
    devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
  - don't explicitly set _FILE_OFFSET_BITS, package uses AC_SYS_LARGEFILE


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.4-1
changelog:
  - rebase to 5.2.4 (rhbz#1574039), per release notes:
    https://www.mail-archive.com/xz-devel@tukaani.org/msg00295.html


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.3-1
changelog:
  - rebase to stable 5.2.3 per release notes:
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00285.html


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.2-1
changelog:
  - rebase to stable 5.2.2 per release notes:
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00244.html


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.1-1
changelog:
  - bugfix rebase to 5.2.1, per release notes
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00226.html


author: Pavel Raiskup <praiskup@redhat.com> - 5.2.0-1
changelog:
  - rebase per upstream release notes (#1023718)
    http://www.mail-archive.com/xz-devel@tukaani.org/msg00216.html
  - fedora-review fixes, documentation/license fixes in spec


author: Pavel Raiskup <praiskup@redhat.com> - 5.1.2-5alpha
changelog:
  - fix manual page inconsistencies with help output (private #948533)
  - enable/fix the 'xzgrep -h' (private #850898)


author: Jindrich Novy <jnovy@redhat.com> 5.0.0-3
changelog:
  - introduce compat-libs subpackage with older soname to
    resolve problems with soname bump and for packages requiring
    older xz-4.999.9beta


author: Bill Nottingham <notting@redhat.com> 4.999.8-0.6.beta
changelog:
  - fix release versioning to match guidelines
  - fix up lzma-compat summary/description
  - tweak licensing


author: Phil Sutter <psutter@redhat.com> - 1.8.4-17
changelog:
  - extensions: dccp: Fix for DCCP type 'INVALID'
  - tests: shell: Merge and extend return codes test
  - nft: Fix command name in ip6tables error message
  - extensions: libxt_CT: add translation for NOTRACK
  - extensions: libipt_icmp: Fix translation of type 'any'
  - tests/shell: Test for fixed extension registration
  - libxtables: Register multiple extensions in ascending order
  - libxtables: Simplify pending extension registration
  - libxtables: Make sure extensions register in revision order


author: Phil Sutter <psutter@redhat.com> - 1.8.4-16
changelog:
  - tests/shell: Add test for bitwise avoidance fixes
  - ebtables: Optimize masked MAC address matches
  - nft: Optimize class-based IP prefix matches
  - nft: Fix for broken address mask match detection
  - nft: cache: Make nft_rebuild_cache() respect fake cache
  - tests: shell: Improve concurrent noflush restore test a bit
  - nft: Fix for concurrent noflush restore calls
  - nft: Fix error reporting for refreshed transactions
  - nft: Make batch_add_chain() return the added batch object


author: Phil Sutter <psutter@redhat.com> - 1.8.4-11
changelog:
  - Complete ebtables-nft among match support
  - Replace RHEL-only xtables-monitor fix with upstream solution
  - xtables: Align effect of -4/-6 options with legacy
  - xtables: Drop -4 and -6 support from xtables-{save,restore}
  - Review systemd unit files


author: Phil Sutter <psutter@redhat.com> - 1.8.4-8
changelog:
  - xtables-translate: Fix for iface++
  - tests: shell: Fix skip checks with --host mode
  - xtables-restore: fix for --noflush and empty lines


author: Phil Sutter <psutter@redhat.com> - 1.8.4-3
changelog:
  - Reduce globbing in library file names to expose future SONAME changes
  - Add bootstrapping for libip*tc SONAME bump


author: Phil Sutter <psutter@redhat.com> - 1.8.2-14
changelog:
  - arptables: Print space before comma and counters
  - extensions: Fix ipvs vproto parsing
  - extensions: Fix ipvs vproto option printing
  - extensions: Add testcase for libxt_ipvs


author: Phil Sutter <psutter@redhat.com> - 1.8.2-12
changelog:
  - Add iptables-test.py testsuite to sources
  - extensions: libip6t_mh: fix bogus translation error
  - extensions: AUDIT: Document ineffective --type option
  - xtables-restore: Fix program names in help texts
  - xtables-save: Point at existing man page in help text
  - utils: Add a manpage for nfbpf_compile
  - Mark man pages in base package as documentation files


author: Phil Sutter <psutter@redhat.com> - 1.8.2-10
changelog:
  - arptables-nft: fix decoding of hlen on bigendian platforms
  - xtables-save: Fix table not found error message
  - xtables: Catch errors when zeroing rule rounters
  - extensions: TRACE: Point at xtables-monitor in documentation
  - extensions: libipt_realm: Document allowed realm values


author: Phil Sutter - 1.8.2-6
changelog:
  - Improve performance with large rulesets
  - Fix for changes in arptables output
  - Fix for inserting rules at wrong position
  - Fix segfault when comparing rules with standard target
  - Fix ebtables output for negated values
  - Document missing arptables FORWARD chain


author: Phil Sutter - 1.8.2-4
changelog:
  - Fix iptables init script for nftables-backend
  - Drop references to unsupported broute table from ebtables man page
  - xtables: Don't use native nftables comments


author: Phil Sutter - 1.8.2-2
changelog:
  - Point out that nftables-variants are installed in package description
  - Fix for deleting arptables rules by referencing them


author: Phil Sutter - 1.8.0-9
changelog:
  - Add further fixes for issues identified by covscan
  - Fix for bogus "is incompatible" warnings
  - Fix layout in License tag
  - Replace "Fedora" with "RHEL" in description
  - Make devel sub-package depend on libs sub-package


author: Phil Sutter - 1.8.0-8
changelog:
  - Fix issues identified by covscan
  - xtables-restore: Fix flushing referenced custom chains
  - xtables: Accept --wait in iptables-nft-restore


author: Phil Sutter - 1.8.0-5
changelog:
  - xtables: Use meta l4proto for -p match
  - ebtables: Fix for listing of non-existent chains
  - xtables: Fix for no output in iptables-nft -S


author: Phil Sutter - 1.8.0-4
changelog:
  - xtables: Fix for segfault in iptables-nft
  - ebtables: Fix entries count in chain listing
  - Use %autosetup macro in %prep


author: Phil Sutter <psutter@redhat.com> - 1.6.2-2
changelog:
  - Kill module unloading support
  - Support /etc/sysctl.d
  - Don't restart services after package update
  - Add support for --wait options to restore commands


author: Michael Cronenworth <mike@cchtml.com> - 1.6.2-1
changelog:
  - New upstream version 1.6.2
    http://www.netfilter.org/projects/iptables/files/changes-iptables-1.6.2.txt


author: Thomas Woerner <twoerner@redhat.com> - 1.6.1-1
changelog:
  - New upstream version 1.6.1 with enhanced translation to nft support and
    several fixes (RHBZ#1417323)
    http://netfilter.org/projects/iptables/files/changes-iptables-1.6.1.txt
  - Enable parallel build again


author: Petr Šabata <contyk@redhat.com> - 1.6.0-4
changelog:
  - Disabling parallel build to avoid build issues with xtables
  - See http://patchwork.alpinelinux.org/patch/1787/ for reference
  - This should be fixed in 1.6.1; parallel build can be restored after the
    update


author: Thomas Woerner <twoerner@redhat.com> - 1.6.0-1
changelog:
  - New upstream version 1.6.0 with nft-compat support and lots of fixes (RHBZ#1292990)
    Upstream changelog:
    http://netfilter.org/projects/iptables/files/changes-iptables-1.6.0.txt
  - New libs sub package containing libxtables and unstable libip*tc libraries (RHBZ#1323161)
  - Using scripts form RHEL-7 (RHBZ#1240366)
  - New compat sub package for nftables compatibility
  - Install iptables-apply (RHBZ#912047)
  - Fixed module uninstall (RHBZ#1324101)
  - Incorporated changes by Petr Pisar
  - Enabled bpf compiler (RHBZ#1170227) Thanks to Yanko Kaneti for the patch


author: Jiri Popelka <jpopelka@redhat.com> - 1.4.21-8
changelog:
  - add missing reload and panic actions
  - BuildRequires: pkgconfig(x) instead of x-devel
  - no need to specify file mode bits twice (in %install and %files)


author: Jiri Popelka <jpopelka@redhat.com> - 1.4.21-3
changelog:
  - no need to support the pre-systemd things
  - use systemd macros (#850166)
  - remove scriptlets for migrating to a systemd unit from a SysV initscripts
  - ./configure -> %configure
  - spec clean up
  - fix self-obsoletion


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-2
changelog:
  - fixed system hang at shutdown if root device is network based (RHBZ#1007934)
    Thanks to Rodrigo A B Freire for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-1
changelog:
  - no connlabel.conf upstream anymore
  - new version 1.4.21
    - doc: clarify DEBUG usage macro
    - iptables: use autoconf to process .in man pages
    - extensions: libipt_ULOG: man page should mention NFLOG as replacement
    - extensions: libxt_connlabel: use libnetfilter_conntrack
    - Introduce a new revision for the set match with the counters support
    - libxt_CT: Add the "NOTRACK" alias
    - libip6t_mh: Correct command to list named mh types in manpage
    - extensions: libxt_DNAT, libxt_REDIRECT, libxt_NETMAP, libxt_SNAT, libxt_MASQUERADE, libxt_LOG: rename IPv4 manpage and tell about IPv6 support
    - extensions: libxt_LED: fix parsing of delay
    - ip{6}tables-restore: fix breakage due to new locking approach
    - libxt_recent: restore minimum value for --seconds
    - iptables-xml: fix parameter parsing (similar to 2165f38)
    - extensions: add copyright statements
    - xtables: improve get_modprobe handling
    - ip[6]tables: Add locking to prevent concurrent instances
    - iptables: Fix connlabel.conf install location
    - ip6tables: don't print out /128
    - libip6t_LOG: target output is different to libipt_LOG
    - build: additional include path required after UAPI changes
    - iptables: iptables-xml: Fix various parsing bugs
    - libxt_recent: restore reap functionality to recent module
    - build: fail in configure on missing dependency with --enable-bpf-compiler
    - extensions: libxt_NFQUEUE: add --queue-cpu-fanout parameter
    - extensions: libxt_set, libxt_SET: check the set family too
    - ip6tables: Use consistent exit code for EAGAIN
    - iptables: libxt_hashlimit.man: correct address
    - iptables: libxt_conntrack.man extraneous commas
    - iptables: libip(6)t_REJECT.man default icmp types
    - iptables: iptables-xm1.1 correct man section
    - iptables: libxt_recent.{c,man} dead URL
    - iptables: libxt_string.man add examples
    - extensions: libxt_LOG: use generic syslog reference in manpage
    - iptables: extensions/GNUMakefile.in use CPPFLAGS
    - iptables: correctly reference generated file
    - ip[6]tables: fix incorrect alignment in commands_v_options
    - build: add software version to manpage first line at configure stage
    - extensions: libxt_cluster: add note on arptables-jf
    - utils: nfsynproxy: fix error while compiling the BPF filter
    - extensions: add SYNPROXY extension
    - utils: add nfsynproxy tool
    - iptables: state match incompatibilty across versions
    - libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks
    - iptables: improve chain name validation
    - iptables: spurious error in load_extension
    - xtables: trivial spelling fix


author: Thomas Woerner <twoerner@redhat.com> 1.4.19.1-1
changelog:
  - new version 1.4.19.1
    - libxt_NFQUEUE: fix bypass option documentation
    - extensions: add connlabel match
    - extensions: add connlabel match
    - ip[6]tables: show --protocol instead of --proto in usage
    - libxt_recent: Fix missing space in manpage for --mask option
    - extensions: libxt_multiport: Update manpage to list valid protocols
    - utils: nfnl_osf: use the right nfnetlink lib
    - libip6t_NETMAP: Use xtables_ip6mask_to_cidr and get rid of libip6tc dependency
    - Revert "build: resolve link failure for ip6t_NETMAP"
    - libxt_osf: fix missing --ttl and --log in save output
    - libxt_osf: fix bad location for location in --genre
    - libip6t_SNPT: add manpage
    - libip6t_DNPT: add manpage
    - utils: updates .gitignore to include nfbpf_compile
    - extensions: libxt_bpf: clarify --bytecode argument
    - libxtables: fix parsing of dotted network mask format
    - build: bump version to 1.4.19
    - libxt_conntrack: fix state match alias state parsing
    - extensions: add libxt_bpf extension
    - utils: nfbpf_compile
    - doc: mention SNAT in INPUT chain since kernel 2.6.36
  - fixed changelog date weekdays where needed


author: Thomas Woerner <twoerner@redhat.com> 1.4.18-1
changelog:
  - new version 1.4.18 
    - lots of documentation changes
    - Introduce match/target aliases
    - Add the "state" alias to the "conntrack" match
    - iptables: remove unused leftover definitions
    - libxtables: add xtables_rule_matches_free
    - libxtables: add xtables_print_num
    - extensions: libip6t_DNPT: fix wording in DNPT target
    - extension: libip6t_DNAT: allow port DNAT without address
    - extensions: libip6t_DNAT: set IPv6 DNAT --to-destination
    - extensions: S/DNPT: add missing save function
  - changes of 1.4.17:
    - libxt_time: add support to ignore day transition
    - Convert the NAT targets to use the kernel supplied nf_nat.h header
    - extensions: add IPv6 MASQUERADE extension
    - extensions: add IPv6 SNAT extension
    - extensions: add IPv6 DNAT target
    - extensions: add IPv6 REDIRECT extension
    - extensions: add IPv6 NETMAP extension
    - extensions: add NPT extension
    - extensions: libxt_statistic: Fix save output


author: Ville Skyttä <ville.skytta@iki.fi> - 1.4.16.2-6
changelog:
  - Own unowned -services libexec dirs (#894464, Michael Scherer).
  - Fix -services unit file permissions (#732936, Michal Schmidt).


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-4
changelog:
  - fixed missing services for update of pre F-18 installations (rhbz#867960)
    - provide and obsolete old main package in services sub package
    - provide and obsolete old ipv6 sub package (pre F-17) in services sub package


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-2
changelog:
  - new sub package services providing the systemd services (RHBZ#862922)
  - new sub package utils: provides nfnl_osf and the pf.os database
  - using %{_libexecdir}/iptables as script path for the original init scripts
  - added service iptables save funcitonality using the new way provided by 
    initscripts 9.37.1 (RHBZ#748134)
  - added virtual provide for libxtables.so.7


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-1
changelog:
  - new version 1.4.16.2
    - build: support for automake-1.12
    - build: separate AC variable replacements from xtables.h
    - build: have `make clean` remove dep files too
    - doc: grammatical updates to libxt_SET
    - doc: clean up interpunction in state list for xt_conntrack
    - doc: deduplicate extension descriptions into a new manpage
    - doc: trim "state" manpage and reference conntrack instead
    - doc: have NOTRACK manpage point to CT instead
    - doc: mention iptables-apply in the SEE ALSO sections
    - extensions: libxt_addrtype: fix type in help message
    - include: add missing linux/netfilter_ipv4/ip_queue.h
    - iptables: fix wrong error messages
    - iptables: support for match aliases
    - iptables: support for target aliases
    - iptables-restore: warn about -t in rule lines
    - ip[6]tables-restore: cleanup to reduce one level of indentation
    - libip6t_frag: match any frag id by default
    - libxtables: consolidate preference logic
    - libxt_devgroup: consolidate devgroup specification parsing
    - libxt_devgroup: guard against negative numbers
    - libxt_LED: guard against negative numbers
    - libxt_NOTRACK: replace as an alias to CT --notrack
    - libxt_state: replace as an alias to xt_conntrack
    - libxt_tcp: print space before, not after "flags:"
    - libxt_u32: do bounds checking for @'s operands
    - libxt_*limit: avoid division by zero
    - Merge branch 'master' of git://git.inai.de/iptables
    - Merge remote-tracking branch 'nf/stable'
    - New set match revision with --return-nomatch flag support
  - dropped fixrestore patch, upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.15-1
changelog:
  - new version 1.4.15
    - extensions: add HMARK target
    - iptables-restore: fix parameter parsing (shows up with gcc-4.7)
    - iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)
    - libxtables: add xtables_ip[6]mask_to_cidr
    - libxt_devgroup: add man page snippet
    - libxt_hashlimit: add support for byte-based operation
    - libxt_recent: add --mask netmask
    - libxt_recent: remove unused variable
    - libxt_HMARK: correct a number of errors introduced by Pablo's rework
    - libxt_HMARK: fix ct case example
    - libxt_HMARK: fix output of iptables -L
    - Revert "iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)"


author: Thomas Woerner <twoerner@redhat.com> 1.4.14-1
changelog:
  - new version 1.4.14
    - extensions: add IPv6 capable ECN match extension
    - extensions: add nfacct match
    - extensions: add rpfilter module
    - extensions: libxt_rateest: output all options in save hook
    - iptables: missing free() in function cache_add_entry()
    - iptables: missing free() in function delete_entry()
    - libiptc: fix retry path in TC_INIT
    - libiptc: Returns the position the entry was inserted
    - libipt_ULOG: fix --ulog-cprange
    - libxt_CT: add --timeout option
    - ip(6)tables-restore: make sure argv is NULL terminated
    - Revert "libiptc: Returns the position the entry was inserted"
    - src: mark newly opened fds as FD_CLOEXEC (close on exec)
    - tests: add rateest match rules
  - dropped patch5 (cloexec), merged upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.12.2-1
changelog:
  - new version 1.4.12.2 with new pkgconfig/libip4tc.pc and pkgconfig/libip6tc.pc
    - build: make check stage not fail when building statically
    - build: restore build order of modules
    - build: scan for unreferenced symbols
    - build: sort file list before build
    - doc: clarification on the meaning of -p 0
    - doc: document iptables-restore's -T option
    - doc: fix undesired newline in ip6tables-restore(8)
    - ip6tables-restore: implement missing -T option
    - iptables: move kernel version find routing into libxtables
    - libiptc: provide separate pkgconfig files
    - libipt_SAME: set PROTO_RANDOM on all ranges
    - libxtables: Fix file descriptor leak in xtables_lmap_init on error
    - libxt_connbytes: fix handling of --connbytes FROM
    - libxt_CONNSECMARK: fix spacing in output
    - libxt_conntrack: improve error message on parsing violation
    - libxt_NFQUEUE: fix --queue-bypass ipt-save output
    - libxt_RATEEST: link with -lm
    - libxt_statistic: link with -lm
    - Merge branch 'stable'
    - Merge branch 'stable' of git://dev.medozas.de/iptables
    - nfnl_osf: add missing libnfnetlink_CFLAGS to compile process
    - xtoptions: fill in fallback value for nvals
    - xtoptions: simplify xtables_parse_interface


author: Thomas Woerner <twoerner@redhat.com> 1.4.12.1-1
changelog:
  - new version 1.4.12.1 with new pkgconfig/libipq.pc
    - build: abort autogen on subcommand failure
    - build: strengthen check for overlong lladdr components
    - build: workaround broken linux-headers on RHEL-5
    - doc: clarify libxt_connlimit defaults
    - doc: fix typo in libxt_TRACE
    - extensions: use multi-target registration
    - libip6t_dst: restore setting IP6T_OPTS_LEN flag
    - libip6t_frag: restore inversion support
    - libip6t_hbh: restore setting IP6T_OPTS_LEN flag
    - libipq: add pkgconfig file
    - libipt_ttl: document that negation is available
    - libxt_conntrack: fix --ctproto 0 output
    - libxt_conntrack: remove one misleading comment
    - libxt_dccp: fix deprecated intrapositional ordering of !
    - libxt_dccp: fix random output of ! on --dccp-option
    - libxt_dccp: provide man pages options in short help too
    - libxt_dccp: restore missing XTOPT_INVERT tags for options
    - libxt_dccp: spell out option name on save
    - libxt_dscp: restore inversion support
    - libxt_hashlimit: default htable-expire must be in milliseconds
    - libxt_hashlimit: observe new default gc-expire time when saving
    - libxt_hashlimit: remove inversion from hashlimit rev 0
    - libxt_owner: restore inversion support
    - libxt_physdev: restore inversion support
    - libxt_policy: remove superfluous inversion
    - libxt_set: put differing variable names in directly
    - libxt_set: update man page about kernel support on the feature
    - libxt_string: define _GNU_SOURCE for strnlen
    - libxt_string: escape the escaping char too
    - libxt_string: fix space around arguments
    - libxt_string: replace hex codes by char equivalents
    - libxt_string: simplify hex output routine
    - libxt_tcp: always print the mask parts
    - libxt_TCPMSS: restore build with IPv6-less libcs
    - libxt_TOS: update linux kernel version list for backported fix
    - libxt_u32: fix missing allowance for inversion
    - src: remove unused IPTABLES_MULTI define
    - tests: add negation tests for libxt_statistic
    - xtoptions: flag use of XTOPT_POINTER without XTOPT_PUT
  - removed include/linux/types.h before build to be able to compile


author: Thomas Woerner <twoerner@redhat.com> 1.4.12-1.1
changelog:
  - added temporary provides for libxtables.so.6 to be able to rebuild iproute,
    which is part of the standard build environment


author: Thomas Woerner <twoerner@redhat.com> 1.4.12-1
changelog:
  - new version 1.4.12 with support of all new features of kernel 3.0
    - build: attempt to fix building under Linux 2.4
    - build: bump soversion for recent data structure change
    - build: install modules in arch-dependent location
    - doc: fix group range in libxt_NFLOG's man
    - doc: fix version string in ip6tables.8
    - doc: include matches/targets in manpage again
    - doc: mention multiple verbosity flags
    - doc: the -m option cannot be inverted
    - extensions: support for per-extension instance global variable space
    - iptables-apply: select default rule file depending on call name
    - iptables: consolidate target/match init call
    - iptables: Coverity: DEADCODE
    - iptables: Coverity: NEGATIVE_RETURNS
    - iptables: Coverity: RESOURCE_LEAK
    - iptables: Coverity: REVERSE_INULL
    - iptables: Coverity: VARARGS
    - iptables: restore negation for -f
    - libip6t_HL: fix option names from ttl -> hl
    - libipt_LOG: fix ignoring all but last flags
    - libxtables: ignore whitespace in the multiaddress argument parser
    - libxtables: properly reject empty hostnames
    - libxtables: set clone's initial data to NULL
    - libxt_conntrack: move more data into the xt_option_entry
    - libxt_conntrack: restore network-byte order for v1,v2
    - libxt_hashlimit: use a more obvious expiry value by default
    - libxt_rateest: abolish global variables
    - libxt_RATEEST: abolish global variables
    - libxt_RATEEST: fix userspacesize field
    - libxt_RATEEST: use guided option parser
    - libxt_state: fix regression about inversion of main option
    - option: remove last traces of intrapositional negation
  - complete changelog:
    http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.12.txt


author: Thomas Woerner <twoerner@redhat.com> 1.4.11.1-3
changelog:
  - added support for native systemd file (rhbz#694738)
    - new iptables.service file
    - additional requires
    - moved sysv init scripts to /usr/libexec
    - added new post, preun and postun scripts and triggers


author: Thomas Woerner <twoerner@redhat.com> 1.4.11.1-1.1
changelog:
  -  added temporary provides for libxtables.so.5 to be able to rebuild iproute,
     which is part of the standard build environment


author: Thomas Woerner <twoerner@redhat.com> 1.4.11-1
changelog:
  - new version 1.4.11 with all new features of 2.6.37-39 (not usable)
    - lots of changes and bugfixes for base and extensions
    - complete changelog:
      http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.11.txt


author: Thomas Woerner <twoerner@redhat.com> 1.4.10-1
changelog:
  - new version 1.4.10 with all new features of 2.6.36
    - all: consistent syntax use in struct option
    - build: fix static linking
    - doc: let man(1) autoalign the text in xt_cpu
    - doc: remove extra empty line from xt_cpu
    - doc: minimal spelling updates to xt_cpu
    - doc: consistent use of markup
    - extensions: libxt_quota: don't ignore the quota value on deletion
    - extensions: REDIRECT: add random help
    - extensions: add xt_cpu match
    - extensions: add idletimer xt target extension
    - extensions: libxt_IDLETIMER: use xtables_param_act when checking options
    - extensions: libxt_CHECKSUM extension
    - extensions: libipt_LOG/libip6t_LOG: support macdecode option
    - extensions: fix compilation of the new CHECKSUM target
    - extensions: libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
    - iptables-xml: resolve compiler warnings
    - iptables: limit chain name length to be consistent with targets
    - libiptc: add Libs.private to pkgconfig files
    - libiptc: build with -Wl,--no-as-needed
    - xtables: remove unnecessary cast
  - dropped xt_CHECKSUM, added upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.9-1
changelog:
  - new version 1.4.9 with all new features of 2.6.35
    - doc: xt_hashlimit: fix a typo
    - doc: xt_LED: nroff formatting requirements
    - doc: xt_string: correct copy-and-pasting in manpage
    - extensions: add the LED target
    - extensions: libxt_quota.c: Support option negation
    - extensions: libxt_rateest: fix bps options for iptables-save
    - extensions: libxt_rateest: fix typo in the man page
    - extensions: REDIRECT: add random help
    - includes: sync header files from Linux 2.6.35-rc1
    - libxt_conntrack: do print netmask
    - libxt_hashlimit: always print burst value
    - libxt_set: new revision added
    - utils: add missing include flags to Makefile
    - xtables: another try at chain name length checking
    - xtables: remove xtables_set_revision function
    - xt_quota: also document negation
    - xt_sctp: Trace DATA chunk that supports SACK-IMMEDIATELY extension
    - xt_sctp: support FORWARD_TSN chunk type


author: Thomas Woerner <twoerner@redhat.com> 1.4.8-1
changelog:
  - new version 1.4.8 all new features of 2.6.34 (rhbz#)
    - extensions: REDIRECT: fix --to-ports parser
    - iptables: add noreturn attribute to exit_tryhelp()
    - extensions: MASQUERADE: fix --to-ports parser
    - libxt_comment: avoid use of IPv4-specific examples
    - libxt_CT: add a manpage
    - iptables: correctly check for too-long chain/target/match names
    - doc: libxt_MARK: no longer restricted to mangle table
    - doc: remove claim that TCPMSS is limited to mangle
    - libxt_recent: add a missing space in output
    - doc: add manpage for libxt_osf
    - libxt_osf: import nfnl_osf program
    - extensions: add support for xt_TEE
    - CT: fix --ctevents parsing
    - extensions: add CT extension
    - libxt_CT: print conntrack zone in ->print/->save
    - xtables: fix compilation when debugging is enabled
    - libxt_conntrack: document --ctstate UNTRACKED
    - iprange: fix xt_iprange v0 parsing


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-2
changelog:
  - added default values for IPTABLES_STATUS_VERBOSE and
    IPTABLES_STATUS_LINENUMBERS in init script
  - added missing lsb keywords Required-Start and Required-Stop to init script


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-1
changelog:
  - new version 1.4.7 with support for all new features of 2.6.33 (rhbz#570767)
    - libip4tc: Add static qualifier to dump_entry()
    - libipq: build as shared library
    - recent: reorder cases in code (cosmetic cleanup)
    - several man page and documentation fixes
    - policy: fix error message showing wrong option
    - includes: header updates
    - Lift restrictions on interface names
  - fixed license and moved iptables-xml into base package according to review


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-2
changelog:
  - moved libip*tc and libxtables libs to /lib[64], added symlinks for .so libs
    to /usr/lib[64] for compatibility (rhbz#558796)


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-1
changelog:
  - new version 1.4.6 with support for all new features of 2.6.32
    - several man page fixes
    - Support for nommu arches
    - realm: remove static initializations
    - libiptc: remove unused functions
    - libiptc: avoid strict-aliasing warnings
    - iprange: do accept non-ranges for xt_iprange v1
    - iprange: warn on reverse range
    - iprange: roll address parsing into a loop
    - iprange: do accept non-ranges for xt_iprange v1 (log)
    - iprange: warn on reverse range (log)
    - libiptc: fix wrong maptype of base chain counters on restore
    - iptables: fix undersized deletion mask creation
    - style: reduce indent in xtables_check_inverse
    - libxtables: hand argv to xtables_check_inverse
    - iptables/extensions: make bundled options work again
    - CONNMARK: print mark rules with mask 0xffffffff as set instead of xset
    - iptables: take masks into consideration for replace command
    - doc: explain experienced --hitcount limit
    - doc: name resolution clarification
    - iptables: expose option to zero packet/byte counters for a specific rule
    - build: restore --disable-ipv6 functionality on system w/o v6 headers
    - MARK: print mark rules with mask 0xffffffff as --set-mark instead of --set-xmark
    - DNAT: fix incorrect check during parsing
    - extensions: add osf extension
    - conntrack: fix --expires parsing


author: Thomas Woerner <twoerner@redhat.com> 1.4.5-1
changelog:
  - new version 1.4.5 with support for all new features of 2.6.31
    - libxt_NFQUEUE: add new v1 version with queue-balance option
    - xt_conntrack: revision 2 for enlarged state_mask member
    - libxt_helper: fix invalid passed option to check_inverse
    - libiptc: split v4 and v6
    - extensions: collapse registration structures
    - iptables: allow for parse-less extensions
    - iptables: allow for help-less extensions
    - extensions: remove empty help and parse functions
    - xtables: add multi-registration functions
    - extensions: collapse data variables to use multi-reg calls
    - xtables: warn of missing version identifier in extensions
    - multi binary: allow subcommand via argv[1]
    - iptables: accept multiple IP address specifications for -s, -d
    - several build fixes
    - several man page fixes
  - fixed two leaked file descriptors on sockets (rhbz#521397)


author: Thomas Woerner <twoerner@redhat.com> 1.4.4-1
changelog:
  - new version 1.4.4 with support for all new features of 2.6.30
    - several man page fixes
    - iptables: replace open-coded sizeof by ARRAY_SIZE
    - libip6t_policy: remove redundant functions
    - policy: use direct xt_policy_info instead of ipt/ip6t
    - policy: merge ipv6 and ipv4 variant
    - extensions: add `cluster' match support
    - extensions: add const qualifiers in print/save functions
    - extensions: use NFPROTO_UNSPEC for .family field
    - extensions: remove redundant casts
    - iptables: close open file descriptors
    - fix segfault if incorrect protocol name is used
    - replace open-coded sizeof by ARRAY_SIZE
    - do not include v4-only modules in ip6tables manpage
    - use direct xt_policy_info instead of ipt/ip6t
    - xtables: fix segfault if incorrect protocol name is used
    - libxt_connlimit: initialize v6_mask
    - SNAT/DNAT: add support for persistent multi-range NAT mappings


author: Thomas Woerner <twoerner@redhat.com> 1.4.3.1-1
changelog:
  - new version 1.4.3.1
    - libiptc is now shared
    - supports all new features of the 2.6.29 kernel
  - dropped typo_latter patch


author: Thomas Woerner <twoerner@redhat.com> 1.4.2-3
changelog:
  - still more review fixes (rhbz#225906)
    - consistent macro usage
    - use sed instead of perl for rpath removal
    - use standard RPM CFLAGS, but also -fno-strict-aliasing (needed for libiptc*)


author: Thomas Woerner <twoerner@redhat.com> 1.4.2-1
changelog:
  - new version 1.4.2
  - removed TOS value mask patch (upstream)
  - more review fixes (rhbz#225906)
  - install all header files (rhbz#462207)
  - dropped nf_ext_init (rhbz#472548)


author: Thomas Woerner <twoerner@redhat.com> 1.4.1-1
changelog:
  - new version 1.4.1 with new build environment
  - additional ipv6 network mask patch from Jan Engelhardt
  - spec file cleanup
  - removed old patches


author: Tom "spot" Callaway <tcallawa@redhat.com> 1.4.0-5
changelog:
  - use normal kernel headers, not linux/compiler.h
  - change BuildRequires: kernel-devel to kernel-headers
  - We need to do this to be able to build for both sparcv9 and sparc64 
    (there is no kernel-devel.sparcv9)


author: Thomas Woerner <twoerner@redhat.com> 1.4.0-3
changelog:
  - use the kernel headers from the build tree for iptables for now to be able to 
    compile this package, but this makes the package more kernel dependant
  - use s6_addr32 instead of in6_u.u6_addr32


author: Thomas Woerner <twoerner@redhat.com> 1.4.0-1
changelog:
  - new version 1.4.0
  - fixed condrestart (rhbz#428148)
  - report the module in rmmod_r if there is an error
  - use nf_ext_init instead of my_init for extension constructors


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-6
changelog:
  - fixed leaked file descriptor before fork/exec (rhbz#312191)
  - blacklisting is not working, use "install X /bin/(true|false)" test instead
  - return private exit code 150 for disabled ipv6 support
  - use script name for output messages


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-5
changelog:
  - fixed error code for stopping a already stopped firewall (rhbz#321751)
  - moved blacklist test into start


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-4.1
changelog:
  - do not start ip6tables if ipv6 is blacklisted (rhbz#236888)
  - use simpler fix for (rhbz#295611)
    Thanks to Linus Torvalds for the patch.


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-4
changelog:
  - fixed IPv6 reject type (rhbz#295181)
  - fixed init script: start, stop and status
  - support netfilter compiled into kernel in init script (rhbz#295611)
  - dropped inversion for limit modules from man pages (rhbz#220780)
  - fixed typo in ip6tables man page (rhbz#236185)


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-3
changelog:
  - do not depend on local_fs in lsb header - this delayes start after network
  - fixed exit code for initscript usage


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-2
changelog:
  - fixed initscript for LSB conformance (rhbz#246953, rhbz#242459)
  - provide iptc interface again, but unsupported (rhbz#216733)
  - compile all extension, which are supported by the kernel-headers package
  - review fixes (rhbz#225906)


author: Thomas Woerner <twoerner@redhat.com> 1.3.7-1
changelog:
  - new verison 1.3.7
  - iptc is not a public interface and therefore not installed anymore
  - dropped upstream secmark patch


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-2
changelog:
  - fix for plugin problem: link with "gcc -shared" instead of "ld -shared" and 
    replace "_init" with "__attribute((constructor)) my_init"


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-1
changelog:
  - new version 1.3.4
  - dropped free_opts patch (upstream fixed)
  - made libipq PIC (#158623)
  - additional configuration options for iptables startup script (#172929)
    Thanks to Jan Gruenwald for the patch
  - spec file cleanup (dropped linux_header define and usage)


author: Thomas Woerner <twoerner@redhat.com> 1.3.0-2
changelog:
  - Remove unnecessary explicit kernel dep (#146142)
  - Fixed out of bounds accesses (#131848): Thanks to Steve Grubb
    for the patch
  - Adapted iptables-config to reference to modprobe.conf (#150143)
  - Remove misleading message (#140154): Thanks to Ulrich Drepper
    for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.2.11-3.1
changelog:
  - changed default behaviour for IPTABLES_STATUS_NUMERIC to "yes" (#129731)
  - modified config file to match this change and un-commented variables with
    default values


author: Thomas Woerner <twoerner@redhat.com> 1.2.9-1
changelog:
  - vew version 1.2.9
  - new config options in ipXtables-config:
    IPTABLES_MODULES_UNLOAD
  - more documentation in ipXtables-config
  - fix for netlink security issue in libipq (devel package)
  - print fix for libipt_icmp (#109546)


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-13
changelog:
  - marked all messages in iptables init script for translation (#107462)
  - enabled devel package (#105884, #106101)
  - bumped build for fedora for libipt_recent.so (#106002)


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-12.1
changelog:
  - fixed lost udp port range in ip6tables-save (#104484)
  - fixed non numeric multiport port output in ipXtables-savs


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-6
changelog:
  - IPTABLES_SAVE_COUNTER defaults to no, now
  - install config file in /etc/sysconfig
  - exchange unload of ip_tables and ip_conntrack
  - fixed start function


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-5
changelog:
  - new config option IPTABLES_SAVE_ON_RESTART
  - init script: new status, save and restart
  - fixes #44905, #65389, #80785, #82860, #91040, #91560 and #91374


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - remove check for very old kernel versions in init scripts
  - sync up both init scripts and remove some further ugly things
  - add some docu into rpm


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed iptables and ip6tables initscript output, based on #70511
  - check return status of all iptables calls, not just the last one
    in a 'for' loop.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-2
changelog:
  - Merge ip6tables improvements from Ian Prowell <iprowell@prowell.org>
    - Update URL (#59354)
  - Use /sbin/chkconfig rather than chkconfig in %postun script


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-1
changelog:
  - Update to 1.2.4 (various fixes, including security fixes; among others:
    - Fix init script (#31133)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Yet another initscript fix (#30173)
  - Fix the fixes; they fixed some issues but broke more important
    stuff :/ (#30176)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix bugzilla #25986 (initscript not marked as config file)
  - fix bugzilla #25962 (iptables-restore)
  - mv chkconfig --del from postun to preun


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.2
  - fix up ipv6 split
  - add init script
  - Move the plugins from /usr/lib/iptables to /lib/iptables.
    This needs to work before /usr is mounted...
  - Use -O1 on alpha (compiler bug)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - move iptables to /sbin.
  - excludearch alpha for now, not building there because of compiler bug(?)


author: Michal Minar <miminar@redhat.com> 0.247-1
changelog:
  - Moved blacklist.conf from /etc/modprobe.d to /usr/lib/modprobe.d.
  - Renamed it to dist-blacklist.conf.
  - Data files update


author: Karsten Hopp <karsten@redhat.com> 0.233-7
changelog:
  - bump release
  - update oui.txt URL
  - fix tarball name in spec file
  - update usb.ids, out.txt and pci.ids


author: Karsten Hopp <karsten@redhat.com> 0.232-1
changelog:
  - update usb.ids, out.txt and pci.ids (#550020, #611860)
  - fix incorrect syntax doc/comment in blacklist.conf (Ville Skyttä, #532802)
  - add Acer B243HL and BenQ G2420HDBL (Ville Skyttä, #590787)
  - add HP LP2475w and Samsung 2494HM (Ville Skyttä, #595059)


author: Karsten Hopp <karsten@redhat.com> 0.223-1
changelog:
  - update usb.ids pci.ids oui.txt
  - rename /etc/modprobe.d/blacklist to /etc/modprobe.d/blacklist.conf


author: Karsten Hopp <karsten@redhat.com> 0.220-1
changelog:
  - add new monitor entries from Mandriva hardware database (Thierry Vignaud)
  - make generic entries have properly formated frequencies (Thierry Vignaud)
  - remove duplicate Dell monitor entries (Thierry Vignaud)
  - more vendor name fixes
  - fix extra field in 'Compudyne KD-1500N' definition (Thierry Vignaud)
  - make Dell monitors case consistent (Thierry Vignaud)
  - make all GoldStar monitors have the same vendor name (Thierry Vignaud)
  - add URL of git repository
  - fix spacing (Thierry Vignaud)
  - sort MonitorDB file with LANG=C sort -f -t ";" -k1,2
  - add Samsung SyncMaster 2443BWX (Marc van den Dikkenberg)
  - add some Lenovo monitors (Im Sza)


author: Karsten Hopp <karsten@redhat.com> 0.220-1
changelog:
  - update pci.ids, usb.ids, oui.txt
  - MonitorsDB: add some Samsung monitors (Ronald Warsow)
  - MonitorsDB: add Dell E1609W (Matt Domsch)
  - MonitorsDB: add 7 Dell monitors (Matt Domsch)
  - MonitorsDB: add a bunch of Hyundai and ImageQuest monitors


author: Karsten Hopp <karsten@redhat.com> 0.217-1
changelog:
  - update pci.ids, oui.txt
  - update usb.ids, fixes #439963
  - add HP w1907 LCD monitor, fixes #431359
  - fix many monitor entries (Stanislav Ievlev, #430276)


author: Karsten Hopp <karsten@redhat.com> 0.212-1
changelog:
  - pull new upstream pci.ids, usb.ids
  - Resolves: #300831
  - added HP TFT5600 LCD Monitor
  - Resolves: #250569
  - added Acer AL1916W, Eizo L568/L568D, Samsung 795DF
  - Resolves: #250582
  - Add Samsung 205BW/206BW/225BW/226BW
  - Resolves: #250584
  - Add Samsung 931BF
  - Resolves: #250587


author: Karsten Hopp <karsten@redhat.com> 0.207-1
changelog:
  - pull new upstream pci.ids and rebuild
  - Resolves: bz #251732
  - Resolves: bz #251734
  - Resolves: bz #252195
  - Resolves: bz #252196
  - Resolves: bz #241274


author: Karsten Hopp <karsten@redhat.com> 0.205-1
changelog:
  - really update pci.ids, update-pciids downloaded an old file
  - disable iwl4965 blacklist as it is not approved yet (#245379)


author: Karsten Hopp <karsten@redhat.com> 0.194-1
changelog:
  - Update to latest pci.ids/usb.ids for RHEL5
  - Resolves: #220182
    Add some Dell monitors to MonitorDB


author: Phil Knirsch <pknirsch@redhat.com> - 0.183-1
changelog:
  - Updated pci.ids before FC6 final (#198994)
  - Added several missing Samsung monitors (#197463)
  - Included a new inf2mondb.py from Matt Domsch (#158723)


author: Adam Jackson <ajackson@redhat.com> - 0.182-1
changelog:
  - Added ast driver description to videodrivers
  - Numerous Dell monitor additions (#196734)
  - Numerous Belinea monitor additions (#198087)


author: Adam Jackson <ajackson@redhat.com> - 0.181-1
changelog:
  - Updated videodrivers to mention i945
  - New monitors: Sony CPD-G420 (#145902), Compaq P1110 (#155120).


author: Jeremy Katz <katzj@redhat.com> - 0.171-1
changelog:
  - r128 -> ati.  should fix the unresolved symbol and kem says its more 
    generally the "right" thing to do


author: Bill Nottingham <notting@redhat.com>
changelog:
  - migrate mpt module names (#161420)
  - remove pcitable entries for drivers in modules.pcimap
  - switch lone remaining 'Server' entry - that can't work right


author: Bill Nottingham <notting@redhat.com> - 0.160-1
changelog:
  - move blacklist to /etc/modprobe.d, require new module-init-tools
  - add LG monitors (#162466, #161734)
  - add orinoco card (#161696)
  - more mptfusion stuff (#107088)


author: Bill Nottingham <notting@redhat.com> - 0.159-1
changelog:
  - pcitable: make branding happy (#160047)
  - Cards: add required blank line (#157972)
  - add some monitors
  - add JVC CD-ROM (#160907, <richard@rsk.demon.co.uk>)
  - add hisax stuff to blacklist (#154799, #159068)


author: Bill Nottingham <notting@redhat.com> 0.152-1
changelog:
  - fix qlogic driver mappings, add upgradelist mappings for the modules
    that changed names (#150621)


author: Mike A. Harris <mharris@redhat.com> 0.151-1
changelog:
  - Added one hundred billion new nvidia PCI IDs to pcitable and Cards to
    synchronize it with X.Org X11 6.8.2.  (#140601)


author: Bill Nottingham <notting@redhat.com> - 0.120-1
changelog:
  - mainly:
    fix upgradelist module for CMPci cards (#123647)
  - also:
    add another wireless card (#122676)
    add wireless card (#122625)
    add 1280x800 (#121548)
    add 1680x1050 (#121148)
    add IntelligentStick (#124313)


author: Bill Nottingham <notting@redhat.com> 0.116-1
changelog:
  - move updfstab.conf here
  - add wireless card (#116865)
  - add laptop display panel (#117385)
  - add clipdrive (#119928)
  - add travelling disk (#119143)
  - add NEXDISK (#106782)


author: Mike A. Harris <mharris@redhat.com> 0.110-1
changelog:
  - Added 3Dfx Voodoo Graphics and Voodoo II entries to the Cards database, both
    pointing to Alan Cox's new "voodoo" driver which is now included in XFree86
    4.3.0-62 and later builds in Fedora development.  Mapped their PCI IDs to
    the new Cards entry in pcitable.
  - Updated the entries for 3Dfx Banshee


author: Bill Nottingham <notting@redhat.com> 0.105-1
changelog:
  - many monitor updates (#114260, #114216, #113993, #113932, #113782,
    - add some PCMCIA cards (#113006, #112505)


author: Mike A. Harris <mharris@redhat.com> 0.99-1
changelog:
  - Added entries for Radeon 9600/9600Pro/9800Pro to Cards
  - Fixed minor glitch in pcitable for Radeon 9500 Pro


author: Mike A. Harris <mharris@redhat.com> 0.88-1
changelog:
  - Update MonitorsDB for new IBM monitors from upstream XFree86 bugzilla:
    http://bugs.xfree86.org/cgi-bin/bugzilla/show_bug.cgi?id=459


author: Mike A. Harris <mharris@redhat.com> 0.73-1
changelog:
  - Updated pcitable and Cards database to fix Savage entries up a bit, and
    change default Savage/MX driver to 'vesa' as it is hosed and with no sign
    of working in time for 4.3.0.  Fixes (#72476,80278,80346,80423,82394)


author: Mike A. Harris <mharris@redhat.com> 0.68-1
changelog:
  - Massive update of all ATI video hardware PCI IDs in pcitable and a fair
    number of additions and corrections to the Cards database as well


author: Mike A. Harris <mharris@redhat.com> 0.65-1
changelog:
  - Added Card:S3 Trio64V2 (Unsupported RAMDAC) entry to pcitable, pci.ids, and
    Cards database to default this particular variant to "vesa" driver (#81659)


author: Mike A. Harris <mharris@redhat.com>
changelog:
  - Complete reconstruction of all Neomagic hardware entries in Cards
    database to reflect current XFree86, as well as pcitable update,
    and submitted cleaned up entries to sourceforge


author: Bill Nottingham <notting@redhat.com> 0.61-1
changelog:
  - move pcmcia config file here
  - sort MonitorsDB, add some entries, remove dups
  - switch some network driver mappings


author: Bill Nottingham <notting@redhat.com> 0.44-1
changelog:
  - fix some of the Dell entries
  - add cardbus controller id (#71198)
  - add audigy mapping
  - add NEC monitor (#71320)


author: Mike A. Harris <mharris@redhat.com> 0.37-1
changelog:
  - Changed Matrox G450 driver default options to fix bug (#66697)
  - Corrected S3 Trio64V2 bug in Cards file (#66492)


author: Mike A. Harris <mharris@redhat.com> 0.35-1
changelog:
  - Updated Cards db for CT69000
  - Various ATI cleanups and additions to Cards and pcitable
  - Updated S3 Trio3D to default to "vesa" driver (#59956)


author: Bill Nottingham <notting@redhat.com> 0.33-1
changelog:
  - Eizo monitor updates (#56080, <triad@df.lth.se>)
  - pci.ids updates, corresponding pcitable updates
  - pcilint for pcitable


author: Mike A. Harris <mharris@redhat.com> 0.31-1
changelog:
  - Modified ATI entries in pcitable to be able to autodetect the FireGL 8700
    and FireGL 8800 which both have the same ID, but different subdevice ID's.
    Added entries to Cards database for the 8700/8800 as well.


author: Mike A. Harris <mharris@redhat.com> 0.30-1
changelog:
  - Reconfigured Cards database to default to XFree86 4.x for ALL video
    hardware, since 3.3.6 support is being removed.  Video cards not
    supported natively by 4.x will be changed to use the vesa or vga
    driver, or completely removed as unsupported.


author: Martin Osvald <mosvald@redhat.com> - 2.12.2-3
changelog:
  - add pcp user to /etc/aliases (#1744089)
  - set PATH if it is empty in csh.login (#1744104)
  - lang.csh: prevent grep from failing so scripts do not end
    prematurely when tcsh -e option in use (#1678706)
  - use full path for non-builtins (#1688302)
  - add nrpe tcp port 5666 to /etc/services (#1730396)


author: Ondrej Vasik <ovasik@redhat.com> - 2.12.2-2
changelog:
  - do not ship /etc/hosts.allow and /etc/hosts.deny (no need for them
    as we don't allow tcp_wrappers in RHEL8, #1663556)


author: Ondrej Vasik <ovasik@redhat.com> - 2.12.0-1
changelog:
  - move /etc/networks from initscripts to setup
  - move /etc/profile.d/lang.{sh,csh} from initscripts to setup


author: Ondrej Vasik <ovasik@redhat.com> - 2.11.1-1
changelog:
  - saslauthd belongs to cyrus-sasl and cyrus-imap packages
  - provide a way how to override set envvars through sh.local file(#1344007)
  - provide a way how to override set ennvars through csh.local file


author: Ondrej Vasik <ovasik@redhat.com> - 2.9.5-1
changelog:
  - assign uidgid for systemd-network(192:192) - FPC 481,bz#1102002
  - assign uidgid for systemd-resolve(193:193) - FPC 481,bz#1102002


author: Ondrej Vasik <ovasik@redhat.com> 2.8.74-1
changelog:
  - add more securetty required for mainframes (#1067347)
  - set SHELL envvar to /bin/bash in bashrc (#1063552)
  - adjust the homedir for oprofile uid (#1068902)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.67-1
changelog:
  - assign 166:166 uidgid pair for ceilometer (#923891)
  - change 187:187 reservation from openstack-heat
    to just heat(#923858)
  - longer shell names support caused by UsrMove to
    the /etc/shells (#922527)
  - drop gopher (uid 13, gid 30) from groups created by default
    -> dropped completely - no gopher server in Fedora (#918206)
  - drop dip (gid 40) from groups created by default
    -> moved to ppp (#918206)
  - drop uucp (uidgid 14) from groups created by default
    -> moved to uucp (#918206)
  - create cdrom, tape, dialout, floppy groups in setup(#919285)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.66-1
changelog:
  - assign :190 gid for systemd-journal (#918120)
  - assign 191:191 uidgid pair for systemd-journal-gateway (#918120)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.51-1
changelog:
  - do not throw away the stderr output of profile.d scripts
    in noninteractive bash/ksh sessions(#805507)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.48-1
changelog:
  - remove /bin and /sbin from /etc/profile(#789616)
  - require usrmove
  - add sbin paths in csh.login consistently with bash(#773268)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.45-1
changelog:
  - reserve :156 groupid for stapusr - #756807
  - reserve :157 groupid for stapsys - #756807
  - reserve :158 groupid for stapdev - #756807


author: Ondrej Vasik <ovasik@redhat.com> 2.8.43-1
changelog:
  - gopher home dir in uidgid should be /var/gopher - #752885
  - reserve 163:163 for keystone (openstack-keystone) - #752842
  - reserve 164:164 for quantum (openstack-quantum) - #752842
  - update services to latest IANA


author: Ondrej Vasik <ovasik@redhat.com> 2.8.38-1
changelog:
  - reserve 160:160 for swift (openstack-swift) - #732442
  - reserve 161:161 for glance (openstack-glance) - #732442
  - reserve 162:162 for nova (openstack-nova) - #732442
  - comment out 0/tcp spr-itunes /etc/services entry (#710185)
  - add hvc[01], xvc0, hvsi[012] to /etc/securetty (#728030)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.33-1
changelog:
  - reflect the reserved username change of amanda
    to amandabackup (#700807)
  - drop order hosts,bind from setup, no longer used by
    glibc (#703049)
  - assign 174:174 uidgid for user/group retrace
    (abrt retrace-server, #706012)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.32-1
changelog:
  - do not override already set PROMPT_COMMAND envvar(#691425)
  - do not quit uidgidlint after first error, show all
  - update services to latest IANA


author: Ondrej Vasik <ovasik@redhat.com> 2.8.29-1
changelog:
  - run newaliases in the post to prevent sendmail messages
    about old alias database in the log(#658921)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.28-1
changelog:
  - update services and protocols to latest IANA reservations
  - reserve uidgid pair 109:109 for rhevm(#652287)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.24-1
changelog:
  - do show messages from profile.d scripts in interactive
    login ksh shell(#616418)
  - respect umask settings even with login shell


author: Ondrej Vasik <ovasik@redhat.com> 2.8.22-1
changelog:
  - reserve uidgid pair 170:170 for avahi-autoipd
  - reserve uidgid pair 171:171 for pulse (pulseaudio)
  - update reserved homedir for avahi


author: Ondrej Vasik <ovasik@redhat.com> 2.8.18-1
changelog:
  - reserve uidgid pair 140:140 for ricci daemon(#585957)
  - reserve uidgid pair 141:141 for luci daemon(#585958)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.17-1
changelog:
  - verify md5sum/size/mtime in the case of /etc/hosts.allow
    and /etc/hosts.deny (#578263)
  - do the same for /etc/services and /etc/protocols, we
    provide (almost) complete IANA set, so no reason to modify
    it in most cases outside of setup package


author: Ondrej Vasik <ovasik@redhat.com> 2.8.16-1
changelog:
  - drop X11R6 hierarchy dir from tcsh path (#576940)
  - update services to latest IANA
  - update protocols to latest IANA


author: Ondrej Vasik <ovasik@redhat.com> 2.8.15-1
changelog:
  - reserve uidgid pair 155:155 for stap-server(#555813)
  - reserve uidgid pair 113:113 for usbmuxd(#556525)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.11-1
changelog:
  - don't have HISTCONTROL ignorespace by default (#520632),
    but do not override it when it is already set
  - add csync alias for port 2005 / tcp, udp


author: Ondrej Vasik <ovasik@redhat.com> 2.8.9-1
changelog:
  - reserve uidgid pair 108:108 for ovirt from libvirt (#513261)
  - reserve uidgid pair 111:111 for saned from sane-backends
    (#520634)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.8-1
changelog:
  - change permissions on /etc/shadow and /etc/gshadow to 0000 and
    use capabilities for them(#517577)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.7-1
changelog:
  - increase threshold for uidgid reservations to 200
  - reserve uidgid pair 107:107 for qemu (libvirt,#511957)
  - reflect threshold in profile and bashrc, do inform about
    uidgid file existence there
  - remove old remnants about portmap from hosts.deny(#509919)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.5-1
changelog:
  - use history-search-backward/forward for pageup/pagedown
    mapping in inputrc (#500989)
  - add HISTCONTROL="ignoreboth" to /etc/profile to not include
    duplicities and lines starting with space into the history
    (#500819)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.4-1
changelog:
  - add oprofile (16:16) to uidgid
  - use os.remove instead of os.execute in lua post
    - no dependency on /bin/sh (thanks Panu Matilainen)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.3-1
changelog:
  - do not disable coredumps in profile/csh.cshrc scripts,
    coredumps already disabled in rawhide's RLIMIT_CORE(#495035)


author: Ondrej Vasik <ovasik@redhat.com> 2.8.1-1
changelog:
  - do ship/generate /etc/{shadow,gshadow} files(#483251)
  - do ship default /etc/hosts with setup (#483244)
  - activate multi on (required for IPv6 only localhost
    recognition out-of-the-box) (#486461)
  - added postun section for cleaning of dangerous .rpmnew
    files after updates
  - make profile and bashrc more portable (ksh, #487419)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.7-4
changelog:
  - drop <lua> scriptlet completely(audio/video group
    temporarily created by packages which use it for
    updates(#477769))


author: Ondrej Vasik <ovasik@redhat.com> 2.7.7-2
changelog:
  - reserve 87 gid for polkituser (just uid was reserved),
    reserve 18 gid for dialout(to prevent conflicts with
    polkituser gid)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.7-1
changelog:
  - synchronize /etc/services with latest IANA, do not use
    tabs in that file to have consistent output
  - fix indentation in /etc/profile and /etc/bashrc
    (#481074)
  - assign uid 36 for vdsm, gid 36 for kvm
    (#346151,#481021)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.6-1
changelog:
  - make uidgid file better parsable (synchronize tabs)
  - reserve gid 11 for group cdrom (udev,MAKEDEV)
  - reserve gid 33 for group tape (udev,MAKEDEV)
  - reserve gid 87 for group dialout (udev,MAKEDEV)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.5-2
changelog:
  - do not export PATH twice(#449286 NOTABUG revert)
  - do not export INPUTRC(to respect just created ~/.inputrc)
    (#443717)


author: Ondrej Vasik <ovasik@redhat.com> 2.7.4-3
changelog:
  - update protocols to latest IANA list (2008-04-18)
  - update services to latest IANA list (2008-11-17)
  - mark /etc/protocols and /etc/inputrc %config(noreplace)
  - added URL, fixed few rpmlint warnings
  - do own audio and video group (#458843), create it in default
    /etc/group


author: Ondrej Vasik <ovasik@redhat.com> 2.7.4-2
changelog:
  - again process profile.d scripts in noninteractive shells,
    but do not display stderr/stdout messages(#457243)
  - fix wrong prompt for csh/tcsh (#443854)
  - don't show error message about missing hostname in profile
    (#301481)
  - reserve rquotad port 875 in /etc/services (#455859)
  - export PATH after processing profile.d scripts (#449286)
  - assign gid's for audio (:63) and video (:39) group(#458843),
    assign uidgid pair (52:52) for puppet (#471918)
  - fix /etc/services duplicities to pass serviceslint


author: Phil Knirsch <pknirsch@redhat.com> 2.7.4-1
changelog:
  - Include new serviceslint for speedup (#465642)
  - Cleaned up services due to newly discovered bugs in it with new serviceslint


author: Phil Knirsch <pknirsch@redhat.com> 2.6.11-1
changelog:
  - Fixed problem with /etc/profile.d/* and non-interactive tcsh (#299221)
  - Fixed xterm -title problem (#387581)
  - Fixed problem with /etc/profile.d/*.csh not being executed for none loginshells anymore
    (#381631, #429838)
  - Corrected missing shell for news user in uidgid and passwd


author: Phil Knirsch <pknirsch@redhat.com> 2.6.6-1
changelog:
  - Added another set of proposed changes to /etc/csh.cshrc (#199817)
  - Added missing documentation in /etc/hosts.[allow|deny] (#157053)


author: Phil Knirsch <pknirsch@redhat.com> 2.6.5-1
changelog:
  - Fixed tcsh behaviour for non login shells (#191233)
  - Fixed umask setting for tcsh to behave identical to bash logins (#199817)
  - Added ipv6-crypt and ipv6-auth for backwards compatibility (#210546)


author: Phil Knirsch <pknirsch@redhat.com> 2.5.49-1
changelog:
  - Really switch to new /etc/services file
  - Added /etc/fstab and /etc/mtab to ownership of setup (#177061)


author: Phil Knirsch <pknirsch@redhat.com> 2.5.48-1
changelog:
  - Switched to the new large /etc/services file which fixes #112298, #133683,
    - Fixed pathmunge problem with bashrc (#123621)
  - Removed /usr/X11R6/bin from default PATH (#173856)


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed bug with PROMPT_COMMAND being broken for weird dirs (#142125)
  - Added hfsplus to know filesystems (#172820)


author: Bill Nottingham <notting@redhat.com> 2.5.46-1
changelog:
  - add buildrequires on bash, tcsh (#161016)
  - move core dump size setting from csh.login to csh.cshrc (#156914)


author: Bill Nottingham <notting@redhat.com> 2.5.34-1
changelog:
  - add dict (#107807)
  - add cyrus services (#118832)
  - move delete-char binding for csh (#113682)
  - do the same path munging for csh as for bash (#57708)
  - add postfix aliases (#117661)
  - fix bashrc login shell check (#104491)
  - add odmr to services (#101098)
  - add distcc to services (#91535)
  - add xterm forware/backward word bindings (#80860)


author: Jens Petersen <petersen@redhat.com> 2.5.18-1
changelog:
  - bring back the screen case in /etc/bashrc, since /etc/screenrc no
    longer sets defhstatus (#60596, #60597)


author: Jens Petersen <petersen@redhat.com> 2.5.16-1
changelog:
  - dont special case screen in /etc/bashrc, since it overrides the user's
    screenrc title setting (#60596)


author: Bill Nottingham <notting@redhat.com> 2.5.8-1
changelog:
  - add nologin to /etc/shells (#53963)
  - fix some quoting issues (#59627)
  - fix screen status line (#60596)
  - fix path regexps (#59624)
  - move profile.d stuff to csh.cshrc (#59946)


author: Nalin Dahyabhai <nalin@redhat.com> 2.5.7-1
changelog:
  - add entries to services (ipp, wnn4, and so on)
  - try to remove duplicates in services (remove nameserver as alias for domain,
    and readnews as alias for netnews)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - lock only needs to be a gid
  - don't set dspmbyte=euc here; do it in lang.csh, and only if necessary (#50318)


author: Nalin Dahyabhai <nalin@redhat.com> 2.4.15-1
changelog:
  - reorder /etc/services to match comments again
  - protocol 118 is stp, not st
  - update URLs in /etc/protocols and /etc/services


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.4.10-1
changelog:
  - Fix bugs #24159 and #30634 again; whoever moved bashrc from bash
    to setup used an old version. :((


author: Bill Nottingham <notting@redhat.com>
changelog:
  - overhaul /etc/protocols (#18530)
  - add port 587 to /etc/services (#25001)
  - add corbaloc (#19581)
  - don't set /usr/X11R6/bin in $PATH if it's already set (#19968)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Clean up /etc/services, separating registered numbers from unregistered
    ("squatted") numbers, and adding some.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add smtps (465/tcp) and submission (587/tcp) to /etc/services for TLS
    support (postfix >= 20001030-2)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - split csh.login into csh.login and csh.cshrc (#various)
  - fix pop service names (#6206)
  - fix ipv6 protocols entries (#6219)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - rename /etc/csh.cshrc to /etc/csh.login (#2931).
  - (note: modified /etc/csh.cshrc should end up in /etc/csh.cshrc.rpmsave)


author: Erik Troan <ewt@redhat.com>
changelog:
  - removed /etc/inetd.conf, /etc/rpc
  - flagged /etc/securetty as missingok
  - fixed buildroot stuff in spec file


author: Kamil Dudka <kdudka@redhat.com> - 5.33-11
changelog:
  - improve documentation of --apple in file(1) man page (#1677442)
  - improve parsing of ppc core files (#1658171)


author: Kamil Dudka <kdudka@redhat.com> - 5.33-7
changelog:
  - show details about ppc swap partition (#1224668)
  - support longer version strings for clamav database (#1539107)


author: Kamil Dudka <kdudka@redhat.com> - 5.33-4
changelog:
  - do not classify shared libraries as pie executables (#1581343)
  - seccomp: fix build failure due to missing syscalls


author: Miro Hrončok <mhroncok@redhat.com> - 5.33-3
changelog:
  - Update Python macros to new packaging standards
    (See https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 5.31-10
changelog:
  - Python 2 binary package renamed to python2-file
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Kamil Dudka <kdudka@redhat.com> - 5.30-5
changelog:
  - make the package build on EPEL-6 and EPEL-7
  - drop undocumented override of the __libtoolize RPM macro
  - drop undocumented non-upstream file-5.24-varied.patch
  - drop undocumented non-upstream file-5.22-awk-perl.patch
  - drop non-upstream file-5.19-cafebabe.patch no longer needed (#1134580)
  - drop undocumented non-upstream file-5.14-x86boot.patch
  - drop undocumented non-upstream file-5.04-generic-msdos.patch


author: Kamil Dudka <kdudka@redhat.com> - 5.30-4
changelog:
  - increase strength of perl modules to exceed C sources (#772651)
  - drop non-upstream file-5.14-perl.patch (#1051598)
  - drop undocumented non-upstream file-5.10-strength.patch (#772651)


author: Kamil Dudka <kdudka@redhat.com> - 5.29-3
changelog:
  - build in parallel and in verbose mode
  - fix assertion failure on certain files (thanks to Christoph Biedl)


author: Jan kaluza <jkaluza@redhat.com> - 5.25-3
changelog:
  - fix #1279401 - change the order of Perl patterns to try "Perl script"
    patterns before "Perl Module"


author: Jan Kaluza <jkaluza@redhat.com> - 5.19-5
changelog:
  - fix #1101404 - remove weak Pascal patterns
  - fix #1107995 - detect locale-archive
  - fix #1130693, #1115111 - fix detection of MSOOXML, OOXML and ZIP
  - fix #1124940 - detect Python 3.4 byte-compiled files


author: Jan Kaluza <jkaluza@redhat.com> - 5.14-20
changelog:
  - fix #1079847 - fix potential regression in Perl detection caused
    by original patch for CVE-2013-7345


author: Jan Kaluza <jkaluza@redhat.com> - 5.14-18
changelog:
  - fix #1079847 - fix for CVE-2013-7345
  - fix #1080450 - remove *.orig files before compiling magic/Magdir


author: Jan Kaluza <jkaluza@redhat.com> - 5.14-14
changelog:
  - fix #1051598 - reverse the order of shebang vs. package keyword detection
    in Perl by increasing strength of all Perl patterns


author: Jan Kaluza <jkaluza@redhat.com> - 5.14-6
changelog:
  - fix #962678 - do not exit if no magic file is loaded, we can still provide
    useful info without magic file


author: Jan Kaluza <jkaluza@redhat.com> - 5.14-4
changelog:
  - fix #948255 - print white-space in fsmagic, but only when
    we know there will be some more output


author: Jan Kaluza <jkaluza@redhat.com> - 5.14-1
changelog:
  - fix #891856 - update to file-5.14
  - fix #909754 - magic number for Python-3.3
  - fix #912271 - do not report dwarf debug info packages as 'stripped'
  - fix #882321 - do not print 'unknown capability' for ELF capabilities for
    architectures which File does not support
  - fix #866000 - show proper build id for ELF binaries
  - fix #860139 - better dump file recognition on big endian architectures
  - remove file-static subpackage
  - move python-magic .py files to python_sitearch


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-7
changelog:
  - removed duplicated patterns for backups generated by "dump" tool
  - recognize volume_key escrow packets
  - mention exit code in manpage
  - remove weak msdos patterns


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-5
changelog:
  - fix #847936 - decompress bzip2 properly when using -z param
  - fix #847937 - read magic patterns also from ~/.magic.mgc


author: Jan Kaluza <jkaluza@redhat.com> - 5.11-1
changelog:
  - fix #796130 - update to file-5.11
  - fix #796209 - recognize VDI images
  - fix #795709 - recognize QED images


author: Jan Kaluza <jkaluza@redhat.com> - 5.10-3
changelog:
  - fix #771292 - do not show 'using regular magic file' warning for /etc/magic,
    because this file is not supposed to be compiled


author: Jan Kaluza <jkaluza@redhat.com> - 5.07-2
changelog:
  - backported patches to fix 5.07 regressions
  - fix #706231 - fixed ZIP detection
  - fix #705183, #705499 - removed weak DOS device driver pattern


author: Jan Kaluza <jkaluza@redhat.com> - 5.05-3
changelog:
  - fix #676543 - improved TeX and LaTeX recognition
  - fix #676041 - detect all supported RPM architectures


author: Daniel Novotny <dnovotny@redhat.com> 5.04-8
changelog:
  - fix #580046 - the file command returns zero exit code 
                  even in case of unexisting file being tested


author: Daniel Novotny <dnovotny@redhat.com> 5.03-11
changelog:
  - fix #531082 -  RFE: add detection of Python 3 bytecode
  - fix #531127 -  `file' command does not recognize mime type `image/vnd.djvu'


author: Daniel Novotny <dnovotny@redhat.com> 5.03-6
changelog:
  - fix #510429 -  file is confused by string "/* (if any) */" 
         in C header and claims it "Lisp/Scheme program text"


author: Daniel Novotny <dnovotny@redhat.com> 5.00-5
changelog:
  - added two font definitions (#491594, #491595)
    and a fix for file descriptor leak when MAGIC_COMPRESS used (#491596)


author: Daniel Novotny <dnovotny@redhat.com> 4.26-2
changelog:
  - fix #463809: rpmbuild rpmfcClassify: Assertion fails on some binary files
    (false positive test on "DOS device driver" crashed file(1)
     and rpmbuild(8) failed)


author: Tomas Smetana <tsmetana@redhat.com> - 4.24-4
changelog:
  - add GFS2 filesystem magic; thanks to Eric Sandeen
  - add LVM snapshots magic (#449755); thanks to Jason Farrell


author: Tomas Smetana <tsmetana@redhat.com> - 4.24-3
changelog:
  - drop patches that do nothing in recent build system
  - create the text magic file during installation


author: Martin Bacovsky <mbacovsk@redhat.com> - 4.21-3
changelog:
  - resolves: #172015: no longer reports filename of crashed app when run on core files.
  - resolves: #249578: Weird output from "file -i"
  - resolves: #234817: file reports wrong filetype for microsoft word file


author: Martin Bacovsky <mbacovsk@redhat.com> - 4.21-2
changelog:
  - resolves: #246700: RPM description isn't related to product
  - resolves: #238789: file-devel depends on %{version}
    but not on %{version}-%{release}
  - resolves: #235267: for core files, file doesn't display the executable name


author: Martin Bacovsky <mbacovsk@redhat.com> - 4.19-2
changelog:
  - Resolves: #223297 - file does not recognize OpenOffice "native" formats
  - Resolves: #224344 - Magic rules should be in file-libs


author: Martin Bacovsky <mbacovsk@redhat.com> - 4.19-1
changelog:
  - Resolves: #208880 - Pointless file(1) error message while detecting ELF 64-bit file
      thanks to <jakub@redhat.com> for patch
  - Resolves: #214992 - file-devel should own %_includedir/* %_libdir/lib*.so
  - Resolves: #203548 - a -devel package should be split out for libmagic
  - upgrade to new upstream 4.19
  - patch revision and cleaning
  - split package to file, file-devel and file-libs


author: Radek Vokal <rvokal@redhat.com> - 4.12-3
changelog:
  - core64 patch fixing output on core files (#145354) <kzak@redhat.com>
  - minor change in magic patch


author: Radek Vokal <rvokal@redhat.com>
changelog:
  - zlib patch deleted, note patch deleted, rh patch updated, debian patch updated
  - upgrade to file-4.10


author: Jeff Johnson <jbj@jbj.org> 4.07-1
changelog:
  - upgrade to 4.07.
  - deal gracefully with unreadable files (#113207).
  - detect PO files (from Debian).


author: Jeff Johnson <jbj@jbj.org> 4.02-3
changelog:
  - use zlib rather than exec'ing gzip.

  -* Thu Aug 28 2003 Dan Walsh <dwalsh@redhat.com>
  -- Add Selinux support.


author: Trond Eivind Glomsrød <teg@redhat.com> 3.37-1
changelog:
  - 3.37
  - s/Copyright/License/
  - build with --enable-fsect-man5, drop patch
  - disable two old patches


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - fix off-by-1 error when creating filename for use with -i.
  - include a copy of GNOME /etc/mime-types in %{_datadir}/magic.mime (#14741).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - identify ELF stripped files correctly (#4665).
  - use SPARC (not sparc) consistently throughout (#4665).
  - add entries for MS Office files (#4665).


author: Javier Martinez Canillas <javierm@redhat.com> - 2.0.0-1
changelog:
  - Download the distributed tarball instead of the source code tarball
  - Update URLs to point to the new project location
  - Update to 2.0.0 release


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-6
changelog:
  - Add tss user if doesn't currently exist - PR#1 from Jerry Snitselaar
  - Removed source tarball and cleared it from .gitignore


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-4
changelog:
  - Rename and relocate udev rules file to _udevrulesdir
  - Update scriptlet to add service name after systemd_postrun


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-2
changelog:
  - Removed BuildRequires for gcc
  - Move tpm2-abrmd systemd service to /usr/lib/systemd/system
  - Added scriptlet for tpm2-abrmd systemd service
  - Use autoreconf instead of bootstrap


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.02-99.0.1
changelog:
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - Fix various coverity issues [Orabug: 32530657]
  - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
  - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Copy symvers.gz to /boot during kernel install [Orabug: 29773086]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-99
changelog:
  - Fix bug of grub2-install not checking for the SBAT option
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-98
changelog:
  - Fix another batch of CVEs
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-96
changelog:
  - Fix "Add 'at_keyboard_fallback_set' var to force the set manually"
    Related: rhbz#1897587
  - Fix a boot failure due patch "ieee1275: claim up to 256MB memory"
    Resolves: rhbz#1929111


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-93
changelog:
  - add keylayouts and at_keyboard modules to UEFI Grub2 (rmetrich)
    Related: rhbz#1897587
  - at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
    Resolves: rhbz#1897587
  - add GRUB enhanced debugging features (rmetrich)
    Resolves: rhbz#1776249
  - ieee1275: Avoiding many unecessary open/close (diegodo)
    Resolves: rhbz#1862632
  - ieee1275: device mapper and fibre channel discovery support (diegodo)
    Resolves: rhbz#1873724


author: Jan Hlavac <jhlavac@redhat.com> - 2.02-92
changelog:
  - grub2-install: disable support for EFI platforms
    Resolves: rhbz#1737444
  - Include a few more modules to EFI build needed for LUKS support (javierm)
    Related: rhbz#1873725


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-91
changelog:
  - Fix tps-rpmtest failing due /boot/grub2/grubenv attributes mismatch
    Resolves: rhbz#1813959
  - Include in EFI build the modules needed for LUKS support
    Resolves: rhbz#1873725
  - Fix keyboards that report IBM PC AT scan codes
    Resolves: rhbz#1897587


author: Peter Jones <pjones@redhat.com> - 2.02-86
changelog:
  - Couple more late fixes.
    Resolves: CVE-2020-10713
    Resolves: CVE-2020-14308
    Resolves: CVE-2020-14309
    Resolves: CVE-2020-14310
    Resolves: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 2.02-85
changelog:
  - Fix several CVEs
    Resolves: CVE-2020-10713
    Resolves: CVE-2020-14308
    Resolves: CVE-2020-14309
    Resolves: CVE-2020-14310
    Resolves: CVE-2020-14311


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-82
changelog:
  - Drop "Disable multiboot, multiboot2, and linux16 modules on EFI builds"
    Resolves: rhbz#1779480
  - efi/http: Export {fw,http}_path variables to make them global
    Resolves: rhbz#1811561
  - efi/http: Enclose literal IPv6 addresses in square brackets
  - efi/net: Allow to specify a port number in addresses
  - efi/ip4_config: Improve check to detect literal IPv6 addresses
  - efi/net: Print a debug message if parsing the address fails
    Resolves: rhbz#1811560
  - Set image base address before jumping to the PE/COFF entry point
    Resolves: rhbz#1819624


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-80
changelog:
  - Fix PRIxGRUB_EFI_STATUS definition
    Related: rhbz#1761811
  - TPM: Print messages if measuraments fail as debug instead of error
    Resolves: rhbz#1761811
  - unix/platform: Initialize variable to fix grub-install on UEFI system
    Resolves: rhbz#1768689
  - blscfg: add a space char when appending fields for variable expansion
    Resolves: rhbz#1669252


author: Peter Jones <pjones@redhat.com> - 2.02-71
changelog:
  - Fix (a fourth time, due to a typo) how LDFLAGS works on non-efi platforms.
    Related: rhbz#1653961


author: Peter Jones <pjones@redhat.com> - 2.02-70
changelog:
  - Fix (once again) how CFLAGS and LDFLAGS propogate the settings for hardened
    builds, because rpmdiff doesn't like the current way failing.
    Related: rhbz#1653961


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-68
changelog:
  - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
    Resolves: rhbz#1680572
  - Try to set -fPIE and friends on libgnu.a (pjones)
  - blscfg: fallback to default_kernelopts if BLS option field isn't set
    Related: rhbz#1680572
  - Remove bogus load_env after blscfg command in 10_linux


author: Peter Jones <pjones@redhat.com> - 2.02-65
changelog:
  - Don't build the grub2-efi-ia32-* packages on i686; it causes multilib
    errors and we don't ship the result anyway.
    Related: rhbz#1637875


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-64
changelog:
  - Make grub2-mkconfig to honour GRUB_CMDLINE_LINUX in /etc/default/grub
    Resolves: rhbz#1637875
  - docs: Stop using polkit / pkexec for grub-boot-success.timer / service
    Resolves: rhbz#1655687


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-63
changelog:
  - BLS files should only be copied by grub-switch-to-blscfg if BLS isn't set
    Related: rhbz#1638117
  - Fix get_entry_number() wrongly dereferencing the tail pointer
    Resolves: rhbz#1654936


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-62
changelog:
  - Drop "Be more aggro about actually using the *configured* network device."
    Resolves: rhbz#1654388
  - Fix menu entry selection based on title
    Resolves: rhbz#1654936


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-61
changelog:
  - Drop buggy downstream patch "efinet: retransmit if our device is busy"
    Resolves: rhbz#1649048
  - Make the menu entry users option argument to be optional
    Related: rhbz#1652434
  - 10_linux_bls: add missing menu entries options
    Resolves: rhbz#1652434


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-60
changelog:
  - Remove quotes when reading ID value from /etc/os-release
    Related: rhbz#1650706
  - blscfg: expand grub_users before passing to grub_normal_add_menu_entry()
    Resolves: rhbz#1650706


author: Peter Jones <pjones@redhat.com> - 2.02-56
changelog:
  - Rebuild for signing
    Resolves: rhbz#1625565
  - blscfg: Make 10_linux_bls sort the same way as well
    Related: rhbz#1638103


author: Peter Jones <pjones@redhat.com> - 2.02-54
changelog:
  - kernel-install: Remove existing initramfs if it's older than the kernel
    Resolves: rhbz#1638405
  - Update the saved entry correctly after a kernel install
    Resolves: rhbz#1638117


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-51
changelog:
  - add 10_linux_bls grub.d snippet to generate menu entries from BLS files
    Resolves: rhbz#1636013
  - Fix syntax issues in 01_fallback_counting.in
    Resolves: rhbz#1615954


author: pjones <pjones@redhat.com> - 1:2.02-50
changelog:
  - Disable TPM (again) on BIOS; it really does not work reliably.
    Resolves: rhbz#1579835
  - Make blscfg module loadable on other grub2 builds
    Resolves: rhbz#1633646
  - Include blscfg module on ppc builds
    Related: rhbz#1633646
  - Fix rpmdiff complaints about execstack
    Related: rhbz#1633646


author: Peter Jones <pjones@redhat.com> - 2.02-48
changelog:
  - Go back to forcing all allocations on x86_64 to be 32-bit, as many UEFI
    implementations seem to have drivers with DMA issues for addresses
    above 4GB.
    Resolves: rhbz#1628346


author: Peter Jones <pjones@redhat.com> - 2.02-47
changelog:
  - BLS fixes from the F29 tree
    - Use /boot/loader/entries as BLS dir also on EFI systems
    - Make 20-grub.install to exit if there is no machine ID set
    - More fixes for BLS
    Resolves: rhbz#1620954


author: Peter Jones <pjones@redhat.com> - 2.02-42
changelog:
  - Fix some minor BLS issues
  - Rework the FDT module linking to make aarch64 build and boot right
    Resolves: rhbz#1601835


author: Hans de Goede <hdegoede@redhat.com>
changelog:
  - Make the user session automatically set the boot_success grubenv flag
  - Make offline-updates increment the boot_indeterminate grubenv variable


author: Peter Jones <pjones@redhat.com> - 2.02-37
changelog:
  - Fixups to work with gcc 8
  - Experimental https boot support on UEFI
  - XFS fixes for sparse inode support
    Resolves: rhbz#1575797


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-36
changelog:
  - Use version field to sort BLS entries if id field isn't defined
  - Add version field to BLS fragments generated by 20-grub.install


author: Peter Jones <pjones@redhat.com> - 2.02-34
changelog:
  - Put the os-prober dep back in - we need to change test plans and criteria
    before it can go.
    Resolves: rhbz#1569411


author: Peter Jones <pjones@redhat.com> - 2.02-33
changelog:
  - Work around some issues with older automake found in CentOS.
  - Make multiple initramfs images work in BLS.


author: Peter Jones <pjones@redhat.com> - 2.02-26
changelog:
  - Try to fix things for new compiler madness.
    I really don't know why gcc decided __attribute__((packed)) on a "typedef
    struct" should imply __attribute__((align (1))) and that it should have a
    warning that it does so.  The obvious behavior would be to keep the alignment
    of the first element unless it's used in another object or type that /also/
    hask the packed attribute.  Why should it change the default alignment at
    all?
  - Merge in the BLS patches Javier and I wrote.
  - Attempt to fix pmtimer initialization failures to not be super duper slow.


author: Peter Jones <pjones@redhat.com> - 2.02-24
changelog:
  - Fix a merge error from 2.02-21 that affected kernel loading on Aarch64.
    Related: rhbz#1519311
    Related: rhbz#1506704
    Related: rhbz#1502312


author: Peter Jones <pjones@redhat.com> - 2.02-23
changelog:
  - Only nerf annobin, not -fstack-crash-protection.
  - Fix a conflict on /boot/efi directory permissions between -cdboot and the
    normal bootloader.


author: Peter Jones <pjones@redhat.com> - 2.02-21
changelog:
  - Fix grub2-efi-modules provides/obsoletes generation
    Resolves: rhbz#1506704
  - *Also* build grub-efi-ia32{,-*,!-modules} packages for i686 builds
    Resolves: rhbz#1502312
  - Make everything under /boot/efi be mode 0700, since that's what FAT will
    show anyway.


author: Peter Jones <pjones@redhat.com> - 2.02-20
changelog:
  - Update to newer upstream for F28
  - Pull in patches for Apollo Lake hardware
    Resolves: rhbz#1519311


author: Peter Jones <pjones@redhat.com> - 2.02-14
changelog:
  - Revert the /usr/lib/.build-id/ change:
    https://fedoraproject.org/wiki/Changes/ParallelInstallableDebuginfo
    says (without any particularly convincing reasoning):
      The main build-id file should not be in the debuginfo file, but in the
      main package (this was always a problem since the package and debuginfo
      package installed might not match). If we want to make usr/lib/debug/ a
      network resource then we will need to move the symlink to another
      location (maybe /usr/lib/.build-id).
    So do it that way.  Of course it doesn't matter, because exclude gets
    ignored due to implementation details.


author: Peter Jones <pjones@redhat.com> - 2.02-13
changelog:
  - Add some unconditional Provides:
    grub2-efi on grub2-efi-${arch}
    grub2-efi-cdboot on grub2-efi-${arch}-cdboot
    grub2 on all grub2-${arch} pacakges
  - Something is somehow adding /usr/lib/.build-id/... to all the -tools
    subpackages, so exclude all that.


author: Peter Jones <pjones@redhat.com> - 2.02-12
changelog:
  - Fix arm kernel command line allocation
    Resolves: rhbz#1484609
  - Get rid of the temporary extra efi packages hack.


author: Peter Jones <pjones@redhat.com> - 2.02-11
changelog:
  - Put grub2-mkimage in -tools, not -tools-extra.
  - Fix i686 building
  - Fix ppc HFS+ usage due to /boot/efi's presence.


author: Peter Jones <pjones@redhat.com> - 2.02-0.34
changelog:
  - Fix power6 makefile bits for newer autoconf defaults.
  - efi/chainloader: fix wrong sanity check in relocate_coff() (Laszlo Ersek)
    Resolves: rhbz#1347291


author: Peter Jones <pjones@redhat.com> - 2.02-0.25
changelog:
  - Fix security issue when reading username and password
    Related: CVE-2015-8370
  - Do a better job of handling GRUB2_PASSWORD
    Related: rhbz#1284370


author: Peter Jones <pjones@redhat.com> - 2.02-0.21
changelog:
  - Back out one of the debuginfo generation patches; it doesn't work right on
    aarch64 yet.
    Resolves: rhbz#1250197


author: Peter Jones <pjones@redhat.com> - 2.02-0.17
changelog:
  - Don't build hardened (fixes FTBFS) (pbrobinson)
  - Reconcile with the current upstream
  - Fixes for gcc 5


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 2.02-0.14
changelog:
  - Move grub2.info/grub2-dev.info install-info scriptlets into *-tools package.
  - Use sub-shell in %__debug_install_post (RHBZ#1168732).
  - Cleanup grub2-starfield-theme packaging.


author: Peter Jones <pjones@redhat.com> - 2.02-0.12
changelog:
  - Make backtrace and usb conditional on !arm
  - Make sure gcdaa64.efi is packaged.
    Resolves: rhbz#1163481


author: Peter Jones <pjones@redhat.com> - 2.02-0.10
changelog:
  - Try to emit linux16/initrd16 and linuxefi/initrdefi when appropriate
    in 30_os-prober.
    Resolves: rhbz#1108296
  - If $fw_path doesn't work to find the config file, try $prefix as well
    Resolves: rhbz#1148652


author: Peter Jones <pjones@redhat.com> - 2.02-0.9
changelog:
  - Clean up the build a bit to make it faster
  - Make grubenv work right on UEFI machines
    Related: rhbz#1119943
  - Sort debug and rescue kernels later than normal ones
    Related: rhbz#1065360
  - Allow "fallback" to include entries by title as well as number.
    Related: rhbz#1026084
  - Fix a segfault on aarch64.
  - Load arm with SB enabled if available.
  - Add some serial port options to GRUB_MODULES.


author: Peter Jones <pjones@redhat.com> - 2.00-19
changelog:
  - Rebase to upstream snapshot.
  - Fix PPC build error (#967862)
  - Fix crash on net_bootp command (#960624)
  - Reset colors on ppc when appropriate (#908519)
  - Left align "Loading..." messages (#908492)
  - Fix probing of SAS disks on PPC (#953954)
  - Add support for UEFI OSes returned by os-prober
  - Disable "video" mode on PPC for now (#973205)
  - Make grub fit better into the boot sequence, visually (#966719)


author: Matthias Clasen <mclasen@redhat.com> - 2.00-18
changelog:
  - Move the starfield theme to a subpackage (#962004)
  - Don't allow SSE or MMX on UEFI builds (#949761)


author: Peter Jones <pjones@redhat.com> - 2.00-17
changelog:
  - Fix booting from drives with 4k sectors on UEFI.
  - Move bash completion to new location (#922997)
  - Include lvm support for /boot (#906203)


author: Peter Jones <pjones@redhat.com> - 2.00-16
changelog:
  - Allow the user to disable submenu generation
  - (partially) support BLS-style configuration stanzas.


author: Peter Jones <pjones@redhat.com> - 2.00-13
changelog:
  - Add vlan tag support (pfsmorigo, #871563)
  - Follow symlinks during PReP installation in grub2-install (pfsmorigo, #874234)
  - Improve search paths for config files on network boot (pfsmorigo, #873406)


author: Peter Jones <pjones@redhat.com> - 2.00-10
changelog:
  - Various PPC fixes.
  - Fix crash fetching from http (gustavold, #860834)
  - Issue separate dns queries for ipv4 and ipv6 (gustavold, #860829)
  - Support IBM CAS reboot (pfsmorigo, #859223)
  - Include all modules in the core image on ppc (pfsmorigo, #866559)


author: Peter Jones <pjones@redhat.com> - 2.00-8
changelog:
  - Don't error on insmod on UEFI/SB, but also don't do any insmodding.
  - Increase device path size for ieee1275
    Resolves: rhbz#857936
  - Make network booting work on ieee1275 machines.
    Resolves: rhbz#857936


author: Peter Jones <pjones@redhat.com> - 2.00-5
changelog:
  - Work around AHCI firmware bug in efidisk driver.
  - Move to newer pesign macros
  - Don't allow insmod if we're in secure-boot mode.


author: Peter Jones <pjones@redhat.com>
changelog:
  - Split module lists for UEFI boot vs UEFI cd images.
  - Add raid modules for UEFI image (related: #750794)
  - Include a prelink whitelist for binaries that need execstack (#839813)
  - Include fix efi memory map fix from upstream (#839363)


author: Peter Jones <pjones@redhat.com> - 2.00-4
changelog:
  - Correct grub-mkimage invocation to use efidir RPM macro (jwb)
  - Sign with test keys on UEFI systems.
  - PPC - Handle device paths with commas correctly.
    Related: rhbz#828740


author: Peter Jones <pjones@redhat.com> - 2.00-3
changelog:
  - Add some more code to support Secure Boot, and temporarily disable
    some other bits that don't work well enough yet.
    Resolves: rhbz#836695


author: Matthew Garrett <mjg@redhat.com> - 2.00-2
changelog:
  - Set a prefix for the image - needed for installer work
  - Provide the font in the EFI directory for the same reason


author: Peter Jones <pjones@redhat.com> - 2.0-0.28.beta5
changelog:
  - Name grub.efi something that's arch-appropriate (kiilerix, pjones)
  - use EFI/$SOMETHING_DISTRO_BASED/ not always EFI/redhat/grub2-efi/ .
  - move common stuff to -tools (kiilerix)
  - spec file cleanups (kiilerix)


author: Peter Jones <pjones@redhat.com> - 2.0-0.27.beta5
changelog:
  - Fix license of theme (mizmo)
    Resolves: rhbz#820713
  - Fix some PPC bootloader detection IBM problem
    Resolves: rhbz#820722


author: Peter Jones <pjones@redhat.com> - 2.0-0.26.beta5
changelog:
  - Update to beta5.
  - Update how efi building works (kiilerix)
  - Fix theme support to bring in fonts correctly (kiilerix, pjones)


author: Peter Jones <pjones@redhat.com> - 2.0-0.20
changelog:
  - Fix ppc64 vs ppc exclude according to what dwa tells me they need
  - Fix version number to better match policy.


author: Peter Jones <pjones@redhat.com> - 1.99-17
changelog:
  - Update for newer autotools and gcc 4.7.0
    Related: rhbz#782144
  - Add /etc/sysconfig/grub link to /etc/default/grub
    Resolves: rhbz#800152
  - ExcludeArch s390*, which is not supported by this package.
    Resolves: rhbz#758333


author: Peter Jones <pjones@redhat.com> - 1.99-12
changelog:
  - Lots of .spec fixes from Mads Kiilerich:
    Remove comment about update-grub - it isn't run in any scriptlets
    patch info pages so they can be installed and removed correctly when renamed
    fix references to grub/grub2 renames in info pages (#743964)
    update README.Fedora (#734090)
    fix comments for the hack for upgrading from grub2 < 1.99-4
    fix sed syntax error preventing use of $RPM_OPT_FLAGS (#704820)
    make /etc/grub2*.cfg %config(noreplace)
    make grub.cfg %ghost - an empty file is of no use anyway
    create /etc/default/grub more like anaconda would create it (#678453)
    don't create rescue entries by default - grubby will not maintain them anyway
    set GRUB_SAVEDEFAULT=true so saved defaults works (rbhz#732058)
    grub2-efi should have its own bash completion
    don't set gfxpayload in efi mode - backport upstream r3402
  - Handle dmraid better. Resolves: rhbz#742226


author: Adam Williamson <awilliam@redhat.com> - 1.99-10
changelog:
  - /etc/default/grub is explicitly intended for user customization, so
    mark it as config(noreplace)


author: Peter Jones <pjones@redhat.com> - 1.99-6
changelog:
  - Use mv not cp to try to avoid moving disk blocks around for -5 fix
    Related: rhbz#735259
  - handle initramfs on xen better (patch from Marko Ristola)
    Resolves: rhbz#728775


author: Peter Jones <pjones@redhat.com> - 1.99-4
changelog:
  - Don't do sysadminny things in %preun or %post ever. (#735259)
  - Actually include the changelog in this build (sorry about -3)


author: Peter Jones <pjones@redhat.com> - 1.99-2
changelog:
  - Require os-prober (#678456) (patch from Elad Alfassa)
  - Require which (#734959) (patch from Elad Alfassa)


author: Peter Jones <pjones@redhat.com> - 1.99-1
changelog:
  - Update to grub-1.99 final.
  - Fix crt1.o require on x86-64 (fix from Mads Kiilerich)
  - Various CFLAGS fixes (from Mads Kiilerich)
    - -fexceptions and -m64
  - Temporarily ignore translations (from Mads Kiilerich)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.3.43-2
changelog:
  - Inverted the condition for UsrMove safeguard check, so we comply with:
    https://fedoraproject.org/wiki/Packaging:Conflicts


author: Siteshwar Vashisht <svashisht@redhat.com> - 4.3.42-5
changelog:
  - Do not set terminate_immediately and interrupt_immediately while expanding tilda
    Resolves: #1336800


author: Ondrej Oprala - 4.3.39-5
changelog:
  - #1182278 - bash crashes on `select' if REPLY is readonly
  - #1241533,1224855 - bash memleak when LC_ALL set


author: Roman Rakus <rrakus@redhat.com> - 4.2.45-2
changelog:
  - Fixed a bug that caused trap handlers to be executed recursively,
    corrupting internal data structures.


author: Roman Rakus <rrakus@redhat.com> - 4.2.37-7
changelog:
  - Update info about trap in man page
    Resolves: #799958
  - instead of setting the signal handler to SIG_IGN while installing
    the new trap handler, block the signal and unblock it after the new handler
    is installed
    Resolves: #695656


author: Roman Rakus <rrakus@redhat.com> - 4.1.9-3
changelog:
  - don't segfault when trying to bind int variable to array
    with bad array subsrcipt
    Resolves: #618289


author: Ville Skyttä <ville.skytta@iki.fi> - 4.1.9-2
changelog:
  - Move doc dir ownership to main package.
  - Preserve doc timestamps.
  - Add --without tests option for building without running the test suite.


author: Jesse Keating <jkeating@redhat.com> - 3.2-29
changelog:
  - Add the Requires(post) back for ncurses-libs, so that rpm knows
    where to break the loop.  The post actually does require the curses
    libs for the sh calls.  Could consider doing this in LUA and not have
    any external deps.


author: Roman Rakus <rrakus@redhat.com> - 3.2-28
changelog:
  - Removing Requires for mktemp and ncurses, which cause
    dependencing loop
  - Enabling #define SSH_SOURCE_BASHRC, because ssh changed.
    Resolves: #458839
  - Catch signals right after calling execve()
    Resolves: #455548


author: Tomas Janousek <tjanouse@redhat.com> - 3.2-20
changelog:
  - Added bash32-026 upstream official patch
  - Added bash32-027 upstream official patch (#249987)
  - Added bash32-028 upstream official patch
  - Added bash32-029 upstream official patch (#286861)
  - Added bash32-030 upstream official patch
  - Added bash32-031 upstream official patch (#358231)
  - Added bash32-032 upstream official patch
  - Added bash32-033 upstream official patch
  - Fix insert command repeating in vi mode (#190350)


author: Tomas Janousek <tjanouse@redhat.com> - 3.2-19
changelog:
  - fix cursor position when prompt has one invisible character (#358231)
  - dropped examples/loadables/ from docs, since it wasn't possible to build them
    anyway (#174380)
  - fix #286861: Wrong input confuses bash's arithmetic unit permanently
  - fix #344411: $RANDOM stays the same when job executed in the background


author: Pete Graner <pgraner@redhat.com> - 3.2-18
changelog:
  - Added bash32-021 upstream official patch
  - Added bash32-025 upstream official patch
  - Added bash32-024 upstream official patch
  - Added bash32-023 upstream official patch
  - Added bash32-022 upstream official patch


author: Pete Graner <pgraner@redhat.com> - 3.2-17
changelog:
  - Added bash32-018 upstream official patch
  - Added bash32-020 upstream official patch
  - Added bash32-019 upstream official patch


author: Pete Graner <pgraner@redhat.com> - 3.2-15
changelog:
  - Update to the Improve bash $RANDOM pseudo RNG (bug #234906) 
    now works with subshells and make $RANDOM on demand thus reducing the 
    amount of AVCs thrown.


author: Tim Waugh <twaugh@redhat.com> 3.2-7
changelog:
  - Reinstated this change:
    - Post requires ncurses (bug #224567).
  - Reverted this change:
    - Added triggers for install-info (bug #225609).


author: Tim Waugh <twaugh@redhat.com> 3.2-5
changelog:
  - Added triggers for install-info (bug #225609).
  - Use full path to utilities in scriptlets (bug #225609).
  - Fix missing sh-bangs in example scripts (bug #225609).
  - Post requires ncurses (bug #224567).
  - Removed Prefix tag (bug #225609).
  - Fixed BuildRoot tag (bug #225609).
  - Removed trailing full-stop from summary (bug #225609).
  - Spec file is now UTF-8 (bug #225609).
  - Removed obsolete Obsoletes (bug #225609).
  - Moved 'make check' to new 'check' section (bug #225609).
  - Removed uses of RPM_SOURCE_DIR (bug #225609).
  - Fixed macros in changelog (bug #225609).
  - Changed tabs to spaces (bug #225609).


author: Tim Waugh <twaugh@redhat.com> 3.2-1
changelog:
  - Build requires autoconf and gettext.
  - 3.2.  No longer need aq, login, ulimit, sighandler or read-memleak
    patches.


author: Tim Waugh <twaugh@redhat.com> 3.1-2
changelog:
  - No longer need loadables, mbinc or shellfunc patches.
  - Use literal single-quote in bash man page where appropriate (bug #177051).


author: Tim Waugh <twaugh@redhat.com> 3.1-1
changelog:
  - 3.1.
  - No longer need ia64, utf8, multibyteifs, jobs, sigpipe,
    read-e-segfault, manpage, crash, pwd, afs, subshell patches.
  - Remove wrap patch for now.
  - Use upstream patch to fix arrays.


author: Tim Waugh <twaugh@redhat.com> 3.0-40
changelog:
  - Fix read memleak when reading from non-blocking fd (bug #173283).
  - Missed another loop for improved sighandler patch (bug #169231).


author: Tim Waugh <twaugh@redhat.com> 3.0-36
changelog:
  - Added Url: tag (bug #172770).
  - Do not explicitly gzip info pages (bug #172770).
  - Fix permissions on bashbug (bug #172770).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fixed AFS support for output redirection, so that the correct errors
    are reported for other filesystems (bug #155373).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Reverted this change:
    - Added code to /etc/skel/.bash_logout to support the gpm selection buffer
      invalidation on virtual terminals (bug #115493).


author: Tim Waugh <twaugh@redhat.com> 3.0-21
changelog:
  - Added code to /etc/skel/.bash_logout to support the gpm selection buffer
    invalidation on virtual terminals (bug #115493).


author: Tim Waugh <twaugh@redhat.com> 3.0-13
changelog:
  - Check for EINVAL from waitpid() and avoid WCONTINUED in that case.
  - Fixed jobs4 test.
  - Applied experimental upstream patch for trap compatibility.
  - Re-make documentation to reflect source changes.


author: Tim Waugh <twaugh@redhat.com> 3.0-5
changelog:
  - Make trap usage string show POSIX usage (bug #128938).
  - Updated ${x[@]:1} expansion fix from bug-bash list.
  - Updated patch to fix unset array crash (from bug-bash list).


author: Tim Waugh <twaugh@redhat.com> 3.0-2
changelog:
  - Fixed brace expansion (bug #129128).
  - Build with AFS support again, since bug #86514 seems fixed upstream
    (bug #129094).


author: Tim Waugh <twaugh@redhat.com> 2.05b-23
changelog:
  - Fix a warning message (bug #79629).
  - Don't remove generated source during build, for debuginfo package.
  - Don't build with AFS support (bug #86514).


author: Tim Waugh <twaugh@redhat.com> 2.05b-6
changelog:
  - Add the (4) patches from ftp.gnu.org (bug #75888, bug #72512).
  - Ship '.' man page, which doesn't get picked up by glob.
  - Don't install files not shipped when building.
  - Locale shell variables fix (bug #74701).


author: Tim Waugh <twaugh@redhat.com> 2.05b-4
changelog:
  - Fix history substitution modifiers in UTF-8 (bug #70294, bug #71186).
  - Fix ADVANCE_CHAR at end of string (bug #70819).
  - docs: CWRU/POSIX.NOTES no longer exists, but ship POSIX.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05a-9
changelog:
  - Add patch from Ulrich Drepper to get better error messages when trying
    to launch an application with a bad ELF interpreter (e.g. libc5 ld.so)
    (#60870)


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-5
changelog:
  - Don't set BASH_ENV in .bash_profile, it causes .bashrc to be sourced
    twice in interactive non-login shells.
  - s/Copyright/License/


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-2
changelog:
  - bash comes with its own copy of readline... Add the patches we're
    applying in the readline package.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-1
changelog:
  - Update to 2.05
  - Change PROMPT_COMMAND in bashrc for xterms
    to something less space consuming (#24159)
  - Provide plugs for alternate prompt commands (#30634), but don't
    default to them


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 2.04 final
  - remove the echo, pwd, test and kill man pages from the package,
    we're getting them from sh-utils


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 2.04beta5
  - adapt patches
  - Fix up bashrc
  - Don't put in bashrc1, this should be done by the bash1 package
  - use install -c instead of plain install to work on *BSD
  - remove the collected patches - they're now in the base version.
  - make compressed man pages optional


author: Florian La Roche <Florian.LaRoche@redhat.com>
changelog:
  - add some collected patches for bash2
  - change it over to be the main bash package
  - install man-pages root:root
  - obsolete bash2, bash2-doc


author: Ian Macdonald <ianmacd@xs4all.nl>
changelog:
  - upgraded to version 2.02
  - Alpha, MIPS & Sparc patches removed due to lack of test platforms
  - glibc & signal patches no longer required
  - added documentation subpackage (doc)


author: Donnie Barnes <djb@redhat.com>
changelog:
  - added signal handling patch from Dean Gaudet <dgaudet@arctic.org> that
    is based on a change made in bash 2.0.  Should fix some early exit
    problems with suspends and fg.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 2.02-5
changelog:
  - Fix configure failure with -Werror-implicit-function-declaration in CFLAGS
  - Add a minilzo subpackage which contains a shared version of minilzo, to be
    used by all applications which ship with their own copy of it (bz 439979)


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.08-7
changelog:
  - Taking over as maintainer since Anvil has other priorities
  - Add a patch to fix asm detection on i386 (bug 145882, 145893). Thanks to
    Carlo Marcelo Arenas Belon <carenas@sajinet.com.pe> for the initial patch.
  - Removed unused build dependency on nasm
  - Remove static lib
  - Cleanup %doc a bit


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1
changelog:
  - New upstream release 1.10
  - Obsolete upstreamed patches
  - Amend the multilib patch, there's no need to patch configure since we
    are running autoreconf anyways
  - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5
changelog:
  - Apply a patch by Stephen Gallagher to patch autoconf, not configure to
    allow optflags to be passed in by build environment
  - Run autoreconf before configure
  - git rm obsolete patches
  - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR


author: Jakub Hrozek <jhrozek@redhat.com> - 1.7.5-1
changelog:
  - New upstream release 1.7.5
  - Obsoletes patch #2
  - Rebase patch #1 (optflags) to match the 1.7.5 code
  - Fixed Source0 URL to point at the upstream tarball


author: Jakub Hrozek <jhrozek@redhat.com> - 1.7.3-1
changelog:
  - Upgrade to new upstream release 1.7.3 (obsoletes search/domain patch)
  - Fix conflict of -devel packages on multilib architectures (#602880)


author: Ville Skyttä <ville.skytta at iki.fi> - 1.6.0-3
changelog:
  - Patch to make upstream build system honor our CFLAGS and friends.
  - Don't bother building throwaway static libs.
  - Disable autotools dependency tracking for cleaner build logs and possible
    slight build speedup.
  - Convert docs to UTF-8.
  - Update URLs.


author: Gris Ge <fge@redhat.com> - 1.5.0-2
changelog:
  - Fix multilib confliction of nfs-plugin by move binrary file to
    another subpackage libstoragemgmt-nfs-plugin-clibs


author: Gris Ge <fge@redhat.com> - 1.5.0-0
changelog:
  - New upstream release 1.5.0:
      * New sub-package libstoragemgmt-nfs-plugin, libstoragemgmt-arcconf-plugin,
        and libstoragemgmt-local-plugin.
      * C API manpages for libstoragemgmt-devel package.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.4.0-4
changelog:
  - Python 2 binary packages renamed to python2-libstoragemgmt and python2-libstoragemgmt-clibs
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
  - %python_provide added for all four python subpackages


author: Gris Ge <fge@redhat.com> 1.4.0-1
changelog:
  - Add Python3 support.
  - New sub rpm package python3-libstoragemgmt.
  - Add support of lmiwbem(this rpm use pywbem instead).
  - Allow plugin test to be run concurrently.
  - Bug fixes:
      * Fix megaraid plugin for dell PERC.
      * Fix local disk rotation speed query on NVMe disk.
      * Fix lsmcli incorrect try-expect on local disk query.
      * Fix all the gcc compile warnings.
      * Fix the obsolete usage of AC_OUTPUT in configure.ac.
  - Library adds:
      * Query serial of local disk:
          lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
      * Query LED status of local disk:
          lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
      * Query link speed of local disk:
          lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()


author: Gris Ge <fge@redhat.com> 1.2.3-1
changelog:
  - New upstream release 1.2.3:
      * Bug fixes:
          * lsmcli bash completion: Fix syntax error.
          * lsmcli bash completion: Fix volume-delete.
          * lsmcli bash completion: Add missing completions.
          * Fix: selinux dac_override
          * Manpage: Update hpsa and megaraid plugin manpages.
          * HP Smart Array Plugin: Fix pool querying on P410i.
          * MegaRAID Plugin: Fix bug when no volume configured.


author: Gris Ge <fge@redhat.com> - 1.2.1-1
changelog:
  - New upstream release 1.2.1.
  - Changed upstream URL and source URL to github.
  - New sub-pacakges:
      * libstoragemgmt-megaraid-plugin
          New plugin in 1.2.0 release.
      * libstoragemgmt-hpsa-plugin
          New plugin in 1.2.0 release.
  - Add bash-completion script for lsmcli.
  - New rpmbuild switch: 
      * '--without test'
          Use to skip 'make check' test to save debug time.
      * '--without megaraid'
          Don't compile megaraid plugin.
      * '--without hpsa'
          Don't compile hpsa plugin.
  - Remove PyYAML BuildRequires.
  - Add NEWS(changelog) to document folder.
  - Replace the hardcoded udev path with <percent>{_udevrulesdir}.
  - Fix rpmlint error 'dir-or-file-in-var-run'.
  - Mark /run/lsm and /run/lsm/ipc as <percent>ghost folder.
  - Fix rpmlint warnning 'W: non-standard-uid /run/lsm libstoragemgmt'.
  - Add 'Requires(post)' and 'Requires(postun)' to plugins in order
    to make sure plugin is installed after libstoragemgmt and removed before
    libstoragemgmt.
  - Fix the incorrect use of <percent>bcond_with and <percent>bcond_without.
  - Removed autogen.sh which is not required for release version any more.


author: Tony Asleson <tasleson@redhat.com> - 1.0.0-3
changelog:
  - Specify udev files to /usr/lib dir instead of /lib
  - Move command line python files to python package


author: Tony Asleson <tasleson@redhat.com> 0.0.21-1
changelog:
  - New upstream release
  - Put plug-ins in separate sub packages
  - Don't include IBM plug-in on RHEL > 6, missing paramiko


author: Tony Asleson <tasleson@redhat.com> - 0.0.20-1
changelog:
  - New upstream release
  - Separate package for python libraries
  - Make timestamps match on version.py in library
  - Add python-paramiko requirement for IBM plug-in


author: Tony Asleson <tasleson@redhat.com> 0.0.9-1
changelog:
  - Initial checkin of lio plug-in
  - System filtering via URI (smispy)
  - Error code mapping (ontap)
  - Fixed build so same build tarball is used for all binaries


author: Tony Asleson <tasleson@redhat.com> 0.0.8-1
changelog:
  - Make building of SMI-S CPP plugin optional
  - Add pkg-config file
  - SMIS: Fix exception while retrieving Volumes
  - SMIS: Fix exception while retrieving Volumes
  - lsm: Add package imports
  - Make Smis class available in lsm python package
  - Add option to disable building C unit test
  - Make simulator classes available in lsm python package
  - Make ontap class available in lsm python package
  - Changes to support building on Fedora 17 (v2)
  - Spec. file updates from feedback from T. Callaway (spot)
  - F17 linker symbol visibility correction
  - Remove unneeded build dependencies and cleaned up some warnings
  - C Updates, client C library feature parity with python


author: Tony Asleson <tasleson@redhat.com> 0.0.7-1
changelog:
  - Bug fix for smi-s constants
  - Display formatting improvements
  - Added header option for lsmcli
  - Improved version handling for builds
  - Made terminology consistent
  - Ability to list visibility for access groups and volumes
  - Simulator plug-in fully supports all block operations
  - Added support for multiple systems with a single plug-in instance


author: Tony Asleson <tasleson@redhat.com> 0.0.6-1
changelog:
  - Documentation improvements (man & source code)
  - Support for access groups
  - Unified spec files Fedora/RHEL
  - Package version auto generate
  - Rpm target added to make
  - Bug fix for missing optional property on volume retrieval (smispy plug-in)


author: Tony Asleson <tasleson@redhat.com> 0.0.5-1
changelog:
  - Spec file clean-up improvements
  - Async. operation added to lsmcli and ability to check on job status
  - Sub volume replication support
  - Ability to check for child dependencies on VOLUMES, FS and files
  - SMI-S Bug fixes and improvements


author: Tony Asleson <tasleson@redhat.com> 0.0.3-1
changelog:
  - Changes to installer, daemon uid, gid, /var/run/lsm/*
  - NFS improvements and bug fixes
  - Python library clean up (rpmlint errors)


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-10
changelog:
  - Add 0062-libmultipath-select_action-don-t-drop-map-if-alias-c.patch
    * Fall back to WWID names instead of removing existing device
  - Add 0063-libmultipath-check-if-user_friendly_name-is-in-use.patch
    * make sure to choose a user_friendly_name that isn't in use
    * Fixes bz #1923777
  - Add alias_clash CI test
  - Resolves: bz #1923777


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-9
changelog:
  - Add 0060-kpartx-free-loop-device-after-listing-partitions.patch
    * Fixes bz #1925490
  - Add 0061-RH-fix-find_multipaths-in-mpathconf.patch
    * Fixes bz #1921651
  - Resolves: bz #1921651, #1925490


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-7
changelog:
  - Add 0052-libmultipath-check-for-null-wwid-before-strcmp.patch
    * Missing part of fix for bz #1897815
  - Add 0053-libmultipath-make-find_err_path_by_dev-static.patch
  - Add 0054-multipathd-avoid-io_err_stat-crash-during-shutdown.patch
  - Add 0055-multipathd-avoid-io_err_stat-ABBA-deadlock.patch
  - Add 0056-multipathd-use-get_monotonic_time-in-io_err_stat-cod.patch
  - Add 0057-multipathd-combine-free_io_err_stat_path-and-destroy.patch
  - Add 0058-multipathd-cleanup-logging-for-marginal-paths.patch
    * The above 6 patches fix bz #1920795
  - Add 0059-libmpathpersist-fix-thread-safety-of-default-functio.patch
    * Fixes bz #1913549
  - Resolves: bz #1897815, #1913549, #1920795


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-6
changelog:
  - Add 0050-multipathd-Fix-multipathd-stopping-on-shutdown.patch
    * Fixes bz #1892496
  - Add 0051-multipath.conf.5-Improve-checker_timeout-description.patch
    * Fixes bz #1906073
  - Resolves: bz #1892496, #1906073


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-6
changelog:
  - Add 0039-libmultipath-factor-out-code-to-get-vpd-page-data.patch
  - Add 0040-libmultipath-limit-reading-0xc9-vpd-page.patch
    * Only check for rdac support on configured devices, or devices where
      vpd page 0x00 indicates support for vpd page 0xc9
    * Fixes bz #1877415
  - Add 0041-libmultipath-add-device-to-hwtable.c.patch
    * Add support for Fujitsu Eternus AB/HB
    * Fixes bz #1857429
  - Add 0042-libmultipath-move-fast_io_fail-defines-to-structs.h.patch
  - Add 0043-libmultipath-add-eh_deadline-multipath.conf-paramete.patch
    * Fixes bz #1819897
  - Add 0044-libmultipath-don-t-dlclose-tur-checker-DSO.patch
    * Fixes bz #1875384
  - Add 0045-libmultipath-warn-about-missing-braces-at-end-of-mul.patch
    * Fixes bz #1897530
  - Add 0046-libmultipath-ignore-multipaths-sections-without-wwid.patch
    * Fixes bz #1897815
  - Add 0047-tests-fix-missing-priority-blacklist-test.patch
  - Add 0048-mpathpersist-Fix-Register-and-Ignore-with-0x00-SARK.patch
    * Make mpathpersist Register and Ignore command clear the registration
      with a 0x0 SARK, like sg_persist does.
    * Fixes bz #1894103
  - Add 0049-mpathpersist-update-prkeys-file-on-changing-registra.patch
    * Fixes bz #1900522
    * The above 11 patches have all been submitted upstream
  - Resolves: bz #1819897, #1857429, #1875384, #1877415, #1894103, #1897530
  - Resolves: bz #1897815, #1900522


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-5
changelog:
  - Add 0038-multipath-deal-with-failures-flushing-maps.patch
    * Don't print "fail" if multipath needs to failback to removing
      a device itself.
    * Fixes bz #1845875
  - Modify multipath_conf_syntax CI test
    * It started failing because "multpath -F" can now start multipathd
      via the socket, and the test expected multipathd to not be running
  - Resolves: bz #1845875


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-4
changelog:
  - Add 0037-libmultipath-count-pending-paths-as-active-on-loads.patch
    * make udev treat the device as having paths, so it will run kpartx
    * Fixes bz #1846866
  - Resolves: bz #1846866


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-3
changelog:
  - Add 0024-libmultipath-make-dm_get_map-status-return-codes-sym.patch
  - Add 0025-multipathd-fix-check_path-errors-with-removed-map.patch
  - Add 0026-libmultipath-make-dm_flush_maps-only-return-0-on-suc.patch
  - Add 0027-multipathd-add-del-maps-multipathd-command.patch
  - Add 0028-multipath-make-flushing-maps-work-like-other-command.patch
  - Add 0029-multipath-delegate-flushing-maps-to-multipathd.patch
  - Add 0030-multipath-add-option-to-skip-multipathd-delegation.patch
    * The above 7 patches fix bz #1845875. Multipath now attempts to
      delegate device removal to multipathd, and multipathd handles
      external device removal better.
  - Add 0031-libmultipath-fix-sysfs-dev_loss_tmo-parsing.patch
    * Fixes bz #1852843
  - Add 0032-kpartx-read-devices-with-direct-IO.patch
    * Fixes bz #1814858
  - Add 0033-kpartx-handle-alternate-bsd-disklabel-location.patch
  - Add 0034-libmultipath-fix-checker-detection-for-nvme-devices.patch
    * fixes bz #1845915
  - Add 0035-Makefile.inc-trim-extra-information-from-systemd-ver.patch
  - Add 0036-kpartx-fix-Wsign-compare-error.patch
  - Resolves: bz #1814858, #1845875, #1845915, #1852843


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-2
changelog:
  - Add 0021-libmultipath-remove-_blacklist_exceptions-functions.patch
  - Add 0022-libmultipath-fix-parser-issue-with-comments-in-strin.patch
  - Add 0023-libmultipath-invert-regexes-that-start-with-exclamat.patch
    * This commit also changes the default devnode blacklist to
      blacklist all devices except scsi, dasd, and nvme.
  - Resolves: bz #1828180


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-1
changelog:
  - Update Source to upstream version 0.8.4
    * This version includes the fixes for bz #1768894 & #1821214
    * Previous patches 0001-0009 are included in this version
  - Rename files
    * Previous patches 0010-0019 are now 0011-0020
  - Add 0001-libmultipath-assign-variable-to-make-gcc-happy.patch
  - Add 0002-libmutipath-don-t-close-fd-on-dm_lib_release.patch
  - Add 0003-libmultipath-allow-force-reload-with-no-active-paths.patch
    * make multipath and multipathd reload maps with no active paths
      (bz #1814858)
  - Add 0004-libmpathpersist-depend-on-libmultipath.patch
  - Add 0005-multipath-tools-Makefile-more-dependency-fixes-for-p.patch
  - Add 0006-multipath-tools-Makefile.inc-set-Wno-error-clobbered.patch
  - Add 0007-libmultipath-discovery.c-use-z-qualifier-for-size_t.patch
  - Add 0008-libmultipath-eliminate-more-signed-unsigned-comparis.patch
  - Add 0009-libmultipath-set_uint-fix-parsing-for-32bit.patch
  - Add 0010-multipath-tools-Makefile-add-install-dependency.patch
    * The above 10 patches have been submitted upstream
  - Resolves: bz #1768894, #1814858, #1821214


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.3-3
changelog:
  - Rename files
    * Previous patches 0004-0013 are now 0010-0019
    * 0014-RH-add-mpathconf.patch now makes mpathconf default to not
      printing foreign devices (bz #1760709)
  - Add 0004-libmultipath-remove-unused-path-prio_args.patch
  - Add 0005-libmultipath-constify-get_unaligned_be.patch
  - Add 0006-libmultipath-add-missing-hwe-mpe-variable-merges.patch
  - Add 0007-libmultipath-fix-sgio_get_vpd-looping.patch
  - Add 0008-libmultipath-add-vend_id-to-get_vpd_sgio.patch
  - Add 0009-libmultipath-add-code-to-get-vendor-specific-vpd-dat.patch
    * Add the '%g' maps and paths format wildcard, and the vpd_vendor
      multipath.conf devices section parameter. (bz #1527212)
  - Resolves: bz #1527212, #1760709


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.3-1
changelog:
  - Update Source to upstream version 0.8.3
    * This version includes the fixes for bz #1690515, #1703439,
        * Previous patches 0001-0017 & 0031-0036 are included in this version
  - Rename files
    * Previous patches 0018-0026 & 0028 are now 0004-0013
    * 0008-RH-add-mpathconf.patch has been modified to add a
      --property_blacklist option to fix bz #1753729
  - Add 0001-multipathd-warn-when-configuration-has-been-changed.patch
    * Multipath now logs a warning message when the configuration file
      has been changed to fix bz #1750594
  - Add 0002-libmultipath-fix-leak-in-foreign-code.patch
  - Add 0003-Fix-leak-in-mpathpersist.patch
    * The above 3 patches have been submitted upstream
  - Resolves: bz #1690515, #1703439, #1719562, #1747534, #1750594, #1753729


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-4
changelog:
  - Add 0035-BZ-1700911-hwtable-add-Lenovo-DE-series.patch
  - Add 0036-libmultipath-make-vector_foreach_slot_backwards-work.patch
    * Fix for bz #1713459
  - Fixes for bz #1666322 and #1669097 were included in 0.8.0 upstream
    code
  - Resolves: bz #1666322, #1669097, #1700911, #1713459


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-3
changelog:
  - Add 0031-libmultipath-handle-clock_gettime-failures-in-tur-ch.patch
  - Add 0032-kpartx-fail-if-dup-of-dasd-file-descriptor-fails.patch
  - Add 0033-multipathd-fix-REALLOC_REPLY-with-max-length-reply.patch
  - Add 0034-multipathd-handle-NULL-return-from-genhelp_handler.patch
    * The above 4 patches have been submitted upstream
  - Related: bz #1498546


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-2
changelog:
  - Add 0029-BZ-1700451-check-on-multipathd-without-starting-it.patch
  - Add 0030-BZ-1700451-test-socket-connection-in-non-blocking-mo.patch
    * the "multipath -u" call in 62-multipath.rules should no longer hang
      on multipathd startup.
  - Resolves: bz #1700451


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-1
changelog:
  - Update Source to upstream version 0.8.0
    * Previous patches 0001-0006 & 0015-0019 are included in this commit
  - Rename files
    * Previous patches 0007-0014 are now 0018-0025
    * Previous patches 0020-0023 are now 0001, 0006 & 0007
  - Add 0002-libmultipath-handle-existing-paths-in-marginal_path-.patch
  - Add 0003-multipathd-cleanup-marginal-paths-checking-timers.patch
  - Add 0004-libmultipath-fix-marginal-paths-queueing-errors.patch
  - Add 0005-libmultipath-fix-marginal_paths-nr_active-check.patch
  - Add 0008-libmutipath-continue-to-use-old-state-on-PATH_PENDIN.patch
  - Add 0009-multipathd-use-update_path_groups-instead-of-reload_.patch
  - Add 0010-multipath.conf-add-missing-options-to-man-page.patch
  - Add 0011-libmultipath-add-get_uid-fallback-code-for-NVMe-devi.patch
  - Add 0012-libmulitpath-cleanup-uid_fallback-code.patch
  - Add 0013-multipathd-handle-changed-wwids-by-removal-and-addit.patch
    * Multipath will now automatically remove and re-add paths if
      their wwid changes
  - Add 0014-multipathd-remove-wwid_changed-path-attribute.patch
  - Add 0015-multipathd-ignore-disable_changed_wwids.patch
    * Since paths are now getting removed and re-added there is
      no need to disable them.
  - Add 0016-multipathd-Don-t-use-fallback-code-after-getting-wwi.patch
  - Add 0017-libmultipath-silence-dm_is_mpath-error-messages.patch
  - Add 0026-RH-Fix-nvme-compilation-warning.patch
  - Add 0027-Fix-systemd-version-detection.patch
    * The above 16 patches have been submitted upstream
  - Add 0028-RH-attempt-to-get-ANA-info-via-sysfs-first.patch
    * Red Hat has a sysfs method to access the ANA state, which isn't
      upstream, and will not be. This will probably go away in the
      future.
  - Resolves: bz #1498546


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-6
changelog:
  - Fix multipath_conf_syntax CI test
    * need to wait for udev to settle before removing multipath device
  - Resolves: bz #1673167


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-5
changelog:
  - Add 0021-BZ-1673167-Fix-miscounting-active-paths.patch
  - Add 0022-BZ-1673167-ignore-failed-wwid-recheck.patch
  - Resolves: bz #1673167


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-3
changelog:
  - Add 0017-BZ-1648397-fix-mpp-hwe-handling-when-paths-are-freed.patch
    * Fix crash by deleting in use hardware entry list pointer
  - Add 0018-libmultipath-cleanup-pthread_cleanup_pop-call.patch
    * Fix compiler warning
  - Add 0019-libmultipath-fix-false-removes-in-dmevents-polling-c.patch
    * The above 3 patches have been accepted upstream
  - Resolves: bz #1648397


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-2
changelog:
  - Add 0015-libmultipath-free-allocated-value-in-set_int.patch
  - Add 0016-kpartx-fix-new-memory-leak-in-dm_find_part.patch
  - change hardcoded /usr/lib/udev/rules.d to _udevrulesdir
  - Resolves: bz #1606947


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-1
changelog:
  - Update Source to upstream version 0.7.8
    * Previous patches 0001-0011 are included in this version
  - Rename files
    * Previous patches 0012-0019 are now patches 0007-0014
  - Add 0001-multipath-tweak-logging-style.patch
  - Add 0002-multipathd-check-for-NULL-udevice-in-cli_add_path.patch
  - Add 0003-libmultipath-remove-max_fds-code-duplication.patch
  - Add 0004-multipathd-set-return-code-for-multipathd-commands.patch
  - Add 0005-mpathpersist-fix-registration-rollback-issue.patch
  - Add 0006-libmultipath-timeout-on-unresponsive-tur-thread.patch
    * The above 6 patches have been submitted upstream
  - Resolves: bz #1606947, #1631883


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.7-2.gitef6d98b
changelog:
  - Update Source to latest upstream commit
    * Previous patches 0001-0018 are included in this commit
  - Rename files
    * Previous patches 0019-0028 are now patches 0002-0003 & 0012-0019
  - Add 0001-libmultipath-remove-last-of-rbd-code.patch
  - Add 0004-mpathpersist-add-param-alltgpt-option.patch
    * mpathpersist now accepts --param-alltgpt
  - Add 0005-libmutipath-remove-unused-IDE-bus-type.patch
  - Add 0006-multipathd-add-new-protocol-path-wildcard.patch
    * multipathd show paths format now accepts %PATCH for the path protocol/transport
  - Add 0007-libmultipath-add-protocol-blacklist-option.patch
    * You can now use the "protocol" blacklist section parameter to blacklist
      by protocol/transport
  - Add 0008-libmultipath-remove-_filter_-blacklist-functions.patch
  - Add 0009-multipath-tests-change-to-work-with-old-make-version.patch
  - Add 0010-multipath-tests-add-blacklist-tests.patch
  - Add 0011-mpathpersist-add-missing-param-rk-usage-info.patch
  - Refresh 0013-RH-Remove-the-property-blacklist-exception-builtin.patch
  - Modify 0016-RH-add-mpathconf.patch
    * improve usage message and man page
  - Modify device-mapper-multipath.spec
    * updated dependencies


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.7-1
changelog:
  - Update Source to 0.7.7
    * Previous patches 0001-0009 & 0016 are included in this commit
  - Add upstream patches since 0.7.7
    * patches 0001-0012 are from upstream commits since 0.7.7
  - Add 0013-libmultipath-print-correct-default-for-delay_-_check.patch
    * fix minor configuration printing issue. posted upstream
  - Add 0014-multipath.conf.5-clarify-property-whitelist-handling.patch
    * clarify property blacklist_excecptions handling in man page
      posted upstream
  - Add 0015-mpathpersist-add-all_tg_pt-option.patch
    * add new all_tg_pt multpiath.conf option. posted upstream
  - Add 0016-libmultipath-remove-rbd-code.patch
    * remove unused rbd code. posted upstream
  - Add 0017-mpathpersist-fix-aptpl-support.patch
    * add ":aptpl" suffix for reservation_key to fix aptpl support.
      posted upstream
  - Add 0018-multipath-don-t-check-timestamps-without-a-path.patch
    * fix multipath null dereference crash. posted upstream
  - Add 0019-libmultipath-fix-detect-alua-corner-case.patch
    * fix alua detection with retain_hardware_handler set to off. posted
      upstream
  - Add 0020-multipath-fix-setting-conf-version.patch
    * multipath wasn't setting the kernel version correctly. posted
      upstream
  - Add 0028-RH-reset-default-find_mutipaths-value-to-off.patch
    * default to RHEL7 and older device detection style. Redhat specific,
      to keep customer experience the same.
  - Rename files
    * Previous patches 0010-0015 & 0017 are now patches 0021-0027
  - Modify 0021-RH-fixup-udev-rules-for-redhat.patch
    * Fix spurious compile warning with redhat compile options
  - Modify 0022-RH-Remove-the-property-blacklist-exception-builtin.patch
    * clarify changes in man page


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.6-3.git1cb704b
changelog:
  - Add 0008-multipathd-add-failures-path-format-wildcard.patch
  - Add 0009-multipathd-fix-reservation_key-check.patch
  - Rename files
    * Previous patches 0008-0015 are now patches 0010-0017


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.6-2.git1cb704b
changelog:
  - Add 0007-libmultipath-Fix-logic-in-should_multipath.patch
    * fix bug in identifying multipathable devices. posted upstream
  - Rename files
    * Previous patches 0007-0014 are now patches 0008-0015


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.7.6-1.git1cb704b
changelog:
  - Update Source to the latest upstream commit
    * Previous patches 0001-0014 are included in this commit
    * Previous patches 0015-0022 are now patches 0007-0014
  - 0001-multipathd-remove-incorrect-pthread_testcancel.patch
    * Fixed pthread cancellation issue. posted upstream
  - 0002-multipath-add-comments.patch
    * Posted upstream
  - 0003-multipathd-minor-dmevents-polling-code-cleanups.patch
    * Fixed minor polling issues. posted upstream
  - 0004-multipathd-remove-unneeded-function-parameter.patch
    * Posted upstream
  - 0005-mpathcmd-fix-libmpathcmd-license.patch
    * License clarification. posted upstream
  - 0006-libmultipath-don-t-print-undefined-values.patch
    * Fixed bug in 'multipath show config'. posted upstream


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.4-1.git07e7bd5
changelog:
  - Update Source to the latest upstream commit
    * Previous patches 0001-0006 are included in this commit
    * Previous patches 0007-0014 are now patches 0015-0022
  - Add 0001-libmultipath-fix-tur-checker-locking.patch
    * Fixed spinlock bug. posted upstream
  - Add 0002-multipath-fix-DEF_TIMEOUT-use.patch
    * Add missing sec to ms conversion. posted upstream
  - Add 0003-multipathd-remove-coalesce_paths-from-ev_add_map.patch
    * Remove unused code. posted upstream
  - Add 0004-multipathd-remove-unused-configure-parameter.patch
    * Remove unused code. posted upstream
  - Add 0005-Fix-set_no_path_retry-regression.patch
    * Fix issue with queueing and path addition. posted upstream
  - Add 0006-multipathd-change-spurious-uevent-msg-priority.patch
    * Change message priority to Notice. posted upstream
  - Add 0007-multipath-print-sysfs-state-in-fast-list-mode.patch
    * Show sysfs state correctly in fast list mode (-l). posted upstream
  - Add 0008-libmultipath-move-remove_map-waiter-code-to-multipat.patch
    * Move code around. posted upstream
  - Add 0009-move-waiter-code-from-libmultipath-to-multipathd.patch
    * Move code around. posted upstream
  - Add 0010-call-start_waiter_thread-before-setup_multipath.patch
    * Fix race on multipath device creations. posted upstream
  - Add 0011-libmultipath-add-helper-functions.patch
    * posted upstream
  - Add 0012-multipathd-RFC-add-new-polling-dmevents-waiter-threa.patch
    * Add alternate method of getting dmevents, that doesn't
      require a thread per device. posted upstream
  - Add 0013-libmultipath-condlog-log-to-stderr.patch
    * change condlog to log to stderr instead of stdout. posted upstream
  - Add 0014-multipathd-fix-compiler-warning-for-uev_pathfail_che.patch
    * fix indentation issue. posted upstream


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.3-1
changelog:
  - Update Source to upstream 0.7.3 release
    * Previous patch 0001 is included in this commit, and 0002 was solved in a
      different manner causing some change to previous patch 0003
    * Previous patches 0003-0010 are now patches 0007-0014
  - Add 0001-mpathpersist-Fix-invalid-condition-check.patch
    * Fix incorrect check. posted upstream
  - Add 0002-multipath-add-man-page-info-for-my-prkey-changes.patch
    * Add missing man page info. posted upstream
  - Add 0003-multipath-there-is-no-none-path-state.patch
    * remove incorrect path state. posted upstream
  - Add 0004-mutipath-updated-Huawei-storage-config.patch
    * update builtin device configuration. posted upstream
  - Add 0005-multipath-fix-doc-typo.patch
    * fix man page typo. posted upstream
  - Add 0006-multipath-add-ghost_delay-parameter.patch
    * add new multipath.conf parameter "ghost_delay". posted upstream


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.1-8.git847cc43
changelog:
  - Refresh 0001-libmultipath-update-3PARdata-builtin-config.patch
  - Add 0010-RH-warn-on-invalid-regex-instead-of-failing.patch
    * Change old-style multipath.conf regex "*" to a proper ".*" instead of
      failing


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.1-4.git847cc43
changelog:
  - Update Source to the latest upstream commit
    * Previous patches 0001 and 0010-0013 are included in this commit.
  - Add 0001-libmultipath-update-3PARdata-builtin-config.patch
    * Change for building configuration. Posted upstream
  - Modify 0006-RH-use-rpm-optflags-if-present.patch
    * Add missing lines to actually use RPM_OPT_FLAGS.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.1-2.gitf21166a
changelog:
  - Modify 0004-RH-Remove-the-property-blacklist-exception-builtin.patch
    * update multipath.conf.5 man page to remove builtin listing
  - Modify 0005-RH-don-t-start-without-a-config-file.patch
    * update multipathd.8 man page to note that a config file is necessary
  - Modify 0007-RH-add-mpathconf.patch
    * add property blacklist-exception to default config file
  - Add 0010-libmultipath-change-how-RADOS-checker-is-enabled.patch
    * Makefile now autodetects librados. Posted upstream
  - Remove related RADOS option from spec file
  - Add 0011-multipath-set-verbosity-to-default-during-config.patch
    * Allow multipath to print warning messages during configuration.
      Posted upstream
  - Add 0012-mpath-skip-device-configs-without-vendor-product.patch
    * device entries without vendor/product were breaking configurations.
      Posted upsteam
  - Add 0013-multipathd-fix-show-maps-json-crash.patch
    * multipathd crashed showing json output with no devices. Posted
      upstream


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.1-1.gitf21166a
changelog:
  - Update Source to the latest upstream commit
  - Add 0001-libmultipath-add-comment-about-resuming.patch
    * posted upstream
  - Add 0002-multipath-attempt-at-common-multipath.rules.patch
    * under discussion upstream
  - Add 0003-RH-fixup-udev-rules-for-redhat.patch
    * Redhat uses different udev rules that some other distros, so multipath
      has run at a different time. Not all upstream distros link /sbin and
      /usr/sbin either.
  - Add 0004-RH-Remove-the-property-blacklist-exception-builtin.patch
    * Allow multipath to be used on devices without multiple paths. NAK'ed
      upstream, but requested by Red Hat
  - Add 0005-RH-don-t-start-without-a-config-file.patch
    * Don't start multipath unless a config file exists. NAK'ed upstream,
      but requested by Red Hat
  - Add 0006-RH-use-rpm-optflags-if-present.patch
    * Make the build system fedora friendly
  - Add 0007-RH-add-mpathconf.patch
    * Add tool to help configure multipath with Red Hat defaults.
  - Add 0008-RH-add-wwids-from-kernel-cmdline-mpath.wwids-with-A.patch
    * Make multipath able to claim devices based on the kernel command line
      NAK'ed upstream but requested by Red Hat
  - Add 0009-RH-trigger-change-uevent-on-new-device-creation.patch
    * under discussion upstream


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-87
changelog:
  - Remove Epoch from device-mapper requires
    * The RHEL releases of device-mapper set the Epoch, and this was
      accidentally retained in the fedora spec file.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-86
changelog:
  - Modify 0136-RHBZ-1304687-wait-for-map-add.patch
    * switch to missing_uev_wait_timeout to stop waiting for uev
  - Refresh 0137-RHBZ-1280524-clear-chkr-msg.patch
  - Refresh 0150-RHBZ-1253913-fix-startup-msg.patch
  - Refresh 0154-UPBZ-1291406-disable-reinstate.patch
  - Refresh 0156-UPBZ-1313324-dont-fail-discovery.patch
  - Refresh 0161-RHBZ-1311659-no-kpartx.patch
  - Refresh 0167-RHBZ-1335176-fix-show-cmds.patch
  - Add 0173-RH-update-man-page.patch
  - Add 0174-RHBZ-1362396-modprobe.patch
    * make starting the multipathd service modprobe dm-multipath in the
      sysvinit scripts
  - Add 0175-RHBZ-1357382-ordering.patch
    * force multipathd.service to start after systemd-udev-trigger.service
  - Add 0176-RHBZ-1363830-fix-rename.patch
    * initialized a variable to make dm_rename not fail randomly
  - Add 0177-libmultipath-correctly-initialize-pp-sg_id.patch
    * This and all the following patches add the rbd patch checker
  - Add 0178-libmultipath-add-rbd-discovery.patch
  - Add 0179-multipath-tools-add-checker-callout-to-repair-path.patch
  - Add 0180-multipath-tools-Add-rbd-checker.patch
  - Add 0181-multipath-tools-Add-rbd-to-the-hwtable.patch
  - Add 0182-multipath-tools-check-for-initialized-checker-before.patch
  - Add 0183-multipathd-Don-t-call-repair-on-blacklisted-path.patch
  - Add 0184-rbd-fix-sync-repair-support.patch
  - Add 0185-rbd-check-for-nonshared-clients.patch
  - Add 0186-rbd-check-for-exclusive-lock-enabled.patch
  - Add 0187-rbd-fixup-log-messages.patch
  - Add 0188-RHBZ-1368501-dont-exit.patch
    * make multipathd not exit if it encounters recoverable errors on startup
  - Add 0189-RHBZ-1368211-remove-retries.patch
    * add "remove_retries" multipath.conf parameter to make multiple attempts
      to remove a multipath device if it is busy.
  - Add 0190-RHBZ-1380602-rbd-lock-on-read.patch
    * pass lock_on_read when remapping image
  - Add 0191-RHBZ-1169168-disable-changed-paths.patch
    * add "disabled_changed_wwids" multipath.conf parameter to disable
      paths whose wwid changes
  - Add 0192-RHBZ-1362409-infinibox-config.patch
  - Add 0194-RHBZ-1351964-kpartx-recurse.patch
    * fix recursion on corrupt dos partitions
  - Add 0195-RHBZ-1359510-no-daemon-msg.patch
    * print a messages when multipathd isn't running
  - Add 0196-RHBZ-1239173-dont-set-flag.patch
    * don't set reload flag on reloads when you gain your first
      valid path
  - Add 0197-RHBZ-1394059-max-sectors-kb.patch
    * add "max_sectors_kb" multipath.conf parameter to set max_sectors_kb
      on a multipath device and all its path devices
  - Add 0198-RHBZ-1372032-detect-path-checker.patch
    * add "detect_checker" multipath.conf parameter to detect ALUA arrays
      and set the path checker to TUR
  - Add 0199-RHBZ-1279355-3pardata-config.patch
  - Add 0200-RHBZ-1402092-orphan-status.patch
    * clear status on orphan paths
  - Add 0201-RHBZ-1403552-silence-warning.patch
  - Add 0202-RHBZ-1362120-skip-prio.patch
    * don't run prio on failed paths
  - Add 0203-RHBZ-1363718-add-msgs.patch
  - Add 0204-RHBZ-1406226-nimble-config.patch
  - Add 0205-RHBZ-1416569-reset-stats.patch
    * add "reset maps stats" and "reset map <map> stats" multipathd
      interactive commands to reset the stats tracked by multipathd
  - Add 0206-RHBZ-1239173-pt2-no-paths.patch
    * make multipath correctly disable scanning and rules running when
      it gets a uevent and there are not valid paths.
  - Add 0207-UP-add-libmpathcmd.patch
    * New shared library, libmpathcmd, that sends and receives messages from
      multipathd. device-mapper-multipath now uses this library internally.
  - Add 0208-UPBZ-1430097-multipathd-IPC-changes.patch
    * validation that modifying commands are coming from root.
  - Add 0209-UPBZ-1430097-multipath-C-API.patch
    * New shared library. libdmmp, that presents the information from multipathd
      in a structured manner to make it easier for callers to use
  - Add 0210-RH-fix-uninstall.patch
    * Minor compilation fixes
  - Add 0211-RH-strlen-fix.patch
    * checks that variables are not NULL before passing them to strlen
  - Add 0212-RHBZ-1431562-for-read-only.patch
  - Make 3 new subpackages
    * device-mapper-multipath-devel, libdmmp, and libdmmp-devel. libmpathcmd
      and libmpathprio are in device-mapper-multipath-libs and
      device-mapper-multipath-devel. libdmmp is in its own subpackages
  - Move libmpathprio devel files to device-mapper-multipath-devel
  - Added BuildRequires on librados2-devel


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-83
changelog:
  - Modify 0135-RHBZ-1299600-path-dev-uevents.patch
    * trigger uevents when adding wwids for existing devices during startup
  - Refresh 0136-RHBZ-1304687-wait-for-map-add.patch
  - Refresh 0150-RHBZ-1253913-fix-startup-msg.patch
  - Modify 0159-UPBZ-1255885-udev-waits.patch
    * fix bug in failure path
  - Add 0160-RH-udev-flags.patch
  - Add 0161-RHBZ-1311659-no-kpartx.patch
    * skip_kpartx option disables kpartx running on multipath devices
  - Add 0162-RHBZ-1333331-huawei-config.patch
    * Add default config for Huawei XSG1 array
  - Add 0163-UPBZ-1333492-resize-map.patch
    * restore old size if resize fails
  - Add 0164-RHBZ-1311463-dos-part-rollover.patch
    * fix incorrect partition size due to 4k device size rollover
  - Add 0165-UPBZ-1341748-MSA-2040-conf.patch
    * Add default config for MSA 2040 array
  - Add 0166-RHBZ-1323429-dont-allow-new-wwid.patch
    * don't allow path wwid to change while it is in use
  - Add 0167-RHBZ-1335176-fix-show-cmds.patch
    * and new show multipath format wildcard, 'f' to sho number of failures.
      This will hopefully be useful for tracking what happens to multipath
      devices for bz #1335176
  - Add 0168-RHBZ-1347769-shared-lock.patch
    * make multipath lock the path devices with a shared lock
  - Add 0169-UPBZ-1353357-json-output.patch
    * add mulitpathd json output command
  - Add 0170-UPBZ-1352925-fix-typo.patch
  - Add 0171-UPBZ-1356651-allow-zero-size.patch
    * Allow zero-sized paths to be added to a multipath device
  - Add 0172-RHBZ-1350931-no-active-add.patch
    * Allow paths to be added to a new map if no active paths exist. Also
      fixes 1351430


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-82
changelog:
  - Modify 0005-RH-add-mpathconf.patch
    * changed warning message
  - Modify 0102-RHBZ-1160478-mpathconf-template.patch
    * updated man page
  - Modify 0104-RHBZ-631009-deferred-remove.patch
    * refactor code and minor fix
  - Refresh 0107-RHBZ-1169935-no-new-devs.patch
  - Refresh 0112-RHBZ-1194917-add-config_dir-option.patch
  - Refresh 0126-RHBZ-1211383-alias-collision.patch
  - Add 0133-RHBZ-1296979-fix-define.patch
    * look for the correct libudev function to set define
  - Add 0134-RHBZ-1241528-check-mpath-prefix.patch
    * only touch devices with a "mpath-" dm uuid prefix
  - Add 0135-RHBZ-1299600-path-dev-uevents.patch
    * trigger path uevent the first time a path is claimed by multipath
  - Add 0136-RHBZ-1304687-wait-for-map-add.patch
    * wait for the device to finish being added before reloading it.
  - Add 0137-RHBZ-1280524-clear-chkr-msg.patch
  - Add 0138-RHBZ-1288660-fix-mpathconf-allow.patch
    * don't remove existing lines from blacklist_exceptions section
  - Add 0139-RHBZ-1273173-queue-no-daemon-doc.patch
  - Add 0140-RHBZ-1299647-fix-help.patch
  - Add 0141-RHBZ-1303953-mpathpersist-typo.patch
  - Add 0142-RHBZ-1283750-kpartx-fix.patch
    * only remove devices if their uuid says that they are the correct
      partition device
  - Add 0143-RHBZ-1299648-kpartx-sync.patch
    * default to using udev sync mode
  - Add 0144-RHBZ-1299652-alua-pref-arg.patch
    * allow "exclusive_pref_bit" argument to alua prioritizer
  - Add 0145-UP-resize-help-msg.patch
  - Add 0146-UPBZ-1299651-raw-output.patch
    * allow raw format mutipathd show commands, that remove headers and padding
  - Add 0147-RHBZ-1272620-fail-rm-msg.patch
  - Add 0148-RHBZ-1292599-verify-before-remove.patch
    * verify that all partitions are unused before attempting to remove a device
  - Add 0149-RHBZ-1292599-restore-removed-parts.patch
    * don't disable kpartx when restoring the first path of a device.
  - Add 0150-RHBZ-1253913-fix-startup-msg.patch
    * wait for multipathd daemon to write pidfile before returning
  - Add 0151-RHBZ-1297456-weighted-fix.patch
    * add wwn keyword to weighted prioritizer for persistent naming
  - Add 0152-RHBZ-1269293-fix-blk-unit-file.patch
    * use "Wants" instead of "Requires"
  - Add 0153-RH-fix-i686-size-bug.patch
    * use 64-bit keycodes for multipathd client commands
  - Add 0154-UPBZ-1291406-disable-reinstate.patch
    * don't automatically reinstate ghost paths for implicit alua devices
  - Add 0155-UPBZ-1300415-PURE-config.patch
    * Add default config for PURE FlashArray
  - Add 0156-UPBZ-1313324-dont-fail-discovery.patch
    * don't fail discovery because individual paths failed.
  - Add 0157-RHBZ-1319853-multipath-c-error-msg.patch
    * better error reporting for multipath -c
  - Add 0158-RHBZ-1318581-timestamp-doc-fix.patch
    * add documentation for -T
  - Add 0159-UPBZ-1255885-udev-waits.patch
    * make multipath and kpartx wait after for udev after each command


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-80
changelog:
  - Add 0131-RHBZ-1259523-host_name_len.patch
    * increase size of host string
  - Add 0132-UPBZ-1259831-lock-retry.patch
    * retry locking when creating multipath devices


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-77
changelog:
  - Modify 0104-RHBZ-631009-deferred-remove.patch
    * add man page info
  - Refresh 0112-RHBZ-1194917-add-config_dir-option.patch
  - Refresh 0114-RHBZ-1196394-delayed-reintegration.patch
  - Add 0118-UPBZ-1200738-update-eternus-config.patch
    * update default config
  - Add 0119-RHBZ-1081397-save-alua-info.patch
    * make prioritizers save information between calls to speed them up.
  - Add 0120-RHBZ-1043093-realloc-fix.patch
    * free old memory if realloc fails.
  - Add 0121-RHBZ-1197234-rules-fix.patch
    * make sure kpartx runs after an DM_ACTIVATION event occurs.
  - Add 0122-RHBZ-1212590-dont-use-var.patch
    * use /run instead of /var/run
  - Add 0123-UPBZ-1166072-fix-path-offline.patch
    * Don't mark quiesce and transport-offline paths as offline
  - Add 0124-RHBZ-1209275-retrigger-uevents.patch
    * Make multipathd retrigger uevents when paths haven't successfully had
      their udev_attribute environment variable set by udev and add
      "retrigger_ties" and "retrigger_delay" to control this
  - Add 0125-RHBZ-1153832-kpartx-delete.patch
    * Delete all partition devices with -d (not just the ones in the partition
      table)
  - Add 0126-RHBZ-1211383-alias-collision.patch
    * make multipathd use the old alias, if rename failed and add
      "new_bindings_in_boot" to determine if new bindings can be added to
      the bindings file in the initramfs
  - Add 0127-RHBZ-1201030-use-blk-availability.patch
    * Make multipath use blk-availability.service
  - Add 0128-RHBZ-1222123-mpathconf-allow.patch
    * Add mpathconf --allow for creating specialized config files.
  - Add 0129-RHBZ-1241774-sun-partition-numbering.patch
    * Make kpartx correctly number sun partitions.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-75
changelog:
  - Add 0111-RH-dont-show-pg-timeout.patch
    * The kernel doesn't support pg_timeout, so multipath shouldn't
      bother to display it
  - Add 0112-RHBZ-1194917-add-config_dir-option.patch
    * multipath will now also read its configuration from files with
      the .conf suffix in the directory specified by config_dir
      which defaults to /etc/multipath/conf.d
  - Add 0113-RHBZ-1194917-cleanup.patch
    * cleanup some unnecessary code
  - Add 0114-RHBZ-1196394-delayed-reintegration.patch
    * Add "delay_watch_checks" and "delay_wait_checks" options to delay
      reintegration of flakey paths.
  - Add 0115-RHBZ-1198418-fix-double-free.patch
    * multipath was freeing the multipath alias twice if it failed to create the
      multipath device.
  - Add 0116-UPBZ-1188179-dell-36xxi.patch
    * new builtin configurations.
  - Add 0117-RHBZ-1198424-autodetect-clariion-alua.patch
    * configure multipath to automatically detect alua settings on clariion
      devices.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-73
changelog:
  - Add 0110-RHBZ-blacklist-vd-devs.patch
    * blacklist vd[a-z] devices, since they don't have a WWID for
      multipath to use.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-72
changelog:
  - Modify 0107-RHBZ-1169935-no-new-devs.patch
    * instead of using "-n" there is now a new configuration option,
      'ignore_new_boot_devs'. If set to 'yes', multipath will ignore
      devices that aren't in /etc/multipath/wwids when running in the
      initramfs. This option does nothing while multipathd is running
      in the real root filesystem.
  - Update 0109-RH-read-only-bindings.patch


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-71
changelog:
  - Add 0103-RH-cleanup-partmaps-code.patch
    * code refactoring to prepare for next patch
  - Add 0104-RHBZ-631009-deferred-remove.patch
    * add deferred_remove option to /etc/multipath.conf
  - Add 0105-RHBZ-1148979-fix-partition-mapping-creation-race-with-kpartx.patch
    * Only run kpartx on device activation
  - Add 0106-RHBZ-1159337-fix-double-free.patch
    * made ev_remove_path exit immediately after failing setup_multipath, since
      it handles cleaning up the device
  - Add 0107-RHBZ-1169935-no-new-devs.patch
    * Add new multipathd option '-n' which keeps multipathd from creating any
      multipath devices that aren't in the /etc/multipath/wwids file.
  - Add 0108-RHBZ-1153832-kpartx-remove-devs.patch
    * switch from 'kpartx -a' to 'kpartx -u' to remove missing devices as well.
  - Add 0109-RH-read-only-bindings.patch
    * re-enabled -B option for multipathd


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-70
changelog:
  - Add 0102-RHBZ-1160478-mpathconf-template.patch
    * mpathconf no longer copies the default config template for the
      docs directory.  It simply writes the template itself.
  - Resolves: bz# 1160478


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-68
changelog:
  - Modify multipath.conf
    * remove getuid_callout example
  - Re-add 0050-RH-listing-speedup.patch
  - Add 0081-RHBZ-1066264-check-prefix-on-rename.patch
    * make multipath check the prefix on kpartx partitions during rename, and
      copy the existing behaviour
  - Add 0082-UPBZ-1109995-no-sync-turs-on-pthread_cancel.patch
    * If async tur checker fails on threads, don't retry with the sync version
  - Add 0083-RHBZ-1080055-orphan-paths-on-reload.patch
    * Fix case where pathlist wasn't getting updated properly
  - Add 0084-RHBZ-1110000-multipath-man.patch
    * fix errors in multipath man page
  - Add 0085-UPBZ-1110006-datacore-config.patch
    * Add support for DataCore Virtual Disk
  - Add 0086-RHBZ-1110007-orphan-path-on-failed-add.patch
    * If multipathd fails to add path correctly, it now fully orphans the path
  - Add 0087-RHBZ-1110013-config-error-checking.patch
    * Improve multipath.conf error checking.
  - Add 0088-RHBZ-1069811-configurable-prio-timeout.patch
    * checker_timeout now adjusts the timeouts of the prioritizers as well.
  - Add 0089-RHBZ-1110016-add-noasync-option.patch
    * Add a new defaults option, "force_sync", that disables the async mode
      of the path checkers. This is for cases where to many parallel checkers
      hog the cpu
  - Add 0090-UPBZ-1080038-reorder-paths-for-round-robin.patch
    * make multipathd order paths for better throughput in round-robin mode
  - Add 0091-RHBZ-1069584-fix-empty-values-fast-io-fail-and-dev-loss.patch
    * check for null pointers in configuration reading code.
  - Add 0092-UPBZ-1104605-reload-on-rename.patch
    * Reload table on rename if necessary
  - Add 0093-UPBZ-1086825-user-friendly-name-remap.patch
    * Keep existing user_friend_name if possible
  - Add 0094-RHBZ-1086825-cleanup-remap.patch
    * Cleanup issues with upstream patch
  - Add 0095-RHBZ-1127944-xtremIO-config.patch
    * Add support for EMC ExtremIO devices
  - Add 0096-RHBZ-979474-new-wildcards.patch
    * Add N, n, R, and r path wildcards to print World Wide ids
  - Add 0097-RH-fix-coverity-errors.patch
    * Fix a number of unterminated strings and memory leaks on failure
      paths.
  - Add 0098-UPBZ-1067171-mutipath-i.patch
    * Add -i option to ignore wwids file when checking for valid paths
  - Add 0099-RH-add-all-devs.patch
    * Add new devices config option all_devs. This makes the configuration
      overwrite the specified values in all builtin configs
  - Add 0100-RHBZ-1067171-multipath-i-update.patch
    * make -i work correctly with find_multipaths
  - Add 0101-RH-adapter-name-wildcard.patch
    * Add 'a' path wildcard to print adapter name


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-64
changelog:
  - Modify 0076-RHBZ-1056686-add-hw_str_match.patch
    * free temporary memory used during configuration
  - Add 0078-RHBZ-1054044-fix-mpathconf-manpage.patch
    * fix typo
  - Add 0079-RHBZ-1070581-add-wwid-option.patch
    * add multipath option "-a". To add a device's wwid to the wwids file
  - Add 0080-RHBZ-1075796-cmdline-wwid.patch
    * add multipath option "-A" to add wwids specified by the kernel
      command line mapth.wwid options.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-63
changelog:
  - Add 0074-RHBZ-1056976-dm-mpath-rules.patch
    * Add rules to keep from doing work in udev if there are no
      active paths, or if the event was for a multipath device
      reloading its table due to a path change.
  - Add 0075-RHBZ-1056976-reload-flag.patch
    * multipath code to identify reloads that the new rules can
      ignore
  - Add 0076-RHBZ-1056686-add-hw_str_match.patch
    * add a new default config paramter, "hw_str_match", to make user
      device configs only overwrite builtin device configs if the
      identifier strings match exactly, like the default in RHEL6.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-62
changelog:
  - Modify 0072-RHBZ-1039199-check-loop-control.patch
    * only call close on the /dev/loop-control fd the open succeeds
  - Add 0073-RH-update-build-flags.patch
    * fix print call to work with -Werror=format-security compile flag


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-61
changelog:
  - Add 0072-RHBZ-1039199-check-loop-control.patch
    * Make kpartx use LOOP_CTL_GET_FREE and loop-control to find a free
      loop device. This will autoload the loop module.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-60
changelog:
  - Add 0067-RHBZ-1022899-fix-udev-partition-handling.patch
    * Make sure to wipe partition devices on change event if they weren't
      wiped on the device add event
  - Add 0068-RHBZ-1034578-label-partition-devices.patch
    * Make sure that partition devices are labeled like the whole device
  - Add 0069-UPBZ-1033791-improve-rdac-checker.patch
    *  Use RTPG data in RDAC checker
  - Add 0070-RHBZ-1036503-blacklist-td-devs.patch
  - Add 0071-RHBZ-1031546-strip-dev.patch
    * make multipathd interactive commands able to handle /dev/<devnode>
      instead of just <devnode>


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-59
changelog:
  - Add 0066-UP-dos-4k-partition-fix.patch
    * Make kpartx correctly handle 4K sector size devices with dos partitions.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-58
changelog:
  - Add 0065-UPBZ-995538-fail-rdac-on-unavailable.patch
    * make rdac checker always mark paths with asymmetric access state of
      unavailable as down


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-57
changelog:
  - Add 0063-RH-fix-warning.patch
    * Fix complier warning
  - 0064-fix-ID_FS-attrs.patch
    * make multipath create a timestamp file /run/multipathd/timestamp, and
      add -T<timestamp>:<valid> option to shortcut processing if the
      timestamp hasn't changed


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-56
changelog:
  - Add 0061-RH-display-find-mpaths.patch
    * display the find_multipaths value in show config
  - Add 0062-RH-dont-free-vecs.patch
    * don't free the vecs structure on shutdown. It's more pain than
      it's worth.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-55
changelog:
  - Modify 0015-RH-fix-output-buffer.patch
    * Fix memory leak
  - Add 0047-RHBZ-kpartx-read-only-loop-devs.patch
    * Fix read only loop device handling
  - Add 0048-RH-print-defaults.patch
  - Add 0049-RH-remove-ID_FS_TYPE.patch
    * remove ID_FS_TYPE udev enviroment variable for multipath devices
  - Add 0051-UP-fix-cli-resize.patch
    * check before dereferencing variables
  - Add 0052-RH-fix-bad-derefs.patch
    * setup multipath free the multipath device when it fails, so don't keep
      using it.
  - Add 0053-UP-fix-failback.patch
    * setting failback in the devices section was broken
  - Add 0054-UP-keep-udev-ref.patch
    * multipathd needs to keep the same udev object across reconfigures
  - Add 0055-UP-handle-quiesced-paths.patch
    * quiesced paths should be treated as down
  - Add 0056-UP-alua-prio-fix.patch
    * Don't count the preferred bit for paths that are active/optimized
  - Add 0057-UP-fix-tmo.patch
    * Cleanup how multipath sets dev_loss_tmo and fast_io_fail_tmo.  Also
      make multipath get changing values directly from sysfs, instead of
      from udev, which caches them.
  - Add 0058-UP-fix-failback.patch
    * make failback print the default value when you show configs.
  - Add 0059-UP-flush-failure-queueing.patch
    * If you can't flush a multipath device, restore the queue_if_no_paths
      value
  - Add 0060-UP-uevent-loop-udev.patch
    * make ueventloop grab it's own udev reference, since it is cancelled
      asychnrously.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-54
changelog:
  - Add 0047-RHBZ-980777-kpartx-read-only-loop-devs.patch
    * make kpartx support read-only files better
  - Resolves: bz #980777


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-53
changelog:
  - Add 0044-RHBZ-976688-fix-wipe-wwids.patch
    * Seek back to the start of the file after truncating it
  - Add 0045-RHBZ-977297-man-page-fix.patch
    * update man page to match actual defaults
  - Add 0046-RHBZ-883981-move-udev-rules.patch
    * move udev rules file from /lib to /usr/lib
  - Resolves: bz #883981, #976688, #977297


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-52
changelog:
  - Add 0038-RHBZ-799860-netapp-config.patch
  - Add 0039-RH-detect-prio-fix.patch
    * Don't autodetect ALUA prioritizer unless it actually can get a priority
  - Add 0040-RH-bindings-fix.patch
    * Do a better job of trying to get the first free user_friendly_name
  - Add 0041-RH-check-for-erofs.patch
    * Don't create/reload a device read-only unless doing it read/write fails
      with EROFS
  - Remove 0017-RH-fix-sigusr1.patch
    * fix signal handling upstream way instead
  - Add 0042-UP-fix-signal-handling.patch
    * uxlsnr now handles all the signals sent to multipathd. This makes its
      signal handling posix compliant, and harder to mess up.
  - Add 0043-RH-signal-waiter.patch
    * ioctl isn't a pthread cancellation point.  Send a signal to the waiter
      thread to break out of waiting in ioctl for a dm event.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-51
changelog:
  - Add 0032-RHBZ-956464-mpathconf-defaults.patch
    * fix defaults listed in usage
  - Add 0033-RHBZ-829963-e-series-conf.patch
  - Add 0034-RHBZ-851416-mpathconf-display.patch
    * display whether or not multipathd is running in the status
  - Add 0035-RHBZ-891921-list-mpp.patch
    * add a new path format wilcard to list the multipath device associated
      with a path
  - Add 0036-RHBZ-949239-load-multipath-module.patch
    * load the dm-multipath kernel module when multipathd starts
  - Add 0037-RHBZ-768873-fix-rename.patch
    * When deciding on a multipth devices name on reload, don't default to
      the existing name if there is no config file alias and user_friendly_names
      isn't set. Use the wwid.
  - Modify multipath.conf
  - Resolves: bz #768873, #950252


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-50
changelog:
  - Add 0031-RHBZ-957188-kpartx-use-dm-name.patch
    * use the basename of the devices that will be created to choose the
      delimiter instead of using the device name from the command line
  - Resolves: bz #957188


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-49
changelog:
  - Modify 0020-RHBZ-907360-static-pthread-init.patch
    * Don't initialize uevent list twice
  - Add 0029-RH-no-prio-put-msg.patch
  - Add 0030-RHBZ-916528-override-queue-no-daemon.patch
    * Default to "queue_without_daemon no"
    * Add "forcequeueing daemon" and "restorequeueing daemon" cli commands
  - Modify spec file to force queue_without_daemon when restarting
    multipathd on upgrades.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-48
changelog:
  - Add 0026-fix-checker-time.patch
    * Once multipathd hit it max checker interval, it was reverting to
      to shortest checker interval
  - Add 0027-RH-get-wwid.patch
    * Multipath wasn't correctly setting the multipath wwid when it read devices
      in from the kernel
  - Add 0028-RHBZ-929078-refresh-udev-dev.patch
    * Make multipath try to get the UID of down devices.  Also, on ev_add_path,
      make multipathd reinitialize existing devices that weren't fully
      initialized before.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-47
changelog:
  - Add 0021-RHBZ-919119-respect-kernel-cmdline.patch
    * keep the multipath.rules udev file from running and multipathd from
      starting if nompath is on the kernel command line
  - Add 0022-RH-multipathd-check-wwids.patch
    * Whenever multipath runs configure, it will check the wwids, and
      add any missing ones to the wwids file
  - Add 0023-RH-multipath-wipe-wwid.patch
    * multipath's -w command will remove a wwid from the wwids file
  - Add 0024-RH-multipath-wipe-wwids.patch
    * multipath's -W command will set reset the wwids file to just the current
      devices
  - Add 0025-UPBZ-916668_add_maj_min.patch
  - Resolves: bz #919119


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-46
changelog:
  - Add 0020-RHBZ-907360-static-pthread-init.patch
    * statically initialize the uevent pthread structures


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-45
changelog:
  - Updated to latest upstrem 0.4.9 code: multipath-tools-130222
    (git commit id: 67b82ad6fe280caa1770025a6bb8110b633fa136)
  - Refresh 0001-RH-dont_start_with_no_config.patch
  - Modify 0002-RH-multipath.rules.patch
  - Modify 0003-RH-Make-build-system-RH-Fedora-friendly.patch
  - Refresh 0004-RH-multipathd-blacklist-all-by-default.patch
  - Refresh 0005-RH-add-mpathconf.patch
  - Refresh 0006-RH-add-find-multipaths.patch
  - Add 0008-RH-revert-partition-changes.patch
  - Rename 0008-RH-RHEL5-style-partitions.patch to
  	 0009-RH-RHEL5-style-partitions.patch
  - Rename 0009-RH-dont-remove-map-on-enomem.patch to
  	 0010-RH-dont-remove-map-on-enomem.patch
  - Rename 0010-RH-deprecate-uid-gid-mode.patch to
  	 0011-RH-deprecate-uid-gid-mode.patch
  - Rename 0013-RH-kpartx-msg.patch to 0012-RH-kpartx-msg.patch
  - Rename 0035-RHBZ-883981-cleanup-rpmdiff-issues.patch to
           0013-RHBZ-883981-cleanup-rpmdiff-issues.patch
  - Rename 0039-RH-handle-other-sector-sizes.patch to
  	 0014-RH-handle-other-sector-sizes.patch
  - Rename 0040-RH-fix-output-buffer.patch to 0015-RH-fix-output-buffer.patch
  - Add 0016-RH-dont-print-ghost-messages.patch
  - Add 0017-RH-fix-sigusr1.patch
    * Actually this fixes a number of issues related to signals
  - Rename 0018-RH-remove-config-dups.patch to 0018-RH-fix-factorize.patch
    * just the part that isn't upstream
  - Add 0019-RH-fix-sockets.patch
    * makes abstract multipathd a cli sockets use the correct name.
  - Set find_multipaths in the default config


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-44
changelog:
  - Add 0036-UP-fix-state-handling.patch
    * handle transport-offline and quiesce sysfs state
  - Add 0037-UP-fix-params-size.patch
  - Add 0038-RH-fix-multipath.rules.patch
    * make sure multipath's link priority gets increased
  - Add 0039-RH-handle-other-sector-sizes.patch
    * allow gpt partitions on 4k sector size block devices.
  - Add 0040-RH-fix-output-buffer.patch
    * fix multipath -ll for large configuration.


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-42
changelog:
  - Add 0034-RHBZ-887737-check-for-null-key.patch
  - Add 0035-RHBZ-883981-cleanup-rpmdiff-issues.patch
    * Compile multipathd with full RELRO and PIE and install to /usr


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-41
changelog:
  - Add 0033-RH-dont-disable-libdm-failback-for-sync-case.patch
    * make kpartx -s and multipath use libdm failback device creation, so
      that they work in environments without udev


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-40
changelog:
  - Add 0032-RH-make-path-fd-readonly.patch
    * revert change made when adding persistent reservations, so that path fds
      are again opened O_RDONLY


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-38
changelog:
  - Add 0026-RH-fix-mpathpersist-fns.patch
  - Add 0027-RH-default-partition-delimiters.patch
    * Only use the -p delimiter when the device name ends in a number
  - Add 0028-RH-storagetek-config.patch
  - Add 0029-RH-kpartx-retry.patch
    * retry delete on busy loop devices
  - Add 0030-RH-early-blacklist.patch
    * multipath will now blacklist devices by device type and wwid in
      store_pathinfo, so that it doesn't do a bunch of unnecessary work
      on paths that it would only be removing later on.


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-35
changelog:
  - Add 0022-RHBZ-864368-disable-libdm-failback.patch
    * make kpartx and multiapthd disable libdm failback device creation
  - Add 0023-RHBZ-866291-update-documentation.patch
  - Resolves: bz #864368, #866291


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-33
changelog:
  - Modify 0016-RH-retain_hwhandler.patch
    * Check the dm-multipath module version, and don't enable
      retain_attached_hw_handler if the kernel doesn't support it
  - Add 0019-RH-detect-prio.patch
    * add detect_prio option, to make multipath check if the device
      supports the ALUA prio, before defaulting to the configured prio
  - Remove 0017-RH-netapp_config.patch
  - Add 0020-RH-netapp-config.patch
    * new netapp config that uses retain_attached_hw_handler and
      detect_prio to autoconfigure ALUA and non-ALUA devices.


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-32
changelog:
  - Modified 0018-RH-remove-config-dups.patch
    * Made modified config remove original only if the vendor/product
      exactly match


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-31
changelog:
  - Add 0014-RH-dm_reassign.patch
    * Fix reassign_maps option
  - Add 0015-RH-selector_change.patch
    * devices default to using service-time selector
  - Add 0016-RH-retain_hwhandler.patch
    * add retain_attached_hw_handler option, to let multipath keep an
      already attached scsi device handler
  - Add 0017-RH-netapp_config.patch
  - Add 0018-RH-remove-config-dups.patch
    * Clean up duplicates in the devices and blacklist sections


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-29
changelog:
  - Updated to latest upstrem 0.4.9 code: multipath-tools-120821.tgz
    (git commit id: 050b24b33d3c60e29f7820d2fb75e84a9edde528)
    * includes 0001-RH-remove_callout.patch, 0002-RH-add-wwids-file.patch,
      0003-RH-add-followover.patch, 0004-RH-fix-cciss-names.patch
  - Add 0013-RH-kpartx-msg.patch
  - Modify 0002-RH-multipath.rules.patch
    * removed socket call from rules file


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-27
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-120613.tgz
    (git commit id: cb0f7127ba90ab5e8e71fc534a0a16cdbe96a88f)
  - Add 0001-RH-remove_callout.patch
    * multipath no longer uses the getuid callout.  It now gets the
      wwid from the udev database or the environment variables
  - Add 0004-RH-fix-cciss-names.patch
    * convert cciss device names from cciss/cXdY to sysfs style cciss!cXdY
  - Split 0009-RH-add-find-multipaths.patch into 0002-RH-add-wwids-file.patch
          and 0010-RH-add-find-multipaths.patch
  - Add 0016-RH-change-configs.patch
    * default fast_io_fail to 5 and don't set the path selector in the
      builtin configs.
  Resolves: bz #831978


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-22
changelog:
  - Add 0012-RH-update-on-show-topology.patch
  - Add 0013-RH-manpage-update.patch
  - Add 0014-RH-RHEL5-style-partitions.patch
  - Add 0015-RH-add-followover.patch
  - Add 0016-RH-dont-remove-map-on-enomem.patch
  - Add 0017-RH-fix-shutdown-crash.patch
  - Add 0018-RH-warn-on-bad-dev-loss-tmo.patch
  - Add 0019-RH-deprecate-uid-gid-mode.patch
  - Add 0020-RH-dont-remove-map-twice.patch
  - Add 0021-RH-validate-guid-partitions.patch
  - Add 0022-RH-adjust-messages.patch
  - Add 0023-RH-manpage-update.patch


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-21
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-120123.tgz
    (git commit id: 63704387009443bdb37d9deaaafa9ab121d45bfb)
  - Add 0001-RH-fix-async-tur.patch
  - Add 0002-RH-dont_start_with_no_config.patch
  - Add 0003-RH-multipath.rules.patch
  - Add 0004-RH-update-init-script.patch
  - Add 0005-RH-cciss_id.patch
  - Add 0006-RH-Make-build-system-RH-Fedora-friendly.patch
  - Add 0007-RH-multipathd-blacklist-all-by-default.patch
  - Add 0008-RH-add-mpathconf.patch
  - Add 0009-RH-add-find-multipaths.patch
  - Add 0010-RH-check-if-multipath-owns-path.patch
  - Add 0011-RH-add-hp_tur-checker.patch


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-19
changelog:
  - Modify 0103-add-disable-sync-option.patch
  - Add 0104-RHBZ-737989-systemd-unit-fix.patch
    * systemd will only start multipathd if /etc/multipath.conf exists
  - Add 0105-fix-oom-adj.patch
    * first try setting oom_score_adj


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-17
changelog:
  - Add 0103-add-disable-sync-option.patch
    * add a -n (nosync) option to multipath. This disables synchronous
      file creation with udev.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-16
changelog:
  - Modify 0012-RH-udev-sync-support.patch
  - Modify 0021-RHBZ-548874-add-find-multipaths.patch
  - Modify 0022-RHBZ-557845-RHEL5-style-partitions.patch
  - Add 0025-RHBZ-508827-update-multipathd-manpage.patch through
        0101-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
    * sync with current state of RHEL6. Next release should include a updated
      source tarball with most of these fixes rolled in.
  - Add 0102-RHBZ-690828-systemd-unit-file.patch
    * Add Jóhann B. Guðmundsson's unit file for systemd.
    * Add sub-package sysvinit for SysV init script.
  - Resolves: bz #690828


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-14
changelog:
  - Modify 0021-RHBZ-548874-add-find-multipaths.patch
    * fix bug where mpathconf wouldn't create a multpath.conf file unless one
      already existed.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-13
changelog:
  - Replace 0012-RH-explicitly-disable-dm-udev-sync-support-in-kpartx.patch
    with 0012-RH-udev-sync-support.patch
    * Add udev sync support to kpartx and multipath. In kpartx it is disabled
      unless you use the -s option.
  - Refresh 0013-RH-add-weighted_prio-prioritizer.patch
  - Refresh 0021-RHBZ-548874-add-find-multipaths.patch
  - Modify 0022-RHBZ-557845-RHEL5-style-partitions.patch
    * kpartx now creates a 2 sector large device for dos extended
      partitions, just like the kernel does on the regular block devices.
  - Add 0023-RHBZ-557810-emc-invista-config.patch
  - Add 0024-RHBZ-565933-checker-timeout.patch
    * Multipath has a new option checker_timeout. If this is not set, 
      all path checker functions with explicit timeouts use
      /sys/block/sd<x>/device/timeout. If this is set, they use it instead.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-12
changelog:
  - Refresh 0001-RH-queue-without-daemon.patch
  - Refresh 0002-RH-path-checker.patch
  - Modify 0010-RH-multipath-rules-udev-changes.patch
    * Fix udev rules to use DM_SBIN_PATH when calling kpartx
    * install udev rules to /lib/udev/rules.d instead of /etc/udev/rules.d
  - Modify 0014-RH-add-hp_tur-checker.patch
  - Add 0003-for-upstream-default-configs.patch
  - Add 0016-RHBZ-554561-fix-init-error-msg.patch
  - Add 0017-RHBZ-554592-man-page-note.patch
  - Add 0018-RHBZ-554596-SUN-6540-config.patch
  - Add 0019-RHBZ-554598-fix-multipath-locking.patch
  - Add 0020-RHBZ-554605-fix-manual-failover.patch
  - Add 0021-RHBZ-548874-add-find-multipaths.patch
    * Added find_multipaths multipath.conf option
    * Added /sbin/mpathconf for simple editting of multipath.conf
  - Add 0022-RHBZ-557845-RHEL5-style-partitions.patch
    * Make kpartx deal with logical partitions like it did in RHEL5.
      Don't create a dm-device for the extended partition itself.
      Create the logical partitions on top of the dm-device for the whole disk.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-11
changelog:
  - Add 0002-for-upstream-add-tmo-config-options.patch
    * Add fail_io_fail_tmo and dev_loss_tmo multipath.conf options
  - Add 0013-RH-add-weighted_prio-prioritizer.patch
  - Add 0014-RH-add-hp_tur-checker.patch
  - Add 0015-RH-add-multipathd-count-paths-cmd.patch
  - rename multipath.conf.redhat to multipath.conf, and remove the default
    blacklist.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-10
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-091027.tar.gz
    (git commit id: a946bd4e2a529e5fba9c9547d03d3f91806618a3)
  - Drop unrequired for-upstream patches.
  - BuildRequires and Requires new device-mapper version for udev sync support.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-8
changelog:
  - Split patches in "for-upstream" and "RH" series.
  - Replace 0011-RH-multipathd-blacklist-all-by-default.patch with
    version from Benjamin Marzinski.
  - Update udev rules 0010-RH-multipath-rules-udev-changes.patch.
  - rpmlint cleanup:
    * Drop useless-provides kpartx.
    * Cleanup tab vs spaces usage.
    * Summary not capitalized.
    * Missing docs in libs package.
    * Fix init script LSB headers.
  - Drop README* files from doc sections (they are empty).


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-7
changelog:
  - Add patch 0010-RH-Set-friendly-defaults.patch:
    * set rcdir to fedora default.
    * do not install kpartx udev bits.
    * install redhat init script.
    * Cleanup spec file install target.
  - Add patch 0011-RH-multipathd-blacklist-all-by-default.patch:
    * Fix BZ#528059
    * Stop installing default config in /etc and move it to the doc dir.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-6
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-091013.tar.gz
    (git commit id: aa0a885e1f19359c41b63151bfcface38ccca176)
  - Drop, now upstream, patches:
    * fix_missed_uevs.patch.
    * log_all_messages.patch.
    * uninstall.patch.
    * select_lib.patch.
    * directio_message_cleanup.patch.
    * stop_warnings.patch.
  - Drop redhatification.patch in favour of spec file hacks.
  - Drop mpath_wait.patch: no longer required.
  - Merge multipath_rules.patch and udev_change.patch.
  - Rename all patches based on source.
  - Add patch 0009-RH-fix-hp-sw-hardware-table-entries.patch to fix
    default entry for hp_sw and match current kernel.
  - Add multipath.conf.redhat as source instead of patch.
  - spec file:
    * divide runtime and build/setup bits.
    * update BuildRoot.
    * update install section to apply all the little hacks here and there,
      in favour of patches against upstream.
    * move ldconfig invokation to libs package where it belong.
    * fix libs package directory ownership and files.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.4.9-5
changelog:
  - Fixed problem where maps were being added and then removed.
  - Changed the udev rules to fix some issues.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.4.9-3
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-090729.tgz
    (git commit id: d678c139719d5631194b50e49f16ca97162ecd0f)
  - moved multipath bindings file from /var/lib/multipath to /etc/multipath
  - Fixed 354961, 432520


author: Mike Snitzer <snitzer@redhat.com> - 0.4.9-1
changelog:
  - Updated to latest upstream 0.4.9 code: multipath-tools-090429.tgz
    (git commit id: 7395bcda3a218df2eab1617df54628af0dc3456e)
  - split the multipath libs out to a device-mapper-multipath-libs package
  - if appropriate, install multipath libs in /lib64 and /lib64/multipath


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-7
changelog:
  - Since libaio is now in /lib, not /usr/lib, multipath no longer needs to
    statically link against it. Fixed an error with binding file and WWIDs
    that include spaces. Cleaned up the messages from the directio checker
    function.  Fixed the udev rules. Fixed a regression in multipath.conf
    parsing
  - Fixed 457530, 457589


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-6
changelog:
  - Updated to latest upstream 0.4.8 code: multipath-tools-080804.tgz
    (git commit id: eb87cbd0df8adf61d1c74c025f7326d833350f78)
  - fixed 451817, 456397 (scsi_id_change.patch), 457530 (config_space_fix.patch)
    457589 (static_libaio.patch)


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-1
changelog:
  - Updated to latest Upstream 0.4.8 code: multipath-tools-080519.tgz
    (git commit id: 42704728855376d2f7da2de1967d7bc71bc54a2f)


author: Peter Jones <pjones@redhat.com> - 0.4.7-4.1
changelog:
  - Split kpartx out into its own package so dmraid can use it without
    installing multipathd
  - Fix a segfault in kpartx


author: Tom Lane <tgl@redhat.com> 2:1.5.12-1
changelog:
  - Update to libpng 1.5.12 for minor bug fixes
  - Activate chunk size limits by default, with a very generous default limit


author: Tom Lane <tgl@redhat.com> 2:1.5.10-3
changelog:
  - Remove compat subpackage (it's now a separate package "libpng12")
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 2:1.5.6-2
changelog:
  - Don't include libpng12.pc in the compat subpackage; instead just offer a
    phony Provides: for it in the devel subpackage


author: Tom Lane <tgl@redhat.com> 2:1.5.6-1
changelog:
  - Update to new major release series 1.5.x; includes source-code-incompatible
    API changes and a soname version bump
  - Temporarily package 1.2.46 shared library (only) in libpng-compat subpackage
    so that dependent packages won't be broken while rebuilding proceeds


author: Tom Lane <tgl@redhat.com> 2:1.2.46-1
changelog:
  - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690,
    CVE-2011-2691, CVE-2011-2692
  Resolves: #717509
  Resolves: #721307


author: Tom Lane <tgl@redhat.com> 2:1.2.16-1
changelog:
  - Update to libpng 1.2.16
  Resolves: #211705, #216706, #227334
  - Separate libpng.a into a -static subpackage
  - Other minor packaging fixes per Fedora merge review
  Resolves: #226038


author: Matthias Clasen <mclasen@redhat.com> 2:1.2.5-7
changelog:
  - Replace the patches for individual security problems with the
    cumulative patch issued by the png developers. 
  - Build for FC1


author: Matthias Clasen <mclasen@redhat.com> - 2:1.2.5-3
changelog:
  - Reinstate and improve the transfix patch which got lost sometime ago, 
    but is still needed for CAN-2002-1363 (#125934)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - s/Copyright/License/
  - fix weird versioning system (epoch was set to "2" in the main
    package, serial to "1" in the devel package. Huh?)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Remove the workaround for Bug #20018 (from Oct 30).
    Qt 2.2.2 fixes the problem the workaround addressed.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Work around a problem causing konqueror to segfault in image preview
    mode (Bug #20018)
  - Copy SuSE 7.0's patch to handle bad chunks


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - we are Serial: 1 now because we are reverting the 1.0.2 version from 5.2
    beta to this prior one
  - install man pages; set defattr defaults


author: Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-7
changelog:
  - fix use-after-free in delayed newc link processing (#1602575)
  - fix a few obvious resource leaks and strcpy() misuses (#1602575)


author: Pavel Raiskup <praiskup@redhat.com> - 3.3.2-4
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Pavel Raiskup <praiskup@redhat.com> - 3.3.1-1
changelog:
  - the latest release, per release notes:
    https://groups.google.com/forum/#!topic/libarchive-discuss/jfc7lBfrvVg


author: Pavel Raiskup <praiskup@redhat.com> - 3.2.0-1
changelog:
  - new upstream release 3.2.0 (rhbz#1330345), per release notes:
    https://groups.google.com/d/msg/libarchive-discuss/qIzW7doKzxA/MVbUkjlNAAAJ


author: Pavel Raiskup <praiskup@redhat.com> - 3.0.4-3
changelog:
  - better install manual pages for libarchive/bsdtar/bsdcpio (# ... )
  - several fedora-review fixes ...:
  - Source0 has moved to github.com
  - remove trailing white spaces
  - repair summary to better describe bsdtar/cpiotar utilities


author: EL Errata <el-errata_ww@oracle.com> - 10.10.3.0.11-1.0.1
changelog:
  - Add oracle-linux.patch
  - Add modify_to_suitable_os_release.patch
  - Added patch to properly identify oracle as redhat (Alex Burmashev)


author: Honggang Li <honli@redhat.com> - 10.3.1.0-9
changelog:
  - Rebase to latest upstream branch v10_3_1 as required.
  - Clean up change log.
  - Apply Epoch tag.
  - Resolves: bz1382796


author: Michal Schmidt <mschmidt@redhat.com> - 10.0.0.0-436
changelog:
  - Update to new upstream snapshot with unbundled 3rd party software.
  - Follow upstream spec file changes.
  - Related: bz1173309


author: Ondrej Dubaj <odubaj@redhat.com> - 3.26.0-10
changelog:
  - Fixed CVE-2020-13632 (#1845572)
  - Fixed CVE-2020-13631 (#1845474)
  - Fixed CVE-2020-13630 (#1845153)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.26.0-5
changelog:
  - Fixed CVE-2019-13752 (#1786529) 
  - Fixed CVE-2019-13753 (#1786535) 
  - Fixed CVE-2019-13734 (#1786509) 
  - Fixed CVE-2019-19924 (#1789776)
  - Fixed CVE-2019-19923 (#1789812)
  - Fixed CVE-2019-19925 (#1789808)
  - Fixed CVE-2019-19959 (#1789823)


author: Petr Kubat <pkubat@redhat.com> - 3.26.0-1
changelog:
  - Updated to version 3.26.0 (https://sqlite.org/releaselog/3_26_0.html)
    Fixes fts3/4 corrupt database exploit (#1659684)


author: Petr Kubat <pkubat@redhat.com> - 3.22.0-1
changelog:
  - Fixed issue with some e_expr tests failing i686
  - Fixed issue with a fts3rank test failing on big-endian systems


author: Petr Kubat <pkubat@redhat.com> - 3.19.3-1
changelog:
  - Updated to version 3.19.3 (https://sqlite.org/releaselog/3_19_3.html)
  - Better detection of CVE-2017-10989 (#1469673)


author: Petr Kubat <pkubat@redhat.com> - 3.18.0-1
changelog:
  - Updated to version 3.18.0 (https://sqlite.org/releaselog/3_18_0.html)
  - Modify sync2.test to pass with DIRSYNC turned off


author: Nils Philippsen <nils@redhat.com> - 3.11.0-2
changelog:
  - add obsoletes/conflicts to make updates on multi-lib systems work (#1310441)
  - make -devel package depend on arch-specific -libs (not main) package


author: Jan Stanek <jstanek@redhat.com> - 3.10.2-1
changelog:
  - Updated to version 3.10.2 (http://sqlite.org/releaselog/3_10_2.html)
  - Enabled JSON1 Extension (rhbz#1277387)
  - Made test failure nonfatal on MIPS (rhbz#1294888)


author: Jan Stanek <jstanek@redhat.com> - 3.8.8-1
changelog:
  - Updated to version 3.8.8 (https://sqlite.org/releaselog/3_8_8.html)
  - Recreated patches to work on current version.


author: Jan Stanek <jstanek@redhat.com> - 3.8.7-1
changelog:
  - Updated to version 3.8.7 (http://sqlite.org/releaselog/3_8_7.html)
  - Dropped patch for problem fixed upstream


author: Jan Stanek <jstanek@redhat.com> - 3.8.5-1
changelog:
  - Update to version 3.8.5 (http://www.sqlite.org/releaselog/3_8_5.html)
  - Dropped patch already included upstream


author: Jan Stanek <jstanek@redhat.com> - 3.8.4.3-1
changelog:
  - Update to version 3.8.4.3 (http://www.sqlite.org/releaselog/3_8_4_3.html)
  - Changed patch for rhbz#1075889 to upstream version
    Related: #1075889


author: Honza Horak <hhorak@redhat.com> - 3.8.4.2-3
changelog:
  - Revert part of the upstream commit dca1945aeb3fb005, since it causes
    nautilus to crash
    Related: #1075889


author: Jan Stanek <jstanek@redhat.com> 3.8.3-1
changelog:
  - Update to 3.8.3 (http://www.sqlite.org/releaselog/3_8_3.html)
  - Dropped man-page patch - included upstream


author: Jan Stanek <jstanek@redhat.com> - 3.7.16.2-1
changelog:
  - update to 3.7.16.2 (http://www.sqlite.org/releaselog/3_7_16_2.html)
  - add support for aarch64 (rerunning autoconf) (#926568)


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.15-1
changelog:
  - update to 3.7.15 (http://www.sqlite.org/releaselog/3_7_15.html)
  - fix an old incorrect date in spec changelog


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.13-1
changelog:
  - update to 3.7.13 (http://www.sqlite.org/releaselog/3_7_13.html)
  - drop no longer needed savepoint relase patch


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.7.1-1
changelog:
  - update to 3.7.7.1 (http://www.sqlite.org/releaselog/3_7_7_1.html)
  - autoconf no longer needed for build, libdl check finally upstreamed


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.4-1
changelog:
  - update to 3.7.4 (http://www.sqlite.org/releaselog/3_7_4.html)
  - deal with upstream source naming, versioning and format changing
  - fixup wal2-test expections wrt SQLITE_DISABLE_DIRSYNC use


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.23-1
changelog:
  - update to 3.6.23 (http://www.sqlite.org/releaselog/3_6_23.html)
  - drop the lemon sprintf patch, upstream doesn't want it
  - make test-suite errors fail build finally


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.18-1
changelog:
  - update to 3.6.18 (http://www.sqlite.org/releaselog/3_6_18.html)
  - drop no longer needed test-disabler patches


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.17-1
changelog:
  - update to 3.6.17 (http://www.sqlite.org/releaselog/3_6_17.html)
  - disable to failing tests until upstream fixes


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.14-1
changelog:
  - update to 3.6.14 (http://www.sqlite.org/releaselog/3_6_14.html)
  - merge-review cosmetics (#226429)
    - drop ancient sqlite3 obsoletes
    - fix tab vs space whitespace issues
    - remove commas from summaries
  - fixup io-test fsync expectations wrt SQLITE_DISABLE_DIRSYNC


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.12-2
changelog:
  - disable strict aliasing to work around brokenness on 3.6.12 (#494266)
  - run test-suite on build but let it fail for now


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.6.2-2
changelog:
  - require tcl(abi) in sqlite-tcl subpackage (#474034)
  - move tcl extensions to arch-specific location
  - enable dependency extraction on the tcl dso
  - require pkgconfig in sqlite-devel


author: Panu Matilainen <pmatilai@redhat.com> - 3.5.9-2
changelog:
  - Remove references to temporary registers from cache on release (#463061)
  - Enable loading of external extensions (#457433)


author: Paul Nasrat <pnasrat@redhat.com> - 3.3.6-1
changelog:
  - Update to 3.3.6
  - Fix typo  (#189647)
  - Enable threading fixes (#181298)
  - Conditionalize static library


author: Jens Petersen <petersen@redhat.com> - 3.1-12
changelog:
  - protect install-info in the rpm scriptlets
    https://fedoraproject.org/wiki/Packaging:Scriptlets#Texinfo


author: Dennis Gilmore <dennis@ausil.us> - 3.0.10-3
changelog:
  - drop back to 3.0.10, 3.0.11 was never pushed anywhere as the soname bump broke buildroots
  - as 3.0.11 never went out no epoch needed.


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.26-2
changelog:
  - Add DNSTAP support (#1854148), new dnstap-read tool
  - Add JSON support in statistics-channel (#1899257)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.25-1
changelog:
  - Update to 9.11.25
  - Require libcap from devel package
  - Fix crash on NTA recheck failure (#1893761)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.20-5
changelog:
  - Fix tsig-request verify (CVE-2020-8622)
  - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
  - Correct update-policy type subdomain to match documentation (CVE-2020-8624)
  - Include available test


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.20-2
changelog:
  - Add manual page for dnssec-importkey-pkcs11 (#1666785)
  - Add versioned depends to all library subpackages


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.12-2
changelog:
  - Add GeoLite2 support (#1564443)
  - Add GeoIP to bind-chroot (#1497646)
  - Fix wrong default GeoIP directory (#1768258)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2
changelog:
  - Add support for OpenSSL provided random data
  - Disable often failing unit test random_test
  - Add /dev/urandom to chroot


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P1
changelog:
  - Fix chroot devices upgrade warning (#1592872)
  - Automatically replace obsoleted ISC DLV key with root key (#1595782)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P1
changelog:
  - Update to 9.11.4-P1
  - Adds root key sentinel support
  - Large IXFR zone transfers are rejected to prevent journal corruption
  - Fixes CVE-2018-5740


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2
changelog:
  - Install generated manual pages
  - Remove system-config-bind from manual
  - Disable GeoIP support (#1609856)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.3-15
changelog:
  - Use new config file named-chroot.files for chroot setup (#1429656)
  - Fix chroot devices file verification (#1592873)
  - Prevent errors on bind-chroot uninstall when running (#1600583)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.3-2.b1
changelog:
  - Require openssl-devel and libcap-devel from bind-export-devel
  - Conflict with bind99-devel
  - Change spec globals to rpmbuild --with feature


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-11.P1
changelog:
  - Use versioned provides
  - Fix starting of unit tests
  - Forward export libs path to isc-config
  - Rename export devel subpackage to bind-export-devel


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-4
changelog:
  - Enable unit tests with kyua tool (#1532694)
  - Provide internal tool to prepare softhsm token storage
  - Proper fix for python3-bind subpackage directory ownership (#1522944)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-2
changelog:
  - Build against mariadb-connector-c-devel (#1493615)
  - Include DNSKEY 20326 also in trusted-key.key (#1505476)
  - Fix dynamic symbols conflict with ldap (#1205168)
  - Use hmac-sha256 for new RNDC keys (#1508003)
  - Include protocols and services in chroot


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-1
changelog:
  - Update to 9.11.2
  - Add recursing and secroots file into default and sample config
  - Fix nsupdate GSSAPI auth against AD server (#1484451)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.0-6.P2
changelog:
  - RTLD_DEEPBIND conflicts with pkcs11 libraries, skip it for dyndb (#1410433)
  - Fix some rpm warnings


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.3-13.P4
changelog:
  - Remove NM dispatcher script, since it is not needed any more (#1277257)
  - Replaced After=network-online.target with After=network.target in all unit files


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.3-9.P2
changelog:
  - Commented out bindkeys-file statement in default configuration (#1223365#c3)
  - Removed unrecognized configure option --enable-developer
  - Added configure option --enable-full-report to get report on enabled features


author: Robert Scheck <robert@fedoraproject.org> - 32:9.10.3-8.P2
changelog:
  - Remove unrecognized build options for %configure
  - Own %{_includedir}/bind9 directory in -lite-devel
  - Fixed building without (optional) PKCS#11 support


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.2-2
changelog:
  - enable tuning for large systems - increases hardcoded internal limits
  - enable GeoIP access control feature


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.2-1
changelog:
  - update to 9.10.2 stable
  - remove parallel-build patch after discussion with upstream [ISC-Bugs #38739]


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.2-0.1.rc1
changelog:
  - update to 9.10.2rc1
  - fix nsupdate server auto-detection (#1184151)
  - drop merged patch bind99-rh985918.patch


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.6-4
changelog:
  - Fixed systemctl path in logrotate configuration (#1148360)
  - drop engine_pkcs11 dependency, since we use native PKCS#11 implementation


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.6-2
changelog:
  - Added native PKCS#11 functionality (#1097752)
  - bind-sdb now requires bind due to configuration and other utilities
  - bind-pkcs11 now requires bind due to configuration and other utilities


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.6-1
changelog:
  - Update to 9.9.6
  - drop merged patches and rebase some of existing patches
  - Add architecture specific dependencies.
  - Fix assert in dig when using +sigchase (#985918)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.5-2
changelog:
  - dlz_dlopen driver could return the wrong error leading to a segfault (#1052781)
  - Fix race condition when freeing fetch object (ISC-Bugs #35385)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-10
changelog:
  - Split chroot package for named and named-sdb
  - Extract setting-up/destroying of chroot to a separate systemd service (#997030)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-5
changelog:
  - Create symlink /var/named/chroot/var/run -> /var/named/chroot/run
  - Added session-keyfile statement into default named.conf since we use /run/named


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-1
changelog:
  - update to 9.9.3
  - install dns/update.h header
  - update RRL patch to the latest version 9.9.3-rl.150.20


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2
changelog:
  - update to 9.9.3rc2
  - part of bind97-exportlib.patch not needed any more
  - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source
  - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch
  - bind99-opts.patch merged


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1
changelog:
  - Include recursion Warning in named.conf and named.conf.sample (#740894)
  - Include managed-keys-directory statement in named.conf.sample (#948026)


author: Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1
changelog:
  - update to 9.9.3rc1
  - bind-96-libtool2.patch has been merged
  - fix bind tmpfiles.d for named.pid /run migration (#920713)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1
changelog:
  - Corrected IP addresses in named.ca (#901741)
  - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)


author: Adam Tkac <atkac redhat com> 32:9.9.2-6.P1
changelog:
  - generate /etc/rndc.key during named service startup if doesn't exist
  - increase startup timeout in systemd units to 90sec (default)
  - fix IDN related statement in dig.1 manpage


author: Adam Tkac <atkac redhat com> 32:9.9.2-1
changelog:
  - update to 9.9.2
  - bind97-rh714049.patch has been dropped
  - patches merged
    - bind98-rh816164.patch


author: Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2
changelog:
  - fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045)
  - changed %define macros to %global and fixed several rpmlint warnings


author: Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2
changelog:
  - Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047)
  - Fixed path to libdb.so in config.dlz.in


author: Adam Tkac <atkac redhat com> 32:9.9.0-1
changelog:
  - update to 9.9.0
  - load dynamic DBs later (and update dyndb patch)
  - fix memory leak in named during processing of rndc command
  - don't call `rndc-confgen -a` in "post" section
  - fix some packaging bugs in bind-chroot


author: Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2
changelog:
  - update to 9.9.0b2 (CVE-2011-4313)
  - patches merged
    - bind97-rh700097.patch
    - bind99-cinfo.patch


author: Adam Tkac <atkac redhat com> 32:9.8.1-1
changelog:
  - update to 9.8.1
  - ship /etc/trusted-key.key (needed by dig)
  - use select instead of epoll in export libs (#735103)


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1
changelog:
  - fix DLZ related compilation issues
  - make /etc/named.{root,iscdlv}.key world-readable
  - add bind-libs versioned requires to bind pkg


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1
changelog:
  - fix rare race condition in request.c
  - print "the working directory is not writable" as debug message
  - re-add configtest target to initscript
  - initscript: sybsys name is always named, not named-sdb
  - nsupdate returned zero when target zone didn't exist (#700097)
  - nsupdate could have failed if server has multiple IPs and the first
    was unreachable (#714049)


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1
changelog:
  - update to 9.8.1rc1
  - patches merged
    - bind97-rh674334.patch
    - bind97-cleanup.patch
    - bind98-includes.patch


author: Adam Tkac <atkac redhat com> 32:9.7.3-1
changelog:
  - update to 9.7.3
  - fix dig +trace on dualstack systems (#674334)
  - fix linkage order when building on system with older BIND (#665971)
  - reduce number of gcc warnings


author: Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1
changelog:
  - fix "service named status" when used with named-sdb
  - don't check MD5, size and mtime of sysconfig/named


author: Adam Tkac <atkac redhat com> 32:9.7.2-5.P2
changelog:
  - move BIND9 internal libs back to %{_libdir}
  - add "-export" suffix to public libraries (-lite subpkg)


author: Adam Tkac <atkac redhat com> 32:9.7.2-3.P2
changelog:
  - new bind-libs-lite and bind-lite-devel subpkgs which contain
    public version of BIND 9 libraries
  - don't ship devel files for internal version of BIND 9 libraries


author: Adam Tkac <atkac redhat com> 32:9.7.1-3.P1
changelog:
  - remove outdated Copyright.caching-nameserver file
  - remove rfc1912.txt, it is already located in %doc/rfc directory
  - move COPYRIGHT to the bind-libs subpkg
  - add COPYRIGHT to the -pkcs11 subpkg


author: Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1
changelog:
  - update to 9.7.1b1
  - make /var/named/dynamic as a default directory for managed DNSSEC keys
  - add patch to get "managed-keys-directory" option working
  - patches merged
    - bind97-managed-keyfile.patch
    - bind97-rh554316.patch


author: Adam Tkac <atkac redhat com> 32:9.7.0-2
changelog:
  - improve automatic DNSSEC reconfiguration trigger
  - initscript now returns 2 in case that action doesn't exist (#523435)
  - enable/disable chroot when bind-chroot is installed/uninstalled


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2
changelog:
  - obsolete dnssec-conf
  - automatically update configuration from old dnssec-conf based
  - improve default configuration; enable DLV by default
  - remove obsolete triggerpostun from bind-libs subpackage


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1
changelog:
  - update to 9.7.0b1
  - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC
    keys


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2
changelog:
  - improve chroot related documentation (#507795)
  - add NetworkManager dispatcher script to reload named when network interface is
    activated/deactivated (#490275)
  - don't set/unset named_write_master_zones SELinux boolean every time in
    initscript, modify it only when it's actually needed


author: Adam Tkac <atkac redhat com> 32:9.6.1-9.P1
changelog:
  - next attempt to fix the postun trigger (#520385)
  - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patch


author: Adam Tkac <atkac redhat com> 32:9.6.1-3
changelog:
  - fix broken symlinks in bind-libs (#509635)
  - fix typos in /etc/sysconfig/named (#509650)
  - add DEBUG option to /etc/sysconfig/named (#510283)


author: Adam Tkac <atkac redhat com> 32:9.6.1-2
changelog:
  - improved "chroot automount" patches (#504596)
  - host should fail if specified server doesn't respond (#507469)


author: Adam Tkac <atkac redhat com> 32:9.6.1-1
changelog:
  - 9.6.1 release
  - simplify chroot maintenance. Important files and directories are mounted into
    chroot (see /etc/sysconfig/named for more info, #504596)
  - fix doc/named.conf.default perms


author: Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1
changelog:
  - update the patch for dynamic loading of database backends
  - create %{_libdir}/bind directory
  - copy default named.conf to doc directory, shared with s-c-bind (atkac)


author: Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1
changelog:
  - update the patch for dynamic loading of database backends
  - fix dns_db_unregister()
  - useradd now takes "-N" instead of "-n" (atkac, #495726)
  - print nicer error msg when zone file is actually a directory (atkac, #490837)


author: Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1
changelog:
  - 9.6.1b1 release
  - patches merged
    - bind-96-isc_header.patch
    - bind-95-rh469440.patch
    - bind-96-realloc.patch
    - bind9-fedora-0001.diff
  - use -version-number instead of -version-info libtool param


author: Adam Tkac <atkac redhat com> 32:9.6.0-11.P1
changelog:
  - fall back to insecure mode when no supported DNSSEC algorithm is found
    instead of SERVFAIL
  - don't fall back to non-EDNS0 queries when DO bit is set


author: Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1
changelog:
  - 9.6.0rc1 release
  - patches merged
    - bind-9.2.0rc3-varrun.patch
    - bind-95-sdlz-include.patch
    - bind-96-libxml2.patch
  - fixed rare use-after-free problem in host utility (#452060)
  - enabled chase of DNSSEC signature chains in dig


author: Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1
changelog:
  - 9.6.0b1 release
  - don't build ODBC and Berkeley DB DLZ drivers
  - end of bind-chroot-admin script, copy config files to chroot manually
  - /proc doesn't have to be mounted to chroot
  - temporary use libbind from 9.5 series, noone has been released for 9.6 yet


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2
changelog:
  - 9.5.1b2 release
  - patches merged
    - bind95-rh454783.patch
    - bind-9.5-edns.patch
    - bind95-rh450995.patch
    - bind95-rh457175.patch


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1
changelog:
  - static libraries are no longer supported
  - IP acls weren't merged correctly (#457175)
  - use fPIE on sparcv9/sparc64 (Dennis Gilmore)
  - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1
changelog:
  - 9.5.1b1 release (CVE-2008-1447)
  - dropped bind-9.5-recv-race.patch because upstream doesn't want it


author: Adam Tkac <atkac redhat com> 32:9.5.0-36.1
changelog:
  - removed dns-keygen utility in favour of rndc-confgen -a (#449287)
  - some minor sample fixes (#449274)


author: Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1
changelog:
  - updated to 9.5.0rc1
  - merged patches
    - bind-9.5-libcap.patch
  - make binaries readable by others (#427826)


author: Adam Tkac <atkac redhat com> 32:9.5.0-32.b3
changelog:
  - reverted "any" patch, upstream says not needed
  - log EDNS failure only when we really switch to plain EDNS (#275091)
  - detect configuration file better


author: Adam Tkac <atkac redhat com> 32:9.5.0-30.b3
changelog:
  - 9.5.0b3 release
  - dropped patches (upstream)
    - bind-9.5-transfer-segv.patch
    - bind-9.5-mudflap.patch
    - bind-9.5.0-generate-xml.patch
    - bind-9.5-libcap.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-27.b2
changelog:
  - removed conditional build with libefence (use -fmudflapth instead)
  - fixed building of DLZ stuff (#432497)
  - do not build Berkeley DB DLZ backend
  - temporary build with --disable-linux-caps and without threads (#433102)
  - update named.ca file to affect IPv6 changes in root zone


author: Adam Tkac <atkac redhat com> 32:9.5.0-26.b2
changelog:
  - build with -D_GNU_SOURCE (#431734)
  - improved fix for #253537, posttrans script is now used
  - improved fix for #400461
  - 9.5.0b2
    - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch
      - only named, named-sdb and lwresd are PIE
    - bind-9.5-sdb.patch has been updated
    - bind-9.5-libidn.patch has been updated
    - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch
    - removed bind-9.5-gssapi-header.patch (upstream)
    - removed bind-9.5-CVE-2008-0122.patch (upstream)
  - removed bind-9.2.2-nsl.patch
  - improved sdb_tools Makefile.in


author: Adam Tkac <atkac redhat com> 32:9.5.0-24.b1
changelog:
  - removed bind-9.3.2-prctl_set_dumpable.patch (upstream)
  - allow parallel building of libdns library
  - CVE-2008-0122


author: Adam Tkac <atkac redhat com> 32:9.5.0-23.b1
changelog:
  - fixed initscript wait loop (#426382)
  - removed dependency on policycoreutils and libselinux (#426515)


author: Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7
changelog:
  - bind-9.5-random_ports.patch was removed because upstream doesn't
    like it. query-source{,v6} options are sufficient (#391931)
  - bind-chroot-admin called restorecon on /proc filesystem (#405281)


author: Adam Tkac <atkac redhat com> 32:9.5.0-17.a7
changelog:
  - 9.5.0a7
  - dropped patches (upstream)
    - bind-9.5-update.patch
    - bind-9.5-pool_badfree.patch
    - bind-9.5-_res_errno.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6
changelog:
  - added bind-sdb again, contains SDB modules and DLZ modules
  - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-12.a6
changelog:
  - bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are
    obsoleted by upstream bind-9.5-_res_errno.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6
changelog:
  - initscript failure message is now printed correctly (#277981,
    Quentin Armitage (quentin armitage org uk) )


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6
changelog:
  - removed end dots from Summary sections (skasal@redhat.com)
  - fixed wrong file creation by autotools patch (skasal@redhat.com)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.a6
changelog:
  - start using --disable-isc-spnego configure option
    - remove bind-9.5-spnego-memory_management.patch (source isn't
      compiled)


author: Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6
changelog:
  - added new initscript option KEYTAB_FILE which specified where
    is located kerberos .keytab file for named service
  - obsolete temporary bind-9.5-spnego-memory_management.patch by
    bind-9.5-gssapictx-free.patch which conforms BIND coding standards
    (#251853)


author: Adam Tkac <atkac redhat com> 32:9.5.0-10.a6
changelog:
  - dropped direct dependency to /etc/openldap/schema directory
  - changed hardcoded paths to macros
  - fired away code which configure LDAP server


author: Adam Tkac <atkac redhat com> 32:9.5.0-9.a6
changelog:
  - disable 64bit dlz driver patch on alpha and ia64 (#251298)
  - remove wrong malloc functions from lib/dns/spnego.c (#251853)


author: Adam Tkac <atkac redhat com> 32:9.5.0-8.a6
changelog:
  - minor next improvements on autotools patch
  - dig and host utilities now using libidn instead idnkit for
    IDN support


author: Adam Tkac <atkac redhat com> 32:9.5.0-6.a6
changelog:
  - updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and
    CVE-2007-2926
  - fixed building on 64bits


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-5
changelog:
  - integrated "autotools" patch for testing purposes (upstream will
    accept it in future, for easier building)


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9
changelog:
  - removed bind-sdb package (default named has compiled SDB backend now)
  - integrated DLZ (Dynamically loadable zones) drivers
  - integrated GSS-TSIG support (RFC 3645)
  - build with -O0 (many new features, potential core dumps will be more useful)


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-2
changelog:
  - minor changes in default configuration
  - fix h_errno assigment during resolver initialization (unbounded recursion, #245857)
  - removed wrong patch to #150288


author: Adam Tkac <atkac redhat com> 31:9.4.1-7
changelog:
  - marked caching-nameserver as obsolete (#244604)
  - fixed typo in initscript (causes that named doesn't detect NetworkManager
    correctly)
  - next cleanup in configuration - moved configfiles into config.tar
  - removed delay between start & stop in restart function in named.init


author: Adam Tkac <atkac redhat com> 31:9.4.1-6
changelog:
  - major changes in initscript. Could be LSB compatible now
  - removed caching-nameserver subpackage. Move configs from this
    package to main bind package as default configuration and major
    configuration cleanup


author: Adam Tkac <atkac redhat com> 31:9.4.1-5
changelog:
  - very minor compatibility change in bind-chroot-admin (line 215)
  - enabled IDN support by default and don't distribute IDN libraries
  - specfile cleanup
  - add dynamic directory to /var/named. This directory will be primarily used for
    dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist


author: Adam Tkac <atkac redhat com> 31:9.4.1-4
changelog:
  - removed ldap-api patch and start using deprecated API
  - fixed minor problem in bind-chroot-admin script (#241103)


author: Adam Tkac <atkac redhat com> 31:9.4.1-3
changelog:
  - fixed bind-chroot-admin dynamic DNS handling (#239149)
  - updated zone-freeze patch to latest upstream
  - ldap sdb has been rewriten to latest api (#239802)


author: Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7
changelog:
  - improved "zone freeze patch" - if multiple zone with same name exists
    no zone is freezed
  - minor cleanup in caching-nameserver's config file
  - fixed race-condition in dbus code (#235809)
  - added forgotten restorecon statement in bind-chroot-admin


author: Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7
changelog:
  - removed DEBUGINFO option because with this option (default) was bind
    builded with -O0 and without this flag no debuginfo package was produced.
    (I want faster bind => -O2 + debuginfo)
  - fixed zone finding (#236426)


author: Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7
changelog:
  - removed query-source[-v6] options from caching-nameserver config
    (#209954, increase security)
  - throw away idn. It won't be ready in fc7


author: Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7
changelog:
  - prepared bind to merge review
  - added experimental idn support to bind-utils utils (not enabled by default yet)
  - change chroot policy in caching-nameserver post section
  - fixed bug in bind-chroot-admin - rootdir function is called properly now


author: Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7
changelog:
  - added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>)
  - moved bind-chroot-admin script to chroot package
  - bind-9.3.2-redhat_doc.patch is always applied (#231738)


author: Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7
changelog:
  - updated to 9.4.0
  - bind-chroot-admin now sets EAs correctly (#213926)
  - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)


author: Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7
changelog:
  - fixed building without libbind
  - fixed post section (selinux commands is now in if-endif statement)
  - prever macro has been removed from version


author: Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7
changelog:
  - package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs)
  - Resolves: #214208


author: Martin Stransky <stransky@redhat.com> - 31:9.3.3-2
changelog:
  - added namedGetForwarders written in shell (#176100),
    created by Baris Cicek <baris@nerd.com.tr>.


author: Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3
changelog:
  - added back an interval to restart
  - renamed package, it should meet the N-V-R criteria
  - fix for #216185: bind-chroot-admin able to change root mode 750
  - added fix from #215997: incorrect permissions on dnszone.schema
  - added a notice to init script when /etc/named.conf doesn't exist (#216075)


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-6
changelog:
  - fix for #200465: named-checkzone and co. cannot be run as non-root user
  - fix for #212348: chroot'd named causes df permission denied error
  - fix for #211249, #211083 - problems with stopping named
  - fix for #212549: init script does not unmount /proc filesystem
  - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1,
      added edns-enable options to named configuration file which can suppress
      EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options)
  - fix for #212961: bind-chroot doesn't clean up its mess on %preun
  - update to 9.3.3rc3, removed already merged patches


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-3
changelog:
  - added fix from #209400 - Bind Init Script does not create 
    the PID file always, created by Jeff Means
  - added timeout to stop section of init script. 
    The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT
    shell variable.


author: Martin Stransky <stransky@redhat.com> - 30:9.3.2-37
changelog:
  - fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory
  - fix for #202547 - file_contexts: invalid context


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32
changelog:
  - fix addenda to bug 189789: 
    determination of selinux enabled was still not 100% correct in bind-chroot-admin
  - fix addenda to bug 196398:
    make named.init test for NetworkManager being enabled AFTER testing for -D absence;
    named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable
    auto-enable of named dbus support if NetworkManager enabled.


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30
changelog:
  - fix bug 196398 - Enable -D option automatically in initscript
    if NetworkManager enabled in any runlevel.
  - fix namedGetForwarders for new dbus
  - fix bug 195881 - libbind.so should be owned by bind-libbind-devel


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6
changelog:
  - fix bugs 191093, 189789
  - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version:
    ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): 
    o change 2024 / bug 16027:
      named emitted spurious "zone serial unchanged" messages on reload
    o change 2013 / bug 15941:
      handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully
    o change 2009 / bug 15808: coverity fixes
    o change 1997 / bug 15818: 
      named was failing to replace negative cache entries when a positive one
      for the type was learnt
    o change 1994 / bug 15694: OpenSSL 0.9.8 support
    o change 1991 / bug 15813:
      The configuration data, once read, should be treated as readonly.
    o misc. validator fixes 
    o misc. resolver fixes
    o misc. dns fixes
    o misc. isc fixes
    o misc. libbind fixes
    o misc. isccfg fix
    o misc. lwres fix
    o misc. named fixes
    o misc. dig fixes
    o misc. nsupdate fix
    o misc. tests fixes


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22
changelog:
  - apply upstream patch for ncache_adderesult segfault bug 173961 addenda
  - fix bug 188382: rpm --verify permissions inconsistencies
  - fix bug 189186: use /sbin/service instead of initscript
  - rebuild for new gcc, glibc-kernheaders


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20
changelog:
  - fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 
    (upstream bugs #15642, #15528 ?)
  - allow named ability to generate core dumps after setuid (upstream bug #15753)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16
changelog:
  - fix bug 187286: 
       prevent host(1) printing duplicate 'is an alias for' messages
       for the default AAAA and MX lookups as well as for the A lookup
       (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups).
       This is upstream bug #15702 fixed in the unreleased bind-9.3.3
  - fix bug 187333: fix SOURCE24 and SOURCE25 transposition


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14
changelog:
  - fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup
  - add '%doc' sample configuration files in /usr/share/doc/bind*/sample
  - rebuild with new gcc and glibc


author: Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8
changelog:
  - Do not allow package to be installed if named:25 userid creation fails
  - Give libbind a pkg-config file
  - remove restorecon from bind-chroot-admin (not required).
  - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6
changelog:
  - replace caching-nameserver with bind-config sub-package
  - fix bug 177595: handle case where $ROOTDIR is a link in initscript
  - fix bug 177001: bind-config creates symlinks OK now
  - fix bug 176388: named.conf is now never replaced by any RPM
  - fix bug 176248: remove unecessary creation of rpmsave links
  - fix bug 174925: no replacement of named.conf
  - fix bug 173963: existing named.conf never modified
  - major .spec file cleanup


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4
changelog:
  - regenerate redhat_doc patch for non-DBUS builds
  - allow dbus builds to work with dbus version < 0.6 (bz #179816)


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24
changelog:
  - allow D-BUS support to work in bind-chroot environment:
    workaround latest selinux policy by mounting /var/run/dbus/
    under chroot instead of /var/run/dbus/system-bus-socket


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22
changelog:
  - fix bug 172632 - remove .la files
  - ship namedGetForwarders and namedSetForwarders scripts
  - fix detection of -D option in chroot


author: Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20
changelog:
  - Allow the -D enable D-BUS option to be used within bind-chroot .
  - fix bug 171226: supply some documentation for pgsql SDB .


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18
changelog:
  - fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() -
        task->state != task_ready and will cause Abort in task.c if process
        is waiting for NameOwnerChanged to do a SetForwarders


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12
changelog:
  - fix bug 168302: use %{__cc} for compiling dns-keygen
  - fix bug 167682: bind-chroot directory permissions
  - fix issues with -D dbus option when dbus service not running or disabled


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10
changelog:
  - Build with D-BUS patch by default; D-BUS support enabled with named -D option
  - Enable D-BUS for named_sdb also
  - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create()
  - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server
  - fix named.init script to handle named_sdb properly
  - fix named.init script checkconfig() to handle named '-c' option
    and make configtest, test, check configcheck synonyms


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7
changelog:
  - fix bug 160914: resolver utilities should try next server on empty referral
                    (now that glibc bug 162625 is fixed)
                    host and nslookup now by default try next server on SERVFAIL
                    (host now has '-s' option to disable, and nslookup given
                     '[no]fail' option similar to dig's [no]fail option).
  - rebuild and re-test with new glibc & gcc (all tests passed).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6
changelog:
  - fix bug 157950: dig / host / nslookup should reject invalid resolv.conf
                    files and not use uninitialized garbage nameserver values
                    (ISC bug 14841 raised).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4
changelog:
  - Fix bug 157601: give named.init a configtest function
  - Fix bug 156797: named.init should check SELinux booleans.local before booleans
  - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc
  - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat
                    BIND quirks and SELinux DDNS / slave zone file configuration
  - D-BUS patches NOT applied until dhcdbd is in FC


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbus
changelog:
  - Enhancement to allow dynamic forwarder table management and
  - DHCP forwarder auto-configuration with D-BUS


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4
changelog:
  - Rebuild for bind-sdb libpq.so.3 dependency
  - fix bug 150981: don't install libbind man-pages if no libbind
  - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...)
    to work and correct number of CPUs to be determined


author: Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5
changelog:
  - fix bug 150288: h_errno not being accessed / set correctly in libbind
  - add libbind man-pages from bind-8.4.6


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1
changelog:
  - Upgrade to 9.3.1rc1
  - Add Simplified Database Backend (SDB) sub-package ( bind-sdb )
  -     add named_sdb - ldap + pgsql + dir database backend support with
  -     'ENABLE_SDB' named.sysconfig option
  - Add BIND resolver library & includes sub-package ( libbind-devel)
  - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init
  - fix bug 146084 : shutup restorecon


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2
changelog:
  - Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named
  -                 based on 'named_write_master_zones' SELinux boolean.
  - Fix bug 143744: dig & nsupdate IPv6 timeout  (dup of 140528)


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4
changelog:
  - Fix bugs 140528 and 141113:
  - 2 second timeouts when IPv6 not configured and root nameserver's
  - AAAA addresses are queried


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2
changelog:
  - Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix}
  - Fix bug 135175: named.init must return non-zero if named is not run
  - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named
  - Fix bug 133423: bind-chroot %files entries should have been %dirs


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1
changelog:
  - BIND 9.2.4 (final release) released - source code actually
  - identical to 9.2.4rc8, with only version number change.


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14
changelog:
  - Upgrade to upstream bind-9.2.4rc8 .
  - Progress: Finally! Hooray! ISC bind now distributes:
  - o named.conf(5) and nslookup(8) manpages
  -    'bind-manpages.bz2' source can now disappear
  -    (could this have something to do with ISC bug I raised about this?)
  - o 'deprecation_msg' global has vanished
  -     bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3
changelog:
  - Fix bug 132303: if ROOTDIR line was replaced after upgrade from
  - bind-chroot-9.2.2-21, restart named


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3
changelog:
  - Fix bug 131803: replace ROOTDIR line removed by broken
  - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chroot


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10
changelog:
  - Fix bug 130121: add '%ghost' entries for files included in previous
  - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* -
  - that RPM removed after upgrade .


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fix bug 130981: add '-t' option to named-checkconf invocation in
  - named.init if chroot installed.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Remove resolver(5) manpage now in man-pages (bug 130792);
  - Don't create /dev/ entries in bind-chroot if already there (bug 127556);
  - fix bind-devel Requires (bug 130919)
  - Set default location for dumpdb & stats files to /var/named/data


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed bug 129289: bind-chroot install / deinstall
  - on install, existing config files 'safe_replace'd
  - with links to chroot copies; on uninstall, moved back.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed named.init generation of error messages on
  - 'service named stop' and 'service named reload'
  - as per bug 127775


author: Daniel Walsh <dwalsh@redhat.com> 9.2.2-13
changelog:
  - Fix config description of named.conf in chroot
  - Change named.init script to check for existence of /etc/sysconfig/network


author: Daniel Walsh <dwalsh@redhat.com> 9.2.1-12
changelog:
  - Fix log rotate to use service named reload
  - Change service named reload to give success/failure message [73770]
  - Fix File checking [75710]
  - Begin change to automatically run in CHROOT environment


author: Karsten Hopp <karsten@redhat.de> 9.2.1-7
changelog:
  - fix name of pidfine in logrotate script (#68842)
  - fix owner of logfile in logrotate script (#41391)
  - fix nslookup and named.conf man pages (output on stderr)
    (#63553, #63560, #63561, #54889, #57457)
  - add rfc1912 (#50005)
  - gzip all rfc's
  - fix typo in keygen.c (#54870)
  - added missing manpages (#64065)
  - shutdown named properly with rndc stop (#62492)
  - /sbin/nologin instead of /bin/false (#68607)
  - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381)
  - don't kill initscript when rndc fails (reload)    (#58750)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2
changelog:
  - Move libisccc, lib isccfg and liblwres from bind-utils to bind,
    they're not required if you aren't running a nameserver.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7
changelog:
  - Don't exit if /etc/named.conf doesn't exist if we're running
    chroot (#60868)
  - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders
    versions or bug #58335 will be back. "It compiles, therefore it works"
    isn't always true.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1
changelog:
  - 9.2.0rc3
  - remove ttl patch, I don't think we need this for 8.0.
  - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page
  - add lwres* man pages to -devel


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4
changelog:
  - Make sure /etc/rndc.conf isn't world-readable even after the
    %post script inserted a random key (#53009)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3
changelog:
  - Add build dependencies (#49368)
  - Make sure running service named start several times doesn't create
    useless processes (#47596)
  - Work around the named parent process returning 0 even if the config
    file is broken (it's parsed later by the child processes) (#45484)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2
changelog:
  - Add named.conf man page from bind 8.x (outdated, but better than nothing,
    - Rename the rndc key (#42895)
  - Add dnssec* man pages


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1
changelog:
  - 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for
    the version number, though.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9
changelog:
  - Work around bind 8 -> bind 9 migration problem when using buggy zone files:
    accept zones without a TTL, but spew out a big fat warning. (#31393)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Don't use the standard rndc key from the documentation, instead, create a random one
    at installation time (#26358)
  - Make /etc/rndc.conf readable by user named only, it contains secret keys


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes
    from 9.1.1rc2
  - bind requires bind-utils (#28317)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us;
    1 was fixed in a Red Hat patch already, 2 others are portability
    improvements)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Make /etc/rndc.conf and /etc/sysconfig/named noreplace
  - Make devel require bind = %{version} rather than just bind


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move run files to /var/run/named/ - /var/run isn't writable
    by the user we're running as. (Bug #20665)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed logrotate script (wrong path to kill)
  - include header files in -devel package
  - bugzilla #22049, #19147, 21606


author: Bernhard Rosenkranzer <bero@redhat.com>
changelog:
  - Fix up the initscript (Bug #13033)
  - Fix build with current glibc (Bug #12755)
  - /etc/rc.d/init.d -> /etc/init.d
  - use %{_mandir} rather than /usr/share/man


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify logrotate setup to use PID file
  - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time
  - actually bump the release this time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - provide /var/named (fix for bugs #9847, #10205)
  - preserve args when restarted via ndc(8) (bug #10227)
  - make resolv.conf(5) a link to resolver(5) (bug #10245)
  - fix SYSTYPE bug in all makefiles
  - move creation of named user from %post into %pre


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up location of named-bootconf.pl and make it executable
    (Bug #8028)
  - bind-devel requires bind


author: Preston Brown <pbrown@redhat.com>
changelog:
  - use real stop and start in named.init for restart, not ndc restart, it has
    problems when named has changed during a package update... (# 4890)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 8.2.1.
  - add named.logrotate (#3571).
  - hack around egcs-1.1.2 -m486 bug (#3413, #3485).
  - vet file list.


author: Stepan Kasal <kasal@math.cas.cz>
changelog:
  - nslookup patched:
    to count numRecords properly
    to fix subsequent calls to ls -d
    to parse "view" and "finger" commands properly
    the view hack updated for bind-8 (using sed)


author: Manuel J. Galan <manolow@step.es>
changelog:
  - Several essential modifications to build and install correctly.
  - Modified 'ndc' to avoid deprecated use of '-'


author: Scott Lampert <fortunato@heavymetal.org>
changelog:
  - Used buildroot
  - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include
    on Redhat 5.0 instead of <nlist.h>


author: Chris Leech <cleech@redhat.com> - 0.94-1
changelog:
  - new upstream location, update to 0.94
  - new devel package, upstream open-iscsi is dropping it's internal copy


author: EL Errata <el-errata_ww@oracle.com> - 1.12.8-12.0.1
changelog:
  - bus: raise fd limits before dropping privs [Orabug: 31175643]
  - fix netlink poll: error 4 (Zhenzhong Duan)


author: Martin Pitt <mpitt@redhat.com>
changelog:
  - Drop unpublished -doc package to fix FTBFS rhbz#1640736
  - Add dist-git smoketest rhbz#1625683
  - Move dbus system user creation to correct package rhbz#1634496


author: David Herrmann <dh.herrmann@gmail.com> - 1:1.12.8-2
changelog:
  - Extract 'dbus-tools' package from 'dbus-daemon' to provide all command-line
    utilities independent of the actual message bus. They are valid to be used
    with independent message-bus implementations, so they should not needlessly
    pull in dbus-daemon.


author: David Herrmann <dh.herrmann@gmail.com> - 1:1.12.8-1
changelog:
  - Extract 'dbus-common' package from 'dbus-daemon' to provide XML configuration
    and setup files as independent package ready for alternative Message Bus
    implementations to be used.


author: David Herrmann <dh.herrmann@gmail.com> - 1:1.12.8-1
changelog:
  - Turn 'dbus' package into 'dbus-daemon' package, but keep 'dbus' for
    compatibility around and make it pull in the new 'dbus-daemon' package.


author: Adam Jackson <ajax@redhat.com> - 1:1.12.0-3
changelog:
  - Don't Require: xorg-x11-xinit. We don't actually need it, and newer
    filesystem packages own the directory for us.


author: David King <amigadave@amigadave.com> - 1:1.9.14-1
changelog:
  - Update to 1.9.14
  - Update man page globs in files section
  - Build tests in a separate build directory
  - Enable installed tests, with new -tests subpackage
  - Allow extra dependencies for tests to be disabled independently of check


author: David King <amigadave@amigadave.com> - 1:1.8.12-2
changelog:
  - Drop bindir patch, and update to comply with UsrMove
  - Correct license description for multiple licenses
  - Use macroized systemd scriptlets (#850083)
  - Add some more documentation from the upstream tarball
  - Tighten subpackage dependencies by using %{?_isa}
  - Use --with-tests to conditionalize test dependencies
  - Use /run instead of /var/run
  - Remove obsolete dbus.target.wants (#1084087)


author: David King <amigadave@amigadave.com> - 1:1.8.12-1
changelog:
  - Update to 1.8.12 (#1168438)
  - Fixes CVE-2014-3635 (fd.o#83622)
  - Fixes CVE-2014-3636 (fd.o#82820)
  - Fixes CVE-2014-3637 (fd.o#80559)
  - Fixes CVE-2014-3638 (fd.o#81053)
  - Fixes CVE-2014-3639 (fd.o#80919)
  - Fixes CVE-2014-7824 (fd.o#85105)


author: Colin Walters <walters@verbum.org> - 1:1.8.4-2
changelog:
  - New upstream version:
  - Fixes CVE-2014-3477 (fd.o#78979): "local DoS in dbus-daemon"
  - Drop "make check" for now, per http://lists.freedesktop.org/archives/dbus/2014-June/016223.html
  - BR systemd-devel


author: Ville Skyttä <ville.skytta@iki.fi> - 1:1.6.18-3
changelog:
  - Adapt to unversioned docdirs; don't ship all docs in main package.
  - Fix bogus dates in %changelog and tabs vs spaces warning.


author: Colin Walters <walters@verbum.org> - 1:1.6.18-1
changelog:
  - New upstream version
  - Added backported patch which should fix the test suite; thanks to
    Yanko Kaneti for the suggestion.


author: Colin Walters <walters@verbum.org> - 1:1.6.12-2
changelog:
  - Enable all upstream tests
    Resolves: #955532
    This is fairly hacky; a much better replacement would be
    something like the InstalledTests system.  But we have to live
    with rpm and stuff for now...


author: Colin Walters <walters@verbum.org>
changelog:
  - Update to 1.4.20; closes #806082
  - Ensure /var/lib/dbus exists; this seems to have been
    dropped from upstream build rules.
  - Adapt to documentation actually being installed


author: Lennart Poettering <lpoetter@redhat.com> - 1:1.4.10-3
changelog:
  - Don't restart D-Bus on upgrades, dont' enable D-Bus, since it is statically enabled.
  - https://bugzilla.redhat.com/show_bug.cgi?id=732426


author: Colin Walters <walters@verbum.org> - 1:1.4.10-1
changelog:
  - New upstream version
  - Drop XML docs patch which is now upstream
  - Drop devhelp stuff; people should be using GDBus now.  If you
    don't, the raw doxygen is fine.


author: Colin Walters <walters@verbum.org> - 1:1.2.18-1
changelog:
  - New upstream release
    Drop all upstreamed patches.
  - start-early.patch had both bindir changes and start-early; the
    latter was upstreamed, so start-early is now bindir.patch.
    Ideally later get this partial-bindir stuff upstream.


author: Colin Walters <walters@verbum.org> - 1:1.2.16-11
changelog:
  - Drop dbus-libs requiring dbus; this was unnecessary for programs
    which happened to speak the dbus protocol but don't require
    the daemon.
    Note that libdbus does support autolaunching dbus-daemon in
    the session as an emergency fallback for legacy situations; however,
    these cases were likely to have dbus installed already (via comps).
    If they don't, well one turned to the wrong page in the choose your
    own adventure book.


author: Ray Strode <rstrode@redhat.com> - 1:1.2.16-9
changelog:
  - Fix activation of daemons (#545267)
  - Fix reload memleak (fdo #24697)
  - Don't forget about pending activations on reload (fdo #24350)
  - Fix reload race (fdo #21597)


author: Colin Walters <walters@redhat.com> - 1:1.2.16-2
changelog:
  - Explicitly add a dbus group id, fixes dbus files getting a
    random group id in cases where the RPM install order varies.
    Fixes https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=458183


author: Colin Walters <walters@redhat.com> - 1:1.2.16-1
changelog:
  - Upstream 1.2.16
  - Remove inotify patch, now upstreamed
  - Remove timeout patch, obsolete with upstream change to infinite
    timeout maximum by default


author: Matthias Clasen <mclasen@redhat.com> - 1.2.1-6
changelog:
  - Add a patch from upstream git that adds a method
    for changing the activation environment on the session bus


author: John (J5) Palmieri <johnp@redhat.com> - 1.2.1-1
changelog:
  - update to latest upstream
  - major version change is really a maint release for 1.1.20
    please read the NEWS file in the source for more information


author: David Zeuthen <davidz@redhat.com> - 1.1.20-1.el8
changelog:
  - Update to latest upstream release. Includes fix for CVE-2008-0595.
  - Drop some patches that went upstream already


author: John (J5) Palmieri <johnp@redhat.com> - 1.1.3-1
changelog:
  - new upstream version which obsoletes a number of our patches
  - doc section added for the devhelp docs


author: Dan Walsh <dwalsh@redhat.com> - 1.1.2-5.el8
changelog:
  - Reverse we_were_root check to setpcap if we were root.  Also only init
  audit if we were root.  So error dbus message will not show up when policy
  reload happens.  dbus -session will no longer try to send audit message,
  only system will.


author: David Zeuthen <davidz@redhat.com> - 1.1.2-2.el8
changelog:
  - Move system bus activation helper to /{lib,lib64}/dbus-1. Also set
    the correct mode and permissions.
  - Own the directory /usr/share/dbus-1/system-services
  - Delete the diretory /{lib,lib64}/dbus-1.0 as it's not used
  - Pass 'dbus' instead of 81 as --with-dbus-user; otherwise the setuid
    system bus activation helper fails


author: Ray Strode <rstrode@redhat.com> - 1.0.1-1
changelog:
  - Update to 1.0.1
  - Apply patch from Thiago Macieira <thiago@kde.org> to
    fix failed assertion in threading implementation
  - Drop some crazy looking build time speed optimization


author: John (J5) Palmieri <johnp@redhat.com> - 0.90-6
changelog:
  - change the arch-deps.h include directory to /usr/lib[64] instead of /lib[64]
    in the dbus-1.pc file after compile


author: John (J5) Palmieri <johnp@redhat.com> - 0.90-4
changelog:
  - add patch that pregenerates the xml introspect file so d-bus doesn't
    have to be running suring the build.


author: Karsten Hopp <karsten@redhat.de> 0.61-5.2
changelog:
  - add buildrequires libICE-devel, libSM-devel, libcap-devel
  - change buildrequires form libX11 to libX11-devel


author: John (J5) Palmieri <johnp@redhat.com> - 0.61-5
changelog:
  - Backport patch from dbus-connection.c
    - Allows interfaces to be NULL in the message header as per the spec
    - Fixes a problem with pendings calls blocking on a data starved socket


author: John (J5) Palmieri <johnp@redhat.com> 0.61-3
changelog:
  - ABI hasn't changed so add patch that makes dbus-sharp think
    it is still 0.60 (mono uses hard version names so any change
    means apps need to recompile)


author: John (J5) Palmieri <johnp@redhat.com> 0.60-7
changelog:
  - Add patch to fix the python callchain
  - Symlink dbus-send to /usr/bin because some applications
    look for it there


author: John (J5) Palmieri <johnp@redhat.com> 0.60-5
changelog:
  - move base libraries and binaries to /bin and /lib so they can be started
    before /usr is mounted on network mounted /usr systems
  - have D-Bus start early


author: John (J5) Palmieri <johnp@redhat.com> - 0.36.2-1
changelog:
  - upgrade to 0.36.2 which fixes an exploit where
    users can attach to another user's session bus (CAN-2005-0201)


author: John (J5) Palmieri <johnp@redhat.com> - 0.36-1
changelog:
  - Upgrade to dbus-0.36
  - Split modules that go into %{_lib}/python2.4/site-packages/dbus
  and those that go into %{python_sitelib}/dbus (they differ on 64bit)
  - Renable Qt bindings since packages in core can use them


author: John (J5) Palmieri <johnp@redhat.com> - 0.35.2-1
changelog:
  - Upgrade to dbus-0.35.2
  - removed dbus-0.34-kill-babysitter.patch
  - removed dbus-0.34-python-threadsync.patch
  - removed dbus-0.23-selinux-avc-audit.patch
  - added dbus-0.35.2-selinux-avc-audit.patch
  - take out restarts on upgrade


author: John (J5) Palmieri <johnp@redhat.com> - 0.34-1
changelog:
  - Upgrade to dbus-0.34
  - added dbus-0.34-kill-babysitter.patch
  - added dbus-0.34-python-threadsync.patch
  - remove dbus-0.32-print_child_pid.patch
  - remove dbus-0.32-deadlock-fix.patch
  - remove dbus-0.33-types.patch


author: John (J5) Palmieri <johnp@redhat.com> - 0.32-5
changelog:
  - replace selinux_init patch with selinux_chroot_workaround patch
    to work around bad selinux interactions when using chroots
    on the beehive build machines


author: John (J5) Palmieri <johnp@redhat.com> - 0.32-2
changelog:
  - add selinux-init patch to fix dbus from segfaulting when
    building on machines that don't have selinux enabled


author: John (J5) Palmieri <johnp@redhat.com> - 0.31-1
changelog:
  - update to upstream version 0.31
  - take out user has same id patch (merged upstream)
  - udi patch updated
  - dbus-daemon-1 renamed to dbus-daemon
  - dbus-glib-tool renamed to dbus-binding-tool
  - force gcc33 because pyrex generate improper lvalue code
  - disable audit patch for now


author: John (J5) Palmieri <johnp@redhat.com> - 0.23-4
changelog:
  - Explicitly pass in the pid file location to ./configure instead of
    letting it guess based on the build enviornment


author: John (J5) Palmieri <johnp@redhat.com> - 0.23-1
changelog:
  - Update to upstream version 0.23
  - Drop all patches except for the UDI patch as they have been
    integrated upstream
  - List of API changes:
        * add setgroups() to drop supplementary groups
        * removed dbus_bug_get_with_g_main since it's been replaced by dbus_g_bus_get
        * added support for int64 and uint64 to the python bindings
        * use SerivceOwnerChanges signal instead of ServiceCreated and ServiceDeleted


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Add a requires for glib2-devel in the devel package
  - Add SE-Linux backport from Colin Walters that fixes
    messages getting lost in SE-Linux contexts


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Fixed patch to use dbus-1 instead of dbus-1.0
  - (configure.in): Exported just the datadir instead of
    the full path to the dbus datadir for consistency


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - reverting BuildRequires: redhat-release because of issues with build system
  - added precompiled version of the messagebus init script


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Moved dbus-viewer to new dbus-gtk package so that dbus-glib
    no longer requires X or GTK libraries. (RH Bug #130029)


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Added lib64 workaround for python bindings installing to
    the wrong lib directory on 64 bit archs


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Moved dbus-viewer, dbus-monitor and dbus-glib-tool
    into the dbus-glib package so that the main dbus
    package does not depend on glib (Bug #125285)


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Conflict with cups prior to configuration file change, so that the
    %postun service condrestart works.


author: Havoc Pennington <hp@redhat.com> 0.13-2
changelog:
  - see if removing qt subpackage for now will get us through the build system,
    qt bindings not useful yet anyway


author: Havoc Pennington <hp@redhat.com> 0.11.91-3
changelog:
  - break the tiny dbus-launch that depends on X into separate package
    so a CUPS server doesn't need X installed


author: Havoc Pennington <hp@redhat.com> 0.6.93-1
changelog:
  - new cvs snap that actually forks to background and changes
    user it's running as and so forth
  - create our system user in pre


author: Havoc Pennington <hp@redhat.com> 0.6.91-1
changelog:
  - disable qt for now because beehive hates me
  - pull a slightly newer cvs snap that creates socket directory
  - cat the make check log after make check fails


author: EL Errata <el-errata_ww@oracle.com> - 0.8.2-6.0.1
changelog:
  - discard empty RH-Satellite-6.xml [Orabug: 30328734]
  - Red Hat Satellite and Red Hat high availaibility reference found in cockpit UI
    [Orabug: 30257573]


author: Eric Garver <egarver@redhat.com> - 0.8.2-3
changelog:
  - fix(nftables): packet marks with masks
  - fix(nftables): icmp types with code == 0
  - fix(rich icmptype): verify rule and icmptype families
  - fix(zone): cache rule_str for rich rules
  - improvement(service): IPsec: Update description and add TCP port 4500
  - feat(service): add collectd service
  - feat(service): Add rpc-rquotad.service


author: Eric Garver <egarver@redhat.com> - 0.8.2-2
changelog:
  - fix(cli): add ipset type hash:mac is incompatible with the family parameter
  - fix(cli): add --zone is an invalid option with --direct
  - fix: update dynamic DCE RPC ports in freeipa-trust service
  - fix: core: rich: Catch ValueError on non-numeric priority values
  - fix(rich): icmptypes with one family
  - fix(direct): rule in a zone chain
  - plus additional upstream stable fixes


author: Eric Garver <egarver@redhat.com> - 0.7.0-3
changelog:
  - backport patch to show service includes in service output
  - backport patches to fix dbus API break


author: Eric Garver <egarver@redhat.com> - 0.6.3-4
changelog:
  - backport recent stable fixes
  - backport fix for lost NM interfaces during reload
  - backport rich rule priorities
  - backport fix for set entries not applied
  - update translations


author: Eric Garver <egarver@redhat.com> - 0.6.1-5
changelog:
  - python3-firewalld can get by with python3-gobject-base
  - firewall-config can get by with python3-qt5-base


author: Eric Garver <egarver@redhat.com> - 0.6.1-4
changelog:
  - backports for new failed state if startup fails
  - backports to use explicit RETURN on user defined ebtables chains
  - backports to fix nftables AUDIT log support


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.4.4.5-4
changelog:
  - Python 2 binary package renamed to python2-firewall
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.5-1
changelog:
  - Rebase to firewalld-0.4.4.5
    http://www.firewalld.org/2017/06/firewalld-0-4-4-5-release
    - Fix build from spec
    - Fix –remove-service-from-zone option (RHBZ#1438127)
    - Support sctp and dccp in ports, source-ports, forward-ports, helpers and
      rich rules (RHBZ#1429808)
    - firewall-cmd: Fix –{set,get}-{short,description} for zone (RHBZ#1445238)
    - firewall.core.ipXtables: Use new wait option for restore commands if
      available
    - New services for oVirt:
      ctdb, ovirt-imageio, ovirt-storageconsole, ovirt-vmconsole and nrpe
    - Rename extension for policy choices (server and desktop) to .policy.choice
      (RHBZ#1449754)
    - D-Bus interfaces: Fix GetAll for interfaces without properties
      (RHBZ#1452017)
    - Load NAT helpers with conntrack helpers (RHBZ#1452681)
    - Translation updates
  - Additional upstream patches:
    - Rich-rule source validation (d69b7cb)
    - IPv6 ICMP type only rich-rule fix (cf50bd0)


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.4-1
changelog:
  - Rebase to firewalld-0.4.4.4
    http://www.firewalld.org/2017/03/firewalld-0-4-4-4-release
  - Drop references to fedorahosted.org from spec file and Makefile.am, use
    archive from github
  - Fix inconsistent ordering of rules in INPUT_ZONE_SOURCE (issue#166)
  - Fix ipset overloading from /etc/firewalld/ipsets
  - Fix permanent rich rules using icmp-type elements (RHBZ#1434594)
  - firewall-config: Deactivate edit, remove, .. buttons if there are no items
  - Check if ICMP types are supported by kernel before trying to use them
  - firewall-config: Show invalid ipset type in the ipset configuration dialog
    in a special label


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.3-1
changelog:
  - Rebase to firewalld-0.4.4.3
    http://www.firewalld.org/2017/02/firewalld-0-4-4-3-release
  - Speed up of large file loading
  - Support for more ipset types
  - Speed up of adding or removing entries for ipsets from files
  - Support icmp-type usage in rich rules
  - Support for more icmp types
  - Support for h323 conntrack helper
  - New services
  - Code cleanup and several other bug fixes
  - Translation updates


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.2-2
changelog:
  - Dropping firewalld-selinux package again as the required fix made it into
    selinux-policy packages for F-23+, updated selinux-policy version conflicts


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.2-1
changelog:
  - New firewalld-selinux sub package delivering the SELinux policy module for
    firewalld (RHBZ#1396765) (RHBZ#1394625) (RHBZ#1394578) (RHBZ#1394573)
    (RHBZ#1394569)
  - New firewalld release 0.4.4.2:
    - firewalld.spec: Added helpers and ipsets paths to firewalld-filesystem
    - firewall.core.fw_nm: create NMClient lazily
    - Do not use hard-coded path for modinfo, use autofoo to detect it
    - firewall.core.io.ifcfg: Dropped invalid option warning with bad format
      string
    - firewall.core.io.ifcfg: Properly handle quoted ifcfg values
    - firewall.core.fw_zone: Do not reset ZONE with ifdown
    - Updated translations from zanata
    - firewall-config: Extra grid at bottom to visualize firewalld settings


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.1-1
changelog:
  - firewall-config: Use proper source check in sourceDialog (fixes issue#162)
  - firewallctl: New support for helpers
  - Translation updates


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4-1
changelog:
  - Fix dist-check
  - src/Makefile.am: Install new helper files
  - config/Makefile.am: Install helpers
  - Merged translations
  - Updated translations from zanata
  - firewalld.spec: Adapt requires for PyQt5
  - firewall-applet: Fix fromUTF8 for python2 PyQt5 usage
  - firewall-applet: Use PyQt5
  - firewall-config: New nf_conntrack_select dialog, use nf_conntrack_helpers D-Bus property
  - shell-completion/bash/firewall-cmd: Updates for helpers and also some fixes
  - src/tests/firewall-[offline-]cmd_test.sh: New helper tests, adapted module tests for services
  - doc/xml/seealso.xml: Add firewalld.helper(5) man page
  - doc/xml/seealso.xml: Add firewalld.ipset(5) man page
  - Fixed typo in firewalld.ipset(5) man page
  - Updated firewalld.dbus(5) man page
  - New firewalld.helper(5) man page
  - doc/xml/firewall-offline-cmd.xml: Updated firewall-offline-cmd man page
  - doc/xml/firewall-cmd.xml: Updated firewall-cmd man page
  - firewall-offline-cmd: New support for helpers
  - firewall-cmd: New support for helpers
  - firewall.command: New check_helper_family, check_module and print_helper_info methods
  - firewall.core.fw_test: Add helpers also to offline backend
  - firewall.server.config: New AutomaticHelpers property (rw)
  - firewall.server.config: Fix an dict size changed error for firewall.conf file changes
  - firewall.server.config: Make LogDenied property readwrite to be consistent
  - Some renames of nf_conntrack_helper* functions and structures, helpers is a dict
  - firewall.core.fw: Properly check helper setting in set_automatic_helpers
  - firewall.errors: Add missing BUILTIN_HELPER error code
  - No extra interface for helpers needed in runtime, dropped DBUS_INTERFACE_HELPER
  - firewall.server.firewalld: Drop unused queryHelper D-Bus method
  - New helpers Q.931 and RAS from nf_conntrack_h323
  - firewall.core.io.helper: Allow dots in helper names, remove underscore
  - firewall.core.io.firewalld_conf: Fixed typo in FALLBACK_AUTOMATIC_HELPERS
  - firewall-[offline-]cmd: Use sys.excepthook to force exception_handler usage always
  - firewall.core.fw_config: new_X methods should also check builtins
  - firewall.client: Set helper family to "" if None
  - firewall.client: Add missing module string to FirewallClientHelperSettings.settings
  - config/firewalld.conf: Add possible values description for AutomaticHelpers
  - helpers/amanda.xml: Fix typo in helper module
  - firewall-config: Added support for helper module setting
  - firewall.client: Added support for helper module setting
  - firewall.server.config_helper: Added support for helper module setting
  - firewall.core.io.service, firewall.server.config_service: Only replace underscore by dash if module start with nf_conntrack_
  - firewall.core.fw_zone: Use helper module instead of a generated name from helper name
  - helpers: Added kernel module
  - firewall.core.io.helper: Add module to helper
  - firewall-cmd: Removed duplicate --get-ipset-types from help output
  - firewall.core.fw_zone: Add zone bingings for PREROUTING in the raw table
  - firewall.core.ipXtables: Add PREROUTING default rules for zones in raw table
  - firewall-config: New support to handle helpers, new dialogs, new helper tab, ..
  - config/org.fedoraproject.FirewallConfig.gschema.xml.in: New show-helpers setting
  - firewall.client: New helper management for runtime and permanent configuration
  - firewall.server.firewalld: New runtime helper management, new nf_conntrack_helper property
  - firewall.server.config_service: Fix module name handling (no nf_conntrack_ prefix needed)
  - firewall.server.config: New permanent D-Bus helper management
  - New firewall.server.config_helper to provide the permanent D-Bus interface for helpers
  - firewall.core.fw_zone: Use helpers fw.nf_conntrack_helper for services using helpers
  - firewall.core.fw: New helper management, new _automatic_helpers and nf_conntrack_helper settings
  - firewall.core.fw_config: Add support for permanent helper handling
  - firewall.core.io.service: The module does not need to start with nf_conntrack_ anymore
  - firewall.functions: New functions to get and set nf_conntrack_helper kernel setting
  - firewall.core.io.firewalld_conf: New support for AutomaticHelpers setting
  - firewall.config.dbus: New D-Bus definitions for helpers, new DBUS_INTERFACE_REVISION 12
  - New firewall.core.fw_helper providing FirewallHelper backend
  - New firewall.core.helper with HELPER_MAXNAMELEN definition
  - config/firewalld.conf: New AutomaticHelpers setting with description
  - firewall.config.__init__.py.in: New helpers variables
  - firewalld.spec: Add new helpers directory
  - config/Makefile.am: Install new helpers
  - New helper configuration files for amanda, ftp, irc, netbios-ns, pptp, sane, sip, snmp and tftp
  - firewall.core.io.helper: New IO handler for netfilter helpers
  - firewall.errors: New INVALID_HELPER error code
  - firewall.core.io.ifcfg: Use .bak for save files
  - firewall-config: Set internal log_denied setting after changing
  - firewall.server.config: Copy props before removing items
  - doc/xml/firewalld.ipset: Replaced icmptype name remains with ipset
  - firewall.core.fw_zone: Fix LOG rule placement for LogDenied
  - firewall.command: Use "source-ports" in print_zone_info
  - firewall.core.logger: Use syslog.openlog() and syslog.closelog()
  - firewall-[offline-]cmd man pages: Document --path-{zone,icmptype,ipset,service}
  - firewall-cmd: Enable --path-{zone,icmptype,service} options again
  - firewall.core.{ipXtables,ebtables}: Copy rule before extracting items in set_rules
  - firewall.core.fw: Do not abort transaction on failed ipv6_rpfilter rules
  - config/Makefile.am: Added cfengine, condor-collector and smtp-submission services
  - Makefile.am: New dist-check used in the archive target
  - src/Makefile.am: Reordered nobase_dist_python_DATA to be sorted
  - config/Makefile.am: New CONFIG_FILES variable to contain the config files
  - Merge pull request #150 from hspaans/master
  - Merge pull request #146 from canvon/bugfix/spelling
  - Merge pull request #145 from jcpunk/condor
  - Command line tools man pages: New section about sequence options and exit codes
  - Creating service file for SMTP-Submission.
  - Creating service file for CFEngine.
  - Fix typo in documentation: iptables mangle table
  - Only use sort on lists of main items, but not for item properties
  - firewall.core.io.io_object: import_config should not change ordering of lists
  - firewall.core.fw_transaction: Load helper modules in FirewallZoneTransaction
  - firewall.command: Fail with NOT_AUTHORIZED if authorization fails (RHBZ#1368549)
  - firewall.command: Fix sequence exit code with at least one succeeded item
  - Add condor collector service
  - firewall-cmd: Fixed --{get,set}-{description,short} for permanent zones
  - firewall.command: Do not use error code 254 for {ALREADY,NOT}_ENABLED sequences


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.3-1
changelog:
  - Fix CVE-2016-5410: Firewall configuration can be modified by any logged in
    user
  - firewall/server/firewalld: Make getXSettings and getLogDenied CONFIG_INFO
  - Update AppData configuration file.
  - tests/firewalld_rich.py: Use new import structure and FirewallClient classes
  - tests/firewalld_direct.py: Use new import structure
  - tests: firewalld_direct: Fix assert to check for True instead of False
  - tests: firewalld_config: Fix expected value when querying the zone target
  - tests: firewalld_config: Use real nf_conntrack modules
  - firewalld.spec: Added comment about make call for %build
  - firewall-config: Use also width_request and height_request with default size
  - Updated firewall-config screenshot
  - firewall-cmd: Fixed typo in help output (RHBZ#1367171)
  - test-suite: Ignore stderr to get default zone also for missing firewalld.conf
  - firewall.core.logger: Warnings should be printed to stderr per default
  - firewall.core.fw_nm: Ignore NetworkManager if NM.Client connect fails
  - firewall-cmd, firewallctl: Gracefully fail if SystemBus can not be aquired
  - firewall.client: Generate new DBUS_ERROR if SystemBus can not be aquired
  - test-suite: Do not fail on ALREADY_ENABLED --add-destination tests
  - firewall.command: ALREADY_ENABLED, NOT_ENABLED, ZONE_ALREADY_SET are warnings
  - doc/xml/firewalld.dbus.xml: Removed undefined reference
  - doc/xml/transform-html.xsl.in: Fixed references in the document
  - doc/xml/firewalld.{dbus,zone}.xml: Embed programlisting in para
  - doc/xml/transform-html.xsl.in: Enhanced html formatting closer to the man page
  - firewall: core: fw_nm: Instantiate the NM client only once
  - firewall/core/io/*.py: Do not traceback on a general sax parsing issue
  - firewall-offline-cmd: Fix --{add,remove}-entries-from-file
  - firewall-cmd: Add missing action to fix --{add,remove}-entries-from-file
  - firewall.core.prog: Do not output stderr, but return it in the error case
  - firewall.core.io.ifcfg.py: Fix ifcfg file reader and writer (RHBZ#1362171)
  - config/firewall.service.in: use KillMode=mixed
  - config/firewalld.service.in: use network-pre.target
  - firewall-config: Add missing gettext.textdomain call to fix translations
  - Add UDP to transmission-client.xml service
  - tests/firewall-[offline-]cmd_test.sh: Hide errors and warnings
  - firewall.client: Fix ALREADY_ENABLED errors in icmptype destination calls
  - firewall.client: Fix NOT_ENABLED errors in icmptype destination calls
  - firewall.client: Use {ALREADY,NOT}_ENABLED errors in icmptype destination
    calls
  - firewall.command: Add the removed FirewallError handling to the action
    (a17ce50)
  - firewall.command: Do not use query methods for sequences and also single
    options
  - Add missing information about MAC and ipset sources to man pages and help
    output
  - firewalld.spec: Add BuildRequires for libxslt to enable rebuild of man pages
  - firewall[-offline]-cmd, firewallctl, firewall.command: Use sys.{stdout,stderr}
  - firewallctl: Fix traceback if not connected to firewalld
  - firewall-config: Initialize value in on_richRuleDialogElementChooser_clicked
  - firewall.command: Convert errors to string for Python3
  - firewall.command: Get proper firewall error code from D-BusExceptions
  - firewall-cmd: Fixed traceback without args
  - Add missing service files to Makefile.am
  - shell-completion: Add shell completion support for
    --{get,set}--{description,short}
  - Updated RHEL-7 selinux-policy and squid conflict


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-1
changelog:
  - Fix regression with unavailable optional commands
  - All missing backend messages should be warnings
  - Individual calls for missing restore commands
  - Only one authenticate call for add and remove options and also sequences
  - New service RH-Satellite-6
  - Fixed selinux-policy conflict version for RHEL-7


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.1-1
changelog:
  - New firewalld release 0.4.3.1
  - firewall.command: Fix python3 DBusException message not interable error
  - src/Makefile.am: Fix path in firewall-[offline-]cmd_test.sh while installing
  - firewallctl: Do not trace back on list command without further arguments
  - firewallctl (man1): Added remaining sections zone, service, ..
  - firewallctl: Added runtime-to-permanent, interface and source parser,
    IndividualCalls setting
  - firewall.server.config: Allow to set IndividualCalls property in config
    interface
  - Fix missing icmp rules for some zones
  - runProg: Fix issue with running programs
  - firewall-offline-cmd: Fix issues with missing system-config-firewall
  - firewall.core.ipXtables: Split up source and dest addresses for transaction
  - firewall.server.config: Log error in case of loading malformed files in
    watcher
  - Install and package the firewallctl man page
  - New firewallctl utility (RHBZ#1147959)
  - doc.xml.seealso: Show firewalld.dbus in See Also sections
  - firewall.core.fw_config: Create backup on zone, service, ipset and icmptype
    removal (RHBZ#1339251)
  - {zone,service,ipset,icmptype}_writer: Do not fail on failed backup
  - firewall-[offline-]cmd: Fix --new-X-from-file options for files in cwd
  - firewall-cmd: Dropped duplicate setType call in --new-ipset
  - radius service: Support also tcp ports (RBZ#1219717)
  - xmlschemas: Support source-port, protocol, icmp-block-inversion and ipset
    sources
  - config.xmlschema.service.xsd: Fix service destination conflicts
    (RHBZ#1296573)
  - firewall-cmd, firewalld man: Information about new NetworkManager and ifcfg
  - firewall.command: Only print summary and description in print_X_info with
    verbose
  - firewall.command: print_msg should be able to print empty lines
  - firewall-config: No processing of runtime passthroughs signals in permanent
  - Landspace.io fixes and pylint calm downs
  - firewall.core.io.zone: Add zone_reader and zone_writer to __all__, pylint
    fixes
  - firewall-config: Fixed titles of command and context dialogs, also entry
    lenths
  - firewall-config: pylint calm downs
  - firewall.core.fw_zone: Fix use of MAC source in rich rules without ipv limit
  - firewall-config: Use self.active_zoens in conf_zone_added_cb
  - firewall.command: New parse_port, extended parse methods with more checks
  - firewall.command: Fixed parse_port to use the separator in the split call
  - firewall.command: New [de]activate_exception_handler, raise error in parse_X
  - services ha: Allow corosync-qnetd port
  - firewall-applet: Support for kde5-nm-connection-editor
  - tests/firewall-offline-cmd_test.sh: New tests for service and icmptype
    modifications
  - firewall-offline-cmd: Use FirewallCommand for simplification and sequence
    options
  - tests/firewall-cmd_test.sh: New tests for service and icmptype modifications
  - firewall-cmd: Fixed set, remove and query destination options for services
  - firewall.core.io.service: Source ports have not been checked in _check_config
  - firewall.core.fw_zone: Method check_source_port is not used, removed
  - firewall.core.base: Added default to ZONE_TARGETS
  - firewall.client: Allow to remove ipv:address pair for service destinations
  - tests/firewall-offline-cmd_test.sh: There is no timeout option in permanent
  - firewall-cmd: Landscape.io fixes, pylint calm downs
  - firewall-cmd: Use FirewallCommand for simplification and sequence options
  - firewall.command: New FirewallCommand for command line client simplification
  - New services: kshell, rsh, ganglia-master, ganglia-client
  - firewalld: Cleanup of unused imports, do not translate some deamon messages
  - firewalld: With fd close interation in runProg, it is not needed here anymore
  - firewall.core.prog: Add fd close iteration to runProg
  - firewall.core.fw_nm: Hide NM typelib import, new nm_get_dbus_interface
    function
  - firewalld.spec: Require NetworkManager-libnm instead of NetworkManager-glib
  - firewall-config: New add/remove ipset entries from file, remove all entries
  - firewall-applet: Fix tooltip after applet start with connection to firewalld
  - firewall-config: Select new zone, service or icmptype if the view was empty
  - firewalld.spec: Added build requires for iptables, ebtables and ipset
  - Adding nf_conntrack_sip module to the service SIP
  - firewall: core: fw_ifcfg: Quickly return if ifcfg directory does not exist
  - Drop unneeded python shebangs
  - Translation updates


author: Thomas Woerner <twoerner@redhat.com> - 0.4.2-1
changelog:
  - New module to search for and change ifcfg files for interfaces not under
    control of NM
  - firewall_config: Enhanced messages in status bar
  - firewall-config: New message window as overlay if not connected
  - firewall-config: Fix sentivity of option, view menus and main paned if not
    connected
  - firewall-applet: Quit on SIGINT (Ctrl-C), reduced D-Bus calls, some cleanup
  - firewall-[offline]cmd: Show target in zone information
  - D-Bus: Completed masquerade methods in FirewallClientZoneSettings
  - Fixed log-denied rules for icmp-blocks
  - Keep sorting of interfaces, services, icmp-blocks and other settings in zones
  - Fixed runtime-to-permanent not to save interfaces under control of NM
  - New icmp-block-inversion flag in the zones
  - ICMP type filtering in the zones
  - New services: sip, sips, managesieve
  - rich rules: Allow destination action (RHBZ#1163428)
  - firewall-offline-cmd: New option -q/--quiet
  - firewall-[offline-]cmd: New --add-[zone,service,ipset,icmptype]-from-file
  - firewall-[offline-]cmd: Fix option for setting the destination address
  - firewall-config: Fixed resizing behaviour
  - New transaction model for speed ups in start, restart, stop and other actions
  - firewall-cmd: New options --load{zone,service,ipset,icmptype}-defaults
  - Fixed memory leak in dbus_introspection_add_properties
  - Landscape.io fixes, pylint calm downs
  - New D-Bus getXnames methods to speed up firewall-config and firewall-cmd
  - ebtables-restore: No support for COMMIT command
  - Source port support in services, zones and rich rules
  - firewall-offline-cmd: Added --{add,remove}-entries-from-file for ipsets
  - firewall-config: New active bindings side bar for simple binding changes
  - Reworked NetworkManager module
  - Proper default zone handling for NM connections
  - Try to set zone binding with NM if interface is under control of NM
  - Code cleanup and bug fixes
  - Include test suite in the release and install in /usr/share/firewalld/tests
  - New Travis-CI configuration file
  - Fixed more broken frensh translations
  - Translation updates


author: Thomas Woerner <twoerner@redhat.com> - 0.4.1.2-1
changelog:
  - Fixed translations with python3
  - Fixed exception for failed NM import, new doc string
  - Make ipsets visible per default in firewall-config
  - Install new fw_nm module
  - Do not fail if log file could not be opened
  - Fixed broken fr translation


author: Thomas Woerner <twoerner@redhat.com> - 0.4.1-1
changelog:
  - Enhancements of ipset handling
    - No cleanup of ipsets using timeouts while reloading
    - Only destroy conflicting ipsets
    - Only use ipset types supported by the system
    - Add and remove several ipset entries in one call using a file
  - Reduce time frame where builtin chains are on policy DROP while reloading
  - Include descriptions in --info-X calls
  - Command line interface support to get and alter descriptions of zones,
    services, ipsets and icmptypes with permanent option
  - Properly watch changes in combined zones
  - Fix logging in rich rule forward rules
  - Transformed direct.passthrough errors into warnings
  - Rework of import structures
  - Reduced calls to get ids for port and protocol names (RHBZ#1305434)
  - Build and installation fixes by Markos Chandras
  - Provide D-Bus properties in introspection data
  - Fix for flaws found by landscape.io
  - Fix for repeated SUGHUP
  - New NetworkManager module to get and set zones of connections, used in
    firewall-applet and firewall-config
  - configure: Autodetect backend tools ({ip,ip6,eb}tables{,-restore}, ipset)
  - Code cleanups
  - Bug fixes


author: Thomas Woerner <twoerner@redhat.com> - 0.4.0-1
changelog:
  - Version 0.4.0
    - Speed ups
    - ipset support
    - MAC address support
    - Log of denied packets
    - Mark action in rich rules
    - Enhanced alteration of config files with command line tools
    - Use of zone chains in direct interface
    - firewall-applet enhancement
    - New services: ceph-mon, ceph, docker-registry, imap, pop3, pulseaudio,
      smtps, snmptrap, snmp, syslog-tls and syslog
    - Several bug fixes
    - Code optimizations


author: Thomas Woerner <twoerner@redhat.com> - 0.3.14.2-3
changelog:
  - Require python3-gobject-base for fedora >= 23 and rhel >= 8 (RHBZ#1242076)
  - Fix rhel defines: No python3 for rhel-7


author: Thomas Woerner <twoerner@redhat.com> - 0.3.14.2-1
changelog:
  - reunification of the firewalld spec files for all Fedora releases
  - fix dependencies for -applet and -config: use_python3 is the proper switch
    not with_python3 (RHBZ#1232493)
  - firewalld.spec:
    - fixed requirements for -applet and -config
  - man pages:
    - adapted firewall-applet man page to new version
  - firewall-applet:
    - Only honour active connections for zone changes
    - Change QSettings path and file names
  - firewall-config:
    - Only honour active connections for zone changes in the “Change Zones of Connections” menu
  - Translations:
    - updated translations
    - marked translations for “Connections” for review


author: Thomas Woerner <twoerner@redhat.com> - 0.3.14.1-1
changelog:
  - firewall-applet
    - do not use isSystemTrayAvailable check to fix KDE5 startup
    - dropped gtk applet remain: org.fedoraproject.FirewallApplet.gschema.xml


author: Thomas Woerner <twoerner@redhat.com> - 0.3.14-1
changelog:
  - renamed python2-firewall to python-firewall
  - fixed requirements for GUI parts with Python3
  - dropped upstream merged python3 patch
  - firewalld:
    - print real zone names in error messages
    - iptables 1.4.21 does not accept limits of 1/day, minimum is 2/day now
    - rate limit fix for rich rules
    - fix readdition of removed permanent direct settings
    - adaption of the polkit domains to use PK_ACTION_DIRECT_INFO
    - fixed two minor Python3 issues in firewall.core.io.direct
    - fixed use of fallback configuration values
    - fixed use without firewalld.conf
    - firewalld main restructureization
    - IPv6_rpfilter now also available as a property on D-Bus in the config interface
    - fixed wait option use for ipXtables
    - added --concurrent support for ebtables
    - richLanguage: allow masquerading with destination
    - richLanguage: limit masquerading forward rule to new connections
    - ipXtables: No dns lookups in available_tables and _detect_wait_option
    - full ebtables support: start, stop, reload, panic mode, direct chains and rules
    - fix for reload with direct rules
    - fix or flaws found by landscape.io
    - pid file handling fixes in case of pid file removal
    - fix for client issue in case of a dbus NoReply error
  - configuration
    - new services: dropbox-lansync, ptp
    - new icmptypes: timestamp-request, timestamp-reply
  - man pages:
    - firewalld.zones(5): fixed typos
    - firewalld.conf(5): Fixed wrong reference to firewalld.lockdown-whitelist page
  - firewall-applet:
    - new version using Qt4 fixing several issues with the Gtk version
  - spec file:
    - enabled Python3 support: new backends python-firewall and python3-firewall
    - some cleanup
  - git:
    - migrated to github
  - translations:
    - migrated to zanata
  - build environment:
    - no need for autoconf-2.69, 2.68 is sufficient


author: Thomas Woerner <twoerner@redhat.com> - 0.3.13-2
changelog:
  - enable python2 and python3 bindings for fedora >= 20 and rhel >= 7
  - use python3 bindings on fedora >= 22 and rhel >= 8 for firewalld,
    firewall-config and firewall-applet


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.13-1
changelog:
  - firewalld:
    - ipXtables: use -w or -w2 if supported (RHBZ#1161745, RHBZ#1151067)
    - DROP INVALID packets (RHBZ#1169837)
    - don't use ipv6header for protocol matching. (RHBZ#1065565)
    - removeAllPassthroughs(): remove passthroughs in reverse order (RHBZ#1167100)
    - fix config.service.removeDestination() (RHBZ#1164584)
  - firewall-config:
    - portProtoDialog: other protocol excludes port number/range
    - better fix for updating zoneStore also in update_active_zones()
    - fix typo in menu
  - configuration:
    - new services: tinc, vdsm, mosh, iscsi-target, rsyncd
    - ship and install XML Schema files. (#8)
  - man pages:
    - firewalld.dbus, firewalld.direct, firewalld, firewall-cmd
  - spec file:
    - filesystem subpackage
    - make dirs&files in /usr/lib/ world-readable (RHBZ#915988)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.12-1
changelog:
  - firewalld:
    - new runtimeToPermanent and tracked passsthrough support
    - make permanent D-Bus interfaces more fine grained like the runtime versions (RHBZ#1127706)
    - richLanguage: allow using destination with forward-port
    - Rich_Rule.check(): action can't be used with icmp-block/forward-port/masquerade
    - fixed Python specific D-Bus exception (RHBZ#1132441)
  - firewall-cmd:
    - new --runtime-to-permanent to create permanent from runtime configuration
    - use new D-Bus methods for permanent changes
    - show target REJECT instead of %REJECT% (RHBZ#1058794)
    - --direct: make fail messages consistent (RHBZ#1141835)
  - firewall-config:
    - richRuleDialog - OK button tooltip indicates problem
    - use new D-Bus methods for permanent changes
    - show target REJECT instead of %REJECT% (RHBZ#1058794)
    - update "Change Zones of Connections" menu on default zone change (RHBZ#11120212)
    - fixed rename of zones, services and icmptypes to not create new entry (RBHZ#1131064)
  - configuration:
    - new service for Squid HTTP proxy server
    - new service for Kerberos admin server
    - new services for syslog and syslog-tls
    - new services for SNMP and SNMP traps
    - add Keywords to .desktop to improve software searchability
  - docs:
    - updated translations
    - firewalld.richlanguage: improvements suggested by Rufe Glick
    - firewalld.dbus: various improvements
    - firewalld.zone: better description of Limit tag
    - mention new homepage everywhere


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.11-1
changelog:
  - firewalld:
    - improve error messages
    - check built-in chains in direct chain handling functions (RHBZ#1120619)
    - dbus_to_python() check whether input is of expected type (RHBZ#1122018)
    - handle negative timeout values (RHBZ#1124476)
    - warn when Command/Uid/Use/Context already in lockdown whitelist (RHBZ#1126405)
    - make --lockdown-{on,off} work again (RHBZ#1111573)
  - firewall-cmd:
    - --timeout now accepts time units (RHBZ#994044)
  - firewall-config:
    - show active (not default) zones in bold (RHBZ#993655)
  - configuration:
    - remove ipp-client service from all zones (RHBZ#1105639).
    - fallbacks for missing values in firewalld.conf
    - create missing dirs under /etc if needed
    - add -Es to python command in lockdown-whitelist.xml (RHBZ#1099065)
  - docs:
    - 'direct' methods concern only chains/rules added via 'direct' (RHBZ#1120619)
    - --remove-[interface/source] don't need a zone to be specified (RHBZ#1125851)
    - various fixes in firewalld.zone(5), firewalld.dbus(5), firewalld.direct(5)
  - others:
    - rpm macros for easier packaging of e.g. services


author: Thomas Woerner <twoerner@redhat.com> - 0.3.10-4
changelog:
  - renamed fedora specific zones to FedoraServer and FedoraWorkstation for 
    zone name limitations (length and allowed chars)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.10-3
changelog:
  - New support for Fedora per-product configuration settings for Fedora.next
    https://fedoraproject.org/wiki/Per-Product_Configuration_Packaging_Draft
  - Added Fedora server zone (RHBZ#1110711)
  - Added Fedora workstation zone(RHBZ#1113775)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.10-1
changelog:
  - new services: freeipa-*, puppermaster, amanda-k5, synergy,
                  xmpp-*, tor, privoxy, sane
  - do not use at_console in D-Bus policies (RHBZ#1094745)
  - apply all rich rules for non-default targets
  - AppData file (RHBZ#1094754)
  - separate Polkit actions for desktop & server (RHBZ#1091068)
  - sanitize missing ip6t_rpfilter (RHBZ#1074427)
  - firewall/core/io/*: few improvements (RHBZ#1065738)
  - no load failed error for absent direct.xml file
  - new DBUS_INTERFACE.getZoneSettings to get all run-time zone settings
  - fixed creation and deletion of zones, services and icmptypes over D-Bus signals
  - FirewallClientZoneSettings: Set proper default target
  - if Python2 then encode strings from sax parser (RHBZ#1059104, RHBZ#1058853)
  - firewall-cmd:
    - don't colour output of query commands (RHBZ#1097841)
    - use "default" instead of {chain}_{zone} (RHBZ#1075675)
    - New --get-target and --set-target
    - Create and remove permanent zones, services and icmptypes
  - firewall-config:
    - Adding services and icmptypes resulted in duplicates in UI
    - Use left button menu of -applet in Option menu
  - firewall-offline-cmd: same functionality as 'firewall-cmd --permanent'
  - firewall-applet: ZoneConnectionEditor was missing the Default Zone entry
  - bash-completion: getting zones/services/icmps is different with/without --permanent
  - firewalld.zone(5): removed superfluous slash (RHBZ#1091575)
  - updated translations


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.9.3-1
changelog:
  - Fixed persistent port forwarding (RHBZ#1056154)
  - Stop default zone rules being applied to all zones (RHBZ#1057875)
  - Enforce trust, block and drop zones in the filter table only (RHBZ#1055190)
  - Allow RAs prior to applying IPv6_rpfilter (RHBZ#1058505)
  - Fix writing of rule.audit in zone_writer()


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.9-1
changelog:
  - translation updates
  - New IPv6_rpfilter setting to enable source address validation (RHBZ#847707)
  - Do not mix original and customized zones in case of target changes,
    apply only used zones
  - firewall-cmd: fix --*_lockdown_whitelist_uid to work with uid 0
  - Don't show main window maximized. (RHBZ#1046811)
  - Use rmmod instead of 'modprobe -r' (RHBZ#1031102)
  - Deprecate 'enabled' attribute of 'masquerade' element
  - firewall-config: new zone was added twice to the list
  - firewalld.dbus(5)
  - Enable python shebang fix again
  - firewall/client: handle_exceptions: Use loop in decorator
  - firewall-offline-cmd: Do not mask firewalld service with disabled option
  - firewall-config: richRuleDialogActionRejectType Entry -> ComboBox
  - Rich_Rule: fix parsing of reject element (RHBZ#1027373)
  - Show combined zones in permanent configuration (RHBZ#1002016)
  - firewall-cmd(1): document exit code 2 and colored output (RHBZ#1028507)
  - firewall-config: fix RHBZ#1028853


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.8-1
changelog:
  - fix memory leaks
  - New option --debug-gc
  - Python3 compatibility
  - Better non-ascii support
  - several firewall-config & firewall-applet fixes
  - New --remove-rules commands for firewall-cmd and removeRules methods for D-Bus
  - Fixed FirewallDirect.get_rules to return proper list
  - Fixed LastUpdatedOrderedDict.keys()
  - Enable rich rule usage in trusted zone (RHBZ#994144)
  - New error codes: INVALID_CONTEXT, INVALID_COMMAND, INVALID_USER and INVALID_UID


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.7-1
changelog:
  - Don't fail on missing ip[6]tables/ebtables table. (RHBZ#967376)
  - bash-completion: --permanent --direct options
  - firewall/core/fw.py: fix checking for iptables & ip6tables (RHBZ#1017087)
  - firewall-cmd: use client's exception_handler instead of catching exceptions ourselves
  - FirewallClientZoneSettings: fix {add|remove|query}RichRule()
  - Extend amanda-client service with 10080/tcp (RHBZ#1016867)
  - Simplify Rich_Rule()_lexer() by using functions.splitArgs()
  - Fix encoding problems in exception handling (RHBZ#1015941)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.6.2-1
changelog:
  - firewall-offline-cmd: --forward-port 'toaddr' is optional (RHBZ#1014958)
  - firewall-cmd: fix variable name (RHBZ#1015011)


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.6-1
changelog:
  - firewalld.richlanguage.xml: correct log levels (RHBZ#993740)
  - firewall-config: Make sure that all zone settings are updated properly on firewalld restart
  - Rich_Limit: Allow long representation for duration (RHBZ#994103
  - firewall-config: Show "Changes applied." after changes (RHBZ#993643)
  - Use own connection dialog to change zones for NM connections
  - Rename service cluster-suite to high-availability (RHBZ#885257)
  - Permanent direct support for firewall-config and firewall-cmd
  - Try to avoid file descriptor leaking (RHBZ#951900)
  - New functions to split and join args properly (honoring quotes)
  - firewall-cmd(1): 2 simple examples
  - Better IPv6 NAT checking.
  - Ship firewalld.direct(5).


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.5-1
changelog:
  - Only use one PK action for configuration (RHBZ#994729)
  - firewall-cmd: indicate non-zero exit code with red color
  - rich-rule: enable to have log without prefix & log_level & limit
  - log-level warn/err -> warning/error (RHBZ#1009436)
  - Use policy DROP while reloading, do not reset policy in restart twice
  - Add _direct chains to all table and chain combinations
  - documentation improvements
  - New firewalld.direct(5) man page docbook source
  - tests/firewall-cmd_test.sh: make rich language tests work
  - Rich_Rule._import_from_string(): improve error messages (RHBZ#994150)
  - direct.passthrough wasn't always matching out_signature (RHBZ#967800)
  - firewall-config: twist ICMP Type IP address family logic.
  - firewall-config: port-forwarding/masquerading dialog (RHBZ#993658)
  - firewall-offline-cmd: New --remove-service=<service> option (BZ#969106)
  - firewall-config: Options->Lockdown was not changing permanent.
  - firewall-config: edit line on doubleclick (RHBZ#993572)
  - firewall-config: System Default Zone -> Default Zone (RHBZ#993811)
  - New direct D-Bus interface, persistent direct rule handling, enabled passthough
  - src/firewall-cmd: Fixed help output to use more visual parameters
  - src/firewall-cmd: New usage output, no redirection to man page anymore
  - src/firewall/core/rich.py: Fixed forwad port destinations
  - src/firewall-offline-cmd: Early enable/disable handling now with mask/unmask
  - doc/xml/firewalld.zone.xml: Added more information about masquerade use
  - Prefix to log message is optional (RHBZ#998079)
  - firewall-cmd: fix --permanent --change-interface (RHBZ#997974)
  - Sort zones/interfaces/service/icmptypes on output.
  - wbem-https service (RHBZ#996668)
  - applet&config: add support for KDE NetworkManager connection editor
  - firewall/core/fw_config.py: New method update_lockdown_whitelist
  - Added missing file watcher for lockdown whitelist in config D-Bus interface
  - firewall/core/watcher: New add_watch_file for lockdown-whitelist and direct
  - Make use of IPv6 NAT conditional, based on kernel number (RHBZ#967376)


author: Thomas Woerner <twoerner@redhat.com> 0.3.4-1
changelog:
  - several rich rule check enhancements and fixes
  - firewall-cmd: direct options - check ipv4|ipv6|eb (RHBZ#970505)
  - firewall-cmd(1): improve description of direct options (RHBZ#970509)
  - several firewall-applet enhancements and fixes
  - New README
  - several doc and man page fixes
  - Service definitions for PCP daemons (RHBZ#972262)
  - bash-completion: add lockdown and rich language options
  - firewall-cmd: add --permanent --list-all[-zones]
  - firewall-cmd: new -q/--quiet option
  - firewall-cmd: warn when default zone not active (RHBZ#971843)
  - firewall-cmd: check priority in --add-rule (RHBZ#914955)
  - add dhcpv6 (for server) service (RHBZ#917866)
  - firewall-cmd: add --permanent --get-zone-of-interface/source --change-interface/source
  - firewall-cmd: print result (yes/no) of all --query-* commands
  - move permanent-getZoneOf{Interface|Source} from firewall-cmd to server
  - Check Interfaces/sources when updating permanent zone settings.
  - FirewallDConfig: getZoneOfInterface/Source can actually return more zones
  - Fixed toaddr check in forward port to only allow single address, no range
  - firewall-cmd: various output improvements
  - fw_zone: use check_single_address from firewall.functions
  - getZoneOfInterface/Source does not need to throw exception
  - firewall.functions: Use socket.inet_pton in checkIP, fixed checkIP*nMask
  - firewall.core.io.service: Properly check port/proto and destination address
  - Install applet desktop file into /etc/xdg/autostart
  - Fixed option problem with rich rule destinations (RHBZ#979804)
  - Better exception creation in dbus_handle_exceptions() decorator (RHBZ#979790)
  - Updated firewall-offline-cmd
  - Use priority in add, remove, query and list of direct rules (RHBZ#979509)
  - New documentation (man pages are created from docbook sources)
  - firewall/core/io/direct.py: use prirority for rule methods, new get_all_ methods
  - direct: pass priority also to client.py and firewall-cmd
  - applet: New blink and blink-count settings
  - firewall.functions: New function ppid_of_pid
  - applet: Check for gnome3 and fix it, use new settings, new size-changed cb
  - firewall-offline-cmd: Fix use of systemctl in chroot
  - firewall-config: use string.ascii_letters instead of string.letters
  - dbus_to_python(): handle non-ascii chars in dbus.String.
  - Modernize old syntax constructions.
  - dict.keys() in Python 3 returns a "view" instead of list
  - Use gettext.install() to install _() in builtins namespace.
  - Allow non-ascii chars in 'short' and 'description'
  - README: More information for "Working With The Source Repository"
  - Build environment fixes
  - firewalld.spec: Added missing checks for rhel > 6 for pygobject3-base
  - firewall-applet: New setting show-inactive
  - Don't stop on reload when lockdown already enabled (RHBZ#987403)
  - firewall-cmd: --lockdown-on/off did not touch firewalld.conf
  - FirewallApplet.gschema.xml: Dropped unused sender-info setting
  - doc/firewall-applet.xml: Added information about gsettings
  - several debug and log message fixes
  - Add chain for sources so they can be checked before interfaces (RHBZ#903222)
  - Add dhcp and proxy-dhcp services (RHBZ#986947)
  - io/Zone(): don't error on deprecated family attr of source elem
  - Limit length of zone file name (to 12 chars) due to Netfilter internals.
  - It was not possible to overload a zone with defined source(s).
  - DEFAULT_ZONE_TARGET: {chain}_ZONE_{zone} -> {chain}_{zone}
  - New runtime get<X>Settings for services and icmptypes, fixed policies callbacks
  - functions: New functions checkUser, checkUid and checkCommand
  - src/firewall/client: Fixed lockdown-whitelist-updated signal handling
  - firewall-cmd(1): move firewalld.richlanguage(5) reference in --*-rich-rule
  - Rich rule service: Only add modules for accept action
  - firewall/core/rich: Several fixes and enhanced checks
  - Fixed reload of direct rules
  - firewall/client: New functions to set and get the exception handler
  - firewall-config: New and enhanced UI to handle lockdown and rich rules
  - zone's immutable attribute is redundant
  - Do not allow to set settings in config for immutable zones.
  - Ignore deprecated 'immutable' attribute in zone files.
  - Eviscerate 'immutable' completely.
  - FirewallDirect.query_rule(): fix it
  - permanent direct: activate firewall.core.io.direct:Direct reader
  - core/io/*: simplify getting of character data
  - FirewallDirect.set_config(): allow reloading


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Remove migrating to a systemd unit file from a SysV initscript
  - Remove pointless "ExclusiveOS" tag


author: Thomas Woerner <twoerner@redhat.com> 0.3.3-1
changelog:
  - new service files
  - relicensed logger.py under GPLv2+
  - firewall-config: sometimes we don't want to use client's exception handler
  - When removing Service/IcmpType remove it from zones too (RHBZ#958401)
  - firewall-config: work-around masquerade_check_cb() being called more times
  - Zone(IO): add interfaces/sources to D-Bus signature
  - Added missing UNKNOWN_SOURCE error code
  - fw_zone.check_source: Raise INVALID_FAMILY if family is invalid
  - New changeZoneOfInterface method, marked changeZone as deprecated
  - Fixed firewall-cmd man page entry for --panic-on
  - firewall-applet: Fixed possible problems of unescaped strings used for markup
  - New support to bind zones to source addresses and ranges (D-BUS, cmd, applet
  - Cleanup of unused variables in FirewallD.start
  - New firewall/fw_types.py with LastUpdatedOrderedDict
  - direct.chains, direct.rules: Using LastUpdatedOrderedDict
  - Support splitted zone files
  - New reader and writer for stored direct chains and rules
  - LockdownWhitelist: fix write(), add get_commands/uids/users/contexts()
  - fix service_writer() and icmptype_writer() to put newline at end of file
  - firewall-cmd: fix --list-sources
  - No need to specify whether source address family is IPv4 or IPv6
  - add getZoneOfSource() to D-Bus interface
  - Add tests and bash-completion for the new "source" operations
  - Convert all input args in D-Bus methods
  - setDefaultZone() was calling accessCheck() *after* the action
  - New uniqify() function to remove duplicates from list whilst preserving order
  - Zone.combine() merge also services and ports
  - config/applet: silence DBusException during start when FirewallD is not running (RHBZ#966518)
  - firewall-applet: more fixes to make the address sources family agnostic
  - Better defaults for lockdown white list
  - Use auth_admin_keep for allow_any and allow_inactive also
  - New D-Bus API for lockdown policies
  - Use IPv4, IPv6 and BRIDGE for FirewallD properties
  - Use rich rule action as audit type
  - Prototype of string-only D-Bus interface for rich language
  - Fixed wrongly merged source family check in firewall/core/io/zone.py
  - handle_cmr: report errors, cleanup modules in error case only, mark handling
  - Use audit type from rule action, fixed rule output
  - Fixed lockdown whitelist D-Bus handling method names
  - New rich rule handling in runtime D-Bus interface
  - Added interface, source and rich rule handling (runtime and permanent)
  - Fixed dbus_obj in FirewallClientConfigPolicies, added queryLockdown
  - Write changes in setLockdownWhitelist
  - Fixed typo in policies log message in method calls
  - firewall-cmd: Added rich rule, lockdown and lockdown whitelist handling
  - Don't check access in query/getLockdownWhitelist*()
  - firewall-cmd: Also output masquerade flag in --list-all
  - firewall-cmd: argparse is able to convert argument to desired type itself
  - firewall-cmd_test.sh: tests for permanent interfaces/sources and lockdown whitelist
  - Makefile.am: add missing files
  - firewall-cmd_test.sh: tests for rich rules
  - Added lockdown, source, interface and rich rule docs to firewall-cmd
  - Do not masquerade lo if masquerade is enabled in the default zone (RHBZ#904098)
  - Use <rule> in metavar for firewall-cmd parser


author: Jiri Popelka <jpopelka@redhat.com> - 0.3.2-1
changelog:
  - Fix signal handling for SIGTERM
  - Additional service files (RHBZ#914859)
  - Updated po files
  - s/persistent/permanent/ (Trac Ticket #7)
  - Better behaviour when running without valid DISPLAY (RHBZ#955414)
  - client.handle_exceptions(): do not loop forever
  - Set Zone.defaults in zone_reader (RHBZ#951747)
  - client: do not pass the dbus exception name to handler
  - IO_Object_XMLGenerator: make it work with Python 2.7.4 (RHBZ#951741)
  - firewall-cmd: do not use deprecated BaseException.message
  - client.py: fix handle_exceptions() (RHBZ#951314)
  - firewall-config: check zone/service/icmptype name (RHBZ#947820)
  - Allow 3121/tcp (pacemaker_remote) in cluster-suite service. (RHBZ#885257)
  - firewall-applet: fix default zone hangling in 'shields-up' (RHBZ#947230)
  - FirewallError.get_code(): check for unknown error


author: Thomas Woerner <twoerner@redhat.com> 0.3.1-1
changelog:
  - Use explicit file lists for make dist
  - New rich rule validation check code
  - New global check_port and check_address functions
  - Allow source white and black listing with the rich rule
  - Fix error handling in case of unsupported family in rich rule
  - Enable ip_forwarding in masquerade and forward-port
  - New functions to read and write simple files using filename and content
  - Add --enable-sysconfig to install Fedora-specific sysconfig config file.
  - Add chains for security table (RHBZ#927015)
  - firewalld.spec: no need to specify --with-systemd-unitdir
  - firewalld.service: remove syslog.target and dbus.target
  - firewalld.service: replace hard-coded paths
  - Move bash-completion to new location.
  - Revert "Added configure for new build env"
  - Revert "Added Makefile.in files"
  - Revert "Added po/Makefile.in.in"
  - Revert "Added po/LINGUAS"
  - Revert "Added aclocal.m4"
  - Amend zone XML Schema


author: Thomas Woerner <twoerner@redhat.com> 0.3.0-1
changelog:
  - Added rich language support
  - Added lockdown feature
  - Allow to bind interfaces and sources to zones permanently
  - Enabled IPv6 NAT support
    masquerading and port/packet forwarding for IPv6 only with rich language
  - Handle polkit errors in client class and firewall-config
  - Added priority description for --direct --add-rule in firewall-cmd man page
  - Add XML Schemas for zones/services/icmptypes XMLs
  - Don't keep file descriptors open when forking
  - Introduce --nopid option for firewalld
  - New FORWARD_IN_ZONES and FORWARD_OUT_ZONES chains (RHBZ#912782)
  - Update cluster-suite service (RHBZ#885257)
  - firewall-cmd: rename --enable/disable-panic to --panic-on/off (RHBZ#874912)
  - Fix interaction problem of changed event of gtk combobox with polkit-kde
    by processing all remaining events (RHBZ#915892)
  - Stop default zone rules being applied to all zones (RHBZ#912782)
  - Firewall.start(): don't call set_default_zone()
  - Add wiki's URL to firewalld(1) and firewall-cmd(1) man pages
  - firewalld-cmd: make --state verbose (RHBZ#886484)
  - improve firewalld --help (RHBZ#910492)
  - firewall-cmd: --add/remove-* can be used multiple times (RHBZ#879834)
  - Continue loading zone in case of wrong service/port etc. (RHBZ#909466)
  - Check also services and icmptypes in Zone() (RHBZ#909466)
  - Increase the maximum length of the port forwarding fields from 5 to 11 in
    firewall-config
  - firewall-cmd: add usage to fail message
  - firewall-cmd: redefine usage to point to man page
  - firewall-cmd: fix visible problems with arg. parsing
  - Use argparse module for parsing command line options and arguments
  - firewall-cmd.1: better clarify where to find ACTIONs
  - firewall-cmd Bash completion
  - firewall-cmd.1: comment --zone=<zone> usage and move some options
  - Use zone's target only in %s_ZONES chains
  - default zone in firewalld.conf was set to public with every restart (#902845)
  - man page cleanup
  - code cleanup


author: Jiri Popelka <jpopelka@redhat.com> - 0.2.12-2
changelog:
  - Default zone in firewalld.conf was reseted with every restart (RHBZ#902845)
  - Add icon cache related scriptlets for firewall-config (RHBZ#902680)
  - Fix typo in firewall-config (RHBZ#895812)
  - Fix few mistakes in firewall-cmd(1) man page


author: Thomas Woerner <twoerner@redhat.com> 0.2.12-1
changelog:
  - firewall-cmd: use -V instead of -v for version info (RHBZ#886477)
  - firewall-cmd: don't check reload()'s return value (RHBZ#886461)
  - actually install firewalld.zones.5
  - firewall-config: treat exceptions when adding new zone/service/icmp
    (RHBZ#886602)
  - firewalld.spec: Fixed requirements of firewall-config to use gtk2 and
    pygobject3
  - Fail gracefully when running in non X environment.(RHBZ#886551)
  - offline-cmd: fail gracefully when no s-c-f config
  - fix duplicated iptables rules (RHBZ#886515)
  - detect errors and duplicates in config file (RHBZ#886581)
  - firewall-config: don't make 'Edit Service' and 'Edit ICMP Type' insensitive
  - firewalld.spec: fixed requirements, require pygobject3-base
  - frewall-applet: Unused code cleanup
  - firewall-applet: several usability fixes and enhancements
    (RHBZ#886531) (RHBZ#886534)
  - firewall/server/server.py: fixed KeyboardInterrupt message (RHBZ#886558)
  - Moved fallback zone and minimal_mark to firewall.config.__init__
  - Do not raise ZONE_ALREADY_SET in change_zone if old zone is set again
    (RHBZ#886432)
  - Make default zone default for all unset connections/interfaces
    (RHBZ#888288) (RHBZ#882736)
  - firewall-config: Use Gtk.MessageType.WARNING for warning dialog
  - firewall-config: Handle unknown services and icmptypes in persistent mode
  - firewall-config: Do not load settings more than once
  - firewall-config: UI cleanup and fixes (RHBZ#888242)
  - firewall-cmd: created alias --change-zone for --change-interface
  - firewall-cmd man page updates (RHBZ#806511)
  - Merged branch 'build-cleanups'
  - dropped call to autogen.sh in build stage, not needed anymore due to 
    'build-cleanups' merge


author: Thomas Woerner <twoerner@redhat.com> 0.2.11-2
changelog:
  - require pygobject3-base instead of pygobject3 (no cairo needed) (RHBZ#874378)
  - fixed dependencies of firewall-config to use gtk3 with pygobject3-base and 
    not pygtk2


author: Thomas Woerner <twoerner@redhat.com> 0.2.11-1
changelog:
  - Fixed more _xmlplus (PyXML) incompatibilities to python xml
  - Several man page updates
  - Fixed error in addForwardPort, removeForwardPort and queryForwardPort
  - firewall-cmd: use already existing queryForwardPort()
  - Update firewall.cmd man page, use man page as firewall-cmd usage (rhbz#876394)
  - firewall-config: Do not force to show labels in the main toolbar
  - firewall-config: Dropped "Change default zone" from toolbar
  - firewall-config: Added menu entry to change zones of connections
  - firewall-applet: Zones can be changed now using nm-connection-editor
    (rhbz#876661)
  - translation updates: cs, hu, ja


author: Thomas Woerner <twoerner@redhat.com> 0.2.10-1
changelog:
  - tests/firewalld_config.py: tests for config.service and config.icmptype
  - FirewallClientConfigServiceSettings(): destinations are dict not list
  - service/zone/icmptype: do not write deprecated name attribute
  - New service ntp
  - firewall-config: Fixed name of about dialog
  - configure.in: Fixed getting of error codes
  - Added coding to all pyhton files
  - Fixed copyright years
  - Beautified file headers
  - Force use of pygobject3 in python-slip (RHBZ#874378)
  - Log: firewall.server.config_icmptype, firewall.server.config_service and
    firewall.server.config_zone: Prepend full path
  - Allow ":" in interface names for interface aliases
  - Add name argument to Updated and Renamed signal
  - Disable IPv4, IPv6 and EB tables if missing - for IPv4/IPv6 only environments
  - firewall-config.glade file cleanup
  - firewall-config: loadDefaults() can throw exception
  - Use toolbars for Add/Edit/Remove/LoadDefaults buttons for zones, services
    and icmp types
  - New vnc-server service, opens ports for displays :0 to :3 (RHBZ#877035)
  - firewall-cmd: Fix typo in help output, allow default zone usage for
    permanenent options
  - Translation updates: cs, fr, ja, pt_BR and zh_CN


author: Thomas Woerner <twoerner@redhat.com> 0.2.9-1
changelog:
  - firewall-config: some UI usability changes
  - firewall-cmd: New option --list-all-zones, output of --list-all changed,
    more option combination checks
  - firewall-applet: Replaced NMClient by direct DBUS calls to fix python core
    dumps in case of connection activates/deactivates
  - Use fallback 'C' locale if current locale isn't supported (RHBZ#860278)
  - Add interfaces to zones again after reload
  - firewall-cmd: use FirewallClient().connected value
  - firewall-cmd: --remove-interface was not working due to a typo
  - Do not use restorecon for new and backup files
  - Fixed use of properties REJECT and DROP
  - firewalld_test.py: check interfaces after reload
  - Translation updates
  - Renamed firewall-convert-scfw-config to firewall-offline-cmd, used by
    anaconda for firewall configuration (e.g. kickstart)
  - Fix python shebang to use -Es at installation time for bin_SCRIPTS and
    sbin_SCRIPTS and at all times in gtk3_chooserbutton.py
  - tests/firewalld_config.py: update test_zones() test case
  - Config interface: improve renaming of zones/services/icmp_types
  - Move emiting of Added signals closer to source.
  - FirewallClient(): config:ServiceAdded signal was wrongly mapped
  - Add argument 'name' to Removed signal
  - firewall-config: Add callbacks for config:[service|icmp]-[added|removed]
  - firewall-config: catch INVALID_X error when removing zone/service/icmp_type
  - firewall-config: remove unused code
  - Revert "Neutralize _xmlplus instead of conforming it"
  - firewall-applet: some UI usability changes
  - firewall-cmd: ALREADY_ENABLED, NOT_ENABLED, ZONE_ALREADY_SET are warnings


author: Thomas Woerner <twoerner@redhat.com> 0.2.8-1
changelog:
  - Do not apply old settings to zones after reload
  - FirewallClient: Added callback structure for firewalld signals
  - New firewall-config with full zone, service and icmptype support
  - Added Shields Up/Down configuration dialog to firewall-applet
  - Name attribute of main tag deprecated for zones, services and icmptypes,
    will be ignored if present
  - Fixed wrong references in firewalld man page
  - Unregister DBus interfaces after sending out the Removed signal
  - Use proper DBus signature in addIcmpType, addService and addZone
  - New builtin property for config interfaces
  - New test case for Config interface
  - spec: use new systemd-rpm macros (rhbz#850110)
  - More config file verifications
  - Lots of smaller fixes and enhancements


author: Thomas Woerner <twoerner@redhat.com> 0.2.6-1
changelog:
  - New D-BUS interface for persistent configuration
  - Aded support for persistent zone configuration in firewall-cmd
  - New Shields Up feature in firewall-applet
  - New requirements for python-decorator and pygobject3
  - New firewall-config sub-package
  - New firewall-convert-scfw-config config script


author: Thomas Woerner <twoerner@redhat.com> 0.2.5-1
changelog:
  - Fixed traceback in firewall-cmd for failed or canceled authorization, 
    return proper error codes, new error codes NOT_RUNNING and NOT_AUTHORIZED
  - Enhanced firewalld service file (RHBZ#806868) and (RHBZ#811240)
  - Fixed duplicates in zone after reload, enabled timed settings after reload
  - Removed conntrack --ctstate INVALID check from default ruleset, because it
    results in ICMP problems (RHBZ#806017).
  - Update interfaces in default zone after reload (rhbz#804814)
  - New man pages for firewalld(1), firewalld.conf(5), firewalld.icmptype(5),
    firewalld.service(5) and firewalld.zone(5), updated firewall-cmd man page
    (RHBZ#811257)
  - Fixed firewall-cmd help output
  - Fixed missing icon for firewall-applet (RHBZ#808759)
  - Added root user check for firewalld (RHBZ#767654)
  - Fixed requirements of firewall-applet sub package (RHBZ#808746)
  - Update interfaces in default zone after changing of default zone (RHBZ#804814)
  - Start firewalld before NetworkManager (RHBZ#811240)
  - Add Type=dbus and BusName to service file (RHBZ#811240)


author: Thomas Woerner <twoerner@redhat.com> 0.2.3-1
changelog:
  - firewall-cmd: several changes and fixes
  - code cleanup
  - fixed icmp protocol used for ipv6 (rhbz#801182)
  - added and fixed some comments
  - properly restore zone settings, timeout is always set, check for 0
  - some FirewallError exceptions were actually not raised
  - do not REJECT in each zone
  - removeInterface() don't require zone
  - new tests in firewall-test script
  - dbus_to_python() was ignoring certain values
  - added functions for the direct interface: chains, rules, passthrough
  - fixed inconsistent data after reload
  - some fixes for the direct interface: priority positions are bound to ipv,
    table and chain
  - added support for direct interface in firewall-cmd:
  - added isImmutable(zone) to zone D-Bus interface
  - renamed policy file
  - enhancements for error messages, enables output for direct.passthrough
  - added allow_any to firewald policies, using at leas auth_admin for policies
  - replaced ENABLE_FAILED, DISABLE_FAILED, ADD_FAILED and REMOVE_FAILED by
    COMMAND_FAILED, resorted error codes
  - new firewalld configuration setting CleanupOnExit
  - enabled polkit again, found a fix for property problem with slip.dbus.service
  - added dhcpv6-client to 'public' (the default) and to 'internal' zones.
  - fixed missing settings form zone config files in
    "firewall-cmd --list=all --zone=<zone>" call
  - added list functions for services and icmptypes, added --list=services and
    --list=icmptypes to firewall-cmd


author: Thomas Woerner <twoerner@redhat.com> 0.2.2-1
changelog:
  - enabled dhcpv6-client service for zones home and work
  - new dhcpv6-client service
  - firewall-cmd: query mode returns reversed values
  - new zone.changeZone(zone, interface)
  - moved zones, services and icmptypes to /usr/lib/firewalld, can be overloaded
    by files in /etc/firewalld (no overload of immutable zones block, drop,
    trusted)
  - reset MinimalMark in firewalld.cnf to default value
  - fixed service destination (addresses not used)
  - fix xmlplus to be compatible with the python xml sax parser and python 3
    by adding __contains__ to xml.sax.xmlreader.AttributesImpl
  - use icon and glib related post, postun and posttrans scriptes for firewall
  - firewall-cmd: fix typo in state
  - firewall-cmd: fix usage()
  - firewall-cmd: fix interface action description in usage()
  - client.py: fix definition of queryInterface()
  - client.py: fix typo in getInterfaces()
  - firewalld.service: do not fork
  - firewall-cmd: fix bug in --list=port and --port action help message
  - firewall-cmd: fix bug in --list=service


author: Thomas Woerner <twoerner@redhat.com>
changelog:
  - moved zones, services and icmptypes to /usr/lib/firewalld, can be overloaded
    by files in /etc/firewalld (no overload of immutable zones block, drop,
    trusted)


author: Thomas Woerner <twoerner@redhat.com> 0.2.0-2
changelog:
  - added glib2-devel to build requires, needed for gsettings.m4
  - added --with-system-unitdir arg to fix installaiton of system file
  - added glib-compile-schemas calls for postun and posttrans
  - added EXTRA_DIST file lists


author: Thomas Woerner <twoerner@redhat.com> 0.2.0-1
changelog:
  - version 0.2.0 with new FirewallD1 D-BUS interface
  - supports zones with a default zone
  - new direct interface as a replacement of the partial virt interface with 
    additional passthrough functionality
  - dropped custom rules, use direct interface instead
  - dropped trusted interface funcionality, use trusted zone instead
  - using zone, service and icmptype configuration files
  - not using any system-config-firewall parts anymore


author: Thomas Woerner <twoerner@redhat.com> 0.1.3-1
changelog:
  - new version 0.1.3
  - restore all firewall features for reload: panic and virt rules and chains
  - string fixes for firewall-cmd man page (by Jiri Popelka)
  - fixed firewall-cmd port list (by Jiri Popelka)
  - added firewall dbus client connect check to firewall-cmd (by Jiri Popelka)
  - translation updates: de, es, gu, it, ja, kn, ml, nl, or, pa, pl, ru, ta,
                         uk, zh_CN


author: Thomas Woerner <twoerner@redhat.com> 0.1.2-1
changelog:
  - fixed package according to package review (rhbz#665395):
    - non executable scripts: dropped shebang
    - using newer GPL license file
    - made /etc/dbus-1/system.d/FirewallD.conf config(noreplace)
    - added requires(post) and (pre) for chkconfig


author: Thomas Woerner <twoerner@redhat.com> 0.1.1-1
changelog:
  - new version 0.1.1
  - fixed source path in POTFILES*
  - added missing firewall_config.py.in
  - added misssing space for spec_ver line
  - using firewall_config.VARLOGFILE
  - added date to logging output
  - also log fatal and error logs to stderr and firewall_config.VARLOGFILE
  - make log message for active_firewalld fatal


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-13
changelog:
  - Fix minor issues found by COVSCAN in fapolicyd plugin
  - Actually honor libarchive bcond at configure time (#1902887)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-12
changelog:
  - Bump up the limit of signature header to 64MB (#1918777)
  - Add fapolicyd plugin (#1923167)
  - Unblock signals in forked scriptlets (#1913765)
  - Fix ambiguous diagnostics output on file triggers (#1883338)
  - Ensure ELF files get stripped when debuginfo is disabled (#1634084)


author: Florian Festi <ffesti@redhat.com> - 4.14.3-5
changelog:
  - Don't error out when replacing an invalid signature (#1874062)
  - Raise an expection when erasing a package fails in Python (#1872623)
  - Fix builds on NFS filesystems (#1840728)


author: Florian Festi <ffesti@redhat.com> - 4.14.2-31
changelog:
  - Parallelize /usr/lib/rpm/brp-strip-static-archive (#1691824)
  - Parallelize /usr/lib/rpm/check-buildroot (#1704354)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-27
changelog:
  - Support generating build-id's from compressed ELF files (#1650074)
  - Compress annobit notes in find-debuginfo (#1719837)


author: Florian Festi <ffesti@redhat.com> - 4.14.2-23
changelog:
  - Use --dpbath only with full path (#1696408)
  - Fix memory leaks (#1714657)
  - Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
  - Fix bash warning from solution for #1689810


author: Florian Festi <ffesti@redhat.com> - 4.14.2-16
changelog:
  - Sort list of hard linked files in find-debuginfo.sh (#1421272)
  - Correct rpm -ql exit value when optional -p is omitted (#1680610)
  - Show list of files only once when use rpm -ql and multiple rpm files (#1689898)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-14
changelog:
  - Verify packages before signing (#1646388)
  - Make rpmsign exist values more consistent with our other tools


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-11
changelog:
  - Revised patch for Py3 string data as surrogate-escaped utf-8 (#1631292)
  - Add a .decode() method to returned Py3 strings for compatibility


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-7
changelog:
  - Move python-macro-helper to main package where the macros are (#1651926)
  - Document --noverify in the man page (#1646458)
  - Handle unsupported digests the same as disabled ones (#1652529)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-1
changelog:
  - Buildrequire audit-libs-devel to actually enable the feature (#1607612)
  - Update to rpm 4.14.2 final (http://rpm.org/wiki/Releases/4.14.2)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-0.rc2.1
changelog:
  - Update to rpm 4.14.2-rc2
  - Fixes a regression in rpmlog error handling (#1597274)
  - Fixes several resource leaks found by covscan (#1602681)
  - Fixes DISTTAG not getting copied to source rpms (#1596193)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.1-6
changelog:
  - Avoid unnecessary macro helper dependency on /usr/bin/python (#1538657)
  - Fix release of previous changelog entry


author: Tomas Orsava <torsava@redhat.com> - 4.14.1-5
changelog:
  - Add envvar that will be present during RPM build,
    Part of a Fedora Change for F28: "Avoid /usr/bin/python in RPM build"
    https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.0-0.rc1.2
changelog:
  - Actually honor with/without libimaevm option
  - ima-evm-utils-devel >= 1.0 is required for rpm >= 4.14.0


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.0-0.rc1.1
changelog:
  - Rebase to rpm 4.14.0-rc1 (http://rpm.org/wiki/Releases/4.14.0)
  - Re-enable SHA256 header digest generation (see #1480407)


author: Miro Hrončok <mhroncok@redhat.com> - 4.13.90-0.git14000.4
changelog:
  - Add platform-python bytecompilation patch: platform-python-bytecompile.patch
  - Add platform python deps generator patch: platform-python-abi.patch
  - Add a platform-python subpackage and remove system python related declarations
  - Build rpm without platform_python for bytecompilation
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-29
changelog:
  - Track patches using https://pagure.io/rpm-fedora
  - Use file list to explicitly set mode for build-id dirs/files
    (#1452893, #1458839)


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-28
changelog:
  - Add debugedit-prefix.patch.
  - Add find-debuginfo-filter-built-ins.patch.
  - Add find-debuginfo-dwz-multi.patch.
  - Add find-debuginfo-and-macro-docs.patch.


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-25
changelog:
  - Add support for debugsource and debuginfo subpackages
    - find-debuginfo-untangle-unique-build-options.patch
    - debugsrc-and-sub-debuginfo-packages.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-19
changelog:
  - Minisymtab should only be added for executables or shared libraries.
  - Add find-debuginfo.sh -n (debugedit --no-recompute-build-id) option.


author: Panu Matilainen <pmatilai@redhat.com> - 4.13.0.1-17
changelog:
  - Work around missing python[23] during build dependency parse
  - Include ISA in the new python library version dependencies too


author: Mark Wielaard <mjw@redhat.com> - 4.13.0.1-13
changelog:
  - Add tests fix for sed file build-id regexp matching.
  - Add fix for build-ids in non-executable ELF files (#1433837).


author: Panu Matilainen <pmatilai@redhat.com> - 4.13.0-11
changelog:
  - Fix malformed packages being generated around 4GB boundary (#1405570)
  - Resurrect debuginfo GDB index generation (#1410907)


author: Thierry Vignaud <tvignaud@redhat.com> - 4.13.0-2
changelog:
  - Fix package name references in python sub-packages to match reality
  - Re-enable test-suite now that it works again


author: Igor Gnatenko <ignatenko@redhat.com> - 4.13.0-0.rc1.41
changelog:
  - Add %{?system_python_abi}
  - rpm-python -> python2-rpm && rpm-python3 -> python3-rpm with providing old names
  - Fixes and cleanups


author: Lubos Kardos <lkardos@redhat.com> 4.13.0-0.rc1.33
changelog:
  - Fix sigsegv in stringFormat() (#1316903)
  - Fix reading rpmtd behind its size in formatValue() (#1316896)


author: Lubos Kardos <lkardos@redhat.com> 4.13.0-0.rc1.31
changelog:
  - Enable --no-backup-if-mismatch by default in %patch macro (#884755)
  - Add %{_default_patch_flags} to %__patch which is used in %autosetup
  - Use fuzz settings for %autopatch/%autosetup


author: Florian Festi <ffesti@rpm.org> - 4.13.0-0.rc1.24
changelog:
  - Also block idle and sleep in the systemd-inhibit plugin (#1297984)
  - Add support for MIPS release 6
  - Add mips32 mips64 mipsel and mipseb macros (#1285116)


author: Lubos Kardos <lkardos@redhat.com> - 4.13.0-0.rc1.20
changelog:
  - Revert using %configure, it causes problems
  - Temporary set %_gnu macro explictly, just for one build (#1303265)


author: Lubos Kardos <lkardos@rpm.org> - 4.13.0-0.rc1.13
changelog:
  - Add possibility to disable file triggers
  - Fix unwanted multiple execution of filetriggers in dnf (#1282115)


author: Lubos Kardos <lkardos@redhat.com> - 4.13-0.rc1.7
changelog:
  - Fix reading a memory right after the end of an allocated area (#1260248)
  - Add support for various types of dependencies to rpmdeps tool (#1247092)
  - fix %autopatch when patch do not exist (#1244172)


author: Lubos Kardos <lkardos@redhat.com> - 4.13-0.rc1.6
changelog:
  - If %_wrong_version_format_terminate_build is 1 then terminate build in case
    that version format is wrong i. e. epoch is not unsigned integer or version
    contains more separators (":", "-"). %_wrong_version_format_terminate_build
    is 1 by deafault (#1265700)


author: Lubos Kardos <lkardos@redhat.com> - 4.12.90-5
changelog:
  - If globbing of a filename fails, try use the filename without globbing.
    (#1246743)
  - Modify rpmIsGlob() to be more precise and compatible with glob().
    (#1246743)


author: Lubos Kardos <lkardos@redhat.com> 4.12.0-11
changelog:
  - Pass _find_debuginfo_opts -g to eu-strip for executables (#1186563)
  - add_minidebug is not ran when strip_g is set (#1186563)


author: Lubos Kardos <lkardos@redhat.com> - 4.12.0.1-5
changelog:
  - Add check against malicious CPIO file name size (#1168715)
  - Fixes CVE-2014-8118
  - Fix race condidition where unchecked data is exposed in the file system
    (#1039811)
  - Fixes CVE-2013-6435


author: Panu Matilainen <pmatilai@redhat.com> - 4.12.0.1-3
changelog:
  - Skip ghost files in payload (#1156497)
  - Fix size and archice size tag generation on big-endian systems


author: Panu Matilainen <pmatilai@redhat.com> - 4.12.0.1-1
changelog:
  - Update to rpm-4.12.0.1 final (http://rpm.org/wiki/Releases/4.12.0.1)
  - Temporary workaround payload size mismatch issue in rpm2cpio (#1142949)


author: Panu Matilainen <pmatilai@redhat.com> - 4.12.0-0.beta1.1
changelog:
  - Update to 4.12.0-beta1 (http://rpm.org/wiki/Releases/4.12.0)
  - Fixes #1122004, #1111349, #1117912, #1123722
  - Drop upstreamed patches


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.90-0.git12844.1
changelog:
  - Update to rpm 4.12-alpha ((http://rpm.org/wiki/Releases/4.12.0)
  - Drop/adjust patches as appropriate
  - New sub-package(s) for plugins


author: Tom Callaway <spot@fedoraproject.org> - 4.11.2-10
changelog:
  - remove _isa from all BuildRequires (bz 554854)
    See: https://fedoraproject.org/wiki/Packaging:Guidelines#BuildRequires_and_.25.7B_isa.7D


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.2-6
changelog:
  - build with -fsanitize=address and -fsanitize=undefined for now
  - add spec build conditional for sanitizer build


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.2-3
changelog:
  - dont eat newlines on parametrized macro invocations (#1045723)
  - fully reset file actions between rpmtsRun() calls (#1076552)
  - fix build and sign module initialization in python3 (#1064758)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.2-0.rc1.1
changelog:
  - update to 4.11.2-rc1 (http://rpm.org/wiki/Releases/4.11.2)
  - drop upstreamed patches, adjust others as needed
  - handle python egg-info's version munging in file lists


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-11
changelog:
  - generate kmod(module.ko) provides for kernel (#1025513)
  - dont override CONFIG_SITE if already set (related to #962837)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-7
changelog:
  - fix build-time double-free on file capability processing (#956190)
  - fix relocation related regression on file sanity check (#1001553)
  - fix segfault on empty -p <lua> scriptlet body (#1004062)
  - fix source url, once again


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.0-0.beta1.2
changelog:
  - armv7hl and armv7hnl should not have -mthumb (#901901)
  - fix duplicate directory ownership between rpm and rpm-build (#894201)
  - fix regression on paths shared between a real file/dir and a ghost


author: Panu Matilainen <pmatilai@redhat.com> - 4.10.90-0.git11989.3
changelog:
  - package /usr/lib/rpm/macros.d directory (related to #846679)
  - fixup a bunch of old incorrect dates in spec changelog


author: Panu Matilainen <pmatilai@redhat.com> - 4.10.90-0.git11989.1
changelog:
  - update to 4.11 (http://rpm.org/wiki/Releases/4.11.0) post-alpha snapshot
  - drop/adjust patches as necessary


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11536.1
changelog:
  - newer git snapshot (#809402, #808750)
  - adjust posttrans script wrt bdb string change (#803866, #805613)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11519.1
changelog:
  - newer git snapshot to keep patch-count down
  - fixes CVE-2012-0060, CVE-2012-0061 and CVE-2012-0815
  - fix obsoletes in installing set getting matched on provides (#810077)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11505.5
changelog:
  - add temporary fake library provides to get around deltarpm "bootstrap"
    dependency (yes its dirty)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.1.2-13
changelog:
  - fix memory corruption on rpmdb size estimation (#766260)
  - fix couple of memleaks in python bindings (#782147)
  - fix regression in verify output formatting (#797964)
  - dont process spec include in false branch of if (#782970)
  - only warn on missing excluded files on build (#745629)
  - dont free up file info sets on test transactions


author: Kay Sievers <kay@redhat.com> - 4.9.1.2-8
changelog:
  - add temporary rpmlib patch to support filesystem transition
    https://fedoraproject.org/wiki/Features/UsrMove


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.1.2-3
changelog:
  - adjust db util prefix & dependency due to #749293
  - warn but dont fail the build if STABS encountered by debugedit (#725378)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-9
changelog:
  - fix crash if prep or changelog section in spec is empty (#706959)
  - fix crash on macro which undefines itself
  - fix script dependency generation with file 5.07 string changes (#712251)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-8
changelog:
  - add dwarf-4 support to debugedit (#707677)
  - generate build-id symlinks for all filenames sharing a build-id (#641377)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-5
changelog:
  - verify some properties of replaced and wrong-colored files (#528383)
  - only list packages that would be generated on spec query (#693338)
  - preferred color packages should be erased last (#680261)
  - fix leaks when freeing a populated transaction set
  - take file state into account for file dependencies


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.rc1.4
changelog:
  - spec cosmetics clean up extra whitespace + group more logically
  - wipe out BDB environment at boot via tmpfiles.d


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.rc1.1
changelog:
  - update to 4.9.0-rc1
  - drop upstream patches
  - nss packaging has changed, buildrequire nss-softokn-freebl-devel


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.5
changelog:
  - dont try to remove environment files if private env used (related to #671200)
  - unbreak mono dependency extraction (#673663)
  - complain instead of silent abort if cwd is not readable (#672576)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.3
changelog:
  - avoid division by zero in rpmdb size calculation (#671056)
  - fix secondary index iteration returing duplicate at end (#671149)
  - fix rebuilddb creating duplicate indexes for first header


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.1
changelog:
  - rpm 4.9.0-beta1 (http://rpm.org/wiki/Releases/4.9.0)
    - drop no longer needed patches
    - adjust requires + buildrequires to match current needs
    - adjust rpmdb index ghosts to match the new release
    - split librpmbuild and librpmsign to a separate rpm-build-libs package
    - split rpmsign to its own package to allow signing without all the build goo
    - build-conditionalize plugins, disabled for now
    - gstreamer and printer dependency generation moving out
    - handle .so symlink dependencies with fileattrs
    - use gnupg2 for signing as that's what typically installed by default


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-7
changelog:
  - bunch of spec tweaks, cleanups + corrections:
    - shorten rpm-build filelist a bit with glob use, reorder for saner grouping
    - missing isa in popt version dependency
    - only add rpmdb_foo symlinks for actually relevant db_* utils
    - drop no longer necessary file-devel dependency from rpm-devel
    - drop sqlite backend build-conditional
    - preliminaries for moving from db4 to libdb
  - use gnupg2 for signing as that's more likely to be installed by default


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-5
changelog:
  - create gdb index on debuginfo generation (#617166)
  - rpm-build now requires /usr/bin/gdb-add-index for consistent index creation
  - include COPYING in -apidocs for licensing guidelines compliance


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-2
changelog:
  - fix a potential getOutputFrom() error from font provide extraction
  - debug-friendlier message to aid finding other similar cases (#565223)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-1
changelog:
  - update to 4.8.1 (http://rpm.org/wiki/Releases/4.8.1)
  - drop no longer needed patches
  - fix source url pointing to testing directory


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-16
changelog:
  - adjust to new pkg-config behavior wrt private dependencies (#596433)
  - rpm-build now requires pkgconfig >= 0.24


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-15
changelog:
  - handle non-existent dependency sets correctly in python (#593553)
  - make find-lang look in all locale dirs (#584866)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-11
changelog:
  - support single PPD providing driver for devices (#568351)
  - merge the psdriver patch pile into one
  - preserve empty lines in spec prep section (#573339)
  - teach python bindings about RPMTRANS_FLAG_NOCONTEXTS (related to #573111)
  - dont own localized man directories through find_lang (#569536)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-8
changelog:
  - more fixes to postscript provides extractor (#562228)
  - avoid accessing unrelated mount points in disk space checking (#547548)
  - fix disk space checking with erasures present in transaction (#561160)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-3
changelog:
  - fix segfault on failed url retrieval
  - fix verification error code depending on verbosity level
  - if anything in testsuite fails, dump out the log


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.2
changelog:
  - fix noise from python bytecompile on non-python packages (#539635)
  - make all our -devel [build]requires isa-specific
  - trim out superfluous -devel dependencies from rpm-devel


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.1
changelog:
  - update to 4.8.0-beta1 (http://rpm.org/wiki/Releases/4.8.0)
  - rpm-build conflicts with current ocaml-runtime


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.2-2
changelog:
  - missing error exit code from signing password checking (#496754)
  - dont fail build on unrecognized data files (#532489)
  - dont try to parse subkeys and secret keys (#436812)
  - fix chmod test on selinux, breaking %{_fixperms} macro (#543035)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-8
changelog:
  - support multiple python implementations in brp-python-bytecompile (#531117)
  - make disk space problem reporting a bit saner (#517418)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-7
changelog:
  - fix build with BDB 4.8.x by removing XA "support" from BDB backend 
  - perl dep extractor heredoc parsing improvements (#524929)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-6
changelog:
  - use relative paths within db environment (related to #507309, #507309...)
  - remove db environment on close in chrooted operation (related to above)
  - initialize rpmlib earlier in rpm2cpio (#523260)
  - fix file dependency tag extension formatting (#523282)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-5
changelog:
  - fix duplicate dependency filtering on build (#490378)
  - permit absolute paths in file lists again (#521760)
  - use permissions 444 for all .debug files (#522194)
  - add support for optional bugurl tag (#512774)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-8
changelog:
  - updated OSGi dependency extractor (#506471)
  - fix segfault in symlink fingerprinting (#505777)
  - fix invalid memory access causing bogus file dependency errors (#506323)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-5
changelog:
  - don't mess up problem altNEVR in python ts.check() (#501068)
  - fix hardlink size calculation on build (#503020)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-4
changelog:
  - split cron-job into a sub-package to avoid silly deps on core rpm (#500722)
  - rpm requires coreutils but not in %post
  - build with libcap and libacl
  - fix pgp pubkey signature tag parsing


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-3
changelog:
  - couple of merge-review fixes (#226377)
    - eliminate bogus leftover rpm:rpm rpmdb ownership
    - unescaped macro in changelog
  - fix find-lang --with-kde with KDE3 (#466009)
  - switch back to default file digest algorithm


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-2
changelog:
  - file classification tweaks for text files (#494817)
    - disable libmagic text token checks, it's way too error-prone
    - consistently classify all text as such and include description


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-1
changelog:
  - update to 4.7.0 final (http://rpm.org/wiki/Releases/4.7.0)
  - fixes #494049, #495429
  - dont permit test-suite failure anymore


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-0.beta1.9
changelog:
  - fix recorded file state of otherwise skipped files (#492947)
  - compress ChangeLog, drop old CHANGES file (#492440)


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-7
changelog:
  - loosen up restrictions on dependency names (#455119)
  - handle inter-dependent pkg-config files for requires too (#473814)
  - error/warn on elf binaries in noarch package in build


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-5
changelog:
  - remove two offending hunks from anyarch patch causing that
    RPMTAG_BUILDARCHS isn't written to SRPMs


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-4
changelog:
  - inherit group tag from the main package (#470714)
  - ignore BuildArch tags for anyarch actions (#442105)
  - don't check package BuildRequires when doing --rmsource (#452477)
  - don't fail because of missing sources when only spec removal
    is requested (#472427)


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-1
changelog:
  - update to 4.6.0 final
  - revert libmagic looking into compressed files for now, breaks ooffice build


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.3
changelog:
  - extract mimehandler provides from .desktop files
  - preliminaries for extracting font provides (not enabled yet)
  - dont classify font metrics data as fonts
  - only run script dep extraction once per file, duh


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.2
changelog:
  - change platform sharedstatedir to something more sensible (#185862)
  - add rpmdb_foo links to db utils for documentation compatibility


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc2
  - fixes #471820, #473167, #469355, #468319, #472507, #247374, #426672, #444661
  - enable automatic generation of pkg-config and libtool dependencies #465377


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - Make noarch sub-packages actually work
  - Fix defaultdocdir logic in installplatform to avoid hardwiring mandir


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc1 
  - fixes #465586, #466597, #465409, #216221, #466503, #466009, #463447...
  - avoid using %configure macro for now, it has unwanted side-effects on rpm


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to official 4.5.90 alpha tarball 
  - a big pile of misc bugfixes + translation updates
  - isa-macro generation fix for ppc (#464754)
  - avoid pulling in pile of perl dependencies for an unused script
  - handle both "invalid argument" and clear env version mismatch on posttrans


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - add hack to support extracting gstreamer plugin provides (#438225)
  - fix another macro argument handling regression (#461180)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - create directory structure for rpmbuild prior to build if it doesn't exist (#455387)
  - create _topdir if it doesn't exist when installing SRPM
  - don't generate broken cpio in case of hardlink pointing on softlink,
    thanks to pixel@mandriva.com


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - fix parsing of boolean expressions in spec (#456103)
    (unbreaks pam, jpilot and maybe other builds)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - add support for noarch subpackages
  - fix segfault in case of insufficient disk space detected (#460146)


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8461.1
  - new snapshot from upstream
  - fixes #68290, #455972, #446202, #453364, #456708, #456103, #456321, #456913,
    - partial fix for #457360


author: Florian Festi <ffesti@redhat.com>
changelog:
  - 4.5.90-0.git8426.10
  - rpm-4.5.90-posttrans.patch
  - use header from rpmdb in posttrans to make anaconda happy


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8426.5
  - flip back to external bdb
  - fix tab vs spaces complaints from rpmlint
  - add dep for lzma and require unzip instead of zip in build (#310694)
  - add pkgconfig dependency to rpm-devel
  - drop ISA-dependencies for initial introduction
  - new snapshot from upstream for documentation fixes


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - rpm 4.5.90-0.git8424.1 (alpha snapshot)
  - adjust to build against Berkeley DB 4.5.20 from compat-db for now
  - add posttrans to clean up db environment mismatch after upgrade
  - forward-port devel autodeps patch


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - adjust for rpmdb index name change
  - drop unnecessary vendor-macro patch for real
  - add ISA-dependencies among rpm subpackages
  - make lzma and sqlite deps conditional and disabled by default for now


author: Ondřej Pohořelský <opohorel@redhat.com> - 1.11-17.20190603git
changelog:
  - update to the latest release
  - add sed require
  - remove %clean section
  - remove obsolete Group tag
  - fix upstream URL
  - Resolves: rhbz#1696449, rhbz#1703982


author: Marcela Mašláňová <mmaslano@redhat.com> 1.10-30
changelog:
  - 491793 thanks Andrew Hecox for patch which allows set allow/deny jobs
  - comment change "empty crontab"


author: Marcela Mašláňová <mmaslano@redhat.com> 1.10-26
changelog:
  - change /etc/crontab. All anacron jobs in cron.daily,weekly,...
   are check by anacron every hour. Anacron run them if they didn't
   run today.


author: Marcela Maslanova <mmaslano@redhat.com> 1.10-22
changelog:
  - remove scripts for delay, anacron now own most of the scripts. 
  Crontabs owns only run-parts, /etc/crontab and crontabs sysconfig.


author: Marcela Maslanova <mmaslano@redhat.com> 1.10-15
changelog:
  - corrected license tag in spec
  - add config file to crontab - delay of cron.{daily,...} could be
      switch off
  - Resolves: rhbz#253536


author: Erik Troan <ewt@redhat.com>
changelog:
  - moved crontab jobs up a bit to make sure they aren't confused by
    switching to and fro daylight savings time


author: Rinku Kothiya <rkothiya@redhat.com> - 6.0-38
changelog:
  - fixes bugs bz#1234220 bz#1286171 bz#1487177 bz#1524457 bz#1640573 
    bz#1663557 bz#1667954 bz#1683602 bz#1686897 bz#1721355 bz#1748865 bz#1750211 
    bz#1754391 bz#1759875 bz#1761531 bz#1761932 bz#1763124 bz#1763129 bz#1764091 
    bz#1775637 bz#1776901 bz#1781550 bz#1781649 bz#1781710 bz#1783232 bz#1784211 
    bz#1784415 bz#1786516 bz#1786681 bz#1787294 bz#1787310 bz#1787331 bz#1787994 
    bz#1790336 bz#1792873 bz#1794663 bz#1796814 bz#1804164 bz#1810924 bz#1815434 
    bz#1836099 bz#1837467 bz#1837926 bz#1838479 bz#1839137 bz#1844359


author: Rinku Kothiya <rkothiya@redhat.com> - 6.0-23
changelog:
  - fixes bugs bz#1344758 bz#1599802 bz#1685406 bz#1686800 bz#1724021 
    bz#1726058 bz#1727755 bz#1731513 bz#1741193 bz#1758923 bz#1761326 bz#1761486 
    bz#1762180 bz#1764095 bz#1766640


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-14
changelog:
  - fixes bugs bz#1719171 bz#1728673 bz#1731896 bz#1732443 bz#1733970 
    bz#1745107 bz#1746027 bz#1748688 bz#1750241 bz#1572163


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-12
changelog:
  - fixes bugs bz#1730914 bz#1731448 bz#1732770 bz#1732792 bz#1733531 
    bz#1734305 bz#1734534 bz#1734734 bz#1735514 bz#1737705 bz#1732774
    bz#1732793


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-8
changelog:
  - fixes bugs bz#1698435 bz#1712591 bz#1715447 bz#1720488 bz#1722209
    bz#1722512 bz#1724089 bz#1726991 bz#1727785 bz#1729108


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-7
changelog:
  - fixes bugs bz#1573077 bz#1600918 bz#1703423 bz#1704207 bz#1708064
    bz#1709301 bz#1713664 bz#1716760 bz#1717784 bz#1720163 bz#1720192
    bz#1720551 bz#1721351 bz#1721357 bz#1721477 bz#1722131 bz#1722331
    bz#1722509 bz#1722801 bz#1720248


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-6
changelog:
  - fixes bugs bz#1668001 bz#1708043 bz#1708183 bz#1710701 
    bz#1719640 bz#1720079 bz#1720248 bz#1720318 bz#1720461


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-5
changelog:
  - fixes bugs bz#1573077 bz#1694595 bz#1703434 bz#1714536 bz#1714588 
    bz#1715407 bz#1715438 bz#1705018


